Disable XML-RPC

Description

Pretty simply, this plugin disables the XML-RPC API on a WordPress site running 3.5 or above.

Beginning in 3.5, XML-RPC is enabled by default. Additionally, the option to disable/enable XML-RPC was removed. For various reasons, site owners may wish to disable this functionality. This plugin provides an easy way to do so.

Installation

  1. Upload the disable-xml-rpc directory to the /wp-content/plugins/ directory in your WordPress installation
  2. Activez-la via le menu Extensions dans l’admin WordPress
  3. XML-RPC is now disabled!

To re-enable XML-RPC, just deactivate the plugin through the ‘Plugins’ menu.

FAQ

Is there an admin interface for this plugin?

No. This plugin is as simple as XML-RPC is off (plugin activated) or XML-RPC is on (plugin is deactivated).

How do I know if the plugin is working?

There are two easy methods for checking if XML-RPC is off:

  1. First, try using an XML-RPC client, like the official WordPress mobile apps. The WordPress mobile app should tell you that « XML-RPC services are disabled on this site » if the plugin is activated.
  2. Or you can try the XML-RPC Validator, written by Danilo Ercoli of the Automattic Mobile Team – the tool is available at http://xmlrpc.eritreo.it/ with a blog post about it at http://daniloercoli.com/2012/05/15/wordpress-xml-rpc-endpoint-validator/. Keep in mind that you want the validator to fail and tell you that XML-RPC services are disabled.
Something doesn’t seem to be working correctly

If the plugin is activated, but XML-RPC appears to still be working … OR … the plugin is deactivated, but XML-RPC is not working, then it’s possible that another plugin or theme function is affecting the xmlrpc_enabled filter. Additionally, server configurations could be blocking XML-RPC (i.e. blocking access to xmlrpc.php in the .htaccess file).

Avis

septembre 15, 2017
Thanks for this plugin. There's an instruction on FAQ on how to confirm if it's already working or not.
août 21, 2017
Thanks a lot! Saves me another premium security plugin. I wonder why this option is not build in jetpack or wordpress standard.
Lire les 19 avis

Contributeurs & développeurs

« Disable XML-RPC » est un logiciel libre. Les personnes suivantes ont contribué à cette extension.

Contributeurs

Traduisez « Disable XML-RPC » dans votre langue.

Le développement vous intéresse ?

Parcourir le code, consulter le SVN dépôt, ou s’inscrire au journal de développement par RSS.

Journal

1.0.1

  • Blank lines removed from the plugin file.

1.0

  • Initial release