# html-forms/1.1.4/src/Admin/Admin.php

HTML Forms – Simple WordPress Forms Plugin, version 1.1.4. 314 lines.

- Page: https://pluginprobe.com/plugins/html-forms/1.1.4/code/src/Admin/Admin.php
- Raw: https://pluginprobe.com/plugins/html-forms/1.1.4/raw/src/Admin/Admin.php
- Modified: 2018-03-28T07:25:24+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/html-forms/1.1.4/code/src/Admin/Admin.php#L10-L20`.

```php
<?php

namespace HTML_Forms\Admin;

use HTML_Forms\Form;
use HTML_Forms\Submission;

class Admin {

    /**
     * @var string
     */
    private $plugin_file;

    /**
     * Admin constructor.
     *
     * @param string $plugin_file
     */
    public function __construct( $plugin_file ) {
        $this->plugin_file = $plugin_file;
    }

    public function hook() {
        add_action( 'admin_menu', array( $this, 'menu' ) );
        add_action( 'init', array( $this, 'register_settings' ) );
        add_action( 'admin_init', array( $this, 'run_migrations' ) );
        add_action( 'admin_init', array( $this, 'listen' ) );
        add_action( 'admin_print_styles', array( $this, 'assets' ) );
        add_action( 'hf_admin_action_create_form', array( $this, 'process_create_form' ) );
        add_action( 'hf_admin_action_save_form', array( $this, 'process_save_form' ) );
        add_action( 'hf_admin_action_bulk_delete_submissions', array( $this, 'process_bulk_delete_submissions' ) );

        add_action( 'hf_admin_output_form_tab_fields', array( $this, 'tab_fields' ) );
        add_action( 'hf_admin_output_form_tab_messages', array( $this, 'tab_messages' ) );
        add_action( 'hf_admin_output_form_tab_settings', array( $this, 'tab_settings' ) );
        add_action( 'hf_admin_output_form_tab_actions', array( $this, 'tab_actions' ) );
        add_action( 'hf_admin_output_form_tab_submissions', array( $this, 'tab_submissions_list' ) );
        add_action( 'hf_admin_output_form_tab_submissions', array( $this, 'tab_submissions_detail' ) );
    }

    public function register_settings() {
        // register settings
        register_setting( 'hf_settings', 'hf_settings', array( $this, 'sanitize_settings' ) );
    }

    public function run_migrations() {
        $version_from = get_option( 'hf_version', '0.0' );
        $version_to = HTML_FORMS_VERSION;

        if( version_compare( $version_from, $version_to, '>=' ) ) {
            return;
        }

        $migrations = new Migrations( $version_from, $version_to, dirname( $this->plugin_file ) . '/migrations' );
        $migrations->run();
        update_option( 'hf_version', HTML_FORMS_VERSION );
    }

    /**
     * @param array $dirty
     * @return array
     */
    public function sanitize_settings( $dirty ) {
        return $dirty;
    }

    public function listen() {
        $request = array_merge( $_GET, $_POST );
        if( empty( $request['_hf_admin_action'] ) ) {
            return;
        }

        // do nothing if logged in user is not of role administrator
        if( ! current_user_can( 'edit_forms' ) ) {
            return;
        }

        $action = (string) $request['_hf_admin_action'];

        /**
         * Allows you to hook into requests containing `_hf_admin_action` => action name.
         *
         * The dynamic portion of the hook name, `$action`, refers to the action name.
         *
         * By the time this hook is fired, the user is already authorized. After processing all the registered hooks,
         * the request is redirected back to the referring URL.
