PluginProbe
weForms – Easy Drag & Drop Contact Form Builder For WordPress / 1.4.8
weForms – Easy Drag & Drop Contact Form Builder For WordPress v1.4.8
1.6.7 1.6.8 1.6.9 1.6.12 1.6.13 1.6.14 1.6.15 1.6.16 1.6.17 1.6.18 1.6.19 1.6.2 1.6.20 1.6.21 1.6.22 1.6.23 1.6.24 1.6.25 1.6.26 1.6.27 1.6.28 1.6.3 1.6.4 1.6.5 1.6.6 All 74 releases
← All changes | includes/class-ajax.php +1227 -1257 1.6.27 → 1.4.8 View file →
@@ -1,1257 +1,1227 @@
1 -<?php
2 -
3 -/**
4 - * The ajax handler class
5 - */
6 -class WeForms_Ajax {
7 -
8 - public function __construct() {
9 -
10 - // backend requests
11 - add_action( 'wp_ajax_weforms_form_list', [ $this, 'get_contact_forms' ] );
12 - add_action( 'wp_ajax_weforms_get_users', [ $this, 'get_all_users' ] );
13 - add_action( 'wp_ajax_weforms_form_names', [ $this, 'get_contact_form_names' ] );
14 - add_action( 'wp_ajax_weforms_form_create', [ $this, 'create_form' ] );
15 - add_action( 'wp_ajax_weforms_form_delete', [ $this, 'delete_form' ] );
16 - add_action( 'wp_ajax_weforms_form_delete_bulk', [ $this, 'delete_form_bulk' ] );
17 - add_action( 'wp_ajax_weforms_form_duplicate', [ $this, 'duplicate_form' ] );
18 -
19 - // read logs
20 - add_action( 'wp_ajax_weforms_read_logs', [ $this, 'get_logs' ] );
21 - add_action( 'wp_ajax_weforms_delete_logs', [ $this, 'delete_logs' ] );
22 -
23 - // create from a template
24 - add_filter( 'wp_ajax_weforms_contact_form_template', [ $this, 'create_form_from_template' ] );
25 -
26 - // form settings
27 - add_action( 'wp_ajax_weforms_save_settings', [ $this, 'save_settings' ] );
28 - add_action( 'wp_ajax_weforms_get_settings', [ $this, 'get_settings' ] );
29 -
30 - // import
31 - add_action( 'wp_ajax_weforms_import_form', [ $this, 'import_form' ] );
32 -
33 - // form editing
34 - add_action( 'wp_ajax_weforms_get_form', [ $this, 'get_form' ] );
35 - add_action( 'wp_ajax_wpuf_form_builder_save_form', [ $this, 'save_form' ] );
36 -
37 - // entries
38 - add_action( 'wp_ajax_weforms_form_entries', [ $this, 'get_entries' ] );
39 -
40 - add_action( 'wp_ajax_weforms_form_entry_details', [ $this, 'get_entry_detail' ] );
41 - add_action( 'wp_ajax_weforms_form_entry_trash', [ $this, 'trash_entry' ] );
42 - add_action( 'wp_ajax_weforms_form_entry_delete', [ $this, 'delete_entry' ] );
43 - add_action( 'wp_ajax_weforms_form_entry_restore', [ $this, 'restore_entry' ] );
44 -
45 - add_action( 'wp_ajax_weforms_form_entry_trash_bulk', [ $this, 'bulk_delete_entry' ] );
46 - add_action( 'wp_ajax_weforms_form_entry_restore_bulk', [ $this, 'bulk_restore_entry' ] );
47 -
48 - // frontend requests
49 - add_action( 'wp_ajax_weforms_frontend_submit', [ $this, 'handle_frontend_submission' ] );
50 - add_action( 'wp_ajax_nopriv_weforms_frontend_submit', [ $this, 'handle_frontend_submission' ] );
51 - }
52 -
53 - /**
54 - * Administrator validation
55 - *
56 - * @return void
57 - */
58 - public function check_admin() {
59 - if ( !current_user_can( weforms_form_access_capability() ) ) {
60 - wp_send_json_error( __( 'You do not have sufficient permission.', 'weforms' ) );
61 - }
62 - }
63 -
64 - /**
65 - * Get a form to edit
66 - *
67 - * @return void
68 - */
69 - public function get_form() {
70 - $this->check_admin();
71 -
72 - $form_id = isset( $_REQUEST['form_id'] ) ? absint( $_REQUEST['form_id'] ) : 0;
73 -
74 - $form = weforms()->form->get( $form_id );
75 -
76 - $data = [
77 - 'post' => $form->data,
78 - 'form_fields' => $form->get_fields(),
79 - 'settings' => $form->get_settings(),
80 - 'notifications' => $form->get_notifications(),
81 - 'integrations' => $form->get_integrations(),
82 - ];
83 -
84 - wp_send_json_success( $data );
85 - }
86 -
87 - /**
88 - * Save the form
89 - *
90 - * @return void
91 - */
92 - public function save_form() {
93 - $post_data = wp_unslash( $_POST );
94 - if ( isset( $post_data['form_data'] ) ) {
95 - parse_str( sanitize_text_field( wp_unslash( $post_data['form_data'] ) ), $form_data );
96 - }
97 -
98 - if ( !wp_verify_nonce( $form_data['wpuf_form_builder_nonce'], 'wpuf_form_builder_save_form' ) ) {
99 - wp_send_json_error( __( 'Unauthorized operation', 'weforms' ) );
100 - }
101 -
102 - if ( empty( $form_data['wpuf_form_id'] ) ) {
103 - wp_send_json_error( __( 'Invalid form id', 'weforms' ) );
104 - }
105 -
106 - $form_fields = isset( $post_data['form_fields'] ) ? $post_data['form_fields'] : '';
107 - $notifications = isset( $post_data['notifications'] ) ? $post_data['notifications']: '';
108 - $settings = array();
109 - $integrations = array();
110 -
111 - if ( isset( $post_data['settings'] ) ) {
112 - $settings = json_decode( $post_data['settings'], true );
113 - $settings['message'] = sanitize_text_field( $settings['message'] );
114 - $settings['url'] = sanitize_url( $settings['url'] );
115 - $settings['limit_message'] = sanitize_text_field( $settings['limit_message'] );
116 - } else {
117 - $settings = isset( $form_data['wpuf_settings'] ) ? $form_data['wpuf_settings'] : [];
118 - }
119 -
120 - if ( isset( $post_data['integrations'] ) ) {
121 - $integrations = (array) json_decode( $post_data['integrations'] );
122 - }
123 -
124 - $form_fields = json_decode( $form_fields, true );
125 - $notifications = json_decode( $notifications, true );
126 - $data = [
127 - 'form_id' => absint( $form_data['wpuf_form_id'] ),
128 - 'post_title' => $form_data['post_title'],
129 - 'form_fields' => $form_fields,
130 - 'form_settings' => $settings,
131 - 'form_settings_key' => isset( $form_data['form_settings_key'] ) ? $form_data['form_settings_key'] : '',
132 - 'notifications' => $notifications,
133 - 'integrations' => $integrations,
134 - ];
135 -
136 - $form_fields = weforms()->form->save( $data );
137 -
138 - // Update Old Entry meta_key if changed
139 - $form_id = $form_data['wpuf_form_id'];
140 - $form = weforms()->form->get( $form_id );
141 -
142 - $form->maybe_update_entries( $form_fields );
143 -
144 - do_action( 'weforms_update_form', $form_data['wpuf_form_id'], $form_fields, $settings );
145 -
146 - wp_send_json_success(
147 - array(
148 - 'form_fields' => $form_fields,
149 - 'settings' => $settings,
150 - )
151 - );
152 - }
153 -
154 - /**
155 - * Get all contact forms
156 - *
157 - * @return void
158 - */
159 - public function get_contact_forms() {
160 - check_ajax_referer( 'weforms' );
161 -
162 - $this->check_admin();
163 -
164 - $args = [
165 - 'posts_per_page' => isset( $_POST['posts_per_page'] ) ? intval( $_POST['posts_per_page'] ) : 10,
166 - 'paged' => isset( $_POST['page'] ) ? absint( $_POST['page'] ) : 1,
167 - 'order' => 'DESC',
168 - 'orderby' => 'post_date',
169 - ];
170 -
171 - $args = apply_filters( 'weforms_ajax_get_contact_forms_args', $args );
172 -
173 - $contact_forms = weforms()->form->get_forms( $args );
174 -
175 - array_map(
176 - function ( $form ) {
177 - $form->entries = $form->num_form_entries();
178 - $form->settings = $form->get_settings();
179 - $form->views = $form->num_form_views();
180 - $form->payments = $form->num_form_payments();
181 - $form->author = $form->get_form_author_details();
182 - }, $contact_forms['forms']
183 - );
184 -
185 - $contact_forms = $this->filter_contact_forms( $contact_forms );
186 - $contact_forms = apply_filters( 'weforms_ajax_get_contact_forms', $contact_forms );
187 -
188 - wp_send_json_success( $contact_forms );
189 - }
190 -
191 - /**
192 - * Get all users
193 - *
194 - * @return array
195 - */
196 - public function get_all_users() {
197 - check_ajax_referer( 'weforms' );
198 -
199 - $this->check_admin();
200 -
201 - $users_meta = [];
202 - $users = get_users( [ 'fields' => [ 'ID' ] ] );
203 -
204 - foreach ( $users as $user ) {
205 - $users_meta[] = [
206 - 'id' => $user->ID,
207 - 'data' => get_user_meta( $user->ID ),
208 - ];
209 - }
210 -
211 - wp_send_json_success( $users_meta );
212 - }
213 -
214 - /**
215 - * Filter
216 - *
217 - * @return void
218 - */
219 - public function filter_contact_forms( &$contact_forms ) {
220 - if ( isset( $_REQUEST['filter'] ) && $_REQUEST['filter'] == 'entries' ) {
221 - foreach ( $contact_forms['forms'] as $key => &$form ) {
222 - if ( isset( $form->entries ) && !$form->entries ) {
223 - unset( $contact_forms['forms'][ $key ] );
224 - }
225 - }
226 -
227 - $contact_forms['meta']['total'] = count( $contact_forms['forms'] );
228 - }
229 -
230 - return $contact_forms;
231 - }
232 -
233 - /**
234 - * Get the names of contact forms for generating dropdown
235 - *
236 - * @return void
237 - */
238 - public function get_contact_form_names() {
239 - check_ajax_referer( 'weforms' );
240 -
241 - $this->check_admin();
242 -
243 - $contact_forms = weforms()->form->all();
244 - $response = [];
245 -
246 - foreach ( $contact_forms['forms'] as $form ) {
247 - $response[] = [
248 - 'id' => $form->get_id(),
249 - 'title' => $form->get_name() . ' (#' . $form->get_id() . ')',
250 - ];
251 - }
252 -
253 - wp_send_json_success( $response );
254 - }
255 -
256 - /**
257 - * Create a form
258 - *
259 - * @return void
260 - */
261 - public function create_form() {
262 - check_ajax_referer( 'weforms' );
263 -
264 - $this->check_admin();
265 -
266 - $form_name = isset( $_POST['form_name'] ) ? sanitize_text_field( wp_unslash( $_POST['form_name'] ) ) : '';
267 -
268 - if ( empty( $form_name ) ) {
269 - wp_send_json_error( __( 'Please provide a form name', 'weforms' ) );
270 - }
271 -
272 - $form_id = weforms()->form->create( $form_name );
273 -
274 - if ( is_wp_error( $form_id ) ) {
275 - wp_send_json_error( $form_id->get_error_message() );
276 - }
277 -
278 - wp_send_json_success( [
279 - 'form_id' => $form_id,
280 - 'form_name' => $form_name,
281 - ] );
282 - }
283 -
284 - /**
285 - * Delete a form
286 - *
287 - * @return void
288 - */
289 - public function delete_form() {
290 - check_ajax_referer( 'weforms' );
291 -
292 - $this->check_admin();
293 -
294 - $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
295 -
296 - if ( !$form_id ) {
297 - wp_send_json_error( __( 'No form id provided!', 'weforms' ) );
298 - }
299 -
300 - weforms()->form->delete( $form_id );
301 -
302 - wp_send_json_success();
303 - }
304 -
305 - public function delete_form_bulk() {
306 - check_ajax_referer( 'weforms' );
307 -
308 - $this->check_admin();
309 -
310 - $form_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : [];
311 -
312 - if ( !$form_ids ) {
313 - wp_send_json_error( __( 'No form ids provided!', 'weforms' ) );
314 - }
315 -
316 - foreach ( $form_ids as $form_id ) {
317 - weforms()->form->delete( $form_id );
318 - }
319 -
320 - wp_send_json_success();
321 - }
322 -
323 - /**
324 - * Duplicate a form
325 - *
326 - * @return voiud
327 - */
328 - public function duplicate_form() {
329 - check_ajax_referer( 'weforms' );
330 -
331 - $this->check_admin();
332 -
333 - $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
334 -
335 - $form = weforms()->form->duplicate( $form_id );
336 - $form->settings = $form->get_settings();
337 -
338 - wp_send_json_success( $form );
339 - }
340 -
341 - /**
342 - * Create form from a template
343 - *
344 - * @return void
345 - */
346 - public function create_form_from_template() {
347 - check_ajax_referer( 'weforms' );
348 -
