PageRenderTime 48ms CodeModel.GetById 11ms RepoModel.GetById 0ms app.codeStats 1ms

/wp-content/plugins/sabre/classes/sabre_class.php

https://bitbucket.org/crypticrod/sr_wp_code
PHP | 1662 lines | 1326 code | 201 blank | 135 comment | 232 complexity | e41e4c5557b57f79d981252aaad6e5de MD5 | raw file
Possible License(s): AGPL-1.0, GPL-2.0, LGPL-2.1, GPL-3.0, LGPL-2.0, AGPL-3.0

Large files files are truncated, but you can click here to view the full file

    

  1. <?php

    2. 

  2. 

    3. 

  3. include(SABREPATH.'classes/wordgen_class.php');

    4. 

  4. 

    5. 

  5. class Sabre {

    6. 

  6. 

    7. 

  7. var $DB_VERSION = 7;

    8. 

  8. 

    9. 

  9. var $VERSION = '1.2.0';

    10. 

  10. 

    11. 

  11. var $custom_logo;

    12. 

  12. 

    13. 

  13. /***********************************************************************/

    14. 

  14. /* Initialization                                                      */

    15. 

  15. /***********************************************************************/

    16. 

  16. 

    17. 

  17. function init() {

    18. 

  18. 

    19. 

  19. 	load_plugin_textdomain('sabre', false, SABREDIR . '/languages');

    20. 

  20. 

    21. 

  21. }

    22. 

  22. 

    23. 

  23. /***********************************************************************/

    24. 

  24. /* Add Sabre page in the Admin/Manage menu                             */

    25. 

  25. /***********************************************************************/

    26. 

  26. 

    27. 

  27. function options() {

    28. 

  28. 

    29. 

  29. 	if ((!is_multisite() && current_user_can( 'manage_options' )) || (is_multisite() && is_super_admin()))

    30. 

  30. 	add_management_page(__('Sabre Options', 'sabre'), 'Sabre', 'administrator', "sabre", array(&$this, 'option_page'));

    31. 

  31. }

    32. 

  32. 

    33. 

  33. /***********************************************************************/

    34. 

  34. /* Handling of Sabre in the Admin/Manage menu                          */

    35. 

  35. /***********************************************************************/

    36. 

  36. 

    37. 

  37. function option_page() {

    38. 

  38. 

    39. 

  39. 	require_once(SABREPATH . 'classes/sabre_class_admin.php');

    40. 

  40. 

    41. 

  41. }

    42. 

  42. 

    43. 

  43. /**********************************************************************/

    44. 

  44. /* Get Sabre options                                                  */

    45. 

  45. /**********************************************************************/

    46. 

  46. 

    47. 

  47. function get_option($key, $default=false) {

    48. 

  48. 

    49. 

  49. 	if (is_multisite())

    50. 

  50. 		return get_site_option($key, $default);

    51. 

  51. 	else

    52. 

  52. 		return get_option($key, $default);

    53. 

  53. }

    54. 

  54. 

    55. 

  55. /**********************************************************************/

    56. 

  56. /* Update Sabre options                                               */

    57. 

  57. /**********************************************************************/

    58. 

  58. 

    59. 

  59. function update_option($key, $value) {

    60. 

  60. 

    61. 

  61. 	if (is_multisite())

    62. 

  62. 		return update_site_option($key, $value);

    63. 

  63. 	else

    64. 

  64. 		return update_option($key, $value);

    65. 

  65. }

    66. 

  66. 

    67. 

  67. /**********************************************************************/

    68. 

  68. /* Delete Sabre options                                               */

    69. 

  69. /**********************************************************************/

    70. 

  70. 

    71. 

  71. function delete_option($key) {

    72. 

  72. 

    73. 

  73. 	if (is_multisite())

    74. 

  74. 		return delete_site_option($key);

    75. 

  75. 	else

    76. 

  76. 		return delete_option($key);

    77. 

  77. }

    78. 

  78. 

    79. 

  79. /***********************************************************************/

    80. 

  80. /* Add tests to registration form                                      */

    81. 

  81. /***********************************************************************/

    82. 

  82. 

    83. 

  83. function change_registration_form($errors='') {

    84. 

  84. 	global $wpdb;

    85. 

  85. 

    86. 

  86. 	if ( !is_wp_error($errors) )

    87. 

  87. 		$errors = new WP_Error();

    88. 

  88. 

    89. 

  89. 	$sabre_opt = $this->get_option('sabre_opt');

    90. 

  90. 	if (is_array($sabre_opt))

    91. 

  91. 		extract ($sabre_opt, EXTR_OVERWRITE) ;

    92. 

  92. 

    93. 

  93. 

    94. 

  94. 	// Choose the sequence of tests

    95. 

  95. 	if ($sabre_seq == 'Random') {

    96. 

  96. 		$arr1 = array();

    97. 

  97. 		$arr2 = array(	'enable_captcha' => 'false',

    98. 

  98. 				'enable_math' => 'false',

    99. 

  99. 				'enable_text' => 'false' );

    100. 

  100. 		if ($enable_captcha == 'true')

    101. 

  101. 			$arr1[] = 'enable_captcha';

    102. 

  102. 		if ($enable_math == 'true')

    103. 

  103. 			$arr1[] = 'enable_math';

    104. 

  104. 		if ($enable_text == 'true')

    105. 

  105. 			$arr1[] = 'enable_text';

    106. 

  106. 		$dice = mt_rand(0,(count($arr1) - 1));

    107. 

  107. 		$arr2[$arr1[$dice]] = 'true';

    108. 

  108. 		extract ($arr2, EXTR_OVERWRITE);

    109. 

  109. 	}

    110. 

  110. 

    111. 

  111. 	if ($enable_captcha == 'true') {

    112. 

  112. 		$max = strlen($acceptedChars)-1;

    113. 

  113. 		for($i=0; $i < $stringlength; $i++)

    114. 

  114. 			$password .= $acceptedChars{mt_rand(0, $max)};

    115. 

  115. 	}

    116. 

  116. 	if ($enable_math == 'true') {

    117. 

  117. 		$max = strlen($math_ops)-1;

    118. 

  118. 		$mathop = $math_ops{mt_rand(0, $max)};

    119. 

  119. 		$nb1 = mt_rand(1, 20);

    120. 

  120. 		$nb2 = mt_rand(1, 20);

    121. 

  121. 		switch ($mathop) {

    122. 

  122. 			case '-' :

    123. 

  123. 				if ($nb1 > $nb2) {

    124. 

  124. 					$mathcode = $nb1 - $nb2;

    125. 

  125. 					$mathstring = $nb1 . ' - ' . $nb2;

    126. 

  126. 					}

    127. 

  127. 				else {

    128. 

  128. 					$mathcode = $nb2 - $nb1;

    129. 

  129. 					$mathstring = $nb2 . ' - ' . $nb1;

    130. 

  130. 					}

    131. 

  131. 				break;

    132. 

  132. 			case '*' :

    133. 

  133. 				$mathcode = $nb1 * $nb2;

    134. 

  134. 				$mathstring = $nb1 . ' * ' . $nb2;

    135. 

  135. 				break;

    136. 

  136. 			case '+' :

    137. 

  137. 			default  :

    138. 

  138. 				$mathcode = $nb1 + $nb2;

    139. 

  139. 				$mathstring = $nb1 . ' + ' . $nb2;

    140. 

  140. 				break;

    141. 

  141. 			}

    142. 

  142. 	}

    143. 

  143. 	if ($enable_text == 'true') {

    144. 

  144. 		$ord = array('first', 'second', 'third', 'fourth', 'fifth', 'sixth', 'seventh', 'eighth', 'ninth', 'last');

    145. 

  145. 		$myWord = new wordGenerator();

    146. 

  146. 		$t_word = strtoupper($myWord->create(5,10,true));

    147. 

  147. 		$t_index = mt_rand(0, strlen($t_word)-1);

    148. 

  148. 		$t_letter = $t_word[$t_index];

    149. 

  149. 		$t_ord = __($ord[($t_index==strlen($t_word)-1 ? 9 : $t_index)], 'sabre');

    150. 

  150. 		unset($myWord);

    151. 

  151. 		unset($ord);

    152. 

  152. 	}

    153. 

  153. 

    154. 

  154. 	$curdate = current_time('timestamp', 0);

    155. 

  155. 	$stordate = date("Y-m-d H:i:s", $curdate);

    156. 

  156. 

    157. 

  157. 	@$wpdb->query("INSERT INTO `" . SABRE_TABLE . "` SET `user_IP` = '" . $_SERVER['REMOTE_ADDR'] . "', `first_mod` = '" . $stordate . "', `last_mod` = '" . $stordate . "'" . (isset($password) ? ", `captcha` = '" . $password . "'" : "") . (isset($mathcode) ? ", `math` = " . $mathcode : "") . (isset($t_letter) ? ", `letter` = '" . $t_letter . "'" : ""));

    158. 

  158. 	$id = $wpdb->insert_id;

    159. 

  159. 

    160. 

  160. 	if ($user_pwd == 'true') {

    161. 

  161. 		echo '<p id="sabre_pwd">';

    162. 

  162. 		echo '<label>' . __('Please enter your password twice:', 'sabre') . '<br />';

    163. 

  163. 		if ( $errmsg = $errors->get_error_message('sabre_no_user_pwd') )

    164. 

  164. 			echo '<p class="error">' .$errmsg .'</p>';

    165. 

  165. 		if ( $errmsg = $errors->get_error_message('sabre_mismatch_user_pwd') )

    166. 

  166. 			echo '<p class="error">' .$errmsg .'</p>';

    167. 

  167. 		if ( $errmsg = $errors->get_error_message('sabre_short_user_pwd') )

    168. 

  168. 			echo '<p class="error">' .$errmsg .'</p>';

    169. 

  169. 		echo '<input type="password" name="user_pwd1" id="user_pwd1" class="input" value="" size="20" tabindex="25" /></label>';

    170. 

  170. 		echo '<input type="password" name="user_pwd2" id="user_pwd2" class="input" value="" size="20" tabindex="26" /></label><br />';

    171. 

  171. 		echo '<strong>' . __('Strength indicator', 'sabre') . '</strong>';

    172. 

  172. 		echo '<label id="pass-strength-result">' . __('Too short', 'sabre') . '</label><br />' . __('Hint: Your password should be at least seven characters long. To make it stronger, use upper and lower case letters, numbers and symbols like ! " ? $ % ^ &amp; ).', 'sabre');

    173. 

  173. 		echo '</p>';

    174. 

  174. 	}

    175. 

  175. 

    176. 

  176. 	if ($enable_captcha == 'true') {

    177. 

  177. 		$sabre_id = $sabre_opt;

    178. 

  178. 		$sabre_id['captcha'] = $password;

    179. 

  179. 		echo '<p>';

    180. 

  180. 		echo '<img src="' . SABREURL . 'sabre_captcha.php?sabre_id=' . base64_encode($this->Encrypt_Decrypt($password)) . '&acceptedChars=' . $acceptedChars . '&stringlength=' . $stringlength . '&contrast=' . $contrast . '&num_polygons=' . $num_polygons . '&num_ellipses=' . $num_ellipses . '&num_lines=' . $num_lines . '&num_dots=' . $num_dots . '&min_thickness=' . $min_thickness . '&max_thickness=' . $max_thickness . '&min_radius=' . $min_radius . '&max_radius=' . $max_radius . '&object_alpha=' . $object_alpha . '&white_bg=' . $white_bg . '" border="0" alt="captcha image" /><br />';

    181. 

  181. 		echo '<label>' . __('Please enter the code shown above:', 'sabre') . '<br />';

    182. 

  182. 		if ( $errmsg = $errors->get_error_message('sabre_captcha') )

    183. 

  183. 			echo '<p class="error">' .$errmsg .'</p>';

    184. 

  184. 		echo '<input type="text" name="captcha" id="captcha" class="input" value="" size="25" tabindex="30" /></label>';

    185. 

  185. 		echo '</p>';

    186. 

  186. 	}

    187. 

  187. 	if ($enable_math == 'true') {

    188. 

  188. 		echo '<p>';

    189. 

  189. 		echo '<label>' . sprintf(__('Please enter the result: %s', 'sabre'), $mathstring) . '<br />';

    190. 

  190. 		if ( $errmsg = $errors->get_error_message('sabre_math') )

    191. 

  191. 			echo '<p class="error">' .$errmsg .'</p>';

    192. 

  192. 		echo '<input type="text" name="math" id="math" class="input" value="" size="10" tabindex="40" /></label>';

    193. 

  193. 		echo '</p>';

    194. 

  194. 	}

    195. 

  195. 	if ($enable_text == 'true') {

    196. 

  196. 		echo '<p>';

    197. 

  197. 		echo '<label>' . sprintf(__('Please enter the %s letter of the word %s', 'sabre'), $t_ord, $t_word) . '<br />';

    198. 

  198. 		if ( $errmsg = $errors->get_error_message('sabre_text') )

    199. 

  199. 			echo '<p class="error">' .$errmsg .'</p>';

    200. 

  200. 		echo '<input type="text" name="letter" id="letter" class="input" value="" size="2" tabindex="42" /></label>';

    201. 

  201. 		echo '</p>';

    202. 

  202. 	}

    203. 

  203. 	if ($enable_policy == 'true') {

    204. 

  204. 		echo '<p><label>';

    205. 

  205. 		if (empty($policy_link))

    206. 

  206. 			echo htmlentities(stripslashes($policy_name), ENT_QUOTES, 'UTF-8') . '<br />';

    207. 

  207. 		else

    208. 

  208. 			echo '<a href="' . $policy_link . '" target="_blank">' . htmlentities(stripslashes($policy_name), ENT_QUOTES, 'UTF-8') . '</a><br />';

    209. 

  209. 		if (!empty($policy_text))

    210. 

  210. 			echo '<textarea rows="10" cols="25" readonly>' . htmlentities(stripslashes($policy_text), ENT_QUOTES, 'UTF-8') . '</textarea><br />';

    211. 

  211. 		if ( $errmsg = $errors->get_error_message('sabre_no_policy') )

    212. 

  212. 			echo '<p class="error">' .$errmsg .'</p>';

    213. 

  213. 		echo '<input type="checkbox" name="policy" id="policy" value="yes" tabindex="43" />';

    214. 

  214. 		_e('I agree', 'sabre');

    215. 

  215. 		echo '</label></p>';

    216. 

  216. 	}

    217. 

  217. 	if ($enable_invite == 'true') {

    218. 

  218. 		echo '<p>';

    219. 

  219. 		echo '<label>' . __('Please enter your invitation code:', 'sabre') . '<br />';

    220. 

  220. 		if ( $errmsg = $errors->get_error_message('sabre_invitation') )

    221. 

  221. 			echo '<p class="error">' .$errmsg .'</p>';

    222. 

  222. 		echo '<input type="text" name="invite_code" id="invite_code" class="input" value="" size="20" tabindex="45" /></label>';

    223. 

  223. 		echo '</p>';

    224. 

  224. 	}

    225. 

  225. 

    226. 

  226. 	// Add anti-bot fields

    227. 

  227. 	if ($enable_stealth == 'true') {

    228. 

  228. 		// Verify fake user

    229. 

  229. 		$fakeField = "X" . md5($id . $magic_seed . $_SERVER['REMOTE_ADDR'] . $curdate);

    230. 

  230. 		echo '<p id="sabre_spectre">';

    231. 

  231. 		echo '<label>' . __("Please don't modify this field:", 'sabre') . '<br />';

    232. 

  232. 		echo "<input type=\"text\" name=\"$fakeField\" id=\"$fakeField\" class=\"input\" value=\"\" size=\"10\" tabindex=\"50\" /></label>";

    233. 

  233. 		echo '</p>';

    234. 

  234. 

    235. 

  235. 		// Verify Javascript capabilities

    236. 

  236. 		$max = rand(5, 9);

    237. 

  237. 		$tot = $str = 1;

    238. 

  238. 

    239. 

  239. 		for ($i = 0; $i < $max; $i++) {

    240. 

  240. 			$op = rand(0, 8);

    241. 

  241. 			$num = rand(1, 42);

    242. 

  242. 

    243. 

  243. 			switch ($op) {

    244. 

  244. 				case 0:

    245. 

  245. 				case 8:

    246. 

  246. 					$str = "(" . $str . " + " . $num . ")";

    247. 

  247. 					$tot += $num;

    248. 

  248. 				break;

    249. 

  249. 				case 1:

    250. 

  250. 					$str = "(" . $str . " - " . $num . ")";

    251. 

  251. 					$tot -= $num;

    252. 

  252. 				break;

    253. 

  253. 				case 2:

    254. 

  254. 					$str = "(" . $str . " * " . $num . ")";

    255. 

  255. 					$tot *= $num;

    256. 

  256. 				break;

    257. 

  257. 				case 3:

    258. 

  258. 					$str = "Math.round ( Math.abs(" . $str . " / " . $num . "))";

    259. 

  259. 					$tot = round(abs($tot / $num));

    260. 

  260. 				break;

    261. 

  261. 				case 4:

    262. 

  262. 					$str = "Math.min(" . $str . ", " . $num . ")";

    263. 

  263. 					$tot = min($tot, $num);

    264. 

  264. 				break;

    265. 

  265. 				case 5:

    266. 

  266. 					$str = "Math.max(" . $str . ", " . $num . ")";

    267. 

  267. 					$tot = max($tot, $num);

    268. 

  268. 				break;

    269. 

  269. 				case 6:

    270. 

  270. 					$str = "Math.round ( Math.abs(" . $str . " % " . $num . "))";

    271. 

  271. 					$tot = round(abs($tot % $num));

    272. 

  272. 				break;

    273. 

  273. 				case 7:

    274. 

  274. 					$str = "(" . $str . " + Math.round( Math.abs(100*Math.sin(" . $num . ")) ) )";

    275. 

  275. 					$tot = $tot + round(abs(100*sin($num)));

    276. 

  276. 				break;

    277. 

  277. 				}

    278. 

  278. 			}

    279. 

  279. 

    280. 

  280. 		$js_command = "Math.round ( Math.abs(" . $str . "))" ;

    281. 

  281. 		$tot = round(abs($tot));

    282. 

  282. 

    283. 

  283. 		$check1 = $this->magic_seed(10);

    284. 

  284. 		$check2 = md5($tot . $check1 . $magic_seed);

    285. 

  285. 

    286. 

  286. 		echo '<input type="hidden" id="sabre_js_check1" name="sabre_js_check1" value="' . $check1 . '" />';

    287. 

  287. 		echo '<input type="hidden" id="sabre_js_check2" name="sabre_js_check2" value="' . $check2 . '" />';

    288. 

  288. 		echo "\n<script type=\"text/javascript\">";

    289. 

  289. 		echo "\n<!--";

    290. 

  290. 		echo "\ndocument.write('<input type=\"hidden\" id=\"sabre_js_payload\" name=\"sabre_js_payload\" value=\"');";

    291. 

  291. 		echo "\ndocument.write($js_command);";

    292. 

  292. 		echo "\ndocument.write('\" />');";

    293. 

  293. 		echo "\n-->";

    294. 

  294. 		echo "\n</script>";

    295. 

  295. 	}

    296. 

  296. 

    297. 

  297. 	echo '<input type="hidden" name="sabre_id" id="sabre_id" class="input" value="' . $id . '" />';

    298. 

  298. 

    299. 

  299. 	if ( $errmsg = $errors->get_error_message('sabre_generic') )

    300. 

  300. 			echo '<p class="error">' .$errmsg .'</p>';

    301. 

  301. 

    302. 

  302. 	// Add Sabre banner

    303. 

  303. 	if ($show_banner == 'true')

    304. 

