--- a/wc-multivendor-marketplace/controllers/refund/wcfmmp-controller-refund-requests-form.php
+++ b/wc-multivendor-marketplace/controllers/refund/wcfmmp-controller-refund-requests-form.php
@@ -1,4 +1,5 @@
<?php
+
/**
* WCFM plugin controllers
*
@@ -10,193 +11,221 @@
*/
class WCFMmp_Refund_Requests_Form_Controller {
-
+
public function __construct() {
global $WCFM, $WCFMmp;
-
+
$this->processing();
}
-
+
public function processing() {
global $WCFM, $WCFMmp, $wpdb;
-
+
+ if (!check_ajax_referer('wcfm_ajax_nonce', 'wcfm_ajax_nonce', false)) {
+ wp_send_json_error(esc_html__('Invalid nonce! Refresh your page and try again.', 'wc-frontend-manager'));
+ }
+
$wcfm_refund_tab_form_data = array();
- parse_str($_POST['wcfm_refund_requests_form'], $wcfm_refund_tab_form_data);
-
- $wcfm_refund_messages = get_wcfm_refund_requests_messages();
- $has_error = false;
-
- // Google reCaptcha support
- if ( function_exists( 'gglcptch_init' ) ) {
- if(isset($wcfm_refund_tab_form_data['g-recaptcha-response']) && !empty($wcfm_refund_tab_form_data['g-recaptcha-response'])) {
+ parse_str($_POST['wcfm_refund_requests_form'], $wcfm_refund_tab_form_data);
+
+ $wcfm_refund_messages = get_wcfm_refund_requests_messages();
+ $has_error = false;
+
+ // Google reCaptcha support
+ if (function_exists('gglcptch_init')) {
+ if (isset($wcfm_refund_tab_form_data['g-recaptcha-response']) && !empty($wcfm_refund_tab_form_data['g-recaptcha-response'])) {
$_POST['g-recaptcha-response'] = $wcfm_refund_tab_form_data['g-recaptcha-response'];
}
- $check_result = apply_filters( 'gglcptch_verify_recaptcha', true, 'string', 'wcfm_refund_request_form' );
- if ( true === $check_result ) {
- /* do necessary action */
- } else {
+ $check_result = apply_filters('gglcptch_verify_recaptcha', true, 'string', 'wcfm_refund_request_form');
+ if (true === $check_result) {
+ /* do necessary action */
+ } else {
echo '{"status": false, "message": "' . $check_result . '"}';
die;
}
- } elseif ( class_exists( 'anr_captcha_class' ) && function_exists( 'anr_captcha_form_field' ) ) {
- $check_result = anr_verify_captcha( $wcfm_refund_tab_form_data['g-recaptcha-response'] );
- if ( true === $check_result ) {
- /* do necessary action */
- } else {
- echo '{"status": false, "message": "' . __( 'Captcha failed, please try again.', 'wc-frontend-manager' ) . '"}';
+ } elseif (class_exists('anr_captcha_class') && function_exists('anr_captcha_form_field')) {
+ $check_result = anr_verify_captcha($wcfm_refund_tab_form_data['g-recaptcha-response']);
+ if (true === $check_result) {
+ /* do necessary action */
+ } else {
+ echo '{"status": false, "message": "' . __('Captcha failed, please try again.', 'wc-frontend-manager') . '"}';
die;
}
}
-
- if(isset($wcfm_refund_tab_form_data['wcfm_refund_reason']) && !empty($wcfm_refund_tab_form_data['wcfm_refund_reason'])) {
-
- $refund_reason = strip_tags( wcfm_stripe_newline( $wcfm_refund_tab_form_data['wcfm_refund_reason'] ) );
- $refund_reason = wp_filter_post_kses( wp_unslash( $refund_reason ) );
- $order_id = absint( $wcfm_refund_tab_form_data['wcfm_refund_order_id'] );
- $refund_request = wc_clean( $wcfm_refund_tab_form_data['wcfm_refund_request'] );
- $wcfm_refund_inputs = wc_clean( $wcfm_refund_tab_form_data['wcfm_refund_input'] );
- $wcfm_refund_tax_inputs = isset( $wcfm_refund_tab_form_data['wcfm_refund_tax_input'] ) ? wc_clean( $wcfm_refund_tab_form_data['wcfm_refund_tax_input'] ) : array();
- $refund_status = 'pending';
-
- //if( ( $refund_request == 'partial' ) && !$refunded_amount ) {
- //echo '{"status": false, "message": "' . __( 'Refund should be a positive integer.', 'wc-multivendor-marketplace' ) . '"}';
- //die;
- //}
-
- $refund_request_processed = false;
-
- $order = wc_get_order( $order_id );
-
- foreach( $wcfm_refund_inputs as $wcfm_refund_input_id => $wcfm_refund_input ) {
-
- $refund_item_id = absint( $wcfm_refund_input['item'] );
-
- if( !$refund_item_id ) continue;
-
- $line_item = new WC_Order_Item_Product( $refund_item_id );
-
- $product_id = $line_item->get_product_id();
- $vendor_id = wcfm_get_vendor_id_by_post( $product_id );
- $item_total = $line_item->get_total();
-
- $old_refunded_amount = $order->get_total_refunded_for_item( $refund_item_id );
- $old_refunded_qty = $order->get_qty_refunded_for_item( $refund_item_id );
- if( $old_refunded_qty ) $old_refunded_qty = ( $old_refunded_qty * -1 );
-
- $refunded_tax = array();
-
- if( $refund_request == 'full' ) {
