beta

cleantalk.php

@@ -4,7 +4,7 @@
   Plugin Name: Anti-Spam by CleanTalk
   Plugin URI: https://cleantalk.org
   Description: Max power, all-in-one, no Captcha, premium anti-spam plugin. No comment spam, no registration spam, no contact spam, protects any WordPress forms.
-  Version: 6.88
+  Version: 6.89
   Author: CleanTalk - Anti-Spam Protection <welcome@cleantalk.org>
   Author URI: https://cleantalk.org
   Text Domain: cleantalk-spam-protect
@@ -29,6 +29,7 @@
 use Cleantalk\ApbctWP\Deactivator;
 use Cleantalk\ApbctWP\Firewall\AntiCrawler;
 use Cleantalk\ApbctWP\Firewall\AntiFlood;
+use Cleantalk\ApbctWP\Firewall\FirewallBypass;
 use Cleantalk\ApbctWP\Firewall\SFW;
 use Cleantalk\ApbctWP\Firewall\SFWUpdateHelper;
 use Cleantalk\ApbctWP\Helper;
@@ -898,7 +899,7 @@ function apbct_sfw__check()
         }
     }
 
-    // Skip the check
+    // Skip the check (legacy way, remove in future)
     if ( ! empty(Get::get('access')) ) {
         $spbc_settings = get_option('spbc_settings');
         $spbc_key      = ! empty($spbc_settings['spbc_key']) ? $spbc_settings['spbc_key'] : false;
@@ -938,6 +939,12 @@ function apbct_sfw__check()
         return;
     }
 
+    // Emergency bypass: consume the one-time link from the admin email, then check the granted bypass.
+    FirewallBypass::maybeSetUserToken();
+    if (FirewallBypass::bypassByUserToken()) {
+        return;
+    }
+
     $firewall = new Firewall(
         DB::getInstance()
     );

css/src/cleantalk-admin-settings-page.css

@@ -30,6 +30,7 @@ i.animate-spin {
     margin: 15px 0;
 }
 .apbct_settings-field_wrapper--sub{ margin-left: 30px !important; }
+.apbct_settings-field_wrapper--sub-sub{ margin-left: 60px !important; }
 
 .apbct_settings-field_title{  }
 .apbct_settings__label{

css/src/cleantalk-admin.css

@@ -105,6 +105,51 @@
 .apbct-details-spam-order-button {
 	color: gray;
 }
+
+/* WooCommerce orders list alike view of the spam orders table.
+   The order column has no width, so it takes all the space left. */
+.wp-list-table.wc_spam_orders .column-ct_order_date,
+.wp-list-table.wc_spam_orders .column-ct_status,
+.wp-list-table.wc_spam_orders .column-ct_total {
+	width: 15%;
+}
+
+.wp-list-table.wc_spam_orders td {
+	vertical-align: middle;
+}
+
+.wp-list-table.wc_spam_orders .apbct-order-view {
+	color: #2271b1;
+	text-decoration: none;
+}
+
+.wp-list-table.wc_spam_orders .apbct-order-view:hover {
+	color: #135e96;
+}
+
+.apbct-order-status {
+	display: inline-flex;
+	line-height: 2.5em;
+	color: #454545;
+	background: #e5e5e5;
+	border-radius: 4px;
+	border-bottom: 1px solid rgba(0, 0, 0, .05);
+	margin: -.25em 0;
+	cursor: inherit !important;
+	white-space: nowrap;
+	max-width: 100%;
+}
+
+.apbct-order-status > span {
+	margin: 0 1em;
+	overflow: hidden;
+	text-overflow: ellipsis;
+}
+
+.apbct-order-status--spam {
+	background: #eba3a3;
+	color: #570000;
+}
 .ct-modal-buttons {
 	display: flex;
 	align-items: center;

inc/cleantalk-admin.php

@@ -6,6 +6,7 @@
 use Cleantalk\ApbctWP\CleantalkSettingsTemplates;
 use Cleantalk\ApbctWP\ContactsEncoder\ContactsEncoder;
 use Cleantalk\ApbctWP\Escape;
+use Cleantalk\ApbctWP\UpdateChangelogNotice;
 use Cleantalk\ApbctWP\Variables\Get;
 use Cleantalk\ApbctWP\Variables\Post;
 use Cleantalk\ApbctWP\Variables\Server;
@@ -35,6 +36,7 @@
 add_action('comment_spam_to_unapproved', 'apbct_comment__remove_meta_approved', 10, 1);
 add_action('comment_trash_to_unapproved', 'apbct_comment__remove_meta_approved', 10, 1);
 
