class-form-connector.php

<?php
/**
 * Gravity Flow Form Connector
 *
 *
 * @package     GravityFlow
 * @subpackage  Classes/Extension
 * @copyright   Copyright (c) 2015-2018, Steven Henty S.L.
 * @license     http://opensource.org/licenses/gpl-3.0.php GNU Public License
 * @since       1.0
 */

// Make sure Gravity Forms is active and already loaded.
if ( class_exists( 'GFForms' ) ) {

	class Gravity_Flow_Form_Connector extends Gravity_Flow_Extension {

		private static $_instance = null;

		public $_version = GRAVITY_FLOW_FORM_CONNECTOR_VERSION;

		public $edd_item_name = GRAVITY_FLOW_FORM_CONNECTOR_EDD_ITEM_NAME;

		// The Framework will display an appropriate message on the plugins page if necessary
		protected $_min_gravityforms_version = '1.9.10';

		protected $_slug = 'gravityflowformconnector';

		protected $_path = 'gravityflowformconnector/formconnector.php';

		protected $_full_path = __FILE__;

		// Title of the plugin to be used on the settings page, form settings and plugins page.
		protected $_title = 'Form Connector Extension';

		// Short version of the plugin title to be used on menus and other places where a less verbose string is useful.
		protected $_short_title = 'Form Connector';

		protected $_capabilities = array(
			'gravityflowformconnector_uninstall',
			'gravityflowformconnector_settings',
		);

		protected $_capabilities_app_settings = 'gravityflowformconnector_settings';
		protected $_capabilities_uninstall = 'gravityflowformconnector_uninstall';

		public static $form_submission_validation_error = '';

		/**
		 * Whether the current submission has a workflow hash that has been verified.
		 *
		 * @since 1.7.1
		 *
		 * @var bool
		 */
		protected $current_submission_verified = false;

		public static function get_instance() {
			if ( self::$_instance == null ) {
				self::$_instance = new Gravity_Flow_Form_Connector();
			}

			return self::$_instance;
		}

		private function __clone() {
		} /* do nothing */

		/**
		 * Adds the cron job hook.
		 *
		 * @since 1.3.1-dev
		 */
		public function pre_init() {
			parent::pre_init();
			add_action( 'gravityflow_cron', array( $this, 'cron' ), 11 );
		}

		/**
		 * Perform tasks when the Gravity Flow cron runs.
		 *
		 * @since 1.3.1-dev
		 */
		public function cron() {
			$this->log_debug( __METHOD__ . '() Starting cron.' );

			Gravity_Flow_Step_Delete_Entry::cron_delete_local_entries();

			$this->log_debug( __METHOD__ . '() Finished cron.' );
		}

		public function init() {
			parent::init();
			add_filter( 'gform_pre_render', array( $this, 'filter_gform_pre_render' ) );
			add_filter( 'gform_validation', array( $this, 'filter_gform_validation' ) );
			add_filter( 'gform_save_field_value', array( $this, 'filter_save_field_value' ), 10, 5 );
			// Stripe Checkout hook to `gform_after_submission` and set priority as 50. It will redirect users to
			// an external checkout page so we must run `action_gform_after_submission()` before it. Set to 40.
			add_action( 'gform_after_submission', array( $this, 'action_gform_after_submission' ), 40, 2 );

			add_filter( 'gform_pre_replace_merge_tags', array( $this, 'filter_gform_pre_replace_merge_tags' ), 10, 7 );
			add_filter( 'gform_post_payment_completed', array( $this, 'action_gform_post_payment_completed' ), 10, 3 );

			add_filter( 'gravityflow_can_render_form', array( $this, 'filter_gravityflow_can_render_form' ), 10, 2 );
		}

		/**
		 * Add the extension capabilities to the Gravity Flow group in Members.
		 *
		 * @since 1.2.2-dev
		 *
		 * @param array $caps The capabilities and their human readable labels.
		 *
		 * @return array
		 */
		public function get_members_capabilities( $caps ) {
			$prefix = $this->get_short_title() . ': ';

