';
}
echo '';
}
public function open_form( $step ) {
echo '';
echo wp_kses( '';
}
private static function later_prompt_attributes() {
return ' data-hpf-confirm="' . esc_attr__( 'You can only come back to the setup wizard from Settings, on the Help & support tab. Finish it later?', 'holmesportfolio-forms' ) . '"'
. ' data-hpf-confirm-title="' . esc_attr__( 'Finish the setup wizard later?', 'holmesportfolio-forms' ) . '"'
. ' data-hpf-confirm-label="' . esc_attr__( 'Yes, finish later', 'holmesportfolio-forms' ) . '"';
}
public function saved_setting( $key, $fallback = '' ) {
$settings = get_option( 'holmesforms_settings', array() );
return ( is_array( $settings ) && isset( $settings[ $key ] ) ) ? $settings[ $key ] : $fallback;
}
public function previous_step( $slug ) {
$order = array_keys( $this->steps() );
$position = array_search( $slug, $order, true );
return ( false !== $position && $position > 0 ) ? $order[ $position - 1 ] : 'welcome';
}
/* Steps */
private function step_welcome() {
$rows = array(
array( 'brush', __( 'How your forms look', 'holmesportfolio-forms' ), __( 'Pick a house style: GOV.UK, Bootstrap, or a clean built-in look. It applies to every form on the site. What each form asks is still up to you.', 'holmesportfolio-forms' ) ),
array( 'shield', __( 'What you keep, and for how long', 'holmesportfolio-forms' ), __( 'Whether answers are stored, how long they stay, and whether to log the sender’s IP address.', 'holmesportfolio-forms' ) ),
array( 'mail', __( 'Where system emails come from', 'holmesportfolio-forms' ), __( 'The “from” address on notifications, and the reference prefix for this site.', 'holmesportfolio-forms' ) ),
array( 'shield', __( 'Spam', 'holmesportfolio-forms' ), __( 'Three checks run on every form without any setup. You can add a visible challenge on top.', 'holmesportfolio-forms' ) ),
array( 'stack', __( 'Starter forms', 'holmesportfolio-forms' ), __( 'Ready-made forms to open, copy from, or drop on a page. Keep them, change them or remove them.', 'holmesportfolio-forms' ) ),
);
echo '
' . esc_html__( 'Get your forms working the way you want', 'holmesportfolio-forms' ) . '
';
echo '
' . esc_html__( 'A few quick choices, about a minute in all. You can change any of them later in Settings. You can also skip the wizard now and come back to it whenever you like.', 'holmesportfolio-forms' ) . '
';
}
/** @param string $name One of: spark, brush, shield, mail, stack. */
private static function icon( $name ) {
$paths = array(
'spark' => '',
'brush' => '',
'shield' => '',
'mail' => '',
'stack' => '',
);
$path = isset( $paths[ $name ] ) ? $paths[ $name ] : $paths['spark'];
return '';
}
private function step_style() {
$current = (string) $this->saved_setting( 'style_mode', 'gds' );
$styles = array(
'gds' => array( __( 'GOV.UK Design System', 'holmesportfolio-forms' ), __( 'Built on the design system used across GOV.UK, so forms look and behave like other UK government services.', 'holmesportfolio-forms' ) ),
'bootstrap' => array( __( 'Bootstrap 5', 'holmesportfolio-forms' ), __( 'Use this if your site already runs on Bootstrap.', 'holmesportfolio-forms' ) ),
'plain' => array( __( 'Plain', 'holmesportfolio-forms' ), __( 'A tidy built-in look with rounded fields and a solid button. It does not depend on your theme.', 'holmesportfolio-forms' ) ),
'none' => array( __( 'Inherit my theme', 'holmesportfolio-forms' ), __( 'No form styles at all. Your theme decides how forms look.', 'holmesportfolio-forms' ) ),
);
$this->open_form( 'style' );
echo '
' . esc_html__( 'How should your forms look?', 'holmesportfolio-forms' ) . '
';
echo '
' . esc_html__( 'One style applies to every form on the site. There is no per-form override. Set it here and change it any time in Settings.', 'holmesportfolio-forms' ) . '
' . esc_html__( 'What the site keeps', 'holmesportfolio-forms' ) . '
';
echo '
' . esc_html__( 'These choices decide how much personal data your site holds and for how long. Check them against how your organisation works and the rules that apply to it. This is guidance, not legal advice.', 'holmesportfolio-forms' ) . '
';
$store_modes = array(
'all' => __( 'Keep a copy of every form’s answers', 'holmesportfolio-forms' ),
'per_form' => __( 'Choose form by form (you pick the forms in Settings, under Data & privacy)', 'holmesportfolio-forms' ),
'never' => __( 'Keep no answers on this site. Emails and connections still work.', 'holmesportfolio-forms' ),
);
foreach ( $store_modes as $value => $label ) {
echo '';
}
echo '
';
echo '
' . esc_html__( 'Any email you add to a form is sent whichever you pick. This only decides whether a copy of the answers stays in your site’s database. If you keep none, the delete-after setting below has nothing to do.', 'holmesportfolio-forms' ) . '
' . esc_html(
sprintf(
/* translators: 1: minimum days, 2: maximum days */
