Sunday, January 25, 2026

how to block xmlrpc.php Apache server (ubuntu)

 Oper this file : 

vi /etc/apache2/conf-available/disable-xmlrpc.conf

and paste the below content:


<Files "xmlrpc.php">
    Require all denied
</Files>

save and exit

then run these commands, 


sudo a2enconf disable-xmlrpc

and
sudo systemctl reload apache2

Try accessing:
https://yourdomain.com/xmlrpc.php

You should see:
403 Forbidden 

 

like : 

root@akwal:~# vi /etc/apache2/conf-available/disable-xmlrpc.conf

 <Files "xmlrpc.php">
    Require all denied
</Files>

root@akwal:~#sudo a2enconf disable-xmlrpc
root@akwal:~#sudo systemctl reload apache2
 

0 comments: