# wpforo/2.2.9/classes/Moderation.php

wpForo Forum, version 2.2.9. 487 lines.

- Page: https://pluginprobe.com/plugins/wpforo/2.2.9/code/classes/Moderation.php
- Raw: https://pluginprobe.com/plugins/wpforo/2.2.9/raw/classes/Moderation.php
- Modified: 2023-12-15T20:18:44+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/wpforo/2.2.9/code/classes/Moderation.php#L10-L20`.

```php
<?php

namespace wpforo\classes;

use Akismet;
use wpforo\admin\listtables\Moderations as ModerationsListTable;

// Exit if accessed directly
if( ! defined( 'ABSPATH' ) ) exit;

class Moderation {
	public $post_statuses;
	public $list_table;

	public function __construct() {
		$this->post_statuses = apply_filters( 'wpforo_post_statuses', [ 0 => 'approved', 1 => 'unapproved' ] );
		add_action('wpforo_after_change_board', function(){
			if( !is_null( WPF()->wp_current_user ) ) $this->init();
		});
	}

	private function init() {
		if( is_admin() ) add_action( 'wpforo_after_init', [ $this, 'init_list_table' ] );

		if( ! WPF()->usergroup->can( 'aup' ) ) {
			add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'auto_moderate' ] );
			add_filter( 'wpforo_add_post_data_filter', [ &$this, 'auto_moderate' ] );
		} else {
			if( WPF()->member->current_user_is_new() ) {
				if( class_exists( 'Akismet' ) ) {
					add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'akismet_topic' ], 8 );
					add_filter( 'wpforo_edit_topic_data_filter', [ &$this, 'akismet_topic' ], 8 );
					add_filter( 'wpforo_add_post_data_filter', [ &$this, 'akismet_post' ], 8 );
					add_filter( 'wpforo_edit_post_data_filter', [ &$this, 'akismet_post' ], 8 );
				}
				if( wpforo_setting( 'antispam', 'spam_filter' ) ) {
					add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'spam_topic' ], 9 );
					add_filter( 'wpforo_edit_topic_data_filter', [ &$this, 'spam_topic' ], 9 );
					add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'spam_post' ], 9 );
					add_filter( 'wpforo_edit_topic_data_filter', [ &$this, 'spam_post' ], 9 );
					add_filter( 'wpforo_add_post_data_filter', [ &$this, 'spam_post' ], 9 );
					add_filter( 'wpforo_edit_post_data_filter', [ &$this, 'spam_post' ], 9 );
				}
			}
			if( wpforo_setting( 'antispam', 'spam_filter' ) ) {
				add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'auto_moderate' ], 10 );
				add_filter( 'wpforo_add_post_data_filter', [ &$this, 'auto_moderate' ], 10 );
			}
			if( ! WPF()->perm->can_link() ) {
				add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'remove_links' ], 20 );
				add_filter( 'wpforo_edit_topic_data_filter', [ &$this, 'remove_links' ], 20 );
				add_filter( 'wpforo_add_post_data_filter', [ &$this, 'remove_links' ], 20 );
				add_filter( 'wpforo_edit_post_data_filter', [ &$this, 'remove_links' ], 20 );
			}
		}
	}

	public function init_list_table() {
		if( wpfval( $_GET, 'page' ) === wpforo_prefix_slug( 'moderations' ) ) {
			$this->list_table = new ModerationsListTable();
			$this->list_table->prepare_items();
		}
	}

	public function get_post_status_dname( $status ) {
		$status = intval( $status );

		return ( isset( $this->post_statuses[ $status ] ) ? $this->post_statuses[ $status ] : $status );
	}

	public function get_moderations( $args, &$items_count = 0 ) {
		if( isset( $_GET['filter_by_userid'] ) && wpforo_bigintval( $_GET['filter_by_userid'] ) ) $args['userid'] = wpforo_bigintval( $_GET['filter_by_userid'] );
		$filter_by_status = intval( ( isset( $_GET['filter_by_status'] ) ? $_GET['filter_by_status'] : 1 ) );
