Ejemplo n.º 1
0
function print_loginlockdownAdminPage()
{
    global $wpdb;
    $table_name = $wpdb->prefix . "lockdowns";
    $loginlockdownAdminOptions = get_loginlockdownOptions();
    if (isset($_POST['update_loginlockdownSettings'])) {
        //wp_nonce check
        check_admin_referer('login-lockdown_update-options');
        if (isset($_POST['ll_max_login_retries'])) {
            $loginlockdownAdminOptions['max_login_retries'] = $_POST['ll_max_login_retries'];
        }
        if (isset($_POST['ll_retries_within'])) {
            $loginlockdownAdminOptions['retries_within'] = $_POST['ll_retries_within'];
        }
        if (isset($_POST['ll_lockout_length'])) {
            $loginlockdownAdminOptions['lockout_length'] = $_POST['ll_lockout_length'];
        }
        if (isset($_POST['ll_lockout_invalid_usernames'])) {
            $loginlockdownAdminOptions['lockout_invalid_usernames'] = $_POST['ll_lockout_invalid_usernames'];
        }
        if (isset($_POST['ll_mask_login_errors'])) {
            $loginlockdownAdminOptions['mask_login_errors'] = $_POST['ll_mask_login_errors'];
        }
        if (isset($_POST['ll_show_credit_link'])) {
            $loginlockdownAdminOptions['show_credit_link'] = $_POST['ll_show_credit_link'];
        }
        update_option("loginlockdownAdminOptions", $loginlockdownAdminOptions);
        ?>
<div class="updated"><p><strong><?php 
        _e("Settings Updated.", "loginlockdown");
        ?>
</strong></p></div>
		<?php 
    }
    if (isset($_POST['release_lockdowns'])) {
        //wp_nonce check
        check_admin_referer('login-lockdown_release-lockdowns');
        if (isset($_POST['releaseme'])) {
            $released = $_POST['releaseme'];
            foreach ($released as $release_id) {
                $releasequery = "UPDATE {$table_name} SET release_date = now() " . "WHERE lockdown_ID = '%d'";
                $releasequery = $wpdb->prepare($releasequery, $release_id);
                $results = $wpdb->query($releasequery);
            }
        }
        update_option("loginlockdownAdminOptions", $loginlockdownAdminOptions);
        ?>
<div class="updated"><p><strong><?php 
        _e("Lockdowns Released.", "loginlockdown");
        ?>
</strong></p></div>
		<?php 
    }
    $dalist = listLockedDown();
    ?>
<div class="wrap">
<form method="post" action="<?php 
    echo esc_attr($_SERVER["REQUEST_URI"]);
    ?>
">
<?php 
    if (function_exists('wp_nonce_field')) {
        wp_nonce_field('login-lockdown_update-options');
    }
    ?>
<h2><?php 
    _e('Login LockDown Options', 'loginlockdown');
    ?>
</h2>
<h3><?php 
    _e('Max Login Retries', 'loginlockdown');
    ?>
</h3>
<p>Number of failed login attempts within the "Retry Time Period Restriction" (defined below) needed to trigger a LockDown.</p>
<p><input type="text" name="ll_max_login_retries" size="8" value="<?php 
    echo esc_attr($loginlockdownAdminOptions['max_login_retries']);
    ?>
"></p>
<h3><?php 
    _e('Retry Time Period Restriction (minutes)', 'loginlockdown');
    ?>
</h3>
<p>Amount of time that determines the rate at which failed login attempts are allowed before a LockDown occurs.</p>
<p><input type="text" name="ll_retries_within" size="8" value="<?php 
    echo esc_attr($loginlockdownAdminOptions['retries_within']);
    ?>
"></p>
<h3><?php 
    _e('Lockout Length (minutes)', 'loginlockdown');
    ?>
</h3>
<p>How long a particular IP block will be locked out for once a LockDown has been triggered.</p>
<p><input type="text" name="ll_lockout_length" size="8" value="<?php 
    echo esc_attr($loginlockdownAdminOptions['lockout_length']);
    ?>
"></p>
<h3><?php 
    _e('Lockout Invalid Usernames?', 'loginlockdown');
    ?>
</h3>
<p>By default Login LockDown will not trigger if an attempt is made to log in using a username that does not exist. You can override this behavior here.</p>
<p><input type="radio" name="ll_lockout_invalid_usernames" value="yes" <?php 
