formidable / classes / controllers / FrmEntriesAJAXSubmitController.php

FrmEntriesAJAXSubmitController.php in Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More 6.28, at classes/controllers/FrmEntriesAJAXSubmitController.php

213 lines 6.2 KB

Raw Download Zip

1	<?php
2	if ( ! defined( 'ABSPATH' ) ) {
3	die( 'You are not allowed to call this page directly.' );
4	}
5
6	/**
7	* @since 6.2
8	*/
9	class FrmEntriesAJAXSubmitController {
10
11	/**
12	* Create an entry when the ajax_submit option is on.
13	* If Pro is active, FrmProEntriesController::ajax_create will be used instead.
14	*
15	* @return void
16	*/
17	public static function ajax_create() {
18	// This is called before we exit early to cover the conflict in Pro as well.
19	self::fix_woocommerce_conflict();
20
21	if ( is_callable( 'FrmProEntriesController::ajax_create' ) ) {
22	// Let Pro handle AJAX Submit if it's available.
23	// This is because Pro requires additional code to support other Pro features.
24	return;
25	}
26
27	if ( ! FrmAppHelper::doing_ajax() ) {
28	// Normally, this function would be triggered with the wp_ajax hook, but we need it fired sooner.
29	return;
30	}
31
32	if ( 'frm_entries_create' !== FrmAppHelper::get_post_param( 'action', '', 'sanitize_title' ) ) {
33	// Not a Formidable AJAX create request so exit early.
34	return;
35	}
36
37	$response = array(
38	'errors' => array(),
39	'content' => '',
40	'pass' => false,
41	);
42
43	$form_id = FrmAppHelper::get_post_param( 'form_id', 0, 'absint' );
44
45	if ( ! $form_id ) {
46	echo json_encode( $response );
47	wp_die();
48	}
49
50	$form = FrmForm::getOne( $form_id );
51
52	if ( ! $form ) {
53	echo json_encode( $response );
54	wp_die();
55	}
56
57	$is_ajax_on = FrmForm::is_ajax_on( $form );
58
59	if ( ! $is_ajax_on ) {
60	// This continues in the Pro version as it is required for other features including in-place edit.
61	// In Lite, if AJAX submit is not on, just exit early as this function is getting called incorrectly.
62	echo json_encode( $response );
63	wp_die();
64	}
65
66	$errors = FrmEntryValidate::validate( wp_unslash( $_POST ) ); // phpcs:ignore WordPress.Security.NonceVerification.Missing
67
68	if ( ! $errors ) {
69	global $frm_vars;
70	$frm_vars['ajax'] = true;
71	$frm_vars['css_loaded'] = true;
72
73	FrmEntriesController::process_entry( '', true );
74
75	$title = FrmFormState::get_from_request( 'title', 'auto' );
76	$description = FrmFormState::get_from_request( 'description', 'auto' );
77	$response['content'] .= FrmFormsController::show_form( $form->id, '', $title, $description );
78
79	// Trigger the footer scripts if there is a form to show.
80	if ( ! empty( $frm_vars['forms_loaded'] ) ) {
81	ob_start();
82	self::print_ajax_scripts();
83	$response['content'] .= ob_get_clean();
84
85	// Mark the end of added footer content.
86	$response['content'] .= '<span class="frm_end_ajax_' . $form->id . '"></span>';
87	}
88	} else {
89	$obj = array();
90
91	foreach ( $errors as $field => $error ) {
92	$field_id = str_replace( 'field', '', $field );
93	$error = self::maybe_modify_ajax_error( $error, $field_id, $form, $errors );
94	$obj[ $field_id ] = $error;
95	}
96
97	$response['errors'] = $obj;
98	$invalid_msg = FrmFormsHelper::get_invalid_error_message( array( 'form' => $form ) );
99	$response['error_message'] = FrmFormsHelper::get_success_message(
100	array(
101	'message' => $invalid_msg,
102	'form' => $form,
103	'entry_id' => 0,
104	'class' => FrmFormsHelper::form_error_class(),
105	)
106	);
107	}//end if
108
109	$response = self::check_for_failed_form_submission( $response, $form->id );
110
111	echo json_encode( $response );
112	wp_die();
113	}
114
115	/**
116	* Prevent WooCommerce 7.6.0 from triggering a fatal error when wp_print_footer_scripts is called.
117	*
118	* @since 6.2.3
119	*
120	* @return void
121	*/
122	private static function fix_woocommerce_conflict() {
123	add_action(
124	'wp_print_footer_scripts',
125	function () {
126	if ( ! function_exists( 'get_current_screen' ) ) {
127	require_once ABSPATH . 'wp-admin/includes/screen.php';
128	}
129
130	if ( ! class_exists( 'WP_Screen', false ) ) {
131	require_once ABSPATH . 'wp-admin/includes/class-wp-screen.php';
132	}
133
134	FrmAppHelper::set_current_screen_and_hook_suffix();
135	},
136	1
137	);
138	}
139
140	/**
141	* Load CAPTCHA script after AJAX submit so subsequent form CAPTCHAs don't break.
142	*
143	* @since 6.2
144	*
145	* @return void
146	*/
147	private static function print_ajax_scripts() {
148	global $wp_scripts;
149	$keep_scripts = array( 'captcha-api' );
150	$keep_scripts = apply_filters( 'frm_ajax_load_scripts', $keep_scripts );
151	$registered_scripts = (array) $wp_scripts->registered;
152	$registered_scripts = array_diff( array_keys( $registered_scripts ), $keep_scripts );
153	$wp_scripts->done = array_merge( $wp_scripts->done, $registered_scripts );
154	wp_print_footer_scripts();
155	}
156
157	/**
158	* If a field has custom HTML for errors, apply it around the message.
159	*
160	* @since 6.2
161	*
162	* @param string $error
163	* @param string $field_id
164	* @param stdClass $form the form being submitted (not necessarily the field's form when embedded/repeated).
165	* @param array $errors all errors that were caught in this form submission, passed into the frm_before_replace_shortcodes filter for reference.
166	*
167	* @return string
168	*/
169	private static function maybe_modify_ajax_error( $error, $field_id, $form, $errors ) {
170	if ( ! is_numeric( $field_id ) ) {
171	return $error;
172	}
173
174	$use_field = FrmField::getOne( $field_id );
175
176	if ( ! $use_field ) {
177	return $error;
178	}
179
180	$use_field = FrmFieldsHelper::setup_edit_vars( $use_field );
181	$error_body = FrmFieldsController::pull_custom_error_body_from_custom_html( $form, $use_field, $errors );
182
183	if ( false !== $error_body ) {
184	$error = str_replace( '[error]', $error, $error_body );
185	$error = str_replace( '[key]', $use_field['field_key'], $error );
186	}
187
188	return $error;
189	}
190
191	/**
192	* Confirm that the result of calling FrmFormsController::show_form added the failed message for a duplicate entry to the HTML.
193	* If it did, move the message to the errors key instead of returning the content.
194	*
195	* @since 6.2
196	*
197	* @param array $response
198	* @param int\|string $form_id
199	*
200	* @return array
201	*/
202	private static function check_for_failed_form_submission( $response, $form_id ) {
203	$frm_settings = FrmAppHelper::get_settings( array( 'current_form' => $form_id ) );
204
205	if ( str_contains( $response['content'], $frm_settings->failed_msg ) ) {
206	$response['errors']['failed'] = $frm_settings->failed_msg;
207	$response['content'] = '';
208	}
209
210	return $response;
211	}
212	}
213