Nickbur / Sunrise-CMS

administration/model/customer/customer.php

<?php

/* 	Divine CMS - Open source CMS for widespread use.
    Copyright (c) 2019 Mykola Burakov (burakov.work@gmail.com)

    See SOURCE.txt for other and additional information.

    This file is part of Divine CMS.

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program. If not, see <http://www.gnu.org/licenses/>. */

class ModelCustomerCustomer extends \Divine\Engine\Core\Model

PSR1 recommends that each class must be in a namespace of at least one level to avoid collisions.

{
    public function addCustomer($data)

Expected 2 blank lines before function; 0 found

    {
        $this->db->query("
            INSERT INTO customer 
            SET customer_group_id = '" . (int)$data['customer_group_id'] . "', 
                firstname = '" . $this->db->escape($data['firstname']) . "', 
                lastname = '" . $this->db->escape($data['lastname']) . "', 
                email = '" . $this->db->escape($data['email']) . "', 
                telephone = '" . $this->db->escape($data['telephone']) . "', 
                fax = '" . $this->db->escape($data['fax']) . "', 
                custom_field = '" . $this->db->escape(isset($data['custom_field']) ? json_encode($data['custom_field']) : '') . "', 
                newsletter = '" . (int)$data['newsletter'] . "', 
                salt = '" . $this->db->escape($salt = (new \Tokenly\TokenGenerator\TokenGenerator())->generateToken(9, 'SR')) . "', 
                password = '" . $this->db->escape(sha1($salt . sha1($salt . sha1($data['password'])))) . "', 
                status = '" . (int)$data['status'] . "', 
                approved = '" . (int)$data['approved'] . "', 
                safe = '" . (int)$data['safe'] . "', 
                date_added = NOW()
        ");

        $customer_id = $this->db->getLastId();

        if (isset($data['address'])) {
            foreach ($data['address'] as $address) {
                $this->db->query("
                    INSERT INTO address 
                    SET customer_id = '" . (int)$customer_id . "', 
                        firstname = '" . $this->db->escape($address['firstname']) . "', 
                        lastname = '" . $this->db->escape($address['lastname']) . "', 
                        company = '" . $this->db->escape($address['company']) . "', 
                        address_1 = '" . $this->db->escape($address['address_1']) . "', 
                        address_2 = '" . $this->db->escape($address['address_2']) . "', 
                        city = '" . $this->db->escape($address['city']) . "', 
                        postcode = '" . $this->db->escape($address['postcode']) . "', 
                        country_id = '" . (int)$address['country_id'] . "', 
                        zone_id = '" . (int)$address['zone_id'] . "', 
                        custom_field = '" . $this->db->escape(isset($address['custom_field']) ? json_encode($address['custom_field']) : '') . "'
                ");

                if (isset($address['default'])) {
                    $address_id = $this->db->getLastId();

                    $this->db->query("
                        UPDATE customer 
                        SET address_id = '" . (int)$address_id . "' 
                        WHERE customer_id = '" . (int)$customer_id . "'
                    ");
                }
            }
        }

        return $customer_id;
    }

    public function editCustomer($customer_id, $data)
    {
        if (!isset($data['custom_field'])) {
            $data['custom_field'] = array();
        }

        $this->db->query("
            UPDATE customer 
            SET customer_group_id = '" . (int)$data['customer_group_id'] . "', 
                firstname = '" . $this->db->escape($data['firstname']) . "', 
                lastname = '" . $this->db->escape($data['lastname']) . "', 
                email = '" . $this->db->escape($data['email']) . "', 
                telephone = '" . $this->db->escape($data['telephone']) . "', 
                fax = '" . $this->db->escape($data['fax']) . "', 
                custom_field = '" . $this->db->escape(isset($data['custom_field']) ? json_encode($data['custom_field']) : '') . "', 
                newsletter = '" . (int)$data['newsletter'] . "', 
                status = '" . (int)$data['status'] . "', 
                approved = '" . (int)$data['approved'] . "', 
                safe = '" . (int)$data['safe'] . "' 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        if ($data['password']) {
            $this->db->query("
                UPDATE customer 
                SET salt = '" . $this->db->escape($salt = (new \Tokenly\TokenGenerator\TokenGenerator())->generateToken(9, 'SR')) . "', 
                    password = '" . $this->db->escape(sha1($salt . sha1($salt . sha1($data['password'])))) . "' 
                WHERE customer_id = '" . (int)$customer_id . "'
            ");
        }

