Block xmlrpc.php

To block a whole server from using xmlrpc.php (sometimes used for an attack vector) just put this in your apache2.conf file:

 

# remove access to all xmlrpc.php files (attack vector)

<Files xmlrpc.php>

Order Deny,Allow

Deny from all

</Files>

More info here.

Leave a Reply

Your email address will not be published.