- $refunded_qty = ( $line_item->get_quantity() - $old_refunded_qty );
- $refunded_amount = $item_total - (float)$old_refunded_amount;
-
- // Adding Item Tax to Refund Amount
- if ( wc_tax_enabled() ) {
+
+ if (isset($wcfm_refund_tab_form_data['wcfm_refund_reason']) && !empty($wcfm_refund_tab_form_data['wcfm_refund_reason'])) {
+
+ $order_id = absint($wcfm_refund_tab_form_data['wcfm_refund_order_id']);
+ $order = wc_get_order($order_id);
+ if ( ! $order ) {
+ echo '{"status": false, "message": "' . __( 'Invalid Order.', 'wc-multivendor-marketplace' ) . '"}';
+ die;
+ }
+
+ $current_user_id = get_current_user_id();
+ $is_order_customer = ( $order->get_customer_id() == $current_user_id );
+ $current_vendor_id = wcfm_is_vendor() ? (int) apply_filters( 'wcfm_current_vendor_id', $current_user_id ) : 0;
+
+ $can_refund_as_customer = $is_order_customer && apply_filters('wcfm_is_allow_customer_refund', true);
+ $can_refund_as_vendor = $current_vendor_id && apply_filters('wcfm_is_allow_refund_requests', true);
+
+ if ( ! $can_refund_as_customer && ! $can_refund_as_vendor ) {
+ echo '{"status": false, "message": "' . __( 'You do not have permission to request a refund for this order.', 'wc-multivendor-marketplace' ) . '"}';
+ die;
+ }
+
+ $order_status = sanitize_title($order->get_status());
+ $disabled_statuses = apply_filters('wcfm_refund_disable_order_status', array('failed', 'cancelled', 'refunded', 'pending', 'on-hold', 'request', 'proposal', 'proposal-sent', 'proposal-expired', 'proposal-rejected', 'proposal-canceled', 'proposal-accepted'));
+
+ if ( in_array($order_status, $disabled_statuses) ) {
+ echo '{"status": false, "message": "' . __( 'Refund requests are not allowed for this order status.', 'wc-multivendor-marketplace' ) . '"}';
+ die;
+ }
+
+ $refund_reason = strip_tags(wcfm_stripe_newline($wcfm_refund_tab_form_data['wcfm_refund_reason']));
+ $refund_reason = wp_filter_post_kses(wp_unslash($refund_reason));
+ $refund_request = wc_clean($wcfm_refund_tab_form_data['wcfm_refund_request']);
+ $wcfm_refund_inputs = wc_clean($wcfm_refund_tab_form_data['wcfm_refund_input']);
+ $wcfm_refund_tax_inputs = isset($wcfm_refund_tab_form_data['wcfm_refund_tax_input']) ? wc_clean($wcfm_refund_tab_form_data['wcfm_refund_tax_input']) : array();
+ $refund_status = 'pending';
+
+ $refund_request_processed = false;
+
+ foreach ($wcfm_refund_inputs as $wcfm_refund_input_id => $wcfm_refund_input) {
+
+ $refund_item_id = absint($wcfm_refund_input['item']);
+
+ if (!$refund_item_id) continue;
+
+ $line_item = new WC_Order_Item_Product($refund_item_id);
+
+ $product_id = $line_item->get_product_id();
+ $vendor_id = wcfm_get_vendor_id_by_post($product_id);
+
+ if ( $can_refund_as_vendor && ! $can_refund_as_customer && (int) $vendor_id !== (int) $current_vendor_id) {
+ continue; // Skip items not belonging to this vendor
+ }
+
+ $item_total = $line_item->get_total();
+
+ $old_refunded_amount = $order->get_total_refunded_for_item($refund_item_id);
+ $old_refunded_qty = $order->get_qty_refunded_for_item($refund_item_id);
+ if ($old_refunded_qty) $old_refunded_qty = ($old_refunded_qty * -1);
+
+ $refunded_tax = array();
+
+ if ($refund_request == 'full') {
+ $refunded_qty = ($line_item->get_quantity() - $old_refunded_qty);
+ $refunded_amount = $item_total - (float)$old_refunded_amount;
+
+ // Adding Item Tax to Refund Amount
+ if (wc_tax_enabled()) {
$refunded_tax = $line_item->get_taxes();
- if( !empty( $refunded_tax ) && is_array( $refunded_tax ) ) {
- if( isset( $refunded_tax['total'] ) ) {
+ if (!empty($refunded_tax) && is_array($refunded_tax)) {
+ if (isset($refunded_tax['total'])) {
$refunded_tax = $refunded_tax['total'];
}
- if( !empty( $refunded_tax ) && is_array( $refunded_tax ) ) {
- foreach( $refunded_tax as $refund_tax_id => $refund_tax_price ) {
- $old_refunded_tax = $order->get_tax_refunded_for_item( $refund_item_id, $refund_tax_id );
+ if (!empty($refunded_tax) && is_array($refunded_tax)) {
+ foreach ($refunded_tax as $refund_tax_id => $refund_tax_price) {
+ $old_refunded_tax = $order->get_tax_refunded_for_item($refund_item_id, $refund_tax_id);
$refunded_tax[$refund_tax_id] = (float) $refund_tax_price - (float) $old_refunded_tax;
//$refunded_amount += (float) $refund_tax_price;
}
}
}
}
- } else {
- $refunded_qty = absint( $wcfm_refund_input['qty'] );
- $refunded_amount = (float) $wcfm_refund_input['total'];
-
- if( (float)$refunded_amount > ((float)$item_total - (float)$old_refunded_amount) ) {
