<?php

[0] Fix | Delete

[1] Fix | Delete

// phpcs:disable Generic.Commenting.DocComment.MissingShort

[2] Fix | Delete

/** @noinspection PhpIllegalPsrClassPathInspection */

[3] Fix | Delete

/** @noinspection AutoloadingIssuesInspection */

[4] Fix | Delete

// phpcs:enable Generic.Commenting.DocComment.MissingShort

[5] Fix | Delete

[6] Fix | Delete

// phpcs:ignore WPForms.PHP.UseStatement.UnusedUseStatement

[7] Fix | Delete

use WPForms\Emails\Mailer;

[8] Fix | Delete

use WPForms\Emails\Notifications;

[9] Fix | Delete

[10] Fix | Delete

/**

[11] Fix | Delete

* Process and validate form entries.

[12] Fix | Delete

*

[13] Fix | Delete

* @since 1.0.0

[14] Fix | Delete

*/

[15] Fix | Delete

class WPForms_Process {

[16] Fix | Delete

[17] Fix | Delete

/**

[18] Fix | Delete

* Store errors.

[19] Fix | Delete

*

[20] Fix | Delete

* @since 1.0.0

[21] Fix | Delete

*

[22] Fix | Delete

* @var array

[23] Fix | Delete

*/

[24] Fix | Delete

public $errors;

[25] Fix | Delete

[26] Fix | Delete

/**

[27] Fix | Delete

* Store spam errors.

[28] Fix | Delete

*

[29] Fix | Delete

* @since 1.8.3

[30] Fix | Delete

*

[31] Fix | Delete

* @var array

[32] Fix | Delete

*/

[33] Fix | Delete

public $spam_errors;

[34] Fix | Delete

[35] Fix | Delete

/**

[36] Fix | Delete

* Spam reason.

[37] Fix | Delete

*

[38] Fix | Delete

* @since 1.8.3

[39] Fix | Delete

*

[40] Fix | Delete

* @var string

[41] Fix | Delete

*/

[42] Fix | Delete

public $spam_reason;

[43] Fix | Delete

[44] Fix | Delete

/**

[45] Fix | Delete

* Confirmation message.

[46] Fix | Delete

*

[47] Fix | Delete

* @since 1.5.3

[48] Fix | Delete

*

[49] Fix | Delete

* @var string

[50] Fix | Delete

*/

[51] Fix | Delete

public $confirmation_message;

[52] Fix | Delete

[53] Fix | Delete

/**

[54] Fix | Delete

* Current confirmation.

[55] Fix | Delete

*

[56] Fix | Delete

* @since 1.6.9

[57] Fix | Delete

*

[58] Fix | Delete

* @var array

[59] Fix | Delete

*/

[60] Fix | Delete

private $confirmation;

[61] Fix | Delete

[62] Fix | Delete

/**

[63] Fix | Delete

* Store formatted fields.

[64] Fix | Delete

*

[65] Fix | Delete

* @since 1.0.0

[66] Fix | Delete

*

[67] Fix | Delete

* @var array

[68] Fix | Delete

*/

[69] Fix | Delete

public $fields;

[70] Fix | Delete

[71] Fix | Delete

/**

[72] Fix | Delete

* Store the ID of a successful entry.

[73] Fix | Delete

*

[74] Fix | Delete

* @since 1.2.3

[75] Fix | Delete

*

[76] Fix | Delete

* @var int

[77] Fix | Delete

*/

[78] Fix | Delete

public $entry_id = 0;

[79] Fix | Delete

[80] Fix | Delete

/**

[81] Fix | Delete

* Form data and settings.

[82] Fix | Delete

*

[83] Fix | Delete

* @since 1.4.5

[84] Fix | Delete

*

[85] Fix | Delete

* @var array

[86] Fix | Delete

*/

[87] Fix | Delete

public $form_data;

[88] Fix | Delete

[89] Fix | Delete

/**

[90] Fix | Delete

* If a valid return has been processed.

