Support

Admin Tools for WordPress

#31161 Disable XML-RPC

Posted in ‘Admin Tools for WordPress’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

WordPress version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by on Saturday, 27 April 2019 17:17 CDT

zeusrw
Hi - I've been getting a lot of "failed login" attempts on my site (gasfireplacedoctor.ca) so I went in and looked at the logs noting that the file causing the failed login attempts was xmlrpc.php.

I took a look at the documentation on Admin Tools and saw it was possible to configure WAF to disable xmlrpc.php. I did this and immediately was met with the following error.

Fatal error: Uncaught Error: Call to undefined function add_filter() in /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/app/plugins/waf/feature/disablexmlrpc.php:33 Stack trace: #0 /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/app/plugins/waf/admintools/main.php(563): AtsystemFeatureDisablexmlrpc->onSystem() #1 /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/app/plugins/waf/admintools/main.php(124): plgSystemAdmintools->runFeature('onSystem', Array) #2 /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/helpers/runplugins.php(80): plgSystemAdmintools->onSystem() #3 /home/gasfireplacedr/public_html/admintools-waf.php(55): require('/home/gasfirepl...') #4 {main} thrown in /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/app/plugins/waf/feature/disablexmlrpc.php on line 33

I can no longer access my site (front or back) so need immediate help to disable. I had just updated AdminTools to the latest version.

Thanks

Rikki

zeusrw
I have been able to regain access to the site by renaming the "disablexmlrpc.php" plugin file (via FTP).

I was able to disable the WAF feature and then rename the file back so all is good other than the fact that this enabling the WAF feature (disabling xmlrpc) breaks my site.

tampe125
Akeeba Staff
Hi,

just to double check: your site is ok now? Do you need further assistance?
Please page me ASAP, since I'm close to the end of my shift and in about an hour I won't be able to help you anymore.

That said, I'll take a look and investigate it, I'll get back to you shortly.

Davide Tampellini

Developer and Support Staff

๐Ÿ‡ฎ๐Ÿ‡นItalian: native ๐Ÿ‡ฌ๐Ÿ‡งEnglish: good โ€ข ๐Ÿ• My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

zeusrw
Hi Davide

Yes the site is back up and running but I would like to be able to use the disable xmlrpc feature without the site crashing.

Perhaps others are having this issue.

Thanks

Rikki

tampe125
Akeeba Staff
Thanks for the report!
There was indeed a problem with such feature, can you please install the latest dev release and try again?
That should fix your issue.

Davide Tampellini

Developer and Support Staff

๐Ÿ‡ฎ๐Ÿ‡นItalian: native ๐Ÿ‡ฌ๐Ÿ‡งEnglish: good โ€ข ๐Ÿ• My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.