: str_replace(): Passing null to parameter #2 ($replace) of type array|string is deprecated in
<?php if ( ! defined( 'ABSPATH' ) ) exit;
use NinjaForms\Includes\Handlers\Sanitizer;
protected static $render_instance_count = array();
protected static $loaded_templates = array(
'fields-wrap-no-container',
public static $use_test_values = FALSE;
protected static $form_uses_recaptcha = array();
protected static $form_uses_datepicker = array();
protected static $form_uses_inputmask = array();
protected static $form_uses_currencymask = array();
protected static $form_uses_rte = array();
protected static $form_uses_textarea_media = array();
protected static $form_uses_helptext = array();
protected static $form_uses_starrating = array();
protected static $thread_id = 1;
protected static $recorded_forms = [];
protected static $inline_vars_recorded = [];
public static function localize( $form_id )
$form_id = absint( $form_id );
* Action that passes the form ID as a parameter.
do_action( 'nf_get_form_id', $form_id );
$capability = apply_filters( 'ninja_forms_display_test_values_capabilities', 'read' );
if( isset( $_GET[ 'ninja_forms_test_values' ] ) && current_user_can( $capability ) ){
self::$use_test_values = TRUE;
if( ! has_action( 'wp_footer', 'NF_Display_Render::output_templates', 9999 ) ){
add_action( 'wp_footer', 'NF_Display_Render::output_templates', 9999 );
$form = Ninja_Forms()->form( $form_id )->get();
$settings = $form->get_settings();
foreach( $settings as $name => &$value ){
'fieldNumberNumMinError',
'fieldNumberNumMaxError',
'fieldNumberIncrementBy',
'formErrorsCorrectErrors',
$value = esc_html($value);
unset( $settings[ $name ] );
// Remove the embed_form setting to avoid pagebuilder conflicts.
$settings[ 'embed_form' ] = '';
$settings = array_merge( Ninja_Forms::config( 'i18nFrontEnd' ), $settings );
$settings = apply_filters( 'ninja_forms_display_form_settings', $settings, $form_id );
$form->update_settings( $settings );
if( $form->get_setting( 'logged_in' ) && ! is_user_logged_in() ){
echo do_shortcode( $form->get_setting( 'not_logged_in_msg' ));
if( $form->get_setting( 'sub_limit_number' ) && ! empty($form->get_setting( 'sub_limit_number' )) ){
$result = $wpdb->get_row( "SELECT COUNT(DISTINCT(p.ID)) AS count FROM `$wpdb->posts` AS p
LEFT JOIN `$wpdb->postmeta` AS m
WHERE m.meta_key = '_form_id'
AND m.meta_value = $form_id
AND p.post_status = 'publish'");
if( intval( $result->count ) >= $form->get_setting( 'sub_limit_number' ) ) {
echo do_shortcode( apply_filters( 'nf_sub_limit_reached_msg', $form->get_setting( 'sub_limit_msg' ), $form_id ));
// Get our maintenance value out of the DB.
$maintenance = WPN_Helper::form_in_maintenance( $form_id );
// If maintenance isn't empty and the bool is set to 1 then..
if( true == $maintenance ) {
// Set a filterable maintenance message and echo it out.
$maintenance_msg = apply_filters( 'nf_maintenance_message', esc_html__( 'This form is currently undergoing maintenance. Please try again later.', 'ninja-forms' ) );
if( ! apply_filters( 'ninja_forms_display_show_form', true, $form_id, $form ) ) return;
$currency = $form->get_setting( 'currency', Ninja_Forms()->get_setting( 'currency' ) );
$currencySymbolLookup = Ninja_Forms::config( 'CurrencySymbol' );
$currencySymbol = self::getCurrencySymbol($currencySymbolLookup,$currency) ;
$form->update_setting( 'currency_symbol', $currencySymbol );
$title = apply_filters( 'ninja_forms_form_title', $form->get_setting( 'title' ), $form_id );
$form->update_setting( 'title', esc_html( $title ) );
$before_form = apply_filters( 'ninja_forms_display_before_form', '', $form_id );
$form->update_setting( 'beforeForm', $before_form );
$before_fields = apply_filters( 'ninja_forms_display_before_fields', '', $form_id );
$form->update_setting( 'beforeFields', $before_fields );
$after_fields = apply_filters( 'ninja_forms_display_after_fields', '', $form_id );
$form->update_setting( 'afterFields', $after_fields );
$after_form = apply_filters( 'ninja_forms_display_after_form', '', $form_id );
$form->update_setting( 'afterForm', $after_form );
$form_fields = Ninja_Forms()->form( $form_id )->get_fields();
if( empty( $form_fields ) ){
echo esc_html__( 'No Fields Found.', 'ninja-forms' );
// TODO: Replace unique field key checks with a refactored model/factory.
