<?php

[0] Fix | Delete

[1] Fix | Delete

if ( ! defined( 'ABSPATH' ) || ! class_exists( 'NF_Abstracts_Action' ) ) {

[2] Fix | Delete

exit;

[3] Fix | Delete

}

[4] Fix | Delete

[5] Fix | Delete

/**

[6] Fix | Delete

* Class NF_Actions_Recaptcha

[7] Fix | Delete

*/

[8] Fix | Delete

final class NF_Actions_Recaptcha extends NF_Abstracts_Action {

[9] Fix | Delete

[10] Fix | Delete

/**

[11] Fix | Delete

* @var string

[12] Fix | Delete

*/

[13] Fix | Delete

protected $_name = 'recaptcha';

[14] Fix | Delete

[15] Fix | Delete

/**

[16] Fix | Delete

* @var array

[17] Fix | Delete

*/

[18] Fix | Delete

protected $_tags = array( 'spam', 'filtering', 'recaptcha' );

[19] Fix | Delete

[20] Fix | Delete

/**

[21] Fix | Delete

* @var string

[22] Fix | Delete

*/

[23] Fix | Delete

protected $_timing = 'normal';

[24] Fix | Delete

[25] Fix | Delete

/**

[26] Fix | Delete

* @var int

[27] Fix | Delete

*/

[28] Fix | Delete

protected $_priority = '10';

[29] Fix | Delete

[30] Fix | Delete

/**

[31] Fix | Delete

* @var string

[32] Fix | Delete

*/

[33] Fix | Delete

protected $_group = 'core';

[34] Fix | Delete

[35] Fix | Delete

/**

[36] Fix | Delete

* @var string

[37] Fix | Delete

*/

[38] Fix | Delete

protected $site_key;

[39] Fix | Delete

[40] Fix | Delete

/**

[41] Fix | Delete

* @var string

[42] Fix | Delete

*/

[43] Fix | Delete

protected $site_secret;

[44] Fix | Delete

[45] Fix | Delete

/**

[46] Fix | Delete

* @var int

[47] Fix | Delete

*/

[48] Fix | Delete

protected $form_id;

[49] Fix | Delete

[50] Fix | Delete

/**

[51] Fix | Delete

* @var array

[52] Fix | Delete

*/

[53] Fix | Delete

protected $forms_with_action;

[54] Fix | Delete

[55] Fix | Delete

/**

[56] Fix | Delete

* @var array

[57] Fix | Delete

*/

[58] Fix | Delete

protected $_settings_exclude = array( 'conditions' );

[59] Fix | Delete

[60] Fix | Delete

/**

[61] Fix | Delete

* Constructor

[62] Fix | Delete

*/

[63] Fix | Delete

public function __construct() {

[64] Fix | Delete

parent::__construct();

[65] Fix | Delete

[66] Fix | Delete

$this->_nicename = esc_html__( 'reCAPTCHA v3', 'ninja-forms' );

[67] Fix | Delete

$settings = Ninja_Forms::config( 'ActionRecaptchaV3Settings' );

[68] Fix | Delete

$this->_settings = array_merge( $this->_settings, $settings );

[69] Fix | Delete

[70] Fix | Delete

$this->site_key = Ninja_Forms()->get_setting( 'recaptcha_site_key_3' );

[71] Fix | Delete

$this->site_secret = Ninja_Forms()->get_setting( 'recaptcha_secret_key_3' );

[72] Fix | Delete

[73] Fix | Delete

add_filter( 'ninja_forms_action_type_settings', array( $this, 'maybe_remove_action' ) );

[74] Fix | Delete

[75] Fix | Delete

add_action( 'nf_get_form_id', array( $this, 'set_form_id' ), 15, 1 );

[76] Fix | Delete

[77] Fix | Delete

add_filter( 'ninja_forms_display_fields', array( $this, 'maybe_inject_field'), 10, 2 );

[78] Fix | Delete

add_filter( 'ninja_forms_form_fields', array( $this, 'maybe_remove_v2_field') );

[79] Fix | Delete

add_filter( 'ninja_forms_field_show_in_builder', array( $this, 'maybe_remove_v2_field_from_builder'), 10, 2 );

[80] Fix | Delete

add_action( 'ninja_forms_output_templates', array( $this, 'maybe_output_field_template') );

[81] Fix | Delete

add_filter( 'nf_display_enqueue_scripts', array( $this, 'enqueue_script' ) );

[82] Fix | Delete

}

[83] Fix | Delete

[84] Fix | Delete

/**

[85] Fix | Delete

* Setter method for the form_id and callback for the nf_get_form_id action.

