search

spiritedmedia / systems

Code and documentation for building, deploying, and serving code.
1 stars 1 forks source link

Block XML-RPC Requests #21

Closed kingkool68 closed 7 years ago

kingkool68 commented 7 years ago

We don't use it and it opens up a vector for resource draining:

Edit /var/www/spiritedmedia.com/conf/nginx/protect-system-files.conf:

# Block XML-RPC requests
location = /xmlrpc.php {
  deny all;
  access_log off;
  log_not_found off;
}