is_allowed_http_origin() WordPress Function
The is_allowed_http_origin() function is used to check if an HTTP origin is allowed access to WordPress. This is typically used to restrict access to the WordPress admin panel to only certain domains.
is_allowed_http_origin( null|string $origin = null ) #
Determines if the HTTP origin is an authorized one.
Parameters
- $origin
(null|string)(Optional)Origin URL. If not provided, the value of get_http_origin() is used.
Default value: null
Return
(string) Origin URL if allowed, empty string if not.
Source
File: wp-includes/http.php
function is_allowed_http_origin( $origin = null ) { $origin_arg = $origin; if ( null === $origin ) { $origin = get_http_origin(); } if ( $origin && ! in_array( $origin, get_allowed_http_origins(), true ) ) { $origin = ''; } /** * Change the allowed HTTP origin result. * * @since 3.4.0 * * @param string $origin Origin URL if allowed, empty string if not. * @param string $origin_arg Original origin string passed into is_allowed_http_origin function. */ return apply_filters( 'allowed_http_origin', $origin, $origin_arg ); }
Expand full source codeCollapse full source codeView on TracView on GitHub
Changelog
Version | Description |
---|---|
3.4.0 | Introduced. |