1
|
|
|
<?php |
2
|
|
|
/** |
3
|
|
|
* The GravityView Duplicate Entry Extension |
4
|
|
|
* |
5
|
|
|
* Duplicate entries in GravityView. |
6
|
|
|
* |
7
|
|
|
* @since 2.5 |
8
|
|
|
* @package GravityView |
9
|
|
|
* @license GPL2+ |
10
|
|
|
* @author Katz Web Services, Inc. |
11
|
|
|
* @link http://gravityview.co |
12
|
|
|
* @copyright Copyright 2014, Katz Web Services, Inc. |
13
|
|
|
*/ |
14
|
|
|
|
15
|
|
|
if ( ! defined( 'WPINC' ) ) { |
16
|
|
|
die; |
17
|
|
|
} |
18
|
|
|
|
19
|
|
|
/** |
20
|
|
|
* @since 2.5 |
21
|
|
|
*/ |
22
|
|
|
final class GravityView_Duplicate_Entry { |
23
|
|
|
|
24
|
|
|
/** |
25
|
|
|
* @var string The location of this file. |
26
|
|
|
*/ |
27
|
|
|
static $file; |
28
|
|
|
|
29
|
|
|
/** |
30
|
|
|
* @var GravityView_Duplicate_Entry This instance. |
31
|
|
|
*/ |
32
|
|
|
static $instance; |
33
|
|
|
|
34
|
|
|
/** |
35
|
|
|
* @var array Global entry state. |
36
|
|
|
*/ |
37
|
|
|
var $entry; |
38
|
|
|
|
39
|
|
|
var $view_id; |
40
|
|
|
|
41
|
|
|
function __construct() { |
|
|
|
|
42
|
|
|
|
43
|
|
|
self::$file = plugin_dir_path( __FILE__ ); |
44
|
|
|
$this->add_hooks(); |
45
|
|
|
} |
46
|
|
|
|
47
|
|
|
/** |
48
|
|
|
* @since 2.5 |
49
|
|
|
*/ |
50
|
|
|
private function add_hooks() { |
51
|
|
|
|
52
|
|
|
add_action( 'wp', array( $this, 'process_duplicate' ), 10000 ); |
53
|
|
|
|
54
|
|
|
add_filter( 'gravityview_entry_default_fields', array( $this, 'add_default_field' ), 10, 3 ); |
55
|
|
|
|
56
|
|
|
add_action( 'gravityview_before', array( $this, 'display_message' ) ); |
57
|
|
|
|
58
|
|
|
// For the Duplicate Entry Link, you don't want visible to all users. |
59
|
|
|
add_filter( 'gravityview_field_visibility_caps', array( $this, 'modify_visibility_caps' ), 10, 5 ); |
60
|
|
|
|
61
|
|
|
// Modify the field options based on the name of the field type |
62
|
|
|
add_filter( 'gravityview_template_duplicate_link_options', array( $this, 'duplicate_link_field_options' ), 10, 5 ); |
63
|
|
|
|
64
|
|
|
// add template path to check for field |
65
|
|
|
add_filter( 'gravityview_template_paths', array( $this, 'add_template_path' ) ); |
66
|
|
|
} |
67
|
|
|
|
68
|
|
|
/** |
69
|
|
|
* Return the instantiated class object |
70
|
|
|
* |
71
|
|
|
* @since 2.5 |
72
|
|
|
* @return GravityView_Duplicate_Entry |
73
|
|
|
*/ |
74
|
1 |
|
static public function getInstance() { |
75
|
|
|
|
76
|
1 |
|
if ( empty( self::$instance ) ) { |
77
|
|
|
self::$instance = new self; |
78
|
|
|
} |
79
|
|
|
|
80
|
1 |
|
return self::$instance; |
81
|
|
|
} |
82
|
|
|
|
83
|
|
|
/** |
84
|
|
|
* Include this extension templates path |
85
|
|
|
* |
86
|
|
|
* @since 2.5 |
87
|
|
|
* |
88
|
|
|
* @param array $file_paths List of template paths ordered |
89
|
|
|
* |
90
|
|
|
* @return array File paths, with duplicate field path added at index 117 |
91
|
|
|
*/ |
92
|
2 |
|
public function add_template_path( $file_paths ) { |
93
|
|
|
|
94
|
|
|
// Index 100 is the default GravityView template path. |
95
|
|
|
// Index 110 is Edit Entry link |
96
|
2 |
|
$file_paths[ 117 ] = self::$file; |
97
|
|
|
|
98
|
2 |
|
return $file_paths; |
99
|
|
|
} |
100
|
|
|
|
101
|
|
|
/** |
102
|
|
|
* Add "Duplicate Link Text" setting to the edit_link field settings |
103
|
|
|
* |
104
|
|
|
* @since 2.5 |
105
|
|
|
* |
106
|
|
|
* @param array $field_options [description] |
107
|
|
|
* @param [type] $template_id [description] |
|
|
|
|
108
|
|
|
* @param [type] $field_id [description] |
|
|
|
|
109
|
|
|
* @param [type] $context [description] |
|
|
|
|
110
|
|
|
* @param [type] $input_type [description] |
