[wp-trac] [WordPress Trac] #21509: Enable XML-RPC by default and remove the option

WordPress Trac wp-trac at lists.automattic.com
Fri Sep 28 23:15:22 UTC 2012


#21509: Enable XML-RPC by default and remove the option
-------------------------+---------------------
 Reporter:  nacin        |       Owner:  nacin
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  3.5
Component:  XML-RPC      |     Version:
 Severity:  normal       |  Resolution:  fixed
 Keywords:  has-patch    |
-------------------------+---------------------
Changes (by dd32):

 * status:  reopened => closed
 * resolution:   => fixed


Comment:

 > it's also a matter about saving memory and resources you simply don't
 need if you don't use XML-RCP never...

 For what it's worth, '''Having XML-RPC enabled or disabled does not
 increase, nor decrease used system resources''' on a standard site. It's
 not a seperate "server", and the load it places on the web server be it
 enabled, or disabled does not vary. The only way that it can increase
 system resources if someone is actually using it (by that, I mean logging
 in with a correct user/password AND posting articles OR uploading media) -
 and in all cases, it should require less system resources than visiting
 your blog dashboard.

 furthermore, XML-RPC was always "enabled" it simply disallowed logins when
 it was "disabled", It was still used for Pingbacks and trackbacks, as well
 as by many plugins for inter-server communication.  The changes here are
 not a significant change in the way it works.

 Please open a new ticket if you'd like to discuss removing the feature
 entirely from core, but know in advance, that's not happening. Your best
 bet would be to block XML-RPC access through .htaccess directly and watch
 random plugins break.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/21509#comment:14>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list