stop-spammers-classic/settings/ss_blocklist_settings.php

<?php

if ( !defined( 'ABSPATH' ) ) {
	status_header( 404 );
	exit;
}

if ( !current_user_can( 'manage_options' ) ) {
	die( 'Access Blocked' );
}

ss_fix_post_vars();
$now	 = gmdate( 'Y/m/d H:i:s', time() + ( get_option( 'gmt_offset' ) * 3600 ) );
$options = ss_get_options();
extract( $options );
$nonce   = '';

if ( array_key_exists( 'ss_stop_spammers_control', $_POST ) ) {
	$nonce = sanitize_text_field( wp_unslash( $_POST['ss_stop_spammers_control'] ) );
}

if ( !empty( $nonce ) && wp_verify_nonce( $nonce, 'ss_stopspam_update' ) ) {
	if ( array_key_exists( 'blist', $_POST ) ) {
		$raw_input = sanitize_textarea_field( wp_unslash( $_POST['blist'] ) );
		$blist = preg_split( '/\s+/', $raw_input, -1, PREG_SPLIT_NO_EMPTY );
		$blist = array_map( 'sanitize_text_field', $blist );
		$blist = array_filter( $blist );
		$options['blist'] = $blist;
	}
	if ( array_key_exists( 'spamwords', $_POST ) ) {
		$raw_input = sanitize_textarea_field( wp_unslash( $_POST['spamwords'] ) );
		$spamwords = preg_split( '/\r\n|\r|\n/', $raw_input, -1, PREG_SPLIT_NO_EMPTY );
		$spamwords = array_map( 'sanitize_text_field', $spamwords );
		$spamwords = array_filter( $spamwords );
		$options['spamwords'] = $spamwords;
	}
	if ( array_key_exists( 'blockurlshortners', $_POST ) ) {
		$raw_input = sanitize_textarea_field( wp_unslash( $_POST['blockurlshortners'] ) );
		if ( empty( $raw_input ) ) {
			$blockurlshortners = array();
		} else {
			$blockurlshortners = preg_split( '/\s+/', $raw_input, -1, PREG_SPLIT_NO_EMPTY );
			$blockurlshortners = array_map( 'sanitize_text_field', $blockurlshortners );
			$blockurlshortners = array_filter( $blockurlshortners );
		}
		$options['blockurlshortners'] = $blockurlshortners;
	}
	if ( array_key_exists( 'badTLDs', $_POST ) ) {
		$raw_input = sanitize_textarea_field( wp_unslash( $_POST['badTLDs'] ) );
		$badTLDs = preg_split( '/\s+/', $raw_input, -1, PREG_SPLIT_NO_EMPTY );
		$badTLDs = array_map( 'sanitize_text_field', $badTLDs );
		$badTLDs = array_filter( $badTLDs );
		$options['badTLDs'] = $badTLDs;
	}
	if ( array_key_exists( 'badagents', $_POST ) ) {
		$raw_input = sanitize_textarea_field( wp_unslash( $_POST['badagents'] ) );
		$badagents = preg_split( '/\r\n|\r|\n/', $raw_input, -1, PREG_SPLIT_NO_EMPTY );
		$badagents = array_map( 'sanitize_text_field', $badagents );
		$badagents = array_filter( $badagents );
		$options['badagents'] = $badagents;
	}
	// check box setting
	$optionlist = array(
		'chkspamwords',
		'chkbluserid',
		'chkagent',
		'chkipsync',
		'chkurls'
	);
	foreach ( $optionlist as $check ) {
		$v = 'N';
		if ( array_key_exists( $check, $_POST ) ) {
			$v = sanitize_text_field( wp_unslash( $_POST[$check] ) );
			if ( $v != 'Y' ) {
				$v = 'N';
			}
		}
		$options[$check] = $v;
	}
	ss_set_options( $options );
	extract( $options );
	$msg = '<div class="notice notice-success is-dismissible"><p>' . 'Options Updated' . '</p></div>';
}

$nonce = wp_create_nonce( 'ss_stopspam_update' );

