343 lines
11 KiB
PHP
343 lines
11 KiB
PHP
<?php
|
|
|
|
class retrospam_mgr {
|
|
var $spam_words;
|
|
var $comments_list;
|
|
var $found_comments;
|
|
|
|
function retrospam_mgr() {
|
|
global $wpdb;
|
|
|
|
$list = explode("\n", get_settings('moderation_keys') );
|
|
$list = array_unique( $list );
|
|
$this->spam_words = $list;
|
|
|
|
$this->comment_list = $wpdb->get_results("SELECT comment_ID AS ID, comment_content AS text, comment_approved AS approved, comment_author_url AS url, comment_author_ip AS ip, comment_author_email AS email FROM $wpdb->comments ORDER BY comment_ID ASC");
|
|
} // End of class constructor
|
|
|
|
function move_spam( $id_list ) {
|
|
global $wpdb;
|
|
$cnt = 0;
|
|
$id_list = explode( ',', $id_list );
|
|
|
|
foreach ( $id_list as $comment ) {
|
|
if ( $wpdb->query("update $wpdb->comments set comment_approved = '0' where comment_ID = '$comment'") ) {
|
|
$cnt++;
|
|
}
|
|
}
|
|
echo "<div class='updated'><p>$cnt comment";
|
|
if ($cnt != 1 ) echo "s";
|
|
echo " moved to the moderation queue.</p></div>\n";
|
|
} // End function move_spam
|
|
|
|
function find_spam() {
|
|
$in_queue = 0;
|
|
|
|
foreach( $this->comment_list as $comment ) {
|
|
if( $comment->approved == 1 ) {
|
|
foreach( $this->spam_words as $word ) {
|
|
$word = trim($word);
|
|
if ( empty( $word ) )
|
|
continue;
|
|
$fulltext = strtolower($comment->email.' '.$comment->url.' '.$comment->ip.' '.$comment->text);
|
|
if( strpos( $fulltext, strtolower($word) ) != FALSE ) {
|
|
$this->found_comments[] = $comment->ID;
|
|
break;
|
|
}
|
|
}
|
|
} else {
|
|
$in_queue++;
|
|
}
|
|
}
|
|
return array( 'found' => $this->found_comments, 'in_queue' => $in_queue );
|
|
} // End function find_spam
|
|
|
|
function display_edit_form( $counters ) {
|
|
$numfound = count($counters[found]);
|
|
$numqueue = $counters[in_queue];
|
|
|
|
$body = '<p>' . sprintf(__('Suspected spam comments: <strong>%s</strong>'), $numfound) . '</p>';
|
|
|
|
if ( count($counters[found]) > 0 ) {
|
|
$id_list = implode( ',', $counters[found] );
|
|
$body .= '<p><a href="options-discussion.php?action=retrospam&move=true&ids='.$id_list.'">'. __('Move suspect comments to moderation queue »') . '</a></p>';
|
|
|
|
}
|
|
$head = '<div class="wrap"><h2>' . __('Check Comments Results:') . '</h2>';
|
|
|
|
$foot .= '<p><a href="options-discussion.php">' . __('« Return to Discussion Options page.') . '</a></p></div>';
|
|
|
|
return $head . $body . $foot;
|
|
} // End function display_edit_form
|
|
|
|
}
|
|
|
|
class WP {
|
|
var $public_query_vars = array('m', 'p', 'posts', 'w', 'cat', 'withcomments', 's', 'search', 'exact', 'sentence', 'debug', 'calendar', 'page', 'paged', 'more', 'tb', 'pb', 'author', 'order', 'orderby', 'year', 'monthnum', 'day', 'hour', 'minute', 'second', 'name', 'category_name', 'feed', 'author_name', 'static', 'pagename', 'page_id', 'error', 'comments_popup', 'attachment', 'attachment_id', 'subpost', 'subpost_id', 'preview');
|
|
|
|
var $private_query_vars = array('posts_per_page', 'posts_per_archive_page', 'what_to_show', 'showposts', 'nopaging', 'post_type');
|
|
var $extra_query_vars = array();
|
|
|
|
var $query_vars;
|
|
var $query_string;
|
|
var $request;
|
|
var $matched_rule;
|
|
var $matched_query;
|
|
var $did_permalink = false;
|
|
|
|
function add_query_var($qv) {
|
|
$this->public_query_vars[] = $qv;
|
|
}
|
|
|
|
function parse_request($extra_query_vars = '') {
|
|
global $wp_rewrite;
|
|
|
|
$this->query_vars = array();
|
|
|
|
if (! empty($extra_query_vars))
|
|
parse_str($extra_query_vars, $this->extra_query_vars);
|
|
|
|
// Process PATH_INFO, REQUEST_URI, and 404 for permalinks.
