PluginProbe
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More / 6.23
Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More v6.23
6.35 6.34 6.33.1 6.33 6.32.1 6.32 6.31 6.25 6.25.1 6.26 6.26.1 6.27 6.28 6.29 6.3 6.3.1 6.3.2 6.30 6.4 6.4.1 6.4.2 6.5 6.5.1 6.5.2 6.5.3 All 141 releases
← All changes | classes/models/FrmEntryValidate.php +2 -126 6.266.23 View file →
@@ -14,9 +14,8 @@
14 14
15 15 /**
16 16 * @param array $values
17 17 * @param bool|string[] $exclude
18 - *
19 18 * @return array
20 19 */
21 20 public static function validate( $values, $exclude = false ) {
22 21 FrmEntry::sanitize_entry_post( $values );
@@ -84,13 +83,8 @@
84 83 $_POST['item_meta'] = array();
85 84 }
86 85 }
87 86
88 - /**
89 - * @param array $values
90 - *
91 - * @return void
92 - */
93 87 private static function set_item_key( &$values ) {
94 88 if ( ! isset( $values['item_key'] ) || $values['item_key'] == '' ) {
95 89 global $wpdb;
96 90 $values['item_key'] = FrmAppHelper::get_unique_key( '', $wpdb->prefix . 'frm_items', 'item_key' );
@@ -97,14 +91,8 @@
97 91 $_POST['item_key'] = $values['item_key'];
98 92 }
99 93 }
100 94
101 - /**
102 - * @param array $values
103 - * @param array|string $exclude
104 - *
105 - * @return array
106 - */
107 95 private static function get_fields_to_validate( $values, $exclude ) {
108 96 $where = apply_filters( 'frm_posted_field_ids', array( 'fi.form_id' => $values['form_id'] ) );
109 97
110 98 // Don't get subfields
@@ -127,16 +115,8 @@
127 115 */
128 116 return apply_filters( 'frm_fields_to_validate', $fields, compact( 'values', 'exclude', 'where' ) );
129 117 }
130 118
131 - /**
132 - * @param object $posted_field
133 - * @param array $errors
134 - * @param array $values
135 - * @param array $args
136 - *
137 - * @return void
138 - */
139 119 public static function validate_field( $posted_field, &$errors, $values, $args = array() ) {
140 120 $defaults = array(
141 121 'id' => $posted_field->id,
142 122 // The id of the repeat or embed form.
@@ -149,9 +129,9 @@
149 129 );
150 130 $args = wp_parse_args( $args, $defaults );
151 131
152 132 if ( empty( $args['parent_field_id'] ) ) {
153 - $value = $values['item_meta'][ $args['id'] ] ?? '';
133 + $value = isset( $values['item_meta'][ $args['id'] ] ) ? $values['item_meta'][ $args['id'] ] : '';
154 134 } else {
155 135 // value is from a nested form
156 136 $value = $values;
157 137 }
@@ -161,9 +141,8 @@
161 141
162 142 self::maybe_clear_value_for_default_blank_setting( $posted_field, $value );
163 143
164 144 $should_trim = is_array( $value ) && count( $value ) == 1 && isset( $value[0] ) && $posted_field->type !== 'checkbox';
165 -
166 145 if ( $should_trim ) {
167 146 $value = reset( $value );
168 147 }
169 148
@@ -236,9 +215,8 @@
236 215 *
237 216 * @param stdClass $field
238 217 * @param array|string $value
239 218 * @param array $options
240 - *
241 219 * @return bool
242 220 */
243 221 private static function option_is_valid( $field, $value, $options ) {
244 222 if ( '' === $value ) {
@@ -245,9 +223,8 @@
245 223 return true;
246 224 }
247 225
248 226 $field_object = FrmFieldFactory::get_field_type( $field->type, $field );
249 -
250 227 if ( ! $field_object->field_type_has_options_settings() ) {
251 228 return true;
252 229 }
253 230
@@ -282,21 +259,18 @@
282 259 $option_value = $option;
283 260 }
284 261
285 262 $match = trim( $current_value ) === trim( $option_value );
286 -
287 263 if ( $match ) {
288 264 break;
289 265 }
290 266
291 267 $match = trim( $current_value ) === trim( do_shortcode( $option_value ) );
292 -
293 268 if ( $match ) {
294 269 break;
295 270 }
296 271
297 272 $match = self::is_filtered_match( $current_value, $option_value );
298 -
299 273 if ( $match ) {
300 274 break;
301 275 }
302 276
@@ -301,9 +275,8 @@
301 275 }
302 276
303 277 if ( is_numeric( $current_value ) ) {
304 278 $match = (int) $current_value === (int) $option_value;
305 -
306 279 if ( $match ) {
307 280 break;
308 281 }
309 282 }
@@ -325,21 +298,17 @@
325 298 * @since 6.22
326 299 *
327 300 * @param string $value
328 301 * @param string $option_value
329 - *
330 302 * @return bool
331 303 */
332 304 private static function is_filtered_match( $value, $option_value ) {
333 305 // First remove the wpautop filter so it doesn't add extra tags to $option_value.
