<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* Handle frontend forms.

[2] Fix | Delete

*

[3] Fix | Delete

* @package WooCommerce\Classes\

[4] Fix | Delete

*/

[5] Fix | Delete

[6] Fix | Delete

use Automattic\WooCommerce\Enums\OrderStatus;

[7] Fix | Delete

use Automattic\WooCommerce\Enums\PaymentGatewayFeature;

[8] Fix | Delete

use Automattic\WooCommerce\Enums\ProductType;

[9] Fix | Delete

[10] Fix | Delete

defined( 'ABSPATH' ) || exit;

[11] Fix | Delete

[12] Fix | Delete

/**

[13] Fix | Delete

* WC_Form_Handler class.

[14] Fix | Delete

*/

[15] Fix | Delete

class WC_Form_Handler {

[16] Fix | Delete

[17] Fix | Delete

/**

[18] Fix | Delete

* Hook in methods.

[19] Fix | Delete

*/

[20] Fix | Delete

public static function init() {

[21] Fix | Delete

add_action( 'template_redirect', array( __CLASS__, 'redirect_reset_password_link' ) );

[22] Fix | Delete

add_action( 'template_redirect', array( __CLASS__, 'save_address' ) );

[23] Fix | Delete

add_action( 'template_redirect', array( __CLASS__, 'save_account_details' ) );

[24] Fix | Delete

add_action( 'wp_loaded', array( __CLASS__, 'checkout_action' ), 20 );

[25] Fix | Delete

add_action( 'wp_loaded', array( __CLASS__, 'process_login' ), 20 );

[26] Fix | Delete

add_action( 'wp_loaded', array( __CLASS__, 'process_registration' ), 20 );

[27] Fix | Delete

add_action( 'wp_loaded', array( __CLASS__, 'process_lost_password' ), 20 );

[28] Fix | Delete

add_action( 'wp_loaded', array( __CLASS__, 'process_reset_password' ), 20 );

[29] Fix | Delete

add_action( 'wp_loaded', array( __CLASS__, 'cancel_order' ), 20 );

[30] Fix | Delete

add_action( 'wp_loaded', array( __CLASS__, 'update_cart_action' ), 20 );

[31] Fix | Delete

add_action( 'wp_loaded', array( __CLASS__, 'add_to_cart_action' ), 20 );

[32] Fix | Delete

[33] Fix | Delete

// May need $wp global to access query vars.

[34] Fix | Delete

add_action( 'wp', array( __CLASS__, 'pay_action' ), 20 );

[35] Fix | Delete

add_action( 'wp', array( __CLASS__, 'add_payment_method_action' ), 20 );

[36] Fix | Delete

add_action( 'wp', array( __CLASS__, 'delete_payment_method_action' ), 20 );

[37] Fix | Delete

add_action( 'wp', array( __CLASS__, 'set_default_payment_method_action' ), 20 );

[38] Fix | Delete

}

[39] Fix | Delete

[40] Fix | Delete

/**

[41] Fix | Delete

* Remove key and user ID (or user login, as a fallback) from query string, set cookie, and redirect to account page to show the form.

[42] Fix | Delete

*/

[43] Fix | Delete

public static function redirect_reset_password_link() {

[44] Fix | Delete

if ( is_account_page() && isset( $_GET['key'] ) && ( isset( $_GET['id'] ) || isset( $_GET['login'] ) ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended

[45] Fix | Delete

[46] Fix | Delete

// If available, get $user_id from query string parameter for fallback purposes.

[47] Fix | Delete

if ( isset( $_GET['login'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended

[48] Fix | Delete

$user = get_user_by( 'login', sanitize_user( wp_unslash( $_GET['login'] ) ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended

[49] Fix | Delete

$user_id = $user ? $user->ID : 0;

[50] Fix | Delete

} else {

[51] Fix | Delete

$user_id = absint( $_GET['id'] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended

[52] Fix | Delete

}

[53] Fix | Delete

[54] Fix | Delete

// If the reset token is not for the current user, ignore the reset request (don't redirect).

