gocodebox · ideadude · Jun 5, 2024 · Jun 14, 2024 · Jun 14, 2024 · Jun 14, 2024
@@ -0,0 +1,3 @@
+significance: minor
+type: added
+entry: Option for automatically blocking checkout spam.
@@ -0,0 +1,3 @@
+significance: minor
+type: added
+entry: Support for Turnstile and Recaptcha v3 with checkout and registration forms.
@@ -80,21 +80,38 @@
 
 			$( '.llms-conditional-controller' ).each( function() {
 
-				var $controls = $( $( this ).attr( 'data-controls' ) ).closest( 'tr' );
-
 				$( this ).on( 'change', function() {
 
-					var val;
 
 					if ( 'checkbox' === $( this ).attr( 'type' ) ) {
-						val = $( this ).is( ':checked' );
-					}
+						var $controls = $( $( this ).attr( 'data-controls' ) ).closest( 'tr' );
@@ -86,3 +86,3 @@
 					if ( 'checkbox' === $( this ).attr( 'type' ) ) {
-						var $controls = $( $( this )
+						var $controls = $( '#' + $.escapeSelector($( this ).attr( 'data-controls' )) ).closest( 'tr' );
@@ -86,3 +86,3 @@
 					if ( 'checkbox' === $( this ).attr( 'type' ) ) {
-						var $controls = $( $( this )
+						var $controls = $( '#' + $.escapeSelector($( this ).attr( 'data-controls' )) ).closest( 'tr' );

 
-					if ( val ) {
-						$controls.show();
-					} else {
-						$controls.hide();
+						if ( $( this ).is( ':checked' ) ) {
+							$controls.show();
+						} else {
+							$controls.hide();
+						}
+
+						return;
+					}
+					if ( 'select' !== $( this ).prop( 'tagName' ).toLowerCase() ) {
+						return;
 					}
+					$( this ).find( 'option' ).each( function() {
+						var val = $( this ).val();
+						if ( ! val ) {
+							return true;
+						}
+
+						var $controls_for_option = $( $( this ).parent().attr( 'data-controls-' + $.escapeSelector( val ) ) ).closest( 'tr' );
+
+						if ( $( this ).is( ':selected' ) ) {
+							$controls_for_option.show();
+						} else {
+							$controls_for_option.hide();
+						}
+					} );
+
 
 				} ).trigger( 'change' );
 

@@ -60,6 +60,7 @@ public static function get_settings_tabs() {
 			$settings[] = include 'settings/class.llms.settings.general.php';
 			$settings[] = include 'settings/class.llms.settings.courses.php';
 			$settings[] = include 'settings/class.llms.settings.memberships.php';
+			$settings[] = include 'settings/class.llms.settings.security.php';
 			$settings[] = include 'settings/class.llms.settings.accounts.php';
 			$settings[] = include 'settings/class.llms.settings.checkout.php';
 			$settings[] = include 'settings/class.llms.settings.engagements.php';
@@ -709,12 +710,13 @@ class="<?php echo esc_attr( $field['class'] ); ?>"
 
 				?>
 				<tr valign="top" class="single_select_page">
-					<th><?php echo esc_html( $field['title'] ); ?> <?php echo $tooltip; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Escaped in set_field_descriptions.?></th>
+					<th><?php echo esc_html( $field['title'] ); ?> <?php echo $tooltip; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Escaped in set_field_descriptions. ?></th>
 					<td class="forminp">
-						<?php 
+						<?php
 						// PHPCS ignore reason: This is a dropdown and the output is escaped in wp_dropdown_pages.
 						// phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
-						echo str_replace( ' id=', " data-placeholder='" . esc_html__( 'Select a page&hellip;', 'lifterlms' ) . "' style='" . esc_attr( $field['css'] ) . "' class='" . esc_attr( $field['class'] ) . "' id=", wp_dropdown_pages( $args ) ); ?>
+						echo str_replace( ' id=', " data-placeholder='" . esc_html__( 'Select a page&hellip;', 'lifterlms' ) . "' style='" . esc_attr( $field['css'] ) . "' class='" . esc_attr( $field['class'] ) . "' id=", wp_dropdown_pages( $args ) );
+						?>
 						<?php echo wp_kses_post( $description ); ?>
 					</td>
 				</tr>

