<?php if ( ! defined( 'ABSPATH' ) ) exit;

[0] Fix | Delete

[1] Fix | Delete

/**

[2] Fix | Delete

* Class NF_Admin_Menus_Submissions

[3] Fix | Delete

*/

[4] Fix | Delete

final class NF_Admin_Menus_Submissions extends NF_Abstracts_Submenu

[5] Fix | Delete

{

[6] Fix | Delete

/**

[7] Fix | Delete

* @var string

[8] Fix | Delete

*/

[9] Fix | Delete

public $parent_slug = 'ninja-forms';

[10] Fix | Delete

[11] Fix | Delete

/**

[12] Fix | Delete

* @var string

[13] Fix | Delete

*/

[14] Fix | Delete

public $page_title = 'Submissions';

[15] Fix | Delete

[16] Fix | Delete

/**

[17] Fix | Delete

* @var string

[18] Fix | Delete

*/

[19] Fix | Delete

public $menu_slug = 'nf-submissions';

[20] Fix | Delete

[21] Fix | Delete

/**

[22] Fix | Delete

* @var int

[23] Fix | Delete

*/

[24] Fix | Delete

public $position = 3;

[25] Fix | Delete

[26] Fix | Delete

/** @var int */

[27] Fix | Delete

public $load_legacy;

[28] Fix | Delete

[29] Fix | Delete

/**

[30] Fix | Delete

* Constructor

[31] Fix | Delete

*/

[32] Fix | Delete

public function __construct()

[33] Fix | Delete

{

[34] Fix | Delete

parent::__construct();

[35] Fix | Delete

[36] Fix | Delete

$this->load_legacy = intval( Ninja_Forms()->get_setting( 'load_legacy_submissions' ) );

[37] Fix | Delete

[38] Fix | Delete

if ( $this->load_legacy )

[39] Fix | Delete

{

[40] Fix | Delete

$this->menu_slug = 'edit.php?post_type=nf_sub';

[41] Fix | Delete

[42] Fix | Delete

$this->function = NULL;

[43] Fix | Delete

[44] Fix | Delete

add_filter( 'manage_nf_sub_posts_columns', array( $this, 'change_columns' ) );

[45] Fix | Delete

[46] Fix | Delete

add_action( 'manage_posts_custom_column', array( $this, 'custom_columns' ), 10, 2 );

[47] Fix | Delete

[48] Fix | Delete

add_filter('months_dropdown_results', array( $this, 'remove_filter_show_all_dates' ), 9999 );

[49] Fix | Delete

[50] Fix | Delete

add_action( 'restrict_manage_posts', array( $this, 'add_filters' ) );

[51] Fix | Delete

[52] Fix | Delete

add_filter( 'parse_query', array( $this, 'table_filter' ) );

[53] Fix | Delete

[54] Fix | Delete

add_filter( 'posts_clauses', array( $this, 'search' ), 20, 1 );

[55] Fix | Delete

[56] Fix | Delete

add_filter( 'bulk_actions-edit-nf_sub', array( $this, 'remove_bulk_edit' ) );

[57] Fix | Delete

[58] Fix | Delete

add_action( 'admin_footer-edit.php', array( $this, 'bulk_admin_footer' ) );

[59] Fix | Delete

[60] Fix | Delete

add_action( 'load-edit.php', array( $this, 'export_listen' ) );

[61] Fix | Delete

[62] Fix | Delete

add_action('admin_head', array( $this, 'hide_page_title_action' ) );

[63] Fix | Delete

[64] Fix | Delete

// This will only run on our post type.

[65] Fix | Delete

add_action( 'views_edit-nf_sub', array( $this, 'change_views' ) );

[66] Fix | Delete

[67] Fix | Delete

// add_action( 'admin_init', array( $this, 'nf_upgrade_redirect' ) );

[68] Fix | Delete

[69] Fix | Delete

//Add bulk actions on the Submissions interface

[70] Fix | Delete

add_filter( 'bulk_actions-edit-nf_sub', [ $this, 'manage_bulk_actions' ] );

[71] Fix | Delete

[72] Fix | Delete

add_action( 'admin_enqueue_scripts', array( $this, 'enqueue_legacy_scripts' ) );

[73] Fix | Delete

[74] Fix | Delete

}

[75] Fix | Delete

else

[76] Fix | Delete

{

[77] Fix | Delete

add_action( 'admin_body_class', array( $this, 'body_class' ) );