  304. 		echo '<p id="sabre_banner">' . __('Protected by', 'sabre') . ' <a id="sabre_link" href="http://didier.lorphelin.free.fr/blog/index.php/wordpress/sabre">Sabre</a>.' . ($total_stopped ? sprintf(__ngettext(' %s alien stopped.', ' %s aliens stopped.', $total_stopped, 'sabre'), $total_stopped) : '') . '</p>';

    305. 

  305. }

    306. 

  306. 

    307. 

  307. 

    308. 

  308. /***********************************************************************/

    309. 

  309. /* Test the info entered by the user                                   */

    310. 

  310. /***********************************************************************/

    311. 

  311. 

    312. 

  312. function check_entry($stuff) {

    313. 

  313. 	global $wpdb;

    314. 

  314. 

    315. 

  315. 	if (!is_multisite())

    316. 

  316. 		$errors = $stuff;

    317. 

  317. 	else

    318. 

  318. 		extract($stuff);

    319. 

  319. 

    320. 

  320. 	// To speed up things, check the user entry only if no error was detected before calling Sabre

    321. 

  321. 

    322. 

  322. if ( !$errors->get_error_code()) {

    323. 

  323. 

    324. 

  324. 	$sabre_opt = $this->get_option('sabre_opt');

    325. 

  325. 	if (is_array($sabre_opt))

    326. 

  326. 		extract ($sabre_opt, EXTR_OVERWRITE) ;

    327. 

  327. 

    328. 

  328. 	$sabre_errors = array();

    329. 

  329. 	$error_head_text = __('<strong>ERROR</strong>: ', 'sabre');

    330. 

  330. 

    331. 

  331. 	$result = $wpdb->get_row($wpdb->prepare("SELECT * FROM `" . SABRE_TABLE . "` WHERE `id` = %d", (int)$_POST['sabre_id']));

    332. 

  332. 

    333. 

  333. 	$curdate = current_time('timestamp', 0);

    334. 

  334. 	$stordate = date("Y-m-d H:i:s", $curdate);

    335. 

  335. 

    336. 

  336. 	if (empty($result->id)) {

    337. 

  337. 		$error_msg_text = __('Unknown session.', 'sabre');

    338. 

  338. 		$errors->add('sabre_session', $error_head_text . $error_msg_text);

    339. 

  339. 		$sabre_errors['sabre_session'] = $error_msg_text;

    340. 

  340. 		}

    341. 

  341. 

    342. 

  342. 	if ($result->status != 'pending') {

    343. 

  343. 		$error_msg_text = __('Invalid session status.', 'sabre');

    344. 

  344. 		$errors->add('sabre_session_status', $error_head_text . $error_msg_text);

    345. 

  345. 		$sabre_errors['sabre_session_status'] = $error_msg_text;

    346. 

  346. 		}

    347. 

  347. 

    348. 

  348. 	if ($enable_stealth == 'true') {

    349. 

  349. 		// Check user IP

    350. 

  350. 		if ($result->user_IP <> $_SERVER['REMOTE_ADDR']) {

    351. 

  351. 			$error_msg_text = __('Invalid IP address.', 'sabre');

    352. 

  352. 			$errors->add('sabre_IP', $error_head_text . $error_msg_text);

    353. 

  353. 			$sabre_errors['sabre_IP'] = $error_msg_text;

    354. 

  354. 			}

    355. 

  355. 		// Check banned IP

    356. 

  356. 		if ($check_banned_IP == 'true') {

    357. 

  357. 			$error_msg_text = __('Banned IP address.', 'sabre');

    358. 

  358. 			$spammer_IP = $_SERVER['REMOTE_ADDR'];

    359. 

  359. 			$reverse_IP = array_reverse(explode('.', $spammer_IP));

    360. 

  360. 			$checked_domaine = implode('.', $reverse_IP) . '.' . 'zen.spamhaus.org';

    361. 

  361. 			if ($checked_domaine != gethostbyname($checked_domaine)) {

    362. 

  362. 				$errors->add('sabre_banIP', $error_head_text . $error_msg_text);

    363. 

  363. 				$sabre_errors['sabre_banIP'] = $error_msg_text;

    364. 

  364. 				}

    365. 

  365. 			$checked_domaine = implode('.', $reverse_IP) . '.' . 'l1.spews.dnsbl.sorbs.net';

    366. 

  366. 			if ($checked_domaine != gethostbyname($checked_domaine)) {

    367. 

  367. 				$errors->add('sabre_banIP', $error_head_text . $error_msg_text);

    368. 

  368. 				$sabre_errors['sabre_banIP'] = $error_msg_text;

    369. 

  369. 				}

    370. 

  370. 			}

    371. 

  371. 		// Check session time out

    372. 

  372. 		if (strtotime($result->last_mod) + (int)$session_timeout < $curdate) {

    373. 

  373. 			$error_msg_text = __('Session timed out.', 'sabre');

    374. 

  374. 			$errors->add('sabre_timeout', $error_head_text . $error_msg_text);

    375. 

  375. 			$sabre_errors['sabre_timeout'] = $error_msg_text;

    376. 

  376. 			}

    377. 

  377. 		// Check excessive speed

    378. 

  378. 		if (strtotime($result->last_mod) + (int)$speed_limit > $curdate) {

    379. 

  379. 			$error_msg_text = __('Speedy Gonzales was here.', 'sabre');

    380. 

  380. 			$errors->add('sabre_speed', $error_head_text . $error_msg_text);

    381. 

  381. 			$sabre_errors['sabre_speed'] = $error_msg_text;

    382. 

  382. 			}

    383. 

  383. 		// Check false fields

    384. 

  384. 		$fakeField = "X" . md5($result->id . $magic_seed . $result->user_IP . strtotime($result->last_mod));

    385. 

  385. 		if (!isset($_POST[$fakeField]) || !empty($_POST[$fakeField])) {

    386. 

  386. 			$error_msg_text = __('Fake user.', 'sabre');

    387. 

  387. 			$errors->add('sabre_fake_user', $error_head_text . $error_msg_text);

    388. 

  388. 			$sabre_errors['sabre_fake_user'] = $error_msg_text;

    389. 

  389. 			}

    390. 

  390. 		// Check Javascript capabilities

    391. 

  391. 		if (empty($_POST['sabre_js_payload']) || empty($_POST['sabre_js_check1'])) {

    392. 

  392. 			if ($js_support == 'true') {

    393. 

  393. 				$error_msg_text = __('No Javascript capabilities.', 'sabre');

    394. 

  394. 				$errors->add('sabre_js', $error_head_text . $error_msg_text);

    395. 

  395. 				$sabre_errors['sabre_js'] = $error_msg_text;

    396. 

  396. 				}

    397. 

  397. 			}

    398. 

  398. 		else {

    399. 

  399. 			if ($_POST['sabre_js_check2'] != md5($_POST['sabre_js_payload'] . $_POST['sabre_js_check1'] . $magic_seed)) {

    400. 

  400. 				$error_msg_text = __('Fake Javascript capabilities.', 'sabre');

    401. 

  401. 				$errors->add('sabre_fake_js', $error_head_text . $error_msg_text);

    402. 

  402. 				$sabre_errors['sabre_fake_js'] = $error_msg_text;

    403. 

  403. 				}

    404. 

  404. 			}

    405. 

  405. 		}

    406. 

  406. 

    407. 

  407. 	if ($user_pwd == 'true') {

    408. 

  408. 		if(empty($_POST['user_pwd1']) || $_POST['user_pwd1'] == '' || empty($_POST['user_pwd2']) || $_POST['user_pwd2'] == ''){

    409. 

  409. 			$error_msg_text = __('Missing password.', 'sabre');

    410. 

  410. 			$errors->add('sabre_no_user_pwd', $error_head_text . $error_msg_text);

    411. 

  411. 			$sabre_errors['sabre_no_user_pwd'] = $error_msg_text;

    412. 

  412. 		}elseif($_POST['user_pwd1'] !== $_POST['user_pwd2']){

    413. 

  413. 			$error_msg_text = __('Mismatch between password fields.', 'sabre');

    414. 

  414. 			$errors->add('sabre_mismatch_user_pwd', $error_head_text . $error_msg_text);

    415. 

  415. 			$sabre_errors['sabre_mismatch_user_pwd'] = $error_msg_text;

    416. 

  416. 		}elseif(strlen($_POST['user_pwd1'])<6){

    417. 

  417. 			$error_msg_text = __('Password length is less than 6 characters.', 'sabre');

    418. 

  418. 			$errors->add('sabre_short_user_pwd', $error_head_text . $error_msg_text);

    419. 

  419. 			$sabre_errors['sabre_short_user_pwd'] = $error_msg_text;

    420. 

  420. 		}

    421. 

  421. 	}

    422. 

  422. 

    423. 

  423. 	if ($enable_policy == 'true') {

    424. 

  424. 		if($_POST['policy'] != 'yes'){

    425. 

  425. 			$error_msg_text = __('Policy not accepted.', 'sabre');

    426. 

  426. 			$errors->add('sabre_no_policy', $error_head_text . $error_msg_text);

    427. 

  427. 			$sabre_errors['sabre_no_policy'] = $error_msg_text;

    428. 

  428. 		}

    429. 

  429. 	}

    430. 

  430. 

    431. 

  431. 	if ($result->captcha != NULL) {

    432. 

  432. 		$string = strtoupper($result->captcha);

    433. 

  433. 		$userstring = strtoupper($_POST['captcha']);

    434. 

  434. 

    435. 

  435. 		if (($string <> $userstring) || (strlen($userstring) <> $stringlength)) {

    436. 

  436. 			$error_msg_text = __('Invalid code.', 'sabre');

    437. 

  437. 			$errors->add('sabre_captcha', $error_head_text . $error_msg_text);

    438. 

  438. 			$sabre_errors['sabre_captcha'] = $error_msg_text;

    439. 

  439. 		}

    440. 

  440. 	}

    441. 

  441. 

    442. 

  442. 	if ($result->math != NULL) {

    443. 

  443. 		if ($result->math <> $_POST['math']) {

    444. 

  444. 			$error_msg_text = __('Invalid math result.', 'sabre');

    445. 

