Passed
Push — master ( 607b2f...f897ad )
by Brian
04:05
created

wpinv_display_to_address()   A

Complexity

Conditions 5
Paths 9

Size

Total Lines 36
Code Lines 22

Duplication

Lines 0
Ratio 0 %

Importance

Changes 2
Bugs 1 Features 0
Metric Value
cc 5
eloc 22
c 2
b 1
f 0
nc 9
nop 1
dl 0
loc 36
rs 9.2568
1
<?php
2
/**
3
 * Contains functions related to Invoicing plugin.
4
 *
5
 * @since 1.0.0
6
 * @package Invoicing
7
 */
8
 
9
// MUST have WordPress.
10
if ( !defined( 'WPINC' ) ) {
11
    exit( 'Do NOT access this file directly: ' . basename( __FILE__ ) );
12
}
13
14
if ( !is_admin() ) {
15
    add_filter( 'template_include', 'wpinv_template', 10, 1 );
16
    add_action( 'wpinv_invoice_print_body_start', 'wpinv_display_invoice_top_bar' );
17
    add_action( 'wpinv_invoice_top_bar_left', 'wpinv_invoice_display_left_actions' );
18
    add_action( 'wpinv_invoice_top_bar_right', 'wpinv_invoice_display_right_actions' );
19
}
20
21
function wpinv_template_path() {
22
    return apply_filters( 'wpinv_template_path', wpinv_get_theme_template_dir_name() );
23
}
24
25
function wpinv_display_invoice_top_bar( $invoice ) {
26
    if ( empty( $invoice ) ) {
27
        return;
28
    }
29
    ?>
30
    <div class="row wpinv-top-bar no-print">
31
        <div class="container">
32
            <div class="col-xs-6">
33
                <?php do_action( 'wpinv_invoice_top_bar_left', $invoice );?>
34
            </div>
35
            <div class="col-xs-6 text-right">
36
                <?php do_action( 'wpinv_invoice_top_bar_right', $invoice );?>
37
            </div>
38
        </div>
39
    </div>
40
    <?php
41
}
42
43
function wpinv_invoice_display_left_actions( $invoice ) {
44
    if ( empty( $invoice ) ) {
45
        return; // Exit if invoice is not set.
46
    }
47
    
48
    if ( $invoice->post_type == 'wpi_invoice' ) {
49
        if ( $invoice->needs_payment() ) {
50
            ?> <a class="btn btn-success btn-sm" title="<?php esc_attr_e( 'Pay This Invoice', 'invoicing' ); ?>" href="<?php echo esc_url( $invoice->get_checkout_payment_url() ); ?>"><?php _e( 'Pay For Invoice', 'invoicing' ); ?></a><?php
51
        }
52
    }
53
    do_action('wpinv_invoice_display_left_actions', $invoice);
54
}
55
56
function wpinv_invoice_display_right_actions( $invoice ) {
57
    if ( empty( $invoice ) ) {
58
        return; // Exit if invoice is not set.
59
    }
60
61
    if ( $invoice->post_type == 'wpi_invoice' ) { ?>
62
        <a class="btn btn-primary btn-sm btn-print-invoice" onclick="window.print();" href="javascript:void(0)"><?php _e( 'Print Invoice', 'invoicing' ); ?></a>
63
        <?php if ( is_user_logged_in() ) { ?>
64
        &nbsp;&nbsp;<a class="btn btn-warning btn-sm btn-invoice-history" href="<?php echo esc_url( wpinv_get_history_page_uri() ); ?>"><?php _e( 'Invoice History', 'invoicing' ); ?></a>
0 ignored issues
show
Bug introduced by
It seems like wpinv_get_history_page_uri() can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

64
        &nbsp;&nbsp;<a class="btn btn-warning btn-sm btn-invoice-history" href="<?php echo esc_url( /** @scrutinizer ignore-type */ wpinv_get_history_page_uri() ); ?>"><?php _e( 'Invoice History', 'invoicing' ); ?></a>
Loading history...
65
        <?php }
66
    }
67
    do_action('wpinv_invoice_display_right_actions', $invoice);
68
}
69
70
function wpinv_before_invoice_content( $content ) {
71
    global $post;
72
73
    if ( !empty( $post ) && $post->post_type == 'wpi_invoice' && is_singular( 'wpi_invoice' ) && is_main_query() ) {
74
        ob_start();
75
        do_action( 'wpinv_before_invoice_content', $post->ID );
76
        $content = ob_get_clean() . $content;
77
    }
78
79
    return $content;
80
}
81
add_filter( 'the_content', 'wpinv_before_invoice_content' );
82
83
function wpinv_after_invoice_content( $content ) {
84
    global $post;
85
86
    if ( !empty( $post ) && $post->post_type == 'wpi_invoice' && is_singular( 'wpi_invoice' ) && is_main_query() ) {
87
        ob_start();
88
        do_action( 'wpinv_after_invoice_content', $post->ID );
89
        $content .= ob_get_clean();
90
    }
91
92
    return $content;
93
}
94
add_filter( 'the_content', 'wpinv_after_invoice_content' );
95
96
function wpinv_get_templates_dir() {
97
    return WPINV_PLUGIN_DIR . 'templates';
98
}
99
100
function wpinv_get_templates_url() {
101
    return WPINV_PLUGIN_URL . 'templates';
102
}
103
104
function wpinv_get_template( $template_name, $args = array(), $template_path = '', $default_path = '' ) {
105
    if ( ! empty( $args ) && is_array( $args ) ) {
106
		extract( $args );
107
	}
108
109
	$located = wpinv_locate_template( $template_name, $template_path, $default_path );
110
	// Allow 3rd party plugin filter template file from their plugin.
111
	$located = apply_filters( 'wpinv_get_template', $located, $template_name, $args, $template_path, $default_path );
112
113
	if ( ! file_exists( $located ) ) {
114
        _doing_it_wrong( __FUNCTION__, sprintf( '<code>%s</code> does not exist.', $located ), '2.1' );
115
		return;
116
	}
117
118
	do_action( 'wpinv_before_template_part', $template_name, $template_path, $located, $args );
119
120
	include( $located );
121
122
	do_action( 'wpinv_after_template_part', $template_name, $template_path, $located, $args );
123
}
124
125
function wpinv_get_template_html( $template_name, $args = array(), $template_path = '', $default_path = '' ) {
126
	ob_start();
127
	wpinv_get_template( $template_name, $args, $template_path, $default_path );
128
	return ob_get_clean();
129
}
130
131
function wpinv_locate_template( $template_name, $template_path = '', $default_path = '' ) {
132
    if ( ! $template_path ) {
133
        $template_path = wpinv_template_path();
134
    }
135
136
    if ( ! $default_path ) {
137
        $default_path = WPINV_PLUGIN_DIR . 'templates/';
138
    }
139
140
    // Look within passed path within the theme - this is priority.
141
    $template = locate_template(
142
        array(
143
            trailingslashit( $template_path ) . $template_name,
144
            $template_name
145
        )
146
    );
147
148
    // Get default templates/
149
    if ( !$template && $default_path ) {
150
        $template = trailingslashit( $default_path ) . $template_name;
151
    }
152
153
    // Return what we found.
154
    return apply_filters( 'wpinv_locate_template', $template, $template_name, $template_path );
155
}
156
157
function wpinv_get_template_part( $slug, $name = null, $load = true ) {
158
	do_action( 'get_template_part_' . $slug, $slug, $name );
159
160
	// Setup possible parts
161
	$templates = array();
162
	if ( isset( $name ) )
163
		$templates[] = $slug . '-' . $name . '.php';
164
	$templates[] = $slug . '.php';
165
166
	// Allow template parts to be filtered
167
	$templates = apply_filters( 'wpinv_get_template_part', $templates, $slug, $name );
168
169
	// Return the part that is found
170
	return wpinv_locate_tmpl( $templates, $load, false );
171
}
172
173
function wpinv_locate_tmpl( $template_names, $load = false, $require_once = true ) {
174
	// No file found yet
175
	$located = false;
176
177
	// Try to find a template file
178
	foreach ( (array)$template_names as $template_name ) {
179
180
		// Continue if template is empty
181
		if ( empty( $template_name ) )
182
			continue;
183
184
		// Trim off any slashes from the template name
185
		$template_name = ltrim( $template_name, '/' );
186
187
		// try locating this template file by looping through the template paths
188
		foreach( wpinv_get_theme_template_paths() as $template_path ) {
189
190
			if( file_exists( $template_path . $template_name ) ) {
191
				$located = $template_path . $template_name;
192
				break;
193
			}
194
		}
195
196
		if( !empty( $located ) ) {
197
			break;
198
		}
199
	}
200
201
	if ( ( true == $load ) && ! empty( $located ) )
202
		load_template( $located, $require_once );
203
204
	return $located;
205
}
206
207
function wpinv_get_theme_template_paths() {
208
	$template_dir = wpinv_get_theme_template_dir_name();
209
210
	$file_paths = array(
211
		1 => trailingslashit( get_stylesheet_directory() ) . $template_dir,
212
		10 => trailingslashit( get_template_directory() ) . $template_dir,
213
		100 => wpinv_get_templates_dir()
214
	);
215
216
	$file_paths = apply_filters( 'wpinv_template_paths', $file_paths );
217
218
	// sort the file paths based on priority
219
	ksort( $file_paths, SORT_NUMERIC );
220
221
	return array_map( 'trailingslashit', $file_paths );
222
}
223
224
function wpinv_get_theme_template_dir_name() {
225
	return trailingslashit( apply_filters( 'wpinv_templates_dir', 'invoicing' ) );
226
}
227
228
function wpinv_checkout_meta_tags() {
229
230
	$pages   = array();
231
	$pages[] = wpinv_get_option( 'success_page' );
232
	$pages[] = wpinv_get_option( 'failure_page' );
233
	$pages[] = wpinv_get_option( 'invoice_history_page' );
234
	$pages[] = wpinv_get_option( 'invoice_subscription_page' );
235
236
	if( !wpinv_is_checkout() && !is_page( $pages ) ) {
237
		return;
238
	}
239
240
	echo '<meta name="robots" content="noindex,nofollow" />' . "\n";
241
}
242
add_action( 'wp_head', 'wpinv_checkout_meta_tags' );
243
244
function wpinv_add_body_classes( $class ) {
245
	$classes = (array)$class;
246
247
	if( wpinv_is_checkout() ) {
248
		$classes[] = 'wpinv-checkout';
249
		$classes[] = 'wpinv-page';
250
	}
251
252
	if( wpinv_is_success_page() ) {
253
		$classes[] = 'wpinv-success';
254
		$classes[] = 'wpinv-page';
255
	}
256
257
	if( wpinv_is_failed_transaction_page() ) {
258
		$classes[] = 'wpinv-failed-transaction';
259
		$classes[] = 'wpinv-page';
260
	}
261
262
	if( wpinv_is_invoice_history_page() ) {
263
		$classes[] = 'wpinv-history';
264
		$classes[] = 'wpinv-page';
265
	}
266
267
	if( wpinv_is_subscriptions_history_page() ) {
268
		$classes[] = 'wpinv-subscription';
269
		$classes[] = 'wpinv-page';
270
	}
271
272
	if( wpinv_is_test_mode() ) {
273
		$classes[] = 'wpinv-test-mode';
274
		$classes[] = 'wpinv-page';
275
	}
276
277
	return array_unique( $classes );
278
}
279
add_filter( 'body_class', 'wpinv_add_body_classes' );
280
281
function wpinv_html_dropdown( $name = 'wpinv_discounts', $selected = 0, $status = '' ) {
282
    $args = array( 'nopaging' => true );
283
284
    if ( ! empty( $status ) )
285
        $args['post_status'] = $status;
286
287
    $discounts = wpinv_get_discounts( $args );
288
    $options   = array();
289
290
    if ( $discounts ) {
291
        foreach ( $discounts as $discount ) {
292
            $options[ absint( $discount->ID ) ] = esc_html( get_the_title( $discount->ID ) );
293
        }
294
    } else {
295
        $options[0] = __( 'No discounts found', 'invoicing' );
296
    }
297
298
    $output = wpinv_html_select( array(
299
        'name'             => $name,
300
        'selected'         => $selected,
301
        'options'          => $options,
302
        'show_option_all'  => false,
303
        'show_option_none' => false,
304
    ) );
305
306
    return $output;
307
}
308
309
function wpinv_html_year_dropdown( $name = 'year', $selected = 0, $years_before = 5, $years_after = 0 ) {
310
    $current     = date( 'Y' );
311
    $start_year  = $current - absint( $years_before );
312
    $end_year    = $current + absint( $years_after );
313
    $selected    = empty( $selected ) ? date( 'Y' ) : $selected;
314
    $options     = array();
315
316
    while ( $start_year <= $end_year ) {
317
        $options[ absint( $start_year ) ] = $start_year;
318
        $start_year++;
319
    }
320
321
    $output = wpinv_html_select( array(
322
        'name'             => $name,
323
        'selected'         => $selected,
324
        'options'          => $options,
325
        'show_option_all'  => false,
326
        'show_option_none' => false
327
    ) );
328
329
    return $output;
330
}
331
332
function wpinv_html_month_dropdown( $name = 'month', $selected = 0 ) {
333
334
    $options = array(
335
        '1'  => __( 'January', 'invoicing' ),
336
        '2'  => __( 'February', 'invoicing' ),
337
        '3'  => __( 'March', 'invoicing' ),
338
        '4'  => __( 'April', 'invoicing' ),
339
        '5'  => __( 'May', 'invoicing' ),
340
        '6'  => __( 'June', 'invoicing' ),
341
        '7'  => __( 'July', 'invoicing' ),
342
        '8'  => __( 'August', 'invoicing' ),
343
        '9'  => __( 'September', 'invoicing' ),
344
        '10' => __( 'October', 'invoicing' ),
345
        '11' => __( 'November', 'invoicing' ),
346
        '12' => __( 'December', 'invoicing' ),
347
    );
348
349
    // If no month is selected, default to the current month
350
    $selected = empty( $selected ) ? date( 'n' ) : $selected;
351
352
    $output = wpinv_html_select( array(
353
        'name'             => $name,
354
        'selected'         => $selected,
355
        'options'          => $options,
356
        'show_option_all'  => false,
357
        'show_option_none' => false
358
    ) );
359
360
    return $output;
361
}
362
363
function wpinv_html_select( $args = array() ) {
364
    $defaults = array(
365
        'options'          => array(),
366
        'name'             => null,
367
        'class'            => '',
368
        'id'               => '',
369
        'selected'         => 0,
370
        'placeholder'      => null,
371
        'multiple'         => false,
372
        'show_option_all'  => _x( 'All', 'all dropdown items', 'invoicing' ),
373
        'show_option_none' => _x( 'None', 'no dropdown items', 'invoicing' ),
374
        'data'             => array(),
375
        'onchange'         => null,
376
        'required'         => false,
377
        'disabled'         => false,
378
        'readonly'         => false,
379
    );
380
381
    $args = wp_parse_args( $args, $defaults );
0 ignored issues
show
Security Variable Injection introduced by
$args can contain request data and is used in variable name context(s) leading to a potential security vulnerability.

