hide_errors(); } // @codingStandardsIgnoreEnd } /** * Send headers for EVF Ajax Requests. * * @since 1.0.0 */ private static function evf_ajax_headers() { if ( ! headers_sent() ) { send_origin_headers(); send_nosniff_header(); evf_nocache_headers(); header( 'Content-Type: text/html; charset=' . get_option( 'blog_charset' ) ); header( 'X-Robots-Tag: noindex' ); status_header( 200 ); } elseif ( defined( 'WP_DEBUG' ) && WP_DEBUG ) { headers_sent( $file, $line ); trigger_error( "evf_ajax_headers cannot set headers - headers already sent by {$file} on line {$line}", E_USER_NOTICE ); // @codingStandardsIgnoreLine } } /** * Check for EVF Ajax request and fire action. */ public static function do_evf_ajax() { global $wp_query; if ( ! empty( $_GET['evf-ajax'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification $wp_query->set( 'evf-ajax', sanitize_text_field( wp_unslash( $_GET['evf-ajax'] ) ) ); // phpcs:ignore WordPress.Security.NonceVerification } $action = $wp_query->get( 'evf-ajax' ); if ( $action ) { self::evf_ajax_headers(); $action = sanitize_text_field( $action ); do_action( 'evf_ajax_' . $action ); wp_die(); } } /** * Hook in methods - uses WordPress ajax handlers (admin-ajax). */ public static function add_ajax_events() { $ajax_events = array( 'save_form' => false, 'create_form' => false, 'get_next_id' => false, 'install_extension' => false, 'integration_connect' => false, 'new_email_add' => false, 'integration_disconnect' => false, 'deactivation_notice' => false, 'rated' => false, 'review_dismiss' => false, 'survey_dismiss' => false, 'enabled_form' => false, 'import_form_action' => false, 'template_licence_check' => false, 'template_activate_addon' => false, 'ajax_form_submission' => true, 'send_test_email' => false, ); foreach ( $ajax_events as $ajax_event => $nopriv ) { add_action( 'wp_ajax_everest_forms_' . $ajax_event, array( __CLASS__, $ajax_event ) ); if ( $nopriv ) { add_action( 'wp_ajax_nopriv_everest_forms_' . $ajax_event, array( __CLASS__, $ajax_event ) ); // EVF AJAX can be used for frontend ajax requests. add_action( 'evf_ajax_' . $ajax_event, array( __CLASS__, $ajax_event ) ); } } } /** * Ajax handler to get next form ID. */ public static function get_next_id() { // Run a security check. check_ajax_referer( 'everest_forms_get_next_id', 'security' ); $form_id = isset( $_POST['form_id'] ) ? absint( $_POST['form_id'] ) : 0; if ( $form_id < 1 ) { wp_send_json_error( array( 'error' => esc_html__( 'Invalid form', 'everest-forms' ), ) ); } // Check permisssions. if ( ! current_user_can( 'everest_forms_edit_form', $form_id ) ) { wp_send_json_error(); } if ( isset( $_POST['fields'] ) ) { $fields_data = array(); for ( $i = 0; $i < $_POST['fields']; $i++ ) { $field_key = evf()->form->field_unique_key( $form_id ); $field_id_array = explode( '-', $field_key ); $new_field_id = ( $field_id_array[ count( $field_id_array ) - 1 ] + 1 ); $fields_data [] = array( 'field_id' => $new_field_id, 'field_key' => $field_key, ); } wp_send_json_success( $fields_data ); } else { $field_key = evf()->form->field_unique_key( $form_id ); $field_id_array = explode( '-', $field_key ); $new_field_id = ( $field_id_array[ count( $field_id_array ) - 1 ] + 1 ); wp_send_json_success( array( 'field_id' => $new_field_id, 'field_key' => $field_key, ) ); } } /** * AJAX create new form. */ public static function create_form() { ob_start(); check_ajax_referer( 'everest_forms_create_form', 'security' ); // Check permissions. if ( ! current_user_can( 'everest_forms_create_forms' ) ) { wp_die( -1 ); } $title = isset( $_POST['title'] ) ? sanitize_text_field( wp_unslash( $_POST['title'] ) ) : esc_html__( 