Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #21509, comment 18


Ignore:
Timestamp:
10/26/2014 07:46:18 PM (12 years ago)
Author:
andrebron

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #21509, comment 18

    initial v1  
    33http://www.computerweekly.com/news/2240215998/More-the-162000-WordPress-sites-used-in-DDoS-attack
    44
    5 Enabling xml-rpc by default has drastically affected the volume of DDOS abuse through xml-rpc on wp sites.  I understand it is relatively widely used, however, most wp sites (I believe) do not use pingbacks or wp mobile app by default.  I believe it should be reverted back to disabled by default and have plugins and remote services that rely on this to enable it either automagically upon install or in their installation instructions.
     5Enabling xml-rpc by default has drastically affected the volume of DDOS abuse through xml-rpc through wp sites.  I understand it is relatively widely used, however, most wp sites (I believe) do not use pingbacks or wp mobile app by default.  I believe it should be reverted back to disabled by default and have plugins and remote services that rely on this to enable it either automagically upon install or in their installation instructions.
    66
    77I personally found 1 site I manage that has been abused through xml-rpc.php.