Zapier

6 hooks fired by Zapier: 6 filters and 0 actions across 8 call sites. 4 of the 8 call sites are described by a docblock, at the call or on the constant that names the hook; the rest are listed with their signature and call sites only. Paths are relative to the plugin directory.

http_allowed_safe_ports

Filter · 3 arguments · 1 call site

apply_filters( 'http_allowed_safe_ports', [80, 443, 8080], $parts['host'], $url )

Fired from:

• packages/Zapier/Addon.php:477

xpac-forms-after-settings-modal-content

Filter · 3 arguments · 1 call site

Content appended inside a settings panel's item modal.

applyFilters( 'xpac-forms-after-settings-modal-content', [], { value: options, onChange: onUpdate, }, 'xpac-zapier' )

Fired from:

• assets/packages/zapier/Components/Modal.js:350

xpac_zapier_allow_unsafe_url

Filter · 2 arguments · 3 call sites

Filters whether a zap may be sent to an address WordPress refuses by default.

Consulted twice — here, and again in send(), where returning true is what drops the request from wp_safe_remote_request() to wp_remote_request(). Allowing it in one place only would pass this check and then fail inside core as a transport error, which classifies transient and burns all five retries on a request that can never succeed.

A callback should test the host it is handed rather than returning true outright: true disables core's protections for that request completely, including the DNS-time check that is the only thing standing between this and a name repointed at loopback. Core's own http_allowed_safe_ports is the narrower lever when a port is the only problem.

apply_filters( 'xpac_zapier_allow_unsafe_url', false, $request['url'] )
apply_filters( 'xpac_zapier_allow_unsafe_url', false, $url )

• $allowed (bool) — Whether to send anyway. Default false.
• $url (string) — The configured URL.

Fired from:

• packages/Zapier/Addon.php:337
• packages/Zapier/Addon.php:485
• packages/Zapier/Addon.php:519

xpac_zapier_field_value

Filter · 7 arguments · 1 call site

Filters one submitted field value on its way into a zap payload.

The first four arguments are the original public signature. The field name, payload key and Submission were appended so callbacks can identify and redact one value. File fields reach this filter after their attachment ids become an array of public URLs.

apply_filters( 'xpac_zapier_field_value', $field_value, $field_type, $data, $blocks, $value, $name, $submission )

• $field_value (mixed) — Submitted value, or public URL array for files.
• $field_type (string) — Forms field type.
• $data (array) — Whole submitted data map.
• $blocks (array) — Whole field-block map.
• $value (string) — Form field name.
• $name (string) — Outgoing payload key.
• $submission (Submission) — Submission being delivered.

Fired from:

• packages/Zapier/Addon.php:829

xpac_zapier_request_body

Filter · 3 arguments · 1 call site

Filters the complete Zapier request body before it is encoded.

Return an array or a WP_Error. The latter records a permanent delivery failure without sending a partial payload.

apply_filters( 'xpac_zapier_request_body', $zap_data, $item, $submission )

• $zap_data (array) — Complete payload.
• $item (array) — Stored zap settings.
• $submission (Submission) — Submission being delivered.

Fired from:

• packages/Zapier/Addon.php:871

xpac_zapier_request_timeout

Filter · 1 argument · 1 call site

apply_filters( 'xpac_zapier_request_timeout', 10 )

Fired from:

• packages/Zapier/Addon.php:334