You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
114 lines
3.3 KiB
114 lines
3.3 KiB
<?php
|
|
|
|
// (c) Copyright by authors of the Tiki Wiki CMS Groupware Project
|
|
//
|
|
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
|
|
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
|
|
// $Id$
|
|
class Captcha_ReCaptcha30 extends Laminas\Captcha\ReCaptcha
|
|
{
|
|
protected $_RESPONSE = 'g-recaptcha-response';
|
|
|
|
const API_SERVER = 'https://www.google.com/recaptcha/api.js';
|
|
const VERIFY_SERVER = 'https://www.google.com/recaptcha/api/siteverify';
|
|
|
|
/**
|
|
* Validate captcha
|
|
*
|
|
* @see Zend_Validate_Interface::isValid()
|
|
* @param mixed $value
|
|
* @param array|null $context
|
|
* @return boolean
|
|
*/
|
|
public function isValid($value, $context = null)
|
|
{
|
|
if (! is_array($value) && ! is_array($context)) {
|
|
$this->error(self::MISSING_VALUE);
|
|
return false;
|
|
}
|
|
|
|
if (empty($value[$this->_RESPONSE])) {
|
|
$this->error(self::MISSING_VALUE);
|
|
return false;
|
|
}
|
|
|
|
if (! extension_loaded('curl')) {
|
|
$this->error('reCAPTCHA 3 requires the PHP CURL extension');
|
|
return false;
|
|
}
|
|
|
|
//set POST variables
|
|
$url = self::VERIFY_SERVER;
|
|
|
|
$fields_string = http_build_query([
|
|
'secret' => $this->getPrivkey(),
|
|
'response' => $value[$this->_RESPONSE],
|
|
'remoteip' => $_SERVER['REMOTE_ADDR'],
|
|
]);
|
|
|
|
$ch = curl_init();
|
|
curl_setopt($ch, CURLOPT_URL, $url);
|
|
curl_setopt($ch, CURLOPT_POST, 1);
|
|
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
|
|
$result = @json_decode(curl_exec($ch), true);
|
|
|
|
if (! is_array($result)) {
|
|
$this->error(self::ERR_CAPTCHA);
|
|
return false;
|
|
}
|
|
|
|
if ($result['success'] == false) {
|
|
$this->error(self::BAD_CAPTCHA);
|
|
return false;
|
|
}
|
|
|
|
// Cache google respnonse to avoid second resubmission on ajax form
|
|
$_SESSION['recaptcha_cache'][] = $value[$this->_RESPONSE];
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Render captcha
|
|
*
|
|
* @return string
|
|
*/
|
|
public function render()
|
|
{
|
|
$api_server = self::API_SERVER;
|
|
|
|
return <<<EOF
|
|
<script src="{$api_server}?render={$this->getPubkey()}"></script>
|
|
<input type="hidden" name="g-recaptcha-response" id="g-recaptcha-response" value="" />
|
|
<script>
|
|
grecaptcha.ready(function() {
|
|
grecaptcha.execute('{$this->getPubkey()}', {action: 'login'})
|
|
.then(function(token) {
|
|
document.getElementById('g-recaptcha-response').value=token;
|
|
});
|
|
});
|
|
</script>
|
|
EOF;
|
|
}
|
|
|
|
/**
|
|
* Render captcha though Ajax
|
|
*
|
|
* @return string
|
|
*/
|
|
public function renderAjax()
|
|
{
|
|
return <<<EOF
|
|
<input type="hidden" name="g-recaptcha-response" id="g-recaptcha-response" value="" />
|
|
<script>
|
|
grecaptcha.ready(function() {
|
|
grecaptcha.execute('{$this->getPubkey()}', {action: 'login'})
|
|
.then(function(token) {
|
|
document.getElementById('g-recaptcha-response').value=token;
|
|
});
|
|
});
|
|
</script>
|
|
EOF;
|
|
}
|
|
}
|