         *
         * @since 3.0
         */
        do_action( 'hf_admin_action_' . $action );

        // redirect back to where we came from
        $redirect_url = ! empty( $_REQUEST['_redirect_to'] ) ? $_REQUEST['_redirect_to'] : remove_query_arg( '_hf_admin_action' );
        wp_safe_redirect( $redirect_url );
        exit;
    }

    public function assets() {
        if( empty( $_GET['page'] ) || strpos( $_GET['page'], 'html-forms' ) !== 0 ) {
            return;
        }

        $suffix = defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ? '' : '.min';

        wp_enqueue_style( 'hf-admin', plugins_url( 'assets/css/admin'. $suffix .'.css', $this->plugin_file ), array(), HTML_FORMS_VERSION );
        wp_enqueue_script( 'hf-admin', plugins_url( 'assets/js/admin'. $suffix .'.js', $this->plugin_file ), array(), HTML_FORMS_VERSION, true  );
    }

    public function menu() {
        $capability = 'edit_forms';
        add_menu_page( 'HTML Forms', 'HTML Forms', $capability, 'html-forms', array( $this, 'page_overview' ), plugins_url('assets/img/icon.svg', $this->plugin_file ), '99.88491' );
        add_submenu_page( 'html-forms', 'Forms', 'All Forms', $capability, 'html-forms', array( $this, 'page_overview' ) );
        add_submenu_page( 'html-forms', 'Add new form', 'Add New', $capability, 'html-forms-add-form', array( $this, 'page_new_form' ) );
        add_submenu_page( 'html-forms', 'Settings', 'Settings', $capability, 'html-forms-settings', array( $this, 'page_settings' ) );
    }

    public function page_overview() {
        if( ! empty( $_GET['view'] ) && $_GET['view'] === 'edit' ) {
            $this->page_edit_form();
            return;
        }  

        $settings = hf_get_settings();

        require_once ABSPATH . 'wp-admin/includes/class-wp-list-table.php';
        $table = new Table( $settings );

        require dirname( $this->plugin_file ) . '/views/overview.php';
    }

    public function page_new_form() {
        require dirname( $this->plugin_file )  . '/views/add-form.php';
    }


    public function page_settings() {
        $settings = hf_get_settings();
        require dirname( $this->plugin_file )  . '/views/global-settings.php';
    }


    public function page_edit_form() {
        $active_tab = ! empty( $_GET['tab'] ) ? $_GET['tab'] : 'fields';
        $form_id = (int) $_GET['form_id'];
        $form = hf_get_form( $form_id );
        $settings = hf_get_settings();

        require dirname( $this->plugin_file )  . '/views/edit-form.php';
    }

    public function tab_fields( Form $form ) {
        $form_preview_url = add_query_arg( array( 
            'hf_preview_form' => $form->ID,
        ), get_option( 'home' ) );
        require dirname( $this->plugin_file )  . '/views/tab-fields.php';
    }

    public function tab_messages( Form $form ) {
        require dirname( $this->plugin_file )  . '/views/tab-messages.php';
    }


    public function tab_settings( Form $form ) {
        require dirname( $this->plugin_file )  . '/views/tab-settings.php';
    }


    public function tab_actions( Form $form ) {
        require dirname( $this->plugin_file )  . '/views/tab-actions.php';
    }


    public function tab_submissions_list( Form $form ) {
        if( ! empty( $_GET['submission_id'] ) ) {
            return;
        }

        $submissions = hf_get_form_submissions( $form->ID );

        // create array of columns for submissions tab
        $columns = array();
        foreach( $submissions as $s ) {
            if( ! is_array( $s->data ) ) {
                continue;
            }

            foreach( $s->data as $field => $value ) {
                if (!array_key_exists($field, $columns)) {
                    $columns[$field] = true;
                }
            }
        }
        $columns = array_keys( $columns );

        require dirname( $this->plugin_file )  . '/views/tab-submissions-list.php';
    }

    public function tab_submissions_detail( Form $form ) {
        if( empty( $_GET['submission_id'] ) ) {
            return;
        }

        $submission = hf_get_form_submission( (int) $_GET['submission_id'] );
        require dirname( $this->plugin_file )  . '/views/tab-submissions-detail.php';
    }


    public function process_create_form() {
        // Fix for MultiSite stripping KSES for roles other than administrator
        remove_all_filters( 'content_save_pre' );

        $data = $_POST['form'];
        $form_title = sanitize_text_field( $data['title'] );
        $form_id = wp_insert_post(
            array(
                'post_type' => 'html-form',
                'post_status' => 'publish',
                'post_title' => $form_title,
                'post_content' => $this->get_default_form_content(),
            )
        );

        wp_safe_redirect( admin_url( 'admin.php?page=html-forms&view=edit&form_id=' . $form_id ));
        exit;
    }

    public function process_save_form() {
        $form_id = (int) $_POST['form_id'];
        $form = hf_get_form( $form_id );
        $data = $_POST['form'];

        // Fix for MultiSite stripping KSES for roles other than administrator
        remove_all_filters( 'content_save_pre' );

        // strip <form> tag from markup
        $data['markup'] = preg_replace( '/<\/?form(.|\s)*?>/i', '', $data['markup'] ); 

        $form_id = wp_insert_post( array(
            'ID' => $form_id,
            'post_type' => 'html-form',
            'post_status' => 'publish',
            'post_title' => sanitize_text_field( $data['title'] ),
            'post_content' => $data['markup'],
            'post_name' => sanitize_title_with_dashes( $data['slug'] ),
        ) );

        if( ! empty( $data['settings'] ) ) {
            update_post_meta( $form_id, '_hf_settings', $data['settings'] );
        }

        // save form messages in individual meta keys
        foreach( $data['messages'] as $key => $message ) {
            update_post_meta( $form_id, 'hf_message_' . $key, $message );
        }

        $redirect_url_args = array( 'form_id' => $form_id, 'saved' => 1 );
        $redirect_url = add_query_arg( $redirect_url_args, admin_url ('admin.php?page=html-forms&view=edit' ) );
        wp_safe_redirect( $redirect_url );
        exit;
    }

    /**
     * Get URL for a tab on the current page.
     *
     * @since 3.0
     * @internal
     * @param $tab
     * @return string
     */
    public function get_tab_url( $tab ) {
        return add_query_arg( array( 'tab' => $tab ), remove_query_arg( 'tab' ) );
    }

    /**
     * @return array
     */
    public function get_available_form_actions() {
        $actions = array();

        /**
         * Filters the available form actions
         *
         * @param array $actions
         */
        $actions = apply_filters( 'hf_available_form_actions', $actions );

        return $actions;
    }

    public function process_bulk_delete_submissions() {
        global $wpdb;

        if( empty( $_POST['id'] ) ) {
            return;
        }

        $table = $wpdb->prefix .'hf_submissions';
        $ids = join( ',', array_map( 'esc_sql', $_POST['id'] ) );
        $wpdb->query( sprintf( "DELETE FROM {$table} WHERE id IN( %s );", $ids ) );
    }

    private function get_default_form_content() {
        $html = '';
        $html .= sprintf( "<p>\n\t<label>%1\$s</label>\n\t<input type=\"text\" name=\"NAME\" placeholder=\"%1\$s\" required />\n</p>", __( 'Your name', 'html-forms' ) ) . PHP_EOL;
        $html .= sprintf( "<p>\n\t<label>%1\$s</label>\n\t<input type=\"email\" name=\"EMAIL\" placeholder=\"%1\$s\" required />\n</p>", __( 'Your email', 'html-forms' ) ) . PHP_EOL;
        $html .= sprintf( "<p>\n\t<label>%1\$s</label>\n\t<input type=\"text\" name=\"SUBJECT\" placeholder=\"%1\$s\" required />\n</p>", __( 'Subject', 'html-forms' ) ) . PHP_EOL;
        $html .= sprintf( "<p>\n\t<label>%1\$s</label>\n\t<textarea name=\"MESSAGE\" placeholder=\"%1\$s\" required></textarea>\n</p>", __( 'Message', 'html-forms' ) ). PHP_EOL;
        $html .= sprintf( "<p>\n\t<input type=\"submit\" value=\"%s\" />\n</p>", __( 'Send', 'html-forms' ) );
        return $html;
    }

}

```