334 306 $filter_priority = has_filter( 'the_content', 'wpautop' );
335 -
336 307 if ( is_numeric( $filter_priority ) ) {
337 308 remove_filter( 'the_content', 'wpautop', $filter_priority );
338 309 }
339 -
340 310 $filtered_option = apply_filters( 'the_content', $option_value );
341 -
342 311 if ( is_numeric( $filter_priority ) ) {
343 312 add_filter( 'the_content', 'wpautop', $filter_priority );
344 313 }
345 314 return trim( $value ) === trim( $filtered_option );
@@ -350,11 +319,8 @@
350 319 * This is to help avoid issues where the options could be based on a URL param for example.
351 320 *
352 321 * @since 6.21
353 322 *
354 - * @param object $field_object The field object.
355 - * @param array|string $value The value to validate.
356 - *
357 323 * @return bool
358 324 */
359 325 private static function options_are_dynamic_based_on_hook( $field_object, $value ) {
360 326 $values = (array) $field_object;
@@ -367,9 +333,8 @@
367 333 $option_value = $separate_value ? $option['value'] : $option['label'];
368 334 } else {
369 335 $option_value = $option;
370 336 }
371 -
372 337 $option_value = do_shortcode( $option_value );
373 338 return $option_value;
374 339 };
375 340
@@ -385,14 +350,11 @@
385 350 * @since 5.2.02
386 351 *
387 352 * @param array|string $value Field value.
388 353 * @param object $field Field object.
389 - *
390 - * @return void
391 354 */
392 355 private static function maybe_add_item_name( $value, $field ) {
393 356 $item_name = false;
394 -
395 357 if ( 'name' === $field->type ) {
396 358 $field_obj = FrmFieldFactory::get_field_object( $field );
397 359 $item_name = $field_obj->get_display_value( $value );
398 360 } elseif ( 'text' === $field->type ) {
@@ -409,14 +371,11 @@
409 371 * Set $value to an empty string if it matches its label
410 372 *
411 373 * @param object $field
412 374 * @param string $value
413 - *
414 - * @return void
415 375 */
416 376 private static function maybe_clear_value_for_default_blank_setting( $field, &$value ) {
417 377 $position = FrmField::get_option( $field, 'label' );
418 -
419 378 if ( ! $position ) {
420 379 $position = FrmStylesController::get_style_val( 'position', $field->form_id );
421 380 }
422 381
@@ -424,16 +383,8 @@
424 383 $value = '';
425 384 }
426 385 }
427 386
428 - /**
429 - * @param array $errors
430 - * @param object $posted_field
431 - * @param mixed $value
432 - * @param array $args
433 - *
434 - * @return void
435 - */
436 387 public static function validate_field_types( &$errors, $posted_field, $value, $args ) {
437 388 $field_obj = FrmFieldFactory::get_field_object( $posted_field );
438 389 $args['value'] = $value;
439 390 $args['errors'] = $errors;
@@ -438,22 +389,13 @@
438 389 $args['value'] = $value;
439 390 $args['errors'] = $errors;
440 391
441 392 $new_errors = $field_obj->validate( $args );
442 -
