This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php |
||||
2 | /** |
||||
3 | * Main Invoicing class. |
||||
4 | * |
||||
5 | * @package Invoicing |
||||
6 | * @since 1.0.0 |
||||
7 | */ |
||||
8 | |||||
9 | defined( 'ABSPATH' ) || exit; |
||||
10 | |||||
11 | /** |
||||
12 | * Main Invoicing class. |
||||
13 | * |
||||
14 | */ |
||||
15 | class WPInv_Plugin { |
||||
16 | |||||
17 | /** |
||||
18 | * GetPaid version. |
||||
19 | * |
||||
20 | * @var string |
||||
21 | */ |
||||
22 | public $version; |
||||
23 | |||||
24 | /** |
||||
25 | * Data container. |
||||
26 | * |
||||
27 | * @var array |
||||
28 | */ |
||||
29 | protected $data = array(); |
||||
30 | |||||
31 | /** |
||||
32 | * Form elements instance. |
||||
33 | * |
||||
34 | * @var WPInv_Payment_Form_Elements |
||||
35 | */ |
||||
36 | public $form_elements; |
||||
37 | |||||
38 | /** |
||||
39 | * @var array An array of payment gateways. |
||||
40 | */ |
||||
41 | public $gateways; |
||||
42 | |||||
43 | /** |
||||
44 | * Class constructor. |
||||
45 | */ |
||||
46 | public function __construct() { |
||||
47 | $this->define_constants(); |
||||
48 | $this->includes(); |
||||
49 | $this->init_hooks(); |
||||
50 | $this->set_properties(); |
||||
51 | } |
||||
52 | |||||
53 | /** |
||||
54 | * Sets a custom data property. |
||||
55 | * |
||||
56 | * @param string $prop The prop to set. |
||||
57 | * @param mixed $value The value to retrieve. |
||||
58 | */ |
||||
59 | public function set( $prop, $value ) { |
||||
60 | $this->data[ $prop ] = $value; |
||||
61 | } |
||||
62 | |||||
63 | /** |
||||
64 | * Gets a custom data property. |
||||
65 | * |
||||
66 | * @param string $prop The prop to set. |
||||
67 | * @return mixed The value. |
||||
68 | */ |
||||
69 | public function get( $prop ) { |
||||
70 | if ( isset( $this->data[ $prop ] ) ) { |
||||
71 | return $this->data[ $prop ]; |
||||
72 | } |
||||
73 | |||||
74 | return null; |
||||
75 | } |
||||
76 | |||||
77 | /** |
||||
78 | * Define class properties. |
||||
79 | */ |
||||
80 | public function set_properties() { |
||||
81 | // Sessions. |
||||
82 | $this->set( 'session', new WPInv_Session_Handler() ); |
||||
0 ignored issues
–
show
Deprecated Code
introduced
by
![]() |
|||||
83 | $GLOBALS['wpi_session'] = $this->get( 'session' ); // Backwards compatibility. |
||||
84 | $GLOBALS['wpinv_euvat'] = new WPInv_EUVat(); // Backwards compatibility. |
||||
0 ignored issues
–
show
The class
WPInv_EUVat has been deprecated.
