| 1 |
<?php |
| 2 |
/** |
| 3 |
* Process Donation |
| 4 |
* |
| 5 |
* @package Give |
| 6 |
* @subpackage Functions |
| 7 |
* @copyright Copyright (c) 2016, GiveWP |
| 8 |
* @license https://opensource.org/licenses/gpl-license GNU Public License |
| 9 |
* @since 1.0 |
| 10 |
*/ |
| 11 |
|
| 12 |
// Exit if accessed directly. |
| 13 |
if ( ! defined( 'ABSPATH' ) ) { |
| 14 |
exit; |
| 15 |
} |
| 16 |
|
| 17 |
/** |
| 18 |
* Process Donation Form |
| 19 |
* |
| 20 |
* Handles the donation form process. |
| 21 |
* |
| 22 |
* @access private |
| 23 |
* @since 1.0 |
| 24 |
* |
| 25 |
* @throws ReflectionException Exception Handling. |
| 26 |
* |
| 27 |
* @return mixed |
| 28 |
*/ |
| 29 |
function give_process_donation_form() { |
| 30 |
|
| 31 |
// Sanitize Posted Data. |
| 32 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, CSRF ok. |
| 33 |
|
| 34 |
// Check whether the form submitted via AJAX or not. |
| 35 |
$is_ajax = isset( $post_data['give_ajax'] ); |
| 36 |
|
| 37 |
// Verify donation form nonce. |
| 38 |
if ( ! give_verify_donation_form_nonce( $post_data['give-form-hash'], $post_data['give-form-id'] ) ) { |
| 39 |
if ( $is_ajax ) { |
| 40 |
/** |
| 41 |
* Fires when AJAX sends back errors from the donation form. |
| 42 |
* |
| 43 |
* @since 1.0 |
| 44 |
*/ |
| 45 |
do_action( 'give_ajax_donation_errors' ); |
| 46 |
give_die(); |
| 47 |
} else { |
| 48 |
give_send_back_to_checkout(); |
| 49 |
} |
| 50 |
} |
| 51 |
|
| 52 |
/** |
| 53 |
* Fires before processing the donation form. |
| 54 |
* |
| 55 |
* @since 1.0 |
| 56 |
*/ |
| 57 |
do_action( 'give_pre_process_donation' ); |
| 58 |
|
| 59 |
// Validate the form $_POST data. |
| 60 |
$valid_data = give_donation_form_validate_fields(); |
| 61 |
|
| 62 |
/** |
| 63 |
* Fires after validating donation form fields. |
| 64 |
* |
| 65 |
* Allow you to hook to donation form errors. |
| 66 |
* |
| 67 |
* @since 1.0 |
| 68 |
* |
| 69 |
* @param bool|array $valid_data Validate fields. |
| 70 |
* @param array $deprecated Deprecated Since 2.0.2. Use $_POST instead. |
| 71 |
*/ |
| 72 |
$deprecated = $post_data; |
| 73 |
do_action( 'give_checkout_error_checks', $valid_data, $deprecated ); |
| 74 |
|
| 75 |
// Process the login form. |
| 76 |
if ( isset( $post_data['give_login_submit'] ) ) { |
| 77 |
give_process_form_login(); |
| 78 |
} |
| 79 |
|
| 80 |
// Validate the user. |
| 81 |
$user = give_get_donation_form_user( $valid_data ); |
| 82 |
|
| 83 |
if ( false === $valid_data || ! $user || give_get_errors() ) { |
| 84 |
if ( $is_ajax ) { |
| 85 |
/** |
| 86 |
* Fires when AJAX sends back errors from the donation form. |
| 87 |
* |
| 88 |
* @since 1.0 |
| 89 |
*/ |
| 90 |
do_action( 'give_ajax_donation_errors' ); |
| 91 |
give_die(); |
| 92 |
} else { |
| 93 |
return false; |
| 94 |
} |
| 95 |
} |
| 96 |
|
| 97 |
// If AJAX send back success to proceed with form submission. |
| 98 |
if ( $is_ajax ) { |
| 99 |
echo 'success'; |
| 100 |
give_die(); |
| 101 |
} |
| 102 |
|
| 103 |
/** |
| 104 |
* Fires action after donation form field validated. |
| 105 |
* |
| 106 |
* @since 2.2.0 |
| 107 |
*/ |
| 108 |
do_action( 'give_process_donation_after_validation' ); |
| 109 |
|
| 110 |
// Setup user information. |
| 111 |
$user_info = [ |
| 112 |
'id' => $user['user_id'], |
| 113 |
'title' => $user['user_title'], |
| 114 |
'email' => $user['user_email'], |
| 115 |
'first_name' => $user['user_first'], |
| 116 |
'last_name' => $user['user_last'], |
| 117 |
'address' => $user['address'], |
| 118 |
]; |
| 119 |
|
| 120 |
$auth_key = defined( 'AUTH_KEY' ) ? AUTH_KEY : ''; |
| 121 |
|
| 122 |
// Donation form ID. |
| 123 |
$form_id = isset( $post_data['give-form-id'] ) ? absint( $post_data['give-form-id'] ) : 0; |
| 124 |
|
| 125 |
$price = isset( $post_data['give-amount'] ) ? |
| 126 |
(float) apply_filters( 'give_donation_total', give_maybe_sanitize_amount( $post_data['give-amount'], [ 'currency' => give_get_currency( $form_id ) ] ) ) : |
| 127 |
'0.00'; |
| 128 |
$purchase_key = strtolower( md5( $user['user_email'] . date( 'Y-m-d H:i:s' ) . $auth_key . uniqid( 'give', true ) ) ); |
| 129 |
|
| 130 |
/** |
| 131 |
* Update donation Purchase key. |
| 132 |
* |
| 133 |
* Use this filter to update default donation purchase key |
| 134 |
* and add prefix in Invoice. |
| 135 |
* |
| 136 |
* @since 2.2.4 |
| 137 |
* |
| 138 |
* @param string $purchase_key |
| 139 |
* @param string $gateway |
| 140 |
* @param string $purchase_key |
| 141 |
* |
| 142 |
* @return string $purchase_key |
| 143 |
*/ |
| 144 |
$purchase_key = apply_filters( |
| 145 |
'give_donation_purchase_key', |
| 146 |
$purchase_key, |
| 147 |
$valid_data['gateway'], |
| 148 |
// Use this purchase key value if you want to generate custom donation purchase key |
| 149 |
// because donation purchase key editable by filters and you may get unedited donation purchase key. |
| 150 |
$purchase_key |
| 151 |
); |
| 152 |
|
| 153 |
// Setup donation information. |
| 154 |
$donation_data = [ |
| 155 |
'price' => $price, |
| 156 |
'purchase_key' => $purchase_key, |
| 157 |
'user_email' => $user['user_email'], |
| 158 |
'date' => date( 'Y-m-d H:i:s', current_time( 'timestamp' ) ), |
| 159 |
'user_info' => stripslashes_deep( $user_info ), |
| 160 |
'post_data' => $post_data, |
| 161 |
'gateway' => $valid_data['gateway'], |
| 162 |
'card_info' => $valid_data['cc_info'], |
| 163 |
]; |
| 164 |
|
| 165 |
// Add the user data for hooks. |
| 166 |
$valid_data['user'] = $user; |
| 167 |
|
| 168 |
/** |
| 169 |
* Fires before donation form gateway. |
| 170 |
* |
| 171 |
* Allow you to hook to donation form before the gateway. |
| 172 |
* |
| 173 |
* @since 1.0 |
| 174 |
* |
| 175 |
* @param array $post_data Array of variables passed via the HTTP POST. |
| 176 |
* @param array $user_info Array containing basic user information. |
| 177 |
* @param bool|array $valid_data Validate fields. |
| 178 |
*/ |
| 179 |
do_action( 'give_checkout_before_gateway', $post_data, $user_info, $valid_data ); |
| 180 |
|
| 181 |
// Sanity check for price. |
| 182 |
if ( ! $donation_data['price'] ) { |
| 183 |
// Revert to manual. |
| 184 |
$donation_data['gateway'] = 'manual'; |
| 185 |
$_POST['give-gateway'] = 'manual'; |
| 186 |
} |
| 187 |
|
| 188 |
/** |
| 189 |
* Allow the donation data to be modified before it is sent to the gateway. |
| 190 |
* |
| 191 |
* @since 1.7 |
| 192 |
*/ |
| 193 |
$donation_data = apply_filters( 'give_donation_data_before_gateway', $donation_data, $valid_data ); |
| 194 |
|
| 195 |
// Setup the data we're storing in the donation session. |
| 196 |
$session_data = $donation_data; |
| 197 |
|
| 198 |
// Make sure credit card numbers are never stored in sessions. |
| 199 |
unset( $session_data['card_info']['card_number'] ); |
| 200 |
unset( $session_data['post_data']['card_number'] ); |
| 201 |
|
| 202 |
// Used for showing data to non logged-in users after donation, and for other plugins needing donation data. |
| 203 |
give_set_purchase_session( $session_data ); |
| 204 |
|
| 205 |
/** |
| 206 |
* Prevent PHP notices from breaking receipt display. |
| 207 |
* This is specifically an issue with the Stripe SDK. |
| 208 |
* |
| 209 |
* @link https://github.com/impress-org/givewp/issues/5199 |
| 210 |
*/ |
| 211 |
ob_start(); |
| 212 |
// Send info to the gateway for payment processing. |
| 213 |
give_send_to_gateway( $donation_data['gateway'], $donation_data ); |
| 214 |
ob_get_clean(); |
| 215 |
give_die(); |
| 216 |
} |
| 217 |
|
| 218 |
add_action( 'give_purchase', 'give_process_donation_form' ); |
| 219 |
