Completed
Push — develop ( 383617...77f2a5 )
by Gennady
24:34 queued 08:00
created

update_calculation_fields()   C

Complexity

Conditions 14
Paths 22

Size

Total Lines 64

Duplication

Lines 0
Ratio 0 %

Code Coverage

Tests 29
CRAP Score 14.3489

Importance

Changes 0
Metric Value
cc 14
nc 22
nop 0
dl 0
loc 64
ccs 29
cts 33
cp 0.8788
crap 14.3489
rs 6.2666
c 0
b 0
f 0

How to fix   Long Method    Complexity   

Long Method

Small methods make your code easier to understand, in particular if combined with a good name. Besides, if your method is small, finding a good name is usually much easier.

For example, if you find yourself adding comments to a method's body, this is usually a good sign to extract the commented part to a new method, and use the comment as a starting point when coming up with a good name for this new method.

Commonly applied refactorings include:

1
<?php
2
/**
3
 * GravityView Edit Entry - render frontend
4
 *
5
 * @package   GravityView
6
 * @license   GPL2+
7
 * @author    Katz Web Services, Inc.
8
 * @link      http://gravityview.co
9
 * @copyright Copyright 2014, Katz Web Services, Inc.
10
 */
11
12
if ( ! defined( 'WPINC' ) ) {
13
	die;
14
}
15
16
class GravityView_Edit_Entry_Render {
17
18
	/**
19
	 * @var GravityView_Edit_Entry
20
	 */
21
	protected $loader;
22
23
	/**
24
	 * @var string String used to generate unique nonce for the entry/form/view combination. Allows access to edit page.
25
	 */
26
	static $nonce_key;
27
28
	/**
29
	 * @since 1.9
30
	 * @var string String used for check valid edit entry form submission. Allows saving edit form values.
31
	 */
32
	private static $nonce_field = 'is_gv_edit_entry';
33
34
	/**
35
	 * @since 1.9
36
	 * @var bool Whether to allow save and continue functionality
37
	 */
38
	private static $supports_save_and_continue = false;
39
40
	/**
41
	 * Gravity Forms entry array
42
	 *
43
	 * @var array
44
	 */
45
	public $entry;
46
47
	/**
48
	 * The View.
49
	 *
50
	 * @var \GV\View.
51
	 * @since develop
52
	 */
53
	public $view;
54
55
	/**
56
	 * Gravity Forms entry array (it won't get changed during this class lifecycle)
57
	 * @since 1.17.2
58
	 * @var array
59
	 */
60
	private static $original_entry = array();
61
62
	/**
63
	 * Gravity Forms form array (GravityView modifies the content through this class lifecycle)
64
	 *
65
	 * @var array
66
	 */
67
	public $form;
68
69
	/**
70
	 * Gravity Forms form array (it won't get changed during this class lifecycle)
71
	 * @since 1.16.2.1
72
	 * @var array
73
	 */
74
	private static $original_form;
75
76
	/**
77
	 * Gravity Forms form array after the form validation process
78
	 * @since 1.13
79
	 * @var array
80
	 */
81
	public $form_after_validation = null;
82
83
	/**
84
	 * Hold an array of GF field objects that have calculation rules
85
	 * @var array
86
	 */
87
	public $fields_with_calculation = array();
88
89
	/**
90
	 * Gravity Forms form id
91
	 *
92
	 * @var int
93
	 */
94
	public $form_id;
95
96
	/**
97
	 * ID of the current view
98
	 *
99
	 * @var int
100
	 */
101
	public $view_id;
102
103
	/**
104
	 * ID of the current post. May also be ID of the current View.
105
     *
106
     * @since 2.0.13
107
     * 
108
     * @var int
109
	 */
110
	public $post_id;
111
112
	/**
113
	 * Updated entry is valid (GF Validation object)
114
	 *
115
	 * @var array
116
	 */
117
	public $is_valid = NULL;
118
119 18
	function __construct( GravityView_Edit_Entry $loader ) {
0 ignored issues
show
Best Practice introduced by
It is generally recommended to explicitly declare the visibility for methods.

Adding explicit visibility (private, protected, or public) is generally recommend to communicate to other developers how, and from where this method is intended to be used.

Loading history...
120 18
		$this->loader = $loader;
121 18
	}
122
123 18
	function load() {
0 ignored issues
show
Best Practice introduced by
It is generally recommended to explicitly declare the visibility for methods.

Adding explicit visibility (private, protected, or public) is generally recommend to communicate to other developers how, and from where this method is intended to be used.

Loading history...
124
125
		/** @define "GRAVITYVIEW_DIR" "../../../" */
126 18
		include_once( GRAVITYVIEW_DIR .'includes/class-admin-approve-entries.php' );
127
128
		// Don't display an embedded form when editing an entry
129 18
		add_action( 'wp_head', array( $this, 'prevent_render_form' ) );
130 18
		add_action( 'wp_footer', array( $this, 'prevent_render_form' ) );
131
132
		// Stop Gravity Forms processing what is ours!
133 18
		add_filter( 'wp', array( $this, 'prevent_maybe_process_form'), 8 );
134
135 18
		add_filter( 'gravityview_is_edit_entry', array( $this, 'is_edit_entry') );
136
137 18
		add_action( 'gravityview_edit_entry', array( $this, 'init' ), 10, 4 );
138
139
		// Disable conditional logic if needed (since 1.9)
140 18
		add_filter( 'gform_has_conditional_logic', array( $this, 'manage_conditional_logic' ), 10, 2 );
141
142
		// Make sure GF doesn't validate max files (since 1.9)
143 18
		add_filter( 'gform_plupload_settings', array( $this, 'modify_fileupload_settings' ), 10, 3 );
144
145
		// Add fields expected by GFFormDisplay::validate()
146 18
		add_filter( 'gform_pre_validation', array( $this, 'gform_pre_validation') );
147
148
		// Fix multiselect value for GF 2.2
149 18
		add_filter( 'gravityview/edit_entry/field_value_multiselect', array( $this, 'fix_multiselect_value_serialization' ), 10, 3 );
150 18
	}
151
152
	/**
153
	 * Don't show any forms embedded on a page when GravityView is in Edit Entry mode
154
	 *
155
	 * Adds a `__return_empty_string` filter on the Gravity Forms shortcode on the `wp_head` action
156
	 * And then removes it on the `wp_footer` action
157
	 *
158
	 * @since 1.16.1
159
	 *
160
	 * @return void
161
	 */
162 1
	public function prevent_render_form() {
163 1
		if( $this->is_edit_entry() ) {
164 1
			if( 'wp_head' === current_filter() ) {
165 1
				add_filter( 'gform_shortcode_form', '__return_empty_string' );
166
			} else {
167 1
				remove_filter( 'gform_shortcode_form', '__return_empty_string' );
168
			}
169
		}
170 1
	}
171
172
	/**
173
	 * Because we're mimicking being a front-end Gravity Forms form while using a Gravity Forms
174
	 * backend form, we need to prevent them from saving twice.
175
	 * @return void
176
	 */
177 1
	public function prevent_maybe_process_form() {
178
179 1
	    if( ! $this->is_edit_entry_submission() ) {
180 1
			return;
181
		}
182
183
		gravityview()->log->debug( 'GravityView_Edit_Entry[prevent_maybe_process_form] Removing GFForms::maybe_process_form() action.' );
184
185
		remove_action( 'wp',  array( 'RGForms', 'maybe_process_form'), 9 );
186
		remove_action( 'wp',  array( 'GFForms', 'maybe_process_form'), 9 );
187
	}
188
189
	/**
190
	 * Is the current page an Edit Entry page?
191
	 * @return boolean
192
	 */
193 23
	public function is_edit_entry() {
194
195 23
		$is_edit_entry = GravityView_frontend::is_single_entry() && ! empty( $_GET['edit'] );
196
197 23
		return ( $is_edit_entry || $this->is_edit_entry_submission() );
198
	}
199
200
	/**
201
	 * Is the current page an Edit Entry page?
202
	 * @since 1.9
203
	 * @return boolean
204
	 */
205 23
	public function is_edit_entry_submission() {
206 23
		return !empty( $_POST[ self::$nonce_field ] );
207
	}
208
209
	/**
210
	 * When Edit entry view is requested setup the vars
211
	 */
212 18
	private function setup_vars() {
213 18
        global $post;
214
215 18
		$gravityview_view = GravityView_View::getInstance();
216
217
218 18
		$entries = $gravityview_view->getEntries();
219 18
	    self::$original_entry = $entries[0];
220 18
	    $this->entry = $entries[0];
221
222 18
		self::$original_form = $gravityview_view->getForm();
223 18
		$this->form = $gravityview_view->getForm();
224 18
		$this->form_id = $this->entry['form_id'];
225 18
		$this->view_id = $gravityview_view->getViewId();
226 18
		$this->post_id = \GV\Utils::get( $post, 'ID', null );
227
228 18
		self::$nonce_key = GravityView_Edit_Entry::get_nonce_key( $this->view_id, $this->form_id, $this->entry['id'] );
229 18
	}
230
231
232
	/**
233
	 * Load required files and trigger edit flow
234
	 *
235
	 * Run when the is_edit_entry returns true.
236
	 *
237
	 * @param \GravityView_View_Data $gv_data GravityView Data object
238
	 * @param \GV\Entry   $entry   The Entry.
239
	 * @param \GV\View    $view    The View.
240
	 * @param \GV\Request $request The Request.
241
	 *
242
	 * @since develop Added $entry, $view, $request adhocs.
243
	 *
244
	 * @return void
245
	 */
246 19
	public function init( $gv_data = null, $entry = null, $view = null, $request = null ) {
247
248 19
		require_once( GFCommon::get_base_path() . '/form_display.php' );
249 19
		require_once( GFCommon::get_base_path() . '/entry_detail.php' );
250
251 19
		$this->setup_vars();
252
253 19
		if ( ! $gv_data ) {
254
			$gv_data = GravityView_View_Data::getInstance();
255
		}
256
257
		// Multiple Views embedded, don't proceed if nonce fails
258 19
		if ( $gv_data->has_multiple_views() && ! $this->verify_nonce() ) {
0 ignored issues
show
Deprecated Code introduced by
The method GravityView_View_Data::has_multiple_views() has been deprecated.

This method has been deprecated.

Loading history...
259
			gravityview()->log->error( 'Nonce validation failed for the Edit Entry request; returning' );
260
			return;
261
		}
262
263
		// Sorry, you're not allowed here.
264 19
		if ( false === $this->user_can_edit_entry( true ) ) {
265 1
			gravityview()->log->error( 'User is not allowed to edit this entry; returning', array( 'data' => $this->entry ) );
266 1
			return;
267
		}
268
269 19
		$this->view = $view;
270
271 19
		$this->print_scripts();
272
273 19
		$this->process_save( $gv_data );
274
275 19
		$this->edit_entry_form();
276
277 19
	}
278
279
280
	/**
281
	 * Force Gravity Forms to output scripts as if it were in the admin
282
	 * @return void
283
	 */
284 18
	private function print_scripts() {
285 18
		$gravityview_view = GravityView_View::getInstance();
286
287 18
		wp_register_script( 'gform_gravityforms', GFCommon::get_base_url().'/js/gravityforms.js', array( 'jquery', 'gform_json', 'gform_placeholder', 'sack', 'plupload-all', 'gravityview-fe-view' ) );
288
289 18
		GFFormDisplay::enqueue_form_scripts( $gravityview_view->getForm(), false);
290
291 18
		wp_localize_script( 'gravityview-fe-view', 'gvGlobals', array( 'cookiepath' => COOKIEPATH ) );
292
293
		// Sack is required for images
294 18
		wp_print_scripts( array( 'sack', 'gform_gravityforms', 'gravityview-fe-view' ) );
295 18
	}
296
297
298
	/**
299
	 * Process edit entry form save
300
	 *
301
	 * @param array $gv_data The View data.
302
	 */
303 19
	private function process_save( $gv_data ) {
304
305 19
		if ( empty( $_POST ) || ! isset( $_POST['lid'] ) ) {
306 5
			return;
307
		}
308
309
		// Make sure the entry, view, and form IDs are all correct
310 18
		$valid = $this->verify_nonce();
311
312 18
		if ( !$valid ) {
313
			gravityview()->log->error( 'Nonce validation failed.' );
314
			return;
315
		}
316
317 18
		if ( $this->entry['id'] !== $_POST['lid'] ) {
318
			gravityview()->log->error( 'Entry ID did not match posted entry ID.' );
319
			return;
320
		}
321
322 18
		gravityview()->log->debug( '$_POSTed data (sanitized): ', array( 'data' => esc_html( print_r( $_POST, true ) ) ) );
323
324 18
		$this->process_save_process_files( $this->form_id );
325
326 18
		$this->validate();
327
328 18
		if( $this->is_valid ) {
0 ignored issues
show
Bug Best Practice introduced by
The expression $this->is_valid of type array is implicitly converted to a boolean; are you sure this is intended? If so, consider using ! empty($expr) instead to make it clear that you intend to check for an array without elements.

