403Webshell
Server IP : 52.25.153.185  /  Your IP : 216.73.217.131
Web Server : Apache
System : Linux ip-172-26-6-158 5.10.0-35-cloud-amd64 #1 SMP Debian 5.10.237-1 (2025-05-19) x86_64
User : daemon ( 1)
PHP Version : 8.1.10
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /bitnami/wordpress/wp-content/plugins/fluentformpro/src/Components/Post/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /bitnami/wordpress/wp-content/plugins/fluentformpro/src/Components/Post/PopulatePostForm.php
<?php

namespace FluentFormPro\Components\Post;

defined('ABSPATH') or die;

use FluentForm\App\Api\FormProperties;
use FluentForm\App\Helpers\Helper;
use FluentForm\App\Modules\Form\FormFieldsParser;
use FluentForm\App\Modules\Component\Component;
use FluentForm\App\Services\FormBuilder\Components\Select;
use FluentForm\Framework\Helpers\ArrayHelper;

/**
 * Populate Post Form on Post Selection Change
 */
class PopulatePostForm
{
    /**
     * Boot Class if post feed has post form type set to update
     */
    public function __construct()
    {
        add_action('fluentform/populate_post_form_values', [$this, 'boot'], 10, 3);
        add_action('wp_enqueue_scripts', function () {
            if (wp_script_is('fluentformpro_post_update', 'registered')) {
                return;
            }
            wp_register_script(
                'fluentformpro_post_update',
                FLUENTFORMPRO_DIR_URL . 'public/js/fluentformproPostUpdate.js',
                ['jquery'],
                FLUENTFORMPRO_VERSION,
                true
            );
        });
    }
    
    public function boot($form, $feed, $postType)
    {
        if (!wp_script_is('fluentformpro_post_update', 'registered')) {
            wp_register_script(
                'fluentformpro_post_update',
                FLUENTFORMPRO_DIR_URL . 'public/js/fluentformproPostUpdate.js',
                ['jquery'],
                FLUENTFORMPRO_VERSION,
                true
            );
        }
        wp_enqueue_script('fluentformpro_post_update');
        wp_localize_script('fluentformpro_post_update', 'fluentformpro_post_update_vars', array(
            'post_selector' => 'post-selector-' . time(),
            'nonce'         => wp_create_nonce('fluentformpro_post_update_nonce'),
        ));
    }
    

    /**
     * Push Post Selection field in the form
     *
     * @param $form
     * @param $postType
     *
     * @return void
     */
    public function renderPostSelectionField($data, $form)
    {
        $postType = ArrayHelper::get($data, 'settings.post_type_selection');

        $postPreData = apply_filters_deprecated(
            'fluentform_post_selection_posts_pre_data',
            [
                [],
                $data,
                $form
            ],
            FLUENTFORM_FRAMEWORK_UPGRADE,
            'fluentform/post_selection_posts_pre_data',
            'Use fluentform/post_selection_posts_pre_data instead of fluentform_post_selection_posts_pre_data.'
        );

        $posts = apply_filters('fluentform/post_selection_posts_pre_data', $postPreData, $data, $form);

        if (!$posts) {
            $queryParams = [
                'post_type'      => $postType,
                'posts_per_page' => apply_filters('fluentform/post_selection_posts_per_page', -1, $data, $form)
            ];

            $extraParams = ArrayHelper::get($data, 'settings.post_extra_query_params');
            $extraParams = apply_filters_deprecated(
                'fluentform_post_selection_posts_query_args',
                [
                    $extraParams,
                    $data,
                    $form
                ],
                FLUENTFORM_FRAMEWORK_UPGRADE,
                'fluentform/post_selection_posts_query_args',
                'Use fluentform/post_selection_posts_query_args instead of fluentform_post_selection_posts_query_args.'
            );
            $extraParams = apply_filters('fluentform/post_selection_posts_query_args', $extraParams, $data, $form);
            if ($extraParams) {
                if (strpos($extraParams, '{') !== false) {
                    $extraParams = (new Component(wpFluentForm()))->replaceEditorSmartCodes($extraParams, $form);
                }

                parse_str($extraParams, $get_array);
                $queryParams = wp_parse_args($get_array, $queryParams);
            }

            $posts = get_posts($queryParams);
        }

        $formattedOptions = [];

