@Dimax66

This is a simple file manager tool created by Dimax66.

/home/runcloud/webapps/web-xplorethai-backup/wp-content/plugins/metform/core/forms/api.php/

<?php

namespace MetForm\Core\Forms;

use MetForm\Core\Entries\Map_El;

defined('ABSPATH') || exit;

class Api extends \MetForm\Base\Api
{

public function config()
    {
        $this->prefix = 'forms';
        $this->param = "/(?P<id>\w+)";
    }

public function post_update()
    {
        
        if(!current_user_can('manage_options')) {
			return;
		}

$form_id = $this->request['id'];
        $form_setting = $this->request->get_params();

if(isset($form_setting['mf_zoho'])){
            $zoho_fields = isset($form_setting['mf-zoho-custom-fields']) && isset($form_setting['mf-zoho-form-fields'])? array_combine($form_setting['mf-zoho-custom-fields'], $form_setting['mf-zoho-form-fields']) : '';
            update_post_meta($form_id, 'mf_zoho_fields', wp_json_encode( $zoho_fields ) );
        }
        
        
        // Push the for type settings inside the form setting array
        $existing_form_setting = \MetForm\Core\Forms\Action::instance()->get_all_data($form_id);

$this->setup_url_param_fields($form_id);
        if ( class_exists( 'MetForm_Pro\Base\Package' ) ) {
            $this->setup_conditional_redirect($form_id);
        }

if(isset($existing_form_setting['form_type'])){
            $form_setting['form_type'] = $existing_form_setting['form_type'];
        }

/**
         * Hubspot form settings save
         */
        if (isset($form_setting['mf_hubspot_form_guid'])) {
            $fields = [];

foreach ($form_setting as $key => $value) {

if (strpos($key, 'mf_hubspot_form_field_name_') !== false) {
                    array_push($fields, [$key => $value]);
                }
            }

update_option('mf_hubspot_form_guid_' . $form_id, $form_setting['mf_hubspot_form_guid']);
            update_option('mf_hubspot_form_portalId_' . $form_id, $form_setting['mf_hubspot_form_portalId']);
            update_option('mf_hubspot_form_data_' . $form_id, $fields);
        }
        
        if( !empty( $form_setting['mf_mail_aweber'] ) ){
            $fields = [];
            foreach ($form_setting as $key => $value) {
                
                if (strpos($key, 'mf_aweber_custom_field_name_') !== false) {

$label_key = str_replace('mf_aweber_custom_field_name_', '', $key);
                    array_push($fields, [$key => [
                        'field_key' => $value,
                        'custom_field_key' => $form_setting['mf_aweber_custom_field_label_' . $label_key]
                    ]]);
                }
            }

update_option('mf_aweber_form_data_' . $form_id, $fields);
        }

/**
         * Mailster form settings
         */
        if (isset($form_setting['mf_mailster_list_id'])) {
            $fields = [];

foreach ($form_setting as $key => $value) {

if (strpos($key, 'mailster_field_') !== false) {
                    array_push($fields, [$key => $value]);
                }
            }

update_option('mf_mailster_form_data_' . $form_id, $fields);
        }

/**
         * MailerLite field mapping save
         */
        if ( isset( $form_setting['mf_mailerlite'] ) && isset( $form_setting['mf_mailerlite_field_map'] ) ) {
            $field_mapping = array();
            foreach ( $form_setting['mf_mailerlite_field_map'] as $ml_field => $form_field ) {
                if ( ! empty( $form_field ) ) {
                    $field_mapping[ sanitize_text_field( $ml_field ) ] = sanitize_text_field( $form_field );
                }
            }
            update_option( 'mf_mailerlite_field_mapping_' . $form_id, $field_mapping );
        }

/**
         * Auth / Registration settings save
         */

if (class_exists('\MetForm_Pro\Core\Integrations\Email\Mailster\Mailster')) {

if (isset($form_setting['mf_auth_reg_user_name'])) {

$data = [

'mf_auth_reg_user_name' => $form_setting['mf_auth_reg_user_name'],
                    'mf_auth_reg_user_email' => $form_setting['mf_auth_reg_user_email'],
                    'mf_auth_reg_role' => $form_setting['mf_auth_reg_role']