349 - $template = isset( $_REQUEST['template'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['template'] ) ) : '';
350 -
351 - $form_id = weforms()->templates->create( $template );
352 -
353 - if ( is_wp_error( $form_id ) ) {
354 - wp_send_json_error( __( 'Could not create the form', 'weforms' ) );
355 - }
356 -
357 - wp_send_json_success( [
358 - 'id' => $form_id,
359 - ] );
360 - }
361 -
362 - /**
363 - * Save the weForms settings
364 - *
365 - * @return void
366 - */
367 - public function save_settings() {
368 - check_ajax_referer( 'weforms' );
369 - $this->check_admin();
370 -
371 - $requires_wpuf_update = false;
372 - $wpuf_update_array = array();
373 - $settings = isset( $_POST['settings'] ) ? (array) json_decode( wp_unslash( $_POST['settings'] ) ) : [];
374 - update_option( 'weforms_settings', $settings );
375 -
376 - // wpuf settings sync
377 - if ( isset( $settings['gmap_api'] ) ) {
378 - $requires_wpuf_update = true;
379 - $wpuf_update_array['gmap_api_key'] = $settings['gmap_api'];
380 - }
381 -
382 - if ( isset( $settings['recaptcha'] ) ) {
383 - $requires_wpuf_update = true;
384 - $wpuf_update_array['recaptcha_public'] = $settings['recaptcha']->key;
385 - $wpuf_update_array['recaptcha_private'] = $settings['recaptcha']->secret;
386 - $wpuf_update_array['recaptcha_type'] = $settings['recaptcha']->type;
387 - }
388 -
389 - if ( isset( $settings['no_conflict'] ) ) {
390 - $requires_wpuf_update = true;
391 - $wpuf_update_array['no_conflict'] = $settings['no_conflict'];
392 - }
393 -
394 - if ( isset( $settings['email_footer'] ) ) {
395 - $requires_wpuf_update = true;
396 - $wpuf_update_array['email_footer'] = $settings['email_footer'];
397 - }
398 -
399 - if ( $requires_wpuf_update ) {
400 - $wpuf_settings = get_option( 'wpuf_general', [] );
401 -
402 - $wpuf_settings = array_merge( $wpuf_settings, $wpuf_update_array );
403 - update_option( 'wpuf_general', $wpuf_settings );
404 - }
405 -
406 - do_action( 'weforms_save_settings', $settings );
407 -
408 - $settings = apply_filters( 'weforms_after_save_settings', $settings );
409 - wp_send_json_success( $settings );
410 - }
411 -
412 - /**
413 - * Get the weForms Settings
414 - *
415 - * @return void
416 - */
417 - public function get_settings() {
418 - check_ajax_referer( 'weforms' );
419 -
420 - $this->check_admin();
421 -
422 - $settings = weforms_get_settings();
423 - // checking to prevent js error, will be removed in future
424 - if ( !isset( $settings['credit'] ) ) {
425 - $settings['credit'] = false;
426 - }
427 -
428 - if ( !isset( $settings['permission'] ) ) {
429 - $settings['permission'] = 'manage_options';
430 - }
431 -
432 - wp_send_json_success( $settings );
433 - }
434 -
435 - /**
436 - * Get all entries
437 - *
438 - * @return void
439 - */
440 - public function get_entries() {
441 - check_ajax_referer( 'weforms' );
442 -
443 - $this->check_admin();
444 -
445 - $form_id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
446 - $current_page = isset( $_REQUEST['page'] ) ? intval( $_REQUEST['page'] ) : 1;
447 - $status = isset( $_REQUEST['status'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['status'] ) ) : 'publish';
448 - $per_page = 20;
449 - $offset = ( $current_page - 1 ) * $per_page;
450 -
451 - if ( !$form_id ) {
452 - wp_send_json_error( __( 'No form id provided!', 'weforms' ) );
453 - }
454 -
455 - $entries = weforms_get_form_entries(
456 - $form_id, [
457 - 'number' => $per_page,
458 - 'offset' => $offset,
459 - 'status' => $status,
460 - ]
461 - );
462 -
463 - $columns = weforms_get_entry_columns( $form_id );
464 - $total_entries = weforms_count_form_entries( $form_id, $status );
465 -
466 - array_map(
467 - function ( $entry ) use ( $columns ) {
468 - $entry_id = $entry->id;
469 - $entry->fields = [];
470 -
471 - foreach ( $columns as $meta_key => $label ) {
472 - if ( empty( $meta_key ) ) {
473 - continue;
474 - }
475 - $value = weforms_get_entry_meta( $entry_id, $meta_key, true );
476 - $entry->fields[ $meta_key ] = str_replace( WeForms::$field_separator, ' ', $value );
477 - }
478 - }, $entries
479 - );
480 -
481 - $entries = apply_filters( 'weforms_get_entries', $entries, $form_id );
482 -
483 - $response = [
484 - 'columns' => $columns,
485 - 'entries' => $entries,
486 - 'form_title' => get_post_field( 'post_title', $form_id ),
487 - 'pagination' => [
488 - 'total' => $total_entries,
489 - 'per_page' => $per_page,
490 - 'pages' => ceil( $total_entries / $per_page ),
491 - 'current' => $current_page,
492 - ],
493 - 'meta' => [
494 - 'total' => weforms_count_form_entries( $form_id ),
495 - 'totalTrash' => weforms_count_form_entries( $form_id, 'trash' ),
496 - ],
497 - ];
498 -
499 - wp_send_json_success( $response );
500 - }
501 -
502 - /**
503 - * Get an entry details
504 - *
505 - * @return void
506 - */
507 - public function get_entry_detail() {
508 - check_ajax_referer( 'weforms' );
509 -
510 - $this->check_admin();
511 -
512 - $form_id = isset( $_REQUEST['form_id'] ) ? intval( $_REQUEST['form_id'] ) : 0;
513 - $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
514 -
515 - $form = weforms()->form->get( $form_id );
516 - $form_settings = $form->get_settings();
517 - $entry = $form->entries()->get( $entry_id );
518 - $fields = $entry->get_fields();
519 - $metadata = $entry->get_metadata();
520 - $payment = $entry->get_payment_data();
521 -
522 - if ( isset( $payment->payment_data ) && is_serialized( $payment->payment_data ) ) {
523 - // Security fix: Prevent PHP Object Injection by restricting allowed classes
524 - $payment->payment_data = @unserialize( $payment->payment_data, [ 'allowed_classes' => false ] );
525 - }
526 -
527 - if ( false === $fields ) {
528 - wp_send_json_error( __( 'No form fields found!', 'weforms' ) );
529 - }
530 -
531 - if ( sizeof( $fields ) < 1 ) {
532 - $fields[] = [
533 - 'label' => __( 'No form fields found!', 'weforms' ),
534 - ];
535 - }
536 -
537 - $has_empty = false;
538 - $answers = [];
539 - $respondentPoints = isset( $form_settings['total_points'] ) ? floatval( $form_settings['total_points'] ) : 0;
540 - $fields_formatted = array();
541 - foreach ( $fields as $key => $field ) {
542 - if ( $form_settings['quiz_form'] == 'yes' ) {
543 - $selectedAnswers = isset( $field['selected_answers'] ) ? $field['selected_answers'] : '';
544 - $givenAnswer = isset( $field['value'] ) ? $field['value'] : '';
545 - $options = isset( $field['options'] ) ? $field['options'] : '';
546 - $template = $field['template'];
547 - $fieldPoints = isset( $field['points'] ) ? floatval( $field['points'] ) : 0;
548 -
549 - if ( $template == 'radio_field' || $template == 'dropdown_field' ) {
550 - $answers[$field['name']] = true;
551 - if ( empty( $givenAnswer ) ) {
552 - $answers[$field['name']] = false;
553 - $respondentPoints -= $fieldPoints;
554 - } else {
555 - foreach ( $options as $key => $value ) {
556 - if ( $givenAnswer == $value ) {
557 - if ( $key != $selectedAnswers ) {
558 - $answers[$field['name']] = false;
559 - $respondentPoints -= $fieldPoints;
560 - }
561 - }
562 - }
563 - }
564 - } elseif ( $template == 'checkbox_field' || $template == 'multiple_select' ) {
565 - $answers[$field['name']] = true;
566 - $userAnswer = [];
567 -
568 - foreach ( $options as $key => $value ) {
569 - foreach ( $givenAnswer as $answer ) {
570 - if ( $value == $answer ) {
571 - $userAnswer[] = $key;
572 - }
573 - }
574 - }
575 -
576 - $userAnswer = implode( '|', $userAnswer );
577 - $rightAnswers = implode( '|', $selectedAnswers );
578 -
579 - if ( $userAnswer != $rightAnswers || empty( $userAnswer ) ) {
580 - $answers[$field['name']] = false;
581 - $respondentPoints -= $fieldPoints;
582 - }
583 - }
584 - } elseif ( empty( $field['value'] ) ) {
585 - $has_empty = true;
586 - continue;
587 - } else {
588 - $field = WeForms_Form_Entry_Manager::format_entry_value( $field );
589 - array_push( $fields_formatted, $field );
590 - }
591 - }
592 - $response = [
593 - 'form_fields' => $fields_formatted,
594 - 'form_settings' => $form_settings,
595 - 'meta_data' => $metadata,
596 - 'payment_data' => $payment,
597 - 'has_empty' => $has_empty,
598 - 'respondent_points' => $respondentPoints,
599 - 'answers' => $answers,
600 - ];
601 -
602 -
603 - wp_send_json_success( $response );
604 - }
605 -
606 - /**
607 - * Trash an entry
608 - *
609 - * @return void
610 - */
611 - public function trash_entry() {
612 - check_ajax_referer( 'weforms' );
613 -
614 - $this->check_admin();
615 -
616 - $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
617 -
618 - weforms_change_entry_status( $entry_id, 'trash' );
619 - wp_send_json_success();
620 - }
621 -
622 - /**
623 - * Trash an entry
624 - *
625 - * @return void
626 - */
627 - public function delete_entry() {
628 - check_ajax_referer( 'weforms' );
629 -
630 - $this->check_admin();
631 -
632 - $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
633 -
634 - weforms_delete_entry( $entry_id );
635 -
636 - wp_send_json_success();
637 - }
638 -
639 - /**
640 - * Restore Entry
641 - *
642 - * @return void
643 - */
644 - public function restore_entry() {
645 - check_ajax_referer( 'weforms' );
646 -
647 - $this->check_admin();
648 -
649 - $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
650 -
651 - weforms_change_entry_status( $entry_id, 'publish' );
652 - wp_send_json_success();
653 - }
654 -
655 - /**
656 - * Bulk trash entries
657 - *
658 - * @return void
659 - */
660 - public function bulk_delete_entry() {
661 - check_ajax_referer( 'weforms' );
662 -
663 - $this->check_admin();
664 -
665 - $entry_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : array();
666 - $permanent = isset( $_POST['permanent'] ) && ( sanitize_text_field( wp_unslash ( $_POST['permanent'] ) ) ) ? true : false;
667 -
668 - if ( !$entry_ids ) {
669 - wp_send_json_error( __( 'No entry ids provided!', 'weforms' ) );
670 - }
671 -
672 - foreach ( $entry_ids as $entry_id ) {
673 - if ( $permanent ) {
674 - weforms_delete_entry( $entry_id );
675 - } else {
676 - weforms_change_entry_status( $entry_id, 'trash' );
677 - }
678 - }
679 -
680 - wp_send_json_success();
681 - }
682 -
683 - /**
684 - * Bulk trash entries
685 - *
686 - * @return void
687 - */
688 - public function bulk_restore_entry() {
689 - check_ajax_referer( 'weforms' );
690 -
691 - $this->check_admin();
692 -
693 - $entry_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : [];
694 -
695 - if ( !$entry_ids ) {
696 - wp_send_json_error( __( 'No entry ids provided!', 'weforms' ) );
697 - }
698 -
699 - foreach ( $entry_ids as $entry_id ) {
700 - weforms_change_entry_status( $entry_id, 'publish' );
701 - }
702 -
703 - wp_send_json_success();
704 - }
705 -
706 - /**
707 - * Handle the frontend submission
708 - *
709 - * @return void
710 - */
711 - public function handle_frontend_submission() {
712 - check_ajax_referer( 'wpuf_form_add' );
713 - $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
714 - $page_id = isset( $_POST['page_id'] ) ? intval( $_POST['page_id'] ) : 0;
715 - $form = weforms()->form->get( $form_id );
716 -
717 - /**
718 - * Check if form submission is open. This resolves broken access control with unauthenticated users.
