<?php

/*

Plugin Name: Akismet

Plugin URI: http://akismet.com/

Description: Akismet checks your comments against the Akismet web service to see if they look like spam or not. You need a <a href="http://wordpress.com/api-keys/">WordPress.com API key</a> to use it. You can review the spam it catches under "Comments." To show off your Akismet stats just put <code>&lt;?php akismet_counter(); ?&gt;</code> in your template. See also: <a href="http://wordpress.org/extend/plugins/stats/">WP Stats plugin</a>.

Version: 2.2.6

Author: Matt Mullenweg

Author URI: http://ma.tt/

*/

define('AKISMET_VERSION', '2.2.6');

// If you hardcode a WP.com API key here, all key config screens will be hidden

if ( defined('WPCOM_API_KEY') )

	$wpcom_api_key = constant('WPCOM_API_KEY');

else

	$wpcom_api_key = '';

function akismet_init() {

	global $wpcom_api_key, $akismet_api_host, $akismet_api_port;

	if ( $wpcom_api_key )

		$akismet_api_host = $wpcom_api_key . '.rest.akismet.com';

	else

		$akismet_api_host = get_option('wordpress_api_key') . '.rest.akismet.com';

	$akismet_api_port = 80;

	add_action('admin_menu', 'akismet_config_page');

	add_action('admin_menu', 'akismet_stats_page');

	akismet_admin_warnings();

}

add_action('init', 'akismet_init');

function akismet_admin_init() {

	if ( function_exists( 'get_plugin_page_hook' ) )

		$hook = get_plugin_page_hook( 'akismet-stats-display', 'index.php' );

	else

		$hook = 'dashboard_page_akismet-stats-display';

	add_action('admin_head-'.$hook, 'akismet_stats_script');

}

add_action('admin_init', 'akismet_admin_init');

if ( !function_exists('wp_nonce_field') ) {

	function akismet_nonce_field($action = -1) { return; }

	$akismet_nonce = -1;

} else {

	function akismet_nonce_field($action = -1) { return wp_nonce_field($action); }

	$akismet_nonce = 'akismet-update-key';

}

if ( !function_exists('number_format_i18n') ) {

	function number_format_i18n( $number, $decimals = null ) { return number_format( $number, $decimals ); }

}

function akismet_config_page() {

	if ( function_exists('add_submenu_page') )

		add_submenu_page('plugins.php', __('Akismet Configuration'), __('Akismet Configuration'), 'manage_options', 'akismet-key-config', 'akismet_conf');

}

function akismet_conf() {

	global $akismet_nonce, $wpcom_api_key;

	if ( isset($_POST['submit']) ) {

		if ( function_exists('current_user_can') && !current_user_can('manage_options') )

			die(__('Cheatin’ uh?'));

		check_admin_referer( $akismet_nonce );

		$key = preg_replace( '/[^a-h0-9]/i', '', $_POST['key'] );

		if ( empty($key) ) {

			$key_status = 'empty';

			$ms[] = 'new_key_empty';

			delete_option('wordpress_api_key');

		} else {

			$key_status = akismet_verify_key( $key );

		}

		if ( $key_status == 'valid' ) {

			update_option('wordpress_api_key', $key);

			$ms[] = 'new_key_valid';

		} else if ( $key_status == 'invalid' ) {

			$ms[] = 'new_key_invalid';

		} else if ( $key_status == 'failed' ) {

			$ms[] = 'new_key_failed';

		}

		if ( isset( $_POST['akismet_discard_month'] ) )

			update_option( 'akismet_discard_month', 'true' );

		else

			update_option( 'akismet_discard_month', 'false' );

	} elseif ( isset($_POST['check']) ) {

		akismet_get_server_connectivity(0);

	}

	if ( $key_status != 'valid' ) {

		$key = get_option('wordpress_api_key');

		if ( empty( $key ) ) {

			if ( $key_status != 'failed' ) {

				if ( akismet_verify_key( '1234567890ab' ) == 'failed' )

					$ms[] = 'no_connection';

				else

					$ms[] = 'key_empty';

			}

			$key_status = 'empty';

		} else {

			$key_status = akismet_verify_key( $key );

		}

		if ( $key_status == 'valid' ) {

			$ms[] = 'key_valid';

		} else if ( $key_status == 'invalid' ) {

			delete_option('wordpress_api_key');

			$ms[] = 'key_empty';

		} else if ( !empty($key) && $key_status == 'failed' ) {

			$ms[] = 'key_failed';

		}

	}

	$messages = array(

		'new_key_empty' => array('color' => 'aa0', 'text' => __('Your key has been cleared.')),

		'new_key_valid' => array('color' => '2d2', 'text' => __('Your key has been verified. Happy blogging!')),