This check marks implicit conversions of arrays to boolean values in a comparison. While in PHP an empty array is considered to be equal (but not identical) to false, this is not always apparent.

Consider making the comparison explicit by using empty(..) or ! empty(...) instead.

Loading history...
329
330 18
			gravityview()->log->debug( 'Submission is valid.' );
331
332
			/**
333
			 * @hack This step is needed to unset the adminOnly from form fields, to add the calculation fields
334
			 */
335 18
			$form = $this->form_prepare_for_save();
336
337
			/**
338
			 * @hack to avoid the capability validation of the method save_lead for GF 1.9+
339
			 */
340 18
			unset( $_GET['page'] );
341
342 18
			$date_created = $this->entry['date_created'];
343
344
			/**
345
			 * @hack to force Gravity Forms to use $read_value_from_post in GFFormsModel::save_lead()
346
			 * @since 1.17.2
347
			 */
348 18
			unset( $this->entry['date_created'] );
349
350
			/**
351
			 * @action `gravityview/edit_entry/before_update` Perform an action after the entry has been updated using Edit Entry
352
			 * @since develop
353
			 * @param array $form Gravity Forms form array
354
			 * @param string $entry_id Numeric ID of the entry that is being updated
355
			 * @param GravityView_Edit_Entry_Render $this This object
356
			 * @param GravityView_View_Data $gv_data The View data
357
			 */
358 18
			do_action( 'gravityview/edit_entry/before_update', $form, $this->entry['id'], $this, $gv_data );
359
360 18
			GFFormsModel::save_lead( $form, $this->entry );
361
362
	        // Delete the values for hidden inputs
363 18
	        $this->unset_hidden_field_values();
364
			
365 18
			$this->entry['date_created'] = $date_created;
366
367
			// Process calculation fields
368 18
			$this->update_calculation_fields();
369
370
			// Perform actions normally performed after updating a lead
371 18
			$this->after_update();
372
373
	        /**
374
			 * Must be AFTER after_update()!
375
			 * @see https://github.com/gravityview/GravityView/issues/764
376
			 */
377 18
			$this->maybe_update_post_fields( $form );
378
379
			/**
380
			 * @action `gravityview/edit_entry/after_update` Perform an action after the entry has been updated using Edit Entry
381
             * @since 2.1 Added $gv_data parameter
382
			 * @param array $form Gravity Forms form array
383
			 * @param string $entry_id Numeric ID of the entry that was updated
384
			 * @param GravityView_Edit_Entry_Render $this This object
385
			 * @param GravityView_View_Data $gv_data The View data
386
			 */
387 18
			do_action( 'gravityview/edit_entry/after_update', $this->form, $this->entry['id'], $this, $gv_data );
388
389
		} else {
390
			gravityview()->log->error( 'Submission is NOT valid.', array( 'entry' => $this->entry ) );
391
		}
392
393 18
	} // process_save
394
395
	/**
396
	 * Delete the value of fields hidden by conditional logic when the entry is edited
397
	 *
398
	 * @uses GFFormsModel::update_lead_field_value()
399
	 *
400
	 * @since 1.17.4
401
	 *
402
	 * @return void
403
	 */
404 17
	private function unset_hidden_field_values() {
405 17
	    global $wpdb;
406
407
		/**
408
		 * @filter `gravityview/edit_entry/unset_hidden_field_values` Whether to delete values of fields hidden by conditional logic
409
		 * @since 1.22.2
410
		 * @param bool $unset_hidden_field_values Default: true
411
		 * @param GravityView_Edit_Entry_Render $this This object
412
		 */
413 17
		$unset_hidden_field_values = apply_filters( 'gravityview/edit_entry/unset_hidden_field_values', true, $this );
414
415 17
		$this->unset_hidden_calculations = array();
0 ignored issues
show
Bug introduced by
The property unset_hidden_calculations does not exist. Did you maybe forget to declare it?

In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code:

class MyClass { }

$x = new MyClass();
$x->foo = true;

Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion:

class MyClass {
    public $foo;
}

$x = new MyClass();
$x->foo = true;
Loading history...
416
417 17
		if( ! $unset_hidden_field_values ) {
418
			return;
419
		}
420
421 17
		if ( version_compare( GravityView_GFFormsModel::get_database_version(), '2.3-dev-1', '>=' ) && method_exists( 'GFFormsModel', 'get_entry_meta_table_name' ) ) {
422 17
			$entry_meta_table = GFFormsModel::get_entry_meta_table_name();
423 17
			$current_fields = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $entry_meta_table WHERE entry_id=%d", $this->entry['id'] ) );
424
		} else {
425
			$lead_detail_table = GFFormsModel::get_lead_details_table_name();
426
			$current_fields = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $lead_detail_table WHERE lead_id=%d", $this->entry['id'] ) );
427
		}
428
429 17
	    foreach ( $this->entry as $input_id => $field_value ) {
430
431 17
			if ( ! is_numeric( $input_id ) ) {
432 17
				continue;
433
			}
434
435 17
		    $field = RGFormsModel::get_field( $this->form, $input_id );
436
437
		    // Reset fields that are hidden
438
		    // Don't pass $entry as fourth parameter; force using $_POST values to calculate conditional logic
439 17
		    if ( GFFormsModel::is_field_hidden( $this->form, $field, array(), NULL ) ) {
440
441 1
				$empty_value = $field->get_value_save_entry(
442 1
					is_array( $field->get_entry_inputs() ) ? array() : '',
443 1
					$this->form, '', $this->entry['id'], $this->entry
444
				);
445
446 1
				if ( $field->has_calculation() ) {
447 1
					$this->unset_hidden_calculations[] = $field->id; // Unset
448 1
					$empty_value = '';
449
				}
450
451 1
			    $lead_detail_id = GFFormsModel::get_lead_detail_id( $current_fields, $input_id );
452
453 1
			    GFFormsModel::update_lead_field_value( $this->form, $this->entry, $field, $lead_detail_id, $input_id, $empty_value );
454
455
			    // Prevent the $_POST values of hidden fields from being used as default values when rendering the form
456
				// after submission
457 1
			    $post_input_id = 'input_' . str_replace( '.', '_', $input_id );
458 1
			    $_POST[ $post_input_id ] = '';
459
		    }
460
	    }
461 17
	}
462
463
	/**
464
	 * Have GF handle file uploads
465
	 *
466
	 * Copy of code from GFFormDisplay::process_form()
467
	 *
468
	 * @param int $form_id
469
	 */
470 17
	private function process_save_process_files( $form_id ) {
471
472
		//Loading files that have been uploaded to temp folder
473 17
		$files = GFCommon::json_decode( stripslashes( RGForms::post( 'gform_uploaded_files' ) ) );
474 17
		if ( ! is_array( $files ) ) {
475 16
			$files = array();
476
		}
477
478
		/**
479
		 * Make sure the fileuploads are not overwritten if no such request was done.
480
		 * @since 1.20.1
481
		 */
482 17
		add_filter( "gform_save_field_value_$form_id", array( $this, 'save_field_value' ), 99, 5 );
483
484 17
		RGFormsModel::$uploaded_files[ $form_id ] = $files;
485 17
	}
486
487
	/**
488
	 * Make sure the fileuploads are not overwritten if no such request was done.
489
	 *
490
	 * TO ONLY BE USED INTERNALLY; DO NOT DEVELOP ON; MAY BE REMOVED AT ANY TIME.
491
	 *
492
	 * @since 1.20.1
493
	 *
494
	 * @param string $value Field value
495
	 * @param array $entry GF entry array
496
	 * @param GF_Field_FileUpload $field
497
	 * @param array $form GF form array
498
	 * @param string $input_id ID of the input being saved
499
	 *
500
	 * @return string
501
	 */
502 17
	public function save_field_value( $value = '', $entry = array(), $field = null, $form = array(), $input_id = '' ) {
503
504 17
		if ( ! $field || $field->type != 'fileupload' ) {
505 17
			return $value;
506
		}
507
508 1
		$input_name = 'input_' . str_replace( '.', '_', $input_id );
509
510 1
		if ( $field->multipleFiles ) {
511
			if ( empty( $value ) ) {
512
				return json_decode( $entry[ $input_id ], true );
513
			}
514
			return $value;
515
		}
516
517
		/** No file is being uploaded. */
518 1
		if ( empty( $_FILES[ $input_name ]['name'] ) ) {
519
			/** So return the original upload */
520 1
			return $entry[ $input_id ];
521
		}
522
523 1
		return $value;
524
	}
525
526
	/**
527
	 * Remove max_files validation (done on gravityforms.js) to avoid conflicts with GravityView
528
	 * Late validation done on self::custom_validation
529
	 *
530
	 * @param $plupload_init array Plupload settings
531
	 * @param $form_id
532
	 * @param $instance
533
	 * @return mixed
534
	 */
535 2
	public function modify_fileupload_settings( $plupload_init, $form_id, $instance ) {
0 ignored issues
show
Unused Code introduced by
The parameter $form_id is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
Unused Code introduced by
The parameter $instance is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
536 2
		if( ! $this->is_edit_entry() ) {
537
			return $plupload_init;
538
		}
539
540 2
		$plupload_init['gf_vars']['max_files'] = 0;
541
542 2
		return $plupload_init;
543
	}
544
545
546
	/**
547
	 * Set visibility to visible and convert field input key to string
548
	 * @return array $form
549
	 */
550 17
	private function form_prepare_for_save() {
551
552 17
		$form = $this->filter_conditional_logic( $this->form );
553
554
	    /** @var GF_Field $field */
555 17
		foreach( $form['fields'] as $k => &$field ) {
556
557
			/**
558
			 * Remove the fields with calculation formulas before save to avoid conflicts with GF logic
559
			 * @since 1.16.3
560
			 * @var GF_Field $field
561
			 */
562 17
			if( $field->has_calculation() ) {
563 4
				unset( $form['fields'][ $k ] );
564
			}
565
566 17
			$field->adminOnly = false;
567
568 17
			if( isset( $field->inputs ) && is_array( $field->inputs ) ) {
569 2
				foreach( $field->inputs as $key => $input ) {
570 2
				    $field->inputs[ $key ][ 'id' ] = (string)$input['id'];
571
				}
572
			}
573
		}
574
575 17
		$form['fields'] = array_values( $form['fields'] );
576
577 17
		return $form;
578
	}
579
580 17
	private function update_calculation_fields() {
581 17
		global $wpdb;
582
583 17
		$form = self::$original_form;
584 17
		$update = false;
585
586
		// get the most up to date entry values
587 17
		$entry = GFAPI::get_entry( $this->entry['id'] );
588
589 17
		if ( version_compare( GravityView_GFFormsModel::get_database_version(), '2.3-dev-1', '>=' ) && method_exists( 'GFFormsModel', 'get_entry_meta_table_name' ) ) {
590 17
			$entry_meta_table = GFFormsModel::get_entry_meta_table_name();
591 17
			$current_fields = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $entry_meta_table WHERE entry_id=%d", $entry['id'] ) );
592
		} else {
593
			$lead_detail_table = GFFormsModel::get_lead_details_table_name();
594
			$current_fields = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $lead_detail_table WHERE lead_id=%d", $entry['id'] ) );
595
		}
596
597
598 17
		if ( ! empty( $this->fields_with_calculation ) ) {
599 5
			$allowed_fields = $this->get_configured_edit_fields( $form, $this->view_id );
600 5
			$allowed_fields = wp_list_pluck( $allowed_fields, 'id' );
601
602 5
			foreach ( $this->fields_with_calculation as $field ) {
603
604 5
				if ( in_array( $field->id, $this->unset_hidden_calculations, true ) ) {
605 1
					continue;
606
				}
607
608 5
				$inputs = $field->get_entry_inputs();
609 5
				if ( is_array( $inputs ) ) {
610 4
				    foreach ( $inputs as $input ) {
611 4
						list( $field_id, $input_id ) = rgexplode( '.', $input['id'], 2 );
612
613 4
						if ( 'product' === $field->type ) {
614 4
							$input_name = 'input_' . str_replace( '.', '_', $input['id'] );
615
616
							// Only allow quantity to be set if it's allowed to be edited
617 4
							if ( in_array( $field_id, $allowed_fields ) && $input_id == 3 ) {
618
							} else { // otherwise set to what it previously was
619 4
								$_POST[ $input_name ] = $entry[ $input['id'] ];
620
							}
621
						} else {
622
							// Set to what it previously was if it's not editable
623
							if ( ! in_array( $field_id, $allowed_fields ) ) {
624
								$_POST[ $input_name ] = $entry[ $input['id'] ];
0 ignored issues
show
Bug introduced by
The variable $input_name does not seem to be defined for all execution paths leading up to this point.

