Project-Pro/szkoleniauryzaj.pl
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
Jacek Pyziak
2026-04-26 23:47:49 +02:00
parent 1b95f03d1e
commit b073e009d8
5288 changed files with 1112699 additions and 55536 deletions
Download Patch File Download Diff File Expand all files Collapse all files

650
wp-content/plugins/password-protected/admin/class-recaptcha.php Normal file
View File

@@ -0,0 +1,650 @@
<?php
if ( ! defined( 'ABSPATH' ) ) {
exit; // Exit if accessed directly
}
/**
* @package Password Protected
* @subpackage reCAPTCHA
*
* @since 2.6
*/
class Password_Protected_reCAPTCHA {
public $options_group = 'password-protected-recaptcha';
public $options_name = 'password_protected_recaptcha';
public $tab = 'password-protected&tab=advanced';
public $settings = array();
/**
* Constructor
*
* @since 2.6
*
* @internal public. This class should only be instantiated once by the plugin.
*/
public function __construct() {
$options = get_option( $this->options_name );
if ( empty( $options ) || ! $options ) {
$this->settings = $this->get_default_reCAPTCHA_settings();
} else {
$this->settings = get_option( $this->options_name );
}
add_action( 'admin_init', array( $this, 'register_reCAPTCHA_settings' ), 6 );
add_action( 'password_protected_after_password_field', array( $this, 'add_recaptcha' ) );
add_filter( 'password_protected_verify_recaptcha', array( $this, 'verify_recaptcha' ) );
}
/**
* reCAPTCHA Default Settings
*
* @return array
* @since 2.6
*/
private function get_default_reCAPTCHA_settings(): array {
return array(
'enable' => 0,
'version' => 'google_recaptcha_v2',
'v2_site_key' => null,
'v3_site_key' => null,
'v2_secret_key' => null,
'v3_secret_key' => null,
'v3_score' => 0.3,
'v3_badge' => 'bottomright',
'v2_theme' => 'light',
);
}
/**
* reCAPTCHA Settings Info
*
* Displays information on the settings page for helping
* to configure Password Protected to work with Google reCAPTCHA v2 and v3.
*
* @since 2.6
*/
public function register_reCAPTCHA_settings() {
// reCAPTCHA Section
add_settings_section(
$this->options_group,
__( 'Google reCAPTCHA', 'password-protected' ),
array( $this, 'reCAPTCHA_section' ),
$this->tab
);
// Enable reCAPTCHA
add_settings_field(
'password_protected_enable_recaptcha',
__( 'Enable reCAPTCHA ', 'password-protected' ),
array( $this, 'reCAPTCHA_enable' ),
$this->tab,
$this->options_group
);
// reCAPTCHA version v2/v3
add_settings_field(
'password_protected_recaptcha_settings',
__( 'Captcha Settings', 'password-protected' ),
array( $this, 'reCAPTCHA_setting' ),
$this->tab,
$this->options_group
);
// reCAPTCHA v2/v3 sitekey
add_settings_field(
'password_protected_recaptcha_v2_site_key',
__( 'Site Key', 'password-protected' ),
array( $this, 'reCAPTCHA_site_key' ),
$this->tab,
$this->options_group
);
// reCAPTCHA v2/v3 secretkey
add_settings_field(
'password_protected_recaptcha_v2_secret_key',
__( 'Secret Key', 'password-protected' ),
array( $this, 'reCAPTCHA_secret_key' ),
$this->tab,
$this->options_group
);
// reCAPTCHA v3 score
add_settings_field(
'password_protected_recaptcha_score',
__( 'Score', 'password-protected' ),
array( $this, 'reCAPTCHA_score' ),
$this->tab,
$this->options_group
);
// reCAPTCHA v3 badgeposition
add_settings_field(
'password_protected_recaptcha_badge_position',
__( 'Badge Position', 'password-protected' ),
array( $this, 'reCAPTCHA_badge_position' ),
$this->tab,
$this->options_group
);
// reCAPTCHA v2 theme
add_settings_field(
'password_protected_recaptcha_theme',
__( 'Theme', 'password-protected' ),
array( $this, 'reCAPTCHA_theme' ),
$this->tab,
$this->options_group
);
// register settings in an array group.