		'new_key_invalid' => array('color' => 'd22', 'text' => __('The key you entered is invalid. Please double-check it.')),

		'new_key_failed' => array('color' => 'd22', 'text' => __('The key you entered could not be verified because a connection to akismet.com could not be established. Please check your server configuration.')),

		'no_connection' => array('color' => 'd22', 'text' => __('There was a problem connecting to the Akismet server. Please check your server configuration.')),

		'key_empty' => array('color' => 'aa0', 'text' => sprintf(__('Please enter an API key. (<a href="%s" style="color:#fff">Get your key.</a>)'), 'http://wordpress.com/profile/')),

		'key_valid' => array('color' => '2d2', 'text' => __('This key is valid.')),

		'key_failed' => array('color' => 'aa0', 'text' => __('The key below was previously validated but a connection to akismet.com can not be established at this time. Please check your server configuration.')));

?>

<?php if ( !empty($_POST['submit'] ) ) : ?>

<div id="message" class="updated fade"><p><strong><?php _e('Options saved.') ?></strong></p></div>

<?php endif; ?>

<div class="wrap">

<h2><?php _e('Akismet Configuration'); ?></h2>

<div class="narrow">

<form action="" method="post" id="akismet-conf" style="margin: auto; width: 400px; ">

<?php if ( !$wpcom_api_key ) { ?>

	<p><?php printf(__('For many people, <a href="%1$s">Akismet</a> will greatly reduce or even completely eliminate the comment and trackback spam you get on your site. If one does happen to get through, simply mark it as "spam" on the moderation screen and Akismet will learn from the mistakes. If you don\'t have a WordPress.com account yet, you can get one at <a href="%2$s">WordPress.com</a>.'), 'http://akismet.com/', 'http://wordpress.com/api-keys/'); ?></p>

<?php akismet_nonce_field($akismet_nonce) ?>

<h3><label for="key"><?php _e('WordPress.com API Key'); ?></label></h3>

<?php foreach ( $ms as $m ) : ?>

	<p style="padding: .5em; background-color: #<?php echo $messages[$m]['color']; ?>; color: #fff; font-weight: bold;"><?php echo $messages[$m]['text']; ?></p>

<?php endforeach; ?>

<p><input id="key" name="key" type="text" size="15" maxlength="12" value="<?php echo get_option('wordpress_api_key'); ?>" style="font-family: 'Courier New', Courier, mono; font-size: 1.5em;" /> (<?php _e('<a href="http://faq.wordpress.com/2005/10/19/api-key/">What is this?</a>'); ?>)</p>

<?php if ( $invalid_key ) { ?>

<h3><?php _e('Why might my key be invalid?'); ?></h3>

<p><?php _e('This can mean one of two things, either you copied the key wrong or that the plugin is unable to reach the Akismet servers, which is most often caused by an issue with your web host around firewalls or similar.'); ?></p>

<?php } ?>

<?php } ?>

<p><label><input name="akismet_discard_month" id="akismet_discard_month" value="true" type="checkbox" <?php if ( get_option('akismet_discard_month') == 'true' ) echo ' checked="checked" '; ?> /> <?php _e('Automatically discard spam comments on posts older than a month.'); ?></label></p>

	<p class="submit"><input type="submit" name="submit" value="<?php _e('Update options &raquo;'); ?>" /></p>

</form>

<form action="" method="post" id="akismet-connectivity" style="margin: auto; width: 400px; ">

<h3><?php _e('Server Connectivity'); ?></h3>

<?php

	$servers = akismet_get_server_connectivity();

	$fail_count = count($servers) - count( array_filter($servers) );

	if ( is_array($servers) && count($servers) > 0 ) {

		// some connections work, some fail

		if ( $fail_count > 0 && $fail_count < count($servers) ) { ?>

			<p style="padding: .5em; background-color: #aa0; color: #fff; font-weight:bold;"><?php _e('Unable to reach some Akismet servers.'); ?></p>

			<p><?php echo sprintf( __('A network problem or firewall is blocking some connections from your web server to Akismet.com.  Akismet is working but this may cause problems during times of network congestion.  Please contact your web host or firewall administrator and give them <a href="%s" target="_blank">this information about Akismet and firewalls</a>.'), 'http://blog.akismet.com/akismet-hosting-faq/'); ?></p>

		<?php

		// all connections fail

		} elseif ( $fail_count > 0 ) { ?>

			<p style="padding: .5em; background-color: #d22; color: #fff; font-weight:bold;"><?php _e('Unable to reach any Akismet servers.'); ?></p>

			<p><?php echo sprintf( __('A network problem or firewall is blocking all connections from your web server to Akismet.com.  <strong>Akismet cannot work correctly until this is fixed.</strong>  Please contact your web host or firewall administrator and give them <a href="%s" target="_blank">this information about Akismet and firewalls</a>.'), 'http://blog.akismet.com/akismet-hosting-faq/'); ?></p>

