<?php

[0] Fix | Delete

[1] Fix | Delete

namespace WPForms\Frontend;

[2] Fix | Delete

[3] Fix | Delete

/**

[4] Fix | Delete

* AMP class.

[5] Fix | Delete

*

[6] Fix | Delete

* @since 1.8.1

[7] Fix | Delete

*/

[8] Fix | Delete

class Amp {

[9] Fix | Delete

[10] Fix | Delete

/**

[11] Fix | Delete

* Whether the current page is in AMP mode or not.

[12] Fix | Delete

*

[13] Fix | Delete

* @since 1.8.1

[14] Fix | Delete

*

[15] Fix | Delete

* @var bool

[16] Fix | Delete

*/

[17] Fix | Delete

private $is_amp_mode;

[18] Fix | Delete

[19] Fix | Delete

/**

[20] Fix | Delete

* Constructor.

[21] Fix | Delete

*

[22] Fix | Delete

* @since 1.8.1

[23] Fix | Delete

*/

[24] Fix | Delete

public function __construct() {

[25] Fix | Delete

[26] Fix | Delete

$this->hooks();

[27] Fix | Delete

}

[28] Fix | Delete

[29] Fix | Delete

/**

[30] Fix | Delete

* Register hooks.

[31] Fix | Delete

*

[32] Fix | Delete

* @since 1.8.1

[33] Fix | Delete

*/

[34] Fix | Delete

private function hooks() {

[35] Fix | Delete

[36] Fix | Delete

add_filter( 'amp_skip_post', [ $this, 'skip_post' ] );

[37] Fix | Delete

add_filter( 'wpforms_frontend_form_atts', [ $this, 'form_atts' ], -PHP_INT_MAX, 2 );

[38] Fix | Delete

add_action( 'wpforms_frontend_output', [ $this, 'output_state' ], -PHP_INT_MAX, 5 );

[39] Fix | Delete

}

[40] Fix | Delete

[41] Fix | Delete

/**

[42] Fix | Delete

* Check whether the current page is in AMP mode or not.

[43] Fix | Delete

*

[44] Fix | Delete

* @since 1.8.1

[45] Fix | Delete

*

[46] Fix | Delete

* @return bool True if the current page is in AMP mode.

[47] Fix | Delete

*/

[48] Fix | Delete

public function is_amp(): bool {

[49] Fix | Delete

[50] Fix | Delete

if ( is_null( $this->is_amp_mode ) ) {

[51] Fix | Delete

$this->is_amp_mode = wpforms_is_amp();

[52] Fix | Delete

}

[53] Fix | Delete

[54] Fix | Delete

return $this->is_amp_mode;

[55] Fix | Delete

}

[56] Fix | Delete

[57] Fix | Delete

/**

[58] Fix | Delete

* Stop AMP output.

[59] Fix | Delete

*

[60] Fix | Delete

* @since 1.8.1

[61] Fix | Delete

*

[62] Fix | Delete

* @param array $form_data Form data and settings.

[63] Fix | Delete

*

[64] Fix | Delete

* @return bool True if we need to stop the output.

[65] Fix | Delete

*/

[66] Fix | Delete

public function stop_output( $form_data ): bool {

[67] Fix | Delete

[68] Fix | Delete

// We need to stop output processing in case we are on AMP page.

[69] Fix | Delete

// phpcs:disable WPForms.PHP.ValidateHooks.InvalidHookName

[70] Fix | Delete

if ( ! $this->should_stop_output() ) {

[71] Fix | Delete

return false;

[72] Fix | Delete

}

[73] Fix | Delete

[74] Fix | Delete

$form_id = ! empty( $form_data['id'] ) ? (int) $form_data['id'] : 0;

[75] Fix | Delete

$full_page_url = home_url( add_query_arg( 'nonamp', '1' ) . '#wpforms-' . $form_id );

[76] Fix | Delete

[77] Fix | Delete

/**

[78] Fix | Delete

* Allow modifying the text or url for the full page on the AMP pages.

[79] Fix | Delete

*

[80] Fix | Delete

* @since 1.4.1.1

[81] Fix | Delete

* @since 1.7.1 Added $form_id, $full_page_url, and $form_data arguments.

