Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Wordpress supports the xml-rpc protocol, which is a way for third party software to communicate with the WP admin, for instance to create or delete posts. The protocol is a favourite target of hackers.

-1
votes
1answer
276 views

xmlrpc.php Returning 405 Response Code

I hope someone might be able to help with this. A week ago we had a severe drop in rankings on the home page only. When I went to Google Search Console a new error was reported 2 days before the drop. ...
1
vote
1answer
41 views

How to block XML-RPC attack?

Using Apache Web Server For blocking xmlrpc, adding this code into .htaccess file <Files xmlrpc.php> order allow,deny deny from all </Files> But while adding this The domain being ...
0
votes
1answer
87 views

New post created with XML-RPC works fine but fails to assign category

I am creating WordPress post from my desktop using xmlrpc. Everything else (e.g. title, description, custom_fields) except category is working fine. The category is not assigning to the post. So far ...
0
votes
1answer
146 views

Queries take 120+ seconds on my large Wordpress site

i have a couple of Wordpress website running on a VPS, each one of them has 1M+ posts. When adding new posts queries just hangs for a long time until the website crashes. I use XML-RPC to post to my ...
2
votes
2answers
229 views

How to disable XML-RPC from Linux command-line in a total way?

I read near the end of this guide regarding utilizing SSHguard to protect WordPress from Brute force attacks that after configuring SSHguard the relevant way, one must: disable XML-RPC by blocking ...
0
votes
1answer
96 views

XMLRPC pingback.extensions.getPingbacks not work with parameters

I want to use the pingback.extensions.getPingbacks Method with parameters in the url, like post_type or page. I use the code below, but it doesn't work when I want to add a parameter and I get a fault ...
0
votes
0answers
130 views

Too many 499 request for XMLRPC.php file in NGINX access log

185.188.204.6 - - [17/Nov/2017:11:02:26 +0530] "POST /xmlrpc.php HTTP/1.0" 499 0 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)" 185.188.204.6 - - [17/Nov/2017:11:02:27 +0530] "POST /xmlrpc....
1
vote
1answer
1k views

How Enable XML-RPC in WP 4.8.2

How Can Enable XML in Version 4.8.2 ? I Want Enable XML RPC Then Connected to it with Programming library thx i can not connect to xml-rpc with https://github.com/abrudtkuhl/WordPressSharp WordPress ...
1
vote
0answers
17 views

modify post meta data remotely without xmlrpc

I want to make changes to post meta data from another server and had used xml-rpc. After some security concerns were raised, I disabled xmlrpc. I do not have remote access to the MySQL database. I ...
0
votes
1answer
153 views

Tagging posts to custom taxonomies using XMLRPC in R

I'm using R to upload posts onto Wordpress using XML-RPC using the newPost function from the RWordpress package. The function call I'm using is: newPost( content = list( description = ...
0
votes
2answers
253 views

How to edit feature image with XML RPC?

I can't find any information anywhere about what data I need to give exactly. When I try to read the data from one of my posts with a thumbnail already I get this but there's not way you have to enter ...
0
votes
1answer
162 views

Using the GetMediaLibrary() method in python-wordpress-xmlrpc.media, how to iterate over the result?

I accessed my Wordpress site's media library using the GetMediaLibrary() method of the python-wordpress-xmlrpc.media module. According to the documentation, this action should return a list of ...
1
vote
1answer
38 views

Manipulating/view postmeta remotely

I'm new to WordPress development. I'm using a plugin, "Tribe Events," that stores event venues and organizers associated with an event in the wp_postmeta table and I want to be able to easily access ...
0
votes
1answer
93 views

Getting all posts from an XMLRPC request [duplicate]

I'm using the XMLRPC::Lite module fetch posts from my website like so: #!/usr/bin/perl use XMLRPC::Lite; my $result = XMLRPC::Lite->proxy('http://example.com/xmlrpc.php) ->call('wp.getPosts'...
0
votes
1answer
274 views

not well-formed (invalid token) at line 15, column 51, byte 720 when trying to parse XMLRPC call

I'm running WP 4.7.4. The site is a default site with no plugins activated other than the default plugins. I'm using the WordPress::XMLRPC Perl module to generate a getPost XMLRPC call for post #1 ...
0
votes
0answers
297 views

