Wala shell

Advanced PHP File Manager

Server IP: 127.0.0.1 | PHP Version: 8.3.30 | Domains Hosted: 54

Name	Size	Last Modified
📁 ..	-	2025-11-17 18:39
📄 activator.php <?php /** * Sureforms flush rewrite rules. * * @package sureforms. * @since 0.0.1 / namespace SRFM\Inc; use SRFM\Inc\Global_Settings\Email_Summary; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Activation Class. * * @since 0.0.1 / class Activator { use Get_Instance; /* * Activation handler function. * * @since 0.0.1 * @return void / public static function activate() { $email_summary_options = get_option( 'srfm_email_summary_settings_options' ); $enable_email_summary = is_array( $email_summary_options ) ? $email_summary_options['srfm_email_summary'] : ''; if ( $enable_email_summary ) { Email_Summary::schedule_weekly_entries_email(); } /* * Reset rewrite rules to avoid go to permalinks page * through deleting the database options to force WP to do it * because of on activation not work well flush_rewrite_rules() */ delete_option( 'rewrite_rules' ); update_option( '__srfm_do_redirect', true ); } }	1.01 KB	2025-11-17 18:39
📄 admin-ajax.php <?php /** * Sureforms Admin Ajax Class. * * Class file for public functions. * * @package sureforms / namespace SRFM\Inc; use BSF_UTM_Analytics; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } if ( ! function_exists( 'get_plugins' ) ) { require_once ABSPATH . 'wp-admin/includes/plugin.php'; } /* * Public Class * * @since 0.0.1 / class Admin_Ajax { use Get_Instance; /* * Constructor * * @since 0.0.1 / public function __construct() { add_action( 'wp_ajax_sureforms_recommended_plugin_activate', [ $this, 'required_plugin_activate' ] ); add_action( 'wp_ajax_sureforms_recommended_plugin_install', 'wp_ajax_install_plugin' ); add_action( 'wp_ajax_sureforms_integration', [ $this, 'generate_data_for_suretriggers_integration' ] ); add_filter( SRFM_SLUG . '_admin_filter', [ $this, 'localize_script_integration' ] ); // adding support for rest-nonce endpoint. To regenerate latest nonce incase of form submission failure. add_action( 'wp_ajax_rest-nonce', [ $this, 'print_rest_nonce' ], 999 ); add_action( 'wp_ajax_nopriv_rest-nonce', [ $this, 'print_rest_nonce' ], 999 ); } /* * Required Plugin Activate * * @return void * @since 0.0.1 / public function required_plugin_activate() { $response_data = [ 'message' => $this->get_error_msg( 'permission' ) ]; if ( ! Helper::current_user_can() ) { wp_send_json_error( $response_data ); } if ( empty( $_POST ) ) { $response_data = [ 'message' => $this->get_error_msg( 'invalid' ) ]; wp_send_json_error( $response_data ); } /* * Nonce verification. / if ( ! check_ajax_referer( 'sf_plugin_manager_nonce', 'security', false ) ) { $response_data = [ 'message' => $this->get_error_msg( 'nonce' ) ]; wp_send_json_error( $response_data ); } if ( ! isset( $_POST['init'] ) \|\| ! sanitize_text_field( wp_unslash( $_POST['init'] ) ) ) { wp_send_json_error( [ 'success' => false, 'message' => __( 'No plugin specified', 'sureforms' ), ] ); } $plugin_init = isset( $_POST['init'] ) ? sanitize_text_field( wp_unslash( $_POST['init'] ) ) : ''; $plugin_slug = isset( $_POST['slug'] ) ? sanitize_text_field( wp_unslash( $_POST['slug'] ) ) : ''; $activate = activate_plugin( $plugin_init, '', false, true ); if ( is_wp_error( $activate ) ) { wp_send_json_error( [ 'success' => false, 'message' => $activate->get_error_message(), ] ); } if ( class_exists( 'BSF_UTM_Analytics' ) && is_callable( 'BSF_UTM_Analytics::update_referer' ) ) { $plugin_slug = pathinfo( $plugin_slug, PATHINFO_FILENAME ); BSF_UTM_Analytics::update_referer( 'sureforms', $plugin_slug ); } wp_send_json_success( [ 'success' => true, 'message' => __( 'Plugin Successfully Activated', 'sureforms' ), ] ); } /* * Get ajax error message. * * @param string $type Message type. * @return string * @since 0.0.2 / public function get_error_msg( $type ) { if ( ! isset( $this->errors[ $type ] ) ) { $type = 'default'; } if ( ! isset( $this->errors ) ) { return ''; } return $this->errors[ $type ]; } /* * Localize the variables required for integration plugins. * * @param array<mixed> $values localized values. * @return array<mixed> * @since 0.0.1 / public function localize_script_integration( $values ) { $is_screen_sureforms_menu = Helper::validate_request_context( 'sureforms_menu', 'page' ); return array_merge( $values, [ 'ajax_url' => admin_url( 'admin-ajax.php' ), 'sfPluginManagerNonce' => wp_create_nonce( 'sf_plugin_manager_nonce' ), 'plugin_installer_nonce' => wp_create_nonce( 'updates' ), 'isRTL' => is_rtl(), 'current_screen_id' => $is_screen_sureforms_menu ? 'sureforms_menu' : '', 'form_id' => get_post() ? get_post()->ID : '', 'suretriggers_nonce' => wp_create_nonce( 'suretriggers_nonce' ), ] ); } /* * Generates data required for suretriggers integration * * @since 0.0.8 * @return void / public function generate_data_for_suretriggers_integration() { if ( ! Helper::current_user_can() ) { wp_send_json_error( [ 'message' => __( 'You do not have permission to access this page.', 'sureforms' ) ] ); } if ( ! check_ajax_referer( 'suretriggers_nonce', 'security', false ) ) { wp_send_json_error( [ 'message' => __( 'Invalid nonce.', 'sureforms' ) ] ); } if ( empty( $_POST['formId'] ) ) { wp_send_json_error( [ 'message' => __( 'Form ID is required.', 'sureforms' ) ] ); } if ( ! Helper::is_suretriggers_ready() ) { wp_send_json_error( [ 'code' => 'invalid_secret_key', 'message' => __( 'OttoKit is not configured properly.', 'sureforms' ), ] ); } $form_id = Helper::get_integer_value( sanitize_text_field( wp_unslash( $_POST['formId'] ) ) ); $form = get_post( $form_id ); if ( is_null( $form ) \|\| SRFM_FORMS_POST_TYPE !== $form->post_type ) { wp_send_json_error( [ 'message' => __( 'Invalid form ID.', 'sureforms' ) ] ); } // Translators: %s: Form ID. $form_name = ! empty( $form->post_title ) ? $form->post_title : sprintf( __( 'SureForms id: %s', 'sureforms' ), $form_id ); $api_url = apply_filters( 'suretriggers_get_iframe_url', SRFM_SURETRIGGERS_INTEGRATION_BASE_URL ); // This is the format of data required by SureTriggers for adding iframe in target id. $body = [ 'client_id' => 'SureForms', 'st_embed_url' => $api_url, 'embedded_identifier' => $form_id, 'target' => 'suretriggers-iframe-wrapper', // div where we want SureTriggers to add iframe should have this target id. 'event' => [ 'label' => __( 'Form Submitted', 'sureforms' ), 'value' => 'sureforms_form_submitted', 'description' => __( 'Runs when a form is submitted', 'sureforms' ), ], 'summary' => $form_name, 'selected_options' => [ 'form_id' => [ 'value' => $form_id, 'label' => $form_name, ], ], 'integration' => 'SureForms', 'sample_response' => [ 'form_id' => $form_id, 'to_emails' => [ 'dev-email@wpengine.local', ], 'form_name' => $form_name, 'data' => $this->get_form_fields( $form_id ), ], ]; // Adding entry_id in body sample response if do_not_store_entries is not enabled. $compliance = get_post_meta( $form_id, '_srfm_compliance', true ); $do_not_store_entries = is_array( $compliance ) && isset( $compliance[0]['do_not_store_entries'] ) ? $compliance[0]['do_not_store_entries'] : null; if ( ! $do_not_store_entries ) { $body['sample_response']['entry_id'] = 12; } wp_send_json_success( [ 'message' => 'success', 'data' => apply_filters( 'srfm_suretriggers_integration_data_filter', $body, $form_id ), ] ); } /* * This function populates data for particular form. * * @param int $form_id Form ID. * @since 0.0.8 * @return array<mixed> / public function get_form_fields( $form_id ) { if ( empty( $form_id ) \|\| ! is_int( $form_id ) ) { return []; } if ( SRFM_FORMS_POST_TYPE !== get_post_type( $form_id ) ) { return []; } $post = get_post( $form_id ); if ( is_null( $post ) ) { return []; } $blocks = parse_blocks( $post->post_content ); $blocks = array_filter( $blocks, static function( $block ) { if ( 'srfm/html' === $block['blockName'] ) { return false; } return true; } ); $blocks = array_values( $blocks ); if ( empty( $blocks ) ) { return []; } $data = []; foreach ( $blocks as $block ) { if ( ! empty( $block['blockName'] ) && 0 === strpos( $block['blockName'], 'srfm/' ) ) { if ( ! empty( $block['attrs']['slug'] ) ) { $data[ $block['attrs']['slug'] ] = $this->get_sample_data( $block['blockName'] ); } } } if ( empty( $data ) ) { return []; } return $data; } /* * Returns sample data for a block. * * @param string $block_name Block name. * @since 0.0.8 * @return mixed / public function get_sample_data( $block_name ) { if ( empty( $block_name ) ) { return __( 'Sample data', 'sureforms' ); } $dummy_data = [ 'srfm/input' => __( 'Sample input data', 'sureforms' ), 'srfm/email' => 'noreply@sureforms.com', 'srfm/textarea' => __( 'Sample textarea data', 'sureforms' ), 'srfm/number' => 123, 'srfm/checkbox' => 'checkbox value', 'srfm/gdpr' => 'GDPR value', 'srfm/phone' => '1234567890', 'srfm/address' => __( 'Address data', 'sureforms' ), 'srfm/address-compact' => __( 'Address data', 'sureforms' ), 'srfm/dropdown' => __( 'Selected dropdown option', 'sureforms' ), 'srfm/multi-choice' => __( 'Selected Multichoice option', 'sureforms' ), 'srfm/radio' => __( 'Selected radio option', 'sureforms' ), 'srfm/submit' => __( 'Submit', 'sureforms' ), 'srfm/url' => 'https://example.com', 'srfm/date-time-picker' => '2022-01-01 12:00:00', 'srfm/hidden' => __( 'Hidden Value', 'sureforms' ), 'srfm/slider' => 50, 'srfm/password' => 'DummyPassword123', 'srfm/rating' => 4, 'srfm/upload' => 'https://example.com/uploads/file.pdf', ]; /* * Filter the sample data for specific block types. * * Allows plugins and themes to add custom sample data for their block types * or modify existing sample data. This is particularly useful for dynamic * block types that require complex sample data structures. * * @since 0.0.8 * * @param array $dummy_data { * Array of sample data keyed by block name. * * @type string\|array $block_name Sample data for the block. * } * @param array $filter_args { * Additional filter arguments. * * @type string $block_name The name of the block being processed. * } / $dummy_data = Helper::apply_filters_as_array( 'srfm_sample_data_filter', $dummy_data, [ 'block_name' => $block_name ] ); if ( ! empty( $dummy_data[ $block_name ] ) ) { return $dummy_data[ $block_name ]; } return __( 'Sample data', 'sureforms' ); } /* * This function will echo wp_rest nonce * was required to provide nonce for fallback of wp.apiFetch * * @since 1.2.4 * @return void */ public function print_rest_nonce() { echo esc_js( wp_create_nonce( 'wp_rest' ) ); exit; } }	10.37 KB	2025-11-17 18:39
📁 ai-form-builder	-	2025-11-17 18:39
📄 background-process.php <?php /** * Sureforms Background Process. * * @package sureforms. * @since 0.0.3 / namespace SRFM\Inc; use SRFM\Inc\Database\Tables\Entries; use SRFM\Inc\Traits\Get_Instance; use WP_REST_Server; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Sureforms Background Process Class. * * @since 0.0.3 / class Background_Process { use Get_Instance; /* * Namespace. * * @var string / protected $namespace = 'sureforms/v1'; /* * Submission Id. * * @var int / protected $submission_id = 0; /* * Form Id. * * @var int / protected $form_id = 0; /* * Submission Data. * * @var array<mixed> / protected $submission_data = []; /* * Constructor * * @since 0.0.3 / public function __construct() { add_action( 'rest_api_init', [ $this, 'register_custom_endpoint' ] ); } /* * Add custom API Route for 'After Submission' background process. * * @since 0.0.3 * @return void / public function register_custom_endpoint() { register_rest_route( $this->namespace, '/after-submission/(?P<submission_id>[0-9]+)', [ 'methods' => WP_REST_Server::READABLE, 'callback' => [ $this, 'handle_after_submission' ], 'permission_callback' => '__return_true', 'args' => [ 'submission_id' => [ 'required' => true, 'validate_callback' => static function( $param ) { return is_integer( Helper::get_integer_value( $param ) ) && 0 < $param; }, ], ], ] ); } /* * Handle 'After Submission' background process * * @param \WP_REST_Request $request Request object or array containing form data. * @since 0.0.3 * @return \WP_REST_Response\|\WP_Error Response object on success, or WP_Error object on failure. / public function handle_after_submission( $request ) { $this->submission_id = Helper::get_integer_value( $request->get_param( 'submission_id' ) ); $extras_decoded = $this->get_decoded_extras( $this->submission_id ); $is_after_submission_process_triggered = $extras_decoded['is_after_submission_process_triggered'] ?? false; if ( $is_after_submission_process_triggered ) { return new \WP_Error( 'process_already_triggered', __( 'After submission process has already been triggered for this submission.', 'sureforms' ), [ 'status' => 403 ] ); } $nonce = Helper::get_string_value( $request->get_param( 'after_submit_nonce' ) ); if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'srfm_after_submission_' . Helper::get_string_value( $this->submission_id ) ) ) { return new \WP_Error( 'rest_nonce_failed', __( 'Nonce verification failed.', 'sureforms' ), [ 'status' => 403 ] ); } if ( ! ( 0 < $this->submission_id ) ) { return new \WP_Error( 'incomplete_request', __( 'Submission id missing.', 'sureforms' ), [ 'status' => 403 ] ); } // Get the entries data for further processing, related to webhooks. $entry_data = Entries::get( $this->submission_id ); $this->form_id = Helper::get_integer_value( $entry_data['form_id'] ); $this->submission_data = Helper::get_array_value( $entry_data['form_data'] ); if ( ! $this->trigger_after_submission_process() ) { return new \WP_Error( 'process_failed', __( 'Something went wrong. We have logged the error for further investigation', 'sureforms' ), [ 'status' => 403 ] ); } return new \WP_REST_Response( [] ); } /* * Handle 'After Submission' background process * * @since 0.0.3 * @return bool / public function trigger_after_submission_process() { if ( ! is_integer( $this->form_id ) \|\| ! is_array( $this->submission_data ) ) { return false; } $form_data = $this->submission_data; $form_data['form_id'] = $this->form_id; $form_data['submission_id'] = $this->submission_id; // Refers to the entry ID. /* * Hook for enabling background processes. * * @param array $form_data form data related to submission. / do_action( 'srfm_after_submission_process', $form_data ); // Update the extras column to track that the after submission process was triggered. if ( 0 < $this->submission_id ) { $extras_decoded = $this->get_decoded_extras( $this->submission_id ); // Merge new data. $updated_extras = array_merge( $extras_decoded, [ 'is_after_submission_process_triggered' => true ] ); // Update entry. Entries::update( $this->submission_id, [ 'extras' => wp_json_encode( $updated_extras ) ] ); } return true; } /* * Get and decode extras data from entry. * * @param int $submission_id Submission ID. * @since 1.13.2 * @return array<mixed> Decoded extras array. */ protected function get_decoded_extras( $submission_id ) { $entry_data = Entries::get( $submission_id ); $extras = Helper::get_array_value( $entry_data['extras'] )[0] ?? []; // Decode existing extras (if any). $extras_decoded = is_string( $extras ) ? json_decode( Helper::get_string_value( $extras ), true ) : ( is_array( $extras ) ? $extras : [] ); if ( ! is_array( $extras_decoded ) ) { $extras_decoded = []; } return $extras_decoded; } }	5.16 KB	2025-11-17 18:39
📁 blocks	-	2025-11-17 18:39
📁 compatibility	-	2025-11-17 18:39
📄 create-new-form.php <?php /** * Create new Form with Template and return the form ID. * * @package sureforms. * @since 0.0.1 / namespace SRFM\Inc; use SRFM\Inc\Traits\Get_Instance; use WP_Error; use WP_REST_Response; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Create New Form. * * @since 0.0.1 / class Create_New_Form { use Get_Instance; /* * Constructor * * @since 0.0.1 / public function __construct() { add_action( 'rest_api_init', [ $this, 'register_custom_endpoint' ] ); } /* * Add custom API Route create-new-form. * * @return void * @since 0.0.1 / public function register_custom_endpoint() { register_rest_route( 'sureforms/v1', '/create-new-form', [ 'methods' => 'POST', 'callback' => [ $this, 'create_form' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], ] ); } /* * Get default post metas for form when creating using template. * * @return array<string, array<int, int\|string>> Default meta keys. * @since 0.0.2 / public static function get_default_meta_keys() { return [ '_srfm_submit_button_text' => [ __( 'Submit', 'sureforms' ) ], '_srfm_use_label_as_placeholder' => [ '' ], '_srfm_single_page_form_title' => [ 1 ], '_srfm_instant_form' => [ '' ], '_srfm_form_container_width' => [ 650 ], '_srfm_bg_type' => [ 'image' ], '_srfm_bg_image' => [ '' ], '_srfm_cover_image' => [ '' ], '_srfm_bg_color' => [ '#ffffff' ], '_srfm_submit_width_backend' => [ 'max-content' ], '_srfm_submit_alignment' => [ 'left' ], '_srfm_submit_alignment_backend' => [ '100%' ], '_srfm_submit_width' => [ '' ], '_srfm_inherit_theme_button' => [ '' ], '_srfm_additional_classes' => [ '' ], '_srfm_submit_type' => [ 'message' ], '_srfm_form_recaptcha' => [ 'none' ], ]; } /* * Create new form post from selected template. * * @param \WP_REST_Request $data Form Markup Data. * * @return WP_Error\|WP_REST_Response * @since 0.0.1 / public static function create_form( $data ) { $nonce = Helper::get_string_value( $data->get_header( 'X-WP-Nonce' ) ); $nonce = sanitize_text_field( $nonce ); if ( ! wp_verify_nonce( $nonce, 'wp_rest' ) ) { wp_send_json_error( [ 'message' => __( 'Nonce verification failed.', 'sureforms' ), ] ); } $form_info = $data->get_body(); $form_info_obj = json_decode( $form_info ); // Check if JSON decoding was successful and $form_info_obj is an object. if ( json_last_error() !== JSON_ERROR_NONE \|\| ! is_object( $form_info_obj ) ) { wp_send_json_error( [ 'message' => __( 'Invalid JSON format.', 'sureforms' ), ] ); } $required_properties = [ 'template_name', 'form_data' ]; // Check if required properties exist in the $form_info_obj. foreach ( $required_properties as $property ) { if ( ! property_exists( $form_info_obj, $property ) ) { wp_send_json_error( [ 'message' => __( 'Missing required properties in form info.', 'sureforms' ), ] ); } } $title = $form_info_obj->template_name ?? ''; $content = $form_info_obj->form_data ?? ''; // Create post metas for the creating form. $post_metas = apply_filters( 'srfm_modify_ai_post_metas', [], $form_info_obj, ); $post_id = wp_insert_post( [ 'post_title' => $title, 'post_content' => $content, 'meta_input' => $post_metas, 'post_status' => 'draft', 'post_type' => 'sureforms_form', ] ); if ( ! empty( $post_id ) ) { /* * Update _srfm_is_ai_generated meta to true. * If the request is coming here then the form is AI generated. */ update_post_meta( $post_id, '_srfm_is_ai_generated', true ); return new WP_REST_Response( [ 'message' => __( 'SureForms Form created successfully.', 'sureforms' ), 'id' => $post_id, ] ); } wp_send_json_error( [ 'message' => __( 'Error creating SureForms Form, ', 'sureforms' ), ] ); } }	4.1 KB	2025-11-17 18:39
📁 database	-	2025-11-17 18:39
📁 email	-	2025-11-17 18:39
📄 events-scheduler.php <?php /** * SureForms events scheduler class. * * @package sureforms. * @since 0.0.2 / namespace SRFM\Inc; use SRFM\Inc\Traits\Get_Instance; /* * SureForms events scheduler class. * * @since 0.0.2 / class Events_Scheduler { use Get_Instance; /* * Constructor * * @since 0.0.2 / public function __construct() { add_action( 'init', [ $this, 'srfm_schedule_daily_action' ] ); } /* * Schedules a action that runs every 24 hours for SureForms. * * @hooked - init * @uses as_has_scheduled_action() To check if the action is already scheduled. * @uses as_schedule_recurring_action() To schedule a recurring action. * @link https://actionscheduler.org/api/ * @since 0.0.2 * @return void / public function srfm_schedule_daily_action() { // Check if the action is not scheduled. Then schedule a new action. if ( false === as_has_scheduled_action( 'srfm_daily_scheduled_action' ) ) { // Shedule a recurring action srfm_daily_scheduled_events that runs every 24 hours. as_schedule_recurring_action( strtotime( 'tomorrow' ), DAY_IN_SECONDS, 'srfm_daily_scheduled_action', [], 'sureforms', true ); } } /* * Unschedule any action. * * @param string $hook Event hook name. * @since 0.0.2 * @return void */ public static function unschedule_events( $hook ) { as_unschedule_all_actions( $hook ); } }	1.34 KB	2025-11-17 18:39
📄 export.php <?php /** * Sureforms export. * * @package sureforms. * @since 0.0.1 / namespace SRFM\Inc; use SRFM\Inc\Traits\Get_Instance; use WP_REST_Server; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Load Defaults Class. * * @since 0.0.1 / class Export { use Get_Instance; /* * Unserialized post metas. * * @var array<string> / public $unserialized_post_metas = [ '_srfm_conditional_logic', '_srfm_email_notification', '_srfm_form_confirmation', '_srfm_compliance', '_srfm_forms_styling', '_srfm_integrations_webhooks', '_srfm_instant_form_settings', '_srfm_page_break_settings', '_srfm_conversational_form', '_srfm_premium_common', '_srfm_forms_styling_starter', '_srfm_user_registration_settings', ]; /* * Constructor * * @since 0.0.1 / public function __construct() { add_action( 'wp_ajax_export_form', [ $this, 'handle_export_form' ] ); add_action( 'rest_api_init', [ $this, 'register_custom_endpoint' ] ); } /* * Get unserialized post meta keys. * * Retrieves the list of post meta keys that need to be unserialized during export. * Allows filtering of meta keys via 'srfm_export_and_import_post_meta_keys' filter. * * @since 1.9.0 * @return array<string> Array of post meta keys to unserialize. / public function get_unserialized_post_metas() { return Helper::apply_filters_as_array( 'srfm_export_and_import_post_meta_keys', $this->unserialized_post_metas ); } /* * Get forms with meta by post IDs. * Uses: * - On websitedemos.net, for exporting the Spectra Block Patterns & Pages with SureForms form. * * @since 1.13.0 * @param array<int, string> $post_ids Array of post IDs to retrieve forms for. * @return array Array of forms with their post data and meta data. / public function get_forms_with_meta( $post_ids = [] ) { $posts = []; foreach ( $post_ids as $post_id ) { $post_id = intval( $post_id ); $post = get_post( $post_id ); $post_meta = get_post_meta( $post_id ); $posts[] = [ 'post' => $post, 'post_meta' => $post_meta, ]; } // Unserialize the post metas that are serialized. // This is needed because the post metas are serialized before saving. foreach ( $posts as $key => $post ) { $post_metas = isset( $post['post_meta'] ) && is_array( $post['post_meta'] ) ? $post['post_meta'] : []; foreach ( $this->get_unserialized_post_metas() as $meta_key ) { if ( isset( $post_metas[ $meta_key ] ) && is_array( $post_metas[ $meta_key ] ) ) { $post_metas[ $meta_key ] = maybe_unserialize( $post_metas[ $meta_key ][0] ); } } $posts[ $key ]['post_meta'] = $post_metas; } return $posts; } /* * Handle Export form * * @since 0.0.1 * @return void / public function handle_export_form() { if ( empty( $_POST['nonce'] ) \|\| ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['nonce'] ) ), 'export_form_nonce' ) ) { $error_message = __( 'Nonce verification failed.', 'sureforms' ); $error_data = [ 'error' => $error_message, ]; wp_send_json_error( $error_data ); } if ( isset( $_POST['post_id'] ) ) { $post_ids = explode( ',', sanitize_text_field( wp_unslash( $_POST['post_id'] ) ) ); } else { $post_ids = []; } $posts = $this->get_forms_with_meta( $post_ids ); wp_send_json( $posts ); } /* * Import Forms with Meta * Uses: * - In Design Library for importing the Spectra Block Patterns and Pages with SureForms form. * * @param array<array<array<string>>> $data Form data to import. * @param string $default_status Default post status for imported forms. Default is 'draft'. * * @since 1.13.0 * @return array<int, int>\|\WP_Error Returns mapping array on success, WP_Error on failure. / public function import_forms_with_meta( $data, $default_status = 'draft' ) { $forms_mapping = []; foreach ( $data as $form_data ) { // sanitize the data before saving. $old_id = intval( $form_data['post']['ID'] ); $post_content = wp_kses_post( $form_data['post']['post_content'] ); $post_title = sanitize_text_field( $form_data['post']['post_title'] ); $post_meta = $form_data['post_meta']; $post_type = sanitize_text_field( $form_data['post']['post_type'] ); $post_content = addslashes( $post_content ); // Check if sureforms/form exists in post_content. if ( 'sureforms_form' === $post_type ) { $new_post = [ 'post_title' => $post_title, 'post_status' => $default_status, 'post_type' => 'sureforms_form', ]; $post_id = wp_insert_post( $new_post ); // Update the post content formId to the new post id. $post_content = str_replace( '\"formId\":' . intval( $form_data['post']['ID'] ), '\"formId\":' . intval( $post_id ), $post_content ); // update the post content. wp_update_post( [ 'ID' => $post_id, 'post_content' => $post_content, ] ); if ( ! $post_id ) { return new \WP_Error( 'import_forms_failed', __( 'Failed to import form.', 'sureforms' ) ); } $forms_mapping[ $old_id ] = $post_id; // Update post meta. foreach ( $post_meta as $meta_key => $meta_value ) { // Check if the meta key is one of the unserialized post metas then add it as is. if ( in_array( $meta_key, $this->get_unserialized_post_metas(), true ) ) { add_post_meta( $post_id, $meta_key, $meta_value ); } else { if ( is_array( $meta_value ) && isset( $meta_value[0] ) ) { add_post_meta( $post_id, $meta_key, $meta_value[0] ); } else { add_post_meta( $post_id, $meta_key, $meta_value ); } } } } else { return new \WP_Error( 'import_forms_invalid_post_type', __( 'Failed to import form.', 'sureforms' ) ); } } return $forms_mapping; } /* * Handle Import Form * * @param \WP_REST_Request $request Full details about the request. * * @since 0.0.1 * @return void / public function handle_import_form( $request ) { $nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) ); if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) { wp_send_json_error( [ 'data' => __( 'Nonce verification failed.', 'sureforms' ), 'status' => false, ] ); } // Get the raw POST data. $post_data = file_get_contents( 'php://input' ); if ( ! $post_data ) { wp_send_json_error( __( 'Failed to import form.', 'sureforms' ) ); } $data = json_decode( $post_data, true ); if ( ! is_iterable( $data ) ) { wp_send_json_error( __( 'Failed to import form.', 'sureforms' ) ); } $result = $this->import_forms_with_meta( $data ); if ( is_wp_error( $result ) ) { http_response_code( 400 ); wp_send_json_error( $result->get_error_message() ); } // Return the responses. wp_send_json_success(); } /* * Add custom API Route submit-form * * @return void * @since 0.0.1 */ public function register_custom_endpoint() { register_rest_route( 'sureforms/v1', '/sureforms_import', [ 'methods' => WP_REST_Server::EDITABLE, 'callback' => [ $this, 'handle_import_form' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], ] ); } }	7.18 KB	2025-11-17 18:39
📄 field-validation.php <?php /** * Field Validation Class * * Handles all field validation for SureForms * * @package SureForms * @since 1.12.2 / namespace SRFM\Inc; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Field Validation Class / class Field_Validation { /* * Add block configuration for form fields. * * This function processes blocks in a form and stores their configuration as post meta. * It applies filters to allow extensions to modify block configs and stores processed * values for blocks that need special handling (like upload fields). * * @param array<mixed> $blocks Array of blocks to process. * @param int $form_id Form post ID. * @return void * @since 1.12.2 / public static function add_block_config( $blocks, $form_id ) { // Initialize array to store processed block configurations. $block_config = []; // Loop through each block. foreach ( $blocks as $block ) { // Ensure $block is an array and has the required structure. if ( ! is_array( $block ) ) { continue; } if ( ! isset( $block['blockName'] ) \|\| ! isset( $block['attrs'] ) \|\| ! is_array( $block['attrs'] ) ) { continue; } // Validate block id. if ( ! array_key_exists( 'block_id', $block['attrs'] ) \|\| empty( $block['attrs']['block_id'] ) \|\| ! is_string( $block['attrs']['block_id'] ) ) { continue; } $block_id = sanitize_text_field( $block['attrs']['block_id'] ); // Allow extensions to process and modify block config. $config = apply_filters( 'srfm_block_config', [ 'block' => $block ] ); // If block was processed by a filter, add its processed value. if ( isset( $config['processed_value'] ) && ! empty( $config['processed_value'] ) ) { $block_config[ $block_id ] = $config['processed_value']; continue; } } // Only update meta if we have processed configurations. if ( ! empty( $block_config ) ) { update_post_meta( $form_id, '_srfm_block_config', $block_config ); } } /* * Retrieve or migrate the block configuration for legacy forms. * * This function checks if the _srfm_block_config post meta exists for the given form ID. * Example: get_post_meta( 123, '_srfm_block_config', true ) might return an array of block configs. * If not found, it attempts to parse the form's post content and generate the block config. * Example: If a legacy form with ID 123 has no _srfm_block_config, but its post_content contains blocks, * the function will parse those blocks and call add_block_config() to generate and store the config. * * @param int $form_id The ID of the form post. * @since 1.12.2 * @return array\|null The block configuration array, or null if not found or invalid. / public static function get_or_migrate_block_config_for_legacy_form( $form_id ) { // Validate that $form_id is a positive integer. // Example: $form_id = 123 is valid; $form_id = -1 or 'abc' is not. if ( ! is_int( $form_id ) \|\| $form_id <= 0 ) { return null; } // Retrieve the block config from post meta. // Example: $block_config = [ 'block-1' => [ ... ], 'block-2' => [ ... ] ]. $block_config = get_post_meta( $form_id, '_srfm_block_config', true ); if ( ! empty( $block_config ) && is_array( $block_config ) ) { // If it exists and is an array, return it directly (no migration needed). // Example: Returning the existing $block_config array. return $block_config; } // Get the post by ID and validate. // Example: $post = get_post( 123 ); $post->post_content should contain block markup. $post = get_post( $form_id ); if ( ! ( $post instanceof \WP_Post ) \|\| empty( $post->post_content ) ) { return null; } // Parse the blocks from the post content and attempt migration. // Example: $blocks = parse_blocks( $post->post_content ); $blocks is an array of block arrays. if ( function_exists( 'parse_blocks' ) ) { $blocks = parse_blocks( $post->post_content ); if ( is_array( $blocks ) && ! empty( $blocks ) ) { self::add_block_config( $blocks, $form_id ); } } // Retrieve the block config again after migration attempt. // Example: After migration, $block_config should now be an array if successful. $block_config = get_post_meta( $form_id, '_srfm_block_config', true ); return ! empty( $block_config ) && is_array( $block_config ) ? $block_config : null; } /* * Prepare validation data for a given form. * * Retrieves the form block configuration from post meta and adds a 'name_with_id' * key to each block, which is a unique identifier for the field (used for validation). * * @param int $current_form_id The ID of the form post. * @since 1.12.2 * @return array\|null The processed form configuration array, or null if not found. / public static function prepared_validation_data( $current_form_id ) { // Retrieve the form block configuration from post meta. $get_form_config = self::get_or_migrate_block_config_for_legacy_form( $current_form_id ); // If the configuration is an array, add a 'name_with_id' key to each block. if ( is_array( $get_form_config ) ) { foreach ( $get_form_config as $index => $block ) { // Ensure both 'blockName' and 'block_id' exist before creating the identifier. if ( isset( $block['blockName'] ) ) { // 'name_with_id' is used as a unique field identifier for validation. // Example: 'sureforms-input-abc123' for blockName 'sureforms/input' and block_id 'abc123' $get_form_config[ $index ]['name_with_id'] = str_replace( '/', '-', $block['blockName'] ) . '-' . $index; } } } // Return the processed configuration array, or an empty array if not found. return is_array( $get_form_config ) ? $get_form_config : []; } /* * Validate form data for a given form. * * This function checks each field in the submitted form data (including uploaded files) * and applies the 'srfm_validate_form_data' filter to validate each field according to * its configuration. Only fields with keys containing '-lbl-' (SureForms fields) are processed. * If a field fails validation, its error message is added to the $not_valid_fields array. * * @param array<mixed> $form_data The submitted form data (sanitized). * @param int\|mixed $current_form_id The ID of the form being validated. * @since 1.12.2 * @return array An array of invalid fields and their error messages. Empty if all fields are valid. / public static function validate_form_data( $form_data, $current_form_id ) { if ( ! is_array( $form_data ) \|\| ! is_numeric( $current_form_id ) ) { return []; } // Holds fields that are not valid. Example: [ 'srfm-email-c867d9d9-lbl-email' => 'This field is required.' ]. $not_valid_fields = []; // Retrieve the processed form configuration for validation. $get_form_config = self::prepared_validation_data( Helper::get_integer_value( $current_form_id ) ); $form_data = apply_filters( 'srfm_field_validation_data', $form_data ); // Iterate over each field in the form data. foreach ( $form_data as $key => $value ) { /* * Only process SureForms fields. * The '-lbl-' substring is mandatory in SureForms field keys. * Example: $key = 'srfm-email-c867d9d9-lbl-email' */ if ( false === strpos( $key, '-lbl-' ) ) { continue; } $get_name_with_id = explode( '-lbl-', $key ); // Extract the part after the last '-' in the key, if it matches the pattern. // Example: $get_name_with_id[0] = "srfm-email-c867d9d9". // $extracted_id = "c867d9d9". $extracted_id = ''; if ( is_string( $key ) && preg_match( '/-([a-zA-Z0-9]+)$/', $get_name_with_id[0], $matches ) ) { $extracted_id = $matches[1]; // Now $extracted_id contains "c867d9d9" for "srfm-email-c867d9d9". } // $get_slug will be the slug after the first hyphen in the second part. // Example: $get_name_with_id[1] = "email" or "field-email", $get_slug = "email". $get_slug = isset( $get_name_with_id[1] ) ? preg_replace( '/^[^-]+-/', '', $get_name_with_id[1] ) : ''; // $get_field_name is the field name without the block id. // Example: "srfm-email-c867d9d9" => "srfm-email". $get_field_name = str_replace( '-' . $extracted_id, '', $get_name_with_id[0] ); // Apply the validation filter for the current field. // Example: Passes all relevant field data to the filter for validation. $field_validated = apply_filters( 'srfm_validate_form_data', [ 'field_key' => $key, 'field_value' => $value, 'form_id' => $current_form_id, 'form_config' => $get_form_config, 'block_id' => $extracted_id, 'block_slug' => $get_slug, 'name_with_id' => $get_name_with_id[0], 'field_name' => $get_field_name, ] ); // Check the result of the validation. // Example: $field_validated = [ 'validated' => false, 'error' => 'This field is required.' ]. if ( isset( $field_validated['validated'] ) ) { // If the field is valid, skip to the next field. if ( true === $field_validated['validated'] ) { continue; } // If the field is not valid, add the error message to the result array. // Example: $not_valid_fields[ 'srfm-email-c867d9d9-lbl-email' ] = 'This field is required.'. if ( false === $field_validated['validated'] ) { $not_valid_fields[ $key ] = $field_validated['error'] ?? __( 'Field is not valid.', 'sureforms' ); } } } // Return the array of invalid fields and their error messages. // Example: [ 'srfm-email-c867d9d9-lbl-email' => 'This field is required.' ]. return $not_valid_fields; } }	9.4 KB	2025-11-17 18:39