[82] Fix | Delete

*

[83] Fix | Delete

* @param string $text Text.

[84] Fix | Delete

* @param int $form_id Form id.

[85] Fix | Delete

* @param string $full_page_url Full page url.

[86] Fix | Delete

* @param array $form_data Form data and settings.

[87] Fix | Delete

*

[88] Fix | Delete

* @return string

[89] Fix | Delete

*/

[90] Fix | Delete

$text = (string) apply_filters(

[91] Fix | Delete

'wpforms_frontend_shortcode_amp_text',

[92] Fix | Delete

sprintf( /* translators: %s - URL to a non-amp version of a page with the form. */

[93] Fix | Delete

__( '<a href="%s">Go to the full page</a> to view and submit the form.', 'wpforms-lite' ),

[94] Fix | Delete

esc_url( $full_page_url )

[95] Fix | Delete

),

[96] Fix | Delete

$form_id,

[97] Fix | Delete

$full_page_url,

[98] Fix | Delete

$form_data

[99] Fix | Delete

);

[100] Fix | Delete

[101] Fix | Delete

printf(

[102] Fix | Delete

'<p class="wpforms-shortcode-amp-text">%s</p>',

[103] Fix | Delete

wp_kses_post( $text )

[104] Fix | Delete

);

[105] Fix | Delete

[106] Fix | Delete

return true;

[107] Fix | Delete

// phpcs:enable WPForms.PHP.ValidateHooks.InvalidHookName

[108] Fix | Delete

}

[109] Fix | Delete

[110] Fix | Delete

/**

[111] Fix | Delete

* Whether output should be stopped.

[112] Fix | Delete

*

[113] Fix | Delete

* @since 1.9.0

[114] Fix | Delete

*

[115] Fix | Delete

* @return bool

[116] Fix | Delete

*/

[117] Fix | Delete

private function should_stop_output(): bool {

[118] Fix | Delete

[119] Fix | Delete

if ( ! $this->is_amp() ) {

[120] Fix | Delete

return false;

[121] Fix | Delete

}

[122] Fix | Delete

[123] Fix | Delete

/**

[124] Fix | Delete

* Filters PRO status of the plugin.

[125] Fix | Delete

* Returning `true` means that AMP stop loading.

[126] Fix | Delete

*

[127] Fix | Delete

* @since 1.5.4.2

[128] Fix | Delete

*

[129] Fix | Delete

* @param bool $pro Pro status.

[130] Fix | Delete

*/

[131] Fix | Delete

if ( apply_filters( 'wpforms_amp_pro', wpforms()->is_pro() ) ) { // phpcs:ignore WPForms.PHP.ValidateHooks.InvalidHookName

[132] Fix | Delete

return true;

[133] Fix | Delete

}

[134] Fix | Delete

[135] Fix | Delete

return (

[136] Fix | Delete

! defined( 'AMP__VERSION' ) ||

[137] Fix | Delete

version_compare( AMP__VERSION, '1.2', '<' ) ||

[138] Fix | Delete

! is_ssl()

[139] Fix | Delete

);

[140] Fix | Delete

}

[141] Fix | Delete

[142] Fix | Delete

/**

[143] Fix | Delete

* Disable AMP if query param is detected.

[144] Fix | Delete

*

[145] Fix | Delete

* This allows the full form to be accessible for Pro users or sites

[146] Fix | Delete

* that do not have SSL.

[147] Fix | Delete

*

[148] Fix | Delete

* @since 1.8.1

[149] Fix | Delete

*

[150] Fix | Delete

* @param bool $skip Skip AMP mode, display full post.

[151] Fix | Delete

*

[152] Fix | Delete

* @return bool

[153] Fix | Delete

*/

[154] Fix | Delete

public function skip_post( $skip ) {

[155] Fix | Delete

[156] Fix | Delete

// phpcs:ignore WordPress.Security.NonceVerification.Recommended

[157] Fix | Delete

return isset( $_GET['nonamp'] ) ? true : $skip;

[158] Fix | Delete

}

[159] Fix | Delete

[160] Fix | Delete

/**

[161] Fix | Delete

* Form attributes filter.

