| @@ -54,11 +54,8 @@ | ||
| 54 | 54 | |
| 55 | 55 | // True if HPOS is being used |
| 56 | 56 | public $HPOSActive = null; |
| 57 | 57 | |
| 58 | - // used in the fake locking mechanism using transients | |
| 59 | - private $lockKey = null; | |
| 60 | - | |
| 61 | 58 | public $vippsJSConfig = array(); |
| 62 | 59 | |
| 63 | 60 | public $button_options_version = '2.0'; |
| 64 | 61 | public $button_options_express_version = '2.0'; |
| @@ -117,9 +114,10 @@ | ||
| 117 | 114 | add_action('wp_footer', array($Vipps,'footer')); |
| 118 | 115 | } |
| 119 | 116 | add_action( 'plugins_loaded', array($Vipps,'plugins_loaded')); |
| 120 | 117 | add_action( 'after_setup_theme', array($Vipps,'after_setup_theme')); |
| 121 | - add_action('init',array($Vipps,'init')); | |
| 118 | + add_action( 'init',array($Vipps,'init')); | |
| 119 | + add_action( 'rest_api_init', array($Vipps, 'rest_api_init')); | |
| 122 | 120 | add_action( 'woocommerce_loaded', array($Vipps,'woocommerce_loaded')); |
| 123 | 121 | add_filter( 'woocommerce_available_payment_gateways', array($Vipps, 'payment_gateway_filter')); |
| 124 | 122 | add_action( 'woocommerce_blocks_loaded', [$Vipps, 'woocommerce_blocks_loaded']); |
| 125 | 123 | // Express Checkout and Checkout supports the new pickup_location shipping method, but the admin interface for this may |
| @@ -125,8 +123,13 @@ | ||
| 125 | 123 | // Express Checkout and Checkout supports the new pickup_location shipping method, but the admin interface for this may |
| 126 | 124 | // not have loaded if the default checkout solution isn't the Checkout block. We'll load it anyway if the user has any local pickup locations |
| 127 | 125 | // stored in the database since we support this for both Vipps MobilePay checkokut and Express. IOK 2026-02-25 |
| 128 | 126 | add_action('woocommerce_load_shipping_methods', array($Vipps, 'maybe_load_pickup_locations'), 90); |
| 127 | + | |
| 128 | + // Vipps Checkout replaces the default checkout page, and currently uses its own page for this which needs to exist | |
| 129 | + // Will also probably be used to maintain a real utility-page for Vipps actions later for themes where this | |
| 130 | + // is important. | |
| 131 | + add_filter('woocommerce_create_pages', array($Vipps, 'woocommerce_create_pages'), 50, 1); | |
| 129 | 132 | } |
| 130 | 133 | |
| 131 | 134 | // Register woocommerce store api endpoint to use in buy-now minicart block. LP 2026-02-10 |
| 132 | 135 | public function woocommerce_blocks_loaded() { |
| @@ -222,8 +225,9 @@ | ||
| 222 | 225 | // Register certain scripts in wp_loaded because they will be added to the backend as well - the gutenberg checkout block |
| 223 | 226 | // needs these to be defined in the backend. IOK 2024-04-16 |
| 224 | 227 | add_action('wp_loaded', array($this, 'wp_register_scripts')); |
| 225 | 228 | add_action('wp_enqueue_scripts', array($this, 'wp_enqueue_scripts')); |
| 229 | + add_action('wp_enqueue_scripts', array($this, 'enqueue_classic_checkout_scripts'), 20); | |
| 226 | 230 | |
| 227 | 231 | // Remove the possibility of restarting failed orders etc. This will be fixed in the future. IOK 2023-05-26 |
| 228 | 232 | add_filter('woocommerce_my_account_my_orders_actions', array($this,'woocommerce_my_account_my_orders_actions'), 10, 2); |
| 229 | 233 | |
| @@ -239,16 +243,8 @@ | ||
| 239 | 243 | |
| 240 | 244 | // Extra order actions on the order screen, now using ajax to be compatible with HPOS. IOK 2022-12-02 |
| 241 | 245 | add_action('wp_ajax_woo_vipps_order_action', array($this, 'order_handle_vipps_action')); |
| 242 | 246 | |
| 243 | - // Fetch wc products, but filter those only purchasable by VMP express checkout. LP 2026-01-22 | |
| 244 | - add_action('rest_api_init', function() { | |
| 245 | - register_rest_route(self::get_rest_namespace('v1'), '/express-products', [ | |
| 246 | - 'methods' => 'GET', | |
| 247 | - 'callback' => [$this, 'rest_express_checkout_products'], | |
| 248 | - 'permission_callback' => '__return_true', | |
| 249 | - ]); | |
| 250 | - }); | |
| 251 | 247 | |
| 252 | 248 | // We need a 5-minute scheduled event for the handler for missed callbacks. Using the |
| 253 | 249 | // action scheduler would be better, but we can't do that just yet because of backwards |
| 254 | 250 | // compatibility. At some point, support for older woo-versions should be dropped; then this |
| @@ -271,19 +267,65 @@ | ||
| 271 | 267 | // because it is self-updating or because it has been deactivated just now or something, we won't have access to it. |
| 272 | 268 | // Therefore test it first. IOK 2022-12-08 |
| 273 | 269 | $gw = $this->gateway(); |
| 274 | 270 | |
| 275 | - // This is a developer-mode level feature because flock() is not portable. This ensures callbacks and shopreturns do not | |
| 276 | - // simultaneously update the orders, in particular not the express checkout order lines wrt shipping. IOK 2020-05-19 | |
| 277 | - if ($gw && $gw->get_option('use_flock') == 'yes') { | |
| 278 | - add_filter('woo_vipps_lock_order', array($this,'flock_lock_order')); | |
| 279 | - add_action('woo_vipps_unlock_order', array($this, 'flock_unlock_order')); | |
| 280 | - } | |
| 281 | - | |
| 282 | 271 | // Set default button options, migrating any older setup IOK 2026-07-15 |
| 283 | 272 | $this->init_button_options(); |
| 273 | + | |
| 274 | + /* | |
| 275 | + From version 6.2.x we create a real physical page to handle the "special" vipps pages, | |
| 276 | + where we earlier used just a fake page with no real page id, unless especially configured. | |
| 277 | + We therefore need to add code to maintain this special page. | |
| 278 | + | |
| 279 | + woocommerce_loaded is too early for this because of maybe_create_vipps_pages which calls WC_Install::create_pages, | |
| 280 | + and we hook unto this with woocommerce_create_pages. LP 2026-09-03 | |
| 281 | + */ | |
| 282 | + | |
| 283 | + // Delete special page id option when its deleted or trashed, so that we dont have to load | |
| 284 | + // in the post to check status in woocommerce_loaded when we ensure the special page exists. LP 2026-09-03 | |
| 285 | + $delete_special_page_id = function($post_id, $post = null) { | |
| 286 | + if (static::get_special_page_id() === $post_id) { | |
| 287 | + delete_option('woocommerce_vipps_special_page_page_id'); | |
| 288 | + } | |
| 289 | + }; | |
| 290 | + add_action('delete_post', $delete_special_page_id, 10, 2); | |
| 291 | + add_action('wp_trash_post', $delete_special_page_id, 10, 2); | |
| 292 | + | |
| 293 | + $this->ensure_special_page_exists(); | |
| 294 | + | |
| 295 | + | |
| 296 | + // We want this special page to have a certain title and maybe special scripts and so on, | |
| 297 | + // this gets run in template redirect for these pages. | |
| 298 | + add_action('woo_vipps_before_handling_special_page', array($this, 'pre_special_page_actions')); | |
| 299 | + | |
| 300 | + // Add an admin interface for this page as well IOK 2026-09-11 | |
| 301 | + add_action('woocommerce_settings_pages', array($this, 'woocommerce_settings_pages')); | |
| 284 | 302 | } |
| 285 | 303 | |
| 304 | + | |
| 305 | + public function rest_api_init () { | |
| 306 | + | |
| 307 | + // Fetch wc products, but filter those only purchasable by VMP express checkout. LP 2026-01-22 | |
| 308 | + register_rest_route(self::get_rest_namespace('v1'), '/express-products', [ | |
| 309 | + 'methods' => 'GET', | |
| 310 | + 'callback' => [$this, 'rest_express_checkout_products'], | |
| 311 | + 'permission_callback' => '__return_true', | |
| 312 | + ]); | |
| 313 | + | |
| 314 | + // Start a single product express checkout process. IOK 2026-08-25 | |
| 315 | + register_rest_route(self::get_rest_namespace('v1'), '/express_checkout_single', [ | |
| 316 | + 'methods' => 'POST', | |
| 317 | + 'callback' => [$this, 'rest_do_single_product_express_checkout'], | |
| 318 | + 'permission_callback' => '__return_true', | |
| 319 | + ]); | |
| 320 | + // And one for the cart. IOK 2026-09-04 | |
| 321 | + register_rest_route(self::get_rest_namespace('v1'), '/express_checkout', [ | |
| 322 | + 'methods' => 'POST', | |
| 323 | + 'callback' => [$this, 'rest_do_express_checkout'], | |
| 324 | + 'permission_callback' => '__return_true', | |
| 325 | + ]); | |
| 326 | + } | |
| 327 | + | |
| 286 | 328 | public function admin_init () { |
| 287 | 329 | $gw = $this->gateway(); |
| 288 | 330 | require_once(dirname(__FILE__) . "/admin/settings/VippsAdminSettings.class.php"); |
| 289 | 331 | $adminSettings = VippsAdminSettings::instance(); |
| @@ -310,10 +352,8 @@ | ||
| 310 | 352 | // Styling etc |
| 311 | 353 | add_action('admin_head', array($this, 'admin_head')); |
| 312 | 354 | |
| 313 | 355 | // Scripts |
| 314 | - $this->vippsJSConfig['vippssecnonce'] = wp_create_nonce('vippssecnonce'); | |
| 315 | - wp_localize_script('vipps-gw', 'VippsConfig', $this->vippsJSConfig); | |
| 316 | 356 | add_action('admin_enqueue_scripts', array($this,'admin_enqueue_scripts')); |
| 317 | 357 | |
| 318 | 358 | // IOK 2026-05-26 redirect the old Woo-generated settings-screen to our own settings page. |
| 319 | 359 | add_action('current_screen', function ($screen) { |
| @@ -401,9 +441,77 @@ | ||
| 401 | 441 | } |
| 402 | 442 | } |
| 403 | 443 | } |
| 404 | 444 | |
| 445 | + | |
| 446 | + /** Ensure we have a special page for payment flows | |
| 447 | + * | |
| 448 | + * woocommerce_loaded is too early for this because of maybe_create_vipps_pages which calls WC_Install::create_pages, | |
| 449 | + * and we hook unto this with woocommerce_create_pages. LP 2026-09-03 | |
| 450 | + **/ | |
| 451 | + public function ensure_special_page_exists() { | |
| 452 | + if (static::get_special_page_id()) return; | |
| 453 | + $this->log(__('Missing id for special page, attempting to fix.', 'woo-vipps'), 'info'); | |
| 405 | 454 | |
| 455 | + // If user had in previous version overriden the fake page with a real one: migrate this page to be the special page. LP 2026-09-01 | |
| 456 | + $old_special_page_id = $this->gateway()->get_option('vippsspecialpageid'); | |
| 457 | + if ($old_special_page_id && ($special_page = get_post($old_special_page_id)) && "trash" !== $special_page->post_status) { | |
| 458 | + $this->log(__('Migrated old special page setting.', 'woo-vipps'), 'info'); | |
| 459 | + // there is no wc_set_page_id() so we update the option directly. LP 2026-09-01 | |
| 460 | + update_option('woocommerce_vipps_special_page_page_id', $old_special_page_id); | |
| 461 | + | |
| 462 | + // Ensure this page has the necessary shortcode. LP 2026-09-01 | |
| 463 | + if (!has_shortcode($special_page->post_content, 'vipps_special_page')) { | |
| 464 | + $new_content = $special_page->post_content . "\n\n<!-- wp:shortcode -->[vipps_special_page]<!-- /wp:shortcode -->"; | |
| 465 | + wp_update_post([ | |
| 466 | + 'ID' => $old_special_page_id, | |
| 467 | + 'post_content' => $new_content, | |
| 468 | + ]); | |
| 469 | + } | |
| 470 | + } else { | |
| 471 | + // Create special page if its missing. LP 2026-09-01 | |
| 472 | + $this->maybe_create_vipps_pages(); | |
| 473 | + } | |
| 474 | + } | |
| 475 | + | |
| 476 | + // Admin interface for the special page on woo/advanced/pages | |
| 477 | + public function woocommerce_settings_pages ($settings) { | |
| 478 | + $i = -1; | |
| 479 | + foreach($settings as $entry) { | |
| 480 | + $i++; | |
| 481 | + if ($entry['type'] == 'sectionend' && $entry['id'] == 'advanced_page_options') { | |
| 482 | + break; | |
| 483 | + } | |
| 484 | + } | |
| 485 | + if ($i > 0) { | |
| 486 | + $vippspagesettings = array( | |
| 487 | + array( | |
| 488 | + 'title' => sprintf(__( '%1$s Page', 'woo-vipps' ), Vipps::CompanyName()), | |
| 489 | + 'desc' => sprintf(__('This page is used for various special pages used by %1$s', 'woo-vipps'), Vipps::CompanyName()) . sprintf( __( 'Page contents: [%1$s]', 'woocommerce' ), 'vipps_special_page') , | |
| 490 | + 'id' => 'woocommerce_vipps_special_page_page_id', | |
| 491 | + 'type' => 'single_select_page_with_search', | |
| 492 | + 'default' => '', | |
| 493 | + 'class' => 'wc-page-search', | |
| 494 | + 'css' => 'min-width:300px;', | |
| 495 | + 'args' => array( | |
| 496 | + 'exclude' => | |
| 497 | + array( | |
| 498 | + wc_get_page_id( 'myaccount' ), | |
| 499 | + wc_get_page_id( 'checkout' ), | |
| 500 | + wc_get_page_id( 'cart' ), | |
| 501 | + ), | |
| 502 | + ), | |
| 503 | + 'desc_tip' => true, | |
| 504 | + 'autoload' => false, | |
| 505 | + )); | |
| 506 | + array_splice($settings, $i, 0, $vippspagesettings); | |
| 507 | + } | |
| 508 | + | |
| 509 | + return $settings; | |
| 510 | + } | |
| 511 | + | |
| 512 | + | |
| 513 | + | |
| 406 | 514 | // Runs on init, adds the Vipps badge feature if activated |
| 407 | 515 | public function maybe_add_vipps_badge_feature () { |
| 408 | 516 | $badge_options = get_option('vipps_badge_options'); |
| 409 | 517 | if (!$badge_options || !@$badge_options['badgeon']) return false; |
| @@ -940,12 +1048,30 @@ | ||
| 940 | 1048 | |
| 941 | 1049 | public function get_html_button_attrs_for_context($context = 'global') { |
| 942 | 1050 | $options = get_option('vipps_button_options2', []); |
| 943 | 1051 | if (!is_string($context)) $context = 'global'; |
| 1052 | + | |
| 1053 | + // Gutenberg express checkout buttons really want to be stretched, so we'll treat them somewhat differently. | |
| 1054 | + $gutenberg = false; | |
| 1055 | + if ($context == 'checkout_gutenberg') { | |
| 1056 | + $context = 'checkout'; | |
| 1057 | + $gutenberg = true; | |
| 1058 | + } | |
| 1059 | + if ($context == 'cart_gutenberg') { | |
| 1060 | + $context = 'cart'; | |
| 1061 | + $gutenberg = true; | |
| 1062 | + } | |
| 1063 | + | |
| 944 | 1064 | $config = $options['express']['configs'][$context] ?? []; |
| 945 | - if (!$config || ($config['use-global-config'] ?? false)) { | |
| 1065 | + $use_global = !$config || ($config['use-global-config'] ?? false); | |
| 1066 | + if ($use_global) { | |
| 946 | 1067 | $config = $options['express']['configs']['global'] ?? $this->get_html_button_default_attrs(); |
| 947 | 1068 | } |
| 1069 | + | |
| 1070 | + // see above. | |
| 1071 | + if ($gutenberg) { | |
| 1072 | + $config['stretched']='true'; | |
| 1073 | + } | |
| 948 | 1074 | return $config; |
| 949 | 1075 | } |
| 950 | 1076 | |
| 951 | 1077 | public function get_html_button_for_context($context = 'global') { |
| @@ -965,8 +1091,10 @@ | ||
| 965 | 1091 | // Don't support these login verbs. LP 2026-06-04 |
| 966 | 1092 | if (in_array($attrs['verb'], ['login', 'register'])) $attrs['verb'] = 'buy'; |
| 967 | 1093 | // Looks like button and badge web components now use 'da' instead of 'dk' for danish. LP 2026-08-11 |
| 968 | 1094 | if ('dk' === $attrs['language']) $attrs['language'] = 'da'; |
| 1095 | + // Fix swedish too. LP 2026-10-06 | |
| 1096 | + if ('se' === $attrs['language']) $attrs['language'] = 'sv'; | |
| 969 | 1097 | |
| 970 | 1098 | $escaped_attrs = []; |
| 971 | 1099 | foreach($attrs as $k => $v) { |
| 972 | 1100 | $escaped_attrs[$k] = esc_attr($v); |
| @@ -1032,8 +1160,10 @@ | ||
| 1032 | 1160 | private function button_menu_express_section() { |
| 1033 | 1161 | $options = get_option('vipps_button_options2', []); |
| 1034 | 1162 | $express = $options['express'] ?? []; |
| 1035 | 1163 | $configs = $express['configs'] ?? []; |
| 1164 | + | |
| 1165 | + | |
| 1036 | 1166 | $contexts = [ |
| 1037 | 1167 | 'global' => __('Global', 'woo-vipps'), |
| 1038 | 1168 | 'product' => __('Product', 'woo-vipps'), |
| 1039 | 1169 | 'catalog' => __('Catalog', 'woo-vipps'), |
| @@ -1164,9 +1294,9 @@ | ||
| 1164 | 1294 | |
| 1165 | 1295 | // Update the preview web component's attributes. LP 2026-06-24 |
| 1166 | 1296 | function updatePreview(event) { |
| 1167 | 1297 | const args = getPreviewArgs(); |
| 1168 | - // LP FIXME: when i use get_customer_language() here it gives me my user language, but on frontend it gives the site language, i.e not the same value. So this preview will be wrong language. so use get_locale for now. LP 2026-07-02 | |
| 1298 | + // FIXME: when i use get_customer_language() here it gives me my user language, but on frontend it gives the site language, i.e not the same value. So this preview will be wrong language. so use get_locale for now. LP 2026-07-02 | |
| 1169 | 1299 | // if ('store' === args.language) args.language = '<?php echo $this->get_customer_language(); ?>'; |
| 1170 | 1300 | if ('store' === args.language) args.language = '<?php echo substr(get_locale(), 0, 2); ?>'; |
| 1171 | 1301 | const button = jQuery('#vipps-button-express-preview'); |
| 1172 | 1302 | button.attr(args); |
| @@ -1206,8 +1336,9 @@ | ||
| 1206 | 1336 | |
| 1207 | 1337 | // Swap to new context: set all input fields to the stored values if exists. LP 2026-06-25 |
| 1208 | 1338 | const newContext = jQuery("#context").val(); |
| 1209 | 1339 | const newConfig = contextConfigs[newContext]; |
| 1340 | + | |
| 1210 | 1341 | setInputsFromConfig(newContext, newConfig); |
| 1211 | 1342 | currentContext = newContext; |
| 1212 | 1343 | } |
| 1213 | 1344 | |
| @@ -1570,12 +1701,14 @@ | ||
| 1570 | 1701 | <?php |
| 1571 | 1702 | } |
| 1572 | 1703 | // Scripts used in the backend |
| 1573 | 1704 | public function admin_enqueue_scripts($hook) { |
| 1705 | + | |
| 1706 | + wp_register_script('vipps-admin',plugins_url('js/admin.js',__FILE__),array('jquery'),filemtime(dirname(__FILE__) . "/js/admin.js"), 'all'); | |
| 1707 | + $this->vippsJSConfig['vippssecnonce'] = wp_create_nonce('vippssecnonce'); | |
