Nickbur / Sunrise-CMS

engine/library/Cart.php

<?php
/* 	Divine CMS - Open source CMS for widespread use.
    Copyright (c) 2019 Mykola Burakov (burakov.work@gmail.com)

    See SOURCE.txt for other and additional information.

    This file is part of Divine CMS.

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program. If not, see <http://www.gnu.org/licenses/>. */

namespace Divine\Engine\Library;

class Cart
{
    private $data = array();

The private property $data is not used, and could be removed.

    public function __construct($registry)

Expected 2 blank lines before function; 1 found

    {
        $this->config = $registry->get('config');

The property config does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

        $this->customer = $registry->get('customer');

The property customer does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

        $this->session = $registry->get('session');

The property session does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

        $this->db = $registry->get('db');

The property db does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

        // Remove all the expired carts with no customer ID
        $this->db->query("
            DELETE FROM cart 
            WHERE customer_id = '0' 
                AND date_added < DATE_SUB(NOW(), INTERVAL 1 DAY)
        ");

        if ($this->customer->getId()) {
            // We want to change the session ID on all the old items in the customers cart
            $this->db->query("
                UPDATE cart 
                SET session_id = '" . $this->db->escape($this->session->getSessionId()) . "' 
                WHERE customer_id = '" . (int) $this->customer->getId() . "'
            ");

            // Once the customer is logged in we want to update the customers cart
            $cart_query = $this->db->query("
                SELECT * 
                FROM cart 
                WHERE customer_id = '0' 
                    AND session_id = '" . $this->db->escape($this->session->getSessionId()) . "'
            ");

            foreach ($cart_query->rows as $cart) {
                $this->db->query("
                    DELETE FROM cart 
                    WHERE cart_id = '" . (int) $cart['cart_id'] . "'
                ");

                // The advantage of using $this->add is that it will check if the products already exist and increaser the quantity if necessary.
                $this->add($cart['product_id'], $cart['quantity'], json_decode($cart['option']));
            }
        }
    }

    public function getProducts()
    {
        $product_data = array();

        $cart_query = $this->db->query("
            SELECT * 
            FROM cart 
            WHERE customer_id = '" . (int) $this->customer->getId() . "' 
                AND session_id = '" . $this->db->escape($this->session->getSessionId()) . "'
        ");

        foreach ($cart_query->rows as $cart) {
            $stock = true;

            $product_query = $this->db->query("
                SELECT * 
                FROM product p 
                LEFT JOIN product_description pd ON (p.product_id = pd.product_id) 
                WHERE p.product_id = '" . (int) $cart['product_id'] . "' 
                    AND pd.language_id = '" . (int) $this->config->get('config_language_id') . "' 
                    AND p.status = '1'
            ");

            if ($product_query->num_rows && ($cart['quantity'] > 0)) {
                $option_price = 0;
                $option_points = 0;

                $option_data = array();

                foreach (json_decode($cart['option']) as $product_option_id => $value) {
                    $option_query = $this->db->query("
                        SELECT po.product_option_id, po.option_id, od.name, o.type 
                        FROM product_option po 
                        LEFT JOIN `option` o ON (po.option_id = o.option_id) 
                        LEFT JOIN option_description od ON (o.option_id = od.option_id) 
                        WHERE po.product_option_id = '" . (int) $product_option_id . "' 
                            AND po.product_id = '" . (int) $cart['product_id'] . "' 
                            AND od.language_id = '" . (int) $this->config->get('config_language_id') . "'
                    ");

                    if ($option_query->num_rows) {
                        if ($option_query->row['type'] == 'select' || $option_query->row['type'] == 'radio') {
                            $option_value_query = $this->db->query("
                                SELECT pov.option_value_id, ovd.name, pov.quantity, pov.subtract, pov.price, pov.price_prefix, pov.points, pov.points_prefix 
                                FROM product_option_value pov 
                                LEFT JOIN option_value ov ON (pov.option_value_id = ov.option_value_id) 
                                LEFT JOIN option_value_description ovd ON (ov.option_value_id = ovd.option_value_id) 
                                WHERE pov.product_option_value_id = '" . (int) $value . "' 
                                    AND pov.product_option_id = '" . (int) $product_option_id . "' 
                                    AND ovd.language_id = '" . (int) $this->config->get('config_language_id') . "'
                            ");

