Wie verwende ich den Filter 'http_request_host_is_external'

Question

Wie verwende ich den Filter 'http_request_host_is_external'

3

8110 2013-11-14

Esfälltmir wirklich schwer,den Filter http_request_host_is_external zu verwenden. Füreinige Hintergrundinformationen versucheich,einen separaten Serverfürprivate Plugin- und Theme-Updateseinzurichten. Das Problemist,dasses sich aufeinem separaten Serverbefindet,sodass die Wordpress-Funktion wp_http_validate_url (wp-includes/http.php) die Anforderungbeendet. Das Folgende sind die Zeilen 481-503 dieser Datei.

 if ( $ip ) {
        $parts = array_map( 'intval', explode( '.', $ip ) );
        if ( '127.0.0.1' === $ip
            || ( 10 === $parts[0] )
            || ( 172 === $parts[0] && 16 <= $parts[1] && 31 >= $parts[1] )
            || ( 192 === $parts[0] && 168 === $parts[1] )
        ) {
            // If host appears local, reject unless specifically allowed.
            /**
             * Check if HTTP request is external or not.
             *
             * Allows to change and allow external requests for the HTTP request.
             *
             * @since 3.6.0
             *
             * @param bool false Whether HTTP request is external or not.
             * @param string $host IP of the requested host.
             * @param string $url URL of the requested host.
             */
            if ( ! apply_filters( 'http_request_host_is_external', false, $host, $url ) )
                return false;
        }
    }

Sie werdenfeststellen,dass dortein Kommentar steht,in demerwähnt wird,dass wir den Filter anwenden undexterne Anfragen stellen können sollten,aber wasich versuche,scheintnicht zufunktionieren.

     require 'plugin_update_checker.php';
apply_filters( 'http_request_host_is_external', true, "my-update-server.com", 'http://my-update-server.com/update/8b6b28f1a2604deea192076cb2343ff4/' );
$MyUpdateChecker = new PluginUpdateChecker_1_3(
    'http://my-update-server/update/8b6b28f1a2604deea192076cb2343ff4/',
    __FILE__,
    'testslug'
);

Ich dachte,wennich den Filterin der Hauptdateimeines Plugins setze,würdeer sich darum kümmern,aberich denke,das Problemist,dass dieexterne Anforderung direktim Wordpress-Updater ausgeführt wird. Vielleichttrifftmein Filter alsonicht zu?

I'm having a really hard time trying to use the http_request_host_is_external filter. For some background, I'm trying to set up a separate server to handle private plugin and theme updates. The problem is that it's on a separate server, so the Wordpress wp_http_validate_url (wp-includes/http.php) function kills the request. The following are lines 481-503 of that file.

if ( $ip ) {
        $parts = array_map( 'intval', explode( '.', $ip ) );
        if ( '127.0.0.1' === $ip
            || ( 10 === $parts[0] )
            || ( 172 === $parts[0] && 16 <= $parts[1] && 31 >= $parts[1] )
            || ( 192 === $parts[0] && 168 === $parts[1] )
        ) {
            // If host appears local, reject unless specifically allowed.
            /**
             * Check if HTTP request is external or not.
             *
             * Allows to change and allow external requests for the HTTP request.
             *
             * @since 3.6.0
             *
             * @param bool false Whether HTTP request is external or not.
             * @param string $host IP of the requested host.
             * @param string $url URL of the requested host.
             */
            if ( ! apply_filters( 'http_request_host_is_external', false, $host, $url ) )
                return false;
        }
    }

You'll notice that there is a comment in there that mentions we should be able to apply the filter and make external requests, but what I'm trying doesn't seem to work.

    require 'plugin_update_checker.php';
apply_filters( 'http_request_host_is_external', true, "my-update-server.com", 'http://my-update-server.com/update/8b6b28f1a2604deea192076cb2343ff4/' );
$MyUpdateChecker = new PluginUpdateChecker_1_3(
    'http://my-update-server/update/8b6b28f1a2604deea192076cb2343ff4/',
    __FILE__,
    'testslug'
);

I thought that if I set the filter in my plugin's main file it would take care of it, but I think the issue is that the external request is happening right in Wordpress's updater, so maybe my filter doesn't apply?

2 Antworten

Stimmen

0

2013-11-14

Ichbin anscheinendetwas verrostet.Das hat sichfürmicherledigt:

 add_filter( 'http_request_host_is_external', function() { return true; });

I'm apparently a little rusty. This took care of it for me:

add_filter( 'http_request_host_is_external', function() { return true; });

Otto · Accepted Answer · 2013-11-14

11

2013-11-14

Sie können diestun:

 add_filter( 'http_request_host_is_external', '__return_true' );

Beachten Siejedoch,dass diese Sicherheitsfunktion dadurch deaktiviert wird.Wenn Sie wissen,dass sich der Host oder die URLnicht ändern wird und dies auchimmer sein wird,können Sie sicherer sein,indem Sie diesexplizit überprüfen:

 add_filter( 'http_request_host_is_external', 'allow_my_custom_host', 10, 3 );
function allow_my_custom_host( $allow, $host, $url ) {
  if ( $host == 'my-update-server' )
    $allow = true;
  return $allow;
}

You can do this:

add_filter( 'http_request_host_is_external', '__return_true' );

However, note that this disables this security feature. If you know the host or url isn't going to change and is always going to be that, you can be more secure by checking for that explicitly:

add_filter( 'http_request_host_is_external', 'allow_my_custom_host', 10, 3 );
function allow_my_custom_host( $allow, $host, $url ) {
  if ( $host == 'my-update-server' )
    $allow = true;
  return $allow;
}

Quelle
Otto

Was sind die 3. und 4. Argumentefür (,,10,3)?

What are the 3rd and 4th arguments for (,,10,3)?
- 0
- 2013-11-15
- Jack Slingerland
Die 10ist die Priorität des Filters (10ist die Standardeinstellung) und die 3ist die Anzahl der Argumente,die an die Filterfunktion übergeben werden sollen (die Standardeinstellungist 1).Aus diesem Grundmussteich hier die 10,3 hinzufügen,da die Funktion die Werte $ host und $ url an sie übergeben soll.

The 10 is the priority of the filter (10 is the default setting), and the 3 is the number of arguments to pass to the filter function (the default is 1). This is why I had to add the 10, 3 here, because I want the function to get the $host and $url values passed to it.
- 1
- 2013-11-15
- Otto