PluginProbe
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More / 5.0.08
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More v5.0.08
6.35 6.34 6.33.1 6.33 6.32.1 6.32 6.31 6.25 6.25.1 6.26 6.26.1 6.27 6.28 6.29 6.3 6.3.1 6.3.2 6.30 6.4 6.4.1 6.4.2 6.5 6.5.1 6.5.2 6.5.3 All 141 releases
← All changes | classes/models/FrmEntryMeta.php +85 -278 6.355.0.08 View file →
@@ -5,24 +5,15 @@
5 5
6 6 class FrmEntryMeta {
7 7
8 8 /**
9 - * @since 6.35 Added the $field parameter.
10 - *
11 - * @param int $entry_id
12 - * @param int $field_id
13 - * @param string $meta_key usually set to '' as this parameter is no longer used.
14 - * @param mixed $meta_value
15 - * @param stdClass|null $field The field $field_id belongs to, when the caller already has
16 - * it loaded. Looked up here when it is not passed.
17 - *
18 - * @return int
9 + * @param string $meta_key
19 10 */
20 - public static function add_entry_meta( $entry_id, $field_id, $meta_key, $meta_value, $field = null ) {
11 + public static function add_entry_meta( $entry_id, $field_id, $meta_key, $meta_value ) {
21 12 global $wpdb;
22 13
23 14 if ( FrmAppHelper::is_empty_value( $meta_value ) ) {
24 - // Don't save blank fields
15 + // don't save blank fields
25 16 return 0;
26 17 }
27 18
28 19 $new_values = array(
@@ -31,34 +22,33 @@
31 22 'field_id' => $field_id,
32 23 'created_at' => current_time( 'mysql', 1 ),
33 24 );
34 25
35 - self::set_value_before_save( $new_values, $field );
36 - $new_values = apply_filters( 'frm_add_entry_meta', $new_values );
26 + self::set_value_before_save( $new_values );
27 + $new_values = apply_filters( 'frm_add_entry_meta', $new_values );
28 +
37 29 $query_results = $wpdb->insert( $wpdb->prefix . 'frm_item_metas', $new_values );
38 30
39 31 if ( $query_results ) {
40 32 self::clear_cache();
41 33 wp_cache_delete( $entry_id, 'frm_entry' );
42 - return $wpdb->insert_id;
34 + $id = $wpdb->insert_id;
35 + } else {
36 + $id = 0;
43 37 }
44 38
45 - return 0;
39 + return $id;
46 40 }
47 41
48 42 /**
49 - * @since 6.35 Added the $field parameter.
43 + * @param int $entry_id
44 + * @param int $field_id
45 + * @param string $meta_key deprecated
46 + * @param array|string $meta_value
50 47 *
51 - * @param int $entry_id
52 - * @param int $field_id
53 - * @param string $meta_key Deprecated.
54 - * @param array|string $meta_value
55 - * @param stdClass|null $field The field $field_id belongs to, when the caller already has
56 - * it loaded. Looked up here when it is not passed.
57 - *
58 - * @return bool|int
48 + * @return bool|false|int
59 49 */
60 - public static function update_entry_meta( $entry_id, $field_id, $meta_key, $meta_value, $field = null ) {
50 + public static function update_entry_meta( $entry_id, $field_id, $meta_key, $meta_value ) {
61 51 if ( ! $field_id ) {
62 52 return false;
63 53 }
64 54
@@ -69,15 +59,14 @@
69 59 'field_id' => $field_id,
70 60 );
71 61 $where_values = $values;
72 62 $values['meta_value'] = $meta_value;
73 - self::set_value_before_save( $values, $field );
63 + self::set_value_before_save( $values );
74 64 $values = apply_filters( 'frm_update_entry_meta', $values );
75 65
76 66 if ( is_array( $values['meta_value'] ) ) {
77 67 $values['meta_value'] = array_filter( $values['meta_value'], 'FrmAppHelper::is_not_empty_value' );
78 68 }
79 -
80 69 $meta_value = maybe_serialize( $values['meta_value'] );
81 70
82 71 wp_cache_delete( $entry_id, 'frm_entry' );
83 72 self::clear_cache();
@@ -86,36 +75,20 @@
86 75 }
87 76
88 77 /**
89 78 * @since 3.0
90 - * @since 6.35 Added the $field parameter.