[78] Fix | Delete

[79] Fix | Delete

add_action( 'admin_enqueue_scripts', array( $this, 'enqueue_scripts' ) );

[80] Fix | Delete

[81] Fix | Delete

add_action('current_screen', [$this, 'remove_legacy_submissions_page']);

[82] Fix | Delete

}

[83] Fix | Delete

[84] Fix | Delete

}

[85] Fix | Delete

[86] Fix | Delete

/**

[87] Fix | Delete

* Remove the old Submissions page link when legacy mode is not enabled

[88] Fix | Delete

*

[89] Fix | Delete

* @param $screen object of current screen details

[90] Fix | Delete

*/

[91] Fix | Delete

public function remove_legacy_submissions_page( $screen ) {

[92] Fix | Delete

if ( "nf_sub" === $screen->post_type && $screen->id === "edit-nf_sub") {

[93] Fix | Delete

$form_id = !empty($_GET["form_id"]) ? "&form_id=" . $_GET["form_id"] : "";

[94] Fix | Delete

wp_safe_redirect( admin_url( "admin.php?page=nf-submissions" . $form_id ), 302, "Ninja Forms");

[95] Fix | Delete

exit;

[96] Fix | Delete

}

[97] Fix | Delete

}

[98] Fix | Delete

/**

[99] Fix | Delete

* Add an option in the bulk action select field

[100] Fix | Delete

*/

[101] Fix | Delete

public function manage_bulk_actions($bulk_actions) {

[102] Fix | Delete

$bulk_actions['trigger-email-action'] = __('Trigger Email Action', 'ninja-forms');

[103] Fix | Delete

return $bulk_actions;

[104] Fix | Delete

}

[105] Fix | Delete

[106] Fix | Delete

/**

[107] Fix | Delete

* If we have required updates, redirect to the main Ninja Forms page

[108] Fix | Delete

*/

[109] Fix | Delete

public function nf_upgrade_redirect() {

[110] Fix | Delete

global $pagenow;

[111] Fix | Delete

[112] Fix | Delete

if( "1" == get_option( 'ninja_forms_needs_updates' ) ) {

[113] Fix | Delete

// remove_submenu_page( $this->parent_slug, $this->menu_slug );

[114] Fix | Delete

// if( 'edit.php' == $pagenow && 'nf_sub' == $_GET[ 'post_type' ] ) {

[115] Fix | Delete

// wp_safe_redirect( admin_url( 'admin.php?page=ninja-forms' ), 301 );

[116] Fix | Delete

// exit;

[117] Fix | Delete

// }

[118] Fix | Delete

}

[119] Fix | Delete

}

[120] Fix | Delete

[121] Fix | Delete

/**

[122] Fix | Delete

* Change Views

[123] Fix | Delete

* WordPress hook that modifies the links on our submissions CPT to allow

[124] Fix | Delete

* users to switch between completed and trashed submissions.

[125] Fix | Delete

* @since 3.2.17

[126] Fix | Delete

*

[127] Fix | Delete

* @param $views The views that are associated with this CPT.

[128] Fix | Delete

* $views[ 'view' ]

[129] Fix | Delete

* @return array Returns modified views to allow our users access to the trash.

[130] Fix | Delete

*/

[131] Fix | Delete

public function change_views( $views )

[132] Fix | Delete

{

[133] Fix | Delete

// Remove our unused views.

[134] Fix | Delete

unset( $views[ 'mine' ] );

[135] Fix | Delete

unset( $views[ 'publish' ] );

[136] Fix | Delete

[137] Fix | Delete

// If the Form ID is not empty and IS a number...

[138] Fix | Delete

if( ! empty( $_GET[ 'form_id' ] ) && ctype_digit( $_GET[ 'form_id' ] ) ) {

[139] Fix | Delete

// ...populate the rest of the query string.

[140] Fix | Delete

$form_id = '&form_id=' . absint($_GET[ 'form_id' ]) . '&nf_form_filter&paged=1';

[141] Fix | Delete

} else {

[142] Fix | Delete

// ...otherwise send in an empty string.

[143] Fix | Delete

$form_id = '';

[144] Fix | Delete

}

[145] Fix | Delete

[146] Fix | Delete

// Build our new views.

