From 8301b2a6e8f0e142386721328a785b5431c25945 Mon Sep 17 00:00:00 2001
From: Truong Giang <truongwp@gmail.com>
Date: Wed, 14 May 2025 01:13:45 +0700
Subject: [PATCH 1/5] Add setting for denylist spam check

---
 classes/models/FrmSettings.php                 | 3 +++
 classes/models/FrmSpamCheckDenylist.php        | 7 +++++--
 classes/models/FrmUsage.php                    | 1 +
 classes/views/frm-settings/captcha/captcha.php | 7 +++++++
 4 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/classes/models/FrmSettings.php b/classes/models/FrmSettings.php
index 5d73acaebc..a347f63f3b 100644
--- a/classes/models/FrmSettings.php
+++ b/classes/models/FrmSettings.php
@@ -95,6 +95,8 @@ class FrmSettings {
 
 	public $wp_spam_check;
 
+	public $denylist_check;
+
 	public $disallowed_words;
 
 	public $allowed_words;
@@ -173,6 +175,7 @@ public function default_options() {
 			'custom_css'                => false,
 			'honeypot'                  => 1,
 			'wp_spam_check'             => 0,
+			'denylist_check'            => 0,
 			'disallowed_words'          => '',
 			'allowed_words'             => '',
 		);
diff --git a/classes/models/FrmSpamCheckDenylist.php b/classes/models/FrmSpamCheckDenylist.php
index 938095649d..e2056cc0b0 100644
--- a/classes/models/FrmSpamCheckDenylist.php
+++ b/classes/models/FrmSpamCheckDenylist.php
@@ -53,15 +53,18 @@ protected function maybe_add_form_id_to_values( &$values ) {
 	}
 
 	protected function is_enabled() {
+		$frm_settings = FrmAppHelper::get_settings();
+		$is_enabled   = $frm_settings->denylist_check;
+
 		/**
-		 * Allows to disable the denylist check.
+		 * Allows disabling the denylist check.
 		 *
 		 * @since 6.21
 		 *
 		 * @param bool  $is_enabled Whether the denylist check is enabled.
 		 * @param array $values     The entry values.
 		 */
-		return apply_filters( 'frm_check_denylist', true, $this->values );
+		return apply_filters( 'frm_check_denylist', $is_enabled, $this->values );
 	}
 
 	/**
diff --git a/classes/models/FrmUsage.php b/classes/models/FrmUsage.php
index 755e812e09..3e6b1d73ef 100644
--- a/classes/models/FrmUsage.php
+++ b/classes/models/FrmUsage.php
@@ -222,6 +222,7 @@ private function settings() {
 			'active_captcha',
 			'honeypot',
 			'wp_spam_check',
+			'denylist_check',
 		);
 
 		foreach ( $pass_settings as $setting ) {
diff --git a/classes/views/frm-settings/captcha/captcha.php b/classes/views/frm-settings/captcha/captcha.php
index e4ffb63873..96d623cf4b 100644
--- a/classes/views/frm-settings/captcha/captcha.php
+++ b/classes/views/frm-settings/captcha/captcha.php
@@ -119,6 +119,13 @@
 	</label>
 </p>
 
+<p>
+	<label>
+		<input type="checkbox" name="frm_denylist_check" value="1" <?php checked( $frm_settings->denylist_check, 1 ); ?> />
+		<?php esc_html_e( 'Check denylist data to validate for spam', 'formidable' ); ?>
+	</label>
+</p>
+
 <p>
 	<label for="frm-disallowed-words">
 		<?php esc_html_e( 'Custom disallowed words', 'formidable' ); ?>

From fed035afaa3449df4f4df63d23e474c9bdb9116b Mon Sep 17 00:00:00 2001
From: Truong Giang <truongwp@gmail.com>
Date: Wed, 14 May 2025 01:22:08 +0700
Subject: [PATCH 2/5] Skip denylist check for some field types

---
 classes/models/FrmSpamCheckDenylist.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/classes/models/FrmSpamCheckDenylist.php b/classes/models/FrmSpamCheckDenylist.php
index e2056cc0b0..15596ee0bb 100644
--- a/classes/models/FrmSpamCheckDenylist.php
+++ b/classes/models/FrmSpamCheckDenylist.php
@@ -205,6 +205,9 @@ protected function fill_default_denylist_data( &$denylist ) {
 				'skip'             => false,
 			)
 		);
+
+		// Some field types should never be checked.
+		$denylist['skip_field_types'] = array_merge( $denylist['skip_field_types'], array( 'password', 'captcha', 'signature' ) );
 	}
 