                            if ($option_value_query->num_rows) {
                                if ($option_value_query->row['price_prefix'] == '+') {
                                    $option_price += $option_value_query->row['price'];
                                } elseif ($option_value_query->row['price_prefix'] == '-') {
                                    $option_price -= $option_value_query->row['price'];
                                }

                                if ($option_value_query->row['points_prefix'] == '+') {
                                    $option_points += $option_value_query->row['points'];
                                } elseif ($option_value_query->row['points_prefix'] == '-') {
                                    $option_points -= $option_value_query->row['points'];
                                }

                                if ($option_value_query->row['subtract'] && (!$option_value_query->row['quantity'] || ($option_value_query->row['quantity'] < $cart['quantity']))) {
                                    $stock = false;
                                }

                                $option_data[] = array(
                                    'product_option_id'       => $product_option_id,
                                    'product_option_value_id' => $value,
                                    'option_id'               => $option_query->row['option_id'],
                                    'option_value_id'         => $option_value_query->row['option_value_id'],
                                    'name'                    => $option_query->row['name'],
                                    'value'                   => $option_value_query->row['name'],
                                    'type'                    => $option_query->row['type'],
                                    'quantity'                => $option_value_query->row['quantity'],
                                    'subtract'                => $option_value_query->row['subtract'],
                                    'price'                   => $option_value_query->row['price'],
                                    'price_prefix'            => $option_value_query->row['price_prefix'],
                                    'points'                  => $option_value_query->row['points'],
                                    'points_prefix'           => $option_value_query->row['points_prefix']
                                );
                            }
                        } elseif ($option_query->row['type'] == 'checkbox' && is_array($value)) {
                            foreach ($value as $product_option_value_id) {
                                $option_value_query = $this->db->query("
                                    SELECT pov.option_value_id, pov.quantity, pov.subtract, pov.price, pov.price_prefix, pov.points, pov.points_prefix, ovd.name 
                                    FROM product_option_value pov 
                                    LEFT JOIN option_value_description ovd ON (pov.option_value_id = ovd.option_value_id) 
                                    WHERE pov.product_option_value_id = '" . (int) $product_option_value_id . "' 
                                        AND pov.product_option_id = '" . (int) $product_option_id . "' 
                                        AND ovd.language_id = '" . (int) $this->config->get('config_language_id') . "'
                                ");

                                if ($option_value_query->num_rows) {
                                    if ($option_value_query->row['price_prefix'] == '+') {
                                        $option_price += $option_value_query->row['price'];
                                    } elseif ($option_value_query->row['price_prefix'] == '-') {
                                        $option_price -= $option_value_query->row['price'];
                                    }

                                    if ($option_value_query->row['points_prefix'] == '+') {
                                        $option_points += $option_value_query->row['points'];
                                    } elseif ($option_value_query->row['points_prefix'] == '-') {
                                        $option_points -= $option_value_query->row['points'];
                                    }

                                    if ($option_value_query->row['subtract'] && (!$option_value_query->row['quantity'] || ($option_value_query->row['quantity'] < $cart['quantity']))) {
                                        $stock = false;
                                    }

                                    $option_data[] = array(
                                        'product_option_id'       => $product_option_id,
                                        'product_option_value_id' => $product_option_value_id,
                                        'option_id'               => $option_query->row['option_id'],
                                        'option_value_id'         => $option_value_query->row['option_value_id'],
                                        'name'                    => $option_query->row['name'],
                                        'value'                   => $option_value_query->row['name'],
                                        'type'                    => $option_query->row['type'],
                                        'quantity'                => $option_value_query->row['quantity'],
                                        'subtract'                => $option_value_query->row['subtract'],
                                        'price'                   => $option_value_query->row['price'],
                                        'price_prefix'            => $option_value_query->row['price_prefix'],
                                        'points'                  => $option_value_query->row['points'],
                                        'points_prefix'           => $option_value_query->row['points_prefix']
                                    );
                                }
                            }
                        } elseif ($option_query->row['type'] == 'text' || $option_query->row['type'] == 'textarea' || $option_query->row['type'] == 'file' || $option_query->row['type'] == 'date' || $option_query->row['type'] == 'datetime' || $option_query->row['type'] == 'time') {
                            $option_data[] = array(
                                'product_option_id'       => $product_option_id,
                                'product_option_value_id' => '',
                                'option_id'               => $option_query->row['option_id'],
                                'option_value_id'         => '',
                                'name'                    => $option_query->row['name'],
                                'value'                   => $value,
                                'type'                    => $option_query->row['type'],
                                'quantity'                => '',
                                'subtract'                => '',
                                'price'                   => '',
                                'price_prefix'            => '',
                                'points'                  => '',
                                'points_prefix'           => ''
                            );
                        }
                    }
                }

