PluginProbe
Pay with Vipps and MobilePay for WooCommerce / 6.3.0
Pay with Vipps and MobilePay for WooCommerce v6.3.0
6.2.6 6.3.0 6.2.5 6.2.4 6.2.3 6.2.2 6.2.1 6.2.0 6.1.10 6.1.9 6.1.8 6.1.7 6.1.6 6.1.5 6.1.4 6.1.3 6.1.2 6.1.1 6.1.0 6.0.5 6.0.4 6.0.3 6.0.2 6.0.1 6.0.0 All 189 releases
← All changes | payment/Vipps.class.php +855 -721 6.1.10 → 6.3.0 View file →
@@ -117,9 +117,10 @@
117 117 add_action('wp_footer', array($Vipps,'footer'));
118 118 }
119 119 add_action( 'plugins_loaded', array($Vipps,'plugins_loaded'));
120 120 add_action( 'after_setup_theme', array($Vipps,'after_setup_theme'));
121 - add_action('init',array($Vipps,'init'));
121 + add_action( 'init',array($Vipps,'init'));
122 + add_action( 'rest_api_init', array($Vipps, 'rest_api_init'));
122 123 add_action( 'woocommerce_loaded', array($Vipps,'woocommerce_loaded'));
123 124 add_filter( 'woocommerce_available_payment_gateways', array($Vipps, 'payment_gateway_filter'));
124 125 add_action( 'woocommerce_blocks_loaded', [$Vipps, 'woocommerce_blocks_loaded']);
125 126 // Express Checkout and Checkout supports the new pickup_location shipping method, but the admin interface for this may
@@ -125,8 +126,13 @@
125 126 // Express Checkout and Checkout supports the new pickup_location shipping method, but the admin interface for this may
126 127 // not have loaded if the default checkout solution isn't the Checkout block. We'll load it anyway if the user has any local pickup locations
127 128 // stored in the database since we support this for both Vipps MobilePay checkokut and Express. IOK 2026-02-25
128 129 add_action('woocommerce_load_shipping_methods', array($Vipps, 'maybe_load_pickup_locations'), 90);
130 +
131 + // Vipps Checkout replaces the default checkout page, and currently uses its own page for this which needs to exist
132 + // Will also probably be used to maintain a real utility-page for Vipps actions later for themes where this
133 + // is important.
134 + add_filter('woocommerce_create_pages', array($Vipps, 'woocommerce_create_pages'), 50, 1);
129 135 }
130 136
131 137 // Register woocommerce store api endpoint to use in buy-now minicart block. LP 2026-02-10
132 138 public function woocommerce_blocks_loaded() {
@@ -222,8 +228,9 @@
222 228 // Register certain scripts in wp_loaded because they will be added to the backend as well - the gutenberg checkout block
223 229 // needs these to be defined in the backend. IOK 2024-04-16
224 230 add_action('wp_loaded', array($this, 'wp_register_scripts'));
225 231 add_action('wp_enqueue_scripts', array($this, 'wp_enqueue_scripts'));
232 + add_action('wp_enqueue_scripts', array($this, 'enqueue_classic_checkout_scripts'), 20);
226 233
227 234 // Remove the possibility of restarting failed orders etc. This will be fixed in the future. IOK 2023-05-26
228 235 add_filter('woocommerce_my_account_my_orders_actions', array($this,'woocommerce_my_account_my_orders_actions'), 10, 2);
229 236
@@ -239,16 +246,8 @@
239 246
240 247 // Extra order actions on the order screen, now using ajax to be compatible with HPOS. IOK 2022-12-02
241 248 add_action('wp_ajax_woo_vipps_order_action', array($this, 'order_handle_vipps_action'));
242 249
243 - // Fetch wc products, but filter those only purchasable by VMP express checkout. LP 2026-01-22
244 - add_action('rest_api_init', function() {
245 - register_rest_route(self::get_rest_namespace('v1'), '/express-products', [
246 - 'methods' => 'GET',
247 - 'callback' => [$this, 'rest_express_checkout_products'],
248 - 'permission_callback' => '__return_true',
249 - ]);
250 - });
251 250
252 251 // We need a 5-minute scheduled event for the handler for missed callbacks. Using the
253 252 // action scheduler would be better, but we can't do that just yet because of backwards
254 253 // compatibility. At some point, support for older woo-versions should be dropped; then this
@@ -280,10 +279,63 @@
280 279 }
281 280
282 281 // Set default button options, migrating any older setup IOK 2026-07-15
283 282 $this->init_button_options();
283 +
284 + /*
285 + From version 6.2.x we create a real physical page to handle the "special" vipps pages,
286 + where we earlier used just a fake page with no real page id, unless especially configured.
287 + We therefore need to add code to maintain this special page.
288 +
289 + woocommerce_loaded is too early for this because of maybe_create_vipps_pages which calls WC_Install::create_pages,
290 + and we hook unto this with woocommerce_create_pages. LP 2026-09-03
291 + */
292 +
293 + // Delete special page id option when its deleted or trashed, so that we dont have to load
294 + // in the post to check status in woocommerce_loaded when we ensure the special page exists. LP 2026-09-03
295 + $delete_special_page_id = function($post_id, $post = null) {
296 + if (static::get_special_page_id() === $post_id) {
297 + delete_option('woocommerce_vipps_special_page_page_id');
298 + }
299 + };
300 + add_action('delete_post', $delete_special_page_id, 10, 2);
301 + add_action('wp_trash_post', $delete_special_page_id, 10, 2);
302 +
303 + $this->ensure_special_page_exists();
304 +
305 +
306 + // We want this special page to have a certain title and maybe special scripts and so on,
307 + // this gets run in template redirect for these pages.
308 + add_action('woo_vipps_before_handling_special_page', array($this, 'pre_special_page_actions'));
309 +
310 + // Add an admin interface for this page as well IOK 2026-09-11
311 + add_action('woocommerce_settings_pages', array($this, 'woocommerce_settings_pages'));
284 312 }
285 313
314 +
315 + public function rest_api_init () {
316 +
317 + // Fetch wc products, but filter those only purchasable by VMP express checkout. LP 2026-01-22
318 + register_rest_route(self::get_rest_namespace('v1'), '/express-products', [
319 + 'methods' => 'GET',
320 + 'callback' => [$this, 'rest_express_checkout_products'],
321 + 'permission_callback' => '__return_true',
322 + ]);
323 +
324 + // Start a single product express checkout process. IOK 2026-08-25
325 + register_rest_route(self::get_rest_namespace('v1'), '/express_checkout_single', [
326 + 'methods' => 'POST',
327 + 'callback' => [$this, 'rest_do_single_product_express_checkout'],
328 + 'permission_callback' => '__return_true',
329 + ]);
330 + // And one for the cart. IOK 2026-09-04
331 + register_rest_route(self::get_rest_namespace('v1'), '/express_checkout', [
332 + 'methods' => 'POST',
333 + 'callback' => [$this, 'rest_do_express_checkout'],
334 + 'permission_callback' => '__return_true',
335 + ]);
336 + }
337 +
286 338 public function admin_init () {
287 339 $gw = $this->gateway();
288 340 require_once(dirname(__FILE__) . "/admin/settings/VippsAdminSettings.class.php");
289 341 $adminSettings = VippsAdminSettings::instance();
@@ -310,10 +362,8 @@
310 362 // Styling etc
311 363 add_action('admin_head', array($this, 'admin_head'));
312 364
313 365 // Scripts
314 - $this->vippsJSConfig['vippssecnonce'] = wp_create_nonce('vippssecnonce');
315 - wp_localize_script('vipps-gw', 'VippsConfig', $this->vippsJSConfig);
316 366 add_action('admin_enqueue_scripts', array($this,'admin_enqueue_scripts'));
317 367
318 368 // IOK 2026-05-26 redirect the old Woo-generated settings-screen to our own settings page.
319 369 add_action('current_screen', function ($screen) {
@@ -401,9 +451,77 @@
401 451 }
402 452 }
403 453 }
404 454
455 +
456 + /** Ensure we have a special page for payment flows
457 + *
458 + * woocommerce_loaded is too early for this because of maybe_create_vipps_pages which calls WC_Install::create_pages,
459 + * and we hook unto this with woocommerce_create_pages. LP 2026-09-03
460 + **/
461 + public function ensure_special_page_exists() {
462 + if (static::get_special_page_id()) return;
463 + $this->log(__('Missing id for special page, attempting to fix.', 'woo-vipps'), 'info');
405 464
465 + // If user had in previous version overriden the fake page with a real one: migrate this page to be the special page. LP 2026-09-01
466 + $old_special_page_id = $this->gateway()->get_option('vippsspecialpageid');
467 + if ($old_special_page_id && ($special_page = get_post($old_special_page_id)) && "trash" !== $special_page->post_status) {
468 + $this->log(__('Migrated old special page setting.', 'woo-vipps'), 'info');
469 + // there is no wc_set_page_id() so we update the option directly. LP 2026-09-01
470 + update_option('woocommerce_vipps_special_page_page_id', $old_special_page_id);
471 +
472 + // Ensure this page has the necessary shortcode. LP 2026-09-01
473 + if (!has_shortcode($special_page->post_content, 'vipps_special_page')) {
474 + $new_content = $special_page->post_content . "\n\n<!-- wp:shortcode -->[vipps_special_page]<!-- /wp:shortcode -->";
475 + wp_update_post([
476 + 'ID' => $old_special_page_id,
477 + 'post_content' => $new_content,
478 + ]);
479 + }
480 + } else {
481 + // Create special page if its missing. LP 2026-09-01
482 + $this->maybe_create_vipps_pages();
483 + }
484 + }
485 +
486 + // Admin interface for the special page on woo/advanced/pages
487 + public function woocommerce_settings_pages ($settings) {
488 + $i = -1;
489 + foreach($settings as $entry) {
490 + $i++;
491 + if ($entry['type'] == 'sectionend' && $entry['id'] == 'advanced_page_options') {
492 + break;
493 + }
494 + }
495 + if ($i > 0) {
496 + $vippspagesettings = array(
497 + array(
498 + 'title' => sprintf(__( '%1$s Page', 'woo-vipps' ), Vipps::CompanyName()),
499 + 'desc' => sprintf(__('This page is used for various special pages used by %1$s', 'woo-vipps'), Vipps::CompanyName()) . sprintf( __( 'Page contents: [%1$s]', 'woocommerce' ), 'vipps_special_page') ,
500 + 'id' => 'woocommerce_vipps_special_page_page_id',
501 + 'type' => 'single_select_page_with_search',
502 + 'default' => '',
503 + 'class' => 'wc-page-search',
504 + 'css' => 'min-width:300px;',
505 + 'args' => array(
506 + 'exclude' =>
507 + array(
508 + wc_get_page_id( 'myaccount' ),
509 + wc_get_page_id( 'checkout' ),
510 + wc_get_page_id( 'cart' ),
511 + ),
512 + ),
513 + 'desc_tip' => true,
514 + 'autoload' => false,
515 + ));
516 + array_splice($settings, $i, 0, $vippspagesettings);
517 + }
518 +
519 + return $settings;
520 + }
521 +
522 +
523 +
406 524 // Runs on init, adds the Vipps badge feature if activated
407 525 public function maybe_add_vipps_badge_feature () {
408 526 $badge_options = get_option('vipps_badge_options');
409 527 if (!$badge_options || !@$badge_options['badgeon']) return false;
@@ -940,12 +1058,30 @@
940 1058
941 1059 public function get_html_button_attrs_for_context($context = 'global') {
942 1060 $options = get_option('vipps_button_options2', []);
943 1061 if (!is_string($context)) $context = 'global';
1062 +
1063 + // Gutenberg express checkout buttons really want to be stretched, so we'll treat them somewhat differently.
1064 + $gutenberg = false;
1065 + if ($context == 'checkout_gutenberg') {
1066 + $context = 'checkout';
1067 + $gutenberg = true;
1068 + }
1069 + if ($context == 'cart_gutenberg') {
1070 + $context = 'cart';
1071 + $gutenberg = true;
1072 + }
1073 +
944 1074 $config = $options['express']['configs'][$context] ?? [];
945 - if (!$config || ($config['use-global-config'] ?? false)) {
1075 + $use_global = !$config || ($config['use-global-config'] ?? false);
1076 + if ($use_global) {
946 1077 $config = $options['express']['configs']['global'] ?? $this->get_html_button_default_attrs();
947 1078 }
1079 +
1080 + // see above.
1081 + if ($gutenberg) {
1082 + $config['stretched']='true';
1083 + }
948 1084 return $config;
949 1085 }
950 1086
951 1087 public function get_html_button_for_context($context = 'global') {
@@ -1032,8 +1168,10 @@
1032 1168 private function button_menu_express_section() {
1033 1169 $options = get_option('vipps_button_options2', []);
1034 1170 $express = $options['express'] ?? [];
1035 1171 $configs = $express['configs'] ?? [];
1172 +
1173 +
1036 1174 $contexts = [
1037 1175 'global' => __('Global', 'woo-vipps'),
1038 1176 'product' => __('Product', 'woo-vipps'),
1039 1177 'catalog' => __('Catalog', 'woo-vipps'),
@@ -1164,9 +1302,9 @@
1164 1302
1165 1303 // Update the preview web component's attributes. LP 2026-06-24
1166 1304 function updatePreview(event) {
1167 1305 const args = getPreviewArgs();
1168 - // LP FIXME: when i use get_customer_language() here it gives me my user language, but on frontend it gives the site language, i.e not the same value. So this preview will be wrong language. so use get_locale for now. LP 2026-07-02
1306 + // FIXME: when i use get_customer_language() here it gives me my user language, but on frontend it gives the site language, i.e not the same value. So this preview will be wrong language. so use get_locale for now. LP 2026-07-02
1169 1307 // if ('store' === args.language) args.language = '<?php echo $this->get_customer_language(); ?>';
1170 1308 if ('store' === args.language) args.language = '<?php echo substr(get_locale(), 0, 2); ?>';
1171 1309 const button = jQuery('#vipps-button-express-preview');
1172 1310 button.attr(args);
@@ -1206,8 +1344,9 @@
1206 1344
1207 1345 // Swap to new context: set all input fields to the stored values if exists. LP 2026-06-25
1208 1346 const newContext = jQuery("#context").val();
1209 1347 const newConfig = contextConfigs[newContext];
1348 +
1210 1349 setInputsFromConfig(newContext, newConfig);
1211 1350 currentContext = newContext;
1212 1351 }
1213 1352
@@ -1570,12 +1709,14 @@
1570 1709 <?php
1571 1710 }
1572 1711 // Scripts used in the backend
1573 1712 public function admin_enqueue_scripts($hook) {
1713 +
1714 + wp_register_script('vipps-admin',plugins_url('js/admin.js',__FILE__),array('jquery'),filemtime(dirname(__FILE__) . "/js/admin.js"), 'all');
1715 + $this->vippsJSConfig['vippssecnonce'] = wp_create_nonce('vippssecnonce');
1716 + wp_localize_script('vipps-admin', 'VippsConfig', $this->vippsJSConfig);
1574 1717 // Add certain translations very late so translation plugins get a chance to work. IOK 2026-02-02
1575 - $this->script_add_vippslocale();
1576 -
1577 - wp_register_script('vipps-admin',plugins_url('js/admin.js',__FILE__),array('jquery','vipps-gw'),filemtime(dirname(__FILE__) . "/js/admin.js"), 'all');
1718 + $this->script_add_vippslocale('vipps-admin');
1578 1719 wp_enqueue_script('vipps-admin');
1579 1720
1580 1721 wp_enqueue_style('vipps-admin-style',plugins_url('css/admin.css',__FILE__),array(),filemtime(dirname(__FILE__) . "/css/admin.css"), 'all');
1581 1722 wp_enqueue_style('vipps-fonts');
@@ -1645,12 +1786,9 @@
1645 1786
1646 1787 public function wp_register_scripts () {
1647 1788 // We are going to use the 'hooks' library introduced by WP 5.1, but we still support WP 4.7. So if this isn't enqueues
1648 1789 // (which it only is if Gutenberg is active) or not provided at all, add it now.
