<?php

[0] Fix | Delete

[1] Fix | Delete

[2] Fix | Delete

class Akismet {

[3] Fix | Delete

const API_HOST = 'rest.akismet.com';

[4] Fix | Delete

const API_PORT = 80;

[5] Fix | Delete

const MAX_DELAY_BEFORE_MODERATION_EMAIL = 86400; // One day in seconds

[6] Fix | Delete

[7] Fix | Delete

private static $last_comment = '';

[8] Fix | Delete

private static $initiated = false;

[9] Fix | Delete

private static $prevent_moderation_email_for_these_comments = array();

[10] Fix | Delete

private static $last_comment_result = null;

[11] Fix | Delete

private static $comment_as_submitted_allowed_keys = array( 'blog' => '', 'blog_charset' => '', 'blog_lang' => '', 'blog_ua' => '', 'comment_agent' => '', 'comment_author' => '', 'comment_author_IP' => '', 'comment_author_email' => '', 'comment_author_url' => '', 'comment_content' => '', 'comment_date_gmt' => '', 'comment_tags' => '', 'comment_type' => '', 'guid' => '', 'is_test' => '', 'permalink' => '', 'reporter' => '', 'site_domain' => '', 'submit_referer' => '', 'submit_uri' => '', 'user_ID' => '', 'user_agent' => '', 'user_id' => '', 'user_ip' => '' );

[12] Fix | Delete

private static $is_rest_api_call = false;

[13] Fix | Delete

[14] Fix | Delete

public static function init() {

[15] Fix | Delete

if ( ! self::$initiated ) {

[16] Fix | Delete

self::init_hooks();

[17] Fix | Delete

}

[18] Fix | Delete

}

[19] Fix | Delete

[20] Fix | Delete

/**

[21] Fix | Delete

* Initializes WordPress hooks

[22] Fix | Delete

*/

[23] Fix | Delete

private static function init_hooks() {

[24] Fix | Delete

self::$initiated = true;

[25] Fix | Delete

[26] Fix | Delete

add_action( 'wp_insert_comment', array( 'Akismet', 'auto_check_update_meta' ), 10, 2 );

[27] Fix | Delete

add_filter( 'preprocess_comment', array( 'Akismet', 'auto_check_comment' ), 1 );

[28] Fix | Delete

add_filter( 'rest_pre_insert_comment', array( 'Akismet', 'rest_auto_check_comment' ), 1 );

[29] Fix | Delete

[30] Fix | Delete

add_action( 'akismet_scheduled_delete', array( 'Akismet', 'delete_old_comments' ) );

[31] Fix | Delete

add_action( 'akismet_scheduled_delete', array( 'Akismet', 'delete_old_comments_meta' ) );

[32] Fix | Delete

add_action( 'akismet_scheduled_delete', array( 'Akismet', 'delete_orphaned_commentmeta' ) );

[33] Fix | Delete

add_action( 'akismet_schedule_cron_recheck', array( 'Akismet', 'cron_recheck' ) );

[34] Fix | Delete

[35] Fix | Delete

add_action( 'comment_form', array( 'Akismet', 'add_comment_nonce' ), 1 );

[36] Fix | Delete

[37] Fix | Delete

add_action( 'admin_head-edit-comments.php', array( 'Akismet', 'load_form_js' ) );

[38] Fix | Delete

add_action( 'comment_form', array( 'Akismet', 'load_form_js' ) );

[39] Fix | Delete

add_action( 'comment_form', array( 'Akismet', 'inject_ak_js' ) );

[40] Fix | Delete

add_filter( 'script_loader_tag', array( 'Akismet', 'set_form_js_async' ), 10, 3 );

[41] Fix | Delete

[42] Fix | Delete

add_filter( 'comment_moderation_recipients', array( 'Akismet', 'disable_moderation_emails_if_unreachable' ), 1000, 2 );

[43] Fix | Delete

add_filter( 'pre_comment_approved', array( 'Akismet', 'last_comment_status' ), 10, 2 );

[44] Fix | Delete

[45] Fix | Delete

add_action( 'transition_comment_status', array( 'Akismet', 'transition_comment_status' ), 10, 3 );

[46] Fix | Delete

[47] Fix | Delete

// Run this early in the pingback call, before doing a remote fetch of the source uri

[48] Fix | Delete

add_action( 'xmlrpc_call', array( 'Akismet', 'pre_check_pingback' ) );

[49] Fix | Delete

[50] Fix | Delete

// Jetpack compatibility

[51] Fix | Delete

add_filter( 'jetpack_options_whitelist', array( 'Akismet', 'add_to_jetpack_options_whitelist' ) );

