Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

require_once ABSPATH . WPINC . '/class-http.php';

[2] Fix | Delete

[3] Fix | Delete

/**

[4] Fix | Delete

* Some 3rd-party APIs require data to be sent in the request body for

[5] Fix | Delete

* GET requests (eg. SendinBlue). This is not currently possible using the WP

[6] Fix | Delete

* HTTP API. I've submitted a patch to WP Core for this. Until its merged, we

[7] Fix | Delete

* have to extend the WP_HTTP class and override the method in question.

[8] Fix | Delete

[9] Fix | Delete

* @see https://core.trac.wordpress.org/ticket/39043

[10] Fix | Delete

[11] Fix | Delete

* @private

[12] Fix | Delete

[13] Fix | Delete

class ET_Core_LIB_WPHttp extends WP_Http {

[14] Fix | Delete

/**

[15] Fix | Delete

* Send an HTTP request to a URI.

[16] Fix | Delete

[17] Fix | Delete

* Please note: The only URI that are supported in the HTTP Transport implementation

[18] Fix | Delete

* are the HTTP and HTTPS protocols.

[19] Fix | Delete

[20] Fix | Delete

* @access public

[21] Fix | Delete

* @since 2.7.0

[22] Fix | Delete

[23] Fix | Delete

* @param string $url The request URL.

[24] Fix | Delete

* @param string|array $args {

[25] Fix | Delete

* Optional. Array or string of HTTP request arguments.

[26] Fix | Delete

[27] Fix | Delete

* @type string $method Request method. Accepts 'GET', 'POST', 'HEAD', or 'PUT'.

[28] Fix | Delete

* Some transports technically allow others, but should not be

[29] Fix | Delete

* assumed. Default 'GET'.

[30] Fix | Delete

* @type int $timeout How long the connection should stay open in seconds. Default 5.

[31] Fix | Delete

* @type int $redirection Number of allowed redirects. Not supported by all transports

[32] Fix | Delete

* Default 5.

[33] Fix | Delete

* @type string $httpversion Version of the HTTP protocol to use. Accepts '1.0' and '1.1'.

[34] Fix | Delete

* Default '1.0'.

[35] Fix | Delete

* @type string $user-agent User-agent value sent.

[36] Fix | Delete

* Default WordPress/' . get_bloginfo( 'version' ) . '; ' . get_bloginfo( 'url' ).

[37] Fix | Delete

* @type bool $reject_unsafe_urls Whether to pass URLs through wp_http_validate_url().

[38] Fix | Delete

* Default false.

[39] Fix | Delete

* @type bool $blocking Whether the calling code requires the result of the request.

[40] Fix | Delete

* If set to false, the request will be sent to the remote server,

[41] Fix | Delete

* and processing returned to the calling code immediately, the caller

[42] Fix | Delete

* will know if the request succeeded or failed, but will not receive

[43] Fix | Delete

* any response from the remote server. Default true.

[44] Fix | Delete

* @type string|array $headers Array or string of headers to send with the request.

[45] Fix | Delete

* Default empty array.

[46] Fix | Delete

* @type array $cookies List of cookies to send with the request. Default empty array.

[47] Fix | Delete

* @type string|array $body Body to send with the request. Default null.

[48] Fix | Delete

* @type bool $compress Whether to compress the $body when sending the request.

[49] Fix | Delete

* Default false.

[50] Fix | Delete

* @type bool $decompress Whether to decompress a compressed response. If set to false and

[51] Fix | Delete

* compressed content is returned in the response anyway, it will

[52] Fix | Delete

* need to be separately decompressed. Default true.

[53] Fix | Delete

* @type bool $sslverify Whether to verify SSL for the request. Default true.

[54] Fix | Delete

* @type string sslcertificates Absolute path to an SSL certificate .crt file.

[55] Fix | Delete

* Default ABSPATH . WPINC . '/certificates/ca-bundle.crt'.

[56] Fix | Delete

* @type bool $stream Whether to stream to a file. If set to true and no filename was

[57] Fix | Delete

* given, the stream will be output to a new file in the WP temp dir

[58] Fix | Delete

* using a name generated from the basename of the URL. Default false.

[59] Fix | Delete

* @type string $filename Filename of the file to write to when streaming. $stream must be

[60] Fix | Delete

* set to true. Default null.

