{"id":232283,"date":"2023-01-20T13:52:00","date_gmt":"2023-01-20T10:52:00","guid":{"rendered":"https:\/\/wordpress.mediadoma.com\/?p=232283"},"modified":"2023-01-29T09:51:30","modified_gmt":"2023-01-29T06:51:30","slug":"la-mejor-deteccion-de-codigo-php-antispam-eficiente-para-wordpress","status":"publish","type":"post","link":"https:\/\/wordpress.mediadoma.com\/es\/la-mejor-deteccion-de-codigo-php-antispam-eficiente-para-wordpress\/","title":{"rendered":"La mejor detecci\u00f3n de c\u00f3digo PHP antispam eficiente para WordPress"},"content":{"rendered":"

Un blog de wordpress puede recibir m\u00e1s de 100 comentarios de spam (producidos por robots de spam) al d\u00eda, lo cual es molesto.<\/p>\n

\"La<\/a><\/p>\n

wordpress-spam<\/p>\n

En general, estos pueden ser capturados por complementos como Akismet, sin embargo, estos datos a\u00fan se conservan en la base de datos antes de que se eliminen<\/a> manualmente o despu\u00e9s de la fecha de vencimiento<\/a>.<\/p>\n

LEONA<\/a> proporciona una soluci\u00f3n inteligente para evitar que estos comentarios de spam lleguen incluso a la base de datos en primer lugar. Se basa en poner un campo oculto en el formulario y establecer un valor cuando el usuario presiona una tecla (onkeyup). Entonces, si los valores no coinciden, creemos que no lo envi\u00f3 un humano.<\/p>\n

wordpress proporciona el filtro preprocess_comment<\/strong>, por lo que puede verificar los comentarios y salir de la p\u00e1gina usando wp_die()<\/strong> antes.<\/p>\n

La API oficial de WP dice (https:\/\/codex.wordpress.org\/Plugin_API\/Filter_Reference\/preprocess_comment<\/a> ), $commentdata contiene la siguiente informaci\u00f3n:<\/p>\n

'comment_post_ID' \u00a0 \u00a0 \u00a0- The post to which the comment will apply\n\u00a0 \u00a0'comment_author' \u00a0 \u00a0 \u00a0 - (may be empty)\n\u00a0 \u00a0'comment_author_email' - (may be empty)\n\u00a0 \u00a0'comment_author_url' \u00a0 - (may be empty)\n\u00a0 \u00a0'comment_content' \u00a0 \u00a0 \u00a0- The text of the proposed comment\n\u00a0 \u00a0'comment_type' \u00a0 \u00a0 \u00a0 \u00a0 - 'pingback', 'trackback', or empty for regular comments\n\u00a0 \u00a0'user_ID' \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0- (empty if not logged in)<\/code><\/pre>\n
Luego podemos usar este complemento para permitir pingback\/trackback (que creo que es \u00fatil) y deshacernos de los comentarios de spam de manera efectiva.<\/p>\n
$leonax_magic_lower = 328;\n$leonax_magic_upper = 3450709;\n\u00a0\nfunction leonax_anti_spam_form($fields){\n\u00a0 \u00a0 global $leonax_magic_lower, $leonax_magic_upper;\n\u00a0 \u00a0 $leonax_magic = mt_rand($leonax_magic_lower, $leonax_magic_upper);\n\u00a0 \u00a0 $fields['leonax_magic'] = <<<EOT\n\u00a0 \u00a0 \u00a0 \u00a0 <input type=\"hidden\" id=\"leonax-magic\" name=\"leonax-magic\" value=\"0\">\n\u00a0 \u00a0 \u00a0 \u00a0 <script type=\"text\/javascript\">\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 jQuery(function() {\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 jQuery(\"#comment\").on(\"keyup\", function() {\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 jQuery(\"#leonax-magic\").val(\"$leonax_magic\");\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 });\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 })\n\u00a0 \u00a0 \u00a0 \u00a0 <\/script>\nEOT;\n\u00a0 \u00a0 return $fields;\n}\n\u00a0\nadd_filter('comment_form_default_fields', 'leonax_anti_spam_form');\n\u00a0\nfunction leonax_anit_spam_caught() {\n\u00a0 wp_die('<strong>ERROR<\/strong>: Looks like you are a spam bot. Please stop doing this.');\n}\n\u00a0\nfunction leonax_anti_spam_check( $commentdata) {\n\u00a0 $comment_type = '';\n\u00a0 if (isset($commentdata['comment_type'])) {\n\u00a0 \u00a0 $comment_type = trim($commentdata['comment_type']);\n\u00a0 } \u00a0 \n\u00a0 \n\u00a0if (($comment_type == 'pingback') || ($comment_type == 'trackback')) {\n\u00a0 \u00a0 return $commentdata;\n\u00a0 }\n\u00a0 $content = '';\n\u00a0 if (isset($commentdata['comment_content'])) {\n\u00a0 \u00a0 $content = trim($commentdata['comment_content']);\n\u00a0 } \u00a0 \n\u00a0 if (!strlen($content)) {\n\u00a0 \u00a0 leonax_anit_spam_caught();\n\u00a0 }\n\u00a0 \n\u00a0 if (preg_match(\"\/[a-e0-9]{25,}\/i\", $content)) { \/\/ To capture the strange IDs\n\u00a0 \u00a0 leonax_anit_spam_caught(); \u00a0\n\u00a0 }\n\u00a0\n\u00a0 global $leonax_magic_lower, $leonax_magic_upper; \u00a0\n\u00a0 \n\u00a0 if (isset($commentdata['user_ID']) && $commentdata['user_ID']) { \/\/ Login-users are not bad\n\u00a0 \u00a0 return $commentdata;\n\u00a0 }\n\u00a0 \n\u00a0 if (!isset($_POST['leonax-magic'])) {\n\u00a0 \u00a0 leonax_anit_spam_caught();\n\u00a0 }\n\u00a0 $magic = intval($_POST['leonax-magic']);\n\u00a0 if ($magic < $leonax_magic_lower || $magic > $leonax_magic_upper) {\n\u00a0 \u00a0 leonax_anit_spam_caught();\n\u00a0 }\n\u00a0 return $commentdata;\n}\n\u00a0\nadd_filter( 'preprocess_comment', 'leonax_anti_spam_check' );<\/code><\/pre>\n
Si probamos la funci\u00f3n\/filtro ingresando las ID extra\u00f1as a prop\u00f3sito, obtendremos lo siguiente (y el comentario no se ingresa en el \u00e1rea de espera).<\/p>\n
Nota: Coloque el c\u00f3digo anterior al final de la plantilla functions.php (o tema secundario).<\/strong><\/p>\n
\"La<\/a><\/p>\n
wordpress-spam-detectar<\/p>\n
\u00a1Funciona como una magia!<\/p>\n
Fuente de grabaci\u00f3n:  helloacm.com<\/a><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"
La mejor detecci\u00f3n de c\u00f3digo PHP antispam eficiente para WordPress<\/p>\n","protected":false},"author":1,"featured_media":223984,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wp_rev_ctl_limit":""},"categories":[716,1027,800,840,861],"tags":[1172],"class_list":["post-232283","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-desarrollador","category-la-seguridad","category-php-2","category-tutoriales","category-wordpress-2","tag-affiai-es"],"_links":{"self":[{"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/posts\/232283","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/comments?post=232283"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/posts\/232283\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/media\/223984"}],"wp:attachment":[{"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/media?parent=232283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/categories?post=232283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/es\/wp-json\/wp\/v2\/tags?post=232283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}