File: /storage/v12674/airalle/public_html/wp-content/plugins/wp-ban/ban-options.php
<?php
if ( ! defined( 'ABSPATH' ) ) {
exit;
}
### Check Whether User Can Manage Ban Options
if ( ! current_user_can( 'manage_options' ) ) {
die( 'Access Denied' );
}
### Variables
$base_name = plugin_basename('wp-ban/ban-options.php');
$base_page = 'admin.php?page='.$base_name;
$admin_login = trim($current_user->user_login);
# Allow HTML
$allowed_tags = wp_kses_allowed_html( 'post' );
$allowed_tags['html'] = true;
$allowed_tags['head'] = true;
$allowed_tags['meta'] = array(
'charset' => true,
);
$allowed_tags['body'] = true;
### Form Processing
// Update Options
if( ! empty( $_POST['Submit'] ) ) {
check_admin_referer('wp-ban_templates');
$text = '';
$banned_options = array();
$banned_options['reverse_proxy'] = isset( $_POST['banned_option_reverse_proxy'] ) ? intval( $_POST['banned_option_reverse_proxy'] ) : 0;
$banned_ips_post = ! empty( $_POST['banned_ips'] ) ? explode( "\n", trim( $_POST['banned_ips'] ) ) : array();
$banned_ips_range_post = ! empty( $_POST['banned_ips_range'] ) ? explode( "\n", trim( $_POST['banned_ips_range'] ) ) : array();
$banned_hosts_post = ! empty( $_POST['banned_hosts'] ) ? explode( "\n", trim($_POST['banned_hosts'] ) ) : array();
$banned_referers_post = ! empty( $_POST['banned_referers'] ) ? explode( "\n", trim($_POST['banned_referers'] ) ) : array();
$banned_user_agents_post = ! empty( $_POST['banned_user_agents'] ) ? explode( "\n", trim($_POST['banned_user_agents'] ) ) : array();
$banned_exclude_ips_post = ! empty( $_POST['banned_exclude_ips'] ) ? explode( "\n", trim( $_POST['banned_exclude_ips'] ) ) : array();
$banned_message = ! empty( $_POST['banned_template_message'] ) ? wp_kses( trim( $_POST['banned_template_message'] ), $allowed_tags ) : '';
$banned_ips = array();
if ( ! empty( $banned_ips_post ) ) {
foreach ( $banned_ips_post as $banned_ip ) {
if( $admin_login === 'admin' && ( $banned_ip === ban_get_ip() || is_admin_ip( $banned_ip ) ) ) {
$text .= '<p style="color: blue;">' . sprintf( __( 'This IP \'%s\' Belongs To The Admin And Will Not Be Added To Ban List', 'wp-ban' ), $banned_ip ) . '</p>';
} else {
$banned_ips[] = esc_html( trim( $banned_ip ) );
}
}
}
$banned_ips_range = array();
if ( ! empty( $banned_ips_range_post ) ) {
foreach( $banned_ips_range_post as $banned_ip_range ) {
$range = explode( '-', $banned_ip_range );
if ( sizeof( $range ) === 2 ) {
$range_start = trim( $range[0] );
$range_end = trim( $range[1] );
if ( $admin_login === 'admin' && ( check_ip_within_range( ban_get_ip(), $range_start, $range_end ) ) ) {
$text .= '<p style="color: blue;">' . sprintf( __( 'The Admin\'s IP \'%s\' Fall Within This Range (%s - %s) And Will Not Be Added To Ban List', 'wp-ban' ), ban_get_ip(), $range_start, $range_end ) . '</p>';
} else {
$banned_ips_range[] = esc_html( trim( $banned_ip_range ) );
}
}
}
}
$banned_hosts = array();
if ( ! empty( $banned_hosts_post ) ) {
foreach ( $banned_hosts_post as $banned_host ) {
if ( $admin_login === 'admin' && ( $banned_host === @gethostbyaddr( ban_get_ip() ) || is_admin_hostname( $banned_host ) ) ) {
$text .= '<p style="color: blue;">' . sprintf( __( 'This Hostname \'%s\' Belongs To The Admin And Will Not Be Added To Ban List', 'wp-ban' ), $banned_host ) . '</p>';