                $price = $product_query->row['price'];

                // Product Discounts
                $discount_quantity = 0;

                foreach ($cart_query->rows as $cart_2) {
                    if ($cart_2['product_id'] == $cart['product_id']) {
                        $discount_quantity += $cart_2['quantity'];
                    }
                }

                $product_discount_query = $this->db->query("
                    SELECT price 
                    FROM product_discount 
                    WHERE product_id = '" . (int) $cart['product_id'] . "' 
                        AND customer_group_id = '" . (int) $this->config->get('config_customer_group_id') . "' 
                        AND quantity <= '" . (int) $discount_quantity . "' 
                        AND ((date_start = '2000-01-01' OR date_start < NOW()) 
                        AND (date_end = '2000-01-01' OR date_end > NOW())) 
                    ORDER BY quantity DESC, priority ASC, price ASC 
                    LIMIT 1
                ");

                if ($product_discount_query->num_rows) {
                    $price = $product_discount_query->row['price'];
                }

                // Product Specials
                $product_special_query = $this->db->query("
                    SELECT price 
                    FROM product_special 
                    WHERE product_id = '" . (int) $cart['product_id'] . "' 
                        AND customer_group_id = '" . (int) $this->config->get('config_customer_group_id') . "' 
                        AND ((date_start = '2000-01-01' OR date_start < NOW()) 
                        AND (date_end = '2000-01-01' OR date_end > NOW())) 
                    ORDER BY priority ASC, price ASC 
                    LIMIT 1
                ");

                if ($product_special_query->num_rows) {
                    $price = $product_special_query->row['price'];
                }

                // Reward Points
                $product_reward_query = $this->db->query("
                    SELECT points 
                    FROM product_reward 
                    WHERE product_id = '" . (int) $cart['product_id'] . "' 
                        AND customer_group_id = '" . (int) $this->config->get('config_customer_group_id') . "'
                ");

                if ($product_reward_query->num_rows) {
                    $reward = $product_reward_query->row['points'];
                } else {
                    $reward = 0;
                }

                // Downloads
                $download_data = array();

                $download_query = $this->db->query("
                    SELECT * 
                    FROM product_to_download p2d 
                    LEFT JOIN download d ON (p2d.download_id = d.download_id) 
                    LEFT JOIN download_description dd ON (d.download_id = dd.download_id) 
                    WHERE p2d.product_id = '" . (int) $cart['product_id'] . "' 
                        AND dd.language_id = '" . (int) $this->config->get('config_language_id') . "'
                ");

                foreach ($download_query->rows as $download) {
                    $download_data[] = array(
                        'download_id' => $download['download_id'],
                        'name'        => $download['name'],
                        'filename'    => $download['filename'],
                        'mask'        => $download['mask']
                    );
                }

                // Stock
                if (!$product_query->row['quantity'] || ($product_query->row['quantity'] < $cart['quantity'])) {
                    $stock = false;
                }

