How to use PHP code to prevent malicious URL requests on a WordPress site

Learn how to protect WordPress sites from malicious URL requests. This article explains how to use a short code snippet to protect WordPress sites from malicious URL requests.

Protecting your WordPress site from malicious URL requests

Follow the steps below to edit your Theme setting file to protect WordPress site from malicious URL requests:

1. Log in to your WordPress site with an administrator account.
2. On the Dashboard in the left sidebar, click Appearance, and then click Theme Editor:

   

 

3. On the Theme Editor , select the Theme you want to edit from the dropdown:

   

 

4. The files for this selected theme are listed on the right column under Theme Files. Click on the file named “functions.php”:

   

 

5. Insert the following code to the end of functions.php file and click Update File Button to save the changes:

   global $user_ID; if($user_ID) {
   
       if(!current_user_can('administrator')) {
   
           if (strlen($_SERVER['REQUEST_URI']) > 255 ||
   
               stripos($_SERVER['REQUEST_URI'], "eval(") ||
   
               stripos($_SERVER['REQUEST_URI'], "CONCAT") ||
   
               stripos($_SERVER['REQUEST_URI'], "UNION+SELECT") ||
   
               stripos($_SERVER['REQUEST_URI'], "base64")) {
   
                   @header("HTTP/1.1 414 Request-URI Too Long");
   
                   @header("Status: 414 Request-URI Too Long");
   
                   @header("Connection: Close");
   
                   @exit;
   
           }
   
       }
   
   }