My site is getting a lot of malicious traffic to domain.com/xmlrpc.php, to the point that the server is not being able to handle it.

I tried to disable it via the wp-config.php, by adding this line:

add_filter('xmlrpc_enabled', '__return_false');

And I also tried this plugin, but neither method seemed to have worked.

Now I am considering to completely remove the php file, but I would like to be sure I won't destroy other things.

Does anyone know if it's safe to remove that file?

  • Please show how you tried to disable it via your config file. – kaiser Aug 1 '13 at 12:18
  • I edited the question. – Daniel Scocco Aug 1 '13 at 12:39
  • 1
    add_filter() isn't available inside the wp-config.php. Move that to a plugin. – kaiser Aug 1 '13 at 12:40
  • Gotcha, but ain't the plugin I mentioned doing that? Also, I am still curious to know whether or not I can remove the file altogether. – Daniel Scocco Aug 1 '13 at 12:41
  • Dunno, take a look at its source. – kaiser Aug 1 '13 at 13:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.