XML-RPC ping/trackblack blocking breaks WordPress mobile app

  • Resolved a1291762

    (@a1291762)


    12 years, 1 month ago

    So I previously had a hand-rolled XML-RPC ping/trackback blocking plugin (http://yasmar.net/howto/how-to-disable-pingback-and-xmlrpc-advertising/) but I noticed iThemes Security seems to have all the same things so I turned it on and disabled my plugin.

    I set it to block ping/trackback, not to disable all xml-rpc since I use the wordpress mobile app. Unfortunately, the wordpress mobile app was broken 🙁

    The wordpress mobile app doesn’t need any of the “advertising” bits, it just to be able to access xml-rpc.php. It doesn’t do pings or trackbacks.

    I took a bit of a look at the iThemes code. It mostly looks ok, though I see it comparing the disable_xmlrpc setting true, 1 and 2… smells like bad code to me. I guess it’s disabling all xml-rpc instead of just pings and trackbacks?

    https://ww.wp.xz.cn/plugins/better-wp-security/

Viewing 4 replies - 1 through 4 (of 4 total)
  • iThemes Support

    (@ithemes-support)

    12 years, 1 month ago

    Hello,

    In your settings set xmlrpc to “soft block” rather than blocking it completely. You can find the setting in the tweaks section.

    Thread Starter a1291762

    (@a1291762)

    12 years, 1 month ago

    Yes. I’m reporting a bug on that feature. I chose the “block pingback/trackback only” option but it blocked more than it said it would.

    iThemes Support

    (@ithemes-support)

    12 years, 1 month ago

    I’ve pushed 4.0.27 to address this. Please let us know if you see further issues with this feature

    Thread Starter a1291762

    (@a1291762)

    12 years, 1 month ago

    Yep. It works now.

    That leaves only 2 items it lacks, compared to my hand-rolled plugin.

    The X-Pingback header.
    The link rel=”pingback” element.

    I found the rel=”pingback” in my theme and removed it so really, it’s only the header that’s a “problem”.

    Why remove these two? Why advertise a service that has been disabled?

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘XML-RPC ping/trackblack blocking breaks WordPress mobile app’ is closed to new replies.