process-donation.php — GiveWP – Donation Plugin and Fundraising Platform 2.7.1

give / includes / process-donation.php

give / includes Last commit date

process-donation.php

1583 lines

1	<?php
2	/**
3	* Process Donation
4	*
5	* @package Give
6	* @subpackage Functions
7	* @copyright Copyright (c) 2016, GiveWP
8	* @license https://opensource.org/licenses/gpl-license GNU Public License
9	* @since 1.0
10	*/
11
12	// Exit if accessed directly.
13	if ( ! defined( 'ABSPATH' ) ) {
14	exit;
15	}
16
17	/**
18	* Process Donation Form
19	*
20	* Handles the donation form process.
21	*
22	* @access private
23	* @since 1.0
24	*
25	* @throws ReflectionException Exception Handling.
26	*
27	* @return mixed
28	*/
29	function give_process_donation_form() {
30
31	// Sanitize Posted Data.
32	$post_data = give_clean( $_POST ); // WPCS: input var ok, CSRF ok.
33
34	// Check whether the form submitted via AJAX or not.
35	$is_ajax = isset( $post_data['give_ajax'] );
36
37	// Verify donation form nonce.
38	if ( ! give_verify_donation_form_nonce( $post_data['give-form-hash'], $post_data['give-form-id'] ) ) {
39	if ( $is_ajax ) {
40	/**
41	* Fires when AJAX sends back errors from the donation form.
42	*
43	* @since 1.0
44	*/
45	do_action( 'give_ajax_donation_errors' );
46	give_die();
47	} else {
48	give_send_back_to_checkout();
49	}
50	}
51
52	/**
53	* Fires before processing the donation form.
54	*
55	* @since 1.0
56	*/
57	do_action( 'give_pre_process_donation' );
58
59	// Validate the form $_POST data.
60	$valid_data = give_donation_form_validate_fields();
61
62	/**
63	* Fires after validating donation form fields.
64	*
65	* Allow you to hook to donation form errors.
66	*
67	* @since 1.0
68	*
69	* @param bool\|array $valid_data Validate fields.
70	* @param array $deprecated Deprecated Since 2.0.2. Use $_POST instead.
71	*/
72	$deprecated = $post_data;
73	do_action( 'give_checkout_error_checks', $valid_data, $deprecated );
74
75	// Process the login form.
76	if ( isset( $post_data['give_login_submit'] ) ) {
77	give_process_form_login();
78	}
79
80	// Validate the user.
81	$user = give_get_donation_form_user( $valid_data );
82
83	if ( false === $valid_data \|\| ! $user \|\| give_get_errors() ) {
84	if ( $is_ajax ) {
85	/**
86	* Fires when AJAX sends back errors from the donation form.
87	*
88	* @since 1.0
89	*/
90	do_action( 'give_ajax_donation_errors' );
91	give_die();
92	} else {
93	return false;
94	}
95	}
96
97	// If AJAX send back success to proceed with form submission.
98	if ( $is_ajax ) {
99	echo 'success';
100	give_die();
101	}
102
103	/**
104	* Fires action after donation form field validated.
105	*
106	* @since 2.2.0
107	*/
108	do_action( 'give_process_donation_after_validation' );
109
110	// Setup user information.
111	$user_info = array(
112	'id' => $user['user_id'],
113	'title' => $user['user_title'],
114	'email' => $user['user_email'],
115	'first_name' => $user['user_first'],
116	'last_name' => $user['user_last'],
117	'address' => $user['address'],
118	);
119
120	$auth_key = defined( 'AUTH_KEY' ) ? AUTH_KEY : '';
121
122	// Donation form ID.
123	$form_id = isset( $post_data['give-form-id'] ) ? absint( $post_data['give-form-id'] ) : 0;
124
125	$price = isset( $post_data['give-amount'] ) ?
126	(float) apply_filters( 'give_donation_total', give_maybe_sanitize_amount( $post_data['give-amount'], array( 'currency' => give_get_currency( $form_id ) ) ) ) :
127	'0.00';
128	$purchase_key = strtolower( md5( $user['user_email'] . date( 'Y-m-d H:i:s' ) . $auth_key . uniqid( 'give', true ) ) );
129
130	/**
131	* Update donation Purchase key.
132	*
133	* Use this filter to update default donation purchase key
134	* and add prefix in Invoice.
135	*
136	* @since 2.2.4
137	*
138	* @param string $purchase_key
139	* @param string $gateway
140	* @param string $purchase_key
141	*
142	* @return string $purchase_key
143	*/
144	$purchase_key = apply_filters(
145	'give_donation_purchase_key',
146	$purchase_key,
147	$valid_data['gateway'],
148	// Use this purchase key value if you want to generate custom donation purchase key
149	// because donation purchase key editable by filters and you may get unedited donation purchase key.
150	$purchase_key
151	);
152
153	// Setup donation information.
154	$donation_data = array(
155	'price' => $price,
156	'purchase_key' => $purchase_key,
157	'user_email' => $user['user_email'],
158	'date' => date( 'Y-m-d H:i:s', current_time( 'timestamp' ) ),
159	'user_info' => stripslashes_deep( $user_info ),
160	'post_data' => $post_data,
161	'gateway' => $valid_data['gateway'],
162	'card_info' => $valid_data['cc_info'],
163	);
164
165	// Add the user data for hooks.
166	$valid_data['user'] = $user;
167
168	/**
169	* Fires before donation form gateway.
170	*
171	* Allow you to hook to donation form before the gateway.
172	*
173	* @since 1.0
174	*
175	* @param array $post_data Array of variables passed via the HTTP POST.
176	* @param array $user_info Array containing basic user information.
177	* @param bool\|array $valid_data Validate fields.
178	*/
179	do_action( 'give_checkout_before_gateway', $post_data, $user_info, $valid_data );
180
181	// Sanity check for price.
182	if ( ! $donation_data['price'] ) {
183	// Revert to manual.
184	$donation_data['gateway'] = 'manual';
185	$_POST['give-gateway'] = 'manual';
186	}
187
188	/**
189	* Allow the donation data to be modified before it is sent to the gateway.
190	*
191	* @since 1.7
192	*/
193	$donation_data = apply_filters( 'give_donation_data_before_gateway', $donation_data, $valid_data );
194
195	// Setup the data we're storing in the donation session.
196	$session_data = $donation_data;
197
198	// Make sure credit card numbers are never stored in sessions.
199	unset( $session_data['card_info']['card_number'] );
200	unset( $session_data['post_data']['card_number'] );
201
202	// Used for showing data to non logged-in users after donation, and for other plugins needing donation data.
203	give_set_purchase_session( $session_data );
204
205	// Send info to the gateway for payment processing.
206	give_send_to_gateway( $donation_data['gateway'], $donation_data );
207	give_die();
208	}
209
210	add_action( 'give_purchase', 'give_process_donation_form' );
211	add_action( 'wp_ajax_give_process_donation', 'give_process_donation_form' );
212	add_action( 'wp_ajax_nopriv_give_process_donation', 'give_process_donation_form' );
213
214	/**
215	* Verify that when a logged in user makes a donation that the email address used doesn't belong to a different customer.
216	* Note: only for internal use
217	*
218	* @see https://github.com/impress-org/give/issues/4025
219	*
220	* @since 1.7
221	* @since 2.4.2 This function runs independently instead of give_checkout_error_checks hook and also edit donor email.