91 - *
92 - * @param array $values
93 - * @param stdClass|null $field The field for $values['field_id'], when the caller already has
94 - * it loaded. Looked up here when it is not passed.
95 - *
96 - * @return void
97 79 */
98 - private static function set_value_before_save( &$values, $field = null ) {
99 - if ( ! is_object( $field ) ) {
100 - $field = FrmField::getOne( $values['field_id'] );
101 - }
80 + private static function set_value_before_save( &$values ) {
81 + $field = FrmField::getOne( $values['field_id'] );
82 + if ( $field ) {
83 + $field_obj = FrmFieldFactory::get_field_object( $field );
102 84
103 - if ( ! $field ) {
104 - return;
85 + $values['meta_value'] = $field_obj->set_value_before_save( $values['meta_value'] );
105 86 }
106 -
107 - $field_obj = FrmFieldFactory::get_field_object( $field );
108 - $values['meta_value'] = $field_obj->set_value_before_save( $values['meta_value'] );
109 87 }
110 88
111 89 /**
112 90 * @since 3.0
113 - *
114 - * @param array $atts
115 - * @param mixed $value
116 - *
117 - * @return void
118 91 */
119 92 private static function get_value_to_save( $atts, &$value ) {
120 93 if ( is_object( $atts['field'] ) ) {
121 94 $field_obj = FrmFieldFactory::get_field_object( $atts['field'] );
@@ -130,19 +103,13 @@
130 103
131 104 $value = apply_filters( 'frm_prepare_data_before_db', $value, $atts['field_id'], $atts['entry_id'], array( 'field' => $atts['field'] ) );
132 105 }
133 106
134 - /**
135 - * @param int|string $entry_id
136 - * @param array $values Either indexed by field ID or field key.
137 - *
138 - * @return void
139 - */
140 107 public static function update_entry_metas( $entry_id, $values ) {
141 108 global $wpdb;
142 109
143 - $previous_field_ids = FrmDb::get_col(
144 - 'frm_item_metas',
110 + $prev_values = FrmDb::get_col(
111 + $wpdb->prefix . 'frm_item_metas',
145 112 array(
146 113 'item_id' => $entry_id,
147 114 'field_id !' => 0,
148 115 ),
@@ -148,94 +115,62 @@
148 115 ),
149 116 'field_id'
150 117 );
151 118
152 - $values_indexed_by_field_id = array();
153 -
154 - foreach ( $values as $field_id_or_key => $meta_value ) {
155 - $field_id = $field_id_or_key;
156 - $field = null;
157 -
158 - if ( $field_id_or_key ) {
159 - $field = FrmField::getOne( $field_id_or_key );
160 -
161 - if ( is_object( $field ) ) {
162 - $field_id = $field->id;
163 - }
119 + foreach ( $values as $field_id => $meta_value ) {
120 + $field = false;
121 + if ( ! empty( $field_id ) ) {
122 + $field = FrmField::getOne( $field_id );
164 123 }
165 124
166 - $values_indexed_by_field_id[ $field_id ] = $meta_value;
167 -
168 125 self::get_value_to_save( compact( 'field', 'field_id', 'entry_id' ), $meta_value );
169 126
170 - if ( ! $previous_field_ids || ! in_array( $field_id, $previous_field_ids, true ) ) {
171 - // If value does not exist, then create it
172 - self::add_entry_meta( $entry_id, $field_id, '', $meta_value, $field );
173 - continue;
174 - }
127 + if ( $prev_values && in_array( $field_id, $prev_values ) ) {
175 128
176 - if ( $meta_value === array() || ( ! is_array( $meta_value ) && trim( $meta_value ) === '' ) ) {
177 - // Remove blank fields.