} else {
$banned_hosts[] = esc_html( trim( $banned_host ) );
}
}
}
$banned_referers = array();
if ( ! empty( $banned_referers_post ) ) {
foreach ( $banned_referers_post as $banned_referer ) {
if ( is_admin_referer( $banned_referer ) ) {
$text .= '<p style="color: blue;">' . sprintf( __( 'This Referer \'%s\' Belongs To This Site And Will Not Be Added To Ban List', 'wp-ban' ), $banned_referer ) . '</p>';
} else {
$banned_referers[] = esc_html( trim( $banned_referer ) );
}
}
}
$banned_user_agents = array();
if ( ! empty( $banned_user_agents_post ) ) {
foreach ( $banned_user_agents_post as $banned_user_agent ) {
if ( is_admin_user_agent( $banned_user_agent ) ) {
$text .= '<p style="color: blue;">' . sprintf( __( 'This User Agent \'%s\' Is Used By The Current Admin And Will Not Be Added To Ban List', 'wp-ban' ), $banned_user_agent ) . '</p>';
} else {
$banned_user_agents[] = esc_html( trim( $banned_user_agent ) );
}
}
}
$banned_exclude_ips = array();
if ( ! empty( $banned_exclude_ips_post ) ) {
foreach ( $banned_exclude_ips_post as $banned_exclude_ip ) {
$banned_exclude_ips[] = esc_html( trim( $banned_exclude_ip ) );
}
}
$update_ban_queries = array();
$update_ban_queries[] = update_option( 'banned_options', $banned_options );
$update_ban_queries[] = update_option( 'banned_ips', $banned_ips );
$update_ban_queries[] = update_option( 'banned_ips_range', $banned_ips_range );
$update_ban_queries[] = update_option( 'banned_hosts', $banned_hosts );
$update_ban_queries[] = update_option( 'banned_referers', $banned_referers );
$update_ban_queries[] = update_option( 'banned_user_agents', $banned_user_agents );
$update_ban_queries[] = update_option( 'banned_exclude_ips', $banned_exclude_ips );
$update_ban_queries[] = update_option( 'banned_message', $banned_message );
$update_ban_text = array();
$update_ban_text[] = __( 'Banned Options', 'wp-ban' );
$update_ban_text[] = __( 'Banned IPs', 'wp-ban');
$update_ban_text[] = __( 'Banned IP Range', 'wp-ban');
$update_ban_text[] = __( 'Banned Host Names', 'wp-ban');
$update_ban_text[] = __( 'Banned Referers', 'wp-ban');
$update_ban_text[] = __( 'Banned User Agents', 'wp-ban');
$update_ban_text[] = __( 'Banned Excluded IPs', 'wp-ban');
$update_ban_text[] = __( 'Banned Message', 'wp-ban');
$i = 0;
foreach ( $update_ban_queries as $update_ban_query ) {
if ( $update_ban_query ) {
$text .= '<p style="color: green;">' . $update_ban_text[$i] . ' ' . __( 'Updated', 'wp-ban' ) . '</p>';
}
$i++;
}
if ( empty( $text ) ) {
$text = '<p style="color: red;">' . __( 'No Ban Option Updated', 'wp-ban' ) . '</p>';
}
}
if( ! empty( $_POST['do'] ) ) {
// Decide What To Do
switch( $_POST['do'] ) {
// Credits To Joe (Ttech) - http://blog.fileville.net/
case __('Reset Ban Stats', 'wp-ban'):
check_admin_referer('wp-ban_stats');
if( ! empty( $_POST['reset_ban_stats'] ) &&$_POST['reset_ban_stats'] === 'yes' ) {
$banned_stats = array('users' => array(), 'count' => 0);
update_option('banned_stats', $banned_stats);
$text = '<p style="color: green;">'.__('All IP Ban Stats And Total Ban Stat Reseted', 'wp-ban').'</p>';
} else {
$banned_stats = get_option('banned_stats');
$delete_ips = (array) $_POST['delete_ips'];
