disable wp-json output

JustinBBC
(@justinbbc)

1 year, 2 months ago

How can I disable the output from calling mysite.com/wp-json/ ?

I don’t want just anyone willy-nilly seeing most of that output.

Viewing 6 replies - 1 through 6 (of 6 total)

Moderator threadi
(@threadi)

1 year, 2 months ago

Check this article: https://www.wpbeginner.com/wp-tutorials/how-to-disable-json-rest-api-in-wordpress/
Thread Starter JustinBBC
(@justinbbc)

1 year, 2 months ago
Thank you, @threadi . Would you happen to know where the $access variable is defined? It doesn’t even seem to be used in the function. Do you know how this function is triggered? Doh, I guess it is self-triggered by the add_filter function.

<WP mod – where is the image I pasted into this? I see the ‘file name is’ string below but the img doesn’t show.>
- This reply was modified 1 year, 2 months ago by JustinBBC.
- This reply was modified 1 year, 2 months ago by JustinBBC.
Moderator James Huff
(@macmanx)

1 year, 2 months ago

You can’t paste images into the forums here because we don’t host images here.

Please follow the steps at https://wordpress.org/support/forum-user-guide/block-editor/#adding-screenshots

Thread Starter JustinBBC
(@justinbbc)

1 year, 2 months ago

Mod: Please fix the forum code then. It tries to accept the image and even assigns a UUID to it. Thanks for the info.

Thread Starter JustinBBC
(@justinbbc)

1 year, 2 months ago

For anyone else wanting to block this data leak, I found two methods:

add_filter( ‘rest_authentication_errors’,
function () { return new WP_Error( ‘rest_disabled’, ‘disabled’ ); }
);

or
add_filter( ‘rest_jsonp_enabled’, ‘_return_false’ );

Moderator James Huff
(@macmanx)

1 year, 2 months ago

@justinbbc There is no code to fix. The forums never have and never will allow uploads.

Pasting images doesn’t work here because there’s nowhere for them to be uploaded to.