process-donation.php — GiveWP – Donation Plugin and Fundraising Platform 2.14.0

give / includes / process-donation.php

give / includes Last commit date

process-donation.php

1601 lines

1	<?php
2	/**
3	* Process Donation
4	*
5	* @package Give
6	* @subpackage Functions
7	* @copyright Copyright (c) 2016, GiveWP
8	* @license https://opensource.org/licenses/gpl-license GNU Public License
9	* @since 1.0
10	*/
11
12	// Exit if accessed directly.
13	if ( ! defined( 'ABSPATH' ) ) {
14	exit;
15	}
16
17	/**
18	* Process Donation Form
19	*
20	* Handles the donation form process.
21	*
22	* @access private
23	* @since 1.0
24	*
25	* @throws ReflectionException Exception Handling.
26	*
27	* @return mixed
28	*/
29	function give_process_donation_form() {
30
31	// Sanitize Posted Data.
32	$post_data = give_clean( $_POST ); // WPCS: input var ok, CSRF ok.
33
34	// Check whether the form submitted via AJAX or not.
35	$is_ajax = isset( $post_data['give_ajax'] );
36
37	// Verify donation form nonce.
38	if ( ! give_verify_donation_form_nonce( $post_data['give-form-hash'], $post_data['give-form-id'] ) ) {
39	if ( $is_ajax ) {
40	/**
41	* Fires when AJAX sends back errors from the donation form.
42	*
43	* @since 1.0
44	*/
45	do_action( 'give_ajax_donation_errors' );
46	give_die();
47	} else {
48	give_send_back_to_checkout();
49	}
50	}
51
52	/**
53	* Fires before processing the donation form.
54	*
55	* @since 1.0
56	*/
57	do_action( 'give_pre_process_donation' );
58
59	// Validate the form $_POST data.
60	$valid_data = give_donation_form_validate_fields();
61
62	/**
63	* Fires after validating donation form fields.
64	*
65	* Allow you to hook to donation form errors.
66	*
67	* @since 1.0
68	*
69	* @param bool\|array $valid_data Validate fields.
70	* @param array $deprecated Deprecated Since 2.0.2. Use $_POST instead.
71	*/
72	$deprecated = $post_data;
73	do_action( 'give_checkout_error_checks', $valid_data, $deprecated );
74
75	// Process the login form.
76	if ( isset( $post_data['give_login_submit'] ) ) {
77	give_process_form_login();
78	}
79
80	// Validate the user.
81	$user = give_get_donation_form_user( $valid_data );
82
83	if ( false === $valid_data \|\| ! $user \|\| give_get_errors() ) {
84	if ( $is_ajax ) {
85	/**
86	* Fires when AJAX sends back errors from the donation form.
87	*
88	* @since 1.0
89	*/
90	do_action( 'give_ajax_donation_errors' );
91	give_die();
92	} else {
93	return false;
94	}
95	}
96
97	// If AJAX send back success to proceed with form submission.
98	if ( $is_ajax ) {
99	echo 'success';
100	give_die();
101	}
102
103	/**
104	* Fires action after donation form field validated.
105	*
106	* @since 2.2.0
107	*/
108	do_action( 'give_process_donation_after_validation' );
109
110	// Setup user information.
111	$user_info = [
112	'id' => $user['user_id'],
113	'title' => $user['user_title'],
114	'email' => $user['user_email'],
115	'first_name' => $user['user_first'],
116	'last_name' => $user['user_last'],
117	'address' => $user['address'],
118	];
119
120	$auth_key = defined( 'AUTH_KEY' ) ? AUTH_KEY : '';
121
122	// Donation form ID.
123	$form_id = isset( $post_data['give-form-id'] ) ? absint( $post_data['give-form-id'] ) : 0;
124
125	$price = isset( $post_data['give-amount'] ) ?
126	(float) apply_filters( 'give_donation_total', give_maybe_sanitize_amount( $post_data['give-amount'], [ 'currency' => give_get_currency( $form_id ) ] ) ) :
127	'0.00';
128	$purchase_key = strtolower( md5( $user['user_email'] . date( 'Y-m-d H:i:s' ) . $auth_key . uniqid( 'give', true ) ) );
129
130	/**
131	* Update donation Purchase key.
132	*
133	* Use this filter to update default donation purchase key
134	* and add prefix in Invoice.
135	*
136	* @since 2.2.4
137	*
138	* @param string $purchase_key
139	* @param string $gateway
140	* @param string $purchase_key
141	*
142	* @return string $purchase_key
143	*/
144	$purchase_key = apply_filters(
145	'give_donation_purchase_key',
146	$purchase_key,
147	$valid_data['gateway'],
148	// Use this purchase key value if you want to generate custom donation purchase key
149	// because donation purchase key editable by filters and you may get unedited donation purchase key.
150	$purchase_key
151	);
152
153	// Setup donation information.
154	$donation_data = [
155	'price' => $price,
156	'purchase_key' => $purchase_key,
157	'user_email' => $user['user_email'],
158	'date' => date( 'Y-m-d H:i:s', current_time( 'timestamp' ) ),
159	'user_info' => stripslashes_deep( $user_info ),
160	'post_data' => $post_data,
161	'gateway' => $valid_data['gateway'],
162	'card_info' => $valid_data['cc_info'],
163	];
164
165	// Add the user data for hooks.
166	$valid_data['user'] = $user;
167
168	/**
169	* Fires before donation form gateway.
170	*
171	* Allow you to hook to donation form before the gateway.
172	*
173	* @since 1.0
174	*
175	* @param array $post_data Array of variables passed via the HTTP POST.
176	* @param array $user_info Array containing basic user information.
177	* @param bool\|array $valid_data Validate fields.
178	*/
179	do_action( 'give_checkout_before_gateway', $post_data, $user_info, $valid_data );
180
181	// Sanity check for price.
182	if ( ! $donation_data['price'] ) {
183	// Revert to manual.
184	$donation_data['gateway'] = 'manual';
185	$_POST['give-gateway'] = 'manual';
186	}
187
188	/**
189	* Allow the donation data to be modified before it is sent to the gateway.
190	*
191	* @since 1.7
192	*/
193	$donation_data = apply_filters( 'give_donation_data_before_gateway', $donation_data, $valid_data );
194
195	// Setup the data we're storing in the donation session.
196	$session_data = $donation_data;
197
198	// Make sure credit card numbers are never stored in sessions.
199	unset( $session_data['card_info']['card_number'] );
200	unset( $session_data['post_data']['card_number'] );
201
202	// Used for showing data to non logged-in users after donation, and for other plugins needing donation data.
203	give_set_purchase_session( $session_data );
204
205	/**
206	* Prevent PHP notices from breaking receipt display.
207	* This is specifically an issue with the Stripe SDK.
208	*
209	* @link https://github.com/impress-org/givewp/issues/5199
210	*/
211	ob_start();
212	// Send info to the gateway for payment processing.
213	give_send_to_gateway( $donation_data['gateway'], $donation_data );
214	ob_get_clean();
215	give_die();
216	}
217
218	add_action( 'give_purchase', 'give_process_donation_form' );
219	add_action( 'wp_ajax_give_process_donation', 'give_process_donation_form' );
220	add_action( 'wp_ajax_nopriv_give_process_donation', 'give_process_donation_form' );
221
222	/**
223	* Verify that when a logged in user makes a donation that the email address used doesn't belong to a different customer.
224	* Note: only for internal use
225	*
226	* @see https://github.com/impress-org/give/issues/4025
227	*
228	* @since 1.7
229	* @since 2.4.2 This function runs independently instead of give_checkout_error_checks hook and also edit donor email.
230	*
231	* @param array $valid_data Validated data submitted for the donation.
232	*
233	* @return void
234	*/
235	function give_check_logged_in_user_for_existing_email( &$valid_data ) {
236
237	// Verify that the email address belongs to this donor.
238	if ( is_user_logged_in() ) {
239
240	$donor = new Give_Donor( get_current_user_id(), true );
241
242	// Bailout: check if wp user is existing donor or not.
243	if ( ! $donor->id ) {
244	return;
245	}
246
247	$submitted_email = strtolower( $valid_data['user_email'] );
248
249	$donor_emails = array_map( 'strtolower', $donor->emails );
250	$email_index = array_search( $submitted_email, $donor_emails, true );
251
252	// If donor matched with email then return set formatted email from database.
253	if ( false !== $email_index ) {
254	$valid_data['user_email'] = $donor->emails[ $email_index ];
255
256	return;
257	}
258
259	// If this email address is not registered with this customer, see if it belongs to any other customer.
260	$found_donor = new Give_Donor( $submitted_email );
261
262	if ( $found_donor->id > 0 ) {
263	give_set_error(
264	'give-customer-email-exists',
265	sprintf(
266	/* translators: 1. Donor Email, 2. Submitted Email */
267	__( 'You are logged in as %1$s, and are submitting a donation as %2$s, which is an existing donor. To ensure that the email address is tied to the correct donor, please submit this donation from a logged-out browser, or choose another email address.', 'give' ),
268	$donor->email,
269	$submitted_email
270	)
271	);
272	}
273	}
274	}
275
276	/**
277	* Process the checkout login form
278	*
279	* @access private
280	* @since 1.0
281	*
282	* @return void
283	*/
284	function give_process_form_login() {
285
286	$is_ajax = ! empty( $_POST['give_ajax'] ) ? give_clean( $_POST['give_ajax'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok.
287	$referrer = wp_get_referer();
288	$user_data = give_donation_form_validate_user_login();
289
290	if ( give_get_errors() \|\| $user_data['user_id'] < 1 ) {
291	if ( $is_ajax ) {
292	/**
293	* Fires when AJAX sends back errors from the donation form.
294	*
295	* @since 1.0
296	*/
297	ob_start();
298	do_action( 'give_ajax_donation_errors' );
299	$message = ob_get_contents();
300	ob_end_clean();
301	wp_send_json_error( $message );
302	} else {
303	wp_safe_redirect( $referrer );
304	exit;
305	}
306	}
307
308	give_log_user_in( $user_data['user_id'], $user_data['user_login'], $user_data['user_pass'] );
309
310	if ( $is_ajax ) {
311	$message = Give_Notices::print_frontend_notice(
312	sprintf(
313	/* translators: %s: user first name */
314	esc_html__( 'Welcome %s! You have successfully logged into your account.', 'give' ),
315	( ! empty( $user_data['user_first'] ) ) ? $user_data['user_first'] : $user_data['user_login']
316	),
317	false,
318	'success'
319	);
320
321	wp_send_json_success( $message );
322	} else {
323	wp_safe_redirect( $referrer );
324	}
325	}
326
327	add_action( 'wp_ajax_give_process_donation_login', 'give_process_form_login' );
328	add_action( 'wp_ajax_nopriv_give_process_donation_login', 'give_process_form_login' );
329
330	/**
331	* Donation Form Validate Fields.
332	*
333	* @access private
334	* @since 1.0
335	*
336	* @return bool\|array
337	*/
338	function give_donation_form_validate_fields() {
339
340	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
341
342	// Validate Honeypot First.
343	if ( ! empty( $post_data['give-honeypot'] ) ) {
344	give_set_error( 'invalid_honeypot', esc_html__( 'Honeypot field detected. Go away bad bot!', 'give' ) );
345	}
346
347	// Check spam detect.
348	if (
349	isset( $post_data['action'] )
350	&& give_is_spam_donation()
351	) {
352	give_set_error( 'spam_donation', __( 'The email you are using has been flagged as one used in SPAM comments or donations by our system. Please try using a different email address or contact the site administrator if you have any questions.', 'give' ) );
353	}
354
355	// Start an array to collect valid data.
356	$valid_data = [
357	'gateway' => give_donation_form_validate_gateway(), // Gateway fallback (amount is validated here).
358	'need_new_user' => false, // New user flag.
359	'need_user_login' => false, // Login user flag.
360	'logged_user_data' => [], // Logged user collected data.
361	'new_user_data' => [], // New user collected data.
362	'login_user_data' => [], // Login user collected data.
363	'guest_user_data' => [], // Guest user collected data.
364	'cc_info' => give_donation_form_validate_cc(), // Credit card info.
365	];
366
367	$form_id = (int) $post_data['give-form-id'];
368
369	// Validate agree to terms.
370	if ( give_is_terms_enabled( $form_id ) ) {
371	give_donation_form_validate_agree_to_terms();
372	}
373
374	if ( is_user_logged_in() ) {
375
376	// Collect logged in user data.
377	$valid_data['logged_in_user'] = give_donation_form_validate_logged_in_user();
378	} elseif (
379	isset( $post_data['give-purchase-var'] )
380	&& 'needs-to-register' === $post_data['give-purchase-var']
381	&& ! empty( $post_data['give_create_account'] )
382	) {
383
384	// Set new user registration as required.
385	$valid_data['need_new_user'] = true;
386
387	// Validate new user data.
388	$valid_data['new_user_data'] = give_donation_form_validate_new_user();
389	} elseif (
390	isset( $post_data['give-purchase-var'] )
391	&& 'needs-to-login' === $post_data['give-purchase-var']
392	) {
393
394	// Set user login as required.
395	$valid_data['need_user_login'] = true;
396
397	// Validate users login info.
398	$valid_data['login_user_data'] = give_donation_form_validate_user_login();
399	} else {
400
401	// Not registering or logging in, so setup guest user data.
402	$valid_data['guest_user_data'] = give_donation_form_validate_guest_user();
403	}
404
405	// Return collected data.
406	return $valid_data;
407	}
408
409	/**
410	* Detect spam donation.
411	*
412	* @since 1.8.14
413	*
414	* @return bool\|mixed
415	*/
416	function give_is_spam_donation() {
417	$spam = false;
418
419	$user_agent = (string) isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT'] : '';
420
421	if ( strlen( $user_agent ) < 2 ) {
422	$spam = true;
423	}
424
425	// Allow developer to customized Akismet spam detect API call and it's response.
426	return apply_filters( 'give_spam', $spam );
427	}
428
429	/**
430	* Donation Form Validate Gateway
431	*
432	* Validate the gateway and donation amount.
433	*
434	* @access private
435	* @since 1.0
436	*
437	* @return string
438	*/
439	function give_donation_form_validate_gateway() {
440
441	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
442	$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0;
443	$amount = ! empty( $post_data['give-amount'] ) ? give_maybe_sanitize_amount( $post_data['give-amount'] ) : 0;
444	$gateway = ! empty( $post_data['give-gateway'] ) ? $post_data['give-gateway'] : 0;
445
446	// Bailout, if payment gateway is not submitted with donation form data.
447	if ( empty( $gateway ) ) {
448
449	give_set_error( 'empty_gateway', __( 'The donation form will process with a valid payment gateway.', 'give' ) );
450
451	} elseif ( ! give_is_gateway_active( $gateway ) ) {
452
453	give_set_error( 'invalid_gateway', __( 'The selected payment gateway is not enabled.', 'give' ) );
454
455	} elseif ( empty( $amount ) ) {
456
457	give_set_error( 'invalid_donation_amount', __( 'Please insert a valid donation amount.', 'give' ) );
458
459	} elseif ( ! give_verify_minimum_price( 'minimum' ) ) {
460
461	give_set_error(
462	'invalid_donation_minimum',
463	sprintf(
464	/* translators: %s: minimum donation amount */
465	__( 'This form has a minimum donation amount of %s.', 'give' ),
466	give_currency_filter(
467	give_format_amount(
468	give_get_form_minimum_price( $form_id ),
469	[
470	'sanitize' => false,
471	]
472	)
473	)
474	)
475	);
476	} elseif ( ! give_verify_minimum_price( 'maximum' ) ) {
477
478	give_set_error(
479	'invalid_donation_maximum',
480	sprintf(
481	/* translators: %s: Maximum donation amount */
482	__( 'This form has a maximum donation amount of %s.', 'give' ),
483	give_currency_filter(
484	give_format_amount(
485	give_get_form_maximum_price( $form_id ),
486	[
487	'sanitize' => false,
488	]
489	)
490	)
491	)
492	);
493	} // End if().
494
495	return $gateway;
496
497	}
498
499	/**
500	* Donation Form Validate Minimum or Maximum Donation Amount
501	*
502	* @access private
503	* @since 1.3.6
504	* @since 2.1 Added support for give maximum amount.
505	* @since 2.1.3 Added new filter to modify the return value.
506	*
507	* @param string $amount_range Which amount needs to verify? minimum or maximum.
508	*
509	* @return bool
510	*/
511	function give_verify_minimum_price( $amount_range = 'minimum' ) {
512
513	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
514	$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0;
515	$amount = ! empty( $post_data['give-amount'] ) ? give_maybe_sanitize_amount( $post_data['give-amount'], [ 'currency' => give_get_currency( $form_id ) ] ) : 0;
516	$price_id = isset( $post_data['give-price-id'] ) ? absint( $post_data['give-price-id'] ) : '';
517
518	$variable_prices = give_has_variable_prices( $form_id );
519	$price_ids = array_map( 'absint', give_get_variable_price_ids( $form_id ) );
520	$verified_stat = false;
521
522	if ( $variable_prices && in_array( $price_id, $price_ids, true ) ) {
523
524	$price_level_amount = give_get_price_option_amount( $form_id, $price_id );
525
526	if ( $price_level_amount == $amount ) {
527	$verified_stat = true;
528	}
529	}
530
531	if ( ! $verified_stat ) {
532	switch ( $amount_range ) {
533	case 'minimum':
534	$verified_stat = ( give_get_form_minimum_price( $form_id ) > $amount ) ? false : true;
535	break;
536	case 'maximum':
537	$verified_stat = ( give_get_form_maximum_price( $form_id ) < $amount ) ? false : true;
538	break;
539	}
540	}
541
542	/**
543	* Filter the verify amount
544	*
545	* @since 2.1.3
546	*
547	* @param bool $verified_stat Was verification passed or not?
548	* @param string $amount_range Type of the amount.
549	* @param integer $form_id Give Donation Form ID.
550	*/
551	return apply_filters( 'give_verify_minimum_maximum_price', $verified_stat, $amount_range, $form_id );
552	}
553
554	/**
555	* Donation form validate agree to "Terms and Conditions".
556	*
557	* @access private
558	* @since 1.0
559	*
560	* @return void
561	*/
562	function give_donation_form_validate_agree_to_terms() {
563
564	$agree_to_terms = ! empty( $_POST['give_agree_to_terms'] ) ? give_clean( $_POST['give_agree_to_terms'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok.
565
566	// Proceed only, if donor agreed to terms.
567	if ( ! $agree_to_terms ) {
568
569	// User did not agree.
570	give_set_error( 'agree_to_terms', apply_filters( 'give_agree_to_terms_text', __( 'You must agree to the terms and conditions.', 'give' ) ) );
571	}
572	}
573
574	/**
575	* Donation Form Required Fields.
576	*
577	* @access private
578	* @since 1.0
579	*
580	* @param int $form_id Donation Form ID.
581	*
582	* @return array
583	*/
584	function give_get_required_fields( $form_id ) {
585
586	$posted_data = give_clean( filter_input_array( INPUT_POST ) );
587	$payment_mode = give_get_chosen_gateway( $form_id );
588
589	$required_fields = [
590	'give_email' => [
591	'error_id' => 'invalid_email',
592	'error_message' => __( 'Please enter a valid email address.', 'give' ),
593	],
594	'give_first' => [
595	'error_id' => 'invalid_first_name',
596	'error_message' => __( 'Please enter your first name.', 'give' ),
597	],
598	];
599
600	$name_title_prefix = give_is_name_title_prefix_required( $form_id );
601	if ( $name_title_prefix ) {
602	$required_fields['give_title'] = [
603	'error_id' => 'invalid_title',
604	'error_message' => __( 'Please enter your title.', 'give' ),
605	];
606	}
607
608	// If credit card fields related actions exists then check for the cc fields validations.
609	if (
610	has_action( "give_{$payment_mode}_cc_form", 'give_get_cc_form' ) \|\|
611	has_action( 'give_cc_form', 'give_get_cc_form' )
612	) {
613
614	// Validate card number field for empty check.
615	if (
616	isset( $posted_data['card_number'] ) &&
617	empty( $posted_data['card_number'] )
618	) {
619	$required_fields['card_number'] = [
620	'error_id' => 'empty_card_number',
621	'error_message' => __( 'Please enter a credit card number.', 'give' ),
622	];
623	}
624
625	// Validate card cvc field for empty check.
626	if (
627	isset( $posted_data['card_cvc'] ) &&
628	empty( $posted_data['card_cvc'] )
629	) {
630	$required_fields['card_cvc'] = [
631	'error_id' => 'empty_card_cvc',
632	'error_message' => __( 'Please enter a credit card CVC information.', 'give' ),
633	];
634	}
635
636	// Validate card name field for empty check.
637	if (
638	(
639	isset( $posted_data['give_validate_stripe_payment_fields'] ) &&
640	'1' === $posted_data['give_validate_stripe_payment_fields'] &&
641	isset( $posted_data['card_name'] ) &&
642	empty( $posted_data['card_name'] )
643	) \|\|
644	(
645	! isset( $posted_data['give_validate_stripe_payment_fields'] ) &&
646	isset( $posted_data['card_name'] ) &&
647	empty( $posted_data['card_name'] )
648	)
649	) {
650	$required_fields['card_name'] = [
651	'error_id' => 'empty_card_name',
652	'error_message' => __( 'Please enter a name of your credit card account holder.', 'give' ),
653	];
654	}
655
656	// Validate card expiry field for empty check.
