Edit File by line

<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* Helper functions to work with forms and form data.

[2] Fix | Delete

[3] Fix | Delete

* @since 1.8.0

[4] Fix | Delete

[5] Fix | Delete

[6] Fix | Delete

/**

[7] Fix | Delete

* Helper function to trigger displaying a form.

[8] Fix | Delete

[9] Fix | Delete

* @since 1.0.2

[10] Fix | Delete

[11] Fix | Delete

* @param mixed $form_id Form ID.

[12] Fix | Delete

* @param bool $title Form title.

[13] Fix | Delete

* @param bool $desc Form description.

[14] Fix | Delete

[15] Fix | Delete

function wpforms_display( $form_id = false, $title = false, $desc = false ) {

[16] Fix | Delete

[17] Fix | Delete

$frontend = wpforms()->get( 'frontend' );

[18] Fix | Delete

[19] Fix | Delete

if ( empty( $frontend ) ) {

[20] Fix | Delete

return;

[21] Fix | Delete

}

[22] Fix | Delete

[23] Fix | Delete

$frontend->output( $form_id, $title, $desc );

[24] Fix | Delete

}

[25] Fix | Delete

[26] Fix | Delete

/**

[27] Fix | Delete

* Return URL to form preview page.

[28] Fix | Delete

[29] Fix | Delete

* @since 1.5.1

[30] Fix | Delete

[31] Fix | Delete

* @param int $form_id Form ID.

[32] Fix | Delete

* @param bool $new_window New window flag.

[33] Fix | Delete

[34] Fix | Delete

* @return string

[35] Fix | Delete

[36] Fix | Delete

function wpforms_get_form_preview_url( $form_id, $new_window = false ) {

[37] Fix | Delete

[38] Fix | Delete

$url = add_query_arg(

[39] Fix | Delete

[

[40] Fix | Delete

'wpforms_form_preview' => absint( $form_id ),

[41] Fix | Delete

[42] Fix | Delete

home_url()

[43] Fix | Delete

);

[44] Fix | Delete

[45] Fix | Delete

if ( $new_window ) {

[46] Fix | Delete

$url = add_query_arg(

[47] Fix | Delete

[

[48] Fix | Delete

'new_window' => 1,

[49] Fix | Delete

[50] Fix | Delete

$url

[51] Fix | Delete

);

[52] Fix | Delete

}

[53] Fix | Delete

[54] Fix | Delete

return $url;

[55] Fix | Delete

}

[56] Fix | Delete

[57] Fix | Delete

/**

[58] Fix | Delete

* Perform json_decode and unslash.

[59] Fix | Delete

[60] Fix | Delete

* IMPORTANT: This function decodes the result of wpforms_encode() properly only if

[61] Fix | Delete

* wp_insert_post() or wp_update_post() were used after the data is encoded.

[62] Fix | Delete

* Both wp_insert_post() and wp_update_post() remove excessive slashes added by wpforms_encode().

[63] Fix | Delete

[64] Fix | Delete

* Using wpforms_decode() on wpforms_encode() result directly

[65] Fix | Delete

* (without using wp_insert_post() or wp_update_post() first) always returns null or false.

[66] Fix | Delete

[67] Fix | Delete

* @since 1.0.0

[68] Fix | Delete

[69] Fix | Delete

* @param string $data Data to decode.

[70] Fix | Delete

[71] Fix | Delete

* @return array|false|null

[72] Fix | Delete

[73] Fix | Delete

function wpforms_decode( $data ) {

[74] Fix | Delete

[75] Fix | Delete

if ( ! $data || empty( $data ) ) {

[76] Fix | Delete

return false;

[77] Fix | Delete

}

[78] Fix | Delete

[79] Fix | Delete

return wp_unslash( json_decode( $data, true ) );

[80] Fix | Delete

}

[81] Fix | Delete

[82] Fix | Delete

/**

[83] Fix | Delete

* Perform json_encode and wp_slash.

[84] Fix | Delete

[85] Fix | Delete

* IMPORTANT: This function adds excessive slashes to prevent data damage

[86] Fix | Delete

* by wp_insert_post() or wp_update_post() that use wp_unslash() on all the incoming data.

