post_statuses = apply_filters( 'wpforo_post_statuses', [ 0 => 'approved', 1 => 'unapproved' ] );
add_action('wpforo_after_change_board', function(){
if( !is_null( WPF()->wp_current_user ) ) $this->init();
});
}
private function init() {
if( is_admin() ) add_action( 'wpforo_after_init', [ $this, 'init_list_table' ] );
if( ! WPF()->usergroup->can( 'aup' ) ) {
add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'auto_moderate' ] );
add_filter( 'wpforo_add_post_data_filter', [ &$this, 'auto_moderate' ] );
} else {
if( WPF()->member->current_user_is_new() ) {
if( class_exists( 'Akismet' ) ) {
add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'akismet_topic' ], 8 );
add_filter( 'wpforo_edit_topic_data_filter', [ &$this, 'akismet_topic' ], 8 );
add_filter( 'wpforo_add_post_data_filter', [ &$this, 'akismet_post' ], 8 );
add_filter( 'wpforo_edit_post_data_filter', [ &$this, 'akismet_post' ], 8 );
}
if( wpforo_setting( 'antispam', 'spam_filter' ) ) {
add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'spam_topic' ], 9 );
add_filter( 'wpforo_edit_topic_data_filter', [ &$this, 'spam_topic' ], 9 );
add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'spam_post' ], 9 );
add_filter( 'wpforo_edit_topic_data_filter', [ &$this, 'spam_post' ], 9 );
add_filter( 'wpforo_add_post_data_filter', [ &$this, 'spam_post' ], 9 );
add_filter( 'wpforo_edit_post_data_filter', [ &$this, 'spam_post' ], 9 );
}
}
if( wpforo_setting( 'antispam', 'spam_filter' ) ) {
add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'auto_moderate' ], 10 );
add_filter( 'wpforo_add_post_data_filter', [ &$this, 'auto_moderate' ], 10 );
}
if( ! WPF()->perm->can_link() ) {
add_filter( 'wpforo_add_topic_data_filter', [ &$this, 'remove_links' ], 20 );
add_filter( 'wpforo_edit_topic_data_filter', [ &$this, 'remove_links' ], 20 );
add_filter( 'wpforo_add_post_data_filter', [ &$this, 'remove_links' ], 20 );
add_filter( 'wpforo_edit_post_data_filter', [ &$this, 'remove_links' ], 20 );
}
}
}
public function init_list_table() {
if( wpfval( $_GET, 'page' ) === wpforo_prefix_slug( 'moderations' ) ) {
$this->list_table = new ModerationsListTable();
$this->list_table->prepare_items();
}
}
public function get_post_status_dname( $status ) {
$status = intval( $status );
return ( isset( $this->post_statuses[ $status ] ) ? $this->post_statuses[ $status ] : $status );
}
public function get_moderations( $args, &$items_count = 0 ) {
if( isset( $_GET['filter_by_userid'] ) && wpforo_bigintval( $_GET['filter_by_userid'] ) ) $args['userid'] = wpforo_bigintval( $_GET['filter_by_userid'] );
$filter_by_status = intval( ( isset( $_GET['filter_by_status'] ) ? $_GET['filter_by_status'] : 1 ) );
$args['status'] = $filter_by_status;
if( ! isset( $_GET['order'] ) ) $args['orderby'] = '`created` DESC, `postid` DESC';
return WPF()->post->get_posts( $args, $items_count );
}
public function search( $needle, $fields = [] ) {
$pids = [];
if( $posts = WPF()->post->search( $needle ) ) {
foreach( $posts as $post ) {
