esc_attr( $field_name ),

[500] Fix | Delete

$checked,

[501] Fix | Delete

$data_attr,

[502] Fix | Delete

$label_right,

[503] Fix | Delete

wpforms_sanitize_classes( $input_class ),

[504] Fix | Delete

wpforms_sanitize_classes( $control_class ),

[505] Fix | Delete

$title,

[506] Fix | Delete

! empty( $args['disabled'] ) ? 'disabled' : ''

[507] Fix | Delete

);

[508] Fix | Delete

}

[509] Fix | Delete

[510] Fix | Delete

/**

[511] Fix | Delete

* Get settings block state, whether it's opened or closed.

[512] Fix | Delete

*

[513] Fix | Delete

* @since 1.4.8

[514] Fix | Delete

*

[515] Fix | Delete

* @param int $form_id Form ID.

[516] Fix | Delete

* @param int $block_id Block ID.

[517] Fix | Delete

* @param string $block_type Block type.

[518] Fix | Delete

*

[519] Fix | Delete

* @return string

[520] Fix | Delete

*/

[521] Fix | Delete

function wpforms_builder_settings_block_get_state( $form_id, $block_id, $block_type ): string {

[522] Fix | Delete

[523] Fix | Delete

$form_id = absint( $form_id );

[524] Fix | Delete

$block_id = absint( $block_id );

[525] Fix | Delete

$block_type = sanitize_key( $block_type );

[526] Fix | Delete

$state = 'opened';

[527] Fix | Delete

[528] Fix | Delete

$all_states = get_user_meta( get_current_user_id(), 'wpforms_builder_settings_collapsable_block_states', true );

[529] Fix | Delete

[530] Fix | Delete

if ( empty( $all_states ) ) {

[531] Fix | Delete

return $state;

[532] Fix | Delete

}

[533] Fix | Delete

[534] Fix | Delete

if (

[535] Fix | Delete

is_array( $all_states ) &&

[536] Fix | Delete

! empty( $all_states[ $form_id ][ $block_type ][ $block_id ] ) &&

[537] Fix | Delete

$all_states[ $form_id ][ $block_type ][ $block_id ] === 'closed'

[538] Fix | Delete

) {

[539] Fix | Delete

$state = 'closed';

[540] Fix | Delete

}

[541] Fix | Delete

[542] Fix | Delete

// Backward compatibility for notifications.

[543] Fix | Delete

if ( $block_type === 'notification' && $state !== 'closed' ) {

[544] Fix | Delete

$notification_states = get_user_meta( get_current_user_id(), 'wpforms_builder_notification_states', true );

[545] Fix | Delete

}

[546] Fix | Delete

[547] Fix | Delete

if (

[548] Fix | Delete

! empty( $notification_states[ $form_id ][ $block_id ] ) &&

[549] Fix | Delete

$notification_states[ $form_id ][ $block_id ] === 'closed'

[550] Fix | Delete

) {

[551] Fix | Delete

$state = 'closed';

[552] Fix | Delete

}

[553] Fix | Delete

[554] Fix | Delete

if ( $block_type === 'notification' ) {

[555] Fix | Delete

// Backward compatibility for notifications.

[556] Fix | Delete

[557] Fix | Delete

/**

[558] Fix | Delete

* Filters notification get state.

[559] Fix | Delete

*

[560] Fix | Delete

* @since 1.4.8

[561] Fix | Delete

*

[562] Fix | Delete

* @param string $state Notification get state.

[563] Fix | Delete

* @param int $form_id Form ID.

[564] Fix | Delete

* @param int $block_id Block ID.

[565] Fix | Delete

*

[566] Fix | Delete

* @return string

[567] Fix | Delete

*/

[568] Fix | Delete

return (string) apply_filters( 'wpforms_builder_notification_get_state', $state, $form_id, $block_id ); // phpcs:ignore WPForms.Formatting.EmptyLineBeforeReturn.RemoveEmptyLineBeforeReturnStatement

[569] Fix | Delete

}

[570] Fix | Delete

[571] Fix | Delete

/**

[572] Fix | Delete

* Filters settings block state.

[573] Fix | Delete

*

[574] Fix | Delete

* @since 1.4.8

[575] Fix | Delete

*

[576] Fix | Delete

* @param string $state Settings block state.

