You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
381 lines
13 KiB
381 lines
13 KiB
2 years ago
|
<?php
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Spam Cleaner
|
||
|
|
*
|
||
|
|
* Helps an admin to clean up spam in Moodle
|
||
|
|
*
|
||
|
|
* @author Dongsheng Cai
|
||
|
|
* @author Martin Dougiamas
|
||
|
|
* @author Amr Hourani
|
||
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU Public License
|
||
|
|
*/
|
||
|
|
|
||
|
|
// List of known spammy keywords, please add more here
|
||
|
|
|
||
|
|
/////////////////////////////////////////////////////////////////////////////////
|
||
|
|
|
||
|
|
require_once('../../../config.php');
|
||
|
|
require_once($CFG->libdir.'/adminlib.php');
|
||
|
|
|
||
|
|
|
||
|
|
// Configuration
|
||
|
|
|
||
|
|
$autokeywords = array(
|
||
|
|
"<img",
|
||
|
|
"fuck",
|
||
|
|
"casino",
|
||
|
|
"porn",
|
||
|
|
"xxx",
|
||
|
|
"cialis",
|
||
|
|
"viagra",
|
||
|
|
"poker",
|
||
|
|
"warcraft"
|
||
|
|
);
|
||
|
|
|
||
|
|
$keyword = optional_param('keyword', '', PARAM_RAW);
|
||
|
|
$autodetect = optional_param('autodetect', '', PARAM_RAW);
|
||
|
|
$del = optional_param('del', '', PARAM_RAW);
|
||
|
|
$delall = optional_param('delall', '', PARAM_RAW);
|
||
|
|
$ignore = optional_param('ignore', '', PARAM_RAW);
|
||
|
|
$reset = optional_param('reset', '', PARAM_RAW);
|
||
|
|
$id = optional_param('id', '', PARAM_INT);
|
||
|
|
|
||
|
|
admin_externalpage_setup('toolspamcleaner');
|
||
|
|
|
||
|
|
// Delete one user
|
||
|
|
if (!empty($del) && confirm_sesskey() && ($id != $USER->id)) {
|
||
|
|
if (isset($SESSION->users_result[$id])) {
|
||
|
|
$user = $SESSION->users_result[$id];
|
||
|
|
if (delete_user($user)) {
|
||
|
|
unset($SESSION->users_result[$id]);
|
||
|
|
echo json_encode(true);
|
||
|
|
} else {
|
||
|
|
echo json_encode(false);
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
echo json_encode(false);
|
||
|
|
}
|
||
|
|
exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
// Delete lots of users
|
||
|
|
if (!empty($delall) && confirm_sesskey()) {
|
||
|
|
if (!empty($SESSION->users_result)) {
|
||
|
|
foreach ($SESSION->users_result as $userid => $user) {
|
||
|
|
if ($userid != $USER->id) {
|
||
|
|
if (delete_user($user)) {
|
||
|
|
unset($SESSION->users_result[$userid]);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
echo json_encode(true);
|
||
|
|
exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!empty($ignore) && confirm_sesskey()) {
|
||
|
|
unset($SESSION->users_result[$id]);
|
||
|
|
echo json_encode(true);
|
||
|
|
exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
$PAGE->requires->js_init_call('M.tool_spamcleaner.init', array(me()), true);
|
||
|
|
$strings = Array('spaminvalidresult','spamdeleteallconfirm','spamcannotdelete','spamdeleteconfirm');
|
||
|
|
$PAGE->requires->strings_for_js($strings, 'tool_spamcleaner');
|
||
|
|
|
||
|
|
echo $OUTPUT->header();
|
||
|
|
|
||
|
|
// Print headers and things
|
||
|
|
echo $OUTPUT->box(get_string('spamcleanerintro', 'tool_spamcleaner'));
|
||
|
|
|
||
|
|
echo $OUTPUT->box_start(); // The forms section at the top
|
||
|
|
|
||
|
|
?>
|
||
|
|
|
||
|
|
<div class="mdl-align">
|
||
|
|
|
||
|
|
<form method="post" action="index.php" class="form-inline spamcleanerform">
|
||
|
|
<div>
|
||
|
|
<label class="accesshide" for="keyword_el"><?php print_string('spamkeyword', 'tool_spamcleaner') ?></label>
|
||
|
|
<input type="text" class="form-control" name="keyword" id="keyword_el" value="<?php p($keyword) ?>" />
|
||
|
|
<input type="hidden" name="sesskey" value="<?php echo sesskey();?>" />
|
||
|
|
