Wala shell

Advanced PHP File Manager

Server IP: 127.0.0.1 | PHP Version: 8.3.30 | Domains Hosted: 54

Name	Size	Last Modified	Actions
📁 ..	-	2025-11-17 18:39
📄 entries-list-table.php <?php /** * SureForms Entries Table Class. * * @package sureforms. * @since 0.0.13 / namespace SRFM\Admin\Views; use SRFM\Inc\Database\Tables\Entries; use SRFM\Inc\Helper; use SRFM\Inc\Traits\Get_Instance; /* * Exit if accessed directly. / if ( ! defined( 'ABSPATH' ) ) { exit; } /* * Check if WP_List_Table class exists and if not, load it. * * @since 0.0.13 / if ( ! class_exists( 'WP_List_Table' ) ) { require_once ABSPATH . 'wp-admin/includes/class-wp-list-table.php'; } /* * Create the entries table using WP_List_Table. / class Entries_List_Table extends \WP_List_Table { use Get_Instance; /* * Stores the count for the entries data fetched from the database according to the status. * It will be used for pagination. * * @var int * @since 0.0.13 / public $entries_count; /* * Stores the count for all entries regardles of status. * It will be used for managing the no entries found page. * * @var int * @since 0.0.13 / public $all_entries_count; /* * Stores the count for the trashed entries. * Used for displaying the no entries found page. * * @var int * @since 0.0.13 / public $trash_entries_count; /* * Stores the entries data fetched from database. * * @var array<mixed> * @since 0.0.13 / protected $data = []; /* * Constructor. * * @since 0.0.13 * @return void / public function __construct() { parent::__construct(); $this->all_entries_count = Entries::get_total_entries_by_status( 'all' ); $this->trash_entries_count = Entries::get_total_entries_by_status( 'trash' ); } /* * Override the parent columns method. Defines the columns to use in your listing table. * * @since 0.0.13 * @return array / public function get_columns() { return [ 'cb' => '<input type="checkbox" />', 'id' => __( 'ID', 'sureforms' ), 'form_name' => __( 'Form Name', 'sureforms' ), 'status' => __( 'Status', 'sureforms' ), 'first_field' => __( 'First Field', 'sureforms' ), 'created_at' => __( 'Submitted On', 'sureforms' ), ]; } /* * Define the sortable columns. * * @since 0.0.13 * @return array / public function get_sortable_columns() { return [ 'id' => [ 'ID', false ], 'status' => [ 'status', false ], 'created_at' => [ 'created_at', false ], ]; } /* * Bulk action items. * * @since 0.0.13 * @return array $actions Bulk actions. / public function get_bulk_actions() { $bulk_actions = [ 'trash' => __( 'Move to Trash', 'sureforms' ), 'read' => __( 'Mark as Read', 'sureforms' ), 'unread' => __( 'Mark as Unread', 'sureforms' ), 'export' => __( 'Export', 'sureforms' ), ]; return $this->get_additional_bulk_actions( $bulk_actions ); } /* * Message to be displayed when there are no entries. * * @since 0.0.13 * @return void / public function no_items() { printf( '<div class="sureforms-no-entries-found">%1$s</div>', esc_html__( 'No entries found.', 'sureforms' ) ); } /* * Prepare the items for the table to process. * * @since 0.0.13 * @return void / public function prepare_items() { // If nonce verification fails, set the view to all else set the view to the view passed in the GET request. if ( ! isset( $_GET['_wpnonce'] ) \|\| ( isset( $_GET['_wpnonce'] ) && ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'srfm_entries_action' ) ) ) { $view = 'all'; $form_id = 0; } else { $view = isset( $_GET['view'] ) ? sanitize_text_field( wp_unslash( $_GET['view'] ) ) : 'all'; $form_id = isset( $_GET['form_filter'] ) ? Helper::get_integer_value( sanitize_text_field( wp_unslash( $_GET['form_filter'] ) ) ) : 0; } $columns = $this->get_columns(); $sortable = $this->get_sortable_columns(); $hidden = []; $per_page = 20; $current_page = $this->get_pagenum(); $data = $this->table_data( $per_page, $current_page, $view, $form_id ); $this->set_pagination_args( [ 'total_items' => $this->entries_count, 'total_pages' => ceil( $this->entries_count / $per_page ), 'per_page' => $per_page, ] ); $this->_column_headers = [ $columns, $hidden, $sortable ]; $this->items = $data; } /* * Define what data to show on each column of the table. * * @param array $item Column data. * @param string $column_name Current column name. * * @since 0.0.13 * @return mixed / public function column_default( $item, $column_name ) { switch ( $column_name ) { case 'id': return $this->column_id( $item ); case 'form_name': return $this->column_form_name( $item ); case 'status': return $this->column_status( $item ); case 'first_field': return $this->column_first_field( $item ); case 'created_at': return $this->column_created_at( $item ); default: return; } } /* * Callback function for checkbox field. * * @param array $item Columns items. * @return string * @since 0.0.13 / public function column_cb( $item ) { $entry_id = esc_attr( $item['ID'] ); ob_start(); ?> <input type="checkbox" name="entry[]" value="<?php echo esc_attr( $entry_id ); ?>" /> <?php return ob_get_clean(); } /* * Entries table form search input markup. * Currently search is based on entry ID only and not text. * * @param string $text The 'submit' button label. * @param int $input_id ID attribute value for the search input field. * * @since 0.0.13 * @return void / public function search_box_markup( $text, $input_id ) { $input_id .= '-search-input'; $search_term = ! empty( $_GET['search_filter'] ) ? sanitize_text_field( wp_unslash( $_GET['search_filter'] ) ) : ''; // phpcs:ignore -- Nonce verification is not required here as we are not doing any database work. ?> <p class="search-box sureforms-form-search-box"> <label class="screen-reader-text" for="<?php echo esc_attr( $input_id ); ?>"> <?php echo esc_html( $text ); ?>: </label> <input type="search" name="search_filter" value="<?php echo esc_attr( $search_term ); ?>" class="sureforms-entries-search-box" id="<?php echo esc_attr( $input_id ); ?>"> <button type="submit" class="button" id="search-submit"><?php echo esc_html( $text ); ?></button> </p> <?php } /* * Displays the table. * * @since 0.0.13 / public function display() { $singular = $this->_args['singular']; $this->views(); $this->search_box_markup( esc_html__( 'Search', 'sureforms' ), 'srfm-entries' ); $this->display_tablenav( 'top' ); $this->screen->render_screen_reader_content( 'heading_list' ); ?> <div class="sureforms-table-container"> <table class="wp-list-table <?php echo esc_attr( implode( ' ', $this->get_table_classes() ) ); ?>"> <?php $this->print_table_description(); ?> <thead> <tr> <?php $this->print_column_headers(); ?> </tr> </thead> <tbody id="the-list" <?php if ( $singular ) { echo ' data-wp-lists="list:' . esc_attr( $singular ) . '"'; } ?> > <?php $this->display_rows_or_placeholder(); ?> </tbody> <tfoot> <tr> <?php $this->print_column_headers(); ?> </tr> </tfoot> </table> </div> <?php $this->display_tablenav( 'bottom' ); } /* * Process bulk actions. * * @since 0.0.13 * @return void / public static function process_bulk_actions() { if ( ! isset( $_GET['action'] ) ) { return; } if ( ! isset( $_GET['_wpnonce'] ) \|\| ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'srfm_entries_action' ) ) { return; } $action = sanitize_text_field( wp_unslash( ( new self() )->current_action() ) ); if ( ! $action ) { return; } // Get the selected entry IDs. $entry_ids = isset( $_GET['entry'] ) ? array_map( 'absint', wp_unslash( $_GET['entry'] ) ) : []; if ( 'export' === $action ) { if ( ! $entry_ids ) { // If we are here then user has not selected entries so handle all entries export accordingly. $filter_form_id = ! empty( $_GET['form_filter'] ) && 'all' !== $_GET['form_filter'] ? absint( wp_unslash( $_GET['form_filter'] ) ) : 0; if ( ! empty( $_GET['month_filter'] ) && 'all' !