rd.matisec.com:443

Linux webm017.cluster127.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
Apache
10.127.20.17

captcha.php

<?php

namespace WordfenceLS;

class Controller_CAPTCHA {
	const RESPONSE_MODE_ALLOW = 'allow';
	const RESPONSE_MODE_REQUIRE_VERIFICATION = 'verify';
	
	const RECAPTCHA_ENDPOINT = 'https://www.google.com/recaptcha/api/siteverify';
	
	/**
	 * Returns the singleton Controller_CAPTCHA.
	 *
	 * @return Controller_CAPTCHA
	 */
	public static function shared() {
		static $_shared = null;
		if ($_shared === null) {
			$_shared = new Controller_CAPTCHA();
		}
		return $_shared;
	}
	
	/**
	 * Returns whether or not the authentication CAPTCHA is enabled.
	 * 
	 * @return bool
	 */
	public function enabled() {
		$key = $this->site_key();
		$secret = $this->_secret();
		return Controller_Settings::shared()->get_bool(Controller_Settings::OPTION_ENABLE_AUTH_CAPTCHA) && !empty($key) && !empty($secret);
	}
	
	/**
	 * Returns the public reCAPTCHA key if set.
	 * 
	 * @return string|bool
	 */
	public function site_key() {
		return Controller_Settings::shared()->get(Controller_Settings::OPTION_RECAPTCHA_SITE_KEY);
	}
	
	/**
	 * Returns the private reCAPTCHA secret if set.
	 * 
	 * @return string|bool
	 */
	protected function _secret() {
		return Controller_Settings::shared()->get(Controller_Settings::OPTION_RECAPTCHA_SECRET);
	}
	
	/**
	 * Returns the bot/human threshold for comparing the score against, defaulting to 0.5.
	 * 
	 * @return float
	 */
	public function threshold() {
		return max(0.1, Controller_Settings::shared()->get_float(Controller_Settings::OPTION_RECAPTCHA_THRESHOLD, 0.5));
	}

/**
	 * Determine whether or not test mode for reCAPTCHA is enabled
	 *
	 * @return bool
	 */
	public function test_mode() {
		return Controller_Settings::shared()->get_bool(\WordfenceLS\Controller_Settings::OPTION_CAPTCHA_TEST_MODE);
	}
	
	/**
	 * Queries the reCAPTCHA endpoint with the given token, verifies the action matches, and returns the corresponding 
	 * score. If validation fails, false is returned. Any other failure (e.g., mangled response or connection dropped) returns 0.0.
	 * 
	 * @param string $token
	 * @param string $action
	 * @param int $timeout
	 * @return float|false
	 */
	public function score($token, $action = 'login', $timeout = 10) {
		try {
			$payload = array(
				'secret' => $this->_secret(),
				'response' => $token,
				'remoteip' => Model_Request::current()->ip(),
			);
			
			$response = wp_remote_post(self::RECAPTCHA_ENDPOINT,
				array(
					'body'    => $payload,
					'headers' => array(
						'Referer' => false,
					),
					'timeout' => $timeout,
					'blocking' => true,
			));
			
			if (!is_wp_error($response)) {
				$jsonResponse = wp_remote_retrieve_body($response);
				$decoded = @json_decode($jsonResponse, true);
				if (is_array($decoded) && isset($decoded['success'])) {
					if ($decoded['success']) {
						if (isset($decoded['score']) && isset($decoded['action']) && $decoded['action'] == $action) {
							return (float) $decoded['score'];
						}
					}
					return false;
				}
			}
		}
		catch (\Exception $e) {
			//Fall through
		}
		
		return 0.0;
	}
	
	/**
	 * Returns true if the score is >= the threshold to be considered a human request.
	 * 
	 * @param float $score
	 * @return bool
	 */
	public function is_human($score) {
		if ($this->test_mode()) {
			return true;
		}
		
		$threshold = $this->threshold();
		return ($score >= $threshold || abs($score - $threshold) < 0.0001);
	}

/**
	 * Check if the current request is an XML RPC request
	 * @return bool
	 */
	private static function is_xml_rpc() {
		return defined('XMLRPC_REQUEST') && XMLRPC_REQUEST;
	}

/**
	 * Check if captcha is required for the current request
	 * @return bool
	 */
	public function is_captcha_required() {
		$required = $this->enabled() && !self::is_xml_rpc();
		return apply_filters('wordfence_ls_require_captcha', $required);
	}

/**
	 * Get the captcha token provided with the current request
	 * @param string $key if specified, override the default token parameter
	 * @return string|null the captcha token, if present, null otherwise
	 */
	public function get_token($key = 'wfls-captcha-token') {
		return (isset($_POST[$key]) && is_string($_POST[$key]) && !empty($_POST[$key]) ? $_POST[$key] : null);
	}
}

System Information
*ReClick For Close
File : Negat1ve /JFR/.thumb35363/index.php

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	matisecojj/users	0755	2025-12-21 06:43:59
..	dir	-	matisecojj/users	0755	2025-12-21 06:43:59
ajax.php	text/x-php	25.81 KB	matisecojj/users	0644	2025-12-21 06:43:59
captcha.php	text/x-php	4.08 KB	matisecojj/users	0644	2025-12-21 06:43:59
cron.php	text/x-php	6 B	matisecojj/users	0644	2025-12-21 06:43:59
db.php	text/x-php	4.85 KB	matisecojj/users	0644	2025-12-21 06:43:59
notices.php	text/x-php	5.3 KB	matisecojj/users	0644	2025-12-21 06:43:59
permissions.php	text/x-php	13.78 KB	matisecojj/users	0644	2025-12-21 06:43:59
settings.php	text/x-php	25.45 KB	matisecojj/users	0644	2025-12-21 06:43:59
support.php	text/x-php	2.13 KB	matisecojj/users	0644	2025-12-21 06:43:59
time.php	text/x-php	6.35 KB	matisecojj/users	0644	2025-12-21 06:43:59
totp.php	text/x-php	5.25 KB	matisecojj/users	0644	2025-12-21 06:43:59
users.php	text/x-php	36.96 KB	matisecojj/users	0644	2025-12-21 06:43:59
whitelist.php	text/x-php	9.16 KB	matisecojj/users	0644	2025-12-21 06:43:59
wordfencels.php	text/x-php	51.27 KB	matisecojj/users	0644	2025-12-21 06:43:59