[147] Fix | Delete

$views[ 'all' ] = '<a href="' . admin_url( 'edit.php?post_status=all&post_type=nf_sub' ) . $form_id . '">'

[148] Fix | Delete

. esc_html__( 'Completed', 'ninja-forms' ) . '</a>';

[149] Fix | Delete

[150] Fix | Delete

$views[ 'trash' ] = '<a href="' . admin_url( 'edit.php?post_status=trash&post_type=nf_sub' ) . $form_id . '">'

[151] Fix | Delete

. esc_html__( 'Trashed', 'ninja-forms' ) . '</a>';

[152] Fix | Delete

[153] Fix | Delete

// Checks to make sure we have a post status.

[154] Fix | Delete

if( ! empty( $_GET[ 'post_status' ] ) ) {

[155] Fix | Delete

// Depending on the domain set the value to plain text.

[156] Fix | Delete

if ( 'all' == $_GET[ 'post_status' ] ) {

[157] Fix | Delete

$views[ 'all' ] = esc_html__( 'Completed', 'ninja-forms' );

[158] Fix | Delete

} else if ( 'trash' == $_GET[ 'post_status' ] ) {

[159] Fix | Delete

$views[ 'trash' ] = esc_html__( 'Trashed', 'ninja-forms' );

[160] Fix | Delete

}

[161] Fix | Delete

}

[162] Fix | Delete

[163] Fix | Delete

return $views;

[164] Fix | Delete

}

[165] Fix | Delete

[166] Fix | Delete

/**

[167] Fix | Delete

* Change Columns

[168] Fix | Delete

*

[169] Fix | Delete

* @return array

[170] Fix | Delete

*/

[171] Fix | Delete

public function change_columns()

[172] Fix | Delete

{

[173] Fix | Delete

// if the form_id isset and ID a number

[174] Fix | Delete

$form_id = ( isset( $_GET['form_id'] ) && ctype_digit( $_GET[ 'form_id' ] ) ) ? absint($_GET['form_id']) : FALSE;

[175] Fix | Delete

[176] Fix | Delete

if( ! $form_id ) return array();

[177] Fix | Delete

[178] Fix | Delete

static $cols;

[179] Fix | Delete

[180] Fix | Delete

if( $cols ) return $cols;

[181] Fix | Delete

[182] Fix | Delete

$cols = array(

[183] Fix | Delete

'cb' => '<input type="checkbox" />',

[184] Fix | Delete

'seq_num' => esc_html__( '#', 'ninja-forms' ),

[185] Fix | Delete

);

[186] Fix | Delete

[187] Fix | Delete

$fields = Ninja_Forms()->form( $form_id )->get_fields();

[188] Fix | Delete

[189] Fix | Delete

$hidden_field_types = apply_filters( 'ninja_forms_sub_hidden_field_types', array() );

[190] Fix | Delete

[191] Fix | Delete

foreach( $fields as $field ){

[192] Fix | Delete

[193] Fix | Delete

if ( is_null( $field ) ) continue;

[194] Fix | Delete

[195] Fix | Delete

if( in_array( $field->get_setting( 'type' ), $hidden_field_types ) ) continue;

[196] Fix | Delete

[197] Fix | Delete

if ( $field->get_setting( 'admin_label' ) ) {

[198] Fix | Delete

$cols[ 'field_' . $field->get_id() ] = $field->get_setting( 'admin_label' );

[199] Fix | Delete

} else {

[200] Fix | Delete

$cols[ 'field_' . $field->get_id() ] = $field->get_setting( 'label' );

[201] Fix | Delete

}

[202] Fix | Delete

[203] Fix | Delete

}

[204] Fix | Delete

[205] Fix | Delete

$cols[ 'sub_date' ] = esc_html__( 'Date', 'ninja-forms' );

[206] Fix | Delete

[207] Fix | Delete

return $cols;

[208] Fix | Delete

}

[209] Fix | Delete

[210] Fix | Delete

/**

[211] Fix | Delete

* Custom Columns

[212] Fix | Delete

*

[213] Fix | Delete

* @param $column

[214] Fix | Delete

* @param $sub_id

[215] Fix | Delete

*/

[216] Fix | Delete

public function custom_columns( $column, $sub_id )

[217] Fix | Delete

{

[218] Fix | Delete

global $post_type;

[219] Fix | Delete

[220] Fix | Delete

if ( 'nf_sub' !== $post_type ) return false;

