[blogs-web/fpm] Disallow requests to xmlrpc



commit ed73844843ef81324f83a604ebde5647910bb601
Author: Bartłomiej Piotrowski <bpiotrowski gnome org>
Date:   Tue Oct 13 12:00:22 2020 +0200

    Disallow requests to xmlrpc

 nginx.conf | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)
---
diff --git a/nginx.conf b/nginx.conf
index 64c6d38..d61afef 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -67,7 +67,14 @@ http {
             log_not_found off;
             access_log off;
         }
-    
+
+       location = /xmlrpc.php {
+           deny all;
+           access_log off;
+           log_not_found off;
+           return 444;
+       }
+
         location ~ ^(/[^/]+/)?files/(.+) {
             try_files /wp-content/blogs.dir/$blogid/files/$2 /wp-includes/ms-files.php?file=$2 ;
             expires max;


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]