Updating From Mobile App – Exposing Site to Hacking

The safest way to manage content from outside of the WordPress dashboard, and make use of the WordPress roles and capabilities model, is via XML-RPC.

The basic methods built in to WordPress XML-RPC allow you to add, edit and delete posts and media, and restrict the ability to do so based on WordPress user permissions. The problem is that it’s a little complicated to use if you’re new to programming, and the built-in XML-RPC methods are limited in terms of functionality.

For example, creating a new post with four images, and making one of those images the featured image, and adding different taxonomy terms to the post (categories, tags, etc.) based on some arbitrary criteria can require either making several XML-RPC calls in a certain order, or the need to create a custom XML-RPC method.

Here’s a fairly basic primer on WordPress XML-RPC using the Incutio XML-RPC library, which is what WordPress core uses to handle XML-RPC requests: http://jumping-duck.com/tutorial/using-xml-rpc-in-wordpress/

Related Posts:

  1. What’s the best way to use the Featured Image for responsive web design?
  2. esc_attr() right way and use
  3. Enforcing password complexity
  4. Does My Child-Theme Functions.php Need if{die} Security In It? [duplicate]
  5. Add Useragent to the body class?
  6. How Attackers write script into my php files?
  7. Renaming wp-content folder dynamically
  8. How do I create a WP user outside of WordPress and auto login?
  9. Ajax template: how to handle head section
  10. Security – Ajax and Nonce use [closed]
  11. Can I write ‘RewriteCond’ using ‘functions.php’?
  12. Is it unsafe to put php in the /wp-content/uploads directory?
  13. Sanitize get_query_var() url parameters
  14. Hiding a php element from mobile browsers
  15. When must I use and verify nonce?
  16. Hiding WordPress Plugin Source Code
  17. Is this code malidcous
  18. Admin username and password
  19. Evaluations of two wordpress security plans against php code injection attack
  20. WordPress custom login form using Ajax
  21. Detect session/cookie variable in wordpress to prevent access to documents
  22. Is there any risk setting WordPress file permissions and FS method to ‘direct’ on localhost?
  23. SQL Injection blocked by firewall
  24. How to prevent XSS alter custom global javascript object & methods in WordPress
  25. Generating an nonce for Content Security Policy and all scripts – How to make it match/persist for each page load?
  26. Cannot execute php files in wp-content
  27. How do I get around “Sorry, this file type is not permitted for security reasons”?
  28. Security: blocking direct access of php files
  29. Correct and safe way to include php content in my page
  30. Password minimum length in personal subscription [closed]
  31. How to add API security keys into JS of wordpress securely
  32. Is it best to avoid using $wpdb for security issues?
  33. Hardening uploads folder in IIS breaks images
  34. Troll the hackers by redirecting them
  35. What does $_GET[‘iphone’] do?
  36. Security updates to 3.3.2
  37. Creating a mobile site by adding a new class to the body tag from functions.php
  38. how to prevent wordpress admin from logging in via woocommerce my-account page
  39. How to remove sidebar primary widget on Mobile on category page [closed]
  40. malware undetectable by multiple scans
  41. Decoded malware code [closed]
  42. Limit posts when visited with mobile devices
  43. Attaching images to posts manually (i.e. with custom code, without the use of an API)
  44. security concerns if using html data-* attribute for l10n?
  45. How to redirect non logged in mobile users to page on same site?
  46. How do you remove header sitewide from mobile only?
  47. How to correctly escape an echo
  48. Reject all malicious URL requests functions.php
  49. portfolio site – about this site section – is it safe to post some code
  50. echo cutom css code to WordPress page template file ? is this safe?
  51. Exclude ipads and tablets form wp_is_mobile code
  52. How to secure my php forms
  53. $.ajax results in 403 forbidden
  54. Site infected by link
  55. Access WP files on “server 1”, from “server 2” – using wp-load on an external website
  56. Deny php execution in /wp-includes – using .htaccess in /wp-includes VS root folder
  57. Retrieve $_POST data to send to javascript without using localize script
  58. Previewing/Updating some Pages causes “The requested URL was rejected” Error
  59. What is the best practice for restricting a section to logged in users?
  60. show desktop version of website if button is submited
  61. Get permalink for a post from inside WordPress and route to a related site
  62. How to quickly/easily make an analysis (reverse engineering) of WordPress?
  63. what to do after instlling cyberpanel on VPS
  64. One button to change all settings in theme customizer?
  65. Add custom image sizes to media uploader
  66. Export all post from database to JSON only when the database gets updated
  67. Multiple pages on one with different HTML
  68. Is $hook a global variable in WordPress
  69. Notice: wpdb::prepare was called incorrectly. The query argument of wpdb::prepare() must have a placeholder
  70. Convert imploded plain text into links
  71. PHP if Condition not working
  72. Extend a class of a plugin
  73. How to get the Page Number of the Current Page in Single Post Pagination
  74. Handling Body class based on Template
  75. Reconfiguring WordPress site
  76. Use Icomoon external svg file with
  77. How to split links generated into an xml sitemap to avoid exceeding 30 sec maximum execution time?
  78. Database query works fine outside WordPress
  79. WordPress page content outside WordPress
  80. Shortcode to find and replace URL
  81. Function Reference Documenting Template Tags for use in Custom Theme Templates?
  82. Seo Friendly Filter URLs
  83. Add new post in existing categories using wp_insert_post
  84. I’m unable to call img path using single quotes in an array?
  85. Else/If Statement to Display Photo Descriptions
  86. PHP error with a shortcode: “no suitable wrapper” for file_get_contents
  87. Update value of a associative array with update_post_meta
  88. feedburner plugin for WP 3.5
  89. WordPress custom post type and taxonomy
  90. PHP code snippet to remove microdata
  91. how to dynamically remove all edit and delete functionality of a page
  92. I want to fusion the product columns in email table order
  93. wordpress email checker on domain
  94. Using wp_editor() when not logged stopped working
  95. How to call WordPress PHP file using external js file
  96. PHP: Why does my code work in index.php but not a widget?
  97. How can I remove these resize lines from the comment box?
  98. Add multiple JavaScript files to template header [duplicate]
  99. How to insert a variable into a query parameter?
  100. How can I use AJAX in child theme template?
tech