Your IP : 10.10.0.253
<?php
/**
* JComments - Joomla Comment System
*
* @version 3.0
* @package JComments
* @author Sergey M. Litvinov (smart@joomlatune.ru)
* @copyright (C) 2006-2013 by Sergey M. Litvinov (http://www.joomlatune.ru)
* @license GNU/GPL: http://www.gnu.org/copyleft/gpl.html
*/
defined('_JEXEC') or die;
/**
* JComments security functions
*/
class JCommentsSecurity
{
public static function notAuth()
{
header('HTTP/1.0 403 Forbidden');
JError::raiseError(403, JText::_('JERROR_ALERTNOAUTHOR'));
exit;
}
public static function badRequest()
{
return (int)(empty($_SERVER['HTTP_USER_AGENT']) || (!$_SERVER['REQUEST_METHOD'] == 'POST'));
}
public static function checkFlood($ip)
{
$interval = JCommentsFactory::getConfig()->getInt('flood_time');
if ($interval > 0) {
$db = JFactory::getDbo();
$now = JFactory::getDate()->toSql();
$query = "SELECT COUNT(*) "
. "\nFROM #__jcomments "
. "\nWHERE ip = " . $db->Quote($ip)
. "\nAND " . $db->Quote($now) . " < DATE_ADD(date, INTERVAL " . $interval . " SECOND)"
. (JCommentsMultilingual::isEnabled() ? "\nAND lang = " . $db->Quote(JCommentsMultilingual::getLanguage()) : '');
$db->setQuery($query);
return ($db->loadResult() == 0) ? 0 : 1;
}
return 0;
}
public static function checkIsForbiddenUsername($str)
{
$names = JCommentsFactory::getConfig()->get('forbidden_names');
if (!empty($names) && !empty($str)) {
$str = trim(JString::strtolower($str));
$names = JString::strtolower(preg_replace("#,+#u", ',', preg_replace("#[\n|\r]+#u", ',', $names)));
$names = explode(",", $names);
foreach ($names as $name) {
if (trim((string)$name) == $str) {
return 1;
}
}
}
return 0;
}
public static function checkIsRegisteredUsername($name)
{
$config = JCommentsFactory::getConfig();
if ($config->getInt('enable_username_check') == 1) {
$name = JString::strtolower($name);
$db = JFactory::getDbo();
$query = $db->getQuery(true);
$query->select('COUNT(*)');
$query->from($db->quoteName('#__users'));
$query->where('LOWER(name) = ' . $db->Quote($db->escape($name, true)), 'OR');
$query->where('LOWER(username) = ' . $db->Quote($db->escape($name, true)), 'OR');
$db->setQuery($query);
return ($db->loadResult() == 0) ? 0 : 1;
}
return 0;
}
public static function checkIsRegisteredEmail($email)
{
$config = JCommentsFactory::getConfig();
if ($config->getInt('enable_username_check') == 1) {
$email = JString::strtolower($email);
$db = JFactory::getDbo();
$query = $db->getQuery(true);
$query->select('COUNT(*)');
$query->from($db->quoteName('#__users'));
$query->where('LOWER(email) = ' . $db->Quote($db->escape($email, true)));
$db->setQuery($query);
return ($db->loadResult() == 0) ? 0 : 1;
}
return 0;
}
/**
* Check if given parameters are not listed in blacklist
*
* @param Array $options Array of options for check
*
* @return boolean True on success, false otherwise
*/
public static function checkBlacklist($options = array())
{
$ip = isset($options['ip']) ? $options['ip'] : null;
$userid = isset($options['userid']) ? $options['userid'] : 0;
$result = true;
if (count($options)) {
$db = JFactory::getDbo();
$query = $db->getQuery(true);
$query->select('COUNT(*)');
$query->from($db->quoteName('#__jcomments_blacklist'));
if ($userid > 0) {
$query->where($db->quoteName('userid') . ' = ' . (int)$userid);
} else {
if (!empty($ip)) {
$parts = explode('.', $ip);
if (count($parts) == 4) {
$conditions = array();
$conditions[] = $db->quoteName('ip') . ' = ' . $db->Quote($ip);
$conditions[] = $db->quoteName('ip') . ' = ' . $db->Quote(sprintf('%s.%s.%s.*', $parts[0], $parts[1], $parts[2]));
$conditions[] = $db->quoteName('ip') . ' = ' . $db->Quote(sprintf('%s.%s.*.*', $parts[0], $parts[1]));
$conditions[] = $db->quoteName('ip') . ' = ' . $db->Quote(sprintf('%s.*.*.*', $parts[0]));
$query->where($conditions, 'OR');
} else {
$query->where($db->quoteName('ip') . ' = ' . $db->Quote($ip));
}
}
}
$db->setQuery($query);
$result = $db->loadResult() > 0 ? false : true;
}
return $result;
}
public static function clearObjectGroup($str)
{
return trim(preg_replace('#[^0-9A-Za-z\-\_\,\.]#is', '', strip_tags($str)));
}
}