657	if (
658	isset( $posted_data['card_expiry'] ) &&
659	empty( $posted_data['card_expiry'] )
660	) {
661	$required_fields['card_expiry'] = [
662	'error_id' => 'empty_card_expiry',
663	'error_message' => __( 'Please enter a credit card expiry date.', 'give' ),
664	];
665	}
666	}
667
668	$require_address = give_require_billing_address( $payment_mode );
669
670	if ( $require_address ) {
671	$required_fields['card_address'] = [
672	'error_id' => 'invalid_card_address',
673	'error_message' => __( 'Please enter your primary billing address.', 'give' ),
674	];
675	$required_fields['card_zip'] = [
676	'error_id' => 'invalid_zip_code',
677	'error_message' => __( 'Please enter your zip / postal code.', 'give' ),
678	];
679	$required_fields['card_city'] = [
680	'error_id' => 'invalid_city',
681	'error_message' => __( 'Please enter your billing city.', 'give' ),
682	];
683	$required_fields['billing_country'] = [
684	'error_id' => 'invalid_country',
685	'error_message' => __( 'Please select your billing country.', 'give' ),
686	];
687
688	$required_fields['card_state'] = [
689	'error_id' => 'invalid_state',
690	'error_message' => __( 'Please enter billing state / province / County.', 'give' ),
691	];
692
693	$country = ! empty( $_POST['billing_country'] ) ? give_clean( $_POST['billing_country'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok.
694
695	// Check if billing country already exists.
696	if ( $country ) {
697
698	// Check if states is empty or not.
699	if ( array_key_exists( $country, give_states_not_required_country_list() ) ) {
700	// If states is empty remove the required fields of state in billing cart.
701	unset( $required_fields['card_state'] );
702	}
703
704	// Check if city is empty or not.
705	if ( array_key_exists( $country, give_city_not_required_country_list() ) ) {
706	// If states is empty remove the required fields of city in billing cart.
707	unset( $required_fields['card_city'] );
708	}
709
710	// Check if country is without post codes.
711	if ( array_key_exists( $country, give_get_country_list_without_postcodes() ) ) {
712	// If country is on the list, zip code is not required.
713	unset( $required_fields['card_zip'] );
714	}
715	}
716	} // End if().
717
718	if ( give_is_company_field_enabled( $form_id ) ) {
719	$form_option = give_get_meta( $form_id, '_give_company_field', true );
720	$global_setting = give_get_option( 'company_field' );
721
722	$is_company_field_required = false;
723
724	if ( ! empty( $form_option ) && give_is_setting_enabled( $form_option, [ 'required' ] ) ) {
725	$is_company_field_required = true;
726
727	} elseif ( 'global' === $form_option && give_is_setting_enabled( $global_setting, [ 'required' ] ) ) {
728	$is_company_field_required = true;
729
730	} elseif ( empty( $form_option ) && give_is_setting_enabled( $global_setting, [ 'required' ] ) ) {
731	$is_company_field_required = true;
732
733	}
734
735	if ( $is_company_field_required ) {
736	$required_fields['give_company_name'] = [
737	'error_id' => 'invalid_company',
738	'error_message' => __( 'Please enter Company Name.', 'give' ),
739	];
740	}
741	}
742
743	/**
744	* Filters the donation form required field.
745	*
746	* @since 1.7
747	*/
748	$required_fields = apply_filters( 'give_donation_form_required_fields', $required_fields, $form_id );
749
750	return $required_fields;
751
752	}
753
754	/**
755	* Check if the Billing Address is required
756	*
757	* @since 1.0.1
758	*
759	* @param string $payment_mode Payment Mode.
760	*
761	* @return bool
762	*/
763	function give_require_billing_address( $payment_mode ) {
764
765	$return = false;
766	$billing_country = ! empty( $_POST['billing_country'] ) ? give_clean( $_POST['billing_country'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok.
767
768	if ( $billing_country \|\| did_action( "give_{$payment_mode}_cc_form" ) \|\| did_action( 'give_cc_form' ) ) {
769	$return = true;
770	}
771
772	// Let payment gateways and other extensions determine if address fields should be required.
773	return apply_filters( 'give_require_billing_address', $return );
774
775	}
776
777	/**
778	* Donation Form Validate Logged In User.
779	*
780	* @access private
781	* @since 1.0
782	*
783	* @return array
784	*/
785	function give_donation_form_validate_logged_in_user() {
786
787	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
788	$user_id = get_current_user_id();
789	$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0;
790
791	// Start empty array to collect valid user data.
792	$valid_user_data = [
793
794	// Assume there will be errors.
795	'user_id' => - 1,
796	];
797
798	// Proceed only, if valid $user_id found.
799	if ( $user_id > 0 ) {
800
801	// Get the logged in user data.
802	$user_data = get_userdata( $user_id );
803
804	// Validate Required Form Fields.
805	give_validate_required_form_fields( $form_id );
806
807	// Verify data.
808	if ( is_object( $user_data ) && $user_data->ID > 0 ) {
809	// Collected logged in user data.
810	$valid_user_data = [
811	'user_id' => $user_id,
812	'user_email' => ! empty( $post_data['give_email'] )
813	? sanitize_email( $post_data['give_email'] )
814	: $user_data->user_email,
815	'user_first' => ! empty( $post_data['give_first'] )
816	? $post_data['give_first']
817	: $user_data->first_name,
818	'user_last' => ! empty( $post_data['give_last'] )
819	? $post_data['give_last']
820	: $user_data->last_name,
821	];
822
823	// Validate essential form fields.
824	give_donation_form_validate_name_fields( $post_data );
825
826	give_check_logged_in_user_for_existing_email( $valid_user_data );
827
828	if ( ! is_email( $valid_user_data['user_email'] ) ) {
829	give_set_error( 'email_invalid', esc_html__( 'Invalid email.', 'give' ) );
830	}
831	} else {
832
833	// Set invalid user information error.
834	give_set_error( 'invalid_user', esc_html__( 'The user information is invalid.', 'give' ) );
835	}
836	}
837
838	// Return user data.
839	return $valid_user_data;
840	}
841
842	/**
843	* Donate Form Validate New User
844	*
845	* @access private
846	* @since 1.0
847	*
848	* @return array
849	*/
850	function give_donation_form_validate_new_user() {
851	// Default user data.
852	$auto_generated_password = wp_generate_password();
853	$default_user_data = [
854	'give-form-id' => '',
855	'user_id' => - 1, // Assume there will be errors.
856	'user_first' => '',
857	'user_last' => '',
858	'give_user_login' => false,
859	'give_email' => false,
860	'give_user_pass' => $auto_generated_password,
861	'give_user_pass_confirm' => $auto_generated_password,
862	];
863
864	// Get data.
865	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
866	$user_data = wp_parse_args( $post_data, $default_user_data );
867
868	$form_id = absint( $user_data['give-form-id'] );
869	$nonce = ! empty( $post_data['give-form-user-register-hash'] ) ? $post_data['give-form-user-register-hash'] : '';
870
871	// Validate user creation nonce.
872	if ( ! wp_verify_nonce( $nonce, "give_form_create_user_nonce_{$form_id}" ) ) {
873	give_set_error( 'invalid_nonce', __( 'We\'re unable to recognize your session. Please refresh the screen to try again; otherwise contact your website administrator for assistance.', 'give' ) );
874	}
875
876	$registering_new_user = false;
877
878	give_donation_form_validate_name_fields( $user_data );
879
880	// Start an empty array to collect valid user data.
