Uname: Linux premium294.web-hosting.com 4.18.0-553.45.1.lve.el8.x86_64 #1 SMP Wed Mar 26 12:08:09 UTC 2025 x86_64
Software: LiteSpeed
PHP version: 8.1.32 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.32.1
Your Ip: 216.73.216.223
User: mjbynoyq (1574) | Group: mjbynoyq (1570)
Safe Mode: OFF
Disable Function:
NONE

name : api.php
<?php


/**
 * @todo: Implement Brizy_Admin_AbstractApi here
 *
 * Class Brizy_Editor_Forms_Api
 */
class Brizy_Editor_Forms_Api
{

    const AJAX_GET_FORM = '_get_form';
    const AJAX_CREATE_FORM = '_create_form';
    const AJAX_UPDATE_FORM = '_update_form';
    const AJAX_DELETE_FORM = '_delete_form';
    const AJAX_SUBMIT_FORM = '_submit_form';

    const AJAX_GET_INTEGRATION = '_get_integration';
    const AJAX_CREATE_INTEGRATION = '_create_integration';
    const AJAX_UPDATE_INTEGRATION = '_update_integration';
    const AJAX_DELETE_INTEGRATION = '_delete_integration';

    const AJAX_SET_RECAPTCHA_ACCOUNT = '_set_recaptcha_account';
    const AJAX_GET_RECAPTCHA_ACCOUNT = '_get_recaptcha_account';
    const AJAX_DELETE_RECAPTCHA_ACCOUNT = '_delete_recaptcha_account';
    const AJAX_VALIDATE_RECAPTCHA_ACCOUNT = '_validate_recaptcha_account';


    const AJAX_AUTHENTICATION_CALLBACK = '_authentication_callback';

    /**
     * @var Brizy_Editor_Post
     */
    private $post;

    /**
     * @return Brizy_Editor_Post
     */
    public function get_post()
    {
        return $this->post;
    }

    /**
     * Brizy_Editor_API constructor.
     *
     * @param Brizy_Editor_Post $post
     */
    public function __construct($post)
    {

        $this->post = $post;

        $this->initialize();
    }

    private function initialize()
    {
        $pref = 'wp_ajax_' . Brizy_Editor::prefix();
        $pref_nopriv = 'wp_ajax_nopriv_' . Brizy_Editor::prefix();
        if (Brizy_Editor_User::is_user_allowed()) {

            add_action($pref . self::AJAX_GET_FORM, array($this, 'get_form'));
            add_action($pref . self::AJAX_CREATE_FORM, array($this, 'create_form'));
            add_action($pref . self::AJAX_UPDATE_FORM, array($this, 'update_form'));
            add_action($pref . self::AJAX_DELETE_FORM, array($this, 'delete_form'));
            add_action($pref . self::AJAX_CREATE_INTEGRATION, array($this, 'createIntegration'));
            add_action($pref . self::AJAX_GET_INTEGRATION, array($this, 'getIntegration'));
            add_action($pref . self::AJAX_UPDATE_INTEGRATION, array($this, 'updateIntegration'));
            add_action($pref . self::AJAX_DELETE_INTEGRATION, array($this, 'deleteIntegration'));
        }

        add_filter('brizy_form_submit_data', array($this, 'handleFileTypeFields'), -100, 2);

        add_action($pref . self::AJAX_SUBMIT_FORM, array($this, 'submit_form'));
        add_action($pref_nopriv . self::AJAX_SUBMIT_FORM, array($this, 'submit_form'));
    }


    protected function error($code, $message)
    {
        wp_send_json_error(array('code' => $code, 'message' => $message), 200);
    }

    protected function success($data, $code = 200)
    {
        wp_send_json_success($data, $code);
    }

    private function authorize()
    {
        if (!wp_verify_nonce($_REQUEST['hash'], Brizy_Editor_API::nonce)) {
            wp_send_json_error(array('code' => 400, 'message' => 'Bad request'), 400);
        }
    }

    public function get_form()
    {
        try {
            $this->authorize();

            $manager = new Brizy_Editor_Forms_FormManager(Brizy_Editor_Project::get());

            $form = $manager->getForm($_REQUEST['formId']);

            if ($form) {
                $this->success($form);
            }

            $this->error(404, 'Form not found');

        } catch (Exception $exception) {
            Brizy_Logger::instance()->critical($exception->getMessage(), array($exception));
            $this->error($exception->getCode(), $exception->getMessage());
            exit;
        }
    }

    public function create_form()
    {
        try {
            $this->authorize();

            $manager = new Brizy_Editor_Forms_FormManager(Brizy_Editor_Project::get());
            $instance = Brizy_Editor_Forms_Form::createFromJson(json_decode(file_get_contents('php://input')));
            $validation_result = $instance->validate();

            if ($validation_result === true) {
                $manager->addForm($instance);
                $this->success($instance, 201);
            }

            $this->error(400, $validation_result);

        } catch (Exception $exception) {
            Brizy_Logger::instance()->critical($exception->getMessage(), array($exception));
            $this->error($exception->getCode(), $exception->getMessage());
            exit;
        }
    }

    public function update_form()
    {
        try {
            $this->authorize();

