Download the PHP package itinerisltd/itineris-disable-xml-rpc without Composer
On this page you can find all versions of the php package itinerisltd/itineris-disable-xml-rpc. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download itinerisltd/itineris-disable-xml-rpc
More information about itinerisltd/itineris-disable-xml-rpc
Files in itinerisltd/itineris-disable-xml-rpc
Package itineris-disable-xml-rpc
Short Description Disable WordPress XML-RPC via actions and filters.
License GPL-2.0-or-later
Homepage https://itinerisltd.github.io/itineris-disable-xml-rpc/
Informations about the package itineris-disable-xml-rpc
Itineris Disable XML-RPC
- Goal
- Why disable WordPress XML-RPC?
- How?
- Requirements
- Installation
- Alternative Installation
- Known Issues
- Incompatible Plugins
- FAQs
- Can I use this with Trellis?
- Will you add support for older PHP versions?
- It looks awesome. Where can I find some more goodies like this?
- This isn't on wp.org. Where can I give a ⭐️⭐️⭐️⭐️⭐️ review?
- Feedback
- Change Log
- Security
- Credits
- License
Goal
Disable WordPress XML-RPC (i.e: /wp/xmlrpc.php
) via actions and filters.
Especially for those who can't control their servers, for example: Kinsta, WP Engine or other managed hosting.
Why disable WordPress XML-RPC?
- Kinsta: What is WordPress XML-RPC and How To Stop an Attack
- WPMU DEV: XML-RPC and Why It’s Time to Remove it for WordPress Security
- Sucuri: New Brute Force Attacks Exploiting XMLRPC in WordPress
- Incapsula: WordPress Default Leaves Millions of Sites Exploitable for DDoS Attacks
- LittleBizzy: How (And Why) To Disable WordPress XML-RPC
How?
Using actions and filters:
Disable all XML-RPC methods which require authentication.
Note: The name is misleading!
Remove all built-in/third-party XML-RPC methods.
Limit the number of elements to parse in an XML-RPC response. Thus, make most XML-RPC requests fail.
Requirements
- WordPress 4.9.8 or later
- PHP 7.0 or later
Installation
Alternative Installation
Upload itineris-disable-xml-rpc.php to wp-content/plugins
.
Known Issues
Incompatible Plugins
Unfortunately, some plugins still relying WordPress XML-RPC:
FAQs
Can I use this with Trellis?
Yes, but you have a better choice - trellis-disable-xml-rpc
This plugin is for those who can't control their servers, for example: Kinsta, WP Engine or other managed hosting.
Will you add support for older PHP versions?
Never! This plugin will only works on actively supported PHP versions.
Don't use it on end of life or security fixes only PHP versions.
It looks awesome. Where can I find some more goodies like this?
- Articles on Itineris' blog
- More projects on Itineris' GitHub profile
- Follow @itineris_ltd and @TangRufus on Twitter
- Hire Itineris to build your next awesome site
This isn't on wp.org. Where can I give a ⭐️⭐️⭐️⭐️⭐️ review?
Thanks! Glad you like it. It's important to make my boss know somebody is using this project. Instead of giving reviews on wp.org, consider:
- tweet something good with mentioning @itineris_ltd
- star this Github repo
- watch this Github repo
- write blog posts
- submit pull requests
- hire Itineris
Feedback
Please provide feedback! We want to make this library useful in as many projects as possible. Please submit an issue and point out what you do and don't like, or fork the project and make suggestions. No issue is too small.
Change Log
Please see CHANGELOG for more information on what has changed recently.
Security
If you discover any security related issues, please email [email protected] instead of using the issue tracker.
Credits
Itineris Disable XML-RPC is a Itineris Limited project created by Tang Rufus.
Full list of contributors can be found here.
License
Itineris Disable XML-RPC is licensed under the GPLv2 (or later) from the Free Software Foundation. Please see License File for more information.