[221] Fix | Delete

[222] Fix | Delete

$sub = Ninja_Forms()->form()->get_sub( $sub_id );

[223] Fix | Delete

[224] Fix | Delete

switch( $column ){

[225] Fix | Delete

case 'seq_num':

[226] Fix | Delete

echo $this->custom_columns_seq_num( $sub );

[227] Fix | Delete

break;

[228] Fix | Delete

case 'sub_date':

[229] Fix | Delete

echo $this->custom_columns_sub_date( $sub );

[230] Fix | Delete

break;

[231] Fix | Delete

default:

[232] Fix | Delete

echo $this->custom_columns_field( $sub, $column );

[233] Fix | Delete

}

[234] Fix | Delete

}

[235] Fix | Delete

[236] Fix | Delete

/**

[237] Fix | Delete

* Remove Filter: Show All Dates

[238] Fix | Delete

*

[239] Fix | Delete

* @param $months

[240] Fix | Delete

* @return array

[241] Fix | Delete

*/

[242] Fix | Delete

public function remove_filter_show_all_dates( $months )

[243] Fix | Delete

{

[244] Fix | Delete

if( ! isset( $_GET[ 'post_type' ] ) || 'nf_sub' != $_GET[ 'post_type' ] ) return $months;

[245] Fix | Delete

[246] Fix | Delete

// Returning an empty array should hide the dropdown.

[247] Fix | Delete

return array();

[248] Fix | Delete

}

[249] Fix | Delete

[250] Fix | Delete

/**

[251] Fix | Delete

* Add Filters

[252] Fix | Delete

*

[253] Fix | Delete

* @return bool

[254] Fix | Delete

*/

[255] Fix | Delete

public function add_filters()

[256] Fix | Delete

{

[257] Fix | Delete

global $typenow;

[258] Fix | Delete

[259] Fix | Delete

// Bail if we aren't in our submission custom post type.

[260] Fix | Delete

if ( $typenow != 'nf_sub' ) return false;

[261] Fix | Delete

[262] Fix | Delete

$forms = Ninja_Forms()->form()->get_forms();

[263] Fix | Delete

[264] Fix | Delete

$form_options = array();

[265] Fix | Delete

foreach( $forms as $form ){

[266] Fix | Delete

$form_options[ $form->get_id() ] = $form->get_setting( 'title' );

[267] Fix | Delete

}

[268] Fix | Delete

$form_options = apply_filters( 'ninja_forms_submission_filter_form_options', $form_options );

[269] Fix | Delete

asort($form_options);

[270] Fix | Delete

[271] Fix | Delete

[272] Fix | Delete

// make sure form_id isset and is a number

[273] Fix | Delete

if( isset( $_GET[ 'form_id' ] ) && ctype_digit( $_GET[ 'form_id' ] ) ) {

[274] Fix | Delete

$form_selected = intval($_GET[ 'form_id' ]);

[275] Fix | Delete

} else {

[276] Fix | Delete

$form_selected = 0;

[277] Fix | Delete

}

[278] Fix | Delete

[279] Fix | Delete

if( isset( $_GET[ 'begin_date' ] ) ) {

[280] Fix | Delete

// check for bad characters(possible xss vulnerability)

[281] Fix | Delete

$beg_date_sep = preg_replace('/[0-9]+/', '', WPN_Helper::sanitize_text_field($_GET[ 'begin_date' ]));

[282] Fix | Delete

[283] Fix | Delete

if ( 1 !== count( array_unique( str_split( $beg_date_sep ) ) ) ) {// We got bad data.

[284] Fix | Delete

$begin_date = '';

[285] Fix | Delete

} else {

[286] Fix | Delete

$begin_date = WPN_Helper::sanitize_text_field($_GET['begin_date']);

[287] Fix | Delete

}

[288] Fix | Delete

} else {

[289] Fix | Delete

$begin_date = '';

[290] Fix | Delete

}

[291] Fix | Delete

[292] Fix | Delete

if( isset( $_GET[ 'end_date' ] ) ) {

[293] Fix | Delete

// check for bad characters(possible xss vulnerability)

[294] Fix | Delete

$end_date_sep = preg_replace('/[0-9]+/', '', WPN_Helper::sanitize_text_field($_GET[ 'end_date' ]));

[295] Fix | Delete

[296] Fix | Delete

if ( 1 !== count( array_unique( str_split( $end_date_sep ) ) ) ) {// We got bad data.

