Disable /wp-admin/plugin-install.php

There is a constant you can define in wp-config.php to do this.

It will also disable the theme edit, however.

<?php
// somewhere in wp-config.php

define('DISALLOW_FILE_MODS', true);

That will remove the plugin and theme file editor (which are a terrible idea anyway) and remove the ability to install plugins and themes from the admin area.

Related Posts:

  1. Adding a Taxonomy Filter to Admin List for a Custom Post Type?
  2. I found this in a plugin. What does it do? is it dangerous?
  3. How to Add a Third Level Sub Menu to the WordPress Admin Menu
  4. How to export comments in WordPress?
  5. How to eliminate weird 404 errors in wp-admin?
  6. How to stop showing admin notice after close button has been clicked
  7. Where are plugins located
  8. Admin menu as submenu from another plugin
  9. Is There a WordPress Hook to Filter the Edit Posts View?
  10. Why does WordPress require a ftp server to be running on the webserver to transfer plugins?
  11. Reordering themes in admin panel
  12. WordPress Admin is displaying Not Available
  13. Removing an admin page added by a 3rd party plugin. Gravity forms in this example
  14. Is there any record of installed plugins in the database?
  15. Add content to /wp-admin/plugin-install.php admin screens
  16. Best way to manage a lot of pages in Wp Admin [closed]
  17. Plugin: How to make links in admin page open up inside of the admin panel
  18. Custom admin column disappearing when using Quick Edit [duplicate]
  19. WordPress admin notice in plugin function
  20. Using tabs for wordpress plugin
  21. How to remove/hide action links cluttering under specific plugins’ names
  22. How do I add to the list table a filter?
  23. Getting Custom Post Type content from main-site of a Multisite
  24. Adding Visibility Options
  25. Plugin Development: WordPress processes twice on post update. How to skip process on the first?
  26. how to not show plugin in admin area
  27. “Are you sure you want to do this?” when deactivating all plugins in WordPress 4.3.1 [closed]
  28. How to make a WP admin button/menu similar to Jetpack Notifications?
  29. Getting “Fatal error: Call to undefined function wp_cache_get() in option.php” after updating a cache plugin [closed]
  30. How Restrict access to admin dashboard by specific static ip?
  31. Questions about brute force attacks on the admin username, coming from amazon IP addresses
  32. Why would WP-CLI and WP Admin show different list of plugins with updates?
  33. Edits to plugin not taking effect
  34. How could I execute my plugin just in frontend (not in backend)
  35. Can’t see login page after migration
  36. Custom height/width for thickbox in WP Backend
  37. Hide Theme options and Customize Admin menu
  38. Making menu link open in new tab?
  39. After activating a Plugin, /wp-admin is no longer accessible
  40. Weird problems after recovery from security breach
  41. How can I create a plugin installation link?
  42. Cannot access wp-admin after disabling all plugin
  43. Function to prevent users from trashing comments
  44. How to Sort the Favorite Plugins Screen Alphabetically?
  45. Hide extra menus from WordPress Dashboard
  46. How to provide a plugin which requires CMB2 (plugin dependencies)?
  47. ‘wp_login’ action hook not working with wp-login.php file
  48. 404 Error on Activate / Deactivate Plugin
  49. Why isn’t admin_notices displaying my text? [Simple Plugin, Beginner]
  50. Plugin upload to install
  51. WordPress takes too much time (100 seconds) to load – Front end and back end
  52. How to add php stylesheet to admin section instead of admin_head hook
  53. Getting 404 page not found error while trying to access add new plugin / themes
  54. getpost content with all formatting for admin pages
  55. Plugin (smart archives reloaded) crashed site / no access on admin panel
  56. Which filters or actions involve with index page for plugin?
  57. How to activate/deactivate menu tab and keep the same id?
  58. Making plugin to use different table prefix cause permission problem
  59. Add custom fields in the new and edit the site forms without touching the WP core
  60. Ajax in Plugins: returns the whole page
  61. Gutenberg: Dynamic Block – Show saved data in the editor
  62. Get post id in Post Page within Wp-admin
  63. AdBlock blocks my non-advertising sidebar images [closed]
  64. Combining JS files to one script
  65. How do I add custom fields to the “Edit page” admin screen?
  66. Screen Options drop-down does not show
  67. ERROR: Cookies are blocked due to unexpected output – no access to FTP
  68. Mixed content warning on doctype in admin
  69. Child Plugin Admin Panel
  70. Ajax in wordpress [duplicate]
  71. Notifications Bar on home page only
  72. List all posts in a particular page [closed]
  73. plugin translations not reflected in admin dashboard
  74. How to display content depending on the Woocommerce Product Category
  75. Allow direct access to files/folders within WordPress to replace wp-admin
  76. WordPress Plugin and other pages not opening
  77. The Admin page isn’t showing in the sidebar of the dashboard
  78. warning wp session
  79. WordPress website is redirecting on some different shopping page
  80. PHP FATAL ERROR
  81. Submitting form to admin-post.php WordPress
  82. /wp-admin/plugins.php takes ages to load, and then 404s
  83. Stop the user if login from the cookies
  84. Fatal Error in my WP “Call to undefined function get_option()”
  85. Secure way to add JS Script to WordPress filesystem
  86. Not applying update field (acf) in my plugin
  87. search by meta field in the regular WordPress admin panel search
  88. Force post update with React
  89. Form submission issue in wordpress admin (custom plugin) using $_GET for searching & filtering
  90. redirect logged users to custom front-end insetad of wp-admin
  91. What is the best way to ignore wordpress administration using add_filter($title) also when Ajax request
  92. How do I output translated text strings on edit screens
  93. 403 forbidden error in the admin panel as well as on the admin-ajax.php file
  94. Search result page admin panel – display values from the result’s metaboxes
  95. The sidebar in wp-admin dashboard disappears when viewed on mobile screens in WordPress
  96. Plugin for better Backend Search? [closed]
  97. media_sideload_image only works on localhost and without return id or src
  98. Show only those pages that are created by the specific logged in user in WordPress
  99. Prevent WordPress Link Editor from Automatically Adding “http://”
  100. Shipping Refund via Stripe Creates New Order Instead of Updating Original Order

Leave a Comment

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)