Restricting WordPress entry points

[szepeviktor]

Seeing

docker-php/php/8.0/fpm-apache/etc/apache2/sites-available/000-default.conf

Lines 59 to 64 in 4742cbc

	# Disable XML-RPC on all wordpress sites
	<Files xmlrpc.php>
	Order deny,allow
	Deny from all
	# allow from xxx.xxx.xxx.xxx
	</Files>

You may be interested in https://github.com/szepeviktor/debian-server-tools/blob/master/webserver/apache-conf-available/wordpress.inc.conf

[szepeviktor]

Maybe my solution is concentrating on denying requests.
Listing all allowed URL paths may be better!

[jaydrogers]

Just adding a note from @szepeviktor here: ddc5e5a#commitcomment-53836815

Looking at this for the next release 👍