Beiträge von Herr Nack

<?php
/*
     Plugin Name: WordVerify
     Plugin URI: http://chris.quietlife.net/WordVerify
     Description: This plugin allows for verification of a comment posted by the
     submission of a configurable word in the form. It is a simple yet effective
     method of defeating (some) comment spammers.
     Author: Chris Wage
     Version: 1.4
     Author URI: http://chris.quietlife.net
 */
/*  Copyright 2005  Chris Wage  (email : cwage@quietlife.net)
 **
 **  This program is free software; you can redistribute it and/or modify
 **  it under the terms of the GNU General Public License as published by
 **  the Free Software Foundation; either version 2 of the License, or
 **  (at your option) any later version.
 **
 **  This program is distributed in the hope that it will be useful,
 **  but WITHOUT ANY WARRANTY; without even the implied warranty of
 **  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 **  GNU General Public License for more details.
 **
 **  You should have received a copy of the GNU General Public License
 **  along with this program; if not, write to the Free Software
 **  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */
/*
 ** This plugin is loosely based on Thom Skrtich's SecureImage
 (http://uberdork.supertwist.net/2005/03/13/plug-it-in-plug-it-in/)
 **
 */


if ( ! class_exists( 'WordVerify' ) ) :
    class WordVerify {


        var $settings = array();
        var $table_version = 2;
        var $added_tables = false;


        function WordVerify ()
        {
            if (isset($this))
            {
                $this->settings = get_settings('wordverify');


                /* offer up the options menu */
                if (is_plugin_page()) {
                    WordVerify::plugin_options();
                }


                add_action('admin_menu',   array(&$this, 'admin_menu'));
                add_action('comment_form', array(&$this, 'comment_form'));
                add_action('comment_post', array(&$this, 'comment_post'));


                // Set the defaults:
                if (!isset($this->settings)) {
                    $this->settings['word'] = "changeme";
                    $this->settings['presentation'] = "Please enter '%%CODEWORD%%' without the    quotes.";
                }




                update_option('wordverify', $this->settings);
            }


        } //end constructor




        function admin_menu()
        {
            if (function_exists('add_options_page')) {
                add_options_page('WordVerify', 'WordVerify', 8, basename(__FILE__));
            }
        }


        function plugin_options()
        {
            if( $_POST['action'] == 'update' ) {
                if (get_magic_quotes_gpc()) {
                    $this->settings['word'] = stripslashes(trim( $_POST['word'] ));
                    $this->settings['presentation'] = stripslashes(trim(
                                $_POST['presentation'] ));
                } else {
                    $this->settings['word'] = trim( $_POST['word'] );
                    $this->settings['presentation'] = trim( $_POST['presentation'] );
                }


                update_option('wordverify', $this->settings);
                echo '<div class="updated"><p><strong>' . __('Options updated.') . '</strong></p></div>';
            }


            ?>


                <div class="wrap">
                <h2>WordVerify Options</h2>
                <p>WordVerify requires the entering of a simple word of your choice in a
                text field to submit a comment.</p>


                <p>"<b>Security code word</b>" is the word that the commenter must enter to
                post a comment.</p>


                <p>"<b>Presentation</b>" is the phrase that instructs the commenter what the
                security code word is and that they need to enter it. By varying this
                phrase you decrease the ability of spammers to scrape your page and guess
                the word. Put %%CODEWORD%% where you want the word to appear</p>


                <form name="wordoptions" method="post" >
                <input type="hidden" name="action" value="update" />
                <fieldset class="options">
                <table width="100%" cellspacing="2" cellpadding="5" class="editform">


                <tr>
                <th width="33%" valign="top" scope="row">Security code word: </th>
                <td>
                <input name="word" type="text" id="word" value="<? echo
                $this->settings['word']; ?>" size="50" /><br />
                </td>
                </tr>


