Firstly, let’s take a look at what is WP Embeds then WP Emojis

WP Embeds:

It is responsible for converting links into embed frames like embed videos, images, tweets, audio, and other content into your WordPress site.

wp-embed.min.js does not relate to embedding oEmbed content from other providers: Vimeo, YouTube, etc. You can remove wp-embed.min.js and those embeds will continue to function.

wp-embed.min.js hides the blockquote and reveals the iframe. if removing the wp-embed.min.js script from your website using the below method then reload your page and you’ll notice that the blockquote is visible but the iframe is hidden.

In this article, we will disable wp-embed.min.js and wp-emoji-release.min.js with the code method, if you are not familiar with codes check with a developer first.

Disable wp-embed.min.js

We recommend doing it if you have a child theme.
at child theme > functions.php > add a code

function disable_embeds_code_init() {

 // Remove the REST API endpoint.
 remove_action( 'rest_api_init', 'wp_oembed_register_route' );

 // Turn off oEmbed auto discovery.
 add_filter( 'embed_oembed_discover', '__return_false' );

 // Don't filter oEmbed results.
 remove_filter( 'oembed_dataparse', 'wp_filter_oembed_result', 10 );

 // Remove oEmbed discovery links.
 remove_action( 'wp_head', 'wp_oembed_add_discovery_links' );

 // Remove oEmbed-specific JavaScript from the front-end and back-end.
 remove_action( 'wp_head', 'wp_oembed_add_host_js' );
 add_filter( 'tiny_mce_plugins', 'disable_embeds_tiny_mce_plugin' );

 // Remove all embeds rewrite rules.
 add_filter( 'rewrite_rules_array', 'disable_embeds_rewrites' );

 // Remove filter of the oEmbed result before any HTTP requests are made.
 remove_filter( 'pre_oembed_result', 'wp_filter_pre_oembed_result', 10 );
}

add_action( 'init', 'disable_embeds_code_init', 9999 );

function disable_embeds_tiny_mce_plugin($plugins) {
    return array_diff($plugins, array('wpembed'));
}

function disable_embeds_rewrites($rules) {
    foreach($rules as $rule => $rewrite) {
        if(false !== strpos($rewrite, 'embed=true')) {
            unset($rules[$rule]);
        }
    }
    return $rules;
}

WP Emojis

Emoji are the ideograms and smileys that are used in electronic messages and Web pages. It is unnecessary at all and adds additional load time.

Disable wp-emoji-release.min.js

at child theme > functions.php > add a code

function disable_emojis() {
 remove_action( 'wp_head', 'print_emoji_detection_script', 7 );
 remove_action( 'admin_print_scripts', 'print_emoji_detection_script' );
 remove_action( 'wp_print_styles', 'print_emoji_styles' );
 remove_action( 'admin_print_styles', 'print_emoji_styles' ); 
 remove_filter( 'the_content_feed', 'wp_staticize_emoji' );
 remove_filter( 'comment_text_rss', 'wp_staticize_emoji' ); 
 remove_filter( 'wp_mail', 'wp_staticize_emoji_for_email' );
 add_filter( 'tiny_mce_plugins', 'disable_emojis_tinymce' );
 add_filter( 'wp_resource_hints', 'disable_emojis_remove_dns_prefetch', 10, 2 );
}
add_action( 'init', 'disable_emojis' );

/**
 * Filter function used to remove the tinymce emoji plugin.
 * 
 * @param array $plugins 
 * @return array Difference betwen the two arrays
 */
function disable_emojis_tinymce( $plugins ) {
 if ( is_array( $plugins ) ) {
 return array_diff( $plugins, array( 'wpemoji' ) );
 } else {
 return array();
 }
}