If you define a variable conditionally, it can happen that it is not defined for all execution paths.

Let’s take a look at an example:

function myFunction($a) {
    switch ($a) {
        case 'foo':
            $x = 1;
            break;

        case 'bar':
            $x = 2;
            break;
    }

    // $x is potentially undefined here.
    echo $x;
}

In the above example, the variable $x is defined if you pass “foo” or “bar” as argument for $a. However, since the switch statement has no default case statement, if you pass any other value, the variable $x would be undefined.

Available Fixes

  1. Check for existence of the variable explicitly:

    function myFunction($a) {
        switch ($a) {
            case 'foo':
                $x = 1;
                break;
    
            case 'bar':
                $x = 2;
                break;
        }
    
        if (isset($x)) { // Make sure it's always set.
            echo $x;
        }
    }
    
  2. Define a default value for the variable:

    function myFunction($a) {
        $x = ''; // Set a default which gets overridden for certain paths.
        switch ($a) {
            case 'foo':
                $x = 1;
                break;
    
            case 'bar':
                $x = 2;
                break;
        }
    
        echo $x;
    }
    
  3. Add a value for the missing path:

    function myFunction($a) {
        switch ($a) {
            case 'foo':
                $x = 1;
                break;
    
            case 'bar':
                $x = 2;
                break;
    
            // We add support for the missing case.
            default:
                $x = '';
                break;
        }
    
        echo $x;
    }
    
Loading history...
625
							}
626
						}
627
628 4
						GFFormsModel::save_input( $form, $field, $entry, $current_fields, $input['id'] );
629
				    }
630
				} else {
631
					// Set to what it previously was if it's not editable
632 3
					if ( ! in_array( $field->id, $allowed_fields ) ) {
633 2
						$_POST[ 'input_' . $field->id ] = $entry[ $field->id ];
634
					}
635 3
					GFFormsModel::save_input( $form, $field, $entry, $current_fields, $field->id );
636
				}
637
			}
638
639 5
			if ( method_exists( 'GFFormsModel', 'commit_batch_field_operations' ) ) {
640 5
				GFFormsModel::commit_batch_field_operations();
641
			}
642
		}
643 17
	}
644
645
	/**
646
	 * Handle updating the Post Image field
647
	 *
648
	 * Sets a new Featured Image if configured in Gravity Forms; otherwise uploads/updates media
649
	 *
650
	 * @since 1.17
651
	 *
652
	 * @uses GFFormsModel::media_handle_upload
653
	 * @uses set_post_thumbnail
654
	 *
655
	 * @param array $form GF Form array
656
	 * @param GF_Field $field GF Field
657
	 * @param string $field_id Numeric ID of the field
658
	 * @param string $value
659
	 * @param array $entry GF Entry currently being edited
660
	 * @param int $post_id ID of the Post being edited
661
	 *
662
	 * @return mixed|string
663
	 */
664 1
	private function update_post_image( $form, $field, $field_id, $value, $entry, $post_id ) {
665
666 1
		$input_name = 'input_' . $field_id;
667
668 1
		if ( !empty( $_FILES[ $input_name ]['name'] ) ) {
669
670
			// We have a new image
671
672
			$value = RGFormsModel::prepare_value( $form, $field, $value, $input_name, $entry['id'] );
673
674
			$ary = ! empty( $value ) ? explode( '|:|', $value ) : array();
675
	        $ary = stripslashes_deep( $ary );
676
			$img_url = \GV\Utils::get( $ary, 0 );
677
678
			$img_title       = count( $ary ) > 1 ? $ary[1] : '';
679
			$img_caption     = count( $ary ) > 2 ? $ary[2] : '';
680
			$img_description = count( $ary ) > 3 ? $ary[3] : '';
681
682
			$image_meta = array(
683
				'post_excerpt' => $img_caption,
684
				'post_content' => $img_description,
685
			);
686
687
			//adding title only if it is not empty. It will default to the file name if it is not in the array
688
			if ( ! empty( $img_title ) ) {
689
				$image_meta['post_title'] = $img_title;
690
			}
691
692
			/**
693
			 * todo: As soon as \GFFormsModel::media_handle_upload becomes a public method, move this call to \GFFormsModel::media_handle_upload and remove the hack from this class.
694
			 * Note: the method became public in GF 1.9.17.7, but we don't require that version yet.
695
			 */
696
			require_once GRAVITYVIEW_DIR . 'includes/class-gravityview-gfformsmodel.php';
697
			$media_id = GravityView_GFFormsModel::media_handle_upload( $img_url, $post_id, $image_meta );
698
699
			// is this field set as featured image?
700
			if ( $media_id && $field->postFeaturedImage ) {
701
				set_post_thumbnail( $post_id, $media_id );
702
			}
703
704 1
		} elseif ( ! empty( $_POST[ $input_name ] ) && is_array( $value ) ) {
705
706 1
			$img_url         = stripslashes_deep( $_POST[ $input_name ] );
707 1
			$img_title       = stripslashes_deep( \GV\Utils::_POST( $input_name . '_1' ) );
708 1
			$img_caption     = stripslashes_deep( \GV\Utils::_POST( $input_name . '_4' ) );
709 1
			$img_description = stripslashes_deep( \GV\Utils::_POST( $input_name . '_7' ) );
710
711 1
			$value = ! empty( $img_url ) ? $img_url . "|:|" . $img_title . "|:|" . $img_caption . "|:|" . $img_description : '';
712
713 1
			if ( $field->postFeaturedImage ) {
714
715
				$image_meta = array(
716 1
					'ID' => get_post_thumbnail_id( $post_id ),
717 1
					'post_title' => $img_title,
718 1
					'post_excerpt' => $img_caption,
719 1
					'post_content' => $img_description,
720
				);
721
722
				// update image title, caption or description
723 1
				wp_update_post( $image_meta );
724
			}
725
		} else {
726
727
			// if we get here, image was removed or not set.
728
			$value = '';
729
730
			if ( $field->postFeaturedImage ) {
731
				delete_post_thumbnail( $post_id );
732
			}
733
		}
734
735 1
		return $value;
736
	}
737
738
	/**
739
	 * Loop through the fields being edited and if they include Post fields, update the Entry's post object
740
	 *
741
	 * @param array $form Gravity Forms form
742
	 *
743
	 * @return void
744
	 */
745 17
	private function maybe_update_post_fields( $form ) {
746
747 17
		if( empty( $this->entry['post_id'] ) ) {
748 16
	        gravityview()->log->debug( 'This entry has no post fields. Continuing...' );
749 16
			return;
750
		}
751
752 1
		$post_id = $this->entry['post_id'];
753
754
		// Security check
755 1
		if( false === GVCommon::has_cap( 'edit_post', $post_id ) ) {
756
			gravityview()->log->error( 'The current user does not have the ability to edit Post #{post_id}', array( 'post_id' => $post_id ) );
757
			return;
758
		}
759
760 1
		$update_entry = false;
761
762 1
		$updated_post = $original_post = get_post( $post_id );
763
764 1
		foreach ( $this->entry as $field_id => $value ) {
765
766 1
			$field = RGFormsModel::get_field( $form, $field_id );
767
768 1
			if( ! $field ) {
769 1
				continue;
770
			}
771
772 1
			if( GFCommon::is_post_field( $field ) && 'post_category' !== $field->type ) {
773
774
				// Get the value of the field, including $_POSTed value
775 1
				$value = RGFormsModel::get_field_value( $field );
776
777
				// Use temporary entry variable, to make values available to fill_post_template() and update_post_image()
778 1
				$entry_tmp = $this->entry;
779 1
				$entry_tmp["{$field_id}"] = $value;
780
781 1
				switch( $field->type ) {
782
783 1
				    case 'post_title':
784
				        $post_title = $value;
785
				        if ( \GV\Utils::get( $form, 'postTitleTemplateEnabled' ) ) {
786
				            $post_title = $this->fill_post_template( $form['postTitleTemplate'], $form, $entry_tmp );
787
				        }
788
				        $updated_post->post_title = $post_title;
789
				        $updated_post->post_name  = $post_title;
790
				        unset( $post_title );
791
				        break;
792
793 1
				    case 'post_content':
794
				        $post_content = $value;
795
				        if ( \GV\Utils::get( $form, 'postContentTemplateEnabled' ) ) {
796
				            $post_content = $this->fill_post_template( $form['postContentTemplate'], $form, $entry_tmp, true );
797
				        }
798
				        $updated_post->post_content = $post_content;
799
				        unset( $post_content );
800
				        break;
801 1
				    case 'post_excerpt':
802
				        $updated_post->post_excerpt = $value;
803
				        break;
804 1
				    case 'post_tags':
805
				        wp_set_post_tags( $post_id, $value, false );
806
				        break;
807 1
				    case 'post_category':
808
				        break;
809 1
				    case 'post_custom_field':
810
						if ( is_array( $value ) && ( floatval( $field_id ) !== floatval( $field->id ) ) ) {
811
							$value = $value[ $field_id ];
812
						}
813
814
				        if( ! empty( $field->customFieldTemplateEnabled ) ) {
815
				            $value = $this->fill_post_template( $field->customFieldTemplate, $form, $entry_tmp, true );
816
				        }
817
818
						$value = $field->get_value_save_entry( $value, $form, '', $this->entry['id'], $this->entry );
819
820
				        update_post_meta( $post_id, $field->postCustomFieldName, $value );
821
				        break;
822
823 1
				    case 'post_image':
824 1
				        $value = $this->update_post_image( $form, $field, $field_id, $value, $this->entry, $post_id );
825 1
				        break;
826
827
				}
828
829
				// update entry after
830 1
				$this->entry["{$field_id}"] = $value;
831
832 1
				$update_entry = true;
833
834 1
				unset( $entry_tmp );
835
			}
836
837
		}
838
839 1
		if( $update_entry ) {
840
841 1
			$return_entry = GFAPI::update_entry( $this->entry );
842
843 1
			if( is_wp_error( $return_entry ) ) {
844
				gravityview()->log->error( 'Updating the entry post fields failed', array( 'data' => array( '$this->entry' => $this->entry, '$return_entry' => $return_entry ) ) );
845
			} else {
846 1
				gravityview()->log->debug( 'Updating the entry post fields for post #{post_id} succeeded', array( 'post_id' => $post_id ) );
847
			}
848
849
		}
850
851 1
		$return_post = wp_update_post( $updated_post, true );
852
853 1
		if( is_wp_error( $return_post ) ) {
854
			$return_post->add_data( $updated_post, '$updated_post' );
855
			gravityview()->log->error( 'Updating the post content failed', array( 'data' => compact( 'updated_post', 'return_post' ) ) );
856
		} else {
857 1
			gravityview()->log->debug( 'Updating the post content for post #{post_id} succeeded', array( 'post_id' => $post_id, 'data' => $updated_post ) );
858
		}
859 1
	}
860
861
	/**
862
	 * Convert a field content template into prepared output
863
	 *
864
	 * @uses GravityView_GFFormsModel::get_post_field_images()
865
	 *
866
	 * @since 1.17
867
	 *
868
	 * @param string $template The content template for the field
869
	 * @param array $form Gravity Forms form
870
	 * @param bool $do_shortcode Whether to process shortcode inside content. In GF, only run on Custom Field and Post Content fields
871
	 *
872
	 * @return string
873
	 */
874
	private function fill_post_template( $template, $form, $entry, $do_shortcode = false ) {
875
876
		require_once GRAVITYVIEW_DIR . 'includes/class-gravityview-gfformsmodel.php';
877
878
		$post_images = GravityView_GFFormsModel::get_post_field_images( $form, $entry );
879
880
		//replacing post image variables
881
		$output = GFCommon::replace_variables_post_image( $template, $post_images, $entry );
882
883
		//replacing all other variables
884
		$output = GFCommon::replace_variables( $output, $form, $entry, false, false, false );
885
886
		// replace conditional shortcodes
887
		if( $do_shortcode ) {
888
			$output = do_shortcode( $output );
889
		}
890
891
		return $output;
892
	}
893
894
895
	/**
896
	 * Perform actions normally performed after updating a lead
897
	 *
898
	 * @since 1.8
899
	 *
900
	 * @see GFEntryDetail::lead_detail_page()
901
	 *
902
	 * @return void
903
	 */
904 17
	private function after_update() {
905
906 17
		do_action( 'gform_after_update_entry', $this->form, $this->entry['id'], self::$original_entry );
907 17
		do_action( "gform_after_update_entry_{$this->form['id']}", $this->form, $this->entry['id'], self::$original_entry );
908
909
		// Re-define the entry now that we've updated it.
910 17
		$entry = RGFormsModel::get_lead( $this->entry['id'] );
911
912 17
		$entry = GFFormsModel::set_entry_meta( $entry, self::$original_form );
913
914 17
		if ( version_compare( GFFormsModel::get_database_version(), '2.3-dev-1', '<' ) ) {
915
			// We need to clear the cache because Gravity Forms caches the field values, which
916
			// we have just updated.
917
			foreach ($this->form['fields'] as $key => $field) {
918
				GFFormsModel::refresh_lead_field_value( $entry['id'], $field->id );
919
			}
920
		}
921
922
		/**
923
		 * Maybe process feeds.
924
		 *
925
		 * @since develop
926
		 */
927 17
		if ( $allowed_feeds = $this->view->settings->get( 'edit_feeds', array() ) ) {
928 1
			$feeds = GFAPI::get_feeds( null, $entry['form_id'] );
929 1
			if ( ! is_wp_error( $feeds ) ) {
930 1
				$registered_feeds = array();
931 1
				foreach ( GFAddOn::get_registered_addons() as $registered_feed ) {
932 1
					if ( is_subclass_of( $registered_feed,  'GFFeedAddOn' ) ) {
933 1
						if ( method_exists( $registered_feed, 'get_instance' ) ) {
934 1
							$registered_feed = call_user_func( array( $registered_feed, 'get_instance' ) );
935 1
							$registered_feeds[ $registered_feed->get_slug() ] = $registered_feed;
936
						}
937
					}
938
				}
939 1
				foreach ( $feeds as $feed ) {
940 1
					if ( in_array( $feed['id'], $allowed_feeds ) ) {
941 1
						if ( $feed_object = \GV\Utils::get( $registered_feeds, $feed['addon_slug'] ) ) {
942 1
							$returned_entry = $feed_object->process_feed( $feed, $entry, self::$original_form );
943 1
							if ( is_array( $returned_entry ) && rgar( $returned_entry, 'id' ) ) {
944
								$entry = $returned_entry;
945
							}
946
947 1
							do_action( 'gform_post_process_feed', $feed, $entry, self::$original_form, $feed_object );
948 1
							$slug = $feed_object->get_slug();
949 1
							do_action( "gform_{$slug}_post_process_feed", $feed, $entry, self::$original_form, $feed_object );
950
						}
951
					}
952
				}
953
			}
954
		}
955
956 17
		$this->entry = $entry;
957 17
	}
958
959
960
	/**
961
	 * Display the Edit Entry form
962
	 *
963
	 * @return void
964
	 */
965 18
	public function edit_entry_form() {
966
967
		?>
968
969
		<div class="gv-edit-entry-wrapper"><?php
970
971 18
			$javascript = gravityview_ob_include( GravityView_Edit_Entry::$file .'/partials/inline-javascript.php', $this );
0 ignored issues
show
Bug introduced by
The property file cannot be accessed from this context as it is declared private in class GravityView_Edit_Entry.