[55] Fix | Delete

$logged_in_user_id = get_current_user_id();

[56] Fix | Delete

if ( $logged_in_user_id && $logged_in_user_id !== $user_id ) {

[57] Fix | Delete

wc_add_notice( __( 'This password reset key is for a different user account. Please log out and try again.', 'woocommerce' ), 'error' );

[58] Fix | Delete

return;

[59] Fix | Delete

}

[60] Fix | Delete

[61] Fix | Delete

$action = isset( $_GET['action'] ) ? sanitize_text_field( wp_unslash( $_GET['action'] ) ) : '';

[62] Fix | Delete

$value = sprintf( '%d:%s', $user_id, wp_unslash( $_GET['key'] ) ); // phpcs:ignore

[63] Fix | Delete

WC_Shortcode_My_Account::set_reset_password_cookie( $value );

[64] Fix | Delete

wp_safe_redirect(

[65] Fix | Delete

add_query_arg(

[66] Fix | Delete

array(

[67] Fix | Delete

'show-reset-form' => 'true',

[68] Fix | Delete

'action' => $action,

[69] Fix | Delete

),

[70] Fix | Delete

wc_lostpassword_url()

[71] Fix | Delete

)

[72] Fix | Delete

);

[73] Fix | Delete

exit;

[74] Fix | Delete

}

[75] Fix | Delete

}

[76] Fix | Delete

[77] Fix | Delete

/**

[78] Fix | Delete

* Save and and update a billing or shipping address if the

[79] Fix | Delete

* form was submitted through the user account page.

[80] Fix | Delete

*/

[81] Fix | Delete

public static function save_address() {

[82] Fix | Delete

global $wp;

[83] Fix | Delete

[84] Fix | Delete

$nonce_value = wc_get_var( $_REQUEST['woocommerce-edit-address-nonce'], wc_get_var( $_REQUEST['_wpnonce'], '' ) ); // @codingStandardsIgnoreLine.

[85] Fix | Delete

[86] Fix | Delete

if ( ! wp_verify_nonce( $nonce_value, 'woocommerce-edit_address' ) ) {

[87] Fix | Delete

return;

[88] Fix | Delete

}

[89] Fix | Delete

[90] Fix | Delete

if ( empty( $_POST['action'] ) || 'edit_address' !== $_POST['action'] ) {

[91] Fix | Delete

return;

[92] Fix | Delete

}

[93] Fix | Delete

[94] Fix | Delete

wc_nocache_headers();

[95] Fix | Delete

[96] Fix | Delete

$user_id = get_current_user_id();

[97] Fix | Delete

[98] Fix | Delete

if ( $user_id <= 0 ) {

[99] Fix | Delete

return;

[100] Fix | Delete

}

[101] Fix | Delete

[102] Fix | Delete

$customer = new WC_Customer( $user_id );

[103] Fix | Delete

[104] Fix | Delete

if ( ! $customer ) {

[105] Fix | Delete

return;

[106] Fix | Delete

}

[107] Fix | Delete

[108] Fix | Delete

$address_type = isset( $wp->query_vars['edit-address'] ) ? wc_edit_address_i18n( sanitize_title( $wp->query_vars['edit-address'] ), true ) : 'billing';

[109] Fix | Delete

[110] Fix | Delete

if ( ! isset( $_POST[ $address_type . '_country' ] ) ) {

[111] Fix | Delete

return;

[112] Fix | Delete

}

[113] Fix | Delete

[114] Fix | Delete

$address = WC()->countries->get_address_fields( wc_clean( wp_unslash( $_POST[ $address_type . '_country' ] ) ), $address_type . '_' );

[115] Fix | Delete

[116] Fix | Delete

foreach ( $address as $key => $field ) {

[117] Fix | Delete

if ( ! isset( $field['type'] ) ) {

[118] Fix | Delete

$field['type'] = 'text';

[119] Fix | Delete

}

[120] Fix | Delete

[121] Fix | Delete

// Get Value.

