File manager - Edit - /home/verseaumee/empowernetkenyajuly2026/easycalccheckplus.zip
Back
PK mi.] index.htmlnu �[��� PK mi.] adminer.phpnu �[��� PK mi.]�>tV- - easycalccheckplus.phpnu �[��� <?php /** * @copyright * @package EasyCalcCheck Plus - ECC+ for Joomla! 3 * @author Viktor Vogel <admin@kubik-rubik.de> * @version 3.3.0.0-FREE - 2021-05-03 * @link https://kubik-rubik.de/ecc-easycalccheck-plus * * @license GNU/GPL * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ defined('_JEXEC') || die('Restricted access'); use EasyCalcCheckPlus\Helper; use Joomla\CMS\{Plugin\CMSPlugin, Factory, User\User, Uri\Uri, Router\Route, Language\Text, Plugin\PluginHelper, Application\SiteApplication, Document\HtmlDocument}; use Joomla\Input\Input; /** * Class PlgSystemEasyCalcCheckPlus * * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ class PlgSystemEasyCalcCheckPlus extends CMSPlugin { /** * Custom call syntax * * @since 3.2.1-FREE */ private const CUSTOM_CALL_SYNTAX = '{easycalccheckplus}'; /** * @var SiteApplication $app * @since 3.2.0-FREE */ protected $app; /** * @var bool $autoloadLanguage * @since 3.2.0-FREE */ protected $autoloadLanguage = true; /** * @var bool $customCall * @since 3.2.0-FREE * @version 3.2.1-FREE */ protected $customCall = false; /** * @var bool $debugPlugin * @since 3.2.0-FREE */ protected $debugPlugin = false; /** * @var array $extensionInfo * @since 3.2.0-FREE */ protected $extensionInfo = []; /** * @var bool $loadEcc * @since 3.2.0-FREE */ protected $loadEcc = false; /** * @var bool $loadEccCheck * @since 3.2.0-FREE */ protected $loadEccCheck = false; /** * @var string $redirectUrl * @since 3.2.0-FREE */ protected $redirectUrl; /** * @var Input $request * @since 3.2.0-FREE */ protected $request; /** * @var User $user * @since 3.2.0-FREE */ protected $user; /** * @var bool $warningShown * @since 3.2.0-FREE */ protected $warningShown; /** * @var hCaptcha $hCaptcha * @since 3.2.0-FREE */ protected $hCaptcha; /** * PlgSystemEasyCalcCheckPlus constructor. * * @param object $subject * @param array $config * * @throws Exception * @since 3.2.0-FREE * @version 3.2.1-FREE */ public function __construct(object $subject, array $config) { parent::__construct($subject, $config); } /** * Initialise ECC, Purge Cache, Bot-Trap, SQL Injection Protection & Backend Token * * @throws Exception * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ public function onAfterInitialise(): void { $this->initialise(); // Okay, if we use the encoding option, then we have to decode all fields as soon as possible to avoid errors // Decode all input fields but only if debug plugin is not used if (!$this->debugPlugin && $this->getParams('encode')) { Helper::decodeFields(); } // SQL injection and file inclusion check if ($this->getParams('sqlInjectionLfi')) { Helper::sqlInjectionLocalFileInclusionCheck(); } // Backend protection if ($this->getParams('backendProtection')) { $this->checkBackendProtection(); } } /** * Initialises the plugin * * @throws Exception * @since 3.2.1-FREE */ private function initialise(): void { require_once __DIR__ . '/src/libraries/Helper.php'; $this->app = Factory::getApplication(); $this->redirectUrl = Helper::getSession('redirectUrl'); Helper::clearSession('redirectUrl'); if (empty($this->redirectUrl)) { $this->redirectUrl = Uri::getInstance()->toString(); } $this->request = new Input(); $this->user = Factory::getUser(); $this->debugPlugin = $this->getDebugPluginStatus(); } /** * Checks whether the debug plugin is activated - important workaround for Joomla! 3.x * This is important because if the plugin is activated, then the input request variables are set before ECC+ * can decode them back. This means that the components do not use the correct request variables if the option * "Encode all fields" is used in ECC+. If the plugin is activated, then we cannot use the encode functionality! * * @return bool * @since 3.2.1-FREE */ private function getDebugPluginStatus(): bool { if (PluginHelper::isEnabled('system', 'debug')) { return true; } return false; } /** * Gets legacy paths (underscore instead of camelcase) if new paths were not set yet after an update * * @param string $path * @param mixed $default * * @return mixed * @since 3.2.0-FREE * @version 3.2.1-FREE */ private function getParams(string $path, $default = null) { $param = $this->params->get($path); if ($param !== null) { return $param; } $pathLegacy = strtolower(preg_replace('@(?<!^)[A-Z]@', '_$0', $path)); $paramLegacy = $this->params->get($pathLegacy); return $paramLegacy ?? $default; } /** * Checks the backend protection token if the requirements are met * * @since 3.2.1-FREE */ private function checkBackendProtection(): void { if ($this->user->guest && $this->app->isClient('administrator')) { $tokenSession = Helper::getSession('token', false); if (!$tokenSession) { $requestToken = $this->request->get('token', null, 'RAW'); if ($requestToken === null) { $this->redirectBackendToken(); } $token = $this->getParams('token', ''); // Conversion to UTF8 (german umlauts) if (utf8_encode($requestToken) !== $token) { $this->redirectBackendToken(); } // Token is transferred properly, set session value to suppress further checks Helper::setSession('token', true); } } } /** * Redirects the request to the backend if correct token is not provided * * @since 3.2.0-FREE * @version 3.2.1-FREE */ private function redirectBackendToken(): void { $url = $this->getParams('urlFalseToken'); if (empty($url)) { $url = Uri::root(); } Helper::clearSession('token'); Helper::redirect($url); } /** * Detects whether the plugin routine has to be loaded and call the checks * * @throws Exception * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ public function onAfterRoute(): void { // Check whether ECC has to be loaded $option = $this->request->get('option', '', 'WORD'); $view = $this->request->get('view', '', 'WORD'); $task = $this->request->get('task', '', 'CMD'); $func = $this->request->get('func', '', 'WORD'); $layout = $this->request->get('layout', '', 'WORD'); $this->loadEcc($option, $task, $view, $func, $layout); // If the custom call is activated, then the input has to be checked here to intercept the process handling of the extension if ($this->getParams('customCall') && $this->loadEccUserContext()) { // Load error notice if needed $this->raiseErrorWarning($option, true); // Determine whether the check was already loaded and the data have to be validated $checkCustomCall = (array)Helper::getSession('checkCustomCall', []); Helper::clearSession('checkCustomCall'); if (!empty($checkCustomCall)) { // Get all request variables for the check $request = $this->request->getArray($_REQUEST); $customCallPerformCheck = false; // Go through all request variable until one hit to check whether the form was submitted by the user foreach ($checkCustomCall as $requestVariable) { if (preg_match('@(.*)\[(.*)\]$@', $requestVariable, $requestVariablematch)) { if (isset($request[$requestVariablematch[1]][$requestVariablematch[2]])) { $customCallPerformCheck = true; } } elseif (array_key_exists($requestVariable, $request)) { $customCallPerformCheck = true; } if ($customCallPerformCheck) { // Clean cache Helper::cleanCache(); // Save entered values in session for autofill if ($this->getParams('autofillValues')) { Helper::saveData(); } // Do the checks to protect the custom form if (!$this->performChecks()) { $this->perfomChecksFailed('checkFailedCustom'); } break; } } } } // Clean cache of component if ECC+ has to be loaded if ($this->loadEccCheck === true || $this->loadEcc === true) { Helper::cleanCache(); } if ($this->loadEccCheck === true) { // Save entered values in session for autofill if ($this->getParams('autofillValues')) { Helper::saveData(); } // Call checks for forms $this->callChecks($option, $task); } if ($this->loadEcc === true) { // Raise error warning if needed - do the check $this->raiseErrorWarning($option); // Write head data $head = []; $head[] = '<style>#easycalccheckplus {margin: 8px 0 !important; padding: 2px !important;}</style>'; if ($option === 'com_flexicontactplus' && $this->getParams('flexicontactplus')) { $head[] = '<style>#easycalccheckplus label {width: auto;}</style>'; } if ($option === 'com_comprofiler' && $this->getParams('communitybuilder')) { $head[] = '<style>#easycalccheckplus label {width: 100%;} #easycalccheckplus input {height: 34px;}</style>'; } if ($this->getParams('typeHidden')) { $hiddenClass = Helper::randomString(); $head[] = '<style>.' . $hiddenClass . ' {display: none !important;}</style>'; if ($option === 'com_foxcontact' && $this->getParams('foxcontact')) { $head[] = '<style>label.' . $hiddenClass . ' {margin: 0 !important; padding: 0 !important;}</style>'; } Helper::setSession('hiddenClass', $hiddenClass); } if ($option === 'com_kunena' && $this->getParams('kunena') && $this->getParams('recaptcha')) { $head[] = '<style>div#recaptcha_area{margin: auto !important;}</style>'; } if ($option === 'com_kunena' && $this->getParams('kunena')) { $head[] = '<style>a#btn_qreply{display:none;}</style>'; } if ($this->getParams('recaptcha')) { $this->getRecaptchaHead($head); } if ($this->hCaptcha()) { $head[] = $this->hCaptcha->getCssHead(); $head[] = $this->hCaptcha->getJavaScriptHead(); } $head = "\n" . implode("\n", array_filter($head)) . "\n"; /** @var HtmlDocument $document */ $document = Factory::getDocument(); if ($document->getType() === 'html') { $document->addCustomTag($head); } } // Workaround for Kunena - Remove Quick Reply button, only allow full editor replies if ($this->user->guest && $option === 'com_kunena' && $this->getParams('kunena')) { /** @var HtmlDocument $document */ $document = Factory::getDocument(); if ($document->getType() === 'html') { $document->addCustomTag('<style>a#btn_qreply, a.Kreplyclick{display:none;}</style>'); } } } /** * Checks whether ECC+ has to be loaded in normal call and defines check rules depending on the loaded component * * @param string $option * @param string $task * @param string $view * @param string $func * @param string $layout * * @throws Exception * @since 3.2.0-FREE * @version 3.2.1-FREE */ private function loadEcc(string $option, string $task, string $view, string $func, string $layout): void { $this->loadEccSetRules($option, $task, $view, $func, $layout); // Clear userLogin session variable to avoid errors if a user logs in via the module if ($this->getParams('userLogin') && Helper::getSession('userLogin')) { if ($option === 'com_users') { if ($this->loadEcc === false) { Helper::clearSession('userLogin'); } } else { Helper::clearSession('userLogin'); } } Helper::clearSession('eccLoaded'); } /** * Defines checking rules depending on the loaded component * * @param string $option * @param string $task * @param string $view * @param string $func * @param string $layout * * @since 3.2.0-FREE * @version 3.2.1-FREE */ private function loadEccSetRules(string $option, string $task, string $view, string $func, string $layout): void { if (!$this->loadEccUserContext()) { $this->loadEcc = false; $this->loadEccCheck = false; return; } // Find out if ECC+ has to be loaded depending on the called component if ($option === 'com_contact') { // Array -> (name, form, regex for hidden field, regex for output, task, request exception for encode option); $this->extensionInfo = [ 'com_contact', '<form[^>]+id="contact-form".+</form>', '<label id="jform_contact.+>', '<button class="btn btn-primary validate" type="submit">', 'contact.submit', ]; if ($view === 'contact' && $this->getParams('contact')) { $this->loadEcc = true; } if ($task === 'contact.submit' && $this->getParams('contact')) { $this->loadEccCheck = true; } } elseif ($option === 'com_mailto') { $this->extensionInfo = [ 'com_mailto', '<form[^>]+id="mailtoForm".+</form>', '<label for=".+_field".+>', '<button type="button" class="button" onclick=".+submitbutton.+">', 'send', ]; if ($this->getParams('mailtoContent')) { if ($task !== 'send') { $this->loadEcc = true; } else { $this->loadEccCheck = true; } } } elseif ($option === 'com_users') { if ($layout !== 'confirm' && $layout !== 'complete') { if ($view === 'registration') { $this->extensionInfo = [ 'com_users', '<form[^>]+id="member-registration".+</form>', '<label id="jform.+>', '<button type="submit" class="validate">', 'registration.register', ]; } elseif ($view === 'reset' || $view === 'remind') { $this->extensionInfo = [ 'com_users', '<form[^>]+id="user-registration".+</form>', '<label id="jform_email-lbl"', '<button type="submit">', 'registration.register', ]; } elseif ($view === 'login' || $view === '') { $this->extensionInfo = [ 'com_users', '<form[^>]+(task=user\.login.+>|>.+value="user\.login")+.+</form>', '<label id=".+"', '<button type="submit" class=".*">', 'registration.register', ]; } if (($view === 'registration' || $view === 'reset' || $view === 'remind') && $this->getParams('userRegistration')) { $this->loadEcc = true; } if (($task === 'registration.register' || $task === 'reset.request' || $task === 'remind.remind') && $this->getParams('userRegistration')) { $this->loadEccCheck = true; } if (($view === 'login' || $view === '') && ($task === '') && $this->getParams('userLogin')) { $this->loadEcc = true; Helper::setSession('userLogin', 1); } elseif ($task === 'user.login' && $this->getParams('userLogin')) { $userLoginCheck = Helper::getSession('userLogin'); if (!empty($userLoginCheck)) { $this->loadEccCheck = true; } else { $failedLoginAttempts = Helper::getSession('failedLoginAttempts'); if (empty($failedLoginAttempts)) { $failedLoginAttempts = 0; } if ($failedLoginAttempts >= $this->getParams('userLoginAttempts')) { $this->perfomChecksFailed('loginAttempts', Route::_('index.php?option=com_users&view=login', false)); } } } } } elseif ($option === 'com_easybookreloaded' && $this->getParams('easybookreloaded')) { // Easybook Reloaded 3.3.1 $this->extensionInfo = [ 'com_easybookreloaded', '<form[^>]+name=("|\')gbookForm("|\').+</form>', '<input type=.+>', '<p id="easysubmit">', 'save', 'gbookForm, gbvote, gbtext', ]; if ($task === 'add') { $this->loadEcc = true; } elseif ($task === 'save') { $this->loadEccCheck = true; } } elseif ($option === 'com_phocaguestbook' && $this->getParams('phocaguestbook')) { // Phoca Guestbook 3.0.6 $this->extensionInfo = [ 'com_phocaguestbook', '<form.+com_phocaguestbook.*</form>', '<input type=.+>', '<div class="btn-group">\s*<button type="submit".*>', 'submit', ]; if ($view === 'guestbook' && $task !== 'phocaguestbook.submit') { $this->loadEcc = true; } elseif ($task === 'phocaguestbook.submit') { $this->loadEccCheck = true; } } elseif ($option === 'com_comprofiler' && $this->getParams('communitybuilder')) { // Community Builder 2.4.5 $eccLoaded = Helper::getSession('eccLoaded', false); if ($task === 'registers' || $view === 'registers' || $view === 'saveregisters') { $this->extensionInfo = [ 'com_comprofiler', '<form[^>]+id="cbcheckedadminForm".