443 393 if ( ! empty( $new_errors ) ) {
444 394 $errors = array_merge( $errors, $new_errors );
445 395 }
446 396 }
447 397
448 - /**
449 - * @param array $errors
450 - * @param object $field
451 - * @param string $value
452 - * @param array $args
453 - *
454 - * @return void
455 - */
456 398 public static function validate_phone_field( &$errors, $field, $value, $args ) {
457 399 $format_value = FrmField::get_option( $field, 'format' );
458 400
459 401 if ( $field->type === 'phone' || ( $field->type === 'text' && $format_value && ! FrmCurrencyHelper::is_currency_format( $format_value ) ) ) {
@@ -464,13 +406,8 @@
464 406 }
465 407 }
466 408 }
467 409
468 - /**
469 - * @param object $field
470 - *
471 - * @return string
472 - */
473 410 public static function phone_format( $field ) {
474 411 if ( FrmField::is_option_empty( $field, 'format' ) ) {
475 412 $pattern = self::default_phone_format();
476 413 } else {
@@ -493,10 +430,8 @@
493 430 }
494 431
495 432 /**
496 433 * @since 3.01
497 - *
498 - * @return string
499 434 */
500 435 private static function default_phone_format() {
501 436 return '^((\+\d{1,3}(-|.| )?\(?\d\)?(-| |.)?\d{1,5})|(\(?\d{2,6}\)?))(-|.| )?(\d{3,4})(-|.| )?(\d{4})(( x| ext)\d{1,5}){0,1}$';
502 437 }
@@ -525,9 +460,8 @@
525 460
526 461 if ( strpos( $pattern, '\?' ) !== false ) {
527 462 $parts = explode( '\?', $pattern );
528 463 $pattern = '';
529 -
530 464 foreach ( $parts as $part ) {
531 465 if ( empty( $pattern ) ) {
532 466 $pattern .= $part;
533 467 } else {
@@ -534,9 +468,8 @@
534 468 $pattern .= '(' . $part . ')?';
535 469 }
536 470 }
537 471 }
538 -
539 472 $pattern = '^' . $pattern . '$';
540 473
541 474 return $pattern;
542 475 }
@@ -546,10 +479,8 @@
546 479 *
547 480 * @param bool $exclude
548 481 * @param array $values
549 482 * @param array $errors By reference.
550 - *
551 - * @return void
552 483 */
553 484 public static function spam_check( $exclude, $values, &$errors ) {
554 485 if ( defined( 'WP_IMPORTING' ) && WP_IMPORTING ) {
555 486 // Do not check spam on importing.
@@ -562,9 +493,8 @@
562 493 }
563 494
564 495 $antispam_check = self::is_antispam_check( $values['form_id'] );
565 496 $spam_msg = FrmAntiSpamController::get_default_spam_message();
566 -
567 497 if ( is_string( $antispam_check ) ) {
568 498 $errors['spam'] = $antispam_check;
569 499 } elseif ( self::is_honeypot_spam( $values ) || self::is_spam_bot() ) {
570 500 $errors['spam'] = $spam_msg;
@@ -569,9 +499,8 @@
569 499 } elseif ( self::is_honeypot_spam( $values ) || self::is_spam_bot() ) {
570 500 $errors['spam'] = $spam_msg;
571 501 } else {
572 502 $is_spam = FrmAntiSpamController::is_spam( $values );
573 -
574 503 if ( $is_spam ) {
575 504 $errors['spam'] = $is_spam;
576 505 }
577 506 }
@@ -590,9 +519,8 @@
590 519 *
591 520 * @since 5.0.13
592 521 *
593 522 * @param array $values The values.
