Changeset 25308 for trunk/src/wp-includes/update.php

Timestamp:

09/09/2013 07:53:15 AM (12 years ago)

Author:

dd32

Message:

Switch to using HTTPS connections for Plugin and Theme API requests when SSL is available. See #18577

File:

• trunk/src/wp-includes/update.php (modified) (3 diffs)

trunk/src/wp-includes/update.php

@@ -77 +77 @@
 
     $url = 'http://api.wordpress.org/core/version-check/1.7/?' . http_build_query( $query, null, '&' );
-
     if ( wp_http_supports( array( 'ssl' ) ) )
         $url = set_url_scheme( $url, 'https' );
@@ -206 +205 @@
     );
 
-    $raw_response = wp_remote_post('http://api.wordpress.org/plugins/update-check/1.0/', $options);
+    $url = 'http://api.wordpress.org/plugins/update-check/1.0/';
+    if ( wp_http_supports( array( 'ssl' ) ) )
+        $url = set_url_scheme( $url, 'https' );
+
+    $raw_response = wp_remote_post( $url, $options );
 
     if ( is_wp_error( $raw_response ) || 200 != wp_remote_retrieve_response_code( $raw_response ) )
@@ -311 +314 @@
     );
 
-    $raw_response = wp_remote_post( 'http://api.wordpress.org/themes/update-check/1.0/', $options );
+    $url = 'http://api.wordpress.org/themes/update-check/1.0/';
+    if ( wp_http_supports( array( 'ssl' ) ) )
+        $url = set_url_scheme( $url, 'https' );
+
+    $raw_response = wp_remote_post( $url, $options );
 
     if ( is_wp_error( $raw_response ) || 200 != wp_remote_retrieve_response_code( $raw_response ) )