<?php

[0] Fix | Delete

[1] Fix | Delete

namespace WPForms\Frontend;

[2] Fix | Delete

[3] Fix | Delete

/**

[4] Fix | Delete

* AMP class.

[5] Fix | Delete

*

[6] Fix | Delete

* @since 1.8.1

[7] Fix | Delete

*/

[8] Fix | Delete

class Amp {

[9] Fix | Delete

[10] Fix | Delete

/**

[11] Fix | Delete

* Whether the current page is in AMP mode or not.

[12] Fix | Delete

*

[13] Fix | Delete

* @since 1.8.1

[14] Fix | Delete

*

[15] Fix | Delete

* @var bool

[16] Fix | Delete

*/

[17] Fix | Delete

private $is_amp_mode;

[18] Fix | Delete

[19] Fix | Delete

/**

[20] Fix | Delete

* Constructor.

[21] Fix | Delete

*

[22] Fix | Delete

* @since 1.8.1

[23] Fix | Delete

*/

[24] Fix | Delete

public function __construct() {

[25] Fix | Delete

[26] Fix | Delete

$this->hooks();

[27] Fix | Delete

}

[28] Fix | Delete

[29] Fix | Delete

/**

[30] Fix | Delete

* Register hooks.

[31] Fix | Delete

*

[32] Fix | Delete

* @since 1.8.1

[33] Fix | Delete

*/

[34] Fix | Delete

private function hooks() {

[35] Fix | Delete

[36] Fix | Delete

add_filter( 'amp_skip_post', [ $this, 'skip_post' ] );

[37] Fix | Delete

add_filter( 'wpforms_frontend_form_atts', [ $this, 'form_atts' ], -PHP_INT_MAX, 2 );

[38] Fix | Delete

add_action( 'wpforms_frontend_output', [ $this, 'output_state' ], -PHP_INT_MAX, 5 );

[39] Fix | Delete

}

[40] Fix | Delete

[41] Fix | Delete

/**

[42] Fix | Delete

* Check whether the current page is in AMP mode or not.

[43] Fix | Delete

*

[44] Fix | Delete

* @since 1.8.1

[45] Fix | Delete

*

[46] Fix | Delete

* @return bool True if the current page is in AMP mode.

[47] Fix | Delete

*/

[48] Fix | Delete

public function is_amp() {

[49] Fix | Delete

[50] Fix | Delete

if ( is_null( $this->is_amp_mode ) ) {

[51] Fix | Delete

$this->is_amp_mode = wpforms_is_amp();

[52] Fix | Delete

}

[53] Fix | Delete

[54] Fix | Delete

return $this->is_amp_mode;

[55] Fix | Delete

}

[56] Fix | Delete

[57] Fix | Delete

/**

[58] Fix | Delete

* Stop AMP output.

[59] Fix | Delete

*

[60] Fix | Delete

* @since 1.8.1

[61] Fix | Delete

*

[62] Fix | Delete

* @param array $form_data Form data and settings.

[63] Fix | Delete

*

[64] Fix | Delete

* @return bool True if we need to stop the output.

[65] Fix | Delete

*/

[66] Fix | Delete

public function stop_output( $form_data ) {

[67] Fix | Delete

[68] Fix | Delete

// We need to stop output processing in case we are on AMP page.

[69] Fix | Delete

// phpcs:disable WPForms.PHP.ValidateHooks.InvalidHookName

[70] Fix | Delete

if (

[71] Fix | Delete

wpforms_is_amp( false ) &&

[72] Fix | Delete

(

[73] Fix | Delete

! current_theme_supports( 'amp' ) ||

[74] Fix | Delete

/**

[75] Fix | Delete

* Filters the pro status of the plugin.

[76] Fix | Delete

*

[77] Fix | Delete

* @since 1.5.4.2

[78] Fix | Delete

*

[79] Fix | Delete

* @param bool $pro Pro status.

