Skip to main content
How Can We Help?
< All Topics
Print

Tamper Protection

Posted
Updated
Byadmin

WARNING: After Tamper Protection is enabled, protected CMSSPM settings become read-only in the admin UI and can only be changed by editing wp-config.php directly. Enable this only after the protected settings have been reviewed and finalized.

WARNING: If PHP cannot write to wp-config.php, the constant must be added manually. Because this setting is file-controlled, rollback requires direct file access.

Description of the control

Use Tamper Protection to lock protected CMSSPM settings after setup. When enabled, the control adds define( 'CMSSPM_ANTITAMPER', true ); to wp-config.php, which causes protected settings to become read-only in the WordPress admin interface.

This control is managed in wp-config.php. After it is enabled, it can only be disabled by editing that file directly.

Procedure

  1. Open Posture Management.
  2. Select Settings.
  3. Locate the Tamper Protection card under Sensitive Control.
  4. Review the protected CMSSPM settings and confirm they are configured as intended before locking them.
  5. Enable Tamper Protection by turning the toggle on.
  6. Select Save Settings.
  7. If CMSSPM cannot write to wp-config.php, open that file manually.
  8. Add define( 'CMSSPM_ANTITAMPER', true ); above the “That’s all, stop editing!” line.
  9. Save the file and reload the CMSSPM admin page.

Validation

After saving, confirm that Tamper Protection is enabled and that protected CMSSPM settings appear read-only in the admin UI. Attempt to review a protected setting and verify that it can no longer be changed from the interface.

If file access is available, open wp-config.php and confirm that define( 'CMSSPM_ANTITAMPER', true ); is present. To disable the control later, edit wp-config.php directly and remove or change that constant, then reload the admin UI.

Table of Contents