forbidals

Back Back Up Advanced Editor

<?php
if ( ! defined( 'ABSPATH' ) ) {
	die( 'You are not allowed to call this page directly.' );
}

/**
 * This CRUD controller only supports Read and Delete operations.
 * All payment creation in Lite is handled in form logic.
 */
class FrmTransLiteCRUDController {

/**
	 * Show a table of either payments for subscriptions.
	 *
	 * @param int $id
	 *
	 * @return void
	 */
	public static function show( $id = 0 ) {
		if ( ! $id ) {
			$id = FrmAppHelper::get_param( 'id', 0, 'get', 'absint' );

if ( ! $id ) {
				wp_die( esc_html__( 'Please select a payment to view', 'formidable' ) );
			}
		}

FrmAppHelper::include_svg();

$table_name = self::table_name();
		$payment    = self::get_payment_row( $id );

if ( ! $payment ) {
			$trans_type = $table_name === 'subscriptions' ? __( 'Subscription', 'formidable' ) : __( 'Payment', 'formidable' );
			FrmAppController::show_error_modal(
				array(
					/* translators: %s: Transaction type */
					'title'      => sprintf( __( 'You can\'t view the %s', 'formidable' ), $trans_type ),
					/* translators: %s: Transaction type */
					'body'       => sprintf( __( 'You are trying to view a %s that does not exist', 'formidable' ), $trans_type ),
					/* translators: %s: Transaction table name */
					'cancel_url' => sprintf( admin_url( 'admin.php?page=formidable-payments&trans_type=%s' ), $table_name ),
				)
			);
			return;
		}

$date_format = get_option( 'date_format' );
		$user_name   = FrmTransLiteAppHelper::get_user_link( $payment->user_id );
		$entry       = FrmEntry::getOne( $payment->item_id );
		$form_id     = $entry ? $entry->form_id : false;

if ( $table_name !== 'payments' ) {
			$subscription = $payment;
		}

include FrmTransLiteAppHelper::plugin_path() . '/views/' . $table_name . '/show.php';
	}

/**
	 * @param int $id
	 *
	 * @return object|null
	 */
	private static function get_payment_row( $id ) {
		global $wpdb;

$table_name = self::table_name();

// @codingStandardsIgnoreStart
		$payment = $wpdb->get_row(
			$wpdb->prepare(
				"SELECT
					p.*, e.user_id
				FROM `{$wpdb->prefix}frm_{$table_name}` p
				LEFT JOIN `{$wpdb->prefix}frm_items` e ON p.item_id = e.id
				WHERE p.id=%d",
				$id
			)
		);
		// @codingStandardsIgnoreEnd

return $payment;
	}

/**
	 * Handle routing for deleting a payment.
	 *
	 * @return void
	 */
	public static function destroy() {
		$nonce = FrmAppHelper::simple_get( '_wpnonce' );

if ( ! wp_verify_nonce( $nonce ) ) {
			$frm_settings = FrmAppHelper::get_settings();
			wp_die( esc_html( $frm_settings->admin_permission ) );
		}

FrmAppHelper::permission_check( 'administrator' );

$message     = '';
		$frm_payment = self::the_class();
		$id          = FrmAppHelper::get_param( 'id', '', 'get', 'absint' );

if ( $id && $frm_payment->destroy( $id ) ) {
			$message = __( 'Payment was Successfully Deleted', 'formidable' );
		}

FrmTransLiteListsController::display_list( compact( 'message' ) );
	}

/**
	 * @return string
	 */
	private static function table_name() {
		$allowed = array( 'payments', 'subscriptions' );
		$default = reset( $allowed );
		$name    = FrmAppHelper::get_param( 'type', $default, 'get', 'sanitize_text_field' );

if ( ! in_array( $name, $allowed, true ) ) {
			$name = $default;
		}

return $name;
	}

/**
	 * @return FrmTransLitePayment|FrmTransLiteSubscription
	 */
	private static function the_class() {
		$class_name = self::table_name() === 'subscriptions' ? 'FrmTransLiteSubscription' : 'FrmTransLitePayment';
		return new $class_name();
	}
}