<?php

[0] Fix | Delete

[1] Fix | Delete

// phpcs:disable Generic.Commenting.DocComment.MissingShort

[2] Fix | Delete

/** @noinspection AutoloadingIssuesInspection */

[3] Fix | Delete

/** @noinspection PhpIllegalPsrClassPathInspection */

[4] Fix | Delete

// phpcs:enable Generic.Commenting.DocComment.MissingShort

[5] Fix | Delete

[6] Fix | Delete

/**

[7] Fix | Delete

* All the form goodness and basics.

[8] Fix | Delete

*

[9] Fix | Delete

* Contains a bunch of helper methods as well.

[10] Fix | Delete

*

[11] Fix | Delete

* @since 1.0.0

[12] Fix | Delete

*/

[13] Fix | Delete

class WPForms_Form_Handler {

[14] Fix | Delete

[15] Fix | Delete

/**

[16] Fix | Delete

* Tags taxonomy.

[17] Fix | Delete

*

[18] Fix | Delete

* @since 1.7.5

[19] Fix | Delete

*/

[20] Fix | Delete

public const TAGS_TAXONOMY = 'wpforms_form_tag';

[21] Fix | Delete

[22] Fix | Delete

/**

[23] Fix | Delete

* Allowed post types.

[24] Fix | Delete

*

[25] Fix | Delete

* @since 1.8.8

[26] Fix | Delete

*/

[27] Fix | Delete

public const POST_TYPES = [

[28] Fix | Delete

'wpforms',

[29] Fix | Delete

'wpforms-template',

[30] Fix | Delete

];

[31] Fix | Delete

[32] Fix | Delete

/**

[33] Fix | Delete

* Is form data slashing enabled.

[34] Fix | Delete

*

[35] Fix | Delete

* @since 1.9.0

[36] Fix | Delete

*

[37] Fix | Delete

* @var bool

[38] Fix | Delete

*/

[39] Fix | Delete

private $is_form_data_slashing_enabled;

[40] Fix | Delete

[41] Fix | Delete

/**

[42] Fix | Delete

* Primary class constructor.

[43] Fix | Delete

*

[44] Fix | Delete

* @since 1.0.0

[45] Fix | Delete

*/

[46] Fix | Delete

public function __construct() {

[47] Fix | Delete

[48] Fix | Delete

$this->is_form_data_slashing_enabled = wpforms_is_form_data_slashing_enabled();

[49] Fix | Delete

[50] Fix | Delete

$this->hooks();

[51] Fix | Delete

}

[52] Fix | Delete

[53] Fix | Delete

/**

[54] Fix | Delete

* Hooks.

[55] Fix | Delete

*

[56] Fix | Delete

* @since 1.7.5

[57] Fix | Delete

*/

[58] Fix | Delete

private function hooks(): void {

[59] Fix | Delete

[60] Fix | Delete

// Register wpforms custom post type and taxonomy.

[61] Fix | Delete

add_action( 'init', [ $this, 'register_taxonomy' ] );

[62] Fix | Delete

add_action( 'init', [ $this, 'register_cpt' ] );

[63] Fix | Delete

[64] Fix | Delete

// Add wpforms to a new-content admin bar menu.

[65] Fix | Delete

add_action( 'admin_bar_menu', [ $this, 'admin_bar' ], 99 );

[66] Fix | Delete

add_action( 'wpforms_create_form', [ $this, 'track_first_form' ], 10, 3 );

[67] Fix | Delete

[68] Fix | Delete

// @WPFormsBackCompat Support Zapier v1.5.0 and earlier.

[69] Fix | Delete

add_filter( 'wpforms_form_handler_add_notices', [ $this, '_zapier_disconnected_on_duplication' ], 10, 3 );

[70] Fix | Delete

}

[71] Fix | Delete

[72] Fix | Delete

/**

[73] Fix | Delete

* Register the custom post type to be used for forms.

[74] Fix | Delete

*

[75] Fix | Delete

* @since 1.0.0

[76] Fix | Delete

*/

[77] Fix | Delete

public function register_cpt(): void {

[78] Fix | Delete

[79] Fix | Delete

// phpcs:disable WPForms.PHP.ValidateHooks.InvalidHookName

[80] Fix | Delete

[81] Fix | Delete

/**

[82] Fix | Delete

* Filters Custom Post Type arguments.

[83] Fix | Delete

*

[84] Fix | Delete

* @since 1.0.0

[85] Fix | Delete

*

[86] Fix | Delete

* @param array $args Arguments.