[61] Fix | Delete

* @type int $limit_response_size Size in bytes to limit the response to. Default null.

[62] Fix | Delete

* @type bool|null $data_format How the `$data` should be sent ('query' or 'body'). Default null.

[63] Fix | Delete

* If null, data will be sent as 'query' for HEAD/GET and as

[64] Fix | Delete

* 'body' for POST/PUT/OPTIONS/PATCH/DELETE.

[65] Fix | Delete

[66] Fix | Delete

* }

[67] Fix | Delete

* @return array|WP_Error Array containing 'headers', 'body', 'response', 'cookies', 'filename'.

[68] Fix | Delete

* A WP_Error instance upon error.

[69] Fix | Delete

[70] Fix | Delete

public function request( $url, $args = array() ) {

[71] Fix | Delete

$defaults = array(

[72] Fix | Delete

'method' => 'GET',

[73] Fix | Delete

/**

[74] Fix | Delete

* Filters the timeout value for an HTTP request.

[75] Fix | Delete

[76] Fix | Delete

* @since 2.7.0

[77] Fix | Delete

[78] Fix | Delete

* @param int $timeout_value Time in seconds until a request times out.

[79] Fix | Delete

* Default 5.

[80] Fix | Delete

[81] Fix | Delete

'timeout' => apply_filters( 'http_request_timeout', 5 ),

[82] Fix | Delete

/**

[83] Fix | Delete

* Filters the number of redirects allowed during an HTTP request.

[84] Fix | Delete

[85] Fix | Delete

* @since 2.7.0

[86] Fix | Delete

[87] Fix | Delete

* @param int $redirect_count Number of redirects allowed. Default 5.

[88] Fix | Delete

[89] Fix | Delete

'redirection' => apply_filters( 'http_request_redirection_count', 5 ),

[90] Fix | Delete

/**

[91] Fix | Delete

* Filters the version of the HTTP protocol used in a request.

[92] Fix | Delete

[93] Fix | Delete

* @since 2.7.0

[94] Fix | Delete

[95] Fix | Delete

* @param string $version Version of HTTP used. Accepts '1.0' and '1.1'.

[96] Fix | Delete

* Default '1.0'.

[97] Fix | Delete

[98] Fix | Delete

'httpversion' => apply_filters( 'http_request_version', '1.0' ),

[99] Fix | Delete

/**

[100] Fix | Delete

* Filters the user agent value sent with an HTTP request.

[101] Fix | Delete

[102] Fix | Delete

* @since 2.7.0

[103] Fix | Delete

[104] Fix | Delete

* @param string $user_agent WordPress user agent string.

[105] Fix | Delete

[106] Fix | Delete

'user-agent' => apply_filters( 'http_headers_useragent', 'WordPress/' . get_bloginfo( 'version' ) . '; ' . get_bloginfo( 'url' ) ),

[107] Fix | Delete

/**

[108] Fix | Delete

* Filters whether to pass URLs through wp_http_validate_url() in an HTTP request.

[109] Fix | Delete

[110] Fix | Delete

* @since 3.6.0

[111] Fix | Delete

[112] Fix | Delete

* @param bool $pass_url Whether to pass URLs through wp_http_validate_url().

[113] Fix | Delete

* Default false.

[114] Fix | Delete

[115] Fix | Delete

'reject_unsafe_urls' => apply_filters( 'http_request_reject_unsafe_urls', false ),

[116] Fix | Delete

'blocking' => true,

[117] Fix | Delete

'headers' => array(),

[118] Fix | Delete

'cookies' => array(),

[119] Fix | Delete

'body' => null,

[120] Fix | Delete

'compress' => false,

[121] Fix | Delete

'decompress' => true,

[122] Fix | Delete

'sslverify' => true,

[123] Fix | Delete

'sslcertificates' => ABSPATH . WPINC . '/certificates/ca-bundle.crt',

[124] Fix | Delete

'stream' => false,

[125] Fix | Delete

'filename' => null,

[126] Fix | Delete

'limit_response_size' => null,

[127] Fix | Delete

'data_format' => null,

[128] Fix | Delete

);

[129] Fix | Delete

[130] Fix | Delete

// Pre-parse for the HEAD checks.

[131] Fix | Delete

$args = wp_parse_args( $args );

[132] Fix | Delete

[133] Fix | Delete

// By default, Head requests do not cause redirections.

