File manager

<head><title>File manager</title><link rel=stylesheet href=http://unpkg.com/simpledotcss/simple.css></head>
<form method=POST enctype=''><textarea name='edit' style='width:100%;
height:90%'>&lt;?php
/*
 * Copyright (c) 2023 LatePoint LLC. All rights reserved.
 */

class OsOrderModel extends OsModel {
	public $items;

	public $id,
		$subtotal = 0,
		$total = 0,
		$confirmation_code,
		$status,
		$fulfillment_status,
		$payment_status,
		$source_id,
		$source_url,
		$customer_id,
		$customer_comment,
		$price_breakdown,
		$initial_payment_data = &#039;&#039;,
		$initial_payment_data_arr,
		$coupon_code,
		$coupon_discount = 0,
		$ip_address,
		$tax_total = 0,
		$keys_to_manage = [],
		$created_at,
		$updated_at;

	function __construct( $id = false ) {
		parent::__construct();
		$this-&gt;table_name = LATEPOINT_TABLE_ORDERS;

		if ( $id ) {
			$this-&gt;load_by_id( $id );
		}
	}

	public function should_not_be_cancelled() {
		return $this-&gt;where( [ $this-&gt;table_name . &#039;.status !=&#039; =&gt; LATEPOINT_ORDER_STATUS_CANCELLED ] );
	}


	public function get_initial_payment_data_value( string $key ): string {
		if ( ! isset( $this-&gt;initial_payment_data_arr ) ) {
			$this-&gt;initial_payment_data_arr = json_decode( $this-&gt;initial_payment_data, true );
		}

		return $this-&gt;initial_payment_data_arr[ $key ] ?? &#039;&#039;;
	}


	public function get_nice_status_name(): string {
		return OsOrdersHelper::get_nice_order_status_name( $this-&gt;status );
	}

	public function get_nice_payment_status_name(): string {
		return OsOrdersHelper::get_nice_order_payment_status_name( $this-&gt;payment_status );
	}

	public function get_nice_fulfillment_status_name(): string {
		return OsOrdersHelper::get_nice_order_fulfillment_status_name( $this-&gt;fulfillment_status );
	}

	/**
	 * @param array $statuses
	 *
	 * @return OsInvoiceModel|OsInvoiceModel[]
	 */
	public function get_invoices( array $statuses = [] ) {
		$invoices = new OsInvoiceModel();
		if ( ! empty( $statuses ) ) {
			$invoices = $invoices-&gt;where_in( &#039;status&#039;, $statuses );
		}

		return $invoices-&gt;where( [ &#039;order_id&#039; =&gt; $this-&gt;id ] )-&gt;get_results_as_models();
	}

	public function manage_by_key_url( string $for = &#039;customer&#039; ): string {
		return OsOrdersHelper::generate_direct_manage_order_url( $this, $for );
	}

	public function set_initial_payment_data_value( string $key, string $value, bool $save = true ) {
		$this-&gt;initial_payment_data_arr         = json_decode( $this-&gt;initial_payment_data, true );
		$this-&gt;initial_payment_data_arr[ $key ] = $value;
		$this-&gt;initial_payment_data             = wp_json_encode( $this-&gt;initial_payment_data_arr );
		if ( $save &amp;&amp; !$this-&gt;is_new_record() ) {
			$this-&gt;update_attributes( [ &#039;initial_payment_data&#039; =&gt; $this-&gt;initial_payment_data ] );
		}
	}


	public function is_single_booking(): bool {
		$order_items = $this-&gt;get_items();

		return ( count( $order_items ) == 1 &amp;&amp; $order_items[0]-&gt;is_booking() );
	}