];

update_option('mf_auth_reg_settings_' . $form_id, $data);
            }

}

/**
         * Auth / Login settings save
         */
        if (class_exists('\MetForm_Pro\Core\Integrations\Auth\Login\Loader')) {

if (isset($form_setting['mf_auth_login_user_name'])) {
                $data = [

'mf_auth_login_user_name' => $form_setting['mf_auth_login_user_name'],
                    'mf_auth_login_user_password' => $form_setting['mf_auth_login_user_password']

];

update_option('mf_auth_login_settings_' . $form_id, $data);
            }

}

/**
         * Post submission
         */
        if (class_exists('MetForm_Pro\Core\Integrations\Post\Form_To_Post\Post')) {

if (isset($form_setting['mf_post_submission_post_type'])) {
                $data = [

'mf_post_submission_post_type' => $form_setting['mf_post_submission_post_type'],
                    'mf_post_submission_title' => isset($form_setting['mf_post_submission_title']) ? $form_setting['mf_post_submission_title'] : '',
                    'mf_post_submission_content' => isset($form_setting['mf_post_submission_content']) ? $form_setting['mf_post_submission_content'] : '' ,
                    'mf_post_submission_author' => isset($form_setting['mf_post_submission_author']) ? $form_setting['mf_post_submission_author'] : '',
                    'mf_post_submission_featured_image' => isset($form_setting['mf_post_submission_featured_image']) ? $form_setting['mf_post_submission_featured_image'] : '',

];

/**
                 * If Custom field settings available
                 */
                if (isset($form_setting['mf_post_submission_custom_fields_name'])) {
                    $custom_fields_settings = [];
                    $mf_custom_fields = isset($form_setting['mf_post_submission_custom_fields_name']) ? $form_setting['mf_post_submission_custom_fields_name'] : '';
                    $mf_field_names =  isset($form_setting['mf_post_submission_mf_field_name']) ? $form_setting['mf_post_submission_mf_field_name'] : '';
                    $total_field_count = count($mf_custom_fields);
                    for ($index = 0; $index <= $total_field_count; $index++) {
                        if (!empty($mf_custom_fields[$index])) {
                            $custom_fields_settings[$mf_custom_fields[$index]] = $mf_field_names[$index];
                        }
                    }

update_option('mf_post_submission_custom_fields_' . $form_id, $custom_fields_settings );
                }

update_option('mf_post_submission_' . $form_id, $data);
            }
        }

return Action::instance()->store($form_id, $form_setting);
    }

/**
     * Saving the form bypass mapped fields
     * @param $form_id ID of the form
     */
    private function setup_url_param_fields($form_id)
    {

if(isset($this->request['mf_redirect_params_status'])){
            update_post_meta($form_id, 'mf_redirect_params_status', "true");
        }else{
            update_post_meta($form_id, 'mf_redirect_params_status', "false");
        }

if (isset($this->request['mf_redirect_params_status'])) {

$form_redirection_values = array_combine($this->request['mf_url_submission_custom_fields_name']??[], $this->request['mf_url_submission_mf_field_name']??[]);

// Check if $form_redirection_values is empty or not.
            if (!empty($form_redirection_values)) {

$json_encoded_values = json_encode($form_redirection_values);
                
                // Update the post meta with the JSON-encoded values.
                update_post_meta($form_id, 'mf_redirect_params', $json_encoded_values);
    
            }else{
                 // Update the post meta with blank
                 update_post_meta($form_id, 'mf_redirect_params', '');
                
            }            
        }
    }

/**
     * Saving the conditional redirect rules
     * @param $form_id ID of the form
     */
    private function setup_conditional_redirect( $form_id ) {

if ( isset( $this->request['mf_conditional_redirect_status'] ) ) {
            update_post_meta( $form_id, 'mf_conditional_redirect_status', 'true' );
        } else {
            update_post_meta( $form_id, 'mf_conditional_redirect_status', 'false' );
            update_post_meta( $form_id, 'mf_conditional_redirect_rules', '' );
            return;
        }

$redirect_urls = $this->request['mf_cr_redirect_url'] ?? [];
        $logics        = $this->request['mf_cr_logic']        ?? [];
        $fields        = $this->request['mf_cr_field']        ?? [];
        $compares      = $this->request['mf_cr_compare']      ?? [];
        $values        = $this->request['mf_cr_value']        ?? [];

$rules = [];

if ( ! is_array( $redirect_urls ) ) {
            $redirect_urls = [];
        }

foreach ( $redirect_urls as $index => $url ) {
            if ( ! is_string( $url ) ) {
                continue;
            }

