Passed
Push — master ( 478be2...b14f85 )
by Brian
10:01 queued 04:24
created

wpinv_display_invoice_notes()   A

Complexity

Conditions 3
Paths 3

Size

Total Lines 18
Code Lines 10

Duplication

Lines 0
Ratio 0 %

Importance

Changes 0
Metric Value
cc 3
eloc 10
c 0
b 0
f 0
nc 3
nop 1
dl 0
loc 18
rs 9.9332
1
<?php
2
/**
3
 * Contains functions related to Invoicing plugin.
4
 *
5
 * @since 1.0.0
6
 * @package Invoicing
7
 */
8
 
9
// MUST have WordPress.
10
if ( !defined( 'WPINC' ) ) {
11
    exit( 'Do NOT access this file directly: ' . basename( __FILE__ ) );
12
}
13
14
if ( !is_admin() ) {
15
    add_filter( 'template_include', 'wpinv_template', 10, 1 );
16
    add_action( 'wpinv_invoice_print_body_start', 'wpinv_display_invoice_top_bar' );
17
    add_action( 'wpinv_invoice_top_bar_left', 'wpinv_invoice_display_left_actions' );
18
    add_action( 'wpinv_invoice_top_bar_right', 'wpinv_invoice_display_right_actions' );
19
}
20
21
function wpinv_template_path() {
22
    return apply_filters( 'wpinv_template_path', wpinv_get_theme_template_dir_name() );
23
}
24
25
function wpinv_display_invoice_top_bar( $invoice ) {
26
    if ( empty( $invoice ) ) {
27
        return;
28
    }
29
    ?>
30
    <div class="row wpinv-top-bar no-print">
31
        <div class="container">
32
            <div class="col-xs-6">
33
                <?php do_action( 'wpinv_invoice_top_bar_left', $invoice );?>
34
            </div>
35
            <div class="col-xs-6 text-right">
36
                <?php do_action( 'wpinv_invoice_top_bar_right', $invoice );?>
37
            </div>
38
        </div>
39
    </div>
40
    <?php
41
}
42
43
function wpinv_invoice_display_left_actions( $invoice ) {
44
    if ( empty( $invoice ) ) {
45
        return; // Exit if invoice is not set.
46
    }
47
    
48
    if ( $invoice->post_type == 'wpi_invoice' ) {
49
        if ( $invoice->needs_payment() ) {
50
            ?> <a class="btn btn-success btn-sm" title="<?php esc_attr_e( 'Pay This Invoice', 'invoicing' ); ?>" href="<?php echo esc_url( $invoice->get_checkout_payment_url() ); ?>"><?php _e( 'Pay For Invoice', 'invoicing' ); ?></a><?php
51
        }
52
    }
53
    do_action('wpinv_invoice_display_left_actions', $invoice);
54
}
55
56
function wpinv_invoice_display_right_actions( $invoice ) {
57
    if ( empty( $invoice ) ) {
58
        return; // Exit if invoice is not set.
59
    }
60
61
    if ( $invoice->post_type == 'wpi_invoice' ) { ?>
62
        <a class="btn btn-primary btn-sm btn-print-invoice" onclick="window.print();" href="javascript:void(0)"><?php _e( 'Print Invoice', 'invoicing' ); ?></a>
63
        <?php if ( is_user_logged_in() ) { ?>
64
        &nbsp;&nbsp;<a class="btn btn-warning btn-sm btn-invoice-history" href="<?php echo esc_url( wpinv_get_history_page_uri() ); ?>"><?php _e( 'Invoice History', 'invoicing' ); ?></a>
0 ignored issues
show
Bug introduced by
It seems like wpinv_get_history_page_uri() can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

64
        &nbsp;&nbsp;<a class="btn btn-warning btn-sm btn-invoice-history" href="<?php echo esc_url( /** @scrutinizer ignore-type */ wpinv_get_history_page_uri() ); ?>"><?php _e( 'Invoice History', 'invoicing' ); ?></a>
Loading history...
65
        <?php }
66
    }
67
    do_action('wpinv_invoice_display_right_actions', $invoice);
68
}
69
70
function wpinv_before_invoice_content( $content ) {
71
    global $post;
72
73
    if ( !empty( $post ) && $post->post_type == 'wpi_invoice' && is_singular( 'wpi_invoice' ) && is_main_query() ) {
74
        ob_start();
75
        do_action( 'wpinv_before_invoice_content', $post->ID );
76
        $content = ob_get_clean() . $content;
77
    }
78
79
    return $content;
80
}
81
add_filter( 'the_content', 'wpinv_before_invoice_content' );
82
83
function wpinv_after_invoice_content( $content ) {
84
    global $post;
85
86
    if ( !empty( $post ) && $post->post_type == 'wpi_invoice' && is_singular( 'wpi_invoice' ) && is_main_query() ) {
87
        ob_start();
88
        do_action( 'wpinv_after_invoice_content', $post->ID );
89
        $content .= ob_get_clean();
90
    }
91
92
    return $content;
93
}
94
add_filter( 'the_content', 'wpinv_after_invoice_content' );
95
96
function wpinv_get_templates_dir() {
97
    return WPINV_PLUGIN_DIR . 'templates';
98
}
99
100
function wpinv_get_templates_url() {
101
    return WPINV_PLUGIN_URL . 'templates';
102
}
103
104
function wpinv_get_template( $template_name, $args = array(), $template_path = '', $default_path = '' ) {
105
    if ( ! empty( $args ) && is_array( $args ) ) {
106
		extract( $args );
107
	}
108
109
	$located = wpinv_locate_template( $template_name, $template_path, $default_path );
110
	// Allow 3rd party plugin filter template file from their plugin.
111
	$located = apply_filters( 'wpinv_get_template', $located, $template_name, $args, $template_path, $default_path );
112
113
	if ( ! file_exists( $located ) ) {
114
        _doing_it_wrong( __FUNCTION__, sprintf( '<code>%s</code> does not exist.', $located ), '2.1' );
115
		return;
116
	}
117
118
	do_action( 'wpinv_before_template_part', $template_name, $template_path, $located, $args );
119
120
	include( $located );
121
122
	do_action( 'wpinv_after_template_part', $template_name, $template_path, $located, $args );
123
}
124
125
function wpinv_get_template_html( $template_name, $args = array(), $template_path = '', $default_path = '' ) {
126
	ob_start();
127
	wpinv_get_template( $template_name, $args, $template_path, $default_path );
128
	return ob_get_clean();
129
}
130
131
function wpinv_locate_template( $template_name, $template_path = '', $default_path = '' ) {
132
    if ( ! $template_path ) {
133
        $template_path = wpinv_template_path();
134
    }
135
136
    if ( ! $default_path ) {
137
        $default_path = WPINV_PLUGIN_DIR . 'templates/';
138
    }
139
140
    // Look within passed path within the theme - this is priority.
141
    $template = locate_template(
142
        array(
143
            trailingslashit( $template_path ) . $template_name,
144
            $template_name
145
        )
146
    );
147
148
    // Get default templates/
149
    if ( !$template && $default_path ) {
150
        $template = trailingslashit( $default_path ) . $template_name;
151
    }
152
153
    // Return what we found.
154
    return apply_filters( 'wpinv_locate_template', $template, $template_name, $template_path );
155
}
156
157
function wpinv_get_template_part( $slug, $name = null, $load = true ) {
158
	do_action( 'get_template_part_' . $slug, $slug, $name );
159
160
	// Setup possible parts
161
	$templates = array();
162
	if ( isset( $name ) )
163
		$templates[] = $slug . '-' . $name . '.php';
164
	$templates[] = $slug . '.php';
165
166
	// Allow template parts to be filtered
167
	$templates = apply_filters( 'wpinv_get_template_part', $templates, $slug, $name );
168
169
	// Return the part that is found
170
	return wpinv_locate_tmpl( $templates, $load, false );
171
}
172
173
function wpinv_locate_tmpl( $template_names, $load = false, $require_once = true ) {
174
	// No file found yet
175
	$located = false;
176
177
	// Try to find a template file
178
	foreach ( (array)$template_names as $template_name ) {
179
180
		// Continue if template is empty
181
		if ( empty( $template_name ) )
182
			continue;
183
184
		// Trim off any slashes from the template name
185
		$template_name = ltrim( $template_name, '/' );
186
187
		// try locating this template file by looping through the template paths
188
		foreach( wpinv_get_theme_template_paths() as $template_path ) {
189
190
			if( file_exists( $template_path . $template_name ) ) {
191
				$located = $template_path . $template_name;
192
				break;
193
			}
194
		}
195
196
		if( !empty( $located ) ) {
197
			break;
198
		}
199
	}
200
201
	if ( ( true == $load ) && ! empty( $located ) )
202
		load_template( $located, $require_once );
203
204
	return $located;
205
}
206
207
function wpinv_get_theme_template_paths() {
208
	$template_dir = wpinv_get_theme_template_dir_name();
209
210
	$file_paths = array(
211
		1 => trailingslashit( get_stylesheet_directory() ) . $template_dir,
212
		10 => trailingslashit( get_template_directory() ) . $template_dir,
213
		100 => wpinv_get_templates_dir()
214
	);
215
216
	$file_paths = apply_filters( 'wpinv_template_paths', $file_paths );
217
218
	// sort the file paths based on priority
219
	ksort( $file_paths, SORT_NUMERIC );
220
221
	return array_map( 'trailingslashit', $file_paths );
222
}
223
224
function wpinv_get_theme_template_dir_name() {
225
	return trailingslashit( apply_filters( 'wpinv_templates_dir', 'invoicing' ) );
226
}
227
228
function wpinv_checkout_meta_tags() {
229
230
	$pages   = array();
231
	$pages[] = wpinv_get_option( 'success_page' );
232
	$pages[] = wpinv_get_option( 'failure_page' );
233
	$pages[] = wpinv_get_option( 'invoice_history_page' );
234
	$pages[] = wpinv_get_option( 'invoice_subscription_page' );
235
236
	if( !wpinv_is_checkout() && !is_page( $pages ) ) {
237
		return;
238
	}
239
240
	echo '<meta name="robots" content="noindex,nofollow" />' . "\n";
241
}
242
add_action( 'wp_head', 'wpinv_checkout_meta_tags' );
243
244
function wpinv_add_body_classes( $class ) {
245
	$classes = (array)$class;
246
247
	if( wpinv_is_checkout() ) {
248
		$classes[] = 'wpinv-checkout';
249
		$classes[] = 'wpinv-page';
250
	}
251
252
	if( wpinv_is_success_page() ) {
253
		$classes[] = 'wpinv-success';
254
		$classes[] = 'wpinv-page';
255
	}
256
257
	if( wpinv_is_failed_transaction_page() ) {
258
		$classes[] = 'wpinv-failed-transaction';
259
		$classes[] = 'wpinv-page';
260
	}
261
262
	if( wpinv_is_invoice_history_page() ) {
263
		$classes[] = 'wpinv-history';
264
		$classes[] = 'wpinv-page';
265
	}
266
267
	if( wpinv_is_subscriptions_history_page() ) {
268
		$classes[] = 'wpinv-subscription';
269
		$classes[] = 'wpinv-page';
270
	}
271
272
	if( wpinv_is_test_mode() ) {
273
		$classes[] = 'wpinv-test-mode';
274
		$classes[] = 'wpinv-page';
275
	}
276
277
	return array_unique( $classes );
278
}
279
add_filter( 'body_class', 'wpinv_add_body_classes' );
280
281
function wpinv_html_dropdown( $name = 'wpinv_discounts', $selected = 0, $status = '' ) {
282
    $args = array( 'nopaging' => true );
283
284
    if ( ! empty( $status ) )
285
        $args['post_status'] = $status;
286
287
    $discounts = wpinv_get_discounts( $args );
288
    $options   = array();
289
290
    if ( $discounts ) {
291
        foreach ( $discounts as $discount ) {
292
            $options[ absint( $discount->ID ) ] = esc_html( get_the_title( $discount->ID ) );
293
        }
294
    } else {
295
        $options[0] = __( 'No discounts found', 'invoicing' );
296
    }
297
298
    $output = wpinv_html_select( array(
299
        'name'             => $name,
300
        'selected'         => $selected,
301
        'options'          => $options,
302
        'show_option_all'  => false,
303
        'show_option_none' => false,
304
    ) );
305
306
    return $output;
307
}
308
309
function wpinv_html_year_dropdown( $name = 'year', $selected = 0, $years_before = 5, $years_after = 0 ) {
310
    $current     = date( 'Y' );
311
    $start_year  = $current - absint( $years_before );
312
    $end_year    = $current + absint( $years_after );
313
    $selected    = empty( $selected ) ? date( 'Y' ) : $selected;
314
    $options     = array();
315
316
    while ( $start_year <= $end_year ) {
317
        $options[ absint( $start_year ) ] = $start_year;
318
        $start_year++;
319
    }
320
321
    $output = wpinv_html_select( array(
322
        'name'             => $name,
323
        'selected'         => $selected,
324
        'options'          => $options,
325
        'show_option_all'  => false,
326
        'show_option_none' => false
327
    ) );
328
329
    return $output;
330
}
331
332
function wpinv_html_month_dropdown( $name = 'month', $selected = 0 ) {
333
334
    $options = array(
335
        '1'  => __( 'January', 'invoicing' ),
336
        '2'  => __( 'February', 'invoicing' ),
337
        '3'  => __( 'March', 'invoicing' ),
338
        '4'  => __( 'April', 'invoicing' ),
339
        '5'  => __( 'May', 'invoicing' ),
340
        '6'  => __( 'June', 'invoicing' ),
341
        '7'  => __( 'July', 'invoicing' ),
342
        '8'  => __( 'August', 'invoicing' ),
343
        '9'  => __( 'September', 'invoicing' ),
344
        '10' => __( 'October', 'invoicing' ),
345
        '11' => __( 'November', 'invoicing' ),
346
        '12' => __( 'December', 'invoicing' ),
347
    );
348
349
    // If no month is selected, default to the current month
350
    $selected = empty( $selected ) ? date( 'n' ) : $selected;
351
352
    $output = wpinv_html_select( array(
353
        'name'             => $name,
354
        'selected'         => $selected,
355
        'options'          => $options,
356
        'show_option_all'  => false,
357
        'show_option_none' => false
358
    ) );
359
360
    return $output;
361
}
362
363
function wpinv_html_select( $args = array() ) {
364
    $defaults = array(
365
        'options'          => array(),
366
        'name'             => null,
367
        'class'            => '',
368
        'id'               => '',
369
        'selected'         => 0,
370
        'placeholder'      => null,
371
        'multiple'         => false,
372
        'show_option_all'  => _x( 'All', 'all dropdown items', 'invoicing' ),
373
        'show_option_none' => _x( 'None', 'no dropdown items', 'invoicing' ),
374
        'data'             => array(),
375
        'onchange'         => null,
376
        'required'         => false,
377
        'disabled'         => false,
378
        'readonly'         => false,
379
    );
380
381
    $args = wp_parse_args( $args, $defaults );
0 ignored issues
show
Security Variable Injection introduced by
$args can contain request data and is used in variable name context(s) leading to a potential security vulnerability.

