Fix. Integrations. GiveWP now has bot detector scripts in iframes.

cleantalk.php

@@ -11,6 +11,7 @@
   Domain Path: /i18n
 */
 
+use Cleantalk\Antispam\ScriptsIntegration\CleantalkScriptsIntegrator;
 use Cleantalk\Antispam\ProtectByShortcode;
 use Cleantalk\ApbctWP\Activator;
 use Cleantalk\ApbctWP\AdminNotices;
@@ -597,27 +598,8 @@ function apbct_write_js_errors($data)
 
 // Public actions
 if ( ! is_admin() && ! apbct_is_ajax() && ! apbct_is_customize_preview() ) {
-    if (
-        apbct_is_plugin_active('fluentformpro/fluentformpro.php') &&
-        (
-            apbct_is_in_uri('ff_landing=') ||
-            (
-                // Load scripts for logged in users if constant is defined
-                apbct_is_user_logged_in() &&
-                (defined('APBCT_FF_JS_SCRIPTS_LOAD') &&
-                APBCT_FF_JS_SCRIPTS_LOAD == true)
-            )
-        )
-    ) {
-        add_action('wp_head', function () {
-            echo '<script data-pagespeed-no-defer="" src="'
-                . APBCT_URL_PATH
-                . '/js/apbct-public-bundle.min.js'
-                . '?ver=' . APBCT_VERSION . '" id="ct_public_functions-js"></script>';
-            echo '<script src="' . APBCT_BOT_DETECTOR_SCRIPT_URL . '?ver='
-                . APBCT_VERSION . '" async id="ct_bot_detector-js" data-wp-strategy="async"></script>';
-        }, 100);
-    }
+    $sci = new CleantalkScriptsIntegrator();
+    $sci->run();
 
     SFWUpdateHelper::processSFWOutdatedError($apbct);
 

lib/Cleantalk/Antispam/ScriptsIntegration/CleantalkScriptsIntegrator.php

@@ -0,0 +1,99 @@
+<?php
+
+namespace Cleantalk\Antispam\ScriptsIntegration;
+
+class CleantalkScriptsIntegrator
+{
+    /**
+     * List of plugins selected for inline script integration,
+     * indexed by their corresponding WordPress hook name.
+     *
+     * @var ScriptIntegrationPlugin[]
+     */
+    public $plugins_loaded = [];
+
+    /**
+     * Executes the integration process.
+     *
+     * This method:
+     * - Retrieves available integrations
+     * - Filters plugins that should be loaded
+     * - Registers WordPress hooks to execute plugin integration logic
+     *
+     * @return void
+     */
+    public function run()
+    {
+        $integrations = $this->getIntegrations();
+
+        $this->plugins_loaded = !empty($integrations)
+            ? $this->getPluginsToInline($integrations)
+            : [];
+
+        if (!empty($this->plugins_loaded)) {
+            foreach ($this->plugins_loaded as $_hook => $plugin) {
+                if ($plugin instanceof ScriptIntegrationPlugin) {
+                    add_action($_hook, function () use ($plugin) {
+                        $plugin->integrate();
+                    }, 100);
+                }
+            }
+        }
+    }
+
+    /**
+     * Filters plugins that are eligible for inline script integration.
+     *
+     * A plugin is included only if:
+     * - It is active
+     * - It matches the current URI context
+     * - It passes additional runtime checks
+     *
+     * Each hook can only be assigned to one plugin (first match wins).
+     *
+     * @param ScriptIntegrationPlugin[] $integrations List of available plugin integrations.
+     * @return ScriptIntegrationPlugin[] Filtered plugins indexed by hook name.
+     */
+    public function getPluginsToInline($integrations)
+    {
+        $plugins_loaded = [];
+
+        foreach ($integrations as $plugin) {
+            if (
+                $plugin->is_plugin_active &&
+                $plugin->is_in_uri &&
+                $plugin->additional_checks_passed
+            ) {
+                if (!isset($plugins_loaded[$plugin->hook_name])) {
+                    $plugins_loaded[$plugin->hook_name] = $plugin;
+                }
+            }
+        }
+
+        return $plugins_loaded;
+    }
+
+    /**
+     * Returns a list of all available plugin integrations.
+     *
+     * Each integration defines:
+     * - Activation rules
+     * - Context conditions (URI, environment, etc.)
+     * - Hook target for script injection
+     *
+     * @return ScriptIntegrationPlugin[]
+     */
+    public function getIntegrations()
+    {
+        try {
+            $integrations = [
+                new GiveWPScript(),
+                new FluentFormScript(),
+            ];
+        } catch (\Exception $e) {
+            $integrations = [];
+        }
+
+        return $integrations;
+    }
+}