 	/**

From efcbd668cebadc04f3f355d4f70e2bcc9e986b4b Mon Sep 17 00:00:00 2001
From: Truong Giang <truongwp@gmail.com>
Date: Wed, 14 May 2025 01:28:34 +0700
Subject: [PATCH 3/5] Do not check spam on importing

---
 classes/models/FrmEntryValidate.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/classes/models/FrmEntryValidate.php b/classes/models/FrmEntryValidate.php
index f8cb602276..0a8271bf55 100644
--- a/classes/models/FrmEntryValidate.php
+++ b/classes/models/FrmEntryValidate.php
@@ -422,6 +422,11 @@ private static function create_regular_expression_from_format( $pattern ) {
 	 * @param array $errors By reference.
 	 */
 	public static function spam_check( $exclude, $values, &$errors ) {
+		if ( defined( 'WP_IMPORTING' ) && WP_IMPORTING ) {
+			// Do not check spam on importing.
+			return;
+		}
+
 		if ( ! empty( $exclude ) || empty( $values['item_meta'] ) || ! empty( $errors ) ) {
 			// only check spam if there are no other errors
 			return;

From 025da6a918aa2d71c0db4e5189488093b2aac1c3 Mon Sep 17 00:00:00 2001
From: Truong Giang <truongwp@gmail.com>
Date: Wed, 14 May 2025 01:48:31 +0700
Subject: [PATCH 4/5] Skip denylist spam check for field options

---
 classes/models/FrmSpamCheckDenylist.php | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/classes/models/FrmSpamCheckDenylist.php b/classes/models/FrmSpamCheckDenylist.php
index 15596ee0bb..f18d7ea520 100644
--- a/classes/models/FrmSpamCheckDenylist.php
+++ b/classes/models/FrmSpamCheckDenylist.php
@@ -197,6 +197,7 @@ protected function fill_default_denylist_data( &$denylist ) {
 				'words'            => array(),
 				'is_regex'         => false,
 				'field_types'      => array(),
+				// Add `other` if you want to skip checking Other values of some field types.
 				'skip_field_types' => array(),
 				// Is ignore if `is_regex` is `true`.
 				'compare'          => self::COMPARE_CONTAINS,
@@ -207,7 +208,10 @@ protected function fill_default_denylist_data( &$denylist ) {
 		);
 
 		// Some field types should never be checked.
-		$denylist['skip_field_types'] = array_merge( $denylist['skip_field_types'], array( 'password', 'captcha', 'signature' ) );
+		$denylist['skip_field_types'] = array_merge(
+			$denylist['skip_field_types'],
+			array( 'password', 'captcha', 'signature', 'checkbox', 'radio', 'select' )
+		);
 	}
 
 	/**
@@ -344,6 +348,13 @@ protected function get_values_to_check( $denylist ) {
 						$this->add_to_values_to_check( $values_to_check, $sub_value );
 					}
 				}
+			} elseif ( 'other' === $key ) {
+				if ( ! in_array( 'other', $denylist['skip_field_types'], true ) ) {
+					// This is Other values, loop through this and add sub values.
+					foreach ( $value as $sub_value ) {
+						$this->add_to_values_to_check( $values_to_check, $sub_value );
+					}
+				}
 			} elseif ( $this->should_check_this_field( $key, $field_ids_to_check ) ) {
 				$this->add_to_values_to_check( $values_to_check, $value );
 			}

From 94eeaba2c4a45276441301a2b7757dfce06e1920 Mon Sep 17 00:00:00 2001
From: Truong Giang <truongwp@gmail.com>
Date: Wed, 14 May 2025 01:55:50 +0700
Subject: [PATCH 5/5] Fix phpcs

---
 classes/models/FrmSpamCheckDenylist.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/classes/models/FrmSpamCheckDenylist.php b/classes/models/FrmSpamCheckDenylist.php
index f18d7ea520..35a9a7364e 100644
--- a/classes/models/FrmSpamCheckDenylist.php
+++ b/classes/models/FrmSpamCheckDenylist.php
@@ -358,7 +358,7 @@ protected function get_values_to_check( $denylist ) {
 			} elseif ( $this->should_check_this_field( $key, $field_ids_to_check ) ) {
 				$this->add_to_values_to_check( $values_to_check, $value );
 			}
-		}
+		}//end foreach
 
 		if ( isset( $denylist['extract_value'] ) && is_callable( $denylist['extract_value'] ) ) {
 			$values_to_check = call_user_func( $denylist['extract_value'], $values_to_check, $denylist );