📁 fields	-	2025-11-17 18:39
📄 form-restriction.php <?php /** * Create new Form with Template and return the form ID. * * @package sureforms. * @since 1.10.1 / namespace SRFM\Inc; use SRFM\Inc\Database\Tables\Entries; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Create New Form. * * @since 1.10.1 / class Form_Restriction { use Get_Instance; /* * Get the restriction settings for a given form. * * @param int $form_id The ID of the form. * @since 1.10.1 * @return array Associative array of restriction settings or empty array if invalid. / public static function get_form_restriction_setting( $form_id ) { // Validate the form ID. Must be numeric and non-empty. if ( empty( $form_id ) \|\| ! is_int( $form_id ) ) { return []; } // Get the raw restriction meta. $form_restriction_meta = get_post_meta( $form_id, '_srfm_form_restriction', true ); if ( empty( $form_restriction_meta ) \|\| ! is_string( $form_restriction_meta ) ) { return []; } // Decode the meta to an array. $form_restriction = json_decode( $form_restriction_meta, true ); // Ensure it's a valid array. return is_array( $form_restriction ) ? $form_restriction : []; } /* * Check if the form has reached the entry limit. * * @param int $form_id The ID of the form. * @since 1.10.1 * @return bool True if form is restricted, false otherwise. / public static function is_form_restricted( $form_id ) { if ( empty( $form_id ) \|\| ! is_int( $form_id ) ) { return false; // Invalid form ID. } // Check for instant fom preview mode. $srfm_live_mode_data = Helper::get_instant_form_live_data(); // Skip check in live mode. if ( ! empty( $srfm_live_mode_data ) && is_array( $srfm_live_mode_data ) && isset( $srfm_live_mode_data['live_mode'] ) ) { return false; // Skip check in live mode. } // Get parsed restriction settings. $form_restriction = self::get_form_restriction_setting( $form_id ); // If the form restriction is empty or not an array, or if the status is not set, return false. if ( empty( $form_restriction ) \|\| ! is_array( $form_restriction ) \|\| empty( $form_restriction['status'] ) ) { return false; // No limit set. } $has_entries_limit_reached = self::has_entries_limit_reached( $form_id, $form_restriction ); $has_time_limit_reached = self::has_time_limit_reached( $form_restriction ); /* * If the form has reached the entries limit or the time limit, return true. * * @since 1.10.1 / return apply_filters( 'srfm_is_form_restricted', $has_entries_limit_reached \|\| $has_time_limit_reached, $form_id, $form_restriction, $has_entries_limit_reached, $has_time_limit_reached ); } /* * Check if the entries limit has been reached for a given form. * * @param int $form_id The ID of the form. * @param array<string, mixed> $form_restriction The form restriction settings. * @since 1.10.1 * @return bool True if the entries limit is reached, false otherwise. / public static function has_entries_limit_reached( $form_id, $form_restriction = [] ) { if ( ! isset( $form_restriction['maxEntries'] ) \|\| ! is_int( $form_restriction['maxEntries'] ) ) { return false; // Invalid form ID or restriction settings. } $max_entries = $form_restriction['maxEntries']; $entries_count = Entries::get_total_entries_by_status( 'all', $form_id ); if ( ! is_int( $entries_count ) ) { $entries_count = 0; // Ensure entries count is a non-negative integer. } return $entries_count >= $max_entries; } /* * Check if the time limit has been reached based on the provided time period. * * @param array<string, mixed> $form_restriction The form restriction settings containing date, hours, minutes, and meridiem. * * @since 1.10.1 * @return bool True if the time limit has been reached, false otherwise. / public static function has_time_limit_reached( $form_restriction ) { // Get date, hours, minutes, meridiem from the form restriction settings. $date = $form_restriction['date'] ?? ''; $hours = Helper::get_string_value( $form_restriction['hours'] ?? '12' ); $minutes = Helper::get_string_value( $form_restriction['minutes'] ?? '00' ); $meridiem = Helper::get_string_value( $form_restriction['meridiem'] ?? 'AM' ); if ( empty( $date ) \|\| ! is_string( $date ) ) { return false; // No time limit set. } // Convert the time period to a timestamp. $date_timestamp = Helper::get_timestamp_from_string( $date, $hours, $minutes, $meridiem ); $has_time_limit_reached = false; // If the timestamp is valid, check if the current time is greater than the time period timestamp. // Ensure the timestamp is a valid integer and not false. if ( false !== $date_timestamp && is_int( $date_timestamp ) ) { $current_time_timestamp = strtotime( current_time( 'mysql' ) ); // Check if the current time is greater than the time period timestamp. $has_time_limit_reached = $current_time_timestamp > $date_timestamp; } return $has_time_limit_reached; } /* * Display the form restriction message. * * @param int $form_id The ID of the form. * @since 1.10.1 * @return string\|false The HTML markup for the restriction message or false if no restriction is set. */ public static function display_form_restriction_message( $form_id ) { // Get parsed restriction settings. $form_restriction = self::get_form_restriction_setting( $form_id ); // Get the description text. $form_restriction_message = $form_restriction['message'] ?? Translatable::get_default_form_restriction_message(); ob_start(); ?> <div class="srfm-form-container srfm-form-restriction-wrapper"> <div class="srfm-form-restriction-message" role="alert" aria-live="assertive"> <span class="srfm-form-restriction-icon" aria-hidden="true"> <?php echo wp_kses( Helper::fetch_svg( 'instant-form-warning', 'srfm-form-restriction-icon', 'aria-hidden="true"' ), Helper::$allowed_tags_svg ); ?> </span> <p class="srfm-form-restriction-text"> <?php echo esc_html( $form_restriction_message ); ?> </p> </div> </div> <?php return ob_get_clean(); } }	6.12 KB	2025-11-17 18:39
📄 form-submit.php <?php /** * Sureforms Submit Class file. * * @package sureforms. * @since 0.0.1 / namespace SRFM\Inc; use SRFM\Inc\Database\Tables\Entries; use SRFM\Inc\Email\Email_Template; use SRFM\Inc\Lib\Browser\Browser; use SRFM\Inc\Traits\Get_Instance; use WP_Error; use WP_REST_Server; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } if ( ! function_exists( 'wp_handle_upload' ) ) { require_once ABSPATH . 'wp-admin/includes/file.php'; } /* * Sureforms Submit Class. * * @since 0.0.1 / class Form_Submit { use Get_Instance; /* * Namespace. * * @var string / protected $namespace = 'sureforms/v1'; /* * Addresses. * * @var string * @since 1.6.1 / private $addresses = ''; /* * Constructor * * @since 0.0.1 / public function __construct() { add_action( 'rest_api_init', [ $this, 'register_custom_endpoint' ] ); add_action( 'wp_ajax_validation_ajax_action', [ $this, 'field_unique_validation' ] ); add_action( 'wp_ajax_nopriv_validation_ajax_action', [ $this, 'field_unique_validation' ] ); // for quick action bar. add_action( 'wp_ajax_srfm_global_update_allowed_block', [ $this, 'srfm_global_update_allowed_block' ] ); add_action( 'wp_ajax_srfm_global_sidebar_enabled', [ $this, 'srfm_global_sidebar_enabled' ] ); } /* * Add custom API Route submit-form * * @return void * @since 0.0.1 / public function register_custom_endpoint() { register_rest_route( $this->namespace, '/submit-form', [ 'methods' => WP_REST_Server::EDITABLE, 'callback' => [ $this, 'handle_form_submission' ], 'permission_callback' => [ $this, 'submit_form_permissions_check' ], ] ); } /* * Check whether a given request has permission access route. * * @param \WP_REST_Request $request Request object or array containing form data. * @since 1.8.0 * @return WP_Error\|bool / public function submit_form_permissions_check( $request ) { $nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) ); if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) { wp_send_json_error( [ 'message' => __( 'Nonce verification failed.', 'sureforms' ), ] ); } $form_data = Helper::sanitize_by_field_type( $request->get_params() ); if ( empty( $form_data ) \|\| ! is_array( $form_data ) ) { wp_send_json_error( [ 'message' => __( 'Form data is not found.', 'sureforms' ), ] ); } if ( ! $form_data['form-id'] ) { wp_send_json_error( [ 'message' => __( 'Form Id is missing.', 'sureforms' ), 'position' => 'header', ] ); } return true; } /* * Check whether a given request has permission access route. * * @since 0.0.1 * @return WP_Error\|bool / public function permissions_check() { if ( ! Helper::current_user_can() ) { return new WP_Error( 'rest_forbidden', __( 'Sorry, you cannot access this route', 'sureforms' ), [ 'status' => rest_authorization_required_code() ] ); } return true; } /* * Validate Turnstile token * * @param string $secret_key Turnstile token. * @param string\|false $response Response. * @param string\|false $remote_ip Remote IP. * @return array<mixed>\|mixed Result of the validation. / public static function validate_turnstile_token( $secret_key, $response, $remote_ip ) { if ( empty( $secret_key ) \|\| ! is_string( $secret_key ) ) { return [ 'success' => false, 'error' => __( 'Cloudflare Turnstile secret key is invalid.', 'sureforms' ), ]; } if ( empty( $response ) ) { return [ 'success' => false, 'error' => __( 'Cloudflare Turnstile response is missing.', 'sureforms' ), ]; } $body = [ 'secret' => $secret_key, 'response' => $response, 'remoteip' => $remote_ip, ]; $url = 'https://challenges.cloudflare.com/turnstile/v0/siteverify'; $args = [ 'body' => $body, 'timeout' => 15, ]; $response = wp_remote_post( $url, $args ); if ( is_wp_error( $response ) ) { $error_message = $response->get_error_message(); return [ 'success' => false, 'error' => $error_message, ]; } return json_decode( wp_remote_retrieve_body( $response ), true ); } /* * Validate hCaptcha token * * @param string $secret_key hCaptcha token. * @param string\|false $response Response. * @param string\|false $remote_ip Remote IP. * @since 0.0.5 * @return array<mixed>\|mixed Result of the validation. / public static function validate_hcaptcha_token( $secret_key, $response, $remote_ip ) { if ( empty( $secret_key ) \|\| ! is_string( $secret_key ) ) { return [ 'success' => false, 'error' => __( 'hCaptcha secret key is invalid.', 'sureforms' ), ]; } if ( empty( $response ) ) { return [ 'success' => false, 'error' => __( 'hCaptcha response is missing.', 'sureforms' ), ]; } $body = [ 'secret' => $secret_key, 'response' => $response, 'remoteip' => $remote_ip, ]; $url = 'https://api.hcaptcha.com/siteverify'; $args = [ 'body' => $body, 'timeout' => 15, ]; $response = wp_remote_post( $url, $args ); if ( is_wp_error( $response ) ) { $error_message = $response->get_error_message(); return [ 'success' => false, 'error' => $error_message, ]; } return json_decode( wp_remote_retrieve_body( $response ), true ); } /* * Handle Form Submission * * @param \WP_REST_Request $request Request object or array containing form data. * @since 0.0.1 * @return \WP_REST_Response\|\WP_Error Response object on success, or WP_Error object on failure. / public function handle_form_submission( $request ) { /* * All checks are done in submit_form_permissions_check method: * - Nonce verification * - Form data validation * - Form ID validation * * @since 1.8.0 / $form_data = Helper::sanitize_by_field_type( $request->get_params() ); $current_form_id = $form_data['form-id']; /* * If someone tries to access the form submit endpoint directly, we need to check if the form is restricted. * If a form is loaded in a browser window and the limit exceeds then the form will not be submitted. / $form_id = Helper::get_integer_value( $current_form_id ); if ( Form_Restriction::is_form_restricted( $form_id ) ) { $form_restriction = Form_Restriction::get_form_restriction_setting( $form_id ); // If the form is restricted, return an error response. $form_restriction_message = $form_restriction['message'] ?? Translatable::get_default_form_restriction_message(); wp_send_json_error( [ 'message' => $form_restriction_message, ] ); } // Check whether the form is valid. if ( ! Helper::is_valid_form( $current_form_id ) ) { wp_send_json_error( [ 'code' => 'srfm_invalid_form_id', 'message' => __( 'Form does not exist.', 'sureforms' ), ] ); } $validated_form_data = Field_Validation::validate_form_data( $form_data, $current_form_id ); if ( ! empty( $validated_form_data ) ) { // Get the first error message to display as the main message. $first_error = reset( $validated_form_data ); wp_send_json_error( [ 'message' => $first_error ?? __( 'Form data is not valid.', 'sureforms' ), 'field_errors' => $validated_form_data, ] ); } $security_type = Helper::get_meta_value( Helper::get_integer_value( $current_form_id ), '_srfm_captcha_security_type' ); $selected_captcha_type = get_post_meta( Helper::get_integer_value( $current_form_id ), '_srfm_form_recaptcha', true ) ? Helper::get_string_value( get_post_meta( Helper::get_integer_value( $current_form_id ), '_srfm_form_recaptcha', true ) ) : ''; if ( 'none' !== $security_type ) { $global_setting_options = get_option( 'srfm_security_settings_options' ); } else { $global_setting_options = []; } if ( 'g-recaptcha' === $security_type ) { switch ( $selected_captcha_type ) { case 'v2-checkbox': $key = 'srfm_v2_checkbox_secret_key'; break; case 'v2-invisible': $key = 'srfm_v2_invisible_secret_key'; break; case 'v3-reCAPTCHA': $key = 'srfm_v3_secret_key'; break; default: $key = ''; break; } $google_captcha_secret_key = is_array( $global_setting_options ) && isset( $global_setting_options[ $key ] ) ? $global_setting_options[ $key ] : ''; } if ( 'cf-turnstile' === $security_type ) { // Turnstile validation. $srfm_cf_turnstile_secret_key = is_array( $global_setting_options ) && isset( $global_setting_options['srfm_cf_turnstile_secret_key'] ) ? Helper::get_string_value( $global_setting_options['srfm_cf_turnstile_secret_key'] ) : ''; $cf_response = ! empty( $form_data['cf-turnstile-response'] ) && is_string( $form_data['cf-turnstile-response'] ) ? $form_data['cf-turnstile-response'] : ''; // if gdpr is enabled then set remote ip to empty. $compliance = get_post_meta( Helper::get_integer_value( $current_form_id ), '_srfm_compliance', true ); $gdpr = false; if ( is_array( $compliance ) && is_array( $compliance[0] ) ) { $gdpr = ! empty( $compliance[0]['gdpr'] ) ? $compliance[0]['gdpr'] : false; } // check if ip logging is disabled in global settings then set remote ip to empty. $gb_general_settinionsgs_opt = get_option( 'srfm_general_settings_options' ); $srfm_ip_log = is_array( $gb_general_settinionsgs_opt ) && isset( $gb_general_settinionsgs_opt['srfm_ip_log'] ) ? $gb_general_settinionsgs_opt['srfm_ip_log'] : ''; $remote_ip = $gdpr \|\| ( ! $srfm_ip_log ) ? '' : ( isset( $_SERVER['REMOTE_ADDR'] ) ? filter_var( wp_unslash( $_SERVER['REMOTE_ADDR'] ), FILTER_VALIDATE_IP ) : '' ); $turnstile_validation_result = self::validate_turnstile_token( $srfm_cf_turnstile_secret_key, $cf_response, $remote_ip ); // If the cloudflare validation fails, return an error. if ( is_array( $turnstile_validation_result ) && isset( $turnstile_validation_result['success'] ) && false === $turnstile_validation_result['success'] ) { $this->recaptcha_error_response( 'cf-turnstile', $turnstile_validation_result ); } } if ( 'hcaptcha' === $security_type ) { $srfm_hcaptcha_secret_key = is_array( $global_setting_options ) && isset( $global_setting_options['srfm_hcaptcha_secret_key'] ) ? Helper::get_string_value( $global_setting_options['srfm_hcaptcha_secret_key'] ) : ''; $hcaptcha_response = ! empty( $form_data['h-captcha-response'] ) && is_string( $form_data['h-captcha-response'] ) ? $form_data['h-captcha-response'] : ''; // if gdpr is enabled then set remote ip to empty. $compliance = get_post_meta( Helper::get_integer_value( $current_form_id ), '_srfm_compliance', true ); $gdpr = false; if ( is_array( $compliance ) && is_array( $compliance[0] ) ) { $gdpr = ! empty( $compliance[0]['gdpr'] ) ? $compliance[0]['gdpr'] : false; } // check if ip logging is disabled in global settings then set remote ip to empty. $gb_general_settings_options = get_option( 'srfm_general_settings_options' ); $srfm_ip_log = is_array( $gb_general_settings_options ) && isset( $gb_general_settings_options['srfm_ip_log'] ) ? $gb_general_settings_options['srfm_ip_log'] : ''; $remote_ip = $gdpr \|\| ( ! $srfm_ip_log ) ? '' : ( isset( $_SERVER['REMOTE_ADDR'] ) ? filter_var( wp_unslash( $_SERVER['REMOTE_ADDR'] ), FILTER_VALIDATE_IP ) : '' ); $hcaptcha_validation_result = self::validate_hcaptcha_token( $srfm_hcaptcha_secret_key, $hcaptcha_response, $remote_ip ); // If the hcaptcha validation fails, return an error. if ( is_array( $hcaptcha_validation_result ) && isset( $hcaptcha_validation_result['success'] ) && false === $hcaptcha_validation_result['success'] ) { $this->recaptcha_error_response( 'hcaptcha', $hcaptcha_validation_result ); } } if ( isset( $form_data['srfm-honeypot-field'] ) && empty( $form_data['srfm-honeypot-field'] ) ) { if ( ! empty( $google_captcha_secret_key ) ) { if ( isset( $form_data['sureforms_form_submit'] ) ) { $secret_key = $google_captcha_secret_key; $ipaddress = isset( $_SERVER['REMOTE_ADDR'] ) ? filter_var( wp_unslash( $_SERVER['REMOTE_ADDR'] ), FILTER_VALIDATE_IP ) : ''; $captcha_response = $form_data['g-recaptcha-response']; $url = 'https://www.google.com/recaptcha/api/siteverify?secret=' . $secret_key . '&response=' . $captcha_response . '&ip=' . $ipaddress; $response = wp_remote_get( $url ); if ( ! is_wp_error( $response ) && wp_remote_retrieve_response_code( $response ) === 200 ) { $json_string = wp_remote_retrieve_body( $response ); $data = (array) json_decode( $json_string, true ); } else { $data = []; } $sureforms_captcha_data = $data; } else { wp_send_json_error( [ 'message' => __( 'reCAPTCHA error: Submit nonce is not available.', 'sureforms' ), ] ); } if ( isset( $sureforms_captcha_data['success'] ) && true === $sureforms_captcha_data['success'] ) { return rest_ensure_response( $this->handle_form_entry( $form_data ) ); } $this->recaptcha_error_response( 'g-recaptcha', $sureforms_captcha_data ); } return rest_ensure_response( $this->handle_form_entry( $form_data ) ); } if ( ! isset( $form_data['srfm-honeypot-field'] ) ) { if ( ! empty( $google_captcha_secret_key ) ) { if ( isset( $form_data['sureforms_form_submit'] ) ) { $secret_key = $google_captcha_secret_key; $ipaddress = isset( $_SERVER['REMOTE_ADDR'] ) ? filter_var( wp_unslash( $_SERVER['REMOTE_ADDR'] ), FILTER_VALIDATE_IP ) : ''; $captcha_response = $form_data['g-recaptcha-response']; $url = 'https://www.google.com/recaptcha/api/siteverify?secret=' . $secret_key . '&response=' . $captcha_response . '&ip=' . $ipaddress; $response = wp_remote_get( $url ); if ( ! is_wp_error( $response ) && wp_remote_retrieve_response_code( $response ) === 200 ) { $json_string = wp_remote_retrieve_body( $response ); $data = (array) json_decode( $json_string, true ); } else { $data = []; } $sureforms_captcha_data = $data; } else { wp_send_json_error( [ 'message' => __( 'reCAPTCHA error: Submit nonce is not available.', 'sureforms' ), ] ); } if ( true === $sureforms_captcha_data['success'] ) { return rest_ensure_response( $this->handle_form_entry( $form_data ) ); } $this->recaptcha_error_response( 'g-recaptcha', $sureforms_captcha_data ); } return rest_ensure_response( $this->handle_form_entry( $form_data ) ); } wp_send_json_error( [ 'message' => __( 'Spam Detected', 'sureforms' ), ] ); } /* * Send Email and Create Entry. * * @param array<string> $form_data Request object or array containing form data. * @since 0.0.1 * @return array<mixed> Array containing the response data. / public function handle_form_entry( $form_data ) { // Filter the form data. $form_data = apply_filters( 'srfm_form_submit_data', $form_data ); if ( empty( $form_data ) \|\| ! is_array( $form_data ) ) { wp_send_json_error( [ 'message' => __( 'Form data is not found.', 'sureforms' ), 'position' => 'header', ] ); } elseif ( isset( $form_data['error'] ) ) { wp_send_json_error( [ 'message' => is_string( $form_data['error'] ) ? $form_data['error'] : __( 'Form data is not found.', 'sureforms' ), 'position' => 'header', ] ); } $id = sanitize_text_field( $form_data['form-id'] ); // Get the compliance settings. $compliance = get_post_meta( Helper::get_integer_value( $id ), '_srfm_compliance', true ); $gdpr = ''; $do_not_store_entries = ''; if ( is_array( $compliance ) && is_array( $compliance[0] ) ) { $gdpr = $compliance[0]['gdpr'] ?? ''; $do_not_store_entries = $compliance[0]['do_not_store_entries'] ?? ''; } // Check if the form data contains 'srfm_addresses' and is not empty. if ( ! empty( $form_data['srfm_addresses'] ) ) { // Assign the addresses to the class property for further processing. $this->addresses = $form_data['srfm_addresses']; // Remove the address data from the form data to avoid redundancy. unset( $form_data['srfm_addresses'] ); } $form_data = apply_filters( 'srfm_before_fields_processing', $form_data ); $submission_data = $this->process_form_fields( $form_data ); $modified_message = $this->prepare_submission_data( $submission_data ); $form_before_submission_data = [ 'form_id' => $id ? intval( $id ) : '', 'data' => $modified_message, ]; /* * Fires before submission process starts. / do_action( 'srfm_before_submission', $form_before_submission_data ); $name = sanitize_text_field( get_the_title( intval( $id ) ) ); $send_email = $this->send_email( $id, $submission_data, $form_data ); $emails = []; if ( $send_email ) { $emails = $send_email['emails']; } // Check if GDPR is enabled and do not store entries is enabled. // If so, send email and do not store entries. if ( $gdpr && $do_not_store_entries ) { $form_submit_response = [ 'success' => true, 'form_id' => $id ? intval( $id ) : '', 'to_emails' => $emails, 'form_name' => $name ? esc_attr( $name ) : '', 'message' => Generate_Form_Markup::get_confirmation_markup( $form_data, $submission_data ), 'data' => $modified_message, ]; do_action( 'srfm_form_submit', $form_submit_response ); /* * Hook for enabling background processes. * * @param array $form_data form data related to submission. / $form_data['form_id'] = $id ? intval( $id ) : ''; do_action( 'srfm_after_submission_process', $form_data ); return [ 'success' => true, 'message' => Generate_Form_Markup::get_confirmation_markup( $form_data, $submission_data ), 'data' => [ 'name' => $name, 'after_submit' => false, ], 'redirect_url' => Generate_Form_Markup::get_redirect_url( $form_data, $submission_data ), ]; } $global_setting_options = get_option( 'srfm_general_settings_options' ); // If GDPR is enabled, do not store IP, browser, and device info. // If not, store IP, browser, and device info. $user_ip = ''; $browser_name = ''; $device_name = ''; if ( ! $gdpr ) { $srfm_ip_log = is_array( $global_setting_options ) && isset( $global_setting_options['srfm_ip_log'] ) ? $global_setting_options['srfm_ip_log'] : ''; $user_ip = $srfm_ip_log && isset( $_SERVER['REMOTE_ADDR'] ) ? filter_var( wp_unslash( $_SERVER['REMOTE_ADDR'] ), FILTER_VALIDATE_IP ) : ''; $browser = new Browser(); $browser_name = sanitize_text_field( $browser->getBrowser() ); $device_name = sanitize_text_field( $browser->getPlatform() ); } $form_markup = get_the_content( null, false, Helper::get_integer_value( $form_data['form-id'] ) ); $pattern = '/"label":"(.?)"/'; preg_match_all( $pattern, $form_markup, $matches ); $submission_info = [ 'user_ip' => $user_ip, 'browser_name' => $browser_name, 'device_name' => $device_name, ]; $entries_data = [ 'form_id' => $id, 'form_data' => $submission_data, 'submission_info' => $submission_info, 'created_at' => current_time( 'mysql' ), ]; if ( is_user_logged_in() ) { // If user is logged in then save their user id. $entries_data['user_id'] = get_current_user_id(); } $entries_data = apply_filters( 'srfm_before_entry_data', $entries_data, [ 'form_data' => $form_data, 'submission_data' => $submission_data, ] ); $entry_id = Entries::add( $entries_data ); if ( $entry_id ) { $confirmation_message = Generate_Form_Markup::get_confirmation_markup( $form_data, $submission_data ); $response = [ 'success' => true, 'message' => $confirmation_message, 'data' => [ 'name' => $name, 'submission_id' => $entry_id, 'after_submit' => true, 'after_submit_nonce' => wp_create_nonce( 'srfm_after_submission_' . Helper::get_string_value( $entry_id ) ), ], 'redirect_url' => Generate_Form_Markup::get_redirect_url( $form_data, $submission_data ), ]; $form_submit_response = apply_filters( 'srfm_form_submit_response', [ 'success' => true, 'form_id' => $id ? intval( $id ) : '', 'entry_id' => intval( $entry_id ), 'to_emails' => $emails, 'form_name' => $name ? esc_attr( $name ) : '', 'message' => $confirmation_message, 'data' => $modified_message, ] ); do_action( 'srfm_form_submit', $form_submit_response ); } else { $response = [ 'success' => false, 'message' => __( 'Error submitting form', 'sureforms' ), ]; } return $response; } /** * Prepare submission data. * * @param array<mixed> $submission_data Submission data. * @since 0.0.7 * @return array<mixed> Modified submission data. / public function prepare_submission_data( $submission_data ) { $modified_message = []; foreach ( $submission_data as $key => $value ) { $parts = explode( '-lbl-', $key ); $label = ''; /* * Filters submission data for field processing. * * This filter allows customization of how individual fields are processed * during submission data preparation. Plugins can modify field values, * labels, or exclude specific fields from the final submission data. * * @since 1.11.0 * * @param array $field_data { * Field data for processing. * * @type array $block_parts The field key split by '-lbl-' delimiter. * @type string $field_key The original field key from submission data. * @type mixed $field_value The field value from submission data. * } / $should_add_field_row = apply_filters( 'srfm_prepare_submission_data', [ 'block_parts' => $parts, 'field_key' => $key, 'field_value' => $value, ] ); // If we get the label and value from the filter, then use it. if ( ! empty( $should_add_field_row['label'] ) && ! empty( $should_add_field_row['value'] ) ) { $modified_message[ $should_add_field_row['label'] ] = $should_add_field_row['value']; continue; } if ( ! empty( $parts[1] ) ) { $tokens = explode( '-', $parts[1] ); if ( count( $tokens ) > 1 ) { $label = implode( '-', array_slice( $tokens, 1 ) ); } $fields = explode( '-', $parts[0] ); // Since the upload field returns an array of file URLs, we need to implode them with a comma. if ( 'upload' === $fields[1] && ! empty( $value ) && is_array( $value ) ) { $modified_message[ $label ] = urldecode( implode( ', ', $value ) ); } else { $modified_message[ $label ] = html_entity_decode( esc_attr( Helper::get_string_value( $value ) ) ); } } } // If the address is not empty, add it to the submission data. // We are providing this for third-party integrations like Ottokit. // They can use compact addresses such as permanent address, temporary address, etc. // The address will be structured as field 1, field 2, and so on. if ( ! empty( $this->addresses ) ) { // Address will be JSON stringified, so decode it. $address = json_decode( wp_unslash( $this->addresses ), true ); if ( ! empty( $address ) && is_array( $address ) ) { $modified_message = array_merge( $modified_message, $address ); } } return apply_filters( 'srfm_update_prepared_submission_data', $modified_message ); } /* * Parse an email notification template and generate the necessary components for sending an email. * * @param array<mixed> $submission_data An associative array containing submission data to be used in the email template. * @param array<string,string> $item An associative array containing email settings, such as 'email_to', 'subject', 'email_body', and optional headers like 'email_reply_to', 'email_cc', and 'email_bcc'. * @param array<string> $form_data Request object or array containing form data. * @since 1.3.0 * @return array<string,string> An associative array containing 'to', 'subject', 'message', and 'headers' for the email. / public static function parse_email_notification_template( $submission_data, $item, $form_data = [] ) { $smart_tags = Smart_Tags::get_instance(); $to = Helper::get_string_value( $smart_tags->process_smart_tags( $item['email_to'], $submission_data ) ); $subject = Helper::get_string_value( $smart_tags->process_smart_tags( $item['subject'], $submission_data, $form_data ) ); $email_body = Helper::get_string_value( $smart_tags->process_smart_tags( $item['email_body'], $submission_data, $form_data ) ); $email_template = new Email_Template(); $message = $email_template->render( $submission_data, $email_body ); $headers = 'X-Mailer: PHP/' . phpversion() . "\r\n"; $headers .= "Content-Type: text/html; charset=utf-8\r\n"; // Add the From: to the headers. $headers .= self::add_from_data_in_header( $submission_data, $item, $smart_tags ); // Handle Reply-To with proper sanitization. if ( isset( $item['email_reply_to'] ) && ! empty( $item['email_reply_to'] ) ) { $headers .= 'Reply-To: ' . Helper::sanitize_email_header( Helper::get_string_value( $smart_tags->process_smart_tags( $item['email_reply_to'], $submission_data ) ) ) . "\r\n"; } // Handle CC with proper sanitization. if ( isset( $item['email_cc'] ) && ! empty( $item['email_cc'] ) ) { $headers .= 'Cc: ' . Helper::sanitize_email_header( Helper::get_string_value( $smart_tags->process_smart_tags( $item['email_cc'], $submission_data ) ) ) . "\r\n"; } // Handle BCC with proper sanitization. if ( isset( $item['email_bcc'] ) && ! empty( $item['email_bcc'] ) ) { $headers .= 'Bcc: ' . Helper::sanitize_email_header( Helper::get_string_value( $smart_tags->process_smart_tags( $item['email_bcc'], $submission_data ) ) ) . "\r\n"; } return compact( 'to', 'subject', 'message', 'headers' ); } /* * Send Email. * * @param string $id Form ID. * @param array<mixed> $submission_data Submission data. * @param array<string> $form_data Request object or array containing form data. * @since 0.0.1 * @return array<mixed> Array containing the response data. / public static function send_email( $id, $submission_data, $form_data = [] ) { $email_notification = get_post_meta( intval( $id ), '_srfm_email_notification' ); $is_mail_sent = false; $emails = []; // Filter to determine whether the email notification should be sent. $email_notification = apply_filters( 'srfm_email_notification_should_send', $email_notification, $submission_data, $form_data ); if ( is_iterable( $email_notification ) ) { $entries_db_instance = Entries::get_instance(); $log_key = $entries_db_instance->add_log( __( 'Email notification passed to the sending server', 'sureforms' ) ); foreach ( $email_notification as $notification ) { foreach ( $notification as $item ) { if ( true === $item['status'] ) { $parsed = self::parse_email_notification_template( $submission_data, $item, $form_data ); // Allow filtering of the email data before it is sent. $parsed = apply_filters( 'srfm_email_notification', $parsed, $submission_data, $item, $form_data ); // Trigger an action before sending the email, allowing additional processing or logging. do_action( 'srfm_before_email_send', $parsed, $submission_data, $item, $form_data ); $notification_id = isset( $item['id'] ) ? intval( $item['id'] ) : 0; /* * Filter to determine whether the email should be sent. * * @since 1.10.1 / $should_send_email = apply_filters( 'srfm_should_send_email', true, $notification_id, $id, $form_data, ); if ( ! wp_validate_boolean( $should_send_email ) ) { continue; } /* * Temporary override the content type for wp_mail. * This helps us from breaking of content type from other plugins. * * @since 1.2.2 / add_filter( 'wp_mail_content_type', static function() { return 'text/html'; // We need "text/html" content type to render our emails. }, 99 ); /* * Start sending email. * Wrapping it in the buffer because when some plugin such as zoho mail, overrides the wp_mail * function and any exception is thrown ( Or printed ) from that plugin side, it affects the JSON response. * So, to make sure such exceptions doesn't affect our JSON response, we are wrapping it inside buffer. * * Try-Catch does not work because the notice or errors might be echoed by other plugins rather than thrown as an exception. * * @since 1.2.2 / $sent = false; ob_start(); $sent = wp_mail( $parsed['to'], $parsed['subject'], $parsed['message'], $parsed['headers'] ); if ( ! $sent ) { // Fallback to default PHP mail if for some reasons wp_mail fails. $sent = mail( $parsed['to'], $parsed['subject'], $parsed['message'], $parsed['headers'] ); } $email_report = ob_get_clean(); // Catch any printed notice/errors/message for reports. if ( is_int( $log_key ) ) { if ( true === $sent ) { $entries_db_instance->update_log( $log_key, null, [ / translators: Here, %s is the comma separated emails list. / sprintf( __( 'Email notification recipient: %s', 'sureforms' ), esc_html( $parsed['to'] ) ), ] ); } else { $reason = ! empty( $email_report ) ? esc_html( $email_report ) : ( ! Helper::is_any_smtp_plugin_active() ? esc_html__( 'No SMTP plugin detected. Please configure one to enable email sending.', 'sureforms' ) : esc_html__( 'The failure occurred due to an undetermined cause.', 'sureforms' ) ); $entries_db_instance->update_log( $log_key, null, [ sprintf( / translators: Here, %1$s is the comma separated emails list and %2$s is error report ( if any ). / __( 'Email server was unable to send the email notification. Recipient: %1$s. Reason: %2$s', 'sureforms' ), esc_html( $parsed['to'] ), $reason ), ] ); } } // Trigger an action after the email is sent, allowing additional processing or logging. do_action( 'srfm_after_email_send', $parsed, $submission_data, $item, $form_data ); $is_mail_sent = $sent; $emails[] = $parsed['to']; } } } if ( empty( $emails ) ) { $entries_db_instance->reset_logs(); $entries_db_instance->add_log( __( 'No emails were sent', 'sureforms' ) ); } } return [ 'success' => $is_mail_sent, 'emails' => $emails, ]; } /* * Retrieve all entries data for a specific form ID to check for unique values. * * @since 0.0.1 * @return void / public function field_unique_validation() { if ( empty( $_POST['nonce'] ) \|\| ! wp_verify_nonce( sanitize_key( wp_unslash( $_POST['nonce'] ) ), 'unique_validation_nonce' ) ) { $error_message = __( 'Nonce verification failed.', 'sureforms' ); $error_data = [ 'error' => $error_message, ]; wp_send_json_error( $error_data ); } global $wpdb; $id = isset( $_POST['id'] ) ? absint( wp_unslash( $_POST['id'] ) ) : 0; $meta_value = $id; if ( ! $meta_value ) { $error_message = __( 'Invalid form ID.', 'sureforms' ); $error_data = [ 'error' => $error_message, ]; wp_send_json_error( $error_data ); } $_POST = array_map( 'wp_unslash', $_POST ); // Get the entry IDs for the particualr form to perform unique field validation. $entry_ids = Entries::get_all_entry_ids_for_form( $id ); $all_form_entries = []; $keys = array_keys( $_POST ); $length = count( $keys ); for ( $i = 3; $i < $length; $i++ ) { $key = $keys[ $i ]; $value = isset( $_POST[ $key ] ) ? sanitize_text_field( wp_unslash( $_POST[ $key ] ) ) : ''; $key = str_replace( '_', ' ', $keys[ $i ] ); foreach ( $entry_ids as $entry_id ) { $entry_id = is_array( $entry_id ) ? Helper::get_integer_value( $entry_id['ID'] ) : 0; $form_data = Entries::get_form_data( $entry_id ); if ( is_array( $form_data ) && isset( $form_data[ $key ] ) && $form_data[ $key ] === $value ) { $obj = [ $key => 'not unique' ]; array_push( $all_form_entries, $obj ); break; } } } $results = [ 'data' => $all_form_entries, ]; wp_send_json( $results ); } /* * Function to save allowed block data. * * @since 0.0.1 * @return void / public function srfm_global_update_allowed_block() { if ( ! Helper::current_user_can() ) { wp_send_json_error(); } if ( ! check_ajax_referer( 'srfm_ajax_nonce', 'security', false ) ) { wp_send_json_error(); } if ( ! empty( $_POST['defaultAllowedQuickSidebarBlocks'] ) ) { $srfm_default_allowed_quick_sidebar_blocks = json_decode( sanitize_text_field( wp_unslash( $_POST['defaultAllowedQuickSidebarBlocks'] ) ), true ); Helper::update_admin_settings_option( 'srfm_quick_sidebar_allowed_blocks', $srfm_default_allowed_quick_sidebar_blocks ); wp_send_json_success(); } wp_send_json_error(); } /* * Function to save enable/disable data. * * @since 0.0.1 * @return void / public function srfm_global_sidebar_enabled() { if ( ! Helper::current_user_can() ) { wp_send_json_error(); } if ( ! check_ajax_referer( 'srfm_ajax_nonce', 'security', false ) ) { wp_send_json_error(); } if ( ! empty( $_POST['enableQuickActionSidebar'] ) ) { $srfm_enable_quick_action_sidebar = ( 'enabled' === $_POST['enableQuickActionSidebar'] ? 