Quick fix for missing data in personal data requests

[user5ab22cd517e418.1 (Karl Emil Nikka)]

There’s a bug in Gravity Forms causing data to not be included in personal data exports and personal data removal requests. It affects sites relying on User ID as identifier for form submissions. The bug was introduced in a Gravity Forms version between 2.4.21 and 2.5.15. The support team denied me access to their versions archive, so I don’t know the exact version.

In the class GF_Personal_Data, a string (“created_by”) is run through the absint() function, causing 0 to get saved to the database instead of the string. A quick workaround for this is to simply removed the call to absint(), see class-personal-data.php line 520. Since incorrect data has been saved to the database, you must re-save all affected forms after the change.

(I reported this to the developers a month ago and I’ve sent a reminder as well. Unfortunately, they haven’t responded or fixed the issue in neither of the two updates released since then.)

[user5ab22cd517e418.1 (Karl Emil Nikka)]

Cross-posted in the official Facebook group: Gravity Forms (and Certified Add-Ons) | Facebook.

[user5ab22cd517e418.1 (Karl Emil Nikka)]

Yet another release of Gravity Forms is out (2.6.7). The bug is still not addressed, and the support team hasn’t answered me. The same workaround works (edit the file and re-save all your forms).

[chrishajer (Chris (Gravity Forms))]

Hi Karl. I replied a couple of hours after you posted this (ticket 406660.) I have not yet seen a reply from you. If you need me to resend that reply, let me know. Thank you.

[user5ab22cd517e418.1 (Karl Emil Nikka)]

Thanks for the reply. I appreciate it, even though it took six weeks and two reminders. For bypassing readers, the Gravity Forms team is still investigating the bug on line 520 in class-personal-data.php.