Skip to content

cleantalk_die_headers.ag #33

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
alexandergull merged 3 commits into from
Nov 20, 2025
Merged

cleantalk_die_headers.ag #33

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
c34100c
Ref. CleanTalkDie. Send headers of content type and 403 code.
alexandergull Nov 9, 2025
9f085b6
Ref. CleanTalkDie. AJAX flow detection improved.
alexandergull Nov 17, 2025
a8db617
Merge branch 'dev' into cleantalk_die_headers.ag
alexandergull Nov 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
118 changes: 105 additions & 13 deletions cleantalk.antispam/include.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,36 +83,128 @@ static public function apbct_sfw_send_logs($access_key = '') {
* Show message when spam is blocked
* @param string message
*/
private static function CleantalkDie($message){

static function CleantalkDie($message){
$default_message = 'Forbidden. Seems to be spam. Anti-Spam by CleanTalk';

if( isset( $_POST['feedback_type'] ) && $_POST['feedback_type'] == 'buyoneclick' ) {
if (!is_string($message) || empty($message)) {
$message = $default_message;
}

$result = Array( 'error' => true, 'msg' => 'js_kr_error_send' );
print json_encode( $result );
$output_string = $message;

// AJAX response
}elseif( isset( $_SERVER['HTTP_X_REQUESTED_WITH'] ) && strtolower( $_SERVER['HTTP_X_REQUESTED_WITH'] ) == 'xmlhttprequest'){
// CUSTOM BLOCK
if ( isset( $_POST['feedback_type'] ) && $_POST['feedback_type'] == 'buyoneclick' ) {
$output_string = json_encode(array( 'error' => true, 'msg' => 'js_kr_error_send' ));
static::CleantalkJSONDie($output_string);
}

die(json_encode(array(
// AJAX FLOW
if ( static::isAjaxFlow() ){
$output_string = json_encode(array(
'apbct' => array(
'blocked' => true,
'comment' => $message,
),
'error' => array(
'msg' => $message,
)
)));
));
static::CleantalkJSONDie($output_string);
}

}else{
// DIE WITH HTML TEMPLATE
$error_tpl = @file_get_contents( dirname( __FILE__ ) . "/error.html" );
if (false !== $error_tpl) {
if (stripos($error_tpl, '<meta charset=') === false) {
$error_tpl = str_replace('<head>', '<head><meta charset="UTF-8">', $error_tpl);
}
$output_string = str_replace('%ERROR_TEXT%', $message, $error_tpl);
static::CleantalkHTMLDie($output_string);
}

$error_tpl = file_get_contents( dirname( __FILE__ ) . "/error.html" );
print str_replace( '%ERROR_TEXT%', $message, $error_tpl );
// DIE WITH TEXT BY DEFAULT
static::CleantalkTextDie($output_string);
}

}
/**
* Check if is AJAX flow detected.
* @return bool
*/
private static function isAjaxFlow()
{
// AJAX FLOW - comprehensive detection
return (
// Traditional XMLHttpRequest
(
isset($_SERVER['HTTP_X_REQUESTED_WITH']) &&
strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest'
) ||
// Fetch API with JSON response expected
(
isset($_SERVER['HTTP_ACCEPT']) &&
strpos(strtolower($_SERVER['HTTP_ACCEPT']), 'application/json') !== false
) ||
// Other common AJAX patterns
(
isset($_SERVER['HTTP_ACCEPT']) &&
(
strpos(strtolower($_SERVER['HTTP_ACCEPT']), 'application/xml') !== false ||
strpos(strtolower($_SERVER['HTTP_ACCEPT']), 'text/xml') !== false
)
)
);
}

die();
/**
* Die with application/json header.
* @param string $response_string
*
* @return void
*/
private static function CleantalkJSONDie($response_string)
{
if (!headers_sent()) {
http_response_code(403);
header('Cache-Control: no-store, no-cache, must-revalidate, max-age=0');
header('Pragma: no-cache');
header('Content-Type: application/json; charset=UTF-8');
}
die($response_string);
}
/**
* Die with text/plain header.
* @param string $response_string
*
* @return void
*/
private static function CleantalkTextDie($response_string)
{
if (!headers_sent()) {
http_response_code(403);
header('Cache-Control: no-store, no-cache, must-revalidate, max-age=0');
header('Pragma: no-cache');
header('Content-Type: text/plain; charset=UTF-8');
}
die($response_string);
}
/**
* Die with text/html header.
* @param string $response_string
*
* @return void
*/
private static function CleantalkHTMLDie($response_string)
{
if (!headers_sent()) {
http_response_code(403);
header('Cache-Control: no-store, no-cache, must-revalidate, max-age=0');
header('Pragma: no-cache');
header('Content-Type: text/html; charset=UTF-8');
}
die($response_string);
}

private static function apbct_run_cron()
{
$cron = new Cron();
Expand Down
Loading