        $this->db->query("
            DELETE 
			FROM address 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        if (isset($data['address'])) {
            foreach ($data['address'] as $address) {
                if (!isset($address['custom_field'])) {
                    $address['custom_field'] = array();
                }

                $this->db->query("
                    INSERT INTO address 
                    SET address_id = '" . (int)$address['address_id'] . "', 
                        customer_id = '" . (int)$customer_id . "', 
                        firstname = '" . $this->db->escape($address['firstname']) . "', 
                        lastname = '" . $this->db->escape($address['lastname']) . "', 
                        company = '" . $this->db->escape($address['company']) . "', 
                        address_1 = '" . $this->db->escape($address['address_1']) . "', 
                        address_2 = '" . $this->db->escape($address['address_2']) . "', 
                        city = '" . $this->db->escape($address['city']) . "', 
                        postcode = '" . $this->db->escape($address['postcode']) . "', 
                        country_id = '" . (int)$address['country_id'] . "', 
                        zone_id = '" . (int)$address['zone_id'] . "', 
                        custom_field = '" . $this->db->escape(isset($address['custom_field']) ? json_encode($address['custom_field']) : '') . "'
                ");

                if (isset($address['default'])) {
                    $address_id = $this->db->getLastId();

                    $this->db->query("
                        UPDATE customer 
                        SET address_id = '" . (int)$address_id . "' 
                        WHERE customer_id = '" . (int)$customer_id . "'
                    ");
                }
            }
        }
    }

    public function editToken($customer_id, $token)
    {
        $this->db->query("
            UPDATE customer 
            SET token = '" . $this->db->escape($token) . "' 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");
    }

    public function deleteCustomer($customer_id)
    {
        $this->db->query("
        	DELETE 
			FROM customer 
        	WHERE customer_id = '" . (int)$customer_id . "'
        ");
        $this->db->query("
        	DELETE 
			FROM customer_reward 
        	WHERE customer_id = '" . (int)$customer_id . "'
        ");
        $this->db->query("
        	DELETE 
			FROM customer_transaction 
        	WHERE customer_id = '" . (int)$customer_id . "'
        ");
        $this->db->query("
        	DELETE 
			FROM customer_ip 
        	WHERE customer_id = '" . (int)$customer_id . "'
        ");
        $this->db->query("
        	DELETE 
			FROM address 
        	WHERE customer_id = '" . (int)$customer_id . "'
        ");
    }

    public function getCustomer($customer_id)
    {
        $query = $this->db->query("
            SELECT DISTINCT * 
            FROM customer 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row;
    }

    public function getCustomerByEmail($email)
    {
        $query = $this->db->query("
            SELECT DISTINCT * 
            FROM customer 
            WHERE LCASE(email) = '" . $this->db->escape(\voku\helper\UTF8::strtolower($email)) . "'
        ");

        return $query->row;
    }

    public function getCustomers($data = array())
    {
        $sql = "
            SELECT *, 
                CONCAT(c.firstname, ' ', c.lastname) AS name, 
                cgd.name AS customer_group 
            FROM customer c 
            LEFT JOIN customer_group_description cgd ON (c.customer_group_id = cgd.customer_group_id) 
            WHERE cgd.language_id = '" . (int)$this->config->get('config_language_id') . "'
        ";

        $implode = array();

        if (!empty($data['filter_name'])) {
            $implode[] = "CONCAT(c.firstname, ' ', c.lastname) LIKE '%" . $this->db->escape($data['filter_name']) . "%'";
        }

        if (!empty($data['filter_email'])) {
            $implode[] = "c.email LIKE '" . $this->db->escape($data['filter_email']) . "%'";
        }

        if (isset($data['filter_newsletter']) && !is_null($data['filter_newsletter'])) {
            $implode[] = "c.newsletter = '" . (int)$data['filter_newsletter'] . "'";
        }

        if (!empty($data['filter_customer_group_id'])) {
            $implode[] = "c.customer_group_id = '" . (int)$data['filter_customer_group_id'] . "'";
        }

        if (!empty($data['filter_ip'])) {
            $implode[] = "c.customer_id IN (SELECT customer_id FROM customer_ip WHERE ip = '" . $this->db->escape($data['filter_ip']) . "')";
        }

        if (isset($data['filter_status']) && !is_null($data['filter_status'])) {
            $implode[] = "c.status = '" . (int)$data['filter_status'] . "'";
        }

        if (isset($data['filter_approved']) && !is_null($data['filter_approved'])) {
            $implode[] = "c.approved = '" . (int)$data['filter_approved'] . "'";
        }

        if (!empty($data['filter_date_added'])) {
            $implode[] = "DATE(c.date_added) = DATE('" . $this->db->escape($data['filter_date_added']) . "')";
        }

        if ($implode) {
            $sql .= " AND " . implode(" AND ", $implode);

The string literal AND does not require double quotes, as per coding-style, please use single quotes.

