WP Author Slug

Description

This plugin replaces the author slug with a sanitized version of the user’s display name.

It will prevent hackers from finding out your login name through the author archive’s URL and works
towards your friendly URLs with using your display name.

Installation

  1. Download WP Author Slug.
  2. Unzip the folder into the /wp-content/plugins/ directory.
  3. Activate the plugin through the ‘Plugins’ menu in WordPress.

Reviews

July 6, 2021
This plugin would probably work OK if you have a small number of users (e.g. if your site doesn't allow public login). But if you have a large number of users (e.g. if you are running ecommerce or allow users to register for other reasons), this plugin will probably take down your site. The reason is that there are hooks that run when you activate or delete the plugin. It runs database fetch and update queries on every user in your database, all in-line on the request (rather than background via a cron). So if you have a thousand or more users it attempts to do a thousand or more database writes when you click Activate or Delete from the plugins list. This will likely grind your website to a halt. It would be better/useable if you could either choose to only apply these scripts to specific user types (e.g. Author) or if you could run the update in batches in the background.
August 11, 2017
Easy way to add some obscurity to login guessing. But please update as it's over 2 years now.
September 3, 2016
After discovering this WordPress security flaw, I found this plugin and it works a treat. Thanks Konstantin.
Read all 20 reviews

Contributors & Developers

“WP Author Slug” is open source software. The following people have contributed to this plugin.

Contributors

“WP Author Slug” has been translated into 1 locale. Thank you to the translators for their contributions.

Translate “WP Author Slug” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

3

  • Maintenance release.
  • Checks if keys and properties exist before using them.
  • Tested with WordPress 5.6.

2

  • Maintenance release.
  • Updated code to adhere to WordPress Coding Standards.
  • Tested with WordPress 5.0.

1.3.0

  • Maintenance release.
  • Tested with WordPress 4.0.

1.2.2

  • Updated utility class.
  • Tested with WordPress 3.4.1.

1.2.1

  • Updated uninstall.php and activation hook to use WordPress User API instead of custom queries.
  • Updated utility class.

1.2

  • Tested for WordPress 3.3.1.

1.1

  • Tested for WordPress 3.1.1.
  • Added complete uninstall routine.
  • Added compatibility for pre-3.1 multisite installs.

1.0

  • Initial Release.