+</form>', '<label for=".+>', '<input type="submit" value=".+" class="button" />', 'saveregisters', ]; } elseif ($task === 'lostpassword' || $view === 'lostpassword') { $this->extensionInfo = [ 'com_comprofiler', '<form[^>]+id="adminForm".+</form>', '<label for=".+>', '<input type="submit" class="button" id="cbsendnewuspass" value=".+" />', 'sendNewPass', ]; } if ($task === 'registers' || $view === 'registers' || $task === 'lostpassword' || $view === 'lostpassword') { $this->loadEcc = true; } elseif ($task === 'saveregisters' || $view === 'saveregisters' || $task === 'sendNewPass' || $view === 'sendnewpass') { if ($eccLoaded === true) { $this->loadEccCheck = true; } } } elseif ($option === 'com_dfcontact' && $this->getParams('dfcontact')) { // DFContact - tested with version 1.6.6 $this->extensionInfo = [ 'com_dfcontact', '<form[^>]+id="dfContactForm".+</form>', '<label for="dfContactField.+>', '<input type="submit" value=".+" class="button" />', ]; if ($view === 'dfcontact') { if (empty($this->app->input->get('submit', ''))) { $this->loadEcc = true; } else { $this->loadEccCheck = true; } } } elseif ($option === 'com_foxcontact' && $this->getParams('foxcontact')) { // FoxContact - tested with version 3.8.2 $this->extensionInfo = [ 'com_foxcontact', '<form[^>]+name="fox-form-c\d+".+</form>', '<input id="fox-c.+>', '<button type="submit" [^>]*/>', ]; if ($view === 'foxcontact') { if ($task === 'form.send') { $this->loadEccCheck = true; } else { $this->loadEcc = true; } } } elseif (($option === 'com_flexicontact' && $this->getParams('flexicontact')) || ($option === 'com_flexicontactplus' && $this->getParams('flexicontactplus'))) { // FlexiContact 10.05 / FlexiContact Plus - tested with version 6.07 $regexOutput = '<input type="submit" class=".+".*name="send_button".+/>'; if ($option === 'com_flexicontactplus') { $regexOutput = '<div class="fcp_sendrow">'; } $this->extensionInfo = [ $option, '<form[^>]+name="fc.?_form".+</form>', '<input type=.+>', $regexOutput, 'send', ]; if ($view === 'contact') { if (empty($task)) { $this->loadEcc = true; } elseif ($task === 'send') { $this->loadEccCheck = true; } } } elseif ($option === 'com_kunena' && $this->getParams('kunena')) { // Kunena Forum 5.0.7 $this->extensionInfo = [ 'com_kunena', '<form[^>]+id="postform".+</form>', '<input type=.+>', '<button[^>]+type="submit"[^>]+>', 'post', ]; if (($func === 'post' || ($view === 'topic' && ($layout === 'reply' || $layout === 'create' || $layout === ''))) && $task !== 'post') { $this->loadEcc = true; } elseif ($func === 'post' || $task === 'post') { $this->loadEccCheck = true; } } elseif ($option === 'com_alfcontact' && $this->getParams('alfcontact')) { // ALFContact 3.2.6 $this->extensionInfo = [ 'com_alfcontact', '<form[^>]+id="contact-form".+</form>', '<label for=".+>', '<button class="button">', 'sendemail', ]; if ($view === 'alfcontact' && empty($task)) { $this->loadEcc = true; } elseif ($task === 'sendemail') { $this->loadEccCheck = true; } } elseif ($option === 'com_aicontactsafe' && $this->getParams('aicontactsafe')) { // aiContactSafe - tested with version 2.0.19 $this->extensionInfo = [ 'com_aicontactsafe', '<form[^>]+id="adminForm_.+</form>', '<label for=".+>', '<input type="submit" id="aiContactSafeSendButton"', 'display', ]; $sTask = $this->request->get('sTask', '', 'STRING'); if (empty($sTask)) { $this->loadEcc = true; } elseif ($sTask === 'message') { $this->loadEccCheck = true; } } elseif ($option === 'com_community' && $this->getParams('jomsocial')) { // JomSocial - tested with version 2.6 RC2 $this->extensionInfo = [ 'com_community', '<form[^>]+id="jomsForm".+</form>', '<label id=".+>', '<div[^>]+cwin-wait.*></div>', 'register_save', ]; if ($view === 'register') { if ($task === '' || $task === 'register') { $this->loadEcc = true; } elseif ($task === 'register_save') { $this->loadEccCheck = true; } } } elseif ($option === 'com_virtuemart' && $this->getParams('virtuemart')) { // Virtuemart - tested with version 2.0.24a if ($task === 'askquestion' || $task === 'mailAskquestion') { $this->extensionInfo = [ 'com_virtuemart', '<form[^>]+id="askform".+</form>', '<label>', '<input[^>]*type="submit" name="submit_ask"[^>]*/>', 'mailAskquestion', ]; if ($view === 'productdetails') { if ($task === 'askquestion') { $this->loadEcc = true; } elseif ($task === 'mailAskquestion') { $this->loadEccCheck = true; } } } elseif ($task === 'editaddresscheckout' || $task === 'registercheckoutuser' || $task === 'savecheckoutuser') { $this->extensionInfo = [ 'com_virtuemart', '<form[^>]+id="userForm".+</form>', '<label.+>', '<button[^>]*type="submit"[^>]*>', 'savecheckoutuser', ]; if ($view === 'user') { if ($task === 'editaddresscheckout') { $this->loadEcc = true; } elseif ($task === 'registercheckoutuser' || $task === 'savecheckoutuser') { $this->loadEccCheck = true; } } } elseif ($task === 'editaddresscart' || $task === 'registercartuser' || $task === 'savecartuser') { $this->extensionInfo = [ 'com_virtuemart', '<form[^>]+id="userForm".+</form>', '<label.+>', '<button[^>]*type="submit"[^>]*>', 'savecartuser', ]; if ($view === 'user') { if ($task === 'editaddresscart') { $this->loadEcc = true; } elseif ($task === 'registercartuser' || $task === 'savecartuser') { $this->loadEccCheck = true; } } } elseif ($view === 'user' && ($layout === 'edit' || $layout === 'default' || $task === 'saveUser' || $task === 'register')) { $this->extensionInfo = [ 'com_virtuemart', '<form[^>]+name="userForm".+</form>', '<label.+>', '<button[^>]*type="submit"[^>]*>', 'saveUser', ]; if (($layout === 'edit' || $layout === 'default' || $task === 'register') && $task !== 'saveUser') { $this->loadEcc = true; } elseif ($task === 'saveUser') { $this->loadEccCheck = true; } } } elseif ($option === 'com_iproperty' && $this->getParams('iproperty')) { // IProperty - tested with version 3.3 $this->extensionInfo = [ 'com_iproperty', '<form[^>]+name="sendRequest".+</form>', '<label id=".+>', '<button[^>]*type="submit"[^>]*>', 'property.sendRequest', ]; if ($view === 'property') { if ($task === '') { $this->loadEcc = true; } elseif ($task === 'property.sendRequest') { $this->loadEccCheck = true; } } } } /** * Checks whether ECC+ has to be loaded in the user context * * @return bool * @since 3.2.0-FREE * @version 3.2.1-FREE */ private function loadEccUserContext(): bool { // Do not execute the call in the administration or if the check is disabled for guests return !($this->app->isClient('administrator') || ($this->getParams('onlyGuests') && !$this->user->guest)); } /** * The spam checks have not resolved, execute exit actions and redirect the request * * @param string $messageType * @param string $redirectUrl * * @since 3.3.0.0-FREE */ private function perfomChecksFailed(string $messageType = 'checkFailed', string $redirectUrl = ''): void { if ($redirectUrl === '') { $redirectUrl = $this->redirectUrl; } // Set error session variable for the message output Helper::setSession('errorOutput', $messageType); Helper::redirect($redirectUrl); } /** * Loads error notice if needed only once per process * * @param string $option * @param bool $custom * * @since 3.2.0-FREE * @version 3.2.1-FREE */ private function raiseErrorWarning(string $option, bool $custom = false): void { if (empty($this->warningShown)) { // Load error session variable for the message output $errorOutput = Helper::getSession('errorOutput'); if (!empty($errorOutput)) { if ($errorOutput === 'checkFailed') { // No message output needed - message is raised by components if (!(($option === 'com_phocaguestbook' && Helper::getSession('phocaguestbook') === 0) || ($option === 'com_easybookreloaded' && Helper::getSession('easybookreloaded') === 0))) { $this->app->enqueueMessage(Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_YOUHAVENOTRESOLVEDOURSPAMCHECK'), 'error'); } } elseif ($errorOutput === 'checkFailedCustom' && $custom === true) { // Only raise general error message if the custom call is used $this->app->enqueueMessage(Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_YOUHAVENOTRESOLVEDOURSPAMCHECK'), 'error'); } elseif ($errorOutput === 'loginAttempts') { $this->app->enqueueMessage(Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_TOOMANYFAILEDLOGINATTEMPTS'), 'error'); } Helper::clearSession('errorOutput'); $this->warningShown = true; } } } /** * Performs the antispam checks * * @return bool * @throws Exception * @since 3.2.0-FREE * @version 3.2.1-FREE */ private function performChecks(): bool { $request = $this->request->getArray($_REQUEST); // Calc check if ($this->getParams('typeCalc')) { $spamcheckResult = base64_decode(Helper::getSession('spamcheckresult')); $spamcheck = $request[Helper::getSession('spamcheck')]; Helper::clearSession('spamcheck'); Helper::clearSession('spamcheckresult'); if (!is_numeric($spamcheckResult) || $spamcheckResult !== $spamcheck) { return false; // Wrong result - failed } } // Hidden field if ($this->getParams('typeHidden')) { $hiddenField = $request[Helper::getSession('hiddenField')]; Helper::clearSession('hiddenField'); if (!empty($hiddenField)) { return false; // Hidden field was filled out - failed } } // Time lock if ($this->getParams('typeTime')) { $time = Helper::getSession('time'); Helper::clearSession('time'); if (time() - $this->getParams('typeTimeSec') <= $time) { return false; // Submitted too fast - failed } } // Self-defined Question if ($this->getParams('question')) { $question = $this->getSelfDefinedQuestion(); if (!empty($question)) { $answer = strtolower($request[Helper::getSession('question')]); Helper::clearSession('question'); if ($answer !== strtolower($question['answer'])) { return false; // Question wasn't answered - failed } } } // StopForumSpam - Check the IP Address // Further information: http://www.stopForumSpam.com if ($this->getParams('stopForumSpam')) { $url = 'http://www.stopForumSpam.com/api?ip=' . Helper::getSession('ipAddress'); // Function test - Comment out to test - Important: Enter a active Spam-IP // $ip = '88.180.52.46'; // $url = 'http://www.stopForumSpam.com/api?ip='.$ip; $response = false; $isSpam = ''; if (function_exists('curl_init')) { $ch = curl_init($url); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_POST, 0); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $response = curl_exec($ch); curl_close($ch); } if ($response) { preg_match('#<appears>(.*)</appears>#', $response, $out); $isSpam = $out[1]; } else { $response = @fopen($url, 'r'); if ($response) { while (!feof($response)) { $line = fgets($response, 1024); if (preg_match('#<appears>(.*)</appears>#', $line, $out)) { $isSpam = $out[1]; break; } } fclose($response); } } if ((string)$isSpam === 'yes' && (bool)$response === true) { return false; // Spam-IP - failed } } // Honeypot Project // Further information: http://www.projecthoneypot.org/home.php // BL ACCESS KEY - http://www.projecthoneypot.org/httpbl_configure.php if ($this->getParams('honeyPot')) { require_once __DIR__ . '/src/libraries/services/honeypot.php'; $httpBlKey = $this->getParams('honeyPotKey'); if ($httpBlKey) { $httpBl = new HttpBl($httpBlKey); $result = $httpBl->query(Helper::getSession('ipAddress')); // Function test - Comment out to test - Important: Enter an active Spam-IP // $ip = '117.21.224.251'; // $result = $http_bl->query($ip); if ($result === 2) { return false; } } } // Akismet // Further information: http://akismet.com/ if ($this->getParams('akismet')) { require_once __DIR__ . '/src/libraries/services/akismet.php'; $akismetKey = $this->getParams('akismetKey'); if ($akismetKey) { $akismetUrl = Uri::getInstance()->toString(); $name = ''; $email = ''; $url = ''; $comment = ''; if ($request['option'] === 'com_contact') { $name = $request['jform']['contact_name']; $email = $request['jform']['contact_email']; $comment = $request['jform']['contact_message']; } elseif ($request['option'] === 'com_mailto') { $name = $request['sender']; $email = $request['mailto']; $comment = $request['subject']; } elseif ($request['option'] === 'com_users') { $name = $request['jform']['name']; $email = $request['jform']['email1']; if (isset($request['jform']['email'])) { $email = $request['jform']['email']; } } elseif ($request['option'] === 'com_comprofiler') { $name = $request['name']; $email = $request['email']; if (isset($request['checkusername'])) { $name = $request['checkusername']; } if (isset($request['checkemail'])) { $email = $request['checkemail']; } } elseif ($request['option'] === 'com_easybookreloaded') { $name = $request['gbname']; $email = $request['gbmail']; $comment = $request['gbtext']; if (isset($request['gbpage'])) { $url = $request['gbpage']; } } elseif ($request['option'] === 'com_phocaguestbook') { $name = $request['pgusername']; $email = $request['email']; $comment = $request['pgbcontent']; } elseif ($request['option'] === 'com_dfcontact') { $name = $request['name']; $email = $request['email']; $comment = $request['message']; } elseif ($request['option'] === 'com_flexicontact' || $request['option'] === 'com_flexicontactplus') { $name = $request['from_name']; $email = $request['from_email']; $comment = $request['area_data']; } elseif ($request['option'] === 'com_alfcontact') { $name = $request['name']; $email = $request['email']; $comment = $request['message']; } elseif ($request['option'] === 'com_community') { $name = $request['usernamepass']; $email = $request['emailpass']; } elseif ($request['option'] === 'com_virtuemart') { $name = $request['name']; $email = $request['email']; $comment = $request['comment']; } elseif ($request['option'] === 'com_aicontactsafe') { $name = $request['aics_name']; $email = $request['aics_email']; $comment = $request['aics_message']; } $akismet = new Akismet($akismetUrl, $akismetKey); $akismet->setCommentAuthor($name); $akismet->setCommentAuthorEmail($email); $akismet->setCommentAuthorURL($url); $akismet->setCommentContent($comment); if ($akismet->isCommentSpam()) { return false; } } } // ReCaptcha - Further information: https://www.google.com/recaptcha if ($this->getParams('recaptcha')) { if ($this->getParams('recaptchaPublicKey') && $this->getParams('recaptchaPrivateKey')) { require_once __DIR__ . '/src/libraries/services/recaptchalib.php'; $privateKey = $this->getParams('recaptchaPrivateKey'); $reCaptcha = new ReCaptcha($privateKey); $response = $reCaptcha->verifyResponse(Helper::getSession('ipAddress'), $request['g-recaptcha-response']); if ($response->success === false) { return false; } } } // hCaptcha - Further information: https://www.hcaptcha.com/ if ($this->hCaptcha() && !