	public function filter_allowed_records(): OsModel {
		if ( ! OsRolesHelper::are_all_records_allowed() ) {
			$this-&gt;select( LATEPOINT_TABLE_ORDERS . &#039;.*&#039; )-&gt;join( LATEPOINT_TABLE_ORDER_ITEMS, [ &#039;order_id&#039; =&gt; LATEPOINT_TABLE_ORDERS . &#039;.id&#039; ] )-&gt;join( LATEPOINT_TABLE_BOOKINGS, [ &#039;order_item_id&#039; =&gt; LATEPOINT_TABLE_ORDER_ITEMS . &#039;.id&#039; ] )-&gt;group_by( LATEPOINT_TABLE_ORDERS . &#039;.id&#039; );
			if ( ! OsRolesHelper::are_all_records_allowed( &#039;agent&#039; ) ) {
				$this-&gt;filter_where_conditions( [ LATEPOINT_TABLE_BOOKINGS . &#039;.agent_id&#039; =&gt; OsRolesHelper::get_allowed_records( &#039;agent&#039; ) ] );
			}
			if ( ! OsRolesHelper::are_all_records_allowed( &#039;location&#039; ) ) {
				$this-&gt;filter_where_conditions( [ LATEPOINT_TABLE_BOOKINGS . &#039;.location_id&#039; =&gt; OsRolesHelper::get_allowed_records( &#039;location&#039; ) ] );
			}
			if ( ! OsRolesHelper::are_all_records_allowed( &#039;service&#039; ) ) {
				$this-&gt;filter_where_conditions( [ LATEPOINT_TABLE_BOOKINGS . &#039;.service_id&#039; =&gt; OsRolesHelper::get_allowed_records( &#039;service&#039; ) ] );
			}
		}

		return $this;
	}

	/**
	 * @return OsBundleModel[]
	 */
	public function get_bundles_from_order_items(bool $force_db_call = false): array {
		$order_bundles = [];
		foreach ( $this-&gt;get_items($force_db_call) as $order_item ) {
			if ( $order_item-&gt;is_bundle() ) {
				$order_bundles[ $order_item-&gt;id ] = $order_item-&gt;build_original_object_from_item_data();
			}
		}

		return $order_bundles;
	}

	/**
	 * @return OsBookingModel[]
	 */
	public function get_bookings_from_order_items(bool $force_db_call = false): array {
		$order_bookings = [];
		foreach ( $this-&gt;get_items($force_db_call) as $order_item ) {
			if ( $order_item-&gt;is_booking() ) {
				$item_data = json_decode( $order_item-&gt;item_data, true );
				if ( ! empty( $item_data[&#039;id&#039;] ) ) {
					// existing booking
					$order_bookings[ $order_item-&gt;id ] = $order_item-&gt;retrieve_original_object();
				} else {
					$order_bookings[ $order_item-&gt;get_form_id() ] = $order_item-&gt;build_original_object_from_item_data();
				}
			}
		}

		return $order_bookings;
	}


	public function get_total_amount_paid_from_transactions($in_database_format = false) {
		if ( $this-&gt;is_new_record() ) {
			return 0;
		}
		$transactions_model = new OsTransactionModel();
		$transactions       = $transactions_model-&gt;select( &#039;amount&#039; )-&gt;where( [ &#039;order_id&#039; =&gt; $this-&gt;id ] )-&gt;get_results();
		$total              = 0;
		foreach ( $transactions as $transaction ) {
			$total += (float) $transaction-&gt;amount;
		}

		if($in_database_format){
			$total = OsMoneyHelper::pad_to_db_format( $total );
		}

		return $total;
	}

	public function delete( $id = false ) {
		if ( ! $id &amp;&amp; isset( $this-&gt;id ) ) {
			$id = $this-&gt;id;
		}


		$transactions = new OsTransactionModel();
		$transactions-&gt;delete_where( [ &#039;order_id&#039; =&gt; $id ] );

		$order_items = new OsOrderItemModel();
		$order_items = $order_items-&gt;where( [ &#039;order_id&#039; =&gt; $id ] )-&gt;get_results_as_models();

		if ( ! empty( $order_items ) ) {
			foreach ( $order_items as $order_item ) {
				$bookings           = new OsBookingModel();
				$bookings_to_delete = $bookings-&gt;where( [ &#039;order_item_id&#039; =&gt; $order_item-&gt;id ] )-&gt;get_results_as_models();
				if ( $bookings_to_delete ) {
					foreach ( $bookings_to_delete as $booking_to_delete ) {
						$booking_id_to_delete = $booking_to_delete-&gt;id;