[91] Fix | Delete

*

[92] Fix | Delete

* @since 1.4.5

[93] Fix | Delete

*

[94] Fix | Delete

* @var bool

[95] Fix | Delete

*/

[96] Fix | Delete

public $valid_hash = false;

[97] Fix | Delete

[98] Fix | Delete

/**

[99] Fix | Delete

* Email handler.

[100] Fix | Delete

*

[101] Fix | Delete

* @since 1.9.4

[102] Fix | Delete

*

[103] Fix | Delete

* @var mixed|Mailer|WPForms_WP_Emails|null

[104] Fix | Delete

*/

[105] Fix | Delete

private $email_handler;

[106] Fix | Delete

[107] Fix | Delete

/**

[108] Fix | Delete

* Primary class constructor.

[109] Fix | Delete

*

[110] Fix | Delete

* @since 1.0.0

[111] Fix | Delete

*/

[112] Fix | Delete

public function __construct() {

[113] Fix | Delete

[114] Fix | Delete

$this->hooks();

[115] Fix | Delete

}

[116] Fix | Delete

[117] Fix | Delete

/**

[118] Fix | Delete

* Register hooks.

[119] Fix | Delete

*

[120] Fix | Delete

* @since 1.8.3

[121] Fix | Delete

*/

[122] Fix | Delete

private function hooks() {

[123] Fix | Delete

[124] Fix | Delete

add_action( 'wp', [ $this, 'listen' ] );

[125] Fix | Delete

add_action( 'wp_ajax_wpforms_submit', [ $this, 'ajax_submit' ] );

[126] Fix | Delete

add_action( 'wp_ajax_nopriv_wpforms_submit', [ $this, 'ajax_submit' ] );

[127] Fix | Delete

add_filter( 'wpforms_ajax_submit_redirect', [ $this, 'maybe_open_in_new_tab' ] );

[128] Fix | Delete

add_filter( 'wpforms_smarttags_process_value', [ Notifications::class, 'filter_smarttags_process_value' ], PHP_INT_MAX, 6 );

[129] Fix | Delete

}

[130] Fix | Delete

[131] Fix | Delete

/**

[132] Fix | Delete

* Listen to see if this is a return callback or a posted form entry.

[133] Fix | Delete

*

[134] Fix | Delete

* @since 1.0.0

[135] Fix | Delete

*/

[136] Fix | Delete

public function listen() {

[137] Fix | Delete

[138] Fix | Delete

// Catch the post_max_size overflow.

[139] Fix | Delete

if ( $this->post_max_size_overflow() ) {

[140] Fix | Delete

return;

[141] Fix | Delete

}

[142] Fix | Delete

[143] Fix | Delete

// phpcs:disable WordPress.Security.NonceVerification

[144] Fix | Delete

if ( ! empty( $_GET['wpforms_return'] ) ) {

[145] Fix | Delete

// Additional redirect trigger for addons.

[146] Fix | Delete

$this->entry_confirmation_redirect( '', sanitize_text_field( wp_unslash( $_GET['wpforms_return'] ) ) );

[147] Fix | Delete

}

[148] Fix | Delete

[149] Fix | Delete

$form_id = ! empty( $_POST['wpforms']['id'] ) ? absint( $_POST['wpforms']['id'] ) : 0;

[150] Fix | Delete

[151] Fix | Delete

if ( ! $form_id ) {

[152] Fix | Delete

return;

[153] Fix | Delete

}

[154] Fix | Delete

[155] Fix | Delete

// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

[156] Fix | Delete

$this->process( wp_unslash( $_POST['wpforms'] ) );

[157] Fix | Delete

// phpcs:enable WordPress.Security.NonceVerification

[158] Fix | Delete

[159] Fix | Delete

/**

[160] Fix | Delete

* Runs right after the processing form entry.

[161] Fix | Delete

*

[162] Fix | Delete

* @since 1.9.0

[163] Fix | Delete

*

[164] Fix | Delete

* @param array $fields Entry fields data.