[52] Fix | Delete

add_action( 'update_option_wordpress_api_key', array( 'Akismet', 'updated_option' ), 10, 2 );

[53] Fix | Delete

add_action( 'add_option_wordpress_api_key', array( 'Akismet', 'added_option' ), 10, 2 );

[54] Fix | Delete

[55] Fix | Delete

add_action( 'comment_form_after', array( 'Akismet', 'display_comment_form_privacy_notice' ) );

[56] Fix | Delete

}

[57] Fix | Delete

[58] Fix | Delete

public static function get_api_key() {

[59] Fix | Delete

return apply_filters( 'akismet_get_api_key', defined('WPCOM_API_KEY') ? constant('WPCOM_API_KEY') : get_option('wordpress_api_key') );

[60] Fix | Delete

}

[61] Fix | Delete

[62] Fix | Delete

public static function check_key_status( $key, $ip = null ) {

[63] Fix | Delete

return self::http_post( Akismet::build_query( array( 'key' => $key, 'blog' => get_option( 'home' ) ) ), 'verify-key', $ip );

[64] Fix | Delete

}

[65] Fix | Delete

[66] Fix | Delete

public static function verify_key( $key, $ip = null ) {

[67] Fix | Delete

// Shortcut for obviously invalid keys.

[68] Fix | Delete

if ( strlen( $key ) != 12 ) {

[69] Fix | Delete

return 'invalid';

[70] Fix | Delete

}

[71] Fix | Delete

[72] Fix | Delete

$response = self::check_key_status( $key, $ip );

[73] Fix | Delete

[74] Fix | Delete

if ( $response[1] != 'valid' && $response[1] != 'invalid' )

[75] Fix | Delete

return 'failed';

[76] Fix | Delete

[77] Fix | Delete

return $response[1];

[78] Fix | Delete

}

[79] Fix | Delete

[80] Fix | Delete

public static function deactivate_key( $key ) {

[81] Fix | Delete

$response = self::http_post( Akismet::build_query( array( 'key' => $key, 'blog' => get_option( 'home' ) ) ), 'deactivate' );

[82] Fix | Delete

[83] Fix | Delete

if ( $response[1] != 'deactivated' )

[84] Fix | Delete

return 'failed';

[85] Fix | Delete

[86] Fix | Delete

return $response[1];

[87] Fix | Delete

}

[88] Fix | Delete

[89] Fix | Delete

/**

[90] Fix | Delete

* Add the akismet option to the Jetpack options management whitelist.

[91] Fix | Delete

*

[92] Fix | Delete

* @param array $options The list of whitelisted option names.

[93] Fix | Delete

* @return array The updated whitelist

[94] Fix | Delete

*/

[95] Fix | Delete

public static function add_to_jetpack_options_whitelist( $options ) {

[96] Fix | Delete

$options[] = 'wordpress_api_key';

[97] Fix | Delete

return $options;

[98] Fix | Delete

}

[99] Fix | Delete

[100] Fix | Delete

/**

[101] Fix | Delete

* When the akismet option is updated, run the registration call.

[102] Fix | Delete

*

[103] Fix | Delete

* This should only be run when the option is updated from the Jetpack/WP.com

[104] Fix | Delete

* API call, and only if the new key is different than the old key.

[105] Fix | Delete

*

[106] Fix | Delete

* @param mixed $old_value The old option value.

[107] Fix | Delete

* @param mixed $value The new option value.

[108] Fix | Delete

*/

[109] Fix | Delete

public static function updated_option( $old_value, $value ) {

[110] Fix | Delete

// Not an API call

[111] Fix | Delete

if ( ! class_exists( 'WPCOM_JSON_API_Update_Option_Endpoint' ) ) {

[112] Fix | Delete

return;

[113] Fix | Delete

}

[114] Fix | Delete

// Only run the registration if the old key is different.

[115] Fix | Delete

if ( $old_value !== $value ) {

[116] Fix | Delete

self::verify_key( $value );

[117] Fix | Delete

}

[118] Fix | Delete

}

[119] Fix | Delete

[120] Fix | Delete

/**

[121] Fix | Delete

* Treat the creation of an API key the same as updating the API key to a new value.

[122] Fix | Delete

*

[123] Fix | Delete

* @param mixed $option_name Will always be "wordpress_api_key", until something else hooks in here.

[124] Fix | Delete

* @param mixed $value The option value.

