Enabling block-xmlrpc

Posted May 23, 2020
WordPress

I sometimes get ‘‘error establishing a database connection’’ with one of my wordpress sites.

After typing this: ‘‘grep xmlrpc /var/log/apache2/access.log’’ I got a similar output showing a XML-RPC attack and enabled block-xmlrpc.

My question is that is there any issue with enabling block-xmlrpc? Should I enable it on my other wordpress site as well?

rem3n

Submit an answer

You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Bobby Iliev • May 23, 2020

Hi there @rem3n,

The XMLRPC is used to allow remote updates to WordPress from other applications. If you are not using this functionality you can disable it I believe.

For example, you could add the following to your .htaccess file to prevent all access to that file:

# Block WordPress xmlrpc.php requests
<Files xmlrpc.php>
  order deny,allow
  deny from all
</Files>
# END protect xmlrpc.php

Hope that this helps! Regards, Bobby

Join the DigitalOcean Community

Join 1M+ other developers and:

Get help and share knowledge in Q&A
Subscribe to topics of interest
Get courses & tools that help you grow as a developer or small business owner

Wordpress error: Cannot write style-custom.css file

Question

How to set up postfix on nginx server to allow WP send emails through outlook.com aka (mail.live.com) via SMTP with TLS auth?

Question

Try DigitalOcean for free

Click below to sign up and get $100 of credit to try our products over 60 days!

Related

Question

Enabling block-xmlrpc

Related

Try DigitalOcean for free