+ } else {
+ $refunded_qty = absint($wcfm_refund_input['qty']);
+ $refunded_amount = (float) $wcfm_refund_input['total'];
+
+ if ((float)$refunded_amount > ((float)$item_total - (float)$old_refunded_amount)) {
echo '{"status": false, "message": "' . __('Refund request amount more than item value.', 'wc-multivendor-marketplace') . '"}';
die;
}
-
+
// Adding Item Tax to Refund Amount
- if ( wc_tax_enabled() ) {
- $refunded_tax = isset( $wcfm_refund_tax_inputs[$refund_item_id] ) ? $wcfm_refund_tax_inputs[$refund_item_id] : array();
- $refunded_tax_amt = 0;
- if( $refunded_tax && is_array( $refunded_tax ) && !empty( $refunded_tax ) ) {
- foreach( $refunded_tax as $tax_item_id => $tax_item_cost ) {
+ if (wc_tax_enabled()) {
+ $refunded_tax = isset($wcfm_refund_tax_inputs[$refund_item_id]) ? $wcfm_refund_tax_inputs[$refund_item_id] : array();
+ $refunded_tax_amt = 0;
+ if ($refunded_tax && is_array($refunded_tax) && !empty($refunded_tax)) {
+ foreach ($refunded_tax as $tax_item_id => $tax_item_cost) {
$refunded_tax_amt += (float)$tax_item_cost;
}
}
-
+
$actual_tax = $line_item->get_taxes();
- $actual_tax_amount = 0;
- if( !empty( $actual_tax ) && is_array( $actual_tax ) ) {
- if( isset( $actual_tax['total'] ) ) {
+ $actual_tax_amount = 0;
+ if (!empty($actual_tax) && is_array($actual_tax)) {
+ if (isset($actual_tax['total'])) {
$actual_tax = $actual_tax['total'];
}
- if( !empty( $actual_tax ) && is_array( $actual_tax ) ) {
- foreach( $actual_tax as $actual_tax_id => $actual_tax_price ) {
+ if (!empty($actual_tax) && is_array($actual_tax)) {
+ foreach ($actual_tax as $actual_tax_id => $actual_tax_price) {
$actual_tax_amount += (float) $actual_tax_price;
- $old_refunded_tax = $order->get_tax_refunded_for_item( $refund_item_id, $actual_tax_id );
+ $old_refunded_tax = $order->get_tax_refunded_for_item($refund_item_id, $actual_tax_id);
$actual_tax_amount -= (float) $old_refunded_tax;
}
}
}
-
- if( (float)$refunded_tax_amt > (float)$actual_tax_amount ) {
+
+ if ((float)$refunded_tax_amt > (float)$actual_tax_amount) {
echo '{"status": false, "message": "' . __('Refund request tax amount more than item actual tax value.', 'wc-multivendor-marketplace') . '"}';
die;
}
-
+
//$refunded_amount += (float)$refunded_tax_amt;
}
- }
-
- if( !$refunded_qty && !$refunded_amount ) continue;
-
+ }
+
+ if (!$refunded_qty && !$refunded_amount) continue;
+
$sql = 'SELECT ID FROM ' . $wpdb->prefix . 'wcfm_marketplace_orders AS commission';
$sql .= ' WHERE 1=1';
$sql .= " AND `order_id` = %d";
$sql .= " AND `item_id` = %d";
- $commission_id = $wpdb->get_var( $wpdb->prepare( $sql, $order_id, $refund_item_id ) );
-
- $refund_request_id = $WCFMmp->wcfmmp_refund->wcfmmp_refund_processed( $vendor_id, $order_id, $commission_id, $refund_item_id, $refund_reason, $refunded_amount, $refunded_qty, $refunded_tax, $refund_request );
-
- if( $refund_request_id && !is_wp_error( $refund_request_id ) ) {
-
+ $commission_id = $wpdb->get_var($wpdb->prepare($sql, $order_id, $refund_item_id));
+
+ $refund_request_id = $WCFMmp->wcfmmp_refund->wcfmmp_refund_processed($vendor_id, $order_id, $commission_id, $refund_item_id, $refund_reason, $refunded_amount, $refunded_qty, $refunded_tax, $refund_request);
+
+ if ($refund_request_id && !is_wp_error($refund_request_id)) {
+
// Update Commissions Table Refund Status
- if( $commission_id ) {
+ if ($commission_id) {
$wpdb->update("{$wpdb->prefix}wcfm_marketplace_orders", array('refund_status' => 'requested'), array('ID' => $commission_id), array('%s'), array('%d'));
}
-
- $refund_auto_approve = isset( $WCFMmp->wcfmmp_refund_options['refund_auto_approve'] ) ? $WCFMmp->wcfmmp_refund_options['refund_auto_approve'] : 'no';
+
+ $refund_auto_approve = isset($WCFMmp->wcfmmp_refund_options['refund_auto_approve']) ? $WCFMmp->wcfmmp_refund_options['refund_auto_approve'] : 'no';
$wcfm_messages = '';
$raw_message = '';
- if( ( $refund_auto_approve == 'yes' ) && $vendor_id && wcfm_is_vendor() ) {
+ if (($refund_auto_approve == 'yes') && $vendor_id && wcfm_is_vendor()) {
$WCFMmp->refund_processed = false;
-
+
// Update refund status
- $refund_update_status = $WCFMmp->wcfmmp_refund->wcfmmp_refund_status_update_by_refund( $refund_request_id );
-
- if( $refund_update_status ) {
+ $refund_update_status = $WCFMmp->wcfmmp_refund->wcfmmp_refund_status_update_by_refund($refund_request_id);
+
+ if ($refund_update_status) {
// Admin Notification
- if( $refund_request == 'full' ) {
