perdedora/leftypol
1
0
Fork 0
forked from leftypol/leftypol
Code Pull requests Activity

prohibit using same anti-bot hashes across different boards/threads

Browse source
This commit is contained in:
Michael Save 2012-01-20 02:37:53 +11:00
parent 368050852a
commit cd30f3b0b9
5 changed files with 29 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

24
inc/functions.php
View file

@ -1048,9 +1048,16 @@
}
}
function createHiddenInputs() {
function createHiddenInputs($extra_salt = Array()) {
global $config;
if(!empty($extra_salt)) {
// create a salted hash of the "extra salt"
$extra_salt = implode(':', $extra_salt);
} else {
$extra_salt = '';
}
$inputs = Array();
shuffle($config['spam']['hidden_input_names']);
@ -1139,7 +1146,7 @@
$hash .= $config['cookies']['salt'];
// Use SHA1 for the hash
$hash = sha1($hash);
$hash = sha1($hash . $extra_salt);
// Append it to the HTML
$content .= '<input type="hidden" name="hash" value="' . $hash . '" />';
@ -1147,7 +1154,7 @@
return $content;
}
function checkSpam() {
function checkSpam($extra_salt = Array()) {
global $config;
if(!isset($_POST['hash']))
@ -1155,6 +1162,13 @@
$hash = $_POST['hash'];
if(!empty($extra_salt)) {
// create a salted hash of the "extra salt"
$extra_salt = implode(':', $extra_salt);
} else {
$extra_salt = '';
}
// Reconsturct the $inputs array
$inputs = Array();
@ -1179,7 +1193,7 @@
$_hash .= $config['cookies']['salt'];
// Use SHA1 for the hash
$_hash = sha1($_hash);
$_hash = sha1($_hash . $extra_salt);
return $hash != $_hash;
}
@ -1197,7 +1211,6 @@
$content['pages'] = $pages;
$content['pages'][$page-1]['selected'] = true;
$content['btn'] = getPageButtons($content['pages']);
$content['hidden_inputs'] = createHiddenInputs();
file_write($filename, Element('index.html', $content));
if(isset($md5) && $md5 == md5_file($filename)) {
@ -1460,7 +1473,6 @@
'id' => $id,
'mod' => $mod,
'boardlist' => createBoardlist($mod),
'hidden_inputs' => $content['hidden_inputs'] = createHiddenInputs(),
'return' => ($mod ? '?' . $board['url'] . $config['file_index'] : $config['root'] . $board['uri'] . '/' . $config['file_index'])
));