__( 'Gravity Forms', 'zero-spam' ), 'color' => '#f15a29', ); return $types; } /** * Admin section * * @param array $sections Array of available setting sections. */ public function sections( $sections ) { $sections['gravityforms'] = array( 'title' => __( 'Gravity Forms', 'zero-spam' ), 'icon' => 'modules/gravityforms/icon-gravity-forms.svg', 'supports' => array( 'honeypot', 'davidwalsh', 'email', 'words' ), ); return $sections; } /** * Load the David Walsh scripts for Gravity Forms. * * @see https://docs.gravityforms.com/gform_enqueue_scripts/ */ public function add_scripts() { // Trigger the custom action to enqueue the David Walsh script. do_action( 'zerospam_gravityforms_scripts' ); } /** * Adds Zero Spam's honeypot field. * * @see https://docs.gravityforms.com/gform_form_tag/#h-add-hidden-input * * @param string $form_tag The string containing the

tag * @param array $form The current form object to be filtered. */ public function add_honeypot( $form_tag, $form ) { $form_tag .= \ZeroSpam\Core\Utilities::honeypot_field(); return $form_tag; } public function confirmation_message( $confirmation, $form, $entry, $ajax ) { if ( empty( $entry ) || rgar( $entry, 'status' ) === 'spam' ) { $error_message = \ZeroSpam\Core\Utilities::detection_message( 'gravityforms_spam_message' ); return $error_message; } return $confirmation; } /** * Processes a Gravity Forms submission. * * @param boolean $do_abort Indicates if the submission should abort without saving the entry. * @param FormObject $form The form currently being processed. */ public function process_form( $do_abort, $form ) { // If submission is already marked to be aborted early, don't change it. if ( $do_abort ) { return true; } // @codingStandardsIgnoreLine $post = \ZeroSpam\Core\Utilities::sanitize_array( $_POST ); // Check Zero Spam's honeypot field. $honeypot_field_name = \ZeroSpam\Core\Utilities::get_honeypot(); // Create the details array for logging & sharing data. $details = $post; $details['type'] = 'gravityforms'; // Begin validation checks. $validation_errors = array(); // @codingStandardsIgnoreLine if ( isset( $post[ $honeypot_field_name ] ) && ! empty( $post[ $honeypot_field_name ] ) ) { // Failed the honeypot check. $validation_errors[] = 'honeypot'; } // Check submitted fields for blocked email domains and disallowed words. $check_blocked_emails = 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'verify_gravityforms_blocked_email_domains' ); $check_disallowed = 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'verify_gravityforms_disallowed_words' ); if ( $check_blocked_emails || $check_disallowed ) { foreach ( $post as $key => $value ) { // Gravity Forms fields use input_X or input_X_Y naming. if ( ! is_string( $value ) || 0 !== strpos( $key, 'input_' ) ) { continue; } $value = trim( $value ); if ( empty( $value ) ) { continue; } // Check for blocked email domains. if ( $check_blocked_emails && \ZeroSpam\Core\Utilities::is_email( $value ) && \ZeroSpam\Core\Utilities::is_email_domain_blocked( $value ) ) { $validation_errors[] = 'blocked_email_domain'; break; } // Check against disallowed words list. if ( $check_disallowed && \ZeroSpam\Core\Utilities::is_disallowed( $value ) ) { $validation_errors[] = 'disallowed_list'; break; } } } // Fire hook for additional validation (ex. David Walsh). if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'davidwalsh' ) ) { $filtered_errors = apply_filters( 'zerospam_preprocess_gravityforms_submission', array(), $post, 'gravityforms_spam_message' ); if ( ! empty( $filtered_errors ) ) { foreach ( $filtered_errors as $key => $message ) { $validation_errors[] = str_replace( 'zerospam_', '', $key ); } } } if ( ! empty( $validation_errors ) ) { do_action( 'zero_spam_detection', $details, $validation_errors ); $do_abort = true; // Failed validations, log & send details if enabled. foreach ( $validation_errors as $key => $fail ) { $details['failed'] = $fail; // Log the detection if enabled. if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'log_blocked_gravityforms' ) ) { \ZeroSpam\Includes\DB::log( 'gravityforms', $details ); } // Share the detection if enabled. if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'share_data' ) ) { do_action( 'zerospam_share_detection', $details ); } } } return $do_abort; } /** * Admin settings * * @param array $settings Array of available settings. */ public function settings( $settings ) { $options = get_option( 'zero-spam-gravityforms' ); $settings['verify_gravityforms'] = array( 'title' => __( 'Protect Gravity Forms Submissions', 'zero-spam' ), 'desc' => __( 'Stop spam from Gravity Forms (requires version 2.7 or newer).', 'zero-spam' ), 'section' => 'gravityforms', 'module' => 'gravityforms', 'type' => 'checkbox', 'options' => array( 'enabled' => false, ), 'value' => ! empty( $options['verify_gravityforms'] ) ? $options['verify_gravityforms'] : false, 'recommended' => 'enabled', ); $message = __( 'We were unable to process your submission due to possible malicious activity.', 'zero-spam' ); $settings['gravityforms_spam_message'] = array( 'title' => __( 'Flagged Message', 'zero-spam' ), 'desc' => __( 'The message shown when Gravity Forms detects spam.', 'zero-spam' ), 'section' => 'gravityforms', 'module' => 'gravityforms', 'type' => 'text', 'field_class' => 'large-text', 'placeholder' => $message, 'value' => ! empty( $options['gravityforms_spam_message'] ) ? $options['gravityforms_spam_message'] : $message, 'recommended' => $message, ); $settings['verify_gravityforms_blocked_email_domains'] = array( 'title' => __( 'Check Blocked Email Domains', 'zero-spam' ), 'desc' => __( 'Block Gravity Forms submissions containing email addresses from blocked domains.', 'zero-spam' ), 'section' => 'gravityforms', 'module' => 'gravityforms', 'type' => 'checkbox', 'options' => array( 'enabled' => false, ), 'value' => ! empty( $options['verify_gravityforms_blocked_email_domains'] ) ? $options['verify_gravityforms_blocked_email_domains'] : false, 'recommended' => 'enabled', ); $settings['verify_gravityforms_disallowed_words'] = array( 'title' => __( 'Check Disallowed Words', 'zero-spam' ), 'desc' => __( 'Block Gravity Forms submissions containing words from the WordPress disallowed words list.', 'zero-spam' ), 'section' => 'gravityforms', 'module' => 'gravityforms', 'type' => 'checkbox', 'options' => array( 'enabled' => false, ), 'value' => ! empty( $options['verify_gravityforms_disallowed_words'] ) ? $options['verify_gravityforms_disallowed_words'] : false, 'recommended' => 'enabled', ); $settings['log_blocked_gravityforms'] = array( 'title' => __( 'Log Blocked Gravity Form Submissions', 'zero-spam' ), 'section' => 'gravityforms', 'module' => 'gravityforms', 'type' => 'checkbox', 'desc' => __( 'Keep a record of blocked Gravity Forms submissions.', 'zero-spam' ), 'options' => array( 'enabled' => false, ), 'value' => ! empty( $options['log_blocked_gravityforms'] ) ? $options['log_blocked_gravityforms'] : false, 'recommended' => 'enabled', ); return $settings; } }