<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* HTTP API: WP_Http_Streams class

[2] Fix | Delete

*

[3] Fix | Delete

* @package WordPress

[4] Fix | Delete

* @subpackage HTTP

[5] Fix | Delete

* @since 4.4.0

[6] Fix | Delete

*/

[7] Fix | Delete

[8] Fix | Delete

/**

[9] Fix | Delete

* Core class used to integrate PHP Streams as an HTTP transport.

[10] Fix | Delete

*

[11] Fix | Delete

* @since 2.7.0

[12] Fix | Delete

* @since 3.7.0 Combined with the fsockopen transport and switched to `stream_socket_client()`.

[13] Fix | Delete

* @deprecated 6.4.0 Use WP_Http

[14] Fix | Delete

* @see WP_Http

[15] Fix | Delete

*/

[16] Fix | Delete

#[AllowDynamicProperties]

[17] Fix | Delete

class WP_Http_Streams {

[18] Fix | Delete

/**

[19] Fix | Delete

* Send a HTTP request to a URI using PHP Streams.

[20] Fix | Delete

*

[21] Fix | Delete

* @see WP_Http::request() For default options descriptions.

[22] Fix | Delete

*

[23] Fix | Delete

* @since 2.7.0

[24] Fix | Delete

* @since 3.7.0 Combined with the fsockopen transport and switched to stream_socket_client().

[25] Fix | Delete

*

[26] Fix | Delete

* @param string $url The request URL.

[27] Fix | Delete

* @param string|array $args Optional. Override the defaults.

[28] Fix | Delete

* @return array|WP_Error Array containing 'headers', 'body', 'response', 'cookies', 'filename'. A WP_Error instance upon error

[29] Fix | Delete

*/

[30] Fix | Delete

public function request( $url, $args = array() ) {

[31] Fix | Delete

$defaults = array(

[32] Fix | Delete

'method' => 'GET',

[33] Fix | Delete

'timeout' => 5,

[34] Fix | Delete

'redirection' => 5,

[35] Fix | Delete

'httpversion' => '1.0',

[36] Fix | Delete

'blocking' => true,

[37] Fix | Delete

'headers' => array(),

[38] Fix | Delete

'body' => null,

[39] Fix | Delete

'cookies' => array(),

[40] Fix | Delete

'decompress' => false,

[41] Fix | Delete

'stream' => false,

[42] Fix | Delete

'filename' => null,

[43] Fix | Delete

);

[44] Fix | Delete

[45] Fix | Delete

$parsed_args = wp_parse_args( $args, $defaults );

[46] Fix | Delete

[47] Fix | Delete

if ( isset( $parsed_args['headers']['User-Agent'] ) ) {

[48] Fix | Delete

$parsed_args['user-agent'] = $parsed_args['headers']['User-Agent'];

[49] Fix | Delete

unset( $parsed_args['headers']['User-Agent'] );

[50] Fix | Delete

} elseif ( isset( $parsed_args['headers']['user-agent'] ) ) {

[51] Fix | Delete

$parsed_args['user-agent'] = $parsed_args['headers']['user-agent'];

[52] Fix | Delete

unset( $parsed_args['headers']['user-agent'] );

[53] Fix | Delete

}

[54] Fix | Delete

[55] Fix | Delete

// Construct Cookie: header if any cookies are set.

[56] Fix | Delete

WP_Http::buildCookieHeader( $parsed_args );

[57] Fix | Delete

[58] Fix | Delete

$parsed_url = parse_url( $url );

[59] Fix | Delete

[60] Fix | Delete

$connect_host = $parsed_url['host'];

[61] Fix | Delete

[62] Fix | Delete

$secure_transport = ( 'ssl' === $parsed_url['scheme'] || 'https' === $parsed_url['scheme'] );

[63] Fix | Delete

if ( ! isset( $parsed_url['port'] ) ) {

[64] Fix | Delete

if ( 'ssl' === $parsed_url['scheme'] || 'https' === $parsed_url['scheme'] ) {

[65] Fix | Delete

$parsed_url['port'] = 443;

[66] Fix | Delete

$secure_transport = true;

[67] Fix | Delete

} else {

[68] Fix | Delete

$parsed_url['port'] = 80;

[69] Fix | Delete

}

[70] Fix | Delete

}

[71] Fix | Delete

[72] Fix | Delete

// Always pass a path, defaulting to the root in cases such as http://example.com.