        }

        $sort_data = array(
            'name',
            'c.email',
            'customer_group',
            'c.status',
            'c.approved',
            'c.ip',
            'c.date_added'
        );

        if (isset($data['sort']) && in_array($data['sort'], $sort_data)) {
            $sql .= " ORDER BY " . $data['sort'];

The string literal ORDER BY does not require double quotes, as per coding-style, please use single quotes.

        } else {
            $sql .= " ORDER BY name";

The string literal ORDER BY name does not require double quotes, as per coding-style, please use single quotes.

        }

        if (isset($data['order']) && ($data['order'] == 'DESC')) {
            $sql .= " DESC";

The string literal DESC does not require double quotes, as per coding-style, please use single quotes.

        } else {
            $sql .= " ASC";

The string literal ASC does not require double quotes, as per coding-style, please use single quotes.

        }

        if (isset($data['start']) || isset($data['limit'])) {
            if ($data['start'] < 0) {
                $data['start'] = 0;
            }

            if ($data['limit'] < 1) {
                $data['limit'] = 20;
            }

            $sql .= " LIMIT " . (int)$data['start'] . "," . (int)$data['limit'];

The string literal LIMIT does not require double quotes, as per coding-style, please use single quotes.

The string literal , does not require double quotes, as per coding-style, please use single quotes.

        }

        $query = $this->db->query($sql);

        return $query->rows;
    }

    public function approve($customer_id)
    {
        $customer_info = $this->getCustomer($customer_id);

        if ($customer_info) {
            $this->db->query("
                UPDATE customer 
                SET approved = '1' 
                WHERE customer_id = '" . (int)$customer_id . "'
            ");

            $store_name = $this->config->get('config_name');
            $store_url = '/index.php?route=account/login';

            $this->load->model('localisation/language');

            $language_info = $this->model_localisation_language->getLanguage($customer_info['language_id']);

            if ($language_info) {
                $language_code = $language_info['code'];
            } else {
                $language_code = $this->config->get('config_language');
            }

            $language = new \Divine\Engine\Library\Language($language_code);
            $language->load($language_code);
            $language->load('mail/customer');

            $message  = sprintf($language->get('text_approve_welcome'), html_entity_decode($store_name, ENT_QUOTES, 'UTF-8')) . "\n\n";
            $message .= $language->get('text_approve_login') . "\n";
            $message .= $store_url . "\n\n";
            $message .= $language->get('text_approve_services') . "\n\n";
            $message .= $language->get('text_approve_thanks') . "\n";
            $message .= html_entity_decode($store_name, ENT_QUOTES, 'UTF-8');

            $mail = new \Divine\Engine\Library\Mail();
            $mail->protocol = $this->config->get('config_mail_protocol');
            $mail->parameter = $this->config->get('config_mail_parameter');
            $mail->smtp_hostname = $this->config->get('config_mail_smtp_hostname');
            $mail->smtp_username = $this->config->get('config_mail_smtp_username');
            $mail->smtp_password = html_entity_decode($this->config->get('config_mail_smtp_password'), ENT_QUOTES, 'UTF-8');
            $mail->smtp_port = $this->config->get('config_mail_smtp_port');
            $mail->smtp_timeout = $this->config->get('config_mail_smtp_timeout');

            $mail->setTo($customer_info['email']);
            $mail->setFrom($this->config->get('config_email'));
            $mail->setSender(html_entity_decode($store_name, ENT_QUOTES, 'UTF-8'));
            $mail->setSubject(sprintf($language->get('text_approve_subject'), html_entity_decode($store_name, ENT_QUOTES, 'UTF-8')));
            $mail->setText($message);
            $mail->send();
        }
    }

    public function getAddress($address_id)
    {
        $address_query = $this->db->query("
            SELECT * 
            FROM address 
            WHERE address_id = '" . (int)$address_id . "'
        ");

        if ($address_query->num_rows) {
            $country_query = $this->db->query("
                SELECT * 
                FROM `country` 
                WHERE country_id = '" . (int)$address_query->row['country_id'] . "'
            ");

            if ($country_query->num_rows) {
                $country = $country_query->row['name'];
                $iso_code_2 = $country_query->row['iso_code_2'];
                $iso_code_3 = $country_query->row['iso_code_3'];
                $address_format = $country_query->row['address_format'];
            } else {
                $country = '';
                $iso_code_2 = '';
                $iso_code_3 = '';
                $address_format = '';
            }

