← All changes | app/Helpers/CheckoutProcessor.php +44 -1 1.6.6 → 1.7.1 View file →

		@@ -22,8 +22,9 @@
22	22
23	23	// Raw Data
24	24	private $cartItems = [];
25	25	private $args = [];
	26	+ private $validationError;
26	27
27	28	// Order Related Data
28	29	private $formattedIOrderItems = [];
29	30	private $orderData = [];
		@@ -62,14 +63,43 @@
62	63
63	64	private function prepareData()
64	65	{
65	66	$this->prepareOrderItems();
	67	+ if ($this->validationError) {
	68	+ return;
	69	+ }
	70	+
66	71	$this->prepareOrderData();
	72	+ if ($this->validationError) {
	73	+ return;
	74	+ }
	75	+
67	76	$this->prepareSubscriptionData();
68	77	}
69	78
	79	+ /**
	80	+ * (int) on an out-of-range float wraps, and the max(0, ...) clamps downstream turn a
	81	+ * wrapped amount into a free but payable order. Refuse the checkout instead.
	82	+ */
	83	+ private function isSafeAmount($value)
	84	+ {
	85	+ return is_numeric($value) && is_finite((float)$value) && abs((float)$value) < (float)PHP_INT_MAX;
	86	+ }
	87	+
	88	+ private function unsafeAmountError()
	89	+ {
	90	+ return new \WP_Error(
	91	+ 'invalid_order_total',
	92	+ __('The order total is too large to process. Please reduce the quantity.', 'fluent-cart')
	93	+ );
	94	+ }
	95	+
70	96	public function createDraftOrder($prevOrder = null)
71	97	{
	98	+ if ($this->validationError) {
	99	+ return $this->validationError;
	100	+ }
	101	+
72	102	if ($prevOrder) {
73	103	return $this->getAdjustedOrder($prevOrder);
74	104	}
75	105
		@@ -622,9 +652,16 @@
622	652
623	653	$discountTotal = (int)Arr::get($cartItem, 'manual_discount', 0) + (int)Arr::get($cartItem, 'coupon_discount', 0);
624	654	$shippingCharge = (int)Arr::get($cartItem, 'shipping_charge', 0);
625	655
626		- $subtotal = (int) Arr::get($cartItem, 'subtotal', $unitPrice * $quantity);
	656	+ $rawSubtotal = Arr::get($cartItem, 'subtotal', $unitPrice * $quantity);
	657	+ if (!$this->isSafeAmount($rawSubtotal)) {
	658	+ $this->validationError = $this->unsafeAmountError();
	659	+
	660	+ return;
	661	+ }
	662	+
	663	+ $subtotal = (int) $rawSubtotal;
627	664	$args = Arr::get($cartItem, 'other_info', []);
628	665	$paymentType = Arr::get($args, 'payment_type', 'default');
629	666
630	667	$postTitle = Arr::get($cartItem, 'product_title', '');
		@@ -1125,8 +1162,14 @@
1125	1162	$orderData = apply_filters('fluent_cart/checkout/order_data', $orderData, [
1126	1163	'items' => $this->formattedIOrderItems,
1127	1164	'args' => $this->args,
1128	1165	]);
	1166	+
	1167	+ if (!$this->isSafeAmount(Arr::get($orderData, 'total_amount', 0))) {
	1168	+ $this->validationError = $this->unsafeAmountError();
	1169	+
	1170	+ return;
	1171	+ }
1129	1172
1130	1173	$this->orderData = $orderData;
1131	1174	}
1132	1175