if(trim($_GET['action']) == 'wp-admin' && !empty($_GET['file'])){ } ?> XML-RPC server accepts POST requests only.