Home / server / Questions / 744191
Accepted
MyFault
Asked: 2015-12-20 06:32:51 +0800 CST

Apache 2.4: Block access to xmlrpc.php of all domains

  • 772

I would like to block the access to xmlrpc.php

I created a file in

/etc/apache2/conf.d/block.conf

and added the following content:

<FilesMatch "(^\.|wp-config\.php|xmlrpc\.php|(?<!robots)\.txt|(liesmich|readme)\.*)"> 
Require all denied
</FilesMatch>

If I try any domain on the server I'm still getting access: example.com/xmlrpc.php

I would have expected an "Forbidden"-error.

apache-2.4

1 Answers

  1. Best Answer

    Your syntax is correct but it seems directory /etc/apache2/conf.d not included in /etc/apache2/apache.conf. So either you can include this file with below syntax or move block.conf in directory /etc/apache2/conf-enabled which included in apache(ubuntu) by default.

    open file /etc/apache2/apache2.conf in vim or your favroite editor and add below line at the end

    Include /etc/apache2/conf.d/block.conf

    Restart apache and check, it should be work

    • 8