sergiotarxz
/
Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ANTI-SPAM: reject numerically encoded entities that fall in the normal ASCII range 

git-svn-id: https://develop.svn.wordpress.org/trunk@1844 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Dougal Campbell 2004-11-03 14:21:46 +00:00
parent ecc156d4bd
commit 9ef62e7f0c
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
wp-includes/functions.php
View File

@ -1656,6 +1656,16 @@ function check_comment($author, $email, $url, $comment, $user_ip) {
}
}
// Useless numeric encoding is a pretty good spam indicator:
// Extract entities:
if (preg_match_all('/&#(\d+);/',$comment,$chars)) {
foreach ($chars[1] as $char) {
// If it's an encoded char in the normal ASCII set, reject
if ($char < 128)
return false;
}
}
$mod_keys = trim( get_settings('moderation_keys') );
if ('' == $mod_keys )
return true; // If moderation keys are empty