'enabled' : 'disabled' ); Helper::update_admin_settings_option( 'srfm_enable_quick_action_sidebar', $srfm_enable_quick_action_sidebar ); wp_send_json_success(); } wp_send_json_error(); } /* * Send error response for reCAPTCHA validation failure. * * @param string $type The type of CAPTCHA used. Accepted values: 'g-recaptcha', 'hcaptcha', 'cf-turnstile'. * @param array<mixed> $api_response The response returned from the CAPTCHA validation API. * @since 1.7.0 * @return void / public function recaptcha_error_response( $type, $api_response ) { $error_message = $this->recaptcha_error_message( $type, $api_response ); $response = array_merge( [ 'api_response' => $api_response, ], $error_message ); wp_send_json_error( $response ); } /* * Get the error message for a CAPTCHA validation failure based on the service type and API response. * * @param string $type The type of CAPTCHA used. Accepted values: 'g-recaptcha', 'hcaptcha', 'cf-turnstile'. * @param array<mixed> $api_response The response returned from the CAPTCHA validation API. * @since 1.7.0 * @return array<string,string> An associative array containing the error message and a detailed message. / public function recaptcha_error_message( $type, $api_response ) { if ( empty( $api_response['error-codes'] ) \|\| ! is_array( $api_response['error-codes'] ) ) { return [ 'detail_message' => __( 'Captcha validation failed. No error code provided.', 'sureforms' ), 'message' => __( 'Captcha validation failed.', 'sureforms' ), ]; } /* * Note: The error codes are not translated because these messages are intended for debugging purposes. * Translating them would make debugging difficult. These error messages are primarily for developers or administrators. * A generic message will be displayed to the user, while detailed error information will be logged or shown in the console. / // Google reCAPTCHA error codes. // Reference: (https://developers.google.com/recaptcha/docs/verify#error-code-reference). $google_recaptcha_error = [ 'missing-input-secret' => 'The secret parameter is missing.', 'invalid-input-secret' => 'The secret parameter is invalid or malformed.', 'missing-input-response' => 'The response parameter is missing.', 'invalid-input-response' => 'The response parameter is invalid or malformed.', 'bad-request' => 'The request is invalid or malformed.', 'timeout-or-duplicate' => 'The response is no longer valid: either is too old or has been used previously.', ]; // hCaptcha error codes. // Reference: (https://docs.hcaptcha.com/#siteverify-error-codes). $hcaptcha_errors = [ 'missing-input-secret' => 'Your secret key is missing.', 'invalid-input-secret' => 'Your secret key is invalid or malformed.', 'missing-input-response' => 'The response parameter (verification token) is missing.', 'invalid-input-response' => 'The response parameter (verification token) is invalid or malformed.', 'expired-input-response' => 'The response parameter (verification token) is expired. (120s default)', 'already-seen-response' => 'The response parameter (verification token) was already verified once.', 'bad-request' => 'The request is invalid or malformed.', 'missing-remoteip' => 'The remoteip parameter is missing.', 'invalid-remoteip' => 'The remoteip parameter is not a valid IP address or blinded value.', 'not-using-dummy-passcode' => 'You have used a testing sitekey but have not used its matching secret.', 'sitekey-secret-mismatch' => 'The sitekey is not registered with the provided secret.', ]; // Cloudflare Turnstile error codes. // Reference: (https://developers.cloudflare.com/turnstile/get-started/server-side-validation/). $cf_turnstile_errors = [ 'missing-input-secret' => 'The secret parameter was not passed.', 'invalid-input-secret' => 'The secret parameter was invalid, did not exist, or is a testing secret key with a non-testing response.', 'missing-input-response' => 'The response parameter (token) was not passed.', 'invalid-input-response' => 'The response parameter (token) is invalid or has expired. Most of the time, this means a fake token has been used. If the error persists, contact customer support.', 'bad-request' => 'The request was rejected because it was malformed.', 'timeout-or-duplicate' => 'The response parameter (token) has already been validated before. This means that the token was issued five minutes ago and is no longer valid, or it was already redeemed.', 'internal-error' => 'An internal error happened while validating the response. The request can be retried.', ]; $error_code = $api_response['error-codes'][0] ?? 'no-error-code'; $captcha_title = ''; $captcha_message = ''; switch ( $type ) { case 'g-recaptcha': $captcha_title = __( 'Google reCAPTCHA', 'sureforms' ); $captcha_message = $google_recaptcha_error[ $error_code ]; break; case 'hcaptcha': $captcha_title = __( 'hCaptcha', 'sureforms' ); $captcha_message = $hcaptcha_errors[ $error_code ]; break; case 'cf-turnstile': $captcha_title = __( 'Cloudflare Turnstile', 'sureforms' ); $captcha_message = $cf_turnstile_errors[ $error_code ]; break; default: $captcha_title = __( 'Unknown Captcha', 'sureforms' ); $captcha_message = __( 'Invalid captcha type.', 'sureforms' ); break; } $detail_message = sprintf( '%s: %s <br> Error Code: %s', $captcha_title, $captcha_message ?? 'Unknown error occurred.', $error_code ); $message = sprintf( / translators: %s is the captcha title. / __( '%s verification failed. Please contact your site administrator.', 'sureforms' ), $captcha_title ); return [ 'log_message' => $detail_message, // This variable is used for logging purposes, such as displaying detailed error information in the console on the front end. 'message' => $message, ]; } /* * Process and sanitize SureForms field data from submitted form data. * * @param array<mixed> $form_data Raw form data from submission. * * @since 1.11.0 * @return array Processed and sanitized submission data. / private function process_form_fields( $form_data ) { $submission_data = []; $form_data_keys = array_keys( $form_data ); $form_data_count = count( $form_data ); for ( $i = 0; $i < $form_data_count; $i++ ) { $key = strval( $form_data_keys[ $i ] ); /* * This will allow to pass only sureforms fields * checking -lbl- as thats mandatory for in key of sureforms fields. / if ( false === str_contains( $key, '-lbl-' ) ) { continue; } $value = $form_data[ $key ]; $field_name = htmlspecialchars( str_replace( '_', ' ', $key ) ); $field_block_name = Helper::get_block_name_from_field( $field_name ); /* * Filters the field value during form submission processing. * * This filter allows the Pro plugin to process and modify field values before they are saved. * The Pro plugin can implement custom sanitization, validation and escaping logic for its * specialized field types. When this filter is used by Pro, the core plugin will skip its * default validation. * * @since 1.11.0 * * @param mixed $value The raw field value from form submission. * @param array $field_data Field information array containing: * - 'field_name': The field name/key * - 'field_block_name': The block type identifier * @return array { * Processed field value data * * @type bool $is_processed Whether the value was processed by Pro plugin * @type mixed $value The processed and sanitized field value * } / $process_field_value = apply_filters( 'srfm_process_field_value', $value, [ 'field_name' => $field_name, 'field_block_name' => $field_block_name, ] ); if ( is_array( $process_field_value ) && ! empty( $process_field_value['is_processed'] ) && ! empty( $process_field_value['value'] ) ) { $submission_data[ $field_name ] = $process_field_value['value']; continue; } /* * Need to remove this refactor array value handling. * * The current array-based value handling needs to be replaced with: * 1. Block-specific value processing based on block type. * 2. Move premium features to pro version. * 3. Implement value processing through filters for extensibility. * * This will improve code organization and maintainability while properly * separating free/pro functionality. / // If the field is an array, encode the values. This is to add support for multi-upload field. if ( is_array( $value ) ) { $submission_data[ $field_name ] = array_map( static function ( $val ) { return rawurlencode( $val ); }, $value ); } else { $submission_data[ $field_name ] = is_string( $value ) ? htmlspecialchars( $value ) : $value; } } return apply_filters( 'srfm_before_prepare_submission_data', $submission_data ); } /* * Add From email and name in the header. * * @param array<mixed> $submission_data Submission data. * @param array<string> $item An associative array containing email settings, such as 'email_to', 'subject', 'email_body', and optional headers like 'email_reply_to', 'email_cc', and 'email_bcc'. * @param Smart_Tags $smart_tags Smart Tags instance. * @since 1.6.1 * @return string The formatted "From" email header. */ private static function add_from_data_in_header( $submission_data, $item, $smart_tags ) { $from_name = is_array( $item ) && ! empty( $item['from_name'] ) ? sanitize_text_field( Helper::get_string_value( $item['from_name'] ) ) : '{site_title}'; $from_email = is_array( $item ) && ! empty( $item['from_email'] ) ? Helper::get_string_value( $item['from_email'] ) : '{admin_email}'; // Check if the email contains smart tags. If not, validate the email. $is_valid_email = true; if ( ! str_contains( $from_email, '{' ) && ! str_contains( $from_email, '}' ) ) { $is_valid_email = filter_var( $from_email, FILTER_VALIDATE_EMAIL ); } // if the email is not valid, set it to the admin email. if ( ! $is_valid_email ) { $from_email = Helper::get_string_value( get_option( 'admin_email' ) ); } return 'From: ' . esc_html( Helper::get_string_value( $smart_tags->process_smart_tags( $from_name, $submission_data ) ) ) . ' <' . esc_html( Helper::get_string_value( $smart_tags->process_smart_tags( $from_email, $submission_data ) ) ) . '>' . "\r\n"; } }	44.18 KB	2025-11-17 18:39
📄 forms-data.php <?php /** * Sureforms get forms title and Ids. * * @package sureforms. * @since 0.0.1 / namespace SRFM\Inc; use SRFM\Inc\Traits\Get_Instance; use WP_Error; use WP_REST_Response; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Load Defaults Class. * * @since 0.0.1 / class Forms_Data { use Get_Instance; /* * Constructor * * @since 0.0.1 / public function __construct() { add_action( 'rest_api_init', [ $this, 'register_custom_endpoint' ] ); } /* * Add custom API Route load-form-defaults * * @return void * @since 0.0.1 / public function register_custom_endpoint() { register_rest_route( 'sureforms/v1', '/forms-data', [ 'methods' => 'GET', 'callback' => [ $this, 'load_forms' ], 'permission_callback' => [ $this, 'get_form_permissions_check' ], ] ); } /* * Checks whether a given request has permission to read the form. * * @return true\|WP_Error True if the request has read access, WP_Error object otherwise. * @since 0.0.1 / public function get_form_permissions_check() { if ( Helper::current_user_can( 'edit_posts' ) ) { return true; } return new \WP_Error( 'rest_cannot_view', __( 'Sorry, you are not allowed to view the form.', 'sureforms' ), [ 'status' => \rest_authorization_required_code() ] ); } /* * Handle Form status * * @param \WP_REST_Request $request Full details about the request. * * @return WP_REST_Response * @since 0.0.1 */ public function load_forms( $request ) { $nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) ); if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) { wp_send_json_error( [ 'data' => __( 'Nonce verification failed.', 'sureforms' ), 'status' => false, ] ); } $args = [ 'post_type' => 'sureforms_form', 'post_status' => 'publish', 'posts_per_page' => -1, // Retrieve all posts. ]; $form_posts = get_posts( $args ); $data = []; foreach ( $form_posts as $post ) { $data[] = [ 'id' => $post->ID, 'title' => $post->post_title, 'content' => $post->post_content, ]; } return new WP_REST_Response( $data ); } }	2.21 KB	2025-11-17 18:39
📄 frontend-assets.php <?php /** * SureForms Public Class. * * Class file for public functions. * * @package SureForms / namespace SRFM\Inc; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Public Class * * @since 0.0.1 / class Frontend_Assets { use Get_Instance; /* * JS Assets. * * @since 0.0.11 * @var array<string> / public static $js_assets = [ 'form-submit' => 'formSubmit', 'frontend' => 'frontend', ]; /* * CSS Assets. * * @since 0.0.11 * @var array<string> / public static $css_assets = [ 'frontend-default' => 'blocks/default/frontend', 'common' => 'common', 'form' => 'frontend/form', 'single' => 'single', ]; /* * External CSS Assets. * * @since 0.0.11 * @var array<string> / public static $css_external_assets = [ 'tom-select' => 'tom-select', 'intl-tel-input' => 'intl/intlTelInput.min', ]; /* * Constructor * * @since 0.0.1 / public function __construct() { add_filter( 'template_include', [ $this, 'page_template' ], PHP_INT_MAX ); add_action( 'wp_enqueue_scripts', [ $this, 'register_scripts' ] ); add_filter( 'render_block', [ $this, 'generate_render_script' ], 10, 2 ); } /* * Enqueue Script. * * @return void * @since 0.0.1 / public function register_scripts() { $file_prefix = defined( 'SRFM_DEBUG' ) && SRFM_DEBUG ? '' : '.min'; $dir_name = defined( 'SRFM_DEBUG' ) && SRFM_DEBUG ? 'unminified' : 'minified'; $js_uri = SRFM_URL . 'assets/js/' . $dir_name . '/'; $css_uri = SRFM_URL . 'assets/css/' . $dir_name . '/'; $css_vendor = SRFM_URL . 'assets/css/minified/deps/'; $is_rtl = is_rtl(); $rtl = $is_rtl ? '-rtl' : ''; $security_setting_options = get_option( 'srfm_security_settings_options' ); $is_set_v2_site_key = false; if ( is_array( $security_setting_options ) && isset( $security_setting_options['srfm_v2_invisible_site_key'] ) && ! empty( $security_setting_options['srfm_v2_invisible_site_key'] ) ) { $is_set_v2_site_key = true; } // Styles based on meta style. foreach ( self::$css_assets as $handle => $path ) { wp_register_style( SRFM_SLUG . '-' . $handle, $css_uri . $path . $file_prefix . $rtl . '.css', [], SRFM_VER ); } // External styles. foreach ( self::$css_external_assets as $handle => $path ) { wp_register_style( SRFM_SLUG . '-' . $handle, $css_vendor . $path . '.css', [], SRFM_VER ); } // Scripts. foreach ( self::$js_assets as $handle => $name ) { if ( 'form-submit' === $handle ) { wp_register_script( SRFM_SLUG . '-' . $handle, SRFM_URL . 'assets/build/' . $name . '.js', [ 'wp-api-fetch' ], SRFM_VER, true ); } else { wp_register_script( SRFM_SLUG . '-' . $handle, $js_uri . $name . $file_prefix . '.js', [], SRFM_VER, true ); } } wp_localize_script( SRFM_SLUG . '-form-submit', SRFM_SLUG . '_submit', [ 'site_url' => site_url(), 'nonce' => wp_create_nonce( 'wp_rest' ), 'messages' => array_merge( Translatable::get_frontend_validation_messages(), [ 'srfm_turnstile_error_message' => __( 'Turnstile sitekey verification failed. Please contact your site administrator.', 'sureforms' ), 'srfm_google_captcha_error_message' => __( 'Google Captcha sitekey verification failed. Please contact your site administrator.', 'sureforms' ), 'srfm_captcha_h_error_message' => __( 'HCaptcha sitekey verification failed. Please contact your site administrator.', 'sureforms' ), ] ), 'is_rtl' => $is_rtl, ] ); $current_post = get_post(); // Let's conditionally load form assets if current requested page has our forms. if ( $current_post instanceof \WP_Post ) { // Handles condition for Instant Form, Block Embedded, and Shortcode Embedded forms. $load_assets = ( SRFM_FORMS_POST_TYPE === $current_post->post_type \|\| ( false !== strpos( $current_post->post_content, 'wp:srfm/form' ) \|\| has_shortcode( $current_post->post_content, 'sureforms' ) ) ); if ( $load_assets ) { // Load needed styles in head tag if current requested page has SureForms form. self::enqueue_scripts_and_styles(); } } } /* * Enqueue scripts and styles. * * @return void * @since 0.0.11 / public static function enqueue_scripts_and_styles() { // Load the styles. foreach ( self::$css_assets as $handle => $path ) { // Skip single form styles if not on single form page. if ( 'single' === $handle && ! is_singular( SRFM_FORMS_POST_TYPE ) ) { continue; } wp_enqueue_style( SRFM_SLUG . '-' . $handle ); } // Load the external styles. Like Phone and Tom Select. foreach ( self::$css_external_assets as $handle => $path ) { wp_enqueue_style( SRFM_SLUG . '-' . $handle ); } // Load the scripts. foreach ( self::$js_assets as $handle => $path ) { wp_enqueue_script( SRFM_SLUG . '-' . $handle ); } } /* * Enqueue block scripts * * @param string $block_type block name. * @param array<string, mixed> $attr Array of block attributes. * @since 0.0.1 * @return void / public function enqueue_srfm_script( $block_type, $attr ) { $block_name = str_replace( 'srfm/', '', $block_type ); // associative array to keep the count of block that requires scripts to work. $script_dep_blocks = [ 'dropdown' => 0, 'multi-choice' => 0, 'number' => 0, 'textarea' => 0, 'url' => 0, 'phone' => 0, 'input' => 0, ]; $file_prefix = defined( 'SRFM_DEBUG' ) && SRFM_DEBUG ? '' : '.min'; $dir_name = defined( 'SRFM_DEBUG' ) && SRFM_DEBUG ? 'unminified' : 'minified'; // Check if block is in the array and check if block is already enqueued. if ( in_array( $block_name, array_keys( $script_dep_blocks ), true ) && 0 === $script_dep_blocks[ $block_name ] ) { $script_dep_blocks[ $block_name ] += 1; $js_uri = SRFM_URL . 'assets/js/' . $dir_name . '/blocks/'; $js_vendor_uri = SRFM_URL . 'assets/js/minified/deps/'; $css_vendor_uri = SRFM_URL . 'assets/css/minified/deps/'; if ( 'phone' === $block_name ) { wp_enqueue_script( SRFM_SLUG . "-{$block_name}-intl-input-deps", $js_vendor_uri . 'intl/intTelInputWithUtils.min.js', [], SRFM_VER, true ); } if ( 'dropdown' === $block_name ) { // if the dropdown / address-compact block is after any other block, then we need to dequeue the srfm-form-submit script and enqueue it again and load it with tom-select dependency. wp_dequeue_script( SRFM_SLUG . '-form-submit' ); wp_enqueue_script( SRFM_SLUG . '-dropdown', $js_uri . 'dropdown' . $file_prefix . '.js', [ 'wp-a11y' ], SRFM_VER, true ); wp_enqueue_script( SRFM_SLUG . '-tom-select', $js_vendor_uri . 'tom-select.min.js', [], SRFM_VER, true ); // frontend utils using dropdown dependency. wp_enqueue_script( SRFM_SLUG . '-form-submit', SRFM_URL . 'assets/build/formSubmit.js', [ 'srfm-tom-select', 'srfm-dropdown', 'wp-api-fetch', ], SRFM_VER, true ); } if ( 'dropdown' !== $block_name ) { wp_enqueue_script( SRFM_SLUG . "-{$block_name}", $js_uri . $block_name . $file_prefix . '.js', [], SRFM_VER, true ); } if ( 'input' === $block_name ) { // Input mask JS. wp_enqueue_script( SRFM_SLUG . '-inputmask', $js_vendor_uri . 'inputmask.min.js', [], SRFM_VER, true ); } // Adding js for the input textarea block. if ( 'textarea' === $block_name && ! empty( $attr['isRichText'] ) ) { wp_enqueue_script( SRFM_SLUG . '-quill-editor', $js_vendor_uri . '/quill.min.js', [], SRFM_VER, true ); wp_enqueue_style( SRFM_SLUG . '-quill-editor', $css_vendor_uri . 'quill/quill.snow.css', [], SRFM_VER ); } } /* * Enqueueing the input mask JS for input and date-picker blocks. * This is a workaround for the input mask JS to work with the date-picker block. * Not adding in the above existing condition because code only runs when free block are added in the form. * Aim is to reduce redundant code and library file duplication. / if ( 'date-picker' === $block_name ) { // Input mask JS. wp_enqueue_script( SRFM_SLUG . '-inputmask', SRFM_URL . 'assets/js/minified/deps/inputmask.min.js', [], SRFM_VER, true ); } } /* * Render function. * * @param string $block_content Entire Block Content. * @param array<string> $block Block Properties As An Array. * @return string / public function generate_render_script( $block_content, $block ) { if ( isset( $block['attrs']['isEditing'] ) ) { // Only load block assets on the frontend. return $block_content; } if ( isset( $block['blockName'] ) ) { $attr = isset( $block['attrs'] ) && is_array( $block['attrs'] ) ? $block['attrs'] : []; self::enqueue_srfm_script( $block['blockName'], $attr ); } return $block_content; } /* * Form Template filter. * * @param string $template Template. * @return string Template. * @since 0.0.1 / public function page_template( $template ) { if ( ! is_singular( SRFM_FORMS_POST_TYPE ) ) { // Bail if not SureForms post type. return $template; } $file_name = 'single-form.php'; $template = locate_template( $file_name ); /* * Hook: srfm_form_template filter. * * @since 0.0.1 */ return apply_filters( 'srfm_form_template', $template ? $template : SRFM_DIR . '/templates/' . $file_name ); } }	9.39 KB	2025-11-17 18:39
📄 generate-form-markup.php <?php /** * Sureforms Generate Form Class file. * * @package sureforms. * @since 0.0.1 / namespace SRFM\Inc; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Load Defaults Class. * * @since 0.0.1 / class Generate_Form_Markup { use Get_Instance; /* * Constructor * * @since 0.0.1 / public function __construct() { add_action( 'rest_api_init', [ $this, 'register_custom_endpoint' ] ); } /* * Add custom API Route to generate form markup. * * @return void * @since 0.0.1 / public function register_custom_endpoint() { register_rest_route( 'sureforms/v1', '/generate-form-markup', [ 'methods' => 'GET', 'callback' => [ $this, 'get_form_markup' ], 'permission_callback' => '__return_true', ] ); } /* * Handle Form status * * @param int\|string $id Contains form ID. * @param bool $show_title_current_page Boolean to srfm-show/srfm-hide form title. * @param string $sf_classname additional class_name. * @param string $post_type Contains post type. * @param bool $do_blocks Boolean to enable/disable parsing dynamic blocks. * * @return string\|false * @since 0.0.1 / public static function get_form_markup( $id, $show_title_current_page = true, $sf_classname = '', $post_type = 'post', $do_blocks = false ) { if ( isset( $_GET['id'] ) && isset( $_GET['srfm_form_markup_nonce'] ) ) { $nonce = isset( $_GET['srfm_form_markup_nonce'] ) ? sanitize_text_field( wp_unslash( $_GET['srfm_form_markup_nonce'] ) ) : ''; $id = wp_verify_nonce( $nonce, 'srfm_form_markup' ) && ! empty( $_GET['srfm_form_markup_nonce'] ) ? Helper::get_integer_value( sanitize_text_field( wp_unslash( $_GET['id'] ) ) ) : ''; } else { $id = Helper::get_integer_value( $id ); } // Check for any form restrictions. $form_id = Helper::get_integer_value( $id ); if ( Form_Restriction::is_form_restricted( $form_id ) ) { return Form_Restriction::display_form_restriction_message( $form_id ); } do_action( 'srfm_localize_conditional_logic_data', $id ); $post = get_post( Helper::get_integer_value( $id ) ); $content = ''; $active_plugins = Helper::get_array_value( get_option( 'active_plugins', [] ) ); $is_learndash_active = in_array( 'sfwd-lms/sfwd_lms.php', $active_plugins, true ); if ( $is_learndash_active ) { $do_blocks = true; } if ( $post && ! empty( $post->post_content ) ) { if ( ! empty( $do_blocks ) ) { $content = do_blocks( $post->post_content ); } else { $content = apply_filters( 'the_content', $post->post_content ); // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound -- wordpress hook } } $blocks = parse_blocks( $content ); $block_count = count( $blocks ); $current_post_type = get_post_type(); // load all the frontend assets. Frontend_Assets::enqueue_scripts_and_styles(); ob_start(); if ( '' !== $id && 0 !== $block_count ) { $container_id = 'srfm-form-container-' . Helper::get_string_value( $id ); $form_styling = get_post_meta( $id, '_srfm_forms_styling', true ); $form_styling = ! empty( $form_styling ) && is_array( $form_styling ) ? $form_styling : []; // Background Settings. $bg_type = $form_styling['bg_type'] ?? 'color'; $bg_color = $form_styling['bg_color'] ?? ''; $bg_image = $form_styling['bg_image'] ?? ''; $bg_image_position = $form_styling['bg_image_position'] ?? []; $bg_image_attachment = $form_styling['bg_image_attachment'] ?? 'scroll'; $bg_image_repeat = $form_styling['bg_image_repeat'] ?? 'no-repeat'; $bg_image_size = $form_styling['bg_image_size'] ?? 'cover'; $bg_image_size_custom = $form_styling['bg_image_size_custom'] ?? 100; $bg_image_size_custom_unit = $form_styling['bg_image_size_custom_unit'] ?? '%'; $bg_gradient = $form_styling['bg_gradient'] ?? 'linear-gradient(90deg, #FFC9B2 0%, #C7CBFF 100%)'; $gradient_type = $form_styling['gradient_type'] ?? 'basic'; // Basic or advanced. $is_advanced_gradient = 'advanced' === $gradient_type ? true : false; $bg_gradient_type = $is_advanced_gradient && isset( $form_styling['bg_gradient_type'] ) ? $form_styling['bg_gradient_type'] : 'linear'; // linear or radial gradient. $bg_gradient_color_1 = $is_advanced_gradient && isset( $form_styling['bg_gradient_color_1'] ) ? $form_styling['bg_gradient_color_1'] : ''; $bg_gradient_color_2 = $is_advanced_gradient && isset( $form_styling['bg_gradient_color_2'] ) ? $form_styling['bg_gradient_color_2'] : ''; $bg_gradient_location_1 = $is_advanced_gradient && isset( $form_styling['bg_gradient_location_1'] ) ? $form_styling['bg_gradient_location_1'] : ''; $bg_gradient_location_2 = $is_advanced_gradient && isset( $form_styling['bg_gradient_location_2'] ) ? $form_styling['bg_gradient_location_2'] : ''; $bg_gradient_angle = $is_advanced_gradient && isset( $form_styling['bg_gradient_angle'] ) ? $form_styling['bg_gradient_angle'] : ''; // Overlay Settings. $overlay_type = $form_styling['bg_gradient_overlay_type'] ?? ''; $overlay_size = $form_styling['bg_overlay_size'] ?? 'cover'; $overlay_opacity = $form_styling['bg_overlay_opacity'] ?? 1; $overlay_color = $form_styling['bg_image_overlay_color'] ?? ''; $overlay_image = $form_styling['bg_overlay_image'] ?? ''; $overlay_position = $form_styling['bg_overlay_position'] ?? []; $overlay_attachment = $form_styling['bg_overlay_attachment'] ?? 'scroll'; $overlay_repeat = $form_styling['bg_overlay_repeat'] ?? 'no-repeat'; $overlay_blend_mode = $form_styling['bg_overlay_blend_mode'] ?? 'normal'; // Gradient Overlay. $bg_overlay_gradient = $form_styling['bg_overlay_gradient'] ?? 'linear-gradient(90deg, #FFC9B2 0%, #C7CBFF 100%)'; $overlay_gradient_type = $form_styling['overlay_gradient_type'] ?? 'basic'; // Basic or advanced. $is_overlay_advanced_gradient = 'advanced' === $overlay_gradient_type ? true : false; $bg_overlay_gradient_type = $is_overlay_advanced_gradient && isset( $form_styling['bg_overlay_gradient_type'] ) ? $form_styling['bg_overlay_gradient_type'] : 'linear'; $bg_overlay_gradient_color_1 = $is_overlay_advanced_gradient && isset( $form_styling['bg_overlay_gradient_color_1'] ) ? $form_styling['bg_overlay_gradient_color_1'] : ''; $bg_overlay_gradient_color_2 = $is_overlay_advanced_gradient && isset( $form_styling['bg_overlay_gradient_color_2'] ) ? $form_styling['bg_overlay_gradient_color_2'] : ''; $bg_overlay_gradient_location_1 = $is_overlay_advanced_gradient && isset( $form_styling['bg_overlay_gradient_location_1'] ) ? $form_styling['bg_overlay_gradient_location_1'] : ''; $bg_overlay_gradient_location_2 = $is_overlay_advanced_gradient && isset( $form_styling['bg_overlay_gradient_location_2'] ) ? $form_styling['bg_overlay_gradient_location_2'] : ''; $bg_overlay_gradient_angle = $is_overlay_advanced_gradient && isset( $form_styling['bg_overlay_gradient_angle'] ) ? $form_styling['bg_overlay_gradient_angle'] : ''; // Embed Form Settings. $form = [ // Padding. 'padding_top' => isset( $form_styling['form_padding_top'] ) ? floatval( $form_styling['form_padding_top'] ) : 0, 'padding_right' => isset( $form_styling['form_padding_right'] ) ? floatval( $form_styling['form_padding_right'] ) : 0, 'padding_bottom' => isset( $form_styling['form_padding_bottom'] ) ? floatval( $form_styling['form_padding_bottom'] ) : 0, 'padding_left' => isset( $form_styling['form_padding_left'] ) ? floatval( $form_styling['form_padding_left'] ) : 0, 'padding_unit' => isset( $form_styling['form_padding_unit'] ) ? Helper::get_string_value( $form_styling['form_padding_unit'] ) : 'px', // Border Radius. 'border_radius_top' => isset( $form_styling['form_border_radius_top'] ) ? floatval( $form_styling['form_border_radius_top'] ) : 0, 'border_radius_right' => isset( $form_styling['form_border_radius_right'] ) ? floatval( $form_styling['form_border_radius_right'] ) : 0, 'border_radius_bottom' => isset( $form_styling['form_border_radius_bottom'] ) ? floatval( $form_styling['form_border_radius_bottom'] ) : 0, 'border_radius_left' => isset( $form_styling['form_border_radius_left'] ) ? floatval( $form_styling['form_border_radius_left'] ) : 0, 'border_radius_unit' => isset( $form_styling['form_border_radius_unit'] ) ? Helper::get_string_value( $form_styling['form_border_radius_unit'] ) : 'px', ]; // Instant Form Settings. $instant_form = [ // Padding. 'padding_top' => isset( $form_styling['instant_form_padding_top'] ) ? floatval( $form_styling['instant_form_padding_top'] ) : 32, 'padding_right' => isset( $form_styling['instant_form_padding_right'] ) ? floatval( $form_styling['instant_form_padding_right'] ) : 32, 'padding_bottom' => isset( $form_styling['instant_form_padding_bottom'] ) ? floatval( $form_styling['instant_form_padding_bottom'] ) : 32, 'padding_left' => isset( $form_styling['instant_form_padding_left'] ) ? floatval( $form_styling['instant_form_padding_left'] ) : 32, 'padding_unit' => isset( $form_styling['instant_form_padding_unit'] ) ? Helper::get_string_value( $form_styling['instant_form_padding_unit'] ) : 'px', // Border Radius. 'border_radius_top' => isset( $form_styling['instant_form_border_radius_top'] ) ? floatval( $form_styling['instant_form_border_radius_top'] ) : 12, 'border_radius_right' => isset( $form_styling['instant_form_border_radius_right'] ) ? floatval( $form_styling['instant_form_border_radius_right'] ) : 12, 'border_radius_bottom' => isset( $form_styling['instant_form_border_radius_bottom'] ) ? floatval( $form_styling['instant_form_border_radius_bottom'] ) : 12, 'border_radius_left' => isset( $form_styling['instant_form_border_radius_left'] ) ? floatval( $form_styling['instant_form_border_radius_left'] ) : 12, 'border_radius_unit' => isset( $form_styling['instant_form_border_radius_unit'] ) ? Helper::get_string_value( $form_styling['instant_form_border_radius_unit'] ) : 'px', ]; if ( 'custom' === $overlay_size ) { $bg_overlay_custom_size = $form_styling['bg_overlay_custom_size'] ?? 