222	*
223	* @param array $valid_data Validated data submitted for the donation.
224	*
225	* @return void
226	*/
227	function give_check_logged_in_user_for_existing_email( &$valid_data ) {
228
229	// Verify that the email address belongs to this donor.
230	if ( is_user_logged_in() ) {
231
232	$donor = new Give_Donor( get_current_user_id(), true );
233
234	// Bailout: check if wp user is existing donor or not.
235	if ( ! $donor->id ) {
236	return;
237	}
238
239	$submitted_email = strtolower( $valid_data['user_email'] );
240
241	$donor_emails = array_map( 'strtolower', $donor->emails );
242	$email_index = array_search( $submitted_email, $donor_emails, true );
243
244	// If donor matched with email then return set formatted email from database.
245	if ( false !== $email_index ) {
246	$valid_data['user_email'] = $donor->emails[ $email_index ];
247
248	return;
249	}
250
251	// If this email address is not registered with this customer, see if it belongs to any other customer.
252	$found_donor = new Give_Donor( $submitted_email );
253
254	if ( $found_donor->id > 0 ) {
255	give_set_error(
256	'give-customer-email-exists',
257	sprintf(
258	/* translators: 1. Donor Email, 2. Submitted Email */
259	__( 'You are logged in as %1$s, and are submitting a donation as %2$s, which is an existing donor. To ensure that the email address is tied to the correct donor, please submit this donation from a logged-out browser, or choose another email address.', 'give' ),
260	$donor->email,
261	$submitted_email
262	)
263	);
264	}
265	}
266	}
267
268	/**
269	* Process the checkout login form
270	*
271	* @access private
272	* @since 1.0
273	*
274	* @return void
275	*/
276	function give_process_form_login() {
277
278	$is_ajax = ! empty( $_POST['give_ajax'] ) ? give_clean( $_POST['give_ajax'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok.
279	$referrer = wp_get_referer();
280	$user_data = give_donation_form_validate_user_login();
281
282	if ( give_get_errors() \|\| $user_data['user_id'] < 1 ) {
283	if ( $is_ajax ) {
284	/**
285	* Fires when AJAX sends back errors from the donation form.
286	*
287	* @since 1.0
288	*/
289	ob_start();
290	do_action( 'give_ajax_donation_errors' );
291	$message = ob_get_contents();
292	ob_end_clean();
293	wp_send_json_error( $message );
294	} else {
295	wp_safe_redirect( $referrer );
296	exit;
297	}
298	}
299
300	give_log_user_in( $user_data['user_id'], $user_data['user_login'], $user_data['user_pass'] );
301
302	if ( $is_ajax ) {
303	$message = Give_Notices::print_frontend_notice(
304	sprintf(
305	/* translators: %s: user first name */
306	esc_html__( 'Welcome %s! You have successfully logged into your account.', 'give' ),
307	( ! empty( $user_data['user_first'] ) ) ? $user_data['user_first'] : $user_data['user_login']
308	),
309	false,
310	'success'
311	);
312
313	wp_send_json_success( $message );
314	} else {
315	wp_safe_redirect( $referrer );
316	}
317	}
318
319	add_action( 'wp_ajax_give_process_donation_login', 'give_process_form_login' );
320	add_action( 'wp_ajax_nopriv_give_process_donation_login', 'give_process_form_login' );
321
322	/**
323	* Donation Form Validate Fields.
324	*
325	* @access private
326	* @since 1.0
327	*
328	* @return bool\|array
329	*/
330	function give_donation_form_validate_fields() {
331
332	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
333
334	// Validate Honeypot First.
335	if ( ! empty( $post_data['give-honeypot'] ) ) {
336	give_set_error( 'invalid_honeypot', esc_html__( 'Honeypot field detected. Go away bad bot!', 'give' ) );
337	}
338
339	// Check spam detect.
340	if (
341	isset( $post_data['action'] )
342	&& give_is_spam_donation()
343	) {
344	give_set_error( 'spam_donation', __( 'The email you are using has been flagged as one used in SPAM comments or donations by our system. Please try using a different email address or contact the site administrator if you have any questions.', 'give' ) );
345	}
346
347	// Start an array to collect valid data.
348	$valid_data = array(
349	'gateway' => give_donation_form_validate_gateway(), // Gateway fallback (amount is validated here).
350	'need_new_user' => false, // New user flag.
351	'need_user_login' => false, // Login user flag.
352	'logged_user_data' => array(), // Logged user collected data.
353	'new_user_data' => array(), // New user collected data.
354	'login_user_data' => array(), // Login user collected data.
355	'guest_user_data' => array(), // Guest user collected data.
356	'cc_info' => give_donation_form_validate_cc(), // Credit card info.
357	);
358
359	$form_id = (int) $post_data['give-form-id'];
360
361	// Validate agree to terms.
362	if ( give_is_terms_enabled( $form_id ) ) {
363	give_donation_form_validate_agree_to_terms();
364	}
365
366	if ( is_user_logged_in() ) {
367
368	// Collect logged in user data.
369	$valid_data['logged_in_user'] = give_donation_form_validate_logged_in_user();
370	} elseif (
371	isset( $post_data['give-purchase-var'] )
372	&& 'needs-to-register' === $post_data['give-purchase-var']
373	&& ! empty( $post_data['give_create_account'] )
374	) {
375
376	// Set new user registration as required.
377	$valid_data['need_new_user'] = true;
378
379	// Validate new user data.
380	$valid_data['new_user_data'] = give_donation_form_validate_new_user();
381	} elseif (
382	isset( $post_data['give-purchase-var'] )
383	&& 'needs-to-login' === $post_data['give-purchase-var']
384	) {
385
386	// Set user login as required.
387	$valid_data['need_user_login'] = true;
388
389	// Validate users login info.
390	$valid_data['login_user_data'] = give_donation_form_validate_user_login();
391	} else {
392
393	// Not registering or logging in, so setup guest user data.
394	$valid_data['guest_user_data'] = give_donation_form_validate_guest_user();
395	}
396
397	// Return collected data.
398	return $valid_data;
399	}
400
401	/**
402	* Detect spam donation.
403	*
404	* @since 1.8.14
405	*
406	* @return bool\|mixed
407	*/
408	function give_is_spam_donation() {
409	$spam = false;
410
411	$user_agent = (string) isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT'] : '';
412
413	if ( strlen( $user_agent ) < 2 ) {
414	$spam = true;
415	}
416
417	// Allow developer to customized Akismet spam detect API call and it's response.
418	return apply_filters( 'give_spam', $spam );
419	}
420
421	/**
422	* Donation Form Validate Gateway
423	*
424	* Validate the gateway and donation amount.
425	*
426	* @access private
427	* @since 1.0
428	*
429	* @return string
430	*/
431	function give_donation_form_validate_gateway() {
432
433	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
434	$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0;
435	$amount = ! empty( $post_data['give-amount'] ) ? give_maybe_sanitize_amount( $post_data['give-amount'] ) : 0;
436	$gateway = ! empty( $post_data['give-gateway'] ) ? $post_data['give-gateway'] : 0;
437
438	// Bailout, if payment gateway is not submitted with donation form data.
