PluginProbe
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More / 6.2
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More v6.2
6.35 6.34 6.33.1 6.33 6.32.1 6.32 6.31 6.25 6.25.1 6.26 6.26.1 6.27 6.28 6.29 6.3 6.3.1 6.3.2 6.30 6.4 6.4.1 6.4.2 6.5 6.5.1 6.5.2 6.5.3 All 141 releases
← All changes | classes/models/FrmEntryMeta.php +85 -266 6.356.2 View file →
@@ -5,24 +5,18 @@
5 5
6 6 class FrmEntryMeta {
7 7
8 8 /**
9 - * @since 6.35 Added the $field parameter.
10 - *
11 - * @param int $entry_id
12 - * @param int $field_id
13 - * @param string $meta_key usually set to '' as this parameter is no longer used.
14 - * @param mixed $meta_value
15 - * @param stdClass|null $field The field $field_id belongs to, when the caller already has
16 - * it loaded. Looked up here when it is not passed.
17 - *
18 - * @return int
9 + * @param int $entry_id
10 + * @param int $field_id
11 + * @param string $meta_key usually set to '' as this parameter is no longer used.
12 + * @param mixed $meta_value
19 13 */
20 - public static function add_entry_meta( $entry_id, $field_id, $meta_key, $meta_value, $field = null ) {
14 + public static function add_entry_meta( $entry_id, $field_id, $meta_key, $meta_value ) {
21 15 global $wpdb;
22 16
23 17 if ( FrmAppHelper::is_empty_value( $meta_value ) ) {
24 - // Don't save blank fields
18 + // don't save blank fields
25 19 return 0;
26 20 }
27 21
28 22 $new_values = array(
@@ -31,34 +25,33 @@
31 25 'field_id' => $field_id,
32 26 'created_at' => current_time( 'mysql', 1 ),
33 27 );
34 28
35 - self::set_value_before_save( $new_values, $field );
36 - $new_values = apply_filters( 'frm_add_entry_meta', $new_values );
29 + self::set_value_before_save( $new_values );
30 + $new_values = apply_filters( 'frm_add_entry_meta', $new_values );
31 +
37 32 $query_results = $wpdb->insert( $wpdb->prefix . 'frm_item_metas', $new_values );
38 33
39 34 if ( $query_results ) {
40 35 self::clear_cache();
41 36 wp_cache_delete( $entry_id, 'frm_entry' );
42 - return $wpdb->insert_id;
37 + $id = $wpdb->insert_id;
38 + } else {
39 + $id = 0;
43 40 }
44 41
45 - return 0;
42 + return $id;
46 43 }
47 44
48 45 /**
49 - * @since 6.35 Added the $field parameter.
46 + * @param int $entry_id
47 + * @param int $field_id
48 + * @param string $meta_key deprecated
49 + * @param array|string $meta_value
50 50 *
51 - * @param int $entry_id
52 - * @param int $field_id
53 - * @param string $meta_key Deprecated.
54 - * @param array|string $meta_value
55 - * @param stdClass|null $field The field $field_id belongs to, when the caller already has
56 - * it loaded. Looked up here when it is not passed.
57 - *
58 - * @return bool|int
51 + * @return bool|false|int
59 52 */
60 - public static function update_entry_meta( $entry_id, $field_id, $meta_key, $meta_value, $field = null ) {
53 + public static function update_entry_meta( $entry_id, $field_id, $meta_key, $meta_value ) {
61 54 if ( ! $field_id ) {
62 55 return false;
63 56 }
64 57
@@ -69,15 +62,14 @@
69 62 'field_id' => $field_id,
70 63 );
71 64 $where_values = $values;
72 65 $values['meta_value'] = $meta_value;
73 - self::set_value_before_save( $values, $field );
66 + self::set_value_before_save( $values );
74 67 $values = apply_filters( 'frm_update_entry_meta', $values );
75 68
76 69 if ( is_array( $values['meta_value'] ) ) {
77 70 $values['meta_value'] = array_filter( $values['meta_value'], 'FrmAppHelper::is_not_empty_value' );
78 71 }
79 -
80 72 $meta_value = maybe_serialize( $values['meta_value'] );
81 73
82 74 wp_cache_delete( $entry_id, 'frm_entry' );
83 75 self::clear_cache();
@@ -86,36 +78,20 @@
86 78 }
87 79
88 80 /**
89 81 * @since 3.0
90 - * @since 6.35 Added the $field parameter.