foreach($delete_ips as $delete_ip) {
unset($banned_stats['users'][$delete_ip]);
}
update_option('banned_stats', $banned_stats);
$text = '<p style="color: green;">'.__('Selected IP Ban Stats Reseted', 'wp-ban').'</p>';
}
break;
}
}
$banned_ips = get_option('banned_ips');
$banned_ips_range = get_option('banned_ips_range');
$banned_hosts = get_option('banned_hosts');
$banned_referers = get_option('banned_referers');
$banned_user_agents = get_option('banned_user_agents');
$banned_exclude_ips = get_option('banned_exclude_ips');
$banned_ips_display = '';
$banned_ips_range_display = '';
$banned_hosts_display = '';
$banned_referers_display = '';
$banned_user_agents_display = '';
$banned_exclude_ips_display = '';
if(!empty($banned_ips)) {
foreach($banned_ips as $banned_ip) {
$banned_ips_display .= $banned_ip."\n";
}
}
if(!empty($banned_ips_range)) {
foreach($banned_ips_range as $banned_ip_range) {
$banned_ips_range_display .= $banned_ip_range."\n";
}
}
if(!empty($banned_hosts)) {
foreach($banned_hosts as $banned_host) {
$banned_hosts_display .= $banned_host."\n";
}
}
if(!empty($banned_referers)) {
foreach($banned_referers as $banned_referer) {
$banned_referers_display .= $banned_referer."\n";
}
}
if(!empty($banned_user_agents)) {
foreach($banned_user_agents as $banned_user_agent) {
$banned_user_agents_display .= $banned_user_agent."\n";
}
}
if(!empty($banned_exclude_ips)) {
foreach($banned_exclude_ips as $banned_exclude_ip) {
$banned_exclude_ips_display .= $banned_exclude_ip."\n";
}
}
$banned_ips_display = trim($banned_ips_display);
$banned_ips_range_display = trim($banned_ips_range_display);
$banned_hosts_display = trim($banned_hosts_display);
$banned_referers_display = trim($banned_referers_display);
$banned_user_agents_display = trim($banned_user_agents_display);
$banned_exclude_ips_display = trim($banned_exclude_ips_display);
$banned_stats = get_option( 'banned_stats' );
$banned_options = get_option( 'banned_options' );
?>
<script type="text/javascript">
/* <![CDATA[*/
var checked = 0;
function banned_default_templates(template) {
var default_template;
switch(template) {
case "message":
default_template = "<html>\n<head>\n<meta charset=\"utf-8\">\n<title>%SITE_NAME% - %SITE_URL%</title>\n</head>\n<body>\n<div id=\"wp-ban-container\">\n<p style=\"text-align: center; font-weight: bold;\"><?php _e('You Are Banned.', 'wp-ban'); ?></p>\n</div>\n</body>\n</html>";
break;
}
jQuery("#banned_template_" + template).val(default_template);
}
function toggle_checkbox() {
for(i = 0; i < <?php echo sizeof($banned_stats['users']); ?>; i++) {
if(checked == 0) {
jQuery("#ban-" + i).attr("checked", "checked");
} else {
jQuery("#ban-" + i).removeAttr("checked");
}
}
if(checked == 0) {
checked = 1;
} else {
checked = 0;
}
}
jQuery(document).ready(function() {
jQuery('#show_button').click(function(event)
{
event.preventDefault();
var banned_template_message_el = jQuery('#banned_template_message');
if(jQuery(banned_template_message_el).is(':hidden'))
{
jQuery(this).val('<?php _e('Show Current Banned Message', 'wp-ban'); ?>');
jQuery('#banned_preview_message').empty();
jQuery(banned_template_message_el).fadeIn('fast');
}
else
{
jQuery(this).val('<?php _e('Show Banned Message Template', 'wp-ban'); ?>');