2 paths for user data to reach this point

  1. Path: Read from $_GET in includes/admin/wpinv-admin-functions.php on line 363
  1. Read from $_GET
    in includes/admin/wpinv-admin-functions.php on line 363
  2. wpinv_html_select() is called
    in includes/admin/wpinv-admin-functions.php on line 359
  3. Enters via parameter $args
    in includes/wpinv-template-functions.php on line 363
  2. Path: Read from $_GET, and $_GET['vat_class'] is assigned to $class in includes/admin/wpinv-admin-functions.php on line 378
  1. Read from $_GET, and $_GET['vat_class'] is assigned to $class
    in includes/admin/wpinv-admin-functions.php on line 378
  2. wpinv_html_select() is called
    in includes/admin/wpinv-admin-functions.php on line 381
  3. Enters via parameter $args
    in includes/wpinv-template-functions.php on line 363

Used in variable context

  1. wp_parse_args() is called
    in includes/wpinv-template-functions.php on line 381
  2. Enters via parameter $args
    in wordpress/wp-includes/functions.php on line 4294
  3. wp_parse_str() is called
    in wordpress/wp-includes/functions.php on line 4300
  4. Enters via parameter $string
    in wordpress/wp-includes/formatting.php on line 4865
  5. parse_str() is called
    in wordpress/wp-includes/formatting.php on line 4866

General Strategies to prevent injection

In general, it is advisable to prevent any user-data to reach this point. This can be done by white-listing certain values:

if ( ! in_array($value, array('this-is-allowed', 'and-this-too'), true)) {
    throw new \InvalidArgumentException('This input is not allowed.');
}

For numeric data, we recommend to explicitly cast the data:

$sanitized = (integer) $tainted;
Loading history...
382
383
    $data_elements = '';
384
    foreach ( $args['data'] as $key => $value ) {
385
        $data_elements .= ' data-' . esc_attr( $key ) . '="' . esc_attr( $value ) . '"';
386
    }
387
388
    if( $args['multiple'] ) {
389
        $multiple = ' MULTIPLE';
390
    } else {
391
        $multiple = '';
392
    }
393
394
    if( $args['placeholder'] ) {
395
        $placeholder = $args['placeholder'];
396
    } else {
397
        $placeholder = '';
398
    }
399
    
400
    $options = '';
401
    if( !empty( $args['onchange'] ) ) {
402
        $options .= ' onchange="' . esc_attr( $args['onchange'] ) . '"';
403
    }
404
    
405
    if( !empty( $args['required'] ) ) {
406
        $options .= ' required="required"';
407
    }
408
    
409
    if( !empty( $args['disabled'] ) ) {
410
        $options .= ' disabled';
411
    }
412
    
413
    if( !empty( $args['readonly'] ) ) {
414
        $options .= ' readonly';
415
    }
416
417
    $class  = implode( ' ', array_map( 'sanitize_html_class', explode( ' ', $args['class'] ) ) );
418
    $output = '<select name="' . esc_attr( $args['name'] ) . '" id="' . esc_attr( $args['id'] ) . '" class="wpinv-select ' . $class . '"' . $multiple . ' data-placeholder="' . $placeholder . '" ' . trim( $options ) . $data_elements . '>';
419
420
    if ( $args['show_option_all'] ) {
421
        if( $args['multiple'] ) {
422
            $selected = selected( true, in_array( 0, $args['selected'] ), false );
423
        } else {
424
            $selected = selected( $args['selected'], 0, false );
425
        }
426
        $output .= '<option value="all"' . $selected . '>' . esc_html( $args['show_option_all'] ) . '</option>';
427
    }
428
429
    if ( !empty( $args['options'] ) ) {
430
431
        if ( $args['show_option_none'] ) {
432
            if( $args['multiple'] ) {
433
                $selected = selected( true, in_array( "", $args['selected'] ), false );
434
            } else {
435
                $selected = selected( $args['selected'] === "", true, false );
436
            }
437
            $output .= '<option value=""' . $selected . '>' . esc_html( $args['show_option_none'] ) . '</option>';
438
        }
439
440
        foreach( $args['options'] as $key => $option ) {
441
442
            if( $args['multiple'] && is_array( $args['selected'] ) ) {
443
                $selected = selected( true, (bool)in_array( $key, $args['selected'] ), false );
444
            } else {
445
                $selected = selected( $args['selected'], $key, false );
446
            }
447
448
            $output .= '<option value="' . esc_attr( $key ) . '"' . $selected . '>' . esc_html( $option ) . '</option>';
449
        }
450
    }
451
452
    $output .= '</select>';
453
454
    return $output;
455
}
456
457
function wpinv_item_dropdown( $args = array() ) {
458
    $defaults = array(
459
        'name'              => 'wpi_item',
460
        'id'                => 'wpi_item',
461
        'class'             => '',
462
        'multiple'          => false,
463
        'selected'          => 0,
464
        'number'            => 100,
465
        'placeholder'       => __( 'Choose a item', 'invoicing' ),
466
        'data'              => array( 'search-type' => 'item' ),
467
        'show_option_all'   => false,
468
        'show_option_none'  => false,
469
        'show_recurring'    => false,
470
    );
471
472
    $args = wp_parse_args( $args, $defaults );
473
474
    $item_args = array(
475
        'post_type'      => 'wpi_item',
476
        'orderby'        => 'title',
477
        'order'          => 'ASC',
478
        'posts_per_page' => $args['number']
479
    );
480
    
481
    $item_args  = apply_filters( 'wpinv_item_dropdown_query_args', $item_args, $args, $defaults );
482
483
    $items      = get_posts( $item_args );
484
    $options    = array();
485
    if ( $items ) {
486
        foreach ( $items as $item ) {
487
            $title = esc_html( $item->post_title );
488
            
489
            if ( !empty( $args['show_recurring'] ) ) {
490
                $title .= wpinv_get_item_suffix( $item->ID, false );
491
            }
492
            
493
            $options[ absint( $item->ID ) ] = $title;
494
        }
495
    }
496
497
    // This ensures that any selected items are included in the drop down
498
    if( is_array( $args['selected'] ) ) {
499
        foreach( $args['selected'] as $item ) {
500
            if( ! in_array( $item, $options ) ) {
501
                $title = get_the_title( $item );
502
                if ( !empty( $args['show_recurring'] ) ) {
503
                    $title .= wpinv_get_item_suffix( $item, false );
504
                }
505
                $options[$item] = $title;
506
            }
507
        }
508
    } elseif ( is_numeric( $args['selected'] ) && $args['selected'] !== 0 ) {
509
        if ( ! in_array( $args['selected'], $options ) ) {
510
            $title = get_the_title( $args['selected'] );
511
            if ( !empty( $args['show_recurring'] ) ) {
512
                $title .= wpinv_get_item_suffix( $args['selected'], false );
513
            }
514
            $options[$args['selected']] = get_the_title( $args['selected'] );
515
        }
516
    }
517
518
    $output = wpinv_html_select( array(
519
        'name'             => $args['name'],
520
        'selected'         => $args['selected'],
521
        'id'               => $args['id'],
522
        'class'            => $args['class'],
523
        'options'          => $options,
524
        'multiple'         => $args['multiple'],
525
        'placeholder'      => $args['placeholder'],
526
        'show_option_all'  => $args['show_option_all'],
527
        'show_option_none' => $args['show_option_none'],
528
        'data'             => $args['data'],
529
    ) );
530
531
    return $output;
532
}
533
534
function wpinv_html_checkbox( $args = array() ) {
535
    $defaults = array(
536
        'name'     => null,
537
        'current'  => null,
538
        'class'    => 'wpinv-checkbox',
539
        'options'  => array(
540
            'disabled' => false,
541
            'readonly' => false
542
        )
543
    );
544
545
    $args = wp_parse_args( $args, $defaults );
546
547
    $class = implode( ' ', array_map( 'sanitize_html_class', explode( ' ', $args['class'] ) ) );
548
    $options = '';
549
    if ( ! empty( $args['options']['disabled'] ) ) {
550
        $options .= ' disabled="disabled"';
551
    } elseif ( ! empty( $args['options']['readonly'] ) ) {
552
        $options .= ' readonly';
553
    }
554
555
    $output = '<input type="checkbox"' . $options . ' name="' . esc_attr( $args['name'] ) . '" id="' . esc_attr( $args['name'] ) . '" class="' . $class . ' ' . esc_attr( $args['name'] ) . '" ' . checked( 1, $args['current'], false ) . ' />';
556
557
    return $output;
558
}
559
560
function wpinv_html_text( $args = array() ) {
561
    // Backwards compatibility
562
    if ( func_num_args() > 1 ) {
563
        $args = func_get_args();
564
565
        $name  = $args[0];
566
        $value = isset( $args[1] ) ? $args[1] : '';
567
        $label = isset( $args[2] ) ? $args[2] : '';
568
        $desc  = isset( $args[3] ) ? $args[3] : '';
569
    }
570
571
    $defaults = array(
572
        'id'           => '',
573
        'name'         => isset( $name )  ? $name  : 'text',
574
        'value'        => isset( $value ) ? $value : null,
575
        'label'        => isset( $label ) ? $label : null,
576
        'desc'         => isset( $desc )  ? $desc  : null,
577
        'placeholder'  => '',
578
        'class'        => 'regular-text',
579
        'disabled'     => false,
580
        'readonly'     => false,
581
        'required'     => false,
582
        'autocomplete' => '',
583
        'data'         => false
584
    );
585
586
    $args = wp_parse_args( $args, $defaults );
587
588
    $class = implode( ' ', array_map( 'sanitize_html_class', explode( ' ', $args['class'] ) ) );
589
    $options = '';
590
    if( $args['required'] ) {
591
        $options .= ' required="required"';
592
    }
593
    if( $args['readonly'] ) {
594
        $options .= ' readonly';
595
    }
596
    if( $args['readonly'] ) {
597
        $options .= ' readonly';
598
    }
599
600
    $data = '';
601
    if ( !empty( $args['data'] ) ) {
602
        foreach ( $args['data'] as $key => $value ) {
603
            $data .= 'data-' . wpinv_sanitize_key( $key ) . '="' . esc_attr( $value ) . '" ';
604
        }
605
    }
606
607
    $output = '<span id="wpinv-' . wpinv_sanitize_key( $args['name'] ) . '-wrap">';
608
    $output .= '<label class="wpinv-label" for="' . wpinv_sanitize_key( $args['id'] ) . '">' . esc_html( $args['label'] ) . '</label>';
609
    if ( ! empty( $args['desc'] ) ) {
610
        $output .= '<span class="wpinv-description">' . esc_html( $args['desc'] ) . '</span>';
611
    }
612
613
    $output .= '<input type="text" name="' . esc_attr( $args['name'] ) . '" id="' . esc_attr( $args['id'] )  . '" autocomplete="' . esc_attr( $args['autocomplete'] )  . '" value="' . esc_attr( $args['value'] ) . '" placeholder="' . esc_attr( $args['placeholder'] ) . '" class="' . $class . '" ' . $data . ' ' . trim( $options ) . '/>';
614
615
    $output .= '</span>';
616
617
    return $output;
618
}
619
620
function wpinv_html_date_field( $args = array() ) {
621
    if( empty( $args['class'] ) ) {
622
        $args['class'] = 'wpiDatepicker';
623
    } elseif( ! strpos( $args['class'], 'wpiDatepicker' ) ) {
624
        $args['class'] .= ' wpiDatepicker';
625
    }
626
627
    return wpinv_html_text( $args );
628
}
629
630
function wpinv_html_textarea( $args = array() ) {
631
    $defaults = array(
632
        'name'        => 'textarea',
633
        'value'       => null,
634
        'label'       => null,
635
        'desc'        => null,
636
        'class'       => 'large-text',
637
        'disabled'    => false
638
    );
639
640
    $args = wp_parse_args( $args, $defaults );
641
642
    $class = implode( ' ', array_map( 'sanitize_html_class', explode( ' ', $args['class'] ) ) );
643
    $disabled = '';
644
    if( $args['disabled'] ) {
645
        $disabled = ' disabled="disabled"';
646
    }
647
648
    $output = '<span id="wpinv-' . wpinv_sanitize_key( $args['name'] ) . '-wrap">';
649
    $output .= '<label class="wpinv-label" for="' . wpinv_sanitize_key( $args['name'] ) . '">' . esc_html( $args['label'] ) . '</label>';
650
    $output .= '<textarea name="' . esc_attr( $args['name'] ) . '" id="' . wpinv_sanitize_key( $args['name'] ) . '" class="' . $class . '"' . $disabled . '>' . esc_attr( $args['value'] ) . '</textarea>';
651
652
    if ( ! empty( $args['desc'] ) ) {
653
        $output .= '<span class="wpinv-description">' . esc_html( $args['desc'] ) . '</span>';
654
    }
655
    $output .= '</span>';
656
657
    return $output;
658
}
659
660
function wpinv_html_ajax_user_search( $args = array() ) {
661
    $defaults = array(
662
        'name'        => 'user_id',
663
        'value'       => null,
664
        'placeholder' => __( 'Enter username', 'invoicing' ),
665
        'label'       => null,
666
        'desc'        => null,
667
        'class'       => '',
668
        'disabled'    => false,
669
        'autocomplete'=> 'off',
670
        'data'        => false
671
    );
672
673
    $args = wp_parse_args( $args, $defaults );
674
675
    $args['class'] = 'wpinv-ajax-user-search ' . $args['class'];
676
677
    $output  = '<span class="wpinv_user_search_wrap">';
678
        $output .= wpinv_html_text( $args );
679
        $output .= '<span class="wpinv_user_search_results hidden"><a class="wpinv-ajax-user-cancel" title="' . __( 'Cancel', 'invoicing' ) . '" aria-label="' . __( 'Cancel', 'invoicing' ) . '" href="#">x</a><span></span></span>';
680
    $output .= '</span>';
681
682
    return $output;
683
}
684
685
function wpinv_ip_geolocation() {
686
    global $wpinv_euvat;
687
    
688
    $ip         = !empty( $_GET['ip'] ) ? sanitize_text_field( $_GET['ip'] ) : '';    
689
    $content    = '';
690
    $iso        = '';
691
    $country    = '';
692
    $region     = '';
693
    $city       = '';
694
    $longitude  = '';
695
    $latitude   = '';
696
    $credit     = '';
697
    $address    = '';
698
    