|
|
|
|
// Fetch the rewrite rules.
|
|
$rewrite = $wp_rewrite->wp_rewrite_rules();
|
|
|
|
if (! empty($rewrite)) {
|
|
// If we match a rewrite rule, this will be cleared.
|
|
$error = '404';
|
|
$this->did_permalink = true;
|
|
|
|
$pathinfo = $_SERVER['PATH_INFO'];
|
|
$pathinfo_array = explode('?', $pathinfo);
|
|
$pathinfo = $pathinfo_array[0];
|
|
$req_uri = $_SERVER['REQUEST_URI'];
|
|
$req_uri_array = explode('?', $req_uri);
|
|
$req_uri = $req_uri_array[0];
|
|
$self = $_SERVER['PHP_SELF'];
|
|
$home_path = parse_url(get_settings('home'));
|
|
$home_path = $home_path['path'];
|
|
$home_path = trim($home_path, '/');
|
|
|
|
// Trim path info from the end and the leading home path from the
|
|
// front. For path info requests, this leaves us with the requesting
|
|
// filename, if any. For 404 requests, this leaves us with the
|
|
// requested permalink.
|
|
$req_uri = str_replace($pathinfo, '', $req_uri);
|
|
$req_uri = trim($req_uri, '/');
|
|
$req_uri = preg_replace("|^$home_path|", '', $req_uri);
|
|
$req_uri = trim($req_uri, '/');
|
|
$pathinfo = trim($pathinfo, '/');
|
|
$pathinfo = preg_replace("|^$home_path|", '', $pathinfo);
|
|
$pathinfo = trim($pathinfo, '/');
|
|
$self = trim($self, '/');
|
|
$self = preg_replace("|^$home_path|", '', $self);
|
|
$self = str_replace($home_path, '', $self);
|
|
$self = trim($self, '/');
|
|
|
|
// The requested permalink is in $pathinfo for path info requests and
|
|
// $req_uri for other requests.
|
|
if ( ! empty($pathinfo) && !preg_match('|^.*' . $wp_rewrite->index . '$|', $pathinfo) ) {
|
|
$request = $pathinfo;
|
|
} else {
|
|
// If the request uri is the index, blank it out so that we don't try to match it against a rule.
|
|
if ( $req_uri == $wp_rewrite->index )
|
|
$req_uri = '';
|
|
$request = $req_uri;
|
|
}
|
|
|
|
$this->request = $request;
|
|
|
|
// Look for matches.
|
|
$request_match = $request;
|
|
foreach ($rewrite as $match => $query) {
|
|
// If the requesting file is the anchor of the match, prepend it
|
|
// to the path info.
|
|
if ((! empty($req_uri)) && (strpos($match, $req_uri) === 0) && ($req_uri != $request)) {
|
|
$request_match = $req_uri . '/' . $request;
|
|
}
|
|
|
|
if (preg_match("!^$match!", $request_match, $matches) ||
|
|
preg_match("!^$match!", urldecode($request_match), $matches)) {
|
|
// Got a match.
|
|
$this->matched_rule = $match;
|
|
|
|
// Trim the query of everything up to the '?'.
|
|
$query = preg_replace("!^.+\?!", '', $query);
|
|
|
|
// Substitute the substring matches into the query.