[80] Fix | Delete

*/

[81] Fix | Delete

apply_filters( 'wpforms_amp_pro', wpforms()->is_pro() ) ||

[82] Fix | Delete

! is_ssl() ||

[83] Fix | Delete

! defined( 'AMP__VERSION' ) ||

[84] Fix | Delete

version_compare( AMP__VERSION, '1.2', '<' )

[85] Fix | Delete

)

[86] Fix | Delete

) {

[87] Fix | Delete

$form_id = ! empty( $form_data['id'] ) ? (int) $form_data['id'] : 0;

[88] Fix | Delete

$full_page_url = home_url( add_query_arg( 'nonamp', '1' ) . '#wpforms-' . $form_id );

[89] Fix | Delete

[90] Fix | Delete

/**

[91] Fix | Delete

* Allow modifying the text or url for the full page on the AMP pages.

[92] Fix | Delete

*

[93] Fix | Delete

* @since 1.4.1.1

[94] Fix | Delete

* @since 1.7.1 Added $form_id, $full_page_url, and $form_data arguments.

[95] Fix | Delete

*

[96] Fix | Delete

* @param string $text Text.

[97] Fix | Delete

* @param int $form_id Form id.

[98] Fix | Delete

* @param string $full_page_url Full page url.

[99] Fix | Delete

* @param array $form_data Form data and settings.

[100] Fix | Delete

*

[101] Fix | Delete

* @return string

[102] Fix | Delete

*/

[103] Fix | Delete

$text = (string) apply_filters(

[104] Fix | Delete

'wpforms_frontend_shortcode_amp_text',

[105] Fix | Delete

sprintf( /* translators: %s - URL to a non-amp version of a page with the form. */

[106] Fix | Delete

__( '<a href="%s">Go to the full page</a> to view and submit the form.', 'wpforms-lite' ),

[107] Fix | Delete

esc_url( $full_page_url )

[108] Fix | Delete

),

[109] Fix | Delete

$form_id,

[110] Fix | Delete

$full_page_url,

[111] Fix | Delete

$form_data

[112] Fix | Delete

);

[113] Fix | Delete

[114] Fix | Delete

printf(

[115] Fix | Delete

'<p class="wpforms-shortcode-amp-text">%s</p>',

[116] Fix | Delete

wp_kses_post( $text )

[117] Fix | Delete

);

[118] Fix | Delete

[119] Fix | Delete

return true;

[120] Fix | Delete

}

[121] Fix | Delete

// phpcs:enable WPForms.PHP.ValidateHooks.InvalidHookName

[122] Fix | Delete

[123] Fix | Delete

return false;

[124] Fix | Delete

}

[125] Fix | Delete

[126] Fix | Delete

/**

[127] Fix | Delete

* Disable AMP if query param is detected.

[128] Fix | Delete

*

[129] Fix | Delete

* This allows the full form to be accessible for Pro users or sites

[130] Fix | Delete

* that do not have SSL.

[131] Fix | Delete

*

[132] Fix | Delete

* @since 1.8.1

[133] Fix | Delete

*

[134] Fix | Delete

* @param bool $skip Skip AMP mode, display full post.

[135] Fix | Delete

*

[136] Fix | Delete

* @return bool

[137] Fix | Delete

*/

[138] Fix | Delete

public function skip_post( $skip ) {

[139] Fix | Delete

[140] Fix | Delete

// phpcs:ignore WordPress.Security.NonceVerification.Recommended

[141] Fix | Delete

return isset( $_GET['nonamp'] ) ? true : $skip;

[142] Fix | Delete

}

[143] Fix | Delete

[144] Fix | Delete

/**

[145] Fix | Delete

* Form attributes filter.

[146] Fix | Delete

*

[147] Fix | Delete

* @since 1.8.1

[148] Fix | Delete

*

[149] Fix | Delete

* @param array $form_atts Form attributes.

[150] Fix | Delete

* @param array $form_data Form data.

