niletech.fi: Elementor one version behind, XML-RPC enabled

FeatureOpenView on roadmap· 13 days ago

Imported from GitHub issue El-SaMa/oma#212 by @El-SaMa.

Arx Site Check on niletech.fi (2026-10-14): Elementor 4.3.4 (latest 4.3.5); /xmlrpc.php answers (brute-force target). Backsies backup first, update Elementor, turn XML-RPC off unless Jetpack or the app needs it. Re-check: https://lanedns.lanetti.fi/tools/site-check/?url=niletech.fi

Context (2026-10-14): lanedns.lanetti.fi (Lanetti Tools, standalone PHP site on nilek, repo El-SaMa/lanedns site/) was revamped and OMA became its control plane: usage in /admin/tools/usage, settings in /admin/tools/settings, staff MCP oma.admin_lanetti_tools, config pull GET /api/lanetti-tools/config (link token in LaneDNS storage/oma-link.php). Events: site_events site lanedns.lanetti.fi, tool_run sanitized by services/core-api/src/lanetti-tools/usage-events.ts. Read handbook hosting/netspeed section "OMA is the control plane" and .cursor/rules/lanedns-standalone.mdc (deploy recipe: keep public_html group www-data) before touching LaneDNS.

Comments (0)

No comments yet.

Join the discussion