---
title: "xmlrpc.php POST requests to WordPress methods"
canonical_url: "https://www.zone.eu/support/kb/xmlrpcphp-post-requests-to-wordpress-methods/"
post_type: "ht_kb"
published: "2024-10-25T10:46:27+00:00"
modified: "2024-11-12T13:36:09+00:00"
language: "en"
author: "silver"
taxonomies:
  ht_kb_category:
    - name: "Apache"
      url: "https://www.zone.eu/support/kb-categories/apache-en/"
    - name: "Technical"
      url: "https://www.zone.eu/support/kb-categories/technical-en/"
    - name: "Wordpress"
      url: "https://www.zone.eu/support/kb-categories/wordpress-en/"
  ht_kb_tag:
    - name: "wordpress"
      url: "https://www.zone.eu/support/kb-tags/wordpress-en/"
    - name: "xmlrpc.php"
      url: "https://www.zone.eu/support/kb-tags/xmlrpcphp/"
    - name: "Wordpress methods"
      url: "https://www.zone.eu/support/kb-tags/wordpress-methods/"
    - name: "directive block"
      url: "https://www.zone.eu/support/kb-tags/directive-block/"
---

# xmlrpc.php POST requests to WordPress methods

Protection has been added to Zone [webhosting](https://www.zone.eu/web-hosting/) websites to block POST requests to files named `xmlrpc.php` that contain a WordPress (`wp.*`) method. The purpose of the xmlrpc.php POST requests restriction is to protect the homepage from bots that try to guess passwords.

Corresponding requests will return `Error 403: Forbidden`.
Apache apache.ssl.error.log will display a following error message:

```
ModSecurity: Access denied with code 403 ... [msg "Blocked wp.* payload in XML-RPC"] [hostname "example.com"] [uri "/xmlrpc.php"] ...
```

If desired, it is possible to remove the corresponding block from your server.

In order to remove this xmlrpc.php POST requests restriction, you need to log into [`My Zone`](https://eu.myzone.app/) control panel and in the `Webserver` section of the web hosting management under `Main Domain Setting`s -> `modify` -> `Apache Directives` -> in the `add directive block` window, add a directive block with the following content:

```
<IfModule mod_security2.c>
  SecRuleRemoveById 60020 60021
</IfModule>
```

[![](https://www.zone.eu/static/sites/5/wordpress-homepage-protection-1024x629.jpg)](https://www.zone.eu/support/?attachment_id=16514)