formidable / classes / controllers / FrmEntriesAJAXSubmitController.php

FrmEntriesAJAXSubmitController.php in Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More 6.32.1, at classes/controllers/FrmEntriesAJAXSubmitController.php

211 lines 6.1 KB

Raw Download Zip

1	<?php
2	if ( ! defined( 'ABSPATH' ) ) {
3	die( 'You are not allowed to call this page directly.' );
4	}
5
6	/**
7	* @since 6.2
8	*/
9	class FrmEntriesAJAXSubmitController {
10
11	/**
12	* Create an entry when the ajax_submit option is on.
13	* If Pro is active, FrmProEntriesController::ajax_create will be used instead.
14	*
15	* @return void
16	*/
17	public static function ajax_create() {
18	// This is called before we exit early to cover the conflict in Pro as well.
19	self::fix_woocommerce_conflict();
20
21	if ( is_callable( 'FrmProEntriesController::ajax_create' ) ) {
22	// Let Pro handle AJAX Submit if it's available.
23	// This is because Pro requires additional code to support other Pro features.
24	return;
25	}
26
27	if ( ! FrmAppHelper::doing_ajax() ) {
28	// Normally, this function would be triggered with the wp_ajax hook, but we need it fired sooner.
29	return;
30	}
31
32	if ( 'frm_entries_create' !== FrmAppHelper::get_post_param( 'action', '', 'sanitize_title' ) ) {
33	// Not a Formidable AJAX create request so exit early.
34	return;
35	}
36
37	$response = array(
38	'errors' => array(),
39	'content' => '',
40	'pass' => false,
41	);
42
43	$form_id = FrmAppHelper::get_post_param( 'form_id', 0, 'absint' );
44
45	if ( ! $form_id ) {
46	echo json_encode( $response );
47	wp_die();
48	}
49
50	$form = FrmForm::getOne( $form_id );
51
52	if ( ! $form ) {
53	echo json_encode( $response );
54	wp_die();
55	}
56
57	if ( ! FrmForm::is_ajax_on( $form ) ) {
58	// This continues in the Pro version as it is required for other features including in-place edit.
59	// In Lite, if AJAX submit is not on, just exit early as this function is getting called incorrectly.
60	echo json_encode( $response );
61	wp_die();
62	}
63
64	$errors = FrmEntryValidate::validate( wp_unslash( $_POST ) ); // phpcs:ignore WordPress.Security.NonceVerification.Missing
65
66	if ( $errors ) {
67	$obj = array();
68
69	foreach ( $errors as $field => $error ) {
70	$field_id = str_replace( 'field', '', $field );
71	$error = self::maybe_modify_ajax_error( $error, $field_id, $form, $errors );
72	$obj[ $field_id ] = $error;
73	}
74
75	$response['errors'] = $obj;
76	$invalid_msg = FrmFormsHelper::get_invalid_error_message( array( 'form' => $form ) );
77	$response['error_message'] = FrmFormsHelper::get_success_message(
78	array(
79	'message' => $invalid_msg,
80	'form' => $form,
81	'entry_id' => 0,
82	'class' => FrmFormsHelper::form_error_class(),
83	)
84	);
85	} else {
86	global $frm_vars;
87	$frm_vars['ajax'] = true;
88	$frm_vars['css_loaded'] = true;
89
90	FrmEntriesController::process_entry( '', true );
91
92	$title = FrmFormState::get_from_request( 'title', 'auto' );
93	$description = FrmFormState::get_from_request( 'description', 'auto' );
94	$response['content'] .= FrmFormsController::show_form( $form->id, '', $title, $description );
95
96	// Trigger the footer scripts if there is a form to show.
97	if ( ! empty( $frm_vars['forms_loaded'] ) ) {
98	ob_start();
99	self::print_ajax_scripts();
100	$response['content'] .= ob_get_clean();
101
102	// Mark the end of added footer content.
103	$response['content'] .= '<span class="frm_end_ajax_' . $form->id . '"></span>';
104	}
105	}//end if
106
107	$response = self::check_for_failed_form_submission( $response, $form->id );
108
109	echo json_encode( $response );
110	wp_die();
111	}
112
113	/**
114	* Prevent WooCommerce 7.6.0 from triggering a fatal error when wp_print_footer_scripts is called.
115	*
116	* @since 6.2.3
117	*
118	* @return void
119	*/
120	private static function fix_woocommerce_conflict() {
121	add_action(
122	'wp_print_footer_scripts',
123	function () {
124	if ( ! function_exists( 'get_current_screen' ) ) {
125	require_once ABSPATH . 'wp-admin/includes/screen.php';
126	}
127
128	if ( ! class_exists( 'WP_Screen', false ) ) {
129	require_once ABSPATH . 'wp-admin/includes/class-wp-screen.php';
130	}
131
132	FrmAppHelper::set_current_screen_and_hook_suffix();
133	},
134	1
135	);
136	}
137
138	/**
139	* Load CAPTCHA script after AJAX submit so subsequent form CAPTCHAs don't break.
140	*
141	* @since 6.2
142	*
143	* @return void
144	*/
145	private static function print_ajax_scripts() {
146	global $wp_scripts;
147	$keep_scripts = array( 'captcha-api' );
148	$keep_scripts = apply_filters( 'frm_ajax_load_scripts', $keep_scripts );
149	$registered_scripts = (array) $wp_scripts->registered;
150	$registered_scripts = array_diff( array_keys( $registered_scripts ), $keep_scripts );
151	$wp_scripts->done = array_merge( $wp_scripts->done, $registered_scripts );
152	wp_print_footer_scripts();
153	}
154
155	/**
156	* If a field has custom HTML for errors, apply it around the message.
157	*
158	* @since 6.2
159	*
160	* @param string $error
161	* @param string $field_id
162	* @param stdClass $form the form being submitted (not necessarily the field's form when embedded/repeated).
163	* @param array $errors all errors that were caught in this form submission, passed into the frm_before_replace_shortcodes filter for reference.
164	*
165	* @return string
166	*/
167	private static function maybe_modify_ajax_error( $error, $field_id, $form, $errors ) {
168	if ( ! is_numeric( $field_id ) ) {
169	return $error;
170	}
171
172	$use_field = FrmField::getOne( $field_id );
173
174	if ( ! $use_field ) {
175	return $error;
176	}
177
178	$use_field = FrmFieldsHelper::setup_edit_vars( $use_field );
179	$error_body = FrmFieldsController::pull_custom_error_body_from_custom_html( $form, $use_field, $errors );
180
181	if ( false !== $error_body ) {
182	$error = str_replace( '[error]', $error, $error_body );
183	$error = str_replace( '[key]', $use_field['field_key'], $error );
184	}
185
186	return $error;
187	}
188
189	/**
190	* Confirm that the result of calling FrmFormsController::show_form added the failed message for a duplicate entry to the HTML.
191	* If it did, move the message to the errors key instead of returning the content.
192	*
193	* @since 6.2
194	*
195	* @param array $response
196	* @param int\|string $form_id
197	*
198	* @return array
199	*/
200	private static function check_for_failed_form_submission( $response, $form_id ) {
201	$frm_settings = FrmAppHelper::get_settings( array( 'current_form' => $form_id ) );
202
203	if ( str_contains( $response['content'], $frm_settings->failed_msg ) ) {
204	$response['errors']['failed'] = $frm_settings->failed_msg;
205	$response['content'] = '';
206	}
207
208	return $response;
209	}
210	}
211