  445. 			$errors->add('sabre_math', $error_head_text . $error_msg_text);

    446. 

  446. 			$sabre_errors['sabre_math'] = $error_msg_text;

    447. 

  447. 		}

    448. 

  448. 	}

    449. 

  449. 

    450. 

  450. 	if ($result->letter != NULL) {

    451. 

  451. 		if ($result->letter <> strtoupper($_POST['letter'])) {

    452. 

  452. 			$error_msg_text = __('Invalid letter.', 'sabre');

    453. 

  453. 			$errors->add('sabre_text', $error_head_text . $error_msg_text);

    454. 

  454. 			$sabre_errors['sabre_text'] = $error_msg_text;

    455. 

  455. 		}

    456. 

  456. 	}

    457. 

  457. 

    458. 

  458. 	if ($enable_invite == 'true') {

    459. 

  459. 		for ($i=0; $i < count($invite_codes); $i++)

    460. 

  460. 			$invite_arr[$i] = $invite_codes[$i]['code'];

    461. 

  461. 		if(!in_array(strtoupper($_POST['invite_code']), $invite_arr)){

    462. 

  462. 			$error_msg_text = __('Invalid invitation code.', 'sabre');

    463. 

  463. 			$errors->add('sabre_invitation', $error_head_text . $error_msg_text);

    464. 

  464. 			$sabre_errors['sabre_invitation'] = $error_msg_text;

    465. 

  465. 		}

    466. 

  466. 		else {

    467. 

  467. 			$key = array_keys($invite_arr, strtoupper($_POST['invite_code']));

    468. 

  468. 			if (!empty($invite_codes[$key[0]]['date'])) {

    469. 

  469. 				if ($invite_codes[$key[0]]['date'] < $curdate) {

    470. 

  470. 					$error_msg_text = __('Invalid invitation code.', 'sabre');

    471. 

  471. 					$errors->add('sabre_invitation', $error_head_text . $error_msg_text);

    472. 

  472. 					$sabre_errors['sabre_invitation'] = $error_msg_text;

    473. 

  473. 				}

    474. 

  474. 			}

    475. 

  475. 			if (is_numeric($invite_codes[$key[0]]['number']) && empty($sabre_errors)) {

    476. 

  476. 				--$invite_codes[$key[0]]['number'];

    477. 

  477. 				if ($invite_codes[$key[0]]['number'] < 0) {

    478. 

  478. 					$invite_codes[$key[0]]['number'] = 0;

    479. 

  479. 					$error_msg_text = __('Invalid invitation code.', 'sabre');

    480. 

  480. 					$errors->add('sabre_invitation', $error_head_text . $error_msg_text);

    481. 

  481. 					$sabre_errors['sabre_invitation'] = $error_msg_text;

    482. 

  482. 				}

    483. 

  483. 				$sabre_opt['invite_codes'] = $invite_codes;

    484. 

  484. 			}

    485. 

  485. 		}

    486. 

  486. 	}

    487. 

  487. 

    488. 

  488. 	if (!empty($sabre_errors)) {

    489. 

  489. 		$error_msg_text = __('Registration stopped by Sabre.', 'sabre');

    490. 

  490. 		$errors->add('sabre_generic', $error_head_text . $error_msg_text);

    491. 

  491. 		@$wpdb->query($wpdb->prepare("UPDATE `" . SABRE_TABLE . "` SET `user` = %s, `email` = %s, `msg` = '" . maybe_serialize($sabre_errors) . "', `invite` = %s, `last_mod` = '" . $stordate ."', `status` = 'ko', `md5_id` = %s WHERE `id` = %d", !is_multisite() ? $_POST['user_login'] : $_POST['user_name'], $_POST['user_email'], $_POST['invite_code'], md5($_POST['sabre_id']), (int)$_POST['sabre_id']));

    492. 

  492. 		$sabre_opt['total_stopped'] += 1;

    493. 

  493. 		}

    494. 

  494. 	elseif ($enable_confirm != 'none') {

    495. 

  495. 		@$wpdb->query($wpdb->prepare("UPDATE `" . SABRE_TABLE . "` SET `user` = %s, `email` = %s,  `invite` = %s, `msg` = '', `last_mod` = '" . $stordate ."', `status` = 'to confirm', `md5_id` = %s  WHERE `id` = %d", !is_multisite() ? $_POST['user_login'] : $_POST['user_name'], $_POST['user_email'], $_POST['invite_code'], md5($_POST['sabre_id']), (int)$_POST['sabre_id']));

    496. 

  496. 		}

    497. 

  497. 	else {

    498. 

  498. 		@$wpdb->query($wpdb->prepare("UPDATE `" . SABRE_TABLE . "` SET `user` = %s, `email` = %s, `invite` = %s, `msg` = '', `last_mod` = '" . $stordate ."', `status` = 'ok', `md5_id` = %s WHERE `id` = %d", !is_multisite() ? $_POST['user_login'] : $_POST['user_name'], $_POST['user_email'], $_POST['invite_code'], md5($_POST['sabre_id']), (int)$_POST['sabre_id']));

    499. 

  499. 		$sabre_opt['total_accepted'] += 1;

    500. 

  500. 		do_action('sabre_accepted_registration');

    501. 

  501. 		}

    502. 

  502. 	$this->update_option('sabre_opt', $sabre_opt);

    503. 

  503. 	}

    504. 

  504. 

    505. 

  505. 	if (!is_multisite())

    506. 

  506. 		$stuff = $errors;

    507. 

  507. 	else

    508. 

  508. 		$stuff = array('user_name' => $user_name, 'orig_username' => $orig_username, 'user_email' => $user_email, 'errors' => $errors);

    509. 

  509. 

    510. 

  510. 	return $stuff;

    511. 

  511. }

    512. 

  512. 

    513. 

  513. /***********************************************************************/

    514. 

  514. /* Check the login header                                              */

    515. 

  515. /***********************************************************************/

    516. 

  516. 

    517. 

  517. function login_head() {

    518. 

  518. 	global $error, $wpdb;

    519. 

  519. 

    520. 

  520. 	if (isset($_REQUEST['sabre_confirm']) && !empty($_REQUEST['sabre_confirm'])) {

    521. 

  521. 		$sabre_opt = $this->get_option('sabre_opt');

    522. 

  522. 		if (is_array($sabre_opt))

    523. 

  523. 			extract ($sabre_opt, EXTR_OVERWRITE) ;

    524. 

  524. 		$sabre_errors = array();

    525. 

  525. 		$error_head_text = __('<strong>ERROR</strong>: ', 'sabre');

    526. 

  526. 

    527. 

  527. 		$curdate = current_time('timestamp', 0);

    528. 

  528. 		$stordate = date("Y-m-d H:i:s", $curdate);

    529. 

  529. 

    530. 

  530. 		if ($enable_confirm == 'user') {

    531. 

  531. 			$result = $wpdb->get_row($wpdb->prepare("SELECT * FROM `" . SABRE_TABLE . "` WHERE `md5_id` = %s", $_REQUEST['sabre_confirm']));

    532. 

  532. 			if ((strtotime($result->last_mod) + (int)$period*24*60*60 >= $curdate) && ('to confirm' == $result->status)) {

    533. 

  533. 				$error = __('Registration confirmed. You can now use your credentials to enter in this site.', 'sabre');

    534. 

  534. 				@$wpdb->query($wpdb->prepare("UPDATE `" . SABRE_TABLE . "` SET `last_mod` = '" . $stordate ."', `status` = 'ok' WHERE `md5_id` = %s", $_REQUEST['sabre_confirm']));

    535. 

  535. 				$sabre_opt['total_accepted'] += 1;

    536. 

  536. 				$this->update_option('sabre_opt', $sabre_opt);

    537. 

  537. 				do_action('sabre_accepted_registration');

    538. 

  538. 				if ($mail_confirm == 'true')

    539. 

  539. 					$this->new_user_confirmation($result->user_id);

    540. 

  540. 				}

    541. 

  541. 			else {

    542. 

  542. 				if ('to confirm' == $result->status) {

    543. 

  543. 					if ($delete_user == 'true') wp_delete_user($result->user_id);

    544. 

  544. 					$error_msg_text = __('Exceeded period for confirmation of registration.', 'sabre');

    545. 

  545. 					$error = $error_head_text . $error_msg_text;

    546. 

  546. 					$sabre_errors['sabre_confirm'] = $error_msg_text;

    547. 

  547. 					@$wpdb->query($wpdb->prepare("UPDATE `" . SABRE_TABLE . "` SET `msg` = '" . maybe_serialize($sabre_errors) . "', `last_mod` = '" . $stordate ."', `status` = 'ko' WHERE `md5_id` = %s", $_REQUEST['sabre_confirm']));

    548. 

  548. 					$sabre_opt['total_stopped'] += 1;

    549. 

  549. 					$this->update_option('sabre_opt', $sabre_opt);

    550. 

  550. 					}

    551. 

  551. 				else

    552. 

  552. 					$error = $error_head_text . __('Unexpected confirmation of registration.', 'sabre');

    553. 

  553. 				}

    554. 

  554. 			}

    555. 

  555. 		}

    556. 

  556. }

    557. 

  557. 

    558. 

  558. /***********************************************************************/

    559. 

  559. /* Check the login data                                                */

    560. 

  560. /***********************************************************************/

    561. 

  561. 

    562. 

  562. function check_login($user, $pass) {

    563. 

  563. 	global $wpdb;

    564. 

  564. 

    565. 

  565. 		$sabre_opt = $this->get_option('sabre_opt');

    566. 

  566. 		if (is_array($sabre_opt))

    567. 

  567. 			extract ($sabre_opt, EXTR_OVERWRITE) ;

    568. 

  568. 

    569. 

  569. 		$curdate = current_time('timestamp', 0);

    570. 

  570. 		$stordate = date("Y-m-d H:i:s", $curdate);

    571. 

  571. 

    572. 

  572. 		if ($enable_confirm != 'none') {

    573. 

  573. 			$sabre_errors = array();

    574. 

