芝麻web文件管理V1.00

编辑当前文件:/home/asmplong/www/ancien-site-2019/site/components/com_joomlawatch/class.joomlawatch.block.php

<?php

/**
 * JoomlaWatch - A real-time ajax joomla monitor and live stats
 * @version 1.2.0
 * @package JoomlaWatch
 * @license http://www.gnu.org/licenses/gpl-3.0.txt 	GNU General Public License v3
 * @copyright (C) 2007 by Matej Koval - All rights reserved!
 * @website http://www.codegravity.com
 **/

/** ensure this file is being included by a parent file */
if (!defined('_JEXEC') && !defined('_VALID_MOS'))
    die('Restricted access');

class JoomlaWatchBlock {

var $database;
    var $config;
    var $helper;

function JoomlaWatchBlock() {
        $this->database = new JoomlaWatchDB();
        $this->config = new JoomlaWatchConfig();
        $this->helper = new JoomlaWatchHelper();
    }

/**
     * block
     */
    function blockIp($ip, $reason = "", $date = 0) {
        $query = sprintf("INSERT into #__joomlawatch_blocked values ('','%s','','%d', '%s')", $this->database->getEscaped($ip), (int) $date, $this->database->getEscaped($reason));
        $this->database->executeQuery($query);
    }

/**
     * block
     */
    function unblockIp($ip) {
        $query = sprintf("delete from #__joomlawatch_blocked where ip = '%s'", $this->database->getEscaped($ip));
        $this->database->executeQuery($query);
    }

/**
     * block
     */
    function blockIpToggle($ip) {

$count = $this->getBlockedIp($ip);
        $today = $this->helper->jwDateToday();

if (!$count) {
            $this->blockIp($ip, "", $today);
        } else {
            $this->unblockIp($ip);
        }

}

/**
     * block
     */
    function searchBlockedIp($ip) {
        $query = sprintf("select count(ip) as count from #__joomlawatch_blocked where ip = '%s' limit 1", $this->database->getEscaped($ip)); //starting % ommited
        $count = $this->database->resultQuery($query);
        return $count;
    }

/**
     * block
     */
    function searchBlockedIpWildcard($term) {
        $query = sprintf("select count(ip) as count from #__joomlawatch_blocked where ip like '%s%%' limit 1", $this->database->getEscaped($term)); //starting % ommited
        $count = $this->database->resultQuery($query);
        return $count;
    }

/**
     * block
     */
    function getBlockedIp($ip) {

$ipExploded = explode('.', $ip);

if ($this->searchBlockedIp($ip)) {
            return $ip;
        } else {
            $ip = $ipExploded[0] . "." . $ipExploded[1] . "." . $ipExploded[2] . ".*";
            if ($this->searchBlockedIpWildcard($ip)) {
                return $ip;
            } else {
                $ip = $ipExploded[0] . "." . $ipExploded[1] . ".*";
                if ($this->searchBlockedIpWildcard($ip)) {
                    return $ip;
                } else {
                    $ip = $ipExploded[0] . ".*";
                    if ($this->searchBlockedIpWildcard($ip))
                        return $ip;
                }

}

return "";

}

/**
     * block
     */
    function increaseHitsForBlockedIp($ip) {

$ip = $this->getBlockedIp($ip);
        $query = sprintf("select hits from #__joomlawatch_blocked where ip = '$ip' ", $this->database->getEscaped($ip));
        $hits = $this->database->resultQuery($query);

$hits++;
        if ($hits) { //update
            $query = sprintf("update #__joomlawatch_blocked set hits = '%d' where ip = '%s'", (int) $hits, $this->database->getEscaped($ip));
            $this->database->executeQuery($query);
        }
    }

/**
     * block
     */
    function getBlockedIPs($date = 0, $limitCount = 0) {

if (@$limitCount) {
            $limit = " limit $limitCount ";
        } else {
            $limit = "";
        }

if (@$date != 0) {
            $query = sprintf("select ip,hits,reason from #__joomlawatch_blocked where `date` = '%d' order by hits desc %s", (int) $date, $this->database->getEscaped($limit));
        } else {
            $query = sprintf("select * from #__joomlawatch_blocked order by hits desc %s", $this->database->getEscaped($limit));
        }
        return $rows = $this->database->objectListQuery($query);
    }

/**
     * block
     */
    function countBlockedIPs($date = 0) {
        if (@$date != 0) {
            $query = sprintf("select count(id) as count from #__joomlawatch_blocked where `date` = '%d' order by hits desc ", (int) $date);
            return $this->database->resultQuery($query);
        } else {
            $query = sprintf("select count(id) as count from #__joomlawatch_blocked order by hits desc ", (int) $date);
            return $this->database->resultQuery($query);
        }
    }

/**
     * blocking
     *
     * @return unknown
     */
    function dieWithBlockingMessage($ip) {
        $this->increaseHitsForBlockedIp($ip);
        die($this->config->getConfigValue('JOOMLAWATCH_BLOCKING_MESSAGE'));
    }

/**
     * block
     */
    function getBlockedCountByDate($date = 0) {
        if (@$date != 0) {
            $query = sprintf("select sum(hits) as count from #__joomlawatch_blocked where `date` = '%d'", (int) $date);
            return $this->database->resultQuery($query);
        }
    }

/**
     * block
     */
    function getBlockedCountTotal() {
        $query = sprintf("select sum(hits) as count from #__joomlawatch_blocked limit 1");
        return $this->database->resultQuery($query);
    }

function checkPostRequestForSpam($post) {

/** if nothing is there in the post request */
        if (@!$post) {
            return true;
        }
        $ip = $_SERVER['REMOTE_ADDR'];

if (@$this->searchBlockedIp($ip)) {
            $this->dieWithBlockingMessage($ip);
        }
        $today = $this->helper->jwDateToday();

if (@ $this->config->getCheckboxValue('JOOMLAWATCH_SPAMWORD_BANS_ENABLED')) {

$spamList = explode( "\n", $this->config->getConfigValue('JOOMLAWATCH_SPAMWORD_LIST'));
            foreach ($post as $key => $value) {

foreach($spamList as $spamWord) {
                    $spamWord = trim($spamWord);
                    $value = trim($value);
                    if (@ $spamWord && @$value && JoomlaWatchHelper :: wildcardSearch("*".$spamWord."*", $value)) {
                        $this->blockIp($ip, htmlspecialchars($value), $today);
                        $this->dieWithBlockingMessage($ip);
                    }
                }
            }

}

}
}