Version Description
- 2016-01-30 =
- removed XSS vulnerability - thanks to Kenan from tbmnull.com
Download this release
Release Info
Developer | webvitaly |
Plugin | ![]() |
Version | 4.2 |
Comparing to | |
See all releases |
Code changes from version 4.1 to 4.2
- anti-spam-info.php +1 -1
- anti-spam.php +18 -12
- js/{anti-spam-4.1.js → anti-spam-4.2.js} +0 -0
- readme.txt +13 -11
anti-spam-info.php
CHANGED
@@ -17,7 +17,7 @@ function antispam_admin_notice() {
|
|
17 |
<div class="update-nag antispam-panel-info">
|
18 |
<p style="margin: 0;">
|
19 |
<?php echo $blocked_total; ?> spam comments were blocked by <a href="http://wordpress.org/plugins/anti-spam/">Anti-spam</a> plugin so far.
|
20 |
-
<a href="http://codecanyon.net/item/antispam-pro/6491169?ref=
|
21 |
</p>
|
22 |
</div>
|
23 |
<?php
|
17 |
<div class="update-nag antispam-panel-info">
|
18 |
<p style="margin: 0;">
|
19 |
<?php echo $blocked_total; ?> spam comments were blocked by <a href="http://wordpress.org/plugins/anti-spam/">Anti-spam</a> plugin so far.
|
20 |
+
<a href="http://codecanyon.net/item/antispam-pro/6491169?ref=webvitalii" title="Anti-spam Pro">Upgrade to Pro</a> for more advanced protection.
|
21 |
</p>
|
22 |
</div>
|
23 |
<?php
|
anti-spam.php
CHANGED
@@ -3,14 +3,16 @@
|
|
3 |
Plugin Name: Anti-spam
|
4 |
Plugin URI: http://wordpress.org/plugins/anti-spam/
|
5 |
Description: No spam in comments. No captcha.
|
6 |
-
Version: 4.
|
7 |
Author: webvitaly
|
8 |
Text Domain: anti-spam
|
9 |
Author URI: http://web-profile.com.ua/wordpress/plugins/
|
10 |
License: GPLv3
|
11 |
*/
|
12 |
|
13 |
-
defined('ABSPATH')
|
|
|
|
|
14 |
|
15 |
$antispam_send_spam_comment_to_admin = false; // if true, than rejected spam comments will be sent to admin email
|
16 |
$antispam_log_spam_comment = false; // if true, than rejected spam comments will be logged to wp-content/plugins/anti-spam/log/anti-spam-2015-11.log
|
@@ -18,7 +20,7 @@ $antispam_allow_trackbacks = false; // if true, than trackbacks will be allowed
|
|
18 |
// trackbacks almost not used by users, but mostly used by spammers; pingbacks are always enabled
|
19 |
// more about the difference between trackback and pingback - http://web-profile.com.ua/web/trackback-vs-pingback/
|
20 |
|
21 |
-
define('ANTISPAM_PLUGIN_VERSION', '4.
|
22 |
|
23 |
$antispam_settings = array(
|
24 |
'send_spam_comment_to_admin' => $antispam_send_spam_comment_to_admin,
|
@@ -33,7 +35,7 @@ include('anti-spam-info.php');
|
|
33 |
|
34 |
function antispam_enqueue_script() {
|
35 |
if (is_singular() && comments_open()) { // load script only for pages with comments form
|
36 |
-
wp_enqueue_script('anti-spam-script', plugins_url('/js/anti-spam-4.