		<?php

		// all connections work

		} else { ?>

			<p style="padding: .5em; background-color: #2d2; color: #fff; font-weight:bold;"><?php  _e('All Akismet servers are available.'); ?></p>

			<p><?php _e('Akismet is working correctly.  All servers are accessible.'); ?></p>

		<?php

		}

	} elseif ( !is_callable('fsockopen') ) {

		?>

			<p style="padding: .5em; background-color: #d22; color: #fff; font-weight:bold;"><?php _e('Network functions are disabled.'); ?></p>

			<p><?php echo sprintf( __('Your web host or server administrator has disabled PHP\'s <code>fsockopen</code> function.  <strong>Akismet cannot work correctly until this is fixed.</strong>  Please contact your web host or firewall administrator and give them <a href="%s" target="_blank">this information about Akismet\'s system requirements</a>.'), 'http://blog.akismet.com/akismet-hosting-faq/'); ?></p>

		<?php

	} else {

		?>

			<p style="padding: .5em; background-color: #d22; color: #fff; font-weight:bold;"><?php _e('Unable to find Akismet servers.'); ?></p>

			<p><?php echo sprintf( __('A DNS problem or firewall is preventing all access from your web server to Akismet.com.  <strong>Akismet cannot work correctly until this is fixed.</strong>  Please contact your web host or firewall administrator and give them <a href="%s" target="_blank">this information about Akismet and firewalls</a>.'), 'http://blog.akismet.com/akismet-hosting-faq/'); ?></p>

		<?php

	}

	if ( !empty($servers) ) {

?>

<table style="width: 100%;">

<thead><th><?php _e('Akismet server'); ?></th><th><?php _e('Network Status'); ?></th></thead>

<tbody>

<?php

		asort($servers);

		foreach ( $servers as $ip => $status ) {

			$color = ( $status ? '#2d2' : '#d22');

	?>

		<tr>

		<td><?php echo htmlspecialchars($ip); ?></td>

		<td style="padding: 0 .5em; font-weight:bold; color: #fff; background-color: <?php echo $color; ?>"><?php echo ($status ? __('No problems') : __('Obstructed') ); ?></td>

	<?php

		}

	}

?>

</tbody>

</table>

	<p><?php if ( get_option('akismet_connectivity_time') ) echo sprintf( __('Last checked %s ago.'), human_time_diff( get_option('akismet_connectivity_time') ) ); ?></p>

	<p class="submit"><input type="submit" name="check" value="<?php _e('Check network status &raquo;'); ?>" /></p>

</form>

</div>

</div>

<?php

}

function akismet_stats_page() {

	if ( function_exists('add_submenu_page') )

		add_submenu_page('index.php', __('Akismet Stats'), __('Akismet Stats'), 'manage_options', 'akismet-stats-display', 'akismet_stats_display');

}

function akismet_stats_script() {

	?>

<script type="text/javascript">

function resizeIframe() {

    var height = document.documentElement.clientHeight;

    height -= document.getElementById('akismet-stats-frame').offsetTop;

    height += 100; // magic padding

    document.getElementById('akismet-stats-frame').style.height = height +"px";

};

function resizeIframeInit() {

	document.getElementById('akismet-stats-frame').onload = resizeIframe;

	window.onresize = resizeIframe;

}

addLoadEvent(resizeIframeInit);

</script><?php

}

function akismet_stats_display() {

	global $akismet_api_host, $akismet_api_port, $wpcom_api_key;

	$blog = urlencode( get_option('home') );

	$url = "http://".akismet_get_key().".web.akismet.com/1.0/user-stats.php?blog={$blog}";

	?>

	<div class="wrap">

	<iframe src="<?php echo $url; ?>" width="100%" height="100%" frameborder="0" id="akismet-stats-frame"></iframe>

	</div>

	<?php

}

function akismet_get_key() {

	global $wpcom_api_key;

	if ( !empty($wpcom_api_key) )

		return $wpcom_api_key;

	return get_option('wordpress_api_key');

}

function akismet_verify_key( $key, $ip = null ) {

	global $akismet_api_host, $akismet_api_port, $wpcom_api_key;

	$blog = urlencode( get_option('home') );

	if ( $wpcom_api_key )

		$key = $wpcom_api_key;

	$response = akismet_http_post("key=$key&blog=$blog", 'rest.akismet.com', '/1.1/verify-key', $akismet_api_port, $ip);

	if ( !is_array($response) || !isset($response[1]) || $response[1] != 'valid' && $response[1] != 'invalid' )

		return 'failed';

	return $response[1];

}

// Check connectivity between the WordPress blog and Akismet's servers.

