Title: Block XMLRPC
Last modified: August 30, 2016

---

# Block XMLRPC

 *  Resolved [bvigorda](https://wordpress.org/support/users/bvigorda/)
 * (@bvigorda)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/block-xmlrpc/)
 * Hello,
 * I made a donation, but not the higher amount that gives the auto-scanning feature.
   I see the below at the scan page, but I don’t understand it. Does it mean it 
   is enabled for anyone with any amount of a donation and the plugin is blocking
   access to the XMLRPC file? In other words, I’m protected from the hacking? It
   just looks different than the features immediately above and below it and it 
   isn’t clear to me that it’s working on my site.
    Thank you
 * Allow/Block XMLRPC Access (Currently Allowed) This feature is available to those
   who have donated!
 * Most WordPress site do not use the XMLRPC features and hack attempt on the xmlrpc.
   php file are more common then ever before. Even if there are no vulnerabilities
   for hackers to exploit these attempts can cause slowness or downtime similar 
   to a DDoS attack. This patch automatically blocks all external access to the 
   xmlrpc.php file.
 * [https://wordpress.org/plugins/gotmls/](https://wordpress.org/plugins/gotmls/)

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/)
 * (@scheeeli)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/block-xmlrpc/#post-6376009)
 * You are now able to block all access to the xmlrpc.php with my plugin. Just click
   the button to the right to block that DIOS attack on you XMLRPC.
 * The automatic updates are currently only available to those who have donated 
   at least $29, this is to help me cover the cost of my new definition update server.
 * Please let me know if you have any further questions.
 * Aloha, Eli
 *  Thread Starter [bvigorda](https://wordpress.org/support/users/bvigorda/)
 * (@bvigorda)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/block-xmlrpc/#post-6376148)
 * Hi Eli,
 * Thanks for your reply.
 * I guess that means I do have it enabled since there isn’t any button to the right.
   I remember trying to enable it before. It just doesn’t have a green box with 
   a check mark to the left of it like the others so I wasn’t sure. Here’s a screenshot
   to see what I mean:
 * [http://snag.gy/D7fd8.jpg](http://snag.gy/D7fd8.jpg)
 * Thank you,
    Gail
 *  Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/)
 * (@scheeeli)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/block-xmlrpc/#post-6376160)
 * I put a Question Mark on this option because I though that a Check Mark for Blocking
   access could be confusing. I can see it is still confusing so I will explain 
   it better and make it easier to understand in my next release.
 * Your screenshot shows “Allow/Block XMLRPC Access (Currently Allowed)” which means
   that Access to your XMLRPC is Currently Allowed, not Blocked.
 * You have two different keys for your site, one for http and one for https, each
   one is registered under a different email address. You have donated under the
   account that uses the http, not the https site. You could just take off the “
   s” and click the “Block XMLRPC Access” button on the http page, or you could 
   login to my stie and transfer your https registration to the other account so
   that the donation is applicable to both sites.
 *  Thread Starter [bvigorda](https://wordpress.org/support/users/bvigorda/)
 * (@bvigorda)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/block-xmlrpc/#post-6376163)
 * Worked like a charm Eli – thank you!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Block XMLRPC’ is closed to new replies.

 * ![](https://ps.w.org/gotmls/assets/icon-256x256.png?rev=1001824)
 * [Anti-Malware Security and Brute-Force Firewall](https://wordpress.org/plugins/gotmls/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/gotmls/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/gotmls/)
 * [Active Topics](https://wordpress.org/support/plugin/gotmls/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/gotmls/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/gotmls/reviews/)

 * 4 replies
 * 2 participants
 * Last reply from: [bvigorda](https://wordpress.org/support/users/bvigorda/)
 * Last activity: [10 years, 10 months ago](https://wordpress.org/support/topic/block-xmlrpc/#post-6376163)
 * Status: resolved