<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>[11620] sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login: Login: Add an admin UI to manage blocked words/phrases/email domains for registration spam.</title>
</head>
<body>

<style type="text/css"><!--
#msg dl.meta { border: 1px #006 solid; background: #369; padding: 6px; color: #fff; }
#msg dl.meta dt { float: left; width: 6em; font-weight: bold; }
#msg dt:after { content:':';}
#msg dl, #msg dt, #msg ul, #msg li, #header, #footer, #logmsg { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt;  }
#msg dl a { font-weight: bold}
#msg dl a:link    { color:#fc3; }
#msg dl a:active  { color:#ff0; }
#msg dl a:visited { color:#cc6; }
h3 { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; font-weight: bold; }
#msg pre { white-space: pre-line; overflow: auto; background: #ffc; border: 1px #fa0 solid; padding: 6px; }
#logmsg { background: #ffc; border: 1px #fa0 solid; padding: 1em 1em 0 1em; }
#logmsg p, #logmsg pre, #logmsg blockquote { margin: 0 0 1em 0; }
#logmsg p, #logmsg li, #logmsg dt, #logmsg dd { line-height: 14pt; }
#logmsg h1, #logmsg h2, #logmsg h3, #logmsg h4, #logmsg h5, #logmsg h6 { margin: .5em 0; }
#logmsg h1:first-child, #logmsg h2:first-child, #logmsg h3:first-child, #logmsg h4:first-child, #logmsg h5:first-child, #logmsg h6:first-child { margin-top: 0; }
#logmsg ul, #logmsg ol { padding: 0; list-style-position: inside; margin: 0 0 0 1em; }
#logmsg ul { text-indent: -1em; padding-left: 1em; }#logmsg ol { text-indent: -1.5em; padding-left: 1.5em; }
#logmsg > ul, #logmsg > ol { margin: 0 0 1em 0; }
#logmsg pre { background: #eee; padding: 1em; }
#logmsg blockquote { border: 1px solid #fa0; border-left-width: 10px; padding: 1em 1em 0 1em; background: white;}
#logmsg dl { margin: 0; }
#logmsg dt { font-weight: bold; }
#logmsg dd { margin: 0; padding: 0 0 0.5em 0; }
#logmsg dd:before { content:'\00bb';}
#logmsg table { border-spacing: 0px; border-collapse: collapse; border-top: 4px solid #fa0; border-bottom: 1px solid #fa0; background: #fff; }
#logmsg table th { text-align: left; font-weight: normal; padding: 0.2em 0.5em; border-top: 1px dotted #fa0; }
#logmsg table td { text-align: right; border-top: 1px dotted #fa0; padding: 0.2em 0.5em; }
#logmsg table thead th { text-align: center; border-bottom: 1px solid #fa0; }
#logmsg table th.Corner { text-align: left; }
#logmsg hr { border: none 0; border-top: 2px dashed #fa0; height: 1px; }
#header, #footer { color: #fff; background: #636; border: 1px #300 solid; padding: 6px; }
#patch { width: 100%; }
#patch h4 {font-family: verdana,arial,helvetica,sans-serif;font-size:10pt;padding:8px;background:#369;color:#fff;margin:0;}
#patch .propset h4, #patch .binary h4 {margin:0;}
#patch pre {padding:0;line-height:1.2em;margin:0;}
#patch .diff {width:100%;background:#eee;padding: 0 0 10px 0;overflow:auto;}
#patch .propset .diff, #patch .binary .diff  {padding:10px 0;}
#patch span {display:block;padding:0 10px;}
#patch .modfile, #patch .addfile, #patch .delfile, #patch .propset, #patch .binary, #patch .copfile {border:1px solid #ccc;margin:10px 0;}
#patch ins {background:#dfd;text-decoration:none;display:block;padding:0 10px;}
#patch del {background:#fdd;text-decoration:none;display:block;padding:0 10px;}
#patch .lines, .info {color:#888;background:#fff;}
--></style>
<div id="msg">
<dl class="meta" style="font-size: 105%">
<dt style="float: left; width: 6em; font-weight: bold">Revision</dt> <dd><a style="font-weight: bold" href="http://meta.trac.wordpress.org/changeset/11620">11620</a><script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","description":"Review this Commit","action":{"@type":"ViewAction","url":"http://meta.trac.wordpress.org/changeset/11620","name":"Review Commit"}}</script></dd>
<dt style="float: left; width: 6em; font-weight: bold">Author</dt> <dd>dd32</dd>
<dt style="float: left; width: 6em; font-weight: bold">Date</dt> <dd>2022-03-02 06:07:14 +0000 (Wed, 02 Mar 2022)</dd>
</dl>

<pre style='padding-left: 1em; margin: 2em 0; border-left: 2px solid #ccc; line-height: 1.25; font-size: 105%; font-family: sans-serif'>Login: Add an admin UI to manage blocked words/phrases/email domains for registration spam.