2 paths for user data to reach this point

  1. Path: Read from $_GET in includes/admin/wpinv-admin-functions.php on line 363
  1. Read from $_GET
    in includes/admin/wpinv-admin-functions.php on line 363
  2. wpinv_html_select() is called
    in includes/admin/wpinv-admin-functions.php on line 359
  3. Enters via parameter $args
    in includes/wpinv-template-functions.php on line 363
  2. Path: Read from $_GET, and $_GET['vat_class'] is assigned to $class in includes/admin/wpinv-admin-functions.php on line 378
  1. Read from $_GET, and $_GET['vat_class'] is assigned to $class
    in includes/admin/wpinv-admin-functions.php on line 378
  2. wpinv_html_select() is called
    in includes/admin/wpinv-admin-functions.php on line 381
  3. Enters via parameter $args
    in includes/wpinv-template-functions.php on line 363

Used in variable context

  1. wp_parse_args() is called
    in includes/wpinv-template-functions.php on line 381
  2. Enters via parameter $args
    in wordpress/wp-includes/functions.php on line 4294
  3. wp_parse_str() is called
    in wordpress/wp-includes/functions.php on line 4300
  4. Enters via parameter $string
    in wordpress/wp-includes/formatting.php on line 4865
  5. parse_str() is called
    in wordpress/wp-includes/formatting.php on line 4866

General Strategies to prevent injection

In general, it is advisable to prevent any user-data to reach this point. This can be done by white-listing certain values:

if ( ! in_array($value, array('this-is-allowed', 'and-this-too'), true)) {
    throw new \InvalidArgumentException('This input is not allowed.');
}

For numeric data, we recommend to explicitly cast the data:

$sanitized = (integer) $tainted;
Loading history...
382
383
    $data_elements = '';
384
    foreach ( $args['data'] as $key => $value ) {
385
        $data_elements .= ' data-' . esc_attr( $key ) . '="' . esc_attr( $value ) . '"';
386
    }
387
388
    if( $args['multiple'] ) {
389
        $multiple = ' MULTIPLE';
390
    } else {
391
        $multiple = '';
392
    }
393
394
    if( $args['placeholder'] ) {
395
        $placeholder = $args['placeholder'];
396
    } else {
397
        $placeholder = '';
398
    }
399
    
400
    $options = '';
401
    if( !empty( $args['onchange'] ) ) {
402
        $options .= ' onchange="' . esc_attr( $args['onchange'] ) . '"';
403
    }
404
    
405
    if( !empty( $args['required'] ) ) {
406
        $options .= ' required="required"';
407
    }
408
    
409
    if( !empty( $args['disabled'] ) ) {
410
        $options .= ' disabled';
411
    }
412
    
413
    if( !empty( $args['readonly'] ) ) {
414
        $options .= ' readonly';
415
    }
416
417
    $class  = implode( ' ', array_map( 'sanitize_html_class', explode( ' ', $args['class'] ) ) );
418
    $output = '<select name="' . esc_attr( $args['name'] ) . '" id="' . esc_attr( $args['id'] ) . '" class="wpinv-select ' . $class . '"' . $multiple . ' data-placeholder="' . $placeholder . '" ' . trim( $options ) . $data_elements . '>';
419
420
    if ( $args['show_option_all'] ) {
421
        if( $args['multiple'] ) {
422
            $selected = selected( true, in_array( 0, $args['selected'] ), false );
423
        } else {
424
            $selected = selected( $args['selected'], 0, false );
425
        }
426
        $output .= '<option value="all"' . $selected . '>' . esc_html( $args['show_option_all'] ) . '</option>';
427
    }
428
429
    if ( !empty( $args['options'] ) ) {
430
431
        if ( $args['show_option_none'] ) {
432
            if( $args['multiple'] ) {
433
                $selected = selected( true, in_array( "", $args['selected'] ), false );
434
            } else {
435
                $selected = selected( $args['selected'] === "", true, false );
436
            }
437
            $output .= '<option value=""' . $selected . '>' . esc_html( $args['show_option_none'] ) . '</option>';
438
        }
439
440
        foreach( $args['options'] as $key => $option ) {
441
442
            if( $args['multiple'] && is_array( $args['selected'] ) ) {
443
                $selected = selected( true, (bool)in_array( $key, $args['selected'] ), false );
444
            } else {
445
                $selected = selected( $args['selected'], $key, false );
446
            }
447
448
            $output .= '<option value="' . esc_attr( $key ) . '"' . $selected . '>' . esc_html( $option ) . '</option>';
449
        }
450
    }
451
452
    $output .= '</select>';
453
454
    return $output;
455
}
456
457
function wpinv_item_dropdown( $args = array() ) {
458
    $defaults = array(
459
        'name'              => 'wpi_item',
460
        'id'                => 'wpi_item',
461
        'class'             => '',
462
        'multiple'          => false,
463
        'selected'          => 0,
464
        'number'            => 100,
465
        'placeholder'       => __( 'Choose a item', 'invoicing' ),
466
        'data'              => array( 'search-type' => 'item' ),
467
        'show_option_all'   => false,
468
        'show_option_none'  => false,
469
        'show_recurring'    => false,
470
    );
471
472
    $args = wp_parse_args( $args, $defaults );
473
474
    $item_args = array(
475
        'post_type'      => 'wpi_item',
476
        'orderby'        => 'title',
477
        'order'          => 'ASC',
478
        'posts_per_page' => $args['number']
479
    );
480
    
481
    $item_args  = apply_filters( 'wpinv_item_dropdown_query_args', $item_args, $args, $defaults );
482
483
    $items      = get_posts( $item_args );
484
    $options    = array();
485
    if ( $items ) {
486
        foreach ( $items as $item ) {
487
            $title = esc_html( $item->post_title );
488
            
489
            if ( !empty( $args['show_recurring'] ) ) {
490
                $title .= wpinv_get_item_suffix( $item->ID, false );
491
            }
492
            
493
            $options[ absint( $item->ID ) ] = $title;
494
        }
495
    }
496
497
    // This ensures that any selected items are included in the drop down
498
    if( is_array( $args['selected'] ) ) {
499
        foreach( $args['selected'] as $item ) {
500
            if( ! in_array( $item, $options ) ) {
501
                $title = get_the_title( $item );
502
                if ( !empty( $args['show_recurring'] ) ) {
503
                    $title .= wpinv_get_item_suffix( $item, false );
504
                }
505
                $options[$item] = $title;
506
            }
507
        }
508
    } elseif ( is_numeric( $args['selected'] ) && $args['selected'] !== 0 ) {
509
        if ( ! in_array( $args['selected'], $options ) ) {
510
            $title = get_the_title( $args['selected'] );
511
            if ( !empty( $args['show_recurring'] ) ) {
512
                $title .= wpinv_get_item_suffix( $args['selected'], false );
513
            }
514
            $options[$args['selected']] = get_the_title( $args['selected'] );
515
        }
516
    }
517
518
    $output = wpinv_html_select( array(
519
        'name'             => $args['name'],
520
        'selected'         => $args['selected'],
521
        'id'               => $args['id'],
522
        'class'            => $args['class'],
523
        'options'          => $options,
524
        'multiple'         => $args['multiple'],
525
        'placeholder'      => $args['placeholder'],
526
        'show_option_all'  => $args['show_option_all'],
527
        'show_option_none' => $args['show_option_none'],
528
        'data'             => $args['data'],
529
    ) );
530
531
    return $output;
532
}
533
534
function wpinv_html_checkbox( $args = array() ) {
535
    $defaults = array(
536
        'name'     => null,
537
        'current'  => null,
538
        'class'    => 'wpinv-checkbox',
539
        'options'  => array(
540
            'disabled' => false,
541
            'readonly' => false
542
        )
543
    );
544
545
    $args = wp_parse_args( $args, $defaults );
546
547
    $class = implode( ' ', array_map( 'sanitize_html_class', explode( ' ', $args['class'] ) ) );
548
    $options = '';
549
    if ( ! empty( $args['options']['disabled'] ) ) {
550
        $options .= ' disabled="disabled"';
551
    } elseif ( ! empty( $args['options']['readonly'] ) ) {
552
        $options .= ' readonly';
553
    }
554
555
    $output = '<input type="checkbox"' . $options . ' name="' . esc_attr( $args['name'] ) . '" id="' . esc_attr( $args['name'] ) . '" class="' . $class . ' ' . esc_attr( $args['name'] ) . '" ' . checked( 1, $args['current'], false ) . ' />';
556
557
    return $output;
558
}
559
560
function wpinv_html_text( $args = array() ) {
561
    // Backwards compatibility
562
    if ( func_num_args() > 1 ) {
563
        $args = func_get_args();
564
565
        $name  = $args[0];
566
        $value = isset( $args[1] ) ? $args[1] : '';
567
        $label = isset( $args[2] ) ? $args[2] : '';
568
        $desc  = isset( $args[3] ) ? $args[3] : '';
569
    }
570
571
    $defaults = array(
572
        'id'           => '',
573
        'name'         => isset( $name )  ? $name  : 'text',
574
        'value'        => isset( $value ) ? $value : null,
575
        'label'        => isset( $label ) ? $label : null,
576
        'desc'         => isset( $desc )  ? $desc  : null,
577
        'placeholder'  => '',
578
        'class'        => 'regular-text',
579
        'disabled'     => false,
580
        'readonly'     => false,
581
        'required'     => false,
582
        'autocomplete' => '',
583
        'data'         => false
584
    );
585
586
    $args = wp_parse_args( $args, $defaults );
587
588
    $class = implode( ' ', array_map( 'sanitize_html_class', explode( ' ', $args['class'] ) ) );
589
    $options = '';
590
    if( $args['required'] ) {
591
        $options .= ' required="required"';
592
    }
593
    if( $args['readonly'] ) {
594
        $options .= ' readonly';
595
    }
596
    if( $args['readonly'] ) {
597
        $options .= ' readonly';
598
    }
599
600
    $data = '';
601
    if ( !empty( $args['data'] ) ) {
602
        foreach ( $args['data'] as $key => $value ) {
603
            $data .= 'data-' . wpinv_sanitize_key( $key ) . '="' . esc_attr( $value ) . '" ';
604
        }
605
    }
606
607
    $output = '<span id="wpinv-' . wpinv_sanitize_key( $args['name'] ) . '-wrap">';
608
    $output .= '<label class="wpinv-label" for="' . wpinv_sanitize_key( $args['id'] ) . '">' . esc_html( $args['label'] ) . '</label>';
609
    if ( ! empty( $args['desc'] ) ) {
610
        $output .= '<span class="wpinv-description">' . esc_html( $args['desc'] ) . '</span>';
611
    }
612
613
    $output .= '<input type="text" name="' . esc_attr( $args['name'] ) . '" id="' . esc_attr( $args['id'] )  . '" autocomplete="' . esc_attr( $args['autocomplete'] )  . '" value="' . esc_attr( $args['value'] ) . '" placeholder="' . esc_attr( $args['placeholder'] ) . '" class="' . $class . '" ' . $data . ' ' . trim( $options ) . '/>';
614
615
    $output .= '</span>';
616
617
    return $output;
618
}
619
620
function wpinv_html_date_field( $args = array() ) {
621
    if( empty( $args['class'] ) ) {
622
        $args['class'] = 'wpiDatepicker';
623
    } elseif( ! strpos( $args['class'], 'wpiDatepicker' ) ) {
624
        $args['class'] .= ' wpiDatepicker';
625
    }
626
627
    return wpinv_html_text( $args );
628
}
629
630
function wpinv_html_textarea( $args = array() ) {
631
    $defaults = array(
632
        'name'        => 'textarea',
633
        'value'       => null,
634
        'label'       => null,
635
        'desc'        => null,
636
        'class'       => 'large-text',
637
        'disabled'    => false
638
    );
639
640
    $args = wp_parse_args( $args, $defaults );
641
642
    $class = implode( ' ', array_map( 'sanitize_html_class', explode( ' ', $args['class'] ) ) );
643
    $disabled = '';
644
    if( $args['disabled'] ) {
645
        $disabled = ' disabled="disabled"';
646
    }
647
648
    $output = '<span id="wpinv-' . wpinv_sanitize_key( $args['name'] ) . '-wrap">';
649
    $output .= '<label class="wpinv-label" for="' . wpinv_sanitize_key( $args['name'] ) . '">' . esc_html( $args['label'] ) . '</label>';
650
    $output .= '<textarea name="' . esc_attr( $args['name'] ) . '" id="' . wpinv_sanitize_key( $args['name'] ) . '" class="' . $class . '"' . $disabled . '>' . esc_attr( $args['value'] ) . '</textarea>';
651
652
    if ( ! empty( $args['desc'] ) ) {
653
        $output .= '<span class="wpinv-description">' . esc_html( $args['desc'] ) . '</span>';
654
    }
655
    $output .= '</span>';
656
657
    return $output;
658
}
659
660
function wpinv_html_ajax_user_search( $args = array() ) {
661
    $defaults = array(
662
        'name'        => 'user_id',
663
        'value'       => null,
664
        'placeholder' => __( 'Enter username', 'invoicing' ),
665
        'label'       => null,
666
        'desc'        => null,
667
        'class'       => '',
668
        'disabled'    => false,
669
        'autocomplete'=> 'off',
670
        'data'        => false
671
    );
672
673
    $args = wp_parse_args( $args, $defaults );
674
675
    $args['class'] = 'wpinv-ajax-user-search ' . $args['class'];
676
677
    $output  = '<span class="wpinv_user_search_wrap">';
678
        $output .= wpinv_html_text( $args );
679
        $output .= '<span class="wpinv_user_search_results hidden"><a class="wpinv-ajax-user-cancel" title="' . __( 'Cancel', 'invoicing' ) . '" aria-label="' . __( 'Cancel', 'invoicing' ) . '" href="#">x</a><span></span></span>';
680
    $output .= '</span>';
681
682
    return $output;
683
}
684
685
function wpinv_ip_geolocation() {
686
    global $wpinv_euvat;
687
    
688
    $ip         = !empty( $_GET['ip'] ) ? sanitize_text_field( $_GET['ip'] ) : '';    
689
    $content    = '';
690
    $iso        = '';
691
    $country    = '';
692
    $region     = '';
693
    $city       = '';
694
    $longitude  = '';
695
    $latitude   = '';
696
    $credit     = '';
697
    $address    = '';
698
    
