• Resolved rishabhsingh12

    (@rishabhsingh12)


    Hi,
    I have enabled the feature to Completely block access to my XMLRPC file, from WP Security > Firewall.

    But still when I go to mywebsite.com/xmlrpc.php, I get this message:
    XML-RPC server accepts POST requests only.
    which means xmlrpc file is still accessible.

    How to fix this?

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, please check the following documentation

    https://mbrsolution.com/wordpress/aiowps-plugin-pingback-protection-settings.php

    Let me know if the above helps you.

    Thank you

    @mbrsolution maybe you can add this feature to plugin in xmlrpc options .htaccess file

    <Files xmlrpc.php>
    Order Deny,Allow
    Deny from all
    Allow from 192.0.64.0/18
    Satisfy All
    ErrorDocument 403 https://127.0.0.1/
    </Files>

    what it does is block every traffic except from jetpack servers.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    @kativiti, we already have something similar in place. Our plugin adds the following code to the .htaccess file.

    #AIOWPS_PINGBACK_HTACCESS_RULES_START
    <Files xmlrpc.php>
    order deny,allow
    deny from all
    </Files>
    #AIOWPS_PINGBACK_HTACCESS_RULES_END

    The above code is added when you activate Completely Block Access To XMLRPC:.

    When you enable Completely Block Access To XMLRPC: and you type the following yoursite.com/xmlrpc.php on the browser you should see the following message 403 forbidden apparently or something similar depending on how you have set up your website security.

    If you don’t see the above forbidden message and you see the following message XML-RPC server accepts POST requests only, that means the xmlrpc.php file is still active and working in your site. That means that for some unknown reason it did not write the correct rules in your .htaccess file. In some cases you might have a plugin, theme or your server that controls and writes to xmlrpc.php file.

    Kind regards

    • This reply was modified 3 years, 10 months ago by mbrsolution.
Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Disable XML-RPC feature not working.’ is closed to new replies.