CleanTalk
diff --git a/‎.gitignore‎
Lines changed: 1 addition & 0 deletions b/‎.gitignore‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎changelog.txt‎
Lines changed: 166 additions & 0 deletions b/‎changelog.txt‎
Lines changed: 166 additions & 0 deletions
diff --git a/‎cleantalk.php‎
Lines changed: 13 additions & 2 deletions b/‎cleantalk.php‎
Lines changed: 13 additions & 2 deletions
diff --git a/‎css/cleantalk-trp.min.css‎
Lines changed: 1 addition & 1 deletion b/‎css/cleantalk-trp.min.css‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎css/src/cleantalk-trp.css‎
Lines changed: 5 additions & 0 deletions b/‎css/src/cleantalk-trp.css‎
Lines changed: 5 additions & 0 deletions
diff --git a/‎inc/cleantalk-admin.php‎
Lines changed: 8 additions & 4 deletions b/‎inc/cleantalk-admin.php‎
Lines changed: 8 additions & 4 deletions
diff --git a/‎inc/cleantalk-find-spam.php‎
Lines changed: 3 additions & 1 deletion b/‎inc/cleantalk-find-spam.php‎
Lines changed: 3 additions & 1 deletion
diff --git a/‎inc/cleantalk-integrations-by-hook.php‎
Lines changed: 5 additions & 0 deletions b/‎inc/cleantalk-integrations-by-hook.php‎
Lines changed: 5 additions & 0 deletions
@@ -13,3 +13,4 @@ checkstyle.xml
 /lib/Cleantalk/Common/ContactsEncoder/tests/
 /coverage.xml
 /tests/.phpunit.result.cache
+.phpunit.result.cache
@@ -1,5 +1,171 @@
 == Changelog ==
 