$pids[] = $post['postid'];
}
}
return $pids;
}
public function post_approve( $postid ) {
return WPF()->post->set_status( $postid, 0 );
}
public function post_unapprove( $postid ) {
return WPF()->post->set_status( $postid, 1 );
}
public function get_view_url( $arg ) {
return WPF()->post->get_url( $arg );
}
public function akismet_topic( $item ) {
$post = [];
$post['user_ip'] = ( isset( $_SERVER['REMOTE_ADDR'] ) ? $_SERVER['REMOTE_ADDR'] : null );
$post['user_agent'] = ( isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT'] : null );
$post['referrer'] = ( isset( $_SERVER['HTTP_REFERER'] ) ? $_SERVER['HTTP_REFERER'] : null );
$post['blog'] = get_option( 'home' );
$post['blog_lang'] = get_locale();
$post['blog_charset'] = get_option( 'blog_charset' );
$post['comment_type'] = 'forum-post';
if( empty( $item['forumid'] ) ) {
$topic = WPF()->topic->get_topic( $item['topicid'] );
$item['forumid'] = $topic['forumid'];
}
$post['comment_author'] = WPF()->current_user['user_nicename'];
$post['comment_author_email'] = WPF()->current_user['user_email'];
$post['comment_author_url'] = WPF()->member->get_profile_url( WPF()->current_userid );
$post['comment_post_modified_gmt'] = current_time( 'mysql', 1 );
$post['comment_content'] = $item['title'] . " \r\n " . $item['body'];
$post['permalink'] = WPF()->forum->get_forum_url( $item['forumid'] );
$response = Akismet::http_post( Akismet::build_query( $post ), 'comment-check' );
if( $response[1] == 'true' ) {
$this->ban_for_spam( WPF()->current_userid );
$item['status'] = 1;
}
return $item;
}
public function akismet_post( $item ) {
$post = [];
$post['user_ip'] = ( isset( $_SERVER['REMOTE_ADDR'] ) ? $_SERVER['REMOTE_ADDR'] : null );
$post['user_agent'] = ( isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT'] : null );
$post['referrer'] = ( isset( $_SERVER['HTTP_REFERER'] ) ? $_SERVER['HTTP_REFERER'] : null );
$post['blog'] = get_option( 'home' );
$post['blog_lang'] = get_locale();
$post['blog_charset'] = get_option( 'blog_charset' );
$post['comment_type'] = 'forum-post';
$topic = WPF()->topic->get_topic( $item['topicid'] );
$post['comment_author'] = WPF()->current_user['user_nicename'];
$post['comment_author_email'] = WPF()->current_user['user_email'];
$post['comment_author_url'] = WPF()->member->get_profile_url( WPF()->current_userid );
$post['comment_post_modified_gmt'] = $topic['modified'];
$post['comment_content'] = $item['body'];
$post['permalink'] = WPF()->topic->get_url( $item['topicid'] );
$response = Akismet::http_post( Akismet::build_query( $post ), 'comment-check' );
if( $response[1] == 'true' ) {
$this->ban_for_spam( WPF()->current_userid );
$item['status'] = 1;
}
return $item;
}
public function spam_attachment() {
$default_attachments_dir = WPF()->folders['default_attachments']['dir'];
if( is_dir( $default_attachments_dir ) ) {
if( $handle = opendir( $default_attachments_dir ) ) {
while( false !== ( $filename = readdir( $handle ) ) ) {
if( $filename == '.' || $filename == '..' ) continue;
