Blocked xmlrpc.php, but still attempts on xmlrpc Gateway

  • Resolved henkie538

    (@henkie538)


    4 years, 10 months ago

    Hey NicolasKulka (@nicolaskulka)

    Thanks for your great plugin! I have been using it for time now and everytime I get a notification of a blocked IP, I feel a bit nervous. So I changed my .htaccess

    I have whitelisted only some IPs for accessing my wp-admin and wp-login\.php. This seems to work fine. But just now I got a warning from your plugin about a blocked IP through the XMLRPC Gateway. How is this possible if I have the following code in my .htaccess file?

    # Block WordPress xmlrpc.php requests
    <Files xmlrpc.php>
    order deny,allow
    deny from all
    </Files>

    Hope you have a answer for this. Thanks in advance!
    Greetings

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author NicolasKulka

    (@nicolaskulka)

    Have you tried this plugin? Disable XMLRPC

    Thread Starter henkie538

    (@henkie538)

    Hey,

    I have solved it by deleting the
    # Block WordPress xmlrpc.php requests
    <Files xmlrpc.php>
    order deny,allow
    deny from all
    </Files>

    I now use this and it’s working:
    # IP Whitelist + XMLRPC block
    <IfModule mod_rewrite.c>
    RewriteEngine on
    RewriteCond %{REQUEST_URI} ^(.*)?wp-login\.php(.*)$ [OR]
    RewriteCond %{REQUEST_URI} ^(.*)?xmlrpc\.php(.*)$ [OR]
    RewriteCond %{REQUEST_URI} ^(.*)?wp-admin$
    RewriteCond %{REMOTE_ADDR} !^xx.xx.xx.xx$
    RewriteRule ^(.*)$ – [R=403,L]
    </IfModule>

    Maybe this will help others with the same problem….
    Greetings

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Blocked xmlrpc.php, but still attempts on xmlrpc Gateway’ is closed to new replies.

Tags