luizbills / wp-tweaks

Several opinionated wordpress tweaks focused in :shield: security and :zap: performance.
https://wordpress.org/plugins/wp-tweaks/
GNU General Public License v3.0
31 stars 8 forks source link

Disable user enumeration in REST API #33

Closed luizbills closed 1 year ago

luizbills commented 1 year ago
add_filter( 'rest_endpoints', function( $endpoints ){
    if ( isset( $endpoints['/wp/v2/users'] ) ) {
        unset( $endpoints['/wp/v2/users'] );
    }
    if ( isset( $endpoints['/wp/v2/users/(?P<id>[\d]+)'] ) ) {
        unset( $endpoints['/wp/v2/users/(?P<id>[\d]+)'] );
    }
    return $endpoints;
});