add_action( 'wp_ajax_give_process_donation', 'give_process_donation_form' ); |
| 220 |
add_action( 'wp_ajax_nopriv_give_process_donation', 'give_process_donation_form' ); |
| 221 |
|
| 222 |
/** |
| 223 |
* Verify that when a logged in user makes a donation that the email address used doesn't belong to a different customer. |
| 224 |
* Note: only for internal use |
| 225 |
* |
| 226 |
* @see https://github.com/impress-org/give/issues/4025 |
| 227 |
* |
| 228 |
* @since 1.7 |
| 229 |
* @since 2.4.2 This function runs independently instead of give_checkout_error_checks hook and also edit donor email. |
| 230 |
* |
| 231 |
* @param array $valid_data Validated data submitted for the donation. |
| 232 |
* |
| 233 |
* @return void |
| 234 |
*/ |
| 235 |
function give_check_logged_in_user_for_existing_email( &$valid_data ) { |
| 236 |
|
| 237 |
// Verify that the email address belongs to this donor. |
| 238 |
if ( is_user_logged_in() ) { |
| 239 |
|
| 240 |
$donor = new Give_Donor( get_current_user_id(), true ); |
| 241 |
|
| 242 |
// Bailout: check if wp user is existing donor or not. |
| 243 |
if ( ! $donor->id ) { |
| 244 |
return; |
| 245 |
} |
| 246 |
|
| 247 |
$submitted_email = strtolower( $valid_data['user_email'] ); |
| 248 |
|
| 249 |
$donor_emails = array_map( 'strtolower', $donor->emails ); |
| 250 |
$email_index = array_search( $submitted_email, $donor_emails, true ); |
| 251 |
|
| 252 |
// If donor matched with email then return set formatted email from database. |
| 253 |
if ( false !== $email_index ) { |
| 254 |
$valid_data['user_email'] = $donor->emails[ $email_index ]; |
| 255 |
|
| 256 |
return; |
| 257 |
} |
| 258 |
|
| 259 |
// If this email address is not registered with this customer, see if it belongs to any other customer. |
| 260 |
$found_donor = new Give_Donor( $submitted_email ); |
| 261 |
|
| 262 |
if ( $found_donor->id > 0 ) { |
| 263 |
give_set_error( |
| 264 |
'give-customer-email-exists', |
| 265 |
sprintf( |
| 266 |
/* translators: 1. Donor Email, 2. Submitted Email */ |
| 267 |
__( 'You are logged in as %1$s, and are submitting a donation as %2$s, which is an existing donor. To ensure that the email address is tied to the correct donor, please submit this donation from a logged-out browser, or choose another email address.', 'give' ), |
| 268 |
$donor->email, |
| 269 |
$submitted_email |
| 270 |
) |
| 271 |
); |
| 272 |
} |
| 273 |
} |
| 274 |
} |
| 275 |
|
| 276 |
/** |
| 277 |
* Process the checkout login form |
| 278 |
* |
| 279 |
* @access private |
| 280 |
* @since 1.0 |
| 281 |
* |
| 282 |
* @return void |
| 283 |
*/ |
| 284 |
function give_process_form_login() { |
| 285 |
|
| 286 |
$is_ajax = ! empty( $_POST['give_ajax'] ) ? give_clean( $_POST['give_ajax'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok. |
| 287 |
$referrer = wp_get_referer(); |
| 288 |
$user_data = give_donation_form_validate_user_login(); |
| 289 |
|
| 290 |
if ( give_get_errors() || $user_data['user_id'] < 1 ) { |
| 291 |
if ( $is_ajax ) { |
| 292 |
/** |
| 293 |
* Fires when AJAX sends back errors from the donation form. |
| 294 |
* |
| 295 |
* @since 1.0 |
| 296 |
*/ |
| 297 |
ob_start(); |
| 298 |
do_action( 'give_ajax_donation_errors' ); |
| 299 |
$message = ob_get_contents(); |
| 300 |
ob_end_clean(); |
| 301 |
wp_send_json_error( $message ); |
| 302 |
} else { |
| 303 |
wp_safe_redirect( $referrer ); |
| 304 |
exit; |
| 305 |
} |
| 306 |
} |
| 307 |
|
| 308 |
give_log_user_in( $user_data['user_id'], $user_data['user_login'], $user_data['user_pass'] ); |
| 309 |
|
| 310 |
if ( $is_ajax ) { |
| 311 |
$message = Give_Notices::print_frontend_notice( |
| 312 |
sprintf( |
| 313 |
/* translators: %s: user first name */ |
| 314 |
esc_html__( 'Welcome %s! You have successfully logged into your account.', 'give' ), |
| 315 |
( ! empty( $user_data['user_first'] ) ) ? $user_data['user_first'] : $user_data['user_login'] |
| 316 |
), |
| 317 |
false, |
| 318 |
'success' |
| 319 |
); |
| 320 |
|
| 321 |
wp_send_json_success( $message ); |
| 322 |
} else { |
| 323 |
wp_safe_redirect( $referrer ); |
| 324 |
} |
| 325 |
} |
| 326 |
|
| 327 |
add_action( 'wp_ajax_give_process_donation_login', 'give_process_form_login' ); |
| 328 |
add_action( 'wp_ajax_nopriv_give_process_donation_login', 'give_process_form_login' ); |
| 329 |
|
| 330 |
/** |
| 331 |
* Donation Form Validate Fields. |
| 332 |
* |
| 333 |
* @access private |
| 334 |
* @since 1.0 |
| 335 |
* |
| 336 |
* @return bool|array |
| 337 |
*/ |
| 338 |
function give_donation_form_validate_fields() { |
| 339 |
|
| 340 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 341 |
|
| 342 |
// Validate Honeypot First. |
| 343 |
if ( ! empty( $post_data['give-honeypot'] ) ) { |
| 344 |
give_set_error( 'invalid_honeypot', esc_html__( 'Honeypot field detected. Go away bad bot!', 'give' ) ); |
| 345 |
} |
| 346 |
|
| 347 |
// Check spam detect. |
| 348 |
if ( |
| 349 |
isset( $post_data['action'] ) |
| 350 |
&& give_is_spam_donation() |
| 351 |
) { |
| 352 |
give_set_error( 'spam_donation', __( 'The email you are using has been flagged as one used in SPAM comments or donations by our system. Please try using a different email address or contact the site administrator if you have any questions.', 'give' ) ); |
| 353 |
} |
| 354 |
|
| 355 |
// Start an array to collect valid data. |
| 356 |
$valid_data = [ |
| 357 |
'gateway' => give_donation_form_validate_gateway(), // Gateway fallback (amount is validated here). |
| 358 |
'need_new_user' => false, // New user flag. |
| 359 |
'need_user_login' => false, // Login user flag. |
| 360 |
'logged_user_data' => [], // Logged user collected data. |
| 361 |
'new_user_data' => [], // New user collected data. |
| 362 |
'login_user_data' => [], // Login user collected data. |
| 363 |
'guest_user_data' => [], // Guest user collected data. |
| 364 |
'cc_info' => give_donation_form_validate_cc(), // Credit card info. |
| 365 |
]; |
| 366 |
|
| 367 |
$form_id = (int) $post_data['give-form-id']; |
| 368 |
|
| 369 |
// Validate agree to terms. |
| 370 |
if ( give_is_terms_enabled( $form_id ) ) { |
| 371 |
give_donation_form_validate_agree_to_terms(); |
| 372 |
} |
| 373 |
|
| 374 |
if ( is_user_logged_in() ) { |
| 375 |
|
| 376 |
// Collect logged in user data. |
| 377 |
$valid_data['logged_in_user'] = give_donation_form_validate_logged_in_user(); |
| 378 |
} elseif ( |
| 379 |
isset( $post_data['give-purchase-var'] ) |
| 380 |
&& 'needs-to-register' === $post_data['give-purchase-var'] |
| 381 |
&& ! empty( $post_data['give_create_account'] ) |
| 382 |
) { |
| 383 |
|
| 384 |
// Set new user registration as required. |
| 385 |
$valid_data['need_new_user'] = true; |
| 386 |
|
| 387 |
// Validate new user data. |
| 388 |
$valid_data['new_user_data'] = give_donation_form_validate_new_user(); |
| 389 |
} elseif ( |
| 390 |
isset( $post_data['give-purchase-var'] ) |
| 391 |
&& 'needs-to-login' === $post_data['give-purchase-var'] |
| 392 |
) { |
| 393 |
|
| 394 |
// Set user login as required. |
| 395 |
$valid_data['need_user_login'] = true; |
| 396 |
|
| 397 |
// Validate users login info. |
| 398 |
$valid_data['login_user_data'] = give_donation_form_validate_user_login(); |
| 399 |
} else { |
| 400 |
|
| 401 |
// Not registering or logging in, so setup guest user data. |
| 402 |
$valid_data['guest_user_data'] = give_donation_form_validate_guest_user(); |
| 403 |
} |
| 404 |
|
| 405 |
// Return collected data. |
| 406 |
return $valid_data; |
| 407 |
} |
| 408 |
|
| 409 |
/** |
| 410 |
* Detect spam donation. |
| 411 |
* |
| 412 |
* @since 1.8.14 |
| 413 |
* |
| 414 |