/**
 * Remove emoji CDN hostname from DNS prefetching hints.
 *
 * @param array $urls URLs to print for resource hints.
 * @param string $relation_type The relation type the URLs are printed for.
 * @return array Difference betwen the two arrays.
 */
function disable_emojis_remove_dns_prefetch( $urls, $relation_type ) {
 if ( 'dns-prefetch' == $relation_type ) {
 /** This filter is documented in wp-includes/formatting.php */
 $emoji_svg_url = apply_filters( 'emoji_svg_url', 'https://s.w.org/images/core/emoji/2/svg/' );

$urls = array_diff( $urls, array( $emoji_svg_url ) );
 }

return $urls;
}

If you don’t use a child theme or you want to add it on another way you could add it via the Code Snippets plugin

They are just bots that are constantly looking for possible security flaws in as many indexed domains as possible in order to compromise the site. There are tools that can help you detect these requests and take action like Cloudflare.

Using Cloudflare firewall rules for securing your website is one of the best ways to monitor, control and block bots.
This way is aimed at webmasters who run websites on a Cloudflare-enabled domain. On the free plan, Cloudflare grants five firewall rules that are empty by default.

Cloudflare WAF Rules Tips for Securing WordPress

By adding the below specific rules you can secure WP and block attacks before they even reach your web host’s server.

At your Cloudflare account, from the left menu, go to Security > WAF

Click Create firewall rule

Block wlwmanifest.xml Attack

wlwmanifest.xml is used by Windows Live Writer.

To block wlwmanifest.xml, simply add:

• Field: URI Path
• Operator: contains
• Value: /wlwmanifest.xml

Choose an action: Block

Block xmlrpc.php Attack

You can also block xmlrpc.php one of the most common attacks in the same previous way you did for a wp-includes folder.

Block direct access to PHP files in the wp-content

Block bots hammering the wp-comments-post.php file directly

The rule is as follows:

• Field: URI Path
• Operator: equals
• Value: /wp-comments-post.php

[AND]

• Field: Request Method
• Operator: equals
• POST

[AND]

• Field: Referer
• Operator: does not contain
• Value: yoursite.com (replace with your real domain)

Admin Area

About the admin area, I prefer to use other solutions instead Cloudflare like changing the WordPress default URL of the admin login here an Essential Advice for Improve WordPress Security and Performance.
However, I blocked wp-login.php via Cloudflare except in my country because all admins log in from Jordan.
It’s up to you to do this and pick your country instead of mine.

Here are a few of the solutions you can try and implement for improving the security and performance of the WordPress site:

1- Choose a secure web hosting

The first and most important step if you have still not chosen web hosting yet is to choose a hosting environment that is absolutely secure. Choosing the right host will save a lot of time for you and also pick the right packages that work for your website.

Bluehost Recommended by WordPress

WordPress recommends several hosting providers to host your WordPress website.

One of these hosting providers that recommended by WordPress and we recommended too is Bluehost

Bluehost is very secure with good support through phone or chat.

And you can easily install WordPress to it and here is How to Create a WordPress Website with Bluehost, from choosing a WordPress package to picking a theme.

Important! at this article we provide some methods that require editing the source code of a WordPress which could break your website if not done correctly. If you are not comfortable with any of these methods requiring coding, please check with a developer first.

2- Change the WordPress default URL of the admin login

The default WordPress URL to login to the dashboard is (/wp-admin) or (/wp-login.php).

We suggest changing these default WordPress URLs for admin login by using this plugin WPS Hide Login.

When you define a new custom login URL to your website then the (wp-admin) directory and the (wp-login.php) page become inaccessible, so you must remember and save the new login URL that you defined.

Suggested Plugin: WPS Hide Login

https://wordpress.org/plugins/wps-hide-login/

After active it plugin go to Setting > General > WPS Hide Login: define new Login URL & Redirection URL.

Don’t forget if you’re using any caching plugin you should add the slug of the new login URL to the list of pages not to cache.

Important Note: If you are using another security plugin that may include the option (change the default admin login URL), so don’t use this plugin in this case to avoid any conflicts issues.

In general, don’t use different plugins that did the same job, especially those plugins for security or performance.

