From 818da9f2837c68af350f1d79ec5202a86eca5123 Mon Sep 17 00:00:00 2001
From: Michael Save <savetheinternet@tinyboard.org>
Date: Wed, 11 Apr 2012 02:19:13 +1000
Subject: [PATCH] Better custom flood filters:
 http://tinyboard.org/docs/?p=Config/Flood_filters

---
 inc/filters.php | 135 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 135 insertions(+)
 create mode 100644 inc/filters.php

diff --git a/inc/filters.php b/inc/filters.php
new file mode 100644
index 00000000..3698f4e0
--- /dev/null
+++ b/inc/filters.php
@@ -0,0 +1,135 @@
+<?php
+
+class Filter {
+	private $condition;
+	
+	public function __construct(array $arr) {
+		foreach($arr as $key => $value)
+			$this->$key = $value;		
+	}
+	
+	public function match(array $post, $condition, $match) {
+		$condition = strtolower($condition);
+		
+		switch($condition) {
+			case 'custom':
+				if(!is_callable($match))
+					error('Custom condition for filter is not callable!');
+				return $match($post);
+			case 'name':
+				return preg_match($match, $post['name']);
+			case 'trip':
+				return preg_match($match, $post['trip']);
+			case 'email':
+				return preg_match($match, $post['email']);
+			case 'subject':
+				return preg_match($match, $post['subject']);
+			case 'body':
+				return preg_match($match, $post['body']);
+			case 'filename':
+				if(!$post['has_file'])
+					return false;
+				return preg_match($match, $post['filename']);
+			case 'extension':
+				if(!$post['has_file'])
+					return false;
+				return preg_match($match, $post['body']);
+			case 'ip':
+				return preg_match($match, $_SERVER['REMOTE_ADDR']);
+			case 'op':
+				return $post['op'] == $match;
+			case 'has_file':
+				return $post['has_file'] == $match;
+			default:
+				error('Unknown filter condition: ' . $condition);
+		}
+	}
+	
+	public function action() {
+		global $board;
+		
+		switch($this->action) {
+			case 'reject':
+				error(isset($this->message) ? $this->message : 'Posting throttled by flood filter.');
+			case 'ban':
+				if(!isset($this->reason))
+					error('The ban action requires a reason.');
+				
+				$reason = $this->reason;
+				
+				if(isset($this->expires))
+					$expires = time() + $this->expires;
+				else
+					$expires = 0; // Ban indefinitely
+				
+				if(isset($this->reject))
+					$reject = $this->reject;
+				else
+					$reject = true;
+				
+				if(isset($this->all_boards))
+					$all_boards = $this->all_boards;
+				else
+					$all_boards = false;
+				
+				$query = prepare("INSERT INTO `bans` VALUES (NULL, :ip, :mod, :set, :expires, :reason, :board)");
+				$query->bindValue(':ip', $_SERVER['REMOTE_ADDR']);
+				$query->bindValue(':mod', -1);
+				$query->bindValue(':set', time());
+				
+				if($expires)
+					$query->bindValue(':expires', $expires);
+				else
+					$query->bindValue(':expires', null, PDO::PARAM_NULL);
+				
+				if($reason)
+					$query->bindValue(':reason', $reason);
+				else
+					$query->bindValue(':reason', null, PDO::PARAM_NULL);
+				
+				
+				if($all_boards)
+					$query->bindValue(':board', null, PDO::PARAM_NULL);
+				else
+					$query->bindValue(':board', $board['id']);
+				
+				$query->execute() or error(db_error($query));
+				
+				if($reject) {
+					if(isset($this->message))
+						error($message);
+					
+					checkBan($board['uri']);
+					exit;
+				}
+				
+				break;
+			default:
+				error('Unknown filter action: ' . $this->action);
+		}
+	}
+	
+	public function check(array $post) {
+		foreach($this->condition as $condition => $value) {
+			if(!$this->match($post, $condition, $value))
+				return false;
+		}
+		
+		/* match */
+		return true;
+	}
+}
+
+function do_filters(array $post) {
+	global $config;
+	
+	if(!isset($config['flood_filters']))
+		return;
+	
+	foreach($config['flood_filters'] as $arr) {
+		$filter = new Filter($arr);
+		if($filter->check($post))
+			$filter->action();
+	}
+}
+