719 - * Access is now checked on frontend form rendering and submission.
720 - */
721 - $form_submission_status = $form->is_submission_open();
722 - if ( is_wp_error( $form_submission_status ) ) {
723 - wp_send_json( [
724 - 'success' => false,
725 - 'error' => __( 'Login Required for submission.', 'weforms' ),
726 - ] );
727 - }
728 -
729 - $form_settings = $form->get_settings();
730 - $form_fields = $form->get_fields();
731 - $entry_fields = $form->prepare_entries();
732 - $form_entries = weforms_get_form_entries( $form_id, [ 'number' => '', 'offset' => '' ] );
733 -
734 - if ( $form_fields && count( $form_entries ) && count( $entry_fields ) ) {
735 - foreach ( $entry_fields as $field_key => $field_value ) {
736 - $duplicate_check = false;
737 - $field_label = 'This';
738 -
739 - foreach ( $form_fields as $form_field ) {
740 - if ( in_array( $form_field['template'], [ 'text_field', 'website_url', 'numeric_text_field', 'email_address' ] ) && $form_field['name'] == $field_key && isset( $form_field['duplicate'] ) && 'no' == $form_field['duplicate'] ) {
741 - $duplicate_check = true;
742 - $field_label = $form_field['label'];
743 - }
744 - }
745 -
746 - if ( $duplicate_check ) {
747 - foreach ( $form_entries as $entry ) {
748 - $existing = weforms_get_entry_meta( $entry->id, $field_key, true );
749 -
750 - if ( $existing && $field_value == $existing ) {
751 - wp_send_json( [
752 - 'success' => false,
753 - 'error' => sprintf( __( '"%s" field requires a unique entry and "%s" has already been used.', 'weforms' ), $field_label, $field_value ),
754 - ] );
755 - }
756 - }
757 - }
758 - }
759 - }
760 -
761 - if ( !$form_fields ) {
762 - wp_send_json( [
763 - 'success' => false,
764 - 'error' => __( 'No form field was found.', 'weforms' ),
765 - ] );
766 - }
767 -
768 - if ( $form->has_field( 'recaptcha' ) ) {
769 - $settings = weforms_get_settings( 'recaptcha' );
770 - $type = isset( $settings->type ) ? $settings->type : '';
771 - $secret = isset( $settings->secret ) ? $settings->secret : '';
772 - if( $type == 'v3' ) {
773 - $this->validate_reCaptchav3( $secret );
774 - } else {
775 - $this->validate_reCaptcha();
776 - }
777 - }
778 -
779 - // vaidate submission
780 - $this->validate_submission( $entry_fields, $form, $form_settings, $form_fields );
781 -
782 - $entry_fields = apply_filters( 'weforms_before_entry_submission', $entry_fields, $form, $form_settings, $form_fields );
783 -
784 - //check for entry_fields for a return error
785 - if ( is_wp_error( $entry_fields ) ) {
786 - wp_send_json( [
787 - 'success' => false,
788 - 'error' => $entry_fields->get_error_message(),
789 - ] );
790 - } else {
791 - $entry_id = 1;
792 - $global_settings = weforms_get_settings();
793 - if ( empty( $form_settings['after_submission'] ) ) {
794 - $entry_id = weforms_insert_entry( [
795 - 'form_id' => $form_id,
796 - ], $entry_fields );
797 - if ( is_wp_error( $entry_id ) ) {
798 - wp_send_json( [
799 - 'success' => false,
800 - 'error' => $entry_id->get_error_message(),
801 - ] );
802 - }
803 - // Fire a hook for integration
804 - do_action( 'weforms_entry_submission', $entry_id, $form_id, $page_id, $form_settings );
805 - $notification = new WeForms_Notification( [
806 - 'form_id' => $form_id,
807 - 'page_id' => $page_id,
808 - 'entry_id' => $entry_id,
809 - ] );
810 - $notification->send_notifications();
811 - }
812 - }
813 - // redirect URL
814 - $show_message = false;
815 - $redirect_to = false;
816 - if ( $form_settings['redirect_to'] == 'page' ) {
817 - $redirect_to = get_permalink( $form_settings['page_id'] );
818 - } elseif ( $form_settings['redirect_to'] == 'url' ) {
819 - $redirect_to = $form_settings['url'];
820 - } elseif ( $form_settings['redirect_to'] == 'same' ) {
821 - $show_message = true;
822 - } else {
823 - $show_message = true;
824 - }
825 - $field_search = $field_replace = [];
826 - foreach ( $form_fields as $r_field ) {
827 - $field_search[] = '{' . $r_field['name'] . '}';
828 - if ( $r_field['template'] == 'name_field' ) {
829 - $field_replace[] = implode( ' ', explode( '|', $entry_fields[ $r_field['name'] ] ) );
830 - } else if ( $r_field['template'] == 'address_field' ) {
831 - $field_replace[] = implode( ', ', $entry_fields[ $r_field['name'] ] );
832 - } else {
833 - $field_replace[] = isset( $entry_fields[ $r_field['name'] ] ) ? $entry_fields[ $r_field['name'] ] : '';
834 - }
835 - }
836 - $message = str_replace( $field_search, $field_replace, $form_settings['message'] );
837 - // send the response
838 - $response = apply_filters( 'weforms_entry_submission_response', [
839 - 'success' => true,
840 - 'redirect_to' => $redirect_to,
841 - 'show_message' => $show_message,
842 - 'message' => $message,
843 - 'data' => $_POST,
844 - 'form_id' => $form_id,
845 - 'entry_id' => $entry_id,
846 - 'entry_fields' =>$entry_fields,
847 - ] );
848 -
849 - weforms_clear_buffer();
850 - wp_send_json( $response );
851 - }
852 -
853 - function validate_reCaptchav3( $secret ) {
854 - check_ajax_referer( 'wpuf_form_add' );
855 -
856 - $post_data = wp_unslash($_POST);
857 - $token = $post_data['g-recaptcha-response'];
858 - $action = $post_data['g-action'];
859 - $google_captcha_url = esc_url( 'https://www.google.com/recaptcha/api/siteverify' );
860 -
861 - $response = wp_remote_post( $google_captcha_url,
862 - array(
863 - 'method' => 'POST',
864 - 'body' => array(
865 - 'secret' => $secret,
866 - 'response' => $token
867 - )
868 - )
869 - );
870 -
871 -
872 - if ( is_wp_error( $response ) ) {
873 - wp_send_json( [
874 - 'success' => false,
875 - 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
876 - ] );
877 - } else {
878 - $api_response = json_decode( wp_remote_retrieve_body( $response ), true );
879 - if( $api_response["success"] == '1' && $api_response["action"] == $action ) {
880 - return true;
881 - } else {
882 - wp_send_json( [
883 - 'success' => false,
884 - 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
885 - ] );
886 - }
887 - }
888 - }
889 - /**
890 - * reCaptcha Validation
891 - *
892 - * @return void
893 - */
894 - function validate_reCaptcha() {
895 - check_ajax_referer( 'wpuf_form_add' );
896 - if ( class_exists( 'WPUF_ReCaptcha' ) ) {
897 - $recaptcha_class = 'WPUF_ReCaptcha';
898 - } else {
899 - if ( !function_exists( 'recaptcha_get_html' ) ) {
900 - require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib.php';
901 - }
902 -
903 - require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib_noCaptcha.php';
904 - $recaptcha_class = 'Weforms_ReCaptcha';
905 - }
906 -
907 - $invisible = isset( $_POST['g-recaptcha-response'] ) ? false : true;
908 -
909 - $recaptcha_settings = weforms_get_settings( 'recaptcha' );
910 - $secret = isset( $recaptcha_settings->secret ) ? $recaptcha_settings->secret : '';
911 -
912 - if ( ! $invisible ) {
913 - $response = null;
914 - $reCaptcha = new $recaptcha_class( $secret );
915 - $remote_ADDR = isset( $_SERVER['REMOTE_ADDR'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ) ) : '';
916 - $recaptcha_response = isset( $_POST['g-recaptcha-response'] ) ? sanitize_text_field( wp_unslash( $_POST['g-recaptcha-response'] ) ) : '';
917 - $resp = $reCaptcha->verifyResponse(
918 - $remote_ADDR,
919 - $recaptcha_response
920 - );
921 -
922 - if ( !$resp->success ) {
923 - wp_send_json( [
924 - 'success' => false,
925 - 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
926 - ] );
927 - }
928 -
929 - } else {
930 -
931 - $recap_challenge = isset( $_POST['recaptcha_challenge_field'] ) ? sanitize_text_field( wp_unslash( $_POST['recaptcha_challenge_field'] ) ) : '';
932 - $recap_response = isset( $_POST['recaptcha_response_field'] ) ? sanitize_text_field( wp_unslash( $_POST['recaptcha_response_field'] ) ) : '';
933 - $resp = recaptcha_check_answer( $secret, $remote_ADDR, $recap_challenge, $recap_response );
934 -
935 - if ( !$resp->is_valid ) {
936 - ob_clean();
937 -
938 - wp_send_json( [
939 - 'success' => false,
940 - 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
941 - ] );
942 - }
943 - }
944 - }
945 -
946 - /**
947 - * Validate submission
948 - *
949 - * @param array $entry_fields
950 - * @param object $form
951 - * @param array $form_settings
952 - * @param array $form_fields
953 - *
954 - * @return bool|json
955 - */
956 - public function validate_submission( $entry_fields, $form, $form_settings, $form_fields ) {
957 - foreach ( $form_fields as $key => $field ) {
958 -
959 - //skip custom html field as it is not saved
960 - if ( 'custom_html' == $field['name'] ) {
961 - continue;
962 - }
963 -
964 - //skip recaptcha field as it is not saved
965 - if ( 'recaptcha' == $field['name'] ) {
966 - continue;
967 - }
968 -
969 - $value = $entry_fields[ $field['name'] ];
970 -
971 - if ( 'single_product' === $field['template'] ) {
972 - if ( !$value ) {
973 - $value = [];
974 - }
975 -
976 - $value['price'] = isset( $value['price'] ) ? floatval( $value['price'] ) : 0;
977 - $value['quantity'] = isset( $value['quantity'] ) ? floatval( $value['quantity'] ) : 0;
978 - $quantity = isset( $field['quantity'] ) ? $field['quantity'] : [];
979 - $price = isset( $field['price'] ) ? $field['price'] : [];
980 -
981 - if ( isset( $price['is_flexible'] ) && $price['is_flexible'] ) {
982 - $min = isset( $price['min'] ) ? floatval( $price['min'] ) : 0;
