stop XML-RPC Attacks

چۈشەندۈرۈش

Secure your site’s XML-RPC by removing some methods, instead of disabling totally XML-RPC, which is needed by some plugins (eg. Jetpack) and some mobile apps.

Features

Removes the following methods from XML-RPC interface.

  • system.multicall
  • system.listMethods
  • system.getCapabilities
  • pingback.extensions.getPingbacks
  • pingback.ping
  • X-Pingback from HTTP headers

This is not perfect, but it will help prerventing attacks

Requirements

  • WordPress 5.0 or higher.

ئورنىتىش

  • Extract the zip file and just drop the contents in the wp-content/plugins/ directory of your WordPress installation or install it directly from your dashboard and then activate the plugin from Plugins page.
  • There’s not options page, simply install and activate.

FAQ

Is there something to do after install?

Yes, just activate it!

I already have a security plugin, do I need this plugin too?

It depends on your security plugin. Some secure XML-RPC, some just allow you to enable or disable it, some can stop attacks as Stop XML-RPC Attacks does. So you may have to read your security plugin FAQ / doc.

باھالاشلار

2022-يىلى 21-فېۋرال
It works silently in the background. This is the only security plugin I use, since a W***fence update broke my site about a year back. Gives me a peace of mind.
2022-يىلى 7-يانۋار 1 reply
all good, thanks
4 باھالاشنىڭ ھەممىنى ئوقۇش

تۆھپىكار ۋە ئىجادكار

«stop XML-RPC Attacks» كودى ئوچۇق يۇمشاق دېتال. تۆۋەندىكى كىشىلەر بۇ قىستۇرمىغا تۆھپە قوشقان.

تۆھپىكار

«stop XML-RPC Attacks» 2 تىلغا تەرجىمە قىلىنغان. تەرجىمانلارنىڭ تۆھپىسى ئۈچۈن رەھمەت.

«stop XML-RPC Attacks» نى تىلىڭىزغا تەرجىمە قىلىڭ

ئىجادىيەتكە قىزىقامسىز؟

كودقا كۆز يۈگۈرتۈپ، SVN خەزىنە تەكشۈرۈپ ياكى RSSئارقىلىق ئىجادىيەت خاتىرىسىگە مۇشتەرى بولغىلى بولىدۇ.

ئۆزگىرىش خاتىرىسى

1.0

  • Initial release