594 - *
595 523 * @return bool
596 524 */
597 525 private static function form_is_in_progress( $values ) {
598 526 return FrmAppHelper::pro_is_installed() &&
@@ -611,9 +539,8 @@
611 539 }
612 540
613 541 /**
614 542 * @param array $values
615 - *
616 543 * @return bool
617 544 */
618 545 private static function is_honeypot_spam( $values ) {
619 546 $honeypot = new FrmHoneypot( $values['form_id'] );
@@ -630,9 +557,8 @@
630 557 }
631 558
632 559 /**
633 560 * @param array $values
634 - *
635 561 * @return bool
636 562 */
637 563 private static function is_akismet_spam( $values ) {
638 564 global $wpcom_api_key;
@@ -641,9 +567,8 @@
641 567 }
642 568
643 569 /**
644 570 * @param int $form_id
645 - *
646 571 * @return bool
647 572 */
648 573 private static function is_akismet_enabled_for_user( $form_id ) {
649 574 $form = FrmForm::getOne( $form_id );
@@ -664,10 +589,8 @@
664 589
665 590 /**
666 591 * Check entries for Akismet spam
667 592 *
668 - * @param array $values Entry values.
669 - *
670 593 * @return bool true if is spam
671 594 */
672 595 public static function akismet( $values ) {
673 596 if ( empty( $values['item_meta'] ) ) {
@@ -695,13 +618,8 @@
695 618 }
696 619
697 620 /**
698 621 * @since 2.0
699 - *
700 - * @param array $datas The array of values being sent to Akismet.
701 - * @param array $values Entry values.
702 - *
703 - * @return void
704 622 */
705 623 private static function parse_akismet_array( &$datas, $values ) {
706 624 self::add_site_info_to_akismet( $datas );
707 625 self::add_server_values_to_akismet( $datas );
@@ -712,13 +630,8 @@
712 630 self::add_user_info_to_akismet( $datas, $values );
713 631 self::add_comment_content_to_akismet( $datas, $values );
714 632 }
715 633
716 - /**
717 - * @param array $datas
718 - *
719 - * @return void
720 - */
721 634 private static function add_site_info_to_akismet( &$datas ) {
722 635 $datas['blog'] = FrmAppHelper::site_url();
723 636 $datas['user_ip'] = preg_replace( '/[^0-9., ]/', '', FrmAppHelper::get_ip_address() );
724 637 $datas['user_agent'] = FrmAppHelper::get_server_value( 'HTTP_USER_AGENT' );
@@ -730,14 +643,8 @@
730 643 $datas['is_test'] = 'true';
731 644 }
732 645 }
733 646
734 - /**
735 - * @param array $datas
736 - * @param array $values
737 - *
738 - * @return void
739 - */
740 647 private static function add_user_info_to_akismet( &$datas, $values ) {
741 648 $user_info = self::get_spam_check_user_info( $values );
742 649 $datas = $datas + $user_info;
743 650
@@ -752,9 +659,8 @@
752 659 * @since 5.0.13 Separate code for guest. Handle value of embedded|repeater.
753 660 * @since 6.21 This changed from private to public.
754 661 *
755 662 * @param array $values Entry values after running through {@see FrmEntryValidate::prepare_values_for_spam_check()}.
756 - *
757 663 * @return array
758 664 */
759 665 public static function get_spam_check_user_info( $values ) {
760 666 if ( ! is_user_logged_in() ) {
@@ -777,9 +683,8 @@
777 683 *
778 684 * @since 5.0.13
779 685 *
780 686 * @param array $values Entry values after flattened.
781 - *
782 687 * @return array
783 688 */
784 689 private static function get_spam_check_user_info_for_guest( $values ) {
785 690 $datas = array(
@@ -811,10 +716,8 @@
811 716 *
812 717 * @param array $datas Guest data.
813 718 * @param array $values The values.
814 719 * @param int|null $custom_index Custom index (or field ID).