178 - unset( $values_indexed_by_field_id[ $field_id ] );
129 + if ( ( is_array( $meta_value ) && empty( $meta_value ) ) || ( ! is_array( $meta_value ) && trim( $meta_value ) == '' ) ) {
130 + // remove blank fields
131 + unset( $values[ $field_id ] );
132 + } else {
133 + // if value exists, then update it
134 + self::update_entry_meta( $entry_id, $field_id, '', $meta_value );
135 + }
179 136 } else {
180 - // If value exists, then update it
181 - self::update_entry_meta( $entry_id, $field_id, '', $meta_value, $field );
137 + // if value does not exist, then create it
138 + self::add_entry_meta( $entry_id, $field_id, '', $meta_value );
182 139 }
183 - }//end foreach
140 + }
184 141
185 - if ( ! $previous_field_ids ) {
142 + if ( empty( $prev_values ) ) {
186 143 return;
187 144 }
188 145
189 - $field_ids_to_remove = array_diff( $previous_field_ids, array_keys( $values_indexed_by_field_id ) );
146 + $prev_values = array_diff( $prev_values, array_keys( $values ) );
190 147
191 - if ( ! $field_ids_to_remove ) {
148 + if ( empty( $prev_values ) ) {
192 149 return;
193 150 }
194 151
195 - // Prepare the query
152 + // prepare the query
196 153 $where = array(
197 154 'item_id' => $entry_id,
198 - 'field_id' => $field_ids_to_remove,
155 + 'field_id' => $prev_values,
199 156 );
200 157 FrmDb::get_where_clause_and_values( $where );
201 158
202 159 // Delete any leftovers
203 - $wpdb->query( $wpdb->prepare( 'DELETE FROM ' . $wpdb->prefix . 'frm_item_metas ' . $where['where'], $where['values'] ) ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared, SlevomatCodingStandard.Files.LineLength.LineTooLong
160 + $wpdb->query( $wpdb->prepare( 'DELETE FROM ' . $wpdb->prefix . 'frm_item_metas ' . $where['where'], $where['values'] ) ); // WPCS: unprepared SQL ok.
204 161 self::clear_cache();
205 162 }
206 163
207 - /**
208 - * @param int $old_id
209 - * @param int $new_id
210 - *
211 - * @return void
212 - */
213 164 public static function duplicate_entry_metas( $old_id, $new_id ) {
214 165 $metas = self::get_entry_meta_info( $old_id );
215 -
216 - /**
217 - * Allows changing entry duplicate values before save.
218 - *
219 - * @since 5.4.4
220 - *
221 - * @param array $metas The list of entry meta values.
222 - */
223 - $metas = apply_filters( 'frm_before_duplicate_entry_values', $metas );
224 -
225 166 foreach ( $metas as $meta ) {
226 - self::add_entry_meta( $new_id, $meta->field_id, '', $meta->meta_value );
167 + self::add_entry_meta( $new_id, $meta->field_id, null, $meta->meta_value );
227 168 unset( $meta );
228 169 }
229 170 self::clear_cache();
230 171 }
231 172
232 - /**
233 - * @param int $entry_id
234 - * @param int $field_id
235 - *
236 - * @return false|int
237 - */
238 173 public static function delete_entry_meta( $entry_id, $field_id ) {
239 174 global $wpdb;
240 175 self::clear_cache();
241 176
@@ -246,10 +181,8 @@
246 181 * Clear entry meta caching
247 182 * Called when a meta is added or changed
248 183 *
249 184 * @since 2.0.5
250 - *
251 - * @return void
252 185 */
253 186 public static function clear_cache() {
254 187 FrmDb::cache_delete_group( 'frm_entry_meta' );
255 188 FrmDb::cache_delete_group( 'frm_item_meta' );
@@ -256,27 +189,17 @@
256 189 }
257 190
258 191 /**
259 192 * @since 2.0.9
260 - *
261 - * @param stdClass $entry
262 - * @param int|string $field_id
263 - *
264 - * @return mixed
265 193 */
266 194 public static function get_meta_value( $entry, $field_id ) {
267 195 if ( isset( $entry->metas ) ) {
268 - return $entry->metas[ $field_id ] ?? false;
196 + return isset( $entry->metas[ $field_id ] ) ? $entry->metas[ $field_id ] : false;
197 + } else {
198 + return self::get_entry_meta_by_field( $entry->id, $field_id );
269 199 }
270 - return self::get_entry_meta_by_field( $entry->id, $field_id );
271 200 }
272 201
273 - /**
274 - * @param int|object|string $entry_id
275 - * @param int|string $field_id This function supports field keys as field id.