881	$valid_user_data = [
882
883	// Assume there will be errors.
884	'user_id' => - 1,
885
886	// Get first name.
887	'user_first' => $user_data['give_first'],
888
889	// Get last name.
890	'user_last' => $user_data['give_last'],
891
892	// Get Password.
893	'user_pass' => $user_data['give_user_pass'],
894	];
895
896	// Validate Required Form Fields.
897	give_validate_required_form_fields( $form_id );
898
899	// Set Email as Username.
900	$valid_user_data['user_login'] = $user_data['give_email'];
901
902	// Check if we have an email to verify.
903	if ( give_validate_user_email( $user_data['give_email'], $registering_new_user ) ) {
904	$valid_user_data['user_email'] = $user_data['give_email'];
905	}
906
907	return $valid_user_data;
908	}
909
910	/**
911	* Donation Form Validate User Login
912	*
913	* @access private
914	* @since 1.0
915	*
916	* @return array
917	*/
918	function give_donation_form_validate_user_login() {
919
920	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
921
922	// Start an array to collect valid user data.
923	$valid_user_data = [
924
925	// Assume there will be errors.
926	'user_id' => - 1,
927	];
928
929	// Bailout, if Username is empty.
930	if ( empty( $post_data['give_user_login'] ) ) {
931	give_set_error( 'must_log_in', __( 'Please enter your username or email to log in.', 'give' ) );
932
933	return $valid_user_data;
934	}
935
936	$give_user_login = strip_tags( $post_data['give_user_login'] );
937	if ( is_email( $give_user_login ) ) {
938	// Get the user data by email.
939	$user_data = get_user_by( 'email', $give_user_login );
940	} else {
941	// Get the user data by login.
942	$user_data = get_user_by( 'login', $give_user_login );
943	}
944
945	// Check if user exists.
946	if ( $user_data ) {
947
948	// Get password.
949	$user_pass = ! empty( $post_data['give_user_pass'] ) ? $post_data['give_user_pass'] : false;
950
951	// Check user_pass.
952	if ( $user_pass ) {
953
954	// Check if password is valid.
955	if ( ! wp_check_password( $user_pass, $user_data->user_pass, $user_data->ID ) ) {
956
957	$current_page_url = site_url() . '/' . get_page_uri();
958
959	// Incorrect password.
960	give_set_error(
961	'password_incorrect',
962	sprintf(
963	'%1$s <a href="%2$s">%3$s</a>',
964	__( 'The password you entered is incorrect.', 'give' ),
965	wp_lostpassword_url( $current_page_url ),
966	__( 'Reset Password', 'give' )
967	)
968	);
969
970	} else {
971
972	// Repopulate the valid user data array.
973	$valid_user_data = [
974	'user_id' => $user_data->ID,
975	'user_login' => $user_data->user_login,
976	'user_email' => $user_data->user_email,
977	'user_first' => $user_data->first_name,
978	'user_last' => $user_data->last_name,
979	'user_pass' => $user_pass,
980	];
981	}
982	} else {
983	// Empty password.
984	give_set_error( 'password_empty', __( 'Enter a password.', 'give' ) );
985	}
986	} else {
987	// No username.
988	give_set_error( 'username_incorrect', __( 'The username you entered does not exist.', 'give' ) );
989	} // End if().
990
991	return $valid_user_data;
992	}
993
994	/**
995	* Donation Form Validate Guest User
996	*
997	* @access private
998	* @since 1.0
999	*
1000	* @return array
1001	*/
1002	function give_donation_form_validate_guest_user() {
1003
1004	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
1005	$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0;
1006
1007	// Start an array to collect valid user data.
1008	$valid_user_data = [
1009	// Set a default id for guests.
1010	'user_id' => 0,
1011	];
1012
1013	// Validate name fields.
1014	give_donation_form_validate_name_fields( $post_data );
1015
1016	// Validate Required Form Fields.
1017	give_validate_required_form_fields( $form_id );
1018
1019	// Get the guest email.
1020	$guest_email = ! empty( $post_data['give_email'] ) ? $post_data['give_email'] : false;
1021
1022	// Check email.
1023	if ( $guest_email && strlen( $guest_email ) > 0 ) {
1024
1025	// Validate email.
1026	if ( ! is_email( $guest_email ) ) {
1027
1028	// Invalid email.
1029	give_set_error( 'email_invalid', __( 'Invalid email.', 'give' ) );
1030
1031	} else {
1032
1033	// All is good to go.
1034	$valid_user_data['user_email'] = $guest_email;
1035
1036	// Get user_id from donor if exist.
1037	$donor = new Give_Donor( $guest_email );
1038
1039	if ( $donor->id ) {
1040	$donor_email_index = array_search(
1041	strtolower( $guest_email ),
1042	array_map( 'strtolower', $donor->emails ),
1043	true
1044	);
1045
1046	$valid_user_data['user_id'] = $donor->user_id;
1047
1048	// Set email to original format.
1049	// @see https://github.com/impress-org/give/issues/4025
1050	$valid_user_data['user_email'] = $donor->emails[ $donor_email_index ];
1051	}
1052	}
1053	} else {
1054	// No email.
1055	give_set_error( 'email_empty', __( 'Enter an email.', 'give' ) );
1056	}
1057
1058	return $valid_user_data;
1059	}
1060
1061	/**
1062	* Register And Login New User
1063	*
1064	* @param array $user_data User Data.
1065	*
1066	* @access private
1067	* @since 1.0
1068	*
1069	* @return integer
1070	*/
1071	function give_register_and_login_new_user( $user_data = [] ) {
1072	// Verify the array.
1073	if ( empty( $user_data ) ) {
1074	return - 1;
1075	}
1076
1077	if ( give_get_errors() ) {
1078	return - 1;
1079	}
1080
1081	$user_args = apply_filters(
1082	'give_insert_user_args',
1083	[
1084	'user_login' => isset( $user_data['user_login'] ) ? $user_data['user_login'] : '',
1085	'user_pass' => isset( $user_data['user_pass'] ) ? $user_data['user_pass'] : '',
1086	'user_email' => isset( $user_data['user_email'] ) ? $user_data['user_email'] : '',
1087	'first_name' => isset( $user_data['user_first'] ) ? $user_data['user_first'] : '',
1088	'last_name' => isset( $user_data['user_last'] ) ? $user_data['user_last'] : '',
1089	'user_registered' => date( 'Y-m-d H:i:s' ),
1090	'role' => give_get_option( 'donor_default_user_role', 'give_donor' ),
1091	],
1092	$user_data
1093	);
1094
1095	// Insert new user.
1096	$user_id = wp_insert_user( $user_args );
1097
1098	// Validate inserted user.
1099	if ( is_wp_error( $user_id ) ) {
1100	return - 1;
1101	}
1102
1103	// Allow themes and plugins to filter the user data.
1104	$user_data = apply_filters( 'give_insert_user_data', $user_data, $user_args );
1105
1106	/**
1107	* Fires after inserting user.
1108	*
1109	* @since 1.0
1110	*
1111	* @param int $user_id User id.
1112	* @param array $user_data Array containing user data.
1113	*/
1114	do_action( 'give_insert_user', $user_id, $user_data );
1115
1116	/**
1117	* Filter allow user to alter if user when to login or not when user is register for the first time.
1118	*
1119	* @since 1.8.13
1120	*
1121	* return bool True if login with registration and False if only want to register.
