http.php in WordPress 4.4-beta1 - CoreFiles

CoreFiles by mySites.guru

Use CoreFiles from your AI agent

# CoreFiles

> The original files of every Joomla and WordPress release, run by mySites.guru. Free, no API key, read-only GET requests.

Use it to tell whether a file on a Joomla or WordPress site is an unmodified core file, which release it came from, and what changed between releases. Hash the site's files where they are and send only the hashes; never upload a site's files.

Base URL: https://corefiles.mysites.guru
Platforms: joomla, wordpress. Versions as released, for example 5.4.0, 6.2.0-rc1, 7.1.4.
Add ?format=json to a page URL (/lookup, /pretty, /folder, /history, /diff, /stats) for the same data as JSON.

## Look up a file by its hash

GET /lookup/{md5 or sha256}?format=json&name={file name}
Lists every release and path that has this content. No matches means it is not a core file in any stored release. With name, "named" lists core files that have that file name, so you can fetch the original and compare.

## Read a core file

GET /raw/{platform}/{version}/{path}        the file's bytes
GET /stat/{platform}/{version}/{path}       md5, sha1, sha256 and size as JSON
GET /history/{platform}/{path}?format=json  the releases where that file changed

## Compare releases

GET /diff/{platform}/{from}/{to}?format=json         added, removed and changed files
GET /diff/{platform}/{from}/{to}/{path}?format=text  a unified diff of one file

## Check a whole site

GET /hashes/{platform}/{version}/plain
Every core file in that release as path<TAB>md5. Hash the site's files and compare: a different md5 means a modified core file, and a file missing from the list is not core.

## Reading the answers

A 404 with X-Corefiles-Release: present means the path is not in that release, so the file is not core.
A 404 with X-Corefiles-Release: missing means that release is not stored yet. Treat the answer as unknown, never as "not core". New releases are added within the hour.
GET /releases.json lists every stored release.

Paste it into Claude, ChatGPT or Cursor. Agents can also read it at /llms.txt. On a lookup, file, history or compare page, Copy for your AI agent adds what that page shows.

http.php35 lines, 1,031 bytes, from wordpress-4.4-beta1.zip

Raw History Compare with 4.3-beta4

md5: c3e56344e6dede789854eef6d008c70d
sha1: 1800598be4c957cb54fa878b9564ca0f267c7c4f
sha256: 670e66ce5ae55fad1b067031303a7b9c75d04849eba5acb4896592143ba1552b

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35

<?php
/**
 * Core HTTP Request API
 *
 * Standardizes the HTTP requests for WordPress. Handles cookies, gzip encoding and decoding, chunk
 * decoding, if HTTP 1.1 and various other difficult HTTP protocol implementations.
 *
 * @package WordPress
 * @subpackage HTTP
 * @since 2.7.0
 */

/** Core HTTP API functionality */
require_once( ABSPATH . WPINC . '/http-functions.php' );

/** WP_Http class */
require_once( ABSPATH . WPINC . '/class-http.php' );

/** WP_Http_Streams class */
require_once( ABSPATH . WPINC . '/class-wp-http-streams.php' );

/** WP_Http_Curl transport class */
require_once( ABSPATH . WPINC . '/class-wp-http-curl.php' );

/** WP_HTTP_Proxy transport class */
require_once( ABSPATH . WPINC . '/class-wp-http-proxy.php' );

/** WP_Http_Cookie class */
require_once( ABSPATH . WPINC . '/class-wp-http-cookie.php' );

/** WP_Http_Encoding class */
require_once( ABSPATH . WPINC . '/class-wp-http-encoding.php' );

/** WP_HTTP_Response class */
require_once( ABSPATH . WPINC . '/class-wp-http-response.php' );

The same content is in 4 releases, WordPress 4.4-beta1 to 4.4-beta4. See them all, or every version of this file.