[dD] WordPress Tweaks WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA
[dD] WordPress Tweaks - backend/performance/security switches for people who love to meddle. All off by default. Remnants of dahlskebank 2.7.4, anno 2016.
Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/dahlskebank/dd-wordpress-tweaks/archive/refs/heads/main.zipDaniel's backend, performance and security tweaks — the 2026 rebuild of the dahlskebank 2.7.4 theme tweak collection (2014–2016), audited snippet by snippet against WordPress 7.0.1 in July 2026.
Philosophy
- Nothing is active on plugin activation. Every tweak is opt-in under Settings → [dD] Tweaks.
- Backend, performance, security and cleanup only. Frontend belongs to the theme — the small "Frontend" section is the deliberate exception: pure filters/shortcodes that behave identically under any theme.
- One autoloaded option row (
dd_tweaks), zero framework dependencies, settings via the core Settings API. Helpersdd_tweaks_on()/dd_tweaks_get()replace the oldof_get_option()calls.
Audit map — where every kept snippet went
IDs refer to the dahlskebank 2.7.4 tweak audit (July 2026).
| Audit ID | 2016 feature | 2026 fate |
|---|---|---|
| A1 | is_login_page() helper |
Absorbed — core has is_login() since WP 6.1; no setting needed |
| A2 | Admin footer quote (left) | admin_footer_left — now returns into the filter instead of echoing |
| A3 | Admin footer dB/dD line (right) | admin_footer_right — white-label branches retired |
| A4 | Admin-bar Theme Options link | adminbar_settings_link — points at this plugin's page, current_user_can() gate |
| A5 + A7 | Developer RSS dashboard widget | dash_rss — dB-only, feed URL is a setting, widget-reordering hack dropped |
| A6 | Contact dashboard widget | dash_contact |
| A11 | Stay logged in 1 year | session_length — Remember-Me-only, 30/60/90 days |
| A13 | TinyMCE second toolbar row | editor_toolbar_expanded — Classic Editor only |
| A16 + A23 | Editor stylesheet + width cap | editor_width — via content_style (plugin-safe), width is a setting |
| A17 | JS imgDir constant |
Dissolved — plugin assets resolve via plugin_dir_url(); nothing to configure |
| A20–A22 | Menu delete buttons JS | menu_delete_buttons — jQuery 3-safe, delegates to core's own remove link |
| L1 | Login logo CSS | login_logo — bundled dahlskebank-login.png as default |
| L2 | "I'm afraid I can't do that." | login_error — message editable, HAL 9000 default preserved |
| L3 + L4 | Logo link + hover title | login_home_link — login_headertext (the 5.2+ filter) |
| L5 + L6 | Body class + login skin | login_skin — dahlskebank terminal skin only; nordic/zondo retired; prefixes dropped; WP 5.3 password-eye + 5.9 language switcher styled |
| P1 + P3 | RAMCAP: generator/shortlink/RSD | head_generator, head_shortlink, head_rsd — the wlwmanifest line is gone (core removed it in WP 6.3) |
| P5 | Feed links removal | head_feeds |
| P6 | Strip ?ver= from assets | head_ver_strings |
| P7 | Remove WP logo from admin bar | adminbar_remove_wplogo — no longer also removes "Visit Site" |
| P8 | Remove dashboard widgets | dash_remove_* — per-widget checkboxes, 2026 widget census (dashboard_plugins & dashboard_secondary were already dead) |
| P9 | Replace Howdy | replace_howdy |
| P10 | Stop 404 URL guessing | stop_guessing — core's own do_redirect_guess_404_permalink switch (WP 5.5) instead of the redirect_canonical sledgehammer |
| P11 | Logout → home | logout_home |
| P13 | No self-pings | no_self_pings |
| P15 | Hide Reveal IDs menu entry | Modernised into show_ids — native ID columns; retire the Reveal IDs plugin |
| P16 | Disable HTML in comments | sec_comment_html |
| P18 | Unregister default widgets | remove_default_widgets |
| T5 | Author pages → 404 | author_404 — capability check instead of is_super_admin() |
| V1 | Read-more excerpt link | read_more — verified: core still ships a bare "[…]" in WP 7.0 |
| H10 | Copyright footer | copyright_shortcode — [dd_copyright] + dd_copyright_footer(); the nested-function fatal fixed |
| B1–B18 | 2026 bonus list | All wanted items implemented (see settings); B16 (WooCommerce Blocks CSS) included as perf_wc_blocks — off by default like everything else |
Added after the audit (July 2026): the Purify WP Menus replacement trio
(purify_menu_classes / purify_menu_ids / purify_list_classes),
head_resource_hints, perf_heartbeat and disable_attachment_pages —
the latter three absorbed from the dahlskebank.com child-theme functions.php.