* @return bool|mixed |
| 415 |
*/ |
| 416 |
function give_is_spam_donation() { |
| 417 |
$spam = false; |
| 418 |
|
| 419 |
$user_agent = (string) isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT'] : ''; |
| 420 |
|
| 421 |
if ( strlen( $user_agent ) < 2 ) { |
| 422 |
$spam = true; |
| 423 |
} |
| 424 |
|
| 425 |
// Allow developer to customized Akismet spam detect API call and it's response. |
| 426 |
return apply_filters( 'give_spam', $spam ); |
| 427 |
} |
| 428 |
|
| 429 |
/** |
| 430 |
* Donation Form Validate Gateway |
| 431 |
* |
| 432 |
* Validate the gateway and donation amount. |
| 433 |
* |
| 434 |
* @access private |
| 435 |
* @since 1.0 |
| 436 |
* |
| 437 |
* @return string |
| 438 |
*/ |
| 439 |
function give_donation_form_validate_gateway() { |
| 440 |
|
| 441 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 442 |
$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0; |
| 443 |
$amount = ! empty( $post_data['give-amount'] ) ? give_maybe_sanitize_amount( $post_data['give-amount'] ) : 0; |
| 444 |
$gateway = ! empty( $post_data['give-gateway'] ) ? $post_data['give-gateway'] : 0; |
| 445 |
|
| 446 |
// Bailout, if payment gateway is not submitted with donation form data. |
| 447 |
if ( empty( $gateway ) ) { |
| 448 |
|
| 449 |
give_set_error( 'empty_gateway', __( 'The donation form will process with a valid payment gateway.', 'give' ) ); |
| 450 |
|
| 451 |
} elseif ( ! give_is_gateway_active( $gateway ) ) { |
| 452 |
|
| 453 |
give_set_error( 'invalid_gateway', __( 'The selected payment gateway is not enabled.', 'give' ) ); |
| 454 |
|
| 455 |
} elseif ( empty( $amount ) ) { |
| 456 |
|
| 457 |
give_set_error( 'invalid_donation_amount', __( 'Please insert a valid donation amount.', 'give' ) ); |
| 458 |
|
| 459 |
} elseif ( ! give_verify_minimum_price( 'minimum' ) ) { |
| 460 |
|
| 461 |
give_set_error( |
| 462 |
'invalid_donation_minimum', |
| 463 |
sprintf( |
| 464 |
/* translators: %s: minimum donation amount */ |
| 465 |
__( 'This form has a minimum donation amount of %s.', 'give' ), |
| 466 |
give_currency_filter( |
| 467 |
give_format_amount( |
| 468 |
give_get_form_minimum_price( $form_id ), |
| 469 |
[ |
| 470 |
'sanitize' => false, |
| 471 |
] |
| 472 |
) |
| 473 |
) |
| 474 |
) |
| 475 |
); |
| 476 |
} elseif ( ! give_verify_minimum_price( 'maximum' ) ) { |
| 477 |
|
| 478 |
give_set_error( |
| 479 |
'invalid_donation_maximum', |
| 480 |
sprintf( |
| 481 |
/* translators: %s: Maximum donation amount */ |
| 482 |
__( 'This form has a maximum donation amount of %s.', 'give' ), |
| 483 |
give_currency_filter( |
| 484 |
give_format_amount( |
| 485 |
give_get_form_maximum_price( $form_id ), |
| 486 |
[ |
| 487 |
'sanitize' => false, |
| 488 |
] |
| 489 |
) |
| 490 |
) |
| 491 |
) |
| 492 |
); |
| 493 |
} // End if(). |
| 494 |
|
| 495 |
return $gateway; |
| 496 |
|
| 497 |
} |
| 498 |
|
| 499 |
/** |
| 500 |
* Donation Form Validate Minimum or Maximum Donation Amount |
| 501 |
* |
| 502 |
* @access private |
| 503 |
* @since 1.3.6 |
| 504 |
* @since 2.1 Added support for give maximum amount. |
| 505 |
* @since 2.1.3 Added new filter to modify the return value. |
| 506 |
* |
| 507 |
* @param string $amount_range Which amount needs to verify? minimum or maximum. |
| 508 |
* |
| 509 |
* @return bool |
| 510 |
*/ |
| 511 |
function give_verify_minimum_price( $amount_range = 'minimum' ) { |
| 512 |
|
| 513 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 514 |
$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0; |
| 515 |
$amount = ! empty( $post_data['give-amount'] ) ? give_maybe_sanitize_amount( $post_data['give-amount'], [ 'currency' => give_get_currency( $form_id ) ] ) : 0; |
| 516 |
$price_id = isset( $post_data['give-price-id'] ) ? absint( $post_data['give-price-id'] ) : ''; |
| 517 |
|
| 518 |
$variable_prices = give_has_variable_prices( $form_id ); |
| 519 |
$price_ids = array_map( 'absint', give_get_variable_price_ids( $form_id ) ); |
| 520 |
$verified_stat = false; |
| 521 |
|
| 522 |
if ( $variable_prices && in_array( $price_id, $price_ids, true ) ) { |
| 523 |
|
| 524 |
$price_level_amount = give_get_price_option_amount( $form_id, $price_id ); |
| 525 |
|
| 526 |
if ( $price_level_amount == $amount ) { |
| 527 |
$verified_stat = true; |
| 528 |
} |
| 529 |
} |
| 530 |
|
| 531 |
if ( ! $verified_stat ) { |
| 532 |
switch ( $amount_range ) { |
| 533 |
case 'minimum': |
| 534 |
$verified_stat = ( give_get_form_minimum_price( $form_id ) > $amount ) ? false : true; |
| 535 |
break; |
| 536 |
case 'maximum': |
| 537 |
$verified_stat = ( give_get_form_maximum_price( $form_id ) < $amount ) ? false : true; |
| 538 |
break; |
| 539 |
} |
| 540 |
} |
| 541 |
|
| 542 |
/** |
| 543 |
* Filter the verify amount |
| 544 |
* |
| 545 |
* @since 2.1.3 |
| 546 |
* |
| 547 |
* @param bool $verified_stat Was verification passed or not? |
| 548 |
* @param string $amount_range Type of the amount. |
| 549 |
* @param integer $form_id Give Donation Form ID. |
| 550 |
*/ |
| 551 |
return apply_filters( 'give_verify_minimum_maximum_price', $verified_stat, $amount_range, $form_id ); |
| 552 |
} |
| 553 |
|
| 554 |
/** |
| 555 |
* Donation form validate agree to "Terms and Conditions". |
| 556 |
* |
| 557 |
* @access private |
| 558 |
* @since 1.0 |
| 559 |
* |
| 560 |
* @return void |
| 561 |
*/ |
| 562 |
function give_donation_form_validate_agree_to_terms() { |
| 563 |
|
| 564 |
$agree_to_terms = ! empty( $_POST['give_agree_to_terms'] ) ? give_clean( $_POST['give_agree_to_terms'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok. |
| 565 |
|
| 566 |
// Proceed only, if donor agreed to terms. |
| 567 |
if ( ! $agree_to_terms ) { |
| 568 |
|
| 569 |
// User did not agree. |
| 570 |
give_set_error( 'agree_to_terms', apply_filters( 'give_agree_to_terms_text', __( 'You must agree to the terms and conditions.', 'give' ) ) ); |
| 571 |
} |
| 572 |
} |
| 573 |
|
| 574 |
/** |
| 575 |
* Donation Form Required Fields. |
| 576 |
* |
| 577 |
* @access private |
| 578 |
* @since 1.0 |
| 579 |
* |
| 580 |
* @param int $form_id Donation Form ID. |
| 581 |
* |
| 582 |
* @return array |
| 583 |
*/ |
| 584 |
function give_get_required_fields( $form_id ) { |
| 585 |
|
| 586 |
$posted_data = give_clean( filter_input_array( INPUT_POST ) ); |
| 587 |
$payment_mode = give_get_chosen_gateway( $form_id ); |
| 588 |
|
| 589 |
$required_fields = [ |
| 590 |
'give_email' => [ |
| 591 |
'error_id' => 'invalid_email', |
| 592 |
'error_message' => __( 'Please enter a valid email address.', 'give' ), |
| 593 |
], |
| 594 |
'give_first' => [ |
| 595 |
'error_id' => 'invalid_first_name', |
| 596 |
'error_message' => __( 'Please enter your first name.', 'give' ), |
| 597 |
], |
| 598 |
]; |
| 599 |
|
| 600 |
$name_title_prefix = give_is_name_title_prefix_required( $form_id ); |
| 601 |
if ( $name_title_prefix ) { |
| 602 |
$required_fields['give_title'] = [ |
| 603 |
'error_id' => 'invalid_title', |
| 604 |
'error_message' => __( 'Please enter your title.', 'give' ), |
| 605 |
]; |
| 606 |
} |
| 607 |
|
| 608 |
// If credit card fields related actions exists then check for the cc fields validations. |
| 609 |
if ( |
| 610 |
has_action( "give_{$payment_mode}_cc_form", 'give_get_cc_form' ) || |
| 611 |
has_action( 'give_cc_form', 'give_get_cc_form' ) |
| 612 |
) { |
| 613 |
|
| 614 |
// Validate card number field for empty check. |
| 615 |
if ( |
| 616 |
isset( $posted_data['card_number'] ) && |
| 617 |
empty( $posted_data['card_number'] ) |
| 618 |
) { |
| 619 |
$required_fields['card_number'] = [ |
| 620 |
'error_id' => 'empty_card_number', |
