Hidding your website to worpdress plugin/theme makers using referrer:same-origin in wp-admin

[FallenAngel]

A small (not infallible) trick when using nulled plugins for WordPress is to ask the browser to send a no referer using the referrer policy in the Admin :

Referrer-Policy - HTTP | MDN

The HTTP Referrer-Policy response header controls how much referrer information (sent with the Referer header) should be included with requests. Aside from the HTTP header, you can set this policy in HTML.

developer.mozilla.org

You need to open /wp-admin/admin-header.php and add:

<meta name="referrer" content="same-origin">

wp_enqueue_style( 'colors' );
wp_enqueue_script( 'utils' );
wp_enqueue_script( 'svg-painter' );


$admin_body_class = preg_replace( '/[^a-z0-9_-]+/i', '-', $hook_suffix );
?>


<meta name="referrer" content="same-origin">

But, there is a better way: don't edit a file that WordPress upgrade may overwrite and you'll lose the change:

Open your theme folder /wp-content/themes/your-theme/functions.php and drop this function at the bottom of the file:

To view the content, you need to Sign In or Register.

This way:

https://example.com/wp-admin/some-plugin-setting-page.php

will send no referrer to https://plugins-url.ext when all those links to the developer show up on your screen (FAQ, ETC, ETC).


I hope this helps!
Cheers!