BulletProof Security vs Remove XML-RPC Methods

WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam… View Security feature highlights below. View BulletProof Security feature details under the FAQ help section below. Effective, Reliable & Easy to use WordPress Security Plugin. BulletProof Security is a proactive security plugin that automatically fixes 100+ known issues/conflicts with other plugins. * BPS Setup Wizard AutoFix BulletProof Security Installation and Setup Video Tutorial BulletProof Security Feature Highlights One-Click Setup Wizard Setup Wizard AutoFix (AutoWhitelist|AutoSetup|AutoCleanup) MScan Malware Scanner .htaccess Website Security Protection (Firewalls) Hidden Plugin Folders|Files Cron (HPF) Login Security & Monitoring JTC-Lite (Limited version of BPS Pro JTC Anti-Spam|Anti-Hacker) Idle Session Logout (ISL) Auth Cookie Expiration (ACE) DB Backup: Full|Partial DB Backups | Manual|Scheduled DB Backups | Email Zip Backups | Cron Delete Old Backups DB Table Prefix Changer Security Logging HTTP Error Logging FrontEnd|BackEnd Maintenance Mode Extensive System Info (System Info page) WordPress Automatic Update Options Force Strong Passwords (FSP) Send email alerts when new Plugin & Theme updates are available BulletProof Security Pro Feature Highlights One-Click Setup Wizard Setup Wizard AutoFix (AutoWhitelist|AutoSetup|AutoCleanup) AutoRestore Intrusion Detection & Prevention System (ARQ IDPS) Quarantine Intrusion Detection & Prevention System (ARQ IDPS) Real-time File Monitor (IDPS) MScan Malware Scanner DB Monitor Intrusion Detection System (IDS) DB Diff Tool: data comparison tool DB Backup: Full|Partial DB Backups | Manual|Scheduled DB Backups | Email Zip Backups | Cron Delete Old Backups DB Status & Info: extensive database status & info Plugin Firewall (IP Firewall): Automated Whitelisting & IP Address Updated in Real-time JTC Anti-Spam|Anti-Hacker Uploads Folder Anti-Exploit Guard (UAEG) .htaccess Website Security Protection (Firewalls) Hidden Plugin Folders|Files Cron (HPF) Custom php.ini Website Security Login Security & Monitoring w/Dashboard Alerting|Status Display & additional options/features Idle Session Logout (ISL) Auth Cookie Expiration (ACE) File|Folder Lock: File Locking | Detect & Lock Folders that were not created by you FrontEnd|BackEnd Maintenance Mode Security Logging HTTP Error Logging PHP Error Logging DB Table Prefix Changer Pro-Tools: 16 mini-plugins Heads Up Dashboard Status Display Extensive System Info (System Info page) WordPress Automatic Update Options Force Strong Passwords (FSP) Send email alerts when new Plugin & Theme updates are available View All BulletProof Security Pro Feature Details BulletProof Security Recommended Video Tutorials BulletProof Security Custom Code Video Tutorial BulletProof Security Security Log Video Tutorial Help Info For details about BulletProof Security plugin features and frequently asked questions see the BulletProof Security Plugin Frequently Asked Questions forum topic. Extensive Help Info can be found on the AIT-pro.com Forum website and by clicking the Question Mark Help buttons on BulletProof Security plugin pages.

Removes all WordPress methods from the XML-RPC API to increase security. It does more than just using the xmlrpc_enabled hook, because that is only used “To disable XML-RPC methods that require authentication”. Activating this plugin will also disable pingbacks, trackbacks, and Really Simple Discovery (RSD), because these rely on XML-RPC. It works with any webserver, because it does not use the .htaccess file. Testing the plugin From the command line you can test if the plugin is working correctly using curl. Replace the example.com link to match your website: curl -d ' system.listMethods ' https://example.com/xmlrpc.php This should only return the following methods: – system.multicall – system.listMethods – system.getCapabilities