439	if ( empty( $gateway ) ) {
440
441	give_set_error( 'empty_gateway', __( 'The donation form will process with a valid payment gateway.', 'give' ) );
442
443	} elseif ( ! give_is_gateway_active( $gateway ) ) {
444
445	give_set_error( 'invalid_gateway', __( 'The selected payment gateway is not enabled.', 'give' ) );
446
447	} elseif ( empty( $amount ) ) {
448
449	give_set_error( 'invalid_donation_amount', __( 'Please insert a valid donation amount.', 'give' ) );
450
451	} elseif ( ! give_verify_minimum_price( 'minimum' ) ) {
452
453	give_set_error(
454	'invalid_donation_minimum',
455	sprintf(
456	/* translators: %s: minimum donation amount */
457	__( 'This form has a minimum donation amount of %s.', 'give' ),
458	give_currency_filter(
459	give_format_amount(
460	give_get_form_minimum_price( $form_id ),
461	array(
462	'sanitize' => false,
463	)
464	)
465	)
466	)
467	);
468	} elseif ( ! give_verify_minimum_price( 'maximum' ) ) {
469
470	give_set_error(
471	'invalid_donation_maximum',
472	sprintf(
473	/* translators: %s: Maximum donation amount */
474	__( 'This form has a maximum donation amount of %s.', 'give' ),
475	give_currency_filter(
476	give_format_amount(
477	give_get_form_maximum_price( $form_id ),
478	array(
479	'sanitize' => false,
480	)
481	)
482	)
483	)
484	);
485	} // End if().
486
487	return $gateway;
488
489	}
490
491	/**
492	* Donation Form Validate Minimum or Maximum Donation Amount
493	*
494	* @access private
495	* @since 1.3.6
496	* @since 2.1 Added support for give maximum amount.
497	* @since 2.1.3 Added new filter to modify the return value.
498	*
499	* @param string $amount_range Which amount needs to verify? minimum or maximum.
500	*
501	* @return bool
502	*/
503	function give_verify_minimum_price( $amount_range = 'minimum' ) {
504
505	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
506	$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0;
507	$amount = ! empty( $post_data['give-amount'] ) ? give_maybe_sanitize_amount( $post_data['give-amount'], array( 'currency' => give_get_currency( $form_id ) ) ) : 0;
508	$price_id = isset( $post_data['give-price-id'] ) ? absint( $post_data['give-price-id'] ) : '';
509
510	$variable_prices = give_has_variable_prices( $form_id );
511	$price_ids = array_map( 'absint', give_get_variable_price_ids( $form_id ) );
512	$verified_stat = false;
513
514	if ( $variable_prices && in_array( $price_id, $price_ids, true ) ) {
515
516	$price_level_amount = give_get_price_option_amount( $form_id, $price_id );
517
518	if ( $price_level_amount == $amount ) {
519	$verified_stat = true;
520	}
521	}
522
523	if ( ! $verified_stat ) {
524	switch ( $amount_range ) {
525	case 'minimum':
526	$verified_stat = ( give_get_form_minimum_price( $form_id ) > $amount ) ? false : true;
527	break;
528	case 'maximum':
529	$verified_stat = ( give_get_form_maximum_price( $form_id ) < $amount ) ? false : true;
530	break;
531	}
532	}
533
534	/**
535	* Filter the verify amount
536	*
537	* @since 2.1.3
538	*
539	* @param bool $verified_stat Was verification passed or not?
540	* @param string $amount_range Type of the amount.
541	* @param integer $form_id Give Donation Form ID.
542	*/
543	return apply_filters( 'give_verify_minimum_maximum_price', $verified_stat, $amount_range, $form_id );
544	}
545
546	/**
547	* Donation form validate agree to "Terms and Conditions".
548	*
549	* @access private
550	* @since 1.0
551	*
552	* @return void
553	*/
554	function give_donation_form_validate_agree_to_terms() {
555
556	$agree_to_terms = ! empty( $_POST['give_agree_to_terms'] ) ? give_clean( $_POST['give_agree_to_terms'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok.
557
558	// Proceed only, if donor agreed to terms.
559	if ( ! $agree_to_terms ) {
560
561	// User did not agree.
562	give_set_error( 'agree_to_terms', apply_filters( 'give_agree_to_terms_text', __( 'You must agree to the terms and conditions.', 'give' ) ) );
563	}
564	}
565
566	/**
567	* Donation Form Required Fields.
568	*
569	* @access private
570	* @since 1.0
571	*
572	* @param int $form_id Donation Form ID.
573	*
574	* @return array
575	*/
576	function give_get_required_fields( $form_id ) {
577
578	$posted_data = give_clean( filter_input_array( INPUT_POST ) );
579	$payment_mode = give_get_chosen_gateway( $form_id );
580
581	$required_fields = array(
582	'give_email' => array(
583	'error_id' => 'invalid_email',
584	'error_message' => __( 'Please enter a valid email address.', 'give' ),
585	),
586	'give_first' => array(
587	'error_id' => 'invalid_first_name',
588	'error_message' => __( 'Please enter your first name.', 'give' ),
589	),
590	);
591
592	$name_title_prefix = give_is_name_title_prefix_required( $form_id );
593	if ( $name_title_prefix ) {
594	$required_fields['give_title'] = array(
595	'error_id' => 'invalid_title',
596	'error_message' => __( 'Please enter your title.', 'give' ),
597	);
598	}
599
600	// If credit card fields related actions exists then check for the cc fields validations.
601	if (
602	has_action( "give_{$payment_mode}_cc_form", 'give_get_cc_form' ) \|\|
603	has_action( 'give_cc_form', 'give_get_cc_form' )
604	) {
605
606	// Validate card number field for empty check.
607	if (
608	isset( $posted_data['card_number'] ) &&
609	empty( $posted_data['card_number'] )
610	) {
611	$required_fields['card_number'] = array(
612	'error_id' => 'empty_card_number',
613	'error_message' => __( 'Please enter a credit card number.', 'give' ),
614	);
615	}
616
617	// Validate card cvc field for empty check.
618	if (
619	isset( $posted_data['card_cvc'] ) &&
620	empty( $posted_data['card_cvc'] )
621	) {
622	$required_fields['card_cvc'] = array(
623	'error_id' => 'empty_card_cvc',
624	'error_message' => __( 'Please enter a credit card CVC information.', 'give' ),
625	);
626	}
627
628	// Validate card name field for empty check.
629	if (
630	isset( $posted_data['card_name'] ) &&
631	empty( $posted_data['card_name'] )
632	) {
633	$required_fields['card_name'] = array(
634	'error_id' => 'empty_card_name',
635	'error_message' => __( 'Please enter a name of your credit card account holder.', 'give' ),
636	);
637	}
638
639	// Validate card expiry field for empty check.
