OS : Linux
PHP Version : 7.4.33
Software : Apache/2.4.6 (CentOS) PHP/7.4.33 '$',
'GBP' => '£',
'JPY' => '¥',
'BRL' => 'R$',
'EUR' => '€',
'NZD' => 'NZ$',
'AUD' => 'A$',
'CAD' => 'C$',
'INR' => '₹',
'ILS' => '₪',
'RUB' => '₽',
'MXN' => 'MX$',
'SEK' => 'Skr',
'HUF' => 'Ft',
'CHF' => 'CHF',
'CZK' => 'Kč',
'DKK' => 'Dkr',
'HKD' => 'HK$',
'NOK' => 'Kr',
'PHP' => '₱',
'PLN' => 'PLN',
'SGD' => 'S$',
'TWD' => 'NT$',
'THB' => '฿',
);
/**
* Constructor.
*/
function __construct() {
parent::__construct(
'jetpack_simple_payments_widget',
/** This filter is documented in modules/widgets/facebook-likebox.php */
apply_filters( 'jetpack_widget_name', __( 'Simple Payments', 'jetpack' ) ),
array(
'classname' => 'jetpack-simple-payments',
'description' => __( 'Add a Simple Payments Button as a Widget.', 'jetpack' ),
'customize_selective_refresh' => true,
)
);
global $pagenow;
if ( is_customize_preview() || 'widgets.php' === $pagenow ) {
add_action( 'admin_enqueue_scripts', array( $this, 'admin_enqueue_styles' ) );
}
$jetpack_simple_payments = Jetpack_Simple_Payments::getInstance();
if ( is_customize_preview() && $jetpack_simple_payments->is_enabled_jetpack_simple_payments() ) {
add_action( 'admin_enqueue_scripts', array( $this, 'admin_enqueue_scripts' ) );
add_filter( 'customize_refresh_nonces', array( $this, 'filter_nonces' ) );
add_action( 'wp_ajax_customize-jetpack-simple-payments-buttons-get', array( $this, 'ajax_get_payment_buttons' ) );
add_action( 'wp_ajax_customize-jetpack-simple-payments-button-save', array( $this, 'ajax_save_payment_button' ) );
add_action( 'wp_ajax_customize-jetpack-simple-payments-button-delete', array( $this, 'ajax_delete_payment_button' ) );
}
if ( is_active_widget( false, false, $this->id_base ) || is_customize_preview() ) {
add_action( 'wp_enqueue_scripts', array( $this, 'enqueue_style' ) );
}
}
/**
* Return an associative array of default values.
*
* These values are used in new widgets.
*
* @return array Default values for the widget options.
*/
private function defaults() {
$current_user = wp_get_current_user();
$default_product_id = $this->get_first_product_id();
return array(
'title' => '',
'product_post_id' => $default_product_id,
'form_action' => '',
'form_product_id' => 0,
'form_product_title' => '',
'form_product_description' => '',
'form_product_image_id' => 0,
'form_product_image_src' => '',
'form_product_currency' => '',
'form_product_price' => '',
'form_product_multiple' => '',
'form_product_email' => $current_user->user_email,
);
}
/**
* Adds a nonce for customizing menus.
*
* @param array $nonces Array of nonces.
* @return array $nonces Modified array of nonces.