100; $bg_overlay_custom_size_unit = $form_styling['bg_overlay_custom_size_unit'] ?? '%'; $overlay_size = $bg_overlay_custom_size . $bg_overlay_custom_size_unit; } $background_classes = apply_filters( 'srfm_add_background_classes', Helper::get_background_classes( $bg_type, $overlay_type, $bg_image ), $id ); $neve_theme_margin_class_name = 'srfm-neve-theme-add-margin-bottom'; $theme_name = wp_get_theme()->get( 'Name' ); $form_classes = [ 'srfm-form-container', $container_id, $sf_classname, 'Neve' === $theme_name ? $neve_theme_margin_class_name : '', // compatibility with Neve theme for margin between main content and footer. $background_classes, ]; $custom_added_classes = Helper::get_meta_value( $id, '_srfm_additional_classes' ); if ( ! empty( $custom_added_classes ) && is_string( $custom_added_classes ) ) { $custom_added_classes = explode( ' ', $custom_added_classes ); foreach ( $custom_added_classes as $class ) { if ( Helper::is_valid_css_class_name( $class ) ) { $form_classes[] = $class; } } } $page_break_settings = defined( 'SRFM_PRO_VER' ) && apply_filters( 'srfm_use_page_break_layout', true ) ? get_post_meta( $id, '_srfm_page_break_settings', true ) : []; $page_break_settings = ! empty( $page_break_settings ) && is_array( $page_break_settings ) ? $page_break_settings : []; $is_page_break = ! empty( $page_break_settings ) ? $page_break_settings['is_page_break'] : false; $page_break_progress_type = ! empty( $page_break_settings ) ? $page_break_settings['progress_indicator_type'] : 'none'; $form_confirmation = get_post_meta( $id, '_srfm_form_confirmation' ); $confirmation_type = ''; $submission_action = ''; $success_url = ''; if ( is_array( $form_confirmation ) && isset( $form_confirmation[0][0] ) ) { $confirmation_data = $form_confirmation[0][0]; $page_url = $confirmation_data['page_url'] ?? ''; $custom_url = $confirmation_data['custom_url'] ?? ''; $confirmation_type = $confirmation_data['confirmation_type'] ?? ''; $submission_action = $confirmation_data['submission_action'] ?? ''; $success_url = ''; if ( 'different page' === $confirmation_type ) { $success_url = $page_url; } elseif ( 'custom url' === $confirmation_type ) { $success_url = $custom_url; } } // Submit button. $button_text = Helper::get_meta_value( $id, '_srfm_submit_button_text' ); $submit_button_alignment = ! empty( $form_styling['submit_button_alignment'] ) ? $form_styling['submit_button_alignment'] : 'left'; if ( is_rtl() && ( 'left' === $submit_button_alignment \|\| 'right' === $submit_button_alignment ) ) { $submit_button_alignment = 'right' === $submit_button_alignment ? 'left' : 'right'; } $btn_from_theme = Helper::get_meta_value( $id, '_srfm_inherit_theme_button' ); $is_inline_button = apply_filters( 'srfm_is_inline_button', Helper::get_meta_value( $id, '_srfm_is_inline_button' ) ); $security_type = Helper::get_meta_value( $id, '_srfm_captcha_security_type' ); $form_custom_css_meta = Helper::get_meta_value( $id, '_srfm_form_custom_css' ); $custom_css = ! empty( $form_custom_css_meta ) && is_string( $form_custom_css_meta ) ? $form_custom_css_meta : ''; $full = 'justify' === $submit_button_alignment ? true : false; $recaptcha_version = 'g-recaptcha' === $security_type ? Helper::get_meta_value( $id, '_srfm_form_recaptcha' ) : ''; $srfm_cf_appearance_mode = ''; $srfm_cf_turnstile_site_key = ''; $srfm_hcaptcha_site_key = ''; $google_captcha_site_key = ''; if ( 'none' !== $security_type ) { $global_setting_options = get_option( 'srfm_security_settings_options' ); } else { $global_setting_options = []; } if ( is_array( $global_setting_options ) && 'cf-turnstile' === $security_type ) { $srfm_cf_turnstile_site_key = $global_setting_options['srfm_cf_turnstile_site_key'] ?? ''; $srfm_cf_appearance_mode = $global_setting_options['srfm_cf_appearance_mode'] ?? 'auto'; } if ( is_array( $global_setting_options ) && 'hcaptcha' === $security_type ) { $srfm_hcaptcha_site_key = $global_setting_options['srfm_hcaptcha_site_key'] ?? ''; } if ( is_array( $global_setting_options ) && 'g-recaptcha' === $security_type ) { switch ( $recaptcha_version ) { case 'v2-checkbox': $google_captcha_site_key = $global_setting_options['srfm_v2_checkbox_site_key'] ?? ''; break; case 'v2-invisible': $google_captcha_site_key = $global_setting_options['srfm_v2_invisible_site_key'] ?? ''; break; case 'v3-reCAPTCHA': $google_captcha_site_key = $global_setting_options['srfm_v3_site_key'] ?? ''; break; default: break; } } // Ensure $google_captcha_site_key is not empty, and if not, trim any leading or trailing whitespace. $google_captcha_site_key = is_string( $google_captcha_site_key ) && ! empty( $google_captcha_site_key ) ? trim( $google_captcha_site_key ) : ''; $primary_color = $form_styling['primary_color']; $help_color_var = $form_styling['text_color']; $label_text_color = $form_styling['text_color_on_primary']; $field_spacing = $form_styling['field_spacing']; // New colors. $primary_color_var = $primary_color ? $primary_color : '#046bd2'; $label_text_color_var = $label_text_color ? $label_text_color : '#111827'; $selected_size = Helper::get_css_vars( $field_spacing ); $should_show_submit_button = apply_filters( 'srfm_show_submit_button', 0 !== $block_count && ! $is_inline_button \|\| $is_page_break, $id ); if ( ! $should_show_submit_button ) { $form_classes[] = 'srfm-submit-button-hidden'; } ?> <div class="<?php echo esc_attr( implode( ' ', array_filter( $form_classes ) ) ); ?>"> <style> / Need to check and remove the input variables related to the Style Tab. / <?php echo esc_html( ".{$container_id}" ); ?> { / New test variables / --srfm-color-scheme-primary: <?php echo esc_html( $primary_color_var ); ?>; --srfm-color-scheme-text-on-primary: <?php echo esc_html( $label_text_color_var ); ?>; --srfm-color-scheme-text: <?php echo esc_html( $help_color_var ); ?>; --srfm-quill-editor-color: <?php echo esc_html( $primary_color_var ); ?>; --srfm-color-input-label: <?php echo esc_html( $help_color_var ); ?>; --srfm-color-input-description: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.65 ); --srfm-color-input-placeholder: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.5 ); --srfm-color-input-text: <?php echo esc_html( $help_color_var ); ?>; --srfm-color-input-prefix: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.65 ); --srfm-color-input-background: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.02 ); --srfm-color-input-background-hover: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.05 ); --srfm-color-input-background-disabled: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.07 ); --srfm-color-input-border: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.25 ); --srfm-color-input-border-disabled: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.15 ); --srfm-color-multi-choice-svg: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.7 ); --srfm-color-input-border-hover: hsl( from <?php echo esc_html( $primary_color_var ); ?> h s l / 0.65 ); --srfm-color-input-border-focus-glow: hsl( from <?php echo esc_html( $primary_color_var ); ?> h s l / 0.15 ); --srfm-color-input-selected: hsl( from <?php echo esc_html( $primary_color_var ); ?> h s l / 0.1 ); --srfm-btn-color-hover: hsl( from <?php echo esc_html( $primary_color_var ); ?> h s l / 0.9 ); --srfm-btn-color-disabled: hsl( from <?php echo esc_html( $primary_color_var ); ?> h s l / 0.25 ); / Dropdown Variables / --srfm-dropdown-input-background-hover: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.05 ); --srfm-dropdown-option-background-hover: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.10 ); --srfm-dropdown-option-background-selected: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.05 ); --srfm-dropdown-option-selected-icon: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.65 ); --srfm-dropdown-option-text-color: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.80 ); --srfm-dropdown-option-selected-text: <?php echo esc_html( $help_color_var ); ?>; --srfm-dropdown-badge-background: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.05 ); --srfm-dropdown-badge-background-hover: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.10 ); --srfm-dropdown-menu-border-color: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.10 ); --srfm-dropdown-placeholder-color: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.50 ); --srfm-dropdown-icon-color: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.65 ); --srfm-dropdown-icon-disabled: hsl( from <?php echo esc_html( $help_color_var ); ?> h s l / 0.25 ); / Background Control Variables / <?php // Form Styles. $styling_vars = [ // Instant Form Padding. '--srfm-instant-form-padding-top' => sanitize_text_field( "{$instant_form['padding_top']}{$instant_form['padding_unit']}" ), '--srfm-instant-form-padding-right' => sanitize_text_field( "{$instant_form['padding_right']}{$instant_form['padding_unit']}" ), '--srfm-instant-form-padding-bottom' => sanitize_text_field( "{$instant_form['padding_bottom']}{$instant_form['padding_unit']}" ), '--srfm-instant-form-padding-left' => sanitize_text_field( "{$instant_form['padding_left']}{$instant_form['padding_unit']}" ), // Instant Form Border Radius. '--srfm-instant-form-border-radius-top' => sanitize_text_field( "{$instant_form['border_radius_top']}{$instant_form['border_radius_unit']}" ), '--srfm-instant-form-border-radius-right' => sanitize_text_field( "{$instant_form['border_radius_right']}{$instant_form['border_radius_unit']}" ), '--srfm-instant-form-border-radius-bottom' => sanitize_text_field( "{$instant_form['border_radius_bottom']}{$instant_form['border_radius_unit']}" ), '--srfm-instant-form-border-radius-left' => sanitize_text_field( "{$instant_form['border_radius_left']}{$instant_form['border_radius_unit']}" ), // Embed Form Padding. '--srfm-form-padding-top' => sanitize_text_field( "{$form['padding_top']}{$form['padding_unit']}" ), '--srfm-form-padding-right' => sanitize_text_field( "{$form['padding_right']}{$form['padding_unit']}" ), '--srfm-form-padding-bottom' => sanitize_text_field( "{$form['padding_bottom']}{$form['padding_unit']}" ), '--srfm-form-padding-left' => sanitize_text_field( "{$form['padding_left']}{$form['padding_unit']}" ), // Embed Form Border Radius. '--srfm-form-border-radius-top' => sanitize_text_field( "{$form['border_radius_top']}{$form['border_radius_unit']}" ), '--srfm-form-border-radius-right' => sanitize_text_field( "{$form['border_radius_right']}{$form['border_radius_unit']}" ), '--srfm-form-border-radius-bottom' => sanitize_text_field( "{$form['border_radius_bottom']}{$form['border_radius_unit']}" ), '--srfm-form-border-radius-left' => sanitize_text_field( "{$form['border_radius_left']}{$form['border_radius_unit']}" ), ]; // Background Styles. if ( 'image' === $bg_type && ! empty( $bg_image ) ) { $bg_size_merged = 'custom' === $bg_image_size ? "{$bg_image_size_custom}{$bg_image_size_custom_unit}" : $bg_image_size; $styling_vars += [ '--srfm-bg-image' => 'url(' . esc_url_raw( $bg_image ) . ')', '--srfm-bg-position' => sanitize_text_field( ( ( ! empty( $bg_image_position['x'] ) ? $bg_image_position['x'] : 0.5 ) 100 ) . '% ' . ( ( ! empty( $bg_image_position['y'] ) ? $bg_image_position['y'] : 0.5 ) * 100 ) . '% ' ), '--srfm-bg-attachment' => sanitize_text_field( $bg_image_attachment ), '--srfm-bg-repeat' => sanitize_text_field( $bg_image_repeat ), '--srfm-bg-size' => sanitize_text_field( $bg_size_merged ), ]; } elseif ( 'color' === $bg_type && ! empty( $bg_color ) ) { $styling_vars['--srfm-bg-color'] = sanitize_text_field( $bg_color ); } elseif ( 'gradient' === $bg_type && ! empty( $bg_gradient ) ) { if ( $is_advanced_gradient ) { $bg_gradient = Helper::get_gradient_css( $bg_gradient_type, $bg_gradient_color_1, $bg_gradient_color_2, $bg_gradient_location_1, $bg_gradient_location_2, $bg_gradient_angle ); } $styling_vars['--srfm-bg-gradient'] = sanitize_text_field( $bg_gradient ); } // Overlay Variables. if ( 'image' === $bg_type && 'image' === $overlay_type && ! empty( $overlay_image ) ) { $styling_vars += [ '--srfm-bg-overlay-image' => 'url(' . esc_url_raw( $overlay_image ) . ')', '--srfm-bg-overlay-position' => sanitize_text_field( ( ( ! empty( $overlay_position['x'] ) ? $overlay_position['x'] : 0.5 ) * 100 ) . '% ' . ( ( ! empty( $overlay_position['y'] ) ? $overlay_position['y'] : 0.5 ) * 100 ) . '%' ), '--srfm-bg-overlay-attachment' => sanitize_text_field( $overlay_attachment ), '--srfm-bg-overlay-repeat' => sanitize_text_field( $overlay_repeat ), '--srfm-bg-overlay-size' => sanitize_text_field( $overlay_size ), '--srfm-bg-overlay-blend-mode' => sanitize_text_field( $overlay_blend_mode ), ]; } elseif ( 'image' === $bg_type && 'color' === $overlay_type && ! empty( $overlay_color ) ) { $styling_vars += [ '--srfm-bg-overlay-color' => sanitize_text_field( $overlay_color ), ]; } elseif ( 'image' === $bg_type && 'gradient' === $overlay_type && ! empty( $bg_overlay_gradient ) ) { if ( $is_overlay_advanced_gradient ) { $bg_overlay_gradient = Helper::get_gradient_css( $bg_overlay_gradient_type, $bg_overlay_gradient_color_1, $bg_overlay_gradient_color_2, $bg_overlay_gradient_location_1, $bg_overlay_gradient_location_2, $bg_overlay_gradient_angle ); } $styling_vars += [ '--srfm-bg-overlay-gradient' => sanitize_text_field( $bg_overlay_gradient ), ]; } $styling_vars['--srfm-bg-overlay-opacity'] = floatval( $overlay_opacity ); // Output the CSS variables. foreach ( $styling_vars as $key => $value ) { echo esc_html( Helper::get_string_value( $key ) ) . ': ' . esc_html( Helper::get_string_value( $value ) ) . ';'; } ?> <?php // Echo the CSS variables for the form according to the field spacing selected. foreach ( $selected_size as $variable => $value ) { echo esc_html( Helper::get_string_value( $variable ) ) . ': ' . esc_html( Helper::get_string_value( $value ) ) . ';'; } do_action( 'srfm_form_css_variables', [ 'id' => $id, 'primary_color' => $primary_color_var, 'help_color' => $help_color_var, 'form_styling' => $form_styling, ] ); // echo custom css on page/post. if ( 'sureforms_form' !== $current_post_type ) { echo wp_kses_post( $custom_css ); } ?> } </style> <?php if ( 'sureforms_form' !== $current_post_type && true === $show_title_current_page ) { $title = ! empty( get_the_title( (int) $id ) ) ? get_the_title( (int) $id ) : ''; ?> <h2 class="srfm-form-title"><?php echo esc_html( $title ); ?></h2> <?php } ?> <form method="post" enctype="multipart/form-data" id="srfm-form-<?php echo esc_attr( Helper::get_string_value( $id ) ); ?>" class="srfm-form <?php echo esc_attr( 'sureforms_form' === $post_type ? 'srfm-single-form ' : '' ); ?>" form-id="<?php echo esc_attr( Helper::get_string_value( $id ) ); ?>" after-submission="<?php echo esc_attr( $submission_action ); ?>" message-type="<?php echo esc_attr( $confirmation_type ? $confirmation_type : 'same page' ); ?>" success-url="<?php echo esc_attr( $success_url ? $success_url : '' ); ?>" ajaxurl="<?php echo esc_url( admin_url( 'admin-ajax.php' ) ); ?>" data-nonce="<?php echo esc_attr( wp_create_nonce( 'unique_validation_nonce' ) ); ?>" > <?php wp_nonce_field( 'srfm-form-submit', 'sureforms_form_submit' ); $global_setting_options = get_option( 'srfm_security_settings_options' ); $honeypot_spam = is_array( $global_setting_options ) && isset( $global_setting_options['srfm_honeypot'] ) ? $global_setting_options['srfm_honeypot'] : ''; if ( $is_page_break && 'none' !== $page_break_progress_type ) { do_action( 'srfm_page_break_header', $id ); } ?> <input type="hidden" value="<?php echo esc_attr( Helper::get_string_value( $id ) ); ?>" name="form-id"> <input type="hidden" value="" name="srfm-sender-email-field" id="srfm-sender-email"> <input type="hidden" value="<?php echo esc_attr( Helper::get_string_value( $is_page_break ) ); ?>" id="srfm-page-break"> <?php if ( $honeypot_spam ) { ?> <input type="hidden" value="" name="srfm-honeypot-field"> <?php } self::common_error_message( 'head' ); if ( $is_page_break ) { do_action( 'srfm_page_break_pagination', $post, $id ); } elseif ( ! apply_filters( 'srfm_use_custom_field_content', false ) ) { // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Content is filtered and sanitized by WordPress core blocks and filters. echo $content; } do_action( 'srfm_after_field_content', $post, $id ); $captcha_container_hidden_class = ! empty( $google_captcha_site_key ) && ( 'v3-reCAPTCHA' === $recaptcha_version \|\| 'v2-invisible' === $recaptcha_version ) ? 'srfm-display-none' : ''; ?> <?php if ( $should_show_submit_button && ! empty( $security_type ) && 'none' !== $security_type ) { ?> <div class="srfm-captcha-container <?php echo esc_attr( $captcha_container_hidden_class ); ?>"> <?php if ( 'g-recaptcha' === $security_type ) { self::get_google_captcha_script( $recaptcha_version, $google_captcha_site_key ); } if ( 'cf-turnstile' === $security_type ) { self::get_cf_turnstile_script( $srfm_cf_appearance_mode, $srfm_cf_turnstile_site_key ); } if ( 'hcaptcha' === $security_type ) { self::get_h_captcha_script( $srfm_hcaptcha_site_key ); } ?> <div class="srfm-validation-error" id="captcha-error" style="display: none;"><?php echo esc_attr__( 'Please verify that you are not a robot.', 'sureforms' ); ?></div> </div> <?php } ?> <?php if ( $is_page_break ) { do_action( 'srfm_page_break_btn', $id ); } $srfm_button_classes = apply_filters( 'srfm_add_button_classes', [ '1' === $btn_from_theme ? 'wp-block-button__link' : 'srfm-btn-frontend srfm-button srfm-submit-button', 'v3-reCAPTCHA' === $recaptcha_version ? ' g-recaptcha' : '' ] ); ?> <div class="srfm-submit-container <?php echo esc_attr( $is_page_break ? 'srfm-hide' : '' ); ?>" style="<?php echo ! $should_show_submit_button ? 'visibility:hidden;position:absolute;' : ''; ?>"> <div style="width: <?php echo esc_attr( $full ? '100%' : '' ); ?>; text-align: <?php echo esc_attr( $submit_button_alignment ); ?>" class="wp-block-button"> <?php do_action( 'srfm_before_submit_button', $id ); ?> <?php if ( $should_show_submit_button ) { ?> <button style="<?php echo esc_attr( $full ? 'width: 100%;' : '' ); ?>" id="srfm-submit-btn" class="<?php echo esc_attr( implode( ' ', array_filter( $srfm_button_classes ) ) ); ?>" <?php if ( 'v3-reCAPTCHA' === $recaptcha_version ) { ?> data-callback="recaptchaCallback" data-error-callback="onGCaptchaV3Error" recaptcha-type="<?php echo esc_attr( $recaptcha_version ); ?>" data-sitekey="<?php echo esc_attr( $google_captcha_site_key ); ?>" <?php } ?> > <div class="srfm-submit-wrap"> <?php echo esc_html( $button_text ); ?> <div class="srfm-loader"></div> </div> </button> <?php } ?> <?php do_action( 'srfm_after_submit_button', $id ); ?> </div> </div> <?php } self::common_error_message( 'footer' ); ?> </form> <div class="srfm-single-form srfm-success-box in-page"> <div aria-live="polite" aria-atomic="true" role="alert" id="srfm-success-message-page-<?php echo esc_attr( Helper::get_string_value( $id ) ); ?>" class="srfm-success-box-description"></div> </div> </div> <?php return ob_get_clean(); } /** * Generate HCaptcha script markup * * @param string $srfm_hcaptcha_site_key site key. * @since 1.7.0 * @return void / public static function get_h_captcha_script( $srfm_hcaptcha_site_key ) { if ( ! empty( $srfm_hcaptcha_site_key ) ) { // hCaptcha script. wp_enqueue_script( 'hcaptcha', 'https://js.hcaptcha.com/1/api.js', [], null, [ 'strategy' => 'defer' ] ); // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersion ?> <div id="srfm-hcaptcha-sitekey" data-callback="onSuccess" data-error-callback="onHCaptchaError" class="h-captcha" data-sitekey="<?php echo esc_attr( $srfm_hcaptcha_site_key ); ?>"></div> <?php } else { Helper::render_missing_sitekey_error( 'HCaptcha' ); } } /* * Generate Google Recaptcha script markup * * @param string $recaptcha_version reCAPTCHA version. * @param string $google_captcha_site_key site key. * @since 1.7.0 * @return void / public static function get_google_captcha_script( $recaptcha_version, $google_captcha_site_key ) { if ( empty( $google_captcha_site_key ) ) { Helper::render_missing_sitekey_error( 'Google reCAPTCHA' ); return; } if ( 'v2-checkbox' === $recaptcha_version ) { ?> <?php wp_enqueue_script( 'google-recaptcha', 'https://www.google.com/recaptcha/api.js', [], SRFM_VER, true ); ?> <div class='g-recaptcha' data-callback="onSuccess" data-error-callback="onGCaptchaV2CheckBoxError" recaptcha-type="<?php echo esc_attr( $recaptcha_version ); ?>" data-sitekey="<?php echo esc_attr( strval( $google_captcha_site_key ) ); ?>" ></div> <?php } ?> <?php if ( 'v2-invisible' === $recaptcha_version ) { ?> <?php wp_enqueue_script( 'google-recaptcha-invisible', 'https://www.google.com/recaptcha/api.js?onload=recaptchaCallback&render=explicit', [ SRFM_SLUG . '-form-submit' ], SRFM_VER, true ); ?> <div class='g-recaptcha' recaptcha-type="<?php echo esc_attr( $recaptcha_version ); ?>" data-sitekey="<?php echo esc_attr( $google_captcha_site_key ); ?>" data-size="invisible"></div> <?php } ?> <?php if ( 'v3-reCAPTCHA' === $recaptcha_version ) { ?> <?php wp_enqueue_script( // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersion -- This is a third-party script, and specifying a version may lead to caching issues. Using null ensures the latest version is always loaded. 'srfm-google-recaptchaV3', 'https://www.google.com/recaptcha/api.js?render=' . $google_captcha_site_key, [], null, true ); ?> <?php } } /* * Generate Cloudflare Turnstile script markup * * @param string $srfm_cf_appearance_mode appearance mode. * @param string $srfm_cf_turnstile_site_key site key. * @since 1.7.0 * @return void / public static function get_cf_turnstile_script( $srfm_cf_appearance_mode, $srfm_cf_turnstile_site_key ) { if ( ! empty( $srfm_cf_turnstile_site_key ) ) { // Cloudflare Turnstile script. wp_enqueue_script( // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersion -- Third-party script; version not under our control. SRFM_SLUG . '-cf-turnstile', 'https://challenges.cloudflare.com/turnstile/v0/api.js', [], null, [ false, 'defer' => true, ] ); ?> <!-- The callback methods below are available on frontend.js. onTurnstileError displays and error in place of recaptcha dialog. --> <div id="srfm-cf-sitekey" class="cf-turnstile" data-callback="onSuccess" data-error-callback="onTurnstileError" data-theme="<?php echo esc_attr( $srfm_cf_appearance_mode ); ?>" data-sitekey="<?php echo esc_attr( $srfm_cf_turnstile_site_key ); ?>"></div> <?php } else { Helper::render_missing_sitekey_error( 'Turnstile' ); } } /* * Generate common error message markup * * @param string $position position of the error message. * @since 1.5.0 * @return void / public static function common_error_message( $position = 'footer' ) { $icon = Helper::fetch_svg( 'info_circle', '', 'aria-hidden="true"' ); $classes = "srfm-common-error-message srfm-error-message srfm-{$position}-error"; ?> <p id="srfm-error-message" class="<?php echo esc_attr( $classes ); ?>" hidden><?php echo wp_kses( $icon, Helper::$allowed_tags_svg ); ?><span class="srfm-error-content"><?php echo esc_html__( 'There was an error trying to submit your form. Please try again.', 'sureforms' ); ?></span></p> <?php } /* * Generate form confirmation markup * * @param array<mixed> $form_data contains form data. * @param array<mixed> $submission_data contains submission data. * @since 0.0.3 * @return string\|false / public static function get_confirmation_markup( $form_data = [], $submission_data = [] ) { $confirmation_message = ''; if ( empty( $form_data ) ) { return $confirmation_message; } $form_confirmation = isset( $form_data['form-id'] ) ? get_post_meta( Helper::get_integer_value( $form_data['form-id'] ), '_srfm_form_confirmation' ) : null; if ( ! is_array( $form_confirmation ) ) { return $confirmation_message; } $confirmation_data = is_array( $form_confirmation[0] ) && isset( $form_confirmation[0][0] ) ? $form_confirmation[0][0] : null; if ( is_array( $form_confirmation ) && isset( $confirmation_data['message'] ) && is_string( $confirmation_data['message'] ) ) { $confirmation_message = $confirmation_data['message']; } if ( empty( $submission_data ) ) { return $confirmation_message; } $smart_tags = new Smart_Tags(); $confirmation_message = $smart_tags->process_smart_tags( $confirmation_message, $submission_data, $form_data ); $markup = Helper::strip_js_attributes( apply_filters( 'srfm_after_submit_confirmation_message', $confirmation_message, $form_data, $submission_data ) ); if ( false !== strpos( $markup, 'src="image/svg+xml;base64' ) ) { // Handle Form Confirmation SVGs separately. We have planned to improve it in the future replacing it with image URL. $normalized_string = preg_replace( '/src="image\/svg\+xml;base64/', 'src="data:image/svg+xml;base64', $markup ); if ( is_string( $normalized_string ) ) { $markup = $normalized_string; } } return $markup; } /* * Get redirect url for form incase of different page or custom url is selected. * * @param array<mixed> $form_data contains form data. * @param array<mixed> $submission_data contains submission data. * @since 1.0.2 * @return string\|false */ public static function get_redirect_url( $form_data = [], $submission_data = [] ) { $redirect_url = ''; if ( empty( $form_data ) ) { return $redirect_url; } $form_confirmation = isset( $form_data['form-id'] ) ? get_post_meta( Helper::get_integer_value( $form_data['form-id'] ), '_srfm_form_confirmation' ) : null; if ( ! is_array( $form_confirmation ) ) { return $redirect_url; } $confirmation_data = is_array( $form_confirmation[0] ) && isset( $form_confirmation[0][0] ) ? $form_confirmation[0][0] : null; $page_url = $confirmation_data['page_url'] ?? ''; $custom_url = $confirmation_data['custom_url'] ?? ''; $confirmation_type = $confirmation_data['confirmation_type'] ?? ''; if ( 'different page' === $confirmation_type ) { $redirect_url = esc_url_raw( $page_url ); } elseif ( 'custom url' === $confirmation_type ) { $redirect_url = esc_url_raw( $custom_url ); } if ( empty( $redirect_url ) ) { return $redirect_url; } if ( empty( $confirmation_data['enable_query_params'] ) \|\| true !== $confirmation_data['enable_query_params'] ) { return $redirect_url; } if ( empty( $confirmation_data['query_params'] ) && ! is_array( $confirmation_data['query_params'] ) ) { return $redirect_url; } $query_params = []; foreach ( $confirmation_data['query_params'] as $params ) { if ( is_array( $params ) && ! empty( array_keys( $params ) ) && ! empty( array_values( $params ) ) ) { $query_params[ sanitize_text_field( array_keys( $params )[0] ) ] = sanitize_text_field( array_values( $params )[0] ); } } $redirect_url = add_query_arg( $query_params, $redirect_url ); if ( ! empty( $submission_data ) ) { $smart_tags = new Smart_Tags(); // Adding upload_format_type = 'raw' to retrieve urls as comma separated values. $form_data['upload_format_type'] = 'raw'; $redirect_url = html_entity_decode( Helper::get_string_value( $smart_tags->process_smart_tags( $redirect_url, $submission_data, $form_data ) ) ); } return esc_url_raw( apply_filters( 'srfm_after_submit_redirect_url', $redirect_url ) ); } }	39.33 KB	2025-11-17 18:39
📁 global-settings	-	2025-11-17 18:39
📄 gutenberg-hooks.php <?php /** * Gutenberg Hooks Manager Class. * * @package sureforms. / namespace SRFM\Inc; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Gutenberg hooks handler class. * * @since 0.0.1 / class Gutenberg_Hooks { use Get_Instance; /* * Block patterns to register. * * @var array<mixed> / protected $patterns = []; /* * Class constructor. * * @return void * @since 0.0.1 / public function __construct() { // Setting Form default patterns. $this->patterns = [ 'blank-form', 'contact-form', 'newsletter-form', 'support-form', 'feedback-form', 'event-rsvp-form', 'subscription-form', ]; // Initializing hooks. add_action( 'enqueue_block_editor_assets', [ $this, 'form_editor_screen_assets' ] ); add_action( 'enqueue_block_editor_assets', [ $this, 'block_editor_assets' ] ); add_filter( 'block_categories_all', [ $this, 'register_block_categories' ], 10, 1 ); add_filter( 'allowed_block_types_all', [ $this, 'disable_forms_wrapper_block' ], 10, 2 ); add_action( 'save_post_sureforms_form', [ $this, 'update_field_slug' ], 10, 2 ); add_action( 'load-post.php', [ $this, 'maybe_migrate_form_stylings' ] ); } /* * Disable Sureforms_Form Block and allowed only sureforms block inside Sureform CPT editor. * * @param bool\|array<string> $allowed_block_types Array of block types. * @param \WP_Block_Editor_Context $editor_context The current block editor context. * @return array<mixed>\|bool * @since 0.0.1 / public function disable_forms_wrapper_block( $allowed_block_types, $editor_context ) { if ( ! empty( $editor_context->post->post_type ) && 'sureforms_form' === $editor_context->post->post_type ) { $allow_block_types = [ 'srfm/input', 'srfm/email', 'srfm/textarea', 'srfm/number', 'srfm/checkbox', 'srfm/gdpr', 'srfm/phone', 'srfm/address', 'srfm/dropdown', 'srfm/multi-choice', 'srfm/url', 'srfm/separator', 'srfm/icon', 'srfm/image', 'srfm/advanced-heading', 'srfm/inline-button', ]; // Apply a filter to the $allow_block_types types array. return apply_filters( 'srfm_allowed_block_types', $allow_block_types, $editor_context ); } // Return the default $allowed_block_types value. return $allowed_block_types; } /* * Register our custom block category. * * @param array<mixed> $categories Array of categories. * @return array<mixed> * @since 0.0.1 / public function register_block_categories( $categories ) { $screen = get_current_screen(); if ( $screen && SRFM_FORMS_POST_TYPE === $screen->post_type ) { $title = esc_html__( 'General Fields', 'sureforms' ); } else { $title = esc_html__( 'SureForms', 'sureforms' ); } $custom_categories = [ [ 'slug' => 'sureforms', 'title' => $title, ], [ 'slug' => 'sureforms-pro', 'title' => esc_html__( 'Advanced Fields', 'sureforms' ), ], ]; return array_merge( $custom_categories, $categories ); } /* * Add Form Editor Scripts. * * @return void * @since 0.0.1 / public function form_editor_screen_assets() { $form_editor_script = '-formEditor'; $screen = get_current_screen(); $post_types = [ SRFM_FORMS_POST_TYPE ]; if ( is_null( $screen ) \|\| ! in_array( $screen->post_type, $post_types, true ) ) { return; } $script_asset_path = SRFM_DIR . 'assets/build/formEditor.asset.php'; $script_info = file_exists( $script_asset_path ) ? include $script_asset_path : [ 'dependencies' => [], 'version' => SRFM_VER, ]; wp_enqueue_script( SRFM_SLUG . $form_editor_script, SRFM_URL . 'assets/build/formEditor.js', $script_info['dependencies'], $script_info['version'], true ); wp_localize_script( SRFM_SLUG . $form_editor_script, 'scIcons', [ 'path' => SRFM_URL . 'assets/build/icon-assets' ] ); // Enqueue the code editor for the Custom CSS Editor in SureForms. wp_enqueue_code_editor( [ 'type' => 'text/css' ] ); wp_enqueue_script( 'wp-theme-plugin-editor' ); wp_enqueue_style( 'wp-codemirror' ); wp_localize_script( SRFM_SLUG . $form_editor_script, SRFM_SLUG . '_block_data', [ 'plugin_url' => SRFM_URL, 'admin_email' => get_option( 'admin_email' ), 'pro_plugin_name' => defined( 'SRFM_PRO_VER' ) && defined( 'SRFM_PRO_PRODUCT' ) ? SRFM_PRO_PRODUCT : 'free', ] ); Helper::register_script_translations( SRFM_SLUG . $form_editor_script ); } /* * Register all editor scripts. * * @return void * @since 0.0.1 / public function block_editor_assets() { $all_screen_blocks = '-blocks'; $screen = get_current_screen(); $blocks_asset_path = SRFM_DIR . 'assets/build/blocks.asset.php'; $blocks_info = file_exists( $blocks_asset_path ) ? include $blocks_asset_path : [ 'dependencies' => [], 'version' => SRFM_VER, ]; wp_enqueue_script( SRFM_SLUG . $all_screen_blocks, SRFM_URL . 'assets/build/blocks.js', $blocks_info['dependencies'], SRFM_VER, true ); Helper::register_script_translations( SRFM_SLUG . $all_screen_blocks ); $site_url = Helper::get_string_value( wp_parse_url( esc_url( get_site_url() ), PHP_URL_HOST ) ); $site_url = preg_replace( '/^www\./', '', $site_url ); wp_localize_script( SRFM_SLUG . $all_screen_blocks, SRFM_SLUG . '_block_data', [ 'template_picker_url' => admin_url( '/admin.php?page=add-new-form' ), 'plugin_url' => SRFM_URL, 'admin_email' => get_option( 'admin_email' ), 'post_url' => admin_url( 'post.php' ), 'current_screen' => $screen, 'smart_tags_array' => Smart_Tags::smart_tag_list(), 'smart_tags_array_email' => Smart_Tags::email_smart_tag_list(), 'srfm_form_markup_nonce' => wp_create_nonce( 'srfm_form_markup' ), 'get_form_markup_url' => 'sureforms/v1/generate-form-markup', 'is_pro_active' => Helper::has_pro(), 'srfm_default_dynamic_block_option' => get_option( 'srfm_default_dynamic_block_option', Helper::default_dynamic_block_option() ), 'form_selector_nonce' => Helper::current_user_can( 'edit_posts' ) ? wp_create_nonce( 'wp_rest' ) : '', 'is_admin_user' => Helper::current_user_can(), 'site_url' => $site_url, 'is_suremails_active' => is_plugin_active( 'suremails/suremails.php' ), ] ); // Localizing the field preview image links. wp_localize_script( SRFM_SLUG . $all_screen_blocks, SRFM_SLUG . '_fields_preview', apply_filters( 'srfm_block_preview_images', [ 'input_preview' => SRFM_URL . 'images/field-previews/input.svg', 'email_preview' => SRFM_URL . 'images/field-previews/email.svg', 'url_preview' => SRFM_URL . 'images/field-previews/url.svg', 'textarea_preview' => SRFM_URL . 'images/field-previews/textarea.svg', 'multi_choice_preview' => SRFM_URL . 'images/field-previews/multi-choice.svg', 'checkbox_preview' => SRFM_URL . 'images/field-previews/checkbox.svg', 'number_preview' => SRFM_URL . 'images/field-previews/number.svg', 'phone_preview' => SRFM_URL . 'images/field-previews/phone.svg', 'dropdown_preview' => SRFM_URL . 'images/field-previews/dropdown.svg', 'address_preview' => SRFM_URL . 'images/field-previews/address.svg', 'sureforms_preview' => SRFM_URL . 'images/field-previews/sureforms.svg', ] ) ); wp_localize_script( SRFM_SLUG . $all_screen_blocks, SRFM_SLUG . '_blocks_info', [ 'font_awesome_5_polyfill' => [], 'collapse_panels' => 'enabled', 'is_site_editor' => $screen ? $screen->id : null, ] ); } /* * This function generates slug for sureforms blocks. * Generates slug only if slug attribute of block is empty. * Ensures that all sureforms blocks have unique slugs. * * @param int $post_id current sureforms form post id. * @param \WP_Post $post SureForms post object. * @since 0.0.2 * @return void / public function update_field_slug( $post_id, $post ) { $blocks = parse_blocks( $post->post_content ); if ( empty( $blocks ) ) { return; } $updated = false; /* * List of slugs already taken by processed blocks. * used to maintain uniqueness of slugs. / $slugs = []; [ $blocks, $slugs, $updated ] = Helper::process_blocks( $blocks, $slugs, $updated ); // Process and store block configurations for form fields. Field_Validation::add_block_config( $blocks, $post_id ); if ( ! $updated ) { return; } $post_content = addslashes( serialize_blocks( $blocks ) ); wp_update_post( [ 'ID' => $post_id, 'post_content' => $post_content, ] ); } /* * Migrate the background type and associated values from * instant form settings to form styling meta. * * @since 1.4.4 * @return void */ public function maybe_migrate_form_stylings() { $post_id = isset( $_GET['post'] ) ? Helper::get_integer_value( sanitize_text_field( wp_unslash( $_GET['post'] ) ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- $_GET['post'] does not provide nonce. if ( empty( $post_id ) \|\| ! Helper::current_user_can() ) { return; } $post_type = get_post_type( $post_id ); if ( SRFM_FORMS_POST_TYPE !== $post_type ) { return; } $instant_form_settings = get_post_meta( $post_id, '_srfm_instant_form_settings', true ); if ( ! is_array( $instant_form_settings ) ) { return; } $form_styling = get_post_meta( $post_id, '_srfm_forms_styling', true ); if ( ! is_array( $form_styling ) ) { $form_styling = []; } $migrated = false; $keys = [ 'bg_type', 'bg_color', 'bg_image', 'bg_image_id' ]; foreach ( $keys as $key ) { if ( ! isset( $form_styling[ $key ] ) && isset( $instant_form_settings[ $key ] ) ) { $form_styling[ $key ] = $instant_form_settings[ $key ]; $migrated = true; } } if ( $migrated ) { update_post_meta( $post_id, '_srfm_forms_styling', $form_styling ); } } }	10.06 KB	2025-11-17 18:39
