# weforms/1.4.1/includes/api/class-weforms-forms-controller.php weForms – Easy Drag & Drop Contact Form Builder For WordPress, version 1.4.1. 1,653 lines. - Page: https://pluginprobe.com/plugins/weforms/1.4.1/code/includes/api/class-weforms-forms-controller.php - Raw: https://pluginprobe.com/plugins/weforms/1.4.1/raw/includes/api/class-weforms-forms-controller.php - Modified: 2019-09-24T12:24:52+00:00 Line numbers below start at 1. Link to a line or a range by appending a fragment to the page URL, for example `https://pluginprobe.com/plugins/weforms/1.4.1/code/includes/api/class-weforms-forms-controller.php#L10-L20`. ```php namespace, '/'. $this->rest_base, array( array( 'methods' => WP_REST_Server::READABLE, 'callback' => array( $this, 'get_items' ), 'args' => $this->get_collection_params(), 'permission_callback' => array( $this, 'get_items_permissions_check' ), ), array( 'methods' => WP_REST_Server::CREATABLE, 'callback' => array( $this, 'create_item' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::CREATABLE ), 'permission_callback' => array( $this, 'create_item_permissions_check' ), ), array( 'methods' => WP_REST_Server::DELETABLE, 'callback' => array( $this, 'bulk_delete_form' ), 'permission_callback' => array( $this, 'delete_item_permissions_check' ), 'args' => array( 'ids' => array( 'description' => __( 'Unique identifier for the object', 'weforms' ), 'type' => 'array', 'items' => array( 'type' => 'integer' ), 'validate_callback' => array( $this, 'is_bulk_delete_form_exists' ), 'required' => true, ), ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_base . '/(?P\d+)', array( 'args' => array( 'form_id' => array( 'description' => __( 'Unique identifier for the object', 'weforms' ), 'type' => 'integer', 'sanitize_callback' => 'absint', 'validate_callback' => array( $this, 'is_form_exists' ), 'required' => true, ) ), array( 'methods' => WP_REST_Server::READABLE, 'callback' => array( $this, 'get_item' ), 'args' => array( 'context' => $this->get_context_param( [ 'default' => 'view' ] ) ), 'permission_callback' => array( $this, 'get_item_permissions_check' ), ), array( 'methods' => WP_REST_Server::DELETABLE, 'callback' => array( $this, 'delete_item' ), 'args' => array( 'force' => array( 'type' => 'boolean', 'default' => false, 'description' => __( 'Whether to bypass trash and force deletion.', 'weforms' ), ), ), 'permission_callback' => array( $this, 'delete_item_permissions_check' ), ), array( 'methods' => WP_REST_Server::EDITABLE, 'callback' => array( $this, 'update_item' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), 'permission_callback' => array( $this, 'update_item_permissions_check' ), ), ) ); register_rest_route( $this->namespace, '/' . $this->rest_base . '/(?P[\d]+)' .'/entries/', array( 'args' => array( 'form_id' => array( 'description' => __( 'Unique identifier for the object', 'weforms' ), 'type' => 'integer', 'sanitize_callback' => 'absint', 'validate_callback' => array( $this, 'is_form_exists' ), 'required' => true, ), ), array( 'methods' => WP_REST_Server::CREATABLE, 'callback' => array( $this, 'save_entry' ), 'permission_callback' => array( $this, 'submit_permissions_check' ), ), array( 'methods' => WP_REST_Server::READABLE, 'callback' => array( $this, 'get_entry' ), 'permission_callback' => array( $this, 'get_item_permissions_check' ), 'args' => $this->get_collection_params(), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_base . '/(?P[\d]+)' .'/duplicate/', array( 'args' => array( 'form_id' => array( 'description' => __( 'Unique identifier for the object', 'weforms' ), 'key' => 'integer', 'sanitize_callback' => 'absint', 'validate_callback' => array( $this, 'is_form_exists' ), 'required' => true, ), ), array( 'methods' => WP_REST_Server::CREATABLE, 'callback' => array( $this, 'duplicate_form' ), 'permission_callback' => array( $this, 'create_item_permissions_check' ), ), ) ); register_rest_route( $this->namespace, '/' . $this->rest_base . '/(?P[\d]+)' .'/export_entries/', array( 'args' => array( 'form_id' => array( 'description' => __( 'Unique identifier for the object', 'weforms' ), 'type' => 'integer', 'sanitize_callback' => 'absint', 'validate_callback' => array( $this, 'is_form_exists' ), 'required' => true, ), ), array( 'methods' => WP_REST_Server::READABLE, 'callback' => array( $this, 'export_form_entries' ), 'permission_callback' => array( $this, 'get_items_permissions_check' ), ), ) ); register_rest_route( $this->namespace, '/' . $this->rest_base . '/(?P[\d]+)' .'/entries/(?P[\d]+)', array( 'args' => array( 'form_id' => array( 'description' => __( 'Unique identifier for the object', 'weforms' ), 'type' => 'integer', 'sanitize_callback' => 'absint', 'validate_callback' => array( $this, 'is_form_exists' ), 'required' => true, ), 'entry_id' => array( 'description' => __( 'Unique identifier for the object', 'weforms' ), 'type' => 'integer', 'sanitize_callback' => 'absint', 'validate_callback' => array( $this, 'is_entry_exists' ), 'required' => true, ), 'context' => $this->get_context_param( [ 'default' => 'view' ] ) ), array( 'methods' => WP_REST_Server::READABLE, 'callback' => array( $this, 'get_entry_details' ), 'permission_callback' => array( $this, 'get_item_permissions_check' ), ), ) ); register_rest_route( $this->namespace, '/' . $this->rest_base . '/import', array( array( 'methods' => WP_REST_Server::CREATABLE, 'callback' => array( $this, 'import_forms' ), 'permission_callback' => array( $this, 'create_item_permissions_check' ), ), ) ); register_rest_route( $this->namespace, '/' . $this->rest_base . '/export',array( 'args' => array( 'ids' => array( 'description' => __( 'Unique identifier for the object', 'weforms' ), 'type' => 'array', 'validate_callback' => array( $this, 'is_bulk_delete_form_exists' ), 