@@ -0,0 +1,150 @@
+<?php
+/**
+ * Admin Settings Page, Security Tab
+ *
+ * @package LifterLMS/Admin/Settings/Classes
+ *
+ * @since 1.0.0
+ * @version 7.5.0
+ */
+
+defined( 'ABSPATH' ) || exit;
+
+/**
+ * Admin Settings Page, Security Tab class
+ *
+ * @since [version]
+ */
+class LLMS_Settings_Security extends LLMS_Settings_Page {
+
+	/**
+	 * Settings identifier
+	 *
+	 * @var string
+	 */
+	public $id = 'security';
+
+	/**
+	 * Get settings array
+	 *
+	 * @since [version]
+	 *
+	 * @return array
+	 */
+	public function get_settings() {
+		$account_settings = array(
+			array(
+				'class' => 'top',
+				'id'    => 'course_account_options',
+				'type'  => 'sectionstart',
+			),
+			array(
+				'title' => __( 'Website Security & Spam Prevention', 'lifterlms' ),
+				'type'  => 'title',
+				'id'    => 'security_and_spam_options_title',
+			),
+			array(
+				'autoload'          => false,
+				'default'           => '',
+				'id'                => 'lifterlms_captcha',
+				'desc'              => __( 'Choose a captcha service to require at checkout.', 'lifterlms' ),
+				'title'             => __( 'Captcha', 'lifterlms' ),
+				'type'              => 'select',
+				'options'           => array(
+					''          => __( 'None', 'lifterlms' ),
+					'recaptcha' => __( 'reCAPTCHA', 'lifterlms' ),
+					'turnstile' => __( 'Turnstile', 'lifterlms' ),
+				),
+				'class'             => 'llms-conditional-controller',
+				'custom_attributes' => array(
+					'data-controls-recaptcha' => '#lifterlms_recaptcha_site_key,#lifterlms_recaptcha_secret_key',
+					'data-controls-turnstile' => '#lifterlms_turnstile_site_key,#lifterlms_turnstile_secret_key',
+				),
+			),
+			array(
+				'autoload'          => false,
+				'default'           => '',
+				'id'                => 'lifterlms_recaptcha_site_key',
+				'desc'              => 'Requires reCAPTCHA v3 keys. <a href="https://lifterlms.com/docs/recaptcha" target="_blank">Learn More</a>.',
+				'title'             => __( 'reCAPTCHA v3 Site Key', 'lifterlms' ),
+				'type'              => 'text',
+				'custom_attributes' => array(
+					'data-controller' => 'captcha',
+					'data-value-is'   => 'recaptcha',
+				),
+			),
+			array(
+				'autoload'          => false,
+				'default'           => '',
+				'id'                => 'lifterlms_recaptcha_secret_key',
+				'desc'              => '',
+				'title'             => __( 'reCAPTCHA v3 Secret Key', 'lifterlms' ),
+				'type'              => 'text',
+				'custom_attributes' => array(
+					'data-controller' => 'captcha',
+					'data-value-is'   => 'recaptcha',
+				),
+			),
+			array(
+				'autoload'          => false,
+				'default'           => '',
+				'id'                => 'lifterlms_turnstile_site_key',
+				'desc'              => 'Requires Cloudflare Turnstile keys. <a href="https://lifterlms.com/docs/turnstile" target="_blank">Learn More</a>.',
+				'title'             => __( 'Turnstile Site Key', 'lifterlms' ),
+				'type'              => 'text',
+				'custom_attributes' => array(
+					'data-controller' => 'captcha',
+					'data-value-is'   => 'turnstile',
+				),
+			),
+			array(
+				'autoload'          => false,
+				'default'           => '',
+				'id'                => 'lifterlms_turnstile_secret_key',
+				'desc'              => '',
+				'title'             => __( 'Turnstile Secret Key', 'lifterlms' ),
+				'type'              => 'text',
+				'custom_attributes' => array(
+					'data-controller' => 'captcha',
+					'data-value-is'   => 'turnstile',
+				),
+			),
+			array(
+				'autoload' => false,
+				'default'  => 'no',
+				'id'       => 'lifterlms_spam_protection',
+				'desc'     => __( 'Block IPs from checkout if there are more than 10 failures within 15 minutes.', 'lifterlms' ),
+				'title'    => __( 'Spam Protection', 'lifterlms' ),
+				'type'     => 'checkbox',
+			),
+			array(
+				'id'   => 'security_and_spam_options_end',
+				'type' => 'sectionend',
+			),
+		);
+
+		/**
+		 * Filters the account settings.
+		 *
+		 * The dynamic portion of this filter `{$this->id}` refers to the unique ID for the settings page.
+		 *
+		 * @since [version]
+		 *
+		 * @param array $account_settings The account page settings.
+		 */
+		return apply_filters( "lifterlms_{$this->id}_settings", $account_settings );
+	}
+
+	/**
+	 * Retrieve the page label.
+	 *
+	 * @since [version]
+	 *
+	 * @return string
+	 */
+	protected function set_label() {
+		return __( 'Security', 'lifterlms' );
+	}
+}
+
+return new LLMS_Settings_Security();
@@ -303,6 +303,12 @@ public function includes() {
 		// Privacy components.
 		require_once LLMS_PLUGIN_DIR . 'includes/privacy/class-llms-privacy.php';
 
+		// Spam stuff.
+		require_once LLMS_PLUGIN_DIR . 'includes/llms.spam.functions.php';
+		require_once LLMS_PLUGIN_DIR . 'includes/spam/class-llms-captcha.php';
+		require_once LLMS_PLUGIN_DIR . 'includes/spam/class-llms-turnstile.php';
+		require_once LLMS_PLUGIN_DIR . 'includes/spam/class-llms-recaptcha.php';
+
 		// Theme support.
 		require_once LLMS_PLUGIN_DIR . 'includes/theme-support/class-llms-theme-support.php';