Support

Admin Tools for WordPress

#31161 – Disable XML-RPC

Posted in ‘Akeeba Admin Tools for WordPress’
This is a public ticket. Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Wednesday, 27 March 2019 09:55 CDT
Hi - I've been getting a lot of "failed login" attempts on my site (gasfireplacedoctor.ca) so I went in and looked at the logs noting that the file causing the failed login attempts was xmlrpc.php.

I took a look at the documentation on Admin Tools and saw it was possible to configure WAF to disable xmlrpc.php. I did this and immediately was met with the following error.

Fatal error: Uncaught Error: Call to undefined function add_filter() in /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/app/plugins/waf/feature/disablexmlrpc.php:33 Stack trace: #0 /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/app/plugins/waf/admintools/main.php(563): AtsystemFeatureDisablexmlrpc->onSystem() #1 /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/app/plugins/waf/admintools/main.php(124): plgSystemAdmintools->runFeature('onSystem', Array) #2 /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/helpers/runplugins.php(80): plgSystemAdmintools->onSystem() #3 /home/gasfireplacedr/public_html/admintools-waf.php(55): require('/home/gasfirepl...') #4 {main} thrown in /home/gasfireplacedr/public_html/wp-content/plugins/admintoolswp/app/plugins/waf/feature/disablexmlrpc.php on line 33

I can no longer access my site (front or back) so need immediate help to disable. I had just updated AdminTools to the latest version.

Thanks

Rikki
zeusrw
Wednesday, 27 March 2019 09:57 CDT
I have been able to regain access to the site by renaming the "disablexmlrpc.php" plugin file (via FTP).

I was able to disable the WAF feature and then rename the file back so all is good other than the fact that this enabling the WAF feature (disabling xmlrpc) breaks my site.

zeusrw
Wednesday, 27 March 2019 11:20 CDT
Hi,

just to double check: your site is ok now? Do you need further assistance?
Please page me ASAP, since I'm close to the end of my shift and in about an hour I won't be able to help you anymore.

That said, I'll take a look and investigate it, I'll get back to you shortly.


Davide Tampellini

Developer and Support Staff



Italian: native

English: good



Please keep in mind my timezone and cultural differences when reading my replies. Thank you!



tampe125
Wednesday, 27 March 2019 11:28 CDT
Hi Davide

Yes the site is back up and running but I would like to be able to use the disable xmlrpc feature without the site crashing.

Perhaps others are having this issue.

Thanks

Rikki
zeusrw
Thursday, 28 March 2019 03:19 CDT
Thanks for the report!
There was indeed a problem with such feature, can you please install the latest dev release and try again?
That should fix your issue.


Davide Tampellini

Developer and Support Staff



Italian: native

English: good



Please keep in mind my timezone and cultural differences when reading my replies. Thank you!



tampe125
Saturday, 27 April 2019 17:17 CDT
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.
system
This ticket is closed, therefore read-only. You can no longer reply to it. If you need to provide more information, please open a new ticket and mention this ticket's number.

Cookies Notification - Action required

This website uses cookies to provide user authentication and improve your user experience. Please indicate whether you consent to our site placing these cookies on your device. You can change your preference later, from the controls which will be made available to you at the bottom of every page of our site.