I am evaluating Civi currently using WAMPServer with Wordpress (which our website is built on). Civi creates a webpage as a front end for things like showing event information and registration etc.

While the idea is to have Civi as a plugin on the back end of our website and be therefore attached to it, we don't necessarily want any event information being displayed on the website. Rather, the CRM would just be used to manage and track that information and we would manage the registration etc. internally (At least for now).

My question then is; does the webpage content have to be visible to the end user or can it be hidden and Civi be used purely as a backend system? Subsequently, what are (if any) the security risks of having this auto-generated page dishing out potentially confidential information.

Total noob to Wordpress and Civi so apologies in advance.

1 Answer 1


I can't think of a down side to the CiviCRM "base page" existing on your WordPress install - other than that you can't use that page for public-facing content. Anyone visiting that page will see holding text, not CiviCRM content of any kind. Viewing CiviCRM content requires query strings to be appended to the "base page" URL plus the appropriate permissions.

  • > I can't think of a down side to the CiviCRM "base page" existing on your WordPress install. And certainly CiviCRM agrees because it advises not to delete the page. I know on their demo build for wordpress, that page had information about an event which included a list of attending participants. It's that sort of thing we're looking to avoid.
    – joxley
    Commented Nov 27, 2019 at 12:26
  • @joxley There will have been query strings appended to the "base page" URL for it to show CiviCRM content. This is the base page without any GET data: wpmaster.demo.civicrm.org/civicrm Commented Nov 27, 2019 at 14:09
  • Is there something in place to stop someone simply appending those queries to the URL in order to avoid that information being displayed? Would it check for a login token that has those permissions for example
    – joxley
    Commented Nov 27, 2019 at 14:46
  • 1
    @joxley You can configure permissions in CiviCRM by going to Administer --> Users and Permissions --> Permissions (Access Control). Then click "WordPress Access Control" and set appropriate permissions there. Commented Nov 27, 2019 at 17:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.