699
    if ( wpinv_get_option( 'vat_ip_lookup' ) == 'geoip2' && $geoip2_city = $wpinv_euvat->geoip2_city_record( $ip ) ) {
700
        try {
701
            $iso        = $geoip2_city->country->isoCode;
702
            $country    = $geoip2_city->country->name;
703
            $region     = !empty( $geoip2_city->subdivisions ) && !empty( $geoip2_city->subdivisions[0]->name ) ? $geoip2_city->subdivisions[0]->name : '';
704
            $city       = $geoip2_city->city->name;
705
            $longitude  = $geoip2_city->location->longitude;
706
            $latitude   = $geoip2_city->location->latitude;
707
            $credit     = __( 'Geolocated using the information by MaxMind, available from <a href="http://www.maxmind.com" target="_blank">www.maxmind.com</a>', 'invoicing' );
708
        } catch( Exception $e ) { }
0 ignored issues
show
Coding Style Comprehensibility introduced by
Consider adding a comment why this CATCH block is empty.
Loading history...
709
    }
710
    
711
    if ( !( $iso && $longitude && $latitude ) && function_exists( 'simplexml_load_file' ) ) {
712
        try {
713
            $load_xml = simplexml_load_file( 'http://www.geoplugin.net/xml.gp?ip=' . $ip );
714
            
715
            if ( !empty( $load_xml ) && isset( $load_xml->geoplugin_countryCode ) && !empty( $load_xml->geoplugin_latitude ) && !empty( $load_xml->geoplugin_longitude ) ) {
716
                $iso        = $load_xml->geoplugin_countryCode;
717
                $country    = $load_xml->geoplugin_countryName;
718
                $region     = !empty( $load_xml->geoplugin_regionName ) ? $load_xml->geoplugin_regionName : '';
719
                $city       = !empty( $load_xml->geoplugin_city ) ? $load_xml->geoplugin_city : '';
720
                $longitude  = $load_xml->geoplugin_longitude;
721
                $latitude   = $load_xml->geoplugin_latitude;
722
                $credit     = $load_xml->geoplugin_credit;
0 ignored issues
show
Unused Code introduced by
The assignment to $credit is dead and can be removed.
Loading history...
723
                $credit     = __( 'Geolocated using the information by geoPlugin, available from <a href="http://www.geoplugin.com" target="_blank">www.geoplugin.com</a>', 'invoicing' ) . '<br>' . $load_xml->geoplugin_credit;
724
            }
725
        } catch( Exception $e ) { }
0 ignored issues
show
Coding Style Comprehensibility introduced by
Consider adding a comment why this CATCH block is empty.
Loading history...
726
    }
727
    
728
    if ( $iso && $longitude && $latitude ) {
729
        if ( $city ) {
730
            $address .= $city . ', ';
731
        }
732
        
733
        if ( $region ) {
734
            $address .= $region . ', ';
735
        }
736
        
737
        $address .= $country . ' (' . $iso . ')';
738
        $content = '<p>'. sprintf( __( '<b>Address:</b> %s', 'invoicing' ), $address ) . '</p>';
739
        $content .= '<p>'. $credit . '</p>';
740
    } else {
741
        $content = '<p>'. sprintf( __( 'Unable to find geolocation for the IP address: %s', 'invoicing' ), $ip ) . '</p>';
742
    }
743
    ?>
744
<!DOCTYPE html>
745
<html><head><title><?php echo sprintf( __( 'IP: %s', 'invoicing' ), $ip );?></title><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><link rel="stylesheet" href="//cdnjs.cloudflare.com/ajax/libs/leaflet/1.0.0-rc.1/leaflet.css" /><style>html,body{height:100%;margin:0;padding:0;width:100%}body{text-align:center;background:#fff;color:#222;font-size:small;}body,p{font-family: arial,sans-serif}#map{margin:auto;width:100%;height:calc(100% - 120px);min-height:240px}</style></head>
746
<body>
747
    <?php if ( $latitude && $latitude ) { ?>
748
    <div id="map"></div>
749
        <script src="//cdnjs.cloudflare.com/ajax/libs/leaflet/1.0.0-rc.1/leaflet.js"></script>
750
        <script type="text/javascript">
751
        var osmUrl = 'http://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png',
752
            osmAttrib = '&copy; <a href="http://openstreetmap.org/copyright">OpenStreetMap</a> contributors',
753
            osm = L.tileLayer(osmUrl, {maxZoom: 18, attribution: osmAttrib}),
754
            latlng = new L.LatLng(<?php echo $latitude;?>, <?php echo $longitude;?>);
755
756
        var map = new L.Map('map', {center: latlng, zoom: 12, layers: [osm]});
757
758
        var marker = new L.Marker(latlng);
759
        map.addLayer(marker);
760
761
        marker.bindPopup("<p><?php esc_attr_e( $address );?></p>");
762
    </script>
763
    <?php } ?>
764
    <div style="height:100px"><?php echo $content; ?></div>
765
</body></html>
766
<?php
767
    exit;
0 ignored issues
show
Best Practice introduced by
Using exit here is not recommended.

In general, usage of exit should be done with care and only when running in a scripting context like a CLI script.

Loading history...
768
}
769
add_action( 'wp_ajax_wpinv_ip_geolocation', 'wpinv_ip_geolocation' );
770
add_action( 'wp_ajax_nopriv_wpinv_ip_geolocation', 'wpinv_ip_geolocation' );
771
772
// Set up the template for the invoice.
773
function wpinv_template( $template ) {
774
    global $post, $wp_query;
775
    
776
    if ( ( is_single() || is_404() ) && !empty( $post->ID ) && (get_post_type( $post->ID ) == 'wpi_invoice' or get_post_type( $post->ID ) == 'wpi_quote')) {
777
        if ( wpinv_user_can_view_invoice( $post->ID ) ) {
778
            $template = wpinv_get_template_part( 'wpinv-invoice-print', false, false );
779
        } else {
780
            $template = wpinv_get_template_part( 'wpinv-invalid-access', false, false );
781
        }
782
    }
783
784
    return $template;
785
}
786
787
function wpinv_get_business_address() {
788
    $business_address   = wpinv_store_address();
789
    $business_address   = !empty( $business_address ) ? wpautop( wp_kses_post( $business_address ) ) : '';
790
    
791
    /*
792
    $default_country    = wpinv_get_default_country();
793
    $default_state      = wpinv_get_default_state();
794
    
795
    $address_fields = array();
796
    if ( !empty( $default_state ) ) {
797
        $address_fields[] = wpinv_state_name( $default_state, $default_country );
798
    }
799
    
800
    if ( !empty( $default_country ) ) {
801
        $address_fields[] = wpinv_country_name( $default_country );
802
    }
803
    
804
    if ( !empty( $address_fields ) ) {
805
        $address_fields = implode( ", ", $address_fields );
806
                
807
        $business_address .= wpautop( wp_kses_post( $address_fields ) );
808
    }
809
    */
810
    
811
    $business_address = $business_address ? '<div class="address">' . $business_address . '</div>' : '';
812
    
813
    return apply_filters( 'wpinv_get_business_address', $business_address );
814
}
815
816
function wpinv_display_from_address() {
817
    global $wpinv_euvat;
818
    
819
    $from_name = $wpinv_euvat->get_company_name();
820
    if (empty($from_name)) {
821
        $from_name = wpinv_get_business_name();
822
    }
823
    ?><div class="from col-xs-2"><strong><?php _e( 'From:', 'invoicing' ) ?></strong></div>
824
    <div class="wrapper col-xs-10">
825
        <div class="name"><?php echo esc_html( $from_name ); ?></div>
826
        <?php if ( $address = wpinv_get_business_address() ) { ?>
827
        <div class="address"><?php echo wpautop( wp_kses_post( $address ) );?></div>
828
        <?php } ?>
829
        <?php if ( $email_from = wpinv_mail_get_from_address() ) { ?>
830
        <div class="email_from"><?php echo wp_sprintf( __( 'Email: %s', 'invoicing' ), $email_from );?></div>
831
        <?php } ?>
832
    </div>
833
    <?php
834
}
835
836
function wpinv_watermark( $id = 0 ) {
837
    $output = wpinv_get_watermark( $id );
838
    
839
    return apply_filters( 'wpinv_get_watermark', $output, $id );
840
}
841
842
function wpinv_get_watermark( $id ) {
843
    if ( !$id > 0 ) {
844
        return NULL;
845
    }
846
    $invoice = wpinv_get_invoice( $id );
847
    
848
    if ( !empty( $invoice ) && "wpi_invoice" === $invoice->post_type ) {
849
        if ( $invoice->is_paid() ) {
850
            return __( 'Paid', 'invoicing' );
851
        }
852
        if ( $invoice->is_refunded() ) {
853
            return __( 'Refunded', 'invoicing' );
854
        }
855
        if ( $invoice->has_status( array( 'wpi-cancelled' ) ) ) {
856
            return __( 'Cancelled', 'invoicing' );
857
        }
858
    }
859
    
860
    return NULL;
861
}
862
863
function wpinv_display_invoice_details( $invoice ) {
864
    global $wpinv_euvat;
865
    
866
    $invoice_id = $invoice->ID;
867
    $vat_name   = $wpinv_euvat->get_vat_name();
868
    $use_taxes  = wpinv_use_taxes();
869
    
870
    $invoice_status = wpinv_get_invoice_status( $invoice_id );
871
    ?>
872
    <table class="table table-bordered table-sm">
873
        <?php if ( $invoice_number = wpinv_get_invoice_number( $invoice_id ) ) { ?>
874
            <tr class="wpi-row-number">
875
                <th><?php echo apply_filters( 'wpinv_invoice_number_label', __( 'Invoice Number', 'invoicing' ), $invoice ); ?></th>
876
                <td><?php echo esc_html( $invoice_number ); ?></td>
877
            </tr>
878
        <?php } ?>
879
        <tr class="wpi-row-status">
880
            <th><?php echo apply_filters( 'wpinv_invoice_status_label', __( 'Invoice Status', 'invoicing' ), $invoice ); ?></th>
881
            <td><?php echo wpinv_invoice_status_label( $invoice_status, wpinv_get_invoice_status( $invoice_id, true ) ); ?></td>
882
        </tr>
883
        <?php if ( $invoice->is_renewal() ) { ?>
884
        <tr class="wpi-row-parent">
885
            <th><?php echo apply_filters( 'wpinv_invoice_parent_invoice_label', __( 'Parent Invoice', 'invoicing' ), $invoice ); ?></th>
886
            <td><?php echo wpinv_invoice_link( $invoice->parent_invoice ); ?></td>
887
        </tr>
888
        <?php } ?>
889
        <?php if ( ( $gateway_name = wpinv_get_payment_gateway_name( $invoice_id ) ) && ( $invoice->is_paid() || $invoice->is_refunded() ) ) { ?>
890
            <tr class="wpi-row-gateway">
891
                <th><?php echo apply_filters( 'wpinv_invoice_payment_method_label', __( 'Payment Method', 'invoicing' ), $invoice ); ?></th>
892
                <td><?php echo $gateway_name; ?></td>
893
            </tr>
894
        <?php } ?>
895
        <?php if ( $invoice_date = wpinv_get_invoice_date( $invoice_id ) ) { ?>
896
            <tr class="wpi-row-date">
897
                <th><?php echo apply_filters( 'wpinv_invoice_date_label', __( 'Invoice Date', 'invoicing' ), $invoice ); ?></th>
898
                <td><?php echo $invoice_date; ?></td>
899
            </tr>
900
        <?php } ?>
901
        <?php do_action( 'wpinv_display_details_before_due_date', $invoice_id ); ?>
902
        <?php if ( wpinv_get_option( 'overdue_active' ) && $invoice->needs_payment() && ( $due_date = $invoice->get_due_date( true ) ) ) { ?>
903
            <tr class="wpi-row-date">
904
                <th><?php echo apply_filters( 'wpinv_invoice_due_date_label', __( 'Due Date', 'invoicing' ), $invoice ); ?></th>
905
                <td><?php echo $due_date; ?></td>
906
            </tr>
907
        <?php } ?>
908
        <?php do_action( 'wpinv_display_details_after_due_date', $invoice_id ); ?>
909
        <?php if ( $owner_vat_number = $wpinv_euvat->get_vat_number() ) { ?>
910
            <tr class="wpi-row-ovatno">
911
                <th><?php echo apply_filters( 'wpinv_invoice_owner_vat_number_label', wp_sprintf( __( 'Owner %s Number', 'invoicing' ), $vat_name ), $invoice, $vat_name ); ?></th>
912
                <td><?php echo $owner_vat_number; ?></td>
913
            </tr>
914
        <?php } ?>
915
        <?php if ( $use_taxes && ( $user_vat_number = wpinv_get_invoice_vat_number( $invoice_id ) ) ) { ?>
916
            <tr class="wpi-row-uvatno">
917
                <th><?php echo apply_filters( 'wpinv_invoice_user_vat_number_label', wp_sprintf( __( 'Invoice %s Number', 'invoicing' ), $vat_name ), $invoice, $vat_name ); ?></th>
918
                <td><?php echo $user_vat_number; ?></td>
919
            </tr>
920
        <?php } ?>
921
        <tr class="table-active tr-total wpi-row-total">
922
            <th><strong><?php _e( 'Total Amount', 'invoicing' ) ?></strong></th>
923
            <td><strong><?php echo wpinv_payment_total( $invoice_id, true ); ?></strong></td>
924
        </tr>
925
    </table>
926
<?php
927
}
928
929
/**
930
 * Retrieves the address markup to use on Invoices.
931
 * 
932
 * @since 1.0.13
933
 * @see `wpinv_get_full_address_format`
934
 * @see `wpinv_get_invoice_address_replacements`
935
 * @param array $billing_details customer's billing details
936
 * @param  string $separator How to separate address lines.
937
 * @return string
938
 */
939
function wpinv_get_invoice_address_markup( $billing_details, $separator = '<br/>' ) {
940
941
    // Retrieve the address markup...
942
    $country= empty( $billing_details['country'] ) ? '' : $billing_details['country'];
943
    $format = wpinv_get_full_address_format( $country );
944
945
    // ... and the replacements.
946
    $replacements = wpinv_get_invoice_address_replacements( $billing_details );
947
948
    $formatted_address = str_ireplace( array_keys( $replacements ), $replacements, $format );
949
    
950
	// Remove unavailable tags.
951
    $formatted_address = preg_replace( "/\{\{\w+\}\}/", '', $formatted_address );
952
953
    // Clean up white space.
954
	$formatted_address = preg_replace( '/  +/', ' ', trim( $formatted_address ) );
955
    $formatted_address = preg_replace( '/\n\n+/', "\n", $formatted_address );
956
    