            $manager = new Brizy_Editor_Forms_FormManager(Brizy_Editor_Project::get());

            $form_json = json_decode(file_get_contents('php://input'));

            if (!$form_json) {
                $this->error(400, 'Invalid json object provided');
            }

            if (!isset($_REQUEST['formId'])) {
                $this->error(400, 'Invalid form id provided');
            }

            $form = $manager->getForm($_REQUEST['formId']);

            if (!$form) {
                $this->error(404, 'Form not found');
            }

            $instance = Brizy_Editor_Forms_Form::updateFromJson($form, $form_json);
            $validation_result = $instance->validate();

            if ($validation_result === true) {
                $manager->addForm($instance);
                $this->success($instance, 200);
            }

            $this->error(400, $validation_result);

        } catch (Exception $exception) {
            Brizy_Logger::instance()->critical($exception->getMessage(), array($exception));
            $this->error($exception->getCode(), $exception->getMessage());
            exit;
        }
    }

    public function delete_form()
    {
        try {
            $this->authorize();
            $manager = new Brizy_Editor_Forms_FormManager(Brizy_Editor_Project::get());
            $manager->deleteFormById($_REQUEST['formId']);
            $this->success(array());
        } catch (Exception $exception) {
            Brizy_Logger::instance()->critical($exception->getMessage(), array($exception));
            $this->error($exception->getCode(), $exception->getMessage());
            exit;
        }
    }

    public function submit_form()
    {
	    if ( is_user_logged_in() ) {
		    if ( empty( $_REQUEST['nonce'] ) || ! wp_verify_nonce( $_REQUEST['nonce'], Brizy_Editor_API::nonce ) ) {
			    $this->error( 401, 'Please refresh the page and try again.' );
		    }
	    }

        try {
            $manager = new Brizy_Editor_Forms_FormManager(Brizy_Editor_Project::get());
            /**
             * @var Brizy_Editor_Forms_Form $form ;
             */

            $form = $manager->getForm(isset($_REQUEST['form_id']) ? $_REQUEST['form_id'] : null);

            if (!$form) {
                $this->error(404, "Form not found");
            }

            $fields = json_decode(stripslashes($_REQUEST['data']));

            if (!$fields) {
                $this->error(400, "Invalid form data");
            }

            // validtate recaptha response if exists
            $accountManager = new Brizy_Editor_Accounts_ServiceAccountManager(Brizy_Editor_Project::get());
            $recaptchaAccounts = $accountManager->getAccountsByGroup(Brizy_Editor_Accounts_AbstractAccount::RECAPTCHA_GROUP);

            if (count($recaptchaAccounts) > 0) {
                $recaptchaField = null;
                foreach ($fields as $field) {
                    if ($field->name == 'g-recaptcha-response') {
                        $recaptchaField = $field;
                    }
                }

                if (!$recaptchaField) {
                    Brizy_Logger::instance()->error("The submitted data is invalid.");
                    $this->error(400, "The submitted data is invalid.");
                }

                $recaptchaAccount = $recaptchaAccounts[0];

                $http = new WP_Http();
                $array = array(
                    'secret' => $recaptchaAccount->getSecretKey(),
                    'response' => $recaptchaField->value
                );
                $response = $http->post('https://www.google.com/recaptcha/api/siteverify', array(
                        'body' => $array
                    )
                );

                $body = wp_remote_retrieve_body($response);

                $responseJsonObject = json_decode($body);

                if (!is_object($responseJsonObject) || !$responseJsonObject->success) {
                    $this->error(400, "Unable to validation request");
                }
            }

            $form = apply_filters('brizy_form', $form);
            $fields = apply_filters('brizy_form_submit_data', $fields, $form);

			if(count($form->getIntegrations())==0) {
				 $this->error(500, 'The form has no integrations.');
			}

            $result = null;
            foreach ($form->getIntegrations() as $integration) {

                if (!$integration->isCompleted()) {
                    continue;
                }

                try {
                    $result = $integration->handleSubmit($form, $fields);
                } catch (Exception $e) {
                    Brizy_Logger::instance()->exception($e);
                    $this->error(500, 'Member was not created.');
                } finally {
                    if (!$result && $integration->getException()) {
                        throw new Exception($integration->getException()->get_error_message());
                    }
                }
            }

            $this->success(200);

        } catch (Exception $exception) {
            Brizy_Logger::instance()->critical($exception->getMessage(), array($exception));
            $this->error(400, $exception->getMessage());
            exit;
        }
    }

    public function handleFileTypeFields($fields, $form)
    {

        foreach ($fields as $field) {
            if ($field->type == 'FileUpload') {
                $uFile = $_FILES[$field->name];

                foreach ($_FILES[$field->name]['name'] as $index => $value) {
                    $uFile = array(
                        'name' => $_FILES[$field->name]['name'][$index],
                        'type' => $_FILES[$field->name]['type'][$index],
                        'tmp_name' => $_FILES[$field->name]['tmp_name'][$index],
                        'error' => $_FILES[$field->name]['error'][$index],
                        'size' => $_FILES[$field->name]['size'][$index]
                    );

