PluginProbe
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More / 6.14
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More v6.14
6.35 6.34 6.33.1 6.33 6.32.1 6.32 6.31 6.25 6.25.1 6.26 6.26.1 6.27 6.28 6.29 6.3 6.3.1 6.3.2 6.30 6.4 6.4.1 6.4.2 6.5 6.5.1 6.5.2 6.5.3 All 141 releases
← All changes | classes/models/FrmEntryValidate.php +111 -431 6.286.14 View file →
@@ -5,18 +5,10 @@
5 5
6 6 class FrmEntryValidate {
7 7
8 8 /**
9 - * @since 6.17
10 - *
11 - * @var array|null
12 - */
13 - private static $name_text_fields;
14 -
15 - /**
16 9 * @param array $values
17 10 * @param bool|string[] $exclude
18 - *
19 11 * @return array
20 12 */
21 13 public static function validate( $values, $exclude = false ) {
22 14 FrmEntry::sanitize_entry_post( $values );
@@ -23,12 +15,13 @@
23 15 $errors = array();
24 16
25 17 if ( ! isset( $values['form_id'] ) || ! isset( $values['item_meta'] ) ) {
26 18 $errors['form'] = __( 'There was a problem with your submission. Please try again.', 'formidable' );
19 +
27 20 return $errors;
28 21 }
29 22
30 - if ( FrmAppHelper::is_admin() && is_user_logged_in() && ( ! isset( $values[ 'frm_submit_entry_' . $values['form_id'] ] ) || ! wp_verify_nonce( $values[ 'frm_submit_entry_' . $values['form_id'] ], 'frm_submit_entry_nonce' ) ) ) { // phpcs:ignore SlevomatCodingStandard.Files.LineLength.LineTooLong
23 + if ( FrmAppHelper::is_admin() && is_user_logged_in() && ( ! isset( $values[ 'frm_submit_entry_' . $values['form_id'] ] ) || ! wp_verify_nonce( $values[ 'frm_submit_entry_' . $values['form_id'] ], 'frm_submit_entry_nonce' ) ) ) {
31 24 $frm_settings = FrmAppHelper::get_settings();
32 25 $errors['form'] = $frm_settings->admin_permission;
33 26 }
34 27
@@ -44,9 +37,9 @@
44 37 self::validate_field( $posted_field, $errors, $values, $args );
45 38 unset( $posted_field );
46 39 }
47 40
48 - if ( ! $errors ) {
41 + if ( empty( $errors ) ) {
49 42 self::spam_check( $exclude, $values, $errors );
50 43 }
51 44
52 45 /**
@@ -62,9 +55,9 @@
62 55
63 56 if ( is_array( $filtered_errors ) ) {
64 57 $errors = $filtered_errors;
65 58 } else {
66 - _doing_it_wrong( __METHOD__, 'Only arrays should be returned when using the frm_validate_entry filter.', '6.3' );
59 + _doing_it_wrong( __FUNCTION__, 'Only arrays should be returned when using the frm_validate_entry filter.', '6.3' );
67 60 }
68 61
69 62 return $errors;
70 63 }
@@ -83,15 +76,9 @@
83 76 $_POST['item_meta'] = array();
84 77 }
85 78 }
86 79
87 - /**
88 - * @param array $values
89 - *
90 - * @return void
91 - */
92 80 private static function set_item_key( &$values ) {
93 - // phpcs:ignore Universal.Operators.StrictComparisons
94 81 if ( ! isset( $values['item_key'] ) || $values['item_key'] == '' ) {
95 82 global $wpdb;
96 83 $values['item_key'] = FrmAppHelper::get_unique_key( '', $wpdb->prefix . 'frm_items', 'item_key' );
97 84 $_POST['item_key'] = $values['item_key'];
@@ -97,14 +84,8 @@
97 84 $_POST['item_key'] = $values['item_key'];
98 85 }
99 86 }
100 87
101 - /**
102 - * @param array $values
103 - * @param array|string $exclude
104 - *
105 - * @return array
106 - */
107 88 private static function get_fields_to_validate( $values, $exclude ) {
108 89 $where = apply_filters( 'frm_posted_field_ids', array( 'fi.form_id' => $values['form_id'] ) );
109 90
110 91 // Don't get subfields
@@ -110,9 +91,9 @@
110 91 // Don't get subfields
111 92 $where['fr.parent_form_id'] = array( null, 0 );
112 93
113 94 // Don't get excluded fields (like file upload fields in the ajax validation)
114 - if ( $exclude ) {
95 + if ( ! empty( $exclude ) ) {
115 96 $where['fi.type not'] = $exclude;
116 97 }
117 98
118 99 $fields = FrmField::getAll( $where, 'field_order' );
@@ -127,16 +108,8 @@
127 108 */
128 109 return apply_filters( 'frm_fields_to_validate', $fields, compact( 'values', 'exclude', 'where' ) );
129 110 }
130 111
131 - /**
132 - * @param object $posted_field
133 - * @param array $errors
134 - * @param array $values
135 - * @param array $args
136 - *
137 - * @return void
138 - */
139 112 public static function validate_field( $posted_field, &$errors, $values, $args = array() ) {
140 113 $defaults = array(
141 114 'id' => $posted_field->id,
142 115 // The id of the repeat or embed form.
