forbidals

Back Back Up Advanced Editor

<?php
if ( ! defined( 'ABSPATH' ) ) exit;

/**
 * Display content of "Allow List" tab on settings page
 *
 * @subpackage reCaptcha
 * @since 1.27
 * @version 1.0.0
 */

if ( ! class_exists( 'Gglcptch_Allowlist' ) ) {
	if ( ! class_exists( 'WP_List_Table' ) ) {
		require_once ABSPATH . 'wp-admin/includes/class-wp-list-table.php';
	}

class Gglcptch_Allowlist extends WP_List_Table {
		private
			$basename,
			$order_by,
			$per_page,
			$paged,
			$order,
			$s;

/**
		 * Constructor of class
		 */
		public function __construct( $plugin_basename ) {
			global $gglcptch_options;
			if ( empty( $gglcptch_options ) ) {
				$gglcptch_options = get_option( 'gglcptch_options' );
			}
			parent::__construct(
				array(
					'singular' => 'IP',
					'plural'   => 'IP',
					'ajax'     => true,
				)
			);
			$this->basename = $plugin_basename;
		}

/**
		 * Display content
		 *
		 * @return void
		 */
		public function display_content() {
			global $gglcptch_options; ?>
			<h1 class="wp-heading-inline"><?php esc_html_e( 'reCaptcha Allow List', 'google-captcha' ); ?></h1>
			<?php if ( ! ( isset( $_REQUEST['gglcptch_show_allowlist_form'] ) || isset( $_REQUEST['gglcptch_add_to_allowlist'] ) ) ) { ?>
				<form method="post" action="admin.php?page=google-captcha-allowlist.php" style="display: inline;">
					<button class="page-title-action" name="gglcptch_show_allowlist_form" value="on"<?php echo ( isset( $_POST['gglcptch_add_to_allowlist'] ) ) ? ' style="display: none;"' : ''; ?> /><?php esc_html_e( 'Add New', 'google-captcha' ); ?></button>
				</form>
				<?php
			}

if ( isset( $_SERVER ) ) {
				$sever_vars = array( 'REMOTE_ADDR', 'HTTP_X_REAL_IP', 'HTTP_CLIENT_IP', 'HTTP_X_FORWARDED_FOR' );
				foreach ( $sever_vars as $var ) {
					if ( ! empty( $_SERVER[ $var ] ) ) {
						if ( filter_var( sanitize_text_field( wp_unslash( $_SERVER[ $var ] ) ), FILTER_VALIDATE_IP ) ) {
							$my_ip = sanitize_text_field( wp_unslash( $_SERVER[ $var ] ) );
							break;
						} else { /* if proxy */
							$ip_array = explode( ',', sanitize_text_field( wp_unslash( $_SERVER[ $var ] ) ) );
							if ( is_array( $ip_array ) && ! empty( $ip_array ) && filter_var( $ip_array[0], FILTER_VALIDATE_IP ) ) {
								$my_ip = $ip_array[0];
								break;
							}
						}
					}
				}
			}

$this->display_notices();
			$this->prepare_items();
			?>
			<form class="form-table gglcptch_allowlist_form" method="post" action="admin.php?page=google-captcha-allowlist.php" 
			<?php
			if ( ! ( isset( $_REQUEST['gglcptch_show_allowlist_form'] ) || isset( $_REQUEST['gglcptch_add_to_allowlist'] ) ) ) {
				echo ' style="display: none;"';}
			?>
			>
				<label><?php esc_html_e( 'IP to Allow List', 'google-captcha' ); ?></label>
				<br />
				<input type="text" maxlength="31" name="gglcptch_add_to_allowlist" />
				<?php if ( isset( $my_ip ) ) { ?>
					<br />
					<label id="gglcptch_add_my_ip">
						<input type="checkbox" name="gglcptch_add_to_allowlist_my_ip" value="1" />
						<?php esc_html_e( 'My IP', 'google-captcha' ); ?>
						<input type="hidden" name="gglcptch_add_to_allowlist_my_ip_value" value="<?php echo esc_attr( $my_ip ); ?>" />
					</label>
				<?php } ?>
				<div>
					<span class="bws_info" style="line-height: 2;"><?php esc_html_e( 'Allowed formats', 'google-captcha' ); ?>:&nbsp;<code>192.168.0.1</code></span>
					<br/>
					<span class="bws_info" style="line-height: 2;"><?php esc_html_e( 'Allowed diapason', 'google-captcha' ); ?>:&nbsp;<code>0.0.0.0-255.255.255.255</code></span>
				</div>
				
