Download Hookturn | ACF Advanced Forms Pro v1.9.3.8

List of improvements in Hookturn | ACF Advanced Forms Pro version 1.9.3.8

• = 1.9.3.8 =
• Security: Fixed a missing authorization check on the form import handler. An unauthenticated request to `admin-post.php` could overwrite an existing form (identified by its publicly visible form key) and inject stored cross-site scripting via the form description — potentially leading to site takeover. The import handler now requires the `edit_pages` capability and a valid nonce, and rejects malformed uploads. Thanks to Jakub Herman / Patchstack for the responsible disclosure.
• Security: Form titles and descriptions are now sanitised on output (`esc_html()` for the title, `wp_kses_post()` for the description).
• Fixed a PHP warning (“Trying to access array offset on value of type null”) when saving a form.
• = 1.9.3.7 =
• Added copy-to-clipboard button for the shortcode field on the form edit screen.
• *Pro*
• Fixed issue where HTML in integration field labels was escaped by ACF 6.7+.
• = 1.9.3.6 =
• Fixed bug preventing taxonomy terms from loading in field’s conditional logic settings.
• = 1.9.3.5 =
• Added the `af/form/field_groups` filter to allow modification and reordering of field groups.
• *Pro*
• Fixed issue when using *Custom formatfor email field in Mailchimp integration.
• Changed license key and API key fields to password field types.
• = 1.9.3.4 =
• Added the `af/form/submission/value` filter to allow modification of submission values before they are processed.
• = 1.9.3.3 =
• Added capability and nonce checks to prevent unauthorized export of form JSON.
• = 1.9.3.2 =
• Added the `af/field_group/before_field_group` action hook to support custom markup before field groups.
• Added the `af/field_group/after_field_group` action hook to support custom markup after field groups.
• = 1.9.3 =
• Added the `af_render_content` private field type for internal use in form settings UI.
• Added a hotfix for ACF validation bug when using multiple forms on the one page.
• Added the `af/settings/enqueue_validation_hotfix` filter for disabling the validation hotfix.
• Fix deprecation notices related to admin page registration that occur in PHP 8.1.
• Fix deprecation notices related to dynamic property usage in PHP 8.2.
• *Pro*
• Changed user/post editing order to edit user before post. This allows the use of the user ID during post creation/editing.
• Improved calculated fields to use a single AJAX request for an entire form. This improves performance and reduces the number of requests.
• Added support for aggregate calculated fields. It is now possible to use the result of a calculated field in another calculated field.
• Changed calculated field rendering so that field name and description are no longer hidden in the field group settings.
• Changed internal field type for calculated field admin to have `af_` prefix. Renamed class to `AF_Calculated_Admin_Field`.
• Added ability to control the order in which calculated fields are computed. This facilitates using aggregate calculated fields anywhere in a form.
• Added admin notice to calculated field when a filter is in use for the field name or key. e.g; `af/field/calculate_value/name={field_name}` or `af/field/calculate_value/key={field_key}`.
• Added admin notice to calculated field settings tab indicating when the generic `af/field/calculate_value` filter in in use.
• = 1.9.2 =
• Added condition to stop ACF file nonces being treated as fields on submission.
• Added condition to prevent email sending if recipient is false. `af/form/email/recipient` filter can now be used to prevent email sending.
• Added support for file fields with return type “URL” in merge tags.
• Fixed issue which could cause duplicate submissions.
• Added filter `af/form/entry/should_create` to enable dynamically stopping entries from being created.
• Added hidden label for honeypot field for accessibility compliance.
• Added `af/field/before_field_wrapper` action.
• Added `af/field/after_field_wrapper` action.
• Fixed issue where filter mode wouldn’t work.
• = 1.9.1 =
• *Pro*
• Added filter `af/form/editing/query_param` to change the query parameter used for post editing. The default is `post`.