1649 - if (!wp_script_is( 'wp-hooks', 'registered')) {
1650 - wp_register_script('wp-hooks', plugins_url('/compat/hooks.min.js', __FILE__));
1651 - }
1652 - wp_register_script('vipps-gw',plugins_url('js/vipps.js',__FILE__),array('jquery','wp-hooks'),filemtime(dirname(__FILE__) . "/js/vipps.js"), 'true');
1790 + wp_register_script('vipps-gw',plugins_url('js/vipps.js',__FILE__),array('jquery','wp-hooks', 'wp-api-fetch','vipps-widget-sdk'),filemtime(dirname(__FILE__) . "/js/vipps.js"), true);
1653 1791
1654 1792 // Badges - web components provided by Vipps MobilePay to display payment options in-store.
1655 1793 wp_register_script('vipps-onsite-messageing',
1656 1794 plugins_url('js/vipps-on-site-messaging.js', WC_VIPPS_PAYMENT_MAIN_FILE),
@@ -1656,13 +1794,27 @@
1656 1794 plugins_url('js/vipps-on-site-messaging.js', WC_VIPPS_PAYMENT_MAIN_FILE),
1657 1795 array(),
1658 1796 filemtime(dirname(WC_VIPPS_PAYMENT_MAIN_FILE) . '/js/vipps-on-site-messaging.js'),
1659 1797 [
1660 - 'in_footer' => true,
1661 - 'strategy' => 'async',
1798 + 'in_footer' => true,
1799 + 'strategy' => 'async',
1662 1800 ],
1663 1801 );
1664 1802
1803 + add_filter( 'script_loader_tag', function($tag, $handle,$src) {
1804 + if ($handle == 'vipps-widget-sdk') {
1805 + $tag = preg_replace("!^<script!", "<script data-vipps-widget-sdk ", $tag);
1806 + return $tag;
1807 + }
1808 + return $tag;
1809 + },10,3);
1810 +
1811 + wp_register_script('vipps-widget-sdk', "https://cdn.vippsmobilepay.com/js/widget-sdk/vipps-widget.js",
1812 + array('vipps-button-webcomponent'),
1813 + filemtime(dirname(WC_VIPPS_PAYMENT_MAIN_FILE) . '/js/vipps.js'),
1814 + ['in_footer' => true]
1815 + );
1816 +
1665 1817 // Button web component downloaded from https://cdn.vippsmobilepay.com/js/button/button.js. LP 2026-06-24
1666 1818 wp_register_script('vipps-button-webcomponent',
1667 1819 plugins_url('js/vipps-button.js', WC_VIPPS_PAYMENT_MAIN_FILE),
1668 1820 array(),
@@ -1668,27 +1820,45 @@
1668 1820 array(),
1669 1821 filemtime(dirname(WC_VIPPS_PAYMENT_MAIN_FILE) . '/js/vipps-button.js'),
1670 1822 [
1671 1823 'in_footer' => false
1672 - ],
1824 + ]
1673 1825 );
1674 1826 }
1675 1827
1676 1828 // Runs late in both wp_enqueue_scripts and admin_enqueue_scripts to make it more compatible with translation plugins IOK 2026-02-02
1677 - public function script_add_vippslocale () {
1829 + public function script_add_vippslocale ($handle) {
1678 1830 // This is actually for the payment block, where localize script has started to not-work in certain contexts. IOK 2022-12-13
1831 + $name = $this->get_payment_method_name();
1679 1832 $strings = array(
1680 - 'Continue with Vipps'=>sprintf(__('Continue with %1$s', 'woo-vipps'), $this->get_payment_method_name()),
1681 - 'Vipps'=> sprintf(__('%1$s', 'woo-vipps'), $this->get_payment_method_name()),
1682 - 'pay_with_card' => sprintf(__('Pay with card through %1$s', 'woo-vipps'), $this->get_payment_method_name()),
1833 + 'Continue with Vipps'=>sprintf(__('Continue with %1$s', 'woo-vipps'), $name),
1834 + 'Vipps'=> sprintf(__('%1$s', 'woo-vipps'), $name),
1835 + 'pay_with_card' => sprintf(__('Pay with card through %1$s', 'woo-vipps'), $name),
1836 + 'termsAndConditionsError' => __( 'Please read and accept the terms and conditions to proceed with your order.', 'woocommerce' ),
1837 + 'temporaryError' => sprintf(__('%1$s is temporarily unavailable.','woo-vipps'),$name),
1838 + 'successMessage' => sprintf(__('To the %1$s app!','woo-vipps'), $name),
1839 + 'cancel'=> __("Cancel", 'woo-vipps'),
1840 + 'close'=> __("Close", 'woo-vipps'),
1841 + 'missingPaymentUrl'=> __("Successful checkout response has no payment URL", 'woo-vipps'),
1842 + 'expressCheckoutFailed'=> __("Express checkout failed", 'woo-vipps'),
1843 + 'unexpectedCheckoutResponse'=> __("Unexpected express checkout response", 'woo-vipps'),
1844 + 'vippsCheckoutFailed'=> __("Vipps Mobilepay checkout failed", 'woo-vipps'),
1845 + 'correctHighlightedFields'=> __("Please correct the highlighted fields.", 'woo-vipps'),
1846 + 'checkFormBeforeContinuing'=> __("Please check the form before continuing.", 'woo-vipps'),
1847 + 'cartCheckoutUnavailable'=> __("Cannot start express checkout: cart checkout is unavailable", 'woo-vipps'),
1848 + 'productIdentifiersMissing'=> __("Cannot buy product: product id, variation id and sku are missing", 'woo-vipps'),
1849 + 'productFormNotFound'=> __("Cannot buy product: product form not found", 'woo-vipps'),
1850 + 'paymentSuccessfulRedirecting' => __("Payment successful. Redirecting…", 'woo-vipps'),
1683 1851 );
1684 - wp_localize_script('vipps-gw', 'VippsLocale', $strings);
1852 + wp_localize_script($handle, 'VippsLocale', $strings);
1685 1853 }
1686 1854
1687 1855 public function wp_enqueue_scripts() {
1856 + // Add late: if this value isn't 'yes' we wil not add order attribution to express orders. IOK 2026-09-10
1857 + $this->vippsJSConfig['expressOrderAttribution'] = $this->gateway()->get_option('vippsorderattribution');
1688 1858 wp_localize_script('vipps-gw', 'VippsConfig', $this->vippsJSConfig);
1689 1859 // Add certain translations very late so translation plugins get a chance to work. IOK 2026-02-02
1690 - $this->script_add_vippslocale();
1860 + $this->script_add_vippslocale('vipps-gw');
1691 1861
1692 1862 wp_enqueue_script('vipps-gw');
1693 1863 wp_enqueue_style('vipps-gw',plugins_url('css/vipps.css',__FILE__),array(),filemtime(dirname(__FILE__) . "/css/vipps.css"));
1694 1864 wp_enqueue_script('vipps-button-webcomponent');
@@ -1693,13 +1863,55 @@
1693 1863 wp_enqueue_style('vipps-gw',plugins_url('css/vipps.css',__FILE__),array(),filemtime(dirname(__FILE__) . "/css/vipps.css"));
1694 1864 wp_enqueue_script('vipps-button-webcomponent');
1695 1865 }
1696 1866
1867 + // These scripts should be loaded only on the checkout screen and is used only for the classic shortcode checkout and
1868 + // the pay-for-order screen. IOK 2026-09-15
1869 + public function enqueue_classic_checkout_scripts () {
1870 + if ( ! function_exists( 'is_checkout' ) || ! is_checkout() || is_order_received_page() ) {
1871 + return;
1872 + }
1873 + // Order-pay is rendered by the classic form even with a Blocks checkout page.
1874 + // It must bypass the check for the parent checkout page's block content.
1875 + if ( ! is_checkout_pay_page() ) {
1876 + $utils = '\\Automattic\\WooCommerce\\Blocks\\Utils\\CartCheckoutUtils';
1877 + $uses_checkout_block = is_callable( array( $utils, 'is_checkout_block_default' ) )
1878 + ? $utils::is_checkout_block_default()
1879 + : has_block( 'woocommerce/checkout', wc_get_page_id( 'checkout' ) );
1697 1880
1881 + if ( $uses_checkout_block ) {
1882 + return;
1883 + }
1884 + }
1885 +
1886 + // This script uses jQuery because the classic checkout screen does too. IOK 2026-09-15
1887 + $relative_path = 'js/vipps-classic-checkout.js';
1888 + wp_enqueue_script(
1889 + 'vipps-classic-checkout',
1890 + plugins_url( $relative_path, __FILE__ ),
1891 + array( 'jquery', 'wc-checkout', 'vipps-gw' ),
1892 + filemtime( plugin_dir_path( __FILE__ ) . $relative_path ),
1893 + true
1894 + );
1895 +
1896 + if ( is_checkout_pay_page() ) {
1897 + $order = wc_get_order( absint( get_query_var( 'order-pay' ) ) );
1898 + wp_add_inline_script( 'vipps-classic-checkout', 'window.VippsOrderPayConfig = ' . wp_json_encode( array(
1899 + 'orderId' => $order ? $order->get_id() : 0,
1900 + 'orderKey' => $order ? $order->get_order_key() : '',
1901 + 'billingEmail' => $order ? $order->get_billing_email() : '',
1902 + 'endpoint' => $order ? rest_url( 'wc/store/v1/checkout/' . $order->get_id() ) : '',
1903 + 'nonce' => wp_create_nonce( 'wc_store_api' ),
1904 + 'billingAddress' => $order ? $order->get_address( 'billing' ) : array(),
1905 + 'shippingAddress' => $order ? $order->get_address( 'shipping' ) : array(),
1906 + ) ) . ';', 'before' );
1907 + }
1908 + }
1909 +
1910 +
1698 1911 public function add_shortcodes() {
1699 1912 add_shortcode('woo_vipps_buy_now', array($this, 'buy_now_button_shortcode'));
1700 1913 add_shortcode('woo_vipps_express_checkout_button', array($this, 'express_checkout_button_shortcode'));
1701 - add_shortcode('woo_vipps_express_checkout_banner', array($this, 'express_checkout_banner_shortcode'));
1702 1914
1703 1915 // Badges, if using shortcodes
1704 1916 // New vipps-mobilepay-badge shortcode. LP 19.11.2024
1705 1917 add_shortcode('vipps-mobilepay-badge', array($this, 'vipps_mobilepay_badge_shortcode'));
@@ -1704,8 +1916,11 @@
1704 1916 // New vipps-mobilepay-badge shortcode. LP 19.11.2024
1705 1917 add_shortcode('vipps-mobilepay-badge', array($this, 'vipps_mobilepay_badge_shortcode'));
1706 1918 // Legacy vipps-badge shortcode. LP 19.11.2024
1707 1919 add_shortcode('vipps-badge', array($this, 'vipps_badge_shortcode'));
1920 +
1921 + // special page handling, previously a fake page. LP 2026-08-25
1922 + add_shortcode('vipps_special_page', array($this, 'vipps_special_page_shortcode'));
1708 1923 }
1709 1924
1710 1925
1711 1926 public function log ($what,$type='info') {
@@ -1731,8 +1946,10 @@
1731 1946 }
1732 1947
1733 1948 // Show express button option on checkout form. LP 2026-03-23
1734 1949 public function checkout_before_customer_details_express () {
1950 + if (did_action('woo_vipps_checkout_before_customer_details_express')) return;
1951 + do_action('woo_vipps_checkout_before_customer_details_express');
1735 1952 $gw = $this->gateway();
1736 1953 if (!$gw->show_express_checkout()) return;
1737 1954 $this->express_checkout_section_html();
1738 1955 }
@@ -1746,77 +1963,51 @@
1746 1963 $this->checkout_express_checkout_button_html();
1747 1964 echo '</fieldset>';
1748 1965 }
1749 1966
1750 - public function express_checkout_banner() {
1967 + // Show the express button if reasonable to do so
1968 + public function cart_express_checkout_button() {
1751 1969 $gw = $this->gateway();
1752 - if (!$gw->show_express_checkout()) return;
1753 - return $this->express_checkout_banner_html();
1754 - }
1755 1970
1756 - public function express_checkout_banner_html() {
1757 - $url = $this->express_checkout_url();
1758 - $url = wp_nonce_url($url,'express','sec');
1759 - $text = __('Skip entering your address and just checkout using', 'woo-vipps');
1760 - $linktext = 'Express'; // dont translate. LP 2025-09-03
1761 - $logo = $this->get_express_banner_logo();
1762 - $payment_method = $this->get_payment_method_name();
1763 -
1764 - $img_classes = 'express-banner-logo inline negative ' . strtolower($payment_method) . '-logo';
1765 - $div_classes = 'woocommerce-info ' . strtolower($payment_method) . '-info';
1766 - $a_classes = 'express-banner-link ' . strtolower($payment_method) . '-link';
1767 -
1768 - $message = $text . "<a href='$url' class='$a_classes'><img class='$img_classes' border=0 src='$logo' alt='$payment_method'/>$linktext!</a>";
1769 - $message = apply_filters('woo_vipps_express_checkout_banner', $message, $url, $payment_method);
1770 - ?>
1771 - <div class="<?php echo $div_classes;?>"><?php echo $message;?></div>
1772 - <?php
1971 + if ($gw->show_express_checkout()){
1972 + return $this->cart_express_checkout_button_html();
1973 + }
1773 1974 }
1774 1975
1775 - public function checkout_express_checkout_button() {
1976 + public function minicart_express_checkout_button() {
1776 1977 $gw = $this->gateway();
1777 1978
1778 1979 if ($gw->show_express_checkout()){
1779 - return $this->checkout_express_checkout_button_html();
1980 + return $this->cart_express_checkout_button_html('minicart');
1780 1981 }
1781 1982 }
1782 1983
1783 - public function checkout_express_checkout_button_html() {
1784 - $url = $this->express_checkout_url();
1785 - $url = wp_nonce_url($url,'express','sec');
1786 - $button= apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context('checkout'));
1984 + // This is for the Vipps SDK button used instead of the normal "pay for order" and "confirm order" buttons
1985 + // on the classic checkout and pay-for-order pages. It gets swapped in when the user selects vipps, and swapped out otherwise.