== $_GET['month_filter'] ) { /* * If we are here then user has filtered the entries by month first * then selected export as bulk action without selecting any entries manually. / $where_condition = self::get_where_conditions( $filter_form_id ); $all_entry_ids = Entries::get_all( [ 'where' => $where_condition, 'columns' => 'ID', ], false ); } elseif ( $filter_form_id > 0 ) { /* * If we are here then user has filtered the entries by form first * then selected export as bulk action without selecting any entries manually. / $all_entry_ids = Entries::get_all_entry_ids_for_form( $filter_form_id ); } elseif ( ! empty( $_GET['search_filter'] ) ) { // Export entries based on the search filter. $all_entry_ids = self::get_entries_based_on_search( sanitize_text_field( wp_unslash( $_GET['search_filter'] ) ) ); } else { // Export all the available ( but not trashed ) entries. $all_entry_ids = self::get_all_entries_except_trash(); } $entry_ids = array_map( 'absint', array_column( $all_entry_ids, 'ID' ) ); } // Get an array of form ids based on the entry ids. $form_ids = Entries::get_form_ids_by_entries( $entry_ids ); $is_single_form = count( $form_ids ) === 1; $temp_dir = wp_normalize_path( trailingslashit( get_temp_dir() ) ); // Normalize the path to make it consistent between windows and linux system. if ( ! wp_is_writable( $temp_dir ) ) { set_transient( 'srfm_bulk_action_message', [ 'action' => $action, 'message' => __( 'Entries export failed. You have file permission issue. Temporary directory is not writable.', 'sureforms' ), 'type' => 'error', ], 30 // Transient expires in 30 seconds. ); // Redirect to prevent form resubmission. wp_safe_redirect( admin_url( 'admin.php?page=sureforms_entries' ) ); exit; } // Only process for ZIP files if we have multiple forms. if ( ! $is_single_form ) { // Check for ZipArchive class if we are processing multiple forms. if ( ! class_exists( 'ZipArchive' ) ) { set_transient( 'srfm_bulk_action_message', [ 'action' => $action, 'message' => __( 'Entries export failed. Your server does not support the ZipArchive library.', 'sureforms' ), 'type' => 'error', ], 30 // Transient expires in 30 seconds. ); // Redirect to prevent form resubmission. wp_safe_redirect( admin_url( 'admin.php?page=sureforms_entries' ) ); exit; } $temp_zip = $temp_dir . 'srfm-entries-export.zip'; // Create a temporary file for the ZIP archive. $zip = new \ZipArchive(); if ( file_exists( $temp_zip ) ) { unlink( $temp_zip ); // Remove if temp export zip file already exists. } if ( ! $zip->open( $temp_zip, \ZipArchive::CREATE ) ) { set_transient( 'srfm_bulk_action_message', [ 'action' => $action, 'message' => __( 'Entries export failed. Unable to create the ZIP file.', 'sureforms' ), 'type' => 'error', ], 30 // Transient expires in 30 seconds. ); // Redirect to prevent form resubmission. wp_safe_redirect( admin_url( 'admin.php?page=sureforms_entries' ) ); exit; } } $success = 0; $csv_files = []; // Array of csv files to delete after zip file is closed. foreach ( $form_ids as $form_id ) { $results = self::get_entries_data( $entry_ids, $form_id ); if ( empty( $results ) ) { continue; } $sanitized_form_title = sanitize_title( get_the_title( $form_id ) ); $sanitized_form_title = ! empty( $sanitized_form_title ) ? $sanitized_form_title : "srfm-entries-{$form_id}"; // Just incase if we have some unnamed forms. $csv_filename = 'srfm-entries-' . $sanitized_form_title . '.csv'; $csv_filepath = $temp_dir . $csv_filename; if ( file_exists( $csv_filepath ) ) { // Remove if temp export csv file already exists. unlink( $csv_filepath ); } $stream = fopen( $csv_filepath, 'wb' ); // phpcs:ignore -- Using fopen to decrease the memory use. if ( ! is_resource( $stream ) ) { continue; } $csv_files[] = $csv_filepath; // Step 1: Build consistent map of block_id => latest key and label. $block_key_map_and_labels = self::build_block_key_map_and_labels( $results ); $block_key_map = $block_key_map_and_labels['map']; $block_labels = $block_key_map_and_labels['labels']; // Step 2: Build CSV header using block_labels. self::write_csv_header( $stream, $block_labels ); // Step 3: Write each row using block_id -> matched key. self::write_csv_rows( $stream, $results, $block_key_map ); fclose( $stream ); // phpcs:ignore -- Using fclose as we have used fopen above to decrease the memory use. // If we are only exporting single form, than create a single csv file rather than a zip file. if ( $is_single_form ) { // Set headers to download the single csv file. header( 'Content-Type: text/csv' ); header( sprintf( 'Content-disposition: attachment; filename="%s"', $csv_filename ) ); // Set filename header. header( 'Content-Length: ' . filesize( $csv_filepath ) ); // Output the zip file. readfile( $csv_filepath ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_read_readfile -- We are not using WP_Filesystem here as we need readfile functionality. unlink( $csv_filepath ); // Clean up the temporary zip file. exit; // Exit and don't proceed further because it is a single form. } // Make sure we don't create empty csv files inside zip. if ( ! filesize( $csv_filepath ) ) { $stream = false; // Clean up memory. $csv_filepath = ''; // Reset path. $csv_filename = ''; // Reset filename. continue; } // Add file to the zip if we are processing more than one form. if ( ! $is_single_form && $zip->addFile( $csv_filepath, $csv_filename ) ) { $success++; } $stream = false; // Clean up memory. $csv_filepath = ''; // Reset path. $csv_filename = ''; // Reset filename. } if ( 0 === $success ) { set_transient( 'srfm_bulk_action_message', [ 'action' => $action, 'message' => __( 'Entries export failed.', 'sureforms' ), 'type' => 'error', ], 30 // Transient expires in 30 seconds. ); // Redirect to prevent form resubmission. wp_safe_redirect( admin_url( 'admin.php?page=sureforms_entries' ) ); exit; } if ( ! $zip->close() ) { set_transient( 'srfm_bulk_action_message', [ 'action' => $action, 'message' => __( 'Entries export failed. Problem occured while closing the ZIP file.', 'sureforms' ), 'type' => 'error', ], 30 // Transient expires in 30 seconds. ); // Redirect to prevent form resubmission. wp_safe_redirect( admin_url( 'admin.php?page=sureforms_entries' ) ); exit; } // Set headers to download the zip. header( 'Content-Type: application/zip' ); header( 'Content-disposition: attachment; filename="SureForms Entries.zip"' ); // Set filename header. header( 'Content-Length: ' . filesize( $temp_zip ) ); // Output the zip file. readfile( $temp_zip ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_read_readfile -- We are not using WP_Filesystem here as we need readfile functionality. unlink( $temp_zip ); // Clean up the temporary zip file. if ( ! empty( $csv_files ) && is_array( $csv_files ) ) { foreach ( $csv_files as $csv_file ) { if ( file_exists( $csv_file ) ) { // Clean any remaining temporary csv files after zip is exported. // Doing this keeps us safe from taking unnecessary server space. unlink( $csv_file ); } } } exit; } // If there are entry IDs selected, process the bulk action. if ( ! empty( $entry_ids ) ) { // Update the status of each selected entry. foreach ( $entry_ids as $entry_id ) { self::handle_entry_status( Helper::get_integer_value( $entry_id ), $action ); } set_transient( 'srfm_bulk_action_message', [ 'action' => $action, 'count' => count( $entry_ids ), ], 30 ); // Transient expires in 30 seconds. // Redirect to prevent form resubmission. wp_safe_redirect( admin_url( 'admin.php?page=sureforms_entries' ) ); exit; } } /* * Display admin notice for bulk actions. * * @since 0.0.13 * @return void / public static function display_bulk_action_notice() { $bulk_action_message = get_transient( 'srfm_bulk_action_message' ); if ( ! $bulk_action_message ) { return; } // Manually delete the transient after retrieval to prevent it from being displayed again after page reload. delete_transient( 'srfm_bulk_action_message' ); $action = $bulk_action_message['action']; $count = $bulk_action_message['count'] ?? 