			$caps['gravityflowformconnector_settings']  = $prefix . __( 'Manage Settings', 'gravityflowformconnector' );
			$caps['gravityflowformconnector_uninstall'] = $prefix . __( 'Uninstall', 'gravityflowformconnector' );

			return $caps;
		}

		public function upgrade( $previous_version ) {
			if ( ! empty( $previous_version ) && version_compare( '1.0-beta-2', $previous_version, '<' ) ) {
				$this->upgrade_steps();
			}
		}

		public function upgrade_steps() {
			$forms = GFAPI::get_forms();
			foreach ( $forms as $form ) {
				$feeds = gravity_flow()->get_feeds( $form['id'] );
				foreach ( $feeds as $feed ) {
					if ( $feed['meta']['step_type'] == 'form_connector' ) {
						if ( $feed['meta']['action'] == 'create' ) {
							$feed['meta']['step_type'] = 'new_entry';
						} else {
							$feed['meta']['step_type'] = 'update_entry';
						}
						gravity_flow()->update_feed_meta( $feed['id'], $feed['meta'] );
					}
				}
			}
		}

		public function filter_gform_pre_render( $form ) {

			$parent_entry_id = absint( rgget( 'workflow_parent_entry_id' ) );

			if ( empty( $parent_entry_id ) ) {
				return $form;
			}

			$parent_entry = GFAPI::get_entry( $parent_entry_id );

			$api = new Gravity_Flow_API( $parent_entry['form_id'] );

			$parent_entry_current_step = $api->get_current_step( $parent_entry );

			if ( empty( $parent_entry_current_step ) ) {
				return $form;
			}

			if ( ! $parent_entry_current_step instanceof Gravity_Flow_Step_Form_Submission ) {
				return $form;
			}

			$form_id        = absint( $form['id'] );
			$target_form_id = absint( $parent_entry_current_step->target_form_id );

			if ( $form_id !== $target_form_id ) {
				return $form;
			}

			$current_user_assignee_key = gravity_flow()->get_current_user_assignee_key();

			if ( ! $current_user_assignee_key || $current_user_assignee_key == 'user_id|0' ) {
				return $form;
			}

			$assignee = new Gravity_Flow_Assignee( $current_user_assignee_key );

			if ( $assignee->get_type() == 'user_id' ) {
				$user_id = $assignee->get_id();
			} else {
				$user_id = 0;
			}
			$form = $this->prepopulate_form( $form, $parent_entry_current_step, $user_id );

			add_filter( 'gform_form_tag_' . $form_id, array( $this, 'filter_gform_form_tag' ), 10, 2 );

			return $form;
		}

		/**
		 * Set up dynamic population to map the default values from the parent entry.
		 *
		 * @param                                   $form
		 * @param Gravity_Flow_Step_Form_Submission $parent_entry_current_step
		 * @param bool                              $user_id
		 *
		 * @return mixed
		 */
		public function prepopulate_form( $form, $parent_entry_current_step, $user_id = false ) {
			$parent_entry  = $parent_entry_current_step->get_entry();
			$parent_form   = GFAPI::get_form( $parent_entry['form_id'] );
			$mapped_fields = $parent_entry_current_step->do_mapping( $parent_form, $parent_entry );

			$mapped_field_ids = array_map( 'intval', array_keys( $mapped_fields ) );

			foreach ( $form['fields'] as &$field ) {

				if ( ! in_array( $field->id, $mapped_field_ids ) ) {
					continue;
				}

				$value = false;

				switch ( $field->get_input_type() ) {

					case 'checkbox':

						$value = rgar( $mapped_fields, $field->id );

						if ( empty( $value ) ) {
							$value = array();
							foreach ( $field->inputs as $input ) {
								$val = rgar( $mapped_fields, (string) $input['id'] );
								if ( is_array( $val ) ) {
									$val = GFCommon::implode_non_blank( ',', $val );
								}
								$value[] = $val;
							}
						}

						if ( is_array( $value ) ) {
							$value = GFCommon::implode_non_blank( ',', $value );
						}

						break;

					case 'list':

						$value = rgar( $mapped_fields, $field->id );
						if ( is_serialized( $value ) ) {
							$value       = unserialize( $value );
							$list_values = array();

							if ( is_array( $value ) ) {
								foreach ( $value as $vals ) {
									if ( ! is_array( $vals ) ) {
										$vals = array( $vals );
									}
									$list_values = array_merge( $list_values, array_values( $vals ) );
								}
								$value = $list_values;
							}
						} else {
							$value = array_map( 'trim', explode( ',', $value ) );
						}

						break;

					case 'date':
						$value = GFCommon::date_display( rgar( $mapped_fields, $field->id ), $field->dateFormat, false );
						break;

					default:

						// handle complex fields
						$inputs = $field->get_entry_inputs();
						if ( is_array( $inputs ) ) {
							foreach ( $inputs as &$input ) {
								$filter_name              = $this->prepopulate_input( $input['id'], rgar( $mapped_fields, (string) $input['id'] ) );
								$field->allowsPrepopulate = true;
								$input['name']            = $filter_name;
							}
							$field->inputs = $inputs;
						} else {

							$value = is_array( rgar( $mapped_fields, $field->id ) ) ? implode( ',', rgar( $mapped_fields, $field->id ) ) : rgar( $mapped_fields, $field->id );

						}
				}

				if ( rgblank( $value ) ) {
					continue;
				}

				$filter_name              = self::prepopulate_input( $field->id, $value );
				$field->allowsPrepopulate = true;
				$field->inputName         = $filter_name;

			}

			return $form;
		}

		/**
		 * Add the filter to populate the default field value.
		 *
		 * @param $input_id
		 * @param $value
		 *
		 * @return string
		 */
		public function prepopulate_input( $input_id, $value ) {

			$filter_name = 'gravityflow_field_' . str_replace( '.', '_', $input_id );
			add_filter( "gform_field_value_{$filter_name}", array( new Gravity_Flow_Form_Connector_Dynamic_Hook( $value, $this ), 'filter_gform_field_value' ) );

			return $filter_name;
		}

		/**
		 * Filters the field value to prepoulate the value.
		 *
		 * @since 1.3.1
		 *
		 * @param $filter_values
		 * @param $prepopulate_value
		 *
		 * @return mixed
		 */
		public function filter_gform_field_value( $filter_values, $prepopulate_value ) {
			return $prepopulate_value;
		}

		/**
		 * Callback for the gform_after_submission action.
		 *
		 * If appropriate, completes the step for the current assignee and processes the workflow.
		 *
		 * @param $entry
		 * @param $form
		 */
		public function action_gform_after_submission( $entry, $form ) {
			$this->log_debug( __METHOD__ . '() starting' );
			if ( ! isset( $_POST['workflow_parent_entry_id'] ) ) {
				return;
			}

			$hash = rgpost( 'workflow_hash' );

			if ( empty( $hash ) ) {
				return;
			}

			$parent_entry_id = absint( rgpost( 'workflow_parent_entry_id' ) );
			$parent_entry    = GFAPI::get_entry( $parent_entry_id );
			$api             = new Gravity_Flow_API( $parent_entry['form_id'] );
			$current_step    = $api->get_current_step( $parent_entry );

			if ( empty( $current_step ) || ! $current_step instanceof Gravity_Flow_Step_Form_Submission ) {
				return;
			}

			$form_id        = absint( $form['id'] );
			$target_form_id = absint( $current_step->target_form_id );

			if ( $form_id !== $target_form_id ) {
				return $form;
			}

			$verify_hash = $this->get_workflow_hash( $parent_entry_id, $current_step );
			if ( ! hash_equals( $hash, $verify_hash ) ) {
				return;
			}

			$this->current_submission_verified = true;

			$assignee_key = gravity_flow()->get_current_user_assignee_key();
			$is_assignee  = $current_step->is_assignee( $assignee_key );
			if ( ! $is_assignee ) {
				return;
			}

			$assignee = new Gravity_Flow_Assignee( $assignee_key, $current_step );

			$note = esc_html__( 'Submission received.', 'gravityflowformconnector' );

			$current_step->add_note( $note );

			$assignee_status = 'pending';

			$payment_status = strtolower( rgar( $entry, 'payment_status' ) );

			if ( empty( $payment_status ) || $payment_status == 'paid' ) {
				$assignee_status = 'complete';
				$current_step->process_assignee_status( $assignee, $assignee_status, $form );
			} else {
				if ( strtolower( $entry['payment_status'] ) == 'processing' ) {
					$processing_meta = array(
						'parent_entry_id' => $parent_entry_id,
						'assignee_key'    => $assignee_key,
					);
					gform_update_meta( $entry['id'], 'workflow_form_submission_step_processing_meta', $processing_meta );
				}
			}

			$this->log_debug( __METHOD__ . '() entry payment status: ' . $entry['payment_status'] );
			$this->log_debug( __METHOD__ . '() assignee status: ' . $assignee_status );

