Skip to content Request a project consultation

1 minute security check · 006 WordPress taking over operate

They say they can fix it themselves, but they can't change a single line.

About 5 minutes to read BlueCanvas

What should I check if I take over the website but can't correct a single word?

You need to check the scope of the handover, not what it is made of. There are four factors: which menu to fix what (editing path), whether the screen opens with my account (permissions), whether to try it together when taking over (training), and who to ask when I get stuck (contact information). If you actually change one item before handing over, you will know immediately whether the handover is complete.

Key takeaways

  • The administration screen opens. however business hours one lineI don't know which menu it's on so I end up contacting the company again.
  • Even if you install only the core WordPress, there are 10 top menus and 44 submenus written in the core file. It's not that there's nothing to fix, it's that you don't know which door it is.no see.
  • The problem is not the tool name handover rangeno see. You'll know when you're done by actually fixing the one item you're replacing before handing over.

The screen opens but I can't find a place to fix it.

After hearing, “We’ll make it with WordPress, so you can fix it yourself,” I took over the website. I received an administrator account and can log in. However, when I try to change the business hours from “Daily 11:00 to 21:00,” I don’t know where the line is.

There are several candidates. It may be the theme settings in Appearance › Customize, the footer area in Appearance › Widgets, the block editor in Page › Home, or a separate settings screen created by a plugin. I open them one by one and eventually contact the company.

WordPress core management menu file (wp-admin/menu.php) I counted it myself.

divisioncountdetail
top menu10Dashboard · Post · Media · Page · Comment · Appearance · Plugin · User · Tool · Setting
Submenu written in core file44When you open one top menu, it splits again within it.

If a plug-in is added here, the screen will expand further. It is not possible to know how many additional screens the plugin actually creates unless you install it, so the number is not mentioned.

Screen files come from three places

I opened the site whose address remained in the review archive externally and divided the CSS and JS addresses of the 22 home screens that were determined to be WordPress into three branches.

  • core — /wp-includes/ · Files provided directly by WordPress
  • theme — /wp-content/themes/ · File that determines the appearance of the screen
  • plugin — /wp-content/plugins/ · Separate files for each function

The place where all three branches come from 14 placesIt was. If one screen is divided into three areas, the areas that need to be corrected also differ accordingly.

However, this value is Only the first screen HTML and response headers were read and split. This is not a value that confirms where you are actually editing on the administrator screen. I didn't submit a form to someone else's server, I didn't hit a login screen, and I didn't navigate the administrator path. Measured on September 2, 2026.

If no one is appointed to fix it, the versions will pile up.

If you are unable to correct a single letter, upgrading your core will be delayed further. I saw the core version in the same 22 places.

itemvalue
Where the version is displayed as is on the screen10 places
Versions marked as vulnerable by WordPress3 places
oldest versionJune 2016 release (about 10 years ago)

Vulnerability is determined directly from the official evaluation table distributed by WordPress. There could be more if you count where they hide the versions.

The problem is not the tool name but the takeover scope

WordPress isn't a bad tool. If handover is not possible, the same thing will happen no matter what tool you use. So, when signing a contract, look to see if the four things below are written instead of the tool name.

itemCheck
fix pathDo I receive a document explaining which menu to fix and what to fix?
authorityDoes that screen actually open with my account?
educationWhen you take over, do you want to try it together?
contactWho can I ask and when can I ask when I’m stuck?

Try correcting just one line today

The quickest way to know if the handover is complete is to try it yourself. business hours one lineThis is enough. Please try changing that one line directly at the handover and click Save to see if it is reflected on the screen.

If you can't fix it on the spot, the handover is not yet complete. In this case, rather than changing the tool, you just need to get the editing path and permissions again.

The administrator screen and conversations shown in the video in this article are reproductions and are not screens from a specific site. The name of the site being measured was not disclosed.

Full video subtitles (6 scenes)

They said they could fix it themselves, but they couldn't change a single line.