|
|
|
|
111
|
|
|
* |
112
|
|
|
* @return array [description] |
113
|
|
|
*/ |
114
|
|
|
public function duplicate_link_field_options( $field_options, $template_id, $field_id, $context, $input_type ) { |
115
|
|
|
|
116
|
|
|
// Always a link, never a filter |
117
|
|
|
unset( $field_options['show_as_link'], $field_options['search_filter'] ); |
118
|
|
|
|
119
|
|
|
|
120
|
|
|
// Duplicate Entry link should only appear to visitors capable of editing entries |
121
|
|
|
unset( $field_options['only_loggedin'], $field_options['only_loggedin_cap'] ); |
122
|
|
|
|
123
|
|
|
$add_option['duplicate_link'] = array( |
|
|
|
|
124
|
|
|
'type' => 'text', |
125
|
|
|
'label' => __( 'Duplicate Link Text', 'gravityview' ), |
126
|
|
|
'desc' => NULL, |
127
|
|
|
'value' => __( 'Duplicate Entry', 'gravityview' ), |
128
|
|
|
'merge_tags' => true, |
129
|
|
|
); |
130
|
|
|
|
131
|
|
|
$field_options['allow_duplicate_cap'] = array( |
132
|
|
|
'type' => 'select', |
133
|
|
|
'label' => __( 'Allow the following users to duplicate the entry:', 'gravityview' ), |
134
|
|
|
'choices' => GravityView_Render_Settings::get_cap_choices( $template_id, $field_id, $context, $input_type ), |
135
|
|
|
'tooltip' => 'allow_duplicate_cap', |
136
|
|
|
'class' => 'widefat', |
137
|
|
|
'value' => 'read', // Default: entry creator |
138
|
|
|
); |
139
|
|
|
|
140
|
|
|
return array_merge( $add_option, $field_options ); |
141
|
|
|
} |
142
|
|
|
|
143
|
|
|
|
144
|
|
|
/** |
145
|
|
|
* Add Edit Link as a default field, outside those set in the Gravity Form form |
146
|
|
|
* |
147
|
|
|
* @since 2.5 |
148
|
|
|
* |
149
|
|
|
* @param array $entry_default_fields Existing fields |
150
|
|
|
* @param string|array $form form_ID or form object |
151
|
|
|
* @param string $zone Either 'single', 'directory', 'edit', 'header', 'footer' |
152
|
|
|
* |
153
|
|
|
* @return array $entry_default_fields, with `duplicate_link` added. Won't be added if in Edit Entry context. |
154
|
|
|
*/ |
155
|
|
|
public function add_default_field( $entry_default_fields, $form = array(), $zone = '' ) { |
156
|
|
|
|
157
|
|
|
if ( 'edit' !== $zone ) { |
158
|
|
|
$entry_default_fields['duplicate_link'] = array( |
159
|
|
|
'label' => __( 'Duplicate Entry', 'gravityview' ), |
160
|
|
|
'type' => 'duplicate_link', |
161
|
|
|
'desc' => __( 'A link to duplicate the entry. Respects the Duplicate Entry permissions.', 'gravityview' ), |
162
|
|
|
); |
163
|
|
|
} |
164
|
|
|
|
165
|
|
|
return $entry_default_fields; |
166
|
|
|
} |
167
|
|
|
|
168
|
|
|
/** |
169
|
|
|
* Add Duplicate Entry Link to the Add Field dialog |
170
|
|
|
* |
171
|
|
|
* @since 2.5 |
172
|
|
|
* |
173
|
|
|
* @param array $available_fields |
174
|
|
|
* |
175
|
|
|
* @return array Fields with `duplicate_link` added |
176
|
|
|
*/ |
177
|
|
|
public function add_available_field( $available_fields = array() ) { |
178
|
|
|
|
179
|
|
|
$available_fields['duplicate_link'] = array( |
180
|
|
|
'label_text' => __( 'Duplicate Entry', 'gravityview' ), |
181
|
|
|
'field_id' => 'duplicate_link', |
182
|
|
|
'label_type' => 'field', |
183
|
|
|
'input_type' => 'duplicate_link', |
184
|
|
|
'field_options' => NULL |
185
|
|
|
); |
186
|
|
|
|
187
|
|
|
return $available_fields; |
188
|
|
|
} |
189
|
|
|
|
190
|
|
|
/** |
191
|
|
|
* Change wording for the Edit context to read Entry Creator |
192
|
|
|
* |
193
|
|
|
* @since 2.5 |
194
|
|
|
* |
195
|
|
|
* @param array $visibility_caps Array of capabilities to display in field dropdown. |
196
|
|
|
* @param string $field_type Type of field options to render (`field` or `widget`) |