jQuery.ajax({type: 'GET', url: '<?php echo admin_url('admin-ajax.php'); ?>', data: 'action=ban-admin', cache: false, success: function(data) {
var html_message = data;
jQuery(banned_template_message_el).fadeOut('fast', function() {
jQuery(html_message).filter('#wp-ban-container').appendTo('#banned_preview_message');
});
}});
}
});
});
/* ]]> */
</script>
<?php if(!empty($text)) { echo '<!-- Last Action --><div id="message" class="updated fade"><p>'.$text.'</p></div>'; } ?>
<!-- Ban Options -->
<form method="post" action="<?php echo admin_url('admin.php?page='.plugin_basename(__FILE__)); ?>">
<?php wp_nonce_field('wp-ban_templates'); ?>
<div class="wrap">
<h2><?php _e('Ban Options', 'wp-ban'); ?></h2>
<table class="widefat">
<thead>
<tr>
<th><?php _e('Your Details', 'wp-ban'); ?></th>
<th><?php _e('Value', 'wp-ban'); ?></th>
</tr>
</thead>
<tr>
<td><?php _e('IP', 'wp-ban'); ?>:</td>
<td><strong><?php echo ban_get_ip(); ?></strong></td>
</tr>
<tr class="alternate">
<td><?php _e('Host Name', 'wp-ban'); ?>:</td>
<td><strong><?php echo @gethostbyaddr(ban_get_ip()); ?></strong></td>
</tr>
<tr>
<td><?php _e('User Agent', 'wp-ban'); ?>:</td>
<td><strong><?php echo (!isset($_SERVER["HTTP_USER_AGENT"]) ? __('Unknown', 'wp-ban') : esc_html($_SERVER['HTTP_USER_AGENT'])); ?></strong></td>
</tr>
<tr class="alternate">
<td><?php _e('Site URL', 'wp-ban'); ?>:</td>
<td><strong><?php echo get_option('home'); ?></strong></td>
</tr>
<tr>
<td valign="top" colspan="2" style="text-align: center;">
<?php _e('Please <strong>DO NOT</strong> ban yourself.', 'wp-ban'); ?>
</td>
</tr>
</table>
<p> </p>
<table class="form-table">
<tr>
<td width="40%" valign="top">
<strong><?php _e('Reverse Proxy Check', 'wp-ban'); ?>:</strong><br />
<?php _e( 'This will assume that incoming requests include the user\'s IP address in the HTTP_X_FORWARDED_FOR (and the request IP will be from your proxy).', 'wp-ban' ); ?>
</td>
<td width="60%">
<label>
<input type="checkbox" name="banned_option_reverse_proxy" value="1"<?php echo ( intval( $banned_options['reverse_proxy'] ) === 1 ) ? ' checked="checked"' : ''; ?> />
<?php _e( 'I am using a reverse proxy.', 'wp-ban' ); ?>
</label>
<p>
<?php _e( 'If you\'re not sure, leave this unchecked. Ticking this box when you don\'t have a reverse proxy will make it easy to bypass the IP ban.', 'wp-ban' ); ?>
</p>
</td>
</tr>
<tr>
<td valign="top">
<strong><?php _e('Banned IPs', 'wp-ban'); ?>:</strong><br />
<?php _e('Use <strong>*</strong> for wildcards.', 'wp-ban'); ?><br />
<?php _e('Start each entry on a new line.', 'wp-ban'); ?><br /><br />
<?php _e('Examples:', 'wp-ban'); ?>
<p style="margin: 2px 0"><strong>»</strong> <span dir="ltr">192.168.1.100</span></p>
<p style="margin: 2px 0"><strong>»</strong> <span dir="ltr">192.168.1.*</span></p>
<p style="margin: 2px 0"><strong>»</strong> <span dir="ltr">192.168.*.*</span></p>
</td>
<td>
<textarea cols="40" rows="10" name="banned_ips" dir="ltr"><?php echo $banned_ips_display; ?></textarea>
</td>
</tr>
<tr>
<td valign="top">
<strong><?php _e('Banned IP Range', 'wp-ban'); ?>:</strong><br />
<?php _e('Start each entry on a new line.', 'wp-ban'); ?><br /><br />
<?php _e('Examples:', 'wp-ban'); ?><br />