983 - $max = isset( $price['max'] ) ? floatval( $price['max'] ) : 0;
984 -
985 - if ( $value['price'] < $min ) {
986 - wp_send_json( [
987 - 'success' => false,
988 - 'error' => __( sprintf(
989 - '%s price must be equal or greater than %s',
990 - $field['weforms'],
991 - $min ),
992 - 'weforms' ),
993 - ] );
994 - }
995 -
996 - if ( $max && $value['price'] > $max ) {
997 - wp_send_json( [
998 - 'success' => false,
999 - 'error' => __( sprintf(
1000 - '%s price must be equal or less than %s',
1001 - $field['weforms'],
1002 - $max ),
1003 - 'weforms' ),
1004 - ] );
1005 - }
1006 - }
1007 -
1008 - if ( isset( $quantity['status'] ) && $quantity['status'] ) {
1009 - $min = isset( $quantity['min'] ) ? floatval( $quantity['min'] ) : 0;
1010 - $max = isset( $quantity['max'] ) ? floatval( $quantity['max'] ) : 0;
1011 -
1012 - if ( $value['quantity'] < $min ) {
1013 - wp_send_json( [
1014 - 'success' => false,
1015 - 'error' => __( sprintf(
1016 - '%s quantity must be equal or greater than %s',
1017 - $field['weforms'],
1018 - $min ),
1019 - 'weforms' ),
1020 - ] );
1021 - }
1022 -
1023 - if ( $max && $value['quantity'] > $max ) {
1024 - wp_send_json( [
1025 - 'success' => false,
1026 - 'error' => __( sprintf(
1027 - '%s quantity must be equal or less than %s',
1028 - $field['weforms'],
1029 - $max ),
1030 - 'weforms' ),
1031 - ] );
1032 - }
1033 - }
1034 - }
1035 - }
1036 - }
1037 -
1038 - public static function prepare_meta_fields( $meta_vars ) {
1039 - check_ajax_referer( 'wpuf_form_add' );
1040 - // loop through custom fields
1041 - // skip files, put in a key => value paired array for later executation
1042 - // process repeatable fields separately
1043 - // if the input is array type, implode with separator in a field
1044 - $files = [];
1045 - $meta_key_value = [];
1046 - $multi_repeated = []; // multi repeated fields will in sotre duplicated meta key
1047 -
1048 - foreach ( $meta_vars as $key => $value ) {
1049 - switch ( $value['template'] ) {
1050 -
1051 - // put files in a separate array, we'll process it later
1052 - case 'file_upload':
1053 - case 'image_upload':
1054 - $files[] = [
1055 - 'name' => $value['name'],
1056 - 'value' => isset( $_POST['wpuf_files'][ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST['wpuf_files'][ $value['name'] ] ) ) : array(),
1057 - 'count' => $value['count']
1058 - ];
1059 - break;
1060 -
1061 - case 'repeat_field':
1062 - // if it is a multi column repeat field
1063 - if ( isset( $value['multiple'] ) && $value['multiple'] == 'true' ) {
1064 -
1065 - // if there's any items in the array, process it
1066 - if ( isset( $_POST[ $value['name'] ] ) ) {
1067 - $ref_arr = [];
1068 - $cols = count( $value['columns'] );
1069 - $first = array_shift( array_values( sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) ) ); // first element
1070 - $rows = count( $first );
1071 -
1072 - // loop through columns
1073 - for ( $i = 0; $i < $rows; $i++ ) {
1074 -
1075 - // loop through the rows and store in a temp array
1076 - $temp = [];
1077 - for ( $j = 0; $j < $cols; $j++ ) {
1078 - $temp[] = isset( $_POST[ $value['name'] ][ $j ][ $i ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ][ $j ][ $i ] ) ) : '';
1079 - }
1080 -
1081 - // store all fields in a row with WeForms::$field_separator separated
1082 - $ref_arr[] = implode( WeForms::$field_separator, $temp );
1083 - }
1084 -
1085 - // now, if we found anything in $ref_arr, store to $multi_repeated
1086 - if ( $ref_arr ) {
1087 - $multi_repeated[ $value['name'] ] = array_slice( $ref_arr, 0, $rows );
1088 - }
1089 - }
1090 - } else {
1091 - $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) );
1092 - }
1093 -
1094 - break;
1095 -
1096 - case 'address_field':
1097 - if ( isset( $_POST[ $value['name'] ] ) && is_array( $_POST[ $value['name'] ] ) ) {
1098 - $post_value = sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) );
1099 - foreach ( $post_value as $address_field => $field_value ) {
1100 - $meta_key_value[ $value['name'] ][ $address_field ] = sanitize_text_field( $field_value );
1101 - }
1102 - }
1103 -
1104 - break;
1105 -
1106 - case 'text_field':
1107 - case 'email_address':
1108 - case 'numeric_text_field':
1109 - case 'date_field':
1110 - $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : '';
1111 -
1112 - break;
1113 -
1114 - case 'textarea_field':
1115 - $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : '';
1116 -
1117 - break;
1118 -
1119 - case 'dropdown_field':
1120 - case 'radio_field':
1121 - $val = sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) );
1122 - $meta_key_value[ $value['name'] ] = isset( $value['options'][ $val ] ) ? $value['options'][ $val ] : '';
1123 - break;
1124 -
1125 - case 'multiple_select':
1126 - case 'checkbox_field':
1127 - $val = ( is_array( $_POST[ $value['name'] ] ) && sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : array();
1128 - $meta_key_value[ $value['name'] ] = $val;
1129 -
1130 - if ( $val ) {
1131 - $new_val = [];
1132 -
1133 - foreach ( $val as $option_key ) {
1134 - $new_val[] = isset( $value['options'][ $option_key ] ) ? $value['options'][ $option_key ] : '';
1135 - }
1136 -
1137 - $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, $new_val );
1138 - }
1139 - break;
1140 -
1141 - default:
1142 - // if it's an array, implode with this->separator
1143 - if ( is_array( $_POST[ $value['name'] ] ) ) {
1144 - $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) );
1145 - } else {
1146 - $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ): '';
1147 - }
1148 -
1149 - break;
1150 - }
1151 - } //end foreach
1152 -
1153 - return [ $meta_key_value, $multi_repeated, $files ];
1154 - }
1155 -
1156 - /**
1157 - * Import a form from a JSON file
1158 - *
1159 - * @return void
1160 - */
1161 - public function import_form() {
1162 - check_ajax_referer( 'weforms' );
1163 -
1164 - $this->check_admin();
1165 -
1166 - $the_file = isset( $_FILES['importFile'] ) ? $_FILES['importFile'] : false;
1167 -
1168 - if ( !$the_file ) {
1169 - wp_send_json_error( __( 'No file found to import.', 'weforms' ) );
1170 - }
1171 -
1172 - $file_ext = pathinfo( $the_file['name'], PATHINFO_EXTENSION );
1173 -
1174 - if ( !class_exists( 'WeForms_Admin_Tools' ) ) {
1175 - require_once __DIR__ . '/admin/class-admin-tools.php';
1176 - }
1177 -
1178 - if ( ( $file_ext == 'json' ) && ( $the_file['size'] < 500000 ) ) {
1179 - $status = WeForms_Admin_Tools::import_json_file( $the_file['tmp_name'] );
1180 -
1181 - if ( $status ) {
1182 - wp_send_json_success( __( 'The forms have been imported successfully!', 'weforms' ) );
1183 - } else {
1184 - wp_send_json_error( __( 'Something went wrong importing the file.', 'weforms' ) );
1185 - }
1186 - } else {
1187 - wp_send_json_error( __( 'Invalid file or file size too big.', 'weforms' ) );
1188 - }
1189 - }
1190 -
1191 - /**
1192 - * Read Log file
1193 - *
1194 - * @return json
1195 - **/
1196 - public function get_logs() {
1197 - check_ajax_referer( 'weforms' );
1198 -
1199 - $this->check_admin();
1200 -
1201 - $file = weforms_log_file_path();
1202 -
1203 - if ( !file_exists( $file ) ) {
1204 - return;
1205 - }
1206 -
1207 - $data = file_get_contents( $file );
1208 - $data = explode( "\n", $data );
1209 - $data = array_reverse( $data );
1210 - $data = array_filter( $data );
1211 -
1212 - if ( empty( $data ) ) {
1213 - return;
1214 - }
1215 -
1216 - $logs = [];
1217 -
1218 - foreach ( $data as $key => $row ) {
1219 - preg_match( '/\[(?<time>.+?)\]\[(?<type>.+?)\](?<message>.+)/im', $row, $log );
1220 -
1221 - if ( empty( $log['message'] ) ) {
1222 - $log = [];
1223 - $log['message'] = !empty( $log['message'] ) ? $log['message'] : $row;
1224 - }
1225 -
1226 - if ( !empty( $log['time'] ) ) {
1227 - $human_time = human_time_diff( strtotime( $log['time'] ), current_time( 'timestamp' ) );
1228 - $log['time'] = $human_time ? $human_time . ' ' . __( 'ago', 'weforms' ) : $log['time'];
1229 - }
1230 -
1231 - $logs[] = $log;
1232 - }
1233 -
1234 - wp_send_json_success( $logs );
1235 - }
1236 -
1237 - /**
1238 - * Read Log file
1239 - *
1240 - * @return json
1241 - **/
1242 - public function delete_logs() {
1243 - check_ajax_referer( 'weforms' );
1244 -
1245 - $this->check_admin();
1246 -
1247 - $file = weforms_log_file_path();
1248 -
1249 - if ( !file_exists( $file ) ) {
1250 - return;
1251 - }
1252 -
1253 - @unlink( $file );
1254 -
1255 - wp_send_json_success();
1256 - }
1257 -}
1 +<?php
2 +
3 +/**
4 + * The ajax handler class
5 + */
6 +class WeForms_Ajax {
7 +
8 + public function __construct() {
9 +
10 + // backend requests
11 + add_action( 'wp_ajax_weforms_form_list', [ $this, 'get_contact_forms' ] );
12 + add_action( 'wp_ajax_weforms_get_users', [ $this, 'get_all_users' ] );
13 + add_action( 'wp_ajax_weforms_form_names', [ $this, 'get_contact_form_names' ] );
14 + add_action( 'wp_ajax_weforms_form_create', [ $this, 'create_form' ] );
15 + add_action( 'wp_ajax_weforms_form_delete', [ $this, 'delete_form' ] );
16 + add_action( 'wp_ajax_weforms_form_delete_bulk', [ $this, 'delete_form_bulk' ] );
17 + add_action( 'wp_ajax_weforms_form_duplicate', [ $this, 'duplicate_form' ] );
18 +
19 + // read logs
20 + add_action( 'wp_ajax_weforms_read_logs', [ $this, 'get_logs' ] );
21 + add_action( 'wp_ajax_weforms_delete_logs', [ $this, 'delete_logs' ] );
22 +
23 + // create from a template