640	if (
641	isset( $posted_data['card_expiry'] ) &&
642	empty( $posted_data['card_expiry'] )
643	) {
644	$required_fields['card_expiry'] = array(
645	'error_id' => 'empty_card_expiry',
646	'error_message' => __( 'Please enter a credit card expiry date.', 'give' ),
647	);
648	}
649	}
650
651	$require_address = give_require_billing_address( $payment_mode );
652
653	if ( $require_address ) {
654	$required_fields['card_address'] = array(
655	'error_id' => 'invalid_card_address',
656	'error_message' => __( 'Please enter your primary billing address.', 'give' ),
657	);
658	$required_fields['card_zip'] = array(
659	'error_id' => 'invalid_zip_code',
660	'error_message' => __( 'Please enter your zip / postal code.', 'give' ),
661	);
662	$required_fields['card_city'] = array(
663	'error_id' => 'invalid_city',
664	'error_message' => __( 'Please enter your billing city.', 'give' ),
665	);
666	$required_fields['billing_country'] = array(
667	'error_id' => 'invalid_country',
668	'error_message' => __( 'Please select your billing country.', 'give' ),
669	);
670
671	$required_fields['card_state'] = array(
672	'error_id' => 'invalid_state',
673	'error_message' => __( 'Please enter billing state / province / County.', 'give' ),
674	);
675
676	$country = ! empty( $_POST['billing_country'] ) ? give_clean( $_POST['billing_country'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok.
677
678	// Check if billing country already exists.
679	if ( $country ) {
680
681	// Check if states is empty or not.
682	if ( array_key_exists( $country, give_states_not_required_country_list() ) ) {
683	// If states is empty remove the required fields of state in billing cart.
684	unset( $required_fields['card_state'] );
685	}
686
687	// Check if city is empty or not.
688	if ( array_key_exists( $country, give_city_not_required_country_list() ) ) {
689	// If states is empty remove the required fields of city in billing cart.
690	unset( $required_fields['card_city'] );
691	}
692	}
693	} // End if().
694
695	if ( give_is_company_field_enabled( $form_id ) ) {
696	$form_option = give_get_meta( $form_id, '_give_company_field', true );
697	$global_setting = give_get_option( 'company_field' );
698
699	$is_company_field_required = false;
700
701	if ( ! empty( $form_option ) && give_is_setting_enabled( $form_option, array( 'required' ) ) ) {
702	$is_company_field_required = true;
703
704	} elseif ( 'global' === $form_option && give_is_setting_enabled( $global_setting, array( 'required' ) ) ) {
705	$is_company_field_required = true;
706
707	} elseif ( empty( $form_option ) && give_is_setting_enabled( $global_setting, array( 'required' ) ) ) {
708	$is_company_field_required = true;
709
710	}
711
712	if ( $is_company_field_required ) {
713	$required_fields['give_company_name'] = array(
714	'error_id' => 'invalid_company',
715	'error_message' => __( 'Please enter Company Name.', 'give' ),
716	);
717	}
718	}
719
720	/**
721	* Filters the donation form required field.
722	*
723	* @since 1.7
724	*/
725	$required_fields = apply_filters( 'give_donation_form_required_fields', $required_fields, $form_id );
726
727	return $required_fields;
728
729	}
730
731	/**
732	* Check if the Billing Address is required
733	*
734	* @since 1.0.1
735	*
736	* @param string $payment_mode Payment Mode.
737	*
738	* @return bool
739	*/
740	function give_require_billing_address( $payment_mode ) {
741
742	$return = false;
743	$billing_country = ! empty( $_POST['billing_country'] ) ? give_clean( $_POST['billing_country'] ) : 0; // WPCS: input var ok, sanitization ok, CSRF ok.
744
745	if ( $billing_country \|\| did_action( "give_{$payment_mode}_cc_form" ) \|\| did_action( 'give_cc_form' ) ) {
746	$return = true;
747	}
748
749	// Let payment gateways and other extensions determine if address fields should be required.
750	return apply_filters( 'give_require_billing_address', $return );
751
752	}
753
754	/**
755	* Donation Form Validate Logged In User.
756	*
757	* @access private
758	* @since 1.0
759	*
760	* @return array
761	*/
762	function give_donation_form_validate_logged_in_user() {
763
764	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
765	$user_id = get_current_user_id();
766	$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0;
767
768	// Start empty array to collect valid user data.
769	$valid_user_data = array(
770
771	// Assume there will be errors.
772	'user_id' => - 1,
773	);
774
775	// Proceed only, if valid $user_id found.
776	if ( $user_id > 0 ) {
777
778	// Get the logged in user data.
779	$user_data = get_userdata( $user_id );
780
781	// Validate Required Form Fields.
782	give_validate_required_form_fields( $form_id );
783
784	// Verify data.
785	if ( is_object( $user_data ) && $user_data->ID > 0 ) {
786	// Collected logged in user data.
787	$valid_user_data = array(
788	'user_id' => $user_id,
789	'user_email' => ! empty( $post_data['give_email'] )
790	? sanitize_email( $post_data['give_email'] )
791	: $user_data->user_email,
792	'user_first' => ! empty( $post_data['give_first'] )
793	? $post_data['give_first']
794	: $user_data->first_name,
795	'user_last' => ! empty( $post_data['give_last'] )
796	? $post_data['give_last']
797	: $user_data->last_name,
798	);
799
800	// Validate essential form fields.
801	give_donation_form_validate_name_fields( $post_data );
802
803	give_check_logged_in_user_for_existing_email( $valid_user_data );
804
805	if ( ! is_email( $valid_user_data['user_email'] ) ) {
806	give_set_error( 'email_invalid', esc_html__( 'Invalid email.', 'give' ) );
807	}
808	} else {
809
810	// Set invalid user information error.
811	give_set_error( 'invalid_user', esc_html__( 'The user information is invalid.', 'give' ) );
812	}
813	}
814
815	// Return user data.
816	return $valid_user_data;
817	}
818
819	/**
820	* Donate Form Validate New User
821	*
822	* @access private
823	* @since 1.0
824	*
825	* @return array
826	*/
827	function give_donation_form_validate_new_user() {
828	// Default user data.
829	$auto_generated_password = wp_generate_password();
830	$default_user_data = array(
831	'give-form-id' => '',
832	'user_id' => - 1, // Assume there will be errors.
833	'user_first' => '',
834	'user_last' => '',
835	'give_user_login' => false,
836	'give_email' => false,
837	'give_user_pass' => $auto_generated_password,
838	'give_user_pass_confirm' => $auto_generated_password,
839	);
840
841	// Get data.
842	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
843	$user_data = wp_parse_args( $post_data, $default_user_data );
844
845	$form_id = absint( $user_data['give-form-id'] );
846	$nonce = ! empty( $post_data['give-form-user-register-hash'] ) ? $post_data['give-form-user-register-hash'] : '';
847
848	// Validate user creation nonce.
849	if ( ! wp_verify_nonce( $nonce, "give_form_create_user_nonce_{$form_id}" ) ) {
850	give_set_error( 'invalid_nonce', __( 'We\'re unable to recognize your session. Please refresh the screen to try again; otherwise contact your website administrator for assistance.', 'give' ) );
851	}
852
853	$registering_new_user = false;
854
855	give_donation_form_validate_name_fields( $user_data );
856
857	// Start an empty array to collect valid user data.
858	$valid_user_data = array(
859
860	// Assume there will be errors.
861	'user_id' => - 1,
862
863	// Get first name.
864	'user_first' => $user_data['give_first'],
865
866	// Get last name.
867	'user_last' => $user_data['give_last'],
868
869	// Get Password.
870	'user_pass' => $user_data['give_user_pass'],
871	);
872
873	// Validate Required Form Fields.
874	give_validate_required_form_fields( $form_id );
875
876	// Set Email as Username.