1986 + public function add_checkout_button_for_classic () {
1987 + $button = $this->get_html_button_for_context('checkout');
1988 + $submit = "<div class='vipps-classic-checkout-container'><button id='vipps-classic-checkout-submit' class='hidden vipps-submit-wrapper' type='submit'>$button</button></div>";
1989 + echo $submit;
1990 + }
1991 +
1992 + public function cart_express_checkout_button_html($context= 'cart') {
1993 + $button = apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context($context));
1787 1994 $method = $this->get_payment_method_name();
1788 1995 $title = sprintf(__('Buy now with %1$s!', 'woo-vipps'), $method);
1789 - $html = "<a href='$url' class='vipps-express-checkout short $method' title='$title'>$button</a>";
1996 + $url = "#";
1997 + $sec = wp_create_nonce('express');
1998 + $html = "<a href='#' class='vipps-express-checkout short " . esc_attr($method) . "' title='" . esc_attr($title) . "' data-sec='" . esc_attr($sec) . "'>$button</a>";
1790 1999 $html = apply_filters('woo_vipps_cart_express_checkout_button', $html, $url);
1791 2000 echo $html;
1792 2001 }
1793 2002
1794 - // Show the express button if reasonable to do so
1795 - public function cart_express_checkout_button() {
1796 - $gw = $this->gateway();
1797 -
1798 - if ($gw->show_express_checkout()){
1799 - return $this->cart_express_checkout_button_html();
1800 - }
1801 - }
1802 -
1803 - public function minicart_express_checkout_button() {
1804 - $gw = $this->gateway();
1805 -
1806 - if ($gw->show_express_checkout()){
1807 - return $this->cart_express_checkout_button_html(true);
1808 - }
1809 - }
1810 -
1811 - public function cart_express_checkout_button_html($minicart = false) {
1812 - $url = $this->express_checkout_url();
1813 - $url = wp_nonce_url($url,'express','sec');
1814 - $context = $minicart ? 'minicart' : 'cart';
1815 - $button= apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context($context));
2003 + public function checkout_express_checkout_button_html() {
2004 + $button = apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context('checkout'));
1816 2005 $method = $this->get_payment_method_name();
1817 2006 $title = sprintf(__('Buy now with %1$s!', 'woo-vipps'), $method);
1818 - $html = "<a href='$url' class='vipps-express-checkout short $method' title='$title'>$button</a>";
2007 + $url = "#";
2008 + $sec = wp_create_nonce('express');
2009 + $html = "<a href='#' class='vipps-express-checkout short " . esc_attr($method) . "' title='" . esc_attr($title) . "' data-sec='" . esc_attr($sec) . "'>$button</a>";
1819 2010 $html = apply_filters('woo_vipps_cart_express_checkout_button', $html, $url);
1820 2011 echo $html;
1821 2012 }
1822 2013
@@ -1855,19 +2046,11 @@
1855 2046 public function express_checkout_button_shortcode() {
1856 2047 $gw = $this->gateway();
1857 2048 if (!$gw->cart_supports_express_checkout()) return;
1858 2049 ob_start();
1859 - $this->cart_express_checkout_button_html('shortcode');
2050 + $this->cart_express_checkout_button_html('cart');
1860 2051 return ob_get_clean();
1861 2052 }
1862 - // Show a banner normally shown for non-logged-in-users at the checkout page. It does not need to check if we are to show the button, obviously, but needs to see if the cart works
1863 - public function express_checkout_banner_shortcode() {
1864 - $gw = $this->gateway();
1865 - if (!$gw->cart_supports_express_checkout()) return;
1866 - ob_start();
1867 - $this->express_checkout_banner_html();
1868 - return ob_get_clean();
1869 - }
1870 2053
1871 2054 // Manage the various product meta fields
1872 2055 public function process_product_meta ($id, $post) {
1873 2056 // This is for the 'buy now' button
@@ -2518,77 +2701,93 @@
2518 2701 return null;
2519 2702 }
2520 2703 }
2521 2704
2705 + // Special pages, and some callbacks. IOK 2018-05-18
2706 + public function template_redirect() {
2522 2707
2523 - // If this is a special page, return true very early because we are handling this. IOK 2023-02-22
2524 - public function pre_handle_404($current, $query) {
2525 - if (!is_admin()) {
2526 - $special = $this->is_special_page();
2527 - if ($special) {
2528 - // Ensure very early on that Autooptimize does not try to optimize us (if installed) IOK 2023-03-04
2529 - add_filter( 'autoptimize_filter_noptimize', '__return_true');
2530 - return true;
2531 - }
2708 + // Handle legacy vipps-buy-now urls that auto-start express checkout for certain product - in QR codes etc IOK 2026-09-11
2709 + // We redirect these to the new location.
2710 + $path = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
2711 + if (( ($_GET['VippsSpecialPage'] ?? '') == 'vipps-buy-product') || ($path && preg_match("!/vipps-buy-product/?$!", $path)) ) {
2712 + $url = static::get_special_page_url();
2713 + $_GET['action'] = 'buy_product';
2714 + $q = build_query($_GET);
2715 + wp_redirect($url . "?" . $q, 302);
2716 + exit();
2532 2717 }
2533 - return $current;
2718 +
2719 + if (static::is_special_page()) {
2720 + // Legacy: Stop the canonical redirect here. Unclear if still necessary. IOK 2026-09-11
2721 + remove_filter('template_redirect', 'redirect_canonical', 10);
2722 + // dont cache special page. LP 2026-08-25
2723 + $this->nocache();
2724 + // Do the custom pre-load actions for these pages IOK 2026-09-11
2725 + do_action('woo_vipps_before_handling_special_page', ($_GET['action'] ?? ""));
2726 + }
2534 2727 }
2535 2728
2536 - // Special pages, and some callbacks. IOK 2018-05-18
2537 - public function template_redirect() {
2538 - global $post;
2539 - // Handle special callbacks
2540 - $special = $this->is_special_page() ;
2729 + // Ran in template redirect for the special page. IOK 2026-09-2
2730 + public function pre_special_page_actions ($action) {
2731 + // Change title dynamically depending on action. LP 2026-09-02
2732 + add_filter('the_title', [$this, 'vipps_special_page_endpoint_title'], 10, 2);
2541 2733
2542 - if ($special) {
2543 - remove_filter('template_redirect', 'redirect_canonical', 10);
2544 - do_action('woo_vipps_before_handling_special_page', $special);
2734 + // If we are handling the 'wait for payment' action, we need to poll the order status before
2735 + // we start producing content IOK 2026-09-21
2736 + if ($action == 'wait_for_payment') {
2737 + $this->handle_payment_poll_and_redirect();
2738 + }
2545 2739
2546 - // Allow above hook to actually handle special pages. It should probably call $Vipps->fakepage or a redirect; can be used
2547 - // to intercept express checkout etc. IOK 2022-03-18
2548 - if (! apply_filters('woo_vipps_special_page_handled', false, $special)) {
2549 - $this->$special();
2550 - }
2740 + // Some validation is required for this action
2741 + if ($action == 'do_express_checkout') {
2742 + $this->vipps_express_checkout_consistency_check();
2551 2743 }
2744 + // These two actions require an extra script
2745 + if (in_array($action, ['buy_product','do_express_checkout'])) {
2746 + wp_enqueue_script('vipps-purchase', plugins_url('js/vipps-purchase.js',__FILE__), ['vipps-gw'],
2747 + filemtime(dirname(__FILE__) . "/js/vipps-purchase.js"),
2748 + ['in_footer'=>true]
2749 + );
2750 + }
2751 + }
2552 2752
2553 - $consentremoval = $this->is_consent_removal();
2554 - if ($consentremoval) {
2555 - remove_filter('template_redirect', 'redirect_canonical', 10);
2556 - do_action('woo_vipps_before_handling_special_page', 'consentremoval');
2557 - if (! apply_filters('woo_vipps_special_page_handled', false, 'consentremoval')) {
2558 - $this->vipps_consent_removal_callback($consentremoval);
2753 + // Dynamic special page title depending on endpoint/action, only frontend. LP 2026-09-02
2754 + public function vipps_special_page_endpoint_title($title, $postid = 0) {
2755 + global $wp_query;
2756 + // Comment from woocommerce's wc_page_endpoint_title where this logic is from: LP 2026-09-02
2757 +
2758 + // In block themes the whole template (header, footer, content) renders inside the main
2759 + // loop, so `the_title` fires for any post title rendered on the page (e.g. a product in a
2760 + // server-rendered mini-cart) - not just the page's own heading. Only replace the title of
2761 + // the queried page so an earlier title doesn't consume this one-shot filter.
2762 + if ( ! is_null( $wp_query ) && ! is_admin() && is_main_query() && in_the_loop() && is_page() && $postid == static::get_special_page_id() ) {
2763 + switch ($_GET['action'] ?? '') {
2764 + case 'wait_for_payment':
2765 + $title = __('Processing order', 'woo-vipps');
2766 + break;
2767 + case 'do_express_checkout':
2768 + case 'buy_product':
2769 + $title = __('Express Checkout', 'woo-vipps');
2770 + break;
2559 2771 }
2560 2772 }
2773 + return $title;
2561 2774 }
2775 +
2562 2776 // Template handling for special pages. IOK 2018-11-21
2777 + // This is legacy - the special page is now a real page, so it can have a special template using standard WP methods. IOK 2026-09-11
2563 2778 public function template_include($template) {
2564 - $special = $this->is_special_page() ;
2565 - if ($special) {
2779 + if (static::is_special_page()) {
2566 2780 // Get any special template override from the options IOK 2020-02-18
2567 2781 $specific = $this->gateway()->get_option('vippsspecialpagetemplate');
2568 2782 $found = locate_template($specific,false,false);
2569 2783 if ($found) $template=$found;
2570 2784
2571 - return apply_filters('woo_vipps_special_page_template', $template, $special);
2785 + return apply_filters('woo_vipps_special_page_template', $template, $_GET['action'] ?? '');
2572 2786 }
2573 2787 return $template;
2574 2788 }
2575 2789
2576 -
2577 - // Can't use wc-api for this, as that does not support DELETE . IOK 2018-05-18
2578 - private function is_consent_removal () {
2579 -
2580 - if ($_SERVER['REQUEST_METHOD'] != 'DELETE') return false;
2581 - if ( !get_option('permalink_structure')) {
2582 - if (@$_REQUEST['vipps-consent-removal']) return @$_REQUEST['callback'];
2583 - return false;
2584 - }
2585 - if (preg_match("!/vipps-consent-removal/([^/]*)!", $_SERVER['REQUEST_URI'], $matches)) {
2586 - return @$_REQUEST['callback'];
2587 - }
2588 - return false;
2589 - }
2590 -
2591 2790 // On the thank you page, we have a completed order, so we need to restore any saved cart and possibly log in
2592 2791 // the user if using Express Checkout IOK 2020-10-09
2593 2792 public function woocommerce_before_thankyou ($orderid) {
2594 2793 $order = wc_get_order($orderid);
@@ -2656,9 +2855,8 @@
2656 2855
2657 2856 // Support adding pickup locations to any shipping rate using the 'woo_vipps_shipping_method_pickup_points' filter
2658 2857 // IOK 2025-11-19
2659 2858 add_filter('woo_vipps_modify_express_checkout_rate', array($this, 'express_add_pickup_location_options'), 10, 4);
2660 -
2661 2859 }
2662 2860
2663 2861 public function get_payment_method_name() {
2664 2862 return $this->gateway()->get_option('payment_method_name');
@@ -2683,9 +2881,8 @@
2683 2881 // Will also probably be used to maintain a real utility-page for Vipps actions later for themes where this
2684 2882 // is important.
2685 2883 add_filter('woocommerce_create_pages', array($this, 'woocommerce_create_pages'), 50, 1);
2686 2884
2687 -
2688 2885 // Callbacks use the Woo API IOK 2018-05-18
2689 2886 add_action( 'woocommerce_api_wc_gateway_vipps', array($this,'vipps_callback'));
2690 2887 add_action( 'woocommerce_api_vipps_shipping_details', array($this,'vipps_shipping_details_callback'));
2691 2888
@@ -2696,19 +2893,21 @@
2696 2893 add_action( 'woocommerce_cart_actions', array($this, 'cart_express_checkout_button'));
2697 2894 add_action( 'woocommerce_widget_shopping_cart_buttons', array($this, 'minicart_express_checkout_button'), 30);
2698 2895
2699 2896 // Previously we added an express html banner to the action 'woocommerce_before_checkout_form.',
2700 - // replaced by the new express buttons in manner more like Gutenberg. LP 2026-03-23
2897 + // replaced by the new express buttons in manner more like Gutenberg. for grepping: "express legacy checkout". LP 2026-03-23
2701 2898 add_action('woocommerce_checkout_before_customer_details', array($this, 'checkout_before_customer_details_express'), 5);
2702 2899
2703 2900 add_action('woocommerce_after_add_to_cart_button', array($this, 'single_product_buy_now_button'));
2704 2901 add_action('woocommerce_after_shop_loop_item', array($this, 'loop_single_product_buy_now_button'), 20);
2705 2902
2903 + // For the classic checkout page and pay-for-order page, use a custom submit button when payment method
2904 + // is Vipps
2905 + add_action('woocommerce_review_order_after_submit', array($this, 'add_checkout_button_for_classic'));
2906 + add_action('woocommerce_pay_order_after_submit', array($this, 'add_checkout_button_for_classic'));
2706 2907
2707 - // Special pages and callbacks handled by template_redirect
2708 - // We must also notify WP and other plugins that we are handling this 404-like situation. IOK 2023-02-22
2908 + // Special pages and callbacks handled by template_redirect. IOK 2023-02-22
2709 2909 add_action('template_redirect', array($this,'template_redirect'),1);
2710 - add_action('pre_handle_404', array($this, 'pre_handle_404'), 1, 2);
2711 2910
2712 2911 // Allow overriding their templates
2713 2912 add_filter('template_include', array($this,'template_include'), 10, 1);
2714 2913
@@ -2715,21 +2914,8 @@
2715 2914 // Ajax endpoints for checking the order status while waiting for confirmation
2716 2915 add_action('wp_ajax_nopriv_check_order_status', array($this, 'ajax_check_order_status'));
2717 2916 add_action('wp_ajax_check_order_status', array($this, 'ajax_check_order_status'));
2718 2917
2719 -
2720 - // Buying a single product directly using express checkout IOK 2018-09-28
2721 - add_action('wp_ajax_nopriv_vipps_buy_single_product', array($this, 'ajax_vipps_buy_single_product'));
2722 - add_action('wp_ajax_vipps_buy_single_product', array($this, 'ajax_vipps_buy_single_product'));
2723 -
2724 - // This is for express checkout which we will also do asynchronously IOK 2018-05-28
2725 - add_action('wp_ajax_nopriv_do_express_checkout', array($this, 'ajax_do_express_checkout'));
2726 - add_action('wp_ajax_do_express_checkout', array($this, 'ajax_do_express_checkout'));
2727 -
2728 - // Same thing, but for single products IOK 2018-05-28
2729 - add_action('wp_ajax_nopriv_do_single_product_express_checkout', array($this, 'ajax_do_single_product_express_checkout'));
2730 - add_action('wp_ajax_do_single_product_express_checkout', array($this, 'ajax_do_single_product_express_checkout'));
2731 -
2732 2918 // Handle the cancel unpaid order action when the "hold stock" times out.
2733 2919 // For *normal* vipps orders, we run another cronjob every 5. minute which checks order status,
2734 2920 // therefore here it suffices to check if the order is 'cancelled' at Vipps, and if so we return.
2735 2921 // For Checkout the rules are different though.
