• Hi,

    I want to use this Plugin for my Mobile App development but the moment I enable this plugin, the WP site content is open to the world in JSON format.

    Is there a way to restrict the JSON API to selected source only? i.e allow the JSON ouput of the WP site only to my domain or IP Address?

    I am planning to use the below in the WP’s .htaccess

    # protect xmlrpc
    <Files xmlrpc.php>
    Order Deny,Allow
    Deny from all
    Allow from 123.456.789
    Allow from 321.654.987
    </Files>

    Will this method restricts the JSON access?

    https://wordpress.org/plugins/json-api/

  • The topic ‘Is this JSON API plugin uses xmlrpc.php implicitly?’ is closed to new replies.