| 1708 | + wp_localize_script('vipps-admin', 'VippsConfig', $this->vippsJSConfig); | |
| 1574 | 1709 | // Add certain translations very late so translation plugins get a chance to work. IOK 2026-02-02 |
| 1575 | - $this->script_add_vippslocale(); | |
| 1576 | - | |
| 1577 | - wp_register_script('vipps-admin',plugins_url('js/admin.js',__FILE__),array('jquery','vipps-gw'),filemtime(dirname(__FILE__) . "/js/admin.js"), 'all'); | |
| 1710 | + $this->script_add_vippslocale('vipps-admin'); | |
| 1578 | 1711 | wp_enqueue_script('vipps-admin'); |
| 1579 | 1712 | |
| 1580 | 1713 | wp_enqueue_style('vipps-admin-style',plugins_url('css/admin.css',__FILE__),array(),filemtime(dirname(__FILE__) . "/css/admin.css"), 'all'); |
| 1581 | 1714 | wp_enqueue_style('vipps-fonts'); |
| @@ -1645,12 +1778,9 @@ | ||
| 1645 | 1778 | |
| 1646 | 1779 | public function wp_register_scripts () { |
| 1647 | 1780 | // We are going to use the 'hooks' library introduced by WP 5.1, but we still support WP 4.7. So if this isn't enqueues |
| 1648 | 1781 | // (which it only is if Gutenberg is active) or not provided at all, add it now. |
| 1649 | - if (!wp_script_is( 'wp-hooks', 'registered')) { | |
| 1650 | - wp_register_script('wp-hooks', plugins_url('/compat/hooks.min.js', __FILE__)); | |
| 1651 | - } | |
| 1652 | - wp_register_script('vipps-gw',plugins_url('js/vipps.js',__FILE__),array('jquery','wp-hooks'),filemtime(dirname(__FILE__) . "/js/vipps.js"), 'true'); | |
| 1782 | + wp_register_script('vipps-gw',plugins_url('js/vipps.js',__FILE__),array('jquery','wp-hooks', 'wp-api-fetch','vipps-widget-sdk'),filemtime(dirname(__FILE__) . "/js/vipps.js"), true); | |
| 1653 | 1783 | |
| 1654 | 1784 | // Badges - web components provided by Vipps MobilePay to display payment options in-store. |
| 1655 | 1785 | wp_register_script('vipps-onsite-messageing', |
| 1656 | 1786 | plugins_url('js/vipps-on-site-messaging.js', WC_VIPPS_PAYMENT_MAIN_FILE), |
| @@ -1656,13 +1786,27 @@ | ||
| 1656 | 1786 | plugins_url('js/vipps-on-site-messaging.js', WC_VIPPS_PAYMENT_MAIN_FILE), |
| 1657 | 1787 | array(), |
| 1658 | 1788 | filemtime(dirname(WC_VIPPS_PAYMENT_MAIN_FILE) . '/js/vipps-on-site-messaging.js'), |
| 1659 | 1789 | [ |
| 1660 | - 'in_footer' => true, | |
| 1661 | - 'strategy' => 'async', | |
| 1790 | + 'in_footer' => true, | |
| 1791 | + 'strategy' => 'async', | |
| 1662 | 1792 | ], |
| 1663 | 1793 | ); |
| 1664 | 1794 | |
| 1795 | + add_filter( 'script_loader_tag', function($tag, $handle,$src) { | |
| 1796 | + if ($handle == 'vipps-widget-sdk') { | |
| 1797 | + $tag = preg_replace("!^<script!", "<script data-vipps-widget-sdk ", $tag); | |
| 1798 | + return $tag; | |
| 1799 | + } | |
| 1800 | + return $tag; | |
| 1801 | + },10,3); | |
| 1802 | + | |
| 1803 | + wp_register_script('vipps-widget-sdk', "https://cdn.vippsmobilepay.com/js/widget-sdk/vipps-widget.js", | |
| 1804 | + array('vipps-button-webcomponent'), | |
| 1805 | + filemtime(dirname(WC_VIPPS_PAYMENT_MAIN_FILE) . '/js/vipps.js'), | |
| 1806 | + ['in_footer' => true] | |
| 1807 | + ); | |
| 1808 | + | |
| 1665 | 1809 | // Button web component downloaded from https://cdn.vippsmobilepay.com/js/button/button.js. LP 2026-06-24 |
| 1666 | 1810 | wp_register_script('vipps-button-webcomponent', |
| 1667 | 1811 | plugins_url('js/vipps-button.js', WC_VIPPS_PAYMENT_MAIN_FILE), |
| 1668 | 1812 | array(), |
| @@ -1668,27 +1812,45 @@ | ||
| 1668 | 1812 | array(), |
| 1669 | 1813 | filemtime(dirname(WC_VIPPS_PAYMENT_MAIN_FILE) . '/js/vipps-button.js'), |
| 1670 | 1814 | [ |
| 1671 | 1815 | 'in_footer' => false |
| 1672 | - ], | |
| 1816 | + ] | |
| 1673 | 1817 | ); |
| 1674 | 1818 | } |
| 1675 | 1819 | |
| 1676 | 1820 | // Runs late in both wp_enqueue_scripts and admin_enqueue_scripts to make it more compatible with translation plugins IOK 2026-02-02 |
| 1677 | - public function script_add_vippslocale () { | |
| 1821 | + public function script_add_vippslocale ($handle) { | |
| 1678 | 1822 | // This is actually for the payment block, where localize script has started to not-work in certain contexts. IOK 2022-12-13 |
| 1823 | + $name = $this->get_payment_method_name(); | |
| 1679 | 1824 | $strings = array( |
| 1680 | - 'Continue with Vipps'=>sprintf(__('Continue with %1$s', 'woo-vipps'), $this->get_payment_method_name()), | |
| 1681 | - 'Vipps'=> sprintf(__('%1$s', 'woo-vipps'), $this->get_payment_method_name()), | |
| 1682 | - 'pay_with_card' => sprintf(__('Pay with card through %1$s', 'woo-vipps'), $this->get_payment_method_name()), | |
| 1825 | + 'Continue with Vipps'=>sprintf(__('Continue with %1$s', 'woo-vipps'), $name), | |
| 1826 | + 'Vipps'=> sprintf(__('%1$s', 'woo-vipps'), $name), | |
| 1827 | + 'pay_with_card' => sprintf(__('Pay with card through %1$s', 'woo-vipps'), $name), | |
| 1828 | + 'termsAndConditionsError' => __( 'Please read and accept the terms and conditions to proceed with your order.', 'woocommerce' ), | |
| 1829 | + 'temporaryError' => sprintf(__('%1$s is temporarily unavailable.','woo-vipps'),$name), | |
| 1830 | + 'successMessage' => sprintf(__('To the %1$s app!','woo-vipps'), $name), | |
| 1831 | + 'cancel'=> __("Cancel", 'woo-vipps'), | |
| 1832 | + 'close'=> __("Close", 'woo-vipps'), | |
| 1833 | + 'missingPaymentUrl'=> __("Successful checkout response has no payment URL", 'woo-vipps'), | |
| 1834 | + 'expressCheckoutFailed'=> __("Express checkout failed", 'woo-vipps'), | |
| 1835 | + 'unexpectedCheckoutResponse'=> __("Unexpected express checkout response", 'woo-vipps'), | |
| 1836 | + 'vippsCheckoutFailed'=> __("Vipps Mobilepay checkout failed", 'woo-vipps'), | |
| 1837 | + 'correctHighlightedFields'=> __("Please correct the highlighted fields.", 'woo-vipps'), | |
| 1838 | + 'checkFormBeforeContinuing'=> __("Please check the form before continuing.", 'woo-vipps'), | |
| 1839 | + 'cartCheckoutUnavailable'=> __("Cannot start express checkout: cart checkout is unavailable", 'woo-vipps'), | |
| 1840 | + 'productIdentifiersMissing'=> __("Cannot buy product: product id, variation id and sku are missing", 'woo-vipps'), | |
| 1841 | + 'productFormNotFound'=> __("Cannot buy product: product form not found", 'woo-vipps'), | |
| 1842 | + 'paymentSuccessfulRedirecting' => __("Payment successful. Redirecting…", 'woo-vipps'), | |
| 1683 | 1843 | ); |
| 1684 | - wp_localize_script('vipps-gw', 'VippsLocale', $strings); | |
| 1844 | + wp_localize_script($handle, 'VippsLocale', $strings); | |
| 1685 | 1845 | } |
| 1686 | 1846 | |
| 1687 | 1847 | public function wp_enqueue_scripts() { |
| 1848 | + // Add late: if this value isn't 'yes' we wil not add order attribution to express orders. IOK 2026-09-10 | |
| 1849 | + $this->vippsJSConfig['expressOrderAttribution'] = $this->gateway()->get_option('vippsorderattribution'); | |
| 1688 | 1850 | wp_localize_script('vipps-gw', 'VippsConfig', $this->vippsJSConfig); |
| 1689 | 1851 | // Add certain translations very late so translation plugins get a chance to work. IOK 2026-02-02 |
| 1690 | - $this->script_add_vippslocale(); | |
| 1852 | + $this->script_add_vippslocale('vipps-gw'); | |
| 1691 | 1853 | |
| 1692 | 1854 | wp_enqueue_script('vipps-gw'); |
| 1693 | 1855 | wp_enqueue_style('vipps-gw',plugins_url('css/vipps.css',__FILE__),array(),filemtime(dirname(__FILE__) . "/css/vipps.css")); |
| 1694 | 1856 | wp_enqueue_script('vipps-button-webcomponent'); |
| @@ -1693,13 +1855,55 @@ | ||
| 1693 | 1855 | wp_enqueue_style('vipps-gw',plugins_url('css/vipps.css',__FILE__),array(),filemtime(dirname(__FILE__) . "/css/vipps.css")); |
| 1694 | 1856 | wp_enqueue_script('vipps-button-webcomponent'); |
| 1695 | 1857 | } |
| 1696 | 1858 | |
| 1859 | + // These scripts should be loaded only on the checkout screen and is used only for the classic shortcode checkout and | |
| 1860 | + // the pay-for-order screen. IOK 2026-09-15 | |
| 1861 | + public function enqueue_classic_checkout_scripts () { | |
| 1862 | + if ( ! function_exists( 'is_checkout' ) || ! is_checkout() || is_order_received_page() ) { | |
| 1863 | + return; | |
| 1864 | + } | |
| 1865 | + // Order-pay is rendered by the classic form even with a Blocks checkout page. | |
| 1866 | + // It must bypass the check for the parent checkout page's block content. | |
| 1867 | + if ( ! is_checkout_pay_page() ) { | |
| 1868 | + $utils = '\\Automattic\\WooCommerce\\Blocks\\Utils\\CartCheckoutUtils'; | |
| 1869 | + $uses_checkout_block = is_callable( array( $utils, 'is_checkout_block_default' ) ) | |
| 1870 | + ? $utils::is_checkout_block_default() | |
| 1871 | + : has_block( 'woocommerce/checkout', wc_get_page_id( 'checkout' ) ); | |
| 1697 | 1872 | |
| 1873 | + if ( $uses_checkout_block ) { | |
| 1874 | + return; | |
| 1875 | + } | |
| 1876 | + } | |
| 1877 | + | |
| 1878 | + // This script uses jQuery because the classic checkout screen does too. IOK 2026-09-15 | |
| 1879 | + $relative_path = 'js/vipps-classic-checkout.js'; | |
| 1880 | + wp_enqueue_script( | |
| 1881 | + 'vipps-classic-checkout', | |
| 1882 | + plugins_url( $relative_path, __FILE__ ), | |
| 1883 | + array( 'jquery', 'wc-checkout', 'vipps-gw' ), | |
| 1884 | + filemtime( plugin_dir_path( __FILE__ ) . $relative_path ), | |
| 1885 | + true | |
| 1886 | + ); | |
| 1887 | + | |
| 1888 | + if ( is_checkout_pay_page() ) { | |
| 1889 | + $order = wc_get_order( absint( get_query_var( 'order-pay' ) ) ); | |
| 1890 | + wp_add_inline_script( 'vipps-classic-checkout', 'window.VippsOrderPayConfig = ' . wp_json_encode( array( | |
| 1891 | + 'orderId' => $order ? $order->get_id() : 0, | |
| 1892 | + 'orderKey' => $order ? $order->get_order_key() : '', | |
| 1893 | + 'billingEmail' => $order ? $order->get_billing_email() : '', | |
| 1894 | + 'endpoint' => $order ? rest_url( 'wc/store/v1/checkout/' . $order->get_id() ) : '', | |
| 1895 | + 'nonce' => wp_create_nonce( 'wc_store_api' ), | |
| 1896 | + 'billingAddress' => $order ? $order->get_address( 'billing' ) : array(), | |
| 1897 | + 'shippingAddress' => $order ? $order->get_address( 'shipping' ) : array(), | |
| 1898 | + ) ) . ';', 'before' ); | |
| 1899 | + } | |
| 1900 | + } | |
| 1901 | + | |
| 1902 | + | |
| 1698 | 1903 | public function add_shortcodes() { |
| 1699 | 1904 | add_shortcode('woo_vipps_buy_now', array($this, 'buy_now_button_shortcode')); |
| 1700 | 1905 | add_shortcode('woo_vipps_express_checkout_button', array($this, 'express_checkout_button_shortcode')); |
| 1701 | - add_shortcode('woo_vipps_express_checkout_banner', array($this, 'express_checkout_banner_shortcode')); | |
| 1702 | 1906 | |
| 1703 | 1907 | // Badges, if using shortcodes |
| 1704 | 1908 | // New vipps-mobilepay-badge shortcode. LP 19.11.2024 |
| 1705 | 1909 | add_shortcode('vipps-mobilepay-badge', array($this, 'vipps_mobilepay_badge_shortcode')); |
| @@ -1704,8 +1908,11 @@ | ||
| 1704 | 1908 | // New vipps-mobilepay-badge shortcode. LP 19.11.2024 |
| 1705 | 1909 | add_shortcode('vipps-mobilepay-badge', array($this, 'vipps_mobilepay_badge_shortcode')); |
| 1706 | 1910 | // Legacy vipps-badge shortcode. LP 19.11.2024 |
| 1707 | 1911 | add_shortcode('vipps-badge', array($this, 'vipps_badge_shortcode')); |
| 1912 | + | |
| 1913 | + // special page handling, previously a fake page. LP 2026-08-25 | |
| 1914 | + add_shortcode('vipps_special_page', array($this, 'vipps_special_page_shortcode')); | |
| 1708 | 1915 | } |
| 1709 | 1916 | |
| 1710 | 1917 | |
| 1711 | 1918 | public function log ($what,$type='info') { |
| @@ -1731,8 +1938,10 @@ | ||
| 1731 | 1938 | } |
| 1732 | 1939 | |
| 1733 | 1940 | // Show express button option on checkout form. LP 2026-03-23 |
| 1734 | 1941 | public function checkout_before_customer_details_express () { |
| 1942 | + if (did_action('woo_vipps_checkout_before_customer_details_express')) return; | |
| 1943 | + do_action('woo_vipps_checkout_before_customer_details_express'); | |
| 1735 | 1944 | $gw = $this->gateway(); |
| 1736 | 1945 | if (!$gw->show_express_checkout()) return; |
| 1737 | 1946 | $this->express_checkout_section_html(); |
| 1738 | 1947 | } |
| @@ -1740,83 +1949,57 @@ | ||
| 1740 | 1949 | public function express_checkout_section_html() { |
| 1741 | 1950 | $payment_method = $this->get_payment_method_name(); |
| 1742 | 1951 | $header_text = __('Express Checkout', 'woo-vipps'); |
| 1743 | 1952 | $header = "<legend class='express-header'>$header_text</legend>"; |
| 1744 | - $div_classes = "legacy-checkout vipps-express-checkout $payment_method"; | |
| 1953 | + $div_classes = "legacy-checkout express $payment_method"; | |
| 1745 | 1954 | echo "<fieldset class='$div_classes'>$header"; |
| 1746 | 1955 | $this->checkout_express_checkout_button_html(); |
| 1747 | 1956 | echo '</fieldset>'; |
| 1748 | 1957 | } |
| 1749 | 1958 | |
| 1750 | - public function express_checkout_banner() { | |
| 1959 | + // Show the express button if reasonable to do so | |
| 1960 | + public function cart_express_checkout_button() { | |
| 1751 | 1961 | $gw = $this->gateway(); |
| 1752 | - if (!$gw->show_express_checkout()) return; | |
| 1753 | - return $this->express_checkout_banner_html(); | |
| 1754 | - } | |
| 1755 | 1962 | |
| 1756 | - public function express_checkout_banner_html() { | |
| 1757 | - $url = $this->express_checkout_url(); | |
| 1758 | - $url = wp_nonce_url($url,'express','sec'); | |
| 1759 | - $text = __('Skip entering your address and just checkout using', 'woo-vipps'); | |
| 1760 | - $linktext = 'Express'; // dont translate. LP 2025-09-03 | |
| 1761 | - $logo = $this->get_express_banner_logo(); | |
| 1762 | - $payment_method = $this->get_payment_method_name(); | |
| 1763 | - | |
| 1764 | - $img_classes = 'express-banner-logo inline negative ' . strtolower($payment_method) . '-logo'; | |
| 1765 | - $div_classes = 'woocommerce-info ' . strtolower($payment_method) . '-info'; | |
| 1766 | - $a_classes = 'express-banner-link ' . strtolower($payment_method) . '-link'; | |
| 1767 | - | |
| 1768 | - $message = $text . "<a href='$url' class='$a_classes'><img class='$img_classes' border=0 src='$logo' alt='$payment_method'/>$linktext!</a>"; | |
| 1769 | - $message = apply_filters('woo_vipps_express_checkout_banner', $message, $url, $payment_method); | |
| 1770 | - ?> | |
| 1771 | - <div class="<?php echo $div_classes;?>"><?php echo $message;?></div> | |
| 1772 | - <?php | |
| 1963 | + if ($gw->show_express_checkout()){ | |
| 1964 | + return $this->cart_express_checkout_button_html(); | |
| 1965 | + } | |
| 1773 | 1966 | } |
| 1774 | 1967 | |
| 1775 | - public function checkout_express_checkout_button() { | |
| 1968 | + public function minicart_express_checkout_button() { | |
| 1776 | 1969 | $gw = $this->gateway(); |
| 1777 | 1970 | |
| 1778 | 1971 | if ($gw->show_express_checkout()){ |
| 1779 | - return $this->checkout_express_checkout_button_html(); | |
| 1972 | + return $this->cart_express_checkout_button_html('minicart'); | |
| 1780 | 1973 | } |
| 1781 | 1974 | } |
| 1782 | 1975 | |
| 1783 | - public function checkout_express_checkout_button_html() { | |
| 1784 | - $url = $this->express_checkout_url(); | |
| 1785 | - $url = wp_nonce_url($url,'express','sec'); | |
| 1786 | - $button= apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context('checkout')); | |
| 1976 | + // This is for the Vipps SDK button used instead of the normal "pay for order" and "confirm order" buttons | |
| 1977 | + // on the classic checkout and pay-for-order pages. It gets swapped in when the user selects vipps, and swapped out otherwise. | |
| 1978 | + public function add_checkout_button_for_classic () { | |
| 1979 | + $button = $this->get_html_button_for_context('checkout'); | |
| 1980 | + $submit = "<div class='vipps-classic-checkout-container'><button id='vipps-classic-checkout-submit' class='hidden vipps-submit-wrapper' type='submit'>$button</button></div>"; | |
| 1981 | + echo $submit; | |
| 1982 | + } | |
| 1983 | + | |
| 1984 | + public function cart_express_checkout_button_html($context= 'cart') { | |
| 1985 | + $button = apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context($context)); | |
| 1787 | 1986 | $method = $this->get_payment_method_name(); |
| 1788 | 1987 | $title = sprintf(__('Buy now with %1$s!', 'woo-vipps'), $method); |
| 1789 | - $html = "<a href='$url' class='vipps-express-checkout short $method' title='$title'>$button</a>"; | |
| 1988 | + $url = "#"; | |
| 1989 | + $sec = wp_create_nonce('express'); | |
| 1990 | + $html = "<a href='#' class='vipps-express-checkout short " . esc_attr($method) . "' title='" . esc_attr($title) . "' data-sec='" . esc_attr($sec) . "'>$button</a>"; | |
| 1790 | 1991 | $html = apply_filters('woo_vipps_cart_express_checkout_button', $html, $url); |
| 1791 | 1992 | echo $html; |
| 1792 | 1993 | } |
| 1793 | 1994 | |
| 1794 | - // Show the express button if reasonable to do so | |
| 1795 | - public function cart_express_checkout_button() { | |
| 1796 | - $gw = $this->gateway(); | |
| 1797 | - | |
| 1798 | - if ($gw->show_express_checkout()){ | |
| 1799 | - return $this->cart_express_checkout_button_html(); | |
| 1800 | - } | |
| 1801 | - } | |
| 1802 | - | |
| 1803 | - public function minicart_express_checkout_button() { | |
| 1804 | - $gw = $this->gateway(); | |
| 1805 | - | |
| 1806 | - if ($gw->show_express_checkout()){ | |
| 1807 | - return $this->cart_express_checkout_button_html(true); | |
| 1808 | - } | |
| 1809 | - } | |
| 1810 | - | |
| 1811 | - public function cart_express_checkout_button_html($minicart = false) { | |
| 1812 | - $url = $this->express_checkout_url(); | |
| 1813 | - $url = wp_nonce_url($url,'express','sec'); | |
| 1814 | - $context = $minicart ? 'minicart' : 'cart'; | |