This check looks for access to properties that are not accessible from the current context.

If you need to make a property accessible to another context you can either raise its visibility level or provide an accessible getter in the defining class.

Loading history...
972
973
			/**
974
			 * Fixes weird wpautop() issue
975
			 * @see https://github.com/katzwebservices/GravityView/issues/451
976
			 */
977 18
			echo gravityview_strip_whitespace( $javascript );
978
979
			?><h2 class="gv-edit-entry-title">
980
				<span><?php
981
982
				    /**
983
				     * @filter `gravityview_edit_entry_title` Modify the edit entry title
984
				     * @param string $edit_entry_title Modify the "Edit Entry" title
985
				     * @param GravityView_Edit_Entry_Render $this This object
986
				     */
987 18
				    $edit_entry_title = apply_filters('gravityview_edit_entry_title', __('Edit Entry', 'gravityview'), $this );
988
989 18
				    echo esc_attr( $edit_entry_title );
990
			?></span>
991
			</h2>
992
993
			<?php $this->maybe_print_message(); ?>
994
995
			<?php // The ID of the form needs to be `gform_{form_id}` for the pluploader ?>
996
997
			<form method="post" id="gform_<?php echo $this->form_id; ?>" enctype="multipart/form-data">
998
999
				<?php
1000
1001 18
				wp_nonce_field( self::$nonce_key, self::$nonce_key );
1002
1003 18
				wp_nonce_field( self::$nonce_field, self::$nonce_field, false );
1004
1005
				// Print the actual form HTML
1006 18
				$this->render_edit_form();
1007
1008
				?>
1009 18
			</form>
1010
1011
			<script>
1012
				gform.addFilter('gform_reset_pre_conditional_logic_field_action', function ( reset, formId, targetId, defaultValues, isInit ) {
1013
				    return false;
1014
				});
1015
			</script>
1016
1017
		</div>
1018
1019
	<?php
1020 18
	}
1021
1022
	/**
1023
	 * Display success or error message if the form has been submitted
1024
	 *
1025
	 * @uses GVCommon::generate_notice
1026
	 *
1027
	 * @since 1.16.2.2
1028
	 *
1029
	 * @return void
1030
	 */
1031 18
	private function maybe_print_message() {
1032
1033 18
		if ( \GV\Utils::_POST( 'action' ) === 'update' ) {
1034
1035 17
			$back_link = remove_query_arg( array( 'page', 'view', 'edit' ) );
1036
1037 17
			if( ! $this->is_valid ){
0 ignored issues
show
Bug Best Practice introduced by
The expression $this->is_valid of type array is implicitly converted to a boolean; are you sure this is intended? If so, consider using empty($expr) instead to make it clear that you intend to check for an array without elements.

This check marks implicit conversions of arrays to boolean values in a comparison. While in PHP an empty array is considered to be equal (but not identical) to false, this is not always apparent.

Consider making the comparison explicit by using empty(..) or ! empty(...) instead.

Loading history...
1038
1039
				// Keeping this compatible with Gravity Forms.
1040
				$validation_message = "<div class='validation_error'>" . __('There was a problem with your submission.', 'gravityview') . " " . __('Errors have been highlighted below.', 'gravityview') . "</div>";
1041
				$message = apply_filters("gform_validation_message_{$this->form['id']}", apply_filters("gform_validation_message", $validation_message, $this->form), $this->form);
1042
1043
				echo GVCommon::generate_notice( $message , 'gv-error' );
1044
1045
			} else {
1046 17
				$view = \GV\View::by_id( $this->view_id );
1047 17
				$edit_redirect = $view->settings->get( 'edit_redirect' );
1048 17
				$edit_redirect_url = $view->settings->get( 'edit_redirect_url' );
1049
1050
				switch ( $edit_redirect ) {
1051
1052 17
                    case '0':
1053 1
	                    $redirect_url = $back_link;
1054 1
	                    $entry_updated_message = sprintf( esc_attr_x('Entry Updated. %sReturning to Entry%s', 'Replacements are HTML', 'gravityview'), '<a href="'. esc_url( $redirect_url ) .'">', '</a>' );
1055 1
                        break;
1056
1057 16
                    case '1':
1058 1
	                    $redirect_url = $directory_link = GravityView_API::directory_link();
1059 1
	                    $entry_updated_message = sprintf( esc_attr_x('Entry Updated. %sReturning to %s%s', 'Replacement 1 is HTML. Replacement 2 is the title of the page where the user will be taken. Replacement 3 is HTML.','gravityview'), '<a href="'. esc_url( $redirect_url ) . '">', esc_html( $view->post_title ), '</a>' );
0 ignored issues
show
Documentation introduced by
The property post_title does not exist on object<GV\View>. Since you implemented __get, maybe consider adding a @property annotation.

Since your code implements the magic getter _get, this function will be called for any read access on an undefined variable. You can add the @property annotation to your class or interface to document the existence of this variable.

<?php

/**
 * @property int $x
 * @property int $y
 * @property string $text
 */
class MyLabel
{
    private $properties;

    private $allowedProperties = array('x', 'y', 'text');

    public function __get($name)
    {
        if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
            return $properties[$name];
        } else {
            return null;
        }
    }

    public function __set($name, $value)
    {
        if (in_array($name, $this->allowedProperties)) {
            $properties[$name] = $value;
        } else {
            throw new \LogicException("Property $name is not defined.");
        }
    }

}

If the property has read access only, you can use the @property-read annotation instead.

Of course, you may also just have mistyped another name, in which case you should fix the error.

See also the PhpDoc documentation for @property.

Loading history...
1060 1
	                    break;
1061
1062 15
                    case '2':
1063 1
	                    $redirect_url = $edit_redirect_url;
1064 1
	                    $redirect_url = GFCommon::replace_variables( $redirect_url, $this->form, $this->entry, false, false, false, 'text' );
1065 1
	                    $entry_updated_message = sprintf( esc_attr_x('Entry Updated. %sRedirecting to %s%s', 'Replacement 1 is HTML. Replacement 2 is the URL where the user will be taken. Replacement 3 is HTML.','gravityview'), '<a href="'. esc_url( $redirect_url ) . '">', esc_html( $edit_redirect_url ), '</a>' );
1066 1
                        break;
1067
1068 14
                    case '':
1069
                    default:
1070 14
					    $entry_updated_message = sprintf( esc_attr__('Entry Updated. %sReturn to Entry%s', 'gravityview'), '<a href="'. esc_url( $back_link ) .'">', '</a>' );
1071 14
                        break;
1072
				}
1073
1074 17
				if ( isset( $redirect_url ) ) {
1075 3
					$entry_updated_message .= sprintf( '<script>window.location.href = %s;</script><noscript><meta http-equiv="refresh" content="0;URL=%s" /></noscript>', json_encode( $redirect_url ), esc_attr( $redirect_url ) );
1076
				}
1077
1078
				/**
1079
				 * @filter `gravityview/edit_entry/success` Modify the edit entry success message (including the anchor link)
1080
				 * @since 1.5.4
1081
				 * @param string $entry_updated_message Existing message
1082
				 * @param int $view_id View ID
1083
				 * @param array $entry Gravity Forms entry array
1084
				 * @param string $back_link URL to return to the original entry. @since 1.6
1085
				 */
1086 17
				$message = apply_filters( 'gravityview/edit_entry/success', $entry_updated_message , $this->view_id, $this->entry, $back_link );
1087
1088 17
				echo GVCommon::generate_notice( $message );
1089
			}
1090
1091
		}
1092 18
	}
1093
1094
	/**
1095
	 * Display the Edit Entry form in the original Gravity Forms format
1096
	 *
1097
	 * @since 1.9
1098
	 *
1099
	 * @return void
1100
	 */
1101 18
	private function render_edit_form() {
1102
1103
		/**
1104
		 * @action `gravityview/edit-entry/render/before` Before rendering the Edit Entry form
1105
		 * @since 1.17
1106
		 * @param GravityView_Edit_Entry_Render $this
1107
		 */
1108 18
		do_action( 'gravityview/edit-entry/render/before', $this );
1109
1110 18
		add_filter( 'gform_pre_render', array( $this, 'filter_modify_form_fields'), 5000, 3 );
1111 18
		add_filter( 'gform_submit_button', array( $this, 'render_form_buttons') );
1112 18
		add_filter( 'gform_disable_view_counter', '__return_true' );
1113
1114 18
		add_filter( 'gform_field_input', array( $this, 'verify_user_can_edit_post' ), 5, 5 );
1115 18
		add_filter( 'gform_field_input', array( $this, 'modify_edit_field_input' ), 10, 5 );
1116
1117
		// We need to remove the fake $_GET['page'] arg to avoid rendering form as if in admin.
1118 18
		unset( $_GET['page'] );
1119
1120
		// TODO: Verify multiple-page forms
1121
1122 18
		ob_start(); // Prevent PHP warnings possibly caused by prefilling list fields for conditional logic
1123
1124 18
		$html = GFFormDisplay::get_form( $this->form['id'], false, false, true, $this->entry );
1125
1126 18
		ob_get_clean();
1127
1128 18
	    remove_filter( 'gform_pre_render', array( $this, 'filter_modify_form_fields' ), 5000 );
1129 18
		remove_filter( 'gform_submit_button', array( $this, 'render_form_buttons' ) );
1130 18
		remove_filter( 'gform_disable_view_counter', '__return_true' );
1131 18
		remove_filter( 'gform_field_input', array( $this, 'verify_user_can_edit_post' ), 5 );
1132 18
		remove_filter( 'gform_field_input', array( $this, 'modify_edit_field_input' ), 10 );
1133
1134 18
		echo $html;
1135
1136
		/**
1137
		 * @action `gravityview/edit-entry/render/after` After rendering the Edit Entry form
1138
		 * @since 1.17
1139
		 * @param GravityView_Edit_Entry_Render $this
1140
		 */
1141 18
		do_action( 'gravityview/edit-entry/render/after', $this );
1142 18
	}
1143
1144
	/**
1145
	 * Display the Update/Cancel/Delete buttons for the Edit Entry form
1146
	 * @since 1.8
1147
	 * @return string
1148
	 */
1149 18
	public function render_form_buttons() {
1150 18
		return gravityview_ob_include( GravityView_Edit_Entry::$file .'/partials/form-buttons.php', $this );
0 ignored issues
show
Bug introduced by
The property file cannot be accessed from this context as it is declared private in class GravityView_Edit_Entry.