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
![]() |
|||||
85 | |||||
86 | // Init other objects. |
||||
87 | $this->set( 'notes', new WPInv_Notes() ); |
||||
88 | $this->set( 'api', new WPInv_API() ); |
||||
89 | $this->set( 'post_types', new GetPaid_Post_Types() ); |
||||
90 | $this->set( 'template', new GetPaid_Template() ); |
||||
91 | $this->set( 'admin', new GetPaid_Admin() ); |
||||
92 | $this->set( 'subscriptions', new WPInv_Subscriptions() ); |
||||
93 | $this->set( 'invoice_emails', new GetPaid_Invoice_Notification_Emails() ); |
||||
94 | $this->set( 'subscription_emails', new GetPaid_Subscription_Notification_Emails() ); |
||||
95 | $this->set( 'daily_maintenace', new GetPaid_Daily_Maintenance() ); |
||||
96 | $this->set( 'payment_forms', new GetPaid_Payment_Forms() ); |
||||
97 | $this->set( 'maxmind', new GetPaid_MaxMind_Geolocation() ); |
||||
98 | $this->set( 'data_retention', new WPInv_Data_Retention() ); |
||||
99 | } |
||||
100 | |||||
101 | /** |
||||
102 | * Define plugin constants. |
||||
103 | */ |
||||
104 | public function define_constants() { |
||||
105 | define( 'WPINV_PLUGIN_DIR', plugin_dir_path( WPINV_PLUGIN_FILE ) ); |
||||
106 | define( 'WPINV_PLUGIN_URL', plugin_dir_url( WPINV_PLUGIN_FILE ) ); |
||||
107 | $this->version = WPINV_VERSION; |
||||
108 | } |
||||
109 | |||||
110 | /** |
||||
111 | * Hook into actions and filters. |
||||
112 | * |
||||
113 | * @since 1.0.19 |
||||
114 | */ |
||||
115 | protected function init_hooks() { |
||||
116 | /* Internationalize the text strings used. */ |
||||
117 | add_action( 'plugins_loaded', array( &$this, 'plugins_loaded' ) ); |
||||
118 | |||||
119 | // Init the plugin after WordPress inits. |
||||
120 | add_action( 'init', array( $this, 'init' ), 1 ); |
||||
121 | add_action( 'init', array( $this, 'maybe_process_ipn' ), 100 ); |
||||
122 | add_action( 'init', array( $this, 'wpinv_actions' ) ); |
||||
123 | add_action( 'init', array( $this, 'maybe_do_authenticated_action' ), 100 ); |
||||
124 | add_action( 'wp_enqueue_scripts', array( $this, 'enqueue_scripts' ), 11 ); |
||||
125 | add_action( 'wp_footer', array( $this, 'wp_footer' ) ); |
||||
126 | add_action( 'wp_head', array( $this, 'wp_head' ) ); |
||||
127 | add_action( 'widgets_init', array( $this, 'register_widgets' ) ); |
||||
128 | add_filter( 'wpseo_exclude_from_sitemap_by_post_ids', array( $this, 'wpseo_exclude_from_sitemap_by_post_ids' ) ); |
||||
129 | add_filter( 'the_seo_framework_sitemap_supported_post_types', array( $this, 'exclude_invoicing_post_types' ) ); |
||||
130 | add_filter( 'pre_get_posts', array( &$this, 'pre_get_posts' ) ); |
||||
131 | |||||
132 | add_filter( 'query_vars', array( $this, 'custom_query_vars' ) ); |
||||
133 | add_action( 'init', array( $this, 'add_rewrite_rule' ), 10, 0 ); |
||||
134 | add_action( 'pre_get_posts', array( $this, 'maybe_process_new_ipn' ), 1 ); |
||||
135 | |||||
136 | // Fires after registering actions. |
||||
137 | do_action( 'wpinv_actions', $this ); |
||||
138 | do_action( 'getpaid_actions', $this ); |
||||
139 | } |
||||
140 | |||||
141 | public function plugins_loaded() { |
||||
142 | /* Internationalize the text strings used. */ |
||||
143 | $this->load_textdomain(); |
||||
144 | |||||
145 | do_action( 'wpinv_loaded' ); |
||||
146 | |||||
147 | // Fix oxygen page builder conflict |
||||
148 | if ( function_exists( 'ct_css_output' ) ) { |
||||
149 | wpinv_oxygen_fix_conflict(); |