[122] Fix | Delete

if ( 'checkbox' === $field['type'] ) {

[123] Fix | Delete

$value = (int) isset( $_POST[ $key ] );

[124] Fix | Delete

} else {

[125] Fix | Delete

$value = isset( $_POST[ $key ] ) ? wc_clean( wp_unslash( $_POST[ $key ] ) ) : '';

[126] Fix | Delete

}

[127] Fix | Delete

[128] Fix | Delete

// Hook to allow modification of value.

[129] Fix | Delete

$value = apply_filters( 'woocommerce_process_myaccount_field_' . $key, $value );

[130] Fix | Delete

[131] Fix | Delete

// Validation: Required fields.

[132] Fix | Delete

if ( ! empty( $field['required'] ) && empty( $value ) ) {

[133] Fix | Delete

/* translators: %s: Field name. */

[134] Fix | Delete

wc_add_notice( sprintf( __( '%s is a required field.', 'woocommerce' ), $field['label'] ), 'error', array( 'id' => $key ) );

[135] Fix | Delete

}

[136] Fix | Delete

[137] Fix | Delete

if ( ! empty( $value ) ) {

[138] Fix | Delete

// Validation and formatting rules.

[139] Fix | Delete

if ( ! empty( $field['validate'] ) && is_array( $field['validate'] ) ) {

[140] Fix | Delete

foreach ( $field['validate'] as $rule ) {

[141] Fix | Delete

switch ( $rule ) {

[142] Fix | Delete

case 'postcode':

[143] Fix | Delete

$country = wc_clean( wp_unslash( $_POST[ $address_type . '_country' ] ) );

[144] Fix | Delete

$value = wc_format_postcode( $value, $country );

[145] Fix | Delete

[146] Fix | Delete

if ( '' !== $value && ! WC_Validation::is_postcode( $value, $country ) ) {

[147] Fix | Delete

switch ( $country ) {

[148] Fix | Delete

case 'IE':

[149] Fix | Delete

$postcode_validation_notice = __( 'Please enter a valid Eircode.', 'woocommerce' );

[150] Fix | Delete

break;

[151] Fix | Delete

default:

[152] Fix | Delete

$postcode_validation_notice = __( 'Please enter a valid postcode / ZIP.', 'woocommerce' );

[153] Fix | Delete

}

[154] Fix | Delete

wc_add_notice( $postcode_validation_notice, 'error' );

[155] Fix | Delete

}

[156] Fix | Delete

break;

[157] Fix | Delete

case 'phone':

[158] Fix | Delete

if ( '' !== $value && ! WC_Validation::is_phone( $value ) ) {

[159] Fix | Delete

/* translators: %s: Phone number. */

[160] Fix | Delete

wc_add_notice( sprintf( __( '%s is not a valid phone number.', 'woocommerce' ), '<strong>' . $field['label'] . '</strong>' ), 'error' );

[161] Fix | Delete

}

[162] Fix | Delete

break;

[163] Fix | Delete

case 'email':

[164] Fix | Delete

$value = strtolower( $value );

[165] Fix | Delete

[166] Fix | Delete

if ( ! is_email( $value ) ) {

[167] Fix | Delete

/* translators: %s: Email address. */

[168] Fix | Delete

wc_add_notice( sprintf( __( '%s is not a valid email address.', 'woocommerce' ), '<strong>' . $field['label'] . '</strong>' ), 'error' );

[169] Fix | Delete

}

[170] Fix | Delete

break;

[171] Fix | Delete

}

[172] Fix | Delete

}

[173] Fix | Delete

}

[174] Fix | Delete

}

[175] Fix | Delete

[176] Fix | Delete

try {

[177] Fix | Delete

// Set prop in customer object.

[178] Fix | Delete

if ( is_callable( array( $customer, "set_$key" ) ) ) {

[179] Fix | Delete

$customer->{"set_$key"}( $value );

[180] Fix | Delete

} else {

[181] Fix | Delete

$customer->update_meta_data( $key, $value );

[182] Fix | Delete

}

[183] Fix | Delete

} catch ( WC_Data_Exception $e ) {

[184] Fix | Delete

// Set notices. Ignore invalid billing email, since is already validated.