📄 helper.php <?php /** * Sureforms Submit Class file. * * @package sureforms. * @since 0.0.1 / namespace SRFM\Inc; use SRFM\Inc\Database\Tables\Entries; use SRFM\Inc\Traits\Get_Instance; use WP_Error; use WP_Post; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Sureforms Helper Class. * * @since 0.0.1 / class Helper { use Get_Instance; /* * Allowed HTML tags for SVG. * * @var array<string, array<string, bool>> / public static $allowed_tags_svg = [ 'span' => [ 'class' => true, 'aria-hidden' => true, ], 'svg' => [ 'xmlns' => true, 'width' => true, 'height' => true, 'viewBox' => true, 'fill' => true, ], 'path' => [ 'd' => true, 'stroke' => true, 'stroke-opacity' => true, 'stroke-width' => true, 'stroke-linecap' => true, 'stroke-linejoin' => true, ], ]; /* * Sureforms SVGs. * * @var mixed srfm_svgs / private static $srfm_svgs = null; /* * Get common error message. * * @since 0.0.2 * @return array<string> / public static function get_common_err_msg() { return [ 'required' => __( 'This field is required.', 'sureforms' ), 'unique' => __( 'Value needs to be unique.', 'sureforms' ), ]; } /* * Convert a file URL to a file path. * * @param string $file_url The URL of the file. * * @since 1.3.0 * @return string The file path. / public static function convert_fileurl_to_filepath( $file_url ) { static $upload_dir = null; if ( ! $upload_dir ) { // Internally cache the upload directory. $upload_dir = wp_get_upload_dir(); } return wp_normalize_path( str_replace( $upload_dir['baseurl'], $upload_dir['basedir'], $file_url ) ); } /* * Checks if current value is string or else returns default value * * @param mixed $data data which need to be checked if is string. * * @since 0.0.1 * @return string / public static function get_string_value( $data ) { if ( is_scalar( $data ) ) { return (string) $data; } if ( is_object( $data ) && method_exists( $data, '__toString' ) ) { return $data->__toString(); } if ( is_null( $data ) ) { return ''; } return ''; } /* * Checks if current value is number or else returns default value * * @param mixed $value data which need to be checked if is string. * @param int $base value can be set is $data is not a string, defaults to empty string. * * @since 0.0.1 * @return int / public static function get_integer_value( $value, $base = 10 ) { if ( is_numeric( $value ) ) { return (int) $value; } if ( is_string( $value ) ) { $trimmed_value = trim( $value ); return intval( $trimmed_value, $base ); } return 0; } /* * Checks if current value is an array or else returns default value * * @param mixed $data Data which needs to be checked if it is an array. * * @since 0.0.3 * @return array / public static function get_array_value( $data ) { if ( is_array( $data ) ) { return $data; } if ( is_null( $data ) ) { return []; } return (array) $data; } /* * Extracts the field type from the dynamic field key ( or field slug ). * * @param string $field_key Dynamic field key. * @since 0.0.6 * @return string Extracted field type. / public static function get_field_type_from_key( $field_key ) { if ( false === strpos( $field_key, '-lbl-' ) ) { return ''; } return trim( explode( '-', $field_key )[1] ); } /* * Extracts the field label from the dynamic field key ( or field slug ). * * @param string $field_key Dynamic field key. * @since 1.1.1 * @return string Extracted field label. / public static function get_field_label_from_key( $field_key ) { if ( false === strpos( $field_key, '-lbl-' ) ) { return ''; } $label = explode( '-lbl-', $field_key )[1]; // Getting the encrypted label. we are removing the block slug here. $label = explode( '-', $label )[0]; return $label ? html_entity_decode( self::decrypt( $label ) ) : ''; } /* * Extracts the block ID from the dynamic field key ( or field slug ). * * @param string $field_key Dynamic field key. * @since 1.6.1 * @return string Extracted block ID. / public static function get_block_id_from_key( $field_key ) { // Check if the key contains the block ID identifier. if ( strpos( $field_key, 'srfm-' ) === 0 && strpos( $field_key, '-lbl-' ) === false ) { return ''; // Return empty if the key format is invalid. } $parts = explode( '-lbl-', $field_key ); if ( isset( $parts[0] ) ) { $block_id = explode( '-', $parts[0] ); if ( is_array( $block_id ) && ! empty( $block_id ) ) { return end( $block_id ); } } return ''; } /* * Returns the proper sanitize callback functions according to the field type. * * @param string $field_type HTML field type. * @since 0.0.6 * @return callable Returns sanitize callbacks according to the provided field type. / public static function get_field_type_sanitize_function( $field_type ) { $callbacks = apply_filters( 'srfm_field_type_sanitize_functions', [ 'url' => 'esc_url_raw', 'input' => 'sanitize_text_field', 'number' => [ self::class, 'sanitize_number' ], 'email' => 'sanitize_email', 'textarea' => [ self::class, 'sanitize_textarea' ], ] ); return $callbacks[ $field_type ] ?? 'sanitize_text_field'; } /* * Sanitizes a numeric value. * * This function checks if the input value is numeric. If it is numeric, it sanitizes * the value to ensure it's a float or integer, allowing for fractions and thousand separators. * If the value is not numeric, it sanitizes it as a text field. * * @param mixed $value The value to be sanitized. * @since 0.0.6 * @return int\|float\|string The sanitized value. / public static function sanitize_number( $value ) { if ( ! is_numeric( $value ) ) { // phpcs:ignore /* @phpstan-ignore-next-line / return sanitize_text_field( $value ); // If it is not numeric, then let user get some sanitized data to view. } // phpcs:ignore /* @phpstan-ignore-next-line / return sanitize_text_field( filter_var( $value, FILTER_SANITIZE_NUMBER_FLOAT, FILTER_FLAG_ALLOW_FRACTION \| FILTER_FLAG_ALLOW_THOUSAND ) ); } /* * This function sanitizes the submitted form data according to the field type. * * @param array<mixed> $form_data $form_data User submitted form data. * @since 0.0.6 * @return array<mixed> $result Sanitized form data. / public static function sanitize_by_field_type( $form_data ) { $result = []; if ( empty( $form_data ) \|\| ! is_array( $form_data ) ) { return $result; } foreach ( $form_data as $field_key => &$value ) { $field_type = self::get_field_type_from_key( $field_key ); $sanitize_function = self::get_field_type_sanitize_function( $field_type ); $sanitized_data = is_array( $value ) ? self::sanitize_by_field_type( $value ) : call_user_func( $sanitize_function, $value ); $result[ $field_key ] = $sanitized_data; } return $result; } /* * This function performs array_map for multi dimensional array * * @param string $function function name to be applied on each element on array. * @param array<mixed> $data_array array on which function needs to be performed. * @return array<mixed> * @since 0.0.1 / public static function sanitize_recursively( $function, $data_array ) { $response = []; if ( is_array( $data_array ) ) { if ( ! is_callable( $function ) ) { return $data_array; } foreach ( $data_array as $key => $data ) { $val = is_array( $data ) ? self::sanitize_recursively( $function, $data ) : $function( $data ); $response[ $key ] = $val; } } return $response; } /* * Generates common markup liked label, etc * * @param int\|string $form_id form id. * @param string $type Type of form markup. * @param string $label Label for the form markup. * @param string $slug Slug for the form markup. * @param string $block_id Block id for the form markup. * @param bool $required If field is required or not. * @param string $help Help for the form markup. * @param string $error_msg Error message for the form markup. * @param bool $is_unique Check if the field is unique. * @param string $duplicate_msg Duplicate message for field. * @param bool $override Override for error markup. * @return string * @since 0.0.1 / public static function generate_common_form_markup( $form_id, $type, $label = '', $slug = '', $block_id = '', $required = false, $help = '', $error_msg = '', $is_unique = false, $duplicate_msg = '', $override = false ) { $duplicate_msg = $duplicate_msg ? ' data-unique-msg="' . esc_attr( $duplicate_msg ) . '"' : ''; $markup = ''; $show_labels_as_placeholder = get_post_meta( self::get_integer_value( $form_id ), '_srfm_use_label_as_placeholder', true ); $show_labels_as_placeholder = $show_labels_as_placeholder ? self::get_string_value( $show_labels_as_placeholder ) : false; $required_sign = apply_filters( 'srfm_value_after_label_placeholder', ' ' ); if ( ! is_string( $required_sign ) ) { $required_sign = ' '; } switch ( $type ) { case 'label': if ( $label ) { ob_start(); ?> <label id="srfm-label-<?php echo esc_attr( $block_id ); ?>" for="srfm-<?php echo esc_attr( $slug ); ?>-<?php echo esc_attr( $block_id ); ?>" class="srfm-block-label"> <?php echo wp_kses_post( $label ); ?> <?php if ( $required ) { ?> <span class="srfm-required" aria-hidden="true"> </span> <?php } ?> </label> <?php $markup = ob_get_clean(); } break; case 'help': if ( $help ) { ob_start(); ?> <div class="srfm-description" id="srfm-description-<?php echo esc_attr( $block_id ); ?>"> <?php echo wp_kses_post( $help ); ?> </div> <?php $markup = ob_get_clean(); } break; case 'error': if ( $required \|\| $override ) { ob_start(); ?> <div class="srfm-error-message" data-srfm-id="srfm-error-<?php echo esc_attr( $block_id ); ?>" data-error-msg="<?php echo esc_attr( $error_msg ); ?>"<?php echo $duplicate_msg; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>> <?php echo esc_html( $error_msg ); ?> </div> <?php $markup = ob_get_clean(); } break; case 'is_unique': if ( $is_unique ) { ob_start(); ?> <div class="srfm-error"> <?php echo esc_html( $duplicate_msg ); ?> </div> <?php $markup = ob_get_clean(); } break; case 'placeholder': $markup = $label && '1' === $show_labels_as_placeholder ? wp_kses_post( $label ) . ( $required ? esc_attr( $required_sign ) : '' ) : ''; break; case 'label_text': // This has been added for generating label text for the form markup instead of adding it in the label tag. if ( $label ) { ob_start(); ?> <?php echo wp_kses_post( $label ); ?> <?php if ( $required ) { ?> <span class="srfm-required" aria-hidden="true"> </span> <?php } ?> <?php $markup = ob_get_clean(); } break; default: $markup = ''; } return is_string( $markup ) ? $markup : ''; } /* * Get an SVG Icon * * @since 0.0.1 * @param string $icon the icon name. * @param string $class if the baseline class should be added. * @param string $html Custom attributes inside svg wrapper. * @return string / public static function fetch_svg( $icon = '', $class = '', $html = '' ) { $class = $class ? ' ' . $class : ''; if ( ! self::$srfm_svgs ) { ob_start(); include_once SRFM_DIR . 'assets/svg/svgs.json'; self::$srfm_svgs = json_decode( self::get_string_value( ob_get_clean() ), true ); self::$srfm_svgs = apply_filters( 'srfm_svg_icons', self::$srfm_svgs ); } ob_start(); ?> <span class="srfm-icon<?php echo esc_attr( $class ); ?>" <?php echo $html; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>> <?php echo self::$srfm_svgs[ $icon ] ?? ''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?> </span> <?php $output = ob_get_clean(); return is_string( $output ) ? $output : ''; } /* * Encrypt data using base64. * * @param string $input The input string which needs to be encrypted. * @since 0.0.1 * @return string The encrypted string. / public static function encrypt( $input ) { // If the input is empty or not a string, then abandon ship. if ( empty( $input ) \|\| ! is_string( $input ) ) { return ''; } // Encrypt the input and return it. $base_64 = base64_encode( $input ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_encode return rtrim( $base_64, '=' ); } /* * Decrypt data using base64. * * @param string $input The input string which needs to be decrypted. * @since 0.0.1 * @return string The decrypted string. / public static function decrypt( $input ) { // If the input is empty or not a string, then abandon ship. if ( empty( $input ) \|\| ! is_string( $input ) ) { return ''; } // Decrypt the input and return it. $base_64 = $input . str_repeat( '=', strlen( $input ) % 4 ); return base64_decode( $base_64 ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode } /* * Update an option from the database. * * @param string $key The option key. * @param mixed $value The value to update. * @param bool $network_override Whether to allow the network_override admin setting to be overridden on subsites. * @since 0.0.1 * @return bool True if the option was updated, false otherwise. / public static function update_admin_settings_option( $key, $value, $network_override = false ) { // Update the site-wide option if we're in the network admin, and return the updated status. return $network_override && is_multisite() ? update_site_option( $key, $value ) : update_option( $key, $value ); } /* * Update an option from the database. * * @param int\|string $post_id post id / form id. * @param string $key meta key name. * @param bool $single single or multiple. * @param mixed $default default value. * * @since 0.0.1 * @return string Meta value. / public static function get_meta_value( $post_id, $key, $single = true, $default = '' ) { $srfm_live_mode_data = self::get_instant_form_live_data(); if ( isset( $srfm_live_mode_data[ $key ] ) ) { // Give priority to live mode data if we have one set from the Instant Form. return self::get_string_value( $srfm_live_mode_data[ $key ] ); } return get_post_meta( self::get_integer_value( $post_id ), $key, $single ) ? self::get_string_value( get_post_meta( self::get_integer_value( $post_id ), $key, $single ) ) : self::get_string_value( $default ); } /* * Wrapper for the WordPress's get_post_meta function with the support for default values. * * @param int\|string $post_id Post ID. * @param string $key The meta key to retrieve. * @param mixed $default Default value. * @param bool $single Optional. Whether to return a single value. * @since 0.0.8 * @return mixed Meta value. / public static function get_post_meta( $post_id, $key, $default = null, $single = true ) { $meta_value = get_post_meta( self::get_integer_value( $post_id ), $key, $single ); return $meta_value ? $meta_value : $default; } /* * Returns query params data for instant form live preview. * * @since 0.0.8 * @return array<mixed> Live preview data. / public static function get_instant_form_live_data() { $srfm_live_mode_data = isset( $_GET['live_mode'] ) && self::current_user_can() ? self::sanitize_recursively( 'sanitize_text_field', wp_unslash( $_GET ) ) : []; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Nonce verification is not needed here. return $srfm_live_mode_data ? array_map( // Normalize falsy values. static function( $live_data ) { return 'false' === $live_data ? false : $live_data; }, $srfm_live_mode_data ) : []; } /* * Default dynamic block value. * * @since 0.0.1 * @return array<string> Meta value. / public static function default_dynamic_block_option() { $common_err_msg = self::get_common_err_msg(); $default_values = [ 'srfm_url_block_required_text' => $common_err_msg['required'], 'srfm_input_block_required_text' => $common_err_msg['required'], 'srfm_input_block_unique_text' => $common_err_msg['unique'], 'srfm_address_block_required_text' => $common_err_msg['required'], 'srfm_phone_block_required_text' => $common_err_msg['required'], 'srfm_phone_block_unique_text' => $common_err_msg['unique'], 'srfm_number_block_required_text' => $common_err_msg['required'], 'srfm_textarea_block_required_text' => $common_err_msg['required'], 'srfm_multi_choice_block_required_text' => $common_err_msg['required'], 'srfm_checkbox_block_required_text' => $common_err_msg['required'], 'srfm_gdpr_block_required_text' => $common_err_msg['required'], 'srfm_email_block_required_text' => $common_err_msg['required'], 'srfm_email_block_unique_text' => $common_err_msg['unique'], 'srfm_dropdown_block_required_text' => $common_err_msg['required'], 'srfm_rating_block_required_text' => $common_err_msg['required'], ]; $default_values = array_merge( $default_values, Translatable::dynamic_validation_messages() ); return apply_filters( 'srfm_default_dynamic_block_option', $default_values, $common_err_msg ); } /* * Get default dynamic block value. * * @param string $key meta key name. * @since 0.0.1 * @return string Meta value. / public static function get_default_dynamic_block_option( $key ) { $default_dynamic_values = self::default_dynamic_block_option(); $option = get_option( 'srfm_default_dynamic_block_option', $default_dynamic_values ); if ( is_array( $option ) && array_key_exists( $key, $option ) ) { return $option[ $key ]; } return ''; } /* * Checks whether a given request has appropriate permissions. * * @return true\|WP_Error True if the request has read access, WP_Error object otherwise. * @since 0.0.1 / public static function get_items_permissions_check() { if ( self::current_user_can() ) { return true; } return new WP_Error( 'rest_cannot_view', __( 'Sorry, you are not allowed to perform this action.', 'sureforms' ), [ 'status' => \rest_authorization_required_code() ] ); } /* * Check if the current user has a given capability. * * @param string $capability The capability to check. * @param array<mixed> $args Optional. Additional arguments to pass to the capability check. * * @since 0.0.3 * @return bool Whether the current user has the given capability or role. / public static function current_user_can( $capability = '', $args = [] ) { if ( ! function_exists( 'current_user_can' ) ) { return false; } if ( ! is_string( $capability ) \|\| empty( $capability ) ) { $capability = 'manage_options'; } return ! empty( $args ) && is_array( $args ) && count( $args ) > 0 ? current_user_can( $capability, ...$args ) : current_user_can( $capability ); } /* * Get all the entries for the given form ids. The entries are older than the given days_old. * * @param int $days_old The number of days old the entries should be. * @param array<int> $sf_form_ids The form ids for which the entries need to be fetched. * @since 0.0.2 * @return array<mixed> the entries matching the criteria. / public static function get_entries_from_form_ids( $days_old = 0, $sf_form_ids = [] ) { $entries = []; $days_old_date = ( new \DateTime() )->modify( "-{$days_old} days" )->format( 'Y-m-d H:i:s' ); foreach ( $sf_form_ids as $form_id ) { // args according to the get_all() function in the Entries class. $args = [ 'where' => [ [ [ 'key' => 'form_id', 'value' => $form_id, 'compare' => '=', ], [ 'key' => 'created_at', 'value' => $days_old_date, 'compare' => '<=', ], ], ], ]; // store all the entries in a single array. $entries = array_merge( $entries, Entries::get_all( $args, false ) ); } return $entries; } /* * Decode block attributes. * The function reverses the effect of serialize_block_attributes() * * @link https://developer.wordpress.org/reference/functions/serialize_block_attributes/ * @param string $encoded_data the encoded block attribute. * @since 0.0.2 * @return string decoded block attribute / public static function decode_block_attribute( $encoded_data = '' ) { $decoded_data = preg_replace( '/\\\\u002d\\\\u002d/', '--', self::get_string_value( $encoded_data ) ); $decoded_data = preg_replace( '/\\\\u003c/', '<', self::get_string_value( $decoded_data ) ); $decoded_data = preg_replace( '/\\\\u003e/', '>', self::get_string_value( $decoded_data ) ); $decoded_data = preg_replace( '/\\\\u0026/', '&', self::get_string_value( $decoded_data ) ); $decoded_data = preg_replace( '/\\\\\\\\"/', '"', self::get_string_value( $decoded_data ) ); return self::get_string_value( $decoded_data ); } /* * Map slugs to submission data. * * @param array<mixed> $submission_data submission_data. * @since 0.0.3 * @return array<mixed> / public static function map_slug_to_submission_data( $submission_data = [] ) { $mapped_data = []; foreach ( $submission_data as $key => $value ) { if ( false === strpos( $key, '-lbl-' ) ) { continue; } $label = explode( '-lbl-', $key )[1]; $slug = implode( '-', array_slice( explode( '-', $label ), 1 ) ); // Check if value is array to handle external package field functionality. // like repeater fields that need special processing. if ( is_array( $value ) && ! empty( $value ) ) { // Apply filter to allow external packages to process array values. // Returns processed data with 'is_processed' flag if successfully handled. $filtered_submission_data = apply_filters( 'srfm_map_slug_to_submission_data_array', [ 'value' => $value, 'key' => $key, 'slug' => $slug, ] ); if ( isset( $filtered_submission_data['is_processed'] ) && true === $filtered_submission_data['is_processed'] ) { $mapped_data[ $slug ] = $filtered_submission_data['value']; continue; } } $mapped_data[ $slug ] = is_string( $value ) ? html_entity_decode( esc_attr( $value ) ) : $value; } return $mapped_data; } /* * Get forms options. Shows all the available forms in the dropdown. * * @since 0.0.5 * @param string $key Determines the type of data to return. * @return array<mixed> / public static function get_sureforms( $key = '' ) { $forms = get_posts( apply_filters( 'srfm_get_sureforms_query_args', [ 'post_type' => SRFM_FORMS_POST_TYPE, 'posts_per_page' => -1, 'post_status' => 'publish', ] ) ); $options = []; foreach ( $forms as $form ) { if ( $form instanceof WP_Post ) { if ( 'all' === $key ) { $options[ $form->ID ] = $form; } elseif ( ! empty( $key ) && is_string( $key ) && isset( $form->$key ) ) { $options[ $form->ID ] = $form->$key; } else { $options[ $form->ID ] = $form->post_title; } } } return $options; } /* * Get all the forms. * * @since 0.0.5 * @return array<mixed> / public static function get_sureforms_title_with_ids() { $form_options = self::get_sureforms(); foreach ( $form_options as $key => $value ) { $form_options[ $key ] = $value . ' #' . $key; } return $form_options; } /* * Get the CSS variables based on different field spacing sizes. * * @param string\|null $field_spacing The field spacing size or boolean false to return complete sizes array. * * @since 0.0.7 * @return array<string\|mixed> / public static function get_css_vars( $field_spacing = null ) { /* * $sizes - Field Spacing Sizes Variables. * The array contains the CSS variables for different field spacing sizes. * Each key corresponds to the field spacing size, and the value is an array of CSS variables. * * For future variables depending on the field spacing size, add the variable to the array respectively. / $sizes = apply_filters( 'srfm_css_vars_sizes', [ 'small' => [ '--srfm-row-gap-between-blocks' => '16px', // Address block gap and spacing variables. '--srfm-address-label-font-size' => '14px', '--srfm-address-label-line-height' => '20px', '--srfm-address-description-font-size' => '12px', '--srfm-address-description-line-height' => '16px', '--srfm-col-gap-between-fields' => '12px', '--srfm-row-gap-between-fields' => '12px', '--srfm-gap-below-address-label' => '12px', // Dropdown Variables. '--srfm-dropdown-font-size' => '14px', '--srfm-dropdown-gap-between-input-menu' => '4px', '--srfm-dropdown-badge-padding' => '2px 6px', '--srfm-dropdown-multiselect-font-size' => '12px', '--srfm-dropdown-multiselect-line-height' => '16px', '--srfm-dropdown-padding-right' => '12px', // initial padding and from 20px - 12px for dropdown arrow width and 8px for gap before dropdown arrow. '--srfm-dropdown-padding-right-icon' => 'calc( var( --srfm-dropdown-padding-right ) + 20px )', '--srfm-dropdown-multiselect-padding' => '8px var( --srfm-dropdown-padding-right-icon ) 8px 8px', // Input Field Variables. '--srfm-input-height' => '40px', '--srfm-input-field-padding' => '10px 12px', '--srfm-input-field-font-size' => '14px', '--srfm-input-field-line-height' => '20px', '--srfm-input-field-margin-top' => '4px', '--srfm-input-field-margin-bottom' => '4px', // Checkbox and GDPR Variables. '--srfm-checkbox-label-font-size' => '14px', '--srfm-checkbox-label-line-height' => '20px', '--srfm-checkbox-description-font-size' => '12px', '--srfm-checkbox-description-line-height' => '16px', '--srfm-check-ctn-width' => '16px', '--srfm-check-ctn-height' => '16px', '--srfm-check-svg-size' => '10px', '--srfm-checkbox-margin-top-frontend' => '2px', '--srfm-checkbox-margin-top-editor' => '3px', '--srfm-check-gap' => '8px', '--srfm-checkbox-description-margin-left' => '24px', // Phone Number field variables. '--srfm-flag-section-padding' => '10px 0 10px 12px', '--srfm-gap-between-icon-text' => '8px', // Label Variables. '--srfm-label-font-size' => '14px', '--srfm-label-line-height' => '20px', // Description Variables. '--srfm-description-font-size' => '12px', '--srfm-description-line-height' => '16px', // Button Variables. '--srfm-btn-padding' => '8px 14px', '--srfm-btn-font-size' => '14px', '--srfm-btn-line-height' => '20px', // Multi Choice Variables. '--srfm-multi-choice-horizontal-padding' => '16px', '--srfm-multi-choice-vertical-padding' => '16px', '--srfm-multi-choice-internal-option-gap' => '8px', '--srfm-multi-choice-vertical-svg-size' => '32px', '--srfm-multi-choice-horizontal-image-size' => '20px', '--srfm-multi-choice-vertical-image-size' => '100px', '--srfm-multi-choice-outer-padding' => '0', ], 'medium' => [ '--srfm-row-gap-between-blocks' => '18px', // Address block gap and spacing variables. '--srfm-address-label-font-size' => '16px', '--srfm-address-label-line-height' => '24px', '--srfm-address-description-font-size' => '14px', '--srfm-address-description-line-height' => '20px', '--srfm-col-gap-between-fields' => '16px', '--srfm-row-gap-between-fields' => '16px', '--srfm-gap-below-address-label' => '14px', // Input Field Variables. '--srfm-input-height' => '44px', '--srfm-input-field-font-size' => '16px', '--srfm-input-field-line-height' => '24px', '--srfm-input-field-margin-top' => '6px', '--srfm-input-field-margin-bottom' => '6px', // Checkbox and GDPR Variables. '--srfm-checkbox-label-font-size' => '16px', '--srfm-checkbox-label-line-height' => '24px', '--srfm-checkbox-description-font-size' => '14px', '--srfm-checkbox-description-line-height' => '20px', '--srfm-checkbox-margin-top-frontend' => '4px', '--srfm-checkbox-margin-top-editor' => '6px', '--srfm-checkbox-description-margin-left' => '24px', // Label Variables. '--srfm-label-font-size' => '16px', '--srfm-label-line-height' => '24px', // Description Variables. '--srfm-description-font-size' => '14px', '--srfm-description-line-height' => '20px', // Button Variables. '--srfm-btn-padding' => '10px 14px', '--srfm-btn-font-size' => '16px', '--srfm-btn-line-height' => '24px', // Multi Choice Variables. '--srfm-multi-choice-horizontal-padding' => '20px', '--srfm-multi-choice-vertical-padding' => '20px', '--srfm-multi-choice-vertical-svg-size' => '40px', '--srfm-multi-choice-horizontal-image-size' => '24px', '--srfm-multi-choice-vertical-image-size' => '120px', '--srfm-multi-choice-outer-padding' => '2px', ], 'large' => [ '--srfm-row-gap-between-blocks' => '20px', // Address Block Gap and Spacing Variables. '--srfm-address-label-font-size' => '18px', '--srfm-address-label-line-height' => '28px', '--srfm-address-description-font-size' => '16px', '--srfm-address-description-line-height' => '24px', '--srfm-col-gap-between-fields' => '16px', '--srfm-row-gap-between-fields' => '20px', '--srfm-gap-below-address-label' => '16px', // Dropdown Variables. '--srfm-dropdown-font-size' => '16px', '--srfm-dropdown-gap-between-input-menu' => '6px', '--srfm-dropdown-badge-padding' => '6px 6px', '--srfm-dropdown-multiselect-font-size' => '14px', '--srfm-dropdown-multiselect-line-height' => '20px', '--srfm-dropdown-padding-right' => '14px', // Input Field Variables. '--srfm-input-height' => '48px', '--srfm-input-field-padding' => '10px 14px', '--srfm-input-field-font-size' => '18px', '--srfm-input-field-line-height' => '28px', '--srfm-input-field-margin-top' => '8px', '--srfm-input-field-margin-bottom' => '8px', // Checkbox and GDPR Variables. '--srfm-checkbox-label-font-size' => '18px', '--srfm-checkbox-label-line-height' => '28px', '--srfm-checkbox-description-font-size' => '16px', '--srfm-checkbox-description-line-height' => '24px', '--srfm-check-ctn-width' => '20px', '--srfm-check-ctn-height' => '20px', '--srfm-check-svg-size' => '14px', '--srfm-check-gap' => '10px', '--srfm-checkbox-margin-top-frontend' => '4px', '--srfm-checkbox-margin-top-editor' => '5px', '--srfm-checkbox-description-margin-left' => '30px', // Label Variables. '--srfm-label-font-size' => '18px', '--srfm-label-line-height' => '28px', // Description Variables. '--srfm-description-font-size' => '16px', '--srfm-description-line-height' => '24px', // Button Variables. '--srfm-btn-padding' => '10px 14px', '--srfm-btn-font-size' => '18px', '--srfm-btn-line-height' => '28px', // Multi Choice Variables. '--srfm-multi-choice-horizontal-padding' => '24px', '--srfm-multi-choice-vertical-padding' => '24px', '--srfm-multi-choice-internal-option-gap' => '12px', '--srfm-multi-choice-vertical-svg-size' => '48px', '--srfm-multi-choice-horizontal-image-size' => '28px', '--srfm-multi-choice-vertical-image-size' => '140px', '--srfm-multi-choice-outer-padding' => '4px', ], ] ); // Return complete sizes array if field_spacing is false. Required in case of JS for Editor changes. if ( ! $field_spacing ) { return $sizes; } $selected_size = $sizes['small']; if ( 'small' !== $field_spacing && isset( $sizes[ $field_spacing ] ) ) { $selected_size = array_merge( $selected_size, $sizes[ $field_spacing ] ); } return $selected_size; } /* * Array of SureForms blocks which get have user input. * * @since 0.0.10 * @return array<string> / public static function get_sureforms_blocks() { return apply_filters( 'srfm_blocks', [ 'srfm/input', 'srfm/email', 'srfm/textarea', 'srfm/number', 'srfm/checkbox', 'srfm/gdpr', 'srfm/phone', 'srfm/address', 'srfm/dropdown', 'srfm/multi-choice', 'srfm/radio', 'srfm/submit', 'srfm/url', ] ); } /* * Render a site key missing error message. * * @param string $provider_name Name of the captcha provider (e.g., HCaptcha, Google reCAPTCHA, Turnstile). * @since 1.7.0 * @since 1.7.1 moved to inc/helper.php from inc/generate-form-markup.php * @return void / public static function render_missing_sitekey_error( $provider_name ) { $icon = self::fetch_svg( 'info_circle', '', 'aria-hidden="true"' ); ?> <p id="sitekey-error" class="srfm-common-error-message srfm-error-message"> <?php echo wp_kses( $icon, self::$allowed_tags_svg ); ?> <span class="srfm-error-content"> <?php echo esc_html( sprintf( / translators: %s: Provider name like HCaptcha, Google reCAPTCHA, Turnstile / __( '%s sitekey is missing. Please contact your site administrator.', 'sureforms' ), $provider_name ) ); ?> </span> </p> <?php } /* * Parse and sanitize an email list string which may contain: * * @param string $input email addresses. * @since 1.13.2 * @return string Sanitized email header string. / public static function sanitize_email_header( $input ) { if ( empty( $input ) ) { return ''; } $parts = explode( ',', $input ); $output = []; foreach ( $parts as $part ) { $part = trim( $part ); // Match "Name <email>". if ( preg_match( '/^(.)<(.