||||
150 | } |
||||
151 | } |
||||
152 | |||||
153 | /** |
||||
154 | * Load Localisation files. |
||||
155 | * |
||||
156 | * Note: the first-loaded translation file overrides any following ones if the same translation is present. |
||||
157 | * |
||||
158 | * Locales found in: |
||||
159 | * - WP_LANG_DIR/plugins/invoicing-LOCALE.mo |
||||
160 | * - WP_PLUGIN_DIR/invoicing/languages/invoicing-LOCALE.mo |
||||
161 | * |
||||
162 | * @since 1.0.0 |
||||
163 | */ |
||||
164 | public function load_textdomain() { |
||||
165 | // Determines the current locale. |
||||
166 | if ( function_exists( 'determine_locale' ) ) { |
||||
167 | $locale = determine_locale(); |
||||
168 | } else if ( function_exists( 'get_user_locale' ) ) { |
||||
169 | $locale = get_user_locale(); |
||||
170 | } else { |
||||
171 | $locale = get_locale(); |
||||
172 | } |
||||
173 | |||||
174 | /** |
||||
175 | * Filter the locale to use for translations. |
||||
176 | */ |
||||
177 | $locale = apply_filters( 'plugin_locale', $locale, 'invoicing' ); |
||||
178 | |||||
179 | unload_textdomain( 'invoicing', true ); |
||||
180 | load_textdomain( 'invoicing', WP_LANG_DIR . '/invoicing/invoicing-' . $locale . '.mo' ); |
||||
181 | load_plugin_textdomain( 'invoicing', false, plugin_basename( dirname( WPINV_PLUGIN_FILE ) ) . '/languages/' ); |
||||
182 | } |
||||
183 | |||||
184 | /** |
||||
185 | * Include required core files used in admin and on the frontend. |
||||
186 | */ |
||||
187 | public function includes() { |
||||
188 | // Start with the settings. |
||||
189 | require_once WPINV_PLUGIN_DIR . 'includes/admin/register-settings.php'; |
||||
190 | |||||
191 | // Packages/libraries. |
||||
192 | require_once WPINV_PLUGIN_DIR . 'vendor/autoload.php'; |
||||
193 | require_once WPINV_PLUGIN_DIR . 'vendor/ayecode/wp-ayecode-ui/ayecode-ui-loader.php'; |
||||
194 | |||||
195 | // Load functions. |
||||
196 | require_once WPINV_PLUGIN_DIR . 'includes/deprecated-functions.php'; |
||||
197 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-email-functions.php'; |
||||
198 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-general-functions.php'; |
||||
199 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-helper-functions.php'; |
||||
200 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-tax-functions.php'; |
||||
201 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-template-functions.php'; |
||||
202 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-address-functions.php'; |
||||
203 | require_once WPINV_PLUGIN_DIR . 'includes/invoice-functions.php'; |
||||
204 | require_once WPINV_PLUGIN_DIR . 'includes/subscription-functions.php'; |
||||
205 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-item-functions.php'; |
||||
206 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-discount-functions.php'; |
||||
207 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-gateway-functions.php'; |
||||
208 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-payment-functions.php'; |
||||
209 | require_once WPINV_PLUGIN_DIR . 'includes/user-functions.php'; |
||||
210 | require_once WPINV_PLUGIN_DIR . 'includes/error-functions.php'; |
||||
211 | |||||
212 | // Register autoloader. |
||||
213 | try { |
||||
214 | spl_autoload_register( array( $this, 'autoload' ), true ); |
||||
215 | } catch ( Exception $e ) { |
||||
216 | wpinv_error_log( $e->getMessage(), '', __FILE__, 149, true ); |