$this->hCaptcha->validateInput()) { return false; } // Botscout - Check the IP Address // Further information: http://botscout.com/ if ($this->getParams('botScout') && $this->getParams('botScoutKey')) { $url = 'http://botscout.com/test/?ip=' . Helper::getSession('ipAddress') . '&key=' . $this->getParams('botScoutKey'); // Function test - Comment out to test - Important: Enter a active Spam-IP // $ip = '87.103.128.199'; // $url = 'http://botscout.com/test/?ip='.$ip.'&key='.$this->getParams('botScoutKey'); $response = false; $isSpam = ''; if (function_exists('curl_init')) { $ch = curl_init($url); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_POST, 0); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $response = curl_exec($ch); curl_close($ch); } if ($response) { $isSpam = substr($response, 0, 1); } else { $response = @fopen($url, 'r'); if ($response) { while (!feof($response)) { $line = fgets($response, 1024); $isSpam = substr($line, 0, 1); } fclose($response); } } if ((string)$isSpam === 'Y' && (bool)$response === true) { return false; // Spam-IP - failed } } // No spam detected! Helper::clearSession('ipAddress'); Helper::clearSession('savedData'); $this->loadEccCheck = false; return true; } /** * Gets the self defined question for the loaded language * * @return array * @since 3.2.0-FREE */ private function getSelfDefinedQuestion(): array { $questions = $this->getParams('questions'); if (empty($questions)) { return []; } $languageTag = $this->app->getLanguage()->getTag(); foreach ($questions as $question) { if ($question->languageTag === $languageTag) { return (array)$question; } } return []; } /** * Loads the hCaptcha class if the option is enabled and keys are provided * * @return bool * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ private function hCaptcha(): bool { if (!$this->getParams('hcaptcha')) { return false; } if (!$this->getParams('hcaptchaSiteKey') || !$this->getParams('hcaptchaSecret')) { return false; } if (empty($this->hCaptcha)) { require_once __DIR__ . '/src/libraries/services/hCaptcha.php'; $this->hCaptcha = new hCaptcha($this->getParams('hcaptchaSiteKey'), $this->getParams('hcaptchaSecret')); } return true; } /** * Calls checks for supported extensions * * @param string $option * @param string $task * * @throws Exception * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ private function callChecks(string $option, string $task): void { $checkFailed = false; $view = $this->request->get('view', '', 'WORD'); if ($option === 'com_users') { if ($task === 'reset.request' || $task === 'remind.remind') { if (!$this->performChecks()) { $checkFailed = true; } } elseif ($task === 'user.login') { if ($this->performChecks()) { Helper::clearSession('failedLoginAttempts'); } else { $checkFailed = true; } } } elseif ($option === 'com_mailto' && $task === 'send') { if (!$this->performChecks()) { $checkFailed = true; } } elseif ($option === 'com_easybookreloaded' && $task === 'save') { if (!$this->performChecks()) { Helper::setSession('easybookreloaded', 1); $checkFailed = true; } } elseif ($option === 'com_phocaguestbook' && $task === 'phocaguestbook.submit') { if (!$this->performChecks()) { Helper::setSession('phocaguestbook', 1); $checkFailed = true; } } elseif ($option === 'com_comprofiler' && ($task === 'sendNewPass' || $view === 'sendnewpass' || $view === 'saveregisters' || $task === 'saveregisters')) { if (!$this->performChecks()) { $checkFailed = true; } } elseif ($option === 'com_dfcontact' && !empty($_REQUEST["submit"])) { if (!$this->performChecks()) { $checkFailed = true; } } elseif ($option === 'com_foxcontact' && $task === 'form.send') { if (!$this->performChecks()) { $checkFailed = true; } } elseif (($option === 'com_flexicontact' || $option === 'com_flexicontactplus') && $task === 'send') { if (!$this->performChecks()) { $checkFailed = true; } } elseif ($option === 'com_kunena' && $task === 'post') { if (!$this->performChecks()) { $checkFailed = true; } } elseif ($option === 'com_alfcontact' && $task === 'sendemail') { if (!$this->performChecks()) { $checkFailed = true; } } elseif ($option === 'com_community' && $task === 'register_save') { if (!$this->performChecks()) { $checkFailed = true; } } elseif ($option === 'com_virtuemart' && ($task === 'mailAskquestion' || $task === 'registercheckoutuser' || $task === 'savecheckoutuser' || $task === 'registercartuser' || $task === 'savecartuser' || $task === 'saveUser')) { if (!$this->performChecks()) { $checkFailed = true; } } elseif ($option === 'com_aicontactsafe') { $sTask = $this->request->get('sTask', '', 'STRING'); if (($sTask === 'message') && !$this->performChecks()) { $checkFailed = true; } } elseif ($option === 'com_iproperty' && $task === 'property.sendRequest') { if (!$this->performChecks()) { $checkFailed = true; } } if ($checkFailed === true) { $this->perfomChecksFailed(); } } /** * Creates the head information for the reCaptcha implementation * * @param array $head * * @since 3.2.0-FREE * @version 3.2.1-FREE */ private function getRecaptchaHead(array &$head): void { if ($this->getParams('recaptchaPublicKey') && $this->getParams('recaptchaPrivateKey')) { $head[] = '<script type="text/javascript" src="https://www.google.com/recaptcha/api.js?onload=onloadCallback&render=explicit&hl=' . substr(Factory::getLanguage()->getTag(), 0, 2) . '" defer async></script>'; $head[] = '<script type="text/javascript">var onloadCallback = function() {grecaptcha.render("recaptcha", {"sitekey" : "' . $this->getParams('recaptchaPublicKey') . '", "theme" : "' . (string)$this->getParams('recaptchaTheme') . '"});};</script>'; $head[] = '<style>.ecc-recaptcha{margin-top: 5px;}</style>'; } } /** * Detects whether the plugin routine has to be loaded and call the checks * * @throws Exception * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ public function onAfterRender(): void { // Custom call check - call it here because we need access to the output if (!$this->loadEcc && $this->getParams('customCall')) { $this->customCall(); } if (!$this->loadEcc) { return; } $option = $this->request->get('option', '', 'WORD'); // Read in content of the output $body = $this->app->getBody(); // Get form of extension preg_match('@' . $this->extensionInfo[1] . '@isU', $body, $matchExtension); // Form was not found, the template probably uses overrides, try it with the detection of the task or set error message for debug mode if (empty($matchExtension)) { // Try to find the form by the task if provided if (!empty($this->extensionInfo[4])) { // Get all forms on the loaded page and find the correct form by the task value preg_match_all('@<form[^>]*>.*</form>@isU', $body, $matchExtensionForms); if (!empty($matchExtensionForms)) { foreach ($matchExtensionForms[0] as $matchExtensionForm) { if (preg_match('@<form[^>]*>.*value=["|\']' . $this->extensionInfo[4] . '["|\'].*</form>@isU', $matchExtensionForm, $matchExtension)) { break; } } } } if (empty($matchExtension)) { $this->app->enqueueMessage(Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_WARNING_FORMNOTFOUND'), 'error'); } } // Fill in form input values if the check failed previously (_warning_shown is set) if (!empty($this->warningShown) && $this->getParams('autofillValues')) { $this->fillForm($body, $matchExtension); } // Hidden field if (!empty($matchExtension) && $this->getParams('typeHidden')) { $patternSearchString = '@' . $this->extensionInfo[2] . '@isU'; preg_match_all($patternSearchString, $matchExtension[0], $matches); if (empty($matches[0])) { $this->app->enqueueMessage(Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_WARNING_NOHIDDENFIELD'), 'error'); } else { $count = random_int(0, count($matches[0]) - 1); $searchStringHidden = $matches[0][$count]; // Generate random variable $hiddenField = Helper::randomString(); $hiddenFieldLabel = Helper::randomString(); Helper::setSession('hiddenField', $hiddenField); Helper::setSession('hiddenFieldLabel', $hiddenFieldLabel); // Line width for obfuscation $addString = '<label class="' . Helper::getSession('hiddenClass') . '" for="' . $hiddenFieldLabel . '"></label><input type="text" id="' . $hiddenFieldLabel . '" name="' . $hiddenField . '" size="30" class="inputbox ' . Helper::getSession('hiddenClass') . '" />'; // Yootheme Fix - Put the hidden field in an own div container to avoid displacement of other fields if (preg_match('@<div[^>]*>\s*' . preg_quote($searchStringHidden, '@') . '@isU', $matchExtension[0], $matchesDiv)) { $searchStringHidden = $matchesDiv[0]; } if (isset($searchStringHidden)) { $body = str_replace($searchStringHidden, $addString . $searchStringHidden, $body); } } } // Calc check if (!empty($matchExtension) && ($this->getParams('typeCalc') || $this->getParams('recaptcha') || $this->getParams('hcaptcha') || $this->getParams('question'))) { // Without overrides $patternOutput = '@' . $this->extensionInfo[3] . '@isU'; if (preg_match($patternOutput, $matchExtension[0], $matches)) { $searchStringOutput = $matches[0]; } else { // Alternative search string from settings $stringAlternative = $this->getParams('stringAlternative'); if (!empty($stringAlternative)) { $pattern = '@' . $stringAlternative . '@isU'; if (preg_match($pattern, $matchExtension[0], $matches)) { $searchStringOutput = $matches[0]; } } // With overrides if (!isset($searchStringOutput)) { // Artisteer Template if (preg_match('@<span class=".*-button-wrapper">@isU', $matchExtension[0], $matches)) { $searchStringOutput = $matches[0]; } // Rockettheme Template if (preg_match('@<div class="readon">@isU', $matchExtension[0], $matches)) { $searchStringOutput = $matches[0]; } // String still not found - take the submit attribute if (!isset($searchStringOutput)) { if (preg_match('@<[^>]*type="submit".*>@isU', $matchExtension[0], $matches)) { $searchStringOutput = $matches[0]; } } } } $addString = '<!-- EasyCalcCheck Plus - Kubik-Rubik Joomla! Extensions --><div id="easycalccheckplus">'; if ($this->getParams('typeCalc')) { Helper::setSession('spamcheck', Helper::randomString()); // Determine operator $operator = 1; if ((int)$this->getParams('operator') === 2) { $operator = random_int(1, 2); } elseif ((int)$this->getParams('operator') === 1) { $operator = 2; } $operand = (int)$this->getParams('operand'); // Determine max. operand $maxValue = $this->getParams('maxValue', 20); $spamCheck1 = random_int(1, $maxValue); $spamCheck2 = random_int(1, $maxValue); $spamCheck3 = random_int(0, $maxValue); if ($operator === 2 && !(bool)$this->getParams('negative')) { $spamCheck1 = random_int($maxValue / 2, $maxValue); $spamCheck2 = random_int(1, $maxValue / 2); if ($operand === 3) { $spamCheck3 = random_int(0, $spamCheck1 - $spamCheck2); } } if ($operator === 1) // Addition { if ($operand === 2) { Helper::setSession('spamcheckresult', base64_encode($spamCheck1 + $spamCheck2)); } elseif ($operand === 3) { Helper::setSession('spamcheckresult', base64_encode($spamCheck1 + $spamCheck2 + $spamCheck3)); } } elseif ($operator === 2) // Subtraction { if ($operand === 2) { Helper::setSession('spamcheckresult', base64_encode($spamCheck1 - $spamCheck2)); } elseif ($operand === 3) { Helper::setSession('spamcheckresult', base64_encode($spamCheck1 - $spamCheck2 - $spamCheck3)); } } $addString .= '<div><label for="' . Helper::getSession('spamcheck') . '">' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_SPAMCHECK'); if ($operator === 1) { if ($this->getParams('convertToString')) { if ($operand === 2) { $addString .= Helper::convertToString($spamCheck1) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_PLUS') . ' ' . Helper::convertToString($spamCheck2) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_EQUALS') . ' '; } elseif ($operand === 3) { $addString .= Helper::convertToString($spamCheck1) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_PLUS') . ' ' . Helper::convertToString($spamCheck2) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_PLUS') . ' ' . Helper::convertToString($spamCheck3) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_EQUALS') . ' '; } } else { if ($operand === 2) { $addString .= $spamCheck1 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_PLUS') . ' ' . $spamCheck2 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_EQUALS') . ' '; } elseif ($operand === 3) { $addString .= $spamCheck1 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_PLUS') . ' ' . $spamCheck2 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_PLUS') . ' ' . $spamCheck3 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_EQUALS') . ' '; } } } elseif ($operator === 2) { if ($this->getParams('convertToString')) { if ($operand === 2) { $addString .= Helper::convertToString($spamCheck1) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_MINUS') . ' ' . Helper::convertToString($spamCheck2) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_EQUALS') . ' '; } elseif ($operand === 3) { $addString .= Helper::convertToString($spamCheck1) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_MINUS') . ' ' . Helper::convertToString($spamCheck2) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_MINUS') . ' ' . Helper::convertToString($spamCheck3) . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_EQUALS') . ' '; } } else { if ($operand === 2) { $addString .= $spamCheck1 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_MINUS') . ' ' . $spamCheck2 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_EQUALS') . ' '; } elseif ($operand === 3) { $addString .= $spamCheck1 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_MINUS') . ' ' . $spamCheck2 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_MINUS') . ' ' . $spamCheck3 . ' ' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_EQUALS') . ' '; } } } $addString .= '</label>'; $addString .= '<input type="text" name="' . Helper::getSession('spamcheck') . '" id="' . Helper::getSession('spamcheck') . '" size="3" class="inputbox ' . Helper::randomString() . ' validate-numeric required" value="" required="required" />'; $addString .= '</div>'; // Show warnings if ($this->getParams('warnReference') && !$this->getParams('autofillValues')) { $addString .= '<p><img src="' . Uri::root() . 'plugins/system/easycalccheckplus/src/libraries/warning.png" alt="' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_WARNING') . '" /> '; $addString .= '<strong>' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_WARNING') . '</strong><br /><small>' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_WARNING_DESC') . '</small>'; if ($this->getParams('convertToString')) { $addString .= '<br /><small>' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_CONVERTWARNING') . '</small><br />'; } $addString .= '</p>'; } elseif ($this->getParams('convertToString')) { $addString .= '<p><small>' . Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_CONVERTWARNING') . '</small></p>'; } } // Self-Defined Question if ($this->getParams('question')) { $question = $this->getSelfDefinedQuestion(); if (!empty($question)) { Helper::setSession('question', Helper::randomString()); $size = strlen($question['answer']) + random_int(0, 2); $addString .= '<div><label for="' . Helper::getSession('question') . '">' . $question['question'] . '</label><input type="text" name="' . Helper::getSession('question') . '" id="' . Helper::getSession('question') . '" size="' . $size . '" class="inputbox ' . Helper::randomString() . ' required" value="" /></div>'; } } // ReCaptcha if ($this->getParams('recaptcha') && $this->getParams('recaptchaPublicKey') && $this->getParams('recaptchaPrivateKey')) { $addString .= '<div class="ecc-recaptcha"><div class="g-recaptcha" id="recaptcha"></div></div>'; } // hCaptcha if ($this->hCaptcha()) { $addString .= '<div class="ecc-hcaptcha">' . $this->hCaptcha->getHtmlContent((string)$this->getParams('hCaptchaTheme')) . '</div>'; } $addString .= '</div>'; if (isset($searchStringOutput)) { $replaceString = $addString; if (!$this->customCall) { $replaceString = $addString . $searchStringOutput; } $body = str_replace($searchStringOutput, $replaceString, $body); } } // Encode fields - since 2.5-8 in all forms where ECC+ is loaded if (!$this->debugPlugin && $this->getParams('encode')) { $extensionInfoException = $this->extensionInfo[5] ?? ''; Helper::encodeFields($body, $matchExtension[0], $extensionInfoException); } // Set body content after all modifications have been applied $this->app->setBody($body); // Get IP address Helper::setSession('ipAddress', Helper::getIpAddress()); // Set session variable for error output - Phoca Guestbook / Easybook Reloaded if ($option === 'com_phocaguestbook') { Helper::setSession('phocaguestbook', 0); } elseif ($option === 'com_easybookreloaded') { Helper::setSession('easybookreloaded', 0); } // Set redirect url Helper::setSession('redirectUrl', Uri::getInstance()->toString()); Helper::setSession('eccLoaded', true); // Time Lock if ($this->getParams('typeTime')) { Helper::setSession('time', time()); } } /** * Prepares the custom call for the correct output * * @throws Exception * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ private function customCall(): void { // Read in content of the output $body = $this->app->getBody(); if (preg_match("@(<form[^>]*>)(.*)(" . self::CUSTOM_CALL_SYNTAX . ")(.*</form>)@Us", $body, $matches)) { // Workaround to get the correct form if several form attributes are provided on the loaded page if (strripos($matches[2], '<form') !== false) { $matches[0] = substr($matches[2], strripos($matches[2], '<form')) . $matches[3] . $matches[4]; // Set a new matches array with the correct form preg_match("@(<form[^>]*>)(.*)(" . self::CUSTOM_CALL_SYNTAX . ")(.*)(</form>)@Us", $matches[0], $matches); } if (!empty($matches)) { // Remove the syntax for signed-in users who should not see the spam check if (!$this->loadEccUserContext()) { $body = str_replace(self::CUSTOM_CALL_SYNTAX, '', $body); $this->app->setBody($body); return; } // Custom call string was found, set needed class attribute $this->customCall = true; // Clean the cache of the component first Helper::cleanCache(); // The request does not have to be validated, so get all information for the output of the checks $customCallForm = $matches[0]; $customCallFormContent = $matches[2] . $matches[4]; // Do some general checks to get needed information from the form of the unknown extension // Hidden field - check whether labels are used if not take the input tags $customCallHiddenRegex = '<input.+>'; if (strripos($customCallFormContent, '<label') !== false) { $customCallHiddenRegex = '<label.+>'; } // Get task value of the form $customCallFormTask = ''; if (strripos($customCallFormContent, 'name="task"') !== false) { preg_match('@<input[^>]+name="task".+>@sU', $customCallFormContent, $matchTask); if (preg_match('@value="(.+)"@', $matchTask[0], $matchValue)) { $customCallFormTask = $matchValue[1]; } } // Set the extension info array for the further execution with the collected information // Array -> (name, form, regex for hidden field, regex for output, task, request exception for encode option); $this->loadEcc = true; $this->extensionInfo = [ $this->request->get('option', '', 'WORD'), preg_quote($customCallForm, '@'), $customCallHiddenRegex, '{easycalccheckplus}', $customCallFormTask, ]; // Set the needed CSS instructions - since we are already in the trigger onAfterRender, we have to manipulate the output manually $head = []; $head[] = '<style>#easycalccheckplus {margin: 8px 0 !important; padding: 2px !important;}</style>'; if ($this->getParams('typeHidden')) { Helper::setSession('hiddenClass', Helper::randomString()); $head[] = '<style>.' . Helper::getSession('hiddenClass') . ' {display: none !important;}</style>'; } if ($this->getParams('recaptcha')) { $this->getRecaptchaHead($head); } $head = implode("\n", $head) . "\n"; // Set body after the modifications have been applied $body = str_replace('</head>', $head . '</head>', $body); $this->app->setBody($body); // Set the custom call session variable - Get all possible request variable of the loaded form preg_match_all('@name=["|\'](.*)["|\']@Us', $matches[0], $matchesRequestVariables); $keysExclude = ['option', 'view', 'layout', 'id', 'Itemid', 'task', 'controller', 'func']; $customCallRequestVariables = array_diff($matchesRequestVariables[1], $keysExclude); // Remove hidden input fields from the custom call session variable foreach ($customCallRequestVariables as $customCallRequestVariableKey => $customCallRequestVariable) { if (preg_match('@<input[^>]*name=["|\']' . preg_quote($customCallRequestVariable, '@') . '["|\'][^>]*>@isU', $matches[0], $customCallFieldNameMatch)) { if (stripos($customCallFieldNameMatch[0], 'type="hidden"') !== false || stripos($customCallFieldNameMatch[0], "type='hidden'") !== false) { unset($customCallRequestVariables[$customCallRequestVariableKey]); } } } Helper::setSession('checkCustomCall', $customCallRequestVariables); } } } /** * Fills the form with the entered data from the user - autofill function * * @param string $body * @param array $matchExtensionMain * * @since 3.2.0-FREE * @version 3.2.1-FREE */ private function fillForm(string &$body, array &$matchExtensionMain): void { $autofill = Helper::getSession('savedData'); if (!empty($autofill)) { // Get form of extension $patternForm = '@' . $this->extensionInfo[1] . '@isU'; preg_match($patternForm, $body, $matchExtension); $patternInput = '@<input[^>].*/?>@isU'; preg_match_all($patternInput, $matchExtension[0], $matchesInput); foreach ($matchesInput[0] as $inputValue) { foreach ($autofill as $key => $autofillValue) { if ($autofillValue !== '') { $value = '@name=("|\')' . preg_quote($key, '@') . '("|\')@isU'; if (preg_match($value, $inputValue)) { $value = '@value=("|\').*("|\')@isU'; if (preg_match($value, $inputValue, $match)) { $patternValue = '/' . preg_quote($match[0], '/') . '/isU'; $inputValueReplaced = preg_replace($patternValue, 'value="' . $autofillValue . '"', $inputValue); // Set the value to the body and the extension form for further modifications $body = str_replace($inputValue, $inputValueReplaced, $body); $matchExtensionMain[0] = str_replace($inputValue, $inputValueReplaced, $matchExtensionMain[0]); unset($autofill[$key]); break; } } } } } $patternTextarea = '@<textarea[^>].*>(.*</textarea>)@isU'; preg_match_all($patternTextarea, $matchExtension[0], $matchesTextarea); $count = 0; foreach ($matchesTextarea[0] as $textareaValue) { foreach ($autofill as $key => $autofillValue) { $value = '@name=("|\')' . preg_quote($key, '@') . '("|\')@'; if (preg_match($value, $textareaValue)) { $patternValue = '@' . preg_quote($matchesTextarea[1][$count], '@') . '@isU'; $textareaValueReplaced = preg_replace($patternValue, $autofillValue . '</textarea>', $textareaValue); // Set the value to the body and the extension form for further modifications $body = str_replace($textareaValue, $textareaValueReplaced, $body); $matchExtensionMain[0] = str_replace($textareaValue, $textareaValueReplaced, $matchExtensionMain[0]); unset($autofill[$key]); break; } } $count++; } Helper::clearSession('savedData'); } } /** * Detects whether the plugin routine has to be loaded and call the checks * * Do not use type declarations for function arguments here to avoid * TypeError errors if the plugin trigger is called with wrong types. * * @param object $contact * @param array $post * * @return bool * @throws Exception * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ public function onValidateContact($contact, $post): bool { if ($this->loadEccCheck === true) { $option = $this->request->get('option', '', 'WORD'); if ($option === 'com_contact' && $this->getParams('contact')) { if (!$this->performChecks()) { $this->perfomChecksFailed(); } } } return true; } /** * Detect whether the plugin routine has to be loaded and call the checks * * Do not use type declarations for function arguments here to avoid * TypeError errors if the plugin trigger is called with wrong types. * * @param array $user * @param bool $isnew * @param array $new * * @throws Exception * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ public function onUserBeforeSave($user, $isnew, $new): void { if (($this->loadEccCheck === true) && !empty($isnew)) { $option = $this->request->get('option', '', 'WORD'); if (($this->getParams('userRegistration') && $option === 'com_users') || ($this->getParams('communitybuilder') && $option === 'com_comprofiler')) { if (!$this->performChecks()) { $this->perfomChecksFailed(); } } } } /** * Detects whether the plugin routine has to be loaded and call the checks * * @since 3.2.0-FREE * @version 3.2.1-FREE */ public function onUserLoginFailure(): void { $failedLoginAttempts = Helper::getSession('failedLoginAttempts'); Helper::setSession('failedLoginAttempts', $failedLoginAttempts + 1); } /** * Successful login, clear sessions variable * * @since 3.2.0-FREE * @version 3.2.1-FREE */ public function onUserLogin(): void { Helper::clearSession('failedLoginAttempts'); } /** * The cache plugin should not cache form pages where ECC+ is loaded * * @return bool * @since 3.3.0.0-FREE */ public function onPageCacheIsExcluded(): bool { $customCallSession = Helper::getSession('checkCustomCall'); return $this->loadEcc || $this->loadEccCheck || $customCallSession !== null; } } PK mi.]� $��O �O easycalccheckplus.xmlnu �[��� <?xml version="1.0" encoding="UTF-8"?> <extension type="plugin" version="3.9" group="system" method="upgrade"> <name>PLG_SYSTEM_EASYCALCCHECKPLUS</name> <version>3.3.0.0-FREE</version> <creationDate>2021-05-03</creationDate> <license>https://www.gnu.org/licenses/gpl</license> <copyright>Copyright 2021 Viktor Vogel. All rights reserved.</copyright> <author>Viktor Vogel</author> <authoremail>admin@kubik-rubik.de</authoremail> <authorurl>https://kubik-rubik.de/</authorurl> <description>PLG_SYSTEM_EASYCALCCHECKPLUS_XML_DESCRIPTION</description> <variant>free</variant> <files> <filename plugin="easycalccheckplus">easycalccheckplus.php</filename> <filename plugin="easycalccheckplus">index.html</filename> <folder plugin="easycalccheckplus">src</folder> </files> <languages folder="language"> <language tag="en-GB">en-GB/en-GB.plg_system_easycalccheckplus.ini</language> <language tag="en-GB">en-GB/en-GB.plg_system_easycalccheckplus.sys.ini</language> <language tag="de-DE">de-DE/de-DE.plg_system_easycalccheckplus.ini</language> <language tag="de-DE">de-DE/de-DE.plg_system_easycalccheckplus.sys.ini</language> </languages> <scriptfile>src/Script.php</scriptfile> <updateservers> <server type="extension" priority="1" name="PLG_SYSTEM_EASYCALCCHECKPLUS">https://check.kubik-rubik.de/updates/easycalccheckplus.xml</server> </updateservers> <config> <fields name="params" addfieldpath="/plugins/system/easycalccheckplus/src/fields"> <fieldset name="PLG_SYSTEM_EASYCALCCHECKPLUS_CHECKS"> <field type="krdonationcodecheck"/> <field name="internalchecksOutputTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_INTERNALCHECKS_OUTPUT"/> <field name="typeCalc" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_CALCCHECK" description="PLG_SYSTEM_EASYCALCCHECKPLUS_CALCCHECK_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="operator" type="list" showon="typeCalc:1" default="2" label="PLG_SYSTEM_EASYCALCCHECKPLUS_OPERATOR" description="PLG_SYSTEM_EASYCALCCHECKPLUS_OPERATOR_DESC"> <option value="0">+</option> <option value="1">-</option> <option value="2">PLG_SYSTEM_EASYCALCCHECKPLUS_RANDOM</option> </field> <field name="operand" type="list" showon="typeCalc:1" default="2" label="PLG_SYSTEM_EASYCALCCHECKPLUS_OPERAND" description="PLG_SYSTEM_EASYCALCCHECKPLUS_OPERAND_DESC"> <option value="2">2</option> <option value="3">3</option> </field> <field name="negative" type="list" showon="typeCalc:1" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_NEGATIVE" description="PLG_SYSTEM_EASYCALCCHECKPLUS_NEGATIVE_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="convertToString" type="list" showon="typeCalc:1" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_CONVERT" description="PLG_SYSTEM_EASYCALCCHECKPLUS_CONVERT_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="maxValue" type="text" showon="typeCalc:1" default="20" label="PLG_SYSTEM_EASYCALCCHECKPLUS_MAXIMUMVALUE" description="PLG_SYSTEM_EASYCALCCHECKPLUS_MAXIMUMVALUE_DESC"/> <field name="typeHidden" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_HIDDENFIELD" description="PLG_SYSTEM_EASYCALCCHECKPLUS_HIDDENFIELD_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="typeTime" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TIMEHIDDEN" description="PLG_SYSTEM_EASYCALCCHECKPLUS_TIMEHIDDEN_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="typeTimeSec" type="text" showon="typeTime:1" default="5" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TIMEHIDDENSEC" description="PLG_SYSTEM_EASYCALCCHECKPLUS_TIMEHIDDENSEC_DESC"/> <field name="question" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_QUESTION" description="PLG_SYSTEM_EASYCALCCHECKPLUS_QUESTION_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="questions" type="subform" showon="question:1" formsource="plugins/system/easycalccheckplus/src/fields/question.xml" multiple="true" layout="joomla.form.field.subform.repeatable" groupByFieldset="true" label="PLG_SYSTEM_EASYCALCCHECKPLUS_QUESTIONS" description=""/> <field name="reCaptchaTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_RECAPTCHA"/> <field