<strong>»</strong> <span dir="ltr">192.168.1.1-192.168.1.255</span><br /><br />
<?php _e('Notes:', 'wp-ban'); ?><br />
<strong>»</strong> <?php _e('No Wildcards Allowed.', 'wp-ban'); ?><br />
</td>
<td>
<textarea cols="40" rows="10" name="banned_ips_range" dir="ltr"><?php echo $banned_ips_range_display; ?></textarea>
</td>
</tr>
<tr>
<td valign="top">
<strong><?php _e('Banned Host Names', 'wp-ban'); ?>:</strong><br />
<?php _e('Use <strong>*</strong> for wildcards.', 'wp-ban'); ?><br />
<?php _e('Start each entry on a new line.', 'wp-ban'); ?><br /><br />
<?php _e('Examples:', 'wp-ban'); ?>
<p style="margin: 2px 0"><strong>»</strong> <span dir="ltr">*.sg</span></p>
<p style="margin: 2px 0"><strong>»</strong> <span dir="ltr">*.cn</span></p>
<p style="margin: 2px 0"><strong>»</strong> <span dir="ltr">*.th</span></p>
</td>
<td>
<textarea cols="40" rows="10" name="banned_hosts" dir="ltr"><?php echo $banned_hosts_display; ?></textarea>
</td>
</tr>
<tr>
<td valign="top">
<strong><?php _e('Banned Referers', 'wp-ban'); ?>:</strong><br />
<?php _e('Use <strong>*</strong> for wildcards.', 'wp-ban'); ?><br />
<?php _e('Start each entry on a new line.', 'wp-ban'); ?><br /><br />
<?php _e('Examples:', 'wp-ban'); ?><br />
<strong>»</strong> <span dir="ltr">http://*.blogspot.com</span><br /><br />
<?php _e('Notes:', 'wp-ban'); ?><br />
<strong>»</strong> <?php _e('There are ways to bypass this method of banning.', 'wp-ban'); ?>
</td>
<td>
<textarea cols="40" rows="10" name="banned_referers" dir="ltr"><?php echo $banned_referers_display; ?></textarea>
</td>
</tr>
<tr>
<td valign="top">
<strong><?php _e('Banned User Agents', 'wp-ban'); ?>:</strong><br />
<?php _e('Use <strong>*</strong> for wildcards.', 'wp-ban'); ?><br />
<?php _e('Start each entry on a new line.', 'wp-ban'); ?><br /><br />
<?php _e('Examples:', 'wp-ban'); ?>
<p style="margin: 2px 0"><strong>»</strong> <span dir="ltr">EmailSiphon*</span></p>
<p style="margin: 2px 0"><strong>»</strong> <span dir="ltr">LMQueueBot*</span></p>
<p style="margin: 2px 0"><strong>»</strong> <span dir="ltr">ContactBot*</span></p>
<?php _e('Suggestions:', 'wp-ban'); ?><br />
<strong>»</strong> <?php _e('See <a href="http://www.user-agents.org/">http://www.user-agents.org/</a>', 'wp-ban'); ?>
</td>
<td>
<textarea cols="40" rows="10" name="banned_user_agents" dir="ltr"><?php echo $banned_user_agents_display; ?></textarea>
</td>
</tr>
<tr>
<td valign="top">
<strong><?php _e('Banned Exclude IPs', 'wp-ban'); ?>:</strong><br />
<?php _e('Start each entry on a new line.', 'wp-ban'); ?><br /><br />
<?php _e('Examples:', 'wp-ban'); ?><br />
<strong>»</strong> <span dir="ltr">192.168.1.100</span><br /><br />
<?php _e('Notes:', 'wp-ban'); ?><br />
<strong>»</strong> <?php _e('No Wildcards Allowed.', 'wp-ban'); ?><br />
<strong>»</strong> <?php _e('These Users Will Not Get Banned.', 'wp-ban'); ?>
</td>
<td>
<textarea cols="40" rows="10" name="banned_exclude_ips" dir="ltr"><?php echo $banned_exclude_ips_display; ?></textarea>
</td>
</tr>
<tr>
<td valign="top">
<strong><?php _e('Banned Message', 'wp-ban'); ?>:</strong><br /><br /><br />
<?php _e('Allowed Variables:', 'wp-ban'); ?>
<p style="margin: 2px 0">- %SITE_NAME%</p>
<p style="margin: 2px 0">- %SITE_URL%</p>