Site doesn't have xmlrpc.php

I'm trying to use the JetPack Plugin and get this Error: Error Details: The Jetpack server could not communicate with your site's XML-RPC URL. Please check to make sure xmlrpc.php url is working ...
1
vote
0answers
125 views

XMLRPC slow and weird websites/services

I have a relatively new wordpress setup ~1mth old after installing NewRelic, I notice it tells me XMLRPC.php is causing slowdown. When I looked at the details I notice its connecting to some weird ...
7
votes
2answers
653 views

Is there a way to get protected meta fields through any of the available built-in WordPress APIs? (xmlrpc, wp-json)

WordPress has several APIs build in: XML-RPC REST API by default they don't return custom post types or protected meta keys. I want to access the protected meta fields of a plugin. I tried to ...
1
vote
1answer
29 views

XML-RPC errors they know my username?

I have noticed a lot of XML-RPC authentication failures to my blog site. This can be normal and idiots attempting to crack a wordpress site but what is worrying is that the username being shown in the ...
0
votes
0answers
73 views

XML-RPC aplication blocked by the hosting

Currently I own several developments in C# in .Net. These applications frequently updates information in WordPress using XML-RPC. The aim of these developments is to update information in an ...
2
votes
1answer
427 views

Create a new post in wordpress with XML-RPC with the correct GUID?

When I use XML-RPC to create a new post instead of wp_insert_post the post is created with wrong guid/URL. With XML-RPC the guid is created with ID not slug. // Input data $my_page = array(); $...
0
votes
1answer
50 views

API WordPress is Limited? Return False

We are migrating a school library repository to the CMS WordPress and so make it public and accessible to society. All items are scanned and available for up to WordPress via API wp.uploadFile wp....
1
vote
1answer
499 views

PHP XMLRPC for WordPress: Adding meta tags and description

I have been trying to add WordPress posts by XMLRPC calls. The code is working but the tags and categories are not setting. I have tried almost every solution provided in every forum. PS: I am ...
3
votes
1answer
357 views

Removing unnecessary wordpress files

I want to consider removing the next <link> files from the <head> section of my website: ...wp-json ...xmlrpc.php?rsd ...wlwmanifest.xml But I don't really know how would this may affect ...
1
vote
1answer
323 views

Turn off Admin Bar (Toolbar) in backend - no easy way

I'm working on a theme for the back end Admin pages, this is for a custom web application built on WP. After studying admin-bar.php and the function is_admin_bar_showing() for a few minutes I decided ...
0
votes
1answer
54 views

Checking for origin of a xmlrpc request

I have webapp A (running wordpress) talking to webapp B (running on Java, no wordpress or php). B issues xmlrpc requests to A over https. In order to secure the xmlrpc endpoint on A I'd like to ...
3
votes
2answers
4k views

How do I know if my site is using the xmlrpc.php file?

I have taken over a website where I work that was developed by a previous employee, it seems that recently this site has been the victim of a string of DDoS attacks through the use of the xmlrpc ...
0
votes
1answer
87 views

<script> tag is ignored when using xml-rpc

I create post using xml-rpc, in post_content I post HTML, in HTML I have js code. But after post is created in editor I don't see <script type="text/javascript"> tag. How I can fix it? Example ...
3
votes
2answers
170 views

Does blocking xmlrpc.php affect pinging update services like pingomatic

Because there are a lot of attacks lately on xmlrpc.php, I want to block access to this file or disable it. I am aware some remote updating functions won't work (like the mobile app) but that doesn't ...
2
votes
3answers
310 views

Attach to wp-login.php and xmlrpc.php

I am receiving many requests to my wp-login.php and xmlrpc file, now I just set up an htaccess to prevent requests to xmlrpc, but how do you suggest me to block wp-login? thanks
20
votes
7answers
20k views

Best way to eliminate xmlrpc.php?

What is a best way to eliminate xmlrpc.php file from WordPress when you don't need it?
2
votes
1answer
1k views

Disable links in header (feeds and such)

I want to disable feeds and things like that (rpc, pingbacks, wlwmanifest, prev/next). Reason is that the website is not a blog, so these are of no use. I wrote the following in a plugin: ...
0
votes
0answers
658 views

xml-rpc.php giving 403 error

I'm a beginner at using Wordpress. I have been using emacs to remotely post to my blog with http://stevenarntson.com/xmlrpc.php. It has been working well, but recently when I try to post, that address ...
0
votes
0answers
216 views

XMLRPC: How to retrieve possible custom fields for a new post?

