How to use allowed_http_origins filter in WordPress

allowed_http_origins filter

Change the origin types allowed for HTTP requests.

To use allowed_http_origins filter, first you have to register it using add_filter. You can write this code into functions.php of your activated theme or in a custom WordPress Plugin.

We at WePlugins, always prefer to create a custom WordPress Plugin while using hooks so nothing breaks when you update your WordPress Theme in the future.

In the below live example, we have defined a function weplugins_modify_allowed_http_origins_defaults which takes 1 parameter and we registered using add_filter. The first parameter allowed_http_origins is the name of the hook, The second parameter weplugins_modify_allowed_http_origins_defaults is the name of the function which needs to be called, the third parameter is the priority of calling the hook if the same hook is used multiple times and the last parameter is the number of arguments (if any) to be passed in the registered function.

Sometimes, you have to remove a registered hook so you can use remove_filter to remove allowed_http_origins filter.

Parameters

Below the 1 parameter is required to use this hook.

• $allowed_origins: (string[]) Array of default allowed HTTP origins.
  • (string) Non-secure URL for admin origin.
  • (string) Secure URL for admin origin.
  • (string) Non-secure URL for home origin.
  • (string) Secure URL for home origin.

Live Examples

Example 1: Basic Usage

Below is an example of how you can use this hook.

    function weplugins_modify_allowed_http_origins_defaults($allowed_origins) { 
        // Update the $allowed_origins variable according to your website requirements and return this variable. You can modify the $allowed_origins variable conditionally too if you want.
        return $allowed_origins; 
    }
    // add the filter
    add_filter("allowed_http_origins", "weplugins_modify_allowed_http_origins_defaults", 10, 1);
    

Example 2: Removing a Hook Callback

To remove a hook callback, use the example below.

    remove_filter("allowed_http_origins", "weplugins_modify_allowed_http_origins_defaults", 10, 1);
    

Please make sure to provide the same callback function name, priority, and number of arguments while removing the hook callback.

Example 3: Conditional Modification

Modifying the allowed origins based on a specific condition.

    function weplugins_modify_allowed_http_origins_conditionally($allowed_origins) {
        if (is_admin()) {
            $allowed_origins[] = 'https://admin.example.com';
        }
        return $allowed_origins;
    }
    add_filter("allowed_http_origins", "weplugins_modify_allowed_http_origins_conditionally", 10, 1);