0; $message = $bulk_action_message['message'] ?? ''; $type = $bulk_action_message['type'] ?? 'success'; if ( ! $message && $count ) { // If we don't have $message added manually, and have $count then lets create message according to the action as default. switch ( $action ) { case 'read': case 'unread': // translators: %1$d refers to the number of entries, %2$s refers to the status (read or unread). $message = sprintf( _n( '%1$d entry was successfully marked as %2$s.', '%1$d entries were successfully marked as %2$s.', $count, 'sureforms' ), $count, $action ); break; case 'trash': // translators: %1$d refers to the number of entries, %2$s refers to the action (trash). $message = sprintf( _n( '%1$d entry was successfully moved to trash.', '%1$d entries were successfully moved to trash.', $count, 'sureforms' ), $count ); break; case 'restore': // translators: %1$d refers to the number of entries, %2$s refers to the action (restore). $message = sprintf( _n( '%1$d entry was successfully restored.', '%1$d entries were successfully restored.', $count, 'sureforms' ), $count ); break; case 'delete': // translators: %1$d refers to the number of entries, %2$s refers to the action (delete). $message = sprintf( _n( '%1$d entry was permanently deleted.', '%1$d entries were permanently deleted.', $count, 'sureforms' ), $count ); break; default: return; } } ?> <div class="notice notice-<?php echo esc_attr( $type ); ?> is-dismissible"><p><?php echo esc_html( $message ); ?></p></div> <?php } /* * Check if the current page is a trash list. * * @since 0.0.13 * @return bool / public static function is_trash_view() { return isset( $_GET['view'] ) && 'trash' === sanitize_text_field( wp_unslash( $_GET['view'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Nonce verification is not required here as we are not doing any database work. } /* * Common function to update the status of an entry. * * @param int $entry_id The ID of the entry to update. * @param string $action The action to perform. * @param string $view The view to handle redirection. * * @since 0.0.13 * @return void / public static function handle_entry_status( $entry_id, $action, $view = '' ) { switch ( $action ) { case 'restore': Entries::update( $entry_id, [ 'status' => 'unread' ] ); break; case 'unread': case 'read': case 'trash': Entries::update( $entry_id, [ 'status' => $action ] ); break; case 'delete': Entries::delete( $entry_id ); break; default: break; } $url = wp_nonce_url( admin_url( 'admin.php?page=sureforms_entries' ), 'srfm_entries_action' ); // Redirect to appropriate page after action is performed. if ( 'details' === $view ) { $url = add_query_arg( [ 'entry_id' => $entry_id, 'view' => 'details', ], $url ); } wp_safe_redirect( $url ); } /* * Define the data for the "id" column and return the markup. * * @param array $item Column data. * * @since 0.0.13 * @return string / protected function column_id( $item ) { $entry_id = esc_attr( $item['ID'] ); $view_url = wp_nonce_url( add_query_arg( [ 'entry_id' => $entry_id, 'view' => 'details', 'action' => 'read', ], admin_url( 'admin.php?page=sureforms_entries' ) ), 'srfm_entries_action' ); ob_start(); ?> <strong><a class="row-title" href="<?php echo esc_url( $view_url ); ?>"><?php echo esc_html__( 'Entry #', 'sureforms' ); ?><?php echo esc_html( $entry_id ); ?></a></strong> <?php return ob_get_clean() . $this->row_actions( $this->package_row_actions( $item ) ); } /* * Define the data for the "form name" column and return the markup. * * @param array $item Column data. * * @since 0.0.13 * @return string / protected function column_form_name( $item ) { $form_name = get_the_title( $item['form_id'] ); // translators: %1$s is the word "form", %2$d is the form ID. $form_name = ! empty( $form_name ) ? $form_name : sprintf( 'SureForms %1$s #%2$d', esc_html__( 'Form', 'sureforms' ), Helper::get_integer_value( $item['form_id'] ) ); ob_start(); ?> <strong><a class="row-title" href="<?php echo esc_url( get_the_permalink( $item['form_id'] ) ); ?>" target="_blank" rel="noopener noreferrer"><?php echo esc_html( $form_name ); ?></a></strong> <?php return ob_get_clean(); } /* * Define the data for the "status" column and return the markup. * * @param array $item Column data. * * @since 0.0.13 * @return string / protected function column_status( $item ) { $translated_status = ''; switch ( $item['status'] ) { case 'read': $translated_status = esc_html__( 'Read', 'sureforms' ); break; case 'unread': $translated_status = esc_html__( 'Unread', 'sureforms' ); break; case 'trash': $translated_status = esc_html__( 'Trash', 'sureforms' ); break; } ob_start(); ?> <span class="status-<?php echo esc_attr( $item['status'] ); ?>"><?php echo esc_html( $translated_status ); ?></span> <?php return ob_get_clean(); } /* * Define the data for the "first field" column and return the markup. * * It excludes certain fields from the form data (honeypot, reCAPTCHA, sender email, * and form ID) before determining the first non-excluded field value to display. * * @param array $item Column data. * * @since 0.0.13 * @return string / protected function column_first_field( $item ) { // Get the first field key. $first_key = Helper::get_string_value( key( $item['form_data'] ) ); $excluded_fields = Helper::get_excluded_fields(); $form_data = array_diff_key( $item['form_data'], array_flip( $excluded_fields ) ); $first_field = reset( $form_data ); $field_name = ! empty( $form_data ) ? array_keys( $form_data )[0] : ''; $field_block_name = Helper::get_block_name_from_field( $field_name ); /* * Filters the first field value for entries list table display. * * This filter allows the pro plugin to process and modify the first field value * that appears in the entries list table. Since pro plugin fields may contain * complex data structures or special formatting requirements that the core plugin * cannot anticipate, this filter provides a mechanism for the pro plugin to: * * - Transform complex field data into displayable format * - Apply custom formatting for pro-specific field types * - Handle data sanitization and validation * - Ensure consistent display across different field types * * The filter is called after the core plugin determines the first field but before * it's displayed, allowing pro plugin to override the value entirely. * * @since 1.11.0 * * @param string $first_field The current first field value (empty string by default). * @param array $field_data Field information array containing: * - 'field_name': The internal field name/key * - 'field_block_name': The block type identifier * * @return string The processed first field value ready for display in the entries table. / $set_entry_first_field = apply_filters( 'srfm_entry_first_field', $first_field, [ 'field_name' => $field_name, 'field_block_name' => $field_block_name, ] ); if ( ! empty( $set_entry_first_field ) ) { $first_field = sanitize_text_field( $set_entry_first_field ); } if ( false !== strpos( $field_name, 'srfm-upload' ) ) { $filenames = []; if ( ! empty( $first_field ) && is_array( $first_field ) ) { foreach ( $first_field as $file ) { $file_url = urldecode( strval( $file ) ); $filenames[] = pathinfo( $file_url, PATHINFO_BASENAME ); } } $first_field = implode( ', ', $filenames ); } // Check if the first field is a textarea. if ( strpos( $first_key, 'srfm-textarea' ) !== false ) { // Strip HTML tags from the textarea value. // Regular expression to match HTML tags. $regex = '/<[^>]>/'; $decode_html_content = html_entity_decode( reset( $item['form_data'] ) ); // Replace HTML tags with empty string. $first_field = preg_replace( $regex, '', $decode_html_content ); // Truncate the textarea value to 15 characters if it's too long. if ( strlen( $first_field ) > 12 ) { $first_field = substr( $first_field, 0, 12 ) . '...'; } } else { // Get the first field value directly. $first_field = ! empty( $set_entry_first_field ) ? ( is_array( $set_entry_first_field ) ? __( 'Array', 'sureforms' ) : $set_entry_first_field ) : reset( $item['form_data'] ); $max_length = 28; if ( strlen( $first_field ) > $max_length ) { $first_field = substr( $first_field, 0, $max_length - 3 ) . '...'; } } // Return the first field value in a paragraph element. ob_start(); ?