Better to burn out than rust out.
-Neil Young
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 | // log all requests to register on our blog function ttc_add_to_log( $user, $error) { global $wpdb; $registration_log_table_name = $wpdb->prefix . "ttc_user_registration_log"; $request_time = $_SERVER['REQUEST_TIME']; $http_accept = $_SERVER['HTTP_ACCEPT']; $http_user_agent = $_SERVER['HTTP_USER_AGENT']; $http_remote_addr = $_SERVER['REMOTE_ADDR']; if($wpdb->get_var("show tables like '$registration_log_table_name'") != $registration_log_table_name) {ttc_wp_user_registration_install(); } // wtf? accept statements coming in at over 255 chars? Prevent sql errors and any funny business // by shortening anything from user to 200 chars if over 255 if ( strlen($email) > 200 ){ $email = substr ($email, 0, 200 ); } if ( strlen($http_accept ) > 200 ) { $http_accept = substr ( $http_accept, 0, 200 ); } if ( strlen($http_user_agent ) > 200 ) { $http_user_agent = substr ( $http_user_agent, 0, 200 ); } $sql = "INSERT INTO " . $registration_log_table_name . "( ip,email,problem,accept,agent,day ) VALUES ( '$http_remote_addr','$user','$error','$http_accept','$http_user_agent',NOW() )"; $result = $wpdb->query( $sql ); } // add an email to our email blacklist if we decide it is an bot function ttc_add_to_blacklist( $email ) { global $wpdb; $blacklist_table_name = $wpdb->prefix . "ttc_user_registration_blacklist"; if($wpdb->get_var("show tables like '$blacklist_table_name'") != $blacklist_table_name) { ttc_wp_user_registration_install(); } if ( strlen($email) > 200 ){ $email = substr ($email, 0, 200 ); } $sql = "INSERT INTO " . $blacklist_table_name . "( blacklisted ) VALUES ( '$email' )"; $result = $wpdb->query( $sql ); } // add an ip to our ip blacklist if we decide it is a bot function ttc_add_to_ip_blacklist( $ip ) { global $wpdb; $ip_table_name = $wpdb->prefix . "ttc_ip_blacklist"; if($wpdb->get_var("show tables like '$ip_table_name'") != $ip_table_name) { ttc_wp_user_registration_install(); } $sql = "INSERT INTO " . $ip_table_name . "( ip ) VALUES ( '$ip' )"; $result = $wpdb->query( $sql ); } |
If you enjoyed this post,make sure you subscribe to my RSS feed!



[...] This post was mentioned on Twitter by Ryan Dewhurst,Spot The Vuln. Spot The Vuln said:New Post:Burnout http://spotthevuln.com/2010/08/burnout/ [...]
[...] Burnout [...]