			$api->process_workflow( $parent_entry_id );
		}

		/**
		 * Target for the gform_form_tag filter. Adds the parent entry ID and hash as a hidden fields.
		 *
		 * @param $form_tag
		 * @param $form
		 *
		 * @return string
		 */
		public function filter_gform_form_tag( $form_tag, $form ) {
			if ( ! isset( $_REQUEST['workflow_parent_entry_id'] ) ) {
				return $form_tag;
			}

			$form_id     = absint( $form['id'] );
			$url_form_id = absint( rgget( 'id' ) );

			if ( $form_id !== $url_form_id ) {
				return $form_tag;
			}

			$hash = sanitize_text_field( rgget( 'workflow_hash' ) );

			if ( empty( $hash ) ) {
				return $form_tag;
			}

			$parent_entry_id = absint( rgget( 'workflow_parent_entry_id' ) );
			$parent_entry    = GFAPI::get_entry( $parent_entry_id );
			$api             = new Gravity_Flow_API( $parent_entry['form_id'] );
			$current_step    = $api->get_current_step( $parent_entry );

			if ( empty( $current_step ) ) {
				return $form_tag;
			}

			$this->log_debug( __METHOD__ . '() - current step: ' . $current_step->get_name() . ' for entry id ' . $parent_entry_id );

			if ( ! $current_step instanceof Gravity_Flow_Step_Form_Submission ) {
				$this->log_debug( __METHOD__ . '(): adding validation error; not form submission step' );
				$form_tag .= sprintf( '<div class="validation_error">%s</div>', esc_html__( 'The link to this form is no longer valid.', 'gravityflowformconnector' ) );

				return $form_tag;
			}

			$assignee_key = gravity_flow()->get_current_user_assignee_key();

			$is_assignee = $current_step->is_assignee( $assignee_key );
			if ( ! $is_assignee ) {
				$this->log_debug( __METHOD__ . '(): adding validation error; not assignee' );
				$message  = esc_html__( 'The link to this form is no longer valid.', 'gravityflowformconnector' );
				$form_tag .= sprintf( '<div class="validation_error">%s</div>', $message );

				return $form_tag;
			}

			$hash_tag            = sprintf( '<input type="hidden" name="workflow_hash" value="%s"/>', $hash );
			$parent_entry_id_tag = sprintf( '<input type="hidden" name="workflow_parent_entry_id" value="%s"/>', $parent_entry_id );

			return $form_tag . $parent_entry_id_tag . $hash_tag;
		}


		/**
		 * Callback for the gform_validation filter.
		 *
		 * Validates that the parent ID is valid and that the entry is on a form submission step.
		 *
		 * @param $validation_result
		 *
		 * @return mixed
		 */
		public function filter_gform_validation( $validation_result ) {
			$parent_entry_id = absint( rgpost( 'workflow_parent_entry_id' ) );

			if ( empty( $parent_entry_id ) ) {
				return $validation_result;
			}

			$hash = rgpost( 'workflow_hash' );

			if ( empty( $hash ) ) {
				return $validation_result;
			}

			$parent_entry = GFAPI::get_entry( $parent_entry_id );

			if ( is_wp_error( $parent_entry ) ) {
				$validation_result['is_valid'] = false;
				$this->customize_validation_message( __( 'This form is no longer valid.', 'gravityflowformconnector' ) );
				add_filter( 'gform_validation_message', array( $this, 'filter_gform_validation_message' ), 10, 2 );

				return $validation_result;
			}

			$api = new Gravity_Flow_API( $parent_entry['form_id'] );

			$current_step = $api->get_current_step( $parent_entry );

			if ( empty( $current_step ) || ! $current_step instanceof Gravity_Flow_Step_Form_Submission ) {
				$this->customize_validation_message( __( 'This form is no longer accepting submissions.', 'gravityflowformconnector' ) );
				$validation_result['is_valid'] = false;

				return $validation_result;
			}

			$form_id        = absint( $validation_result['form']['id'] );
			$target_form_id = absint( $current_step->target_form_id );

			if ( $form_id !== $target_form_id ) {
				return $validation_result;
			}

			$assignee_key = gravity_flow()->get_current_user_assignee_key();
			$is_assignee  = $current_step->is_assignee( $assignee_key );
			if ( ! $is_assignee ) {
				$validation_result['is_valid'] = false;
				$this->customize_validation_message( __( 'Your input is no longer required.', 'gravityflowformconnector' ) );