699
    if ( wpinv_get_option( 'vat_ip_lookup' ) == 'geoip2' && $geoip2_city = $wpinv_euvat->geoip2_city_record( $ip ) ) {
700
        try {
701
            $iso        = $geoip2_city->country->isoCode;
702
            $country    = $geoip2_city->country->name;
703
            $region     = !empty( $geoip2_city->subdivisions ) && !empty( $geoip2_city->subdivisions[0]->name ) ? $geoip2_city->subdivisions[0]->name : '';
704
            $city       = $geoip2_city->city->name;
705
            $longitude  = $geoip2_city->location->longitude;
706
            $latitude   = $geoip2_city->location->latitude;
707
            $credit     = __( 'Geolocated using the information by MaxMind, available from <a href="http://www.maxmind.com" target="_blank">www.maxmind.com</a>', 'invoicing' );
708
        } catch( Exception $e ) { }
0 ignored issues
show
Coding Style Comprehensibility introduced by
Consider adding a comment why this CATCH block is empty.
Loading history...
709
    }
710
    
711
    if ( !( $iso && $longitude && $latitude ) && function_exists( 'simplexml_load_file' ) ) {
712
        try {
713
            $load_xml = simplexml_load_file( 'http://www.geoplugin.net/xml.gp?ip=' . $ip );
714
            
715
            if ( !empty( $load_xml ) && isset( $load_xml->geoplugin_countryCode ) && !empty( $load_xml->geoplugin_latitude ) && !empty( $load_xml->geoplugin_longitude ) ) {
716
                $iso        = $load_xml->geoplugin_countryCode;
717
                $country    = $load_xml->geoplugin_countryName;
718
                $region     = !empty( $load_xml->geoplugin_regionName ) ? $load_xml->geoplugin_regionName : '';
719
                $city       = !empty( $load_xml->geoplugin_city ) ? $load_xml->geoplugin_city : '';
720
                $longitude  = $load_xml->geoplugin_longitude;
721
                $latitude   = $load_xml->geoplugin_latitude;
722
                $credit     = $load_xml->geoplugin_credit;
0 ignored issues
show
Unused Code introduced by
The assignment to $credit is dead and can be removed.
Loading history...
723
                $credit     = __( 'Geolocated using the information by geoPlugin, available from <a href="http://www.geoplugin.com" target="_blank">www.geoplugin.com</a>', 'invoicing' ) . '<br>' . $load_xml->geoplugin_credit;
724
            }
725
        } catch( Exception $e ) { }
0 ignored issues
show
Coding Style Comprehensibility introduced by
Consider adding a comment why this CATCH block is empty.
Loading history...
726
    }
727
    
728
    if ( $iso && $longitude && $latitude ) {
729
        if ( $city ) {
730
            $address .= $city . ', ';
731
        }
732
        
733
        if ( $region ) {
734
            $address .= $region . ', ';
735
        }
736
        
737
        $address .= $country . ' (' . $iso . ')';
738
        $content = '<p>'. sprintf( __( '<b>Address:</b> %s', 'invoicing' ), $address ) . '</p>';
739
        $content .= '<p>'. $credit . '</p>';
740
    } else {
741
        $content = '<p>'. sprintf( __( 'Unable to find geolocation for the IP address: %s', 'invoicing' ), $ip ) . '</p>';
742
    }
743
    ?>
744
<!DOCTYPE html>
745
<html><head><title><?php echo sprintf( __( 'IP: %s', 'invoicing' ), $ip );?></title><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><link rel="stylesheet" href="//cdnjs.cloudflare.com/ajax/libs/leaflet/1.0.0-rc.1/leaflet.css" /><style>html,body{height:100%;margin:0;padding:0;width:100%}body{text-align:center;background:#fff;color:#222;font-size:small;}body,p{font-family: arial,sans-serif}#map{margin:auto;width:100%;height:calc(100% - 120px);min-height:240px}</style></head>
746
<body>
747
    <?php if ( $latitude && $latitude ) { ?>
748
    <div id="map"></div>
749
        <script src="//cdnjs.cloudflare.com/ajax/libs/leaflet/1.0.0-rc.1/leaflet.js"></script>
750
        <script type="text/javascript">
751
        var osmUrl = 'http://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png',
752
            osmAttrib = '&copy; <a href="http://openstreetmap.org/copyright">OpenStreetMap</a> contributors',
753
            osm = L.tileLayer(osmUrl, {maxZoom: 18, attribution: osmAttrib}),
754
            latlng = new L.LatLng(<?php echo $latitude;?>, <?php echo $longitude;?>);
755
756
        var map = new L.Map('map', {center: latlng, zoom: 12, layers: [osm]});
757
758
        var marker = new L.Marker(latlng);
759
        map.addLayer(marker);
760
761
        marker.bindPopup("<p><?php esc_attr_e( $address );?></p>");
762
    </script>
763
    <?php } ?>
764
    <div style="height:100px"><?php echo $content; ?></div>
765
</body></html>
766
<?php
767
    exit;
0 ignored issues
show
Best Practice introduced by
Using exit here is not recommended.

In general, usage of exit should be done with care and only when running in a scripting context like a CLI script.

Loading history...
768
}
769
add_action( 'wp_ajax_wpinv_ip_geolocation', 'wpinv_ip_geolocation' );
770
add_action( 'wp_ajax_nopriv_wpinv_ip_geolocation', 'wpinv_ip_geolocation' );
771
772
// Set up the template for the invoice.
773
function wpinv_template( $template ) {
774
    global $post, $wp_query;
775
    
776
    if ( ( is_single() || is_404() ) && !empty( $post->ID ) && (get_post_type( $post->ID ) == 'wpi_invoice' or get_post_type( $post->ID ) == 'wpi_quote')) {
777
        if ( wpinv_user_can_view_invoice( $post->ID ) ) {
778
            $template = wpinv_get_template_part( 'wpinv-invoice-print', false, false );
779
        } else {
780
            $template = wpinv_get_template_part( 'wpinv-invalid-access', false, false );
781
        }
782
    }
783
784
    return $template;
785
}
786
787
function wpinv_get_business_address() {
788
    $business_address   = wpinv_store_address();
789
    $business_address   = !empty( $business_address ) ? wpautop( wp_kses_post( $business_address ) ) : '';
790
    
791
    /*
792
    $default_country    = wpinv_get_default_country();
793
    $default_state      = wpinv_get_default_state();
794
    
795
    $address_fields = array();
796
    if ( !empty( $default_state ) ) {
797
        $address_fields[] = wpinv_state_name( $default_state, $default_country );
798
    }
799
    
800
    if ( !empty( $default_country ) ) {
801
        $address_fields[] = wpinv_country_name( $default_country );
802
    }
803
    
804
    if ( !empty( $address_fields ) ) {
805
        $address_fields = implode( ", ", $address_fields );
806
                
807
        $business_address .= wpautop( wp_kses_post( $address_fields ) );
808
    }
809
    */
810
    
811
    $business_address = $business_address ? '<div class="address">' . $business_address . '</div>' : '';
812
    
813
    return apply_filters( 'wpinv_get_business_address', $business_address );
814
}
815
816
function wpinv_display_from_address() {
817
    global $wpinv_euvat;
818
    
819
    $from_name = $wpinv_euvat->get_company_name();
820
    if (empty($from_name)) {
821
        $from_name = wpinv_get_business_name();
822
    }
823
    ?><div class="from col-xs-2"><strong><?php _e( 'From:', 'invoicing' ) ?></strong></div>
824
    <div class="wrapper col-xs-10">
825
        <div class="name"><?php echo esc_html( $from_name ); ?></div>
826
        <?php if ( $address = wpinv_get_business_address() ) { ?>
827
        <div class="address"><?php echo wpautop( wp_kses_post( $address ) );?></div>
828
        <?php } ?>
829
        <?php if ( $email_from = wpinv_mail_get_from_address() ) { ?>
830
        <div class="email_from"><?php echo wp_sprintf( __( 'Email: %s', 'invoicing' ), $email_from );?></div>
831
        <?php } ?>
832
    </div>
833
    <?php
834
}
835
836
function wpinv_watermark( $id = 0 ) {
837
    $output = wpinv_get_watermark( $id );
838
    
839
    return apply_filters( 'wpinv_get_watermark', $output, $id );
840
}
841
842
function wpinv_get_watermark( $id ) {
843
    if ( !$id > 0 ) {
844
        return NULL;
845
    }
846
    $invoice = wpinv_get_invoice( $id );
847
    
848
    if ( !empty( $invoice ) && "wpi_invoice" === $invoice->post_type ) {
849
        if ( $invoice->is_paid() ) {
850
            return __( 'Paid', 'invoicing' );
851
        }
852
        if ( $invoice->is_refunded() ) {
853
            return __( 'Refunded', 'invoicing' );
854
        }
855
        if ( $invoice->has_status( array( 'wpi-cancelled' ) ) ) {
856
            return __( 'Cancelled', 'invoicing' );
857
        }
858
    }
859
    
860
    return NULL;
861
}
862
863
function wpinv_display_invoice_details( $invoice ) {
864
    global $wpinv_euvat;
865
    
866
    $invoice_id = $invoice->ID;
867
    $vat_name   = $wpinv_euvat->get_vat_name();
868
    $use_taxes  = wpinv_use_taxes();
869
    
870
    $invoice_status = wpinv_get_invoice_status( $invoice_id );
871
    ?>
872
    <table class="table table-bordered table-sm">
873
        <?php if ( $invoice_number = wpinv_get_invoice_number( $invoice_id ) ) { ?>
874
            <tr class="wpi-row-number">
875
                <th><?php echo apply_filters( 'wpinv_invoice_number_label', __( 'Invoice Number', 'invoicing' ), $invoice ); ?></th>
876
                <td><?php echo esc_html( $invoice_number ); ?></td>
877
            </tr>
878
        <?php } ?>
879
        <tr class="wpi-row-status">
880
            <th><?php echo apply_filters( 'wpinv_invoice_status_label', __( 'Invoice Status', 'invoicing' ), $invoice ); ?></th>
881
            <td><?php echo wpinv_invoice_status_label( $invoice_status, wpinv_get_invoice_status( $invoice_id, true ) ); ?></td>
882
        </tr>
883
        <?php if ( $invoice->is_renewal() ) { ?>
884
        <tr class="wpi-row-parent">
885
            <th><?php echo apply_filters( 'wpinv_invoice_parent_invoice_label', __( 'Parent Invoice', 'invoicing' ), $invoice ); ?></th>
886
            <td><?php echo wpinv_invoice_link( $invoice->parent_invoice ); ?></td>
887
        </tr>
888
        <?php } ?>
889
        <?php if ( ( $gateway_name = wpinv_get_payment_gateway_name( $invoice_id ) ) && ( $invoice->is_paid() || $invoice->is_refunded() ) ) { ?>
890
            <tr class="wpi-row-gateway">
891
                <th><?php echo apply_filters( 'wpinv_invoice_payment_method_label', __( 'Payment Method', 'invoicing' ), $invoice ); ?></th>
892
                <td><?php echo $gateway_name; ?></td>
893
            </tr>
894
        <?php } ?>
895
        <?php if ( $invoice_date = wpinv_get_invoice_date( $invoice_id ) ) { ?>
896
            <tr class="wpi-row-date">
897
                <th><?php echo apply_filters( 'wpinv_invoice_date_label', __( 'Invoice Date', 'invoicing' ), $invoice ); ?></th>
898
                <td><?php echo $invoice_date; ?></td>
899
            </tr>
900
        <?php } ?>
901
        <?php if ( wpinv_get_option( 'overdue_active' ) && $invoice->needs_payment() && ( $due_date = $invoice->get_due_date( true ) ) ) { ?>
902
            <tr class="wpi-row-date">
903
                <th><?php echo apply_filters( 'wpinv_invoice_due_date_label', __( 'Due Date', 'invoicing' ), $invoice ); ?></th>
904
                <td><?php echo $due_date; ?></td>
905
            </tr>
906
        <?php } ?>
907
        <?php do_action( 'wpinv_display_details_after_due_date', $invoice_id ); ?>
908
        <?php if ( $owner_vat_number = $wpinv_euvat->get_vat_number() ) { ?>
909
            <tr class="wpi-row-ovatno">
910
                <th><?php echo apply_filters( 'wpinv_invoice_owner_vat_number_label', wp_sprintf( __( 'Owner %s Number', 'invoicing' ), $vat_name ), $invoice, $vat_name ); ?></th>
911
                <td><?php echo $owner_vat_number; ?></td>
912
            </tr>
913
        <?php } ?>
914
        <?php do_action( 'wpinv_display_details_after_due_date', $invoice_id ); ?>
915
        <?php if ( $use_taxes && ( $user_vat_number = wpinv_get_invoice_vat_number( $invoice_id ) ) ) { ?>
916
            <tr class="wpi-row-uvatno">
917
                <th><?php echo apply_filters( 'wpinv_invoice_user_vat_number_label', wp_sprintf( __( 'Invoice %s Number', 'invoicing' ), $vat_name ), $invoice, $vat_name ); ?></th>
918
                <td><?php echo $user_vat_number; ?></td>
919
            </tr>
920
        <?php } ?>
921
        <tr class="table-active tr-total wpi-row-total">
922
            <th><strong><?php _e( 'Total Amount', 'invoicing' ) ?></strong></th>
923
            <td><strong><?php echo wpinv_payment_total( $invoice_id, true ); ?></strong></td>
924
        </tr>
925
    </table>
926
<?php
927
}
928
929
/**
930
 * Retrieves the address markup to use on Invoices.
931
 * 
932
 * @since 1.0.13
933
 * @see `wpinv_get_full_address_format`
934
 * @see `wpinv_get_invoice_address_replacements`
935
 * @param array $billing_details customer's billing details
936
 * @param  string $separator How to separate address lines.
937
 * @return string
938
 */
939
function wpinv_get_invoice_address_markup( $billing_details, $separator = '<br/>' ) {
940
941
    // Retrieve the address markup...
942
    $country= empty( $billing_details['country'] ) ? '' : $billing_details['country'];
943
    $format = wpinv_get_full_address_format( $country );
944
945
    // ... and the replacements.
946
    $replacements = wpinv_get_invoice_address_replacements( $billing_details );
947
948
    $formatted_address = str_ireplace( array_keys( $replacements ), $replacements, $format );
949
    
950
	// Remove unavailable tags.
951
    $formatted_address = preg_replace( "/\{\{\w+\}\}/", '', $formatted_address );
952
953
    // Clean up white space.
954
	$formatted_address = preg_replace( '/  +/', ' ', trim( $formatted_address ) );
955
    $formatted_address = preg_replace( '/\n\n+/', "\n", $formatted_address );
956
    