This check looks for access to properties that are not accessible from the current context.

If you need to make a property accessible to another context you can either raise its visibility level or provide an accessible getter in the defining class.

Loading history...
1151
	}
1152
1153
1154
	/**
1155
	 * Modify the form fields that are shown when using GFFormDisplay::get_form()
1156
	 *
1157
	 * By default, all fields will be shown. We only want the Edit Tab configured fields to be shown.
1158
	 *
1159
	 * @param array $form
1160
	 * @param boolean $ajax Whether in AJAX mode
1161
	 * @param array|string $field_values Passed parameters to the form
1162
	 *
1163
	 * @since 1.9
1164
	 *
1165
	 * @return array Modified form array
1166
	 */
1167 18
	public function filter_modify_form_fields( $form, $ajax = false, $field_values = '' ) {
0 ignored issues
show
Unused Code introduced by
The parameter $ajax is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
Unused Code introduced by
The parameter $field_values is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
1168
1169
		// In case we have validated the form, use it to inject the validation results into the form render
1170 18
		if( isset( $this->form_after_validation ) && $this->form_after_validation['id'] === $form['id'] ) {
1171 17
			$form = $this->form_after_validation;
1172
		} else {
1173 4
			$form['fields'] = $this->get_configured_edit_fields( $form, $this->view_id );
1174
		}
1175
1176 18
		$form = $this->filter_conditional_logic( $form );
1177
1178 18
		$form = $this->prefill_conditional_logic( $form );
1179
1180
		// for now we don't support Save and Continue feature.
1181 18
		if( ! self::$supports_save_and_continue ) {
1182 18
	        unset( $form['save'] );
1183
		}
1184
1185 18
		$form = $this->unselect_default_values( $form );
1186
1187 18
		return $form;
1188
	}
1189
1190
	/**
1191
	 * When displaying a field, check if it's a Post Field, and if so, make sure the post exists and current user has edit rights.
1192
	 *
1193
	 * @since 1.16.2.2
1194
	 *
1195
	 * @param string $field_content Always empty. Returning not-empty overrides the input.
1196
	 * @param GF_Field $field
1197
	 * @param string|array $value If array, it's a field with multiple inputs. If string, single input.
1198
	 * @param int $lead_id Lead ID. Always 0 for the `gform_field_input` filter.
1199
	 * @param int $form_id Form ID
1200
	 *
1201
	 * @return string If error, the error message. If no error, blank string (modify_edit_field_input() runs next)
1202
	 */
1203 18
	public function verify_user_can_edit_post( $field_content = '', $field, $value, $lead_id = 0, $form_id ) {
0 ignored issues
show
Unused Code introduced by
The parameter $value is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
Unused Code introduced by
The parameter $lead_id is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
Unused Code introduced by
The parameter $form_id is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
1204
1205 18
		if( ! GFCommon::is_post_field( $field ) ) {
1206 18
			return $field_content;
1207
		}
1208
1209 2
        $message = null;
1210
1211
        // First, make sure they have the capability to edit the post.
1212 2
        if( false === current_user_can( 'edit_post', $this->entry['post_id'] ) ) {
1213
1214
            /**
1215
             * @filter `gravityview/edit_entry/unsupported_post_field_text` Modify the message when someone isn't able to edit a post
1216
             * @param string $message The existing "You don't have permission..." text
1217
             */
1218 1
            $message = apply_filters('gravityview/edit_entry/unsupported_post_field_text', __('You don&rsquo;t have permission to edit this post.', 'gravityview') );
1219
1220 1
        } elseif( null === get_post( $this->entry['post_id'] ) ) {
1221
            /**
1222
             * @filter `gravityview/edit_entry/no_post_text` Modify the message when someone is editing an entry attached to a post that no longer exists
1223
             * @param string $message The existing "This field is not editable; the post no longer exists." text
1224
             */
1225
            $message = apply_filters('gravityview/edit_entry/no_post_text', __('This field is not editable; the post no longer exists.', 'gravityview' ) );
1226
        }
1227
1228 2
        if( $message ) {
1229 1
            $field_content = sprintf('<div class="ginput_container ginput_container_' . $field->type . '">%s</div>', wpautop( $message ) );
1230
        }
1231
1232 2
        return $field_content;
1233
	}
1234
1235
	/**
1236
	 *
1237
	 * Fill-in the saved values into the form inputs
1238
	 *
1239
	 * @param string $field_content Always empty. Returning not-empty overrides the input.
1240
	 * @param GF_Field $field
1241
	 * @param string|array $value If array, it's a field with multiple inputs. If string, single input.
1242
	 * @param int $lead_id Lead ID. Always 0 for the `gform_field_input` filter.
1243
	 * @param int $form_id Form ID
1244
	 *
1245
	 * @return mixed
1246
	 */
1247 18
	public function modify_edit_field_input( $field_content = '', $field, $value, $lead_id = 0, $form_id ) {
0 ignored issues
show
Unused Code introduced by
The parameter $value is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
Unused Code introduced by
The parameter $lead_id is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
Unused Code introduced by
The parameter $form_id is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
1248
1249 18
		$gv_field = GravityView_Fields::get_associated_field( $field );
1250
1251
		// If the form has been submitted, then we don't need to pre-fill the values,
1252
		// Except for fileupload type and when a field input is overridden- run always!!
1253
		if(
1254 18
			( $this->is_edit_entry_submission() && !in_array( $field->type, array( 'fileupload', 'post_image' ) ) )
1255 18
			&& false === ( $gv_field && is_callable( array( $gv_field, 'get_field_input' ) ) )
1256
			&& ! GFCommon::is_product_field( $field->type )
1257 18
			|| ! empty( $field_content )
1258 18
			|| in_array( $field->type, array( 'honeypot' ) )
1259
		) {
1260 1
	        return $field_content;
1261
		}
1262
1263
		// SET SOME FIELD DEFAULTS TO PREVENT ISSUES
1264 18
		$field->adminOnly = false; /** @see GFFormDisplay::get_counter_init_script() need to prevent adminOnly */
1265
1266 18
		$field_value = $this->get_field_value( $field );
1267
1268
	    // Prevent any PHP warnings, like undefined index
1269 18
	    ob_start();
1270
1271 18
	    $return = null;
1272
1273
		/** @var GravityView_Field $gv_field */
1274 18
		if( $gv_field && is_callable( array( $gv_field, 'get_field_input' ) ) ) {
1275 3
			$return = $gv_field->get_field_input( $this->form, $field_value, $this->entry, $field );
1276
		} else {
1277 18
	        $return = $field->get_field_input( $this->form, $field_value, $this->entry );
1278
	    }
1279
1280
	    // If there was output, it's an error
1281 18
	    $warnings = ob_get_clean();
1282
1283 18
	    if( !empty( $warnings ) ) {
1284
		    gravityview()->log->error( '{warning}', array( 'warning' => $warnings, 'data' => $field_value ) );
1285
	    }
1286
1287 18
		return $return;
1288
	}
1289
1290
	/**
1291
	 * Modify the value for the current field input
1292
	 *
1293
	 * @param GF_Field $field
1294
	 *
1295
	 * @return array|mixed|string
1296
	 */
1297 18
	private function get_field_value( $field ) {
1298
1299
		/**
1300
		 * @filter `gravityview/edit_entry/pre_populate/override` Allow the pre-populated value to override saved value in Edit Entry form. By default, pre-populate mechanism only kicks on empty fields.
1301
		 * @param boolean True: override saved values; False: don't override (default)
1302
		 * @param $field GF_Field object Gravity Forms field object
1303
		 * @since 1.13
1304
		 */
1305 18
		$override_saved_value = apply_filters( 'gravityview/edit_entry/pre_populate/override', false, $field );
1306
1307
		// We're dealing with multiple inputs (e.g. checkbox) but not time or date (as it doesn't store data in input IDs)
1308 18
		if( isset( $field->inputs ) && is_array( $field->inputs ) && !in_array( $field->type, array( 'time', 'date' ) ) ) {
1309
1310 3
			$field_value = array();
1311
1312
			// only accept pre-populated values if the field doesn't have any choice selected.
1313 3
			$allow_pre_populated = $field->allowsPrepopulate;
1314
1315 3
			foreach ( (array)$field->inputs as $input ) {
1316
1317 3
				$input_id = strval( $input['id'] );
1318
1319 3
				if ( isset( $this->entry[ $input_id ] ) && ! gv_empty( $this->entry[ $input_id ], false, false ) ) {
1320 3
				    $field_value[ $input_id ] =  'post_category' === $field->type ? GFCommon::format_post_category( $this->entry[ $input_id ], true ) : $this->entry[ $input_id ];
1321 3
				    $allow_pre_populated = false;
1322
				}
1323
1324
			}
1325
1326 3
			$pre_value = $field->get_value_submission( array(), false );
1327
1328 3
			$field_value = ! $allow_pre_populated && ! ( $override_saved_value && !gv_empty( $pre_value, false, false ) ) ? $field_value : $pre_value;
1329
1330
		} else {
1331
1332 18
			$id = intval( $field->id );
1333
1334
			// get pre-populated value if exists
1335 18
			$pre_value = $field->allowsPrepopulate ? GFFormsModel::get_parameter_value( $field->inputName, array(), $field ) : '';
1336
1337
			// saved field entry value (if empty, fallback to the pre-populated value, if exists)
1338
			// or pre-populated value if not empty and set to override saved value
1339 18
			$field_value = isset( $this->entry[ $id ] ) && ! gv_empty( $this->entry[ $id ], false, false ) && ! ( $override_saved_value && !gv_empty( $pre_value, false, false ) ) ? $this->entry[ $id ] : $pre_value;
1340
1341
			// in case field is post_category but inputType is select, multi-select or radio, convert value into array of category IDs.
1342 18
			if ( 'post_category' === $field->type && !gv_empty( $field_value, false, false ) ) {
1343
				$categories = array();
1344
				foreach ( explode( ',', $field_value ) as $cat_string ) {
1345
				    $categories[] = GFCommon::format_post_category( $cat_string, true );
1346
				}
1347
				$field_value = 'multiselect' === $field->get_input_type() ? $categories : implode( '', $categories );
1348
			}
1349
1350
		}
1351
1352
		// if value is empty get the default value if defined
1353 18
		$field_value = $field->get_value_default_if_empty( $field_value );
1354
1355
	    /**
1356
	     * @filter `gravityview/edit_entry/field_value` Change the value of an Edit Entry field, if needed
1357
	     * @since 1.11
1358
	     * @since 1.20 Added third param
1359
	     * @param mixed $field_value field value used to populate the input
1360
	     * @param object $field Gravity Forms field object ( Class GF_Field )
1361
	     * @param GravityView_Edit_Entry_Render $this Current object
1362
	     */
1363 18
	    $field_value = apply_filters( 'gravityview/edit_entry/field_value', $field_value, $field, $this );
1364
1365
	    /**
1366
	     * @filter `gravityview/edit_entry/field_value_{field_type}` Change the value of an Edit Entry field for a specific field type
1367
	     * @since 1.17
1368
	     * @since 1.20 Added third param
1369
	     * @param mixed $field_value field value used to populate the input
1370
	     * @param GF_Field $field Gravity Forms field object
1371
	     * @param GravityView_Edit_Entry_Render $this Current object
1372
	     */
1373 18
	    $field_value = apply_filters( 'gravityview/edit_entry/field_value_' . $field->type , $field_value, $field, $this );
1374
1375 18
		return $field_value;
1376
	}
1377
1378
1379
	// ---- Entry validation
1380
1381
	/**
1382
	 * Add field keys that Gravity Forms expects.
1383
	 *
1384
	 * @see GFFormDisplay::validate()
1385
	 * @param  array $form GF Form
1386
	 * @return array       Modified GF Form
1387
	 */
1388 17
	public function gform_pre_validation( $form ) {
1389
1390 17
		if( ! $this->verify_nonce() ) {
1391
			return $form;
1392
		}
1393
1394
		// Fix PHP warning regarding undefined index.
1395 17
		foreach ( $form['fields'] as &$field) {
1396
1397
			// This is because we're doing admin form pretending to be front-end, so Gravity Forms
1398
			// expects certain field array items to be set.
1399 17
			foreach ( array( 'noDuplicates', 'adminOnly', 'inputType', 'isRequired', 'enablePrice', 'inputs', 'allowedExtensions' ) as $key ) {
1400 17
	            $field->{$key} = isset( $field->{$key} ) ? $field->{$key} : NULL;
1401
			}
1402
1403 17
			switch( RGFormsModel::get_input_type( $field ) ) {
1404
1405
				/**
1406
				 * this whole fileupload hack is because in the admin, Gravity Forms simply doesn't update any fileupload field if it's empty, but it DOES in the frontend.
1407
				 *
1408
				 * What we have to do is set the value so that it doesn't get overwritten as empty on save and appears immediately in the Edit Entry screen again.
1409
				 *
1410
				 * @hack
1411
				 */
1412 17
				case 'fileupload':
1413
1414
				    // Set the previous value
1415 1
				    $entry = $this->get_entry();
1416
1417 1
				    $input_name = 'input_'.$field->id;
1418 1
				    $form_id = $form['id'];
1419
1420 1
				    $value = NULL;
1421
1422
				    // Use the previous entry value as the default.
1423 1
				    if( isset( $entry[ $field->id ] ) ) {
1424 1
				        $value = $entry[ $field->id ];
1425
				    }
1426
1427
				    // If this is a single upload file
1428 1
				    if( !empty( $_FILES[ $input_name ] ) && !empty( $_FILES[ $input_name ]['name'] ) ) {
1429 1
				        $file_path = GFFormsModel::get_file_upload_path( $form['id'], $_FILES[ $input_name ]['name'] );
1430 1
				        $value = $file_path['url'];
1431
1432
				    } else {
1433
1434
				        // Fix PHP warning on line 1498 of form_display.php for post_image fields
1435
				        // Fix PHP Notice:  Undefined index:  size in form_display.php on line 1511
1436 1
				        $_FILES[ $input_name ] = array('name' => '', 'size' => '' );
1437
1438
				    }
1439
1440 1
				    if ( \GV\Utils::get( $field, "multipleFiles" ) ) {
1441
1442
				        // If there are fresh uploads, process and merge them.
1443
				        // Otherwise, use the passed values, which should be json-encoded array of URLs
1444 1
				        if( isset( GFFormsModel::$uploaded_files[$form_id][$input_name] ) ) {
1445
				            $value = empty( $value ) ? '[]' : $value;
1446
				            $value = stripslashes_deep( $value );
1447 1
				            $value = GFFormsModel::prepare_value( $form, $field, $value, $input_name, $entry['id'], array());
1448
				        }
1449
1450
				    } else {
1451
1452
				        // A file already exists when editing an entry
1453
				        // We set this to solve issue when file upload fields are required.
1454 1
				        GFFormsModel::$uploaded_files[ $form_id ][ $input_name ] = $value;
1455
1456
				    }
1457
1458 1
				    $this->entry[ $input_name ] = $value;
1459 1
				    $_POST[ $input_name ] = $value;
1460
1461 1
				    break;
1462
1463 17
				case 'number':
1464
				    // Fix "undefined index" issue at line 1286 in form_display.php
1465 12
				    if( !isset( $_POST['input_'.$field->id ] ) ) {
1466 7
				        $_POST['input_'.$field->id ] = NULL;
1467
				    }
1468 12
				    break;
1469
			}
1470
1471
		}
1472
1473 17
		return $form;
1474
	}
1475
1476
1477
	/**
1478
	 * Process validation for a edit entry submission
1479
	 *
1480
	 * Sets the `is_valid` object var
1481
	 *
1482
	 * @return void
1483
	 */
1484 18
	private function validate() {
1485
1486
		/**
1487
		 * If using GF User Registration Add-on, remove the validation step, otherwise generates error when updating the entry
1488
		 * GF User Registration Add-on version > 3.x has a different class name
1489
		 * @since 1.16.2
1490
		 */
1491 18
		if ( class_exists( 'GF_User_Registration' ) ) {
1492 18
			remove_filter( 'gform_validation', array( GF_User_Registration::get_instance(), 'validate' ) );
1493
		} else  if ( class_exists( 'GFUser' ) ) {
1494
			remove_filter( 'gform_validation', array( 'GFUser', 'user_registration_validation' ) );
1495
		}
1496
1497
1498
		/**
1499
		 * For some crazy reason, Gravity Forms doesn't validate Edit Entry form submissions.
1500
		 * You can enter whatever you want!
1501
		 * We try validating, and customize the results using `self::custom_validation()`
1502
		 */
1503 18
		add_filter( 'gform_validation_'. $this->form_id, array( $this, 'custom_validation' ), 10, 4);
1504
1505
		// Needed by the validate funtion
1506 18
		$failed_validation_page = NULL;
1507 18
		$field_values = RGForms::post( 'gform_field_values' );
1508
1509
		// Prevent entry limit from running when editing an entry, also
1510
		// prevent form scheduling from preventing editing
1511 18
		unset( $this->form['limitEntries'], $this->form['scheduleForm'] );
1512
1513
		// Hide fields depending on Edit Entry settings
1514 18
		$this->form['fields'] = $this->get_configured_edit_fields( $this->form, $this->view_id );
1515
1516 18
		$this->is_valid = GFFormDisplay::validate( $this->form, $field_values, 1, $failed_validation_page );
1517
1518 18
		remove_filter( 'gform_validation_'. $this->form_id, array( $this, 'custom_validation' ), 10 );
1519 18
	}
1520
1521
1522
	/**
1523
	 * Make validation work for Edit Entry
1524
	 *
1525
	 * Because we're calling the GFFormDisplay::validate() in an unusual way (as a front-end
1526
	 * form pretending to be a back-end form), validate() doesn't know we _can't_ edit post
1527
	 * fields. This goes through all the fields and if they're an invalid post field, we
1528
	 * set them as valid. If there are still issues, we'll return false.
1529
	 *
1530
	 * @param  [type] $validation_results [description]
0 ignored issues
show
Documentation introduced by
The doc-type [type] could not be parsed: Unknown type name "" at position 0. [(view supported doc-types)