$url = esc_url_raw( trim( $url ) );
            if ( empty( $url ) ) {
                continue;
            }

$group_fields   = ( isset( $fields[ $index ] )   && is_array( $fields[ $index ] ) )   ? $fields[ $index ]   : [];
            $group_compares = ( isset( $compares[ $index ] ) && is_array( $compares[ $index ] ) ) ? $compares[ $index ] : [];
            $group_values   = ( isset( $values[ $index ] )   && is_array( $values[ $index ] ) )   ? $values[ $index ]   : [];

$raw_logic = ( isset( $logics[ $index ] ) && is_string( $logics[ $index ] ) ) ? $logics[ $index ] : 'AND';
            $logic     = sanitize_text_field( $raw_logic );
            $logic     = in_array( $logic, [ 'AND', 'OR' ], true ) ? $logic : 'AND';

$conditions = [];
            foreach ( $group_fields as $ci => $field_name ) {
                $field_name = sanitize_text_field( $field_name );
                $raw_compare  = $group_compares[ $ci ] ?? '==';
                $compare      = in_array( $raw_compare, [ '==', '!=', '>', '>=', '<', '<=' ], true ) ? $raw_compare : '==';
                $value      = sanitize_text_field( $group_values[ $ci ]   ?? '' );

if ( empty( $field_name ) ) {
                    continue;
                }

$conditions[] = [
                    'field'   => $field_name,
                    'compare' => $compare,
                    'value'   => $value,
                ];
            }

if ( empty( $conditions ) ) {
                continue;
            }

$rules[] = [
                'redirect_url' => $url,
                'logic'        => $logic,
                'conditions'   => $conditions,
            ];
        }

update_post_meta( $form_id, 'mf_conditional_redirect_rules', wp_json_encode( $rules ) );
    }

public function get_get()
    {
        if(!current_user_can('manage_options')) {
			return;
		}

$form_id = $this->request['id'];

return Action::instance()->get_all_data($form_id);
    }

public function get_builder()
    {
        $form_id = $this->request['id'];
        return Builder::instance()->get_editor($form_id);
    }

public function get_form_content()
    {
        if(!current_user_can('manage_options')) {
			return;
		}

$form_id = $this->request['id'];
        return Builder::instance()->get_form_content($form_id);
    }

/**
     * Create a form, optionally seeded from a remote template.
     *
     * The route ID segment carries the remote template ID; `0` creates a blank
     * form. Template content is never accepted from the client — the server
     * fetches and processes it so a request cannot inject arbitrary Elementor
     * data or bypass the Pro package check.
     *
     * @since 4.1.6
     *
     * @return int|\WP_Error Created form post ID, or an error on failure.
     */
    public function get_builder_form_id()
    {
        $denied = $this->check_import_permission();

if (is_wp_error($denied)) {
            return $denied;
        }

return \MetForm\Core\Forms\Template_Library\Import::instance()->run([
            'template_id' => $this->request['id'],
            'title'       => isset($this->request['title']) ? $this->request['title'] : '',
            'form_type'   => isset($this->request['form_type']) ? $this->request['form_type'] : '',
        ]);
    }

/**
     * Create a form from a remote template.
     *
     * The template browser uses POST so the title travels in the request body.
     * The GET handler is kept for backwards compatibility with existing
     * integrations.
     *
     * @since 4.1.6
     *
     * @return int|\WP_Error Created form post ID, or an error on failure.
     */
    public function post_builder_form_id()
    {
        return $this->get_builder_form_id();
    }

/**
     * Import a remote template into a new form.
     *
     * Dedicated route used by the React template modals.
     *
     * @since 4.1.6
     *
     * @return \WP_REST_Response|\WP_Error Created form ID and editor URL.
     */
    public function post_import_template()
    {
        $denied = $this->check_import_permission();

if (is_wp_error($denied)) {
            return $denied;
        }

$form_id = \MetForm\Core\Forms\Template_Library\Import::instance()->run([
            'template_id' => $this->request['id'],
            'title'       => isset($this->request['title']) ? $this->request['title'] : '',
            'form_type'   => isset($this->request['form_type']) ? $this->request['form_type'] : '',
        ]);

if (is_wp_error($form_id)) {
            return $form_id;
        }

return new \WP_REST_Response([
            'form_id'    => (int) $form_id,
            'editor_url' => Builder::instance()->get_editor_url($form_id),
        ], 201);
    }