| 1815 | - $button= apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context($context)); | |
| 1995 | + public function checkout_express_checkout_button_html() { | |
| 1996 | + $button = apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context('checkout')); | |
| 1816 | 1997 | $method = $this->get_payment_method_name(); |
| 1817 | 1998 | $title = sprintf(__('Buy now with %1$s!', 'woo-vipps'), $method); |
| 1818 | - $html = "<a href='$url' class='vipps-express-checkout short $method' title='$title'>$button</a>"; | |
| 1999 | + $url = "#"; | |
| 2000 | + $sec = wp_create_nonce('express'); | |
| 2001 | + $html = "<a href='#' class='vipps-express-checkout short " . esc_attr($method) . "' title='" . esc_attr($title) . "' data-sec='" . esc_attr($sec) . "'>$button</a>"; | |
| 1819 | 2002 | $html = apply_filters('woo_vipps_cart_express_checkout_button', $html, $url); |
| 1820 | 2003 | echo $html; |
| 1821 | 2004 | } |
| 1822 | 2005 | |
| @@ -1855,19 +2038,11 @@ | ||
| 1855 | 2038 | public function express_checkout_button_shortcode() { |
| 1856 | 2039 | $gw = $this->gateway(); |
| 1857 | 2040 | if (!$gw->cart_supports_express_checkout()) return; |
| 1858 | 2041 | ob_start(); |
| 1859 | - $this->cart_express_checkout_button_html('shortcode'); | |
| 2042 | + $this->cart_express_checkout_button_html('cart'); | |
| 1860 | 2043 | return ob_get_clean(); |
| 1861 | 2044 | } |
| 1862 | - // Show a banner normally shown for non-logged-in-users at the checkout page. It does not need to check if we are to show the button, obviously, but needs to see if the cart works | |
| 1863 | - public function express_checkout_banner_shortcode() { | |
| 1864 | - $gw = $this->gateway(); | |
| 1865 | - if (!$gw->cart_supports_express_checkout()) return; | |
| 1866 | - ob_start(); | |
| 1867 | - $this->express_checkout_banner_html(); | |
| 1868 | - return ob_get_clean(); | |
| 1869 | - } | |
| 1870 | 2045 | |
| 1871 | 2046 | // Manage the various product meta fields |
| 1872 | 2047 | public function process_product_meta ($id, $post) { |
| 1873 | 2048 | // This is for the 'buy now' button |
| @@ -2393,82 +2568,9 @@ | ||
| 2393 | 2568 | if ($ok) return $callbackdir; |
| 2394 | 2569 | return null; |
| 2395 | 2570 | } |
| 2396 | 2571 | |
| 2397 | - // Unfortunately, we cannot do any form of portable locking, and we may get callbacks from Vipps arriving at the same moment as we check the status at Vipps, | |
| 2398 | - // which in the very worst case, for Express Checkout orders, may lead to a double shipping line. Changing this to a queue system is non-trivial, because some of | |
| 2399 | - // the operations done when modifying the order actually requires the customers session to be active. This operation will make conflicts a litte less probable | |
| 2400 | - // by implementing something that isn't quite a lock, and the filter may be used to implement proper locking, using e.g. flock, where this can be used | |
| 2401 | - // (non-distributed environments using unix on standard filesystems. IOK 2020-05-15 | |
| 2402 | - // Returns true if lock succeeds, or false. | |
| 2403 | - public function lockOrder($order) { | |
| 2404 | - $orderid = $order->get_id(); | |
| 2405 | - if (has_filter('woo_vipps_lock_order')) { | |
| 2406 | - $ok = apply_filters('woo_vipps_lock_order', $order); | |
| 2407 | - if (!$ok) return false; | |
| 2408 | - } else { | |
| 2409 | - if(get_transient('order_lock_'.$orderid)) return false; | |
| 2410 | - $this->lockKey = uniqid(); | |
| 2411 | - set_transient('order_lock_' . $orderid, $this->lockKey, 30); | |
| 2412 | - } | |
| 2413 | - add_action('shutdown', function () use ($order) { global $Vipps; $Vipps->unlockOrder($order); }); | |
| 2414 | - return true; | |
| 2415 | - } | |
| 2416 | - // If the order is locked, it means it is in the process of being finalized, so for instance, we do *not* want to abandon it | |
| 2417 | - // in checkout. | |
| 2418 | - public function isLocked ($order) { | |
| 2419 | - $orderid = $order->get_id(); | |
| 2420 | - $locked = get_transient('order_lock_'.$orderid); | |
| 2421 | - return apply_filters('woo_vipps_order_locked', $locked, $order); | |
| 2422 | - } | |
| 2423 | - public function unlockOrder($order) { | |
| 2424 | - $orderid = $order->get_id(); | |
| 2425 | - if (has_action('woo_vipps_unlock_order')) { | |
| 2426 | - do_action('woo_vipps_unlock_order', $order); | |
| 2427 | - } else { | |
| 2428 | - if(get_transient('order_lock_'.$orderid) == $this->lockKey) { | |
| 2429 | - delete_transient('order_lock_'.$orderid); | |
| 2430 | - } | |
| 2431 | - } | |
| 2432 | - } | |
| 2433 | 2572 | |
| 2434 | - // Functions using flock() and files to lock orders. This is only guaranteed to work on certain setups, ie, non-distributed setups | |
| 2435 | - // using Unix with normal filesystems (not NFS). | |
| 2436 | - public function flock_lock_order($order) { | |
| 2437 | - global $_orderlocks; | |
| 2438 | - if (!$_orderlocks) $_orderlocks = array(); | |
| 2439 | - $dir = $this->callbackDir(); | |
| 2440 | - if (!$dir) { | |
| 2441 | - $this->log(__("Cannot use flock() to lock orders: cannot create or write to directory", "woo-vipps"), 'error'); | |
| 2442 | - return true; | |
| 2443 | - } | |
| 2444 | - $fname = '.ht-vipps-lock-'.md5($order->get_order_key() . $order->get_meta('_vipps_transaction')); | |
| 2445 | - $path = $dir . DIRECTORY_SEPARATOR . $fname; | |
| 2446 | - touch($path); | |
| 2447 | - if (!is_writable($path)) { | |
| 2448 | - $this->log(__("Cannot use flock() to lock orders: cannot create lockfiles ", "woo-vipps"), 'error'); | |
| 2449 | - return true; | |
| 2450 | - } | |
| 2451 | - $handle = fopen($path, 'w+'); | |
| 2452 | - if (flock($handle, LOCK_EX | LOCK_NB)) { | |
| 2453 | - $_orderlocks[$order->get_id()] = array($handle,$path); | |
| 2454 | - return true; | |
| 2455 | - } | |
| 2456 | - return false; | |
| 2457 | - } | |
| 2458 | - public function flock_unlock_order($order) { | |
| 2459 | - $orderid=$order->get_id(); | |
| 2460 | - global $_orderlocks; | |
| 2461 | - if (!$_orderlocks) return; | |
| 2462 | - if (!isset($_orderlocks[$orderid])) return; | |
| 2463 | - list($handle, $path) = $_orderlocks[$orderid]; | |
| 2464 | - unset($_orderlocks[$orderid]); | |
| 2465 | - flock($handle, LOCK_UN); | |
| 2466 | - fclose($handle); | |
| 2467 | - @unlink($path); | |
| 2468 | - } | |
| 2469 | - | |
| 2470 | - | |
| 2471 | 2573 | // Because the prefix used to create the Vipps order id is editable |
| 2472 | 2574 | // by the user, we will store that as a meta and use this for callbacks etc. |
| 2473 | 2575 | // IOK 2023-01-23 this function is no longer used, and kept only for backwards compatibility with |
| 2474 | 2576 | // debug filters and similar. |
| @@ -2518,77 +2620,93 @@ | ||
| 2518 | 2620 | return null; |
| 2519 | 2621 | } |
| 2520 | 2622 | } |
| 2521 | 2623 | |
| 2624 | + // Special pages, and some callbacks. IOK 2018-05-18 | |
| 2625 | + public function template_redirect() { | |
| 2522 | 2626 | |
| 2523 | - // If this is a special page, return true very early because we are handling this. IOK 2023-02-22 | |
| 2524 | - public function pre_handle_404($current, $query) { | |
| 2525 | - if (!is_admin()) { | |
| 2526 | - $special = $this->is_special_page(); | |
| 2527 | - if ($special) { | |
| 2528 | - // Ensure very early on that Autooptimize does not try to optimize us (if installed) IOK 2023-03-04 | |
| 2529 | - add_filter( 'autoptimize_filter_noptimize', '__return_true'); | |
| 2530 | - return true; | |
| 2531 | - } | |
| 2627 | + // Handle legacy vipps-buy-now urls that auto-start express checkout for certain product - in QR codes etc IOK 2026-09-11 | |
| 2628 | + // We redirect these to the new location. | |
| 2629 | + $path = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH); | |
| 2630 | + if (( ($_GET['VippsSpecialPage'] ?? '') == 'vipps-buy-product') || ($path && preg_match("!/vipps-buy-product/?$!", $path)) ) { | |
| 2631 | + $url = static::get_special_page_url(); | |
| 2632 | + $_GET['action'] = 'buy_product'; | |
| 2633 | + $q = build_query($_GET); | |
| 2634 | + wp_redirect($url . "?" . $q, 302); | |
| 2635 | + exit(); | |
| 2532 | 2636 | } |
| 2533 | - return $current; | |
| 2637 | + | |
| 2638 | + if (static::is_special_page()) { | |
| 2639 | + // Legacy: Stop the canonical redirect here. Unclear if still necessary. IOK 2026-09-11 | |
| 2640 | + remove_filter('template_redirect', 'redirect_canonical', 10); | |
| 2641 | + // dont cache special page. LP 2026-08-25 | |
| 2642 | + $this->nocache(); | |
| 2643 | + // Do the custom pre-load actions for these pages IOK 2026-09-11 | |
| 2644 | + do_action('woo_vipps_before_handling_special_page', ($_GET['action'] ?? "")); | |
| 2645 | + } | |
| 2534 | 2646 | } |
| 2535 | 2647 | |
| 2536 | - // Special pages, and some callbacks. IOK 2018-05-18 | |
| 2537 | - public function template_redirect() { | |
| 2538 | - global $post; | |
| 2539 | - // Handle special callbacks | |
| 2540 | - $special = $this->is_special_page() ; | |
| 2648 | + // Ran in template redirect for the special page. IOK 2026-09-2 | |
| 2649 | + public function pre_special_page_actions ($action) { | |
| 2650 | + // Change title dynamically depending on action. LP 2026-09-02 | |
| 2651 | + add_filter('the_title', [$this, 'vipps_special_page_endpoint_title'], 10, 2); | |
| 2541 | 2652 | |
| 2542 | - if ($special) { | |
| 2543 | - remove_filter('template_redirect', 'redirect_canonical', 10); | |
| 2544 | - do_action('woo_vipps_before_handling_special_page', $special); | |
| 2653 | + // If we are handling the 'wait for payment' action, we need to poll the order status before | |
| 2654 | + // we start producing content IOK 2026-09-21 | |
| 2655 | + if ($action == 'wait_for_payment') { | |
| 2656 | + $this->handle_payment_poll_and_redirect(); | |
| 2657 | + } | |
| 2545 | 2658 | |
| 2546 | - // Allow above hook to actually handle special pages. It should probably call $Vipps->fakepage or a redirect; can be used | |
| 2547 | - // to intercept express checkout etc. IOK 2022-03-18 | |
| 2548 | - if (! apply_filters('woo_vipps_special_page_handled', false, $special)) { | |
| 2549 | - $this->$special(); | |
| 2550 | - } | |
| 2659 | + // Some validation is required for this action | |
| 2660 | + if ($action == 'do_express_checkout') { | |
| 2661 | + $this->vipps_express_checkout_consistency_check(); | |
| 2551 | 2662 | } |
| 2663 | + // These two actions require an extra script | |
| 2664 | + if (in_array($action, ['buy_product','do_express_checkout'])) { | |
| 2665 | + wp_enqueue_script('vipps-purchase', plugins_url('js/vipps-purchase.js',__FILE__), ['vipps-gw'], | |
| 2666 | + filemtime(dirname(__FILE__) . "/js/vipps-purchase.js"), | |
| 2667 | + ['in_footer'=>true] | |
| 2668 | + ); | |
| 2669 | + } | |
| 2670 | + } | |
| 2552 | 2671 | |
| 2553 | - $consentremoval = $this->is_consent_removal(); | |
| 2554 | - if ($consentremoval) { | |
| 2555 | - remove_filter('template_redirect', 'redirect_canonical', 10); | |
| 2556 | - do_action('woo_vipps_before_handling_special_page', 'consentremoval'); | |
| 2557 | - if (! apply_filters('woo_vipps_special_page_handled', false, 'consentremoval')) { | |
| 2558 | - $this->vipps_consent_removal_callback($consentremoval); | |
| 2672 | + // Dynamic special page title depending on endpoint/action, only frontend. LP 2026-09-02 | |
| 2673 | + public function vipps_special_page_endpoint_title($title, $postid = 0) { | |
| 2674 | + global $wp_query; | |
| 2675 | + // Comment from woocommerce's wc_page_endpoint_title where this logic is from: LP 2026-09-02 | |
| 2676 | + | |
| 2677 | + // In block themes the whole template (header, footer, content) renders inside the main | |
| 2678 | + // loop, so `the_title` fires for any post title rendered on the page (e.g. a product in a | |
| 2679 | + // server-rendered mini-cart) - not just the page's own heading. Only replace the title of | |
| 2680 | + // the queried page so an earlier title doesn't consume this one-shot filter. | |
| 2681 | + if ( ! is_null( $wp_query ) && ! is_admin() && is_main_query() && in_the_loop() && is_page() && $postid == static::get_special_page_id() ) { | |
| 2682 | + switch ($_GET['action'] ?? '') { | |
| 2683 | + case 'wait_for_payment': | |
| 2684 | + $title = __('Processing order', 'woo-vipps'); | |
| 2685 | + break; | |
| 2686 | + case 'do_express_checkout': | |
| 2687 | + case 'buy_product': | |
| 2688 | + $title = __('Express Checkout', 'woo-vipps'); | |
| 2689 | + break; | |
| 2559 | 2690 | } |
| 2560 | 2691 | } |
| 2692 | + return $title; | |
| 2561 | 2693 | } |
| 2694 | + | |
| 2562 | 2695 | // Template handling for special pages. IOK 2018-11-21 |
| 2696 | + // This is legacy - the special page is now a real page, so it can have a special template using standard WP methods. IOK 2026-09-11 | |
| 2563 | 2697 | public function template_include($template) { |
| 2564 | - $special = $this->is_special_page() ; | |
| 2565 | - if ($special) { | |
| 2698 | + if (static::is_special_page()) { | |
| 2566 | 2699 | // Get any special template override from the options IOK 2020-02-18 |
| 2567 | 2700 | $specific = $this->gateway()->get_option('vippsspecialpagetemplate'); |
| 2568 | 2701 | $found = locate_template($specific,false,false); |
| 2569 | 2702 | if ($found) $template=$found; |
| 2570 | 2703 | |
| 2571 | - return apply_filters('woo_vipps_special_page_template', $template, $special); | |
| 2704 | + return apply_filters('woo_vipps_special_page_template', $template, $_GET['action'] ?? ''); | |
| 2572 | 2705 | } |
| 2573 | 2706 | return $template; |
| 2574 | 2707 | } |
| 2575 | 2708 | |
| 2576 | - | |
| 2577 | - // Can't use wc-api for this, as that does not support DELETE . IOK 2018-05-18 | |
| 2578 | - private function is_consent_removal () { | |
| 2579 | - | |
| 2580 | - if ($_SERVER['REQUEST_METHOD'] != 'DELETE') return false; | |
| 2581 | - if ( !get_option('permalink_structure')) { | |
| 2582 | - if (@$_REQUEST['vipps-consent-removal']) return @$_REQUEST['callback']; | |
| 2583 | - return false; | |
| 2584 | - } | |
| 2585 | - if (preg_match("!/vipps-consent-removal/([^/]*)!", $_SERVER['REQUEST_URI'], $matches)) { | |
| 2586 | - return @$_REQUEST['callback']; | |
| 2587 | - } | |
| 2588 | - return false; | |
| 2589 | - } | |
| 2590 | - | |
| 2591 | 2709 | // On the thank you page, we have a completed order, so we need to restore any saved cart and possibly log in |
| 2592 | 2710 | // the user if using Express Checkout IOK 2020-10-09 |
| 2593 | 2711 | public function woocommerce_before_thankyou ($orderid) { |
| 2594 | 2712 | $order = wc_get_order($orderid); |
| @@ -2656,9 +2774,8 @@ | ||
| 2656 | 2774 | |
| 2657 | 2775 | // Support adding pickup locations to any shipping rate using the 'woo_vipps_shipping_method_pickup_points' filter |
| 2658 | 2776 | // IOK 2025-11-19 |
| 2659 | 2777 | add_filter('woo_vipps_modify_express_checkout_rate', array($this, 'express_add_pickup_location_options'), 10, 4); |
| 2660 | - | |
| 2661 | 2778 | } |
| 2662 | 2779 | |
| 2663 | 2780 | public function get_payment_method_name() { |
| 2664 | 2781 | return $this->gateway()->get_option('payment_method_name'); |
| @@ -2683,9 +2800,8 @@ | ||
| 2683 | 2800 | // Will also probably be used to maintain a real utility-page for Vipps actions later for themes where this |
| 2684 | 2801 | // is important. |
| 2685 | 2802 | add_filter('woocommerce_create_pages', array($this, 'woocommerce_create_pages'), 50, 1); |
| 2686 | 2803 | |
| 2687 | - | |
| 2688 | 2804 | // Callbacks use the Woo API IOK 2018-05-18 |
| 2689 | 2805 | add_action( 'woocommerce_api_wc_gateway_vipps', array($this,'vipps_callback')); |
| 2690 | 2806 | add_action( 'woocommerce_api_vipps_shipping_details', array($this,'vipps_shipping_details_callback')); |
| 2691 | 2807 | |
| @@ -2696,19 +2812,21 @@ | ||
| 2696 | 2812 | add_action( 'woocommerce_cart_actions', array($this, 'cart_express_checkout_button')); |
| 2697 | 2813 | add_action( 'woocommerce_widget_shopping_cart_buttons', array($this, 'minicart_express_checkout_button'), 30); |
| 2698 | 2814 | |
| 2699 | 2815 | // Previously we added an express html banner to the action 'woocommerce_before_checkout_form.', |
| 2700 | - // replaced by the new express buttons in manner more like Gutenberg. LP 2026-03-23 | |
| 2816 | + // replaced by the new express buttons in manner more like Gutenberg. for grepping: "express legacy checkout". LP 2026-03-23 | |
| 2701 | 2817 | add_action('woocommerce_checkout_before_customer_details', array($this, 'checkout_before_customer_details_express'), 5); |
| 2702 | 2818 | |
| 2703 | 2819 | add_action('woocommerce_after_add_to_cart_button', array($this, 'single_product_buy_now_button')); |
| 2704 | 2820 | add_action('woocommerce_after_shop_loop_item', array($this, 'loop_single_product_buy_now_button'), 20); |
| 2705 | 2821 | |
| 2822 | + // For the classic checkout page and pay-for-order page, use a custom submit button when payment method | |
| 2823 | + // is Vipps | |
| 2824 | + add_action('woocommerce_review_order_after_submit', array($this, 'add_checkout_button_for_classic')); | |
| 2825 | + add_action('woocommerce_pay_order_after_submit', array($this, 'add_checkout_button_for_classic')); | |
| 2706 | 2826 | |
| 2707 | - // Special pages and callbacks handled by template_redirect | |
| 2708 | - // We must also notify WP and other plugins that we are handling this 404-like situation. IOK 2023-02-22 | |
| 2827 | + // Special pages and callbacks handled by template_redirect. IOK 2023-02-22 | |