@@ -146,18 +119,23 @@
146 119 // Exclude these field types from validation.
147 120 'exclude' => array(),
148 121
149 122 );
150 - $args = wp_parse_args( $args, $defaults );
151 - $value = empty( $args['parent_field_id'] ) ? ( $values['item_meta'][ $args['id'] ] ?? '' ) : $values;
123 + $args = wp_parse_args( $args, $defaults );
152 124
125 + if ( empty( $args['parent_field_id'] ) ) {
126 + $value = isset( $values['item_meta'][ $args['id'] ] ) ? $values['item_meta'][ $args['id'] ] : '';
127 + } else {
128 + // value is from a nested form
129 + $value = $values;
130 + }
131 +
153 132 // Check for values in "Other" fields
154 133 FrmEntriesHelper::maybe_set_other_validation( $posted_field, $value, $args );
155 134
156 135 self::maybe_clear_value_for_default_blank_setting( $posted_field, $value );
157 136
158 - $should_trim = is_array( $value ) && count( $value ) === 1 && isset( $value[0] ) && $posted_field->type !== 'checkbox';
159 -
137 + $should_trim = is_array( $value ) && count( $value ) == 1 && isset( $value[0] ) && $posted_field->type !== 'checkbox';
160 138 if ( $should_trim ) {
161 139 $value = reset( $value );
162 140 }
163 141
@@ -164,9 +142,8 @@
164 142 if ( ! is_array( $value ) ) {
165 143 $value = trim( $value );
166 144 }
167 145
168 - // phpcs:ignore Universal.Operators.StrictComparisons
169 146 if ( $posted_field->required == '1' && FrmAppHelper::is_empty_value( $value ) ) {
170 147 $errors[ 'field' . $args['id'] ] = FrmFieldsHelper::get_error_msg( $posted_field, 'blank' );
171 148 } elseif ( ! isset( $_POST['item_name'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
172 149 self::maybe_add_item_name( $value, $posted_field );
@@ -173,9 +150,8 @@
173 150 }
174 151
175 152 FrmEntriesHelper::set_posted_value( $posted_field, $value, $args );
176 153
177 - self::validate_options( $errors, $posted_field, $value, $args );
178 154 self::validate_field_types( $errors, $posted_field, $value, $args );
179 155
180 156 // Field might want to modify value before other parts of the system
181 157 // e.g. trim off excess values like in the case of fields with limit.
@@ -180,9 +156,8 @@
180 156 // Field might want to modify value before other parts of the system
181 157 // e.g. trim off excess values like in the case of fields with limit.
182 158 $value = apply_filters( 'frm_modify_posted_field_value', $value, $errors, $posted_field, $args );
183 159
184 - // phpcs:ignore Universal.Operators.StrictComparisons
185 160 if ( $value != '' ) {
186 161 self::validate_phone_field( $errors, $posted_field, $value, $args );
187 162 }
188 163
@@ -194,193 +169,8 @@
194 169 }
195 170 }
196 171
197 172 /**
198 - * @since 6.21
199 - *
200 - * @param array $errors
201 - * @param object $posted_field
202 - * @param array|string $value
203 - * @param array $args
204 - *
205 - * @return void
206 - */
207 - private static function validate_options( &$errors, $posted_field, $value, $args ) {
208 - if ( empty( $posted_field->options ) ) {
209 - return;
210 - }
211 -
212 - $option_is_valid = self::option_is_valid( $posted_field, $value, $posted_field->options );
213 -
214 - /**
215 - * @since 6.21
216 - *
217 - * @param bool $option_is_valid
218 - * @param array|string $value
219 - * @param object $field
220 - */
221 - $option_is_valid = (bool) apply_filters( 'frm_option_is_valid', $option_is_valid, $value, $posted_field );
222 -
223 - if ( ! $option_is_valid ) {
224 - $errors[ 'field' . $args['id'] ] = FrmFieldsHelper::get_error_msg( $posted_field, 'invalid' );
225 - }
226 - }
227 -
228 - /**
229 - * Validate that value matches one of the options for the field.
230 - *
231 - * @since 6.21
232 - *
233 - * @param stdClass $field
234 - * @param array|string $value
235 - * @param array $options
236 - *
237 - * @return bool
238 - */
239 - private static function option_is_valid( $field, $value, $options ) { // phpcs:ignore SlevomatCodingStandard.Complexity.Cognitive.ComplexityTooHigh
240 - if ( '' === $value ) {
241 - return true;
242 - }
243 -
244 - $field_object = FrmFieldFactory::get_field_type( $field->type, $field );
245 -
246 - if ( ! $field_object->field_type_has_options_settings() ) {
247 - return true;
248 - }
249 -
250 - if ( in_array( $field->type, array( 'likert', 'ranking' ), true ) ) {
251 - // Ignore these field types automatically.
252 - return true;
253 - }
254 -
255 - if ( 'product' === $field->type && 'user_def' === FrmField::get_option( $field, 'data_type' ) ) {
256 - return true;
257 - }
258 -
259 - if ( ! empty( $field->field_options['post_field'] ) ) {
260 - return true;
261 - }
262 -
263 - $value = (array) $value;
264 -
265 - foreach ( $value as $current_value ) {
266 - $match = false;
267 -
268 - foreach ( $options as $key => $option ) {
269 - if ( str_starts_with( $key, 'other_' ) ) {
270 - // Always return true if an other option is found.