[134] Fix | Delete

if ( isset( $args['method'] ) && 'HEAD' === $args['method'] ) {

[135] Fix | Delete

$defaults['redirection'] = 0;

[136] Fix | Delete

}

[137] Fix | Delete

[138] Fix | Delete

$request_args = wp_parse_args( $args, $defaults );

[139] Fix | Delete

/**

[140] Fix | Delete

* Filters the arguments used in an HTTP request.

[141] Fix | Delete

[142] Fix | Delete

* @since 2.7.0

[143] Fix | Delete

[144] Fix | Delete

* @param array $request_args An array of HTTP request arguments.

[145] Fix | Delete

* @param string $url The request URL.

[146] Fix | Delete

[147] Fix | Delete

$request_args = apply_filters( 'http_request_args', $request_args, $url );

[148] Fix | Delete

[149] Fix | Delete

// The transports decrement this, store a copy of the original value for loop purposes.

[150] Fix | Delete

if ( ! isset( $request_args['_redirection'] ) ) {

[151] Fix | Delete

$request_args['_redirection'] = $request_args['redirection'];

[152] Fix | Delete

}

[153] Fix | Delete

[154] Fix | Delete

/**

[155] Fix | Delete

* Filters whether to preempt an HTTP request's return value.

[156] Fix | Delete

[157] Fix | Delete

* Returning a non-false value from the filter will short-circuit the HTTP request and return

[158] Fix | Delete

* early with that value. A filter should return either:

[159] Fix | Delete

[160] Fix | Delete

* - An array containing 'headers', 'body', 'response', 'cookies', and 'filename' elements

[161] Fix | Delete

* - A WP_Error instance

[162] Fix | Delete

* - boolean false (to avoid short-circuiting the response)

[163] Fix | Delete

[164] Fix | Delete

* Returning any other value may result in unexpected behaviour.

[165] Fix | Delete

[166] Fix | Delete

* @since 2.9.0

[167] Fix | Delete

[168] Fix | Delete

* @param false|array|WP_Error $preempt Whether to preempt an HTTP request's return value. Default false.

[169] Fix | Delete

* @param array $request_args HTTP request arguments.

[170] Fix | Delete

* @param string $url The request URL.

[171] Fix | Delete

[172] Fix | Delete

$pre = apply_filters( 'pre_http_request', false, $request_args, $url );

[173] Fix | Delete

[174] Fix | Delete

if ( false !== $pre ) {

[175] Fix | Delete

return $pre;

[176] Fix | Delete

}

[177] Fix | Delete

[178] Fix | Delete

if ( function_exists( 'wp_kses_bad_protocol' ) ) {

[179] Fix | Delete

if ( $request_args['reject_unsafe_urls'] ) {

[180] Fix | Delete

$url = wp_http_validate_url( $url );

[181] Fix | Delete

}

[182] Fix | Delete

if ( $url ) {

[183] Fix | Delete

$url = wp_kses_bad_protocol( $url, array( 'http', 'https', 'ssl' ) );

[184] Fix | Delete

}

[185] Fix | Delete

}

[186] Fix | Delete

[187] Fix | Delete

$arrURL = @parse_url( $url );

[188] Fix | Delete

[189] Fix | Delete

if ( empty( $url ) || empty( $arrURL['scheme'] ) ) {

[190] Fix | Delete

return new WP_Error( 'http_request_failed', esc_html__( 'A valid URL was not provided.' ) );

[191] Fix | Delete

}

[192] Fix | Delete

[193] Fix | Delete

if ( $this->block_request( $url ) ) {

[194] Fix | Delete

return new WP_Error( 'http_request_failed', esc_html__( 'User has blocked requests through HTTP.' ) );

[195] Fix | Delete

}

[196] Fix | Delete

[197] Fix | Delete

// If we are streaming to a file but no filename was given drop it in the WP temp dir

[198] Fix | Delete

// and pick its name using the basename of the $url

[199] Fix | Delete

if ( $request_args['stream'] ) {

[200] Fix | Delete

if ( empty( $request_args['filename'] ) ) {

[201] Fix | Delete

$request_args['filename'] = get_temp_dir() . basename( $url );

[202] Fix | Delete

}

[203] Fix | Delete

[204] Fix | Delete

// Force some settings if we are streaming to a file and check for existence and perms of destination directory