|
37 |
}
|
38 |
}
|
39 |
add_action('wp_enqueue_scripts', 'antispam_enqueue_script');
|
@@ -107,16 +109,16 @@ function antispam_check_comment($commentdata) {
|
|
107 |
if ( trim($_POST['antspm-d']) != date('Y') ) { // extra js-only check: there is no js added input - it is spam
|
108 |
$spam_flag = true;
|
109 |
if (empty($_POST['antspm-q'])) { // empty answer - it is spam
|
110 |
-
$antispam_error_message .= 'Error: empty answer. ['
|
111 |
} else {
|
112 |
-
$antispam_error_message .= 'Error: answer is wrong. ['
|
113 |
}
|
114 |
}
|
115 |
}
|
116 |
|
117 |
if ( ! empty($_POST['antspm-e-email-url-website'])) { // trap field is not empty - it is spam
|
118 |
$spam_flag = true;
|
119 |
-
$antispam_error_message .= 'Error: field should be empty. ['
|
120 |
}
|
121 |
|
122 |
if ($spam_flag) { // it is spam
|
@@ -159,17 +161,21 @@ function antispam_check_comment($commentdata) {
|
|
159 |
return $commentdata; // if comment does not looks like spam
|
160 |
}
|
161 |
|
|
|
162 |
if ( ! is_admin()) {
|
163 |
add_filter('preprocess_comment', 'antispam_check_comment', 1);
|
164 |
}
|
165 |
|
166 |
|
167 |
function antispam_plugin_meta($links, $file) { // add some links to plugin meta row
|
168 |
-
if (
|
169 |
-
$
|
170 |
-
|
171 |
-
|
|
|
|
|
|
|
172 |
}
|
173 |
-
return $links;
|
174 |
}
|
175 |
add_filter('plugin_row_meta', 'antispam_plugin_meta', 10, 2);
|
3 |
Plugin Name: Anti-spam
|
4 |
Plugin URI: http://wordpress.org/plugins/anti-spam/
|
5 |
Description: No spam in comments. No captcha.
|
6 |
+
Version: 4.2
|
7 |
Author: webvitaly
|
8 |
Text Domain: anti-spam
|
9 |
Author URI: http://web-profile.com.ua/wordpress/plugins/
|
10 |
License: GPLv3
|
11 |
*/
|
12 |
|
13 |
+
if ( ! defined( 'ABSPATH' ) ) { // prevent full path disclosure
|
14 |
+
exit;
|
15 |
+
}
|
16 |
|
17 |
$antispam_send_spam_comment_to_admin = false; // if true, than rejected spam comments will be sent to admin email
|
18 |
$antispam_log_spam_comment = false; // if true, than rejected spam comments will be logged to wp-content/plugins/anti-spam/log/anti-spam-2015-11.log
|
20 |
// trackbacks almost not used by users, but mostly used by spammers; pingbacks are always enabled
|
21 |
// more about the difference between trackback and pingback - http://web-profile.com.ua/web/trackback-vs-pingback/
|
22 |
|
23 |
+
define('ANTISPAM_PLUGIN_VERSION', '4.2');
|
24 |
|
25 |
$antispam_settings = array(
|
26 |
'send_spam_comment_to_admin' => $antispam_send_spam_comment_to_admin,
|
35 |
|
36 |
function antispam_enqueue_script() {
|
37 |
if (is_singular() && comments_open()) { // load script only for pages with comments form
|
38 |
+
wp_enqueue_script('anti-spam-script', plugins_url('/js/anti-spam-4.2.js', __FILE__), null, null, true);
|
39 |
}
|
40 |
}
|
41 |
add_action('wp_enqueue_scripts', 'antispam_enqueue_script');
|
109 |
if ( trim($_POST['antspm-d']) != date('Y') ) { // extra js-only check: there is no js added input - it is spam
|
110 |
$spam_flag = true;
|
111 |
if (empty($_POST['antspm-q'])) { // empty answer - it is spam
|
112 |
+
$antispam_error_message .= 'Error: empty answer. ['.esc_attr( $_POST['antspm-q'] ).']<br> '.$rn;
|
113 |
} else {
|
114 |
+
$antispam_error_message .= 'Error: answer is wrong. ['.esc_attr( $_POST['antspm-q'] ).']<br> '.$rn;
|
115 |