271 - return true;
272 - }
273 -
274 - if ( is_array( $option ) ) {
275 - $separate_value = FrmField::get_option( $field, 'separate_value' );
276 - $option_value = $separate_value ? $option['value'] : $option['label'];
277 - } else {
278 - $option_value = $option;
279 - }
280 -
281 - /**
282 - * @var string $current_value
283 - */
284 - $match = trim( $current_value ) === trim( $option_value );
285 -
286 - if ( $match ) {
287 - break;
288 - }
289 -
290 - $match = trim( $current_value ) === trim( do_shortcode( $option_value ) );
291 -
292 - if ( $match ) {
293 - break;
294 - }
295 -
296 - $match = self::is_filtered_match( $current_value, $option_value );
297 -
298 - if ( $match ) {
299 - break;
300 - }
301 -
302 - if ( ! is_numeric( $current_value ) ) {
303 - continue;
304 - }
305 -
306 - $match = (int) $current_value === (int) $option_value;
307 -
308 - if ( $match ) {
309 - break;
310 - }
311 - }//end foreach
312 -
313 - if ( ! $match ) {
314 - return self::options_are_dynamic_based_on_hook( $field, $value );
315 - }
316 - }//end foreach
317 -
318 - return true;
319 - }
320 -
321 - /**
322 - * Make an extra check after passing $option_value through the_content filter.
323 - * This is to help catch cases where the option's formatting has been modified using
324 - * the_content filter.
325 - *
326 - * @since 6.22
327 - *
328 - * @param string $value
329 - * @param string $option_value
330 - *
331 - * @return bool
332 - */
333 - private static function is_filtered_match( $value, $option_value ) {
334 - // First remove the wpautop filter so it doesn't add extra tags to $option_value.
335 - $filter_priority = has_filter( 'the_content', 'wpautop' );
336 -
337 - if ( is_numeric( $filter_priority ) ) {
338 - remove_filter( 'the_content', 'wpautop', $filter_priority );
339 - }
340 -
341 - $filtered_option = apply_filters( 'the_content', $option_value );
342 -
343 - if ( is_numeric( $filter_priority ) ) {
344 - add_filter( 'the_content', 'wpautop', $filter_priority );
345 - }
346 -
347 - return trim( $value ) === trim( $filtered_option );
348 - }
349 -
350 - /**
351 - * Do not validate options if they have been modified with a hook.
352 - * This is to help avoid issues where the options could be based on a URL param for example.
353 - *
354 - * @since 6.21
355 - *
356 - * @param object $field_object The field object.
357 - * @param array|string $value The value to validate.
358 - *
359 - * @return bool
360 - */
361 - private static function options_are_dynamic_based_on_hook( $field_object, $value ) {
362 - $values = (array) $field_object;
363 - $values['value'] = $value;
364 - FrmFieldsHelper::prepare_new_front_field( $values, $field_object );
365 -
366 - $separate_value = FrmField::get_option( $field_object, 'separate_value' );
367 - $map_callback = function ( $option ) use ( $separate_value ) {
368 - if ( is_array( $option ) ) {
369 - $option_value = $separate_value ? $option['value'] : $option['label'];
370 - } else {
371 - $option_value = $option;
372 - }
373 - return do_shortcode( $option_value );
374 - };
375 -
376 - $values_options = array_map( $map_callback, $values['options'] );
377 - $field_object_options = array_map( $map_callback, $field_object->options );
378 -
379 - return $values_options !== $field_object_options;
380 - }
381 -
382 - /**
383 173 * Maybe add item_name to $_POST to save it in items table.
384 174 *
385 175 * @since 5.2.02
386 176 *
@@ -385,14 +175,11 @@
385 175 * @since 5.2.02
386 176 *
387 177 * @param array|string $value Field value.
388 178 * @param object $field Field object.