<input type="submit" class="btn btn-primary" value="<?php echo get_string('spamsearch', 'tool_spamcleaner')?>" />
|
||
|
|
</div>
|
||
|
|
</form>
|
||
|
|
<p><?php echo get_string('spameg', 'tool_spamcleaner');?></p>
|
||
|
|
|
||
|
|
<hr />
|
||
|
|
|
||
|
|
<form method="post" action="index.php">
|
||
|
|
<div>
|
||
|
|
<input type="submit" class="btn btn-primary" name="autodetect"
|
||
|
|
value="<?php echo get_string('spamauto', 'tool_spamcleaner');?>" />
|
||
|
|
</div>
|
||
|
|
</form>
|
||
|
|
|
||
|
|
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<?php
|
||
|
|
echo $OUTPUT->box_end();
|
||
|
|
|
||
|
|
echo '<div id="result" class="mdl-align">';
|
||
|
|
|
||
|
|
// Print list of resulting profiles
|
||
|
|
|
||
|
|
if (!empty($keyword)) { // Use the keyword(s) supplied by the user
|
||
|
|
$keywords = explode(',', $keyword);
|
||
|
|
foreach ($keywords as $key => $keyword) {
|
||
|
|
$keywords[$key] = trim($keyword);
|
||
|
|
}
|
||
|
|
search_spammers($keywords);
|
||
|
|
|
||
|
|
} else if (!empty($autodetect)) { // Use the inbuilt keyword list to detect users
|
||
|
|
search_spammers($autokeywords);
|
||
|
|
}
|
||
|
|
|
||
|
|
echo '</div>';
|
||
|
|
|
||
|
|
/////////////////////////////////////////////////////////////////////////////////
|
||
|
|
|
||
|
|
|
||
|
|
/// Functions
|
||
|
|
|
||
|
|
|
||
|
|
function search_spammers($keywords) {
|
||
|
|
|
||
|
|
global $CFG, $USER, $DB, $OUTPUT;
|
||
|
|
|
||
|
|
if (!is_array($keywords)) {
|
||
|
|
$keywords = array($keywords); // Make it into an array
|
||
|
|
}
|
||
|
|
|
||
|
|
$params = array('userid'=>$USER->id);
|
||
|
|
|
||
|
|
$keywordfull = array();
|
||
|
|
$i = 0;
|
||
|
|
foreach ($keywords as $keyword) {
|
||
|
|
$keywordfull[] = $DB->sql_like('description', ':descpat'.$i, false);
|
||
|
|
$params['descpat'.$i] = "%$keyword%";
|
||
|
|
$keywordfull2[] = $DB->sql_like('p.summary', ':sumpat'.$i, false);
|
||
|
|
$params['sumpat'.$i] = "%$keyword%";
|
||
|
|
$keywordfull3[] = $DB->sql_like('p.subject', ':subpat'.$i, false);
|
||
|
|
$params['subpat'.$i] = "%$keyword%";
|
||
|
|
$keywordfull4[] = $DB->sql_like('c.content', ':contpat'.$i, false);
|
||
|
|
$params['contpat'.$i] = "%$keyword%";
|
||
|
|
$keywordfull5[] = $DB->sql_like('m.fullmessage', ':msgpat'.$i, false);
|
||
|
|
$params['msgpat'.$i] = "%$keyword%";
|
||
|
|
$keywordfull6[] = $DB->sql_like('fp.message', ':forumpostpat'.$i, false);
|
||
|
|
$params['forumpostpat'.$i] = "%$keyword%";
|
||
|
|
$keywordfull7[] = $DB->sql_like('fp.subject', ':forumpostsubpat'.$i, false);
|
||
|
|
$params['forumpostsubpat'.$i] = "%$keyword%";
|
||
|
|
$i++;
|
||
|
|
}
|
||
|
|
$conditions = '( '.implode(' OR ', $keywordfull).' )';
|
||
|
|
$conditions2 = '( '.implode(' OR ', $keywordfull2).' )';
|
||
|
|
$conditions3 = '( '.implode(' OR ', $keywordfull3).' )';
|
||
|
|
$conditions4 = '( '.implode(' OR ', $keywordfull4).' )';
|
||
|
|
$conditions5 = '( '.implode(' OR ', $keywordfull5).' )';
|
||
|
|
$conditions6 = '( '.implode(' OR ', $keywordfull6).' )';
|
||
|
|
$conditions7 = '( '.implode(' OR ', $keywordfull7).' )';
|
||
|
|
|
||
|
|
$sql = "SELECT *
|
||
|
|
FROM {user}
|
||
|
|
WHERE deleted = 0
|
||
|
|
AND id <> :userid
|
||
|
|
AND $conditions"; // Exclude oneself
|
||
|
|
$sql2 = "SELECT u.*, p.summary
|
||
|
|
FROM {user} u, {post} p
|
||
|
|
WHERE $conditions2
|
||
|
|
AND u.deleted = 0
|
||
|
|
AND u.id=p.userid
|
||
|
|
AND u.id <> :userid";
|
||
|
|
$sql3 = "SELECT u.*, p.subject AS postsubject
|
||
|
|
FROM {user} u, {post} p
|
||
|
|
WHERE $conditions3
|
||
|
|
AND u.deleted = 0
|
||
|
|
AND u.id=p.userid
|
||