[86] Fix | Delete

* @since 3.2.2

[87] Fix | Delete

*

[88] Fix | Delete

* @param string $form_id The ID of the current form.

[89] Fix | Delete

* @return void

[90] Fix | Delete

*/

[91] Fix | Delete

public function set_form_id( $form_id )

[92] Fix | Delete

{

[93] Fix | Delete

$this->form_id = $form_id;

[94] Fix | Delete

}

[95] Fix | Delete

[96] Fix | Delete

public function get_form_id() {

[97] Fix | Delete

if ( $this->form_id ) {

[98] Fix | Delete

return $this->form_id;

[99] Fix | Delete

}

[100] Fix | Delete

[101] Fix | Delete

$this->form_id = filter_input( INPUT_GET, 'form_id', FILTER_VALIDATE_INT );

[102] Fix | Delete

[103] Fix | Delete

return $this->form_id;

[104] Fix | Delete

}

[105] Fix | Delete

[106] Fix | Delete

/**

[107] Fix | Delete

* Remove the action registration if Akismet functions not available.

[108] Fix | Delete

*

[109] Fix | Delete

* @param array $action_type_settings

[110] Fix | Delete

*

[111] Fix | Delete

* @return array

[112] Fix | Delete

*/

[113] Fix | Delete

public function maybe_remove_action( $action_type_settings ) {

[114] Fix | Delete

if ( ! $this->is_recaptcha_configured() ) {

[115] Fix | Delete

unset( $action_type_settings[ $this->_name ] );

[116] Fix | Delete

}

[117] Fix | Delete

[118] Fix | Delete

return $action_type_settings;

[119] Fix | Delete

}

[120] Fix | Delete

[121] Fix | Delete

/**

[122] Fix | Delete

* @return bool

[123] Fix | Delete

*/

[124] Fix | Delete

protected function is_action_enabled_for_form() {

[125] Fix | Delete

$form_id = $this->get_form_id();

[126] Fix | Delete

[127] Fix | Delete

if ( isset( $this->forms_with_action[ $form_id ] ) ) {

[128] Fix | Delete

return $this->forms_with_action[ $form_id ];

[129] Fix | Delete

}

[130] Fix | Delete

[131] Fix | Delete

$actions = Ninja_Forms()->form( $form_id )->get_actions();

[132] Fix | Delete

[133] Fix | Delete

$enabled = false;

[134] Fix | Delete

foreach ( $actions as $action ) {

[135] Fix | Delete

if ( $this->_name == $action->get_settings('type') && 1 == $action->get_setting( 'active' ) ) {

[136] Fix | Delete

$enabled = true;

[137] Fix | Delete

break;

[138] Fix | Delete

}

[139] Fix | Delete

}

[140] Fix | Delete

[141] Fix | Delete

$this->forms_with_action[ $form_id ] = $enabled;

[142] Fix | Delete

[143] Fix | Delete

return $enabled;

[144] Fix | Delete

}

[145] Fix | Delete

[146] Fix | Delete

/**

[147] Fix | Delete

* Is the reCAPTCHA configured correctly

[148] Fix | Delete

*

[149] Fix | Delete

* @return bool

[150] Fix | Delete

*/

[151] Fix | Delete

protected function is_recaptcha_configured() {

[152] Fix | Delete

if ( empty( $this->site_key ) || empty( $this->site_secret) ) {

[153] Fix | Delete

return false;

[154] Fix | Delete

}

[155] Fix | Delete

[156] Fix | Delete

return true;

[157] Fix | Delete

}

[158] Fix | Delete

[159] Fix | Delete

/**

[160] Fix | Delete

* Is the reCAPTCHA action enabled

[161] Fix | Delete

*

[162] Fix | Delete

* @return bool

[163] Fix | Delete

*/

[164] Fix | Delete

protected function is_action_configured() {

[165] Fix | Delete

if ( ! $this->is_recaptcha_configured() ) {

[166] Fix | Delete

return false;

[167] Fix | Delete

}

[168] Fix | Delete

[169] Fix | Delete

if ( ! $this->is_action_enabled_for_form() ) {

[170] Fix | Delete

return false;