name="recaptcha" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_RECAPTCHA" description="PLG_SYSTEM_EASYCALCCHECKPLUS_RECAPTCHA_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="recaptchaTheme" type="list" showon="recaptcha:1" default="light" label="PLG_SYSTEM_EASYCALCCHECKPLUS_RECAPTCHA_THEME" description="PLG_SYSTEM_EASYCALCCHECKPLUS_RECAPTCHA_THEME_DESC"> <option value="light">Light</option> <option value="dark">Dark</option> </field> <field name="recaptchaPublicKey" type="text" showon="recaptcha:1" default="" size="40" label="PLG_SYSTEM_EASYCALCCHECKPLUS_RECAPTCHAPUBLICKEY" description="PLG_SYSTEM_EASYCALCCHECKPLUS_RECAPTCHAPUBLICKEY_DESC"/> <field name="recaptchaPrivateKey" type="text" showon="recaptcha:1" default="" size="40" label="PLG_SYSTEM_EASYCALCCHECKPLUS_RECAPTCHAPRIVATEKEY" description="PLG_SYSTEM_EASYCALCCHECKPLUS_RECAPTCHAPRIVATEKEY_DESC"/> <field name="hcaptchaTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_HCAPTCHA"/> <field name="hcaptcha" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_HCAPTCHA" description="PLG_SYSTEM_EASYCALCCHECKPLUS_HCAPTCHA_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="hCaptchaTheme" type="list" showon="hcaptcha:1" default="light" label="PLG_SYSTEM_EASYCALCCHECKPLUS_HCAPTCHA_THEME" description="PLG_SYSTEM_EASYCALCCHECKPLUS_HCAPTCHA_THEME_DESC"> <option value="light">Light</option> <option value="dark">Dark</option> </field> <field name="hcaptchaSiteKey" type="text" showon="hcaptcha:1" default="" size="40" label="PLG_SYSTEM_EASYCALCCHECKPLUS_HCAPTCHA_SITEKEY" description="PLG_SYSTEM_EASYCALCCHECKPLUS_HCAPTCHA_SITEKEY_DESC"/> <field name="hcaptchaSecret" type="text" showon="hcaptcha:1" default="" size="40" label="PLG_SYSTEM_EASYCALCCHECKPLUS_HCAPTCHA_SECRET" description="PLG_SYSTEM_EASYCALCCHECKPLUS_HCAPTCHA_SECRET_DESC"/> </fieldset> <fieldset name="PLG_SYSTEM_EASYCALCCHECKPLUS_FORMS"> <field type="krdonationcodecheck"/> <field name="coreFormsTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_CORE"/> <field name="userRegistration" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_USERREGISTRATION" description="PLG_SYSTEM_EASYCALCCHECKPLUS_USERREGISTRATION_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="userLogin" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_USERLOGIN" description="PLG_SYSTEM_EASYCALCCHECKPLUS_USERLOGIN_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="userLoginAttempts" type="text" showon="userLogin:1" default="3" size="10" label="PLG_SYSTEM_EASYCALCCHECKPLUS_USERLOGINATTEMPTS" description="PLG_SYSTEM_EASYCALCCHECKPLUS_USERLOGINATTEMPTS_DESC"/> <field name="contact" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_CONTACTFORM" description="PLG_SYSTEM_EASYCALCCHECKPLUS_CONTACTFORM_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="mailtoContent" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_MAILTO_CONTENT" description="PLG_SYSTEM_EASYCALCCHECKPLUS_MAILTO_CONTENT_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="3rdpartyFormsTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_3RDPARTY"/> <field name="aicontactsafe" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_AICONTACTSAFE" description="PLG_SYSTEM_EASYCALCCHECKPLUS_AICONTACTSAFE_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="alfcontact" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_ALFCONTACT" description="PLG_SYSTEM_EASYCALCCHECKPLUS_ALFCONTACT_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="communitybuilder" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_COMMUNITYBUILDER" description="PLG_SYSTEM_EASYCALCCHECKPLUS_COMMUNITYBUILDER_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="dfcontact" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_DFCONTACT" description="PLG_SYSTEM_EASYCALCCHECKPLUS_DFCONTACT_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="easybookreloaded" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_EASYBOOKRELOADED" description="PLG_SYSTEM_EASYCALCCHECKPLUS_EASYBOOKRELOADED_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="foxcontact" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_FOXCONTACT" description="PLG_SYSTEM_EASYCALCCHECKPLUS_FOXCONTACT_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="flexicontact" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_FLEXICONTACT" description="PLG_SYSTEM_EASYCALCCHECKPLUS_FLEXICONTACT_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="flexicontactplus" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_FLEXICONTACTPLUS" description="PLG_SYSTEM_EASYCALCCHECKPLUS_FLEXICONTACTPLUS_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="iproperty" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_IPROPERTY" description="PLG_SYSTEM_EASYCALCCHECKPLUS_IPROPERTY_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="jomsocial" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_JOMSOCIAL" description="PLG_SYSTEM_EASYCALCCHECKPLUS_JOMSOCIAL_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="kunena" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_KUNENA" description="PLG_SYSTEM_EASYCALCCHECKPLUS_KUNENA_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="phocaguestbook" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_PHOCAGUESTBOOK" description="PLG_SYSTEM_EASYCALCCHECKPLUS_PHOCAGUESTBOOK_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="virtuemart" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_VIRTUEMART" description="PLG_SYSTEM_EASYCALCCHECKPLUS_VIRTUEMART_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> </fieldset> <fieldset name="PLG_SYSTEM_EASYCALCCHECKPLUS_SETTINGS"> <field type="krdonationcodecheck"/> <field name="outputTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_OUTPUT"/> <field name="encode" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_ENCODE" description="PLG_SYSTEM_EASYCALCCHECKPLUS_ENCODE_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="autofillValues" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_KEEPVALUES" description="PLG_SYSTEM_EASYCALCCHECKPLUS_KEEPVALUES_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="warnReference" type="list" showon="autofillValues:0" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_WARNINGREFERENCE" description="PLG_SYSTEM_EASYCALCCHECKPLUS_WARNINGREFERENCE_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="onlyGuests" type="list" default="1" label="PLG_SYSTEM_EASYCALCCHECKPLUS_ONLYGUESTS" description="PLG_SYSTEM_EASYCALCCHECKPLUS_ONLYGUESTS_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="blockIpTitle" type="krTitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_BLOCKIP"/> <field name="blockIp" type="krproinput" label="PLG_SYSTEM_EASYCALCCHECKPLUS_BLOCKIP" description="PLG_SYSTEM_EASYCALCCHECKPLUS_BLOCKIP_DESC"/> <field name="blockIpCount" type="krproinput" label="PLG_SYSTEM_EASYCALCCHECKPLUS_BLOCKIP_COUNT" description="PLG_SYSTEM_EASYCALCCHECKPLUS_BLOCKIP_COUNT_DESC"/> <field name="blockIpSeconds" type="krproinput" label="PLG_SYSTEM_EASYCALCCHECKPLUS_BLOCKIP_SECONDS" description="PLG_SYSTEM_EASYCALCCHECKPLUS_BLOCKIP_SECONDS_DESC"/> <field name="backendTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_BACKEND"/> <field name="backendProtection" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_BACKENDPROTECTION" description="PLG_SYSTEM_EASYCALCCHECKPLUS_BACKENDPROTECTION_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="token" type="text" showon="backendProtection:1" default="" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TOKEN" description="PLG_SYSTEM_EASYCALCCHECKPLUS_TOKEN_DESC"/> <field name="urlFalseToken" type="text" showon="backendProtection:1" default="" size="40" label="PLG_SYSTEM_EASYCALCCHECKPLUS_URLFALSETOKEN" description="PLG_SYSTEM_EASYCALCCHECKPLUS_URLFALSETOKEN_DESC"/> <field name="internalChecksTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_INTERNALCHECKS"/> <field name="sqlInjectionLfi" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_SQLINJECTIONANDLOCALFILEINCLUSION" description="PLG_SYSTEM_EASYCALCCHECKPLUS_SQLINJECTIONANDLOCALFILEINCLUSION_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="expertTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_EXPERT"/> <field name="blockDirectSubmissions" type="krproinput" label="PLG_SYSTEM_EASYCALCCHECKPLUS_BLOCKDIRECTSUBMISSIONS" description="PLG_SYSTEM_EASYCALCCHECKPLUS_BLOCKDIRECTSUBMISSIONS_DESC"/> <field name="customCall" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_CUSTOMCALL" description="PLG_SYSTEM_EASYCALCCHECKPLUS_CUSTOMCALL_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="stringAlternative" type="textarea" default="" filter="raw" label="PLG_SYSTEM_EASYCALCCHECKPLUS_STRINGALTERNATIVE" description="PLG_SYSTEM_EASYCALCCHECKPLUS_STRINGALTERNATIVE_DESC" rows="3" cols="25"/> </fieldset> <fieldset name="PLG_SYSTEM_EASYCALCCHECKPLUS_ANTISPAMSERVICES"> <field type="krdonationcodecheck"/> <field name="antispamNoregistrationtitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_ANTISPAM_NOREGISTRATION"/> <field name="stopForumSpam" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_STOPFORUMSPAM" description="PLG_SYSTEM_EASYCALCCHECKPLUS_STOPFORUMSPAM_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="antispamFreeregistrationTitle" type="krtitle" label="PLG_SYSTEM_EASYCALCCHECKPLUS_TITLE_ANTISPAM_FREEREGISTRATION"/> <field name="honeyPot" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_HONEYPOT" description="PLG_SYSTEM_EASYCALCCHECKPLUS_HONEYPOT_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="honeyPotKey" type="text" showon="honeyPot:1" default="" label="PLG_SYSTEM_EASYCALCCHECKPLUS_HONEYPOTKEY" description="PLG_SYSTEM_EASYCALCCHECKPLUS_HONEYPOTKEY_DESC"/> <field name="akismet" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_AKISMET" description="PLG_SYSTEM_EASYCALCCHECKPLUS_AKISMET_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="akismetKey" type="text" showon="akismet:1" default="" label="PLG_SYSTEM_EASYCALCCHECKPLUS_AKISMETKEY" description="PLG_SYSTEM_EASYCALCCHECKPLUS_AKISMETKEY_DESC"/> <field name="botScout" type="list" default="0" label="PLG_SYSTEM_EASYCALCCHECKPLUS_BOTSCOUT" description="PLG_SYSTEM_EASYCALCCHECKPLUS_BOTSCOUT_DESC"> <option value="1">JYES</option> <option value="0">JNO</option> </field> <field name="botScoutKey" type="text" showon="botScout:1" default="" label="PLG_SYSTEM_EASYCALCCHECKPLUS_BOTSCOUTKEY" description="PLG_SYSTEM_EASYCALCCHECKPLUS_BOTSCOUTKEY_DESC"/> </fieldset> <fieldset name="donation"> <field type="krdonationcodecheck" name="donation"/> <field name="donation_code" type="text" default="" size="40" label="KR_DONATION_CODE" description="KR_DONATION_CODE_DESC"/> <field type="krprobutton" name="easycalccheckplus"/> </fieldset> </fields> </config> </extension> PK mi.]mʼ&> > src/Script.phpnu �[��� <?php /** * @copyright * @package EasyCalcCheck Plus - ECC+ for Joomla! 3 * @author Viktor Vogel <admin@kubik-rubik.de> * @version 3.3.0.0-FREE - 2021-05-03 * @link https://kubik-rubik.de/ecc-easycalccheck-plus * * @license GNU/GPL * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ defined('_JEXEC') || die('Restricted access'); class PlgSystemEasyCalcCheckPlusInstallerScript { public const MIN_VERSION_JOOMLA = '3.9.0'; public const MIN_VERSION_PHP = '7.3.0'; /** * Name of extension that is used in the error message * * @var string * * @since 3.2.0-FREE */ protected $extensionName = 'EasyCalcCheck Plus'; /** * Checks compatibility in the preflight event * * @param $type * @param $parent * * @return bool * @throws Exception * @since 3.2.0-FREE */ public function preflight($type, $parent) { if (!$this->checkVersionJoomla()) { return false; } if (!$this->checkVersionPhp()) { return false; } return true; } /** * Checks whether the Joomla! version meets the requirement * * @return bool * @throws Exception * @since 3.2.0-FREE */ private function checkVersionJoomla() { // Using deprecated JVersion, JFactory and JText classes to avoid exceptions in old Joomla! versions $version = new JVersion(); if (!$version->isCompatible(self::MIN_VERSION_JOOMLA)) { JFactory::getApplication()->enqueueMessage(JText::sprintf('KRJE_ERROR_JOOMLA_VERSION', $this->extensionName, self::MIN_VERSION_JOOMLA), 'error'); return false; } return true; } /** * Checks whether the PHP version meets the requirement * * @return bool * @throws Exception * @since 3.2.0-FREE */ private function checkVersionPhp() { if (!version_compare(phpversion(), self::MIN_VERSION_PHP, 'ge')) { JFactory::getApplication()->enqueueMessage(JText::sprintf('KRJE_ERROR_PHP_VERSION', $this->extensionName, self::MIN_VERSION_PHP), 'error'); return false; } return true; } } PK mi.] src/adminer.phpnu �[��� PK mi.] ! src/libraries/services/index.htmlnu �[��� PK mi.]<i� ' src/libraries/services/recaptchalib.phpnu �[��� <?php /** * @copyright * @package EasyCalcCheck Plus Pro - ECC+ for Joomla! 3 * @author Viktor Vogel <admin@kubik-rubik.de> * @version 3.3.0.0-FREE - 2021-05-03 * @link https://kubik-rubik.de/ecc-easycalccheck-plus * * This is a PHP library that handles calling reCAPTCHA. * - Documentation and latest version * https://developers.google.com/recaptcha/docs/php * - Get a reCAPTCHA API Key * https://www.google.com/recaptcha/admin/create * - Discussion group * http://groups.google.com/group/recaptcha * * @copyright Copyright (c) 2014, Google Inc. * @link http://www.google.com/recaptcha * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "Software"), to deal * in the Software without restriction, including without limitation the rights * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell * copies of the Software, and to permit persons to whom the Software is * furnished to do so, subject to the following conditions: * * The above copyright notice and this permission notice shall be included in * all copies or substantial portions of the Software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN * THE SOFTWARE. */ defined('_JEXEC') || die('Restricted access'); /** * A ReCaptchaResponse is returned from checkAnswer(). */ class ReCaptchaResponse { public $success; public $errorCodes; } class ReCaptcha { private static $_signupUrl = "https://www.google.com/recaptcha/admin"; private static $_siteVerifyUrl = "https://www.google.com/recaptcha/api/siteverify?"; private static $_version = "php_1.0"; private $_secret; /** * Constructor. * * @param string $secret shared secret between site and ReCAPTCHA server. */ public function __construct($secret) { if ($secret == null || $secret == "") { die("To use reCAPTCHA you must get an API key from <a href='" . self::$_signupUrl . "'>" . self::$_signupUrl . "</a>"); } $this->_secret = $secret; } /** * Calls the reCAPTCHA siteverify API to verify whether the user passes * CAPTCHA test. * * @param string $remoteIp IP address of end user. * @param string $response response string from recaptcha verification. * * @return ReCaptchaResponse */ public function verifyResponse($remoteIp, $response) { // Discard empty solution submissions if ($response == null || strlen($response) == 0) { $recaptchaResponse = new ReCaptchaResponse(); $recaptchaResponse->success = false; $recaptchaResponse->errorCodes = 'missing-input'; return $recaptchaResponse; } $getResponse = $this->_submitHttpGet(self::$_siteVerifyUrl, ['secret' => $this->_secret, 'remoteip' => $remoteIp, 'v' => self::$_version, 'response' => $response]); $answers = json_decode($getResponse, true); $recaptchaResponse = new ReCaptchaResponse(); if (trim($answers ['success']) == true) { $recaptchaResponse->success = true; } else { $recaptchaResponse->success = false; $recaptchaResponse->errorCodes = $answers [error - codes]; } return $recaptchaResponse; } /** * Submits an HTTP GET to a reCAPTCHA server. * * @param string $path url path to recaptcha server. * @param array $data array of parameters to be sent. * * @return false|string response */ private function _submitHTTPGet($path, $data) { $req = $this->_encodeQS($data); $response = file_get_contents($path . $req); return $response; } /** * Encodes the given data into a query string format. * * @param array $data array of string elements to be encoded. * * @return string - encoded request. */ private function _encodeQS($data) { $req = ""; foreach ($data as $key => $value) { $req .