389 - *
390 - * @return void
391 179 */
392 180 private static function maybe_add_item_name( $value, $field ) {
393 181 $item_name = false;
394 -
395 182 if ( 'name' === $field->type ) {
396 183 $field_obj = FrmFieldFactory::get_field_object( $field );
397 184 $item_name = $field_obj->get_display_value( $value );
398 185 } elseif ( 'text' === $field->type ) {
@@ -409,14 +196,11 @@
409 196 * Set $value to an empty string if it matches its label
410 197 *
411 198 * @param object $field
412 199 * @param string $value
413 - *
414 - * @return void
415 200 */
416 201 private static function maybe_clear_value_for_default_blank_setting( $field, &$value ) {
417 202 $position = FrmField::get_option( $field, 'label' );
418 -
419 203 if ( ! $position ) {
420 204 $position = FrmStylesController::get_style_val( 'position', $field->form_id );
421 205 }
422 206
@@ -424,16 +208,8 @@
424 208 $value = '';
425 209 }
426 210 }
427 211
428 - /**
429 - * @param array $errors
430 - * @param object $posted_field
431 - * @param mixed $value
432 - * @param array $args
433 - *
434 - * @return void
435 - */
436 212 public static function validate_field_types( &$errors, $posted_field, $value, $args ) {
437 213 $field_obj = FrmFieldFactory::get_field_object( $posted_field );
438 214 $args['value'] = $value;
439 215 $args['errors'] = $errors;
@@ -438,41 +214,24 @@
438 214 $args['value'] = $value;
439 215 $args['errors'] = $errors;
440 216
441 217 $new_errors = $field_obj->validate( $args );
442 -
443 - if ( $new_errors ) {
218 + if ( ! empty( $new_errors ) ) {
444 219 $errors = array_merge( $errors, $new_errors );
445 220 }
446 221 }
447 222
448 - /**
449 - * @param array $errors
450 - * @param object $field
451 - * @param string $value
452 - * @param array $args
453 - *
454 - * @return void
455 - */
456 223 public static function validate_phone_field( &$errors, $field, $value, $args ) {
457 - $format_value = FrmField::get_option( $field, 'format' );
224 + if ( $field->type === 'phone' || ( $field->type === 'text' && FrmField::is_option_true_in_object( $field, 'format' ) ) ) {
458 225
459 - if ( $field->type !== 'phone' && ( $field->type !== 'text' || ! $format_value || FrmCurrencyHelper::is_currency_format( $format_value ) ) ) {
460 - return;
461 - }
226 + $pattern = self::phone_format( $field );
462 227
463 - $pattern = self::phone_format( $field );
464 -
465 - if ( ! preg_match( $pattern, $value ) ) {
466 - $errors[ 'field' . $args['id'] ] = FrmFieldsHelper::get_error_msg( $field, 'invalid' );
228 + if ( ! preg_match( $pattern, $value ) ) {
229 + $errors[ 'field' . $args['id'] ] = FrmFieldsHelper::get_error_msg( $field, 'invalid' );
230 + }
467 231 }
468 232 }
469 233
470 - /**
471 - * @param object $field
472 - *
473 - * @return string
474 - */
475 234 public static function phone_format( $field ) {
476 235 if ( FrmField::is_option_empty( $field, 'format' ) ) {
477 236 $pattern = self::default_phone_format();
478 237 } else {
@@ -484,19 +243,19 @@
484 243 $pattern = html_entity_decode( $pattern );
485 244 $pattern = apply_filters( 'frm_phone_pattern', $pattern, $field );
486 245
487 246 // Create a regexp if format is not already a regexp
488 - if ( ! str_starts_with( $pattern, '^' ) ) {
247 + if ( strpos( $pattern, '^' ) !== 0 ) {
489 248 $pattern = self::create_regular_expression_from_format( $pattern );
490 249 }
491 250
492 - return '/' . $pattern . '/';
251 + $pattern = '/' . $pattern . '/';
252 +
253 + return $pattern;
493 254 }
494 255
495 256 /**
496 257 * @since 3.01
497 - *
498 - * @return string
499 258 */
500 259 private static function default_phone_format() {
501 260 return '^((\+\d{1,3}(-|.| )?\(?\d\)?(-| |.)?\d{1,5})|(\(?\d{2,6}\)?))(-|.| )?(\d{3,4})(-|.| )?(\d{4})(( x| ext)\d{1,5}){0,1}$';
502 261 }
@@ -522,14 +281,13 @@
522 281 $pattern = str_replace( 'a', '[a-zA-Z]', $pattern );
523 282 $pattern = str_replace( '*', 'w', $pattern );
524 283 $pattern = str_replace( '/', '\/', $pattern );
525 284
526 - if ( str_contains( $pattern, '\?' ) ) {
285 + if ( strpos( $pattern, '\?' ) !== false ) {
527 286 $parts = explode( '\?', $pattern );
528 287 $pattern = '';
529 -
530 288 foreach ( $parts as $part ) {
531 - if ( ! $pattern ) {
289 + if ( empty( $pattern ) ) {
532 290 $pattern .= $part;
533 291 } else {
534 292 $pattern .= '(' . $part . ')?';
535 293 }
@@ -534,45 +292,33 @@
534 292 $pattern .= '(' . $part . ')?';
535 293 }
536 294 }
537 295 }
296 + $pattern = '^' . $pattern . '$';
538 297
539 - return '^' . $pattern . '$';
298 + return $pattern;
540 299 }
541 300
542 301 /**
543 - * Check for spam.
302 + * Check for spam
544 303 *
545 304 * @param bool $exclude
546 305 * @param array $values
547 306 * @param array $errors By reference.
548 - *
549 - * @return void
550 307 */
551 308 public static function spam_check( $exclude, $values, &$errors ) {
552 - if ( defined( 'WP_IMPORTING' ) && WP_IMPORTING ) {
553 - // Do not check spam on importing.
