RefiTune – Site refiner toolkit
Hungarian: Magyar nyelvű bővítmény leírás RefiTune – Site refiner toolkit is a modular Swiss Army knife for WordPress. Clean up unnecessary front-end code, harden login and uploads, tune Heartbeat and updates, or brand wp-login – each module is opt-in. Enable or disable features individually. A clea
Hungarian: Magyar nyelvű bővítmény leírás
RefiTune – Site refiner toolkit is a modular Swiss Army knife for WordPress. Clean up unnecessary front-end code, harden login and uploads, tune Heartbeat and updates, or brand wp-login – each module is opt-in.
Enable or disable features individually. A clean dashboard shows what is active. In-plugin Help pages document behaviour, trade-offs, and requirements.
What’s Inside? (37 Modules)
Performance: * Header Cleanup – Strip unnecessary wp_head output for leaner pages. * Feed Management – Control RSS/Atom feed link tags in the document head. * Disable Emoji – Remove WordPress emoji scripts and styles. * Disable jQuery Migrate – Drop legacy jquery-migrate when your stack does not need it. * Disable oEmbed – Stop automatic embeds from pasted YouTube, Vimeo, Twitter/X, and similar URLs. * Remove Asset Version Query Strings – Strip ?ver= from front-end CSS/JS (can break cache busting; prefer CDN purge or hashed filenames). Locked when WP_CACHE is true in wp-config.php . * Post Revisions Limit – Cap stored revisions per post. Locked when WP_POST_REVISIONS is defined in wp-config.php . * Auto-save Interval – Change how often the editor auto-saves. Locked when AUTOSAVE_INTERVAL is defined in wp-config.php . * Trash Auto-Delete – Set trash retention; expired items are removed in batches so large queues stay memory-safe. Locked when EMPTY_TRASH_DAYS is defined in wp-config.php . * Convert Uploads to WebP – Convert JPEG/PNG to WebP on upload, optional max size resize, then remove the original (GD or Imagick with WebP; uses unique filenames and refuses unsafe overwrites). * Heartbeat API Control – Tune or disable Heartbeat in admin, front end, and the post editor. * Resource Preload – Add early link rel="preload" hints for internal site assets by location (everywhere, front page, blog, or post ID), with as , type , crossorigin , and fetchpriority . Optional one-click import of active WordPress Font Library fonts (AJAX on demand).
Security: * Hide Generator Tags – Remove WordPress (and WooCommerce, when active) version meta tags. * Disable XML-RPC – Respond to XML-RPC with 404 and remove RSD discovery. * Disable Trackback/Pingback – Close pings and strip pingback methods/headers. * Disable File Editor – Set DISALLOW_FILE_EDIT so theme/plugin editors stay off. Locked in the UI when the constant is already defined in wp-config.php . * Automatic Updates Control – Tri-state plugin, theme, translation, and core updates; reschedule update checks. Respects AUTOMATIC_UPDATER_DISABLED (full lock) and WP_AUTO_UPDATE_CORE (core-only; plugins/themes/translations and update checks stay configurable). * Login Error Messages – Generic login errors to reduce username enumeration. * Restrict Admin Access – Choose which roles may open wp-admin UI. Users with manage_options always keep access. Front-end admin-ajax.php is intentionally not blocked. * REST API Restrictions – Limit selected core REST routes to users with manage_options . * Login Limit – Rate-limit failed logins by IP and IP+username pair ( REMOTE_ADDR only). Optional IP whitelist (one address per line). Covers wp-login.php and other wp_signon() paths (including WooCommerce). * Verified Upload – Block disguised uploads: double extensions, MIME/magic mismatches, and script markers.