This also allows whitelisting/blocking individual IP addresses.</pre>

<h3>Modified Paths</h3>
<ul>
<li><a href="#sitestrunkwordpressorgpublic_htmlwpcontentthemespubwporgloginadminuiphp">sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/admin/ui.php</a></li>
<li><a href="#sitestrunkwordpressorgpublic_htmlwpcontentthemespubwporgloginfunctionsregistrationphp">sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php</a></li>
<li><a href="#sitestrunkwordpressorgpublic_htmlwpcontentthemespubwporgloginpendingcreatephp">sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/pending-create.php</a></li>
</ul>

</div>
<div id="patch">
<h3>Diff</h3>
<a id="sitestrunkwordpressorgpublic_htmlwpcontentthemespubwporgloginadminuiphp"></a>
<div class="modfile"><h4 style="background-color: #eee; color: inherit; margin: 1em 0; padding: 1.3em; font-size: 115%">Modified: sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/admin/ui.php</h4>
<pre class="diff"><span>
<span class="info" style="display: block; padding: 0 10px; color: #888">--- sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/admin/ui.php      2022-03-01 23:56:48 UTC (rev 11619)
+++ sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/admin/ui.php        2022-03-02 06:07:14 UTC (rev 11620)
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -12,6 +12,17 @@
</span><span class="cx" style="display: block; padding: 0 10px">                'dashicons-admin-users',
</span><span class="cx" style="display: block; padding: 0 10px">                1
</span><span class="cx" style="display: block; padding: 0 10px">        );
</span><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+
+       add_submenu_page(
+               'user-registrations',
+               'Settings',
+               'Settings',
+               'promote_users',
+               'user-registration-settings',
+               'wporg_login_admin_settings_page',
+               'dashicons-admin-settings'
+       );
+
</ins><span class="cx" style="display: block; padding: 0 10px"> });
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><span class="cx" style="display: block; padding: 0 10px"> function wporg_login_admin_action_text( $action ) {
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -96,6 +107,118 @@
</span><span class="cx" style="display: block; padding: 0 10px">        echo '</div>';
</span><span class="cx" style="display: block; padding: 0 10px"> }
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+function wporg_login_admin_settings_page() {
+       if ( $_POST && check_admin_referer( 'update_login_settings' ) ) {
+               $recaptcha_v3_threshold = wp_unslash( $_POST['recaptcha_v3_threshold'] ?? '' );
+               if ( $recaptcha_v3_threshold ) {
+                       $recaptcha_v3_threshold = sprintf( "%.1f", $recaptcha_v3_threshold );
+                       update_option( 'recaptcha_v3_threshold', $recaptcha_v3_threshold );
+               }
+
+               $block_words = wp_unslash( $_POST['registration_block_words'] ?? '' );
+               if ( $block_words ) {
+                       $block_words = explode( "\n", $block_words );
+                       $block_words = array_values( array_unique( array_filter( array_map( 'trim', $block_words ) ) ) );
+
+                       // Sanity; Don't let it change more than 20%.
+                       if ( count( $block_words ) < count( get_option( 'registration_block_words' ) ) * 0.8 ) {
+                               wp_die( "Are you sure you wanted to do that? You attempted to change registration_block_words to less than 80% of the previous value." );
+                       }
+
+                       update_option( 'registration_block_words', $block_words );
+               }
+
+               $banned_email_domains = wp_unslash( $_POST['banned_email_domains'] ?? '' );
+               if ( $banned_email_domains ) {
+                       $banned_email_domains = explode( "\n", $banned_email_domains );
+                       $banned_email_domains = array_values( array_unique( array_filter( array_map( 'trim', $banned_email_domains ) ) ) );
+
+                       // Sanity; Don't let it change more than 20%.
+                       if ( count( $banned_email_domains ) < count( get_site_option( 'banned_email_domains' ) ) * 0.8 ) {
+                               wp_die( "Are you sure you wanted to do that? You attempted to change banned_email_domains to less than 80% of the previous value." );
+                       }
+
+                       // Network-wide option.
