Is XMLRPC.php being blocked?

Question

I have a droplet that I created with wordpress already installed. Super convenient.

I am trying to utilize jetpack connections for connecting wordpress to facebook. It sees my facebook but errors every connection attempt during setup. Checking google and jetpack support pages, it appears that xmlrpc.php needs to return that its open for posts, but when I try the url it just auto redirects me to my main site.

Seems like xmlrpc is being blocked then. I confirmed its in the folder, so it does exit. How do I unblock it?

KFSys · Answer

Heya, Check .htaccess for Rules Blocking XML-RPC: Open your .htaccess file and look for any rules that might block or redirect access to xmlrpc.php. If you see any lines specifically blocking xmlrpc.php, you can comment them out by adding a # at the beginning of those lines. Check the Server Configuration (Apache/Nginx): If you’re using Apache or Nginx, sometimes server configurations are set to block xmlrpc.php for security reasons. Look in your server configuration files for any mention of xmlrpc.php and remove or comment out any lines that restrict access. Ensure XML-RPC is Enabled in WordPress: In recent WordPress versions, XML-RPC is enabled by default. However, some security plugins disable it. Check any security plugins you have installed and make sure they aren’t blocking xmlrpc.php. Whitelist XML-RPC in Firewall Settings: If your droplet has a firewall (like UFW on Ubuntu or other security plugins in WordPress), make sure it allows access to xmlrpc.php. Testing Access to XML-RPC: After making these changes, try accessing https://yourdomain.com/xmlrpc.php in your browser. You should see the message “XML-RPC server accepts POST requests only,” which indicates it’s accessible.

Bobby · Answer

Hey there! DigitalOcean itself does not block access to xmlrpc.php, so the issue is likely related to your WordPress configuration or a plugin that’s been set up on your Droplet. Many security plugins (like Wordfence, iThemes Security, or All In One WP Security) will block xmlrpc.php to prevent potential attacks. If you have any of these (or similar) plugins installed, check their settings to see if XML-RPC is disabled. You might need to temporarily disable the plugin to see if that resolves the issue. If the plugins aren’t blocking it, check your web server settings. Sometimes, there can be configurations in Nginx or Apache that restrict access to xmlrpc.php. For Nginx :Open your site’s configuration file: sudo nano /etc/nginx/sites-available/your_domain Look for a section like this: location ~* ^/xmlrpc.php$ { deny all; } If found, remove or comment it out, then reload Nginx: sudo systemctl reload nginx For Apache , check your .htaccess file: sudo nano /var/www/html/.htaccess Look for any lines blocking access to xmlrpc.php and remove them. Let me know if that helps! - Bobby

alexdo · Answer

Hello, @7fd8eb75f59545bfbcfae58b41f156 DigitalOcean will not block xmlrpc.php by default, but this is usually recommended process as part of securing your droplet against attacks. You can check your virtual config file for any code blocks like: order allow,deny deny from all You can check this article here and see if any of the recommneded solutions has been already implemented on your droplet: https://www.digitalocean.com/community/tutorials/how-to-protect-wordpress-from-xml-rpc-attacks-on-ubuntu-14-04 Regards

Become a contributor for community

DigitalOcean Documentation

Resources for startups and AI-native businesses

The developer cloud

Start building today

Report this

Is XMLRPC.php being blocked?

Related questions

How can I reduce slow image loading on a WordPress website?

Best way to configure Nginx caching for a WordPress site on a DigitalOcean droplet?

How can I improve the loading speed of my WordPress travel website?

Problem on wordpress Digital Ocean Droplet One-Click

Website redirecting to another site on same droplet after moving droplets

Load and CPU Spikes

What’s the best way to secure a DigitalOcean Droplet running WordPress against brute-force attacks?

How to update PHP version to 8.3 on a droplet?

New cloud hosting solution

how to access droplet console for wordpress 1click install

Move DigitalOcean WP site to another DigitalOcean WP site

How do you set up a development and test server for staging production server changes?

Report this

Is XMLRPC.php being blocked?

Related questions

How can I reduce slow image loading on a WordPress website?

Best way to configure Nginx caching for a WordPress site on a DigitalOcean droplet?

How can I improve the loading speed of my WordPress travel website?

Problem on wordpress Digital Ocean Droplet One-Click

Website redirecting to another site on same droplet after moving droplets

Load and CPU Spikes

What’s the best way to secure a DigitalOcean Droplet running WordPress against brute-force attacks?

How to update PHP version to 8.3 on a droplet?

New cloud hosting solution

how to access droplet console for wordpress 1click install

Move DigitalOcean WP site to another DigitalOcean WP site

How do you set up a development and test server for staging production server changes?