+= 6.70.1 19.12.2025 =
+* Fix. Integration. Fluent forms integration fixed (fix for commit ae74511a96417b607f2b79b83ef984de7eac0588).
+
+= 6.70 18.12.2025 =
+New. Integrations. Protect Bitrix24 external forms.
+New. SFW. Update. Constant APBCT_SERVICE__SFW_UPDATE_CURL_MULTI_BATCH_SIZE. Used to reduce curl multi batch size.
+Upd. Integrations. Added precheck email for Gravity Forms.
+Upd. Contact Data Encoder. Encoder lib updated to support new formats.
+Upd. Contact Data Encoder. Added new format to encode phone numbers.
+Upd. Setting. Do not drop settings state on disabling. Uses a special list.
+Mod. FluentForm. Added the ability to connect js scripts for logged in users.
+Fix. FluentForm. The verification depends on the data__protect_logged_in and is_user_logged_in() options.
+Fix. Contact Data Encoder. Fixed shortcode flow on multiple use.
+Fix. Contact Data Encoder. PHP 8.4 notices fixed.
+Fix. The Real Person. Adding a check that excludes duplication of TRP.
+
+= 6.69.2  09.12.2025 =
+Fix. Contact Data Encoder. Fixed deprecation notice.
+Fix. Contact Data Encoder. Frontend. Fixed connection errors handling.
+
+= 6.69.1  08.12.2025 =
+Fix. Integrations. Update Woo add to cart check.
+
+= 6.69 04.12.2025 =
+New. WPRecipeMaker. Integration with WP Recipe Maker
+Upd. Code. ContactsEncoder module refactoring.
+Upd. ContactEncoder. Improve UX.
+Upd. TRP. Restart show badge on woo review page.
+Upd. WCAddToCart. Processing and adding event_token to the request
+Upd. Integrations. JS. Dynamic rendered form interval clearance on window load custom events.
+Upd. EmailEncoder. Added new format to encode phone numbers.
+Mod. CheckEmailExist. Integration of Check Email Exist with Ninja Forms
+Mod. WPRecipeMaker. Editing the blocking message
+Fix. Bot detector. Set event_token for the different cookies types fixed.
+Fix. Integration. Ninja Forms refactored - no using force_alt_cookies.
+Fix. Integration. Fluentbook. Added public scripts echoing on author landing visit.
+Fix. Integrations. JS. Run dynamic forms catching on interval.
+Fix. Woocommerce. Exclusion for WC Stripe Apple Pay frontend request.
+Fix. Integration. Brick theme ajax response fixed.
+Fix. Integration. FunnelKit. Funnel builder action added.
+Fix. WPMS. Getting and recreating personal tables on WPMS.
+Fix. OptiPress. Editing the integration in passing the message parameter
+Fix. WPRecipeMaker. Combining logic under one condition
+Fix. Helper. Correcting the error of using 'static' in string callables inside array_map since version 8.2
+Fix. FluentForm. The verification depends on the data__protect_logged_in and is_user_logged_in() options
+Github. New action to create assets from dev/fix on push event.
+
+= 6.68 13.11.2025 =
+New. Integration. Ultimate affiliate plugin (Codecanyon).
+New. Integration. Gwolle Guestbook integration implemented.
+Upd. Integrations. Improved capability with perfmatters.
+Upd. Settings. Improved UX.
+Upd. Email Encoder. Try to decode in both ways ssl/str_base.
+Fix. ContactEncoder. Editing duplicate pages due to buffer interception.
+Fix. Code. Unit text TestRequirementsChecker refactored.
+Fix. Integration. WPForo. Catch email and nickname via native WPF object. Get message from input.
+Fix. Integrations. Nex-forms POST clearance from service fields after check.
+Fix. Protection by fake button. Sender.net forms ignored, preparing for the next iteration.
+Fix. Integrations. GiveWP. Partially protected Give REST submission.
+Code. Unused code removed.
+Mod. TRP. TRP edits, duplicate the cleantalk_allowed_moderation option and move it to settings.
+
+= 6.67 30.10.2025 =
+New. AdminBanner. Separation of banners about an empty and invalid key
+New. AdminBanner. Editing logic for a banner about an incorrect key
+Fix. ContactEncoder. Revert svg content.
+Fix. Integrations. Prevent spam requests to third-party services.
+Fix. Integrations. Added Beaver Builder.
+Fix. Integrations. Improved gathering data for fluentbooking pro.
+Fix. OptimizePress. Registration process protected.
+Fix. Integration. WP Booking System integration fixed.
+New. Integration. Doctor Plus theme registration and login.
+Fix. Integration. WPForms. Fixed missed request on non-emtpty WPForm form errors array.
+Fix. Hide website field. Forced condition to replace via honeypot.
+Upd. Server Requirements Checker. Added curl_multi_exec to the check-list.
+New. Email exists check. Implemented for CF7. (#669)
+Upd. Settings. Updated access key link parameters for improved registration process.
+Fix. Settings. Typo (system requirements) fixed.
+Fix. Settings. Complete deactivation fixed.
+Fix. State. Default `fw_stats` fixed.
+Fix. SFW. SFW updating (process exclusions) fixed.
+Fix. Exclusion. Newsletter Automation. Skip test newsletter check.
+Fix. Integration. btQuoteBooking form params gathering fixed.
+Fix. Integration. WP Mailer Lite. Fixed exclusion.
+
+
+= 6.66 16.10.2025 =
+Fix. Remote calls. Debug RC now hide sensitive data.
+Fix. TRP. Show TRP for admins and editors.
+Fix. TRP. Twenty Twenty-Five theme support added.
+Fix. Settings. Activator fixed.
+New. Summary and statistics. Support user action moved.
+Fix. Integrations. Skip service requests for checkout process.
+Fix. FW. Improved rules to update personal tables.
+Fix. Integrations. Updated statement to skip woo-mailerlite service requests.
+Fix. Integrations. Fixed statement for cwginstock.
+Fix. Integrations. Improved statement to intruding to checkout request.
+
+= 6.65 02.10.2025 =
+Fix. Code. Pluggable exclusions logic fixed.
+Fix. Common. Alt cookies getting fixed.
+Fix. ContactEncoder. Skip SVG content.
+Fix. Integration. Added WPCommunity login to request exclusions.
+Fix. Integration. Fluent Booking Pro integration fixed - exclude requests from general contact forms checking.
+Fix. Integration. Skip BuddyBoss login form.
+Fix. Integration. WooCommerce mark spam orders fixed.
+Fix. Integration. WP Booking System integration fixed - support pro version.
+Fix. Integrations. Added rules to skip woocommerce service request.
+New. CheckEmailExist. Support for Registration Form.
+New. CheckEmailExist. Support for Woocommerce checkout form.
+New. Integration. Added NEXForms integration.
+New. Integration. Indeed Coming Soon integration implemented.
+New. Summary and statistics. Temporary support user creation implemented.
+Upd. CheckEmailExist. Improve support for Woocommerce checkout form and update option description.
+Upd. Search form. Added CleanTalk unique sign for native form.
+Upd. UsersChecker. Include first name, last name, and nickname in csv report of user data output.
+
+= 6.64 18.09.2025 =
+New. Integration. Integration with WPFunnels.
+New. CheckEmailExist. Support for Registration Form.
+New. Integration. LifterLMS (registration) protection implemented.
+New. CheckEmailExist. Support for Fluent Forms.
+Upd. Request parameters. Calculate no submittime if bot detector enabled.
+Upd. Bot detector gathering. Changed URL of wrapper to fd.cleantalk.org
+Mod. Integration. Unset visible fields.
+Fix. Integration. Happy Forms protection fixed.
+Fix. Integration. HabSpot external form (transparent div) protection fixed.
+Fix. Integration. Back-In-Stock ajax catching detect fixed.
+Fix. Integration. Back-in-stock-notifier fixed event token transport.
+Fix. External forms. Protection by cover fixed.
+Fix. Code. Undefined object botDetectorLocalStorage using removed.
+
+= 6.63 04.09.2025 =
+New. Integrations. BuddyPress App REST API protection.
+New. Integration. WooCommerce Wholesale Lead Capture registration protection implemented.
+Fix. Integration. SiteReviews integration fixed.
+Fix. Integration. Connecting the required js bundle and bot detector for Fluent Booking.
+Fix. JS. Passing the original context to an anonymous function
+Fix. Integration. FluentBooking integration fixed.
+Fix. Code. JS function getCleanTalkStorageDataArray moved to common file.
+Fix. Anti-Spam. Integrations by class logic fixed.
+Fix. Registration. Checking WP_Error during registration protection.
+
+= 6.62 21.08.2025 =
+* Mod. Firewall. Disabling SFW, AntiCrawler, and AntiFlood if the key is invalid or empty
+* Fix. Woocommerce. Add to cart validation on AJAX fixed.
+* Mod. Settings. Renaming email verification options before submitting the form
+* Fix. EmailCheckExist. Edit for WL mode
+* Ref. Frontend. Optimize flow to prevent forсed reflow.
+
+= 6.61 07.08.2025 =
+* New. Integration. Asgaros Forum topics and replies protected.
+* Upd. EmailEncoder. Add mode handler for shortcode.
+* Upd. Settings. Restore notice about get key auto.
+* Upd. Footer links. Footer links block Recommended plugins updated.
+* Upd. ServerRequirementsChecker. Check updated, unit test provided, docs added.
+* Ref. JS. Refactoring to optimize bundle size.
+* Mod. Code. Removing the option - Manage comments on public pages.
+* Del. Script. Remove cleantalk-public-admin.js.
+* Fix. Integrations. Do not skip check for woo registration during checkout.
+* Fix. Integrations. Fixed uni cpo gathering meta data about woocommerce item.
+* Fix. Woocommerce. Deleting REST API order if on pending status.
+* Fix. Woocommerce. Event token gathering fixed on any cookies mode.
+* Fix. Searchform. JS error on form class gathering fixed.
+* Fix. Settings. Search forms. Forgotten space added.
+
 = 6.60 17.07.2025 =
 * New. BlockServerRequirements. Added a block with the Server Requirements output
 * Mod. BlockServerRequirements. Changed in layout, title, link to the article
 
