101 lines
2.3 KiB
PHP
101 lines
2.3 KiB
PHP
<?php
|
|
/**
|
|
* @brief Cloudflare Turnstile
|
|
* @author <a href='https://www.invisioncommunity.com'>Invision Power Services, Inc.</a>
|
|
* @copyright (c) Invision Power Services, Inc.
|
|
* @license https://www.invisioncommunity.com/legal/standards/
|
|
* @package Invision Community
|
|
* @since 13 June 2025
|
|
*/
|
|
|
|
namespace IPS\Helpers\Form\Captcha;
|
|
|
|
use ErrorException;
|
|
use InvalidArgumentException;
|
|
use IPS\Http\Request\Exception;
|
|
use IPS\Http\Url;
|
|
use IPS\Log;
|
|
use IPS\Member;
|
|
use IPS\Platform\Bridge;
|
|
use IPS\Request;
|
|
use IPS\Settings;
|
|
use IPS\Theme;
|
|
use RuntimeException;
|
|
use function defined;
|
|
|
|
/* To prevent PHP errors (extending class does not exist) revealing path */
|
|
if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
|
|
{
|
|
header( ( $_SERVER['SERVER_PROTOCOL'] ?? 'HTTP/1.0' ) . ' 403 Forbidden' );
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* Cloudflare Turnstile
|
|
*/
|
|
class Turnstile implements CaptchaInterface
|
|
{
|
|
/**
|
|
* Does this CAPTCHA service support being added in a modal?
|
|
*/
|
|
public static bool $supportsModal = TRUE;
|
|
|
|
/**
|
|
* @brief Error
|
|
*/
|
|
protected ?string $error;
|
|
|
|
/**
|
|
* Display
|
|
*
|
|
* @return string
|
|
*/
|
|
public function getHtml(): string
|
|
{
|
|
try
|
|
{
|
|
return Theme::i()->getTemplate( 'forms', 'core', 'global' )->captchaTurnstile( Bridge::i()->getTurnstileCredentials()['site_key'], preg_replace( '/^(.+?)\..*$/', '$1', Member::loggedIn()->language()->short ) );
|
|
}
|
|
catch( ErrorException $e )
|
|
{
|
|
Log::log( $e->getMessage(), 'turnstile' );
|
|
return '';
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Verify
|
|
*
|
|
* @return bool|null TRUE/FALSE indicate if the test passed or not. NULL indicates the test failed, but the captcha system will display an error so we don't have to.
|
|
*/
|
|
public function verify(): ?bool
|
|
{
|
|
try
|
|
{
|
|
$response = Url::external( 'https://challenges.cloudflare.com/turnstile/v0/siteverify' )->request(5)->post( [
|
|
'secret' => Bridge::i()->getTurnstileCredentials()['secret_key'],
|
|
'response' => trim( Request::i()->__get('cf-turnstile-response') ),
|
|
'remoteip' => Request::i()->ipAddress(),
|
|
] )->decodeJson();
|
|
|
|
return ( ( $response['success'] ) and ( $response['hostname'] === Url::internal('')->data[ Url::COMPONENT_HOST ] ) );
|
|
}
|
|
catch( Exception $e )
|
|
{
|
|
Log::log( $e, 'turnstile_exception' );
|
|
|
|
return FALSE;
|
|
}
|
|
catch( RuntimeException $e )
|
|
{
|
|
if( $e->getMessage() == 'BAD_JSON' )
|
|
{
|
|
return FALSE;
|
|
}
|
|
else
|
|
{
|
|
throw $e;
|
|
}
|
|
}
|
|
}
|
|
} |