// ---------------------------------------------------------------------------------------

/**
 * VMM Security
 * Öffentliche WordPress-User-Enumeration verhindern.
 */

// REST-API User-Enumeration sperren
add_filter('rest_pre_dispatch', function ($result, $server, $request) {

    if (
        !is_user_logged_in() &&
        preg_match('#^/wp/v2/users(?:/|$)#', $request->get_route())
    ) {
        return new WP_Error(
            'rest_forbidden',
            'Nicht erlaubt.',
            array('status' => 401)
        );
    }

    return $result;

}, PHP_INT_MAX, 3);


// User-Enumeration über ?author= verhindern
add_action('template_redirect', function () {

    if (
        !is_user_logged_in() &&
        isset($_GET['author']) &&
        ctype_digit((string) $_GET['author'])
    ) {
        status_header(404);
        nocache_headers();
        exit;
    }

}, 1);


// Native WordPress User-Sitemap entfernen
add_filter('wp_sitemaps_add_provider', function ($provider, $name) {

    if ('users' === $name) {
        return false;
    }

    return $provider;

}, 10, 2);


// Yoast SEO Autoren-Sitemap entfernen
add_filter('wpseo_sitemap_exclude_author', '__return_true');<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="https://eaf-nrw.de/wp-sitemap-index.xsl" ?>
<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><sitemap><loc>https://eaf-nrw.de/wp-sitemap-posts-post-1.xml</loc></sitemap><sitemap><loc>https://eaf-nrw.de/wp-sitemap-posts-page-1.xml</loc></sitemap><sitemap><loc>https://eaf-nrw.de/wp-sitemap-posts-events-1.xml</loc></sitemap><sitemap><loc>https://eaf-nrw.de/wp-sitemap-taxonomies-category-1.xml</loc></sitemap><sitemap><loc>https://eaf-nrw.de/wp-sitemap-taxonomies-post_format-1.xml</loc></sitemap><sitemap><loc>https://eaf-nrw.de/wp-sitemap-taxonomies-wpmf_tag-1.xml</loc></sitemap><sitemap><loc>https://eaf-nrw.de/wp-sitemap-taxonomies-venue-1.xml</loc></sitemap></sitemapindex>