| 621 |
'error_message' => __( 'Please enter a credit card number.', 'give' ), |
| 622 |
]; |
| 623 |
} |
| 624 |
|
| 625 |
// Validate card cvc field for empty check. |
| 626 |
if ( |
| 627 |
isset( $posted_data['card_cvc'] ) && |
| 628 |
empty( $posted_data['card_cvc'] ) |
| 629 |
) { |
| 630 |
$required_fields['card_cvc'] = [ |
| 631 |
'error_id' => 'empty_card_cvc', |
| 632 |
'error_message' => __( 'Please enter a credit card CVC information.', 'give' ), |
| 633 |
]; |
| 634 |
} |
| 635 |
|
| 636 |
// Validate card name field for empty check. |
| 637 |
if ( |
| 638 |
( |
| 639 |
isset( $posted_data['give_validate_stripe_payment_fields'] ) && |
| 640 |
'1' === $posted_data['give_validate_stripe_payment_fields'] && |
| 641 |
isset( $posted_data['card_name'] ) && |
| 642 |
empty( $posted_data['card_name'] ) |
| 643 |
) || |
| 644 |
( |
| 645 |
! isset( $posted_data['give_validate_stripe_payment_fields'] ) && |
| 646 |
isset( $posted_data['card_name'] ) && |
| 647 |
empty( $posted_data['card_name'] ) |
| 648 |
) |
| 649 |
) { |
| 650 |
$required_fields['card_name'] = [ |
| 651 |
'error_id' => 'empty_card_name', |
| 652 |
'error_message' => __( 'Please enter a name of your credit card account holder.', 'give' ), |
| 653 |
]; |
| 654 |
} |
| 655 |
|
| 656 |
// Validate card expiry field for empty check. |
| 657 |
if ( |
| 658 |
isset( $posted_data['card_expiry'] ) && |
| 659 |
empty( $posted_data['card_expiry'] ) |
| 660 |
) { |
| 661 |
$required_fields['card_expiry'] = [ |
| 662 |
'error_id' => 'empty_card_expiry', |
| 663 |
'error_message' => __( 'Please enter a credit card expiry date.', 'give' ), |
| 664 |
]; |
| 665 |
} |
| 666 |
} |
| 667 |
|
| 668 |
$require_address = give_require_billing_address( $payment_mode ); |
| 669 |
|
| 670 |
if ( $require_address ) { |
| 671 |
$required_fields['card_address'] = [ |
| 672 |
'error_id' => 'invalid_card_address', |
| 673 |
'error_message' => __( 'Please enter your primary billing address.', 'give' ), |
| 674 |
]; |
| 675 |
$required_fields['card_zip'] = [ |
| 676 |
'error_id' => 'invalid_zip_code', |
| 677 |
'error_message' => __( 'Please enter your zip / postal code.', 'give' ), |
| 678 |
]; |
| 679 |
$required_fields['card_city'] = [ |
| 680 |
'error_id' => 'invalid_city', |
| 681 |
'error_message' => __( 'Please enter your billing city.', 'give' ), |
| 682 |
]; |
| 683 |
$required_fields['billing_country'] = [ |
| 684 |
'error_id' => 'invalid_country', |
| 685 |
'error_message' => __( 'Please select your billing country.', 'give' ), |
| 686 |
]; |
| 687 |
|
| 688 |
$required_fields['card_state'] = [ |
| 689 |
'error_id' => 'invalid_state', |
| 690 |
'error_message' => __( 'Please enter billing state / province / County.', 'give' ), |
| 691 |
]; |
| 692 |
|
| 693 |
$country = ! empty( $_POST['billing_country'] ) ? give_clean( $_POST['billing_country'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok. |
| 694 |
|
| 695 |
// Check if billing country already exists. |
| 696 |
if ( $country ) { |
| 697 |
|
| 698 |
// Check if states is empty or not. |
| 699 |
if ( array_key_exists( $country, give_states_not_required_country_list() ) ) { |
| 700 |
// If states is empty remove the required fields of state in billing cart. |
| 701 |
unset( $required_fields['card_state'] ); |
| 702 |
} |
| 703 |
|
| 704 |
// Check if city is empty or not. |
| 705 |
if ( array_key_exists( $country, give_city_not_required_country_list() ) ) { |
| 706 |
// If states is empty remove the required fields of city in billing cart. |
| 707 |
unset( $required_fields['card_city'] ); |
| 708 |
} |
| 709 |
|
| 710 |
// Check if country is without post codes. |
| 711 |
if ( array_key_exists( $country, give_get_country_list_without_postcodes() ) ) { |
| 712 |
// If country is on the list, zip code is not required. |
| 713 |
unset( $required_fields['card_zip'] ); |
| 714 |
} |
| 715 |
} |
| 716 |
} // End if(). |
| 717 |
|
| 718 |
if ( give_is_company_field_enabled( $form_id ) ) { |
| 719 |
$form_option = give_get_meta( $form_id, '_give_company_field', true ); |
| 720 |
$global_setting = give_get_option( 'company_field' ); |
| 721 |
|
| 722 |
$is_company_field_required = false; |
| 723 |
|
| 724 |
if ( ! empty( $form_option ) && give_is_setting_enabled( $form_option, [ 'required' ] ) ) { |
| 725 |
$is_company_field_required = true; |
| 726 |
|
| 727 |
} elseif ( 'global' === $form_option && give_is_setting_enabled( $global_setting, [ 'required' ] ) ) { |
| 728 |
$is_company_field_required = true; |
| 729 |
|
| 730 |
} elseif ( empty( $form_option ) && give_is_setting_enabled( $global_setting, [ 'required' ] ) ) { |
| 731 |
$is_company_field_required = true; |
| 732 |
|
| 733 |
} |
| 734 |
|
| 735 |
if ( $is_company_field_required ) { |
| 736 |
$required_fields['give_company_name'] = [ |
| 737 |
'error_id' => 'invalid_company', |
| 738 |
'error_message' => __( 'Please enter Company Name.', 'give' ), |
| 739 |
]; |
| 740 |
} |
| 741 |
} |
| 742 |
|
| 743 |
if ( give_is_last_name_required( $form_id ) ) { |
| 744 |
$required_fields['give_last'] = [ |
| 745 |
'error_id' => 'invalid_last_name', |
| 746 |
'error_message' => __( 'Please enter your last name.', 'give' ), |
| 747 |
]; |
| 748 |
} |
| 749 |
|
| 750 |
/** |
| 751 |
* Filters the donation form required field. |
| 752 |
* |
| 753 |
* @since 1.7 |
| 754 |
*/ |
| 755 |
$required_fields = apply_filters( 'give_donation_form_required_fields', $required_fields, $form_id ); |
| 756 |
|
| 757 |
return $required_fields; |
| 758 |
|
| 759 |
} |
| 760 |
|
| 761 |
/** |
| 762 |
* Check if the Billing Address is required |
| 763 |
* |
| 764 |
* @since 1.0.1 |
| 765 |
* |
| 766 |
* @param string $payment_mode Payment Mode. |
| 767 |
* |
| 768 |
* @return bool |
| 769 |
*/ |
| 770 |
function give_require_billing_address( $payment_mode ) { |
| 771 |
|
| 772 |
$return = false; |
| 773 |
$billing_country = ! empty( $_POST['billing_country'] ) ? give_clean( $_POST['billing_country'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok. |
| 774 |
|
| 775 |
if ( $billing_country || did_action( "give_{$payment_mode}_cc_form" ) || did_action( 'give_cc_form' ) ) { |
| 776 |
$return = true; |
| 777 |
} |
| 778 |
|
| 779 |
// Let payment gateways and other extensions determine if address fields should be required. |
| 780 |
return apply_filters( 'give_require_billing_address', $return ); |
| 781 |
|
| 782 |
} |
| 783 |
|
| 784 |
/** |
| 785 |
* Donation Form Validate Logged In User. |
| 786 |
* |
| 787 |
* @access private |
| 788 |
* @since 1.0 |
| 789 |
* |
| 790 |
* @return array |
| 791 |
*/ |
| 792 |
function give_donation_form_validate_logged_in_user() { |
| 793 |
|
| 794 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 795 |
$user_id = get_current_user_id(); |
| 796 |
$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0; |
| 797 |
|
| 798 |
// Start empty array to collect valid user data. |
| 799 |
$valid_user_data = [ |
| 800 |
|
| 801 |
// Assume there will be errors. |
| 802 |
'user_id' => - 1, |
| 803 |
]; |
| 804 |
|
| 805 |
// Proceed only, if valid $user_id found. |
| 806 |
if ( $user_id > 0 ) { |
| 807 |
|
| 808 |
// Get the logged in user data. |
| 809 |
$user_data = get_userdata( $user_id ); |
| 810 |
|
| 811 |
// Validate Required Form Fields. |
| 812 |
give_validate_required_form_fields( $form_id ); |
| 813 |
|
| 814 |
// Verify data. |
| 815 |
if ( is_object( $user_data ) && $user_data->ID > 0 ) { |
| 816 |
// Collected logged in user data. |
| 817 |
$valid_user_data = [ |
| 818 |
'user_id' => $user_id, |
| 819 |
'user_email' => ! empty( $post_data['give_email'] ) |