  574. 			$error_head_text = __('<strong>ERROR</strong>: ', 'sabre');

    575. 

  575. 			$cu = new WP_User($user->ID);

    576. 

  576. 

    577. 

  577. 			if (!$cu->has_cap('edit_users')) {

    578. 

  578. 				$result = $wpdb->get_row("SELECT * FROM `" . SABRE_TABLE . "` WHERE `user_id` = " . (int)$user->ID);

    579. 

  579. 				if ('ok' != $result->status) {

    580. 

  580. 					if ('to confirm' == $result->status) {

    581. 

  581. 						if ($enable_confirm == 'user') {

    582. 

  582. 							if (strtotime($result->last_mod) + (int)$period*24*60*60 < $curdate) {

    583. 

  583. 								$error_msg_text = __('Exceeded period for confirmation of registration.', 'sabre');

    584. 

  584. 								$sabre_errors['sabre_login'] = $error_msg_text;

    585. 

  585. 								@$wpdb->query("UPDATE `" . SABRE_TABLE . "` SET `msg` = '" . maybe_serialize($sabre_errors) . "', `last_mod` = '" . $stordate ."', `status` = 'ko' WHERE `id` = " . (int)$result->id);

    586. 

  586. 								$sabre_opt['total_stopped'] += 1;

    587. 

  587. 								$this->update_option('sabre_opt', $sabre_opt);

    588. 

  588. 								if ($delete_user == 'true')

    589. 

  589. 									wp_delete_user($user->ID);

    590. 

  590. 								return new WP_Error('sabre_login', $error_head_text . $error_msg_text);

    591. 

  591. 								}

    592. 

  592. 							elseif ($no_entry == 'true') {

    593. 

  593. 								$error_msg_text = __('Confirmation pending. See registration e-mail.', 'sabre');

    594. 

  594. 								$sabre_errors['sabre_login'] = $error_msg_text;

    595. 

  595. 								return new WP_Error('sabre_login', $error_head_text . $error_msg_text);

    596. 

  596. 								}

    597. 

  597. 							}

    598. 

  598. 						else {

    599. 

  599. 							$error_msg_text = __('Registration not yet validated by the site\'s administrator. Wait for confirmation e-mail.', 'sabre');

    600. 

  600. 							$sabre_errors['sabre_login'] = $error_msg_text;

    601. 

  601. 							return new WP_Error('sabre_login', $error_head_text . $error_msg_text);

    602. 

  602. 							}

    603. 

  603. 						}

    604. 

  604. 					else {

    605. 

  605. 						$error_msg_text = __('Invalid registration status.', 'sabre');

    606. 

  606. 						$sabre_errors['sabre_login'] = $error_msg_text;

    607. 

  607. 						return new WP_Error('sabre_login', $error_head_text . $error_msg_text);

    608. 

  608. 						}

    609. 

  609. 					}

    610. 

  610. 				}

    611. 

  611. 			}

    612. 

  612. 		return $user;

    613. 

  613. }

    614. 

  614. 

    615. 

  615. /***********************************************************************/

    616. 

  616. /* New user creation                                                   */

    617. 

  617. /***********************************************************************/

    618. 

  618. 

    619. 

  619. function new_user_created($user_id) {

    620. 

  620. 	global $wpdb;

    621. 

  621. 

    622. 

  622. 	$user = new WP_User( (int)$user_id);

    623. 

  623. 	@$wpdb->query($wpdb->prepare("UPDATE `" . SABRE_TABLE . "` SET `user_id` = %d WHERE `user` = %s and `status` in ('ok', 'to confirm')", (int)$user->ID, $user->user_login));

    624. 

  624. 	}

    625. 

  625. 

    626. 

  626. /***********************************************************************/

    627. 

  627. /* User confirmation function                                          */

    628. 

  628. /***********************************************************************/

    629. 

  629. 

    630. 

  630. function new_user_confirmation($user_id) {

    631. 

  631. 	global $wpdb;

    632. 

  632. 

    633. 

  633. 	$user = new WP_User($user_id);

    634. 

  634. 

    635. 

  635. 	$user_login = stripslashes($user->user_login);

    636. 

  636. 	$user_email = stripslashes($user->user_email);

    637. 

  637. 

    638. 

  638. 	$sabre_opt = $this->get_option('sabre_opt');

    639. 

  639. 

    640. 

  640. 	$mail_from = "From: ";

    641. 

  641. 	$mail_from .= (!empty($sabre_opt['mail_from_name']) ? $sabre_opt['mail_from_name'] : get_option('blogname')) . " <";

    642. 

  642. 	$mail_from .= (!empty($sabre_opt['mail_from_mail']) ? $sabre_opt['mail_from_mail'] : get_option('admin_email')) . ">";

    643. 

  643. 

    644. 

  644. 	$message  = sprintf(__('New user registration confirmed on your site %s:', 'sabre'), get_option('blogname')) . "\r\n\r\n";

    645. 

  645. 	$message .= sprintf(__('Username: %s', 'sabre'), $user_login) . "\r\n\r\n";

    646. 

  646. 	$message .= sprintf(__('E-mail: %s', 'sabre'), $user_email) . "\r\n";

    647. 

  647. 

    648. 

  648. 	@wp_mail(get_option('admin_email'), sprintf(__('[%s] New User Registration Confirmation', 'sabre'), get_option('blogname')), $message, $mail_from);

    649. 

  649. }

    650. 

  650. 

    651. 

  651. /***********************************************************************/

    652. 

  652. /* Admin confirmation function                                          */

    653. 

  653. /***********************************************************************/

    654. 

  654. 

    655. 

  655. function new_admin_confirmation($user_id) {

    656. 

  656. 	global $wpdb;

    657. 

  657. 

    658. 

  658. 	$user = new WP_User($user_id);

    659. 

  659. 

    660. 

  660. 	$user_login = stripslashes($user->user_login);

    661. 

  661. 	$user_email = stripslashes($user->user_email);

    662. 

  662. 

    663. 

  663. 	$sabre_opt = $this->get_option('sabre_opt');

    664. 

  664. 

    665. 

  665. 	$mail_from = "From: ";

    666. 

  666. 	$mail_from .= (!empty($sabre_opt['mail_from_name']) ? $sabre_opt['mail_from_name'] : get_option('blogname')) . " <";

    667. 

  667. 	$mail_from .= (!empty($sabre_opt['mail_from_mail']) ? $sabre_opt['mail_from_mail'] : get_option('admin_email')) . ">";

    668. 

  668. 

    669. 

  669. 	$message  = sprintf(__('Your registration on %s is now confirmed. You can freely sign in using the credentials given in a previous mail. Thank you for your interest.', 'sabre'), get_option('blogname')) . "\r\n\r\n";

    670. 

  670. 	$message .= sprintf(__('Username: %s', 'sabre'), $user_login) . "\r\n\r\n";

    671. 

  671. 	$message .= get_option('siteurl') . "/wp-login.php\r\n";

    672. 

  672. 

    673. 

  673. 	@wp_mail($user_email, sprintf(__('[%s] New User Registration Confirmation', 'sabre'), get_option('blogname')), $message, $mail_from);

    674. 

  674. }

    675. 

  675. 

    676. 

  676. /***********************************************************************/

    677. 

  677. /* Option checked/unchecked                                            */

    678. 

  678. /***********************************************************************/

    679. 

  679. 

    680. 

  680. function magic_seed($size) {

    681. 

  681. 

    682. 

  682. 	$core = "0123456789abcdefghijklmnopqrstuvwxyz";

    683. 

  683. 	for ($i=0; $i < $size; $i++)

    684. 

  684. 		$SeedOfLove .= substr($core, rand(0, strlen($core)-1), 1);

    685. 

  685. 

    686. 

  686. 	return $SeedOfLove;

    687. 

  687. }

    688. 

  688. 

    689. 

  689. /***********************************************************************/

    690. 

  690. /* Option checked/unchecked                                            */

    691. 

  691. /***********************************************************************/

    692. 

  692. 

    693. 

  693. function checked($var1, $var2) {

    694. 

  694. 

    695. 

  695. if ($var1 == $var2)

    696. 

  696.    return 'checked';

    697. 

  697. else

    698. 

  698.    return '';

    699. 

  699. }

    700. 

  700. 

    701. 

  701. /***********************************************************************/

    702. 

  702. /* Option selected/unselected                                          */

    703. 

  703. /***********************************************************************/

    704. 

  704. 

    705. 

  705. function selected($var1, $var2) {

    706. 

  706. 

    707. 

  707. if ($var1 == $var2)

    708. 

  708.    return 'selected';

    709. 

  709. else

    710. 

  710.    return '';

    711. 

  711. }

    712. 

  712. 

    713. 

  713. /***********************************************************************/

    714. 

  714. /* Register manually a user                                            */

    715. 

  715. /***********************************************************************/

    716. 

  716. 

    717. 

  717. function add_reg_user($reguser) {

    718. 

  718. 	global $wpdb;

    719. 

  719. 

    720. 

  720. 	check_admin_referer('sabre-manage_registration');

    721. 

  721. 

    722. 

  722. 	$curdate = current_time('timestamp', 0);

    723. 

  723. 	$stordate = date("Y-m-d H:i:s", $curdate);

    724. 

  724. 

    725. 

  725. 	$user_info = new WP_User($reguser);

    726. 

  726. 	if($user_info->user_login == $reguser) {

    727. 

  727. 		if (!$user_info->has_cap('edit_users')) {

    728. 

  728. 			if (!$wpdb->get_var("SELECT COUNT(*) FROM `" . SABRE_TABLE . "` WHERE `status` in ('ok', 'to confirm') AND `user_id` = '" . $user_info->ID . "'")) {

    729. 

  729. 				@$wpdb->query("INSERT INTO `" . SABRE_TABLE . "` SET `user_IP` = 'none', `first_mod` = '" . $stordate ."', `last_mod` = '" . $stordate ."', `status` = 'ok', `user` = '" . $user_info->user_login . "', `email` = '" . $user_info->user_email . "', `user_id` = '" . $user_info->ID . "'");

    730. 

