WordPress更新后CallAPI函数失效，求PHP API调用替代方案

首先你的代码存在几个明显错误，这很可能是WordPress更新后调用失效的核心原因：

1. URL拼接时错误使用赋值运算符=，比如$aff = urlencode($aff)，正确写法应该是直接使用urlencode($aff)完成拼接
2. POST请求逻辑混乱：明明声明用POST方法，却把参数全部拼在URL里，没有正确通过POST体传递参数
3. 缺少curl错误捕获逻辑，无法定位调用失败的具体原因

下面提供几种PHP调用API的替代方案，优先推荐WordPress原生工具，避免更新兼容性问题：

方法一：使用WordPress原生WP_Http类（推荐） #

WordPress自带的HTTP API是最适配WP生态的方案，不会因版本更新出现环境兼容问题：

// 安全整理请求参数（建议添加WordPress安全过滤）
$params = array(
    'api_key' => sanitize_text_field($_GET["api_key"]),
    'off' => sanitize_text_field($_GET["off"]),
    'net' => sanitize_text_field($_GET["net"]),
    'aff' => urlencode(sanitize_text_field($_GET["aff"])),
    'cid' => urlencode(sanitize_text_field($_GET["cid"])),
    'firstname' => urlencode(sanitize_text_field($_GET["name"])),
    'phone' => urlencode(sanitize_text_field($_GET["phone"])),
    'address' => urlencode(sanitize_text_field($_GET["street"])),
    'city' => urlencode(sanitize_text_field($_GET["city"])),
    'zipcode' => urlencode(sanitize_text_field($_GET["cap"])),
    'qty' => 1,
    'note' => urlencode(sanitize_text_field($_GET["note"])),
    'dto' => urlencode(sanitize_text_field($_GET["dto"]))
);

// 初始化WP_Http实例
$http = new WP_Http();

// 发送POST请求
$response = $http->post(
    'https://www.example.com/addlead',
    array(
        'body' => $params,
        'timeout' => 15, // 设置超时时间
        'sslverify' => true // 根据API要求调整SSL验证开关
    )
);

// 处理响应结果
if (is_wp_error($response)) {
    // 捕获错误，可记录日志或返回提示
    $error = $response->get_error_message();
} else {
    $addlead_json = $response['body'];
    $addlead_json_dec = json_decode($addlead_json, true);
}

方法二：修复原curl函数 #

如果坚持使用curl，先修正代码错误并增加错误处理：

function CallAPI($method, $url, $data = array()){
    $curl = curl_init();

    switch ($method) {
        case "POST":
            curl_setopt($curl, CURLOPT_POST, true);
            if (!empty($data)) {
                curl_setopt($curl, CURLOPT_POSTFIELDS, $data);
            }
            break;
        case "PUT":
            curl_setopt($curl, CURLOPT_PUT, true);
            if (!empty($data)) {
                $tmpfile = tmpfile();
                fwrite($tmpfile, http_build_query($data));
                fseek($tmpfile, 0);
                curl_setopt($curl, CURLOPT_INFILE, $tmpfile);
                curl_setopt($curl, CURLOPT_INFILESIZE, filesize($tmpfile));
            }
            break;
        default:
            if (!empty($data)) {
                $url .= '?' . http_build_query($data);
            }
    }

    curl_setopt($curl, CURLOPT_URL, $url);
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
    // 适配WP更新后的SSL环境
    curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, true);
    curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);

    $result = curl_exec($curl);

    // 捕获curl错误
    if(curl_errno($curl)){
        $error_msg = curl_error($curl);
        curl_close($curl);
        return new WP_Error('curl_error', $error_msg);
    }

    curl_close($curl);
    return $result;
}

// 整理参数并调用
$params = array(
    'api_key' => sanitize_text_field($_GET["api_key"]),
    'off' => sanitize_text_field($_GET["off"]),
    'net' => sanitize_text_field($_GET["net"]),
    'aff' => $_GET["aff"],
    'cid' => $_GET["cid"],
    'firstname' => $_GET["name"],
    'phone' => $_GET["phone"],
    'address' => $_GET["street"],
    'city' => $_GET["city"],
    'zipcode' => $_GET["cap"],
    'qty' => 1,
    'note' => $_GET["note"],
    'dto' => $_GET["dto"]
);

$make_call = CallAPI('POST', 'https://www.example.com/addlead', $params);

if (is_wp_error($make_call)) {
    // 处理错误
} else {
    $addlead_json = $make_call;
    $addlead_json_dec = json_decode($addlead_json, true);
}

方法三：使用file_get_contents（仅环境允许时使用） #

如果服务器开启了allow_url_fopen，可以用这个轻量方案，但兼容性不如前两种：

$params = array(
    'api_key' => sanitize_text_field($_GET["api_key"]),
    'off' => sanitize_text_field($_GET["off"]),
    'net' => sanitize_text_field($_GET["net"]),
    'aff' => urlencode(sanitize_text_field($_GET["aff"])),
    'cid' => urlencode(sanitize_text_field($_GET["cid"])),
    'firstname' => urlencode(sanitize_text_field($_GET["name"])),
    'phone' => urlencode(sanitize_text_field($_GET["phone"])),
    'address' => urlencode(sanitize_text_field($_GET["street"])),
    'city' => urlencode(sanitize_text_field($_GET["city"])),
    'zipcode' => urlencode(sanitize_text_field($_GET["cap"])),
    'qty' => 1,
    'note' => urlencode(sanitize_text_field($_GET["note"])),
    'dto' => urlencode(sanitize_text_field($_GET["dto"]))
);

$options = array(
    'http' => array(
        'header'  => "Content-type: application/x-www-form-urlencoded\r\n",
        'method'  => 'POST',
        'content' => http_build_query($params)
    )
);
$context  = stream_context_create($options);
$result = file_get_contents('https://www.example.com/addlead', false, $context);

if ($result === FALSE) {
    // 处理请求失败逻辑
} else {
    $addlead_json = $result;
    $addlead_json_dec = json_decode($addlead_json, true);
}

额外提醒 #

1. 必须对$_GET参数做安全过滤，避免注入风险
2. 建议将API调用放在WP Cron后台任务中，避免阻塞前端页面加载
3. 添加日志记录，方便后续排查调用问题

内容的提问来源于stack exchange，提问作者AleJarvis