3- Disable XML-RPC

Simply without talking deeply technically, XMLRPC.php is a feature that allows for connection to WordPress remotely like to connect to a WordPress via a Smart Phone.

The big problem with XML-RPC function is that it has become a backdoor in WordPress for hackers, scripts, Brute Force Attacks, DDoS attacks or bots.

• Brute Force Attacks – Where an attacker can use xml-rpc to test hundreds of username and password combinations until they are eventually able to gain access to your site. This occurs because xml-rpc does not have the same login attempt limit that exists when you log into WordPress normally.
• DDoS Attack – Where an attacker can use xml-rpc to pingback thousands of IPs. This allows them to send a flood of data and traffic which can cause overages and even have networks paralyzed and shutdown.

To disable XML-RPC on your WordPress there are many plugins that do this for you and some of the general security plugins have an option to do that

Suggested plugin: Disable XML-RPC

https://wordpress.org/plugins/disable-xml-rpc/

Just activate this plugin and it will automatically disable XML-RPC.

or on .htaccess file.

 # Block WordPress xmlrpc.php requests
 <Files xmlrpc.php>
 order deny,allow
 deny from all
 allow from xxx.xxx.xxx.xxx
 </Files>

Replace xxx.xxx.xxx.xxx with an IP address you want to give access to xmlrpc.php or remove access completely by simply removing this line.

3- Disable WP-Cron (wp-cron.php) for Faster Performance

WP-Cron on WordPress is used to schedule a post to publish, check for updates, send email notifications, and more.

WP-Cron on WordPress It is similar to CRON jobs on the host cPanel which is used to schedule tasks at periodic fixed times, dates, or intervals.

It might be a good feature if you need to publish posts at specific dates later on, but the problem with this feature is it slows down the server and impact the performance especially if you run more than WordPress website on the same server or you have a huge web content with a list of tasks that need to be checked by WP-Cron whenever a page is visited which high the load on the server.

For me, I prefer to disable this feature to improve website performance even I have never used the schedule feature, and it is up to you to choose to keep it or disable it according to your needs.

To disable WP-Cron:

1- Go to (wp-config.php) file

2- Add:

define('DISABLE_WP_CRON', true);

Before “That’s all, stop editing! Happy blogging.”

Now wp-cron.php will not run automatically each time someone visits your website.

If you still need a scheduling feature after disabling wp-corn via the above way, you could use plugins like WP Crontrol, Advanced Cron Manager – Debug & Control, or just make your own search for the best choice from many plugins.

4- Avoid using a nulled WordPress theme

Nulled theme means a cracked version of a premium theme.

These nulled themes sometimes include malware or backdoors which provide a subsequent access point to your website for hackers.

You should also use any plugins for malware scanners to detect possible malicious code in nulled/free WordPress Themes before using it, malware scanner like:

Anti-Malware Security and Brute-Force Firewall

https://wordpress.org/plugins/gotmls/

if you are familiar with setup WordPress on localhost, it will be better to use this plugin to scan nulled/free themes locally before uploading it online and using it.

5-Disable Emojis in WordPress

Disabling WP Emojis is one of a lot of WordPress performance optimizations and tweaks you can do to improve your website loading time. Find here How to disable WP Emojis

6- Delete Unused Autoloaded Data in wp_options Table

Honestly, from all tips for improving WordPress performance on the internet that is the one that made a difference to me.

wp_options table stores some data that are no longer used that were left behind by deleted themes, and plugins.
Before deleting entries from the wp_options table, ensure to take a backup of your entire database. This step is critical as we are making mass deletions that can potentially break things on your site.

How to do it?

Go to phpMyAdmin > Select database (left side column) > click on SQL tap (at top) > Inside the text area, enter what wanted from the below queries > click Go

You can then select unwanted rows and click on “Delete.”

1. Check autoloaded data size

SELECT SUM(LENGTH(option_value)) as autoload_size FROM wp_options WHERE autoload='yes';

Anything above 1 MB is most likely slowing down your site.

