Blocks attackers from discovering usernames using ?author=1
add_action( 'init', 'wpf_block_user_enumeration' );
function wpf_block_user_enumeration() {
if ( isset( $_GET['author'] ) && ! is_admin() ) {
wp_redirect( home_url(), 301 );
exit;
}
}