In WordPress the XML-RPC protocol is used to add additional functionality to WordPress.

Starting with WordPress 3.5 you can't disable xmlrpc.php requests by default.

Should I leave WordPress XML-RPC alone?

Most WordPress users don't need the XML-RPC functionality for their site. If you've been getting a lot of POST attempts to the WordPress xmlrpc.php file it's generally best to restrict access to this file to only certains services that might need it.

These services include the WordPress mobile app as well as Blogger.

Limit access to WordPres xmlrpc.php with .htaccess

You can easily limit access to your WordPress xmlrpc.php file with these .htaccess rules:

# Block WordPress xmlrpc.php requests
<Files xmlrpc.php>
order deny,allow
deny from all
allow from 123.123.123.123
</Files>

If you wanted to outright block all access to the xmlrpc.php script, just don't add the allow line above with the IP address that has access.

Did you find this article helpful?

We value your feedback!

Why was this article not helpful? (Check all that apply)
The article is too difficult or too technical to follow.
There is a step or detail missing from the instructions.
The information is incorrect or out-of-date.
It does not resolve the question/problem I have.
How did you find this article?
Please tell us how we can improve this article:
Email Address
Name

new! - Enter your name and email address above and we will post your feedback in the comments on this page!

Did you find this article helpful?

Post a Comment

Name:
Email Address:
Phone Number:
Comment:
Submit

Please note: Your name and comment will be displayed, but we will not show your email address.

Related Questions

Here are a few questions related to this article that our customers have asked:
Ooops! It looks like there are no questions about this page.
Would you like to ask a question about this page? If so, click the button below!
Need More Help?

Help Center Search

Current Customers

Email: support@WebHostingHub.com Ticket: Submit a Support Ticket
Call: 877-595-4HUB (4482)
757-416-6627 (Intl.)
Chat: Click To Chat Now

Ask the Community

Get help with your questions from our community of like-minded hosting users and Web Hosting Hub Staff.

Not a Customer?

Get web hosting from a company that is here to help.
}