2- Check Top 100 Autoloaded Items

SELECT option_name, length(option_value) AS option_value_length FROM wp_options WHERE autoload='yes' ORDER BY option_value_length DESC LIMIT 100;

Delete the ones you know aren’t being used anymore. 

3-Find Specific Autoloaded Data

SELECT *
FROM wp_options
WHERE autoload = 'yes'
AND option_name LIKE '%avada%'

This command is useful for targeting specific plugins or themes that you KNOW for certain you aren’t using any longer. In this example I have used the Avada theme before I deleted it, now I want to clean up remnants left from the old theme. Simply replace the string “avada” with anything else you like.

Other essential tips for WordPress security

here is a quick list to keep in mind to secure your WordPress:

– Strong Password

That’s very essential, make sure the password checker gives you high evaluation = Very Strong

– Keep WordPress installation up to date

Make sure you update WordPress continuously, they always solve bugs and security issues every update.

– Download plugins from known resources.

– Use SSL certificate

Read more about why you should move your website to HTTPS / SSL

– Backup WordPress Website

– Remove the inactive user’s accounts in WordPress

Creating a website for your small business or an eCommerce website is remarkably easy to set up WordPress on Bluehost. Everyone can start their website without any advanced technical skills in web development.

What is Bluehost?
Bluehost is a web hosting solutions company that offers plans to host WordPress websites with easy steps. Bluehost has been recommended by WordPress.

Also if you want high-performance hosting you may need to check Bluehost VPS Hosting

Before we start we should mention to you that guide is to set up WordPress with a Bluehost account, not to teach you how to create a theme of WordPress.

Install WordPress on Your Hosting Server for Beginners without any Tech Experience

Here are easy steps to take to get your WordPress website started with one of the Bluehost hosting packages.

1- Go to the Bluehost WordPress Hosting

Click here to go to the WordPress Packages page or image below

Or if you are already on the website, From the navigation menu: WordPress > WordPress Hosting

2- Choose WordPress Plan

Scroll down until see packages, we highly recommend choosing PLUS plan or above for best performance, storage, bandwidth and last thing it allows to you to create more than website in the same hosting ..as arrows in the below image .. then click Select (blue button)

3- Create Domain Name

The next step that will be shown after you click the Select button is to choose a domain name, you have three options: Create a new domain, use a domain you own and create a domain later.

4- Create an Account

Create your account and fill in your information to fields that appear.

Note: for a section of Package Extras: you can uncheck it all, all of it is not necessary.

Don’t forget to check (I have read and agree to Bluehost’s Auto Renewal Terms..etc) then click submit button

5- Complete Setup

You will receive an email that the order is complete with the receipt, and they will ask you to create a password for your account. After you create a password follow the on-screen instructions then you are ready for the final step of choosing your WordPress theme.

6- Choose a WordPress Theme

WordPress will be automatically installed for you. Pick any theme, If you aren’t sure which theme you want, you can go back and change it later.

7- Congrats, You are done

Now you are in a WordPress dashboard that allows you to customize your theme and create web pages. and take the benefits of WordPress CMS.

that’s all.

If you are not familiar with how to create and customize your theme and need help you can kindly contact us.

Facebook didn’t provide any specifics about the reason for the problem but an error message on Facebook’s webpage make experts believe the outage is related to issues with internet infrastructure, specifically DNS

What is DNS ?

DNS stands for ‘Domain Name System’.
DNS translates easy-to-remember domain names to numerical IP addresses.
In other meaning, DNS is a service that translates domains into IP addresses.

An IP address looks like 192.168.1.1

For example, when you type our domain name (https://saedx.com) into your browser, the internet service provider (ISP) views the DNS of our domain name and translates it into IP address then directs your internet connection to our server where we have stored the data files of our website, delivering up this set of stored files.
These stored files include all the content, HTML, images, CSS, videos, fonts, JavaScript files, and more which show up as a website.

Now back to the Facebook issue, for some unknown reason, Facebook’s DNS records, as well as BGP records, are gone from the internet. BGP (Border Gateway Protocol) is the system that figures out the best route for a packet to travel across the internet.

