jetformbuilder / modules / captcha / turnstile / verify-token-action.php

verify-token-action.php in JetFormBuilder — Dynamic Blocks Form Builder 3.6.6, at modules/captcha/turnstile/verify-token-action.php

104 lines 2.3 KB

Raw Download Zip

1	<?php
2
3
4	namespace JFB_Modules\Captcha\Turnstile;
5
6	// If this file is called directly, abort.
7	if ( ! defined( 'WPINC' ) ) {
8	die;
9	}
10
11	use Jet_Form_Builder\Classes\Http\Http_Tools;
12	use Jet_Form_Builder\Exceptions\Gateway_Exception;
13	use JFB_Modules\Gateways\Actions_Abstract\Action_Application_Raw_Body_It;
14	use JFB_Modules\Gateways\Base_Gateway_Action;
15	use JFB_Modules\Captcha\Module;
16
17	class Verify_Token_Action extends Base_Gateway_Action implements
18	Action_Application_Raw_Body_It {
19
20	private $secret;
21	private $challenge;
22	private $ip;
23	private $action;
24
25	public function action_endpoint() {
26	return 'siteverify';
27	}
28
29	public function base_url(): string {
30	return 'https://challenges.cloudflare.com/turnstile/v0/';
31	}
32
33	public function send_request() {
34	$response = parent::send_request();
35
36	$action = $response['action'] ?? '';
37
38	if ( $this->action === $action && ! empty( $response['success'] ) ) {
39	return $response;
40	}
41
42	// phpcs:ignore WordPress.Security.EscapeOutput.ExceptionNotEscaped
43	throw new Gateway_Exception( Module::SPAM_EXCEPTION, $response, $this->get_request_args() );
44	}
45
46	/**
47	* @throws Gateway_Exception
48	*/
49	public function before_make_request() {
50	if ( ! $this->ip ) {
51	$this->set_ip( Http_Tools::get_ip_address() );
52	}
53
54	if ( ! $this->action ) {
55	$this->set_action( jet_fb_live()->form_id );
56	}
57
58	if ( $this->ip && $this->secret && $this->challenge ) {
59	return;
60	}
61
62	// phpcs:ignore WordPress.Security.EscapeOutput.ExceptionNotEscaped
63	throw new Gateway_Exception( Module::SPAM_EXCEPTION, 'Empty solution. Spammer detected' );
64	}
65
66	public function set_secret( string $secret ): Verify_Token_Action {
67	$this->secret = $secret;
68
69	return $this;
70	}
71
72	public function set_challenge( string $challenge ): Verify_Token_Action {
73	$this->challenge = $challenge;
74
75	return $this;
76	}
77
78	public function set_ip( string $ip ): Verify_Token_Action {
79	$this->ip = $ip;
80
81	return $this;
82	}
83
84	/**
85	* @param string\|int $action
86	*
87	* @return Verify_Token_Action
88	*/
89	public function set_action( $action ): Verify_Token_Action {
90	$this->action = is_numeric( $action ) ? Module::PREFIX_TURNSTILE . $action : $action;
91
92	return $this;
93	}
94
95	public function action_body() {
96	return array(
97	'secret' => $this->secret,
98	'response' => $this->challenge,
99	'remoteip' => $this->ip,
100	);
101	}
102
103	}
104