Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
VGSources
Blog

How to Disable the Theme and Plugin Editor in WordPress

Add one WordPress constant to remove the built-in Theme and Plugin File Editors. This guide shows the exact wp-config.php change, compares DISALLOW_FILE_EDIT with DISALLOW_FILE_MODS, and explains backups, verification, plugin compatibility, and security limits.
WorldWordPress Length8 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To remove WordPress’s built-in Theme File Editor and Plugin File Editor, define DISALLOW_FILE_EDIT as true in wp-config.php. Back up the site and that file first, add the constant in the normal constants area before the file’s closing comments, save it, and reload the dashboard. The editors should disappear while ordinary dashboard installation and update controls remain available.

If your policy also requires administrators to install and update plugins and themes outside WordPress, use DISALLOW_FILE_MODS instead. It disables the editors and blocks dashboard installation and update actions.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What the two WordPress constants do

WordPress normally lets administrators open PHP files from the dashboard and change them in real time. That convenience also creates a high-impact failure path: an accidental syntax error can take down a site, and a compromised privileged account could use the editors to alter executable code. The constants change that administrative surface without changing the files themselves.

Constant Dashboard effect Installation and update effect Use it when
DISALLOW_FILE_EDIT Disables the Theme File Editor and Plugin File Editor. Normal plugin and theme installation and update controls remain available. You want to remove direct dashboard PHP editing but still manage extensions from WordPress.
DISALLOW_FILE_MODS Disables both built-in editors. Blocks plugin and theme installation and updates in the admin area. Your operating policy requires all extension changes to happen through an external process.

The direct switch for hiding the two editors is therefore DISALLOW_FILE_EDIT. Choosing the broader constant is an operational decision, not merely a stronger version of the same setting: it removes the dashboard’s normal update and installation controls as well.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

Prepare safely before changing wp-config.php

Make two backups

Back up the site before editing, and keep a separate copy of the current wp-config.php. WordPress’s Editing Files guidance explicitly says to back up first. The configuration file contains PHP code, so preserving the original gives you a known-good recovery version if the edited file is malformed or saved in the wrong place.

Choose an access method

You can edit the file through your hosting file manager, an FTP client, SSH, or another text editor provided by your hosting workflow. Use an editor that saves plain text and does not silently add formatting, rich-text markup, or a second file extension.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Plan how extensions will be managed

Decide whether administrators still need the WordPress dashboard to install and update plugins and themes. If they do, use DISALLOW_FILE_EDIT. If all such work is performed through a deployment process or another external file-management route, DISALLOW_FILE_MODS may match the policy. Record that choice so a future administrator understands why dashboard controls are missing.

Step-by-step: hide the Theme and Plugin File Editors

  1. Back up the site and configuration file. Confirm that the backup can be retrieved before proceeding.
  2. Open wp-config.php. Use the hosting file manager, FTP, SSH, or your normal text editor. Work on the active WordPress installation’s configuration file, not a backup copy.
  3. Find the constants area. Add the definition before the file’s closing comments or alongside the other configuration constants. Keep it inside the PHP code and outside any comment block.
  4. Insert the exact definition:
    define( 'DISALLOW_FILE_EDIT', true );
  5. Save the file. Preserve the semicolon, parentheses, quotation marks, and spelling exactly. Do not add a second PHP opening tag if the file already begins with one.
  6. Reload the WordPress dashboard. Sign out and back in if the old menu remains visible because of a cached administrator page.

After the change is loaded, the Theme File Editor and Plugin File Editor should no longer be available in the dashboard. Existing plugin and theme files are not deleted or altered by this constant; the change removes the dashboard editing path.

Where to place the definition

The safest placement is in the normal constants section of wp-config.php, before the file’s closing comments. The line must be executed as PHP. If you paste it after a closing PHP tag, inside a comment, or into a file that is not the active configuration file, WordPress will not apply the setting.

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed

Keep the spelling and value case shown in the example. The value true enables the constant; changing it to false disables that protection. Define the constant only once. Multiple definitions make troubleshooting harder and can produce a warning or an unexpected effective value, depending on how the file is arranged.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Verify that the editor is disabled

Check the dashboard menus

Reload the administration area and look for the former Theme File Editor and Plugin File Editor screens. They should no longer be available. The exact menu location can vary with the active WordPress version, theme, and installed plugins, so verify the result by checking that the editor screens themselves cannot be opened rather than relying only on a menu label.

Confirm that normal extension controls still work

When you used DISALLOW_FILE_EDIT, the setting is working as intended if the editors are gone but administrators can still reach the ordinary plugin and theme installation and update controls. Do not use a test installation or a production update as the first verification if you have not confirmed your backup and change procedure; simply checking the available controls is sufficient.

Test with an appropriate account

WordPress’s default behavior gives administrators access to the editors. Check the account type that previously used them, while remembering that a missing menu can also be caused by a role-management plugin or another customization. The constant is a site-level configuration setting, not a replacement for reviewing user roles.

When DISALLOW_FILE_MODS is the better choice

Use the broader definition only when dashboard installation and updates are intentionally forbidden:

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
define( 'DISALLOW_FILE_MODS', true );

This setting disables the Plugin and Theme File Editors and blocks plugin and theme installation and updates in the admin area. It fits organizations that stage extension changes outside the dashboard and then deploy reviewed files through their hosting, FTP, SSH, or other release workflow.