1122	*/
1123	if ( true === (bool) apply_filters( 'give_log_user_in_on_register', true ) ) {
1124	// Login new user.
1125	give_log_user_in( $user_id, $user_data['user_login'], $user_data['user_pass'] );
1126	}
1127
1128	// Return user id.
1129	return $user_id;
1130	}
1131
1132	/**
1133	* Get Donation Form User
1134	*
1135	* @param array $valid_data Valid Data.
1136	*
1137	* @access private
1138	* @since 1.0
1139	*
1140	* @return array\|bool
1141	*/
1142	function give_get_donation_form_user( $valid_data = [] ) {
1143
1144	// Initialize user.
1145	$user = false;
1146	$is_ajax = defined( 'DOING_AJAX' ) && DOING_AJAX;
1147	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
1148
1149	if ( $is_ajax ) {
1150
1151	// Do not create or login the user during the ajax submission (check for errors only).
1152	return true;
1153	} elseif ( is_user_logged_in() ) {
1154
1155	// Set the valid user as the logged in collected data.
1156	$user = $valid_data['logged_in_user'];
1157	} elseif ( true === $valid_data['need_new_user'] \|\| true === $valid_data['need_user_login'] ) {
1158
1159	// New user registration.
1160	if ( true === $valid_data['need_new_user'] ) {
1161
1162	// Set user.
1163	$user = $valid_data['new_user_data'];
1164
1165	// Register and login new user.
1166	$user['user_id'] = give_register_and_login_new_user( $user );
1167
1168	} elseif ( true === $valid_data['need_user_login'] && ! $is_ajax ) {
1169
1170	/**
1171	* The login form is now processed in the give_process_donation_login() function.
1172	* This is still here for backwards compatibility.
1173	* This also allows the old login process to still work if a user removes the checkout login submit button.
1174	*
1175	* This also ensures that the donor is logged in correctly if they click "Donation" instead of submitting the login form, meaning the donor is logged in during the donation process.
1176	*/
1177	$user = $valid_data['login_user_data'];
1178
1179	// Login user.
1180	give_log_user_in( $user['user_id'], $user['user_login'], $user['user_pass'] );
1181	}
1182	} // End if().
1183
1184	// Check guest checkout.
1185	if ( false === $user && false === give_logged_in_only( $post_data['give-form-id'] ) ) {
1186
1187	// Set user.
1188	$user = $valid_data['guest_user_data'];
1189	}
1190
1191	// Verify we have an user.
1192	if ( false === $user \|\| empty( $user ) ) {
1193	return false;
1194	}
1195
1196	// Get user first name.
1197	if ( ! isset( $user['user_first'] ) \|\| strlen( trim( $user['user_first'] ) ) < 1 ) {
1198	$user['user_first'] = isset( $post_data['give_first'] ) ? strip_tags( trim( $post_data['give_first'] ) ) : '';
1199	}
1200
1201	// Get user last name.
1202	if ( ! isset( $user['user_last'] ) \|\| strlen( trim( $user['user_last'] ) ) < 1 ) {
1203	$user['user_last'] = isset( $post_data['give_last'] ) ? strip_tags( trim( $post_data['give_last'] ) ) : '';
1204	}
1205
1206	// Add Title Prefix to user information.
1207	if ( empty( $user['user_title'] ) \|\| strlen( trim( $user['user_title'] ) ) < 1 ) {
1208	$user['user_title'] = ! empty( $post_data['give_title'] ) ? strip_tags( trim( $post_data['give_title'] ) ) : '';
1209	}
1210
1211	// Get the user's billing address details.
1212	$user['address'] = [];
1213	$user['address']['line1'] = ! empty( $post_data['card_address'] ) ? $post_data['card_address'] : false;
1214	$user['address']['line2'] = ! empty( $post_data['card_address_2'] ) ? $post_data['card_address_2'] : false;
1215	$user['address']['city'] = ! empty( $post_data['card_city'] ) ? $post_data['card_city'] : false;
1216	$user['address']['state'] = ! empty( $post_data['card_state'] ) ? $post_data['card_state'] : false;
1217	$user['address']['zip'] = ! empty( $post_data['card_zip'] ) ? $post_data['card_zip'] : false;
1218	$user['address']['country'] = ! empty( $post_data['billing_country'] ) ? $post_data['billing_country'] : false;
1219
1220	if ( empty( $user['address']['country'] ) ) {
1221	$user['address'] = false;
1222	} // End if().
1223
1224	// Return valid user.
1225	return $user;
1226	}
1227
1228	/**
1229	* Validates the credit card info.
1230	*
1231	* @access private
1232	* @since 1.0
1233	*
1234	* @return array
1235	*/
1236	function give_donation_form_validate_cc() {
1237
1238	$card_data = give_get_donation_cc_info();
1239
1240	// Validate the card zip.
1241	if ( ! empty( $card_data['card_zip'] ) ) {
1242	if ( ! give_donation_form_validate_cc_zip( $card_data['card_zip'], $card_data['card_country'] ) ) {
1243	give_set_error( 'invalid_cc_zip', __( 'The zip / postal code you entered for your billing address is invalid.', 'give' ) );
1244	}
1245	}
1246
1247	// Ensure no spaces.
1248	if ( ! empty( $card_data['card_number'] ) ) {
1249	$card_data['card_number'] = str_replace( '+', '', $card_data['card_number'] ); // no "+" signs.
1250	$card_data['card_number'] = str_replace( ' ', '', $card_data['card_number'] ); // No spaces.
1251	}
1252
1253	// This should validate card numbers at some point too.
1254	return $card_data;
1255	}
1256
1257	/**
1258	* Get credit card info.
1259	*
1260	* @access private
1261	* @since 1.0
1262	*
1263	* @return array
1264	*/
1265	function give_get_donation_cc_info() {
1266
1267	// Sanitize the values submitted with donation form.
1268	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
1269
1270	$cc_info = [];
1271	$cc_info['card_name'] = ! empty( $post_data['card_name'] ) ? $post_data['card_name'] : '';
1272	$cc_info['card_number'] = ! empty( $post_data['card_number'] ) ? $post_data['card_number'] : '';
1273	$cc_info['card_cvc'] = ! empty( $post_data['card_cvc'] ) ? $post_data['card_cvc'] : '';
1274	$cc_info['card_exp_month'] = ! empty( $post_data['card_exp_month'] ) ? $post_data['card_exp_month'] : '';
1275	$cc_info['card_exp_year'] = ! empty( $post_data['card_exp_year'] ) ? $post_data['card_exp_year'] : '';
1276	$cc_info['card_address'] = ! empty( $post_data['card_address'] ) ? $post_data['card_address'] : '';
1277	$cc_info['card_address_2'] = ! empty( $post_data['card_address_2'] ) ? $post_data['card_address_2'] : '';
1278	$cc_info['card_city'] = ! empty( $post_data['card_city'] ) ? $post_data['card_city'] : '';
1279	$cc_info['card_state'] = ! empty( $post_data['card_state'] ) ? $post_data['card_state'] : '';
1280	$cc_info['card_country'] = ! empty( $post_data['billing_country'] ) ? $post_data['billing_country'] : '';
1281	$cc_info['card_zip'] = ! empty( $post_data['card_zip'] ) ? $post_data['card_zip'] : '';
1282
1283	// Return cc info.