309 + if ( ! empty( $exclude ) || empty( $values['item_meta'] ) || ! empty( $errors ) ) {
310 + // only check spam if there are no other errors
554 311 return;
555 312 }
556 313
557 - if ( $exclude || empty( $values['item_meta'] ) || $errors ) {
558 - // Only check spam if there are no other errors
559 - return;
560 - }
561 -
562 314 $antispam_check = self::is_antispam_check( $values['form_id'] );
563 - $spam_msg = FrmAntiSpamController::get_default_spam_message();
564 -
565 315 if ( is_string( $antispam_check ) ) {
566 316 $errors['spam'] = $antispam_check;
567 317 } elseif ( self::is_honeypot_spam( $values ) || self::is_spam_bot() ) {
568 - $errors['spam'] = $spam_msg;
569 - } else {
570 - $is_spam = FrmAntiSpamController::is_spam( $values );
571 -
572 - if ( $is_spam ) {
573 - $errors['spam'] = $is_spam;
574 - }
318 + $errors['spam'] = __( 'Your entry appears to be spam!', 'formidable' );
319 + } elseif ( self::blacklist_check( $values ) ) {
320 + $errors['spam'] = __( 'Your entry appears to be blocked spam!', 'formidable' );
575 321 }
576 322
577 323 if ( isset( $errors['spam'] ) || self::form_is_in_progress( $values ) ) {
578 324 return;
@@ -588,17 +334,14 @@
588 334 *
589 335 * @since 5.0.13
590 336 *
591 337 * @param array $values The values.
592 - *
593 338 * @return bool
594 339 */
595 340 private static function form_is_in_progress( $values ) {
596 - // phpcs:disable Generic.WhiteSpace.ScopeIndent
597 341 return FrmAppHelper::pro_is_installed() &&
598 342 ( isset( $values[ 'frm_page_order_' . $values['form_id'] ] ) || FrmAppHelper::get_post_param( 'frm_next_page' ) ) &&
599 343 FrmField::get_all_types_in_form( $values['form_id'], 'break' );
600 - // phpcs:enable Generic.WhiteSpace.ScopeIndent
601 344 }
602 345
603 346 /**
604 347 * @param int $form_id
@@ -611,9 +354,8 @@
611 354 }
612 355
613 356 /**
614 357 * @param array $values
615 - *
616 358 * @return bool
617 359 */
618 360 private static function is_honeypot_spam( $values ) {
619 361 $honeypot = new FrmHoneypot( $values['form_id'] );
@@ -624,47 +366,83 @@
624 366 * @return bool
625 367 */
626 368 private static function is_spam_bot() {
627 369 $ip = FrmAppHelper::get_ip_address();
370 +
628 371 return empty( $ip );
629 372 }
630 373
631 374 /**
632 375 * @param array $values
633 - *
634 376 * @return bool
635 377 */
636 378 private static function is_akismet_spam( $values ) {
637 379 global $wpcom_api_key;
638 - return is_callable( 'Akismet::http_post' ) && ( get_option( 'wordpress_api_key' ) || $wpcom_api_key ) && self::akismet( $values );
380 +
381 + return ( is_callable( 'Akismet::http_post' ) && ( get_option( 'wordpress_api_key' ) || $wpcom_api_key ) && self::akismet( $values ) );
639 382 }
640 383
641 384 /**
642 385 * @param int $form_id
643 - *
644 386 * @return bool
645 387 */
646 388 private static function is_akismet_enabled_for_user( $form_id ) {
647 389 $form = FrmForm::getOne( $form_id );
648 - return ! empty( $form->options['akismet'] ) && ( $form->options['akismet'] !== 'logged' || ! is_user_logged_in() );
390 +
391 + return ( ! empty( $form->options['akismet'] ) && ( $form->options['akismet'] !== 'logged' || ! is_user_logged_in() ) );
649 392 }
650 393
394 + public static function blacklist_check( $values ) {
395 + if ( ! apply_filters( 'frm_check_blacklist', true, $values ) ) {
396 + return false;
397 + }
398 +
399 + $mod_keys = trim( self::get_disallowed_words() );
400 + if ( empty( $mod_keys ) ) {
401 + return false;
402 + }
403 +
404 + $content = FrmEntriesHelper::entry_array_to_string( $values );
405 +
406 + self::prepare_values_for_spam_check( $values );
407 + $ip = FrmAppHelper::get_ip_address();
408 + $user_agent = FrmAppHelper::get_server_value( 'HTTP_USER_AGENT' );
409 + $user_info = self::get_spam_check_user_info( $values );
410 +
411 + return self::check_disallowed_words( $user_info['comment_author'], $user_info['comment_author_email'], $user_info['comment_author_url'], $content, $ip, $user_agent );
412 + }
413 +
651 414 /**
652 - * Checks spam using WordPress disallowed words and Frm denylist.
415 + * For WP 5.5 compatibility.
653 416 *
654 - * @param array $values Entry values.
417 + * @since 4.06.02
418 + */
419 + private static function check_disallowed_words( $author, $email, $url, $content, $ip, $user_agent ) {
420 + if ( function_exists( 'wp_check_comment_disallowed_list' ) ) {
421 + return wp_check_comment_disallowed_list( $author, $email, $url, $content, $ip, $user_agent );
422 + }
423 + // phpcs:ignore WordPress.WP.DeprecatedFunctions.wp_blacklist_checkFound
424 + return wp_blacklist_check( $author, $email, $url, $content, $ip, $user_agent );
425 + }
426 +
427 + /**
428 + * For WP 5.5 compatibility.
655 429 *
656 - * @return bool
430 + * @since 4.06.02
657 431 */
658 - public static function blacklist_check( $values ) {
659 - return FrmAntiSpamController::contains_wp_disallowed_words( $values ) || FrmAntiSpamController::is_denylist_spam( $values );
432 + private static function get_disallowed_words() {
433 + $keys = get_option( 'disallowed_keys' );
434 + if ( false === $keys ) {
435 + // Fallback for WP < 5.5.