[171] Fix | Delete

}

[172] Fix | Delete

[173] Fix | Delete

return true;

[174] Fix | Delete

}

[175] Fix | Delete

[176] Fix | Delete

public function maybe_output_field_template() {

[177] Fix | Delete

if ( ! $this->is_action_configured() ) {

[178] Fix | Delete

return;

[179] Fix | Delete

}

[180] Fix | Delete

[181] Fix | Delete

$file_path = Ninja_Forms::$dir . 'includes/Templates/';

[182] Fix | Delete

[183] Fix | Delete

echo file_get_contents( $file_path . "fields-recaptcha-v3.html" );

[184] Fix | Delete

}

[185] Fix | Delete

[186] Fix | Delete

protected function get_field_id_hash( $form_id ) {

[187] Fix | Delete

return substr( base_convert( md5( $form_id ), 16, 10 ), - 5 );

[188] Fix | Delete

}

[189] Fix | Delete

[190] Fix | Delete

/**

[191] Fix | Delete

* Remove v2 reCAPTCHA fields if still configured, when using the v3 Action

[192] Fix | Delete

*

[193] Fix | Delete

* @param array $fields

[194] Fix | Delete

*

[195] Fix | Delete

* @return array

[196] Fix | Delete

*/

[197] Fix | Delete

public function maybe_remove_v2_field( $fields ) {

[198] Fix | Delete

if ( ! $this->is_action_configured() ) {

[199] Fix | Delete

return $fields;

[200] Fix | Delete

}

[201] Fix | Delete

[202] Fix | Delete

foreach ( $fields as $key => $field ) {

[203] Fix | Delete

if ( 'recaptcha' === $field->get_setting('type') ) {

[204] Fix | Delete

// Remove v2 reCAPTCHA fields if still configured

[205] Fix | Delete

unset( $fields[ $key ] );

[206] Fix | Delete

}

[207] Fix | Delete

}

[208] Fix | Delete

[209] Fix | Delete

return $fields;

[210] Fix | Delete

}

[211] Fix | Delete

[212] Fix | Delete

/**

[213] Fix | Delete

* Don't show the v2 reCAPTCHA field in the builder when using the v3 Action

[214] Fix | Delete

*

[215] Fix | Delete

* @param bool $show

[216] Fix | Delete

* @param NF_Abstracts_Field $field

[217] Fix | Delete

*

[218] Fix | Delete

* @return bool

[219] Fix | Delete

*/

[220] Fix | Delete

public function maybe_remove_v2_field_from_builder( $show, $field ) {

[221] Fix | Delete

if ( ! $this->is_action_configured() ) {

[222] Fix | Delete

return $show;

[223] Fix | Delete

}

[224] Fix | Delete

[225] Fix | Delete

if ( 'recaptcha' !== $field->get_type() ) {

[226] Fix | Delete

return $show;

[227] Fix | Delete

}

[228] Fix | Delete

[229] Fix | Delete

$saved_fields = Ninja_Forms()->form( $this->get_form_id() )->get_fields( array( 'saved' => 1 ), true );

[230] Fix | Delete

[231] Fix | Delete

foreach ( $saved_fields as $key => $field ) {

[232] Fix | Delete

if ( 'recaptcha' === $field->get_setting( 'type' ) ) {

[233] Fix | Delete

// recaptcha v2 field exists on form, don't hide it as it will break the JS

[234] Fix | Delete

return $show;

[235] Fix | Delete

}

[236] Fix | Delete

}

[237] Fix | Delete

[238] Fix | Delete

// Hide the recaptcha v2 field

[239] Fix | Delete

return false;

[240] Fix | Delete

}

[241] Fix | Delete

[242] Fix | Delete

/**

[243] Fix | Delete

* @param array $fields

[244] Fix | Delete

* @param int $form_id

[245] Fix | Delete

*

[246] Fix | Delete

* @return array

[247] Fix | Delete

*/

[248] Fix | Delete

public function maybe_inject_field( $fields, $form_id ) {

[249] Fix | Delete

if ( ! $this->is_action_configured() ) {

[250] Fix | Delete

return $fields;

[251] Fix | Delete

}

[252] Fix | Delete

[253] Fix | Delete

$field_id = $this->get_field_id_hash( $form_id );