/**
     * Verify the current request may create forms from templates.
     *
     * WordPress authenticates the `X-WP-Nonce` header before the route runs, so
     * a valid REST nonce is already guaranteed for cookie-authenticated calls;
     * this adds the explicit capability check on top.
     *
     * @since 4.1.6
     *
     * @return true|\WP_Error True when allowed, error otherwise.
     */
    private function check_import_permission()
    {
        if (!is_user_logged_in()) {
            return new \WP_Error(
                'metform_not_authenticated',
                esc_html__('You must be logged in to create a form.', 'metform'),
                ['status' => 401]
            );
        }

if (!current_user_can('manage_options')) {
            return new \WP_Error(
                'metform_forbidden',
                esc_html__('You are not allowed to create forms.', 'metform'),
                ['status' => 403]
            );
        }

return true;
    }

public function get_templates()
    {
        if(!current_user_can('manage_options')) {
			return;
		}

$form_id = $this->request['id'];
        $args = array(
            'post_type' => Base::instance()->form->get_name(),
            'post_status' => 'publish',
            'posts_per_page' => -1,
        );

$forms = get_posts($args);

foreach ($forms as $form) {
            echo '<option value="' . esc_attr($form->ID) . '" ' . selected($form_id, $form->ID, false) . '>' . esc_html($form->post_title) . '</option>';
        }

exit();
    }

public function post_views()
    {
        $form_id = $this->request['id'];
        return Action::instance()->count_views($form_id);
    }

/**
     * Store hubspot forms
     */
    public function get_hubspot_forms()
    {
		if(!current_user_can('manage_options')) {
			return;
		}
        
        $form_id = $this->request['id'];
        $key = 'hubsopt_forms_' . $form_id . '_';
        $data = \MetForm\Core\Forms\Action::instance()->get_all_data($form_id);

if(!isset($data['mf_hubsopt_token']) || empty($data['mf_hubsopt_token'])) return;

$token = $data['mf_hubsopt_token'];

if(isset($data['mf_hubsopt_token_type']) && !empty($data['mf_hubsopt_token_type'])){

// Refresh token if needed
            \MetForm\Core\Integrations\Crm\Hubspot\Hubspot::refresh_token();
            // API Endpoint
            $url = "https://api.hubapi.com/forms/v2/forms";
            $headers = [
                'Authorization' => "Bearer " . $token
            ];
            $options = [
                'headers'     => $headers,
                'sslverify'   => false,
            ];
            $response = wp_remote_get( $url, $options );
            $forms = json_decode( wp_remote_retrieve_body( $response ) );
            
        } else {
            $response = wp_remote_get('https://api.hubapi.com/forms/v2/forms?hapikey=' . $token);
            $forms = json_decode( wp_remote_retrieve_body( $response ) );
        }

$save_forms = [];
        foreach ($forms as $form) {
            array_push($save_forms, [
                'portalId' => $form->portalId,
                'guid' => $form->guid,
                'name' => $form->name,
            ]);
        }
        update_option('mf_hubspot_saved_forms', $save_forms);
        update_option($key, $forms);
        return get_option($key);
    }

public function get_get_hubspot_forms()
    {
        if(!current_user_can('manage_options')) {
			return;
		}

$key = $form_id = $this->request['id'];

$key = 'hubsopt_forms_' . $form_id . '_';

return get_option($key);
    }

public function post_hubspot_form_fields()
    {
        if(!current_user_can('manage_options')) {
			return;
			}
        $form_id = $this->request['id'];

$form_guid = $this->request['guid'];

$data = \MetForm\Core\Forms\Action::instance()->get_all_data($form_id);

if ( !isset( $data['mf_hubsopt_token']) || empty($data['mf_hubsopt_token']) ) {

// return error if hubspot token not found
			return new \WP_Error( '401', esc_html__( 'Not Authorized', 'metform' ), array( 'status' => 401 ) );
        };

$token = $data['mf_hubsopt_token'];

if(isset($data['mf_hubsopt_token_type']) && !empty($data['mf_hubsopt_token_type'])){

// Refresh token if needed
            \MetForm\Core\Integrations\Crm\Hubspot\Hubspot::refresh_token();

// API Endpoint
            $url = "https://api.hubapi.com/forms/v2/fields/" . $form_guid;
            $headers = [
                'Authorization' => "Bearer " . $token
            ];
            $options = [
                'headers'     => $headers,
                'sslverify'   => false,
            ];
            $response = wp_remote_get( $url, $options );
            $fields = json_decode( wp_remote_retrieve_body( $response ) );
        } else {

