Add new template with Wordpress XMLRPC Blocked by default (Nignx Only) (#4168)

Hello, in the latest update there is this item * Add new template with Wordpress XMLRPC Blocked by default (Nignx Only) (#4168).
I checked the Wordress templates for Nginx wordpress.tpl and did not see any changes. Where can I read more about what has changed and where? Thank you

Nginx+PHP 8.2 installed

The new added template name is wordpress-disable-xmlrpc

# cd /usr/local/hestia/data/templates/web/nginx/php-fpm/
# diff -u wordpress.tpl wordpress-disable-xmlrpc.tpl
--- wordpress.tpl       2023-11-27 23:45:50.791789734 +0100
+++ wordpress-disable-xmlrpc.tpl        2023-11-27 23:45:50.791789734 +0100
@@ -44,6 +44,13 @@
                        return 404;
                }
 
+               location = /xmlrpc.php {
+                               deny all;
+                               access_log off;
+                               log_not_found off;
+                               return 403;
+               }
+
                location ~ [^/]\.php(/|$) {
                        try_files $uri =404;
2 Likes

Thank you, sorry I looked in the wrong place, I’ll add Nginx for websites to my template.
Thank you

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.