|
|
AND u.id <> :userid";
|
||
|
|
$sql4 = "SELECT u.*, c.content
|
||
|
|
FROM {user} u, {comments} c
|
||
|
|
WHERE $conditions4
|
||
|
|
AND u.deleted = 0
|
||
|
|
AND u.id=c.userid
|
||
|
|
AND u.id <> :userid";
|
||
|
|
$sql5 = "SELECT u.*, m.fullmessage
|
||
|
|
FROM {user} u, {message} m
|
||
|
|
WHERE $conditions5
|
||
|
|
AND u.deleted = 0
|
||
|
|
AND u.id=m.useridfrom
|
||
|
|
AND u.id <> :userid";
|
||
|
|
$sql6 = "SELECT u.*, fp.message
|
||
|
|
FROM {user} u, {forum_posts} fp
|
||
|
|
WHERE $conditions6
|
||
|
|
AND u.deleted = 0
|
||
|
|
AND u.id=fp.userid
|
||
|
|
AND u.id <> :userid";
|
||
|
|
$sql7 = "SELECT u.*, fp.subject
|
||
|
|
FROM {user} u, {forum_posts} fp
|
||
|
|
WHERE $conditions7
|
||
|
|
AND u.deleted = 0
|
||
|
|
AND u.id=fp.userid
|
||
|
|
AND u.id <> :userid";
|
||
|
|
|
||
|
|
$spamusers_desc = $DB->get_recordset_sql($sql, $params);
|
||
|
|
$spamusers_blog = $DB->get_recordset_sql($sql2, $params);
|
||
|
|
$spamusers_blogsub = $DB->get_recordset_sql($sql3, $params);
|
||
|
|
$spamusers_comment = $DB->get_recordset_sql($sql4, $params);
|
||
|
|
$spamusers_message = $DB->get_recordset_sql($sql5, $params);
|
||
|
|
$spamusers_forumpost = $DB->get_recordset_sql($sql6, $params);
|
||
|
|
$spamusers_forumpostsub = $DB->get_recordset_sql($sql7, $params);
|
||
|
|
|
||
|
|
$keywordlist = implode(', ', $keywords);
|
||
|
|
echo $OUTPUT->box(get_string('spamresult', 'tool_spamcleaner').s($keywordlist)).' ...';
|
||
|
|
|
||
|
|
$recordsets = [
|
||
|
|
$spamusers_desc,
|
||
|
|
$spamusers_blog,
|
||
|
|
$spamusers_blogsub,
|
||
|
|
$spamusers_comment,
|
||
|
|
$spamusers_message,
|
||
|
|
$spamusers_forumpost,
|
||
|
|
$spamusers_forumpostsub
|
||
|
|
];
|
||
|
|
print_user_list($recordsets, $keywords);
|
||
|
|
foreach ($recordsets as $rs) {
|
||
|
|
$rs->close();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
function print_user_list($users_rs, $keywords) {
|
||
|
|
global $CFG, $SESSION;
|
||
|
|
|
||
|
|
// reset session everytime this function is called
|
||
|
|
$SESSION->users_result = array();
|
||
|
|
$count = 0;
|
||
|
|
|
||
|
|
foreach ($users_rs as $rs){
|
||
|
|
foreach ($rs as $user) {
|
||
|
|
if (!$count) {
|
||
|
|
echo '<table class="table table-bordered" border="1" width="100%" id="data-grid"><tr><th> </th>
|
||
|
|
<th>'.get_string('user', 'admin').'</th><th>'.get_string('spamdesc', 'tool_spamcleaner').'</th>
|
||
|
|
<th>'.get_string('spamoperation', 'tool_spamcleaner').'</th></tr>';
|
||
|
|
}
|
||
|
|
$count++;
|
||
|
|
filter_user($user, $keywords, $count);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!$count) {
|
||
|
|
echo get_string('spamcannotfinduser', 'tool_spamcleaner');
|
||
|
|
|
||
|
|
} else {
|
||
|
|
echo '</table>';
|
||
|
|
echo '<div class="mld-align">
|
||
|
|
<button id="removeall_btn" class="btn btn-secondary">'.get_string('spamdeleteall', 'tool_spamcleaner').'</button>
|
||
|
|
</div>';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
function filter_user($user, $keywords, $count) {
|
||
|
|
global $CFG;
|
||
|
|
$image_search = false;
|
||
|
|
if (in_array('<img', $keywords)) {
|
||
|
|
$image_search = true;
|
||
|
|
}
|
||
|
|
if (isset($user->summary)) {
|
||
|
|
$user->description = '<h3>'.get_string('spamfromblog', 'tool_spamcleaner').'</h3>'.$user->summary;
|
||
|
|
unset($user->summary);
|
||
|
|
} else if (isset($user->postsubject)) {
|
||
|
|
$user->description = '<h3>'.get_string('spamfromblog', 'tool_spamcleaner').'</h3>'.$user->postsubject;
|
||
|
|
unset($user->postsubject);
|
||
|
|
} else if (isset($user->content)) {
|
||
|
|