[297] Fix | Delete

$end_date = '';

[298] Fix | Delete

} else {

[299] Fix | Delete

$end_date = WPN_Helper::sanitize_text_field($_GET['end_date']);

[300] Fix | Delete

}

[301] Fix | Delete

} else {

[302] Fix | Delete

$end_date = '';

[303] Fix | Delete

}

[304] Fix | Delete

[305] Fix | Delete

Ninja_Forms::template( 'admin-menu-subs-filter.html.php', compact( 'form_options', 'form_selected', 'begin_date', 'end_date' ) );

[306] Fix | Delete

[307] Fix | Delete

wp_enqueue_script('jquery-ui-datepicker');

[308] Fix | Delete

wp_enqueue_style( 'jquery-ui-datepicker', Ninja_Forms::$url .'lib/Legacy/jquery-ui-fresh.min.css' );

[309] Fix | Delete

}

[310] Fix | Delete

[311] Fix | Delete

public function table_filter( $query )

[312] Fix | Delete

{

[313] Fix | Delete

global $pagenow;

[314] Fix | Delete

[315] Fix | Delete

if( $pagenow != 'edit.php' || ! is_admin() || ! isset( $query->query['post_type'] ) || 'nf_sub' != $query->query['post_type'] || ! is_main_query() ) return;

[316] Fix | Delete

[317] Fix | Delete

$vars = &$query->query_vars;

[318] Fix | Delete

[319] Fix | Delete

// make sure form_id is not empty and is a number

[320] Fix | Delete

$form_id = ( ! empty( $_GET['form_id'] ) && ctype_digit( $_GET[ 'form_id' ] ) ) ? intval($_GET['form_id']) : 0;

[321] Fix | Delete

[322] Fix | Delete

$vars = $this->table_filter_by_form( $vars, $form_id );

[323] Fix | Delete

[324] Fix | Delete

$vars = $this->table_filter_by_date( $vars );

[325] Fix | Delete

[326] Fix | Delete

$vars = apply_filters( 'ninja_forms_sub_table_qv', $vars, $form_id );

[327] Fix | Delete

}

[328] Fix | Delete

[329] Fix | Delete

/**

[330] Fix | Delete

* @updated 3.3.21.2

[331] Fix | Delete

*/

[332] Fix | Delete

public function search( $pieces ) {

[333] Fix | Delete

global $typenow;

[334] Fix | Delete

// filter to select search query

[335] Fix | Delete

if ( isset ( $_GET['s'] ) && $typenow == 'nf_sub' && is_search() && is_admin() ) {

[336] Fix | Delete

global $wpdb;

[337] Fix | Delete

[338] Fix | Delete

$keywords = explode(' ', get_query_var('s'));

[339] Fix | Delete

[340] Fix | Delete

$query = "";

[341] Fix | Delete

[342] Fix | Delete

foreach ($keywords as $word) {

[343] Fix | Delete

[344] Fix | Delete

$wpdb->escape_by_ref( $word );

[345] Fix | Delete

$query .= " (mypm1.meta_value LIKE '%{$word}%') OR ";

[346] Fix | Delete

}

[347] Fix | Delete

[348] Fix | Delete

if (!empty($query)) {

[349] Fix | Delete

// Escape place holders for the where clause.

[350] Fix | Delete

$pieces[ 'where' ] = $wpdb->remove_placeholder_escape( $pieces[ 'where' ] );

[351] Fix | Delete

[352] Fix | Delete

// add to where clause

[353] Fix | Delete

$pieces[ 'where' ] = str_replace("((({$wpdb->posts}.post_title LIKE '%", "({$query}(({$wpdb->posts}.post_title LIKE '%", $pieces[ 'where' ]);

[354] Fix | Delete

[355] Fix | Delete

$pieces[ 'join' ] = $pieces[ 'join' ] . " INNER JOIN {$wpdb->postmeta} AS mypm1 ON ({$wpdb->posts}.ID = mypm1.post_id)";

[356] Fix | Delete

[357] Fix | Delete

}

[358] Fix | Delete

}

[359] Fix | Delete

return ( $pieces );

[360] Fix | Delete

}

[361] Fix | Delete

[362] Fix | Delete

public function remove_bulk_edit( $actions ) {

[363] Fix | Delete

unset( $actions['edit'] );

