configs->get_value('aiowps_enable_bp_register_captcha') == '1' && defined('BP_VERSION')){
//if buddy press feature active add action hook so buddy press can display our errors properly on bp registration form
do_action( 'bp_aiowps-captcha-answer_errors' );
}
$site_key = esc_html( $aio_wp_security->configs->get_value('aiowps_recaptcha_site_key') );
$cap_form = '';
echo $cap_form;
}
/**
* Displays simple maths captcha form
* @global type $aio_wp_security
*/
function display_captcha_form()
{
global $aio_wp_security;
if($aio_wp_security->configs->get_value('aiowps_enable_bp_register_captcha') == '1' && defined('BP_VERSION')){
//if buddy press feature active add action hook so buddy press can display our errors properly on bp registration form
do_action( 'bp_aiowps-captcha-answer_errors' );
}
$cap_form = '';
$cap_form .= '
';
$maths_question_output = $this->generate_maths_question();
$cap_form .= $maths_question_output . '
';
echo $cap_form;
}
function generate_maths_question()
{
global $aio_wp_security;
//For now we will only do plus, minus, multiplication
$equation_string = '';
$operator_type = array('+', '−', '×');
$operand_display = array('word', 'number');
//let's now generate an equation
$operator = $operator_type[rand(0,2)];
if($operator === '×'){
//Don't make the question too hard if multiplication
$first_digit = rand(1,5);
$second_digit = rand(1,5);
}else{
$first_digit = rand(1,20);
$second_digit = rand(1,20);
}
if($operand_display[rand(0,1)] == 'word'){
$first_operand = $this->number_word_mapping($first_digit);
}else{
$first_operand = $first_digit;
}
if($operand_display[rand(0,1)] == 'word'){
$second_operand = $this->number_word_mapping($second_digit);
}else{
$second_operand = $second_digit;
}
//Let's caluclate the result and construct the equation string
if($operator === '+')
{
//Addition
$result = $first_digit+$second_digit;
$equation_string .= $first_operand . ' ' . $operator . ' ' . $second_operand . ' = ';
}
else if($operator === '−')
{
//Subtraction
//If we are going to be negative let's swap operands around
if($first_digit < $second_digit){
$equation_string .= $second_operand . ' ' . $operator . ' ' . $first_operand . ' = ';
$result = $second_digit-$first_digit;
}else{
$equation_string .= $first_operand . ' ' . $operator . ' ' . $second_operand . ' = ';
$result = $first_digit-$second_digit;
}
}
elseif($operator === '×')
{
//Multiplication
$equation_string .= $first_operand . ' ' . $operator . ' ' . $second_operand . ' = ';
$result = $first_digit*$second_digit;
}
//Let's encode correct answer
$captcha_secret_string = $aio_wp_security->configs->get_value('aiowps_captcha_secret_key');
$current_time = time();
$enc_result = base64_encode($current_time.$captcha_secret_string.$result);
$random_str = AIOWPSecurity_Utility::generate_alpha_numeric_random_string(10);
AIOWPSecurity_Utility::is_multisite_install() ? set_site_transient('aiowps_captcha_string_info_'.$random_str, $enc_result, 30 * 60) : set_transient('aiowps_captcha_string_info_'.$random_str, $enc_result, 30 * 60);
$equation_string .= '';
$equation_string .= '';
$equation_string .= '';
return $equation_string;
}
function number_word_mapping($num)
{
$number_map = array(
1 => __('one', 'all-in-one-wp-security-and-firewall'),
2 => __('two', 'all-in-one-wp-security-and-firewall'),
3 => __('three', 'all-in-one-wp-security-and-firewall'),
4 => __('four', 'all-in-one-wp-security-and-firewall'),
5 => __('five', 'all-in-one-wp-security-and-firewall'),
6 => __('six', 'all-in-one-wp-security-and-firewall'),
7 => __('seven', 'all-in-one-wp-security-and-firewall'),
8 => __('eight', 'all-in-one-wp-security-and-firewall'),
9 => __('nine', 'all-in-one-wp-security-and-firewall'),
10 => __('ten', 'all-in-one-wp-security-and-firewall'),
11 => __('eleven', 'all-in-one-wp-security-and-firewall'),
12 => __('twelve', 'all-in-one-wp-security-and-firewall'),
13 => __('thirteen', 'all-in-one-wp-security-and-firewall'),
14 => __('fourteen', 'all-in-one-wp-security-and-firewall'),
15 => __('fifteen', 'all-in-one-wp-security-and-firewall'),
16 => __('sixteen', 'all-in-one-wp-security-and-firewall'),
17 => __('seventeen', 'all-in-one-wp-security-and-firewall'),
18 => __('eighteen', 'all-in-one-wp-security-and-firewall'),
19 => __('nineteen', 'all-in-one-wp-security-and-firewall'),
20 => __('twenty', 'all-in-one-wp-security-and-firewall'),
);
return $number_map[$num];
}
/**
* Verifies the math or Google recaptcha v2 forms
* Returns TRUE if correct answer.