// Returns an associative array of server IP addresses, where the key is the IP address, and value is true (available) or false (unable to connect).

function akismet_check_server_connectivity() {

	global $akismet_api_host, $akismet_api_port, $wpcom_api_key;

	$test_host = 'rest.akismet.com';

	// Some web hosts may disable one or both functions

	if ( !is_callable('fsockopen') || !is_callable('gethostbynamel') )

		return array();

	$ips = gethostbynamel($test_host);

	if ( !$ips || !is_array($ips) || !count($ips) )

		return array();

	$servers = array();

	foreach ( $ips as $ip ) {

		$response = akismet_verify_key( akismet_get_key(), $ip );

		// even if the key is invalid, at least we know we have connectivity

		if ( $response == 'valid' || $response == 'invalid' )

			$servers[$ip] = true;

		else

			$servers[$ip] = false;

	}

	return $servers;

}

// Check the server connectivity and store the results in an option.

// Cached results will be used if not older than the specified timeout in seconds; use $cache_timeout = 0 to force an update.

// Returns the same associative array as akismet_check_server_connectivity()

function akismet_get_server_connectivity( $cache_timeout = 86400 ) {

	$servers = get_option('akismet_available_servers');

	if ( (time() - get_option('akismet_connectivity_time') < $cache_timeout) && $servers !== false )

		return $servers;

	// There's a race condition here but the effect is harmless.

	$servers = akismet_check_server_connectivity();

	update_option('akismet_available_servers', $servers);

	update_option('akismet_connectivity_time', time());

	return $servers;

}

// Returns true if server connectivity was OK at the last check, false if there was a problem that needs to be fixed.

function akismet_server_connectivity_ok() {

	// skip the check on WPMU because the status page is hidden

	global $wpcom_api_key;

	if ( $wpcom_api_key )

		return true;

	$servers = akismet_get_server_connectivity();

	return !( empty($servers) || !count($servers) || count( array_filter($servers) ) < count($servers) );

}

function akismet_admin_warnings() {

	global $wpcom_api_key;

	if ( !get_option('wordpress_api_key') && !$wpcom_api_key && !isset($_POST['submit']) ) {

		function akismet_warning() {

			echo "

			<div id='akismet-warning' class='updated fade'><p><strong>".__('Akismet is almost ready.')."</strong> ".sprintf(__('You must <a href="%1$s">enter your WordPress.com API key</a> for it to work.'), "plugins.php?page=akismet-key-config")."</p></div>

			";

		}

		add_action('admin_notices', 'akismet_warning');

		return;

	} elseif ( get_option('akismet_connectivity_time') && empty($_POST) && is_admin() && !akismet_server_connectivity_ok() ) {

		function akismet_warning() {

			echo "

			<div id='akismet-warning' class='updated fade'><p><strong>".__('Akismet has detected a problem.')."</strong> ".sprintf(__('A server or network problem is preventing Akismet from working correctly.  <a href="%1$s">Click here for more information</a> about how to fix the problem.'), "plugins.php?page=akismet-key-config")."</p></div>

			";

		}

		add_action('admin_notices', 'akismet_warning');

		return;

	}

}

function akismet_get_host($host) {

	// if all servers are accessible, just return the host name.

	// if not, return an IP that was known to be accessible at the last check.

	if ( akismet_server_connectivity_ok() ) {

		return $host;

	} else {

		$ips = akismet_get_server_connectivity();

		// a firewall may be blocking access to some Akismet IPs

		if ( count($ips) > 0 && count(array_filter($ips)) < count($ips) ) {

			// use DNS to get current IPs, but exclude any known to be unreachable

			$dns = (array)gethostbynamel( rtrim($host, '.') . '.' );

			$dns = array_filter($dns);

			foreach ( $dns as $ip ) {

				if ( array_key_exists( $ip, $ips ) && empty( $ips[$ip] ) )

					unset($dns[$ip]);

			}

			// return a random IP from those available

			if ( count($dns) )

				return $dns[ array_rand($dns) ];

		}

	}

	// if all else fails try the host name

	return $host;

}

// Returns array with headers in $response[0] and body in $response[1]

function akismet_http_post($request, $host, $path, $port = 80, $ip=null) {

	global $wp_version;

	$akismet_version = constant('AKISMET_VERSION');

	$http_request  = "POST $path HTTP/1.0\r\n";

	$http_request .= "Host: $host\r\n";

	$http_request .= "Content-Type: application/x-www-form-urlencoded; charset=" . get_option('blog_charset') . "\r\n";

	$http_request .= "Content-Length: " . strlen($request) . "\r\n";

	$http_request .= "User-Agent: WordPress/$wp_version | Akismet/$akismet_version\r\n";

	$http_request .= "\r\n";

	$http_request .= $request;