' . wp_kses_post( sprintf(
/* translators: %s: link to the PubMail settings */
__( 'PubMail is active but not set up yet. Connect it to your mail service and form emails will go through it.', 'pubforms' ),
esc_url( $url )
) ) . '
';
}
return;
}
echo '
' . esc_html__( 'Form emails use your site\'s normal WordPress mail. If notifications do not arrive, connect a mail plugin (such as PubMail or any SMTP plugin); PubForms will send through it automatically.', 'pubforms' ) . '
';
}
/**
* A write-only field for a secret. The saved value is never sent to the browser: the box is a password
* input that starts empty, leaving it empty keeps the saved secret, and a checkbox removes it.
*/
function pubforms_render_secret_field( $key, $saved, $label ) {
$name = 'pubforms_settings[' . $key . ']';
?>
__( 'The secret key is wrong. Re-enter it and save.', 'pubforms' ),
'missing-input-secret' => __( 'No secret key is saved.', 'pubforms' ),
'invalid-or-already-seen-response' => __( 'That token was already used. Run the test again.', 'pubforms' ),
'timeout-or-duplicate' => __( 'That token expired or was already used. Run the test again.', 'pubforms' ),
'invalid-input-response' => __( 'The provider rejected the token. Check that the site key and secret key belong to the same widget.', 'pubforms' ),
'missing-input-response' => __( 'No token was received from the widget.', 'pubforms' ),
'sitekey-secret-mismatch' => __( 'The site key and secret key do not belong together.', 'pubforms' ),
'not-using-dummy-passcode' => __( 'The keys are test keys that do not match.', 'pubforms' ),
);
$out = array();
foreach ( (array) $codes as $code ) {
$out[] = $known[ $code ] ?? $code;
}
return implode( ' ', $out );
}
add_action( 'wp_ajax_pubforms_test_captcha', function () {
check_ajax_referer( 'pubforms_test_captcha', 'nonce' );
if ( ! current_user_can( 'manage_options' ) ) {
wp_send_json_error( array( 'message' => __( 'You do not have permission to do that.', 'pubforms' ) ), 403 );
}
$provider = sanitize_key( wp_unslash( $_POST['provider'] ?? '' ) );
$token = sanitize_text_field( wp_unslash( $_POST['token'] ?? '' ) );
if ( ! in_array( $provider, array( 'turnstile', 'hcaptcha' ), true ) || '' === $token ) {
wp_send_json_error( array( 'message' => __( 'Nothing to check.', 'pubforms' ) ) );
}
$check = pubforms_siteverify( $provider, $token );
if ( $check['unreachable'] ) {
/* translators: %s: error from the HTTP request */
wp_send_json_error( array( 'message' => sprintf( __( 'Could not reach the provider to verify the token: %s', 'pubforms' ), implode( ' ', $check['errors'] ) ) ) );
}
if ( ! $check['success'] ) {
$reason = pubforms_captcha_error_text( $check['errors'] );
wp_send_json_error( array( 'message' => '' !== $reason ? $reason : __( 'The provider rejected the token.', 'pubforms' ) ) );
}
$host = (string) wp_parse_url( home_url(), PHP_URL_HOST );
$message = __( 'Working. The widget loaded on this domain and your secret key verified it.', 'pubforms' );
if ( '' !== $check['hostname'] && '' !== $host && strtolower( $check['hostname'] ) !== strtolower( $host ) ) {
/* translators: 1: hostname the provider reports, 2: this site's hostname */
$message .= ' ' . sprintf( __( 'Note: the provider reports the hostname "%1$s", while this site is "%2$s".', 'pubforms' ), $check['hostname'], $host );
}
wp_send_json_success( array( 'message' => $message ) );
} );
add_action( 'admin_enqueue_scripts', function ( $hook ) {
if ( 'pubforms_form_page_pubforms-settings' !== $hook ) {
return;
}
wp_enqueue_script( 'pubforms-settings', PUBFORMS_URL . 'assets/admin-settings.js', array(), pubforms_asset_version( 'admin-settings.js' ), true );
wp_localize_script( 'pubforms-settings', 'pubformsTest', array(
'ajaxUrl' => admin_url( 'admin-ajax.php' ),
'nonce' => wp_create_nonce( 'pubforms_test_captcha' ),
'keys' => array(
'turnstile' => pubforms_spam_keys( 'turnstile' )['site'],
'hcaptcha' => pubforms_spam_keys( 'hcaptcha' )['site'],
),
'i18n' => array(
'loading' => __( 'Loading the widget…', 'pubforms' ),
'solve' => __( 'Complete the check above to finish the test.', 'pubforms' ),
'verify' => __( 'Verifying with the provider…', 'pubforms' ),
'failed' => __( 'The widget could not run on this domain. Check that this domain is allowed for the site key in your provider dashboard.', 'pubforms' ),
'network' => __( 'The request failed. Check your connection and try again.', 'pubforms' ),
),
) );
} );
function pubforms_suggested_privacy_text() {
$text = __( 'Forms built with PubForms store what visitors type in your WordPress database so you can read it in your dashboard. No visitor IP address or browser details are collected. You can export or delete a person\'s submissions using the built-in privacy tools under Settings → Privacy → Personal Data. If enabled, entries are also deleted automatically after a set number of days. Files that visitors upload and signatures they draw are stored in a private folder and are only available to signed-in users who can edit the form. If a form is set to save unfinished answers, what a visitor has typed may be saved when they leave the page without submitting, and the form says so.', 'pubforms' );
$method = pubforms_site_spam_method();
if ( 'turnstile' === $method || 'hcaptcha' === $method ) {
/* translators: %s: provider name, Cloudflare Turnstile or hCaptcha */
$text .= ' ' . sprintf( __( 'Forms on this site use %s to block spam. When a visitor opens such a form, their browser connects to that provider to complete a check, which is subject to the provider\'s own privacy policy.', 'pubforms' ), pubforms_spam_methods()[ $method ] );
}
return $text;
}
// Offer the same wording in the WordPress privacy-policy guide (Settings → Privacy).
add_action( 'admin_init', function () {
if ( function_exists( 'wp_add_privacy_policy_content' ) ) {
wp_add_privacy_policy_content( 'PubForms', wp_kses_post( wpautop( pubforms_suggested_privacy_text() ) ) );
}
} );
function pubforms_render_settings_page() {
if ( ! current_user_can( 'manage_options' ) ) {
wp_die( esc_html__( 'You do not have permission to access this page.', 'pubforms' ) );
}
$s = pubforms_get_settings();
?>