404 Not Found

PATH: var / www / vhosts / sandbox.dos-group.com / httpdocs / mendrisio / wp-content / plugins / vfb-pro / public

<?php
/**
 * Handles all security checks
 *
 * reCAPTCHA, CSRF, etc
 *
 * @since      3.0
 */
class VFB_Pro_Security {
	/**
	 * __construct function.
	 *
	 * @access public
	 * @return void
	 */
	public function __construct() {
	}

/**
	 * csrf_check function.
	 *
	 * @access public
	 * @return void
	 */
	public function csrf_check() {
		$form_id = isset( $_POST['_vfb-form-id'] ) ? absint( $_POST['_vfb-form-id'] ) : 0;

if ( !isset( $_POST['_vfb-token-' . $form_id] ) )
			return true;

try {
			// Run CSRF check, on POST data, in exception mode, for 10 minutes, in one-time mode.
			VFB_Pro_NoCSRF::check( '_vfb-token-' . $form_id, $_POST, true, 60*10, false );
			return true;
		}
		catch ( Exception $e ) {
			// CSRF attack detected
			return $e->getMessage();
		}
	}

/**
	 * honeypot_check function.
	 *
	 * @access public
	 * @return void
	 */
	public function honeypot_check() {
		if ( !isset( $_POST['vfbp-spam'] ) )
			return true;

if ( isset( $_POST['vfbp-spam'] ) && !empty( $_POST['vfbp-spam'] ) )
			return __( 'Security check: you filled out a form field that was created to stop spam bots and should be left blank. If you think this is an error, please email the site owner.', 'vfb-pro' );

return true;
	}

/**
	 * recaptcha_check function.
	 *
	 * @access public
	 * @return void
	 */
	public function recaptcha_check() {
		$vfb_settings  = get_option( 'vfbp_settings' );
		$private_key   = $vfb_settings['recaptcha-private-key'];

if ( !isset( $_POST['_vfb_recaptcha_enabled'] ) )
			return true;

if ( 1 !== absint( $_POST['_vfb_recaptcha_enabled'] ) )
			return __( 'Security check: reCaptcha verification has been tampered with. If you think this is an error, please email the site owner.', 'vfb-pro' );

if ( !isset( $_POST['g-recaptcha-response'] ) )
			return __( 'Security check: reCaptcha verification expects a response and did not see one. Please submit the form again. If you think this is an error, please email the site owner.', 'vfb-pro' );

$url = add_query_arg(
			array(
				'remoteip' => $_SERVER['REMOTE_ADDR'],
				'response' => esc_html( $_POST['g-recaptcha-response'] ),
				'secret'   => $private_key
			),
			'https://www.google.com/recaptcha/api/siteverify'
		);

$errors = array(
			'missing-input-secret'   => __( 'The private key for reCAPTCHA is missing.', 'vfb-pro' ),
			'invalid-input-secret'   => __( 'The private key for reCAPTCHA is invalid or malformed.', 'vfb-pro' ),
			'missing-input-response' => __( 'The reCAPTCHA response is missing.', 'vfb-pro' ),
			'invalid-input-response' => __( 'The reCAPTCHA response is invalid or malformed.', 'vfb-pro' ),
		);

$response = wp_remote_get( esc_url_raw( $url ) );
		if ( !is_wp_error( $response ) ) {
			$resp = json_decode( $response['body'], true );

if ( $resp['success'] ) {
				return true;
			}
			elseif ( $resp['error-codes'] ) {
				$messages = array();

foreach ( $resp['error-codes'] as $error ) {
					if ( isset( $errors[ $error ] ) )
						$messages[] = $errors[ $error ];
				}

return implode( "\n", $messages );
			}
		}
	}

/**
	 * Make sure the User Agent string is not a SPAM bot.
	 *
	 * Returns true if NOT a SPAM bot
	 *
	 * @access public
	 * @return void
	 */
	public function bot_check() {
		$bots = array(
			'<', '>', '&lt;', '%0A', '%0D', '%27', '%3C', '%3E', '%00', 'href',
			'binlar', 'casper', 'cmsworldmap', 'comodo', 'diavol',
			'dotbot', 'feedfinder', 'flicky', 'ia_archiver', 'jakarta',
			'kmccrew', 'nutch', 'planetwork', 'purebot', 'pycurl',
			'skygrid', 'sucker', 'turnit', 'vikspider', 'zmeu',
		);

$user_agent = isset( $_SERVER['HTTP_USER_AGENT'] ) ? wp_kses_data( $_SERVER['HTTP_USER_AGENT'] ) : '';

foreach ( $bots as $bot ) {
			if ( stripos( $user_agent, $bot ) !== false )
				return __( 'Security check: looks like you are a SPAM bot. If you think this is an error, please email the site owner.' , 'vfb-pro' );
		}

return true;
	}
}

[-] class-upload.php [open]
[-] class-security.php [open]
[-] class-load-css-js.php [open]
[+] assets
[-] class-email.php [open]
[+] ..
[-] class-confirmation.php [open]
[-] class-format-field.php [open]
[-] class-form-display.php [open]
[-] class-templating.php [open]
[-] index.php [open]
[-] class-akismet.php [open]
[-] class-save-entry.php [open]