[73] Fix | Delete

if ( ! isset( $parsed_url['path'] ) ) {

[74] Fix | Delete

$parsed_url['path'] = '/';

[75] Fix | Delete

}

[76] Fix | Delete

[77] Fix | Delete

if ( isset( $parsed_args['headers']['Host'] ) || isset( $parsed_args['headers']['host'] ) ) {

[78] Fix | Delete

if ( isset( $parsed_args['headers']['Host'] ) ) {

[79] Fix | Delete

$parsed_url['host'] = $parsed_args['headers']['Host'];

[80] Fix | Delete

} else {

[81] Fix | Delete

$parsed_url['host'] = $parsed_args['headers']['host'];

[82] Fix | Delete

}

[83] Fix | Delete

unset( $parsed_args['headers']['Host'], $parsed_args['headers']['host'] );

[84] Fix | Delete

}

[85] Fix | Delete

[86] Fix | Delete

/*

[87] Fix | Delete

* Certain versions of PHP have issues with 'localhost' and IPv6, It attempts to connect

[88] Fix | Delete

* to ::1, which fails when the server is not set up for it. For compatibility, always

[89] Fix | Delete

* connect to the IPv4 address.

[90] Fix | Delete

*/

[91] Fix | Delete

if ( 'localhost' === strtolower( $connect_host ) ) {

[92] Fix | Delete

$connect_host = '127.0.0.1';

[93] Fix | Delete

}

[94] Fix | Delete

[95] Fix | Delete

$connect_host = $secure_transport ? 'ssl://' . $connect_host : 'tcp://' . $connect_host;

[96] Fix | Delete

[97] Fix | Delete

$is_local = isset( $parsed_args['local'] ) && $parsed_args['local'];

[98] Fix | Delete

$ssl_verify = isset( $parsed_args['sslverify'] ) && $parsed_args['sslverify'];

[99] Fix | Delete

[100] Fix | Delete

if ( $is_local ) {

[101] Fix | Delete

/**

[102] Fix | Delete

* Filters whether SSL should be verified for local HTTP API requests.

[103] Fix | Delete

*

[104] Fix | Delete

* @since 2.8.0

[105] Fix | Delete

* @since 5.1.0 The `$url` parameter was added.

[106] Fix | Delete

*

[107] Fix | Delete

* @param bool|string $ssl_verify Boolean to control whether to verify the SSL connection

[108] Fix | Delete

* or path to an SSL certificate.

[109] Fix | Delete

* @param string $url The request URL.

[110] Fix | Delete

*/

[111] Fix | Delete

$ssl_verify = apply_filters( 'https_local_ssl_verify', $ssl_verify, $url );

[112] Fix | Delete

} elseif ( ! $is_local ) {

[113] Fix | Delete

/** This filter is documented in wp-includes/class-wp-http.php */

[114] Fix | Delete

$ssl_verify = apply_filters( 'https_ssl_verify', $ssl_verify, $url );

[115] Fix | Delete

}

[116] Fix | Delete

[117] Fix | Delete

$proxy = new WP_HTTP_Proxy();

[118] Fix | Delete

[119] Fix | Delete

$context = stream_context_create(

[120] Fix | Delete

array(

[121] Fix | Delete

'ssl' => array(

[122] Fix | Delete

'verify_peer' => $ssl_verify,

[123] Fix | Delete

// 'CN_match' => $parsed_url['host'], // This is handled by self::verify_ssl_certificate().

[124] Fix | Delete

'capture_peer_cert' => $ssl_verify,

[125] Fix | Delete

'SNI_enabled' => true,

[126] Fix | Delete

'cafile' => $parsed_args['sslcertificates'],

[127] Fix | Delete

'allow_self_signed' => ! $ssl_verify,

[128] Fix | Delete

),

[129] Fix | Delete

)

[130] Fix | Delete

);

[131] Fix | Delete

[132] Fix | Delete

$timeout = (int) floor( $parsed_args['timeout'] );

[133] Fix | Delete

$utimeout = 0;

[134] Fix | Delete

[135] Fix | Delete

if ( $timeout !== (int) $parsed_args['timeout'] ) {

[136] Fix | Delete

$utimeout = 1000000 * $parsed_args['timeout'] % 1000000;

[137] Fix | Delete

}

[138] Fix | Delete

[139] Fix | Delete

$connect_timeout = max( $timeout, 1 );

[140] Fix | Delete

[141] Fix | Delete

// Store error number.