            $zone_query = $this->db->query("
                SELECT * 
                FROM `zone` 
                WHERE zone_id = '" . (int)$address_query->row['zone_id'] . "'
            ");

            if ($zone_query->num_rows) {
                $zone = $zone_query->row['name'];
                $zone_code = $zone_query->row['code'];
            } else {
                $zone = '';
                $zone_code = '';
            }

            return array(
                'address_id'     => $address_query->row['address_id'],
                'customer_id'    => $address_query->row['customer_id'],
                'firstname'      => $address_query->row['firstname'],
                'lastname'       => $address_query->row['lastname'],
                'company'        => $address_query->row['company'],
                'address_1'      => $address_query->row['address_1'],
                'address_2'      => $address_query->row['address_2'],
                'postcode'       => $address_query->row['postcode'],
                'city'           => $address_query->row['city'],
                'zone_id'        => $address_query->row['zone_id'],
                'zone'           => $zone,
                'zone_code'      => $zone_code,
                'country_id'     => $address_query->row['country_id'],
                'country'        => $country,
                'iso_code_2'     => $iso_code_2,
                'iso_code_3'     => $iso_code_3,
                'address_format' => $address_format,
                'custom_field'   => json_decode($address_query->row['custom_field'], true)
            );
        }
    }

    public function getAddresses($customer_id)
    {
        $address_data = array();

        $query = $this->db->query("
            SELECT address_id 
            FROM address 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        foreach ($query->rows as $result) {
            $address_info = $this->getAddress($result['address_id']);

            if ($address_info) {
                $address_data[$result['address_id']] = $address_info;
            }
        }

        return $address_data;
    }

    public function getTotalCustomers($data = array())
    {
        $sql = "

The string literal \n SELECT COUNT(*) AS total \n FROM customer\n does not require double quotes, as per coding-style, please use single quotes.

            SELECT COUNT(*) AS total 
            FROM customer
        ";

        $implode = array();

        if (!empty($data['filter_name'])) {
            $implode[] = "CONCAT(firstname, ' ', lastname) LIKE '%" . $this->db->escape($data['filter_name']) . "%'";
        }

        if (!empty($data['filter_email'])) {
            $implode[] = "email LIKE '" . $this->db->escape($data['filter_email']) . "%'";
        }

        if (isset($data['filter_newsletter']) && !is_null($data['filter_newsletter'])) {
            $implode[] = "newsletter = '" . (int)$data['filter_newsletter'] . "'";
        }

        if (!empty($data['filter_customer_group_id'])) {
            $implode[] = "customer_group_id = '" . (int)$data['filter_customer_group_id'] . "'";
        }

        if (!empty($data['filter_ip'])) {
            $implode[] = "customer_id IN (SELECT customer_id FROM customer_ip WHERE ip = '" . $this->db->escape($data['filter_ip']) . "')";
        }

        if (isset($data['filter_status']) && !is_null($data['filter_status'])) {
            $implode[] = "status = '" . (int)$data['filter_status'] . "'";
        }

        if (isset($data['filter_approved']) && !is_null($data['filter_approved'])) {
            $implode[] = "approved = '" . (int)$data['filter_approved'] . "'";
        }

        if (!empty($data['filter_date_added'])) {
            $implode[] = "DATE(date_added) = DATE('" . $this->db->escape($data['filter_date_added']) . "')";
        }

        if ($implode) {
            $sql .= " WHERE " . implode(" AND ", $implode);

The string literal WHERE does not require double quotes, as per coding-style, please use single quotes.

The string literal AND does not require double quotes, as per coding-style, please use single quotes.

