Head & Footer Code vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Head & Footer Code plugin helps you add custom code snippets (JavaScript, CSS, or HTML) to the page even if you are not a programmer. It could be within the (site verification code for various services, custom styles, meta or Webfont link), right after opening (pixel tracking, analytics or heatmap code) or just before closing tag. Go to Tools → Head & Footer Code in WordPress Dashboard. Insert custom code to HEAD, BODY or FOOTER section (depending on what you have to do). All magic is done by hooking to WordPress hooks wp_head, wp_footer and wp_body_open. 💡 Trial Head & Footer Code plugin on a free dummy website before you add it on your project: Test It Now! Various code snippets are supported, including but not limited to: Google Analytics 4 Google Tag Manager Google Ads Conversion Lite Analytics Facebook/Meta Pixel Hotjar FullStory Google site verification Bing site verification Yandex site verification Alexa site verification Homepage in Blog Posts mode If your WordPress shows the latest blog posts on the homepage, you can also add specific code only for the homepage on Tools → Head & Footer Code (there will be section Head, body and footer code on Homepage in Blog Posts mode) Article specific code To insert custom code specific for individual article (post, page or custom post type), use article-specific Metabox while editing post/page/custom post type (check out Screenshots). There choose if that specific code appends to site-wide code defined on Tools → Head & Footer Code, or to replace it. Category specific code You can also define a Category specific code on each individual category. Other taxonomies (tag and custom taxonomy) do not have available their specific code, but for them a Global code is used instead. Video guide Do you need our support? If Head & Footer Code does not work on your project, please let us know by raising a new support ticket in the Community Forum and describe what does not works and how to reproduce the issue. We will make sure to resolve the issue as soon as possible. If you find Head & Footer Code useful for your project, please review plugin. Features Multisite and PHP 8.5 compatible! Set site-wide custom content for: head page section (before the ) body section (after the ) – Requires WordPress 5.2! footer page section (before the ) Homepage in Blog Posts mode: set homepage specific custom code for head, body and/or footer toggle homepage specific custom code on paged Homepage (page 2, 3, a nd so on) Set article specific custom code for: head page section (before the ) body section (after the ) – Requires WordPress 5.2! footer page section (before the ) Set category specific custom code for head, body and/or footer of the page Choose priority of printed custom code to head/body/footer sections (lower number mean far from and and closer to , higher number means closer to and and farther to ) Choose which post types will have enabled article specific head/body/footer fields Choose should article specific head/body/footer code be appended to site-wide code, or will replace site-wide code View on Posts/Pages/Custom Post Types listing if article has defined any article specific custom code Site-wide section is located under Tools > Head & Footer Code If you have set WP_DEBUG constant in wp-config.php to true, you’ll see site-wide and article specific entries in page source code wrapped to comments. [NEW] allow unprivileged user roles Editor and Author to manage article-specific code on single site and multisite (disabled by default) Data stored in database General settings (HEAD, BODY, FOOTER global code and priority, Homepage code and behaviour) saves in WordPress option auhfc_settings. Each post/page/custom post type specific HEAD, BODY and FOOTER code and behaviour saves to post meta _auhfc. Each category specific HEAD, BODY and FOOTER code and behaviour saves to taxonomy meta _auhfc. During the Uninstall process all these data has been deleted from the database. In case you wish to reinstall plugin, DO NOT UNINSTALL IT although Deactivate, then delete the directory /wp-content/plugins/head-footer-code and then reinstall plugin. Permissions on Multisite WordPress Access to Global: only Super Admin and Administrator Access to Article specific: Super Admin, Administrator; optional: Editor and Author Access to Category specific: only Super Admin and Administrator

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!