← All changes | includes/widgets/Form_Builder/helpers/Verify_Google_Recaptcha.php +84 -0 51.1.2 → 51.1.86 View file →

		@@ -1,0 +1,84 @@
	1	+<?php
	2	+
	3	+namespace King_Addons;
	4	+
	5	+if (!defined('ABSPATH')) {
	6	+ exit;
	7	+}
	8	+
	9	+class Verify_Google_Recaptcha
	10	+{
	11	+ public function __construct()
	12	+ {
	13	+ add_action('wp_ajax_king_addons_verify_recaptcha', [$this, 'king_addons_verify_recaptcha']);
	14	+ add_action('wp_ajax_nopriv_king_addons_verify_recaptcha', [$this, 'king_addons_verify_recaptcha']);
	15	+ }
	16	+
	17	+ public function king_addons_verify_recaptcha()
	18	+ {
	19	+ if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
	20	+ wp_send_json_error(['message' => 'Invalid request method.']);
	21	+ }
	22	+
	23	+ if (!isset($_POST['nonce']) || !check_ajax_referer('king-addons-js', 'nonce', false)) {
	24	+ wp_send_json_error(['message' => 'Invalid nonce.']);
	25	+ }
	26	+
	27	+ $recaptcha_response = sanitize_text_field($_POST['g-recaptcha-response'] ?? '');
	28	+ if (empty($recaptcha_response)) {
	29	+ wp_send_json_error(['message' => 'Missing reCAPTCHA response.']);
	30	+ }
	31	+
	32	+ $is_valid_recaptcha = $this->check_recaptcha($recaptcha_response);
	33	+
	34	+ if ($is_valid_recaptcha[0] && $is_valid_recaptcha[1] >= get_option('king_addons_recaptcha_v3_score_threshold')) {
	35	+ wp_send_json_success(array(
	36	+ 'message' => 'Recaptcha Success',
	37	+ 'score' => $is_valid_recaptcha[1]
	38	+ ));
	39	+ } else {
	40	+ wp_send_json_error(array(
	41	+ 'message' => 'Recaptcha Error',
	42	+ 'score' => $is_valid_recaptcha[1],
	43	+ 'results' => [
	44	+ $is_valid_recaptcha[0],
	45	+ $is_valid_recaptcha[1] >= get_option('king_addons_recaptcha_v3_score_threshold')
	46	+ ]
	47	+ ));
	48	+ }
	49	+ }
	50	+
	51	+ public function check_recaptcha($recaptcha_response)
	52	+ {
	53	+ $secret_key = get_option('king_addons_recaptcha_v3_secret_key');
	54	+ $remote_ip = $_SERVER['REMOTE_ADDR'];
	55	+
	56	+ $response = wp_remote_post('https://www.google.com/recaptcha/api/siteverify', array(
	57	+ 'body' => array(
	58	+ 'secret' => $secret_key,
	59	+ 'response' => $recaptcha_response,
	60	+ 'remoteip' => $remote_ip
	61	+ )
	62	+ ));
	63	+
	64	+ if (is_wp_error($response)) {
	65	+ return [false, 0];
	66	+ }
	67	+
	68	+ $decoded_response = json_decode(wp_remote_retrieve_body($response), true);
	69	+
	70	+ if (!is_array($decoded_response)) {
	71	+ return [false, 0];
	72	+ }
	73	+
	74	+ $score = isset($decoded_response['score']) ? (float) $decoded_response['score'] : 0.0;
	75	+
	76	+ if (!empty($decoded_response['success'])) {
	77	+ return [true, $score];
	78	+ } else {
	79	+ return [false, $score];
	80	+ }
	81	+ }
	82	+}
	83	+
	84	+new Verify_Google_Recaptcha();