815 - *
816 - * @return void
817 720 */
818 721 private static function recursive_add_akismet_guest_info( &$datas, $values, $custom_index = null ) {
819 722 foreach ( $values as $index => $value ) {
820 723 if ( ! $datas['missing_keys'] ) {
@@ -827,12 +730,10 @@
827 730 continue;
828 731 }
829 732
830 733 $field_id = ! is_null( $custom_index ) ? $custom_index : $index;
831 -
832 734 foreach ( $datas['missing_keys'] as $key_index => $key ) {
833 735 $found = self::is_akismet_guest_info_value( $key, $value, $field_id, $datas['name_field_ids'], $values );
834 -
835 736 if ( $found ) {
836 737 $datas[ $key ] = $value;
837 738 $datas['frm_duplicated'][] = $field_id;
838 739 unset( $datas['missing_keys'][ $key_index ] );
@@ -870,9 +771,8 @@
870 771 if ( $name_field_ids && in_array( $field_id, $name_field_ids, true ) ) {
871 772 // If there is name field in the form, we should always use it as author name.
872 773 return true;
873 774 }
874 -
875 775 $form_id = FrmAppHelper::get_post_param( 'form_id', 0, 'absint' );
876 776 $fields = self::get_name_text_fields( $form_id );
877 777
878 778 foreach ( $fields as $index => $field ) {
@@ -878,14 +778,12 @@
878 778 foreach ( $fields as $index => $field ) {
879 779 if ( 'Name' !== $field->name ) {
880 780 continue;
881 781 }
882 -
883 782 if ( isset( $fields[ $index + 1 ] ) && 'Last' === $fields[ $index + 1 ]->name ) {
884 783 if ( empty( $values[ absint( $fields[ $index + 1 ]->id ) ] ) ) {
885 784 continue;
886 785 }
887 -
888 786 $value .= ' ' . $values[ $fields[ $index + 1 ]->id ];
889 787 return true;
890 788 }
891 789 }
@@ -899,18 +797,15 @@
899 797 *
900 798 * @since 6.17
901 799 *
902 800 * @param int $form_id
903 - *
904 801 * @return array
905 802 */
906 803 private static function get_name_text_fields( $form_id ) {
907 804 $name_text_fields_is_initialized = is_array( self::$name_text_fields );
908 -
909 805 if ( $name_text_fields_is_initialized && isset( self::$name_text_fields[ $form_id ] ) ) {
910 806 return self::$name_text_fields[ $form_id ];
911 807 }
912 -
913 808 if ( ! $name_text_fields_is_initialized ) {
914 809 self::$name_text_fields = array();
915 810 }
916 811 self::$name_text_fields[ $form_id ] = FrmDb::get_results(
@@ -926,13 +821,8 @@
926 821
927 822 return self::$name_text_fields[ $form_id ];
928 823 }
929 824
930 - /**
931 - * @param array $datas
932 - *
933 - * @return void
934 - */
935 825 private static function add_server_values_to_akismet( &$datas ) {
936 826 foreach ( $_SERVER as $key => $value ) {
937 827 $include_value = is_string( $value ) && ! preg_match( '/^HTTP_COOKIE/', $key ) && preg_match( '/^(HTTP_|REMOTE_ADDR|REQUEST_URI|DOCUMENT_URI)/', $key );
938 828
@@ -950,10 +840,8 @@
950 840 * @since 5.0.09
951 841 *
952 842 * @param array $datas The array of values being sent to Akismet.
953 843 * @param array $values Entry values.
954 - *
955 - * @return void
956 844 */
957 845 private static function add_comment_content_to_akismet( &$datas, $values ) {
958 846 if ( isset( $datas['frm_duplicated'] ) ) {
959 847 foreach ( $datas['frm_duplicated'] as $index ) {
@@ -974,14 +862,11 @@
974 862 *
975 863 * @since 5.0.09
976 864 *
977 865 * @param array $values Entry values.