?>

<div id="ss-plugin" class="wrap">
	<h1 class="ss_head"><img src="<?php echo esc_url( plugin_dir_url( dirname( __FILE__ ) ) . 'images/stop-spammers-icon.png' ); ?>" class="ss_icon">Block Lists</h1>
	<br>
	<br>
	<?php if ( !empty( $msg ) ) {
		echo wp_kses_post( $msg );
	} ?>
	<form method="post" action="">
		<input type="hidden" name="action" value="update">
		<input type="hidden" name="ss_stop_spammers_control" value="<?php echo esc_html( $nonce ); ?>">
		<div class="mainsection">Personalized Block List
			<sup class="ss_sup"><a href="https://github.com/webguyio/stop-spammers/wiki/Docs:-Block-Lists#personalized-block-list" target="_blank">?</a></sup>
		</div>
		<p>Add IP addresses or emails here that you want blocked.</p>
		<div class="checkbox switcher">
			<label id="ss_subhead" for="chkbluserid">
				<input class="ss_toggle" type="checkbox" id="chkbluserid" name="chkbluserid" value="Y" <?php if ( $chkbluserid == 'Y' ) { echo 'checked="checked"'; } ?>><span><small></small></span>
		  		<small><span style="font-size:16px!important">Enable Block by Username</span></small>
			</label>
		</div>
		<br>
		<textarea name="blist" cols="40" rows="8"><?php
			echo esc_textarea( implode( "\n", $blist ) );
		?></textarea>
		<br>
		<br>
		<div class="mainsection">Spam Words List
			<sup class="ss_sup"><a href="https://github.com/webguyio/stop-spammers/wiki/Docs:-Block-Lists#spam-words-list" target="_blank">?</a></sup>
		</div>
		<div class="checkbox switcher">
			<label id="ss_subhead" for="chkspamwords">
				<input class="ss_toggle" type="checkbox" id="chkspamwords" name="chkspamwords" value="Y" <?php if ( $chkspamwords == 'Y' ) { echo 'checked="checked"'; } ?>><span><small></small></span>
				<small><span style="font-size:16px!important">Check Spam Words</span></small>
			</label>
		</div>
		<br>
		<textarea name="spamwords" cols="40" rows="8"><?php
			echo esc_textarea( implode( "\n", $spamwords ) );
		?></textarea>
		<br>
		<div class="mainsection">URL Shortening Services List
			<sup class="ss_sup"><a href="https://github.com/webguyio/stop-spammers/wiki/Docs:-Block-Lists#check-url-shorteners" target="_blank">?</a></sup>
		</div>
		<div class="checkbox switcher">
			<label id="ss_subhead" for="chkurlshort">
				<input class="ss_toggle" type="checkbox" id="chkurlshort" name="chkurlshort" value="Y" <?php if ( $chkurlshort == 'Y' ) { echo 'checked="checked"'; } ?>>
				<span><small></small></span>
				<small><span style="font-size:16px!important">Check URL Shorteners</span></small>
			</label>
		</div>
		<br>
		<textarea name="blockurlshortners" cols="40" rows="8"><?php
			foreach ( $blockurlshortners as $p ) {
				echo esc_html( $p ) . "\r\n";
			}
		?></textarea>
		<div class="mainsection">Check for URLs
			<sup class="ss_sup"><a href="https://github.com/webguyio/stop-spammers/wiki/Docs:-Block-Lists#check-for-urls-in-comments" target="_blank">?</a></sup>
		</div>
		<div class="checkbox switcher">
			<label id="ss_subhead" for="chkurls">
				<input class="ss_toggle" type="checkbox" id="chkurls" name="chkurls" value="Y" <?php if ( $chkurls == 'Y' ) { echo 'checked="checked"'; } ?>><span><small></small></span>
		  		<small><span style="font-size:16px!important">Check for any URL</span></small>
			</label>
		</div>
		<br>
		<div class="mainsection">Bad User Agents List
			<sup class="ss_sup"><a href="https://github.com/webguyio/stop-spammers/wiki/Docs:-Block-Lists#check-agents" target="_blank">?</a></sup>
		</div>
		<div class="checkbox switcher">
			<label id="ss_subhead" for="chkagent">
				<input class="ss_toggle" type="checkbox" id="chkagent" name="chkagent" value="Y" <?php if ( $chkagent == 'Y' ) { echo 'checked="checked"'; } ?>><span><small></small></span>
		  		<small><span style="font-size:16px!important">Check Agents</span></small>
			</label>
		</div>
		<br>
		<textarea name="badagents" cols="40" rows="8"><?php
			echo esc_textarea( implode( "\n", $badagents ) );
		?></textarea>
		<br>
		<br>
		<div class="mainsection">Blocked TLDs
			<sup class="ss_sup"><a href="https://github.com/webguyio/stop-spammers/wiki/Docs:-Block-Lists#blocked-tlds" target="_blank">?</a></sup>
		</div>
		<?php echo '<p>Enter the TLD name including the period (for example .xxx). A TLD is the last part of a domain like .com or .net.</p>'; ?>
		<textarea name="badTLDs" cols="40" rows="8"><?php
			echo esc_textarea( implode( "\n", $badTLDs ) );
		?></textarea>
		<br>
		<br>
		<p class="submit"><input class="button-primary" value="Save Changes" type="submit"></p>
	</form>
</div>