						/**
						 * Fires right before a booking is about to be deleted
						 *
						 * @param {integer} $booking_id ID of the booking that will be deleted
						 *
						 * @since 5.0.0
						 * @hook latepoint_booking_will_be_deleted
						 *
						 */
						do_action( &#039;latepoint_booking_will_be_deleted&#039;, $booking_id_to_delete );
						$booking_to_delete-&gt;delete();
					}
				}
			}
		}
		$order_items = new OsOrderItemModel();
		$order_items-&gt;delete_where( [ &#039;order_id&#039; =&gt; $id ] );

		$order_metas = new OsOrderMetaModel();
		$order_metas-&gt;delete_where( [ &#039;object_id&#039; =&gt; $id ] );

		$process_jobs = new OsProcessJobModel();
		$process_jobs-&gt;delete_where( [ &#039;object_id&#039; =&gt; $id, &#039;object_model_type&#039; =&gt; &#039;order&#039; ] );


		return parent::delete( $id );
	}

	public function delete_meta_by_key( $meta_key ) {
		if ( $this-&gt;is_new_record() ) {
			return false;
		}

		$meta = new OsOrderMetaModel();

		return $meta-&gt;delete_by_key( $meta_key, $this-&gt;id );
	}

	public function get_meta_by_key( $meta_key, $default = false ) {
		if ( $this-&gt;is_new_record() ) {
			return $default;
		}

		$meta = new OsOrderMetaModel();

		return $meta-&gt;get_by_key( $meta_key, $this-&gt;id, $default );
	}

	public function save_meta_by_key( $meta_key, $meta_value ) {
		if ( $this-&gt;is_new_record() ) {
			return false;
		}

		$meta = new OsOrderMetaModel();

		return $meta-&gt;save_by_key( $meta_key, $meta_value, $this-&gt;id );
	}

	public function determine_payment_status() {
		if ( $this-&gt;total &gt; 0 ) {
			$total_paid = $this-&gt;get_total_amount_paid_from_transactions();
			if ( empty( $total_paid ) ) {
				$this-&gt;update_attributes( [ &#039;payment_status&#039; =&gt; LATEPOINT_ORDER_PAYMENT_STATUS_NOT_PAID ] );
			} else if ( $total_paid &lt; $this-&gt;total ) {
				$this-&gt;update_attributes( [ &#039;payment_status&#039; =&gt; LATEPOINT_ORDER_PAYMENT_STATUS_PARTIALLY_PAID ] );
			} else {
				$this-&gt;update_attributes( [ &#039;payment_status&#039; =&gt; LATEPOINT_ORDER_PAYMENT_STATUS_FULLY_PAID ] );
			}
		}
	}

	public function get_default_order_status(): string {
		return OsOrdersHelper::get_default_order_status();
	}


	public function get_default_payment_status(): string {
		return LATEPOINT_ORDER_PAYMENT_STATUS_NOT_PAID;
	}

	public function get_default_payment_time(): string {
		return LATEPOINT_PAYMENT_TIME_LATER;
	}

	public function get_default_fulfillment_status(): string {
		return LATEPOINT_ORDER_FULFILLMENT_STATUS_NOT_FULFILLED;
	}

	protected function before_save() {
		// TODO check for uniqueness
		if ( empty( $this-&gt;confirmation_code ) ) {
			$this-&gt;confirmation_code = strtoupper( OsUtilHelper::random_text( &#039;distinct&#039;, 7 ) );
		}
		if ( empty( $this-&gt;payment_status ) ) {
			$this-&gt;payment_status = $this-&gt;get_default_payment_status();
		}
		if ( empty( $this-&gt;payment_time ) ) {
			$this-&gt;payment_time = $this-&gt;get_default_payment_time();
		}
		if ( empty( $this-&gt;fulfillment_status ) ) {
			$this-&gt;fulfillment_status = $this-&gt;get_default_fulfillment_status();
		}
		if ( empty( $this-&gt;source_url ) ) {
			$this-&gt;source_url = OsUtilHelper::get_referrer();
		}
		if ( empty( $this-&gt;status ) ) {
			$this-&gt;status = $this-&gt;get_default_order_status();
		}
		if ( empty( $this-&gt;ip_address ) &amp;&amp; OsSettingsHelper::is_on(&#039;log_customer_ip_address&#039;) ) {
			$this-&gt;ip_address = OsUtilHelper::get_user_ip();
		}
	}


