[drupal-support] Drupal 4.6.3 released (security alert)

[Aidan Finn]

See http://www.petersblog.org/node/518 for details on how to restrict
access to xml-rpc.php by ip address using .htaccess

AF

On 8/16/05, risiyanto budi <risiyanto at budi.or.id> wrote:
> Rob wrote:
> 
> > Using a remote posting tool was one of the main reasons I picked
> > Drupal. I use BlogJet and can post entries in just a few seconds which
> > saves me a lot of time. If the file is deleted will that prevent me
> > from ever using remote applications again?
> >
> > Rob
> >
> Thats right,
> to overcome this situation, you can restrict access to this xmlrcp.php
> to serve  your IP (network) only.
> But i'm not sure how to do that, since i don't know how this xmlrpc works.
> 
> Thanks
> Aris
> 
> --
> [ Drupal support list | http://lists.drupal.org/ ]
> 


-- 
-------------------------------
http://www.aidanf.net
-------------------------------