957
    // Break newlines apart and remove empty lines/trim commas and white space.
958
	$formatted_address = array_filter( array_map( 'wpinv_trim_formatted_address_line', explode( "\n", $formatted_address ) ) );
959
960
    // Add html breaks.
961
	$formatted_address = implode( $separator, $formatted_address );
962
963
	// We're done!
964
	return $formatted_address;
965
    
966
}
967
968
function wpinv_display_to_address( $invoice_id = 0 ) {
969
    $invoice = wpinv_get_invoice( $invoice_id );
970
    
971
    if ( empty( $invoice ) ) {
972
        return NULL;
973
    }
974
    
975
    $billing_details = $invoice->get_user_info();
976
    $output = '<div class="to col-xs-2"><strong>' . __( 'To:', 'invoicing' ) . '</strong></div>';
977
    $output .= '<div class="wrapper col-xs-10">';
978
    
979
    ob_start();
980
    do_action( 'wpinv_display_to_address_top', $invoice );
981
    $output .= ob_get_clean();
982
    
983
    $address_row = wpinv_get_invoice_address_markup( $billing_details );
984
985
    if ( $address_row ) {
986
        $output .= '<div class="address">' . $address_row . '</div>';
987
    }
988
989
    if ( $phone = $invoice->get_phone() ) {
990
        $output .= '<div class="phone">' . wp_sprintf( __( 'Phone: %s', 'invoicing' ), esc_html( $phone ) ) . '</div>';
991
    }
992
    if ( $email = $invoice->get_email() ) {
993
        $output .= '<div class="email">' . wp_sprintf( __( 'Email: %s' , 'invoicing'), esc_html( $email ) ) . '</div>';
994
    }
995
996
    ob_start();
997
    do_action( 'wpinv_display_to_address_bottom', $invoice );
998
    $output .= ob_get_clean();
999
    
1000
    $output .= '</div>';
1001
    $output = apply_filters( 'wpinv_display_to_address', $output, $invoice );
1002
1003
    echo $output;
1004
}
1005
1006
function wpinv_display_line_items( $invoice_id = 0 ) {
1007
    global $wpinv_euvat, $ajax_cart_details;
1008
    $invoice            = wpinv_get_invoice( $invoice_id );
1009
    $quantities_enabled = wpinv_item_quantities_enabled();
1010
    $use_taxes          = wpinv_use_taxes();
1011
    if ( !$use_taxes && (float)$invoice->get_tax() > 0 ) {
1012
        $use_taxes = true;
1013
    }
1014
    $zero_tax           = !(float)$invoice->get_tax() > 0 ? true : false;
1015
    $tax_label           = $use_taxes && $invoice->has_vat() ? $wpinv_euvat->get_vat_name() : __( 'Tax', 'invoicing' );
1016
    $tax_title          = !$zero_tax && $use_taxes ? ( wpinv_prices_include_tax() ? wp_sprintf( __( '(%s Incl.)', 'invoicing' ), $tax_label ) : wp_sprintf( __( '(%s Excl.)', 'invoicing' ), $tax_label ) ) : '';
1017
1018
    $cart_details       = $invoice->get_cart_details();
1019
    $ajax_cart_details  = $cart_details;
1020
    ob_start();
1021
    ?>
1022
    <table class="table table-sm table-bordered table-responsive">
1023
        <thead>
1024
            <tr>
1025
                <th class="name"><strong><?php _e( "Item Name", "invoicing" );?></strong></th>
1026
                <th class="rate"><strong><?php _e( "Price", "invoicing" );?></strong></th>
1027
                <?php if ($quantities_enabled) { ?>
1028
                    <th class="qty"><strong><?php _e( "Qty", "invoicing" );?></strong></th>
1029
                <?php } ?>
1030
                <?php if ($use_taxes && !$zero_tax) { ?>
1031
                    <th class="tax"><strong><?php echo $tax_label . ' <span class="normal small">(%)</span>'; ?></strong></th>
1032
                <?php } ?>
1033
                <th class="total"><strong><?php echo __( "Item Total", "invoicing" ) . ' <span class="normal small">' . $tax_title . '<span>';?></strong></th>
1034
            </tr>
1035
        </thead>
1036
        <tbody>
1037
        <?php 
1038
            if ( !empty( $cart_details ) ) {
1039
                do_action( 'wpinv_display_line_items_start', $invoice );
1040
1041
                $count = 0;
1042
                $cols  = 3;
1043
                foreach ( $cart_details as $key => $cart_item ) {
1044
                    $item_id    = !empty($cart_item['id']) ? absint( $cart_item['id'] ) : '';
1045
                    $item_price = isset($cart_item["item_price"]) ? wpinv_round_amount( $cart_item["item_price"] ) : 0;
1046
                    $line_total = isset($cart_item["subtotal"]) ? wpinv_round_amount( $cart_item["subtotal"] ) : 0;
1047
                    $quantity   = !empty($cart_item['quantity']) && (int)$cart_item['quantity'] > 0 ? absint( $cart_item['quantity'] ) : 1;
1048
1049
                    $item       = $item_id ? new WPInv_Item( $item_id ) : NULL;
1050
                    $summary    = '';
1051
	                $item_name    = '';
1052
                    $cols       = 3;
1053
                    if ( !empty($item) ) {
1054
                        $item_name  = $item->get_name();
1055
                        $summary    = $item->get_summary();
1056
                    }
1057
                    $item_name  = !empty($cart_item['name']) ? $cart_item['name'] : $item_name;
1058
1059
                    $summary = apply_filters( 'wpinv_print_invoice_line_item_summary', $summary, $cart_item, $item, $invoice );
1060
1061
                    $item_tax       = '';
1062
                    $tax_rate       = '';
1063
                    if ( $use_taxes && $cart_item['tax'] > 0 && $cart_item['subtotal'] > 0 ) {
1064
                        $item_tax = wpinv_price( wpinv_format_amount( $cart_item['tax'] ), $invoice->get_currency() );
1065
                        $tax_rate = !empty( $cart_item['vat_rate'] ) ? $cart_item['vat_rate'] : ( $cart_item['tax'] / $cart_item['subtotal'] ) * 100;
1066
                        $tax_rate = $tax_rate > 0 ? (float)wpinv_round_amount( $tax_rate, 4 ) : '';
1067
                        $tax_rate = $tax_rate != '' ? ' <small class="tax-rate">(' . $tax_rate . '%)</small>' : '';
1068
                    }
1069
1070
                    $line_item_tax = $item_tax . $tax_rate;
1071
1072
                    if ( $line_item_tax === '' ) {
1073
                        $line_item_tax = 0; // Zero tax
1074
                    }
1075
1076
                    $action = apply_filters( 'wpinv_display_line_item_action', '', $cart_item, $invoice, $cols );
1077
1078
                    $line_item = '<tr class="row-' . ( ($count % 2 == 0) ? 'even' : 'odd' ) . ' wpinv-item">';
1079
                        $line_item .= '<td class="name">' . $action. esc_html__( $item_name, 'invoicing' ) . wpinv_get_item_suffix( $item );
1080
                        if ( $summary !== '' ) {
1081
                            $line_item .= '<br/><small class="meta">' . wpautop( wp_kses_post( $summary ) ) . '</small>';
1082
                        }
1083
                        $line_item .= '</td>';
1084
1085
                        $line_item .= '<td class="rate">' . esc_html__( wpinv_price( wpinv_format_amount( $item_price ), $invoice->get_currency() ) ) . '</td>';
1086
                        if ($quantities_enabled) {
1087
                            $cols++;
1088
                            $line_item .= '<td class="qty">' . $quantity . '</td>';
1089
                        }
1090
                        if ($use_taxes && !$zero_tax) {
1091
                            $cols++;
1092
                            $line_item .= '<td class="tax">' . $line_item_tax . '</td>';
1093
                        }
1094
                        $line_item .= '<td class="total">' . esc_html__( wpinv_price( wpinv_format_amount( $line_total ), $invoice->get_currency() ) ) . '</td>';
1095
                    $line_item .= '</tr>';
1096
1097
                    echo apply_filters( 'wpinv_display_line_item', $line_item, $cart_item, $invoice, $cols );
1098
1099
                    $count++;
1100
                }
1101
1102
                do_action( 'wpinv_display_before_subtotal', $invoice, $cols );
1103
                ?>
1104
                <tr class="row-sub-total row_odd">
1105
                    <td class="rate" colspan="<?php echo ( $cols - 1 ); ?>"><?php echo apply_filters( 'wpinv_print_cart_subtotal_label', '<strong>' . __( 'Sub Total', 'invoicing' ) . ':</strong>', $invoice ); ?></td>
1106
                    <td class="total"><strong><?php _e( wpinv_subtotal( $invoice_id, true ) ) ?></strong></td>
1107
                </tr>
1108
                <?php
1109
                do_action( 'wpinv_display_after_subtotal', $invoice, $cols );
1110
                
1111
                if ( wpinv_discount( $invoice_id, false ) > 0 ) {
1112
                    do_action( 'wpinv_display_before_discount', $invoice, $cols );
1113
                    ?>
1114
                        <tr class="row-discount">
1115
                            <td class="rate" colspan="<?php echo ( $cols - 1 ); ?>"><?php wpinv_get_discount_label( wpinv_discount_code( $invoice_id ) ); ?>:</td>
1116
                            <td class="total"><?php echo wpinv_discount( $invoice_id, true, true ); ?></td>
1117
                        </tr>
1118
                    <?php
1119
                    do_action( 'wpinv_display_after_discount', $invoice, $cols );
1120
                }
1121
1122
                if ( $use_taxes ) {
1123
                    do_action( 'wpinv_display_before_tax', $invoice, $cols );
1124
                    ?>
1125
                    <tr class="row-tax">
1126
                        <td class="rate" colspan="<?php echo ( $cols - 1 ); ?>"><?php echo apply_filters( 'wpinv_print_cart_tax_label', '<strong>' . $tax_label . ':</strong>', $invoice ); ?></td>
1127
                        <td class="total"><?php _e( wpinv_tax( $invoice_id, true ) ) ?></td>
1128
                    </tr>
1129
                    <?php
1130
                    do_action( 'wpinv_display_after_tax', $invoice, $cols );
1131
                }
1132
1133
                do_action( 'wpinv_display_before_total', $invoice, $cols );
1134
                ?>
1135
                <tr class="table-active row-total">
1136
                    <td class="rate" colspan="<?php echo ( $cols - 1 ); ?>"><?php echo apply_filters( 'wpinv_print_cart_total_label', '<strong>' . __( 'Total', 'invoicing' ) . ':</strong>', $invoice ); ?></td>
1137
                    <td class="total"><strong><?php _e( wpinv_payment_total( $invoice_id, true ) ) ?></strong></td>
1138
                </tr>
1139
                <?php
1140
                do_action( 'wpinv_display_after_total', $invoice, $cols );
1141
1142
                do_action( 'wpinv_display_line_end', $invoice, $cols );
1143
            }
1144
        ?>
1145
        </tbody>
1146
    </table>
1147
    <?php
1148
    echo ob_get_clean();
1149
}
1150
1151
function wpinv_display_invoice_totals( $invoice_id = 0 ) {
1152
    $use_taxes = wpinv_use_taxes();
1153
1154
    do_action( 'wpinv_before_display_totals_table', $invoice_id ); 
1155
    ?>
1156
    <table class="table table-sm table-bordered table-responsive">
1157
        <tbody>
1158
            <?php do_action( 'wpinv_before_display_totals' ); ?>
1159
            <tr class="row-sub-total">
1160
                <td class="rate"><strong><?php _e( 'Sub Total', 'invoicing' ); ?></strong></td>
1161
                <td class="total"><strong><?php _e( wpinv_subtotal( $invoice_id, true ) ) ?></strong></td>
1162
            </tr>
1163
            <?php do_action( 'wpinv_after_display_totals' ); ?>
1164
            <?php if ( wpinv_discount( $invoice_id, false ) > 0 ) { ?>
1165
                <tr class="row-discount">
1166
                    <td class="rate"><?php wpinv_get_discount_label( wpinv_discount_code( $invoice_id ) ); ?></td>
1167
                    <td class="total"><?php echo wpinv_discount( $invoice_id, true, true ); ?></td>
1168
                </tr>
1169
            <?php do_action( 'wpinv_after_display_discount' ); ?>
1170
            <?php } ?>
1171
            <?php if ( $use_taxes ) { ?>
1172
            <tr class="row-tax">
1173
                <td class="rate"><?php _e( 'Tax', 'invoicing' ); ?></td>
1174
                <td class="total"><?php _e( wpinv_tax( $invoice_id, true ) ) ?></td>
1175
            </tr>
1176
            <?php do_action( 'wpinv_after_display_tax' ); ?>
1177
            <?php } ?>
1178
            <?php if ( $fees = wpinv_get_fees( $invoice_id ) ) { ?>
1179
                <?php foreach ( $fees as $fee ) { ?>
1180
                    <tr class="row-fee">
1181
                        <td class="rate"><?php echo $fee['label']; ?></td>
1182
                        <td class="total"><?php echo $fee['amount_display']; ?></td>
1183
                    </tr>
1184
                <?php } ?>
1185
            <?php } ?>
1186
            <tr class="table-active row-total">
1187
                <td class="rate"><strong><?php _e( 'Total', 'invoicing' ) ?></strong></td>
1188
                <td class="total"><strong><?php _e( wpinv_payment_total( $invoice_id, true ) ) ?></strong></td>
1189
            </tr>
1190
            <?php do_action( 'wpinv_after_totals' ); ?>
1191
        </tbody>
1192
1193
    </table>
1194
1195
    <?php do_action( 'wpinv_after_totals_table' );
1196
}
1197
1198
function wpinv_display_payments_info( $invoice_id = 0, $echo = true ) {
1199
    $invoice = wpinv_get_invoice( $invoice_id );
1200
1201
    ob_start();
1202
    do_action( 'wpinv_before_display_payments_info', $invoice_id );
1203
    if ( ( $gateway_title = $invoice->get_gateway_title() ) || $invoice->is_paid() || $invoice->is_refunded() ) {
1204
        ?>
1205
        <div class="wpi-payment-info">
1206
            <p class="wpi-payment-gateway"><?php echo wp_sprintf( __( 'Payment via %s', 'invoicing' ), $gateway_title ? $gateway_title : __( 'Manually', 'invoicing' ) ); ?></p>
1207
            <?php if ( $gateway_title ) { ?>
1208
            <p class="wpi-payment-transid"><?php echo wp_sprintf( __( 'Transaction ID: %s', 'invoicing' ), $invoice->get_transaction_id() ); ?></p>
1209
            <?php } ?>
1210
        </div>
1211
        <?php
1212
    }
1213
    do_action( 'wpinv_after_display_payments_info', $invoice_id );
1214
    $outout = ob_get_clean();
1215
1216
    if ( $echo ) {
1217
        echo $outout;
1218
    } else {
1219
        return $outout;
1220
    }
1221
}
1222
1223
function wpinv_display_style( $invoice ) {
1224
    wp_register_style( 'wpinv-single-style', WPINV_PLUGIN_URL . 'assets/css/invoice.css', array(), WPINV_VERSION );
1225
1226
    wp_print_styles( 'open-sans' );
1227
    wp_print_styles( 'wpinv-single-style' );
1228
1229
    $custom_css = wpinv_get_option('template_custom_css');
1230
    if(isset($custom_css) && !empty($custom_css)){
1231
        $custom_css     = wp_kses( $custom_css, array( '\'', '\"' ) );
0 ignored issues
show
Bug introduced by
array(''', '\"') of type array<integer,string> is incompatible with the type array<mixed,array>|string expected by parameter $allowed_html of wp_kses(). ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