[364] Fix | Delete

return $actions;

[365] Fix | Delete

}

[366] Fix | Delete

[367] Fix | Delete

public function bulk_admin_footer() {

[368] Fix | Delete

global $post_type;

[369] Fix | Delete

[370] Fix | Delete

if ( ! is_admin() )

[371] Fix | Delete

return false;

[372] Fix | Delete

[373] Fix | Delete

if( $post_type == 'nf_sub' && isset ( $_REQUEST['post_status'] ) && $_REQUEST['post_status'] == 'all' ) {

[374] Fix | Delete

?>

[375] Fix | Delete

<script type="text/javascript">

[376] Fix | Delete

jQuery(document).ready(function() {

[377] Fix | Delete

jQuery('<option>').val('export').text('<?php esc_html_e('Export', 'ninja-forms')?>').appendTo("select[name='action']");

[378] Fix | Delete

jQuery('<option>').val('export').text('<?php esc_html_e('Export', 'ninja-forms')?>').appendTo("select[name='action2']");

[379] Fix | Delete

<?php

[380] Fix | Delete

if ( ( isset ( $_POST['action'] ) && $_POST['action'] == 'export' ) || ( isset ( $_POST['action2'] ) && $_POST['action2'] == 'export' ) ) {

[381] Fix | Delete

?>

[382] Fix | Delete

setInterval(function(){

[383] Fix | Delete

jQuery( "select[name='action'" ).val( '-1' );

[384] Fix | Delete

jQuery( "select[name='action2'" ).val( '-1' );

[385] Fix | Delete

jQuery( '#posts-filter' ).submit();

[386] Fix | Delete

},5000);

[387] Fix | Delete

<?php

[388] Fix | Delete

}

[389] Fix | Delete

[390] Fix | Delete

if ( isset ( $_REQUEST['form_id'] ) && ! empty ( $_REQUEST['form_id'] ) ) {

[391] Fix | Delete

$redirect = urlencode( remove_query_arg( array( 'download_all', 'download_file' ) ) );

[392] Fix | Delete

$url = admin_url( 'admin.php?page=nf-processing&action=download_all_subs&form_id=' . absint( $_REQUEST['form_id'] ) . '&redirect=' . $redirect . '&security=' . wp_create_nonce( 'ninja_forms_batch_nonce' ) );

[393] Fix | Delete

$url = esc_url( $url );

[394] Fix | Delete

?>

[395] Fix | Delete

var button = '<a href="<?php echo $url; ?>" class="button-secondary nf-download-all"><?php echo esc_html__( 'Download All Submissions', 'ninja-forms' ); ?></a>';

[396] Fix | Delete

<?php

[397] Fix | Delete

}

[398] Fix | Delete

[399] Fix | Delete

if ( isset ( $_REQUEST['download_all'] ) && $_REQUEST['download_all'] != '' ) {

[400] Fix | Delete

$redirect = esc_url_raw( add_query_arg( array( 'download_file' => esc_html( $_REQUEST['download_all'] ) ) ) );

[401] Fix | Delete

$redirect = remove_query_arg( array( 'download_all' ), $redirect );

[402] Fix | Delete

?>

[403] Fix | Delete

document.location.href = "<?php echo $redirect; ?>";

[404] Fix | Delete

<?php

[405] Fix | Delete

}

[406] Fix | Delete

[407] Fix | Delete

?>

[408] Fix | Delete

});

[409] Fix | Delete

</script>

[410] Fix | Delete

<?php

[411] Fix | Delete

}

[412] Fix | Delete

}

[413] Fix | Delete

[414] Fix | Delete

public function export_listen()

[415] Fix | Delete

{

[416] Fix | Delete

$current_user_can_get_nf_submissions = apply_filters( 'ninja_forms_api_allow_get_submissions', current_user_can( 'manage_options' ) );

[417] Fix | Delete

// Ensure that we are in admin and user has permission to export

[418] Fix | Delete

if (

[419] Fix | Delete

!is_admin() ||

[420] Fix | Delete

!is_user_logged_in() ||

[421] Fix | Delete

!$current_user_can_get_nf_submissions

[422] Fix | Delete

) {

[423] Fix | Delete

[424] Fix | Delete

return false;

