0
votes

I am developing and Android app to view the posts on my blog. I am using XML-RPC API of Wordpress. It requires a user name and password for even reading posts.

I don't find it secure to put an admin/editor password into the code. But, if I use the credentials of a user of other roles, it can't read the whole list.

What is the secure way of making a read-only app for Wordpress?

1

1 Answers

0
votes

Use the RSS Feed provided by WordPress instead of the XML-RPC API.

you can get the feed for your blog by adding /feed to your blog url.

for example:
Blog URL: http://this.ismysite.com/wordpress/
Feed URL: http://this.ismysite.com/wordpress/feed

Real example
Blog URL: http://blog.wpde.org/
Feed URL: http://blog.wpde.org/feed