|
|
|
|
197
|
|
|
* @param string $template_id Table slug |
198
|
|
|
* @param float|string $field_id GF Field ID - Example: `3`, `5.2`, `entry_link`, `created_by` |
199
|
|
|
* @param string $context What context are we in? Example: `single` or `directory` |
200
|
|
|
* @param string $input_type (textarea, list, select, etc.) |
201
|
|
|
* |
202
|
|
|
* @return array Array of field options with `label`, `value`, `type`, `default` keys |
203
|
|
|
*/ |
204
|
|
|
public function modify_visibility_caps( $visibility_caps = array(), $template_id = '', $field_id = '', $context = '', $input_type = '' ) { |
|
|
|
|
205
|
|
|
|
206
|
|
|
$caps = $visibility_caps; |
207
|
|
|
|
208
|
|
|
// If we're configuring fields in the edit context, we want a limited selection |
209
|
|
|
if ( 'duplicate_link' === $field_id ) { |
210
|
|
|
|
211
|
|
|
// Remove other built-in caps. |
212
|
|
|
unset( $caps['publish_posts'], $caps['gravityforms_view_entries'], $caps['duplicate_others_posts'] ); |
213
|
|
|
|
214
|
|
|
$caps['read'] = _x( 'Entry Creator', 'User capability', 'gravityview' ); |
215
|
|
|
} |
216
|
|
|
|
217
|
|
|
return $caps; |
218
|
|
|
} |
219
|
|
|
|
220
|
|
|
/** |
221
|
|
|
* Make sure there's an entry |
222
|
|
|
* |
223
|
|
|
* @since 2.5 |
224
|
|
|
* |
225
|
|
|
* @param array $entry Current entry array |
226
|
|
|
* |
227
|
|
|
* @return void |
228
|
|
|
*/ |
229
|
|
|
public function set_entry( $entry ) { |
230
|
|
|
$this->entry = $entry; |
231
|
|
|
} |
232
|
|
|
|
233
|
|
|
/** |
234
|
|
|
* Generate a consistent nonce key based on the Entry ID |
235
|
|
|
* |
236
|
|
|
* @since 2.5 |
237
|
|
|
* |
238
|
|
|
* @param int $entry_id Entry ID |
239
|
|
|
* |
240
|
|
|
* @return string Key used to validate request |
241
|
|
|
*/ |
242
|
|
|
public static function get_nonce_key( $entry_id ) { |
243
|
|
|
return sprintf( 'duplicate_%s', $entry_id ); |
244
|
|
|
} |
245
|
|
|
|
246
|
|
|
|
247
|
|
|
/** |
248
|
|
|
* Generate a nonce link with the base URL of the current View embed |
249
|
|
|
* |
250
|
|
|
* We don't want to link to the single entry, because when duplicated, there would be nothing to return to. |
251
|
|
|
* |
252
|
|
|
* @since 2.5 |
253
|
|
|
* |
254
|
|
|
* @param array $entry Gravity Forms entry array |
255
|
|
|
* @param int $view_id The View id. Not optional since 2.0 |
256
|
|
|
* @param int $post_id ID of the current post/page being embedded on, if any |
257
|
|
|
* |
258
|
|
|
* @return string|null If directory link is valid, the URL to process the duplicate request. Otherwise, `NULL`. |
259
|
|
|
*/ |
260
|
2 |
|
public static function get_duplicate_link( $entry, $view_id, $post_id = null ) { |
261
|
2 |
|
self::getInstance()->set_entry( $entry ); |
262
|
|
|
|
263
|
2 |
|
$base = GravityView_API::directory_link( $post_id ? : $view_id, true ); |
264
|
|
|
|
265
|
2 |
|
if ( empty( $base ) ) { |
266
|
|
|
gravityview()->log->error( 'Post ID does not exist: {post_id}', array( 'post_id' => $post_id ) ); |
267
|
|
|
return NULL; |
268
|
|
|
} |
269
|
|
|
|
270
|
2 |
|
$actionurl = add_query_arg( array( |
271
|
2 |
|
'action' => 'duplicate', |
272
|
2 |
|
'entry_id' => $entry['id'], |
273
|
2 |
|
'gvid' => $view_id, |
274
|
2 |
|
'view_id' => $view_id, |
275
|
2 |
|
), $base ); |
276
|
|
|
|
277
|
2 |
|
return add_query_arg( 'duplicate', wp_create_nonce( self::get_nonce_key( $entry['id'] ) ), $actionurl ); |
278
|
|
|
} |
279
|
|
|
|
280
|
|
|
/** |
281
|
|
|
* Handle the duplication request, if $_GET['action'] is set to "duplicate" |
282
|
|
|
* |
283
|
|
|