[151] Fix | Delete

*

[152] Fix | Delete

* @return array

[153] Fix | Delete

*/

[154] Fix | Delete

public function form_atts( $form_atts, $form_data ) {

[155] Fix | Delete

[156] Fix | Delete

if ( ! $this->is_amp() ) {

[157] Fix | Delete

return $form_atts;

[158] Fix | Delete

}

[159] Fix | Delete

[160] Fix | Delete

// Set submitting state.

[161] Fix | Delete

if ( ! isset( $form_atts['atts']['on'] ) ) {

[162] Fix | Delete

$form_atts['atts']['on'] = '';

[163] Fix | Delete

} else {

[164] Fix | Delete

$form_atts['atts']['on'] .= ';';

[165] Fix | Delete

}

[166] Fix | Delete

[167] Fix | Delete

$form_id = ! empty( $form_data['id'] ) ? (int) $form_data['id'] : 0;

[168] Fix | Delete

[169] Fix | Delete

$form_atts['atts']['on'] .= sprintf(

[170] Fix | Delete

'submit:AMP.setState( %1$s ); submit-success:AMP.setState( %2$s ); submit-error:AMP.setState( %2$s );',

[171] Fix | Delete

wp_json_encode(

[172] Fix | Delete

[

[173] Fix | Delete

$this->get_form_amp_state_id( $form_id ) => [ 'submitting' => true ],

[174] Fix | Delete

]

[175] Fix | Delete

),

[176] Fix | Delete

wp_json_encode(

[177] Fix | Delete

[

[178] Fix | Delete

$this->get_form_amp_state_id( $form_id ) => [ 'submitting' => false ],

[179] Fix | Delete

]

[180] Fix | Delete

)

[181] Fix | Delete

);

[182] Fix | Delete

[183] Fix | Delete

// Upgrade the form to be an amp-form to avoid sanitizer conversion.

[184] Fix | Delete

if ( isset( $form_atts['atts']['action'] ) ) {

[185] Fix | Delete

$form_atts['atts']['action-xhr'] = $form_atts['atts']['action'];

[186] Fix | Delete

$form_atts['atts']['verify-xhr'] = $form_atts['atts']['action-xhr'];

[187] Fix | Delete

[188] Fix | Delete

unset( $form_atts['atts']['action'] );

[189] Fix | Delete

}

[190] Fix | Delete

[191] Fix | Delete

return $form_atts;

[192] Fix | Delete

}

[193] Fix | Delete

[194] Fix | Delete

/**

[195] Fix | Delete

* Get the amp-state ID for a given form.

[196] Fix | Delete

*

[197] Fix | Delete

* @since 1.8.1

[198] Fix | Delete

*

[199] Fix | Delete

* @param int $form_id Form ID.

[200] Fix | Delete

*

[201] Fix | Delete

* @return string State ID.

[202] Fix | Delete

*/

[203] Fix | Delete

private function get_form_amp_state_id( $form_id ) {

[204] Fix | Delete

[205] Fix | Delete

return sprintf( 'wpforms_form_state_%d', $form_id );

[206] Fix | Delete

}

[207] Fix | Delete

[208] Fix | Delete

/**

[209] Fix | Delete

* Output AMP state.

[210] Fix | Delete

*

[211] Fix | Delete

* @since 1.8.1

[212] Fix | Delete

*

[213] Fix | Delete

* @param array $form_data Form data and settings.

[214] Fix | Delete

* @param null $deprecated Deprecated.

[215] Fix | Delete

* @param string $title Form title.

[216] Fix | Delete

* @param string $description Form description.

[217] Fix | Delete

* @param array $errors Errors.

