Title: Simple XML-RPC Pingback Disabler
Author: Vikash Chand
Published: <strong>19 mai 2020</strong>
Last modified: 15 mai 2021

---

Recherche d’extensions

![](https://ps.w.org/simple-xml-rpc-pingback-disabler/assets/banner-772x250.jpg?
rev=2307965)

Cette extension **n’a pas été testée avec plus de trois mises à jour majeures de
WordPress**. Elle peut ne plus être maintenue ou supportée et peut avoir des problèmes
de compatibilité lorsqu’elle est utilisée avec des versions de WordPress plus récentes.

![](https://ps.w.org/simple-xml-rpc-pingback-disabler/assets/icon-256x256.jpg?rev
=2307965)

# Simple XML-RPC Pingback Disabler

 Par [Vikash Chand](https://profiles.wordpress.org/vikichand/)

[Télécharger](https://downloads.wordpress.org/plugin/simple-xml-rpc-pingback-disabler.1.1.0.zip)

 * [Détails](https://fr.wordpress.org/plugins/simple-xml-rpc-pingback-disabler/#description)
 * [Avis](https://fr.wordpress.org/plugins/simple-xml-rpc-pingback-disabler/#reviews)
 *  [Installation](https://fr.wordpress.org/plugins/simple-xml-rpc-pingback-disabler/#installation)
 * [Développement](https://fr.wordpress.org/plugins/simple-xml-rpc-pingback-disabler/#developers)

 [Support](https://wordpress.org/support/plugin/simple-xml-rpc-pingback-disabler/)

## Description

#### What Is xmlrpc.php?

[XML-RPC](http://www.xmlrpc.com/) is a remote procedure call (RPC) protocol, a feature
included in WordPress, which enables data to be transmitted. It uses HTTP as the
transport mechanism, and XML to encode its calls.

Unless you use remote technologies and mobile applications to update your WordPress
site, you might not be familiar with XML-RPC. For the uninitiated, you can use xmlrpc.
php to establish a remote connection to WordPress, and make updates to your site
without directly logging in to your WordPress system.

XML-RPC is indeed useful for enabling remote connections between various external
applications and WordPress. On the other hand, disabling this feature can help improve
your site’s security.

#### Why You Should Disable xmlrpc.php?

The problem is that xmlrpc.php poses a security risk. It creates an additional access
point to your site, which could leave it vulnerable to external attacks. Every time
you authenticate XML-RPC, you need to supply your username and password. As you 
can imagine, this isn’t exactly ideal for security purposes.

For example, in order to prevent brute force attacks, you can limit login attempts
on your WordPress site. However, with XML-RPC enabled, that limit does not exist.
There’s no capping on login attempts, which means it’s only a matter of time before
a determined cybercriminal gains access.

By disabling the feature, you are closing a potential area of entry for hackers.

XML-RPC functionality is turned on by default since WordPress 3.5. This plugin simply
disables only the XML-RPC API Pingback Methods used by hackers on a WordPress site,
providing an easy and simple way to disable/enable XML-RPC API Pingback Methods 
without completely disabling the XML-RPC API, which is used by some plugins and 
applications (i.e. mobile apps or a few Jetpack modules).

#### Features

Removes the following methods from the XML-RPC API interface.

 * pingback.ping
 * pingback.extensions.getPingbacks
 * X-Pingback from HTTP headers

#### Requirements

 * WordPress 3.8.1 or higher.

## Installation

 1. Upload the simple-xml-rpc-disabler directory to the `/wp-content/plugins/` directory
    in your WordPress installation
 2. Activate the plugin through the ‘Plugins’ menu in WordPress
 3. XML-RPC Pingback Methods are now disabled!

To re-enable XML-RPC, just deactivate the plugin through the ‘Plugins’ menu in WordPress.

## FAQ

### Why this plugin?

This plugin disables **only** the XML-RPC API **Pingback Methods** that can be used
by hackers on a WordPress site, providing an easy and simple way to disable/enable
XML-RPC API Pingback Methods without completely disabling the XML-RPC API, which
is used by some plugins and applications (i.e. mobile apps or a few Jetpack modules).

### How to know if the plugin is working?

You can try the [XML-RPC Validator](http://xmlrpc.eritreo.it/), written by Danilo
Ercoli. Keep in mind that you want the validator to fail and tell you that XML-RPC
services are disabled.