$response = wp_remote_get('https://api.hubapi.com/forms/v2/fields/' . $form_guid . '?hapikey=' . $token);
            $fields = json_decode( wp_remote_retrieve_body( $response ) );
        }

return $fields;
    }

public function get_get_fields_data()
    {
		if(!current_user_can('manage_options')) {
			return;
		}

$form_id = $this->request['id'];
        $input_widgets = \Metform\Widgets\Manifest::instance()->get_input_widgets();

$widget_input_data = get_post_meta($form_id, '_elementor_data', true);
        $widget_input_data = json_decode($widget_input_data);

return Map_El::data($widget_input_data, $input_widgets)->get_el();
    }

public function get_get_mailster_forms()
    {
        if(!current_user_can('manage_options')) {
			return;
		}

return (new \MetForm_Pro\Core\Integrations\Email\Mailster\Api())->get_forms();
    }

public function get_get_mailster_form()
    {
        if(!current_user_can('manage_options')) {
			return;
		}

$form_id = $this->request['id'];
        return (new \MetForm_Pro\Core\Integrations\Email\Mailster\Api())->get_form($form_id);
    }

public function get_get_mailster_form_data()
    {
        if(!current_user_can('manage_options')) {
			return;
		}

$form_id = $this->request['id'];
        return get_option('mf_mailster_form_data_' . $form_id);
    }

public function get_get_helpscout_access_token(){
        if(!current_user_can('manage_options')) {
			return;
		}
      
        $app_id = \MetForm\Utils\Util::get_form_settings('mf_helpscout_app_id');
        $app_secret = \MetForm\Utils\Util::get_form_settings('mf_helpscout_app_secret');

$url = 'https://api.helpscout.net/v2/oauth2/token?grant_type=client_credentials&client_id='.$app_id.'&client_secret=' . $app_secret;
        $response = wp_remote_post($url,[
            'method' => 'POST',
        ]);

if (is_wp_error($response)) {
			$error_message = $response->get_error_message();
			$return['status'] = 0;
			$return['msg'] = "Something went wrong: " . esc_html($error_message);
		} else {
            $access_token = (json_decode($response['body'],true))['access_token'];
            $return['status'] = 200;
            $return['msg'] = 'Helpscout access token';
            $return['access_token'] = $access_token;
            update_option('mf_helpscout_access_token',$access_token);
        }
        
        $url = 'https://api.helpscout.net/v2/mailboxes';

$mailboxes = [];

$token = $access_token;

$response = wp_remote_get($url, [
      'method' => 'GET',
      'headers' => [

'Authorization' => 'Bearer ' . $token,
        'Content-Type' => 'application/json; charset=utf-8'
      ],
    ]);

$data = json_decode( wp_remote_retrieve_body( $response ) , true);

foreach ($data['_embedded']['mailboxes'] as $mailbox) {

array_push( $mailboxes, [
            'id' => $mailbox['id'],
            'name' => $mailbox['name']
        ]);
        
    }

update_option('mf_helpscout_mailboxes',$mailboxes);

return $return;
    }

public function get_get_helpscout_mailboxes(){
        if(!current_user_can('manage_options')) {
			return;
		}
        return get_option('mf_helpscout_mailboxes');
    }

public function get_get_helpscout_mailbox(){
        if(!current_user_can('manage_options')) {
			return;
		}

return  \MetForm\Utils\Util::get_form_settings('mf_helpscout_mailbox');
    }

// API Endpoint for disconnectig HubSpot Account from the site
    // Example: GET ~/wp-json/metform/v1/forms/disconnect_hubspot/endpoint
    public function get_disconnect_hubspot(){
        if(!current_user_can('manage_options')) {
			return ;
		}

// Remove HubSpot account access from the site.
        $settings_option = \MetForm\Core\Admin\Base::instance()->get_settings_option();
        $settings_option['mf_hubsopt_token'] = '';
        $settings_option['mf_hubsopt_refresh_token'] = '';
        $settings_option['mf_hubsopt_token_type'] = '';
        $settings_option['mf_hubsopt_expires_in'] = '';

// Save the results in a transient named latest_5_posts
        delete_transient('mf_hubsopt_token_transient');

// Update settings options
        update_option('metform_option__settings', $settings_option);

return 'disconnected';
    }

}