[162] Fix | Delete

*

[163] Fix | Delete

* @since 1.8.1

[164] Fix | Delete

*

[165] Fix | Delete

* @param array $form_atts Form attributes.

[166] Fix | Delete

* @param array $form_data Form data.

[167] Fix | Delete

*

[168] Fix | Delete

* @return array

[169] Fix | Delete

*/

[170] Fix | Delete

public function form_atts( $form_atts, $form_data ) {

[171] Fix | Delete

[172] Fix | Delete

if ( ! $this->is_amp() ) {

[173] Fix | Delete

return $form_atts;

[174] Fix | Delete

}

[175] Fix | Delete

[176] Fix | Delete

// Set submitting state.

[177] Fix | Delete

if ( ! isset( $form_atts['atts']['on'] ) ) {

[178] Fix | Delete

$form_atts['atts']['on'] = '';

[179] Fix | Delete

} else {

[180] Fix | Delete

$form_atts['atts']['on'] .= ';';

[181] Fix | Delete

}

[182] Fix | Delete

[183] Fix | Delete

$form_id = ! empty( $form_data['id'] ) ? (int) $form_data['id'] : 0;

[184] Fix | Delete

[185] Fix | Delete

$form_atts['atts']['on'] .= sprintf(

[186] Fix | Delete

'submit:AMP.setState( %1$s ); submit-success:AMP.setState( %2$s ); submit-error:AMP.setState( %2$s );',

[187] Fix | Delete

wp_json_encode(

[188] Fix | Delete

[

[189] Fix | Delete

$this->get_form_amp_state_id( $form_id ) => [ 'submitting' => true ],

[190] Fix | Delete

]

[191] Fix | Delete

),

[192] Fix | Delete

wp_json_encode(

[193] Fix | Delete

[

[194] Fix | Delete

$this->get_form_amp_state_id( $form_id ) => [ 'submitting' => false ],

[195] Fix | Delete

]

[196] Fix | Delete

)

[197] Fix | Delete

);

[198] Fix | Delete

[199] Fix | Delete

// Upgrade the form to be an amp-form to avoid sanitizer conversion.

[200] Fix | Delete

if ( isset( $form_atts['atts']['action'] ) ) {

[201] Fix | Delete

$form_atts['atts']['action-xhr'] = $form_atts['atts']['action'];

[202] Fix | Delete

$form_atts['atts']['verify-xhr'] = $form_atts['atts']['action-xhr'];

[203] Fix | Delete

[204] Fix | Delete

unset( $form_atts['atts']['action'] );

[205] Fix | Delete

}

[206] Fix | Delete

[207] Fix | Delete

return $form_atts;

[208] Fix | Delete

}

[209] Fix | Delete

[210] Fix | Delete

/**

[211] Fix | Delete

* Get the amp-state ID for a given form.

[212] Fix | Delete

*

[213] Fix | Delete

* @since 1.8.1

[214] Fix | Delete

*

[215] Fix | Delete

* @param int $form_id Form ID.

[216] Fix | Delete

*

[217] Fix | Delete

* @return string State ID.

[218] Fix | Delete

*/

[219] Fix | Delete

private function get_form_amp_state_id( $form_id ) {

[220] Fix | Delete

[221] Fix | Delete

return sprintf( 'wpforms_form_state_%d', $form_id );

[222] Fix | Delete

}

[223] Fix | Delete

[224] Fix | Delete

/**

[225] Fix | Delete

* Output AMP state.

[226] Fix | Delete

*

[227] Fix | Delete

* @since 1.8.1

[228] Fix | Delete

*

[229] Fix | Delete

* @param array $form_data Form data and settings.

[230] Fix | Delete

* @param null $deprecated Deprecated.

[231] Fix | Delete

* @param string $title Form title.

[232] Fix | Delete

* @param string $description Form description.

[233] Fix | Delete

* @param array $errors Errors.