*/
function filter_nonces( $nonces ) {
$nonces['customize-jetpack-simple-payments'] = wp_create_nonce( 'customize-jetpack-simple-payments' );
return $nonces;
}
function enqueue_style() {
wp_enqueue_style( 'jetpack-simple-payments-widget-style', plugins_url( 'simple-payments/style.css', __FILE__ ), array(), '20180518' );
}
function admin_enqueue_styles() {
wp_enqueue_style( 'jetpack-simple-payments-widget-customizer', plugins_url( 'simple-payments/customizer.css', __FILE__ ) );
}
function admin_enqueue_scripts() {
wp_enqueue_media();
wp_enqueue_script( 'jetpack-simple-payments-widget-customizer', plugins_url( '/simple-payments/customizer.js', __FILE__ ), array( 'jquery' ), false, true );
wp_localize_script(
'jetpack-simple-payments-widget-customizer', 'jpSimplePaymentsStrings', array(
'deleteConfirmation' => __( 'Are you sure you want to delete this item? It will be disabled and removed from all locations where it currently appears.', 'jetpack' ),
)
);
}
public function ajax_get_payment_buttons() {
if ( ! check_ajax_referer( 'customize-jetpack-simple-payments', 'customize-jetpack-simple-payments-nonce', false ) ) {
wp_send_json_error( 'bad_nonce', 400 );
}
if ( ! current_user_can( 'customize' ) ) {
wp_send_json_error( 'customize_not_allowed', 403 );
}
$post_type_object = get_post_type_object( Jetpack_Simple_Payments::$post_type_product );
if ( ! current_user_can( $post_type_object->cap->create_posts ) || ! current_user_can( $post_type_object->cap->publish_posts ) ) {
wp_send_json_error( 'insufficient_post_permissions', 403 );
}
$product_posts = get_posts(
array(
'numberposts' => 100,
'orderby' => 'date',
'post_type' => Jetpack_Simple_Payments::$post_type_product,
'post_status' => 'publish',
)
);
$formatted_products = array_map( array( $this, 'format_product_post_for_ajax_reponse' ), $product_posts );
wp_send_json_success( $formatted_products );
}
public function format_product_post_for_ajax_reponse( $product_post ) {
return array(
'ID' => $product_post->ID,
'post_title' => $product_post->post_title,
);
}
public function ajax_save_payment_button() {
if ( ! check_ajax_referer( 'customize-jetpack-simple-payments', 'customize-jetpack-simple-payments-nonce', false ) ) {
wp_send_json_error( 'bad_nonce', 400 );
}
if ( ! current_user_can( 'customize' ) ) {
wp_send_json_error( 'customize_not_allowed', 403 );
}
$post_type_object = get_post_type_object( Jetpack_Simple_Payments::$post_type_product );
if ( ! current_user_can( $post_type_object->cap->create_posts ) || ! current_user_can( $post_type_object->cap->publish_posts ) ) {
wp_send_json_error( 'insufficient_post_permissions', 403 );
}
if ( empty( $_POST['params'] ) || ! is_array( $_POST['params'] ) ) {
wp_send_json_error( 'missing_params', 400 );
}
$params = wp_unslash( $_POST['params'] );
$errors = $this->validate_ajax_params( $params );
if ( ! empty( $errors->errors ) ) {
wp_send_json_error( $errors );
}
$product_post_id = isset( $params['product_post_id'] ) ? intval( $params['product_post_id'] ) : 0;
$product_post = array(
'ID' => $product_post_id,
'post_type' => Jetpack_Simple_Payments::$post_type_product,
'post_status' => 'publish',
'post_title' => $params['post_title'],
'post_content' => $params['post_content'],
'_thumbnail_id' => ! empty( $params['image_id'] ) ? $params['image_id'] : -1,
'meta_input' => array(
'spay_currency' => $params['currency'],
'spay_price' => $params['price'],
'spay_multiple' => isset( $params['multiple'] ) ? intval( $params['multiple'] ) : 0,
'spay_email' => is_email( $params['email'] ),
),
);
if ( empty( $product_post_id ) ) {
$product_post_id = wp_insert_post( $product_post );
} else {
$product_post_id = wp_update_post( $product_post );
}
if ( ! $product_post_id || is_wp_error( $product_post_id ) ) {
wp_send_json_error( $product_post_id );
}
$tracks_properties = array(
'id' => $product_post_id,
