Ticket #16606: 16606.4.patch

wp-includes/class-http.php

@@ -868 +868 @@
          *
          * @return boolean False means this class can not be used, true means it can.
          */
-        function test($args = array()) {
-                if ( ! function_exists('fopen') || (function_exists('ini_get') && true != ini_get('allow_url_fopen')) )
-                        return false;
+        function test( $args = array(), $url = '' ) {
+                $is_ssl = isset( $args['ssl'] ) && $args['ssl'];
 
-                return apply_filters('use_streams_transport', true, $args);
+                $scheme = emprty($url) ? 'http' : strtolower( parse_url( $url, PHP_URL_SCHEME ) );
+                
+                $allowed_streams = array('http', 'https');
+                
+                // check if the requested scheme is allowed 
+                $use = in_array( $scheme, $allowed_streams);
+                
+                // check if the fopen function exists
+                if ( $use )
+                        $use = function_exists('fopen');
+                
+                // check if url fopen is allowed
+                if ( $use )
+                        $use = function_exists('ini_get') && ini_get('allow_url_fopen');
+
+                // check if requested scheme has a stream wrapper
+                if ( $use )
+                        $use = in_array( $scheme, stream_get_wrappers() );
+
+                // check specifically agains openssl extension
+                if ( $use && $is_ssl )
+                        $use = extension_loaded( 'openssl' );
+
+                // check if streams actually support ssl 
+                if ( $use && $is_ssl )
+                        $use = in_array( 'ssl', stream_get_transports() );
+
+                return (bool) apply_filters( 'use_streams_transport', $use, $args );
         }
 }