$level = $this->spam_file( $filename );
if( $level > 2 ) {
$link = '>>';
$phrase = 'SPAM! - ' . sprintf( __( 'Probably spam file attachments have been detected by wpForo Spam Control. Please moderate suspected files in Forums > Tools > Antispam Tab.', 'wpforo' ), $link );
WPF()->notice->add( $phrase, 'error' );
return true;
}
}
}
}
return false;
}
public function spam_file( $item, $type = 'file' ) {
if( ! isset( $item ) || ! $item ) return false;
$level = 0;
$item = strtolower( (string) $item );
$spam_file_phrases = [
0 => [ 'watch', 'movie' ],
1 => [ 'download', 'free' ],
];
if( $type == 'file' ) {
$ext_whitelist = wpforo_setting( 'antispam', 'exclude_file_ext' );
$ext = strtolower( (string) pathinfo( $item, PATHINFO_EXTENSION ) );
$ext_risk = [ 'pdf', 'doc', 'docx', 'txt', 'htm', 'html', 'rtf', 'xml', 'xls', 'xlsx', 'php', 'cgi' ];
$ext_risk = wpforo_clear_array( $ext_risk, $ext_whitelist );
$ext_high_risk = [ 'php', 'cgi', 'exe' ];
$ext_high_risk = wpforo_clear_array( $ext_high_risk, $ext_whitelist );
if( in_array( $ext, $ext_risk ) ) {
$has_post = WPF()->db->get_var( "SELECT `postid` FROM `" . WPF()->tables->posts . "` WHERE `body` LIKE '%" . esc_sql( $item ) . "%' LIMIT 1" );
foreach( $spam_file_phrases as $phrases ) {
foreach( $phrases as $phrase ) {
if( strpos( (string) $item, $phrase ) !== false ) {
if( ! $has_post ) {
$level = 4;
break 2;
} else {
$level = 2;
break 2;
}
}
}
}
if( ! $level ) {
if( ! $has_post ) {
$level = 3;
} else {
if( in_array( $ext, $ext_high_risk ) ) {
$level = 5;
} else {
$level = 1;
}
}
}
}
return $level;
} elseif( $type == 'file-open' ) {
$ext = strtolower( (string) pathinfo( $item, PATHINFO_EXTENSION ) );
$allow_to_open = [ 'pdf', 'doc', 'docx', 'txt', 'rtf', 'xls', 'xlsx' ];
if( in_array( $ext, $allow_to_open ) ) {
return true;
} else {
return false;
}
}
return 0;
}
public function spam_topic( $topic ) {
if( empty( $topic ) ) return $topic;
if( isset( $topic['title'] ) ) {
$item = $topic['title'];
} else {
return $topic;
}
$len = wpforo_strlen( $item );
if( $len < 10 ) return $topic;
$item = strip_tags( (string) $item );
$is_similar = false;
$topic_args = [ 'userid' => $topic['userid'] ];
$topics = WPF()->topic->get_topics( $topic_args );
$sc_level = ( !is_null( wpforo_setting( 'antispam', 'spam_filter_level_topic' ) ) ) ? intval( wpforo_setting( 'antispam', 'spam_filter_level_topic' ) ) : 100;
if( $sc_level > 100 ) $sc_level = 60;
$sc_level = ( 101 - $sc_level );
if( ! empty( $topics ) ) {
$count = count( $topics );
$keys[0] = array_rand( $topics );
if( $count > 1 ) $keys[1] = array_rand( $topics );
$check_1 = ( isset( $keys[0] ) ) ? strip_tags( (string) $topics[ $keys[0] ]['title'] ) : '';
$check_2 = ( isset( $keys[1] ) ) ? strip_tags( (string) $topics[ $keys[1] ]['title'] ) : '';
if( $check_1 ) {
similar_text( $item, $check_1, $percent );
if( $percent > $sc_level ) $is_similar = true;
}
if( $check_2 && ! $is_similar ) {
similar_text( $item, $check_2, $percent );
if( $percent > $sc_level ) $is_similar = true;
}
