Descrición
Stops abuse of your site’s XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
This is more friendly than disabling totally XML-RPC, that it’s needed by some plugins and apps (I.e. Mobile apps or some Jetpack’s modules).
Features
Removes the following methods from XML-RPC interface.
- pingback.ping
- pingback.extensions.getPingbacks
- X-Pingback from HTTP headers. This will hopefully stops some bots from trying to hit your xmlrpc.php file.
Requirements
- WordPress 3.8.1 or higher.
Instalación
- Extract the zip file and just drop the contents in the
wp-content/plugins/directory of your WordPress installation (or install it directly from your dashboard) and then activate the plugin from Plugins page. - There’s not options page, simply install and activate.
Comentarios
3 de Outubro, 2020
This broke my site, I had to revert to a backup on the server after installing it.
20 de Xaneiro, 2017
Gran trabajo Samuel, en combinación con algunas reglas de htaccess hace un trabajo fantástico.
19 de Novembro, 2016
Thank you for this free and great plugin.
3 de Setembro, 2016
Does what it says and this is what needed for a XMLRPC attacks.
Thanks.
3 de Setembro, 2016
I'm confused here... I see this plugin I've never heard of and I never installed... and the bad thing is; I can't remove it!
If this is a security plugin it sure doesn't behave like it!
It's behaviour is a no-go for me.
Update: My hosting provider admittd they have installed this plugin. But they never notified me. So now I'm giving a 5 star rating.
Colaboradores e desenvolvedores
“Disable XML-RPC Pingback” é un software de código aberto. As seguintes persoas colaboraron con este plugin.
Colaboradores
“Disable XML-RPC Pingback” foron traducidas ao 11 locales. Grazas a os desenvolvedores polas súas colaboacións.
Traducir “Disable XML-RPC Pingback” ao teu idioma.
Interesado no desenvolvemento?
Revisa o código, bota unha ollada aorepositorio SVN, ou subscríbete ao log de desenvolvemento por RSS.
Rexistro de cambios
1.2.1
- Minor changes to make code 100% compliant with WordPress Coding Standards.
1.2
- Added support for X-Pingback header removal in recent versions of WP.
1.1
- Added code to remove X-Pingback from HTTP headers as suggested by user https://wordpress.org/support/topic/remove-x-pingback-http-header
1.0
- Initial release.