<?php

[0] Fix | Delete

[1] Fix | Delete

namespace WPForms\Admin\Builder;

[2] Fix | Delete

[3] Fix | Delete

use WPForms\Forms\Akismet;

[4] Fix | Delete

use WPForms_Builder_Panel_Settings;

[5] Fix | Delete

[6] Fix | Delete

/**

[7] Fix | Delete

* AntiSpam class.

[8] Fix | Delete

*

[9] Fix | Delete

* @since 1.7.8

[10] Fix | Delete

*/

[11] Fix | Delete

class AntiSpam {

[12] Fix | Delete

[13] Fix | Delete

/**

[14] Fix | Delete

* Form data and settings.

[15] Fix | Delete

*

[16] Fix | Delete

* @since 1.7.8

[17] Fix | Delete

*

[18] Fix | Delete

* @var array

[19] Fix | Delete

*/

[20] Fix | Delete

private $form_data;

[21] Fix | Delete

[22] Fix | Delete

/**

[23] Fix | Delete

* Init class.

[24] Fix | Delete

*

[25] Fix | Delete

* @since 1.7.8

[26] Fix | Delete

*/

[27] Fix | Delete

public function init() {

[28] Fix | Delete

[29] Fix | Delete

$this->hooks();

[30] Fix | Delete

}

[31] Fix | Delete

[32] Fix | Delete

/**

[33] Fix | Delete

* Register hooks.

[34] Fix | Delete

*

[35] Fix | Delete

* @since 1.7.8

[36] Fix | Delete

*/

[37] Fix | Delete

protected function hooks() {

[38] Fix | Delete

[39] Fix | Delete

add_action( 'wpforms_form_settings_panel_content', [ $this, 'panel_content' ], 10, 2 );

[40] Fix | Delete

}

[41] Fix | Delete

[42] Fix | Delete

/**

[43] Fix | Delete

* Add a content for `Spam Protection and Security` panel.

[44] Fix | Delete

*

[45] Fix | Delete

* @since 1.7.8

[46] Fix | Delete

*

[47] Fix | Delete

* @param WPForms_Builder_Panel_Settings $instance Settings panel instance.

[48] Fix | Delete

*/

[49] Fix | Delete

public function panel_content( $instance ) {

[50] Fix | Delete

[51] Fix | Delete

$this->form_data = $this->update_settings_form_data( $instance->form_data );

[52] Fix | Delete

[53] Fix | Delete

echo '<div class="wpforms-panel-content-section wpforms-panel-content-section-anti_spam">';

[54] Fix | Delete

echo '<div class="wpforms-panel-content-section-title">';

[55] Fix | Delete

esc_html_e( 'Spam Protection and Security', 'wpforms-lite' );

[56] Fix | Delete

echo '</div>';

[57] Fix | Delete

[58] Fix | Delete

$antispam = wpforms_panel_field(

[59] Fix | Delete

'toggle',

[60] Fix | Delete

'settings',

[61] Fix | Delete

'antispam_v3',

[62] Fix | Delete

$this->form_data,

[63] Fix | Delete

__( 'Enable modern anti-spam protection', 'wpforms-lite' ),

[64] Fix | Delete

[

[65] Fix | Delete

'value' => (int) ! empty( $this->form_data['settings']['antispam_v3'] ),

[66] Fix | Delete

'tooltip' => __( 'Turn on invisible modern spam protection.', 'wpforms-lite' ),

[67] Fix | Delete

],

[68] Fix | Delete

false

[69] Fix | Delete

);

[70] Fix | Delete

[71] Fix | Delete

wpforms_panel_fields_group(

[72] Fix | Delete

$antispam,

[73] Fix | Delete

[

[74] Fix | Delete

'description' => __( 'Behind-the-scenes spam filtering that\'s invisible to your visitors.', 'wpforms-lite' ),

[75] Fix | Delete

'title' => __( 'Protection', 'wpforms-lite' ),

[76] Fix | Delete

]

[77] Fix | Delete

);

[78] Fix | Delete

[79] Fix | Delete

if ( ! empty( $this->form_data['settings']['antispam'] ) && empty( $this->form_data['settings']['antispam_v3'] ) ) {

