I read near the end of this guide regarding utilizing SSHguard to protect WordPress from Brute force attacks that after configuring SSHguard the relevant way, one must:
disable XML-RPC by blocking all remote access to /xmlrpc.php in your web server configuration.
I don't use XML-RPC in any of my websites.
I use Nginx as my web server.
I'm not sure what is the best way to totally block XML-RPC. Nginx conf for each site? WP-CLI operation per site?
What is the common way to do so?
esc_html
etc to your themes and plugins – Tom J Nowell♦ Jan 23 '18 at 19:56esc_html
? Never heard of this before. If I understand correct, one should do that instead disabling XML-RPC, and than add the relevant conf to the Nginx global conf file, or specific site conf? – Arcticooling Jan 23 '18 at 20:00deny all;
onto it if you don't need it. – janh Jan 23 '18 at 20:10