                <tr>
                <th width="33%" valign="top" scope="row">Presentation: </th>
                <td>
                <input name="presentation" type="text" id="presentation" value="<? echo
                $this->settings['presentation']; ?>" size="50" /><br />
                </td>
                </tr>


                </table>
                </fieldset>


                <p class="submit"><input type="submit" name="Submit" value="Update Options &raquo;" /></p>


                </form>
                </div>


                <?php


        }




        function comment_post($comment_ID)    {
            global $wpdb, $user_ID, $wp_version;
            $word = $_POST['word'];


            // First make sure that this is just a comment before we do anything so
            // that we don't inadvertantly kill trackbacks/pingbacks:
            $comment_type = $wpdb->get_var("SELECT comment_type FROM $wpdb->comments
            WHERE comment_ID = $comment_ID");
            if ($comment_type == '' || $comment_type == 'comment') {
                // If the user is not logged in check the security code
                if ( !$user_ID ) {
                    // puke on an empty code
                    if ( '' == $word ) {
                        if ($wp_version < 2.0) {
                            wp_set_comment_status($comment_ID, 'delete');
                        } else {
                            wp_delete_comment($comment_ID);
                        }
                        die( __('Error: Alter, du musst erst dat Codewort eingeben, hallooooo!!!!') );
                    }


                    // verify the code
                    if ($word != $this->settings['word']) {
                        if ($wp_version < 2.0) {
                            wp_set_comment_status($comment_ID, 'delete');
                        } else {
                            wp_delete_comment($comment_ID);
                        }
                        die('Dieses Codewort war falsch. Ich versteh net, wie man so doof sein kann. Aber darfst nochmal versuchen.');


                    }
                }
            }


            return $comment_ID;
        }




        function comment_form($post_ID) {
            global $wpdb, $user_ID;


            // If the user is logged in, dont prompt for code
            if (isset($user_ID))
                return $post_ID;


            // SET SESSION VARIABLE
            $hashtext = md5($textstr);
            //print $hashtext;


            $msgtext = $this->settings['presentation'];
            $msg = str_replace("%%CODEWORD%%", $this->settings['word'], $msgtext);


            ?>
                <p>
                <div style="display: left" id="wordverifydiv">
                <small><?= $msg; ?></small><br />
                <input type="text" name="word" size="28" id="wordverifyfield" tabindex="4" />
                </p>
                </div>
                <script language="JavaScript" type="text/javascript">
                var urlinput = document.getElementById("url");
            var submitp = urlinput.parentNode;
            var substitution2 = document.getElementById("wordverifydiv");
            submitp.appendChild(substitution2, urlinput);
            </script>




                <?php


                return $post_ID;
        }




    }//end class
endif;


$wordverify = new WordVerify();


?>

<?php // Do not delete these lines
    if ('comments.php' == basename($_SERVER['SCRIPT_FILENAME']))
        die ('Please do not load this page directly. Thanks!');
        if (!empty($post->post_password)) { // if there's a password
            if ($_COOKIE['wp-postpass_' . COOKIEHASH] != $post->post_password) {  // and it doesn't match the cookie
                ?>


<p class="nocomments">
  <?php _e("This post is password protected. Enter the password to view comments."); ?>
<p>
  <?php
                return;
            }
        }
        /* This variable is for alternating comment background */
        $oddcomment = 'alt';
?><div id="commentblock">
  <!--comments area-->
  <?php if ($comments) : ?>


