source: plugins/antispam/inc/lib.dc.antispam.php @ 2823:f011562dadc7

<?php
# -- BEGIN LICENSE BLOCK ---------------------------------------
#
# This file is part of Antispam, a plugin for Dotclear 2.
#
# Copyright (c) 2003-2013 Olivier Meunier & Association Dotclear
# Licensed under the GPL version 2.0 license.
# See LICENSE file or
# http://www.gnu.org/licenses/old-licenses/gpl-2.0.html
#
# -- END LICENSE BLOCK -----------------------------------------
if (!defined('DC_RC_PATH')) { return; }

class dcAntispam
{
     public static $filters;

     public static function initFilters()
     {
          global $core;

          if (!isset($core->spamfilters)) {
               return;
          }

          self::$filters = new dcSpamFilters($core);
          self::$filters->init($core->spamfilters);
     }

     public static function isSpam($cur)
     {
          self::initFilters();
          self::$filters->isSpam($cur);
     }

     public static function trainFilters($blog,$cur,$rs)
     {
          $status = null;
          # From ham to spam
          if ($rs->comment_status != -2 && $cur->comment_status == -2) {
               $status = 'spam';
          }

          # From spam to ham
          if ($rs->comment_status == -2 && $cur->comment_status == 1) {
               $status = 'ham';
          }

          # the status of this comment has changed
          if ($status)
          {
               $filter_name = $rs->exists('comment_spam_filter') ? $rs->comment_spam_filter : null;

               self::initFilters();
               self::$filters->trainFilters($rs,$status,$filter_name);
          }
     }

     public static function statusMessage($rs)
     {
          if ($rs->exists('comment_status') && $rs->comment_status == -2)
          {
               $filter_name = $rs->exists('comment_spam_filter') ? $rs->comment_spam_filter : null;

               self::initFilters();

               return
               '<p><strong>'.__('This comment is a spam:').'</strong> '.
               self::$filters->statusMessage($rs,$filter_name).'</p>';
          }
     }

     public static function dashboardIcon($core, $icons)
     {
          if (($count = self::countSpam($core)) > 0) {
               $str = ($count > 1) ? __('(including %d spam comments)') : __('(including %d spam comment)');
               $icons['comments'][0] .= '</span></a> <br /><a href="'.$core->adminurl->get('admin.comments',array('status' => '-2')).'"><span>'.
                    sprintf($str,$count);
          }
     }

     public static function dashboardIconTitle($core)
     {
          if (($count = self::countSpam($core)) > 0) {
               $str = ($count > 1) ? __('(including %d spam comments)') : __('(including %d spam comment)');
               return '</span></a> <br /><a href="'.$core->adminurl->get('admin.comments',array('status' => '-2')).'"><span>'.
                    sprintf($str,$count);
          } else {
               return '';
          }
     }

     public static function countSpam($core)
     {
          return $core->blog->getComments(array('comment_status'=>-2),true)->f(0);
     }

     public static function countPublishedComments($core)
     {
          return $core->blog->getComments(array('comment_status'=>1),true)->f(0);
     }

     public static function delAllSpam($core, $beforeDate = null)
     {
          $strReq =
          'SELECT comment_id '.
          'FROM '.$core->prefix.'comment C '.
          'JOIN '.$core->prefix.'post P ON P.post_id = C.post_id '.
          "WHERE blog_id = '".$core->con->escape($core->blog->id)."' ".
          'AND comment_status = -2 ';
          if ($beforeDate) {
               $strReq .= 'AND comment_dt < \''.$beforeDate.'\' ';
          }

          $rs = $core->con->select($strReq);
          $r = array();
          while ($rs->fetch()) {
               $r[] = (integer) $rs->comment_id;
          }

          if (empty($r)) {
               return;
          }

          $strReq =
          'DELETE FROM '.$core->prefix.'comment '.
          'WHERE comment_id '.$core->con->in($r).' ';

          $core->con->execute($strReq);
     }

     public static function getUserCode($core)
     {
          $code =
          pack('a32',$core->auth->userID()).
          pack('H*',crypt::hmac(DC_MASTER_KEY,$core->auth->getInfo('user_pwd')));
          return bin2hex($code);
     }

     public static function checkUserCode($core,$code)
     {
          $code = pack('H*',$code);

          $user_id = trim(@pack('a32',substr($code,0,32)));
          $pwd = @unpack('H40hex',substr($code,32,40));

          if ($user_id === false || $pwd === false) {
               return false;
          }

          $pwd = $pwd['hex'];

          $strReq = 'SELECT user_id, user_pwd '.
                    'FROM '.$core->prefix.'user '.
                    "WHERE user_id = '".$core->con->escape($user_id)."' ";

          $rs = $core->con->select($strReq);

          if ($rs->isEmpty()) {
               return false;
          }

          if (crypt::hmac(DC_MASTER_KEY,$rs->user_pwd) != $pwd) {
               return false;
          }

          $permissions = $core->getBlogPermissions($core->blog->id);

          if ( empty($permissions[$rs->user_id]) ) {
               return false;
          }

          return $rs->user_id;
     }

     public static function purgeOldSpam($core)
     {
          $defaultDateLastPurge = time();
          $defaultModerationTTL = '7';
          $init = false;

          // settings
          $core->blog->settings->addNamespace('antispam');

          $dateLastPurge = $core->blog->settings->antispam->antispam_date_last_purge;
          if ($dateLastPurge === null) {
               $init = true;
               $core->blog->settings->antispam->put('antispam_date_last_purge',$defaultDateLastPurge,'integer','Antispam Date Last Purge (unix timestamp)',true,false);
               $dateLastPurge = $defaultDateLastPurge;
          }
          $moderationTTL = $core->blog->settings->antispam->antispam_moderation_ttl;
          if ($moderationTTL === null) {
               $core->blog->settings->antispam->put('antispam_moderation_ttl',$defaultModerationTTL,'integer','Antispam Moderation TTL (days)',true,false);
               $moderationTTL = $defaultModerationTTL;
          }

          if ($moderationTTL < 0) {
               // disabled
               return;
          }

          // we call the purge every day
          if ((time()-$dateLastPurge) > (86400)) {
               // update dateLastPurge
               if (!$init) {
                    $core->blog->settings->antispam->put('antispam_date_last_purge',time(),null,null,true,false);
               }
               $date = date('Y-m-d H:i:s', time() - $moderationTTL*86400);
               dcAntispam::delAllSpam($core, $date);
          }
     }
}