Announcement

Collapse
No announcement yet.

What xmlrpc.php

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    What xmlrpc.php

    I was poking around my Cloudflare setup and I drilled into traffic analytics /API requests.

    I saw a chunk of traffic here: //blog//xmlrpc.php

    I have a WP blog connected to my site, I googled it and I found https://kinsta.com/blog/xmlrpc-php/ which seems to be pretty negative on having this on my site

    #2
    It's a core part of Wordpress, and also a frequent target of exploit attempts in out of date versions of Wordpress. You are safe to remove it if you aren't using it for remote integrations.

    Indirectly related, our recommendation is to never install any php application side by side with our software; the risk is too great. For situations where that is highly undesirable, if wordpress is at least installed into a subdirectory, it is possible for us to remap that to an isolated area internally so it has the public appearance of being on your site but it has no access to the ecommece software or content.
    David Hubbard
    CIO
    Miva
    [email protected]
    http://www.miva.com

    Comment


      #3
      OK well Miva installed my blog so I guess I'll ask professional services what's up with that.

      Comment

      Working...
      X