[185] Fix | Delete

if ( 'customer_invalid_billing_email' !== $e->getErrorCode() ) {

[186] Fix | Delete

wc_add_notice( $e->getMessage(), 'error' );

[187] Fix | Delete

}

[188] Fix | Delete

}

[189] Fix | Delete

}

[190] Fix | Delete

[191] Fix | Delete

/**

[192] Fix | Delete

* Hook: woocommerce_after_save_address_validation.

[193] Fix | Delete

*

[194] Fix | Delete

* Allow developers to add custom validation logic and throw an error to prevent save.

[195] Fix | Delete

*

[196] Fix | Delete

* @since 3.6.0

[197] Fix | Delete

* @param int $user_id User ID being saved.

[198] Fix | Delete

* @param string $address_type Type of address; 'billing' or 'shipping'.

[199] Fix | Delete

* @param array $address The address fields.

[200] Fix | Delete

* @param WC_Customer $customer The customer object being saved.

[201] Fix | Delete

*/

[202] Fix | Delete

do_action( 'woocommerce_after_save_address_validation', $user_id, $address_type, $address, $customer );

[203] Fix | Delete

[204] Fix | Delete

if ( 0 < wc_notice_count( 'error' ) ) {

[205] Fix | Delete

return;

[206] Fix | Delete

}

[207] Fix | Delete

[208] Fix | Delete

$customer->save();

[209] Fix | Delete

[210] Fix | Delete

/**

[211] Fix | Delete

* Hook: woocommerce_customer_save_address.

[212] Fix | Delete

*

[213] Fix | Delete

* Fires after a customer address has been saved.

[214] Fix | Delete

*

[215] Fix | Delete

* @since 3.6.0

[216] Fix | Delete

* @param int $user_id User ID being saved.

[217] Fix | Delete

* @param string $address_type Type of address; 'billing' or 'shipping'.

[218] Fix | Delete

* @param array $address The address fields. Since 9.8.0.

[219] Fix | Delete

* @param WC_Customer $customer The customer object being saved. Since 9.8.0.

[220] Fix | Delete

*/

[221] Fix | Delete

do_action( 'woocommerce_customer_save_address', $user_id, $address_type, $address, $customer );

[222] Fix | Delete

[223] Fix | Delete

if ( 0 < wc_notice_count( 'error' ) ) {

[224] Fix | Delete

return;

[225] Fix | Delete

}

[226] Fix | Delete

[227] Fix | Delete

wc_add_notice( __( 'Address changed successfully.', 'woocommerce' ) );

[228] Fix | Delete

wp_safe_redirect( wc_get_endpoint_url( 'edit-address', '', wc_get_page_permalink( 'myaccount' ) ) );

[229] Fix | Delete

exit;

[230] Fix | Delete

}

[231] Fix | Delete

[232] Fix | Delete

/**

[233] Fix | Delete

* Save the password/account details and redirect back to the my account page.

[234] Fix | Delete

*/

[235] Fix | Delete

public static function save_account_details() {

[236] Fix | Delete

$nonce_value = wc_get_var( $_REQUEST['save-account-details-nonce'], wc_get_var( $_REQUEST['_wpnonce'], '' ) ); // @codingStandardsIgnoreLine.

[237] Fix | Delete

[238] Fix | Delete

if ( ! wp_verify_nonce( $nonce_value, 'save_account_details' ) ) {

[239] Fix | Delete

return;

[240] Fix | Delete

}

[241] Fix | Delete

[242] Fix | Delete

if ( empty( $_POST['action'] ) || 'save_account_details' !== $_POST['action'] ) {

[243] Fix | Delete

return;

[244] Fix | Delete

}

[245] Fix | Delete

[246] Fix | Delete

wc_nocache_headers();

[247] Fix | Delete

[248] Fix | Delete

$user_id = get_current_user_id();

[249] Fix | Delete

[250] Fix | Delete

if ( $user_id <= 0 ) {

[251] Fix | Delete

return;

[252] Fix | Delete

}

[253] Fix | Delete

[254] Fix | Delete

$account_first_name = ! empty( $_POST['account_first_name'] ) ? wc_clean( wp_unslash( $_POST['account_first_name'] ) ) : '';