|
|
eval("\$query = \"$query\";");
|
|
$this->matched_query = $query;
|
|
|
|
// Parse the query.
|
|
parse_str($query, $perma_query_vars);
|
|
|
|
// If we're processing a 404 request, clear the error var
|
|
// since we found something.
|
|
if (isset($_GET['error']))
|
|
unset($_GET['error']);
|
|
|
|
if (isset($error))
|
|
unset($error);
|
|
|
|
break;
|
|
}
|
|
}
|
|
|
|
// If req_uri is empty or if it is a request for ourself, unset error.
|
|
if ( empty($request) || $req_uri == $self || strstr($_SERVER['PHP_SELF'], 'wp-admin/') ) {
|
|
if (isset($_GET['error']))
|
|
unset($_GET['error']);
|
|
|
|
if (isset($error))
|
|
unset($error);
|
|
|
|
if ( isset($perma_query_vars) && strstr($_SERVER['PHP_SELF'], 'wp-admin/') )
|
|
unset($perma_query_vars);
|
|
|
|
$this->did_permalink = false;
|
|
}
|
|
}
|
|
|
|
$this->public_query_vars = apply_filters('query_vars', $this->public_query_vars);
|
|
|
|
for ($i=0; $i<count($this->public_query_vars); $i += 1) {
|
|
$wpvar = $this->public_query_vars[$i];
|
|
if (isset($this->extra_query_vars[$wpvar]))
|
|
$this->query_vars[$wpvar] = $this->extra_query_vars[$wpvar];
|
|
elseif (isset($GLOBALS[$wpvar]))
|
|
$this->query_vars[$wpvar] = $GLOBALS[$wpvar];
|
|
elseif (!empty($_POST[$wpvar]))
|
|
$this->query_vars[$wpvar] = $_POST[$wpvar];
|
|
elseif (!empty($_GET[$wpvar]))
|
|
$this->query_vars[$wpvar] = $_GET[$wpvar];
|
|
elseif (!empty($perma_query_vars[$wpvar]))
|
|
$this->query_vars[$wpvar] = $perma_query_vars[$wpvar];
|
|
else
|
|
$this->query_vars[$wpvar] = '';
|
|
}
|
|
|
|
for ($i=0; $i<count($this->private_query_vars); $i += 1) {
|
|
$wpvar = $this->private_query_vars[$i];
|
|
if (isset($this->extra_query_vars[$wpvar]))
|
|
$this->query_vars[$wpvar] = $this->extra_query_vars[$wpvar];
|
|
}
|
|
|
|
if ( isset($error) )
|
|
$this->query_vars['error'] = $error;
|
|
}
|
|
|
|
function send_headers() {
|
|
@header('X-Pingback: '. get_bloginfo('pingback_url'));
|
|
if ( is_user_logged_in() )
|
|
nocache_headers();
|
|
if ( !empty($this->query_vars['error']) && '404' == $this->query_vars['error'] ) {
|
|
status_header( 404 );
|
|
} else if ( empty($this->query_vars['feed']) ) {
|
|
@header('Content-type: ' . get_option('html_type') . '; charset=' . get_option('blog_charset'));
|
|
} else {
|
|
// We're showing a feed, so WP is indeed the only thing that last changed
|
|
if ( $this->query_vars['withcomments'] )
|
|
$wp_last_modified = mysql2date('D, d M Y H:i:s', get_lastcommentmodified('GMT'), 0).' GMT';
|
|
else
|
|
$wp_last_modified = mysql2date('D, d M Y H:i:s', get_lastpostmodified('GMT'), 0).' GMT';
|
|
$wp_etag = '"' . md5($wp_last_modified) . '"';
|
|
@header("Last-Modified: $wp_last_modified");
|
|
@header("ETag: $wp_etag");
|
|
|
|
// Support for Conditional GET
|
|
if (isset($_SERVER['HTTP_IF_NONE_MATCH'])) $client_etag = stripslashes($_SERVER['HTTP_IF_NONE_MATCH']);
|
|
else $client_etag = false;
|
|
|
|
$client_last_modified = trim( $_SERVER['HTTP_IF_MODIFIED_SINCE']);
|
|
// If string is empty, return 0. If not, attempt to parse into a timestamp
|
|
$client_modified_timestamp = $client_last_modified ? strtotime($client_last_modified) : 0;
|
|
|
|
// Make a timestamp for our most recent modification...
