Hurrah. I've cleanly overridden a Wordpress function's operation by overriding its apply_filters() with my own. That took a bit of figuring out (quite a while ago since I've done similar things), but it's far more 'lightweight' than installing a 3rd-party plugin. So now for a comment it no longer shows the user's login but the 'display_name' instead. (I can (should?) probably do the same for posts as well. :)) #DIY #wordpress #security #nas