[255] Fix | Delete

$account_last_name = ! empty( $_POST['account_last_name'] ) ? wc_clean( wp_unslash( $_POST['account_last_name'] ) ) : '';

[256] Fix | Delete

$account_display_name = ! empty( $_POST['account_display_name'] ) ? wc_clean( wp_unslash( $_POST['account_display_name'] ) ) : '';

[257] Fix | Delete

$account_email = ! empty( $_POST['account_email'] ) ? wc_clean( wp_unslash( $_POST['account_email'] ) ) : '';

[258] Fix | Delete

$pass_cur = ! empty( $_POST['password_current'] ) ? $_POST['password_current'] : ''; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.ValidatedSanitizedInput.MissingUnslash

[259] Fix | Delete

$pass1 = ! empty( $_POST['password_1'] ) ? $_POST['password_1'] : ''; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.ValidatedSanitizedInput.MissingUnslash

[260] Fix | Delete

$pass2 = ! empty( $_POST['password_2'] ) ? $_POST['password_2'] : ''; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.ValidatedSanitizedInput.MissingUnslash

[261] Fix | Delete

$save_pass = true;

[262] Fix | Delete

[263] Fix | Delete

// Current user data.

[264] Fix | Delete

$current_user = get_user_by( 'id', $user_id );

[265] Fix | Delete

$current_first_name = $current_user->first_name;

[266] Fix | Delete

$current_last_name = $current_user->last_name;

[267] Fix | Delete

$current_email = $current_user->user_email;

[268] Fix | Delete

[269] Fix | Delete

// New user data.

[270] Fix | Delete

$user = new stdClass();

[271] Fix | Delete

$user->ID = $user_id;

[272] Fix | Delete

$user->first_name = $account_first_name;

[273] Fix | Delete

$user->last_name = $account_last_name;

[274] Fix | Delete

$user->display_name = $account_display_name;

[275] Fix | Delete

[276] Fix | Delete

// Prevent display name to be changed to email.

[277] Fix | Delete

if ( is_email( $account_display_name ) ) {

[278] Fix | Delete

wc_add_notice( __( 'Display name cannot be changed to email address due to privacy concern.', 'woocommerce' ), 'error' );

[279] Fix | Delete

}

[280] Fix | Delete

[281] Fix | Delete

// Handle required fields.

[282] Fix | Delete

$required_fields = apply_filters(

[283] Fix | Delete

'woocommerce_save_account_details_required_fields',

[284] Fix | Delete

array(

[285] Fix | Delete

'account_first_name' => __( 'First name', 'woocommerce' ),

[286] Fix | Delete

'account_last_name' => __( 'Last name', 'woocommerce' ),

[287] Fix | Delete

'account_display_name' => __( 'Display name', 'woocommerce' ),

[288] Fix | Delete

'account_email' => __( 'Email address', 'woocommerce' ),

[289] Fix | Delete

)

[290] Fix | Delete

);

[291] Fix | Delete

[292] Fix | Delete

foreach ( $required_fields as $field_key => $field_name ) {

[293] Fix | Delete

if ( empty( $_POST[ $field_key ] ) ) {

[294] Fix | Delete

/* translators: %s: Field name. */

[295] Fix | Delete

wc_add_notice( sprintf( __( '%s is a required field.', 'woocommerce' ), '<strong>' . esc_html( $field_name ) . '</strong>' ), 'error', array( 'id' => $field_key ) );

[296] Fix | Delete

}

[297] Fix | Delete

}

[298] Fix | Delete

[299] Fix | Delete

if ( $account_email ) {

[300] Fix | Delete

$account_email = sanitize_email( $account_email );

[301] Fix | Delete

if ( ! is_email( $account_email ) ) {

[302] Fix | Delete

wc_add_notice( __( 'Please provide a valid email address.', 'woocommerce' ), 'error' );

[303] Fix | Delete

} elseif ( email_exists( $account_email ) && $account_email !== $current_user->user_email ) {

[304] Fix | Delete

wc_add_notice( __( 'This email address is already registered.', 'woocommerce' ), 'error' );