$unique_field_keys = array();
foreach ($form_fields as $field) {
if( is_object( $field ) ) {
'id' => $field->get_id(),
'settings' => $field->get_settings()
$field_id = $field[ 'id' ];
* TODO: Replace unique field key checks with a refactored model/factory.
$field_key = $field[ 'settings' ][ 'key' ];
if( in_array( $field_key, $unique_field_keys ) || '' == $field_key ){
Ninja_Forms()->request( 'delete-field' )->data( array( 'field_id' => $field_id ) )->dispatch();
// Remove the field from cache.
if( isset( $form_cache[ 'fields' ] ) ){
foreach( $form_cache[ 'fields' ] as $cached_field_key => $cached_field ){
if( ! isset( $cached_field[ 'id' ] ) ) continue;
if( $field_id != $cached_field[ 'id' ] ) continue;
unset( $form_cache[ 'fields' ][ $cached_field_key ] ); // Remove the field.
continue; // Skip the duplicate field.
array_push( $unique_field_keys, $field_key ); // Log unique key.
/* END Duplicate field check. */
$field_type = $field[ 'settings' ][ 'type' ];
if( ! is_string( $field_type ) ) continue;
if( ! isset( Ninja_Forms()->fields[ $field_type ] ) ) {
$field = self::constructUnknownField($field);
$field_type = $field[ 'settings' ][ 'type' ];
$fieldBeforeFilters = $field;
$field = self::applyLocalizeFilters($field, $field_type);
$field_class = Ninja_Forms()->fields[$field_type];
if (self::$use_test_values) {
$field[ 'value' ] = $field_class->get_test_value();
$field= self::ensureFieldArrayStructureValidity($field,$fieldBeforeFilters);
// Copy field ID into the field settings array for use in localized data.
$field[ 'settings' ][ 'id' ] = $field[ 'id' ];
* TODO: For backwards compatibility, run the original action, get contents from the output buffer, and return the contents through the filter. Also display a PHP Notice for a deprecate filter.
$display_before = apply_filters( 'ninja_forms_display_before_field_type_' . $field[ 'settings' ][ 'type' ], '' );
$display_before = apply_filters( 'ninja_forms_display_before_field_key_' . $field[ 'settings' ][ 'key' ], $display_before );
$field[ 'settings' ][ 'beforeField' ] = $display_before;
$display_after = apply_filters( 'ninja_forms_display_after_field_type_' . $field[ 'settings' ][ 'type' ], '' );
$display_after = apply_filters( 'ninja_forms_display_after_field_key_' . $field[ 'settings' ][ 'key' ], $display_after );
$field[ 'settings' ][ 'afterField' ] = $display_after;
$templates = $field_class->get_templates();
if (!array($templates)) {
$templates = array($templates);
foreach ($templates as $template) {
self::load_template('fields-' . $template);
$settings = $field[ 'settings' ];
// Scrub any values that might be stored in data. Defaults will set these later.