  730. 				if (!mysql_error()) {

    731. 

  731. 					$id = $wpdb->insert_id;

    732. 

  732. 					@$wpdb->query("UPDATE `" . SABRE_TABLE . "` SET `md5_id` = '" . md5($id) . "' WHERE `id` = " . (int)$id);

    733. 

  733. 					if (!mysql_error()) {

    734. 

  734. 						$msg = __('WordPress user successfully registered.', 'sabre');

    735. 

  735. 						do_action('sabre_accepted_registration');

    736. 

  736. 						}

    737. 

  737. 					else

    738. 

  738. 						$msg = __('Unexpected SQL error. Current operation failed.', 'sabre');

    739. 

  739. 					}

    740. 

  740. 				else $msg = __('Unexpected SQL error. Current operation failed.', 'sabre');

    741. 

  741. 				}

    742. 

  742. 			else $msg = __('WordPress user is already registered. Manual registration ineffective.', 'sabre');

    743. 

  743. 			}

    744. 

  744. 		else $msg = __("WordPress user doesn't need to confirm registration. Manual registration ineffective.", 'sabre');

    745. 

  745. 		}

    746. 

  746. 	else $msg = __('Unknown WordPress user. Manual registration failed.', 'sabre');

    747. 

  747. 	return $msg;

    748. 

  748. }

    749. 

  749. 

    750. 

  750. /***********************************************************************/

    751. 

  751. /* Register manually all existing users                                */

    752. 

  752. /***********************************************************************/

    753. 

  753. 

    754. 

  754. function add_all_users() {

    755. 

  755. 

    756. 

  756. 	check_admin_referer('sabre-manage_registration');

    757. 

  757. 

    758. 

  758. 	$users = get_users_of_blog();

    759. 

  759. 	$total = 0;

    760. 

  760. 	$added = 0;

    761. 

  761. 	$msg = __('WordPress user successfully registered.', 'sabre');

    762. 

  762. 	foreach ($users as $user) {

    763. 

  763. 		$total += 1;

    764. 

  764. 		$ret = $this->add_reg_user($user->user_login);

    765. 

  765. 		if ($ret == $msg) $added += 1;

    766. 

  766. 		}

    767. 

  767. 

    768. 

  768. 	return sprintf(__ngettext('%s/%s WordPress user successfully registered.','%s/%s WordPress users successfully registered.',  $added, 'sabre'), $added, $total);

    769. 

  769. }

    770. 

  770. 

    771. 

  771. /***********************************************************************/

    772. 

  772. /* Unregister manually a user                                            */

    773. 

  773. /***********************************************************************/

    774. 

  774. 

    775. 

  775. function del_reg_user($list) {

    776. 

  776. 	global $wpdb;

    777. 

  777. 

    778. 

  778. 	check_admin_referer('sabre-manage_registration');

    779. 

  779. 

    780. 

  780. 	$curdate = current_time('timestamp', 0);

    781. 

  781. 	$stordate = date("Y-m-d H:i:s", $curdate);

    782. 

  782. 

    783. 

  783. 	$error[0] = __("Manually unregistered", 'sabre');

    784. 

  784. 	$sabre_opt = $this->get_option('sabre_opt');

    785. 

  785. 

    786. 

  786. 	foreach ($list as $selid => $delid) {

    787. 

  787. 		if ($sabre_opt['delete_user'] == 'true') {

    788. 

  788. 			$user = $wpdb->get_var("SELECT `user_id` FROM `" . SABRE_TABLE . "` WHERE `id` = " . (int)$delid);

    789. 

  789. 			if (isset($user)) wp_delete_user($user);

    790. 

  790. 			}

    791. 

  791. 		$removed += @$wpdb->query("UPDATE `" . SABRE_TABLE . "` SET `status` = 'ko', `last_mod` = '" . $stordate ."', `user_id` = NULL, `msg` = '" . maybe_serialize($error) . "' WHERE `id` = " . (int)$delid);

    792. 

  792. 		do_action('sabre_cancelled_registration');

    793. 

  793. 		}

    794. 

  794. 	if (!mysql_error())

    795. 

  795. 		return sprintf(__ngettext('%s user manually unregistered.', '%s users manually unregistered.', $removed, 'sabre'), $removed);

    796. 

  796. 	else

    797. 

  797. 		return __('Unexpected SQL error. Current operation failed.', 'sabre');

    798. 

  798. }

    799. 

  799. 

    800. 

  800. /***********************************************************************/

    801. 

  801. /* Purge unregistered user log                                         */

    802. 

  802. /***********************************************************************/

    803. 

  803. 

    804. 

  804. function del_unreg_user($days) {

    805. 

  805. 	global $wpdb;

    806. 

  806. 

    807. 

  807. 	check_admin_referer('sabre-manage_registration');

    808. 

  808. 

    809. 

  809. 	$curdate = current_time('timestamp', 0);

    810. 

  810. 	$stordate = date("Y-m-d H:i:s", $curdate);

    811. 

  811. 

    812. 

  812. 	$removed = $wpdb->query("DELETE FROM `" . SABRE_TABLE . "` WHERE `status` = 'ko' AND `last_mod` < DATE_SUB('$stordate', INTERVAL $days DAY)");

    813. 

  813. 	if (!mysql_error())

    814. 

  814. 		return sprintf(__ngettext('%s record deleted.', '%s records deleted.', $removed, 'sabre'), $removed);

    815. 

  815. 	else

    816. 

  816. 		return __('Unexpected SQL error. Current operation failed.', 'sabre');

    817. 

  817. }

    818. 

  818. 

    819. 

  819. /***********************************************************************/

    820. 

  820. /* Refuse manually a registration                                     */

    821. 

  821. /***********************************************************************/

    822. 

  822. 

    823. 

  823. function unconfirm_reg_user($list) {

    824. 

  824. 	global $wpdb;

    825. 

  825. 

    826. 

  826. 	check_admin_referer('sabre-manage_registration');

    827. 

  827. 

    828. 

  828. 	$curdate = current_time('timestamp', 0);

    829. 

  829. 	$stordate = date("Y-m-d H:i:s", $curdate);

    830. 

  830. 

    831. 

  831. 	$error[0] = __("Registration refused by admin", 'sabre');

    832. 

  832. 	$sabre_opt = $this->get_option('sabre_opt');

    833. 

  833. 

    834. 

  834. 	foreach ($list as $selid => $delid) {

    835. 

  835. 		if ($sabre_opt['delete_user'] == 'true') {

    836. 

  836. 			$user = $wpdb->get_var("SELECT `user_id` FROM `" . SABRE_TABLE . "` WHERE `id` = " . (int)$delid);

    837. 

  837. 			if (isset($user)) wp_delete_user($user);

    838. 

  838. 			}

    839. 

  839. 		$removed += @$wpdb->query("UPDATE `" . SABRE_TABLE . "` SET `status` = 'ko', `last_mod` = '" . $stordate ."', `user_id` = NULL, `msg` = '" . maybe_serialize($error) . "' WHERE `id` = " . (int)$delid);

    840. 

  840. 		}

    841. 

  841. 	if (!mysql_error()) {

    842. 

  842. 		$sabre_opt['total_stopped'] += $removed;

    843. 

  843. 		$this->update_option('sabre_opt', $sabre_opt);

    844. 

  844. 		return sprintf(__ngettext('%s registration refused.', '%s registrations refused.', $removed, 'sabre'), $removed);

    845. 

  845. 		}

    846. 

  846. 	else

    847. 

  847. 		return __('Unexpected SQL error. Current operation failed.', 'sabre');

    848. 

  848. }

    849. 

  849. 

    850. 

  850. /***********************************************************************/

    851. 

  851. /* Confirm manually a registration                                     */

    852. 

  852. /***********************************************************************/

    853. 

  853. 

    854. 

  854. function confirm_reg_user($list) {

    855. 

  855. 	global $wpdb;

    856. 

  856. 

    857. 

  857. 	check_admin_referer('sabre-manage_registration');

    858. 

  858. 

    859. 

  859. 	$curdate = current_time('timestamp', 0);

    860. 

  860. 	$stordate = date("Y-m-d H:i:s", $curdate);

    861. 

  861. 

    862. 

  862. 	$error[0] = __("Registration confirmed by admin", 'sabre');

    863. 

  863. 	$sabre_opt = $this->get_option('sabre_opt');

    864. 

  864. 

    865. 

  865. 	foreach ($list as $selid => $delid) {

    866. 

  866. 		$user = $wpdb->get_var("SELECT `user_id` FROM `" . SABRE_TABLE . "` WHERE `id` = " . (int)$delid);

    867. 

  867. 		if (isset($user)) $this->new_admin_confirmation($user);

    868. 

  868. 		$confirmed += @$wpdb->query("UPDATE `" . SABRE_TABLE . "` SET `status` = 'ok', `last_mod` = '" . $stordate ."', `msg` = '" . maybe_serialize($error) . "' WHERE `id` = " . (int)$delid);

    869. 

  869. 		do_action('sabre_accepted_registration');

    870. 

  870. 		}

    871. 

  871. 	if (!mysql_error()) {

    872. 

  872. 		$sabre_opt['total_accepted'] += $confirmed;

    873. 

  873. 		$this->update_option('sabre_opt', $sabre_opt);

    874. 

  874. 		return sprintf(__ngettext('%s registration confirmed.', '%s registrations confirmed.', $confirmed, 'sabre'), $confirmed);

    875. 

  875. 		}

    876. 

  876. 	else

    877. 

  877. 		return __('Unexpected SQL error. Current operation failed.', 'sabre');

    878. 

  878. }

    879. 

  879. 

    880. 

  880. /***********************************************************************/

    881. 

  881. /* Save Sabre options                                                  */

    882. 

  882. /***********************************************************************/

    883. 

  883. 

    884. 

  884. function save_options($form_values) {

    885. 

  885. 

    886. 

  886. 	$invite_gen = array_search(__("Gen", 'sabre'), $form_values);

    887. 

  887. 	$invite_del = array_search(__("Del", 'sabre'), $form_values);

    888. 