||||
217 | } |
||||
218 | |||||
219 | require_once WPINV_PLUGIN_DIR . 'includes/abstracts/abstract-wpinv-session.php'; |
||||
220 | require_once WPINV_PLUGIN_DIR . 'includes/class-wpinv-session-handler.php'; |
||||
221 | require_once WPINV_PLUGIN_DIR . 'includes/class-wpinv-ajax.php'; |
||||
222 | require_once WPINV_PLUGIN_DIR . 'includes/class-wpinv-api.php'; |
||||
223 | require_once WPINV_PLUGIN_DIR . 'includes/class-wpinv-cache-helper.php'; |
||||
224 | require_once WPINV_PLUGIN_DIR . 'includes/class-wpinv-db.php'; |
||||
225 | require_once WPINV_PLUGIN_DIR . 'includes/admin/subscriptions.php'; |
||||
226 | require_once WPINV_PLUGIN_DIR . 'includes/class-wpinv-subscriptions-db.php'; |
||||
227 | require_once WPINV_PLUGIN_DIR . 'includes/wpinv-subscription.php'; |
||||
228 | require_once WPINV_PLUGIN_DIR . 'includes/abstracts/abstract-wpinv-privacy.php'; |
||||
229 | require_once WPINV_PLUGIN_DIR . 'includes/class-wpinv-privacy.php'; |
||||
230 | require_once WPINV_PLUGIN_DIR . 'includes/libraries/class-ayecode-addons.php'; |
||||
231 | require_once WPINV_PLUGIN_DIR . 'includes/class-wpinv-addons.php'; |
||||
232 | require_once WPINV_PLUGIN_DIR . 'widgets/checkout.php'; |
||||
233 | require_once WPINV_PLUGIN_DIR . 'widgets/invoice-history.php'; |
||||
234 | require_once WPINV_PLUGIN_DIR . 'widgets/invoice-receipt.php'; |
||||
235 | require_once WPINV_PLUGIN_DIR . 'widgets/invoice-messages.php'; |
||||
236 | require_once WPINV_PLUGIN_DIR . 'widgets/subscriptions.php'; |
||||
237 | require_once WPINV_PLUGIN_DIR . 'widgets/buy-item.php'; |
||||
238 | require_once WPINV_PLUGIN_DIR . 'widgets/getpaid.php'; |
||||
239 | require_once WPINV_PLUGIN_DIR . 'widgets/invoice.php'; |
||||
240 | require_once WPINV_PLUGIN_DIR . 'includes/admin/admin-pages.php'; |
||||
241 | |||||
242 | if ( is_admin() || ( defined( 'WP_CLI' ) && WP_CLI ) ) { |
||||
243 | GetPaid_Post_Types_Admin::init(); |
||||
244 | |||||
245 | require_once WPINV_PLUGIN_DIR . 'includes/admin/wpinv-admin-functions.php'; |
||||
246 | require_once WPINV_PLUGIN_DIR . 'includes/admin/meta-boxes/class-mb-payment-form.php'; |
||||
247 | require_once WPINV_PLUGIN_DIR . 'includes/admin/meta-boxes/class-mb-invoice-notes.php'; |
||||
248 | require_once WPINV_PLUGIN_DIR . 'includes/admin/class-wpinv-admin-menus.php'; |
||||
249 | require_once WPINV_PLUGIN_DIR . 'includes/admin/class-wpinv-users.php'; |
||||
250 | require_once WPINV_PLUGIN_DIR . 'includes/admin/class-getpaid-admin-profile.php'; |
||||
251 | // load the user class only on the users.php page |
||||
252 | global $pagenow; |
||||
253 | if ( $pagenow == 'users.php' ) { |
||||
254 | new WPInv_Admin_Users(); |
||||
255 | } |
||||
256 | } |
||||
257 | |||||
258 | // Register cli commands |
||||
259 | if ( defined( 'WP_CLI' ) && WP_CLI ) { |
||||
260 | require_once WPINV_PLUGIN_DIR . 'includes/class-wpinv-cli.php'; |
||||
261 | WP_CLI::add_command( 'invoicing', 'WPInv_CLI' ); |
||||
262 | } |
||||
263 | } |
||||
264 | |||||
265 | /** |
||||
266 | * Class autoloader |
||||
267 | * |
||||
268 | * @param string $class_name The name of the class to load. |
||||
269 | * @access public |
||||
270 | * @since 1.0.19 |
||||
271 | * @return void |
||||
272 | */ |
||||
273 | public function autoload( $class_name ) { |
||||
274 | // Normalize the class name... |
||||
275 | $class_name = strtolower( $class_name ); |
||||
276 | |||||
277 | // ... and make sure it is our class. |