foreach ($settings as $key => $setting) {
if (is_numeric($setting) && 'custom_mask' != $key )
if( ! isset( $settings[ 'label_pos' ] ) || 'default' == $settings[ 'label_pos' ] ){
$settings[ 'label_pos' ] = $form->get_setting( 'default_label_pos' );
$settings[ 'parentType' ] = $field_class->get_parent_type();
if( 'list' == $settings[ 'parentType' ] && isset( $settings[ 'options' ] ) && is_array( $settings[ 'options' ] ) ){
$settings[ 'options' ] = apply_filters( 'ninja_forms_render_options', $settings[ 'options' ], $settings );
$settings[ 'options' ] = apply_filters( 'ninja_forms_render_options_' . $field_type, $settings[ 'options' ], $settings );
$default_value = ( isset( $settings[ 'default' ] ) ) ? $settings[ 'default' ] : null;
$default_value = apply_filters('ninja_forms_render_default_value', $default_value, $field_type, $settings);
$default_value = preg_replace( '/{[^}]}/', '', $default_value );
$settings['value'] = $default_value;
if( ! is_array( $default_value ) ) {
do_shortcode( $settings['value'] );
$settings['value'] = do_shortcode( $settings['value'] );
$thousands_sep = $wp_locale->number_format[ 'thousands_sep'];
$decimal_point = $wp_locale->number_format[ 'decimal_point' ];
$currencySymbol = Ninja_Forms()->get_setting('currency_symbol');
$settings = static::ensureProductRelatedCostLocalizeSettings($settings,$decimal_point,$thousands_sep,$currencySymbol);
$settings['element_templates'] = $templates;
$settings['old_classname'] = $field_class->get_old_classname();
$settings['wrap_template'] = $field_class->get_wrap_template();
$settings['label']=\wp_kses_post(Sanitizer::preventScriptTriggerInHtmlOutput($settings['label']));
$fields[] = apply_filters( 'ninja_forms_localize_field_settings_' . $field_type, $settings, $form );
if( 'recaptcha' == $field[ 'settings' ][ 'type' ] ){
array_push( self::$form_uses_recaptcha, $form_id );
if( 'date' == $field[ 'settings' ][ 'type' ] || self::checkRepeaterChildType($field, 'date') ){
array_push( self::$form_uses_datepicker, $form_id );
if( 'starrating' == $field[ 'settings' ][ 'type' ] || self::checkRepeaterChildType($field, "starrating")){
array_push( self::$form_uses_starrating, $form_id );
if( isset( $field[ 'settings' ][ 'mask' ] ) && $field[ 'settings' ][ 'mask' ] || self::checkRepeaterChildSetting($field, "mask", null) ){
array_push( self::$form_uses_inputmask, $form_id );
if( isset( $field[ 'settings' ][ 'mask' ] ) && 'currency' == $field[ 'settings' ][ 'mask' ] || self::checkRepeaterChildSetting($field, "mask", "currency") ){
array_push( self::$form_uses_currencymask, $form_id );
if( isset( $field[ 'settings' ][ 'textarea_rte' ] ) && $field[ 'settings' ][ 'textarea_rte' ] || self::checkRepeaterChildSetting($field, "textarea_rte", null) ){
array_push( self::$form_uses_rte, $form_id );
if( isset( $field[ 'settings' ][ 'textarea_media' ] ) && $field[ 'settings' ][ 'textarea_media' ] || self::checkRepeaterChildSetting($field, "textarea_media", null) ){
array_push( self::$form_uses_textarea_media, $form_id );
// strip all tags except image tags
if( isset( $field[ 'settings' ][ 'help_text' ] ) &&
strip_tags( $field[ 'settings' ][ 'help_text' ], '<img>'
array_push( self::$form_uses_helptext, $form_id );
WPN_Helper::update_nf_cache( $form_id, $form_cache ); // Update form cache without duplicate fields.