'currency' => $params['currency'],
'price' => $params['price'],
);
if ( 0 === $product_post['ID'] ) {
$this->record_event( 'created', 'create', $tracks_properties );
} else {
$this->record_event( 'updated', 'update', $tracks_properties );
}
wp_send_json_success(
array(
'product_post_id' => $product_post_id,
'product_post_title' => $params['post_title'],
)
);
}
public function ajax_delete_payment_button() {
if ( ! check_ajax_referer( 'customize-jetpack-simple-payments', 'customize-jetpack-simple-payments-nonce', false ) ) {
wp_send_json_error( 'bad_nonce', 400 );
}
if ( ! current_user_can( 'customize' ) ) {
wp_send_json_error( 'customize_not_allowed', 403 );
}
if ( empty( $_POST['params'] ) || ! is_array( $_POST['params'] ) ) {
wp_send_json_error( 'missing_params', 400 );
}
$params = wp_unslash( $_POST['params'] );
$illegal_params = array_diff( array_keys( $params ), array( 'product_post_id' ) );
if ( ! empty( $illegal_params ) ) {
wp_send_json_error( 'illegal_params', 400 );
}
$product_id = (int) $params['product_post_id'];
$product_post = get_post( $product_id );
$return = array( 'status' => $product_post->post_status );
wp_delete_post( $product_id, true );
$status = get_post_status( $product_id );
if ( false === $status ) {
$return['status'] = 'deleted';
}
$this->record_event( 'deleted', 'delete', array( 'id' => $product_id ) );
wp_send_json_success( $return );
}
/**
* Returns the number of decimal places on string representing a price.
*
* @param string $number Price to check.
* @return number number of decimal places.
*/
private function get_decimal_places( $number ) {
$parts = explode( '.', $number );
if ( count( $parts ) > 2 ) {
return null;
}
return isset( $parts[1] ) ? strlen( $parts[1] ) : 0;
}
public function validate_ajax_params( $params ) {
$errors = new WP_Error();
$illegal_params = array_diff( array_keys( $params ), array( 'product_post_id', 'post_title', 'post_content', 'image_id', 'currency', 'price', 'multiple', 'email' ) );
if ( ! empty( $illegal_params ) ) {
$errors->add( 'illegal_params', __( 'Invalid parameters.', 'jetpack' ) );
}
if ( empty( $params['post_title'] ) ) {
$errors->add( 'post_title', __( "People need to know what they're paying for! Please add a brief title.", 'jetpack' ) );
}
if ( empty( $params['price'] ) || ! is_numeric( $params['price'] ) || floatval( $params['price'] ) <= 0 ) {
$errors->add( 'price', __( 'Everything comes with a price tag these days. Please add a your product price.', 'jetpack' ) );
}
// Japan's Yen is the only supported currency with a zero decimal precision.
$precision = strtoupper( $params['currency'] ) === 'JPY' ? 0 : 2;
$price_decimal_places = $this->get_decimal_places( $params['price'] );
if ( is_null( $price_decimal_places ) || $price_decimal_places > $precision ) {
$errors->add( 'price', __( 'Invalid price', 'jetpack' ) );
}
if ( empty( $params['email'] ) || ! is_email( $params['email'] ) ) {
$errors->add( 'email', __( 'We want to make sure payments reach you, so please add an email address.', 'jetpack' ) );
}
return $errors;
}
function get_first_product_id() {
$product_posts = get_posts(
array(
'numberposts' => 1,
'orderby' => 'date',
'post_type' => Jetpack_Simple_Payments::$post_type_product,
'post_status' => 'publish',
)
);
return ! empty( $product_posts ) ? $product_posts[0]->ID : null;
}
/**
* Front-end display of widget.
*
* @see WP_Widget::widget()
*
* @param array $args Widget arguments.
* @param array $instance Saved values from database.
*/
function widget( $args, $instance ) {
$instance = wp_parse_args( $instance, $this->defaults() );
echo $args['before_widget'];
/** This filter is documented in core/src/wp-includes/default-widgets.php */
$title = apply_filters( 'widget_title', $instance['title'] );
if ( ! empty( $title ) ) {
echo $args['before_title'] . $title . $args['after_title'];
}
echo '