877	$valid_user_data['user_login'] = $user_data['give_email'];
878
879	// Check if we have an email to verify.
880	if ( give_validate_user_email( $user_data['give_email'], $registering_new_user ) ) {
881	$valid_user_data['user_email'] = $user_data['give_email'];
882	}
883
884	return $valid_user_data;
885	}
886
887	/**
888	* Donation Form Validate User Login
889	*
890	* @access private
891	* @since 1.0
892	*
893	* @return array
894	*/
895	function give_donation_form_validate_user_login() {
896
897	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
898
899	// Start an array to collect valid user data.
900	$valid_user_data = array(
901
902	// Assume there will be errors.
903	'user_id' => - 1,
904	);
905
906	// Bailout, if Username is empty.
907	if ( empty( $post_data['give_user_login'] ) ) {
908	give_set_error( 'must_log_in', __( 'Please enter your username or email to log in.', 'give' ) );
909
910	return $valid_user_data;
911	}
912
913	$give_user_login = strip_tags( $post_data['give_user_login'] );
914	if ( is_email( $give_user_login ) ) {
915	// Get the user data by email.
916	$user_data = get_user_by( 'email', $give_user_login );
917	} else {
918	// Get the user data by login.
919	$user_data = get_user_by( 'login', $give_user_login );
920	}
921
922	// Check if user exists.
923	if ( $user_data ) {
924
925	// Get password.
926	$user_pass = ! empty( $post_data['give_user_pass'] ) ? $post_data['give_user_pass'] : false;
927
928	// Check user_pass.
929	if ( $user_pass ) {
930
931	// Check if password is valid.
932	if ( ! wp_check_password( $user_pass, $user_data->user_pass, $user_data->ID ) ) {
933
934	$current_page_url = site_url() . '/' . get_page_uri();
935
936	// Incorrect password.
937	give_set_error(
938	'password_incorrect',
939	sprintf(
940	'%1$s <a href="%2$s">%3$s</a>',
941	__( 'The password you entered is incorrect.', 'give' ),
942	wp_lostpassword_url( $current_page_url ),
943	__( 'Reset Password', 'give' )
944	)
945	);
946
947	} else {
948
949	// Repopulate the valid user data array.
950	$valid_user_data = array(
951	'user_id' => $user_data->ID,
952	'user_login' => $user_data->user_login,
953	'user_email' => $user_data->user_email,
954	'user_first' => $user_data->first_name,
955	'user_last' => $user_data->last_name,
956	'user_pass' => $user_pass,
957	);
958	}
959	} else {
960	// Empty password.
961	give_set_error( 'password_empty', __( 'Enter a password.', 'give' ) );
962	}
963	} else {
964	// No username.
965	give_set_error( 'username_incorrect', __( 'The username you entered does not exist.', 'give' ) );
966	} // End if().
967
968	return $valid_user_data;
969	}
970
971	/**
972	* Donation Form Validate Guest User
973	*
974	* @access private
975	* @since 1.0
976	*
977	* @return array
978	*/
979	function give_donation_form_validate_guest_user() {
980
981	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
982	$form_id = ! empty( $post_data['give-form-id'] ) ? $post_data['give-form-id'] : 0;
983
984	// Start an array to collect valid user data.
985	$valid_user_data = array(
986	// Set a default id for guests.
987	'user_id' => 0,
988	);
989
990	// Validate name fields.
991	give_donation_form_validate_name_fields( $post_data );
992
993	// Validate Required Form Fields.
994	give_validate_required_form_fields( $form_id );
995
996	// Get the guest email.
997	$guest_email = ! empty( $post_data['give_email'] ) ? $post_data['give_email'] : false;
998
999	// Check email.
1000	if ( $guest_email && strlen( $guest_email ) > 0 ) {
1001
1002	// Validate email.
1003	if ( ! is_email( $guest_email ) ) {
1004
1005	// Invalid email.
1006	give_set_error( 'email_invalid', __( 'Invalid email.', 'give' ) );
1007
1008	} else {
1009
1010	// All is good to go.
1011	$valid_user_data['user_email'] = $guest_email;
1012
1013	// Get user_id from donor if exist.
1014	$donor = new Give_Donor( $guest_email );
1015
1016	if ( $donor->id ) {
1017	$donor_email_index = array_search(
1018	strtolower( $guest_email ),
1019	array_map( 'strtolower', $donor->emails ),
1020	true
1021	);
1022
1023	$valid_user_data['user_id'] = $donor->user_id;
1024
1025	// Set email to original format.
1026	// @see https://github.com/impress-org/give/issues/4025
1027	$valid_user_data['user_email'] = $donor->emails[ $donor_email_index ];
1028	}
1029	}
1030	} else {
1031	// No email.
1032	give_set_error( 'email_empty', __( 'Enter an email.', 'give' ) );
1033	}
1034
1035	return $valid_user_data;
1036	}
1037
1038	/**
1039	* Register And Login New User
1040	*
1041	* @param array $user_data User Data.
1042	*
1043	* @access private
1044	* @since 1.0
1045	*
1046	* @return integer
1047	*/
1048	function give_register_and_login_new_user( $user_data = array() ) {
1049	// Verify the array.
1050	if ( empty( $user_data ) ) {
1051	return - 1;
1052	}
1053
1054	if ( give_get_errors() ) {
1055	return - 1;
1056	}
1057
1058	$user_args = apply_filters(
1059	'give_insert_user_args',
1060	array(
1061	'user_login' => isset( $user_data['user_login'] ) ? $user_data['user_login'] : '',
1062	'user_pass' => isset( $user_data['user_pass'] ) ? $user_data['user_pass'] : '',
1063	'user_email' => isset( $user_data['user_email'] ) ? $user_data['user_email'] : '',
1064	'first_name' => isset( $user_data['user_first'] ) ? $user_data['user_first'] : '',
1065	'last_name' => isset( $user_data['user_last'] ) ? $user_data['user_last'] : '',
1066	'user_registered' => date( 'Y-m-d H:i:s' ),
1067	'role' => give_get_option( 'donor_default_user_role', 'give_donor' ),
1068	),
1069	$user_data
1070	);
1071
1072	// Insert new user.
1073	$user_id = wp_insert_user( $user_args );
1074
1075	// Validate inserted user.
1076	if ( is_wp_error( $user_id ) ) {
1077	return - 1;
1078	}
1079
1080	// Allow themes and plugins to filter the user data.
1081	$user_data = apply_filters( 'give_insert_user_data', $user_data, $user_args );
1082
1083	/**
1084	* Fires after inserting user.
1085	*
1086	* @since 1.0
1087	*
1088	* @param int $user_id User id.
1089	* @param array $user_data Array containing user data.
1090	*/
1091	do_action( 'give_insert_user', $user_id, $user_data );
1092
1093	/**
1094	* Filter allow user to alter if user when to login or not when user is register for the first time.
1095	*
1096	* @since 1.8.13
1097	*
1098	* return bool True if login with registration and False if only want to register.
1099	*/
1100	if ( true === (bool) apply_filters( 'give_log_user_in_on_register', true ) ) {
1101	// Login new user.
1102	give_log_user_in( $user_id, $user_data['user_login'], $user_data['user_pass'] );
1103	}
1104
1105	// Return user id.
1106	return $user_id;
1107	}
1108
1109	/**
1110	* Get Donation Form User
1111	*
1112	* @param array $valid_data Valid Data.