		$args['status']   = $filter_by_status;
		if( ! isset( $_GET['order'] ) ) $args['orderby'] = '`created` DESC, `postid` DESC';

		return WPF()->post->get_posts( $args, $items_count );
	}

	public function search( $needle, $fields = [] ) {
		$pids = [];
		if( $posts = WPF()->post->search( $needle ) ) {
			foreach( $posts as $post ) {
				$pids[] = $post['postid'];
			}
		}

		return $pids;
	}

	public function post_approve( $postid ) {
		return WPF()->post->set_status( $postid, 0 );
	}

	public function post_unapprove( $postid ) {
		return WPF()->post->set_status( $postid, 1 );
	}

	public function get_view_url( $arg ) {
		return WPF()->post->get_url( $arg );
	}

	public function akismet_topic( $item ) {
		$post                 = [];
		$post['user_ip']      = ( isset( $_SERVER['REMOTE_ADDR'] ) ? $_SERVER['REMOTE_ADDR'] : null );
		$post['user_agent']   = ( isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT'] : null );
		$post['referrer']     = ( isset( $_SERVER['HTTP_REFERER'] ) ? $_SERVER['HTTP_REFERER'] : null );
		$post['blog']         = get_option( 'home' );
		$post['blog_lang']    = get_locale();
		$post['blog_charset'] = get_option( 'blog_charset' );
		$post['comment_type'] = 'forum-post';

		if( empty( $item['forumid'] ) ) {
			$topic           = WPF()->topic->get_topic( $item['topicid'] );
			$item['forumid'] = $topic['forumid'];
		}

		$post['comment_author']            = WPF()->current_user['user_nicename'];
		$post['comment_author_email']      = WPF()->current_user['user_email'];
		$post['comment_author_url']        = WPF()->member->get_profile_url( WPF()->current_userid );
		$post['comment_post_modified_gmt'] = current_time( 'mysql', 1 );
		$post['comment_content']           = $item['title'] . "  \r\n  " . $item['body'];
		$post['permalink']                 = WPF()->forum->get_forum_url( $item['forumid'] );

		$response = Akismet::http_post( Akismet::build_query( $post ), 'comment-check' );
		if( $response[1] == 'true' ) {
			$this->ban_for_spam( WPF()->current_userid );
			$item['status'] = 1;
		}

		return $item;
	}

	public function akismet_post( $item ) {
		$post                 = [];
		$post['user_ip']      = ( isset( $_SERVER['REMOTE_ADDR'] ) ? $_SERVER['REMOTE_ADDR'] : null );
		$post['user_agent']   = ( isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT'] : null );
		$post['referrer']     = ( isset( $_SERVER['HTTP_REFERER'] ) ? $_SERVER['HTTP_REFERER'] : null );
		$post['blog']         = get_option( 'home' );
		$post['blog_lang']    = get_locale();
		$post['blog_charset'] = get_option( 'blog_charset' );
		$post['comment_type'] = 'forum-post';

		$topic = WPF()->topic->get_topic( $item['topicid'] );

		$post['comment_author']            = WPF()->current_user['user_nicename'];
		$post['comment_author_email']      = WPF()->current_user['user_email'];
		$post['comment_author_url']        = WPF()->member->get_profile_url( WPF()->current_userid );
		$post['comment_post_modified_gmt'] = $topic['modified'];
		$post['comment_content']           = $item['body'];
		$post['permalink']                 = WPF()->topic->get_url( $item['topicid'] );

		$response = Akismet::http_post( Akismet::build_query( $post ), 'comment-check' );
		if( $response[1] == 'true' ) {
			$this->ban_for_spam( WPF()->current_userid );
			$item['status'] = 1;
		}

		return $item;
	}

	public function spam_attachment() {
		$default_attachments_dir = WPF()->folders['default_attachments']['dir'];
		if( is_dir( $default_attachments_dir ) ) {