24 + add_filter( 'wp_ajax_weforms_contact_form_template', [ $this, 'create_form_from_template' ] );
25 +
26 + // form settings
27 + add_action( 'wp_ajax_weforms_save_settings', [ $this, 'save_settings' ] );
28 + add_action( 'wp_ajax_weforms_get_settings', [ $this, 'get_settings' ] );
29 +
30 + // import
31 + add_action( 'wp_ajax_weforms_import_form', [ $this, 'import_form' ] );
32 +
33 + // form editing
34 + add_action( 'wp_ajax_weforms_get_form', [ $this, 'get_form' ] );
35 + add_action( 'wp_ajax_wpuf_form_builder_save_form', [ $this, 'save_form' ] );
36 +
37 + // entries
38 + add_action( 'wp_ajax_weforms_form_entries', [ $this, 'get_entries' ] );
39 +
40 + add_action( 'wp_ajax_weforms_form_entry_details', [ $this, 'get_entry_detail' ] );
41 + add_action( 'wp_ajax_weforms_form_entry_trash', [ $this, 'trash_entry' ] );
42 + add_action( 'wp_ajax_weforms_form_entry_delete', [ $this, 'delete_entry' ] );
43 + add_action( 'wp_ajax_weforms_form_entry_restore', [ $this, 'restore_entry' ] );
44 +
45 + add_action( 'wp_ajax_weforms_form_entry_trash_bulk', [ $this, 'bulk_delete_entry' ] );
46 + add_action( 'wp_ajax_weforms_form_entry_restore_bulk', [ $this, 'bulk_restore_entry' ] );
47 +
48 + // frontend requests
49 + add_action( 'wp_ajax_weforms_frontend_submit', [ $this, 'handle_frontend_submission' ] );
50 + add_action( 'wp_ajax_nopriv_weforms_frontend_submit', [ $this, 'handle_frontend_submission' ] );
51 + }
52 +
53 + /**
54 + * Administrator validation
55 + *
56 + * @return void
57 + */
58 + public function check_admin() {
59 + if ( !current_user_can( weforms_form_access_capability() ) ) {
60 + wp_send_json_error( __( 'You do not have sufficient permission.', 'weforms' ) );
61 + }
62 + }
63 +
64 + /**
65 + * Get a form to edit
66 + *
67 + * @return void
68 + */
69 + public function get_form() {
70 + $this->check_admin();
71 +
72 + $form_id = isset( $_REQUEST['form_id'] ) ? absint( $_REQUEST['form_id'] ) : 0;
73 +
74 + $form = weforms()->form->get( $form_id );
75 +
76 + $data = [
77 + 'post' => $form->data,
78 + 'form_fields' => $form->get_fields(),
79 + 'settings' => $form->get_settings(),
80 + 'notifications' => $form->get_notifications(),
81 + 'integrations' => $form->get_integrations(),
82 + ];
83 +
84 + wp_send_json_success( $data );
85 + }
86 +
87 + /**
88 + * Save the form
89 + *
90 + * @return void
91 + */
92 + public function save_form() {
93 + $post_data = wp_unslash( $_POST );
94 + if ( isset( $post_data['form_data'] ) ) {
95 + parse_str( sanitize_text_field( wp_unslash( $post_data['form_data'] ) ), $form_data );
96 + }
97 +
98 + if ( !wp_verify_nonce( $form_data['wpuf_form_builder_nonce'], 'wpuf_form_builder_save_form' ) ) {
99 + wp_send_json_error( __( 'Unauthorized operation', 'weforms' ) );
100 + }
101 +
102 + if ( empty( $form_data['wpuf_form_id'] ) ) {
103 + wp_send_json_error( __( 'Invalid form id', 'weforms' ) );
104 + }
105 +
106 + $form_fields = isset( $post_data['form_fields'] ) ? $post_data['form_fields'] : '';
107 + $notifications = isset( $post_data['notifications'] ) ? $post_data['notifications']: '';
108 + $settings = array();
109 + $integrations = array();
110 +
111 + if ( isset( $post_data['settings'] ) ) {
112 + $settings = (array) json_decode( $post_data['settings'] );
113 + } else {
114 + $settings = isset( $form_data['wpuf_settings'] ) ? $form_data['wpuf_settings'] : [];
115 + }
116 +
117 + if ( isset( $post_data['integrations'] ) ) {
118 + $integrations = (array) json_decode( $post_data['integrations'] );
119 + }
120 +
121 + // $form_fields = wp_unslash( $form_fields );
122 + // $notifications = wp_unslash( $notifications );
123 +
124 + $form_fields = json_decode( $form_fields, true );
125 + $notifications = json_decode( $notifications, true );
126 + $data = [
127 + 'form_id' => absint( $form_data['wpuf_form_id'] ),
128 + 'post_title' => $form_data['post_title'],
129 + 'form_fields' => $form_fields,
130 + 'form_settings' => $settings,
131 + 'form_settings_key' => isset( $form_data['form_settings_key'] ) ? $form_data['form_settings_key'] : '',
132 + 'notifications' => $notifications,
133 + 'integrations' => $integrations,
134 + ];
135 +
136 + $form_fields = weforms()->form->save( $data );
137 +
138 + wp_send_json_success( [ 'form_fields' => $form_fields ] );
139 + }
140 +
141 + /**
142 + * Get all contact forms
143 + *
144 + * @return void
145 + */
146 + public function get_contact_forms() {
147 + check_ajax_referer( 'weforms' );
148 +
149 + $this->check_admin();
150 +
151 + $args = [
152 + 'posts_per_page' => isset( $_POST['posts_per_page'] ) ? intval( $_POST['posts_per_page'] ) : 10,
153 + 'paged' => isset( $_POST['page'] ) ? absint( $_POST['page'] ) : 1,
154 + 'order' => 'DESC',
155 + 'orderby' => 'post_date',
156 + ];
157 +
158 + $args = apply_filters( 'weforms_ajax_get_contact_forms_args', $args );
159 +
160 + $contact_forms = weforms()->form->get_forms( $args );
161 +
162 + array_map(
163 + function ( $form ) {
164 + $form->entries = $form->num_form_entries();
165 + $form->settings = $form->get_settings();
166 + $form->views = $form->num_form_views();
167 + $form->payments = $form->num_form_payments();
168 + $form->author = $form->get_form_author_details();
169 + }, $contact_forms['forms']
170 + );
171 +
172 + $contact_forms = $this->filter_contact_forms( $contact_forms );
173 + $contact_forms = apply_filters( 'weforms_ajax_get_contact_forms', $contact_forms );
174 +
175 + wp_send_json_success( $contact_forms );
176 + }
177 +
178 + /**
179 + * Get all users
180 + *
181 + * @return array
182 + */
183 + public function get_all_users() {
184 + check_ajax_referer( 'weforms' );
185 +
186 + $this->check_admin();
187 +
188 + $users_meta = [];
189 + $users = get_users( [ 'fields' => [ 'ID' ] ] );
190 +
191 + foreach ( $users as $user ) {
192 + $users_meta[] = [
193 + 'id' => $user->ID,
194 + 'data' => get_user_meta( $user->ID ),
195 + ];
196 + }
197 +
198 + wp_send_json_success( $users_meta );
199 + }
200 +
201 + /**
202 + * Filter
203 + *
204 + * @return void
205 + */
206 + public function filter_contact_forms( &$contact_forms ) {
207 + if ( isset( $_REQUEST['filter'] ) && $_REQUEST['filter'] == 'entries' ) {
208 + foreach ( $contact_forms['forms'] as $key => &$form ) {
209 + if ( isset( $form->entries ) && !$form->entries ) {
210 + unset( $contact_forms['forms'][ $key ] );
211 + }
212 + }
213 +
214 + $contact_forms['meta']['total'] = count( $contact_forms['forms'] );
215 + }
216 +
217 + return $contact_forms;
218 + }
219 +
220 + /**
221 + * Get the names of contact forms for generating dropdown
222 + *
223 + * @return void
224 + */
225 + public function get_contact_form_names() {
226 + check_ajax_referer( 'weforms' );
227 +
228 + $this->check_admin();
229 +
230 + $contact_forms = weforms()->form->all();
231 + $response = [];
232 +
233 + foreach ( $contact_forms['forms'] as $form ) {
234 + $response[] = [
235 + 'id' => $form->get_id(),
236 + 'title' => $form->get_name() . ' (#' . $form->get_id() . ')',
237 + ];
238 + }
239 +
240 + wp_send_json_success( $response );
241 + }
242 +
243 + /**
244 + * Create a form
245 + *
246 + * @return void
247 + */
248 + public function create_form() {
249 + check_ajax_referer( 'weforms' );
250 +
251 + $this->check_admin();
252 +
253 + $form_name = isset( $_POST['form_name'] ) ? sanitize_text_field( wp_unslash( $_POST['form_name'] ) ) : '';
254 +
255 + if ( empty( $form_name ) ) {
256 + wp_send_json_error( __( 'Please provide a form name', 'weforms' ) );
257 + }
258 +
259 + $form_id = weforms()->form->create( $form_name );
260 +
261 + if ( is_wp_error( $form_id ) ) {
262 + wp_send_json_error( $form_id->get_error_message() );
263 + }
264 +
265 + wp_send_json_success( [
266 + 'form_id' => $form_id,
267 + 'form_name' => $form_name,
268 + ] );
269 + }
270 +
271 + /**
272 + * Delete a form
273 + *
274 + * @return void
275 + */
276 + public function delete_form() {
277 + check_ajax_referer( 'weforms' );
278 +
279 + $this->check_admin();
280 +
281 + $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
282 +
283 + if ( !$form_id ) {
284 + wp_send_json_error( __( 'No form id provided!', 'weforms' ) );
285 + }
286 +
287 + weforms()->form->delete( $form_id );
288 +
289 + wp_send_json_success();
290 + }
291 +
292 + public function delete_form_bulk() {
293 + check_ajax_referer( 'weforms' );
294 +
295 + $this->check_admin();
296 +
297 + $form_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : [];
298 +
299 + if ( !$form_ids ) {
300 + wp_send_json_error( __( 'No form ids provided!', 'weforms' ) );
301 + }
302 +
303 + foreach ( $form_ids as $form_id ) {
304 + weforms()->form->delete( $form_id );
305 + }
306 +
307 + wp_send_json_success();
308 + }
309 +
310 + /**
311 + * Duplicate a form
312 + *
313 + * @return voiud
314 + */
315 + public function duplicate_form() {
316 + check_ajax_referer( 'weforms' );
317 +
318 + $this->check_admin();
319 +
320 + $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
321 +
322 + $form = weforms()->form->duplicate( $form_id );
323 + $form->settings = $form->get_settings();
324 +
325 + wp_send_json_success( $form );
326 + }
327 +
328 + /**
329 + * Create form from a template
330 + *
331 + * @return void
332 + */
333 + public function create_form_from_template() {
334 + check_ajax_referer( 'weforms' );
335 +