+                       update_site_option( 'banned_email_domains', $banned_email_domains );
+               }
+
+               $ip_block = wp_unslash( $_POST['ip_block'] ?? '' );
+               $ip_allow = wp_unslash( $_POST['ip_allow'] ?? '' );
+               if ( $ip_block || $ip_allow ) {
+                       wp_cache_add_global_groups( array( 'registration-limit' ) );
+
+                       if ( $ip_allow ) {
+                               wp_cache_set( $ip_allow, 'whitelist', 'registration-limit', DAY_IN_SECONDS );
+                       }
+                       if ( $ip_block ) {
+                               wp_cache_set( $ip_block, 999, 'registration-limit', DAY_IN_SECONDS );
+                       }
+               }
+
+               echo '<div class="notice notice-success"><p>Settings saved.</p></div>';
+       }
+
+       echo '<div class="wrap">';
+       echo '<h1 class="wp-heading-inline">Registration &amp; Login Settings</h1>';
+       echo '<hr class="wp-header-end">';
+       echo '<form method="POST">';
+       wp_nonce_field( 'update_login_settings' );
+       echo '<table class="form-table">';
+
+       printf(
+               '<tr>
+                       <th>reCaptcha v3 low-score threshold for Registration</th>
+                       <td><input name="recaptcha_v3_threshold" type="number" min="0.0" max="1.0" step="0.1" name="" value="%s"></td>
+               </tr>',
+               esc_attr( get_option( 'recaptcha_v3_threshold', 0.2 ) )
+       );
+
+       printf(
+               '<tr>
+                       <th>Block words for registration</th>
+                       <td>
+                               <textarea name="registration_block_words" rows="10" cols="80">%s</textarea>
+                               <p><em>Any registrations with any of these phrases within their username, email address, or profile fields will be put into manual review. One phrase per line.</em></p>
+                       </td>
+               </tr>',
+               esc_textarea( implode( "\n", get_option( 'registration_block_words', [] ) ) )
+       );
+
+       printf(
+               '<tr>
+                       <th>Banned Email Domains</th>
+                       <td>
+                               <textarea name="banned_email_domains" rows="10" cols="80">%s</textarea>
+                               <p id="banned-email-domains-desc"><em>These email domains are WordPress.org-wide. No emails will be sent to them. No users can set their email address to it.<br>One email domain per line. This is the same list as <a href="https://wordpress.org/wp-admin/network/settings.php#banned_email_domains">https://wordpress.org/wp-admin/network/settings.php#banned_email_domains</a>.</em></p>
+                       </td>
+               </tr>',
+               esc_textarea( implode( "\n", get_site_option( 'banned_email_domains', [] ) ) ),
+       );
+
+       echo '<tr>
+               <th>IP Block for 24hrs</th>
+               <td>
+                       <input class="regular-text" type="text" name="ip_block" minlength="7" maxlength="15" size="15" pattern="^((\d{1,2}|1\d\d|2[0-4]\d|25[0-5])\.){3}(\d{1,2}|1\d\d|2[0-4]\d|25[0-5])$" placeholder="xxx.xxx.xxx.xxx">
+                       <p><em>One IP only. IP will be blocked from registrations for 24hrs. </em></p>
+               </td>
+       </tr>';
+
+       echo '<tr>
+               <th>IP Allow for 24hrs</th>
+               <td>
+                       <input class="regular-text" type="text" name="ip_allow" minlength="7" maxlength="15" size="15" pattern="^((\d{1,2}|1\d\d|2[0-4]\d|25[0-5])\.){3}(\d{1,2}|1\d\d|2[0-4]\d|25[0-5])$" placeholder="xxx.xxx.xxx.xxx">
+                       <p><em>One IP only. IP will bypass per-IP limits on registrations for 24hrs. Will also bypass Jetpack Protect login limiter.</em></p>
+               </td>
+       </tr>';
+
+       echo '</table>';
+       echo '<p class="submit">
+               <input type="submit" name="submit" id="submit" class="button button-primary" value="Save Changes">
+       </p>';
+       echo '</form>';
+       echo '</div>';
+}
+
</ins><span class="cx" style="display: block; padding: 0 10px"> add_action( 'admin_post_login_resend_email', function() { 
</span><span class="cx" style="display: block; padding: 0 10px">        if ( ! current_user_can( 'promote_users' ) ) {
</span><span class="cx" style="display: block; padding: 0 10px">                wp_die();
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -230,7 +353,7 @@
</span><span class="cx" style="display: block; padding: 0 10px">                include_once WP_PLUGIN_DIR . '/support-forums/support-forums.php';
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><span class="cx" style="display: block; padding: 0 10px">                // bbPress roles still aren't quite right, need to switch away and back..