| 2709 | 2828 | add_action('template_redirect', array($this,'template_redirect'),1); |
| 2710 | - add_action('pre_handle_404', array($this, 'pre_handle_404'), 1, 2); | |
| 2711 | 2829 | |
| 2712 | 2830 | // Allow overriding their templates |
| 2713 | 2831 | add_filter('template_include', array($this,'template_include'), 10, 1); |
| 2714 | 2832 | |
| @@ -2715,21 +2833,8 @@ | ||
| 2715 | 2833 | // Ajax endpoints for checking the order status while waiting for confirmation |
| 2716 | 2834 | add_action('wp_ajax_nopriv_check_order_status', array($this, 'ajax_check_order_status')); |
| 2717 | 2835 | add_action('wp_ajax_check_order_status', array($this, 'ajax_check_order_status')); |
| 2718 | 2836 | |
| 2719 | - | |
| 2720 | - // Buying a single product directly using express checkout IOK 2018-09-28 | |
| 2721 | - add_action('wp_ajax_nopriv_vipps_buy_single_product', array($this, 'ajax_vipps_buy_single_product')); | |
| 2722 | - add_action('wp_ajax_vipps_buy_single_product', array($this, 'ajax_vipps_buy_single_product')); | |
| 2723 | - | |
| 2724 | - // This is for express checkout which we will also do asynchronously IOK 2018-05-28 | |
| 2725 | - add_action('wp_ajax_nopriv_do_express_checkout', array($this, 'ajax_do_express_checkout')); | |
| 2726 | - add_action('wp_ajax_do_express_checkout', array($this, 'ajax_do_express_checkout')); | |
| 2727 | - | |
| 2728 | - // Same thing, but for single products IOK 2018-05-28 | |
| 2729 | - add_action('wp_ajax_nopriv_do_single_product_express_checkout', array($this, 'ajax_do_single_product_express_checkout')); | |
| 2730 | - add_action('wp_ajax_do_single_product_express_checkout', array($this, 'ajax_do_single_product_express_checkout')); | |
| 2731 | - | |
| 2732 | 2837 | // Handle the cancel unpaid order action when the "hold stock" times out. |
| 2733 | 2838 | // For *normal* vipps orders, we run another cronjob every 5. minute which checks order status, |
| 2734 | 2839 | // therefore here it suffices to check if the order is 'cancelled' at Vipps, and if so we return. |
| 2735 | 2840 | // For Checkout the rules are different though. |
| @@ -2808,9 +2913,8 @@ | ||
| 2808 | 2913 | $this->vippsJSConfig = array(); |
| 2809 | 2914 | $this->vippsJSConfig['vippsajaxurl'] = admin_url('admin-ajax.php'); |
| 2810 | 2915 | $this->vippsJSConfig['BuyNowWith'] = __('Buy now with', 'woo-vipps'); |
| 2811 | 2916 | $this->vippsJSConfig['BuyNowWithVipps'] = sprintf(__('Buy now with %1$s', 'woo-vipps'), $this->get_payment_method_name()); |
| 2812 | - $this->vippsJSConfig['vippslogourl'] = plugins_url('img/vipps_logo_negativ_rgb_transparent.png',__FILE__); | |
| 2813 | 2917 | $this->vippsJSConfig['vippssmileurl'] = plugins_url('img/vmp-logo.png',__FILE__); |
| 2814 | 2918 | $this->vippsJSConfig['vippsbuynowbutton'] = sprintf(__( '%1$s Buy Now button', 'woo-vipps' ), $this->get_payment_method_name()); |
| 2815 | 2919 | $this->vippsJSConfig['vippsbuynowdescription'] = sprintf(__( 'Add a %1$s Buy Now-button to the product block or choose a product manually', 'woo-vipps'), $this->get_payment_method_name()); |
| 2816 | 2920 | $this->vippsJSConfig['vippslanguage'] = $this->get_customer_language(); |
| @@ -2815,10 +2919,17 @@ | ||
| 2815 | 2919 | $this->vippsJSConfig['vippsbuynowdescription'] = sprintf(__( 'Add a %1$s Buy Now-button to the product block or choose a product manually', 'woo-vipps'), $this->get_payment_method_name()); |
| 2816 | 2920 | $this->vippsJSConfig['vippslanguage'] = $this->get_customer_language(); |
| 2817 | 2921 | $this->vippsJSConfig['vippslocale'] = get_locale(); |
| 2818 | 2922 | $this->vippsJSConfig['vippsexpressbuttonurl'] = $this->get_payment_method_name(); |
| 2819 | - | |
| 2923 | + $this->vippsJSConfig['paymentMethodSlug'] = sanitize_title($this->get_payment_method_name()); | |
| 2924 | + $this->vippsJSConfig['paymentMethodName'] = $this->get_payment_method_name(); | |
| 2925 | + $wc_lang = $this->get_html_button_attrs_for_context()['language']; | |
| 2926 | + if ('store' === $wc_lang) $wc_lang = $this->get_customer_language(); | |
| 2927 | + // Looks like button and badge web components now use 'da' instead of 'dk' for danish. LP 2026-08-11 | |
| 2928 | + if ('dk' === $wc_lang) $wc_lang = 'da'; | |
| 2929 | + $this->vippsJSConfig['webcomponentLanguage'] = $wc_lang; | |
| 2820 | 2930 | |
| 2931 | + | |
| 2821 | 2932 | // If the site supports Gutenberg Blocks, support the Checkout block IOK 2020-08-10 |
| 2822 | 2933 | if (class_exists('Automattic\WooCommerce\Blocks\Payments\Integrations\AbstractPaymentMethodType')) { |
| 2823 | 2934 | // Ensure gateways are loaded at this point IOK 2026-05-27 |
| 2824 | 2935 | require_once(dirname(__FILE__) . '/WC_Gateway_VippsCard.class.php'); |
| @@ -3690,9 +3801,9 @@ | ||
| 3690 | 3801 | $shipping_method = $methodclass ? new $methodclass($rate->get_instance_id()) : null; |
| 3691 | 3802 | |
| 3692 | 3803 | $tax = $rate->get_shipping_tax() ?: 0; |
| 3693 | 3804 | $cost = $rate->get_cost() ?: 0; |
| 3694 | - $label = $rate->get_label(); | |
| 3805 | + $label = html_entity_decode($rate->get_label()); | |
| 3695 | 3806 | |
| 3696 | 3807 | if ($cost == 0 && ($methodid != 'local_pickup' && $methodid != 'pickup_location')) { |
| 3697 | 3808 | $has_free_shipping = true; |
| 3698 | 3809 | } |
| @@ -3718,9 +3829,9 @@ | ||
| 3718 | 3829 | $shippingcostB = sprintf("%.2F",wc_format_decimal($cost, '') + wc_format_decimal($tax,'')); |
| 3719 | 3830 | $shippingcost = max($shippingcostA, $shippingcostB); |
| 3720 | 3831 | |
| 3721 | 3832 | $vippsmethod['shippingCost'] = $shippingcost; |
| 3722 | - $vippsmethod['shippingMethod'] = $rate->get_label(); | |
| 3833 | + $vippsmethod['shippingMethod'] = html_entity_decode($rate->get_label()); | |
| 3723 | 3834 | $vippsmethod['shippingMethodId'] = $key; |
| 3724 | 3835 | $vippsmethods[]=$vippsmethod; |
| 3725 | 3836 | |
| 3726 | 3837 | // Metadata and settings stored for later use for Checkout |
| @@ -4034,9 +4145,9 @@ | ||
| 4034 | 4145 | WC()->cart->calculate_totals(); |
| 4035 | 4146 | WC()->cart->set_session(); |
| 4036 | 4147 | return true; |
| 4037 | 4148 | } catch (Exception $e) { |
| 4038 | - $this->log(sprintf(__("Error regenerating cart from order %1\$d: %2\$s", 'woo-vipps'), $order_id, $e->get_message()), 'error'); | |
| 4149 | + $this->log(sprintf(__("Error regenerating cart from order %1\$d: %2\$s", 'woo-vipps'), $order_id, $e->getMessage()), 'error'); | |
| 4039 | 4150 | return false; |
| 4040 | 4151 | } |
| 4041 | 4152 | } |
| 4042 | 4153 | |
| @@ -4065,9 +4176,9 @@ | ||
| 4065 | 4176 | $tax = $rate->get_shipping_tax() ?: 0; |
| 4066 | 4177 | $cost = $rate->get_cost() ?: 0; |
| 4067 | 4178 | |
| 4068 | 4179 | $method['shippingCost'] = sprintf("%.2F",wc_format_decimal($cost+$tax,'')); |
| 4069 | - $method['shippingMethod'] = $rate->get_label(); | |
| 4180 | + $method['shippingMethod'] = html_entity_decode($rate->get_label()); | |
| 4070 | 4181 | // We may not really need the tax stashed here, but just to be sure. |
| 4071 | 4182 | $method['shippingMethodId'] = $rate->get_id() . ";" . $tax; |
| 4072 | 4183 | $methods[]= $method; |
| 4073 | 4184 | |
| @@ -4120,17 +4231,8 @@ | ||
| 4120 | 4231 | header("X-Accel-Expires: 0"); |
| 4121 | 4232 | } |
| 4122 | 4233 | |
| 4123 | 4234 | |
| 4124 | - | |
| 4125 | - // Handle DELETE on a vipps consent removal callback | |
| 4126 | - public function vipps_consent_removal_callback ($callback) { | |
| 4127 | - Vipps::nocache(); | |
| 4128 | - // Currently, no such requests will be posted, and as this code isn't sufficiently tested,we'll just have | |
| 4129 | - // to escape here when the API is changed. IOK 2020-10-14 | |
| 4130 | - $this->log("Consent removal is non-functional pending API changes as of 2020-10-14"); print "1"; exit(); | |
| 4131 | - } | |
| 4132 | - | |
| 4133 | 4235 | public function woocommerce_payment_gateways($methods) { |
| 4134 | 4236 | require_once(dirname(__FILE__) . "/WC_Gateway_Vipps.class.php"); |
| 4135 | 4237 | require_once(dirname(__FILE__) . "/WC_Gateway_VippsCard.class.php"); |
| 4136 | 4238 | // Protect the singleton: Use the object instead of the class name IOK 2025-02-04 |
| @@ -4155,9 +4257,11 @@ | ||
| 4155 | 4257 | if ( empty($_REQUEST['add-to-cart']) || ! is_numeric($_REQUEST['add-to-cart']) || empty($_REQUEST['vipps_compat_mode']) || !$_REQUEST['vipps_compat_mode']) { |
| 4156 | 4258 | return $url; |
| 4157 | 4259 | } |
| 4158 | 4260 | $url = $this->express_checkout_url(); |
| 4159 | - $url = wp_nonce_url($url,'express','sec'); | |
| 4261 | + // At this point, there is always a query argument here. IOK 2026-09-21 | |
| 4262 | + $nonce = wp_create_nonce('express'); | |
| 4263 | + $url = $url . "&sec=$nonce"; | |
| 4160 | 4264 | |
| 4161 | 4265 | return $url; |
| 4162 | 4266 | } |
| 4163 | 4267 | |
| @@ -4253,20 +4357,40 @@ | ||
| 4253 | 4357 | } |
| 4254 | 4358 | } |
| 4255 | 4359 | |
| 4256 | 4360 | public function activate () { |
| 4257 | - static::maybe_add_cron_event(); | |
| 4258 | - $gw = $this->gateway(); | |
| 4361 | + static::maybe_add_cron_event(); | |
| 4362 | + $gw = $this->gateway(); | |
| 4259 | 4363 | |
| 4260 | - // If store is using the default "Woo" orderprefix, generate a new one, this time using the stores' sitename if possible. IOK 2020-05-19 | |
| 4261 | - if ($gw->get_option('orderprefix') == 'Woo') { | |
| 4262 | - $gw->update_option('orderprefix', $this->generate_order_prefix()); | |
| 4263 | - } | |
| 4264 | - // IOK 2023-12-20 for the epayment api, we need to re-initialize webhooks at this point. | |
| 4265 | - $gw->initialize_webhooks(); | |
| 4266 | - $this->payment_method_name = $gw->get_option('payment_method_name'); | |
| 4267 | - } | |
| 4364 | + // If store is using the default "Woo" orderprefix, generate a new one, this time using the stores' sitename if possible. IOK 2020-05-19 | |
| 4365 | + if ($gw->get_option('orderprefix') == 'Woo') { | |
| 4366 | + $gw->update_option('orderprefix', $this->generate_order_prefix()); | |
| 4367 | + } | |
| 4368 | + // IOK 2023-12-20 for the epayment api, we need to re-initialize webhooks at this point. | |
| 4369 | + $gw->initialize_webhooks(); | |
| 4370 | + $this->payment_method_name = $gw->get_option('payment_method_name'); | |
| 4268 | 4371 | |
| 4372 | + | |
| 4373 | + // Check if the special page is noted and actually does exist | |
| 4374 | + $special = static::get_special_page_id(); | |
| 4375 | + if ($special) { | |
| 4376 | + $special_page = get_post($special); | |
| 4377 | + if ($special_page && 'trash' !== $special_page->post_status) { | |
| 4378 | + // Ensure this page has the necessary shortcode. LP 2026-09-01 | |
| 4379 | + if (!has_shortcode($special_page->post_content, 'vipps_special_page')) { | |
| 4380 | + $new_content = $special_page->post_content . "\n\n<!-- wp:shortcode -->[vipps_special_page]<!-- /wp:shortcode -->"; | |
| 4381 | + wp_update_post([ | |
| 4382 | + 'ID' => $special, | |
| 4383 | + 'post_content' => $new_content, | |
| 4384 | + ]); | |
| 4385 | + } | |
| 4386 | + } else { | |
| 4387 | + delete_option('woocommerce_vipps_special_page_page_id'); | |
| 4388 | + } | |
| 4389 | + } | |
| 4390 | + | |
| 4391 | + } | |
| 4392 | + | |
| 4269 | 4393 | // We have added some hooks to wp-cron; remove these. IOK 2020-04-01 |
| 4270 | 4394 | public static function deactivate() { |
| 4271 | 4395 | $timestamp = wp_next_scheduled('vipps_cron_cleanup_hook'); |
| 4272 | 4396 | wp_unschedule_event($timestamp, 'vipps_cron_cleanup_hook'); |
| @@ -4334,28 +4458,12 @@ | ||
| 4334 | 4458 | $order = wc_get_order($order->get_id()); |
| 4335 | 4459 | $order_status = $order->get_status(); |
| 4336 | 4460 | |
| 4337 | 4461 | if ($order_status != 'pending') return $order_status; |
| 4338 | - // No callback has occured yet. If this has been going on for a while, check directly with Vipps | |
| 4339 | - // We can't use the vipps init timestamp here, because that may be in the past for Checkout at least. IOK 2025-08-13 | |
| 4340 | - if ($order_status == 'pending') { | |
| 4341 | - if (WC()->session) { | |
| 4342 | - $now = time(); | |
| 4343 | - $then = WC()->session->get('_vipps_check_' . $order->get_id()); | |
| 4344 | - if (!$then) { | |
| 4345 | - $then = $now; | |
| 4346 | - WC()->session->set('_vipps_check_' . $order->get_id(), $then); | |
| 4347 | - } | |
| 4348 | - if (($then + (1 * 30)) > $now) { // more than half a minute? Start checking at Vipps | |
| 4349 | - return $order_status; | |
| 4350 | - } | |
| 4351 | - } else { | |
| 4352 | - // No session shouldn't be possible, but if it is.. | |
| 4353 | - return $order_status; | |
| 4354 | - } | |
| 4355 | - } | |
| 4462 | + | |
| 4463 | + $gw = $this->gateway(); | |
| 4356 | 4464 | $this->log("Checking order status on Vipps for order id: " . $order->get_id(), 'info'); |
| 4357 | - return $this->check_status_of_pending_order($order); | |
| 4465 | + $newstatus = $gw->poll_and_check_order_status($order); | |
| 4358 | 4466 | } |
| 4359 | 4467 | |
| 4360 | 4468 | // In some situations we have to empty the cart when the user goes to Vipps, so |
| 4361 | 4469 | // we store it in the session and restore it if the users cancels. IOK 2018-05-07 |
| @@ -4423,8 +4531,9 @@ | ||
| 4423 | 4531 | |
| 4424 | 4532 | // Maybe log in user |
| 4425 | 4533 | // It is done on the thank-you page of the order, and only for express checkout. |
| 4426 | 4534 | function maybe_log_in_user ($order) { |
| 4535 | + | |
| 4427 | 4536 | if (is_user_logged_in()) return; |
| 4428 | 4537 | if (!$order || ! self::is_vipps_order($order)) return; |
| 4429 | 4538 | |
| 4430 | 4539 | // We *do* want to log in express checkout customers, but not those that |
| @@ -4570,129 +4679,233 @@ | ||
| 4570 | 4679 | } |
| 4571 | 4680 | if (!$o) return; |
| 4572 | 4681 | if (!$o->get_meta('_vipps_single_product_express')) return; |
| 4573 | 4682 | if ($failed && !apply_filters('woo_vipps_restore_cart_on_express_checkout_failure', true, $o)) return; |
| 4574 | - if ($failed) WC()->cart->empty_cart(); | |
| 4683 | + // Restoring cart! But clear it first so we dont add this single product to the restored cart. LP 2026-09-22 | |
| 4684 | + WC()->cart->empty_cart(); | |
| 4575 | 4685 | $this->restore_cart($o); |
| 4576 | 4686 | } |
| 4577 | 4687 | |
| 4578 | 4688 | |
| 4579 | - public function ajax_vipps_buy_single_product () { | |
| 4580 | - Vipps::nocache(); | |
| 4581 | - static::set_locale_if_in_header(); | |
| 4582 | - // We're not checking ajax referer here, because what we do is creating a session and redirecting to the | |
| 4583 | - // 'create order' page wherein we'll do the actual work. IOK 2018-09-28 | |
| 4584 | - $session = WC()->session; | |
| 4585 | - if (!$session->has_session()) { | |
| 4586 | - $session->set_customer_session_cookie(true); | |
| 4689 | + // Actually create a express checkout order object, with no shipping or personal information, returning information about | |
| 4690 | + // the result. The order should at this point be in a/the cart. For single product purchases, this is a different cart than | |
| 4691 | + // the main one; for cart purchases, it's just the WC()->cart object. IOK 2026-08-25 | |
| 4692 | + private function create_and_process_express_order() { | |
| 4693 | + $result = null; | |
| 4694 | + $gw = $this->gateway(); | |
| 4695 | + try { | |
| 4696 | + $orderid = $gw->create_partial_order(); | |
| 4697 | + do_action('woo_vipps_ajax_do_express_checkout', $orderid); | |
| 4698 | + } catch (Exception $e) { | |
| 4699 | + $result = array('ok'=>0, 'orderid'=>0, 'msg'=>__('Could not create order','woo-vipps') . ': ' . $e->getMessage(), 'url'=>false); | |
| 4700 | + return $result; | |
| 4701 | + } | |
| 4702 | + if (!$orderid) { | |
| 4703 | + $result = array('ok'=>0, 'orderid'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4704 | + return $result; | |
| 4587 | 4705 | } |
| 4588 | - $session->set('__vipps_buy_product', json_encode($_REQUEST)); | |
| 4589 | 4706 | |
| 4590 | - // Incredibly, some caches will cache this page even with cookies set and no-cache headers set. So we try to | |
| 4591 | - // add yet another way to inform caches that this is, in fact, not cacheable. IOK 2023-06-12 | |
| 4592 | - $url = add_query_arg('nc', sha1(uniqid(WC()->session->get_customer_id(),true)), $this->buy_product_url()); | |
| 4707 | + try { | |
| 4708 | + $this->maybe_add_static_shipping($gw,$orderid); | |
| 4709 | + } catch (Exception $e) { | |
| 4710 | + $this->log(__("Error calculating static shipping", 'woo-vipps'), 'error'); | |
| 4711 | + $this->log($e->getMessage(),'error'); | |
| 4712 | + $result = array('ok'=>0, 'orderid'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4713 | + return $result; | |
| 4714 | + } | |
| 4593 | 4715 | |
| 4594 | - $result = array('ok'=>1, 'msg'=>__('Processing order... ','woo-vipps'), 'url'=> $url); | |
| 4595 | - wp_send_json($result); | |
| 4596 | - exit(); | |
| 4716 | + // Now pass this to the Woo gateway and get a redirect URL back IOK 2026-08-25 | |
| 4717 | + $ok = $gw->process_payment($orderid); | |
| 4718 | + if ($ok && $ok['result'] == 'success') { | |
| 4719 | + $result = array('ok'=>1, 'orderid'=>$orderid, 'msg'=>'', 'url'=>$ok['redirect']); | |
| 4720 | + return $result; | |
| 4721 | + } | |
| 4722 | + $result = array('ok'=>0, 'orderid'=>$orderid, 'msg'=> sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()), 'url'=>''); | |
| 4723 | + return $result; | |
| 4597 | 4724 | } |
| 4598 | 4725 | |
| 4599 | - public function ajax_do_express_checkout () { | |
