mod/wiki/ewiki/plugins/email_protect.php

   1 <?php
   2
   3  # This plugin protects email addresses from getting seen by spambots,
   4  # by the cost of additonal effort for real persons, who really want
   5  # to mail someone.
   6  #
   7  # It is __really safe__ because it protects addresses with an request
   8  # <FORM> before the real email address gets shown on a page (it seems
   9  # impossible to me, that there are already all that intelligent spambots
  10  # available, which can automatically fill out a <form> to access the
  11  # following page).
  12  # The 'cipher' method is really unimportant, when it comes to tricking
  13  # automated harvesters.
  14  #
  15  # Additionally it generates faked/trap email addresses to annoy the
  16  # marketing mafia.
  17
  18
  19  #-- change these from time to time:
  20  define("EWIKI_PAGE_EMAIL", "ProtectedEmail");
  21  define("EWIKI_UP_ENCEMAIL", "encoded_email");
  22  define("EWIKI_UP_NOSPAMBOT", "i_am_no_spambot");
  23  define("EWIKI_UP_REQUESTLV", "rl");
  24  define("EWIKI_FAKE_EMAIL_LOOP", 5);
  25  $ewiki_config["feedbots_tarpits"] = "@spamassassin.taint.org,@123webhosting.org,@e.mailsiphon.com,@heypete.com,@ncifcrf.gov";
  26  $ewiki_config["feedbots_badguys"] = "@riaa.com,@whitehouse.gov,@aol.com,@microsoft.com";
  27
  28  #-- text, translations
  29  $ewiki_t["en"]["PROTE0"] = "Protected Email Address";
  30  $ewiki_t["en"]["PROTE1"] = "The email address you've clicked on is protected by this form, so it won't get found by <a href=\"http://google.com/search?q=spambots\">spambots</a> (automated search engines, which crawl the net for addresses just for the entertainment of the marketing mafia).";
  31  $ewiki_t["en"]["PROTE2"] = "The page you're going to edit contains at least one email address. To protect it we must ensure that no spambot reaches the edit box (with the email address in cleartext).";
  32  $ewiki_t["en"]["PROTE4"] = "I'm no spambot, really!";
  33  $ewiki_t["en"]["PROTE5"] = "<b>generate more faked email addresses</b>";
  34  $ewiki_t["en"]["PROTE6"] = "the email address you've clicked on is:";
  35  $ewiki_t["en"]["PROTE7"] = "<b>spammers, please eat these:</b>";
  36
  37  $ewiki_t["de"]["PROTE0"] = "Geschützte EMail-Adresse";
  38  $ewiki_t["de"]["PROTE1"] = "Die EMail-Adresse, die du angeklickt hast, wird durch dieses Formular vor <a href=\"http://google.com/search?q=spambots\">spambots</a> (automatisierte Suchwerkzeuge, die das Netz zur Freude der MarketingMafia nach Adressen abgrasen) beschützt.";
  39  $ewiki_t["de"]["PROTE2"] = "Die Seite, die du ändern willst, enthält momentan wenigstens eine EMail-Adresse. Um diese zu schützen müssen wir sicherstellen, daß kein Spambot an die Edit-Box kommt (weil dort die Adresse ja im Klartext steht).";
  40  $ewiki_t["de"]["PROTE4"] = "Ich bin wirklich kein Spambot!";
  41  $ewiki_t["de"]["PROTE5"] = "<b>noch mehr fingierte Adressen anzeigen</b>";
  42  $ewiki_t["de"]["PROTE6"] = "die EMail-Adresse die du angeklickt hast lautet:";
  43  $ewiki_t["de"]["PROTE7"] = "<b>Liebe Spammer, bitte freßt das:</b>";
  44
  45  #-- plugin glue
  46  $ewiki_plugins["link_url"][] = "ewiki_email_protect_link";
  47  $ewiki_plugins["page"][EWIKI_PAGE_EMAIL] = "ewiki_email_protect_form";
  48  $ewiki_plugins["edit_hook"][] = "ewiki_email_protect_edit_hook";
  49  $ewiki_plugins["page_final"][] = "ewiki_email_protect_enctext";
  50
  51
  52
  53  function ewiki_email_protect_enctext(&$html, $id, $data, $action) {
  54
  55     $a_secure = array("info", "diff");
  56
  57     if (in_array($action, $a_secure)) {
  58
  59        $html = preg_replace('/([-_+\w\d.]+@[-\w\d.]+\.[\w]{2,5})\b/me',
  60                '"<a href=\"".ewiki_email_protect_encode("\1",2).
