This project is not covered by Drupal’s security advisory policy.

There are better systems for doing XMLRPC calls, e.g. look at http://drupal.org/project/services

The XMLRPC API exposes two functions - in most cases you will only want to use one.

  xmlrpc_api_query($xmlrpcuri, $method, $arguments)

xmlrpcuri supports this format:

[http/ssl]://[Basic:Digest][user:pass]@[name|address]:[port]/[path]

Note two things:

  • Digest: it supports Digest authentication, think man-in-the-middle-attack
  • Port: allow connecting to a different port than the default (SSL) port. So you can run a dedicated apache-ssl on a dedicated port as a dedicated user that can (su)do all sort of weird things

It's a very simple library in a way. The UI allows you to generate xmlrpcuris. These you can store wherever you want - maybe in a protected node field. Then you could put XMLRPC calls into workflow/ng actions.

Included is a sample server implementation that tells you the server time if called correctly!

Don't forget to enable the UI module so you can easily run tests.

Let me know if you have any questions.

Project information

Releases