* 1. Check referrer validity |
284
|
|
|
* 2. Make sure there's an entry with the slug of $_GET['entry_id'] |
285
|
|
|
* 3. If so, attempt to duplicate the entry. If not, set the error status |
286
|
|
|
* 4. Remove `action=duplicate` from the URL |
287
|
|
|
* 5. Redirect to the page using `wp_safe_redirect()` |
288
|
|
|
* |
289
|
|
|
* @since 2.5 |
290
|
|
|
* |
291
|
|
|
* @uses wp_safe_redirect() |
292
|
|
|
* |
293
|
|
|
* @return void |
294
|
|
|
*/ |
295
|
1 |
|
public function process_duplicate() { |
296
|
|
|
|
297
|
|
|
// If the form is submitted |
298
|
1 |
|
if ( ! isset( $_GET['action'] ) || 'duplicate' !== $_GET['action'] || ! isset( $_GET['entry_id'] ) ) { |
299
|
1 |
|
return; |
300
|
|
|
} |
301
|
|
|
|
302
|
|
|
// Make sure it's a GravityView request |
303
|
|
|
$valid_nonce_key = wp_verify_nonce( $_GET['duplicate'], self::get_nonce_key( $_GET['entry_id'] ) ); |
304
|
|
|
|
305
|
|
|
if ( ! $valid_nonce_key ) { |
306
|
|
|
gravityview()->log->debug( 'Duplicate entry not processed: nonce validation failed.' ); |
307
|
|
|
return; |
308
|
|
|
} |
309
|
|
|
|
310
|
|
|
// Get the entry slug |
311
|
|
|
$entry_slug = esc_attr( $_GET['entry_id'] ); |
312
|
|
|
|
313
|
|
|
// See if there's an entry there |
314
|
|
|
$entry = gravityview_get_entry( $entry_slug, true, false ); |
315
|
|
|
|
316
|
|
|
if ( $entry ) { |
317
|
|
|
|
318
|
|
|
$has_permission = $this->user_can_duplicate_entry( $entry ); |
319
|
|
|
|
320
|
|
|
if ( is_wp_error( $has_permission ) ) { |
321
|
|
|
|
322
|
|
|
$messages = array( |
323
|
|
|
'message' => urlencode( $has_permission->get_error_message() ), |
324
|
|
|
'status' => 'error', |
325
|
|
|
); |
326
|
|
|
|
327
|
|
|
} else { |
328
|
|
|
|
329
|
|
|
// Duplicate the entry |
330
|
|
|
$duplicate_response = $this->duplicate_entry( $entry ); |
331
|
|
|
|
332
|
|
|
if ( is_wp_error( $duplicate_response ) ) { |
333
|
|
|
|
334
|
|
|
$messages = array( |
335
|
|
|
'message' => urlencode( $duplicate_response->get_error_message() ), |
336
|
|
|
'status' => 'error', |
337
|
|
|
); |
338
|
|
|
|
339
|
|
|
gravityview()->log->error( 'Entry {entry_slug} cannot be duplicated: {error_code} {error_message}', array( |
340
|
|
|
'entry_slug' => $entry_slug, |
341
|
|
|
'error_code' => $duplicate_response->get_error_code(), |
342
|
|
|
'error_message' => $duplicate_response->get_error_message(), |
343
|
|
|
) ); |
344
|
|
|
|
345
|
|
|
} else { |
346
|
|
|
|
347
|
|
|
$messages = array( |
348
|
|
|
'status' => $duplicate_response, |
349
|
|
|
); |
350
|
|
|
|
351
|
|
|
} |
352
|
|
|
|
353
|
|
|
} |
354
|
|
|
|
355
|
|
|
} else { |
356
|
|
|
|
357
|
|
|
gravityview()->log->error( 'Duplicate entry failed: there was no entry with the entry slug {entry_slug}', array( 'entry_slug' => $entry_slug ) ); |
358
|
|
|
|
359
|
|
|
$messages = array( |
360
|
|
|
'message' => urlencode( __( 'The entry does not exist.', 'gravityview' ) ), |
361
|
|
|
'status' => 'error', |
362
|
|
|
); |
363
|
|
|
} |
364
|
|
|
|
365
|
|
|
$redirect_to_base = esc_url_raw( remove_query_arg( array( 'action', 'gvid' ) ) ); |
366
|
|
|
$redirect_to = add_query_arg( $messages, $redirect_to_base ); |
367
|
|
|
|
368
|
|
|
wp_safe_redirect( $redirect_to ); |
369
|
|
|
|
370
|
|
|
exit(); |
371
|
|
|
} |
372
|
|
|
|
373
|
|
|
/** |
374
|
|
|
* Duplicate the entry. |
375
|
|
|
* |
376
|
|
|
* Done after all the checks in self::process_duplicate. |
377
|
|
|
* |
378
|
|
|
* @since 2.5 |
379
|
|
|
* |
380
|
|
|
* @param array $entry The entry to be duplicated |
381
|
|
|
* |
382
|
|
|
* @return WP_Error|boolean |
383
|
|
|
*/ |
384
|