  61                 "\">".ewiki_email_protect_encode("\1",0)."</a>"',
  62                $html);
  63     }
  64  }
  65
  66
  67  /* ewiki_format() callback function to replace mailto: links with
  68   * encoded redirection URLs
  69   */
  70  function ewiki_email_protect_link(&$href, &$title) {
  71
  72      if (substr($href, 0, 7) == "mailto:") {
  73
  74          $href = substr($href, 7);
  75
  76          $href = ewiki_email_protect_encode($href, 2);
  77          $title = ewiki_email_protect_encode($title, 0);
  78      }
  79  }
  80
  81
  82
  83  /* the edit box for every page must be protected as well - else all
  84   * mail addresses would still show up in the wikimarkup (cleartext)
  85   */
  86  function ewiki_email_protect_edit_hook($id, &$data, &$hidden_postdata) {
  87
  88     $hidden_postdata[EWIKI_UP_NOSPAMBOT] = 1;
  89
  90     if (empty($_REQUEST[EWIKI_UP_NOSPAMBOT])
  91         && strpos($data["content"], "@")
  92         && preg_match('/\w\w@([-\w]+\.)+\w\w/', $data["content"])   )
  93     {
  94        $url = ewiki_script("edit", $id);
  95        $o = ewiki_email_protect_form($id, $data, "edit", "PROTE2", $url);
  96        return($o);
  97     }
  98
  99     if (!empty($_POST[EWIKI_UP_NOSPAMBOT]) && empty($_COOKIE[EWIKI_UP_NOSPAMBOT]) && EWIKI_HTTP_HEADERS) {
 100        setcookie(EWIKI_UP_NOSPAMBOT, "grant_access", time()+7*24*3600, "/");
 101     }
 102
 103  }
 104
 105
 106
 107  /* this places a <FORM METHOD="POST"> in between the WikiPage with the
 108   * encoded mail address URL and the page with the clearly readable
 109   * mailto: string
 110   */
 111  function ewiki_email_protect_form($id, $data=0, $action=0, $text="PROTE1", $url="") {
 112
 113     if ($url || ($email = @$_REQUEST[EWIKI_UP_ENCEMAIL])) {
 114
 115           $html = "<h3>" . ewiki_t("PROTE0") . "</h3>\n";
 116
 117           if (empty($_REQUEST[EWIKI_UP_NOSPAMBOT])) {  #// from GET,POST,COOKIE
 118
 119              (empty($url)) and ($url = ewiki_script("", EWIKI_PAGE_EMAIL));
 120
 121              $html .= ewiki_t($text) . "<br /><br /><br />\n";
 122
 123              $html .= '<form action="' . $url .
 124                       '" method="POST" enctype="multipart/form-data" encoding="iso-8859-1">';
 125              $html .= '<fieldset class="invisiblefieldset">';
 126              $html .= '<input type="hidden" name="'.EWIKI_UP_ENCEMAIL.'" value="' . $email . '" />';
 127              foreach (array_merge($_GET, $_POST) as $var=>$value) {
 128                 if (($var != "id") && ($var != EWIKI_UP_ENCEMAIL) && ($var != EWIKI_UP_NOSPAMBOT)) {
 129                    $html .= '<input type="hidden" name="' . s($var) . '" value="' . s($value) . '" />';
 130                 }
 131              }
 132              $html .= '<input type="checkbox" name="'.EWIKI_UP_NOSPAMBOT.'" value="true" /> ' . ewiki_t("PROTE4") . '<br /><br />';
 133              $html .= '<input type="submit" name="go" /></fieldset></form><br /><br />';
 134
 135              if (EWIKI_FAKE_EMAIL_LOOP) {
 136                 $html .= "\n" . ewiki_t("PROTE7") . "<br />\n";
 137                 $html .= ewiki_email_protect_feedbots();
 138              }
 139
 140           }
 141           else {
 142
 143              $email = ewiki_email_protect_encode($email, -1);
 144
 145              $html .= ewiki_t("PROTE6") . "<br />";
 146              $html .= '<a href="mailto:' . $email . '">' . $email . '</a>';
 147
 148              if (EWIKI_HTTP_HEADERS && empty($_COOKIE[EWIKI_UP_NOSPAMBOT])) {