[165] Fix | Delete

* @param array $entry_id Entry ID.

[166] Fix | Delete

* @param array $form_data Form data.

[167] Fix | Delete

*/

[168] Fix | Delete

do_action( 'wpforms_process_after', $this->fields, $this->entry_id, $this->form_data );

[169] Fix | Delete

[170] Fix | Delete

if ( ! wpforms_is_amp() ) {

[171] Fix | Delete

return;

[172] Fix | Delete

}

[173] Fix | Delete

[174] Fix | Delete

// Send 400 Bad Request when there are errors.

[175] Fix | Delete

if ( empty( $this->errors[ $form_id ] ) ) {

[176] Fix | Delete

$this->entry_confirmation_redirect( $this->form_data );

[177] Fix | Delete

wp_send_json(

[178] Fix | Delete

[

[179] Fix | Delete

'message' => $this->get_confirmation_message( $this->form_data, $this->fields, $this->entry_id ),

[180] Fix | Delete

],

[181] Fix | Delete

200

[182] Fix | Delete

);

[183] Fix | Delete

[184] Fix | Delete

return;

[185] Fix | Delete

}

[186] Fix | Delete

[187] Fix | Delete

$message_parts = [ $this->errors[ $form_id ]['header'] ];

[188] Fix | Delete

[189] Fix | Delete

if ( ! empty( $this->errors[ $form_id ]['recaptcha'] ) ) {

[190] Fix | Delete

$message_parts[] = $this->errors[ $form_id ]['recaptcha'];

[191] Fix | Delete

}

[192] Fix | Delete

[193] Fix | Delete

if ( ! empty( $this->errors[ $form_id ]['footer'] ) ) {

[194] Fix | Delete

$message_parts[] = $this->errors[ $form_id ]['footer'];

[195] Fix | Delete

}

[196] Fix | Delete

[197] Fix | Delete

wp_send_json(

[198] Fix | Delete

[

[199] Fix | Delete

'message' => implode( '<br>', $message_parts ),

[200] Fix | Delete

],

[201] Fix | Delete

400

[202] Fix | Delete

);

[203] Fix | Delete

}

[204] Fix | Delete

[205] Fix | Delete

/**

[206] Fix | Delete

* Process the form entry.

[207] Fix | Delete

*

[208] Fix | Delete

* @since 1.0.0

[209] Fix | Delete

* @since 1.6.4 Added hCaptcha support.

[210] Fix | Delete

*

[211] Fix | Delete

* @param array $entry Form submission raw data ($_POST).

[212] Fix | Delete

*

[213] Fix | Delete

* @noinspection HtmlUnknownTarget

[214] Fix | Delete

*/

[215] Fix | Delete

public function process( $entry ) { // phpcs:ignore Generic.Metrics.CyclomaticComplexity.MaxExceeded, Generic.Metrics.NestingLevel.MaxExceeded

[216] Fix | Delete

[217] Fix | Delete

$this->errors = [];

[218] Fix | Delete

$this->fields = [];

[219] Fix | Delete

[220] Fix | Delete

/* @var int $form_id Annotate the type explicitly. */

[221] Fix | Delete

$form_id = absint( $entry['id'] );

[222] Fix | Delete

$form = wpforms()->obj( 'form' )->get( $form_id );

[223] Fix | Delete

[224] Fix | Delete

// Validate form is real and active (published).

[225] Fix | Delete

if ( ! $form || $form->post_status !== 'publish' ) {

[226] Fix | Delete

$this->errors[ $form_id ]['header'] = esc_html__( 'Invalid form.', 'wpforms-lite' );

[227] Fix | Delete

[228] Fix | Delete

return;

[229] Fix | Delete

}

[230] Fix | Delete

[231] Fix | Delete

/**

[232] Fix | Delete

* Filter form data obtained during the form process.

[233] Fix | Delete

*

[234] Fix | Delete

* @since 1.5.3

[235] Fix | Delete

*

[236] Fix | Delete

* @param array $form_data Form data.