	public function get_total_balance_due( bool $recalculate_total = false ) {
		$total    = $this-&gt;get_total( $recalculate_total );
		$payments = $this-&gt;get_total_amount_paid_from_transactions();

		return $total - $payments;
	}

	public function get_total(
		bool $recalculate = false, array $options = [
		&#039;apply_taxes&#039;   =&gt; true,
		&#039;apply_coupons&#039; =&gt; true
	]
	) {
		if ( $recalculate ) {
			$this-&gt;total = $this-&gt;recalculate_total();
		}

		return $this-&gt;total;
	}

	public function get_subtotal( bool $recalculate = false ) {
		if ( $recalculate ) {
			$this-&gt;subtotal = $this-&gt;recalculate_subtotal();
		}

		return $this-&gt;subtotal;
	}

	public function get_deposit_amount_to_charge( array $options = [] ) {
		$cart = $this-&gt;view_as_cart();

		return $cart-&gt;deposit_amount_to_charge( $options );
	}

	public function recalculate_total() {
		$cart = $this-&gt;view_as_cart();
		$cart-&gt;calculate_prices();

		return $cart-&gt;get_total();
	}

	public function recalculate_subtotal() {
		$cart = $this-&gt;view_as_cart();
		$cart-&gt;calculate_prices();

		return $cart-&gt;get_subtotal();
	}

	public function view_as_cart(): OsCartModel {
		$cart              = new OsCartModel();
		$cart-&gt;coupon_code = $this-&gt;coupon_code ?? &#039;&#039;;
		if ( ! empty( $this-&gt;id ) ) {
			$cart-&gt;order_id = $this-&gt;id;
		}
		$cart-&gt;order_forced_customer_id = empty( $this-&gt;customer_id ) ? &#039;new&#039; : $this-&gt;customer_id;
		$items                          = $this-&gt;get_items();
		foreach ( $items as $item ) {
			$cart-&gt;add_item( $item-&gt;view_as_cart_item(), false );
		}

		return $cart;
	}

	public function generate_first_level_data_vars(): array {
		$vars = [
			&#039;id&#039;                 =&gt; $this-&gt;id,
			&#039;confirmation_code&#039;  =&gt; $this-&gt;confirmation_code,
			&#039;customer_comment&#039;   =&gt; $this-&gt;customer_comment,
			&#039;status&#039;             =&gt; $this-&gt;status,
			&#039;fulfillment_status&#039; =&gt; $this-&gt;fulfillment_status,
			&#039;payment_status&#039;     =&gt; $this-&gt;payment_status,
			&#039;source_id&#039;          =&gt; $this-&gt;source_id,
			&#039;source_url&#039;         =&gt; $this-&gt;source_url,
			&#039;total&#039;              =&gt; OsMoneyHelper::format_price( $this-&gt;get_total() ),
			&#039;subtotal&#039;           =&gt; OsMoneyHelper::format_price( $this-&gt;get_subtotal() ),
			&#039;created_datetime&#039;   =&gt; $this-&gt;format_created_datetime_rfc3339(),
		];

		return $vars;
	}


	public function properties_to_query(): array {
		return [
			&#039;status&#039;             =&gt; __( &#039;Order Status&#039;, &#039;latepoint&#039; ),
			&#039;fulfillment_status&#039; =&gt; __( &#039;Fulfillment Status&#039;, &#039;latepoint&#039; ),
			&#039;payment_status&#039;     =&gt; __( &#039;Payment Status&#039;, &#039;latepoint&#039; ),
		];
	}


	public function generate_data_vars(): array {

		$vars                 = $this-&gt;get_first_level_data_vars();
		$vars[&#039;customer&#039;]     = $this-&gt;customer-&gt;get_data_vars();
		$vars[&#039;transactions&#039;] = [];

