spamfilter.controller.php

Go to the documentation of this file.

<?php
/* Copyright (C) NAVER <http://www.navercorp.com> */
class spamfilterController extends spamfilter
{
    function init()
    {
    }

    function setAvoidLog()
    {
        $_SESSION['avoid_log'] = true;
    }

    function triggerInsertDocument(&$obj)
    {
        if($_SESSION['avoid_log']) return new BaseObject();
        // Check the login status, login information, and permission
        $is_logged = Context::get('is_logged');
        $logged_info = Context::get('logged_info');
        $grant = Context::get('grant');
        // In case logged in, check if it is an administrator
        if($is_logged)
        {
            if($logged_info->is_admin == 'Y') return new BaseObject();
            if($grant->manager) return new BaseObject();
        }

        $oFilterModel = getModel('spamfilter');
        // Check if the IP is prohibited
        $output = $oFilterModel->isDeniedIP();
        if(!$output->toBool()) return $output;
        // Check if there is a ban on the word
        $text = '';
        if($is_logged)
        {
            $text = $obj->title . ' ' . $obj->content . ' ' . $obj->tags;
        }
        else
        {
            $text = $obj->title . ' ' . $obj->content . ' ' . $obj->nick_name . ' ' . $obj->homepage . ' ' . $obj->tags;    
        }
        $output = $oFilterModel->isDeniedWord($text);
        if(!$output->toBool()) return $output;
        // Check the specified time beside the modificaiton time
        if($obj->document_srl == 0)
        {
            $output = $oFilterModel->checkLimited();
            if(!$output->toBool()) return $output;
        }
        // Save a log
        $this->insertLog();

        return new BaseObject();
    }

    function triggerInsertComment(&$obj)
    {
        if($_SESSION['avoid_log']) return new BaseObject();
        // Check the login status, login information, and permission
        $is_logged = Context::get('is_logged');
        $logged_info = Context::get('logged_info');
        $grant = Context::get('grant');
        // In case logged in, check if it is an administrator
        if($is_logged)
        {
            if($logged_info->is_admin == 'Y') return new BaseObject();
            if($grant->manager) return new BaseObject();
        }

        $oFilterModel = getModel('spamfilter');
        // Check if the IP is prohibited
        $output = $oFilterModel->isDeniedIP();
        if(!$output->toBool()) return $output;
        // Check if there is a ban on the word
        $text = '';
        if($is_logged)
        {
            $text = $obj->content;
        }
        else
        {
            $text = $obj->content . ' ' . $obj->nick_name . ' ' . $obj->homepage;   
        }
        $output = $oFilterModel->isDeniedWord($text);
        if(!$output->toBool()) return $output;
        // If the specified time check is not modified
        if(!$obj->__isupdate)
        {
            $output = $oFilterModel->checkLimited();
            if(!$output->toBool()) return $output;
        }
        unset($obj->__isupdate);
        // Save a log
        $this->insertLog();

        return new BaseObject();
    }

    function triggerInsertTrackback(&$obj)
    {
        if($_SESSION['avoid_log']) return new BaseObject();

        $oFilterModel = getModel('spamfilter');
        // Confirm if the trackbacks have been added more than once to your document
        $output = $oFilterModel->isInsertedTrackback($obj->document_srl);
        if(!$output->toBool()) return $output;

        // Check if the IP is prohibited
        $output = $oFilterModel->isDeniedIP();
        if(!$output->toBool()) return $output;
        // Check if there is a ban on the word
        $text = $obj->blog_name . ' ' . $obj->title . ' ' . $obj->excerpt . ' ' . $obj->url;
        $output = $oFilterModel->isDeniedWord($text);
        if(!$output->toBool()) return $output;
        // Start Filtering
        $oTrackbackModel = getModel('trackback');
        $oTrackbackController = getController('trackback');

        list($ipA,$ipB,$ipC,$ipD) = explode('.',$_SERVER['REMOTE_ADDR']);
        $ipaddress = $ipA.'.'.$ipB.'.'.$ipC;
        // In case the title and the blog name are indentical, investigate the IP address of the last 6 hours, delete and ban it.
        if($obj->title == $obj->excerpt)
        {
            $oTrackbackController->deleteTrackbackSender(60*60*6, $ipaddress, $obj->url, $obj->blog_name, $obj->title, $obj->excerpt);
            $this->insertIP($ipaddress.'.*', 'AUTO-DENIED : trackback.insertTrackback');
            return new BaseObject(-1,'msg_alert_trackback_denied');
        }
        // If trackbacks have been registered by one C-class IP address more than once for the last 30 minutes, ban the IP address and delete all the posts
        /* 호스팅 환경을 감안하여 일단 이 부분은 동작하지 않도록 주석 처리
           $count = $oTrackbackModel->getRegistedTrackback(30*60, $ipaddress, $obj->url, $obj->blog_name, $obj->title, $obj->excerpt);
           if($count > 1) {
           $oTrackbackController->deleteTrackbackSender(3*60, $ipaddress, $obj->url, $obj->blog_name, $obj->title, $obj->excerpt);
           $this->insertIP($ipaddress.'.*');
           return new BaseObject(-1,'msg_alert_trackback_denied');
           }
         */

        return new BaseObject();
    }

    function insertIP($ipaddress_list, $description = null)
    {
        $regExr = "/^((\d{1,3}(?:.(\d{1,3}|\*)){3})\s*(\/\/(.*)\s*)?)*\s*$/";
        if(!preg_match($regExr,$ipaddress_list)) return new BaseObject(-1, 'msg_invalid');
        $ipaddress_list = str_replace("\r","",$ipaddress_list);
        $ipaddress_list = explode("\n",$ipaddress_list);
        foreach($ipaddress_list as $ipaddressValue)
        {
            $args = new stdClass();
            preg_match("/(\d{1,3}(?:.(\d{1,3}|\*)){3})\s*(\/\/(.*)\s*)?/",$ipaddressValue,$matches);
            if($ipaddress=trim($matches[1]))
            {
                $args->ipaddress = $ipaddress;
                if(!$description && $matches[4]) $args->description = $matches[4];
                else $args->description = $description;
            }
            $output = executeQuery('spamfilter.insertDeniedIP', $args);
            if(!$output->toBool()) $fail_list .= $ipaddress.'<br/>';
        }

        $output->add('fail_list',$fail_list);
        return $output;
    }

    function triggerSendMessage(&$obj)
    {
        if($_SESSION['avoid_log']) return new BaseObject();

        $logged_info = Context::get('logged_info');
        if($logged_info->is_admin == 'Y') return new BaseObject();

        $oFilterModel = getModel('spamfilter');
        // Check if the IP is prohibited
        $output = $oFilterModel->isDeniedIP();
        if(!$output->toBool()) return $output;
        // Check if there is a ban on the word
        $text = $obj->title . ' ' . $obj->content;
        $output = $oFilterModel->isDeniedWord($text);
        if(!$output->toBool()) return $output;
        // Check the specified time
        $output = $oFilterModel->checkLimited(TRUE);
        if(!$output->toBool()) return $output;
        // Save a log
        $this->insertLog();

        return new BaseObject();
    }

    function insertLog()
    {
        $output = executeQuery('spamfilter.insertLog');
        return $output;
    }
}
/* End of file spamfilter.controller.php */
/* Location: ./modules/spamfilter/spamfilter.controller.php */