    if ($loginlockdownAdminOptions['lockout_invalid_usernames'] == "yes") {
        echo "checked";
    }
    ?>
>&nbsp;Yes&nbsp;&nbsp;&nbsp;<input type="radio" name="ll_lockout_invalid_usernames" value="no" <?php 
    if ($loginlockdownAdminOptions['lockout_invalid_usernames'] == "no") {
        echo "checked";
    }
    ?>
>&nbsp;No</p>
<h3><?php 
    _e('Mask Login Errors?', 'loginlockdown');
    ?>
</h3>
<p>WordPress will normally display distinct messages to the user depending on whether they try and log in with an invalid username, or with a 
valid username but the incorrect password. Toggling this option will hide why the login failed.</p>
<p><input type="radio" name="ll_mask_login_errors" value="yes" <?php 
    if ($loginlockdownAdminOptions['mask_login_errors'] == "yes") {
        echo "checked";
    }
    ?>
>&nbsp;Yes&nbsp;&nbsp;&nbsp;<input type="radio" name="ll_mask_login_errors" value="no" <?php 
    if ($loginlockdownAdminOptions['mask_login_errors'] == "no") {
        echo "checked";
    }
    ?>
>&nbsp;No</p>
<h3><?php 
    _e('Show Credit Link?', 'loginlockdown');
    ?>
</h3>
<p>By default, Login LockDown will display the following message on the login form:<br />
<blockquote>Login form protected by <a href='http://www.bad-neighborhood.com/login-lockdown.html'>Login LockDown</a>.</blockquote>
This helps others know about the plugin so they can protect their blogs as well if they like. However, you can disable this message if you prefer.</p>
<input type="radio" name="ll_show_credit_link" value="yes" <?php 
    if ($loginlockdownAdminOptions['show_credit_link'] == "yes" || $loginlockdownAdminOptions['show_credit_link'] == "") {
        echo "checked";
    }
    ?>
>&nbsp;Yes, display the credit link.<br />
<input type="radio" name="ll_show_credit_link" value="shownofollow" <?php 
    if ($loginlockdownAdminOptions['show_credit_link'] == "shownofollow") {
        echo "checked";
    }
    ?>
>&nbsp;Display the credit link, but add "rel='nofollow'" (ie. do not pass any link juice).<br />
<input type="radio" name="ll_show_credit_link" value="no" <?php 
    if ($loginlockdownAdminOptions['show_credit_link'] == "no") {
        echo "checked";
    }
    ?>
>&nbsp;No, do not display the credit link.<br />
<div class="submit">
<input type="submit" class="button button-primary" name="update_loginlockdownSettings" value="<?php 
    _e('Update Settings', 'loginlockdown');
    ?>
" /></div>
</form>
<br />
<form method="post" action="<?php 
    echo esc_attr($_SERVER["REQUEST_URI"]);
    ?>
">
<?php 
    if (function_exists('wp_nonce_field')) {
        wp_nonce_field('login-lockdown_release-lockdowns');
    }
    ?>
<h3><?php 
    _e('Currently Locked Out', 'loginlockdown');
    ?>
</h3>
<?php 
    $num_lockedout = count($dalist);
    if (0 == $num_lockedout) {
        echo "<p>No IP blocks currently locked out.</p>";
    } else {
        foreach ($dalist as $key => $option) {
            ?>
<li><input type="checkbox" name="releaseme[]" value="<?php 
            echo esc_attr($option['lockdown_ID']);
            ?>
"> <?php 
            echo esc_attr($option['lockdown_IP']);
            ?>
 (<?php 
            echo esc_attr($option['minutes_left']);
            ?>
 minutes left)</li>
			<?php 
        }
    }
    ?>
<div class="submit">
<input type="submit" class="button button-primary" name="release_lockdowns" value="<?php 
    _e('Release Selected', 'loginlockdown');
    ?>
" /></div>
</form>
</div>
<?php 
}
Ejemplo n.º 2
0
function print_loginlockdownAdminPage()
{
    global $wpdb;
    $table_name = $wpdb->prefix . "lockdowns";
    $loginlockdownAdminOptions = get_loginlockdownOptions();
    if (isset($_POST['update_loginlockdownSettings'])) {
        //wp_nonce check
        check_admin_referer('login-lockdown_update-options');
        if (isset($_POST['ll_max_login_retries'])) {
            $loginlockdownAdminOptions['max_login_retries'] = $_POST['ll_max_login_retries'];
        }
