REST XML-RPC Data Checker vs Social Pulse

JSON REST API and XML-RPC API are powerful ways to remotely interact with WordPress. If you don’t have external applications that need to communicate with your WordPress instance using JSON REST API or XML-RPC API you should disable access to them for external requests. In the standard WordPress installation JSON REST API and XML-RPC API are enabled by default. In particular the REST API is turned on also for unlogged users. This means that your WordPress instance is potentially leaking data, for example anyone could be able to: copy easily your published contents natively with the REST API (and not with a web crawler); get the list of all users (with their ID, nickname and name); retrieve other information that you didn’t want to be public (such as an unlisted published page or a saved media not yet used). Even if you could do the stuff by writing your own code using native filters, this plugin aims to help you to control JSON REST API and XML-RPC API accesses from the administration panel or programmatically by a simple API filter. Basic Features Disable REST API interface for unlogged users. Disable JSONP support on REST API. Add Basic Authentication to REST API. Remove REST tags, REST Link HTTP header and REST Really Simple Discovery (RSD) informations. Setup trusted users, IP/Networks and endpoints for unlogged users REST requests. Change REST endpoint prefix. Disable XML-RPC API interface. Remove to the Really Simple Discovery (RDS) informations. Remove X-Pingback HTTP header. Setup trusted users, IP/Networks and methods for XML-RPC requests. Show user’s access informations in users list administration screen. Usage Once the plugin is installed you can control settings in the following ways: Using the Settings->REST XML-RPC Data Checker administration screen. Programmatically, by using rest_xmlrpc_data_checker_settings filter (see below). API Hooks rest_xmlrpc_data_checker_settings Filters plugin settings values. apply_filters( 'rest_xmlrpc_data_checker_settings', array $settings ) rest_xmlrpc_data_checker_admin_settings Filter allowing to display or not the plugin settings page in the administration. apply_filters( 'rest_xmlrpc_data_checker_admin_settings', boolean $display ) rest_xmlrpc_data_checker_rest_error Filter JSON REST authentication error after plugin checks. apply_filters( 'rest_xmlrpc_data_checker_rest_error', WP_Error|boolean $result ) xmlrpc_before_insert_post Filter XML-RPC post data to be inserted via XML-RPC before to insert post into database. apply_filters( 'xmlrpc_before_insert_post', array|IXR_Error $content_struct, WP_User $user )

Social Pulse … is a WP plugin showing follower counts from YouTube, Facebook, X, and Steam. It uses Leader/Follower modes to reduce API requests. General Idea Social Pulse retrieves follower numbers from multiple platforms and displays them via WordPress shortcodes. In Leader mode, the plugin directly makes API requests to obtain the latest values, which are then cached and exposed at a dedicated URL. In Follower mode, the plugin skips direct API calls and instead retrieves the pre-fetched data from the Leader instance. * Screenshot Leader-Mode * Screenshot Follower-Mode Try it out! Download the ZIP Navigate to the WordPress Playground Go to the “Plugins” page Click “Add New Plugin” Click “Upload Plugin” Select the ZIP and click “Install Now” Click “Activate Plugin” The plugin should now be visible at the bottom of the WordPress menu. Leader and Follower Mode Leader Mode: In this mode, Social Pulse performs the actual API calls to get the latest follower counts and caches these values. The current values are also exposed at a special URL (e.g. /social-counters/values), which can be used by Follower instances. Follower Mode: Follower mode is designed to minimize API calls on installations that do not need to fetch data directly. Instead of making API requests, the plugin retrieves the cached values from the Leader URL. This is particularly useful when dealing with strict API rate limits. How to Use Social Pulse in Leader Mode Activate Leader Mode: In the plugin settings, select Leader as the mode. Configure API Credentials: Enter your API keys, tokens, and IDs for YouTube, Facebook, X, and Steam in the respective fields. Save Changes: Make sure to save your settings. Retrieve Values: The plugin will automatically fetch and cache the current follower counts. The exposed values URL (displayed on the settings page) can be used by Follower installations. How to Use Social Pulse in Follower Mode Activate Follower Mode: In the plugin settings, select Follower as the mode. Enter Leader URL: Provide the URL from a Leader installation (the URL where the leader exposes its cached values). Save Changes: Save your settings to store the Leader URL. Automatic Data Fetch: The plugin will now retrieve the follower values from the Leader URL every 5 minutes or whenever manually tested. Direct API requests are disabled in this mode. Where to Find the Necessary Information For each platform, you will need to obtain API keys, tokens, or IDs. Here are some helpful links to get you started: YouTube: YouTube Data API v3 – Getting Started (Find your API key and channel ID here.) Facebook: Facebook for Developers, Long Lasting Tokens for Clients (Learn how to create an app, get an access token, and locate your Page ID.) X (formerly Twitter): X Developer Platform, Generating and Using an App-Only Bearer-Token (Obtain a Bearer Token and set up your developer credentials.) Steam: Steam Web API Documentation (Find information on obtaining your Steam App ID and using the API.) External services WordPress guidelines require that the use of external services is clearly statet. Although this is the sole purpose of this plugin I hereby state the following external service usage: * Youtube API (https://www.googleapis.com/youtube/v3/channels) The Youtube API is used to receive the youtube followers of the account the “Youtube API Key” belongs to. * Steam API (https://api.steampowered.com/ISteamUserStats/GetNumberOfCurrentPlayers/v1/) The Steam API is used to receive the current players of the Steam app with the “Steam App ID” you enter. * Facebook API (https://graph.facebook.com/v22.0/) The Facebook API is used to gather fan or follower count of the facbook page with the “Facebook Page ID” you enter. * X API (https://api.twitter.com/2/users/by/username/) The X API is used to gather the follower count of the account with the “X Username” you enter.