[125] Fix | Delete

*/

[126] Fix | Delete

public static function added_option( $option_name, $value ) {

[127] Fix | Delete

if ( 'wordpress_api_key' === $option_name ) {

[128] Fix | Delete

return self::updated_option( '', $value );

[129] Fix | Delete

}

[130] Fix | Delete

}

[131] Fix | Delete

[132] Fix | Delete

public static function rest_auto_check_comment( $commentdata ) {

[133] Fix | Delete

self::$is_rest_api_call = true;

[134] Fix | Delete

[135] Fix | Delete

return self::auto_check_comment( $commentdata );

[136] Fix | Delete

}

[137] Fix | Delete

[138] Fix | Delete

public static function auto_check_comment( $commentdata ) {

[139] Fix | Delete

// If no key is configured, then there's no point in doing any of this.

[140] Fix | Delete

if ( ! self::get_api_key() ) {

[141] Fix | Delete

return $commentdata;

[142] Fix | Delete

}

[143] Fix | Delete

[144] Fix | Delete

self::$last_comment_result = null;

[145] Fix | Delete

[146] Fix | Delete

$comment = $commentdata;

[147] Fix | Delete

[148] Fix | Delete

$comment['user_ip'] = self::get_ip_address();

[149] Fix | Delete

$comment['user_agent'] = self::get_user_agent();

[150] Fix | Delete

$comment['referrer'] = self::get_referer();

[151] Fix | Delete

$comment['blog'] = get_option( 'home' );

[152] Fix | Delete

$comment['blog_lang'] = get_locale();

[153] Fix | Delete

$comment['blog_charset'] = get_option('blog_charset');

[154] Fix | Delete

$comment['permalink'] = get_permalink( $comment['comment_post_ID'] );

[155] Fix | Delete

[156] Fix | Delete

if ( ! empty( $comment['user_ID'] ) ) {

[157] Fix | Delete

$comment['user_role'] = Akismet::get_user_roles( $comment['user_ID'] );

[158] Fix | Delete

}

[159] Fix | Delete

[160] Fix | Delete

/** See filter documentation in init_hooks(). */

[161] Fix | Delete

$akismet_nonce_option = apply_filters( 'akismet_comment_nonce', get_option( 'akismet_comment_nonce' ) );

[162] Fix | Delete

$comment['akismet_comment_nonce'] = 'inactive';

[163] Fix | Delete

if ( $akismet_nonce_option == 'true' || $akismet_nonce_option == '' ) {

[164] Fix | Delete

$comment['akismet_comment_nonce'] = 'failed';

[165] Fix | Delete

if ( isset( $_POST['akismet_comment_nonce'] ) && wp_verify_nonce( $_POST['akismet_comment_nonce'], 'akismet_comment_nonce_' . $comment['comment_post_ID'] ) )

[166] Fix | Delete

$comment['akismet_comment_nonce'] = 'passed';

[167] Fix | Delete

[168] Fix | Delete

// comment reply in wp-admin

[169] Fix | Delete

if ( isset( $_POST['_ajax_nonce-replyto-comment'] ) && check_ajax_referer( 'replyto-comment', '_ajax_nonce-replyto-comment' ) )

[170] Fix | Delete

$comment['akismet_comment_nonce'] = 'passed';

[171] Fix | Delete

[172] Fix | Delete

}

[173] Fix | Delete

[174] Fix | Delete

if ( self::is_test_mode() )

[175] Fix | Delete

$comment['is_test'] = 'true';

[176] Fix | Delete

[177] Fix | Delete

foreach( $_POST as $key => $value ) {

[178] Fix | Delete

if ( is_string( $value ) )

[179] Fix | Delete

$comment["POST_{$key}"] = $value;

[180] Fix | Delete

}

[181] Fix | Delete

[182] Fix | Delete

foreach ( $_SERVER as $key => $value ) {

[183] Fix | Delete

if ( ! is_string( $value ) ) {

[184] Fix | Delete

continue;

[185] Fix | Delete

}

[186] Fix | Delete

[187] Fix | Delete

if ( preg_match( "/^HTTP_COOKIE/", $key ) ) {

[188] Fix | Delete

continue;

[189] Fix | Delete

}

[190] Fix | Delete

[191] Fix | Delete

// Send any potentially useful $_SERVER vars, but avoid sending junk we don't need.

[192] Fix | Delete

if ( preg_match( "/^(HTTP_|REMOTE_ADDR|REQUEST_URI|DOCUMENT_URI)/", $key ) ) {

[193] Fix | Delete

$comment[ "$key" ] = $value;

[194] Fix | Delete

}

[195] Fix | Delete

}

[196] Fix | Delete

[197] Fix | Delete

$post = get_post( $comment['comment_post_ID'] );

[198] Fix | Delete

[199] Fix | Delete

if ( ! is_null( $post ) ) {

[200] Fix | Delete

// $post can technically be null, although in the past, it's always been an indicator of another plugin interfering.