@@ -4,7 +4,7 @@
   Plugin Name: Anti-Spam by CleanTalk
   Plugin URI: https://cleantalk.org
   Description: Max power, all-in-one, no Captcha, premium anti-spam plugin. No comment spam, no registration spam, no contact spam, protects any WordPress forms.
-  Version: 6.80
+  Version: 6.81
   Author: CleanTalk - Anti-Spam Protection <welcome@cleantalk.org>
   Author URI: https://cleantalk.org
   Text Domain: cleantalk-spam-protect
@@ -42,6 +42,8 @@
 use Cleantalk\ApbctWP\Variables\Post;
 use Cleantalk\ApbctWP\Variables\Request;
 use Cleantalk\ApbctWP\Variables\Server;
+use Cleantalk\ApbctWP\PingbackTrackback\PingbackHandler;
+use Cleantalk\ApbctWP\PingbackTrackback\TrackBackHandler;
 use Cleantalk\Common\ContactsEncoder\Dto\Params;
 use Cleantalk\Common\DNS;
 use Cleantalk\Common\Firewall;
@@ -229,7 +231,9 @@ function apbct_wp_login_actions($_user_login, $wp_user)
     if ($apbct->settings['data__email_decoder'] && !$skip_email_encode && !apbct_is_amp_request()) {
         // Encode content
         $contacts_encoder->runEncoding();
+    }
 