336 + $template = isset( $_REQUEST['template'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['template'] ) ) : '';
337 +
338 + $form_id = weforms()->templates->create( $template );
339 +
340 + if ( is_wp_error( $form_id ) ) {
341 + wp_send_json_error( __( 'Could not create the form', 'weforms' ) );
342 + }
343 +
344 + wp_send_json_success( [
345 + 'id' => $form_id,
346 + ] );
347 + }
348 +
349 + /**
350 + * Save the weForms settings
351 + *
352 + * @return void
353 + */
354 + public function save_settings() {
355 + check_ajax_referer( 'weforms' );
356 + $this->check_admin();
357 +
358 + $requires_wpuf_update = false;
359 + $wpuf_update_array = array();
360 + $settings = isset( $_POST['settings'] ) ? (array) json_decode( wp_unslash( $_POST['settings'] ) ) : [];
361 + update_option( 'weforms_settings', $settings );
362 +
363 + // wpuf settings sync
364 + if ( isset( $settings['gmap_api'] ) ) {
365 + $requires_wpuf_update = true;
366 + $wpuf_update_array['gmap_api_key'] = $settings['gmap_api'];
367 + }
368 +
369 + if ( isset( $settings['recaptcha'] ) ) {
370 + $requires_wpuf_update = true;
371 + $wpuf_update_array['recaptcha_public'] = $settings['recaptcha']->key;
372 + $wpuf_update_array['recaptcha_private'] = $settings['recaptcha']->secret;
373 + $wpuf_update_array['recaptcha_type'] = $settings['recaptcha']->type;
374 + }
375 +
376 + if ( isset( $settings['no_conflict'] ) ) {
377 + $requires_wpuf_update = true;
378 + $wpuf_update_array['no_conflict'] = $settings['no_conflict'];
379 + }
380 +
381 + if ( isset( $settings['email_footer'] ) ) {
382 + $requires_wpuf_update = true;
383 + $wpuf_update_array['email_footer'] = $settings['email_footer'];
384 + }
385 +
386 + if ( $requires_wpuf_update ) {
387 + $wpuf_settings = get_option( 'wpuf_general', [] );
388 +
389 + $wpuf_settings = array_merge( $wpuf_settings, $wpuf_update_array );
390 + update_option( 'wpuf_general', $wpuf_settings );
391 + }
392 +
393 + do_action( 'weforms_save_settings', $settings );
394 +
395 + $settings = apply_filters( 'weforms_after_save_settings', $settings );
396 + wp_send_json_success( $settings );
397 + }
398 +
399 + /**
400 + * Get the weForms Settings
401 + *
402 + * @return void
403 + */
404 + public function get_settings() {
405 + check_ajax_referer( 'weforms' );
406 +
407 + $this->check_admin();
408 +
409 + $settings = weforms_get_settings();
410 + // checking to prevent js error, will be removed in future
411 + if ( !isset( $settings['credit'] ) ) {
412 + $settings['credit'] = false;
413 + }
414 +
415 + if ( !isset( $settings['permission'] ) ) {
416 + $settings['permission'] = 'manage_options';
417 + }
418 +
419 + wp_send_json_success( $settings );
420 + }
421 +
422 + /**
423 + * Get all entries
424 + *
425 + * @return void
426 + */
427 + public function get_entries() {
428 + check_ajax_referer( 'weforms' );
429 +
430 + $this->check_admin();
431 +
432 + $form_id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
433 + $current_page = isset( $_REQUEST['page'] ) ? intval( $_REQUEST['page'] ) : 1;
434 + $status = isset( $_REQUEST['status'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['status'] ) ) : 'publish';
435 + $per_page = 20;
436 + $offset = ( $current_page - 1 ) * $per_page;
437 +
438 + if ( !$form_id ) {
439 + wp_send_json_error( __( 'No form id provided!', 'weforms' ) );
440 + }
441 +
442 + $entries = weforms_get_form_entries(
443 + $form_id, [
444 + 'number' => $per_page,
445 + 'offset' => $offset,
446 + 'status' => $status,
447 + ]
448 + );
449 +
450 + $columns = weforms_get_entry_columns( $form_id );
451 + $total_entries = weforms_count_form_entries( $form_id, $status );
452 +
453 + array_map(
454 + function ( $entry ) use ( $columns ) {
455 + $entry_id = $entry->id;
456 + $entry->fields = [];
457 +
458 + foreach ( $columns as $meta_key => $label ) {
459 + if ( empty( $meta_key ) ) {
460 + continue;
461 + }
462 + $value = weforms_get_entry_meta( $entry_id, $meta_key, true );
463 + $entry->fields[ $meta_key ] = str_replace( WeForms::$field_separator, ' ', $value );
464 + }
465 + }, $entries
466 + );
467 +
468 + $entries = apply_filters( 'weforms_get_entries', $entries, $form_id );
469 +
470 + $response = [
471 + 'columns' => $columns,
472 + 'entries' => $entries,
473 + 'form_title' => get_post_field( 'post_title', $form_id ),
474 + 'pagination' => [
475 + 'total' => $total_entries,
476 + 'per_page' => $per_page,
477 + 'pages' => ceil( $total_entries / $per_page ),
478 + 'current' => $current_page,
479 + ],
480 + 'meta' => [
481 + 'total' => weforms_count_form_entries( $form_id ),
482 + 'totalTrash' => weforms_count_form_entries( $form_id, 'trash' ),
483 + ],
484 + ];
485 +
486 + wp_send_json_success( $response );
487 + }
488 +
489 + /**
490 + * Get an entry details
491 + *
492 + * @return void
493 + */
494 + public function get_entry_detail() {
495 + check_ajax_referer( 'weforms' );
496 +
497 + $this->check_admin();
498 +
499 + $form_id = isset( $_REQUEST['form_id'] ) ? intval( $_REQUEST['form_id'] ) : 0;
500 + $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
501 +
502 + $form = weforms()->form->get( $form_id );
503 + $form_settings = $form->get_settings();
504 + $entry = $form->entries()->get( $entry_id );
505 + $fields = $entry->get_fields();
506 + $metadata = $entry->get_metadata();
507 + $payment = $entry->get_payment_data();
508 +
509 + if ( isset( $payment->payment_data ) && is_serialized( $payment->payment_data ) ) {
510 + $payment->payment_data = unserialize( $payment->payment_data );
511 + }
512 +
513 + if ( false === $fields ) {
514 + wp_send_json_error( __( 'No form fields found!', 'weforms' ) );
515 + }
516 +
517 + if ( sizeof( $fields ) < 1 ) {
518 + $fields[] = [
519 + 'label' => __( 'No form fields found!', 'weforms' ),
520 + ];
521 + }
522 +
523 + $has_empty = false;
524 + $answers = [];
525 + $respondentPoints = isset( $form_settings['total_points'] ) ? floatval( $form_settings['total_points'] ) : 0;
526 +
527 + foreach ( $fields as $key => $field ) {
528 + if ( $form_settings['quiz_form'] == 'yes' ) {
529 + $selectedAnswers = isset( $field['selected_answers'] ) ? $field['selected_answers'] : '';
530 + $givenAnswer = isset( $field['value'] ) ? $field['value'] : '';
531 + $options = isset( $field['options'] ) ? $field['options'] : '';
532 + $template = $field['template'];
533 + $fieldPoints = isset( $field['points'] ) ? floatval( $field['points'] ) : 0;
534 +
535 + if ( $template == 'radio_field' || $template == 'dropdown_field' ) {
536 + $answers[$field['name']] = true;
537 +
538 + if ( empty( $givenAnswer ) ) {
539 + $answers[$field['name']] = false;
540 + $respondentPoints -= $fieldPoints;
541 + } else {
542 + foreach ( $options as $key => $value ) {
543 + if ( $givenAnswer == $value ) {
544 + if ( $key != $selectedAnswers ) {
545 + $answers[$field['name']] = false;
546 + $respondentPoints -= $fieldPoints;
547 + }
548 + }
549 + }
550 + }
551 + } elseif ( $template == 'checkbox_field' || $template == 'multiple_select' ) {
552 + $answers[$field['name']] = true;
553 + $userAnswer = [];
554 +
555 + foreach ( $options as $key => $value ) {
556 + foreach ( $givenAnswer as $answer ) {
557 + if ( $value == $answer ) {
558 + $userAnswer[] = $key;
559 + }
560 + }
561 + }
562 +
563 + $userAnswer = implode( '|', $userAnswer );
564 + $rightAnswers = implode( '|', $selectedAnswers );
565 +
566 + if ( $userAnswer != $rightAnswers || empty( $userAnswer ) ) {
567 + $answers[$field['name']] = false;
568 + $respondentPoints -= $fieldPoints;
569 + }
570 + }
571 + } elseif ( empty( $field['value'] ) ) {
572 + $has_empty = true;
573 + break;
574 + }
575 + }
576 +
577 + $response = [
578 + 'form_fields' => $fields,
579 + 'form_settings' => $form_settings,
580 + 'meta_data' => $metadata,
581 + 'payment_data' => $payment,
582 + 'has_empty' => $has_empty,
583 + 'respondent_points' => $respondentPoints,
584 + 'answers' => $answers,
585 + ];
586 +
587 + wp_send_json_success( $response );
588 + }
589 +
590 + /**
591 + * Trash an entry
592 + *
593 + * @return void
594 + */
595 + public function trash_entry() {
596 + check_ajax_referer( 'weforms' );
597 +
598 + $this->check_admin();
599 +
600 + $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
601 +
602 + weforms_change_entry_status( $entry_id, 'trash' );
603 + wp_send_json_success();
604 + }
605 +
606 + /**
607 + * Trash an entry
608 + *
609 + * @return void
610 + */
611 + public function delete_entry() {
612 + check_ajax_referer( 'weforms' );
613 +
614 + $this->check_admin();
615 +
616 + $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
617 +
618 + weforms_delete_entry( $entry_id );
619 +
620 + wp_send_json_success();
621 + }
622 +
623 + /**
624 + * Restore Entry
625 + *
626 + * @return void
627 + */
628 + public function restore_entry() {
629 + check_ajax_referer( 'weforms' );
630 +
631 + $this->check_admin();
632 +
633 + $entry_id = isset( $_REQUEST['entry_id'] ) ? intval( $_REQUEST['entry_id'] ) : 0;
634 +
635 + weforms_change_entry_status( $entry_id, 'publish' );
636 + wp_send_json_success();
637 + }
638 +
639 + /**
640 + * Bulk trash entries
641 + *
642 + * @return void
643 + */
644 + public function bulk_delete_entry() {
645 + check_ajax_referer( 'weforms' );
646 +
647 + $this->check_admin();
648 +
649 + $entry_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : array();
