class-activation.php
7 months ago
class-admin-menu-organizer.php
7 months ago
class-admin-menu-svg-icon-mask.php
7 months ago
class-auto-publish-posts-with-missed-schedule.php
7 months ago
class-avif-upload.php
7 months ago
class-captcha-protection.php
7 months ago
class-change-login-url.php
7 months ago
class-cleanup-admin-bar.php
7 months ago
class-common-methods.php
7 months ago
class-content-duplication.php
7 months ago
class-content-order.php
7 months ago
class-custom-admin-footer-text.php
7 months ago
class-custom-body-class.php
7 months ago
class-custom-css.php
7 months ago
class-custom-nav-menu-items-in-new-tab.php
7 months ago
class-deactivation.php
7 months ago
class-disable-author-archives.php
7 months ago
class-disable-comments.php
7 months ago
class-disable-dashboard-widgets.php
7 months ago
class-disable-embeds.php
7 months ago
class-disable-feeds.php
7 months ago
class-disable-gutenberg.php
7 months ago
class-disable-rest-api.php
7 months ago
class-disable-smaller-components.php
7 months ago
class-disable-updates.php
7 months ago
class-disable-xml-rpc.php
7 months ago
class-display-system-summary.php
7 months ago
class-email-address-obfuscator.php
7 months ago
class-email-delivery.php
7 months ago
class-enhance-list-tables.php
7 months ago
class-external-permalinks.php
7 months ago
class-heartbeat-control.php
7 months ago
class-hide-admin-bar.php
7 months ago
class-hide-admin-notices.php
7 months ago
class-image-sizes-panel.php
7 months ago
class-image-upload-control.php
7 months ago
class-insert-head-body-footer-code.php
7 months ago
class-last-login-column.php
7 months ago
class-limit-login-attempts.php
7 months ago
class-login-id-type.php
7 months ago
class-login-logout-menu.php
7 months ago
class-maintenance-mode.php
7 months ago
class-manage-ads-appads-txt.php
7 months ago
class-manage-robots-txt.php
7 months ago
class-media-replacement.php
7 months ago
class-multiple-user-roles.php
7 months ago
class-obfuscate-author-slugs.php
7 months ago
class-open-external-links-in-new-tab.php
7 months ago
class-password-protection.php
7 months ago
class-redirect-after-login.php
7 months ago
class-redirect-after-logout.php
7 months ago
class-redirect-fourofour.php
7 months ago
class-registration-date-column.php
7 months ago
class-revisions-control.php
7 months ago
class-search-engines-visibility.php
7 months ago
class-settings-fields-render.php
7 months ago
class-settings-sanitization.php
7 months ago
class-settings-sections-fields.php
7 months ago
class-show-custom-taxonomy-filters.php
7 months ago
class-site-identity-on-login-page.php
7 months ago
class-svg-upload.php
7 months ago
class-various-admin-ui-enhancements.php
7 months ago
class-view-admin-as-role.php
7 months ago
class-wider-admin-menu.php
7 months ago
class-wp-config-transformer.php
7 months ago
class-disable-xml-rpc.php
59 lines
| 1 | <?php |
| 2 | |
| 3 | namespace ASENHA\Classes; |
| 4 | |
| 5 | /** |
| 6 | * Class for Disable XML-RPC module |
| 7 | * |
| 8 | * @since 6.9.5 |
| 9 | */ |
| 10 | class Disable_XML_RPC { |
| 11 | |
| 12 | /** |
| 13 | * Remove XML RPC link in head |
| 14 | * |
| 15 | * @since 6.2.2 |
| 16 | */ |
| 17 | public function remove_xmlrpc_link() { |
| 18 | remove_action('wp_head', 'rsd_link'); |
| 19 | } |
| 20 | |
| 21 | /** |
| 22 | * Remove XML-RPC methods |
| 23 | * |
| 24 | * @link https://plugins.trac.wordpress.org/browser/stop-xml-rpc-attacks/trunk/stop-xml-rpc-attacks.php |
| 25 | * @since 7.6.9 |
| 26 | */ |
| 27 | public function remove_xmlrpc_methods( $methods ) { |
| 28 | unset($methods['system.multicall']); |
| 29 | unset($methods['system.listMethods']); |
| 30 | unset($methods['system.getCapabilities']); |
| 31 | unset($methods['pingback.extensions.getPingbacks']); |
| 32 | unset($methods['pingback.ping']); |
| 33 | return $methods; |
| 34 | } |
| 35 | |
| 36 | /** |
| 37 | * Disable the XML-RPC component |
| 38 | * |
| 39 | * @since 2.2.0 |
| 40 | */ |
| 41 | public function maybe_disable_xmlrpc( $data ) { |
| 42 | |
| 43 | // http_response_code(403); |
| 44 | header('HTTP/1.1 403 Forbidden'); |
| 45 | exit('You don\'t have permission to access this file.'); |
| 46 | |
| 47 | } |
| 48 | |
| 49 | /** |
| 50 | * Hide xmlrpc.php in HTTP response headers |
| 51 | * |
| 52 | * @link https://wordpress.stackexchange.com/a/219185 |
| 53 | */ |
| 54 | public function hide_xmlrpc_in_http_response_headers( $headers ) { |
| 55 | unset( $headers['X-Pingback'] ); |
| 56 | return $headers; |
| 57 | } |
| 58 | |
| 59 | } |