> <p><?php echo esc_html( $first_field ); ?></p> <?php return ob_get_clean(); } /** * Define the data for the "submitted on" column and return the markup. * * @param array $item Column data. * * @since 0.0.13 * @return string / protected function column_created_at( $item ) { $created_at = gmdate( 'Y/m/d \a\t g:i a', strtotime( $item['created_at'] ) ); ob_start(); ?> <span><?php echo esc_html__( 'Published', 'sureforms' ); ?><br><?php echo esc_html( $created_at ); ?></span> <?php return ob_get_clean(); } /* * Returns array of row actions for packages. * * @param array $item Column data. * * @since 0.0.13 * @return array / protected function package_row_actions( $item ) { $view_url = wp_nonce_url( add_query_arg( [ 'entry_id' => esc_attr( $item['ID'] ), 'view' => 'details', 'action' => 'read', ], admin_url( 'admin.php?page=sureforms_entries' ) ), 'srfm_entries_action' ); $trash_url = wp_nonce_url( add_query_arg( [ 'entry_id' => esc_attr( $item['ID'] ), 'action' => 'trash', ], admin_url( 'admin.php?page=sureforms_entries' ) ), 'srfm_entries_action' ); ob_start(); ?> <a href="<?php echo esc_url( $view_url ); ?>"><?php echo esc_html__( 'View', 'sureforms' ); ?></a> <?php $view_action = ob_get_clean(); ob_start(); ?> <a href="<?php echo esc_url( $trash_url ); ?>"><?php echo esc_html__( 'Trash', 'sureforms' ); ?></a> <?php $trash_action = ob_get_clean(); $row_actions = [ 'view' => $view_action, 'trash' => $trash_action, ]; if ( self::is_trash_view() ) { // Remove the Trash and View actions when entry is in trash. unset( $row_actions['trash'] ); unset( $row_actions['view'] ); // Add Restore and Delete actions. $restore_url = wp_nonce_url( add_query_arg( [ 'entry_id' => esc_attr( $item['ID'] ), 'action' => 'restore', ], admin_url( 'admin.php?page=sureforms_entries' ) ), 'srfm_entries_action' ); $delete_url = wp_nonce_url( add_query_arg( [ 'entry_id' => esc_attr( $item['ID'] ), 'action' => 'delete', ], admin_url( 'admin.php?page=sureforms_entries' ) ), 'srfm_entries_action' ); ob_start(); ?> <a href="<?php echo esc_url( $restore_url ); ?>"><?php echo esc_html__( 'Restore', 'sureforms' ); ?></a> <?php $restore_action = ob_get_clean(); ob_start(); ?> <a href="<?php echo esc_url( $delete_url ); ?>"><?php echo esc_html__( 'Delete Permanently', 'sureforms' ); ?></a> <?php $delete_action = ob_get_clean(); $row_actions['restore'] = $restore_action; $row_actions['delete'] = $delete_action; } return apply_filters( 'sureforms_entries_table_row_actions', $row_actions, $item ); } /* * Extra controls to be displayed between bulk actions and pagination. * * @param string $which Which table navigation is it... Is it top or bottom. * * @since 0.0.13 * @return void / protected function extra_tablenav( $which ) { if ( 'top' !== $which ) { return; } if ( 'top' === $which ) { ?> <div class="alignleft actions"> <?php $this->display_month_filter(); $this->display_form_filter(); /* * Action hook right after entry form opening tag. * * @since 1.3.0 / do_action( 'srfm_after_entry_postbox_title' ); if ( $this->is_filter_enabled() ) { ?> <a href="<?php echo esc_url( add_query_arg( 'page', 'sureforms_entries', admin_url( 'admin.php' ) ) ); ?>" class="button button-link clear-filter"><?php esc_html_e( 'Clear Filter', 'sureforms' ); ?></a> <?php } ?> </div> <?php } } /* * Generates the table navigation above or below the table. * * @param string $which is it the top or bottom of the table. * * @since 0.0.13 * @return void / protected function display_tablenav( $which ) { if ( 'top' === $which ) { wp_nonce_field( 'srfm_entries_action' ); } ?> <div class="tablenav <?php echo esc_attr( $which ); ?>"> <?php if ( $this->has_items() ) { ?> <div class="alignleft actions bulkactions"> <?php $this->bulk_actions( $which ); ?> </div> <?php } $this->extra_tablenav( $which ); $this->pagination( $which ); ?> </div> <?php if ( 'bottom' === $which ) { ?> <script> (function() { /* * This is edge case JavaScript. * This will help us to override the default bulk action * behaviour of WordPress List Table and force the form * to submit even if no item is selected for the Export. * * Note: Internal JS is needed in this scenario. / const form = document.querySelector('form'); form.addEventListener('submit', function(e) { const formData = new FormData(form); if ('export' === formData.get('action')) { // Add style in head tag to display:none the #no-items-selected const style = document.createElement('style'); style.innerHTML = '#no-items-selected { display: none; }'; document.head.appendChild(style); form.submit(); } }); }()); </script> <?php } } /* * Returns true if any filter is enabled. * * @since 1.2.1 * @return bool / protected function is_filter_enabled() { $intersect = array_intersect( [ 'form_filter', 'month_filter', ], array_keys( wp_unslash( $_GET ) ), // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- This is fine because we are not using it to save in the database. ); return ! empty( $intersect ); } /* * Display the available form name to filter entries. * * @since 0.0.13 * @return void / protected function display_form_filter() { $forms = $this->get_available_forms(); // Added the phpcs ignore nonce verification as no database operations are performed in this function. $view = isset( $_GET['view'] ) ? sanitize_text_field( wp_unslash( $_GET['view'] ) ) : 'all'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?> <input type="hidden" name="view" value="<?php echo esc_attr( $view ); ?>" /> <select name="form_filter"> <option value="all"><?php echo esc_html__( 'All Form Entries', 'sureforms' ); ?></option> <?php foreach ( $forms as $form_id => $form_name ) { $form_name = ! empty( $form_name ) ? $form_name : sprintf( 'SureForms %1$s #%2$d', esc_html__( 'Form', 'sureforms' ), esc_attr( $form_id ) ); // Adding the phpcs ignore nonce verification as no database operations are performed in this function. // phpcs:ignore WordPress.Security.NonceVerification.Recommended $selected = isset( $_GET['form_filter'] ) && Helper::get_integer_value( sanitize_text_field( wp_unslash( $_GET['form_filter'] ) ) ) === $form_id ? ' selected="selected"' : ''; ?> <option value="<?php echo esc_attr( $form_id ); ?>"<?php echo $selected; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>><?php echo esc_html( $form_name ); ?></option> <?php } ?> </select> <input type="submit" name="filter_action" value="Filter" class="button" /> <?php } /* * Display the month and year from which the entries are present to filter entries according to time. * * @since 0.0.13 * @return void / protected function display_month_filter() { if ( isset( $_GET['month_filter'] ) && ! isset( $_GET['_wpnonce'] ) \|\| ( isset( $_GET['_wpnonce'] ) && ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'srfm_entries_action' ) ) ) { return; } $view = isset( $_GET['view'] ) ? sanitize_text_field( wp_unslash( $_GET['view'] ) ) : 'all'; $form_id = isset( $_GET['form_filter'] ) && 'all' !== $_GET['form_filter'] ? absint( wp_unslash( $_GET['form_filter'] ) ) : 0; $months = Entries::get_available_months( self::get_where_conditions( $form_id, $view, [ 'search_filter', 'month_filter' ] ) ); // Sort the months in descending order according to key. krsort( $months ); ?> <select name="month_filter"> <option value="all"><?php echo esc_html__( 'All Dates', 'sureforms' ); ?></option> <?php foreach ( $months as $month_value => $month_label ) { $selected = isset( $_GET['month_filter'] ) && Helper::get_string_value( $month_value ) === sanitize_text_field( wp_unslash( $_GET['month_filter'] ) ) ? ' selected="selected"' : ''; ?