91 - *
92 - * @param array $values
93 - * @param stdClass|null $field The field for $values['field_id'], when the caller already has
94 - * it loaded. Looked up here when it is not passed.
95 - *
96 - * @return void
97 82 */
98 - private static function set_value_before_save( &$values, $field = null ) {
99 - if ( ! is_object( $field ) ) {
100 - $field = FrmField::getOne( $values['field_id'] );
101 - }
83 + private static function set_value_before_save( &$values ) {
84 + $field = FrmField::getOne( $values['field_id'] );
85 + if ( $field ) {
86 + $field_obj = FrmFieldFactory::get_field_object( $field );
102 87
103 - if ( ! $field ) {
104 - return;
88 + $values['meta_value'] = $field_obj->set_value_before_save( $values['meta_value'] );
105 89 }
106 -
107 - $field_obj = FrmFieldFactory::get_field_object( $field );
108 - $values['meta_value'] = $field_obj->set_value_before_save( $values['meta_value'] );
109 90 }
110 91
111 92 /**
112 93 * @since 3.0
113 - *
114 - * @param array $atts
115 - * @param mixed $value
116 - *
117 - * @return void
118 94 */
119 95 private static function get_value_to_save( $atts, &$value ) {
120 96 if ( is_object( $atts['field'] ) ) {
121 97 $field_obj = FrmFieldFactory::get_field_object( $atts['field'] );
@@ -130,19 +106,13 @@
130 106
131 107 $value = apply_filters( 'frm_prepare_data_before_db', $value, $atts['field_id'], $atts['entry_id'], array( 'field' => $atts['field'] ) );
132 108 }
133 109
134 - /**
135 - * @param int|string $entry_id
136 - * @param array $values Either indexed by field ID or field key.
137 - *
138 - * @return void
139 - */
140 110 public static function update_entry_metas( $entry_id, $values ) {
141 111 global $wpdb;
142 112
143 - $previous_field_ids = FrmDb::get_col(
144 - 'frm_item_metas',
113 + $prev_values = FrmDb::get_col(
114 + $wpdb->prefix . 'frm_item_metas',
145 115 array(
146 116 'item_id' => $entry_id,
147 117 'field_id !' => 0,
148 118 ),
@@ -148,69 +118,53 @@
148 118 ),
149 119 'field_id'
150 120 );
151 121
152 - $values_indexed_by_field_id = array();
153 -
154 - foreach ( $values as $field_id_or_key => $meta_value ) {
155 - $field_id = $field_id_or_key;
156 - $field = null;
157 -
158 - if ( $field_id_or_key ) {
159 - $field = FrmField::getOne( $field_id_or_key );
160 -
161 - if ( is_object( $field ) ) {
162 - $field_id = $field->id;
163 - }
122 + foreach ( $values as $field_id => $meta_value ) {
123 + $field = false;
124 + if ( ! empty( $field_id ) ) {
125 + $field = FrmField::getOne( $field_id );
164 126 }
165 127
166 - $values_indexed_by_field_id[ $field_id ] = $meta_value;
167 -
168 128 self::get_value_to_save( compact( 'field', 'field_id', 'entry_id' ), $meta_value );
169 129
170 - if ( ! $previous_field_ids || ! in_array( $field_id, $previous_field_ids, true ) ) {
171 - // If value does not exist, then create it
172 - self::add_entry_meta( $entry_id, $field_id, '', $meta_value, $field );
173 - continue;
174 - }
130 + if ( $prev_values && in_array( $field_id, $prev_values ) ) {
175 131
176 - if ( $meta_value === array() || ( ! is_array( $meta_value ) && trim( $meta_value ) === '' ) ) {
177 - // Remove blank fields.