Operational consequences

  • Administrators cannot rely on the dashboard to install a newly selected plugin or theme.
  • Routine extension updates must be performed by the external process your team has chosen.
  • A dashboard screen that normally offers an update or installation action may no longer provide that action, which is expected rather than a WordPress malfunction.
  • The built-in editors are disabled as part of the same policy.

If your team has no documented external update path, choose DISALLOW_FILE_EDIT instead. Removing dashboard updates without replacing them can leave extensions unmanaged.

Security benefit and its limits

WordPress documents DISALLOW_FILE_EDIT as equivalent to removing the edit_themes, edit_plugins, and edit_files capabilities. That reduces what a compromised privileged dashboard account can do through the built-in editors: the attacker or overzealous user no longer has that direct PHP-editing interface.

The constant is not a complete intrusion defense. It does not prevent a malicious file from being uploaded through another feature, and it does not block access through hosting tools, FTP, SSH, vulnerable plugins, or another server path. Protect those routes separately with sound account security, controlled access, updates, and a deployment process. Treat this setting as one hardening measure that narrows a specific dashboard path.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why disabling editing still matters

Removing the editor prevents a common class of accidents as well as one post-compromise action. A user can otherwise save a malformed PHP change directly from the dashboard and crash the site. With the editor unavailable, code changes must go through an external method where syntax checking, review, backups, and rollback can be applied.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

Plugin compatibility considerations

Some plugins check current_user_can('edit_plugins') to decide whether to show a feature or permit an operation. Because disabling the editor is equivalent to removing the related editing capabilities, those plugins may behave differently even when their feature is not itself a file editor.

If a plugin’s documentation says it requires edit_plugins, check its expected behavior before applying the constant to a busy site. Plugin authors are advised to detect the setting and present an appropriate message, but not every plugin will handle the change in the same way. A missing editor should not automatically be treated as a failed WordPress installation; first determine whether a plugin intentionally hides a dependent function.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshooting after the change

The editors are still visible

  • Confirm that the line is in the active wp-config.php, not a local copy or a similarly named file.
  • Check that it is outside comments and is executed as PHP.
  • Verify the spelling: DISALLOW_FILE_EDIT uses underscores and is singular in FILE_EDIT.
  • Make sure the value is true, not the text 'true' or false.
  • Reload the dashboard and, if necessary, sign out and back in to clear a stale administration page.
  • Check whether a role or menu-customization plugin is presenting a link that is not the core editor. The constant removes the built-in editing capability; it does not redesign every plugin’s interface.

The site shows a PHP error after saving

Restore the backed-up wp-config.php immediately or remove the new definition, then restore the file’s valid PHP syntax. Common causes include a missing semicolon, a misplaced quote, inserting the line inside a comment, or accidentally deleting an existing configuration line. Once the site loads again, repeat the edit in a plain-text editor and compare the changed file with the backup.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Plugin or theme installation stopped unexpectedly

Check which constant you used. DISALLOW_FILE_MODS intentionally blocks dashboard plugin and theme installation and updates. If administrators still need those controls, replace it with DISALLOW_FILE_EDIT, save the configuration, and reload the dashboard. If the broader policy is intentional, use the documented external workflow instead of attempting to restore dashboard buttons.

A plugin feature disappeared

Review whether the plugin relies on current_user_can('edit_plugins') or a related editing capability. If it does, the changed behavior may be a direct consequence of the hardening setting. Consult that plugin’s own guidance and decide whether its function can be moved to an external workflow or whether the site policy needs adjustment.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.

Changing or reversing the policy

Switching from the broad constant to editor-only protection

Back up the current configuration again, remove the DISALLOW_FILE_MODS definition, and add:

define( 'DISALLOW_FILE_EDIT', true );

Save, reload the dashboard, and verify that the editors remain unavailable while installation and update controls return.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Temporarily restoring the editors

Only an administrator who controls the configuration file should reverse the setting. Back up the current file, remove or disable the definition, save it, and reload the dashboard. Re-enable the constant as soon as the necessary controlled change is complete. Editing live PHP from the dashboard carries the same accident and compromise risks that prompted the policy.

Recommended rollout checklist

  • Confirm the goal: editor-only restriction or editor plus dashboard installation and update blocking.
  • Create a recoverable site backup and preserve the original wp-config.php.
  • Use a plain-text editor through the hosting file manager, FTP, SSH, or an equivalent controlled method.
  • Place one correctly spelled definition in the active file’s constants area before the closing comments.
  • Save valid PHP syntax and keep the backup until the change has been verified.
  • Reload the dashboard and confirm the expected editor and extension controls.
  • Tell administrators where plugin and theme changes must now be performed.
  • Watch for plugins that depend on the edit_plugins capability.
  • Remember that this setting limits dashboard editing, not uploads or other server access.

Which setting should you use?

For most sites whose immediate objective is simply to remove the Theme and Plugin File Editors, use DISALLOW_FILE_EDIT. It addresses the specific dashboard editing risk while preserving normal installation and update controls. Choose DISALLOW_FILE_MODS only when the site has an intentional, maintained process for installing and updating extensions outside the WordPress dashboard.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.