| 820 |
? sanitize_email( $post_data['give_email'] ) |
| 821 |
: $user_data->user_email, |
| 822 |
'user_first' => ! empty( $post_data['give_first'] ) |
| 823 |
? $post_data['give_first'] |
| 824 |
: $user_data->first_name, |
| 825 |
'user_last' => ! empty( $post_data['give_last'] ) |
| 826 |
? $post_data['give_last'] |
| 827 |
: $user_data->last_name, |
| 828 |
]; |
| 829 |
|
| 830 |
// Validate essential form fields. |
| 831 |
give_donation_form_validate_name_fields( $post_data ); |
| 832 |
|
| 833 |
give_check_logged_in_user_for_existing_email( $valid_user_data ); |
| 834 |
|
| 835 |
if ( ! is_email( $valid_user_data['user_email'] ) ) { |
| 836 |
give_set_error( 'email_invalid', esc_html__( 'Invalid email.', 'give' ) ); |
| 837 |
} |
| 838 |
} else { |
| 839 |
|
| 840 |
// Set invalid user information error. |
| 841 |
give_set_error( 'invalid_user', esc_html__( 'The user information is invalid.', 'give' ) ); |
| 842 |
} |
| 843 |
} |
| 844 |
|
| 845 |
// Return user data. |
| 846 |
return $valid_user_data; |
| 847 |
} |
| 848 |
|
| 849 |
/** |
| 850 |
* Donate Form Validate New User |
| 851 |
* |
| 852 |
* @access private |
| 853 |
* @since 1.0 |
| 854 |
* |
| 855 |
* @return array |
| 856 |
*/ |
| 857 |
function give_donation_form_validate_new_user() { |
| 858 |
// Default user data. |
| 859 |
$auto_generated_password = wp_generate_password(); |
| 860 |
$default_user_data = [ |
| 861 |
'give-form-id' => '', |
| 862 |
'user_id' => - 1, // Assume there will be errors. |
| 863 |
'user_first' => '', |
| 864 |
'user_last' => '', |
| 865 |
'give_user_login' => false, |
| 866 |
'give_email' => false, |
| 867 |
'give_user_pass' => $auto_generated_password, |
| 868 |
'give_user_pass_confirm' => $auto_generated_password, |
| 869 |
]; |
| 870 |
|
| 871 |
// Get data. |
| 872 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 873 |
$user_data = wp_parse_args( $post_data, $default_user_data ); |
| 874 |
|
| 875 |
$form_id = absint( $user_data['give-form-id'] ); |
| 876 |
$nonce = ! empty( $post_data['give-form-user-register-hash'] ) ? $post_data['give-form-user-register-hash'] : ''; |
| 877 |
|
| 878 |
// Validate user creation nonce. |
| 879 |
if ( ! wp_verify_nonce( $nonce, "give_form_create_user_nonce_{$form_id}" ) ) { |
| 880 |
give_set_error( 'invalid_nonce', __( 'We\'re unable to recognize your session. Please refresh the screen to try again; otherwise contact your website administrator for assistance.', 'give' ) ); |
| 881 |
} |
| 882 |
|
| 883 |
$registering_new_user = false; |
| 884 |
|
| 885 |
give_donation_form_validate_name_fields( $user_data ); |
| 886 |
|
| 887 |
// Start an empty array to collect valid user data. |
| 888 |
$valid_user_data = [ |
| 889 |
|
| 890 |
// Assume there will be errors. |
| 891 |
'user_id' => - 1, |
| 892 |
|
| 893 |
// Get first name. |
| 894 |
'user_first' => $user_data['give_first'], |
| 895 |
|
| 896 |
// Get last name. |
| 897 |
'user_last' => $user_data['give_last'], |
| 898 |
|
| 899 |
// Get Password. |
| 900 |
'user_pass' => $user_data['give_user_pass'], |
| 901 |
]; |
| 902 |
|
| 903 |
// Validate Required Form Fields. |
| 904 |
give_validate_required_form_fields( $form_id ); |
| 905 |
|
| 906 |
// Set Email as Username. |
| 907 |
$valid_user_data['user_login'] = $user_data['give_email']; |
| 908 |
|
| 909 |
// Check if we have an email to verify. |
| 910 |
if ( give_validate_user_email( $user_data['give_email'], $registering_new_user ) ) { |
| 911 |
$valid_user_data['user_email'] = $user_data['give_email']; |
| 912 |
} |
| 913 |
|
| 914 |
return $valid_user_data; |
| 915 |
} |
| 916 |
|
| 917 |
/** |
| 918 |
* Donation Form Validate User Login |
| 919 |
* |
| 920 |
* @access private |
| 921 |
* @since 1.0 |
| 922 |
* |
| 923 |
* @return array |
| 924 |
*/ |
| 925 |
function give_donation_form_validate_user_login() { |
| 926 |
|
| 927 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 928 |
|
| 929 |
// Start an array to collect valid user data. |
| 930 |
$valid_user_data = [ |
| 931 |
|
| 932 |
// Assume there will be errors. |
| 933 |
'user_id' => - 1, |
| 934 |
]; |
| 935 |
|
| 936 |
// Bailout, if Username is empty. |
| 937 |
if ( empty( $post_data['give_user_login'] ) ) { |
| 938 |
give_set_error( 'must_log_in', __( 'Please enter your username or email to log in.', 'give' ) ); |
| 939 |
|
| 940 |
return $valid_user_data; |
| 941 |
} |
| 942 |
|
| 943 |
$give_user_login = strip_tags( $post_data['give_user_login'] ); |
| 944 |
if ( is_email( $give_user_login ) ) { |
| 945 |
// Get the user data by email. |
| 946 |
$user_data = get_user_by( 'email', $give_user_login ); |
| 947 |
} else { |
| 948 |
// Get the user data by login. |
| 949 |
$user_data = get_user_by( 'login', $give_user_login ); |
| 950 |
} |
| 951 |
|
| 952 |
// Check if user exists. |
| 953 |
if ( $user_data ) { |
| 954 |
|
| 955 |
// Get password. |
| 956 |
$user_pass = ! empty( $post_data['give_user_pass'] ) ? $post_data['give_user_pass'] : false; |
| 957 |
|
| 958 |
// Check user_pass. |
| 959 |
if ( $user_pass ) { |
| 960 |
|
| 961 |
// Check if password is valid. |
| 962 |
if ( ! wp_check_password( $user_pass, $user_data->user_pass, $user_data->ID ) ) { |
| 963 |
|
| 964 |
$current_page_url = site_url() . '/' . get_page_uri(); |
| 965 |
|
| 966 |
// Incorrect password. |
| 967 |
give_set_error( |
| 968 |
'password_incorrect', |
| 969 |
sprintf( |
| 970 |
'%1$s <a href="%2$s">%3$s</a>', |
| 971 |
__( 'The password you entered is incorrect.', 'give' ), |
| 972 |
wp_lostpassword_url( $current_page_url ), |
| 973 |
__( 'Reset Password', 'give' ) |
| 974 |
) |
| 975 |
); |
| 976 |
|
| 977 |
} else { |
| 978 |
|
| 979 |
// Repopulate the valid user data array. |
| 980 |
$valid_user_data = [ |
| 981 |
'user_id' => $user_data->ID, |
| 982 |
'user_login' => $user_data->user_login, |
| 983 |
'user_email' => $user_data->user_email, |
| 984 |
'user_first' => $user_data->first_name, |
| 985 |
'user_last' => $user_data->last_name, |
| 986 |
'user_pass' => $user_pass, |
| 987 |
]; |
| 988 |
} |
| 989 |
} else { |
| 990 |
// Empty password. |
| 991 |
give_set_error( 'password_empty', __( 'Enter a password.', 'give' ) ); |
| 992 |
} |
| 993 |
} else { |
| 994 |
// No username. |
| 995 |
give_set_error( 'username_incorrect', __( 'The username you entered does not exist.', 'give' ) ); |
| 996 |
} // End if(). |
| 997 |
|
| 998 |
return $valid_user_data; |
| 999 |
} |
| 1000 |
|
| 1001 |
/** |
| 1002 |
* Donation Form Validate Guest User |
| 1003 |
* |
| 1004 |
* @access private |
| 1005 |
* @since 1.0 |
| 1006 |
* |
| 1007 |
* @return array |
| 1008 |
*/ |
| 1009 |
function give_donation_form_validate_guest_user() { |
| 1010 |
|
| 1011 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 1012 |
$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0; |
| 1013 |
|
| 1014 |
// Start an array to collect valid user data. |
| 1015 |
$valid_user_data = [ |
| 1016 |
// Set a default id for guests. |
| 1017 |
'user_id' => 0, |
| 1018 |
]; |
| 1019 |
|
| 1020 |
// Validate name fields. |
| 1021 |
give_donation_form_validate_name_fields( $post_data ); |
| 1022 |
|
| 1023 |
// Validate Required Form Fields. |
| 1024 |
give_validate_required_form_fields( $form_id ); |
| 1025 |
|
| 1026 |
// Get the guest email. |
| 1027 |
$guest_email = ! empty( $post_data['give_email'] ) ? $post_data['give_email'] : false; |
| 1028 |
|
| 1029 |
// Check email. |
| 1030 |
if ( $guest_email && strlen( $guest_email ) > 0 ) { |
| 1031 |
|
| 1032 |
// Validate email. |
| 1033 |
if ( ! is_email( $guest_email ) ) { |
| 1034 |
|