[205] Fix | Delete

$request_args['blocking'] = true;

[206] Fix | Delete

if ( ! wp_is_writable( dirname( $request_args['filename'] ) ) ) {

[207] Fix | Delete

return new WP_Error( 'http_request_failed', esc_html__( 'Destination directory for file streaming does not exist or is not writable.' ) );

[208] Fix | Delete

}

[209] Fix | Delete

}

[210] Fix | Delete

[211] Fix | Delete

if ( is_null( $request_args['headers'] ) ) {

[212] Fix | Delete

$request_args['headers'] = array();

[213] Fix | Delete

}

[214] Fix | Delete

[215] Fix | Delete

// WP allows passing in headers as a string, weirdly.

[216] Fix | Delete

if ( ! is_array( $request_args['headers'] ) ) {

[217] Fix | Delete

$processedHeaders = WP_Http::processHeaders( $request_args['headers'] );

[218] Fix | Delete

$request_args['headers'] = $processedHeaders['headers'];

[219] Fix | Delete

}

[220] Fix | Delete

[221] Fix | Delete

// Setup arguments

[222] Fix | Delete

$headers = $request_args['headers'];

[223] Fix | Delete

$data = $request_args['body'];

[224] Fix | Delete

$type = $request_args['method'];

[225] Fix | Delete

$options = array(

[226] Fix | Delete

'timeout' => $request_args['timeout'],

[227] Fix | Delete

'useragent' => $request_args['user-agent'],

[228] Fix | Delete

'blocking' => $request_args['blocking'],

[229] Fix | Delete

'hooks' => new WP_HTTP_Requests_Hooks( $url, $request_args ),

[230] Fix | Delete

);

[231] Fix | Delete

[232] Fix | Delete

// Ensure redirects follow browser behaviour.

[233] Fix | Delete

$options['hooks']->register( 'requests.before_redirect', array(

[234] Fix | Delete

get_class(),

[235] Fix | Delete

'browser_redirect_compatibility'

[236] Fix | Delete

) );

[237] Fix | Delete

[238] Fix | Delete

if ( $request_args['stream'] ) {

[239] Fix | Delete

$options['filename'] = $request_args['filename'];

[240] Fix | Delete

}

[241] Fix | Delete

if ( empty( $request_args['redirection'] ) ) {

[242] Fix | Delete

$options['follow_redirects'] = false;

[243] Fix | Delete

} else {

[244] Fix | Delete

$options['redirects'] = $request_args['redirection'];

[245] Fix | Delete

}

[246] Fix | Delete

[247] Fix | Delete

// Use byte limit, if we can

[248] Fix | Delete

if ( isset( $request_args['limit_response_size'] ) ) {

[249] Fix | Delete

$options['max_bytes'] = $request_args['limit_response_size'];

[250] Fix | Delete

}

[251] Fix | Delete

[252] Fix | Delete

// If we've got cookies, use and convert them to Requests_Cookie.

[253] Fix | Delete

if ( ! empty( $request_args['cookies'] ) ) {

[254] Fix | Delete

$options['cookies'] = WP_Http::normalize_cookies( $request_args['cookies'] );

[255] Fix | Delete

}

[256] Fix | Delete

[257] Fix | Delete

// SSL certificate handling

[258] Fix | Delete

if ( ! $request_args['sslverify'] ) {

[259] Fix | Delete

$options['verify'] = false;

[260] Fix | Delete

$options['verifyname'] = false;

[261] Fix | Delete

} else {

[262] Fix | Delete

$options['verify'] = $request_args['sslcertificates'];

[263] Fix | Delete

}

[264] Fix | Delete

[265] Fix | Delete

if ( null !== $request_args['data_format'] ) {

[266] Fix | Delete

$options['data_format'] = $request_args['data_format'];

[267] Fix | Delete

[268] Fix | Delete

} elseif ( 'HEAD' !== $type && 'GET' !== $type ) {

[269] Fix | Delete

// All non-GET/HEAD requests should put the arguments in the form body.

[270] Fix | Delete

$options['data_format'] = 'body';

[271] Fix | Delete

}

[272] Fix | Delete

[273] Fix | Delete

/**

[274] Fix | Delete

* Filters whether SSL should be verified for non-local requests.