+)>$/', $part, $matches ) ) { $name = trim( $matches[1], "\" \t\n\r\0\x0B" ); // trim quotes. $email = sanitize_email( trim( $matches[2] ) ); if ( is_email( $email ) ) { $safe_name = sanitize_text_field( $name ); $output[] = $safe_name . ' <' . $email . '>'; } } else { // Plain email case. $email = sanitize_email( $part ); if ( is_email( $email ) ) { $output[] = $email; } } } return ! empty( $output ) ? implode( ', ', $output ) : ''; } /** * Process blocks and inner blocks. * * @param array<mixed> $blocks The block data. * @param array<string> $slugs The array of existing slugs. * @param bool $updated The array of existing slugs. * @param string $prefix The array of existing slugs. * @param bool $skip_checking_existing_slug Skips the checking of existing slug if passed true. More information documented inside this function. * @since 0.0.10 * @return array / public static function process_blocks( $blocks, &$slugs, &$updated, $prefix = '', $skip_checking_existing_slug = false ) { if ( ! is_array( $blocks ) ) { return [ $blocks, $slugs, $updated ]; } foreach ( $blocks as $index => $block ) { if ( ! is_array( $block ) ) { continue; } // Checking only for SureForms blocks which can have user input. if ( empty( $block['blockName'] ) \|\| ! in_array( $block['blockName'], self::get_sureforms_blocks(), true ) ) { continue; } /* * Lets continue if slug already exists. * This will ensure that we don't update already existing slugs. / if ( isset( $block['attrs'] ) && ! empty( $block['attrs']['slug'] ) && ! in_array( $block['attrs']['slug'], $slugs, true ) ) { // Made it associative array, so that we can directly check it using block_id rather than mapping or using "in_array" for the checks. $slugs[ $block['attrs']['block_id'] ] = self::get_string_value( $block['attrs']['slug'] ); if ( is_array( $block['innerBlocks'] ) && ! empty( $block['innerBlocks'] ) ) { [ $blocks[ $index ]['innerBlocks'], $slugs, $updated ] = self::process_blocks( $block['innerBlocks'], $slugs, $updated, '' ); } continue; } if ( $skip_checking_existing_slug && empty( $block['innerBlocks'] ) && isset( $slugs[ $block['attrs']['block_id'] ] ) ) { /* * Skip re-processing of the already process or existing slugs if above parameter "$skip_checking_existing_slug" is passed as true. * This is helpful in the scenarios where we need to compare and verify between already saved blocks and new unsaved blocks parsed * from the contents. * * However, it is also necessary to make sure if that current block is not a parent / wrapper block * by checking "$block['innerBlocks']" empty. * * And finally, checking if the block-id "$block['attrs']['block_id']" is already set in the list of "$slugs", * making sure that we are only processing the new blocks. / continue; } if ( is_array( $blocks[ $index ]['attrs'] ) ) { $blocks[ $index ]['attrs']['slug'] = self::generate_unique_block_slug( $block, $slugs, $prefix ); $slugs[ $block['attrs']['block_id'] ] = $blocks[ $index ]['attrs']['slug']; // Made it associative array, so that we can directly check it using block_id rather than mapping or using "in_array" for the checks. $updated = true; if ( is_array( $block['innerBlocks'] ) && ! empty( $block['innerBlocks'] ) ) { [ $blocks[ $index ]['innerBlocks'], $slugs, $updated ] = self::process_blocks( $block['innerBlocks'], $slugs, $updated, $blocks[ $index ]['attrs']['slug'] ); } } } return [ $blocks, $slugs, $updated ]; } /* * Generates slug based on the provided block and existing slugs. * * @param array<mixed> $block The block data. * @param array<string> $slugs The array of existing slugs. * @param string $prefix The array of existing slugs. * @since 0.0.10 * @return string The generated unique block slug. / public static function generate_unique_block_slug( $block, $slugs, $prefix ) { $slug = is_string( $block['blockName'] ) ? $block['blockName'] : ''; if ( ! empty( $block['attrs']['label'] ) && is_string( $block['attrs']['label'] ) ) { $slug = sanitize_title( $block['attrs']['label'] ); } if ( ! empty( $prefix ) ) { $slug = $prefix . '-' . $slug; } return self::generate_slug( $slug, $slugs ); } /* * This function ensures that the slug is unique. * If the slug is already taken, it appends a number to the slug to make it unique. * * @param string $slug test to be converted to slug. * @param array<string> $slugs An array of existing slugs. * @since 0.0.10 * @return string The unique slug. / public static function generate_slug( $slug, $slugs ) { $slug = sanitize_title( $slug ); if ( ! in_array( $slug, $slugs, true ) ) { return $slug; } $index = 1; while ( in_array( $slug . '-' . $index, $slugs, true ) ) { $index++; } return $slug . '-' . $index; } /* * Encode data to JSON. This function will encode the data with JSON_UNESCAPED_SLASHES and JSON_UNESCAPED_UNICODE. * * @since 0.0.11 * @param array<mixed> $data The data to encode. * @return string\|false The JSON representation of the value on success or false on failure. / public static function encode_json( $data ) { return wp_json_encode( $data, JSON_UNESCAPED_SLASHES \| JSON_UNESCAPED_UNICODE ); } /* * Returns true if SureTriggers plugin is ready for the custom app. * * @since 1.0.3 * @return bool Returns true if SureTriggers plugin is ready for the custom app. / public static function is_suretriggers_ready() { if ( ! defined( 'SURE_TRIGGERS_FILE' ) ) { // Probably plugin is de-activated or not installed at all. return false; } $suretriggers_data = get_option( 'suretrigger_options', [] ); if ( ! is_array( $suretriggers_data ) \|\| empty( $suretriggers_data['secret_key'] ) \|\| ! is_string( $suretriggers_data['secret_key'] ) ) { // SureTriggers is not authenticated yet. return false; } return true; } /* * Registers script translations for a specific handle. * * This function sets the script translations for a given script handle, allowing * localization of JavaScript strings using the specified text domain and path. * * @param string $handle The script handle to apply translations to. * @param string $domain Optional. The text domain for translations. Default is 'sureforms'. * @param string $path Optional. The path to the translation files. Default is the 'languages' folder in the SureForms directory. * * @since 1.0.5 * @return void / public static function register_script_translations( $handle, $domain = 'sureforms', $path = SRFM_DIR . 'languages' ) { wp_set_script_translations( $handle, $domain, $path ); } /* * Validates whether the specified conditions or a single key-value pair exist in the request context. * * - If `$conditions` is provided as an array, it will validate all key-value pairs in `$conditions` * against the `$_REQUEST` superglobal. * - If `$conditions` is empty, it validates a single key-value pair from `$key` and `$value`. * * @param string $value The expected value to match in the request if `$conditions` is not used. * @param string $key The key to check for in the request if `$conditions` is not used. * @param array<string, string> $conditions An optional associative array of key-value pairs to validate. * @since 1.1.1 * @return bool Returns true if all conditions are met or the single key-value pair is valid, otherwise false. / public static function validate_request_context( $value, $key = 'post_type', array $conditions = [] ) { // If conditions are provided, validate all key-value pairs in the conditions array. if ( ! empty( $conditions ) ) { foreach ( $conditions as $condition_key => $condition_value ) { if ( ! isset( $_REQUEST[ $condition_key ] ) \|\| $_REQUEST[ $condition_key ] !== $condition_value ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- This is a controlled comparison of request values. // Return false if any condition is not satisfied. return false; } } // Return true if all conditions are satisfied. return true; } // Validate $value and $key when no conditions are provided. if ( empty( $key ) \|\| empty( $value ) ) { return false; } // Validate a single key-value pair when no conditions are provided. return isset( $_REQUEST[ $key ] ) && $_REQUEST[ $key ] === $value; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Nonce verification is not needed here. Input is validated via strict comparison. } /* * Retrieve the list of excluded fields for form data processing. * * This method returns an array of field keys that should be excluded when * processing form data. * * @since 1.1.1 * @return array<string> Returns the string array of excluded fields. / public static function get_excluded_fields() { $excluded_fields = [ 'srfm-honeypot-field', 'g-recaptcha-response', 'srfm-sender-email-field', 'form-id' ]; return apply_filters( 'srfm_excluded_fields', $excluded_fields ); } /* * Check whether the current page is a SureForms admin page. * * @since 1.2.2 * @return bool Returns true if the current page is a SureForms admin page, otherwise false. / public static function is_sureforms_admin_page() { $current_screen = get_current_screen(); $is_screen_sureforms_menu = self::validate_request_context( 'sureforms_menu', 'page' ); $is_screen_add_new_form = self::validate_request_context( 'add-new-form', 'page' ); $is_screen_sureforms_form_settings = self::validate_request_context( 'sureforms_form_settings', 'page' ); $is_screen_sureforms_entries = self::validate_request_context( SRFM_ENTRIES, 'page' ); $is_post_type_sureforms_form = $current_screen && SRFM_FORMS_POST_TYPE === $current_screen->post_type; return $is_screen_sureforms_menu \|\| $is_screen_add_new_form \|\| $is_screen_sureforms_form_settings \|\| $is_screen_sureforms_entries \|\| $is_post_type_sureforms_form; } /* * Filters and concatenates valid class names from an array. * * @param array<string> $class_names The array containing potential class names. * @since 1.4.0 * @return string The concatenated string of valid class names separated by spaces. / public static function join_strings( $class_names ) { // Filter the array to include only valid class names. $valid_class_names = array_filter( $class_names, static function ( $value ) { return is_string( $value ) && '' !== $value && false !== $value; } ); // Concatenate the valid class names with spaces and return. return implode( ' ', $valid_class_names ); } /* * Get SureForms Website URL. * * @param string $trail The URL trail to append to SureForms website URL. The parameter should not include a leading slash as the base URL already ends with a trailing slash. * @param array<string, string> $utm_args Optional. An associative array of UTM parameters to append to the URL. Default empty array. Example: [ 'utm_medium' => 'dashboard']. * @since 0.0.7 * @return string / public static function get_sureforms_website_url( $trail, $utm_args = [] ) { $url = SRFM_WEBSITE; if ( ! empty( $trail ) && is_string( $trail ) ) { $url = SRFM_WEBSITE . $trail; } if ( ! is_array( $utm_args ) ) { $utm_args = []; } if ( class_exists( 'BSF_UTM_Analytics' ) ) { $url = \BSF_UTM_Analytics::get_utm_ready_link( $url, 'sureforms', $utm_args ); } return esc_url( $url ); } /* * Validates if the given string is a valid CSS class name. * * A valid CSS class name: * - Does not start with a digit, hyphen, or underscore. * - Can contain alphanumeric characters, underscores, hyphens, and Unicode letters. * * @param string $class_name The class name to validate. * * @since 1.3.1 * @return bool True if the class name is valid, otherwise false. / public static function is_valid_css_class_name( $class_name ) { // Regular expression to validate a Unicode-aware CSS class name. $class_name_regex = '/^[^\d\-_][\w\p{L}\p{N}\-_]$/u'; // Check if the className matches the pattern. return preg_match( $class_name_regex, $class_name ) === 1; } /** * Get the gradient css for given gradient parameters. * * @param string $type The type of gradient. Default 'linear'. * @param string $color1 The first color of the gradient. Default '#FFC9B2'. * @param string $color2 The second color of the gradient. Default '#C7CBFF'. * @param int $loc1 The location of the first color. Default 0. * @param int $loc2 The location of the second color. Default 100. * @param int $angle The angle of the gradient. Default 90. * * @since 1.4.4 * @return string The gradient css. / public static function get_gradient_css( $type = 'linear', $color1 = '#FFC9B2', $color2 = '#C7CBFF', $loc1 = 0, $loc2 = 100, $angle = 90 ) { if ( 'linear' === $type ) { return "linear-gradient({$angle}deg, {$color1} {$loc1}%, {$color2} {$loc2}%)"; } return "radial-gradient({$color1} {$loc1}%, {$color2} {$loc2}%)"; } /* * Return the classes based on background and overlay type to add to the form container. * * @param string $background_type The background type. * @param string $overlay_type The overlay type. * @param string $bg_image The background image url. * * @since 1.4.4 * @return string The classes to add to the form container. / public static function get_background_classes( $background_type, $overlay_type, $bg_image = '' ) { if ( empty( $background_type ) ) { $background_type = 'color'; } $background_type_class = ''; $overlay_class = 'image' === $background_type && ! empty( $bg_image ) && $overlay_type ? "srfm-overlay-{$overlay_type}" : ''; // Set the class based on the background type. switch ( $background_type ) { case 'image': $background_type_class = 'srfm-bg-image'; break; case 'gradient': $background_type_class = 'srfm-bg-gradient'; break; default: $background_type_class = 'srfm-bg-color'; break; } return self::join_strings( [ $background_type_class, $overlay_class ] ); } /* * Custom escape function for the textarea with rich text support. * * @param string $content The content submitted by the user in the textarea block. * @since 1.7.1 * * @return string Escaped content. / public static function esc_textarea( $content ) { $content = wpautop( self::sanitize_textarea( $content ) ); return trim( str_replace( [ "\r\n", "\r", "\n" ], '', $content ) ); } /* * Custom sanitization function for the textarea with rich text support. * * @param string $content The content submitted by the user in the textarea block. * @since 1.7.1 * * @return string Sanitized content. / public static function sanitize_textarea( $content ) { $count = 1; $content = convert_invalid_entities( $content ); // Remove the 'script' and 'style' tags recursively from the content. while ( $count ) { $content = preg_replace( '@<(script\|style)[^>]?>.?</\\1>@si', '', self::get_string_value( $content ), - 1, $count ); } // Disable the safe style attribute parsing for the textarea block. add_filter( 'safe_style_css', [ self::class, 'disable_style_attr_parsing' ], 10, 1 ); $content = wp_kses_post( self::get_string_value( $content ) ); // Remove the filter after sanitization to avoid affecting other blocks. remove_filter( 'safe_style_css', [ self::class, 'disable_style_attr_parsing' ], 10 ); // Ensure all tags are balanced. return force_balance_tags( $content ); } /* * Disable parsing of style attributes for the textarea block. * * @param array<string> $allowed_styles The allowed styles. * @since 1.7.1 * * @return array An empty array to disable style attribute parsing. / public static function disable_style_attr_parsing( $allowed_styles ) { unset( $allowed_styles ); // Disable parsing of style attributes. return []; } /* * Strips JavaScript attributes from HTML content. * * @param string $html The HTML content to process. * @since 1.7.1 * @return string The cleaned HTML content without JavaScript attributes. / public static function strip_js_attributes( $html ) { $dom = new \DOMDocument(); // Suppress warnings due to malformed HTML. libxml_use_internal_errors( true ); $loaded = $dom->loadHTML( '<?xml encoding="utf-8" ?>' . $html ); libxml_clear_errors(); if ( ! $loaded ) { return $html; // Return original HTML if loading fails. } $xpath = new \DOMXPath( $dom ); // 1. Remove all <script> tags. $script_nodes = $xpath->query( '//script' ); if ( $script_nodes instanceof \DOMNodeList ) { foreach ( $script_nodes as $script ) { // phpcs:ignore WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase -- This is a DOM element. $parent_node = $script->parentNode; if ( $parent_node instanceof \DOMNode ) { $parent_node->removeChild( $script ); } } } // 2. Remove all attributes that start with "on" (like onclick, onmouseover, etc.). $elements_with_on_attrs = $xpath->query( '//[@[starts-with(name(), "on")]]' ); if ( $elements_with_on_attrs instanceof \DOMNodeList ) { foreach ( $elements_with_on_attrs as $element ) { if ( $element instanceof \DOMElement && $element->hasAttributes() ) { foreach ( iterator_to_array( $element->attributes ) as $attr ) { if ( $attr instanceof \DOMAttr && stripos( $attr->name, 'on' ) === 0 ) { $element->removeAttribute( $attr->name ); } } } } } // Return cleaned HTML. $body = $dom->getElementsByTagName( 'body' )->item( 0 ); if ( $body instanceof \DOMNode ) { $cleaned_html = $dom->saveHTML( $body ); return is_string( $cleaned_html ) ? $cleaned_html : ''; } return ''; } /* * Encodes the given string with base64. * Moved from admin class to here. * * @param string $logo contains svg's. * @return string / public static function encode_svg( $logo ) { return 'data:image/svg+xml;base64,' . base64_encode( $logo ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_encode } /* * Get plugin status * * @since 0.0.1 * @since 1.7.0 moved to inc/helper.php from inc/admin-ajax.php * * @param string $plugin_init_file Plugin init file. * @return string / public static function get_plugin_status( $plugin_init_file ) { $installed_plugins = get_plugins(); if ( ! isset( $installed_plugins[ $plugin_init_file ] ) ) { return 'Install'; } if ( is_plugin_active( $plugin_init_file ) ) { return 'Activated'; } return 'Installed'; } /* * Check if the starter template premium plugin is installed and return its file path. * * @since 1.7.3 * * @return string The plugin file path if premium is installed, otherwise the default starter sites plugin file path. / public static function check_starter_template_plugin() { if ( ! function_exists( 'get_plugins' ) ) { require_once ABSPATH . 'wp-admin/includes/plugin.php'; } $plugins = get_plugins(); $premium = 'astra-pro-sites/astra-pro-sites.php'; return isset( $plugins[ $premium ] ) ? $premium : 'astra-sites/astra-sites.php'; } /* * Get sureforms recommended integrations. * * @since 0.0.1 * @since 1.7.0 moved to inc/helper.php from inc/admin-ajax.php * * @return array<mixed> / public static function sureforms_get_integration() { $suretrigger_connected = apply_filters( 'suretriggers_is_user_connected', '' ); $logo_sure_triggers = file_get_contents( plugin_dir_path( SRFM_FILE ) . 'images/suretriggers.svg' ); $logo_full = file_get_contents( plugin_dir_path( SRFM_FILE ) . 'images/suretriggers_full.svg' ); $logo_sure_mails = file_get_contents( plugin_dir_path( SRFM_FILE ) . 'images/suremails.svg' ); $logo_uae = file_get_contents( plugin_dir_path( SRFM_FILE ) . 'images/uae.svg' ); $logo_starter_templates = file_get_contents( plugin_dir_path( SRFM_FILE ) . 'images/starterTemplates.svg' ); return apply_filters( 'srfm_integrated_plugins', [ 'sure_mails' => [ 'title' => __( 'SureMail', 'sureforms' ), 'subtitle' => __( 'Free and easy SMTP mails plugin.', 'sureforms' ), 'status' => self::get_plugin_status( 'suremails/suremails.php' ), 'slug' => 'suremails', 'path' => 'suremails/suremails.php', 'logo' => self::encode_svg( is_string( $logo_sure_mails ) ? $logo_sure_mails : '' ), ], 'sure_triggers' => [ 'title' => __( 'OttoKit', 'sureforms' ), 'subtitle' => __( 'No-code automation tool for WordPress.', 'sureforms' ), 'description' => __( 'OttoKit is a powerful automation platform that helps you connect your various plugins and apps together. It allows you to automate repetitive tasks, so you can focus on more important work.', 'sureforms' ), 'status' => self::get_plugin_status( 'suretriggers/suretriggers.php' ), 'slug' => 'suretriggers', 'path' => 'suretriggers/suretriggers.php', 'logo' => self::encode_svg( is_string( $logo_sure_triggers ) ? $logo_sure_triggers : '' ), 'logo_full' => self::encode_svg( is_string( $logo_full ) ? $logo_full : '' ), 'connected' => $suretrigger_connected, 'connection_url' => admin_url( 'admin.php?page=suretriggers' ), ], 'uae' => [ 'title' => __( 'Ultimate Addons for Elementor', 'sureforms' ), 'subtitle' => __( 'Build modern websites with elementor addons.', 'sureforms' ), 'status' => self::get_plugin_status( 'header-footer-elementor/header-footer-elementor.php' ), 'slug' => 'header-footer-elementor', 'path' => 'header-footer-elementor/header-footer-elementor.php', 'logo' => self::encode_svg( is_string( $logo_uae ) ? $logo_uae : '' ), ], 'starter_templates' => [ 'title' => __( 'Starter Templates', 'sureforms' ), 'subtitle' => __( 'Build your dream website in minutes with AI.', 'sureforms' ), 'status' => self::get_plugin_status( self::check_starter_template_plugin() ), 'slug' => 'astra-sites', 'path' => self::check_starter_template_plugin(), 'logo' => self::encode_svg( is_string( $logo_starter_templates ) ? $logo_starter_templates : '' ), ], ] ); } /* * Get a value from the srfm_options array. * * @param string $key The key to retrieve. * @param mixed $default The default value to return if the key does not exist. * @since 1.8.0 * @return mixed / public static function get_srfm_option( $key, $default = null ) { $options = get_option( 'srfm_options', [] ); if ( ! is_array( $options ) ) { $options = []; } return array_key_exists( $key, $options ) ? $options[ $key ] : $default; } /* * Update a value in the srfm_options array. * * @param string $key The key to update. * @param mixed $value The value to set. * @since 1.8.0 * @return void / public static function update_srfm_option( $key, $value ) { $options = get_option( 'srfm_options', [] ); if ( ! is_array( $options ) ) { $options = []; } $options[ $key ] = $value; update_option( 'srfm_options', $options ); } /* * Get the WordPress file types. * * @since 1.7.4 * @return array<string,mixed> An associative array representing the file types. / public static function get_wp_file_types() { $formats = []; $mimes = get_allowed_mime_types(); $maxsize = wp_max_upload_size() / 1048576; if ( ! empty( $mimes ) ) { foreach ( $mimes as $type => $mime ) { $multiple = explode( '\|', $type ); foreach ( $multiple as $single ) { $formats[] = $single; } } } return [ 'formats' => $formats, 'maxsize' => $maxsize, ]; } /* * Determines if the SureForms Pro plugin is installed and active. * * Checks for the presence of the SRFM_PRO_VER constant. * * @since 1.8.0 * * @return bool True if the Pro plugin is active; false otherwise. / public static function has_pro() { return defined( 'SRFM_PRO_VER' ); } /* * Verifies the request by checking the nonce and user capabilities. * * @param string $request_type The type of request, either 'rest' or 'ajax'. * @param string $nonce_action The action name for the nonce. * @param string $nonce_name The name of the nonce field. * @param string $capability The capability required to perform the action. Default is 'manage_options'. * * @since 1.10.0 * @return void / public static function verify_nonce_and_capabilities( $request_type, $nonce_action, $nonce_name, $capability = 'manage_options' ) { if ( ! is_string( $nonce_action ) \|\| ! is_string( $nonce_name ) \|\| empty( $nonce_action ) \|\| empty( $nonce_name ) ) { wp_send_json_error( [ 'message' => __( 'Invalid nonce action or name.', 'sureforms' ) ], 400 ); } // Verify nonce for security. if ( 'rest' === $request_type ) { // For REST API requests, use the WP_REST_Request object to verify the nonce. if ( ! wp_verify_nonce( $nonce_action, $nonce_name ) ) { wp_send_json_error( [ 'message' => __( 'Invalid security token.', 'sureforms' ) ], 403 ); } } elseif ( 'ajax' === $request_type ) { // For non-REST requests, use the standard nonce verification. if ( ! check_ajax_referer( $nonce_action, $nonce_name, false ) ) { wp_send_json_error( [ 'message' => __( 'Invalid security token.', 'sureforms' ) ], 403 ); } } else { // If the request type is not recognized, return an error. wp_send_json_error( [ 'message' => __( 'Invalid request type.', 'sureforms' ) ], 400 ); } // Check user capabilities. if ( ! current_user_can( $capability ) ) { wp_send_json_error( [ 'message' => esc_html__( 'You do not have permission to perform this action.', 'sureforms' ) ], 403 ); } } /* * Get the block name from a field name by extracting the first two parts. * * @param string $field_name The full field name (e.g., 'srfm-text-lbl-123'). * * @since 1.11.0 * @return string The block name (e.g., 'srfm-text'). / public static function get_block_name_from_field( $field_name ) { return implode( '-', array_slice( explode( '-', explode( '-lbl-', $field_name )[0] ), 0, 2 ) ); } /* * Check if any of the top 10 popular WordPress SMTP plugins is active using array_intersect. * * @since 1.9.1 * @return bool True if any SMTP plugin is active, false otherwise. / public static function is_any_smtp_plugin_active() { $smtp_plugins = [ 'wp-mail-smtp/wp_mail_smtp.php', 'post-smtp/postman-smtp.php', 'easy-wp-smtp/easy-wp-smtp.php', 'wp-smtp/wp-smtp.php', 'newsletter/plugin.php', 'fluent-smtp/fluent-smtp.php', 'pepipost-smtp/pepipost-smtp.php', 'mail-bank/wp-mail-bank.php', 'smtp-mailer/smtp-mailer.php', 'suremails/suremails.php', 'site-mailer/site-mailer.php', ]; $active_plugins = (array) get_option( 'active_plugins', [] ); // For multisite, merge sitewide active plugins. if ( is_multisite() ) { $network_plugins = (array) get_site_option( 'active_sitewide_plugins', [] ); $active_plugins = array_merge( $active_plugins, array_keys( $network_plugins ) ); } return (bool) array_intersect( $smtp_plugins, $active_plugins ); } /* * Apply a filter and return the filtered value only if it's a non-empty array. * Otherwise, return the default array. * * @param string $filter_name The name of the filter to apply. * @param mixed $default The default array to return if the filtered result is invalid. * @param mixed ...$args Additional arguments to pass to the filter. * * @return array The filtered array if valid, otherwise the default. / public static function apply_filters_as_array( $filter_name, $default, ...$args ) { // Ensure $default is an array. if ( ! is_array( $default ) ) { $default = []; } // Validate the filter name. if ( ! is_string( $filter_name ) \|\| empty( $filter_name ) ) { return $default; } // Apply the filter with additional arguments. $filtered = apply_filters( $filter_name, $default, ...$args ); // Return filtered result if it's a non-empty array. return is_array( $filtered ) && ! empty( $filtered ) ? $filtered : $default; } /* * Get forms with entry counts for a specific time period. * * @param int $timestamp The timestamp to get entries after. * @param int $limit Maximum number of forms to return (0 for all). * @param bool $sort Whether to sort by entry count descending. * @return array Array of form data with entry counts. * @since 1.9.1 / public static function get_forms_with_entry_counts( $timestamp, $limit = 0, $sort = true ) { // Get all published forms with post objects for bulk title access. $args = [ 'post_type' => SRFM_FORMS_POST_TYPE, 'posts_per_page' => -1, 'post_status' => 'publish', 'orderby' => 'ID', 'order' => 'DESC', 'no_found_rows' => true, 'update_post_term_cache' => false, 'update_post_meta_cache' => false, ]; $query = new \WP_Query( $args ); if ( ! $query->have_posts() ) { return []; } $all_forms = []; // Process posts directly from the query results without touching global $post. foreach ( $query->posts as $form ) { // Ensure we have a valid post object. if ( ! $form instanceof \WP_Post ) { continue; } $form_id = (int) $form->ID; if ( $form_id <= 0 ) { continue; } // Get entries count after the timestamp for this specific form. $entry_count = Entries::get_entries_count_after( $timestamp, $form_id ); // Get form title directly from post object, use "Blank Form" if empty. $form_title = $form->post_title; if ( empty( trim( self::get_string_value( $form_title ) ) ) ) { $form_title = __( 'Blank Form', 'sureforms' ); } $all_forms[] = [ 'form_id' => $form_id, 'title' => $form_title, 'count' => $entry_count, ]; } // Sort by count descending, then by form_id descending for consistency. if ( $sort ) { usort( $all_forms, static function( $a, $b ) { if ( $a['count'] === $b['count'] ) { return $b['form_id'] - $a['form_id']; } return $b['count'] - $a['count']; } ); } // Return limited results if specified. if ( $limit > 0 ) { return array_slice( $all_forms, 0, $limit ); } return $all_forms; } /* * Check if the given form ID is valid SureForms form ID. * A valid form ID is a numeric value that corresponds to an existing SureForms form in the database. * * @since 1.9.1 * * @param int\|string\|mixed $form_id The form ID to validate. * @return bool True if the form ID is valid, false otherwise. / public static function is_valid_form( $form_id ) { // Check for a valid form ID. if ( empty( $form_id ) \|\| ! is_numeric( $form_id ) ) { return false; } // Check if the form ID exists in the database. $form = get_post( self::get_integer_value( $form_id ) ); // If the form does not exist or is not of the correct post type, return false. if ( ! $form \|\| ! is_a( $form, 'WP_Post' ) \|\| SRFM_FORMS_POST_TYPE !== $form->post_type ) { return false; } return true; } /* * Get the timestamp from a string. * * @param string $date The date in a specific format (e.g., '2025.10.01'). * @param string $hours The hours in a specific format (e.g., '12'). * @param string $minutes The minutes in a specific format (e.g., '00'). * @param string $meridiem The meridiem in a specific format (e.g., 'AM' or 'PM'). * * @since 1.10.1 * @return int\|false The timestamp if successful, false otherwise. */ public static function get_timestamp_from_string( $date, $hours = '12', $minutes = '00', $meridiem = 'AM' ) { if ( empty( $date ) \|\| ! is_string( $date ) ) { return false; // Invalid input. } // Ensure the date is in a valid format of YYYY-MM-DD. if ( ! preg_match( '/^\d{4}-\d{2}-\d{2}$/', $date ) ) { return false; // Invalid date format. } $time_string = $date . ' ' . $hours . ':' . $minutes . ' ' . $meridiem; // Convert to timestamp. $timestamp = strtotime( $time_string ); if ( false !== $timestamp && is_int( $timestamp ) && $timestamp > 0 ) { return $timestamp; } // If conversion fails, return false. return false; } }	66.49 KB	2025-11-17 18:39
📁 lib	-	2025-11-17 18:39
📄 nps-notice.php <?php /** * SRFM NPS Notice. * * @since 1.2.2 * * @package sureforms / namespace SRFM\Inc; use Nps_Survey; use SRFM\Inc\Database\Tables\Entries; use SRFM\Inc\Traits\Get_Instance; // Exit if accessed directly. if ( ! defined( 'ABSPATH' ) ) { exit; } if ( ! class_exists( 'Nps_Notice' ) ) { /* * Class Nps_Notice / class Nps_Notice { use Get_Instance; /* * Array of allowed screens where the NPS survey should be displayed. * This ensures that the NPS survey is only displayed on SureForms pages. * * @var array<string> * @since 1.2.2 / private static $allowed_screens = [ 'toplevel_page_sureforms_menu', 'sureforms_page_sureforms_form_settings', 'sureforms_page_sureforms_entries', 'edit-sureforms_form', ]; /* * Constructor. * * @since 1.2.2 / private function __construct() { add_action( 'admin_footer', [ $this, 'show_nps_notice' ], 999 ); add_filter( 'nps_survey_post_data', [ $this, 'update_nps_survey_post_data' ] ); } /* * Count the number of published forms and number form submissions. * Return whether the NPS survey should be shown or not. * * @since 1.2.2 * @return bool / public function maybe_display_nps_survey() { $form_count = wp_count_posts( SRFM_FORMS_POST_TYPE )->publish; // Get the number of published forms. $entries_count = Entries::get_total_entries_by_status( '' ); // Get the number of form submissions. // Show the NPS survey if there are at least 3 published forms or 3 form submissions. if ( $form_count >= 3 \|\| $entries_count >= 3 ) { return true; } return false; } /* * Render NPS Survey * * @since 1.2.2 * @return void / public function show_nps_notice() { // Ensure the Nps_Survey class exists before proceeding. if ( ! class_exists( 'Nps_Survey' ) ) { return; } // Display the NPS Survey only on SureForms pages and avoid conflicts with other plugins. if ( ! Helper::is_sureforms_admin_page() ) { return; } /* * Check if the constant WEEK_IN_SECONDS is already defined. * This ensures that the constant is not redefined if it's already set by WordPress or other parts of the code. / if ( ! defined( 'WEEK_IN_SECONDS' ) ) { // Define the WEEK_IN_SECONDS constant with the value of 604800 seconds (equivalent to 7 days). define( 'WEEK_IN_SECONDS', 604800 ); } // Display the NPS survey. Nps_Survey::show_nps_notice( 'nps-survey-sureforms', [ 'show_if' => $this->maybe_display_nps_survey(), 'dismiss_timespan' => 2 WEEK_IN_SECONDS, 'display_after' => 0, 'plugin_slug' => 'sureforms', 'show_on_screens' => self::$allowed_screens, 'message' => [ 'logo' => esc_url( plugin_dir_url( __DIR__ ) . 'admin/assets/sureforms-logo.png' ), 'plugin_name' => __( 'Quick Question!', 'sureforms' ), 'nps_rating_message' => __( 'How would you rate SureForms? Love it, hate it, or somewhere in between? Your honest answer helps us understand how we\'re doing.', 'sureforms' ), 'feedback_title' => __( 'Thanks a lot for your feedback! 😍', 'sureforms' ), 'feedback_content' => __( 'Thanks for being part of the SureForms community! Got feedback or suggestions? We\'d love to hear it.', 'sureforms' ), 'plugin_rating_link' => esc_url( 'https://wordpress.org/support/plugin/sureforms/reviews/#new-post' ), 'plugin_rating_title' => __( 'Thank you for your feedback', 'sureforms' ), 'plugin_rating_content' => __( 'We value your input. How can we improve your experience?', 'sureforms' ), 'plugin_rating_button_string' => __( 'Rate SureForms', 'sureforms' ), 'rating_min_label' => __( 'Hate it!', 'sureforms' ), 'rating_max_label' => __( 'Love it!', 'sureforms' ), ], 'privacy_policy' => [ 'url' => 'https://sureforms.com/privacy-policy', ], ] ); } /** * Update the NPS survey post data. * Add SureForms plugin version to the NPS survey post data. * * @param array<mixed> $post_data NPS survey post data. * @since 1.4.0 * @return array<mixed> */ public function update_nps_survey_post_data( $post_data ) { if ( isset( $post_data['plugin_slug'] ) && 'sureforms' === $post_data['plugin_slug'] ) { $post_data['plugin_version'] = SRFM_VER; } return $post_data; } } }	4.42 KB	2025-11-17 18:39
📄 onboarding.php <?php /** * Onboarding Class * * Handles the onboarding process for the SureForms plugin. * * @package sureforms / namespace SRFM\Inc; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Onboarding Class * * Handles the onboarding process for the SureForms plugin. / class Onboarding { use Get_Instance; /* * Onboarding completion setting key. * * @var string / private $onboarding_status_key = 'onboarding_completed'; /* * Set onboarding completion status. * * @since 1.9.1 * @param string $completed Whether the onboarding is completed. * @return void / public function set_onboarding_status( $completed = 'no' ) { Helper::update_srfm_option( $this->onboarding_status_key, $completed ); } /* * Get onboarding completion status. * * @since 1.9.1 * @return bool */ public function get_onboarding_status() { return Helper::get_srfm_option( $this->onboarding_status_key, 'no' ) === 'yes'; } }	1017 B	2025-11-17 18:39
📁 page-builders	-	2025-11-17 18:39
