Changeset 9147 for sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php

Timestamp:

09/23/2019 06:26:14 AM (7 years ago)

Author:

dd32

Message:

Login: Add reCaptcha v3 in logging-only mode for registration.

See #4739.

File:

• sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php (modified) (3 diffs)

sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php

@@ -6 +6 @@
         }
 
-        $verify = array(
-                'secret'   => RECAPTCHA_INVIS_PRIVKEY,
-                'remoteip' => $_SERVER['REMOTE_ADDR'],
-                'response' => $_POST['g-recaptcha-response'],
-        );
-
-        $resp = wp_remote_post( 'https://www.google.com/recaptcha/api/siteverify', array( 'body' => $verify ) );
-        if ( is_wp_error( $resp ) || 200 != wp_remote_retrieve_response_code( $resp ) ) {
-                return false;
-        }
-
-        $result = json_decode( wp_remote_retrieve_body( $resp ), true );
-
+        $result = wporg_login_recaptcha_api(
+                $_POST['g-recaptcha-response'],
+                RECAPTCHA_INVIS_PRIVKEY
+        );
+
+        if ( ! $result ) {
+                return false;
+        }
         return (bool) $result['success'];
 }
@@ -55 +50 @@
         );
 
+        // reCaptcha v3 logging.
+        if ( isset( $_POST['_reCaptcha_v3_token'] ) ) {
+                $recaptcha_api = wporg_login_recaptcha_api(
+                        $_POST['_reCaptcha_v3_token'],
+                        RECAPTCHA_V3_PRIVKEY
+                );
+                $pending_user['scores']['pending'] = -1;
+                if ( $recaptcha_api && $recaptcha_api['success'] && 'register' == $recaptcha_api['action'] ) {
+                        $pending_user['scores']['pending'] = $recaptcha_api['score'];
+                }
+                
+        }
+
         $inserted = wporg_update_pending_user( $pending_user );
         if ( ! $inserted ) {
@@ -168 +176 @@
         $pending_user['created_date'] = gmdate( 'Y-m-d H:i:s' );
         $pending_user['meta']['confirmed_ip'] = $_SERVER['REMOTE_ADDR']; // Spam/Fraud purposes, will be deleted once not needed.
+
+        // reCaptcha v3 logging.
+        if ( isset( $_POST['_reCaptcha_v3_token'] ) ) {
+                $recaptcha_api = wporg_login_recaptcha_api(
+                        $_POST['_reCaptcha_v3_token'],
+                        RECAPTCHA_V3_PRIVKEY
+                );
+                $pending_user['scores']['create'] = -1;
+                if ( $recaptcha_api && $recaptcha_api['success'] && 'pending_create' == $recaptcha_api['action'] ) {
+                        $pending_user['scores']['create'] = $recaptcha_api['score'];
+                }
+        }
+
         wporg_update_pending_user( $pending_user );