### Plugin seems broken …

If the plugin is activated, but XML-RPC appears to still be enabled or if the plugin
is deactivated, but XML-RPC appears to still be disabled, then it’s possible that
another plugin or the theme functions is affecting the xmlrpc_enabled filter. Additionally,
server configurations could be blocking XML-RPC (i.e. blocking access to xmlrpc.
php with the .htaccess file).

    ```
    <Files xmlrpc.php>
    Order allow,deny
    Deny from all
    Allow from 123.123.123.123
    </Files>
    ```

### Will disabling XML-RPC affect SEO?

The XML-RPC API or xmlrpc.php for WordPress, has nothing to do with SEO.

## Avis

Il n’y a aucun avis pour cette extension.

## Contributeurs/contributrices & développeurs/développeuses

« Simple XML-RPC Pingback Disabler » est un logiciel libre. Les personnes suivantes
ont contribué à cette extension.

Contributeurs

 *   [ Vikash Chand ](https://profiles.wordpress.org/vikichand/)

“Simple XML-RPC Pingback Disabler” a été traduit dans 2 locales. Remerciez [l’équipe de traduction](https://translate.wordpress.org/projects/wp-plugins/simple-xml-rpc-pingback-disabler/contributors)
pour ses contributions.

[Traduisez « Simple XML-RPC Pingback Disabler » dans votre langue.](https://translate.wordpress.org/projects/wp-plugins/simple-xml-rpc-pingback-disabler)

### Le développement vous intéresse ?

[Parcourir le code](https://plugins.trac.wordpress.org/browser/simple-xml-rpc-pingback-disabler/),
consulter le [SVN dépôt](https://plugins.svn.wordpress.org/simple-xml-rpc-pingback-disabler/),
ou s’inscrire au [journal de développement](https://plugins.trac.wordpress.org/log/simple-xml-rpc-pingback-disabler/)
par [RSS](https://plugins.trac.wordpress.org/log/simple-xml-rpc-pingback-disabler/?limit=100&mode=stop_on_copy&format=rss).

## Journal des modifications

#### 1.0.0

 * Initial release

#### 1.1.0

 * Tested ready for WordPress 5.7.0+

## Méta

 *  Version **1.1.0**
 *  Dernière mise à jour **il y a 5 ans**
 *  Installations actives **10+**
 *  Version de WordPress ** 4.8 ou plus **
 *  Testé jusqu’à **5.7.20**
 *  Version de PHP ** 5.6 ou plus **
 *  Langues
 * [English (US)](https://wordpress.org/plugins/simple-xml-rpc-pingback-disabler/),
   [Spanish (Chile)](https://cl.wordpress.org/plugins/simple-xml-rpc-pingback-disabler/),
   et [Spanish (Spain)](https://es.wordpress.org/plugins/simple-xml-rpc-pingback-disabler/).
 *  [Traduisez la dans votre langue](https://translate.wordpress.org/projects/wp-plugins/simple-xml-rpc-pingback-disabler)
 * Étiquettes
 * [ddos](https://fr.wordpress.org/plugins/tags/ddos/)[rpc](https://fr.wordpress.org/plugins/tags/rpc/)
   [xml](https://fr.wordpress.org/plugins/tags/xml/)[xml-rpc](https://fr.wordpress.org/plugins/tags/xml-rpc/)
   [xmlrpc](https://fr.wordpress.org/plugins/tags/xmlrpc/)
 *  [Vue avancée](https://fr.wordpress.org/plugins/simple-xml-rpc-pingback-disabler/advanced/)

## Évaluations

Aucun avis n’a encore été envoyé.

[Votre avis](https://wordpress.org/support/plugin/simple-xml-rpc-pingback-disabler/reviews/#new-post)

[Tout voir](https://wordpress.org/support/plugin/simple-xml-rpc-pingback-disabler/reviews/)

## Contributeurs

 *   [ Vikash Chand ](https://profiles.wordpress.org/vikichand/)

## Support

Quelque chose à dire ? Besoin d’aide ?

 [Voir le forum de support](https://wordpress.org/support/plugin/simple-xml-rpc-pingback-disabler/)

## Faire un don

Souhaitez-vous soutenir l’avancement de cette extension ?

 [ Faire un don à cette extension ](http://vikash.ch/)