        if (isset($_POST['ll_retries_within'])) {
            $loginlockdownAdminOptions['retries_within'] = $_POST['ll_retries_within'];
        }
        if (isset($_POST['ll_lockout_length'])) {
            $loginlockdownAdminOptions['lockout_length'] = $_POST['ll_lockout_length'];
        }
        if (isset($_POST['ll_lockout_invalid_usernames'])) {
            $loginlockdownAdminOptions['lockout_invalid_usernames'] = $_POST['ll_lockout_invalid_usernames'];
        }
        if (isset($_POST['ll_mask_login_errors'])) {
            $loginlockdownAdminOptions['mask_login_errors'] = $_POST['ll_mask_login_errors'];
        }
        update_option("loginlockdownAdminOptions", $loginlockdownAdminOptions);
        ?>
<div class="updated"><p><strong><?php 
        _e("Settings Updated.", "loginlockdown");
        ?>
</strong></p></div>
		<?php 
    }
    if (isset($_POST['release_lockdowns'])) {
        //wp_nonce check
        check_admin_referer('login-lockdown_release-lockdowns');
        if (isset($_POST['releaseme'])) {
            $released = $_POST['releaseme'];
            foreach ($released as $release_id) {
                $results = $wpdb->query("UPDATE {$table_name} SET release_date = now() " . "WHERE lockdown_ID = " . $wpdb->escape($release_id) . "");
            }
        }
        update_option("loginlockdownAdminOptions", $loginlockdownAdminOptions);
        ?>
<div class="updated"><p><strong><?php 
        _e("Lockdowns Released.", "loginlockdown");
        ?>
</strong></p></div>
		<?php 
    }
    $dalist = listLockedDown();
    ?>
<div class=wrap>
<form method="post" action="<?php 
    echo esc_attr($_SERVER["REQUEST_URI"]);
    ?>
">
<?php 
    if (function_exists('wp_nonce_field')) {
        wp_nonce_field('login-lockdown_update-options');
    }
    ?>
<h2><?php 
    _e('Login LockDown Options', 'loginlockdown');
    ?>
</h2>
<h3><?php 
    _e('Max Login Retries', 'loginlockdown');
    ?>
</h3>
<input type="text" name="ll_max_login_retries" size="8" value="<?php 
    echo esc_attr($loginlockdownAdminOptions['max_login_retries']);
    ?>
">
<h3><?php 
    _e('Retry Time Period Restriction (minutes)', 'loginlockdown');
    ?>
</h3>
<input type="text" name="ll_retries_within" size="8" value="<?php 
    echo esc_attr($loginlockdownAdminOptions['retries_within']);
    ?>
">
<h3><?php 
    _e('Lockout Length (minutes)', 'loginlockdown');
    ?>
</h3>
<input type="text" name="ll_lockout_length" size="8" value="<?php 
    echo esc_attr($loginlockdownAdminOptions['lockout_length']);
    ?>
">
<h3><?php 
    _e('Lockout Invalid Usernames?', 'loginlockdown');
    ?>
</h3>
<input type="radio" name="ll_lockout_invalid_usernames" value="yes" <?php 
    if ($loginlockdownAdminOptions['lockout_invalid_usernames'] == "yes") {
        echo "checked";
    }
    ?>
>&nbsp;Yes&nbsp;&nbsp;&nbsp;<input type="radio" name="ll_lockout_invalid_usernames" value="no" <?php 
    if ($loginlockdownAdminOptions['lockout_invalid_usernames'] == "no") {
        echo "checked";
    }
    ?>
>&nbsp;No
<h3><?php 
    _e('Mask Login Errors?', 'loginlockdown');
    ?>
</h3>
<input type="radio" name="ll_mask_login_errors" value="yes" <?php 
    if ($loginlockdownAdminOptions['mask_login_errors'] == "yes") {
        echo "checked";
    }
    ?>
>&nbsp;Yes&nbsp;&nbsp;&nbsp;<input type="radio" name="ll_mask_login_errors" value="no" <?php 
    if ($loginlockdownAdminOptions['mask_login_errors'] == "no") {
        echo "checked";
    }
    ?>
>&nbsp;No
<div class="submit">
<input type="submit" name="update_loginlockdownSettings" value="<?php 
    _e('Update Settings', 'loginlockdown');
    ?>
" /></div>
</form>
<br />
<form method="post" action="<?php 
    echo esc_attr($_SERVER["REQUEST_URI"]);
    ?>
">
<?php 
    if (function_exists('wp_nonce_field')) {
        wp_nonce_field('login-lockdown_release-lockdowns');
    }
    ?>
<h3><?php 
    _e('Currently Locked Out', 'loginlockdown');
    ?>
</h3>
<?php 