178 - unset( $values_indexed_by_field_id[ $field_id ] );
132 + if ( ( is_array( $meta_value ) && empty( $meta_value ) ) || ( ! is_array( $meta_value ) && trim( $meta_value ) == '' ) ) {
133 + // remove blank fields
134 + unset( $values[ $field_id ] );
135 + } else {
136 + // if value exists, then update it
137 + self::update_entry_meta( $entry_id, $field_id, '', $meta_value );
138 + }
179 139 } else {
180 - // If value exists, then update it
181 - self::update_entry_meta( $entry_id, $field_id, '', $meta_value, $field );
140 + // if value does not exist, then create it
141 + self::add_entry_meta( $entry_id, $field_id, '', $meta_value );
182 142 }
183 - }//end foreach
143 + }
184 144
185 - if ( ! $previous_field_ids ) {
145 + if ( empty( $prev_values ) ) {
186 146 return;
187 147 }
188 148
189 - $field_ids_to_remove = array_diff( $previous_field_ids, array_keys( $values_indexed_by_field_id ) );
149 + $prev_values = array_diff( $prev_values, array_keys( $values ) );
190 150
191 - if ( ! $field_ids_to_remove ) {
151 + if ( empty( $prev_values ) ) {
192 152 return;
193 153 }
194 154
195 - // Prepare the query
155 + // prepare the query
196 156 $where = array(
197 157 'item_id' => $entry_id,
198 - 'field_id' => $field_ids_to_remove,
158 + 'field_id' => $prev_values,
199 159 );
200 160 FrmDb::get_where_clause_and_values( $where );
201 161
202 162 // Delete any leftovers
203 - $wpdb->query( $wpdb->prepare( 'DELETE FROM ' . $wpdb->prefix . 'frm_item_metas ' . $where['where'], $where['values'] ) ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared, SlevomatCodingStandard.Files.LineLength.LineTooLong
163 + $wpdb->query( $wpdb->prepare( 'DELETE FROM ' . $wpdb->prefix . 'frm_item_metas ' . $where['where'], $where['values'] ) ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared
204 164 self::clear_cache();
205 165 }
206 166
207 - /**
208 - * @param int $old_id
209 - * @param int $new_id
210 - *
211 - * @return void
212 - */
213 167 public static function duplicate_entry_metas( $old_id, $new_id ) {
214 168 $metas = self::get_entry_meta_info( $old_id );
215 169
216 170 /**
@@ -220,9 +174,8 @@
220 174 *
221 175 * @param array $metas The list of entry meta values.
222 176 */
223 177 $metas = apply_filters( 'frm_before_duplicate_entry_values', $metas );
224 -
225 178 foreach ( $metas as $meta ) {
226 179 self::add_entry_meta( $new_id, $meta->field_id, '', $meta->meta_value );
227 180 unset( $meta );
228 181 }
@@ -228,14 +181,8 @@
228 181 }
229 182 self::clear_cache();
230 183 }
231 184
232 - /**
233 - * @param int $entry_id
234 - * @param int $field_id
235 - *
236 - * @return false|int
237 - */
238 185 public static function delete_entry_meta( $entry_id, $field_id ) {
239 186 global $wpdb;
240 187 self::clear_cache();
241 188
@@ -246,10 +193,8 @@
246 193 * Clear entry meta caching
247 194 * Called when a meta is added or changed
248 195 *
249 196 * @since 2.0.5
250 - *
251 - * @return void
252 197 */
253 198 public static function clear_cache() {
254 199 FrmDb::cache_delete_group( 'frm_entry_meta' );
255 200 FrmDb::cache_delete_group( 'frm_item_meta' );
@@ -256,27 +201,17 @@
256 201 }
257 202
258 203 /**
259 204 * @since 2.0.9
260 - *
261 - * @param stdClass $entry
262 - * @param int|string $field_id
263 - *
264 - * @return mixed
265 205 */
266 206 public static function get_meta_value( $entry, $field_id ) {
267 207 if ( isset( $entry->metas ) ) {
268 - return $entry->metas[ $field_id ] ?? false;
208 + return isset( $entry->metas[ $field_id ] ) ? $entry->metas[ $field_id ] : false;
209 + } else {
210 + return self::get_entry_meta_by_field( $entry->id, $field_id );
269 211 }
270 - return self::get_entry_meta_by_field( $entry->id, $field_id );
271 212 }
272 213
273 - /**
274 - * @param int|object|string $entry_id
275 - * @param int|string $field_id This function supports field keys as field id.