[87] Fix | Delete

[88] Fix | Delete

* Decoding the result of this function by wpforms_decode() directly

[89] Fix | Delete

* (without using wp_insert_post() or wp_update_post() first) always returns null or false.

[90] Fix | Delete

[91] Fix | Delete

* @since 1.3.1.3

[92] Fix | Delete

[93] Fix | Delete

* @param mixed $data Data to encode.

[94] Fix | Delete

[95] Fix | Delete

* @return string|false

[96] Fix | Delete

[97] Fix | Delete

function wpforms_encode( $data = false ) {

[98] Fix | Delete

[99] Fix | Delete

if ( empty( $data ) ) {

[100] Fix | Delete

return false;

[101] Fix | Delete

}

[102] Fix | Delete

[103] Fix | Delete

return wp_slash( wp_json_encode( $data ) );

[104] Fix | Delete

}

[105] Fix | Delete

[106] Fix | Delete

/**

[107] Fix | Delete

* Decode json-encoded string if it is in json format.

[108] Fix | Delete

[109] Fix | Delete

* @since 1.7.5

[110] Fix | Delete

[111] Fix | Delete

* @param string $string A string.

[112] Fix | Delete

* @param bool $associative Decode to the associative array if true. Decode to object if false.

[113] Fix | Delete

[114] Fix | Delete

* @return array|string

[115] Fix | Delete

[116] Fix | Delete

function wpforms_json_decode( $string, $associative = false ) {

[117] Fix | Delete

[118] Fix | Delete

$string = html_entity_decode( $string );

[119] Fix | Delete

[120] Fix | Delete

if ( ! wpforms_is_json( $string ) ) {

[121] Fix | Delete

return $string;

[122] Fix | Delete

}

[123] Fix | Delete

[124] Fix | Delete

return json_decode( $string, $associative );

[125] Fix | Delete

}

[126] Fix | Delete

[127] Fix | Delete

/**

[128] Fix | Delete

* Get the value of a specific WPForms setting.

[129] Fix | Delete

[130] Fix | Delete

* @since 1.0.0

[131] Fix | Delete

[132] Fix | Delete

* @param string $key Setting name.

[133] Fix | Delete

* @param mixed $default Default value to return if the setting is not available.

[134] Fix | Delete

* @param string $option Option key, defaults to `wpforms_settings` in the `wp_options` table.

[135] Fix | Delete

[136] Fix | Delete

* @return mixed

[137] Fix | Delete

[138] Fix | Delete

function wpforms_setting( $key, $default = false, $option = 'wpforms_settings' ) {

[139] Fix | Delete

[140] Fix | Delete

$key = wpforms_sanitize_key( $key );

[141] Fix | Delete

$options = get_option( $option, false );

[142] Fix | Delete

$value = is_array( $options ) && ! empty( $options[ $key ] ) ? wp_unslash( $options[ $key ] ) : $default;

[143] Fix | Delete

[144] Fix | Delete

/**

[145] Fix | Delete

* Allows plugin setting to be modified.

[146] Fix | Delete

[147] Fix | Delete

* @since 1.7.8

[148] Fix | Delete

[149] Fix | Delete

* @param mixed $value Setting value.

[150] Fix | Delete

* @param string $key Setting key.

[151] Fix | Delete

* @param mixed $default Setting default value.

[152] Fix | Delete

* @param string $option Settings option name.

[153] Fix | Delete

[154] Fix | Delete

$value = apply_filters( 'wpforms_setting', $value, $key, $default, $option );

[155] Fix | Delete

[156] Fix | Delete

return $value;

[157] Fix | Delete

}

[158] Fix | Delete

[159] Fix | Delete

/**

[160] Fix | Delete

* Update plugin settings option and allow it to be filterable.

[161] Fix | Delete

[162] Fix | Delete

* The purpose of this function is to save settings when the "Save Settings" button is clicked.

[163] Fix | Delete

* If you are programmatically saving setting in the database in cases not triggered by user,

[164] Fix | Delete

* use update_option() instead.

[165] Fix | Delete

[166] Fix | Delete

* @since 1.6.6

[167] Fix | Delete

[168] Fix | Delete

* @param array $settings A plugin settings array that is saved into options table.

