%s
', $error_message ); } echo $this->display_recaptcha(); } /** * Verify the recaptcha code on the multisite signup page. * * @param array $result * * @return array|WP_user */ public function validate_captcha_field_on_wpmu_registration( $result ) { global $current_user; if ( is_admin() && ! defined( 'DOING_AJAX' ) && ! empty( $current_user->data->ID ) ) { return $result; } if ( ! $this->recaptcha_response( 'wpmu_registration' ) ) { if ( isset( $result['errors'] ) && ! empty( $result['errors'] ) ) { $errors = $result['errors']; } else { $errors = new WP_Error(); } $errors->add( 'invalid_captcha', $this->error_message() ); $result['errors'] = $errors; return $result; } return $result; } /** * Verify the recaptcha code on Woo login page. * * @param WP_Error $errors * * @return WP_Error */ public function validate_captcha_field_on_woo_login( $errors ) { // Skip check if connecting to XMLRPC. if ( defined( 'XMLRPC_REQUEST' ) ) { return $errors; } if ( ! $this->recaptcha_response( 'woo_login' ) ) { // Remove 'Error: ' because Woo has it by default. $message = str_replace( __( 'Error: ', 'wpdef' ), '', $this->error_message() ); $errors->add( 'invalid_captcha', $message ); } return $errors; } /** * Check recaptcha on Woo registration form. * * @param WP_Error $errors * * @return WP_Error */ public function validate_captcha_field_on_woo_registration( $errors ) { if ( defined( 'WOOCOMMERCE_CHECKOUT' ) ) { return $errors; } if ( ! $this->recaptcha_response( 'woo_registration' ) ) { // Remove 'Error: ' because Woo has it by default. $message = str_replace( __( 'Error: ', 'wpdef' ), '', $this->error_message() ); $errors->add( 'invalid_captcha', $message ); } return $errors; } /** * Fires before errors are returned from a password reset request. * Without 2nd `$user_data` parameter because it's since WP 5.4.0. * * @param WP_Error $errors */ public function validate_captcha_field_on_lostpassword( $errors ) { if ( ! $this->recaptcha_response( 'default_lost_password' ) ) { $errors->add( 'invalid_captcha', $this->error_message() ); } } /** * Add google recaptcha to the comment form. */ public function display_comment_recaptcha() { echo ''; echo $this->display_recaptcha(); return true; } /** * Check JS enabled for comment form. * * @return void */ public function validate_captcha_field_on_comment() { if ( $this->exclude_recaptcha_for_requests() ) { return; } if ( ! $this->recaptcha_response( 'default_comments' ) ) { // @since v2.5.6 wp_die( (string) apply_filters( 'wd_recaptcha_require_valid_comment', $this->error_message() ) ); } } /** * @return \WP_Defender\Model\Setting\Recaptcha */ private function get_model() { if ( is_object( $this->model ) ) { return $this->model; } return new \WP_Defender\Model\Setting\Recaptcha(); } /** * Get the reCAPTCHA API response. * * @param string $form * * @return bool */ protected function recaptcha_response( $form ) { if ( empty( $this->private_key ) || empty( $_POST['g-recaptcha-response'] ) ) { return false; } // reCAPTCHA response post data. $response = stripslashes( sanitize_text_field( $_POST['g-recaptcha-response'] ) ); $remote_ip = filter_var( $_SERVER['REMOTE_ADDR'], FILTER_VALIDATE_IP ); // @since v2.5.6 $remote_ip = (string) apply_filters( 'wd_recaptcha_remote_ip', $remote_ip ); $post_body = array( 'secret' => $this->private_key, 'response' => $response, 'remoteip' => $remote_ip, ); $result = $this->recaptcha_post_request( $post_body ); // @since 2.5.6 return apply_filters( 'wd_recaptcha_check_result', $result, $form ); } /** * Display custom error message. * * @return string */ private function error_message() { return sprintf( /* translators: ... */ __( 'Error: %s', 'wpdef' ), empty( $this->model->message ) ? $this->default_msg : $this->model->message ); } /** * Send HTTP POST request and return the response. * Also initialize the error text if an error response is received. * * @param array $post_body - HTTP POST body * * @return bool */ protected function recaptcha_post_request( $post_body ) { $args = array( 'body' => $post_body, 'sslverify' => false, ); $url = 'https://www.google.com/recaptcha/api/siteverify'; $request = wp_remote_post( $url, $args ); // Get the request response body if ( is_wp_error( $request ) ) { return false; } $response_body = wp_remote_retrieve_body( $request ); $response_keys = json_decode( $response_body, true ); if ( 'v3_recaptcha' === $this->recaptcha_type ) { if ( $response_keys['success'] && isset( $this->model->data_v3_recaptcha['threshold'], $response_keys['score'] ) && is_numeric( $this->model->data_v3_recaptcha['threshold'] ) && is_numeric( $response_keys['score'] ) ) { $is_success = $response_keys['score'] >= (float) $this->model->data_v3_recaptcha['threshold']; } else { $is_success = false; } } else { $is_success = (bool) $response_keys['success']; } return $is_success; } /** * @param array $data * * @return mixed * @throws \ReflectionException */ public function script_data( $data ) { $data['recaptcha'] = $this->data_frontend(); return $data; } /** * Save settings. * @param Request $request * * @return Response * @defender_route */ public function save_settings( Request $request ) { $data = $request->get_data_by_model( $this->model ); $this->model->import( $data ); if ( $this->model->validate() ) { $this->model->save(); Config_Hub_Helper::set_clear_active_flag(); return new Response( true, array_merge( array( 'message' => __( 'Google reCAPTCHA settings saved successfully.', 'wpdef' ), ), $this->data_frontend() ) ); } return new Response( false, // Merge stored data to avoid errors. array_merge( array( 'message' => $this->model->get_formatted_errors() ), $this->data_frontend() ) ); } /** * @param Request $request * * @return Response * @defender_route */ public function load_recaptcha_preview( Request $request ) { $onload = null; $js = null; $data = $request->get_data( array( 'captcha_type' => array( 'type' => 'string', ), ) ); $this->recaptcha_type = $data['captcha_type']; $model = $this->get_model(); $language = ! empty( $model->language ) && 'automatic' !== $model->language ? $model->language : get_locale(); $notice = '