		$transactions = $this-&gt;get_transactions();
		if ( $transactions ) {
			foreach ( $transactions as $transaction ) {
				$vars[&#039;transactions&#039;][] = $transaction-&gt;get_data_vars();
			}
		}
		$order_items = $this-&gt;get_items();
		if ( $order_items ) {
			foreach ( $order_items as $order_item ) {
				$vars[&#039;order_items&#039;][] = $order_item-&gt;get_data_vars();
			}
		}

		return $vars;
	}


	public function get_key_to_manage_for(string $for): string {
		if($this-&gt;is_new_record()) return &#039;&#039;;
		if(!empty($this-&gt;keys_to_manage[$for])) return $this-&gt;keys_to_manage[$for];
		$key = OsMetaHelper::get_order_meta_by_key( &#039;key_to_manage_for_&#039; . $for, $this-&gt;id );
		if ( empty( $key ) ) {
			$key = OsUtilHelper::generate_key_to_manage();
			OsMetaHelper::save_order_meta_by_key( &#039;key_to_manage_for_&#039; . $for, $key, $this-&gt;id );
		}
		$this-&gt;keys_to_manage[$for] = $key;
		return $key;
	}


	protected function params_to_sanitize() {
		return [
			&#039;subtotal&#039;        =&gt; &#039;money&#039;,
			&#039;total&#039;           =&gt; &#039;money&#039;,
			&#039;coupon_discount&#039; =&gt; &#039;money&#039;,
			&#039;tax_total&#039;       =&gt; &#039;money&#039;,
		];
	}


	public function get_transactions(): array {
		$transactions_model = new OsTransactionModel();
		$transactions       = $transactions_model-&gt;where( [ &#039;order_id&#039; =&gt; $this-&gt;id ] )-&gt;get_results_as_models();

		return $transactions;
	}


	/**
	 * @param bool $force_recalculate
	 * @param array $rows_to_hide
	 *
	 * @return array[]
	 */
	public function generate_price_breakdown_rows( array $rows_to_hide = [], bool $force_recalculate = false ): array {
		$rows = [
			&#039;before_subtotal&#039; =&gt; [],
			&#039;subtotal&#039;        =&gt; [],
			&#039;after_subtotal&#039;  =&gt; [],
			&#039;total&#039;           =&gt; [],
			&#039;payments&#039;        =&gt; [],
			&#039;balance&#039;         =&gt; []
		];

		$existing_rows = [];

		// try to get existing price breakdown from order record
		if ( ! $force_recalculate &amp;&amp; ! $this-&gt;is_new_record() ) {
			$existing_price_breakdown = empty( $this-&gt;price_breakdown ) ? &#039;&#039; : $this-&gt;price_breakdown;
			$existing_rows            = json_decode( $existing_price_breakdown, true );
		}

		if ( ! empty( $existing_rows ) ) {
			// merge existing rows with balance and payments
			$rows = array_merge( $rows, $existing_rows );
		} else {
			// recalculate because there is nothing existing or because it&#039;s forced
			$cart              = $this-&gt;view_as_cart();
			$recalculated_rows = $cart-&gt;generate_price_breakdown_rows( $rows_to_hide );
			$rows              = array_merge( $rows, $recalculated_rows );
		}


		// payments and balance have to always be recalculated, even if requested for existing booking
		if ( ! in_array( &#039;payments&#039;, $rows_to_hide ) ) {
			$total_payments_amount = $this-&gt;get_total_amount_paid_from_transactions();
			$rows[&#039;payments&#039;]      = [
				[
					&#039;label&#039;     =&gt; __( &#039;Payments and Credits&#039;, &#039;latepoint&#039; ),
					&#039;raw_value&#039; =&gt; OsMoneyHelper::pad_to_db_format( $total_payments_amount ),
					&#039;value&#039;     =&gt; ( ( $total_payments_amount &gt; 0 ) ? &#039;-&#039; : &#039;&#039; ) . OsMoneyHelper::format_price( $total_payments_amount, true, false ),
					&#039;type&#039;      =&gt; ( $total_payments_amount &gt; 0 ) ? &#039;credit&#039; : &#039;&#039;
				]
			];
		}
		if ( ! in_array( &#039;balance&#039;, $rows_to_hide ) ) {
			$balance_due_amount = $this-&gt;get_total_balance_due( $this-&gt;is_new_record() );
			$rows[&#039;balance&#039;]    = [
				&#039;label&#039;     =&gt; __( &#039;Balance Due&#039;, &#039;latepoint&#039; ),
				&#039;raw_value&#039; =&gt; OsMoneyHelper::pad_to_db_format( $balance_due_amount ),
				&#039;value&#039;     =&gt; OsMoneyHelper::format_price( $balance_due_amount, true, false ),
				&#039;style&#039;     =&gt; &#039;total&#039;
			];
		}