- if( !$refund_request_processed )
- $wcfm_messages = sprintf( __( 'Refund <b>%s</b> has been processed for Order <b>%s</b> by <b>%s</b>', 'wc-multivendor-marketplace' ), '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg( 'request_id', $refund_request_id, wcfm_refund_requests_url() ) . '">#' . $refund_request_id . '</a>', '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url( $order_id ) . '">#' . $order->get_order_number() . '</a>', wcfm_get_vendor_store( $vendor_id ) );
-
- $raw_message = [
- 'l10n' => [
- 'text' => 'Refund <b>%s</b> has been processed for Order <b>%s</b> by <b>%s</b>',
- 'domain' => 'wc-multivendor-marketplace',
- 'wrapper' => [
- 'function' => 'sprintf',
- 'args' => [
- '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg( 'request_id', $refund_request_id, wcfm_refund_requests_url() ) . '">#' . $refund_request_id . '</a>',
- '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url( $order_id ) . '">#' . $order->get_order_number() . '</a>',
- wcfm_get_vendor_store( $vendor_id )
- ]
+ if ($refund_request == 'full') {
+ if (!$refund_request_processed)
+ $wcfm_messages = sprintf(__('Refund <b>%s</b> has been processed for Order <b>%s</b> by <b>%s</b>', 'wc-multivendor-marketplace'), '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg('request_id', $refund_request_id, wcfm_refund_requests_url()) . '">#' . $refund_request_id . '</a>', '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url($order_id) . '">#' . $order->get_order_number() . '</a>', wcfm_get_vendor_store($vendor_id));
+
+ $raw_message = [
+ 'l10n' => [
+ 'text' => 'Refund <b>%s</b> has been processed for Order <b>%s</b> by <b>%s</b>',
+ 'domain' => 'wc-multivendor-marketplace',
+ 'wrapper' => [
+ 'function' => 'sprintf',
+ 'args' => [
+ '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg('request_id', $refund_request_id, wcfm_refund_requests_url()) . '">#' . $refund_request_id . '</a>',
+ '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url($order_id) . '">#' . $order->get_order_number() . '</a>',
+ wcfm_get_vendor_store($vendor_id)
]
]
- ];
+ ]
+ ];
} else {
- $wcfm_messages = sprintf( __( 'Refund <b>%s</b> has been processed for Order <b>%s</b> item <b>%s</b> by <b>%s</b>', 'wc-multivendor-marketplace' ), '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg( 'request_id', $refund_request_id, wcfm_refund_requests_url() ) . '">#' . $refund_request_id . '</a>', '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url( $order_id ) . '">#' . $order->get_order_number() . '</a>', get_the_title( $product_id ), wcfm_get_vendor_store( $vendor_id ) );
+ $wcfm_messages = sprintf(__('Refund <b>%s</b> has been processed for Order <b>%s</b> item <b>%s</b> by <b>%s</b>', 'wc-multivendor-marketplace'), '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg('request_id', $refund_request_id, wcfm_refund_requests_url()) . '">#' . $refund_request_id . '</a>', '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url($order_id) . '">#' . $order->get_order_number() . '</a>', get_the_title($product_id), wcfm_get_vendor_store($vendor_id));
$raw_message = [
'l10n' => [
@@ -205,69 +234,69 @@
'wrapper' => [
'function' => 'sprintf',
'args' => [
- '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg( 'request_id', $refund_request_id, wcfm_refund_requests_url() ) . '">#' . $refund_request_id . '</a>',
- '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url( $order_id ) . '">#' . $order->get_order_number() . '</a>',
- get_the_title( $product_id ),
- wcfm_get_vendor_store( $vendor_id )
+ '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg('request_id', $refund_request_id, wcfm_refund_requests_url()) . '">#' . $refund_request_id . '</a>',
+ '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url($order_id) . '">#' . $order->get_order_number() . '</a>',
+ get_the_title($product_id),
+ wcfm_get_vendor_store($vendor_id)
]
]
]
];
}
-
- if( $wcfm_messages ) {
- $WCFM->wcfm_notification->wcfm_send_direct_message( -2, 0, 1, 0, $wcfm_messages, 'refund-request', true, $raw_message );
-
+
+ if ($wcfm_messages) {
+ $WCFM->wcfm_notification->wcfm_send_direct_message(-2, 0, 1, 0, $wcfm_messages, 'refund-request', true, $raw_message);
+
// Order Note
- $is_customer_note = apply_filters( 'wcfm_is_allow_refund_update_note_for_customer', '1' );
- add_filter( 'woocommerce_new_order_note_data', array( $WCFM->wcfm_marketplace, 'wcfm_update_comment_vendor' ), 10, 2 );
