WordPress plugin intelligence profile

Authentication and xmlrpc log writer

Log of failed access, pingbacks, user enumeration, disable xmlrpc authenticated methods, kill xmlrpc request on authentication error.

WP PlugIndex snapshot

Current directory snapshot

Tested up to WordPress 4.7
Current version1.2.2
WordPress coverageTested up to WordPress 4.7
Minimum stackWP 3.5.1 · PHP —
Directory statusactive
Last directory update18 Nov 20169y ago
Active installations60Adoption metric — not a quality score
WordPress.org rating5.0 / 5 from 1 ratings
Official packageDirect from WordPress.org

Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →

WP PlugIndex currently records Authentication and xmlrpc log writer version 1.2.2 as active, updated 9y ago and tested up to WordPress 4.7.

Overview

About this plugin

php ). Very useful to process data via fail2ban.

You can activate the log for each pingback request feature and stop the user enumeration method (by redirecting to the home) with log.

If activated it remove the wordpress version number and meta generator in the head section of your site.

If activated it disable xmlrpc methods that require authentication, in order to avoid brute force attack by xmlrpc. Use this feature if you don’t need these xmlrpc methods.

If activated can kill multiple requests in a single xmlrpc call returning a 401 code on xmlrpc login error. This feature may be useful to prevent server overloading on brute force attack by xmlrpc.

You can also view your CUSTOM error log in the admin panel.

You can write error by

  • SYSLOG
  • APACHE ERROR_LOG
  • CUSTOM a custom error log file (the used path need to be writable or APACHE ERROR LOG wil be used)

Log examples

-

SYSLOG

444`

-

APACHE

444`

-

CUSTOM

444`

fail2ban configuration

See the FAQ section

Log viewer

Log viewer is available only in CUSTOM mode. Note: the log path and the file must exist.

Localization

  • English (default) – always included
  • Italian – since 1.1.3 version

Translations

  • English – default, always included
  • Italiano – disponibile dalla versione 1.1.3

Note: Feel free to translate this plugin in your language. This is very important for all users worldwide. So please contribute your language to the plugin to make it even more useful.

For translating I recommend the “Poedit Editor”.

WordPress.org metadata

Plugin tags

Topics listed for this plugin in the WordPress.org directory.

  • authentication logger
  • brute force
  • xmlrpc hack
  • fail2ban
  • security
Compatibility & maintenance

Compatibility & maintenance

Tested up to WordPress 4.7

Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 4.7.

Current WordPress releaseWordPress 7.1
WordPress.org Tested up to4.7
Minimum requirementsWordPress 3.5.1 · PHP not listed
Update activity18 Nov 20169y ago

“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.

Changes recorded by WP PlugIndex

Recent tracked changes

No tracked version or compatibility changes have been recorded by WP PlugIndex yet.

Tracking & source

WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.

Plugin watchlist

Watch this plugin

Sign in to your WP PlugIndex account or create a free account. Free accounts can watch up to 5 plugins and see what changed.

Watch limit

Watchlist limit reached

You have reached your current active watch limit.