|
|
$wp_modified_timestamp = strtotime($wp_last_modified);
|
|
|
|
if ( ($client_last_modified && $client_etag) ?
|
|
(($client_modified_timestamp >= $wp_modified_timestamp) && ($client_etag == $wp_etag)) :
|
|
(($client_modified_timestamp >= $wp_modified_timestamp) || ($client_etag == $wp_etag)) ) {
|
|
status_header( 304 );
|
|
exit;
|
|
}
|
|
}
|
|
}
|
|
|
|
function build_query_string() {
|
|
$this->query_string = '';
|
|
|
|
foreach (array_keys($this->query_vars) as $wpvar) {
|
|
if ( '' != $this->query_vars[$wpvar] ) {
|
|
$this->query_string .= (strlen($this->query_string) < 1) ? '' : '&';
|
|
$this->query_string .= $wpvar . '=' . rawurlencode($this->query_vars[$wpvar]);
|
|
}
|
|
}
|
|
|
|
foreach ($this->private_query_vars as $wpvar) {
|
|
if (isset($GLOBALS[$wpvar]) && '' != $GLOBALS[$wpvar] && ! isset($this->extra_query_vars[$wpvar]) ) {
|
|
$this->query_string .= (strlen($this->query_string) < 1) ? '' : '&';
|
|
$this->query_string .= $wpvar . '=' . rawurlencode($GLOBALS[$wpvar]);
|
|
}
|
|
}
|
|
|
|
$this->query_string = apply_filters('query_string', $this->query_string);
|
|
}
|
|
|
|
function register_globals() {
|
|
global $wp_query;
|
|
// Extract updated query vars back into global namespace.
|
|
foreach ($wp_query->query_vars as $key => $value) {
|
|
$GLOBALS[$key] = $value;
|
|
}
|
|
|
|
$GLOBALS['query_string'] = & $this->query_string;
|
|
$GLOBALS['posts'] = & $wp_query->posts;
|
|
$GLOBALS['post'] = & $wp_query->post;
|
|
$GLOBALS['request'] = & $wp_query->request;
|
|
|
|
if ( is_single() || is_page() ) {
|
|
$GLOBALS['more'] = 1;
|
|
$GLOBALS['single'] = 1;
|
|
}
|
|
}
|
|
|
|
function init() {
|
|
wp_get_current_user();
|
|
}
|
|
|
|
function query_posts() {
|
|
$this->build_query_string();
|
|
query_posts($this->query_string);
|
|
}
|
|
|
|
function handle_404() {
|
|
global $wp_query;
|
|
// Issue a 404 if a permalink request doesn't match any posts. Don't
|
|
// issue a 404 if one was already issued, if the request was a search,
|
|
// or if the request was a regular query string request rather than a
|
|
// permalink request.
|
|
if ( (0 == count($wp_query->posts)) && !is_404() && !is_search() && ( $this->did_permalink || (!empty($_SERVER['QUERY_STRING']) && (false === strpos($_SERVER['REQUEST_URI'], '?'))) ) ) {
|
|
$wp_query->set_404();
|
|
status_header( 404 );
|
|
} elseif( is_404() != true ) {
|
|
status_header( 200 );
|
|
}
|
|
}
|
|
|
|
function main($query_args = '') {
|
|
$this->init();
|
|
$this->parse_request($query_args);
|
|
$this->send_headers();
|
|
$this->query_posts();
|
|
$this->handle_404();
|
|
$this->register_globals();
|
|
}
|
|
|
|
function WP() {
|
|
// Empty.
|
|
}
|
|
}
|
|
|
|
?>
|