LocoAI
89LocoAI - Auto Translate For Loco Translate is a powerful tool for developers looking to quickly translate thei...
Free
70k+ installs 4.9★ (637)
Disable REST API for Real
Really prevents the REST API from handling requests (default) or require user to be logged in.
The facts
- Rating
- 5★ from 3
- Active installs
- 200+
- Price
- Free
- Last updated
- 14 Nov 2019
- Added
- Dec 2015
- Requires WP
- 4.7
- Tested up to
- WP 5.3.23
- Downloads
- 6,174
Our analysis
AI-assistedDisable REST API for Real is a WordPress plugin that completely disables the WordPress REST API by removing all related filters and actions. It returns a 404 error for any requests made to the REST API URL endpoints. Alternatively, you can configure it to allow access only for logged-in users, providing a less drastic option for managing API access.
This plugin is suitable for users who want to enhance the security of their WordPress site by preventing unauthorized access to the REST API. It is particularly useful for those who do not require the REST API functionality and prefer to limit potential vulnerabilities.
Best for: This plugin suits WordPress users looking to disable the REST API for security reasons.
What it does well
- ✓Completely disables the WordPress REST API
- ✓Returns a 404 error for REST API requests
- ✓Option to require users to be logged in for API access
- ✓Easy to install and configure
- ✓Can be deactivated to restore default settings
Where it falls short
- •Limited information on support options
- •Last updated in November 2019
Verdict
Disable REST API for Real effectively blocks access to the REST API, making it a straightforward choice for users wanting to enhance site security. However, its last update was in 2019, which may be a consideration for some users.
From the developer
Samuel Aguilera's own description of Disable REST API for Real, lightly tidied.
The WordPress REST API is a great resource, but if you don’t want to use it probably you will want to close this door to your WordPress.
Unlike other popular plugins that aims to disable the REST API but only return an error, processed by the REST API, when a request is received, by default, this plugin removes all filters and actions related to WordPress REST API, and returns a 404 error for requests sent to the REST API URL endpoints, effectively blocking any use of the REST API.
Optionally you can set the REST API setting in Settings -> General page to “Logged In Only” for a less drastical action, to keep REST API access enabled but require the user to be logged in to accept the requests.
If you’re happy with the plugin please don’t forget to give it a good rating, it will motivate me to keep sharing and improving this plugin (and others).
SUPPORT: If you have any support question, please create an issue at the Github repository.
Requirements
- WordPress 4.7 or higher.
Features
- Disable WordPress core REST API for real by removing all filters and actions related to it and returning a 404 error for requests sent to REST API URL endpoints (e.g. https://example.com/wp-json/whatever ).
- Option to require user to be logged in to use the REST API instead of completely disable it.
Usage
To disable the REST API completely simply install the plugin from the Plugins page and enable it.
If you don’t want to disable the REST API but require user to be logged in instead, go to Settings -> General page and set the REST API to option to “Logged In Only”, and click Save Changes.
You can change the option back to “Off” if you want to disable the REST API again.
To return to WordPress default, simply deactivate the plugin.
Tagged as
feature
REST API
Alternatives
Other plugins for integrating services.
The AI + Automation plugin for WordPress. Automate workflows across all your plugins and apps, add an AI agent...
Free
40k+ installs 4.9★ (156)
Create custom interactive maps with free Leaflet-based styles, no Google Maps API key, frontend marker submiss...
Free
10k+ installs 5★ (67)
Activity Log
87Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audi...
Free
200k+ installs 4.3★ (74)
Reviews Feed
87No API key required. Display Yelp and Google reviews for any business in a clean, customizable feed on your si...
Free
100k+ installs 4.4★ (34)
Contact Form, Google Sheet, MailChimp, Brevo, Webhook, Zoho CRM Automation and Integration plugin that Connect...
Free
20k+ installs 4.9★ (160)