{"id":232454,"date":"2023-01-20T14:05:00","date_gmt":"2023-01-20T11:05:00","guid":{"rendered":"https:\/\/wordpress.mediadoma.com\/?p=232454"},"modified":"2023-01-29T10:16:38","modified_gmt":"2023-01-29T07:16:38","slug":"la-detection-de-code-php-anti-spam-la-plus-efficace-pour-wordpress","status":"publish","type":"post","link":"https:\/\/wordpress.mediadoma.com\/fr\/la-detection-de-code-php-anti-spam-la-plus-efficace-pour-wordpress\/","title":{"rendered":"La d\u00e9tection de code PHP anti-spam la plus efficace pour WordPress"},"content":{"rendered":"

Un blog wordpress peut recevoir plus de 100 commentaires spam (produits par des robots spammeurs) par jour, ce qui est aga\u00e7ant.<\/p>\n

\"La<\/a><\/p>\n

wordpress-spam<\/p>\n

G\u00e9n\u00e9ralement, ceux-ci peuvent \u00eatre captur\u00e9s par des plugins tels qu’Akismet, cependant, ces donn\u00e9es sont toujours conserv\u00e9es dans la base de donn\u00e9es avant d’\u00eatre supprim\u00e9es<\/a> manuellement ou apr\u00e8s la date d’expiration<\/a>.<\/p>\n

LEONA<\/a> fournit une solution intelligente pour emp\u00eacher ces commentaires de spam d’aller m\u00eame dans la base de donn\u00e9es en premier lieu. Il est bas\u00e9 sur la mise d’un champ cach\u00e9 dans le formulaire et la d\u00e9finition d’une valeur lorsque l’utilisateur appuie sur une touche (onkeyup). Donc, si les valeurs ne correspondent pas, nous pensons qu’il n’est pas soumis par l’homme.<\/p>\n

wordpress fournit le filtre preprocess_comment<\/strong>, vous pouvez donc v\u00e9rifier les commentaires et quitter la page en utilisant wp_die()<\/strong> plus t\u00f4t.<\/p>\n

L’API officielle de WP indique (https:\/\/codex.wordpress.org\/Plugin_API\/Filter_Reference\/preprocess_comment<\/a> ), le $commentdata contient les informations suivantes\u00a0:<\/p>\n