[254] Fix | Delete

[255] Fix | Delete

$field = array(

[256] Fix | Delete

'objectType' => 'Field',

[257] Fix | Delete

'objectDomain' => 'fields',

[258] Fix | Delete

'editActive' => false,

[259] Fix | Delete

'order' => number_format( count( $fields ) + 1, 1 ),

[260] Fix | Delete

'type' => 'recaptcha_v3',

[261] Fix | Delete

'label' => 'Hidden',

[262] Fix | Delete

'key' => 'recaptcha_v3',

[263] Fix | Delete

'default' => '',

[264] Fix | Delete

'admin_label' => '',

[265] Fix | Delete

'drawerDisabled' => false,

[266] Fix | Delete

'id' => $field_id,

[267] Fix | Delete

'beforeField' => '',

[268] Fix | Delete

'afterField' => '',

[269] Fix | Delete

'value' => '',

[270] Fix | Delete

'label_pos' => 'above',

[271] Fix | Delete

'parentType' => 'hidden',

[272] Fix | Delete

'element_templates' => array(

[273] Fix | Delete

'recaptcha-v3',

[274] Fix | Delete

'hidden',

[275] Fix | Delete

'input',

[276] Fix | Delete

),

[277] Fix | Delete

'old_classname' => '',

[278] Fix | Delete

'wrap_template' => 'wrap-no-label',

[279] Fix | Delete

'site_key' => $this->site_key,

[280] Fix | Delete

);

[281] Fix | Delete

[282] Fix | Delete

$fields[] = $field;

[283] Fix | Delete

[284] Fix | Delete

return $fields;

[285] Fix | Delete

}

[286] Fix | Delete

[287] Fix | Delete

public function enqueue_script() {

[288] Fix | Delete

if ( ! $this->is_action_configured() ) {

[289] Fix | Delete

return;

[290] Fix | Delete

}

[291] Fix | Delete

[292] Fix | Delete

$recaptcha_lang = Ninja_Forms()->get_setting( 'recaptcha_lang', 'en' );

[293] Fix | Delete

[294] Fix | Delete

if ( $this->maybe_enqueue_recaptcha_js() ) {

[295] Fix | Delete

wp_enqueue_script( 'nf-google-recaptcha', 'https://www.google.com/recaptcha/api.js?hl=' . $recaptcha_lang . '&render=' . $this->site_key, array( 'jquery' ), '3.0', true );

[296] Fix | Delete

}

[297] Fix | Delete

}

[298] Fix | Delete

[299] Fix | Delete

/**

[300] Fix | Delete

* Check to not load the Google reCAPTCHA JS if other plugins are doing it

[301] Fix | Delete

*

[302] Fix | Delete

* @return bool

[303] Fix | Delete

*/

[304] Fix | Delete

protected function maybe_enqueue_recaptcha_js() {

[305] Fix | Delete

if ( false !== apply_filters( 'ninja_forms_pre_enqueue_recaptcha_v3_js', false ) ) {

[306] Fix | Delete

// Allow other plugins to tell Ninja Forms not to load the Google JS script, if they are doing that

[307] Fix | Delete

return false;

[308] Fix | Delete

}

[309] Fix | Delete

[310] Fix | Delete

$scripts = wp_scripts();

[311] Fix | Delete

[312] Fix | Delete

foreach( $scripts->registered as $script ) {

[313] Fix | Delete

if ( false !== strpos( $script->src, 'google.com/recaptcha/api.js' ) ) {

[314] Fix | Delete

return false;

[315] Fix | Delete

}

[316] Fix | Delete

}

[317] Fix | Delete

[318] Fix | Delete

return true;

[319] Fix | Delete

}

[320] Fix | Delete

[321] Fix | Delete

protected function get_form_data() {

[322] Fix | Delete

if ( empty( $_POST['formData'] ) ) {

[323] Fix | Delete

return false;

[324] Fix | Delete

}

[325] Fix | Delete

[326] Fix | Delete

$form_data = json_decode( $_POST['formData'], true );

[327] Fix | Delete

[328] Fix | Delete

// php5.2 fallback

[329] Fix | Delete

if ( ! $form_data ) {

[330] Fix | Delete

$form_data = json_decode( stripslashes( $_POST['formData'] ), true );

[331] Fix | Delete

}

[332] Fix | Delete

[333] Fix | Delete

return $form_data ? $form_data : false;

