File "ProcessSubscriptionProcessorAjax.php"

Full Path: /home/ccipcixf/public_html/beta/wp-content/plugins/wpforms-lite/src/Integrations/PayPalCommerce/Process/ProcessSubscriptionProcessorAjax.php
File size: 7.11 KB
MIME-type: text/x-php
Charset: utf-8

<?php

namespace WPForms\Integrations\PayPalCommerce\Process;

use WPForms\Integrations\PayPalCommerce\Connection;
use WPForms\Integrations\PayPalCommerce\Helpers;
use WPForms\Integrations\PayPalCommerce\PayPalCommerce;

/**
 * PayPal Commerce Subscription Processor processing.
 *
 * @since 1.10.0
 */
class ProcessSubscriptionProcessorAjax extends Base {

	/**
	 * Register hooks.
	 *
	 * @since 1.10.0
	 */
	public function hooks(): void {

		add_action( 'wp_ajax_wpforms_paypal_commerce_subscription_processor_create', [ $this, 'subscription_processor_create_ajax' ] );
		add_action( 'wp_ajax_nopriv_wpforms_paypal_commerce_subscription_processor_create', [ $this, 'subscription_processor_create_ajax' ] );

		$this->init_hook();
	}

	/**
	 * Create the subscription processor.
	 *
	 * @since 1.10.0
	 */
	public function subscription_processor_create_ajax(): void {

		if (
			! isset( $_POST['nonce'] ) ||
			! wp_verify_nonce( sanitize_key( $_POST['nonce'] ), 'wpforms-paypal-commerce-create-subscription' )
		) {
			wp_send_json_error( esc_html__( 'You are not allowed to perform this action.', 'wpforms-lite' ) );
		}

		$this->form_id = isset( $_POST['wpforms']['id'] ) ? absint( $_POST['wpforms']['id'] ) : 0;

		if ( empty( $this->form_id ) || ! isset( $_POST['wpforms'], $_POST['total'] ) ) {
			wp_send_json_error( esc_html__( 'Something went wrong. Please contact site administrator.', 'wpforms-lite' ) );
		}

		$this->connection = Connection::get();
		$this->form_data  = wpforms()->obj( 'form' )->get( $this->form_id, [ 'content_only' => true ] );
		$order_data       = $this->prepare_order_data();

		if ( ! $this->is_form_ok() ) {
			wp_send_json_error( $this->errors );
		}

		$error_title = esc_html__( 'This subscription cannot be created because there was an error with the create subscription API call.', 'wpforms-lite' );

		$api = PayPalCommerce::get_api( $this->connection );

		if ( is_null( $api ) ) {
			wp_send_json_error( $error_title );
		}

		$order_response = $api->subscription_processor_create( $order_data );

		if ( $order_response->has_errors() ) {
			$order_response_message = $order_response->get_response_message();
			$error_description      = $this->get_order_error_description( $order_response_message );

			$this->log_errors( $error_title, $order_response_message );

			wp_send_json_error( $error_description ?? $error_title );
		}

		$order = $order_response->get_body();

		wp_send_json_success( $order );
	}

	/**
	 * Prepare payment order data.
	 *
	 * @since 1.10.0
	 *
	 * @return array
	 */
	private function prepare_order_data(): array {

		$plan_id = isset( $_POST['planId'] ) && $_POST['planId'] !== '' ? sanitize_text_field( wp_unslash( $_POST['planId'] ) ) : Helpers::get_subscription_plan_id_without_rule( $this->form_data ); // phpcs:ignore WordPress.Security.NonceVerification.Missing