        }

        $query = $this->db->query($sql);

        return $query->row['total'];
    }

    public function getTotalCustomersAwaitingApproval()
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer WHERE status = '0' OR approved = '0'
        ");

        return $query->row['total'];
    }

    public function getTotalAddressesByCustomerId($customer_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM address WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row['total'];
    }

    public function getTotalAddressesByCountryId($country_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM address WHERE country_id = '" . (int)$country_id . "'
        ");

        return $query->row['total'];
    }

    public function getTotalAddressesByZoneId($zone_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM address WHERE zone_id = '" . (int)$zone_id . "'
        ");

        return $query->row['total'];
    }

    public function getTotalCustomersByCustomerGroupId($customer_group_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer WHERE customer_group_id = '" . (int)$customer_group_id . "'
        ");

        return $query->row['total'];
    }

    public function addHistory($customer_id, $comment)
    {
        $this->db->query("
            INSERT INTO customer_history 
            SET customer_id = '" . (int)$customer_id . "', 
                comment = '" . $this->db->escape(strip_tags($comment)) . "', 
                date_added = NOW()
        ");
    }

    public function getHistories($customer_id, $start = 0, $limit = 10)
    {
        if ($start < 0) {
            $start = 0;
        }

        if ($limit < 1) {
            $limit = 10;
        }

        $query = $this->db->query("
            SELECT comment, 
                date_added 
            FROM customer_history 
            WHERE customer_id = '" . (int)$customer_id . "' 
            ORDER BY date_added DESC 
            LIMIT " . (int)$start . ",

The string literal ,\n does not require double quotes, as per coding-style, please use single quotes.

        " . (int)$limit);

        return $query->rows;
    }

    public function getTotalHistories($customer_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer_history 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row['total'];
    }

    public function addTransaction($customer_id, $description = '', $amount = '', $order_id = 0)
    {
        $customer_info = $this->getCustomer($customer_id);

        if ($customer_info) {
            $this->db->query("
                INSERT INTO customer_transaction 
                SET customer_id = '" . (int)$customer_id . "', 
                    order_id = '" . (int)$order_id . "', 
                    description = '" . $this->db->escape($description) . "', 
                    amount = '" . (float)$amount . "', 
                    date_added = NOW()
            ");

            $this->load->language('mail/customer');

            $store_name = $this->config->get('config_name');

            $message  = sprintf($this->language->get('text_transaction_received'), $this->currency->format($amount, $this->config->get('config_currency'))) . "\n\n";
            $message .= sprintf($this->language->get('text_transaction_total'), $this->currency->format($this->getTransactionTotal($customer_id), $this->session->data['currency']));

            $mail = new \Divine\Engine\Library\Mail();
            $mail->protocol = $this->config->get('config_mail_protocol');
            $mail->parameter = $this->config->get('config_mail_parameter');
            $mail->smtp_hostname = $this->config->get('config_mail_smtp_hostname');
            $mail->smtp_username = $this->config->get('config_mail_smtp_username');
            $mail->smtp_password = html_entity_decode($this->config->get('config_mail_smtp_password'), ENT_QUOTES, 'UTF-8');
            $mail->smtp_port = $this->config->get('config_mail_smtp_port');
            $mail->smtp_timeout = $this->config->get('config_mail_smtp_timeout');

            $mail->setTo($customer_info['email']);
            $mail->setFrom($this->config->get('config_email'));
            $mail->setSender(html_entity_decode($store_name, ENT_QUOTES, 'UTF-8'));
            $mail->setSubject(sprintf($this->language->get('text_transaction_subject'), html_entity_decode($this->config->get('config_name'), ENT_QUOTES, 'UTF-8')));
            $mail->setText($message);
            $mail->send();
        }
    }

    public function deleteTransaction($order_id)
    {
        $this->db->query("
            DELETE 
			FROM customer_transaction 
            WHERE order_id = '" . (int)$order_id . "'
        ");
    }

    public function getTransactions($customer_id, $start = 0, $limit = 10)
    {
        if ($start < 0) {
            $start = 0;
        }

        if ($limit < 1) {
            $limit = 10;
        }

        $query = $this->db->query("
            SELECT * FROM customer_transaction 
            WHERE customer_id = '" . (int)$customer_id . "' 
            ORDER BY date_added DESC LIMIT " . (int)$start . ",

The string literal ,\n does not require double quotes, as per coding-style, please use single quotes.

