Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/itinerisltd/itineris-disable-xml-rpc
Disable WordPress XML-RPC via actions and filters
https://github.com/itinerisltd/itineris-disable-xml-rpc
security wordpress wordpress-plugin xml-rpc
Last synced: 1 day ago
JSON representation
Disable WordPress XML-RPC via actions and filters
- Host: GitHub
- URL: https://github.com/itinerisltd/itineris-disable-xml-rpc
- Owner: ItinerisLtd
- License: gpl-2.0
- Created: 2018-08-29T15:11:34.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2022-11-23T17:45:06.000Z (almost 2 years ago)
- Last Synced: 2024-11-11T11:53:38.889Z (7 days ago)
- Topics: security, wordpress, wordpress-plugin, xml-rpc
- Language: PHP
- Size: 15.6 KB
- Stars: 6
- Watchers: 13
- Forks: 2
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
# Itineris Disable XML-RPC
[](https://packagist.org/packages/itinerisltd/itineris-disable-xml-rpc)
[](https://packagist.org/packages/itinerisltd/itineris-disable-xml-rpc)
[](https://packagist.org/packages/itinerisltd/itineris-disable-xml-rpc)
[](https://github.com/ItinerisLtd/itineris-disable-xml-rpc/blob/master/LICENSE)
[](https://www.itineris.co.uk/contact/)
- [Goal](#goal)
- [Why disable WordPress XML-RPC?](#why-disable-wordpress-xml-rpc)
- [How?](#how)
- [Requirements](#requirements)
- [Installation](#installation)
- [Alternative Installation](#alternative-installation)
- [Known Issues](#known-issues)
- [Incompatible Plugins](#incompatible-plugins)
- [FAQs](#faqs)
- [Can I use this with Trellis?](#can-i-use-this-with-trellis)
- [Will you add support for older PHP versions?](#will-you-add-support-for-older-php-versions)
- [It looks awesome. Where can I find some more goodies like this?](#it-looks-awesome-where-can-i-find-some-more-goodies-like-this)
- [This isn't on wp.org. Where can I give a ⭐️⭐️⭐️⭐️⭐️ review?](#this-isnt-on-wporg-where-can-i-give-a-%EF%B8%8F%EF%B8%8F%EF%B8%8F%EF%B8%8F%EF%B8%8F-review)
- [Feedback](#feedback)
- [Change Log](#change-log)
- [Security](#security)
- [Credits](#credits)
- [License](#license)
## Goal
Disable [WordPress XML-RPC](https://codex.wordpress.org/XML-RPC_Support) (i.e: `/wp/xmlrpc.php`) via actions and filters.
Especially for those who can't control their servers, for example: [Kinsta](http://bit.ly/kinsta-com), [WP Engine](https://typist.tech/go/wp-engine) or other managed hosting.
## Why disable WordPress XML-RPC?
- [Kinsta: What is WordPress XML-RPC and How To Stop an Attack](http://bit.ly/kinsta-xml-rpc)
- [WPMU DEV: XML-RPC and Why It’s Time to Remove it for WordPress Security](http://bit.ly/2C8TYtt)
- [Sucuri: New Brute Force Attacks Exploiting XMLRPC in WordPress](http://bit.ly/2NwgQnX)
- [Incapsula: WordPress Default Leaves Millions of Sites Exploitable for DDoS Attacks](http://bit.ly/2wtbpP6)
- [LittleBizzy: How (And Why) To Disable WordPress XML-RPC](http://bit.ly/2LARmUr)
## How?
Using actions and filters:
- [xmlrpc_enabled](https://developer.wordpress.org/reference/hooks/xmlrpc_enabled/)
Disable all XML-RPC methods which require authentication.
Note: The name is [misleading](https://developer.wordpress.org/reference/hooks/xmlrpc_enabled/#description)!
- [xmlrpc_methods](https://developer.wordpress.org/reference/hooks/xmlrpc_methods/)
Remove all built-in/third-party XML-RPC methods.
- [xmlrpc_element_limit](https://developer.wordpress.org/reference/hooks/xmlrpc_element_limit/)
Limit the number of elements to parse in an XML-RPC response. Thus, make most XML-RPC requests fail.
## Requirements
- WordPress 4.9.8 or later
- PHP 7.0 or later
## Installation
```bash
$ composer require itinerisltd/itineris-disable-xml-rpc
```
### Alternative Installation
Upload [itineris-disable-xml-rpc.php](./itineris-disable-xml-rpc.php) to `wp-content/plugins`.
## Known Issues
### Incompatible Plugins
Unfortunately, some plugins still relying [WordPress XML-RPC](https://codex.wordpress.org/XML-RPC_Support):
- [Jetpack](https://jetpack.com/support/getting-started-with-jetpack/troubleshooting-tips/)
## FAQs
### Can I use this with Trellis?
Yes, but you have a better choice - [trellis-disable-xml-rpc](https://github.com/ItinerisLtd/trellis-disable-xml-rpc)
This plugin is for those who can't control their servers, for example: [Kinsta](http://bit.ly/kinsta-com), [WP Engine](https://typist.tech/go/wp-engine) or other managed hosting.
### Will you add support for older PHP versions?
Never! This plugin will only works on [actively supported PHP versions](https://secure.php.net/supported-versions.php).
Don't use it on **end of life** or **security fixes only** PHP versions.
### It looks awesome. Where can I find some more goodies like this?
- Articles on [Itineris' blog](https://www.itineris.co.uk/blog/)
- More projects on [Itineris' GitHub profile](https://github.com/itinerisltd)
- Follow [@itineris_ltd](https://twitter.com/itineris_ltd) and [@TangRufus](https://twitter.com/tangrufus) on Twitter
- Hire [Itineris](https://www.itineris.co.uk/services/) to build your next awesome site
### This isn't on wp.org. Where can I give a ⭐️⭐️⭐️⭐️⭐️ review?
Thanks! Glad you like it. It's important to make my boss know somebody is using this project. Instead of giving reviews on wp.org, consider:
- tweet something good with mentioning [@itineris_ltd](https://twitter.com/itineris_ltd)
- star this Github repo
- watch this Github repo
- write blog posts
- submit pull requests
- [hire Itineris](https://www.itineris.co.uk/services/)
## Feedback
**Please provide feedback!** We want to make this library useful in as many projects as possible.
Please submit an [issue](https://github.com/ItinerisLtd/itineris-disable-xml-rpc/issues/new) and point out what you do and don't like, or fork the project and make suggestions.
**No issue is too small.**
## Change Log
Please see [CHANGELOG](./CHANGELOG.md) for more information on what has changed recently.
## Security
If you discover any security related issues, please email [email protected] instead of using the issue tracker.
## Credits
[Itineris Disable XML-RPC](https://github.com/ItinerisLtd/itineris-disable-xml-rpc) is a [Itineris Limited](https://www.itineris.co.uk/) project created by [Tang Rufus](https://typist.tech).
Full list of contributors can be found [here](https://github.com/ItinerisLtd/itineris-disable-xml-rpc/graphs/contributors).
## License
[Itineris Disable XML-RPC](https://github.com/ItinerisLtd/itineris-disable-xml-rpc) is licensed under the GPLv2 (or later) from the [Free Software Foundation](http://www.fsf.org/).
Please see [License File](LICENSE) for more information.