[80] Fix | Delete

wpforms_panel_field(

[81] Fix | Delete

'toggle',

[82] Fix | Delete

'settings',

[83] Fix | Delete

'antispam',

[84] Fix | Delete

$this->form_data,

[85] Fix | Delete

__( 'Enable anti-spam protection', 'wpforms-lite' ),

[86] Fix | Delete

[

[87] Fix | Delete

'tooltip' => __( 'Turn on invisible spam protection.', 'wpforms-lite' ),

[88] Fix | Delete

]

[89] Fix | Delete

);

[90] Fix | Delete

}

[91] Fix | Delete

[92] Fix | Delete

if ( ! empty( $this->form_data['settings']['honeypot'] ) && empty( $this->form_data['settings']['antispam_v3'] ) ) {

[93] Fix | Delete

wpforms_panel_field(

[94] Fix | Delete

'toggle',

[95] Fix | Delete

'settings',

[96] Fix | Delete

'honeypot',

[97] Fix | Delete

$this->form_data,

[98] Fix | Delete

__( 'Enable anti-spam honeypot', 'wpforms-lite' )

[99] Fix | Delete

);

[100] Fix | Delete

}

[101] Fix | Delete

[102] Fix | Delete

$this->akismet_settings();

[103] Fix | Delete

$this->store_spam_entries_settings();

[104] Fix | Delete

$this->time_limit_settings();

[105] Fix | Delete

$this->captcha_settings();

[106] Fix | Delete

[107] Fix | Delete

// Hidden setting to store blocked entries by filtering as a spam.

[108] Fix | Delete

// This setting is needed to keep backward compatibility with old forms.

[109] Fix | Delete

wpforms_panel_field(

[110] Fix | Delete

'checkbox',

[111] Fix | Delete

'anti_spam',

[112] Fix | Delete

'filtering_store_spam',

[113] Fix | Delete

$this->form_data,

[114] Fix | Delete

'',

[115] Fix | Delete

[

[116] Fix | Delete

'parent' => 'settings',

[117] Fix | Delete

'class' => 'wpforms-hidden',

[118] Fix | Delete

]

[119] Fix | Delete

);

[120] Fix | Delete

[121] Fix | Delete

/**

[122] Fix | Delete

* Fires once in the end of content panel before Also Available section.

[123] Fix | Delete

*

[124] Fix | Delete

* @since 1.7.8

[125] Fix | Delete

*

[126] Fix | Delete

* @param array $form_data Form data and settings.

[127] Fix | Delete

*/

[128] Fix | Delete

do_action( 'wpforms_admin_builder_anti_spam_panel_content', $this->form_data );

[129] Fix | Delete

[130] Fix | Delete

wpforms_panel_fields_group(

[131] Fix | Delete

$this->get_also_available_block(),

[132] Fix | Delete

[

[133] Fix | Delete

'unfoldable' => true,

[134] Fix | Delete

'default' => 'opened',

[135] Fix | Delete

'group' => 'also_available',

[136] Fix | Delete

'title' => __( 'Also Available', 'wpforms-lite' ),

[137] Fix | Delete

'borders' => [ 'top' ],

[138] Fix | Delete

]

[139] Fix | Delete

);

[140] Fix | Delete

[141] Fix | Delete

echo '</div>';

[142] Fix | Delete

}

[143] Fix | Delete

[144] Fix | Delete

/**

[145] Fix | Delete

* Update the form data on the builder settings panel.

[146] Fix | Delete

*

[147] Fix | Delete

* @since 1.9.2

[148] Fix | Delete

*

[149] Fix | Delete

* @param array $form_data Form data.

[150] Fix | Delete

*

[151] Fix | Delete

* @return array

[152] Fix | Delete

*/

[153] Fix | Delete

private function update_settings_form_data( array $form_data ): array {

[154] Fix | Delete

[155] Fix | Delete

if ( ! $form_data ) {

[156] Fix | Delete

return $form_data;

[157] Fix | Delete

}

[158] Fix | Delete

[159] Fix | Delete

// Update `Filtering` store spam entries behaviour.

[160] Fix | Delete

// Enable for new forms and old forms without any `Filtering` setting enabled.