        $postSelectBy = apply_filters_deprecated(
            'fluentform_post_selection_value_by',
            [
                'ID',
                $form
            ],
            FLUENTFORM_FRAMEWORK_UPGRADE,
            'fluentform/post_selection_value_by',
            'Use fluentform/post_selection_value_by instead of fluentform_post_selection_value_by.'
        );
        $postValueBy = apply_filters('fluentform/post_selection_value_by', $postSelectBy, $form);
        $postSelectLabelBy = apply_filters_deprecated(
            'fluentform_post_selection_label_by',
            [
                'post_title',
                $form
            ],
            FLUENTFORM_FRAMEWORK_UPGRADE,
            'fluentform/post_selection_label_by',
            'Use fluentform/post_selection_label_by instead of fluentform_post_selection_label_by.'
        );
        $labelBy = apply_filters('fluentform/post_selection_label_by', $postSelectLabelBy, $form);

        foreach ($posts as $post) {
            $formattedOptions[] = [
                'label'      => $post->{$labelBy},
                'value'      => $post->{$postValueBy},
                'calc_value' => ''
            ];
        }

        $data['settings']['advanced_options'] = $formattedOptions;

        (new Select())->compile($data, $form);
    }

    /**
     * Get JSON Post Data
     * @return void
     */
    public function getPostDetails()
    {
        \FluentForm\App\Modules\Acl\Acl::verifyNonce('fluentformpro_post_update_nonce');
        $postId = intval(ArrayHelper::get($_REQUEST, 'post_id'));
        $formId = intval(ArrayHelper::get($_REQUEST, 'form_id'));
        if (!$postId) {
            wp_send_json([
                'message' => __('Please select a Post', 'fluentformpro')
            ], 423);
        }
        $form = Helper::getForm($formId);
        $postObject = get_post($postId);

        if (
            !$form ||
            !$postObject ||
            !$this->canAccessPostDetails($form, $postObject)
        ) {
            wp_send_json_error([
                'message' => __('You are not allowed to access this post.', 'fluentformpro')
            ], 403);
        }

        $post = get_post($postId, 'ARRAY_A');
        $selectedData = ArrayHelper::only($post,
            array('post_content', 'post_excerpt', 'post_category', 'tags_input', 'post_title', 'post_type'));
        $selectedData['thumbnail'] = get_the_post_thumbnail_url($postId);
    
        $taxonomiesData = [];
        $taxonomies = get_object_taxonomies($post['post_type']);
        foreach ($taxonomies as $taxonomy) {
            $taxonomiesData[$taxonomy] = $this->formattedTerms($postId, $taxonomy);
        }
        $postMetas = $this->getCustomPostMetaFieldValue($formId, $postId);
        wp_send_json_success([
            'post'     => $selectedData,
            'taxonomy' => $taxonomiesData,
            'custom_meta' => $postMetas['custom_meta'],
            'acf_metas' => $postMetas['acf_metas'],
            'advanced_acf_metas' => $postMetas['advanced_acf_metas'],
            'mb_general_metas' => $postMetas['mb_general_metas'],
            'mb_advanced_metas' => $postMetas['mb_advanced_metas'],
            'jetengine_metas' => $postMetas['jetengine_metas'],
            'advanced_jetengine_metas' => $postMetas['advanced_jetengine_metas'],
        ]);
    }

    /**
     * Allow post details only when the current user can edit the target post
     * or the post is publicly viewable and selectable from the requested form.
     *
     * @param \stdClass|\FluentForm\App\Models\Form $form
     * @param \WP_Post                              $post
     * @return bool
     */
    private function canAccessPostDetails($form, $post)
    {
        if (!$form || !$post) {
            return false;
        }

        if ($form->type !== 'post') {
            return false;
        }

        if (current_user_can('edit_post', $post->ID)) {
            return true;
        }

        $updateFeed = $this->getUpdateFeed($form->id);
        if (!$updateFeed) {
            return false;
        }

        if (
            !get_current_user_id() &&
            !ArrayHelper::isTrue($updateFeed, 'allowed_guest_user')
        ) {
            return false;
        }

        if (!$this->isPubliclyAccessiblePost($post)) {
            return false;
        }

        return $this->isSelectablePostForForm($form, $post->ID);
    }

    /**
     * Resolve the update feed attached to a post form.
     *
     * @param int $formId
     * @return array|null
     */
    private function getUpdateFeed($formId)
    {
        if (!$formId) {
            return null;
        }