= $key . '=' . urlencode(stripslashes($value)) . '&'; } // Cut the last '&' $req = substr($req, 0, strlen($req) - 1); return $req; } } PK mi.] &� � # src/libraries/services/hCaptcha.phpnu �[��� <?php /** * @copyright * @package EasyCalcCheck Plus - ECC+ for Joomla! 3 * @author Viktor Vogel <admin@kubik-rubik.de> * @version 3.3.0.0-FREE - 2021-05-03 * @link https://kubik-rubik.de/ecc-easycalccheck-plus * * @license GNU/GPL * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ defined('_JEXEC') || die('Restricted access'); use Joomla\CMS\{Factory, Http\HttpFactory}; use Joomla\Registry\Registry; use EasyCalcCheckPlus\Helper; class hCaptcha { /** * @var string $siteKey * @since 3.2.0-FREE */ protected $siteKey = ''; /** * @var string $secretKey * @since 3.2.0-FREE */ protected $secretKey = ''; /** * @var string $javaScriptUrl * @since 3.2.0-FREE */ protected $javaScriptUrl = 'https://www.hCaptcha.com/1/api.js'; /** * @var string $verifyURL * @since 3.2.0-FREE */ protected $verifyURL = 'https://hcaptcha.com/siteverify'; /** * hCaptacha constructor. * * @param string $siteKey * @param string $secret * * @since 3.2.0-FREE */ public function __construct(string $siteKey, string $secret) { $this->siteKey = $siteKey; $this->secretKey = $secret; } /** * Gets the required JavaScript code for the head section to show the hCaptcha * * @return string * @since 3.2.0-FREE */ public function getJavaScriptHead(): string { $languageCode = 'en-GB'; $languageTag = Factory::getLanguage()->getTag(); if ($languageCode !== $languageTag) { $languageCode = substr($languageTag, 0, 2); } return '<script src="' . $this->javaScriptUrl . '?hl=' . $languageCode . '" async defer></script>'; } /** * Gets the required CSS code for the head section to show the hCaptcha * * @return string * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ public function getCssHead(): string { return '<style>.h-captcha{margin-top: 5px;}</style>'; } /** * Gets the required HTML content code to show the hCaptcha * * @param string $theme * * @return string * @since 3.2.0-FREE */ public function getHtmlContent(string $theme): string { return '<div class="h-captcha" data-sitekey="' . $this->siteKey . '" data-theme="' . $theme . '"></div>'; } /** * Validates the intput against hCaptcha's verification server * * @return bool * @throws Exception * @since 3.2.0-FREE */ public function validateInput(): bool { $requestToken = Factory::getApplication()->input->get('h-captcha-response', null, 'RAW'); if (empty($requestToken)) { return false; } $data = [ 'secret' => $this->secretKey, 'response' => $requestToken, 'remoteip' => Helper::getIpAddress(), ]; $hCaptchaResponse = HttpFactory::getHttp(new Registry(), 'Curl')->post($this->verifyURL, $data); if (!empty($hCaptchaResponse->body)) { $hCaptchaResponseBody = json_decode($hCaptchaResponse->body); if (isset($hCaptchaResponseBody->success) && $hCaptchaResponseBody->success) { return true; } } return false; } } PK mi.]V� �= �= " src/libraries/services/akismet.phpnu �[��� <?php /** * @copyright * @package EasyCalcCheck Plus Pro - ECC+ for Joomla! 3 * @author Viktor Vogel <admin@kubik-rubik.de> * @version 3.3.0.0-FREE - 2021-05-03 * @link https://kubik-rubik.de/ecc-easycalccheck-plus * * Akismet anti-comment spam service * * The class in this package allows use of the {@link http://akismet.com Akismet} anti-comment spam service in any PHP5 application. * * This service performs a number of checks on submitted data and returns whether or not the data is likely to be spam. * * Please note that in order to use this class, you must have a vaild {@link http://wordpress.com/api-keys/ WordPress API key}. They are free for non/small-profit types and getting one will only take a couple of minutes. * * For commercial use, please {@link http://akismet.com/commercial/ visit the Akismet commercial licensing page}. * * Please be aware that this class is PHP5 only. Attempts to run it under PHP4 will most likely fail. * * See the Akismet class documentation page linked to below for usage information. * * @package akismet * @author Alex Potsides, {@link http://www.achingbrain.net http://www.achingbrain.net} * @version 0.5 * @copyright Alex Potsides, {@link http://www.achingbrain.net http://www.achingbrain.net} * @license http://www.opensource.org/licenses/bsd-license.php BSD License */ /** * The Akismet PHP5 Class * * This class takes the functionality from the Akismet WordPress plugin written by {@link http://photomatt.net/ Matt Mullenweg} and allows it to be integrated into any PHP5 application or website. * * The original plugin is {@link http://akismet.com/download/ available on the Akismet website}. * * @package akismet * @name Akismet * @version 0.5 * @author Alex Potsides * @link http://www.achingbrain.net/ */ defined('_JEXEC') || die('Restricted access'); /** * Used internally by the Akismet class and to mock the Akismet anti spam service in * the unit tests. * * N.B. It is not necessary to implement this class to use the Akismet class. * * @package akismet * @name AkismetRequestSender * @version 0.5 * @author Alex Potsides * @link http://www.achingbrain.net/ */ interface AkismetRequestSender { /** * Sends the data to the remote host. * * @param string $host The host to send/receive data. * @param int $port The port on the remote host. * @param string $request The data to send. * @param int $responseLength The amount of data to read. Defaults to 1160 bytes. * * @throws An exception is thrown if a connection cannot be made to the remote host. * @returns The server response */ public function send($host, $port, $request, $responseLength = 1160); } /** * Used internally by the Akismet class and to mock the Akismet anti spam service in * the unit tests. * * N.B. It is not necessary to implement this class to use the Akismet class. * * @package akismet * @name AkismetRequestFactory * @version 0.5 * @author Alex Potsides * @link http://www.achingbrain.net/ */ interface AkismetRequestFactory { public function createRequestSender(); } class Akismet { private $version = '0.5'; private $wordPressAPIKey; private $blogURL; private $comment; private $apiPort; private $akismetServer; private $akismetVersion; private $requestFactory; // This prevents some potentially sensitive information from being sent accross the wire. private $ignore = [ 'HTTP_COOKIE', 'HTTP_X_FORWARDED_FOR', 'HTTP_X_FORWARDED_HOST', 'HTTP_MAX_FORWARDS', 'HTTP_X_FORWARDED_SERVER', 'REDIRECT_STATUS', 'SERVER_PORT', 'PATH', 'DOCUMENT_ROOT', 'SERVER_ADMIN', 'QUERY_STRING', 'PHP_SELF', ]; /** * @param string $blogURL The URL of your blog. * @param string $wordPressAPIKey WordPress API key. */ public function __construct($blogURL, $wordPressAPIKey) { $this->blogURL = $blogURL; $this->wordPressAPIKey = $wordPressAPIKey; // Set some default values $this->apiPort = 80; $this->akismetServer = 'rest.akismet.com'; $this->akismetVersion = '1.1'; $this->requestFactory = new SocketWriteReadFactory(); // Start to populate the comment data $this->comment['blog'] = $blogURL; if (isset($_SERVER['HTTP_USER_AGENT'])) { $this->comment['user_agent'] = $_SERVER['HTTP_USER_AGENT']; } if (isset($_SERVER['HTTP_REFERER'])) { $this->comment['referrer'] = $_SERVER['HTTP_REFERER']; } /* * This is necessary if the server PHP5 is running on has been set up to run PHP4 and * PHP5 concurently and is actually running through a separate proxy al a these instructions: * http://www.schlitt.info/applications/blog/archives/83_How_to_run_PHP4_and_PHP_5_parallel.html * and http://wiki.coggeshall.org/37.html * Otherwise the user_ip appears as the IP address of the PHP4 server passing the requests to the * PHP5 one... */ if (isset($_SERVER['REMOTE_ADDR']) && $_SERVER['REMOTE_ADDR'] != getenv('SERVER_ADDR')) { $this->comment['user_ip'] = $_SERVER['REMOTE_ADDR']; } else { $this->comment['user_ip'] = getenv('HTTP_X_FORWARDED_FOR'); } } /** * Tests for spam. * * Uses the web service provided by {@link http://www.akismet.com Akismet} to see whether or not the submitted comment is spam. Returns a boolean value. * * @return bool True if the comment is spam, false if not * @throws exception throw an exception if the API key passed to the constructor is invalid. */ public function isCommentSpam() { $response = $this->sendRequest($this->getQueryString(), $this->wordPressAPIKey . '.rest.akismet.com', '/' . $this->akismetVersion . '/comment-check'); if ($response[1] == 'invalid' && !$this->isKeyValid()) { throw new exception('The Wordpress API key passed to the Akismet constructor is invalid. Please obtain a valid one from http://wordpress.com/api-keys/'); } return ($response[1] == 'true'); } // makes a request to the Akismet service private function sendRequest($request, $host, $path) { $http_request = "POST " . $path . " HTTP/1.0\r\n"; $http_request .= "Host: " . $host . "\r\n"; $http_request .= "Content-Type: application/x-www-form-urlencoded; charset=utf-8\r\n"; $http_request .= "Content-Length: " . strlen($request) . "\r\n"; $http_request .= "User-Agent: Akismet PHP5 Class " . $this->version . " | Akismet/1.11\r\n"; $http_request .= "\r\n"; $http_request .= $request; $requestSender = $this->requestFactory->createRequestSender(); $response = $requestSender->send($host, $this->apiPort, $http_request); return explode("\r\n\r\n", $response, 2); } // Formats the data for transmission private function getQueryString() { foreach ($_SERVER as $key => $value) { if (!in_array($key, $this->ignore)) { if ($key == 'REMOTE_ADDR') { $this->comment[$key] = $this->comment['user_ip']; } else { $this->comment[$key] = $value; } } } $query_string = ''; foreach ($this->comment as $key => $data) { if (!is_array($data)) { $query_string .= $key . '=' . urlencode(stripslashes($data)) . '&'; } } return $query_string; } /** * Makes a request to the Akismet service to see if the API key passed to the constructor is valid. * * Use this method if you suspect your API key is invalid. * * @return bool True is if the key is valid, false if not. */ public function isKeyValid() { // Check to see if the key is valid $response = $this->sendRequest('key=' . $this->wordPressAPIKey . '&blog=' . $this->blogURL, $this->akismetServer, '/' . $this->akismetVersion . '/verify-key'); return $response[1] == 'valid'; } /** * Submit spam that is incorrectly tagged as ham. * * Using this function will make you a good citizen as it helps Akismet to learn from its mistakes. This will improve the service for everybody. */ public function submitSpam() { $this->sendRequest($this->getQueryString(), $this->wordPressAPIKey . '.' . $this->akismetServer, '/' . $this->akismetVersion . '/submit-spam'); } /** * Submit ham that is incorrectly tagged as spam. * * Using this function will make you a good citizen as it helps Akismet to learn from its mistakes. This will improve the service for everybody. */ public function submitHam() { $this->sendRequest($this->getQueryString(), $this->wordPressAPIKey . '.' . $this->akismetServer, '/' . $this->akismetVersion . '/submit-ham'); } /** * To override the user IP address when submitting spam/ham later on * * @param string $userip An IP address. Optional. */ public function setUserIP($userip) { $this->comment['user_ip'] = $userip; } /** * To override the referring page when submitting spam/ham later on * * @param string $referrer The referring page. Optional. */ public function setReferrer($referrer) { $this->comment['referrer'] = $referrer; } /** * A permanent URL referencing the blog post the comment was submitted to. * * @param string $permalink The URL. Optional. */ public function setPermalink($permalink) { $this->comment['permalink'] = $permalink; } /** * The type of comment being submitted. * * May be blank, comment, trackback, pingback, or a made up value like "registration" or "wiki". */ public function setCommentType($commentType) { $this->comment['comment_type'] = $commentType; } /** * The name that the author submitted with the comment. */ public function setCommentAuthor($commentAuthor) { $this->comment['comment_author'] = $commentAuthor; } /** * The email address that the author submitted with the comment. * * The address is assumed to be valid. */ public function setCommentAuthorEmail($authorEmail) { $this->comment['comment_author_email'] = $authorEmail; } /** * The URL that the author submitted with the comment. */ public function setCommentAuthorURL($authorURL) { $this->comment['comment_author_url'] = $authorURL; } /** * The comment's body text. */ public function setCommentContent($commentBody) { $this->comment['comment_content'] = $commentBody; } /** * Lets you override the user agent used to submit the comment. * you may wish to do this when submitting ham/spam. * Defaults to $_SERVER['HTTP_USER_AGENT'] */ public function setCommentUserAgent($userAgent) { $this->comment['user_agent'] = $userAgent; } /** * Defaults to 80 */ public function setAPIPort($apiPort) { $this->apiPort = $apiPort; } /** * Defaults to rest.akismet.com */ public function setAkismetServer($akismetServer) { $this->akismetServer = $akismetServer; } /** * Defaults to '1.1' * * @param string $akismetVersion */ public function setAkismetVersion($akismetVersion) { $this->akismetVersion = $akismetVersion; } /** * Used by unit tests to mock transport layer * * @param AkismetRequestFactory $requestFactory */ public function setRequestFactory($requestFactory) { $this->requestFactory = $requestFactory; } } /** * Used internally by Akismet * * This class is used by Akismet to do the actual sending and receiving of data. It opens a connection to a remote host, sends some data and the reads the response and makes it available to the calling program. * * The code that makes up this class originates in the Akismet WordPress plugin, which is {@link http://akismet.com/download/ available on the Akismet website}. * * N.B. It is not necessary to call this class directly to use the Akismet class. * * @package akismet * @name SocketWriteRead * @version 0.5 * @author Alex Potsides * @link http://www.achingbrain.net/ */ class SocketWriteRead implements AkismetRequestSender { private $response; private $errorNumber; private $errorString; public function __construct() { $this->errorNumber = 0; $this->errorString = ''; } /** * Sends the data to the remote host. * * @param string $host The host to send/receive data. * @param int $port The port on the remote host. * @param string $request The data to send. * @param int $responseLength The amount of data to read. Defaults to 1160 bytes. * * @throws An exception is thrown if a connection cannot be made to the remote host. * @returns The server response */ public function send($host, $port, $request, $responseLength = 1160) { $response = ''; $fs = fsockopen($host, $port, $this->errorNumber, $this->errorString, 3); if ($this->errorNumber != 0) { throw new Exception('Error connecting to host: ' . $host . ' Error number: ' . $this->errorNumber . ' Error message: ' . $this->errorString); } if ($fs !