#993 closed defect (fixed)

app crashes if xmlrpc access restricted

Reported by: irbrad Owned by:
Priority: minor Milestone: 3.0
Component: XML-RPC Version:
Keywords: Cc:

Description (last modified by irbrad)

  • Add self hosted blog restricted with the WPIDS plugin
    • HTML of /index.php returned instead of /xmlrpc.php and app crashes
  • Add self hosted blog of <blogname>/xmlrpc.php
    • HTML returned of "<div style="background-color:#FF0027;border:1px solid #CCC;color:#FFFFFF;margin:200pt auto;text-align:center;vertical-align:middle;width:600pt;padding:10px;">You tried to attack the xmlrpc.php file!</div>"

Change History (4)

comment:2 Changed 14 months ago by irbrad

  • Description modified (diff)

comment:3 Changed 14 months ago by irbrad

  • Description modified (diff)

comment:4 Changed 13 months ago by daniloercoli

  • Resolution set to fixed
  • Status changed from new to closed

I've not installed that plugin but hacked the xmlrpc.php file by putting a static response at the beginning of it:

        $lvlcol = array('FF0027','FFFF33','33CC00');//red, yellow, green
        $fntcol = array('FFFFFF','0','0');
        die('<div style="background-color:#'.$lvlcol[$lvl].
            ';border:1px solid #CCC;color:#'.$fntcol[$lvl].
            ';margin:200pt auto;text-align:center;vertical-align:middle;width:600pt;padding:10px;">'.
            $msg.'</div>');

The app didn't crash, but stopped on the loading div.

In ([2582]) I added the code that should fix it. The app now shows the error message.

Note: See TracTickets for help on using tickets.