    $num_lockedout = count($dalist);
    if (0 == $num_lockedout) {
        echo "<p>No current IP blocks locked out.</p>";
    } else {
        foreach ($dalist as $key => $option) {
            ?>
<li><input type="checkbox" name="releaseme[]" value="<?php 
            echo esc_attr($option['lockdown_ID']);
            ?>
"> <?php 
            echo esc_attr($option['lockdown_IP']);
            ?>
 (<?php 
            echo esc_attr($option['minutes_left']);
            ?>
 minutes left)</li>
			<?php 
        }
    }
    ?>
<div class="submit">
<input type="submit" name="release_lockdowns" value="<?php 
    _e('Release Selected', 'loginlockdown');
    ?>
" /></div>
</form>
</div>
<?php 
}
function print_loginlockdownAdminPage()
{
    global $wpdb;
    $table_name = $wpdb->prefix . "lockdowns";
    $loginlockdownAdminOptions = get_loginlockdownOptions();
    if (isset($_POST['update_loginlockdownSettings'])) {
        if (isset($_POST['ll_max_login_retries'])) {
            $loginlockdownAdminOptions['max_login_retries'] = $_POST['ll_max_login_retries'];
        }
        if (isset($_POST['ll_retries_within'])) {
            $loginlockdownAdminOptions['retries_within'] = $_POST['ll_retries_within'];
        }
        if (isset($_POST['ll_lockout_length'])) {
            $loginlockdownAdminOptions['lockout_length'] = $_POST['ll_lockout_length'];
        }
        update_option("loginlockdownAdminOptions", $loginlockdownAdminOptions);
        ?>
<div class="updated"><p><strong><?php 
        _e("Settings Updated.", "loginlockdown");
        ?>
</strong></p></div>
		<?php 
    }
    if (isset($_POST['release_lockdowns'])) {
        if (isset($_POST['releaseme'])) {
            $released = $_POST['releaseme'];
            foreach ($released as $release_id) {
                $results = $wpdb->query("UPDATE {$table_name} SET release_date = now() " . "WHERE lockdown_ID = {$release_id}");
            }
        }
        update_option("loginlockdownAdminOptions", $loginlockdownAdminOptions);
        ?>
<div class="updated"><p><strong><?php 
        _e("Lockdowns Released.", "loginlockdown");
        ?>
</strong></p></div>
		<?php 
    }
    $dalist = listLockedDown();
    ?>
<div class=wrap>
<form method="post" action="<?php 
    echo $_SERVER["REQUEST_URI"];
    ?>
">
<h2><?php 
    _e('Login LockDown Options', 'loginlockdown');
    ?>
</h2>
<h3><?php 
    _e('Max Login Retries', 'loginlockdown');
    ?>
</h3>
<input name="ll_max_login_retries" size="8" value="<?php 
    echo $loginlockdownAdminOptions['max_login_retries'];
    ?>
">
<h3><?php 
    _e('Retry Time Period Restriction (minutes)', 'loginlockdown');
    ?>
</h3>
<input name="ll_retries_within" size="8" value="<?php 
    echo $loginlockdownAdminOptions['retries_within'];
    ?>
">
<h3><?php 
    _e('Lockout Length (minutes)', 'loginlockdown');
    ?>
</h3>
<input name="ll_lockout_length" size="8" value="<?php 
    echo $loginlockdownAdminOptions['lockout_length'];
    ?>
">
<div class="submit">
<input type="submit" name="update_loginlockdownSettings" value="<?php 
    _e('Update Settings', 'loginlockdown');
    ?>
" /></div>
</form>
<br />
<form method="post" action="<?php 
    echo $_SERVER["REQUEST_URI"];
    ?>
">
<h3><?php 
    _e('Currently Locked Out', 'loginlockdown');
    ?>
</h3>
<?php 
    $num_lockedout = count($dalist);
    if (0 == $num_lockedout) {
        echo "<p>No current IP blocks locked out.</p>";
    } else {
        foreach ($dalist as $key => $option) {
            ?>
<li><input type="checkbox" name="releaseme[]" value="<?php 
            echo $option['lockdown_ID'];
            ?>
"> <?php 
            echo $option['lockdown_IP'];
            ?>
 (<?php 
            echo $option['minutes_left'];
            ?>
 minutes left)</li>
			<?php 
        }
    }
    ?>
<div class="submit">
<input type="submit" name="release_lockdowns" value="<?php 
    _e('Release Selected', 'loginlockdown');
    ?>
" /></div>
</form>
</div>
<?php 
}