[87] Fix | Delete

*/

[88] Fix | Delete

$args = apply_filters(

[89] Fix | Delete

'wpforms_post_type_args',

[90] Fix | Delete

[

[91] Fix | Delete

'label' => 'WPForms',

[92] Fix | Delete

'public' => false,

[93] Fix | Delete

'exclude_from_search' => true,

[94] Fix | Delete

'show_ui' => false,

[95] Fix | Delete

'show_in_admin_bar' => false,

[96] Fix | Delete

'rewrite' => false,

[97] Fix | Delete

'query_var' => false,

[98] Fix | Delete

'can_export' => false,

[99] Fix | Delete

'supports' => [ 'title', 'author', 'revisions' ],

[100] Fix | Delete

'capability_type' => 'wpforms_form', // Not using 'capability_type' anywhere. It just has to be custom for security reasons.

[101] Fix | Delete

'map_meta_cap' => false, // Don't let WP to map meta caps to have a granular control over this process via 'map_meta_cap' filter.

[102] Fix | Delete

]

[103] Fix | Delete

);

[104] Fix | Delete

[105] Fix | Delete

// phpcs:enable WPForms.PHP.ValidateHooks.InvalidHookName

[106] Fix | Delete

[107] Fix | Delete

// Register the post type.

[108] Fix | Delete

register_post_type( 'wpforms', $args );

[109] Fix | Delete

}

[110] Fix | Delete

[111] Fix | Delete

/**

[112] Fix | Delete

* Register the new taxonomy for tags.

[113] Fix | Delete

*

[114] Fix | Delete

* @since 1.7.5

[115] Fix | Delete

*/

[116] Fix | Delete

public function register_taxonomy(): void {

[117] Fix | Delete

[118] Fix | Delete

/**

[119] Fix | Delete

* Filters Tags taxonomy arguments.

[120] Fix | Delete

*

[121] Fix | Delete

* @since 1.7.5

[122] Fix | Delete

*

[123] Fix | Delete

* @param array $args Arguments.

[124] Fix | Delete

*/

[125] Fix | Delete

$args = apply_filters(

[126] Fix | Delete

'wpforms_form_handler_register_taxonomy_args',

[127] Fix | Delete

[

[128] Fix | Delete

'hierarchical' => false,

[129] Fix | Delete

'rewrite' => false,

[130] Fix | Delete

'public' => false,

[131] Fix | Delete

]

[132] Fix | Delete

);

[133] Fix | Delete

[134] Fix | Delete

register_taxonomy( self::TAGS_TAXONOMY, 'wpforms', $args );

[135] Fix | Delete

}

[136] Fix | Delete

[137] Fix | Delete

/**

[138] Fix | Delete

* Add "WPForms" item to new-content admin bar menu item.

[139] Fix | Delete

*

[140] Fix | Delete

* @since 1.1.7.2

[141] Fix | Delete

*

[142] Fix | Delete

* @param WP_Admin_Bar $wp_admin_bar WP_Admin_Bar instance, passed by reference.

[143] Fix | Delete

*/

[144] Fix | Delete

public function admin_bar( $wp_admin_bar ): void {

[145] Fix | Delete

[146] Fix | Delete

if ( ! is_admin_bar_showing() || ! wpforms_current_user_can( 'create_forms' ) ) {

[147] Fix | Delete

return;

[148] Fix | Delete

}

[149] Fix | Delete

[150] Fix | Delete

$args = [

[151] Fix | Delete

'id' => 'wpforms',

[152] Fix | Delete

'title' => esc_html__( 'WPForms', 'wpforms-lite' ),

[153] Fix | Delete

'href' => admin_url( 'admin.php?page=wpforms-builder' ),

[154] Fix | Delete

'parent' => 'new-content',

[155] Fix | Delete

];

[156] Fix | Delete

[157] Fix | Delete

$wp_admin_bar->add_node( $args );

[158] Fix | Delete

}

[159] Fix | Delete

[160] Fix | Delete

/**

[161] Fix | Delete

* Preserve the timestamp when the very first form has been created.

[162] Fix | Delete

*

[163] Fix | Delete

* @since 1.6.7.1

[164] Fix | Delete

*

[165] Fix | Delete

* @param int $form_id Newly created form ID.

[166] Fix | Delete

* @param array $form Array past to create a new form in the wp_posts table.