[201] Fix | Delete

$comment[ 'comment_post_modified_gmt' ] = $post->post_modified_gmt;

[202] Fix | Delete

}

[203] Fix | Delete

[204] Fix | Delete

$response = self::http_post( Akismet::build_query( $comment ), 'comment-check' );

[205] Fix | Delete

[206] Fix | Delete

do_action( 'akismet_comment_check_response', $response );

[207] Fix | Delete

[208] Fix | Delete

$commentdata['comment_as_submitted'] = array_intersect_key( $comment, self::$comment_as_submitted_allowed_keys );

[209] Fix | Delete

$commentdata['akismet_result'] = $response[1];

[210] Fix | Delete

[211] Fix | Delete

if ( isset( $response[0]['x-akismet-pro-tip'] ) )

[212] Fix | Delete

$commentdata['akismet_pro_tip'] = $response[0]['x-akismet-pro-tip'];

[213] Fix | Delete

[214] Fix | Delete

if ( isset( $response[0]['x-akismet-error'] ) ) {

[215] Fix | Delete

// An error occurred that we anticipated (like a suspended key) and want the user to act on.

[216] Fix | Delete

// Send to moderation.

[217] Fix | Delete

self::$last_comment_result = '0';

[218] Fix | Delete

}

[219] Fix | Delete

else if ( 'true' == $response[1] ) {

[220] Fix | Delete

// akismet_spam_count will be incremented later by comment_is_spam()

[221] Fix | Delete

self::$last_comment_result = 'spam';

[222] Fix | Delete

[223] Fix | Delete

$discard = ( isset( $commentdata['akismet_pro_tip'] ) && $commentdata['akismet_pro_tip'] === 'discard' && self::allow_discard() );

[224] Fix | Delete

[225] Fix | Delete

do_action( 'akismet_spam_caught', $discard );

[226] Fix | Delete

[227] Fix | Delete

if ( $discard ) {

[228] Fix | Delete

// The spam is obvious, so we're bailing out early.

[229] Fix | Delete

// akismet_result_spam() won't be called so bump the counter here

[230] Fix | Delete

if ( $incr = apply_filters( 'akismet_spam_count_incr', 1 ) ) {

[231] Fix | Delete

update_option( 'akismet_spam_count', get_option( 'akismet_spam_count' ) + $incr );

[232] Fix | Delete

}

[233] Fix | Delete

[234] Fix | Delete

if ( self::$is_rest_api_call ) {

[235] Fix | Delete

return new WP_Error( 'akismet_rest_comment_discarded', __( 'Comment discarded.', 'akismet' ) );

[236] Fix | Delete

}

[237] Fix | Delete

else {

[238] Fix | Delete

// Redirect back to the previous page, or failing that, the post permalink, or failing that, the homepage of the blog.

[239] Fix | Delete

$redirect_to = isset( $_SERVER['HTTP_REFERER'] ) ? $_SERVER['HTTP_REFERER'] : ( $post ? get_permalink( $post ) : home_url() );

[240] Fix | Delete

wp_safe_redirect( esc_url_raw( $redirect_to ) );

[241] Fix | Delete

die();

[242] Fix | Delete

}

[243] Fix | Delete

}

[244] Fix | Delete

else if ( self::$is_rest_api_call ) {

[245] Fix | Delete

// The way the REST API structures its calls, we can set the comment_approved value right away.

[246] Fix | Delete

$commentdata['comment_approved'] = 'spam';

[247] Fix | Delete

}

[248] Fix | Delete

}

[249] Fix | Delete

[250] Fix | Delete

// if the response is neither true nor false, hold the comment for moderation and schedule a recheck

[251] Fix | Delete

if ( 'true' != $response[1] && 'false' != $response[1] ) {

[252] Fix | Delete

if ( !current_user_can('moderate_comments') ) {

[253] Fix | Delete

// Comment status should be moderated

[254] Fix | Delete

self::$last_comment_result = '0';

[255] Fix | Delete

}

[256] Fix | Delete

[257] Fix | Delete

if ( ! wp_next_scheduled( 'akismet_schedule_cron_recheck' ) ) {

[258] Fix | Delete

wp_schedule_single_event( time() + 1200, 'akismet_schedule_cron_recheck' );