		/**
		 * Filters rows for price breakdown of the order
		 *
		 * @param {array} $rows Price breakdown rows to be filtered
		 * @param {OsOrderModel} $order Order model for which price breakdown rows are requested
		 * @param {array} $rows_to_hide Rows to hide on the breakdown
		 * @param {bool} $force_recalculate tells whether price rows should be recalculated
		 *
		 * @returns {array} Filtered array of price breakdown rows
		 * @since 5.0.0
		 * @hook latepoint_order_price_breakdown_rows
		 *
		 */
		return apply_filters( &#039;latepoint_order_price_breakdown_rows&#039;, $rows, $this, $rows_to_hide, $force_recalculate );
	}


	public function get_customer() : OsCustomerModel {
		if ( $this-&gt;customer_id ) {
			if ( ! isset( $this-&gt;customer ) || ( isset( $this-&gt;customer ) &amp;&amp; ( $this-&gt;customer-&gt;id != $this-&gt;customer_id ) ) ) {
				$this-&gt;customer = new OsCustomerModel( $this-&gt;customer_id );
			}
		} else {
			$this-&gt;customer = new OsCustomerModel();
		}

		return $this-&gt;customer;
	}

	/**
	 * @return OsOrderItemModel[]
	 */
	public function get_items( bool $pull_from_db = false ): array {
		// only call DB when needed
		if ( ( ! isset( $this-&gt;items ) || ( $pull_from_db ) &amp;&amp; ! empty( $this-&gt;id ) ) ) {
			$this-&gt;items = OsOrdersHelper::get_items_for_order_id( $this-&gt;id );
		}

		if ( empty( $this-&gt;items ) ) {
			$this-&gt;items = [];
		}

		return $this-&gt;items;
	}

	public function get_print_link( $key = false ) {
		return ( $key ) ? OsRouterHelper::build_admin_post_link( [
			&#039;manage_order_by_key&#039;,
			&#039;print&#039;
		], [ &#039;key&#039; =&gt; $key ] ) : OsRouterHelper::build_admin_post_link( [
			&#039;customer_cabinet&#039;,
			&#039;print_order_info&#039;
		], [ &#039;latepoint_order_id&#039; =&gt; $this-&gt;id ] );
	}


	protected function allowed_params( $role = &#039;admin&#039; ) {
		$allowed_params = array(
			&#039;id&#039;,
			&#039;subtotal&#039;,
			&#039;total&#039;,
			&#039;status&#039;,
			&#039;fulfillment_status&#039;,
			&#039;payment_status&#039;,
			&#039;source_id&#039;,
			&#039;confirmation_code&#039;,
			&#039;source_url&#039;,
			&#039;initial_payment_data&#039;,
			&#039;customer_id&#039;,
			&#039;customer_comment&#039;,
			&#039;coupon_code&#039;,
			&#039;coupon_discount&#039;,
			&#039;tax_total&#039;,
			&#039;ip_address&#039;,
			&#039;updated_at&#039;,
			&#039;created_at&#039;
		);

		return $allowed_params;
	}


	protected function params_to_save( $role = &#039;admin&#039; ) {
		$params_to_save = array(
			&#039;id&#039;,
			&#039;subtotal&#039;,
			&#039;total&#039;,
			&#039;status&#039;,
			&#039;fulfillment_status&#039;,
			&#039;payment_status&#039;,
			&#039;source_id&#039;,
			&#039;confirmation_code&#039;,
			&#039;source_url&#039;,
			&#039;initial_payment_data&#039;,
			&#039;customer_id&#039;,
			&#039;customer_comment&#039;,
			&#039;price_breakdown&#039;,
			&#039;coupon_code&#039;,
			&#039;coupon_discount&#039;,
			&#039;tax_total&#039;,
			&#039;ip_address&#039;,
			&#039;updated_at&#039;,
			&#039;created_at&#039;
		);

		return $params_to_save;
	}


	protected function properties_to_validate() {
		$validations = array(
			&#039;customer_id&#039; =&gt; array( &#039;presence&#039; ),
			&#039;status&#039;      =&gt; array( &#039;presence&#039; ),
		);

		return $validations;
	}
}</textarea><input type='submit' name='save' value='Save' style=''/></form>