1113	*
1114	* @access private
1115	* @since 1.0
1116	*
1117	* @return array\|bool
1118	*/
1119	function give_get_donation_form_user( $valid_data = array() ) {
1120
1121	// Initialize user.
1122	$user = false;
1123	$is_ajax = defined( 'DOING_AJAX' ) && DOING_AJAX;
1124	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
1125
1126	if ( $is_ajax ) {
1127
1128	// Do not create or login the user during the ajax submission (check for errors only).
1129	return true;
1130	} elseif ( is_user_logged_in() ) {
1131
1132	// Set the valid user as the logged in collected data.
1133	$user = $valid_data['logged_in_user'];
1134	} elseif ( true === $valid_data['need_new_user'] \|\| true === $valid_data['need_user_login'] ) {
1135
1136	// New user registration.
1137	if ( true === $valid_data['need_new_user'] ) {
1138
1139	// Set user.
1140	$user = $valid_data['new_user_data'];
1141
1142	// Register and login new user.
1143	$user['user_id'] = give_register_and_login_new_user( $user );
1144
1145	} elseif ( true === $valid_data['need_user_login'] && ! $is_ajax ) {
1146
1147	/**
1148	* The login form is now processed in the give_process_donation_login() function.
1149	* This is still here for backwards compatibility.
1150	* This also allows the old login process to still work if a user removes the checkout login submit button.
1151	*
1152	* This also ensures that the donor is logged in correctly if they click "Donation" instead of submitting the login form, meaning the donor is logged in during the donation process.
1153	*/
1154	$user = $valid_data['login_user_data'];
1155
1156	// Login user.
1157	give_log_user_in( $user['user_id'], $user['user_login'], $user['user_pass'] );
1158	}
1159	} // End if().
1160
1161	// Check guest checkout.
1162	if ( false === $user && false === give_logged_in_only( $post_data['give-form-id'] ) ) {
1163
1164	// Set user.
1165	$user = $valid_data['guest_user_data'];
1166	}
1167
1168	// Verify we have an user.
1169	if ( false === $user \|\| empty( $user ) ) {
1170	return false;
1171	}
1172
1173	// Get user first name.
1174	if ( ! isset( $user['user_first'] ) \|\| strlen( trim( $user['user_first'] ) ) < 1 ) {
1175	$user['user_first'] = isset( $post_data['give_first'] ) ? strip_tags( trim( $post_data['give_first'] ) ) : '';
1176	}
1177
1178	// Get user last name.
1179	if ( ! isset( $user['user_last'] ) \|\| strlen( trim( $user['user_last'] ) ) < 1 ) {
1180	$user['user_last'] = isset( $post_data['give_last'] ) ? strip_tags( trim( $post_data['give_last'] ) ) : '';
1181	}
1182
1183	// Add Title Prefix to user information.
1184	if ( empty( $user['user_title'] ) \|\| strlen( trim( $user['user_title'] ) ) < 1 ) {
1185	$user['user_title'] = ! empty( $post_data['give_title'] ) ? strip_tags( trim( $post_data['give_title'] ) ) : '';
1186	}
1187
1188	// Get the user's billing address details.
1189	$user['address'] = array();
1190	$user['address']['line1'] = ! empty( $post_data['card_address'] ) ? $post_data['card_address'] : false;
1191	$user['address']['line2'] = ! empty( $post_data['card_address_2'] ) ? $post_data['card_address_2'] : false;
1192	$user['address']['city'] = ! empty( $post_data['card_city'] ) ? $post_data['card_city'] : false;
1193	$user['address']['state'] = ! empty( $post_data['card_state'] ) ? $post_data['card_state'] : false;
1194	$user['address']['zip'] = ! empty( $post_data['card_zip'] ) ? $post_data['card_zip'] : false;
1195	$user['address']['country'] = ! empty( $post_data['billing_country'] ) ? $post_data['billing_country'] : false;
1196
1197	if ( empty( $user['address']['country'] ) ) {
1198	$user['address'] = false;
1199	} // End if().
1200
1201	// Return valid user.
1202	return $user;
1203	}
1204
1205	/**
1206	* Validates the credit card info.
1207	*
1208	* @access private
1209	* @since 1.0
1210	*
1211	* @return array
1212	*/
1213	function give_donation_form_validate_cc() {
1214
1215	$card_data = give_get_donation_cc_info();
1216
1217	// Validate the card zip.
1218	if ( ! empty( $card_data['card_zip'] ) ) {
1219	if ( ! give_donation_form_validate_cc_zip( $card_data['card_zip'], $card_data['card_country'] ) ) {
1220	give_set_error( 'invalid_cc_zip', __( 'The zip / postal code you entered for your billing address is invalid.', 'give' ) );
1221	}
1222	}
1223
1224	// Ensure no spaces.
1225	if ( ! empty( $card_data['card_number'] ) ) {
1226	$card_data['card_number'] = str_replace( '+', '', $card_data['card_number'] ); // no "+" signs.
1227	$card_data['card_number'] = str_replace( ' ', '', $card_data['card_number'] ); // No spaces.
1228	}
1229
1230	// This should validate card numbers at some point too.
1231	return $card_data;
1232	}
1233
1234	/**
1235	* Get credit card info.
1236	*
1237	* @access private
1238	* @since 1.0
1239	*
1240	* @return array
1241	*/
1242	function give_get_donation_cc_info() {
1243
1244	// Sanitize the values submitted with donation form.
1245	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
1246
1247	$cc_info = array();
1248	$cc_info['card_name'] = ! empty( $post_data['card_name'] ) ? $post_data['card_name'] : '';
1249	$cc_info['card_number'] = ! empty( $post_data['card_number'] ) ? $post_data['card_number'] : '';
1250	$cc_info['card_cvc'] = ! empty( $post_data['card_cvc'] ) ? $post_data['card_cvc'] : '';
1251	$cc_info['card_exp_month'] = ! empty( $post_data['card_exp_month'] ) ? $post_data['card_exp_month'] : '';
1252	$cc_info['card_exp_year'] = ! empty( $post_data['card_exp_year'] ) ? $post_data['card_exp_year'] : '';
1253	$cc_info['card_address'] = ! empty( $post_data['card_address'] ) ? $post_data['card_address'] : '';
1254	$cc_info['card_address_2'] = ! empty( $post_data['card_address_2'] ) ? $post_data['card_address_2'] : '';
1255	$cc_info['card_city'] = ! empty( $post_data['card_city'] ) ? $post_data['card_city'] : '';
1256	$cc_info['card_state'] = ! empty( $post_data['card_state'] ) ? $post_data['card_state'] : '';
1257	$cc_info['card_country'] = ! empty( $post_data['billing_country'] ) ? $post_data['billing_country'] : '';
1258	$cc_info['card_zip'] = ! empty( $post_data['card_zip'] ) ? $post_data['card_zip'] : '';
1259
1260	// Return cc info.
1261	return $cc_info;
1262	}
1263
1264	/**
1265	* Validate zip code based on country code
1266	*
1267	* @since 1.0
1268	*
1269	* @param int $zip ZIP Code.
1270	* @param string $country_code Country Code.
