{"id":16976670,"date":"2023-08-16T09:20:35","date_gmt":"2023-08-16T09:20:35","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/disable-xmlrpc-php\/"},"modified":"2023-08-16T09:20:35","modified_gmt":"2023-08-16T09:20:35","slug":"disable-xmlrpc-php","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/disable-xmlrpc-php\/","title":{"rendered":"Disable xmlrpc.php"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Hello,<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">our site was victim of a brute force attack (and I believe other attacks). I was told by our provider to disable xmlrpc.php, amongst other suggestions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I see that WordFence, in &#8220;Logic security settings&#8221;, has this checkbox called &#8220;<strong>Disable XML-RPC authentication<\/strong>&#8220;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I just wanted to ask if this does the same as disabling xmlrpc.php in .htaccess, e.g. through a piece of code like:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;Files \"xmlrpc.php\"&gt;\n  Require all denied\n&lt;\/Files&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Thank you!<\/p>\n","protected":false},"template":"","class_list":["post-16976670","topic","type-topic","status-publish","hentry","topic-tag-htaccess","topic-tag-xmlrpc-php"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/16976670","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/16976670\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=16976670"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}