Wordpress supports the xml-rpc protocol, which is a way for third party software to communicate with the WP admin, for instance to create or delete posts. The protocol is a favourite target of hackers.

learn more… | top users | synonyms

0
votes
0answers
17 views

Wordpress XML-RPC wp.newPage adding category to Page

I've been beating my head on the wall trying to figure out how to add a category to wp.newPage with WordPress' XML-RPC. In the WordPress docs, it says there is a parameter for wp.newPage called "...
2
votes
1answer
589 views

Set default custom post type for XML-RPC

So now that it is possible to work with Custom Post Types over XML-RPC, has anyone figured out a way to set the post type for all items coming in via XLM-RPC to a default post type? IFTTT has a ...
0
votes
1answer
35 views

Turn off Admin Bar (Toolbar) in backend - no easy way

I'm working on a theme for the back end Admin pages, this is for a custom web application built on WP. After studying admin-bar.php and the function is_admin_bar_showing() for a few minutes I decided ...
1
vote
1answer
103 views

Posting via HTTP requests?

Is there any way to do autoblogging on WordPress? What I want to do is to submit a new blogging entry through a HTTP request rather than through the WordPress UI. I know that I can do it using email, ...
1
vote
1answer
308 views

Is it possible write, publish and edit posts with Wordpress from console aka terminal?

I would like to write things like LaTex with Wordpress i.e. a title would be a section, to use vimlatex -plugin to speed up writing etc. Also, it would be cool if I could publish things without going ...
0
votes
1answer
24 views

Checking for origin of a xmlrpc request

I have webapp A (running wordpress) talking to webapp B (running on Java, no wordpress or php). B issues xmlrpc requests to A over https. In order to secure the xmlrpc endpoint on A I'd like to ...
3
votes
1answer
816 views

XML-RPC: Add category to post data

I have a service that puts a daily post to my blog via XML-RPC. It doesn't offer me any control of what category it goes into so I want to just add a filter/hook to add the category I want into the ...
0
votes
0answers
26 views

Add alt text to image posts using XML-RPC/functions.php

I am using the following part of code to upload images using xmlrpc: $content = array( 'name' => $title.".".$ext, 'type' => $type, 'bits' => new ...
0
votes
0answers
27 views

XML-RPC add category

I am using the following function to make new posts using xml-rpc: function wpPostXMLRPC($title,$body,$category,$keywords='',$encoding='UTF-8') { $rpcurl = 'http://example.net/xmlrpc.php'; $...
3
votes
2answers
239 views

How do I know if my site is using the xmlrpc.php file?

I have taken over a website where I work that was developed by a previous employee, it seems that recently this site has been the victim of a string of DDoS attacks through the use of the xmlrpc ...
0
votes
1answer
36 views

<script> tag is ignored when using xml-rpc

I create post using xml-rpc, in post_content I post HTML, in HTML I have js code. But after post is created in editor I don't see <script type="text/javascript"> tag. How I can fix it? Example ...
1
vote
1answer
34 views

Does blocking xmlrpc.php affect pinging update services like pingomatic

Because there are a lot of attacks lately on xmlrpc.php, I want to block access to this file or disable it. I am aware some remote updating functions won't work (like the mobile app) but that doesn't ...
1
vote
3answers
1k views

Best way to eliminate xmlrpc.php?

What is a best way to eliminate xmlrpc.php file from WordPress when you don't need it?
0
votes
1answer
88 views

Disable links in header (feeds and such)

I want to disable feeds and things like that (rpc, pingbacks, wlwmanifest, prev/next). Reason is that the website is not a blog, so these are of no use. I wrote the following in a plugin: ...
0
votes
1answer
182 views

Insert custom post type via XML-RPC?

I am trying to connect to my wordpress installation in order to create posts of a specific kind. The code I am using for that is: Include('../wp-includes/class-IXR.php'); $client = new IXR_Client('...
1
vote
3answers
5k views

XML-RPC and Custom Post Types

I can't find much documentation on using XML-RPC and custom post types. I have a specific requirement that remote posting and management (the client has an in-house cms) must be used for a custom ...
1
vote
0answers
444 views

How do I programmatically create new posts of a custom post type over the XML-RPC API?