[237] Fix | Delete

* @param array $entry Form entry.

[238] Fix | Delete

*/

[239] Fix | Delete

$this->form_data = (array) apply_filters( 'wpforms_process_before_form_data', wpforms_decode( $form->post_content ), $entry );

[240] Fix | Delete

[241] Fix | Delete

if ( ! empty( $this->form_data['settings']['ajax_submit'] ) && ! $this->is_valid_ajax_submit_action() ) {

[242] Fix | Delete

wpforms_log(

[243] Fix | Delete

'Attempt to submit corrupted post data.',

[244] Fix | Delete

wp_unslash( $_POST ),

[245] Fix | Delete

[

[246] Fix | Delete

'type' => [ 'error', 'entry' ],

[247] Fix | Delete

'form_id' => $this->form_data['id'],

[248] Fix | Delete

]

[249] Fix | Delete

);

[250] Fix | Delete

[251] Fix | Delete

$this->errors[ $form_id ]['header'] = esc_html__( 'Attempt to submit corrupted post data.', 'wpforms-lite' );

[252] Fix | Delete

[253] Fix | Delete

return;

[254] Fix | Delete

}

[255] Fix | Delete

[256] Fix | Delete

$store_spam_entries = ! empty( $this->form_data['settings']['store_spam_entries'] );

[257] Fix | Delete

[258] Fix | Delete

/**

[259] Fix | Delete

* Check the modern Anti-Spam (v3) protection.

[260] Fix | Delete

*

[261] Fix | Delete

* Run as early as possible to remove the honeypot field from the entry to prevent unnecessary field processing.

[262] Fix | Delete

* Bail early if the form is marked as spam and storing spam entries is disabled.

[263] Fix | Delete

*

[264] Fix | Delete

* Important! We should check first on modern Anti-Spam because it is skipped in case $store_spam_entries === true.

[265] Fix | Delete

*/

[266] Fix | Delete

// phpcs:ignore Generic.Commenting.DocComment.MissingShort

[267] Fix | Delete

/** @noinspection NotOptimalIfConditionsInspection */

[268] Fix | Delete

if ( ! $this->modern_anti_spam_check( $entry ) && ! $store_spam_entries ) {

[269] Fix | Delete

return;

[270] Fix | Delete

}

[271] Fix | Delete

[272] Fix | Delete

if ( ! isset( $this->form_data['fields'], $this->form_data['id'] ) ) {

[273] Fix | Delete

$error_id = uniqid( '', true );

[274] Fix | Delete

[275] Fix | Delete

// Logs missing form data.

[276] Fix | Delete

wpforms_log(

[277] Fix | Delete

/* translators: %s - error unique ID. */

[278] Fix | Delete

sprintf( esc_html__( 'Missing form data on form submission process %s', 'wpforms-lite' ), $error_id ),

[279] Fix | Delete

esc_html__( 'Form data is not an array in `\WPForms_Process::process()`. It might be caused by incorrect data returned by `wpforms_process_before_form_data` filter. Verify whether you have a custom code using this filter and debug value it is returning.', 'wpforms-lite' ),

[280] Fix | Delete

[

[281] Fix | Delete

'type' => [ 'error', 'entry' ],

[282] Fix | Delete

'form_id' => $form_id,

[283] Fix | Delete

]

[284] Fix | Delete

);

[285] Fix | Delete

[286] Fix | Delete

$error_messages[] = esc_html__( 'Your form has not been submitted because data is missing from the entry.', 'wpforms-lite' );

[287] Fix | Delete

[288] Fix | Delete

if ( wpforms_setting( 'logs-enable' ) && wpforms_current_user_can( wpforms_get_capability_manage_options() ) ) {

[289] Fix | Delete

$error_messages[] = sprintf(

[290] Fix | Delete

wp_kses( /* translators: %s - URL to the WForms Logs admin page. */

[291] Fix | Delete

__( 'Check the WPForms &raquo; Tools &raquo; <a href="%s">Logs</a> for more details.', 'wpforms-lite' ),

[292] Fix | Delete

[ 'a' => [ 'href' => [] ] ]

