"POST", "callback" => "cwpai_submit_form", "permission_callback" => "__return_true", ]);
}
function cwpai_submit_form(WP_REST_Request $request) {
// Nonce verification
$nonce = $request->get_header("X-WP-Nonce");
if (!wp_verify_nonce($nonce, "wp_rest")) {
return new WP_Error("rest_forbidden", esc_html__("You do not have permissions to access this service.", "codewp"), ["status" => rest_authorization_required_code() ]);
}
// Sanitize input
$name = sanitize_text_field($request["name"]);
$contact_type = sanitize_text_field($request["contact_type"]);
$contact_info = sanitize_text_field($request["contact_info"]);
$message = sanitize_textarea_field($request["message"]);
$recaptcha_response = sanitize_text_field($request->get_param("recaptcha"));
// Recaptcha validation
$recaptcha_verify = wp_remote_post("https://www.google.com/recaptcha/api/siteverify", ["body" => ["secret" => RECAPTCHA_SECRET_KEY, "response" => $recaptcha_response, ], ]);
$recaptcha_data = wp_remote_retrieve_body($recaptcha_verify);
if (is_wp_error($recaptcha_data) || empty($recaptcha_data)) {
return new WP_Error("recaptcha_error", __("There was a problem verifying the Recaptcha, please try again.", "codewp"), ["status" => 400]);
}
$recaptcha_data = json_decode($recaptcha_data);
if (!$recaptcha_data->success) {
return new WP_Error("recaptcha_failed", __("Recaptcha verification failed, please try again.", "codewp"), ["status" => 401]);
}
// Send email
$to = get_option("admin_email");
$subject = "New Contact Form Submission";
$body = "Name: {$name}\nContact Type: {$contact_type}\nContact Info: {$contact_info}\nMessage: {$message}";
wp_mail($to, $subject, $body);
return new WP_REST_Response(["status" => "success", "message" => __("Your message has been successfully sent.", "codewp"), ], 200);
}
add_shortcode("cwpai_contact_form", "cwpai_contact_form_shortcode");
function cwpai_contact_form_shortcode() {
wp_enqueue_script("jquery");
wp_enqueue_script("google-recaptcha", "https://www.google.com/recaptcha/api.js");
// Localize script with nonce for REST API
wp_localize_script("jquery", "cwpai_settings", ["root" => esc_url_raw(rest_url()), "nonce" => wp_create_nonce("wp_rest"), ]);
ob_start();
?>