1284	return $cc_info;
1285	}
1286
1287	/**
1288	* Validate zip code based on country code
1289	*
1290	* @since 1.0
1291	*
1292	* @param int $zip ZIP Code.
1293	* @param string $country_code Country Code.
1294	*
1295	* @return bool\|mixed
1296	*/
1297	function give_donation_form_validate_cc_zip( $zip = 0, $country_code = '' ) {
1298	$ret = false;
1299
1300	if ( empty( $zip ) \|\| empty( $country_code ) ) {
1301	return $ret;
1302	}
1303
1304	$country_code = strtoupper( $country_code );
1305
1306	$zip_regex = [
1307	'AD' => 'AD\d{3}',
1308	'AM' => '(37)?\d{4}',
1309	'AR' => '^([A-Z]{1}\d{4}[A-Z]{3}\|[A-Z]{1}\d{4}\|\d{4})$',
1310	'AS' => '96799',
1311	'AT' => '\d{4}',
1312	'AU' => '^(0[289][0-9]{2})\|([1345689][0-9]{3})\|(2[0-8][0-9]{2})\|(290[0-9])\|(291[0-4])\|(7[0-4][0-9]{2})\|(7[8-9][0-9]{2})$',
1313	'AX' => '22\d{3}',
1314	'AZ' => '\d{4}',
1315	'BA' => '\d{5}',
1316	'BB' => '(BB\d{5})?',
1317	'BD' => '\d{4}',
1318	'BE' => '^[1-9]{1}[0-9]{3}$',
1319	'BG' => '\d{4}',
1320	'BH' => '((1[0-2]\|[2-9])\d{2})?',
1321	'BM' => '[A-Z]{2}[ ]?[A-Z0-9]{2}',
1322	'BN' => '[A-Z]{2}[ ]?\d{4}',
1323	'BR' => '\d{5}[\-]?\d{3}',
1324	'BY' => '\d{6}',
1325	'CA' => '^[ABCEGHJKLMNPRSTVXY]{1}\d{1}[A-Z]{1} *\d{1}[A-Z]{1}\d{1}$',
1326	'CC' => '6799',
1327	'CH' => '^[1-9][0-9][0-9][0-9]$',
1328	'CK' => '\d{4}',
1329	'CL' => '\d{7}',
1330	'CN' => '\d{6}',
1331	'CR' => '\d{4,5}\|\d{3}-\d{4}',
1332	'CS' => '\d{5}',
1333	'CV' => '\d{4}',
1334	'CX' => '6798',
1335	'CY' => '\d{4}',
1336	'CZ' => '\d{3}[ ]?\d{2}',
1337	'DE' => '\b((?:0[1-46-9]\d{3})\|(?:[1-357-9]\d{4})\|(?:[4][0-24-9]\d{3})\|(?:[6][013-9]\d{3}))\b',
1338	'DK' => '^([D-d][K-k])?( \|-)?[1-9]{1}[0-9]{3}$',
1339	'DO' => '\d{5}',
1340	'DZ' => '\d{5}',
1341	'EC' => '([A-Z]\d{4}[A-Z]\|(?:[A-Z]{2})?\d{6})?',
1342	'EE' => '\d{5}',
1343	'EG' => '\d{5}',
1344	'ES' => '^([1-9]{2}\|[0-9][1-9]\|[1-9][0-9])[0-9]{3}$',
1345	'ET' => '\d{4}',
1346	'FI' => '\d{5}',
1347	'FK' => 'FIQQ 1ZZ',
1348	'FM' => '(9694[1-4])([ \-]\d{4})?',
1349	'FO' => '\d{3}',
1350	'FR' => '^(F-)?((2[A\|B])\|[0-9]{2})[0-9]{3}$',
1351	'GE' => '\d{4}',
1352	'GF' => '9[78]3\d{2}',
1353	'GL' => '39\d{2}',
1354	'GN' => '\d{3}',
1355	'GP' => '9[78][01]\d{2}',
1356	'GR' => '\d{3}[ ]?\d{2}',
1357	'GS' => 'SIQQ 1ZZ',
1358	'GT' => '\d{5}',
1359	'GU' => '969[123]\d([ \-]\d{4})?',
1360	'GW' => '\d{4}',
1361	'HM' => '\d{4}',
1362	'HN' => '(?:\d{5})?',
1363	'HR' => '\d{5}',
1364	'HT' => '\d{4}',
1365	'HU' => '\d{4}',
1366	'ID' => '\d{5}',
1367	'IE' => '((D\|DUBLIN)?([1-9]\|6[wW]\|1[0-8]\|2[024]))?',
1368	'IL' => '\d{5}',
1369	'IN' => '^[1-9][0-9][0-9][0-9][0-9][0-9]$', // India.
1370	'IO' => 'BBND 1ZZ',
1371	'IQ' => '\d{5}',
1372	'IS' => '\d{3}',
1373	'IT' => '^(V-\|I-)?[0-9]{5}$',
1374	'JO' => '\d{5}',
1375	'JP' => '\d{3}-\d{4}',
1376	'KE' => '\d{5}',
1377	'KG' => '\d{6}',
1378	'KH' => '\d{5}',
1379	'KR' => '\d{5}',
1380	'KW' => '\d{5}',
1381	'KZ' => '\d{6}',
1382	'LA' => '\d{5}',
1383	'LB' => '(\d{4}([ ]?\d{4})?)?',
1384	'LI' => '(948[5-9])\|(949[0-7])',
1385	'LK' => '\d{5}',
1386	'LR' => '\d{4}',
1387	'LS' => '\d{3}',
1388	'LT' => '\d{5}',
1389	'LU' => '\d{4}',
1390	'LV' => '\d{4}',
1391	'MA' => '\d{5}',
1392	'MC' => '980\d{2}',
1393	'MD' => '\d{4}',
1394	'ME' => '8\d{4}',
1395	'MG' => '\d{3}',
1396	'MH' => '969[67]\d([ \-]\d{4})?',
1397	'MK' => '\d{4}',
1398	'MN' => '\d{6}',
1399	'MP' => '9695[012]([ \-]\d{4})?',
1400	'MQ' => '9[78]2\d{2}',
1401	'MT' => '[A-Z]{3}[ ]?\d{2,4}',
1402	'MU' => '(\d{3}[A-Z]{2}\d{3})?',
1403	'MV' => '\d{5}',
1404	'MX' => '\d{5}',
1405	'MY' => '\d{5}',
1406	'NC' => '988\d{2}',
1407	'NE' => '\d{4}',
1408	'NF' => '2899',
1409	'NG' => '(\d{6})?',
1410	'NI' => '((\d{4}-)?\d{3}-\d{3}(-\d{1})?)?',
1411	'NL' => '^[1-9][0-9]{3}\s?([a-zA-Z]{2})?$',
1412	'NO' => '\d{4}',
1413	'NP' => '\d{5}',
1414	'NZ' => '\d{4}',
1415	'OM' => '(PC )?\d{3}',
1416	'PF' => '987\d{2}',
1417	'PG' => '\d{3}',
1418	'PH' => '\d{4}',
1419	'PK' => '\d{5}',
1420	'PL' => '\d{2}-\d{3}',
1421	'PM' => '9[78]5\d{2}',
1422	'PN' => 'PCRN 1ZZ',
1423	'PR' => '00[679]\d{2}([ \-]\d{4})?',
1424	'PT' => '\d{4}([\-]\d{3})?',
1425	'PW' => '96940',
1426	'PY' => '\d{4}',
1427	'RE' => '9[78]4\d{2}',
1428	'RO' => '\d{6}',
1429	'RS' => '\d{5}',
1430	'RU' => '\d{6}',
1431	'SA' => '\d{5}',
1432	'SE' => '^(s-\|S-){0,1}[0-9]{3}\s?[0-9]{2}$',
1433	'SG' => '\d{6}',
1434	'SH' => '(ASCN\|STHL) 1ZZ',
1435	'SI' => '\d{4}',
1436	'SJ' => '\d{4}',
1437	'SK' => '\d{3}[ ]?\d{2}',
1438	'SM' => '4789\d',
1439	'SN' => '\d{5}',
1440	'SO' => '\d{5}',
1441	'SZ' => '[HLMS]\d{3}',
1442	'TC' => 'TKCA 1ZZ',
1443	'TH' => '\d{5}',
1444	'TJ' => '\d{6}',
1445	'TM' => '\d{6}',
1446	'TN' => '\d{4}',
1447	'TR' => '\d{5}',
1448	'TW' => '\d{3}(\d{2})?',
1449	'UA' => '\d{5}',
1450	'UK' => '^(GIR\|[A-Z]\d[A-Z\d]??\|[A-Z]{2}\d[A-Z\d]??)[ ]??(\d[A-Z]{2})$',
1451	'US' => '^\d{5}([\-]?\d{4})?$',
1452	'UY' => '\d{5}',
1453	'UZ' => '\d{6}',
1454	'VA' => '00120',
1455	'VE' => '\d{4}',
1456	'VI' => '008(([0-4]\d)\|(5[01]))([ \-]\d{4})?',
1457	'WF' => '986\d{2}',
