JezK

Edit File: hostinger-auto-updates.php

<?php
/**
 * Plugin Name:       Hostinger Smart Auto Updates
 * Plugin URI:        https://www.hostinger.com
 * Description:       Faster and more secure updates for your themes, plugins, and core files. Managed entirely by Hostinger.
 * Version:           1.0.8
 * Author:            Hostinger
 * Author URI:        https://www.hostinger.com
 * License:           GPL-2.0-or-later
 * License URI:       https://www.gnu.org/licenses/gpl-2.0.html
 * Text Domain:       hostinger-auto-updates
 * Domain Path:       /languages
 * Requires at least: 5.0
 * Requires PHP:      7.4
 * Network:           true
 */

if ( ! defined( 'ABSPATH' ) ) {
    exit; // Exit if accessed directly
}

/**
 * Disable automatic updates
 */
add_filter( 'automatic_updater_disabled', '__return_true' ); // Core updates
add_filter( 'auto_update_theme', '__return_false' );         // Theme updates
add_filter( 'auto_update_plugin', '__return_false' );        // Plugin updates

/**
 * Endpoints used to serve package downloads and the WordPress.org API.
 */
if ( ! defined( 'HOSTINGER_LOCAL_DOWNLOAD_BASE' ) ) {
    define( 'HOSTINGER_LOCAL_DOWNLOAD_BASE', 'http://127.0.0.1:7777/hsub_downloads' );
}

if ( ! defined( 'HOSTINGER_CDN_DOWNLOAD_HOST' ) ) {
    define( 'HOSTINGER_CDN_DOWNLOAD_HOST', 'wpdownloads.hostinger.io' );
}

if ( ! defined( 'HOSTINGER_API_PROXY_HOST' ) ) {
    define( 'HOSTINGER_API_PROXY_HOST', 'wpapi.hostinger.io' );
}

/**
 * Timeout cap for the local hop, in seconds.
 */
if ( ! defined( 'HOSTINGER_LOCAL_DOWNLOAD_TIMEOUT' ) ) {
    define( 'HOSTINGER_LOCAL_DOWNLOAD_TIMEOUT', 30 );
}

/**
 * Anything smaller than this is an error page, not a package.
 */
if ( ! defined( 'HOSTINGER_MIN_PACKAGE_BYTES' ) ) {
    define( 'HOSTINGER_MIN_PACKAGE_BYTES', 1024 );
}

/**
 * Build the ordered list of endpoints to try for a downloads.wordpress.org URL.
 */
if ( ! function_exists( 'hostinger_download_tiers' ) ) {
    function hostinger_download_tiers( $url ) {
        $parts = wp_parse_url( $url );
        $path  = isset( $parts['path'] ) ? $parts['path'] : '/';

if ( ! empty( $parts['query'] ) ) {
            $path .= '?' . $parts['query'];
        }

$tiers = [];

if ( ! defined( 'HOSTINGER_DISABLE_LOCAL_PROXY' ) || ! HOSTINGER_DISABLE_LOCAL_PROXY ) {
            $tiers['local'] = untrailingslashit( HOSTINGER_LOCAL_DOWNLOAD_BASE ) . $path;
        }

$tiers['hcdn'] = str_replace( 'downloads.wordpress.org', HOSTINGER_CDN_DOWNLOAD_HOST, $url );

if ( ! defined( 'HOSTINGER_DISABLE_ORIGIN_FALLBACK' ) || ! HOSTINGER_DISABLE_ORIGIN_FALLBACK ) {
            $tiers['wporg'] = $url;
        }

/**
         * Filter the download tiers.
         */
        return apply_filters( 'hostinger_download_tiers', $tiers, $url );
    }
}

/**
 * Adjust request arguments for the loopback hop.
 */
if ( ! function_exists( 'hostinger_prepare_local_request_args' ) ) {
    function hostinger_prepare_local_request_args( $args ) {
        // download_url() goes through wp_safe_remote_get(), which sets
        // reject_unsafe_urls. wp_http_validate_url() rejects 127.0.0.0/8, so the
        // loopback hop would fail before a socket was ever opened. The public
        // tiers keep the check.
        $args['reject_unsafe_urls'] = false;

