{"id":8917,"date":"2015-03-28T12:01:15","date_gmt":"2015-03-28T18:01:15","guid":{"rendered":"http:\/\/macblaze.ca\/?p=8917"},"modified":"2016-01-02T14:38:50","modified_gmt":"2016-01-02T21:38:50","slug":"wordpress-nonsense-solved","status":"publish","type":"post","link":"https:\/\/macblaze.ca\/?p=8917","title":{"rendered":"WordPress nonsense: Solved?"},"content":{"rendered":"<p>I have been having trouble using the WordPress app with my site. It \u00a0gives me an error (NSXMLParserErrorDomain Error 111) and then locks me out of the site. So I have been unable to post using the WordPress app at all. After much Googling and a few go-rounds with my hosting provider, I had a solution that involved disabling ModSecurity but even that failed to be a long term fix. I mean, who wants to disable anything that has\u00a0Security in it?<\/p>\n<p>So for the 10 millionth time I stretched out pleading arms to Google and voila! <a href=\"https:\/\/ios.forums.wordpress.org\/topic\/app-xmlrpc-requests-and-modsecurity\" target=\"_blank\">This Topic<\/a> turned up on the <a href=\"ios.forums.wordpress\" target=\"_blank\">ios.forums.wordpress.org<\/a> site. Using all the right words the OP asks the right questions an get the right answers.<\/p>\n<blockquote><p>Hello,<br \/>\nI&#8217;m having some troubles with the XMLRPC requestes that the iOS app generates. I manage a WordPress 4.1.1 set as a Network install.<\/p>\n<p>My hosting company has the ModSecurity activated and, for that reason, it blocks every time the users that have the App:<br \/>\nMessage: Access denied with code 403, [Rule: &#8216;user:bf_block&#8217; &#8216;@gt 0&#8217;] [id &#8220;117&#8221;] [msg &#8220;IP address blocked for 5 minutes. More than 2 XMLRPC POST requests within 60 seconds.&#8221;] [severity &#8220;WARNING&#8221;] [MatchedString &#8220;1&#8221;]<\/p>\n<p>My question is: is it possible to limit the amount of XMLRPC requests if someone only open the stats page (and not, for example, the Post or Comments page)?<br \/>\nOr, better, limit the XMLRPC requests only if the user opens the Post, Page or Comments pages?<\/p>\n<p>Thank you in advance,<br \/>\nGabriele<\/p>\n<p>****<\/p>\n<p>After browsing some other topics, I figure out that the issue comes from the latest App version that makes too many XML-RPC requests that are interpreted as a potential attack and blocked.<\/p>\n<p>The block works at IP level and that&#8217;s the reason why if you use WiFi for example, you won&#8217;t be able to connect to your website anymore (you see 403 or 406 errors).<\/p>\n<p>At the moment the only possible solutions are uninstalling the App or temporary disabling the ModSecurity, waiting for a solution for the App developers.<\/p>\n<p>****<\/p>\n<p>Hi Gabriele<\/p>\n<p>More than 2 XMLRPC POST requests within 60 seconds.<\/p>\n<p>That is a ridiculously low limit. Who is your hosting company?<\/p>\n<p>You might also try <a href=\"https:\/\/apps.wordpress.org\/support\/#faq-ios-12\" target=\"_blank\">the steps in this FAQ<\/a> to rename your xmlrpc.php file and avoid triggering the block.<\/p><\/blockquote>\n<p>Right there, in the FAQ, that I couldn&#8217;t find in any of my previous attempts is the answer:<\/p>\n<blockquote>\n<ol class=\"faq-ios-list\">\n<li id=\"faq-ios-12\"><strong>My Host Blocks XML-RPC Access! How do I fix that?<\/strong>\n<ol>\n<li>Rename your xmlrpc.php file to something different, but only change it after the \u2018xmlrpc\u2019. Ex: xmlrpc_wp.php.<\/li>\n<li>Install <a href=\"https:\/\/wordpress.org\/extend\/plugins\/rename-xml-rpc\/\" target=\"_blank\">this plugin<\/a>. (<strong>Rename XMLRPC\u00a0By <a href=\"http:\/\/koke.me\/\">Jorge Bernal<\/a>)<\/strong><\/li>\n<li>Read the installation instructions and activate it.<\/li>\n<li>Remove your blog from the app and add it back again.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/blockquote>\n<p>And now, for now, all is golden. I guess even in this age of the internet and instant info, the maxim of &#8220;Try, try again&#8230;&#8221; is still in force.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I have been having trouble using the WordPress app with my site. It \u00a0gives me an error (NSXMLParserErrorDomain Error 111) and then locks me out of the site. So I have been unable to post using the WordPress app at all. After much Googling and a few go-rounds with my hosting provider, I had a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/macblaze.ca\/index.php?rest_route=\/wp\/v2\/posts\/8917"}],"collection":[{"href":"https:\/\/macblaze.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/macblaze.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/macblaze.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/macblaze.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8917"}],"version-history":[{"count":0,"href":"https:\/\/macblaze.ca\/index.php?rest_route=\/wp\/v2\/posts\/8917\/revisions"}],"wp:attachment":[{"href":"https:\/\/macblaze.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8917"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/macblaze.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8917"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/macblaze.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8917"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}