- $comment_id = $order->add_order_note( strip_tags($wcfm_messages), $is_customer_note );
- add_comment_meta( $comment_id, '_vendor_id', $vendor_id );
- remove_filter( 'woocommerce_new_order_note_data', array( $WCFM->wcfm_marketplace, 'wcfm_update_comment_vendor' ), 10, 2 );
+ $is_customer_note = apply_filters('wcfm_is_allow_refund_update_note_for_customer', '1');
+ add_filter('woocommerce_new_order_note_data', array($WCFM->wcfm_marketplace, 'wcfm_update_comment_vendor'), 10, 2);
+ $comment_id = $order->add_order_note(strip_tags($wcfm_messages), $is_customer_note);
+ add_comment_meta($comment_id, '_vendor_id', $vendor_id);
+ remove_filter('woocommerce_new_order_note_data', array($WCFM->wcfm_marketplace, 'wcfm_update_comment_vendor'), 10, 2);
}
-
- do_action( 'wcfmmp_refund_request_approved', $refund_request_id );
-
+
+ do_action('wcfmmp_refund_request_approved', $refund_request_id);
+
//echo '{"status": true, "message": "' . __('Refund requests successfully processed.', 'wc-multivendor-marketplace') . ' #' . $refund_request_id . '"}';
} else {
//echo '{"status": false, "message": "' . __('Refund processing failed, please contact site admin.', 'wc-multivendor-marketplace') . ' #' . $refund_request_id . '"}';
}
} else {
// Admin Notification
- if( $refund_request == 'full' ) {
- if( !$refund_request_processed )
- $wcfm_messages = apply_filters( 'wcfmmp_refund_request_message', sprintf( __( 'Refund Request <b>%s</b> received for Order <b>%s</b>', 'wc-multivendor-marketplace' ), '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg( 'request_id', $refund_request_id, wcfm_refund_requests_url() ) . '">#' . $refund_request_id . '</a>', '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url( $order_id ) . '">#' . $order->get_order_number() . '</a>' ), $refund_request_id, $order_id, $product_id );
+ if ($refund_request == 'full') {
+ if (!$refund_request_processed)
+ $wcfm_messages = apply_filters('wcfmmp_refund_request_message', sprintf(__('Refund Request <b>%s</b> received for Order <b>%s</b>', 'wc-multivendor-marketplace'), '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg('request_id', $refund_request_id, wcfm_refund_requests_url()) . '">#' . $refund_request_id . '</a>', '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url($order_id) . '">#' . $order->get_order_number() . '</a>'), $refund_request_id, $order_id, $product_id);
- $raw_message = [
- 'hook' => [
- 'name' => 'wcfmmp_refund_request_message',
- 'args' => [
- $refund_request_id,
- $order_id,
- $product_id
- ]
- ],
- 'l10n' => [
- 'text' => 'Refund Request <b>%s</b> received for Order <b>%s</b>',
- 'domain' => 'wc-multivendor-marketplace',
- 'wrapper' => [
- 'function' => 'sprintf',
- 'args' => [
- '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg( 'request_id', $refund_request_id, wcfm_refund_requests_url() ) . '">#' . $refund_request_id . '</a>',
- '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url( $order_id ) . '">#' . $order->get_order_number() . '</a>'
- ]
+ $raw_message = [
+ 'hook' => [
+ 'name' => 'wcfmmp_refund_request_message',
+ 'args' => [
+ $refund_request_id,
+ $order_id,
+ $product_id
+ ]
+ ],
+ 'l10n' => [
+ 'text' => 'Refund Request <b>%s</b> received for Order <b>%s</b>',
+ 'domain' => 'wc-multivendor-marketplace',
+ 'wrapper' => [
+ 'function' => 'sprintf',
+ 'args' => [
+ '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg('request_id', $refund_request_id, wcfm_refund_requests_url()) . '">#' . $refund_request_id . '</a>',
+ '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url($order_id) . '">#' . $order->get_order_number() . '</a>'
]
]
- ];
+ ]
+ ];
} else {
- $wcfm_messages = apply_filters( 'wcfmmp_refund_request_message', sprintf( __( 'Refund Request <b>%s</b> received for Order <b>%s</b> item <b>%s</b>', 'wc-multivendor-marketplace' ), '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg( 'request_id', $refund_request_id, wcfm_refund_requests_url() ) . '">#' . $refund_request_id . '</a>', '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url( $order_id ) . '">#' . $order->get_order_number() . '</a>', get_the_title( $product_id ) ), $refund_request_id, $order_id, $product_id );
+ $wcfm_messages = apply_filters('wcfmmp_refund_request_message', sprintf(__('Refund Request <b>%s</b> received for Order <b>%s</b> item <b>%s</b>', 'wc-multivendor-marketplace'), '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg('request_id', $refund_request_id, wcfm_refund_requests_url()) . '">#' . $refund_request_id . '</a>', '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url($order_id) . '">#' . $order->get_order_number() . '</a>', get_the_title($product_id)), $refund_request_id, $order_id, $product_id);
