xmlrpc_enabled
Filters whether XML-RPC methods requiring authentication are enabled.
Contrary to the way it's named, this filter does not control whether XML-RPC is fully enabled, rather, it only controls whether XML-RPC methods requiring authentication - such as for publishing purposes - are enabled.
Further, the filter does not control whether pingbacks or other custom endpoints that don't require authentication are enabled. This behavior is expected, and due to how parity was matched with the enable_xmlrpc UI option the filter replaced when it was introduced in 3.5.
To disable XML-RPC methods that require authentication, use:
add_filter( 'xmlrpc_enabled', '__return_false' );
For more granular control over all XML-RPC methods and requests, see the xmlrpc_methods and xmlrpc_element_limit hooks.
Usage
add_filter( 'xmlrpc_enabled', 'wp_kama_xmlrpc_enabled_filter' );
/**
* Function for `xmlrpc_enabled` filter-hook.
*
* @param bool $is_enabled Whether XML-RPC is enabled.
*
* @return bool
*/
function wp_kama_xmlrpc_enabled_filter( $is_enabled ){
// filter...
return $is_enabled;
}
- $is_enabled(true|false)
- Whether XML-RPC is enabled.
Default: true
Changelog
| Since 3.5.0 | Introduced. |
Where the hook is called
wp-includes/class-wp-xmlrpc-server.php 218
$this->is_enabled = apply_filters( 'xmlrpc_enabled', $is_enabled );