[161] Fix | Delete

if (

[162] Fix | Delete

empty( $form_data['settings']['anti_spam']['filtering_store_spam'] ) &&

[163] Fix | Delete

empty( $form_data['settings']['anti_spam']['country_filter']['enable'] ) &&

[164] Fix | Delete

empty( $form_data['settings']['anti_spam']['keyword_filter']['enable'] )

[165] Fix | Delete

) {

[166] Fix | Delete

$form_data['settings']['anti_spam']['filtering_store_spam'] = true;

[167] Fix | Delete

}

[168] Fix | Delete

[169] Fix | Delete

return $form_data;

[170] Fix | Delete

}

[171] Fix | Delete

[172] Fix | Delete

/**

[173] Fix | Delete

* Output the *CAPTCHA settings.

[174] Fix | Delete

*

[175] Fix | Delete

* @since 1.7.8

[176] Fix | Delete

*/

[177] Fix | Delete

private function captcha_settings() {

[178] Fix | Delete

[179] Fix | Delete

$captcha_settings = wpforms_get_captcha_settings();

[180] Fix | Delete

[181] Fix | Delete

if ( empty( $captcha_settings['provider'] ) || $captcha_settings['provider'] === 'none' ) {

[182] Fix | Delete

return;

[183] Fix | Delete

}

[184] Fix | Delete

[185] Fix | Delete

if (

[186] Fix | Delete

$captcha_settings['provider'] !== 'hcaptcha' && (

[187] Fix | Delete

empty( $captcha_settings['site_key'] ) || empty( $captcha_settings['secret_key'] )

[188] Fix | Delete

)

[189] Fix | Delete

) {

[190] Fix | Delete

return;

[191] Fix | Delete

}

[192] Fix | Delete

[193] Fix | Delete

if ( $captcha_settings['provider'] === 'hcaptcha' && empty( $captcha_settings['site_key'] ) ) {

[194] Fix | Delete

return;

[195] Fix | Delete

}

[196] Fix | Delete

[197] Fix | Delete

$captcha_types = [

[198] Fix | Delete

'hcaptcha' => __( 'Enable hCaptcha', 'wpforms-lite' ),

[199] Fix | Delete

'turnstile' => __( 'Enable Cloudflare Turnstile', 'wpforms-lite' ),

[200] Fix | Delete

'recaptcha' => [

[201] Fix | Delete

'v2' => __( 'Enable Google Checkbox v2 reCAPTCHA', 'wpforms-lite' ),

[202] Fix | Delete

'invisible' => __( 'Enable Google Invisible v2 reCAPTCHA', 'wpforms-lite' ),

[203] Fix | Delete

'v3' => __( 'Enable Google v3 reCAPTCHA', 'wpforms-lite' ),

[204] Fix | Delete

],

[205] Fix | Delete

];

[206] Fix | Delete

[207] Fix | Delete

$is_recaptcha = $captcha_settings['provider'] === 'recaptcha';

[208] Fix | Delete

$captcha_types = $is_recaptcha ? $captcha_types['recaptcha'] : $captcha_types;

[209] Fix | Delete

$captcha_key = $is_recaptcha ? $captcha_settings['recaptcha_type'] : $captcha_settings['provider'];

[210] Fix | Delete

$label = ! empty( $captcha_types[ $captcha_key ] ) ? $captcha_types[ $captcha_key ] : '';

[211] Fix | Delete

[212] Fix | Delete

$recaptcha = wpforms_panel_field(

[213] Fix | Delete

'toggle',

[214] Fix | Delete

'settings',

[215] Fix | Delete

'recaptcha',

[216] Fix | Delete

$this->form_data,

[217] Fix | Delete

$label,

[218] Fix | Delete

[

[219] Fix | Delete

'data' => [

[220] Fix | Delete

'provider' => $captcha_settings['provider'],

[221] Fix | Delete

],

[222] Fix | Delete

'tooltip' => __( 'Enable third-party CAPTCHAs to prevent form submissions from bots.', 'wpforms-lite' ),

[223] Fix | Delete

],

[224] Fix | Delete

false

[225] Fix | Delete

);

[226] Fix | Delete

[227] Fix | Delete

wpforms_panel_fields_group(

[228] Fix | Delete

$recaptcha,

[229] Fix | Delete

[

[230] Fix | Delete

'description' => __( 'Automated tests that help to prevent bots from submitting your forms.', 'wpforms-lite' ),

[231] Fix | Delete

'title' => __( 'CAPTCHA', 'wpforms-lite' ),

[232] Fix | Delete

'borders' => [ 'top' ],

[233] Fix | Delete

]

[234] Fix | Delete

);

[235] Fix | Delete

}

[236] Fix | Delete

[237] Fix | Delete

/**

[238] Fix | Delete

* Output the Spam Entries Store settings.