[218] Fix | Delete

*

[219] Fix | Delete

* @noinspection PhpUnusedParameterInspection

[220] Fix | Delete

*/

[221] Fix | Delete

public function output_state( $form_data, $deprecated, $title, $description, $errors ) {

[222] Fix | Delete

[223] Fix | Delete

if ( ! $this->is_amp() ) {

[224] Fix | Delete

return;

[225] Fix | Delete

}

[226] Fix | Delete

[227] Fix | Delete

$state = [ 'submitting' => false ];

[228] Fix | Delete

[229] Fix | Delete

$form_id = ! empty( $form_data['id'] ) ? (int) $form_data['id'] : 0;

[230] Fix | Delete

[231] Fix | Delete

printf(

[232] Fix | Delete

'<amp-state id="%s"><script type="application/json">%s</script></amp-state>',

[233] Fix | Delete

$this->get_form_amp_state_id( $form_id ), // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped

[234] Fix | Delete

wp_json_encode( $state )

[235] Fix | Delete

);

[236] Fix | Delete

}

[237] Fix | Delete

[238] Fix | Delete

/**

[239] Fix | Delete

* Output submit success template.

[240] Fix | Delete

*

[241] Fix | Delete

* @since 1.8.1

[242] Fix | Delete

*

[243] Fix | Delete

* @param array $form_data Form data and settings.

[244] Fix | Delete

*

[245] Fix | Delete

* @return bool True if the template was printed.

[246] Fix | Delete

*/

[247] Fix | Delete

public function output_success_template( $form_data ) {

[248] Fix | Delete

[249] Fix | Delete

if ( ! $this->is_amp() ) {

[250] Fix | Delete

return false;

[251] Fix | Delete

}

[252] Fix | Delete

[253] Fix | Delete

$frontend = wpforms()->get( 'frontend' );

[254] Fix | Delete

[255] Fix | Delete

if ( ! $frontend ) {

[256] Fix | Delete

return false;

[257] Fix | Delete

}

[258] Fix | Delete

[259] Fix | Delete

$frontend->assets_confirmation( $form_data );

[260] Fix | Delete

[261] Fix | Delete

$class = (int) wpforms_setting( 'disable-css', '1' ) === 1 ?

[262] Fix | Delete

'wpforms-confirmation-container-full' :

[263] Fix | Delete

'wpforms-confirmation-container';

[264] Fix | Delete

[265] Fix | Delete

printf(

[266] Fix | Delete

'<div submit-success><template type="amp-mustache"><div class="%s {{#redirecting}}wpforms-redirection-message{{/redirecting}}">{{{message}}}</div></template></div>',

[267] Fix | Delete

esc_attr( $class )

[268] Fix | Delete

);

[269] Fix | Delete

[270] Fix | Delete

return true;

[271] Fix | Delete

}

[272] Fix | Delete

[273] Fix | Delete

/**

[274] Fix | Delete

* Output submit error template.

[275] Fix | Delete

*

[276] Fix | Delete

* @since 1.8.1

[277] Fix | Delete

*

[278] Fix | Delete

* @return bool True if the template was printed.

[279] Fix | Delete

*/

[280] Fix | Delete

public function output_error_template() {

[281] Fix | Delete

[282] Fix | Delete

if ( ! $this->is_amp() ) {

[283] Fix | Delete

return false;

[284] Fix | Delete

}

[285] Fix | Delete

[286] Fix | Delete

echo '<div submit-error><template type="amp-mustache"><div class="wpforms-error-container"><p>{{{message}}}</p></div></template></div>';

[287] Fix | Delete

[288] Fix | Delete

return true;

[289] Fix | Delete

}

[290] Fix | Delete

[291] Fix | Delete

/**

[292] Fix | Delete

* Get text attribute.

[293] Fix | Delete

*

[294] Fix | Delete

* @since 1.8.1

[295] Fix | Delete

*

[296] Fix | Delete

* @param int $form_id Form ID.

[297] Fix | Delete

* @param array $settings Form settings.

[298] Fix | Delete

* @param string $submit Submit button text.