|
|
private function duplicate_entry( $entry ) { |
385
|
|
|
|
386
|
|
|
if ( ! $entry_id = \GV\Utils::get( $entry, 'id' ) ) { |
387
|
|
|
return new WP_Error( 'gravityview-duplicate-entry-missing', __( 'The entry does not exist.', 'gravityview' ) ); |
388
|
|
|
} |
389
|
|
|
|
390
|
|
|
gravityview()->log->debug( 'Starting duplicate entry: {entry_id}', array( 'entry_id' => $entry_id ) ); |
391
|
|
|
|
392
|
|
|
global $wpdb; |
393
|
|
|
|
394
|
|
|
$entry_table = GFFormsModel::get_entry_table_name(); |
395
|
|
|
$entry_meta_table = GFFormsModel::get_entry_meta_table_name(); |
396
|
|
|
|
397
|
|
|
if ( ! $row = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $entry_table WHERE ID = %d", $entry_id ), ARRAY_A ) ) { |
398
|
|
|
return new WP_Error( 'gravityview-duplicate-entry-missing', __( 'The entry does not exist.', 'gravityview' ) ); |
399
|
|
|
} |
400
|
|
|
|
401
|
|
|
$row['id'] = null; |
402
|
|
|
$row['date_created'] = date( 'Y-m-d H:i:s', time() ); |
403
|
|
|
$row['date_updated'] = $row['date_created']; |
404
|
|
|
$row['is_starred'] = false; |
405
|
|
|
$row['is_read'] = false; |
406
|
|
|
$row['ip'] = GFFormsModel::get_ip(); |
407
|
|
|
$row['source_url'] = esc_url_raw( remove_query_arg( array( 'action', 'gvid' ) ) ); |
408
|
|
|
$row['user_agent'] = \GV\Utils::_SERVER( 'HTTP_USER_AGENT' ); |
409
|
|
|
$row['created_by'] = wp_get_current_user()->ID; |
410
|
|
|
|
411
|
|
|
/** |
412
|
|
|
* @filter `gravityview/entry/duplicate/details` Modify the new entry details before it's created. |
413
|
|
|
* @since 2.5 |
414
|
|
|
* @param[in,out] array $row The entry details |
415
|
|
|
* @param array $entry The original entry |
416
|
|
|
*/ |
417
|
|
|
$row = apply_filters( 'gravityview/entry/duplicate/details', $row, $entry ); |
418
|
|
|
|
419
|
|
|
if ( ! $wpdb->insert( $entry_table, $row ) ) { |
420
|
|
|
return new WP_Error( 'gravityview-duplicate-entry-db-details', __( 'There was an error duplicating the entry.', 'gravityview' ) ); |
421
|
|
|
} |
422
|
|
|
|
423
|
|
|
$duplicated_id = $wpdb->insert_id; |
424
|
|
|
|
425
|
|
|
$meta = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $entry_meta_table WHERE entry_id = %d", $entry_id ), ARRAY_A ); |
426
|
|
|
|
427
|
|
|
$duplicate_meta = new WP_List_Util( $meta ); |
428
|
|
|
|
429
|
|
|
// Keys that should be reset by default |
430
|
|
|
$reset_meta = array( 'is_approved', 'gravityview_unique_id', 'workflow_current_status_timestamp' ); |
431
|
|
|
foreach ( $reset_meta as $meta_key ) { |
432
|
|
|
$duplicate_meta->filter( array( 'meta_key' => $meta_key ), 'NOT' ); |
433
|
|
|
} |
434
|
|
|
|
435
|
|
|
$save_this_meta = array(); |
436
|
|
|
foreach ( $duplicate_meta->get_output() as $m ) { |
437
|
|
|
$save_this_meta[] = array( |
438
|
|
|
'meta_key' => $m['meta_key'], |
439
|
|
|
'meta_value' => $m['meta_value'], |
440
|
|
|
'item_index' => $m['item_index'], |
441
|
|
|
); |
442
|
|
|
} |
443
|
|
|
|
444
|
|
|
// Update the row ID for later usage |
445
|
|
|
$row['id'] = $duplicated_id; |
446
|
|
|
|
447
|
|
|
/** |
448
|
|
|
* @filter `gravityview/entry/duplicate/meta` Modify the new entry meta details. |
449
|
|
|
* @param[in,out] array $dulicate_meta The duplicate meta. Use/add meta_key, meta_value, item_index. |
450
|
|
|
* @param array $duplicate_entry The duplicated entry |
451
|
|
|
* @param array $entry The original entry |
452
|
|
|
*/ |
453
|
|
|
$save_this_meta = apply_filters( 'gravityview/entry/duplicate/meta', $save_this_meta, $row, $entry ); |
454
|
|
|
|
455
|
|
|
foreach ( $save_this_meta as $data ) { |
456
|
|
|