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-                // This is hacky, but otherwise the bbp_set_user_role() call below will appear to succeed, but no role aleration will actually happen.
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+         // This is hacky, but otherwise the bbp_set_user_role() call below will appear to succeed, but no role alteration will actually happen.
</ins><span class="cx" style="display: block; padding: 0 10px">                 restore_current_blog();
</span><span class="cx" style="display: block; padding: 0 10px">                switch_to_blog( WPORG_SUPPORT_FORUMS_BLOGID );
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span></span></pre></div>
<a id="sitestrunkwordpressorgpublic_htmlwpcontentthemespubwporgloginfunctionsregistrationphp"></a>
<div class="modfile"><h4 style="background-color: #eee; color: inherit; margin: 1em 0; padding: 1.3em; font-size: 115%">Modified: sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php</h4>
<pre class="diff"><span>
<span class="info" style="display: block; padding: 0 10px; color: #888">--- sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php        2022-03-01 23:56:48 UTC (rev 11619)
+++ sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/functions-registration.php  2022-03-02 06:07:14 UTC (rev 11620)
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -45,7 +45,7 @@
</span><span class="cx" style="display: block; padding: 0 10px"> }
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><span class="cx" style="display: block; padding: 0 10px"> /**
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">- * Handles creating a "Pending" registration that will later be converted to an actual user  account.
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+ * Handles creating a "Pending" registration that will later be converted to an actual user account.
</ins><span class="cx" style="display: block; padding: 0 10px">  */
</span><span class="cx" style="display: block; padding: 0 10px"> function wporg_login_create_pending_user( $user_login, $user_email, $meta = array() ) {
</span><span class="cx" style="display: block; padding: 0 10px">        global $wpdb, $wp_hasher;
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -95,9 +95,12 @@
</span><span class="cx" style="display: block; padding: 0 10px">                $pending_user['meta']['heuristics'] = wporg_registration_check_private_heuristics( compact( 'user_login', 'user_email' ) );
</span><span class="cx" style="display: block; padding: 0 10px">        }
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+        $passes_block_words = wporg_login_check_against_block_words( $pending_user );
+
</ins><span class="cx" style="display: block; padding: 0 10px">         $pending_user['cleared'] = (
</span><span class="cx" style="display: block; padding: 0 10px">                'allow' === $pending_user['meta']['heuristics'] &&
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-                (float)$pending_user['scores']['pending'] >= (float) get_option( 'recaptcha_v3_threshold', 0.2 ) 
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+         (float)$pending_user['scores']['pending'] >= (float) get_option( 'recaptcha_v3_threshold', 0.2 ) &&
+               $passes_block_words
</ins><span class="cx" style="display: block; padding: 0 10px">         );
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><span class="cx" style="display: block; padding: 0 10px">        $inserted = wporg_update_pending_user( $pending_user );
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -397,6 +400,14 @@
</span><span class="cx" style="display: block; padding: 0 10px">                }
</span><span class="cx" style="display: block; padding: 0 10px">        }
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+        // If not manually approved, check against block_words.
+       if ( $pending_user['cleared'] < 2 ) {
+               $passes_block_words = wporg_login_check_against_block_words( $pending_user );
+               if ( ! $passes_block_words ) {
+                       $pending_user['cleared'] = 0;
+               }
+       }
+
</ins><span class="cx" style="display: block; padding: 0 10px">         if ( $pending_user ) {
</span><span class="cx" style="display: block; padding: 0 10px">                wporg_update_pending_user( $pending_user );
</span><span class="cx" style="display: block; padding: 0 10px">                if ( $updated_email ) {
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -406,3 +417,27 @@
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><span class="cx" style="display: block; padding: 0 10px">        return true;
</span><span class="cx" style="display: block; padding: 0 10px"> }
</span><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+
+/**
+ * Check a pending user object against the 'block words' setting.