| 1035 |
// Invalid email. |
| 1036 |
give_set_error( 'email_invalid', __( 'Invalid email.', 'give' ) ); |
| 1037 |
|
| 1038 |
} else { |
| 1039 |
|
| 1040 |
// All is good to go. |
| 1041 |
$valid_user_data['user_email'] = $guest_email; |
| 1042 |
|
| 1043 |
// Get user_id from donor if exist. |
| 1044 |
$donor = new Give_Donor( $guest_email ); |
| 1045 |
|
| 1046 |
if ( $donor->id ) { |
| 1047 |
$donor_email_index = array_search( |
| 1048 |
strtolower( $guest_email ), |
| 1049 |
array_map( 'strtolower', $donor->emails ), |
| 1050 |
true |
| 1051 |
); |
| 1052 |
|
| 1053 |
$valid_user_data['user_id'] = $donor->user_id; |
| 1054 |
|
| 1055 |
// Set email to original format. |
| 1056 |
// @see https://github.com/impress-org/give/issues/4025 |
| 1057 |
$valid_user_data['user_email'] = $donor->emails[ $donor_email_index ]; |
| 1058 |
} |
| 1059 |
} |
| 1060 |
} else { |
| 1061 |
// No email. |
| 1062 |
give_set_error( 'email_empty', __( 'Enter an email.', 'give' ) ); |
| 1063 |
} |
| 1064 |
|
| 1065 |
return $valid_user_data; |
| 1066 |
} |
| 1067 |
|
| 1068 |
/** |
| 1069 |
* Register And Login New User |
| 1070 |
* |
| 1071 |
* @param array $user_data User Data. |
| 1072 |
* |
| 1073 |
* @access private |
| 1074 |
* @since 1.0 |
| 1075 |
* |
| 1076 |
* @return integer |
| 1077 |
*/ |
| 1078 |
function give_register_and_login_new_user( $user_data = [] ) { |
| 1079 |
// Verify the array. |
| 1080 |
if ( empty( $user_data ) ) { |
| 1081 |
return - 1; |
| 1082 |
} |
| 1083 |
|
| 1084 |
if ( give_get_errors() ) { |
| 1085 |
return - 1; |
| 1086 |
} |
| 1087 |
|
| 1088 |
$user_args = apply_filters( |
| 1089 |
'give_insert_user_args', |
| 1090 |
[ |
| 1091 |
'user_login' => isset( $user_data['user_login'] ) ? $user_data['user_login'] : '', |
| 1092 |
'user_pass' => isset( $user_data['user_pass'] ) ? $user_data['user_pass'] : '', |
| 1093 |
'user_email' => isset( $user_data['user_email'] ) ? $user_data['user_email'] : '', |
| 1094 |
'first_name' => isset( $user_data['user_first'] ) ? $user_data['user_first'] : '', |
| 1095 |
'last_name' => isset( $user_data['user_last'] ) ? $user_data['user_last'] : '', |
| 1096 |
'user_registered' => date( 'Y-m-d H:i:s' ), |
| 1097 |
'role' => give_get_option( 'donor_default_user_role', 'give_donor' ), |
| 1098 |
], |
| 1099 |
$user_data |
| 1100 |
); |
| 1101 |
|
| 1102 |
// Insert new user. |
| 1103 |
$user_id = wp_insert_user( $user_args ); |
| 1104 |
|
| 1105 |
// Validate inserted user. |
| 1106 |
if ( is_wp_error( $user_id ) ) { |
| 1107 |
return - 1; |
| 1108 |
} |
| 1109 |
|
| 1110 |
// Allow themes and plugins to filter the user data. |
| 1111 |
$user_data = apply_filters( 'give_insert_user_data', $user_data, $user_args ); |
| 1112 |
|
| 1113 |
/** |
| 1114 |
* Fires after inserting user. |
| 1115 |
* |
| 1116 |
* @since 1.0 |
| 1117 |
* |
| 1118 |
* @param int $user_id User id. |
| 1119 |
* @param array $user_data Array containing user data. |
| 1120 |
*/ |
| 1121 |
do_action( 'give_insert_user', $user_id, $user_data ); |
| 1122 |
|
| 1123 |
/** |
| 1124 |
* Filter allow user to alter if user when to login or not when user is register for the first time. |
| 1125 |
* |
| 1126 |
* @since 1.8.13 |
| 1127 |
* |
| 1128 |
* return bool True if login with registration and False if only want to register. |
| 1129 |
*/ |
| 1130 |
if ( true === (bool) apply_filters( 'give_log_user_in_on_register', true ) ) { |
| 1131 |
// Login new user. |
| 1132 |
give_log_user_in( $user_id, $user_data['user_login'], $user_data['user_pass'] ); |
| 1133 |
} |
| 1134 |
|
| 1135 |
// Return user id. |
| 1136 |
return $user_id; |
| 1137 |
} |
| 1138 |
|
| 1139 |
/** |
| 1140 |
* Get Donation Form User |
| 1141 |
* |
| 1142 |
* @since 1.0 |
| 1143 |
* @unreleased Do not run validation check for ajax request expect donation validation ajax request. |
| 1144 |
* |
| 1145 |
* @param array $valid_data Valid Data. |
| 1146 |
* |
| 1147 |
* @access private |
| 1148 |
* @return array|bool |
| 1149 |
*/ |
| 1150 |
function give_get_donation_form_user( $valid_data = [] ) { |
| 1151 |
// Initialize user. |
| 1152 |
$user = false; |
| 1153 |
$post_data = give_clean($_POST); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 1154 |
$is_validating_donation_form_on_ajax = ! empty($_POST['give_ajax']) ? $post_data['give_ajax'] : 0; // WPCS: input var ok, sanitization ok, CSRF ok. |
| 1155 |
|
| 1156 |
if ( $is_validating_donation_form_on_ajax ) { |
| 1157 |
// Do not create or login the user during the ajax submission (check for errors only). |
| 1158 |
return true; |
| 1159 |
} elseif ( is_user_logged_in() ) { |
| 1160 |
// Set the valid user as the logged in collected data. |
| 1161 |
$user = $valid_data['logged_in_user']; |
| 1162 |
} elseif ( true === $valid_data['need_new_user'] || true === $valid_data['need_user_login'] ) { |
| 1163 |
// New user registration. |
| 1164 |
if ( true === $valid_data['need_new_user'] ) { |
| 1165 |
// Set user. |
| 1166 |
$user = $valid_data['new_user_data']; |
| 1167 |
|
| 1168 |
// Register and login new user. |
| 1169 |
$user['user_id'] = give_register_and_login_new_user($user); |
| 1170 |
} elseif ( true === $valid_data['need_user_login'] ) { |
| 1171 |
/** |
| 1172 |
* The login form is now processed in the give_process_donation_login() function. |
| 1173 |
* This is still here for backwards compatibility. |
| 1174 |
* This also allows the old login process to still work if a user removes the checkout login submit button. |
| 1175 |
* |
| 1176 |
* This also ensures that the donor is logged in correctly if they click "Donation" instead of submitting the login form, meaning the donor is logged in during the donation process. |
| 1177 |
*/ |
| 1178 |
$user = $valid_data['login_user_data']; |
| 1179 |
|
| 1180 |
// Login user. |
| 1181 |
give_log_user_in( $user['user_id'], $user['user_login'], $user['user_pass'] ); |
| 1182 |
} |
| 1183 |
} // End if(). |
| 1184 |
|
| 1185 |
// Check guest checkout. |
| 1186 |
if ( false === $user && false === give_logged_in_only( $post_data['give-form-id'] ) ) { |
| 1187 |
|
| 1188 |
// Set user. |
| 1189 |
$user = $valid_data['guest_user_data']; |
| 1190 |
} |
| 1191 |
|
| 1192 |
// Verify we have an user. |
| 1193 |
if ( false === $user || empty( $user ) ) { |
| 1194 |
return false; |
| 1195 |
} |
| 1196 |
|
| 1197 |
// Get user first name. |
| 1198 |
if ( ! isset( $user['user_first'] ) || strlen( trim( $user['user_first'] ) ) < 1 ) { |
| 1199 |
$user['user_first'] = isset( $post_data['give_first'] ) ? strip_tags( trim( $post_data['give_first'] ) ) : ''; |
| 1200 |
} |
| 1201 |
|
| 1202 |
// Get user last name. |
| 1203 |
if ( ! isset( $user['user_last'] ) || strlen( trim( $user['user_last'] ) ) < 1 ) { |
| 1204 |
$user['user_last'] = isset( $post_data['give_last'] ) ? strip_tags( trim( $post_data['give_last'] ) ) : ''; |
| 1205 |
} |
| 1206 |
|
| 1207 |
// Add Title Prefix to user information. |
| 1208 |
if ( empty( $user['user_title'] ) || strlen( trim( $user['user_title'] ) ) < 1 ) { |
| 1209 |
$user['user_title'] = ! empty( $post_data['give_title'] ) ? strip_tags( trim( $post_data['give_title'] ) ) : ''; |
| 1210 |
} |
| 1211 |
|
| 1212 |
// Get the user's billing address details. |
| 1213 |
$user['address'] = []; |
| 1214 |
$user['address']['line1'] = ! empty( $post_data['card_address'] ) ? $post_data['card_address'] : false; |
| 1215 |
$user['address']['line2'] = ! empty( $post_data['card_address_2'] ) ? $post_data['card_address_2'] : false; |
| 1216 |
$user['address']['city'] = ! empty( $post_data['card_city'] ) ? $post_data['card_city'] : false; |