[167] Fix | Delete

* @param array $data Additional form data.

[168] Fix | Delete

*

[169] Fix | Delete

* @noinspection PhpMissingParamTypeInspection

[170] Fix | Delete

* @noinspection PhpUnusedParameterInspection

[171] Fix | Delete

*/

[172] Fix | Delete

public function track_first_form( $form_id, $form, $data ): void { // phpcs:ignore Generic.CodeAnalysis.UnusedFunctionParameter.FoundAfterLastUsed

[173] Fix | Delete

[174] Fix | Delete

// Do we have the value already?

[175] Fix | Delete

$time = get_option( 'wpforms_forms_first_created' );

[176] Fix | Delete

[177] Fix | Delete

// Check whether we have already saved this option - skip.

[178] Fix | Delete

if ( ! empty( $time ) ) {

[179] Fix | Delete

return;

[180] Fix | Delete

}

[181] Fix | Delete

[182] Fix | Delete

// Check whether we have any forms other than the currently created one.

[183] Fix | Delete

$other_form = $this->get(

[184] Fix | Delete

'',

[185] Fix | Delete

[

[186] Fix | Delete

'posts_per_page' => 1,

[187] Fix | Delete

'nopaging' => false,

[188] Fix | Delete

'fields' => 'ids',

[189] Fix | Delete

'post__not_in' => [ $form_id ], // phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_post__not_in

[190] Fix | Delete

'update_post_meta_cache' => false,

[191] Fix | Delete

'update_post_term_cache' => false,

[192] Fix | Delete

'cap' => false,

[193] Fix | Delete

]

[194] Fix | Delete

);

[195] Fix | Delete

[196] Fix | Delete

// As we have other forms - we are not certain about the situation, skip.

[197] Fix | Delete

if ( ! empty( $other_form ) ) {

[198] Fix | Delete

return;

[199] Fix | Delete

}

[200] Fix | Delete

[201] Fix | Delete

add_option( 'wpforms_forms_first_created', time(), '', 'no' );

[202] Fix | Delete

}

[203] Fix | Delete

[204] Fix | Delete

/**

[205] Fix | Delete

* Fetch forms.

[206] Fix | Delete

*

[207] Fix | Delete

* @since 1.0.0

[208] Fix | Delete

*

[209] Fix | Delete

* @param mixed $id Form ID.

[210] Fix | Delete

* @param array $args Additional arguments array.

[211] Fix | Delete

*

[212] Fix | Delete

* @return array|false|WP_Post

[213] Fix | Delete

*/

[214] Fix | Delete

public function get( $id = '', array $args = [] ) {

[215] Fix | Delete

[216] Fix | Delete

if ( $id === false ) {

[217] Fix | Delete

return false;

[218] Fix | Delete

}

[219] Fix | Delete

[220] Fix | Delete

// phpcs:disable WPForms.PHP.ValidateHooks.InvalidHookName

[221] Fix | Delete

[222] Fix | Delete

/**

[223] Fix | Delete

* Allow developers to filter the WPForms_Form_Handler::get() arguments.

[224] Fix | Delete

*

[225] Fix | Delete

* @since 1.0.0

[226] Fix | Delete

*

[227] Fix | Delete

* @param array $args Arguments array.

[228] Fix | Delete

* @param mixed $id Form ID.

[229] Fix | Delete

*/

[230] Fix | Delete

$args = (array) apply_filters( 'wpforms_get_form_args', $args, $id );

[231] Fix | Delete

[232] Fix | Delete

// phpcs:enable WPForms.PHP.ValidateHooks.InvalidHookName

[233] Fix | Delete

[234] Fix | Delete

// By default, we should return only published forms.

[235] Fix | Delete

$defaults = [

[236] Fix | Delete

'post_status' => 'publish',

[237] Fix | Delete

];

[238] Fix | Delete

[239] Fix | Delete

$args = wp_parse_args( $args, $defaults );

[240] Fix | Delete

[241] Fix | Delete

$forms = empty( $id ) ? $this->get_multiple( $args ) : $this->get_single( $id, $args );

[242] Fix | Delete

[243] Fix | Delete

return ! empty( $forms ) ? $forms : false;

[244] Fix | Delete

}

[245] Fix | Delete

[246] Fix | Delete

/**

[247] Fix | Delete

* Fetch a single form.

[248] Fix | Delete

*

[249] Fix | Delete

* @since 1.5.8

[250] Fix | Delete

*

[251] Fix | Delete

* @param string|int $id Form ID.

