AyeCode / invoicing

templates/payment-forms/elements/address-fields.php

<?php
/**
 * Displays an address field in payment form
 *
 * This template can be overridden by copying it to yourtheme/invoicing/payment-forms/elements/address-fields.php.
 *
 * @version 1.0.19
 * @var array $fields
 * @var string $field_type Either billing or shipping
 * @var string $uniqid A unique prefix for all ids
 * @var string $country The current user's country
 * @var GetPaid_Payment_Form $form
 */

defined( 'ABSPATH' ) || exit;

$field_type = sanitize_key( $field_type );

echo "<div class='row " . esc_attr( $field_type ) . "'>";

// Prepare current user.
if ( ! empty( $form->invoice ) ) {
    $user_id = $form->invoice->get_user_id();
}

if ( empty( $user_id ) && is_user_logged_in() ) {
    $user_id = get_current_user_id();
}

if ( ! empty( $user_id ) ) {
    $user  = wp_get_current_user();
}

foreach ( $fields as $address_field ) {

    // Skip if it is hidden.
    if ( empty( $address_field['visible'] ) ) {
        continue;
    }

    do_action( 'getpaid_payment_form_address_field_before_' . $address_field['name'], $field_type, $address_field );

    // Prepare variables.
    $field_name  = $address_field['name'];
    $field_name  = "{$field_type}[$field_name]";
    $wrap_class  = getpaid_get_form_element_grid_class( $address_field );
    $wrap_class  = esc_attr( "$wrap_class getpaid-address-field-wrapper" );
    $placeholder = empty( $address_field['placeholder'] ) ? '' : esc_attr( __( wp_unslash( $address_field['placeholder'] ), 'invoicing' ) );

It seems like wp_unslash($address_field['placeholder']) can also be of type array; however, parameter $text of __() does only seem to accept string, maybe add an additional type check?

    $description = empty( $address_field['description'] ) ? '' : wp_kses_post( __( wp_unslash( $address_field['description'] ), 'invoicing' ) );
    $value       = ! empty( $user_id ) ? get_user_meta( $user_id, '_' . $address_field['name'], true ) : '';
    $label       = empty( $address_field['label'] ) ? '' : wp_kses_post( __( wp_unslash( $address_field['label'] ), 'invoicing' ) );

    $method_name = 'get_' . str_replace( 'wpinv_', '', $address_field['name'] );
    if ( ! empty( $form->invoice ) && is_callable( array( $form->invoice, $method_name ) ) ) {
        $value = call_user_func( array( $form->invoice, $method_name ) );
    }

    if ( empty( $value ) && 'wpinv_first_name' === $address_field['name'] && ! empty( $user ) ) {
        $value = $user->first_name;
    }

    if ( empty( $value ) && 'wpinv_last_name' === $address_field['name'] && ! empty( $user ) ) {
        $value = $user->last_name;
    }

    if ( ! empty( $address_field['required'] ) ) {
        $label .= "<span class='text-danger'> *</span>";
    }

    // Display the country.
    if ( 'wpinv_country' === $address_field['name'] ) {

        echo "<div class='form-group mb-3 " . esc_attr( $wrap_class ) . " getpaid-address-field-wrapper__country'";

        aui()->select(
            array(
                'options'          => wpinv_get_country_list(),
                'name'             => esc_attr( $field_name ),
                'id'               => sanitize_html_class( $field_name ) . $uniqid,
                'value'            => esc_attr( $country ),
                'placeholder'      => $placeholder,
                'required'         => ! empty( $address_field['required'] ),
                'label'            => wp_kses_post( $label ),
                'label_type'       => 'vertical',
                'help_text'        => $description,
                'class'            => 'getpaid-address-field wpinv_country',
                'label_class'      => 'getpaid-address-field-label getpaid-address-field-label__country',
                'extra_attributes' => array(
                    'autocomplete'    => "$field_type country",
                    'data-ip-country' => getpaid_get_ip_country(),
                ),
                'no_wrap'          => true,
            ),
            true
        );

        if ( wpinv_should_validate_vat_number() ) {

            aui()->input(
                array(
                    'type'       => 'checkbox',
                    'name'       => 'confirm-address',
                    'id'         => "shipping-toggle$uniqid",
                    'wrap_class' => 'getpaid-address-field-wrapper__address-confirm mt-1 d-none',
                    'required'   => false,
                    'label'      => __( 'I certify that I live in the country selected above', 'invoicing' ) . "<span class='text-danger'> *</span>",
                    'value'      => 1,
                    'checked'    => true,
                    'class'      => 'w-auto',
                ),
                true
            );

        }

        echo '</div>';

    }

    // Display the state.
    elseif ( 'wpinv_state' == $address_field['name'] ) {

        if ( empty( $value ) ) {
            $value = wpinv_get_default_state();
        }

        getpaid_get_states_select_markup(
            $country,
            $value,
            $placeholder,
            $label,
            $description,
            ! empty( $address_field['required'] ),
            $wrap_class,
            $field_name,
            true
        );

    } else {

        $key      = str_replace( 'wpinv_', '', $address_field['name'] );
        $key      = esc_attr( str_replace( '_', '-', $key ) );
        $autocomplete = '';
        $replacements = array(
            'zip'        => 'postal-code',
            'first-name' => 'given-name',
            'last-name'  => 'family-name',
            'company'    => 'organization',
            'address'    => 'street-address',
            'phone'      => 'tel',
            'city'       => 'address-level2',
        );


        if ( isset( $replacements[ $key ] ) ) {
            $autocomplete = array(
                'autocomplete' => "$field_type {$replacements[ $key ]}",
            );
        }

        $append = '';

        if ( 'billing' === $field_type && wpinv_should_validate_vat_number() && 'vat-number' === $key ) {
            $valid    = esc_attr__( 'Valid', 'invoicing' );
            $invalid  = esc_attr__( 'Invalid', 'invoicing' );
            $validate = esc_attr__( 'Validate', 'invoicing' );
            $append   = "<span class='btn btn-primary getpaid-vat-number-validate' data-valid='$valid' data-invalid='$invalid' data-validate='$validate'>$validate</span>";
        }

        if ( 'billing' === $field_type ) {
            $description .= '<div class="getpaid-error-' . esc_attr( $field_name ) . ' getpaid-custom-payment-form-errors alert alert-danger d-none"></div>';
        }

        aui()->input(
            array(
                'name'              => esc_attr( $field_name ),
                'id'                => sanitize_html_class( $field_name ) . $uniqid,
                'required'          => ! empty( $address_field['required'] ),
                'placeholder'       => $placeholder,
                'label'             => wp_kses_post( $label ),
                'label_type'        => 'vertical',
                'help_text'         => $description,
                'type'              => 'text',
                'value'             => apply_filters( 'getpaid_payment_form_value_' . $address_field['name'], esc_attr( $value ) ),
                'class'             => 'getpaid-address-field ' . esc_attr( $address_field['name'] ),
                'wrap_class'        => "$wrap_class getpaid-address-field-wrapper__$key",
                'label_class'       => 'getpaid-address-field-label getpaid-address-field-label__' . $key,
                'extra_attributes'  => $autocomplete,
                'input_group_right' => $append,
            ),
            true
        );

    }

    do_action( 'getpaid_payment_form_address_field_after_' . $address_field['name'], $field_type, $address_field );
}

echo '</div>';