| 1217 |
$user['address']['state'] = ! empty( $post_data['card_state'] ) ? $post_data['card_state'] : false; |
| 1218 |
$user['address']['zip'] = ! empty( $post_data['card_zip'] ) ? $post_data['card_zip'] : false; |
| 1219 |
$user['address']['country'] = ! empty( $post_data['billing_country'] ) ? $post_data['billing_country'] : false; |
| 1220 |
|
| 1221 |
if ( empty( $user['address']['country'] ) ) { |
| 1222 |
$user['address'] = false; |
| 1223 |
} // End if(). |
| 1224 |
|
| 1225 |
// Return valid user. |
| 1226 |
return $user; |
| 1227 |
} |
| 1228 |
|
| 1229 |
/** |
| 1230 |
* Validates the credit card info. |
| 1231 |
* |
| 1232 |
* @access private |
| 1233 |
* @since 1.0 |
| 1234 |
* |
| 1235 |
* @return array |
| 1236 |
*/ |
| 1237 |
function give_donation_form_validate_cc() { |
| 1238 |
|
| 1239 |
$card_data = give_get_donation_cc_info(); |
| 1240 |
|
| 1241 |
// Validate the card zip. |
| 1242 |
if ( ! empty( $card_data['card_zip'] ) ) { |
| 1243 |
if ( ! give_donation_form_validate_cc_zip( $card_data['card_zip'], $card_data['card_country'] ) ) { |
| 1244 |
give_set_error( 'invalid_cc_zip', __( 'The zip / postal code you entered for your billing address is invalid.', 'give' ) ); |
| 1245 |
} |
| 1246 |
} |
| 1247 |
|
| 1248 |
// Ensure no spaces. |
| 1249 |
if ( ! empty( $card_data['card_number'] ) ) { |
| 1250 |
$card_data['card_number'] = str_replace( '+', '', $card_data['card_number'] ); // no "+" signs. |
| 1251 |
$card_data['card_number'] = str_replace( ' ', '', $card_data['card_number'] ); // No spaces. |
| 1252 |
} |
| 1253 |
|
| 1254 |
// This should validate card numbers at some point too. |
| 1255 |
return $card_data; |
| 1256 |
} |
| 1257 |
|
| 1258 |
/** |
| 1259 |
* Get credit card info. |
| 1260 |
* |
| 1261 |
* @access private |
| 1262 |
* @since 1.0 |
| 1263 |
* |
| 1264 |
* @return array |
| 1265 |
*/ |
| 1266 |
function give_get_donation_cc_info() { |
| 1267 |
|
| 1268 |
// Sanitize the values submitted with donation form. |
| 1269 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 1270 |
|
| 1271 |
$cc_info = []; |
| 1272 |
$cc_info['card_name'] = ! empty( $post_data['card_name'] ) ? $post_data['card_name'] : ''; |
| 1273 |
$cc_info['card_number'] = ! empty( $post_data['card_number'] ) ? $post_data['card_number'] : ''; |
| 1274 |
$cc_info['card_cvc'] = ! empty( $post_data['card_cvc'] ) ? $post_data['card_cvc'] : ''; |
| 1275 |
$cc_info['card_exp_month'] = ! empty( $post_data['card_exp_month'] ) ? $post_data['card_exp_month'] : ''; |
| 1276 |
$cc_info['card_exp_year'] = ! empty( $post_data['card_exp_year'] ) ? $post_data['card_exp_year'] : ''; |
| 1277 |
$cc_info['card_address'] = ! empty( $post_data['card_address'] ) ? $post_data['card_address'] : ''; |
| 1278 |
$cc_info['card_address_2'] = ! empty( $post_data['card_address_2'] ) ? $post_data['card_address_2'] : ''; |
| 1279 |
$cc_info['card_city'] = ! empty( $post_data['card_city'] ) ? $post_data['card_city'] : ''; |
| 1280 |
$cc_info['card_state'] = ! empty( $post_data['card_state'] ) ? $post_data['card_state'] : ''; |
| 1281 |
$cc_info['card_country'] = ! empty( $post_data['billing_country'] ) ? $post_data['billing_country'] : ''; |
| 1282 |
$cc_info['card_zip'] = ! empty( $post_data['card_zip'] ) ? $post_data['card_zip'] : ''; |
| 1283 |
|
| 1284 |
// Return cc info. |
| 1285 |
return $cc_info; |
| 1286 |
} |
| 1287 |
|
| 1288 |
/** |
| 1289 |
* Validate zip code based on country code |
| 1290 |
* |
| 1291 |
* @since 1.0 |
| 1292 |
* |
| 1293 |
* @param int $zip ZIP Code. |
| 1294 |
* @param string $country_code Country Code. |
| 1295 |
* |
| 1296 |
* @return bool|mixed |
| 1297 |
*/ |
| 1298 |
function give_donation_form_validate_cc_zip( $zip = 0, $country_code = '' ) { |
| 1299 |
$ret = false; |
| 1300 |
|
| 1301 |
if ( empty( $zip ) || empty( $country_code ) ) { |
| 1302 |
return $ret; |
| 1303 |
} |
| 1304 |
|
| 1305 |
$country_code = strtoupper( $country_code ); |
| 1306 |
|
| 1307 |
$zip_regex = [ |
| 1308 |
'AD' => 'AD\d{3}', |
| 1309 |
'AM' => '(37)?\d{4}', |
| 1310 |
'AR' => '^([A-Z]{1}\d{4}[A-Z]{3}|[A-Z]{1}\d{4}|\d{4})$', |
| 1311 |
'AS' => '96799', |
| 1312 |
'AT' => '\d{4}', |
| 1313 |
'AU' => '^(0[289][0-9]{2})|([1345689][0-9]{3})|(2[0-8][0-9]{2})|(290[0-9])|(291[0-4])|(7[0-4][0-9]{2})|(7[8-9][0-9]{2})$', |
| 1314 |
'AX' => '22\d{3}', |
| 1315 |
'AZ' => '\d{4}', |
| 1316 |
'BA' => '\d{5}', |
| 1317 |
'BB' => '(BB\d{5})?', |
| 1318 |
'BD' => '\d{4}', |
| 1319 |
'BE' => '^[1-9]{1}[0-9]{3}$', |
| 1320 |
'BG' => '\d{4}', |
| 1321 |
'BH' => '((1[0-2]|[2-9])\d{2})?', |
| 1322 |
'BM' => '[A-Z]{2}[ ]?[A-Z0-9]{2}', |
| 1323 |
'BN' => '[A-Z]{2}[ ]?\d{4}', |
| 1324 |
'BR' => '\d{5}[\-]?\d{3}', |
| 1325 |
'BY' => '\d{6}', |
| 1326 |
'CA' => '^[ABCEGHJKLMNPRSTVXY]{1}\d{1}[A-Z]{1} *\d{1}[A-Z]{1}\d{1}$', |
| 1327 |
'CC' => '6799', |
| 1328 |
'CH' => '^[1-9][0-9][0-9][0-9]$', |
| 1329 |
'CK' => '\d{4}', |
| 1330 |
'CL' => '\d{7}', |
| 1331 |
'CN' => '\d{6}', |
| 1332 |
'CR' => '\d{4,5}|\d{3}-\d{4}', |
| 1333 |
'CS' => '\d{5}', |
| 1334 |
'CV' => '\d{4}', |
| 1335 |
'CX' => '6798', |
| 1336 |
'CY' => '\d{4}', |
| 1337 |
'CZ' => '\d{3}[ ]?\d{2}', |
| 1338 |
'DE' => '\b((?:0[1-46-9]\d{3})|(?:[1-357-9]\d{4})|(?:[4][0-24-9]\d{3})|(?:[6][013-9]\d{3}))\b', |
| 1339 |
'DK' => '^([D-d][K-k])?( |-)?[1-9]{1}[0-9]{3}$', |
| 1340 |
'DO' => '\d{5}', |
| 1341 |
'DZ' => '\d{5}', |
| 1342 |
'EC' => '([A-Z]\d{4}[A-Z]|(?:[A-Z]{2})?\d{6})?', |
| 1343 |
'EE' => '\d{5}', |
| 1344 |
'EG' => '\d{5}', |
| 1345 |
'ES' => '^([1-9]{2}|[0-9][1-9]|[1-9][0-9])[0-9]{3}$', |
| 1346 |
'ET' => '\d{4}', |
| 1347 |
'FI' => '\d{5}', |
| 1348 |
'FK' => 'FIQQ 1ZZ', |
| 1349 |
'FM' => '(9694[1-4])([ \-]\d{4})?', |
| 1350 |
'FO' => '\d{3}', |
| 1351 |
'FR' => '^(F-)?((2[A|B])|[0-9]{2})[0-9]{3}$', |
| 1352 |
'GE' => '\d{4}', |
| 1353 |
'GF' => '9[78]3\d{2}', |
| 1354 |
'GL' => '39\d{2}', |
| 1355 |
'GN' => '\d{3}', |
| 1356 |
'GP' => '9[78][01]\d{2}', |
| 1357 |
'GR' => '\d{3}[ ]?\d{2}', |
| 1358 |
'GS' => 'SIQQ 1ZZ', |
| 1359 |
'GT' => '\d{5}', |
| 1360 |
'GU' => '969[123]\d([ \-]\d{4})?', |
| 1361 |
'GW' => '\d{4}', |
| 1362 |
'HM' => '\d{4}', |
| 1363 |
'HN' => '(?:\d{5})?', |
| 1364 |
'HR' => '\d{5}', |
| 1365 |
'HT' => '\d{4}', |
| 1366 |
'HU' => '\d{4}', |
| 1367 |
'ID' => '\d{5}', |
| 1368 |
'IE' => '((D|DUBLIN)?([1-9]|6[wW]|1[0-8]|2[024]))?', |
| 1369 |
'IL' => '\d{5}', |
| 1370 |
'IN' => '^[1-9][0-9][0-9][0-9][0-9][0-9]$', // India. |
| 1371 |
'IO' => 'BBND 1ZZ', |
| 1372 |
'IQ' => '\d{5}', |
| 1373 |
'IS' => '\d{3}', |
| 1374 |
'IT' => '^(V-|I-)?[0-9]{5}$', |
| 1375 |
'JO' => '\d{5}', |
| 1376 |
'JP' => '\d{3}-\d{4}', |
| 1377 |
'KE' => '\d{5}', |
| 1378 |
'KG' => '\d{6}', |
| 1379 |
'KH' => '\d{5}', |
| 1380 |
'KR' => '\d{5}', |
| 1381 |
'KW' => '\d{5}', |
| 1382 |
'KZ' => '\d{6}', |
| 1383 |
'LA' => '\d{5}', |
| 1384 |
'LB' => '(\d{4}([ ]?\d{4})?)?', |
| 1385 |
'LI' => '(948[5-9])|(949[0-7])', |
| 1386 |
'LK' => '\d{5}', |
| 1387 |
'LR' => '\d{4}', |
| 1388 |
'LS' => '\d{3}', |
| 1389 |
'LT' => '\d{5}', |
| 1390 |
'LU' => '\d{4}', |
| 1391 |
'LV' => '\d{4}', |
| 1392 |
'MA' => '\d{5}', |
| 1393 |
'MC' => '980\d{2}', |
| 1394 |
'MD' => '\d{4}', |
| 1395 |
'ME' => '8\d{4}', |
| 1396 |
'MG' => '\d{3}', |
| 1397 |
'MH' => '969[67]\d([ \-]\d{4})?', |
| 1398 |
'MK' => '\d{4}', |
| 1399 |
'MN' => '\d{6}', |
| 1400 |
'MP' => '9695[012]([ \-]\d{4})?', |
| 1401 |
'MQ' => '9[78]2\d{2}', |
| 1402 |
'MT' => '[A-Z]{3}[ ]?\d{2,4}', |
| 1403 |
'MU' => '(\d{3}[A-Z]{2}\d{3})?', |
| 1404 |
'MV' => '\d{5}', |
| 1405 |
'MX' => '\d{5}', |
| 1406 |
'MY' => '\d{5}', |
| 1407 |
'NC' => '988\d{2}', |