||||
278 | if ( false === strpos( $class_name, 'getpaid_' ) && false === strpos( $class_name, 'wpinv_' ) ) { |
||||
279 | return; |
||||
280 | } |
||||
281 | |||||
282 | // Next, prepare the file name from the class. |
||||
283 | $file_name = 'class-' . str_replace( '_', '-', $class_name ) . '.php'; |
||||
284 | |||||
285 | // Base path of the classes. |
||||
286 | $plugin_path = untrailingslashit( WPINV_PLUGIN_DIR ); |
||||
287 | |||||
288 | // And an array of possible locations in order of importance. |
||||
289 | $locations = array( |
||||
290 | "$plugin_path/includes", |
||||
291 | "$plugin_path/includes/data-stores", |
||||
292 | "$plugin_path/includes/gateways", |
||||
293 | "$plugin_path/includes/payments", |
||||
294 | "$plugin_path/includes/geolocation", |
||||
295 | "$plugin_path/includes/reports", |
||||
296 | "$plugin_path/includes/api", |
||||
297 | "$plugin_path/includes/admin", |
||||
298 | "$plugin_path/includes/admin/meta-boxes", |
||||
299 | ); |
||||
300 | |||||
301 | foreach ( apply_filters( 'getpaid_autoload_locations', $locations ) as $location ) { |
||||
302 | if ( file_exists( trailingslashit( $location ) . $file_name ) ) { |
||||
303 | include trailingslashit( $location ) . $file_name; |
||||
304 | break; |
||||
305 | } |
||||
306 | } |
||||
307 | } |
||||
308 | |||||
309 | /** |
||||
310 | * Inits hooks etc. |
||||
311 | */ |
||||
312 | public function init() { |
||||
313 | // Fires before getpaid inits. |
||||
314 | do_action( 'before_getpaid_init', $this ); |
||||
315 | |||||
316 | // Maybe upgrade. |
||||
317 | $this->maybe_upgrade_database(); |
||||
318 | |||||
319 | // Load default gateways. |
||||
320 | $gateways = apply_filters( |
||||
321 | 'getpaid_default_gateways', |
||||
322 | array( |
||||
323 | 'manual' => 'GetPaid_Manual_Gateway', |
||||
324 | 'paypal' => 'GetPaid_Paypal_Gateway', |
||||
325 | 'worldpay' => 'GetPaid_Worldpay_Gateway', |
||||
326 | 'bank_transfer' => 'GetPaid_Bank_Transfer_Gateway', |
||||
327 | 'authorizenet' => 'GetPaid_Authorize_Net_Gateway', |
||||
328 | ) |
||||
329 | ); |
||||
330 | |||||
331 | foreach ( $gateways as $id => $class ) { |
||||
332 | $this->gateways[ $id ] = new $class(); |
||||
333 | } |
||||
334 | |||||
335 | if ( 'yes' != get_option( 'wpinv_renamed_gateways' ) ) { |
||||
336 | GetPaid_Installer::rename_gateways_label(); |
||||
337 | update_option( 'wpinv_renamed_gateways', 'yes' ); |
||||
338 | } |
||||
339 | |||||
340 | // Fires after getpaid inits. |
||||
341 | do_action( 'getpaid_init', $this ); |
||||
342 | } |
||||
343 | |||||
344 | /** |
||||
345 | * Checks if this is an IPN request and processes it. |
||||
346 | */ |
||||
347 | public function maybe_process_ipn() { |
||||
348 | // Ensure that this is an IPN request. |
||||
349 | if ( empty( $_GET['wpi-listener'] ) || 'IPN' !== $_GET['wpi-listener'] || empty( $_GET['wpi-gateway'] ) ) { |
||||
350 | return; |
||||
351 | } |
||||
352 | |||||
353 | $gateway = sanitize_text_field( $_GET['wpi-gateway'] ); |
||||
354 | |||||
355 | do_action( 'wpinv_verify_payment_ipn', $gateway ); |
||||
356 | do_action( "wpinv_verify_{$gateway}_ipn" ); |
||||
357 | exit; |
||||
358 | } |
||||
359 | |||||
360 | public function enqueue_scripts() { |
||||
361 | // Fires before adding scripts. |
||||
362 | do_action( 'getpaid_enqueue_scripts' ); |
||||
363 | |||||
364 | $localize = array(); |
||||
365 | $localize['ajax_url'] = admin_url( 'admin-ajax.php' ); |