276 - *
277 - * @return mixed
278 - */
279 214 public static function get_entry_meta_by_field( $entry_id, $field_id ) {
280 215 global $wpdb;
281 216
282 217 if ( is_object( $entry_id ) ) {
@@ -289,38 +224,28 @@
289 224 }
290 225
291 226 if ( $cached && isset( $cached->metas ) && isset( $cached->metas[ $field_id ] ) ) {
292 227 $result = $cached->metas[ $field_id ];
228 +
293 229 return wp_unslash( $result );
294 230 }
295 231
296 232 $get_table = $wpdb->prefix . 'frm_item_metas';
297 233 $query = array( 'item_id' => $entry_id );
298 -
299 234 if ( is_numeric( $field_id ) ) {
300 - // Query by field ID.
301 235 $query['field_id'] = $field_id;
302 236 } else {
303 - // Query by field key.
304 - $get_table .= ' it JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id';
237 + $get_table .= ' it LEFT OUTER JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id';
305 238 $query['fi.field_key'] = $field_id;
306 239 }
307 240
308 - $result = FrmDb::get_var( $get_table, $query, 'meta_value' );
309 - $field_type = FrmField::get_type( $field_id );
310 - FrmFieldsHelper::prepare_field_value( $result, $field_type );
241 + $result = FrmDb::get_var( $get_table, $query, 'meta_value' );
242 + FrmAppHelper::unserialize_or_decode( $result );
243 + $result = wp_unslash( $result );
311 244
312 - return wp_unslash( $result );
245 + return $result;
313 246 }
314 247
315 - /**
316 - * @param int|string $field_id
317 - * @param string $order
318 - * @param string $limit
319 - * @param array $args
320 - *
321 - * @return array
322 - */
323 248 public static function get_entry_metas_for_field( $field_id, $order = '', $limit = '', $args = array() ) {
324 249 $defaults = array(
325 250 'value' => false,
326 251 'unique' => false,
@@ -327,11 +252,13 @@
327 252 'stripslashes' => true,
328 253 'is_draft' => false,
329 254 );
330 255 $args = wp_parse_args( $args, $defaults );
331 - $query = array();
256 +
257 + $query = array();
332 258 self::meta_field_query( $field_id, $order, $limit, $args, $query );
333 - $query = implode( ' ', $query );
259 + $query = implode( ' ', $query );
260 +
334 261 $cache_key = 'entry_metas_for_field_' . $field_id . $order . $limit . FrmAppHelper::maybe_json_encode( $args );
335 262 $values = FrmDb::check_cache( $cache_key, 'frm_entry', $query, 'get_col' );
336 263
337 264 if ( ! $args['stripslashes'] ) {
@@ -347,15 +274,10 @@
347 274 return wp_unslash( $values );
348 275 }
349 276
350 277 /**
351 - * @param int|string $field_id
352 - * @param string $order
353 - * @param string $limit
354 - * @param array $args
355 - * @param array $query
356 - *
357 - * @return void
278 + * @param string $order
279 + * @param string $limit
358 280 */
359 281 private static function meta_field_query( $field_id, $order, $limit, $args, array &$query ) {
360 282 global $wpdb;
361 283 $query[] = 'SELECT';
@@ -378,40 +300,24 @@
378 300
379 301 if ( $args['value'] ) {
380 302 $query[] = $wpdb->prepare( ' AND meta_value=%s', $args['value'] );
381 303 }
382 -
383 304 $query[] = $order . $limit;
384 305 }
385 306
386 - /**
387 - * @param int|string $entry_id
388 - *
389 - * @return array
390 - */
391 307 public static function get_entry_meta_info( $entry_id ) {
392 308 return FrmDb::get_results( 'frm_item_metas', array( 'item_id' => $entry_id ) );
393 309 }
394 310
395 - /**
396 - * @param array $where
397 - * @param string $order_by
398 - * @param string $limit
399 - * @param bool $stripslashes
400 - *
401 - * @return mixed
402 - */
403 311 public static function getAll( $where = array(), $order_by = '', $limit = '', $stripslashes = false ) {
404 312 global $wpdb;
405 - // phpcs:disable Generic.WhiteSpace.ScopeIndent
406 313 $query = 'SELECT it.*, fi.type as field_type, fi.field_key as field_key,
407 314 fi.required as required, fi.form_id as field_form_id, fi.name as field_name, fi.options as fi_options
408 315 FROM ' . $wpdb->prefix . 'frm_item_metas it LEFT OUTER JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id' .