276 - *
277 - * @return mixed
278 - */
279 202 public static function get_entry_meta_by_field( $entry_id, $field_id ) {
280 203 global $wpdb;
281 204
282 205 if ( is_object( $entry_id ) ) {
@@ -289,38 +212,28 @@
289 212 }
290 213
291 214 if ( $cached && isset( $cached->metas ) && isset( $cached->metas[ $field_id ] ) ) {
292 215 $result = $cached->metas[ $field_id ];
216 +
293 217 return wp_unslash( $result );
294 218 }
295 219
296 220 $get_table = $wpdb->prefix . 'frm_item_metas';
297 221 $query = array( 'item_id' => $entry_id );
298 -
299 222 if ( is_numeric( $field_id ) ) {
300 - // Query by field ID.
301 223 $query['field_id'] = $field_id;
302 224 } else {
303 - // Query by field key.
304 - $get_table .= ' it JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id';
225 + $get_table .= ' it LEFT OUTER JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id';
305 226 $query['fi.field_key'] = $field_id;
306 227 }
307 228
308 - $result = FrmDb::get_var( $get_table, $query, 'meta_value' );
309 - $field_type = FrmField::get_type( $field_id );
310 - FrmFieldsHelper::prepare_field_value( $result, $field_type );
229 + $result = FrmDb::get_var( $get_table, $query, 'meta_value' );
230 + FrmAppHelper::unserialize_or_decode( $result );
231 + $result = wp_unslash( $result );
311 232
312 - return wp_unslash( $result );
233 + return $result;
313 234 }
314 235
315 - /**
316 - * @param int|string $field_id
317 - * @param string $order
318 - * @param string $limit
319 - * @param array $args
320 - *
321 - * @return array
322 - */
323 236 public static function get_entry_metas_for_field( $field_id, $order = '', $limit = '', $args = array() ) {
324 237 $defaults = array(
325 238 'value' => false,
326 239 'unique' => false,
@@ -327,11 +240,13 @@
327 240 'stripslashes' => true,
328 241 'is_draft' => false,
329 242 );
330 243 $args = wp_parse_args( $args, $defaults );
331 - $query = array();
244 +
245 + $query = array();
332 246 self::meta_field_query( $field_id, $order, $limit, $args, $query );
333 - $query = implode( ' ', $query );
247 + $query = implode( ' ', $query );
248 +
334 249 $cache_key = 'entry_metas_for_field_' . $field_id . $order . $limit . FrmAppHelper::maybe_json_encode( $args );
335 250 $values = FrmDb::check_cache( $cache_key, 'frm_entry', $query, 'get_col' );
336 251
337 252 if ( ! $args['stripslashes'] ) {
@@ -347,15 +262,10 @@
347 262 return wp_unslash( $values );
348 263 }
349 264
350 265 /**
351 - * @param int|string $field_id
352 - * @param string $order
353 - * @param string $limit
354 - * @param array $args
355 - * @param array $query
356 - *
357 - * @return void
266 + * @param string $order
267 + * @param string $limit
358 268 */
359 269 private static function meta_field_query( $field_id, $order, $limit, $args, array &$query ) {
360 270 global $wpdb;
361 271 $query[] = 'SELECT';
@@ -378,40 +288,24 @@
378 288
379 289 if ( $args['value'] ) {
380 290 $query[] = $wpdb->prepare( ' AND meta_value=%s', $args['value'] );
381 291 }
382 -
383 292 $query[] = $order . $limit;
384 293 }
385 294
386 - /**
387 - * @param int|string $entry_id
388 - *
389 - * @return array
390 - */
391 295 public static function get_entry_meta_info( $entry_id ) {
392 296 return FrmDb::get_results( 'frm_item_metas', array( 'item_id' => $entry_id ) );
393 297 }
394 298
395 - /**
396 - * @param array $where
397 - * @param string $order_by
398 - * @param string $limit
399 - * @param bool $stripslashes
400 - *
401 - * @return mixed
402 - */
403 299 public static function getAll( $where = array(), $order_by = '', $limit = '', $stripslashes = false ) {
404 300 global $wpdb;
405 - // phpcs:disable Generic.WhiteSpace.ScopeIndent
406 301 $query = 'SELECT it.*, fi.type as field_type, fi.field_key as field_key,
407 302 fi.required as required, fi.form_id as field_form_id, fi.name as field_name, fi.options as fi_options
408 303 FROM ' . $wpdb->prefix . 'frm_item_metas it LEFT OUTER JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id' .