'Blank Form', 'everest-forms' ); $template = isset( $_POST['template'] ) ? sanitize_text_field( wp_unslash( $_POST['template'] ) ) : 'blank'; $form_id = evf()->form->create( $title, $template ); if ( $form_id ) { $data = array( 'id' => $form_id, 'redirect' => add_query_arg( array( 'tab' => 'fields', 'form_id' => $form_id, ), admin_url( 'admin.php?page=evf-builder' ) ), ); wp_send_json_success( $data ); } wp_send_json_error( array( 'error' => esc_html__( 'Something went wrong, please try again later', 'everest-forms' ), ) ); } /** * AJAX Form save. */ public static function save_form() { check_ajax_referer( 'everest_forms_save_form', 'security' ); $logger = evf_get_logger(); // Check permissions. $logger->info( __( 'Checking permissions.', 'everest-forms' ), array( 'source' => 'form-save' ) ); if ( ! current_user_can( 'everest_forms_edit_forms' ) ) { $logger->critical( __( 'You do not have permission.', 'everest-forms' ), array( 'source' => 'form-save' ) ); die( esc_html__( 'You do not have permission.', 'everest-forms' ) ); } // Check for form data. $logger->info( __( 'Checking for form data.', 'everest-forms' ), array( 'source' => 'form-save' ) ); if ( empty( $_POST['form_data'] ) ) { $logger->critical( __( 'No data provided.', 'everest-forms' ), array( 'source' => 'form-save' ) ); die( esc_html__( 'No data provided', 'everest-forms' ) ); } $form_post = evf_sanitize_builder( json_decode( wp_unslash( $_POST['form_data'] ) ) ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.ValidatedSanitizedInput.MissingUnslash $data = array(); if ( ! is_null( $form_post ) && $form_post ) { foreach ( $form_post as $post_input_data ) { // For input names that are arrays (e.g. `menu-item-db-id[3][4][5]`), // derive the array path keys via regex and set the value in $_POST. preg_match( '#([^\[]*)(\[(.+)\])?#', $post_input_data->name, $matches ); $array_bits = array( $matches[1] ); if ( isset( $matches[3] ) ) { $array_bits = array_merge( $array_bits, explode( '][', $matches[3] ) ); } $new_post_data = array(); // Build the new array value from leaf to trunk. for ( $i = count( $array_bits ) - 1; $i >= 0; $i -- ) { if ( count( $array_bits ) - 1 === $i ) { $new_post_data[ $array_bits[ $i ] ] = wp_slash( $post_input_data->value ); } else { $new_post_data = array( $array_bits[ $i ] => $new_post_data, ); } } $data = array_replace_recursive( $data, $new_post_data ); } } // Check for empty meta key. $logger->info( __( 'Check for empty meta key.', 'everest-forms' ), array( 'source' => 'form-save' ) ); $empty_meta_data = array(); if ( ! empty( $data['form_fields'] ) ) { foreach ( $data['form_fields'] as $field_key => $field ) { if ( ! empty( $field['label'] ) ) { // Only allow specific html in label. $data['form_fields'][ $field_key ]['label'] = wp_kses( $field['label'], array( 'a' => array( 'href' => array(), 'class' => array(), ), 'span' => array( 'class' => array(), ), 'em' => array(), 'small' => array(), 'strong' => array(), ) ); // Register string for translation. evf_string_translation( $data['id'], $field['id'], $field['label'] ); } if ( empty( $field['meta-key'] ) && ! in_array( $field['type'], array( 'html', 'title', 'captcha', 'divider' ), true ) ) { $empty_meta_data[] = $field['label']; } } if ( ! empty( $empty_meta_data ) ) { $logger->error( __( 'Meta Key missing.', 'everest-forms' ), array( 'source' => 'form-save' ) ); wp_send_json_error( array( 'errorTitle' => esc_html__( 'Meta Key missing', 'everest-forms' ), /* translators: %s: empty meta data */ 'errorMessage' => sprintf( esc_html__( 'Please add Meta key for fields: %s', 'everest-forms' ), '' . implode( ', ', $empty_meta_data ) . '' ), ) ); } } // Fix for sorting field ordering. $logger->info( __( 'Fix for sorting field ordering.', 'everest-forms' ), array( 'source' => 'form-save' ) ); if ( isset( $data['structure'], $data['form_fields'] ) ) { $structure = evf_flatten_array( $data['structure'] ); $data['form_fields'] = array_merge( array_intersect_key( array_flip( $structure ), $data['form_fields'] ), $data['form_fields'] ); } $form_id = evf()->form->update( $data['id'], $data ); $form_styles = get_option( 'everest_forms_styles', array() ); $logger->info( __( 'Saving form.', 'everest-forms' ), array( 'source' => 'form-save' ) ); do_action( 'everest_forms_save_form', $form_id, $data, array(), ! empty( $form_styles[ $form_id ] ) ); if ( ! $form_id ) { $logger->error( __( 'An error occurred while saving the form.', 'everest-forms' ), array( 'source' => 'form-save' ) ); wp_send_json_error( array( 'errorTitle' => esc_html__( 'Form not found', 'everest-forms' ), 'errorMessage' => esc_html__( 'An error occurred while saving the form.', 'everest-forms' ), ) ); } else { $logger->info( __( 'Form Saved successfully.', 'everest-forms' ), array( 'source' => 'form-save' ) ); wp_send_json_success( array( 'form_name' => esc_html( $data['settings']['form_title'] ), 'redirect_url' => admin_url( 'admin.php?page=evf-builder' ), ) ); } } /** * Ajax handler for form submission. */ public static function ajax_form_submission() { check_ajax_referer( 'everest_forms_ajax_form_submission', 'security' ); if ( ! empty( $_POST['everest_forms']['id'] ) ) { $process = evf()->task->ajax_form_submission( evf_sanitize_entry( wp_unslash( $_POST['everest_forms'] ) ) ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized if ( 'success' === $process['response'] ) { wp_send_json_success( $process ); } wp_send_json_error( $process ); } } /** * Ajax handler for template required addon activation. */ public static function template_activate_addon() { check_ajax_referer( 'everest_forms_template_licence_check', 'security' ); if ( empty( $_POST['addon'] ) ) { wp_send_json_error( array( 'errorCode' => 'no_addon_specified', 'errorMessage' => esc_html__( 'No Addon specified.', 'everest-forms' ), ) ); } $activate = activate_plugin( sanitize_text_field( wp_unslash( $_POST['addon'] ) ) . '/' . sanitize_text_field( wp_unslash( $_POST['addon'] ) ) . '.php' ); if ( is_wp_error( $activate ) ) { wp_send_json_error( array( 'errorCode' => 'addon_not_active', 'errorMessage' => esc_html__( 'Addon can not be activate. Please try again.', 'everest-forms' ), ) ); } else { wp_send_json_success( 'Addon sucessfully activated.' ); } } /** * Ajax handler for licence check. * * @global WP_Filesystem_Base $wp_filesystem Subclass */ public static function template_licence_check() { check_ajax_referer( 'everest_forms_template_licence_check', 'security' ); if ( empty( $_POST['plan'] ) ) { wp_send_json_error( array( 'plan' => '', 'errorCode' => 'no_plan_specified', 'errorMessage' => esc_html__( 'No Plan specified.', 'everest-forms' ), ) ); } $addons = array(); $template_data = evf_get_json_file_contents( 'assets/extensions-json/templates/all_templates.json' ); if ( ! empty( $template_data->templates ) ) { foreach ( $template_data->templates as $template ) { if ( isset( $_POST['slug'] ) && $template->slug === $_POST['slug'] && in_array( $_POST['plan'], $template->plan, true ) ) { $addons = $template->addons; } } } $output = '
' . esc_html__( 'This form template requires the following addons.', 'everest-forms' ) . '
'; $output .= '| Required Addons | |
|---|---|
| ' . $addon . ' | '; $output .= ''; $output .= ' |
' . $deactivation_notice . '