devgeniem / wp-no-admin-ajax

A WordPress plugin that changes the WP AJAX routine and rewrites the ajax requests to custom url rather than admin-ajax.php back-end.

WP Plugin: No-Admin-Ajax

A WordPress plugin that changes the WP AJAX routine and rewrites the ajax requests to custom url rather than /wp-admin/admin-ajax.php back-end.

Install

Recommended installation to WP project is through composer:

$ composer require devgeniem/wp-no-admin-ajax

Use cases

• Rewrite all admin-ajax.php queries into custom url so you can allow /wp-admin/ to only certain IP-addresses.
• You can use this to confuse bots which might try to use vulnerabilities in admin-ajax.php.

Configuration

Variables

This plugin url is by default /no-admin-ajax/. You can use filters to change it or you can set the default value by yourself by using:

// This turns the no admin ajax url to -> /ajax/
define('WP_NO_ADMIN_AJAX_URL','ajax');

Notice: Value set here can be filtered too, this just sets the starting point for the custom url.

Notice 2: After plugin installation and other changes be sure to refresh your permalinks by just going to Settings > Permalinks > and saving it without any modification.

Hooks & Filters

You can customize the url by using filter no-admin-ajax/keyword.

<?php

// This changes /no-admin-ajax/ -> /ajax/
add_filter( 'no-admin-ajax/keyword', 'my_custom_no_admin_ajax_url' );
function my_custom_no_admin_ajax_url( $ajax_url ) {
    return "ajax";
}

You can run commands before ajax calls by using no-admin-ajax/before or no-admin-ajax/before/{action}

<?php
// Writes log entries after hearthbeat action for debugging
do_action( 'no-admin-ajax/before/heartbeat' , 'my_custom_no_admin_ajax_debug' );
function my_custom_no_admin_ajax_debug() {
    error_log( 'DEBUG | heartbeat action was run by: '.$_SERVER[“REMOTE_ADDR”] );
}

wp-no-admin-ajax's Issues

Installing wp-no-admin-ajax with composer (Issue/docs)

Currently i'm unable to make it to work within a project.

It doesn't seem to work.

Running composer require devgeniem/wp-no-admin-ajax installs just a empty folder 'vendor/devgeniem'. When downloading the plugin manually and dropping it in the 'vendor/devgeniem' folder still it doesn't seem to work in any way when it's included into a project.

Other information i'm including the package into a theme instead of a plugin not sure if this matters?

The plugin itself installed as a normal wp plugin is working fine.

Could you shed some light on what i'm missing when i want to include it in my project using composer?

Kr,
Patrick

Impossible hooking

Hooking init in after_setup_theme is not possible

wp-no-admin-ajax/plugin.php

Line 41 in ebee2d2

add_action( "init", array( $this, "rewrite" ) );

as init is an earlier hook.

Flush permalinks after activation?

Is it possible to flush the permalink settings after the mu-plugin is activated? @onnimonni stated that it could be done with the bedrock-autoloader.php.

Creates error because static variables are accessed like class variable

Initialisation should use self:: instead of $this->.