The problem is not the tool name, but the scope of the handover.

Where is the business hours line?

Theme settings, widgets, block editor, plugin settings screen. There are only four candidates.

Even if you just install the core, the menu is like this.

There are 10 top-level menus and 44 sub-menus written in the core file.

Screen files come from three places

There were 14 out of 22 places where all three categories – core, theme, and plugin – appeared.

The versions are also stacked as is.

Of the 10 versions revealed, 3 were marked as vulnerable.

Four things you need to receive when handing over

Correction path, permissions, training, and contact information. Please try to correct one line yourself before handing over.

Frequently Asked Questions

Can’t I make it with WordPress?

That's not what I meant. WordPress is a widely used tool, and if organized well, it is enough for the owner to modify it himself. What this article is talking about is not whether the tool is good or bad, but what you received with it when you handed it over. If you do not receive a modification path and permission, the same thing will happen no matter what tool you use. Conversely, if you've received those two, you can fix one line yourself, no matter what tool you use.

Can you open 22 places and say that editing is difficult?

I can't say. What we measured was where the files called by the first screen came from among core, theme, and plugins, and we did not check where they were actually edited on the administrator screen. I didn't even tap the login screen or navigate to the admin path. So, this value is for the context of “one screen being drawn in several places” and is not a value that measures the difficulty of editing. The actual editing path must be obtained from the person who created the site.

What form should I receive the correction path in?

A few sentences are enough. For example, you can ask them to write the path on a single line for each item that changes frequently, such as “Business hours: Appearance › Customize › Basic information › Business hours.” In most cases, there will be no more than ten items. It would be better if a captured image was attached here. If you look at the document at the handover and correct one item yourself, you can also check whether the document is correct.

The handover has already been completed. Can I still receive it now?

You can request it. Additional costs may apply after the contract ends, so it is more realistic to select only a few frequently changed items and ask for the route. What you need to check together is permission. If you only have editing permissions and not an administrator account, there are some screens that will not open. However, if you are stuck, it is better to designate a place to handle maintenance and repairs than to leave it as is. This is because if a site cannot be touched, the version will also stop.

Take a look at what your site looks like now

BlueCanvas has disclosed control items and response standards for externally checking operation and security status. I wrote down what was included and what was outside.

Take a look at website/server control
What happens to sites that haven't updated their PHP version for 3 years? We've compiled measurements of how versions stack up on untouchable sites. I pay a maintenance fee every month, but who fixes this? This is a method of confirming the scope of the contract by dividing discovery, notification, and recovery. Website/Server Control (SOC) We have written down the monitoring items and response standards for each grade, as well as what is not included.

Other short form insights

Visual AI 는 이야기를 먼저 정리한 뒤 AI 로 장면을 만듭니다 숏폼 영상 표지

Introduction to BlueCanvas tools

Visual AI 는 이야기를 먼저 정리한 뒤 AI 로 장면을 만듭니다

영상 한 편을 만든다면 어디서부터 시작해야 할까요? 더블루캔버스 Visual AI 는 장면보다 이야기를 먼저 정리하고, 인물 35명을 하나씩 준비한 뒤 하나의 브랜드 영상으로 합칩니다. 영상 속 예시 이미지는 고객 사례가 아닙니다.

Learn more →
Use ImgView to flip through photos in folders and compressed files without unpacking them. Short-form video cover

Introduction to BlueCanvas tools

Use ImgView to flip through photos in folders and compressed files without unzipping them.

Does the program you open to view a single photo have to be heavy? BlueCanvas ImgView lets you move through folders with the direction keys and view images in compressed files without unzipping them. It's free with no ads or embedded programs.

Learn more →
Divide one-time expenses and recurring expenses into one column Short-form video cover

1 minute of practical work from the boss

Divide one-time and recurring expenses into one column

If you set next month's budget as this month's total, even the items you bought will be budgeted again next month. I added a column to classify the items and organized the order in which I look at every other month.

Learn more →

See all short form insights→