> <option value="<?php echo esc_attr( $month_value ); ?>" <?php echo $selected; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>><?php echo esc_html( $month_label ); ?></option> <?php } ?> </select> <?php } /* * List of CSS classes for the "WP_List_Table" table element. * * @since 0.0.13 * @return array<string> / protected function get_table_classes() { $mode = get_user_setting( 'posts_list_mode', 'list' ); $mode_class = esc_attr( 'table-view-' . $mode ); $classes = [ 'widefat', 'striped', $mode_class, ]; $columns_class = $this->get_column_count() > 5 ? 'many' : 'few'; $classes[] = "has-{$columns_class}-columns"; return $classes; } /* * Get the views for the entries table. * * @since 0.0.13 * @return array<string,string> / protected function get_views() { // Get the status count of the entries. $unread_entries_count = Entries::get_total_entries_by_status( 'unread' ); // Get the current view (All, Read, Unread, Trash) to highlight the selected one. // Adding the phpcs ignore nonce verification as no complex operations are performed here only the count of the entries is required. $current_view = isset( $_GET['view'] ) ? sanitize_text_field( wp_unslash( $_GET['view'] ) ) : 'all'; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Nonce verification is not needed here and this is admin page request only. // Define the base URL for the views (without query parameters). $base_url = wp_nonce_url( admin_url( 'admin.php?page=sureforms_entries' ), 'srfm_entries_action' ); // Create the array of view links. $views = [ 'all' => sprintf( '<a href="%1$s" class="%2$s">%3$s <span class="count">(%4$d)</span></a>', add_query_arg( 'view', 'all', $base_url ), 'all' === $current_view ? 'current' : '', esc_html__( 'All', 'sureforms' ), $this->all_entries_count ), 'unread' => sprintf( '<a href="%1$s" class="%2$s">%3$s <span class="count">(%4$d)</span></a>', add_query_arg( 'view', 'unread', $base_url ), 'unread' === $current_view ? 'current' : '', esc_html__( 'Unread', 'sureforms' ), $unread_entries_count ), ]; // Only add the Trash view if the count is greater than 0. if ( $this->trash_entries_count > 0 ) { $views['trash'] = sprintf( '<a href="%1$s" class="%2$s">%3$s <span class="count">(%4$d)</span></a>', add_query_arg( 'view', 'trash', $base_url ), 'trash' === $current_view ? 'current' : '', esc_html__( 'Trash', 'sureforms' ), $this->trash_entries_count ); } return $views; } /* * Get the entries data. * * @param int $per_page Number of entries to fetch per page. * @param int $current_page Current page number. * @param string $view The view to fetch the entries count from. * @param int\|null $form_id The ID of the form to fetch entries for. * * @since 0.0.13 * @return array / private function table_data( $per_page, $current_page, $view, $form_id = 0 ) { $allowed_orderby_columns = $this->get_sortable_columns(); // Disabled the nonce verification due to the sorting functionality, will need custom implementation to display the sortable columns to accommodate nonce check. // phpcs:disable WordPress.Security.NonceVerification.Recommended $orderby = isset( $_GET['orderby'] ) ? sanitize_text_field( wp_unslash( $_GET['orderby'] ) ) : 'created_at'; $orderby = isset( $allowed_orderby_columns[ $orderby ] ) ? $orderby : 'created_at'; // If the orderby column is not in the allowed columns, set it to default. $orderby = 'id' === $orderby ? strtoupper( $orderby ) : $orderby; $order = isset( $_GET['order'] ) ? sanitize_text_field( wp_unslash( $_GET['order'] ) ) : 'desc'; $order = 'asc' === $order ? 'asc' : 'desc'; // If the order is not asc, set it to desc. // phpcs:enable WordPress.Security.NonceVerification.Recommended $offset = ( $current_page - 1 ) $per_page; $where_condition = self::get_where_conditions( $form_id, $view ); $this->data = Entries::get_all( [ 'limit' => $per_page, 'offset' => $offset, 'where' => $where_condition, 'orderby' => $orderby, 'order' => $order, ] ); $this->entries_count = Entries::get_total_entries_by_status( $view, $form_id, $where_condition ); return $this->data; } /** * Populate the forms filter dropdown. * * @since 0.0.13 * @return array<string> / private function get_available_forms() { $forms = get_posts( [ 'post_type' => SRFM_FORMS_POST_TYPE, 'posts_per_page' => -1, 'orderby' => 'title', 'order' => 'ASC', ] ); $available_forms = []; if ( ! empty( $forms ) ) { foreach ( $forms as $form ) { // Populate the array with the form ID as key and form title as value. $available_forms[ $form->ID ] = $form->post_title; } } return $available_forms; } /* * Return the where conditions to add to the query for filtering entries. * * @param int $form_id The ID of the form to fetch entries for. * @param string $view The view to fetch entries for. * @param array<string> $exclude_filters Added @since 1.2.1 and we pass filter keys to exclude from where clause. * * @since 1.2.1 Converted to static method. * @since 0.0.13 * @return array<mixed> / private static function get_where_conditions( $form_id = 0, $view = 'all', $exclude_filters = [] ) { if ( ! isset( $_GET['_wpnonce'] ) \|\| ( isset( $_GET['_wpnonce'] ) && ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'srfm_entries_action' ) ) ) { // Return the default condition to fetch all entries which are not in trash. return [ [ [ 'key' => 'status', 'compare' => '!=', 'value' => 'trash', ], ], ]; } $where_condition = []; // Set the where condition based on the view for populating the month filter dropdown. switch ( $view ) { case 'all': $where_condition[] = [ [ 'key' => 'status', 'compare' => '!=', 'value' => 'trash', ], ]; break; case 'trash': case 'unread': $where_condition[] = [ [ 'key' => 'status', 'compare' => '=', 'value' => $view, ], ]; break; default: break; } // If form ID is set, then we need to add the form ID condition to the where clause to fetch entries only for that form. if ( 0 < $form_id ) { $where_condition[] = [ [ 'key' => 'form_id', 'compare' => '=', 'value' => $form_id, ], ]; } if ( ! in_array( 'search_filter', $exclude_filters, true ) ) { // Handle the search according to entry ID. $search_term = isset( $_GET['search_filter'] ) ? sanitize_text_field( wp_unslash( $_GET['search_filter'] ) ) : ''; // Apply search filter, currently search is based on entry ID only and not text. if ( ! empty( $search_term ) ) { $where_condition[] = [ [ 'key' => 'ID', 'compare' => 'LIKE', 'value' => $search_term, ], ]; } } if ( ! in_array( 'month_filter', $exclude_filters, true ) ) { // Filter data based on the month and year selected. $month_filter = isset( $_GET['month_filter'] ) ? sanitize_text_field( wp_unslash( $_GET['month_filter'] ) ) : ''; // Apply month filter. if ( ! empty( $month_filter ) && 'all' !== $month_filter ) { $year = substr( $month_filter, 0, 4 ); $month = substr( $month_filter, 4, 2 ); $start_date = sprintf( '%s-%s-01', $year, $month ); $end_date = gmdate( 'Y-m-t', strtotime( $start_date ) ); // Using two conditions to filter the entries based on the start and end date as the base class does not support BETWEEN operator. $where_condition[] = [ [ 'key' => 'created_at', 'compare' => '>=', 'value' => $start_date, ], [ 'key' => 'created_at', 'compare' => '<=', 'value' => $end_date, ], ]; } } return $where_condition; } /* * Get additional bulk actions like restore and delete for the trash view. * * @param array $bulk_actions The bulk actions array. * * @since 0.0.13 * @return array<string,string> / private static function get_additional_bulk_actions( $bulk_actions ) { if ( ! self::is_trash_view() ) { return $bulk_actions; } return [ 'restore' => __( 'Restore', 'sureforms' ), 'delete' => __( 'Delete Permanently', 'sureforms' ), ]; } /* * Get the entries data for export. * * @param array $entry_ids The entry IDs to fetch. * @param int $form_id The form ID to fetch entries for. * * @since 1.6.1 * @return array The entries data. / private static function get_entries_data( $entry_ids, $form_id ) { if ( empty( $entry_ids ) \|\| empty( $form_id ) ) { return []; } // SELECT FROM %1s WHERE ID IN (%2s) AND form_id=%d. return Entries::get_all( [ 'where' => [ [ [ 'key' => 'ID', 'compare' => 'IN', 'value' => $entry_ids, ], [ 'key' => 'form_id', 'compare' => '=', 'value' => $form_id, ], ], ], 'columns' => 'ID, form_data', // Query only needed columns for the performance. ], false ); } /** * Get all the entries data except the ones which are in trash. * * @since 1.6.1 * @return array The entries data. / private static function get_all_entries_except_trash() { return Entries::get_all( [ 'where' => [ [ [ 'key' => 'status', 'compare' => '!