957
    // Break newlines apart and remove empty lines/trim commas and white space.
958
	$formatted_address = array_filter( array_map( 'wpinv_trim_formatted_address_line', explode( "\n", $formatted_address ) ) );
959
960
    // Add html breaks.
961
	$formatted_address = implode( $separator, $formatted_address );
962
963
	// We're done!
964
	return $formatted_address;
965
    
966
}
967
968
function wpinv_display_to_address( $invoice_id = 0 ) {
969
    $invoice = wpinv_get_invoice( $invoice_id );
970
    
971
    if ( empty( $invoice ) ) {
972
        return NULL;
973
    }
974
    
975
    $billing_details = $invoice->get_user_info();
976
    $output = '<div class="to col-xs-2"><strong>' . __( 'To:', 'invoicing' ) . '</strong></div>';
977
    $output .= '<div class="wrapper col-xs-10">';
978
    
979
    ob_start();
980
    do_action( 'wpinv_display_to_address_top', $invoice );
981
    $output .= ob_get_clean();
982
    
983
    $address_row = wpinv_get_invoice_address_markup( $billing_details );
984
985
    if ( $address_row ) {
986
        $output .= '<div class="address">' . $address_row . '</div>';
987
    }
988
989
    if ( $phone = $invoice->get_phone() ) {
990
        $output .= '<div class="phone">' . wp_sprintf( __( 'Phone: %s', 'invoicing' ), esc_html( $phone ) ) . '</div>';
991
    }
992
    if ( $email = $invoice->get_email() ) {
993
        $output .= '<div class="email">' . wp_sprintf( __( 'Email: %s' , 'invoicing'), esc_html( $email ) ) . '</div>';
994
    }
995
996
    ob_start();
997
    do_action( 'wpinv_display_to_address_bottom', $invoice );
998
    $output .= ob_get_clean();
999
    
1000
    $output .= '</div>';
1001
    $output = apply_filters( 'wpinv_display_to_address', $output, $invoice );
1002
1003
    echo $output;
1004
}
1005
1006
function wpinv_display_line_items( $invoice_id = 0 ) {
1007
    global $wpinv_euvat, $ajax_cart_details;
1008
    $invoice            = wpinv_get_invoice( $invoice_id );
1009
    $quantities_enabled = wpinv_item_quantities_enabled();
1010
    $use_taxes          = wpinv_use_taxes();
1011
    if ( !$use_taxes && (float)$invoice->get_tax() > 0 ) {
1012
        $use_taxes = true;
1013
    }
1014
    $zero_tax           = !(float)$invoice->get_tax() > 0 ? true : false;
1015
    $tax_label           = $use_taxes && $invoice->has_vat() ? $wpinv_euvat->get_vat_name() : __( 'Tax', 'invoicing' );
1016
    $tax_title          = !$zero_tax && $use_taxes ? ( wpinv_prices_include_tax() ? wp_sprintf( __( '(%s Incl.)', 'invoicing' ), $tax_label ) : wp_sprintf( __( '(%s Excl.)', 'invoicing' ), $tax_label ) ) : '';
1017
1018
    $cart_details       = $invoice->get_cart_details();
1019
    $ajax_cart_details  = $cart_details;
1020
    ob_start();
1021
    ?>
1022
    <table class="table table-sm table-bordered table-responsive">
1023
        <thead>
1024
            <tr>
1025
                <th class="name"><strong><?php _e( "Item Name", "invoicing" );?></strong></th>
1026
                <th class="rate"><strong><?php _e( "Price", "invoicing" );?></strong></th>
1027
                <?php if ($quantities_enabled) { ?>
1028
                    <th class="qty"><strong><?php _e( "Qty", "invoicing" );?></strong></th>
1029
                <?php } ?>
1030
                <?php if ($use_taxes && !$zero_tax) { ?>
1031
                    <th class="tax"><strong><?php echo $tax_label . ' <span class="normal small">(%)</span>'; ?></strong></th>
1032
                <?php } ?>
1033
                <th class="total"><strong><?php echo __( "Item Total", "invoicing" ) . ' <span class="normal small">' . $tax_title . '<span>';?></strong></th>
1034
            </tr>
1035
        </thead>
1036
        <tbody>
1037
        <?php 
1038
            if ( !empty( $cart_details ) ) {
1039
                do_action( 'wpinv_display_line_items_start', $invoice );
1040
1041
                $count = 0;
1042
                $cols  = 3;
1043
                foreach ( $cart_details as $key => $cart_item ) {
1044
                    $item_id    = !empty($cart_item['id']) ? absint( $cart_item['id'] ) : '';
1045
                    $item_price = isset($cart_item["item_price"]) ? wpinv_round_amount( $cart_item["item_price"] ) : 0;
1046
                    $line_total = isset($cart_item["subtotal"]) ? wpinv_round_amount( $cart_item["subtotal"] ) : 0;
1047
                    $quantity   = !empty($cart_item['quantity']) && (int)$cart_item['quantity'] > 0 ? absint( $cart_item['quantity'] ) : 1;
1048
1049
                    $item       = $item_id ? new WPInv_Item( $item_id ) : NULL;
1050
                    $summary    = '';
1051
	                $item_name    = '';
1052
                    $cols       = 3;
1053
                    if ( !empty($item) ) {
1054
                        $item_name  = $item->get_name();
1055
                        $summary    = $item->get_summary();
1056
                    }
1057
                    $item_name  = !empty($cart_item['name']) ? $cart_item['name'] : $item_name;
1058
1059
                    $summary = apply_filters( 'wpinv_print_invoice_line_item_summary', $summary, $cart_item, $item, $invoice );
1060
1061
                    $item_tax       = '';
1062
                    $tax_rate       = '';
1063
                    if ( $use_taxes && $cart_item['tax'] > 0 && $cart_item['subtotal'] > 0 ) {
1064
                        $item_tax = wpinv_price( wpinv_format_amount( $cart_item['tax'] ), $invoice->get_currency() );
1065
                        $tax_rate = !empty( $cart_item['vat_rate'] ) ? $cart_item['vat_rate'] : ( $cart_item['tax'] / $cart_item['subtotal'] ) * 100;
1066
                        $tax_rate = $tax_rate > 0 ? (float)wpinv_round_amount( $tax_rate, 4 ) : '';
1067
                        $tax_rate = $tax_rate != '' ? ' <small class="tax-rate">(' . $tax_rate . '%)</small>' : '';
1068
                    }
1069
1070
                    $line_item_tax = $item_tax . $tax_rate;
1071
1072
                    if ( $line_item_tax === '' ) {
1073
                        $line_item_tax = 0; // Zero tax
1074
                    }
1075
1076
                    $action = apply_filters( 'wpinv_display_line_item_action', '', $cart_item, $invoice, $cols );
1077
1078
                    $line_item = '<tr class="row-' . ( ($count % 2 == 0) ? 'even' : 'odd' ) . ' wpinv-item">';
1079
                        $line_item .= '<td class="name">' . $action. esc_html__( $item_name, 'invoicing' ) . wpinv_get_item_suffix( $item );
1080
                        if ( $summary !== '' ) {
1081
                            $line_item .= '<br/><small class="meta">' . wpautop( wp_kses_post( $summary ) ) . '</small>';
1082
                        }
1083
                        $line_item .= '</td>';
1084
1085
                        $line_item .= '<td class="rate">' . esc_html__( wpinv_price( wpinv_format_amount( $item_price ), $invoice->get_currency() ) ) . '</td>';
1086
                        if ($quantities_enabled) {
1087
                            $cols++;
1088
                            $line_item .= '<td class="qty">' . $quantity . '</td>';
1089
                        }
1090
                        if ($use_taxes && !$zero_tax) {
1091
                            $cols++;
1092
                            $line_item .= '<td class="tax">' . $line_item_tax . '</td>';
1093
                        }
1094
                        $line_item .= '<td class="total">' . esc_html__( wpinv_price( wpinv_format_amount( $line_total ), $invoice->get_currency() ) ) . '</td>';
1095
                    $line_item .= '</tr>';
1096
1097
                    echo apply_filters( 'wpinv_display_line_item', $line_item, $cart_item, $invoice, $cols );
1098
1099
                    $count++;
1100
                }
1101
1102
                do_action( 'wpinv_display_before_subtotal', $invoice, $cols );
1103
                ?>
1104
                <tr class="row-sub-total row_odd">
1105
                    <td class="rate" colspan="<?php echo ( $cols - 1 ); ?>"><?php echo apply_filters( 'wpinv_print_cart_subtotal_label', '<strong>' . __( 'Sub Total', 'invoicing' ) . ':</strong>', $invoice ); ?></td>
1106
                    <td class="total"><strong><?php _e( wpinv_subtotal( $invoice_id, true ) ) ?></strong></td>
1107
                </tr>
1108
                <?php
1109
                do_action( 'wpinv_display_after_subtotal', $invoice, $cols );
1110
                
1111
                if ( wpinv_discount( $invoice_id, false ) > 0 ) {
1112
                    do_action( 'wpinv_display_before_discount', $invoice, $cols );
1113
                    ?>
1114
                        <tr class="row-discount">
1115
                            <td class="rate" colspan="<?php echo ( $cols - 1 ); ?>"><?php wpinv_get_discount_label( wpinv_discount_code( $invoice_id ) ); ?>:</td>
1116
                            <td class="total"><?php echo wpinv_discount( $invoice_id, true, true ); ?></td>
1117
                        </tr>
1118
                    <?php
1119
                    do_action( 'wpinv_display_after_discount', $invoice, $cols );
1120
                }
1121
1122
                if ( $use_taxes ) {
1123
                    do_action( 'wpinv_display_before_tax', $invoice, $cols );
1124
                    ?>
1125
                    <tr class="row-tax">
1126
                        <td class="rate" colspan="<?php echo ( $cols - 1 ); ?>"><?php echo apply_filters( 'wpinv_print_cart_tax_label', '<strong>' . $tax_label . ':</strong>', $invoice ); ?></td>
1127
                        <td class="total"><?php _e( wpinv_tax( $invoice_id, true ) ) ?></td>
1128
                    </tr>
1129
                    <?php
1130
                    do_action( 'wpinv_display_after_tax', $invoice, $cols );
1131
                }
1132
1133
                do_action( 'wpinv_display_before_total', $invoice, $cols );
1134
                ?>
1135
                <tr class="table-active row-total">
1136
                    <td class="rate" colspan="<?php echo ( $cols - 1 ); ?>"><?php echo apply_filters( 'wpinv_print_cart_total_label', '<strong>' . __( 'Total', 'invoicing' ) . ':</strong>', $invoice ); ?></td>
1137
                    <td class="total"><strong><?php _e( wpinv_payment_total( $invoice_id, true ) ) ?></strong></td>
1138
                </tr>
1139
                <?php
1140
                do_action( 'wpinv_display_after_total', $invoice, $cols );
1141
1142
                do_action( 'wpinv_display_line_end', $invoice, $cols );
1143
            }
1144
        ?>
1145
        </tbody>
1146
    </table>
1147
    <?php
1148
    echo ob_get_clean();
1149
}
1150
1151
/**
1152
 * @param WPInv_Invoice $invoice
1153
 */
1154
function wpinv_display_invoice_notes( $invoice ) {
1155
1156
    $notes = wpinv_get_invoice_notes( $invoice->ID, 'customer' );
1157
1158
    if ( empty( $notes ) ) {
1159
        return;
1160
    }
1161
1162
    echo '<div class="wpi_invoice_notes_container">';
1163
    echo '<h2>' . __( 'Invoice Notes', 'invoicing' ) .'</h2>';
1164
    echo '<ul class="wpi_invoice_notes">';
1165
1166
    foreach( $notes as $note ) {
1167
        wpinv_get_invoice_note_line_item( $note );
1168
    }
1169
1170
    echo '</ul>';
1171
    echo '</div>';
1172
}
1173
add_action( 'wpinv_invoice_print_after_line_items', 'wpinv_display_invoice_notes' );
1174
1175
function wpinv_display_invoice_totals( $invoice_id = 0 ) {
1176
    $use_taxes = wpinv_use_taxes();
1177
1178
    do_action( 'wpinv_before_display_totals_table', $invoice_id ); 
1179
    ?>
1180
    <table class="table table-sm table-bordered table-responsive">
1181
        <tbody>
1182
            <?php do_action( 'wpinv_before_display_totals' ); ?>
1183
            <tr class="row-sub-total">
1184
                <td class="rate"><strong><?php _e( 'Sub Total', 'invoicing' ); ?></strong></td>
1185
                <td class="total"><strong><?php _e( wpinv_subtotal( $invoice_id, true ) ) ?></strong></td>
1186
            </tr>
1187
            <?php do_action( 'wpinv_after_display_totals' ); ?>
1188
            <?php if ( wpinv_discount( $invoice_id, false ) > 0 ) { ?>
1189
                <tr class="row-discount">
1190
                    <td class="rate"><?php wpinv_get_discount_label( wpinv_discount_code( $invoice_id ) ); ?></td>
1191
                    <td class="total"><?php echo wpinv_discount( $invoice_id, true, true ); ?></td>
1192
                </tr>
1193
            <?php do_action( 'wpinv_after_display_discount' ); ?>
1194
            <?php } ?>
1195
            <?php if ( $use_taxes ) { ?>
1196
            <tr class="row-tax">
1197
                <td class="rate"><?php _e( 'Tax', 'invoicing' ); ?></td>
1198
                <td class="total"><?php _e( wpinv_tax( $invoice_id, true ) ) ?></td>
1199
            </tr>
1200
            <?php do_action( 'wpinv_after_display_tax' ); ?>
1201
            <?php } ?>
1202
            <?php if ( $fees = wpinv_get_fees( $invoice_id ) ) { ?>
1203
                <?php foreach ( $fees as $fee ) { ?>
1204
                    <tr class="row-fee">
1205
                        <td class="rate"><?php echo $fee['label']; ?></td>
1206
                        <td class="total"><?php echo $fee['amount_display']; ?></td>
1207
                    </tr>
1208
                <?php } ?>
1209
            <?php } ?>
1210
            <tr class="table-active row-total">
1211
                <td class="rate"><strong><?php _e( 'Total', 'invoicing' ) ?></strong></td>
1212
                <td class="total"><strong><?php _e( wpinv_payment_total( $invoice_id, true ) ) ?></strong></td>
1213
            </tr>
1214
            <?php do_action( 'wpinv_after_totals' ); ?>
1215
        </tbody>
1216
1217
    </table>
1218
1219
    <?php do_action( 'wpinv_after_totals_table' );
1220
}
1221
1222
function wpinv_display_payments_info( $invoice_id = 0, $echo = true ) {
1223
    $invoice = wpinv_get_invoice( $invoice_id );
1224
1225
    ob_start();
1226
    do_action( 'wpinv_before_display_payments_info', $invoice_id );
1227
    if ( ( $gateway_title = $invoice->get_gateway_title() ) || $invoice->is_paid() || $invoice->is_refunded() ) {
1228
        ?>
1229
        <div class="wpi-payment-info">
1230
            <p class="wpi-payment-gateway"><?php echo wp_sprintf( __( 'Payment via %s', 'invoicing' ), $gateway_title ? $gateway_title : __( 'Manually', 'invoicing' ) ); ?></p>
1231
            <?php if ( $gateway_title ) { ?>
1232
            <p class="wpi-payment-transid"><?php echo wp_sprintf( __( 'Transaction ID: %s', 'invoicing' ), $invoice->get_transaction_id() ); ?></p>
1233
            <?php } ?>
1234
        </div>
1235
        <?php
1236
    }
1237
    do_action( 'wpinv_after_display_payments_info', $invoice_id );
1238
    $outout = ob_get_clean();
1239
1240
    if ( $echo ) {
1241
        echo $outout;
1242
    } else {
1243
        return $outout;
1244
    }
1245
}
1246
1247
function wpinv_display_style( $invoice ) {
1248
    wp_register_style( 'wpinv-single-style', WPINV_PLUGIN_URL . 'assets/css/invoice.css', array(), WPINV_VERSION );
1249
1250
    wp_print_styles( 'open-sans' );
1251
    wp_print_styles( 'wpinv-single-style' );
1252
1253
    $custom_css = wpinv_get_option('template_custom_css');
1254
    if(isset($custom_css) && !empty($custom_css)){
1255
        $custom_css     = wp_kses( $custom_css, array( '\'', '\"' ) );
0 ignored issues
show
Bug introduced by
array(''', '\"') of type array<integer,string> is incompatible with the type array<mixed,array>|string expected by parameter $allowed_html of wp_kses(). ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