[169] Fix | Delete

[170] Fix | Delete

* @return bool

[171] Fix | Delete

[172] Fix | Delete

function wpforms_update_settings( $settings ) {

[173] Fix | Delete

[174] Fix | Delete

$old_settings = (array) get_option( 'wpforms_settings', [] );

[175] Fix | Delete

[176] Fix | Delete

/**

[177] Fix | Delete

* Allows plugin settings to be modified before persisting in the database.

[178] Fix | Delete

[179] Fix | Delete

* @since 1.6.6

[180] Fix | Delete

[181] Fix | Delete

* @param array $settings An array of plugin settings to modify.

[182] Fix | Delete

[183] Fix | Delete

$settings = (array) apply_filters( 'wpforms_update_settings', $settings );

[184] Fix | Delete

[185] Fix | Delete

$updated = update_option( 'wpforms_settings', $settings );

[186] Fix | Delete

[187] Fix | Delete

/**

[188] Fix | Delete

* Fires after the plugin settings were persisted in the database.

[189] Fix | Delete

[190] Fix | Delete

* The `$updated` parameter allows to check whether the update was actually successful.

[191] Fix | Delete

[192] Fix | Delete

* @since 1.6.1

[193] Fix | Delete

* @since 1.8.4 The `$old_settings` parameter was added.

[194] Fix | Delete

[195] Fix | Delete

* @param array $settings An array of plugin settings.

[196] Fix | Delete

* @param bool $updated Whether an option was updated or not.

[197] Fix | Delete

* @param array $old_settings An old array of plugin settings.

[198] Fix | Delete

[199] Fix | Delete

do_action( 'wpforms_settings_updated', $settings, $updated, $old_settings );

[200] Fix | Delete

[201] Fix | Delete

return $updated;

[202] Fix | Delete

}

[203] Fix | Delete

[204] Fix | Delete

/**

[205] Fix | Delete

* Check if form provided contains the specified field type.

[206] Fix | Delete

[207] Fix | Delete

* @since 1.0.5

[208] Fix | Delete

[209] Fix | Delete

* @param array|string $type Field type or types.

[210] Fix | Delete

* @param array|object $form Form data object.

[211] Fix | Delete

* @param bool $multiple Whether to check multiple field types.

[212] Fix | Delete

[213] Fix | Delete

* @return bool

[214] Fix | Delete

[215] Fix | Delete

function wpforms_has_field_type( $type, $form, $multiple = false ) {

[216] Fix | Delete

[217] Fix | Delete

$form_data = '';

[218] Fix | Delete

$field = false;

[219] Fix | Delete

$type = (array) $type;

[220] Fix | Delete

[221] Fix | Delete

if ( $multiple ) {

[222] Fix | Delete

foreach ( $form as $single_form ) {

[223] Fix | Delete

$field = wpforms_has_field_type( $type, $single_form );

[224] Fix | Delete

[225] Fix | Delete

if ( $field ) {

[226] Fix | Delete

break;

[227] Fix | Delete

}

[228] Fix | Delete

}

[229] Fix | Delete

[230] Fix | Delete

return $field;

[231] Fix | Delete

}

[232] Fix | Delete

[233] Fix | Delete

if ( is_object( $form ) && ! empty( $form->post_content ) ) {

[234] Fix | Delete

$form_data = wpforms_decode( $form->post_content );

[235] Fix | Delete

} elseif ( is_array( $form ) ) {

[236] Fix | Delete

$form_data = $form;

[237] Fix | Delete

}

[238] Fix | Delete

[239] Fix | Delete

if ( empty( $form_data['fields'] ) ) {

[240] Fix | Delete

return false;

[241] Fix | Delete

}

[242] Fix | Delete

[243] Fix | Delete

foreach ( $form_data['fields'] as $single_field ) {

[244] Fix | Delete

if ( ! empty( $single_field['type'] ) && in_array( $single_field['type'], $type, true ) ) {

[245] Fix | Delete

$field = true;

[246] Fix | Delete

[247] Fix | Delete

break;

[248] Fix | Delete

}

[249] Fix | Delete

}

[250] Fix | Delete

[251] Fix | Delete

return $field;

[252] Fix | Delete

}

[253] Fix | Delete

[254] Fix | Delete

/**

[255] Fix | Delete

* Check if form provided contains a field which a specific setting.

