Spamblock Bee: Initial commit
This commit is contained in:
Grischa Brockhaus
parent
0ab60e10a3
commit
385533eb18
4 changed files with 334 additions and 0 deletions
20
serendipity_event_spamblock_bee/UTF-8/lang_de.inc.php
Normal file
20
serendipity_event_spamblock_bee/UTF-8/lang_de.inc.php
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
<?php
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_TITLE', 'Spamschutz Biene (Honepot)');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_DESC', 'Implementiert einfache Kommentar AntiSpam Maßnahmen, die einfach zu konfigurieren aber sehr effektiv sind. (Honeypot)');
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_PATH', 'Plugin Pfad');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_PATH_DESC', 'In normalen Installationen ist der Default die korrekte Einstellung.');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_REQUIRED_FIELDS', 'Pflichtfelder');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_REQUIRED_FIELDS_DESC', 'Geben Sie die Liste von Pflichtfeldern bei der Abgabe eines Kommentars ein. Mehrere Felder können mit "," getrennt werden. Verfügbare Felder sind: name, email, url, replyTo, comment');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_REASON_REQUIRED_FIELD', 'Sie haben das Feld "%s" nicht ausgefüllt!');
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_HONEYPOT', 'Honeypot einsetzen');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_HONEYPOT_DESC', 'Ein "Honeypot" ist ein verstecktes Kommentar Feld, das leer gelasen werden soll. Da Bots aber dazu tendieren, alle vorgefundenen Felder auszufüllen, ist dies ein einfacher und unkritischer Weg, viele der Bots auszusperren. Um den Honeypot besonders effektiv zu machen, setze CommentSpice als erstes AntiSpam plugin in Deiner Liste ein.');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE', 'Spam Log Typ');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_DESC', 'Wohin sollen Kommentare, die von CommentSpice gefunden wurden, geloggt werden?');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_NONE', 'Nicht loggen');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_FILE', 'Textdatei');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_DATABASE', 'Spamlog Datenbank Tabelle');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGFILE', 'Logdatei');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGFILE_DESC', 'Wohin soll das Textfile für die Logs gespeichert werden?');
|
||||
20
serendipity_event_spamblock_bee/lang_de.inc.php
Normal file
20
serendipity_event_spamblock_bee/lang_de.inc.php
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
<?php
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_TITLE', 'Spamschutz Biene (Honepot)');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_DESC', 'Implementiert einfache Kommentar AntiSpam Maßnahmen, die einfach zu konfigurieren aber sehr effektiv sind. (Honeypot)');
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_PATH', 'Plugin Pfad');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_PATH_DESC', 'In normalen Installationen ist der Default die korrekte Einstellung.');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_REQUIRED_FIELDS', 'Pflichtfelder');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_REQUIRED_FIELDS_DESC', 'Geben Sie die Liste von Pflichtfeldern bei der Abgabe eines Kommentars ein. Mehrere Felder können mit "," getrennt werden. Verfügbare Felder sind: name, email, url, replyTo, comment');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_REASON_REQUIRED_FIELD', 'Sie haben das Feld "%s" nicht ausgefüllt!');
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_HONEYPOT', 'Honeypot einsetzen');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_HONEYPOT_DESC', 'Ein "Honeypot" ist ein verstecktes Kommentar Feld, das leer gelasen werden soll. Da Bots aber dazu tendieren, alle vorgefundenen Felder auszufüllen, ist dies ein einfacher und unkritischer Weg, viele der Bots auszusperren. Um den Honeypot besonders effektiv zu machen, setze SPAMBLOCK_BEE als erstes AntiSpam plugin in Deiner Liste ein.');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE', 'Spam Log Typ');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_DESC', 'Wohin sollen Kommentare, die von SPAMBLOCK_BEE gefunden wurden, geloggt werden?');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_NONE', 'Nicht loggen');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_FILE', 'Textdatei');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_DATABASE', 'Spamlog Datenbank Tabelle');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGFILE', 'Logdatei');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGFILE_DESC', 'Wohin soll das Textfile für die Logs gespeichert werden?');
