digitalocean/nginxconfig.io

wordpress.conf disable xmlrpc service by default

Open

#316 创建于 2021年12月29日

在 GitHub 查看
 (5 评论) (0 反应) (0 负责人)JavaScript (1,978 fork)batch import
enhancementgood first issuehacktoberfesthelp wanted

仓库指标

Star
 (26,979 star)
PR 合并指标
 (30 天内没有已合并 PR)

描述

Sorry for not following the template. It's a straightforward question.

By enabling "WordPress-specific rules", the following codes will be added to the wordpress.conf:

# WordPress: deny general stuff
location ~* ^/(?:xmlrpc\.php|wp-links-opml\.php|wp-config\.php|wp-config-sample\.php|readme\.html|license\.txt)$ {
    deny all;
}

However, this disables xmlrpc feature, which disables WordPress mobile and desktop applications to access the site.

Should we consider adding a notice or make it optional?

贡献者指南