+ * 
+ * @return bool
+ */
+function wporg_login_check_against_block_words( $user ) {
+       $block_words = get_option( 'registration_block_words', [] );
+
+       foreach ( $block_words as $word ) {
+               if (
+                       false !== stripos( $user['user_login'], $word ) ||
+                       false !== stripos( $user['user_email'], $word ) ||
+                       false !== stripos( $user['meta']['url'], $word ) ||
+                       false !== stripos( $user['meta']['from'], $word ) ||
+                       false !== stripos( $user['meta']['occ'], $word ) ||
+                       false !== stripos( $user['meta']['interests'], $word )
+               ) {
+                       return false;
+               }
+       }
+
+       return true;
+}
</ins></span></pre></div>
<a id="sitestrunkwordpressorgpublic_htmlwpcontentthemespubwporgloginpendingcreatephp"></a>
<div class="modfile"><h4 style="background-color: #eee; color: inherit; margin: 1em 0; padding: 1.3em; font-size: 115%">Modified: sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/pending-create.php</h4>
<pre class="diff"><span>
<span class="info" style="display: block; padding: 0 10px; color: #888">--- sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/pending-create.php        2022-03-01 23:56:48 UTC (rev 11619)
+++ sites/trunk/wordpress.org/public_html/wp-content/themes/pub/wporg-login/pending-create.php  2022-03-02 06:07:14 UTC (rev 11620)
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -8,7 +8,7 @@
</span><span class="cx" style="display: block; padding: 0 10px"> $sso = WPOrg_SSO::get_instance();
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><span class="cx" style="display: block; padding: 0 10px"> // Migrate to cookies.
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-if ( !empty( $sso::$matched_route_params['confirm_user'] ) ) {
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+if ( ! empty( $sso::$matched_route_params['confirm_user'] ) ) {
</ins><span class="cx" style="display: block; padding: 0 10px">         setcookie( 'wporg_confirm_user', $sso::$matched_route_params['confirm_user'], time()+DAY_IN_SECONDS, '/register/', 'login.wordpress.org', true, true );
</span><span class="cx" style="display: block; padding: 0 10px">        setcookie( 'wporg_confirm_key',  $sso::$matched_route_params['confirm_key'],  time()+DAY_IN_SECONDS, '/register/', 'login.wordpress.org', true, true );
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -157,7 +157,7 @@
</span><span class="cx" style="display: block; padding: 0 10px">                <input type="text" disabled="disabled" class="disabled" value="<?php echo esc_attr( $activation_user ); ?>" size="20" />
</span><span class="cx" style="display: block; padding: 0 10px">        </p>
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-        <div class="user-pass1-wrap">
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+ <div class="user-pass1-wrap" <?php echo ( $pending_user['cleared'] ? '' : "style='display:none;'" ); ?>>
</ins><span class="cx" style="display: block; padding: 0 10px">                 <p>
</span><span class="cx" style="display: block; padding: 0 10px">                        <label for="pass1"><?php _e( 'Password', 'wporg' ); ?></label>
</span><span class="cx" style="display: block; padding: 0 10px">                </p>
</span><span class="lines" style="display: block; padding: 0 10px; color: #888">@@ -186,7 +186,7 @@
</span><span class="cx" style="display: block; padding: 0 10px">        ?>
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><span class="cx" style="display: block; padding: 0 10px">        <p class="login-submit">
</span><del style="background-color: #fdd; text-decoration:none; display:block; padding: 0 10px">-                <input data-sitekey="<?php echo esc_attr( RECAPTCHA_INVIS_PUBKEY ); ?>" data-callback='onSubmit' type="submit" name="wp-submit" id="wp-submit" class="g-recaptcha button button-primary button-large" value="<?php esc_attr_e( 'Create Account', 'wporg' ); ?>" />
</del><ins style="background-color: #dfd; text-decoration:none; display:block; padding: 0 10px">+         <input data-sitekey="<?php echo esc_attr( RECAPTCHA_INVIS_PUBKEY ); ?>" data-callback='onSubmit' type="submit" name="wp-submit" id="wp-submit" class="g-recaptcha button button-primary button-large" value="<?php ( $pending_user['cleared'] ? esc_attr_e( 'Create Account', 'wporg' ) : esc_attr_e( 'Save Profile Information', 'wporg' ) ); ?>" />
</ins><span class="cx" style="display: block; padding: 0 10px">         </p>
</span><span class="cx" style="display: block; padding: 0 10px"> 
</span><span class="cx" style="display: block; padding: 0 10px"> </form>
</span></span></pre>
</div>
</div>

</body>
</html>