[293] Fix | Delete

),

[294] Fix | Delete

esc_url(

[295] Fix | Delete

add_query_arg(

[296] Fix | Delete

[

[297] Fix | Delete

'page' => 'wpforms-tool',

[298] Fix | Delete

'view' => 'logs',

[299] Fix | Delete

],

[300] Fix | Delete

admin_url( 'admin.php' )

[301] Fix | Delete

)

[302] Fix | Delete

)

[303] Fix | Delete

);

[304] Fix | Delete

[305] Fix | Delete

/* translators: %s - error unique ID. */

[306] Fix | Delete

$error_messages[] = sprintf( esc_html__( 'Error ID: %s.', 'wpforms-lite' ), $error_id );

[307] Fix | Delete

}

[308] Fix | Delete

[309] Fix | Delete

$errors[ $form_id ]['header'] = implode( '<br>', $error_messages );

[310] Fix | Delete

$this->errors = $errors;

[311] Fix | Delete

[312] Fix | Delete

return;

[313] Fix | Delete

}

[314] Fix | Delete

[315] Fix | Delete

/**

[316] Fix | Delete

* Filter form entry before processing.

[317] Fix | Delete

* Data are not validated or cleaned yet, so use them with caution.

[318] Fix | Delete

*

[319] Fix | Delete

* @since 1.4.0

[320] Fix | Delete

*

[321] Fix | Delete

* @param array $entry Form submission raw data ($_POST).

[322] Fix | Delete

* @param array $form_data Form data.

[323] Fix | Delete

*/

[324] Fix | Delete

$entry = apply_filters( 'wpforms_process_before_filter', $entry, $this->form_data );

[325] Fix | Delete

[326] Fix | Delete

/**

[327] Fix | Delete

* Pre-process hook.

[328] Fix | Delete

*

[329] Fix | Delete

* @since 1.4.0

[330] Fix | Delete

*

[331] Fix | Delete

* @param array $entry Form submission raw data ($_POST).

[332] Fix | Delete

* @param array $form_data Form data.

[333] Fix | Delete

*/

[334] Fix | Delete

do_action( 'wpforms_process_before', $entry, $this->form_data );

[335] Fix | Delete

[336] Fix | Delete

/**

[337] Fix | Delete

* Pre-process hook by form ID.

[338] Fix | Delete

*

[339] Fix | Delete

* @since 1.4.0

[340] Fix | Delete

*

[341] Fix | Delete

* @param array $entry Form submission raw data ($_POST).

[342] Fix | Delete

* @param array $form_data Form data.

[343] Fix | Delete

*/

[344] Fix | Delete

do_action( "wpforms_process_before_{$form_id}", $entry, $this->form_data );

[345] Fix | Delete

[346] Fix | Delete

// Validate fields.

[347] Fix | Delete

foreach ( $this->form_data['fields'] as $field_properties ) {

[348] Fix | Delete

[349] Fix | Delete

$field_id = $field_properties['id'];

[350] Fix | Delete

$field_type = $field_properties['type'];

[351] Fix | Delete

$field_submit = $entry['fields'][ $field_id ] ?? '';

[352] Fix | Delete

[353] Fix | Delete

/**

[354] Fix | Delete

* Field type validation hook.

[355] Fix | Delete

*

[356] Fix | Delete

* @since 1.4.0

[357] Fix | Delete

*

[358] Fix | Delete

* @param string|int $field_id Field ID as a numeric string.

[359] Fix | Delete

* @param mixed $field_submit Submitted field value (raw data).

[360] Fix | Delete

* @param array $form_data Form data.

[361] Fix | Delete

*/

[362] Fix | Delete

do_action( "wpforms_process_validate_{$field_type}", $field_id, $field_submit, $this->form_data );

[363] Fix | Delete

}

[364] Fix | Delete

[365] Fix | Delete

// Check if combined upload size exceeds allowed maximum.