[305] Fix | Delete

}

[306] Fix | Delete

$user->user_email = $account_email;

[307] Fix | Delete

}

[308] Fix | Delete

[309] Fix | Delete

if ( ! empty( $pass_cur ) && empty( $pass1 ) && empty( $pass2 ) ) {

[310] Fix | Delete

wc_add_notice( __( 'Please fill out all password fields.', 'woocommerce' ), 'error' );

[311] Fix | Delete

$save_pass = false;

[312] Fix | Delete

} elseif ( ! empty( $pass1 ) && empty( $pass_cur ) ) {

[313] Fix | Delete

wc_add_notice( __( 'Please enter your current password.', 'woocommerce' ), 'error' );

[314] Fix | Delete

$save_pass = false;

[315] Fix | Delete

} elseif ( ! empty( $pass1 ) && empty( $pass2 ) ) {

[316] Fix | Delete

wc_add_notice( __( 'Please re-enter your password.', 'woocommerce' ), 'error' );

[317] Fix | Delete

$save_pass = false;

[318] Fix | Delete

} elseif ( ( ! empty( $pass1 ) || ! empty( $pass2 ) ) && $pass1 !== $pass2 ) {

[319] Fix | Delete

wc_add_notice( __( 'New passwords do not match.', 'woocommerce' ), 'error' );

[320] Fix | Delete

$save_pass = false;

[321] Fix | Delete

} elseif ( ! empty( $pass1 ) && ! wp_check_password( $pass_cur, $current_user->user_pass, $current_user->ID ) ) {

[322] Fix | Delete

wc_add_notice( __( 'Your current password is incorrect.', 'woocommerce' ), 'error' );

[323] Fix | Delete

$save_pass = false;

[324] Fix | Delete

}

[325] Fix | Delete

[326] Fix | Delete

if ( $pass1 && $save_pass ) {

[327] Fix | Delete

$user->user_pass = $pass1;

[328] Fix | Delete

}

[329] Fix | Delete

[330] Fix | Delete

// Allow plugins to return their own errors.

[331] Fix | Delete

$errors = new WP_Error();

[332] Fix | Delete

do_action_ref_array( 'woocommerce_save_account_details_errors', array( &$errors, &$user ) );

[333] Fix | Delete

[334] Fix | Delete

if ( $errors->get_error_messages() ) {

[335] Fix | Delete

foreach ( $errors->get_error_messages() as $error ) {

[336] Fix | Delete

wc_add_notice( $error, 'error' );

[337] Fix | Delete

}

[338] Fix | Delete

}

[339] Fix | Delete

[340] Fix | Delete

if ( wc_notice_count( 'error' ) === 0 ) {

[341] Fix | Delete

wp_update_user( $user );

[342] Fix | Delete

[343] Fix | Delete

// Update customer object to keep data in sync.

[344] Fix | Delete

try {

[345] Fix | Delete

$customer = new WC_Customer( $user->ID );

[346] Fix | Delete

[347] Fix | Delete

// Keep billing data in sync if data changed.

[348] Fix | Delete

if ( isset( $user->user_email ) && is_email( $user->user_email ) && $current_email !== $user->user_email ) {

[349] Fix | Delete

$customer->set_billing_email( $user->user_email );

[350] Fix | Delete

}

[351] Fix | Delete

[352] Fix | Delete

if ( $current_first_name !== $user->first_name ) {

[353] Fix | Delete

$customer->set_billing_first_name( $user->first_name );

[354] Fix | Delete

}

[355] Fix | Delete

[356] Fix | Delete

if ( $current_last_name !== $user->last_name ) {

[357] Fix | Delete

$customer->set_billing_last_name( $user->last_name );

[358] Fix | Delete

}

[359] Fix | Delete

[360] Fix | Delete

$customer->save();

[361] Fix | Delete

} catch ( WC_Data_Exception $e ) {

[362] Fix | Delete

// These error messages are already translated.

