← All changes | plugin-loader.php +164 -97 0.0.12 → 2.12.7 View file →

		@@ -7,40 +7,60 @@
7	7	*/
8	8
9	9	namespace SRFM;
10	10
11		-use SRFM\Inc\Post_Types;
12		-use SRFM\Inc\Form_Submit;
13		-use SRFM\Inc\Gutenberg_Hooks;
14		-use SRFM\API\Block_Patterns;
15		-use SRFM\Inc\Forms_Data;
	11	+if ( ! defined( 'ABSPATH' ) ) {
	12	+ exit; // Exit if accessed directly.
	13	+}
	14	+
16	15	use SRFM\Admin\Admin;
17		-use SRFM\Inc\Blocks\Register;
18		-use SRFM\Inc\Frontend_Assets;
19		-use SRFM\Inc\Helper;
	16	+use SRFM\Admin\Analytics;
	17	+use SRFM\Admin\Notice_Manager;
	18	+use SRFM\Inc\Abilities\Abilities_Registrar;
20	19	use SRFM\Inc\Activator;
	20	+use SRFM\Inc\Admin\Editor_Nudge;
	21	+use SRFM\Inc\Admin\Html_Form_Detector;
21	22	use SRFM\Inc\Admin_Ajax;
	23	+use SRFM\Inc\AI_Form_Builder\AI_Auth;
	24	+use SRFM\Inc\AI_Form_Builder\AI_Form_Builder;
	25	+use SRFM\Inc\AI_Form_Builder\AI_Helper;
	26	+use SRFM\Inc\AI_Form_Builder\Field_Mapping;
	27	+use SRFM\Inc\Background_Process;
	28	+use SRFM\Inc\Blocks\Register;
	29	+use SRFM\Inc\Compatibility\Multilingual\Multilingual_Manager;
	30	+use SRFM\Inc\Compatibility\Multilingual\String_Backfill;
	31	+use SRFM\Inc\Compatibility\Multilingual\String_Collector;
	32	+use SRFM\Inc\Compatibility\Themes\Astra;
	33	+use SRFM\Inc\Create_New_Form;
	34	+use SRFM\Inc\Database\Register as DatabaseRegister;
	35	+use SRFM\Inc\Duplicate_Form;
	36	+use SRFM\Inc\Events_Scheduler;
22	37	use SRFM\Inc\Export;
23		-use SRFM\Inc\Smart_Tags;
	38	+use SRFM\Inc\Form_Restriction;
	39	+use SRFM\Inc\Form_Submit;
	40	+use SRFM\Inc\Form_Views;
	41	+use SRFM\Inc\Forms_Data;
	42	+use SRFM\Inc\Frontend_Assets;
24	43	use SRFM\Inc\Generate_Form_Markup;
25		-use SRFM\Inc\Create_New_Form;
	44	+use SRFM\Inc\Global_Settings\Email_Summary;
26	45	use SRFM\Inc\Global_Settings\Global_Settings;
27		-use SRFM\Inc\Global_Settings\Email_Summary;
28		-use SRFM\Inc\Single_Form_Settings\Compliance_Settings;
29		-use SRFM\Inc\Events_Scheduler;
30		-use SRFM\Inc\AI_Form_Builder\AI_Form_Builder;
31		-use SRFM\Inc\AI_Form_Builder\Field_Mapping;
32		-use SRFM\Inc\Background_Process;
	46	+use SRFM\Inc\Global_Settings\Global_Settings_Defaults;
	47	+use SRFM\Inc\Gutenberg_Hooks;
	48	+use SRFM\Inc\Helper;
	49	+use SRFM\Inc\Learn;
	50	+// region: form-migration — Phase P1 foundation.
	51	+use SRFM\Inc\Migrator\Bootstrap as Migrator_Bootstrap;
	52	+// endregion: form-migration.