📄 post-types.php <?php /** * Post Types Class file. * * @package sureforms. * @since 0.0.1 / namespace SRFM\Inc; use SRFM\Inc\Database\Tables\Entries; use SRFM\Inc\Traits\Get_Instance; use WP_Admin_Bar; use WP_Post; use WP_REST_Response; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Post Types Main Class. * * @since 0.0.1 / class Post_Types { use Get_Instance; /* * Constructor * * @since 0.0.1 / public function __construct() { $this->restrict_unwanted_insertions(); add_action( 'init', [ $this, 'register_post_types' ] ); add_action( 'init', [ $this, 'register_post_metas' ] ); add_filter( 'manage_sureforms_form_posts_columns', [ $this, 'custom_form_columns' ] ); add_action( 'manage_sureforms_form_posts_custom_column', [ $this, 'custom_form_column_data' ], 10, 2 ); add_shortcode( 'sureforms', [ $this, 'forms_shortcode' ] ); add_action( 'manage_posts_extra_tablenav', [ $this, 'maybe_render_blank_form_state' ] ); add_action( 'in_admin_header', [ $this, 'embed_page_header' ] ); add_filter( 'post_row_actions', [ $this, 'modify_entries_list_row_actions' ], 10, 2 ); add_filter( 'bulk_actions-edit-sureforms_form', [ $this, 'register_modify_bulk_actions' ], 99 ); add_action( 'admin_notices', [ $this, 'import_form_popup' ] ); add_action( 'admin_bar_menu', [ $this, 'remove_admin_bar_menu_item' ], 80, 1 ); add_action( 'template_redirect', [ $this, 'srfm_instant_form_redirect' ] ); add_action( 'template_redirect', [ $this, 'disable_sureforms_archive_page' ], 9 ); add_filter( 'rest_prepare_sureforms_form', [ $this, 'sureforms_normalize_meta_for_rest' ], 10, 2 ); } /* * Remove this method in the future once _srfm_form_confirmation meta is updated. * Normalize the _srfm_form_confirmation meta before it's sent to the REST API. * Ensures the meta data is type-safe and includes necessary defaults like `hide_copy`. * * @param WP_REST_Response $response The REST response object. * @param WP_Post $post The post object. * * @return WP_REST_Response Modified REST response with normalized meta. * @since 1.7.3 / public function sureforms_normalize_meta_for_rest( WP_REST_Response $response, WP_Post $post ) { $meta_raw = get_post_meta( $post->ID, '_srfm_form_confirmation', true ); $form_confirmation = maybe_unserialize( is_string( $meta_raw ) ? $meta_raw : '' ); if ( ! is_array( $form_confirmation ) ) { return $response; } foreach ( $form_confirmation as $index => $item ) { if ( ! is_array( $item ) ) { continue; } $form_confirmation[ $index ]['hide_copy'] = ! empty( $item['hide_copy'] ); $form_confirmation[ $index ]['hide_download_all'] = ! empty( $item['hide_download_all'] ); } $response_data = $response->get_data(); if ( is_array( $response_data ) ) { if ( ! isset( $response_data['meta'] ) \|\| ! is_array( $response_data['meta'] ) ) { $response_data['meta'] = []; } $response_data['meta']['_srfm_form_confirmation'] = $form_confirmation; $response->set_data( $response_data ); } return $response; } /* * Add SureForms menu. * * @param string $title Parent slug. * @param string $subtitle Parent slug. * @param string $image Parent slug. * @param string $button_text Parent slug. * @param string $button_url Parent slug. * @param string $after_button After button content. * @return void * @since 0.0.1 / public function get_blank_page_markup( $title, $subtitle, $image, $button_text = '', $button_url = '', $after_button = '' ) { ?> <div class="sureform-add-new-form"> <p class="sureform-blank-page-title"><?php echo esc_html( $title ); ?></p> <p class="sureform-blank-page-subtitle"><?php echo esc_html( $subtitle ); ?></p> <img src="<?php echo esc_url( SRFM_URL . '/images/' . $image . '.svg' ); ?>" alt=""/> <?php if ( ! empty( $button_text ) && ! empty( $button_url ) ) { ?> <div class="sureforms-add-new-form-container"> <a class="sf-add-new-form-button" href="<?php echo esc_url( $button_url ); ?>"> <div class="button-secondary"><?php echo esc_html( $button_text ); ?></div> </a> <?php echo wp_kses_post( $after_button ); ?> </div> <?php } ?> </div> <?php } /* * Render blank state for add new form screen. * * @param string $post_type Post type. * @return void * @since 0.0.1 / public function sureforms_render_blank_state( $post_type ) { if ( SRFM_FORMS_POST_TYPE === $post_type ) { $page_name = 'add-new-form'; $new_form_url = admin_url( 'admin.php?page=' . $page_name ); ob_start(); ?> <button class="button button-secondary srfm-import-btn"><?php echo esc_html__( 'Import Form', 'sureforms' ); ?></button> <?php $import_button = ob_get_clean(); $this->get_blank_page_markup( esc_html__( 'Let’s build your first form', 'sureforms' ), esc_html__( 'Craft beautiful and functional forms in minutes', 'sureforms' ), 'add-new-form', esc_html__( 'Add New Form', 'sureforms' ), $new_form_url, $import_button ? $import_button : '' ); } if ( SRFM_ENTRIES === $post_type ) { $this->get_blank_page_markup( esc_html__( 'No records found', 'sureforms' ), esc_html__( 'This is where your form entries will appear', 'sureforms' ), 'blank-entries' ); } } /* * Registers the forms and submissions post types. * * @return void * @since 0.0.1 / public function register_post_types() { $form_labels = [ 'name' => _x( 'Forms', 'post type general name', 'sureforms' ), 'singular_name' => _x( 'Form', 'post type singular name', 'sureforms' ), 'menu_name' => _x( 'Forms', 'admin menu', 'sureforms' ), 'add_new' => _x( 'Add New', 'form', 'sureforms' ), 'add_new_item' => __( 'Add New Form', 'sureforms' ), 'new_item' => __( 'New Form', 'sureforms' ), 'edit_item' => __( 'Edit Form', 'sureforms' ), 'view_item' => __( 'View Form', 'sureforms' ), 'view_items' => __( 'View Forms', 'sureforms' ), 'all_items' => __( 'Forms', 'sureforms' ), 'search_items' => __( 'Search Forms', 'sureforms' ), 'parent_item_colon' => __( 'Parent Forms:', 'sureforms' ), 'not_found' => __( 'No forms found.', 'sureforms' ), 'not_found_in_trash' => __( 'No forms found in Trash.', 'sureforms' ), 'item_published' => __( 'Form published.', 'sureforms' ), 'item_updated' => __( 'Form updated.', 'sureforms' ), ]; register_post_type( SRFM_FORMS_POST_TYPE, [ 'labels' => $form_labels, 'rewrite' => [ 'slug' => 'form' ], 'public' => true, 'show_in_rest' => true, 'has_archive' => true, 'show_ui' => true, 'supports' => [ 'title', 'author', 'editor', 'custom-fields' ], 'show_in_menu' => 'sureforms_menu', 'show_in_nav_menus' => true, 'capabilities' => [ 'edit_post' => 'manage_options', 'read_post' => 'manage_options', 'delete_post' => 'manage_options', 'edit_posts' => 'manage_options', 'edit_others_posts' => 'manage_options', 'publish_posts' => 'manage_options', 'read_private_posts' => 'manage_options', 'create_posts' => 'manage_options', ], ] ); // will be used later. // register_post_status( // 'unread', // array( // 'label' => _x( 'Unread', 'sureforms', 'sureforms' ), // 'public' => true, // 'exclude_from_search' => false, // 'show_in_admin_all_list' => true, // 'show_in_admin_status_list' => true, // Translators: %s is the number of unread items. // 'label_count' => _n_noop( 'Unread (%s)', 'Unread (%s)', 'sureforms' ), // ) // );. } /* * Redirects requests for SureForms archieve page to homeurl * * @since 1.4.0 * @return void / public function disable_sureforms_archive_page() { if ( is_post_type_archive( SRFM_FORMS_POST_TYPE ) ) { wp_safe_redirect( home_url(), 301 ); exit; } } /* * Remove add new form menu item. * * @param WP_Admin_Bar $wp_admin_bar WP_Admin_Bar instance. * * @return void * @since 0.0.1 / public function remove_admin_bar_menu_item( $wp_admin_bar ) { $wp_admin_bar->remove_node( 'new-sureforms_form' ); } /* * Modify list row actions. * * @param array<mixed> $actions An array of row action links. * @param \WP_Post $post The current WP_Post object. * * @return array<mixed> $actions Modified row action links. * @since 0.0.1 / public function modify_entries_list_row_actions( $actions, $post ) { if ( 'sureforms_form' === $post->post_type ) { ob_start(); ?> <a href="#" onclick="exportForm(<?php echo esc_attr( strval( $post->ID ) ); ?>)"><?php echo esc_html__( 'Export', 'sureforms' ); ?></a> <?php $export_link = ob_get_clean(); $actions['export'] = $export_link; } return $actions; } /* * Modify list bulk actions. * * @param array<mixed> $bulk_actions An array of bulk action links. * @since 0.0.1 * @return array<mixed> $bulk_actions Modified action links. / public function register_modify_bulk_actions( $bulk_actions ) { $white_listed_actions = [ 'edit', 'trash', 'delete', 'untrash', ]; // remove all actions except white listed actions. $bulk_actions = array_intersect_key( $bulk_actions, array_flip( $white_listed_actions ) ); // Add export action only if edit and trash actions are present in bulk actions. if ( isset( $bulk_actions['edit'] ) && isset( $bulk_actions['trash'] ) ) { $bulk_actions['export'] = __( 'Export', 'sureforms' ); } return $bulk_actions; } /* * Show blank slate styles. * * @return void * @since 0.0.1 / public function get_blank_state_styles() { ?> <style type="text/css"> .sf-add-new-form-button:focus { box-shadow: none !important; outline: none !important; } #posts-filter .wp-list-table, #posts-filter .tablenav.top, .tablenav.bottom .actions, .wrap .subsubsub { display: none; } #posts-filter .tablenav.bottom { height: auto; } .sureform-add-new-form { display: flex; flex-direction: column; gap: 8px; justify-content: center; align-items: center; padding: 24px 0 24px 0; } .sureform-blank-page-title { color: var(--dashboard-heading); font-family: Inter; font-size: 22px; font-style: normal; font-weight: 600; line-height: 28px; margin: 0; } .sureform-blank-page-subtitle { color: var(--dashboard-text); margin: 0; font-family: Inter; font-size: 14px; font-style: normal; font-weight: 400; line-height: 16px; } </style> <?php } /* * Show blank slate. * * @param string $which String which tablenav is being shown. * @return void * @since 0.0.1 / public function maybe_render_blank_form_state( $which ) { $screen = get_current_screen(); $post_type = $screen ? $screen->post_type : ''; if ( SRFM_FORMS_POST_TYPE === $post_type && 'bottom' === $which ) { $counts = (array) wp_count_posts( SRFM_FORMS_POST_TYPE ); unset( $counts['auto-draft'] ); $count = array_sum( $counts ); if ( 0 < $count ) { return; } $this->sureforms_render_blank_state( $post_type ); $this->get_blank_state_styles(); } } /* * Set up a div for the header to render into it. * * @return void * @since 0.0.1 / public static function embed_page_header() { $screen = get_current_screen(); $screen_id = $screen ? $screen->id : ''; $is_screen_sureforms_entries = Helper::validate_request_context( SRFM_ENTRIES, 'page' ); if ( 'edit-' . SRFM_FORMS_POST_TYPE === $screen_id \|\| $is_screen_sureforms_entries ) { ?> <style> .srfm-page-header { min-height: 56px; @media screen and ( max-width: 600px ) { padding-top: 46px; } } </style> <div id="srfm-page-header" class="srfm-page-header srfm-admin-wrapper"> <div class="srfm-page-pre-nav-content"></div> </div> <?php } } /* * Registers the sureforms metas. * * @return void * @since 0.0.1 / public function register_post_metas() { $check_icon = 'data:image/svg+xml;base64,' . base64_encode( strval( file_get_contents( plugin_dir_path( SRFM_FILE ) . 'images/check-icon.svg' ) ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_encode $metas = apply_filters( 'srfm_register_post_meta', [ // General tab metas. '_srfm_use_label_as_placeholder' => 'boolean', '_srfm_submit_button_text' => 'string', '_srfm_is_inline_button' => 'boolean', // Submit Button. '_srfm_submit_width_backend' => 'string', '_srfm_button_border_radius' => 'integer', '_srfm_submit_alignment' => 'string', '_srfm_submit_alignment_backend' => 'string', '_srfm_submit_width' => 'string', '_srfm_inherit_theme_button' => 'boolean', // Additional Classes. '_srfm_additional_classes' => 'string', // Advanced tab metas. // Success Message. '_srfm_submit_type' => 'string', // Security. '_srfm_captcha_security_type' => 'string', '_srfm_form_recaptcha' => 'string', // post meta to store if the form is AI generated. '_srfm_is_ai_generated' => 'boolean', ] ); // Form Custom CSS meta. register_post_meta( 'sureforms_form', '_srfm_form_custom_css', [ 'show_in_rest' => [ 'schema' => [ 'type' => 'string', 'context' => [ 'edit' ], ], ], 'type' => 'string', 'single' => true, 'auth_callback' => static function() { return Helper::current_user_can(); }, 'sanitize_callback' => static function( $meta_value ) { return wp_kses_post( $meta_value ); }, ] ); foreach ( $metas as $meta => $type ) { register_meta( 'post', $meta, [ 'object_subtype' => SRFM_FORMS_POST_TYPE, 'show_in_rest' => [ 'schema' => [ 'type' => $type, 'context' => [ 'edit' ], ], ], 'single' => true, 'type' => $type, 'sanitize_callback' => 'sanitize_text_field', 'auth_callback' => static function() { return Helper::current_user_can(); }, ] ); } // Registers meta to handle values associated with form styling. register_post_meta( SRFM_FORMS_POST_TYPE, '_srfm_instant_form_settings', [ 'single' => true, 'type' => 'object', 'auth_callback' => static function() { return Helper::current_user_can(); }, 'show_in_rest' => [ 'schema' => [ 'type' => 'object', 'context' => [ 'edit' ], 'properties' => [ 'site_logo' => [ 'type' => 'string', ], 'site_logo_id' => [ 'type' => 'integer', ], // Form page banner settings. 'cover_type' => [ 'type' => 'string', ], 'cover_color' => [ 'type' => 'string', ], 'cover_image' => [ 'type' => 'string', ], 'cover_image_id' => [ 'type' => 'integer', ], // Form page background settings. 'bg_type' => [ 'type' => 'string', ], 'bg_color' => [ 'type' => 'string', ], 'bg_image' => [ 'type' => 'string', ], 'bg_image_id' => [ 'type' => 'integer', ], 'enable_instant_form' => [ 'type' => 'boolean', ], 'form_container_width' => [ 'type' => 'integer', ], 'single_page_form_title' => [ 'type' => 'boolean', ], 'use_banner_as_page_background' => [ 'type' => 'boolean', ], ], ], ], 'default' => [ 'bg_type' => 'color', 'bg_color' => '#ffffff', 'bg_image' => '', 'site_logo' => '', 'cover_type' => 'color', 'cover_color' => '#111C44', 'cover_image' => '', 'enable_instant_form' => false, 'form_container_width' => 620, 'single_page_form_title' => true, 'use_banner_as_page_background' => false, ], ] ); register_post_meta( SRFM_FORMS_POST_TYPE, '_srfm_forms_styling', [ 'single' => true, 'type' => 'object', 'auth_callback' => static function() { return Helper::current_user_can(); }, 'show_in_rest' => [ 'schema' => [ 'type' => 'object', 'context' => [ 'edit' ], 'properties' => [ 'primary_color' => [ 'type' => 'string', ], 'text_color' => [ 'type' => 'string', ], 'text_color_on_primary' => [ 'type' => 'string', ], 'field_spacing' => [ 'type' => 'string', ], 'submit_button_alignment' => [ 'type' => 'string', ], 'bg_type' => [ 'type' => 'string', ], 'bg_color' => [ 'type' => 'string', ], 'bg_image' => [ 'type' => 'string', ], 'bg_image_id' => [ 'type' => 'integer', ], // Image Properties. 'bg_image_position' => [ 'type' => 'object', 'properties' => [ 'x' => [ 'type' => 'number', 'format' => 'float', ], 'y' => [ 'type' => 'number', 'format' => 'float', ], ], ], 'bg_image_attachment' => [ 'type' => 'string', ], 'bg_image_repeat' => [ 'type' => 'string', ], 'bg_image_size' => [ 'type' => 'string', ], 'bg_image_size_custom' => [ 'type' => 'integer', ], 'bg_image_size_custom_unit' => [ 'type' => 'string', ], // Gradient Properties. 'bg_gradient' => [ 'type' => 'string', ], 'gradient_type' => [ 'type' => 'string', ], 'bg_gradient_type' => [ 'type' => 'string', ], 'bg_gradient_color_1' => [ 'type' => 'string', ], 'bg_gradient_color_2' => [ 'type' => 'string', ], 'bg_gradient_angle' => [ 'type' => 'integer', ], 'bg_gradient_location_1' => [ 'type' => 'integer', ], 'bg_gradient_location_2' => [ 'type' => 'integer', ], // Overlay Properties. 'bg_overlay_size' => [ 'type' => 'string', ], 'bg_gradient_overlay_type' => [ 'type' => 'string', ], 'bg_overlay_opacity' => [ 'type' => 'number', ], 'bg_overlay_image' => [ 'type' => 'string', ], 'bg_overlay_image_id' => [ 'type' => 'integer', ], 'bg_image_overlay_color' => [ 'type' => 'string', ], 'bg_overlay_custom_size_unit' => [ 'type' => 'string', ], 'bg_overlay_custom_size' => [ 'type' => 'integer', ], 'bg_overlay_blend_mode' => [ 'type' => 'string', ], 'bg_overlay_position' => [ 'type' => 'object', 'properties' => [ 'x' => [ 'type' => 'number', 'format' => 'float', ], 'y' => [ 'type' => 'number', 'format' => 'float', ], ], ], 'bg_overlay_attachment' => [ 'type' => 'string', ], 'bg_overlay_repeat' => [ 'type' => 'string', ], // Gradient Overlay Properties. 'bg_overlay_gradient' => [ 'type' => 'string', ], 'overlay_gradient_type' => [ 'type' => 'string', ], 'bg_overlay_gradient_type' => [ 'type' => 'string', ], 'bg_overlay_gradient_color_1' => [ 'type' => 'string', ], 'bg_overlay_gradient_color_2' => [ 'type' => 'string', ], 'bg_overlay_gradient_angle' => [ 'type' => 'integer', ], 'bg_overlay_gradient_location_1' => [ 'type' => 'integer', ], 'bg_overlay_gradient_location_2' => [ 'type' => 'integer', ], // Form Padding. 'form_padding_top' => [ 'type' => 'number', ], 'form_padding_right' => [ 'type' => 'number', ], 'form_padding_bottom' => [ 'type' => 'number', ], 'form_padding_left' => [ 'type' => 'number', ], 'form_padding_unit' => [ 'type' => 'string', ], 'form_padding_link' => [ 'type' => 'boolean', ], // Border Radius. 'form_border_radius_top' => [ 'type' => 'number', ], 'form_border_radius_right' => [ 'type' => 'number', ], 'form_border_radius_bottom' => [ 'type' => 'number', ], 'form_border_radius_left' => [ 'type' => 'number', ], 'form_border_radius_unit' => [ 'type' => 'string', ], 'form_border_radius_link' => [ 'type' => 'boolean', ], // Form Padding and Border Radius. // Form Padding. 'instant_form_padding_top' => [ 'type' => 'number', ], 'instant_form_padding_right' => [ 'type' => 'number', ], 'instant_form_padding_bottom' => [ 'type' => 'number', ], 'instant_form_padding_left' => [ 'type' => 'number', ], 'instant_form_padding_unit' => [ 'type' => 'string', ], 'instant_form_padding_link' => [ 'type' => 'boolean', ], // Border Radius. 'instant_form_border_radius_top' => [ 'type' => 'number', ], 'instant_form_border_radius_right' => [ 'type' => 'number', ], 'instant_form_border_radius_bottom' => [ 'type' => 'number', ], 'instant_form_border_radius_left' => [ 'type' => 'number', ], 'instant_form_border_radius_unit' => [ 'type' => 'string', ], 'instant_form_border_radius_link' => [ 'type' => 'boolean', ], ], ], ], 'default' => [ 'primary_color' => '#111C44', 'text_color' => '#1E1E1E', 'text_color_on_primary' => '#FFFFFF', 'field_spacing' => 'medium', 'submit_button_alignment' => 'left', 'bg_type' => 'color', 'bg_color' => '#ffffff', 'bg_image' => '', 'bg_image_position' => [ 'x' => 0.5, 'y' => 0.5, ], 'bg_image_attachment' => 'scroll', 'bg_image_repeat' => 'no-repeat', 'bg_image_size' => 'cover', 'bg_image_size_custom' => 100, // Image width when set to custom. 'bg_image_size_custom_unit' => '%', 'gradient_type' => 'basic', 'bg_gradient_type' => 'linear', 'bg_gradient_color_1' => '#FFC9B2', 'bg_gradient_color_2' => '#C7CBFF', 'bg_gradient_angle' => 90, 'bg_gradient_location_1' => 0, 'bg_gradient_location_2' => 100, 'bg_overlay_size' => 'cover', 'bg_gradient_overlay_type' => '', 'bg_overlay_opacity' => 1, 'bg_overlay_image' => '', 'bg_image_overlay_color' => '#FFFFFF75', 'bg_overlay_custom_size_unit' => '%', 'bg_overlay_custom_size' => 100, 'bg_overlay_position' => [ 'x' => 0.5, 'y' => 0.5, ], 'bg_overlay_attachment' => 'scroll', 'bg_overlay_repeat' => 'no-repeat', 'bg_overlay_blend_mode' => 'normal', // Gradient Overlay Properties. 'overlay_gradient_type' => 'basic', 'bg_overlay_gradient_type' => 'linear', 'bg_overlay_gradient_color_1' => '#FFC9B2', 'bg_overlay_gradient_color_2' => '#C7CBFF', 'bg_overlay_gradient_angle' => 90, 'bg_overlay_gradient_location_1' => 0, 'bg_overlay_gradient_location_2' => 100, // Form Properties. // Padding. 'form_padding_top' => 0, 'form_padding_right' => 0, 'form_padding_bottom' => 0, 'form_padding_left' => 0, 'form_padding_unit' => 'px', 'form_padding_link' => true, // Border Radius. 'form_border_radius_top' => 0, 'form_border_radius_right' => 0, 'form_border_radius_bottom' => 0, 'form_border_radius_left' => 0, 'form_border_radius_unit' => 'px', 'form_border_radius_link' => true, // Form Properties. // Padding. 'instant_form_padding_top' => 32, 'instant_form_padding_right' => 32, 'instant_form_padding_bottom' => 32, 'instant_form_padding_left' => 32, 'instant_form_padding_unit' => 'px', 'instant_form_padding_link' => true, // Border Radius. 'instant_form_border_radius_top' => 12, 'instant_form_border_radius_right' => 12, 'instant_form_border_radius_bottom' => 12, 'instant_form_border_radius_left' => 12, 'instant_form_border_radius_unit' => 'px', 'instant_form_border_radius_link' => true, ], ] ); // Email notification Metas. register_post_meta( 'sureforms_form', '_srfm_email_notification', [ 'single' => true, 'type' => 'array', 'auth_callback' => static function() { return Helper::current_user_can(); }, 'show_in_rest' => [ 'schema' => [ 'type' => 'array', 'context' => [ 'edit' ], 'items' => [ 'type' => 'object', 'properties' => [ 'id' => [ 'type' => 'integer', ], 'status' => [ 'type' => 'boolean', ], 'is_raw_format' => [ 'type' => 'boolean', ], 'name' => [ 'type' => 'string', ], 'email_to' => [ 'type' => 'string', ], 'email_reply_to' => [ 'type' => 'string', ], 'from_name' => [ 'type' => 'string', ], 'from_email' => [ 'type' => 'string', ], 'email_cc' => [ 'type' => 'string', ], 'email_bcc' => [ 'type' => 'string', ], 'subject' => [ 'type' => 'string', ], 'email_body' => [ 'type' => 'string', ], ], ], ], ], 'default' => [ [ 'id' => 1, 'status' => true, 'is_raw_format' => false, 'name' => __( 'Admin Notification Email', 'sureforms' ), 'email_to' => '{admin_email}', 'email_reply_to' => '{admin_email}', 'from_name' => '{site_title}', 'from_email' => '{admin_email}', 'email_cc' => '{admin_email}', 'email_bcc' => '{admin_email}', 'subject' => sprintf( / translators: %s: Form title smart tag / __( 'New Form Submission - %s', 'sureforms' ), '{form_title}' ), 'email_body' => '{all_data}', ], ], ] ); // Compliance Settings metas. register_post_meta( 'sureforms_form', '_srfm_compliance', [ 'single' => true, 'type' => 'array', 'auth_callback' => static function() { return Helper::current_user_can(); }, 'show_in_rest' => [ 'schema' => [ 'type' => 'array', 'context' => [ 'edit' ], 'items' => [ 'type' => 'object', 'properties' => [ 'id' => [ 'type' => 'string', ], 'gdpr' => [ 'type' => 'boolean', ], 'do_not_store_entries' => [ 'type' => 'boolean', ], 'auto_delete_entries' => [ 'type' => 'boolean', ], 'auto_delete_days' => [ 'type' => 'string', ], ], ], ], ], 'default' => [ [ 'id' => 'gdpr', 'gdpr' => false, 'do_not_store_entries' => false, 'auto_delete_entries' => false, 'auto_delete_days' => '', ], ], ] ); ob_start(); ?> <p style="text-align: center;"><img src="<?php echo esc_attr( $check_icon ); ?>" alt="" aria-hidden="true" /></p><h2 style="text-align: center;"><?php echo esc_html__( 'Thank you', 'sureforms' ); ?></h2> <?php $default_confirmation_message = ob_get_clean(); // form confirmation. register_post_meta( 'sureforms_form', '_srfm_form_confirmation', [ 'single' => true, 'type' => 'array', 'auth_callback' => static function() { return Helper::current_user_can(); }, 'sanitize_callback' => static function( $meta_value ) { if ( ! is_array( $meta_value ) ) { return []; } $sanitized = []; foreach ( $meta_value as $item ) { if ( ! is_array( $item ) ) { continue; } $sanitized_item = [ 'id' => isset( $item['id'] ) ? intval( $item['id'] ) : 0, 'confirmation_type' => isset( $item['confirmation_type'] ) ? sanitize_text_field( $item['confirmation_type'] ) : '', 'page_url' => isset( $item['page_url'] ) ? esc_url_raw( $item['page_url'] ) : '', 'custom_url' => isset( $item['custom_url'] ) ? esc_url_raw( $item['custom_url'] ) : '', 'message' => isset( $item['message'] ) ? Helper::strip_js_attributes( $item['message'] ) : '', 'submission_action' => isset( $item['submission_action'] ) ? sanitize_text_field( $item['submission_action'] ) : '', 'enable_query_params' => isset( $item['enable_query_params'] ) ? filter_var( $item['enable_query_params'], FILTER_VALIDATE_BOOLEAN ) : false, 'query_params' => isset( $item['query_params'] ) && is_array( $item['query_params'] ) ? array_map( static function ( $pair ) { if ( ! is_array( $pair ) ) { return []; } $key = key( $pair ); $value = current( $pair ); return [ sanitize_text_field( Helper::get_string_value( $key ) ) => sanitize_text_field( Helper::get_string_value( $value ) ), ]; }, $item['query_params'] ) : [], ]; $sanitized_item = apply_filters( 'srfm_form_confirmation_params', $sanitized_item, $item ); $sanitized[] = $sanitized_item; } return $sanitized; }, 'show_in_rest' => [ 'schema' => [ 'type' => 'array', 'context' => [ 'edit' ], 'items' => [ 'type' => 'object', 'properties' => [ 'id' => [ 'type' => 'integer', ], 'confirmation_type' => [ 'type' => 'string', ], 'page_url' => [ 'type' => 'string', ], 'custom_url' => [ 'type' => 'string', ], 'message' => [ 'type' => 'string', ], 'submission_action' => [ 'type' => 'string', ], 'enable_query_params' => [ 'type' => 'boolean', ], 'query_params' => [ 'type' => 'array', ], ], ], ], ], 'default' => [ [ 'id' => 1, 'confirmation_type' => 'same page', 'page_url' => '', 'custom_url' => '', 'message' => $default_confirmation_message, 'submission_action' => 'hide form', ], ], ] ); // conditional logic. do_action( 'srfm_register_conditional_logic_post_meta' ); /* * Hook for registering additional Post Meta / do_action( 'srfm_register_additional_post_meta' ); register_meta( 'post', '_srfm_form_restriction', [ 'type' => 'string', // Will store as JSON string. 'single' => true, // Store as single value. 'show_in_rest' => [ 'schema' => [ 'type' => 'string', 'context' => [ 'edit' ], ], ], // Custom callback to sanitize the data. 'sanitize_callback' => [ $this, 'sanitize_form_restriction_data' ], 'object_subtype' => SRFM_FORMS_POST_TYPE, 'auth_callback' => static function () { return Helper::current_user_can(); }, 'default' => wp_json_encode( [ 'status' => false, 'maxEntries' => 0, 'date' => '', 'hours' => '12', 'minutes' => '00', 'meridiem' => 'AM', 'message' => Translatable::get_default_form_restriction_message(), ] ), ] ); } /* * Sanitizes the form restriction data. * * @param mixed $meta_value The meta value to sanitize. * @return string\|false Sanitized JSON string. / public function sanitize_form_restriction_data( $meta_value ) { if ( empty( $meta_value ) \|\| ! is_string( $meta_value ) ) { return wp_json_encode( [] ); } $meta_value = json_decode( $meta_value, true ); if ( ! is_array( $meta_value ) \|\| json_last_error() !== JSON_ERROR_NONE ) { // If the JSON is invalid, return an empty array as JSON. return wp_json_encode( [] ); } $sanitized = [ 'status' => isset( $meta_value['status'] ) ? wp_validate_boolean( $meta_value['status'] ) : false, 'maxEntries' => isset( $meta_value['maxEntries'] ) ? absint( $meta_value['maxEntries'] ) : 0, 'date' => isset( $meta_value['date'] ) ? sanitize_text_field( $meta_value['date'] ) : '', 'hours' => isset( $meta_value['hours'] ) ? sanitize_text_field( $meta_value['hours'] ) : '12', 'minutes' => isset( $meta_value['minutes'] ) ? sanitize_text_field( $meta_value['minutes'] ) : '00', 'meridiem' => isset( $meta_value['meridiem'] ) ? sanitize_text_field( $meta_value['meridiem'] ) : 'AM', 'message' => isset( $meta_value['message'] ) ? sanitize_textarea_field( $meta_value['message'] ) : Translatable::get_default_form_restriction_message(), ]; // Return the sanitized data as a JSON string. return wp_json_encode( $sanitized ); } /* * Custom Shortcode. * * @param array<mixed> $atts Attributes. * @return string\|false. $content Post Content. * @since 0.0.1 / public function forms_shortcode( array $atts ) { $atts = shortcode_atts( [ 'id' => '', 'show_title' => true, ], $atts ); $id = intval( $atts['id'] ); $post = get_post( $id ); if ( ! empty( $id ) && $post && 'publish' === $post->post_status ) { return Generate_Form_Markup::get_form_markup( $id, ! filter_var( $atts['show_title'], FILTER_VALIDATE_BOOLEAN ), '', 'post', true ); } return esc_html__( 'This form has been deleted or is unavailable.', 'sureforms' ); } /* * Add custom column header. * * @param array<mixed> $columns Attributes. * @return array<mixed> $columns Post Content. * @since 0.0.1 / public function custom_form_columns( $columns ) { return [ 'cb' => $columns['cb'], 'title' => $columns['title'], 'sureforms' => __( 'Shortcode', 'sureforms' ), 'entries' => __( 'Entries', 'sureforms' ), 'author' => $columns['author'], 'date' => $columns['date'], ]; } /* * Populate custom column with data. * * @param string $column Attributes. * @param int $post_id Attributes. * @return void * @since 0.0.1 / public function custom_form_column_data( $column, $post_id ) { if ( 'sureforms' === $column ) { ob_start(); ?> <div class="srfm-shortcode-container"> <input id="srfm-shortcode-input-<?php echo esc_attr( Helper::get_string_value( $post_id ) ); ?>" class="srfm-shortcode-input" type="text" readonly value="[sureforms id='<?php echo esc_attr( Helper::get_string_value( $post_id ) ); ?>']" /> <button type="button" class="components-button components-clipboard-button has-icon srfm-shortcode" onclick="handleFormShortcode(this)"> <span id="srfm-copy-icon" class="dashicon dashicons dashicons-admin-page"></span> </button> </div> <?php ob_end_flush(); } if ( 'entries' === $column ) { // Entries URL to redirect user based on the form ID. $entries_url = wp_nonce_url( add_query_arg( [ 'form_filter' => $post_id, ], admin_url( 'admin.php?page=sureforms_entries' ) ), 'srfm_entries_action' ); // Get the entry count for the form. $entries_count = Entries::get_total_entries_by_status( 'all', $post_id ); ob_start(); ?> <p class="srfm-entries-number"><a href="<?php echo esc_url( $entries_url ); ?>"><?php echo esc_html( Helper::get_string_value( $entries_count ) ); ?></a></p> <?php ob_end_flush(); } } /* * Show the import form popup * * @since 0.0.1 * @return void / public function import_form_popup() { $screen = get_current_screen(); $id = $screen ? $screen->id : ''; if ( 'edit-sureforms_form' === $id ) { ?> <div class="srfm-import-plugin-wrap"> <div class="srfm-import-wrap"> <p class="srfm-import-help"><?php echo esc_html__( 'Please choose the SureForms export file (.json) that you wish to import.', 'sureforms' ); ?></p> <form method="post" enctype="multipart/form-data" class="srfm-import-form"> <input type="file" id="srfm-import-file" onchange="handleFileChange(event)" name="import form" accept=".json"> <input type="submit" name="import-form-submit" id="import-form-submit" class="srfm-import-button" value="<?php esc_attr_e( 'Import Now', 'sureforms' ); ?>" disabled> </form> <p id="srfm-import-error"><?php echo esc_html__( 'There is some error in json file, please export the SureForms Forms again.', 'sureforms' ); ?></p> </div> </div> <?php } } /* * Redirect to home page if instant form is not enabled. * * @since 0.0.1 * @return void / public function srfm_instant_form_redirect() { $form_id = Helper::get_integer_value( get_the_ID() ); $instant_form_settings = Helper::get_array_value( Helper::get_post_meta( $form_id, '_srfm_instant_form_settings' ) ); $enable_instant_form = ! empty( $instant_form_settings['enable_instant_form'] ) ? boolval( $instant_form_settings['enable_instant_form'] ) : false; if ( $enable_instant_form ) { return; } $form_preview = ''; $form_preview_attr = isset( $_GET['preview'] ) ? sanitize_text_field( wp_unslash( $_GET['preview'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Nonce verification is not needed here. if ( $form_preview_attr ) { $form_preview = filter_var( $form_preview_attr, FILTER_VALIDATE_BOOLEAN ); } if ( is_singular( 'sureforms_form' ) && ! $form_preview && ! Helper::current_user_can() ) { wp_safe_redirect( home_url() ); return; } } /* * Restrict RankMath meta boxes in edit page. * * @since 0.0.5 * @return void / public function restrict_data() { add_filter( 'rank_math/excluded_post_types', [ $this, 'unset_sureforms_post_type' ] ); } /* * Remove SureForms post type from RankMath and Yoast. * * @param array<mixed> $post_types Post types. * @since 0.0.5 * @return array<mixed> $post_types Modified post types. / public function unset_sureforms_post_type( $post_types ) { return array_filter( $post_types, static function( $post_type ) { if ( is_array( $post_type ) && isset( $post_type['name'] ) ) { return SRFM_FORMS_POST_TYPE !== $post_type['name']; } return SRFM_FORMS_POST_TYPE !== $post_type; } ); } /* * Restrict unwanted insertions from the AIOSEO plugin. * * This method ensures that the SureForms post type is excluded from AIOSEO's * public post types unless the current page is related to AIOSEO settings. * * @return void * @since 1.6.0 / public function restrict_in_aioseo_plugin() { /* * Checks if the AIOSEO plugin is installed and excludes the SureForms post type from AIOSEO's public post types. * * - Verifies the presence of the AIOSEO_DIR constant to ensure AIOSEO is installed. * - Allows AIOSEO functionality on its own settings pages by checking the `REQUEST_URI` and `page` query parameter. * - Excludes the SureForms post type from AIOSEO's public post types using the `aioseo_public_post_types` filter. * * Security Note: * - Nonce verification is intentionally skipped (`phpcs:ignore WordPress.Security.NonceVerification.Recommended`) * because this code is only performing a read operation to check the current request URI and query parameters. * It does not modify or process sensitive data, making nonce verification unnecessary in this context. / // Check if AIOSEO is installed by verifying the AIOSEO_DIR constant. if ( ! defined( 'AIOSEO_DIR' ) ) { return; } // Allow AIOSEO functionality on its own settings pages. if ( isset( $_SERVER['REQUEST_URI'] ) ) { $request_uri = sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ); if ( strpos( $request_uri, 'admin.php' ) !== false ) { if ( isset( $_GET['page'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Nonce verification is not required here because Safe here as we're only reading the `page` parameter. $page = sanitize_text_field( wp_unslash( $_GET['page'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Nonce verification is not required here because only we are reading the `page` parameter. if ( strpos( $page, 'aioseo' ) !== false ) { return; } } } } // Exclude the SureForms post type from AIOSEO's public post types. add_filter( 'aioseo_public_post_types', [ $this, 'unset_sureforms_post_type' ] ); } /* * Restrict interference of other plugins with SureForms. * * @since 0.0.5 * @return void */ private function restrict_unwanted_insertions() { // Restrict RankMath metaboxes in edit page. add_action( 'cmb2_admin_init', [ $this, 'restrict_data' ] ); // Restrict Yoast columns. add_filter( 'wpseo_accessible_post_types', [ $this, 'unset_sureforms_post_type' ] ); add_filter( 'wpseo_metabox_prio', '__return_false' ); // Restrict AIOSEO columns. $this->restrict_in_aioseo_plugin(); } }	42.98 KB	2025-11-17 18:39
