includes/forms/template.php ➔ give_get_donation_form()

Complexity

Conditions	12
Paths	24

Size

Total Lines	191
Code Lines	61

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	57
CRAP Score	12.4792

Importance

Changes

0

<?php
function give_get_donation_form( $args = array() ) {

	global $post;

	$form_id = is_object( $post ) ? $post->ID : 0;

	if ( isset( $args['id'] ) ) {
		$form_id = $args['id'];
	}

	$defaults = apply_filters( 'give_form_args_defaults', array(
		'form_id' => $form_id,
	) );

	$args = wp_parse_args( $args, $defaults );

	$form = new Give_Donate_Form( $args['form_id'] );

	//bail if no form ID.
	if ( empty( $form->ID ) ) {
		return false;
	}

	$payment_mode = give_get_chosen_gateway( $form->ID );

	$form_action = add_query_arg( apply_filters( 'give_form_action_args', array(
		'payment-mode' => $payment_mode,
	) ),

This line of the multi-line function call does not seem to be indented correctly. Expected 8 spaces, but found 4.

		give_get_current_page_url()
	);

	//Sanity Check: Donation form not published or user doesn't have permission to view drafts.
	if (
		( 'publish' !== $form->post_status && ! current_user_can( 'edit_give_forms', $form->ID ) )
		|| ( 'trash' === $form->post_status )
	) {
		return false;
	}

	//Get the form wrap CSS classes.
	$form_wrap_classes = $form->get_form_wrap_classes( $args );

	//Get the <form> tag wrap CSS classes.
	$form_classes = $form->get_form_classes( $args );

	ob_start();

	/**
	 * Fires while outputting donation form, before the form wrapper div.
	 *
	 * @since 1.0
	 *
	 * @param int   $form_id The form ID.
	 * @param array $args    An array of form arguments.
	 */
	do_action( 'give_pre_form_output', $form->ID, $args, $form );

	?>
	<div id="give-form-<?php echo $form->ID; ?>-wrap" class="<?php echo $form_wrap_classes; ?>">

Expected next thing to be a escaping function, not '$form'

Expected next thing to be a escaping function, not '$form_wrap_classes'

		<?php if ( $form->is_close_donation_form() ) {

			// Get Goal thank you message.
			$goal_achieved_message = give_get_meta( $form->ID, '_give_form_goal_achieved_message', true );
			$goal_achieved_message = ! empty( $goal_achieved_message ) ? apply_filters( 'the_content', $goal_achieved_message ) : '';

			// Print thank you message.
			echo apply_filters( 'give_goal_closed_output', $goal_achieved_message, $form->ID, $form );

Expected a sanitizing function (see Codex for 'Data Validation'), but instead saw 'apply_filters'

		} else {
			/**
			 * Show form title:
			 * 1. if show_title params set to true
			 * 2. if admin set form display_style to button
			 */
			$form_title = apply_filters( 'give_form_title', '<h2 class="give-form-title">' . get_the_title( $form_id ) . '</h2>' );
			if (

Found "== true". Use Yoda Condition checks, you must

				( isset( $args['show_title'] ) && $args['show_title'] == true )
				&& ! doing_action( 'give_single_form_summary' )
			) {
				echo $form_title;

Expected next thing to be a escaping function, not '$form_title'

			}

			/**
			 * Fires while outputting donation form, before the form.
			 *
			 * @since 1.0
			 *
			 * @param int              $form_id The form ID.
			 * @param array            $args    An array of form arguments.
			 * @param Give_Donate_Form $form    Form object.
			 */
			do_action( 'give_pre_form', $form->ID, $args, $form );

			// Set form html tags.
			$form_html_tags = array(
				'id'     => "give-form-{$form_id}",
				'class'  => $form_classes,
				'action' => esc_url_raw( $form_action ),
			);

			/**
			 * Filter the form html tags.
			 *
			 * @since 1.8.17
			 *
			 * @param array            $form_html_tags Array of form html tags.
			 * @param Give_Donate_Form $form           Form object.
			 */
			$form_html_tags = apply_filters( 'give_form_html_tags', (array) $form_html_tags, $form );
			?>

			<form <?php echo give_get_attribute_str( $form_html_tags ); ?> method="post">

Expected a sanitizing function (see Codex for 'Data Validation'), but instead saw 'give_get_attribute_str'

				<!-- The following field is for robots only, invisible to humans: -->
				<span class="give-hidden" style="display: none !important;">
					<label for="give-form-honeypot-<?php echo $form_id; ?>"></label>

Expected next thing to be a escaping function, not '$form_id'

					<input id="give-form-honeypot-<?php echo $form_id; ?>" type="text" name="give-honeypot"

Expected next thing to be a escaping function, not '$form_id'

						   class="give-honeypot give-hidden"/>
				</span>

				<?php

				/**
				 * Fires while outputting donation form, before all other fields.
				 *
				 * @since 1.0
				 *
				 * @param int              $form_id The form ID.
				 * @param array            $args    An array of form arguments.
				 * @param Give_Donate_Form $form    Form object.
				 */
				do_action( 'give_donation_form_top', $form->ID, $args, $form );

				/**
				 * Fires while outputting donation form, for payment gateway fields.
				 *
				 * @since 1.7
				 *
				 * @param int              $form_id The form ID.
				 * @param array            $args    An array of form arguments.
				 * @param Give_Donate_Form $form    Form object.
				 */
				do_action( 'give_payment_mode_select', $form->ID, $args, $form );

				/**
				 * Fires while outputting donation form, after all other fields.
				 *
				 * @since 1.0
				 *
				 * @param int              $form_id The form ID.
				 * @param array            $args    An array of form arguments.
				 * @param Give_Donate_Form $form    Form object.
				 */
				do_action( 'give_donation_form_bottom', $form->ID, $args, $form );

				?>
			</form>

			<?php
			/**
			 * Fires while outputting donation form, after the form.
			 *
			 * @since 1.0
			 *
			 * @param int              $form_id The form ID.
			 * @param array            $args    An array of form arguments.
			 * @param Give_Donate_Form $form    Form object.
			 */
			do_action( 'give_post_form', $form->ID, $args, $form );

		}
		?>

	</div><!--end #give-form-<?php echo absint( $form->ID ); ?>-->
	<?php

	/**
	 * Fires while outputting donation form, after the form wrapper div.
	 *
	 * @since 1.0
	 *
	 * @param int   $form_id The form ID.
	 * @param array $args    An array of form arguments.
	 */
	do_action( 'give_post_form_output', $form->ID, $args );

	$final_output = ob_get_clean();

	echo apply_filters( 'give_donate_form', $final_output, $args );

Expected a sanitizing function (see Codex for 'Data Validation'), but instead saw 'apply_filters'

}