function spambot_user_register_form_validate

Same name and namespace in other branches

1. 7.x-1.x spambot.module \spambot_user_register_form_validate() 1 comment

Validate callback for user_register form.

1 string reference to 'spambot_user_register_form_validate'

spambot_add_form_protection in ./spambot.module

Form builder function to add spambot validations.

File

./spambot.module, line 292

Code

function spambot_user_register_form_validate(&$form, &$form_state) {
    $config = \Drupal::config('spambot.settings');
    $validation_field_names = $form['#spambot_validation'];
    $values = $form_state->getValues();
    $form_errors = $form_state->getErrors();
    $email_threshold = $config->get('spambot_criteria_email');
    $username_threshold = $config->get('spambot_criteria_username');
    $ip_threshold = $config->get('spambot_criteria_ip');
    // Build request parameters according to the criteria to use.
    $request = [];
    if (!empty($values[$validation_field_names['mail']]) && $email_threshold > 0 && !spambot_check_whitelist('email', $config, $values[$validation_field_names['mail']])) {
        $request['email'] = $values[$validation_field_names['mail']];
    }
    if (!empty($values[$validation_field_names['name']]) && $username_threshold > 0 && !spambot_check_whitelist('username', $config, $values[$validation_field_names['name']])) {
        $request['username'] = $values[$validation_field_names['name']];
    }
    $ip = \Drupal::request()->getClientIp();
    if ($ip_threshold > 0 && $ip != '127.0.0.1' && $validation_field_names['ip'] && !spambot_check_whitelist('ip', $config, $ip)) {
        // Make sure we have a valid IPv4 address (API doesn't support IPv6 yet).
        if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_IPV6) === FALSE) {
            \Drupal::logger('spambot')->notice('Invalid IP address on registration: @ip. Spambot will not rely on it.', [
                '@ip' => $ip,
            ]);
        }
        else {
            $request['ip'] = $ip;
        }
    }
    // Only do a remote API request if there is anything to check.
    if ($request && !$form_errors) {
        $data = [];
        if (spambot_sfs_request($request, $data)) {
            $substitutions = [
                '@email' => $values[$validation_field_names['mail']],
                '%email' => $values[$validation_field_names['mail']],
                '@username' => $values[$validation_field_names['name']],
                '%username' => $values[$validation_field_names['name']],
                '@ip' => $ip,
                '%ip' => $ip,
            ];
            $reasons = [];
            if ($email_threshold > 0 && !empty($data['email']['appears']) && $data['email']['frequency'] >= $email_threshold) {
                $form_state->setErrorByName('mail', (string) new FormattableMarkup($config->get('spambot_blocked_message_email'), $substitutions));
                $reasons[] = t('email=@value', [
                    '@value' => $request['email'],
                ]);
            }
            if ($username_threshold > 0 && !empty($data['username']['appears']) && $data['username']['frequency'] >= $username_threshold) {
                $form_state->setErrorByName('name', (string) new FormattableMarkup($config->get('spambot_blocked_message_username'), $substitutions));
                $reasons[] = t('username=@value', [
                    '@value' => $request['username'],
                ]);
            }
            if ($ip_threshold > 0 && !empty($data['ip']['appears']) && $data['ip']['frequency'] >= $ip_threshold) {
                $form_state->setErrorByName('', (string) new FormattableMarkup($config->get('spambot_blocked_message_ip'), $substitutions));
                $reasons[] = t('ip=@value', [
                    '@value' => $request['ip'],
                ]);
            }
            if ($reasons) {
                if ($config->get('spambot_log_blocked_registration')) {
                    \Drupal::logger('spambot')->notice('Blocked registration: @reasons', [
                        '@reasons' => implode(',', $reasons),
                    ]);
                    $hook_args = [
                        'request' => $request,
                        'reasons' => $reasons,
                    ];
                    \Drupal::moduleHandler()->invokeAll('spambot_registration_blocked', [
                        $hook_args,
                    ]);
                }
                if ($delay = $config->get('spambot_blacklisted_delay')) {
                    sleep($delay);
                }
            }
        }
    }
}