||||
366 | $localize['thousands'] = wpinv_thousands_separator(); |
||||
367 | $localize['decimals'] = wpinv_decimal_separator(); |
||||
368 | $localize['nonce'] = wp_create_nonce( 'wpinv-nonce' ); |
||||
369 | $localize['txtComplete'] = __( 'Continue', 'invoicing' ); |
||||
370 | $localize['UseTaxes'] = wpinv_use_taxes(); |
||||
371 | $localize['formNonce'] = wp_create_nonce( 'getpaid_form_nonce' ); |
||||
372 | $localize['loading'] = __( 'Loading...', 'invoicing' ); |
||||
373 | $localize['connectionError'] = __( 'Could not establish a connection to the server.', 'invoicing' ); |
||||
374 | $localize['recaptchaSettings'] = getpaid_get_recaptcha_settings(); |
||||
375 | |||||
376 | $localize = apply_filters( 'wpinv_front_js_localize', $localize ); |
||||
377 | |||||
378 | // reCaptcha. |
||||
379 | if ( getpaid_is_recaptcha_enabled() && ( $recaptcha_js = getpaid_recaptcha_api_url() ) ) { |
||||
380 | wp_enqueue_script( 'recaptcha', $recaptcha_js, array(), null, true ); // phpcs:ignore WordPress.WP.EnqueuedResourceParameters.MissingVersion |
||||
381 | } |
||||
382 | |||||
383 | wp_enqueue_script( 'wpinv-front-script', WPINV_PLUGIN_URL . 'assets/js/payment-forms.min.js', array( 'jquery' ), WPINV_VERSION, true ); |
||||
384 | wp_localize_script( 'wpinv-front-script', 'WPInv', $localize ); |
||||
385 | } |
||||
386 | |||||
387 | public function wpinv_actions() { |
||||
388 | if ( isset( $_REQUEST['wpi_action'] ) ) { |
||||
389 | do_action( 'wpinv_' . wpinv_sanitize_key( $_REQUEST['wpi_action'] ), $_REQUEST ); |
||||
390 | } |
||||
391 | |||||
392 | if ( defined( 'WP_ALL_IMPORT_ROOT_DIR' ) ) { |
||||
393 | include plugin_dir_path( __FILE__ ) . 'libraries/wp-all-import/class-getpaid-wp-all-import.php'; |
||||
394 | } |
||||
395 | } |
||||
396 | |||||
397 | /** |
||||
398 | * Fires an action after verifying that a user can fire them. |
||||
399 | * |
||||
400 | * Note: If the action is on an invoice, subscription etc, esure that the |
||||
401 | * current user owns the invoice/subscription. |
||||
402 | */ |
||||
403 | public function maybe_do_authenticated_action() { |
||||
404 | if ( isset( $_REQUEST['getpaid-action'] ) && isset( $_REQUEST['getpaid-nonce'] ) && wp_verify_nonce( $_REQUEST['getpaid-nonce'], 'getpaid-nonce' ) ) { |
||||
405 | $key = sanitize_key( $_REQUEST['getpaid-action'] ); |
||||
406 | $data = wp_unslash( $_REQUEST ); |
||||
407 | |||||
408 | if ( is_user_logged_in() ) { |
||||
409 | do_action( "getpaid_authenticated_action_$key", $data ); |
||||
410 | } |
||||
411 | |||||
412 | do_action( "getpaid_unauthenticated_action_$key", $data ); |
||||
413 | } |
||||
414 | } |
||||
415 | |||||
416 | public function pre_get_posts( $wp_query ) { |
||||
417 | if ( ! is_admin() && ! empty( $wp_query->query_vars['post_type'] ) && getpaid_is_invoice_post_type( $wp_query->query_vars['post_type'] ) && is_user_logged_in() && is_single() && $wp_query->is_main_query() ) { |
||||
418 | $wp_query->query_vars['post_status'] = array_keys( wpinv_get_invoice_statuses( false, false, $wp_query->query_vars['post_type'] ) ); |
||||
419 | } |
||||
420 | |||||
421 | return $wp_query; |
||||
422 | } |
||||
423 | |||||
424 | /** |
||||
425 | * Register widgets |
||||
426 | * |
||||
427 | */ |
||||
428 | public function register_widgets() { |
||||
429 | global $pagenow; |
||||
430 | |||||
431 | // Currently, UX Builder does not work particulaly well with SuperDuper. |
||||