+    if ( apbct_is_ajax() ) {
         // Email Encoder ajax handlers for decoding
         $contacts_encoder->registerAjaxRoute();
     }
@@ -274,6 +278,11 @@ function apbct_register_my_rest_routes()
 add_action('init', function () {
     global $apbct;
 
+    if ($apbct->settings['wp__disable_pingback_and_trackback']) {
+        new PingbackHandler();
+        new TrackBackHandler();
+    }
+
     // Self cron
     $ct_cron = Cron::getInstance();
     $tasks_to_run = $ct_cron->checkTasks(); // Check for current tasks. Drop tasks inner counters.
@@ -901,7 +910,7 @@ function apbct_sfw__check()
             );
             Cookie::set(
                 'ct_sfw_pass_key',
-                md5(Server::get('REMOTE_ADDR') . $apbct->api_key),
+                md5(Server::get('REMOTE_ADDR') . $apbct->api_key . $apbct->data['salt']),
                 time() + 1200,
                 '/',
                 ''
@@ -2135,6 +2144,7 @@ function apbct_rc__install_plugin($_wp = null, $plugin = null)
                         die('FAIL ' . json_encode(array('error' => $installer->apbct_result)));
                     }
                 } else {
+                    /** @psalm-suppress PossiblyInvalidMethodCall */
                     die(
                         'FAIL ' . json_encode(array(
                             'error'   => 'FAIL_TO_GET_LATEST_VERSION',
@@ -2174,6 +2184,7 @@ function apbct_rc__activate_plugin($plugin)
             $result_array = array('success' => true);
 
             if ( is_wp_error($result) ) {
+                /** @psalm-suppress PossiblyInvalidMethodCall */
                 $error_msg = ' ' . $result->get_error_message();
                 $result_array = array(
                     'error'   => 'FAIL_TO_ACTIVATE',
 
@@ -55,6 +55,11 @@
     flex-direction: column;
     gap: 1px;
 }
+@media (min-width: 768px) {
+    .apbct-real-user-popup-content_row {
+        white-space: nowrap;
+    }
+}
 
 .apbct-real-user-popup-content_row * {
     color: grey;
 
