xmlrpc “not found”

  • Resolved daverumney

    (@daverumney)


    2 years, 1 month ago

    Hi,

    I have a problem getting xmlrpc.php working on my site needed for the JetPack plug-in.

    So far I have done the following to try to resolve the problem without success:

    1. deactivated all my plugins
    2. changed my theme to another (WP 2023)
    3. cut-out everything in .htaccess except the rewrite (I think this is for SSL otherwise returns a forbidden error msg)
    4. calling xmlrpc.php still returns a 404 error
    5. Copying the file to xmlrpc1.php successfully returns “XML-RPC server accepts POST requests only.”
    6. My host provider has also installed a new version of WP to prove it works.

    Any other ideas to help diagnose/resolve this gratefully received.

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support Bruce (a11n)

    (@bruceallen)

    Happiness Engineer

    Hi @daverumney

    When we try to access the XMLRPC file, we get the following: 

    Testing: https://staging.chestermc.org/xmlrpc.php
HTTP/1.1 301 Moved Permanently
Date: Wed, 01 Feb 2023 16:05:24 GMT
Server: Apache
Location: https://staging.chestermc.org/xmlrpc.php
Content-Length: 248
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a >here</a>.</p>
</body></html>

    I’d suggest contacting your hosting provider and asking them to check their security logs for any blocked requests to the xmlrpc.php file on your site, using the Jetpack by WordPress.com user agent.

    You can also ask them to allow our IP addresses listed here:

    Thread Starter daverumney

    (@daverumney)

    Hi Bruce,

    according to my host provider, you are getting this message because you are trying to call http rather than https:

    Because there’s a forced HTTPs redirection active on staging.chestermc.org, you are receiving this error.

    They suggest trying it again calling https://staging.chestermc.org/xmlrpc.php

    They also added the IP’s to the white list, but I am still getting the responses described earlier.

    Thanks,

    Dave

    • This reply was modified 2 years, 1 month ago by daverumney.
    Plugin Support Bruce (a11n)

    (@bruceallen)

    Happiness Engineer

    Hi @daverumney

    When we go to https://staging.chestermc.org/xmlrpc.php it is a straight 404 error.

    When we test through terminal, we get:

    The server has responded with a 404 response code. The user will need to ensure
that the xmlrpc.php file exists in the root of their WordPress directory (where
the wp-content directory is located), and that their host isn't blocking access
to XMLRPC.
    Thread Starter daverumney

    (@daverumney)

    So, the same as what I get.

    Any ideas?

    Thread Starter daverumney

    (@daverumney)

    For anyone finding this in the future there is a recommended setting in cPanel WordPress Toolkit which blocks xmlrpc, but can be reverted – hard to spot in a long list of security settings.

    On further investigation, there seems to be plenty of other security advice out there to keep it blocked though.

    • This reply was modified 2 years, 1 month ago by daverumney.
    Plugin Support Bruce (a11n)

    (@bruceallen)

    Happiness Engineer

    Jetpack, like some other plugins, services, and apps, relies on the XMLRPC.php file to communicate with our systems.
    ?
    Your host should be able to protect your site’s XML-RPC file without having to allowlist specific IP ranges. Most hosts use tools like fail2ban or ModSecurity.

    On your side of things, you can use plugins like this one to disable access to one of the methods used by hackers:

    You can also use web application firewalls like Sucuri or Cloudflare to block hackers before they even reach your site.

    Finally, Jetpack itself includes a feature that will help against Brute Force attacks.
     
    If your hosting provider needs more details, or would like to talk about the different options, we’d be happy to help! They can contact us via this contact form:

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘xmlrpc “not found”’ is closed to new replies.