1255
        $custom_css     = wp_kses( $custom_css, /** @scrutinizer ignore-type */ array( '\'', '\"' ) );
Loading history...
1256
        $custom_css     = str_replace( '&gt;', '>', $custom_css );
1257
        echo '<style type="text/css">';
1258
        echo $custom_css;
1259
        echo '</style>';
1260
    }
1261
}
1262
add_action( 'wpinv_invoice_print_head', 'wpinv_display_style' );
1263
add_action( 'wpinv_invalid_invoice_head', 'wpinv_display_style' );
1264
1265
function wpinv_checkout_billing_details() {
1266
    $invoice_id = (int)wpinv_get_invoice_cart_id();
1267
    if (empty($invoice_id)) {
1268
        wpinv_error_log( 'Invoice id not found', 'ERROR', __FILE__, __LINE__ );
1269
        return null;
1270
    }
1271
1272
    $invoice = wpinv_get_invoice_cart( $invoice_id );
1273
    if (empty($invoice)) {
1274
        wpinv_error_log( 'Invoice not found', 'ERROR', __FILE__, __LINE__ );
1275
        return null;
1276
    }
1277
    $user_id        = $invoice->get_user_id();
1278
    $user_info      = $invoice->get_user_info();
1279
    $address_info   = wpinv_get_user_address( $user_id );
1280
1281
    if ( empty( $user_info['first_name'] ) && !empty( $user_info['first_name'] ) ) {
1282
        $user_info['first_name'] = $user_info['first_name'];
1283
        $user_info['last_name'] = $user_info['last_name'];
1284
    }
1285
1286
    if ( ( ( empty( $user_info['country'] ) && !empty( $address_info['country'] ) ) || ( empty( $user_info['state'] ) && !empty( $address_info['state'] ) && $user_info['country'] == $address_info['country'] ) ) ) {
1287
        $user_info['country']   = $address_info['country'];
1288
        $user_info['state']     = $address_info['state'];
1289
        $user_info['city']      = $address_info['city'];
1290
        $user_info['zip']       = $address_info['zip'];
1291
    }
1292
1293
    $address_fields = array(
1294
        'user_id',
1295
        'company',
1296
        'vat_number',
1297
        'email',
1298
        'phone',
1299
        'address'
1300
    );
1301
1302
    foreach ( $address_fields as $field ) {
1303
        if ( empty( $user_info[$field] ) ) {
1304
            $user_info[$field] = $address_info[$field];
1305
        }
1306
    }
1307
1308
    return apply_filters( 'wpinv_checkout_billing_details', $user_info, $invoice );
1309
}
1310
1311
function wpinv_admin_get_line_items($invoice = array()) {
1312
    $item_quantities    = wpinv_item_quantities_enabled();
1313
    $use_taxes          = wpinv_use_taxes();
1314
1315
    if ( empty( $invoice ) ) {
1316
        return NULL;
1317
    }
1318
1319
    $cart_items = $invoice->get_cart_details();
1320
    if ( empty( $cart_items ) ) {
1321
        return NULL;
1322
    }
1323
    ob_start();
1324
1325
    do_action( 'wpinv_admin_before_line_items', $cart_items, $invoice );
1326
1327
    $count = 0;
1328
    foreach ( $cart_items as $key => $cart_item ) {
1329
        $item_id    = $cart_item['id'];
1330
        $wpi_item   = $item_id > 0 ? new WPInv_Item( $item_id ) : NULL;
1331
1332
        if (empty($wpi_item)) {
1333
            continue;
1334
        }
1335
1336
        $item_price     = wpinv_price( wpinv_format_amount( $cart_item['item_price'] ), $invoice->get_currency() );
1337
        $quantity       = !empty( $cart_item['quantity'] ) && $cart_item['quantity'] > 0 ? $cart_item['quantity'] : 1;
1338
        $item_subtotal  = wpinv_price( wpinv_format_amount( $cart_item['subtotal'] ), $invoice->get_currency() );
1339
        $can_remove     = true;
1340
1341
        $summary = apply_filters( 'wpinv_admin_invoice_line_item_summary', '', $cart_item, $wpi_item, $invoice );
1342
1343
        $item_tax       = '';
1344
        $tax_rate       = '';
1345
        if ( $cart_item['tax'] > 0 && $cart_item['subtotal'] > 0 ) {
1346
            $item_tax = wpinv_price( wpinv_format_amount( $cart_item['tax'] ), $invoice->get_currency() );
1347
            $tax_rate = !empty( $cart_item['vat_rate'] ) ? $cart_item['vat_rate'] : ( $cart_item['tax'] / $cart_item['subtotal'] ) * 100;
1348
            $tax_rate = $tax_rate > 0 ? (float)wpinv_round_amount( $tax_rate, 4 ) : '';
1349
            $tax_rate = $tax_rate != '' ? ' <span class="tax-rate">(' . $tax_rate . '%)</span>' : '';
1350
        }
1351
        $line_item_tax = $item_tax . $tax_rate;
1352
1353
        if ( $line_item_tax === '' ) {
1354
            $line_item_tax = 0; // Zero tax
1355
        }
1356
1357
        $line_item = '<tr class="item item-' . ( ($count % 2 == 0) ? 'even' : 'odd' ) . '" data-item-id="' . $item_id . '">';
1358
            $line_item .= '<td class="id">' . $item_id . '</td>';
1359
            $line_item .= '<td class="title"><a href="' . get_edit_post_link( $item_id ) . '" target="_blank">' . $cart_item['name'] . '</a>' . wpinv_get_item_suffix( $wpi_item );
1360
            if ( $summary !== '' ) {
1361
                $line_item .= '<span class="meta">' . wpautop( wp_kses_post( $summary ) ) . '</span>';
1362
            }
1363
            $line_item .= '</td>';
1364
            $line_item .= '<td class="price">' . $item_price . '</td>';
1365
            
1366
            if ( $item_quantities ) {
1367
                if ( count( $cart_items ) == 1 && $quantity <= 1 ) {
1368
                    $can_remove = false;
0 ignored issues
show
Unused Code introduced by
The assignment to $can_remove is dead and can be removed.
Loading history...
1369
                }
1370
                $line_item .= '<td class="qty" data-quantity="' . $quantity . '">&nbsp;&times;&nbsp;' . $quantity . '</td>';
1371
            } else {
1372
                if ( count( $cart_items ) == 1 ) {
1373
                    $can_remove = false;
1374
                }
1375
            }
1376
            $line_item .= '<td class="total">' . $item_subtotal . '</td>';
1377
            
1378
            if ( $use_taxes ) {
1379
                $line_item .= '<td class="tax">' . $line_item_tax . '</td>';
1380
            }
1381
            $line_item .= '<td class="action">';
1382
            if ( !$invoice->is_paid() && !$invoice->is_refunded() ) {
1383
                $line_item .= '<i class="fa fa-remove wpinv-item-remove"></i>';
1384
            }
1385
            $line_item .= '</td>';
1386
        $line_item .= '</tr>';
1387
1388
        echo apply_filters( 'wpinv_admin_line_item', $line_item, $cart_item, $invoice );
1389
1390
        $count++;
1391
    } 
1392
1393
    do_action( 'wpinv_admin_after_line_items', $cart_items, $invoice );
1394
1395
    return ob_get_clean();
1396
}
1397
1398
function wpinv_checkout_form() {
1399
    global $wpi_checkout_id;
1400
1401
    // Set current invoice id.
1402
    $wpi_checkout_id = wpinv_get_invoice_cart_id();
1403
1404
    //Maybe update the prices
1405
    if(! empty( $_GET['wpi_dynamic_item'] ) && ! empty( $_GET['wpi_dynamic_price'] ) ) {
1406
1407
        //If the invoice exists, update it with new pricing details
1408
        if (! empty( $wpi_checkout_id ) ) {
1409
1410
            $_invoice       = wpinv_get_invoice_cart();
1411
            $_cart_details  = $_invoice->get_cart_details();
1412
            $_dynamic_item  = sanitize_text_field( $_GET['wpi_dynamic_item'] );
1413
1414
            //First, fetch the item
1415
            $item    = new WPInv_Item( $_dynamic_item );
1416
    
1417
            //Next, ensure it supports dynamic pricing...
1418
            if( $item->supports_dynamic_pricing() && $item->get_is_dynamic_pricing() ) {
1419
                
1420
                //... and that the new price is not lower than the minimum price
1421
                $_dynamic_price = (float) wpinv_sanitize_amount( sanitize_text_field( $_GET['wpi_dynamic_price'] ) );
1422
                if( $_dynamic_price < $item->get_minimum_price() ) {
1423
                    $_dynamic_price = $item->get_minimum_price();
1424
                }
1425
1426
                //Finally, update our invoice with the new price
1427
                if ( !empty( $_cart_details ) ) {
1428
1429
                    foreach ( $_cart_details as $key => $item ) {
1430
                        if ( !empty( $item['id'] ) && $_dynamic_item == $item['id'] ) {
1431
                            $_cart_details[$key]['custom_price'] = $_dynamic_price;
1432
                            $_cart_details[$key]['item_price']   = $_dynamic_price;
1433
                        }
1434
                    }
1435
1436
                    $_meta = $_invoice->get_meta();
1437
                    $_meta['cart_details'] = $_cart_details;
1438
                    $_invoice->set( 'payment_meta', $_meta );
1439
                    $_invoice->set( 'cart_details', $_cart_details );
1440
                    $_invoice->recalculate_totals();
1441
1442
                }
1443
1444
            }
1445
            
1446
        }
1447
1448
    }
1449
1450
    $form_action  = esc_url( wpinv_get_checkout_uri() );
0 ignored issues
show
Bug introduced by
It seems like wpinv_get_checkout_uri() can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

1450
    $form_action  = esc_url( /** @scrutinizer ignore-type */ wpinv_get_checkout_uri() );
Loading history...
1451
1452
    ob_start();
1453
	    do_action( 'wpinv_checkout_content_before' );
1454
        echo '<div id="wpinv_checkout_wrap">';
1455
1456
        if ( wpinv_get_cart_contents() || wpinv_cart_has_fees() ) {
1457
            ?>
1458
            <div id="wpinv_checkout_form_wrap" class="wpinv_clearfix table-responsive">
1459
                <?php do_action( 'wpinv_before_checkout_form' ); ?>
1460
                <form id="wpinv_checkout_form" class="wpi-form" action="<?php echo $form_action; ?>" method="POST">
1461
                    <?php
1462
                    do_action( 'wpinv_checkout_form_top' );
1463
                    do_action( 'wpinv_checkout_billing_info' );
1464
                    do_action( 'wpinv_checkout_cart' );
1465
                    do_action( 'wpinv_payment_mode_select'  );
1466
                    do_action( 'wpinv_checkout_form_bottom' )
1467
                    ?>
1468
                </form>
1469
                <?php do_action( 'wpinv_after_purchase_form' ); ?>
1470
            </div><!--end #wpinv_checkout_form_wrap-->
1471
        <?php
1472
        } else {
1473
            do_action( 'wpinv_cart_empty' );
1474
        }
1475
        echo '</div><!--end #wpinv_checkout_wrap-->';
1476
	    do_action( 'wpinv_checkout_content_after' );
1477
    return ob_get_clean();
1478
}
1479
1480
function wpinv_checkout_cart( $cart_details = array(), $echo = true ) {
1481
    global $ajax_cart_details;
1482
    $ajax_cart_details = $cart_details;
1483
1484
    ob_start();
1485
    do_action( 'wpinv_before_checkout_cart' );
1486
    echo '<div id="wpinv_checkout_cart_form" method="post">';
1487
        echo '<div id="wpinv_checkout_cart_wrap">';
1488
            wpinv_get_template_part( 'wpinv-checkout-cart' );
1489
        echo '</div>';
1490
    echo '</div>';
1491
    do_action( 'wpinv_after_checkout_cart' );
1492
    $content = ob_get_clean();
1493
1494
    if ( $echo ) {
1495
        echo $content;
1496
    } else {
1497
        return $content;
1498
    }
1499
}
1500
add_action( 'wpinv_checkout_cart', 'wpinv_checkout_cart', 10 );
1501
1502
function wpinv_empty_cart_message() {
1503
	return apply_filters( 'wpinv_empty_cart_message', '<span class="wpinv_empty_cart">' . __( 'Your cart is empty.', 'invoicing' ) . '</span>' );
1504
}
1505
1506
/**
1507
 * Echoes the Empty Cart Message
1508
 *
1509
 * @since 1.0
1510
 * @return void
1511
 */
1512
function wpinv_empty_checkout_cart() {
1513
	echo wpinv_empty_cart_message();
1514
}
1515
add_action( 'wpinv_cart_empty', 'wpinv_empty_checkout_cart' );
1516
1517
function wpinv_update_cart_button() {
1518
    if ( !wpinv_item_quantities_enabled() )
1519
        return;
1520
?>
1521
    <input type="submit" name="wpinv_update_cart_submit" class="wpinv-submit wpinv-no-js button" value="<?php _e( 'Update Cart', 'invoicing' ); ?>"/>
1522
    <input type="hidden" name="wpi_action" value="update_cart"/>
1523
<?php
1524
}
1525
1526
function wpinv_checkout_cart_columns() {
1527
    $default = 3;
1528
    if ( wpinv_item_quantities_enabled() ) {
1529
        $default++;
1530
    }
1531
    
