xmlrpc.php vs mod_security

[mikussikus]

I have an issue with xmlrpc.php becuase I disabled this option in wordpress add_filter( 'xmlrpc_enabled', '__return_false' ); but I still see in ModSecurity logs POST /xmlrpc.php HTTP/1.1. I can't understand why sometimes it's has another ID rules.

On page

http://xmlrpc.epizy.com/?i=1

I checked that if xmlrpc.php is disable on ma page.

 

[zEitEr]

Hello,

Your request seems to be too ambiguous. Will you clarify your thoughts please. This might help you to get a reply from users faster.

 

[mikussikus]

Hi,

In the ModSecurity log I see an xmlrpc.php juice entry, so I disabled xmlrpc in wordpress for the domain in question, but the logs still show up.

 

[Ohm J]

disable in web application, doesn't meant it disabled checking from modsecurity. You should disabled rules at Modsecurity too.