$raw_message = [
'hook' => [
'name' => 'wcfmmp_refund_request_message',
'args' => [
- $refund_request_id,
- $order_id,
+ $refund_request_id,
+ $order_id,
$product_id
]
],
@@ -277,52 +306,51 @@
'wrapper' => [
'function' => 'sprintf',
'args' => [
- '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg( 'request_id', $refund_request_id, wcfm_refund_requests_url() ) . '">#' . $refund_request_id . '</a>',
- '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url( $order_id ) . '">#' . $order->get_order_number() . '</a>',
- get_the_title( $product_id )
+ '<a target="_blank" class="wcfm_dashboard_item_title" href="' . add_query_arg('request_id', $refund_request_id, wcfm_refund_requests_url()) . '">#' . $refund_request_id . '</a>',
+ '<a target="_blank" class="wcfm_dashboard_item_title" href="' . get_wcfm_view_order_url($order_id) . '">#' . $order->get_order_number() . '</a>',
+ get_the_title($product_id)
]
]
]
];
}
-
- if( $wcfm_messages ) {
- $WCFM->wcfm_notification->wcfm_send_direct_message( -2, 0, 1, 0, $wcfm_messages, 'refund-request', true, $raw_message );
-
+
+ if ($wcfm_messages) {
+ $WCFM->wcfm_notification->wcfm_send_direct_message(-2, 0, 1, 0, $wcfm_messages, 'refund-request', true, $raw_message);
+
// Send Vendor Notification
- if( $vendor_id && !wcfm_is_vendor() ) {
- $is_allow_refund = wcfm_vendor_has_capability( $vendor_id, 'refund-request' );
- if( $is_allow_refund && apply_filters( 'wcfm_is_allow_refund_vendor_notification', true ) ) {
- $WCFM->wcfm_notification->wcfm_send_direct_message( -1, $vendor_id, 1, 0, $wcfm_messages, 'refund-request', true, $raw_message );
+ if ($vendor_id && !wcfm_is_vendor()) {
+ $is_allow_refund = wcfm_vendor_has_capability($vendor_id, 'refund-request');
+ if ($is_allow_refund && apply_filters('wcfm_is_allow_refund_vendor_notification', true)) {
+ $WCFM->wcfm_notification->wcfm_send_direct_message(-1, $vendor_id, 1, 0, $wcfm_messages, 'refund-request', true, $raw_message);
}
}
-
+
// Order Note
- $is_customer_note = apply_filters( 'wcfm_is_allow_refund_request_note_for_customer', '1' );
- $comment_id = $order->add_order_note( strip_tags($wcfm_messages), $is_customer_note );
+ $is_customer_note = apply_filters('wcfm_is_allow_refund_request_note_for_customer', '1');
+ $comment_id = $order->add_order_note(strip_tags($wcfm_messages), $is_customer_note);
}
-
+
//echo '{"status": true, "message": "' . $wcfm_refund_messages['refund_requests_saved'] . ' #' . $refund_request_id . '"}';
}
-
- do_action( 'wcfm_after_refund_request', $refund_request_id, $order_id, $commission_id, $refund_item_id, $vendor_id, $refund_reason );
-
+
+ do_action('wcfm_after_refund_request', $refund_request_id, $order_id, $commission_id, $refund_item_id, $vendor_id, $refund_reason);
} else {
//echo '{"status": false, "message": "' . $wcfm_refund_messages['refund_requests_failed'] . '"}';
}
-
+
$refund_request_processed = true;
}
} else {
echo '{"status": false, "message": "' . $wcfm_refund_messages['no_refund_reason'] . '"}';
}
-
- if( !$refund_request_processed ) {
- echo '{"status": false, "message": "' . __( 'No item selected for refund request.', 'wc-multivendor-marketplace' ) . '"}';
+
+ if (!$refund_request_processed) {
+ echo '{"status": false, "message": "' . __('No item selected for refund request.', 'wc-multivendor-marketplace') . '"}';
} else {
echo '{"status": true, "message": "' . __('Refund requests successfully processed.', 'wc-multivendor-marketplace') . '"}';
}
-
+
die;
}
}
No newline at end of file
--- a/wc-multivendor-marketplace/core/class-wcfmmp-ajax.php
+++ b/wc-multivendor-marketplace/core/class-wcfmmp-ajax.php
@@ -783,18 +783,28 @@
if (!check_ajax_referer('wcfm_ajax_nonce', 'wcfm_ajax_nonce', false)) {
wp_send_json_error(esc_html__('Invalid nonce! Refresh your page and try again.', 'wc-frontend-manager'));
- wp_die();
}
if (!current_user_can('manage_woocommerce') && !current_user_can('wcfm_vendor') && !current_user_can('shop_staff')) {
wp_send_json_error(esc_html__('You don’t have permission to do this.', 'woocommerce'));
- wp_die();
+ }
+
+ $user_id = isset($_POST['userID']) ? absint($_POST['userID']) : 0;
+ if ( function_exists('wcfm_user_can_perform_request') && ! wcfm_user_can_perform_request( $user_id, 'shipping_management', 'add' ) ) {