Plus quiet_update_emails, no_email_verify_nag, no_font_library
(originally missed from the bonus wants — caught in the v1.1.0 sweep).
Retired in v1.1.0 (kept commented-out in the features files for posterity):
editor_toolbar_expanded (the wordpress_adv_hidden key no longer exists in
WP 7 core), remove_default_widgets (classic-widgets era),
dash_contact (white-label leftover with no remaining purpose).
v1.1.0 UI: every setting is self-contained — inline explanation, "you lose" line, per-site-type safety chips (WooCommerce / blog / company site), and replaced-plugin credits with wp.org links. Preset buttons (Minimum ⊂ Recommended ⊂ The Dahl Way) tick boxes without saving.
Dropped picks (his call, July 2026): all E/F/M/H (theme bootstrap & template helpers — theme territory), white-label machinery (A8–A10, A14–A15, A18–A19), and every snippet the audit proved obsolete or now-in-core. The full audit report artifact has the details.
Plugins this replaces
Enable the matching toggle, then deactivate and delete:
| Plugin | Toggle |
|---|---|
| Disable Emojis (GDPR friendly) | Remove the emoji detection script (B2) |
| Disable Embeds | Disable oEmbed embeds |
| Reveal IDs | Show ID columns |
| Purify WordPress Menus | Purify nav menu classes + id removal + list-class toggles — inverted to a pattern strip so menu-item-emphasis, current-menu-*, menu-item-has-children and the drawer's scoped hot-class always survive |
WP Core Update Cleaner is stale (wp.org warning since ~2024) — re-evaluate
separately; this plugin does not cover its file-cleanup job.
Recommended plugins
The settings page renders the "Dahl standard stack" with live installed/active status — the 2026 heir of the theme's TGM list (13 of the 2016 entries survive; the dead ones are retired). Curation rule: general backend/security/speed/clean only. Per-site extras like Contact Form 7, EmbedPress, Lightbox with PhotoSwipe and Urvanov Syntax Highlighter are deliberately NOT on the standard list (content/design choices, not stack).
Distribution & updates
Home: https://github.com/dahlskebank/dd-wordpress-tweaks (public).
- Install on a new site: upload the latest release zip (or SFTP the folder into the plugins directory), activate. Nothing turns on by itself.
- Update every site from one place: the plugin embeds plugin-update-checker (MIT) pointed at this repo's Releases. Publishing a release makes every install show a normal WordPress update notice; the per-plugin "Enable auto-updates" link works as usual.
- Cutting a release: bump
Version:indd-wordpress-tweaks.php(andDD_TWEAKS_VERSION), commit, push, thengh release create vX.Y.Z --generate-notes. That's the whole pipeline.
Notes
- Not internationalised on purpose — personal plugin, English-only strings.
sec_xmlrpcoverlaps with AIOS's XML-RPC switch — configure it in ONE place.perf_jquery_migrate,perf_block_cssandperf_wc_blocks: test the site (especially cart/checkout) after enabling.- License: WTFPL (bundled plugin-update-checker is MIT).
Releases
2 releases.
These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.