[256] Fix | Delete

[257] Fix | Delete

* @since 1.4.5

[258] Fix | Delete

[259] Fix | Delete

* @param string $setting Setting key.

[260] Fix | Delete

* @param object|array $form Form data.

[261] Fix | Delete

* @param bool $multiple Whether to check multiple settings.

[262] Fix | Delete

[263] Fix | Delete

* @return bool

[264] Fix | Delete

[265] Fix | Delete

function wpforms_has_field_setting( $setting, $form, $multiple = false ) {

[266] Fix | Delete

[267] Fix | Delete

$form_data = '';

[268] Fix | Delete

$field = false;

[269] Fix | Delete

[270] Fix | Delete

if ( $multiple ) {

[271] Fix | Delete

foreach ( $form as $single_form ) {

[272] Fix | Delete

$field = wpforms_has_field_setting( $setting, $single_form );

[273] Fix | Delete

[274] Fix | Delete

if ( $field ) {

[275] Fix | Delete

break;

[276] Fix | Delete

}

[277] Fix | Delete

}

[278] Fix | Delete

[279] Fix | Delete

return $field;

[280] Fix | Delete

}

[281] Fix | Delete

[282] Fix | Delete

if ( is_object( $form ) && ! empty( $form->post_content ) ) {

[283] Fix | Delete

$form_data = wpforms_decode( $form->post_content );

[284] Fix | Delete

} elseif ( is_array( $form ) ) {

[285] Fix | Delete

$form_data = $form;

[286] Fix | Delete

}

[287] Fix | Delete

[288] Fix | Delete

if ( empty( $form_data['fields'] ) ) {

[289] Fix | Delete

return false;

[290] Fix | Delete

}

[291] Fix | Delete

[292] Fix | Delete

foreach ( $form_data['fields'] as $single_field ) {

[293] Fix | Delete

[294] Fix | Delete

if ( ! empty( $single_field[ $setting ] ) ) {

[295] Fix | Delete

$field = true;

[296] Fix | Delete

[297] Fix | Delete

break;

[298] Fix | Delete

}

[299] Fix | Delete

}

[300] Fix | Delete

[301] Fix | Delete

return $field;

[302] Fix | Delete

}

[303] Fix | Delete

[304] Fix | Delete

/**

[305] Fix | Delete

* Retrieve actual fields from a form.

[306] Fix | Delete

[307] Fix | Delete

* Non-posting elements such as section divider, page break, and HTML are

[308] Fix | Delete

* automatically excluded. Optionally, a whitelist can be provided.

[309] Fix | Delete

[310] Fix | Delete

* @since 1.0.0

[311] Fix | Delete

[312] Fix | Delete

* @param mixed $form Form data.

[313] Fix | Delete

* @param array $allowlist A list of allowed fields.

[314] Fix | Delete

[315] Fix | Delete

* @return mixed boolean false or array

[316] Fix | Delete

[317] Fix | Delete

function wpforms_get_form_fields( $form = false, $allowlist = [] ) {

[318] Fix | Delete

[319] Fix | Delete

// Accept form (post) object or form ID.

[320] Fix | Delete

if ( is_object( $form ) ) {

[321] Fix | Delete

$form = wpforms_decode( $form->post_content );

[322] Fix | Delete

} elseif ( is_numeric( $form ) ) {

[323] Fix | Delete

$form = wpforms()->get( 'form' )->get(

[324] Fix | Delete

absint( $form ),

[325] Fix | Delete

[

[326] Fix | Delete

'content_only' => true,

[327] Fix | Delete

]

[328] Fix | Delete

);