432 | // So we disable our widgets when editing a page with UX Builder. |
||||
433 | if ( function_exists( 'ux_builder_is_active' ) && ux_builder_is_active() ) { |
||||
434 | return; |
||||
435 | } |
||||
436 | |||||
437 | $block_widget_init_screens = function_exists( 'sd_pagenow_exclude' ) ? sd_pagenow_exclude() : array(); |
||||
438 | |||||
439 | if ( is_admin() && $pagenow && in_array( $pagenow, $block_widget_init_screens ) ) { |
||||
440 | // don't initiate in these conditions. |
||||
441 | } else { |
||||
442 | // Only load allowed widgets. |
||||
443 | $exclude = function_exists( 'sd_widget_exclude' ) ? sd_widget_exclude() : array(); |
||||
444 | $widgets = apply_filters( |
||||
445 | 'getpaid_widget_classes', |
||||
446 | array( |
||||
447 | 'WPInv_Checkout_Widget', |
||||
448 | 'WPInv_History_Widget', |
||||
449 | 'WPInv_Receipt_Widget', |
||||
450 | 'WPInv_Subscriptions_Widget', |
||||
451 | 'WPInv_Buy_Item_Widget', |
||||
452 | 'WPInv_Messages_Widget', |
||||
453 | 'WPInv_GetPaid_Widget', |
||||
454 | 'WPInv_Invoice_Widget', |
||||
455 | ) |
||||
456 | ); |
||||
457 | |||||
458 | // For each widget... |
||||
459 | foreach ( $widgets as $widget ) { |
||||
460 | // Abort early if it is excluded for this page. |
||||
461 | if ( in_array( $widget, $exclude ) ) { |
||||
462 | continue; |
||||
463 | } |
||||
464 | |||||
465 | // SD V1 used to extend the widget class. V2 does not, so we cannot call register widget on it. |
||||
466 | if ( is_subclass_of( $widget, 'WP_Widget' ) ) { |
||||
467 | register_widget( $widget ); |
||||
468 | } else { |
||||
469 | new $widget(); |
||||
470 | } |
||||
471 | } |
||||
472 | } |
||||
473 | } |
||||
474 | |||||
475 | /** |
||||
476 | * Upgrades the database. |
||||
477 | * |
||||
478 | * @since 2.0.2 |
||||
479 | */ |
||||
480 | public function maybe_upgrade_database() { |
||||
481 | // Ensure the database tables are up to date. |
||||
482 | GetPaid_Installer::maybe_create_db_tables(); |
||||
483 | |||||
484 | $wpi_version = get_option( 'wpinv_version', 0 ); |
||||
485 | |||||
486 | if ( $wpi_version == WPINV_VERSION ) { |
||||
487 | return; |
||||
488 | } |
||||
489 | |||||
490 | $installer = new GetPaid_Installer(); |
||||
491 | |||||
492 | if ( empty( $wpi_version ) ) { |
||||
493 | return $installer->upgrade_db( 0 ); |
||||
494 | } |
||||
495 | |||||
496 | $upgrades = array( |
||||
497 | '0.0.5' => '004', |
||||
498 | '1.0.3' => '102', |
||||
499 | '2.0.0' => '118', |
||||
500 | '2.8.0' => '279', |
||||
501 | ); |
||||
502 | |||||
503 | foreach ( $upgrades as $key => $method ) { |
||||
504 | if ( version_compare( $wpi_version, $key, '<' ) ) { |
||||
505 | return $installer->upgrade_db( $method ); |
||||
506 | } |
||||
507 | } |
||||
508 | } |
||||
509 | |||||
510 | /** |
||||
511 | * Flushes the permalinks if needed. |
||||
512 | * |
||||
513 | * @since 2.0.8 |
||||
514 | */ |
||||
515 | public function maybe_flush_permalinks() { |
||||
516 | $flush = get_option( 'wpinv_flush_permalinks', 0 ); |
||||
517 | |||||
518 | if ( ! empty( $flush ) ) { |
||||
519 | flush_rewrite_rules(); |
||||
520 | delete_option( 'wpinv_flush_permalinks' ); |
||||
521 | } |
||||
522 | } |
||||
523 | |||||
524 | /** |
||||
525 | * Remove our pages from yoast sitemaps. |
||||
526 | * |
||||
527 | * @since 1.0.19 |
||||
528 | * @param int[] $excluded_posts_ids |
||||
529 | */ |
||||
530 | public function wpseo_exclude_from_sitemap_by_post_ids( $excluded_posts_ids ) { |