@@ -539,6 +539,10 @@ function apbct_admin__enqueue_scripts($hook)
         'notice_when_deleting_user_text' => esc_html__('Warning! Users are deleted without the possibility of restoring them, you can only restore them from a site backup.', 'cleantalk-spam-protect'),
         'apbctNoticeDismissSuccess'       => esc_html__('Thank you for the review! We strive to make our Anti-Spam plugin better every day.', 'cleantalk-spam-protect'),
         'apbctNoticeForceProtectionOn'       => esc_html__('This option affects the reflection of the page by checking the user and adds a cookie "apbct_force_protection_check", which serves as an indicator of successful or unsuccessful verification. If the check is successful, it will no longer run.', 'cleantalk-spam-protect'),
+        'links' => array(
+            'users_editscreen'    => LinkConstructor::buildCleanTalkLink('admin_blacklists_avatar_link', 'blacklists/{TARGET}'),
+            'comments_editscreen' => LinkConstructor::buildCleanTalkLink('admin_blacklists_avatar_link', 'blacklists/{TARGET}'),
+        ),
     );
     $data = array_merge($data, ContactsEncoder::getLocalizationText());
     wp_localize_script('cleantalk-admin-js', 'ctAdminCommon', $data);
@@ -616,7 +620,7 @@ function apbct_admin__enqueue_scripts($hook)
             'ctTrpAdminLocalize',
             \Cleantalk\ApbctWP\CleantalkRealPerson::getLocalizingData()
         );
-        ApbctEnqueue::getInstance()->js('cleantalk-comments-editscreen.js');
+        ApbctEnqueue::getInstance()->js('cleantalk-comments-editscreen.js', array('cleantalk-admin-js'));
         $link = LinkConstructor::buildCleanTalkLink(
             'public_comments_page_go_to_cp',
             'my',
@@ -634,7 +638,7 @@ function apbct_admin__enqueue_scripts($hook)
                 __("Feedback has been sent to %sCleanTalk Dashboard%s.", 'cleantalk-spam-protect'),
                 $apbct->user_token ? "<a target='_blank' href='$link'>" : '',
                 $apbct->user_token ? "</a>" : ''
-            ) . ' ' . esc_html__('The service accepts feedback only for requests made no more than 7 or 45 days 
+            ) . ' ' . esc_html__('The service accepts feedback only for requests made no more than 7 or 45 days
             (if the Extra package is activated) ago.', 'cleantalk-spam-protect'),
             'ct_show_check_links'         => (bool)$apbct->settings['comments__show_check_links'],
             'ct_img_src_new_tab'          => plugin_dir_url(__FILE__) . "images/new_window.gif",
@@ -644,11 +648,11 @@ function apbct_admin__enqueue_scripts($hook)
     // USERS page JavaScript
     if ( $hook == 'users.php' ) {
         ApbctEnqueue::getInstance()->css('cleantalk-icons.css');
-        ApbctEnqueue::getInstance()->js('cleantalk-users-editscreen.js');
+        ApbctEnqueue::getInstance()->js('cleantalk-users-editscreen.js', array('cleantalk-admin-js'));
         wp_localize_script('cleantalk-users-editscreen-js', 'ctUsersScreen', array(
             'spambutton_text'     => __("Find spam-users", 'cleantalk-spam-protect'),
             'ct_show_check_links' => (bool)$apbct->settings['comments__show_check_links'],
-            'ct_img_src_new_tab'  => plugin_dir_url(__FILE__) . "images/new_window.gif"
+            'ct_img_src_new_tab'  => plugin_dir_url(__FILE__) . "images/new_window.gif",
         ));
     }
 }
 
@@ -94,7 +94,9 @@ function ct_add_find_spam_pages()
 add_action('wp_ajax_ajax_spam_all', [\Cleantalk\ApbctWP\FindSpam\CommentsChecker::class, 'ctAjaxSpamAll']);
 
 // Debug
-add_action('wp_ajax_ajax_insert_users', array('\Cleantalk\ApbctWP\FindSpam\UsersChecker', 'ctAjaxInsertUsers'));
+if ( defined('APBCT_IS_LOCALHOST') && APBCT_IS_LOCALHOST ) {
+    add_action('wp_ajax_ajax_insert_users', array('\Cleantalk\ApbctWP\FindSpam\UsersChecker', 'ctAjaxInsertUsers'));
+}
 
 // Hook for saving "per_page" option
 add_action('wp_loaded', 'ct_save_screen_option');
 
@@ -505,6 +505,11 @@
         'setting' => 'forms__contact_forms_test',
         'ajax'    => true
     ),
+    'Amelia' => array(
+        'hook'    => 'wpamelia_api',
+        'setting' => 'forms__contact_forms_test',
+        'ajax'    => true
+    ),
 );
 
 add_action('plugins_loaded', function () use ($apbct_active_integrations) {