$data['form_id'] = $entry['form_id']; |
457
|
|
|
$data['entry_id'] = $duplicated_id; |
458
|
|
|
|
459
|
|
|
if ( ! $wpdb->insert( $entry_meta_table, $data ) ) { |
460
|
|
|
return new WP_Error( 'gravityview-duplicate-entry-db-meta', __( 'There was an error duplicating the entry.', 'gravityview' ) ); |
461
|
|
|
} |
462
|
|
|
} |
463
|
|
|
|
464
|
|
|
$duplicated_entry = \GFAPI::get_entry( $duplicated_id ); |
465
|
|
|
|
466
|
|
|
$duplicate_response = 'duplicated'; |
467
|
|
|
|
468
|
|
|
/** |
469
|
|
|
* @action `gravityview/entry/duplicated` Triggered when an entry is duplicated |
470
|
|
|
* @since 2.5 |
471
|
|
|
* @param array $duplicated_entry The duplicated entry |
472
|
|
|
* @param array $entry The original entry |
473
|
|
|
*/ |
474
|
|
|
do_action( 'gravityview/duplicate-entry/duplicated', $duplicated_entry, $entry ); |
475
|
|
|
|
476
|
|
|
gravityview()->log->debug( 'Duplicate response: {duplicate_response}', array( 'duplicate_response' => $duplicate_response ) ); |
477
|
|
|
|
478
|
|
|
return $duplicate_response; |
479
|
|
|
} |
480
|
|
|
|
481
|
|
|
/** |
482
|
|
|
* Is the current nonce valid for editing the entry? |
483
|
|
|
* |
484
|
|
|
* @since 2.5 |
485
|
|
|
* |
486
|
|
|
* @return boolean |
487
|
|
|
*/ |
488
|
|
|
public function verify_nonce() { |
489
|
|
|
|
490
|
|
|
// No duplicate entry request was made |
491
|
|
|
if ( empty( $_GET['entry_id'] ) || empty( $_GET['duplicate'] ) ) { |
492
|
|
|
return false; |
493
|
|
|
} |
494
|
|
|
|
495
|
|
|
$nonce_key = self::get_nonce_key( $_GET['entry_id'] ); |
496
|
|
|
|
497
|
|
|
$valid = wp_verify_nonce( $_GET['duplicate'], $nonce_key ); |
498
|
|
|
|
499
|
|
|
/** |
500
|
|
|
* @filter `gravityview/duplicate-entry/verify_nonce` Override Duplicate Entry nonce validation. Return true to declare nonce valid. |
501
|
|
|
* @since 2.5 |
502
|
|
|
* @see wp_verify_nonce() |
503
|
|
|
* @param int|boolean $valid False if invalid; 1 or 2 when nonce was generated |
504
|
|
|
* @param string $nonce_key Name of nonce action used in wp_verify_nonce. $_GET['duplicate'] holds the nonce value itself. Default: `duplicate_{entry_id}` |
505
|
|
|
*/ |
506
|
|
|
$valid = apply_filters( 'gravityview/duplicate-entry/verify_nonce', $valid, $nonce_key ); |
507
|
|
|
|
508
|
|
|
return $valid; |
509
|
|
|
} |
510
|
|
|
|
511
|
|
|
/** |
512
|
|
|
* Get the onclick attribute for the confirm dialogs that warns users before they duplicate an entry |
513
|
|
|
* |
514
|
|
|
* @since 2.5 |
515
|
|
|
* |
516
|
|
|
* @return string HTML `onclick` attribute |
517
|
|
|
*/ |
518
|
|
|
public static function get_confirm_dialog() { |
519
|
|
|
|
520
|
|
|
$confirm = __( 'Are you sure you want to duplicate this entry?', 'gravityview' ); |
521
|
|
|
|
522
|
|
|
/** |
523
|
|
|
* @filter `gravityview/duplicate-entry/confirm-text` Modify the Duplicate Entry Javascript confirmation text |
524
|
|
|
* @param string $confirm Default: "Are you sure you want to duplicate this entry?" |
525
|
|
|
*/ |
526
|
|
|
$confirm = apply_filters( 'gravityview/duplicate-entry/confirm-text', $confirm ); |
527
|
|
|
|
528
|
|
|
return 'return window.confirm(\''. esc_js( $confirm ) .'\');'; |
529
|
|
|
} |
530
|
|
|
|
531
|
|
|
/** |
532
|
|
|
* Check if the user can edit the entry |
533
|
|
|
* |
534
|
|
|
* - Is the nonce valid? |
535
|
|
|
* - Does the user have the right caps for the entry |
536
|
|
|
* - Is the entry in the trash? |
537
|
|
|
* |
538
|
|
|
* @since 2.5 |
539
|
|
|
* |
540
|
|
|
* @param array $entry Gravity Forms entry array |
541
|
|
|
* @param int $view_id ID of the View being rendered |