[329] Fix | Delete

}

[330] Fix | Delete

[331] Fix | Delete

$allowed_form_fields = [

[332] Fix | Delete

'address',

[333] Fix | Delete

'checkbox',

[334] Fix | Delete

'date-time',

[335] Fix | Delete

'email',

[336] Fix | Delete

'file-upload',

[337] Fix | Delete

'gdpr-checkbox',

[338] Fix | Delete

'hidden',

[339] Fix | Delete

'likert_scale',

[340] Fix | Delete

'name',

[341] Fix | Delete

'net_promoter_score',

[342] Fix | Delete

'number',

[343] Fix | Delete

'number-slider',

[344] Fix | Delete

'payment-checkbox',

[345] Fix | Delete

'payment-multiple',

[346] Fix | Delete

'payment-select',

[347] Fix | Delete

'payment-single',

[348] Fix | Delete

'payment-total',

[349] Fix | Delete

'phone',

[350] Fix | Delete

'radio',

[351] Fix | Delete

'rating',

[352] Fix | Delete

'richtext',

[353] Fix | Delete

'select',

[354] Fix | Delete

'signature',

[355] Fix | Delete

'text',

[356] Fix | Delete

'textarea',

[357] Fix | Delete

'url',

[358] Fix | Delete

];

[359] Fix | Delete

[360] Fix | Delete

/**

[361] Fix | Delete

* Filter the list of allowed form fields.

[362] Fix | Delete

[363] Fix | Delete

* @since 1.0.0

[364] Fix | Delete

[365] Fix | Delete

* @param array $allowed_form_fields List of allowed form fields.

[366] Fix | Delete

[367] Fix | Delete

$allowed_form_fields = apply_filters( 'wpforms_get_form_fields_allowed', $allowed_form_fields );

[368] Fix | Delete

[369] Fix | Delete

if ( ! is_array( $form ) || empty( $form['fields'] ) ) {

[370] Fix | Delete

return false;

[371] Fix | Delete

}

[372] Fix | Delete

[373] Fix | Delete

$allowlist = ! empty( $allowlist ) ? $allowlist : $allowed_form_fields;

[374] Fix | Delete

[375] Fix | Delete

$form_fields = $form['fields'];

[376] Fix | Delete

[377] Fix | Delete

foreach ( $form_fields as $id => $form_field ) {

[378] Fix | Delete

// Remove repeater field and its children.

[379] Fix | Delete

if ( $form_field['type'] === 'repeater' ) {

[380] Fix | Delete

foreach ( (array) $form_field['columns'] as $column ) {

[381] Fix | Delete

$column_fields = $column['fields'] ?? [];

[382] Fix | Delete

[383] Fix | Delete

foreach ( $column_fields as $field_id ) {

[384] Fix | Delete

unset( $form_fields[ $field_id ] );

[385] Fix | Delete

}

[386] Fix | Delete

}

[387] Fix | Delete

}

[388] Fix | Delete

[389] Fix | Delete

if ( ! in_array( $form_field['type'], $allowlist, true ) ) {

[390] Fix | Delete

unset( $form_fields[ $id ] );

[391] Fix | Delete

}

[392] Fix | Delete

}

[393] Fix | Delete

[394] Fix | Delete

return $form_fields;

[395] Fix | Delete

}

[396] Fix | Delete

[397] Fix | Delete

/**

[398] Fix | Delete

* Conditional logic form fields supported.

[399] Fix | Delete

[400] Fix | Delete

* @since 1.5.2

[401] Fix | Delete

[402] Fix | Delete

* @return array

[403] Fix | Delete

[404] Fix | Delete

function wpforms_get_conditional_logic_form_fields_supported() {

[405] Fix | Delete

[406] Fix | Delete

$fields_supported = [

[407] Fix | Delete

'checkbox',

[408] Fix | Delete

'email',

[409] Fix | Delete

'hidden',

[410] Fix | Delete

'net_promoter_score',

[411] Fix | Delete

'number',

[412] Fix | Delete

'number-slider',

[413] Fix | Delete

'payment-checkbox',

[414] Fix | Delete

'payment-multiple',

[415] Fix | Delete

'payment-select',

[416] Fix | Delete

'radio',

[417] Fix | Delete

'rating',

[418] Fix | Delete

'richtext',

[419] Fix | Delete

'select',

[420] Fix | Delete

'text',

[421] Fix | Delete

'textarea',

[422] Fix | Delete

'url',

[423] Fix | Delete

];

[424] Fix | Delete

[425] Fix | Delete

return apply_filters( 'wpforms_get_conditional_logic_form_fields_supported', $fields_supported );

[426] Fix | Delete

}

[427] Fix | Delete

[428] Fix | Delete

/**

[429] Fix | Delete

* Get meta key value for a form field.

