Disable XML-RPC feature not working.

Hi, please check the following documentation

https://mbrsolution.com/wordpress/aiowps-plugin-pingback-protection-settings.php

Let me know if the above helps you.

Thank you

@mbrsolution maybe you can add this feature to plugin in xmlrpc options .htaccess file

<Files xmlrpc.php>
Order Deny,Allow
Deny from all
Allow from 192.0.64.0/18
Satisfy All
ErrorDocument 403 https://127.0.0.1/
</Files>

what it does is block every traffic except from jetpack servers.

@kativiti, we already have something similar in place. Our plugin adds the following code to the .htaccess file.

#AIOWPS_PINGBACK_HTACCESS_RULES_START
<Files xmlrpc.php>
order deny,allow
deny from all
</Files>
#AIOWPS_PINGBACK_HTACCESS_RULES_END

The above code is added when you activate Completely Block Access To XMLRPC:.

When you enable Completely Block Access To XMLRPC: and you type the following yoursite.com/xmlrpc.php on the browser you should see the following message 403 forbidden apparently or something similar depending on how you have set up your website security.

If you don’t see the above forbidden message and you see the following message XML-RPC server accepts POST requests only, that means the xmlrpc.php file is still active and working in your site. That means that for some unknown reason it did not write the correct rules in your .htaccess file. In some cases you might have a plugin, theme or your server that controls and writes to xmlrpc.php file.

Kind regards

• This reply was modified 3 years, 10 months ago by mbrsolution.