$fields = apply_filters( 'ninja_forms_display_fields', $fields, $form_id );
if(!isset($_GET['nf_preview_form'])){
/* Render Instance Fix */
if( ! isset(self::$render_instance_count[$form_id]) ) self::$render_instance_count[$form_id] = 0;
if(self::$render_instance_count[$form_id]) {
$instance_id .= '_' . self::$render_instance_count[$form_id];
foreach( $fields as $id => $field ) {
$fields[$id]['id'] .= '_' . self::$render_instance_count[$form_id];
self::$render_instance_count[$form_id]++;
/* END Render Instance Fix */
do_action( 'ninja_forms_before_container', $form_id, $form->get_settings(), $form_fields );
Ninja_Forms::template( 'display-form-container.html.php', compact( 'form_id' ) );
<!-- That data is being printed as a workaround to page builders reordering the order of the scripts loaded-->
<script>var formDisplay=1;var nfForms=nfForms||[];var form=[];form.id='<?php echo $form_id; ?>';form.settings=<?php echo wp_json_encode( $form->get_settings() ); ?>;form.fields=<?php echo wp_json_encode( $fields ); ?>;nfForms.push(form);</script>
self::enqueue_scripts( $form_id );
* Transform the inline JS into a variable passed to wp_localize_script
protected static function transformInlineVars($fields, $form_id, $form_settings)
$thread_id = sprintf("%08x", abs(crc32($_SERVER['REMOTE_ADDR'] . $_SERVER['REQUEST_TIME'] . $_SERVER['REMOTE_PORT'])));
if($thread_id !== self::$thread_id || isset( $_GET['nf_preview_form'] ) ){
self::$recorded_forms = [];
self::$thread_id = $thread_id;
$set_form['id'] = $form_id;
$set_form['settings'] = $form_settings;
$set_form['fields'] = $fields;
array_push(self::$recorded_forms, $set_form);
self::$inline_vars_recorded = [
"nfForms" => self::$recorded_forms,
* Ensure that product related costs on `localize` method have intended number format
* @param string $decimal_point
* @param string $thousands_sep
protected static function ensureProductRelatedCostLocalizeSettings(array $settings, $decimal_point,$thousands_sep, $currencySymbol): array
if ('shipping' == $settings['type']) {
$settings['shipping_cost'] = preg_replace('/[^\d,\.]/', '', $settings['shipping_cost']);
$settings['shipping_cost'] = str_replace($currencySymbol, '', $settings['shipping_cost']);
$settings['shipping_cost'] = str_replace($decimal_point, '||', $settings['shipping_cost']);
$settings['shipping_cost'] = str_replace($thousands_sep, '', $settings['shipping_cost']);
$settings['shipping_cost'] = str_replace('||', '.', $settings['shipping_cost']);
} elseif ('product' == $settings['type']) {
$settings['product_price'] = preg_replace('/[^\d,\.]/', '', $settings['product_price']);
$settings['product_price'] = str_replace($currencySymbol, '', $settings['product_price']);
$settings['product_price'] = str_replace($decimal_point, '||', $settings['product_price']);
$settings['product_price'] = str_replace($thousands_sep, '', $settings['product_price']);
$settings['product_price'] = str_replace('||', '.', $settings['product_price']);
} elseif ('total' == $settings['type'] && isset($settings['value'])) {
if (empty($settings['value'])) $settings['value'] = 0;
$settings['value'] = number_format((float)$settings['value'], 2);
* Construct field array for an unknown field type
protected static function constructUnknownField( $field): array
$unknown_field = NF_Fields_Unknown::create( $field );
'settings' => $unknown_field->get_settings(),
'id' => $unknown_field->get_id()
* Apply localize filters to field
* Property types are not declared because we cannot guarantee what is
* returned from apply_filters.
* @param string $field_type
protected static function applyLocalizeFilters($field, $field_type)
$wip = apply_filters('ninja_forms_localize_fields', $field);
$return = apply_filters('ninja_forms_localize_field_' . $field_type, $wip);
* Ensure that field array has proper construction after localize filters
* After any WP filter, we cannot assume that all properties are intact, so
* ensure that our structure is valid. Checks field type and calls method
* that ensures validity of that field typ.
* @param array $fieldBeforeFilters
protected static function ensureFieldArrayStructureValidity($field, array $fieldBeforeFilters): array
// filter altered field beyond repair, fallback to before
return $fieldBeforeFilters;
// initialize return value to incoming value
if ('recaptcha' === $field['settings']['type']) {
$return = self::ensureRecaptchaFieldStructureValidity($return);