<h2 id="comments">
  Klugschei&szlig;erkommentare </h2>
<ol id="commentlist">
  <?php foreach ($comments as $comment) : ?>
  <li class="<?php echo $oddcomment; ?>" id="comment-<?php comment_ID() ?>">
    <div class="commentname">meinte <span class="commentauthor">
      <?php comment_author_link() ?> so:
      </span> </div>
    <?php if ($comment->comment_approved == '0') : ?>
    <em>Your comment is awaiting moderation.</em>
    <?php endif; ?>
    <div class="commentinfo"> <span class="commentdate">
      am <?php comment_date('l, j. F Y')?>
      | <a href="#comment-<?php comment_ID() ?>" title="comment link url">
      und zwar so gegen <?php comment_time('G:i \U\h\r') ?>
      </a> </span> </div>
    <?php 
                    if(the_author('', false) == get_comment_author())
                        echo "<div class='commenttext-admin'>";
                    else
                        echo "<div class='commenttext'>";
                    comment_text();
                    echo "</div>";


                    
                    ?>
    <!-- <div class="commenttext"><?php comment_text() ?></div> -->
  </li>
  <?php /* Changes every other comment to a different class */    
                    if ('alt' == $oddcomment){
                        $oddcomment = 'standard';
                    }
                    else {
                        $oddcomment = 'alt';
                    }
                ?>
  <?php endforeach; /* end for each comment */ ?>
</ol>


<?php else : // this is displayed if there are no comments so far ?>
<?php if ('open' == $post-> comment_status) : ?>
<!-- If comments are open, but there are no comments. -->
  <h2 id="comments"> Kumma. Bist sogar der erste hier. Toll, oder? </h2>
<BR>
  <?php else : // comments are closed ?>
  <!-- If comments are closed. -->
  <p class="nocomments"></p>
  <?php endif; ?>
  <?php endif; ?>
  <?php if ('open' == $post-> comment_status) : ?>
  <!--comments form -->
  <h2 id="commentsformheader">Jede Menge Platz hier f&uuml;r dein elendiges Pimmelgesabbel:</h2>
<BR>
  <?php if ( get_option('comment_registration') && !$user_ID ) : ?>
  <p> You must be <a href="<?php echo get_option('siteurl'); 
?>/wp-login.php?redirect_to=<?php the_permalink(); ?>">logged in</a> to post a comment. </p>


  <?php else : ?>
  <div id="commentsform">
    <form action="<?php echo get_option('siteurl'); ?>/wp-comments-post.php" method="post" id="commentform">
      <?php if ( $user_ID ) : ?>
      <p> Logged in as <a href="<?php echo get_option('siteurl'); 


?>/wp-admin/profile.php"><?php echo $user_identity; ?></a>. <a href="<?php echo get_option('siteurl'); ?>/wp-login.php?action=logout" title="<?php _e('Log out of this account') ?>"> Logout &raquo; </a> </p>
      <?php else : ?>
      <p>
        <input type="text" name="author" id="author" value="<?php echo $comment_author; ?>" size="22" tabindex="1" />
        <label for="author"><small>
        <?php _e('Name tut Not! Der Nack löscht Gesabbel ohne Namen.');?>    
<?php if ($req) _e('(Anonym geht hier gar nix!)'); ?>
<BR>
        </small></label>
      </p>


   <p>
        <input type="text" name="email" id="email" value="<?php echo $comment_author_email; ?>" size="22" tabindex="2" />
        <label for="email"><small>
        <?php _e('Deine email darfste mir geben, wennde magst &nbsp;(wird nicht gezeigt)');?>
        <?php if ($req) _e('(required)'); ?>
        </small></label>
      </p>


      <?php endif; ?>
      <!--<p><small><strong>XHTML:</strong> You can use these tags: <?php echo allowed_tags(); ?></small></p>-->
      <p>
        <textarea name="comment" id="comment" cols="50" rows="10" tabindex="4"></textarea>
      </p>
<BR>
      <p>
        <input name="submit" type="submit" id="submit" tabindex="5" value="...und ab zum Nack damit!" />
        <input type="hidden" name="comment_post_ID" value="<?php echo $id; ?>" />
      </p>
      <?php do_action('comment_form', $post->ID); ?>
    </form>
  </div>


<?php endif; // If registration required and not logged in ?>
<?php endif; // if you delete this the sky will fall on your head ?>
</div>