if( $is_similar ) {
$this->ban_for_spam( WPF()->current_userid );
$topic['status'] = 1;
}
}
return apply_filters('wpforo_spam_topic', $topic );
}
public function spam_post( $post ) {
if( empty( $post ) ) return $post;
if( isset( $post['body'] ) ) {
$item = $post['body'];
} else {
return $post;
}
$item = strip_tags( (string) $item );
$is_similar = false;
$post_args = [ 'userid' => $post['userid'] ];
$posts = WPF()->post->get_posts( $post_args );
$sc_level = !is_null( wpforo_setting( 'antispam', 'spam_filter_level_post' ) ) ? intval( wpforo_setting( 'antispam', 'spam_filter_level_post' ) ) : 100;
if( $sc_level > 100 ) $sc_level = 70;
$sc_level = ( 101 - $sc_level );
if( ! empty( $posts ) ) {
$count = count( $posts );
$keys[0] = array_rand( $posts );
if( $count > 1 ) $keys[1] = array_rand( $posts );
$check_1 = ( isset( $keys[0] ) ) ? strip_tags( (string) $posts[ $keys[0] ]['body'] ) : '';
$check_2 = ( isset( $keys[1] ) ) ? strip_tags( (string) $posts[ $keys[1] ]['body'] ) : '';
if( $check_1 ) {
similar_text( $item, $check_1, $percent );
if( isset( $percent ) && $percent > $sc_level ) $is_similar = true;
}
if( $check_2 && ! $is_similar ) {
similar_text( $item, $check_2, $percent );
if( isset( $percent ) && $percent > $sc_level ) $is_similar = true;
}
if( $is_similar ) {
$this->ban_for_spam( WPF()->current_userid );
$post['status'] = 1;
}
}
return apply_filters('wpforo_spam_post', $post);
}
public function auto_moderate( $item ) {
if( empty( $item ) ) return $item;
if( WPF()->usergroup->can( 'em' ) ) {
$item['status'] = 0;
return $item;
}
if( ! WPF()->usergroup->can( 'aup' ) ) {
$item['status'] = 1;
return $item;
}
if( WPF()->member->current_user_is_new() ) {
if( wpforo_setting( 'antispam', 'unapprove_post_if_user_is_new' ) ) {
$item['status'] = 1;
} else {
$if_link_found = apply_filters( 'wpforo_new_user_post_unapproved_if_link_found', true );
if( $if_link_found && isset( $item['body'] ) && isset( $item['title'] ) && $this->has_link( $item ) ) {
$item['status'] = 1;
}
$unapproved_all = apply_filters( 'wpforo_new_user_post_unapproved_all', false );
if( $unapproved_all && ( ( isset( $item['status'] ) && $item['status'] == 1 ) || $this->has_unapproved( WPF()->current_userid ) ) ) {
$this->set_all_unapproved( WPF()->current_userid );
$item['status'] = 1;
}
}
}
// Don't track users as "a user without approved posts" if he/she has no posts.
// Just check the number of unapproved posts before initiating this rule,
// if no unapproved posts then we don't need to set the first post of this user unapproved.
// This checking is already done by New User options when we set "1" post for New User status and turn on the "must be manually approved" option.
$must_have_one_approved = apply_filters( 'wpforo_post_moderation_must_have_one_approved', true );
if( $must_have_one_approved && $this->has_unapproved( WPF()->current_userid ) ) {
// So this rule will only work from the second post,
// it'll always keep new posts unapproved if previous posts are not approved yet.