register_setting( 'password-protected-advanced', $this->options_name, array( 'type' => 'array' ) );
}
/**
* reCAPTCHA Screen
*
* @since 2.6
*
* @return void password protected reCAPTCHA settings
*/
public static function recpatcha_screen() {
do_settings_sections( 'password-protected&tab=advanced' );
submit_button();
}
/**
* reCAPTCHA Section
*
* @return void password protected reCAPTCHA section
*/
public function reCAPTCHA_section() {
return 1;
}
/**
* ENable reCAPTCHA
*
* @since 2.6
*
* @return void password protected reCAPTCHA status field
*/
public function reCAPTCHA_enable() {
echo '<label>
<input
name="' . esc_attr( $this->options_name ) . '[enable]"
id="pp_enable_recaptcha"
type="checkbox"
value="1" ' . checked( 1, @$this->settings['enable'], false ) . '
/> ' .
__( 'Enabled', 'password-protected' ) . '
</label>';
}
/**
* reCAPTCHA Version
*
* @since 2.6
*
* @return void password protected reCAPTCHA version field
*/
public function reCAPTCHA_setting() {
echo '<label>
<input
' . checked( 'google_recaptcha_v2', $this->settings['version'], false ) . '
type="radio"
name="' . esc_attr( $this->options_name ) . '[version]"
value="google_recaptcha_v2"
/>
<span>Google reCAPTCHA Version 2</span>
</label>
<br />
<label>
<input
' . checked( 'google_recaptcha_v3', $this->settings['version'], false ) . '
type="radio"
name="' . esc_attr( $this->options_name ) . '[version]"
value="google_recaptcha_v3"
/>
<span>Google reCAPTCHA Version 3</span>
</label>';
}
/**
* reCAPTCHA Site Key
*
* @since 2.6
*
* @return void password protected v2/v3 sitekey field
*/
public function reCAPTCHA_site_key() {
echo '<div>
<input
name="' . esc_attr( $this->options_name ) . '[v2_site_key]"
type="text"
id="pp_google_recaptcha_v2_site_key"
value="' . esc_attr( $this->settings['v2_site_key'] ) . '"
class="regular-text"
/>
<p class="description">
Enter Google reCAPTCHA v2 Site Key.&nbsp;
<a target="_blank" href="https://developers.google.com/recaptcha/intro#recaptcha-overview">
Click Here
</a>
</p>
</div>';
echo '<div>
<input
name="' . esc_attr( $this->options_name ) . '[v3_site_key]"
type="text"
id="pp_google_recaptcha_v3_site_key"
value="' . esc_attr( $this->settings['v3_site_key'] ) . '"
class="regular-text"
/>
<p class="description">
Enter Google reCAPTCHA v3 Site Key.&nbsp;
<a target="_blank" href="https://developers.google.com/recaptcha/intro#recaptcha-overview">
Click Here
</a>
</p>
</div>';
}
/**
* reCAPTCHA Secret Key
*
* @since 2.6
*
* @return void password protected v2/v3 secretkey field
*/
public function reCAPTCHA_secret_key() {
echo '<div>
<input
name="' . esc_attr( $this->options_name ) . '[v2_secret_key]"
type="text"
id="pp_google_recaptcha_v2_secret_key"
value="' . esc_attr( $this->settings['v2_secret_key'] ) . '"
class="regular-text"
/>
<p class="description">
Enter Google reCAPTCHA v2 Secret Key.&nbsp;
<a target="_blank" href="https://developers.google.com/recaptcha/intro#recaptcha-overview">
Click Here
</a>
</p>
</div>';
echo '<div>
<input
name="' . esc_attr( $this->options_name ) . '[v3_secret_key]"
type="text"
id="pp_google_recaptcha_v3_secret_key"
value="' . esc_attr( $this->settings['v3_secret_key'] ) . '"
class="regular-text"
/>
<p class="description">
Enter Google reCAPTCHA v3 Secret Key.&nbsp;
<a target="_blank" href="https://developers.google.com/recaptcha/intro#recaptcha-overview">
Click Here
</a>
</p>
</div>';
}
/**
* reCAPTCHA V3 Score
*
* @since 2.6
*
* @return void password protected v3 score field
*/
public function reCAPTCHA_score() {
echo '<fieldset id="pp_google_recpatcha_v3_score">
<label>
<input
type="radio"
name="' . esc_attr( $this->options_name ) . '[v3_score]"
value="0.1"
' . checked( 0.1, $this->settings['v3_score'], false ) . '
/>
<span>0.1</span>
</label>
&nbsp;
<label>
<input
type="radio"
name="' . esc_attr( $this->options_name ) . '[v3_score]"
value="0.2"
' . checked( 0.2, $this->settings['v3_score'], false ) . '
/>
<span>0.2</span>
</label>
&nbsp;
<label>
<input
type="radio"
name="' . esc_attr( $this->options_name ) . '[v3_score]"
value="0.3"
' . checked( 0.3, $this->settings['v3_score'], false ) . '
/>
<span>0.3</span>
</label>
&nbsp;
<label>
<input
type="radio"
name="' . esc_attr( $this->options_name ) . '[v3_score]"
value="0.4"
' . checked( 0.4, $this->settings['v3_score'], false ) . '
/>
<span>0.4</span>
</label>
&nbsp;
<label>
<input
type="radio"
name="' . esc_attr( $this->options_name ) . '[v3_score]"
value="0.5"
' . checked( 0.5, $this->settings['v3_score'], false ) . '
/>
<span>0.5</span>
</label>
&nbsp;
<p class="description">Select Google Version 3 Score.</p>
</fieldset>';
}
/**
* reCAPTCHA V3 Badge Position
*
* @since 2.6
*
* @return void password protected v3 badgeposition field
*/
public function reCAPTCHA_badge_position() {
echo '<fieldset id="pp_google_recpatcha_v3_badge">
<label>
<input
type="radio"
name="' . esc_attr( $this->options_name ) . '[v3_badge]"
value="inline"
' . checked( 'inline', $this->settings['v3_badge'], false ) . '
/>
<span>Inline</span>
</label>
&nbsp;&nbsp;
<label>
<input
type="radio"
name="' . esc_attr( $this->options_name ) . '[v3_badge]"
value="bottomleft"
' . checked( 'bottomleft', $this->settings['v3_badge'], false ) . '
/>
<span>Bottom - Left</span>
</label>
&nbsp;&nbsp;
<label>
<input
type="radio"
name="' . esc_attr( $this->options_name ) . '[v3_badge]"
value="bottomright"
' . checked( 'bottomright', $this->settings['v3_badge'], false ) . '
/>
<span>Bottom - Right</span>
</label>
</fieldset>';
}
/**
* reCAPTCHA V2 Theme
*
* @since 2.6
*
* @return void password protected v2 theme field
*/
public function reCAPTCHA_theme() {
echo '<label>
<input
checked="checked"
type="radio"
name="' . esc_attr( $this->options_name ) . '[v2_theme]"
value="light"
' . checked( 'light', $this->settings['v2_theme'], false ) . '
/>
<span>Light</span>
</label>
<br />
<label>
<input
type="radio"
name="' . esc_attr( $this->options_name ) . '[v2_theme]"
value="dark"
' . checked( 'dark', $this->settings['v2_theme'], false ) . '
/>
<span>Dark</span>
</label>
<p class="description">Select Google reCAPTCHA Version 2 Theme.</p>';
}
/**
* Add reCAPTCHA on Password Protected Form
*
* @since 2.6
*
* @return void password protected reCAPTCHA v2 OR v3
*/
public function add_recaptcha() {
if ( ! @$this->settings['enable'] ) {
return; // recpatcha is disabled
}
if ( $this->settings['version'] === 'google_recaptcha_v2' ) {
$this->display_recaptcha_v2();
}
if ( $this->settings['version'] === 'google_recaptcha_v3' ) {
$this->display_recaptcha_v3();
}
}
/**
* Diaplay reCAPTCHA V2
*
* @since 2.6
*
* @return void password protected reCAPTCHA v2 field
*/
public function display_recaptcha_v2() {
wp_enqueue_style( 'pp-recaptcha-style', plugin_dir_url( __DIR__ ) . 'assets/css/recaptcha.css', array(), '2.6.2' );
wp_enqueue_script( 'pp-recaptcha-api-v2', esc_url( 'https://www.google.com/recaptcha/api.js' ), array(), null );
echo '<div
class="g-recaptcha"
data-sitekey="' . esc_attr( $this->settings['v2_site_key'] ) . '"
data-theme="' . esc_attr( $this->settings['v2_theme'] ) . '"
>
</div>';
}
/**
* Diaplay reCAPTCHA V3
*
* @since 2.6
*
* @return void password protected reCAPTCHA v3 field
*/
public function display_recaptcha_v3() {
$grecaptcha_v3_site_key = isset( $this->settings['v3_site_key'] ) ? esc_attr( $this->settings['v3_site_key'] ) : '';
$grecaptcha_v3_badge = isset( $this->settings['v3_badge'] ) ? esc_attr( $this->settings['v3_badge'] ) : 'bottomright';
$script = <<<EOT
if('function' !== typeof pprecaptcha) {
function pprecaptcha() {
grecaptcha.ready(function() {
[].forEach.call(document.querySelectorAll('.pp-g-recaptcha'), function(el) {
const action = el.getAttribute('data-action');
const form = el.form;
form.addEventListener('submit', function(e) {
e.preventDefault();
grecaptcha.execute('$grecaptcha_v3_site_key', {action: action}).then(function(token) {
el.setAttribute('value', token);
const button = form.querySelector('[type="submit"]');
if(button) {
const input = document.createElement('input');
input.type = 'hidden';
input.name = button.getAttribute('name');
input.value = button.value;
input.classList.add('pp-submit-input');
var inputEls = document.querySelectorAll('.pp-submit-input');
[].forEach.call(inputEls, function(inputEl) {
inputEl.remove();
});
form.appendChild(input);
}
HTMLFormElement.prototype.submit.call(form);
});
});
});
});
}
}
EOT;
wp_enqueue_script( 'recaptcha-api-v3', ( 'https://www.google.com/recaptcha/api.js?onload=pprecaptcha&render=' . esc_attr( $grecaptcha_v3_site_key ) . '&badge=' . esc_attr( $grecaptcha_v3_badge ) ), array(), null );
wp_add_inline_script( 'recaptcha-api-v3', $script ); ?>
<input type="hidden" name="g-recaptcha-response" id="g-recaptcha-response-password_protected" class="pp-g-recaptcha" data-action="password_protected">
<?php
}
/**
* Verify reCAPTCHA
* process reCAPTCHA
*
* @since 2.6
*
* @return object WP_Error
*/
public function verify_recaptcha( $errors ) {
if ( ! @$this->settings['enable'] ) {
return $errors; // return errors
}
if ( $this->settings['version'] === 'google_recaptcha_v2' ) {
$grecaptcha_v2_site_key = isset( $this->settings['v2_site_key'] ) ? esc_attr( $this->settings['v2_site_key'] ) : '';
$grecaptcha_v2_secret_key = isset( $this->settings['v2_secret_key'] ) ? esc_attr( $this->settings['v2_secret_key'] ) : '';
if ( empty( $grecaptcha_v2_site_key ) || empty( $grecaptcha_v2_secret_key ) ) {
$errors->add( 001, 'Google reCaptcha keys not found.' );
}
if ( isset( $_POST['g-recaptcha-response'] ) && ! empty( $_POST['g-recaptcha-response'] ) ) {
$response = wp_remote_post(
'https://www.google.com/recaptcha/api/siteverify',
array(
'body' => array(
'secret' => $grecaptcha_v2_secret_key,
'response' => sanitize_text_field( $_POST['g-recaptcha-response'] ),
),
)
);
$data = wp_remote_retrieve_body( $response );
$data = json_decode( $data );
if ( isset( $data->{'error-codes'} ) && is_array( $data->{'error-codes'} ) && count( $data->{'error-codes'} ) ) {
foreach ( $data->{'error-codes'} as $index => $error_code ) {
$errors->add( $index, $error_code );
}
}
if ( isset( $data->success ) && true === $data->success ) {
return $errors;
}
}
$error_message = wp_kses( __( '<strong>ERROR:</strong> Please confirm you are not a robot.', 'password-protected' ), array( 'strong' => array() ) );
$errors->add( 'captcha_invalid', $error_message );
return $errors;
} elseif ( $this->settings['version'] === 'google_recaptcha_v3' ) {
$grecaptcha_v3_site_key = isset( $this->settings['v3_site_key'] ) ? esc_attr( $this->settings['v3_site_key'] ) : '';
$grecaptcha_v3_secret_key = isset( $this->settings['v3_secret_key'] ) ? esc_attr( $this->settings['v3_secret_key'] ) : '';
$grecaptcha_v3_score = isset( $this->settings['v3_score'] ) ? esc_attr( $this->settings['v3_score'] ) : '0.3';
if ( empty( $grecaptcha_v3_site_key ) || empty( $grecaptcha_v3_secret_key ) ) {
$errors->add( 001, 'Google reCaptcha keys not found.' );
}
if ( isset( $_POST['g-recaptcha-response'] ) && ! empty( $_POST['g-recaptcha-response'] ) ) {
$response = wp_remote_post(
'https://www.google.com/recaptcha/api/siteverify',
array(
'body' => array(
'secret' => $grecaptcha_v3_secret_key,
'response' => sanitize_text_field( $_POST['g-recaptcha-response'] ),
'remoteip' => self::get_ip_address(),
),
)
);
$data = wp_remote_retrieve_body( $response );
$data = json_decode( $data );
if ( isset( $data->{'error-codes'} ) && is_array( $data->{'error-codes'} ) && count( $data->{'error-codes'} ) ) {
foreach ( $data->{'error-codes'} as $index => $error_code ) {
$errors->add( $index, $error_code );
}
}
if ( isset( $data->success ) && true === $data->success ) {
$grecaptcha_v3_score = (float) $grecaptcha_v3_score;
if ( isset( $data->action ) && ( 'password_protected' === $data->action ) && isset( $data->score ) && $data->score >= $grecaptcha_v3_score ) {
return $errors;
} else {
$error_message = wp_kses( __( '<strong>ERROR:</strong> Low Score ', 'password-protected' ) . ':' . esc_html( $data->score ), array( 'strong' => array() ) );
$errors->add( 002, $error_message );
}
}
}
return $errors;
}
}
/**
* Get IP Address
*
* @since 2.6
*
* @return string client IP address
*/
private static function get_ip_address() {
$ipaddress = '';
if ( isset( $_SERVER['HTTP_CLIENT_IP'] ) ) {
$ipaddress = sanitize_text_field( $_SERVER['HTTP_CLIENT_IP'] );
} elseif ( isset( $_SERVER['HTTP_X_FORWARDED_FOR'] ) ) {
$ipaddress = sanitize_text_field( $_SERVER['HTTP_X_FORWARDED_FOR'] );
} elseif ( isset( $_SERVER['HTTP_X_FORWARDED'] ) ) {
$ipaddress = sanitize_text_field( $_SERVER['HTTP_X_FORWARDED'] );
} elseif ( isset( $_SERVER['HTTP_FORWARDED_FOR'] ) ) {
$ipaddress = sanitize_text_field( $_SERVER['HTTP_FORWARDED_FOR'] );
} elseif ( isset( $_SERVER['HTTP_FORWARDED'] ) ) {
$ipaddress = sanitize_text_field( $_SERVER['HTTP_FORWARDED'] );
} elseif ( isset( $_SERVER['REMOTE_ADDR'] ) ) {
$ipaddress = sanitize_text_field( $_SERVER['REMOTE_ADDR'] );
} else {
$ipaddress = 'UNKNOWN';
}
return $ipaddress;
}
}