[239] Fix | Delete

*

[240] Fix | Delete

* @since 1.8.3

[241] Fix | Delete

*/

[242] Fix | Delete

public function store_spam_entries_settings() {

[243] Fix | Delete

[244] Fix | Delete

if ( ! wpforms()->is_pro() ) {

[245] Fix | Delete

return;

[246] Fix | Delete

}

[247] Fix | Delete

[248] Fix | Delete

$disable_entries = $this->form_data['settings']['disable_entries'] ?? 0;

[249] Fix | Delete

[250] Fix | Delete

wpforms_panel_field(

[251] Fix | Delete

'toggle',

[252] Fix | Delete

'settings',

[253] Fix | Delete

'store_spam_entries',

[254] Fix | Delete

$this->form_data,

[255] Fix | Delete

__( 'Store spam entries in the database', 'wpforms-lite' ),

[256] Fix | Delete

[

[257] Fix | Delete

'value' => $this->form_data['settings']['store_spam_entries'] ?? 0,

[258] Fix | Delete

'class' => $disable_entries ? 'wpforms-hidden' : '',

[259] Fix | Delete

]

[260] Fix | Delete

);

[261] Fix | Delete

}

[262] Fix | Delete

[263] Fix | Delete

/**

[264] Fix | Delete

* Output the Time Limit settings.

[265] Fix | Delete

*

[266] Fix | Delete

* @since 1.8.3

[267] Fix | Delete

*/

[268] Fix | Delete

private function time_limit_settings() {

[269] Fix | Delete

[270] Fix | Delete

wpforms_panel_field(

[271] Fix | Delete

'toggle',

[272] Fix | Delete

'anti_spam',

[273] Fix | Delete

'enable',

[274] Fix | Delete

$this->form_data,

[275] Fix | Delete

__( 'Enable minimum time to submit', 'wpforms-lite' ),

[276] Fix | Delete

[

[277] Fix | Delete

'parent' => 'settings',

[278] Fix | Delete

'subsection' => 'time_limit',

[279] Fix | Delete

'tooltip' => __( 'Set a minimum amount of time a user must spend on a form before submitting.', 'wpforms-lite' ),

[280] Fix | Delete

'input_class' => 'wpforms-panel-field-toggle-next-field',

[281] Fix | Delete

]

[282] Fix | Delete

);

[283] Fix | Delete

[284] Fix | Delete

wpforms_panel_field(

[285] Fix | Delete

'text',

[286] Fix | Delete

'anti_spam',

[287] Fix | Delete

'duration',

[288] Fix | Delete

$this->form_data,

[289] Fix | Delete

__( 'Minimum time to submit', 'wpforms-lite' ),

[290] Fix | Delete

[

[291] Fix | Delete

'parent' => 'settings',

[292] Fix | Delete

'subsection' => 'time_limit',

[293] Fix | Delete

'type' => 'number',

[294] Fix | Delete

'min' => 1,

[295] Fix | Delete

'default' => 2,

[296] Fix | Delete

'after' => sprintf( '<span class="wpforms-panel-field-after">%s</span>', __( 'seconds', 'wpforms-lite' ) ),

[297] Fix | Delete

]

[298] Fix | Delete

);

[299] Fix | Delete

}

[300] Fix | Delete

[301] Fix | Delete

/**

[302] Fix | Delete

* Output the Akismet settings.

[303] Fix | Delete

*

[304] Fix | Delete

* @since 1.7.8

[305] Fix | Delete

*/

[306] Fix | Delete

private function akismet_settings() {

[307] Fix | Delete

[308] Fix | Delete

if ( ! Akismet::is_installed() ) {

[309] Fix | Delete

return;

[310] Fix | Delete

}

[311] Fix | Delete

[312] Fix | Delete

$args = [];

[313] Fix | Delete

[314] Fix | Delete

if ( ! Akismet::is_configured() ) {

[315] Fix | Delete

$args['data']['akismet-status'] = 'akismet_no_api_key';

[316] Fix | Delete

}

[317] Fix | Delete

[318] Fix | Delete

if ( ! Akismet::is_activated() ) {

[319] Fix | Delete

$args['data']['akismet-status'] = 'akismet_not_activated';

[320] Fix | Delete

}

[321] Fix | Delete

[322] Fix | Delete

// If Akismet isn't available, disable the Akismet toggle.

