Username of wp access in the source

#65570
  • Resolved Eurolaw
    Rank Math free

    Hi,

    We use rankmath a lot and very nice product. We installed some web security and where always wondering how they know or main Username for our projects.

    By “mistake” we see that in the schema that is generated the username is there. Is there any way to hide this or change this?

Viewing 6 replies - 1 through 6 (of 6 total)
  • Hello,

    Thank you for contacting Rank Math and sorry for any inconvenience that might have been caused due to that.

    You can use the following to modify your front-end schema data:

    **
     * Filter to change the schema data.
     * Replace $schmea_type with schema name like article, review, etc.
     * @param array $entity Snippet Data
     * @return array
     */
    add_filter( "rank_math/snippet/rich_snippet_{$schema}_entity", function( $entity ) {
     return $entity;
    });

    We can try to modify the code to fit your exact requirements, please share the affected URL and a screenshot or the username(in the sensitive data section) that is showing so we can test from our end to help you.

    Looking forward to helping you. Thank you.

    ​​​​​​​

    Hi,

    I wanted to add that you can easily change the name if you don’t want to make it something obvious.

    You can make the change from WordPress Dashboard > Users > Your Profile.

    Hope that helps and please do not hesitate to let us know if you need our assistance with anything else.

    🙂 that is they idea 🙂

    Would mention this think lot of users don´t know. I was always wondering why some attacks know our strong username and never thought it was in the source.

    Cheers

    Alberto
    Rank Math business

    Hello,

    Another way attackers is by coding something that iterates through the following to find valid usernames… ie http://mydomain.com/?author=1

    This will help any hacker find valid usernames.

    It is usually recommended installing some protection plugin (like WordFence) to block listing the usernames with that method.

    Looking forward to help you.

    Yeah we have protection. Only i never understood why we get some attack with the correct UN (that is complex one) but found by mistake and never knew that the schema.org show the author name (and in that case it was the UN)

    But is fixed prendas.”,”datePublished”:”2020-05-17T08:56:04+02:00″,”dateModified”:”2020-06-14T12:44:24+02:00″,”publisher”:{“@type”:”Organization”,”name”:”123 Pagina”,”logo”:{“@type”:”ImageObject”,”url”:false}},”mainEntityOfPage”:{“@type”:”WebPage”,”@id”:”https:\/\/agnessunyer.es\/discurso-de-la-prenda\/”},”author”:{“@type”:”Person”,”name”:”Carmen”},”image”:{“@type”:”ImageO

    cheers and thanks

    Alberto
    Rank Math business

    Hello,

    We are super happy that this resolved your issue. If you have any other questions in the future, know that we are here to help you.

    If you don’t mind me asking, could you please leave us a review (if you haven’t already) on https://wordpress.org/support/plugin/seo-by-rank-math/reviews/#new-post about your overall experience with Rank Math? We appreciate your time and patience.

    If you do have another question in the future, please feel free to create a new forum topic, and it will be our pleasure to assist you again.

    Thank you.

Viewing 6 replies - 1 through 6 (of 6 total)

You must be logged in to reply to this ticket.