[259] Fix | Delete

do_action( 'akismet_scheduled_recheck', 'invalid-response-' . $response[1] );

[260] Fix | Delete

}

[261] Fix | Delete

[262] Fix | Delete

self::$prevent_moderation_email_for_these_comments[] = $commentdata;

[263] Fix | Delete

}

[264] Fix | Delete

[265] Fix | Delete

// Delete old comments daily

[266] Fix | Delete

if ( ! wp_next_scheduled( 'akismet_scheduled_delete' ) ) {

[267] Fix | Delete

wp_schedule_event( time(), 'daily', 'akismet_scheduled_delete' );

[268] Fix | Delete

}

[269] Fix | Delete

[270] Fix | Delete

self::set_last_comment( $commentdata );

[271] Fix | Delete

self::fix_scheduled_recheck();

[272] Fix | Delete

[273] Fix | Delete

return $commentdata;

[274] Fix | Delete

}

[275] Fix | Delete

[276] Fix | Delete

public static function get_last_comment() {

[277] Fix | Delete

return self::$last_comment;

[278] Fix | Delete

}

[279] Fix | Delete

[280] Fix | Delete

public static function set_last_comment( $comment ) {

[281] Fix | Delete

if ( is_null( $comment ) ) {

[282] Fix | Delete

self::$last_comment = null;

[283] Fix | Delete

}

[284] Fix | Delete

else {

[285] Fix | Delete

// We filter it here so that it matches the filtered comment data that we'll have to compare against later.

[286] Fix | Delete

// wp_filter_comment expects comment_author_IP

[287] Fix | Delete

self::$last_comment = wp_filter_comment(

[288] Fix | Delete

array_merge(

[289] Fix | Delete

array( 'comment_author_IP' => self::get_ip_address() ),

[290] Fix | Delete

$comment

[291] Fix | Delete

)

[292] Fix | Delete

);

[293] Fix | Delete

}

[294] Fix | Delete

}

[295] Fix | Delete

[296] Fix | Delete

// this fires on wp_insert_comment. we can't update comment_meta when auto_check_comment() runs

[297] Fix | Delete

// because we don't know the comment ID at that point.

[298] Fix | Delete

public static function auto_check_update_meta( $id, $comment ) {

[299] Fix | Delete

// wp_insert_comment() might be called in other contexts, so make sure this is the same comment

[300] Fix | Delete

// as was checked by auto_check_comment

[301] Fix | Delete

if ( is_object( $comment ) && !empty( self::$last_comment ) && is_array( self::$last_comment ) ) {

[302] Fix | Delete

if ( self::matches_last_comment( $comment ) ) {

[303] Fix | Delete

[304] Fix | Delete

load_plugin_textdomain( 'akismet' );

[305] Fix | Delete

[306] Fix | Delete

// normal result: true or false

[307] Fix | Delete

if ( self::$last_comment['akismet_result'] == 'true' ) {

[308] Fix | Delete

update_comment_meta( $comment->comment_ID, 'akismet_result', 'true' );

[309] Fix | Delete

self::update_comment_history( $comment->comment_ID, '', 'check-spam' );

[310] Fix | Delete

if ( $comment->comment_approved != 'spam' )

[311] Fix | Delete

self::update_comment_history(

[312] Fix | Delete

$comment->comment_ID,

[313] Fix | Delete

'',

[314] Fix | Delete

'status-changed-'.$comment->comment_approved

[315] Fix | Delete

);

[316] Fix | Delete

}

[317] Fix | Delete

elseif ( self::$last_comment['akismet_result'] == 'false' ) {

[318] Fix | Delete

update_comment_meta( $comment->comment_ID, 'akismet_result', 'false' );

[319] Fix | Delete

self::update_comment_history( $comment->comment_ID, '', 'check-ham' );

[320] Fix | Delete

// Status could be spam or trash, depending on the WP version and whether this change applies:

[321] Fix | Delete

// https://core.trac.wordpress.org/changeset/34726

[322] Fix | Delete

if ( $comment->comment_approved == 'spam' || $comment->comment_approved == 'trash' ) {

[323] Fix | Delete

if ( wp_blacklist_check($comment->comment_author, $comment->comment_author_email, $comment->comment_author_url, $comment->comment_content, $comment->comment_author_IP, $comment->comment_agent) )

[324] Fix | Delete

self::update_comment_history( $comment->comment_ID, '', 'wp-blacklisted' );

[325] Fix | Delete

else

[326] Fix | Delete

self::update_comment_history( $comment->comment_ID, '', 'status-changed-'.$comment->comment_approved );