409 316 FrmDb::prepend_and_or_where( ' WHERE ', $where ) . $order_by . $limit;
410 - // phpcs:enable Generic.WhiteSpace.ScopeIndent
411 317
412 318 $cache_key = 'all_' . FrmAppHelper::maybe_json_encode( $where ) . $order_by . $limit;
413 - $results = FrmDb::check_cache( $cache_key, 'frm_entry', $query, $limit === ' LIMIT 1' ? 'get_row' : 'get_results' );
319 + $results = FrmDb::check_cache( $cache_key, 'frm_entry', $query, ( $limit == ' LIMIT 1' ? 'get_row' : 'get_results' ) );
414 320
415 321 if ( ! $results || ! $stripslashes ) {
416 322 return $results;
417 323 }
@@ -424,17 +330,8 @@
424 330
425 331 return $results;
426 332 }
427 333
428 - /**
429 - * @param array|string $where
430 - * @param string $order_by
431 - * @param string $limit
432 - * @param bool $unique
433 - * @param array $args
434 - *
435 - * @return array|string|null
436 - */
437 334 public static function getEntryIds( $where = array(), $order_by = '', $limit = '', $unique = true, $args = array() ) {
438 335 $defaults = array(
439 336 'is_draft' => false,
440 337 'user_id' => '',
@@ -440,11 +337,13 @@
440 337 'user_id' => '',
441 338 'group_by' => '',
442 339 );
443 340 $args = wp_parse_args( $args, $defaults );
444 - $query = array();
341 +
342 + $query = array();
445 343 self::get_ids_query( $where, $order_by, $limit, $unique, $args, $query );
446 - $query = implode( ' ', $query );
344 + $query = implode( ' ', $query );
345 +
447 346 $cache_key = 'ids_' . FrmAppHelper::maybe_json_encode( $where ) . $order_by . 'l' . $limit . 'u' . $unique . FrmAppHelper::maybe_json_encode( $args );
448 347 $type = 'get_' . ( ' LIMIT 1' === $limit ? 'var' : 'col' );
449 348 return FrmDb::check_cache( $cache_key, 'frm_entry', $query, $type );
450 349 }
@@ -454,9 +353,8 @@
454 353 * If a child entry id is matched, its parent will be returned in its place
455 354 *
456 355 * @param array $query
457 356 * @param array $args
458 - *
459 357 * @return array
460 358 */
461 359 public static function get_top_level_entry_ids( $query, $args ) {
462 360 $args['return_parent_id_if_0_return_id'] = true;
@@ -463,54 +361,13 @@
463 361 return self::getEntryIds( $query, '', '', true, $args );
464 362 }
465 363
466 364 /**
467 - * Returns true if the where clause refers to a field table column that is not form_id. It also updates
468 - * the where clause to refer to the entry table for form_id if fields table should not be joined.