[142] Fix | Delete

$connection_error = null;

[143] Fix | Delete

[144] Fix | Delete

// Store error string.

[145] Fix | Delete

$connection_error_str = null;

[146] Fix | Delete

[147] Fix | Delete

if ( ! WP_DEBUG ) {

[148] Fix | Delete

// In the event that the SSL connection fails, silence the many PHP warnings.

[149] Fix | Delete

if ( $secure_transport ) {

[150] Fix | Delete

$error_reporting = error_reporting( 0 );

[151] Fix | Delete

}

[152] Fix | Delete

[153] Fix | Delete

if ( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) ) {

[154] Fix | Delete

// phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged

[155] Fix | Delete

$handle = @stream_socket_client(

[156] Fix | Delete

'tcp://' . $proxy->host() . ':' . $proxy->port(),

[157] Fix | Delete

$connection_error,

[158] Fix | Delete

$connection_error_str,

[159] Fix | Delete

$connect_timeout,

[160] Fix | Delete

STREAM_CLIENT_CONNECT,

[161] Fix | Delete

$context

[162] Fix | Delete

);

[163] Fix | Delete

} else {

[164] Fix | Delete

// phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged

[165] Fix | Delete

$handle = @stream_socket_client(

[166] Fix | Delete

$connect_host . ':' . $parsed_url['port'],

[167] Fix | Delete

$connection_error,

[168] Fix | Delete

$connection_error_str,

[169] Fix | Delete

$connect_timeout,

[170] Fix | Delete

STREAM_CLIENT_CONNECT,

[171] Fix | Delete

$context

[172] Fix | Delete

);

[173] Fix | Delete

}

[174] Fix | Delete

[175] Fix | Delete

if ( $secure_transport ) {

[176] Fix | Delete

error_reporting( $error_reporting );

[177] Fix | Delete

}

[178] Fix | Delete

} else {

[179] Fix | Delete

if ( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) ) {

[180] Fix | Delete

$handle = stream_socket_client(

[181] Fix | Delete

'tcp://' . $proxy->host() . ':' . $proxy->port(),

[182] Fix | Delete

$connection_error,

[183] Fix | Delete

$connection_error_str,

[184] Fix | Delete

$connect_timeout,

[185] Fix | Delete

STREAM_CLIENT_CONNECT,

[186] Fix | Delete

$context

[187] Fix | Delete

);

[188] Fix | Delete

} else {

[189] Fix | Delete

$handle = stream_socket_client(

[190] Fix | Delete

$connect_host . ':' . $parsed_url['port'],

[191] Fix | Delete

$connection_error,

[192] Fix | Delete

$connection_error_str,

[193] Fix | Delete

$connect_timeout,

[194] Fix | Delete

STREAM_CLIENT_CONNECT,

[195] Fix | Delete

$context

[196] Fix | Delete

);

[197] Fix | Delete

}

[198] Fix | Delete

}

[199] Fix | Delete

[200] Fix | Delete

if ( false === $handle ) {

[201] Fix | Delete

// SSL connection failed due to expired/invalid cert, or, OpenSSL configuration is broken.

[202] Fix | Delete

if ( $secure_transport && 0 === $connection_error && '' === $connection_error_str ) {

[203] Fix | Delete

return new WP_Error( 'http_request_failed', __( 'The SSL certificate for the host could not be verified.' ) );

[204] Fix | Delete

}

[205] Fix | Delete

[206] Fix | Delete

return new WP_Error( 'http_request_failed', $connection_error . ': ' . $connection_error_str );

[207] Fix | Delete

}

[208] Fix | Delete

[209] Fix | Delete

// Verify that the SSL certificate is valid for this request.