'comment_post_ID' \u00a0 \u00a0 \u00a0- The post to which the comment will apply\n\u00a0 \u00a0'comment_author' \u00a0 \u00a0 \u00a0 - (may be empty)\n\u00a0 \u00a0'comment_author_email' - (may be empty)\n\u00a0 \u00a0'comment_author_url' \u00a0 - (may be empty)\n\u00a0 \u00a0'comment_content' \u00a0 \u00a0 \u00a0- The text of the proposed comment\n\u00a0 \u00a0'comment_type' \u00a0 \u00a0 \u00a0 \u00a0 - 'pingback', 'trackback', or empty for regular comments\n\u00a0 \u00a0'user_ID' \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0- (empty if not logged in)<\/code><\/pre>\n
Nous pouvons ensuite utiliser ce plugin pour autoriser le pingback\/trackback (ce que je pense \u00eatre utile) et se d\u00e9barrasser efficacement des commentaires de spam.<\/p>\n
$leonax_magic_lower = 328;\n$leonax_magic_upper = 3450709;\n\u00a0\nfunction leonax_anti_spam_form($fields){\n\u00a0 \u00a0 global $leonax_magic_lower, $leonax_magic_upper;\n\u00a0 \u00a0 $leonax_magic = mt_rand($leonax_magic_lower, $leonax_magic_upper);\n\u00a0 \u00a0 $fields['leonax_magic'] = <<<EOT\n\u00a0 \u00a0 \u00a0 \u00a0 <input type=\"hidden\" id=\"leonax-magic\" name=\"leonax-magic\" value=\"0\">\n\u00a0 \u00a0 \u00a0 \u00a0 <script type=\"text\/javascript\">\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 jQuery(function() {\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 jQuery(\"#comment\").on(\"keyup\", function() {\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 jQuery(\"#leonax-magic\").val(\"$leonax_magic\");\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 });\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 })\n\u00a0 \u00a0 \u00a0 \u00a0 <\/script>\nEOT;\n\u00a0 \u00a0 return $fields;\n}\n\u00a0\nadd_filter('comment_form_default_fields', 'leonax_anti_spam_form');\n\u00a0\nfunction leonax_anit_spam_caught() {\n\u00a0 wp_die('<strong>ERROR<\/strong>: Looks like you are a spam bot. Please stop doing this.');\n}\n\u00a0\nfunction leonax_anti_spam_check( $commentdata) {\n\u00a0 $comment_type = '';\n\u00a0 if (isset($commentdata['comment_type'])) {\n\u00a0 \u00a0 $comment_type = trim($commentdata['comment_type']);\n\u00a0 } \u00a0 \n\u00a0 \n\u00a0if (($comment_type == 'pingback') || ($comment_type == 'trackback')) {\n\u00a0 \u00a0 return $commentdata;\n\u00a0 }\n\u00a0 $content = '';\n\u00a0 if (isset($commentdata['comment_content'])) {\n\u00a0 \u00a0 $content = trim($commentdata['comment_content']);\n\u00a0 } \u00a0 \n\u00a0 if (!strlen($content)) {\n\u00a0 \u00a0 leonax_anit_spam_caught();\n\u00a0 }\n\u00a0 \n\u00a0 if (preg_match(\"\/[a-e0-9]{25,}\/i\", $content)) { \/\/ To capture the strange IDs\n\u00a0 \u00a0 leonax_anit_spam_caught(); \u00a0\n\u00a0 }\n\u00a0\n\u00a0 global $leonax_magic_lower, $leonax_magic_upper; \u00a0\n\u00a0 \n\u00a0 if (isset($commentdata['user_ID']) && $commentdata['user_ID']) { \/\/ Login-users are not bad\n\u00a0 \u00a0 return $commentdata;\n\u00a0 }\n\u00a0 \n\u00a0 if (!isset($_POST['leonax-magic'])) {\n\u00a0 \u00a0 leonax_anit_spam_caught();\n\u00a0 }\n\u00a0 $magic = intval($_POST['leonax-magic']);\n\u00a0 if ($magic < $leonax_magic_lower || $magic > $leonax_magic_upper) {\n\u00a0 \u00a0 leonax_anit_spam_caught();\n\u00a0 }\n\u00a0 return $commentdata;\n}\n\u00a0\nadd_filter( 'preprocess_comment', 'leonax_anti_spam_check' );<\/code><\/pre>\n
Si nous testons la fonction\/le filtre en saisissant expr\u00e8s les identifiants \u00e9tranges, nous obtiendrons ce qui suit (et le commentaire n’est pas saisi dans la zone d’attente).<\/p>\n
Remarque\u00a0: placez le code ci-dessus \u00e0 la fin du mod\u00e8le functions.php<\/strong> (ou du th\u00e8me enfant).<\/p>\n
\"La<\/a><\/p>\n
wordpress-spam-detect<\/p>\n
Cela fonctionne comme une magie!<\/p>\n
Source d’enregistrement:  helloacm.com<\/a><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"
La meilleure d\u00e9tection de code PHP anti-spam efficace pour WordPress<\/p>\n","protected":false},"author":1,"featured_media":223984,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wp_rev_ctl_limit":""},"categories":[717,801,1028,841,862],"tags":[1167],"class_list":["post-232454","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-developpeur","category-php-3","category-securite","category-tutoriels","category-wordpress-3","tag-affiai-fr"],"_links":{"self":[{"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/posts\/232454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/comments?post=232454"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/posts\/232454\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/media\/223984"}],"wp:attachment":[{"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/media?parent=232454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/categories?post=232454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wordpress.mediadoma.com\/fr\/wp-json\/wp\/v2\/tags?post=232454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}