dnsbls_bypass.php

<?php
include 'inc/functions.php';

function outputError($errCode, $errString) {
  http_response_code($errCode);
  error ($errString);
  return 0;
}

function getRequestMethod($r) {
  $reqMethod = "NG";
  if ($r === 'GET'){
    $reqMethod = "GET";
  }
  if ($r === "POST"){
    $reqMethod = "POST";
  }
  return $reqMethod;
}

$requestMethod = getRequestMethod($_SERVER['REQUEST_METHOD']);

if ($requestMethod === "NG"){
  outputError (400, "Bad Request.");
}

if ($requestMethod === "GET"){
  $captcha = generate_captcha($config['captcha']['extra']);
  
  $html = "{$captcha['html']}<br/>
    <input class='captcha_text' name='captcha_text' size='25' maxlength='6' autocomplete='off' type='text' autocorrect='off' autocapitalize='off' spellcheck='false'>
    <input class='captcha_cookie' name='captcha_cookie' type='hidden' autocomplete='off' value='{$captcha['cookie']}'><br/>";

  $body = Element("8chan/dnsbls.html", array("config" => $config, "ayah_html" => $html));
  echo Element("page.html", array("config" => $config, "boardlist" => createBoardlist(), "body" => $body, "title" => _("Bypass DNSBL"), "subtitle" => _("Post even if blocked")));
}

if ($requestMethod === "POST"){
  $resp = file_get_contents($config['captcha']['provider_check'] . "?" . http_build_query([
    'mode' => 'check',
    'text' => $_POST['captcha_text'],
    'extra' => $config['captcha']['extra'],
    'cookie' => $_POST['captcha_cookie']
  ]));

  if ($resp === '1') {
    $tor = checkDNSBL($_SERVER['REMOTE_ADDR']); // This actually needs to use an IP address, but doesnt store it anywhere
    $identity = getIdentity();
    if (!$tor) {
      $query = prepare('INSERT INTO ``dnsbl_bypass`` VALUES(:ip, NOW(), 0) ON DUPLICATE KEY UPDATE `created`=NOW(),`uses`=0');
      $query->bindValue(':ip', $identity);
      $query->execute() or error(db_error($query));
    }
    $cookie = bin2hex(openssl_random_pseudo_bytes(16));
    $query = prepare('INSERT INTO ``tor_cookies`` VALUES(:cookie, NOW(), 0)');
    $query->bindValue(':cookie', $cookie);
    $query->execute() or error(db_error($query));
    setcookie("tor", $cookie, time()+60*60*3);
	
    echo Element("page.html", array("config" => $config, "boardlist" => createBoardlist(), "body" => '', "title" => _("Success!"), "subtitle" => _("You may now go back and make your post.")));
  } else {
    $errorText = _('You failed the CAPTCHA') . _('. <a href="/dnsbls_bypass.php">Try again.</a> If it\'s not working, email admin@9san.ch for support.');
    outputError (403, $errorText);
  }
}