← All changes | functions.php +106 -12 2.0.6 → 2.0.2 View file →

		@@ -4,10 +4,60 @@
4	4	die('HACKING ATTEMPT!');
5	5	}
6	6
7	7	include_once(LOGINIZER_DIR.'/lib/IPv6/IPv6.php');
8		-include_once(LOGINIZER_DIR .'/common.php');
9	8
	9	+// Get the client IP
	10	+function _lz_getip(){
	11	+ if(isset($_SERVER["REMOTE_ADDR"])){
	12	+ return $_SERVER["REMOTE_ADDR"];
	13	+ }elseif(isset($_SERVER["HTTP_X_FORWARDED_FOR"])){
	14	+ return $_SERVER["HTTP_X_FORWARDED_FOR"];
	15	+ }elseif(isset($_SERVER["HTTP_CLIENT_IP"])){
	16	+ return $_SERVER["HTTP_CLIENT_IP"];
	17	+ }
	18	+}
	19	+
	20	+// Get the client IP
	21	+function lz_getip(){
	22	+
	23	+ global $loginizer;
	24	+
	25	+ // Just so that we have something
	26	+ $ip = _lz_getip();
	27	+
	28	+ $loginizer['ip_method'] = (int) @$loginizer['ip_method'];
	29	+
	30	+ if(isset($_SERVER["REMOTE_ADDR"])){
	31	+ $ip = $_SERVER["REMOTE_ADDR"];
	32	+ }
	33	+
	34	+ if(isset($_SERVER["HTTP_X_FORWARDED_FOR"]) && @$loginizer['ip_method'] == 1){
	35	+ if(strpos($_SERVER["HTTP_X_FORWARDED_FOR"], ',')){
	36	+ $temp_ip = explode(',', $_SERVER["HTTP_X_FORWARDED_FOR"]);
	37	+ $ip = trim($temp_ip[0]);
	38	+ }else{
	39	+ $ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
	40	+ }
	41	+ }
	42	+
	43	+ if(isset($_SERVER["HTTP_CLIENT_IP"]) && @$loginizer['ip_method'] == 2){
	44	+ $ip = $_SERVER["HTTP_CLIENT_IP"];
	45	+ }
	46	+
	47	+ if(@$loginizer['ip_method'] == 3 && isset($_SERVER[@$loginizer['custom_ip_method']])){
	48	+ $ip = $_SERVER[@$loginizer['custom_ip_method']];
	49	+ }
	50	+
	51	+ // Hacking fix for X-Forwarded-For
	52	+ if(!lz_valid_ip($ip)){
	53	+ return '';
	54	+ }
	55	+
	56	+ return $ip;
	57	+
	58	+}
	59	+
10	60	// Execute a select query and return an array
11	61	function lz_selectquery($query, $array = 0){
12	62	global $wpdb;
13	63
		@@ -19,8 +69,58 @@
19	69	return $result;
20	70	}
21	71	}
22	72
	73	+// Check if an IP is valid
	74	+function lz_valid_ip($ip){
	75	+
	76	+ if(empty($ip)){
	77	+ return false;
	78	+ }
	79	+
	80	+ // IPv6
	81	+ if(lz_valid_ipv6($ip)){
	82	+ return true;
	83	+ }
	84	+
	85	+ // IPv4
	86	+ if(!ip2long($ip) || !lz_valid_ipv4($ip)){
	87	+ return false;
	88	+ }
	89	+
	90	+ return true;
	91	+}
	92	+
	93	+function lz_valid_ipv4($ip){
	94	+ if(!preg_match('/^(\d){1,3}\.(\d){1,3}\.(\d){1,3}\.(\d){1,3}$/is', $ip) || substr_count($ip, '.') != 3){
	95	+ return false;
	96	+ }
	97	+
	98	+ $r = explode('.', $ip);
	99	+
	100	+ foreach($r as $v){
	101	+ $v = (int) $v;
	102	+ if($v > 255 || $v < 0){
	103	+ return false;
	104	+ }
	105	+ }
	106	+
	107	+ return true;
	108	+
	109	+}
	110	+
	111	+function lz_valid_ipv6($ip){
	112	+
	113	+ $pattern = '/^((([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}:[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){5}:([0-9A-Fa-f]{1,4}:)?[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){4}:([0-9A-Fa-f]{1,4}:){0,2}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){3}:([0-9A-Fa-f]{1,4}:){0,3}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){2}:([0-9A-Fa-f]{1,4}:){0,4}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(([0-9A-Fa-f]{1,4}:){0,5}:((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(::([0-9A-Fa-f]{1,4}:){0,5}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|([0-9A-Fa-f]{1,4}::([0-9A-Fa-f]{1,4}:){0,5}[0-9A-Fa-f]{1,4})|(::([0-9A-Fa-f]{1,4}:){0,6}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){1,7}:))$/';
	114	+
	115	+ if(!preg_match($pattern, $ip)){
	116	+ return false;
	117	+ }
	118	+
	119	+ return true;
	120	+
	121	+}
	122	+
23	123	// Check if a field is posted via POST else return default value
24	124	function lz_optpost($name, $default = ''){
25	125
26	126	if(!empty($_POST[$name])){
		@@ -144,9 +244,9 @@
144	244	if(empty($error)){
145	245	return true;
146	246	}
147	247
148		- $error_string = '<b>'.__('Please fix the below error(s)', 'loginizer').' :</b> <br />';
	248	+ $error_string = '<b>Please fix the below error(s) :</b> <br />';
149	249
150	250	foreach($error as $ek => $ev){
151	251	$error_string .= '* '.$ev.'<br />';
152	252	}
		@@ -151,9 +251,9 @@
151	251	$error_string .= '* '.$ev.'<br />';
152	252	}
153	253
154	254	echo '<div id="message" class="error"><p>'
155		- . $error_string
	255	+ . __($error_string, 'loginizer')
156	256	. '</p></div>';
157	257	}
158	258
159	259	// Report a notice
		@@ -171,9 +271,9 @@
171	271	}else{
172	272	$notice_class = 'updated';
173	273	}
174	274
175		- $notice_string = '<b>'.__('Please check the below notice(s)', 'loginizer').' :</b> <br />';
	275	+ $notice_string = '<b>Please check the below notice(s) :</b> <br />';
176	276
177	277	foreach($notice as $ek => $ev){
178	278	$notice_string .= '* '.$ev.'<br />';
179	279	}
		@@ -178,9 +278,9 @@
178	278	$notice_string .= '* '.$ev.'<br />';
179	279	}
180	280
181	281	echo '<div id="message" class="'.$notice_class.'"><p>'
182		- . $notice_string
	282	+ . __($notice_string, 'loginizer')
183	283	. '</p></div>';
184	284	}
185	285
186	286	// Convert an objext to array
		@@ -590,15 +690,9 @@
590	690	if(isAPI){
591	691	target_url += "&lz_api=1";
592	692	}
593	693
594		- let redirect_to = "'.(!empty($_GET['redirect_to']) ? wp_validate_redirect(esc_url($_GET['redirect_to'])) : '') .'";
595		-
596		- if(redirect_to.length){
597		- target_url += "&ref="+redirect_to;
598		- } else {
599		- target_url += "&ref='.esc_url((is_ssl() ? 'https://' : 'http://').$_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']).'"
600		- }
	694	+ target_url += "&ref='.esc_url((is_ssl() ? 'https://' : 'http://').$_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']).'"
601	695
602	696	if(lz_target_window == "same"){
603	697	jQuery("#loginizer-social-loader-wrap").css("display", "flex");
604	698