lib/Cleantalk/Antispam/ScriptsIntegration/FluentFormScript.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace Cleantalk\Antispam\ScriptsIntegration;
+
+class FluentFormScript extends ScriptIntegrationPlugin
+{
+    public $hook_name = 'wp_head';
+    public $plugin_file = 'fluentformpro/fluentformpro.php';
+    public $uri_chunk = 'ff_landing=';
+
+    public function integrate()
+    {
+        echo '<script data-pagespeed-no-defer="" src="'
+            . APBCT_URL_PATH
+            . '/js/apbct-public-bundle.min.js'
+            . '?ver=' . APBCT_VERSION . '" id="ct_public_functions-js"></script>';
+        echo '<script src="' . APBCT_BOT_DETECTOR_SCRIPT_URL . '?ver='
+            . APBCT_VERSION . '" async id="ct_bot_detector-js" data-wp-strategy="async"></script>';
+    }
+
+    public function additionalChecks()
+    {
+        return $this->is_in_uri || (
+                function_exists('apbct_is_user_logged_in') &&
+                apbct_is_user_logged_in() &&
+                (defined('APBCT_FF_JS_SCRIPTS_LOAD') && APBCT_FF_JS_SCRIPTS_LOAD == true)
+            );
+    }
+}

lib/Cleantalk/Antispam/ScriptsIntegration/GiveWPScript.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace Cleantalk\Antispam\ScriptsIntegration;
+
+class GiveWPScript extends ScriptIntegrationPlugin
+{
+    public $hook_name = 'givewp_donation_form_enqueue_scripts';
+    public $plugin_file = 'give/give.php';
+    public $uri_chunk = 'givewp-route=donation-form-view';
+
+    /**
+     * @return void
+     * @psalm-suppress InvalidArgument
+     */
+    public function integrate()
+    {
+        // Bot detector
+        if ( apbct__is_bot_detector_enabled() && ! apbct_bot_detector_scripts_exclusion()) {
+            // Attention! Skip old enqueue way for external script.
+            wp_enqueue_script(
+                'ct_bot_detector',
+                APBCT_BOT_DETECTOR_SCRIPT_URL,
+                [],
+                APBCT_VERSION,
+                array(
+                    'in_footer' => true,
+                    'strategy' => 'async'
+                )
+            );
+        }
+    }
+}

lib/Cleantalk/Antispam/ScriptsIntegration/ScriptIntegrationPlugin.php

@@ -0,0 +1,77 @@
+<?php
+
+namespace Cleantalk\Antispam\ScriptsIntegration;
+
+abstract class ScriptIntegrationPlugin
+{
+    public $is_plugin_active;
+    public $is_in_uri;
+    public $additional_checks_passed;
+
+    public $plugin_file;
+    public $uri_chunk;
+    public $hook_name;
+
+    public function __construct()
+    {
+        if (
+            !isset($this->plugin_file) ||
+            !is_string($this->plugin_file) ||
+            !isset($this->uri_chunk) ||
+            !is_string($this->uri_chunk) ||
+            !isset($this->hook_name) ||
+            !is_string($this->hook_name)
+        ) {
+            throw new \Exception('Plugin file, URI chunk and hook name must be set');
+        }
+
+        $this->is_plugin_active = $this->isPluginActive($this->plugin_file);
+        $this->is_in_uri = $this->isInUri($this->uri_chunk);
+        $this->additional_checks_passed = $this->additionalChecks();
+    }
+
+    /**
+     * Executes the plugin integration logic.
+     *
+     * This method must be implemented by each concrete integration class
+     * and is responsible for registering scripts, hooks, or other behaviors.
+     *
+     * @return void
+     */
+    abstract public function integrate();
+
+    /**
+     * Checks whether a given WordPress plugin is active.
+     *
+     * @param string $plugin_file Path to the plugin main file.
+     * @return bool True if the plugin is active, false otherwise.
+     */
+    public function isPluginActive($plugin_file)
+    {
+        return apbct_is_plugin_active($plugin_file);
+    }
+
+    /**
+     * Checks whether the current request URI contains a specific substring.
+     *
+     * @param string $uri_chunk URI fragment to search for in the current request URI.
+     * @return bool True if the URI fragment is found, false otherwise.
+     */
+    public function isInUri($uri_chunk)
+    {
+        return apbct_is_in_uri($uri_chunk);
+    }
+
+    /**
+     * Performs additional runtime checks required for plugin activation.
+     *
+     * This method can be overridden in child classes to implement
+     * custom validation logic.
+     *
+     * @return bool True if all additional checks pass, false otherwise.
+     */
+    public function additionalChecks()
+    {
+        return true;
+    }
+}