<p style="margin: 2px 0">- %USER_ATTEMPTS_COUNT%</p>
<p style="margin: 2px 0">- %USER_IP%</p>
<p style="margin: 2px 0">- %USER_HOSTNAME%</p>
<p style="margin: 2px 0">- %TOTAL_ATTEMPTS_COUNT%</p><br />
<p><?php printf(__('Note: Your message must be within %s', 'wp-ban'), htmlspecialchars('<div id="wp-ban-container"></div>')); ?></p><br />
<input type="button" name="RestoreDefault" value="<?php _e('Restore Default Template', 'wp-ban'); ?>" onclick="banned_default_templates('message');" class="button" /><br /><br />
<input type="button" id="show_button" value="<?php _e('Show Current Banned Message', 'wp-ban'); ?>" class="button" /><br />
</td>
<td>
<textarea cols="100" style="width: 100%;" rows="20" id="banned_template_message" name="banned_template_message"><?php echo stripslashes(get_option('banned_message')); ?></textarea>
<div id="banned_preview_message"></div>
</td>
</tr>
</table>
<p style="text-align: center;">
<input type="submit" name="Submit" class="button" value="<?php _e('Save Changes', 'wp-ban'); ?>" />
</p>
</div>
</form>
<p> </p>
<form method="post" action="<?php echo admin_url('admin.php?page='.plugin_basename(__FILE__)); ?>">
<?php wp_nonce_field('wp-ban_stats'); ?>
<div class="wrap">
<h3><?php _e('Ban Stats', 'wp-ban'); ?></h3>
<br style="clear" />
<table class="widefat">
<thead>
<tr>
<th width="40%" style="text-align: center;"><?php _e('IPs', 'wp-ban'); ?></th>
<th width="30%" style="text-align: center;"><?php _e('Attempts', 'wp-ban'); ?></th>
<th width="30%"><input type="checkbox" id="toogle_checkbox" name="toogle_checkbox" value="1" onclick="toggle_checkbox();" /> <label for="toogle_checkbox"><?php _e('Action', 'wp-ban'); ?></label></th>
</tr>
</thead>
<?php
// Credits To Joe (Ttech) - http://blog.fileville.net/
if(!empty($banned_stats['users'])) {
$i = 0;
ksort($banned_stats['users']);
foreach($banned_stats['users'] as $key => $value) {
if($i%2 == 0) {
$style = '';
} else {
$style = ' class="alternate"';
}
echo "<tr$style>\n";
echo "<td style=\"text-align: center;\">$key</td>\n";
echo "<td style=\"text-align: center;\">".number_format_i18n(intval($value))."</td>\n";
echo "<td><input type=\"checkbox\" id=\"ban-$i\" name=\"delete_ips[]\" value=\"$key\" /> <label for=\"ban-$i\">".__('Reset this IP ban stat?', 'wp-ban')."</label></td>\n";
echo '</tr>'."\n";
$i++;
}
} else {
echo "<tr>\n";
echo '<td colspan="3" align="center">'.__('No Attempts', 'wp-ban').'</td>'."\n";
echo '</tr>'."\n";
}
?>
<tr class="thead">
<td style="text-align: center;"><strong><?php _e('Total Attempts:', 'wp-ban'); ?></strong></td>
<td style="text-align: center;"><strong><?php echo number_format_i18n(intval($banned_stats['count'])); ?></strong></td>
<td><input type="checkbox" id="reset_ban_stats" name="reset_ban_stats" value="yes" /> <label for="reset_ban_stats"><?php _e('Reset all IP ban stats and total ban stat?', 'wp-ban'); ?></label></td>
</tr>
</table>
<p style="text-align: center;"><input type="submit" name="do" value="<?php _e('Reset Ban Stats', 'wp-ban'); ?>" class="button" onclick="return confirm('<?php _e('You Are About To Reset Ban Stats.', 'wp-ban'); ?>\n\n<?php _e('This Action Is Not Reversible. Are you sure?', 'wp-ban'); ?>')" /></p>
</div>
</form>
<p> </p>