@@ -2808,9 +2994,8 @@
2808 2994 $this->vippsJSConfig = array();
2809 2995 $this->vippsJSConfig['vippsajaxurl'] = admin_url('admin-ajax.php');
2810 2996 $this->vippsJSConfig['BuyNowWith'] = __('Buy now with', 'woo-vipps');
2811 2997 $this->vippsJSConfig['BuyNowWithVipps'] = sprintf(__('Buy now with %1$s', 'woo-vipps'), $this->get_payment_method_name());
2812 - $this->vippsJSConfig['vippslogourl'] = plugins_url('img/vipps_logo_negativ_rgb_transparent.png',__FILE__);
2813 2998 $this->vippsJSConfig['vippssmileurl'] = plugins_url('img/vmp-logo.png',__FILE__);
2814 2999 $this->vippsJSConfig['vippsbuynowbutton'] = sprintf(__( '%1$s Buy Now button', 'woo-vipps' ), $this->get_payment_method_name());
2815 3000 $this->vippsJSConfig['vippsbuynowdescription'] = sprintf(__( 'Add a %1$s Buy Now-button to the product block or choose a product manually', 'woo-vipps'), $this->get_payment_method_name());
2816 3001 $this->vippsJSConfig['vippslanguage'] = $this->get_customer_language();
@@ -2815,8 +3000,10 @@
2815 3000 $this->vippsJSConfig['vippsbuynowdescription'] = sprintf(__( 'Add a %1$s Buy Now-button to the product block or choose a product manually', 'woo-vipps'), $this->get_payment_method_name());
2816 3001 $this->vippsJSConfig['vippslanguage'] = $this->get_customer_language();
2817 3002 $this->vippsJSConfig['vippslocale'] = get_locale();
2818 3003 $this->vippsJSConfig['vippsexpressbuttonurl'] = $this->get_payment_method_name();
3004 + $this->vippsJSConfig['paymentMethodSlug'] = sanitize_title($this->get_payment_method_name());
3005 + $this->vippsJSConfig['paymentMethodName'] = $this->get_payment_method_name();
2819 3006
2820 3007
2821 3008 // If the site supports Gutenberg Blocks, support the Checkout block IOK 2020-08-10
2822 3009 if (class_exists('Automattic\WooCommerce\Blocks\Payments\Integrations\AbstractPaymentMethodType')) {
@@ -4034,9 +4221,9 @@
4034 4221 WC()->cart->calculate_totals();
4035 4222 WC()->cart->set_session();
4036 4223 return true;
4037 4224 } catch (Exception $e) {
4038 - $this->log(sprintf(__("Error regenerating cart from order %1\$d: %2\$s", 'woo-vipps'), $order_id, $e->get_message()), 'error');
4225 + $this->log(sprintf(__("Error regenerating cart from order %1\$d: %2\$s", 'woo-vipps'), $order_id, $e->getMessage()), 'error');
4039 4226 return false;
4040 4227 }
4041 4228 }
4042 4229
@@ -4120,17 +4307,8 @@
4120 4307 header("X-Accel-Expires: 0");
4121 4308 }
4122 4309
4123 4310
4124 -
4125 - // Handle DELETE on a vipps consent removal callback
4126 - public function vipps_consent_removal_callback ($callback) {
4127 - Vipps::nocache();
4128 - // Currently, no such requests will be posted, and as this code isn't sufficiently tested,we'll just have
4129 - // to escape here when the API is changed. IOK 2020-10-14
4130 - $this->log("Consent removal is non-functional pending API changes as of 2020-10-14"); print "1"; exit();
4131 - }
4132 -
4133 4311 public function woocommerce_payment_gateways($methods) {
4134 4312 require_once(dirname(__FILE__) . "/WC_Gateway_Vipps.class.php");
4135 4313 require_once(dirname(__FILE__) . "/WC_Gateway_VippsCard.class.php");
4136 4314 // Protect the singleton: Use the object instead of the class name IOK 2025-02-04
@@ -4155,9 +4333,11 @@
4155 4333 if ( empty($_REQUEST['add-to-cart']) || ! is_numeric($_REQUEST['add-to-cart']) || empty($_REQUEST['vipps_compat_mode']) || !$_REQUEST['vipps_compat_mode']) {
4156 4334 return $url;
4157 4335 }
4158 4336 $url = $this->express_checkout_url();
4159 - $url = wp_nonce_url($url,'express','sec');
4337 + // At this point, there is always a query argument here. IOK 2026-09-21
4338 + $nonce = wp_create_nonce('express');
4339 + $url = $url . "&sec=$nonce";
4160 4340
4161 4341 return $url;
4162 4342 }
4163 4343
@@ -4253,20 +4433,40 @@
4253 4433 }
4254 4434 }
4255 4435
4256 4436 public function activate () {
4257 - static::maybe_add_cron_event();
4258 - $gw = $this->gateway();
4437 + static::maybe_add_cron_event();
4438 + $gw = $this->gateway();
4259 4439
4260 - // If store is using the default "Woo" orderprefix, generate a new one, this time using the stores' sitename if possible. IOK 2020-05-19
4261 - if ($gw->get_option('orderprefix') == 'Woo') {
4262 - $gw->update_option('orderprefix', $this->generate_order_prefix());
4263 - }
4264 - // IOK 2023-12-20 for the epayment api, we need to re-initialize webhooks at this point.
4265 - $gw->initialize_webhooks();
4266 - $this->payment_method_name = $gw->get_option('payment_method_name');
4267 - }
4440 + // If store is using the default "Woo" orderprefix, generate a new one, this time using the stores' sitename if possible. IOK 2020-05-19
4441 + if ($gw->get_option('orderprefix') == 'Woo') {
4442 + $gw->update_option('orderprefix', $this->generate_order_prefix());
4443 + }
4444 + // IOK 2023-12-20 for the epayment api, we need to re-initialize webhooks at this point.
4445 + $gw->initialize_webhooks();
4446 + $this->payment_method_name = $gw->get_option('payment_method_name');
4268 4447
4448 +
4449 + // Check if the special page is noted and actually does exist
4450 + $special = static::get_special_page_id();
4451 + if ($special) {
4452 + $special_page = get_post($special);
4453 + if ($special_page && 'trash' !== $special_page->post_status) {
4454 + // Ensure this page has the necessary shortcode. LP 2026-09-01
4455 + if (!has_shortcode($special_page->post_content, 'vipps_special_page')) {
4456 + $new_content = $special_page->post_content . "\n\n<!-- wp:shortcode -->[vipps_special_page]<!-- /wp:shortcode -->";
4457 + wp_update_post([
4458 + 'ID' => $special,
4459 + 'post_content' => $new_content,
4460 + ]);
4461 + }
4462 + } else {
4463 + delete_option('woocommerce_vipps_special_page_page_id');
4464 + }
4465 + }
4466 +
4467 + }
4468 +
4269 4469 // We have added some hooks to wp-cron; remove these. IOK 2020-04-01
4270 4470 public static function deactivate() {
4271 4471 $timestamp = wp_next_scheduled('vipps_cron_cleanup_hook');
4272 4472 wp_unschedule_event($timestamp, 'vipps_cron_cleanup_hook');
@@ -4334,28 +4534,12 @@
4334 4534 $order = wc_get_order($order->get_id());
4335 4535 $order_status = $order->get_status();
4336 4536
4337 4537 if ($order_status != 'pending') return $order_status;
4338 - // No callback has occured yet. If this has been going on for a while, check directly with Vipps
4339 - // We can't use the vipps init timestamp here, because that may be in the past for Checkout at least. IOK 2025-08-13
4340 - if ($order_status == 'pending') {
4341 - if (WC()->session) {
4342 - $now = time();
4343 - $then = WC()->session->get('_vipps_check_' . $order->get_id());
4344 - if (!$then) {
4345 - $then = $now;
4346 - WC()->session->set('_vipps_check_' . $order->get_id(), $then);
4347 - }
4348 - if (($then + (1 * 30)) > $now) { // more than half a minute? Start checking at Vipps
4349 - return $order_status;
4350 - }
4351 - } else {
4352 - // No session shouldn't be possible, but if it is..
4353 - return $order_status;
4354 - }
4355 - }
4538 +
4539 + $gw = $this->gateway();
4356 4540 $this->log("Checking order status on Vipps for order id: " . $order->get_id(), 'info');
4357 - return $this->check_status_of_pending_order($order);
4541 + $newstatus = $gw->poll_and_check_order_status($order);
4358 4542 }
4359 4543
4360 4544 // In some situations we have to empty the cart when the user goes to Vipps, so
4361 4545 // we store it in the session and restore it if the users cancels. IOK 2018-05-07
@@ -4423,8 +4607,9 @@
4423 4607
4424 4608 // Maybe log in user
4425 4609 // It is done on the thank-you page of the order, and only for express checkout.
4426 4610 function maybe_log_in_user ($order) {
4611 +
4427 4612 if (is_user_logged_in()) return;
4428 4613 if (!$order || ! self::is_vipps_order($order)) return;
4429 4614
4430 4615 // We *do* want to log in express checkout customers, but not those that
@@ -4570,129 +4755,233 @@
4570 4755 }
4571 4756 if (!$o) return;
4572 4757 if (!$o->get_meta('_vipps_single_product_express')) return;
4573 4758 if ($failed && !apply_filters('woo_vipps_restore_cart_on_express_checkout_failure', true, $o)) return;
4574 - if ($failed) WC()->cart->empty_cart();
4759 + // Restoring cart! But clear it first so we dont add this single product to the restored cart. LP 2026-09-22
4760 + WC()->cart->empty_cart();
4575 4761 $this->restore_cart($o);
4576 4762 }
4577 4763
4578 4764
4579 - public function ajax_vipps_buy_single_product () {
4580 - Vipps::nocache();
4581 - static::set_locale_if_in_header();
4582 - // We're not checking ajax referer here, because what we do is creating a session and redirecting to the
4583 - // 'create order' page wherein we'll do the actual work. IOK 2018-09-28
4584 - $session = WC()->session;
4585 - if (!$session->has_session()) {
4586 - $session->set_customer_session_cookie(true);
4765 + // Actually create a express checkout order object, with no shipping or personal information, returning information about
4766 + // the result. The order should at this point be in a/the cart. For single product purchases, this is a different cart than
4767 + // the main one; for cart purchases, it's just the WC()->cart object. IOK 2026-08-25
4768 + private function create_and_process_express_order() {
4769 + $result = null;
4770 + $gw = $this->gateway();
4771 + try {
4772 + $orderid = $gw->create_partial_order();
4773 + do_action('woo_vipps_ajax_do_express_checkout', $orderid);
4774 + } catch (Exception $e) {
4775 + $result = array('ok'=>0, 'orderid'=>0, 'msg'=>__('Could not create order','woo-vipps') . ': ' . $e->getMessage(), 'url'=>false);
4776 + return $result;
4777 + }
4778 + if (!$orderid) {
4779 + $result = array('ok'=>0, 'orderid'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false);
4780 + return $result;
4587 4781 }
4588 - $session->set('__vipps_buy_product', json_encode($_REQUEST));
4589 4782
4590 - // Incredibly, some caches will cache this page even with cookies set and no-cache headers set. So we try to
4591 - // add yet another way to inform caches that this is, in fact, not cacheable. IOK 2023-06-12
4592 - $url = add_query_arg('nc', sha1(uniqid(WC()->session->get_customer_id(),true)), $this->buy_product_url());
4783 + try {
4784 + $this->maybe_add_static_shipping($gw,$orderid);
4785 + } catch (Exception $e) {
4786 + $this->log(__("Error calculating static shipping", 'woo-vipps'), 'error');
4787 + $this->log($e->getMessage(),'error');
4788 + $result = array('ok'=>0, 'orderid'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false);
4789 + return $result;
4790 + }
4593 4791
4594 - $result = array('ok'=>1, 'msg'=>__('Processing order... ','woo-vipps'), 'url'=> $url);
4595 - wp_send_json($result);
4596 - exit();
4792 + // Now pass this to the Woo gateway and get a redirect URL back IOK 2026-08-25
4793 + $ok = $gw->process_payment($orderid);
4794 + if ($ok && $ok['result'] == 'success') {
4795 + $result = array('ok'=>1, 'orderid'=>$orderid, 'msg'=>'', 'url'=>$ok['redirect']);
4796 + return $result;
4797 + }
4798 + $result = array('ok'=>0, 'orderid'=>$orderid, 'msg'=> sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()), 'url'=>'');
4799 + return $result;
4597 4800 }
4598 4801
4599 - public function ajax_do_express_checkout () {
4600 - check_ajax_referer('do_express','sec');
4601 - Vipps::nocache();
4602 - static::set_locale_if_in_header();
4802 + // This creates a simple hash for the 'current order' which we will store in the session if we proceed to checkout. We use this to
4803 + // avoid/warn the user of duplicate purchases. IOK 2026-09-09
4804 + public function create_order_hash($args=null) {
4805 + // If we have no arguments, we'll hash the cart.
4806 + if (empty($args)) {
4807 + $cartitems = WC()->cart->get_cart();
4808 + $orderspec = array();
4809 + foreach($cartitems as $item => $values) {
4810 + $orderspec[] = array('sku'=> ($values['sku'] ?? ""), 'product_id'=>($values['product_id'] ?? 0), 'variation_id'=>($values['variation_id'] ?? 0), 'quantity'=>($values['quantity'] ?? 1));
4811 + }
4812 + $args = $orderspec;
4813 + }
4814 + return md5(serialize($args));
4815 + }
4816 +
4817 +
4818 + // This method may provide HTML form elements to ask a user questions after starting
4819 + // express checkout. It is used to detect duplicate orders, possibly for terms and conditions, and user-definiable customizations. IOK 2026-09-09
4820 + // NULL productinfo means use the cart; the "current hash" is used to detect duplicates, and is calculated by the caller.
4821 + public function express_order_needs_confirmation($args, $productinfo, $current_hash) {
4822 + $elements = [];
4823 + $html = "";
4824 +
4825 + // First, let's check if we need to confirm the purchase.
4826 + $last_express_purchase_hash = WC()->session->get('woo_vipps_last_express');
4827 + if ($last_express_purchase_hash) {
4828 + list($hash, $orderid, $stamp) = explode(":", $last_express_purchase_hash);
4829 + $cutoff = $stamp + apply_filters('woo_vipps_recent_order_cutoff', (3*60));
4830 + if ($hash == $current_hash && (time() <= $cutoff )) {
4831 + $order = wc_get_order($orderid);
4832 + $status = $order ? $order->get_status() : false;
4833 + // IOK TODO/FIXME actually, if the order is pending/failed/cancelled and *identical* to our current productinfo, we could plausibly do a restart here. Would probably require careful checking though, and
4834 + // a different flow. IOK 2026-09-17
4835 + if (in_array($status, ['on-hold', 'processing', 'completed'])) {
4836 + $header = __("Are you sure?",'woo-vipps');
4837 + $body = __("You recently completed an order with exactly the same products as you are buying now. There should be an email in your inbox from the previous purchase. Are you sure you want to order again?",'woo-vipps');
4838 + $elements['possible_duplicate'] = "<h1>$header</h1><p>$body</p>";
4839 + $this->log(__("It seems a customer is trying to re-order product(s) recently bought in the same session, asking user for confirmation", 'woo-vipps'), 'info');
4840 + }
4841 + }
4842 + }
4843 +
4603 4844 $gw = $this->gateway();
4845 + $askForTerms = function_exists('wc_terms_and_conditions_checkbox_enabled') ? wc_terms_and_conditions_checkbox_enabled() : true;
4846 + $askForTerms = $askForTerms && ($gw->get_option('expresscheckout_termscheckbox') == 'yes');
4847 + $askForTerms = apply_filters('woo_vipps_express_checkout_terms_and_conditions_checkbox_enabled', $askForTerms);
4604 4848
4605 - if (!$gw->express_checkout_available() || !$gw->cart_supports_express_checkout()) {
4606 - $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false);
4607 - wp_send_json($result);
4608 - exit();
4849 + if ($askForTerms) {
4850 + $termsHTML = '';
4851 + // Include shop terms
4852 + ob_start();
4853 + wc_get_template('checkout/terms.php');
4854 + $termsHTML = ob_get_clean();
4855 + $termsHTML = apply_filters('woo_vipps_express_checkout_terms_and_conditions_html',$termsHTML);
4856 + $elements['terms'] = $termsHTML;
4609 4857 }
4610 4858
4859 + // Custom fields
4860 + ob_start();
4861 + do_action('woo_vipps_express_checkout_orderspec_form', $productinfo, $args);
4862 + $extra_fields = ob_get_clean();
4863 + if (!empty($extra_fields)) {
4864 + $elements['extra'] = $extra_fields;
4865 + }
4611 4866
4612 -
4867 + if (!empty($elements)) {
4868 + $html = join("\n", array_values($elements));
4869 + $msg = join(",", array_keys($elements));
4870 + return ['ok'=>2, 'msg'=>$msg, 'html'=>$html, 'url'=>''];
4871 + }
4613 4872
4873 + return false;
4874 +
4875 + }
4876 +
4877 + public function rest_do_express_checkout ($request) {
4878 + Vipps::nocache();
4879 + check_ajax_referer('express', 'sec');
4880 + static::set_locale_if_in_header();
4881 + $args = $request->get_json_params();
4882 + if (!$args) {
4883 + return new WP_Error('no_data', __('No data passed to express checkout', 'woo-vipps'), ['status' => 400]);
4884 + }
4885 +
4886 + // Since this is the REST api, we need to load the cart manually here. IOK 2026-08-27
4887 + if ( is_null( WC()->cart ) ) {
4888 + WC()->frontend_includes();
4889 + if ( ! WC()->session instanceof WC_Session ) {
4890 + WC()->session = new WC_Session_Handler();
4891 + WC()->session->init();
4892 + }
4893 + if (is_null( WC()->customer)) {
4894 + WC()->customer = new WC_Customer( get_current_user_id(), true );
4895 + }
4896 + WC()->cart = new WC_Cart();
4897 + WC()->cart->get_cart_from_session();
4898 + }
4899 +
4900 +
4901 + $gw = $this->gateway();
4902 + if (!$gw->express_checkout_available() || !$gw->cart_supports_express_checkout()) {
4903 + $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false);
4904 + return $result;
4905 + }
4614 4906 // Validate cart going forward using same logic as WC_Cart->check_cart() but not adding notices.