I'm planning to implement certain XMLRPC elements in my external web application. If I'm passing wp.newPost as the method, how can I get the possible custom_fields? I don't have access to the ...
4
votes
2answers
462 views

get total number of images from media using xml-rpc

I have large number of images in media library so I am accessing images in chunks via pagination in my Ruby on Rails application. I pass page number and offset to wp.getMediaLibrary API and it returns ...
0
votes
0answers
70 views

Why none of xmlrpc filters work

I disabled all of the plugins and used fresh install of wordpress but it seems none of xmlrpc filters works for me... . for example add_filter( 'xmlrpc_wp_insert_post_data', 'ffff' ); //or ...
0
votes
1answer
873 views

Insert custom post type via XML-RPC?

I am trying to connect to my wordpress installation in order to create posts of a specific kind. The code I am using for that is: Include('../wp-includes/class-IXR.php'); $client = new IXR_Client('...
2
votes
1answer
589 views

XMLRPC Avoid duplicate content

I want to avoid duplicate post content via xmlrpc. So: if post exists nothing happens... . if does not exists data insertion occurs... . The method for checking would be post title or post ...
1
vote
3answers
826 views

How to activate plugins for my WordPress sites from a remote server

I have been thinking of managing a set of wordpress sites from a remote server.I would like to get information on plugins that has been installed on my wordpress sites.I would also like to install ...
0
votes
1answer
42 views

Manage multiple wordpress installs (Best Practice)

Our company has multiple blogging platforms on which some of our people post on. The list of platforms keeps on growing and so keeping everything up to date can be rather bothersome. So we were ...
0
votes
1answer
95 views

wp.setOptions of the XML-RPC API does not appear to work

It seems to me that the XML-RPC API command wp.setOptions is not working. For example if I send this information: array( "users_can_register" => array( "desc" => "Allow new users to ...
1
vote
0answers
104 views

XMLRPC newPost post_content issue

My php script to post new content via xmlrpc to remote blogs occasionally fails due to the dreaded transport error. Usually I just end up manually posting this content, but now I'm trying to debug ...
1
vote
0answers
471 views

How to find a post using XML-RPC without knowing ID

I'm using the following function to retrieve individual posts from an external server using the WordPress XML-RPC Post API: public function get_post() {      include("lib/xmlrpc.inc"); ...
0
votes
0answers
46 views

Anomaly with response coming from XML RPC Api get Post (integer out of range)

I am getting the following xml snippet back from a getPost call... <member> <name>image_meta</name> <value> <struct> <member> ...
2
votes
1answer
88 views

Is there a way to know if a post has been published through XML-RPC?

It's all in the title, I'm looking for a way to know if a given post was published through XML-RPC, versus published by hand in the WP admin. Pseudo code : if( !wpse_from_xmlrpc( $post -> ID ) { ...
1
vote
1answer
62 views

Can XMLRPC set show_on_front/page_on_front?

Is it possible to set show_on_front and page_on_front via XMLRPC? They do not appear in the list returned from wp.getOptions and using wp.setOptions does not appear to change the values.
2
votes
1answer
282 views

Best way for plugin to accept POSTs?

The problem: I'm developing a plugin which needs to accept POST data (webhooks from an external source). I do not have control over the format of the data POSTed. My only option for passing my own ...
0
votes
2answers
54 views

Weblog clients cannot retrieve posts: An invalid hexadecimal character (0x7) was found in the element content of the document

Error blog: www.DannyQuah.com/writings/en/ Problem: Unable to retrieve posts. Reproduced with Weblog clients Windows Live Writer, ScribeFire, and Qumana. The error message on the invalid hexadecimal ...
4
votes
1answer
2k views

XML-RPC: Add category to post data

I have a service that puts a daily post to my blog via XML-RPC. It doesn't offer me any control of what category it goes into so I want to just add a filter/hook to add the category I want into the ...
0
votes
1answer
140 views

Execute upgrade-theme with coding

I'm executing some functions remotely from xmlprc with wordpress. I would like to run upgrade-theme remotely for theme that I develop. Assume that wp knows there is new version of theme. ...