From a8445664e8453ac643f123b43823a6a9df83c421 Mon Sep 17 00:00:00 2001
From: Carson Fleming <cflems@cflems.net>
Date: Mon, 12 Dec 2022 05:58:56 -0800
Subject: Attempt to verify captcha result

---
 inc/functions.php | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

(limited to 'inc')

diff --git a/inc/functions.php b/inc/functions.php
index c381ab7..d3aa93e 100644
--- a/inc/functions.php
+++ b/inc/functions.php
@@ -104,4 +104,28 @@ function pwgen ($len) {
     $pass .= $alpha[mt_rand(0, $alen-1)];
   return $pass;
 }
+
+function recaptcha_verify ($response) {
+  global $b_config;
+
+  $endpoint = 'https://google.com/recaptcha/api/siteverify';
+  $data = json_encode(array(
+    'secret' => $b_config['recaptcha_api_secret'],
+    'response' => $response,
+  ));
+  $ctx = stream_context_create(array(
+    'http' => array(
+      'method' => 'POST',
+      'header' => 'Content-Type: application/json' . "\r\n"
+                . 'Content-Length: ' . strlen($data) . "\r\n",
+      'content' => $data
+    )
+  ));
+  $result = file_get_contents($endpoint, false, $ctx);
+  if (!$result) return false;
+  $result = json_decode($result);
+  if (!$result) return false;
+  return isset($result['success']) && isset($result['hostname']) &&
+         $result['success'] && $result['hostname'] == $_SERVER['HTTP_HOST'];
+}
 ?>
-- 
cgit v1.2.3