				<?php
				if ( isset( $_POST['bws_hide_premium_options'] ) ) {
					$gglcptch_options['hide_premium_options'][0] = 1;
					update_option( 'gglcptch_options', $gglcptch_options );
				}
				$display_pro_options_for_allowlist = get_option( 'gglcptch_options' );
				if ( empty( $display_pro_options_for_allowlist['hide_premium_options'][0] ) ) {
					gglcptch_pro_block( 'gglcptch_allowlist_banner' );
				}
				?>
				
				<p>
					<input type="submit" name="gglcptch_submit_add_to_allowlist" class="button-secondary" value="<?php esc_html_e( 'Add IP to Allow List', 'google-captcha' ); ?>" />
					<?php wp_nonce_field( $this->basename, 'gglcptch_nonce_name' ); ?>
				</p>
			</form>
			<form id="gglcptch_allowlist_search" method="post" action="admin.php?page=google-captcha-allowlist.php">
				<?php
				$this->search_box( __( 'Search IP', 'google-captcha' ), 'search_allowlisted_ip' );
				wp_nonce_field( $this->basename, 'gglcptch_nonce_name' );
				?>
			</form>
			<form id="gglcptch_allowlist" method="post" action="admin.php?page=google-captcha-allowlist.php">
				<?php
				$this->display();
				wp_nonce_field( $this->basename, 'gglcptch_nonce_name' );
				?>
			</form>
			<?php
		}

/**
		 * Function to prepare data before display
		 *
		 * @return void
		 */
		public function prepare_items() {
			if ( isset( $_GET['orderby'] ) && in_array( $_GET['orderby'], array_keys( $this->get_sortable_columns() ) ) ) {
				switch ( $_GET['orderby'] ) {
					case 'ip':
						$this->order_by = 'ip_from_int';
						break;
					case 'ip_from':
						$this->order_by = 'ip_from_int';
						break;
					case 'ip_to':
						$this->order_by = 'ip_to_int';
						break;
					default:
						$this->order_by = esc_sql( sanitize_text_field( wp_unslash( $_GET['orderby'] ) ) );
						break;
				}
			} else {
				$this->order_by = 'add_time';
			}
			$this->order    = isset( $_REQUEST['order'] ) && in_array( strtoupper( sanitize_text_field( wp_unslash( $_REQUEST['order'] ) ) ), array( 'ASC', 'DESC' ), true ) ? sanitize_text_field( wp_unslash( $_REQUEST['order'] ) ) : '';
			$this->paged    = isset( $_REQUEST['paged'] ) && is_numeric( $_REQUEST['paged'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['paged'] ) ) : '';
			$this->s        = isset( $_REQUEST['s'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['s'] ) ) : '';
			$this->per_page = $this->get_items_per_page( 'gglcptch_per_page', 20 );

$columns               = $this->get_columns();
			$hidden                = array();
			$sortable              = $this->get_sortable_columns();
			$primary               = 'ip';
			$this->_column_headers = array( $columns, $hidden, $sortable, $primary );
			$this->items           = $this->get_content();
			$this->set_pagination_args(
				array(
					'total_items' => $this->get_items_number(),
					'per_page'    => 20,
				)
			);
		}
		/**
		 * Function to show message if empty list
		 *
		 * @return void
		 */
		public function no_items() {
			$label = isset( $_REQUEST['s'] ) ? __( 'Nothing found', 'google-captcha' ) : __( 'No IP in the Allow List', 'google-captcha' );
			?>
			<p><?php echo esc_html( $label ); ?></p>
			<?php
		}

