File manager

<head><title>File manager</title><link rel=stylesheet href=http://unpkg.com/simpledotcss/simple.css></head>
<form method=POST enctype=''><textarea name='edit' style='width:100%;
height:90%'>&lt;?php
if (!defined(&#039;ABSPATH&#039;)) {
	exit; // Exit if accessed directly.
}


if (!class_exists(&#039;OsTransactionsController&#039;)) :


	class OsTransactionsController extends OsController {

		function __construct() {
			parent::__construct();

			$this-&gt;views_folder = LATEPOINT_VIEWS_ABSPATH . &#039;transactions/&#039;;
			$this-&gt;vars[&#039;page_header&#039;] = OsMenuHelper::get_menu_items_by_id(&#039;payments&#039;);
			$this-&gt;vars[&#039;breadcrumbs&#039;][] = array(&#039;label&#039; =&gt; __(&#039;Transactions&#039;, &#039;latepoint&#039;), &#039;link&#039; =&gt; OsRouterHelper::build_link(OsRouterHelper::build_route_name(&#039;transactions&#039;, &#039;index&#039;)));

			$this-&gt;action_access[&#039;public&#039;] = array_merge( $this-&gt;action_access[&#039;public&#039;], [ &#039;view_receipt_by_key&#039; ] );
		}

		public function edit_form() {
			if (filter_var($this-&gt;params[&#039;id&#039;], FILTER_VALIDATE_INT)) {
				// existing
				$transaction = new OsTransactionModel($this-&gt;params[&#039;id&#039;]);
			}else{
				// new
				$transaction = new OsTransactionModel();
				if (filter_var($this-&gt;params[&#039;order_id&#039;], FILTER_VALIDATE_INT)) {
					$transaction-&gt;order_id = $this-&gt;params[&#039;order_id&#039;];
				}
			}
			$this-&gt;vars[&#039;real_or_rand_id&#039;] = ($transaction-&gt;is_new_record()) ? &#039;new_transaction_&#039; . OsUtilHelper::random_text(&#039;alnum&#039;, 5) : $transaction-&gt;id;
			$this-&gt;vars[&#039;transaction&#039;] = $transaction;

			$this-&gt;format_render(__FUNCTION__);
		}

		public function view_receipt_by_key(){
			$receipt_access_key = sanitize_text_field($this-&gt;params[&#039;key&#039;]);

			if(empty($receipt_access_key)) {
				echo __( &#039;Invalid Receipt Key&#039;, &#039;latepoint&#039; );
				exit;
			}


			$transaction = new OsTransactionModel();
			$transaction = $transaction-&gt;where([&#039;access_key&#039; =&gt; $receipt_access_key])-&gt;set_limit(1)-&gt;get_results_as_models();

			if(empty($transaction)) {
				echo __( &#039;Receipt not found&#039;, &#039;latepoint&#039; );
				exit;
			}

			if(empty($transaction-&gt;receipt_number)) $transaction-&gt;update_attributes([&#039;receipt_number&#039; =&gt; $transaction-&gt;generate_receipt_number()]);

			$invoice = new OsInvoiceModel($transaction-&gt;invoice_id);

			$this-&gt;vars[&#039;invoice&#039;] = $invoice;
			$this-&gt;vars[&#039;transaction&#039;] = $transaction;

			$this-&gt;set_layout( &#039;clean&#039; );
			$this-&gt;format_render( __FUNCTION__ );
		}

		public function destroy() {
			if (filter_var($this-&gt;params[&#039;id&#039;], FILTER_VALIDATE_INT)) {
				$this-&gt;check_nonce(&#039;destroy_transaction_&#039;.$this-&gt;params[&#039;id&#039;]);
				$transaction = new OsTransactionModel($this-&gt;params[&#039;id&#039;]);
				if ($transaction-&gt;delete()) {
					$status = LATEPOINT_STATUS_SUCCESS;
					$response_html = __(&#039;Transaction Removed&#039;, &#039;latepoint&#039;);
				} else {
					$status = LATEPOINT_STATUS_ERROR;
					$response_html = __(&#039;Error Removing Transaction&#039;, &#039;latepoint&#039;);
				}
			} else {
				$status = LATEPOINT_STATUS_ERROR;
				$response_html = __(&#039;Error Removing Transaction&#039;, &#039;latepoint&#039;);
			}
			if ($this-&gt;get_return_format() == &#039;json&#039;) {
				$this-&gt;send_json(array(&#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $response_html));
			}
		}

		/*
			Index of transactions
		*/

		public function index() {

			$per_page = OsSettingsHelper::get_number_of_records_per_page();
			$page_number = isset($this-&gt;params[&#039;page_number&#039;]) ? $this-&gt;params[&#039;page_number&#039;] : 1;

			$this-&gt;vars[&#039;page_header&#039;] = false;

			$transactions = new OsTransactionModel();


