询盘表单只收字段是不够的：来源页、浏览路径与 IP 地理怎么记

try {
  const ss = sessionStorage, q = new URLSearchParams(location.search);
  // 落地页：写一次就锁死，首触优先
  if (!ss.getItem('eu_land')) ss.setItem('eu_land', location.origin + location.pathname);
  // 浏览路径：逐页追加，刷新同页不重复，上限 20 页
  const path = JSON.parse(ss.getItem('eu_journey') || '[]');
  if (path[path.length - 1] !== location.pathname) path.push(location.pathname);
  ss.setItem('eu_journey', JSON.stringify(path.slice(-20)));
  // 广告参数：URL 上有就存（已有不覆盖）
  ['utm_source','utm_medium','utm_campaign','gclid'].forEach(k => {
    const v = q.get(k);
    if (v && !ss.getItem('eu_' + k)) ss.setItem('eu_' + k, v.slice(0, 300));
  });
  // referrer 只存站外来源
  if (!ss.getItem('eu_ref') && document.referrer
      && new URL(document.referrer).origin !== location.origin) {
    ss.setItem('eu_ref', document.referrer);
  }
} catch (e) { /* 隐私模式读不到 storage：归因留空，表单照常 */ }

const fill = () => {
  document.querySelectorAll('form [name=utm_source]').forEach(el => {
    const f = el.form;
    const set = (n, k) => { const i = f.querySelector('[name=' + n + ']'); if (i) i.value = ss.getItem(k) || ''; };
    set('utm_source', 'eu_utm_source'); set('utm_medium', 'eu_utm_medium');
    set('utm_campaign', 'eu_utm_campaign'); set('gclid', 'eu_gclid');
    set('landing_page', 'eu_land'); set('referrer', 'eu_ref');
    set('journey', 'eu_journey');
  });
};

<input type="hidden" name="source_page" value="<?php
  echo esc_attr( is_singular() ? get_permalink() : home_url( '/' ) );
?>">

// source_page：只收本站 URL，防伪造外链
function clean_source_page( string $url ): string {
  $host = wp_parse_url( $url, PHP_URL_HOST );
  return ( $host && $host === wp_parse_url( home_url(), PHP_URL_HOST ) ) ? $url : '';
}

// journey：JSON 数组 → "a → b → c"，只收 / 开头的路径段
$journey = json_decode( $in['journey'], true );
$in['journey'] = '';
if ( is_array( $journey ) ) {
  $legs = array_filter( array_map(
    fn( $l ) => is_string( $l ) && str_starts_with( $l, '/' ) ? mb_substr( $l, 0, 120 ) : '',
    $journey
  ) );
  $in['journey'] = mb_substr( implode( '  →  ', $legs ), 0, 1200 );
}

// gclid：只留合法字符
$in['gclid'] = preg_replace( '/[^A-Za-z0-9_-]/', '', $in['gclid'] );

function visitor_ip( WP_REST_Request $req ): string {
  $cf = trim( (string) $req->get_header( 'cf-connecting-ip' ) );
  if ( $cf ) return $cf;
  $xff = trim( (string) $req->get_header( 'x-forwarded-for' ) );
  if ( $xff ) return trim( explode( ',', $xff )[0] );   // 第一个是访客，后面是代理
  return trim( (string) $req->get_header( 'x-real-ip' ) ) ?: ( $_SERVER['REMOTE_ADDR'] ?? '' );
}

function geo_lookup( string $ip ): array {
  if ( '' === $ip || filter_var( $ip, FILTER_VALIDATE_IP,
      FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE ) === false ) {
    return [ '', '' ];  // 内网/保留地址没有地理意义
  }
  $res = wp_remote_get( 'https://ipwho.is/' . rawurlencode( $ip ), [ 'timeout' => 4 ] );
  if ( is_wp_error( $res ) ) return [ '', '' ];          // 挂了就留空，绝不阻塞提交
  $data = json_decode( (string) wp_remote_retrieve_body( $res ), true );
  if ( empty( $data['success'] ) ) return [ '', '' ];
  return [ $data['country'] ?? '', $data['city'] ?? '' ];
}