Changeset 9147 for sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php

Timestamp:

09/23/2019 06:26:14 AM (6 years ago)

Author:

dd32

Message:

Login: Add reCaptcha v3 in logging-only mode for registration.

See #4739.

File:

• sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php (modified) (3 diffs)

sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php

@@ -6 +6 @@
     }
 
-    $verify = array(
-        'secret'   => RECAPTCHA_INVIS_PRIVKEY,
-        'remoteip' => $_SERVER['REMOTE_ADDR'],
-        'response' => $_POST['g-recaptcha-response'],
-    );
-
-    $resp = wp_remote_post( 'https://www.google.com/recaptcha/api/siteverify', array( 'body' => $verify ) );
-    if ( is_wp_error( $resp ) || 200 != wp_remote_retrieve_response_code( $resp ) ) {
-        return false;
-    }
-
-    $result = json_decode( wp_remote_retrieve_body( $resp ), true );
-
+    $result = wporg_login_recaptcha_api(
+        $_POST['g-recaptcha-response'],
+        RECAPTCHA_INVIS_PRIVKEY
+    );
+
+    if ( ! $result ) {
+        return false;
+    }
     return (bool) $result['success'];
 }
@@ -55 +50 @@
     );
 
+    // reCaptcha v3 logging.
+    if ( isset( $_POST['_reCaptcha_v3_token'] ) ) {
+        $recaptcha_api = wporg_login_recaptcha_api(
+            $_POST['_reCaptcha_v3_token'],
+            RECAPTCHA_V3_PRIVKEY
+        );
+        $pending_user['scores']['pending'] = -1;
+        if ( $recaptcha_api && $recaptcha_api['success'] && 'register' == $recaptcha_api['action'] ) {
+            $pending_user['scores']['pending'] = $recaptcha_api['score'];
+        }
+        
+    }
+
     $inserted = wporg_update_pending_user( $pending_user );
     if ( ! $inserted ) {
@@ -168 +176 @@
     $pending_user['created_date'] = gmdate( 'Y-m-d H:i:s' );
     $pending_user['meta']['confirmed_ip'] = $_SERVER['REMOTE_ADDR']; // Spam/Fraud purposes, will be deleted once not needed.
+
+    // reCaptcha v3 logging.
+    if ( isset( $_POST['_reCaptcha_v3_token'] ) ) {
+        $recaptcha_api = wporg_login_recaptcha_api(
+            $_POST['_reCaptcha_v3_token'],
+            RECAPTCHA_V3_PRIVKEY
+        );
+        $pending_user['scores']['create'] = -1;
+        if ( $recaptcha_api && $recaptcha_api['success'] && 'pending_create' == $recaptcha_api['action'] ) {
+            $pending_user['scores']['create'] = $recaptcha_api['score'];
+        }
+    }
+
     wporg_update_pending_user( $pending_user );