=== Remove XML-RPC Methods ===
Contributors: walterebert
Tags: xml-rpc
Requires at least: 4.6
Tested up to: 5.5
Requires PHP: 5.4.0
Stable tag: 1.3.0
License: GPL-2.0-or-later
License URI: https://spdx.org/licenses/GPL-2.0-or-later.html

Remove all methods from the WordPress XML-RPC API.

== Description ==

The plugin removes all methods from the WordPress XML-RPC API. It is an
alternative to just using the `xmlrpc_enabled` hook, because that is only used
"To disable XML-RPC methods that require authentication".

Activating this plugin will disable pingbacks and trackbacks, because these rely on XML-RPC.

= Testing the plugin =

From the command line you can test if the plugin is working correctly using [cURL](https://curl.haxx.se/):

```
curl -d '<?xml version="1.0"?><methodCall><methodName>system.listMethods</methodName><params><param><value><string/></value></param></params></methodCall>' https://<your domain>/xmlrpc.php
```

This should only return `system` methods.

If the request returns methods starting with `wp.` the plugin is not active.

== Installation ==

1. Download the plugin and unzip it. Copy the files to the `/wp-content/plugins/wee-remove-xmlrpc-methods` directory
2. Activate the plugin through the 'Plugins' menu in WordPress

== Changelog ==

= 1.3.0 =
* Replace PHP `header` function with `http_response_code`.
* Update readme.txt.
* Raise minimal supported WordPress version to 4.6.
* Tested WordPress up to version 5.5.

= 1.2.0 =
* Replace pings_open action function with built-in function.
* Increase pings_open action priority.
* Raise minimal supported WordPress version to 4.4.
* Tested WordPress up to version 5.4.

= 1.1.0 =
* Deactivate pingbacks on install.
* Remove RSD link reference.