=', 'value' => 'trash', ], ], ], 'columns' => 'ID', ], false ); } /* * Get the entries based on the search term. * * @param string $search_term The search term to filter entries. * * @since 1.6.1 * @return array The entries data. / private static function get_entries_based_on_search( $search_term ) { return Entries::get_all( [ 'where' => [ [ [ 'key' => 'ID', 'compare' => 'LIKE', 'value' => $search_term, ], ], ], 'columns' => 'ID', ], false ); } /* * Step 1: Build consistent map of block_id => latest key and label. * * @param array $results The results to process. * * @since 1.6.1 * @return array the map of block_id => key and block labels. / private static function build_block_key_map_and_labels( $results ) { // If there are no results, return empty map and labels. if ( empty( $results ) ) { return [ 'map' => [], 'labels' => [], ]; } $block_key_map = []; $block_labels = []; foreach ( $results as $result ) { if ( empty( $result['form_data'] ) \|\| ! is_array( $result['form_data'] ) ) { // Probably invalid submission. continue; } /* * The structure of the keys is like srfm-[block_type]-[block_id]-lbl-[label]. * We need to get the block_id and label from the key and create a map of block_id => key. * This will help us to create a consistent CSV file with the same order of columns. / foreach ( $result['form_data'] as $key => $value ) { $block_id = Helper::get_block_id_from_key( $key ); $label = Helper::get_field_label_from_key( $key ); // Only store latest key for each block_id. $block_key_map[ $block_id ] = $key; // Only update the label if it is not already set. if ( ! isset( $block_labels[ $block_id ] ) ) { $block_labels[ $block_id ] = $label; } } } return [ 'map' => $block_key_map, 'labels' => $block_labels, ]; } /* * Step 2: Build CSV header using block_labels. * * @param resource $stream The file stream to write to. * @param array $block_labels The labels for the blocks. * * @since 1.6.1 * @return void / private static function write_csv_header( $stream, $block_labels ) { if ( empty( $stream ) \|\| empty( $block_labels ) ) { return; } $labels = array_merge( [ __( 'ID', 'sureforms' ) ], array_values( $block_labels ) ); fputcsv( $stream, $labels ); } /* * Step 3: Write each row using block_id -> matched key. * * @param resource $stream The file stream to write to. * @param array $results The results to write to the CSV. * @param array $block_key_map The map of block IDs to SureForms keys. * * @since 1.6.1 * @return void / private static function write_csv_rows( $stream, $results, $block_key_map ) { if ( empty( $stream ) \|\| empty( $results ) \|\| empty( $block_key_map ) ) { return; } foreach ( $results as $result ) { if ( empty( $result['form_data'] ) \|\| ! is_array( $result['form_data'] ) ) { continue; } $form_data = $result['form_data']; $values = [ '#' . absint( $result['ID'] ) ]; foreach ( $block_key_map as $block_id => $srfm_key ) { $field_value = ''; // Try to find a key that matches this block ID in current form_data and use it's value. foreach ( $form_data as $key => $value ) { if ( strpos( $key, $block_id ) !== false ) { $field_value = $value; break; } } $_value = self::normalize_field_values( $srfm_key, $field_value ); $values[] = $_value ? $_value : ''; } fputcsv( $stream, $values ); } } /* * Normalize the field values for the CSV file. * 1. If it is array then first check if it is from upload field value. Process the upload file urls and convert array into comma separated string. * 2. If it is not upload field value then convert array into comma separated string. * * @param string $srfm_key The SureForms key for the field. * @param mixed $field_value The field value to normalize. * * @since 1.6.1 * @return string The normalized field value. */ private static function normalize_field_values( $srfm_key, $field_value ) { if ( empty( $srfm_key ) \|\| empty( $field_value ) ) { return ''; } // Check if the field value is an array and if it is from an upload field. if ( false !== strpos( $srfm_key, 'srfm-upload' ) && is_array( $field_value ) ) { // Decode the URLs, then create a comma separated string. return implode( ', ', array_map( 'urldecode', $field_value ) ); } return is_array( $field_value ) ? implode( ', ', $field_value ) : $field_value; } }	48.08 KB	2025-11-17 18:39
📄 single-entry.php <?php /** * SureForms Single Entries Page. * * @since 0.0.13 * @package sureforms. / namespace SRFM\Admin\Views; use SRFM\Inc\Database\Tables\Entries; use SRFM\Inc\Helper; /* * Exit if accessed directly. / if ( ! defined( 'ABSPATH' ) ) { exit; } /* * Single entry page. * * @since 0.0.13 / class Single_Entry { /* * Stores the entry ID. * * @var string\|null $entry_id ID for the specific entry. * @since 0.0.13 / private $entry_id; /* * Stores the entry data for the specified entry ID. * * @var array<mixed>\|null $entry Entry data for the specified entry ID. * @since 0.0.13 / private $entry; /* * Initialize the properties. * * @since 0.0.13 / public function __construct() { if ( isset( $_GET['_wpnonce'] ) && ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'srfm_entries_action' ) ) { return; } $this->entry_id = isset( $_GET['entry_id'] ) ? intval( sanitize_text_field( wp_unslash( $_GET['entry_id'] ) ) ) : null; $this->entry = $this->entry_id ? Entries::get( $this->entry_id ) : null; } /* * Render the single entry page if an entry is found. * * @since 0.0.13 * @return void / public function render() { if ( ! $this->entry ) { return; } $entry_status = $this->entry['status']; $submitted_on = gmdate( 'Y/m/d \a\t g:i a', strtotime( $this->entry['created_at'] ) ); // Translators: %d is the form ID. $form_name = ! empty( get_the_title( $this->entry['form_id'] ) ) ? get_the_title( $this->entry['form_id'] ) : sprintf( esc_html__( 'SureForms Form #%d', 'sureforms' ), intval( $this->entry['form_id'] ) ); $meta_data = $this->entry['form_data']; $excluded_fields = [ 'srfm-honeypot-field', 'g-recaptcha-response', 'srfm-sender-email-field' ]; ?> <div class="wrap"> <h1 class="wp-heading-inline"> <?php / Translators: %s is the entry id. / printf( esc_html__( 'Entry #%s', 'sureforms' ), esc_html( $this->entry_id ) ); ?> </h1> <form method="post" action="<?php echo esc_url( admin_url( "admin.php?page=sureforms_entries&entry_id={$this->entry_id}&view=details" ) ); ?>"> <!-- check for nonce, referrer, etc. --> <?php /* * Action hook right after entry form opening tag. * * @since 1.3.0 / do_action( 'srfm_after_entry_form_opening_tag', $this->entry, $this ); ?> <div id="poststuff"> <div id="post-body" class="metabox-holder columns-2"> <div id="postbox-container-1" class="postbox-container"> <?php /* * Action hook right before entry form opening tag. * * @since 1.3.0 / do_action( 'srfm_before_entry_submission_info', $this->entry, $this ); $this->render_upsell_placeholder( 'notes' ); /* * Action hook right after the entry notes. * * @since 1.9.0 / do_action( 'srfm_after_entry_notes', $this->entry, $this ); $this->render_submission_info( $form_name, $entry_status, $submitted_on ); /* * Action hook right after entry form opening tag. * * @since 1.3.0 / do_action( 'srfm_after_entry_submission_info', $this->entry, $this ); $this->render_upsell_placeholder( 'resend-notification' ); ?