fortify-functions.php

<?php

if ( ! defined( 'ABSPATH' ) ) { // Avoid direct calls to this file and prevent full path disclosure
	exit;
}

function fortify_default_settings() {
	$settings = array(
		'save_spam_comments' => 0
	);
	return $settings;
}


function fortify_get_settings() {
	$fortify_settings = (array) get_option('fortify_settings');
	$default_settings = fortify_default_settings();
	$fortify_settings = array_merge($default_settings, $fortify_settings); // set empty options with default values
	return $fortify_settings;
}


function fortify_counter_stats() {
	$fortify_stats = get_option('fortify_stats', array());
	if (array_key_exists('blocked_total', $fortify_stats)){
		$fortify_stats['blocked_total']++;
	} else {
		$fortify_stats['blocked_total'] = 1;
	}
	update_option('fortify_stats', $fortify_stats);
}


function fortify_check_for_spam() {
	$spam_flag = false;

	$fortify_q = '';
	if (isset($_POST['fortify-q'])) {
		$fortify_q = sanitize_text_field($_POST['fortify-q']);
	}
	
	$fortify_e = '';
	if (isset($_POST['fortify-e-email-url-website'])) {
		$fortify_e = sanitize_text_field($_POST['fortify-e-email-url-website']);
	}
	
	if ( $fortify_q != date('Y') ) { // year-answer is wrong - it is spam
		$spam_flag = true;
	}

	if ( ! empty($fortify_e)) { // trap field is not empty - it is spam
		$spam_flag = true;
	}
	
	return $spam_flag;
}


function fortify_store_comment($commentdata) {
	global $wpdb;
	$wp_error = true;

	if ( isset( $commentdata['user_ID'] ) ) {
		$commentdata['user_id'] = $commentdata['user_ID'] = (int) $commentdata['user_ID'];
	}

	$prefiltered_user_id = ( isset( $commentdata['user_id'] ) ) ? (int) $commentdata['user_id'] : 0;

	$commentdata['comment_post_ID'] = (int) $commentdata['comment_post_ID'];
	if ( isset( $commentdata['user_ID'] ) && $prefiltered_user_id !== (int) $commentdata['user_ID'] ) {
		$commentdata['user_id'] = $commentdata['user_ID'] = (int) $commentdata['user_ID'];
	} elseif ( isset( $commentdata['user_id'] ) ) {
		$commentdata['user_id'] = (int) $commentdata['user_id'];
	}

	$commentdata['comment_parent'] = isset($commentdata['comment_parent']) ? absint($commentdata['comment_parent']) : 0;
	$parent_status = ( 0 < $commentdata['comment_parent'] ) ? wp_get_comment_status($commentdata['comment_parent']) : '';
	$commentdata['comment_parent'] = ( 'approved' == $parent_status || 'unapproved' == $parent_status ) ? $commentdata['comment_parent'] : 0;

	if ( ! isset( $commentdata['comment_author_IP'] ) ) {
		$commentdata['comment_author_IP'] = $_SERVER['REMOTE_ADDR'];
	}
	$commentdata['comment_author_IP'] = preg_replace( '/[^0-9a-fA-F:., ]/', '', $commentdata['comment_author_IP'] );

	if ( ! isset( $commentdata['comment_agent'] ) ) {
		$commentdata['comment_agent'] = isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT']: '';
	}
	$commentdata['comment_agent'] = substr( $commentdata['comment_agent'], 0, 254 );

	if ( empty( $commentdata['comment_date'] ) ) {
		$commentdata['comment_date'] = current_time('mysql');
	}

	if ( empty( $commentdata['comment_date_gmt'] ) ) {
		$commentdata['comment_date_gmt'] = current_time( 'mysql', 1 );
	}

	$commentdata = wp_filter_comment($commentdata);

	$commentdata['comment_approved'] = wp_allow_comment( $commentdata, $wp_error );
	if ( is_wp_error( $commentdata['comment_approved'] ) ) {
		return $commentdata['comment_approved'];
	}

	$comment_ID = wp_insert_comment($commentdata);
	if ( ! $comment_ID ) {
		$fields = array( 'comment_author', 'comment_author_email', 'comment_author_url', 'comment_content' );

		foreach ( $fields as $field ) {
			if ( isset( $commentdata[ $field ] ) ) {
				$commentdata[ $field ] = $wpdb->strip_invalid_text_for_column( $wpdb->comments, $field, $commentdata[ $field ] );
			}
		}

		$commentdata = wp_filter_comment( $commentdata );

		$commentdata['comment_approved'] = wp_allow_comment( $commentdata, $wp_error );
		if ( is_wp_error( $commentdata['comment_approved'] ) ) {
			return $commentdata['comment_approved'];
		}

		$comment_ID = wp_insert_comment( $commentdata );
		if ( ! $comment_ID ) {
			return false;
		}
	}
	
	wp_set_comment_status( $comment_ID, 'spam' );
}