1532
    if ( wpinv_use_taxes() ) {
1533
        $default++;
1534
    }
1535
1536
    return apply_filters( 'wpinv_checkout_cart_columns', $default );
1537
}
1538
1539
function wpinv_display_cart_messages() {
1540
    global $wpi_session;
1541
1542
    $messages = $wpi_session->get( 'wpinv_cart_messages' );
1543
1544
    if ( $messages ) {
1545
        foreach ( $messages as $message_id => $message ) {
1546
            // Try and detect what type of message this is
1547
            if ( strpos( strtolower( $message ), 'error' ) ) {
1548
                $type = 'error';
1549
            } elseif ( strpos( strtolower( $message ), 'success' ) ) {
1550
                $type = 'success';
1551
            } else {
1552
                $type = 'info';
1553
            }
1554
1555
            $classes = apply_filters( 'wpinv_' . $type . '_class', array( 'wpinv_errors', 'wpinv-alert', 'wpinv-alert-' . $type ) );
1556
1557
            echo '<div class="' . implode( ' ', $classes ) . '">';
1558
                // Loop message codes and display messages
1559
                    echo '<p class="wpinv_error" id="wpinv_msg_' . $message_id . '">' . $message . '</p>';
1560
            echo '</div>';
1561
        }
1562
1563
        // Remove all of the cart saving messages
1564
        $wpi_session->set( 'wpinv_cart_messages', null );
1565
    }
1566
}
1567
add_action( 'wpinv_before_checkout_cart', 'wpinv_display_cart_messages' );
1568
1569
function wpinv_discount_field() {
1570
    if ( isset( $_GET['wpi-gateway'] ) && wpinv_is_ajax_disabled() ) {
1571
        return; // Only show before a payment method has been selected if ajax is disabled
1572
    }
1573
1574
    if ( !wpinv_is_checkout() ) {
1575
        return;
1576
    }
1577
1578
    if ( wpinv_has_active_discounts() && wpinv_get_cart_total() ) {
1579
    ?>
1580
    <div id="wpinv-discount-field" class="panel panel-default">
1581
        <div class="panel-body">
1582
            <p>
1583
                <label class="wpinv-label" for="wpinv_discount_code"><strong><?php _e( 'Discount', 'invoicing' ); ?></strong></label>
1584
                <span class="wpinv-description"><?php _e( 'Enter a discount code if you have one.', 'invoicing' ); ?></span>
1585
            </p>
1586
            <div class="form-group row">
1587
                <div class="col-sm-4">
1588
                    <input class="wpinv-input form-control" type="text" id="wpinv_discount_code" name="wpinv_discount_code" placeholder="<?php _e( 'Enter discount code', 'invoicing' ); ?>"/>
1589
                </div>
1590
                <div class="col-sm-3">
1591
                    <button id="wpi-apply-discount" type="button" class="btn btn-success btn-sm"><?php _e( 'Apply Discount', 'invoicing' ); ?></button>
1592
                </div>
1593
                <div style="clear:both"></div>
1594
                <div class="col-sm-12 wpinv-discount-msg">
1595
                    <div class="alert alert-success"><i class="fa fa-check-circle"></i><span class="wpi-msg"></span></div>
1596
                    <div class="alert alert-error"><i class="fa fa-warning"></i><span class="wpi-msg"></span></div>
1597
                </div>
1598
            </div>
1599
        </div>
1600
    </div>
1601
<?php
1602
    }
1603
}
1604
add_action( 'wpinv_after_checkout_cart', 'wpinv_discount_field', -10 );
1605
1606
function wpinv_agree_to_terms_js() {
1607
    if ( wpinv_get_option( 'show_agree_to_terms', false ) ) {
1608
?>
1609
<script type="text/javascript">
1610
    jQuery(document).ready(function($){
1611
        $( document.body ).on('click', '.wpinv_terms_links', function(e) {
1612
            //e.preventDefault();
1613
            $('#wpinv_terms').slideToggle();
1614
            $('.wpinv_terms_links').toggle();
1615
            return false;
1616
        });
1617
    });
1618
</script>
1619
<?php
1620
    }
1621
}
1622
add_action( 'wpinv_checkout_form_top', 'wpinv_agree_to_terms_js' );
1623
1624
function wpinv_payment_mode_select() {
1625
    $gateways = wpinv_get_enabled_payment_gateways( true );
1626
    $gateways = apply_filters( 'wpinv_payment_gateways_on_cart', $gateways );
1627
    $invoice = wpinv_get_invoice( 0, true );
1628
1629
    do_action('wpinv_payment_mode_top');
1630
    $invoice_id = (int)$invoice->ID;
1631
    $chosen_gateway = wpinv_get_chosen_gateway( $invoice_id );
1632
    ?>
1633
    <div id="wpinv_payment_mode_select" data-gateway="<?php echo $chosen_gateway; ?>" <?php echo ( $invoice->is_free() ? 'style="display:none;" data-free="1"' : '' ); ?>>
1634
            <?php do_action( 'wpinv_payment_mode_before_gateways_wrap' ); ?>
1635
            <div id="wpinv-payment-mode-wrap" class="panel panel-default">
1636
                <div class="panel-heading"><h3 class="panel-title"><?php _e( 'Select Payment Method', 'invoicing' ); ?></h3></div>
1637
                <div class="panel-body list-group wpi-payment_methods">
1638
                    <?php
1639
                    do_action( 'wpinv_payment_mode_before_gateways' );
1640
1641
                    if ( !empty( $gateways ) ) {
1642
                        foreach ( $gateways as $gateway_id => $gateway ) {
1643
                            $checked       = checked( $gateway_id, $chosen_gateway, false );
1644
                            $button_label  = wpinv_get_gateway_button_label( $gateway_id );
1645
                            $gateway_label = wpinv_get_gateway_checkout_label( $gateway_id );
1646
                            $description   = wpinv_get_gateway_description( $gateway_id );
1647
                            ?>
1648
                            <div class="list-group-item">
1649
                                <div class="radio">
1650
                                    <label><input type="radio" data-button-text="<?php echo esc_attr( $button_label );?>" value="<?php echo esc_attr( $gateway_id ) ;?>" <?php echo $checked ;?> id="wpi_gateway_<?php echo esc_attr( $gateway_id );?>" name="wpi-gateway" class="wpi-pmethod"><?php echo esc_html( $gateway_label ); ?></label>
1651
                                </div>
1652
                                <div style="display:none;" class="payment_box wpi_gateway_<?php echo esc_attr( $gateway_id );?>" role="alert">
1653
                                    <?php if ( !empty( $description ) ) { ?>
1654
                                        <div class="wpi-gateway-desc alert alert-info"><?php _e( $description, 'invoicing' ); ?></div>
1655
                                    <?php } ?>
1656
                                    <?php do_action( 'wpinv_' . $gateway_id . '_cc_form', $invoice_id ) ;?>
1657
                                </div>
1658
                            </div>
1659
                            <?php
1660
                        }
1661
                    } else {
1662
                        echo '<div class="alert alert-warning">'. __( 'No payment gateway active', 'invoicing' ) .'</div>';
1663
                    }
1664
1665
                    do_action( 'wpinv_payment_mode_after_gateways' );
1666
                    ?>
1667
                </div>
1668
            </div>
1669
            <?php do_action( 'wpinv_payment_mode_after_gateways_wrap' ); ?>
1670
    </div>
1671
    <?php
1672
    do_action('wpinv_payment_mode_bottom');
1673
}
1674
add_action( 'wpinv_payment_mode_select', 'wpinv_payment_mode_select' );
1675
1676
function wpinv_checkout_billing_info() {
1677
    if ( wpinv_is_checkout() ) {
1678
        $billing_details    = wpinv_checkout_billing_details();
1679
        $selected_country   = !empty( $billing_details['country'] ) ? $billing_details['country'] : wpinv_default_billing_country();
1680
        ?>
1681
        <div id="wpinv-fields" class="clearfix">
1682
            <div id="wpi-billing" class="wpi-billing clearfix panel panel-default">
1683
                <div class="panel-heading"><h3 class="panel-title"><?php _e( 'Billing Details', 'invoicing' );?></h3></div>
1684
                <div id="wpinv-fields-box" class="panel-body">
1685
                    <?php do_action( 'wpinv_checkout_billing_fields_first', $billing_details ); ?>
1686
                    <p class="wpi-cart-field wpi-col2 wpi-colf">
1687
                        <label for="wpinv_first_name" class="wpi-label"><?php _e( 'First Name', 'invoicing' );?><?php if ( wpinv_get_option( 'fname_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1688
                        <?php
1689
                        echo wpinv_html_text( array(
1690
                                'id'            => 'wpinv_first_name',
1691
                                'name'          => 'wpinv_first_name',
1692
                                'value'         => $billing_details['first_name'],
1693
                                'class'         => 'wpi-input form-control',
1694
                                'placeholder'   => __( 'First name', 'invoicing' ),
1695
                                'required'      => (bool)wpinv_get_option( 'fname_mandatory' ),
1696
                            ) );
1697
                        ?>
1698
                    </p>
1699
                    <p class="wpi-cart-field wpi-col2 wpi-coll">
1700
                        <label for="wpinv_last_name" class="wpi-label"><?php _e( 'Last Name', 'invoicing' );?><?php if ( wpinv_get_option( 'lname_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1701
                        <?php
1702
                        echo wpinv_html_text( array(
1703
                                'id'            => 'wpinv_last_name',
1704
                                'name'          => 'wpinv_last_name',
1705
                                'value'         => $billing_details['last_name'],
1706
                                'class'         => 'wpi-input form-control',
1707
                                'placeholder'   => __( 'Last name', 'invoicing' ),
1708
                                'required'      => (bool)wpinv_get_option( 'lname_mandatory' ),
1709
                            ) );
1710
                        ?>
1711
                    </p>
1712
                    <p class="wpi-cart-field wpi-col2 wpi-colf">
1713
                        <label for="wpinv_address" class="wpi-label"><?php _e( 'Address', 'invoicing' );?><?php if ( wpinv_get_option( 'address_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1714
                        <?php
1715
                        echo wpinv_html_text( array(
1716
                                'id'            => 'wpinv_address',
1717
                                'name'          => 'wpinv_address',
1718
                                'value'         => $billing_details['address'],
1719
                                'class'         => 'wpi-input form-control',
1720
                                'placeholder'   => __( 'Address', 'invoicing' ),
1721
                                'required'      => (bool)wpinv_get_option( 'address_mandatory' ),
1722
                            ) );
1723
                        ?>
1724
                    </p>
1725
                    <p class="wpi-cart-field wpi-col2 wpi-coll">
1726
                        <label for="wpinv_city" class="wpi-label"><?php _e( 'City', 'invoicing' );?><?php if ( wpinv_get_option( 'city_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1727
                        <?php
1728
                        echo wpinv_html_text( array(
1729
                                'id'            => 'wpinv_city',
1730
                                'name'          => 'wpinv_city',
1731
                                'value'         => $billing_details['city'],
1732
                                'class'         => 'wpi-input form-control',
1733
                                'placeholder'   => __( 'City', 'invoicing' ),
1734
                                'required'      => (bool)wpinv_get_option( 'city_mandatory' ),
1735
                            ) );
1736
                        ?>
1737
                    </p>
1738
                    <p id="wpinv_country_box" class="wpi-cart-field wpi-col2 wpi-colf">
1739
                        <label for="wpinv_country" class="wpi-label"><?php _e( 'Country', 'invoicing' );?><?php if ( wpinv_get_option( 'country_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1740
                        <?php echo wpinv_html_select( array(
1741
                            'options'          => wpinv_get_country_list(),
1742
                            'name'             => 'wpinv_country',
1743
                            'id'               => 'wpinv_country',
1744
                            'selected'         => $selected_country,
1745
                            'show_option_all'  => false,
1746
                            'show_option_none' => false,
1747
                            'class'            => 'wpi-input form-control wpi_select2',
1748
                            'placeholder'      => __( 'Choose a country', 'invoicing' ),
1749
                            'required'         => (bool)wpinv_get_option( 'country_mandatory' ),
1750
                        ) ); ?>
1751
                    </p>
1752
                    <p id="wpinv_state_box" class="wpi-cart-field wpi-col2 wpi-coll">
1753
                        <label for="wpinv_state" class="wpi-label"><?php _e( 'State / Province', 'invoicing' );?><?php if ( wpinv_get_option( 'state_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1754
                        <?php
1755
                        $states = wpinv_get_country_states( $selected_country );
1756
                        if( !empty( $states ) ) {
1757
                            echo wpinv_html_select( array(
1758
                                'options'          => $states,
1759
                                'name'             => 'wpinv_state',
1760
                                'id'               => 'wpinv_state',
1761
                                'selected'         => $billing_details['state'],
1762
                                'show_option_all'  => false,
1763
                                'show_option_none' => false,
1764
                                'class'            => 'wpi-input form-control wpi_select2',
1765
                                'placeholder'      => __( 'Choose a state', 'invoicing' ),
1766
                                'required'         => (bool)wpinv_get_option( 'state_mandatory' ),
1767
                            ) );
1768
                        } else {
1769
                            echo wpinv_html_text( array(
1770
                                'name'          => 'wpinv_state',
1771
                                'value'         => $billing_details['state'],
1772
                                'id'            => 'wpinv_state',
1773
                                'class'         => 'wpi-input form-control',
1774
                                'placeholder'   => __( 'State / Province', 'invoicing' ),
1775
                                'required'      => (bool)wpinv_get_option( 'state_mandatory' ),
1776
                            ) );
1777
                        }
1778
                        ?>
1779
                    </p>
1780
                    <p class="wpi-cart-field wpi-col2 wpi-colf">
1781
                        <label for="wpinv_zip" class="wpi-label"><?php _e( 'ZIP / Postcode', 'invoicing' );?><?php if ( wpinv_get_option( 'zip_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1782
                        <?php
1783
                        echo wpinv_html_text( array(
1784
                                'name'          => 'wpinv_zip',
1785
                                'value'         => $billing_details['zip'],
1786
                                'id'            => 'wpinv_zip',
1787
                                'class'         => 'wpi-input form-control',
1788
                                'placeholder'   => __( 'ZIP / Postcode', 'invoicing' ),
1789
                                'required'      => (bool)wpinv_get_option( 'zip_mandatory' ),
1790
                            ) );
1791
                        ?>
1792
                    </p>
1793
                    <p class="wpi-cart-field wpi-col2 wpi-coll">
1794
                        <label for="wpinv_phone" class="wpi-label"><?php _e( 'Phone', 'invoicing' );?><?php if ( wpinv_get_option( 'phone_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1795
                        <?php
1796
                        echo wpinv_html_text( array(
1797
                                'id'            => 'wpinv_phone',
1798
                                'name'          => 'wpinv_phone',
1799
                                'value'         => $billing_details['phone'],
1800
                                'class'         => 'wpi-input form-control',
1801
                                'placeholder'   => __( 'Phone', 'invoicing' ),
1802
                                'required'      => (bool)wpinv_get_option( 'phone_mandatory' ),
1803
                            ) );
1804
                        ?>
1805
                    </p>
1806
                    <?php do_action( 'wpinv_checkout_billing_fields_last', $billing_details ); ?>
1807
                    <div class="clearfix"></div>
1808
                </div>
1809
            </div>
1810
            <?php do_action( 'wpinv_after_billing_fields', $billing_details ); ?>
1811
        </div>
1812
        <?php
1813
    }
1814
}
1815
add_action( 'wpinv_checkout_billing_info', 'wpinv_checkout_billing_info' );
1816
1817
function wpinv_checkout_hidden_fields() {
1818
?>
1819
    <?php if ( is_user_logged_in() ) { ?>
1820
    <input type="hidden" name="wpinv_user_id" value="<?php echo get_current_user_id(); ?>"/>
1821
    <?php } ?>
1822
    <input type="hidden" name="wpi_action" value="payment" />
1823
<?php
1824
}
1825
1826
function wpinv_checkout_button_purchase() {
1827
    ob_start();
1828
?>
1829
    <input type="submit" class="btn btn-success wpinv-submit" id="wpinv-payment-button" data-value="<?php esc_attr_e( 'Proceed to Pay', 'invoicing' ) ?>" name="wpinv_payment" value="<?php esc_attr_e( 'Proceed to Pay', 'invoicing' ) ?>"/>
1830
<?php
1831
    return apply_filters( 'wpinv_checkout_button_purchase', ob_get_clean() );
1832
}
1833
1834
function wpinv_checkout_total() {
1835
    global $cart_total;
1836
?>
1837
<div id="wpinv_checkout_total" class="panel panel-info">
1838
    <div class="panel-body">
1839
    <?php
1840
    do_action( 'wpinv_purchase_form_before_checkout_total' );
1841
    ?>
1842
    <strong><?php _e( 'Invoice Total:', 'invoicing' ) ?></strong> <span class="wpinv-chdeckout-total"><?php echo $cart_total;?></span>
1843
    <?php
1844
    do_action( 'wpinv_purchase_form_after_checkout_total' );
1845
    ?>
1846
    </div>
1847
</div>
1848
<?php
1849
}
1850
add_action( 'wpinv_checkout_form_bottom', 'wpinv_checkout_total', 9998 );
1851
1852
function wpinv_checkout_accept_tandc() {
1853
    $page = wpinv_get_option( 'tandc_page' );
1854
    ?>
1855
    <div id="wpinv_checkout_tandc" class="panel panel-success">
1856
        <div class="panel-body">
1857
            <?php echo wpinv_get_policy_text(); ?>
1858
            <?php
1859
            if(isset($page) && (int)$page > 0 && apply_filters( 'wpinv_checkout_show_terms', true )){
1860
                $terms_link = esc_url( get_permalink( $page ) );
0 ignored issues
show
Bug introduced by
It seems like get_permalink($page) can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