[425] Fix | Delete

}

[426] Fix | Delete

[427] Fix | Delete

if (!isset ($_REQUEST['form_id']) || empty ($_REQUEST['form_id'])) {

[428] Fix | Delete

return false;

[429] Fix | Delete

}

[430] Fix | Delete

[431] Fix | Delete

if (isset ($_REQUEST['export_single']) && !empty($_REQUEST['export_single'])) {

[432] Fix | Delete

Ninja_Forms()->sub(esc_html($_REQUEST['export_single']))->export();

[433] Fix | Delete

}

[434] Fix | Delete

[435] Fix | Delete

if ((isset ($_REQUEST['action']) && $_REQUEST['action'] == 'export') || (isset ($_REQUEST['action2']) && $_REQUEST['action2'] == 'export')) {

[436] Fix | Delete

[437] Fix | Delete

$sub_ids = array();

[438] Fix | Delete

if (isset($_REQUEST['post'])) {

[439] Fix | Delete

$sub_ids = WPN_Helper::esc_html($_REQUEST['post']);

[440] Fix | Delete

}

[441] Fix | Delete

[442] Fix | Delete

Ninja_Forms()->form( absint( $_REQUEST['form_id'] ) )->export_subs( $sub_ids );

[443] Fix | Delete

}

[444] Fix | Delete

[445] Fix | Delete

if (isset ($_REQUEST['download_file']) && !empty($_REQUEST['download_file'])) {

[446] Fix | Delete

[447] Fix | Delete

// Open our download all file

[448] Fix | Delete

$filename = esc_html($_REQUEST['download_file']);

[449] Fix | Delete

[450] Fix | Delete

$upload_dir = wp_upload_dir();

[451] Fix | Delete

[452] Fix | Delete

$file_path = trailingslashit($upload_dir['path']) . $filename . '.csv';

[453] Fix | Delete

[454] Fix | Delete

if (file_exists($file_path)) {

[455] Fix | Delete

$myfile = file_get_contents($file_path);

[456] Fix | Delete

} else {

[457] Fix | Delete

$redirect = esc_url_raw(remove_query_arg(array('download_file', 'download_all')));

[458] Fix | Delete

wp_redirect($redirect);

[459] Fix | Delete

die();

[460] Fix | Delete

}

[461] Fix | Delete

[462] Fix | Delete

unlink($file_path);

[463] Fix | Delete

[464] Fix | Delete

$form_name = Ninja_Forms()->form(absint($_REQUEST['form_id']))->get()->get_setting('title');

[465] Fix | Delete

$form_name = sanitize_title($form_name);

[466] Fix | Delete

[467] Fix | Delete

$today = date('Y-m-d', current_time('timestamp'));

[468] Fix | Delete

[469] Fix | Delete

$filename = apply_filters('ninja_forms_download_all_filename', $form_name . '-all-subs-' . $today);

[470] Fix | Delete

[471] Fix | Delete

header('Content-type: application/csv');

[472] Fix | Delete

header('Content-Disposition: attachment; filename="' . $filename . '.csv"');

[473] Fix | Delete

header('Pragma: no-cache');

[474] Fix | Delete

header('Expires: 0');

[475] Fix | Delete

[476] Fix | Delete

echo $myfile;

[477] Fix | Delete

[478] Fix | Delete

die();

[479] Fix | Delete

}

[480] Fix | Delete

}

[481] Fix | Delete

[482] Fix | Delete

public function hide_page_title_action()

[483] Fix | Delete

{

[484] Fix | Delete

// If we are on our the nf_sub post type then....

[485] Fix | Delete

if( ( isset( $_GET[ 'post_type' ] ) && 'nf_sub' == $_GET[ 'post_type'] ) ||

[486] Fix | Delete

'nf_sub' == get_post_type() ) {

[487] Fix | Delete

// ...then hiding the "Add New" button on the CPT page.

[488] Fix | Delete

echo '<style type="text/css">.page-title-action, .view-mode{display: none;}</style>';

[489] Fix | Delete

}

[490] Fix | Delete

}

[491] Fix | Delete

[492] Fix | Delete

/**

[493] Fix | Delete

* Custom Columns: ID

[494] Fix | Delete

*

[495] Fix | Delete

* @param $sub

[496] Fix | Delete

* @return mixed

[497] Fix | Delete

*/

[498] Fix | Delete

private function custom_columns_seq_num( $sub )

[499] Fix | Delete