|
||||
20
serendipity_event_spamblock_bee/lang_en.inc.php
Normal file
20
serendipity_event_spamblock_bee/lang_en.inc.php
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
<?php
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_TITLE', 'Spamblock Bee (Honepot)');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_DESC', 'Implements simple comment antispam mechanisms, that are easy to configure but very effective (Honepot).');
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_PATH', 'Plugins path');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_PATH_DESC', 'In normal installations the default is correct.');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_REQUIRED_FIELDS', 'Required comment fields');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_REQUIRED_FIELDS_DESC', 'Enter a list of required fields that need to be filled when a user comments. Seperate multiple fields with a ",". Available keys are: name, email, url, replyTo, comment');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_REASON_REQUIRED_FIELD', 'You did not specify the %s field!');
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_HONEYPOT', 'Use Honeypot');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_HONEYPOT_DESC', 'A "Honeypot" is a hidden comment form field that should be left empty but as most SPAM bots do fill any field found it is an easy way to detect automatic commenting. There is no risk to switch it on, but high benefit! In order to make the honeypot more effective put SPAMBLOCK_BEE at top of any anti spam plugin.');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE', 'Spam log type');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_DESC', 'Where do you want to log spam found by SPAMBLOCK_BEE?');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_NONE', 'Don\'t log');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_FILE', 'Text logfile');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_DATABASE', 'Spamlog database table');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGFILE', 'Logfile');
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGFILE_DESC', 'Where to save the logfile if used for logging?');
|
||||
|
|
@ -0,0 +1,274 @@
|
|||
<?php
|
||||
|
||||
|
||||
if (IN_serendipity !== true) {
|
||||
die ("Don't hack!");
|
||||
}
|
||||
|
||||
// Probe for a language include with constants. Still include defines later on, if some constants were missing
|
||||
$probelang = dirname(__FILE__) . '/' . $serendipity['charset'] . 'lang_' . $serendipity['lang'] . '.inc.php';
|
||||
if (file_exists($probelang)) {
|
||||
include $probelang;
|
||||
}
|
||||
|
||||
include dirname(__FILE__) . '/lang_en.inc.php';
|
||||
|
||||
@define('PLUGIN_EVENT_SPAMBLOCK_BEE_DEBUG', FALSE);
|
||||
|
||||
class serendipity_event_spamblock_bee extends serendipity_event
|
||||
{
|
||||
var $title = PLUGIN_EVENT_SPAMBLOCK_BEE_TITLE;
|
||||
|
||||
function introspect(&$propbag)
|
||||
{
|
||||
global $serendipity;
|
||||
|
||||
$propbag->add('name', PLUGIN_EVENT_SPAMBLOCK_BEE_TITLE);
|
||||
$propbag->add('description', PLUGIN_EVENT_SPAMBLOCK_BEE_DESC);
|
||||
$propbag->add('stackable', false);
|
||||
$propbag->add('author', 'Grischa Brockhaus');
|
||||
$propbag->add('requirements', array(
|
||||
'serendipity' => '0.8',
|
||||
'smarty' => '2.6.7',
|
||||
'php' => '4.1.0'
|
||||
));
|
||||
$propbag->add('version', '1.00');
|
||||
$propbag->add('event_hooks', array(
|
||||
'frontend_comment' => true,
|
||||
'frontend_saveComment' => true,
|
||||
'css' => true,
|
||||
));
|
||||
$propbag->add('groups', array('ANTISPAM'));
|
||||
|
||||
$configuration = array('do_honeypot', 'spamlogtype', 'spamlogfile', 'plugin_path');
|
||||
|
||||
$propbag->add('configuration', $configuration );
|
||||
}
|
||||
|
||||
function generate_content(&$title) {
|
||||
$title = PLUGIN_EVENT_SPAMBLOCK_BEE_TITLE;