| 4600 | - check_ajax_referer('do_express','sec'); | |
| 4601 | - Vipps::nocache(); | |
| 4602 | - static::set_locale_if_in_header(); | |
| 4726 | + // This creates a simple hash for the 'current order' which we will store in the session if we proceed to checkout. We use this to | |
| 4727 | + // avoid/warn the user of duplicate purchases. IOK 2026-09-09 | |
| 4728 | + public function create_order_hash($args=null) { | |
| 4729 | + // If we have no arguments, we'll hash the cart. | |
| 4730 | + if (empty($args)) { | |
| 4731 | + $cartitems = WC()->cart->get_cart(); | |
| 4732 | + $orderspec = array(); | |
| 4733 | + foreach($cartitems as $item => $values) { | |
| 4734 | + $orderspec[] = array('sku'=> ($values['sku'] ?? ""), 'product_id'=>($values['product_id'] ?? 0), 'variation_id'=>($values['variation_id'] ?? 0), 'quantity'=>($values['quantity'] ?? 1)); | |
| 4735 | + } | |
| 4736 | + $args = $orderspec; | |
| 4737 | + } | |
| 4738 | + return md5(serialize($args)); | |
| 4739 | + } | |
| 4740 | + | |
| 4741 | + | |
| 4742 | + // This method may provide HTML form elements to ask a user questions after starting | |
| 4743 | + // express checkout. It is used to detect duplicate orders, possibly for terms and conditions, and user-definiable customizations. IOK 2026-09-09 | |
| 4744 | + // NULL productinfo means use the cart; the "current hash" is used to detect duplicates, and is calculated by the caller. | |
| 4745 | + public function express_order_needs_confirmation($args, $productinfo, $current_hash) { | |
| 4746 | + $elements = []; | |
| 4747 | + $html = ""; | |
| 4748 | + | |
| 4749 | + // First, let's check if we need to confirm the purchase. | |
| 4750 | + $last_express_purchase_hash = WC()->session->get('woo_vipps_last_express'); | |
| 4751 | + if ($last_express_purchase_hash) { | |
| 4752 | + list($hash, $orderid, $stamp) = explode(":", $last_express_purchase_hash); | |
| 4753 | + $cutoff = $stamp + apply_filters('woo_vipps_recent_order_cutoff', (3*60)); | |
| 4754 | + if ($hash == $current_hash && (time() <= $cutoff )) { | |
| 4755 | + $order = wc_get_order($orderid); | |
| 4756 | + $status = $order ? $order->get_status() : false; | |
| 4757 | + // IOK TODO/FIXME actually, if the order is pending/failed/cancelled and *identical* to our current productinfo, we could plausibly do a restart here. Would probably require careful checking though, and | |
| 4758 | + // a different flow. IOK 2026-09-17 | |
| 4759 | + if (in_array($status, ['on-hold', 'processing', 'completed'])) { | |
| 4760 | + $header = __("Are you sure?",'woo-vipps'); | |
| 4761 | + $body = __("You recently completed an order with exactly the same products as you are buying now. There should be an email in your inbox from the previous purchase. Are you sure you want to order again?",'woo-vipps'); | |
| 4762 | + $elements['possible_duplicate'] = "<h1>$header</h1><p>$body</p>"; | |
| 4763 | + $this->log(__("It seems a customer is trying to re-order product(s) recently bought in the same session, asking user for confirmation", 'woo-vipps'), 'info'); | |
| 4764 | + } | |
| 4765 | + } | |
| 4766 | + } | |
| 4767 | + | |
| 4603 | 4768 | $gw = $this->gateway(); |
| 4769 | + $askForTerms = function_exists('wc_terms_and_conditions_checkbox_enabled') ? wc_terms_and_conditions_checkbox_enabled() : true; | |
| 4770 | + $askForTerms = $askForTerms && ($gw->get_option('expresscheckout_termscheckbox') == 'yes'); | |
| 4771 | + $askForTerms = apply_filters('woo_vipps_express_checkout_terms_and_conditions_checkbox_enabled', $askForTerms); | |
| 4604 | 4772 | |
| 4605 | - if (!$gw->express_checkout_available() || !$gw->cart_supports_express_checkout()) { | |
| 4606 | - $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); | |
| 4607 | - wp_send_json($result); | |
| 4608 | - exit(); | |
| 4773 | + if ($askForTerms) { | |
| 4774 | + $termsHTML = ''; | |
| 4775 | + // Include shop terms | |
| 4776 | + ob_start(); | |
| 4777 | + wc_get_template('checkout/terms.php'); | |
| 4778 | + $termsHTML = ob_get_clean(); | |
| 4779 | + $termsHTML = apply_filters('woo_vipps_express_checkout_terms_and_conditions_html',$termsHTML); | |
| 4780 | + $elements['terms'] = $termsHTML; | |
| 4609 | 4781 | } |
| 4610 | 4782 | |
| 4783 | + // Custom fields | |
| 4784 | + ob_start(); | |
| 4785 | + do_action('woo_vipps_express_checkout_orderspec_form', $productinfo, $args); | |
| 4786 | + $extra_fields = ob_get_clean(); | |
| 4787 | + if (!empty($extra_fields)) { | |
| 4788 | + $elements['extra'] = $extra_fields; | |
| 4789 | + } | |
| 4611 | 4790 | |
| 4612 | - | |
| 4791 | + if (!empty($elements)) { | |
| 4792 | + $html = join("\n", array_values($elements)); | |
| 4793 | + $msg = join(",", array_keys($elements)); | |
| 4794 | + return ['ok'=>2, 'msg'=>$msg, 'html'=>$html, 'url'=>'']; | |
| 4795 | + } | |
| 4613 | 4796 | |
| 4797 | + return false; | |
| 4798 | + | |
| 4799 | + } | |
| 4800 | + | |
| 4801 | + public function rest_do_express_checkout ($request) { | |
| 4802 | + Vipps::nocache(); | |
| 4803 | + check_ajax_referer('express', 'sec'); | |
| 4804 | + static::set_locale_if_in_header(); | |
| 4805 | + $args = $request->get_json_params(); | |
| 4806 | + if (!$args) { | |
| 4807 | + return new WP_Error('no_data', __('No data passed to express checkout', 'woo-vipps'), ['status' => 400]); | |
| 4808 | + } | |
| 4809 | + | |
| 4810 | + // Since this is the REST api, we need to load the cart manually here. IOK 2026-08-27 | |
| 4811 | + if ( is_null( WC()->cart ) ) { | |
| 4812 | + WC()->frontend_includes(); | |
| 4813 | + if ( ! WC()->session instanceof WC_Session ) { | |
| 4814 | + WC()->session = new WC_Session_Handler(); | |
| 4815 | + WC()->session->init(); | |
| 4816 | + } | |
| 4817 | + if (is_null( WC()->customer)) { | |
| 4818 | + WC()->customer = new WC_Customer( get_current_user_id(), true ); | |
| 4819 | + } | |
| 4820 | + WC()->cart = new WC_Cart(); | |
| 4821 | + WC()->cart->get_cart_from_session(); | |
| 4822 | + } | |
| 4823 | + | |
| 4824 | + | |
| 4825 | + $gw = $this->gateway(); | |
| 4826 | + if (!$gw->express_checkout_available() || !$gw->cart_supports_express_checkout()) { | |
| 4827 | + $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); | |
| 4828 | + return $result; | |
| 4829 | + } | |
| 4614 | 4830 | // Validate cart going forward using same logic as WC_Cart->check_cart() but not adding notices. |
| 4615 | 4831 | $toolate = false; |
| 4616 | 4832 | $msg = ""; |
| 4617 | 4833 | $valid = WC()->cart->check_cart_item_validity(); |
| 4618 | 4834 | if ( is_wp_error( $valid) ) { |
| 4619 | - $toolate = true; | |
| 4620 | - $msg = "<br>" . $valid->get_error_message(); | |
| 4835 | + $toolate = true; | |
| 4836 | + $msg = "<br>" . $valid->get_error_message(); | |
| 4621 | 4837 | } |
| 4622 | 4838 | $stock = WC()->cart->check_cart_item_stock(); |
| 4623 | - if ( is_wp_error( $stock) ) { | |
| 4624 | - $toolate = true; | |
| 4625 | - $msg = "<br>" . $stock->get_error_message(); | |
| 4626 | - } | |
| 4839 | + if ( is_wp_error( $stock) ) { | |
| 4840 | + $toolate = true; | |
| 4841 | + $msg = "<br>" . $stock->get_error_message(); | |
| 4842 | + } | |
| 4627 | 4843 | |
| 4628 | 4844 | if ($toolate) { |
| 4629 | 4845 | $result = array('ok'=>0, 'msg'=>sprintf(__('Some of the products in your cart are no longer available in the quantities you have ordered. Please <a href="%1$s">edit your order</a> before continuing the checkout','woo-vipps'), wc_get_cart_url()) . $msg, 'url'=>false); |
| 4630 | - wp_send_json($result); | |
| 4631 | - exit(); | |
| 4846 | + return $result; | |
| 4632 | 4847 | } |
| 4633 | 4848 | |
| 4634 | - try { | |
| 4635 | - $orderid = $gw->create_partial_order(); | |
| 4636 | - do_action('woo_vipps_ajax_do_express_checkout', $orderid); | |
| 4637 | - } catch (Exception $e) { | |
| 4638 | - $this->log($e->getMessage(),'error'); | |
| 4639 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps') . ': ' . $e->getMessage(), 'url'=>false); | |
| 4640 | - wp_send_json($result); | |
| 4641 | - exit(); | |
| 4642 | - } | |
| 4643 | - if (!$orderid) { | |
| 4644 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4645 | - wp_send_json($result); | |
| 4646 | - exit(); | |
| 4849 | + // Then the cookies. These would be the _ga and sbjs_ cookies typically, but we'll let users handle these themselves. | |
| 4850 | + // These are passed as arguments from the javascript, since proxies are likely to strip them. This should allow | |
| 4851 | + // systems like MonsterInsights that look for the _GA cookie to succeed. IOK 2026-08-30 | |
| 4852 | + $cookies = $args['cookies'] ?? []; | |
| 4853 | + foreach($cookies as $key => $value) { | |
| 4854 | + if (!isset($_COOKIE[$key])) { | |
| 4855 | + $_COOKIE[$key] = $value; | |
| 4856 | + } | |
| 4647 | 4857 | } |
| 4858 | + // There might be extra values here now, which would typically have been posted as POST arguments, in a form. | |
| 4859 | + // User-defined stuff and so on. We'll initiate the POST value with these to simulate this for backwards compatibility. | |
| 4860 | + $others =$args['post'] ?? []; | |
| 4861 | + foreach($args['post'] as $key=>$value) { | |
| 4862 | + $_POST[$key] = $value; | |
| 4863 | + } | |
| 4648 | 4864 | |
| 4649 | - try { | |
| 4650 | - $this->maybe_add_static_shipping($gw,$orderid); | |
| 4651 | - } catch (Exception $e) { | |
| 4652 | - $this->log(__("Error calculating static shipping", 'woo-vipps'), 'error'); | |
| 4653 | - $this->log($e->getMessage(),'error'); | |
| 4654 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4655 | - wp_send_json($result); | |
| 4656 | - exit(); | |
| 4865 | + // Try to avoid re-purchasing the same order repeatedly. IOK 2026-09-02 | |
| 4866 | + $current_hash = $this->create_order_hash(); | |
| 4867 | + $confirmation = (bool) intval(($others['confirmed'] ?? 0)); | |
| 4868 | + if (!$confirmation) { | |
| 4869 | + $result = $this->express_order_needs_confirmation($args, null, $current_hash); | |
| 4870 | + if (!empty($result)) { | |
| 4871 | + return $result; | |
| 4872 | + } | |
| 4657 | 4873 | } |
| 4658 | - | |
| 4659 | - $ok = $gw->process_payment($orderid); | |
| 4660 | - if ($ok && $ok['result'] == 'success') { | |
| 4661 | - $result = array('ok'=>1, 'msg'=>'', 'url'=>$ok['redirect']); | |
| 4662 | - wp_send_json($result); | |
| 4663 | - exit(); | |
| 4874 | + | |
| 4875 | + $result = $this->create_and_process_express_order(); | |
| 4876 | + if ($result['ok'] == 1) { | |
| 4877 | + $orderid = $result['orderid']; | |
| 4878 | + WC()->session->set('woo_vipps_last_express', "$current_hash:$orderid:" . time()); | |
| 4879 | + WC()->session->save_data(); | |
| 4664 | 4880 | } |
| 4665 | - $result = array('ok'=>0, 'msg'=> sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()), 'url'=>''); | |
| 4666 | - wp_send_json($result); | |
| 4667 | - exit(); | |
| 4881 | + return $result; | |
| 4882 | + | |
| 4668 | 4883 | } |
| 4669 | 4884 | |
| 4670 | - // Same as ajax_do_express_checkout, but for a single product/variation. Duplicate code because we want to manipulate the cart differently here. IOK 2018-09-25 | |
| 4671 | - public function ajax_do_single_product_express_checkout() { | |
| 4672 | - check_ajax_referer('do_express','sec'); | |
| 4673 | - Vipps::nocache(); | |
| 4885 | + | |
| 4886 | + // Rest handler for single product express checkout. Expects arguments as JSON. IOK 2026-08-25 | |
| 4887 | + public function rest_do_single_product_express_checkout ($request) { | |
| 4888 | + Vipps::nocache(); | |
| 4674 | 4889 | static::set_locale_if_in_header(); |
| 4675 | - require_once(dirname(__FILE__) . "/WC_Gateway_Vipps.class.php"); | |
| 4676 | - $gw = $this->gateway(); | |
| 4677 | - | |
| 4678 | - if (!$gw->express_checkout_available()) { | |
| 4679 | - $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); | |
| 4680 | - wp_send_json($result); | |
| 4681 | - exit(); | |
| 4890 | + $args = $request->get_json_params(); | |
| 4891 | + if (!$args) { | |
| 4892 | + return new WP_Error('no_data', __('No data passed to express checkout', 'woo-vipps'), ['status' => 400]); | |
| 4682 | 4893 | } |
| 4894 | + $result = ['ok' => 0, 'msg'=>'', 'orderid'=>0, 'url'=>'']; | |
| 4683 | 4895 | |
| 4896 | + // We receive the varid, prodid, sku and quantity directly. One of these. The sku is the dominant one. IOK 2026-08-27 | |
| 4897 | + $varid = intval($args['variation_id'] ?? 0); | |
| 4898 | + $prodid = intval($args['product_id'] ?? 0); | |
| 4899 | + $sku = sanitize_text_field($args['sku'] ?? ""); | |
| 4900 | + $quantity = max(1, intval($args['quantity'] ?? 0)); | |
| 4684 | 4901 | |
| 4685 | - // Here we will either have a product-id, a variant-id and a product-id, or just a SKU. The product-id will not be a variant - but | |
| 4686 | - // we'll double-check just in case. Also if we somehow *just* get a variant-id we should fix that too. But a SKU trumps all. IOK 2018-10-02 | |
| 4687 | - $varid = intval(@$_POST['variation_id']); | |
| 4688 | - $prodid = intval(@$_POST['product_id']); | |
| 4689 | - $sku = sanitize_text_field(@$_POST['sku']); | |
| 4690 | - $quant = intval(@$_POST['quantity']); | |
| 4691 | 4902 | |
| 4692 | - // Get any attributes posted for variable products (where one of the dimensions is "any" for instance) | |
| 4693 | - $variations = array(); | |
| 4694 | - foreach ($_POST as $key => $value ) { | |
| 4903 | + // We expect the variations - that is, the fields named "attribute_..." to be sent as post fields. | |
| 4904 | + // We just need to sanitize them. | |
| 4905 | + $variations = []; | |
| 4906 | + $invars = $args['post'] ?? []; | |
| 4907 | + foreach ($invars as $key => $value) { | |
| 4695 | 4908 | if ( 'attribute_' !== substr( $key, 0, 10 ) ) { |
| 4696 | 4909 | continue; |
| 4697 | 4910 | } |
| 4698 | 4911 | $variations[ sanitize_title( wp_unslash( $key ) ) ] = wp_unslash( $value ); |
| @@ -4697,15 +4910,94 @@ | ||
| 4697 | 4910 | } |
| 4698 | 4911 | $variations[ sanitize_title( wp_unslash( $key ) ) ] = wp_unslash( $value ); |
| 4699 | 4912 | } |
| 4700 | 4913 | |
| 4701 | - $product = null; | |
| 4702 | - $variant = null; | |
| 4703 | - $parent = null; | |
| 4704 | - $parentid = null; | |
| 4705 | - $quantity = 1; | |
| 4706 | - if ($quant && $quant>1) $quantity=$quant; | |
| 4914 | + // Then the cookies. These would be the _ga and sbjs_ cookies typically, but we'll let users handle these themselves. | |
| 4915 | + // These are passed as arguments from the javascript, since proxies are likely to strip them. This should allow | |
| 4916 | + // systems like MonsterInsights that look for the _GA cookie to succeed. IOK 2026-08-30 | |
| 4917 | + $cookies = $args['cookies'] ?? []; | |
| 4918 | + foreach($cookies as $key => $value) { | |
| 4919 | + if (!isset($_COOKIE[$key])) { | |
| 4920 | + $_COOKIE[$key] = $value; | |
| 4921 | + } | |
| 4922 | + } | |
| 4707 | 4923 | |
| 4924 | + // There might be extra values here now, which would typically have been posted as POST arguments, in a form. | |
| 4925 | + // User-defined stuff and so on. We'll initiate the POST value with these to simulate this for backwards compatibility. | |
| 4926 | + $others =$args['post'] ?? []; | |
| 4927 | + foreach($args['post'] as $key=>$value) { | |
| 4928 | + $_POST[$key] = $value; | |
| 4929 | + } | |
| 4930 | + | |
| 4931 | + // Since this is the REST api, we need to load the cart manually here. *Not* loading the cart could be an option but unpredictable. IOK 2026-08-27 | |
| 4932 | + if ( is_null( WC()->cart ) ) { | |
| 4933 | + WC()->frontend_includes(); | |
| 4934 | + if ( ! WC()->session instanceof WC_Session ) { | |
| 4935 | + WC()->session = new WC_Session_Handler(); | |
| 4936 | + WC()->session->init(); | |
| 4937 | + | |
| 4938 | + // If we don't have a session cookie, we need to set it, and also initialize the $_COOKIE value. IOK 2026-09-29 | |
| 4939 | + if (! WC()->session->get_session_cookie()) { | |
| 4940 | + $store_session_cookie = function ( $options, $name, $value ) { $_COOKIE[$name] = $value; return $options;}; | |
| 4941 | + add_filter('woocommerce_set_cookie_options', $store_session_cookie, 10, 3); | |
| 4942 | + try { | |
| 4943 | + WC()->session->set_customer_session_cookie( true ); // We have to explicitly set the cookie if this session is fresh. IOK 2026-09-29 | |
| 4944 | + } finally { | |
| 4945 | + remove_filter('woocommerce_set_cookie_options', $store_session_cookie, 10); | |
| 4946 | + } | |
| 4947 | + } | |
| 4948 | + } | |
| 4949 | + if (is_null( WC()->customer)) { | |
| 4950 | + WC()->customer = new WC_Customer( get_current_user_id(), true ); | |
| 4951 | + } | |
| 4952 | + WC()->cart = new WC_Cart(); | |
| 4953 | + WC()->cart->get_cart_from_session(); | |
| 4954 | + } | |
| 4955 | + | |
| 4956 | + // Try to avoid re-purchasing the same order repeatedly. IOK 2026-09-02 | |
| 4957 | + // We calculate this here so we can add it to the session later. IOK 2026-09-09 | |
| 4958 | + $orderspec = array('sku'=> $sku, 'product_id'=>$prodid, 'variation_id'=>$varid, 'quantity'=>$quantity); | |
| 4959 | + $current_hash = $this->create_order_hash($orderspec); | |
| 4960 | + | |
| 4961 | + // Now to handle "extra questions" for an order, including terms + conditions and "possible duplicate order" IOK 2026-09-09 | |
| 4962 | + $confirmation = (bool) intval(($others['confirmed'] ?? 0)); | |
| 4963 | + if (!$confirmation) { | |
| 4964 | + $result = $this->express_order_needs_confirmation($args, $orderspec, $current_hash); | |
| 4965 | + if (!empty($result)) { | |
| 4966 | + $response = new WP_REST_Response($result); | |