				return $validation_result;
			}

			$verify_hash = $this->get_workflow_hash( $parent_entry_id, $current_step );
			if ( ! hash_equals( $hash, $verify_hash ) ) {
				$this->customize_validation_message( __( 'There was a problem with your submission. Please use the link provided.', 'gravityflowformconnector' ) );
				$validation_result['is_valid'] = false;
			}

			return $validation_result;
		}

		/**
		 * Returns a hash based on the current entry ID and the step timestamp.
		 *
		 * @param int               $parent_entry_id
		 * @param Gravity_Flow_Step $step
		 *
		 * @return string
		 */
		public function get_workflow_hash( $parent_entry_id, $step ) {
			return wp_hash( 'workflow_parent_entry_id:' . $parent_entry_id . $step->get_step_timestamp() );

		}

		/**
		 * Sets up the custom validation message.
		 *
		 * @param $message
		 */
		public function customize_validation_message( $message ) {
			self::$form_submission_validation_error = $message;
			add_filter( 'gform_validation_message', array( $this, 'filter_gform_validation_message' ), 10, 2 );
		}

		/**
		 * Callback for the gform_validation_message filter.
		 *
		 * Customizes the validation message.
		 *
		 * @param $message
		 * @param $form
		 *
		 * @return string
		 */
		public function filter_gform_validation_message( $message, $form ) {

			return "<div class='validation_error'>" . esc_html( self::$form_submission_validation_error ) . '</div>';
		}

		/**
		 * Target for the gform_save_field_value filter.
		 *
		 * Ensures that the values for hidden and administrative fields are mapped from the source entry.
		 *
		 *
		 * @param string   $value
		 * @param array    $entry
		 * @param GF_Field $field
		 * @param array    $form
		 * @param string   $input_id
		 *
		 * @return mixed
		 */
		public function filter_save_field_value( $value, $entry, $field, $form, $input_id ) {
			$parent_entry_id = absint( rgpost( 'workflow_parent_entry_id' ) );

			if ( empty( $parent_entry_id ) ) {
				return $value;
			}

			$hash = rgpost( 'workflow_hash' );

			if ( empty( $hash ) ) {
				return $value;
			}

			if ( ! $field instanceof GF_Field ) {
				return $value;
			}

			if ( ! ( $field->get_input_type() == 'hidden' || $field->is_administrative() || $field->visibility == 'hidden' ) ) {
				return $value;
			}

			$parent_entry = GFAPI::get_entry( $parent_entry_id );

			if ( is_wp_error( $parent_entry ) ) {
				return $value;
			}

			$api = new Gravity_Flow_API( $parent_entry['form_id'] );

			/* @var Gravity_Flow_Step_Form_Submission $current_step */
			$current_step = $api->get_current_step( $parent_entry );

			if ( empty( $current_step ) || ! $current_step instanceof Gravity_Flow_Step_Form_Submission ) {
				return $value;
			}

			if ( ! empty( $value ) ) {
				return $value;
			}

			$form_id        = absint( $form['id'] );
			$target_form_id = absint( $current_step->target_form_id );

			if ( $form_id !== $target_form_id ) {
				return $value;
			}

			$parent_entry = $current_step->get_entry();
			$mapped_entry = $current_step->do_mapping( $form, $parent_entry );

			return isset( $mapped_entry[ $input_id ] ) ? $mapped_entry[ $input_id ] : $value;
		}

		/**
		 * Target for the gform_pre_replace_merge_tags filter. Replaces the workflow_timeline and created_by merge tags.
		 *
		 *
		 * @param string $text
		 * @param array  $form
		 * @param array  $entry
		 * @param bool   $url_encode
		 * @param bool   $esc_html
		 * @param bool   $nl2br
		 * @param string $format
		 *
		 * @return string
		 */
		public function filter_gform_pre_replace_merge_tags( $text, $form, $entry, $url_encode, $esc_html, $nl2br, $format ) {

			if ( strpos( $text, '{' ) === false || empty( $entry ) ) {
				return $text;
			}

			remove_filter( 'gform_pre_replace_merge_tags', array( $this, 'filter_gform_pre_replace_merge_tags' ) );
			$step = gravity_flow()->get_current_step( $form, $entry );
			add_filter( 'gform_pre_replace_merge_tags', array( $this, 'filter_gform_pre_replace_merge_tags' ), 10, 7 );

			if ( empty( $step ) ) {
				return $text;
			}

			if ( ! $step instanceof Gravity_Flow_Step_Form_Submission ) {
				return $text;
			}