	53	+use SRFM\Inc\Onboarding;
33	54	use SRFM\Inc\Page_Builders\Page_Builders;
	55	+use SRFM\Inc\Payments\Payments;
	56	+use SRFM\Inc\Post_Types;
34	57	use SRFM\Inc\Rest_Api;
35		-use SRFM\Inc\AI_Form_Builder\AI_Helper;
36		-use SRFM\Inc\AI_Form_Builder\AI_Auth;
	58	+use SRFM\Inc\Single_Form_Settings\Compliance_Settings;
	59	+use SRFM\Inc\Single_Form_Settings\Form_Settings_Api;
	60	+use SRFM\Inc\Smart_Tags;
37	61	use SRFM\Inc\Updater;
38	62
39		-if ( ! defined( 'ABSPATH' ) ) {
40		- exit; // Exit if accessed directly.
41		-}
42		-
43	63	/**
44	64	* Plugin_Loader
45	65	*
46	66	* @since 0.0.1
		@@ -45,9 +65,8 @@
45	65	*
46	66	* @since 0.0.1
47	67	*/
48	68	class Plugin_Loader {
49		-
50	69	/**
51	70	* Instance
52	71	*
53	72	* @access private
		@@ -56,8 +75,47 @@
56	75	*/
57	76	private static $instance = null;
58	77
59	78	/**
	79	+ * Constructor
	80	+ *
	81	+ * @since 0.0.1
	82	+ */
	83	+ public function __construct() {
	84	+ if ( ! defined( 'SRFM_DIR' ) || ! defined( 'SRFM_FILE' ) ) {
	85	+ return;
	86	+ }
	87	+ // Load the action scheduler before plugin loads.
	88	+ require_once SRFM_DIR . 'inc/lib/action-scheduler/action-scheduler.php';
	89	+
	90	+ spl_autoload_register( [ $this, 'autoload' ] );
	91	+
	92	+ add_action( 'plugins_loaded', [ $this, 'load_textdomain' ] );
	93	+ add_action( 'plugins_loaded', [ $this, 'load_plugin' ], 99 );
	94	+ add_action( 'init', [ $this, 'load_classes' ] );
	95	+ add_action( 'admin_init', [ $this, 'activation_redirect' ] );
	96	+ Analytics::get_instance();
	97	+ /**
	98	+ * The code that runs during plugin activation
	99	+ */
	100	+ register_activation_hook(
	101	+ SRFM_FILE,
	102	+ static function () {
	103	+ Activator::activate();
	104	+ }
	105	+ );
	106	+
	107	+ register_deactivation_hook(
	108	+ SRFM_FILE,
	109	+ static function () {
	110	+ update_option( '__sureforms_do_redirect', false );
	111	+ Events_Scheduler::unschedule_events( 'srfm_weekly_scheduled_events' );
	112	+ Events_Scheduler::unschedule_events( 'srfm_daily_scheduled_action' );
	113	+ }
	114	+ );
	115	+ }
	116	+
	117	+ /**
60	118	* Initiator
61	119	*
62	120	* @since 0.0.1
63	121	* @return object initialized object of class.
		@@ -94,82 +152,25 @@
94	152	[ '', '$1-$2', '-', DIRECTORY_SEPARATOR ],
95	153	$class
96	154	);
97	155
98		- if ( is_string( $filename ) ) {
	156	+ if ( ! is_string( $filename ) ) {
	157	+ return;
	158	+ }
99	159
100		- $filename = strtolower( $filename );
101		-
102		- $file = SRFM_DIR . $filename . '.php';
103		-
104		- // if the file is readable, include it.
105		- if ( is_readable( $file ) ) {
106		- require_once $file;
107		- }
	160	+ // Check for directory traversal.
	161	+ if ( strpos( $filename, '..' ) !== false ) {
	162	+ return;
108	163	}
109	164
110		- }
	165	+ $filename = strtolower( $filename );
111	166
112		- /**
113		- * Constructor
114		- *
115		- * @since 0.0.1
116		- */
117		- public function __construct() {
118		- // Load the action scheduler before plugin loads.
119		- require_once SRFM_DIR . 'inc/lib/action-scheduler/action-scheduler.php';
	167	+ $file = SRFM_DIR . $filename . '.php';
120	168
121		- spl_autoload_register( [ $this, 'autoload' ] );
122		-
123		- add_action( 'plugins_loaded', [ $this, 'load_textdomain' ] );
124		- add_action( 'plugins_loaded', [ $this, 'load_plugin' ], 99 );
125		- add_action( 'init', [ $this, 'load_classes' ] );
126		- add_action( 'admin_init', [ $this, 'activation_redirect' ] );
127		- Post_Types::get_instance();
128		- Form_Submit::get_instance();
129		- Block_Patterns::get_instance();
130		- Gutenberg_Hooks::get_instance();
131		- Register::get_instance();
132		- Frontend_Assets::get_instance();
133		- Helper::get_instance();
134		- Activator::get_instance();
135		- Admin_Ajax::get_instance();
136		- Forms_Data::get_instance();
137		- Export::get_instance();
138		- Smart_Tags::get_instance();
139		- Generate_Form_Markup::get_instance();
140		- Create_New_Form::get_instance();
141		- Global_Settings::get_instance();
142		- Email_Summary::get_instance();
143		- Compliance_Settings::get_instance();
144		- Events_Scheduler::get_instance();
145		- AI_Form_Builder::get_instance();
146		- Field_Mapping::get_instance();
147		- Background_Process::get_instance();
148		- Page_Builders::get_instance();
149		- Rest_Api::get_instance();
150		- AI_Helper::get_instance();
151		- AI_Auth::get_instance();
152		- Updater::get_instance();
153		-
154		- /**
155		- * The code that runs during plugin activation
156		- */
157		- register_activation_hook(
158		- SRFM_FILE,
159		- function () {
160		- Activator::activate();
161		- }
162		- );
163		-
164		- register_deactivation_hook(
165		- SRFM_FILE,
166		- function () {
167		- update_option( '__sureforms_do_redirect', false );
168		- Events_Scheduler::unschedule_events( 'srfm_weekly_scheduled_events' );
169		- Events_Scheduler::unschedule_events( 'srfm_daily_scheduled_action' );
170		- }
171		- );
	169	+ // if the file is readable, include it.
	170	+ if ( is_readable( $file ) ) {
	171	+ require_once $file;
	172	+ }
172	173	}
173	174
174	175	/**
175	176	* Activation Reset
		@@ -177,9 +178,18 @@
177	178	* @return void
178	179	* @since 0.0.1
179	180	*/
180	181	public function activation_redirect() {
	182	+ // Avoid redirection in case of WP_CLI calls.
	183	+ if ( defined( 'WP_CLI' ) && \WP_CLI ) {
	184	+ return;
	185	+ }
181	186
	187	+ // Avoid redirection in case of ajax calls.
	188	+ if ( wp_doing_ajax() ) {
	189	+ return;
	190	+ }
	191	+
182	192	$do_redirect = apply_filters( 'srfm_enable_redirect_activation', get_option( '__srfm_do_redirect' ) );
183	193
184	194	if ( $do_redirect ) {
185	195
		@@ -194,9 +204,9 @@
194	204	],
195	205	admin_url( 'admin.php' )
196	206	)
197	207	);
198		- exit();
	208	+ exit;
199	209	}
200	210	}
201	211	}
202	212
		@@ -206,11 +216,24 @@
206	216	* @return void
207	217	* @since 0.0.1
208	218	*/
209	219	public function load_classes() {
	220	+
	221	+ Register::get_instance();
210	222	if ( is_admin() ) {
211	223	Admin::get_instance();
	224	+ // phpcs:ignore /** @phpstan-ignore-next-line */ -- Class is loaded dynamically in WordPress
	225	+ Notice_Manager::get_instance();
	226	+ Editor_Nudge::get_instance();
212	227	}
	228	+ // Always instantiate — script enqueue is self-gated by `allow_load()`,
	229	+ // while the REST endpoint for converting HTML forms must register
	230	+ // outside the admin context (REST dispatch runs with `is_admin()` ===
	231	+ // false, so admin-only instantiation would 404 the endpoint).
	232	+ Html_Form_Detector::get_instance();
	233	+ Payments::get_instance();
	234	+ Duplicate_Form::get_instance();
	235	+ Learn::get_instance();
213	236	}
214	237
215	238	/**
216	239	* Load Plugin Text Domain.
		@@ -243,9 +266,8 @@
243	266
244	267	/**
245	268	* Language Locale for plugin
246	269	*
247		- * @var string $get_locale The locale to use.
248	270	* Uses get_user_locale()` in WordPress 4.7 or greater,
249	271	* otherwise uses `get_locale()`.
250	272	*/
251	273	$locale = apply_filters( 'plugin_locale', $get_locale, 'sureforms' );//phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound -- wordpress hook
		@@ -262,13 +284,13 @@
262	284	// Look in local /wp-content/plugins/sureforms/languages/ folder.
263	285	load_textdomain( 'sureforms', $mofile_local );
264	286	} else {
265	287	// Load the default language files.
	288	+ // phpcs:ignore PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound -- Fallback when no global/local .mo override is present.
266	289	load_plugin_textdomain( 'sureforms', false, $lang_dir );
267	290	}
268	291	}
269	292
270		-
271	293	/**
272	294	* Loads plugin files.
273	295	*
274	296	* @since 0.0.1
		@@ -275,8 +297,55 @@
275	297	*
276	298	* @return void
277	299	*/
278	300	public function load_plugin() {
	301	+ Post_Types::get_instance();
	302	+ Form_Submit::get_instance();
	303	+ Gutenberg_Hooks::get_instance();
	304	+ Frontend_Assets::get_instance();
	305	+ Helper::get_instance();
	306	+ Activator::get_instance();
	307	+ Admin_Ajax::get_instance();
	308	+ Forms_Data::get_instance();
	309	+ Form_Views::get_instance();
	310	+ Export::get_instance();
	311	+ Smart_Tags::get_instance();
	312	+ Generate_Form_Markup::get_instance();
	313	+ Create_New_Form::get_instance();
	314	+ Global_Settings::get_instance();
	315	+ Global_Settings_Defaults::get_instance();
	316	+ Email_Summary::get_instance();
	317	+ Compliance_Settings::get_instance();
	318	+ Form_Settings_Api::get_instance();
	319	+ Events_Scheduler::get_instance();
	320	+ AI_Form_Builder::get_instance();
	321	+ Field_Mapping::get_instance();
	322	+ Background_Process::get_instance();
	323	+ Page_Builders::get_instance();
	324	+ Rest_Api::get_instance();
	325	+ // region: form-migration — Phase P1 foundation.
	326	+ Migrator_Bootstrap::get_instance();
	327	+ // endregion: form-migration.
	328	+ AI_Helper::get_instance();
	329	+ AI_Auth::get_instance();
	330	+ Updater::get_instance();
	331	+ Onboarding::get_instance();
	332	+ DatabaseRegister::init();
	333	+ Form_Restriction::get_instance();
	334	+ Abilities_Registrar::get_instance();
	335	+ // Initializing Compatibilities.
	336	+ Astra::get_instance();
	337	+ Multilingual_Manager::get_instance();
	338	+ String_Collector::get_instance();
	339	+ String_Backfill::get_instance();
	340	+
	341	+ /**
	342	+ * Load core files necessary for the Spectra block.
	343	+ * This method is called in the Spectra block loader to ensure core files are loaded during the 'plugins_loaded' action.
	344	+ *
	345	+ * Note: This code is added at the bottom to ensure the form block is loaded first,
	346	+ * followed by the Spectra blocks such as heading, image, and icon blocks.
	347	+ */
279	348	$this->load_core_files();
280	349	}
281	350
282	351	/**
		@@ -289,10 +358,8 @@
289	358	public function load_core_files() {
290	359	include_once SRFM_DIR . 'modules/gutenberg/classes/class-spec-block-loader.php';
291	360	}
292	361	}
293		-
294		-
295	362
296	363	/**
297	364	* Kicking this off by calling 'get_instance()' method
298	365	*/