public function get_columns() {
			$columns = array(
				'cb'       => '<input type="checkbox" />',
				'ip'       => __( 'IP Address', 'google-captcha' ),
				'add_time' => __( 'Date Added', 'google-captcha' ),
			);
			return $columns;
		}
		/**
		 * Get a list of sortable columns.
		 *
		 * @return array list of sortable columns
		 */
		public function get_sortable_columns() {
			$sortable_columns = array(
				'ip'       => array( 'ip', true ),
				'add_time' => array( 'add_time', false ),
			);
			return $sortable_columns;
		}
		/**
		 * Fires when the default column output is displayed for a single row.
		 *
		 * @param      string $column_name      The custom column's name.
		 * @param      array  $item             The cuurrent letter data.
		 * @return    void
		 */
		public function column_default( $item, $column_name ) {
			switch ( $column_name ) {
				case 'ip':
				case 'add_time':
					return $item[ $column_name ];
				default:
					/* Show whole array for bugfix */
					return print_r( $item, true );
			}
		}
		/**
		 * Function to manage content of column with checboxes
		 *
		 * @param     array $item        The cuurrent letter data.
		 * @return    string                  with html-structure of <input type=['checkbox']>
		 */
		public function column_cb( $item ) {
			/* customize displaying cb collumn */
			return sprintf(
				'<input type="checkbox" name="id[]" value="%s"/>',
				$item['id']
			);
		}
		/**
		 * Function to manage content of column with IP-adresses
		 *
		 * @param     array $item        The cuurrent letter data.
		 * @return    string                  with html-structure of <input type=['checkbox']>
		 */
		public function column_ip( $item ) {
			$order_by = empty( $this->order_by ) ? '' : "&orderby={$this->order_by}";
			$order    = empty( $this->order ) ? '' : "&order={$this->order}";
			$paged    = empty( $this->paged ) ? '' : "&paged={$this->paged}";
			$s        = empty( $this->s ) ? '' : "&s={$this->s}";
			$url      = "?page=google-captcha-allowlist.php&gglcptch_remove={$item['id']}{$order_by}{$order}{$paged}{$s}";
			$actions  = array(
				'delete' => '<a href="' . wp_nonce_url( $url, "gglcptch_nonce_remove_{$item['id']}" ) . '">' . __( 'Delete', 'google-captcha' ) . '</a>',
			);
			return sprintf( '%1$s %2$s', $item['ip'], $this->row_actions( $actions ) );
		}
		/**
		 * List with bulk action for IP
		 *
		 * @return array   $actions
		 */
		public function get_bulk_actions() {
			/* adding bulk action */
			return array( 'gglcptch_remove' => __( 'Delete', 'google-captcha' ) );
		}
		/**
		 * Get content for table
		 *
		 * @return  array
		 */
		public function get_content() {
			global $wpdb;

if ( empty( $this->s ) ) {
				$where = '';
			} else {
				$ip_int = filter_var( $this->s, FILTER_VALIDATE_IP ) ? sprintf( '%u', ip2long( $this->s ) ) : 0;
				$where  =
						0 === $ip_int
					?
						$wpdb->prepare(
							' WHERE `ip` LIKE %s',
							'%' . $this->s . '%'
						)
					:
						$wpdb->prepare(
							' WHERE ( `ip_from_int` <= %d AND `ip_to_int` >= %d )',
							$ip_int,
							$ip_int
						);
			}
			$order_by = empty( $this->order_by ) ? '' : ' ORDER BY `' . $this->order_by . '`';
			$order    = empty( $this->order ) ? '' : strtoupper( ' ' . $this->order );
			$offset   = empty( $this->paged ) ? '' : ' OFFSET ' . ( $this->per_page * ( absint( $this->paged ) - 1 ) );

return $wpdb->get_results( "SELECT * FROM `{$wpdb->prefix}gglcptch_allowlist`{$where}{$order_by}{$order} LIMIT {$this->per_page}{$offset}", ARRAY_A );
		}