This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types.

Loading history...
1531
	 * @return [type]                     [description]
0 ignored issues
show
Documentation introduced by
The doc-type [type] could not be parsed: Unknown type name "" at position 0. [(view supported doc-types)

This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types.

Loading history...
1532
	 */
1533 18
	public function custom_validation( $validation_results ) {
1534
1535 18
		gravityview()->log->debug( 'GravityView_Edit_Entry[custom_validation] Validation results: ', array( 'data' => $validation_results ) );
1536
1537 18
		gravityview()->log->debug( 'GravityView_Edit_Entry[custom_validation] $_POSTed data (sanitized): ', array( 'data' => esc_html( print_r( $_POST, true ) ) ) );
1538
1539 18
		$gv_valid = true;
1540
1541 18
		foreach ( $validation_results['form']['fields'] as $key => &$field ) {
1542
1543 18
			$value = RGFormsModel::get_field_value( $field );
1544 18
			$field_type = RGFormsModel::get_input_type( $field );
1545
1546
			// Validate always
1547 18
			switch ( $field_type ) {
1548
1549
1550 18
				case 'fileupload' :
1551 18
				case 'post_image':
1552
1553
				    // in case nothing is uploaded but there are already files saved
1554 2
				    if( !empty( $field->failed_validation ) && !empty( $field->isRequired ) && !empty( $value ) ) {
1555
				        $field->failed_validation = false;
1556
				        unset( $field->validation_message );
1557
				    }
1558
1559
				    // validate if multi file upload reached max number of files [maxFiles] => 2
1560 2
				    if( \GV\Utils::get( $field, 'maxFiles') && \GV\Utils::get( $field, 'multipleFiles') ) {
1561
1562
				        $input_name = 'input_' . $field->id;
1563
				        //uploaded
1564
				        $file_names = isset( GFFormsModel::$uploaded_files[ $validation_results['form']['id'] ][ $input_name ] ) ? GFFormsModel::$uploaded_files[ $validation_results['form']['id'] ][ $input_name ] : array();
1565
1566
				        //existent
1567
				        $entry = $this->get_entry();
1568
				        $value = NULL;
1569
				        if( isset( $entry[ $field->id ] ) ) {
1570
				            $value = json_decode( $entry[ $field->id ], true );
1571
				        }
1572
1573
				        // count uploaded files and existent entry files
1574
				        $count_files = ( is_array( $file_names ) ? count( $file_names ) : 0 ) +
1575
						               ( is_array( $value ) ? count( $value ) : 0 );
1576
1577
				        if( $count_files > $field->maxFiles ) {
1578
				            $field->validation_message = __( 'Maximum number of files reached', 'gravityview' );
1579
				            $field->failed_validation = 1;
1580
				            $gv_valid = false;
1581
1582
				            // in case of error make sure the newest upload files are removed from the upload input
1583
				            GFFormsModel::$uploaded_files[ $validation_results['form']['id'] ] = null;
1584
				        }
1585
1586
				    }
1587
1588
1589 2
				    break;
1590
1591
			}
1592
1593
			// This field has failed validation.
1594 18
			if( !empty( $field->failed_validation ) ) {
1595
1596 1
				gravityview()->log->debug( 'GravityView_Edit_Entry[custom_validation] Field is invalid.', array( 'data' => array( 'field' => $field, 'value' => $value ) ) );
1597
1598 1
				switch ( $field_type ) {
1599
1600
				    // Captchas don't need to be re-entered.
1601 1
				    case 'captcha':
1602
1603
				        // Post Image fields aren't editable, so we un-fail them.
1604 1
				    case 'post_image':
1605
				        $field->failed_validation = false;
1606
				        unset( $field->validation_message );
1607
				        break;
1608
1609
				}
1610
1611
				// You can't continue inside a switch, so we do it after.
1612 1
				if( empty( $field->failed_validation ) ) {
1613
				    continue;
1614
				}
1615
1616
				// checks if the No Duplicates option is not validating entry against itself, since
1617
				// we're editing a stored entry, it would also assume it's a duplicate.
1618 1
				if( !empty( $field->noDuplicates ) ) {
1619
1620
				    $entry = $this->get_entry();
1621
1622
				    // If the value of the entry is the same as the stored value
1623
				    // Then we can assume it's not a duplicate, it's the same.
1624
				    if( !empty( $entry ) && $value == $entry[ $field->id ] ) {
1625
				        //if value submitted was not changed, then don't validate
1626
				        $field->failed_validation = false;
1627
1628
				        unset( $field->validation_message );
1629
1630
				        gravityview()->log->debug( 'GravityView_Edit_Entry[custom_validation] Field not a duplicate; it is the same entry.', array( 'data' => $entry ) );
1631
1632
				        continue;
1633
				    }
1634
				}
1635
1636
				// if here then probably we are facing the validation 'At least one field must be filled out'
1637 1
				if( GFFormDisplay::is_empty( $field, $this->form_id  ) && empty( $field->isRequired ) ) {
1638
				    unset( $field->validation_message );
1639
	                $field->validation_message = false;
1640
				    continue;
1641
				}
1642
1643 1
				$gv_valid = false;
1644
1645
			}
1646
1647
		}
1648
1649 18
		$validation_results['is_valid'] = $gv_valid;
1650
1651 18
		gravityview()->log->debug( 'GravityView_Edit_Entry[custom_validation] Validation results.', array( 'data' => $validation_results ) );
1652
1653
		// We'll need this result when rendering the form ( on GFFormDisplay::get_form )
1654 18
		$this->form_after_validation = $validation_results['form'];
1655
1656 18
		return $validation_results;
1657
	}
1658
1659
1660
	/**
1661
	 * TODO: This seems to be hacky... we should remove it. Entry is set when updating the form using setup_vars()!
1662
	 * Get the current entry and set it if it's not yet set.
1663
	 * @return array Gravity Forms entry array
1664
	 */
1665 2
	public function get_entry() {
1666
1667 2
		if( empty( $this->entry ) ) {
1668
			// Get the database value of the entry that's being edited
1669 1
			$this->entry = gravityview_get_entry( GravityView_frontend::is_single_entry() );
1670
		}
1671
1672 2
		return $this->entry;
1673
	}
1674
1675
1676
1677
	// --- Filters
1678
1679
	/**
1680
	 * Get the Edit Entry fields as configured in the View
1681
	 *
1682
	 * @since 1.8
1683
	 *
1684
	 * @param int $view_id
1685
	 *
1686
	 * @return array Array of fields that are configured in the Edit tab in the Admin
1687
	 */
1688 19
	private function get_configured_edit_fields( $form, $view_id ) {
1689
1690
		// Get all fields for form
1691 19
		if ( \GV\View::exists( $view_id ) ) {
1692 19
			$view = \GV\View::by_id( $view_id );
1693 19
			$properties = $view->fields ? $view->fields->as_configuration() : array();
1694
		} else {
1695
			$properties = null;
1696
		}
1697
1698
		// If edit tab not yet configured, show all fields
1699 19
		$edit_fields = !empty( $properties['edit_edit-fields'] ) ? $properties['edit_edit-fields'] : NULL;
1700
1701
		// Hide fields depending on admin settings
1702 19
		$fields = $this->filter_fields( $form['fields'], $edit_fields );
1703
1704
	    // If Edit Entry fields are configured, remove adminOnly field settings. Otherwise, don't.
1705 19
	    $fields = $this->filter_admin_only_fields( $fields, $edit_fields, $form, $view_id );
1706
1707
		/**
1708
		 * @filter `gravityview/edit_entry/form_fields` Modify the fields displayed in Edit Entry form
1709
		 * @since 1.17
1710
		 * @param GF_Field[] $fields Gravity Forms form fields
1711
		 * @param array|null $edit_fields Fields for the Edit Entry tab configured in the View Configuration
1712
		 * @param array $form GF Form array (`fields` key modified to have only fields configured to show in Edit Entry)
1713
		 * @param int $view_id View ID
1714
		 */
1715 19
		$fields = apply_filters( 'gravityview/edit_entry/form_fields', $fields, $edit_fields, $form, $view_id );
1716
1717 19
		return $fields;
1718
	}
1719
1720
1721
	/**
1722
	 * Filter area fields based on specified conditions
1723
	 *  - This filter removes the fields that have calculation configured
1724
	 *  - Hides fields that are hidden, etc.
1725
	 *
1726
	 * @uses GravityView_Edit_Entry::user_can_edit_field() Check caps
1727
	 * @access private
1728
	 * @param GF_Field[] $fields
1729
	 * @param array $configured_fields
1730
	 * @since  1.5
1731
	 * @return array $fields
1732
	 */
1733 18
	private function filter_fields( $fields, $configured_fields ) {
1734
1735 18
		if( empty( $fields ) || !is_array( $fields ) ) {
1736
			return $fields;
1737
		}
1738
1739 18
		$edit_fields = array();
1740
1741 18
		$field_type_blacklist = $this->loader->get_field_blacklist( $this->entry );
1742
1743
		// First, remove blacklist or calculation fields
1744 18
		foreach ( $fields as $key => $field ) {
1745
1746
			// Remove the fields that have calculation properties and keep them to be used later
1747
			// @since 1.16.2
1748 18
			if( $field->has_calculation() ) {
1749 5
				$this->fields_with_calculation[] = $field;
1750
				// don't remove the calculation fields on form render.
1751
			}
1752
1753 18
			if( in_array( $field->type, $field_type_blacklist ) ) {
1754 3
				unset( $fields[ $key ] );
1755
			}
1756
		}
1757
1758
		// The Edit tab has not been configured, so we return all fields by default.
1759
		// But we do keep the hidden ones hidden please, for everyone :)
1760 18
		if ( empty( $configured_fields ) ) {
1761 15
			$out_fields = array();
1762 15
			foreach ( $fields as &$field ) {
1763 15
				if ( 'hidden' === $field->type ) {
1764 3
					continue; // A hidden field is just hidden
1765
				}
1766
1767 15
				if ( 'hidden' == $field->visibility ) {
1768 2