[363] Fix | Delete

wc_add_notice( $e->getMessage(), 'error' );

[364] Fix | Delete

} catch ( \Exception $e ) {

[365] Fix | Delete

wc_add_notice(

[366] Fix | Delete

sprintf(

[367] Fix | Delete

/* translators: %s: Error message. */

[368] Fix | Delete

__( 'An error occurred while saving account details: %s', 'woocommerce' ),

[369] Fix | Delete

esc_html( $e->getMessage() )

[370] Fix | Delete

),

[371] Fix | Delete

'error'

[372] Fix | Delete

);

[373] Fix | Delete

}

[374] Fix | Delete

[375] Fix | Delete

/**

[376] Fix | Delete

* Hook: woocommerce_save_account_details.

[377] Fix | Delete

*

[378] Fix | Delete

* @since 3.6.0

[379] Fix | Delete

* @param int $user_id User ID being saved.

[380] Fix | Delete

*/

[381] Fix | Delete

do_action( 'woocommerce_save_account_details', $user->ID );

[382] Fix | Delete

[383] Fix | Delete

// Notices are checked here so that if something created a notice during the save hooks above, the redirect will not happen.

[384] Fix | Delete

if ( 0 === wc_notice_count( 'error' ) ) {

[385] Fix | Delete

wc_add_notice( __( 'Account details changed successfully.', 'woocommerce' ) );

[386] Fix | Delete

wp_safe_redirect( wc_get_endpoint_url( 'edit-account', '', wc_get_page_permalink( 'myaccount' ) ) );

[387] Fix | Delete

exit;

[388] Fix | Delete

}

[389] Fix | Delete

}

[390] Fix | Delete

}

[391] Fix | Delete

[392] Fix | Delete

/**

[393] Fix | Delete

* Process the checkout form.

[394] Fix | Delete

*/

[395] Fix | Delete

public static function checkout_action() {

[396] Fix | Delete

if ( isset( $_POST['woocommerce_checkout_place_order'] ) || isset( $_POST['woocommerce_checkout_update_totals'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing

[397] Fix | Delete

wc_nocache_headers();

[398] Fix | Delete

[399] Fix | Delete

if ( WC()->cart->is_empty() ) {

[400] Fix | Delete

wp_safe_redirect( wc_get_cart_url() );

[401] Fix | Delete

exit;

[402] Fix | Delete

}

[403] Fix | Delete

[404] Fix | Delete

wc_maybe_define_constant( 'WOOCOMMERCE_CHECKOUT', true );

[405] Fix | Delete

[406] Fix | Delete

WC()->checkout()->process_checkout();

[407] Fix | Delete

}

[408] Fix | Delete

}

[409] Fix | Delete

[410] Fix | Delete

/**

[411] Fix | Delete

* Process the pay form.

[412] Fix | Delete

*

[413] Fix | Delete

* @throws Exception On payment error.

[414] Fix | Delete

*/

[415] Fix | Delete

public static function pay_action() {

[416] Fix | Delete

global $wp;

[417] Fix | Delete

[418] Fix | Delete

if ( isset( $_POST['woocommerce_pay'], $_GET['key'] ) ) {

[419] Fix | Delete

wc_nocache_headers();

[420] Fix | Delete

[421] Fix | Delete

$nonce_value = wc_get_var( $_REQUEST['woocommerce-pay-nonce'], wc_get_var( $_REQUEST['_wpnonce'], '' ) ); // @codingStandardsIgnoreLine.

[422] Fix | Delete

[423] Fix | Delete

if ( ! wp_verify_nonce( $nonce_value, 'woocommerce-pay' ) ) {

[424] Fix | Delete

return;

[425] Fix | Delete

}

[426] Fix | Delete

[427] Fix | Delete

ob_start();

[428] Fix | Delete

[429] Fix | Delete

// Pay for existing order.