4615 4907 $toolate = false;
4616 4908 $msg = "";
4617 4909 $valid = WC()->cart->check_cart_item_validity();
4618 4910 if ( is_wp_error( $valid) ) {
4619 - $toolate = true;
4620 - $msg = "<br>" . $valid->get_error_message();
4911 + $toolate = true;
4912 + $msg = "<br>" . $valid->get_error_message();
4621 4913 }
4622 4914 $stock = WC()->cart->check_cart_item_stock();
4623 - if ( is_wp_error( $stock) ) {
4624 - $toolate = true;
4625 - $msg = "<br>" . $stock->get_error_message();
4626 - }
4915 + if ( is_wp_error( $stock) ) {
4916 + $toolate = true;
4917 + $msg = "<br>" . $stock->get_error_message();
4918 + }
4627 4919
4628 4920 if ($toolate) {
4629 4921 $result = array('ok'=>0, 'msg'=>sprintf(__('Some of the products in your cart are no longer available in the quantities you have ordered. Please <a href="%1$s">edit your order</a> before continuing the checkout','woo-vipps'), wc_get_cart_url()) . $msg, 'url'=>false);
4630 - wp_send_json($result);
4631 - exit();
4922 + return $result;
4632 4923 }
4633 4924
4634 - try {
4635 - $orderid = $gw->create_partial_order();
4636 - do_action('woo_vipps_ajax_do_express_checkout', $orderid);
4637 - } catch (Exception $e) {
4638 - $this->log($e->getMessage(),'error');
4639 - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps') . ': ' . $e->getMessage(), 'url'=>false);
4640 - wp_send_json($result);
4641 - exit();
4642 - }
4643 - if (!$orderid) {
4644 - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false);
4645 - wp_send_json($result);
4646 - exit();
4925 + // Then the cookies. These would be the _ga and sbjs_ cookies typically, but we'll let users handle these themselves.
4926 + // These are passed as arguments from the javascript, since proxies are likely to strip them. This should allow
4927 + // systems like MonsterInsights that look for the _GA cookie to succeed. IOK 2026-08-30
4928 + $cookies = $args['cookies'] ?? [];
4929 + foreach($cookies as $key => $value) {
4930 + if (!isset($_COOKIE[$key])) {
4931 + $_COOKIE[$key] = $value;
4932 + }
4647 4933 }
4934 + // There might be extra values here now, which would typically have been posted as POST arguments, in a form.
4935 + // User-defined stuff and so on. We'll initiate the POST value with these to simulate this for backwards compatibility.
4936 + $others =$args['post'] ?? [];
4937 + foreach($args['post'] as $key=>$value) {
4938 + $_POST[$key] = $value;
4939 + }
4648 4940
4649 - try {
4650 - $this->maybe_add_static_shipping($gw,$orderid);
4651 - } catch (Exception $e) {
4652 - $this->log(__("Error calculating static shipping", 'woo-vipps'), 'error');
4653 - $this->log($e->getMessage(),'error');
4654 - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false);
4655 - wp_send_json($result);
4656 - exit();
4941 + // Try to avoid re-purchasing the same order repeatedly. IOK 2026-09-02
4942 + $current_hash = $this->create_order_hash();
4943 + $confirmation = (bool) intval(($others['confirmed'] ?? 0));
4944 + if (!$confirmation) {
4945 + $result = $this->express_order_needs_confirmation($args, null, $current_hash);
4946 + if (!empty($result)) {
4947 + return $result;
4948 + }
4657 4949 }
4658 -
4659 - $ok = $gw->process_payment($orderid);
4660 - if ($ok && $ok['result'] == 'success') {
4661 - $result = array('ok'=>1, 'msg'=>'', 'url'=>$ok['redirect']);
4662 - wp_send_json($result);
4663 - exit();
4950 +
4951 + $result = $this->create_and_process_express_order();
4952 + if ($result['ok'] == 1) {
4953 + $orderid = $result['orderid'];
4954 + WC()->session->set('woo_vipps_last_express', "$current_hash:$orderid:" . time());
4955 + WC()->session->save_data();
4664 4956 }
4665 - $result = array('ok'=>0, 'msg'=> sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()), 'url'=>'');
4666 - wp_send_json($result);
4667 - exit();
4957 + return $result;
4958 +
4668 4959 }
4669 4960
4670 - // Same as ajax_do_express_checkout, but for a single product/variation. Duplicate code because we want to manipulate the cart differently here. IOK 2018-09-25
4671 - public function ajax_do_single_product_express_checkout() {
4672 - check_ajax_referer('do_express','sec');
4673 - Vipps::nocache();
4961 +
4962 + // Rest handler for single product express checkout. Expects arguments as JSON. IOK 2026-08-25
4963 + public function rest_do_single_product_express_checkout ($request) {
4964 + Vipps::nocache();
4674 4965 static::set_locale_if_in_header();
4675 - require_once(dirname(__FILE__) . "/WC_Gateway_Vipps.class.php");
4676 - $gw = $this->gateway();
4677 -
4678 - if (!$gw->express_checkout_available()) {
4679 - $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false);
4680 - wp_send_json($result);
4681 - exit();
4966 + $args = $request->get_json_params();
4967 + if (!$args) {
4968 + return new WP_Error('no_data', __('No data passed to express checkout', 'woo-vipps'), ['status' => 400]);
4682 4969 }
4970 + $result = ['ok' => 0, 'msg'=>'', 'orderid'=>0, 'url'=>''];
4683 4971
4972 + // We receive the varid, prodid, sku and quantity directly. One of these. The sku is the dominant one. IOK 2026-08-27
4973 + $varid = intval($args['variation_id'] ?? 0);
4974 + $prodid = intval($args['product_id'] ?? 0);
4975 + $sku = sanitize_text_field($args['sku'] ?? "");
4976 + $quantity = max(1, intval($args['quantity'] ?? 0));
4684 4977
4685 - // Here we will either have a product-id, a variant-id and a product-id, or just a SKU. The product-id will not be a variant - but
4686 - // we'll double-check just in case. Also if we somehow *just* get a variant-id we should fix that too. But a SKU trumps all. IOK 2018-10-02
4687 - $varid = intval(@$_POST['variation_id']);
4688 - $prodid = intval(@$_POST['product_id']);
4689 - $sku = sanitize_text_field(@$_POST['sku']);
4690 - $quant = intval(@$_POST['quantity']);
4691 4978
4692 - // Get any attributes posted for variable products (where one of the dimensions is "any" for instance)
4693 - $variations = array();
4694 - foreach ($_POST as $key => $value ) {
4979 + // We expect the variations - that is, the fields named "attribute_..." to be sent as post fields.
4980 + // We just need to sanitize them.
4981 + $variations = [];
4982 + $invars = $args['post'] ?? [];
4983 + foreach ($invars as $key => $value) {
4695 4984 if ( 'attribute_' !== substr( $key, 0, 10 ) ) {
4696 4985 continue;
4697 4986 }
4698 4987 $variations[ sanitize_title( wp_unslash( $key ) ) ] = wp_unslash( $value );
@@ -4697,15 +4986,94 @@
4697 4986 }
4698 4987 $variations[ sanitize_title( wp_unslash( $key ) ) ] = wp_unslash( $value );
4699 4988 }
4700 4989
4701 - $product = null;
4702 - $variant = null;
4703 - $parent = null;
4704 - $parentid = null;
4705 - $quantity = 1;
4706 - if ($quant && $quant>1) $quantity=$quant;
4990 + // Then the cookies. These would be the _ga and sbjs_ cookies typically, but we'll let users handle these themselves.
4991 + // These are passed as arguments from the javascript, since proxies are likely to strip them. This should allow
4992 + // systems like MonsterInsights that look for the _GA cookie to succeed. IOK 2026-08-30
4993 + $cookies = $args['cookies'] ?? [];
4994 + foreach($cookies as $key => $value) {
4995 + if (!isset($_COOKIE[$key])) {
4996 + $_COOKIE[$key] = $value;
4997 + }
4998 + }
4707 4999
5000 + // There might be extra values here now, which would typically have been posted as POST arguments, in a form.
5001 + // User-defined stuff and so on. We'll initiate the POST value with these to simulate this for backwards compatibility.
5002 + $others =$args['post'] ?? [];
5003 + foreach($args['post'] as $key=>$value) {
5004 + $_POST[$key] = $value;
5005 + }
5006 +
5007 + // Since this is the REST api, we need to load the cart manually here. *Not* loading the cart could be an option but unpredictable. IOK 2026-08-27
5008 + if ( is_null( WC()->cart ) ) {
5009 + WC()->frontend_includes();
5010 + if ( ! WC()->session instanceof WC_Session ) {
5011 + WC()->session = new WC_Session_Handler();
5012 + WC()->session->init();
5013 +
5014 + // If we don't have a session cookie, we need to set it, and also initialize the $_COOKIE value. IOK 2026-09-29
5015 + if (! WC()->session->get_session_cookie()) {
5016 + $store_session_cookie = function ( $options, $name, $value ) { $_COOKIE[$name] = $value; return $options;};
5017 + add_filter('woocommerce_set_cookie_options', $store_session_cookie, 10, 3);
5018 + try {
5019 + WC()->session->set_customer_session_cookie( true ); // We have to explicitly set the cookie if this session is fresh. IOK 2026-09-29
5020 + } finally {
5021 + remove_filter('woocommerce_set_cookie_options', $store_session_cookie, 10);
5022 + }
5023 + }
5024 + }
5025 + if (is_null( WC()->customer)) {
5026 + WC()->customer = new WC_Customer( get_current_user_id(), true );
5027 + }
5028 + WC()->cart = new WC_Cart();
5029 + WC()->cart->get_cart_from_session();
5030 + }
5031 +
5032 + // Try to avoid re-purchasing the same order repeatedly. IOK 2026-09-02
5033 + // We calculate this here so we can add it to the session later. IOK 2026-09-09
5034 + $orderspec = array('sku'=> $sku, 'product_id'=>$prodid, 'variation_id'=>$varid, 'quantity'=>$quantity);
5035 + $current_hash = $this->create_order_hash($orderspec);
5036 +
5037 + // Now to handle "extra questions" for an order, including terms + conditions and "possible duplicate order" IOK 2026-09-09
5038 + $confirmation = (bool) intval(($others['confirmed'] ?? 0));
5039 + if (!$confirmation) {
5040 + $result = $this->express_order_needs_confirmation($args, $orderspec, $current_hash);
5041 + if (!empty($result)) {
5042 + $response = new WP_REST_Response($result);
5043 + $response->set_status(200);
5044 + return $response;
5045 + }
5046 + }
5047 +
5048 + // Basically always return 200 after this, and always return an object with an 'ok' and a 'msg' value, possibly 'orderid' and 'url'.
5049 + $result = $this->really_do_single_product_express_checkout($prodid, $varid, $sku, $quantity, $variations);
5050 + // And if we're going to express now so let's note the order. IOK 2026-08-27. Now this assumes success, but *basically* I think this is ok.
5051 + // We'll reset it on order failure I think. IOK 2026-08-20 FIXME
5052 + if ($result['ok'] == 1) {
5053 + $orderid = $result['orderid'];
5054 + WC()->session->set('woo_vipps_last_express', "$current_hash:$orderid:" . time());
5055 + WC()->session->save_data();
5056 + }
5057 +
5058 + $response = new WP_REST_Response($result);
5059 + $response->set_status(200);
5060 +
5061 + return $response;
5062 + }
5063 +
5064 + // Common private method to do single product express checkout, used by the new REST express. IOK 2026-08-25
5065 + private function really_do_single_product_express_checkout($prodid, $varid, $sku, $quantity=1, $variations=[]) {
5066 + require_once(dirname(__FILE__) . "/WC_Gateway_Vipps.class.php");
5067 + $gw = $this->gateway();
5068 +
5069 + if (!$gw->express_checkout_available()) {
5070 + $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false);
5071 + return $result;
5072 + }
5073 + // Here we will either have a product-id, a variant-id and a product-id, or just a SKU. The product-id will not be a variant - but
5074 + // we'll double-check just in case. Also if we somehow *just* get a variant-id we should fix that too. But a SKU trumps all. IOK 2018-10-02
5075 +
4708 5076 // Find the product, or variation, and get everything in order so we can check existence, availability etc. IOK 2018-10-02
4709 5077 // Moved rules around as the _sku variant broke in 3.6.1 for stores that didn't bother to update the database IOK 2019-04-24
4710 5078 // This broke single-product purchases for variable products; fixed IOK 2019-05-21 thanks to Gaute Terland Nilsen @ Easyweb for the report
4711 5079 try {
@@ -4718,17 +5086,14 @@
4718 5086 $product = wc_get_product($skuid);
4719 5087 }
4720 5088 } catch (Exception $e) {
4721 5089 $result = array('ok'=>0, 'msg'=>__('Error finding product - cannot create order','woo-vipps'), 'url'=>false);
4722 - wp_send_json($result);
4723 - exit();
5090 + return $result;
4724 5091 }
4725 5092
4726 -
4727 5093 if (!$product) {
4728 5094 $result = array('ok'=>0, 'msg'=>__('Unknown product, cannot create order','woo-vipps'), 'url'=>false);
4729 - wp_send_json($result);
4730 - exit();
5095 + return $result;
4731 5096 }
4732 5097
4733 5098 $parentid = $product ? $product->get_parent_id() : null; // If the product is a variation, then the parent product is the parentid.