 149                 setcookie(EWIKI_UP_NOSPAMBOT, "grant_access", time()+7*24*3600, "/");
 150              }
 151
 152           }
 153
 154     }
 155
 156     return($html);
 157  }
 158
 159
 160
 161  /* security really does not depend on how good "encoding" is, because
 162   * bots cannot automatically guess that one is actually used
 163   */
 164  function ewiki_email_protect_encode($string, $func) {
 165
 166     switch ($func) {
 167
 168        case 0:  // garbage shown email address
 169           if (strpos($string, "mailto:") === 0) {
 170              $string = substr($string, 7);
 171           }
 172           while (($rd = strrpos($string, ".")) > strpos($string, "@")) {
 173              $string = substr($string, 0, $rd);
 174           }
 175           $string = strtr($string, "@.-_", "»·±¯");
 176           break;
 177
 178        case 1:  // encode
 179           $string = str_rot17($string);
 180           $string = base64_encode($string);
 181           break;
 182
 183        case -1:  // decode
 184           $string = base64_decode($string);
 185           $string = str_rot17($string);
 186           break;
 187
 188        case 2:  // url
 189           $string = ewiki_script("", EWIKI_PAGE_EMAIL,
 190              array(EWIKI_UP_ENCEMAIL => ewiki_email_protect_encode($string, 1))
 191           );
 192           break;
 193
 194     }
 195
 196     return($string);
 197  }
 198
 199
 200
 201  /* this is a non-portable string encoding fucntion which ensures, that
 202   * encoded strings can only be decoded when requested by the same client
 203   * or user in the same dialup session (IP address must match)
 204   * feel free to exchange the random garbage string with anything else
 205   */
 206  function str_rot17($string) {
 207     if (!defined("STR_ROT17")) {
 208        $i = @$_SERVER["SERVER_SOFTWARE"] .
 209             @$_SERVER["HTTP_USER_AGENT"] .
 210             getremoteaddr();
 211        $i .= 'MxQXF^e-0OKC1\\s{\"?i!8PRoNnljHf65`Eb&A(\':g[D}_|S#~3hG>*9yvdI%<=.urcp/@$ZkqL,TWBw]a;72UzYJ)4mt+ V';
 212        $f = "";
 213        while (strlen($i)) {
 214           if (strpos($f, $i[0]) === false) {
 215              $f .= $i[0];
 216           }
 217           $i = substr($i, 1);
 218        }
 219        define("STR_ROT17", $f);
 220     }
 221     return(strtr($string, STR_ROT17, strrev(STR_ROT17)));
 222  }
 223
 224
 225
 226  /* this function emits some html with random (fake) email addresses
 227   * and spambot traps
 228   */
 229  function ewiki_email_protect_feedbots() {
 230
 231     global $ewiki_config;
 232
 233     $html = "";
 234     srand(time()/17-1000*microtime());
 235
 236     #-- spamtraps, and companys/orgs fighting for spammers rights
 237     $domains = explode(",",
 238        $ewiki_config["feedbots_tarpits"]. "," .$ewiki_config["feedbots_badguys"]
 239     );
 240     $traps = explode(" ", "blockme@relays.osirusoft.com simon.templar@rfc1149.net james.bond@ada-france.org anton.dvorak@ada.eu.org amandahannah44@hotmail.com usenet@fsck.me.uk meatcan2@beatrice.rutgers.edu heystupid@artsackett.com listme@dsbl.org bill@caradoc.org spamtrap@spambouncer.org spamtrap@woozle.org gfy@spamblocked.com listme@blacklist.woody.ch tarpit@lathi.net");