[327] Fix | Delete

}

[328] Fix | Delete

} // abnormal result: error

[329] Fix | Delete

else {

[330] Fix | Delete

update_comment_meta( $comment->comment_ID, 'akismet_error', time() );

[331] Fix | Delete

self::update_comment_history(

[332] Fix | Delete

$comment->comment_ID,

[333] Fix | Delete

'',

[334] Fix | Delete

'check-error',

[335] Fix | Delete

array( 'response' => substr( self::$last_comment['akismet_result'], 0, 50 ) )

[336] Fix | Delete

);

[337] Fix | Delete

}

[338] Fix | Delete

[339] Fix | Delete

// record the complete original data as submitted for checking

[340] Fix | Delete

if ( isset( self::$last_comment['comment_as_submitted'] ) )

[341] Fix | Delete

update_comment_meta( $comment->comment_ID, 'akismet_as_submitted', self::$last_comment['comment_as_submitted'] );

[342] Fix | Delete

[343] Fix | Delete

if ( isset( self::$last_comment['akismet_pro_tip'] ) )

[344] Fix | Delete

update_comment_meta( $comment->comment_ID, 'akismet_pro_tip', self::$last_comment['akismet_pro_tip'] );

[345] Fix | Delete

}

[346] Fix | Delete

}

[347] Fix | Delete

}

[348] Fix | Delete

[349] Fix | Delete

public static function delete_old_comments() {

[350] Fix | Delete

global $wpdb;

[351] Fix | Delete

[352] Fix | Delete

/**

[353] Fix | Delete

* Determines how many comments will be deleted in each batch.

[354] Fix | Delete

*

[355] Fix | Delete

* @param int The default, as defined by AKISMET_DELETE_LIMIT.

[356] Fix | Delete

*/

[357] Fix | Delete

$delete_limit = apply_filters( 'akismet_delete_comment_limit', defined( 'AKISMET_DELETE_LIMIT' ) ? AKISMET_DELETE_LIMIT : 10000 );

[358] Fix | Delete

$delete_limit = max( 1, intval( $delete_limit ) );

[359] Fix | Delete

[360] Fix | Delete

/**

[361] Fix | Delete

* Determines how many days a comment will be left in the Spam queue before being deleted.

[362] Fix | Delete

*

[363] Fix | Delete

* @param int The default number of days.

[364] Fix | Delete

*/

[365] Fix | Delete

$delete_interval = apply_filters( 'akismet_delete_comment_interval', 15 );

[366] Fix | Delete

$delete_interval = max( 1, intval( $delete_interval ) );

[367] Fix | Delete

[368] Fix | Delete

while ( $comment_ids = $wpdb->get_col( $wpdb->prepare( "SELECT comment_id FROM {$wpdb->comments} WHERE DATE_SUB(NOW(), INTERVAL %d DAY) > comment_date_gmt AND comment_approved = 'spam' LIMIT %d", $delete_interval, $delete_limit ) ) ) {

[369] Fix | Delete

if ( empty( $comment_ids ) )

[370] Fix | Delete

return;

[371] Fix | Delete

[372] Fix | Delete

$wpdb->queries = array();

[373] Fix | Delete

[374] Fix | Delete

foreach ( $comment_ids as $comment_id ) {

[375] Fix | Delete

do_action( 'delete_comment', $comment_id );

[376] Fix | Delete

do_action( 'akismet_batch_delete_count', __FUNCTION__ );

[377] Fix | Delete

}

[378] Fix | Delete

[379] Fix | Delete

// Prepared as strings since comment_id is an unsigned BIGINT, and using %d will constrain the value to the maximum signed BIGINT.

[380] Fix | Delete

$format_string = implode( ", ", array_fill( 0, count( $comment_ids ), '%s' ) );

[381] Fix | Delete

[382] Fix | Delete

$wpdb->query( $wpdb->prepare( "DELETE FROM {$wpdb->comments} WHERE comment_id IN ( " . $format_string . " )", $comment_ids ) );

[383] Fix | Delete

$wpdb->query( $wpdb->prepare( "DELETE FROM {$wpdb->commentmeta} WHERE comment_id IN ( " . $format_string . " )", $comment_ids ) );

[384] Fix | Delete

[385] Fix | Delete

clean_comment_cache( $comment_ids );

[386] Fix | Delete

do_action( 'akismet_delete_comment_batch', count( $comment_ids ) );

[387] Fix | Delete

}

[388] Fix | Delete

[389] Fix | Delete

if ( apply_filters( 'akismet_optimize_table', ( mt_rand(1, 5000) == 11), $wpdb->comments ) ) // lucky number