        $feeds = $this->getFormFeeds($formId);
        if (!count($feeds)) {
            return null;
        }

        foreach ($feeds as $feed) {
            $feedValue = json_decode($feed->value, true);

            if (
                ArrayHelper::get($feedValue, 'feed_status') &&
                ArrayHelper::get($feedValue, 'post_form_type') === 'update'
            ) {
                return $feedValue;
            }
        }

        return null;
    }

    /**
     * Ensure guest requests can only load posts already offered by the
     * frontend selector for the requested update form.
     *
     * @param \stdClass|\FluentForm\App\Models\Form $form
     * @param int                                   $postId
     * @return bool
     */
    private function isSelectablePostForForm($form, $postId)
    {
        $postUpdateFields = FormFieldsParser::getElement($form, 'post_update', ['raw']);
        if (!$postUpdateFields) {
            return false;
        }

        $field = array_pop($postUpdateFields);
        $field = ArrayHelper::get($field, 'raw', []);

        if (!$field) {
            return false;
        }

        $field['settings']['post_type_selection'] = $this->getPostType($form->id);

        if (
            ArrayHelper::get($field, 'settings.allow_view_posts') === 'current_user_post' &&
            get_current_user_id()
        ) {
            $existingParams = (string) ArrayHelper::get($field, 'settings.post_extra_query_params', '');
            $existingParams = trim($existingParams, '&');

            if ($existingParams !== '') {
                $existingParams .= '&';
            }

            $field['settings']['post_extra_query_params'] = $existingParams . 'author=' . get_current_user_id();
        }

        $posts = $this->getSelectablePosts($field, $form);

        foreach ($posts as $candidatePost) {
            if ((int) $candidatePost->ID === (int) $postId) {
                return true;
            }
        }

        return false;
    }

    /**
     * Build the post list used by the public post-update selector.
     *
     * @param array                                $data
     * @param \stdClass|\FluentForm\App\Models\Form $form
     * @return array
     */
    private function getSelectablePosts($data, $form)
    {
        $postType = ArrayHelper::get($data, 'settings.post_type_selection');

        $postPreData = apply_filters_deprecated(
            'fluentform_post_selection_posts_pre_data',
            [
                [],
                $data,
                $form
            ],
            FLUENTFORM_FRAMEWORK_UPGRADE,
            'fluentform/post_selection_posts_pre_data',
            'Use fluentform/post_selection_posts_pre_data instead of fluentform_post_selection_posts_pre_data.'
        );

        $posts = apply_filters('fluentform/post_selection_posts_pre_data', $postPreData, $data, $form);

        if ($posts) {
            return $posts;
        }

        $queryParams = [
            'post_type'      => $postType,
            'posts_per_page' => apply_filters('fluentform/post_selection_posts_per_page', -1, $data, $form)
        ];

        $extraParams = ArrayHelper::get($data, 'settings.post_extra_query_params');
        $extraParams = apply_filters_deprecated(
            'fluentform_post_selection_posts_query_args',
            [
                $extraParams,
                $data,
                $form
            ],
            FLUENTFORM_FRAMEWORK_UPGRADE,
            'fluentform/post_selection_posts_query_args',
            'Use fluentform/post_selection_posts_query_args instead of fluentform_post_selection_posts_query_args.'
        );
        $extraParams = apply_filters('fluentform/post_selection_posts_query_args', $extraParams, $data, $form);

        if ($extraParams) {
            if (strpos($extraParams, '{') !== false) {
                $extraParams = (new Component(wpFluentForm()))->replaceEditorSmartCodes($extraParams, $form);
            }

            parse_str($extraParams, $queryArgs);
            $queryParams = wp_parse_args($queryArgs, $queryParams);
        }

        return get_posts($queryParams);
    }

    /**
     * Public requests may only read posts that WordPress treats as public.
     *
     * @param \WP_Post $post
     * @return bool
     */
    private function isPubliclyAccessiblePost($post)
    {
        if (!$post instanceof \WP_Post) {
            return false;
        }

        if (post_password_required($post)) {
            return false;
        }

        $postTypeObject = get_post_type_object($post->post_type);
        if (!$postTypeObject || !is_post_type_viewable($postTypeObject)) {
            return false;
        }

        return is_post_publicly_viewable($post);
    }
    
    private function formattedTerms($postId, $taxonomy)
    {
        $terms = get_the_terms($postId, $taxonomy);
        $formattedTaxonomies = [];
        if (empty($terms)) {
            return $formattedTaxonomies;
        }
        foreach ($terms as $term) {
            $formattedTaxonomies[] = [
                'value' => $term->term_id,
                'label' => $term->name
            ];
        }
        return $formattedTaxonomies;
    }

    private function getFormFeeds($formId)
	{
		return wpFluent()->table('fluentform_form_meta')
		                 ->where('form_id', $formId)
		                 ->where('meta_key', 'postFeeds')
		                 ->get();
	}

    private function getPostType($formId)
    {
        $postSettings = wpFluent()->table('fluentform_form_meta')
            ->where('form_id', $formId)
            ->where('meta_key', 'post_settings')
            ->first();

        if (!$postSettings || empty($postSettings->value)) {
            return null;
        }