||||
531 | // Ensure that we have an array. |
||||
532 | if ( ! is_array( $excluded_posts_ids ) ) { |
||||
533 | $excluded_posts_ids = array(); |
||||
534 | } |
||||
535 | |||||
536 | // Prepare our pages. |
||||
537 | $our_pages = array(); |
||||
538 | |||||
539 | // Checkout page. |
||||
540 | $our_pages[] = wpinv_get_option( 'checkout_page', false ); |
||||
541 | |||||
542 | // Success page. |
||||
543 | $our_pages[] = wpinv_get_option( 'success_page', false ); |
||||
544 | |||||
545 | // Failure page. |
||||
546 | $our_pages[] = wpinv_get_option( 'failure_page', false ); |
||||
547 | |||||
548 | // History page. |
||||
549 | $our_pages[] = wpinv_get_option( 'invoice_history_page', false ); |
||||
550 | |||||
551 | // Subscriptions page. |
||||
552 | $our_pages[] = wpinv_get_option( 'invoice_subscription_page', false ); |
||||
553 | |||||
554 | $our_pages = array_map( 'intval', array_filter( $our_pages ) ); |
||||
555 | |||||
556 | $excluded_posts_ids = $excluded_posts_ids + $our_pages; |
||||
557 | |||||
558 | return array_unique( $excluded_posts_ids ); |
||||
559 | } |
||||
560 | |||||
561 | /** |
||||
562 | * Remove our pages from yoast sitemaps. |
||||
563 | * |
||||
564 | * @since 1.0.19 |
||||
565 | * @param string[] $post_types |
||||
566 | */ |
||||
567 | public function exclude_invoicing_post_types( $post_types ) { |
||||
568 | // Ensure that we have an array. |
||||
569 | if ( ! is_array( $post_types ) ) { |
||||
570 | $post_types = array(); |
||||
571 | } |
||||
572 | |||||
573 | // Remove our post types. |
||||
574 | return array_diff( $post_types, array_keys( getpaid_get_invoice_post_types() ) ); |
||||
575 | } |
||||
576 | |||||
577 | /** |
||||
578 | * Displays additional footer code. |
||||
579 | * |
||||
580 | * @since 2.0.0 |
||||
581 | */ |
||||
582 | public function wp_footer() { |
||||
583 | wpinv_get_template( 'frontend-footer.php' ); |
||||
584 | } |
||||
585 | |||||
586 | /** |
||||
587 | * Displays additional header code. |
||||
588 | * |
||||
589 | * @since 2.0.0 |
||||
590 | */ |
||||
591 | public function wp_head() { |
||||
592 | wpinv_get_template( 'frontend-head.php' ); |
||||
593 | } |
||||
594 | |||||
595 | /** |
||||
596 | * Custom query vars. |
||||
597 | * |
||||
598 | */ |
||||
599 | public function custom_query_vars( $vars ) { |
||||
600 | $vars[] = 'getpaid-ipn'; |
||||
601 | return $vars; |
||||
602 | } |
||||
603 | |||||
604 | /** |
||||
605 | * Add rewrite tags and rules. |
||||
606 | * |
||||
607 | */ |
||||
608 | public function add_rewrite_rule() { |
||||
609 | $tag = 'getpaid-ipn'; |
||||
610 | add_rewrite_tag( "%$tag%", '([^&]+)' ); |
||||
611 | add_rewrite_rule( "^$tag/([^/]*)/?", "index.php?$tag=\$matches[1]", 'top' ); |
||||
612 | } |
||||
613 | |||||
614 | /** |
||||
615 | * Processes non-query string ipns. |
||||
616 | * |
||||
617 | */ |
||||
618 | public function maybe_process_new_ipn( $query ) { |
||||
619 | if ( is_admin() || ! $query->is_main_query() ) { |
||||
620 | return; |
||||
621 | } |
||||
622 | |||||
623 | $gateway = get_query_var( 'getpaid-ipn' ); |
||||
624 | |||||
625 | if ( ! empty( $gateway ) ) { |
||||
626 | $gateway = sanitize_text_field( $gateway ); |
||||
627 | nocache_headers(); |
||||
628 | do_action( 'wpinv_verify_payment_ipn', $gateway ); |
||||
629 | do_action( "wpinv_verify_{$gateway}_ipn" ); |
||||
630 | exit; |
||||
631 | } |
||||
632 | } |
||||
633 | } |
||||
634 |