[390] Fix | Delete

$wpdb->query("OPTIMIZE TABLE {$wpdb->comments}");

[391] Fix | Delete

}

[392] Fix | Delete

[393] Fix | Delete

public static function delete_old_comments_meta() {

[394] Fix | Delete

global $wpdb;

[395] Fix | Delete

[396] Fix | Delete

$interval = apply_filters( 'akismet_delete_commentmeta_interval', 15 );

[397] Fix | Delete

[398] Fix | Delete

# enforce a minimum of 1 day

[399] Fix | Delete

$interval = absint( $interval );

[400] Fix | Delete

if ( $interval < 1 )

[401] Fix | Delete

$interval = 1;

[402] Fix | Delete

[403] Fix | Delete

// akismet_as_submitted meta values are large, so expire them

[404] Fix | Delete

// after $interval days regardless of the comment status

[405] Fix | Delete

while ( $comment_ids = $wpdb->get_col( $wpdb->prepare( "SELECT m.comment_id FROM {$wpdb->commentmeta} as m INNER JOIN {$wpdb->comments} as c USING(comment_id) WHERE m.meta_key = 'akismet_as_submitted' AND DATE_SUB(NOW(), INTERVAL %d DAY) > c.comment_date_gmt LIMIT 10000", $interval ) ) ) {

[406] Fix | Delete

if ( empty( $comment_ids ) )

[407] Fix | Delete

return;

[408] Fix | Delete

[409] Fix | Delete

$wpdb->queries = array();

[410] Fix | Delete

[411] Fix | Delete

foreach ( $comment_ids as $comment_id ) {

[412] Fix | Delete

delete_comment_meta( $comment_id, 'akismet_as_submitted' );

[413] Fix | Delete

do_action( 'akismet_batch_delete_count', __FUNCTION__ );

[414] Fix | Delete

}

[415] Fix | Delete

[416] Fix | Delete

do_action( 'akismet_delete_commentmeta_batch', count( $comment_ids ) );

[417] Fix | Delete

}

[418] Fix | Delete

[419] Fix | Delete

if ( apply_filters( 'akismet_optimize_table', ( mt_rand(1, 5000) == 11), $wpdb->commentmeta ) ) // lucky number

[420] Fix | Delete

$wpdb->query("OPTIMIZE TABLE {$wpdb->commentmeta}");

[421] Fix | Delete

}

[422] Fix | Delete

[423] Fix | Delete

// Clear out comments meta that no longer have corresponding comments in the database

[424] Fix | Delete

public static function delete_orphaned_commentmeta() {

[425] Fix | Delete

global $wpdb;

[426] Fix | Delete

[427] Fix | Delete

$last_meta_id = 0;

[428] Fix | Delete

$start_time = isset( $_SERVER['REQUEST_TIME_FLOAT'] ) ? $_SERVER['REQUEST_TIME_FLOAT'] : microtime( true );

[429] Fix | Delete

$max_exec_time = max( ini_get('max_execution_time') - 5, 3 );

[430] Fix | Delete

[431] Fix | Delete

while ( $commentmeta_results = $wpdb->get_results( $wpdb->prepare( "SELECT m.meta_id, m.comment_id, m.meta_key FROM {$wpdb->commentmeta} as m LEFT JOIN {$wpdb->comments} as c USING(comment_id) WHERE c.comment_id IS NULL AND m.meta_id > %d ORDER BY m.meta_id LIMIT 1000", $last_meta_id ) ) ) {

[432] Fix | Delete

if ( empty( $commentmeta_results ) )

[433] Fix | Delete

return;

[434] Fix | Delete

[435] Fix | Delete

$wpdb->queries = array();

[436] Fix | Delete

[437] Fix | Delete

$commentmeta_deleted = 0;

[438] Fix | Delete

[439] Fix | Delete

foreach ( $commentmeta_results as $commentmeta ) {

[440] Fix | Delete

if ( 'akismet_' == substr( $commentmeta->meta_key, 0, 8 ) ) {

[441] Fix | Delete

delete_comment_meta( $commentmeta->comment_id, $commentmeta->meta_key );

[442] Fix | Delete

do_action( 'akismet_batch_delete_count', __FUNCTION__ );

[443] Fix | Delete

$commentmeta_deleted++;

[444] Fix | Delete

}

[445] Fix | Delete

[446] Fix | Delete

$last_meta_id = $commentmeta->meta_id;

[447] Fix | Delete

}

[448] Fix | Delete

[449] Fix | Delete

do_action( 'akismet_delete_commentmeta_batch', $commentmeta_deleted );

[450] Fix | Delete

[451] Fix | Delete

// If we're getting close to max_execution_time, quit for this round.