$user->description = '<h3>'.get_string('spamfromcomments', 'tool_spamcleaner').'</h3>'.$user->content;
|
||
|
|
unset($user->content);
|
||
|
|
} else if (isset($user->fullmessage)) {
|
||
|
|
$user->description = '<h3>'.get_string('spamfrommessages', 'tool_spamcleaner').'</h3>'.$user->fullmessage;
|
||
|
|
unset($user->fullmessage);
|
||
|
|
} else if (isset($user->message)) {
|
||
|
|
$user->description = '<h3>'.get_string('spamfromforumpost', 'tool_spamcleaner').'</h3>'.$user->message;
|
||
|
|
unset($user->message);
|
||
|
|
} else if (isset($user->subject)) {
|
||
|
|
$user->description = '<h3>'.get_string('spamfromforumpost', 'tool_spamcleaner').'</h3>'.$user->subject;
|
||
|
|
unset($user->subject);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (preg_match('#<img.*src=[\"\']('.$CFG->wwwroot.')#', $user->description, $matches)
|
||
|
|
&& $image_search) {
|
||
|
|
$result = false;
|
||
|
|
foreach ($keywords as $keyword) {
|
||
|
|
if (preg_match('#'.$keyword.'#', $user->description)
|
||
|
|
&& ($keyword != '<img')) {
|
||
|
|
$result = true;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if ($result) {
|
||
|
|
echo print_user_entry($user, $keywords, $count);
|
||
|
|
} else {
|
||
|
|
unset($user);
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
echo print_user_entry($user, $keywords, $count);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
function print_user_entry($user, $keywords, $count) {
|
||
|
|
|
||
|
|
global $SESSION, $CFG;
|
||
|
|
|
||
|
|
$smalluserobject = new stdClass(); // All we need to delete them later
|
||
|
|
$smalluserobject->id = $user->id;
|
||
|
|
$smalluserobject->email = $user->email;
|
||
|
|
$smalluserobject->auth = $user->auth;
|
||
|
|
$smalluserobject->firstname = $user->firstname;
|
||
|
|
$smalluserobject->lastname = $user->lastname;
|
||
|
|
$smalluserobject->username = $user->username;
|
||
|
|
|
||
|
|
if (empty($SESSION->users_result[$user->id])) {
|
||
|
|
$SESSION->users_result[$user->id] = $smalluserobject;
|
||
|
|
$html = '<tr valign="top" id="row-'.$user->id.'" class="result-row">';
|
||
|
|
$html .= '<td width="10">'.$count.'</td>';
|
||
|
|
$html .= '<td width="30%" align="left"><a href="'.$CFG->wwwroot."/user/view.php?course=1&id=".$user->id.'" title="'.s($user->username).'">'.fullname($user).'</a>';
|
||
|
|
|
||
|
|
$html .= "<ul>";
|
||
|
|
$profile_set = array('city'=>true, 'country'=>true, 'email'=>true);
|
||
|
|
foreach ($profile_set as $key=>$value) {
|
||
|
|
if (isset($user->$key)){
|
||
|
|
$html .= '<li>'.$user->$key.'</li>';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
$html .= "</ul>";
|
||
|
|
$html .= '</td>';
|
||
|
|
|
||
|
|
foreach ($keywords as $keyword) {
|
||
|
|
$user->description = highlight($keyword, $user->description);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!isset($user->descriptionformat)) {
|
||
|
|
$user->descriptionformat = FORMAT_MOODLE;
|
||
|
|
}
|
||
|
|
|
||
|
|
$html .= '<td align="left">'.format_text($user->description, $user->descriptionformat, array('overflowdiv'=>true)).'</td>';
|
||
|
|
$html .= '<td width="100px" align="center">';
|
||
|
|
$html .= '<button class="btn btn-primary" onclick="M.tool_spamcleaner.del_user(this,'.$user->id.')">'.
|
||
|
|
get_string('deleteuser', 'admin').'</button><br />';
|
||
|
|
$html .= '<button class="btn btn-secondary" onclick="M.tool_spamcleaner.ignore_user(this,'.$user->id.')">'.
|
||
|
|
get_string('ignore', 'admin').'</button>';
|
||
|
|
$html .= '</td>';
|
||
|
|
$html .= '</tr>';
|
||
|
|
return $html;
|
||
|
|
} else {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
echo $OUTPUT->footer();
|