[366] Fix | Delete

$this->validate_combined_upload_size( $form );

[367] Fix | Delete

[368] Fix | Delete

/**

[369] Fix | Delete

* Filter initial errors.

[370] Fix | Delete

* Don't proceed if there are any errors thus far.

[371] Fix | Delete

* We provide a filter so that other features, such as conditional logic, can adjust blocking errors.

[372] Fix | Delete

*

[373] Fix | Delete

* @since 1.4.0

[374] Fix | Delete

*

[375] Fix | Delete

* @param array $errors List of errors.

[376] Fix | Delete

* @param array $form_data Form data.

[377] Fix | Delete

*/

[378] Fix | Delete

$errors = apply_filters( 'wpforms_process_initial_errors', $this->errors, $this->form_data );

[379] Fix | Delete

[380] Fix | Delete

if ( isset( $_POST['__amp_form_verify'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing

[381] Fix | Delete

if ( empty( $errors[ $form_id ] ) ) {

[382] Fix | Delete

wp_send_json( [], 200 );

[383] Fix | Delete

} else {

[384] Fix | Delete

$verify_errors = [];

[385] Fix | Delete

[386] Fix | Delete

foreach ( $errors[ $form_id ] as $field_id => $error_fields ) {

[387] Fix | Delete

$field = $this->form_data['fields'][ $field_id ];

[388] Fix | Delete

$field_properties = wpforms()->obj( 'frontend' )->get_field_properties( $field, $this->form_data );

[389] Fix | Delete

[390] Fix | Delete

if ( is_string( $error_fields ) ) {

[391] Fix | Delete

$name = '';

[392] Fix | Delete

[393] Fix | Delete

if ( $field['type'] === 'checkbox' || $field['type'] === 'radio' || $field['type'] === 'select' ) {

[394] Fix | Delete

$first = current( $field_properties['inputs'] );

[395] Fix | Delete

$name = $first['attr']['name'];

[396] Fix | Delete

} elseif ( isset( $field_properties['inputs']['primary']['attr']['name'] ) ) {

[397] Fix | Delete

$name = $field_properties['inputs']['primary']['attr']['name'];

[398] Fix | Delete

}

[399] Fix | Delete

[400] Fix | Delete

$verify_errors[] = [

[401] Fix | Delete

'name' => $name,

[402] Fix | Delete

'message' => $error_fields,

[403] Fix | Delete

];

[404] Fix | Delete

} else {

[405] Fix | Delete

foreach ( $error_fields as $error_field => $error_message ) {

[406] Fix | Delete

$name = $field_properties['inputs'][ $error_field ]['attr']['name'] ?? '';

[407] Fix | Delete

[408] Fix | Delete

$verify_errors[] = [

[409] Fix | Delete

'name' => $name,

[410] Fix | Delete

'message' => $error_message,

[411] Fix | Delete

];

[412] Fix | Delete

}

[413] Fix | Delete

}

[414] Fix | Delete

}

[415] Fix | Delete

[416] Fix | Delete

wp_send_json(

[417] Fix | Delete

[

[418] Fix | Delete

'verifyErrors' => $verify_errors,

[419] Fix | Delete

],

[420] Fix | Delete

400

[421] Fix | Delete

);

[422] Fix | Delete

}

[423] Fix | Delete

[424] Fix | Delete

return;

[425] Fix | Delete

}

[426] Fix | Delete

[427] Fix | Delete

if ( ! empty( $errors[ $form_id ] ) ) {

[428] Fix | Delete

[429] Fix | Delete

if ( empty( $errors[ $form_id ]['header'] ) && empty( $errors[ $form_id ]['footer'] ) ) {

[430] Fix | Delete

$errors[ $form_id ]['header'] = esc_html__( 'Form has not been submitted, please see the errors below.', 'wpforms-lite' );

[431] Fix | Delete

}

[432] Fix | Delete

[433] Fix | Delete

$this->errors = $errors;

[434] Fix | Delete

[435] Fix | Delete

return;

[436] Fix | Delete

}

[437] Fix | Delete

[438] Fix | Delete

// If a logged-in user fails the nonce check, we want to log the entry, disable the errors and fail silently.