542
|
|
|
* |
543
|
|
|
* @return boolean|WP_Error True: can edit form. WP_Error: nope. |
544
|
|
|
*/ |
545
|
|
|
private function user_can_duplicate_entry( $entry = array(), $view_id = null ) { |
546
|
|
|
|
547
|
|
|
$error = NULL; |
548
|
|
|
|
549
|
|
|
if ( ! $this->verify_nonce() ) { |
550
|
|
|
$error = __( 'The link to duplicate this entry is not valid; it may have expired.', 'gravityview' ); |
551
|
|
|
} |
552
|
|
|
|
553
|
|
|
if ( ! self::check_user_cap_duplicate_entry( $entry, array(), $view_id ) ) { |
554
|
|
|
$error = __( 'You do not have permission to duplicate this entry.', 'gravityview' ); |
555
|
|
|
} |
556
|
|
|
|
557
|
|
|
// No errors; everything's fine here! |
558
|
|
|
if ( empty( $error ) ) { |
559
|
|
|
return true; |
560
|
|
|
} |
561
|
|
|
|
562
|
|
|
gravityview()->log->error( '{error}', array( 'erorr' => $error ) ); |
563
|
|
|
|
564
|
|
|
return new WP_Error( 'gravityview-duplicate-entry-permissions', $error ); |
565
|
|
|
} |
566
|
|
|
|
567
|
|
|
|
568
|
|
|
/** |
569
|
|
|
* checks if user has permissions to view the link or duplicate a specific entry |
570
|
|
|
* |
571
|
|
|
* @since 2.5 |
572
|
|
|
* |
573
|
|
|
* @param array $entry Gravity Forms entry array |
574
|
|
|
* @param array $field Field settings (optional) |
575
|
|
|
* @param int $view_id Pass a View ID to check caps against. If not set, check against current View (@deprecated no longer optional) |
576
|
|
|
* |
577
|
|
|
* @return bool |
578
|
|
|
*/ |
579
|
|
|
public static function check_user_cap_duplicate_entry( $entry, $field, $view_id ) { |
580
|
|
|
$current_user = wp_get_current_user(); |
581
|
|
|
|
582
|
|
|
$entry_id = isset( $entry['id'] ) ? $entry['id'] : NULL; |
583
|
|
|
|
584
|
|
|
// Or if they can duplicate any entries (as defined in Gravity Forms), we're good. |
585
|
|
|
if ( GVCommon::has_cap( array( 'gravityforms_edit_entries' ), $entry_id ) ) { |
586
|
|
|
|
587
|
|
|
gravityview()->log->debug( 'Current user has `gravityforms_edit_entries` capability.' ); |
588
|
|
|
|
589
|
|
|
return true; |
590
|
|
|
} |
591
|
|
|
|
592
|
|
|
|
593
|
|
|
// If field options are passed, check if current user can view the link |
594
|
|
|
if ( ! empty( $field ) ) { |
595
|
|
|
|
596
|
|
|
// If capability is not defined, something is not right! |
597
|
|
|
if ( empty( $field['allow_duplicate_cap'] ) ) { |
598
|
|
|
|
599
|
|
|
gravityview()->log->error( 'Cannot read duplicate entry field caps', array( 'data' => $field ) ); |
600
|
|
|
|
601
|
|
|
return false; |
602
|
|
|
} |
603
|
|
|
|
604
|
|
|
if ( GVCommon::has_cap( $field['allow_duplicate_cap'] ) ) { |
605
|
|
|
|
606
|
|
|
// Do not return true if cap is read, as we need to check if the current user created the entry |
607
|
|
|
if ( 'read' !== $field['allow_duplicate_cap'] ) { |
608
|
|
|
return true; |
609
|
|
|
} |
610
|
|
|
|
611
|
|
|
} else { |
612
|
|
|
|
613
|
|
|
gravityview()->log->debug( 'User {user_id} is not authorized to view duplicate entry link ', array( 'user_id' => $current_user->ID ) ); |
614
|
|
|
|
615
|
|
|
return false; |
616
|
|
|
} |
617
|
|
|
|
618
|
|
|
} |
619
|
|
|
|
620
|
|
|
if ( ! isset( $entry['created_by'] ) ) { |
621
|
|
|
|
622
|
|
|
gravityview()->log->error( 'Cannot duplicate entry; entry `created_by` doesn\'t exist.' ); |
623
|
|
|
|
624
|
|
|
return false; |
625
|
|
|
} |
626
|
|
|
|
627
|
|
|
// Only checks user_duplicate view option if view is already set |
628
|
|
|
if ( $view_id ) { |
629
|
|
|
|
630
|
|
|
$current_view = gravityview_get_current_view_data( $view_id ); |
631
|
|
|
|
632
|
|
|
