This snippet prevents posting content to the WordPress REST API by validating that the method used is GET. It's another example of how the WordPress rest_authentication_errors filter might be used.
1
<?php
2
/*
3
Disable Posting To WordPress REST API
4
http://www.beliefmedia.com/code/wp-snippets/disable-posting-wp-rest-api
5
*/
6
7
function beliefmedia_disable_posting_rest_api($access) {
8
if ('GET' !== $_SERVER['REQUEST_METHOD']) {
9
return new WP_Error( 'rest_cannot_access', 'Not authorized', array( 'status' => 405 ) );
10
}
11
return $access;
12
}
13
See also: Disable The WordPress Rest API.