[439] Fix | Delete

// Please note that logs may be disabled, and in this case, nothing will be logged or reported.

[440] Fix | Delete

if (

[441] Fix | Delete

is_user_logged_in() &&

[442] Fix | Delete

( empty( $entry['nonce'] ) || ! wp_verify_nonce( $entry['nonce'], "wpforms::form_{$form_id}" ) )

[443] Fix | Delete

) {

[444] Fix | Delete

// Logs XSS attempt depending on log levels set.

[445] Fix | Delete

wpforms_log(

[446] Fix | Delete

'Cross-site scripting attempt ' . uniqid( '', true ),

[447] Fix | Delete

[ true, $entry ],

[448] Fix | Delete

[

[449] Fix | Delete

'type' => [ 'security' ],

[450] Fix | Delete

'form_id' => $this->form_data['id'],

[451] Fix | Delete

]

[452] Fix | Delete

);

[453] Fix | Delete

[454] Fix | Delete

$this->errors[ $this->form_data['id'] ]['footer_styled'] = esc_html__( 'The form could not be submitted due to a security issue.', 'wpforms-lite' );

[455] Fix | Delete

[456] Fix | Delete

return;

[457] Fix | Delete

}

[458] Fix | Delete

[459] Fix | Delete

// Format fields.

[460] Fix | Delete

foreach ( (array) $this->form_data['fields'] as $field_properties ) {

[461] Fix | Delete

[462] Fix | Delete

$field_id = $field_properties['id'];

[463] Fix | Delete

$field_type = $field_properties['type'];

[464] Fix | Delete

$field_submit = $entry['fields'][ $field_id ] ?? '';

[465] Fix | Delete

[466] Fix | Delete

/**

[467] Fix | Delete

* Format field by type.

[468] Fix | Delete

*

[469] Fix | Delete

* @since 1.4.0

[470] Fix | Delete

*

[471] Fix | Delete

* @param string $field_id Field ID.

[472] Fix | Delete

* @param string $field_submit Submitted field value.

[473] Fix | Delete

* @param array $form_data Form data and settings.

[474] Fix | Delete

*/

[475] Fix | Delete

do_action( "wpforms_process_format_{$field_type}", $field_id, $field_submit, $this->form_data );

[476] Fix | Delete

}

[477] Fix | Delete

[478] Fix | Delete

$honeypot = wpforms()->obj( 'honeypot' )->validate( $this->form_data, $this->fields, $entry );

[479] Fix | Delete

[480] Fix | Delete

// If we trigger the honey pot, we want to log the entry, disable the errors, and fail silently.

[481] Fix | Delete

if ( $honeypot ) {

[482] Fix | Delete

[483] Fix | Delete

$this->log_spam_entry( $entry, $honeypot );

[484] Fix | Delete

[485] Fix | Delete

// Fail silently.

[486] Fix | Delete

return;

[487] Fix | Delete

}

[488] Fix | Delete

[489] Fix | Delete

$token = wpforms()->obj( 'token' )->validate( $this->form_data, $this->fields, $entry );

[490] Fix | Delete

[491] Fix | Delete

// If spam - return early.

[492] Fix | Delete

// For antispam, we want to make sure that we have a value, we are not using AMP, and the value is an error string.

[493] Fix | Delete

if ( $token && is_string( $token ) && ! wpforms_is_amp() ) {

[494] Fix | Delete

$this->errors[ $this->form_data['id'] ]['header'] = $token;

[495] Fix | Delete

[496] Fix | Delete

$this->log_spam_entry( $entry, $token );

[497] Fix | Delete

[498] Fix | Delete

return;

[499] Fix | Delete