436 + // phpcs:ignore WordPress.WP.DeprecatedParameterValues.Found
437 + $keys = get_option( 'blacklist_keys' );
438 + }
439 + return $keys;
660 440 }
661 441
662 442 /**
663 443 * Check entries for Akismet spam
664 444 *
665 - * @param array $values Entry values.
666 - *
667 445 * @return bool true if is spam
668 446 */
669 447 public static function akismet( $values ) {
670 448 if ( empty( $values['item_meta'] ) ) {
@@ -687,18 +465,13 @@
687 465
688 466 $query_string = _http_build_query( $datas, '', '&' );
689 467 $response = Akismet::http_post( $query_string, 'comment-check' );
690 468
691 - return is_array( $response ) && $response[1] === 'true';
469 + return ( is_array( $response ) && $response[1] === 'true' );
692 470 }
693 471
694 472 /**
695 473 * @since 2.0
696 - *
697 - * @param array $datas The array of values being sent to Akismet.
698 - * @param array $values Entry values.
699 - *
700 - * @return void
701 474 */
702 475 private static function parse_akismet_array( &$datas, $values ) {
703 476 self::add_site_info_to_akismet( $datas );
704 477 self::add_server_values_to_akismet( $datas );
@@ -709,13 +482,8 @@
709 482 self::add_user_info_to_akismet( $datas, $values );
710 483 self::add_comment_content_to_akismet( $datas, $values );
711 484 }
712 485
713 - /**
714 - * @param array $datas
715 - *
716 - * @return void
717 - */
718 486 private static function add_site_info_to_akismet( &$datas ) {
719 487 $datas['blog'] = FrmAppHelper::site_url();
720 488 $datas['user_ip'] = preg_replace( '/[^0-9., ]/', '', FrmAppHelper::get_ip_address() );
721 489 $datas['user_agent'] = FrmAppHelper::get_server_value( 'HTTP_USER_AGENT' );
@@ -727,14 +495,8 @@
727 495 $datas['is_test'] = 'true';
728 496 }
729 497 }
730 498
731 - /**
732 - * @param array $datas
733 - * @param array $values
734 - *
735 - * @return void
736 - */
737 499 private static function add_user_info_to_akismet( &$datas, $values ) {
738 500 $user_info = self::get_spam_check_user_info( $values );
739 501 $datas = $datas + $user_info;
740 502
@@ -746,15 +508,13 @@
746 508 /**
747 509 * Gets user info for Akismet spam check.
748 510 *
749 511 * @since 5.0.13 Separate code for guest. Handle value of embedded|repeater.
750 - * @since 6.21 This changed from private to public.
751 512 *
752 513 * @param array $values Entry values after running through {@see FrmEntryValidate::prepare_values_for_spam_check()}.
753 - *
754 514 * @return array
755 515 */
756 - public static function get_spam_check_user_info( $values ) {
516 + private static function get_spam_check_user_info( $values ) {
757 517 if ( ! is_user_logged_in() ) {
758 518 return self::get_spam_check_user_info_for_guest( $values );
759 519 }
760 520
@@ -774,9 +534,8 @@
774 534 *
775 535 * @since 5.0.13
776 536 *
777 537 * @param array $values Entry values after flattened.
778 - *
779 538 * @return array
780 539 */
781 540 private static function get_spam_check_user_info_for_guest( $values ) {
782 541 $datas = array(
@@ -808,10 +567,8 @@
808 567 *
809 568 * @param array $datas Guest data.
810 569 * @param array $values The values.
811 570 * @param int|null $custom_index Custom index (or field ID).
812 - *
813 - * @return void
814 571 */
815 572 private static function recursive_add_akismet_guest_info( &$datas, $values, $custom_index = null ) {
816 573 foreach ( $values as $index => $value ) {
817 574 if ( ! $datas['missing_keys'] ) {
@@ -824,19 +581,15 @@
824 581 continue;
825 582 }
826 583
827 584 $field_id = ! is_null( $custom_index ) ? $custom_index : $index;
828 -
829 585 foreach ( $datas['missing_keys'] as $key_index => $key ) {
830 - $found = self::is_akismet_guest_info_value( $key, $value, $field_id, $datas['name_field_ids'], $values );
831 -
832 - if ( ! $found ) {
833 - continue;
586 + $found = self::is_akismet_guest_info_value( $key, $value, $field_id, $datas['name_field_ids'] );
587 + if ( $found ) {
588 + $datas[ $key ] = $value;
589 + $datas['frm_duplicated'][] = $field_id;
590 + unset( $datas['missing_keys'][ $key_index ] );
834 591 }
835 -
836 - $datas[ $key ] = $value;
837 - $datas['frm_duplicated'][] = $field_id;
838 - unset( $datas['missing_keys'][ $key_index ] );
839 592 }
840 593 }//end foreach
841 594 }
842 595
@@ -848,13 +601,11 @@
848 601 * @param string $key Guest info key.
849 602 * @param string $value Value to check.
850 603 * @param int $field_id Field ID.
851 604 * @param array $name_field_ids Name field IDs.
852 - * @param array $values Array of posted values.
