Merge pull request #1649 from WordPress-Coding-Standards/feature/alternative-functions-allow-file-get-contents-input-stream

AlternativeFunctions: allow for php://input used with file_get_contents()

Author: GaryJones

WordPress/Sniffs/WP/AlternativeFunctionsSniff.php

@@ -202,7 +202,13 @@ public function process_matched_token( $stackPtr, $group_name, $matched_content
 					return;
 				}
 
-				unset( $params );
+				$raw_stripped = $this->strip_quotes( $params[1]['raw'] );
+				if ( 'php://input' === $raw_stripped ) {
+					// This is not a file, but the read-only raw data stream from the request body.
+					return;
+				}
+
+				unset( $params, $raw_stripped );
 
 				break;
 		}

WordPress/Tests/WP/AlternativeFunctionsUnitTest.inc

@@ -50,3 +50,4 @@ file_get_contents(MYABSPATH . 'plugin-file.json'); // Warning.
 file_get_contents( MUPLUGINDIR . 'some-file.xml' ); // OK.
 file_get_contents( plugin_dir_path( __FILE__ ) . 'subfolder/*.conf' ); // OK.
 file_get_contents(WP_Upload_Dir()['path'] . 'subdir/file.inc'); // OK.
+file_get_contents( 'php://input' ); // OK.