[210] Fix | Delete

if ( $secure_transport && $ssl_verify && ! $proxy->is_enabled() ) {

[211] Fix | Delete

if ( ! self::verify_ssl_certificate( $handle, $parsed_url['host'] ) ) {

[212] Fix | Delete

return new WP_Error( 'http_request_failed', __( 'The SSL certificate for the host could not be verified.' ) );

[213] Fix | Delete

}

[214] Fix | Delete

}

[215] Fix | Delete

[216] Fix | Delete

stream_set_timeout( $handle, $timeout, $utimeout );

[217] Fix | Delete

[218] Fix | Delete

if ( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) ) { // Some proxies require full URL in this field.

[219] Fix | Delete

$request_path = $url;

[220] Fix | Delete

} else {

[221] Fix | Delete

$request_path = $parsed_url['path'] . ( isset( $parsed_url['query'] ) ? '?' . $parsed_url['query'] : '' );

[222] Fix | Delete

}

[223] Fix | Delete

[224] Fix | Delete

$headers = strtoupper( $parsed_args['method'] ) . ' ' . $request_path . ' HTTP/' . $parsed_args['httpversion'] . "\r\n";

[225] Fix | Delete

[226] Fix | Delete

$include_port_in_host_header = (

[227] Fix | Delete

( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) )

[228] Fix | Delete

|| ( 'http' === $parsed_url['scheme'] && 80 !== $parsed_url['port'] )

[229] Fix | Delete

|| ( 'https' === $parsed_url['scheme'] && 443 !== $parsed_url['port'] )

[230] Fix | Delete

);

[231] Fix | Delete

[232] Fix | Delete

if ( $include_port_in_host_header ) {

[233] Fix | Delete

$headers .= 'Host: ' . $parsed_url['host'] . ':' . $parsed_url['port'] . "\r\n";

[234] Fix | Delete

} else {

[235] Fix | Delete

$headers .= 'Host: ' . $parsed_url['host'] . "\r\n";

[236] Fix | Delete

}

[237] Fix | Delete

[238] Fix | Delete

if ( isset( $parsed_args['user-agent'] ) ) {

[239] Fix | Delete

$headers .= 'User-agent: ' . $parsed_args['user-agent'] . "\r\n";

[240] Fix | Delete

}

[241] Fix | Delete

[242] Fix | Delete

if ( is_array( $parsed_args['headers'] ) ) {

[243] Fix | Delete

foreach ( (array) $parsed_args['headers'] as $header => $header_value ) {

[244] Fix | Delete

$headers .= $header . ': ' . $header_value . "\r\n";

[245] Fix | Delete

}

[246] Fix | Delete

} else {

[247] Fix | Delete

$headers .= $parsed_args['headers'];

[248] Fix | Delete

}

[249] Fix | Delete

[250] Fix | Delete

if ( $proxy->use_authentication() ) {

[251] Fix | Delete

$headers .= $proxy->authentication_header() . "\r\n";

[252] Fix | Delete

}

[253] Fix | Delete

[254] Fix | Delete

$headers .= "\r\n";

[255] Fix | Delete

[256] Fix | Delete

if ( ! is_null( $parsed_args['body'] ) ) {

[257] Fix | Delete

$headers .= $parsed_args['body'];

[258] Fix | Delete

}

[259] Fix | Delete

[260] Fix | Delete

fwrite( $handle, $headers );

[261] Fix | Delete

[262] Fix | Delete

if ( ! $parsed_args['blocking'] ) {

[263] Fix | Delete

stream_set_blocking( $handle, 0 );

[264] Fix | Delete

fclose( $handle );

[265] Fix | Delete

return array(

[266] Fix | Delete

'headers' => array(),

[267] Fix | Delete

'body' => '',

[268] Fix | Delete

'response' => array(

[269] Fix | Delete

'code' => false,

[270] Fix | Delete

'message' => false,

[271] Fix | Delete

),

[272] Fix | Delete

'cookies' => array(),

[273] Fix | Delete

);

[274] Fix | Delete

}

[275] Fix | Delete

[276] Fix | Delete

$response = '';

[277] Fix | Delete

$body_started = false;

[278] Fix | Delete

$keep_reading = true;

[279] Fix | Delete

$block_size = 4096;

[280] Fix | Delete

[281] Fix | Delete

if ( isset( $parsed_args['limit_response_size'] ) ) {

[282] Fix | Delete

$block_size = min( $block_size, $parsed_args['limit_response_size'] );

[283] Fix | Delete

}

[284] Fix | Delete

[285] Fix | Delete

// If streaming to a file setup the file handle.

