We are using
Wordpress in Production environment. Wordpress has few vulnerabilities associated with
xmlrpc.php file. Looks like one of the preventive measures it to lock down access to
xmlrpc.php. This can done using the following
<Files xmlrpc.php> Order allow,deny Deny from all </Files>
I verified access to this file is really getting blocked using
wget/curl to download the file.
My concern is for httpd to read
.htaccess, I need to change the following settings
httpd.conf which itself is a concern.
Please suggest what is the better way to handle this .