853 - *
854 605 * @return bool
855 606 */
856 - private static function is_akismet_guest_info_value( $key, &$value, $field_id, $name_field_ids, $values ) {
607 + private static function is_akismet_guest_info_value( $key, $value, $field_id, $name_field_ids ) {
857 608 if ( ! $value || is_numeric( $value ) ) {
858 609 return false;
859 610 }
860 611
@@ -859,79 +610,24 @@
859 610 }
860 611
861 612 switch ( $key ) {
862 613 case 'comment_author_email':
863 - return str_contains( $value, '@' ) && is_email( $value );
614 + return strpos( $value, '@' ) && is_email( $value );
864 615
865 616 case 'comment_author_url':
866 - return str_starts_with( $value, 'http' );
617 + return 0 === strpos( $value, 'http' );
867 618
868 619 case 'comment_author':
869 - if ( $name_field_ids && in_array( $field_id, $name_field_ids, true ) ) {
620 + if ( $name_field_ids ) {
870 621 // If there is name field in the form, we should always use it as author name.
871 - return true;
622 + return in_array( $field_id, $name_field_ids, true );
872 623 }
624 + return strlen( $value ) < 200;
625 + }
873 626
874 - $form_id = FrmAppHelper::get_post_param( 'form_id', 0, 'absint' );
875 - $fields = self::get_name_text_fields( $form_id );
876 -
877 - foreach ( $fields as $index => $field ) {
878 - if ( 'Name' !== $field->name ) {
879 - continue;
880 - }
881 -
882 - if ( isset( $fields[ $index + 1 ] ) && 'Last' === $fields[ $index + 1 ]->name ) {
883 - if ( empty( $values[ absint( $fields[ $index + 1 ]->id ) ] ) ) {
884 - continue;
885 - }
886 -
887 - $value .= ' ' . $values[ $fields[ $index + 1 ]->id ];
888 - return true;
889 - }
890 - }
891 - }//end switch
892 -
893 627 return false;
894 628 }
895 629
896 - /**
897 - * Returns fields that have 'Name' and 'Last' as their name.
898 - *
899 - * @since 6.17
900 - *
901 - * @param int $form_id
902 - *
903 - * @return array
904 - */
905 - private static function get_name_text_fields( $form_id ) {
906 - $name_text_fields_is_initialized = is_array( self::$name_text_fields );
907 -
908 - if ( $name_text_fields_is_initialized && isset( self::$name_text_fields[ $form_id ] ) ) {
909 - return self::$name_text_fields[ $form_id ];
910 - }
911 -
912 - if ( ! $name_text_fields_is_initialized ) {
913 - self::$name_text_fields = array();
914 - }
915 - self::$name_text_fields[ $form_id ] = FrmDb::get_results(
916 - 'frm_fields',
917 - array(
918 - 'form_id' => $form_id,
919 - 'type' => 'text',
920 - 'name' => array( 'Name', 'Last' ),
921 - ),
922 - 'id,name',
923 - array( 'order_by' => 'field_order ASC' )
924 - );
925 -
926 - return self::$name_text_fields[ $form_id ];
927 - }
928 -
929 - /**
930 - * @param array $datas
931 - *
932 - * @return void
933 - */
934 630 private static function add_server_values_to_akismet( &$datas ) {
935 631 foreach ( $_SERVER as $key => $value ) {
936 632 $include_value = is_string( $value ) && ! preg_match( '/^HTTP_COOKIE/', $key ) && preg_match( '/^(HTTP_|REMOTE_ADDR|REQUEST_URI|DOCUMENT_URI)/', $key );
937 633
@@ -949,10 +645,8 @@
949 645 * @since 5.0.09
950 646 *
951 647 * @param array $datas The array of values being sent to Akismet.
952 648 * @param array $values Entry values.
953 - *
954 - * @return void
955 649 */
956 650 private static function add_comment_content_to_akismet( &$datas, $values ) {
957 651 if ( isset( $datas['frm_duplicated'] ) ) {
958 652 foreach ( $datas['frm_duplicated'] as $index ) {
@@ -973,28 +667,22 @@
973 667 *
974 668 * @since 5.0.09
975 669 *
976 670 * @param array $values Entry values.
977 - *
978 - * @return void
979 671 */
980 672 private static function skip_adding_values_to_akismet( &$values ) {
981 673 $skipped_fields = self::get_akismet_skipped_field_ids( $values );
982 -
983 674 foreach ( $skipped_fields as $skipped_field ) {
984 675 if ( ! isset( $values['item_meta'][ $skipped_field->id ] ) ) {
985 676 continue;
986 677 }
987 678
988 - if ( ! self::should_really_skip_field( $skipped_field, $values ) ) {
989 - continue;
679 + if ( self::should_really_skip_field( $skipped_field, $values ) ) {
680 + unset( $values['item_meta'][ $skipped_field->id ] );
681 + if ( isset( $values['item_meta']['other'][ $skipped_field->id ] ) ) {
682 + unset( $values['item_meta']['other'][ $skipped_field->id ] );
683 + }
990 684 }
991 -
992 - unset( $values['item_meta'][ $skipped_field->id ] );
993 -
994 - if ( isset( $values['item_meta']['other'][ $skipped_field->id ] ) ) {
995 - unset( $values['item_meta']['other'][ $skipped_field->id ] );
996 - }
997 685 }
998 686 }
999 687
1000 688 /**
@@ -1003,9 +691,8 @@
1003 691 * @since 5.02.04
1004 692 *
1005 693 * @param object $field_data Object contains `id` and `options`.