+ wp_send_json_error(__('You don't have permission to do this.', 'woocommerce'));
+ }
+
+ $zone_id = isset($_POST['zoneID']) ? absint($_POST['zoneID']) : 0;
+ $method_id = isset($_POST['method']) ? sanitize_text_field($_POST['method']) : '';
+
+ if ( !$zone_id || !$method_id ) {
+ wp_send_json_error(__('Missing required parameters.', 'wc-multivendor-marketplace'));
}
$data = array(
- 'zone_id' => absint($_POST['zoneID']),
- 'method_id' => sanitize_text_field($_POST['method']),
- 'user_id' => isset($_POST['userID']) ? absint($_POST['userID']) : 0
+ 'zone_id' => $zone_id,
+ 'method_id' => $method_id,
+ 'user_id' => $user_id
);
$result = WCFMmp_Shipping_Zone::add_shipping_methods($data);
@@ -825,11 +835,22 @@
wp_die();
}
- //print_r($_POST);
+ $user_id = isset($_POST['userID']) ? absint($_POST['userID']) : 0;
+ if ( function_exists('wcfm_user_can_perform_request') && ! wcfm_user_can_perform_request( $user_id, 'shipping_management', 'enable_disable' ) ) {
+ wp_send_json_error(__('You don't have permission to do this.', 'woocommerce'));
+ }
+
+ $instance_id = isset($_POST['instance_id']) ? sanitize_text_field($_POST['instance_id']) : '';
+ $zone_id = isset($_POST['zoneID']) ? absint($_POST['zoneID']) : 0;
+
+ if ( !$instance_id || !$zone_id ) {
+ wp_send_json_error(__('Missing required parameters.', 'wc-multivendor-marketplace'));
+ }
+
$data = array(
- 'instance_id' => sanitize_text_field($_POST['instance_id']),
- 'zone_id' => absint($_POST['zoneID']),
- 'user_id' => absint($_POST['userID']),
+ 'instance_id' => $instance_id,
+ 'zone_id' => $zone_id,
+ 'user_id' => $user_id,
'checked' => ($_POST['checked'] == 'true') ? 1 : 0
);
$result = WCFMmp_Shipping_Zone::toggle_shipping_method($data);
@@ -859,10 +880,22 @@
wp_die();
}
+ $user_id = isset($_POST['userID']) ? absint($_POST['userID']) : 0;
+ if ( function_exists('wcfm_user_can_perform_request') && ! wcfm_user_can_perform_request( $user_id, 'shipping_management', 'enable_disable' ) ) {
+ wp_send_json_error(__('You don't have permission to do this.', 'woocommerce'));
+ }
+
+ $instance_id = isset($_POST['instance_id']) ? sanitize_text_field($_POST['instance_id']) : '';
+ $zone_id = isset($_POST['zoneID']) ? absint($_POST['zoneID']) : 0;
+
+ if ( !$instance_id || !$zone_id ) {
+ wp_send_json_error(__('Missing required parameters.', 'wc-multivendor-marketplace'));
+ }
+
$data = array(
- 'zone_id' => absint($_POST['zoneID']),
- 'instance_id' => sanitize_text_field($_POST['instance_id']),
- 'user_id' => absint($_POST['userID'])
+ 'zone_id' => $zone_id,
+ 'instance_id' => $instance_id,
+ 'user_id' => $user_id
);
$result = WCFMmp_Shipping_Zone::delete_shipping_methods($data);
@@ -894,8 +927,13 @@
wp_die();
}
- //print_r($_POST); die;
$args = wc_clean(wp_unslash($_POST['args']));
+
+ $user_id = isset( $args['user_id'] ) ? absint($args['user_id']) : 0;
+ if ( function_exists('wcfm_user_can_perform_request') && ! wcfm_user_can_perform_request( $user_id, 'shipping_management', 'update' ) ) {
+ wp_send_json_error(__('You don't have permission to do this.', 'woocommerce'));
+ }
+
if (empty($args['settings']['title'])) {
wp_send_json_error(__('Shipping title must be required', 'wc-multivendor-marketplace'));
}
--- a/wc-multivendor-marketplace/core/class-wcfmmp-media.php
+++ b/wc-multivendor-marketplace/core/class-wcfmmp-media.php
@@ -195,26 +195,33 @@
if ( ! check_ajax_referer( 'wcfm_ajax_nonce', 'wcfm_ajax_nonce', false ) ) {
wp_send_json_error( __( 'Invalid nonce! Refresh your page and try again.', 'wc-frontend-manager' ) );
- wp_die();
}
if ( !current_user_can( 'manage_woocommerce' ) && !current_user_can( 'wcfm_vendor' ) && !current_user_can( 'shop_staff' ) ) {
wp_send_json_error( esc_html__( 'You don’t have permission to do this.', 'woocommerce' ) );
- wp_die();
- }
-
- $mediaid = absint($_POST['mediaid']);
+ }
+
+ if( !apply_filters( 'wcfm_is_allow_media', true ) ) {
+ wp_send_json_error( esc_html__( 'You don’t have permission to do this.', 'woocommerce' ) );
+ }
- if( $mediaid ) {
- if( wp_delete_post( $mediaid, true ) ) {
- echo esc_attr('success');
- } else {
- echo esc_attr('failed');
- }
- } else {
- echo esc_attr('failed');
- }
- die;
+ $mediaid = isset( $_POST['mediaid'] ) ? absint( $_POST['mediaid'] ) : 0;
+
+ if ( !$mediaid ) {
+ wp_send_json_error( esc_html__( 'You don’t have permission to do this.', 'woocommerce' ) );
+ }
+
+ $resource_owner_id = get_post_field( 'post_author', $mediaid );