+UpdateChangelogNotice::register();
 /**
  * Crunch for Anti-Bot
  * Hooked by 'admin_head'
@@ -1194,11 +1196,17 @@ function apbct_admin__admin_bar__add_child_nodes($wp_admin_bar)
 
     // Add a child item to our parent item. Bulk checks.
     if ( ! is_network_admin() && apbct_is_plugin_active('woocommerce/woocommerce.php') ) {
+        // HPOS installations render the spam orders view inline on the wc-orders screen;
+        // legacy (posts table) installations get a separate fallback admin page instead.
+        $spam_orders_page = function_exists('wc_get_page_screen_id') && wc_get_page_screen_id('shop_order') !== 'shop_order'
+            ? 'wc-orders&status=wc-spamorder'
+            : 'apbct_wc_spam_orders';
+
         $wp_admin_bar->add_node(
             array(
                 'parent' => 'apbct__parent_node',
                 'id'     => 'ct_settings_bulk_orders',
-                'title'  => '<a href="admin.php?page=apbct_wc_spam_orders" title="Bulk spam orders removal tool.">'
+                'title'  => '<a href="admin.php?page=' . $spam_orders_page . '" title="Bulk spam orders removal tool.">'
                             . __('WooCommerce spam orders', 'cleantalk-spam-protect') . '</a>',
             )
         );

inc/cleantalk-ajax.php

@@ -118,6 +118,9 @@
 /* The Fluent Form have the direct integration */
 $_cleantalk_hooked_actions[] = 'fluentform_submit';
 
+/* WooCommerce Stripe UPE confirms the card on Add payment method. Direct integration. */
+$_cleantalk_hooked_actions[] = 'wc_stripe_create_and_confirm_setup_intent';
+
 /* Estimation Forms have the direct integration */
 if ( class_exists('LFB_Core') ) {
     $_cleantalk_hooked_actions[] = 'send_email';
@@ -556,6 +559,9 @@ function ct_ajax_hook($message_obj = null)
 
     $base_call_result = apbct_base_call($base_call_params, $reg_flag);
 
+    // Remove service fields from POST before any early return.
+    apbct_clear_post_service_data_after_base_call();
+
     if (!isset($base_call_result['ct_result'])) {
         return null;
     }

inc/cleantalk-integrations-by-hook.php

@@ -47,6 +47,11 @@
         'setting' => 'forms__contact_forms_test',
         'ajax'    => true
     ),
+    'Pagelayer'           => array(
+        'hook'    => 'pagelayer_contact_submit_start',
+        'setting' => 'forms__contact_forms_test',
+        'ajax'    => false
+    ),
     'EstimationForm'      => array('hook' => 'send_email', 'setting' => 'forms__contact_forms_test', 'ajax' => true),
     'LandingPageBuilder'  => array(
         'hook'    => 'ulpb_formBuilderEmail_ajax',

inc/cleantalk-pluggable.php

@@ -2128,6 +2128,15 @@ class_exists('Cleantalk\Antispam\Integrations\CleantalkInternalForms')
         return 'Nex Forms';
     }
 
+    // Pagelayer contact form has the direct integration.
+    // The form posts to admin-ajax.php?action=..., so the action arrives via GET.
+    if (
+        apbct_is_plugin_active('pagelayer/pagelayer.php') &&
+        Request::getString('action') === 'pagelayer_contact_submit'
+    ) {
+        return 'Pagelayer contact form - has the direct integration';
+    }
+
     return false;
 }
 
@@ -2168,7 +2177,7 @@ function apbct_settings__get_ajax_type()
     $localize = null;
 
     if ( is_string($frontend_body) ) {
-        preg_match_all('@const ctPublicFunctions.*{(.*)}@', $frontend_body, $matches);
+        preg_match_all('@var ctPublicFunctions.*{(.*)}@', $frontend_body, $matches);
         if ( isset($matches[1][0]) ) {
             $localize = json_decode('{' . $matches[1][0] . '}', true);
         }