409 304 FrmDb::prepend_and_or_where( ' WHERE ', $where ) . $order_by . $limit;
410 - // phpcs:enable Generic.WhiteSpace.ScopeIndent
411 305
412 306 $cache_key = 'all_' . FrmAppHelper::maybe_json_encode( $where ) . $order_by . $limit;
413 - $results = FrmDb::check_cache( $cache_key, 'frm_entry', $query, $limit === ' LIMIT 1' ? 'get_row' : 'get_results' );
307 + $results = FrmDb::check_cache( $cache_key, 'frm_entry', $query, ( $limit == ' LIMIT 1' ? 'get_row' : 'get_results' ) );
414 308
415 309 if ( ! $results || ! $stripslashes ) {
416 310 return $results;
417 311 }
@@ -424,17 +318,8 @@
424 318
425 319 return $results;
426 320 }
427 321
428 - /**
429 - * @param array|string $where
430 - * @param string $order_by
431 - * @param string $limit
432 - * @param bool $unique
433 - * @param array $args
434 - *
435 - * @return array|string|null
436 - */
437 322 public static function getEntryIds( $where = array(), $order_by = '', $limit = '', $unique = true, $args = array() ) {
438 323 $defaults = array(
439 324 'is_draft' => false,
440 325 'user_id' => '',
@@ -440,11 +325,13 @@
440 325 'user_id' => '',
441 326 'group_by' => '',
442 327 );
443 328 $args = wp_parse_args( $args, $defaults );
444 - $query = array();
329 +
330 + $query = array();
445 331 self::get_ids_query( $where, $order_by, $limit, $unique, $args, $query );
446 - $query = implode( ' ', $query );
332 + $query = implode( ' ', $query );
333 +
447 334 $cache_key = 'ids_' . FrmAppHelper::maybe_json_encode( $where ) . $order_by . 'l' . $limit . 'u' . $unique . FrmAppHelper::maybe_json_encode( $args );
448 335 $type = 'get_' . ( ' LIMIT 1' === $limit ? 'var' : 'col' );
449 336 return FrmDb::check_cache( $cache_key, 'frm_entry', $query, $type );
450 337 }
@@ -454,9 +341,8 @@
454 341 * If a child entry id is matched, its parent will be returned in its place
455 342 *
456 343 * @param array $query
457 344 * @param array $args
458 - *
459 345 * @return array
460 346 */
461 347 public static function get_top_level_entry_ids( $query, $args ) {
462 348 $args['return_parent_id_if_0_return_id'] = true;
@@ -463,54 +349,13 @@
463 349 return self::getEntryIds( $query, '', '', true, $args );
464 350 }
465 351
466 352 /**
467 - * Returns true if the where clause refers to a field table column that is not form_id. It also updates
468 - * the where clause to refer to the entry table for form_id if fields table should not be joined.