| 4967 | + $response->set_status(200); | |
| 4968 | + return $response; | |
| 4969 | + } | |
| 4970 | + } | |
| 4971 | + | |
| 4972 | + // Basically always return 200 after this, and always return an object with an 'ok' and a 'msg' value, possibly 'orderid' and 'url'. | |
| 4973 | + $result = $this->really_do_single_product_express_checkout($prodid, $varid, $sku, $quantity, $variations); | |
| 4974 | + // And if we're going to express now so let's note the order. IOK 2026-08-27. Now this assumes success, but *basically* I think this is ok. | |
| 4975 | + // We'll reset it on order failure I think. IOK 2026-08-20 FIXME | |
| 4976 | + if ($result['ok'] == 1) { | |
| 4977 | + $orderid = $result['orderid']; | |
| 4978 | + WC()->session->set('woo_vipps_last_express', "$current_hash:$orderid:" . time()); | |
| 4979 | + WC()->session->save_data(); | |
| 4980 | + } | |
| 4981 | + | |
| 4982 | + $response = new WP_REST_Response($result); | |
| 4983 | + $response->set_status(200); | |
| 4984 | + | |
| 4985 | + return $response; | |
| 4986 | + } | |
| 4987 | + | |
| 4988 | + // Common private method to do single product express checkout, used by the new REST express. IOK 2026-08-25 | |
| 4989 | + private function really_do_single_product_express_checkout($prodid, $varid, $sku, $quantity=1, $variations=[]) { | |
| 4990 | + require_once(dirname(__FILE__) . "/WC_Gateway_Vipps.class.php"); | |
| 4991 | + $gw = $this->gateway(); | |
| 4992 | + | |
| 4993 | + if (!$gw->express_checkout_available()) { | |
| 4994 | + $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); | |
| 4995 | + return $result; | |
| 4996 | + } | |
| 4997 | + // Here we will either have a product-id, a variant-id and a product-id, or just a SKU. The product-id will not be a variant - but | |
| 4998 | + // we'll double-check just in case. Also if we somehow *just* get a variant-id we should fix that too. But a SKU trumps all. IOK 2018-10-02 | |
| 4999 | + | |
| 4708 | 5000 | // Find the product, or variation, and get everything in order so we can check existence, availability etc. IOK 2018-10-02 |
| 4709 | 5001 | // Moved rules around as the _sku variant broke in 3.6.1 for stores that didn't bother to update the database IOK 2019-04-24 |
| 4710 | 5002 | // This broke single-product purchases for variable products; fixed IOK 2019-05-21 thanks to Gaute Terland Nilsen @ Easyweb for the report |
| 4711 | 5003 | try { |
| @@ -4718,17 +5010,14 @@ | ||
| 4718 | 5010 | $product = wc_get_product($skuid); |
| 4719 | 5011 | } |
| 4720 | 5012 | } catch (Exception $e) { |
| 4721 | 5013 | $result = array('ok'=>0, 'msg'=>__('Error finding product - cannot create order','woo-vipps'), 'url'=>false); |
| 4722 | - wp_send_json($result); | |
| 4723 | - exit(); | |
| 5014 | + return $result; | |
| 4724 | 5015 | } |
| 4725 | 5016 | |
| 4726 | - | |
| 4727 | 5017 | if (!$product) { |
| 4728 | 5018 | $result = array('ok'=>0, 'msg'=>__('Unknown product, cannot create order','woo-vipps'), 'url'=>false); |
| 4729 | - wp_send_json($result); | |
| 4730 | - exit(); | |
| 5019 | + return $result; | |
| 4731 | 5020 | } |
| 4732 | 5021 | |
| 4733 | 5022 | $parentid = $product ? $product->get_parent_id() : null; // If the product is a variation, then the parent product is the parentid. |
| 4734 | 5023 | $parent = $parentid ? wc_get_product($parentid) : null; |
| @@ -4735,34 +5024,30 @@ | ||
| 4735 | 5024 | |
| 4736 | 5025 | // This can't really happen, but if it did.. |
| 4737 | 5026 | if ($prodid && $parentid && ($prodid != $parentid)) { |
| 4738 | 5027 | $result = array('ok'=>0, 'msg'=>__('Selected product variant is not available','woo-vipps'), 'url'=>false); |
| 4739 | - wp_send_json($result); | |
| 4740 | - exit(); | |
| 5028 | + return $result; | |
| 4741 | 5029 | } |
| 4742 | 5030 | if (!$gw->product_supports_express_checkout($product)) { |
| 4743 | 5031 | $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); |
| 4744 | - wp_send_json($result); | |
| 4745 | - exit(); | |
| 5032 | + return $result; | |
| 4746 | 5033 | } |
| 4747 | 5034 | |
| 4748 | 5035 | // Somebody addded the wrong SKU |
| 4749 | 5036 | if ($product->get_type() == 'variable'){ |
| 4750 | 5037 | $result = array('ok'=>0, 'msg'=>__('Selected product variant is not available for purchase','woo-vipps'), 'url'=>false); |
| 4751 | - wp_send_json($result); | |
| 4752 | - exit(); | |
| 5038 | + return $result; | |
| 4753 | 5039 | } |
| 4754 | 5040 | // Final check of availability |
| 4755 | 5041 | if (!$product->is_purchasable() || !$product->is_in_stock()) { |
| 4756 | 5042 | $result = array('ok'=>0, 'msg'=>__('Your product is temporarily no longer available for purchase','woo-vipps'), 'url'=>false); |
| 4757 | - wp_send_json($result); | |
| 4758 | - exit(); | |
| 5043 | + return $result; | |
| 4759 | 5044 | } |
| 4760 | 5045 | |
| 4761 | 5046 | // Now it should be safe to continue to the checkout process. IOK 2018-10-02 |
| 4762 | - | |
| 4763 | 5047 | // Create a new temporary cart for this order. We need to get (and save) the real session cart, |
| 4764 | 5048 | // because some plugins actually override this. |
| 5049 | + // NB: Please note the cart must have been loaded here, be aware when doing REST. IOK 2026-08-27 | |
| 4765 | 5050 | $current_cart = clone WC()->cart; |
| 4766 | 5051 | WC()->cart->empty_cart(); |
| 4767 | 5052 | |
| 4768 | 5053 | if ($parent && $parent->get_type() == 'variable') { |
| @@ -4769,50 +5054,22 @@ | ||
| 4769 | 5054 | WC()->cart->add_to_cart($parent->get_id(),$quantity,$product->get_id(), $variations); |
| 4770 | 5055 | } else { |
| 4771 | 5056 | WC()->cart->add_to_cart($product->get_id(),$quantity); |
| 4772 | 5057 | } |
| 5058 | + WC()->session->save_data(); | |
| 4773 | 5059 | |
| 4774 | - try { | |
| 4775 | - $orderid = $gw->create_partial_order(); | |
| 4776 | - do_action('woo_vipps_ajax_do_express_checkout', $orderid); | |
| 4777 | - } catch (Exception $e) { | |
| 4778 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps') . ': ' . $e->getMessage(), 'url'=>false); | |
| 4779 | - wp_send_json($result); | |
| 4780 | - exit(); | |
| 4781 | - } | |
| 5060 | + $result = $this->create_and_process_express_order(); | |
| 4782 | 5061 | |
| 4783 | - if (!$orderid) { | |
| 4784 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4785 | - wp_send_json($result); | |
| 4786 | - exit(); | |
| 5062 | + if ($result['ok'] ?? false) { | |
| 5063 | + // Single product purchase, so save any contents of the real cart | |
| 5064 | + $orderid = $result['orderid']; | |
| 5065 | + $order = wc_get_order($orderid); | |
| 5066 | + $order->update_meta_data('_vipps_single_product_express',true); | |
| 5067 | + $order->save(); | |
| 5068 | + $this->save_cart($order,$current_cart); | |
| 4787 | 5069 | } |
| 4788 | 5070 | |
| 4789 | - try { | |
| 4790 | - $this->maybe_add_static_shipping($gw,$orderid); | |
| 4791 | - } catch (Exception $e) { | |
| 4792 | - $this->log(__("Error calculating static shipping", 'woo-vipps'), 'error'); | |
| 4793 | - $this->log($e->getMessage(),'error'); | |
| 4794 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4795 | - wp_send_json($result); | |
| 4796 | - exit(); | |
| 4797 | - } | |
| 4798 | - | |
| 4799 | - | |
| 4800 | - // Single product purchase, so save any contents of the real cart | |
| 4801 | - $order = wc_get_order($orderid); | |
| 4802 | - $order->update_meta_data('_vipps_single_product_express',true); | |
| 4803 | - $order->save(); | |
| 4804 | - $this->save_cart($order,$current_cart); | |
| 4805 | - | |
| 4806 | - $ok = $gw->process_payment($orderid); | |
| 4807 | - if ($ok && $ok['result'] == 'success') { | |
| 4808 | - $result = array('ok'=>1, 'msg'=>'', 'url'=>$ok['redirect']); | |
| 4809 | - wp_send_json($result); | |
| 4810 | - exit(); | |
| 4811 | - } | |
| 4812 | - $result = array('ok'=>0, 'msg'=> sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()), 'url'=>''); | |
| 4813 | - wp_send_json($result); | |
| 4814 | - exit(); | |
| 5071 | + return $result; | |
| 4815 | 5072 | } |
| 4816 | 5073 | |
| 4817 | 5074 | // This calculates and adds static shipping info to a partial order for express checkout if merchant has enabled this. IOK 2020-03-19 |
| 4818 | 5075 | // Made visible for consistency with add_static_shipping. IOK 2021-10-22 |
| @@ -4878,9 +5135,9 @@ | ||
| 4878 | 5135 | $transaction = sanitize_text_field(@$_POST['transaction']); |
| 4879 | 5136 | |
| 4880 | 5137 | $sessionorders= WC()->session->get('_vipps_session_orders'); |
| 4881 | 5138 | if (!isset($sessionorders[$orderid])) { |
| 4882 | - wp_send_json(array('status'=>'error', 'msg'=>__('Not an order','woo-vipps'))); | |
| 5139 | + wp_send_json(array('status'=>'error', 'msg'=>__('Not a session order','woo-vipps'))); | |
| 4883 | 5140 | } |
| 4884 | 5141 | |
| 4885 | 5142 | $order = wc_get_order($orderid); |
| 4886 | 5143 | if (!$order) { |
| @@ -4928,46 +5185,37 @@ | ||
| 4928 | 5185 | wp_send_json(array('status'=>'error', 'msg'=> __('Unknown payment status','woo-vipps') . ' ' . $payment)); |
| 4929 | 5186 | return false; |
| 4930 | 5187 | } |
| 4931 | 5188 | |
| 4932 | - // The various return URLs for special pages of the Vipps stuff depend on settings and pretty-URLs so we supply them from here | |
| 4933 | - // These are for the "fallback URL" mostly. IOK 2018-05-18 | |
| 4934 | - private function make_vipps_url($what) { | |
| 4935 | - if ( !get_option('permalink_structure')) { | |
| 4936 | - return add_query_arg('VippsSpecialPage', $what, home_url("/", 'https')); | |
| 4937 | - } | |
| 4938 | - return trailingslashit(home_url($what, 'https')); | |
| 5189 | + // The various return URLs for special pages of the Vipps stuff. Previously used a fake page and had to check permalink_structure. LP 2026-08-26 | |
| 5190 | + private function make_special_page_url($action) { | |
| 5191 | + return add_query_arg('action', $action, $this->get_special_page_url()); | |
| 4939 | 5192 | } |
| 5193 | + | |
| 4940 | 5194 | public function payment_return_url() { |
| 4941 | - return apply_filters('woo_vipps_payment_return_url', $this->make_vipps_url('vipps-betaling')); | |
| 5195 | + return apply_filters('woo_vipps_payment_return_url', $this->make_special_page_url('wait_for_payment')); | |
| 4942 | 5196 | } |
| 4943 | 5197 | public function express_checkout_url() { |
| 4944 | - return $this->make_vipps_url('vipps-express-checkout'); | |
| 5198 | + return $this->make_special_page_url('do_express_checkout'); | |
| 4945 | 5199 | } |
| 4946 | 5200 | public function buy_product_url() { |
| 4947 | - return $this->make_vipps_url('vipps-buy-product'); | |
| 5201 | + return $this->make_special_page_url('buy_product'); | |
| 4948 | 5202 | } |
| 4949 | 5203 | |
| 4950 | - // Return the method in the Vipps | |
| 4951 | - public function is_special_page() { | |
| 4952 | - $specials = array('vipps-betaling' => 'vipps_wait_for_payment', 'vipps-express-checkout'=>'vipps_express_checkout', 'vipps-buy-product'=>'vipps_buy_product'); | |
| 4953 | - $method = null; | |
| 4954 | - if ( get_option('permalink_structure')) { | |
| 4955 | - foreach($specials as $special=>$specialmethod) { | |
| 4956 | - // IOK 2018-06-07 Change to add any prefix from home-url for better matching IOK 2018-06-07 | |
| 4957 | - $path = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH); | |
| 4958 | - if ($path && preg_match("!/$special/?$!", $path, $matches)) { | |
| 4959 | - $method = $specialmethod; break; | |
| 4960 | - } | |
| 4961 | - } | |
| 4962 | - } else { | |
| 4963 | - if (isset($_GET['VippsSpecialPage'])) { | |
| 4964 | - $method = @$specials[$_GET['VippsSpecialPage']]; | |
| 4965 | - } | |
| 4966 | - } | |
| 4967 | - return $method; | |
| 5204 | + public static function is_special_page() { | |
| 5205 | + $id = static::get_special_page_id(); | |
| 5206 | + return $id && is_page($id); | |
| 4968 | 5207 | } |
| 4969 | 5208 | |
| 5209 | + public static function get_special_page_id() { | |
| 5210 | + $id = wc_get_page_id('vipps_special_page'); // -1 if not found | |
| 5211 | + return $id > 0 ? $id : null; | |
| 5212 | + } | |
| 5213 | + | |
| 5214 | + public static function get_special_page_url() { | |
| 5215 | + return get_permalink(static::get_special_page_id()); | |
| 5216 | + } | |
| 5217 | + | |
| 4970 | 5218 | // Just create a spinner and a overlay. |
| 4971 | 5219 | public function spinner () { |
| 4972 | 5220 | $flavour = sanitize_title($this->get_payment_method_name()); |
| 4973 | 5221 | ob_start(); |
| @@ -5146,51 +5394,90 @@ | ||
| 5146 | 5394 | echo "<div class='vipps_buy_now_wrapper loop'>$button</div>"; |
| 5147 | 5395 | } |
| 5148 | 5396 | |
| 5149 | 5397 | |
| 5150 | - | |
| 5151 | 5398 | // Checkout replaces the default checkout page, and currently uses its own page for this which needs to exist |
| 5152 | 5399 | // IOK 2026-04-30 remove this when checkout is end-of-life'd |
| 5400 | + // We now also use this for the vipps special page, previously a fakepage. LP 2026-08-18 | |
| 5153 | 5401 | public function woocommerce_create_pages ($data) { |
| 5402 | + // Vipps Checkout page | |
| 5154 | 5403 | $vipps_checkout_activated = get_option('woo_vipps_checkout_activated', false); |
| 5155 | - if (!$vipps_checkout_activated) return $data; | |
| 5404 | + if ($vipps_checkout_activated) { | |
| 5405 | + $data['vipps_checkout'] = array( | |
| 5406 | + 'name' => _x( 'vipps_checkout', 'Page slug', 'woo-vipps' ), | |
| 5407 | + 'title' => _x( 'Vipps MobilePay Checkout', 'Page title', 'woo-vipps' ), | |
| 5408 | + 'content' => '<!-- wp:shortcode -->[' . 'vipps_checkout' . ']<!-- /wp:shortcode -->', | |
| 5409 | + ); | |
| 5410 | + } | |
| 5156 | 5411 | |
| 5157 | - $data['vipps_checkout'] = array( | |
| 5158 | - 'name' => _x( 'vipps_checkout', 'Page slug', 'woo-vipps' ), | |
| 5159 | - 'title' => _x( 'Vipps MobilePay Checkout', 'Page title', 'woo-vipps' ), | |
| 5160 | - 'content' => '<!-- wp:shortcode -->[' . 'vipps_checkout' . ']<!-- /wp:shortcode -->', | |
| 5161 | - ); | |
| 5162 | - | |
| 5412 | + // Vipps special page for certain payment flow actions. Previously a fake page. LP 2026-08-18 | |
| 5413 | + $data['vipps_special_page'] = [ | |
| 5414 | + 'name' => 'vipps-payment', // slug | |
| 5415 | + /* translators: company name */ | |
| 5416 | + 'title' => sprintf(__('%s special page', 'woo-vipps'), static::CompanyName()), // we hide the title frontend in template_redirect. LP 2026-08-27 | |
| 5417 | + 'content' => '<!-- wp:shortcode -->[vipps_special_page]<!-- /wp:shortcode -->', | |
| 5418 | + ]; | |
| 5163 | 5419 | return $data; |
| 5164 | 5420 | } |
| 5165 | 5421 | |
| 5166 | - // Creates any necessary Vipps pages. Will be called e.g. when activating Checkout or turning it on. | |
| 5422 | + // Creates any necessary Vipps pages. E.g vipps checkout page or vipps special page. LP 2026-09-01 | |
| 5423 | + // If a page slug already exists, then it won't overwrite or duplicate it!. LP 2026-09-02 | |
| 5167 | 5424 | public function maybe_create_vipps_pages () { |
| 5425 | + $make_pages = false; | |
| 5426 | + | |
| 5427 | + // Vipps Checkout page. LP 2026-08-18 | |
| 5168 | 5428 | $checkoutid = wc_get_page_id('vipps_checkout'); |
| 5169 | - $makeit = !$checkoutid || ! get_post_status($checkoutid); | |
| 5170 | - if ($makeit) { | |
| 5429 | + if (!$checkoutid || ! get_post_status($checkoutid)) { | |
| 5171 | 5430 | delete_option('woocommerce_vipps_checkout_page_id'); |
| 5431 | + $make_pages = true; | |
| 5172 | 5432 | } |
| 5173 | 5433 | |
| 5174 | - if ($makeit) { | |
| 5175 | - WC_Install::create_pages(); | |
| 5434 | + // vipps special page, previously a fake page. LP 2026-08-18 | |
| 5435 | + $builtin_special_page_id = static::get_special_page_id(); | |
| 5436 | + if (!$builtin_special_page_id || !get_post_status($builtin_special_page_id)) { | |
| 5437 | + delete_option('woocommerce_vipps_special_page_page_id'); | |
| 5438 | + $make_pages = true; | |
| 5176 | 5439 | } |
| 5440 | + | |
| 5441 | + if ($make_pages) { | |
| 5442 | + WC_Install::create_pages(); | |
| 5443 | + } | |
| 5177 | 5444 | } |
| 5178 | 5445 | |
| 5446 | + public function vipps_special_page_shortcode($atts, $content) { | |
| 5447 | + // No point in expanding this unless we are actually doing the special actions. LP 2026-08-25 | |
| 5448 | + if (is_admin()) return; | |
| 5449 | + if (wp_doing_ajax()) return; | |
| 5450 | + if (defined('REST_REQUEST') && REST_REQUEST) return; | |
| 5451 | + if (did_filter('woo_vipps_special_page_html')) return; // User has somehow added two shortcodes. IOK 2026-09-18 | |
| 5179 | 5452 | |
| 5453 | + $action = $_GET['action'] ?? ''; | |
| 5454 | + $html = ""; | |
| 5455 | + switch ($action) { | |
| 5456 | + case 'wait_for_payment': | |
| 5457 | + $html = $this->vipps_wait_for_payment(); | |
| 5458 | + break; | |
| 5459 | + case 'do_express_checkout': | |
| 5460 | + $html = $this->vipps_express_checkout(); | |
| 5461 | + break; | |
| 5462 | + case 'buy_product': | |
| 5463 | + $html = $this->vipps_buy_product(); | |
| 5464 | + break; | |
| 5465 | + default: | |
| 5466 | + $html = ''; | |
| 5467 | + } | |
| 5468 | + // This is mostly to avoid this shortcode evaluating twice IOK 2026-09-18 | |
| 5469 | + $html = apply_filters('woo_vipps_special_page_html', $html, $action); | |
| 5470 | + | |
| 5471 | + // Remember, this is a shortcode, so the html must be returned, not echoed IOK 2026-09-11 | |
| 5472 | + return $html; | |
| 5473 | + } | |
| 5474 | + | |
| 5475 | + | |
| 5180 | 5476 | // This URL will when accessed add a product to the cart and go directly to the express checkout page. |
