Title: Remove & Disable XML-RPC Pingback Author: cleverplugins Published: 2014 年 3 月 18 日 Last modified: 2023 年 7 月 24 日 --- 搜索插件 ![](https://ps.w.org/remove-xmlrpc-pingback-ping/assets/banner-772x250.png?rev=877225) **该插件尚未通过WordPress的最新3个主要版本进行测试**。 当与较新版本的WordPress一起 使用时，可能不再受到维护或支持，并且可能会存在兼容性问题。 ![](https://ps.w.org/remove-xmlrpc-pingback-ping/assets/icon-256x256.png?rev=2065246) # Remove & Disable XML-RPC Pingback 作者：[cleverplugins](https://profiles.wordpress.org/cleverplugins/) [下载](https://downloads.wordpress.org/plugin/remove-xmlrpc-pingback-ping.1.6.zip) * [详情](https://cn.wordpress.org/plugins/remove-xmlrpc-pingback-ping/#description) * [评价](https://cn.wordpress.org/plugins/remove-xmlrpc-pingback-ping/#reviews) * [安装](https://cn.wordpress.org/plugins/remove-xmlrpc-pingback-ping/#installation) * [开发进展](https://cn.wordpress.org/plugins/remove-xmlrpc-pingback-ping/#developers) [支持](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/) ## 描述 Prevent your WordPress site from participating and being a victim of pingback denial of service attacks. **After activation the plugin automatically disables XML-RPC. There’s no need to configure anything.** By disabling the XML-RPC pingback you’ll: * lower your server CPU usage * prevent malicious scripts from using your site to run pingback denial of service attacks* prevent malicious scripts to run denial of service attacks on your site via pingback From sucuri.net: > Any WordPress site with Pingback enabled (which is on by default) can be used > in DDOS attacks against other sites. #### Learn More * [How To Prevent WordPress From Participating In Pingback Denial of Service Attacks](http://wptavern.com/how-to-prevent-wordpress-from-participating-in-pingback-denial-of-service-attacks)– wptavern.com * [More Than 162,000 WordPress Sites Used for Distributed Denial of Service Attack](http://blog.sucuri.net/2014/03/more-than-162000-wordpress-sites-used-for-distributed-denial-of-service-attack.html)– sucuri.net * [xmlrpc.php and Pingbacks and Denial of Service Attacks, Oh My!](http://hackguard.com/xmlrpc-php-ping-backs-hackers-denial-service-attacks)– hackguard.com #### Is Your Site Attacking Others? Use [Sucuri’s WordPress DDOS Scanner](http://labs.sucuri.net/?is-my-wordpress-ddosing) to check if your site is DDOS’ing other websites #### Why Not Just Disable XMLRPC Altogether? Yes, you can choose to do that, but if you use popular plugins like JetPack (that use XMLRPC) then those plugins will stop working. That is why this small plugin exists. ## 屏幕截图 * [[ * Postman: Without the plugin installed * [[ * Postman: With the plugin installed ## 安装 #### Using The WordPress Dashboard 1. Navigate to the ‘Add New’ in the plugins dashboard 2. Search for ‘Remove XMLRPC Pingback Ping’ 3. Click ‘Install Now’ 4. Activate the plugin on the Plugin dashboard #### Uploading in WordPress Dashboard 1. Navigate to the ‘Add New’ in the plugins dashboard 2. Navigate to the ‘Upload’ area 3. Select `remove-xmlrpc-pingback-ping.zip` from your computer 4. Click ‘Install Now’ 5. Activate the plugin in the Plugin dashboard #### Using FTP 1. Download `remove-xmlrpc-pingback-ping.zip` 2. Extract the `remove-xmlrpc-pingback-ping` directory to your computer 3. Upload the `remove-xmlrpc-pingback-ping` directory to the `/wp-content/plugins/` directory 4. Activate the plugin in the Plugin dashboard ## 常见问题 ### Is My Site Attacking Others? It could be! Use [Sucuri’s WordPress DDOS Scanner](https://labs.sucuri.net/?is-my-wordpress-ddosing) to check if your site is DDOS’ing other websites ## 评价 ![](https://secure.gravatar.com/avatar/aa1d80e1e2b3737baf8abb7067d1ce2711c7df9ffa720525841e8ac2a69012a2? s=60&d=retro&r=g) ### 󠀁[So many annoying admin notices …](https://wordpress.org/support/topic/so-many-annoying-admin-notices/)󠁿 [mklusak](https://profiles.wordpress.org/mklusak/) 2021 年 12 月 1 日 1 回复 I am removing this plugin from my sites, because WP admin is constantly full of huge “join our newsletter” (…) admin notices. Yeah, no, thank you … ![](https://secure.gravatar.com/avatar/ca84b7cc8545707bca092d1fe0dcadc0b8063cc91a85632fdd00e6b5e28586fa? s=60&d=retro&r=g) ### 󠀁[Just what I