[577] Fix | Delete

* @param int $form_id Form ID.

[578] Fix | Delete

* @param int $block_id Block ID.

[579] Fix | Delete

* @param string $block_type Block type.

[580] Fix | Delete

*

[581] Fix | Delete

* @return string

[582] Fix | Delete

*/

[583] Fix | Delete

return apply_filters( 'wpforms_builder_settings_block_get_state', $state, $form_id, $block_id, $block_type );

[584] Fix | Delete

}

[585] Fix | Delete

[586] Fix | Delete

/**

[587] Fix | Delete

* Get the list of allowed tags, used in a pair with wp_kses() function.

[588] Fix | Delete

* This allows getting rid of all potentially harmful HTML tags and attributes.

[589] Fix | Delete

*

[590] Fix | Delete

* @since 1.5.9

[591] Fix | Delete

*

[592] Fix | Delete

* @return array Allowed Tags.

[593] Fix | Delete

*/

[594] Fix | Delete

function wpforms_builder_preview_get_allowed_tags(): array {

[595] Fix | Delete

[596] Fix | Delete

static $allowed_tags;

[597] Fix | Delete

[598] Fix | Delete

if ( ! empty( $allowed_tags ) ) {

[599] Fix | Delete

return $allowed_tags;

[600] Fix | Delete

}

[601] Fix | Delete

[602] Fix | Delete

$atts = [ 'align', 'class', 'type', 'id', 'for', 'style', 'src', 'rel', 'href', 'target', 'value', 'width', 'height' ];

[603] Fix | Delete

$tags = [ 'label', 'iframe', 'style', 'button', 'strong', 'small', 'table', 'span', 'abbr', 'code', 'pre', 'div', 'img', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'ol', 'ul', 'li', 'em', 'hr', 'br', 'th', 'tr', 'td', 'p', 'a', 'b', 'i' ];

[604] Fix | Delete

[605] Fix | Delete

$allowed_atts = array_fill_keys( $atts, [] );

[606] Fix | Delete

$allowed_tags = array_fill_keys( $tags, $allowed_atts );

[607] Fix | Delete

[608] Fix | Delete

return $allowed_tags;

[609] Fix | Delete

}

[610] Fix | Delete

[611] Fix | Delete

/**

[612] Fix | Delete

* Output builder panel fields group wrapper.

[613] Fix | Delete

*

[614] Fix | Delete

* @since 1.6.6

[615] Fix | Delete

*

[616] Fix | Delete

* @param string $inner Inner HTML to wrap.

[617] Fix | Delete

* @param array $args Array of arguments.

[618] Fix | Delete

* @param bool $do_echo Flag to display.

[619] Fix | Delete

*

[620] Fix | Delete

* @return string|null

[621] Fix | Delete

* @noinspection HtmlUnknownAttribute

[622] Fix | Delete

*/

[623] Fix | Delete

function wpforms_panel_fields_group( $inner, $args = [], $do_echo = true ) { // phpcs:ignore Generic.Metrics.CyclomaticComplexity.MaxExceeded

[624] Fix | Delete

[625] Fix | Delete

$group = ! empty( $args['group'] ) ? $args['group'] : '';

[626] Fix | Delete

$unfoldable = ! empty( $args['unfoldable'] );

[627] Fix | Delete

$default = ( ! empty( $args['default'] ) && $args['default'] === 'opened' ) ? ' opened' : '';

[628] Fix | Delete

$opened = ! empty( $_COOKIE[ 'wpforms_fields_group_' . $group ] ) && $_COOKIE[ 'wpforms_fields_group_' . $group ] === 'true' ? ' opened' : $default;

[629] Fix | Delete

$class = ! empty( $args['class'] ) ? wpforms_sanitize_classes( $args['class'] ) : '';

[630] Fix | Delete

[631] Fix | Delete

$output = sprintf(

[632] Fix | Delete

'<div class="wpforms-panel-fields-group %1$s%2$s" %3$s>',

[633] Fix | Delete

$class,

[634] Fix | Delete

$unfoldable ? ' unfoldable' . $opened : '',

[635] Fix | Delete

$unfoldable ? ' data-group="' . $group . '"' : ''