469 - *
470 - * @since 6.16.1
471 - *
472 - * @param array|string $where
473 - *
474 - * @return bool
353 + * @param string|array $where
354 + * @param string $order_by
355 + * @param string $limit
475 356 */
476 - private static function should_join_fields_table( &$where ) {
477 - if ( is_string( $where ) ) {
478 - if ( preg_match( '/\bfi\.(?!form_id)\w+/i', $where ) ) {
479 - return true;
480 - }
481 -
482 - $where = str_ireplace( 'fi.form_id', 'e.form_id', $where );
483 - return false;
484 - }
485 -
486 - $where_fields = array_keys( $where );
487 -
488 - foreach ( $where_fields as $where_field ) {
489 - if ( str_starts_with( $where_field, 'fi.' ) && 'fi.form_id' !== $where_field ) {
490 - return true;
491 - }
492 - }
493 -
494 - if ( isset( $where['fi.form_id'] ) ) {
495 - $where['e.form_id'] = $where['fi.form_id'];
496 - unset( $where['fi.form_id'] );
497 - }
498 -
499 - return false;
500 - }
501 -
502 - /**
503 - * @param array|string $where
504 - * @param string $order_by
505 - * @param string $limit
506 - * @param bool $unique
507 - * @param array $args
508 - * @param array $query
509 - *
510 - * @return void
511 - */
512 - private static function get_ids_query( $where, $order_by, $limit, $unique, $args, array &$query ) { // phpcs:ignore SlevomatCodingStandard.Complexity.Cognitive.ComplexityTooHigh, SlevomatCodingStandard.Files.LineLength.LineTooLong
357 + private static function get_ids_query( $where, $order_by, $limit, $unique, $args, array &$query ) {
513 358 global $wpdb;
514 359 $query[] = 'SELECT';
515 360 $defaults = array(
516 361 'return_parent_id' => false,
@@ -529,45 +374,21 @@
529 374 } else {
530 375 $query[] = 'it.item_id';
531 376 }
532 377
533 - $from = 'FROM ' . $wpdb->prefix . 'frm_item_metas it';
378 + $query[] = 'FROM ' . $wpdb->prefix . 'frm_item_metas it LEFT OUTER JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id';
534 379
535 - if ( self::should_join_fields_table( $where ) || self::should_join_fields_table( $order_by ) ) {
536 - $from .= ' LEFT OUTER JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id';
537 - }
538 -
539 - $query[] = $from;
540 380 $query[] = 'INNER JOIN ' . $wpdb->prefix . 'frm_items e ON (e.id=it.item_id)';
541 -
542 381 if ( is_array( $where ) ) {
543 382 if ( ! $args['is_draft'] ) {
544 383 $where['e.is_draft'] = 0;
545 - } elseif ( is_numeric( $args['is_draft'] ) ) {
546 - $where['e.is_draft'] = class_exists( 'FrmAbandonmentHooksController', false ) ? absint( $args['is_draft'] ) : 1;
547 - } elseif ( 'both' === $args['is_draft'] && class_exists( 'FrmAbandonmentHooksController', false ) ) {
548 - $where['e.is_draft'] = array( 0, 1 );
549 - } elseif ( str_contains( $args['is_draft'], ',' ) ) {
550 - $is_draft = array_reduce(
551 - explode( ',', $args['is_draft'] ),
552 - function ( $total, $current ) {
553 - if ( is_numeric( $current ) ) {
554 - $total[] = absint( $current );
555 - }
556 - return $total;
557 - },
558 - array()
559 - );
384 + } elseif ( $args['is_draft'] == 1 ) {
385 + $where['e.is_draft'] = 1;
386 + }
560 387
561 - if ( $is_draft ) {
562 - $where['e.is_draft'] = $is_draft;
563 - }
564 - }//end if
565 -
566 388 if ( ! empty( $args['user_id'] ) ) {
567 389 $where['e.user_id'] = $args['user_id'];
568 390 }
569 -
570 391 $query[] = FrmDb::prepend_and_or_where( ' WHERE ', $where ) . $order_by . $limit;
571 392
572 393 if ( $args['group_by'] ) {
573 394 $query[] = ' GROUP BY ' . sanitize_text_field( $args['group_by'] );
@@ -573,16 +394,15 @@
573 394 $query[] = ' GROUP BY ' . sanitize_text_field( $args['group_by'] );
574 395 }
575 396
576 397 return;
577 - }//end if
398 + }
578 399
579 400 $draft_where = '';