| 1408 |
'NE' => '\d{4}', |
| 1409 |
'NF' => '2899', |
| 1410 |
'NG' => '(\d{6})?', |
| 1411 |
'NI' => '((\d{4}-)?\d{3}-\d{3}(-\d{1})?)?', |
| 1412 |
'NL' => '^[1-9][0-9]{3}\s?([a-zA-Z]{2})?$', |
| 1413 |
'NO' => '\d{4}', |
| 1414 |
'NP' => '\d{5}', |
| 1415 |
'NZ' => '\d{4}', |
| 1416 |
'OM' => '(PC )?\d{3}', |
| 1417 |
'PF' => '987\d{2}', |
| 1418 |
'PG' => '\d{3}', |
| 1419 |
'PH' => '\d{4}', |
| 1420 |
'PK' => '\d{5}', |
| 1421 |
'PL' => '\d{2}-\d{3}', |
| 1422 |
'PM' => '9[78]5\d{2}', |
| 1423 |
'PN' => 'PCRN 1ZZ', |
| 1424 |
'PR' => '00[679]\d{2}([ \-]\d{4})?', |
| 1425 |
'PT' => '\d{4}([\-]\d{3})?', |
| 1426 |
'PW' => '96940', |
| 1427 |
'PY' => '\d{4}', |
| 1428 |
'RE' => '9[78]4\d{2}', |
| 1429 |
'RO' => '\d{6}', |
| 1430 |
'RS' => '\d{5}', |
| 1431 |
'RU' => '\d{6}', |
| 1432 |
'SA' => '\d{5}', |
| 1433 |
'SE' => '^(s-|S-){0,1}[0-9]{3}\s?[0-9]{2}$', |
| 1434 |
'SG' => '\d{6}', |
| 1435 |
'SH' => '(ASCN|STHL) 1ZZ', |
| 1436 |
'SI' => '\d{4}', |
| 1437 |
'SJ' => '\d{4}', |
| 1438 |
'SK' => '\d{3}[ ]?\d{2}', |
| 1439 |
'SM' => '4789\d', |
| 1440 |
'SN' => '\d{5}', |
| 1441 |
'SO' => '\d{5}', |
| 1442 |
'SZ' => '[HLMS]\d{3}', |
| 1443 |
'TC' => 'TKCA 1ZZ', |
| 1444 |
'TH' => '\d{5}', |
| 1445 |
'TJ' => '\d{6}', |
| 1446 |
'TM' => '\d{6}', |
| 1447 |
'TN' => '\d{4}', |
| 1448 |
'TR' => '\d{5}', |
| 1449 |
'TW' => '\d{3}(\d{2})?', |
| 1450 |
'UA' => '\d{5}', |
| 1451 |
'UK' => '^(GIR|[A-Z]\d[A-Z\d]??|[A-Z]{2}\d[A-Z\d]??)[ ]??(\d[A-Z]{2})$', |
| 1452 |
'US' => '^\d{5}([\-]?\d{4})?$', |
| 1453 |
'UY' => '\d{5}', |
| 1454 |
'UZ' => '\d{6}', |
| 1455 |
'VA' => '00120', |
| 1456 |
'VE' => '\d{4}', |
| 1457 |
'VI' => '008(([0-4]\d)|(5[01]))([ \-]\d{4})?', |
| 1458 |
'WF' => '986\d{2}', |
| 1459 |
'YT' => '976\d{2}', |
| 1460 |
'YU' => '\d{5}', |
| 1461 |
'ZA' => '\d{4}', |
| 1462 |
'ZM' => '\d{5}', |
| 1463 |
]; |
| 1464 |
|
| 1465 |
if ( ! isset( $zip_regex[ $country_code ] ) || preg_match( '/' . $zip_regex[ $country_code ] . '/i', $zip ) ) { |
| 1466 |
$ret = true; |
| 1467 |
} |
| 1468 |
|
| 1469 |
return apply_filters( 'give_is_zip_valid', $ret, $zip, $country_code ); |
| 1470 |
} |
| 1471 |
|
| 1472 |
/** |
| 1473 |
* Validate donation amount and auto set correct donation level id on basis of amount. |
| 1474 |
* |
| 1475 |
* Note: If amount does not match to donation level amount then level id will be auto select to first match level id on basis of amount. |
| 1476 |
* |
| 1477 |
* @param array $valid_data List of Valid Data. |
| 1478 |
* |
| 1479 |
* @return bool |
| 1480 |
*/ |
| 1481 |
function give_validate_donation_amount( $valid_data ) { |
| 1482 |
|
| 1483 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 1484 |
|
| 1485 |
/* @var Give_Donate_Form $form */ |
| 1486 |
$form = new Give_Donate_Form( $post_data['give-form-id'] ); |
| 1487 |
|
| 1488 |
// Get the form currency. |
| 1489 |
$form_currency = give_get_currency( $post_data['give-form-id'] ); |
| 1490 |
|
| 1491 |
$donation_level_matched = false; |
| 1492 |
|
| 1493 |
if ( $form->is_set_type_donation_form() ) { |
| 1494 |
|
| 1495 |
// Sanitize donation amount. |
| 1496 |
$post_data['give-amount'] = give_maybe_sanitize_amount( $post_data['give-amount'], [ 'currency' => $form_currency ] ); |
| 1497 |
|
| 1498 |
// Backward compatibility. |
| 1499 |
if ( $form->is_custom_price( $post_data['give-amount'] ) ) { |
| 1500 |
$post_data['give-price-id'] = 'custom'; |
| 1501 |
} |
| 1502 |
|
| 1503 |
$donation_level_matched = true; |
| 1504 |
|
| 1505 |
} elseif ( $form->is_multi_type_donation_form() ) { |
| 1506 |
|
| 1507 |
$variable_prices = $form->get_prices(); |
| 1508 |
|
| 1509 |
// Bailout. |
| 1510 |
if ( ! $variable_prices ) { |
| 1511 |
return false; |
| 1512 |
} |
| 1513 |
|
| 1514 |
// Sanitize donation amount. |
| 1515 |
$post_data['give-amount'] = give_maybe_sanitize_amount( $post_data['give-amount'], [ 'currency' => $form_currency ] ); |
| 1516 |
$variable_price_option_amount = give_maybe_sanitize_amount( give_get_price_option_amount( $post_data['give-form-id'], $post_data['give-price-id'] ), [ 'currency' => $form_currency ] ); |
| 1517 |
$new_price_id = ''; |
| 1518 |
|
| 1519 |
if ( $post_data['give-amount'] === $variable_price_option_amount ) { |
| 1520 |
return true; |
| 1521 |
} |
| 1522 |
|
| 1523 |
if ( $form->is_custom_price( $post_data['give-amount'] ) ) { |
| 1524 |
$new_price_id = 'custom'; |
| 1525 |
} else { |
| 1526 |
|
| 1527 |
// Find correct donation level from all donation levels. |
| 1528 |
foreach ( $variable_prices as $variable_price ) { |
| 1529 |
|
| 1530 |
// Sanitize level amount. |
| 1531 |
$variable_price['_give_amount'] = give_maybe_sanitize_amount( $variable_price['_give_amount'] ); |
| 1532 |
|
| 1533 |
// Set first match donation level ID. |
| 1534 |
if ( $post_data['give-amount'] === $variable_price['_give_amount'] ) { |
| 1535 |
$new_price_id = $variable_price['_give_id']['level_id']; |
| 1536 |
break; |
| 1537 |
} |
| 1538 |
} |
| 1539 |
} |
| 1540 |
|
| 1541 |
// If donation amount is not find in donation levels then check if form has custom donation feature enable or not. |
| 1542 |
// If yes then set price id to custom if amount is greater then custom minimum amount (if any). |
| 1543 |
if ( $post_data['give-price-id'] === $new_price_id ) { |
| 1544 |
$donation_level_matched = true; |
| 1545 |
} |
| 1546 |
} // End if(). |
| 1547 |
|
| 1548 |
if ( ! $donation_level_matched ) { |
| 1549 |
give_set_error( |
| 1550 |
'invalid_donation_amount', |
| 1551 |
sprintf( |
| 1552 |
/* translators: %s: invalid donation amount */ |
| 1553 |
__( 'Donation amount %s is invalid.', 'give' ), |
| 1554 |
give_currency_filter( |
| 1555 |
give_format_amount( $post_data['give-amount'], [ 'sanitize' => false ] ) |
| 1556 |
) |
| 1557 |
) |
| 1558 |
); |
| 1559 |
} |
| 1560 |
} |
| 1561 |
|
| 1562 |
add_action( 'give_checkout_error_checks', 'give_validate_donation_amount', 10, 1 ); |
| 1563 |
|
| 1564 |
/** |
| 1565 |
* Validate Required Form Fields. |
| 1566 |
* |
| 1567 |
* @param int $form_id Form ID. |
| 1568 |
* |
| 1569 |
* @since 2.0 |
| 1570 |
*/ |
| 1571 |
function give_validate_required_form_fields( $form_id ) { |
| 1572 |
// Sanitize values submitted with donation form. |
| 1573 |
$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
| 1574 |
$requiredFormFields = give_get_required_fields( $form_id ); |
| 1575 |
|
| 1576 |
// Loop through required fields and show error messages. |
| 1577 |
foreach ( $requiredFormFields as $field_name => $value ) { |
| 1578 |
if ( empty( $post_data[ $field_name ] ) ) { |
| 1579 |
give_set_error( $value['error_id'], $value['error_message'] ); |
| 1580 |
} |
| 1581 |
} |
| 1582 |
} |
| 1583 |
|
| 1584 |
/** |
| 1585 |
* Validates and checks if name fields are valid or not. |
| 1586 |
* |
| 1587 |
* @param array $post_data List of post data. |
| 1588 |
* |
| 1589 |
* @since 2.1 |
| 1590 |
* |
| 1591 |
* @return void |
| 1592 |
*/ |
| 1593 |
function give_donation_form_validate_name_fields( $post_data ) { |
| 1594 |
|
| 1595 |
$is_alpha_first_name = ( ! is_email( $post_data['give_first'] ) && ! preg_match( '~[0-9]~', $post_data['give_first'] ) ); |
| 1596 |
$is_alpha_last_name = ( ! is_email( $post_data['give_last'] ) && ! preg_match( '~[0-9]~', $post_data['give_last'] ) ); |
| 1597 |
|
| 1598 |
if ( ! $is_alpha_first_name || ( ! empty( $post_data['give_last'] ) && ! $is_alpha_last_name ) ) { |
| 1599 |
give_set_error( 'invalid_name', esc_html__( 'The First Name and Last Name fields cannot contain an email address or numbers.', 'give' ) ); |
| 1600 |
} |
| 1601 |
} |
| 1602 |
|