 241     $word_parts = explode(" ", "er an Ma ar on in el en le ll Ca ne ri De Mar Ha Br La Co St Ro ie Sh Mc re or Be li ra Al la al Da Ja il es te Le ha na Ka Ch is Ba nn ey nd He tt ch Ho Ke Ga Pa Wi Do st ma Mi Sa Me he to Car ro et ol ck ic Lo Mo ni ell Gr Bu Bo Ra ia de Jo El am An Re rt at Pe Li Je She Sch ea Sc it se Cha Har Sha Tr as ng rd rr Wa so Ki Ar Bra th Ta ta Wil be Cl ur ee ge ac ay au Fr ns son Ge us nt lo ti ss Cr os Hu We Cor Di ton Ri ke Ste Du No me Go Va Si man Bri ce Lu rn ad da ill Gi Th and rl ry Ros Sta sh To Se ett ley ou Ne ld Bar Ber lin ai Mac Dar Na ve no ul Fa ann Bur ow Ko rs ing Fe Ru Te Ni hi ki yn ly lle Ju Del Su mi Bl di lli Gu ine do Ve Gar ei Hi vi Gra Sto Ti Hol Vi ed ir oo em Bre Man ter Bi Van Bro Col id Fo Po Kr ard ber sa Con ick Cla Mu Bla Pr Ad So om io ho ris un her Wo Chr Her Kat Mil Tre Fra ig Mel od nc yl Ale Jer Mcc Lan lan si Dan Kar Mat Gre ue rg Fi Sp ari Str Mer San Cu rm Mon Win Bel Nor ut ah Pi gh av ci Don ot dr lt ger co Ben Lor Fl Jac Wal Ger tte mo Er ga ert tr ian Cro ff Ver Lin Gil Ken Che Jan nne arr va ers all Cal Cas Hil Han Dor Gl ag we Ed Em ran han Cle im arl wa ug ls ca Ric Par Kel Hen Nic len sk uc ina ste ab err Or Am Mor Fer Rob Luc ob Lar Bea ner pe lm ba ren lla der ec ric Ash Ant Fre rri Den Ham Mic Dem Is As Au che Leo nna rin enn Mal Jam Mad Mcg Wh Ab War Ol ler Whi Es All For ud ord Dea eb nk Woo tin ore art Dr tz Ly Pat Per Kri Min Bet rie Flo rne Joh nni Ce Ty Za ins eli ye rc eo ene ist ev Der Des Val And Can Shi ak Gal Cat Eli May Ea rk nge Fu Qu nie oc um ath oll bi ew Far ich Cra The Ran ani Dav Tra Sal Gri Mos Ang Ter mb Jay les Kir Tu hr oe Tri lia Fin mm aw dy cke itt ale wi eg est ier ze ru sc My lb har ka mer sti br ya Gen Hay a b c d e f g h i j k l m n o p q r s t u v w x y z");
 242     $word_delims = explode(" ", "0 1 2 3 3 3 4 5 5 6 7 8 9 - - - - - - - _ _ _ _ _ _ _ . . . . . . .");
 243     $n_dom = count($domains)-1;
 244     $n_trp = count($traps)-1;
 245     $n_wpt = count($word_parts)-1;
 246     $n_wdl = count($word_delims)-1;
 247
 248     for ($n = 1; $n < EWIKI_FAKE_EMAIL_LOOP; $n++) {
 249
 250        // email name part
 251        $m = "";
 252        while (strlen($m) < rand(3,17)) {
 253           $a = $word_parts[nat_rand($n_wpt)];
 254           if (!empty($m)) {
 255              $a = strtolower($a);
 256              if (rand(1,9)==5) {
 257                 $m .= $word_delims[rand(0,$n_wdl)];
 258              }
 259           }
 260           $m .= $a;
 261        }
 262
 263        // add domain
 264        switch ($dom = $domains[rand(0, $n_dom)]) {
 265
 266           case "123webhosting.org":
 267              $m = strtr(".", "-", getremoteaddr())."-".$_SERVER["SERVER_NAME"]."-".time();
 268              break;
 269
 270           default:
 271        }
 272        $m .= $dom;
 273
 274        $html .= '<a href="mailto:'.$m.'">'.$m.'</a>'.",\n";
 275     }
 276
 277     $html .= '<a href="mailto:'.$traps[rand(0, $n_trp)].'">'.$traps[rand(0, $n_trp)].'</a>';
 278
 279     if (($rl = 1 + @$_REQUEST[EWIKI_UP_REQUESTLV]) < EWIKI_FAKE_EMAIL_LOOP) {
 280        $html .= ",\n" . '<br /><a href="' .
 281              ewiki_script("", EWIKI_PAGE_EMAIL,
 282                array(
 283                   EWIKI_UP_ENCEMAIL=>ewiki_email_protect_encode($m, 1),
 284                   EWIKI_UP_REQUESTLV=>"$rl"
 285                )
 286              ) . '">' . ewiki_t("PROTE5") . '</a><br />' . "\n";
 287        ($rl > 1) && sleep(3);
 288     }
 289
 290     sleep(1);
 291     return($html);
 292  }
 293
 294
 295
 296  function nat_rand($max, $dr=0.5) {
 297     $x = $max+1;
 298     while ($x > $max) {
 299        $x = rand(0, $max * 1000)/100;
 300        $x = $x * $dr + $x * $x / 2 * (1-$dr) / $max;
 301     }
 302     return((int)$x);
 303  }
 304
 305
 306 ?>