> </div> <div id="postbox-container-2" class="postbox-container"> <?php $this->render_form_data( $meta_data, $excluded_fields ); ?> </div> <div id="postbox-container-3" class="postbox-container"> <?php $this->render_entry_logs( $this->entry['logs'] ); ?> </div> </div><!-- /post-body --> <br class="clear"> </div> <!-- /poststuff --> <?php /* * Action hook right before entry form closing tag. * * @since 1.3.0 / do_action( 'srfm_before_entry_form_closing_tag', $this->entry, $this ); ?> </form> </div> <?php } /* * Add tooltip wrapper. * * @param string $position Tooltip position. * @param callable $element_cb Element callback. * @param callable $tooltip_cb Tooltip callback. * @since 1.3.0 * @return void / protected function add_tooltip( $position, $element_cb, $tooltip_cb ) { $upsell_url = Helper::get_sureforms_website_url( 'pricing', [ 'utm_medium' => 'srfm_entries_management' ] ); ?> <div class="srfm-tooltip"> <?php call_user_func( $element_cb ); ?> <div class="tooltip-wrap <?php echo esc_attr( $position ); ?>"> <div class="tooltip-content"> <div class="tooltip-text"> <?php call_user_func( $tooltip_cb ); ?> </div> <a target="_blank" href="<?php echo esc_url( $upsell_url ); ?>"><?php esc_html_e( 'Upgrade', 'sureforms' ); ?></a> </div> <i></i> </div> </div> <?php } /* * Renders the upsell placeholder. * * @param string $for The placeholder type. * @since 1.3.0 * @return void / protected function render_upsell_placeholder( $for ) { if ( Helper::has_pro() ) { return; } switch ( $for ) { case 'edit-button': $position = 'top'; $element_cb = static function() { ?> <button class="button button-link srfm-edit-entry" type="button"> <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M11.2411 2.99111L12.3661 1.86612C12.8543 1.37796 13.6457 1.37796 14.1339 1.86612C14.622 2.35427 14.622 3.14573 14.1339 3.63388L7.05479 10.713C6.70234 11.0654 6.26762 11.3245 5.78993 11.4668L4 12L4.53319 10.2101C4.67548 9.73239 4.93456 9.29767 5.28701 8.94522L11.2411 2.99111ZM11.2411 2.99111L13 4.74999M12 9.33333V12.5C12 13.3284 11.3284 14 10.5 14H3.5C2.67157 14 2 13.3284 2 12.5V5.49999C2 4.67157 2.67157 3.99999 3.5 3.99999H6.66667" stroke="#2271b1" stroke-linecap="round" stroke-linejoin="round"/> </svg> <?php esc_html_e( 'Edit', 'sureforms' ); ?> </button> <?php }; $tooltip_cb = static function() { ?> <h3><?php esc_html_e( 'Unlock Edit Form Entires', 'sureforms' ); ?></h3> <p><?php esc_html_e( 'With the SureForms Starter plan, you can easily edit your entries to suit your needs.', 'sureforms' ); ?></p> <?php }; break; case 'resend-notification': $position = 'left'; $element_cb = static function() { ?> <button type="button" class="button srfm-resend-notification-trigger-btn"><?php esc_html_e( 'Resend Notification', 'sureforms' ); ?></button> <?php }; $tooltip_cb = static function() { ?> <h3><?php esc_html_e( 'Unlock Resend Email Notification', 'sureforms' ); ?></h3> <p><?php esc_html_e( 'With the SureForms Starter plan, you can effortlessly resend email notifications, ensuring your important updates reach their recipients with ease.', 'sureforms' ); ?></p> <?php }; break; case 'notes': $position = 'left'; $element_cb = static function() { ?> <div id="submitdiv" class="postbox entry-notes"> <div class="postbox-header"> <h2><?php esc_html_e( 'Entry Notes', 'sureforms' ); ?></h2> <button type="button" id="srfm-add-entry-note" class="srfm-add-entry-note-button"> <?php esc_html_e( 'Add Note', 'sureforms' ); ?> <svg width='16' height='16' viewBox='0 0 16 16' fill='none' xmlns='http://www.w3.org/2000/svg'><path d='M8 3.33594V12.6693' stroke='black' stroke-width='1.25' stroke-linecap='round' stroke-linejoin='round'/><path d='M3.33337 8H12.6667' stroke='black' stroke-width='1.25' stroke-linecap='round' stroke-linejoin='round'/></svg> </button> </div> <div class="inside"> <div class="srfm-entry-note-wrapper"> <div class="entry-notes-container"></div> <div class="add-notes-field"> <textarea disabled id="srfm-entry-note" rows="5"></textarea> <button id="srfm-add-note" type="button" class="button"><?php esc_html_e( 'Submit Note', 'sureforms' ); ?></button> </div> </div> </div> </div> <?php }; $tooltip_cb = static function() { ?> <h3><?php esc_html_e( 'Unlock Add Note', 'sureforms' ); ?></h3> <p><?php esc_html_e( 'With the SureForms Starter plan, enhance your submitted form entries by adding personalized notes for better clarity and tracking.', 'sureforms' ); ?></p> <?php }; break; default: // Do nothing. return; } $this->add_tooltip( $position, $element_cb, $tooltip_cb ); } /* * Render the submission information for a specific entry. * * @param string $form_name The form title/name. * @param string $entry_status The entry status (read/unread). * @param string $submitted_on The submission date. * @since 0.0.13 * @return void / private function render_submission_info( $form_name, $entry_status, $submitted_on ) { $mark_as_unread_url = add_query_arg( 'action', 'unread' ); $user_id = Helper::get_integer_value( $this->entry['user_id'] ); $user_info = 0 !== $user_id ? get_userdata( $user_id ) : null; $user_name = $user_info ? $user_info->display_name : ''; $user_profile_url = $user_info ? get_author_posts_url( $user_id ) : ''; ?> <div id="sureform_form_name_meta" class="postbox "> <div class="postbox-header"> <!-- Removed "hndle ui-sortable-handle" class from h2 to remove the draggable stylings. --> <h2><?php esc_html_e( 'Submission Info', 'sureforms' ); ?></h2> </div> <div class="inside"> <table style="border-collapse: separate; border-spacing: 5px 5px;"> <tbody> <!-- TODO: Add Type and User info. --> <tr> <td><b><?php esc_html_e( 'Entry:', 'sureforms' ); ?></b></td> <td>#<?php echo esc_attr( $this->entry_id ); ?></td> </tr> <tr> <td><b><?php esc_html_e( 'Form Name:', 'sureforms' ); ?></b></td> <td><a target="_blank" rel="noopener" href="<?php the_permalink( $this->entry['form_id'] ); ?>"><?php echo esc_attr( $form_name ); ?></a></td> </tr> <?php if ( ! empty( $this->entry['submission_info']['user_ip'] ) ) { ?> <tr> <td><b><?php esc_html_e( 'User IP:', 'sureforms' ); ?></b></td> <td><a target="_blank" rel="noopener" href="https://ipinfo.io/"><?php echo esc_attr( $this->entry['submission_info']['user_ip'] ); ?></a></td> </tr> <?php } ?> <tr> <td><b><?php esc_html_e( 'Browser:', 'sureforms' ); ?></b></td> <td><?php echo esc_attr( $this->entry['submission_info']['browser_name'] ); ?></td> </tr> <tr> <td><b><?php esc_html_e( 'Device:', 'sureforms' ); ?></b></td> <td><?php echo esc_attr( $this->entry['submission_info']['device_name'] ); ?></td> </tr> <?php if ( 0 !== $user_id ) { ?> <tr> <td><b><?php esc_html_e( 'User:', 'sureforms' ); ?></b></td> <td><a target="_blank" rel="noopener" href="<?php echo esc_url( $user_profile_url ); ?>"><?php echo esc_attr( $user_name ); ?></a></td> </tr> <?php } ?> <tr> <td><b><?php esc_html_e( 'Status:', 'sureforms' ); ?></b></td> <td> <span style="text-transform: capitalize;"> <?php echo esc_attr( $entry_status ); ?> </span> <?php if ( 'read' === $entry_status ) { ?> <span> \| <a href="<?php echo esc_url( $mark_as_unread_url ); ?>" id="srfm-entry-mark-unread" style="font-size: 12px;"><?php esc_html_e( 'Mark as Unread', 'sureforms' ); ?></a></span> <?php } ?> </td> </tr> <tr> <td><b><?php esc_html_e( 'Submitted On:', 'sureforms' ); ?></b></td> <td><?php echo esc_attr( $submitted_on ); ?></td> </tr> </tbody> </table> </div> </div> <?php } /* * Render the form data for a specific entry. * * @param array<mixed> $meta_data The form meta data. * @param array<string> $excluded_fields Fields to exlude from display. * @since 0.0.13 * @return void / private function render_form_data( $meta_data, $excluded_fields ) { ?> <div id="sureform_entry_meta" class="postbox srfm-form-data"> <div class="postbox-header"> <!-- Removed "hndle ui-sortable-handle" class from h2 to remove the draggable stylings. --> <h2><?php esc_html_e( 'Form Data', 'sureforms' ); ?