					continue; // Same
1769
				}
1770
1771 13
				$out_fields[] = $field;
1772
			}
1773
1774 15
			return array_values( $out_fields );
1775
		}
1776
1777
		// The edit tab has been configured, so we loop through to configured settings
1778 5
		foreach ( $configured_fields as $configured_field ) {
1779
1780
	        /** @var GF_Field $field */
1781 5
	        foreach ( $fields as $field ) {
1782 5
				if( intval( $configured_field['id'] ) === intval( $field->id ) && $this->user_can_edit_field( $configured_field, false ) ) {
1783 5
				    $edit_fields[] = $this->merge_field_properties( $field, $configured_field );
1784 5
				    break;
1785
				}
1786
1787
			}
1788
1789
		}
1790
1791 5
		return $edit_fields;
1792
1793
	}
1794
1795
	/**
1796
	 * Override GF Form field properties with the ones defined on the View
1797
	 * @param  GF_Field $field GF Form field object
1798
	 * @param  array $field_setting  GV field options
1799
	 * @since  1.5
1800
	 * @return array|GF_Field
1801
	 */
1802 5
	private function merge_field_properties( $field, $field_setting ) {
1803
1804 5
		$return_field = $field;
1805
1806 5
		if( empty( $field_setting['show_label'] ) ) {
1807
			$return_field->label = '';
1808 5
		} elseif ( !empty( $field_setting['custom_label'] ) ) {
1809
			$return_field->label = $field_setting['custom_label'];
1810
		}
1811
1812 5
		if( !empty( $field_setting['custom_class'] ) ) {
1813
			$return_field->cssClass .= ' '. gravityview_sanitize_html_class( $field_setting['custom_class'] );
1814
		}
1815
1816
		/**
1817
		 * Normalize page numbers - avoid conflicts with page validation
1818
		 * @since 1.6
1819
		 */
1820 5
		$return_field->pageNumber = 1;
1821
1822 5
		return $return_field;
1823
1824
	}
1825
1826
	/**
1827
	 * Remove fields that shouldn't be visible based on the Gravity Forms adminOnly field property
1828
	 *
1829
	 * @since 1.9.1
1830
	 *
1831
	 * @param array|GF_Field[] $fields Gravity Forms form fields
1832
	 * @param array|null $edit_fields Fields for the Edit Entry tab configured in the View Configuration
1833
	 * @param array $form GF Form array
1834
	 * @param int $view_id View ID
1835
	 *
1836
	 * @return array Possibly modified form array
1837
	 */
1838 18
	private function filter_admin_only_fields( $fields = array(), $edit_fields = null, $form = array(), $view_id = 0 ) {
1839
1840
	    /**
1841
		 * @filter `gravityview/edit_entry/use_gf_admin_only_setting` When Edit tab isn't configured, should the Gravity Forms "Admin Only" field settings be used to control field display to non-admins? Default: true
1842
	     * If the Edit Entry tab is not configured, adminOnly fields will not be shown to non-administrators.
1843
	     * If the Edit Entry tab *is* configured, adminOnly fields will be shown to non-administrators, using the configured GV permissions
1844
	     * @since 1.9.1
1845
	     * @param boolean $use_gf_adminonly_setting True: Hide field if set to Admin Only in GF and the user is not an admin. False: show field based on GV permissions, ignoring GF permissions.
1846
	     * @param array $form GF Form array
1847
	     * @param int $view_id View ID
1848
	     */
1849 18
	    $use_gf_adminonly_setting = apply_filters( 'gravityview/edit_entry/use_gf_admin_only_setting', empty( $edit_fields ), $form, $view_id );
1850
1851 18
	    if( $use_gf_adminonly_setting && false === GVCommon::has_cap( 'gravityforms_edit_entries', $this->entry['id'] ) ) {
1852 1
			foreach( $fields as $k => $field ) {
1853
				if( $field->adminOnly ) {
1854
				    unset( $fields[ $k ] );
1855
				}
1856
			}
1857 1
			return array_values( $fields );
1858
		}
1859
1860 18
	    foreach( $fields as &$field ) {
1861 18
		    $field->adminOnly = false;
1862
		}
1863
1864 18
		return $fields;
1865
	}
1866
1867
	/**
1868
	 * Checkboxes and other checkbox-based controls should not
1869
	 * display default checks in edit mode.
1870
	 *
1871
	 * https://github.com/gravityview/GravityView/1149
1872
	 *
1873
	 * @since 2.1
1874
	 *
1875
	 * @param array $form Gravity Forms array object
1876
	 *
1877
	 * @return array $form, modified to default checkboxes, radios from showing up.
1878
	 */
1879 18
	private function unselect_default_values( $form ) {
1880
1881 18
	    foreach ( $form['fields'] as &$field ) {
1882
1883 18
			if ( empty( $field->choices ) ) {
1884 18
                continue;
1885
			}
1886
1887 2
            foreach ( $field->choices as &$choice ) {
1888 2
				if ( \GV\Utils::get( $choice, 'isSelected' ) ) {
1889 1
					$choice['isSelected'] = false;
1890
				}
1891
			}
1892
		}
1893
1894 18
		return $form;
1895
	}
1896
1897
	// --- Conditional Logic
1898
1899
	/**
1900
	 * Conditional logic isn't designed to work with forms that already have content. When switching input values,
1901
	 * the dependent fields will be blank.
1902
	 *
1903
	 * Note: This is because GF populates a JavaScript variable with the input values. This is tough to filter at the input level;
1904
	 * via the `gform_field_value` filter; it requires lots of legwork. Doing it at the form level is easier.
1905
	 *
1906
	 * @since 1.17.4
1907
	 *
1908
	 * @param array $form Gravity Forms array object
1909
	 *
1910
	 * @return array $form, modified to fix conditional
1911
	 */
1912 18
	function prefill_conditional_logic( $form ) {
0 ignored issues
show
Best Practice introduced by
It is generally recommended to explicitly declare the visibility for methods.

Adding explicit visibility (private, protected, or public) is generally recommend to communicate to other developers how, and from where this method is intended to be used.

Loading history...
1913
1914 18
		if( ! GFFormDisplay::has_conditional_logic( $form ) ) {
1915 16
			return $form;
1916
		}
1917
1918
		// Have Conditional Logic pre-fill fields as if the data were default values
1919
		/** @var GF_Field $field */
1920 2
		foreach ( $form['fields'] as &$field ) {
1921
1922 2
			if( 'checkbox' === $field->type ) {
1923
				foreach ( $field->get_entry_inputs() as $key => $input ) {
1924
				    $input_id = $input['id'];
1925
				    $choice = $field->choices[ $key ];
1926
				    $value = \GV\Utils::get( $this->entry, $input_id );
1927
				    $match = RGFormsModel::choice_value_match( $field, $choice, $value );
1928
				    if( $match ) {
1929
				        $field->choices[ $key ]['isSelected'] = true;
1930
				    }
1931
				}
1932
			} else {
1933
1934
				// We need to run through each field to set the default values
1935 2
				foreach ( $this->entry as $field_id => $field_value ) {
1936
1937 2
				    if( floatval( $field_id ) === floatval( $field->id ) ) {
1938
1939 2
				        if( 'list' === $field->type ) {
1940
				            $list_rows = maybe_unserialize( $field_value );
1941
1942
				            $list_field_value = array();
1943
				            foreach ( (array) $list_rows as $row ) {
1944
				                foreach ( (array) $row as $column ) {
1945
				                    $list_field_value[] = $column;
1946
				                }
1947
				            }
1948
1949
				            $field->defaultValue = serialize( $list_field_value );
1950
				        } else {
1951 2
				            $field->defaultValue = $field_value;
1952
				        }
1953
				    }
1954
				}
1955
			}
1956
		}
1957
1958 2
		return $form;
1959
	}
1960
1961
	/**
1962
	 * Remove the conditional logic rules from the form button and the form fields, if needed.
1963
	 *
1964
	 * @todo Merge with caller method
1965
	 * @since 1.9
1966
	 *
1967
	 * @param array $form Gravity Forms form
1968
	 * @return array Modified form, if not using Conditional Logic
1969
	 */
1970 18
	private function filter_conditional_logic( $form ) {
1971
		/**
1972
		 * Fields that are tied to a conditional logic field that is not present in the view
1973
		 * have to still be displayed, if the condition is met.
1974
		 *
1975
		 * @see https://github.com/gravityview/GravityView/issues/840
1976
		 * @since develop
1977
		 */
1978 18
		$the_form = GFAPI::get_form( $form['id'] );
1979 18
		$editable_ids = array();
1980 18
		foreach ( $form['fields'] as $field ) {
1981 18
			$editable_ids[] = $field['id']; // wp_list_pluck is destructive in this context
1982
		}
1983 18
		$remove_conditions_rule = array();
1984 18
		foreach ( $the_form['fields'] as $field ) {
1985 18
			if ( ! empty( $field->conditionalLogic ) && ! empty( $field->conditionalLogic['rules'] ) ) {
1986 3
				foreach ( $field->conditionalLogic['rules'] as $i => $rule ) {
1987 3
					if ( ! in_array( $rule['fieldId'], $editable_ids ) ) {
1988
						/**
1989
						 * This conditional field is not editable in this View.
1990
						 * We need to remove the rule, but only if it matches.
1991
						 */
1992 2
						if ( $_field = GFAPI::get_field( $the_form, $rule['fieldId'] ) ) {
1993 2
							$value = $_field->get_value_export( $this->entry );
1994
						} elseif ( isset( $this->entry[ $rule['fieldId'] ] ) ) {
1995
							$value = $this->entry[ $rule['fieldId'] ];
1996
						} else {
1997
							$value = gform_get_meta( $this->entry['id'], $rule['fieldId'] );
1998
						}
1999
2000 2
						$match = GFFormsModel::matches_operation( $value, $rule['value'], $rule['operator'] );
2001
						
2002 2
						if ( $match ) {
2003 2
							$remove_conditions_rule[] = array( $field['id'], $i );
2004
						}
2005
					}
2006
				}
2007
			}
2008
		}
2009
2010 18
		if ( $remove_conditions_rule ) {
0 ignored issues
show
Bug Best Practice introduced by
The expression $remove_conditions_rule of type array is implicitly converted to a boolean; are you sure this is intended? If so, consider using ! empty($expr) instead to make it clear that you intend to check for an array without elements.