469 - *
470 - * @since 6.16.1
471 - *
472 - * @param array|string $where
473 - *
474 - * @return bool
365 + * @param string|array $where
366 + * @param string $order_by
367 + * @param string $limit
475 368 */
476 - private static function should_join_fields_table( &$where ) {
477 - if ( is_string( $where ) ) {
478 - if ( preg_match( '/\bfi\.(?!form_id)\w+/i', $where ) ) {
479 - return true;
480 - }
481 -
482 - $where = str_ireplace( 'fi.form_id', 'e.form_id', $where );
483 - return false;
484 - }
485 -
486 - $where_fields = array_keys( $where );
487 -
488 - foreach ( $where_fields as $where_field ) {
489 - if ( str_starts_with( $where_field, 'fi.' ) && 'fi.form_id' !== $where_field ) {
490 - return true;
491 - }
492 - }
493 -
494 - if ( isset( $where['fi.form_id'] ) ) {
495 - $where['e.form_id'] = $where['fi.form_id'];
496 - unset( $where['fi.form_id'] );
497 - }
498 -
499 - return false;
500 - }
501 -
502 - /**
503 - * @param array|string $where
504 - * @param string $order_by
505 - * @param string $limit
506 - * @param bool $unique
507 - * @param array $args
508 - * @param array $query
509 - *
510 - * @return void
511 - */
512 - private static function get_ids_query( $where, $order_by, $limit, $unique, $args, array &$query ) { // phpcs:ignore SlevomatCodingStandard.Complexity.Cognitive.ComplexityTooHigh, SlevomatCodingStandard.Files.LineLength.LineTooLong
369 + private static function get_ids_query( $where, $order_by, $limit, $unique, $args, array &$query ) {
513 370 global $wpdb;
514 371 $query[] = 'SELECT';
515 372 $defaults = array(
516 373 'return_parent_id' => false,
@@ -529,45 +386,21 @@
529 386 } else {
530 387 $query[] = 'it.item_id';
531 388 }
532 389
533 - $from = 'FROM ' . $wpdb->prefix . 'frm_item_metas it';
390 + $query[] = 'FROM ' . $wpdb->prefix . 'frm_item_metas it LEFT OUTER JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id';
534 391
535 - if ( self::should_join_fields_table( $where ) || self::should_join_fields_table( $order_by ) ) {
536 - $from .= ' LEFT OUTER JOIN ' . $wpdb->prefix . 'frm_fields fi ON it.field_id=fi.id';
537 - }
538 -
539 - $query[] = $from;
540 392 $query[] = 'INNER JOIN ' . $wpdb->prefix . 'frm_items e ON (e.id=it.item_id)';
541 -
542 393 if ( is_array( $where ) ) {
543 394 if ( ! $args['is_draft'] ) {
544 395 $where['e.is_draft'] = 0;
545 - } elseif ( is_numeric( $args['is_draft'] ) ) {
546 - $where['e.is_draft'] = class_exists( 'FrmAbandonmentHooksController', false ) ? absint( $args['is_draft'] ) : 1;
547 - } elseif ( 'both' === $args['is_draft'] && class_exists( 'FrmAbandonmentHooksController', false ) ) {
548 - $where['e.is_draft'] = array( 0, 1 );
549 - } elseif ( str_contains( $args['is_draft'], ',' ) ) {
550 - $is_draft = array_reduce(
551 - explode( ',', $args['is_draft'] ),
552 - function ( $total, $current ) {
553 - if ( is_numeric( $current ) ) {
554 - $total[] = absint( $current );
555 - }
556 - return $total;
557 - },
558 - array()
559 - );
396 + } elseif ( $args['is_draft'] == 1 ) {
397 + $where['e.is_draft'] = 1;
398 + }
560 399
561 - if ( $is_draft ) {
562 - $where['e.is_draft'] = $is_draft;
563 - }
564 - }//end if
565 -
566 400 if ( ! empty( $args['user_id'] ) ) {
567 401 $where['e.user_id'] = $args['user_id'];
568 402 }
569 -
570 403 $query[] = FrmDb::prepend_and_or_where( ' WHERE ', $where ) . $order_by . $limit;
571 404
572 405 if ( $args['group_by'] ) {
573 406 $query[] = ' GROUP BY ' . sanitize_text_field( $args['group_by'] );
@@ -573,16 +406,15 @@
573 406 $query[] = ' GROUP BY ' . sanitize_text_field( $args['group_by'] );
574 407 }
575 408
576 409 return;
