142 lines
3.2 KiB
PHP
142 lines
3.2 KiB
PHP
<?php
|
|
|
|
/*
|
|
* Copyright (c) 2010-2013 Tinyboard Development Group
|
|
*/
|
|
|
|
defined('TINYBOARD') or exit;
|
|
|
|
class Filter {
|
|
private $condition;
|
|
|
|
public function __construct(array $arr) {
|
|
foreach ($arr as $key => $value)
|
|
$this->$key = $value;
|
|
}
|
|
|
|
public function match(array $post, $condition, $match) {
|
|
$condition = strtolower($condition);
|
|
|
|
switch($condition) {
|
|
case 'custom':
|
|
if (!is_callable($match))
|
|
error('Custom condition for filter is not callable!');
|
|
return $match($post);
|
|
case 'name':
|
|
return preg_match($match, $post['name']);
|
|
case 'trip':
|
|
return $match === $post['trip'];
|
|
case 'email':
|
|
return preg_match($match, $post['email']);
|
|
case 'subject':
|
|
return preg_match($match, $post['subject']);
|
|
case 'body':
|
|
return preg_match($match, $post['body']);
|
|
case 'filename':
|
|
if (!$post['has_file'])
|
|
return false;
|
|
return preg_match($match, $post['filename']);
|
|
case 'extension':
|
|
if (!$post['has_file'])
|
|
return false;
|
|
return preg_match($match, $post['body']);
|
|
case 'ip':
|
|
return preg_match($match, $_SERVER['REMOTE_ADDR']);
|
|
case 'op':
|
|
return $post['op'] == $match;
|
|
case 'has_file':
|
|
return $post['has_file'] == $match;
|
|
default:
|
|
error('Unknown filter condition: ' . $condition);
|
|
}
|
|
}
|
|
|
|
public function action() {
|
|
global $board;
|
|
|
|
switch($this->action) {
|
|
case 'reject':
|
|
error(isset($this->message) ? $this->message : 'Posting throttled by flood filter.');
|
|
case 'ban':
|
|
if (!isset($this->reason))
|
|
error('The ban action requires a reason.');
|
|
|
|
$reason = $this->reason;
|
|
|
|
if (isset($this->expires))
|
|
$expires = time() + $this->expires;
|
|
else
|
|
$expires = 0; // Ban indefinitely
|
|
|
|
if (isset($this->reject))
|
|
$reject = $this->reject;
|
|
else
|
|
$reject = true;
|
|
|
|
if (isset($this->all_boards))
|
|
$all_boards = $this->all_boards;
|
|
else
|
|
$all_boards = false;
|
|
|
|
$query = prepare("INSERT INTO ``bans`` VALUES (NULL, :ip, :mod, :set, :expires, :reason, :board, 0)");
|
|
$query->bindValue(':ip', $_SERVER['REMOTE_ADDR']);
|
|
$query->bindValue(':mod', -1);
|
|
$query->bindValue(':set', time());
|
|
|
|
if ($expires)
|
|
$query->bindValue(':expires', $expires);
|
|
else
|
|
$query->bindValue(':expires', null, PDO::PARAM_NULL);
|
|
|
|
if ($reason)
|
|
$query->bindValue(':reason', $reason);
|
|
else
|
|
$query->bindValue(':reason', null, PDO::PARAM_NULL);
|
|
|
|
|
|
if ($all_boards)
|
|
$query->bindValue(':board', null, PDO::PARAM_NULL);
|
|
else
|
|
$query->bindValue(':board', $board['uri']);
|
|
|
|
$query->execute() or error(db_error($query));
|
|
|
|
if ($reject) {
|
|
if (isset($this->message))
|
|
error($message);
|
|
|
|
checkBan($board['uri']);
|
|
exit;
|
|
}
|
|
|
|
break;
|
|
default:
|
|
error('Unknown filter action: ' . $this->action);
|
|
}
|
|
}
|
|
|
|
public function check(array $post) {
|
|
foreach ($this->condition as $condition => $value) {
|
|
if (!$this->match($post, $condition, $value))
|
|
return false;
|
|
}
|
|
|
|
/* match */
|
|
return true;
|
|
}
|
|
}
|
|
|
|
function do_filters(array $post) {
|
|
global $config;
|
|
|
|
if (!isset($config['filters']))
|
|
return;
|
|
|
|
foreach ($config['filters'] as $arr) {
|
|
$filter = new Filter($arr);
|
|
if ($filter->check($post))
|
|
$filter->action();
|
|
}
|
|
}
|
|
|