        " . (int)$limit);

        return $query->rows;
    }

    public function getTotalTransactions($customer_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer_transaction 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row['total'];
    }

    public function getTransactionTotal($customer_id)
    {
        $query = $this->db->query("
            SELECT SUM(amount) AS total 
            FROM customer_transaction 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row['total'];
    }

    public function getTotalTransactionsByOrderId($order_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer_transaction 
            WHERE order_id = '" . (int)$order_id . "'
        ");

        return $query->row['total'];
    }

    public function addReward($customer_id, $description = '', $points = '', $order_id = 0)
    {
        $customer_info = $this->getCustomer($customer_id);

        if ($customer_info) {
            $this->db->query("
                INSERT INTO customer_reward 
                SET customer_id = '" . (int)$customer_id . "', 
                    order_id = '" . (int)$order_id . "', 
                    points = '" . (int)$points . "', 
                    description = '" . $this->db->escape($description) . "', 
                    date_added = NOW()
            ");

            $this->load->language('mail/customer');

            $store_name = $this->config->get('config_name');

            $message  = sprintf($this->language->get('text_reward_received'), $points) . "\n\n";
            $message .= sprintf($this->language->get('text_reward_total'), $this->getRewardTotal($customer_id));

            $mail = new \Divine\Engine\Library\Mail();
            $mail->protocol = $this->config->get('config_mail_protocol');
            $mail->parameter = $this->config->get('config_mail_parameter');
            $mail->smtp_hostname = $this->config->get('config_mail_smtp_hostname');
            $mail->smtp_username = $this->config->get('config_mail_smtp_username');
            $mail->smtp_password = html_entity_decode($this->config->get('config_mail_smtp_password'), ENT_QUOTES, 'UTF-8');
            $mail->smtp_port = $this->config->get('config_mail_smtp_port');
            $mail->smtp_timeout = $this->config->get('config_mail_smtp_timeout');

            $mail->setTo($customer_info['email']);
            $mail->setFrom($this->config->get('config_email'));
            $mail->setSender(html_entity_decode($store_name, ENT_QUOTES, 'UTF-8'));
            $mail->setSubject(sprintf($this->language->get('text_reward_subject'), html_entity_decode($store_name, ENT_QUOTES, 'UTF-8')));
            $mail->setText($message);
            $mail->send();
        }
    }

    public function deleteReward($order_id)
    {
        $this->db->query("
            DELETE 
			FROM customer_reward 
            WHERE order_id = '" . (int)$order_id . "' 
                AND points > 0
        ");
    }

    public function getRewards($customer_id, $start = 0, $limit = 10)
    {
        $query = $this->db->query("
            SELECT * 
            FROM customer_reward 
            WHERE customer_id = '" . (int)$customer_id . "' 
            ORDER BY date_added DESC LIMIT " . (int)$start . ",

The string literal ,\n does not require double quotes, as per coding-style, please use single quotes.

        " . (int)$limit);

        return $query->rows;
    }

    public function getTotalRewards($customer_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer_reward 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row['total'];
    }

    public function getRewardTotal($customer_id)
    {
        $query = $this->db->query("
            SELECT SUM(points) AS total 
            FROM customer_reward 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row['total'];
    }

    public function getTotalCustomerRewardsByOrderId($order_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer_reward 
            WHERE order_id = '" . (int)$order_id . "' 
                AND points > 0
        ");

        return $query->row['total'];
    }

    public function getIps($customer_id, $start = 0, $limit = 10)
    {
        if ($start < 0) {
            $start = 0;
        }
        if ($limit < 1) {
            $limit = 10;
        }

        $query = $this->db->query("
            SELECT * 
            FROM customer_ip 
            WHERE customer_id = '" . (int)$customer_id . "' 
            ORDER BY date_added DESC 
            LIMIT " . (int)$start . ",

The string literal ,\n does not require double quotes, as per coding-style, please use single quotes.

        " . (int)$limit);

        return $query->rows;
    }

    public function getTotalIps($customer_id)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer_ip 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row['total'];
    }

    public function getTotalCustomersByIp($ip)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer_ip 
            WHERE ip = '" . $this->db->escape($ip) . "'
        ");

        return $query->row['total'];
    }

    public function getTotalLoginAttempts($email)
    {
        $query = $this->db->query("
            SELECT * 
            FROM `customer_login` 
            WHERE `email` = '" . $this->db->escape($email) . "'
        ");

        return $query->row;
    }

    public function deleteLoginAttempts($email)
    {
        $this->db->query("
            DELETE 
			FROM `customer_login` 
            WHERE `email` = '" . $this->db->escape($email) . "'
        ");
    }
}