[430] Fix | Delete

[431] Fix | Delete

* @since 1.3.1

[432] Fix | Delete

* @since 1.5.0 More strict parameters. Always return an array.

[433] Fix | Delete

[434] Fix | Delete

* @param string $key Meta key.

[435] Fix | Delete

* @param string $value Meta value to check against.

[436] Fix | Delete

* @param array $form_data Form data array.

[437] Fix | Delete

[438] Fix | Delete

* @return array Empty array, when no data is found.

[439] Fix | Delete

[440] Fix | Delete

function wpforms_get_form_fields_by_meta( $key, $value, $form_data ) {

[441] Fix | Delete

[442] Fix | Delete

$found = [];

[443] Fix | Delete

[444] Fix | Delete

if ( empty( $key ) || empty( $value ) || empty( $form_data['fields'] ) ) {

[445] Fix | Delete

return $found;

[446] Fix | Delete

}

[447] Fix | Delete

[448] Fix | Delete

foreach ( $form_data['fields'] as $id => $field ) {

[449] Fix | Delete

[450] Fix | Delete

if ( ! empty( $field['meta'][ $key ] ) && $value === $field['meta'][ $key ] ) {

[451] Fix | Delete

$found[ $id ] = $field;

[452] Fix | Delete

}

[453] Fix | Delete

}

[454] Fix | Delete

[455] Fix | Delete

return $found;

[456] Fix | Delete

}

[457] Fix | Delete

[458] Fix | Delete

/**

[459] Fix | Delete

* Retrieve the full config for CAPTCHA.

[460] Fix | Delete

[461] Fix | Delete

* @since 1.6.4

[462] Fix | Delete

[463] Fix | Delete

* @return array

[464] Fix | Delete

[465] Fix | Delete

function wpforms_get_captcha_settings() {

[466] Fix | Delete

[467] Fix | Delete

$allowed_captcha_list = [ 'hcaptcha', 'recaptcha', 'turnstile' ];

[468] Fix | Delete

$captcha_provider = wpforms_setting( 'captcha-provider', 'recaptcha' );

[469] Fix | Delete

[470] Fix | Delete

if ( ! in_array( $captcha_provider, $allowed_captcha_list, true ) ) {

[471] Fix | Delete

return [

[472] Fix | Delete

'provider' => 'none',

[473] Fix | Delete

];

[474] Fix | Delete

}

[475] Fix | Delete

[476] Fix | Delete

return [

[477] Fix | Delete

'provider' => $captcha_provider,

[478] Fix | Delete

'site_key' => sanitize_text_field( wpforms_setting( "{$captcha_provider}-site-key", '' ) ),

[479] Fix | Delete

'secret_key' => sanitize_text_field( wpforms_setting( "{$captcha_provider}-secret-key", '' ) ),

[480] Fix | Delete

'recaptcha_type' => wpforms_setting( 'recaptcha-type', 'v2' ),

[481] Fix | Delete

'theme' => sanitize_text_field( wpforms_setting( "{$captcha_provider}-theme", '' ) ),

[482] Fix | Delete

];

[483] Fix | Delete

}

[484] Fix | Delete

[485] Fix | Delete

/**

[486] Fix | Delete

* Process smart tags.

[487] Fix | Delete

[488] Fix | Delete

* @since 1.7.1

[489] Fix | Delete

* @since 1.8.7 Added `$context` parameter.

[490] Fix | Delete

[491] Fix | Delete

* @param string $content Content.

[492] Fix | Delete

* @param array $form_data Form data.

[493] Fix | Delete

* @param array $fields List of fields.

[494] Fix | Delete

* @param string $entry_id Entry ID.

[495] Fix | Delete

* @param string $context Context.

[496] Fix | Delete

[497] Fix | Delete

* @return string

[498] Fix | Delete

[499] Fix | Delete