[636] Fix | Delete

);

[637] Fix | Delete

[638] Fix | Delete

if ( ! empty( $args['borders'] ) && in_array( 'top', $args['borders'], true ) ) {

[639] Fix | Delete

$output .= '<div class="wpforms-panel-fields-group-border-top"></div>';

[640] Fix | Delete

}

[641] Fix | Delete

[642] Fix | Delete

if ( ! empty( $args['title'] ) ) {

[643] Fix | Delete

$chevron = $unfoldable ? '<i class="fa fa-chevron-circle-right"></i>' : '';

[644] Fix | Delete

$output .= '<div class="wpforms-panel-fields-group-title">' . esc_html( $args['title'] ) . $chevron . '</div>';

[645] Fix | Delete

}

[646] Fix | Delete

[647] Fix | Delete

if ( ! empty( $args['description'] ) ) {

[648] Fix | Delete

$output .= '<div class="wpforms-panel-fields-group-description">' . wp_kses_post( $args['description'] ) . '</div>';

[649] Fix | Delete

}

[650] Fix | Delete

[651] Fix | Delete

$output .= sprintf(

[652] Fix | Delete

'<div class="wpforms-panel-fields-group-inner" %s>%s</div>',

[653] Fix | Delete

empty( $opened ) && $unfoldable ? ' style="display: none;"' : '',

[654] Fix | Delete

$inner

[655] Fix | Delete

);

[656] Fix | Delete

[657] Fix | Delete

if ( ! empty( $args['borders'] ) && in_array( 'bottom', $args['borders'], true ) ) {

[658] Fix | Delete

$output .= '<div class="wpforms-panel-fields-group-border-bottom"></div>';

[659] Fix | Delete

}

[660] Fix | Delete

[661] Fix | Delete

$output .= '</div>';

[662] Fix | Delete

[663] Fix | Delete

if ( ! $do_echo ) {

[664] Fix | Delete

return $output;

[665] Fix | Delete

}

[666] Fix | Delete

[667] Fix | Delete

echo $output; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped

[668] Fix | Delete

[669] Fix | Delete

return null;

[670] Fix | Delete

}

[671] Fix | Delete

[672] Fix | Delete

/**

[673] Fix | Delete

* Get the pages for the "Show Page" dropdown selection in Confirmations Settings in Builder.

[674] Fix | Delete

*

[675] Fix | Delete

* @since 1.7.9

[676] Fix | Delete

*

[677] Fix | Delete

* @param array $form_data Form data.

[678] Fix | Delete

* @param int $confirmation_id Confirmation ID.

[679] Fix | Delete

*

[680] Fix | Delete

* @return array

[681] Fix | Delete

*/

[682] Fix | Delete

function wpforms_builder_form_settings_confirmation_get_pages( $form_data, $confirmation_id ): array {

[683] Fix | Delete

[684] Fix | Delete

$pre_selected_page_id = empty( $form_data['settings']['confirmations'][ $confirmation_id ]['page'] ) ? 0 : absint( $form_data['settings']['confirmations'][ $confirmation_id ]['page'] );

[685] Fix | Delete

$pages = wp_list_pluck( wpforms_search_posts(), 'post_title', 'ID' );

[686] Fix | Delete

[687] Fix | Delete

if ( empty( $pre_selected_page_id ) || isset( $pages[ $pre_selected_page_id ] ) ) {

[688] Fix | Delete

return $pages;

[689] Fix | Delete

}

[690] Fix | Delete

[691] Fix | Delete

// If the pre-selected page isn't in `$pages`, we manually fetch it include it in `$pages`.

[692] Fix | Delete

$pre_selected_page = get_post( $pre_selected_page_id );

[693] Fix | Delete

[694] Fix | Delete

if ( empty( $pre_selected_page ) ) {

[695] Fix | Delete

return $pages;

[696] Fix | Delete

}

[697] Fix | Delete

[698] Fix | Delete

$pages[ $pre_selected_page->ID ] = wpforms_get_post_title( $pre_selected_page );

[699] Fix | Delete

[700] Fix | Delete

return $pages;

[701] Fix | Delete

}

[702] Fix | Delete

[703] Fix | Delete