How to Disable XML-RPC in WordPress

What is XML-RPC?

According to Wikipedia, XML-RPC is a remote procedure call which uses XML to encode its calls and HTTP as a transport mechanism. In short, it is a system that allows you to post on your WordPress blog using popular weblog clients like Windows Live Writer. It is also needed if you are using the WordPress mobile app. It is also needed if you want to make connections to services like IFTTT.

If you want to access and publish to your blog remotely, then you need XML-RPC enabled.

In the past, there were security concerns with XML-RPC thus it was disabled by default. In his comment on trac ticket #21509, @nacin one of the core contributors of WordPress said:

Quite a bit has changed since we introduced off-by-default for XML-RPC. Their code has improved, and it is no longer considered a second-class citizen when it comes to API development, thanks to the work of a large team of awesome contributors. Security is no greater a concern than the rest of core.

There is no longer a compelling reason to disable this by default. It’s time we should remove the option entirely.

With the increasing use of mobile, this change was imminent. However some security cautious folks may say that while the XML-RPC’s security is not that big of an issue, it still provides an additional surface for attack if a vulnerability was ever found. Thus, keeping it disabled would make more sense.

To keep everyone happy, while the user interface option and the database option to turn off XML-RPC has been removed, there is a filter that you can use to turn it off if needed.

How to Disable XML-RPC in WordPress 3.5

All you have to do is paste the following code in a site-specific plugin:

add_filter(‘xmlrpc_enabled’, ‘__return_false’);

How to Disable WordPress XML-RPC with .htaccess

While the above solution is sufficient for many, it can still be resource intensive for sites that are getting attacked.

In those cases, you may want to disable all xmlrpc.php requests from the .htaccess file before the request is even passed onto WordPress.

Simply paste the following code in your .htaccess file:

# Block WordPress xmlrpc.php requests

order deny,allow
deny from all
allow from 123.123.123.123

The Fox and The Pelican

Less than 2 months ago, I visited Portland.  When I was there I wrote that life on the non-physical plane is so strong that its contents can be felt by even the most spiritually cut off people. The astral dimension of the area is so deep that I said I could spend a lifetime exploring all of the non-physical energies that are identified with the area.  Well last night, out of curiosity, I decided to go back.

tumblr_lmpo5ckdGi1qbo8blo1_500.jpgWhen your consciousness begins to transition from awake to asleep, there is a window of blackness.  In that window, thoughts begin to distort.  You can feel them stretch and shrink and magnify.  If you watch the thoughts, they cease to make any rational sense.  This is one of the easiest ways to get out of body.  The minute you notice this window, you think about going into the darkness deeper and deeper and deeper.  You will find yourself standing in the fourth dimension.  If you turn around, you will see your body on the bed.  You will see a brilliant pearlescent filament connecting you to your body.  You will feel as if you are outside of a ‘reality’ that your body is limited to… imprisoned in even. 

I got to Portland by thinking of a specific tree that was in the backyard of the place I stayed at while I was there.  When you connect to something that you want to astral travel to, there is a moment where the connection with that thing causes you to entrain with that thing.  You can feel yourself shifting until the moment you have phased with it enough that it ‘hooks’ you.  You are pulled as if inescapably to it.  The brain interprets this as extremely intense movement.  Many people wake up at this point out of the resistance they feel to being out of control.  But if you surrender and just let it do with you what it will, you will experience yourself arriving at whatever it is that you intended to arrive at. 

9f69f9822f0bf870816b6f253e201255.jpgPortland was asleep when I arrived there.  Through the root system in the tree, I could feel the deep rhythm of drumming in the distance.  I let myself dissolve into the drumming and found myself traveling again, this time through the soil.  When the drumming felt to be coming from above me, my speed slowed and I began to rise up through the soil and up through a river that was above the soil.  It was day time.  I had traveled into a residual thought form that was left over from another time.  On the bank, there was a group of 4 Native American men.   They were from a tribe native to the river itself.  One of them, the oldest of the men was talking about the river for a while.  And then he began to tell a story.  He was speaking in a language I could not understand rationally.  He was telling a story about a Sawaxii (Pelican) and a Wa is (Gull).  I asked to see the story in pictures instead so I could understand what the man was saying.