4734 5099 $parent = $parentid ? wc_get_product($parentid) : null;
@@ -4735,34 +5100,30 @@
4735 5100
4736 5101 // This can't really happen, but if it did..
4737 5102 if ($prodid && $parentid && ($prodid != $parentid)) {
4738 5103 $result = array('ok'=>0, 'msg'=>__('Selected product variant is not available','woo-vipps'), 'url'=>false);
4739 - wp_send_json($result);
4740 - exit();
5104 + return $result;
4741 5105 }
4742 5106 if (!$gw->product_supports_express_checkout($product)) {
4743 5107 $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false);
4744 - wp_send_json($result);
4745 - exit();
5108 + return $result;
4746 5109 }
4747 5110
4748 5111 // Somebody addded the wrong SKU
4749 5112 if ($product->get_type() == 'variable'){
4750 5113 $result = array('ok'=>0, 'msg'=>__('Selected product variant is not available for purchase','woo-vipps'), 'url'=>false);
4751 - wp_send_json($result);
4752 - exit();
5114 + return $result;
4753 5115 }
4754 5116 // Final check of availability
4755 5117 if (!$product->is_purchasable() || !$product->is_in_stock()) {
4756 5118 $result = array('ok'=>0, 'msg'=>__('Your product is temporarily no longer available for purchase','woo-vipps'), 'url'=>false);
4757 - wp_send_json($result);
4758 - exit();
5119 + return $result;
4759 5120 }
4760 5121
4761 5122 // Now it should be safe to continue to the checkout process. IOK 2018-10-02
4762 -
4763 5123 // Create a new temporary cart for this order. We need to get (and save) the real session cart,
4764 5124 // because some plugins actually override this.
5125 + // NB: Please note the cart must have been loaded here, be aware when doing REST. IOK 2026-08-27
4765 5126 $current_cart = clone WC()->cart;
4766 5127 WC()->cart->empty_cart();
4767 5128
4768 5129 if ($parent && $parent->get_type() == 'variable') {
@@ -4769,50 +5130,22 @@
4769 5130 WC()->cart->add_to_cart($parent->get_id(),$quantity,$product->get_id(), $variations);
4770 5131 } else {
4771 5132 WC()->cart->add_to_cart($product->get_id(),$quantity);
4772 5133 }
5134 + WC()->session->save_data();
4773 5135
4774 - try {
4775 - $orderid = $gw->create_partial_order();
4776 - do_action('woo_vipps_ajax_do_express_checkout', $orderid);
4777 - } catch (Exception $e) {
4778 - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps') . ': ' . $e->getMessage(), 'url'=>false);
4779 - wp_send_json($result);
4780 - exit();
4781 - }
5136 + $result = $this->create_and_process_express_order();
4782 5137
4783 - if (!$orderid) {
4784 - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false);
4785 - wp_send_json($result);
4786 - exit();
5138 + if ($result['ok'] ?? false) {
5139 + // Single product purchase, so save any contents of the real cart
5140 + $orderid = $result['orderid'];
5141 + $order = wc_get_order($orderid);
5142 + $order->update_meta_data('_vipps_single_product_express',true);
5143 + $order->save();
5144 + $this->save_cart($order,$current_cart);
4787 5145 }
4788 5146
4789 - try {
4790 - $this->maybe_add_static_shipping($gw,$orderid);
4791 - } catch (Exception $e) {
4792 - $this->log(__("Error calculating static shipping", 'woo-vipps'), 'error');
4793 - $this->log($e->getMessage(),'error');
4794 - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false);
4795 - wp_send_json($result);
4796 - exit();
4797 - }
4798 -
4799 -
4800 - // Single product purchase, so save any contents of the real cart
4801 - $order = wc_get_order($orderid);
4802 - $order->update_meta_data('_vipps_single_product_express',true);
4803 - $order->save();
4804 - $this->save_cart($order,$current_cart);
4805 -
4806 - $ok = $gw->process_payment($orderid);
4807 - if ($ok && $ok['result'] == 'success') {
4808 - $result = array('ok'=>1, 'msg'=>'', 'url'=>$ok['redirect']);
4809 - wp_send_json($result);
4810 - exit();
4811 - }
4812 - $result = array('ok'=>0, 'msg'=> sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()), 'url'=>'');
4813 - wp_send_json($result);
4814 - exit();
5147 + return $result;
4815 5148 }
4816 5149
4817 5150 // This calculates and adds static shipping info to a partial order for express checkout if merchant has enabled this. IOK 2020-03-19
4818 5151 // Made visible for consistency with add_static_shipping. IOK 2021-10-22
@@ -4878,9 +5211,9 @@
4878 5211 $transaction = sanitize_text_field(@$_POST['transaction']);
4879 5212
4880 5213 $sessionorders= WC()->session->get('_vipps_session_orders');
4881 5214 if (!isset($sessionorders[$orderid])) {
4882 - wp_send_json(array('status'=>'error', 'msg'=>__('Not an order','woo-vipps')));
5215 + wp_send_json(array('status'=>'error', 'msg'=>__('Not a session order','woo-vipps')));
4883 5216 }
4884 5217
4885 5218 $order = wc_get_order($orderid);
4886 5219 if (!$order) {
@@ -4928,46 +5261,37 @@
4928 5261 wp_send_json(array('status'=>'error', 'msg'=> __('Unknown payment status','woo-vipps') . ' ' . $payment));
4929 5262 return false;
4930 5263 }
4931 5264
4932 - // The various return URLs for special pages of the Vipps stuff depend on settings and pretty-URLs so we supply them from here
4933 - // These are for the "fallback URL" mostly. IOK 2018-05-18
4934 - private function make_vipps_url($what) {
4935 - if ( !get_option('permalink_structure')) {
4936 - return add_query_arg('VippsSpecialPage', $what, home_url("/", 'https'));
4937 - }
4938 - return trailingslashit(home_url($what, 'https'));
5265 + // The various return URLs for special pages of the Vipps stuff. Previously used a fake page and had to check permalink_structure. LP 2026-08-26
5266 + private function make_special_page_url($action) {
5267 + return add_query_arg('action', $action, $this->get_special_page_url());
4939 5268 }
5269 +
4940 5270 public function payment_return_url() {
4941 - return apply_filters('woo_vipps_payment_return_url', $this->make_vipps_url('vipps-betaling'));
5271 + return apply_filters('woo_vipps_payment_return_url', $this->make_special_page_url('wait_for_payment'));
4942 5272 }
4943 5273 public function express_checkout_url() {
4944 - return $this->make_vipps_url('vipps-express-checkout');
5274 + return $this->make_special_page_url('do_express_checkout');
4945 5275 }
4946 5276 public function buy_product_url() {
4947 - return $this->make_vipps_url('vipps-buy-product');
5277 + return $this->make_special_page_url('buy_product');
4948 5278 }
4949 5279
4950 - // Return the method in the Vipps
4951 - public function is_special_page() {
4952 - $specials = array('vipps-betaling' => 'vipps_wait_for_payment', 'vipps-express-checkout'=>'vipps_express_checkout', 'vipps-buy-product'=>'vipps_buy_product');
4953 - $method = null;
4954 - if ( get_option('permalink_structure')) {
4955 - foreach($specials as $special=>$specialmethod) {
4956 - // IOK 2018-06-07 Change to add any prefix from home-url for better matching IOK 2018-06-07
4957 - $path = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
4958 - if ($path && preg_match("!/$special/?$!", $path, $matches)) {
4959 - $method = $specialmethod; break;
4960 - }
4961 - }
4962 - } else {
4963 - if (isset($_GET['VippsSpecialPage'])) {
4964 - $method = @$specials[$_GET['VippsSpecialPage']];
4965 - }
4966 - }
4967 - return $method;
5280 + public static function is_special_page() {
5281 + $id = static::get_special_page_id();
5282 + return $id && is_page($id);
4968 5283 }
4969 5284
5285 + public static function get_special_page_id() {
5286 + $id = wc_get_page_id('vipps_special_page'); // -1 if not found
5287 + return $id > 0 ? $id : null;
5288 + }
5289 +
5290 + public static function get_special_page_url() {
5291 + return get_permalink(static::get_special_page_id());
5292 + }
5293 +
4970 5294 // Just create a spinner and a overlay.
4971 5295 public function spinner () {
4972 5296 $flavour = sanitize_title($this->get_payment_method_name());
4973 5297 ob_start();
@@ -5146,51 +5470,90 @@
5146 5470 echo "<div class='vipps_buy_now_wrapper loop'>$button</div>";
5147 5471 }
5148 5472
5149 5473
5150 -
5151 5474 // Checkout replaces the default checkout page, and currently uses its own page for this which needs to exist
5152 5475 // IOK 2026-04-30 remove this when checkout is end-of-life'd
5476 + // We now also use this for the vipps special page, previously a fakepage. LP 2026-08-18
5153 5477 public function woocommerce_create_pages ($data) {
5478 + // Vipps Checkout page
5154 5479 $vipps_checkout_activated = get_option('woo_vipps_checkout_activated', false);
5155 - if (!$vipps_checkout_activated) return $data;
5480 + if ($vipps_checkout_activated) {
5481 + $data['vipps_checkout'] = array(
5482 + 'name' => _x( 'vipps_checkout', 'Page slug', 'woo-vipps' ),
5483 + 'title' => _x( 'Vipps MobilePay Checkout', 'Page title', 'woo-vipps' ),
5484 + 'content' => '<!-- wp:shortcode -->[' . 'vipps_checkout' . ']<!-- /wp:shortcode -->',
5485 + );
5486 + }
5156 5487
5157 - $data['vipps_checkout'] = array(
5158 - 'name' => _x( 'vipps_checkout', 'Page slug', 'woo-vipps' ),
5159 - 'title' => _x( 'Vipps MobilePay Checkout', 'Page title', 'woo-vipps' ),
5160 - 'content' => '<!-- wp:shortcode -->[' . 'vipps_checkout' . ']<!-- /wp:shortcode -->',
5161 - );
5162 -
5488 + // Vipps special page for certain payment flow actions. Previously a fake page. LP 2026-08-18
5489 + $data['vipps_special_page'] = [
5490 + 'name' => 'vipps-payment', // slug
5491 + /* translators: company name */
5492 + 'title' => sprintf(__('%s special page', 'woo-vipps'), static::CompanyName()), // we hide the title frontend in template_redirect. LP 2026-08-27
5493 + 'content' => '<!-- wp:shortcode -->[vipps_special_page]<!-- /wp:shortcode -->',
5494 + ];
5163 5495 return $data;
5164 5496 }
5165 5497
5166 - // Creates any necessary Vipps pages. Will be called e.g. when activating Checkout or turning it on.
5498 + // Creates any necessary Vipps pages. E.g vipps checkout page or vipps special page. LP 2026-09-01
5499 + // If a page slug already exists, then it won't overwrite or duplicate it!. LP 2026-09-02
5167 5500 public function maybe_create_vipps_pages () {
5501 + $make_pages = false;
5502 +
5503 + // Vipps Checkout page. LP 2026-08-18
5168 5504 $checkoutid = wc_get_page_id('vipps_checkout');
5169 - $makeit = !$checkoutid || ! get_post_status($checkoutid);
5170 - if ($makeit) {
5505 + if (!$checkoutid || ! get_post_status($checkoutid)) {
5171 5506 delete_option('woocommerce_vipps_checkout_page_id');
5507 + $make_pages = true;
5172 5508 }
5173 5509
5174 - if ($makeit) {
5175 - WC_Install::create_pages();
5510 + // vipps special page, previously a fake page. LP 2026-08-18
5511 + $builtin_special_page_id = static::get_special_page_id();
5512 + if (!$builtin_special_page_id || !get_post_status($builtin_special_page_id)) {
5513 + delete_option('woocommerce_vipps_special_page_page_id');
5514 + $make_pages = true;
5176 5515 }
5516 +
5517 + if ($make_pages) {
5518 + WC_Install::create_pages();
5519 + }
5177 5520 }
5178 5521
5522 + public function vipps_special_page_shortcode($atts, $content) {
5523 + // No point in expanding this unless we are actually doing the special actions. LP 2026-08-25
5524 + if (is_admin()) return;
5525 + if (wp_doing_ajax()) return;
5526 + if (defined('REST_REQUEST') && REST_REQUEST) return;
5527 + if (did_filter('woo_vipps_special_page_html')) return; // User has somehow added two shortcodes. IOK 2026-09-18
5179 5528
5529 + $action = $_GET['action'] ?? '';
5530 + $html = "";
5531 + switch ($action) {
5532 + case 'wait_for_payment':
5533 + $html = $this->vipps_wait_for_payment();
5534 + break;
5535 + case 'do_express_checkout':
5536 + $html = $this->vipps_express_checkout();
5537 + break;
5538 + case 'buy_product':
5539 + $html = $this->vipps_buy_product();
5540 + break;
5541 + default:
5542 + $html = '';
5543 + }
5544 + // This is mostly to avoid this shortcode evaluating twice IOK 2026-09-18
5545 + $html = apply_filters('woo_vipps_special_page_html', $html, $action);
5546 +
5547 + // Remember, this is a shortcode, so the html must be returned, not echoed IOK 2026-09-11
5548 + return $html;
5549 + }
5550 +
5551 +
5180 5552 // This URL will when accessed add a product to the cart and go directly to the express checkout page.
5181 5553 // The argument passed must be a shareable link created for a given product - so this in effect acts as a landing page for
5182 5554 // the buying thru Vipps Express Checkout of a single product linked to in for instance banners. IOK 2018-09-24
5183 5555 public function vipps_buy_product() {
5184 - status_header(200,'OK');
5185 - Vipps::nocache();
5186 -
5187 - add_filter('body_class', function ($classes) {
5188 - $classes[] = 'vipps-express-checkout';
5189 - $classes[] = 'woocommerce-checkout'; // Required by Pixel Your Site IOK 2022-11-24
5190 - return apply_filters('woo_vipps_express_checkout_body_class', $classes);
5191 - });
5192 -
5193 5556 do_action('woo_vipps_express_checkout_page');
5194 5557
5195 5558 $session = WC()->session;
5196 5559 $posted = $session->get('__vipps_buy_product');
@@ -5219,39 +5582,38 @@
5219 5582
5220 5583 if (!$productinfo) {
5221 5584 $title = __("Product is no longer available",'woo-vipps');
5222 5585 $content = __("The link you have followed is for a product that is no longer available at this location. Please return to the store and try again",'woo-vipps');
5223 - return $this->fakepage($title,$content);
5586 + return $this->special_page_html($title,$content);
5224 5587 }
5225 5588
5226 5589 // Pass the productinfo to the express checkout form
5227 5590 $args = array();
5228 - $args['quantity'] = 1;
5229 - if (array_key_exists('product_id',$productinfo)) $args['product_id'] = intval($productinfo['product_id']);
5230 - if (array_key_exists('variation_id',$productinfo)) $args['variation_id'] = intval($productinfo['variation_id']);
5231 - if (array_key_exists('product_sku',$productinfo)) $args['sku'] = sanitize_text_field($productinfo['product_sku']);
5232 - if (array_key_exists('quantity',$productinfo)) $args['quantity'] = intval($productinfo['quantity']);
5591 + $args['product_id'] = esc_attr(intval($productinfo['product_id'] ?? 0));
5592 + $args['variation_id'] = esc_attr(intval($productinfo['variation_id'] ?? 0));
5593 + $args['sku'] = esc_attr(sanitize_text_field($productinfo['product_sku'] ?? ""));
5594 + $args['quantity'] = esc_attr(max(1, intval($productinfo['quantity'] ?? 0)));
5233 5595
5234 - // For variable products where some of the attributes are "any", we need to add these as well. This is from woos form-handler for these.