        $postSettings = json_decode($postSettings->value);

        return isset($postSettings->post_type) ? $postSettings->post_type : null;
    }

	private function getCustomPostMetaFieldValue($formId, $postId) {
        $meta_fields = [
            "custom_meta" => [],
            "acf_metas" => [],
            "advanced_acf_metas" => [],
            "mb_general_metas" => [],
            "mb_advanced_metas" => [],
            "jetengine_metas" => [],
            "advanced_jetengine_metas" => [],
        ];
		if (!$formId) {
			return $meta_fields;
		}

		$feeds = $this->getFormFeeds($formId);
		if (!count($feeds)) {
			return $meta_fields;
		}

		foreach ($feeds as $feed) {
			$feed->value = json_decode($feed->value, true);
			if (ArrayHelper::get($feed->value, 'post_form_type') !== 'update') {
				continue;
			}

			if ($metaFields = ArrayHelper::get($feed->value, 'meta_fields_mapping', [])) {
				$form = Helper::getForm($formId);
				if(!$form) {
					continue;
				}
				$formFields = (new FormProperties($form))->inputs(['raw']);

				foreach ($metaFields as $metaField) {
	                $value = ArrayHelper::get($metaField, 'meta_value', '');
                    if ($name = $this->getFormFieldName($value)) {
						$type = "text";
						if (isset($formFields[$name])) {
							$type = ArrayHelper::get($formFields[$name], 'raw.attributes.type', 'text');
						}
                        $value = get_post_custom_values($metaField['meta_key'], $postId);
						if ($value) {
							$value = $value[0];
						} else {
							$value = '';
						}
						if($type === 'file' && strpos($value, 'uploads/fluentform') === false) {
                            $AttachmentIds = explode(',' , $value);
                            $value = [];
                            foreach ($AttachmentIds as $id) {
                                if ($attachment = wp_prepare_attachment_for_js($id)) {
                                    $value[] = $attachment;
                                }
                            }
						}
						if ($type === 'checkbox') {
							$value = maybe_unserialize($value);
						}
                        $meta_fields['custom_meta'][] = [
                            "name" => $name,
                            "type" => $type,
                            "value" => $value
                        ];
                    }
                };
			}

            if (class_exists('\ACF')) {
                if ($acfFields = ArrayHelper::get($feed->value, 'acf_mappings', [])) {
                    foreach ($acfFields as $field) {
                        $value = ArrayHelper::get($field, 'field_value', '');
                        if ($name = $this->getFormFieldName($value)) {
                            $acfField = acf_get_field($field['field_key']);
                            $value = acf_get_value($postId, $acfField);
                            $meta_fields['acf_metas'][] = [
                                "name" => $name,
                                "type" => $acfField['type'],
                                "value" => $value ?:''
                            ];
                        }
                    };
                }

                if ($advancedAcfFields = ArrayHelper::get($feed->value, 'advanced_acf_mappings', [])) {
                    foreach ($advancedAcfFields as $field) {
                        $acfField = acf_get_field($field['field_key']);
                        $value = acf_get_value($postId, $acfField);
                        if ('gallery' == $acfField['type'] && 'array' != ArrayHelper::get($acfField, 'return_format')) {
                            $acfField['return_format'] = 'array';
                        }
                        $value = acf_format_value($value, $postId, $acfField);
                        $meta_fields['advanced_acf_metas'][] = [
                            "name" => $field['field_value'],
                            "type" => $acfField['type'],
                            "value" => $value
                        ];
                    }
                }
            }

            if (JetEngineHelper::hasJetEngine()) {
                JetEngineHelper::maybePopulateMetaFields($meta_fields, $feed, $postId, $formId);
            }
            if (MetaboxHelper::hasMetabox()) {
                MetaboxHelper::maybePopulatePostUpdateMetaFields($meta_fields, $feed, $postId, $formId);
            }
        }
		return $meta_fields;
	}

    private function getFormFieldName($value = '')
    {
        preg_match('/{+(.*?)}/', $value, $matches);
        if ($matches && strpos($matches[1], 'inputs.') !== false) {
            return substr($matches[1], strlen('inputs.'));
        }
        return '';
    }

}

Youez - 2016 - github.com/yon3zu
LinuXploit