Changeset 1184 in ExiteCMS for trunk/includes/comments_include.php

Timestamp:

12/31/07 13:01:02 (4 years ago)

Author:

hverton

Message:

Added a captcha validation check to comment posts of guests

File:

• trunk/includes/comments_include.php (modified) (4 diffs)

trunk/includes/comments_include.php

@@ -25 +25 @@
 
     $variables = array();
-    
+
     if ((iMEMBER || $settings['guestposts'] == "1") && isset($_POST['post_comment'])) {
+
+        $result = dbquery("DELETE FROM ".$db_prefix."captcha WHERE captcha_datestamp<'".(time()-900)."'");
+
         $flood = false;
         if (dbrows(dbquery("SELECT $ccol FROM ".$db_prefix."$cdb WHERE $ccol='$comment_id'"))==0) {
@@ -38 +41 @@
             if (isNum($comment_name)) $comment_name="";
         }
+        
+        // captcha check for guest posts
+        $cic = (iGUEST && !check_captcha($_POST['captcha_encode'], $_POST['captcha_code'])) ? "&cic=1" : "";
+
         $comment_message = trim(stripinput(censorwords($_POST['comment_message'])));
         $comment_smileys = isset($_POST['disable_smileys']) ? "0" : "1";
-        if ($comment_name != "" && $comment_message != "") {
+        if ($comment_name != "" && $comment_message != "" && $cic == "") {
             $result = dbquery("SELECT MAX(comment_datestamp) AS last_comment FROM ".$db_prefix."comments WHERE comment_ip='".USER_IP."'");
             if (!iSUPERADMIN || dbrows($result) > 0) {
@@ -54 +61 @@
             if (!$flood) $result = dbquery("INSERT INTO ".$db_prefix."comments (comment_item_id, comment_type, comment_name, comment_message, comment_smileys, comment_datestamp, comment_ip) VALUES ('$comment_id', '$comment_type', '$comment_name', '$comment_message', '$comment_smileys', '".time()."', '".USER_IP."')");
         }
-        redirect($clink);
+        if ($cic != "") redirect($clink.$cic);
     }
 
@@ -77 +84 @@
     $variables['comment_id'] = $comment_id;
     $variables['post_link'] = $clink;
+    $variables['cic'] = (isset($_GET['cic']) && !empty($_GET['cic'])) ? $_GET['cic'] : "";
 
     // define the body panel variables