When you set up your WordPress in­stal­la­tion with our Click & Buil­dap­pli­ca­tions, we make some settings and add features to make creating your website easier and safer. For example, we disable the theme and plugin editors.

This allows you to re­ac­ti­vate the theme and plug-in editor af­ter­wards:

Enable theme and plugin editor in wp-config.php

Note

This cus­tomiza­tion requires a standard WordPress in­stal­la­tion and is Managed Word­Press­cur­rent­ly not supported in WordPress. If required, you can convert Managed Word­Pressto a standard in­stal­la­tion.

If you want to activate the theme and plugin editor, you need to make some minor changes to your wp-config.php file:

  • Log in to your webspace via SFTP and go to your WordPress website
  • Open the folder /path-to-my-wordpress-website/
     Con­nec­tion data for secure FTP at a glance.
  • Open the file wp-config.php on your computer with a text editor like Notepad++.
  • Search for this entry:
define('DISALLOW_FILE_EDIT', true);
  • Cange 'true' to 'false':
define('DISALLOW_FILE_EDIT', false);
  • Save the file and upload it again

The Theme Editor is now available under Design > Editor.

Image: WordPress theme and plug-in editor
WordPress theme and plug-in editor

Security risks with active editors

There is a risk if another person has gained access to the admin area of your WordPress in­stal­la­tion. If this happens and you have activated the editor, this person can change the code at will.

Then no FTP access or similar is required. In this case WordPress offers all necessary accesses to make changes to your site and abuse your data.

Web Hosting
Hosting that scales with your ambitions
  • Stay online with 99.99% uptime and robust security
  • Add per­for­mance with a click as traffic grows
  • Includes free domain, SSL, email, and 24/7 support

Theme or plugin updates and editor changes

A further risk is that it is very easy to make changes with the editor activated that are highly unlikely to work after an update of the theme or plugin.

In most cases the theme should be adapted and there are several ways to do this.

  • If it is only about CSS, you should use a plugin with a CSS editor (rec­om­men­da­tion: Simple Custom CSS), with which you can adjust the styling in­de­pen­dent­ly of the theme. In case of a theme update or theme change, your cus­tomized CSS will still be loaded.
  • Another pos­si­bil­i­ty is the creation of a child theme. However, this is more of an advanced method for over­writ­ing parts of a theme and can sometimes be tricky. But once you un­der­stand how it works, you can do great things with a child theme. Com­pre­hen­sive in­for­ma­tion about Child Themes can be found in the WordPress Codex
Go to Main Menu