			if( $handle = opendir( $default_attachments_dir ) ) {
				while( false !== ( $filename = readdir( $handle ) ) ) {
					if( $filename == '.' || $filename == '..' ) continue;
					$level = $this->spam_file( $filename );
					if( $level > 2 ) {
						$link   = '<a href="' . admin_url( 'admin.php?page=' . wpforo_prefix_slug( 'tools' ) . '&tab=antispam#spam-files' ) . '"><strong>&gt;&gt;</strong></a>';
						$phrase = '<strong>SPAM! - </strong>' . sprintf( __( 'Probably spam file attachments have been detected by wpForo Spam Control. Please moderate suspected files in Forums &gt; Tools &gt; Antispam Tab.', 'wpforo' ), $link );
						WPF()->notice->add( $phrase, 'error' );

						return true;
					}
				}
			}
		}

		return false;
	}

	public function spam_file( $item, $type = 'file' ) {
		if( ! isset( $item ) || ! $item ) return false;
		$level             = 0;
		$item              = strtolower( (string) $item );
		$spam_file_phrases = [
			0 => [ 'watch', 'movie' ],
			1 => [ 'download', 'free' ],
		];
		if( $type == 'file' ) {
			$ext_whitelist = wpforo_setting( 'antispam', 'exclude_file_ext' );
			$ext           = strtolower( (string) pathinfo( $item, PATHINFO_EXTENSION ) );
			$ext_risk      = [ 'pdf', 'doc', 'docx', 'txt', 'htm', 'html', 'rtf', 'xml', 'xls', 'xlsx', 'php', 'cgi' ];
			$ext_risk      = wpforo_clear_array( $ext_risk, $ext_whitelist );
			$ext_high_risk = [ 'php', 'cgi', 'exe' ];
			$ext_high_risk = wpforo_clear_array( $ext_high_risk, $ext_whitelist );
			if( in_array( $ext, $ext_risk ) ) {
				$has_post = WPF()->db->get_var( "SELECT `postid` FROM `" . WPF()->tables->posts . "` WHERE `body` LIKE '%" . esc_sql( $item ) . "%' LIMIT 1" );
				foreach( $spam_file_phrases as $phrases ) {
					foreach( $phrases as $phrase ) {
						if( strpos( (string) $item, $phrase ) !== false ) {
							if( ! $has_post ) {
								$level = 4;
								break 2;
							} else {
								$level = 2;
								break 2;
							}
						}
					}
				}
				if( ! $level ) {
					if( ! $has_post ) {
						$level = 3;
					} else {
						if( in_array( $ext, $ext_high_risk ) ) {
							$level = 5;
						} else {
							$level = 1;
						}
					}
				}
			}

			return $level;
		} elseif( $type == 'file-open' ) {
			$ext           = strtolower( (string) pathinfo( $item, PATHINFO_EXTENSION ) );
			$allow_to_open = [ 'pdf', 'doc', 'docx', 'txt', 'rtf', 'xls', 'xlsx' ];
			if( in_array( $ext, $allow_to_open ) ) {
				return true;
			} else {
				return false;
			}
		}

		return 0;
	}

	public function spam_topic( $topic ) {
		if( empty( $topic ) ) return $topic;
		if( isset( $topic['title'] ) ) {
			$item = $topic['title'];
		} else {
			return $topic;
		}
		$len = wpforo_strlen( $item );
		if( $len < 10 ) return $topic;
		$item       = strip_tags( (string) $item );
		$is_similar = false;
		$topic_args = [ 'userid' => $topic['userid'] ];
		$topics     = WPF()->topic->get_topics( $topic_args );
		$sc_level   = ( !is_null( wpforo_setting( 'antispam', 'spam_filter_level_topic' ) ) ) ? intval( wpforo_setting( 'antispam', 'spam_filter_level_topic' ) ) : 100;
		if( $sc_level > 100 ) $sc_level = 60;
		$sc_level = ( 101 - $sc_level );
		if( ! empty( $topics ) ) {
			$count   = count( $topics );
			$keys[0] = array_rand( $topics );
			if( $count > 1 ) $keys[1] = array_rand( $topics );
			$check_1 = ( isset( $keys[0] ) ) ? strip_tags( (string) $topics[ $keys[0] ]['title'] ) : '';
			$check_2 = ( isset( $keys[1] ) ) ? strip_tags( (string) $topics[ $keys[1] ]['title'] ) : '';