== false) { @fwrite($fs, $request); while (!feof($fs)) { $response .= fgets($fs, $responseLength); } fclose($fs); } return $response; } /** * Returns the server response text * * @return string */ public function getResponse() { return $this->response; } /** * Returns the error number * * If there was no error, 0 will be returned. * * @return int */ public function getErrorNumner() { return $this->errorNumber; } /** * Returns the error string * * If there was no error, an empty string will be returned. * * @return string */ public function getErrorString() { return $this->errorString; } } /** * Used internally by the Akismet class and to mock the Akismet anti spam service in * the unit tests. * * N.B. It is not necessary to call this class directly to use the Akismet class. * * @package akismet * @name SocketWriteReadFactory * @version 0.5 * @author Alex Potsides * @link http://www.achingbrain.net/ */ class SocketWriteReadFactory implements AkismetRequestFactory { public function createRequestSender() { return new SocketWriteRead(); } } PK mi.]�O� � # src/libraries/services/honeypot.phpnu �[��� <?php /** * @copyright * @package EasyCalcCheck Plus Pro - ECC+ for Joomla! 3 * @author Viktor Vogel <admin@kubik-rubik.de> * @version 3.3.0.0-FREE - 2021-05-03 * @link https://kubik-rubik.de/ecc-easycalccheck-plus * * Project Honey Pot Http BlackList * http://www.projecthoneypot.org/httpbl_configure.php * Version 0.1 by Francois Dechery, www.440net.net */ defined('_JEXEC') || die('Restricted access'); class HttpBl { protected $access_key = ""; protected $domain = "dnsbl.httpbl.org"; protected $answer_codes = [ 0 => 'Search Engine', 1 => 'Suspicious', 2 => 'Harvester', 3 => 'Suspicious & Harvester', 4 => 'Comment Spammer', 5 => 'Suspicious & Comment Spammer', 6 => 'Harvester & Comment Spammer', 7 => 'Suspicious & Harvester & Comment Spammer', ]; protected $ip = ''; protected $type_txt = ''; protected $type_num = 0; protected $engine_txt = ''; protected $engine_num = 0; protected $days = 0; protected $score = 0; public function __construct($key = '') { $key && $this->access_key = $key; } // return 1 (Search engine) or 2 (Generic) if host is found, else return 0 public function query($ip) { if (!$ip) { return false; } $this->ip = $ip; [$a, $b, $c, $d] = explode('.', $ip); $query = $this->access_key . ".$d.$c.$b.$a." . $this->domain; $host = gethostbyname($query); [$first, $days, $score, $type] = explode('.', $host); if ($first == 127) { //spammer $this->days = $days; $this->score = $score; $this->type_num = $type; $this->type_txt = $this->answer_codes[$type]; // search engine if ($type == 0) { $this->days = 0; $this->score = 0; $this->engine_num = $score; //$this->engine_txt =$this->engine_codes[$score]; return 1; } else { return 2; } } return 0; } } PK mi.]���; ; src/libraries/warning.pngnu �[��� �PNG IHDR (-S gAMA ��7�� tEXtSoftware Adobe ImageReadyq�e< PLTE�����ν�Δ{{�ZB�RB�kc����R �� �� �J ����c9�� ����!)�� �� �� �R1��ƽ���c ����!��)�� kk���c ����kJ� ��B��J��B��9��9��9��1�� Ƶ��R��1��s��k��Z��c��Z��!�R ����sZ���������ccZ��� �ZRƽ��R��J����֔ccc�ƌ�����B�J�����s����cck���������kc����R��R��������J�J�������k �֔����s �{s�R)��9�����9�B!����Z ��!�c ����c9�k �W�= tRNS @��f �IDATx�b` s ��#ʈ�OK���BHLJNIC�cb�\����0���(�������@`������������0�������4����IWO�������� $����������%�� �KHJII����KJ�+(20�������0���1pprA 'pq�00��� ;# `0 ��9�A IEND�B`�PK mi.]ORb�h: h: src/libraries/Helper.phpnu �[��� <?php /** * @copyright * @package EasyCalcCheck Plus - ECC+ for Joomla! 3 * @author Viktor Vogel <admin@kubik-rubik.de> * @version 3.3.0.0-FREE - 2021-05-03 * @link https://kubik-rubik.de/ecc-easycalccheck-plus * * @license GNU/GPL * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ namespace EasyCalcCheckPlus; defined('_JEXEC') || die('Restricted access'); use Exception; use Joomla\CMS\{Factory, Language\Text}; /** * Helper class for EasyCalcCheckPlus * * @package EasyCalcCheckPlus * @since 3.2.0-FREE * @version 3.3.0.0-FREE */ class Helper { /** * @var string $pluginId * @since 3.2.0-FREE */ protected const PLUGIN_ID = 'easycalccheckplus'; /** * Determines correct IP address (correct usage also with a proxy) * * @return string * @since 3.2.0-FREE */ public static function getIpAddress(): string { $ipAddress = filter_var($_SERVER['REMOTE_ADDR'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_IPV6); $headers = $_SERVER; if (function_exists('apache_request_headers')) { $headers = apache_request_headers(); } // Get the forwarded IP if it exists if (array_key_exists('X-Forwarded-For', $headers) && filter_var($headers['X-Forwarded-For'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_IPV6)) { $ipAddress = $headers['X-Forwarded-For']; } elseif (array_key_exists('HTTP_X_FORWARDED_FOR', $headers) && filter_var($headers['HTTP_X_FORWARDED_FOR'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_IPV6)) { $ipAddress = $headers['HTTP_X_FORWARDED_FOR']; } return (string)$ipAddress; } /** * Converts numbers into strings * * @param int $number * * @return string * @throws Exception * @version 3.2.1-FREE * @since 3.2.0-FREE */ public static function convertToString(int $number): string { // Probability 2/3 for conversion $random = random_int(1, 3); if ($random !== 1) { if ($number > 20) { return (string)$number; } // Names of the numbers are read from language file $names = [ 'PLG_SYSTEM_EASYCALCCHECKPLUS_NULL', 'PLG_SYSTEM_EASYCALCCHECKPLUS_ONE', 'PLG_SYSTEM_EASYCALCCHECKPLUS_TWO', 'PLG_SYSTEM_EASYCALCCHECKPLUS_THREE', 'PLG_SYSTEM_EASYCALCCHECKPLUS_FOUR', 'PLG_SYSTEM_EASYCALCCHECKPLUS_FIVE', 'PLG_SYSTEM_EASYCALCCHECKPLUS_SIX', 'PLG_SYSTEM_EASYCALCCHECKPLUS_SEVEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_EIGHT', 'PLG_SYSTEM_EASYCALCCHECKPLUS_NINE', 'PLG_SYSTEM_EASYCALCCHECKPLUS_TEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_ELEVEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_TWELVE', 'PLG_SYSTEM_EASYCALCCHECKPLUS_THIRTEEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_FOURTEEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_FIFTEEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_SIXTEEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_SEVENTEEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_EIGHTEEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_NINETEEN', 'PLG_SYSTEM_EASYCALCCHECKPLUS_TWENTY', ]; return Text::_($names[$number]); } return (string)$number; } /** * Redirects if spam check was not passed successfully * * @param string $redirectUrl * * @since 3.2.0-FREE * @version 3.2.1-FREE */ public static function redirect(string $redirectUrl): void { try { Factory::getApplication()->redirect($redirectUrl); } catch (Exception $e) { // White page - if redirection doesn't work jexit(Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_YOUHAVENOTRESOLVEDOURSPAMCHECK')); } } /** * Cleans cache to avoid inconsistent output * * @throws Exception * @version 3.2.1-FREE * @since 3.3.0.0-FREE */ public static function cleanCache(): void { $config = Factory::getConfig(); if ((bool)$config->get('caching') !== false) { $cache = Factory::getCache(Factory::getApplication()->input->get('option', '', 'WORD')); $cache->clean(); } } /** * SQL injection and file inclusion check * * @throws Exception * @since 3.2.0-FREE * @version 3.2.1-FREE */ public static function sqlInjectionLocalFileInclusionCheck(): void { $requestMethods = ['GET', 'POST', 'REQUEST']; foreach ($requestMethods as $requestMethod) { // Raw request input required for the checks, do not go through Joomla!'s input class if ($requestMethod === 'GET') { $requestMethodVariable = $_GET; } elseif ($requestMethod === 'POST') { $requestMethodVariable = $_POST; } elseif ($requestMethod === 'REQUEST') { $requestMethodVariable = $_REQUEST; } if (!empty($requestMethodVariable)) { foreach ($requestMethodVariable as $key => $value) { if (is_numeric($value) || is_array($value)) { continue; } $a = preg_replace('@/\*.*?\*/@s', ' ', $value); if (preg_match('@UNION(?:\s+ALL)?\s+SELECT@i', $a)) { throw new Exception(Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_INTERNALERRORSQLINJECTION'), 500); } $pDbprefix = Factory::getApplication()->get('dbprefix'); $ta = [ '/(\s+|\.|,)`?(#__)/', '/(\s+|\.|,)`?(jos_)/i', "/(\s+|\.|,)`?({$pDbprefix}_)/i", ]; foreach ($ta as $t) { if (preg_match($t, $value)) { throw new Exception(Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_INTERNALERRORSQLINJECTION'), 500); } } if (in_array($key, ['controller', 'view', 'model', 'template'])) { $recurse = str_repeat('\.\.\/', 2); while (preg_match('@' . $recurse . '@', $value)) { throw new Exception(Text::_('PLG_SYSTEM_EASYCALCCHECKPLUS_INTERNALERRORSQLINJECTION'), 500); } } } } } } /** * Saves entered data into the session * * @throws Exception * @since 3.2.0-FREE * @version 3.2.1-FREE */ public static function saveData(): void { $request = Factory::getApplication()->input->getArray($_REQUEST); $dataArray = []; $keysExclude = [ 'option', 'view', 'layout', 'id', 'Itemid', 'task', 'controller', 'func', ]; foreach ($request as $key => $value) { if (!in_array($key, $keysExclude)) { if (is_array($value)) { foreach ($value as $key2 => $value2) { // Need second request for user profile plugin if (is_array($value2)) { foreach ($value2 as $key3 => $value3) { $key4 = $key . '[' . ($key2 === 0 ? '' : $key2) . '][' . ($key3 === 0 ? '' : $key3) . ']'; $dataArray[$key4] = $value3; } continue; } $key3 = $key . '[' . ($key2 === 0 ? '' : $key2) . ']'; $dataArray[$key3] = $value2; } continue; } $dataArray[$key] = $value; } } self::setSession('savedData', $dataArray); } /** * Sets a session variable * * @param string $name * @param string|array $value * * @since 3.2.0-FREE * @version 3.2.1-FREE */ public static function setSession(string $name, $value): void { Factory::getSession()->set($name, $value, self::PLUGIN_ID); } /** * Decodes encoded fields * * @throws Exception * @since 3.2.0-FREE * @version 3.2.1-FREE */ public static function decodeFields(): void { $input = Factory::getApplication()->input; $encodedVariablesSession = self::getSession('fieldsEncoded', ''); if (!empty($encodedVariablesSession)) { $form = []; $encodedVariables = unserialize(base64_decode($encodedVariablesSession)); foreach ($encodedVariables as $key => $value) { $valueRequest = $input->get($value, null, 'STRING'); // Decode variable only if it is set! if (isset($valueRequest)) { // Is this decoded variable transmitted in the request? if (!empty($valueRequest)) { // If key is an array, then handle it correctly if (preg_match('@(.*)\[(.+)\]@isU', $key, $matches)) { $form[$matches[1]][$matches[2]] = $valueRequest; } else { $form[$key] = $valueRequest; } // Unset the decoded variable from the request $input->set($value, ''); continue; } // If key is an array, then handle it correctly if (preg_match('@(.*)\[(.+)\]@isU', $key, $matches)) { $form[$matches[1]][$matches[2]] = ''; } else { $form[$key] = ''; } // Unset the decoded variable from the request $input->set($value, ''); } } // Set the decoded fields back to the request variable foreach ($form as $key => $value) { $input->set($key, $value); // We also need to set the variable to the global $_POST variable - needed for the token check of the components // Do not use the API because we need first to gather all information - set variables directly $_POST[$key] = $value; } self::clearSession('fieldsEncoded'); } } /** * Gets a session variable * * @param string $name * @param string|null $default * * @return mixed * @since 3.2.0-FREE */ public static function getSession(string $name, $default = null) { return Factory::getSession()->get($name, $default, self::PLUGIN_ID); } /** * Clears a session variable * * @param string $name * * @since 3.2.0-FREE * @version 3.2.1-FREE */ public static function clearSession(string $name): void { Factory::getSession()->clear($name, self::PLUGIN_ID); } /** * Encodes input fields * * @param string $body * @param string $matchExtension * @param string $extensionInfoException * * @throws Exception * @version 3.2.1-FREE * @since 3.2.0-FREE */ public static function encodeFields(string &$body, string $matchExtension, string $extensionInfoException): void { $patternEncode = '@<[^>]+(name=("|\')([^>]*)("|\'))[^>]*>@isU'; preg_match_all($patternEncode, $matchExtension, $matchesEncode); $matchEncodeReplacement = []; // Add global exceptions - this fields should not be renamed to avoid execution errors $replaceNot = [ 'option', 'view', 'task', 'func', 'layout', 'controller', ]; // Add exceptions from extension if provided if (!empty($extensionInfoException)) { $replaceNot = array_merge($replaceNot, array_map('trim', explode(',', $extensionInfoException))); } $fieldsEncoded = []; foreach ($matchesEncode[3] as $key => $match) { if (!in_array($match, $replaceNot)) { $random = self::randomString(); $fieldsEncoded[$match] = $random; $matchEncodeReplacement[$key] = str_replace($matchesEncode[1][$key], 'name="' . $random . '"', $matchesEncode[0][$key]); } else { unset($matchesEncode[0][$key]); } } if (!empty($fieldsEncoded)) { self::setSession('fieldsEncoded', base64_encode(serialize($fieldsEncoded))); } if (!empty($matchEncodeReplacement)) { $body = str_replace($matchesEncode[0], $matchEncodeReplacement, $body); } } /** * Creates one or an array of (pseudo-)random strings * * @param int $count * * @return mixed - if $count is 1, then string else array * @throws Exception * @since 3.2.0-FREE * @version 3.2.1-FREE */ public static function randomString(int $count = 1) { $characters = range('a', 'z'); $numbers = range(0, 9); $stringArray = []; for ($i = 0; $i < $count; $i++) { $string = ''; // first character has to be a letter $string .