| 5181 | 5477 | // The argument passed must be a shareable link created for a given product - so this in effect acts as a landing page for |
| 5182 | 5478 | // the buying thru Vipps Express Checkout of a single product linked to in for instance banners. IOK 2018-09-24 |
| 5183 | 5479 | public function vipps_buy_product() { |
| 5184 | - status_header(200,'OK'); | |
| 5185 | - Vipps::nocache(); | |
| 5186 | - | |
| 5187 | - add_filter('body_class', function ($classes) { | |
| 5188 | - $classes[] = 'vipps-express-checkout'; | |
| 5189 | - $classes[] = 'woocommerce-checkout'; // Required by Pixel Your Site IOK 2022-11-24 | |
| 5190 | - return apply_filters('woo_vipps_express_checkout_body_class', $classes); | |
| 5191 | - }); | |
| 5192 | - | |
| 5193 | 5480 | do_action('woo_vipps_express_checkout_page'); |
| 5194 | 5481 | |
| 5195 | 5482 | $session = WC()->session; |
| 5196 | 5483 | $posted = $session->get('__vipps_buy_product'); |
| @@ -5219,39 +5506,38 @@ | ||
| 5219 | 5506 | |
| 5220 | 5507 | if (!$productinfo) { |
| 5221 | 5508 | $title = __("Product is no longer available",'woo-vipps'); |
| 5222 | 5509 | $content = __("The link you have followed is for a product that is no longer available at this location. Please return to the store and try again",'woo-vipps'); |
| 5223 | - return $this->fakepage($title,$content); | |
| 5510 | + return $this->special_page_html($title,$content); | |
| 5224 | 5511 | } |
| 5225 | 5512 | |
| 5226 | 5513 | // Pass the productinfo to the express checkout form |
| 5227 | 5514 | $args = array(); |
| 5228 | - $args['quantity'] = 1; | |
| 5229 | - if (array_key_exists('product_id',$productinfo)) $args['product_id'] = intval($productinfo['product_id']); | |
| 5230 | - if (array_key_exists('variation_id',$productinfo)) $args['variation_id'] = intval($productinfo['variation_id']); | |
| 5231 | - if (array_key_exists('product_sku',$productinfo)) $args['sku'] = sanitize_text_field($productinfo['product_sku']); | |
| 5232 | - if (array_key_exists('quantity',$productinfo)) $args['quantity'] = intval($productinfo['quantity']); | |
| 5515 | + $args['product_id'] = esc_attr(intval($productinfo['product_id'] ?? 0)); | |
| 5516 | + $args['variation_id'] = esc_attr(intval($productinfo['variation_id'] ?? 0)); | |
| 5517 | + $args['sku'] = esc_attr(sanitize_text_field($productinfo['product_sku'] ?? "")); | |
| 5518 | + $args['quantity'] = esc_attr(max(1, intval($productinfo['quantity'] ?? 0))); | |
| 5233 | 5519 | |
| 5234 | - // For variable products where some of the attributes are "any", we need to add these as well. This is from woos form-handler for these. | |
| 5235 | - foreach ($productinfo as $key => $value) { | |
| 5236 | - if ( 'attribute_' !== substr( $key, 0, 10 ) ) { | |
| 5237 | - continue; | |
| 5238 | - } | |
| 5239 | - $args[sanitize_title(wp_unslash($key))] = sanitize_text_field(wp_unslash($value)); | |
| 5240 | - } | |
| 5520 | + $payment_method = $this->get_payment_method_name(); | |
| 5521 | + $btitle = esc_attr(sprintf(__('Buy now with %1$s', 'woo-vipps'), $payment_method)); | |
| 5522 | + $bclass = esc_attr($payment_method); | |
| 5241 | 5523 | |
| 5242 | - $this->print_express_checkout_page(true,'do_single_product_express_checkout',$args); | |
| 5524 | + $content = "<p id=waiting>" . __("Please wait while we are preparing your order", 'woo-vipps') . "...</p>"; | |
| 5525 | + $content .= "<div class='vipps-qr-purchase' style='visibility:hidden'>"; | |
| 5526 | + $content .= "<a href='javascript:void(0)' class='single-product button vipps-buy-now $bclass' data-vipps-autostart='true' data-vipps-purchase='single' data-product_id='{$args['product_id']}' data-variation_id='{$args['variation_id']}' data-product_sku='{$args['sku']}' data-quantity='{$args['quantity']}' title='{$btitle}'; | |
| 5527 | + >"; | |
| 5528 | + $content .= $this->get_html_button_for_context('global'); | |
| 5529 | + $content .= "</a>"; | |
| 5530 | + $content .= "</div>"; | |
| 5531 | + | |
| 5532 | + return $content; | |
| 5243 | 5533 | } |
| 5244 | 5534 | |
| 5245 | - // This is a landing page for the express checkout of then normal cart - it is done like this because this could take time on slower hosts. | |
| 5246 | - public function vipps_express_checkout() { | |
| 5247 | - status_header(200,'OK'); | |
| 5248 | - Vipps::nocache(); | |
| 5535 | + public function vipps_express_checkout_consistency_check() { | |
| 5249 | 5536 | // We need a nonce to get here, but we should only get here when we have a cart, so this will not be cached. |
| 5250 | 5537 | // IOK 2018-05-28 |
| 5251 | 5538 | $ok = isset($_REQUEST['sec']) && wp_verify_nonce($_REQUEST['sec'],'express'); |
| 5252 | 5539 | |
| 5253 | - | |
| 5254 | 5540 | $backurl = wp_validate_redirect(@$_SERVER['HTTP_REFERER']); |
| 5255 | 5541 | if (!$backurl) $backurl = home_url(); |
| 5256 | 5542 | |
| 5257 | 5543 | if (!$ok) { |
| @@ -5265,219 +5551,39 @@ | ||
| 5265 | 5551 | wp_redirect($backurl); |
| 5266 | 5552 | exit(); |
| 5267 | 5553 | } |
| 5268 | 5554 | |
| 5269 | - add_filter('body_class', function ($classes) { | |
| 5270 | - $classes[] = 'vipps-express-checkout'; | |
| 5271 | - $classes[] = 'woocommerce-checkout'; // Required by Pixel Your Site IOK 2022-11-24 | |
| 5272 | - return apply_filters('woo_vipps_express_checkout_body_class', $classes); | |
| 5273 | - }); | |
| 5274 | - | |
| 5275 | - do_action('woo_vipps_express_checkout_page'); | |
| 5276 | - | |
| 5277 | - $this->print_express_checkout_page(true, 'do_express_checkout'); | |
| 5555 | + add_filter('woo_vipps_express_checkout_consistent', '__return_true'); | |
| 5278 | 5556 | } |
| 5279 | 5557 | |
| 5280 | - // This method tries to ensure that a customer does not 'lose' the return page and | |
| 5281 | - // starts ordering the same products twice. IOK 2020-01-22 | |
| 5282 | - protected function validate_express_checkout_orderspec ($orderspec) { | |
| 5283 | - if (empty($orderspec)) return true; // It's not a duplicate, it's nothing. | |
| 5284 | - | |
| 5285 | - // First build for the current order an array of hash-tables keyed by prodid, varid and quantity. | |
| 5286 | - $orderset = array(); | |
| 5287 | - foreach($orderspec as $entry) $orderset[] = join(':', $entry); | |
| 5288 | - | |
| 5289 | - // Then get open orders | |
| 5290 | - $sessionorders = array(); | |
| 5291 | - $sessionorderdata = WC()->session->get('_vipps_session_orders'); | |
| 5292 | - if ($sessionorderdata) { | |
| 5293 | - foreach(array_keys($sessionorderdata) as $oid) { | |
| 5294 | - $orderobject = wc_get_order($oid); | |
| 5295 | - // Check to see that this hasn't been deleted yet IOK 2020-01-07 | |
| 5296 | - if ($orderobject instanceof WC_Order) { | |
| 5297 | - $sessionorders[] = $orderobject; | |
| 5298 | - } | |
| 5299 | - } | |
| 5558 | + // This is a landing page for the express checkout of the normal cart - it is done like this because this could take time on slower hosts. | |
| 5559 | + // IOK 2026-09-09 - nowadays this is only used for compatibility mode. It will automatically start express checkout of the current cart when reached. | |
| 5560 | + public function vipps_express_checkout() { | |
| 5561 | + // Some checks are made in template_redirect, we check here if they are ok IOK 2026-09-21 | |
| 5562 | + if (!apply_filters('woo_vipps_express_checkout_consistent', false)) { | |
| 5563 | + $content = __('Link expired, please try again', 'woo-vipps'); | |
| 5564 | + return $content; | |
| 5300 | 5565 | } |
| 5301 | - // Nothing more to do here | |
| 5302 | - if (empty($sessionorders)) return true; | |
| 5566 | + | |
| 5567 | + do_action('woo_vipps_express_checkout_page'); | |
| 5303 | 5568 | |
| 5304 | - // And create a similar hash table for each of the open orders | |
| 5305 | - $openorderdata = array(); | |
| 5306 | - foreach ($sessionorders as $open_order) { | |
| 5307 | - $status = $open_order->get_status(); | |
| 5308 | - if ($status == 'cancelled' || $status == 'pending') continue; | |
| 5309 | - $when = strtotime($open_order->get_date_modified()); | |
| 5310 | - $cutoff = $when + apply_filters('woo_vipps_recent_order_cutoff', (5*60)); | |
| 5311 | - if (time() > $cutoff) { | |
| 5312 | - continue; | |
| 5313 | - } | |
| 5314 | - $orderdata = array(); | |
| 5315 | - foreach($open_order->get_items() as $item) { | |
| 5316 | - $productspec = $item->get_product_id() . ':' . $item->get_variation_id() . ':' . $item->get_quantity(); | |
| 5317 | - $orderdata[] = $productspec; | |
| 5318 | - } | |
| 5319 | - $openorderdata[]=$orderdata; | |
| 5320 | - } | |
| 5569 | + $payment_method = $this->get_payment_method_name(); | |
| 5570 | + $btitle = esc_attr(sprintf(__('Buy now with %1$s', 'woo-vipps'), $payment_method)); | |
| 5571 | + $bclass = esc_attr($payment_method); | |
| 5572 | + $sec = esc_attr($_REQUEST['sec']); | |
| 5573 | + $content = ""; | |
| 5574 | + $content .= "<p id=waiting>" . __("Please wait while we are preparing your order", 'woo-vipps') . "...</p>"; | |
| 5575 | + $content .= '<div class="vipps-cart-purchase" style="visibility:hidden">"'; | |
| 5576 | + $content .= "<a href='javascript:void(0)' class='vipps-express-checkout short $bclass' data-vipps-autostart='true' data-sec='$sec' title='$btitle'>"; | |
| 5577 | + $content .= $this->get_html_button_for_context('global'); | |
| 5578 | + $content .="</a>"; | |
| 5579 | + $content .="</div>"; | |
| 5321 | 5580 | |
| 5322 | - // Now: For each entry in the orderhash, check if there is an order that has a) all of them and b) not any more of them. | |
| 5323 | - foreach($openorderdata as $prevorder) { | |
| 5324 | - $a = array_diff($prevorder, $orderset); | |
| 5325 | - $b = array_diff($orderset, $prevorder); | |
| 5326 | - if (empty($a) && empty($b)) { | |
| 5327 | - $this->log(__("It seems a customer is trying to re-order product(s) recently bought in the same session, asking user for confirmation", 'woo-vipps'), 'info'); | |
| 5328 | - return false; | |
| 5329 | - } | |
| 5330 | - } | |
| 5331 | - // Else, order is good. | |
| 5332 | - return true; | |
| 5581 | + return $content; | |
| 5333 | 5582 | } |
| 5334 | 5583 | |
| 5335 | - // Returns a triple of productid, variantid and quantity from an array of arguments which can pass either these or a SKU value. | |
| 5336 | - // Return value is like in a cart. | |
| 5337 | - // Used to create an order in express checkout, and to see that this order isn't a repeat. IOK 2020-01-22 | |
| 5338 | - protected function get_orderspec_from_arguments ($productinfo) { | |
| 5339 | - if (!$productinfo) return array(); | |
| 5340 | - $variantid = 0; | |
| 5341 | - $productid = 0; | |
| 5342 | - $quantity = intval(@$productinfo['quantity']); | |
| 5343 | - if (!$quantity) $quantity = 1; | |
| 5344 | - if (isset($productinfo['sku']) && $productinfo['sku']) { | |
| 5345 | - $sku = $productinfo['sku']; | |
| 5346 | - $skuid = wc_get_product_id_by_sku($sku); | |
| 5347 | - $product = wc_get_product($skuid); | |
| 5348 | - $parentid = $product ? $product->get_parent_id() : null; | |
| 5349 | - if ($product) { | |
| 5350 | - if ($parentid) { | |
| 5351 | - $variantid = $skuid; $productid = $parentid; | |
| 5352 | - } else { | |
| 5353 | - $productid = $skuid; | |
| 5354 | - } | |
| 5355 | - } | |
| 5356 | - } else if (isset($productinfo['product_id']) && $productinfo['product_id']) { | |
| 5357 | - $productid = intval($productinfo['product_id']); | |
| 5358 | - $variantid = intval(@$productinfo['variation_id']); | |
| 5359 | - } | |
| 5360 | - if ($productid) return array(array('product_id'=>$productid, 'variation_id'=>$variantid, 'quantity'=>$quantity)); | |
| 5361 | - return array(); | |
| 5362 | - } | |
| 5363 | - // If no productinfo, this will produce an orderspec from the current cart IOK 2020-01-24 | |
| 5364 | - protected function get_orderspec_from_cart () { | |
| 5365 | - $cartitems = WC()->cart->get_cart(); | |
| 5366 | - $orderspec = array(); | |
| 5367 | - foreach($cartitems as $item => $values) { | |
| 5368 | - $orderspec[] = array('product_id'=>$values['product_id'], 'variation_id'=>$values['variation_id'], 'quantity'=>$values['quantity']); | |
| 5369 | - } | |
| 5370 | - return $orderspec; | |
| 5371 | - } | |
| 5372 | - | |
| 5373 | - // Used as a landing page for launching express checkout - borh for the cart and for single products. IOK 2018-09-28 | |
| 5374 | - protected function print_express_checkout_page($execute,$action,$productinfo=null) { | |
| 5375 | - $gw = $this->gateway(); | |
| 5376 | - | |
| 5377 | - $expressCheckoutMessages = array(); | |
| 5378 | - $expressCheckoutMessages['termsAndConditionsError'] = __( 'Please read and accept the terms and conditions to proceed with your order.', 'woocommerce' ); | |
| 5379 | - $expressCheckoutMessages['temporaryError'] = sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()); | |
| 5380 | - $expressCheckoutMessages['successMessage'] = sprintf(__('To the %1$s app!','woo-vipps'), $this->get_payment_method_name()); | |
| 5381 | - | |
| 5382 | - wp_register_script('vipps-express-checkout',plugins_url('js/express-checkout.js',__FILE__),array('jquery','wp-hooks'),filemtime(dirname(__FILE__) . "/js/express-checkout.js"), 'true'); | |
| 5383 | - wp_localize_script('vipps-express-checkout', 'VippsCheckoutMessages', $expressCheckoutMessages); | |
| 5384 | - wp_enqueue_script('vipps-express-checkout'); | |
| 5385 | - // If we have a valid nonce when we get here, just call the 'create order' bit at once. Otherwise, make a button | |
| 5386 | - // to actually perform the express checkout. | |
| 5387 | - $buttonhtml = apply_filters('woo_vipps_express_checkout_button', $this->get_html_button()); | |
| 5388 | - | |
| 5389 | - | |
| 5390 | - | |
| 5391 | - $orderspec = $this->get_orderspec_from_arguments($productinfo); | |
| 5392 | - if (empty($orderspec)) { | |
| 5393 | - $orderspec = $this->get_orderspec_from_cart(); | |
| 5394 | - } | |
| 5395 | - $orderisOK = $this->validate_express_checkout_orderspec($orderspec); | |
| 5396 | - $orderisOK = apply_filters('woo_vipps_validate_express_checkout_orderspec', $orderisOK, $orderspec); | |
| 5397 | - | |
| 5398 | - $askForTerms = function_exists('wc_terms_and_conditions_checkbox_enabled') ? wc_terms_and_conditions_checkbox_enabled() : true; | |
| 5399 | - $askForTerms = $askForTerms && ($gw->get_option('expresscheckout_termscheckbox') == 'yes'); | |
| 5400 | - $askForTerms = apply_filters('woo_vipps_express_checkout_terms_and_conditions_checkbox_enabled', $askForTerms); | |
| 5401 | - | |
| 5402 | - $askForConfirmationHTML = ''; | |
| 5403 | - if (!$orderisOK) { | |
| 5404 | - $header = __("Are you sure?",'woo-vipps'); | |
| 5405 | - $body = __("You recently completed an order with exactly the same products as you are buying now. There should be an email in your inbox from the previous purchase. Are you sure you want to order again?",'woo-vipps'); | |
| 5406 | - $askForConfirmationHTML = apply_filters('woo_vipps_ask_user_to_confirm_repurchase', "<h2 class='confirmVippsExpressCheckoutHeader'>$header</h2><p>$body</p>"); | |
| 5407 | - } | |
| 5408 | - // Should we go directly to checkout, or do we need to stop and ask the user something (for instance?) IOK 2010-01-20 | |
| 5409 | - $execute = $execute && $orderisOK && !$askForTerms; | |
| 5410 | - $execute = apply_filters('woo_vipps_checkout_directly_to_vipps', $execute, $productinfo); | |
| 5411 | - | |
| 5412 | - $content = $this->spinner(); | |
| 5413 | - | |
| 5414 | - // We impersonate the woocommerce-checkout form here mainly to work with the Pixel Your Site plugin IOK 2022-11-24 | |
| 5415 | - // The form data below is sent on order creation; the sec is also used to poll session status | |
| 5416 | - $classlist = apply_filters("woo_vipps_express_checkout_form_classes", "woocommerce-checkout"); | |
| 5417 | - $content .= "<form id='vippsdata' class='" . esc_attr($classlist) . "'>"; | |
| 5418 | - $content .= "<input type='hidden' name='action' value='" . esc_attr($action) ."'>"; | |
| 5419 | - if ($this->gateway()->get_option('vippsorderattribution') == 'yes') { | |
| 5420 | - // This is for the new order attribution feature of woo. IOK 2024-01-09 | |
| 5421 | - $content .= '<input type="hidden" id="vippsorderattribution" value="1" />'; | |
| 5422 | - ob_start(); | |
| 5423 | - do_action( 'woocommerce_after_order_notes'); | |
| 5424 | - $content .= ob_get_clean(); | |
| 5425 | - } | |
| 5426 | - $content .= wp_nonce_field('do_express','sec',1,false); | |
| 5427 | - | |
| 5428 | - $termsHTML = ''; | |
| 5429 | - if ($askForTerms) { | |
| 5430 | - // Include shop terms | |
| 5431 | - ob_start(); | |
| 5432 | - wc_get_template('checkout/terms.php'); | |
| 5433 | - $termsHTML = ob_get_clean(); | |
| 5434 | - $termsHTML = apply_filters('woo_vipps_express_checkout_terms_and_conditions_html',$termsHTML); | |
| 5435 | - } | |
| 5436 | - $termsHTML = apply_filters('woo_vipps_express_checkout_terms_and_conditions_html',$termsHTML); | |
| 5437 | - | |
| 5438 | - if ($productinfo) { | |
| 5439 | - foreach($productinfo as $key=>$value) { | |
| 5440 | - $k = esc_attr($key); | |
| 5441 | - $v = esc_attr($value); | |
| 5442 | - $content .= "<input type='hidden' name='$k' value='$v' />"; | |
| 5443 | - } | |
| 5444 | - } | |
| 5445 | - ob_start(); | |
| 5446 | - $content .= do_action('woo_vipps_express_checkout_orderspec_form', $productinfo); | |
| 5447 | - $content .= ob_get_clean(); | |
| 5448 | - $content .= "</form>"; | |
| 5449 | - | |
| 5450 | - $extraHTML = apply_filters('woo_vipps_express_checkout_final_html', '', $termsHTML,$askForConfirmationHTML); | |
