Title: REST XML-RPC Data Checker Author: Enrico Sorcinelli Published: Ноябрь 11, 2018-ж. Last modified: Август 4, 2022-ж. --- Плагиндерди издөө This plugin **hasn’t been tested with the latest 3 major releases of WordPress**. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress. ![](https://ps.w.org/rest-xmlrpc-data-checker/assets/icon-256x256.png?rev=1973092) # REST XML-RPC Data Checker Автору [Enrico Sorcinelli](https://profiles.wordpress.org/enricosorcinelli/) [Жүктөө](https://downloads.wordpress.org/plugin/rest-xmlrpc-data-checker.1.4.0.zip) * [Кенен маалымат](https://ky.wordpress.org/plugins/rest-xmlrpc-data-checker/#description) * [Сын-пикирлер](https://ky.wordpress.org/plugins/rest-xmlrpc-data-checker/#reviews) * [Орнотуу](https://ky.wordpress.org/plugins/rest-xmlrpc-data-checker/#installation) * [Development](https://ky.wordpress.org/plugins/rest-xmlrpc-data-checker/#developers) [Колдоо](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/) ## Сүрөттөө JSON REST API and XML-RPC API are powerful ways to remotely interact with WordPress. If you don’t have external applications that need to communicate with your WordPress instance using JSON REST API or XML-RPC API you should disable access to them for external requests. In the standard WordPress installation JSON REST API and XML-RPC API are enabled by default. In particular the REST API is turned on also for unlogged users. This means that your WordPress instance is potentially leaking data, for example anyone could be able to: * copy easily your published contents natively with the REST API (and not with a web crawler); * get the list of all users (with their ID, nickname and name); * retrieve other information that you didn’t want to be public (such as an unlisted published page or a saved media not yet used). Even if you could do the stuff by writing your own code using native filters, this plugin aims to help you to control JSON REST API and XML-RPC API accesses from the administration panel or programmatically by a simple API filter. ### Basic Features * **Disable REST API** interface for unlogged users. * **Disable JSONP support** on REST API. * **Add Basic Authentication** to REST API. * **Remove** REST `` tags, REST `Link` HTTP header and REST Really Simple Discovery (RSD) informations. * **Setup trusted users, IP/Networks and endpoints** for unlogged users REST requests. * **Change REST endpoint prefix**. * **Disable XML-RPC API** interface. * **Remove** `` to the Really Simple Discovery (RDS) informations. * **Remove** `X-Pingback` HTTP header. * **Setup trusted users, IP/Networks and methods** for XML-RPC requests. * **Show user’s access informations** in users list administration screen. ### Usage Once the plugin is installed you can control settings in the following ways: * Using the _Settings->REST XML-RPC Data Checker_ administration screen. * Programmatically, by using `rest_xmlrpc_data_checker_settings` filter (see below). ### API #### Hooks **`rest_xmlrpc_data_checker_settings`** Filters plugin settings values. ``` apply_filters( 'rest_xmlrpc_data_checker_settings', array $settings ) ``` **`rest_xmlrpc_data_checker_admin_settings`** Filter allowing to display or not the plugin settings page in the administration. ``` apply_filters( 'rest_xmlrpc_data_checker_admin_settings', boolean $display ) ``` **`rest_xmlrpc_data_checker_rest_error`** Filter JSON REST authentication error after plugin checks. ``` apply_filters( 'rest_xmlrpc_data_checker_rest_error', WP_Error|boolean $result ) ``` **`xmlrpc_before_insert_post`** Filter XML-RPC post data to be inserted via XML-RPC before to insert post into database. ``` apply_filters( 'xmlrpc_before_insert_post', array|IXR_Error $content_struct, WP_User $user ) ``` ## Скриншоттор * [[ * The JSON REST settings section. * [[ * The XML-RPC settings section. * [[ * The Options settings section. * [[ * Enable XML-RPC and REST interfaces on user profile/user edit pages (available only for users with `edit_users` capability). * [[ * User list administration screen. ## Орнотуу This section describes how to install the plugin and get it working. 1. Upload the plugin files to the `/wp-content/plugins/rest-xmlrpc-data-checker` directory, or install the plugin through the WordPress _Plugins_ screen directly. 