[252] Fix | Delete

* @param array $args Additional arguments array.

[253] Fix | Delete

*

[254] Fix | Delete

* @return array|false|WP_Post

[255] Fix | Delete

*/

[256] Fix | Delete

protected function get_single( $id = '', array $args = [] ) {

[257] Fix | Delete

[258] Fix | Delete

// phpcs:disable WPForms.PHP.ValidateHooks.InvalidHookName

[259] Fix | Delete

[260] Fix | Delete

/**

[261] Fix | Delete

* Allow developers to filter the get_single() arguments.

[262] Fix | Delete

*

[263] Fix | Delete

* @since 1.5.8

[264] Fix | Delete

*

[265] Fix | Delete

* @param array $args Arguments' array, same as for `get_post()` function.

[266] Fix | Delete

* @param string|int $id Form ID.

[267] Fix | Delete

*/

[268] Fix | Delete

$args = apply_filters( 'wpforms_get_single_form_args', $args, $id );

[269] Fix | Delete

[270] Fix | Delete

// phpcs:enable WPForms.PHP.ValidateHooks.InvalidHookName

[271] Fix | Delete

[272] Fix | Delete

$access_obj = wpforms()->obj( 'access' );

[273] Fix | Delete

[274] Fix | Delete

if ( ! $access_obj ) {

[275] Fix | Delete

return false;

[276] Fix | Delete

}

[277] Fix | Delete

[278] Fix | Delete

if ( ! isset( $args['cap'] ) && $access_obj->init_allowed() ) {

[279] Fix | Delete

$args['cap'] = 'view_form_single';

[280] Fix | Delete

}

[281] Fix | Delete

[282] Fix | Delete

if ( ! empty( $args['cap'] ) && ! wpforms_current_user_can( $args['cap'], $id ) ) {

[283] Fix | Delete

return false;

[284] Fix | Delete

}

[285] Fix | Delete

[286] Fix | Delete

// If no ID provided, we can't get a single form.

[287] Fix | Delete

if ( empty( $id ) ) {

[288] Fix | Delete

return false;

[289] Fix | Delete

}

[290] Fix | Delete

[291] Fix | Delete

// If ID is provided, we get a single form.

[292] Fix | Delete

$form = get_post( absint( $id ) );

[293] Fix | Delete

[294] Fix | Delete

// Check if the form exists.

[295] Fix | Delete

if ( empty( $form ) || ! $form instanceof WP_Post ) {

[296] Fix | Delete

return false;

[297] Fix | Delete

}

[298] Fix | Delete

[299] Fix | Delete

// Check if the form is of the allowed post type.

[300] Fix | Delete

if ( ! in_array( $form->post_type, self::POST_TYPES, true ) ) {

[301] Fix | Delete

return false;

[302] Fix | Delete

}

[303] Fix | Delete

[304] Fix | Delete

// Decode the form content.

[305] Fix | Delete

if ( ! empty( $args['content_only'] ) ) {

[306] Fix | Delete

$form = wpforms_decode( $form->post_content );

[307] Fix | Delete

}

[308] Fix | Delete

[309] Fix | Delete

return $form;

[310] Fix | Delete

}

[311] Fix | Delete

[312] Fix | Delete

/**

[313] Fix | Delete

* Fetch multiple forms.

[314] Fix | Delete

*

[315] Fix | Delete

* @since 1.5.8

[316] Fix | Delete

* @since 1.7.2 Added support for $args['search']['term'] - search form title or description by term.

[317] Fix | Delete

*

[318] Fix | Delete

* @param array $args Additional arguments array.

[319] Fix | Delete

*

[320] Fix | Delete

* @return array

[321] Fix | Delete

*/

[322] Fix | Delete

protected function get_multiple( array $args = [] ): array {

[323] Fix | Delete

[324] Fix | Delete

// phpcs:disable WPForms.PHP.ValidateHooks.InvalidHookName

[325] Fix | Delete

[326] Fix | Delete

/**

[327] Fix | Delete

* Allow developers to filter the get_multiple() arguments.

[328] Fix | Delete

*

[329] Fix | Delete

* @since 1.5.8

[330] Fix | Delete

*

[331] Fix | Delete

* @param array $args Arguments' array. Almost the same as for the `get_posts ()` function.

[332] Fix | Delete

* Additional element:

[333] Fix | Delete

* ['search']['term'] - search the form title or description by term.