			if( $check_1 ) {
				similar_text( $item, $check_1, $percent );
				if( $percent > $sc_level ) $is_similar = true;
			}
			if( $check_2 && ! $is_similar ) {
				similar_text( $item, $check_2, $percent );
				if( $percent > $sc_level ) $is_similar = true;
			}
			if( $is_similar ) {
				$this->ban_for_spam( WPF()->current_userid );
				$topic['status'] = 1;
			}
		}

		return apply_filters('wpforo_spam_topic', $topic );
	}

	public function spam_post( $post ) {
		if( empty( $post ) ) return $post;
		if( isset( $post['body'] ) ) {
			$item = $post['body'];
		} else {
			return $post;
		}

		$item       = strip_tags( (string) $item );
		$is_similar = false;
		$post_args  = [ 'userid' => $post['userid'] ];
		$posts      = WPF()->post->get_posts( $post_args );
		$sc_level   = !is_null( wpforo_setting( 'antispam', 'spam_filter_level_post' ) ) ? intval( wpforo_setting( 'antispam', 'spam_filter_level_post' ) ) : 100;
		if( $sc_level > 100 ) $sc_level = 70;
		$sc_level = ( 101 - $sc_level );
		if( ! empty( $posts ) ) {
			$count   = count( $posts );
			$keys[0] = array_rand( $posts );
			if( $count > 1 ) $keys[1] = array_rand( $posts );
			$check_1 = ( isset( $keys[0] ) ) ? strip_tags( (string) $posts[ $keys[0] ]['body'] ) : '';
			$check_2 = ( isset( $keys[1] ) ) ? strip_tags( (string) $posts[ $keys[1] ]['body'] ) : '';
			if( $check_1 ) {
				similar_text( $item, $check_1, $percent );
				if( isset( $percent ) && $percent > $sc_level ) $is_similar = true;
			}
			if( $check_2 && ! $is_similar ) {
				similar_text( $item, $check_2, $percent );
				if( isset( $percent ) && $percent > $sc_level ) $is_similar = true;
			}
			if( $is_similar ) {
				$this->ban_for_spam( WPF()->current_userid );
				$post['status'] = 1;
			}
		}

		return apply_filters('wpforo_spam_post', $post);
	}

	public function auto_moderate( $item ) {

		if( empty( $item ) ) return $item;
		if( WPF()->usergroup->can( 'em' ) ) {
			$item['status'] = 0;

			return $item;
		}
		if( ! WPF()->usergroup->can( 'aup' ) ) {
			$item['status'] = 1;

			return $item;
		}

		if( WPF()->member->current_user_is_new() ) {
			if( wpforo_setting( 'antispam', 'unapprove_post_if_user_is_new' ) ) {
				$item['status'] = 1;
			} else {
				$if_link_found = apply_filters( 'wpforo_new_user_post_unapproved_if_link_found', true );
				if( $if_link_found && isset( $item['body'] ) && isset( $item['title'] ) && $this->has_link( $item ) ) {
					$item['status'] = 1;
				}
				$unapproved_all = apply_filters( 'wpforo_new_user_post_unapproved_all', false );
				if( $unapproved_all && ( ( isset( $item['status'] ) && $item['status'] == 1 ) || $this->has_unapproved( WPF()->current_userid ) ) ) {
					$this->set_all_unapproved( WPF()->current_userid );
					$item['status'] = 1;
				}
			}
		}

		// Don't track users as "a user without approved posts" if he/she has no posts.
		// Just check the number of unapproved posts before initiating this rule,
		// if no unapproved posts then we don't need to set the first post of this user unapproved.
		// This checking is already done by New User options when we set "1" post for New User status and turn on the "must be manually approved" option.
		$must_have_one_approved = apply_filters( 'wpforo_post_moderation_must_have_one_approved', true );
		if( $must_have_one_approved && $this->has_unapproved( WPF()->current_userid ) ) {
			// So this rule will only work from the second post,
			// it'll always keep new posts unapproved if previous posts are not approved yet.
