plg_httpbl_1.0_j15/httpbl.php

Go to the documentation of this file.

<?php
// no direct access
defined( '_JEXEC' ) or die( 'Restricted access' );

jimport( 'joomla.plugin.plugin' );

 
class plgSystemHttpbl extends JPlugin {
        public function __construct( &$subject, $params ) {
                parent::__construct( $subject, $params );
        }
         
        function onAfterInitialise() {
                var $plg_name = "httpbl";
                var $mainframe= &JFactory::getApplication();
                var $session  = &JFactory::getSession();

                // Assign paths
                $sitePath = JPATH_SITE;
                $siteUrl  = substr(JURI::root(), 0, -1);
    
                // Check if plugin is enabled
                if(JPluginHelper::isEnabled('system',$plg_name)==false) return;
    
                // Loads the plugin language file the proper way
                if($mainframe->isAdmin()){
                        JPlugin::loadLanguage( 'plg_system_'.$plg_name );
                } else {
                        JPlugin::loadLanguage( 'plg_system_'.$plg_name, 'administrator' );
                }
                
                // Get plugin parameters 
                
                // Outside Parameters
                
                if(!$params) $params = new JParameter(null);
                var $plugin =& JPluginHelper::getPlugin('system',$plg_name);
                var $pluginParams = new JParameter( $plugin->params );
                var $apikey = ($params->get('api_key')) ? $params->get('api_key') : $pluginParams->get('api_key');
                
                //either log an already checked IP, or check an ip
                
                if (isset($_COOKIE['notabot']) && $session->has('httpbl')) { 
                        $this->httpbl_logme(); 
                        if ($_SESSION['httpbl']['activity']<8)  {
                                $this->httpbl_infected();  // Only display infection banner if last spam was less than 8 days ago.
                        }
                } else { 
                        $this->httpbl_check($apikey);
                }
        }
        
        function httpbl_check($apikey) {
                
                $ip = $_SERVER['REMOTE_ADDR'];
                // build the lookup DNS query
                // Example : for '127.9.1.2' you should query 'abcdefghijkl.2.1.9.127.dnsbl.httpbl.org'
                $lookup = $apikey . '.' . implode('.', array_reverse(explode ('.', $ip ))) . '.dnsbl.httpbl.org';
                // check query response
                $result = explode( '.', gethostbyname($lookup));
                
                //$this->httpbl_blockme(); die('Restricted access');
                
                if ($result[0] == 127)  {
                        // We have a result
                        $a = array('activity'=>$result[1], 'threat'=>$result[2], 'type'=>$result[3]);
                        $typemeaning='';
                        if ($a['type'] & 0) $typemeaning .= 'Search Engine, ';
                        if ($a['type'] & 1) $typemeaning .= 'Suspicious, ';
                        if ($a['type'] & 2) $typemeaning .= 'Harvester, ';
                        if ($a['type'] & 4) $typemeaning .= 'Comment Spammer, ';
                        $a['typemeaning'] = trim($typemeaning,', ');
                        
                        // Now determine some blocking policy
                        // First set the block as NOT blocked
                        $a['block']=0;

                        // Assess The threat
                        if ( ($a['type'] >= 4 && $a['threat'] > 0) || ($a['type'] < 4 && $a['threat'] > 20)) {
                                $a['block'] = 1; // set a block
                        }

                        // store the info into the session (joomla style)
                        $session = &JFactory::getSession();
                        $session->set('httpbl', $a);
                        // store the info into the session (php style)
                        // $_SESSION['httpbl']=$a;
                        
                        if ($a['block']!=0) {
                                $this->httpbl_logme();          // log the information
                                $this->httpbl_blockme();        // Block the user
                                die();                                          // kill the rest of execution
                        }
                }
        }

        function httpbl_logme() {
                $log = fopen($_SERVER["DOCUMENT_ROOT"].'/httpbl.txt','a');
                $stamp = date('Y-m-d :: H-i-s');
                $page = $_SERVER['REQUEST_URI'];
                $ua = $_SERVER["HTTP_USER_AGENT"];
                if (!isset($_COOKIE['notabot'])) {
                        fputs($log,"$stamp :: BLOCKED ".$_SERVER['REMOTE_ADDR']." :: ".$_SESSION['httpbl']['type']." :: ".$_SESSION['httpbl']['threat']." :: ".$_SESSION['httpbl']['activity']." :: $page :: $ua\n");
                } else {
                        fputs($log,"$stamp :: UNBLCKD ".$_SERVER['REMOTE_ADDR']." :: $page :: $ua\n");
                }
                fclose($log);
        }
        
        function httpbl_blockme() {
                header('HTTP/1.0 403 Forbidden');
                echo '<html><body>';
                        $this->httpbl_infected(); // inform the user that he might be infected
                        // write the javascript needed to let the user in and later log it.
                        $js='<script type="text/javascript">
                                function setcookie( name, value, expires, path, domain, secure ) {
                                        
                                        // set time, in milliseconds
                                        var today = new Date();
                                        today.setTime( today.getTime() );
                                        if ( expires ) {
                                                expires = expires * 1000 * 60 * 60 * 24;
                                        }
                                        var expires_date = new Date( today.getTime() + (expires) );
                
                                        document.cookie = name + "=" +escape( value ) +
                                        ( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) + 
                                        ( ( path ) ? ";path=" + path : "" ) + 
                                        ( ( domain ) ? ";domain=" + domain : "" ) +
                                        ( ( secure ) ? ";secure" : "" );
                                }    
                                function letmein() {
                                        setcookie("notabot","true",1,"/", "", "");
                                        location.reload(true);
                                }
                                </script>
                        <br />';
                //output the body
                echo $js.JText::_('HTTPBL_LET_ME_IN');;
        }
        
        function httpbl_infected() {
                $ip             = $_SERVER['REMOTE_ADDR'];
                $days   = $_SESSION['httpbl']['activity'];
                $httpbl_css = JURI::root()."plugins/system/httpbl/css/httpbl.css";
                $infected_msg = JText::_('HTTPBL_INFECTED');
                $httpbl_warning = '<style type="text/css" media="all">@import "'.$httpbl_css.'";</style>'.$infected_msg;
                echo $httpbl_warning;
        }

}