I would like to programmatically create posts of a custom post type with custom taxonomies over the XML-RPC API. This is what I have so far: <?php class XMLRPClientWordPress { var $XMLRPCURL ...
0
votes
0answers
32 views

flush_rewrite_rules with wp_cron

I'm trying to build myself a plugin for remote viewing data of all my WordPress installations in one overview. Therefore I'm generating a list using xmlrpc to remote connect to all the WordPress ...
0
votes
0answers
28 views

XML RPC faultCode 401 error with contributor

I've an external php platform that needs to push new posts to Wordpress using XML-RPC. Problem is that when creating post with "Contributor" XML-RPC reply with "faultCode 401 faultString You are not ...
0
votes
1answer
61 views

wp.setOptions of the XML-RPC API does not appear to work

It seems to me that the XML-RPC API command wp.setOptions is not working. For example if I send this information: array( "users_can_register" => array( "desc" => "Allow new users to ...
0
votes
0answers
62 views

xml-rpc.php giving 403 error

I'm a beginner at using Wordpress. I have been using emacs to remotely post to my blog with http://stevenarntson.com/xmlrpc.php. It has been working well, but recently when I try to post, that address ...
4
votes
2answers
155 views

get total number of images from media using xml-rpc

I have large number of images in media library so I am accessing images in chunks via pagination in my Ruby on Rails application. I pass page number and offset to wp.getMediaLibrary API and it returns ...
0
votes
0answers
37 views

XMLRPC: How to retrieve possible custom fields for a new post?

I'm planning to implement certain XMLRPC elements in my external web application. If I'm passing wp.newPost as the method, how can I get the possible custom_fields? I don't have access to the ...
0
votes
0answers
24 views

Why none of xmlrpc filters work

I disabled all of the plugins and used fresh install of wordpress but it seems none of xmlrpc filters works for me... . for example add_filter( 'xmlrpc_wp_insert_post_data', 'ffff' ); //or ...
7
votes
2answers
423 views

How to validate XML-RPC post creation and cancel when needed?

I have an IFTTT recipe that creates posts for me on some occasion, but for some weird reason it creates three, sometimes four posts of the same content. I would like to add an add_action hook/...
2
votes
1answer
181 views

XMLRPC Avoid duplicate content

I want to avoid duplicate post content via xmlrpc. So: if post exists nothing happens... . if does not exists data insertion occurs... . The method for checking would be post title or post ...
0
votes
0answers
37 views

Getting a plugin to activate when remote publishing

I deleted my other post as the problem is technically a new one. the following works perfectly fine when updating a post / publishing a post manually. However the plugin wont activate when a post is ...
0
votes
0answers
55 views

Using XML-RPC on a multisite enabled instance

I am using node-wporg (https://github.com/sayar/node-wporg) to interact with WP-XML-RPC which works fine until I direct it to a sub-site on a multisite instance. The blog id does not take effect and ...
7
votes
3answers
6k views

SSO / authentication integration with external 'directory service'

I'm about to start working on a prototype for a client - and one of the required features is integration with an in-house user authentication / registration system. This system will act as the ...
3
votes
1answer
378 views

Change post format using custom field

I'm creating a theme using the CF Post Formats plugin. But I've run into some trouble I don't know how to solve. Here's what I want to be able to do: Create a new standard-format post Enter a url ...
1
vote
3answers
190 views

How to activate plugins for my WordPress sites from a remote server

I have been thinking of managing a set of wordpress sites from a remote server.I would like to get information on plugins that has been installed on my wordpress sites.I would also like to install ...
0
votes
1answer
34 views

Manage multiple wordpress installs (Best Practice)

Our company has multiple blogging platforms on which some of our people post on. The list of platforms keeps on growing and so keeping everything up to date can be rather bothersome. So we were ...
0
votes
0answers
33 views

Send post via XMLRPC with open comment

I'm trying to send post via xmlrpc to wordpress but I don't know how to send comment_open to the wordpress. Is there any options to do so? I read the documentation but didn't find any option regarding ...
2
votes
3answers
9k views