📄 rest-api.php <?php /** * Rest API Manager Class. * * @package sureforms. / namespace SRFM\Inc; use SRFM\Inc\AI_Form_Builder\AI_Auth; use SRFM\Inc\AI_Form_Builder\AI_Form_Builder; use SRFM\Inc\AI_Form_Builder\Field_Mapping; use SRFM\Inc\Database\Tables\Entries; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Rest API handler class. * * @since 0.0.7 / class Rest_Api { use Get_Instance; /* * Constructor * * @since 0.0.7 * @return void / public function __construct() { add_action( 'rest_api_init', [ $this, 'register_endpoints' ] ); } /* * Register endpoints * * @since 0.0.7 * @return void / public function register_endpoints() { $prefix = 'sureforms'; $version_slug = 'v1'; $endpoints = $this->get_endpoints(); foreach ( $endpoints as $endpoint => $args ) { register_rest_route( $prefix . '/' . $version_slug, $endpoint, $args ); } } /* * Checks whether the value is boolean or not. * * @param mixed $value value to be checked. * @since 0.0.8 * @return bool / public function sanitize_boolean_field( $value ) { return filter_var( $value, FILTER_VALIDATE_BOOLEAN ); } /* * Get the data for generating entries chart. * * @param \WP_REST_Request $request Full details about the request. * @since 1.0.0 * @return array<mixed> / public function get_entries_chart_data( $request ) { $nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) ); if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) { wp_send_json_error( __( 'Nonce verification failed.', 'sureforms' ) ); } $params = $request->get_params(); if ( empty( $params ) ) { wp_send_json_error( __( 'Request could not be processed.', 'sureforms' ) ); } $after = is_array( $params ) && ! empty( $params['after'] ) ? sanitize_text_field( Helper::get_string_value( $params['after'] ) ) : ''; $before = is_array( $params ) && ! empty( $params['before'] ) ? sanitize_text_field( Helper::get_string_value( $params['before'] ) ) : ''; if ( empty( $after ) \|\| empty( $before ) ) { wp_send_json_error( __( 'Invalid date.', 'sureforms' ) ); } $form = is_array( $params ) && ! empty( $params['form'] ) ? sanitize_text_field( Helper::get_string_value( $params['form'] ) ) : ''; $where = [ [ [ 'key' => 'created_at', 'value' => $after, 'compare' => '>=', ], [ 'key' => 'created_at', 'value' => $before, 'compare' => '<=', ], ], ]; if ( ! empty( $form ) ) { $where[0][] = [ 'key' => 'form_id', 'value' => $form, 'compare' => '=', ]; } return Entries::get_instance()->get_results( $where, 'created_at', [ 'ORDER BY created_at DESC' ] ); } /* * Get the data for all the forms. * * @param \WP_REST_Request $request Full details about the request. * @since 1.7.0 * @return array<mixed> / public function get_form_data( $request ) { $nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) ); if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) { wp_send_json_error( __( 'Nonce verification failed.', 'sureforms' ) ); } $forms = Helper::get_instance()->get_sureforms(); return ! empty( $forms ) ? $forms : []; } /* * Set onboarding completion status. * * @param \WP_REST_Request $request Full details about the request. * @since 1.9.1 * @return \WP_REST_Response / public function set_onboarding_status( $request ) { $nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) ); if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) { return new \WP_REST_Response( [ 'error' => __( 'Nonce verification failed.', 'sureforms' ) ], 403 ); } // Set the onboarding status to yes always. Onboarding::get_instance()->set_onboarding_status( 'yes' ); // Get analytics data from request. $analytics_data = $request->get_param( 'analyticsData' ); // Save analytics data if provided. if ( $analytics_data ) { // Use Helper::update_srfm_option instead of update_option. Helper::update_srfm_option( 'onboarding_analytics', $analytics_data ); } return new \WP_REST_Response( [ 'success' => true ] ); } /* * Get onboarding completion status. * * @param \WP_REST_Request $request Full details about the request. * @since 1.9.1 * @return \WP_REST_Response / public function get_onboarding_status( $request ) { $nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) ); if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) { return new \WP_REST_Response( [ 'error' => __( 'Nonce verification failed.', 'sureforms' ) ], 403 ); } $status = Onboarding::get_instance()->get_onboarding_status(); return new \WP_REST_Response( [ 'completed' => $status ] ); } /* * Get plugin status for specified plugin. * * @param \WP_REST_Request $request Full details about the request. * @since 1.9.1 * @return \WP_REST_Response / public function get_plugin_status( $request ) { $nonce = Helper::get_string_value( $request->get_header( 'X-WP-Nonce' ) ); if ( ! wp_verify_nonce( sanitize_text_field( $nonce ), 'wp_rest' ) ) { return new \WP_REST_Response( [ 'error' => __( 'Nonce verification failed.', 'sureforms' ) ], 403 ); } $params = $request->get_params(); $plugin_slug = is_array( $params ) && isset( $params['plugin'] ) ? sanitize_text_field( Helper::get_string_value( $params['plugin'] ) ) : ''; if ( empty( $plugin_slug ) ) { return new \WP_REST_Response( [ 'error' => __( 'Plugin slug is required.', 'sureforms' ) ], 400 ); } $integrations = Helper::sureforms_get_integration(); if ( ! isset( $integrations[ $plugin_slug ] ) ) { return new \WP_REST_Response( [ 'error' => __( 'Plugin not found.', 'sureforms' ) ], 404 ); } $plugin_data = $integrations[ $plugin_slug ]; // Get fresh status. if ( is_array( $plugin_data ) && isset( $plugin_data['path'] ) ) { $plugin_data['status'] = Helper::get_plugin_status( Helper::get_string_value( $plugin_data['path'] ) ); } return new \WP_REST_Response( $plugin_data ); } /* * Get endpoints * * @since 0.0.7 * @return array<array<mixed>> / private function get_endpoints() { / * @internal This filter is used to add custom endpoints. * @since 1.2.0 * @param array<array<mixed>> $endpoints Endpoints. */ return apply_filters( 'srfm_rest_api_endpoints', [ 'generate-form' => [ 'methods' => 'POST', 'callback' => [ AI_Form_Builder::get_instance(), 'generate_ai_form' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], 'args' => [ 'use_system_message' => [ 'sanitize_callback' => [ $this, 'sanitize_boolean_field' ], ], ], ], // This route is used to map the AI response to SureForms fields markup. 'map-fields' => [ 'methods' => 'POST', 'callback' => [ Field_Mapping::get_instance(), 'generate_gutenberg_fields_from_questions' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], ], // This route is used to initiate auth process when user tries to authenticate on billing portal. 'initiate-auth' => [ 'methods' => 'GET', 'callback' => [ AI_Auth::get_instance(), 'get_auth_url' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], ], // This route is to used to decrypt the access key and save it in the database. 'handle-access-key' => [ 'methods' => 'POST', 'callback' => [ AI_Auth::get_instance(), 'handle_access_key' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], ], // This route is to get the form submissions for the last 30 days. 'entries-chart-data' => [ 'methods' => 'GET', 'callback' => [ $this, 'get_entries_chart_data' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], ], // This route is to get all forms data. 'form-data' => [ 'methods' => 'GET', 'callback' => [ $this, 'get_form_data' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], ], // Onboarding endpoints. 'onboarding/set-status' => [ 'methods' => 'POST', 'callback' => [ $this, 'set_onboarding_status' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], ], 'onboarding/get-status' => [ 'methods' => 'GET', 'callback' => [ $this, 'get_onboarding_status' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], ], // Plugin status endpoint. 'plugin-status' => [ 'methods' => 'GET', 'callback' => [ $this, 'get_plugin_status' ], 'permission_callback' => [ Helper::class, 'get_items_permissions_check' ], 'args' => [ 'plugin' => [ 'required' => true, 'sanitize_callback' => 'sanitize_text_field', ], ], ], ] ); } }	9.26 KB	2025-11-17 18:39
📁 single-form-settings	-	2025-11-17 18:39
📄 smart-tags.php <?php /** * Sureforms Smart Tags. * * @package sureforms. * @since 0.0.1 / namespace SRFM\Inc; use SRFM\Inc\Lib\Browser\Browser; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Sureforms Smart Tags Class. * * @since 0.0.1 / class Smart_Tags { use Get_Instance; /* * Constructor * * @since 0.0.1 / public function __construct() { add_filter( 'render_block', [ $this, 'render_form' ], 10, 2 ); } /* * Smart Tag Render Function. * * @param string $block_content Entire Block Content. * @param array<mixed> $block Block Properties As An Array. * @since 0.0.1 * @return string / public function render_form( $block_content, $block ) { $id = get_the_id(); // Simulating $form_data required form some of the smart tags. $form_data = [ 'form-id' => $id ]; if ( self::check_form_by_id( $id ) ) { return Helper::get_string_value( self::process_smart_tags( $block_content, null, $form_data ) ); } if ( isset( $block['blockName'] ) && ( 'srfm/form' === $block['blockName'] ) ) { if ( isset( $block['attrs']['id'] ) && $block['attrs']['id'] ) { return Helper::get_string_value( self::process_smart_tags( $block_content, null, $form_data ) ); } } return $block_content; } /* * Check Form By ID. * * @param int\|false $id Form id. * @since 0.0.1 * @return bool / public function check_form_by_id( $id ) { return get_post_type( Helper::get_integer_value( $id ) ) ? true : false; } /* * Smart Tag List. * * @since 0.0.1 * @return array<mixed> / public static function smart_tag_list() { return apply_filters( 'srfm_smart_tag_list', [ '{site_url}' => __( 'Site URL', 'sureforms' ), '{current_page_url}' => __( 'Current Page URL', 'sureforms' ), '{admin_email}' => __( 'Admin Email', 'sureforms' ), '{site_title}' => __( 'Site Title', 'sureforms' ), '{form_title}' => __( 'Form Title', 'sureforms' ), '{ip}' => __( 'IP Address', 'sureforms' ), '{http_referer}' => __( 'HTTP Referer URL', 'sureforms' ), '{date_mdy}' => __( 'Date (mm/dd/yyyy)', 'sureforms' ), '{date_dmy}' => __( 'Date (dd/mm/yyyy)', 'sureforms' ), '{user_id}' => __( 'User ID', 'sureforms' ), '{user_display_name}' => __( 'User Display Name', 'sureforms' ), '{user_first_name}' => __( 'User First Name', 'sureforms' ), '{user_last_name}' => __( 'User Last Name', 'sureforms' ), '{user_email}' => __( 'User Email', 'sureforms' ), '{user_login}' => __( 'User Username', 'sureforms' ), '{browser_name}' => __( 'Browser Name', 'sureforms' ), '{browser_platform}' => __( 'Browser Platform', 'sureforms' ), '{embed_post_id}' => __( 'Embedded Post/Page ID', 'sureforms' ), '{embed_post_title}' => __( 'Embedded Post/Page Title', 'sureforms' ), '{get_input:param}' => __( 'Populate by GET Param', 'sureforms' ), '{get_cookie:cookie_name}' => __( 'Cookie Value', 'sureforms' ), ] ); } /* * Email smart Tag List. * * @since 0.0.1 * @return array<mixed> / public static function email_smart_tag_list() { return [ '{admin_email}' => __( 'Admin Email', 'sureforms' ), '{user_email}' => __( 'User Email', 'sureforms' ), ]; } /* * Process Start Tag. * * @param string $content Form content. * @param array<mixed>\|null $submission_data data from submission. * @param array<mixed>\|null $form_data data from form. * @since 0.0.1 - return string * @since 1.11.0 - return array<mixed> * @return string\|array<mixed> / public function process_smart_tags( $content, $submission_data = null, $form_data = null ) { if ( ! $content ) { return $content; } preg_match_all( '/{(.?)}/', $content, $matches ); if ( empty( $matches[0] ) ) { return $content; } $get_smart_tag_list = self::smart_tag_list(); foreach ( $matches[0] as $tag ) { $is_valid_tag = isset( $get_smart_tag_list[ $tag ] ) \|\| strpos( $tag, 'get_input:' ) \|\| strpos( $tag, 'get_cookie:' ) \|\| 0 === strpos( $tag, '{form:' ); if ( ! $is_valid_tag ) { continue; } // Get the only smart tag value. $smart_tag_value = self::smart_tags_callback( $tag, $submission_data, $form_data ); /** * Check if smart tag value is an array, which can happen for special field types * like repeater fields that need to preserve their array structure. / if ( is_array( $smart_tag_value ) ) { /* * Filters whether a smart tag value should be returned as an array. * * Default is false to maintain backwards compatibility. * Filter must explicitly return true to allow array values. * * @since 1.11.0 * * @param bool $is_verified_value Default false * @param array $args { * Arguments passed to the filter. * * @type string $tag The smart tag being processed * @type array\|null $submission_data The form submission data * @type array\|null $form_data The form configuration data * @type mixed $value The smart tag value * } / $is_verified_value = apply_filters( 'srfm_is_smart_tag_value_verified_as_array', false, [ 'tag' => $tag, 'submission_data' => $submission_data, 'form_data' => $form_data, 'value' => $smart_tag_value, ] ); /* * If filter verification passes, return the original array value. * This allows special field types to maintain their data structure. / if ( true === $is_verified_value ) { return $smart_tag_value; } } $replace = Helper::get_string_value( $smart_tag_value ); $content = str_replace( $tag, $replace, $content ); } // Replace <p> around block-level elements with <div>. $content = preg_replace( '/<p\b([^>])>\s(<(table\|div\|h[1-6]\|ul\|ol\|style\|script)\b)/i', '<div$1>$2', Helper::get_string_value( $content ) ); $content = preg_replace( '/(<\/(table\|div\|h[1-6]\|ul\|ol\|style\|script)>)\s<\/p\b[^>]>/i', '$1</div>', Helper::get_string_value( $content ) ); return Helper::get_string_value( $content ); } /* * Smart Tag Callback. * * @param string $tag smart tag. * @param array<mixed>\|null $submission_data data from submission. * @param array<mixed>\|null $form_data data from form. * @since 0.0.1 * @return mixed / public static function smart_tags_callback( $tag, $submission_data = null, $form_data = null ) { $parsed_tag = apply_filters( 'srfm_parse_smart_tags', null, compact( 'tag', 'submission_data', 'form_data' ) ); if ( ! is_null( $parsed_tag ) ) { return $parsed_tag; } switch ( $tag ) { case '{site_url}': return site_url(); case '{admin_email}': return get_option( 'admin_email' ); case '{site_title}': return get_option( 'blogname' ); case '{form_title}': if ( ! empty( $form_data ) && is_array( $form_data ) && ! empty( $form_data['form-id'] ) ) { $id = absint( $form_data['form-id'] ); $post = get_post( $id ); if ( $post instanceof \WP_Post ) { return esc_html( $post->post_title ) ?? ''; } } return ''; case '{http_referer}': return wp_get_referer(); case '{ip}': return self::get_the_user_ip(); case '{date_dmy}': case '{date_mdy}': return self::parse_date( $tag ); case '{user_id}': case '{user_display_name}': case '{user_first_name}': case '{user_last_name}': case '{user_email}': case '{user_login}': return self::parse_user_props( $tag ); case '{browser_name}': case '{browser_platform}': return self::parse_browser_props( $tag ); case '{embed_post_id}': case '{embed_post_title}': case '{embed_post_url}': return self::parse_post_props( $tag ); case '{current_page_url}': if ( isset( $form_data['_wp_http_referer'] ) ) { $request_uri = sanitize_text_field( Helper::get_string_value( wp_unslash( $form_data['_wp_http_referer'] ) ) ); return esc_url( site_url( $request_uri ) ); } if ( isset( $_SERVER['REQUEST_URI'] ) ) { $request_uri = sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ); return esc_url( site_url( $request_uri ) ); } return ''; default: if ( strpos( $tag, 'get_input:' ) \|\| strpos( $tag, 'get_cookie:' ) ) { return self::parse_request_param( $tag ); } if ( 0 === strpos( $tag, '{form:' ) ) { return self::parse_form_input( $tag, $submission_data, $form_data ); } break; } } /* * Get User IP. * * @since 0.0.1 * @return string / public static function get_the_user_ip() { $ip = ''; if ( isset( $_SERVER['HTTP_CLIENT_IP'] ) ) { $ip = filter_var( wp_unslash( $_SERVER['HTTP_CLIENT_IP'] ), FILTER_VALIDATE_IP ); } elseif ( isset( $_SERVER['HTTP_X_FORWARDED_FOR'] ) ) { $ip = filter_var( wp_unslash( $_SERVER['HTTP_X_FORWARDED_FOR'] ), FILTER_VALIDATE_IP ); } elseif ( isset( $_SERVER['HTTP_X_FORWARDED'] ) ) { $ip = filter_var( wp_unslash( $_SERVER['HTTP_X_FORWARDED'] ), FILTER_VALIDATE_IP ); } elseif ( isset( $_SERVER['HTTP_FORWARDED_FOR'] ) ) { $ip = filter_var( wp_unslash( $_SERVER['HTTP_FORWARDED_FOR'] ), FILTER_VALIDATE_IP ); } elseif ( isset( $_SERVER['HTTP_FORWARDED'] ) ) { $ip = filter_var( wp_unslash( $_SERVER['HTTP_FORWARDED'] ), FILTER_VALIDATE_IP ); } elseif ( isset( $_SERVER['REMOTE_ADDR'] ) ) { $ip = filter_var( wp_unslash( $_SERVER['REMOTE_ADDR'] ), FILTER_VALIDATE_IP ); } else { $ip = 'UNKNOWN'; } return apply_filters( 'srfm_get_the_ip', $ip ); } /* * Parse Request Query properties. * * @param string $value tag. * @since 0.0.1 * @return array<mixed>\|string / public static function parse_request_param( $value ) { if ( ! $value ) { return ''; } $exploded = explode( ':', $value ); $param = array_pop( $exploded ); if ( ! $param ) { return ''; } $param = str_replace( '}', '', $param ); if ( $param && strpos( $value, 'get_input:' ) !== false ) { $var = ''; if ( isset( $_SERVER['QUERY_STRING'] ) ) { $var = Helper::get_string_value( filter_var( wp_unslash( $_SERVER['QUERY_STRING'] ), FILTER_SANITIZE_URL ) ); } parse_str( $var, $parameters ); return isset( $parameters[ $param ] ) ? esc_attr( sanitize_text_field( Helper::get_string_value( $parameters[ $param ] ) ) ) : ''; } if ( $param && strpos( $value, 'get_cookie:' ) !== false ) { return isset( $_COOKIE[ $param ] ) ? esc_attr( sanitize_text_field( wp_unslash( $_COOKIE[ $param ] ) ) ) : ''; } return ''; } /* * Parse User Input in the Form Submission. * * @param string $value tag. * @param array<mixed>\|null $submission_data data from submission. * @param array<mixed>\|null $form_data data from form. * @since 0.0.3 * @return mixed / public static function parse_form_input( $value, $submission_data = null, $form_data = null ) { if ( ! $submission_data && ! $form_data ) { return $value; } if ( ! preg_match( '/\{form:(.?)}/', $value, $matches ) ) { return $value; } $target_slug = $matches[1]; $replacement_data = ''; if ( ! is_array( $submission_data ) ) { return $replacement_data; } foreach ( $submission_data as $submission_item_key => $submission_item_value ) { $label = explode( '-lbl-', $submission_item_key )[1]; $slug = implode( '-', array_slice( explode( '-', $label ), 1 ) ); $block_type = explode( '-lbl-', $submission_item_key )[0]; if ( $slug === $target_slug ) { /** * Filter to allow external processing of specific block types. * * Allows other components to process certain block types differently by providing * their own processing logic. If a block is processed externally, the filter should * return an array containing 'processed_value'. * * @param array $args { * Arguments passed to the filter. * * @type string $submission_item_key The key of the current submission item * @type mixed $submission_item_value The value of the current submission item * @type string $target_slug The target field slug being processed * @type string $block_type The type of block being processed * @type array $form_data The complete form configuration data * @type array $submission_data The complete form submission data * @type string $value The original smart tag value * } / $is_processed_externally = Helper::apply_filters_as_array( 'srfm_smart_tags_is_block_processed_externally', [ 'submission_item_key' => $submission_item_key, 'submission_item_value' => $submission_item_value, 'target_slug' => $target_slug, 'block_type' => $block_type, 'form_data' => $form_data, 'submission_data' => $submission_data, 'value' => $value, ] ); if ( isset( $is_processed_externally['processed_value'] ) ) { $replacement_data = $is_processed_externally['processed_value']; break; } // if $submission_item_value is an array, make a tag for each item. if ( 0 === strpos( $block_type, 'srfm-upload' ) && is_array( $submission_item_value ) ) { // Implemented key upload_format_type to determine what to return for urls. // for raw urls are return as comma separated strings. if ( ! empty( $form_data['upload_format_type'] ) && 'raw' === $form_data['upload_format_type'] ) { $replacement_data = urldecode( implode( ', ', $submission_item_value ) ); } else { if ( count( $submission_item_value ) === 1 ) { $decoded_value = urldecode( reset( $submission_item_value ) ); $replacement_data = '<a rel="noopener noreferrer" href="' . esc_url( $decoded_value ) . '" target="_blank">' . esc_html( $decoded_value ) . '</a>'; } else { $replacement_data = '<ul style="margin: 0;">'; foreach ( $submission_item_value as $file_url ) { $decoded_value = urldecode( $file_url ); $replacement_data .= '<li><a rel="noopener noreferrer" href="' . esc_url( $decoded_value ) . '" target="_blank">' . esc_html( $decoded_value ) . '</a></li>'; } $replacement_data .= '</ul>'; } } } elseif ( 0 === strpos( $block_type, 'srfm-textarea' ) ) { // Special handling for textarea blocks to preserve HTML formatting. // Step 1 - Sanitize raw input. $sanitized_content = Helper::sanitize_textarea( Helper::get_string_value( $submission_item_value ) ); // Step 2 - Decode HTML entities to preserve formatting. $decoded_content = html_entity_decode( $sanitized_content ); $replacement_data .= $decoded_content; } else { // if $submission_item_value is a url then add <a> tag. with view text. if ( is_string( $submission_item_value ) && filter_var( $submission_item_value, FILTER_VALIDATE_URL ) ) { ob_start(); ?> <a href="<?php echo esc_url( urldecode( $submission_item_value ) ); ?>" target="_blank"><?php echo esc_html( esc_url( $submission_item_value ) ); ?></a> <?php $view_link = ob_get_clean(); // Add filter to modify the view link. $view_link = apply_filters( 'srfm_smart_tag_view_link', $view_link, [ 'submission_item_key' => $submission_item_key, 'submission_item_value' => $submission_item_value, 'target_slug' => $target_slug, 'block_type' => $block_type, 'form_data' => $form_data, 'submission_data' => $submission_data, 'value' => $value, ] ); $replacement_data .= $view_link; } else { $replacement_data .= $submission_item_value; } } break; } } return $replacement_data; } /* * Parse Date Properties. * * @param string $value date tag. * @since 0.0.1 * @return string / private static function parse_date( $value ) { $format = ''; if ( '{date_mdy}' === $value ) { $format = 'm/d/Y'; } if ( '{date_dmy}' === $value ) { $format = 'd/m/Y'; } $date = gmdate( $format, Helper::get_integer_value( strtotime( current_time( 'mysql' ) ) ) ); return $date ? $date : ''; } /* * Parse user properties. * * @param string $value user tag. * @since 0.0.1 * @return mixed / private static function parse_user_props( $value ) { $user = wp_get_current_user(); $user_info = get_user_meta( $user->ID ); if ( ! $user_info ) { return ''; } if ( '{user_id}' === $value ) { return null !== $user->ID ? $user->ID : ''; } if ( '{user_display_name}' === $value ) { return esc_attr( $user->data->display_name ?? '' ); } if ( '{user_first_name}' === $value ) { return is_array( $user_info ) && isset( $user_info['first_name'][0] ) ? esc_attr( $user_info['first_name'][0] ) : ''; } if ( '{user_last_name}' === $value ) { return is_array( $user_info ) && isset( $user_info['last_name'][0] ) ? esc_attr( $user_info['last_name'][0] ) : ''; } if ( '{user_email}' === $value ) { return $user->data->user_email ?? ''; } if ( '{user_login}' === $value ) { return $user->data->user_login ?? ''; } return ''; } /* * Parse Post properties. * * @param string $value post tag. * @since 0.0.1 * @return string / private static function parse_post_props( $value ) { global $post; if ( ! $post ) { return ''; } if ( '{embed_post_url}' === $value && isset( $_SERVER['REQUEST_URI'] ) ) { $request_uri = sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ); return esc_url( site_url( $request_uri ) ); } if ( '{embed_post_title}' === $value ) { $value = 'post_title'; } if ( '{embed_post_id}' === $value ) { $value = 'ID'; } if ( property_exists( $post, $value ) ) { return $post->{$value}; } return ''; } /* * Parse browser/user-agent properties. * * @param string $value browser tag. * @since 0.0.1 * @return string */ private static function parse_browser_props( $value ) { $browser = new Browser(); if ( '{browser_name}' === $value ) { return sanitize_text_field( $browser->getBrowser() ); } if ( '{browser_platform}' === $value ) { return sanitize_text_field( $browser->getPlatform() ); } return ''; } }	18.38 KB	2025-11-17 18:39
📁 traits	-	2025-11-17 18:39
📄 translatable.php <?php /** * Translatable Class file for Sureforms. * * @package Sureforms * @since 1.0.5 / namespace SRFM\Inc; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Sureforms Translatable Class * * A helper class providing an interface for handling translation of text elements, specifically * frontend validation messages, used in the Sureforms plugin. This class enables dynamic and * reusable translated strings to enhance user experience across different languages. * * @since 1.0.5 / class Translatable { /* * Retrieve default frontend validation messages. * * Returns an array of validation messages, each identified by a unique key. Messages are * translated for frontend display, with placeholders included for dynamically populated values. * * @since 1.0.5 * @return array<string, string> Associative array of translated validation messages for frontend use. / public static function get_frontend_validation_messages() { $translatable_array = self::dynamic_validation_messages(); /* * Filter for frontend validation messages. * * This filter allows developers to add or modify the default validation messages. * Primarily intended for enabling custom validation messages and supporting pro functionality. * * @internal This filter is primarily used for internal purposes and pro functionality. / return apply_filters( 'srfm_frontend_validation_messages', $translatable_array ); } /* * Retrieve default dynamic validation messages. * * @since 1.2.1 * @return array<string, string> Associative array of translated validation messages for dynamic use. / public static function dynamic_validation_messages() { $translatable_array = self::dynamic_messages(); /* * Filter for dynamic validation messages. * * The `srfm_dynamic_validation_messages` filter allows developers to add or modify * the default dynamic validation messages. * This is primarily intended for enabling custom validation messages and supporting pro functionality. * * @internal This filter is primarily used for internal purposes and pro functionality. / $filtered_array = apply_filters( 'srfm_dynamic_validation_messages', $translatable_array ); $dynamic_options = get_option( 'srfm_default_dynamic_block_option', [] ); if ( ! empty( $dynamic_options ) && is_array( $dynamic_options ) ) { foreach ( $dynamic_options as $key => $value ) { if ( isset( $filtered_array[ $key ] ) ) { $filtered_array[ $key ] = $value; } } } return $filtered_array; } /* * Dynamic messages array * * @since 1.2.1 * @return array<string, string> Associative array of translated dynamic messages. / public static function dynamic_messages() { return [ 'srfm_valid_phone_number' => __( 'Please enter a valid phone number.', 'sureforms' ), 'srfm_valid_url' => __( 'Please enter a valid URL.', 'sureforms' ), 'srfm_confirm_email_same' => __( 'Confirmation email does not match.', 'sureforms' ), 'srfm_valid_email' => __( 'Please enter a valid email address.', 'sureforms' ), / translators: %s represents the minimum acceptable value / 'srfm_input_min_value' => __( 'Minimum value is %s', 'sureforms' ), / translators: %s represents the maximum acceptable value / 'srfm_input_max_value' => __( 'Maximum value is %s', 'sureforms' ), / translators: %s represents the minimum number of selections required / 'srfm_dropdown_min_selections' => __( 'Minimum %s selections are required', 'sureforms' ), / translators: %s represents the maximum number of selections allowed / 'srfm_dropdown_max_selections' => __( 'Maximum %s selections are allowed', 'sureforms' ), / translators: %s represents the minimum number of characters required / 'srfm_multi_choice_min_selections' => __( 'Minimum %s selections are required', 'sureforms' ), / translators: %s represents the maximum number of characters allowed / 'srfm_multi_choice_max_selections' => __( 'Maximum %s selections are allowed', 'sureforms' ), ]; } /* * Get default form restriction message. * * @since 1.10.1 * @return string Translated default form restriction message. */ public static function get_default_form_restriction_message() { return __( 'This form is now closed as we\'ve received all the entries.', 'sureforms' ); } }	4.38 KB	2025-11-17 18:39
📄 updater-callbacks.php <?php /** * SureForms Updater Callbacks. * Provides static methods for the updater class. * * @package sureforms. * @since 1.0.0 / namespace SRFM\Inc; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Updater class. * * @since 1.0.0 / class Updater_Callbacks { /* * Update callback method to handle the default dynamic block options in the global settings. * * @since 1.0.2 * @return void / public static function manage_default_dynamic_options() { $previous_options = get_option( 'get_default_dynamic_block_option' ); if ( ! empty( $previous_options ) && is_array( $previous_options ) ) { update_option( 'srfm_default_dynamic_block_option', $previous_options ); delete_option( 'get_default_dynamic_block_option' ); } } /* * Update callback method to handle the default dynamic block options in the global settings. * * @since 1.0.4 * @return void / public static function manage_empty_default_dynamic_options() { $previous_options = get_option( 'srfm_default_dynamic_block_option' ); if ( ! empty( $previous_options ) && is_array( $previous_options ) ) { // get default options values. $default_options = Helper::default_dynamic_block_option(); // merge previous options with default options after filtering empty values. $previous_options = array_merge( $default_options, array_filter( $previous_options ) ); // update the options. update_option( 'srfm_default_dynamic_block_option', $previous_options ); } } /* * Update callback method to handle the honeypot option in the global settings. * * @since 1.2.1 * @return void / public static function manage_honeypot_option() { // Retrieve the previous general settings options. $general_options = get_option( 'srfm_general_settings_options' ); if ( ! empty( $general_options ) && is_array( $general_options ) && isset( $general_options['srfm_honeypot'] ) ) { // Retrieve the security settings options. $security_options = get_option( 'srfm_security_settings_options' ); if ( is_array( $security_options ) ) { // Set the honeypot setting in the security options. $security_options['srfm_honeypot'] = $general_options['srfm_honeypot']; // Update the security options. update_option( 'srfm_security_settings_options', $security_options ); } // Remove the honeypot setting from the general options and update it. unset( $general_options['srfm_honeypot'] ); update_option( 'srfm_general_settings_options', $general_options ); } } /* * Update callback method to handle the default dynamic block options in the global settings. * * @since 1.2.1 * @return void */ public static function manage_empty_global_dynamic_options() { $previous_options = get_option( 'srfm_default_dynamic_block_option' ); $new_options = Translatable::dynamic_messages(); if ( ! empty( $previous_options ) && is_array( $previous_options ) ) { // Iterate and update the options. foreach ( $new_options as $key => $value ) { if ( ! isset( $previous_options[ $key ] ) ) { $previous_options[ $key ] = $value; } } } else { $previous_options = Helper::default_dynamic_block_option(); } // update the options. update_option( 'srfm_default_dynamic_block_option', $previous_options ); } }	3.25 KB	2025-11-17 18:39
📄 updater.php <?php /** * SureForms Updater. * Manages important update related to the plugin. * * @package sureforms. * @since 0.0.12 / namespace SRFM\Inc; use SRFM\Inc\Traits\Get_Instance; if ( ! defined( 'ABSPATH' ) ) { exit; // Exit if accessed directly. } /* * Updater class. * * @since 0.0.12 / class Updater { use Get_Instance; /* * Current DB saved version of SureForms. * * @var string * @since 1.0.0 / private $old_version; /* * Constructor. * * @since 0.0.12 * @return void / public function __construct() { // Get auto saved version number. $this->old_version = Helper::get_string_value( get_option( 'srfm-version', '' ) ); /* * Sets the `init` action with a priority of 10. * Ensures that this initialization runs before the Pro plugin's `init` action. * Allows the necessary setup to complete prior to the Pro plugin's execution. / add_action( 'init', [ $this, 'init' ], 10 ); add_action( 'admin_enqueue_scripts', [ $this, 'enqueue_styles' ] ); add_action( 'in_plugin_update_message-' . SRFM_BASENAME, [ $this, 'plugin_update_notification' ], 10 ); } /* * Whether or not to call the DB update methods. * * @since 1.0.0 * @return bool / public function needs_db_update() { if ( ! $this->old_version ) { if ( ! empty( get_posts( [ 'post_type' => SRFM_FORMS_POST_TYPE ] ) ) ) { // Run db update if users have forms created. Edge case for the users directly updating from v0.0.10 or below. return true; } // If old version is empty and no forms are created, it means it is fresh setup. Hence, DB upgrade is not needed. return false; } $updater_callbacks = $this->get_updater_callbacks(); if ( empty( $updater_callbacks ) ) { return false; } $versions = array_keys( $updater_callbacks ); $latest = $versions[ count( $versions ) - 1 ]; return version_compare( $this->old_version, $latest, '<' ); } /* * This function will help us to determine the plugin version and update it. * Any major change in the option can be handed here on the basis of last plugin version found in the database. * * @since 0.0.12 * @since 1.0.0 -- Added db updater callbacks support. * @return void / public function init() { if ( version_compare( SRFM_VER, $this->old_version, '=' ) ) { // Bail early because saved version is already updated and no change detected. return; } if ( $this->needs_db_update() ) { foreach ( $this->get_updater_callbacks() as $updater_version => $updater_callback_functions ) { if ( ! is_array( $updater_callback_functions ) ) { continue; } if ( $this->old_version && ! version_compare( $this->old_version, $updater_version, '<' ) ) { // Skip as SRFM saved version is not less than updaters version so db upgrade is not needed here. continue; } foreach ( $updater_callback_functions as $updater_callback_function ) { call_user_func( $updater_callback_function, $this->old_version ); } } } // Finally update cache and DB with current version. $this->old_version = SRFM_VER; update_option( 'srfm-version', $this->old_version ); } /* * Plugin update notification. * This function will help us to display the update notice to the user. * before updating the plugin. * this info is fetched from latest available readme from repository. * * @param array<mixed> $data Plugin data. * @since 0.0.12 * @return void / public function plugin_update_notification( $data ) { if ( ! empty( $data['upgrade_notice'] ) ) { ?> <hr class="srfm-plugin-update-notification__separator" /> <div class="srfm-plugin-update-notification"> <div class="srfm-plugin-update-notification__icon"> <span class="dashicons dashicons-info"></span> </div> <div> <div class="srfm-plugin-update-notification__title"> <?php echo esc_html__( 'Heads up!', 'sureforms' ); ?> </div> <div class="srfm-plugin-update-notification__message"> <?php $upgrade_notice = is_string( $data['upgrade_notice'] ) ? $data['upgrade_notice'] : ''; printf( wp_kses( $upgrade_notice, [ 'a' => [ 'href' => [] ] ] ) ); ?> </div> </div> </div> <?php } //end if } /* * Enqueue styles. * This function will help us to enqueue the styles for the update notice. * * @since 0.0.12 * @return void / public function enqueue_styles() { $screen = get_current_screen(); if ( empty( $screen->id ) \|\| 'plugins' !== $screen->id ) { return; } wp_enqueue_style( 'srfm-update-notice', SRFM_URL . 'admin/assets/css/update-notice.css', [], SRFM_VER ); } /* * Returns an array of DB updater callback functions. * * @since 1.0.0 * @return array<string,array<callable>>> Array of DB updater callback functions */ public function get_updater_callbacks() { return [ '1.0.2' => [ 'SRFM\Inc\Updater_Callbacks::manage_default_dynamic_options', ], '1.0.4' => [ 'SRFM\Inc\Updater_Callbacks::manage_empty_default_dynamic_options', ], '1.2.1' => [ 'SRFM\Inc\Updater_Callbacks::manage_honeypot_option', 'SRFM\Inc\Updater_Callbacks::manage_empty_global_dynamic_options', ], ]; } }	5.13 KB	2025-11-17 18:39

Edit File:

Terminal