  888. 	if ($invite_gen || $invite_del)

    889. 

  889. 		$this->check_invite_codes($invite_gen, $invite_del, $form_values);

    890. 

  890. 

    891. 

  891. 	if (isset($form_values['sabre_option_save'])) {

    892. 

  892. 

    893. 

  893. 		check_admin_referer('sabre-manage_option');

    894. 

  894. 

    895. 

  895. 		$sabre_opt = $this->get_option('sabre_opt');

    896. 

  896. 

    897. 

  897. 		$sabre_opt['enable_captcha'] = (isset($form_values['sabre_enable_captcha']) ? 'true' : 'false');

    898. 

  898. 		$sabre_opt['white_bg'] = (isset($form_values['sabre_white_bg']) ? 'true' : 'false');

    899. 

  899. 		$sabre_opt['acceptedChars'] = (!empty($form_values['sabre_acceptedChars']) ? $form_values['sabre_acceptedChars'] : 'ABCEFGHJKMNPRSTVWXYZ123456789');

    900. 

  900. 		$sabre_opt['stringlength'] = (!empty($form_values['sabre_stringlength']) ? (int)$form_values['sabre_stringlength'] : 5);

    901. 

  901. 		$sabre_opt['contrast'] = (int)$form_values['sabre_contrast'];

    902. 

  902. 		$sabre_opt['num_polygons'] = (int)$form_values['sabre_num_polygons'];

    903. 

  903. 		$sabre_opt['num_ellipses'] = (int)$form_values['sabre_num_ellipses'];

    904. 

  904. 		$sabre_opt['num_lines'] = (int)$form_values['sabre_num_lines'];

    905. 

  905. 		$sabre_opt['num_dots'] = (int)$form_values['sabre_num_dots'];

    906. 

  906. 		$sabre_opt['min_thickness'] = (int)$form_values['sabre_min_thickness'];

    907. 

  907. 		$sabre_opt['max_thickness'] = (int)$form_values['sabre_max_thickness'];

    908. 

  908. 		$sabre_opt['min_radius'] = (int)$form_values['sabre_min_radius'];

    909. 

  909. 		$sabre_opt['max_radius'] = (int)$form_values['sabre_max_radius'];

    910. 

  910. 		$sabre_opt['object_alpha'] = (int)$form_values['sabre_object_alpha'];

    911. 

  911. 

    912. 

  912. 		$sabre_opt['enable_math'] = (isset($form_values['sabre_enable_math']) ? 'true' : 'false');

    913. 

  913. 		$sabre_opt['math_ops'] = (!empty($form_values['sabre_math_ops']) ? $form_values['sabre_math_ops'] : '+-*');

    914. 

  914. 

    915. 

  915. 		$sabre_opt['enable_text'] = (isset($form_values['sabre_enable_text']) ? 'true' : 'false');

    916. 

  916. 

    917. 

  917. 		$sabre_opt['enable_confirm'] = (isset($form_values['sabre_enable_confirm']) ? $form_values['sabre_enable_confirm'] : 'none');

    918. 

  918. 		$sabre_opt['period'] = (1 > (int)$form_values['sabre_confirm_period'] ? 1 : (int)$form_values['sabre_confirm_period']);

    919. 

  919. 		$sabre_opt['no_entry'] = (isset($form_values['sabre_no_entry']) ? 'true' : 'false');

    920. 

  920. 		$sabre_opt['delete_user'] = (isset($form_values['sabre_delete_user']) ? 'true' : 'false');

    921. 

  921. 		$sabre_opt['mail_confirm'] = (isset($form_values['sabre_mail_confirm']) ? 'true' : 'false');

    922. 

  922. 

    923. 

  923. 		$sabre_opt['sabre_seq'] = $form_values['sabre_test_seq'];

    924. 

  924. 

    925. 

  925. 		$sabre_opt['enable_stealth'] = (isset($form_values['sabre_enable_stealth']) ? 'true' : 'false');

    926. 

  926. 		$sabre_opt['js_support'] = (isset($form_values['sabre_enable_js']) ? 'true' : 'false');

    927. 

  927. 		$sabre_opt['session_timeout'] = (int)$form_values['sabre_timeout'];

    928. 

  928. 		$sabre_opt['speed_limit'] = (int)$form_values['sabre_speed'];

    929. 

  929. 		$sabre_opt['check_banned_IP'] = (isset($form_values['sabre_banned_IP']) ? 'true' : 'false');

    930. 

  930. 

    931. 

  931. 		$sabre_opt['user_pwd'] = (isset($form_values['sabre_user_pwd']) ? 'true' : 'false');

    932. 

  932. 		$sabre_opt['show_banner'] = (isset($form_values['sabre_show_banner']) ? 'true' : 'false');

    933. 

  933. 		$sabre_opt['show_dashboard'] = (isset($form_values['sabre_show_dashboard']) ? 'true' : 'false');

    934. 

  934. 		$sabre_opt['show_user'] = (isset($form_values['sabre_show_user']) ? 'true' : 'false');

    935. 

  935. 		$sabre_opt['suppress_sabre'] = (isset($form_values['sabre_suppress_sabre']) ? 'true' : 'false');

    936. 

  936. 		$sabre_opt['enable_policy'] = (isset($form_values['sabre_enable_policy']) ? 'true' : 'false');

    937. 

  937. 		$sabre_opt['policy_name'] = $form_values['sabre_policy_name'];

    938. 

  938. 		$sabre_opt['policy_link'] = $form_values['sabre_policy_link'];

    939. 

  939. 		$sabre_opt['policy_text'] = $form_values['sabre_policy_text'];

    940. 

  940. 		$sabre_opt['enable_invite'] = (isset($form_values['sabre_enable_invite']) ? 'true' : 'false');

    941. 

  941. 		$sabre_opt['invite_codes'] = $this->shrink_invite_codes($form_values);

    942. 

  942. 		$sabre_opt['mail_from_name'] = $form_values['sabre_mail_from_name'];

    943. 

  943. 		$sabre_opt['mail_from_mail'] = $form_values['sabre_mail_from_mail'];

    944. 

  944. 

    945. 

  945. 		$this->update_option('sabre_opt', $sabre_opt);

    946. 

  946. 

    947. 

  947. 		return TRUE;

    948. 

  948. 	}

    949. 

  949. 	return FALSE;

    950. 

  950. }

    951. 

  951. 

    952. 

  952. /***********************************************************************/

    953. 

  953. /* Load CSS for Sabre admin page                                       */

    954. 

  954. /***********************************************************************/

    955. 

  955. 

    956. 

  956. function sabre_css ()

    957. 

  957. {

    958. 

  958. 	if (isset($_REQUEST['page']) && $_REQUEST['page'] == 'sabre')

    959. 

  959. 		include_once(SABREPATH . 'sabre_css.php');

    960. 

  960. }

    961. 

  961. 

    962. 

  962. /***********************************************************************/

    963. 

  963. /* Load CSS for login form                                             */

    964. 

  964. /***********************************************************************/

    965. 

  965. 

    966. 

  966. function login_css ()

    967. 

  967. {

    968. 

  968. 	if (isset($_REQUEST['action']) && $_REQUEST['action'] == 'register' && !is_multisite()) {

    969. 

  969. 		wp_register_script('password-strength-meter', '/wp-admin/js/password-strength-meter.js', array('jquery'), '20070405');

    970. 

  970. 		wp_localize_script( 'password-strength-meter', 'pwsL10n', array(

    971. 

  971. 				'short' => __('Too short', 'sabre'),

    972. 

  972. 				'bad' => __('Bad', 'sabre'),

    973. 

  973. 				'good' => __('Good', 'sabre'),

    974. 

  974. 				'strong' => __('Strong', 'sabre'),

    975. 

  975. 				'mismatch' => __('Mismatch', 'sabre')

    976. 

  976. 			) );

    977. 

  977. 		wp_print_scripts('password-strength-meter');

    978. 

  978. 		?>

    979. 

  979. 		<script type="text/javascript">

    980. 

  980. 		function check_pass_strength ( ) {

    981. 

  981. 

    982. 

  982. 		var pass = jQuery('#user_pwd1').val();

    983. 

  983. 		var user = jQuery('#user_login').val();

    984. 

  984. 		var pass2 = jQuery('#user_pwd2').val();

    985. 

  985. 

    986. 

  986. 		// get the result as an object, i'm tired of typing it

    987. 

  987. 		var res = jQuery('#pass-strength-result');

    988. 

  988. 

    989. 

  989. 		var strength = passwordStrength(pass, user, pass2);

    990. 

  990. 

    991. 

  991. 		jQuery(res).removeClass('short bad good strong');

    992. 

  992. 

    993. 

  993. 		if ( strength == 2 ) {

    994. 

  994. 			jQuery(res).addClass('bad');

    995. 

  995. 			jQuery(res).html( pwsL10n.bad );

    996. 

  996. 		}

    997. 

  997. 		else if ( strength == 3 ) {

    998. 

  998. 			jQuery(res).addClass('good');

    999. 

  999. 			jQuery(res).html( pwsL10n.good );

    1000. 

  1000. 		}

    1001. 

  1001. 		else if ( strength == 4 ) {

    1002. 

  1002. 			jQuery(res).addClass('strong');

    1003. 

  1003. 			jQuery(res).html( pwsL10n.strong );

    1004. 

  1004. 		}

    1005. 

  1005. 		else if ( strength == 5 ) {

    1006. 

  1006. 			jQuery(res).addClass('short');

    1007. 

  1007. 			jQuery(res).html( pwsL10n.mismatch );

    1008. 

  1008. 		}

    1009. 

  1009. 		else {

    1010. 

  1010. 			// this catches 'Too short' and the off chance anything else comes along

    1011. 

  1011. 			jQuery(res).addClass('short');

    1012. 

  1012. 			jQuery(res).html( pwsL10n.short );

    1013. 

  1013. 		}

    1014. 

  1014. 

    1015. 

  1015. 		}

    1016. 

  1016. 

    1017. 