[334] Fix | Delete

}

[335] Fix | Delete

[336] Fix | Delete

protected function get_recaptcha_response() {

[337] Fix | Delete

$form_data = $this->get_form_data();

[338] Fix | Delete

[339] Fix | Delete

if ( ! $form_data || ! isset( $form_data['id'] ) ) {

[340] Fix | Delete

return false;

[341] Fix | Delete

}

[342] Fix | Delete

[343] Fix | Delete

$field_id = $this->get_field_id_hash( $form_data['id'] );

[344] Fix | Delete

[345] Fix | Delete

if ( ! isset( $form_data['fields'] ) || ! isset( $form_data['fields'][ $field_id ] ) ) {

[346] Fix | Delete

return false;

[347] Fix | Delete

}

[348] Fix | Delete

[349] Fix | Delete

return $form_data['fields'][ $field_id ]['value'];

[350] Fix | Delete

}

[351] Fix | Delete

[352] Fix | Delete

/**

[353] Fix | Delete

* Process the action

[354] Fix | Delete

*

[355] Fix | Delete

* @param array $action_settings

[356] Fix | Delete

* @param int $form_id

[357] Fix | Delete

* @param array $data

[358] Fix | Delete

*

[359] Fix | Delete

* @return array

[360] Fix | Delete

*/

[361] Fix | Delete

public function process( $action_settings, $form_id, $data ) {

[362] Fix | Delete

if ( ! $this->is_recaptcha_configured() ) {

[363] Fix | Delete

return $data;

[364] Fix | Delete

}

[365] Fix | Delete

[366] Fix | Delete

$recaptcha_response = $this->get_recaptcha_response();

[367] Fix | Delete

[368] Fix | Delete

if ( ! $recaptcha_response) {

[369] Fix | Delete

$data['errors']['form']['recaptcha'] = esc_html__( 'Recaptcha validation failed. Please try again later', 'ninja-forms' );

[370] Fix | Delete

[371] Fix | Delete

return $data;

[372] Fix | Delete

}

[373] Fix | Delete

[374] Fix | Delete

if ( $this->is_submission_human( $recaptcha_response, $action_settings['score'] ) ) {

[375] Fix | Delete

return $data;

[376] Fix | Delete

}

[377] Fix | Delete

[378] Fix | Delete

$data['errors']['form']['recaptcha'] = esc_html__( 'Recaptcha validation failed. Please try again later', 'ninja-forms' );

[379] Fix | Delete

[380] Fix | Delete

return $data;

[381] Fix | Delete

}

[382] Fix | Delete

[383] Fix | Delete

protected function is_submission_human( $token, $score_threshold ) {

[384] Fix | Delete

$endpoint = 'https://www.google.com/recaptcha/api/siteverify';

[385] Fix | Delete

[386] Fix | Delete

$request = array(

[387] Fix | Delete

'body' => array(

[388] Fix | Delete

'secret' => $this->site_secret,

[389] Fix | Delete

'response' => esc_html( $token ),

[390] Fix | Delete

),

[391] Fix | Delete

);

[392] Fix | Delete

[393] Fix | Delete

$response = wp_remote_post( esc_url_raw( $endpoint ), $request );

[394] Fix | Delete

[395] Fix | Delete

if ( 200 != wp_remote_retrieve_response_code( $response ) ) {

[396] Fix | Delete

if ( WP_DEBUG ) {

[397] Fix | Delete

error_log( print_r( $response, true ) );

[398] Fix | Delete

}

[399] Fix | Delete

[400] Fix | Delete

return false;

[401] Fix | Delete

}

[402] Fix | Delete

[403] Fix | Delete

$response_body = wp_remote_retrieve_body( $response );

[404] Fix | Delete

$response_body = json_decode( $response_body, true );

[405] Fix | Delete

[406] Fix | Delete

$score = isset( $response_body['score'] ) ? $response_body['score'] : 0;

[407] Fix | Delete

[408] Fix | Delete

$threshold = apply_filters( 'ninja_forms_action_recaptcha_score_threshold', $score_threshold );

[409] Fix | Delete

$is_human = $threshold < $score;

[410] Fix | Delete

[411] Fix | Delete

$is_human = apply_filters( 'ninja_forms_action_recaptcha__verify_response', $is_human, $response_body );

[412] Fix | Delete

[413] Fix | Delete

return $is_human;

[414] Fix | Delete

}

[415] Fix | Delete

}

[416] Fix | Delete