1006 694 * @param array $values Entry values.
1007 - *
1008 695 * @return bool
1009 696 */
1010 697 private static function should_really_skip_field( $field_data, $values ) {
1011 698 if ( empty( $field_data->options ) ) {
@@ -1013,18 +700,18 @@
1013 700 return true;
1014 701 }
1015 702
1016 703 FrmAppHelper::unserialize_or_decode( $field_data->options );
1017 -
1018 704 if ( ! $field_data->options ) {
1019 705 // Check if an error happens when unserializing, or empty options.
1020 706 return true;
1021 707 }
1022 708
1023 - $last_key = array_key_last( $field_data->options );
709 + end( $field_data->options );
710 + $last_key = key( $field_data->options );
1024 711
1025 712 // If a choice field has no Other option.
1026 - if ( is_numeric( $last_key ) || ! str_starts_with( $last_key, 'other_' ) ) {
713 + if ( is_numeric( $last_key ) || 0 !== strpos( $last_key, 'other_' ) ) {
1027 714 return true;
1028 715 }
1029 716
1030 717 // If a choice field has Other option, but Other is not selected.
@@ -1033,10 +720,9 @@
1033 720 }
1034 721
1035 722 // Check if submitted value is same as one of field option.
1036 723 foreach ( $field_data->options as $option ) {
1037 - $option_value = is_array( $option ) ? ( $option['value'] ?? '' ) : $option;
1038 -
724 + $option_value = ! is_array( $option ) ? $option : ( isset( $option['value'] ) ? $option['value'] : '' );
1039 725 if ( $values['item_meta']['other'][ $field_data->id ] === $option_value ) {
1040 726 return true;
1041 727 }
1042 728 }
@@ -1051,9 +737,8 @@
1051 737 * @since 5.0.13 Move out get_all_form_ids_and_flatten_meta() call and get `form_ids` from `$values`.
1052 738 * @since 5.2.04 This method returns array of object contains `id` and `options` instead of array of `id` only.
1053 739 *
1054 740 * @param array $values Entry values after running through {@see FrmEntryValidate::prepare_values_for_spam_check()}.
1055 - *
1056 741 * @return array
1057 742 */
1058 743 private static function get_akismet_skipped_field_ids( $values ) {
1059 744 if ( empty( $values['form_ids'] ) ) {
@@ -1076,16 +761,14 @@
1076 761 /**
1077 762 * Prepares values array for spam check.
1078 763 *
1079 764 * @since 5.0.13
1080 - * @since 6.21 This changed from private to public.
1081 765 *
1082 766 * @param array $values Entry values.
1083 - *
1084 - * @return void
1085 767 */
1086 - public static function prepare_values_for_spam_check( &$values ) {
1087 - $values['form_ids'] = self::get_all_form_ids_and_flatten_meta( $values );
768 + private static function prepare_values_for_spam_check( &$values ) {
769 + $form_ids = self::get_all_form_ids_and_flatten_meta( $values );
770 + $values['form_ids'] = $form_ids;
1088 771 }
1089 772
1090 773 /**
1091 774 * Gets all form IDs (include child form IDs) and flatten item_meta array. Used for skipping values sent to Akismet.
@@ -1094,17 +777,15 @@
1094 777 * @since 5.0.09
1095 778 * @since 5.0.13 Convert name field value to string.
1096 779 *
1097 780 * @param array $values Entry values.
1098 - *
1099 781 * @return array Form IDs.
1100 782 */
1101 - private static function get_all_form_ids_and_flatten_meta( &$values ) { // phpcs:ignore SlevomatCodingStandard.Complexity.Cognitive.ComplexityTooHigh
783 + private static function get_all_form_ids_and_flatten_meta( &$values ) {
1102 784 $values['name_field_ids'] = array();
1103 785
1104 786 // Blacklist check for File field in the old version doesn't contain `form_id`.
1105 787 $form_ids = isset( $values['form_id'] ) ? array( absint( $values['form_id'] ) ) : array();
1106 -
1107 788 foreach ( $values['item_meta'] as $field_id => $value ) {
1108 789 if ( ! is_numeric( $field_id ) ) {
1109 790 // Maybe `other`.
1110 791 continue;
@@ -1138,15 +819,14 @@
1138 819 }
1139 820
1140 821 // Convert name array to string.
1141 822 if ( isset( $subsubvalue['first'] ) && isset( $subsubvalue['last'] ) ) {
1142 - $subsubvalue = trim( implode( ' ', $subsubvalue ) );
823 + $subsubvalue = trim( implode( ' ', $subsubvalue ) );
824 +
1143 825 $values['name_field_ids'][] = $subsubindex;
1144 826 }
1145 827
1146 - if ( is_array( $values['item_meta'][ $subsubindex ] ) ) {
1147 - $values['item_meta'][ $subsubindex ][] = $subsubvalue;
1148 - }
828 + $values['item_meta'][ $subsubindex ][] = $subsubvalue;
1149 829 }
1150 830 }//end foreach
1151 831
1152 832 unset( $values['item_meta'][ $field_id ] );