Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

namespace WPForms\Admin\Builder\Ajax;

[2] Fix | Delete

[3] Fix | Delete

/**

[4] Fix | Delete

* Form Builder Panel Loader AJAX actions.

[5] Fix | Delete

[6] Fix | Delete

* @since 1.8.6

[7] Fix | Delete

[8] Fix | Delete

class PanelLoader {

[9] Fix | Delete

[10] Fix | Delete

/**

[11] Fix | Delete

* Determine if the class is allowed to load.

[12] Fix | Delete

[13] Fix | Delete

* @since 1.8.6

[14] Fix | Delete

[15] Fix | Delete

* @return bool

[16] Fix | Delete

[17] Fix | Delete

private function allow_load(): bool {

[18] Fix | Delete

[19] Fix | Delete

// phpcs:ignore WordPress.Security.NonceVerification.Recommended

[20] Fix | Delete

$action = isset( $_REQUEST['action'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['action'] ) ) : '';

[21] Fix | Delete

[22] Fix | Delete

// Load only in the case of AJAX calls form the Form Builder.

[23] Fix | Delete

return wpforms_is_admin_ajax() && strpos( $action, 'wpforms_builder_' ) === 0;

[24] Fix | Delete

}

[25] Fix | Delete

[26] Fix | Delete

/**

[27] Fix | Delete

* Initialize class.

[28] Fix | Delete

[29] Fix | Delete

* @since 1.8.6

[30] Fix | Delete

[31] Fix | Delete

public function init() {

[32] Fix | Delete

[33] Fix | Delete

if ( ! $this->allow_load() ) {

[34] Fix | Delete

return;

[35] Fix | Delete

}

[36] Fix | Delete

[37] Fix | Delete

$this->hooks();

[38] Fix | Delete

}

[39] Fix | Delete

[40] Fix | Delete

/**

[41] Fix | Delete

* Hooks.

[42] Fix | Delete

[43] Fix | Delete

* @since 1.8.6

[44] Fix | Delete

[45] Fix | Delete

private function hooks() {

[46] Fix | Delete

[47] Fix | Delete

add_action( 'wp_ajax_wpforms_builder_load_panel', [ $this, 'load_panel_content' ] );

[48] Fix | Delete

}

[49] Fix | Delete

[50] Fix | Delete

/**

[51] Fix | Delete

* Save tags.

[52] Fix | Delete

[53] Fix | Delete

* @since 1.8.6

[54] Fix | Delete

[55] Fix | Delete

public function load_panel_content() {

[56] Fix | Delete

[57] Fix | Delete

$data = $this->get_prepared_data( 'load_panel' );

[58] Fix | Delete

$panel_class = '\WPForms_Builder_Panel_' . ucfirst( $data['panel'] ?? '' );

[59] Fix | Delete

[60] Fix | Delete

if ( ! class_exists( $panel_class ) ) {

[61] Fix | Delete

// Load panel base class.

[62] Fix | Delete

require_once WPFORMS_PLUGIN_DIR . 'includes/admin/builder/panels/class-base.php';

[63] Fix | Delete

[64] Fix | Delete

$file = WPFORMS_PLUGIN_DIR . "includes/admin/builder/panels/class-{$data['panel']}.php";

[65] Fix | Delete

$file_pro = WPFORMS_PLUGIN_DIR . "pro/includes/admin/builder/panels/class-{$data['panel']}.php";

[66] Fix | Delete

[67] Fix | Delete

if ( wpforms()->is_pro() && file_exists( $file_pro ) ) {

[68] Fix | Delete

require_once $file_pro;

[69] Fix | Delete

} elseif ( file_exists( $file ) ) {

[70] Fix | Delete

require_once $file;

[71] Fix | Delete

}

[72] Fix | Delete

}

[73] Fix | Delete

[74] Fix | Delete

$panel_obj = $panel_class::instance();

[75] Fix | Delete

[76] Fix | Delete

if ( ! method_exists( $panel_obj, 'panel_content' ) ) {

[77] Fix | Delete

wp_send_json_error( esc_html__( 'Invalid panel.', 'wpforms-lite' ) );

[78] Fix | Delete

}

[79] Fix | Delete

[80] Fix | Delete

ob_start();

[81] Fix | Delete

$panel_obj->panel_output( [], $data['panel'] );

[82] Fix | Delete

$panel_content = ob_get_clean();

[83] Fix | Delete

[84] Fix | Delete

wp_send_json_success( $panel_content );

[85] Fix | Delete

}

[86] Fix | Delete

[87] Fix | Delete

/**

[88] Fix | Delete

* Get prepared data before perform ajax action.

[89] Fix | Delete

[90] Fix | Delete

* @since 1.8.6

[91] Fix | Delete

[92] Fix | Delete

* @param string $action Action: `save` OR `delete`.

[93] Fix | Delete

[94] Fix | Delete

* @return array

[95] Fix | Delete

* @noinspection PhpSameParameterValueInspection

[96] Fix | Delete

[97] Fix | Delete

private function get_prepared_data( string $action ): array {

[98] Fix | Delete

[99] Fix | Delete

// Run a security check.

[100] Fix | Delete

if ( ! check_ajax_referer( 'wpforms-builder', 'nonce', false ) ) {

[101] Fix | Delete

wp_send_json_error( esc_html__( 'Most likely, your session expired. Please reload the page.', 'wpforms-lite' ) );

[102] Fix | Delete

}

[103] Fix | Delete

[104] Fix | Delete

// Check for permissions.

[105] Fix | Delete

if ( ! wpforms_current_user_can( 'edit_forms' ) ) {

[106] Fix | Delete

wp_send_json_error( esc_html__( 'You are not allowed to perform this action.', 'wpforms-lite' ) );

[107] Fix | Delete

}

[108] Fix | Delete

[109] Fix | Delete

$data = [];

[110] Fix | Delete

[111] Fix | Delete

if ( $action === 'load_panel' ) {

[112] Fix | Delete

// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

[113] Fix | Delete

$data['panel'] = ! empty( $_POST['panel'] ) ? sanitize_key( $_POST['panel'] ) : '';

[114] Fix | Delete

}

[115] Fix | Delete

[116] Fix | Delete

return $data;

[117] Fix | Delete

}

[118] Fix | Delete

}

[119] Fix | Delete

[120] Fix | Delete