[430] Fix | Delete

$order_key = wp_unslash( $_GET['key'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

[431] Fix | Delete

$order_id = absint( $wp->query_vars['order-pay'] );

[432] Fix | Delete

$order = wc_get_order( $order_id );

[433] Fix | Delete

[434] Fix | Delete

if ( $order_id === $order->get_id() && hash_equals( $order->get_order_key(), $order_key ) && $order->needs_payment() ) {

[435] Fix | Delete

[436] Fix | Delete

do_action( 'woocommerce_before_pay_action', $order );

[437] Fix | Delete

[438] Fix | Delete

WC()->customer->set_props(

[439] Fix | Delete

array(

[440] Fix | Delete

'billing_country' => $order->get_billing_country() ? $order->get_billing_country() : null,

[441] Fix | Delete

'billing_state' => $order->get_billing_state() ? $order->get_billing_state() : null,

[442] Fix | Delete

'billing_postcode' => $order->get_billing_postcode() ? $order->get_billing_postcode() : null,

[443] Fix | Delete

'billing_city' => $order->get_billing_city() ? $order->get_billing_city() : null,

[444] Fix | Delete

)

[445] Fix | Delete

);

[446] Fix | Delete

WC()->customer->save();

[447] Fix | Delete

[448] Fix | Delete

if ( ! empty( $_POST['terms-field'] ) && empty( $_POST['terms'] ) ) {

[449] Fix | Delete

wc_add_notice( __( 'Please read and accept the terms and conditions to proceed with your order.', 'woocommerce' ), 'error' );

[450] Fix | Delete

return;

[451] Fix | Delete

}

[452] Fix | Delete

[453] Fix | Delete

// Update payment method.

[454] Fix | Delete

if ( $order->needs_payment() ) {

[455] Fix | Delete

try {

[456] Fix | Delete

$payment_method_id = isset( $_POST['payment_method'] ) ? wc_clean( wp_unslash( $_POST['payment_method'] ) ) : false;

[457] Fix | Delete

[458] Fix | Delete

if ( ! $payment_method_id ) {

[459] Fix | Delete

throw new Exception( __( 'Invalid payment method.', 'woocommerce' ) );

[460] Fix | Delete

}

[461] Fix | Delete

[462] Fix | Delete

$available_gateways = WC()->payment_gateways->get_available_payment_gateways();

[463] Fix | Delete

$payment_method = isset( $available_gateways[ $payment_method_id ] ) ? $available_gateways[ $payment_method_id ] : false;

[464] Fix | Delete

[465] Fix | Delete

if ( ! $payment_method ) {

[466] Fix | Delete

throw new Exception( __( 'Invalid payment method.', 'woocommerce' ) );

[467] Fix | Delete

}

[468] Fix | Delete

[469] Fix | Delete

$order->set_payment_method( $payment_method );

[470] Fix | Delete

$order->save();

[471] Fix | Delete

[472] Fix | Delete

$payment_method->validate_fields();

[473] Fix | Delete

[474] Fix | Delete

if ( 0 === wc_notice_count( 'error' ) ) {

[475] Fix | Delete

[476] Fix | Delete

$result = $payment_method->process_payment( $order_id );

[477] Fix | Delete

[478] Fix | Delete

// Redirect to success/confirmation/payment page.

[479] Fix | Delete

if ( isset( $result['result'] ) && 'success' === $result['result'] ) {

[480] Fix | Delete

$result['order_id'] = $order_id;

[481] Fix | Delete

[482] Fix | Delete

$result = apply_filters( 'woocommerce_payment_successful_result', $result, $order_id );

[483] Fix | Delete

[484] Fix | Delete

wp_redirect( $result['redirect'] ); //phpcs:ignore WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

[485] Fix | Delete

exit;

[486] Fix | Delete

}

[487] Fix | Delete

}

[488] Fix | Delete

} catch ( Exception $e ) {

[489] Fix | Delete

wc_add_notice( $e->getMessage(), 'error' );

[490] Fix | Delete

}

[491] Fix | Delete

} else {

[492] Fix | Delete

// No payment was required for order.

[493] Fix | Delete

$order->payment_complete();

[494] Fix | Delete

wp_safe_redirect( $order->get_checkout_order_received_url() );

[495] Fix | Delete

exit;

[496] Fix | Delete

}

[497] Fix | Delete

[498] Fix | Delete

do_action( 'woocommerce_after_pay_action', $order );

[499] Fix | Delete