AyeCode /
invoicing
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Contains error functions. |
||
| 4 | * |
||
| 5 | * @since 1.0.0 |
||
| 6 | * @package Invoicing |
||
| 7 | */ |
||
| 8 | |||
| 9 | defined( 'ABSPATH' ) || exit; |
||
| 10 | |||
| 11 | /** |
||
| 12 | * Returns the errors as html |
||
| 13 | * |
||
| 14 | * @param bool $clear whether or not to clear the errors. |
||
| 15 | * @param bool $wrap whether or not to wrap the errors. |
||
| 16 | * @since 1.0.19 |
||
| 17 | */ |
||
| 18 | function getpaid_get_errors_html( $clear = true, $wrap = true ) { |
||
| 19 | |||
| 20 | $errors = ''; |
||
| 21 | foreach ( wpinv_get_errors() as $id => $error ) { |
||
| 22 | $type = 'error'; |
||
| 23 | |||
| 24 | if ( is_array( $error ) ) { |
||
| 25 | $type = $error['type']; |
||
| 26 | $error = $error['text']; |
||
| 27 | } |
||
| 28 | |||
| 29 | if ( $wrap ) { |
||
| 30 | |||
| 31 | $errors .= aui()->alert( |
||
| 32 | array( |
||
| 33 | 'content' => wp_kses_post( $error ), |
||
| 34 | 'type' => $type, |
||
| 35 | ) |
||
| 36 | ); |
||
| 37 | |||
| 38 | } else { |
||
| 39 | |||
| 40 | $id = esc_attr( $id ); |
||
| 41 | $error = wp_kses_post( $error ); |
||
| 42 | $errors .= "<div data-code='$id'>$error</div>"; |
||
| 43 | } |
||
| 44 | } |
||
| 45 | |||
| 46 | if ( $clear ) { |
||
| 47 | wpinv_clear_errors(); |
||
| 48 | } |
||
| 49 | |||
| 50 | return $errors; |
||
| 51 | |||
| 52 | } |
||
| 53 | |||
| 54 | /** |
||
| 55 | * Prints (then clears) all available errors. |
||
| 56 | */ |
||
| 57 | function wpinv_print_errors() { |
||
| 58 | echo wp_kses_post( getpaid_get_errors_html() ); |
||
| 59 | } |
||
| 60 | |||
| 61 | /** |
||
| 62 | * Returns all available errors. |
||
| 63 | * |
||
| 64 | * @return array |
||
| 65 | */ |
||
| 66 | function wpinv_get_errors() { |
||
| 67 | |||
| 68 | // Contains known errors. |
||
| 69 | $all_errors = array( |
||
| 70 | 'perm_cancel_subscription' => array( |
||
| 71 | 'type' => 'error', |
||
| 72 | 'text' => __( 'You do not have permission to cancel this subscription', 'invoicing' ), |
||
| 73 | ), |
||
| 74 | 'cannot_cancel_subscription' => array( |
||
| 75 | 'type' => 'error', |
||
| 76 | 'text' => __( 'This subscription cannot be cancelled as it is not active.', 'invoicing' ), |
||
| 77 | ), |
||
| 78 | 'cancelled_subscription' => array( |
||
| 79 | 'type' => 'success', |
||
| 80 | 'text' => __( 'Subscription cancelled successfully.', 'invoicing' ), |
||
| 81 | ), |
||
| 82 | 'address_updated' => array( |
||
| 83 | 'type' => 'success', |
||
| 84 | 'text' => __( 'Address updated successfully.', 'invoicing' ), |
||
| 85 | ), |
||
| 86 | 'perm_delete_invoice' => array( |
||
| 87 | 'type' => 'error', |
||
| 88 | 'text' => __( 'You do not have permission to delete this invoice', 'invoicing' ), |
||
| 89 | ), |
||
| 90 | 'cannot_delete_invoice' => array( |
||
| 91 | 'type' => 'error', |
||
| 92 | 'text' => __( 'This invoice cannot be deleted as it has already been paid.', 'invoicing' ), |
||
| 93 | ), |
||
| 94 | 'deleted_invoice' => array( |
||
| 95 | 'type' => 'success', |
||
| 96 | 'text' => __( 'Invoice deleted successfully.', 'invoicing' ), |
||
| 97 | ), |
||
| 98 | 'card_declined' => array( |
||
| 99 | 'type' => 'error', |
||
| 100 | 'text' => __( 'Your card was declined.', 'invoicing' ), |
||
| 101 | ), |
||
| 102 | 'invalid_currency' => array( |
||
| 103 | 'type' => 'error', |
||
| 104 | 'text' => __( 'The chosen payment gateway does not support this currency.', 'invoicing' ), |
||
| 105 | ), |
||
| 106 | ); |
||
| 107 | |||
| 108 | $errors = apply_filters( 'wpinv_errors', array() ); |
||
| 109 | |||
| 110 | if ( isset( $_GET['wpinv-notice'] ) && isset( $all_errors[ $_GET['wpinv-notice'] ] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended |
||
| 111 | $errors[ $_GET['wpinv-notice'] ] = $all_errors[ $_GET['wpinv-notice'] ]; // phpcs:ignore WordPress.Security.NonceVerification.Recommended |
||
| 112 | } |
||
| 113 | |||
| 114 | if ( isset( $GLOBALS['wpinv_notice'] ) && isset( $all_errors[ $GLOBALS['wpinv_notice'] ] ) ) { |
||
| 115 | $errors[ $GLOBALS['wpinv_notice'] ] = $all_errors[ $GLOBALS['wpinv_notice'] ]; |
||
| 116 | } |
||
| 117 | |||
| 118 | if ( isset( $GLOBALS['wpinv_custom_notice'] ) ) { |