></h2> <?php /* * Action hook right after entry form opening tag. * * @since 1.3.0 / do_action( 'srfm_after_entry_postbox_title', $this->entry, $this ); $this->render_upsell_placeholder( 'edit-button' ); ?> </div> <div class="inside"> <style> .file-cards-container { display: flex; flex-wrap: wrap; gap: 10px; } .file-card { border: 1px solid #ddd; border-radius: 4px; padding: 10px; width: 100px; / Reduced width / text-align: center; background: #f9f9f9; font-size: 12px; / Reduced font size for smaller cards / } .file-card-image img { max-width: 80px; / Reduced max width / max-height: 80px; / Reduced max height / object-fit: cover; } .file-card-icon { font-size: 24px; / Reduced icon size / margin-bottom: 5px; } .file-card-details { margin-bottom: 5px; font-weight: bold; } .file-card-url a { color: #007bff; text-decoration: none; font-size: 12px; / Reduced font size / } .file-card-url a:hover { text-decoration: underline; } </style> <table class="widefat striped"> <tbody> <tr> <th><b><?php esc_html_e( 'Fields', 'sureforms' ); ?></b></th> <th><b><?php esc_html_e( 'Values', 'sureforms' ); ?></b></th> </tr> <?php foreach ( $meta_data as $field_name => $value ) { if ( in_array( $field_name, $excluded_fields, true ) ) { continue; } if ( false === str_contains( $field_name, '-lbl-' ) ) { continue; } $label = explode( '-lbl-', $field_name )[1]; // Getting the encrypted label. we are removing the block slug here. $label = explode( '-', $label )[0]; $label = $label ? Helper::decrypt( $label ) : ''; $field_block_name = Helper::get_block_name_from_field( $field_name ); /* * Fires before rendering a field in the entry details view. * * This action allows other packages (like Pro, Business) to process and render fields * with custom data structures that the core plugin cannot handle. Since the core plugin * does not know the structure of data from other packages, this action provides a way * for those packages to properly process and display their field data. * * @since 1.11.0 * * @param array $field_data Field data containing: * 'value' => mixed The field value * 'label' => string The field name/key * 'block_name' => string The block type identifier * 'processed_label' => string The decrypted human readable label / do_action( 'srfm_entry_render_field', [ 'value' => $value, 'label' => $field_name, 'block_name' => $field_block_name, 'processed_label' => $label, ] ); /* * Filters whether to add a field row in the entry details table. * * This filter allows skipping rows for fields that cannot be processed with the * core plugin's structure. Fields from other packages may have complex data structures * that could cause fatal errors if processed normally. Those packages can use the * 'srfm_entry_render_field' action to render their fields and return false here * to prevent the core plugin from attempting to process them. * * @since 1.11.0 * * @param bool $should_add_field_row Whether to add the field row. Default true. * @param array $field_data Field data containing: * 'value' => mixed The field value * 'field_name' => string The field name/key * 'block_name' => string The block type identifier * * @return bool Whether to add the field row to the table. / $should_add_field_row = apply_filters( 'srfm_should_add_field_row', true, [ 'value' => $value, 'field_name' => $field_name, 'block_name' => $field_block_name, ] ); if ( true !== $should_add_field_row ) { continue; } if ( ! Helper::has_pro() && 'srfm-repeater' === $field_block_name ) { continue; } ?> <tr> <td style="word-break: break-word;"><b><?php echo $label ? wp_kses_post( $label ) : ''; ?></b></td> <?php if ( false !== strpos( $field_name, 'srfm-upload' ) ) { ?> <td> <div class="file-cards-container"> <?php $upload_values = $value; if ( ! empty( $upload_values ) && is_array( $upload_values ) ) { foreach ( $upload_values as $file_url ) { $file_url = urldecode( Helper::get_string_value( $file_url ) ); if ( ! empty( $file_url ) ) { if ( ! file_exists( Helper::convert_fileurl_to_filepath( $file_url ) ) ) { continue; } $file_type = pathinfo( $file_url, PATHINFO_EXTENSION ); $is_image = in_array( $file_type, [ 'gif', 'png', 'bmp', 'jpg', 'jpeg', 'svg' ], true ); ?> <div class="file-card" data-fileurl-hash="<?php echo esc_attr( md5( $file_url ) ); ?>"> <?php if ( $is_image ) { ?> <div class="file-card-image"> <a target="_blank" href="<?php echo esc_url( $file_url ); ?>"> <img src="<?php echo esc_url( $file_url ); ?>" alt="<?php esc_attr_e( 'Image', 'sureforms' ); ?>" /> </a> </div> <?php } else { ?> <div class="file-card-icon"> <?php // Display a file icon for non-image files. ?> <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" d="M4 16.333V4.667a1.333 1.333 0 011.333-1.333h13.334a1.333 1.333 0 011.333 1.333v11.666a1.333 1.333 0 01-1.333 1.333H5.333A1.333 1.333 0 014 16.333zm8-8h2v6h-2v-6zm-2 8h6v2H10v-2zm-6-6h4v6H4v-6zm0-4h16v2H4V6z"/></svg> </div> <div class="file-card-details"> <span><?php echo esc_html( strtoupper( $file_type ) ); ?></span> </div> <?php } ?> <div class="file-card-url"> <a target="_blank" href="<?php echo esc_url( $file_url ); ?>"><?php echo esc_html__( 'Open', 'sureforms' ); ?></a> </div> </div> <?php } } } ?> </div> </td> <?php } elseif ( false !== strpos( $field_name, 'srfm-url' ) ) { ?> <td><a target="_blank" href="<?php echo esc_url( $value ); ?>"><?php echo esc_url( $value ); ?></a></td> <?php // we need to html_entity_decode the value to display the html content. and check field textarea. } elseif ( strpos( $field_name, 'srfm-textarea' ) !== false ) { ?> <td><div class='sureform_entry_meta_textarea'><?php echo Helper::esc_textarea( html_entity_decode( $value ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- using a custom escaping function. ?></div></td> <?php } elseif ( apply_filters( 'srfm_entry_render_field_custom_value', false, $field_name ) ) { ?> <?php echo wp_kses_post( apply_filters( 'srfm_entry_custom_value', '', $value ) ); ?> <?php } else { ?> <td><?php echo false !== strpos( $value, PHP_EOL ) ? wp_kses_post( wpautop( $value ) ) : wp_kses_post( $value ); ?></td> <?php } ?> </tr> <?php } ?> </tbody> </table> </div> </div> <?php } /* * Render the entry logs for a specific entry. * * @param array<mixed> $entry_logs Entry logs stored in the database. * @since 0.0.13 * @return void */ private function render_entry_logs( $entry_logs ) { ob_start(); ?> <div id="sureform_entry_meta" class="postbox srfm-entry-logs"> <div class="postbox-header"> <!-- Removed "hndle ui-sortable-handle" class from h2 to remove the draggable stylings. --> <h2><?php esc_html_e( 'Entry Logs', 'sureforms' ); ?></h2> </div> <div class="inside"> <table class="striped entry-logs-table"> <tbody> <?php if ( ! empty( $entry_logs ) ) { ?> <?php foreach ( $entry_logs as $log ) { ?> <tr> <td class="entry-log-container"> <div class="entry-log"> <h4 class="entry-log-title"> <?php echo esc_html( $log['title'] ); ?> <?php echo esc_html( gmdate( '\a\t Y-m-d H:i:s', $log['timestamp'] ) ); ?> </h4> <div class="entry-log-messages"> <?php foreach ( $log['messages'] as $message ) { ?> <p><?php echo wp_kses_post( $message ); ?></p> <?php } ?> </div> </div> </td> </tr> <?php } ?> <?php } else { ?> <p class="no-logs-found"><?php esc_html_e( 'No logs found for this entry.', 'sureforms' ); ?></p> <?php } ?> </tbody> </table> </div> </div> <?php $content = ob_get_clean(); $allowed_tags = array_merge( wp_kses_allowed_html( 'post' ), [ 'svg' => [ 'width' => true, 'height' => true, 'fill' => true, 'viewbox' => true, 'xmlns' => true, ], 'path' => [ 'd' => true, 'opacity' => true, 'class' => true, 'stroke-width' => true, 'stroke-linecap' => true, 'stroke-linejoin' => true, ], ] ); echo wp_kses( apply_filters( 'srfm_entry_logs_markup', $content, $entry_logs ), $allowed_tags ); } }	21.73 KB	2025-11-17 18:39

Terminal