}
|
116 |
}
|
117 |
}
|
118 |
|
119 |
if ( ! empty($_POST['antspm-e-email-url-website'])) { // trap field is not empty - it is spam
|
120 |
$spam_flag = true;
|
121 |
+
$antispam_error_message .= 'Error: field should be empty. ['.esc_attr( $_POST['antspm-e-email-url-website'] ).']<br> '.$rn;
|
122 |
}
|
123 |
|
124 |
if ($spam_flag) { // it is spam
|
161 |
return $commentdata; // if comment does not looks like spam
|
162 |
}
|
163 |
|
164 |
+
|
165 |
if ( ! is_admin()) {
|
166 |
add_filter('preprocess_comment', 'antispam_check_comment', 1);
|
167 |
}
|
168 |
|
169 |
|
170 |
function antispam_plugin_meta($links, $file) { // add some links to plugin meta row
|
171 |
+
if ( $file == plugin_basename( __FILE__ ) ) {
|
172 |
+
$row_meta = array(
|
173 |
+
'support' => '<a href="http://web-profile.com.ua/wordpress/plugins/anti-spam/" target="_blank"><span class="dashicons dashicons-editor-help"></span> ' . __( 'Anti-spam', 'anti-spam' ) . '</a>',
|
174 |
+
'donate' => '<a href="http://web-profile.com.ua/donate/" target="_blank"><span class="dashicons dashicons-heart"></span> ' . __( 'Donate', 'anti-spam' ) . '</a>',
|
175 |
+
'upgrage' => '<a href="http://codecanyon.net/item/antispam-pro/6491169?ref=webvitalii" target="_blank"><span class="dashicons dashicons-star-filled"></span> ' . __( 'Anti-spam Pro', 'anti-spam' ) . '</a>'
|
176 |
+
);
|
177 |
+
$links = array_merge( $links, $row_meta );
|
178 |
}
|
179 |
+
return (array) $links;
|
180 |
}
|
181 |
add_filter('plugin_row_meta', 'antispam_plugin_meta', 10, 2);
|
js/{anti-spam-4.1.js → anti-spam-4.2.js}
RENAMED
File without changes
|
readme.txt
CHANGED
@@ -3,8 +3,8 @@ Contributors: webvitaly
|
|
3 |
Donate link: http://web-profile.com.ua/donate/
|
4 |
Tags: spam, spammer, comment, comments, comment-spam, antispam, anti-spam, block-spam, spam-free, spambot, spam-bot, bot
|
5 |
Requires at least: 3.3
|
6 |
-
Tested up to: 4.
|
7 |
-
Stable tag: 4.
|
8 |
License: GPLv3
|
9 |
License URI: http://www.gnu.org/licenses/gpl.html
|
10 |
|
@@ -12,11 +12,11 @@ No spam in comments. No captcha.
|
|
12 |
|
13 |
== Description ==
|
14 |
|
15 |
-
> **[Anti-spam Pro](http://codecanyon.net/item/antispam-pro/6491169?ref=
|
16 |
> **[Anti-spam](http://web-profile.com.ua/wordpress/plugins/anti-spam/ "Plugin page")** |
|
17 |
> **[Donate](http://web-profile.com.ua/donate/ "Support the development")** |
|
18 |
-
> **[
|
19 |
-
|
20 |
|
21 |
**Captcha madness:**
|
22 |
|
@@ -40,9 +40,8 @@ After installing the Anti-spam plugin **try to submit a comment on your site bei
|
|
40 |
If you get an error - you may check the solution in the [Support section](http://wordpress.org/support/plugin/anti-spam) or submit a new topic with detailed description of your problem.
|
41 |
|
42 |
= Useful: =
|
43 |
-
* [Anti-spam Pro - extended version with settings and manual spam protection](http://codecanyon.net/item/antispam-pro/6491169?ref=
|
44 |
-
* [
|
45 |
-
* [WordPress Pro plugins](http://codecanyon.net/popular_item/by_category?category=wordpress&ref=webvitaly)
|
46 |
|
47 |
== Installation ==
|
48 |
|
@@ -55,7 +54,7 @@ If you get an error - you may check the solution in the [Support section](http:/
|
|
55 |
|
56 |
Anti-spam plugin blocks 100% of automatic spam messages (sent by spam-bots via post requests).