[452] Fix | Delete

if ( microtime(true) - $start_time > $max_exec_time )

[453] Fix | Delete

return;

[454] Fix | Delete

}

[455] Fix | Delete

[456] Fix | Delete

if ( apply_filters( 'akismet_optimize_table', ( mt_rand(1, 5000) == 11), $wpdb->commentmeta ) ) // lucky number

[457] Fix | Delete

$wpdb->query("OPTIMIZE TABLE {$wpdb->commentmeta}");

[458] Fix | Delete

}

[459] Fix | Delete

[460] Fix | Delete

// how many approved comments does this author have?

[461] Fix | Delete

public static function get_user_comments_approved( $user_id, $comment_author_email, $comment_author, $comment_author_url ) {

[462] Fix | Delete

global $wpdb;

[463] Fix | Delete

[464] Fix | Delete

if ( !empty( $user_id ) )

[465] Fix | Delete

return (int) $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(*) FROM {$wpdb->comments} WHERE user_id = %d AND comment_approved = 1", $user_id ) );

[466] Fix | Delete

[467] Fix | Delete

if ( !empty( $comment_author_email ) )

[468] Fix | Delete

return (int) $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(*) FROM {$wpdb->comments} WHERE comment_author_email = %s AND comment_author = %s AND comment_author_url = %s AND comment_approved = 1", $comment_author_email, $comment_author, $comment_author_url ) );

[469] Fix | Delete

[470] Fix | Delete

return 0;

[471] Fix | Delete

}

[472] Fix | Delete

[473] Fix | Delete

// get the full comment history for a given comment, as an array in reverse chronological order

[474] Fix | Delete

public static function get_comment_history( $comment_id ) {

[475] Fix | Delete

$history = get_comment_meta( $comment_id, 'akismet_history', false );

[476] Fix | Delete

if ( empty( $history ) || empty( $history[ 0 ] ) ) {

[477] Fix | Delete

return false;

[478] Fix | Delete

}

[479] Fix | Delete

[480] Fix | Delete

/*

[481] Fix | Delete

// To see all variants when testing.

[482] Fix | Delete

$history[] = array( 'time' => 445856401, 'message' => 'Old versions of Akismet stored the message as a literal string in the commentmeta.', 'event' => null );

[483] Fix | Delete

$history[] = array( 'time' => 445856402, 'event' => 'recheck-spam' );

[484] Fix | Delete

$history[] = array( 'time' => 445856403, 'event' => 'check-spam' );

[485] Fix | Delete

$history[] = array( 'time' => 445856404, 'event' => 'recheck-ham' );

[486] Fix | Delete

$history[] = array( 'time' => 445856405, 'event' => 'check-ham' );

[487] Fix | Delete

$history[] = array( 'time' => 445856406, 'event' => 'wp-blacklisted' );

[488] Fix | Delete

$history[] = array( 'time' => 445856407, 'event' => 'report-spam' );

[489] Fix | Delete

$history[] = array( 'time' => 445856408, 'event' => 'report-spam', 'user' => 'sam' );

[490] Fix | Delete

$history[] = array( 'message' => 'sam reported this comment as spam (hardcoded message).', 'time' => 445856400, 'event' => 'report-spam', 'user' => 'sam' );

[491] Fix | Delete

$history[] = array( 'time' => 445856409, 'event' => 'report-ham', 'user' => 'sam' );

[492] Fix | Delete

$history[] = array( 'message' => 'sam reported this comment as ham (hardcoded message).', 'time' => 445856400, 'event' => 'report-ham', 'user' => 'sam' ); //

[493] Fix | Delete

$history[] = array( 'time' => 445856410, 'event' => 'cron-retry-spam' );

[494] Fix | Delete

$history[] = array( 'time' => 445856411, 'event' => 'cron-retry-ham' );

[495] Fix | Delete

$history[] = array( 'time' => 445856412, 'event' => 'check-error' ); //

[496] Fix | Delete

$history[] = array( 'time' => 445856413, 'event' => 'check-error', 'meta' => array( 'response' => 'The server was taking a nap.' ) );

[497] Fix | Delete

$history[] = array( 'time' => 445856414, 'event' => 'recheck-error' ); // Should not generate a message.

[498] Fix | Delete

$history[] = array( 'time' => 445856415, 'event' => 'recheck-error', 'meta' => array( 'response' => 'The server was taking a nap.' ) );

[499] Fix | Delete