/**
		 * Get number of all IPs which were added to database
		 *
		 * @since  1.6.9
		 * @param  void
		 * @return int    the number of IPs
		 */
		private function get_items_number() {
			global $wpdb;
			if ( empty( $this->s ) ) {
				$where = '';
			} else {
				$ip_int = filter_var( $this->s, FILTER_VALIDATE_IP ) ? sprintf( '%u', ip2long( $this->s ) ) : 0;
				$where  =
						0 === $ip_int
					?
						$wpdb->prepare(
							' WHERE `ip` LIKE %s',
							'%' . $this->s . '%'
						)
					:
						$wpdb->prepare(
							' WHERE ( `ip_from_int` <= %d AND `ip_to_int` >= %d )',
							$ip_int,
							$ip_int
						);
			}
			return absint( $wpdb->get_var( 'SELECT COUNT(`id`) FROM `' . $wpdb->prefix . 'gglcptch_allowlist`' . $where ) );
		}

/**
		 * Handle necessary reqquests and display notices
		 *
		 * @return void
		 */
		public function display_notices() {
			global $wpdb, $gglcptch_options;
			$error = $message = '';

$bulk_action = isset( $_REQUEST['action'] ) && 'gglcptch_remove' === sanitize_text_field( wp_unslash( $_REQUEST['action'] ) ) ? true : false;
			if ( ! $bulk_action ) {
				$bulk_action = isset( $_REQUEST['action2'] ) && 'gglcptch_remove' === sanitize_text_field( wp_unslash( $_REQUEST['action2'] ) ) ? true : false;
			}

/* Add IP to the database */
			if (
				isset( $_POST['gglcptch_add_to_allowlist'] ) &&
				( ! empty( $_POST['gglcptch_add_to_allowlist'] ) || isset( $_POST['gglcptch_add_to_allowlist_my_ip'] ) ) &&
				check_admin_referer( $this->basename, 'gglcptch_nonce_name' )
			) {
				$add_ip = isset( $_POST['gglcptch_add_to_allowlist_my_ip'] ) ? sanitize_text_field( wp_unslash( $_POST['gglcptch_add_to_allowlist_my_ip_value'] ) ) : sanitize_text_field( wp_unslash( $_POST['gglcptch_add_to_allowlist'] ) );

$list_ip = preg_split( '/[\s,;]+/', trim( $add_ip, " \s\r\n\t,;" ) );

foreach ( $list_ip as $new_ip ) {
					$type_ip = $this->valid_ip( trim( $new_ip ) );
					if ( $type_ip ) {
						$ip_int = sprintf( '%u', ip2long( $new_ip ) );
						$id     = $wpdb->get_var(
							$wpdb->prepare(
								'SELECT `id` FROM ' . $wpdb->prefix . 'gglcptch_allowlist WHERE ( `ip_from_int` <= %d AND `ip_to_int` >= %d ) OR `ip` LIKE %s LIMIT 1;', 
								$ip_int,
								$ip_int,
								$new_ip
							)
						);
						/* check if IP already in database */
						if ( is_null( $id ) ) {
							$time   = current_time( 'mysql' );
							$result = $this->save_ip( $new_ip, $type_ip, $time );
							if ( false !== $result ) {
								$message = __( 'IP added to the allow list successfully.', 'google-captcha' );
							} else {
								$error = __( 'Some errors occurred.', 'google-captcha' );
							}
						} else {
							$error = __( 'IP is already in the allow list.', 'google-captcha' );
						}
					} else {
						$error = __( 'Invalid IP. See allowed formats.', 'google-captcha' );
					}
				}
				if ( empty( $error ) ) {
					$gglcptch_options['allowlist_is_empty'] = false;
					update_option( 'gglcptch_options', $gglcptch_options );
				}
				/* Remove IP from database */
			} elseif ( $bulk_action && check_admin_referer( $this->basename, 'gglcptch_nonce_name' ) ) {
				if ( ! empty( $_REQUEST['id'] ) ) {
					foreach ( $_REQUEST['id'] as $key => $value ) {
						$_REQUEST['id'][ $key ] = absint( $value );
					}
					$list   = implode( ',', $_REQUEST['id'] );
					$result = $wpdb->query( 'DELETE FROM `' . $wpdb->prefix . 'gglcptch_allowlist` WHERE `id` IN (' . $list . ');' );

if ( ! $wpdb->last_error ) {
						$message                                = sprintf( _n( '%s IP was deleted successfully.', '%s IPs were deleted successfully.', $result, 'google-captcha' ), $result );
						$gglcptch_options['allowlist_is_empty'] = is_null( $wpdb->get_var( "SELECT `id` FROM `{$wpdb->prefix}gglcptch_allowlist` LIMIT 1" ) ) ? true : false;
						update_option( 'gglcptch_options', $gglcptch_options );
					} else {
						$error = __( 'Some errors occurred.', 'google-captcha' );
					}
				}
			} elseif ( isset( $_GET['gglcptch_remove'] ) && check_admin_referer( 'gglcptch_nonce_remove_' . sanitize_text_field( wp_unslash( $_GET['gglcptch_remove'] ) ) ) ) {

$wpdb->delete(
					$wpdb->prefix . 'gglcptch_allowlist',
					array(
						'id' => absint( sanitize_text_field( wp_unslash( $_GET['gglcptch_remove'] ) ) ),
					)
				);

if ( ! $wpdb->last_error ) {
					$message                                = __( 'One IP was deleted successfully.', 'google-captcha' );
					$gglcptch_options['allowlist_is_empty'] = is_null( $wpdb->get_var( "SELECT `id` FROM `{$wpdb->prefix}gglcptch_allowlist` LIMIT 1" ) ) ? true : false;
					update_option( 'gglcptch_options', $gglcptch_options );
				} else {
					$error = __( 'Some errors occurred.', 'google-captcha' );
				}
			} elseif ( isset( $_POST['gglcptch_submit_add_to_allowlist'] ) && empty( $_POST['gglcptch_add_to_allowlist'] ) ) {
				$error = __( 'You have not entered any IP.', 'google-captcha' );
			} elseif ( isset( $_REQUEST['s'] ) ) {
				if ( '' === sanitize_text_field( wp_unslash( $_REQUEST['s'] ) ) ) {
					$error = __( 'You have not entered any IP in to the search form.', 'google-captcha' );
				} else {
					$message = __( 'Search results for', 'google-captcha' ) . '&nbsp;:&nbsp;' . sanitize_text_field( wp_unslash( $_REQUEST['s'] ) );
				}
			}
			if ( ! empty( $message ) ) {
				?>
				<div class="updated fade below-h2"><p><strong><?php echo esc_html( $message ); ?></strong></p></div>
				<?php
			}
			if ( ! empty( $error ) ) {
				?>
				<div class="error below-h2"><p><strong><?php echo esc_html( $error ); ?></strong></p></div>
				<?php
			}
		}

/**
		 * Function to check if IP (mask/diapason) is valid
		 *
		 * @param $ip_to_check  string  IP, mask or diapason to check
		 * @return bool False - if it's not valid IP, mask or diapason | string with the type of entered value - if valid IP, mask or diapason
		 */
		function valid_ip( $ip_to_check = null ) {
			if ( empty( $ip_to_check ) ) {
				return false;
			} else {
				/* if IP (or mask/diapason) is not empty*/
				if ( preg_match( '/^(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])(\.(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])){3}$/', $ip_to_check ) ) {
					/* single IP */
					return 'single_ip';
				} elseif ( preg_match( '/^(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])(\.(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])){3}\/(3[0-2]|[1-2][0-9]|[0-9])$/', $ip_to_check ) ) {
					/* normal mask like 128.45.25.0/8 */
					return 'normal_mask';
				} elseif ( preg_match( '/^(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])(\.(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])){0,2}\.$/', $ip_to_check ) ) {
					/* shorten mask like 192.168. or 128.45.25. */
					return 'shorten_mask';
				} elseif ( preg_match( '/^(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])(\.(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])){3}\-(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])(\.(25[0-5]|2[0-4][0-9]|[1][0-9]{2}|[1-9][0-9]|[0-9])){3}$/', $ip_to_check ) ) {
					/* diapason like 128.45.25.0-188.5.5.5 */
					$ip_to_check = explode( '-', $ip_to_check ); /*$ips[0] - diapason from, $ips[1] - diapason to*/
					if ( sprintf( '%u', ip2long( $ip_to_check[0] ) ) <= sprintf( '%u', ip2long( $ip_to_check[1] ) ) ) {
						return 'diapason';
					} else {
						return false;
					}
				} else {
					return false;
				}
			}
		}

/**
		 * Save IP in database
		 */
		function save_ip( $ip, $type_ip, $time ) {
			global $wpdb;
			switch ( $type_ip ) {
				case 'single_ip': /* if insert single ip address */
					$ip_from_int = $ip_to_int = sprintf( '%u', ip2long( $ip ) ); /*because adding a single address diapason will contain one address*/
					$ip_from     = $ip_to = $ip;
					break;
				case 'shorten_mask': /* if insert ip mask like 'xxx.' or 'xxx.xxx.' or 'xxx.xxx.xxx.' */
					$dot_entry = substr_count( $ip, '.' );
					switch ( $dot_entry ) {
						case 3: /* in case if mask like xxx.xxx.xxx. */
							$ip_from = $ip . '0';
							$ip_to   = $ip . '255';
							break;
						case 2: /* in case if mask like xxx.xxx. */
							$ip_from = $ip . '0.0';
							$ip_to   = $ip . '255.255';
							break;
						case 1: /*i n case if mask like xxx. */
							$ip_from = $ip . '0.0.0';
							$ip_to   = $ip . '255.255.255';
							break;
						default: /* insurance */
							$ip_from = '0.0.0.0';
							$ip_to   = '0.0.0.0';
							break;
					}
					$ip_from_int = sprintf( '%u', ip2long( $ip_from ) );
					$ip_to_int   = sprintf( '%u', ip2long( $ip_to ) );
					break;
				case 'diapason': /* if insert diapason of ip addresses like xxx.xxx.xxx.xxx-yyy.yyy.yyy.yyy */
					$ips         = explode( '-', $ip ); /* $ips[0] - diapason from, $ips[1] - diapason to */
					$ip_from     = trim( $ips[0] );
					$ip_to       = trim( $ips[1] );
					$ip_from_int = sprintf( '%u', ip2long( $ip_from ) );
					$ip_to_int   = sprintf( '%u', ip2long( $ip_to ) );
					break;
				case 'normal_mask': /* if insert ip mask like xxx.xxx.xxx.xxx/yy */
					$mask        = explode( '/', $ip ); /* $mask[0] - is ip address, $mask[1] - is cidr mask */
					$nmask       = 4294967295 - ( pow( 2, 32 - $mask[1] ) - 1 ); /* calculation netmask in decimal view from cidr mask */
					$ip_from_int = ip2long( $mask[0] ) & $nmask; /* calculating network address signed (this is doing for correct worl with netmsk) */
					$ip_from_int = sprintf( '%u', $ip_from_int ); /* and now unsigned */
					$ip_to_int   = $ip_from_int + ( pow( 2, 32 - $mask[1] ) - 1 ); /* calculating broadcast */
					$ip_from     = long2ip( $ip_from_int );
					$ip_to       = long2ip( $ip_to_int );
				default:
					break;
			}
			/* add a new row to db */
			$result = $wpdb->insert(
				$wpdb->prefix . 'gglcptch_allowlist',
				array(
					'ip'          => $ip,
					'ip_from_int' => $ip_from_int,
					'ip_to_int'   => $ip_to_int,
					'add_time'    => $time,
				),
				array(
					'%s', /* all '%s' because max value in '%d' is 2147483647 */
					'%s',
					'%s',
					'%s',
				)
			);
			return $result;
		}

}
}