			if( ! $this->has_approved( WPF()->current_userid ) ) {
				$item['status'] = 1;
			}
		}

		return $item;
	}

	public function has_approved( $user ) {
		if( ! $user ) return false;
		if( isset( $user['userid'] ) ) {
			$userid = intval( $user['userid'] );
		} else {
			$userid = intval( $user );
		}
		$has_approved_post = WPF()->db->get_var( "SELECT `postid` FROM `" . WPF()->tables->posts . "` WHERE `userid` = '" . wpforo_bigintval( $userid ) . "' AND `status` = 0 LIMIT 1" );
		if( $has_approved_post ) {
			return true;
		} else {
			return false;
		}
	}

	public function has_unapproved( $user ) {
		if( empty( $user ) ) return false;
		if( isset( $user['userid'] ) ) {
			$userid = intval( $user['userid'] );
		} else {
			$userid = intval( $user );
		}
		$has_unapproved_post = WPF()->db->get_var( "SELECT `postid` FROM `" . WPF()->tables->posts . "` WHERE `userid` = '" . wpforo_bigintval( $userid ) . "' AND `status` = 1 LIMIT 1" );
		if( $has_unapproved_post ) {
			return true;
		} else {
			return false;
		}
	}

	public function ban_for_spam( $userid ) {
		if( isset( $userid ) && wpforo_setting( 'antispam', 'spam_user_ban' ) ) {
			if( ! $this->has_approved( WPF()->current_userid ) ) {
				WPF()->member->autoban( $userid );
			}
		}
	}

	public function set_all_unapproved( $userid ) {
		if( isset( $userid ) ) {
			WPF()->db->update( WPF()->tables->topics, [ 'status' => 1 ], [ 'userid' => intval( $userid ) ], [ '%d' ], [ '%d' ] );
			WPF()->db->update( WPF()->tables->posts, [ 'status' => 1 ], [ 'userid' => intval( $userid ) ], [ '%d' ], [ '%d' ] );
		}
	}

    public function remove_links( $item ) {
        if( wpfval( $item, 'body' ) ) {
            $domain = wpforo_get_request_uri();
            $urls   = wp_extract_urls( $item['body'] );
            if( ! empty( $urls ) ) {
                foreach( $urls as $k => $url ) {
                    $url = parse_url( $url );
                    if( wpfval( $url, 'host' ) ) {
                        if( strpos( (string) $domain, $url['host'] ) !== false ) unset( $urls[ $k ] );
                    }
                }
                if( ! empty( $urls ) ) {
                    $replace = apply_filters( 'wpforo_moderation_replace_body_links', ' <span style="color:#aaa;">' . wpforo_phrase( 'removed link', false, false ) . '</span> ', $item, $urls );
                    $item['body'] = str_replace( $urls, $replace, $item['body'] );
                    do_action( 'wpforo_moderation_remove_body_links', $item, $urls);
                }
            }
        }
        if( wpfval( $item, 'title' ) ) {
            $domain = wpforo_get_request_uri();
            $urls   = wp_extract_urls( $item['title'] );
            if( ! empty( $urls ) ) {
                foreach( $urls as $k => $url ) {
                    $url = parse_url( $url );
                    if( wpfval( $url, 'host' ) ) {
                        if( strpos( (string) $domain, $url['host'] ) !== false ) unset( $urls[ $k ] );
                    }
                }
                if( ! empty( $urls ) ) {
                    $replace = apply_filters( 'wpforo_moderation_replace_title_links', ' -' . wpforo_phrase( 'removed link', false, false ) . '- ', $item, $urls );
                    $item['title'] = str_replace( $urls, $replace, $item['title'] );
                    do_action( 'wpforo_moderation_remove_title_links', $item, $urls);
                }
            }
        }

        return $item;
    }

	public function has_link( $item ) {
        $field_urls = [];
		$domain = wpforo_get_request_uri();
		$title_urls = wp_extract_urls( $item['title'] );
		$body_urls = wp_extract_urls( $item['body'] );
        $user = ( wpfval($item, 'userid') ) ? wpforo_member( $item['userid'] ) : [];
        $signature_urls = ( wpfval($user, 'signature') ) ? wp_extract_urls( $user['signature'] ) : [];

        if( $fields = wpfval($item, 'postmetas') ){
            foreach( $fields as $field ){
				if( ! is_scalar( $field ) ) continue;
                $_urls = wp_extract_urls( $field );
                if( ! empty( $_urls ) ) {
                    foreach( $_urls as $_url ) $field_urls[] = $_url;
                }
            }
        }

        $urls = array_merge( $title_urls, $body_urls, $signature_urls, $field_urls );

		if( ! empty( $urls ) ) {
			foreach( $urls as $k => $url ) {
				$url = parse_url( $url );
				if( wpfval( $url, 'host' ) ) {
					if( strpos( (string) $domain, $url['host'] ) !== false ) unset( $urls[ $k ] );
				}
			}
		}
		if( ! empty( $urls ) ) {
			return true;
		}

		return false;
	}

	public function get_distinct_userids( $status = 1 ) {
		return WPF()->db->get_col( "SELECT DISTINCT `userid` FROM `" . WPF()->tables->posts . "` WHERE `status` = " . intval( $status ) );
	}

}

```