{"id":5184,"date":"2019-07-01T09:55:33","date_gmt":"2019-07-01T09:55:33","guid":{"rendered":"https:\/\/wpvivid.com\/?p=5184"},"modified":"2019-07-01T09:55:33","modified_gmt":"2019-07-01T09:55:33","slug":"disable-plugin-theme-editor-wordpress","status":"publish","type":"post","link":"https:\/\/wpvivid.com\/disable-plugin-theme-editor-wordpress.html","title":{"rendered":"How to Disable the Plugin And Theme Editor in WordPress"},"content":{"rendered":"

One of the first things we do when we set up a new website<\/a> for a client is to disable the plugin and theme editor<\/a>.<\/p>\n

Here at WPvivid, we love WordPress; it is a very rich and powerful content management system that can run any kind of website<\/a>.<\/p>\n

One great feature shipped with WordPress is the ability to edit the code of your plugins and themes within your dashboard<\/a>.<\/p>\n

When we need to make a quick styling change on a WordPress site, it is expedient just to open the plugin and theme editor and do what we need to do.<\/p>\n

That\u2019s awesome, right? \u00a0You do not need to login to your host<\/a>, or FTP your files<\/a>, edit them on your computer and then re-upload them.<\/p>\n

The question, however, is; How many website owners actually know there is a plugin and theme editor in their WordPress website?<\/p>\n

I am relatively certain unless the website owner is a developer or a zealous tech DIY enthusiast, the majority of website owners have no idea it even exists – \u00a0what would they do with it anyway?<\/p>\n

WordPress assumes that every WordPress website owner needs this feature, and further assumes that the people accessing this editor know what they are doing.<\/p>\n

I want to believe; it is the right assumption because it is a convenient way to modify code without switching platforms.<\/p>\n

However, every great tool is a weapon in the wrong hands.<\/p>\n

Let us assume someone unknowingly or knowingly accessed the theme editor and deleted your code, or decided to add malware into it if you did not have a backup of your website<\/a>\u00a0that would spell disaster.<\/p>\n

So, if someone does not know about the existence of the plugin and theme editor, or if they rarely use it, \u00a0for whatever reason, we think it is a good practice to disable the plugin and theme editor, which is why we do it in every WordPress website we build.<\/p>\n

So, how do we disable the plugin and theme editor?<\/p>\n

\n

Disable the Plugin And Theme Editor in WordPress Using A Plugin And Manually<\/h2>\n<\/blockquote>\n

Disable the plugin and theme editor using a security plugin<\/b><\/strong><\/h4>\n

If you have a phobia for code, the easiest way you can disable the plugin and theme editor is with a plugin.<\/p>\n

Most security plugins<\/a> have that feature since it is one of the things they do as they harden a WordPress website<\/a>.<\/p>\n

Usually, the initial setup implements security recommendations<\/a> disabling the plugin and theme editor, too; however, you can consult its documentation<\/a> to know where and how to do it.<\/p>\n

If you are using iThemes security, for instance, select the checkbox beside the File Editor.<\/p>\n

\"Ithemes<\/p>\n

Disable the plugin and theme editor by modifying the wp-config.php code<\/b><\/strong><\/h4>\n

You can also disable the plugin and theme editor by modifying your code<\/a>.<\/p>\n

First, you will need access to the host, particularly to the wp-config.php file.<\/p>\n

You can use FTP to access this file<\/a> or log in to your control panel.<\/p>\n

With cPanel, the file is in the public_html directory.<\/p>\n

Right-click the wp-config.php file, then click edit.<\/p>\n

\"wpconfig<\/p>\n

When the file opens in the editor, trace for the line;<\/p>\n

\/* That’s all, stop editing! Happy blogging. *\/<\/p>\n

Right below it paste the following line of code;<\/p>\n

define( 'DISALLOW_FILE_EDIT', true );<\/pre>\n
\"wpconfig<\/p>\n
It should now look like this, then click the Save changes button<\/a> on the top far right corner of the editor.<\/p>\n
\"wpconfig<\/p>\n
Editing your code is actually way more straightforward than installing and configuring a plugin.<\/p>\n
Beside, disabling the plugin will roll back the changes to the default state with the plugin and theme editor enabled<\/a>.<\/p>\n
\n
Final thoughts<\/h2>\n<\/blockquote>\n
As the most used content management system, WordPress websites are targets for hackers, do not, therefore, be casual about the security of your WordPress website<\/a>.<\/p>\n
If there is a successful security breach, your website will be at the mercy of the hacker, so, make an effort to do the simple things that ensure your sites\u2019s security.<\/p>\n
In this quick guide, we have shown you two ways you can disable the plugin and theme editor in your WordPress website.<\/p>\n