{"id":18267421,"date":"2025-01-27T12:15:18","date_gmt":"2025-01-27T12:15:18","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/xmlrpc-php-8\/"},"modified":"2025-01-27T12:57:05","modified_gmt":"2025-01-27T12:57:05","slug":"xmlrpc-php-8","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/xmlrpc-php-8\/","title":{"rendered":"xmlrpc.php"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Hi, today I noticed some failed login xmlrpc.php with user &#8220;admin&#8221; from a bot, then I have selected Disable XML-RPC authentication in login security. If I try to go to url &#8220;yoursite\/xmlrpc.php&#8221; I had &#8220;XML-RPC server accepts POST requests only.&#8221;  So I put the code in the htaccess &lt;Files xmlrpc.php&gt; order deny,allow deny from all &lt;\/Files&gt; after wordfence firewall code #END Wordfence WAF and now the url gives 403 forbidden; is this correct? Thanks for support.<\/p>\n","protected":false},"template":"","class_list":["post-18267421","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18267421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":2,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18267421\/revisions"}],"predecessor-version":[{"id":18267558,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18267421\/revisions\/18267558"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=18267421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}