WordPress

Disable XML-RPC

Turns off WordPress's legacy XML-RPC interface and its related discovery links in the page <head> — a common security hardening step, since XML-RPC is a frequent brute-force target.

php

/**
 * Disable xmlrpc.php
 */
 
add_filter( 'xmlrpc_enabled', '__return_false' );
remove_action( 'wp_head', 'rsd_link' );
remove_action( 'wp_head', 'wlwmanifest_link' );

Want your own copy? Fork this repo and build your own snippet collection. Fork on GitHub →

More WordPress snippets

Register and Output a Custom Nav Menu

Adds a new menu location you can assign in Appearance → Menus, shows how to output it in a template, and includes the multi-menu version too.

Define a Reusable Global String

A simple pattern for storing a value — like a phone number or address — in one place and reusing it anywhere in your theme.

Auto-Escape HTML Typed Inside Code Tags

Makes sure any markup typed inside <code> or <tt> tags in the editor gets escaped automatically, so it displays as visible text instead of being rendered as real HTML.