if( ! $this->has_approved( WPF()->current_userid ) ) {
$item['status'] = 1;
}
}
return $item;
}
public function has_approved( $user ) {
if( ! $user ) return false;
if( isset( $user['userid'] ) ) {
$userid = intval( $user['userid'] );
} else {
$userid = intval( $user );
}
$has_approved_post = WPF()->db->get_var( "SELECT `postid` FROM `" . WPF()->tables->posts . "` WHERE `userid` = '" . wpforo_bigintval( $userid ) . "' AND `status` = 0 LIMIT 1" );
if( $has_approved_post ) {
return true;
} else {
return false;
}
}
public function has_unapproved( $user ) {
if( empty( $user ) ) return false;
if( isset( $user['userid'] ) ) {
$userid = intval( $user['userid'] );
} else {
$userid = intval( $user );
}
$has_unapproved_post = WPF()->db->get_var( "SELECT `postid` FROM `" . WPF()->tables->posts . "` WHERE `userid` = '" . wpforo_bigintval( $userid ) . "' AND `status` = 1 LIMIT 1" );
if( $has_unapproved_post ) {
return true;
} else {
return false;
}
}
public function ban_for_spam( $userid ) {
if( isset( $userid ) && wpforo_setting( 'antispam', 'spam_user_ban' ) ) {
if( ! $this->has_approved( WPF()->current_userid ) ) {
WPF()->member->autoban( $userid );
}
}
}
public function set_all_unapproved( $userid ) {
if( isset( $userid ) ) {
WPF()->db->update( WPF()->tables->topics, [ 'status' => 1 ], [ 'userid' => intval( $userid ) ], [ '%d' ], [ '%d' ] );
WPF()->db->update( WPF()->tables->posts, [ 'status' => 1 ], [ 'userid' => intval( $userid ) ], [ '%d' ], [ '%d' ] );
}
}
public function remove_links( $item ) {
if( wpfval( $item, 'body' ) ) {
$domain = wpforo_get_request_uri();
$urls = wp_extract_urls( $item['body'] );
if( ! empty( $urls ) ) {
foreach( $urls as $k => $url ) {
$url = parse_url( $url );
if( wpfval( $url, 'host' ) ) {
if( strpos( (string) $domain, $url['host'] ) !== false ) unset( $urls[ $k ] );
}
}
if( ! empty( $urls ) ) {
$replace = apply_filters( 'wpforo_moderation_replace_body_links', ' ' . wpforo_phrase( 'removed link', false, false ) . ' ', $item, $urls );
$item['body'] = str_replace( $urls, $replace, $item['body'] );
do_action( 'wpforo_moderation_remove_body_links', $item, $urls);
}
}
}
if( wpfval( $item, 'title' ) ) {
$domain = wpforo_get_request_uri();
$urls = wp_extract_urls( $item['title'] );
if( ! empty( $urls ) ) {
foreach( $urls as $k => $url ) {
$url = parse_url( $url );
if( wpfval( $url, 'host' ) ) {
if( strpos( (string) $domain, $url['host'] ) !== false ) unset( $urls[ $k ] );
}
}
if( ! empty( $urls ) ) {
$replace = apply_filters( 'wpforo_moderation_replace_title_links', ' -' . wpforo_phrase( 'removed link', false, false ) . '- ', $item, $urls );
$item['title'] = str_replace( $urls, $replace, $item['title'] );
do_action( 'wpforo_moderation_remove_title_links', $item, $urls);
}
}
}
return $item;
}
public function has_link( $item ) {
$field_urls = [];
$domain = wpforo_get_request_uri();
$title_urls = wp_extract_urls( $item['title'] );
$body_urls = wp_extract_urls( $item['body'] );
$user = ( wpfval($item, 'userid') ) ? wpforo_member( $item['userid'] ) : [];
$signature_urls = ( wpfval($user, 'signature') ) ? wp_extract_urls( $user['signature'] ) : [];
if( $fields = wpfval($item, 'postmetas') ){
foreach( $fields as $field ){
if( ! is_scalar( $field ) ) continue;
$_urls = wp_extract_urls( $field );
if( ! empty( $_urls ) ) {
foreach( $_urls as $_url ) $field_urls[] = $_url;
}
}
}
$urls = array_merge( $title_urls, $body_urls, $signature_urls, $field_urls );
if( ! empty( $urls ) ) {
foreach( $urls as $k => $url ) {
$url = parse_url( $url );
if( wpfval( $url, 'host' ) ) {
if( strpos( (string) $domain, $url['host'] ) !== false ) unset( $urls[ $k ] );
}
}
}
if( ! empty( $urls ) ) {
return true;
}
return false;
}
public function get_distinct_userids( $status = 1 ) {
return WPF()->db->get_col( "SELECT DISTINCT `userid` FROM `" . WPF()->tables->posts . "` WHERE `status` = " . intval( $status ) );
}
}