1231
        $custom_css     = wp_kses( $custom_css, /** @scrutinizer ignore-type */ array( '\'', '\"' ) );
Loading history...
1232
        $custom_css     = str_replace( '&gt;', '>', $custom_css );
1233
        echo '<style type="text/css">';
1234
        echo $custom_css;
1235
        echo '</style>';
1236
    }
1237
}
1238
add_action( 'wpinv_invoice_print_head', 'wpinv_display_style' );
1239
add_action( 'wpinv_invalid_invoice_head', 'wpinv_display_style' );
1240
1241
function wpinv_checkout_billing_details() {
1242
    $invoice_id = (int)wpinv_get_invoice_cart_id();
1243
    if (empty($invoice_id)) {
1244
        wpinv_error_log( 'Invoice id not found', 'ERROR', __FILE__, __LINE__ );
1245
        return null;
1246
    }
1247
1248
    $invoice = wpinv_get_invoice_cart( $invoice_id );
1249
    if (empty($invoice)) {
1250
        wpinv_error_log( 'Invoice not found', 'ERROR', __FILE__, __LINE__ );
1251
        return null;
1252
    }
1253
    $user_id        = $invoice->get_user_id();
1254
    $user_info      = $invoice->get_user_info();
1255
    $address_info   = wpinv_get_user_address( $user_id );
1256
1257
    if ( empty( $user_info['first_name'] ) && !empty( $user_info['first_name'] ) ) {
1258
        $user_info['first_name'] = $user_info['first_name'];
1259
        $user_info['last_name'] = $user_info['last_name'];
1260
    }
1261
1262
    if ( ( ( empty( $user_info['country'] ) && !empty( $address_info['country'] ) ) || ( empty( $user_info['state'] ) && !empty( $address_info['state'] ) && $user_info['country'] == $address_info['country'] ) ) ) {
1263
        $user_info['country']   = $address_info['country'];
1264
        $user_info['state']     = $address_info['state'];
1265
        $user_info['city']      = $address_info['city'];
1266
        $user_info['zip']       = $address_info['zip'];
1267
    }
1268
1269
    $address_fields = array(
1270
        'user_id',
1271
        'company',
1272
        'vat_number',
1273
        'email',
1274
        'phone',
1275
        'address'
1276
    );
1277
1278
    foreach ( $address_fields as $field ) {
1279
        if ( empty( $user_info[$field] ) ) {
1280
            $user_info[$field] = $address_info[$field];
1281
        }
1282
    }
1283
1284
    return apply_filters( 'wpinv_checkout_billing_details', $user_info, $invoice );
1285
}
1286
1287
function wpinv_admin_get_line_items($invoice = array()) {
1288
    $item_quantities    = wpinv_item_quantities_enabled();
1289
    $use_taxes          = wpinv_use_taxes();
1290
1291
    if ( empty( $invoice ) ) {
1292
        return NULL;
1293
    }
1294
1295
    $cart_items = $invoice->get_cart_details();
1296
    if ( empty( $cart_items ) ) {
1297
        return NULL;
1298
    }
1299
    ob_start();
1300
1301
    do_action( 'wpinv_admin_before_line_items', $cart_items, $invoice );
1302
1303
    $count = 0;
1304
    foreach ( $cart_items as $key => $cart_item ) {
1305
        $item_id    = $cart_item['id'];
1306
        $wpi_item   = $item_id > 0 ? new WPInv_Item( $item_id ) : NULL;
1307
1308
        if (empty($wpi_item)) {
1309
            continue;
1310
        }
1311
1312
        $item_price     = wpinv_price( wpinv_format_amount( $cart_item['item_price'] ), $invoice->get_currency() );
1313
        $quantity       = !empty( $cart_item['quantity'] ) && $cart_item['quantity'] > 0 ? $cart_item['quantity'] : 1;
1314
        $item_subtotal  = wpinv_price( wpinv_format_amount( $cart_item['subtotal'] ), $invoice->get_currency() );
1315
        $can_remove     = true;
1316
1317
        $summary = apply_filters( 'wpinv_admin_invoice_line_item_summary', '', $cart_item, $wpi_item, $invoice );
1318
1319
        $item_tax       = '';
1320
        $tax_rate       = '';
1321
        if ( $cart_item['tax'] > 0 && $cart_item['subtotal'] > 0 ) {
1322
            $item_tax = wpinv_price( wpinv_format_amount( $cart_item['tax'] ), $invoice->get_currency() );
1323
            $tax_rate = !empty( $cart_item['vat_rate'] ) ? $cart_item['vat_rate'] : ( $cart_item['tax'] / $cart_item['subtotal'] ) * 100;
1324
            $tax_rate = $tax_rate > 0 ? (float)wpinv_round_amount( $tax_rate, 4 ) : '';
1325
            $tax_rate = $tax_rate != '' ? ' <span class="tax-rate">(' . $tax_rate . '%)</span>' : '';
1326
        }
1327
        $line_item_tax = $item_tax . $tax_rate;
1328
1329
        if ( $line_item_tax === '' ) {
1330
            $line_item_tax = 0; // Zero tax
1331
        }
1332
1333
        $line_item = '<tr class="item item-' . ( ($count % 2 == 0) ? 'even' : 'odd' ) . '" data-item-id="' . $item_id . '">';
1334
            $line_item .= '<td class="id">' . $item_id . '</td>';
1335
            $line_item .= '<td class="title"><a href="' . get_edit_post_link( $item_id ) . '" target="_blank">' . $cart_item['name'] . '</a>' . wpinv_get_item_suffix( $wpi_item );
1336
            if ( $summary !== '' ) {
1337
                $line_item .= '<span class="meta">' . wpautop( wp_kses_post( $summary ) ) . '</span>';
1338
            }
1339
            $line_item .= '</td>';
1340
            $line_item .= '<td class="price">' . $item_price . '</td>';
1341
            
1342
            if ( $item_quantities ) {
1343
                if ( count( $cart_items ) == 1 && $quantity <= 1 ) {
1344
                    $can_remove = false;
1345
                }
1346
                $line_item .= '<td class="qty" data-quantity="' . $quantity . '">&nbsp;&times;&nbsp;' . $quantity . '</td>';
1347
            } else {
1348
                if ( count( $cart_items ) == 1 ) {
1349
                    $can_remove = false;
1350
                }
1351
            }
1352
            $line_item .= '<td class="total">' . $item_subtotal . '</td>';
1353
            
1354
            if ( $use_taxes ) {
1355
                $line_item .= '<td class="tax">' . $line_item_tax . '</td>';
1356
            }
1357
            $line_item .= '<td class="action">';
1358
            if ( !$invoice->is_paid() && !$invoice->is_refunded() && $can_remove ) {
1359
                $line_item .= '<i class="fa fa-remove wpinv-item-remove"></i>';
1360
            }
1361
            $line_item .= '</td>';
1362
        $line_item .= '</tr>';
1363
1364
        echo apply_filters( 'wpinv_admin_line_item', $line_item, $cart_item, $invoice );
1365
1366
        $count++;
1367
    } 
1368
1369
    do_action( 'wpinv_admin_after_line_items', $cart_items, $invoice );
1370
1371
    return ob_get_clean();
1372
}
1373
1374
function wpinv_checkout_form() {
1375
    global $wpi_checkout_id;
1376
1377
    // Set current invoice id.
1378
    $wpi_checkout_id = wpinv_get_invoice_cart_id();
1379
1380
    //Maybe update the prices
1381
    if(! empty( $_GET['wpi_dynamic_item'] ) && ! empty( $_GET['wpi_dynamic_price'] ) ) {
1382
1383
        //If the invoice exists, update it with new pricing details
1384
        if (! empty( $wpi_checkout_id ) ) {
1385
1386
            $_invoice       = wpinv_get_invoice_cart();
1387
            $_cart_details  = $_invoice->get_cart_details();
1388
            $_dynamic_item  = sanitize_text_field( $_GET['wpi_dynamic_item'] );
1389
1390
            //First, fetch the item
1391
            $item    = new WPInv_Item( $_dynamic_item );
1392
    
1393
            //Next, ensure it supports dynamic pricing...
1394
            if( $item->supports_dynamic_pricing() && $item->get_is_dynamic_pricing() ) {
1395
                
1396
                //... and that the new price is not lower than the minimum price
1397
                $_dynamic_price = (float) wpinv_sanitize_amount( sanitize_text_field( $_GET['wpi_dynamic_price'] ) );
1398
                if( $_dynamic_price < $item->get_minimum_price() ) {
1399
                    $_dynamic_price = $item->get_minimum_price();
1400
                }
1401
1402
                //Finally, update our invoice with the new price
1403
                if ( !empty( $_cart_details ) ) {
1404
1405
                    foreach ( $_cart_details as $key => $item ) {
1406
                        if ( !empty( $item['id'] ) && $_dynamic_item == $item['id'] ) {
1407
                            $_cart_details[$key]['custom_price'] = $_dynamic_price;
1408
                            $_cart_details[$key]['item_price']   = $_dynamic_price;
1409
                        }
1410
                    }
1411
1412
                    $_meta = $_invoice->get_meta();
1413
                    $_meta['cart_details'] = $_cart_details;
1414
                    $_invoice->set( 'payment_meta', $_meta );
1415
                    $_invoice->set( 'cart_details', $_cart_details );
1416
                    $_invoice->recalculate_totals();
1417
1418
                }
1419
1420
            }
1421
            
1422
        }
1423
1424
    }
1425
1426
    $form_action  = esc_url( wpinv_get_checkout_uri() );
0 ignored issues
show
Bug introduced by
It seems like wpinv_get_checkout_uri() can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

1426
    $form_action  = esc_url( /** @scrutinizer ignore-type */ wpinv_get_checkout_uri() );
Loading history...
1427
1428
    ob_start();
1429
	    do_action( 'wpinv_checkout_content_before' );
1430
        echo '<div id="wpinv_checkout_wrap">';
1431
1432
        if ( wpinv_get_cart_contents() || wpinv_cart_has_fees() ) {
1433
            ?>
1434
            <div id="wpinv_checkout_form_wrap" class="wpinv_clearfix table-responsive">
1435
                <?php do_action( 'wpinv_before_checkout_form' ); ?>
1436
                <form id="wpinv_checkout_form" class="wpi-form" action="<?php echo $form_action; ?>" method="POST">
1437
                    <?php
1438
                    do_action( 'wpinv_checkout_form_top' );
1439
                    do_action( 'wpinv_checkout_billing_info' );
1440
                    do_action( 'wpinv_checkout_cart' );
1441
                    do_action( 'wpinv_payment_mode_select'  );
1442
                    do_action( 'wpinv_checkout_form_bottom' )
1443
                    ?>
1444
                </form>
1445
                <?php do_action( 'wpinv_after_purchase_form' ); ?>
1446
            </div><!--end #wpinv_checkout_form_wrap-->
1447
        <?php
1448
        } else {
1449
            do_action( 'wpinv_cart_empty' );
1450
        }
1451
        echo '</div><!--end #wpinv_checkout_wrap-->';
1452
	    do_action( 'wpinv_checkout_content_after' );
1453
    return ob_get_clean();
1454
}
1455
1456
function wpinv_checkout_cart( $cart_details = array(), $echo = true ) {
1457
    global $ajax_cart_details;
1458
    $ajax_cart_details = $cart_details;
1459
1460
    ob_start();
1461
    do_action( 'wpinv_before_checkout_cart' );
1462
    echo '<div id="wpinv_checkout_cart_form" method="post">';
1463
        echo '<div id="wpinv_checkout_cart_wrap">';
1464
            wpinv_get_template_part( 'wpinv-checkout-cart' );
1465
        echo '</div>';
1466
    echo '</div>';
1467
    do_action( 'wpinv_after_checkout_cart' );
1468
    $content = ob_get_clean();
1469
    
1470
    if ( $echo ) {
1471
        echo $content;
1472
    } else {
1473
        return $content;
1474
    }
1475
}
1476
add_action( 'wpinv_checkout_cart', 'wpinv_checkout_cart', 10 );
1477
1478
function wpinv_empty_cart_message() {
1479
	return apply_filters( 'wpinv_empty_cart_message', '<span class="wpinv_empty_cart">' . __( 'Your cart is empty.', 'invoicing' ) . '</span>' );
1480
}
1481
1482
/**
1483
 * Echoes the Empty Cart Message
1484
 *
1485
 * @since 1.0
1486
 * @return void
1487
 */
1488
function wpinv_empty_checkout_cart() {
1489
	echo wpinv_empty_cart_message();
1490
}
1491
add_action( 'wpinv_cart_empty', 'wpinv_empty_checkout_cart' );
1492
1493
function wpinv_update_cart_button() {
1494
    if ( !wpinv_item_quantities_enabled() )
1495
        return;
1496
?>
1497
    <input type="submit" name="wpinv_update_cart_submit" class="wpinv-submit wpinv-no-js button" value="<?php _e( 'Update Cart', 'invoicing' ); ?>"/>
1498
    <input type="hidden" name="wpi_action" value="update_cart"/>
1499
<?php
1500
}
1501
1502
function wpinv_checkout_cart_columns() {
1503
    $default = 3;
1504
    if ( wpinv_item_quantities_enabled() ) {
1505
        $default++;
1506
    }
1507
    