[323] Fix | Delete

if ( isset( $args['data'] ) ) {

[324] Fix | Delete

$args['input_class'] = 'wpforms-akismet-disabled';

[325] Fix | Delete

$args['value'] = '0';

[326] Fix | Delete

}

[327] Fix | Delete

[328] Fix | Delete

wpforms_panel_field(

[329] Fix | Delete

'toggle',

[330] Fix | Delete

'settings',

[331] Fix | Delete

'akismet',

[332] Fix | Delete

$this->form_data,

[333] Fix | Delete

__( 'Enable Akismet anti-spam protection', 'wpforms-lite' ),

[334] Fix | Delete

$args

[335] Fix | Delete

);

[336] Fix | Delete

}

[337] Fix | Delete

[338] Fix | Delete

/**

[339] Fix | Delete

* Get the Also Available block.

[340] Fix | Delete

*

[341] Fix | Delete

* @since 1.7.8

[342] Fix | Delete

*

[343] Fix | Delete

* @return string

[344] Fix | Delete

*/

[345] Fix | Delete

private function get_also_available_block() {

[346] Fix | Delete

[347] Fix | Delete

$get_started_button_text = __( 'Get Started &rarr;', 'wpforms-lite' );

[348] Fix | Delete

$upgrade_to_pro_text = __( 'Upgrade to Pro', 'wpforms-lite' );

[349] Fix | Delete

$captcha_settings = wpforms_get_captcha_settings();

[350] Fix | Delete

$upgrade_url = 'https://wpforms.com/lite-upgrade/';

[351] Fix | Delete

$utm_medium = 'Builder Settings';

[352] Fix | Delete

[353] Fix | Delete

$blocks = [

[354] Fix | Delete

'country_filter' => [

[355] Fix | Delete

'logo' => WPFORMS_PLUGIN_URL . 'assets/images/anti-spam/country-filter.svg',

[356] Fix | Delete

'title' => __( 'Country Filter', 'wpforms-lite' ),

[357] Fix | Delete

'description' => __( 'Stop spam at its source. Allow or deny entries from specific countries.', 'wpforms-lite' ),

[358] Fix | Delete

'link' => wpforms_utm_link( $upgrade_url, $utm_medium, 'Country Filter Feature' ),

[359] Fix | Delete

'link_text' => $upgrade_to_pro_text,

[360] Fix | Delete

'class' => 'wpforms-panel-content-also-available-item-upgrade-to-pro',

[361] Fix | Delete

'show' => ! wpforms()->is_pro(),

[362] Fix | Delete

],

[363] Fix | Delete

'keyword_filter' => [

[364] Fix | Delete

'logo' => WPFORMS_PLUGIN_URL . 'assets/images/anti-spam/keyword-filter.svg',

[365] Fix | Delete

'title' => __( 'Keyword Filter', 'wpforms-lite' ),

[366] Fix | Delete

'description' => __( 'Block form entries that contain specific words or phrases that you define.', 'wpforms-lite' ),

[367] Fix | Delete

'link' => wpforms_utm_link( $upgrade_url, $utm_medium, 'Keyword Filter Feature' ),

[368] Fix | Delete

'link_text' => $upgrade_to_pro_text,

[369] Fix | Delete

'class' => 'wpforms-panel-content-also-available-item-upgrade-to-pro',

[370] Fix | Delete

'show' => ! wpforms()->is_pro(),

[371] Fix | Delete

],

[372] Fix | Delete

'custom_captcha' => [

[373] Fix | Delete

'logo' => WPFORMS_PLUGIN_URL . 'assets/images/anti-spam/custom-captcha.svg',

[374] Fix | Delete

'title' => __( 'Custom Captcha', 'wpforms-lite' ),

[375] Fix | Delete

'description' => __( 'Ask custom questions or require your visitor to answer a random math puzzle.', 'wpforms-lite' ),

[376] Fix | Delete

'link' => wpforms()->is_pro() ? '#' : wpforms_utm_link( $upgrade_url, $utm_medium, 'Custom Captcha Addon' ),