650 + $permanent = isset( $_POST['permanent'] ) && ( sanitize_text_field( wp_unslash ( $_POST['permanent'] ) ) ) ? true : false;
651 +
652 + if ( !$entry_ids ) {
653 + wp_send_json_error( __( 'No entry ids provided!', 'weforms' ) );
654 + }
655 +
656 + foreach ( $entry_ids as $entry_id ) {
657 + if ( $permanent ) {
658 + weforms_delete_entry( $entry_id );
659 + } else {
660 + weforms_change_entry_status( $entry_id, 'trash' );
661 + }
662 + }
663 +
664 + wp_send_json_success();
665 + }
666 +
667 + /**
668 + * Bulk trash entries
669 + *
670 + * @return void
671 + */
672 + public function bulk_restore_entry() {
673 + check_ajax_referer( 'weforms' );
674 +
675 + $this->check_admin();
676 +
677 + $entry_ids = isset( $_POST['ids'] ) ? array_map( 'absint', $_POST['ids'] ) : [];
678 +
679 + if ( !$entry_ids ) {
680 + wp_send_json_error( __( 'No entry ids provided!', 'weforms' ) );
681 + }
682 +
683 + foreach ( $entry_ids as $entry_id ) {
684 + weforms_change_entry_status( $entry_id, 'publish' );
685 + }
686 +
687 + wp_send_json_success();
688 + }
689 +
690 + /**
691 + * Handle the frontend submission
692 + *
693 + * @return void
694 + */
695 + public function handle_frontend_submission() {
696 + check_ajax_referer( 'wpuf_form_add' );
697 +
698 + $form_id = isset( $_POST['form_id'] ) ? intval( $_POST['form_id'] ) : 0;
699 + $page_id = isset( $_POST['page_id'] ) ? intval( $_POST['page_id'] ) : 0;
700 +
701 + $form = weforms()->form->get( $form_id );
702 + $form_settings = $form->get_settings();
703 + $form_fields = $form->get_fields();
704 + $entry_fields = $form->prepare_entries();
705 + $form_entries = weforms_get_form_entries( $form_id, [ 'number' => '', 'offset' => '' ] );
706 +
707 + if ( $form_fields && count( $form_entries ) && count( $entry_fields ) ) {
708 + foreach ( $entry_fields as $field_key => $field_value ) {
709 + $duplicate_check = false;
710 + $field_label = 'This';
711 +
712 + foreach ( $form_fields as $form_field ) {
713 + if ( in_array( $form_field['template'], [ 'text_field', 'website_url', 'numeric_text_field', 'email_address' ] ) && $form_field['name'] == $field_key && isset( $form_field['duplicate'] ) && 'no' == $form_field['duplicate'] ) {
714 + $duplicate_check = true;
715 + $field_label = $form_field['label'];
716 + }
717 + }
718 +
719 + if ( $duplicate_check ) {
720 + foreach ( $form_entries as $entry ) {
721 + $existing = weforms_get_entry_meta( $entry->id, $field_key, true );
722 +
723 + if ( $existing && $field_value == $existing ) {
724 + wp_send_json( [
725 + 'success' => false,
726 + 'error' => sprintf( __( '"%s" field requires a unique entry and "%s" has already been used.', 'weforms' ), $field_label, $field_value ),
727 + ] );
728 + }
729 + }
730 + }
731 + }
732 + }
733 +
734 + if ( !$form_fields ) {
735 + wp_send_json( [
736 + 'success' => false,
737 + 'error' => __( 'No form field was found.', 'weforms' ),
738 + ] );
739 + }
740 +
741 + if ( $form->has_field( 'recaptcha' ) ) {
742 + $settings = weforms_get_settings( 'recaptcha' );
743 + $type = isset( $settings->type ) ? $settings->type : '';
744 + $secret = isset( $settings->secret ) ? $settings->secret : '';
745 + if( $type == 'v3' ) {
746 + $this->validate_reCaptchav3( $secret );
747 + } else {
748 + $this->validate_reCaptcha();
749 + }
750 + }
751 +
752 + // vaidate submission
753 + $this->validate_submission( $entry_fields, $form, $form_settings, $form_fields );
754 +
755 + $entry_fields = apply_filters( 'weforms_before_entry_submission', $entry_fields, $form, $form_settings, $form_fields );
756 +
757 + $entry_id = weforms_insert_entry( [
758 + 'form_id' => $form_id,
759 + ], $entry_fields );
760 +
761 + if ( is_wp_error( $entry_id ) ) {
762 + wp_send_json( [
763 + 'success' => false,
764 + 'error' => $entry_id->get_error_message(),
765 + ] );
766 + }
767 +
768 + // redirect URL
769 + $show_message = false;
770 + $redirect_to = false;
771 +
772 + if ( $form_settings['redirect_to'] == 'page' ) {
773 + $redirect_to = get_permalink( $form_settings['page_id'] );
774 + } elseif ( $form_settings['redirect_to'] == 'url' ) {
775 + $redirect_to = $form_settings['url'];
776 + } elseif ( $form_settings['redirect_to'] == 'same' ) {
777 + $show_message = true;
778 + } else {
779 + $show_message = true;
780 + }
781 +
782 + // Fire a hook for integration
783 + do_action( 'weforms_entry_submission', $entry_id, $form_id, $page_id, $form_settings );
784 +
785 + $field_search = $field_replace = [];
786 +
787 + foreach ( $form_fields as $r_field ) {
788 + $field_search[] = '{' . $r_field['name'] . '}';
789 +
790 + if ( $r_field['template'] == 'name_field' ) {
791 + $field_replace[] = implode( ' ', explode( '|', $entry_fields[ $r_field['name'] ] ) );
792 + } else if ( $r_field['template'] == 'address_field' ) {
793 + $field_replace[] = implode( ', ', $entry_fields[ $r_field['name'] ] );
794 + } else {
795 + $field_replace[] = isset( $entry_fields[ $r_field['name'] ] ) ? $entry_fields[ $r_field['name'] ] : '';
796 + }
797 + }
798 + $message = str_replace( $field_search, $field_replace, $form_settings['message'] );
799 +
800 + // send the response
801 + $response = apply_filters( 'weforms_entry_submission_response', [
802 + 'success' => true,
803 + 'redirect_to' => $redirect_to,
804 + 'show_message' => $show_message,
805 + 'message' => $message,
806 + 'data' => $_POST,
807 + 'form_id' => $form_id,
808 + 'entry_id' => $entry_id,
809 + ] );
810 +
811 + $notification = new WeForms_Notification( [
812 + 'form_id' => $form_id,
813 + 'page_id' => $page_id,
814 + 'entry_id' => $entry_id,
815 + ] );
816 +
817 + $notification->send_notifications();
818 +
819 + weforms_clear_buffer();
820 + wp_send_json( $response );
821 + }
822 +
823 + function validate_reCaptchav3( $secret ) {
824 + check_ajax_referer( 'wpuf_form_add' );
825 +
826 + $post_data = wp_unslash($_POST);
827 + $token = $post_data['g-recaptcha-response'];
828 + $action = $post_data['g-action'];
829 + $google_captcha_url = esc_url( 'https://www.google.com/recaptcha/api/siteverify' );
830 +
831 + $response = wp_remote_post( $google_captcha_url,
832 + array(
833 + 'method' => 'POST',
834 + 'body' => array(
835 + 'secret' => $secret,
836 + 'response' => $token
837 + )
838 + )
839 + );
840 +
841 +
842 + if ( is_wp_error( $response ) ) {
843 + wp_send_json( [
844 + 'success' => false,
845 + 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
846 + ] );
847 + } else {
848 + $api_response = json_decode( wp_remote_retrieve_body( $response ), true );
849 + if( $api_response["success"] == '1' && $api_response["action"] == $action ) {
850 + return true;
851 + } else {
852 + wp_send_json( [
853 + 'success' => false,
854 + 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
855 + ] );
856 + }
857 + }
858 + }
859 + /**
860 + * reCaptcha Validation
861 + *
862 + * @return void
863 + */
864 + function validate_reCaptcha() {
865 + check_ajax_referer( 'wpuf_form_add' );
866 + if ( class_exists( 'WPUF_ReCaptcha' ) ) {
867 + $recaptcha_class = 'WPUF_ReCaptcha';
868 + } else {
869 + if ( !function_exists( 'recaptcha_get_html' ) ) {
870 + require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib.php';
871 + }
872 +
873 + require_once WEFORMS_INCLUDES . '/library/reCaptcha/recaptchalib_noCaptcha.php';
874 + $recaptcha_class = 'Weforms_ReCaptcha';
875 + }
876 +
877 + $invisible = isset( $_POST['g-recaptcha-response'] ) ? false : true;
878 +
879 + $recaptcha_settings = weforms_get_settings( 'recaptcha' );
880 + $secret = isset( $recaptcha_settings->secret ) ? $recaptcha_settings->secret : '';
881 +
882 + if ( ! $invisible ) {
883 + $response = null;
884 + $reCaptcha = new $recaptcha_class( $secret );
885 + $remote_ADDR = isset( $_SERVER['REMOTE_ADDR'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ) ) : '';
886 + $recaptcha_response = isset( $_POST['g-recaptcha-response'] ) ? sanitize_text_field( wp_unslash( $_POST['g-recaptcha-response'] ) ) : '';
887 + $resp = $reCaptcha->verifyResponse(
888 + $remote_ADDR,
889 + $recaptcha_response
890 + );
891 +
892 + if ( !$resp->success ) {
893 + wp_send_json( [
894 + 'success' => false,
895 + 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
896 + ] );
897 + }
898 +
899 + } else {
900 +
901 + $recap_challenge = isset( $_POST['recaptcha_challenge_field'] ) ? sanitize_text_field( wp_unslash( $_POST['recaptcha_challenge_field'] ) ) : '';
902 + $recap_response = isset( $_POST['recaptcha_response_field'] ) ? sanitize_text_field( wp_unslash( $_POST['recaptcha_response_field'] ) ) : '';
903 + $resp = recaptcha_check_answer( $secret, $remote_ADDR, $recap_challenge, $recap_response );
904 +
905 + if ( !$resp->is_valid ) {
906 + ob_clean();
907 +
908 + wp_send_json( [
909 + 'success' => false,
910 + 'error' => __( 'reCAPTCHA validation failed', 'weforms' ),
911 + ] );
912 + }
913 + }
914 + }
915 +
916 + /**
917 + * Validate submission
918 + *
919 + * @param array $entry_fields
920 + * @param object $form
921 + * @param array $form_settings
922 + * @param array $form_fields
923 + *
924 + * @return bool|json
925 + */
926 + public function validate_submission( $entry_fields, $form, $form_settings, $form_fields ) {
927 + foreach ( $form_fields as $key => $field ) {
928 +
929 + //skip custom html field as it is not saved
930 + if ( 'custom_html' == $field['name'] ) {
931 + continue;
932 + }
933 +