1860
                $terms_link = esc_url( /** @scrutinizer ignore-type */ get_permalink( $page ) );
Loading history...
1861
                ?>
1862
                <label class="">
1863
                    <input type="checkbox" class="wpi-terms-checkbox" name="wpi_terms" id="wpi-terms" <?php checked( apply_filters( 'wpinv_terms_is_checked_default', isset( $_POST['wpi_terms'] ) ), true ); ?>> <span><?php printf( __( 'I&rsquo;ve read and accept the <a href="%s" target="_blank" class="wpi-terms-and-conditions-link">terms &amp; conditions</a>', 'invoicing' ), $terms_link ); ?></span> <span class="wpi-required">*</span>
1864
                </label>
1865
            <?php } ?>
1866
        </div>
1867
    </div>
1868
    <?php
1869
}
1870
add_action( 'wpinv_checkout_form_bottom', 'wpinv_checkout_accept_tandc', 9995 );
1871
1872
function wpinv_checkout_submit() {
1873
?>
1874
<div id="wpinv_purchase_submit" class="panel panel-success">
1875
    <div class="panel-body text-center">
1876
    <?php
1877
    do_action( 'wpinv_purchase_form_before_submit' );
1878
    wpinv_checkout_hidden_fields();
1879
    echo wpinv_checkout_button_purchase();
1880
    do_action( 'wpinv_purchase_form_after_submit' );
1881
    ?>
1882
    </div>
1883
</div>
1884
<?php
1885
}
1886
add_action( 'wpinv_checkout_form_bottom', 'wpinv_checkout_submit', 9999 );
1887
1888
function wpinv_receipt_billing_address( $invoice_id = 0 ) {
1889
    $invoice = wpinv_get_invoice( $invoice_id );
1890
1891
    if ( empty( $invoice ) ) {
1892
        return NULL;
1893
    }
1894
1895
    $billing_details = $invoice->get_user_info();
1896
    $address_row = wpinv_get_invoice_address_markup( $billing_details );
1897
1898
    ob_start();
1899
    ?>
1900
    <table class="table table-bordered table-sm wpi-billing-details">
1901
        <tbody>
1902
            <tr class="wpi-receipt-name">
1903
                <th class="text-left"><?php _e( 'Name', 'invoicing' ); ?></th>
1904
                <td><?php echo esc_html( trim( $billing_details['first_name'] . ' ' . $billing_details['last_name'] ) ) ;?></td>
1905
            </tr>
1906
            <tr class="wpi-receipt-email">
1907
                <th class="text-left"><?php _e( 'Email', 'invoicing' ); ?></th>
1908
                <td><?php echo $billing_details['email'] ;?></td>
1909
            </tr>
1910
            <tr class="wpi-receipt-address">
1911
                <th class="text-left"><?php _e( 'Address', 'invoicing' ); ?></th>
1912
                <td><?php echo $address_row ;?></td>
1913
            </tr>
1914
            <?php if ( $billing_details['phone'] ) { ?>
1915
            <tr class="wpi-receipt-phone">
1916
                <th class="text-left"><?php _e( 'Phone', 'invoicing' ); ?></th>
1917
                <td><?php echo esc_html( $billing_details['phone'] ) ;?></td>
1918
            </tr>
1919
            <?php } ?>
1920
        </tbody>
1921
    </table>
1922
    <?php
1923
    $output = ob_get_clean();
1924
    
1925
    $output = apply_filters( 'wpinv_receipt_billing_address', $output, $invoice_id );
1926
1927
    echo $output;
1928
}
1929
1930
function wpinv_filter_success_page_content( $content ) {
1931
    if ( isset( $_GET['payment-confirm'] ) && wpinv_is_success_page() ) {
1932
        if ( has_filter( 'wpinv_payment_confirm_' . sanitize_text_field( $_GET['payment-confirm'] ) ) ) {
1933
            $content = apply_filters( 'wpinv_payment_confirm_' . sanitize_text_field( $_GET['payment-confirm'] ), $content );
1934
        }
1935
    }
1936
1937
    return $content;
1938
}
1939
add_filter( 'the_content', 'wpinv_filter_success_page_content', 99999 );
1940
1941
function wpinv_receipt_actions( $invoice ) {
1942
    if ( !empty( $invoice ) ) {
1943
        $actions = array();
1944
1945
        if ( wpinv_user_can_view_invoice( $invoice->ID ) ) {
1946
            $actions['print']   = array(
1947
                'url'  => $invoice->get_view_url( true ),
1948
                'name' => __( 'Print Invoice', 'invoicing' ),
1949
                'class' => 'btn-primary',
1950
            );
1951
        }
1952
1953
        if ( is_user_logged_in() ) {
1954
            $actions['history'] = array(
1955
                'url'  => wpinv_get_history_page_uri(),
1956
                'name' => __( 'Invoice History', 'invoicing' ),
1957
                'class' => 'btn-warning',
1958
            );
1959
        }
1960
1961
        $actions = apply_filters( 'wpinv_invoice_receipt_actions', $actions, $invoice );
1962
1963
        if ( !empty( $actions ) ) {
1964
        ?>
1965
        <div class="wpinv-receipt-actions text-right">
1966
            <?php foreach ( $actions as $key => $action ) { $class = !empty($action['class']) ? sanitize_html_class( $action['class'] ) : ''; ?>
1967
            <a href="<?php echo esc_url( $action['url'] );?>" class="btn btn-sm <?php echo $class . ' ' . sanitize_html_class( $key );?>" <?php echo ( !empty($action['attrs']) ? $action['attrs'] : '' ) ;?>><?php echo esc_html( $action['name'] );?></a>
1968
            <?php } ?>
1969
        </div>
1970
        <?php
1971
        }
1972
    }
1973
}
1974
add_action( 'wpinv_receipt_start', 'wpinv_receipt_actions', -10, 1 );
1975
1976
function wpinv_invoice_link( $invoice_id ) {
1977
    $invoice = wpinv_get_invoice( $invoice_id );
1978
1979
    if ( empty( $invoice ) ) {
1980
        return NULL;
1981
    }
1982
1983
    $invoice_link = '<a href="' . esc_url( $invoice->get_view_url() ) . '">' . $invoice->get_number() . '</a>';
0 ignored issues
show
Bug introduced by
It seems like $invoice->get_view_url() can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

1983
    $invoice_link = '<a href="' . esc_url( /** @scrutinizer ignore-type */ $invoice->get_view_url() ) . '">' . $invoice->get_number() . '</a>';
Loading history...
1984
1985
    return apply_filters( 'wpinv_get_invoice_link', $invoice_link, $invoice );
1986
}
1987
1988
function wpinv_invoice_subscription_details( $invoice ) {
1989
    if ( !empty( $invoice ) && $invoice->is_recurring() && ! wpinv_is_subscription_payment( $invoice ) ) {
1990
        $subscription = wpinv_get_subscription( $invoice, true );
1991
1992
        if ( empty( $subscription ) ) {
1993
            return;
1994
        }
1995
1996
        $frequency = WPInv_Subscriptions::wpinv_get_pretty_subscription_frequency($subscription->period, $subscription->frequency);
1997
        $billing = wpinv_price(wpinv_format_amount($subscription->recurring_amount), wpinv_get_invoice_currency_code($subscription->parent_payment_id)) . ' / ' . $frequency;
1998
        $initial = wpinv_price(wpinv_format_amount($subscription->initial_amount), wpinv_get_invoice_currency_code($subscription->parent_payment_id));
1999
2000
        $payments = $subscription->get_child_payments();
2001
        ?>
2002
        <div class="wpinv-subscriptions-details">
2003
            <h3 class="wpinv-subscriptions-t"><?php echo apply_filters( 'wpinv_subscription_details_title', __( 'Subscription Details', 'invoicing' ) ); ?></h3>
2004
            <table class="table">
2005
                <thead>
2006
                    <tr>
2007
                        <th><?php _e( 'Billing Cycle', 'invoicing' ) ;?></th>
2008
                        <th><?php _e( 'Start Date', 'invoicing' ) ;?></th>
2009
                        <th><?php _e( 'Expiration Date', 'invoicing' ) ;?></th>
2010
                        <th class="text-center"><?php _e( 'Times Billed', 'invoicing' ) ;?></th>
2011
                        <th class="text-center"><?php _e( 'Status', 'invoicing' ) ;?></th>
2012
                    </tr>
2013
                </thead>
2014
                <tbody>
2015
                    <tr>
2016
                        <td><?php printf(_x('%s then %s', 'Initial subscription amount then billing cycle and amount', 'invoicing'), $initial, $billing); ?></td>
2017
                        <td><?php echo date_i18n(get_option('date_format'), strtotime($subscription->created, current_time('timestamp'))); ?></td>
0 ignored issues
show
Bug introduced by
It seems like get_option('date_format') can also be of type false; however, parameter $format of date_i18n() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

2017
                        <td><?php echo date_i18n(/** @scrutinizer ignore-type */ get_option('date_format'), strtotime($subscription->created, current_time('timestamp'))); ?></td>
Loading history...
2018
                        <td><?php echo date_i18n(get_option('date_format'), strtotime($subscription->expiration, current_time('timestamp'))); ?></td>
2019
                        <td class="text-center"><?php echo $subscription->get_times_billed() . ' / ' . (($subscription->bill_times == 0) ? 'Until Cancelled' : $subscription->bill_times); ?></td>
2020
                        <td class="text-center wpi-sub-status"><?php echo $subscription->get_status_label(); ?></td>
2021
                    </tr>
2022
                </tbody>
2023
            </table>
2024
        </div>
2025
        <?php if ( !empty( $payments ) ) { ?>
2026
        <div class="wpinv-renewal-payments">
2027
            <h3 class="wpinv-renewals-t"><?php echo apply_filters( 'wpinv_renewal_payments_title', __( 'Renewal Payments', 'invoicing' ) ); ?></h3>
2028
            <table class="table">
2029
                <thead>
2030
                    <tr>
2031
                        <th>#</th>
2032
                        <th><?php _e( 'Invoice', 'invoicing' ) ;?></th>
2033
                        <th><?php _e( 'Date', 'invoicing' ) ;?></th>
2034
                        <th class="text-right"><?php _e( 'Amount', 'invoicing' ) ;?></th>
2035
                    </tr>
2036
                </thead>
2037
                <tbody>
2038
                    <?php
2039
                        $i = 1;
2040
                        foreach ( $payments as $payment ) {
2041
                            $invoice_id = $payment->ID;
2042
                    ?>
2043
                    <tr>
2044
                        <th scope="row"><?php echo $i;?></th>
2045
                        <td><?php echo wpinv_invoice_link( $invoice_id ) ;?></td>
2046
                        <td><?php echo wpinv_get_invoice_date( $invoice_id ); ?></td>
2047
                        <td class="text-right"><?php echo wpinv_payment_total( $invoice_id, true ); ?></td>
2048
                    </tr>
2049
                    <?php $i++; } ?>
2050
                </tbody>
2051
            </table>
2052
        </div>
2053
        <?php } ?>
2054
        <?php
2055
    }
2056
}
2057
2058
function wpinv_cart_total_label( $label, $invoice ) {
2059
    if ( empty( $invoice ) ) {
2060
        return $label;
2061
    }
2062
2063
    $prefix_label = '';
2064
    if ( $invoice->is_parent() && $item_id = $invoice->get_recurring() ) {
0 ignored issues
show
Unused Code introduced by
The assignment to $item_id is dead and can be removed.
Loading history...
2065
        $prefix_label   = '<span class="label label-primary label-recurring">' . __( 'Recurring Payment', 'invoicing' ) . '</span> ' . wpinv_subscription_payment_desc( $invoice );
2066
    } else if ( $invoice->is_renewal() ) {
2067
        $prefix_label   = '<span class="label label-primary label-renewal">' . __( 'Renewal Payment', 'invoicing' ) . '</span> ';        
2068
    }
2069
2070
    if ( $prefix_label != '' ) {
2071
        $label  = '<span class="wpinv-cart-sub-desc">' . $prefix_label . '</span> ' . $label;
2072
    }
2073
2074
    return $label;
2075
}
2076
add_filter( 'wpinv_cart_total_label', 'wpinv_cart_total_label', 10, 2 );
2077
add_filter( 'wpinv_email_cart_total_label', 'wpinv_cart_total_label', 10, 2 );
2078
add_filter( 'wpinv_print_cart_total_label', 'wpinv_cart_total_label', 10, 2 );
2079
2080
add_action( 'wpinv_invoice_print_middle', 'wpinv_invoice_subscription_details', 10, 1 );
2081
2082
function wpinv_invoice_print_description( $invoice ) {
2083
    if ( empty( $invoice ) ) {
2084
        return NULL;
2085
    }
2086
    if ( $description = wpinv_get_invoice_description( $invoice->ID ) ) {
2087
        ?>
2088
        <div class="row wpinv-lower">
2089
            <div class="col-sm-12 wpinv-description">
2090
                <?php echo wpautop( $description ); ?>
2091
            </div>
2092
        </div>
2093
        <?php
2094
    }
2095
}
2096
add_action( 'wpinv_invoice_print_middle', 'wpinv_invoice_print_description', 10.1, 1 );
0 ignored issues
show
Bug introduced by
10.1 of type double is incompatible with the type integer expected by parameter $priority of add_action(). ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