[234] Fix | Delete

*

[235] Fix | Delete

* @noinspection PhpUnusedParameterInspection

[236] Fix | Delete

*/

[237] Fix | Delete

public function output_state( $form_data, $deprecated, $title, $description, $errors ) {

[238] Fix | Delete

[239] Fix | Delete

if ( ! $this->is_amp() ) {

[240] Fix | Delete

return;

[241] Fix | Delete

}

[242] Fix | Delete

[243] Fix | Delete

$state = [ 'submitting' => false ];

[244] Fix | Delete

[245] Fix | Delete

$form_id = ! empty( $form_data['id'] ) ? (int) $form_data['id'] : 0;

[246] Fix | Delete

[247] Fix | Delete

printf(

[248] Fix | Delete

'<amp-state id="%s"><script type="application/json">%s</script></amp-state>',

[249] Fix | Delete

$this->get_form_amp_state_id( $form_id ), // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped

[250] Fix | Delete

wp_json_encode( $state )

[251] Fix | Delete

);

[252] Fix | Delete

}

[253] Fix | Delete

[254] Fix | Delete

/**

[255] Fix | Delete

* Output submit success template.

[256] Fix | Delete

*

[257] Fix | Delete

* @since 1.8.1

[258] Fix | Delete

*

[259] Fix | Delete

* @param array $form_data Form data and settings.

[260] Fix | Delete

*

[261] Fix | Delete

* @return bool True if the template was printed.

[262] Fix | Delete

*/

[263] Fix | Delete

public function output_success_template( $form_data ) {

[264] Fix | Delete

[265] Fix | Delete

if ( ! $this->is_amp() ) {

[266] Fix | Delete

return false;

[267] Fix | Delete

}

[268] Fix | Delete

[269] Fix | Delete

$frontend = wpforms()->obj( 'frontend' );

[270] Fix | Delete

[271] Fix | Delete

if ( ! $frontend ) {

[272] Fix | Delete

return false;

[273] Fix | Delete

}

[274] Fix | Delete

[275] Fix | Delete

$frontend->assets_confirmation( $form_data );

[276] Fix | Delete

[277] Fix | Delete

$class = (int) wpforms_setting( 'disable-css', '1' ) === 1 ?

[278] Fix | Delete

'wpforms-confirmation-container-full' :

[279] Fix | Delete

'wpforms-confirmation-container';

[280] Fix | Delete

[281] Fix | Delete

printf(

[282] Fix | Delete

'<div submit-success><template type="amp-mustache"><div class="%s {{#redirecting}}wpforms-redirection-message{{/redirecting}}">{{{message}}}</div></template></div>',

[283] Fix | Delete

esc_attr( $class )

[284] Fix | Delete

);

[285] Fix | Delete

[286] Fix | Delete

return true;

[287] Fix | Delete

}

[288] Fix | Delete

[289] Fix | Delete

/**

[290] Fix | Delete

* Output submit error template.

[291] Fix | Delete

*

[292] Fix | Delete

* @since 1.8.1

[293] Fix | Delete

*

[294] Fix | Delete

* @return bool True if the template was printed.

[295] Fix | Delete

*/

[296] Fix | Delete

public function output_error_template() {

[297] Fix | Delete

[298] Fix | Delete

if ( ! $this->is_amp() ) {

[299] Fix | Delete

return false;

[300] Fix | Delete

}

[301] Fix | Delete

[302] Fix | Delete

echo '<div submit-error><template type="amp-mustache"><div class="wpforms-error-container"><p>{{{message}}}</p></div></template></div>';

[303] Fix | Delete

[304] Fix | Delete

return true;

[305] Fix | Delete

}

[306] Fix | Delete

[307] Fix | Delete

/**

[308] Fix | Delete

* Get text attribute.

[309] Fix | Delete

*

[310] Fix | Delete

* @since 1.8.1

[311] Fix | Delete

*

[312] Fix | Delete

* @param int $form_id Form ID.

[313] Fix | Delete

* @param array $settings Form settings.

[314] Fix | Delete

* @param string $submit Submit button text.