5235 - foreach ($productinfo as $key => $value) {
5236 - if ( 'attribute_' !== substr( $key, 0, 10 ) ) {
5237 - continue;
5238 - }
5239 - $args[sanitize_title(wp_unslash($key))] = sanitize_text_field(wp_unslash($value));
5240 - }
5596 + $payment_method = $this->get_payment_method_name();
5597 + $btitle = esc_attr(sprintf(__('Buy now with %1$s', 'woo-vipps'), $payment_method));
5598 + $bclass = esc_attr($payment_method);
5241 5599
5242 - $this->print_express_checkout_page(true,'do_single_product_express_checkout',$args);
5600 + $content = "<p id=waiting>" . __("Please wait while we are preparing your order", 'woo-vipps') . "...</p>";
5601 + $content .= "<div class='vipps-qr-purchase' style='visibility:hidden'>";
5602 + $content .= "<a href='javascript:void(0)' class='single-product button vipps-buy-now $bclass' data-vipps-autostart='true' data-vipps-purchase='single' data-product_id='{$args['product_id']}' data-variation_id='{$args['variation_id']}' data-product_sku='{$args['sku']}' data-quantity='{$args['quantity']}' title='{$btitle}';
5603 + >";
5604 + $content .= $this->get_html_button_for_context('global');
5605 + $content .= "</a>";
5606 + $content .= "</div>";
5607 +
5608 + return $content;
5243 5609 }
5244 5610
5245 - // This is a landing page for the express checkout of then normal cart - it is done like this because this could take time on slower hosts.
5246 - public function vipps_express_checkout() {
5247 - status_header(200,'OK');
5248 - Vipps::nocache();
5611 + public function vipps_express_checkout_consistency_check() {
5249 5612 // We need a nonce to get here, but we should only get here when we have a cart, so this will not be cached.
5250 5613 // IOK 2018-05-28
5251 5614 $ok = isset($_REQUEST['sec']) && wp_verify_nonce($_REQUEST['sec'],'express');
5252 5615
5253 -
5254 5616 $backurl = wp_validate_redirect(@$_SERVER['HTTP_REFERER']);
5255 5617 if (!$backurl) $backurl = home_url();
5256 5618
5257 5619 if (!$ok) {
@@ -5265,219 +5627,39 @@
5265 5627 wp_redirect($backurl);
5266 5628 exit();
5267 5629 }
5268 5630
5269 - add_filter('body_class', function ($classes) {
5270 - $classes[] = 'vipps-express-checkout';
5271 - $classes[] = 'woocommerce-checkout'; // Required by Pixel Your Site IOK 2022-11-24
5272 - return apply_filters('woo_vipps_express_checkout_body_class', $classes);
5273 - });
5274 -
5275 - do_action('woo_vipps_express_checkout_page');
5276 -
5277 - $this->print_express_checkout_page(true, 'do_express_checkout');
5631 + add_filter('woo_vipps_express_checkout_consistent', '__return_true');
5278 5632 }
5279 5633
5280 - // This method tries to ensure that a customer does not 'lose' the return page and
5281 - // starts ordering the same products twice. IOK 2020-01-22
5282 - protected function validate_express_checkout_orderspec ($orderspec) {
5283 - if (empty($orderspec)) return true; // It's not a duplicate, it's nothing.
5284 -
5285 - // First build for the current order an array of hash-tables keyed by prodid, varid and quantity.
5286 - $orderset = array();
5287 - foreach($orderspec as $entry) $orderset[] = join(':', $entry);
5288 -
5289 - // Then get open orders
5290 - $sessionorders = array();
5291 - $sessionorderdata = WC()->session->get('_vipps_session_orders');
5292 - if ($sessionorderdata) {
5293 - foreach(array_keys($sessionorderdata) as $oid) {
5294 - $orderobject = wc_get_order($oid);
5295 - // Check to see that this hasn't been deleted yet IOK 2020-01-07
5296 - if ($orderobject instanceof WC_Order) {
5297 - $sessionorders[] = $orderobject;
5298 - }
5299 - }
5634 + // This is a landing page for the express checkout of the normal cart - it is done like this because this could take time on slower hosts.
5635 + // IOK 2026-09-09 - nowadays this is only used for compatibility mode. It will automatically start express checkout of the current cart when reached.
5636 + public function vipps_express_checkout() {
5637 + // Some checks are made in template_redirect, we check here if they are ok IOK 2026-09-21
5638 + if (!apply_filters('woo_vipps_express_checkout_consistent', false)) {
5639 + $content = __('Link expired, please try again', 'woo-vipps');
5640 + return $content;
5300 5641 }
5301 - // Nothing more to do here
5302 - if (empty($sessionorders)) return true;
5642 +
5643 + do_action('woo_vipps_express_checkout_page');
5303 5644
5304 - // And create a similar hash table for each of the open orders
5305 - $openorderdata = array();
5306 - foreach ($sessionorders as $open_order) {
5307 - $status = $open_order->get_status();
5308 - if ($status == 'cancelled' || $status == 'pending') continue;
5309 - $when = strtotime($open_order->get_date_modified());
5310 - $cutoff = $when + apply_filters('woo_vipps_recent_order_cutoff', (5*60));
5311 - if (time() > $cutoff) {
5312 - continue;
5313 - }
5314 - $orderdata = array();
5315 - foreach($open_order->get_items() as $item) {
5316 - $productspec = $item->get_product_id() . ':' . $item->get_variation_id() . ':' . $item->get_quantity();
5317 - $orderdata[] = $productspec;
5318 - }
5319 - $openorderdata[]=$orderdata;
5320 - }
5645 + $payment_method = $this->get_payment_method_name();
5646 + $btitle = esc_attr(sprintf(__('Buy now with %1$s', 'woo-vipps'), $payment_method));
5647 + $bclass = esc_attr($payment_method);
5648 + $sec = esc_attr($_REQUEST['sec']);
5649 + $content = "";
5650 + $content .= "<p id=waiting>" . __("Please wait while we are preparing your order", 'woo-vipps') . "...</p>";
5651 + $content .= '<div class="vipps-cart-purchase" style="visibility:hidden">"';
5652 + $content .= "<a href='javascript:void(0)' class='vipps-express-checkout short $bclass' data-vipps-autostart='true' data-sec='$sec' title='$btitle'>";
5653 + $content .= $this->get_html_button_for_context('global');
5654 + $content .="</a>";
5655 + $content .="</div>";
5321 5656
5322 - // Now: For each entry in the orderhash, check if there is an order that has a) all of them and b) not any more of them.
5323 - foreach($openorderdata as $prevorder) {
5324 - $a = array_diff($prevorder, $orderset);
5325 - $b = array_diff($orderset, $prevorder);
5326 - if (empty($a) && empty($b)) {
5327 - $this->log(__("It seems a customer is trying to re-order product(s) recently bought in the same session, asking user for confirmation", 'woo-vipps'), 'info');
5328 - return false;
5329 - }
5330 - }
5331 - // Else, order is good.
5332 - return true;
5657 + return $content;
5333 5658 }
5334 5659
5335 - // Returns a triple of productid, variantid and quantity from an array of arguments which can pass either these or a SKU value.
5336 - // Return value is like in a cart.
5337 - // Used to create an order in express checkout, and to see that this order isn't a repeat. IOK 2020-01-22
5338 - protected function get_orderspec_from_arguments ($productinfo) {
5339 - if (!$productinfo) return array();
5340 - $variantid = 0;
5341 - $productid = 0;
5342 - $quantity = intval(@$productinfo['quantity']);
5343 - if (!$quantity) $quantity = 1;
5344 - if (isset($productinfo['sku']) && $productinfo['sku']) {
5345 - $sku = $productinfo['sku'];
5346 - $skuid = wc_get_product_id_by_sku($sku);
5347 - $product = wc_get_product($skuid);
5348 - $parentid = $product ? $product->get_parent_id() : null;
5349 - if ($product) {
5350 - if ($parentid) {
5351 - $variantid = $skuid; $productid = $parentid;
5352 - } else {
5353 - $productid = $skuid;
5354 - }
5355 - }
5356 - } else if (isset($productinfo['product_id']) && $productinfo['product_id']) {
5357 - $productid = intval($productinfo['product_id']);
5358 - $variantid = intval(@$productinfo['variation_id']);
5359 - }
5360 - if ($productid) return array(array('product_id'=>$productid, 'variation_id'=>$variantid, 'quantity'=>$quantity));
5361 - return array();
5362 - }
5363 - // If no productinfo, this will produce an orderspec from the current cart IOK 2020-01-24
5364 - protected function get_orderspec_from_cart () {
5365 - $cartitems = WC()->cart->get_cart();
5366 - $orderspec = array();
5367 - foreach($cartitems as $item => $values) {
5368 - $orderspec[] = array('product_id'=>$values['product_id'], 'variation_id'=>$values['variation_id'], 'quantity'=>$values['quantity']);
5369 - }
5370 - return $orderspec;
5371 - }
5372 -
5373 - // Used as a landing page for launching express checkout - borh for the cart and for single products. IOK 2018-09-28
5374 - protected function print_express_checkout_page($execute,$action,$productinfo=null) {
5375 - $gw = $this->gateway();
5376 -
5377 - $expressCheckoutMessages = array();
5378 - $expressCheckoutMessages['termsAndConditionsError'] = __( 'Please read and accept the terms and conditions to proceed with your order.', 'woocommerce' );
5379 - $expressCheckoutMessages['temporaryError'] = sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name());
5380 - $expressCheckoutMessages['successMessage'] = sprintf(__('To the %1$s app!','woo-vipps'), $this->get_payment_method_name());
5381 -
5382 - wp_register_script('vipps-express-checkout',plugins_url('js/express-checkout.js',__FILE__),array('jquery','wp-hooks'),filemtime(dirname(__FILE__) . "/js/express-checkout.js"), 'true');
5383 - wp_localize_script('vipps-express-checkout', 'VippsCheckoutMessages', $expressCheckoutMessages);
5384 - wp_enqueue_script('vipps-express-checkout');
5385 - // If we have a valid nonce when we get here, just call the 'create order' bit at once. Otherwise, make a button
5386 - // to actually perform the express checkout.
5387 - $buttonhtml = apply_filters('woo_vipps_express_checkout_button', $this->get_html_button());
5388 -
5389 -
5390 -
5391 - $orderspec = $this->get_orderspec_from_arguments($productinfo);
5392 - if (empty($orderspec)) {
5393 - $orderspec = $this->get_orderspec_from_cart();
5394 - }
5395 - $orderisOK = $this->validate_express_checkout_orderspec($orderspec);
5396 - $orderisOK = apply_filters('woo_vipps_validate_express_checkout_orderspec', $orderisOK, $orderspec);
5397 -
5398 - $askForTerms = function_exists('wc_terms_and_conditions_checkbox_enabled') ? wc_terms_and_conditions_checkbox_enabled() : true;
5399 - $askForTerms = $askForTerms && ($gw->get_option('expresscheckout_termscheckbox') == 'yes');
5400 - $askForTerms = apply_filters('woo_vipps_express_checkout_terms_and_conditions_checkbox_enabled', $askForTerms);
5401 -
5402 - $askForConfirmationHTML = '';
5403 - if (!$orderisOK) {
5404 - $header = __("Are you sure?",'woo-vipps');
5405 - $body = __("You recently completed an order with exactly the same products as you are buying now. There should be an email in your inbox from the previous purchase. Are you sure you want to order again?",'woo-vipps');
5406 - $askForConfirmationHTML = apply_filters('woo_vipps_ask_user_to_confirm_repurchase', "<h2 class='confirmVippsExpressCheckoutHeader'>$header</h2><p>$body</p>");
5407 - }
5408 - // Should we go directly to checkout, or do we need to stop and ask the user something (for instance?) IOK 2010-01-20
5409 - $execute = $execute && $orderisOK && !$askForTerms;
5410 - $execute = apply_filters('woo_vipps_checkout_directly_to_vipps', $execute, $productinfo);
5411 -
5412 - $content = $this->spinner();
5413 -
5414 - // We impersonate the woocommerce-checkout form here mainly to work with the Pixel Your Site plugin IOK 2022-11-24
5415 - // The form data below is sent on order creation; the sec is also used to poll session status
5416 - $classlist = apply_filters("woo_vipps_express_checkout_form_classes", "woocommerce-checkout");
5417 - $content .= "<form id='vippsdata' class='" . esc_attr($classlist) . "'>";
5418 - $content .= "<input type='hidden' name='action' value='" . esc_attr($action) ."'>";
5419 - if ($this->gateway()->get_option('vippsorderattribution') == 'yes') {
5420 - // This is for the new order attribution feature of woo. IOK 2024-01-09
5421 - $content .= '<input type="hidden" id="vippsorderattribution" value="1" />';
5422 - ob_start();
5423 - do_action( 'woocommerce_after_order_notes');
5424 - $content .= ob_get_clean();
5425 - }
5426 - $content .= wp_nonce_field('do_express','sec',1,false);
5427 -
5428 - $termsHTML = '';
5429 - if ($askForTerms) {
5430 - // Include shop terms
5431 - ob_start();
5432 - wc_get_template('checkout/terms.php');
5433 - $termsHTML = ob_get_clean();
5434 - $termsHTML = apply_filters('woo_vipps_express_checkout_terms_and_conditions_html',$termsHTML);
5435 - }
5436 - $termsHTML = apply_filters('woo_vipps_express_checkout_terms_and_conditions_html',$termsHTML);
5437 -
5438 - if ($productinfo) {
5439 - foreach($productinfo as $key=>$value) {
5440 - $k = esc_attr($key);
5441 - $v = esc_attr($value);
5442 - $content .= "<input type='hidden' name='$k' value='$v' />";
5443 - }
5444 - }
5445 - ob_start();
5446 - $content .= do_action('woo_vipps_express_checkout_orderspec_form', $productinfo);
5447 - $content .= ob_get_clean();
5448 - $content .= "</form>";
5449 -
5450 - $extraHTML = apply_filters('woo_vipps_express_checkout_final_html', '', $termsHTML,$askForConfirmationHTML);
5451 - $pressTheButtonHTML = "";
5452 - if (empty($termsHTML) && empty($askForConfirmationHTML) && empty($extraHTML)) {
5453 - $pressTheButtonHTML = "<p id=waiting>" . sprintf(__('Ready for %1$s - press the button', 'woo-vipps'), Vipps::ExpressCheckoutName()) . "</p>";
5454 - }
5455 -
5456 - if ($execute) {
5457 - $content .= "<p id=waiting>" . __("Please wait while we are preparing your order", 'woo-vipps') . "</p>";
5458 - $content .= "<div id='vipps-status-message'></div>";
5459 - $this->fakepage(__('Order in progress','woo-vipps'), $content);
5460 - return;
5461 - } else {
5462 - $content .= $askForConfirmationHTML;
5463 - $content .= $extraHTML;
5464 - $content .= $termsHTML;
5465 - $content .= apply_filters('woo_vipps_express_checkout_validation_elements', '');
5466 - $title = sprintf(__('Buy now with %1$s!', 'woo-vipps'), $this->get_payment_method_name());
5467 - $content .= "<div class='vipps_buy_now_wrapper noloop'><a href='#' id='do-express-checkout' class='vipps-express-checkout' title='$title'>$buttonhtml</a></div>";
5468 - $content .= "<div id='vipps-status-message'></div>";
5469 - $this->fakepage(sprintf(__('%1$s Express Checkout','woo-vipps'), $this->get_payment_method_name()), $content);
5470 - return;
5471 - }
5472 - }
5473 -
5474 -
5475 -
5476 - public function vipps_wait_for_payment() {
5477 - status_header(200,'OK');
5478 - Vipps::nocache();
5479 -
5660 + // Called in template_redirect before we get to the wait-for-payment page IOK 2026-09-21
5661 + private function handle_payment_poll_and_redirect () {
5480 5662 $orderid = WC()->session->get('_vipps_pending_order');
5481 5663
5482 5664 $order = null;
5483 5665 $gw = $this->gateway();
@@ -5491,9 +5673,9 @@
5491 5673 // If so, we will read the order id from the GET arguments and check if the auth token is correct,
5492 5674 // simulating the session with that.