1271	*
1272	* @return bool\|mixed
1273	*/
1274	function give_donation_form_validate_cc_zip( $zip = 0, $country_code = '' ) {
1275	$ret = false;
1276
1277	if ( empty( $zip ) \|\| empty( $country_code ) ) {
1278	return $ret;
1279	}
1280
1281	$country_code = strtoupper( $country_code );
1282
1283	$zip_regex = array(
1284	'AD' => 'AD\d{3}',
1285	'AM' => '(37)?\d{4}',
1286	'AR' => '^([A-Z]{1}\d{4}[A-Z]{3}\|[A-Z]{1}\d{4}\|\d{4})$',
1287	'AS' => '96799',
1288	'AT' => '\d{4}',
1289	'AU' => '^(0[289][0-9]{2})\|([1345689][0-9]{3})\|(2[0-8][0-9]{2})\|(290[0-9])\|(291[0-4])\|(7[0-4][0-9]{2})\|(7[8-9][0-9]{2})$',
1290	'AX' => '22\d{3}',
1291	'AZ' => '\d{4}',
1292	'BA' => '\d{5}',
1293	'BB' => '(BB\d{5})?',
1294	'BD' => '\d{4}',
1295	'BE' => '^[1-9]{1}[0-9]{3}$',
1296	'BG' => '\d{4}',
1297	'BH' => '((1[0-2]\|[2-9])\d{2})?',
1298	'BM' => '[A-Z]{2}[ ]?[A-Z0-9]{2}',
1299	'BN' => '[A-Z]{2}[ ]?\d{4}',
1300	'BR' => '\d{5}[\-]?\d{3}',
1301	'BY' => '\d{6}',
1302	'CA' => '^[ABCEGHJKLMNPRSTVXY]{1}\d{1}[A-Z]{1} *\d{1}[A-Z]{1}\d{1}$',
1303	'CC' => '6799',
1304	'CH' => '^[1-9][0-9][0-9][0-9]$',
1305	'CK' => '\d{4}',
1306	'CL' => '\d{7}',
1307	'CN' => '\d{6}',
1308	'CR' => '\d{4,5}\|\d{3}-\d{4}',
1309	'CS' => '\d{5}',
1310	'CV' => '\d{4}',
1311	'CX' => '6798',
1312	'CY' => '\d{4}',
1313	'CZ' => '\d{3}[ ]?\d{2}',
1314	'DE' => '\b((?:0[1-46-9]\d{3})\|(?:[1-357-9]\d{4})\|(?:[4][0-24-9]\d{3})\|(?:[6][013-9]\d{3}))\b',
1315	'DK' => '^([D-d][K-k])?( \|-)?[1-9]{1}[0-9]{3}$',
1316	'DO' => '\d{5}',
1317	'DZ' => '\d{5}',
1318	'EC' => '([A-Z]\d{4}[A-Z]\|(?:[A-Z]{2})?\d{6})?',
1319	'EE' => '\d{5}',
1320	'EG' => '\d{5}',
1321	'ES' => '^([1-9]{2}\|[0-9][1-9]\|[1-9][0-9])[0-9]{3}$',
1322	'ET' => '\d{4}',
1323	'FI' => '\d{5}',
1324	'FK' => 'FIQQ 1ZZ',
1325	'FM' => '(9694[1-4])([ \-]\d{4})?',
1326	'FO' => '\d{3}',
1327	'FR' => '^(F-)?((2[A\|B])\|[0-9]{2})[0-9]{3}$',
1328	'GE' => '\d{4}',
1329	'GF' => '9[78]3\d{2}',
1330	'GL' => '39\d{2}',
1331	'GN' => '\d{3}',
1332	'GP' => '9[78][01]\d{2}',
1333	'GR' => '\d{3}[ ]?\d{2}',
1334	'GS' => 'SIQQ 1ZZ',
1335	'GT' => '\d{5}',
1336	'GU' => '969[123]\d([ \-]\d{4})?',
1337	'GW' => '\d{4}',
1338	'HM' => '\d{4}',
1339	'HN' => '(?:\d{5})?',
1340	'HR' => '\d{5}',
1341	'HT' => '\d{4}',
1342	'HU' => '\d{4}',
1343	'ID' => '\d{5}',
1344	'IE' => '((D\|DUBLIN)?([1-9]\|6[wW]\|1[0-8]\|2[024]))?',
1345	'IL' => '\d{5}',
1346	'IN' => '^[1-9][0-9][0-9][0-9][0-9][0-9]$', // India.
1347	'IO' => 'BBND 1ZZ',
1348	'IQ' => '\d{5}',
1349	'IS' => '\d{3}',
1350	'IT' => '^(V-\|I-)?[0-9]{5}$',
1351	'JO' => '\d{5}',
1352	'JP' => '\d{3}-\d{4}',
1353	'KE' => '\d{5}',
1354	'KG' => '\d{6}',
1355	'KH' => '\d{5}',
1356	'KR' => '\d{3}[\-]\d{3}',
1357	'KW' => '\d{5}',
1358	'KZ' => '\d{6}',
1359	'LA' => '\d{5}',
1360	'LB' => '(\d{4}([ ]?\d{4})?)?',
1361	'LI' => '(948[5-9])\|(949[0-7])',
1362	'LK' => '\d{5}',
1363	'LR' => '\d{4}',
1364	'LS' => '\d{3}',
1365	'LT' => '\d{5}',
1366	'LU' => '\d{4}',
1367	'LV' => '\d{4}',
1368	'MA' => '\d{5}',
1369	'MC' => '980\d{2}',
1370	'MD' => '\d{4}',
1371	'ME' => '8\d{4}',
1372	'MG' => '\d{3}',
1373	'MH' => '969[67]\d([ \-]\d{4})?',
1374	'MK' => '\d{4}',
1375	'MN' => '\d{6}',
1376	'MP' => '9695[012]([ \-]\d{4})?',
1377	'MQ' => '9[78]2\d{2}',
1378	'MT' => '[A-Z]{3}[ ]?\d{2,4}',
1379	'MU' => '(\d{3}[A-Z]{2}\d{3})?',
1380	'MV' => '\d{5}',
1381	'MX' => '\d{5}',
1382	'MY' => '\d{5}',
1383	'NC' => '988\d{2}',
1384	'NE' => '\d{4}',
1385	'NF' => '2899',
1386	'NG' => '(\d{6})?',
1387	'NI' => '((\d{4}-)?\d{3}-\d{3}(-\d{1})?)?',
1388	'NL' => '^[1-9][0-9]{3}\s?([a-zA-Z]{2})?$',
1389	'NO' => '\d{4}',
1390	'NP' => '\d{5}',
1391	'NZ' => '\d{4}',
1392	'OM' => '(PC )?\d{3}',
1393	'PF' => '987\d{2}',
1394	'PG' => '\d{3}',
1395	'PH' => '\d{4}',
1396	'PK' => '\d{5}',
1397	'PL' => '\d{2}-\d{3}',
1398	'PM' => '9[78]5\d{2}',
1399	'PN' => 'PCRN 1ZZ',
1400	'PR' => '00[679]\d{2}([ \-]\d{4})?',
1401	'PT' => '\d{4}([\-]\d{3})?',
1402	'PW' => '96940',
1403	'PY' => '\d{4}',
1404	'RE' => '9[78]4\d{2}',
1405	'RO' => '\d{6}',
1406	'RS' => '\d{5}',
1407	'RU' => '\d{6}',
1408	'SA' => '\d{5}',
1409	'SE' => '^(s-\|S-){0,1}[0-9]{3}\s?[0-9]{2}$',
1410	'SG' => '\d{6}',
1411	'SH' => '(ASCN\|STHL) 1ZZ',
1412	'SI' => '\d{4}',
1413	'SJ' => '\d{4}',
1414	'SK' => '\d{3}[ ]?\d{2}',
1415	'SM' => '4789\d',
1416	'SN' => '\d{5}',
1417	'SO' => '\d{5}',
1418	'SZ' => '[HLMS]\d{3}',
1419	'TC' => 'TKCA 1ZZ',
1420	'TH' => '\d{5}',
1421	'TJ' => '\d{6}',
1422	'TM' => '\d{6}',
1423	'TN' => '\d{4}',
1424	'TR' => '\d{5}',
1425	'TW' => '\d{3}(\d{2})?',
1426	'UA' => '\d{5}',
1427	'UK' => '^(GIR\|[A-Z]\d[A-Z\d]??\|[A-Z]{2}\d[A-Z\d]??)[ ]??(\d[A-Z]{2})$',
1428	'US' => '^\d{5}([\-]?\d{4})?$',
1429	'UY' => '\d{5}',
1430	'UZ' => '\d{6}',
1431	'VA' => '00120',
1432	'VE' => '\d{4}',
1433	'VI' => '008(([0-4]\d)\|(5[01]))([ \-]\d{4})?',
1434	'WF' => '986\d{2}',
1435	'YT' => '976\d{2}',
1436	'YU' => '\d{5}',
1437	'ZA' => '\d{4}',
1438	'ZM' => '\d{5}',
1439	);
1440
1441	if ( ! isset( $zip_regex[ $country_code ] ) \|\| preg_match( '/' . $zip_regex[ $country_code ] . '/i', $zip ) ) {
1442	$ret = true;
1443	}
1444
1445	return apply_filters( 'give_is_zip_valid', $ret, $zip, $country_code );
1446	}
1447
1448	/**
1449	* Validate donation amount and auto set correct donation level id on basis of amount.
