In the first part of our snippet series, we focused on foundational security. If you have done your homework there, your WordPress installation is already more secure than the vast majority of websites on the internet.
But as an ambitious webmaster or server administrator, you want more. Every installed plugin costs performance, requires regular updates, and potentially introduces new security risks. Why use complex plugins for features that can be solved with a few elegant lines of code?
In this article, I will show you 6 advanced WordPress functions.php snippets that intervene deep within the system architecture. We will drastically reduce server load, optimize loading times (Core Web Vitals), and improve the user experience in the backend.
Note: Since these snippets make profound changes to your system, ideally test them in a staging environment first and always use a Child Theme or a code manager plugin.
1. Throttle the WordPress Heartbeat API
The WordPress Heartbeat API is responsible for features like automatically saving post drafts (auto-save) or locking articles when another author is working on them. To do this, your computer’s browser sends so-called AJAX requests to the server (admin-ajax.php) at regular intervals (often every 15 to 60 seconds).
If you have multiple WordPress backend tabs open, or if several users are working in the system simultaneously, this constant server communication can cause CPU usage to skyrocket. This is especially noticeable in virtualized hosting environments.
With this snippet, we throttle the heartbeat to a resource-friendly interval of 60 seconds:
// Throttle WordPress Heartbeat API interval
add_filter( 'heartbeat_settings', 'custom_heartbeat_rate' );
function custom_heartbeat_rate( $settings ) {
// Set interval to 60 seconds
$settings['interval'] = 60;
return $settings;
}This keeps the useful auto-save feature intact, but your web server (and your database) can finally breathe a sigh of relief.
2. Load JavaScript Asynchronously (Defer) for Better Load Times
One of the most common errors in Google PageSpeed Insights is the warning to “Eliminate render-blocking resources.” This happens when WordPress loads JavaScript files in the <head> of the page, forcing the browser to wait until these scripts are fully downloaded before displaying the website.
To solve this, the following script is one of the most important advanced WordPress functions.php snippets. It adds the defer attribute to your scripts. This means the browser downloads the scripts in the background while already rendering the page for the visitor.
// Load JavaScript files asynchronously with 'defer'
add_filter( 'script_loader_tag', 'defer_parsing_of_js', 10, 3 );
function defer_parsing_of_js( $tag, $handle, $src ) {
// Do not alter scripts in the admin area or the core jQuery file to prevent errors
if ( is_admin() || strpos( $handle, 'jquery' ) !== false ) {
return $tag;
}
// Add the defer attribute
return str_replace( ' src', ' defer="defer" src', $tag );
}Tip: We intentionally exclude the core jQuery library here, as many older themes or plugins might break otherwise.
3. Lock Non-Administrators Out of the Backend
If you allow user registrations on your website (e.g., for customers in a WooCommerce store or for subscribers), these users have access to their profile in the standard WordPress backend (wp-admin) by default.
However, for a professional user experience (and for security reasons), regular users have no business being in the backend. With this snippet, you instantly redirect any user who is not an administrator to the homepage when they try to access the dashboard.
// Redirect non-administrators to the homepage
add_action( 'admin_init', 'redirect_non_admin_users' );
function redirect_non_admin_users() {
// Check if the user is NOT an admin AND the request is NOT an AJAX call
if ( ! current_user_can( 'manage_options' ) && ( ! wp_doing_ajax() ) ) {
wp_redirect( home_url() );
exit;
}
}AJAX requests (wp_doing_ajax()) are explicitly allowed here, as many frontend plugins (like contact forms or shopping carts) absolutely rely on this interface to function.
4. Define a Maximum Image Upload Size (Save Storage Space)
Customers or editors often upload images directly from their smartphones or DSLR cameras—frequently with file sizes of 10 MB and resolutions of 6000×4000 pixels. This consumes massive amounts of storage space on the server and slows down the website.
While WordPress scales down huge images to 2560 pixels by default (since version 5.3), even that is still far too large for most websites. With this snippet, we override this threshold to a much more sensible 1920 pixels (Full HD).
// Limit maximum image resolution to 1920px
add_filter( 'big_image_size_threshold', 'custom_image_size_threshold' );
function custom_image_size_threshold( $threshold ) {
return 1920;
}Now, whenever an image wider or taller than 1920 pixels is uploaded, WordPress automatically scales it down. The original file (the massive storage hog) is immediately discarded, keeping your web hosting environment lean and fast.
5. Display Featured Images (Thumbnails) in the Post Overview
This is one of those advanced WordPress functions.php snippets that will massively improve your administrative workflow. By default, when you look at the post list (under Posts -> All Posts), you only see the title, author, categories, and date. If you work visually, the featured image is sorely missing.
With these two combined functions, we add a custom column to the backend that displays the respective thumbnail.
// 1. Add a new 'Featured Image' column to the post overview
add_filter('manage_posts_columns', 'add_thumbnail_column', 5);
function add_thumbnail_column($columns){
// Place the column near the beginning
$new_columns = array(
'cb' => $columns['cb'],
'new_post_thumb' => __('Image', 'textdomain'),
);
return array_merge($new_columns, $columns);
}
// 2. Populate the column with the respective image
add_action('manage_posts_custom_column', 'display_thumbnail_column', 5, 2);
function display_thumbnail_column($col, $id){
if($col === 'new_post_thumb'){
if( has_post_thumbnail() ) {
echo the_post_thumbnail( array(60, 60) ); // Size: 60x60 pixels
} else {
echo '-';
}
}
}This makes your backend much more organized, allowing you to instantly spot which articles are missing a featured image.
6. Integrate a Clean Maintenance Mode
Do you just need to quickly update a plugin or tweak the theme and don’t want visitors to see broken layouts during that time? Installing a dedicated maintenance plugin for a 2-minute job is total overkill.
This simple snippet puts your website into maintenance mode for all regular visitors and outputs a “503 Service Unavailable” status code (which is crucial for search engines so they know the site is only temporarily offline). You (as a logged-in administrator) can still view and edit the site normally.
// Activate Maintenance Mode (Visible only to Admins)
function custom_maintenance_mode() {
if ( !current_user_can('edit_themes') || !is_user_logged_in() ) {
wp_die(
'<h1>Maintenance Work</h1><p>We are currently updating our system. We will be back in a few minutes!</p>',
'Maintenance Mode',
array( 'response' => 503 )
);
}
}
// Remove the '//' before the next line to activate the mode:
// add_action('get_header', 'custom_maintenance_mode');How to use it: Copy the script into your functions.php. Whenever you need the maintenance mode, simply remove the two slashes // in the very last line and save the file. Once you are done, put the slashes back in.
Conclusion: Full Control Over Your Server Resources
By utilizing these advanced WordPress functions.php snippets, you take the helm. You no longer rely on bloated third-party plugins, but instead integrate essential features directly and safely into your system.
Especially in professional hosting environments, adjustments like limiting the Heartbeat API or automatically scaling images work absolute wonders for server performance and storage management.
Which of these snippets has helped you the most in your daily workflow?