This check marks implicit conversions of arrays to boolean values in a comparison. While in PHP an empty array is considered to be equal (but not identical) to false, this is not always apparent.

Consider making the comparison explicit by using empty(..) or ! empty(...) instead.

Loading history...
2011 2
			foreach ( $form['fields'] as &$field ) {
2012 2
				foreach ( $remove_conditions_rule as $_remove_conditions_r ) {
2013
2014 2
				    list( $rule_field_id, $rule_i ) = $_remove_conditions_r;
2015
2016 2
					if ( $field['id'] == $rule_field_id ) {
2017 1
						unset( $field->conditionalLogic['rules'][ $rule_i ] );
2018 1
						gravityview()->log->debug( 'Removed conditional rule #{rule} for field {field_id}', array( 'rule' => $rule_i, 'field_id' => $field['id'] ) );
2019
					}
2020
				}
2021
			}
2022
		}
2023
2024
		/** Normalize the indices... */
2025 18
		$form['fields'] = array_values( $form['fields'] );
2026
2027
		/**
2028
		 * @filter `gravityview/edit_entry/conditional_logic` Should the Edit Entry form use Gravity Forms conditional logic showing/hiding of fields?
2029
		 * @since 1.9
2030
		 * @param bool $use_conditional_logic True: Gravity Forms will show/hide fields just like in the original form; False: conditional logic will be disabled and fields will be shown based on configuration. Default: true
2031
		 * @param array $form Gravity Forms form
2032
		 */
2033 18
		$use_conditional_logic = apply_filters( 'gravityview/edit_entry/conditional_logic', true, $form );
2034
2035 18
		if( $use_conditional_logic ) {
2036 18
			return $form;
2037
		}
2038
2039
		foreach( $form['fields'] as &$field ) {
2040
			/* @var GF_Field $field */
2041
			$field->conditionalLogic = null;
2042
		}
2043
2044
		unset( $form['button']['conditionalLogic'] );
2045
2046
		return $form;
2047
2048
	}
2049
2050
	/**
2051
	 * Disable the Gravity Forms conditional logic script and features on the Edit Entry screen
2052
	 *
2053
	 * @since 1.9
2054
	 *
2055
	 * @param $has_conditional_logic
2056
	 * @param $form
2057
	 * @return mixed
2058
	 */
2059 18
	public function manage_conditional_logic( $has_conditional_logic, $form ) {
2060
2061 18
		if( ! $this->is_edit_entry() ) {
2062
			return $has_conditional_logic;
2063
		}
2064
2065
	    /** @see GravityView_Edit_Entry_Render::filter_conditional_logic for filter documentation */
2066 18
		return apply_filters( 'gravityview/edit_entry/conditional_logic', $has_conditional_logic, $form );
2067
	}
2068
2069
2070
	// --- User checks and nonces
2071
2072
	/**
2073
	 * Check if the user can edit the entry
2074
	 *
2075
	 * - Is the nonce valid?
2076
	 * - Does the user have the right caps for the entry
2077
	 * - Is the entry in the trash?
2078
	 *
2079
	 * @todo Move to GVCommon
2080
	 *
2081
	 * @param  boolean $echo Show error messages in the form?
2082
	 * @return boolean        True: can edit form. False: nope.
2083
	 */
2084 19
	private function user_can_edit_entry( $echo = false ) {
2085
2086 19
		$error = NULL;
2087
2088
		/**
2089
		 *  1. Permalinks are turned off
2090
		 *  2. There are two entries embedded using oEmbed
2091
		 *  3. One of the entries has just been saved
2092
		 */
2093 19
		if( !empty( $_POST['lid'] ) && !empty( $_GET['entry'] ) && ( $_POST['lid'] !== $_GET['entry'] ) ) {
2094
2095
			$error = true;
2096
2097
		}
2098
2099 19
		if( !empty( $_GET['entry'] ) && (string)$this->entry['id'] !== $_GET['entry'] ) {
2100
2101
			$error = true;
2102
2103 19
		} elseif( ! $this->verify_nonce() ) {
2104
2105
			/**
2106
			 * If the Entry is embedded, there may be two entries on the same page.
2107
			 * If that's the case, and one is being edited, the other should fail gracefully and not display an error.
2108
			 */
2109
			if( GravityView_oEmbed::getInstance()->get_entry_id() ) {
0 ignored issues
show
Bug Best Practice introduced by
The expression \GravityView_oEmbed::get...tance()->get_entry_id() of type integer|null is loosely compared to true; this is ambiguous if the integer can be zero. You might want to explicitly use !== null instead.

In PHP, under loose comparison (like ==, or !=, or switch conditions), values of different types might be equal.

For integer values, zero is a special case, in particular the following results might be unexpected:

0   == false // true
0   == null  // true
123 == false // false
123 == null  // false

// It is often better to use strict comparison
0 === false // false
0 === null  // false
Loading history...
Deprecated Code introduced by
The method GravityView_oEmbed::getInstance() has been deprecated with message: Use \GV\oEmbed instead.

This method has been deprecated. The supplier of the class has supplied an explanatory message.

The explanatory message should give you some clue as to whether and when the method will be removed from the class and what other method or class to use instead.

Loading history...
Deprecated Code introduced by
The method GravityView_oEmbed::get_entry_id() has been deprecated with message: Use \GV\oEmbed instead.

This method has been deprecated. The supplier of the class has supplied an explanatory message.

The explanatory message should give you some clue as to whether and when the method will be removed from the class and what other method or class to use instead.

Loading history...
2110
				$error = true;
2111
			} else {
2112
				$error = __( 'The link to edit this entry is not valid; it may have expired.', 'gravityview');
2113
			}
2114
2115
		}
2116
2117 19
		if( ! GravityView_Edit_Entry::check_user_cap_edit_entry( $this->entry ) ) {
2118 1
			$error = __( 'You do not have permission to edit this entry.', 'gravityview');
2119
		}
2120
2121 19
		if( $this->entry['status'] === 'trash' ) {
2122
			$error = __('You cannot edit the entry; it is in the trash.', 'gravityview' );
2123
		}
2124
2125
		// No errors; everything's fine here!
2126 19
		if( empty( $error ) ) {
2127 19
			return true;
2128
		}
2129
2130 1
		if( $echo && $error !== true ) {
2131
2132 1
	        $error = esc_html( $error );
2133
2134
	        /**
2135
	         * @since 1.9
2136
	         */
2137 1
	        if ( ! empty( $this->entry ) ) {
2138 1
		        $error .= ' ' . gravityview_get_link( '#', _x('Go back.', 'Link shown when invalid Edit Entry link is clicked', 'gravityview' ), array( 'onclick' => "window.history.go(-1); return false;" ) );
2139
	        }
2140
2141 1
			echo GVCommon::generate_notice( wpautop( $error ), 'gv-error error');
2142
		}
2143
2144 1
		gravityview()->log->error( '{error}', array( 'error' => $error ) );
2145
2146 1
		return false;
2147
	}
2148
2149
2150
	/**
2151
	 * Check whether a field is editable by the current user, and optionally display an error message
2152
	 * @uses  GravityView_Edit_Entry->check_user_cap_edit_field() Check user capabilities
2153
	 * @param  array  $field Field or field settings array
2154
	 * @param  boolean $echo  Whether to show error message telling user they aren't allowed
2155
	 * @return boolean         True: user can edit the current field; False: nope, they can't.
2156
	 */
2157 5
	private function user_can_edit_field( $field, $echo = false ) {
2158
2159 5
		$error = NULL;
2160
2161 5
		if( ! $this->check_user_cap_edit_field( $field ) ) {
2162 1
			$error = __( 'You do not have permission to edit this field.', 'gravityview');
2163
		}
2164
2165
		// No errors; everything's fine here!
2166 5
		if( empty( $error ) ) {
2167 5
			return true;
2168
		}
2169
2170 1
		if( $echo ) {
2171
			echo GVCommon::generate_notice( wpautop( esc_html( $error ) ), 'gv-error error');
2172
		}
2173
2174 1
		gravityview()->log->error( '{error}', array( 'error' => $error ) );
2175
2176 1
		return false;
2177
2178
	}
2179
2180
2181
	/**
2182
	 * checks if user has permissions to edit a specific field
2183
	 *
2184
	 * Needs to be used combined with GravityView_Edit_Entry::user_can_edit_field for maximum security!!
2185
	 *
2186
	 * @param  [type] $field [description]
0 ignored issues
show
Documentation introduced by
The doc-type [type] could not be parsed: Unknown type name "" at position 0. [(view supported doc-types)

This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types.

Loading history...
2187
	 * @return bool
2188
	 */
2189 5
	private function check_user_cap_edit_field( $field ) {
2190
2191
		// If they can edit any entries (as defined in Gravity Forms), we're good.
2192 5
		if( GVCommon::has_cap( array( 'gravityforms_edit_entries', 'gravityview_edit_others_entries' ) ) ) {
2193 4
			return true;
2194
		}
2195
2196 1
		$field_cap = isset( $field['allow_edit_cap'] ) ? $field['allow_edit_cap'] : false;
2197
2198 1
		if( $field_cap ) {
2199 1
			return GVCommon::has_cap( $field['allow_edit_cap'] );
2200
		}
2201
2202
		return false;
2203
	}
2204
2205
2206
	/**
2207
	 * Is the current nonce valid for editing the entry?
2208
	 * @return boolean
2209
	 */
2210 18
	public function verify_nonce() {
2211
2212
		// Verify form submitted for editing single
2213 18
		if( $this->is_edit_entry_submission() ) {
2214
			$valid = wp_verify_nonce( $_POST[ self::$nonce_field ], self::$nonce_field );
2215
		}
2216
2217
		// Verify
2218 18
		else if( ! $this->is_edit_entry() ) {
2219
			$valid = false;
2220
		}
2221
2222
		else {
2223 18
			$valid = wp_verify_nonce( $_GET['edit'], self::$nonce_key );
2224
		}
2225
2226
		/**
2227
		 * @filter `gravityview/edit_entry/verify_nonce` Override Edit Entry nonce validation. Return true to declare nonce valid.
2228
		 * @since 1.13
2229
		 * @param int|boolean $valid False if invalid; 1 or 2 when nonce was generated
2230
		 * @param string $nonce_field Key used when validating submissions. Default: is_gv_edit_entry
2231
		 */
2232 18
		$valid = apply_filters( 'gravityview/edit_entry/verify_nonce', $valid, self::$nonce_field );
2233
2234 18
		return $valid;
2235
	}
2236
2237
2238
	/**
2239
	 * Multiselect in GF 2.2 became a json_encoded value. Fix it.
2240
	 *
2241
	 * As a hack for now we'll implode it back.
2242
	 */
2243
	public function fix_multiselect_value_serialization( $field_value, $field, $_this ) {
0 ignored issues
show
Unused Code introduced by
The parameter $_this is not used and could be removed.

This check looks from parameters that have been defined for a function or method, but which are not used in the method body.

Loading history...
2244
		if ( empty ( $field->storageType ) || $field->storageType != 'json' ) {
2245
			return $field_value;
2246
		}
2247
2248
		$maybe_json = @json_decode( $field_value, true );
2249
2250
		if ( $maybe_json ) {
2251
			return implode( ',', $maybe_json );
2252
		}
2253
2254
		return $field_value;
2255
	}
2256
2257
2258
2259
} //end class
2260