[wp-trac] [WordPress Trac] #36055: Filter xmlrpc_enabled only partly works

[WordPress Trac]

#36055: Filter xmlrpc_enabled only partly works
--------------------------+-----------------------
 Reporter:  markoheijnen  |       Owner:  dd32
     Type:  defect (bug)  |      Status:  assigned
 Priority:  normal        |   Milestone:  4.5
Component:  XML-RPC       |     Version:  2.9
 Severity:  normal        |  Resolution:
 Keywords:  needs-patch   |     Focuses:  docs
--------------------------+-----------------------

Comment (by mensmaximus):

 My suggestions

 Description:
 Use this filter to disable access to any xmlrpc method that needs login
 credentials. Contrary to its name the filter does not disable xmlrpc as a
 whole. Methods like pingback.ping or any other custom methods that do not
 need authentication will still be accessible after returning false from
 the filter. This is also true for the system capabilities from IXR.

 Example:
 add_filter( 'xmlrpc_enabled','__return_false' );

 Related filters:
 xmlrpc_methods - filter one or more methods
 xmlrpc_element_limit - set the maximum amount of xml elements within a
 xmlrpc request

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36055#comment:37>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform