PluginProbe
weForms – Easy Drag & Drop Contact Form Builder For WordPress / 1.4.3
weForms – Easy Drag & Drop Contact Form Builder For WordPress v1.4.3
1.6.7 1.6.8 1.6.9 1.6.12 1.6.13 1.6.14 1.6.15 1.6.16 1.6.17 1.6.18 1.6.19 1.6.2 1.6.20 1.6.21 1.6.22 1.6.23 1.6.24 1.6.25 1.6.26 1.6.27 1.6.28 1.6.3 1.6.4 1.6.5 1.6.6 All 74 releases
← All changes | includes/class-ajax.php +1184 -1229 1.6.41.4.3 View file →
@@ -1,1229 +1,1184 @@
1 -<?php
2 -
3 -/**
4 - * The ajax handler class
5 - */
6 -class WeForms_Ajax {
7 -
8 - public function __construct() {
9 -
10 - // backend requests
11 - add_action( 'wp_ajax_weforms_form_list', [ $this, 'get_contact_forms' ] );
12 - add_action( 'wp_ajax_weforms_get_users', [ $this, 'get_all_users' ] );
13 - add_action( 'wp_ajax_weforms_form_names', [ $this, 'get_contact_form_names' ] );
14 - add_action( 'wp_ajax_weforms_form_create', [ $this, 'create_form' ] );
15 - add_action( 'wp_ajax_weforms_form_delete', [ $this, 'delete_form' ] );
16 - add_action( 'wp_ajax_weforms_form_delete_bulk', [ $this, 'delete_form_bulk' ] );
17 - add_action( 'wp_ajax_weforms_form_duplicate', [ $this, 'duplicate_form' ] );
18 -
19 - // read logs
20 - add_action( 'wp_ajax_weforms_read_logs', [ $this, 'get_logs' ] );
21 - add_action( 'wp_ajax_weforms_delete_logs', [ $this, 'delete_logs' ] );
22 -
23 - // create from a template
24 - add_filter( 'wp_ajax_weforms_contact_form_template', [ $this, 'create_form_from_template' ] );
25 -
26 - // form settings
27 - add_action( 'wp_ajax_weforms_save_settings', [ $this, 'save_settings' ] );
28 - add_action( 'wp_ajax_weforms_get_settings', [ $this, 'get_settings' ] );
29 -
30 - // import
31 - add_action( 'wp_ajax_weforms_import_form', [ $this, 'import_form' ] );
32 -
33 - // form editing
34 - add_action( 'wp_ajax_weforms_get_form', [ $this, 'get_form' ] );
35 - add_action( 'wp_ajax_wpuf_form_builder_save_form', [ $this, 'save_form' ] );
36 -
37 - // entries
38 - add_action( 'wp_ajax_weforms_form_entries', [ $this, 'get_entries' ] );
39 -
40 - add_action( 'wp_ajax_weforms_form_entry_details', [ $this, 'get_entry_detail' ] );
41 - add_action( 'wp_ajax_weforms_form_entry_trash', [ $this, 'trash_entry' ] );
42 - add_action( 'wp_ajax_weforms_form_entry_delete', [ $this, 'delete_entry' ] );
43 - add_action( 'wp_ajax_weforms_form_entry_restore', [ $this, 'restore_entry' ] );
44 -
45 - add_action( 'wp_ajax_weforms_form_entry_trash_bulk', [ $this, 'bulk_delete_entry' ] );
46 - add_action( 'wp_ajax_weforms_form_entry_restore_bulk', [ $this, 'bulk_restore_entry' ] );
47 -
48 - // frontend requests
49 - add_action( 'wp_ajax_weforms_frontend_submit', [ $this, 'handle_frontend_submission' ] );
50 - add_action( 'wp_ajax_nopriv_weforms_frontend_submit', [ $this, 'handle_frontend_submission' ] );
51 - }
52 -
53 - /**
54 - * Administrator validation
55 - *
56 - * @return void
57 - */
58 - public function check_admin() {
59 - if ( !current_user_can( weforms_form_access_capability() ) ) {
60 - wp_send_json_error( __( 'You do not have sufficient permission.', 'weforms' ) );
61 - }
62 - }
63 -
64 - /**
65 - * Get a form to edit
66 - *
67 - * @return void
68 - */
69 - public function get_form() {
70 - $this->check_admin();
71 -
72 - $form_id = isset( $_REQUEST['form_id'] ) ? absint( $_REQUEST['form_id'] ) : 0;
73 -
74 - $form = weforms()->form->get( $form_id );
75 -
76 - $data = [
77 - 'post' => $form->data,
78 - 'form_fields' => $form->get_fields(),
79 - 'settings' => $form->get_settings(),
80 - 'notifications' => $form->get_notifications(),
81 - 'integrations' => $form->get_integrations(),
82 - ];
83 -
84 - wp_send_json_success( $data );
85 - }
86 -
87 - /**
88 - * Save the form
89 - *
90 - * @return void
91 - */
92 - public function save_form() {
93 - $post_data = wp_unslash( $_POST );
94 - if ( isset( $post_data['form_data'] ) ) {
95 - parse_str( sanitize_text_field( wp_unslash( $post_data['form_data'] ) ), $form_data );
96 - }
97 -
98 - if ( !wp_verify_nonce( $form_data['wpuf_form_builder_nonce'], 'wpuf_form_builder_save_form' ) ) {
99 - wp_send_json_error( __( 'Unauthorized operation', 'weforms' ) );
100 - }
101 -
102 - if ( empty( $form_data['wpuf_form_id'] ) ) {
103 - wp_send_json_error( __( 'Invalid form id', 'weforms' ) );
104 - }
105 -
106 - $form_fields = isset( $post_data['form_fields'] ) ? $post_data['form_fields'] : '';
107 - $notifications = isset( $post_data['notifications'] ) ? $post_data['notifications']: '';
108 - $settings = array();
109 - $integrations = array();
110 -
111 - if ( isset( $post_data['settings'] ) ) {
112 - $settings = (array) json_decode( $post_data['settings'] );
113 - } else {
114 - $settings = isset( $form_data['wpuf_settings'] ) ? $form_data['wpuf_settings'] : [];
115 - }
116 -
117 - if ( isset( $post_data['integrations'] ) ) {
118 - $integrations = (array) json_decode( $post_data['integrations'] );
119 - }
120 -
121 - // $form_fields = wp_unslash( $form_fields );
122 - // $notifications = wp_unslash( $notifications );
123 -
124 - $form_fields = json_decode( $form_fields, true );
125 - $notifications = json_decode( $notifications, true );
126 - $data = [
127 - 'form_id' => absint( $form_data['wpuf_form_id'] ),
128 - 'post_title' => $form_data['post_title'],
129 - 'form_fields' => $form_fields,
130 - 'form_settings' => $settings,
131 - 'form_settings_key' => isset( $form_data['form_settings_key'] ) ? $form_data['form_settings_key'] : '',
132 - 'notifications' => $notifications,
133 - 'integrations' => $integrations,
134 - ];
135 -
136 - $form_fields = weforms()->form->save( $data );
137 -
138 - do_action( 'weforms_update_form', $form_data['wpuf_form_id'], $form_fields, $settings );
139 -
140 - wp_send_json_success( [ 'form_fields' => $form_fields ] );
141 - }
142 -
143 - /**
144 - * Get all contact forms
145 - *
146 - * @return void
147 - */
148 - public function get_contact_forms() {
149 - check_ajax_referer( 'weforms' );
150 -
151 - $this->check_admin();
152 -
153 - $args = [
154 - 'posts_per_page' => isset( $_POST['posts_per_page'] ) ? intval( $_POST['posts_per_page'] ) : 10,
155 - 'paged' => isset( $_POST['page'] ) ? absint( $_POST['page'] ) : 1,
156 - 'order' => 'DESC',
157 - 'orderby' => 'post_date',
158 - ];
159 -
160 - $args = apply_filters( 'weforms_ajax_get_contact_forms_args', $args );
161 -
162 - $contact_forms = weforms()->form->get_forms( $args );
163 -
164 - array_map(
165 - function ( $form ) {
166 - $form->entries = $form->num_form_entries();
167 - $form->settings = $form->get_settings();
168 - $form->views = $form->num_form_views();
169 - $form->payments = $form->num_form_payments();
170 - $form->author = $form->get_form_author_details();
171 - }, $contact_forms['forms']
172 - );
173 -
174 - $contact_forms = $this->filter_contact_forms( $contact_forms );
175 - $contact_forms = apply_filters( 'weforms_ajax_get_contact_forms', $contact_forms );
176 -
177 - wp_send_json_success( $contact_forms );
178 - }
179 -
180 - /**
181 - * Get all users
182 - *
183 - * @return array
184 - */
185 - public function get_all_users() {
186 - check_ajax_referer( 'weforms' );
187 -
188 - $this->check_admin();
189 -
190 - $users_meta = [];
191 - $users = get_users( [ 'fields' => [ 'ID' ] ] );
192 -
193 - foreach ( $users as $user ) {
194 - $users_meta[] = [
195 - 'id' => $user->ID,
196 - 'data' => get_user_meta( $user->ID ),
197 - ];
198 - }
199 -
200 - wp_send_json_success( $users_meta );
201 - }
202 -
203 - /**
204 - * Filter
205 - *
206 - * @return void
207 - */
208 - public function filter_contact_forms( &$contact_forms ) {
209 - if ( isset( $_REQUEST['filter'] ) && $_REQUEST['filter'] == 'entries' ) {
210 - foreach ( $contact_forms['forms'] as $key => &$form ) {
211 - if ( isset( $form->entries ) && !$form->entries ) {
212 - unset( $contact_forms['forms'][ $key ] );
213 - }
214 - }
215 -
216 - $contact_forms['meta']['total'] = count( $contact_forms['forms'] );
217 - }
218 -
219 - return $contact_forms;
220 - }
221 -
222 - /**
223 - * Get the names of contact forms for generating dropdown
224 - *
225 - * @return void
226 - */
227 - public function get_contact_form_names() {
228 - check_ajax_referer( 'weforms' );
229 -
230 - $this->check_admin();
231 -
232 - $contact_forms = weforms()->form->all();
233 - $response = [];
234 -
235 - foreach ( $contact_forms['forms'] as $form ) {
236 - $response[] = [
237 - 'id' => $form->get_id(),
238 - 'title' => $form->get_name() . ' (#' . $form->get_id() . ')',
239 - ];
240 - }
241 -
242 - wp_send_json_success( $response );
243 - }
244 -
245 - /**
246 - * Create a form
247 - *
248 - * @return void
249 - */
250 - public function create_form() {
251 - check_ajax_referer( 'weforms' );
252 -
253 - $this->check_admin();
254 -
255 - $form_name = isset( $_POST['form_name'] ) ? sanitize_text_field( wp_unslash( $_POST['form_name'] ) ) : '';
256 -
257 - if ( empty( $form_name ) ) {
258 - wp_send_json_error( __( 'Please provide a form name', 'weforms' ) );
259 - }
260 -
261 - $form_id = weforms()->form->create( $form_name );
262 -
263 - if ( is_wp_error( $form_id ) ) {
264 - wp_send_json_error( $form_id->get_error_message() );
265 - }
266 -
267 - wp_send_json_success( [
268 - 'form_id' => $form_id,
269 - 'form_name' => $form_name,
270 - ] );
271 - }
272 -
273 - /**
274 - * Delete a form
275 - *
276 - * @return void
277 - */
278 - public function delete_form() {
279 - check_ajax_referer( 'weforms' );
280 -
281 - $this->check_admin();
282 -
283 - $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
284 -
285 - if ( !$form_id ) {
286 - wp_send_json_error( __( 'No form id provided!', 'weforms' ) );
287 - }
288 -
289 - weforms()->form->delete( $form_id );
290 -
291 - wp_send_json_success();
292 - }
293 -
294 - public function delete_form_bulk() {
295 - check_ajax_referer( 'weforms' );
296 -
297 - $this->check_admin();
298 -
299 - $form_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : [];
300 -
301 - if ( !$form_ids ) {
302 - wp_send_json_error( __( 'No form ids provided!', 'weforms' ) );
303 - }
304 -
305 - foreach ( $form_ids as $form_id ) {
306 - weforms()->form->delete( $form_id );
307 - }
308 -
309 - wp_send_json_success();
310 - }
311 -
312 - /**
313 - * Duplicate a form
314 - *
315 - * @return voiud
316 - */
317 - public function duplicate_form() {
318 - check_ajax_referer( 'weforms' );
319 -
320 - $this->check_admin();
321 -
322 - $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
323 -
324 - $form = weforms()->form->duplicate( $form_id );
325 - $form->settings = $form->get_settings();
326 -
327 - wp_send_json_success( $form );
328 - }
329 -
330 - /**
331 - * Create form from a template
332 - *
333 - * @return void
334 - */
335 - public function create_form_from_template() {
336 - check_ajax_referer( 'weforms' );
337 -
338 - $template = isset( $_REQUEST['template'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['template'] ) ) : '';
339 -
340 - $form_id = weforms()->templates->create( $template );
341 -
342 - if ( is_wp_error( $form_id ) ) {
343 - wp_send_json_error( __( 'Could not create the form', 'weforms' ) );
344 - }
345 -
346 - wp_send_json_success( [
347 - 'id' => $form_id,
348 - ] );
349 - }
350 -
351 - /**
352 - * Save the weForms settings
353 - *
354 - * @return void
355 - */
356 - public function save_settings() {
357 - check_ajax_referer( 'weforms' );
358 - $this->check_admin();
359 -
360 - $requires_wpuf_update = false;
361 - $wpuf_update_array = array();
362 - $settings = isset( $_POST['settings'] ) ? (array) json_decode( wp_unslash( $_POST['settings'] ) ) : [];
363 - update_option( 'weforms_settings', $settings );
364 -
365 - // wpuf settings sync
366 - if ( isset( $settings['gmap_api'] ) ) {
367 - $requires_wpuf_update = true;
368 - $wpuf_update_array['gmap_api_key'] = $settings['gmap_api'];
369 - }
370 -
371 - if ( isset( $settings['recaptcha'] ) ) {
372 - $requires_wpuf_update = true;
373 - $wpuf_update_array['recaptcha_public'] = $settings['recaptcha']->key;
374 - $wpuf_update_array['recaptcha_private'] = $settings['recaptcha']->secret;
375 - $wpuf_update_array['recaptcha_type'] = $settings['recaptcha']->type;
376 - }
377 -
378 - if ( isset( $settings['no_conflict'] ) ) {
379 - $requires_wpuf_update = true;
380 - $wpuf_update_array['no_conflict'] = $settings['no_conflict'];
381 - }
382 -
383 - if ( isset( $settings['email_footer'] ) ) {
384 - $requires_wpuf_update = true;
385 - $wpuf_update_array['email_footer'] = $settings['email_footer'];
386 - }
387 -
388 - if ( $requires_wpuf_update ) {
389 - $wpuf_settings = get_option( 'wpuf_general', [] );
390 -
391 - $wpuf_settings = array_merge( $wpuf_settings, $wpuf_update_array );
392 - update_option( 'wpuf_general', $wpuf_settings );
393 - }
394 -
395 - do_action( 'weforms_save_settings', $settings );
396 -
397 - $settings = apply_filters( 'weforms_after_save_settings', $settings );
398 - wp_send_json_success( $settings );
399 - }
400 -
401 - /**
402 - * Get the weForms Settings
403 - *
404 - * @return void
405 - */
406 - public function get_settings() {
407 - check_ajax_referer( 'weforms' );
408 -
409 - $this->check_admin();
410 -
411 - $settings = weforms_get_settings();
412 - // checking to prevent js error, will be removed in future
413 - if ( !isset( $settings['credit'] ) ) {
414 - $settings['credit'] = false;
415 - }
416 -
417 - if ( !isset( $settings['permission'] ) ) {
418 - $settings['permission'] = 'manage_options';
419 - }
420 -
421 - wp_send_json_success( $settings );
422 - }
423 -
424 - /**
425 - * Get all entries
426 - *
427 - * @return void
428 - */
429 - public function get_entries() {
430 - check_ajax_referer( 'weforms' );
431 -
432 - $this->check_admin();
433 -
434 - $form_id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
435 - $current_page = isset( $_REQUEST['page'] ) ? intval( $_REQUEST['page'] ) : 1;
436 - $status = isset( $_REQUEST['status'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['status'] ) ) : 'publish';
437 - $per_page = 20;
438 - $offset = ( $current_page - 1 ) * $per_page;
439 -
440 - if ( !$form_id ) {
441 - wp_send_json_error( __( 'No form id provided!', 'weforms' ) );
442 - }
443 -
444 - $entries = weforms_get_form_entries(
445 - $form_id, [
446 - 'number' => $per_page,
447 - 'offset' => $offset,
448 - 'status' => $status,
449 - ]
450 - );
451 -
452 - $columns = weforms_get_entry_columns( $form_id );
453 - $total_entries = weforms_count_form_entries( $form_id, $status );
454 -
455 - array_map(
456 - function ( $entry ) use ( $columns ) {
457 - $entry_id = $entry->id;
458 - $entry->fields = [];
459 -
460 - foreach ( $columns as $meta_key => $label ) {
461 - if ( empty( $meta_key ) ) {
462 - continue;
463 - }
464 - $value = weforms_get_entry_meta( $entry_id, $meta_key, true );
465 - $entry->fields[ $meta_key ] = str_replace( WeForms::$field_separator, ' ', $value );
466 - }
467 - }, $entries
468 - );
469 -
470 - $entries = apply_filters( 'weforms_get_entries', $entries, $form_id );
471 -
472 - $response = [
473 - 'columns' => $columns,
474 - 'entries' => $entries,
475 - 'form_title' => get_post_field( 'post_title', $form_id ),
476 - 'pagination' => [
477 - 'total' => $total_entries,
478 - 'per_page' => $per_page,
479 - 'pages' => ceil( $total_entries / $per_page ),
480 - 'current' => $current_page,
481 - ],
482 - 'meta' => [
483 - 'total' => weforms_count_form_entries( $form_id ),
484 - 'totalTrash' => weforms_count_form_entries( $form_id, 'trash' ),
485 - ],
486 - ];
487 -
488 - wp_send_json_success( $response );
489 - }
490 -
491 - /**
492 - * Get an entry details
493 - *
494 - * @return void
495 - */
496 - public function get_entry_detail() {
497 - check_ajax_referer( 'weforms' );
498 -
499 - $this->check_admin();
500 -
501 - $form_id = isset( $_REQUEST['form_id'] ) ? intval( $_REQUEST['form_id'] ) : 0;
502 - $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
503 -
504 - $form = weforms()->form->get( $form_id );
505 - $form_settings = $form->get_settings();
506 - $entry = $form->entries()->get( $entry_id );
507 - $fields = $entry->get_fields();
508 - $metadata = $entry->get_metadata();
509 - $payment = $entry->get_payment_data();
510 -
511 - if ( isset( $payment->payment_data ) && is_serialized( $payment->payment_data ) ) {
512 - $payment->payment_data = unserialize( $payment->payment_data );
513 - }
514 -
515 - if ( false === $fields ) {
516 - wp_send_json_error( __( 'No form fields found!', 'weforms' ) );
517 - }
518 -
519 - if ( sizeof( $fields ) < 1 ) {
520 - $fields[] = [
521 - 'label' => __( 'No form fields found!', 'weforms' ),
522 - ];
523 - }
524 -
525 - $has_empty = false;
526 - $answers = [];
527 - $respondentPoints = isset( $form_settings['total_points'] ) ? floatval( $form_settings['total_points'] ) : 0;
528 -
529 - foreach ( $fields as $key => $field ) {
530 - if ( $form_settings['quiz_form'] == 'yes' ) {
531 - $selectedAnswers = isset( $field['selected_answers'] ) ? $field['selected_answers'] : '';
532 - $givenAnswer = isset( $field['value'] ) ? $field['value'] : '';
533 - $options = isset( $field['options'] ) ? $field['options'] : '';
534 - $template = $field['template'];
535 - $fieldPoints = isset( $field['points'] ) ? floatval( $field['points'] ) : 0;
536 -
537 - if ( $template == 'radio_field' || $template == 'dropdown_field' ) {
538 - $answers[$field['name']] = true;
539 -
540 - if ( empty( $givenAnswer ) ) {
541 - $answers[$field['name']] = false;
542 - $respondentPoints -= $fieldPoints;
543 - } else {
544 - foreach ( $options as $key => $value ) {
545 - if ( $givenAnswer == $value ) {
546 - if ( $key != $selectedAnswers ) {
547 - $answers[$field['name']] = false;
548 - $respondentPoints -= $fieldPoints;
549 - }
550 - }
551 - }
552 - }
553 - } elseif ( $template == 'checkbox_field' || $template == 'multiple_select' ) {
554 - $answers[$field['name']] = true;
555 - $userAnswer = [];
556 -
557 - foreach ( $options as $key => $value ) {
558 - foreach ( $givenAnswer as $answer ) {
559 - if ( $value == $answer ) {
560 - $userAnswer[] = $key;
561 - }
562 - }
563 - }
564 -
565 - $userAnswer = implode( '|', $userAnswer );
566 - $rightAnswers = implode( '|', $selectedAnswers );
567 -
568 - if ( $userAnswer != $rightAnswers || empty( $userAnswer ) ) {
569 - $answers[$field['name']] = false;
570 - $respondentPoints -= $fieldPoints;
571 - }
572 - }
573 - } elseif ( empty( $field['value'] ) ) {
574 - $has_empty = true;
575 - break;
576 - }
577 - }
578 -
579 - $response = [
580 - 'form_fields' => $fields,
581 - 'form_settings' => $form_settings,
582 - 'meta_data' => $metadata,
583 - 'payment_data' => $payment,
584 - 'has_empty' => $has_empty,
585 - 'respondent_points' => $respondentPoints,
586 - 'answers' => $answers,
587 - ];
588 -
589 - wp_send_json_success( $response );
590 - }
591 -
592 - /**
593 - * Trash an entry
594 - *
595 - * @return void
596 - */
597 - public function trash_entry() {
598 - check_ajax_referer( 'weforms' );
599 -
600 - $this->check_admin();
601 -
602 - $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
603 -
604 - weforms_change_entry_status( $entry_id, 'trash' );
605 - wp_send_json_success();
606 - }
607 -
608 - /**
609 - * Trash an entry
610 - *
611 - * @return void
612 - */
613 - public function delete_entry() {
614 - check_ajax_referer( 'weforms' );
615 -
616 - $this->check_admin();
617 -
618 - $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
619 -
620 - weforms_delete_entry( $entry_id );
621 -
622 - wp_send_json_success();
623 - }
624 -
625 - /**
626 - * Restore Entry
627 - *
628 - * @return void
629 - */
630 - public function restore_entry() {
631 - check_ajax_referer( 'weforms' );
632 -
633 - $this->check_admin();
634 -
635 - $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
636 -
637 - weforms_change_entry_status( $entry_id, 'publish' );
638 - wp_send_json_success();
639 - }
640 -
641 - /**
642 - * Bulk trash entries
643 - *
644 - * @return void
645 - */
646 - public function bulk_delete_entry() {
647 - check_ajax_referer( 'weforms' );
648 -
649 - $this->check_admin();
650 -
651 - $entry_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : array();
652 - $permanent = isset( $_POST['permanent'] ) && ( sanitize_text_field( wp_unslash ( $_POST['permanent'] ) ) ) ? true : false;
653 -
654 - if ( !$entry_ids ) {
655 - wp_send_json_error( __( 'No entry ids provided!', 'weforms' ) );
656 - }
657 -
658 - foreach ( $entry_ids as $entry_id ) {
659 - if ( $permanent ) {
660 - weforms_delete_entry( $entry_id );
661 - } else {
662 - weforms_change_entry_status( $entry_id, 'trash' );
663 - }
664 - }
665 -
666 - wp_send_json_success();
667 - }
668 -
669 - /**
670 - * Bulk trash entries
671 - *
672 - * @return void
673 - */
674 - public function bulk_restore_entry() {
675 - check_ajax_referer( 'weforms' );
676 -
677 - $this->check_admin();
678 -
679 - $entry_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : [];
680 -
681 - if ( !$entry_ids ) {
682 - wp_send_json_error( __( 'No entry ids provided!', 'weforms' ) );
683 - }
684 -
685 - foreach ( $entry_ids as $entry_id ) {
686 - weforms_change_entry_status( $entry_id, 'publish' );
687 - }
688 -
689 - wp_send_json_success();
690 - }
691 -
692 - /**
693 - * Handle the frontend submission
694 - *
695 - * @return void
696 - */
697 - public function handle_frontend_submission() {
698 - check_ajax_referer( 'wpuf_form_add' );
699 -
700 - $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
701 - $page_id = isset( $_POST['page_id'] ) ? intval( $_POST['page_id'] ) : 0;
702 -
703 - $form = weforms()->form->get( $form_id );
704 - $form_settings = $form->get_settings();
705 - $form_fields = $form->get_fields();
706 - $entry_fields = $form->prepare_entries();
707 - $form_entries = weforms_get_form_entries( $form_id, [ 'number' => '', 'offset' => '' ] );
708 -
709 - if ( $form_fields && count( $form_entries ) && count( $entry_fields ) ) {
710 - foreach ( $entry_fields as $field_key => $field_value ) {
711 - $duplicate_check = false;
712 - $field_label = 'This';
713 -
714 - foreach ( $form_fields as $form_field ) {
715 - if ( in_array( $form_field['template'], [ 'text_field', 'website_url', 'numeric_text_field', 'email_address' ] ) && $form_field['name'] == $field_key && isset( $form_field['duplicate'] ) && 'no' == $form_field['duplicate'] ) {
716 - $duplicate_check = true;
717 - $field_label = $form_field['label'];
718 - }
719 - }
720 -
721 - if ( $duplicate_check ) {
722 - foreach ( $form_entries as $entry ) {
723 - $existing = weforms_get_entry_meta( $entry->id, $field_key, true );
724 -
725 - if ( $existing && $field_value == $existing ) {
726 - wp_send_json( [
727 - 'success' => false,
728 - 'error' => sprintf( __( '"%s" field requires a unique entry and "%s" has already been used.', 'weforms' ), $field_label, $field_value ),
729 - ] );
730 - }
731 - }
732 - }
733 - }
734 - }
735 -
736 - if ( !$form_fields ) {
737 - wp_send_json( [
738 - 'success' => false,
739 - 'error' => __( 'No form field was found.', 'weforms' ),
740 - ] );
741 - }
742 -
743 - if ( $form->has_field( 'recaptcha' ) ) {
744 - $settings = weforms_get_settings( 'recaptcha' );
745 - $type = isset( $settings->type ) ? $settings->type : '';
746 - $secret = isset( $settings->secret ) ? $settings->secret : '';
747 - if( $type == 'v3' ) {
748 - $this->validate_reCaptchav3( $secret );
749 - } else {
750 - $this->validate_reCaptcha();
751 - }
752 - }
753 -
754 - // vaidate submission
755 - $this->validate_submission( $entry_fields, $form, $form_settings, $form_fields );
756 -
757 - $entry_fields = apply_filters( 'weforms_before_entry_submission', $entry_fields, $form, $form_settings, $form_fields );
758 -
759 - $entry_id = weforms_insert_entry( [
760 - 'form_id' => $form_id,
761 - ], $entry_fields );
762 -
763 - if ( is_wp_error( $entry_id ) ) {
764 - wp_send_json( [
765 - 'success' => false,
766 - 'error' => $entry_id->get_error_message(),
767 - ] );
768 - }
769 -
770 - // redirect URL
771 - $show_message = false;
772 - $redirect_to = false;
773 -
774 - if ( $form_settings['redirect_to'] == 'page' ) {
775 - $redirect_to = get_permalink( $form_settings['page_id'] );
776 - } elseif ( $form_settings['redirect_to'] == 'url' ) {
777 - $redirect_to = $form_settings['url'];
778 - } elseif ( $form_settings['redirect_to'] == 'same' ) {
779 - $show_message = true;
780 - } else {
781 - $show_message = true;
782 - }
783 -
784 - // Fire a hook for integration
785 - do_action( 'weforms_entry_submission', $entry_id, $form_id, $page_id, $form_settings );
786 -
787 - $field_search = $field_replace = [];
788 -
789 - foreach ( $form_fields as $r_field ) {
790 - $field_search[] = '{' . $r_field['name'] . '}';
791 -
792 - if ( $r_field['template'] == 'name_field' ) {
793 - $field_replace[] = implode( ' ', explode( '|', $entry_fields[ $r_field['name'] ] ) );
794 - } else if ( $r_field['template'] == 'address_field' ) {
795 - $field_replace[] = implode( ', ', $entry_fields[ $r_field['name'] ] );
796 - } else {
797 - $field_replace[] = isset( $entry_fields[ $r_field['name'] ] ) ? $entry_fields[ $r_field['name'] ] : '';
798 - }
799 - }
800 - $message = str_replace( $field_search, $field_replace, $form_settings['message'] );
801 -
802 - // send the response
803 - $response = apply_filters( 'weforms_entry_submission_response', [
804 - 'success' => true,
805 - 'redirect_to' => $redirect_to,
806 - 'show_message' => $show_message,
807 - 'message' => $message,
808 - 'data' => $_POST,
809 - 'form_id' => $form_id,
810 - 'entry_id' => $entry_id,
811 - ] );
812 -
813 - $notification = new WeForms_Notification( [
814 - 'form_id' => $form_id,
815 - 'page_id' => $page_id,
816 - 'entry_id' => $entry_id,
817 - ] );
818 -
819 - $notification->send_notifications();
820 -
821 - weforms_clear_buffer();
822 - wp_send_json( $response );
823 - }
824 -
825 - function validate_reCaptchav3( $secret ) {
826 - check_ajax_referer( 'wpuf_form_add' );
827 -
828 - $post_data = wp_unslash($_POST);
829 - $token = $post_data['g-recaptcha-response'];
830 - $action = $post_data['g-action'];
831 - $google_captcha_url = esc_url( 'https://www.google.com/recaptcha/api/siteverify' );
832 -
833 - $response = wp_remote_post( $google_captcha_url,
834 - array(
835 - 'method' => 'POST',
836 - 'body' => array(
837 - 'secret' => $secret,
838 - 'response' => $token
839 - )
840 - )
841 - );
842 -
843 -
844 - if ( is_wp_error( $response ) ) {
845 - wp_send_json( [
846 - 'success' => false,
847 - 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
848 - ] );
849 - } else {
850 - $api_response = json_decode( wp_remote_retrieve_body( $response ), true );
851 - if( $api_response["success"] == '1' && $api_response["action"] == $action ) {
852 - return true;
853 - } else {
854 - wp_send_json( [
855 - 'success' => false,
856 - 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
857 - ] );
858 - }
859 - }
860 - }
861 - /**
862 - * reCaptcha Validation
863 - *
864 - * @return void
865 - */
866 - function validate_reCaptcha() {
867 - check_ajax_referer( 'wpuf_form_add' );
868 - if ( class_exists( 'WPUF_ReCaptcha' ) ) {
869 - $recaptcha_class = 'WPUF_ReCaptcha';
870 - } else {
871 - if ( !function_exists( 'recaptcha_get_html' ) ) {
872 - require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib.php';
873 - }
874 -
875 - require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib_noCaptcha.php';
876 - $recaptcha_class = 'Weforms_ReCaptcha';
877 - }
878 -
879 - $invisible = isset( $_POST['g-recaptcha-response'] ) ? false : true;
880 -
881 - $recaptcha_settings = weforms_get_settings( 'recaptcha' );
882 - $secret = isset( $recaptcha_settings->secret ) ? $recaptcha_settings->secret : '';
883 -
884 - if ( ! $invisible ) {
885 - $response = null;
886 - $reCaptcha = new $recaptcha_class( $secret );
887 - $remote_ADDR = isset( $_SERVER['REMOTE_ADDR'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ) ) : '';
888 - $recaptcha_response = isset( $_POST['g-recaptcha-response'] ) ? sanitize_text_field( wp_unslash( $_POST['g-recaptcha-response'] ) ) : '';
889 - $resp = $reCaptcha->verifyResponse(
890 - $remote_ADDR,
891 - $recaptcha_response
892 - );
893 -
894 - if ( !$resp->success ) {
895 - wp_send_json( [
896 - 'success' => false,
897 - 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
898 - ] );
899 - }
900 -
901 - } else {
902 -
903 - $recap_challenge = isset( $_POST['recaptcha_challenge_field'] ) ? sanitize_text_field( wp_unslash( $_POST['recaptcha_challenge_field'] ) ) : '';
904 - $recap_response = isset( $_POST['recaptcha_response_field'] ) ? sanitize_text_field( wp_unslash( $_POST['recaptcha_response_field'] ) ) : '';
905 - $resp = recaptcha_check_answer( $secret, $remote_ADDR, $recap_challenge, $recap_response );
906 -
907 - if ( !$resp->is_valid ) {
908 - ob_clean();
909 -
910 - wp_send_json( [
911 - 'success' => false,
912 - 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
913 - ] );
914 - }
915 - }
916 - }
917 -
918 - /**
919 - * Validate submission
920 - *
921 - * @param array $entry_fields
922 - * @param object $form
923 - * @param array $form_settings
924 - * @param array $form_fields
925 - *
926 - * @return bool|json
927 - */
928 - public function validate_submission( $entry_fields, $form, $form_settings, $form_fields ) {
929 - foreach ( $form_fields as $key => $field ) {
930 -
931 - //skip custom html field as it is not saved
932 - if ( 'custom_html' == $field['name'] ) {
933 - continue;
934 - }
935 -
936 - //skip recaptcha field as it is not saved
937 - if ( 'recaptcha' == $field['name'] ) {
938 - continue;
939 - }
940 -
941 - $value = $entry_fields[ $field['name'] ];
942 -
943 - if ( 'single_product' === $field['template'] ) {
944 - if ( !$value ) {
945 - $value = [];
946 - }
947 -
948 - $value['price'] = isset( $value['price'] ) ? floatval( $value['price'] ) : 0;
949 - $value['quantity'] = isset( $value['quantity'] ) ? floatval( $value['quantity'] ) : 0;
950 - $quantity = isset( $field['quantity'] ) ? $field['quantity'] : [];
951 - $price = isset( $field['price'] ) ? $field['price'] : [];
952 -
953 - if ( isset( $price['is_flexible'] ) && $price['is_flexible'] ) {
954 - $min = isset( $price['min'] ) ? floatval( $price['min'] ) : 0;
955 - $max = isset( $price['max'] ) ? floatval( $price['max'] ) : 0;
956 -
957 - if ( $value['price'] < $min ) {
958 - wp_send_json( [
959 - 'success' => false,
960 - 'error' => __( sprintf(
961 - '%s price must be equal or greater than %s',
962 - $field['weforms'],
963 - $min ),
964 - 'weforms' ),
965 - ] );
966 - }
967 -
968 - if ( $max && $value['price'] > $max ) {
969 - wp_send_json( [
970 - 'success' => false,
971 - 'error' => __( sprintf(
972 - '%s price must be equal or less than %s',
973 - $field['weforms'],
974 - $max ),
975 - 'weforms' ),
976 - ] );
977 - }
978 - }
979 -
980 - if ( isset( $quantity['status'] ) && $quantity['status'] ) {
981 - $min = isset( $quantity['min'] ) ? floatval( $quantity['min'] ) : 0;
982 - $max = isset( $quantity['max'] ) ? floatval( $quantity['max'] ) : 0;
983 -
984 - if ( $value['quantity'] < $min ) {
985 - wp_send_json( [
986 - 'success' => false,
987 - 'error' => __( sprintf(
988 - '%s quantity must be equal or greater than %s',
989 - $field['weforms'],
990 - $min ),
991 - 'weforms' ),
992 - ] );
993 - }
994 -
995 - if ( $max && $value['quantity'] > $max ) {
996 - wp_send_json( [
997 - 'success' => false,
998 - 'error' => __( sprintf(
999 - '%s quantity must be equal or less than %s',
1000 - $field['weforms'],
1001 - $max ),
1002 - 'weforms' ),
1003 - ] );
1004 - }
1005 - }
1006 - }
1007 - }
1008 - }
1009 -
1010 - public static function prepare_meta_fields( $meta_vars ) {
1011 - check_ajax_referer( 'wpuf_form_add' );
1012 - // loop through custom fields
1013 - // skip files, put in a key => value paired array for later executation
1014 - // process repeatable fields separately
1015 - // if the input is array type, implode with separator in a field
1016 - $files = [];
1017 - $meta_key_value = [];
1018 - $multi_repeated = []; // multi repeated fields will in sotre duplicated meta key
1019 -
1020 - foreach ( $meta_vars as $key => $value ) {
1021 - switch ( $value['template'] ) {
1022 -
1023 - // put files in a separate array, we'll process it later
1024 - case 'file_upload':
1025 - case 'image_upload':
1026 - $files[] = [
1027 - 'name' => $value['name'],
1028 - 'value' => isset( $_POST['wpuf_files'][ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST['wpuf_files'][ $value['name'] ] ) ) : array(),
1029 - 'count' => $value['count']
1030 - ];
1031 - break;
1032 -
1033 - case 'repeat_field':
1034 - // if it is a multi column repeat field
1035 - if ( isset( $value['multiple'] ) && $value['multiple'] == 'true' ) {
1036 -
1037 - // if there's any items in the array, process it
1038 - if ( isset( $_POST[ $value['name'] ] ) ) {
1039 - $ref_arr = [];
1040 - $cols = count( $value['columns'] );
1041 - $first = array_shift( array_values( sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) ) ); // first element
1042 - $rows = count( $first );
1043 -
1044 - // loop through columns
1045 - for ( $i = 0; $i < $rows; $i++ ) {
1046 -
1047 - // loop through the rows and store in a temp array
1048 - $temp = [];
1049 - for ( $j = 0; $j < $cols; $j++ ) {
1050 - $temp[] = isset( $_POST[ $value['name'] ][ $j ][ $i ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ][ $j ][ $i ] ) ) : '';
1051 - }
1052 -
1053 - // store all fields in a row with WeForms::$field_separator separated
1054 - $ref_arr[] = implode( WeForms::$field_separator, $temp );
1055 - }
1056 -
1057 - // now, if we found anything in $ref_arr, store to $multi_repeated
1058 - if ( $ref_arr ) {
1059 - $multi_repeated[ $value['name'] ] = array_slice( $ref_arr, 0, $rows );
1060 - }
1061 - }
1062 - } else {
1063 - $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) );
1064 - }
1065 -
1066 - break;
1067 -
1068 - case 'address_field':
1069 - if ( isset( $_POST[ $value['name'] ] ) && is_array( $_POST[ $value['name'] ] ) ) {
1070 - $post_value = sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) );
1071 - foreach ( $post_value as $address_field => $field_value ) {
1072 - $meta_key_value[ $value['name'] ][ $address_field ] = sanitize_text_field( $field_value );
1073 - }
1074 - }
1075 -
1076 - break;
1077 -
1078 - case 'text_field':
1079 - case 'email_address':
1080 - case 'numeric_text_field':
1081 - case 'date_field':
1082 - $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : '';
1083 -
1084 - break;
1085 -
1086 - case 'textarea_field':
1087 - $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : '';
1088 -
1089 - break;
1090 -
1091 - case 'dropdown_field':
1092 - case 'radio_field':
1093 - $val = sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) );
1094 - $meta_key_value[ $value['name'] ] = isset( $value['options'][ $val ] ) ? $value['options'][ $val ] : '';
1095 - break;
1096 -
1097 - case 'multiple_select':
1098 - case 'checkbox_field':
1099 - $val = ( is_array( $_POST[ $value['name'] ] ) && sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : array();
1100 - $meta_key_value[ $value['name'] ] = $val;
1101 -
1102 - if ( $val ) {
1103 - $new_val = [];
1104 -
1105 - foreach ( $val as $option_key ) {
1106 - $new_val[] = isset( $value['options'][ $option_key ] ) ? $value['options'][ $option_key ] : '';
1107 - }
1108 -
1109 - $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, $new_val );
1110 - }
1111 - break;
1112 -
1113 - default:
1114 - // if it's an array, implode with this->separator
1115 - if ( is_array( $_POST[ $value['name'] ] ) ) {
1116 - $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) );
1117 - } else {
1118 - $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ): '';
1119 - }
1120 -
1121 - break;
1122 - }
1123 - } //end foreach
1124 -
1125 - return [ $meta_key_value, $multi_repeated, $files ];
1126 - }
1127 -
1128 - /**
1129 - * Import a form from a JSON file
1130 - *
1131 - * @return void
1132 - */
1133 - public function import_form() {
1134 - check_ajax_referer( 'weforms' );
1135 -
1136 - $this->check_admin();
1137 -
1138 - $the_file = isset( $_FILES['importFile'] ) ? $_FILES['importFile'] : false;
1139 -
1140 - if ( !$the_file ) {
1141 - wp_send_json_error( __( 'No file found to import.', 'weforms' ) );
1142 - }
1143 -
1144 - $file_ext = pathinfo( $the_file['name'], PATHINFO_EXTENSION );
1145 -
1146 - if ( !class_exists( 'WeForms_Admin_Tools' ) ) {
1147 - require_once __DIR__ . '/admin/class-admin-tools.php';
1148 - }
1149 -
1150 - if ( ( $file_ext == 'json' ) && ( $the_file['size'] < 500000 ) ) {
1151 - $status = WeForms_Admin_Tools::import_json_file( $the_file['tmp_name'] );
1152 -
1153 - if ( $status ) {
1154 - wp_send_json_success( __( 'The forms have been imported successfully!', 'weforms' ) );
1155 - } else {
1156 - wp_send_json_error( __( 'Something went wrong importing the file.', 'weforms' ) );
1157 - }
1158 - } else {
1159 - wp_send_json_error( __( 'Invalid file or file size too big.', 'weforms' ) );
1160 - }
1161 - }
1162 -
1163 - /**
1164 - * Read Log file
1165 - *
1166 - * @return json
1167 - **/
1168 - public function get_logs() {
1169 - check_ajax_referer( 'weforms' );
1170 -
1171 - $this->check_admin();
1172 -
1173 - $file = weforms_log_file_path();
1174 -
1175 - if ( !file_exists( $file ) ) {
1176 - return;
1177 - }
1178 -
1179 - $data = file_get_contents( $file );
1180 - $data = explode( "\n", $data );
1181 - $data = array_reverse( $data );
1182 - $data = array_filter( $data );
1183 -
1184 - if ( empty( $data ) ) {
1185 - return;
1186 - }
1187 -
1188 - $logs = [];
1189 -
1190 - foreach ( $data as $key => $row ) {
1191 - preg_match( '/\[(?<time>.+?)\]\[(?<type>.+?)\](?<message>.+)/im', $row, $log );
1192 -
1193 - if ( empty( $log['message'] ) ) {
1194 - $log = [];
1195 - $log['message'] = !empty( $log['message'] ) ? $log['message'] : $row;
1196 - }
1197 -
1198 - if ( !empty( $log['time'] ) ) {
1199 - $human_time = human_time_diff( strtotime( $log['time'] ), current_time( 'timestamp' ) );
1200 - $log['time'] = $human_time ? $human_time . ' ' . __( 'ago', 'weforms' ) : $log['time'];
1201 - }
1202 -
1203 - $logs[] = $log;
1204 - }
1205 -
1206 - wp_send_json_success( $logs );
1207 - }
1208 -
1209 - /**
1210 - * Read Log file
1211 - *
1212 - * @return json
1213 - **/
1214 - public function delete_logs() {
1215 - check_ajax_referer( 'weforms' );
1216 -
1217 - $this->check_admin();
1218 -
1219 - $file = weforms_log_file_path();
1220 -
1221 - if ( !file_exists( $file ) ) {
1222 - return;
1223 - }
1224 -
1225 - @unlink( $file );
1226 -
1227 - wp_send_json_success();
1228 - }
1229 -}
1 +<?php
2 +
3 +/**
4 + * The ajax handler class
5 + */
6 +class WeForms_Ajax {
7 +
8 + public function __construct() {
9 +
10 + // backend requests
11 + add_action( 'wp_ajax_weforms_form_list', [ $this, 'get_contact_forms' ] );
12 + add_action( 'wp_ajax_weforms_get_users', [ $this, 'get_all_users' ] );
13 + add_action( 'wp_ajax_weforms_form_names', [ $this, 'get_contact_form_names' ] );
14 + add_action( 'wp_ajax_weforms_form_create', [ $this, 'create_form' ] );
15 + add_action( 'wp_ajax_weforms_form_delete', [ $this, 'delete_form' ] );
16 + add_action( 'wp_ajax_weforms_form_delete_bulk', [ $this, 'delete_form_bulk' ] );
17 + add_action( 'wp_ajax_weforms_form_duplicate', [ $this, 'duplicate_form' ] );
18 +
19 + // read logs
20 + add_action( 'wp_ajax_weforms_read_logs', [ $this, 'get_logs' ] );
21 + add_action( 'wp_ajax_weforms_delete_logs', [ $this, 'delete_logs' ] );
22 +
23 + // create from a template
24 + add_filter( 'wp_ajax_weforms_contact_form_template', [ $this, 'create_form_from_template' ] );
25 +
26 + // form settings
27 + add_action( 'wp_ajax_weforms_save_settings', [ $this, 'save_settings' ] );
28 + add_action( 'wp_ajax_weforms_get_settings', [ $this, 'get_settings' ] );
29 +
30 + // import
31 + add_action( 'wp_ajax_weforms_import_form', [ $this, 'import_form' ] );
32 +
33 + // form editing
34 + add_action( 'wp_ajax_weforms_get_form', [ $this, 'get_form' ] );
35 + add_action( 'wp_ajax_wpuf_form_builder_save_form', [ $this, 'save_form' ] );
36 +
37 + // entries
38 + add_action( 'wp_ajax_weforms_form_entries', [ $this, 'get_entries' ] );
39 +
40 + add_action( 'wp_ajax_weforms_form_entry_details', [ $this, 'get_entry_detail' ] );
41 + add_action( 'wp_ajax_weforms_form_entry_trash', [ $this, 'trash_entry' ] );
42 + add_action( 'wp_ajax_weforms_form_entry_delete', [ $this, 'delete_entry' ] );
43 + add_action( 'wp_ajax_weforms_form_entry_restore', [ $this, 'restore_entry' ] );
44 +
45 + add_action( 'wp_ajax_weforms_form_entry_trash_bulk', [ $this, 'bulk_delete_entry' ] );
46 + add_action( 'wp_ajax_weforms_form_entry_restore_bulk', [ $this, 'bulk_restore_entry' ] );
47 +
48 + // frontend requests
49 + add_action( 'wp_ajax_weforms_frontend_submit', [ $this, 'handle_frontend_submission' ] );
50 + add_action( 'wp_ajax_nopriv_weforms_frontend_submit', [ $this, 'handle_frontend_submission' ] );
51 + }
52 +
53 + /**
54 + * Administrator validation
55 + *
56 + * @return void
57 + */
58 + public function check_admin() {
59 + if ( !current_user_can( weforms_form_access_capability() ) ) {
60 + wp_send_json_error( __( 'You do not have sufficient permission.', 'weforms' ) );
61 + }
62 + }
63 +
64 + /**
65 + * Get a form to edit
66 + *
67 + * @return void
68 + */
69 + public function get_form() {
70 + $this->check_admin();
71 +
72 + $form_id = isset( $_REQUEST['form_id'] ) ? absint( $_REQUEST['form_id'] ) : 0;
73 +
74 + $form = weforms()->form->get( $form_id );
75 +
76 + $data = [
77 + 'post' => $form->data,
78 + 'form_fields' => $form->get_fields(),
79 + 'settings' => $form->get_settings(),
80 + 'notifications' => $form->get_notifications(),
81 + 'integrations' => $form->get_integrations(),
82 + ];
83 +
84 + wp_send_json_success( $data );
85 + }
86 +
87 + /**
88 + * Save the form
89 + *
90 + * @return void
91 + */
92 + public function save_form() {
93 +
94 + if ( isset( $_POST['form_data'] ) ) {
95 + parse_str( sanitize_text_field( wp_unslash( $_POST['form_data'] ) ), $form_data );
96 + }
97 +
98 + if ( !wp_verify_nonce( $form_data['wpuf_form_builder_nonce'], 'wpuf_form_builder_save_form' ) ) {
99 + wp_send_json_error( __( 'Unauthorized operation', 'weforms' ) );
100 + }
101 +
102 + if ( empty( $form_data['wpuf_form_id'] ) ) {
103 + wp_send_json_error( __( 'Invalid form id', 'weforms' ) );
104 + }
105 +
106 + $form_fields = isset( $_POST['form_fields'] ) ? sanitize_text_field( wp_unslash( $_POST['form_fields'] ) ) : '';
107 + $notifications = isset( $_POST['notifications'] ) ? sanitize_text_field( wp_unslash( $_POST['notifications'] ) ) : '';
108 + $settings = array();
109 + $integrations = array();
110 +
111 + if ( isset( $_POST['settings'] ) ) {
112 + $settings = (array) json_decode( sanitize_text_field( wp_unslash( $_POST['settings'] ) ) );
113 + } else {
114 + $settings = isset( $form_data['wpuf_settings'] ) ? $form_data['wpuf_settings'] : [];
115 + }
116 +
117 + if ( isset( $_POST['integrations'] ) ) {
118 + $integrations = (array) json_decode( sanitize_text_field( wp_unslash( $_POST['integrations'] ) ) );
119 + }
120 +
121 + $form_fields = wp_unslash( $form_fields );
122 + $notifications = wp_unslash( $notifications );
123 +
124 + $form_fields = json_decode( $form_fields, true );
125 + $notifications = json_decode( $notifications, true );
126 +
127 + $data = [
128 + 'form_id' => absint( $form_data['wpuf_form_id'] ),
129 + 'post_title' => sanitize_text_field( $form_data['post_title'] ),
130 + 'form_fields' => $form_fields,
131 + 'form_settings' => $settings,
132 + 'form_settings_key' => isset( $form_data['form_settings_key'] ) ? $form_data['form_settings_key'] : '',
133 + 'notifications' => $notifications,
134 + 'integrations' => $integrations,
135 + ];
136 +
137 + $form_fields = weforms()->form->save( $data );
138 +
139 + wp_send_json_success( [ 'form_fields' => $form_fields ] );
140 + }
141 +
142 + /**
143 + * Get all contact forms
144 + *
145 + * @return void
146 + */
147 + public function get_contact_forms() {
148 + check_ajax_referer( 'weforms' );
149 +
150 + $this->check_admin();
151 +
152 + $args = [
153 + 'posts_per_page' => isset( $_POST['posts_per_page'] ) ? intval( $_POST['posts_per_page'] ) : 10,
154 + 'paged' => isset( $_POST['page'] ) ? absint( $_POST['page'] ) : 1,
155 + 'order' => 'DESC',
156 + 'orderby' => 'post_date',
157 + ];
158 +
159 + $args = apply_filters( 'weforms_ajax_get_contact_forms_args', $args );
160 +
161 + $contact_forms = weforms()->form->get_forms( $args );
162 +
163 + array_map(
164 + function ( $form ) {
165 + $form->entries = $form->num_form_entries();
166 + $form->settings = $form->get_settings();
167 + $form->views = $form->num_form_views();
168 + $form->payments = $form->num_form_payments();
169 + $form->author = $form->get_form_author_details();
170 + }, $contact_forms['forms']
171 + );
172 +
173 + $contact_forms = $this->filter_contact_forms( $contact_forms );
174 + $contact_forms = apply_filters( 'weforms_ajax_get_contact_forms', $contact_forms );
175 +
176 + wp_send_json_success( $contact_forms );
177 + }
178 +
179 + /**
180 + * Get all users
181 + *
182 + * @return array
183 + */
184 + public function get_all_users() {
185 + check_ajax_referer( 'weforms' );
186 +
187 + $this->check_admin();
188 +
189 + $users_meta = [];
190 + $users = get_users( [ 'fields' => [ 'ID' ] ] );
191 +
192 + foreach ( $users as $user ) {
193 + $users_meta[] = [
194 + 'id' => $user->ID,
195 + 'data' => get_user_meta( $user->ID ),
196 + ];
197 + }
198 +
199 + wp_send_json_success( $users_meta );
200 + }
201 +
202 + /**
203 + * Filter
204 + *
205 + * @return void
206 + */
207 + public function filter_contact_forms( &$contact_forms ) {
208 + if ( isset( $_REQUEST['filter'] ) && $_REQUEST['filter'] == 'entries' ) {
209 + foreach ( $contact_forms['forms'] as $key => &$form ) {
210 + if ( isset( $form->entries ) && !$form->entries ) {
211 + unset( $contact_forms['forms'][ $key ] );
212 + }
213 + }
214 +
215 + $contact_forms['meta']['total'] = count( $contact_forms['forms'] );
216 + }
217 +
218 + return $contact_forms;
219 + }
220 +
221 + /**
222 + * Get the names of contact forms for generating dropdown
223 + *
224 + * @return void
225 + */
226 + public function get_contact_form_names() {
227 + check_ajax_referer( 'weforms' );
228 +
229 + $this->check_admin();
230 +
231 + $contact_forms = weforms()->form->all();
232 + $response = [];
233 +
234 + foreach ( $contact_forms['forms'] as $form ) {
235 + $response[] = [
236 + 'id' => $form->get_id(),
237 + 'title' => $form->get_name() . ' (#' . $form->get_id() . ')',
238 + ];
239 + }
240 +
241 + wp_send_json_success( $response );
242 + }
243 +
244 + /**
245 + * Create a form
246 + *
247 + * @return void
248 + */
249 + public function create_form() {
250 + check_ajax_referer( 'weforms' );
251 +
252 + $this->check_admin();
253 +
254 + $form_name = isset( $_POST['form_name'] ) ? sanitize_text_field( wp_unslash( $_POST['form_name'] ) ) : '';
255 +
256 + if ( empty( $form_name ) ) {
257 + wp_send_json_error( __( 'Please provide a form name', 'weforms' ) );
258 + }
259 +
260 + $form_id = weforms()->form->create( $form_name );
261 +
262 + if ( is_wp_error( $form_id ) ) {
263 + wp_send_json_error( $form_id->get_error_message() );
264 + }
265 +
266 + wp_send_json_success( [
267 + 'form_id' => $form_id,
268 + 'form_name' => $form_name,
269 + ] );
270 + }
271 +
272 + /**
273 + * Delete a form
274 + *
275 + * @return void
276 + */
277 + public function delete_form() {
278 + check_ajax_referer( 'weforms' );
279 +
280 + $this->check_admin();
281 +
282 + $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
283 +
284 + if ( !$form_id ) {
285 + wp_send_json_error( __( 'No form id provided!', 'weforms' ) );
286 + }
287 +
288 + weforms()->form->delete( $form_id );
289 +
290 + wp_send_json_success();
291 + }
292 +
293 + public function delete_form_bulk() {
294 + check_ajax_referer( 'weforms' );
295 +
296 + $this->check_admin();
297 +
298 + $form_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : [];
299 +
300 + if ( !$form_ids ) {
301 + wp_send_json_error( __( 'No form ids provided!', 'weforms' ) );
302 + }
303 +
304 + foreach ( $form_ids as $form_id ) {
305 + weforms()->form->delete( $form_id );
306 + }
307 +
308 + wp_send_json_success();
309 + }
310 +
311 + /**
312 + * Duplicate a form
313 + *
314 + * @return voiud
315 + */
316 + public function duplicate_form() {
317 + check_ajax_referer( 'weforms' );
318 +
319 + $this->check_admin();
320 +
321 + $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
322 +
323 + $form = weforms()->form->duplicate( $form_id );
324 + $form->settings = $form->get_settings();
325 +
326 + wp_send_json_success( $form );
327 + }
328 +
329 + /**
330 + * Create form from a template
331 + *
332 + * @return void
333 + */
334 + public function create_form_from_template() {
335 + check_ajax_referer( 'weforms' );
336 +
337 + $template = isset( $_REQUEST['template'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['template'] ) ) : '';
338 +
339 + $form_id = weforms()->templates->create( $template );
340 +
341 + if ( is_wp_error( $form_id ) ) {
342 + wp_send_json_error( __( 'Could not create the form', 'weforms' ) );
343 + }
344 +
345 + wp_send_json_success( [
346 + 'id' => $form_id,
347 + ] );
348 + }
349 +
350 + /**
351 + * Save the weForms settings
352 + *
353 + * @return void
354 + */
355 + public function save_settings() {
356 + check_ajax_referer( 'weforms' );
357 +
358 + $this->check_admin();
359 +
360 + $requires_wpuf_update = false;
361 + $wpuf_update_array = array();
362 + $settings = isset( $_POST['settings'] ) ? (array) json_decode( sanitize_text_field( wp_unslash( $_POST['settings'] ) ) ) : [];
363 + update_option( 'weforms_settings', $settings );
364 +
365 + // wpuf settings sync
366 + if ( isset( $settings['gmap_api'] ) ) {
367 + $requires_wpuf_update = true;
368 + $wpuf_update_array['gmap_api_key'] = $settings['gmap_api'];
369 + }
370 +
371 + if ( isset( $settings['recaptcha'] ) ) {
372 + $requires_wpuf_update = true;
373 + $wpuf_update_array['recaptcha_public'] = $settings['recaptcha']->key;
374 + $wpuf_update_array['recaptcha_private'] = $settings['recaptcha']->secret;
375 + }
376 +
377 + if ( isset( $settings['no_conflict'] ) ) {
378 + $requires_wpuf_update = true;
379 + $wpuf_update_array['no_conflict'] = $settings['no_conflict'];
380 + }
381 +
382 + if ( isset( $settings['email_footer'] ) ) {
383 + $requires_wpuf_update = true;
384 + $wpuf_update_array['email_footer'] = $settings['email_footer'];
385 + }
386 +
387 + if ( $requires_wpuf_update ) {
388 + $wpuf_settings = get_option( 'wpuf_general', [] );
389 +
390 + $wpuf_settings = array_merge( $wpuf_settings, $wpuf_update_array );
391 + update_option( 'wpuf_general', $wpuf_settings );
392 + }
393 +
394 + do_action( 'weforms_save_settings', $settings );
395 +
396 + $settings = apply_filters( 'weforms_after_save_settings', $settings );
397 +
398 + wp_send_json_success( $settings );
399 + }
400 +
401 + /**
402 + * Get the weForms Settings
403 + *
404 + * @return void
405 + */
406 + public function get_settings() {
407 + check_ajax_referer( 'weforms' );
408 +
409 + $this->check_admin();
410 +
411 + $settings = weforms_get_settings();
412 +
413 + // checking to prevent js error, will be removed in future
414 + if ( !isset( $settings['credit'] ) ) {
415 + $settings['credit'] = false;
416 + }
417 +
418 + if ( !isset( $settings['permission'] ) ) {
419 + $settings['permission'] = 'manage_options';
420 + }
421 +
422 + wp_send_json_success( $settings );
423 + }
424 +
425 + /**
426 + * Get all entries
427 + *
428 + * @return void
429 + */
430 + public function get_entries() {
431 + check_ajax_referer( 'weforms' );
432 +
433 + $this->check_admin();
434 +
435 + $form_id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
436 + $current_page = isset( $_REQUEST['page'] ) ? intval( $_REQUEST['page'] ) : 1;
437 + $status = isset( $_REQUEST['status'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['status'] ) ) : 'publish';
438 + $per_page = 20;
439 + $offset = ( $current_page - 1 ) * $per_page;
440 +
441 + if ( !$form_id ) {
442 + wp_send_json_error( __( 'No form id provided!', 'weforms' ) );
443 + }
444 +
445 + $entries = weforms_get_form_entries(
446 + $form_id, [
447 + 'number' => $per_page,
448 + 'offset' => $offset,
449 + 'status' => $status,
450 + ]
451 + );
452 +
453 + $columns = weforms_get_entry_columns( $form_id );
454 + $total_entries = weforms_count_form_entries( $form_id, $status );
455 +
456 + array_map(
457 + function ( $entry ) use ( $columns ) {
458 + $entry_id = $entry->id;
459 + $entry->fields = [];
460 +
461 + foreach ( $columns as $meta_key => $label ) {
462 + if ( empty( $meta_key ) ) {
463 + continue;
464 + }
465 + $value = weforms_get_entry_meta( $entry_id, $meta_key, true );
466 + $entry->fields[ $meta_key ] = str_replace( WeForms::$field_separator, ' ', $value );
467 + }
468 + }, $entries
469 + );
470 +
471 + $entries = apply_filters( 'weforms_get_entries', $entries, $form_id );
472 +
473 + $response = [
474 + 'columns' => $columns,
475 + 'entries' => $entries,
476 + 'form_title' => get_post_field( 'post_title', $form_id ),
477 + 'pagination' => [
478 + 'total' => $total_entries,
479 + 'per_page' => $per_page,
480 + 'pages' => ceil( $total_entries / $per_page ),
481 + 'current' => $current_page,
482 + ],
483 + 'meta' => [
484 + 'total' => weforms_count_form_entries( $form_id ),
485 + 'totalTrash' => weforms_count_form_entries( $form_id, 'trash' ),
486 + ],
487 + ];
488 +
489 + wp_send_json_success( $response );
490 + }
491 +
492 + /**
493 + * Get an entry details
494 + *
495 + * @return void
496 + */
497 + public function get_entry_detail() {
498 + check_ajax_referer( 'weforms' );
499 +
500 + $this->check_admin();
501 +
502 + $form_id = isset( $_REQUEST['form_id'] ) ? intval( $_REQUEST['form_id'] ) : 0;
503 + $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
504 +
505 + $form = weforms()->form->get( $form_id );
506 + $form_settings = $form->get_settings();
507 + $entry = $form->entries()->get( $entry_id );
508 + $fields = $entry->get_fields();
509 + $metadata = $entry->get_metadata();
510 + $payment = $entry->get_payment_data();
511 +
512 + if ( isset( $payment->payment_data ) && is_serialized( $payment->payment_data ) ) {
513 + $payment->payment_data = unserialize( $payment->payment_data );
514 + }
515 +
516 + if ( false === $fields ) {
517 + wp_send_json_error( __( 'No form fields found!', 'weforms' ) );
518 + }
519 +
520 + if ( sizeof( $fields ) < 1 ) {
521 + $fields[] = [
522 + 'label' => __( 'No form fields found!', 'weforms' ),
523 + ];
524 + }
525 +
526 + $has_empty = false;
527 + $answers = [];
528 + $respondentPoints = isset( $form_settings['total_points'] ) ? floatval( $form_settings['total_points'] ) : 0;
529 +
530 + foreach ( $fields as $key => $field ) {
531 + if ( $form_settings['quiz_form'] == 'yes' ) {
532 + $selectedAnswers = isset( $field['selected_answers'] ) ? $field['selected_answers'] : '';
533 + $givenAnswer = isset( $field['value'] ) ? $field['value'] : '';
534 + $options = isset( $field['options'] ) ? $field['options'] : '';
535 + $template = $field['template'];
536 + $fieldPoints = isset( $field['points'] ) ? floatval( $field['points'] ) : 0;
537 +
538 + if ( $template == 'radio_field' || $template == 'dropdown_field' ) {
539 + $answers[$field['name']] = true;
540 +
541 + if ( empty( $givenAnswer ) ) {
542 + $answers[$field['name']] = false;
543 + $respondentPoints -= $fieldPoints;
544 + } else {
545 + foreach ( $options as $key => $value ) {
546 + if ( $givenAnswer == $value ) {
547 + if ( $key != $selectedAnswers ) {
548 + $answers[$field['name']] = false;
549 + $respondentPoints -= $fieldPoints;
550 + }
551 + }
552 + }
553 + }
554 + } elseif ( $template == 'checkbox_field' || $template == 'multiple_select' ) {
555 + $answers[$field['name']] = true;
556 + $userAnswer = [];
557 +
558 + foreach ( $options as $key => $value ) {
559 + foreach ( $givenAnswer as $answer ) {
560 + if ( $value == $answer ) {
561 + $userAnswer[] = $key;
562 + }
563 + }
564 + }
565 +
566 + $userAnswer = implode( '|', $userAnswer );
567 + $rightAnswers = implode( '|', $selectedAnswers );
568 +
569 + if ( $userAnswer != $rightAnswers || empty( $userAnswer ) ) {
570 + $answers[$field['name']] = false;
571 + $respondentPoints -= $fieldPoints;
572 + }
573 + }
574 + } elseif ( empty( $field['value'] ) ) {
575 + $has_empty = true;
576 + break;
577 + }
578 + }
579 +
580 + $response = [
581 + 'form_fields' => $fields,
582 + 'form_settings' => $form_settings,
583 + 'meta_data' => $metadata,
584 + 'payment_data' => $payment,
585 + 'has_empty' => $has_empty,
586 + 'respondent_points' => $respondentPoints,
587 + 'answers' => $answers,
588 + ];
589 +
590 + wp_send_json_success( $response );
591 + }
592 +
593 + /**
594 + * Trash an entry
595 + *
596 + * @return void
597 + */
598 + public function trash_entry() {
599 + check_ajax_referer( 'weforms' );
600 +
601 + $this->check_admin();
602 +
603 + $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
604 +
605 + weforms_change_entry_status( $entry_id, 'trash' );
606 + wp_send_json_success();
607 + }
608 +
609 + /**
610 + * Trash an entry
611 + *
612 + * @return void
613 + */
614 + public function delete_entry() {
615 + check_ajax_referer( 'weforms' );
616 +
617 + $this->check_admin();
618 +
619 + $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
620 +
621 + weforms_delete_entry( $entry_id );
622 +
623 + wp_send_json_success();
624 + }
625 +
626 + /**
627 + * Restore Entry
628 + *
629 + * @return void
630 + */
631 + public function restore_entry() {
632 + check_ajax_referer( 'weforms' );
633 +
634 + $this->check_admin();
635 +
636 + $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
637 +
638 + weforms_change_entry_status( $entry_id, 'publish' );
639 + wp_send_json_success();
640 + }
641 +
642 + /**
643 + * Bulk trash entries
644 + *
645 + * @return void
646 + */
647 + public function bulk_delete_entry() {
648 + check_ajax_referer( 'weforms' );
649 +
650 + $this->check_admin();
651 +
652 + $entry_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : array();
653 + $permanent = isset( $_POST['permanent'] ) && ( sanitize_text_field( wp_unslash ( $_POST['permanent'] ) ) ) ? true : false;
654 +
655 + if ( !$entry_ids ) {
656 + wp_send_json_error( __( 'No entry ids provided!', 'weforms' ) );
657 + }
658 +
659 + foreach ( $entry_ids as $entry_id ) {
660 + if ( $permanent ) {
661 + weforms_delete_entry( $entry_id );
662 + } else {
663 + weforms_change_entry_status( $entry_id, 'trash' );
664 + }
665 + }
666 +
667 + wp_send_json_success();
668 + }
669 +
670 + /**
671 + * Bulk trash entries
672 + *
673 + * @return void
674 + */
675 + public function bulk_restore_entry() {
676 + check_ajax_referer( 'weforms' );
677 +
678 + $this->check_admin();
679 +
680 + $entry_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : [];
681 +
682 + if ( !$entry_ids ) {
683 + wp_send_json_error( __( 'No entry ids provided!', 'weforms' ) );
684 + }
685 +
686 + foreach ( $entry_ids as $entry_id ) {
687 + weforms_change_entry_status( $entry_id, 'publish' );
688 + }
689 +
690 + wp_send_json_success();
691 + }
692 +
693 + /**
694 + * Handle the frontend submission
695 + *
696 + * @return void
697 + */
698 + public function handle_frontend_submission() {
699 + check_ajax_referer( 'wpuf_form_add' );
700 +
701 + $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
702 + $page_id = isset( $_POST['page_id'] ) ? intval( $_POST['page_id'] ) : 0;
703 +
704 + $form = weforms()->form->get( $form_id );
705 + $form_settings = $form->get_settings();
706 + $form_fields = $form->get_fields();
707 + $entry_fields = $form->prepare_entries();
708 + $form_entries = weforms_get_form_entries( $form_id, [ 'number' => '', 'offset' => '' ] );
709 +
710 + if ( $form_fields && count( $form_entries ) && count( $entry_fields ) ) {
711 + foreach ( $entry_fields as $field_key => $field_value ) {
712 + $duplicate_check = false;
713 + $field_label = 'This';
714 +
715 + foreach ( $form_fields as $form_field ) {
716 + if ( in_array( $form_field['template'], [ 'text_field', 'website_url', 'numeric_text_field', 'email_address' ] ) && $form_field['name'] == $field_key && isset( $form_field['duplicate'] ) && 'no' == $form_field['duplicate'] ) {
717 + $duplicate_check = true;
718 + $field_label = $form_field['label'];
719 + }
720 + }
721 +
722 + if ( $duplicate_check ) {
723 + foreach ( $form_entries as $entry ) {
724 + $existing = weforms_get_entry_meta( $entry->id, $field_key, true );
725 +
726 + if ( $existing && $field_value == $existing ) {
727 + wp_send_json( [
728 + 'success' => false,
729 + 'error' => sprintf( __( '"%s" field requires a unique entry and "%s" has already been used.', 'weforms' ), $field_label, $field_value ),
730 + ] );
731 + }
732 + }
733 + }
734 + }
735 + }
736 +
737 + if ( !$form_fields ) {
738 + wp_send_json( [
739 + 'success' => false,
740 + 'error' => __( 'No form field was found.', 'weforms' ),
741 + ] );
742 + }
743 +
744 + if ( $form->has_field( 'recaptcha' ) ) {
745 + $this->validate_reCaptcha();
746 + }
747 +
748 + // vaidate submission
749 + $this->validate_submission( $entry_fields, $form, $form_settings, $form_fields );
750 +
751 + $entry_fields = apply_filters( 'weforms_before_entry_submission', $entry_fields, $form, $form_settings, $form_fields );
752 +
753 + $entry_id = weforms_insert_entry( [
754 + 'form_id' => $form_id,
755 + ], $entry_fields );
756 +
757 + if ( is_wp_error( $entry_id ) ) {
758 + wp_send_json( [
759 + 'success' => false,
760 + 'error' => $entry_id->get_error_message(),
761 + ] );
762 + }
763 +
764 + // redirect URL
765 + $show_message = false;
766 + $redirect_to = false;
767 +
768 + if ( $form_settings['redirect_to'] == 'page' ) {
769 + $redirect_to = get_permalink( $form_settings['page_id'] );
770 + } elseif ( $form_settings['redirect_to'] == 'url' ) {
771 + $redirect_to = $form_settings['url'];
772 + } elseif ( $form_settings['redirect_to'] == 'same' ) {
773 + $show_message = true;
774 + } else {
775 + $redirect_to = get_permalink( $post_id );
776 + }
777 +
778 + // Fire a hook for integration
779 + do_action( 'weforms_entry_submission', $entry_id, $form_id, $page_id, $form_settings );
780 +
781 + $field_search = $field_replace = [];
782 +
783 + foreach ( $form_fields as $r_field ) {
784 + $field_search[] = '{' . $r_field['name'] . '}';
785 +
786 + if ( $r_field['template'] == 'name_field' ) {
787 + $field_replace[] = implode( ' ', explode( '|', $entry_fields[$r_field['name']] ) );
788 + } else {
789 + $field_replace[] = isset( $entry_fields[$r_field['name']] ) ? $entry_fields[$r_field['name']] : '';
790 + }
791 + }
792 + $message = str_replace( $field_search, $field_replace, $form_settings['message'] );
793 +
794 + // send the response
795 + $response = apply_filters( 'weforms_entry_submission_response', [
796 + 'success' => true,
797 + 'redirect_to' => $redirect_to,
798 + 'show_message' => $show_message,
799 + 'message' => $message,
800 + 'data' => $_POST,
801 + 'form_id' => $form_id,
802 + 'entry_id' => $entry_id,
803 + ] );
804 +
805 + $notification = new WeForms_Notification( [
806 + 'form_id' => $form_id,
807 + 'page_id' => $page_id,
808 + 'entry_id' => $entry_id,
809 + ] );
810 +
811 + $notification->send_notifications();
812 +
813 + weforms_clear_buffer();
814 + wp_send_json( $response );
815 + }
816 +
817 + /**
818 + * reCaptcha Validation
819 + *
820 + * @return void
821 + */
822 + function validate_reCaptcha() {
823 + check_ajax_referer( 'wpuf_form_add' );
824 + if ( class_exists( 'WPUF_ReCaptcha' ) ) {
825 + $recaptcha_class = 'WPUF_ReCaptcha';
826 + } else {
827 + if ( !function_exists( 'recaptcha_get_html' ) ) {
828 + require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib.php';
829 + }
830 +
831 + require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib_noCaptcha.php';
832 + $recaptcha_class = 'Weforms_ReCaptcha';
833 + }
834 +
835 + $invisible = isset( $_POST['g-recaptcha-response'] ) ? false : true;
836 +
837 + $recaptcha_settings = weforms_get_settings( 'recaptcha' );
838 + $secret = isset( $recaptcha_settings->secret ) ? $recaptcha_settings->secret : '';
839 +
840 + if ( ! $invisible ) {
841 + $response = null;
842 + $reCaptcha = new $recaptcha_class( $secret );
843 + $remote_ADDR = isset( $_SERVER['REMOTE_ADDR'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ) ) : '';
844 + $recaptcha_response = isset( $_SERVER['g-recaptcha-response'] ) ? sanitize_text_field( wp_unslash( $_POST['g-recaptcha-response'] ) ) : '';
845 + $resp = $reCaptcha->verifyResponse(
846 + $remote_ADDR,
847 + $recaptcha_response
848 + );
849 +
850 + if ( !$resp->success ) {
851 + wp_send_json( [
852 + 'success' => false,
853 + 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
854 + ] );
855 + }
856 + } else {
857 +
858 + $recap_challenge = isset( $_POST['recaptcha_challenge_field'] ) ? sanitize_text_field( wp_unslash( $_POST['recaptcha_challenge_field'] ) ) : '';
859 + $recap_response = isset( $_POST['recaptcha_response_field'] ) ? sanitize_text_field( wp_unslash( $_POST['recaptcha_response_field'] ) ) : '';
860 + $resp = recaptcha_check_answer( $secret, $remote_ADDR, $recap_challenge, $recap_response );
861 +
862 + if ( !$resp->is_valid ) {
863 + ob_clean();
864 +
865 + wp_send_json( [
866 + 'success' => false,
867 + 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
868 + ] );
869 + }
870 + }
871 + }
872 +
873 + /**
874 + * Validate submission
875 + *
876 + * @param array $entry_fields
877 + * @param object $form
878 + * @param array $form_settings
879 + * @param array $form_fields
880 + *
881 + * @return bool|json
882 + */
883 + public function validate_submission( $entry_fields, $form, $form_settings, $form_fields ) {
884 + foreach ( $form_fields as $key => $field ) {
885 +
886 + //skip custom html field as it is not saved
887 + if ( 'custom_html' == $field['name'] ) {
888 + continue;
889 + }
890 +
891 + //skip recaptcha field as it is not saved
892 + if ( 'recaptcha' == $field['name'] ) {
893 + continue;
894 + }
895 +
896 + $value = $entry_fields[ $field['name'] ];
897 +
898 + if ( 'single_product' === $field['template'] ) {
899 + if ( !$value ) {
900 + $value = [];
901 + }
902 +
903 + $value['price'] = isset( $value['price'] ) ? floatval( $value['price'] ) : 0;
904 + $value['quantity'] = isset( $value['quantity'] ) ? floatval( $value['quantity'] ) : 0;
905 + $quantity = isset( $field['quantity'] ) ? $field['quantity'] : [];
906 + $price = isset( $field['price'] ) ? $field['price'] : [];
907 +
908 + if ( isset( $price['is_flexible'] ) && $price['is_flexible'] ) {
909 + $min = isset( $price['min'] ) ? floatval( $price['min'] ) : 0;
910 + $max = isset( $price['max'] ) ? floatval( $price['max'] ) : 0;
911 +
912 + if ( $value['price'] < $min ) {
913 + wp_send_json( [
914 + 'success' => false,
915 + 'error' => __( sprintf(
916 + '%s price must be equal or greater than %s',
917 + $field['weforms'],
918 + $min ),
919 + 'weforms' ),
920 + ] );
921 + }
922 +
923 + if ( $max && $value['price'] > $max ) {
924 + wp_send_json( [
925 + 'success' => false,
926 + 'error' => __( sprintf(
927 + '%s price must be equal or less than %s',
928 + $field['weforms'],
929 + $max ),
930 + 'weforms' ),
931 + ] );
932 + }
933 + }
934 +
935 + if ( isset( $quantity['status'] ) && $quantity['status'] ) {
936 + $min = isset( $quantity['min'] ) ? floatval( $quantity['min'] ) : 0;
937 + $max = isset( $quantity['max'] ) ? floatval( $quantity['max'] ) : 0;
938 +
939 + if ( $value['quantity'] < $min ) {
940 + wp_send_json( [
941 + 'success' => false,
942 + 'error' => __( sprintf(
943 + '%s quantity must be equal or greater than %s',
944 + $field['weforms'],
945 + $min ),
946 + 'weforms' ),
947 + ] );
948 + }
949 +
950 + if ( $max && $value['quantity'] > $max ) {
951 + wp_send_json( [
952 + 'success' => false,
953 + 'error' => __( sprintf(
954 + '%s quantity must be equal or less than %s',
955 + $field['weforms'],
956 + $max ),
957 + 'weforms' ),
958 + ] );
959 + }
960 + }
961 + }
962 + }
963 + }
964 +
965 + public static function prepare_meta_fields( $meta_vars ) {
966 + check_ajax_referer( 'wpuf_form_add' );
967 + // loop through custom fields
968 + // skip files, put in a key => value paired array for later executation
969 + // process repeatable fields separately
970 + // if the input is array type, implode with separator in a field
971 + $files = [];
972 + $meta_key_value = [];
973 + $multi_repeated = []; // multi repeated fields will in sotre duplicated meta key
974 +
975 + foreach ( $meta_vars as $key => $value ) {
976 + switch ( $value['template'] ) {
977 +
978 + // put files in a separate array, we'll process it later
979 + case 'file_upload':
980 + case 'image_upload':
981 + $files[] = [
982 + 'name' => $value['name'],
983 + 'value' => isset( $_POST['wpuf_files'][ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST['wpuf_files'][ $value['name'] ] ) ) : array(),
984 + 'count' => $value['count']
985 + ];
986 + break;
987 +
988 + case 'repeat_field':
989 + // if it is a multi column repeat field
990 + if ( isset( $value['multiple'] ) && $value['multiple'] == 'true' ) {
991 +
992 + // if there's any items in the array, process it
993 + if ( isset( $_POST[ $value['name'] ] ) ) {
994 + $ref_arr = [];
995 + $cols = count( $value['columns'] );
996 + $first = array_shift( array_values( sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) ) ); // first element
997 + $rows = count( $first );
998 +
999 + // loop through columns
1000 + for ( $i = 0; $i < $rows; $i++ ) {
1001 +
1002 + // loop through the rows and store in a temp array
1003 + $temp = [];
1004 + for ( $j = 0; $j < $cols; $j++ ) {
1005 + $temp[] = isset( $_POST[ $value['name'] ][ $j ][ $i ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ][ $j ][ $i ] ) ) : '';
1006 + }
1007 +
1008 + // store all fields in a row with WeForms::$field_separator separated
1009 + $ref_arr[] = implode( WeForms::$field_separator, $temp );
1010 + }
1011 +
1012 + // now, if we found anything in $ref_arr, store to $multi_repeated
1013 + if ( $ref_arr ) {
1014 + $multi_repeated[ $value['name'] ] = array_slice( $ref_arr, 0, $rows );
1015 + }
1016 + }
1017 + } else {
1018 + $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) );
1019 + }
1020 +
1021 + break;
1022 +
1023 + case 'address_field':
1024 + if ( isset( $_POST[ $value['name'] ] ) && is_array( $_POST[ $value['name'] ] ) ) {
1025 + $post_value = sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) );
1026 + foreach ( $post_value as $address_field => $field_value ) {
1027 + $meta_key_value[ $value['name'] ][ $address_field ] = sanitize_text_field( $field_value );
1028 + }
1029 + }
1030 +
1031 + break;
1032 +
1033 + case 'text_field':
1034 + case 'email_address':
1035 + case 'numeric_text_field':
1036 + case 'date_field':
1037 + $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : '';
1038 +
1039 + break;
1040 +
1041 + case 'textarea_field':
1042 + $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : '';
1043 +
1044 + break;
1045 +
1046 + case 'dropdown_field':
1047 + case 'radio_field':
1048 + $val = sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) );
1049 + $meta_key_value[ $value['name'] ] = isset( $value['options'][ $val ] ) ? $value['options'][ $val ] : '';
1050 + break;
1051 +
1052 + case 'multiple_select':
1053 + case 'checkbox_field':
1054 + $val = ( is_array( $_POST[ $value['name'] ] ) && sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : array();
1055 + $meta_key_value[ $value['name'] ] = $val;
1056 +
1057 + if ( $val ) {
1058 + $new_val = [];
1059 +
1060 + foreach ( $val as $option_key ) {
1061 + $new_val[] = isset( $value['options'][ $option_key ] ) ? $value['options'][ $option_key ] : '';
1062 + }
1063 +
1064 + $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, $new_val );
1065 + }
1066 + break;
1067 +
1068 + default:
1069 + // if it's an array, implode with this->separator
1070 + if ( is_array( $_POST[ $value['name'] ] ) ) {
1071 + $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) );
1072 + } else {
1073 + $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ): '';
1074 + }
1075 +
1076 + break;
1077 + }
1078 + } //end foreach
1079 +
1080 + return [ $meta_key_value, $multi_repeated, $files ];
1081 + }
1082 +
1083 + /**
1084 + * Import a form from a JSON file
1085 + *
1086 + * @return void
1087 + */
1088 + public function import_form() {
1089 + check_ajax_referer( 'weforms' );
1090 +
1091 + $this->check_admin();
1092 +
1093 + $the_file = isset( $_FILES['importFile'] ) ? sanitize_text_field( wp_unslash( $_FILES['importFile'] ) ) : false;
1094 +
1095 + if ( !$the_file ) {
1096 + wp_send_json_error( __( 'No file found to import.', 'weforms' ) );
1097 + }
1098 +
1099 + $file_ext = pathinfo( $the_file['name'], PATHINFO_EXTENSION );
1100 +
1101 + if ( !class_exists( 'WeForms_Admin_Tools' ) ) {
1102 + require_once __DIR__ . '/admin/class-admin-tools.php';
1103 + }
1104 +
1105 + if ( ( $file_ext == 'json' ) && ( $the_file['size'] < 500000 ) ) {
1106 + $status = WeForms_Admin_Tools::import_json_file( $the_file['tmp_name'] );
1107 +
1108 + if ( $status ) {
1109 + wp_send_json_success( __( 'The forms have been imported successfully!', 'weforms' ) );
1110 + } else {
1111 + wp_send_json_error( __( 'Something went wrong importing the file.', 'weforms' ) );
1112 + }
1113 + } else {
1114 + wp_send_json_error( __( 'Invalid file or file size too big.', 'weforms' ) );
1115 + }
1116 + }
1117 +
1118 + /**
1119 + * Read Log file
1120 + *
1121 + * @return json
1122 + **/
1123 + public function get_logs() {
1124 + check_ajax_referer( 'weforms' );
1125 +
1126 + $this->check_admin();
1127 +
1128 + $file = weforms_log_file_path();
1129 +
1130 + if ( !file_exists( $file ) ) {
1131 + return;
1132 + }
1133 +
1134 + $data = file_get_contents( $file );
1135 + $data = explode( "\n", $data );
1136 + $data = array_reverse( $data );
1137 + $data = array_filter( $data );
1138 +
1139 + if ( empty( $data ) ) {
1140 + return;
1141 + }
1142 +
1143 + $logs = [];
1144 +
1145 + foreach ( $data as $key => $row ) {
1146 + preg_match( '/\[(?<time>.+?)\]\[(?<type>.+?)\](?<message>.+)/im', $row, $log );
1147 +
1148 + if ( empty( $log['message'] ) ) {
1149 + $log = [];
1150 + $log['message'] = !empty( $log['message'] ) ? $log['message'] : $row;
1151 + }
1152 +
1153 + if ( !empty( $log['time'] ) ) {
1154 + $human_time = human_time_diff( strtotime( $log['time'] ), current_time( 'timestamp' ) );
1155 + $log['time'] = $human_time ? $human_time . ' ' . __( 'ago', 'weforms' ) : $log['time'];
1156 + }
1157 +
1158 + $logs[] = $log;
1159 + }
1160 +
1161 + wp_send_json_success( $logs );
1162 + }
1163 +
1164 + /**
1165 + * Read Log file
1166 + *
1167 + * @return json
1168 + **/
1169 + public function delete_logs() {
1170 + check_ajax_referer( 'weforms' );
1171 +
1172 + $this->check_admin();
1173 +
1174 + $file = weforms_log_file_path();
1175 +
1176 + if ( !file_exists( $file ) ) {
1177 + return;
1178 + }
1179 +
1180 + @unlink( $file );
1181 +
1182 + wp_send_json_success();
1183 + }
1184 +}