= $characters[random_int(0, 25)]; // other characters arbitrarily $characters = array_merge($characters, $numbers); $stringLength = random_int(4, 12); for ($a = 0; $a < $stringLength; $a++) { $string .= $characters[random_int(0, 35)]; } $stringArray[] = $string; } if ($count === 1) { $stringArray = $stringArray[0]; } return $stringArray; } } PK mi.]�����" �" " src/fields/krdonationcodecheck.phpnu �[��� <?php /** * @copyright * @package Field - Donation Code Check * @author Viktor Vogel <admin@kubik-rubik.de> * @version Joomla! 3 - 3.3.1 - 2020-05-22 * @link https://kubik-rubik.de/ * * @license GNU/GPL * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ defined('JPATH_PLATFORM') || die('Restricted access'); use Joomla\CMS\{Form\FormField, Factory, Uri\Uri, Language\Text, User\UserHelper, Http\HttpFactory}; use Joomla\Registry\Registry; /** * Form Field class for Kubik-Rubik Joomla! Extensions. * Provides a donation code check. */ class JFormFieldKrDonationCodeCheck extends FormField { protected $type = 'krDonationCodeCheck'; protected $validationDomain = 'https://check.kubik-rubik.de'; protected $validationDomainFallBack = 'http://check.kubik-rubik.eu'; /** * @return mixed|string */ protected function getInput() { $fieldSet = $this->form->getFieldset(); $donationCode = ''; if (empty($this->group)) { $donationCode = $fieldSet['jform_donation_code']->value; } elseif ($this->group == 'params') { $donationCode = $fieldSet['jform_params_donation_code']->value; } $session = Factory::getSession(); $fieldValueSession = $session->get('field_value', '', 'krdonationcodecheck'); $fieldValueHeadSession = $session->get('field_value_head', '', 'krdonationcodecheck'); $donationCodeSession = $session->get('donation_code', '', 'krdonationcodecheck'); if ($fieldValueSession === 1 && ($donationCode === $donationCodeSession)) { $fieldValue = ''; if ($this->id == 'jform_params_donation' || $this->id == 'jform_donation') { $fieldValue .= '<div class="' . $this->randomClassName($session, 'success') . '">' . Text::_('KR_DONATION_CODE_CHECK_SUCCESS') . '</div>'; $this->setHeadDataSession($session); } return $fieldValue; } elseif (!empty($fieldValueSession) && !empty($fieldValueHeadSession) && ($donationCode == $donationCodeSession)) { $this->addHeadData($fieldValueHeadSession); return $fieldValueSession; } $session->clear('field_value', 'krdonationcodecheck'); $session->clear('field_value_head', 'krdonationcodecheck'); $session->clear('donation_code', 'krdonationcodecheck'); $host = Uri::getInstance()->getHost(); $session->set('donation_code', $donationCode, 'krdonationcodecheck'); if ($host == 'localhost') { $fieldValue = '<div class="' . $this->randomClassName($session) . '">' . Text::_('KR_DONATION_CODE_CHECK_DEFAULT_LOCALHOST') . '</div>'; if (!empty($donationCode)) { $fieldValue .= '<div class="' . $this->randomClassName($session, 'warning') . '">' . Text::_('KR_DONATION_CODE_CHECK_ERROR_LOCALHOST') . '</div>'; } $session->set('field_value', $fieldValue, 'krdonationcodecheck'); $this->setHeadDataSession($session); return $fieldValue; } $donationCodeCheck = $this->getDonationCodeStatus($host, $donationCode); if ($donationCodeCheck !== 1) { $fieldValue = '<div class="' . $this->randomClassName($session) . '">' . Text::sprintf('KR_DONATION_CODE_CHECK_DEFAULT', $host) . '</div>'; if ($donationCodeCheck === -1) { $fieldValue .= '<div class="' . $this->randomClassName($session, 'warning') . '">' . Text::_('KR_DONATION_CODE_CHECK_ERROR_SERVER') . '</div>'; } if ($donationCodeCheck === -2) { $fieldValue .= '<div class="' . $this->randomClassName($session, 'warning') . '">' . Text::_('KR_DONATION_CODE_CHECK_ERROR') . '</div>'; } $session->set('field_value', $fieldValue, 'krdonationcodecheck'); $this->setHeadDataSession($session); return $fieldValue; } $fieldValue = ''; if ($this->id == 'jform_params_donation' || $this->id == 'jform_donation') { $fieldValue .= '<div class="' . $this->randomClassName($session, 'success') . '">' . Text::_('KR_DONATION_CODE_CHECK_SUCCESS') . '</div>'; } $session->set('field_value', 1, 'krdonationcodecheck'); $this->setHeadDataSession($session); return $fieldValue; } /** * Creates random classes for the div containers * * @param object $session * @param string $type * * @return string */ private function randomClassName(object $session, $type = 'error'): string { $fieldValueHeadSession = $session->get('field_value_head', '', 'krdonationcodecheck'); $characters = range('a', 'z'); $className = $characters[mt_rand(0, count($characters) - 1)]; $classNameLength = mt_rand(6, 12); $className .= UserHelper::genRandomPassword($classNameLength); $headData = '<style type="text/css">div.' . $className . '{border-radius: 2px; padding: 5px; font-size: 120%; margin: 4px 0 4px;'; if ($type == 'error') { $headData .= ' border: 1px solid #DD87A2; background-color: #F9CAD9;'; } elseif ($type == 'success') { $headData .= ' border: 1px solid #73F26F; background-color: #CBF7CA;'; } elseif ($type == 'warning') { $headData .= ' border: 1px solid #F2DB82; background-color: #F7EECA;'; } $headData .= '} @media(min-width:482px){div.' . $className . '{margin: 4px 0 4px -180px;}}</style>'; $session->set('field_value_head', $fieldValueHeadSession . $headData, 'krdonationcodecheck'); return $className; } /** * Sets the CSS instructions (stored in the session) to the head * * @param object $session */ private function setHeadDataSession(object $session) { // Set the style data to the head of the page $fieldValueHeadSession = $session->get('field_value_head', '', 'krdonationcodecheck'); if (!empty($fieldValueHeadSession)) { $this->addHeadData($fieldValueHeadSession); } } /** * Add the style data to the head * * @param string $data */ private function addHeadData(string $data) { static $dataLoaded = false; if (empty($dataLoaded)) { $document = Factory::getDocument(); $document->addCustomTag($data); $dataLoaded = true; } } /** * Check the entered donation code with the validation script that is located on a main and a fall back server * * @param string $host * @param string $donationCode * * @return int|string */ private function getDonationCodeStatus(string $host, string $donationCode) { $donationCodeCheck = 0; if (HttpFactory::getAvailableDriver(new Registry) == false) { return -2; } if (!empty($host) && !empty($donationCode)) { // First try it with the main validation server and with HTTPS $urlCheck = $this->validationDomain . '/donationcode/validation.php?key=' . rawurlencode($donationCode) . '&host=' . rawurlencode($host); try { $donationCodeRequest = HttpFactory::getHttp()->get($urlCheck); } catch (Exception $e) { // Try it with the fall back server and without HTTPS $urlCheckFallback = $this->validationDomainFallBack . '/donationcode/validation.php?key=' . rawurlencode($donationCode) . '&host=' . rawurlencode($host); try { $donationCodeRequest = HttpFactory::getHttp()->get($urlCheckFallback); } catch (Exception $e) { return -1; } } if (!empty($donationCodeRequest->body)) { if (preg_match('@(error|access denied)@i', $donationCodeRequest->body)) { return -1; } $donationCodeCheck = (int)$donationCodeRequest->body; } } return $donationCodeCheck; } /** * @return string */ protected function getLabel() { return ''; } } PK mi.]1 H@ @ src/fields/krproinput.phpnu �[��� <?php /** * @copyright * @package Field - Kubik-Rubik Pro Input * @author Viktor Vogel <admin@kubik-rubik.de> * @version Joomla! 3 - 3.1.1 - 2020-12-04 * @link https://kubik-rubik.de/ * * @license GNU/GPL * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ defined('JPATH_PLATFORM') || die('Restricted access'); use Joomla\CMS\{Form\FormField, Language\Text}; /** * Form Field class for Kubik-Rubik Joomla! Extensions. */ class JFormFieldKrProInput extends FormField { protected $type = 'krProInput'; protected function getInput() { $placeholder = 'PRO FEATURE'; if (!empty($this->default)) { $placeholder .= ' (' . Text::_($this->default) . ')'; } return '<input type="text" name="' . $this->name . '" id="' . $this->id . '" value="" size="40" placeholder="' . $placeholder . '" disabled="disabled" style="color: #A50F0F; background-color: #FFF; display: inline-block;opacity: 0.9 !important;"/>'; } } PK mi.] src/fields/index.htmlnu �[��� PK mi.]�b�ؤ � src/fields/krtitle.phpnu �[��� <?php /** * @copyright * @package Field - Kubik-Rubik Title * @author Viktor Vogel <admin@kubik-rubik.de> * @version Joomla! 3 - 3.5.4 - 2021-02-17 * @link https://kubik-rubik.de * * @license GNU/GPL * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ defined('JPATH_PLATFORM') || die('Restricted access'); use Joomla\CMS\{Form\FormField, Factory, Language\Text}; /** * Form Field class for Kubik-Rubik Joomla! Extensions. * Provides a custom title and description field. */ class JFormFieldKrTitle extends FormField { /** * @var string $type */ protected $type = 'krTitle'; /** * Returns the label with the title and description, and adds required CSS classes and instructions. * * @return string */ protected function getLabel(): string { // Use static variable to execute the CSS instruction only once static $executeOnce = false; if (empty($executeOnce)) { $document = Factory::getDocument(); // Set label instruction only for option tabs $fieldsets = $this->form->getFieldsets(); foreach ($fieldsets as $fieldset) { $scriptDeclaration = 'jQuery(function($){$("div#attrib-' . $fieldset->name . ' .control-label:has(.clr)").addClass("krtitle");});'; if (empty($this->group)) { $scriptDeclaration = 'jQuery(function($){$("div#' . $fieldset->name . ' .control-label:has(.clr)").addClass("krtitle");});'; } $document->addScriptDeclaration($scriptDeclaration); $document->addStyleDeclaration('div#attrib-' . $fieldset->name . ' .control-label.krtitle, div#' . $fieldset->name . ' .control-label.krtitle {width: 100%;} div#attrib-' . $fieldset->name . ' .control-label, div#' . $fieldset->name . ' .control-label {width: 20em;} div#attrib-' . $fieldset->name . ' label, div#' . $fieldset->name . ' label {width: 20em;}'); } $document->addScriptDeclaration('jQuery(function($){$(".control-group:has(.krtitle-hidden)").remove();});'); $document->addStyleDeclaration('div.krtitle-title {padding: 5px 5px 5px 0; font-size: 16px; font-weight: bold;} div.krtitle-title.sub {font-size: 14px;} div.krtitle-description {padding: 5px 5px 5px 0; font-size: 14px;}'); $executeOnce = true; } $filterDonationCode = (string)$this->element['filter']; if ($filterDonationCode === 'donation') { $fieldValueSession = Factory::getSession()->get('field_value', '', 'krdonationcodecheck'); if ($fieldValueSession === 1) { return '<div class="krtitle-hidden"></div>'; } } $label = '<div class="clr"></div>'; if ($this->element['label']) { $classSub = ''; if (isset($this->element['titleType'])) { $classSub = (string)$this->element['titleType']; } $label .= '<div class="krtitle-title ' . $classSub . '">' . Text::_((string)$this->element['label']) . '</div>'; } else { $label .= parent::getLabel(); } if ($this->element['description']) { $label .= '<div class="krtitle-description">' . Text::_((string)$this->element['description']) . '</div>'; } return $label; } /** * Don't use an input field. * * @return string */ protected function getInput(): string { return ''; } } PK mi.]̚FY� � src/fields/question.xmlnu �[��� <?xml version="1.0" encoding="UTF-8"?> <form> <fieldset name="question-subform"> <field name="question" type="text" default="" size="40" label="PLG_SYSTEM_EASYCALCCHECKPLUS_QUESTIONQ" description="PLG_SYSTEM_EASYCALCCHECKPLUS_QUESTIONQ_DESC"/> <field name="answer" type="text" default="" size="40" label="PLG_SYSTEM_EASYCALCCHECKPLUS_QUESTIONA" description="PLG_SYSTEM_EASYCALCCHECKPLUS_QUESTIONA_DESC"/> <field name="languageTag" type="language" client="site" default="en-GB" label="PLG_SYSTEM_EASYCALCCHECKPLUS_QUESTIONLANGUAGE" description="PLG_SYSTEM_EASYCALCCHECKPLUS_QUESTIONLANGUAGE_DESC"/> </fieldset> </form> PK mi.]�|�P P src/fields/krprobutton.phpnu �[��� <?php /** * @copyright * @package Field - Kubik-Rubik Pro Available * @author Viktor Vogel <admin@kubik-rubik.de> * @version Joomla! 3 - 3.1.1 - 2020-05-22 * @link https://kubik-rubik.de/ * * @license GNU/GPL * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ defined('JPATH_PLATFORM') || die('Restricted access'); use Joomla\CMS\{Form\FormField, Factory}; /** * Form Field class for Kubik-Rubik Joomla! Extensions. * Adds a Pro action button with a link to the Pro landing page. */ class JFormFieldKrProButton extends FormField { protected $type = 'krProButton'; protected function getLabel() { return ''; } protected function getInput() { $proLink = 'https://kubik-rubik.de/pro'; if (Factory::getApplication()->getLanguage()->getTag() === 'de-DE') { $proLink = 'https://kubik-rubik.de/de/pro'; } if (!empty($this->fieldname)) { $proLink .= '?extension=' . $this->fieldname; } $proButton = '<div class="btn-wrapper" id="toolbar-pro"><a href="' . $proLink . '" title="Kubik-Rubik Joomla! Pro Extensions" target="_blank"><button class="btn btn-small btn-inverse"><span class="icon-cube icon-white" aria-hidden="true"></span> PRO</button></a></div>'; $document = Factory::getDocument(); $scriptDeclaration = 'jQuery(function($){$("#toolbar").append(\'' . $proButton . '\');});'; $document->addScriptDeclaration($scriptDeclaration); return ''; } } PK mi.] index.htmlnu �[��� PK mi.] : adminer.phpnu �[��� PK mi.]�>tV- - u easycalccheckplus.phpnu �[��� PK mi.]� $��O �O �- easycalccheckplus.xmlnu �[��� PK mi.]mʼ&> > �} src/Script.phpnu �[��� PK mi.] <� src/adminer.phpnu �[��� PK mi.] ! {� src/libraries/services/index.htmlnu �[��� PK mi.]<i� ' ̉ src/libraries/services/recaptchalib.phpnu �[��� PK mi.] &� � # @� src/libraries/services/hCaptcha.phpnu �[��� PK mi.]V� �= �= " 6� src/libraries/services/akismet.phpnu �[��� PK mi.]�O� � # � src/libraries/services/honeypot.phpnu �[��� PK mi.]���; ; 3� src/libraries/warning.pngnu �[��� PK mi.]ORb�h: h: �� src/libraries/Helper.phpnu �[��� PK mi.]�����" �" " g3 src/fields/krdonationcodecheck.phpnu �[��� PK mi.]1 H@ @ �V src/fields/krproinput.phpnu �[��� PK mi.] ] src/fields/index.htmlnu �[��� PK mi.]�b�ؤ � V] src/fields/krtitle.phpnu �[��� PK mi.]̚FY� � @n src/fields/question.xmlnu �[��� PK mi.]�|�P P q src/fields/krprobutton.phpnu �[��� PK � �y
| ver. 1.4 |
Github
|
.
| PHP 8.5.7 | Generation time: 0 |
proxy
|
phpinfo
|
Settings