|
||||
}
|
||||
|
||||
function introspect_config_item($name, &$propbag)
|
||||
{
|
||||
global $serendipity;
|
||||
|
||||
switch($name) {
|
||||
case 'do_honeypot':
|
||||
$propbag->add('type', 'boolean');
|
||||
$propbag->add('name', PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_HONEYPOT);
|
||||
$propbag->add('description', PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_HONEYPOT_DESC);
|
||||
$propbag->add('default', true);
|
||||
break;
|
||||
case 'spamlogtype':
|
||||
$logtypevalues = array (
|
||||
'none' => PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_NONE,
|
||||
'file' => PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_FILE,
|
||||
'db' => PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_DATABASE,
|
||||
);
|
||||
$propbag->add('type', 'select');
|
||||
$propbag->add('name', PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE);
|
||||
$propbag->add('description', PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGTYPE_DESC);
|
||||
$propbag->add('select_values', $logtypevalues);
|
||||
$propbag->add('default', 'none');
|
||||
break;
|
||||
case 'spamlogfile':
|
||||
$propbag->add('type', 'string');
|
||||
$propbag->add('name', PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGFILE);
|
||||
$propbag->add('description', PLUGIN_EVENT_SPAMBLOCK_BEE_CONFIG_SPAM_LOGFILE_DESC);
|
||||
$propbag->add('default', $serendipity['serendipityPath'] . 'spamblock.log');
|
||||
break;
|
||||
case 'required_fields':
|
||||
$propbag->add('type', 'string');
|
||||
$propbag->add('name', PLUGIN_EVENT_EVENT_SPAMBLOCK_BEE_REQUIRED_FIELDS);
|
||||
$propbag->add('description', PLUGIN_EVENT_EVENT_SPAMBLOCK_BEE_REQUIRED_FIELDS_DESC);
|
||||
$propbag->add('default', '');
|
||||
break;
|
||||
|
||||
case 'plugin_path':
|
||||
$propbag->add('type', 'string');
|
||||
$propbag->add('name', PLUGIN_EVENT_SPAMBLOCK_BEE_PATH);
|
||||
$propbag->add('description', PLUGIN_EVENT_SPAMBLOCK_BEE_PATH_DESC);
|
||||
$propbag->add('default', $serendipity['serendipityHTTPPath'] . 'plugins/serendipity_event_commentspice/');
|
||||
break;
|
||||
|
||||
default:
|
||||
return false;
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
function event_hook($event, &$bag, &$eventData, $addData = null) {
|
||||
global $serendipity;
|
||||
|
||||
$hooks = &$bag->get('event_hooks');
|
||||
if (isset($hooks[$event])) {
|
||||
switch($event) {
|
||||
case 'frontend_saveComment':
|
||||
$result = $this->checkComment($eventData, $addData);
|
||||
return $result;
|
||||
break;
|
||||
case 'frontend_comment':
|
||||
$this->printCommentEditExtras($eventData, $addData);
|
||||
break;
|
||||
case 'css':
|
||||
$this->printCss($eventData, $addData);
|
||||
break;
|
||||
default:
|
||||
return false;
|
||||
break;
|
||||
}
|
||||
return true;
|
||||
} else {
|
||||
return false;
|
||||
}
|
||||
}
|
||||
function install() {
|
||||
}
|
||||
function cleanup() {
|
||||
}
|
||||
|
||||
function checkComment(&$eventData, &$addData) {
|
||||
global $serendipity;
|
||||
|
||||
if ("NORMAL" == $addData['type']) { // only supported for normal comments
|
||||
// Check for honeypot:
|
||||
$do_honepot = serendipity_db_bool($this->get_config('do_honeypot',true));
|
||||
if ($do_honepot && (!empty($serendipity['POST']['phone']) || $serendipity['POST']['phone']=='0') ) {
|
||||
$logfile = $this->get_config('spamlogfile', $serendipity['serendipityPath'] . 'spamblock.log');
|
||||
$this->spamlog($logfile, $eventData['id'], 'REJECTED', $serendipity['POST']['phone'], $addData);
|
||||
$eventData = array('allow_comments' => false);
|
||||
return false;
|
||||
}
|
||||
|
||||
// Check, if all required fields are set, but only if spamblock is not installed.
|
||||
if (!class_exists('serendipity_event_spamblock')) {
|
||||
$required_fields = $this->get_config('required_fields', '');
|
||||
if (!empty($required_fields)) {
|
||||
$required_field_list = explode(',', $required_fields);
|
||||
foreach($required_field_list as $required_field) {
|
||||
$required_field = trim($required_field);
|
||||
if (empty($addData[$required_field])) {
|
||||
$this->log($logfile, $eventData['id'], 'REJECTED', PLUGIN_EVENT_SPAMBLOCK_BEE_REASON_REQUIRED_FIELD, $addData);
|
||||
$eventData = array('allow_comments' => false);
|
||||
