How To Allow Access to XMLRPC for WordPress?

johanzarco1001 · August 28, 2019, 9:25am

My website is under some kind of bot traffic attac, spiking traffic on some URLs and from some particluar countries like USA. So I just set my site to use Cloudflare with these Challange captcha for all SSL/HTTPS traffic.

But as I remote publish posts via xmlrpc, which is not working anymore.

I tried allowing the IP address of VPS i remote post but no luck.
I’ve also created a page rule as:
Disable Security, Always Online, Security Level: Essentially Off

But still no luck

Could you please help me out here?

sandro · August 28, 2019, 9:41am

How did you do this?

johanzarco1001 · August 28, 2019, 9:57am

I just setup a firewall rule of when incoming requests matches SSL/HTTPS then shows challenge captcha.

sandro · August 28, 2019, 10:08am

In that firewall rule you could exclude the file in question.

johanzarco1001 · August 28, 2019, 10:17am

How do i do that, I tried but no luck or maybe I dont know how to do it.

sandro · August 28, 2019, 10:21am

Post a screenshot of your page rule and the full URL you want to exclude?

johanzarco1001 · August 28, 2019, 10:26am

That’s the screenshot mate

and url would be www.example.com/xmlrpc.php , site has ssl though

sandro · August 28, 2019, 10:33am

In that case you simply “and” your current expression with (http.request.uri.path ne "/xmlrpc.php")

johanzarco1001 · August 28, 2019, 10:41am

Oh man, I totally forgot about not equal condition!

Thanks a ton mate

system · September 27, 2019, 9:25am

This topic was automatically closed after 30 days. New replies are no longer allowed.