[334] Fix | Delete

*/

[335] Fix | Delete

$args = (array) apply_filters( 'wpforms_get_multiple_forms_args', $args );

[336] Fix | Delete

[337] Fix | Delete

// phpcs:enable WPForms.PHP.ValidateHooks.InvalidHookName

[338] Fix | Delete

[339] Fix | Delete

// No ID provided, get multiple forms.

[340] Fix | Delete

$defaults = [

[341] Fix | Delete

'orderby' => 'id',

[342] Fix | Delete

'order' => 'ASC',

[343] Fix | Delete

'no_found_rows' => true,

[344] Fix | Delete

'nopaging' => true,

[345] Fix | Delete

'suppress_filters' => false,

[346] Fix | Delete

];

[347] Fix | Delete

[348] Fix | Delete

$args = wp_parse_args( $args, $defaults );

[349] Fix | Delete

[350] Fix | Delete

$post_type = $args['post_type'] ?? [];

[351] Fix | Delete

[352] Fix | Delete

// Post type should be one of the allowed post types.

[353] Fix | Delete

$post_type = array_intersect( (array) $post_type, self::POST_TYPES );

[354] Fix | Delete

[355] Fix | Delete

// If no valid (allowed) post types are provided, use the default one.

[356] Fix | Delete

$args['post_type'] = ! empty( $post_type ) ? $post_type : 'wpforms';

[357] Fix | Delete

[358] Fix | Delete

/**

[359] Fix | Delete

* Allow developers to execute some code before get_posts() call inside \WPForms_Form_Handler::get_multiple().

[360] Fix | Delete

*

[361] Fix | Delete

* @since 1.7.2

[362] Fix | Delete

*

[363] Fix | Delete

* @param array $args Arguments of the `get_posts()`.

[364] Fix | Delete

*/

[365] Fix | Delete

do_action( 'wpforms_form_handler_get_multiple_before_get_posts', $args );

[366] Fix | Delete

[367] Fix | Delete

$forms = get_posts( $args );

[368] Fix | Delete

[369] Fix | Delete

/**

[370] Fix | Delete

* Allow developers to execute some code right after the get_posts () call inside \WPForms_Form_Handler::get_multiple().

[371] Fix | Delete

*

[372] Fix | Delete

* @since 1.7.2

[373] Fix | Delete

*

[374] Fix | Delete

* @param array $args Arguments of the `get_posts`.

[375] Fix | Delete

* @param array $forms Forms data. Result of getting multiple forms.

[376] Fix | Delete

*/

[377] Fix | Delete

do_action( 'wpforms_form_handler_get_multiple_after_get_posts', $args, $forms );

[378] Fix | Delete

[379] Fix | Delete

/**

[380] Fix | Delete

* Allow developers to filter the result of get_multiple().

[381] Fix | Delete

*

[382] Fix | Delete

* @since 1.7.2

[383] Fix | Delete

*

[384] Fix | Delete

* @param array $forms Result of getting multiple forms.

[385] Fix | Delete

*/

[386] Fix | Delete

return apply_filters( 'wpforms_form_handler_get_multiple_forms_result', $forms );

[387] Fix | Delete

}

[388] Fix | Delete

[389] Fix | Delete

/**

[390] Fix | Delete

* Update the form status.

[391] Fix | Delete

*

[392] Fix | Delete

* @since 1.7.3

[393] Fix | Delete

*

[394] Fix | Delete

* @param int $form_id Form ID.

[395] Fix | Delete

* @param string $status New status.

[396] Fix | Delete

*

[397] Fix | Delete

* @return bool

[398] Fix | Delete

*/

[399] Fix | Delete

public function update_status( $form_id, $status ): bool {

[400] Fix | Delete

[401] Fix | Delete

// Status updates are used only in trash and restore actions,

[402] Fix | Delete

// which are actually part of the deletion operation.

[403] Fix | Delete

// Therefore, we should check the `delete_form_single` and not `edit_form_single` permission.

[404] Fix | Delete

if ( ! wpforms_current_user_can( 'delete_form_single', $form_id ) ) {

[405] Fix | Delete

return false;

[406] Fix | Delete

}

[407] Fix | Delete

[408] Fix | Delete

$form_id = absint( $form_id );

[409] Fix | Delete

$status = empty( $status ) ? 'publish' : sanitize_key( $status );

[410] Fix | Delete

[411] Fix | Delete

/**

[412] Fix | Delete

* Filters the allowed form statuses.