[315] Fix | Delete

*

[316] Fix | Delete

* @return string

[317] Fix | Delete

*/

[318] Fix | Delete

public function get_text_attr( $form_id, $settings, $submit ) {

[319] Fix | Delete

[320] Fix | Delete

return sprintf(

[321] Fix | Delete

'%s.submitting ? %s : %s',

[322] Fix | Delete

$this->get_form_amp_state_id( $form_id ),

[323] Fix | Delete

wp_json_encode( $settings['submit_text_processing'], JSON_UNESCAPED_UNICODE ),

[324] Fix | Delete

wp_json_encode( $submit, JSON_UNESCAPED_UNICODE )

[325] Fix | Delete

);

[326] Fix | Delete

}

[327] Fix | Delete

[328] Fix | Delete

/**

[329] Fix | Delete

* Output captcha.

[330] Fix | Delete

*

[331] Fix | Delete

* @since 1.8.1

[332] Fix | Delete

*

[333] Fix | Delete

* @param bool $is_recaptcha_v3 Whether we use v3.

[334] Fix | Delete

* @param array $captcha_settings Captcha settings.

[335] Fix | Delete

* @param array $form_data Form data.

[336] Fix | Delete

*

[337] Fix | Delete

* @return bool

[338] Fix | Delete

*/

[339] Fix | Delete

public function output_captcha( $is_recaptcha_v3, $captcha_settings, $form_data ) {

[340] Fix | Delete

[341] Fix | Delete

if ( ! $this->is_amp() ) {

[342] Fix | Delete

return false;

[343] Fix | Delete

}

[344] Fix | Delete

[345] Fix | Delete

if ( $is_recaptcha_v3 ) {

[346] Fix | Delete

[347] Fix | Delete

printf(

[348] Fix | Delete

'<amp-recaptcha-input name="wpforms[recaptcha]" data-sitekey="%s" data-action="%s" layout="nodisplay"></amp-recaptcha-input>',

[349] Fix | Delete

esc_attr( $captcha_settings['site_key'] ),

[350] Fix | Delete

esc_attr( 'wpforms_' . $form_data['id'] )

[351] Fix | Delete

);

[352] Fix | Delete

[353] Fix | Delete

return true;

[354] Fix | Delete

}

[355] Fix | Delete

[356] Fix | Delete

if ( is_super_admin() ) {

[357] Fix | Delete

[358] Fix | Delete

$captcha_provider = $captcha_settings['provider'] === 'hcaptcha' ? esc_html__( 'hCaptcha', 'wpforms-lite' ) : esc_html__( 'Google reCAPTCHA v2', 'wpforms-lite' );

[359] Fix | Delete

[360] Fix | Delete

echo '<div class="wpforms-notice wpforms-warning" style="margin: 20px 0;">';

[361] Fix | Delete

printf(

[362] Fix | Delete

wp_kses( /* translators: %1$s - CAPTCHA provider name, %2$s - URL to reCAPTCHA documentation. */

[363] Fix | Delete

__( '%1$s is not supported by AMP and is currently disabled.<br><a href="%2$s" rel="noopener noreferrer" target="_blank">Upgrade to reCAPTCHA v3</a> for full AMP support. <br><em>Please note: this message is only displayed to site administrators.</em>', 'wpforms-lite' ),

[364] Fix | Delete

[

[365] Fix | Delete

'a' => [

[366] Fix | Delete

'href' => [],

[367] Fix | Delete

'rel' => [],

[368] Fix | Delete

'target' => [],

[369] Fix | Delete

],

[370] Fix | Delete

'br' => [],

[371] Fix | Delete

'em' => [],

[372] Fix | Delete

]

[373] Fix | Delete

),

[374] Fix | Delete

$captcha_provider, // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped

[375] Fix | Delete

'https://wpforms.com/docs/setup-captcha-wpforms/'

[376] Fix | Delete

);

[377] Fix | Delete

echo '</div>';

[378] Fix | Delete

[379] Fix | Delete

return true;

[380] Fix | Delete

}

[381] Fix | Delete

[382] Fix | Delete

return false;

[383] Fix | Delete

}

[384] Fix | Delete

}

[385] Fix | Delete

[386] Fix | Delete