2. Activate the plugin through the _Plugins_ screen in WordPress. ## FAQ.KG ### Does it work with Gutenberg? Yes ### Does it work on Multisite? Yes ### How do I make REST requests using Basic Authentication? In the _REST_ tab of plugin settings page you have to: * check **Disable REST API interface for unlogged users** option * select **Use Basic Authentication** in the _Authentication_ section * select users whom you want to grant REST access * save changes This way, in HTTP REST external requests, users have to add `Authorization` HTTP header. In order to generate the `Authorization` HTTP header to use with Basic Authentication you simply have to base64 encode the username and password separated by a colon. Here is an example in PHP: ``` $header = 'Authorization: Basic ' . base64_encode( 'my-user:my-password' ); ``` [Here you can see several examples](https://gist.github.com/enrico-sorcinelli/d33b6889888e95f710bc50a2090a25cf) in a variety of language. Note that the Basic Authentication requires sending your username and password with every request, and should only be used over SSL-secured connections or for local development and testing. Without SSL you are strongly encouraged to to turn off Basic Authentication in production environments. ## Сын-пикирлер ![](https://secure.gravatar.com/avatar/4a71fe5d565a3d116bcf0065703d879c19e8926df115143d8a55cbbb0be7a099? s=60&d=retro&r=g) ### 󠀁[Great, but expandable](https://wordpress.org/support/topic/great-but-expandable/)󠁿 [Oleg Meglin](https://profiles.wordpress.org/omeglin/) Февраль 14, 2023-ж. This really is a great plugin. The only feature I would love to see is WP-CLI support. ![](https://secure.gravatar.com/avatar/7768737ff2111b2e1f641880360e52a26bc939b307f993cbeabc56b1fc51579d? s=60&d=retro&r=g) ### 󠀁[Useful plugin](https://wordpress.org/support/topic/useful-plugin-919/)󠁿 [bro007](https://profiles.wordpress.org/bro007/) Ноябрь 25, 2022-ж. A very useful plugin that works well. The plugin helped close access to the JSON REST API for unregistered users, and also nullified attacks on XML-RPC! ![](https://secure.gravatar.com/avatar/6ce09e6d70ecdc00d6e15c4b86365e06cc8a86f7284c53438bd71e0859101680? s=60&d=retro&r=g) ### 󠀁[Works fine](https://wordpress.org/support/topic/works-fine-1289/)󠁿 [Envox d.o.o.](https://profiles.wordpress.org/envox/) Февраль 24, 2021-ж. Having more options that I expected (i.e. enable/disable on user level). Thanks for nice plugin. [ Read all 3 reviews ](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/reviews/) ## Contributors & Developers “REST XML-RPC Data Checker” is open source software. The following people have contributed to this plugin. Мүчөлөрү * [ Enrico Sorcinelli ](https://profiles.wordpress.org/enricosorcinelli/) [Translate “REST XML-RPC Data Checker” into your language.](https://translate.wordpress.org/projects/wp-plugins/rest-xmlrpc-data-checker) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/rest-xmlrpc-data-checker/), check out the [SVN repository](https://plugins.svn.wordpress.org/rest-xmlrpc-data-checker/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/rest-xmlrpc-data-checker/) by [RSS](https://plugins.trac.wordpress.org/log/rest-xmlrpc-data-checker/?limit=100&mode=stop_on_copy&format=rss). ## Өзгөртүүлөр For REST XML-RPC Data Checker changelog, please see [the Releases page on GitHub](https://github.com/enrico-sorcinelli/rest-xmlrpc-data-checker/releases). ## Мета * Нуска **1.4.0** * Акыркы жаңыртуу **4 жыл мурун** * Активдүү орнотуулар **1,000+** * WordPress нускасы ** 4.4 же андан жогору ** * Tested up to **6.0.11** * PHP нускасы ** 5.2.4 же андан жогору ** * Тил * [English (US)](https://wordpress.org/plugins/rest-xmlrpc-data-checker/) * Тег: * [api](https://ky.wordpress.org/plugins/tags/api/)[JSON](https://ky.wordpress.org/plugins/tags/json/) [rest](https://ky.wordpress.org/plugins/tags/rest/)[security](https://ky.wordpress.org/plugins/tags/security/) [xmlrpc](https://ky.wordpress.org/plugins/tags/xmlrpc/) * [Advanced View](https://ky.wordpress.org/plugins/rest-xmlrpc-data-checker/advanced/) ## Рейтинг 5 out of 5 stars. * [ 3 5-star reviews ](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/reviews/) ## Мүчөлөрү * [ Enrico Sorcinelli ](https://profiles.wordpress.org/enricosorcinelli/) ## Колдоо Комментарийлер барбы? Жардам керекпи? [Колдоо форумун көрүү](https://wordpress.org/support/plugin/rest-xmlrpc-data-checker/)