                $product_data[] = array(
                    'cart_id'         => $cart['cart_id'],
                    'product_id'      => $product_query->row['product_id'],
                    'name'            => $product_query->row['name'],
                    'model'           => $product_query->row['model'],
                    'shipping'        => $product_query->row['shipping'],
                    'image'           => $product_query->row['image'],
                    'option'          => $option_data,
                    'download'        => $download_data,
                    'quantity'        => $cart['quantity'],
                    'minimum'         => $product_query->row['minimum'],
                    'subtract'        => $product_query->row['subtract'],
                    'stock'           => $stock,
                    'price'           => ($price + $option_price),
                    'total'           => ($price + $option_price) * $cart['quantity'],
                    'reward'          => $reward * $cart['quantity'],
                    'points'          => ($product_query->row['points'] ? ($product_query->row['points'] + $option_points) * $cart['quantity'] : 0),
                    'width'           => $product_query->row['width'],
                    'height'          => $product_query->row['height']
                );
            } else {
                $this->remove($cart['cart_id']);
            }
        }

        return $product_data;
    }

    public function add($product_id, $quantity = 1, $option = array())
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM cart 
            WHERE customer_id = '" . (int) $this->customer->getId() . "' 
                AND session_id = '" . $this->db->escape($this->session->getSessionId()) . "' 
                AND product_id = '" . (int) $product_id . "' 
                AND `option` = '" . $this->db->escape(json_encode($option)) . "'
        ");

        if (!$query->row['total']) {
            $this->db->query("
                INSERT cart 
                SET customer_id = '" . (int) $this->customer->getId() . "', 
                    session_id = '" . $this->db->escape($this->session->getSessionId()) . "', 
                    product_id = '" . (int) $product_id . "', 
                    `option` = '" . $this->db->escape(json_encode($option)) . "', 
                    quantity = '" . (int) $quantity . "', 
                    date_added = NOW()
            ");
        } else {
            $this->db->query("

The string literal \n UPDATE cart \n SET quantity = (quantity + does not require double quotes, as per coding-style, please use single quotes.

                UPDATE cart 
                SET quantity = (quantity + " . (int) $quantity . ") 
                WHERE customer_id = '" . (int) $this->customer->getId() . "' 
                    AND session_id = '" . $this->db->escape($this->session->getSessionId()) . "' 
                    AND product_id = '" . (int) $product_id . "' 
                    AND `option` = '" . $this->db->escape(json_encode($option)) . "'
            ");
        }
    }

    public function update($cart_id, $quantity)
    {
        $this->db->query("
            UPDATE cart 
            SET quantity = '" . (int) $quantity . "' 
            WHERE cart_id = '" . (int) $cart_id . "' 
                AND customer_id = '" . (int) $this->customer->getId() . "' 
                AND session_id = '" . $this->db->escape($this->session->getSessionId()) . "'
        ");
    }

    public function remove($cart_id)
    {
        $this->db->query("
            DELETE FROM cart 
            WHERE cart_id = '" . (int) $cart_id . "' 
                AND customer_id = '" . (int) $this->customer->getId() . "' 
                AND session_id = '" . $this->db->escape($this->session->getSessionId()) . "'
        ");
    }

    public function clear()
    {
        $this->db->query("
            DELETE FROM cart 
            WHERE customer_id = '" . (int) $this->customer->getId() . "' 
                AND session_id = '" . $this->db->escape($this->session->getSessionId()) . "'
        ");
    }

    public function getSubTotal()
    {
        $total = 0;

        foreach ($this->getProducts() as $product) {
            $total += $product['total'];
        }

        return $total;
    }

    public function getTotal()
    {
        $total = 0;

        foreach ($this->getProducts() as $product) {
            $total += $product['price'] * $product['quantity'];
        }

        return $total;
    }

    public function countProducts()
    {
        $product_total = 0;

        $products = $this->getProducts();

        foreach ($products as $product) {
            $product_total += $product['quantity'];
        }

        return $product_total;
    }

    public function hasProducts()
    {
        return count($this->getProducts());
    }

    public function hasStock()
    {
        foreach ($this->getProducts() as $product) {
            if (!$product['stock']) {
                return false;
            }
        }

        return true;
    }

    public function hasShipping()
    {
        foreach ($this->getProducts() as $product) {
            if ($product['shipping']) {
                return true;
            }
        }

        return false;
    }

    public function hasDownload()
    {
        foreach ($this->getProducts() as $product) {
            if ($product['download']) {
                return true;
            }
        }

        return false;
    }
}