                    $uploadOverrides = array('test_form' => false);

                    $file = wp_handle_upload($uFile, $uploadOverrides);

                    if (!$file || isset($file['error'])) {
                        Brizy_Logger::instance()->error('Failed to handle upload', $fields);
                        throw new Exception('Failed to handle upload');
                    }

                    // create attachment
                    $wp_upload_dir = wp_upload_dir();
                    $attachment = array(
                        'guid' => $wp_upload_dir['url'] . '/' . basename($file['file']),
                        'post_mime_type' => $file['type'],
                        'post_title' => preg_replace('/\.[^.]+$/', '', basename($file['file'])),
                        'post_content' => '',
                        'post_status' => 'inherit'
                    );

                    $attach_id = wp_insert_attachment($attachment, $file['file']);

                    if ($attach_id instanceof WP_Error) {
                        Brizy_Logger::instance()->critical('Failed to handle upload', array($attach_id));
                        throw new Exception('Failed to handle upload');
                    }

                    update_post_meta($attach_id, 'brizy-form-upload', 1);

                    // Make sure that this file is included, as wp_generate_attachment_metadata() depends on it.
                    require_once(ABSPATH . 'wp-admin/includes/image.php');

                    // Generate the metadata for the attachment, and update the database record.
                    $attach_data = wp_generate_attachment_metadata($attach_id, $file['file']);
                    wp_update_attachment_metadata($attach_id, $attach_data);

                    $field->value = $file['url'];
                }
            }
        }

        return $fields;
    }

    public function createIntegration()
    {

        $this->authorize();
        $manager = new Brizy_Editor_Forms_FormManager(Brizy_Editor_Project::get());

        $form = $manager->getForm($_REQUEST['formId']);

        if (!$form) {
            $this->error(400, "Invalid form id");
        }

        try {
            $integration = Brizy_Editor_Forms_AbstractIntegration::createInstanceFromJson(json_decode(file_get_contents('php://input')));

            if ($form->getIntegration($integration->getid())) {
                $this->error(400, "This integration is already created");
            }

            $integration = apply_filters('brizy_create_integration', $integration, $form);
            $integration = apply_filters('brizy_prepare_integration', $integration, $form);
            $integration = apply_filters('brizy_add_integration_accounts', $integration, $form);

            if ($form->addIntegration($integration)) {
                $manager->addForm($form);
                $this->success($integration);
            }

        } catch (Exception $exception) {
            Brizy_Logger::instance()->critical($exception->getMessage(), array($exception));
            $this->error(400, $exception->getMessage());
        }

        $this->error(500, "Unable to create integration");
    }

    public function getIntegration()
    {

        $this->authorize();

        $manager = new Brizy_Editor_Forms_FormManager(Brizy_Editor_Project::get());


        $form = $manager->getForm($_REQUEST['formId']);
        if (!$form) {
            $this->error(400, "Invalid form id");
        }
        $integrationId = $_REQUEST['integration'];
        if (!$integrationId) {
            $this->error(400, "Invalid form integration");
        }

        $integration = $form->getIntegration($integrationId);

        if ($integration) {
            $integration = apply_filters('brizy_add_integration_accounts', $integration, $form);
            $integration = apply_filters('brizy_prepare_integration', $integration, $form);
            $this->success($integration);
        }

        $this->error(404, 'Integration not found');
    }

    public function updateIntegration()
    {

        $this->authorize();

        $manager = new Brizy_Editor_Forms_FormManager(Brizy_Editor_Project::get());

        $form = $manager->getForm($_REQUEST['formId']);
        if (!$form) {
            $this->error(400, "Invalid form id");
        }

        $integration = Brizy_Editor_Forms_AbstractIntegration::createInstanceFromJson(json_decode(file_get_contents('php://input')));

        $integration = apply_filters('brizy_update_integration', $integration, $form);
        $integration = apply_filters('brizy_prepare_integration', $integration, $form);

        //------------------

        if ($integration && $form->updateIntegration($integration)) {
            $manager->addForm($form);
            $this->success($integration);
        }

        $this->error(404, 'Integration not found');
    }

    public function deleteIntegration()
    {

        $this->authorize();

        $manager = new Brizy_Editor_Forms_FormManager(Brizy_Editor_Project::get());
        $form = $manager->getForm($_REQUEST['formId']);
        if (!$form) {
            $this->error(400, "Invalid form id");
        }

        $integrationId = $_REQUEST['integration'];
        if (!$integrationId) {
            $this->error(400, "Invalid form integration");
        }

		$integration = $form->getIntegration( $integrationId);

        if (!$integration) {
            $this->error(400, "The requested integration has been deleted.");
        }

        apply_filters('brizy_delete_integration', $integration, $form);

        $deleted = false;

        if ($integrationId) {
            $deleted = $form->deleteIntegration($integrationId);
        }

        if ($deleted) {
            $manager->addForm($form);
            $this->success(null);
        }

        $this->error(404, 'Integration not found');
    }


}
© 2025 XylotrechusZ