1458	'YT' => '976\d{2}',
1459	'YU' => '\d{5}',
1460	'ZA' => '\d{4}',
1461	'ZM' => '\d{5}',
1462	];
1463
1464	if ( ! isset( $zip_regex[ $country_code ] ) \|\| preg_match( '/' . $zip_regex[ $country_code ] . '/i', $zip ) ) {
1465	$ret = true;
1466	}
1467
1468	return apply_filters( 'give_is_zip_valid', $ret, $zip, $country_code );
1469	}
1470
1471	/**
1472	* Validate donation amount and auto set correct donation level id on basis of amount.
1473	*
1474	* Note: If amount does not match to donation level amount then level id will be auto select to first match level id on basis of amount.
1475	*
1476	* @param array $valid_data List of Valid Data.
1477	*
1478	* @return bool
1479	*/
1480	function give_validate_donation_amount( $valid_data ) {
1481
1482	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
1483
1484	/* @var Give_Donate_Form $form */
1485	$form = new Give_Donate_Form( $post_data['give-form-id'] );
1486
1487	// Get the form currency.
1488	$form_currency = give_get_currency( $post_data['give-form-id'] );
1489
1490	$donation_level_matched = false;
1491
1492	if ( $form->is_set_type_donation_form() ) {
1493
1494	// Sanitize donation amount.
1495	$post_data['give-amount'] = give_maybe_sanitize_amount( $post_data['give-amount'], [ 'currency' => $form_currency ] );
1496
1497	// Backward compatibility.
1498	if ( $form->is_custom_price( $post_data['give-amount'] ) ) {
1499	$post_data['give-price-id'] = 'custom';
1500	}
1501
1502	$donation_level_matched = true;
1503
1504	} elseif ( $form->is_multi_type_donation_form() ) {
1505
1506	$variable_prices = $form->get_prices();
1507
1508	// Bailout.
1509	if ( ! $variable_prices ) {
1510	return false;
1511	}
1512
1513	// Sanitize donation amount.
1514	$post_data['give-amount'] = give_maybe_sanitize_amount( $post_data['give-amount'], [ 'currency' => $form_currency ] );
1515	$variable_price_option_amount = give_maybe_sanitize_amount( give_get_price_option_amount( $post_data['give-form-id'], $post_data['give-price-id'] ), [ 'currency' => $form_currency ] );
1516	$new_price_id = '';
1517
1518	if ( $post_data['give-amount'] === $variable_price_option_amount ) {
1519	return true;
1520	}
1521
1522	if ( $form->is_custom_price( $post_data['give-amount'] ) ) {
1523	$new_price_id = 'custom';
1524	} else {
1525
1526	// Find correct donation level from all donation levels.
1527	foreach ( $variable_prices as $variable_price ) {
1528
1529	// Sanitize level amount.
1530	$variable_price['_give_amount'] = give_maybe_sanitize_amount( $variable_price['_give_amount'] );
1531
1532	// Set first match donation level ID.
1533	if ( $post_data['give-amount'] === $variable_price['_give_amount'] ) {
1534	$new_price_id = $variable_price['_give_id']['level_id'];
1535	break;
1536	}
1537	}
1538	}
1539
1540	// If donation amount is not find in donation levels then check if form has custom donation feature enable or not.
1541	// If yes then set price id to custom if amount is greater then custom minimum amount (if any).
1542	if ( $post_data['give-price-id'] === $new_price_id ) {
1543	$donation_level_matched = true;
1544	}
1545	} // End if().
1546
1547	if ( ! $donation_level_matched ) {
1548	give_set_error(
1549	'invalid_donation_amount',
1550	sprintf(
1551	/* translators: %s: invalid donation amount */
1552	__( 'Donation amount %s is invalid.', 'give' ),
1553	give_currency_filter(
1554	give_format_amount( $post_data['give-amount'], [ 'sanitize' => false ] )
1555	)
1556	)
1557	);
1558	}
1559	}
1560
1561	add_action( 'give_checkout_error_checks', 'give_validate_donation_amount', 10, 1 );
1562
1563	/**
1564	* Validate Required Form Fields.
1565	*
1566	* @param int $form_id Form ID.
1567	*
1568	* @since 2.0
1569	*/
1570	function give_validate_required_form_fields( $form_id ) {
1571	// Sanitize values submitted with donation form.
1572	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
1573	$requiredFormFields = give_get_required_fields( $form_id );
1574
1575	// Loop through required fields and show error messages.
1576	foreach ( $requiredFormFields as $field_name => $value ) {
1577	if ( empty( $post_data[ $field_name ] ) ) {
1578	give_set_error( $value['error_id'], $value['error_message'] );
1579	}
1580	}
1581	}
1582
1583	/**
1584	* Validates and checks if name fields are valid or not.
1585	*
1586	* @param array $post_data List of post data.
1587	*
1588	* @since 2.1
1589	*
1590	* @return void
1591	*/
1592	function give_donation_form_validate_name_fields( $post_data ) {
1593
1594	$is_alpha_first_name = ( ! is_email( $post_data['give_first'] ) && ! preg_match( '~[0-9]~', $post_data['give_first'] ) );
1595	$is_alpha_last_name = ( ! is_email( $post_data['give_last'] ) && ! preg_match( '~[0-9]~', $post_data['give_last'] ) );
1596
1597	if ( ! $is_alpha_first_name \|\| ( ! empty( $post_data['give_last'] ) && ! $is_alpha_last_name ) ) {
1598	give_set_error( 'invalid_name', esc_html__( 'The First Name and Last Name fields cannot contain an email address or numbers.', 'give' ) );
1599	}
1600	}
1601