According to a Facebook company source to Reuters said that they believed that the outage was caused by an internal routing mistake to an internet domain that was compounded by the failures of internal communication tools and other resources that depend on that same domain in order to work.

before we get started with tools and tips to find the best domain name, here is some general information to know about the domain name:

What’s a domain name?

A domain name is the website name (ex our domain name: saedx.com) or in other meaning an address where Internet users can access the website.

Recommended Hosting

For hosting, we recommend Inmotion Hosting … Click here for WordPress Hosting packages or VPS Hosting

Why is the domain name is important for businesses?

For businesses, having a website with a special domain name that will use for email addresses will give the business a more professional look, protect trademarks, build creditability, help get verified on social media networks and increase brand awareness.

What is ICANN?

The Internet Corporation for Assigned Names and Numbers (ICANN), is a non-profit organization that was established in the US in 1998, that coordinates domain names and IP addresses for the internet.
When you register a domain name through a domain name registrar like (name.com, GoDaddy..etc), they pay a small fee to ICANN to register your domain as part of the domain registration process.

What is TLD (Top-level Domain)?

TLD refers to the last part of the domain name that follows immediately after the “dot” symbol.
Examples of some of the popular TLDs and their explanations:
.com – Commercial businesses
.org – Organizations (generally charitable)
.net – Network organizations

What is a nTLD?

In 2012, ICANN revealed its plans to create a program that would launch hundreds of new TLDs (nTLDs).
Today there are hundreds of new TLDs are available and there are good chances to find the perfect domain name.
Here are examples of new TLD which can reflect your personality, your profession, or anything else that describe you:
.marketing, .design, .news, .club, .space and more..

Click here to see all TLDs Prices

---

Tools for Picking the Perfect Domain Name

---

Name.com

The best one for me

Bulk domain search

Name.com has a good tool called Bulk domain search that allows you to enter multiple domain names separated by spaces or newlines then choose from their huge list of TLDs the chosen TLD that you want to check your keywords + TLDs if it’s available.

---

---

Namecheap

Low Prices, Easy Setup, Best Support. Choose Namecheap, and Get up to 98% Off! Get Access to Free Tools Designed Specially for You. Bring Your Idea to Life and Save Big. 24/7 Live Tech Support. Trusted With 15m+ Domains. 21+ Years Serving You.

---

---

BustAName

Word Combiner

http://www.bustaname.com/

BustAName is an online tool for word combine that checks available domains with several options like saving domains for review, creating groups of words to craft domain names and switch the word order to create new domains.
BustAName tool check a results for domain with only these extentions or TLDs: .com,.net, .org , .info & .biz

Domainr

Fast Search

https://domainr.com/

Domainr is one of the useful and fastest search way for available domains that allows you to explore available domain names without the need to click the search button to see results.
Domainr check results for domains with over 1,000 TLDs.

Lean Domain Search

Prefixes and Suffixes

https://leandomainsearch.com/

Lean Domain Search is a search engine for finding available domain names by a special feature of generating 5000 available prefixes and suffixes for the term of the domain you looking for that you typing in a search field. With an option of sorting and filtering search results to find a suitable domain name.

Domain Typer

Generates a Suggestions

https://domaintyper.com/

Domain Typer is a useful, fast and easy-to-use domain availability checking tool. It not only shows if a domain keyword entered is available but also generates a suggestions domain name combined with your keyword. Plus they have a good tool that searches on social networks if the username of your keyword is available on the popular social media platforms.

Name Mesh

Generates a Suggestions

https://www.namemesh.com/

Name Mesh using almost 10 generators with a lot of suggestions in separated types like short, mix, premium and SEO. With more the 200 suggestions they give you a long list to find a good domain that uses your keyword combined with others words.

Namechk 

Check Popular TLDs + Social Media Username

https://namechk.com/

Help your brand to find a username that is still available on the plurality social media platforms.