580 401 $user_where = '';
581 -
582 402 if ( ! $args['is_draft'] ) {
583 403 $draft_where = $wpdb->prepare( ' AND e.is_draft=%d', 0 );
584 - } elseif ( $args['is_draft'] == 1 ) { // phpcs:ignore Universal.Operators.StrictComparisons
404 + } elseif ( $args['is_draft'] == 1 ) {
585 405 $draft_where = $wpdb->prepare( ' AND e.is_draft=%d', 1 );
586 406 }
587 407
588 408 if ( ! empty( $args['user_id'] ) ) {
@@ -588,10 +408,10 @@
588 408 if ( ! empty( $args['user_id'] ) ) {
589 409 $user_where = $wpdb->prepare( ' AND e.user_id=%d', $args['user_id'] );
590 410 }
591 411
592 - if ( str_contains( $where, ' GROUP BY ' ) ) {
593 - // Don't inject WHERE filtering after GROUP BY
412 + if ( strpos( $where, ' GROUP BY ' ) ) {
413 + // don't inject WHERE filtering after GROUP BY
594 414 $parts = explode( ' GROUP BY ', $where );
595 415 $where = $parts[0];
596 416 $where .= $draft_where . $user_where;
597 417 $where .= ' GROUP BY ' . $parts[1];
@@ -602,30 +422,20 @@
602 422 // The query has already been prepared
603 423 $query[] = FrmDb::prepend_and_or_where( ' WHERE ', $where ) . $order_by . $limit;
604 424 }
605 425
606 - /**
607 - * @param array|string $search
608 - * @param int|string $field_id
609 - * @param string $operator
610 - *
611 - * @return array
612 - */
613 426 public static function search_entry_metas( $search, $field_id, $operator ) {
614 427 $cache_key = 'search_' . FrmAppHelper::maybe_json_encode( $search ) . $field_id . $operator;
615 428 $results = wp_cache_get( $cache_key, 'frm_entry' );
616 -
617 429 if ( false !== $results ) {
618 430 return $results;
619 431 }
620 432
621 433 global $wpdb;
622 -
623 434 if ( is_array( $search ) ) {
624 435 $where = '';
625 -
626 436 foreach ( $search as $field => $value ) {
627 - if ( $value <= 0 || ! in_array( $field, array( 'year', 'month', 'day' ), true ) ) {
437 + if ( $value <= 0 || ! in_array( $field, array( 'year', 'month', 'day' ) ) ) {
628 438 continue;
629 439 }
630 440
631 441 switch ( $field ) {
@@ -637,23 +447,20 @@
637 447 break;
638 448 case 'day':
639 449 $value = '%' . $value . '%';
640 450 }
641 -
642 - $where .= $wpdb->prepare( ' meta_value ' . $operator . ' %s and', $value ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared
451 + $where .= $wpdb->prepare( ' meta_value ' . $operator . ' %s and', $value ); // WPCS: unprepared SQL ok.
643 452 }
644 -
645 453 $where .= $wpdb->prepare( ' field_id=%d', $field_id );
646 - $query = 'SELECT DISTINCT item_id FROM ' . $wpdb->prefix . 'frm_item_metas' . FrmDb::prepend_and_or_where( ' WHERE ', $where );
454 + $query = 'SELECT DISTINCT item_id FROM ' . $wpdb->prefix . 'frm_item_metas' . FrmDb::prepend_and_or_where( ' WHERE ', $where );
647 455 } else {
648 - if ( $operator === 'LIKE' ) {
456 + if ( $operator == 'LIKE' ) {
649 457 $search = '%' . $search . '%';
650 458 }
459 + $query = $wpdb->prepare( "SELECT DISTINCT item_id FROM {$wpdb->prefix}frm_item_metas WHERE meta_value {$operator} %s and field_id = %d", $search, $field_id ); // WPCS: unprepared SQL ok.
460 + }
651 461
652 - $query = $wpdb->prepare( "SELECT DISTINCT item_id FROM {$wpdb->prefix}frm_item_metas WHERE meta_value {$operator} %s and field_id = %d", $search, $field_id ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared, WordPress.DB.PreparedSQL.InterpolatedNotPrepared, SlevomatCodingStandard.Files.LineLength.LineTooLong
653 - }//end if
654 -
655 - $results = $wpdb->get_col( $query, 0 ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared
462 + $results = $wpdb->get_col( $query, 0 ); // WPCS: unprepared SQL ok.
656 463 FrmDb::set_cache( $cache_key, $results, 'frm_entry' );
657 464
658 465 return $results;
659 466 }