$timeout = isset( $args['timeout'] ) ? (int) $args['timeout'] : 0;

if ( $timeout <= 0 || $timeout > HOSTINGER_LOCAL_DOWNLOAD_TIMEOUT ) {
            $args['timeout'] = HOSTINGER_LOCAL_DOWNLOAD_TIMEOUT;
        }

if ( empty( $args['headers'] ) || is_array( $args['headers'] ) ) {
            $headers                    = empty( $args['headers'] ) ? [] : $args['headers'];
            $headers['Accept-Encoding'] = 'identity';
            $args['headers']            = $headers;
        }

return $args;
    }
}

/**
 * Whether the requested path looks like a zip archive.
 */
if ( ! function_exists( 'hostinger_url_is_zip' ) ) {
    function hostinger_url_is_zip( $url ) {
        $path = (string) wp_parse_url( $url, PHP_URL_PATH );

return strtolower( substr( $path, -4 ) ) === '.zip';
    }
}

/**
 * Read the first bytes of a file.
 */
if ( ! function_exists( 'hostinger_read_file_head' ) ) {
    function hostinger_read_file_head( $file, $length ) {
        $handle = @fopen( $file, 'rb' );

if ( ! $handle ) {
            return '';
        }

$head = (string) fread( $handle, $length );
        fclose( $handle );

return $head;
    }
}

/**
 * Decide whether a tier actually returned a usable package.
 */
if ( ! function_exists( 'hostinger_inspect_response' ) ) {
    function hostinger_inspect_response( $response, $args, $url ) {
        $result = [
            'ok'     => false,
            'code'   => 0,
            'reason' => '',
        ];

if ( is_wp_error( $response ) ) {
            $result['reason'] = $response->get_error_message();

return $result;
        }

$result['code'] = (int) wp_remote_retrieve_response_code( $response );

if ( $result['code'] !== 200 ) {
            $result['reason'] = 'unexpected response code';

return $result;
        }

if ( ! empty( $args['stream'] ) && ! empty( $args['filename'] ) && file_exists( $args['filename'] ) ) {
            clearstatcache( true, $args['filename'] );

$bytes = (int) filesize( $args['filename'] );
            $head  = hostinger_read_file_head( $args['filename'], 2 );
        } else {
            $body  = wp_remote_retrieve_body( $response );
            $bytes = strlen( $body );
            $head  = substr( $body, 0, 2 );
        }

if ( $bytes < HOSTINGER_MIN_PACKAGE_BYTES ) {
            $result['reason'] = 'response too small to be a package';

return $result;
        }

if ( hostinger_url_is_zip( $url ) && $head !== 'PK' ) {
            $result['reason'] = 'response is not a zip archive';

return $result;
        }

$result['ok'] = true;

return $result;
    }
}

/**
 * Empty the streaming target so a partial body cannot leak into the next tier.
 */
if ( ! function_exists( 'hostinger_reset_stream_target' ) ) {
    function hostinger_reset_stream_target( $args ) {
        if ( empty( $args['stream'] ) || empty( $args['filename'] ) || ! file_exists( $args['filename'] ) ) {
            return;
        }

$handle = @fopen( $args['filename'], 'w' );

if ( $handle ) {
            fclose( $handle );
        }
    }
}

/**
 * Fetch a package, walking the cache chain until one tier returns something usable.
 */
if ( ! function_exists( 'hostinger_fetch_package' ) ) {
    function hostinger_fetch_package( $args, $url ) {
        $response   = new WP_Error( 'hostinger_no_download_tier', 'No download endpoint available.' );
        $inspection = null;

foreach ( hostinger_download_tiers( $url ) as $tier => $tier_url ) {
            $request_args = ( $tier === 'local' ) ? hostinger_prepare_local_request_args( $args ) : $args;
            $response     = wp_remote_request( $tier_url, $request_args );
            $inspection   = hostinger_inspect_response( $response, $args, $url );