| 5451 | - $pressTheButtonHTML = ""; | |
| 5452 | - if (empty($termsHTML) && empty($askForConfirmationHTML) && empty($extraHTML)) { | |
| 5453 | - $pressTheButtonHTML = "<p id=waiting>" . sprintf(__('Ready for %1$s - press the button', 'woo-vipps'), Vipps::ExpressCheckoutName()) . "</p>"; | |
| 5454 | - } | |
| 5455 | - | |
| 5456 | - if ($execute) { | |
| 5457 | - $content .= "<p id=waiting>" . __("Please wait while we are preparing your order", 'woo-vipps') . "</p>"; | |
| 5458 | - $content .= "<div id='vipps-status-message'></div>"; | |
| 5459 | - $this->fakepage(__('Order in progress','woo-vipps'), $content); | |
| 5460 | - return; | |
| 5461 | - } else { | |
| 5462 | - $content .= $askForConfirmationHTML; | |
| 5463 | - $content .= $extraHTML; | |
| 5464 | - $content .= $termsHTML; | |
| 5465 | - $content .= apply_filters('woo_vipps_express_checkout_validation_elements', ''); | |
| 5466 | - $title = sprintf(__('Buy now with %1$s!', 'woo-vipps'), $this->get_payment_method_name()); | |
| 5467 | - $content .= "<div class='vipps_buy_now_wrapper noloop'><a href='#' id='do-express-checkout' class='vipps-express-checkout' title='$title'>$buttonhtml</a></div>"; | |
| 5468 | - $content .= "<div id='vipps-status-message'></div>"; | |
| 5469 | - $this->fakepage(sprintf(__('%1$s Express Checkout','woo-vipps'), $this->get_payment_method_name()), $content); | |
| 5470 | - return; | |
| 5471 | - } | |
| 5472 | - } | |
| 5473 | - | |
| 5474 | - | |
| 5475 | - | |
| 5476 | - public function vipps_wait_for_payment() { | |
| 5477 | - status_header(200,'OK'); | |
| 5478 | - Vipps::nocache(); | |
| 5479 | - | |
| 5584 | + // Called in template_redirect before we get to the wait-for-payment page IOK 2026-09-21 | |
| 5585 | + private function handle_payment_poll_and_redirect () { | |
| 5480 | 5586 | $orderid = WC()->session->get('_vipps_pending_order'); |
| 5481 | 5587 | |
| 5482 | 5588 | $order = null; |
| 5483 | 5589 | $gw = $this->gateway(); |
| @@ -5491,9 +5597,9 @@ | ||
| 5491 | 5597 | // If so, we will read the order id from the GET arguments and check if the auth token is correct, |
| 5492 | 5598 | // simulating the session with that. |
| 5493 | 5599 | // IOK 2019-11-19, changed to using GET 2023-01-23 |
| 5494 | 5600 | if ($no_session && $limited_session) { |
| 5495 | - $orderid = intval(@$_GET['id']); | |
| 5601 | + $orderid = intval($_GET['id'] ?? false); | |
| 5496 | 5602 | } |
| 5497 | 5603 | if ($orderid) { |
| 5498 | 5604 | clean_post_cache($orderid); |
| 5499 | 5605 | $order = wc_get_order($orderid); |
| @@ -5508,20 +5614,22 @@ | ||
| 5508 | 5614 | $session = WC()->session; |
| 5509 | 5615 | if (!$session->has_session()) { |
| 5510 | 5616 | $session->set_customer_session_cookie(true); |
| 5511 | 5617 | } |
| 5618 | + | |
| 5619 | + $sessionorders= WC()->session->get('_vipps_session_orders'); | |
| 5620 | + $sessionorders[$orderid] = 1; | |
| 5621 | + WC()->session->set('_vipps_session_orders',$sessionorders); | |
| 5512 | 5622 | $session->set('_vipps_pending_order', $orderid); |
| 5623 | + WC()->session->save_data(); | |
| 5513 | 5624 | } |
| 5514 | 5625 | } |
| 5515 | 5626 | |
| 5516 | - | |
| 5517 | - do_action('woo_vipps_wait_for_payment_page',$order); | |
| 5518 | - | |
| 5519 | 5627 | $deleted_order=0; |
| 5520 | 5628 | if ($orderid && !$order) { |
| 5521 | 5629 | // If this happens, we actually did have an order, but it has been deleted, which must mean that it was cancelled. |
| 5522 | 5630 | // Concievably a hook on the 'cancel'-transition or in the callback handlers could clean that up before we get here. IOK 2019-09-26 |
| 5523 | - $this->log(__("In order return: The order %1\$d seems to be deleted", 'woo-vipps'), 'debug'); | |
| 5631 | + $this->log(sprintf(__("In order return: The order %1\$d seems to be deleted", 'woo-vipps'), $orderid), 'debug'); | |
| 5524 | 5632 | $deleted_order=1; |
| 5525 | 5633 | } |
| 5526 | 5634 | |
| 5527 | 5635 | if (!$order && !$deleted_order) wp_die(__('Unknown order', 'woo-vipps')); |
| @@ -5531,12 +5639,13 @@ | ||
| 5531 | 5639 | |
| 5532 | 5640 | // This is for debugging only - set to false to ensure we wait for the callback. IOK 2023-08-04 |
| 5533 | 5641 | $do_poll = true; |
| 5534 | 5642 | |
| 5535 | - // Still pending, no callback. Make a call to the server as the order might not have been created. IOK 2018-05-16 | |
| 5643 | + // Do a single poll here to check and set the order status at Woo using the order status at Vipps IOK 2026-09-29 | |
| 5536 | 5644 | if ($do_poll && $status == 'pending') { |
| 5537 | - // Just in case the callback hasn't come yet, do a quick check of the order status at Vipps. | |
| 5538 | - $newstatus = $gw->callback_check_order_status($order); | |
| 5645 | + // We will do *one* poll before waiting for the callback (for a while, at least.) IOK 2026-09-29 | |
| 5646 | + $newstatus = $gw->poll_and_check_order_status($order); | |
| 5647 | + $this->log(sprintf(__("In order return: Order status of %1\$d is %2\$s", 'woo-vipps'), $orderid, $newstatus), 'info'); | |
| 5539 | 5648 | if ($status != $newstatus) { |
| 5540 | 5649 | $status = $newstatus; |
| 5541 | 5650 | clean_post_cache($orderid); |
| 5542 | 5651 | $order = wc_get_order($orderid); // Reload order object |
| @@ -5541,11 +5650,13 @@ | ||
| 5541 | 5650 | clean_post_cache($orderid); |
| 5542 | 5651 | $order = wc_get_order($orderid); // Reload order object |
| 5543 | 5652 | } |
| 5544 | 5653 | } else { |
| 5545 | - // No need to do anyting here. IOK 2020-01-26 | |
| 5654 | + // No need to do anyting here. IOK 2020-01-26 | |
| 5546 | 5655 | } |
| 5547 | 5656 | |
| 5657 | + // Actually, this may cause a second poll if the first left us pending. Should be rewritten - but *mostly* it will just check | |
| 5658 | + // the payment status at Vipps without polls, which will tell us if the payment succeeded in case people use custom order statuses and so on. IOK 2026-09-29 | |
| 5548 | 5659 | $payment = 'notchecked'; |
| 5549 | 5660 | if ($do_poll) { |
| 5550 | 5661 | $payment = $deleted_order ? 'cancelled' : $gw->check_payment_status($order); |
| 5551 | 5662 | } |
| @@ -5559,9 +5670,8 @@ | ||
| 5559 | 5670 | exit(); |
| 5560 | 5671 | } |
| 5561 | 5672 | |
| 5562 | 5673 | // We are done, but in failure. Don't poll. |
| 5563 | - $content = ""; | |
| 5564 | 5674 | $failure_redirect = apply_filters('woo_vipps_order_failed_redirect', '', $orderid); |
| 5565 | 5675 | |
| 5566 | 5676 | // Status is failed; still send to return url (as of now /order-recieved), the text there will depend on the status. |
| 5567 | 5677 | // For failed it shows a "Retry payment" button that takes the customer to /pay-for-order where it will be retried. LP 2026-03-17 |
| @@ -5569,8 +5679,9 @@ | ||
| 5569 | 5679 | $failure_redirect = $failure_redirect ?: $gw->get_return_url($order); |
| 5570 | 5680 | wp_redirect($failure_redirect); |
| 5571 | 5681 | exit(); |
| 5572 | 5682 | } |
| 5683 | + | |
| 5573 | 5684 | if ($status == 'cancelled' || $payment == 'cancelled') { |
| 5574 | 5685 | $this->maybe_restore_cart($orderid,'failed'); |
| 5575 | 5686 | if ($failure_redirect){ |
| 5576 | 5687 | wp_redirect($failure_redirect); |
| @@ -5575,27 +5686,46 @@ | ||
| 5575 | 5686 | if ($failure_redirect){ |
| 5576 | 5687 | wp_redirect($failure_redirect); |
| 5577 | 5688 | exit(); |
| 5578 | 5689 | } |
| 5690 | + } else { | |
| 5691 | + // If not, enqueue the status checker IOK 2026-09-21 | |
| 5692 | + wp_enqueue_script('check-vipps',plugins_url('js/check-order-status.js',__FILE__),array('jquery','vipps-gw'),filemtime(dirname(__FILE__) . "/js/check-order-status.js"), 'true'); | |
| 5693 | + } | |
| 5694 | + | |
| 5695 | + $this->log(sprintf(__("Order status of %1\$d not ready in order return: payment status %2\$s", 'woo-vipps'), $orderid, $payment), 'info'); | |
| 5696 | + | |
| 5697 | + // Communicate this to the shortcode IOK 2026-09-21 | |
| 5698 | + add_filter('woo_vipps_wait_for_payment_status', function () use($orderid, $status, $payment) { | |
| 5699 | + return ['orderid'=>$orderid, 'status'=>$status, 'payment'=>$payment]; | |
| 5700 | + }); | |
| 5701 | + | |
| 5702 | + } | |
| 5703 | + | |
| 5704 | + public function vipps_wait_for_payment() { | |
| 5705 | + // This will have been computed in template_redirect, but the status will be either still pending or failed. IOK 2026-09-21 | |
| 5706 | + $data = apply_filters('woo_vipps_wait_for_payment_status', []); | |
| 5707 | + | |
| 5708 | + $orderid = $data['orderid'] ?? 0; | |
| 5709 | + $status = $data['status'] ?? ""; | |
| 5710 | + $payment = $data['payment'] ?? ""; | |
| 5711 | + | |
| 5712 | + $order = wc_get_order($orderid); | |
| 5713 | + if (!$order) wp_die(__('Unknown order', 'woo-vipps')); | |
| 5714 | + | |
| 5715 | + do_action('woo_vipps_wait_for_payment_page',$order); | |
| 5716 | + $gw = $this->gateway(); | |
| 5717 | + | |
| 5718 | + $content = ""; | |
| 5719 | + if ($status == 'cancelled' || $payment == 'cancelled') { | |
| 5579 | 5720 | $content .= "<div id=failure><p>". __('Order cancelled','woo-vipps') . '</p>'; |
| 5580 | 5721 | $content .= "<p><a href='" . home_url() . "' class='btn button'>" . __('Continue shopping','woo-vipps') . '</a></p>'; |
| 5581 | 5722 | $content .= "</div>"; |
| 5582 | - $this->fakepage(__('Order cancelled','woo-vipps'), $content); | |
| 5583 | - | |
| 5584 | - return; | |
| 5723 | + return $this->special_page_html('', $content); | |
| 5585 | 5724 | } |
| 5586 | 5725 | |
| 5587 | 5726 | // Still pending and order is supposed to exist, so wait for Vipps. This happens all the time, so logging is removed. IOK 2018-09-27 |
| 5588 | - | |
| 5589 | 5727 | // Otherwise, go to a page waiting/polling for the callback. IOK 2018-05-16 |
| 5590 | - wp_enqueue_script('check-vipps',plugins_url('js/check-order-status.js',__FILE__),array('jquery','vipps-gw'),filemtime(dirname(__FILE__) . "/js/check-order-status.js"), 'true'); | |
| 5591 | - | |
| 5592 | - // Check that order exists and belongs to our session. Can use WC()->session->get() I guess - set the orderid or a hash value in the session | |
| 5593 | - // and check that the order matches (and is 'pending') (and exists) | |
| 5594 | - $vippsstamp = $order->get_meta('_vipps_init_timestamp'); | |
| 5595 | - $vippsstatus = $order->get_meta('_vipps_status'); | |
| 5596 | - $message = __($order->get_meta('_vipps_confirm_message'),'woo-vipps'); | |
| 5597 | - | |
| 5598 | 5728 | $signal = $this->callbackSignal($order); |
| 5599 | 5729 | $content = ""; |
| 5600 | 5730 | $content .= "<div id='waiting'><p>" . sprintf(__('Waiting for confirmation of purchase from %1$s','woo-vipps'), $this->get_payment_method_name()); |
| 5601 | 5731 | |
| @@ -5603,18 +5733,18 @@ | ||
| 5603 | 5733 | $signalurl = $this->callbackSignalURL($signal); |
| 5604 | 5734 | |
| 5605 | 5735 | $content .= "</p></div>"; |
| 5606 | 5736 | |
| 5607 | - // We impersonate the woocommerce-checkout form here mainly to work with the Pixel Your Site plugin IOK 2022-11-24 | |
| 5608 | - $classlist = apply_filters("woo_vipps_express_checkout_form_classes", "woocommerce-checkout"); | |
| 5609 | - $content .= "<form id='vippsdata' class='" . esc_attr($classlist) . "'>"; | |
| 5737 | + $failure_redirect = apply_filters('woo_vipps_order_failed_redirect', '', $orderid); | |
| 5738 | + | |
| 5739 | + // Carry the order status to the checking script IOK 2026-09-21 | |
| 5740 | + $content .= "<form id='vippsdata'>"; | |
| 5610 | 5741 | $content .= "<input type='hidden' id='fkey' name='fkey' value='".htmlspecialchars($signalurl)."'>"; |
| 5611 | 5742 | $content .= "<input type='hidden' name='key' value='".htmlspecialchars($order->get_order_key())."'>"; |
| 5612 | 5743 | $content .= "<input type='hidden' name='action' value='check_order_status'>"; |
| 5613 | - $content .= wp_nonce_field('vippsstatus','sec',1,false); | |
| 5744 | + $content .= wp_nonce_field('vippsstatus','sec',1,false); | |
| 5614 | 5745 | $content .= "</form>"; |
| 5615 | 5746 | |
| 5616 | - | |
| 5617 | 5747 | $content .= "<div id='error' style='display:none'><p>".__('Error during order confirmation','woo-vipps'). '</p>'; |
| 5618 | 5748 | $content .= "<p>" . __('An error occured during order confirmation. The error has been logged. Please contact us to determine the status of your order', 'woo-vipps') . "</p>"; |
| 5619 | 5749 | $content .= "<p><a href='" . home_url() . "' class='btn button'>" . __('Continue shopping','woo-vipps') . '</a></p>'; |
| 5620 | 5750 | $content .= "</div>"; |
| @@ -5628,93 +5758,21 @@ | ||
| 5628 | 5758 | $content .= "<a id='continueToOrderFailed' style='display:none' href='" . $failure_redirect . "'></a>"; |
| 5629 | 5759 | $content .= "<a id='continueToOrderFailedFallback' style='display:none' href='" . $gw->get_return_url($order) . "'></a>"; |
| 5630 | 5760 | $content .= "</div>"; |
| 5631 | 5761 | |
| 5762 | + return $this->special_page_html('', $content); | |
| 5763 | + } | |
| 5632 | 5764 | |
| 5633 | - $this->fakepage(__('Waiting for your order confirmation','woo-vipps'), $content); | |
| 5765 | + // Returns formatted html for the vipps special page. LP 2026-08-27 | |
| 5766 | + public function special_page_html($header, $content) { | |
| 5767 | + $header_html = $header ? "<h2 class='vipps-special-page-title page-title'>$header</h2>" : ''; | |
| 5768 | + $html = <<<EOF | |
| 5769 | + $header_html | |
| 5770 | + <div class="vipps-special-page-content">$content</div> | |
| 5771 | + EOF; | |
| 5772 | + return apply_filters('woo_vipps_special_page_html', $html, $header, $content); | |
| 5634 | 5773 | } |
| 5635 | 5774 | |
| 5636 | - | |
| 5637 | - | |
| 5638 | - public function fakepage($title,$content) { | |
| 5639 | - global $wp, $wp_query; | |
| 5640 | - // We don't want this here. | |
| 5641 | - remove_filter ('the_content', 'wpautop'); | |
| 5642 | - | |
| 5643 | - $specialid = $this->gateway()->get_option('vippsspecialpageid'); | |
| 5644 | - $wp_post = null; | |
| 5645 | - if ($specialid) { | |
| 5646 | - $wp_post = get_post($specialid); | |
| 5647 | - if ($wp_post) { | |
| 5648 | - $wp_post->post_title = $title; | |
| 5649 | - $wp_post->post_content = $content; | |
| 5650 | - // Normalize a bit | |
| 5651 | - $wp_post->filter = 'raw'; // important | |
| 5652 | - $wp_post->post_status = 'publish'; | |
| 5653 | - $wp_post->comment_status= 'closed'; | |
| 5654 | - $wp_post->ping_status= 'closed'; | |
| 5655 | - } else { | |
| 5656 | - $this->log(sprintf(__("Could not use special page with id %s - it seems not to exist.", 'woo-vipps'), $specialid), 'error'); | |
| 5657 | - } | |
| 5658 | - } | |
| 5659 | - if (!$wp_post || is_wp_error($wp_post)) { | |
| 5660 | - $post = new stdClass(); | |
| 5661 | - $post->ID = -99; | |
| 5662 | - $post->post_author = 1; | |
| 5663 | - $post->post_date = current_time( 'mysql' ); | |
| 5664 | - $post->post_date_gmt = current_time( 'mysql', 1 ); | |
| 5665 | - $post->post_title = $title; | |
| 5666 | - $post->post_content = $content; | |
| 5667 | - $post->post_status = 'publish'; | |
| 5668 | - $post->comment_status = 'closed'; | |
| 5669 | - $post->ping_status = 'closed'; | |
| 5670 | - $post->post_name = 'vippsconfirm-fake-page-name'; | |
| 5671 | - $post->post_type = 'page'; | |
| 5672 | - $post->filter = 'raw'; // important | |
| 5673 | - $wp_post = new WP_Post($post); | |
| 5674 | - wp_cache_add( -99, $wp_post, 'posts' ); | |
| 5675 | - } | |
| 5676 | - | |
| 5677 | - // Update the main query | |
| 5678 | - $wp_query->post = $wp_post; | |
| 5679 | - $wp_query->posts = array( $wp_post ); | |
| 5680 | - $wp_query->queried_object = $wp_post; | |
| 5681 | - $wp_query->queried_object_id = $wp_post->ID; | |
| 5682 | - $wp_query->found_posts = 1; | |
| 5683 | - $wp_query->post_count = 1; | |
| 5684 | - $wp_query->max_num_pages = 1; | |
| 5685 | - $wp_query->is_page = true; | |
| 5686 | - $wp_query->is_singular = true; | |
| 5687 | - $wp_query->is_single = false; | |
| 5688 | - $wp_query->is_attachment = false; | |
| 5689 | - $wp_query->is_archive = false; | |
| 5690 | - $wp_query->is_category = false; | |
| 5691 | - $wp_query->is_tag = false; | |
| 5692 | - $wp_query->is_tax = false; | |
| 5693 | - $wp_query->is_author = false; | |
| 5694 | - $wp_query->is_date = false; | |
| 5695 | - $wp_query->is_year = false; | |
| 5696 | - $wp_query->is_month = false; | |
| 5697 | - $wp_query->is_day = false; | |
| 5698 | - $wp_query->is_time = false; | |
| 5699 | - $wp_query->is_search = false; | |
| 5700 | - $wp_query->is_feed = false; | |
| 5701 | - $wp_query->is_comment_feed = false; | |
| 5702 | - $wp_query->is_trackback = false; | |
| 5703 | - $wp_query->is_home = false; | |
| 5704 | - $wp_query->is_embed = false; | |
| 5705 | - $wp_query->is_404 = false; | |
| 5706 | - $wp_query->is_paged = false; | |
| 5707 | - $wp_query->is_admin = false; | |
| 5708 | - $wp_query->is_preview = false; | |
| 5709 | - $wp_query->is_robots = false; | |
| 5710 | - $wp_query->is_posts_page = false; | |
| 5711 | - $wp_query->is_post_type_archive = false; | |
| 5712 | - // Update globals | |
| 5713 | - $GLOBALS['wp_query'] = $wp_query; | |
| 5714 | - $wp->register_globals(); | |
| 5715 | - return $wp_post; | |
| 5716 | - } | |
| 5717 | 5775 | |
| 5718 | 5776 | // Support the interactivity API with data about our cart IOK 2026-02-23 |
| 5719 | 5777 | public function woo_vipps_store_api_cart_data() { |
| 5720 | 5778 | // Reverting the condition with the directive data-wp-bind--hidden does not work, so we need the flipped bool here (hide instead of show). LP 2026-02-10 |