Restrict access to xmlrpc.php

I am fairly new to Wordpress and I recently noted a huge amount of traffic hitting the following: 162.242.170.222 - - [01/Aug/2014:08:18:54 -0500] "POST /xmlrpc.php HTTP/1.0" 503 4859 162.242.170.222 ...
0
votes
0answers
28 views

posting to a wordpress blog using XML-RPC without credentials

I would like to be able to create a post from within my iPhone app/server code. I'm guessing there is no problem doing it with XML-RPC. The thing is that my app user needs to give me his admin user/...
1
vote
0answers
65 views

XMLRPC newPost post_content issue

My php script to post new content via xmlrpc to remote blogs occasionally fails due to the dreaded transport error. Usually I just end up manually posting this content, but now I'm trying to debug ...
1
vote
0answers
162 views

How to find a post using XML-RPC without knowing ID

I'm using the following function to retrieve individual posts from an external server using the WordPress XML-RPC Post API: public function get_post() {      include("lib/xmlrpc.inc"); ...
1
vote
0answers
203 views

Is there any image size limit for wordpress xml-rpc?

I'm creating a plugin using the xml-rpc to send images. I'm able to send small images, those that are less than 1 MB. But I can't send bigger images. They won't be uploaded using the wp.uploadFile. ...
0
votes
0answers
34 views

Anomaly with response coming from XML RPC Api get Post (integer out of range)

I am getting the following xml snippet back from a getPost call... <member> <name>image_meta</name> <value> <struct> <member> ...
0
votes
1answer
86 views

Best way for plugin to accept POSTs?

The problem: I'm developing a plugin which needs to accept POST data (webhooks from an external source). I do not have control over the format of the data POSTed. My only option for passing my own ...
2
votes
1answer
68 views

Is there a way to know if a post has been published through XML-RPC?

It's all in the title, I'm looking for a way to know if a given post was published through XML-RPC, versus published by hand in the WP admin. Pseudo code : if( !wpse_from_xmlrpc( $post -> ID ) { ...
1
vote
2answers
2k views

Working code example of PHP XML-RPC connex to site?

I'm working on an integration between an outside app (which needs to pull user names and some taxonomy data, and create new posts) and a WordPress site. I'm running the latest build of WP (4.0). The ...
1
vote
1answer
46 views

Can XMLRPC set show_on_front/page_on_front?

Is it possible to set show_on_front and page_on_front via XMLRPC? They do not appear in the list returned from wp.getOptions and using wp.setOptions does not appear to change the values.
0
votes
1answer
27 views

Execute upgrade-theme with coding

I'm executing some functions remotely from xmlprc with wordpress. I would like to run upgrade-theme remotely for theme that I develop. Assume that wp knows there is new version of theme. ...
0
votes
3answers
4k views

How to secure WordPress XMLRPC?

XMLRPC is great for remote publishing to WordPress, but there has been many security issues attributed to it. How do it make it more secure? More specifically, only user from the intranet will be ...
0
votes
2answers
41 views

Weblog clients cannot retrieve posts: An invalid hexadecimal character (0x7) was found in the element content of the document

Error blog: www.DannyQuah.com/writings/en/ Problem: Unable to retrieve posts. Reproduced with Weblog clients Windows Live Writer, ScribeFire, and Qumana. The error message on the invalid hexadecimal ...
4
votes
2answers
2k views

wp.getUsersBlogs XMLRPC Brute Force Attack/Vulnerability

After the holiday weekend, one of the larger sites I manage had a brute force attack on it. The attacker was attempting to use the wp.getUsersBlogs function and a list of popular usernames and ...
3
votes
2answers
718 views

XMLRPC and Underscored custom fields

I was creating my application to automate all of my blogs from my desktop. Target, I'll post blog. That's all. I used XMLRPC service, as you know "xmlrpc.php". I built many of parts, near to done... ...
3
votes
1answer
3k views

X-Pingback and XMLRPC

According to old post: How to secure WordPress XMLRPC?, every API require authentication. So, what is the point of adding X-Pingback in every public request? curl -I http://ma.tt .. X-Pingback: http:...
1
vote
0answers
263 views

Multisite -> XMLRPC

On my site I have Multisite enabled. XMLRPC works on the main site (www.hostname.com/xmlrpc.php), but when I try www.hostname.com/subblog/xmlrpc.php, it returns a 404 error.