* Returns FALSE on wrong captcha result or missing data.
* @global type $aio_wp_security
* @return boolean
*/
function verify_captcha_submit () {
global $aio_wp_security;
if($aio_wp_security->configs->get_value('aiowps_default_recaptcha')){
//Google reCaptcha enabled
if (array_key_exists('g-recaptcha-response', $_POST)) {
$g_recaptcha_response = isset($_POST['g-recaptcha-response'])?sanitize_text_field($_POST['g-recaptcha-response']):'';
$verify_captcha = $this->verify_google_recaptcha($g_recaptcha_response);
if($verify_captcha === false) {
return false; // wrong answer was entered
}
}else {
// Expected captcha field in $_POST but got none!
return false;
}
}else if($aio_wp_security->configs->get_value('aiowps_enable_login_captcha')) {
// math captcha is enabled
if (array_key_exists('aiowps-captcha-answer', $_POST)) {
$captcha_answer = isset($_POST['aiowps-captcha-answer'])?sanitize_text_field($_POST['aiowps-captcha-answer']):'';
$verify_captcha = $this->verify_math_captcha_answer($captcha_answer);
if ( $verify_captcha === false ) {
return false; // wrong answer was entered
}
} else {
// Expected captcha field in $_POST but got none!
return false;
}
}
return true;
}
/**
* Verifies the math captcha answer entered by the user
* @param type $captcha_answer
* @return boolean
*/
function verify_math_captcha_answer($captcha_answer='') {
global $aio_wp_security;
$captcha_secret_string = $aio_wp_security->configs->get_value('aiowps_captcha_secret_key');
$captcha_temp_string = sanitize_text_field($_POST['aiowps-captcha-temp-string']);
$submitted_encoded_string = base64_encode($captcha_temp_string.$captcha_secret_string.$captcha_answer);
$trans_handle = sanitize_text_field($_POST['aiowps-captcha-string-info']);
$captcha_string_info_trans = (AIOWPSecurity_Utility::is_multisite_install() ? get_site_transient('aiowps_captcha_string_info_'.$trans_handle) : get_transient('aiowps_captcha_string_info_'.$trans_handle));
if($submitted_encoded_string === $captcha_string_info_trans) {
return true;
}else{
return false; // wrong answer was entered
}
}
/**
* Send a query to Google api to verify reCaptcha submission
* @global type $aio_wp_security
* @param type $resp_token
* @return boolean
*/
function verify_google_recaptcha($resp_token='') {
global $aio_wp_security;
$is_humanoid = false;
if ( empty( $resp_token ) ) {
return $is_humanoid;
}
$url = $this->google_verify_recaptcha_url;
$sitekey = $aio_wp_security->configs->get_value('aiowps_recaptcha_site_key');
$secret = $aio_wp_security->configs->get_value('aiowps_recaptcha_secret_key');
$ip_address = AIOWPSecurity_Utility_IP::get_user_ip_address();
$response = wp_safe_remote_post( $url, array(
'body' => array(
'secret' => $secret,
'response' => $resp_token,
'remoteip' => $ip_address,
),
) );
if ( wp_remote_retrieve_response_code( $response ) != 200 ) {
return $is_humanoid;
}
$response = wp_remote_retrieve_body( $response );
$response = json_decode( $response, true );
if(isset( $response['success'] ) && $response['success'] == true) {
$is_humanoid = true;
}
return $is_humanoid;
}
}