||
| 119 | $errors[ $GLOBALS['wpinv_custom_notice']['code'] ] = $GLOBALS['wpinv_custom_notice']; |
||
| 120 | } |
||
| 121 | |||
| 122 | return $errors; |
||
| 123 | } |
||
| 124 | |||
| 125 | /** |
||
| 126 | * Adds an error to the list of errors. |
||
| 127 | * |
||
| 128 | * @param string $error_id The error id. |
||
| 129 | * @param string $error The error message. |
||
| 130 | * @param string $type The error type. |
||
| 131 | */ |
||
| 132 | function wpinv_set_error( $error_id, $message = '', $type = 'error' ) { |
||
| 133 | |||
| 134 | if ( ! empty( $message ) ) { |
||
| 135 | $GLOBALS['wpinv_custom_notice'] = array( |
||
| 136 | 'code' => $error_id, |
||
| 137 | 'type' => $type, |
||
| 138 | 'text' => $message, |
||
| 139 | ); |
||
| 140 | } else { |
||
| 141 | $GLOBALS['wpinv_notice'] = $error_id; |
||
| 142 | } |
||
| 143 | } |
||
| 144 | |||
| 145 | /** |
||
| 146 | * Checks if there is an error. |
||
| 147 | * |
||
| 148 | */ |
||
| 149 | function wpinv_has_errors() { |
||
| 150 | return count( wpinv_get_errors() ) > 0; |
||
| 151 | } |
||
| 152 | |||
| 153 | /** |
||
| 154 | * Clears all error. |
||
| 155 | * |
||
| 156 | */ |
||
| 157 | function wpinv_clear_errors() { |
||
| 158 | unset( $GLOBALS['wpinv_notice'] ); |
||
| 159 | } |
||
| 160 | |||
| 161 | /** |
||
| 162 | * Clears a single error. |
||
| 163 | * |
||
| 164 | */ |
||
| 165 | function wpinv_unset_error() { |
||
| 166 | unset( $GLOBALS['wpinv_notice'] ); |
||
| 167 | } |
||
| 168 | |||
| 169 | /** |
||
| 170 | * Wrapper for _doing_it_wrong(). |
||
| 171 | * |
||
| 172 | * @since 1.0.19 |
||
| 173 | * @param string $function Function used. |
||
| 174 | * @param string $message Message to log. |
||
| 175 | * @param string $version Version the message was added in. |
||
| 176 | */ |
||
| 177 | function getpaid_doing_it_wrong( $function, $message, $version ) { |
||
| 178 | |||
| 179 | $message .= ' Backtrace: ' . wp_debug_backtrace_summary(); |
||
| 180 | |||
| 181 | if ( wp_doing_ajax() || defined( 'REST_REQUEST' ) ) { |
||
| 182 | do_action( 'doing_it_wrong_run', $function, $message, $version ); |
||
| 183 | error_log( "{$function} was called incorrectly. {$message}. This message was added in version {$version}." ); |
||
| 184 | } else { |
||
| 185 | _doing_it_wrong( esc_html( $function ), wp_kses_post( $message ), esc_html( $version ) ); |
||
| 186 | } |
||
| 187 | |||
| 188 | } |
||
| 189 | |||
| 190 | /** |
||
| 191 | * Logs a debugging message. |
||
| 192 | * |
||
| 193 | * @param string $log The message to log. |
||
| 194 | * @param string|bool $title The title of the message, or pass false to disable the backtrace. |
||
| 195 | * @param string $file The file from which the error was logged. |
||
| 196 | * @param string $line The line that contains the error. |
||
| 197 | * @param bool $exit Whether or not to exit function execution. |
||
| 198 | */ |
||
| 199 | function wpinv_error_log( $log, $title = '', $file = '', $line = '', $exit = false ) { |
||
| 200 | |||
| 201 | if ( true === apply_filters( 'wpinv_log_errors', true ) ) { |
||
| 202 | |||
| 203 | // Ensure the log is a scalar. |
||
| 204 | if ( ! is_scalar( $log ) ) { |
||
|
0 ignored issues
–
show
introduced
by
Loading history...
|
|||
| 205 | $log = print_r( $log, true ); |
||
| 206 | } |
||
| 207 | |||
| 208 | // Add title. |
||
| 209 | if ( ! empty( $title ) ) { |
||
| 210 | $log = $title . ' ' . trim( $log ); |
||
| 211 | } |
||
| 212 | |||
| 213 | // Add the file to the label. |
||
| 214 | if ( ! empty( $file ) ) { |
||
| 215 | $log .= ' in ' . $file; |
||
| 216 | } |
||
| 217 | |||
| 218 | // Add the line number to the label. |
||
| 219 | if ( ! empty( $line ) ) { |
||
| 220 | $log .= ' on line ' . $line; |
||
| 221 | } |
||
| 222 | |||
| 223 | // Log the message. |
||
| 224 | error_log( trim( $log ) ); |
||
| 225 | |||
| 226 | // ... and a backtrace. |
||
| 227 | if ( false !== $title && false !== $file ) { |
||
| 228 | error_log( 'Backtrace ' . wp_debug_backtrace_summary() ); |
||
| 229 | } |
||
| 230 | } |
||
| 231 | |||
| 232 | // Maybe exit. |
||
| 233 | if ( $exit ) { |
||
| 234 | exit; |
||
|
0 ignored issues
–
show
|
|||
| 235 | } |
||
| 236 | |||
| 237 | } |
||
| 238 |