WordPress.org

1. joaquin_win
   Member
   Posted 5 years ago #

   Hi,

   Last Month I had a very hard attack on my xmlrpc.php, as a security meassure I blocked all access to it (403 Forbidden). This month I see Yahoo and google requesting it:

   72.30.226.231 - - [01/Oct/2006:11:57:31 -0500] "GET /xmlrpc.php?rsd HTTP/1.0" 403 277 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)"

   66.249.65.44 - - [30/Sep/2006:23:59:19 -0500] "GET /xmlrpc.php?rsd HTTP/1.1" 403 289 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"

   So my question is: what to do? What do you recomend to do, since that attack didn't work (I think) but only rendered usesless my stats...

   What use is Yahoo or Google trying to do with a GET request?

2. Peter Westwood
   WordPress Lead Developer
   Posted 5 years ago #

   This request is for the rsd file which is linked from the header on the front page of your, and everyone elses, WordPress blog.

   For example:
   <link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://example.com/xmlrpc.php?rsd" />

   The RSD file is for "Really Simple Discovery" of services needed to edit weblog services. See http://tales.phrasewise.com/rfc/rsd.html for more info.

Topic Closed

This topic has been closed to new replies.