1508
    if ( wpinv_use_taxes() ) {
1509
        $default++;
1510
    }
1511
1512
    return apply_filters( 'wpinv_checkout_cart_columns', $default );
1513
}
1514
1515
function wpinv_display_cart_messages() {
1516
    global $wpi_session;
1517
1518
    $messages = $wpi_session->get( 'wpinv_cart_messages' );
1519
1520
    if ( $messages ) {
1521
        foreach ( $messages as $message_id => $message ) {
1522
            // Try and detect what type of message this is
1523
            if ( strpos( strtolower( $message ), 'error' ) ) {
1524
                $type = 'error';
1525
            } elseif ( strpos( strtolower( $message ), 'success' ) ) {
1526
                $type = 'success';
1527
            } else {
1528
                $type = 'info';
1529
            }
1530
1531
            $classes = apply_filters( 'wpinv_' . $type . '_class', array( 'wpinv_errors', 'wpinv-alert', 'wpinv-alert-' . $type ) );
1532
1533
            echo '<div class="' . implode( ' ', $classes ) . '">';
1534
                // Loop message codes and display messages
1535
                    echo '<p class="wpinv_error" id="wpinv_msg_' . $message_id . '">' . $message . '</p>';
1536
            echo '</div>';
1537
        }
1538
1539
        // Remove all of the cart saving messages
1540
        $wpi_session->set( 'wpinv_cart_messages', null );
1541
    }
1542
}
1543
add_action( 'wpinv_before_checkout_cart', 'wpinv_display_cart_messages' );
1544
1545
function wpinv_discount_field() {
1546
    if ( isset( $_GET['wpi-gateway'] ) && wpinv_is_ajax_disabled() ) {
1547
        return; // Only show before a payment method has been selected if ajax is disabled
1548
    }
1549
1550
    if ( !wpinv_is_checkout() ) {
1551
        return;
1552
    }
1553
1554
    if ( wpinv_has_active_discounts() && wpinv_get_cart_total() ) {
1555
    ?>
1556
    <div id="wpinv-discount-field" class="panel panel-default">
1557
        <div class="panel-body">
1558
            <p>
1559
                <label class="wpinv-label" for="wpinv_discount_code"><strong><?php _e( 'Discount', 'invoicing' ); ?></strong></label>
1560
                <span class="wpinv-description"><?php _e( 'Enter a discount code if you have one.', 'invoicing' ); ?></span>
1561
            </p>
1562
            <div class="form-group row">
1563
                <div class="col-sm-4">
1564
                    <input class="wpinv-input form-control" type="text" id="wpinv_discount_code" name="wpinv_discount_code" placeholder="<?php _e( 'Enter discount code', 'invoicing' ); ?>"/>
1565
                </div>
1566
                <div class="col-sm-3">
1567
                    <button id="wpi-apply-discount" type="button" class="btn btn-success btn-sm"><?php _e( 'Apply Discount', 'invoicing' ); ?></button>
1568
                </div>
1569
                <div style="clear:both"></div>
1570
                <div class="col-sm-12 wpinv-discount-msg">
1571
                    <div class="alert alert-success"><i class="fa fa-check-circle"></i><span class="wpi-msg"></span></div>
1572
                    <div class="alert alert-error"><i class="fa fa-warning"></i><span class="wpi-msg"></span></div>
1573
                </div>
1574
            </div>
1575
        </div>
1576
    </div>
1577
<?php
1578
    }
1579
}
1580
add_action( 'wpinv_after_checkout_cart', 'wpinv_discount_field', -10 );
1581
1582
function wpinv_agree_to_terms_js() {
1583
    if ( wpinv_get_option( 'show_agree_to_terms', false ) ) {
1584
?>
1585
<script type="text/javascript">
1586
    jQuery(document).ready(function($){
1587
        $( document.body ).on('click', '.wpinv_terms_links', function(e) {
1588
            //e.preventDefault();
1589
            $('#wpinv_terms').slideToggle();
1590
            $('.wpinv_terms_links').toggle();
1591
            return false;
1592
        });
1593
    });
1594
</script>
1595
<?php
1596
    }
1597
}
1598
add_action( 'wpinv_checkout_form_top', 'wpinv_agree_to_terms_js' );
1599
1600
function wpinv_payment_mode_select() {
1601
    $gateways = wpinv_get_enabled_payment_gateways( true );
1602
    $gateways = apply_filters( 'wpinv_payment_gateways_on_cart', $gateways );
1603
    $invoice = wpinv_get_invoice( 0, true );
1604
1605
    do_action('wpinv_payment_mode_top');
1606
    $invoice_id = (int)$invoice->ID;
1607
    $chosen_gateway = wpinv_get_chosen_gateway( $invoice_id );
1608
    ?>
1609
    <div id="wpinv_payment_mode_select" data-gateway="<?php echo $chosen_gateway; ?>" <?php echo ( $invoice->is_free() ? 'style="display:none;" data-free="1"' : '' ); ?>>
1610
            <?php do_action( 'wpinv_payment_mode_before_gateways_wrap' ); ?>
1611
            <div id="wpinv-payment-mode-wrap" class="panel panel-default">
1612
                <div class="panel-heading"><h3 class="panel-title"><?php _e( 'Select Payment Method', 'invoicing' ); ?></h3></div>
1613
                <div class="panel-body list-group wpi-payment_methods">
1614
                    <?php
1615
                    do_action( 'wpinv_payment_mode_before_gateways' );
1616
1617
                    if ( !empty( $gateways ) ) {
1618
                        foreach ( $gateways as $gateway_id => $gateway ) {
1619
                            $checked       = checked( $gateway_id, $chosen_gateway, false );
1620
                            $button_label  = wpinv_get_gateway_button_label( $gateway_id );
1621
                            $gateway_label = wpinv_get_gateway_checkout_label( $gateway_id );
1622
                            $description   = wpinv_get_gateway_description( $gateway_id );
1623
                            ?>
1624
                            <div class="list-group-item">
1625
                                <div class="radio">
1626
                                    <label><input type="radio" data-button-text="<?php echo esc_attr( $button_label );?>" value="<?php echo esc_attr( $gateway_id ) ;?>" <?php echo $checked ;?> id="wpi_gateway_<?php echo esc_attr( $gateway_id );?>" name="wpi-gateway" class="wpi-pmethod"><?php echo esc_html( $gateway_label ); ?></label>
1627
                                </div>
1628
                                <div style="display:none;" class="payment_box wpi_gateway_<?php echo esc_attr( $gateway_id );?>" role="alert">
1629
                                    <?php if ( !empty( $description ) ) { ?>
1630
                                        <div class="wpi-gateway-desc alert alert-info"><?php _e( $description, 'invoicing' ); ?></div>
1631
                                    <?php } ?>
1632
                                    <?php do_action( 'wpinv_' . $gateway_id . '_cc_form', $invoice_id ) ;?>
1633
                                </div>
1634
                            </div>
1635
                            <?php
1636
                        }
1637
                    } else {
1638
                        echo '<div class="alert alert-warning">'. __( 'No payment gateway active', 'invoicing' ) .'</div>';
1639
                    }
1640
1641
                    do_action( 'wpinv_payment_mode_after_gateways' );
1642
                    ?>
1643
                </div>
1644
            </div>
1645
            <?php do_action( 'wpinv_payment_mode_after_gateways_wrap' ); ?>
1646
    </div>
1647
    <?php
1648
    do_action('wpinv_payment_mode_bottom');
1649
}
1650
add_action( 'wpinv_payment_mode_select', 'wpinv_payment_mode_select' );
1651
1652
function wpinv_checkout_billing_info() {
1653
    if ( wpinv_is_checkout() ) {
1654
        $billing_details    = wpinv_checkout_billing_details();
1655
        $selected_country   = !empty( $billing_details['country'] ) ? $billing_details['country'] : wpinv_default_billing_country();
1656
        ?>
1657
        <div id="wpinv-fields" class="clearfix">
1658
            <div id="wpi-billing" class="wpi-billing clearfix panel panel-default">
1659
                <div class="panel-heading"><h3 class="panel-title"><?php _e( 'Billing Details', 'invoicing' );?></h3></div>
1660
                <div id="wpinv-fields-box" class="panel-body">
1661
                    <?php do_action( 'wpinv_checkout_billing_fields_first', $billing_details ); ?>
1662
                    <p class="wpi-cart-field wpi-col2 wpi-colf">
1663
                        <label for="wpinv_first_name" class="wpi-label"><?php _e( 'First Name', 'invoicing' );?><?php if ( wpinv_get_option( 'fname_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1664
                        <?php
1665
                        echo wpinv_html_text( array(
1666
                                'id'            => 'wpinv_first_name',
1667
                                'name'          => 'wpinv_first_name',
1668
                                'value'         => $billing_details['first_name'],
1669
                                'class'         => 'wpi-input form-control',
1670
                                'placeholder'   => __( 'First name', 'invoicing' ),
1671
                                'required'      => (bool)wpinv_get_option( 'fname_mandatory' ),
1672
                            ) );
1673
                        ?>
1674
                    </p>
1675
                    <p class="wpi-cart-field wpi-col2 wpi-coll">
1676
                        <label for="wpinv_last_name" class="wpi-label"><?php _e( 'Last Name', 'invoicing' );?><?php if ( wpinv_get_option( 'lname_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1677
                        <?php
1678
                        echo wpinv_html_text( array(
1679
                                'id'            => 'wpinv_last_name',
1680
                                'name'          => 'wpinv_last_name',
1681
                                'value'         => $billing_details['last_name'],
1682
                                'class'         => 'wpi-input form-control',
1683
                                'placeholder'   => __( 'Last name', 'invoicing' ),
1684
                                'required'      => (bool)wpinv_get_option( 'lname_mandatory' ),
1685
                            ) );
1686
                        ?>
1687
                    </p>
1688
                    <p class="wpi-cart-field wpi-col2 wpi-colf">
1689
                        <label for="wpinv_address" class="wpi-label"><?php _e( 'Address', 'invoicing' );?><?php if ( wpinv_get_option( 'address_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1690
                        <?php
1691
                        echo wpinv_html_text( array(
1692
                                'id'            => 'wpinv_address',
1693
                                'name'          => 'wpinv_address',
1694
                                'value'         => $billing_details['address'],
1695
                                'class'         => 'wpi-input form-control',
1696
                                'placeholder'   => __( 'Address', 'invoicing' ),
1697
                                'required'      => (bool)wpinv_get_option( 'address_mandatory' ),
1698
                            ) );
1699
                        ?>
1700
                    </p>
1701
                    <p class="wpi-cart-field wpi-col2 wpi-coll">
1702
                        <label for="wpinv_city" class="wpi-label"><?php _e( 'City', 'invoicing' );?><?php if ( wpinv_get_option( 'city_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1703
                        <?php
1704
                        echo wpinv_html_text( array(
1705
                                'id'            => 'wpinv_city',
1706
                                'name'          => 'wpinv_city',
1707
                                'value'         => $billing_details['city'],
1708
                                'class'         => 'wpi-input form-control',
1709
                                'placeholder'   => __( 'City', 'invoicing' ),
1710
                                'required'      => (bool)wpinv_get_option( 'city_mandatory' ),
1711
                            ) );
1712
                        ?>
1713
                    </p>
1714
                    <p id="wpinv_country_box" class="wpi-cart-field wpi-col2 wpi-colf">
1715
                        <label for="wpinv_country" class="wpi-label"><?php _e( 'Country', 'invoicing' );?><?php if ( wpinv_get_option( 'country_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1716
                        <?php echo wpinv_html_select( array(
1717
                            'options'          => wpinv_get_country_list(),
1718
                            'name'             => 'wpinv_country',
1719
                            'id'               => 'wpinv_country',
1720
                            'selected'         => $selected_country,
1721
                            'show_option_all'  => false,
1722
                            'show_option_none' => false,
1723
                            'class'            => 'wpi-input form-control wpi_select2',
1724
                            'placeholder'      => __( 'Choose a country', 'invoicing' ),
1725
                            'required'         => (bool)wpinv_get_option( 'country_mandatory' ),
1726
                        ) ); ?>
1727
                    </p>
1728
                    <p id="wpinv_state_box" class="wpi-cart-field wpi-col2 wpi-coll">
1729
                        <label for="wpinv_state" class="wpi-label"><?php _e( 'State / Province', 'invoicing' );?><?php if ( wpinv_get_option( 'state_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1730
                        <?php
1731
                        $states = wpinv_get_country_states( $selected_country );
1732
                        if( !empty( $states ) ) {
1733
                            echo wpinv_html_select( array(
1734
                                'options'          => $states,
1735
                                'name'             => 'wpinv_state',
1736
                                'id'               => 'wpinv_state',
1737
                                'selected'         => $billing_details['state'],
1738
                                'show_option_all'  => false,
1739
                                'show_option_none' => false,
1740
                                'class'            => 'wpi-input form-control wpi_select2',
1741
                                'placeholder'      => __( 'Choose a state', 'invoicing' ),
1742
                                'required'         => (bool)wpinv_get_option( 'state_mandatory' ),
1743
                            ) );
1744
                        } else {
1745
                            echo wpinv_html_text( array(
1746
                                'name'          => 'wpinv_state',
1747
                                'value'         => $billing_details['state'],
1748
                                'id'            => 'wpinv_state',
1749
                                'class'         => 'wpi-input form-control',
1750
                                'placeholder'   => __( 'State / Province', 'invoicing' ),
1751
                                'required'      => (bool)wpinv_get_option( 'state_mandatory' ),
1752
                            ) );
1753
                        }
1754
                        ?>
1755
                    </p>
1756
                    <p class="wpi-cart-field wpi-col2 wpi-colf">
1757
                        <label for="wpinv_zip" class="wpi-label"><?php _e( 'ZIP / Postcode', 'invoicing' );?><?php if ( wpinv_get_option( 'zip_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1758
                        <?php
1759
                        echo wpinv_html_text( array(
1760
                                'name'          => 'wpinv_zip',
1761
                                'value'         => $billing_details['zip'],
1762
                                'id'            => 'wpinv_zip',
1763
                                'class'         => 'wpi-input form-control',
1764
                                'placeholder'   => __( 'ZIP / Postcode', 'invoicing' ),
1765
                                'required'      => (bool)wpinv_get_option( 'zip_mandatory' ),
1766
                            ) );
1767
                        ?>
1768
                    </p>
1769
                    <p class="wpi-cart-field wpi-col2 wpi-coll">
1770
                        <label for="wpinv_phone" class="wpi-label"><?php _e( 'Phone', 'invoicing' );?><?php if ( wpinv_get_option( 'phone_mandatory' ) ) { echo '<span class="wpi-required">*</span>'; } ?></label>
1771
                        <?php
1772
                        echo wpinv_html_text( array(
1773
                                'id'            => 'wpinv_phone',
1774
                                'name'          => 'wpinv_phone',
1775
                                'value'         => $billing_details['phone'],
1776
                                'class'         => 'wpi-input form-control',
1777
                                'placeholder'   => __( 'Phone', 'invoicing' ),
1778
                                'required'      => (bool)wpinv_get_option( 'phone_mandatory' ),
1779
                            ) );
1780
                        ?>
1781
                    </p>
1782
                    <?php do_action( 'wpinv_checkout_billing_fields_last', $billing_details ); ?>
1783
                    <div class="clearfix"></div>
1784
                </div>
1785
            </div>
1786
            <?php do_action( 'wpinv_after_billing_fields', $billing_details ); ?>
1787
        </div>
1788
        <?php
1789
    }
1790
}
1791
add_action( 'wpinv_checkout_billing_info', 'wpinv_checkout_billing_info' );
1792
1793
function wpinv_checkout_hidden_fields() {
1794
?>
1795
    <?php if ( is_user_logged_in() ) { ?>
1796
    <input type="hidden" name="wpinv_user_id" value="<?php echo get_current_user_id(); ?>"/>
1797
    <?php } ?>
1798
    <input type="hidden" name="wpi_action" value="payment" />
1799
<?php
1800
}
1801
1802
function wpinv_checkout_button_purchase() {
1803
    ob_start();
1804
?>
1805
    <input type="submit" class="btn btn-success wpinv-submit" id="wpinv-payment-button" data-value="<?php esc_attr_e( 'Proceed to Pay', 'invoicing' ) ?>" name="wpinv_payment" value="<?php esc_attr_e( 'Proceed to Pay', 'invoicing' ) ?>"/>
1806
<?php
1807
    return apply_filters( 'wpinv_checkout_button_purchase', ob_get_clean() );
1808
}
1809
1810
function wpinv_checkout_total() {
1811
    global $cart_total;
1812
?>
1813
<div id="wpinv_checkout_total" class="panel panel-info">
1814
    <div class="panel-body">
1815
    <?php
1816
    do_action( 'wpinv_purchase_form_before_checkout_total' );
1817
    ?>
1818
    <strong><?php _e( 'Invoice Total:', 'invoicing' ) ?></strong> <span class="wpinv-chdeckout-total"><?php echo $cart_total;?></span>
1819
    <?php
1820
    do_action( 'wpinv_purchase_form_after_checkout_total' );
1821
    ?>
1822
    </div>
1823
</div>
1824
<?php
1825
}
1826
add_action( 'wpinv_checkout_form_bottom', 'wpinv_checkout_total', 9998 );
1827
1828
function wpinv_checkout_accept_tandc() {
1829
    $page = wpinv_get_option( 'tandc_page' );
1830
    ?>
1831
    <div id="wpinv_checkout_tandc" class="panel panel-success">
1832
        <div class="panel-body">
1833
            <?php echo wpinv_get_policy_text(); ?>
1834
            <?php
1835
            if(isset($page) && (int)$page > 0 && apply_filters( 'wpinv_checkout_show_terms', true )){
1836
                $terms_link = esc_url( get_permalink( $page ) );
0 ignored issues
show
Bug introduced by
It seems like get_permalink($page) can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