needed](https://wordpress.org/support/topic/just-what-i-needed-1051/)󠁿 [Ben Roberts](https://profiles.wordpress.org/bouncingsprout/) 2020 年 12 月 10 日 Great plugin, super easy to install and just sits there doing it’s job. Very light as well, so has no effects that I could see, on site speed or memory usage. Can’t think of a reason why you wouldn’t be using this to be honest. Thanks for developing it! ![](https://secure.gravatar.com/avatar/f6d83c88833b7cfb0e8cdc1d053effd6656baaafba8b60f620eeaf4d37ae637e? s=60&d=retro&r=g) ### 󠀁[Not working](https://wordpress.org/support/topic/not-working-3457/)󠁿 [Kekeli](https://profiles.wordpress.org/ka2id/) 2020 年 12 月 1 日 1 回复 Still getting a ton of login attempts ![](https://secure.gravatar.com/avatar/6ebfbb4579691f04cb48955a06f567525aec599099529b9aaab94866fc4b5337? s=60&d=retro&r=g) ### 󠀁[Great plugin](https://wordpress.org/support/topic/great-plugin-21479/)󠁿 [kayasch](https://profiles.wordpress.org/kayasch/) 2019 年 4 月 9 日 It was beneficial, helped me a lot! ![](https://secure.gravatar.com/avatar/5be9c7cc61a32161185e2efabf3690e600756f7445d9b3944c3b761a7762c9ad? s=60&d=retro&r=g) ### 󠀁[No longer effective](https://wordpress.org/support/topic/no-longer-effective/)󠁿 [skyhound](https://profiles.wordpress.org/skyhound/) 2016 年 9 月 3 日 Unfortunately, it looks like this plugin is not effective anymore as I’ve had a few sites attacked with this plugin installed. Trying to manage though .htaccess now. Wish someone would write something new to fix this. [ 阅读所有7条评价 ](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/reviews/) ## 贡献者及开发者 「Remove & Disable XML-RPC Pingback」是开源软件。 以下人员对此插件做出了贡献。 贡献者 * [ cleverplugins ](https://profiles.wordpress.org/cleverplugins/) * [ Lars Koudal ](https://profiles.wordpress.org/lkoudal/) [帮助将「Remove & Disable XML-RPC Pingback」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/remove-xmlrpc-pingback-ping) ### 对开发感兴趣吗? 您可以[浏览代码](https://plugins.trac.wordpress.org/browser/remove-xmlrpc-pingback-ping/)， 查看[SVN仓库](https://plugins.svn.wordpress.org/remove-xmlrpc-pingback-ping/)，或 通过[RSS](https://plugins.trac.wordpress.org/log/remove-xmlrpc-pingback-ping/?limit=100&mode=stop_on_copy&format=rss) 订阅[开发日志](https://plugins.trac.wordpress.org/log/remove-xmlrpc-pingback-ping/)。 ## 更新日志 #### 1.6 * 2023/07/24 * Added filter to check for and remove ‘X-Pingback’ header if necessary. * Added settings page * Tested up to WP 6.2 #### 1.5 * Code hardening. * Verified compatibility with WP 5.9.3 #### 1.4 * New: Added a count under “Settings -> General” to see number of blocked attempts. * Tested up to WP 5.8 * Added newsletter admin notice. * Code hardening. #### 1.3 * 2020/09/21 * Cleaned up code * Added counter for number of times the pingback method was blocked. * Tested with WP 5.5.1 * 28,595 downloads #### 1.1 * 2019/04/09 * version bump #### 1.0.0 * First release ## 额外信息 * 版本 **1.6** * 最后更新：**3 年前** * 活跃安装数量 **9,000+** * WordPress 版本 ** 5.2 或更高版本 ** * 已测试的最高版本为 **6.3.8** * PHP 版本 ** 5.6 或更高版本 ** * 语言 * [English (US)](https://wordpress.org/plugins/remove-xmlrpc-pingback-ping/) * 标签 * [ping](https://cn.wordpress.org/plugins/tags/ping/)[pingback](https://cn.wordpress.org/plugins/tags/pingback/) [xml-rpc](https://cn.wordpress.org/plugins/tags/xml-rpc/)[xmlrpc](https://cn.wordpress.org/plugins/tags/xmlrpc/) * [高级视图](https://cn.wordpress.org/plugins/remove-xmlrpc-pingback-ping/advanced/) ## 评级 3 星（最高 5 星）。 * [ 3 条 5 星评价 ](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/reviews/?filter=5) * [ 0 条 4 星评价 ](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/reviews/?filter=4) * [ 0 条 3 星评价 ](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/reviews/?filter=3) * [ 0 条 2 星评价 ](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/reviews/?filter=2) * [ 3 条 1 星评价 ](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/reviews/#new-post) [查看全部评论](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/reviews/) ## 贡献者 * [ cleverplugins ](https://profiles.wordpress.org/cleverplugins/) * [ Lars Koudal ](https://profiles.wordpress.org/lkoudal/) ## 支持 有话要说吗？是否需要帮助？ [查看支持论坛](https://wordpress.org/support/plugin/remove-xmlrpc-pingback-ping/)