[286] Fix | Delete

if ( $parsed_args['stream'] ) {

[287] Fix | Delete

if ( ! WP_DEBUG ) {

[288] Fix | Delete

$stream_handle = @fopen( $parsed_args['filename'], 'w+' );

[289] Fix | Delete

} else {

[290] Fix | Delete

$stream_handle = fopen( $parsed_args['filename'], 'w+' );

[291] Fix | Delete

}

[292] Fix | Delete

[293] Fix | Delete

if ( ! $stream_handle ) {

[294] Fix | Delete

return new WP_Error(

[295] Fix | Delete

'http_request_failed',

[296] Fix | Delete

sprintf(

[297] Fix | Delete

/* translators: 1: fopen(), 2: File name. */

[298] Fix | Delete

__( 'Could not open handle for %1$s to %2$s.' ),

[299] Fix | Delete

'fopen()',

[300] Fix | Delete

$parsed_args['filename']

[301] Fix | Delete

)

[302] Fix | Delete

);

[303] Fix | Delete

}

[304] Fix | Delete

[305] Fix | Delete

$bytes_written = 0;

[306] Fix | Delete

[307] Fix | Delete

while ( ! feof( $handle ) && $keep_reading ) {

[308] Fix | Delete

$block = fread( $handle, $block_size );

[309] Fix | Delete

if ( ! $body_started ) {

[310] Fix | Delete

$response .= $block;

[311] Fix | Delete

if ( strpos( $response, "\r\n\r\n" ) ) {

[312] Fix | Delete

$processed_response = WP_Http::processResponse( $response );

[313] Fix | Delete

$body_started = true;

[314] Fix | Delete

$block = $processed_response['body'];

[315] Fix | Delete

unset( $response );

[316] Fix | Delete

$processed_response['body'] = '';

[317] Fix | Delete

}

[318] Fix | Delete

}

[319] Fix | Delete

[320] Fix | Delete

$this_block_size = strlen( $block );

[321] Fix | Delete

[322] Fix | Delete

if ( isset( $parsed_args['limit_response_size'] )

[323] Fix | Delete

&& ( $bytes_written + $this_block_size ) > $parsed_args['limit_response_size']

[324] Fix | Delete

) {

[325] Fix | Delete

$this_block_size = ( $parsed_args['limit_response_size'] - $bytes_written );

[326] Fix | Delete

$block = substr( $block, 0, $this_block_size );

[327] Fix | Delete

}

[328] Fix | Delete

[329] Fix | Delete

$bytes_written_to_file = fwrite( $stream_handle, $block );

[330] Fix | Delete

[331] Fix | Delete

if ( $bytes_written_to_file !== $this_block_size ) {

[332] Fix | Delete

fclose( $handle );

[333] Fix | Delete

fclose( $stream_handle );

[334] Fix | Delete

return new WP_Error( 'http_request_failed', __( 'Failed to write request to temporary file.' ) );

[335] Fix | Delete

}

[336] Fix | Delete

[337] Fix | Delete

$bytes_written += $bytes_written_to_file;

[338] Fix | Delete

[339] Fix | Delete

$keep_reading = (

[340] Fix | Delete

! isset( $parsed_args['limit_response_size'] )

[341] Fix | Delete

|| $bytes_written < $parsed_args['limit_response_size']

[342] Fix | Delete

);

[343] Fix | Delete

}

[344] Fix | Delete

[345] Fix | Delete

fclose( $stream_handle );

[346] Fix | Delete

[347] Fix | Delete

} else {

[348] Fix | Delete

$header_length = 0;

[349] Fix | Delete

[350] Fix | Delete

while ( ! feof( $handle ) && $keep_reading ) {

[351] Fix | Delete

$block = fread( $handle, $block_size );

[352] Fix | Delete

$response .= $block;

[353] Fix | Delete

[354] Fix | Delete

if ( ! $body_started && strpos( $response, "\r\n\r\n" ) ) {

[355] Fix | Delete

$header_length = strpos( $response, "\r\n\r\n" ) + 4;

[356] Fix | Delete

$body_started = true;