'required' => false, ), ), array ( 'methods' => WP_REST_Server::READABLE, 'callback' => array( $this, 'export_forms' ), 'permission_callback' => array( $this, 'get_item_permissions_check' ), ) ) ); } /** * Check Template Exist * * @param string $param * @param WP_REST_Request $request * @param string $key * * @return boolean **/ public function is_template_exists( $param, $request, $key ) { $templates = weforms()->templates->get_templates(); return (bool) array_key_exists( $param,$templates ); } public function is_field_exists( $param, $request, $key ) { $fields = $request['field_id']; $fields = array_filter( $fields, 'is_numeric' ); if( empty( $fields ) ) { return false; } return true; } public function save_check( $request ) { $form = weforms()->form->get( (int) $request['form_id'] ); $form_error = new WP_Error; $form_settings = $form->get_settings(); $form_fields = $form->get_fields(); $form_entries = weforms_get_form_entries( $form->id, array( 'number' => '', 'offset' => '' ) ); if ( ! $form_fields ) { $form_error->add( 'rest_weforms_form_fields', __( 'No form fields found!','weforms' ), array( 'status' => 404 ) ); } else { if ( $form->has_field( 'recaptcha' ) ) { $validate_Captcha = $this->validate_reCaptcha( $request ); if ( $validate_Captcha == false ) { $form_error->add( 'rest_weforms_form', __( 'reCAPTCHA validation failed', 'weforms'), array( 'status' => 404 ) ); } } $entry_fields = array(); foreach ( $form_fields as $key => $field ) { if( $field['wpuf_cond']['condition_status'] == "yes" ) { $logic = array(); $cond_fields = $field['wpuf_cond']['cond_field']; $cond_operators = $field['wpuf_cond']['cond_operator']; $cond_options = $field['wpuf_cond']['cond_option']; $required = false; foreach ( $cond_fields as $cond_key => $value ) { $operator = $cond_operators[$cond_key]; $selected_value = $request[$value]; $logic_value = $cond_options[$cond_key]; if( $field['wpuf_cond']['cond_logic'] == "all" ) { if( ( $operator == "=" && $selected_value == $logic_value) || ($operator == "!=" && $selected_value != $logic_value) ) { $required = true; } else{ $required = false; break; } } if( $field['wpuf_cond']['cond_logic'] == "any" ) { if( ( $operator == "=" && $selected_value == $logic_value) || ($operator == "!=" && $selected_value != $logic_value) ) { $required = true; break; } else{ $required = false; } } } if( $required ) { if ( isset( $field['required'] ) && $field['required'] == "yes" && empty( $request->get_param( $field['name'] ) ) ) { $form_error->add( 'rest_weforms_form_required_field', __( $field['name'] . ' Required Field Missing' ,'weforms'), array( 'status' => 404 ) ); } } } elseif( ( isset( $field['required'] ) && $field['required'] == "yes" && empty( $request->get_param( $field['name'] ) ) ) ) { $form_error->add( 'rest_weforms_form_required_field', __( $field['name'] . ' Required Field Missing' ,'weforms'), array( 'status' => 404 ) ); } $ignore_list = apply_filters('wefroms_entry_ignore_list', array( 'recaptcha','step_start','section_break' ) ); if ( in_array( $field['template'], $ignore_list ) ) { continue; } if( !empty( $field['name']) ) { $entry_fields[ $field['name'] ] = $request->get_param( $field['name'] ); } if ( ! array_key_exists( $field['template'], $form_fields ) ) { continue; } } foreach ( $entry_fields as $field_key => $field_value ) { $duplicate_check = false; $field_label = 'This'; foreach ( $form_fields as $form_field ) { if ( in_array( $form_field['template'], array( 'text_field', 'website_url', 'numeric_text_field', 'email_address' ) ) && $form_field['name'] == $field_key && isset( $form_field['duplicate'] ) && 'no' == $form_field['duplicate'] ) { $duplicate_check = true; $field_label = $form_field['label']; } } if ( $duplicate_check ) { foreach ( $form_entries as $entry ) { $existing = weforms_get_entry_meta( $entry->id, $field_key, true ); if ( $existing && $field_value == $existing ) { $form_error->add( 'rest_weforms_form_unique_entry', __('field requires a unique entry and has already been used.' ,'weforms'), array( 'status' => 404 ) ); } } } } foreach ( $form_fields as $key => $field ) { //skip custom html field as it is not saved if ( 'custom_html' == $field['template'] ) continue; //skip recaptcha field as it is not saved if ( 'recaptcha' == $field['template'] ) continue; if( !empty( $field['name'] ) ) { $value = $request[ $field['name'] ]; } if ( 'file_upload' === $field['template'] ) { $file = $request->get_param('wpuf_files'); $file_ids = $file[ $field['name'] ]; foreach ($file_ids as $key => $file_id) { if ( !wp_get_attachment_url( $file_id ) ) { $form_error->add( 'rest_weforms_form_file', __( 'File Not Found' ,'weforms'), array( 'status' => 404 ) ); } } } if ( 'image_upload' === $field['template'] ) { $image = $request->get_param('wpuf_files'); $image_ids = $image[ $field['name'] ]; foreach ($image_ids as $key => $image_id) { if ( !wp_get_attachment_url( $image_id ) ) { $form_error->add( 'rest_weforms_form_image', __( 'Image Not Found' ,'weforms'), array( 'status' => 404 ) ); } } } if ( 'date_field' === $field['template'] ) { $date_format = $field['format']; $possible_date= array( "dd-mm-yy" => "d-m-y", "yy-mm-dd" => "y-m-d", "mm-dd-yy" => "m-d-y", "dd/mm/yy" => "d/m/y", "yy/mm/dd" => "y/m/d", "mm/dd/yy" => "m/d/y", "dd.mm.yy" => "d/m/y", "yy.mm.dd" => "y/m/d", "mm.dd.yy" => "m/d/y", ); foreach ( $possible_date as $key => $date ) { if ( strcmp( $key,$date_format ) == 0 ) { $date_format = $date; break; } } $d = DateTime::createFromFormat( $date_format, $value ); if ( !( $d && ( $d->format($date_format) == $value ) ) ) { $form_error->add( 'rest_weforms_form_date_field', __( 'Date Field Is not Valid' ,'weforms'), array( 'status' => 404 ) ); } } if ( 'email_address' === $field['template'] ) { if( !$this->email_validation( $value ) ){ $form_error->add( 'rest_weforms_form_email', __( 'Invalid Email Address' ,'weforms'), array( 'status' => 404 ) ); } } if ( 'website_url' === $field['template'] ) { if ( !filter_var( $value, FILTER_VALIDATE_URL ) ) { $form_error->add( 'rest_weforms_form_url', __( 'Invalid Url Address' ,'weforms'), array( 'status' => 404 ) ); } } if ( 'numeric_text_field' === $field['template'] ) { if( !is_numeric( $value ) ) { $form_error->add( 'rest_weforms_form_number', __( 'Number Field Should be numberic value ' ,'weforms'), array( 'status' => 404 ) ); } } if ( 'single_product' === $field['template'] ) { if ( ! $value ) { $value = array(); } $value['price'] = isset( $value['price'] ) ? floatval( $value['price'] ) : 0; $value['quantity'] = isset( $value['quantity'] ) ? floatval( $value['quantity'] ) : 0; $quantity = isset( $field['quantity'] ) ? $field['quantity'] : array(); $price = isset( $field['price'] ) ? $field['price'] : array(); if ( isset( $price['is_flexible'] ) && $price['is_flexible'] ) { $min = isset( $price['min'] ) ? floatval( $price['min'] ) : 0; $max = isset( $price['max'] ) ? floatval( $price['max'] ) : 0; if ( $value['price'] < $min ) { return new WP_Error( 'rest_weforms_form_price', sprintf( __( '%s price must be equal or greater than %s', $field['weforms'], $min , 'weforms' ) ), array( 'status' => 404 ) ); } if ( $max && $value['price'] > $max ) { $form_error->add( 'rest_weforms_form_price', sprintf( __( '%s price must be equal or less than %s', $field['weforms'], $max , 'weforms' ) ), array( 'status' => 404 ) ); } } if ( isset( $quantity['status'] ) && $quantity['status'] ) { $min = isset( $quantity['min'] ) ? floatval( $quantity['min'] ) : 0; $max = isset( $quantity['max'] ) ? floatval( $quantity['max'] ) : 0; if ( $value['quantity'] < $min ) { $form_error->add( 'rest_weforms_form_quantity', sprintf( __( '%s quantity must be equal or greater than %s', $field['weforms'], $min , 'weforms' ) ), array( 'status' => 404 ) ); } if ( $max && $value['quantity'] > $max ) { $form_error->add( 'rest_weforms_form_quantity', sprintf( __( '%s quantity must be equal or less than %s', $field['weforms'], $max , 'weforms' ) ), array( 'status' => 404 ) ); } } } } } if( count( $form_error->get_error_messages() ) > 0 ) { return $form_error; } else { return true; } } /** * reCaptcha Validation * * @since 1.4.2 * * @return void */ function validate_reCaptcha( $request ) { if ( class_exists( 'WPUF_ReCaptcha' ) ) { $recaptcha_class = 'WPUF_ReCaptcha'; } else { if ( ! function_exists( 'recaptcha_get_html' ) ) { require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib.php'; } require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib_noCaptcha.php'; $recaptcha_class = 'Weforms_ReCaptcha'; } $invisible = isset( $request['g-recaptcha-response'] ) ? false : true; $recaptcha_settings = weforms_get_settings( 'recaptcha' ); $secret = isset( $recaptcha_settings->secret ) ? $recaptcha_settings->secret : ''; if ( ! $invisible ) { $response = null; $reCaptcha = new $recaptcha_class( $secret ); $resp = $reCaptcha->verifyResponse( $_SERVER['REMOTE_ADDR'], $request['g-recaptcha-response'] ); if ( ! $resp->success ) { return false; } } else { $recap_challenge = isset( $request['recaptcha_challenge_field'] ) ? $request['recaptcha_challenge_field'] : ''; $recap_response = isset( $request['recaptcha_response_field'] ) ? $request['recaptcha_response_field'] : ''; $resp = recaptcha_check_answer( $secret, $_SERVER['REMOTE_ADDR'], $recap_challenge, $recap_response ); if ( ! $resp->is_valid ) { ob_clean(); return false; } } return true; } function weforms_api_insert_entry( $args, $fields = array() ) { global $wpdb; $browser = weforms_get_browser(); $defaults = array( 'form_id' => 0, 'user_id' => get_current_user_id(), 'user_ip' => ip2long( weforms_get_client_ip() ), 'user_device' => $browser['name'] . '/' . $browser['platform'], 'created_at' => current_time( 'mysql' ) ); $r = wp_parse_args( $args, $defaults ); if ( ! $r['form_id'] ) { return new WP_Error( 'no-form-id', __( 'No form ID was found.', 'weforms' ) ); } if ( ! $fields ) { return new WP_Error( 'no-fields', __( 'No form fields were found.', 'weforms' ) ); } $success = $wpdb->insert( $wpdb->weforms_entries, $r ); if ( is_wp_error( $success ) || ! $success ) { return new WP_Error( 'could-not-create', __( 'Could not create an entry', 'weforms' ), array( 'status' => 404 ) ); } $entry_id = $wpdb->insert_id; foreach ( $fields as $key => $value ) { weforms_add_entry_meta( $entry_id, $key, $value ); } return $entry_id; } /** * Save and existing form * * @since 1.4.2 * * @param array $data Contains form_fields, form_settings, form_settings_key data * * @return boolean */ public function weforms_api_save( $data ) { $saved_wpuf_inputs = array(); wp_update_post( array( 'ID' => $data['form_id'], 'post_status' => 'publish', 'post_title' => $data['post_title'] ) ); $existing_wpuf_input_ids = get_children( array( 'post_parent' => $data['form_id'], 'post_status' => 'publish', 'post_type' => 'wpuf_input', 'numberposts' => '-1', 'orderby' => 'menu_order', 'order' => 'ASC', 'fields' => 'ids' ) ); $new_wpuf_input_ids = array(); if ( ! empty( $data['form_fields'] ) ) { foreach ( $data['form_fields'] as $order => $field ) { if ( ! empty( $field['is_new'] ) ) { unset( $field['is_new'] ); unset( $field['id'] ); $field_id = 0; } else { $field_id = $field['id']; } $field_id = weforms_insert_form_field( $data['form_id'], $field, $field_id, $order ); $new_wpuf_input_ids[] = $field_id; $field['id'] = $field_id; $saved_wpuf_inputs[] = $field; } } $form = weforms()->form->get( $data['form_id'] ); $new_form_settings = array_merge( $data['form_settings'], array_diff_key( $form->get_settings(), $data['form_settings'] ) ); $new_form_notifications = array_merge( $data['notifications'], array_diff_key( $form->get_notifications(), $data['notifications'] ) ); $new_form_integrations = array_merge( $data['integrations'], array_diff_key( $form->get_integrations(), $data['integrations'] ) ); update_post_meta( $data['form_id'], $data['form_settings_key'], $new_form_settings ); update_post_meta( $data['form_id'], 'notifications', $new_form_notifications ); update_post_meta( $data['form_id'], 'integrations', $new_form_integrations ); update_post_meta( $data['form_id'], '_weforms_version', WEFORMS_VERSION ); return $saved_wpuf_inputs; } /** * Bulk Delete Form Exist * * @since 1.4.2 * * @param array $param * @param WP_REST_Request $request Full details about the request * @param string $key * * @return boolean **/ public function is_bulk_delete_form_exists( $param, $request, $key ) { global $wpdb; $forms = $request['ids']; if( is_array( $forms ) ) { $forms = array_filter( $forms, 'is_numeric' ); if( empty( $forms ) ) { return false; } $form_id = implode( ",", $forms ); $querystr = " SELECT $wpdb->posts.id FROM $wpdb->posts WHERE $wpdb->posts.post_type = 'wpuf_contact_form' AND $wpdb->posts.ID IN ( $form_id ) "; } else { $form_id = (int) $forms; $querystr = " SELECT $wpdb->posts.id FROM $wpdb->posts WHERE $wpdb->posts.post_type = 'wpuf_contact_form' AND $wpdb->posts.ID = $form_id "; } $result = $wpdb->get_results( $querystr ); if ( empty( $result ) ) { return false; } else { return true; } } public function email_validation( $value ) { return ( !preg_match( "/^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$/", $value ) ) ? false : true; } public function get_items( $request ) { $args = array( 'posts_per_page' => isset( $request['per_page'] ) ? intval( $request['per_page'] ) : 10, 'paged' => isset( $request['page'] ) ? absint( $request['page'] ) : 1, 'order' => isset( $request['order'] ) ? $request['order'] : 'DESC', 'orderby' => isset( $request['orderby'] ) ? $request['orderby'] : 'post_date', 'post_status' => isset( $request['status'] ) ? $request['status'] : 'any', 's' => isset( $request['search'] ) ? $request['search'] : '', ); $forms_array = array(); $defaults = array( 'post_type' => 'wpuf_contact_form', 'post_status' => array( 'publish', 'draft', 'pending' ) ); $args = wp_parse_args( $args, $defaults ); $query = new WP_Query( $args ); $forms = $query->get_posts(); $formatted_items = []; if ( $forms ) { foreach ( $forms as $form_obj ) { $form = new WeForms_Form( $form_obj ); $form_author = $form->data->post_author; $form_status = $form->is_api_form_submission_open(); $data = array(); $data['id'] = $form->id; $data['name'] = $form->name; $data['created_by'] = get_the_author_meta( 'user_nicename' , $form_author ); $data['created_on'] = $form->data->post_date; $data['status'] = $form_status['type']; $data['status_info'] = isset( $form_status['message'] ) ? $form_status['message'] : ''; $data['fields'] = count( $form->get_fields() ); $data['entries'] = $form->num_form_entries(); $data['views'] = $form->num_form_views(); $data['payments'] = $form->num_form_payments(); $data = $this->prepare_item_for_response( (array) $data, $request ); $formatted_items[] = $this->prepare_response_for_collection( $data ); } } $contact_forms = apply_filters( 'weforms_rest_get_contact_forms', $formatted_items ); $response = rest_ensure_response( $contact_forms ); $response = $this->format_collection_response( $response, $request, (int) $query->found_posts ); return $response; } public function get_item( $request ) { $form_id = absint( $request['form_id'] ); $form = weforms()->form->get( $form_id ); $form_status = $form->is_api_form_submission_open(); $form_author = $form->data->post_author; $data = array( 'id' => $form->data->ID, 'name' => $form->name, 'created_by' => get_the_author_meta( 'user_nicename' , $form_author ), 'created_on' => $form->data->post_date, 'status' => $form_status['type'], 'status_info' => isset( $form_status['message'] ) ? $form_status['message'] : '', 'fields' => $form->get_fields(), 'settings' => $form->get_settings(), 'notifications' => $form->get_notifications(), 'integrations' => $form->get_integrations() ); $data = $this->prepare_item_for_response( $data, $request ); $response = rest_ensure_response( $data ); return $response; } public function create_item( $request ) { $template = isset( $request['template'] ) ? sanitize_text_field( $request['template'] ) : ''; $name = isset( $request['name'] ) ? sanitize_text_field( $request['name'] ) : ''; $setting = isset( $request['settings'] ) ? $request['settings'] : array(); $notifications = isset( $request['notifications'] ) ? $request['notifications'] : array(); $fields = isset( $request['fields'] ) ? $request['fields'] : array(); $integrations = isset( $request['integrations'] ) ? $request['integrations'] : array(); $default_form_settings = weforms_get_default_form_settings(); $default_form_notification = array( weforms_get_default_form_notification() ); $integration_list = weforms()->integrations->get_integration_js_settings(); $field_list = weforms()->fields->get_fields(); if( isset( $template ) && !empty( $template ) ) { $form_id = weforms()->templates->create( $template ); } elseif( !empty( $name ) ) { if( !empty( $fields ) ) { foreach ( $fields as $key => $field ) { $f = in_array( $field['template'], array_keys( $field_list ) ); if( empty( $f ) ) { unset($fields[ $key ] ); } } } $fields = array_intersect_key( $fields, $field_list ); $form_id = weforms()->form->create( $name, $fields ); if ( is_wp_error( $form_id ) ) { return new WP_Error( 'rest_invalid_data', __( 'Could not create the form', 'weforms') , array( 'status' => 404 ) ); } $new_form_settings = array_diff_key( $default_form_settings, $setting ); $new_form_notification = array_diff_key( $default_form_notification, $notifications ); $new_form_integrations = array_intersect_key( $integrations, $integration_list ); if ( !class_exists( 'WeForms_Pro' ) ) { $new_form_integrations = array_udiff_assoc( $new_form_integrations, $integration_list, function( $item, $item_list ) { if( isset( $item_list['pro'] ) && $item_list['pro'] == true ) { return 0; } return $item; } ); } update_post_meta( $form_id, 'wpuf_form_settings', $new_form_settings ); update_post_meta( $form_id, 'notifications', $new_form_notification ); update_post_meta( $form_id, 'integrations', $new_form_integrations ); } if ( is_wp_error( $form_id ) || is_null( $form_id ) ) { return new WP_Error( 'rest_weforms_invalid_data', __( 'Could not create the form', 'weforms') , array( 'status' => 404 ) ); } $form = weforms()->form->get( $form_id ); $data = array( 'id' => $form->data->ID, 'name' => $form->name, 'fields' => $form->get_fields(), 'settings' => $form->get_settings(), 'notifications' => $form->get_notifications(), 'integrations' => $form->get_integrations() ); $response = $this->prepare_item_for_response( $data, $request ); $response = rest_ensure_response( $response ); $response->set_status( 200 ); $response->header( 'Location', rest_url( sprintf( '/%s/%s/%d', $this->namespace, $this->rest_base, $form->id ) ) ); return $response; } public function update_item( $request ) { $data = array(); $form_id = $request['form_id']; $data['form_id'] = $form_id; $data['form_settings_key'] = 'wpuf_form_settings'; if( isset( $request['name'] ) && !empty( $request['name'] ) ) { $data['post_title'] = $request['name']; } if( isset( $request['settings'] ) && !empty( $request['settings'] ) ) { $data['form_settings'] = $request['settings']; } if( isset( $request['fields'] ) && !empty( $request['fields'] ) ) { $data['form_fields'] = $request['fields']; } if( isset( $request['notifications'] ) && !empty( $request['notifications'] ) ) { $data['notifications'] = $request['notifications']; } if( isset( $request['integrations'] ) && !empty( $request['integrations'] ) ) { $data['integrations'] = $request['integrations']; } $this->weforms_api_update( $data ); $form = weforms()->form->get( $form_id ); $response_data = array( 'id' => $form->data->ID, 'name' => $form->name, 'fields' => $form->get_fields(), 'settings' => $form->get_settings(), 'notifications' => $form->get_notifications(), 'integrations' => $form->get_integrations() ); $response = $this->prepare_item_for_response( $response_data, $request ); $response = rest_ensure_response( $response ); $response->set_status( 201 ); $response->header( 'Location', rest_url( sprintf( '/%s/%s/%d', $this->namespace, $this->rest_base, $form->id ) ) ); return $response; } public function delete_item( $request ) { $form_array = array(); $form_id = $request['form_id']; $form = $this->delete( $form_id ); if ( is_wp_error( $form ) ) { return new WP_Error( 'error', __( 'Could not delete the form', 'weforms') , array( 'status' => 404 ) ); } $form_array['id'] = $form_id; $form_array['message'] = __( 'form deleted successfully', 'weforms' ); $form_array['data']['status'] = 200; $response = $this->prepare_response_for_collection( $form_array, $request ); $response = rest_ensure_response( $response ); return $response; } /** * Duplicate Form * * @since 1.4.2 * * @param WP_REST_Request $request Full details about the request. * * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure. **/ public function duplicate_form( $request ) { $form_id = $request['form_id']; $form = weforms()->form->get( $form_id ); if ( empty( $form ) ) { return new WP_Error( 'error', __( 'Could not duplicate the form', 'weforms') , array( 'status' => 404 ) ); } $form_id = weforms()->form->create( $form->name, $form->get_fields()); $data = array( 'form_id' => absint( $form_id ), 'post_title' => sanitize_text_field( $form->name ) . ' (#' . $form_id . ')', 'form_fields' => weforms()->form->get( $form_id )->get_fields(), 'form_settings' => $form->get_settings(), 'form_settings_key' => 'wpuf_form_settings', 'notifications' => $form->get_notifications(), 'integrations' => $form->get_integrations() ); $form_fields = weforms()->form->save( $data ); $form = weforms()->form->get( $form_id ); $form->settings = $form->get_settings(); $response_data = array( 'id' => $form->data->ID, 'name' => $form->name, 'fields' => $form->get_fields(), 'settings' => $form->get_settings(), 'notifications' => $form->get_notifications(), 'integrations' => $form->get_integrations() ); $response = $this->prepare_item_for_response( $response_data, $request ); $response = rest_ensure_response( $response ); $response->set_status( 201 ); $response->header( 'Location', rest_url( sprintf( '/%s/%s/%d', $this->namespace, $this->rest_base, $form->id ) ) ); return $response; } /** * Prepare a single user output for response * * @param object $item * @param WP_REST_Request $request Request object. * @param array $additional_fields (optional) * * @return WP_REST_Response $response Response data. */ public function prepare_item_for_response( $item, $request, $additional_fields = [] ) { $response = rest_ensure_response( $item ); $response = $this->add_links( $response, $item ); return $response; } /** * Get the Form's schema, conforming to JSON Schema * * @return array */ public function get_item_schema() { $schema = array( '$schema' => 'http://json-schema.org/draft-04/schema#', 'title' => 'forms', 'type' => 'object', 'properties' => array( 'form_id' => array( 'description' => __( 'Unique identifier for the object', 'weforms' ), 'type' => 'integer', 'sanitize_callback' => 'absint', 'validate_callback' => array( $this, 'is_form_exists' ), 'context' => array( 'embed', 'view', 'edit' ), 'required' => true, 'readonly' => true, ), 'name' => array( 'description' => __( '', 'weforms' ), 'type' => 'string', 'context' => [ 'edit','view'], 'sanitize_callback' => 'sanitize_text_field', 'required' => false, ), 'template' => array( 'required' => false, 'type' => 'string', 'description' => 'template name', 'sanitize_callback' => 'sanitize_text_field', 'validate_callback' => array( $this, 'is_template_exists' ) ), "settings" => array( 'description' => __( '', 'weforms' ), 'type' => 'object', 'context' => [ 'edit' ,'view'], 'required' => false, ), "notifications" => array( 'description' => __( '', 'weforms' ), 'type' => 'object', 'context' => [ 'edit','view' ], 'required' => false, ), "fields" => array( 'description' => __( '', 'weforms' ), 'type' => 'object', 'context' => [ 'edit','view' ], 'required' => false, ), "integrations" => array( 'description' => __( '', 'weforms' ), 'context' => [ 'edit','view' ], 'type' => 'object', 'required' => false, ), ), ); return $schema; } public function get_collection_params() { $query_params = parent::get_collection_params(); $query_params['context']['default'] = 'view'; $schema = $this->get_item_schema(); $schema_properties = $schema['properties']; return $query_params; } /** * Delete a form with it's input fields * * @since 1.4.2 * * @param integer $form_id * @param boolean $force * * @return void */ public function delete( $form_id, $force = true ) { global $wpdb; $form = weforms()->form->get( $form_id ); if ( !$form->id ) { return new WP_Error( 'form_not_found', __( 'Form not found', 'weforms' ) ); } $wp_post = wp_delete_post( $form_id, $force ); if ( ! $wp_post ) { return new WP_Error( 'unable_to_delete', __( 'Unable to delete form', 'weforms' ) ); } // delete form inputs as WP doesn't know the relationship return $wpdb->delete( $wpdb->posts, array( 'post_parent' => $form_id, 'post_type' => 'wpuf_input' ) ); return $form; } /** * Bulk Delete Form * * @since 1.3.9 * * @param WP_REST_Request $request * * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure. */ public function bulk_delete_form( $request ) { $form_ids = $request['ids']; if ( empty( $form_ids ) ) { return new WP_Error( 'error', __( 'No form ids provided!', 'weforms') , array( 'status' => 404 ) ); } $response = array(); foreach ( $form_ids as $form_id ) { $status = $this->delete( $form_id ); if( is_wp_error( $status ) ) { $response[$form_id] = $status->get_error_message(); } else { $response[$form_id] = __( 'form deleted successfully ', 'weforms' ); } } $response = $this->prepare_response_for_collection( $response ); $response = rest_ensure_response( $response ); return $response; } /** * Update and existing form * * @since 1.4.2 * * @param array $data Contains form_fields, form_settings, form_settings_key data * * @return boolean */ public function weforms_api_update( $data ) { $saved_wpuf_inputs = array(); if( isset( $data['post_title'] ) && !empty( $data['post_title'] ) ) { wp_update_post( array( 'ID' => $data['form_id'], 'post_status' => 'publish', 'post_title' => $data['post_title'] ) ); } $existing_wpuf_input_ids = get_children( array( 'post_parent' => $data['form_id'], 'post_status' => 'publish', 'post_type' => 'wpuf_input', 'numberposts' => '-1', 'orderby' => 'menu_order', 'order' => 'ASC', 'fields' => 'ids' ) ); $new_wpuf_input_ids = array(); if ( ! empty( $data['form_fields'] ) ) { foreach ( $data['form_fields'] as $order => $field ) { if ( ! empty( $field['is_new'] ) ) { unset( $field['is_new'] ); unset( $field['id'] ); $field_id = 0; } else { $field_id = $field['id']; } $field_id = weforms_insert_form_field( $data['form_id'], $field, $field_id, $order ); $new_wpuf_input_ids[] = $field_id; $field['id'] = $field_id; $saved_wpuf_inputs[] = $field; } } $form = weforms()->form->get( $data['form_id'] ); if( isset( $data['form_settings'] ) && !empty( $data['form_settings'] ) ) { $new_form_settings = array_merge( $data['form_settings'], array_diff_key( $form->get_settings(), $data['form_settings'] ) ); update_post_meta( $data['form_id'], 'wpuf_form_settings', $new_form_settings ); } if( isset( $data['notifications'] ) && !empty( $data['notifications'] ) ) { $existing_notifications = $form->get_notifications(); foreach ( $existing_notifications as $key => $notification ) { if( array_key_exists( $key , $data['notifications'] ) ) { $existing_notifications[ $key ] = $data['notifications'][$key]; } } update_post_meta( $data['form_id'], 'notifications', $existing_notifications ); } if( isset( $data['integrations'] ) && !empty( $data['integrations'] ) ) {$integration_list = weforms()->integrations->get_integration_js_settings(); $form_integration = $form->get_integrations(); $integrations = $data['integrations']; $integrations = array_intersect_key( $integrations, $integration_list ); if ( !class_exists( 'WeForms_Pro' ) ) { $integrations = array_udiff_assoc( $integrations, $integration_list, function( $item, $item_list ) { if( isset( $item_list['pro'] ) && $item_list['pro'] == true ) { return 0; } return $item; } ); } $new_form_integrations = array_merge( $integrations, array_diff_key( $form->get_integrations(), $integrations ) ); update_post_meta( $data['form_id'], 'integrations', $new_form_integrations ); } update_post_meta( $data['form_id'], '_weforms_version', WEFORMS_VERSION ); return $saved_wpuf_inputs; } /** * Import Forms * * @since 1.4.2 * * @param WP_REST_Request $request * * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure. **/ public function import_forms( $request ) { $files = $request->get_file_params(); if ( ! $files ) { return new WP_Error( 'rest_invalid_file',__( 'No file found to import.', 'weforms' ), array( 'status' => 404) ); } $file_ext = pathinfo( $files['file']['name'], PATHINFO_EXTENSION ); if ( ! class_exists( 'WeForms_Admin_Tools' ) ) { require_once WEFORMS_INCLUDES . '/admin/class-admin-tools.php'; } if ( ( $file_ext == 'json' ) && ( $files['file']['size'] < 500000 ) ) { $status = WeForms_Admin_Tools::import_json_file( $files['file']['tmp_name'] ); if ( $status ) { $response_data = array(); $response_data ['message'] = __( 'The forms have been imported successfully!', 'weforms' ); $response_data ['status'] = 200; $response = $this->prepare_response_for_collection( $response_data ); $response = rest_ensure_response( $response ); return $response; } else { return new WP_Error( 'rest_invalid_file',__( 'Something went wrong importing the file.', 'weforms' ), array( 'status' => 404 ) ); } } else { return new WP_Error( 'rest_invalid_file',__( 'Invalid file or file size too big.', 'weforms' ), array( 'status' => 404 ) ); } } /** * Save Form Entry from Frontend * * @since 1.4.2 * * @param WP_REST_Request $request Full details about the request. * * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure **/ public function save_entry( $request ) { $form_id = $request['form_id']; $page_id = isset( $request['page_id'] ) ? intval( $request['page_id'] ) : 0; $form = weforms()->form->get( $form_id ); $form_settings = $form->get_settings(); $form_fields = $form->get_fields(); $entry_fields = $form->prepare_entries( $request ); $entry_fields = apply_filters( 'weforms_before_entry_submission', $entry_fields, $form, $form_settings, $form_fields ); $entry_id = $this->weforms_api_insert_entry (array( 'form_id' => $form_id ), $entry_fields); if ( is_wp_error( $entry_id ) ) { return new WP_Error( 'rest_invalid_data', $entry_id->get_error_message(), array( 'status' => 404 ) ); } // redirect URL $show_message = false; $redirect_to = false; if ( $form_settings['redirect_to'] == 'page' ) { $redirect_to = get_permalink( $form_settings['page_id'] ); } elseif ( $form_settings['redirect_to'] == 'url' ) { $redirect_to = $form_settings['url']; } elseif ( $form_settings['redirect_to'] == 'same' ) { $show_message = true; } else { $redirect_to = get_permalink( $post_id ); } // Fire a hook for integration do_action( 'weforms_entry_submission', $entry_id, $form_id, $page_id, $form_settings ); $field_search = $field_replace = array(); foreach ( $form_fields as $r_field ) { $field_search[] = '{'.$r_field['name'].'}'; if ( $r_field['template'] == 'name_field' ) { $field_replace[] = implode( ' ' , explode( '|', $entry_fields[$r_field['name']] )); } else { $field_replace[] = isset( $entry_fields[$r_field['name']] ) ? $entry_fields[$r_field['name']] : ''; } } $message = str_replace( $field_search, $field_replace, $form_settings['message'] ); $notification = new WeForms_Notification( array( 'form_id' => $form_id, 'page_id' => $page_id, 'entry_id' => $entry_id ) ); $notification->send_notifications(); $entry_data = weforms_get_entry_data( $entry_id ); $response_data = array(); $response_data['id'] = $entry_id; $response_data['message'] = "Entries Created Successfully"; $response_data['success'] = true; $response_data['redirect_to'] = $redirect_to; $response_data['show_message'] = $show_message; $response_data['message'] = $message; $response_data['data'] = $entry_data['data']; $response_data['form_id'] = $form_id; $response_data['entry_id'] = $entry_id; $response = apply_filters( 'weforms_entry_submission_response', $response_data ); $response = $this->prepare_response_for_collection( $response_data ); $response = rest_ensure_response( $response ); return $response; } /** * Export Form Entries * * **/ public function export_form_entries( $request ) { $form_id = $request['form_id']; if ( ! $form_id ) { return new WP_Error( 'rest_weforms_invalid_form',__( 'Form id not exists', 'weforms' ) ); } $entry_array = []; $columns = weforms_get_entry_columns( $form_id, false ); $total_entries = weforms_count_form_entries( $form_id ); $entries = weforms_get_form_entries( $form_id, array( 'number' => $total_entries, 'offset' => 0 ) ); $extra_columns = array( 'ip_address' => __( 'IP Address', 'weforms' ), 'created_at' => __( 'Date', 'weforms' ) ); $columns = array_merge( array( 'id' => 'Entry ID' ), $columns, $extra_columns ); foreach ($entries as $entry) { $temp = array(); foreach ($columns as $column_id => $label) { switch ( $column_id ) { case 'id': $temp[ $column_id ] = $entry->id; break; case 'ip_address': $temp[ $column_id ] = $entry->ip_address; break; case 'created_at': $temp[ $column_id ] = $entry->created_at; break; default: $value = weforms_get_entry_meta( $entry->id, $column_id, true ); $value = weforms_get_pain_text( $value ); $temp[ $column_id ] = str_replace( WeForms::$field_separator, ' ', $value ); break; } } $entry_array[] = $temp; } error_reporting(0); if ( ob_get_contents() ) { ob_clean(); } $blogname = sanitize_title( strtolower( str_replace( " ", "-", get_option( 'blogname' ) ) ) ); $file_name = $blogname . "-weforms-entries-" . time() . '.csv'; // force download header("Content-Type: application/force-download"); header("Content-Type: application/octet-stream"); header("Content-Type: application/download"); // disposition / encoding on response body header("Content-Disposition: attachment;filename={$file_name}"); header("Content-Transfer-Encoding: binary"); $handle = fopen("php://output", 'w'); //handle UTF-8 chars conversion for CSV fprintf( $handle, chr(0xEF).chr(0xBB).chr(0xBF) ); // put the column headers fputcsv( $handle, array_values( $columns ) ); // put the entry values foreach ( $entry_array as $row ) { fputcsv( $handle, $row ); } fclose( $handle ); exit; } public function submit_permissions_check( $request ) { if ( !is_weforms_api_allowed_guest_submission() ) { return new WP_Error( 'rest_cannot_submit_entry', __( 'Sorry, you have no permission to submit this form.','weforms' ), array( 'status' => rest_authorization_required_code() ) ); } $form = weforms()->form->get( (int) $request['form_id'] ); $form_is_open = $form->is_submission_open(); if ( is_wp_error( $form_is_open ) ) { return new WP_Error( 'rest_weforms_form_permission', $form_is_open->get_error_message(), array( 'status' => 404 ) ); } $form_validations = $this->save_check( $request ); if( is_wp_error( $form_validations ) ) { $form_message = array(); foreach ( $form_validations->get_error_messages() as $error ) { $form_message[] = $error; } return new WP_Error( 'error', $form_message, array( 'status' => 404 ) ); } return true; } /** * Get Form Entries * * @since 1.4.2 * * @param WP_REST_Request $request * * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure. * */ public function get_entry( $request ) { $form_id = isset( $request['form_id'] ) ? intval( $request['form_id'] ) : 0; $current_page = isset( $request['page'] ) ? intval( $request['page'] ) : 1; $per_page = isset( $request['per_page'] ) ? intval( $request['per_page'] ) : 10; $status = isset( $request['status'] ) ? $request['status'] : 'publish'; $offset = ( $current_page - 1 ) * $per_page; if ( ! $form_id ) { return new WP_Error( 'rest_invalid_form', __( 'Please provide a form id', 'weforms'), array( 'status' => 404 ) ); } $entries = weforms_get_form_entries( $form_id, array( 'number' => $per_page, 'offset' => $offset, 'status' => $status, ) ); $columns = weforms_get_entry_columns( $form_id ); $total_entries = weforms_count_form_entries( $form_id, $status ); array_map( function( $entry ) use ( $columns,$form_id ) { $entry_id = $entry->id; $entry->fields = array(); $entry->links = rest_url( sprintf( '%s/%s/%d/%s/%d', $this->namespace, $this->rest_base, $form_id, 'entries', $entry->id ) ); foreach ( $columns as $meta_key => $label ) { $value = weforms_get_entry_meta( $entry_id, $meta_key, true ); $entry->fields[ $meta_key ] = str_replace( WeForms::$field_separator, ' ', $value ); } }, $entries ); $entries = apply_filters( 'weforms_get_entries', $entries, $form_id ); $response = $entries; $max_pages = ceil( $total_entries / $per_page ); $response = $this->prepare_response_for_collection( $response ); $response = rest_ensure_response( $response ); $response->header( 'X-WP-Total', (int) $total_entries ); $response->header( 'X-WP-TotalPages', (int) $max_pages ); return $response; } /** * Get Single Entry Details * * @since 1.4.2 * * @param WP_REST_Request $request Full details about the request. * * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure **/ public function get_entry_details( $request ) { $form_id = $request['form_id']; $entry_id = $request['entry_id']; $form = weforms()->form->get( $form_id ); $form_settings = $form->get_settings(); $entry = $form->entries()->get( $entry_id ); $fields = $entry->get_fields(); $fields_data = array_map( function( $field ) { return [ 'name' => $field['name'], 'label' => $field['label'], 'value' => $field['value'], ]; }, $fields ); $metadata = $entry->get_metadata(); $payment = $entry->get_payment_data(); if ( isset( $payment->payment_data ) && is_serialized( $payment->payment_data ) ) { $payment->payment_data = unserialize( $payment->payment_data ); } $has_empty = false; $answers = array(); $respondentPoints = isset($form_settings['total_points']) ? floatval( $form_settings['total_points'] ) : 0 ; foreach ( $fields as $key => $field ) { if ( $form_settings['quiz_form'] == 'yes' ) { $selectedAnswers = isset($field['selected_answers']) ? $field['selected_answers'] : ''; $givenAnswer = isset($field['value']) ? $field['value'] : ''; $options = isset($field['options']) ? $field['options'] : ''; $template = $field['template']; $fieldPoints = isset($field['points']) ? floatval( $field['points'] ) : 0; if ( $template == 'radio_field' || $template == 'dropdown_field' ) { $answers[$field['name']] = true; if ( empty($givenAnswer) ) { $answers[$field['name']] = false; $respondentPoints -= $fieldPoints; } else { foreach ($options as $key => $value) { if ( $givenAnswer == $value ) { if ( $key != $selectedAnswers ) { $answers[$field['name']] = false; $respondentPoints -= $fieldPoints; } } } } } elseif ( $template == 'checkbox_field' || $template == 'multiple_select' ) { $answers[$field['name']] = true; $userAnswer = []; foreach ($options as $key => $value) { foreach ($givenAnswer as $answer) { if ($value == $answer) { $userAnswer[] = $key; } } } $userAnswer = implode('|', $userAnswer); $rightAnswers = implode('|', $selectedAnswers); if ( $userAnswer != $rightAnswers || empty($userAnswer) ) { $answers[$field['name']] = false; $respondentPoints -= $fieldPoints; } } } elseif ( empty( $field['value'] ) ) { $has_empty = true; break; } } $response = array( 'fields' => $fields_data, 'meta_data' => $metadata, 'payment_data' => $payment, 'has_empty' => $has_empty, 'respondent_points' => $respondentPoints, 'answers' => $answers, ); $response = $this->prepare_response_for_collection( $response ); $response = rest_ensure_response( $response ); $response->header( 'Location', rest_url( sprintf( '/%s/%s/%d/%s/%d', $this->namespace, $this->rest_base, $form->id, 'entries', $entry->id ) ) ); return $response; } /** * Export forms to JSON * * @param WP_REST_Request $request * * @return json **/ public function export_forms( $request ) { $export_type = isset( $request['type'] ) ? $request['type'] : 'selected'; $selected = isset( $request['ids'] ) ? array_map( 'absint', $request['ids'] ) : array(); if ( ! class_exists( 'WeForms_Admin_Tools' ) ) { require_once WEFORMS_INCLUDES . '/admin/class-admin-tools.php'; } switch ( $export_type ) { case 'all': WeForms_Admin_Tools::export_to_json(); break; case 'selected': WeForms_Admin_Tools::export_to_json( $selected ); break; } } } ```