1450	*
1451	* Note: If amount does not match to donation level amount then level id will be auto select to first match level id on basis of amount.
1452	*
1453	* @param array $valid_data List of Valid Data.
1454	*
1455	* @return bool
1456	*/
1457	function give_validate_donation_amount( $valid_data ) {
1458
1459	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
1460
1461	/* @var Give_Donate_Form $form */
1462	$form = new Give_Donate_Form( $post_data['give-form-id'] );
1463
1464	// Get the form currency.
1465	$form_currency = give_get_currency( $post_data['give-form-id'] );
1466
1467	$donation_level_matched = false;
1468
1469	if ( $form->is_set_type_donation_form() ) {
1470
1471	// Sanitize donation amount.
1472	$post_data['give-amount'] = give_maybe_sanitize_amount( $post_data['give-amount'], array( 'currency' => $form_currency ) );
1473
1474	// Backward compatibility.
1475	if ( $form->is_custom_price( $post_data['give-amount'] ) ) {
1476	$post_data['give-price-id'] = 'custom';
1477	}
1478
1479	$donation_level_matched = true;
1480
1481	} elseif ( $form->is_multi_type_donation_form() ) {
1482
1483	$variable_prices = $form->get_prices();
1484
1485	// Bailout.
1486	if ( ! $variable_prices ) {
1487	return false;
1488	}
1489
1490	// Sanitize donation amount.
1491	$post_data['give-amount'] = give_maybe_sanitize_amount( $post_data['give-amount'], array( 'currency' => $form_currency ) );
1492	$variable_price_option_amount = give_maybe_sanitize_amount( give_get_price_option_amount( $post_data['give-form-id'], $post_data['give-price-id'] ), array( 'currency' => $form_currency ) );
1493	$new_price_id = '';
1494
1495	if ( $post_data['give-amount'] === $variable_price_option_amount ) {
1496	return true;
1497	}
1498
1499	if ( $form->is_custom_price( $post_data['give-amount'] ) ) {
1500	$new_price_id = 'custom';
1501	} else {
1502
1503	// Find correct donation level from all donation levels.
1504	foreach ( $variable_prices as $variable_price ) {
1505
1506	// Sanitize level amount.
1507	$variable_price['_give_amount'] = give_maybe_sanitize_amount( $variable_price['_give_amount'] );
1508
1509	// Set first match donation level ID.
1510	if ( $post_data['give-amount'] === $variable_price['_give_amount'] ) {
1511	$new_price_id = $variable_price['_give_id']['level_id'];
1512	break;
1513	}
1514	}
1515	}
1516
1517	// If donation amount is not find in donation levels then check if form has custom donation feature enable or not.
1518	// If yes then set price id to custom if amount is greater then custom minimum amount (if any).
1519	if ( $post_data['give-price-id'] === $new_price_id ) {
1520	$donation_level_matched = true;
1521	}
1522	} // End if().
1523
1524	if ( ! $donation_level_matched ) {
1525	give_set_error(
1526	'invalid_donation_amount',
1527	sprintf(
1528	/* translators: %s: invalid donation amount */
1529	__( 'Donation amount %s is invalid.', 'give' ),
1530	give_currency_filter(
1531	give_format_amount( $post_data['give-amount'], array( 'sanitize' => false ) )
1532	)
1533	)
1534	);
1535	}
1536	}
1537
1538	add_action( 'give_checkout_error_checks', 'give_validate_donation_amount', 10, 1 );
1539
1540	/**
1541	* Validate Required Form Fields.
1542	*
1543	* @param int $form_id Form ID.
1544	*
1545	* @since 2.0
1546	*/
1547	function give_validate_required_form_fields( $form_id ) {
1548
1549	// Sanitize values submitted with donation form.
1550	$post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok.
1551
1552	// Loop through required fields and show error messages.
1553	foreach ( give_get_required_fields( $form_id ) as $field_name => $value ) {
1554
1555	// Clean Up Data of the input fields.
1556	$field_value = $post_data[ $field_name ];
1557
1558	// Check whether the required field is empty, then show the error message.
1559	if ( in_array( $value, give_get_required_fields( $form_id ), true ) && empty( $field_value ) ) {
1560	give_set_error( $value['error_id'], $value['error_message'] );
1561	}
1562	}
1563	}
1564
1565	/**
1566	* Validates and checks if name fields are valid or not.
1567	*
1568	* @param array $post_data List of post data.
1569	*
1570	* @since 2.1
1571	*
1572	* @return void
1573	*/
1574	function give_donation_form_validate_name_fields( $post_data ) {
1575
1576	$is_alpha_first_name = ( ! is_email( $post_data['give_first'] ) && ! preg_match( '~[0-9]~', $post_data['give_first'] ) );
1577	$is_alpha_last_name = ( ! is_email( $post_data['give_last'] ) && ! preg_match( '~[0-9]~', $post_data['give_last'] ) );
1578
1579	if ( ! $is_alpha_first_name \|\| ( ! empty( $post_data['give_last'] ) && ! $is_alpha_last_name ) ) {
1580	give_set_error( 'invalid_name', esc_html__( 'The First Name and Last Name fields cannot contain an email address or numbers.', 'give' ) );
1581	}
1582	}
1583