__( 'A daily job removes stored entries older than this. The allowed range is %1$d–%2$d days. Retention always applies, so there is no “keep forever”. UK data protection law says personal data must not be kept longer than you need it. Guidance on storage limitation from the Information Commission’s Office (ICO) explains how to decide. This is guidance, not legal advice.', 'holmesportfolio-forms' ),
$bounds['min'],
$bounds['max']
)
) . '
' . esc_html__( 'Off by default, and only kept when submissions are stored at all. An IP address is personal data under UK data protection law. Turn this on only if you have a specific reason, for example fraud investigation, and your privacy notice covers it. This is guidance, not legal advice.', 'holmesportfolio-forms' ) . '
';
echo '
';
echo '
';
echo '
' . esc_html__( 'Encryption at rest', 'holmesportfolio-forms' ) . '
';
if ( HP_Forms_Crypt::is_active() ) {
/* translators: %s: where the key comes from: constant, env or filter */
echo '
' . esc_html( sprintf( __( 'Encryption is on. The key comes from: %s.', 'holmesportfolio-forms' ), HP_Forms_Crypt::source_name() ) ) . '
';
if ( ! extension_loaded( 'sodium' ) ) {
echo '
' . esc_html__( 'Encryption still works, but this server\'s PHP is missing the sodium extension, so opening, listing, searching and exporting entries can be much slower. Ask your host to turn on the PHP sodium extension, which comes as standard with PHP 7.2 and later.', 'holmesportfolio-forms' ) . '
';
}
} else {
echo '
' . esc_html__( 'Encryption is off.', 'holmesportfolio-forms' ) . '
';
}
echo '
' . esc_html__( 'Encryption seals stored answers, so a copy of the database, or a backup of it alone, can’t be read without the key. It won’t stop someone who can read your site’s files or run code on the server, because they can read the key too. Staff with access to entries still see the answers. It adds to a secure host, updates and two-step sign-in. It doesn’t replace them.', 'holmesportfolio-forms' ) . '
' . esc_html__( 'A server environment variable keeps the key off the site’s own files entirely, which is stronger than the line above.', 'holmesportfolio-forms' )
. ( class_exists( 'HP_Forms_Admin' ) ? HP_Forms_Admin::guide_link_html( 'encryption-key-source' ) : '' ) . '
' . esc_html__( 'The “from” address on every notification, so a private inbox does not show as the sender. Use an address your site is allowed to send as. Your domain’s Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) records decide this. A “no-reply” address on your own domain is a common choice. Leave it blank to use the WordPress admin address.', 'holmesportfolio-forms' ) . '
' . esc_html(
sprintf(
/* translators: %s: example reference */
__( 'Every submission gets a reference like %s. It appears in the entry, the spreadsheet export and any email that uses the [reference] token. The number only counts up, so a reference is never reused. Each form can set its own prefix and keep its own count.', 'holmesportfolio-forms' ),
( $prefix ? $prefix : 'ENQ' ) . '-000042'
)
) . '
' . esc_html__( 'A honeypot, a timing check and a rate limit run on every form. Visitors do not see them. You can add a challenge on top of that.', 'holmesportfolio-forms' ) . '
' . esc_html__( 'The GOV.UK Service Manual advises against CAPTCHA tests. They can turn real people away, disabled and less confident users most of all. Choose None unless you have a specific reason. If you pick one, add its keys in Settings → Spam.', 'holmesportfolio-forms' ) . '
';
echo '
' . esc_html__( 'Both use cookies or similar technology.', 'holmesportfolio-forms' ) . ' ' . esc_html__( 'Turnstile and reCAPTCHA load from Cloudflare or Google, read information from your visitors\' browsers and can set cookies. HolmesPortfolio Forms sets none of its own.', 'holmesportfolio-forms' ) . '
';
$this->close_form( $this->previous_step( 'spam' ) );
}
/** The Starter forms step. Every group is optional. */
private function step_forms() {
require_once HOLMESFORMS_DIR . 'includes/class-hp-forms-plugin.php';
$this->open_form( 'forms' );
echo '
' . esc_html__( 'Ready-made forms, grouped by what they are for. Councils have their own set. Each form says who it suits. Tick the forms you want, or tick a group heading to pick every form in it. You can leave them all unticked. Their emails go to your site admin address until you change it on the form. Open a form afterwards to see how it goes together, copy the parts you want, or clear it out.', 'holmesportfolio-forms' ) . '
';
echo '
' . esc_html__( 'Each form is an example, written in good faith. It is not legal advice. Check it and set your own before you publish.', 'holmesportfolio-forms' ) . '
' . esc_html__( 'Your choices are saved. You can change any of them in Settings whenever you like. Check them against how your organisation works before you publish a form.', 'holmesportfolio-forms' ) . '