[357] Fix | Delete

}

[358] Fix | Delete

[359] Fix | Delete

$keep_reading = (

[360] Fix | Delete

! $body_started

[361] Fix | Delete

|| ! isset( $parsed_args['limit_response_size'] )

[362] Fix | Delete

|| strlen( $response ) < ( $header_length + $parsed_args['limit_response_size'] )

[363] Fix | Delete

);

[364] Fix | Delete

}

[365] Fix | Delete

[366] Fix | Delete

$processed_response = WP_Http::processResponse( $response );

[367] Fix | Delete

unset( $response );

[368] Fix | Delete

[369] Fix | Delete

}

[370] Fix | Delete

[371] Fix | Delete

fclose( $handle );

[372] Fix | Delete

[373] Fix | Delete

$processed_headers = WP_Http::processHeaders( $processed_response['headers'], $url );

[374] Fix | Delete

[375] Fix | Delete

$response = array(

[376] Fix | Delete

'headers' => $processed_headers['headers'],

[377] Fix | Delete

// Not yet processed.

[378] Fix | Delete

'body' => null,

[379] Fix | Delete

'response' => $processed_headers['response'],

[380] Fix | Delete

'cookies' => $processed_headers['cookies'],

[381] Fix | Delete

'filename' => $parsed_args['filename'],

[382] Fix | Delete

);

[383] Fix | Delete

[384] Fix | Delete

// Handle redirects.

[385] Fix | Delete

$redirect_response = WP_Http::handle_redirects( $url, $parsed_args, $response );

[386] Fix | Delete

if ( false !== $redirect_response ) {

[387] Fix | Delete

return $redirect_response;

[388] Fix | Delete

}

[389] Fix | Delete

[390] Fix | Delete

// If the body was chunk encoded, then decode it.

[391] Fix | Delete

if ( ! empty( $processed_response['body'] )

[392] Fix | Delete

&& isset( $processed_headers['headers']['transfer-encoding'] )

[393] Fix | Delete

&& 'chunked' === $processed_headers['headers']['transfer-encoding']

[394] Fix | Delete

) {

[395] Fix | Delete

$processed_response['body'] = WP_Http::chunkTransferDecode( $processed_response['body'] );

[396] Fix | Delete

}

[397] Fix | Delete

[398] Fix | Delete

if ( true === $parsed_args['decompress']

[399] Fix | Delete

&& true === WP_Http_Encoding::should_decode( $processed_headers['headers'] )

[400] Fix | Delete

) {

[401] Fix | Delete

$processed_response['body'] = WP_Http_Encoding::decompress( $processed_response['body'] );

[402] Fix | Delete

}

[403] Fix | Delete

[404] Fix | Delete

if ( isset( $parsed_args['limit_response_size'] )

[405] Fix | Delete

&& strlen( $processed_response['body'] ) > $parsed_args['limit_response_size']

[406] Fix | Delete

) {

[407] Fix | Delete

$processed_response['body'] = substr( $processed_response['body'], 0, $parsed_args['limit_response_size'] );

[408] Fix | Delete

}

[409] Fix | Delete

[410] Fix | Delete

$response['body'] = $processed_response['body'];

[411] Fix | Delete

[412] Fix | Delete

return $response;

[413] Fix | Delete

}

[414] Fix | Delete

[415] Fix | Delete

/**

[416] Fix | Delete

* Verifies the received SSL certificate against its Common Names and subjectAltName fields.

[417] Fix | Delete

*

[418] Fix | Delete

* PHP's SSL verifications only verify that it's a valid Certificate, it doesn't verify if

[419] Fix | Delete

* the certificate is valid for the hostname which was requested.

[420] Fix | Delete

* This function verifies the requested hostname against certificate's subjectAltName field,

[421] Fix | Delete

* if that is empty, or contains no DNS entries, a fallback to the Common Name field is used.

[422] Fix | Delete

*

[423] Fix | Delete

* IP Address support is included if the request is being made to an IP address.

