• Resolved George

    (@giorgos93)


    Hi, Hector!

    I noticed in my websites’ logs, that my antibot blocks requests from users to files, contained in /wp-json/wordpress-popular-posts/v2/views/ path. There are different numbers at the end of each request.

    Just wanted to ask, what are these requests for? They appear pretty rare in logs, so they are not called for each visitor.

Viewing 1 replies (of 1 total)
  • Plugin Author Hector Cabrera

    (@hcabrera)

    Hi @giorgos93,

    The /v2/views/ endpoints (there are two actually) are used by the plugin to update the views count of your posts and pages and to retrieve the views count of a particular post/page (you can find all the related source code here if you’re interested).

    If I had to guess chances are there’s at least one bad bot (or person?) trying to exploit any public REST API endpoints it (they) can find on your site to try and get/inject files from/to your server.

    In WPP’s case -as you can see in its source code- the /views/ endpoints don’t really mess around with the filesystem at all (no PHP includes, no file creation/read/delete operations, etc.) and so all these file requests won’t really do anything. At least not via WPP’s REST API endpoints that is.

    If you have any further comments/questions please feel free to let me know.

Viewing 1 replies (of 1 total)
  • The topic ‘/v2/views/ path’ is closed to new replies.