5493 5675 // IOK 2019-11-19, changed to using GET 2023-01-23
5494 5676 if ($no_session && $limited_session) {
5495 - $orderid = intval(@$_GET['id']);
5677 + $orderid = intval($_GET['id'] ?? false);
5496 5678 }
5497 5679 if ($orderid) {
5498 5680 clean_post_cache($orderid);
5499 5681 $order = wc_get_order($orderid);
@@ -5508,20 +5690,22 @@
5508 5690 $session = WC()->session;
5509 5691 if (!$session->has_session()) {
5510 5692 $session->set_customer_session_cookie(true);
5511 5693 }
5694 +
5695 + $sessionorders= WC()->session->get('_vipps_session_orders');
5696 + $sessionorders[$orderid] = 1;
5697 + WC()->session->set('_vipps_session_orders',$sessionorders);
5512 5698 $session->set('_vipps_pending_order', $orderid);
5699 + WC()->session->save_data();
5513 5700 }
5514 5701 }
5515 5702
5516 -
5517 - do_action('woo_vipps_wait_for_payment_page',$order);
5518 -
5519 5703 $deleted_order=0;
5520 5704 if ($orderid && !$order) {
5521 5705 // If this happens, we actually did have an order, but it has been deleted, which must mean that it was cancelled.
5522 5706 // Concievably a hook on the 'cancel'-transition or in the callback handlers could clean that up before we get here. IOK 2019-09-26
5523 - $this->log(__("In order return: The order %1\$d seems to be deleted", 'woo-vipps'), 'debug');
5707 + $this->log(sprintf(__("In order return: The order %1\$d seems to be deleted", 'woo-vipps'), $orderid), 'debug');
5524 5708 $deleted_order=1;
5525 5709 }
5526 5710
5527 5711 if (!$order && !$deleted_order) wp_die(__('Unknown order', 'woo-vipps'));
@@ -5531,12 +5715,13 @@
5531 5715
5532 5716 // This is for debugging only - set to false to ensure we wait for the callback. IOK 2023-08-04
5533 5717 $do_poll = true;
5534 5718
5535 - // Still pending, no callback. Make a call to the server as the order might not have been created. IOK 2018-05-16
5719 + // Do a single poll here to check and set the order status at Woo using the order status at Vipps IOK 2026-09-29
5536 5720 if ($do_poll && $status == 'pending') {
5537 - // Just in case the callback hasn't come yet, do a quick check of the order status at Vipps.
5538 - $newstatus = $gw->callback_check_order_status($order);
5721 + // We will do *one* poll before waiting for the callback (for a while, at least.) IOK 2026-09-29
5722 + $newstatus = $gw->poll_and_check_order_status($order);
5723 + $this->log(sprintf(__("In order return: Order status of %1\$d is %2\$s", 'woo-vipps'), $orderid, $newstatus), 'info');
5539 5724 if ($status != $newstatus) {
5540 5725 $status = $newstatus;
5541 5726 clean_post_cache($orderid);
5542 5727 $order = wc_get_order($orderid); // Reload order object
@@ -5541,11 +5726,13 @@
5541 5726 clean_post_cache($orderid);
5542 5727 $order = wc_get_order($orderid); // Reload order object
5543 5728 }
5544 5729 } else {
5545 - // No need to do anyting here. IOK 2020-01-26
5730 + // No need to do anyting here. IOK 2020-01-26
5546 5731 }
5547 5732
5733 + // Actually, this may cause a second poll if the first left us pending. Should be rewritten - but *mostly* it will just check
5734 + // the payment status at Vipps without polls, which will tell us if the payment succeeded in case people use custom order statuses and so on. IOK 2026-09-29
5548 5735 $payment = 'notchecked';
5549 5736 if ($do_poll) {
5550 5737 $payment = $deleted_order ? 'cancelled' : $gw->check_payment_status($order);
5551 5738 }
@@ -5559,9 +5746,8 @@
5559 5746 exit();
5560 5747 }
5561 5748
5562 5749 // We are done, but in failure. Don't poll.
5563 - $content = "";
5564 5750 $failure_redirect = apply_filters('woo_vipps_order_failed_redirect', '', $orderid);
5565 5751
5566 5752 // Status is failed; still send to return url (as of now /order-recieved), the text there will depend on the status.
5567 5753 // For failed it shows a "Retry payment" button that takes the customer to /pay-for-order where it will be retried. LP 2026-03-17
@@ -5569,8 +5755,9 @@
5569 5755 $failure_redirect = $failure_redirect ?: $gw->get_return_url($order);
5570 5756 wp_redirect($failure_redirect);
5571 5757 exit();
5572 5758 }
5759 +
5573 5760 if ($status == 'cancelled' || $payment == 'cancelled') {
5574 5761 $this->maybe_restore_cart($orderid,'failed');
5575 5762 if ($failure_redirect){
5576 5763 wp_redirect($failure_redirect);
@@ -5575,27 +5762,46 @@
5575 5762 if ($failure_redirect){
5576 5763 wp_redirect($failure_redirect);
5577 5764 exit();
5578 5765 }
5766 + } else {
5767 + // If not, enqueue the status checker IOK 2026-09-21
5768 + wp_enqueue_script('check-vipps',plugins_url('js/check-order-status.js',__FILE__),array('jquery','vipps-gw'),filemtime(dirname(__FILE__) . "/js/check-order-status.js"), 'true');
5769 + }
5770 +
5771 + $this->log(sprintf(__("Order status of %1\$d not ready in order return: payment status %2\$s", 'woo-vipps'), $orderid, $payment), 'info');
5772 +
5773 + // Communicate this to the shortcode IOK 2026-09-21
5774 + add_filter('woo_vipps_wait_for_payment_status', function () use($orderid, $status, $payment) {
5775 + return ['orderid'=>$orderid, 'status'=>$status, 'payment'=>$payment];
5776 + });
5777 +
5778 + }
5779 +
5780 + public function vipps_wait_for_payment() {
5781 + // This will have been computed in template_redirect, but the status will be either still pending or failed. IOK 2026-09-21
5782 + $data = apply_filters('woo_vipps_wait_for_payment_status', []);
5783 +
5784 + $orderid = $data['orderid'] ?? 0;
5785 + $status = $data['status'] ?? "";
5786 + $payment = $data['payment'] ?? "";
5787 +
5788 + $order = wc_get_order($orderid);
5789 + if (!$order) wp_die(__('Unknown order', 'woo-vipps'));
5790 +
5791 + do_action('woo_vipps_wait_for_payment_page',$order);
5792 + $gw = $this->gateway();
5793 +
5794 + $content = "";
5795 + if ($status == 'cancelled' || $payment == 'cancelled') {
5579 5796 $content .= "<div id=failure><p>". __('Order cancelled','woo-vipps') . '</p>';
5580 5797 $content .= "<p><a href='" . home_url() . "' class='btn button'>" . __('Continue shopping','woo-vipps') . '</a></p>';
5581 5798 $content .= "</div>";
5582 - $this->fakepage(__('Order cancelled','woo-vipps'), $content);
5583 -
5584 - return;
5799 + return $this->special_page_html('', $content);
5585 5800 }
5586 5801
5587 5802 // Still pending and order is supposed to exist, so wait for Vipps. This happens all the time, so logging is removed. IOK 2018-09-27
5588 -
5589 5803 // Otherwise, go to a page waiting/polling for the callback. IOK 2018-05-16
5590 - wp_enqueue_script('check-vipps',plugins_url('js/check-order-status.js',__FILE__),array('jquery','vipps-gw'),filemtime(dirname(__FILE__) . "/js/check-order-status.js"), 'true');
5591 -
5592 - // Check that order exists and belongs to our session. Can use WC()->session->get() I guess - set the orderid or a hash value in the session
5593 - // and check that the order matches (and is 'pending') (and exists)
5594 - $vippsstamp = $order->get_meta('_vipps_init_timestamp');
5595 - $vippsstatus = $order->get_meta('_vipps_status');
5596 - $message = __($order->get_meta('_vipps_confirm_message'),'woo-vipps');
5597 -
5598 5804 $signal = $this->callbackSignal($order);
5599 5805 $content = "";
5600 5806 $content .= "<div id='waiting'><p>" . sprintf(__('Waiting for confirmation of purchase from %1$s','woo-vipps'), $this->get_payment_method_name());
5601 5807
@@ -5603,18 +5809,18 @@
5603 5809 $signalurl = $this->callbackSignalURL($signal);
5604 5810
5605 5811 $content .= "</p></div>";
5606 5812
5607 - // We impersonate the woocommerce-checkout form here mainly to work with the Pixel Your Site plugin IOK 2022-11-24
5608 - $classlist = apply_filters("woo_vipps_express_checkout_form_classes", "woocommerce-checkout");
5609 - $content .= "<form id='vippsdata' class='" . esc_attr($classlist) . "'>";
5813 + $failure_redirect = apply_filters('woo_vipps_order_failed_redirect', '', $orderid);
5814 +
5815 + // Carry the order status to the checking script IOK 2026-09-21
5816 + $content .= "<form id='vippsdata'>";
5610 5817 $content .= "<input type='hidden' id='fkey' name='fkey' value='".htmlspecialchars($signalurl)."'>";
5611 5818 $content .= "<input type='hidden' name='key' value='".htmlspecialchars($order->get_order_key())."'>";
5612 5819 $content .= "<input type='hidden' name='action' value='check_order_status'>";
5613 - $content .= wp_nonce_field('vippsstatus','sec',1,false);
5820 + $content .= wp_nonce_field('vippsstatus','sec',1,false);
5614 5821 $content .= "</form>";
5615 5822
5616 -
5617 5823 $content .= "<div id='error' style='display:none'><p>".__('Error during order confirmation','woo-vipps'). '</p>';
5618 5824 $content .= "<p>" . __('An error occured during order confirmation. The error has been logged. Please contact us to determine the status of your order', 'woo-vipps') . "</p>";
5619 5825 $content .= "<p><a href='" . home_url() . "' class='btn button'>" . __('Continue shopping','woo-vipps') . '</a></p>';
5620 5826 $content .= "</div>";
@@ -5628,93 +5834,21 @@
5628 5834 $content .= "<a id='continueToOrderFailed' style='display:none' href='" . $failure_redirect . "'></a>";
5629 5835 $content .= "<a id='continueToOrderFailedFallback' style='display:none' href='" . $gw->get_return_url($order) . "'></a>";
5630 5836 $content .= "</div>";
5631 5837
5838 + return $this->special_page_html('', $content);
5839 + }
5632 5840
5633 - $this->fakepage(__('Waiting for your order confirmation','woo-vipps'), $content);
5841 + // Returns formatted html for the vipps special page. LP 2026-08-27
5842 + public function special_page_html($header, $content) {
5843 + $header_html = $header ? "<h2 class='vipps-special-page-title page-title'>$header</h2>" : '';
5844 + $html = <<<EOF
5845 + $header_html
5846 + <div class="vipps-special-page-content">$content</div>
5847 + EOF;
5848 + return apply_filters('woo_vipps_special_page_html', $html, $header, $content);
5634 5849 }
5635 5850
5636 -
5637 -
5638 - public function fakepage($title,$content) {
5639 - global $wp, $wp_query;
5640 - // We don't want this here.
5641 - remove_filter ('the_content', 'wpautop');
5642 -
5643 - $specialid = $this->gateway()->get_option('vippsspecialpageid');
5644 - $wp_post = null;
5645 - if ($specialid) {
5646 - $wp_post = get_post($specialid);
5647 - if ($wp_post) {
5648 - $wp_post->post_title = $title;
5649 - $wp_post->post_content = $content;
5650 - // Normalize a bit
5651 - $wp_post->filter = 'raw'; // important
5652 - $wp_post->post_status = 'publish';
5653 - $wp_post->comment_status= 'closed';
5654 - $wp_post->ping_status= 'closed';
5655 - } else {
5656 - $this->log(sprintf(__("Could not use special page with id %s - it seems not to exist.", 'woo-vipps'), $specialid), 'error');
5657 - }
5658 - }
5659 - if (!$wp_post || is_wp_error($wp_post)) {
5660 - $post = new stdClass();
5661 - $post->ID = -99;
5662 - $post->post_author = 1;
5663 - $post->post_date = current_time( 'mysql' );
5664 - $post->post_date_gmt = current_time( 'mysql', 1 );
5665 - $post->post_title = $title;
5666 - $post->post_content = $content;
5667 - $post->post_status = 'publish';
5668 - $post->comment_status = 'closed';
5669 - $post->ping_status = 'closed';
5670 - $post->post_name = 'vippsconfirm-fake-page-name';
5671 - $post->post_type = 'page';
5672 - $post->filter = 'raw'; // important
5673 - $wp_post = new WP_Post($post);
5674 - wp_cache_add( -99, $wp_post, 'posts' );
5675 - }
5676 -
5677 - // Update the main query
5678 - $wp_query->post = $wp_post;
5679 - $wp_query->posts = array( $wp_post );
5680 - $wp_query->queried_object = $wp_post;
5681 - $wp_query->queried_object_id = $wp_post->ID;
5682 - $wp_query->found_posts = 1;
5683 - $wp_query->post_count = 1;
5684 - $wp_query->max_num_pages = 1;
5685 - $wp_query->is_page = true;
5686 - $wp_query->is_singular = true;
5687 - $wp_query->is_single = false;
5688 - $wp_query->is_attachment = false;
5689 - $wp_query->is_archive = false;
5690 - $wp_query->is_category = false;
5691 - $wp_query->is_tag = false;
5692 - $wp_query->is_tax = false;
5693 - $wp_query->is_author = false;
5694 - $wp_query->is_date = false;
5695 - $wp_query->is_year = false;
5696 - $wp_query->is_month = false;
5697 - $wp_query->is_day = false;
5698 - $wp_query->is_time = false;
5699 - $wp_query->is_search = false;
5700 - $wp_query->is_feed = false;
5701 - $wp_query->is_comment_feed = false;
5702 - $wp_query->is_trackback = false;
5703 - $wp_query->is_home = false;
5704 - $wp_query->is_embed = false;
5705 - $wp_query->is_404 = false;
5706 - $wp_query->is_paged = false;
5707 - $wp_query->is_admin = false;
5708 - $wp_query->is_preview = false;
5709 - $wp_query->is_robots = false;
5710 - $wp_query->is_posts_page = false;
5711 - $wp_query->is_post_type_archive = false;
5712 - // Update globals
5713 - $GLOBALS['wp_query'] = $wp_query;
5714 - $wp->register_globals();
5715 - return $wp_post;
5716 - }
5717 5851
5718 5852 // Support the interactivity API with data about our cart IOK 2026-02-23
5719 5853 public function woo_vipps_store_api_cart_data() {
5720 5854 // Reverting the condition with the directive data-wp-bind--hidden does not work, so we need the flipped bool here (hide instead of show). LP 2026-02-10