[377] Fix | Delete

'link_text' => wpforms()->is_pro() ? __( 'Add to Form', 'wpforms-lite' ) : $upgrade_to_pro_text,

[378] Fix | Delete

'class' => wpforms()->is_pro() ? 'wpforms-panel-content-also-available-item-add-captcha' : 'wpforms-panel-content-also-available-item-upgrade-to-pro',

[379] Fix | Delete

'show' => true,

[380] Fix | Delete

],

[381] Fix | Delete

'reCAPTCHA' => [

[382] Fix | Delete

'logo' => WPFORMS_PLUGIN_URL . 'assets/images/anti-spam/recaptcha.svg',

[383] Fix | Delete

'title' => 'reCAPTCHA',

[384] Fix | Delete

'description' => __( 'Add Google\'s free anti-spam service and choose between visible or invisible CAPTCHAs.','wpforms-lite' ),

[385] Fix | Delete

'link' => wpforms_utm_link( 'https://wpforms.com/docs/how-to-set-up-and-use-recaptcha-in-wpforms/', $utm_medium, 'reCAPTCHA Feature' ),

[386] Fix | Delete

'link_text' => $get_started_button_text,

[387] Fix | Delete

'show' => $captcha_settings['provider'] !== 'recaptcha' || empty( wpforms_setting( 'captcha-provider' ) ),

[388] Fix | Delete

],

[389] Fix | Delete

'hCaptcha' => [

[390] Fix | Delete

'logo' => WPFORMS_PLUGIN_URL . 'assets/images/anti-spam/hcaptcha.svg',

[391] Fix | Delete

'title' => 'hCaptcha',

[392] Fix | Delete

'description' => __( 'Turn on free, privacy-oriented spam prevention that displays a visual CAPTCHA.','wpforms-lite' ),

[393] Fix | Delete

'link' => wpforms_utm_link( 'https://wpforms.com/docs/how-to-set-up-and-use-hcaptcha-in-wpforms/', $utm_medium, 'hCaptcha Feature' ),

[394] Fix | Delete

'link_text' => $get_started_button_text,

[395] Fix | Delete

'show' => $captcha_settings['provider'] !== 'hcaptcha',

[396] Fix | Delete

],

[397] Fix | Delete

'turnstile' => [

[398] Fix | Delete

'logo' => WPFORMS_PLUGIN_URL . 'assets/images/anti-spam/cloudflare.svg',

[399] Fix | Delete

'title' => 'Cloudflare Turnstile',

[400] Fix | Delete

'description' => __( 'Enable free, CAPTCHA-like spam protection that protects data privacy.','wpforms-lite' ),

[401] Fix | Delete

'link' => wpforms_utm_link( 'https://wpforms.com/docs/setting-up-cloudflare-turnstile/', $utm_medium, 'Cloudflare Turnstile Feature' ),

[402] Fix | Delete

'link_text' => $get_started_button_text,

[403] Fix | Delete

'show' => $captcha_settings['provider'] !== 'turnstile',

[404] Fix | Delete

],

[405] Fix | Delete

'akismet' => [

[406] Fix | Delete

'logo' => WPFORMS_PLUGIN_URL . 'assets/images/anti-spam/akismet.svg',

[407] Fix | Delete

'title' => 'Akismet',

[408] Fix | Delete

'description' => __( 'Integrate the powerful spam-fighting service trusted by millions of sites.','wpforms-lite' ),

[409] Fix | Delete

'link' => wpforms_utm_link( 'https://wpforms.com/docs/setting-up-akismet-anti-spam-protection/', $utm_medium, 'Akismet Feature' ),

[410] Fix | Delete

'link_text' => $get_started_button_text,

[411] Fix | Delete

'show' => ! Akismet::is_installed(),

[412] Fix | Delete

],

[413] Fix | Delete

];

[414] Fix | Delete

[415] Fix | Delete

return wpforms_render(

[416] Fix | Delete

'builder/antispam/also-available',

[417] Fix | Delete

[ 'blocks' => $blocks ],

[418] Fix | Delete

true

[419] Fix | Delete

);

[420] Fix | Delete

}

[421] Fix | Delete

}

[422] Fix | Delete

[423] Fix | Delete