內容簡介
總結:
Simple Disable XML-RPC是一個功能強大且使用友好的WordPress外掛程式，旨在讓網站管理員完全控制其WordPress網站的XML-RPC功能。 XML-RPC是一種功能，允許遠程與您的網站通信，使外部應用程序和服務能夠與您的WordPress安裝進行交互。儘管XML-RPC可能很有用，但如果沒有正確管理，它也可能帶來安全風險。 這個外掛程式簡化了XML-RPC的管理過程，以輕鬆提升您的網站安全性和性能。
問題與答案:
- 如何控制XML-RPC功能？
使用"Simple Disable XML-RPC"外掛程式，您可以輕鬆在WordPress網站上啟用或禁用XML-RPC功能。外掛程式提供了一個簡單的開關，讓您根據需要進行快速調整。
- 透過禁用XML-RPC可以增強網站安全性嗎？
是的，當不需要時禁用XML-RPC可以大幅減少對惡意行為者的潛在攻擊面。這有助於保護您的網站免受各種XML-RPC相關的安全威脅。
- 停用XML-RPC是否有助於提高網站性能？
是的，禁用XML-RPC可以提高網站性能和資源優化。這特別適用於不需要遠程連接功能的網站。
- 這個外掛程式有使用友好的介面嗎？
是的，這個外掛程式具有直觀的使用者介面，即使對技術知識有限的使用者，也可以輕鬆管理XML-RPC設定，無需複雜的配置或編碼。
- 控制XML-RPC需要編程嗎？
不需要成為編程專家來控制XML-RPC。該外掛程式抽象了技術細節，使其對所有WordPress使用者都可取得。
- 更改XML-RPC設定在實時生效嗎？
是的，對XML-RPC設定的任何更改都會實時生效，確保您的網站安全性可以及時調整以滿足您的要求。
- 這個外掛程式與其他WordPress主題和插件兼容嗎？
"Simple Disable XML-RPC"設計與各種WordPress主題和插件無縫配合，確保不會擾亂您的網站核心功能。
- 這個外掛程式是否會持續更新？
是的，外掛程式積極維護和更新，以確保與最新版本的WordPress兼容並解決任何潛在問題。
- 如果遇到困難或問題，是否能獲得客戶支援？
是的，如果遇到任何困難或問題，外掛程式的支援團隊會提供迅速和有用的回應，以協助您。
外掛標籤
開發者團隊
原文外掛簡介
Simple Disable XML-RPC is a lightweight, battle-tested, and developer-friendly WordPress security plugin that provides comprehensive protection against XML-RPC vulnerabilities. Protect your WordPress site from brute force attacks, DDoS attempts, and resource exhaustion with a single click.
🔒 Why Disable XML-RPC?
XML-RPC is an obsolete remote communication protocol originally built for external desktop blogging applications. While historically useful, modern WordPress relies on the secure REST API. Today, XML-RPC is one of the most frequently exploited vectors for:
Brute Force Attacks – Hackers execute system.multicall to attempt thousands of username and password combinations in a single HTTP request, completely bypassing basic login rate limiters.
DDoS Amplification Attacks – Attackers abuse the pingback.ping method to turn thousands of vulnerable WordPress websites into botnet reflectors against targeted hosts.
Server Resource Exhaustion – Continuous scans and exploit probes against /xmlrpc.php consume CPU cycles, MySQL connections, and memory.
✨ Key Features in Version 1.4.1
🎯 One-Click Master Switch – Instantly enable or disable XML-RPC via an accessible, modern toggle.
🛡️ Direct Request Blocker (HTTP 403) – Immediately terminates direct hits to xmlrpc.php with an HTTP 403 Forbidden status before full WordPress initialization, saving precious server resources.
⚡ Pingback DDoS Protection – Explicitly unregisters pingback.ping and pingback.extensions.getPingbacks methods.
🧹 Header Footprint Cleanup – Automatically removes the Really Simple Discovery (RSD / EditURI) and Windows Live Writer (wlwmanifest) links from your website’s
🚫 X-Pingback Stripper – Safely removes the X-Pingback HTTP header from all server responses.
🧪 Live Diagnostics & Self-Test Tool – Test your live xmlrpc.php endpoint directly from the admin dashboard to verify that your site is protected.
⭐ Recommended Plugins Hub – A dedicated menu showcasing all plugins by community contributor Delower Hossain (@wpdelower) with one-click AJAX install, activate, and deactivate.
🎨 Ultra-Professional Admin Interface – Modern card design, real-time status banners, live search filters, and smooth responsive layout.
🌐 Translation Ready – Fully internationalized and compatible with multilingual setups.
🧹 Complete Clean Uninstall – Cleans up all database options and transients on both single-site and multisite networks.
🆕 What’s New in Version 1.4.1
🚀 Recommended Plugins Section: Brand new submenu and tab featuring all WordPress plugins by Delower Hossain (@wpdelower) with instant AJAX installation, activation, and deactivation.
🔒 HTTP 403 Direct Request Blocker: Halts requests to xmlrpc.php early to avoid CPU spikes during DDoS and brute force scans.
🛡️ Pingback Security Hardening: Blocks pingback methods specifically to eliminate amplification vectors.
🧹 DOM & Header Cleanup: Strips rsd_link and wlwmanifest_link from
🧪 Live XML-RPC Diagnostic Tester: Built-in connection tester to verify endpoint status.
🎨 Elevated UI: Enterprise-grade header, protection badges, real-time status banner, and quick filter controls.
⚡ Modular Architecture: Clean separation into SDXRPC_Core, SDXRPC_Admin, and SDXRPC_Recommended.
🎯 Perfect For
Security-conscious WordPress website owners.
Websites experiencing XML-RPC brute force or high server load.
Administrators who do not use the WordPress mobile app or legacy publishing tools.
Agencies and developers managing client sites needing zero-overhead protection.
⚠️ Important Note
Disabling XML-RPC may affect:
* WordPress mobile apps
* Jetpack (features requiring XML-RPC)
* Remote XML-RPC publishing clients
* Trackbacks and pingbacks
If you do not utilize these services, disabling XML-RPC is strongly recommended.
🤝 Contributing & Bug Reports
Bug reports and pull requests are welcome on GitHub.
💝 Support the Development
If you find this plugin helpful:
* ⭐ Rate it 5 stars on WordPress.org
* 💬 Check out our other plugins
Privacy Policy
Simple Disable XML-RPC does not:
* Collect or store personal user data
* Track user activity or use tracking cookies
* Send personal data to third parties
The plugin only queries the official WordPress.org Plugins API when an administrator visits the Recommended Plugins page to display plugin updates and metrics.
Credits
Developed with ❤️ by Delower Hossain & MonarchWP
Contributors:
* wpdelower
* monarchwp23
Special thanks to all our users and contributors!