|
57 |
Plugin does not block manual spam (submitted by spammers manually via browser).
|
58 |
-
You can use [Anti-spam Pro](http://codecanyon.net/item/antispam-pro/6491169?ref=
|
59 |
|
60 |
= Incompatible with: =
|
61 |
|
@@ -136,11 +135,14 @@ The plugin is pretty small and easy to read.
|
|
136 |
|
137 |
== Changelog ==
|
138 |
|
|
|
|
|
|
|
139 |
= 4.1 - 2015-10-25 =
|
140 |
-
* added log spam to file feature
|
141 |
* prevent full path disclosure
|
142 |
* added empty index.php file
|
143 |
-
* publish plugin to
|
144 |
* added Text Domain for translation.wordpress.org
|
145 |
|
146 |
= 4.0 - 2015-10-11 =
|
3 |
Donate link: http://web-profile.com.ua/donate/
|
4 |
Tags: spam, spammer, comment, comments, comment-spam, antispam, anti-spam, block-spam, spam-free, spambot, spam-bot, bot
|
5 |
Requires at least: 3.3
|
6 |
+
Tested up to: 4.7
|
7 |
+
Stable tag: 4.2
|
8 |
License: GPLv3
|
9 |
License URI: http://www.gnu.org/licenses/gpl.html
|
10 |
|
12 |
|
13 |
== Description ==
|
14 |
|
15 |
+
> **[Anti-spam Pro](http://codecanyon.net/item/antispam-pro/6491169?ref=webvitalii "Upgrade to Pro")** |
|
16 |
> **[Anti-spam](http://web-profile.com.ua/wordpress/plugins/anti-spam/ "Plugin page")** |
|
17 |
> **[Donate](http://web-profile.com.ua/donate/ "Support the development")** |
|
18 |
+
> **[GitHub](https://github.com/webvitalii/anti-spam "Fork")** |
|
19 |
+
> **[Silver Bullet Pro](http://codecanyon.net/item/silver-bullet-pro/15171769?ref=webvitalii "Speedup and protect WordPress in a smart way")**
|
20 |
|
21 |
**Captcha madness:**
|
22 |
|
40 |
If you get an error - you may check the solution in the [Support section](http://wordpress.org/support/plugin/anti-spam) or submit a new topic with detailed description of your problem.
|
41 |
|
42 |
= Useful: =
|
43 |
+
* **[Anti-spam Pro - extended version with settings and manual spam protection](http://codecanyon.net/item/antispam-pro/6491169?ref=webvitalii "Upgrade to Pro")**
|
44 |
+
* **[Silver Bullet Pro - Speedup and protect WordPress in a smart way](http://codecanyon.net/item/silver-bullet-pro/15171769?ref=webvitalii "Speedup and protect WordPress in a smart way")**
|
|
|
45 |
|
46 |
== Installation ==
|
47 |
|
54 |
|
55 |
Anti-spam plugin blocks 100% of automatic spam messages (sent by spam-bots via post requests).
|
56 |
Plugin does not block manual spam (submitted by spammers manually via browser).
|
57 |
+
You can use [Anti-spam Pro](http://codecanyon.net/item/antispam-pro/6491169?ref=webvitalii "Upgrade to Pro") plugin if you need to block manual spam.
|
58 |
|
59 |
= Incompatible with: =
|
60 |
|
135 |
|
136 |
== Changelog ==
|
137 |
|
138 |
+
= 4.2 - 2016-01-30 =
|
139 |
+
* removed XSS vulnerability - thanks to Kenan from [tbmnull.com](http://tbmnull.com/)
|
140 |
+
|
141 |
= 4.1 - 2015-10-25 =
|
142 |
+
* added log spam to file feature - huge thanks to [Guti](http://www.javiergutierrezchamorro.com/ "Javier Gutiérrez Chamorro")
|
143 |
* prevent full path disclosure
|
144 |
* added empty index.php file
|
145 |
+
* publish plugin to GitHub
|
146 |
* added Text Domain for translation.wordpress.org
|
147 |
|
148 |
= 4.0 - 2015-10-11 =
|