934 + //skip recaptcha field as it is not saved
935 + if ( 'recaptcha' == $field['name'] ) {
936 + continue;
937 + }
938 +
939 + $value = $entry_fields[ $field['name'] ];
940 +
941 + if ( 'single_product' === $field['template'] ) {
942 + if ( !$value ) {
943 + $value = [];
944 + }
945 +
946 + $value['price'] = isset( $value['price'] ) ? floatval( $value['price'] ) : 0;
947 + $value['quantity'] = isset( $value['quantity'] ) ? floatval( $value['quantity'] ) : 0;
948 + $quantity = isset( $field['quantity'] ) ? $field['quantity'] : [];
949 + $price = isset( $field['price'] ) ? $field['price'] : [];
950 +
951 + if ( isset( $price['is_flexible'] ) && $price['is_flexible'] ) {
952 + $min = isset( $price['min'] ) ? floatval( $price['min'] ) : 0;
953 + $max = isset( $price['max'] ) ? floatval( $price['max'] ) : 0;
954 +
955 + if ( $value['price'] < $min ) {
956 + wp_send_json( [
957 + 'success' => false,
958 + 'error' => __( sprintf(
959 + '%s price must be equal or greater than %s',
960 + $field['weforms'],
961 + $min ),
962 + 'weforms' ),
963 + ] );
964 + }
965 +
966 + if ( $max && $value['price'] > $max ) {
967 + wp_send_json( [
968 + 'success' => false,
969 + 'error' => __( sprintf(
970 + '%s price must be equal or less than %s',
971 + $field['weforms'],
972 + $max ),
973 + 'weforms' ),
974 + ] );
975 + }
976 + }
977 +
978 + if ( isset( $quantity['status'] ) && $quantity['status'] ) {
979 + $min = isset( $quantity['min'] ) ? floatval( $quantity['min'] ) : 0;
980 + $max = isset( $quantity['max'] ) ? floatval( $quantity['max'] ) : 0;
981 +
982 + if ( $value['quantity'] < $min ) {
983 + wp_send_json( [
984 + 'success' => false,
985 + 'error' => __( sprintf(
986 + '%s quantity must be equal or greater than %s',
987 + $field['weforms'],
988 + $min ),
989 + 'weforms' ),
990 + ] );
991 + }
992 +
993 + if ( $max && $value['quantity'] > $max ) {
994 + wp_send_json( [
995 + 'success' => false,
996 + 'error' => __( sprintf(
997 + '%s quantity must be equal or less than %s',
998 + $field['weforms'],
999 + $max ),
1000 + 'weforms' ),
1001 + ] );
1002 + }
1003 + }
1004 + }
1005 + }
1006 + }
1007 +
1008 + public static function prepare_meta_fields( $meta_vars ) {
1009 + check_ajax_referer( 'wpuf_form_add' );
1010 + // loop through custom fields
1011 + // skip files, put in a key => value paired array for later executation
1012 + // process repeatable fields separately
1013 + // if the input is array type, implode with separator in a field
1014 + $files = [];
1015 + $meta_key_value = [];
1016 + $multi_repeated = []; // multi repeated fields will in sotre duplicated meta key
1017 +
1018 + foreach ( $meta_vars as $key => $value ) {
1019 + switch ( $value['template'] ) {
1020 +
1021 + // put files in a separate array, we'll process it later
1022 + case 'file_upload':
1023 + case 'image_upload':
1024 + $files[] = [
1025 + 'name' => $value['name'],
1026 + 'value' => isset( $_POST['wpuf_files'][ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST['wpuf_files'][ $value['name'] ] ) ) : array(),
1027 + 'count' => $value['count']
1028 + ];
1029 + break;
1030 +
1031 + case 'repeat_field':
1032 + // if it is a multi column repeat field
1033 + if ( isset( $value['multiple'] ) && $value['multiple'] == 'true' ) {
1034 +
1035 + // if there's any items in the array, process it
1036 + if ( isset( $_POST[ $value['name'] ] ) ) {
1037 + $ref_arr = [];
1038 + $cols = count( $value['columns'] );
1039 + $first = array_shift( array_values( sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) ) ); // first element
1040 + $rows = count( $first );
1041 +
1042 + // loop through columns
1043 + for ( $i = 0; $i < $rows; $i++ ) {
1044 +
1045 + // loop through the rows and store in a temp array
1046 + $temp = [];
1047 + for ( $j = 0; $j < $cols; $j++ ) {
1048 + $temp[] = isset( $_POST[ $value['name'] ][ $j ][ $i ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ][ $j ][ $i ] ) ) : '';
1049 + }
1050 +
1051 + // store all fields in a row with WeForms::$field_separator separated
1052 + $ref_arr[] = implode( WeForms::$field_separator, $temp );
1053 + }
1054 +
1055 + // now, if we found anything in $ref_arr, store to $multi_repeated
1056 + if ( $ref_arr ) {
1057 + $multi_repeated[ $value['name'] ] = array_slice( $ref_arr, 0, $rows );
1058 + }
1059 + }
1060 + } else {
1061 + $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) );
1062 + }
1063 +
1064 + break;
1065 +
1066 + case 'address_field':
1067 + if ( isset( $_POST[ $value['name'] ] ) && is_array( $_POST[ $value['name'] ] ) ) {
1068 + $post_value = sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) );
1069 + foreach ( $post_value as $address_field => $field_value ) {
1070 + $meta_key_value[ $value['name'] ][ $address_field ] = sanitize_text_field( $field_value );
1071 + }
1072 + }
1073 +
1074 + break;
1075 +
1076 + case 'text_field':
1077 + case 'email_address':
1078 + case 'numeric_text_field':
1079 + case 'date_field':
1080 + $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : '';
1081 +
1082 + break;
1083 +
1084 + case 'textarea_field':
1085 + $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : '';
1086 +
1087 + break;
1088 +
1089 + case 'dropdown_field':
1090 + case 'radio_field':
1091 + $val = sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) );
1092 + $meta_key_value[ $value['name'] ] = isset( $value['options'][ $val ] ) ? $value['options'][ $val ] : '';
1093 + break;
1094 +
1095 + case 'multiple_select':
1096 + case 'checkbox_field':
1097 + $val = ( is_array( $_POST[ $value['name'] ] ) && sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) : array();
1098 + $meta_key_value[ $value['name'] ] = $val;
1099 +
1100 + if ( $val ) {
1101 + $new_val = [];
1102 +
1103 + foreach ( $val as $option_key ) {
1104 + $new_val[] = isset( $value['options'][ $option_key ] ) ? $value['options'][ $option_key ] : '';
1105 + }
1106 +
1107 + $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, $new_val );
1108 + }
1109 + break;
1110 +
1111 + default:
1112 + // if it's an array, implode with this->separator
1113 + if ( is_array( $_POST[ $value['name'] ] ) ) {
1114 + $meta_key_value[ $value['name'] ] = implode( WeForms::$field_separator, sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ) );
1115 + } else {
1116 + $meta_key_value[ $value['name'] ] = isset( $_POST[ $value['name'] ] ) ? sanitize_text_field( wp_unslash( $_POST[ $value['name'] ] ) ): '';
1117 + }
1118 +
1119 + break;
1120 + }
1121 + } //end foreach
1122 +
1123 + return [ $meta_key_value, $multi_repeated, $files ];
1124 + }
1125 +
1126 + /**
1127 + * Import a form from a JSON file
1128 + *
1129 + * @return void
1130 + */
1131 + public function import_form() {
1132 + check_ajax_referer( 'weforms' );
1133 +
1134 + $this->check_admin();
1135 +
1136 + $the_file = isset( $_FILES['importFile'] ) ? sanitize_text_field( wp_unslash( $_FILES['importFile'] ) ) : false;
1137 +
1138 + if ( !$the_file ) {
1139 + wp_send_json_error( __( 'No file found to import.', 'weforms' ) );
1140 + }
1141 +
1142 + $file_ext = pathinfo( $the_file['name'], PATHINFO_EXTENSION );
1143 +
1144 + if ( !class_exists( 'WeForms_Admin_Tools' ) ) {
1145 + require_once __DIR__ . '/admin/class-admin-tools.php';
1146 + }
1147 +
1148 + if ( ( $file_ext == 'json' ) && ( $the_file['size'] < 500000 ) ) {
1149 + $status = WeForms_Admin_Tools::import_json_file( $the_file['tmp_name'] );
1150 +
1151 + if ( $status ) {
1152 + wp_send_json_success( __( 'The forms have been imported successfully!', 'weforms' ) );
1153 + } else {
1154 + wp_send_json_error( __( 'Something went wrong importing the file.', 'weforms' ) );
1155 + }
1156 + } else {
1157 + wp_send_json_error( __( 'Invalid file or file size too big.', 'weforms' ) );
1158 + }
1159 + }
1160 +
1161 + /**
1162 + * Read Log file
1163 + *
1164 + * @return json
1165 + **/
1166 + public function get_logs() {
1167 + check_ajax_referer( 'weforms' );
1168 +
1169 + $this->check_admin();
1170 +
1171 + $file = weforms_log_file_path();
1172 +
1173 + if ( !file_exists( $file ) ) {
1174 + return;
1175 + }
1176 +
1177 + $data = file_get_contents( $file );
1178 + $data = explode( "\n", $data );
1179 + $data = array_reverse( $data );
1180 + $data = array_filter( $data );
1181 +
1182 + if ( empty( $data ) ) {
1183 + return;
1184 + }
1185 +
1186 + $logs = [];
1187 +
1188 + foreach ( $data as $key => $row ) {
1189 + preg_match( '/\[(?<time>.+?)\]\[(?<type>.+?)\](?<message>.+)/im', $row, $log );
1190 +
1191 + if ( empty( $log['message'] ) ) {
1192 + $log = [];
1193 + $log['message'] = !empty( $log['message'] ) ? $log['message'] : $row;
1194 + }
1195 +
1196 + if ( !empty( $log['time'] ) ) {
1197 + $human_time = human_time_diff( strtotime( $log['time'] ), current_time( 'timestamp' ) );
1198 + $log['time'] = $human_time ? $human_time . ' ' . __( 'ago', 'weforms' ) : $log['time'];
1199 + }
1200 +
1201 + $logs[] = $log;
1202 + }
1203 +
1204 + wp_send_json_success( $logs );
1205 + }
1206 +
1207 + /**
1208 + * Read Log file
1209 + *
1210 + * @return json
1211 + **/
1212 + public function delete_logs() {
1213 + check_ajax_referer( 'weforms' );
1214 +
1215 + $this->check_admin();
1216 +
1217 + $file = weforms_log_file_path();
1218 +
1219 + if ( !file_exists( $file ) ) {
1220 + return;
1221 + }
1222 +
1223 + @unlink( $file );
1224 +
1225 + wp_send_json_success();
1226 + }
1227 +}