[424] Fix | Delete

*

[425] Fix | Delete

* @since 3.7.0

[426] Fix | Delete

*

[427] Fix | Delete

* @param resource $stream The PHP Stream which the SSL request is being made over

[428] Fix | Delete

* @param string $host The hostname being requested

[429] Fix | Delete

* @return bool If the certificate presented in $stream is valid for $host

[430] Fix | Delete

*/

[431] Fix | Delete

public static function verify_ssl_certificate( $stream, $host ) {

[432] Fix | Delete

$context_options = stream_context_get_options( $stream );

[433] Fix | Delete

[434] Fix | Delete

if ( empty( $context_options['ssl']['peer_certificate'] ) ) {

[435] Fix | Delete

return false;

[436] Fix | Delete

}

[437] Fix | Delete

[438] Fix | Delete

$cert = openssl_x509_parse( $context_options['ssl']['peer_certificate'] );

[439] Fix | Delete

if ( ! $cert ) {

[440] Fix | Delete

return false;

[441] Fix | Delete

}

[442] Fix | Delete

[443] Fix | Delete

/*

[444] Fix | Delete

* If the request is being made to an IP address, we'll validate against IP fields

[445] Fix | Delete

* in the cert (if they exist)

[446] Fix | Delete

*/

[447] Fix | Delete

$host_type = ( WP_Http::is_ip_address( $host ) ? 'ip' : 'dns' );

[448] Fix | Delete

[449] Fix | Delete

$certificate_hostnames = array();

[450] Fix | Delete

if ( ! empty( $cert['extensions']['subjectAltName'] ) ) {

[451] Fix | Delete

$match_against = preg_split( '/,\s*/', $cert['extensions']['subjectAltName'] );

[452] Fix | Delete

foreach ( $match_against as $match ) {

[453] Fix | Delete

list( $match_type, $match_host ) = explode( ':', $match );

[454] Fix | Delete

if ( strtolower( trim( $match_type ) ) === $host_type ) { // IP: or DNS:

[455] Fix | Delete

$certificate_hostnames[] = strtolower( trim( $match_host ) );

[456] Fix | Delete

}

[457] Fix | Delete

}

[458] Fix | Delete

} elseif ( ! empty( $cert['subject']['CN'] ) ) {

[459] Fix | Delete

// Only use the CN when the certificate includes no subjectAltName extension.

[460] Fix | Delete

$certificate_hostnames[] = strtolower( $cert['subject']['CN'] );

[461] Fix | Delete

}

[462] Fix | Delete

[463] Fix | Delete

// Exact hostname/IP matches.

[464] Fix | Delete

if ( in_array( strtolower( $host ), $certificate_hostnames, true ) ) {

[465] Fix | Delete

return true;

[466] Fix | Delete

}

[467] Fix | Delete

[468] Fix | Delete

// IP's can't be wildcards, Stop processing.

[469] Fix | Delete

if ( 'ip' === $host_type ) {

[470] Fix | Delete

return false;

[471] Fix | Delete

}

[472] Fix | Delete

[473] Fix | Delete

// Test to see if the domain is at least 2 deep for wildcard support.

[474] Fix | Delete

if ( substr_count( $host, '.' ) < 2 ) {

[475] Fix | Delete

return false;

[476] Fix | Delete

}

[477] Fix | Delete

[478] Fix | Delete

// Wildcard subdomains certs (*.example.com) are valid for a.example.com but not a.b.example.com.

[479] Fix | Delete

$wildcard_host = preg_replace( '/^[^.]+\./', '*.', $host );

[480] Fix | Delete

[481] Fix | Delete

return in_array( strtolower( $wildcard_host ), $certificate_hostnames, true );

[482] Fix | Delete

}

[483] Fix | Delete

[484] Fix | Delete

/**

[485] Fix | Delete

* Determines whether this class can be used for retrieving a URL.

[486] Fix | Delete

*

[487] Fix | Delete

* @since 2.7.0

[488] Fix | Delete

* @since 3.7.0 Combined with the fsockopen transport and switched to stream_socket_client().

[489] Fix | Delete

*

[490] Fix | Delete

* @param array $args Optional. Array of request arguments. Default empty array.

[491] Fix | Delete

* @return bool False means this class can not be used, true means it can.

[492] Fix | Delete

*/

[493] Fix | Delete

public static function test( $args = array() ) {

[494] Fix | Delete

if ( ! function_exists( 'stream_socket_client' ) ) {

[495] Fix | Delete

return false;

[496] Fix | Delete

}

[497] Fix | Delete

[498] Fix | Delete

$is_ssl = isset( $args['ssl'] ) && $args['ssl'];

[499] Fix | Delete