---
title: "xmlrpc.php POST requests to WordPress methods"
canonical_url: "https://www.zone.lv/help/kb/xmlrpcphp-post-requests-to-wordpress-methods/"
post_type: "ht_kb"
published: "2024-10-09T10:41:59+00:00"
modified: "2024-10-09T10:51:26+00:00"
language: "en"
author: "silver"
taxonomies:
  ht_kb_category:
    - name: "Wordpress"
      url: "https://www.zone.lv/help/kb-categories/wordpress-en/"
    - name: "Apache"
      url: "https://www.zone.lv/help/kb-categories/apache-en/"
    - name: "Technical"
      url: "https://www.zone.lv/help/kb-categories/technical-en/"
  ht_kb_tag:
    - name: "POST requests"
      url: "https://www.zone.lv/help/kb-tags/post-requests/"
    - name: "Apache Directives"
      url: "https://www.zone.lv/help/kb-tags/apache-directives/"
    - name: "Error 403"
      url: "https://www.zone.lv/help/kb-tags/error-403-en/"
    - name: "POST"
      url: "https://www.zone.lv/help/kb-tags/post-en/"
    - name: "xmlrpc.php"
      url: "https://www.zone.lv/help/kb-tags/xmlrpcphp-en/"
---

# xmlrpc.php POST requests to WordPress methods

Protection has been added to Zone webhosting websites to block POST requests to files named `xmlrpc.php` that contain a WordPress (`wp.*`) method. The purpose of the restriction is to protect the homepage from bots that try to guess passwords.

Corresponding requests will return `Error 403: Forbidden`.
Apache apache.ssl.error.log will display a following error message:

```
ModSecurity: Access denied with code 403 ... [msg "Blocked wp.* payload in XML-RPC"] [hostname "example.com"] [uri "/xmlrpc.php"] ...
```

If desired, it is possible to remove the corresponding block from your server.

In order to remove this restriction, you need to log into `My Zone` control panel and in the `Webserver` section of the web hosting management under `Main Domain Setting`s -> `modify` -> `Apache Directives` -> in the `add directive block` window, add a directive block with the following content:

```
<IfModule mod_security2.c>
  SecRuleRemoveById 60020 60021
</IfModule>
```