  1017. 		jQuery(document).ready(function($) {

    1018. 

  1018. 			$('#user_pwd1').keyup( check_pass_strength );

    1019. 

  1019. 			$('#user_pwd2').keyup( check_pass_strength );

    1020. 

  1020. 		$('.color-palette').click(function(){$(this).siblings('input[name=admin_color]').attr('checked', 'checked')});

    1021. 

  1021. 		} );

    1022. 

  1022. 

    1023. 

  1023. 		jQuery(document).ready( function() {

    1024. 

  1024. 			jQuery('#user_pwd1,#user_pwd2').attr('autocomplete','off');

    1025. 

  1025.     		});

    1026. 

  1026. 		</script>

    1027. 

  1027. <?php

    1028. 

  1028. 

    1029. 

  1029. 	}

    1030. 

  1030. 	

    1031. 

  1031. 	echo "<link rel=\"stylesheet\" href=\"" . SABREURL . "sabre_login.css" . "\" type=\"text/css\" />\r\n\r\n";

    1032. 

  1032. 

    1033. 

  1033. 	if ($this->custom_logo && !is_multisite())

    1034. 

  1034. 		echo '<style type="text/css"> h1 a {background: url(' . SABREURL . 'images/sabre-login.gif) no-repeat; width: 292px; height: 66px; text-indent: -9999px; overflow: hidden; padding-bottom: 15px; display: block;} </style>';

    1035. 

  1035. }

    1036. 

  1036. 

    1037. 

  1037. /***********************************************************************/

    1038. 

  1038. /* Change default header url in login form                             */

    1039. 

  1039. /***********************************************************************/

    1040. 

  1040. 

    1041. 

  1041. function header_url ($header_url) {

    1042. 

  1042. 

    1043. 

  1043. 	return get_bloginfo('url');

    1044. 

  1044. }

    1045. 

  1045. 

    1046. 

  1046. /***********************************************************************/

    1047. 

  1047. /* Change default header title in login form                           */

    1048. 

  1048. /***********************************************************************/

    1049. 

  1049. 

    1050. 

  1050. function header_title ($header_title) {

    1051. 

  1051. 

    1052. 

  1052. 	return get_bloginfo('name');

    1053. 

  1053. }

    1054. 

  1054. 

    1055. 

  1055. /***********************************************************************/

    1056. 

  1056. /* Automatic cleanup                                                   */

    1057. 

  1057. /***********************************************************************/

    1058. 

  1058. 

    1059. 

  1059. function auto_clean () {

    1060. 

  1060. 	global $wpdb;

    1061. 

  1061. 

    1062. 

  1062. 	// Disable unconfirmed registration

    1063. 

  1063. 	$sabre_opt = $this->get_option('sabre_opt');

    1064. 

  1064. 	if (is_array($sabre_opt))

    1065. 

  1065. 		extract ($sabre_opt, EXTR_OVERWRITE) ;

    1066. 

  1066. 

    1067. 

  1067. 	$curdate = current_time('timestamp', 0);

    1068. 

  1068. 	$stordate = date("Y-m-d H:i:s", $curdate);

    1069. 

  1069. 

    1070. 

  1070. 	if ($enable_confirm == 'user') {

    1071. 

  1071. 		$error[0] = __('Exceeded period for confirmation of registration.', 'sabre');

    1072. 

  1072. 		$days = (int)$period;

    1073. 

  1073. 		if ($delete_user == 'true') {

    1074. 

  1074. 			$users = $wpdb->get_results("SELECT `user_id` FROM `" . SABRE_TABLE . "` WHERE `status` = 'to confirm' AND `last_mod` < DATE_SUB('$stordate', INTERVAL $days DAY)");

    1075. 

  1075. 			if ($users) {

    1076. 

  1076. 				foreach ($users as $user) {

    1077. 

  1077. 					wp_delete_user($user->user_id);

    1078. 

  1078. 					}

    1079. 

  1079. 				}

    1080. 

  1080. 			}

    1081. 

  1081. 

    1082. 

  1082. 		@$wpdb->query("UPDATE `" . SABRE_TABLE . "` SET `status` = 'ko', `last_mod` = '" . $stordate ."', `user_id` = NULL, `msg` = '" . maybe_serialize($error) . "' WHERE `status` = 'to confirm' AND `last_mod` < DATE_SUB('$stordate', INTERVAL $days DAY)");

    1083. 

  1083. 	}

    1084. 

  1084. 

    1085. 

  1085. 	// Clean the table

    1086. 

  1086. 	$purge = (int)$purge_days;

    1087. 

  1087. 	if ($purge > 0) {

    1088. 

  1088. 		$query = "DELETE FROM `" . SABRE_TABLE . "` WHERE `last_mod` < DATE_SUB('$stordate', INTERVAL $purge DAY) AND `status` not in ('ok','to confirm')";

    1089. 

  1089. 		$removed = $wpdb->query($query);

    1090. 

  1090. 	}

    1091. 

  1091. 

    1092. 

  1092. }

    1093. 

  1093. 

    1094. 

  1094. /***********************************************************************/

    1095. 

  1095. /* Get new spam blocked since last visit                               */

    1096. 

  1096. /***********************************************************************/

    1097. 

  1097. 

    1098. 

  1098. function get_new_spam () {

    1099. 

  1099. global $wpdb;

    1100. 

  1100. 

    1101. 

  1101. 	$sabre_opt = $this->get_option('sabre_opt');

    1102. 

  1102. 	return $wpdb->get_var("SELECT COUNT(*) FROM `" . SABRE_TABLE . "` WHERE `status`= 'ko' AND `last_mod` > " . strftime("'%Y-%m-%d %H:%M:%S'", (int)$sabre_opt['last_spam_check']));

    1103. 

  1103. 

    1104. 

  1104. }

    1105. 

  1105. 

    1106. 

  1106. /***********************************************************************/

    1107. 

  1107. /* Get new registrations accepted since last visit                     */

    1108. 

  1108. /***********************************************************************/

    1109. 

  1109. 

    1110. 

  1110. function get_new_users () {

    1111. 

  1111. global $wpdb;

    1112. 

  1112. 

    1113. 

  1113. 	$sabre_opt = $this->get_option('sabre_opt');

    1114. 

  1114. 	return $wpdb->get_var("SELECT COUNT(*) FROM `" . SABRE_TABLE . "` WHERE `status`= 'ok' AND `last_mod` > " . strftime("'%Y-%m-%d %H:%M:%S'", (int)$sabre_opt['last_approved_check']));

    1115. 

  1115. 

    1116. 

  1116. }

    1117. 

  1117. 

    1118. 

  1118. /***********************************************************************/

    1119. 

  1119. /* Get new registrations to confirm since last visit                     */

    1120. 

  1120. /***********************************************************************/

    1121. 

  1121. 

    1122. 

  1122. function get_new_confirm () {

    1123. 

  1123. global $wpdb;

    1124. 

  1124. 

    1125. 

  1125. 	$sabre_opt = $this->get_option('sabre_opt');

    1126. 

  1126. 	return $wpdb->get_var("SELECT COUNT(*) FROM `" . SABRE_TABLE . "` WHERE `status`= 'to confirm' AND `last_mod` > " . strftime("'%Y-%m-%d %H:%M:%S'", (int)$sabre_opt['last_confirm_check']));

    1127. 

  1127. 

    1128. 

  1128. }

    1129. 

  1129. 

    1130. 

  1130. /***********************************************************************/

    1131. 

  1131. /* Display the list of invitation codes in the option form             */

    1132. 

  1132. /***********************************************************************/

    1133. 

  1133. 

    1134. 

  1134. function display_invite_codes () {

    1135. 

  1135. 

    1136. 

  1136. 	$sabre_opt = $this->get_option('sabre_opt');

    1137. 

  1137. 	$invite_codes = $sabre_opt['invite_codes'];

    1138. 

  1138. 	If (!is_array($invite_codes))

    1139. 

  1139. 		$invite_codes = array();

    1140. 

  1140. 

    1141. 

  1141. 	for ($i=0; $i < count($invite_codes); $i++) {

    1142. 

  1142. 		$invite_string .= '<li><input type="text" size="15" name="sabre_invite_code[]" id="sabre_invite_code_' . $i . '" value="' . $invite_codes[$i]['code'] . '" /><input type="text" size="6" name="sabre_invite_number[]" id="sabre_invite_number_' . $i .'" value="' . $invite_codes[$i]['number'] . '" /><input type="text" size="10" name="sabre_invite_date[]" id="sabre_invite_date_' . $i . '" value="' . (is_numeric($invite_codes[$i]['date']) ? date('Y-m-d', $invite_codes[$i]['date']) : '') . '" /><input type="submit" name="sabre_invite_action-gen-' . $i . '" value="'. __("Gen", 'sabre') . '" class="button" /><input type="submit" name="sabre_invite_action-del-' . $i . '" value="'. __("Del", 'sabre') . '" class="button" /></li>';

    1143. 

  1143. 		}

    1144. 

  1144. 

    1145. 

  1145. 	$invite_string .= '<li><input type="text" size="15" name="sabre_invite_code[]" id="sabre_invite_code_' . $i . '" value="" /><input type="text" size="6" name="sabre_invite_number[]" id="sabre_invite_number_' . $i .'" value="" /><input type="text" size="10" name="sabre_invite_date[]" id="sabre_invite_date_' . $i . '" value="" /><input type="submit" name="sabre_invite_action-gen-' . $i . '" value="'. __("Gen", 'sabre') . '" class="button" /></li>';

    1146. 

  1146. 

    1147. 

  1147. 	return $invite_string;

    1148. 

  1148. }

    1149. 

  1149. 

    1150. 

  1150. /***********************************************************************/

    1151. 

  1151. /* Check the list of invitation codes in the option form               */

    1152. 

  1152. /***********************************************************************/

    1153. 

  1153. 

    1154. 

  1154. function check_invite_codes($gen, $del, $form_values) {

    1155. 

  1155. 

    1156. 

  1156. 	if (…
    1157.

Large files files are truncated, but you can click here to view the full file