[413] Fix | Delete

*

[414] Fix | Delete

* @since 1.7.3

[415] Fix | Delete

*

[416] Fix | Delete

* @param array $allowed_statuses Array of allowed form statuses. Default: publish, trash.

[417] Fix | Delete

*/

[418] Fix | Delete

$allowed = (array) apply_filters( 'wpforms_form_handler_update_status_allowed', [ 'publish', 'trash' ] );

[419] Fix | Delete

[420] Fix | Delete

if ( ! in_array( $status, $allowed, true ) ) {

[421] Fix | Delete

return false;

[422] Fix | Delete

}

[423] Fix | Delete

[424] Fix | Delete

$result = wp_update_post(

[425] Fix | Delete

[

[426] Fix | Delete

'ID' => $form_id,

[427] Fix | Delete

'post_status' => $status,

[428] Fix | Delete

]

[429] Fix | Delete

);

[430] Fix | Delete

[431] Fix | Delete

/**

[432] Fix | Delete

* Allow developers to execute some code after changing form status.

[433] Fix | Delete

*

[434] Fix | Delete

* @since 1.8.1

[435] Fix | Delete

*

[436] Fix | Delete

* @param string $form_id Form ID.

[437] Fix | Delete

* @param string $status New form status, `publish` or `trash`.

[438] Fix | Delete

*/

[439] Fix | Delete

do_action( 'wpforms_form_handler_update_status', $form_id, $status );

[440] Fix | Delete

[441] Fix | Delete

return $result !== 0;

[442] Fix | Delete

}

[443] Fix | Delete

[444] Fix | Delete

/**

[445] Fix | Delete

* Delete all forms in the Trash.

[446] Fix | Delete

*

[447] Fix | Delete

* @since 1.7.3

[448] Fix | Delete

*

[449] Fix | Delete

* @return int|bool Number of deleted forms OR false.

[450] Fix | Delete

*/

[451] Fix | Delete

public function empty_trash() {

[452] Fix | Delete

[453] Fix | Delete

$forms = $this->get_multiple(

[454] Fix | Delete

[

[455] Fix | Delete

'post_type' => self::POST_TYPES,

[456] Fix | Delete

'post_status' => 'trash',

[457] Fix | Delete

'fields' => 'ids',

[458] Fix | Delete

'suppress_filters' => true, // phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.SuppressFilters_suppress_filters

[459] Fix | Delete

]

[460] Fix | Delete

);

[461] Fix | Delete

[462] Fix | Delete

if ( empty( $forms ) ) {

[463] Fix | Delete

return false;

[464] Fix | Delete

}

[465] Fix | Delete

[466] Fix | Delete

return $this->delete( $forms ) ? count( $forms ) : false;

[467] Fix | Delete

}

[468] Fix | Delete

[469] Fix | Delete

/**

[470] Fix | Delete

* Delete forms.

[471] Fix | Delete

*

[472] Fix | Delete

* @since 1.0.0

[473] Fix | Delete

*

[474] Fix | Delete

* @param array $ids Form IDs.

[475] Fix | Delete

*

[476] Fix | Delete

* @return bool

[477] Fix | Delete

*/

[478] Fix | Delete

public function delete( $ids = [] ): bool {

[479] Fix | Delete

[480] Fix | Delete

if ( ! is_array( $ids ) ) {

[481] Fix | Delete

$ids = [ $ids ];

[482] Fix | Delete

}

[483] Fix | Delete

[484] Fix | Delete

$ids = array_map( 'absint', $ids );

[485] Fix | Delete

[486] Fix | Delete

foreach ( $ids as $id ) {

[487] Fix | Delete

[488] Fix | Delete

// Check for permissions.

[489] Fix | Delete

if ( ! wpforms_current_user_can( 'delete_form_single', $id ) ) {

[490] Fix | Delete

return false;

[491] Fix | Delete

}

[492] Fix | Delete

[493] Fix | Delete

$entry_obj = wpforms()->obj( 'entry' );

[494] Fix | Delete

$entry_meta_obj = wpforms()->obj( 'entry_meta' );

[495] Fix | Delete

$entry_fields_obj = wpforms()->obj( 'entry_fields' );

[496] Fix | Delete

[497] Fix | Delete

if ( $entry_obj && $entry_meta_obj && $entry_fields_obj ) {

[498] Fix | Delete

$entry_obj->delete_by( 'form_id', $id );

[499] Fix | Delete