$serendipity['messagestack']['comments'][] = sprintf(PLUGIN_EVENT_SPAMBLOCK_BEE_REASON_REQUIRED_FIELD, $required_field);
|
||||
return false;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
function printCommentEditExtras(&$eventData, &$addData) {
|
||||
global $serendipity;
|
||||
|
||||
// Don't put extras on admin menu. They are not working there:
|
||||
if (isset($eventData['GET']['action']) && $eventData['GET']['action']=='admin') return;
|
||||
|
||||
// Honeypot
|
||||
if (serendipity_db_bool($this->get_config('do_honeypot',true))) {
|
||||
echo '<div id="serendipity_commentspice_phone" class="serendipity_commentDirection commentspice_phone_input" >' . "\n";
|
||||
echo '<label for="serendipity_commentform_phone">Phone*</label>' . "\n";
|
||||
echo '<input class="commentspice_phone_input" type="text" id="serendipity_commentform_phone" name="serendipity[phone]" value="" placeholder="You don\'t want to give me your number, do you? ;)"/>' . "\n";
|
||||
echo "</div>\n";
|
||||
}
|
||||
}
|
||||
|
||||
function printCss(&$eventData, &$addData) {
|
||||
global $serendipity;
|
||||
|
||||
if (!(strpos($eventData, '.commentspice_phone_input'))) {
|
||||
?>
|
||||
.commentspice_phone_input {
|
||||
max-width: 100%;
|
||||
display:none;
|
||||
visibility:hidden;
|
||||
}
|
||||
<?php
|
||||
}
|
||||
}
|
||||
|
||||
function hashString( $what ) {
|
||||
$installation_secret = $this->get_config('installation_secret');
|
||||
if (empty($installation_secret)) {
|
||||
$installation_secret = md5(date('l jS \of F Y h:i:s A'));
|
||||
$this->set_config('installation_secret', $installation_secret);
|
||||
}
|
||||
return md5($installation_secret . ':' . $what);
|
||||
}
|
||||
|
||||
function log($message){
|
||||
if (!PLUGIN_EVENT_SPAMBLOCK_BEE_DEBUG) return;
|
||||
$fp = fopen(dirname(__FILE__) . '/spice.log','a');
|
||||
fwrite($fp, date('Y.m.d H:i:s') . " - " . $message . "\n");
|
||||
fflush($fp);
|
||||
fclose($fp);
|
||||
}
|
||||
|
||||
function spamlog($logfile, $id, $switch, $reason, $addData) {
|
||||
global $serendipity;
|
||||
$method = $this->get_config('spamlogtype', 'none');
|
||||
if (empty($logfile)) $logfile = dirname(__FILE__) . '/spambee.log';
|
||||
|
||||
switch($method) {
|
||||
case 'file':
|
||||
$reason = "Honeypot=$reason";
|
||||
if (empty($logfile)) {
|
||||
return;
|
||||
}
|
||||
if (strpos($logfile, '%') !== false) {
|
||||
$logfile = strftime($logfile);
|
||||
}
|
||||
|
||||
$fp = @fopen($logfile, 'a+');
|
||||
if (!is_resource($fp)) {
|
||||
return;
|
||||
}
|
||||
fwrite($fp, sprintf(
|
||||
'[%s] - [%s: %s] - [#%s, Name "%s", E-Mail "%s", URL "%s", User-Agent "%s", IP %s] - [%s]' . "\n",
|
||||
date('Y-m-d H:i:s', serendipity_serverOffsetHour()),
|
||||
$switch,
|
||||
$reason,
|
||||
$id,
|
||||
str_replace("\n", ' ', $addData['name']),
|
||||
str_replace("\n", ' ', $addData['email']),
|
||||
str_replace("\n", ' ', $addData['url']),
|
||||
str_replace("\n", ' ', $_SERVER['HTTP_USER_AGENT']),
|
||||
$_SERVER['REMOTE_ADDR'],
|
||||
str_replace("\n", ' ', $addData['comment'])
|
||||
));
|
||||
|
||||
fclose($fp);
|
||||
break;
|
||||
|
||||
case 'none':
|
||||
return;
|
||||
break;
|
||||
|
||||
case 'db':
|
||||
default:
|
||||
$reason = "SpamBee Honeypot: " . serendipity_db_escape_string($reason);
|
||||
$q = sprintf("INSERT INTO {$serendipity['dbPrefix']}spamblocklog
|
||||
(timestamp, type, reason, entry_id, author, email, url, useragent, ip, referer, body)
|
||||
VALUES (%d, '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s')",
|
||||
|
||||
serendipity_serverOffsetHour(),
|
||||
serendipity_db_escape_string($switch),
|
||||
serendipity_db_escape_string($reason),
|
||||
serendipity_db_escape_string($id),
|
||||
serendipity_db_escape_string($addData['name']),
|
||||
serendipity_db_escape_string($addData['email']),
|
||||
serendipity_db_escape_string($addData['url']),
|
||||
substr(serendipity_db_escape_string($_SERVER['HTTP_USER_AGENT']), 0, 255),
|
||||
serendipity_db_escape_string($_SERVER['REMOTE_ADDR']),
|
||||
substr(serendipity_db_escape_string(isset($_SESSION['HTTP_REFERER']) ? $_SESSION['HTTP_REFERER'] : $_SERVER['HTTP_REFERER']), 0, 255),
|
||||
serendipity_db_escape_string($addData['comment'])
|
||||
);
|
||||
|
||||
serendipity_db_schema_import($q);
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
Loading…
Reference in a new issue