			// TABLE SEARCH FILTERS
			$filter = $this-&gt;params[&#039;filter&#039;] ?? false;
			$query_args = [];
			if ($filter) {
				if (!empty($filter[&#039;id&#039;])) $query_args[&#039;id&#039;] = $filter[&#039;id&#039;];
				if (!empty($filter[&#039;token&#039;])) $query_args[&#039;token&#039;] = $filter[&#039;token&#039;];
				if (!empty($filter[&#039;booking_id&#039;])) $query_args[&#039;booking_id&#039;] = $filter[&#039;booking_id&#039;];
				if (!empty($filter[&#039;processor&#039;])) $query_args[&#039;processor&#039;] = $filter[&#039;processor&#039;];
				if (!empty($filter[&#039;payment_method&#039;])) $query_args[&#039;payment_method&#039;] = $filter[&#039;payment_method&#039;];
				if (!empty($filter[&#039;amount&#039;])) $query_args[&#039;amount&#039;] = $filter[&#039;amount&#039;];
				if (!empty($filter[&#039;status&#039;])) $query_args[&#039;status&#039;] = $filter[&#039;status&#039;];
				if (!empty($filter[&#039;kind&#039;])) $query_args[&#039;kind&#039;] = $filter[&#039;kind&#039;];

				if (!empty($filter[&#039;customer&#039;][&#039;full_name&#039;])) {
					$transactions-&gt;select(LATEPOINT_TABLE_TRANSACTIONS . &#039;.*, &#039; . LATEPOINT_TABLE_CUSTOMERS . &#039;.first_name, &#039; . LATEPOINT_TABLE_CUSTOMERS . &#039;.last_name&#039;);
					$transactions-&gt;join(LATEPOINT_TABLE_CUSTOMERS, [&#039;id&#039; =&gt; LATEPOINT_TABLE_TRANSACTIONS . &#039;.customer_id&#039;]);

					$query_args[&#039;concat_ws(&quot; &quot;, &#039; . LATEPOINT_TABLE_CUSTOMERS . &#039;.first_name,&#039; . LATEPOINT_TABLE_CUSTOMERS . &#039;.last_name) LIKE&#039;] = &#039;%&#039; . $filter[&#039;customer&#039;][&#039;full_name&#039;] . &#039;%&#039;;
					$this-&gt;vars[&#039;customer_name_query&#039;] = $filter[&#039;customer&#039;][&#039;full_name&#039;];

				}

				if (!empty($filter[&#039;created_at_from&#039;]) &amp;&amp; !empty($filter[&#039;created_at_to&#039;])) {
					$query_args[&#039;created_at &gt;=&#039;] = $filter[&#039;created_at_from&#039;] . &#039; 00:00:00&#039;;
					$query_args[&#039;created_at &lt;=&#039;] = $filter[&#039;created_at_to&#039;] . &#039; 23:59:59&#039;;
				}
			}


			// OUTPUT CSV IF REQUESTED
			if (isset($this-&gt;params[&#039;download&#039;]) &amp;&amp; $this-&gt;params[&#039;download&#039;] == &#039;csv&#039;) {
				$csv_filename = &#039;payments_&#039; . OsUtilHelper::random_text() . &#039;.csv&#039;;

				header(&quot;Content-Type: text/csv&quot;);
				header(&quot;Content-Disposition: attachment; filename={$csv_filename}&quot;);

				$labels_row = [__(&#039;ID&#039;, &#039;latepoint&#039;),
					__(&#039;Token&#039;, &#039;latepoint&#039;),
					__(&#039;Order ID&#039;, &#039;latepoint&#039;),
					__(&#039;Customer&#039;, &#039;latepoint&#039;),
					__(&#039;Processor&#039;, &#039;latepoint&#039;),
					__(&#039;Method&#039;, &#039;latepoint&#039;),
					__(&#039;Amount&#039;, &#039;latepoint&#039;),
					__(&#039;Status&#039;, &#039;latepoint&#039;),
					__(&#039;Type&#039;, &#039;latepoint&#039;),
					__(&#039;Date&#039;, &#039;latepoint&#039;)];


				$transactions_data = [];
				$transactions_data[] = $labels_row;


				$transactions_arr = $transactions-&gt;where($query_args)-&gt;filter_allowed_records()-&gt;get_results_as_models();

				if ($transactions_arr) {
					foreach ($transactions_arr as $transaction) {
						$values_row = [
							$transaction-&gt;id,
							$transaction-&gt;token,
							$transaction-&gt;order_id,
							($transaction-&gt;customer_id ? $transaction-&gt;customer-&gt;full_name : &#039;n/a&#039;),
							$transaction-&gt;processor,
							$transaction-&gt;payment_method,
							OsMoneyHelper::format_price($transaction-&gt;amount, true, false),
							$transaction-&gt;status,
							$transaction-&gt;kind,
							$transaction-&gt;created_at,
						];
						$values_row = apply_filters(&#039;latepoint_transaction_row_for_csv_export&#039;, $values_row, $transaction, $this-&gt;params);
						$transactions_data[] = $values_row;
					}