978 - *
979 - * @return void
980 866 */
981 867 private static function skip_adding_values_to_akismet( &$values ) {
982 868 $skipped_fields = self::get_akismet_skipped_field_ids( $values );
983 -
984 869 foreach ( $skipped_fields as $skipped_field ) {
985 870 if ( ! isset( $values['item_meta'][ $skipped_field->id ] ) ) {
986 871 continue;
987 872 }
@@ -987,9 +872,8 @@
987 872 }
988 873
989 874 if ( self::should_really_skip_field( $skipped_field, $values ) ) {
990 875 unset( $values['item_meta'][ $skipped_field->id ] );
991 -
992 876 if ( isset( $values['item_meta']['other'][ $skipped_field->id ] ) ) {
993 877 unset( $values['item_meta']['other'][ $skipped_field->id ] );
994 878 }
995 879 }
@@ -1002,9 +886,8 @@
1002 886 * @since 5.02.04
1003 887 *
1004 888 * @param object $field_data Object contains `id` and `options`.
1005 889 * @param array $values Entry values.
1006 - *
1007 890 * @return bool
1008 891 */
1009 892 private static function should_really_skip_field( $field_data, $values ) {
1010 893 if ( empty( $field_data->options ) ) {
@@ -1012,9 +895,8 @@
1012 895 return true;
1013 896 }
1014 897
1015 898 FrmAppHelper::unserialize_or_decode( $field_data->options );
1016 -
1017 899 if ( ! $field_data->options ) {
1018 900 // Check if an error happens when unserializing, or empty options.
1019 901 return true;
1020 902 }
@@ -1033,10 +915,9 @@
1033 915 }
1034 916
1035 917 // Check if submitted value is same as one of field option.
1036 918 foreach ( $field_data->options as $option ) {
1037 - $option_value = ! is_array( $option ) ? $option : ( $option['value'] ?? '' );
1038 -
919 + $option_value = ! is_array( $option ) ? $option : ( isset( $option['value'] ) ? $option['value'] : '' );
1039 920 if ( $values['item_meta']['other'][ $field_data->id ] === $option_value ) {
1040 921 return true;
1041 922 }
1042 923 }
@@ -1051,9 +932,8 @@
1051 932 * @since 5.0.13 Move out get_all_form_ids_and_flatten_meta() call and get `form_ids` from `$values`.
1052 933 * @since 5.2.04 This method returns array of object contains `id` and `options` instead of array of `id` only.
1053 934 *
1054 935 * @param array $values Entry values after running through {@see FrmEntryValidate::prepare_values_for_spam_check()}.
1055 - *
1056 936 * @return array
1057 937 */
1058 938 private static function get_akismet_skipped_field_ids( $values ) {
1059 939 if ( empty( $values['form_ids'] ) ) {
@@ -1079,10 +959,8 @@
1079 959 * @since 5.0.13
1080 960 * @since 6.21 This changed from private to public.
1081 961 *
1082 962 * @param array $values Entry values.
1083 - *
1084 - * @return void
1085 963 */
1086 964 public static function prepare_values_for_spam_check( &$values ) {
1087 965 $form_ids = self::get_all_form_ids_and_flatten_meta( $values );
1088 966 $values['form_ids'] = $form_ids;
@@ -1095,9 +973,8 @@
1095 973 * @since 5.0.09
1096 974 * @since 5.0.13 Convert name field value to string.
1097 975 *
1098 976 * @param array $values Entry values.
1099 - *
1100 977 * @return array Form IDs.
1101 978 */
1102 979 private static function get_all_form_ids_and_flatten_meta( &$values ) {
1103 980 $values['name_field_ids'] = array();
@@ -1103,9 +980,8 @@
1103 980 $values['name_field_ids'] = array();
1104 981
1105 982 // Blacklist check for File field in the old version doesn't contain `form_id`.
1106 983 $form_ids = isset( $values['form_id'] ) ? array( absint( $values['form_id'] ) ) : array();
1107 -
1108 984 foreach ( $values['item_meta'] as $field_id => $value ) {
1109 985 if ( ! is_numeric( $field_id ) ) {
1110 986 // Maybe `other`.
1111 987 continue;