$user_duplicate = isset( $current_view['atts']['user_duplicate'] ) ? $current_view['atts']['user_duplicate'] : false; |
633
|
|
|
|
634
|
|
|
if ( empty( $user_duplicate ) ) { |
635
|
|
|
|
636
|
|
|
gravityview()->log->debug( 'User Duplicate is disabled. Returning false.' ); |
637
|
|
|
|
638
|
|
|
return false; |
639
|
|
|
} |
640
|
|
|
} |
641
|
|
|
|
642
|
|
|
// If the logged-in user is the same as the user who created the entry, we're good. |
643
|
|
|
if ( is_user_logged_in() && intval( $current_user->ID ) === intval( $entry['created_by'] ) ) { |
644
|
|
|
|
645
|
|
|
gravityview()->log->debug( 'User {user_id} created the entry.', array( 'user_id' => $current_user->ID ) ); |
646
|
|
|
|
647
|
|
|
return true; |
648
|
|
|
} |
649
|
|
|
|
650
|
|
|
return false; |
651
|
|
|
} |
652
|
|
|
|
653
|
|
|
|
654
|
|
|
/** |
655
|
|
|
* After processing duplicate entry, the user will be redirected to the referring View or embedded post/page. Display a message on redirection. |
656
|
|
|
* |
657
|
|
|
* If success, there will be `status` URL parameters `status=>success` |
658
|
|
|
* If an error, there will be `status` and `message` URL parameters `status=>error&message=example` |
659
|
|
|
* |
660
|
|
|
* @since 2.5 |
661
|
|
|
* |
662
|
|
|
* @param int $current_view_id The ID of the View being rendered |
663
|
|
|
* |
664
|
|
|
* @return void |
665
|
|
|
*/ |
666
|
36 |
|
public function display_message( $current_view_id = 0 ) { |
667
|
|
|
|
668
|
36 |
|
if ( empty( $_GET['status'] ) || ! self::verify_nonce() ) { |
669
|
36 |
|
return; |
670
|
|
|
} |
671
|
|
|
|
672
|
|
|
// Entry wasn't duplicateded from current View |
673
|
|
|
if ( isset( $_GET['view_id'] ) && ( intval( $_GET['view_id'] ) !== intval( $current_view_id ) ) ) { |
674
|
|
|
return; |
675
|
|
|
} |
676
|
|
|
|
677
|
|
|
$status = esc_attr( $_GET['status'] ); |
678
|
|
|
$message_from_url = \GV\Utils::_GET( 'message' ); |
679
|
|
|
$message_from_url = rawurldecode( stripslashes_deep( $message_from_url ) ); |
680
|
|
|
$class = ''; |
681
|
|
|
|
682
|
|
|
switch ( $status ) { |
683
|
|
|
case 'error': |
684
|
|
|
$class = ' gv-error error'; |
685
|
|
|
$error_message = __( 'There was an error duplicating the entry: %s', 'gravityview' ); |
686
|
|
|
$message = sprintf( $error_message, $message_from_url ); |
687
|
|
|
break; |
688
|
|
|
default: |
689
|
|
|
$message = __( 'The entry was successfully duplicated.', 'gravityview' ); |
690
|
|
|
break; |
691
|
|
|
} |
692
|
|
|
|
693
|
|
|
/** |
694
|
|
|
* @filter `gravityview/duplicate-entry/message` Modify the Duplicate Entry messages. Allows HTML; will not be further sanitized. |
695
|
|
|
* @since 2.5 |
696
|
|
|
* @param string $message Message to be displayed, sanitized using esc_attr() |
697
|
|
|
* @param string $status Message status (`error` or `success`) |
698
|
|
|
* @param string $message_from_url The original error message, if any, without the "There was an error duplicating the entry:" prefix |
699
|
|
|
*/ |
700
|
|
|
$message = apply_filters( 'gravityview/duplicate-entry/message', esc_attr( $message ), $status, $message_from_url ); |
701
|
|
|
|
702
|
|
|
// DISPLAY ERROR/SUCCESS MESSAGE |
703
|
|
|
echo '<div class="gv-notice' . esc_attr( $class ) .'">'. $message .'</div>'; |
704
|
|
|
} |
705
|
|
|
|
706
|
|
|
|
707
|
|
|
} // end class |
708
|
|
|
|
709
|
|
|
GravityView_Duplicate_Entry::getInstance(); |
710
|
|
|
|
711
|
|
|
|
Adding explicit visibility (
private
,protected
, orpublic
) is generally recommend to communicate to other developers how, and from where this method is intended to be used.