2096
add_action( 'wpinv_invoice_print_middle', 'wpinv_invoice_print_description', /** @scrutinizer ignore-type */ 10.1, 1 );
Loading history...
2097
2098
function wpinv_invoice_print_payment_info( $invoice ) {
2099
    if ( empty( $invoice ) ) {
2100
        return NULL;
2101
    }
2102
2103
    if ( $payments_info = wpinv_display_payments_info( $invoice->ID, false ) ) {
2104
        ?>
2105
        <div class="row wpinv-payments">
2106
            <div class="col-sm-12">
2107
                <?php echo $payments_info; ?>
2108
            </div>
2109
        </div>
2110
        <?php 
2111
    }
2112
}
2113
// add_action( 'wpinv_invoice_print_after_line_items', 'wpinv_invoice_print_payment_info', 10, 1 );
2114
2115
function wpinv_get_invoice_note_line_item( $note, $echo = true ) {
2116
    if ( empty( $note ) ) {
2117
        return NULL;
2118
    }
2119
2120
    if ( is_int( $note ) ) {
2121
        $note = get_comment( $note );
2122
    }
2123
2124
    if ( !( is_object( $note ) && is_a( $note, 'WP_Comment' ) ) ) {
2125
        return NULL;
2126
    }
2127
2128
    $note_classes   = array( 'note' );
2129
    $note_classes[] = get_comment_meta( $note->comment_ID, '_wpi_customer_note', true ) ? 'customer-note' : '';
2130
    $note_classes[] = $note->comment_author === 'System' ? 'system-note' : '';
2131
    $note_classes   = apply_filters( 'wpinv_invoice_note_class', array_filter( $note_classes ), $note );
2132
    $note_classes   = !empty( $note_classes ) ? implode( ' ', $note_classes ) : '';
2133
2134
    ob_start();
2135
    ?>
2136
    <li rel="<?php echo absint( $note->comment_ID ) ; ?>" class="<?php echo esc_attr( $note_classes ); ?>">
2137
        <div class="note_content">
2138
            <?php echo wpautop( wptexturize( wp_kses_post( $note->comment_content ) ) ); ?>
2139
        </div>
2140
        <p class="meta">
2141
            <abbr class="exact-date" title="<?php echo $note->comment_date; ?>"><?php printf( __( '%1$s - %2$s at %3$s', 'invoicing' ), $note->comment_author, date_i18n( get_option( 'date_format' ), strtotime( $note->comment_date ) ), date_i18n( get_option( 'time_format' ), strtotime( $note->comment_date ) ) ); ?></abbr>&nbsp;&nbsp;
0 ignored issues
show
Bug introduced by
It seems like get_option('date_format') can also be of type false; however, parameter $format of date_i18n() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

2141
            <abbr class="exact-date" title="<?php echo $note->comment_date; ?>"><?php printf( __( '%1$s - %2$s at %3$s', 'invoicing' ), $note->comment_author, date_i18n( /** @scrutinizer ignore-type */ get_option( 'date_format' ), strtotime( $note->comment_date ) ), date_i18n( get_option( 'time_format' ), strtotime( $note->comment_date ) ) ); ?></abbr>&nbsp;&nbsp;
Loading history...
2142
            <?php if ( is_admin() && ( $note->comment_author !== 'System' || wpinv_current_user_can_manage_invoicing() ) ) { ?>
2143
                <a href="#" class="delete_note"><?php _e( 'Delete note', 'invoicing' ); ?></a>
2144
            <?php } ?>
2145
        </p>
2146
    </li>
2147
    <?php
2148
    $note_content = ob_get_clean();
2149
    $note_content = apply_filters( 'wpinv_get_invoice_note_line_item', $note_content, $note, $echo );
2150
2151
    if ( $echo ) {
2152
        echo $note_content;
2153
    } else {
2154
        return $note_content;
2155
    }
2156
}
2157
2158
function wpinv_invalid_invoice_content() {
2159
    global $post;
2160
2161
    $invoice = wpinv_get_invoice( $post->ID );
2162
2163
    $error = __( 'This invoice is only viewable by clicking on the invoice link that was sent to you via email.', 'invoicing' );
2164
    if ( !empty( $invoice->ID ) && $invoice->has_status( array_keys( wpinv_get_invoice_statuses() ) ) ) {
2165
        if ( is_user_logged_in() ) {
2166
            if ( wpinv_require_login_to_checkout() ) {
2167
                if ( isset( $_GET['invoice_key'] ) && $_GET['invoice_key'] === $invoice->get_key() ) {
2168
                    $error = __( 'You are not allowed to view this invoice.', 'invoicing' );
2169
                }
2170
            }
2171
        } else {
2172
            if ( wpinv_require_login_to_checkout() ) {
2173
                if ( isset( $_GET['invoice_key'] ) && $_GET['invoice_key'] === $invoice->get_key() ) {
2174
                    $error = __( 'You must be logged in to view this invoice.', 'invoicing' );
2175
                }
2176
            }
2177
        }
2178
    } else {
2179
        $error = __( 'This invoice is deleted or does not exist.', 'invoicing' );
2180
    }
2181
    ?>
2182
    <div class="row wpinv-row-invalid">
2183
        <div class="col-md-6 col-md-offset-3 wpinv-message error">
2184
            <h3><?php _e( 'Access Denied', 'invoicing' ); ?></h3>
2185
            <p class="wpinv-msg-text"><?php echo $error; ?></p>
2186
        </div>
2187
    </div>
2188
    <?php
2189
}
2190
add_action( 'wpinv_invalid_invoice_content', 'wpinv_invalid_invoice_content' );
2191
2192
add_action( 'wpinv_checkout_billing_fields_last', 'wpinv_force_company_name_field');
2193
function wpinv_force_company_name_field(){
2194
    $invoice = wpinv_get_invoice_cart();
2195
    $user_id = wpinv_get_user_id( $invoice->ID );
2196
    $company = empty( $user_id ) ? "" : get_user_meta( $user_id, '_wpinv_company', true );
2197
    if ( 1 == wpinv_get_option( 'force_show_company' ) && !wpinv_use_taxes() ) {
2198
        ?>
2199
        <p class="wpi-cart-field wpi-col2 wpi-colf">
2200
            <label for="wpinv_company" class="wpi-label"><?php _e('Company Name', 'invoicing'); ?></label>
2201
            <?php
2202
            echo wpinv_html_text(array(
2203
                'id' => 'wpinv_company',
2204
                'name' => 'wpinv_company',
2205
                'value' => $company,
2206
                'class' => 'wpi-input form-control',
2207
                'placeholder' => __('Company name', 'invoicing'),
2208
            ));
2209
            ?>
2210
        </p>
2211
        <?php
2212
    }
2213
}
2214
2215
/**
2216
 * Function to get privacy policy text.
2217
 *
2218
 * @since 1.0.13
2219
 * @return string
2220
 */
2221
function wpinv_get_policy_text() {
2222
    $privacy_page_id = get_option( 'wp_page_for_privacy_policy', 0 );
2223
2224
    $text = wpinv_get_option('invoicing_privacy_checkout_message', sprintf( __( 'Your personal data will be used to process your invoice, payment and for other purposes described in our %s.', 'invoicing' ), '[wpinv_privacy_policy]' ));
2225
2226
    if(!$privacy_page_id){
2227
        $privacy_page_id = wpinv_get_option( 'privacy_page', 0 );
2228
    }
2229
2230
    $privacy_link    = $privacy_page_id ? '<a href="' . esc_url( get_permalink( $privacy_page_id ) ) . '" class="wpinv-privacy-policy-link" target="_blank">' . __( 'privacy policy', 'invoicing' ) . '</a>' : __( 'privacy policy', 'invoicing' );
0 ignored issues
show
Bug introduced by
It seems like get_permalink($privacy_page_id) can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

2230
    $privacy_link    = $privacy_page_id ? '<a href="' . esc_url( /** @scrutinizer ignore-type */ get_permalink( $privacy_page_id ) ) . '" class="wpinv-privacy-policy-link" target="_blank">' . __( 'privacy policy', 'invoicing' ) . '</a>' : __( 'privacy policy', 'invoicing' );
Loading history...
2231
2232
    $find_replace = array(
2233
        '[wpinv_privacy_policy]' => $privacy_link,
2234
    );
2235
2236
    $privacy_text = str_replace( array_keys( $find_replace ), array_values( $find_replace ), $text );
2237
2238
    return wp_kses_post(wpautop($privacy_text));
2239
}
2240
2241
2242
/**
2243
 * Allows the user to set their own price for an invoice item
2244
 */
2245
function wpinv_checkout_cart_item_name_your_price( $cart_item, $key ) {
2246
    
2247
    //Ensure we have an item id
2248
    if(! is_array( $cart_item ) || empty( $cart_item['id'] ) ) {
2249
        return;
2250
    }
2251
2252
    //Fetch the item
2253
    $item_id = $cart_item['id'];
2254
    $item    = new WPInv_Item( $item_id );
2255
    
2256
    if(! $item->supports_dynamic_pricing() || !$item->get_is_dynamic_pricing() ) {
2257
        return;
2258
    }
2259
2260
    //Fetch the dynamic pricing "strings"
2261
    $suggested_price_text = esc_html( wpinv_get_option( 'suggested_price_text', __( 'Suggested Price:', 'invoicing' ) ) );
2262
    $minimum_price_text   = esc_html( wpinv_get_option( 'minimum_price_text', __( 'Minimum Price:', 'invoicing' ) ) );
2263
    $name_your_price_text = esc_html( wpinv_get_option( 'name_your_price_text', __( 'Name Your Price', 'invoicing' ) ) );
2264
2265
    //Display a "name_your_price" button
2266
    echo " &mdash; <a href='#' class='wpinv-name-your-price-frontend small'>$name_your_price_text</a></div>";
2267
2268
    //Display a name_your_price form
2269
    echo '<div class="name-your-price-miniform">';
2270
    
2271
    //Maybe display the recommended price
2272
    if( $item->get_price() > 0 && !empty( $suggested_price_text ) ) {
2273
        $suggested_price = $item->get_the_price();
2274
        echo "<div>$suggested_price_text &mdash; $suggested_price</div>";
2275
    }
2276
2277
    //Display the update price form
2278
    $symbol         = wpinv_currency_symbol();
2279
    $position       = wpinv_currency_position();
2280
    $minimum        = esc_attr( $item->get_minimum_price() );
2281
    $price          = esc_attr( $cart_item['item_price'] );
2282
    $update         = esc_attr__( "Update", 'invoicing' );
2283
2284
    //Ensure it supports dynamic prici
2285
    if( $price < $minimum ) {
2286
        $price = $minimum;
2287
    }
2288
2289
    echo '<label>';
2290
    echo $position != 'right' ? $symbol . '&nbsp;' : '';
2291
    echo "<input type='number' min='$minimum' placeholder='$price' value='$price' class='wpi-field-price' />";
2292
    echo $position == 'right' ? '&nbsp;' . $symbol : '' ;
2293
    echo "</label>";
2294
    echo "<input type='hidden' value='$item_id' class='wpi-field-item' />";
2295
    echo "<a class='btn btn-success wpinv-submit wpinv-update-dynamic-price-frontend'>$update</a>";
2296
2297
    //Maybe display the minimum price
2298
    if( $item->get_minimum_price() > 0 && !empty( $minimum_price_text ) ) {
2299
        $minimum_price = wpinv_price( wpinv_format_amount( $item->get_minimum_price() ) );
2300
        echo "<div>$minimum_price_text &mdash; $minimum_price</div>";
2301
    }
2302
2303
    echo "</div>";
2304
2305
}
2306
add_action( 'wpinv_checkout_cart_item_price_after', 'wpinv_checkout_cart_item_name_your_price', 10, 2 );
2307
2308
function wpinv_oxygen_fix_conflict() {
2309
    global $ct_ignore_post_types;
2310
2311
    if ( ! is_array( $ct_ignore_post_types ) ) {
2312
        $ct_ignore_post_types = array();
2313
    }
2314
2315
    $post_types = array( 'wpi_discount', 'wpi_invoice', 'wpi_item' );
2316
2317
    foreach ( $post_types as $post_type ) {
2318
        $ct_ignore_post_types[] = $post_type;
2319
2320
        // Ignore post type
2321
        add_filter( 'pre_option_oxygen_vsb_ignore_post_type_' . $post_type, '__return_true', 999 );
2322
    }
2323
2324
    remove_filter( 'template_include', 'wpinv_template', 10, 1 );
0 ignored issues
show
Unused Code introduced by
The call to remove_filter() has too many arguments starting with 1. ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-call  annotation

2324
    /** @scrutinizer ignore-call */ 
2325
    remove_filter( 'template_include', 'wpinv_template', 10, 1 );

This check compares calls to functions or methods with their respective definitions. If the call has more arguments than are defined, it raises an issue.

If a function is defined several times with a different number of parameters, the check may pick up the wrong definition and report false positives. One codebase where this has been known to happen is Wordpress. Please note the @ignore annotation hint above.

Loading history...
2325
    add_filter( 'template_include', 'wpinv_template', 999, 1 );
2326
}