if ( $inspection['ok'] ) {
                return $response;
            }

hostinger_reset_stream_target( $args );
        }

if ( ! is_wp_error( $response ) && is_array( $inspection ) ) {
            return new WP_Error(
                'hostinger_package_download_failed',
                sprintf( 'Package download failed: %s (HTTP %d).', $inspection['reason'], $inspection['code'] )
            );
        }

return $response;
    }
}

/**
 * Send WordPress.org API traffic through Hostinger's proxy.
 */
if ( ! function_exists( 'hostinger_fetch_api' ) ) {
    function hostinger_fetch_api( $args, $url ) {
        $proxy_url = str_replace( 'api.wordpress.org', HOSTINGER_API_PROXY_HOST, $url );

return wp_remote_request( $proxy_url, $args );
    }
}

/**
 * Use Hostinger's cache chain for WordPress.org API and download requests.
 */
if ( ! function_exists( 'hostinger_use_proxy_services' ) ) {
    function hostinger_use_proxy_services( $response_override, $args, $url ) {
        static $in_flight = false;

if ( $in_flight ) {
            return $response_override;
        }

$host = strtolower( (string) wp_parse_url( $url, PHP_URL_HOST ) );
        if ( $host !== 'downloads.wordpress.org' && $host !== 'api.wordpress.org' ) {
            return $response_override;
        }

$in_flight = true;

try {
            if ( $host === 'downloads.wordpress.org' ) {
                return hostinger_fetch_package( $args, $url );
            }

return hostinger_fetch_api( $args, $url );
        } finally {
            $in_flight = false;
        }
    }
}

add_filter( 'pre_http_request', 'hostinger_use_proxy_services', 10, 3 );

/**
 * Keep loopback requests off a configured HTTP proxy.
 */
if ( ! function_exists( 'hostinger_bypass_proxy_for_local_cache' ) ) {
    function hostinger_bypass_proxy_for_local_cache( $send, $uri, $check, $home ) {
        // WP_HTTP_Proxy exempts 'localhost' and the site host, but not 127.0.0.1,
        // so on a server with WP_PROXY_HOST set the local cache hop would be sent
        // to the proxy.
        $local_host = wp_parse_url( HOSTINGER_LOCAL_DOWNLOAD_BASE, PHP_URL_HOST );

if ( ! empty( $check['host'] ) && ! empty( $local_host ) && $check['host'] === $local_host ) {
            return false;
        }

return $send;
    }
}

add_filter( 'pre_http_send_through_proxy', 'hostinger_bypass_proxy_for_local_cache', 10, 4 );

/**
 * Modify the default auto-update tests.
 */
if ( ! function_exists( 'hostinger_change_default_autoupdates_test' ) ) {
    function hostinger_change_default_autoupdates_test( $tests ) {
        // Remove default auto-update tests
        unset( $tests['async']['background_updates'] );
        unset( $tests['direct']['plugin_theme_auto_updates'] );

// Add a new test to indicate Hostinger manages updates
        $tests['direct']['hostinger_plugin_theme_auto_updates'] = [
            'label' => __( 'Auto-updates managed by Hostinger' ),
            'test'  => function () {
                $result = [
                    'label'       => __( 'Automatic updates managed by Hostinger' ),
                    'status'      => 'good',
                    'badge'       => [
                        'label' => __( 'Security' ),
                        'color' => 'blue',
                    ],
                    'description' => __( 'Automatic updates ensure your site is always running the latest and most secure versions of WordPress, plugins, and themes.' ),
                    'actions'     => '',
                    'test'        => 'hostinger_managed_updates',
                ];

return $result;
            },
        ];

return $tests;
    }
}

add_filter( 'site_status_tests', 'hostinger_change_default_autoupdates_test' );

JezK

Edit File: hostinger-auto-updates.php

Coming Soon