Stripe

6 hooks fired by Stripe: 5 filters and 1 actions across 6 call sites. 6 of the 6 call sites are described by a docblock, at the call or on the constant that names the hook; the rest are listed with their signature and call sites only. Paths are relative to the plugin directory.

xpac_forms_stripe_allow_legacy_intent

Filter · 3 arguments · 1 call site

Filters the short migration escape hatch for intents created by an older release without form/instance metadata. It is disabled by default and can never accept an intent older than one recovery window, so the cross-form legacy replay gap is not permanent.

apply_filters( 'xpac_forms_stripe_allow_legacy_intent', false, $intent, $submission )

• $allow (bool) — Whether to allow this legacy intent.
• $intent (object) — Stripe PaymentIntent.
• $submission (Submission) — Current submission.

Fired from:

• packages/Stripe/Addon.php:2709

xpac_forms_stripe_client

Filter · 1 argument · 1 call site

Filters the Stripe client. Primarily useful for an installation-wide proxy and for deterministic integration tests.

apply_filters( 'xpac_forms_stripe_client', $client )

• $client (object) — Stripe client.

Fired from:

• packages/Stripe/Addon.php:572

xpac_forms_stripe_create_rate_limit

Filter · 2 arguments · 1 call site

Filters the PaymentIntent creation limit for one IP and form per hour.

apply_filters( 'xpac_forms_stripe_create_rate_limit', self::CREATE_RATE_LIMIT, $formId )

• $limit (int) — Default 20, clamped to 1–100.
• $formId (int) — Current form id.

Fired from:

• packages/Stripe/Addon.php:1449

xpac_forms_stripe_currency

Filter · 1 argument · 1 call site

Filters the currency Stripe charges in.

Everything was hardcoded to USD, so a site anywhere else was billing its visitors in dollars whatever its prices said.

apply_filters( 'xpac_forms_stripe_currency', $currency )

• $currency (string) — Lowercase three-letter ISO code.

Fired from:

• packages/Stripe/Addon.php:2152

xpac_forms_stripe_payload_ttl

Filter · 1 argument · 1 call site

Filters how long a pre-payment field snapshot may exist. Values are capped at one day because this duplicates personal submission data solely for a short webhook recovery window.

apply_filters( 'xpac_forms_stripe_payload_ttl', self::PAYLOAD_TTL )

• $seconds (int) — Default one day.

Fired from:

• packages/Stripe/Addon.php:644

xpac_forms_stripe_webhook

Action · 3 arguments · 1 call site

Fires for a verified Stripe webhook event belonging to this site.

The signature has been checked against the stored signing secret and the intent's xpac_site marker matches, so the event is genuine and ours. Fires for every event type the endpoint is subscribed to.

do_action( 'xpac_forms_stripe_webhook', (string) $event->type, $object, $event )

• $type (string) — Stripe event type, e.g. payment_intent.succeeded.
• $object (object) — The event's data object.
• $event (object) — The full Stripe event.

Fired from:

• packages/Stripe/Addon.php:1538