Disable XML-RPC Pingback

Version Description

Files changed (2) hide show

disable-xml-rpc-pingback.php CHANGED Viewed

	@@ -3,7 +3,7 @@
3	* Plugin Name: Disable XML-RPC Pingback
4	* Description: Stops abuse of your site's Pingback method from XML-RPC by simply removing it. While you can use the rest of XML-RPC methods.
5	* Author: Samuel Aguilera
6	- * Version: 1.2.1
7	* Author URI: http://www.samuelaguilera.com
8	* License: GPL2
9	*
	@@ -40,7 +40,7 @@ function sar_block_xmlrpc_attacks( $methods ) {
40	/**
41	* Check WP version.
42	*/
43	- if ( version_compare( ~~$wp_version~~, '4.4' ) >= 0 ) {
44
45	add_action( 'wp', 'sar_remove_x_pingback_header_44', 9999 );
46
	@@ -50,7 +50,7 @@ if ( version_compare( $wp_version, '4.4' ) >= 0 ) {
50	function sar_remove_x_pingback_header_44() {
51	header_remove( 'X-Pingback' );
52	}
53	- } ~~else~~ {
54
55	add_filter( 'wp_headers', 'sar_remove_x_pingback_header' );
56


3	* Plugin Name: Disable XML-RPC Pingback
4	* Description: Stops abuse of your site's Pingback method from XML-RPC by simply removing it. While you can use the rest of XML-RPC methods.
5	* Author: Samuel Aguilera
6	+ * Version: 1.2.2
7	* Author URI: http://www.samuelaguilera.com
8	* License: GPL2
9	*

40	/**
41	* Check WP version.
42	*/
43	+ if ( version_compare( get_bloginfo( 'version' ), '4.4', '>=' ) ) {
44
45	add_action( 'wp', 'sar_remove_x_pingback_header_44', 9999 );
46

50	function sar_remove_x_pingback_header_44() {
51	header_remove( 'X-Pingback' );
52	}
53	+ } elseif ( version_compare( get_bloginfo( 'version' ), '4.4', '<' ) ) {
54
55	add_filter( 'wp_headers', 'sar_remove_x_pingback_header' );
56

readme.txt CHANGED Viewed

	@@ -2,9 +2,9 @@
2	Contributors: samuelaguilera
3	Tags: xml-rpc, xml, rpc, pingback, ddos, firewall
4	Requires at least: 4.8
5	- Tested up to: 5.2.2
6	Requires PHP: 5.6
7	- Stable tag: 1.2.1
8	License: GPLv2
9	License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
	@@ -16,6 +16,15 @@ Stops abuse of your site's XML-RPC by simply removing some methods used by attac
16
17	This is more friendly than disabling totally XML-RPC, that it's needed by some plugins and apps (I.e. Mobile apps or some Jetpack's modules).
18









19	= Features =
20
21	Removes the following methods from XML-RPC interface.
	@@ -27,7 +36,7 @@ Removes the following methods from XML-RPC interface.
27	= Requirements =
28
29	* WordPress 3.8.1 or higher.
30	-
31	== Installation ==
32
33	* Extract the zip file and just drop the contents in the <code>wp-content/plugins/</code> directory of your WordPress installation (or install it directly from your dashboard) and then activate the plugin from Plugins page.
	@@ -35,6 +44,10 @@ Removes the following methods from XML-RPC interface.
35
36	== Changelog ==
37




38	= 1.2.1 =
39
40	* Minor changes to make code 100% compliant with WordPress Coding Standards.


2	Contributors: samuelaguilera
3	Tags: xml-rpc, xml, rpc, pingback, ddos, firewall
4	Requires at least: 4.8
5	+ Tested up to: 5.7.2
6	Requires PHP: 5.6
7	+ Stable tag: 1.2.2
8	License: GPLv2
9	License URI: http://www.gnu.org/licenses/gpl-2.0.html
10

16
17	This is more friendly than disabling totally XML-RPC, that it's needed by some plugins and apps (I.e. Mobile apps or some Jetpack's modules).
18
19	+ * The original one.
20	+ * Simple and effective.
21	+ * No marketing buzz.
22	+ * Maintained and updated when needed since 2014.
23	+ * 100% compliant with WordPress coding standards which makes it fail safe.
24	+ * 70,000+ active installations can't be wrong.
25	+
26	+ If you're happy with the plugin [please don't forget to give it a good rating](https://wordpress.org/support/plugin/disable-xml-rpc-pingback/reviews/?filter=5), it will motivate me to keep sharing and improving this plugin (and others).
27	+
28	= Features =
29
30	Removes the following methods from XML-RPC interface.

36	= Requirements =
37
38	* WordPress 3.8.1 or higher.
39	+
40	== Installation ==
41
42	* Extract the zip file and just drop the contents in the <code>wp-content/plugins/</code> directory of your WordPress installation (or install it directly from your dashboard) and then activate the plugin from Plugins page.

44
45	== Changelog ==
46
47	+ = 1.2.2 =
48	+
49	+ * Improved WP version checking to avoid a notice under certain versions of WP.
50	+
51	= 1.2.1 =
52
53	* Minor changes to make code 100% compliant with WordPress Coding Standards.