1836
                $terms_link = esc_url( /** @scrutinizer ignore-type */ get_permalink( $page ) );
Loading history...
1837
                ?>
1838
                <label class="">
1839
                    <input type="checkbox" class="wpi-terms-checkbox" name="wpi_terms" id="wpi-terms" <?php checked( apply_filters( 'wpinv_terms_is_checked_default', isset( $_POST['wpi_terms'] ) ), true ); ?>> <span><?php printf( __( 'I&rsquo;ve read and accept the <a href="%s" target="_blank" class="wpi-terms-and-conditions-link">terms &amp; conditions</a>', 'invoicing' ), $terms_link ); ?></span> <span class="wpi-required">*</span>
1840
                </label>
1841
            <?php } ?>
1842
        </div>
1843
    </div>
1844
    <?php
1845
}
1846
add_action( 'wpinv_checkout_form_bottom', 'wpinv_checkout_accept_tandc', 9995 );
1847
1848
function wpinv_checkout_submit() {
1849
?>
1850
<div id="wpinv_purchase_submit" class="panel panel-success">
1851
    <div class="panel-body text-center">
1852
    <?php
1853
    do_action( 'wpinv_purchase_form_before_submit' );
1854
    wpinv_checkout_hidden_fields();
1855
    echo wpinv_checkout_button_purchase();
1856
    do_action( 'wpinv_purchase_form_after_submit' );
1857
    ?>
1858
    </div>
1859
</div>
1860
<?php
1861
}
1862
add_action( 'wpinv_checkout_form_bottom', 'wpinv_checkout_submit', 9999 );
1863
1864
function wpinv_receipt_billing_address( $invoice_id = 0 ) {
1865
    $invoice = wpinv_get_invoice( $invoice_id );
1866
1867
    if ( empty( $invoice ) ) {
1868
        return NULL;
1869
    }
1870
1871
    $billing_details = $invoice->get_user_info();
1872
    $address_row = wpinv_get_invoice_address_markup( $billing_details );
1873
1874
    ob_start();
1875
    ?>
1876
    <table class="table table-bordered table-sm wpi-billing-details">
1877
        <tbody>
1878
            <tr class="wpi-receipt-name">
1879
                <th class="text-left"><?php _e( 'Name', 'invoicing' ); ?></th>
1880
                <td><?php echo esc_html( trim( $billing_details['first_name'] . ' ' . $billing_details['last_name'] ) ) ;?></td>
1881
            </tr>
1882
            <tr class="wpi-receipt-email">
1883
                <th class="text-left"><?php _e( 'Email', 'invoicing' ); ?></th>
1884
                <td><?php echo $billing_details['email'] ;?></td>
1885
            </tr>
1886
            <tr class="wpi-receipt-address">
1887
                <th class="text-left"><?php _e( 'Address', 'invoicing' ); ?></th>
1888
                <td><?php echo $address_row ;?></td>
1889
            </tr>
1890
            <?php if ( $billing_details['phone'] ) { ?>
1891
            <tr class="wpi-receipt-phone">
1892
                <th class="text-left"><?php _e( 'Phone', 'invoicing' ); ?></th>
1893
                <td><?php echo esc_html( $billing_details['phone'] ) ;?></td>
1894
            </tr>
1895
            <?php } ?>
1896
        </tbody>
1897
    </table>
1898
    <?php
1899
    $output = ob_get_clean();
1900
    
1901
    $output = apply_filters( 'wpinv_receipt_billing_address', $output, $invoice_id );
1902
1903
    echo $output;
1904
}
1905
1906
function wpinv_filter_success_page_content( $content ) {
1907
    if ( isset( $_GET['payment-confirm'] ) && wpinv_is_success_page() ) {
1908
        if ( has_filter( 'wpinv_payment_confirm_' . sanitize_text_field( $_GET['payment-confirm'] ) ) ) {
1909
            $content = apply_filters( 'wpinv_payment_confirm_' . sanitize_text_field( $_GET['payment-confirm'] ), $content );
1910
        }
1911
    }
1912
1913
    return $content;
1914
}
1915
add_filter( 'the_content', 'wpinv_filter_success_page_content', 99999 );
1916
1917
function wpinv_receipt_actions( $invoice ) {
1918
    if ( !empty( $invoice ) ) {
1919
        $actions = array();
1920
1921
        if ( wpinv_user_can_view_invoice( $invoice->ID ) ) {
1922
            $actions['print']   = array(
1923
                'url'  => $invoice->get_view_url( true ),
1924
                'name' => __( 'Print Invoice', 'invoicing' ),
1925
                'class' => 'btn-primary',
1926
            );
1927
        }
1928
1929
        if ( is_user_logged_in() ) {
1930
            $actions['history'] = array(
1931
                'url'  => wpinv_get_history_page_uri(),
1932
                'name' => __( 'Invoice History', 'invoicing' ),
1933
                'class' => 'btn-warning',
1934
            );
1935
        }
1936
1937
        $actions = apply_filters( 'wpinv_invoice_receipt_actions', $actions, $invoice );
1938
1939
        if ( !empty( $actions ) ) {
1940
        ?>
1941
        <div class="wpinv-receipt-actions text-right">
1942
            <?php foreach ( $actions as $key => $action ) { $class = !empty($action['class']) ? sanitize_html_class( $action['class'] ) : ''; ?>
1943
            <a href="<?php echo esc_url( $action['url'] );?>" class="btn btn-sm <?php echo $class . ' ' . sanitize_html_class( $key );?>" <?php echo ( !empty($action['attrs']) ? $action['attrs'] : '' ) ;?>><?php echo esc_html( $action['name'] );?></a>
1944
            <?php } ?>
1945
        </div>
1946
        <?php
1947
        }
1948
    }
1949
}
1950
add_action( 'wpinv_receipt_start', 'wpinv_receipt_actions', -10, 1 );
1951
1952
function wpinv_invoice_link( $invoice_id ) {
1953
    $invoice = wpinv_get_invoice( $invoice_id );
1954
1955
    if ( empty( $invoice ) ) {
1956
        return NULL;
1957
    }
1958
1959
    $invoice_link = '<a href="' . esc_url( $invoice->get_view_url() ) . '">' . $invoice->get_number() . '</a>';
0 ignored issues
show
Bug introduced by
It seems like $invoice->get_view_url() can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

1959
    $invoice_link = '<a href="' . esc_url( /** @scrutinizer ignore-type */ $invoice->get_view_url() ) . '">' . $invoice->get_number() . '</a>';
Loading history...
1960
1961
    return apply_filters( 'wpinv_get_invoice_link', $invoice_link, $invoice );
1962
}
1963
1964
function wpinv_invoice_subscription_details( $invoice ) {
1965
    if ( !empty( $invoice ) && $invoice->is_recurring() && ! wpinv_is_subscription_payment( $invoice ) ) {
1966
        $subscription = wpinv_get_subscription( $invoice, true );
1967
1968
        if ( empty( $subscription ) ) {
1969
            return;
1970
        }
1971
1972
        $frequency = WPInv_Subscriptions::wpinv_get_pretty_subscription_frequency($subscription->period, $subscription->frequency);
1973
        $billing = wpinv_price(wpinv_format_amount($subscription->recurring_amount), wpinv_get_invoice_currency_code($subscription->parent_payment_id)) . ' / ' . $frequency;
1974
        $initial = wpinv_price(wpinv_format_amount($subscription->initial_amount), wpinv_get_invoice_currency_code($subscription->parent_payment_id));
1975
1976
        $payments = $subscription->get_child_payments();
1977
        ?>
1978
        <div class="wpinv-subscriptions-details">
1979
            <h3 class="wpinv-subscriptions-t"><?php echo apply_filters( 'wpinv_subscription_details_title', __( 'Subscription Details', 'invoicing' ) ); ?></h3>
1980
            <table class="table">
1981
                <thead>
1982
                    <tr>
1983
                        <th><?php _e( 'Billing Cycle', 'invoicing' ) ;?></th>
1984
                        <th><?php _e( 'Start Date', 'invoicing' ) ;?></th>
1985
                        <th><?php _e( 'Expiration Date', 'invoicing' ) ;?></th>
1986
                        <th class="text-center"><?php _e( 'Times Billed', 'invoicing' ) ;?></th>
1987
                        <th class="text-center"><?php _e( 'Status', 'invoicing' ) ;?></th>
1988
                    </tr>
1989
                </thead>
1990
                <tbody>
1991
                    <tr>
1992
                        <td><?php printf(_x('%s then %s', 'Initial subscription amount then billing cycle and amount', 'invoicing'), $initial, $billing); ?></td>
1993
                        <td><?php echo date_i18n(get_option('date_format'), strtotime($subscription->created, current_time('timestamp'))); ?></td>
0 ignored issues
show
Bug introduced by
It seems like get_option('date_format') can also be of type false; however, parameter $format of date_i18n() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

1993
                        <td><?php echo date_i18n(/** @scrutinizer ignore-type */ get_option('date_format'), strtotime($subscription->created, current_time('timestamp'))); ?></td>
Loading history...
1994
                        <td><?php echo date_i18n(get_option('date_format'), strtotime($subscription->expiration, current_time('timestamp'))); ?></td>
1995
                        <td class="text-center"><?php echo $subscription->get_times_billed() . ' / ' . (($subscription->bill_times == 0) ? 'Until Cancelled' : $subscription->bill_times); ?></td>
1996
                        <td class="text-center wpi-sub-status"><?php echo $subscription->get_status_label(); ?></td>
1997
                    </tr>
1998
                </tbody>
1999
            </table>
2000
        </div>
2001
        <?php if ( !empty( $payments ) ) { ?>
2002
        <div class="wpinv-renewal-payments">
2003
            <h3 class="wpinv-renewals-t"><?php echo apply_filters( 'wpinv_renewal_payments_title', __( 'Renewal Payments', 'invoicing' ) ); ?></h3>
2004
            <table class="table">
2005
                <thead>
2006
                    <tr>
2007
                        <th>#</th>
2008
                        <th><?php _e( 'Invoice', 'invoicing' ) ;?></th>
2009
                        <th><?php _e( 'Date', 'invoicing' ) ;?></th>
2010
                        <th class="text-right"><?php _e( 'Amount', 'invoicing' ) ;?></th>
2011
                    </tr>
2012
                </thead>
2013
                <tbody>
2014
                    <?php
2015
                        $i = 1;
2016
                        foreach ( $payments as $payment ) {
2017
                            $invoice_id = $payment->ID;
2018
                    ?>
2019
                    <tr>
2020
                        <th scope="row"><?php echo $i;?></th>
2021
                        <td><?php echo wpinv_invoice_link( $invoice_id ) ;?></td>
2022
                        <td><?php echo wpinv_get_invoice_date( $invoice_id ); ?></td>
2023
                        <td class="text-right"><?php echo wpinv_payment_total( $invoice_id, true ); ?></td>
2024
                    </tr>
2025
                    <?php $i++; } ?>
2026
                </tbody>
2027
            </table>
2028
        </div>
2029
        <?php } ?>
2030
        <?php
2031
    }
2032
}
2033
2034
function wpinv_cart_total_label( $label, $invoice ) {
2035
    if ( empty( $invoice ) ) {
2036
        return $label;
2037
    }
2038
2039
    $prefix_label = '';
2040
    if ( $invoice->is_parent() && $item_id = $invoice->get_recurring() ) {
0 ignored issues
show
Unused Code introduced by
The assignment to $item_id is dead and can be removed.
Loading history...
2041
        $prefix_label   = '<span class="label label-primary label-recurring">' . __( 'Recurring Payment', 'invoicing' ) . '</span> ' . wpinv_subscription_payment_desc( $invoice );
2042
    } else if ( $invoice->is_renewal() ) {
2043
        $prefix_label   = '<span class="label label-primary label-renewal">' . __( 'Renewal Payment', 'invoicing' ) . '</span> ';        
2044
    }
2045
2046
    if ( $prefix_label != '' ) {
2047
        $label  = '<span class="wpinv-cart-sub-desc">' . $prefix_label . '</span> ' . $label;
2048
    }
2049
2050
    return $label;
2051
}
2052
add_filter( 'wpinv_cart_total_label', 'wpinv_cart_total_label', 10, 2 );
2053
add_filter( 'wpinv_email_cart_total_label', 'wpinv_cart_total_label', 10, 2 );
2054
add_filter( 'wpinv_print_cart_total_label', 'wpinv_cart_total_label', 10, 2 );
2055
2056
add_action( 'wpinv_invoice_print_middle', 'wpinv_invoice_subscription_details', 10, 1 );
2057
2058
function wpinv_invoice_print_description( $invoice ) {
2059
    if ( empty( $invoice ) ) {
2060
        return NULL;
2061
    }
2062
    if ( $description = wpinv_get_invoice_description( $invoice->ID ) ) {
2063
        ?>
2064
        <div class="row wpinv-lower">
2065
            <div class="col-sm-12 wpinv-description">
2066
                <?php echo wpautop( $description ); ?>
2067
            </div>
2068
        </div>
2069
        <?php
2070
    }
2071
}
2072
add_action( 'wpinv_invoice_print_middle', 'wpinv_invoice_print_description', 10.1, 1 );
0 ignored issues
show
Bug introduced by
10.1 of type double is incompatible with the type integer expected by parameter $priority of add_action(). ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

