Welcome, visitor!

Web development

Posted by dpratt

Hide the API endpoint Proxy: wp-json in the wp_head and from the browsers inspact tool

Coding Tricks and Tips, Tips and Tricks, Web development, WordPress 0

Hide the API endpoint Proxy: wp-json in the wp_head and from the browsers inspect tool

I have searched and found that it is not possible to completely hide a link or any other HTML element from the browser’s inspect tool or any other developer tool. These tools are designed to allow developers to view the underlying code of a website, which includes all HTML elements.

However, you can make it harder for someone to find the link by obfuscating the code. One way to do this is to encode the link using base64 and then decode it using JavaScript on the client side. Here is an example of how to do this:

  1. Encode the link using base64. You can use an online tool such as https://www.base64encode.org/ to do this. The encoded link will look something like this:
				
					aHR0cHM6Ly9uYXRpb25hbHNodGMuY29tL3NodGMtYXBpLw==
  1. In your HTML code, replace the original link with the encoded link. It will look something like this:
				
					<link rel="https://api.w.org/" href="data:text/javascript;base64,aHR0cHM6Ly9uYXRpb25hbHNodGMuY29tL3NodGMtYXBpLw==">
  1. Add the following JavaScript code to your website:

This code will find the link element with the rel attribute set to https://api.w.org/ and decode the href attribute using the atob function.

Note that while this may make it harder for someone to find the link, it is not a foolproof method and someone with enough technical knowledge may still be able to find it.

WordPress users or developers using Rest API

I found a real and working method for this, to remove the link with rel="https://api.w.org/" href="https://siteurl.com/wp-json/" from the WordPress header, you can use the following hook in your theme’s functions.php file:

				
					function remove_api_link() {
    remove_action('wp_head', 'rest_output_link_wp_head');
    remove_action('wp_head', 'wp_oembed_add_discovery_links');
    remove_action('wp_head', 'wp_oembed_add_host_js');
}
add_action('after_setup_theme', 'remove_api_link');

This code uses the remove_action() function to remove the actions that add the link with rel="https://api.w.org/" href="https://siteurl.com/wp-json/" to the header of the page. Additionally, it also removes the actions that add oEmbed discovery links and host JS, which may also expose your website’s API endpoint.

The add_action() function is then used to add the remove_api_link() function to the after_setup_theme hook, which ensures that the function is called after the theme is set up and all the necessary files are loaded.

With these changes in place, the link rel="https://api.w.org/" href="https://siteurl.com/wp-json/" will be removed from the header of the page, and will not be visible in the HTML code of the page.

Note that this method removes the link tag from the HTML code of the page, which means that the link will not be accessible to anyone who views the source code of the page and I have tested it with the inspect tool. However, this method may not actually hide the link from anyone who is using developer tools or broken plugins, since those tools allow the user to view the generated HTML code of the page.

Posted by dpratt

Add Copyright © Year in the WordPress Footer with Automatic Updates

Coding Tricks and Tips, Visual Hook Guide, Web development 0

Do you want the text Copyright © Year ‘2020’ to be updated to the current year automatically in your WordPress footer? The best way to this is create a shortcode – without any plugins. With this I will also bring you a few bonus date formats like current date, current month and current day.

Step 1. Enable shortcodes in WordPress widgets

Place these few lines of code in your functions.php . If you do not have a child theme , you should get one first.

This will be overwritten next time you update your theme.

 //Allow shortcodes in widgets

				
					add_filter ('widget_text', 'do_shortcode');

Step 2. Create your shortcode for the current year (and current month, current date or current day)

Next step is to create one or more shortcodes that display today’s date. Copy the code below for the date formats you want to use and paste it in your  functions.php. You can place the code below the code you added in the previous step. Save.

				
					//Display current year
function year_shortcode () {
$year = date_i18n ('Y');
return $year;
}
add_shortcode ('year', 'year_shortcode');

You will use [ year ] to display the year

2024
				
					//Display current month
function monthyear_shortcode () {
$monthyear = date_i18n ('F');
return $monthyear;
}
add_shortcode ('monthyear', 'monthyear_shortcode');

You will use [ month ] to display the Month

 November
				
					//Display current date as YYYY-MM-DD
function yyyymmdd_shortcode () {
$yyyymmdd = date_i18n ('y-m-d'); return $yyyymmdd;
}
add_shortcode ('yyyymmdd', 'yyyymmdd_shortcode');

You will use [ yyyymmdd ] to display the Date by numbers

24-11-21
				
					//Display current month and year
function monthyear_shortcode () {
$monthyear = date_i18n ('F Y');
return $monthyear;
}
add_shortcode ('monthyear', 'monthyear_shortcode');

You will use [ year ] to display the date

November 2024
				
					//Display current day
function day_shortcode () {
$day = date_i18n ('l');
return $day;
}
add_shortcode ('day', ‘day_shortcode');

You will use [ day ] to display the day

Thursday

3. Add “Copyright © 2024 Company Name. All rights reserved.” in your footer

editing your footer should look something like this:
Copyright © 2024 Company Name. All rights reserved.
Posted by dpratt

Include or exclude any content from any page within your WordPress site.

Coding Tricks and Tips, Technology, Web development 0 
 <?php if ( is_cart() ) { 
                     echo "Content to display on a specific page; in this case it's the cart page";
                     }else{ 
                        echo "Content to exclude from a specific page; in this case it's the cart page";
                   }; ?>

Now to use this peace of code just change the 

( is_cart()

to the page you want it to work with for example:

( is_page()

the word page being object

Posted by dpratt

Changing Rest Api Prefix to help to secure your website

Coding Tricks and Tips, Mobile Development, Technology, Web development 0

WP URL for the endpoints contain the prefix as well as a namespace.  Here is an example endpoint

http://example.com/wp-json/wp/v2/posts/1

That will fetch the details of all posts. The above example, “wp-json” is the rest url prefix while the “wp/v2” is the namespace.

If you don’t like the default base prefix and want to change it from ‘wp-json’ to something more beautiful, the code below will help you. In the code below, I have changed the base prefix from ‘wp-json’ to ‘api’.

/**
 * Modify url base from wp-json to 'api'
 */
add_filter( 'rest_url_prefix', 'dp_api_slug');
 
function dp_api_slug( $slug ) {
 
    return 'api';
}

you can change the return ‘api’; to return ‘any-custom-prefix’;.

Once you put the above code in your theme’s functions.php or in a plugin, Please visit the Dashboard->Settings->Change your permalinks( You can restore it after saving again, we need to change it at least once to flush the rewrite rules ).

So your URL example will look like the following:

http://example.com/wp-json/wp/v2/posts