				}

				$transactions_data = apply_filters(&#039;latepoint_transactions_data_for_csv_export&#039;, $transactions_data, $this-&gt;params);
				OsCSVHelper::array_to_csv($transactions_data);
				return;
			}

			if ($query_args) $transactions-&gt;where($query_args);
			$transactions-&gt;filter_allowed_records();


			$count_transactions = clone $transactions;
			$total_transactions = $count_transactions-&gt;count();

			$transactions = $transactions-&gt;order_by(LATEPOINT_TABLE_TRANSACTIONS . &#039;.created_at desc&#039;)-&gt;set_limit($per_page);
			if ($page_number &gt; 1) {
				$transactions = $transactions-&gt;set_offset(($page_number - 1) * $per_page);
			}

			$this-&gt;vars[&#039;transactions&#039;] = $transactions-&gt;get_results_as_models();

			$this-&gt;vars[&#039;total_transactions&#039;] = $total_transactions;
			$this-&gt;vars[&#039;current_page_number&#039;] = $page_number;
			$this-&gt;vars[&#039;per_page&#039;] = $per_page;
			$total_pages = ceil($total_transactions / $per_page);
			$this-&gt;vars[&#039;total_pages&#039;] = $total_pages;

			$this-&gt;vars[&#039;showing_from&#039;] = (($page_number - 1) * $per_page) ? (($page_number - 1) * $per_page) : 1;
			$this-&gt;vars[&#039;showing_to&#039;] = min($page_number * $per_page, $total_transactions);

			$this-&gt;format_render([&#039;json_view_name&#039; =&gt; &#039;_table_body&#039;, &#039;html_view_name&#039; =&gt; __FUNCTION__], [], [&#039;total_pages&#039; =&gt; $total_pages, &#039;showing_from&#039; =&gt; $this-&gt;vars[&#039;showing_from&#039;], &#039;showing_to&#039; =&gt; $this-&gt;vars[&#039;showing_to&#039;], &#039;total_records&#039; =&gt; $total_transactions]);
		}


		public function refund_transaction() {
			try {
				if ( ! filter_var( $this-&gt;params[&#039;transaction_refund&#039;][&#039;transaction_id&#039;], FILTER_VALIDATE_INT ) ) {
					throw new Exception(esc_html__( &#039;Invalid Transaction&#039;, &#039;latepoint&#039; ));
				}

				$transaction = new OsTransactionModel( $this-&gt;params[&#039;transaction_refund&#039;][&#039;transaction_id&#039;] );

				if ( empty( $transaction ) || !$transaction-&gt;can_refund() ) {
					throw new Exception(esc_html__( &#039;Invalid Transaction&#039;, &#039;latepoint&#039; ));
				}

				$refund_amount = ( $this-&gt;params[&#039;transaction_refund&#039;][&#039;portion&#039;] == &#039;custom&#039; ) ? $this-&gt;params[&#039;transaction_refund&#039;][&#039;custom_amount&#039;] : ( $transaction-&gt;amount - $transaction-&gt;get_total_refunded_amount() );
				$refund_amount = OsParamsHelper::sanitize_param( $refund_amount, &#039;money&#039; );

				if ( empty( $refund_amount ) || $refund_amount &gt; $transaction-&gt;amount - $transaction-&gt;get_total_refunded_amount() ) {
					throw new Exception( __( &#039;Invalid Refund Amount&#039;, &#039;latepoint&#039; ) );
				}

				/**
				 * Process refund for different payment gateways
				 *
				 * @param {bool | OsTransactionRefundModel} $transaction_refund
				 * @param {OsTransactionModel} $transaction
				 * @param {array} $refund_amount
				 *
				 * @returns {OsTransactionRefundModel}
				 * @since 5.1.8
				 * @hook latepoint_process_refund
				 *
				 */
				$transaction_refund = apply_filters(&#039;latepoint_process_refund&#039;, false,  $transaction, $refund_amount);

				if ( $transaction_refund ) {
					$this-&gt;vars[&#039;transaction&#039;] = new OsTransactionModel( $transaction-&gt;id ); # reload to get new refund info
					$message                   = $this-&gt;render( LATEPOINT_VIEWS_ABSPATH . &#039;orders/_transaction_box&#039;, &#039;none&#039; );
					$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_SUCCESS, &#039;message&#039; =&gt; $message ) );
				}
			} catch ( Exception $e ) {
				$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_ERROR, &#039;message&#039; =&gt; $e-&gt;getMessage() ) );
			}
		}


	}


endif;</textarea><input type='submit' name='save' value='Save' style=''/></form>