wordpress - 如何通过 XML-RPC 保护 WordPress 免受 DDoS 攻击

Question

我在谷歌搜索中发现的最好的是

add_filter( ‘xmlrpc_methods’, function( $methods ) {
   unset( $methods['pingback.ping'] );
   return $methods;
} );

还有比阻止 pingback.ping 更好的解决方案吗？

Answer 1

来自Protect WordPress from DDoS attack on Pingbacks :

They also offered two solutions for stopping your WordPress website from being used to attack others. The third one below is my suggestion.

1. Turn off / disable notifications in your WordPress admin settings

2. Add the following code to your functions.php file (not for novices)

   add_filter( ‘xmlrpc_methods’, function( $methods ) {
      unset( $methods['pingback.ping'] );
      return $methods;
   } );