[299] Fix | Delete

*

[300] Fix | Delete

* @return string

[301] Fix | Delete

*/

[302] Fix | Delete

public function get_text_attr( $form_id, $settings, $submit ) {

[303] Fix | Delete

[304] Fix | Delete

return sprintf(

[305] Fix | Delete

'%s.submitting ? %s : %s',

[306] Fix | Delete

$this->get_form_amp_state_id( $form_id ),

[307] Fix | Delete

wp_json_encode( $settings['submit_text_processing'], JSON_UNESCAPED_UNICODE ),

[308] Fix | Delete

wp_json_encode( $submit, JSON_UNESCAPED_UNICODE )

[309] Fix | Delete

);

[310] Fix | Delete

}

[311] Fix | Delete

[312] Fix | Delete

/**

[313] Fix | Delete

* Output captcha.

[314] Fix | Delete

*

[315] Fix | Delete

* @since 1.8.1

[316] Fix | Delete

*

[317] Fix | Delete

* @param bool $is_recaptcha_v3 Whether we use v3.

[318] Fix | Delete

* @param array $captcha_settings Captcha settings.

[319] Fix | Delete

* @param array $form_data Form data.

[320] Fix | Delete

*

[321] Fix | Delete

* @return bool

[322] Fix | Delete

*/

[323] Fix | Delete

public function output_captcha( $is_recaptcha_v3, $captcha_settings, $form_data ) {

[324] Fix | Delete

[325] Fix | Delete

if ( ! $this->is_amp() ) {

[326] Fix | Delete

return false;

[327] Fix | Delete

}

[328] Fix | Delete

[329] Fix | Delete

if ( $is_recaptcha_v3 ) {

[330] Fix | Delete

[331] Fix | Delete

printf(

[332] Fix | Delete

'<amp-recaptcha-input name="wpforms[recaptcha]" data-sitekey="%s" data-action="%s" layout="nodisplay"></amp-recaptcha-input>',

[333] Fix | Delete

esc_attr( $captcha_settings['site_key'] ),

[334] Fix | Delete

esc_attr( 'wpforms_' . $form_data['id'] )

[335] Fix | Delete

);

[336] Fix | Delete

[337] Fix | Delete

return true;

[338] Fix | Delete

}

[339] Fix | Delete

[340] Fix | Delete

if ( is_super_admin() ) {

[341] Fix | Delete

[342] Fix | Delete

$captcha_provider = $captcha_settings['provider'] === 'hcaptcha' ? esc_html__( 'hCaptcha', 'wpforms-lite' ) : esc_html__( 'Google reCAPTCHA v2', 'wpforms-lite' );

[343] Fix | Delete

[344] Fix | Delete

echo '<div class="wpforms-notice wpforms-warning" style="margin: 20px 0;">';

[345] Fix | Delete

printf(

[346] Fix | Delete

wp_kses( /* translators: %1$s - CAPTCHA provider name, %2$s - URL to reCAPTCHA documentation. */

[347] Fix | Delete

__( '%1$s is not supported by AMP and is currently disabled.<br><a href="%2$s" rel="noopener noreferrer" target="_blank">Upgrade to reCAPTCHA v3</a> for full AMP support. <br><em>Please note: this message is only displayed to site administrators.</em>', 'wpforms-lite' ),

[348] Fix | Delete

[

[349] Fix | Delete

'a' => [

[350] Fix | Delete

'href' => [],

[351] Fix | Delete

'rel' => [],

[352] Fix | Delete

'target' => [],

[353] Fix | Delete

],

[354] Fix | Delete

'br' => [],

[355] Fix | Delete

'em' => [],

[356] Fix | Delete

]

[357] Fix | Delete

),

[358] Fix | Delete

$captcha_provider, // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped

[359] Fix | Delete

'https://wpforms.com/docs/setup-captcha-wpforms/'

[360] Fix | Delete

);

[361] Fix | Delete

echo '</div>';

[362] Fix | Delete

[363] Fix | Delete

return true;

[364] Fix | Delete

}

[365] Fix | Delete

[366] Fix | Delete

return false;

[367] Fix | Delete

}

[368] Fix | Delete

}

[369] Fix | Delete

[370] Fix | Delete