Edit File by line

<?php if ( ! defined( 'ABSPATH' ) ) exit;

[0] Fix | Delete

[1] Fix | Delete

class NF_AJAX_REST_Forms extends NF_AJAX_REST_Controller

[2] Fix | Delete

{

[3] Fix | Delete

protected $action = 'nf_forms';

[4] Fix | Delete

private $forms_controller;

[5] Fix | Delete

public function __construct()

[6] Fix | Delete

{

[7] Fix | Delete

parent::__construct();

[8] Fix | Delete

$this->forms_controller = new NF_Database_FormsController();

[9] Fix | Delete

}

[10] Fix | Delete

[11] Fix | Delete

/**

[12] Fix | Delete

* POST /forms/<id>/

[13] Fix | Delete

* @param array $request_data [ int $clone_id ]

[14] Fix | Delete

* @return array $data [ int $new_form_id ]

[15] Fix | Delete

[16] Fix | Delete

public function post( $request_data )

[17] Fix | Delete

{

[18] Fix | Delete

// Does the current user have admin privileges

[19] Fix | Delete

if (!current_user_can(apply_filters('ninja_forms_admin_all_forms_capabilities', 'manage_options'))) {

[20] Fix | Delete

$data ['error'] = esc_html__('Access denied. You must have admin privileges to view this data.', 'ninja-forms');

[21] Fix | Delete

return $data;

[22] Fix | Delete

}

[23] Fix | Delete

[24] Fix | Delete

// If we don't have a nonce...

[25] Fix | Delete

// OR if the nonce is invalid...

[26] Fix | Delete

if (!isset($request_data['security']) || !wp_verify_nonce($request_data['security'], 'ninja_forms_dashboard_nonce')) {

[27] Fix | Delete

// Kick the request out now.

[28] Fix | Delete

$data['error'] = esc_html__('Request forbidden.', 'ninja-forms');

[29] Fix | Delete

return $data;

[30] Fix | Delete

}

[31] Fix | Delete

[32] Fix | Delete

if( isset( $request_data[ 'clone_id' ]) ){

[33] Fix | Delete

$clone_id = $request_data[ 'clone_id' ];

[34] Fix | Delete

$data[ 'new_form_id' ] = NF_Database_Models_Form::duplicate( $clone_id );

[35] Fix | Delete

return $data;

[36] Fix | Delete

}

[37] Fix | Delete

}

[38] Fix | Delete

[39] Fix | Delete

/**

[40] Fix | Delete

* GET forms/

[41] Fix | Delete

* @return array [ $forms ]

[42] Fix | Delete

[43] Fix | Delete

public function get($request_data)

[44] Fix | Delete

{

[45] Fix | Delete

if (!current_user_can(apply_filters('ninja_forms_admin_all_forms_capabilities', 'manage_options'))) {

[46] Fix | Delete

return ['error' => esc_html__('Access denied. You must have admin privileges to view this data.', 'ninja-forms')];

[47] Fix | Delete

}

[48] Fix | Delete

[49] Fix | Delete

// If we don't have a nonce...

[50] Fix | Delete

// OR if the nonce is invalid...

[51] Fix | Delete

if (!isset($request_data['security']) || !wp_verify_nonce($request_data['security'], 'ninja_forms_dashboard_nonce')) {

[52] Fix | Delete

// Kick the request out now.

[53] Fix | Delete

$data['error'] = esc_html__('Request forbidden.', 'ninja-forms');

[54] Fix | Delete

return $data;

[55] Fix | Delete

}

[56] Fix | Delete

[57] Fix | Delete

return $this->forms_controller->getFormsData();

[58] Fix | Delete

}

[59] Fix | Delete

[60] Fix | Delete

/**

[61] Fix | Delete

* DELETE forms/<id>/

[62] Fix | Delete

* @param array $request_data => [ form_id ]

[63] Fix | Delete

* @return array $data => [ delete => null ]

[64] Fix | Delete

[65] Fix | Delete

public function delete( $request_data )

[66] Fix | Delete

{

[67] Fix | Delete

// Does the current user have admin privileges

[68] Fix | Delete

if (!current_user_can(apply_filters('ninja_forms_admin_all_forms_capabilities', 'manage_options'))) {

[69] Fix | Delete

return ['error' => esc_html__('Access denied. You must have admin privileges to view this data.', 'ninja-forms')];

[70] Fix | Delete

}

[71] Fix | Delete

[72] Fix | Delete

// If we don't have a nonce...

[73] Fix | Delete

// OR if the nonce is invalid...

[74] Fix | Delete

if (!isset($request_data['security']) || !wp_verify_nonce($request_data['security'], 'ninja_forms_dashboard_nonce')) {

[75] Fix | Delete

// Kick the request out now.

[76] Fix | Delete

$data['error'] = esc_html__('Request forbidden.', 'ninja-forms');

[77] Fix | Delete

return $data;

[78] Fix | Delete

}

[79] Fix | Delete

[80] Fix | Delete

$id = $request_data[ 'form_id' ];

[81] Fix | Delete

[82] Fix | Delete

$form = Ninja_Forms()->form( $id )->get();

[83] Fix | Delete

$data[ 'delete' ] = $form->delete();

[84] Fix | Delete

[85] Fix | Delete

return $data;

[86] Fix | Delete

}

[87] Fix | Delete

[88] Fix | Delete

/**

[89] Fix | Delete

* Form ID, Clone ID

[90] Fix | Delete

* @return array $request_data

[91] Fix | Delete

[92] Fix | Delete

protected function get_request_data()

[93] Fix | Delete

{

[94] Fix | Delete

$request_data = array();

[95] Fix | Delete

[96] Fix | Delete

[97] Fix | Delete

* FORM ID

[98] Fix | Delete

[99] Fix | Delete

if( isset( $_REQUEST[ 'form_id' ] ) && $_REQUEST[ 'form_id' ] ){

[100] Fix | Delete

$request_data[ 'form_id' ] = absint( $_REQUEST[ 'form_id' ] );

[101] Fix | Delete

}

[102] Fix | Delete

[103] Fix | Delete

[104] Fix | Delete

* CLONE ID

[105] Fix | Delete

[106] Fix | Delete

if( isset( $_REQUEST[ 'clone_id' ] ) && $_REQUEST[ 'clone_id' ] ){

[107] Fix | Delete

$request_data[ 'clone_id' ] = absint( $_REQUEST[ 'clone_id' ] );

[108] Fix | Delete

}

[109] Fix | Delete

[110] Fix | Delete

[111] Fix | Delete

* Security Nonce

[112] Fix | Delete

[113] Fix | Delete

if (isset($_REQUEST['security']) && $_REQUEST['security']) {

[114] Fix | Delete

$request_data[ 'security' ] = $_REQUEST[ 'security' ];

[115] Fix | Delete

}

[116] Fix | Delete

[117] Fix | Delete

[118] Fix | Delete

return $request_data;

[119] Fix | Delete

}

[120] Fix | Delete

}

[121] Fix | Delete

[122] Fix | Delete