577 - }//end if
410 + }
578 411
579 412 $draft_where = '';
580 413 $user_where = '';
581 -
582 414 if ( ! $args['is_draft'] ) {
583 415 $draft_where = $wpdb->prepare( ' AND e.is_draft=%d', 0 );
584 - } elseif ( $args['is_draft'] == 1 ) { // phpcs:ignore Universal.Operators.StrictComparisons
416 + } elseif ( $args['is_draft'] == 1 ) {
585 417 $draft_where = $wpdb->prepare( ' AND e.is_draft=%d', 1 );
586 418 }
587 419
588 420 if ( ! empty( $args['user_id'] ) ) {
@@ -588,10 +420,10 @@
588 420 if ( ! empty( $args['user_id'] ) ) {
589 421 $user_where = $wpdb->prepare( ' AND e.user_id=%d', $args['user_id'] );
590 422 }
591 423
592 - if ( str_contains( $where, ' GROUP BY ' ) ) {
593 - // Don't inject WHERE filtering after GROUP BY
424 + if ( strpos( $where, ' GROUP BY ' ) ) {
425 + // don't inject WHERE filtering after GROUP BY
594 426 $parts = explode( ' GROUP BY ', $where );
595 427 $where = $parts[0];
596 428 $where .= $draft_where . $user_where;
597 429 $where .= ' GROUP BY ' . $parts[1];
@@ -602,30 +434,20 @@
602 434 // The query has already been prepared
603 435 $query[] = FrmDb::prepend_and_or_where( ' WHERE ', $where ) . $order_by . $limit;
604 436 }
605 437
606 - /**
607 - * @param array|string $search
608 - * @param int|string $field_id
609 - * @param string $operator
610 - *
611 - * @return array
612 - */
613 438 public static function search_entry_metas( $search, $field_id, $operator ) {
614 439 $cache_key = 'search_' . FrmAppHelper::maybe_json_encode( $search ) . $field_id . $operator;
615 440 $results = wp_cache_get( $cache_key, 'frm_entry' );
616 -
617 441 if ( false !== $results ) {
618 442 return $results;
619 443 }
620 444
621 445 global $wpdb;
622 -
623 446 if ( is_array( $search ) ) {
624 447 $where = '';
625 -
626 448 foreach ( $search as $field => $value ) {
627 - if ( $value <= 0 || ! in_array( $field, array( 'year', 'month', 'day' ), true ) ) {
449 + if ( $value <= 0 || ! in_array( $field, array( 'year', 'month', 'day' ) ) ) {
628 450 continue;
629 451 }
630 452
631 453 switch ( $field ) {
@@ -637,21 +459,18 @@
637 459 break;
638 460 case 'day':
639 461 $value = '%' . $value . '%';
640 462 }
641 -
642 463 $where .= $wpdb->prepare( ' meta_value ' . $operator . ' %s and', $value ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared
643 464 }
644 -
645 465 $where .= $wpdb->prepare( ' field_id=%d', $field_id );
646 - $query = 'SELECT DISTINCT item_id FROM ' . $wpdb->prefix . 'frm_item_metas' . FrmDb::prepend_and_or_where( ' WHERE ', $where );
466 + $query = 'SELECT DISTINCT item_id FROM ' . $wpdb->prefix . 'frm_item_metas' . FrmDb::prepend_and_or_where( ' WHERE ', $where );
647 467 } else {
648 - if ( $operator === 'LIKE' ) {
468 + if ( $operator == 'LIKE' ) {
649 469 $search = '%' . $search . '%';
650 470 }
651 -
652 - $query = $wpdb->prepare( "SELECT DISTINCT item_id FROM {$wpdb->prefix}frm_item_metas WHERE meta_value {$operator} %s and field_id = %d", $search, $field_id ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared, WordPress.DB.PreparedSQL.InterpolatedNotPrepared, SlevomatCodingStandard.Files.LineLength.LineTooLong
653 - }//end if
471 + $query = $wpdb->prepare( "SELECT DISTINCT item_id FROM {$wpdb->prefix}frm_item_metas WHERE meta_value {$operator} %s and field_id = %d", $search, $field_id ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared, WordPress.DB.PreparedSQL.InterpolatedNotPrepared
472 + }
654 473
655 474 $results = $wpdb->get_col( $query, 0 ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared
656 475 FrmDb::set_cache( $cache_key, $results, 'frm_entry' );
657 476