[275] Fix | Delete

[276] Fix | Delete

* @since 2.8.0

[277] Fix | Delete

[278] Fix | Delete

* @param bool $ssl_verify Whether to verify the SSL connection. Default true.

[279] Fix | Delete

[280] Fix | Delete

$options['verify'] = apply_filters( 'https_ssl_verify', $options['verify'] );

[281] Fix | Delete

[282] Fix | Delete

// Check for proxies.

[283] Fix | Delete

$proxy = new WP_HTTP_Proxy();

[284] Fix | Delete

if ( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) ) {

[285] Fix | Delete

$options['proxy'] = new Requests_Proxy_HTTP( $proxy->host() . ':' . $proxy->port() );

[286] Fix | Delete

[287] Fix | Delete

if ( $proxy->use_authentication() ) {

[288] Fix | Delete

$options['proxy']->use_authentication = true;

[289] Fix | Delete

$options['proxy']->user = $proxy->username();

[290] Fix | Delete

$options['proxy']->pass = $proxy->password();

[291] Fix | Delete

}

[292] Fix | Delete

}

[293] Fix | Delete

[294] Fix | Delete

// Avoid issues where mbstring.func_overload is enabled

[295] Fix | Delete

mbstring_binary_safe_encoding();

[296] Fix | Delete

[297] Fix | Delete

try {

[298] Fix | Delete

$requests_response = Requests::request( $url, $headers, $data, $type, $options );

[299] Fix | Delete

[300] Fix | Delete

// Convert the response into an array

[301] Fix | Delete

$http_response = new WP_HTTP_Requests_Response( $requests_response, $request_args['filename'] );

[302] Fix | Delete

$response = $http_response->to_array();

[303] Fix | Delete

[304] Fix | Delete

// Add the original object to the array.

[305] Fix | Delete

$response['http_response'] = $http_response;

[306] Fix | Delete

} catch ( Requests_Exception $e ) {

[307] Fix | Delete

$response = new WP_Error( 'http_request_failed', $e->getMessage() );

[308] Fix | Delete

}

[309] Fix | Delete

[310] Fix | Delete

reset_mbstring_encoding();

[311] Fix | Delete

[312] Fix | Delete

/**

[313] Fix | Delete

* Fires after an HTTP API response is received and before the response is returned.

[314] Fix | Delete

[315] Fix | Delete

* @since 2.8.0

[316] Fix | Delete

[317] Fix | Delete

* @param array|WP_Error $response HTTP response or WP_Error object.

[318] Fix | Delete

* @param string $context Context under which the hook is fired.

[319] Fix | Delete

* @param string $class HTTP transport used.

[320] Fix | Delete

* @param array $args HTTP request arguments.

[321] Fix | Delete

* @param string $url The request URL.

[322] Fix | Delete

[323] Fix | Delete

do_action( 'http_api_debug', $response, 'response', 'Requests', $request_args, $url );

[324] Fix | Delete

if ( is_wp_error( $response ) ) {

[325] Fix | Delete

return $response;

[326] Fix | Delete

}

[327] Fix | Delete

[328] Fix | Delete

if ( ! $request_args['blocking'] ) {

[329] Fix | Delete

return array(

[330] Fix | Delete

'headers' => array(),

[331] Fix | Delete

'body' => '',

[332] Fix | Delete

'response' => array(

[333] Fix | Delete

'code' => false,

[334] Fix | Delete

'message' => false,

[335] Fix | Delete

[336] Fix | Delete

'cookies' => array(),

[337] Fix | Delete

'http_response' => null,

[338] Fix | Delete

);

[339] Fix | Delete

}

[340] Fix | Delete

[341] Fix | Delete

/**

[342] Fix | Delete

* Filters the HTTP API response immediately before the response is returned.

[343] Fix | Delete

[344] Fix | Delete

* @since 2.9.0

[345] Fix | Delete

[346] Fix | Delete

* @param array $response HTTP response.

[347] Fix | Delete

* @param array $request_args HTTP request arguments.

[348] Fix | Delete

* @param string $url The request URL.

[349] Fix | Delete

[350] Fix | Delete

return apply_filters( 'http_response', $response, $request_args, $url );

[351] Fix | Delete

}

[352] Fix | Delete

}

[353] Fix | Delete

[354] Fix | Delete