+ $resource_type = get_post_field( 'post_type', $mediaid );
+ if ( 'attachment' === $resource_type && '' !== $resource_owner_id && function_exists('wcfm_user_can_perform_request') && wcfm_user_can_perform_request( $resource_owner_id, 'media_delete' ) ) {
+ if( wp_delete_post( $mediaid, true ) ) {
+ wp_send_json_success( 'success' );
+ } else {
+ wp_send_json_error( 'failed' );
+ }
+ } else {
+ wp_send_json_error( esc_html__( 'You don’t have permission to do this.', 'woocommerce' ) );
+ }
}
/**
@@ -223,29 +230,33 @@
* @since 1.1.2
*/
function wcfmmp_bulk_media_delete() {
- global $WCFM, $wpdb, $_POST;
+ global $WCFM, $wpdb, $_POST;
if ( ! check_ajax_referer( 'wcfm_ajax_nonce', 'wcfm_ajax_nonce', false ) ) {
wp_send_json_error( __( 'Invalid nonce! Refresh your page and try again.', 'wc-frontend-manager' ) );
- wp_die();
}
if ( !current_user_can( 'manage_woocommerce' ) && !current_user_can( 'wcfm_vendor' ) && !current_user_can( 'shop_staff' ) ) {
wp_send_json_error( esc_html__( 'You don’t have permission to do this.', 'woocommerce' ) );
- wp_die();
- }
+ }
+
+ if( !apply_filters( 'wcfm_is_allow_media', true ) ) {
+ wp_send_json_error( esc_html__( 'You don’t have permission to do this.', 'woocommerce' ) );
+ }
if( isset($_POST['selected_media']) ) {
- $selected_medias = wc_clean( wp_unslash($_POST['selected_media']) );
- if( is_array( $selected_medias ) && !empty( $selected_medias ) ) {
- foreach( $selected_medias as $mediaid ) {
- if( wp_delete_post( $mediaid, true ) ) {
- // Do anything
- }
+ $selected_medias = wc_clean( wp_unslash($_POST['selected_media']) );
+ if( is_array( $selected_medias ) && !empty( $selected_medias ) ) {
+ foreach( $selected_medias as $mediaid ) {
+ $resource_owner_id = get_post_field( 'post_author', (int) $mediaid );
+ $resource_type = get_post_field( 'post_type', $mediaid );
+ if ( 'attachment' === $resource_type && '' !== $resource_owner_id && function_exists('wcfm_user_can_perform_request') && wcfm_user_can_perform_request( $resource_owner_id, 'media_delete' ) ) {
+ wp_delete_post( $mediaid, true );
}
}
}
- echo '{ "status": true }';
- die;
+ wp_send_json_success( array( 'status' => true ) );
}
+ wp_send_json_error( esc_html__( 'You don’t have permission to do this.', 'woocommerce' ) );
+ }
}
No newline at end of file
--- a/wc-multivendor-marketplace/core/class-wcfmmp-shipping-zone.php
+++ b/wc-multivendor-marketplace/core/class-wcfmmp-shipping-zone.php
@@ -225,7 +225,7 @@
);
$table_name = "{$wpdb->prefix}wcfm_marketplace_shipping_zone_methods";
- $updated = $wpdb->update( $table_name, $data, array( 'instance_id' => $args['instance_id'] ), array( '%s', '%d', '%d', '%s' ) );
+ $updated = $wpdb->update( $table_name, $data, array( 'instance_id' => $instance_id, 'vendor_id' => $vendor_id ), array( '%s', '%d', '%d', '%s' ) );
if ( $updated !== false) {
return $data;
--- a/wc-multivendor-marketplace/core/class-wcfmmp.php
+++ b/wc-multivendor-marketplace/core/class-wcfmmp.php
@@ -106,7 +106,6 @@
public function init_plugin() {
// Init Text Domain
$this->load_plugin_textdomain();
- require_once $this->plugin_path . 'helpers/wcfmmp-core-functions.php';
}
/**
--- a/wc-multivendor-marketplace/wc-multivendor-marketplace-config.php
+++ b/wc-multivendor-marketplace/wc-multivendor-marketplace-config.php
@@ -4,7 +4,7 @@
define('WCFMmp_TEXT_DOMAIN', 'wc-multivendor-marketplace');
-define('WCFMmp_VERSION', '3.7.0');
+define('WCFMmp_VERSION', '3.7.1');
define('WCFMmp_SERVER_URL', 'https://wclovers.com');
--- a/wc-multivendor-marketplace/wc-multivendor-marketplace.php
+++ b/wc-multivendor-marketplace/wc-multivendor-marketplace.php
@@ -4,15 +4,16 @@
* Plugin URI: https://wclovers.com/knowledgebase_category/wcfm-marketplace/
* Description: Most featured and flexible marketplace solution for your e-commerce store. Simply and Smoothly.
* Author: WC Lovers
- * Version: 3.7.0
+ * Version: 3.7.1
* Author URI: https://wclovers.com
*
* Text Domain: wc-multivendor-marketplace
* Domain Path: /lang/
*
* WC requires at least: 3.0.0
- * WC tested up to: 10.4
+ * WC tested up to: 10.5
*
+ * Requires Plugins: woocommerce, wc-frontend-manager
*/
if(!defined('ABSPATH')) exit; // Exit if accessed directly
@@ -20,6 +21,7 @@
if ( ! class_exists( 'WCFMmp_Dependencies' ) )
require_once 'helpers/class-wcfmmp-dependencies.php';
+require_once 'helpers/wcfmmp-core-functions.php';
require_once 'wc-multivendor-marketplace-config.php';
if(!defined('WCFMmp_TOKEN')) exit;
