1 | <?php
|
---|
2 | /**
|
---|
3 | * Handle Trackbacks and Pingbacks sent to WordPress
|
---|
4 | *
|
---|
5 | * @package WordPress
|
---|
6 | */
|
---|
7 |
|
---|
8 | if (empty($wp)) {
|
---|
9 | require_once('./wp-load.php');
|
---|
10 | wp('tb=1');
|
---|
11 | }
|
---|
12 |
|
---|
13 | /**
|
---|
14 | * trackback_response() - Respond with error or success XML message
|
---|
15 | *
|
---|
16 | * @param int|bool $error Whether there was an error or not
|
---|
17 | * @param string $error_message Error message if an error occurred
|
---|
18 | */
|
---|
19 | function trackback_response($error = 0, $error_message = '') {
|
---|
20 | header('Content-Type: text/xml; charset=' . get_option('blog_charset') );
|
---|
21 | if ($error) {
|
---|
22 | echo '<?xml version="1.0" encoding="utf-8"?'.">\n";
|
---|
23 | echo "<response>\n";
|
---|
24 | echo "<error>1</error>\n";
|
---|
25 | echo "<message>$error_message</message>\n";
|
---|
26 | echo "</response>";
|
---|
27 | die();
|
---|
28 | } else {
|
---|
29 | echo '<?xml version="1.0" encoding="utf-8"?'.">\n";
|
---|
30 | echo "<response>\n";
|
---|
31 | echo "<error>0</error>\n";
|
---|
32 | echo "</response>";
|
---|
33 | }
|
---|
34 | }
|
---|
35 |
|
---|
36 | // trackback is done by a POST
|
---|
37 | $request_array = 'HTTP_POST_VARS';
|
---|
38 |
|
---|
39 | if ( !$_GET['tb_id'] ) {
|
---|
40 | $tb_id = explode('/', $_SERVER['REQUEST_URI']);
|
---|
41 | $tb_id = intval( $tb_id[ count($tb_id) - 1 ] );
|
---|
42 | }
|
---|
43 |
|
---|
44 | $tb_url = $_POST['url'];
|
---|
45 | $charset = $_POST['charset'];
|
---|
46 |
|
---|
47 | // These three are stripslashed here so that they can be properly escaped after mb_convert_encoding()
|
---|
48 | $title = stripslashes($_POST['title']);
|
---|
49 | $excerpt = stripslashes($_POST['excerpt']);
|
---|
50 | $blog_name = stripslashes($_POST['blog_name']);
|
---|
51 |
|
---|
52 | if ($charset)
|
---|
53 | $charset = strtoupper( trim($charset) );
|
---|
54 | else
|
---|
55 | $charset = 'ASCII, UTF-8, ISO-8859-1, JIS, EUC-JP, SJIS';
|
---|
56 |
|
---|
57 | // No valid uses for UTF-7
|
---|
58 | if ( false !== strpos($charset, 'UTF-7') )
|
---|
59 | die;
|
---|
60 |
|
---|
61 | if ( function_exists('mb_convert_encoding') ) { // For international trackbacks
|
---|
62 | $title = mb_convert_encoding($title, get_option('blog_charset'), $charset);
|
---|
63 | $excerpt = mb_convert_encoding($excerpt, get_option('blog_charset'), $charset);
|
---|
64 | $blog_name = mb_convert_encoding($blog_name, get_option('blog_charset'), $charset);
|
---|
65 | }
|
---|
66 |
|
---|
67 | // Now that mb_convert_encoding() has been given a swing, we need to escape these three
|
---|
68 | $title = $wpdb->escape($title);
|
---|
69 | $excerpt = $wpdb->escape($excerpt);
|
---|
70 | $blog_name = $wpdb->escape($blog_name);
|
---|
71 |
|
---|
72 | if ( is_single() || is_page() )
|
---|
73 | $tb_id = $posts[0]->ID;
|
---|
74 |
|
---|
75 | if ( !intval( $tb_id ) )
|
---|
76 | trackback_response(1, 'I really need an ID for this to work.');
|
---|
77 |
|
---|
78 | if (empty($title) && empty($tb_url) && empty($blog_name)) {
|
---|
79 | // If it doesn't look like a trackback at all...
|
---|
80 | wp_redirect(get_permalink($tb_id));
|
---|
81 | exit;
|
---|
82 | }
|
---|
83 |
|
---|
84 | if ( !empty($tb_url) && !empty($title) ) {
|
---|
85 | header('Content-Type: text/xml; charset=' . get_option('blog_charset') );
|
---|
86 |
|
---|
87 | if ( !pings_open($tb_id) )
|
---|
88 | trackback_response(1, 'Sorry, trackbacks are closed for this item.');
|
---|
89 |
|
---|
90 | $title = wp_html_excerpt( $title, 250 ).'...';
|
---|
91 | $excerpt = wp_html_excerpt( $excerpt, 252 ).'...';
|
---|
92 |
|
---|
93 | $comment_post_ID = (int) $tb_id;
|
---|
94 | $comment_author = $blog_name;
|
---|
95 | $comment_author_email = '';
|
---|
96 | $comment_author_url = $tb_url;
|
---|
97 | $comment_content = "<strong>$title</strong>\n\n$excerpt";
|
---|
98 | $comment_type = 'trackback';
|
---|
99 |
|
---|
100 | $dupe = $wpdb->get_results( $wpdb->prepare("SELECT * FROM $wpdb->comments WHERE comment_post_ID = %d AND comment_author_url = %s", $comment_post_ID, $comment_author_url) );
|
---|
101 | if ( $dupe )
|
---|
102 | trackback_response(1, 'We already have a ping from that URL for this post.');
|
---|
103 |
|
---|
104 | $commentdata = compact('comment_post_ID', 'comment_author', 'comment_author_email', 'comment_author_url', 'comment_content', 'comment_type');
|
---|
105 |
|
---|
106 | wp_new_comment($commentdata);
|
---|
107 |
|
---|
108 | do_action('trackback_post', $wpdb->insert_id);
|
---|
109 | trackback_response(0);
|
---|
110 | }
|
---|
111 | ?>
|
---|