2072
add_action( 'wpinv_invoice_print_middle', 'wpinv_invoice_print_description', /** @scrutinizer ignore-type */ 10.1, 1 );
Loading history...
2073
2074
function wpinv_invoice_print_payment_info( $invoice ) {
2075
    if ( empty( $invoice ) ) {
2076
        return NULL;
2077
    }
2078
2079
    if ( $payments_info = wpinv_display_payments_info( $invoice->ID, false ) ) {
2080
        ?>
2081
        <div class="row wpinv-payments">
2082
            <div class="col-sm-12">
2083
                <?php echo $payments_info; ?>
2084
            </div>
2085
        </div>
2086
        <?php 
2087
    }
2088
}
2089
// add_action( 'wpinv_invoice_print_after_line_items', 'wpinv_invoice_print_payment_info', 10, 1 );
2090
2091
function wpinv_get_invoice_note_line_item( $note, $echo = true ) {
2092
    if ( empty( $note ) ) {
2093
        return NULL;
2094
    }
2095
2096
    if ( is_int( $note ) ) {
2097
        $note = get_comment( $note );
2098
    }
2099
2100
    if ( !( is_object( $note ) && is_a( $note, 'WP_Comment' ) ) ) {
2101
        return NULL;
2102
    }
2103
2104
    $note_classes   = array( 'note' );
2105
    $note_classes[] = get_comment_meta( $note->comment_ID, '_wpi_customer_note', true ) ? 'customer-note' : '';
2106
    $note_classes[] = $note->comment_author === 'System' ? 'system-note' : '';
2107
    $note_classes   = apply_filters( 'wpinv_invoice_note_class', array_filter( $note_classes ), $note );
2108
    $note_classes   = !empty( $note_classes ) ? implode( ' ', $note_classes ) : '';
2109
2110
    ob_start();
2111
    ?>
2112
    <li rel="<?php echo absint( $note->comment_ID ) ; ?>" class="<?php echo esc_attr( $note_classes ); ?>">
2113
        <div class="note_content">
2114
            <?php echo wpautop( wptexturize( wp_kses_post( $note->comment_content ) ) ); ?>
2115
        </div>
2116
        <p class="meta">
2117
            <abbr class="exact-date" title="<?php echo $note->comment_date; ?>"><?php printf( __( '%1$s - %2$s at %3$s', 'invoicing' ), $note->comment_author, date_i18n( get_option( 'date_format' ), strtotime( $note->comment_date ) ), date_i18n( get_option( 'time_format' ), strtotime( $note->comment_date ) ) ); ?></abbr>&nbsp;&nbsp;
0 ignored issues
show
Bug introduced by
It seems like get_option('date_format') can also be of type false; however, parameter $format of date_i18n() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

2117
            <abbr class="exact-date" title="<?php echo $note->comment_date; ?>"><?php printf( __( '%1$s - %2$s at %3$s', 'invoicing' ), $note->comment_author, date_i18n( /** @scrutinizer ignore-type */ get_option( 'date_format' ), strtotime( $note->comment_date ) ), date_i18n( get_option( 'time_format' ), strtotime( $note->comment_date ) ) ); ?></abbr>&nbsp;&nbsp;
Loading history...
2118
            <?php if ( $note->comment_author !== 'System' || wpinv_current_user_can_manage_invoicing() ) { ?>
2119
                <a href="#" class="delete_note"><?php _e( 'Delete note', 'invoicing' ); ?></a>
2120
            <?php } ?>
2121
        </p>
2122
    </li>
2123
    <?php
2124
    $note_content = ob_get_clean();
2125
    $note_content = apply_filters( 'wpinv_get_invoice_note_line_item', $note_content, $note, $echo );
2126
2127
    if ( $echo ) {
2128
        echo $note_content;
2129
    } else {
2130
        return $note_content;
2131
    }
2132
}
2133
2134
function wpinv_invalid_invoice_content() {
2135
    global $post;
2136
2137
    $invoice = wpinv_get_invoice( $post->ID );
2138
2139
    $error = __( 'This invoice is only viewable by clicking on the invoice link that sent to you via email.', 'invoicing' );
2140
    if ( !empty( $invoice->ID ) && $invoice->has_status( array_keys( wpinv_get_invoice_statuses() ) ) ) {
2141
        if ( is_user_logged_in() ) {
2142
            if ( wpinv_require_login_to_checkout() ) {
2143
                if ( isset( $_GET['invoice_key'] ) && $_GET['invoice_key'] === $invoice->get_key() ) {
2144
                    $error = __( 'You are not allowed to view this invoice.', 'invoicing' );
2145
                }
2146
            }
2147
        } else {
2148
            if ( wpinv_require_login_to_checkout() ) {
2149
                if ( isset( $_GET['invoice_key'] ) && $_GET['invoice_key'] === $invoice->get_key() ) {
2150
                    $error = __( 'You must be logged in to view this invoice.', 'invoicing' );
2151
                }
2152
            }
2153
        }
2154
    } else {
2155
        $error = __( 'This invoice is deleted or does not exist.', 'invoicing' );
2156
    }
2157
    ?>
2158
    <div class="row wpinv-row-invalid">
2159
        <div class="col-md-6 col-md-offset-3 wpinv-message error">
2160
            <h3><?php _e( 'Access Denied', 'invoicing' ); ?></h3>
2161
            <p class="wpinv-msg-text"><?php echo $error; ?></p>
2162
        </div>
2163
    </div>
2164
    <?php
2165
}
2166
add_action( 'wpinv_invalid_invoice_content', 'wpinv_invalid_invoice_content' );
2167
2168
add_action( 'wpinv_checkout_billing_fields_last', 'wpinv_force_company_name_field');
2169
function wpinv_force_company_name_field(){
2170
    $invoice = wpinv_get_invoice_cart();
2171
    $user_id = wpinv_get_user_id( $invoice->ID );
2172
    $company = empty( $user_id ) ? "" : get_user_meta( $user_id, '_wpinv_company', true );
2173
    if ( 1 == wpinv_get_option( 'force_show_company' ) && !wpinv_use_taxes() ) {
2174
        ?>
2175
        <p class="wpi-cart-field wpi-col2 wpi-colf">
2176
            <label for="wpinv_company" class="wpi-label"><?php _e('Company Name', 'invoicing'); ?></label>
2177
            <?php
2178
            echo wpinv_html_text(array(
2179
                'id' => 'wpinv_company',
2180
                'name' => 'wpinv_company',
2181
                'value' => $company,
2182
                'class' => 'wpi-input form-control',
2183
                'placeholder' => __('Company name', 'invoicing'),
2184
            ));
2185
            ?>
2186
        </p>
2187
        <?php
2188
    }
2189
}
2190
2191
/**
2192
 * Function to get privacy policy text.
2193
 *
2194
 * @since 1.0.13
2195
 * @return string
2196
 */
2197
function wpinv_get_policy_text() {
2198
    $privacy_page_id = get_option( 'wp_page_for_privacy_policy', 0 );
2199
2200
    $text = wpinv_get_option('invoicing_privacy_checkout_message', sprintf( __( 'Your personal data will be used to process your invoice, payment and for other purposes described in our %s.', 'invoicing' ), '[wpinv_privacy_policy]' ));
2201
2202
    if(!$privacy_page_id){
2203
        $privacy_page_id = wpinv_get_option( 'privacy_page', 0 );
2204
    }
2205
2206
    $privacy_link    = $privacy_page_id ? '<a href="' . esc_url( get_permalink( $privacy_page_id ) ) . '" class="wpinv-privacy-policy-link" target="_blank">' . __( 'privacy policy', 'invoicing' ) . '</a>' : __( 'privacy policy', 'invoicing' );
0 ignored issues
show
Bug introduced by
It seems like get_permalink($privacy_page_id) can also be of type false; however, parameter $url of esc_url() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

2206
    $privacy_link    = $privacy_page_id ? '<a href="' . esc_url( /** @scrutinizer ignore-type */ get_permalink( $privacy_page_id ) ) . '" class="wpinv-privacy-policy-link" target="_blank">' . __( 'privacy policy', 'invoicing' ) . '</a>' : __( 'privacy policy', 'invoicing' );
Loading history...
2207
2208
    $find_replace = array(
2209
        '[wpinv_privacy_policy]' => $privacy_link,
2210
    );
2211
2212
    $privacy_text = str_replace( array_keys( $find_replace ), array_values( $find_replace ), $text );
2213
2214
    return wp_kses_post(wpautop($privacy_text));
2215
}
2216
2217
2218
/**
2219
 * Allows the user to set their own price for an invoice item
2220
 */
2221
function wpinv_checkout_cart_item_name_your_price( $cart_item, $key ) {
2222
    
2223
    //Ensure we have an item id
2224
    if(! is_array( $cart_item ) || empty( $cart_item['id'] ) ) {
2225
        return;
2226
    }
2227
2228
    //Fetch the item
2229
    $item_id = $cart_item['id'];
2230
    $item    = new WPInv_Item( $item_id );
2231
    
2232
    if(! $item->supports_dynamic_pricing() || !$item->get_is_dynamic_pricing() ) {
2233
        return;
2234
    }
2235
2236
    //Fetch the dynamic pricing "strings"
2237
    $suggested_price_text = esc_html( wpinv_get_option( 'suggested_price_text', __( 'Suggested Price:', 'invoicing' ) ) );
2238
    $minimum_price_text   = esc_html( wpinv_get_option( 'minimum_price_text', __( 'Minimum Price:', 'invoicing' ) ) );
2239
    $name_your_price_text = esc_html( wpinv_get_option( 'name_your_price_text', __( 'Name Your Price', 'invoicing' ) ) );
2240
2241
    //Display a "name_your_price" button
2242
    echo " &mdash; <a href='#' class='wpinv-name-your-price-frontend small'>$name_your_price_text</a></div>";
2243
2244
    //Display a name_your_price form
2245
    echo '<div class="name-your-price-miniform">';
2246
    
2247
    //Maybe display the recommended price
2248
    if( $item->get_price() > 0 && !empty( $suggested_price_text ) ) {
2249
        $suggested_price = $item->get_the_price();
2250
        echo "<div>$suggested_price_text &mdash; $suggested_price</div>";
2251
    }
2252
2253
    //Display the update price form
2254
    $symbol         = wpinv_currency_symbol();
2255
    $position       = wpinv_currency_position();
2256
    $minimum        = esc_attr( $item->get_minimum_price() );
2257
    $price          = esc_attr( $cart_item['item_price'] );
2258
    $update         = esc_attr__( "Update", 'invoicing' );
2259
2260
    //Ensure it supports dynamic prici
2261
    if( $price < $minimum ) {
2262
        $price = $minimum;
2263
    }
2264
2265
    echo '<label>';
2266
    echo $position != 'right' ? $symbol . '&nbsp;' : '';
2267
    echo "<input type='number' min='$minimum' placeholder='$price' value='$price' class='wpi-field-price' />";
2268
    echo $position == 'right' ? '&nbsp;' . $symbol : '' ;
2269
    echo "</label>";
2270
    echo "<input type='hidden' value='$item_id' class='wpi-field-item' />";
2271
    echo "<a class='btn btn-success wpinv-submit wpinv-update-dynamic-price-frontend'>$update</a>";
2272
2273
    //Maybe display the minimum price
2274
    if( $item->get_minimum_price() > 0 && !empty( $minimum_price_text ) ) {
2275
        $minimum_price = wpinv_price( wpinv_format_amount( $item->get_minimum_price() ) );
2276
        echo "<div>$minimum_price_text &mdash; $minimum_price</div>";
2277
    }
2278
2279
    echo "</div>";
2280
2281
}
2282
add_action( 'wpinv_checkout_cart_item_price_after', 'wpinv_checkout_cart_item_name_your_price', 10, 2 );
2283
2284
function wpinv_oxygen_fix_conflict() {
2285
    global $ct_ignore_post_types;
2286
2287
    if ( ! is_array( $ct_ignore_post_types ) ) {
2288
        $ct_ignore_post_types = array();
2289
    }
2290
2291
    $post_types = array( 'wpi_discount', 'wpi_invoice', 'wpi_item' );
2292
2293
    foreach ( $post_types as $post_type ) {
2294
        $ct_ignore_post_types[] = $post_type;
2295
2296
        // Ignore post type
2297
        add_filter( 'pre_option_oxygen_vsb_ignore_post_type_' . $post_type, '__return_true', 999 );
2298
    }
2299
2300
    remove_filter( 'template_include', 'wpinv_template', 10, 1 );
0 ignored issues
show
Unused Code introduced by
The call to remove_filter() has too many arguments starting with 1. ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-call  annotation

2300
    /** @scrutinizer ignore-call */ 
2301
    remove_filter( 'template_include', 'wpinv_template', 10, 1 );

This check compares calls to functions or methods with their respective definitions. If the call has more arguments than are defined, it raises an issue.

If a function is defined several times with a different number of parameters, the check may pick up the wrong definition and report false positives. One codebase where this has been known to happen is Wordpress. Please note the @ignore annotation hint above.

Loading history...
2301
    add_filter( 'template_include', 'wpinv_template', 999, 1 );
2302
}