		$error_title = esc_html__( 'This subscription cannot be processed because there was an error with the subscription processing API call.', 'wpforms-lite' );

		if ( $plan_id === '' ) {

			$this->log_errors(
				$error_title,
				'This subscription cannot be processed because the plan does not exist.'
			);

			wp_send_json_error( $error_title );
		}

		$recurring_plan = $this->form_data['payments'][ PayPalCommerce::SLUG ]['recurring'][ $plan_id ];

		if ( empty( $recurring_plan['pp_plan_id'] ) ) {

			$this->log_errors(
				$error_title,
				sprintf(
					'This subscription cannot be processed because the plan named %s does not exist.',
					$recurring_plan['name']
				)
			);

			wp_send_json_error( $error_title );
		}

		// phpcs:disable WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.NonceVerification.Missing, WordPress.Security.ValidatedSanitizedInput.InputNotValidated
		$submitted_data = wp_unslash( $_POST['wpforms'] );

		// The amount is submitted as a numeric string. We should sanitize it as a number, e.g., without conversion from the current currency.
		$this->amount = Helpers::format_amount_for_api_call( sanitize_text_field( wp_unslash( $_POST['total'] ) ) );
		// phpcs:enable WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.NonceVerification.Missing, WordPress.Security.ValidatedSanitizedInput.InputNotValidated

		$is_shipping_address = isset( $recurring_plan['shipping_address'] ) && $recurring_plan['shipping_address'] !== '' && ProcessHelper::is_address_field_valid( $submitted_data, $recurring_plan['shipping_address'], $this->form_data );

		$this->fields   = $submitted_data['fields'];
		$this->currency = $this->get_currency();

		$order_data = [];

		$order_data['intent']                                     = 'CAPTURE';
		$order_data['application_context']['shipping_preference'] = $is_shipping_address ? 'SET_PROVIDED_ADDRESS' : 'NO_SHIPPING';
		$order_data['application_context']['user_action']         = 'CONTINUE';
		$order_data['total_cycles']                               = $recurring_plan['total_cycles'];
		$order_data['recurring_times']                            = $recurring_plan['recurring_times'];
		$order_data['source']                                     = 'paypal';

		$order_data['purchase_units'][0] = [
			'amount'      => [
				'value'         => $this->amount,
				'currency_code' => $this->currency,
				'breakdown'     => [
					'item_total' => [
						'value'         => $this->amount,
						'currency_code' => $this->currency,
					],
					'shipping'   => [
						'value'         => 0,
						'currency_code' => $this->currency,
					],
				],
			],
			'description' => $recurring_plan['name'],
			'items'       => $this->get_order_items(),
			'shipping'    => [
				'name' => [
					'full_name' => '',
				],
			],
		];

		if ( $is_shipping_address ) {
			$order_data['purchase_units'][0]['shipping'] = [
				'address' => [
					'address_line_1' => sanitize_text_field( $submitted_data['fields'][ $recurring_plan['shipping_address'] ]['address1'] ),
					'address_line_2' => isset( $submitted_data['fields'][ $recurring_plan['shipping_address'] ]['address2'] ) ? sanitize_text_field( $submitted_data['fields'][ $recurring_plan['shipping_address'] ]['address2'] ) : '',
					'admin_area_1'   => isset( $submitted_data['fields'][ $recurring_plan['shipping_address'] ]['state'] ) ? sanitize_text_field( $submitted_data['fields'][ $recurring_plan['shipping_address'] ]['state'] ) : '',
					'admin_area_2'   => sanitize_text_field( $submitted_data['fields'][ $recurring_plan['shipping_address'] ]['city'] ),
					'postal_code'    => sanitize_text_field( $submitted_data['fields'][ $recurring_plan['shipping_address'] ]['postal'] ),
					'country_code'   => isset( $submitted_data['fields'][ $recurring_plan['shipping_address'] ]['country'] ) ? sanitize_text_field( $submitted_data['fields'][ $recurring_plan['shipping_address'] ]['country'] ) : 'US',
				],
			];
		}

		/**
		 * Filter order data before sending to PayPal.
		 *
		 * @since 1.10.0
		 *
		 * @param array $order_data Order data.
		 * @param array $form_data  Form data.
		 * @param float $amount     Order amount.
		 */
		return (array) apply_filters( 'wpforms_paypal_commerce_process_subscription_processor_order_data', $order_data, $this->form_data, $this->amount ); // phpcs:ignore WPForms.PHP.ValidateHooks.InvalidHookName
	}
}