Business Blogging Pros: Why I Don't Link Jetpack

February 05, 2015

Why I Don't Link Jetpack

Jetpack is a wonderful Press plugin offered by WordPress.com. It provides a lot of features but has one big fault: It relies up XMLRPC.

XMLRPC is a computer-to-computer communications method. The WordPress iPhone app uses it to allow you to administer your WordPress website or blog remotely from your iPhone or iPad. The big problems is that the XMLRPC code in WordPress is a big entry vector for hackers.

As a result, I recommend adding this code to the .htaccess file (located in the root folder of your website):

<files xmlrpc.php="">
Order Deny,Allow
Deny from all
</files>

Feb 5, 2015 11:58:36 AM | Wordpress Security

The comments to this entry are closed.

I saw the Apple Watch and then... I saw the Apple Watch announcement and was so impressed that I immediately ordered a real watch. No, it's not a Rolex. I's a Steinhart. German engineered with a Swiss movement, but that's not the point. I have not worn...

You Can No Longer Ignore Mobile You can no longer ignore mobile. I'm starting to see notifications like this one forsome of my blogs: This should be an early warning that it is time to begin migrating your website/blog to a responsive theme.