			$assignee_key = gravity_flow()->get_current_user_assignee_key();
			$is_assignee  = $step->is_assignee( $assignee_key );
			if ( ! $is_assignee ) {
				return $text;
			}


			$assignee = new Gravity_Flow_Assignee( $assignee_key, $entry );

			$text = $step->replace_variables( $text, $assignee );

			return $text;
		}

		public function action_gform_post_payment_completed( $entry, $action ) {
			$this->log_debug( __METHOD__ . '() starting' );

			$processing_meta = gform_get_meta( $entry['id'], 'workflow_form_submission_step_processing_meta' );

			if ( $processing_meta ) {
				$this->log_debug( __METHOD__ . '() processing meta: ' . print_r( $processing_meta, 1 ) );

				$assignee_key    = $processing_meta['assignee_key'];
				$parent_entry_id = $processing_meta['parent_entry_id'];
				$parent_entry    = GFAPI::get_entry( $parent_entry_id );
				$api             = new Gravity_Flow_API( $parent_entry['form_id'] );

				$current_step = $api->get_current_step( $parent_entry );

				if ( empty( $current_step ) ) {
					$this->log_debug( __METHOD__ . '() parent entry not on a workflow step. Bailing.' );

					return;
				}

				if ( ! $current_step instanceof Gravity_Flow_Step_Form_Submission ) {
					$this->log_debug( __METHOD__ . '() parent entry not on a form submission step. Bailing.' );

					return;
				}

				$is_assignee = $current_step->is_assignee( $assignee_key );
				if ( ! $is_assignee ) {
					$this->log_debug( __METHOD__ . '() assignee in the meta is not an assignee. Bailing.' );

					return;
				}

				$assignee = new Gravity_Flow_Assignee( $assignee_key, $current_step );
				$current_step->process_assignee_status( $assignee, 'complete', $current_step->get_form() );

				$api->process_workflow( $parent_entry_id );
			}
		}

		/**
		 * Overrides the default behaviour for the submit page and allows any form on a Form Submission step to be displayed in the workflow submit page.
		 *
		 * @since 1.7.1
		 *
		 * @param $can_render_form
		 * @param $form_id
		 *
		 * @return bool|WP_Error
		 */
		public function filter_gravityflow_can_render_form( $can_render_form, $form_id ) {

			if ( ! isset( $_REQUEST['workflow_parent_entry_id'] ) ) {
				return $can_render_form;
			}

			$parent_entry_id = absint( $_REQUEST['workflow_parent_entry_id'] );

			if ( empty( $parent_entry_id ) ) {
				return $can_render_form;
			}

			$hash = $_REQUEST['workflow_hash'];

			if ( empty( $hash ) ) {
				return $can_render_form;
			}

			if ( $this->current_submission_verified ) {
				// Submission was processed before this hook
				return true;
			}

			$parent_entry = GFAPI::get_entry( $parent_entry_id );

			if ( is_wp_error( $parent_entry ) ) {
				return $can_render_form;
			}

			$api          = new Gravity_Flow_API( $parent_entry['form_id'] );
			$current_step = $api->get_current_step( $parent_entry );

			if ( empty( $current_step ) || ! $current_step instanceof Gravity_Flow_Step_Form_Submission ) {
				$this->log_debug( __METHOD__ . '() assignee in the meta is not an assignee. Bailing.' );
				$error = new WP_Error( 'invalid_step', esc_html__( 'The link to this form is no longer valid', 'gravityflowformconnector' ) );

				return $error;
			}

			$target_form_id = absint( $current_step->target_form_id );

			if ( $form_id !== $target_form_id ) {
				$this->log_debug( __METHOD__ . '() the target form ID of the current step of the parent form is different to the requested form ID. Bailing.' );
				$error = new WP_Error( 'invalid_form', esc_html__( 'The link to this form is no longer valid', 'gravityflowformconnector' ) );

				return $error;
			}

			$verify_hash = $this->get_workflow_hash( $parent_entry_id, $current_step );

			if ( hash_equals( $hash, $verify_hash ) ) {
				$can_render_form = true;
			} else {
				$this->log_debug( __METHOD__ . '() invalid hash. Bailing.' );
				$error = new WP_Error( 'invalid_form', esc_html__( 'The link to this form is no longer valid', 'gravityflowformconnector' ) );

				return $error;
			}

			return $can_render_form;
		}
	}
}