Below is a differential between the unpatched vulnerable code and the patched update, for reference.
--- a/upi-qr-code-payment-for-woocommerce/includes/blocks/assets/blocks.asset.php
+++ b/upi-qr-code-payment-for-woocommerce/includes/blocks/assets/blocks.asset.php
@@ -1 +1 @@
-<?php return array('dependencies' => array('react', 'react-dom', 'wc-blocks-registry', 'wc-settings', 'wp-element', 'wp-html-entities'), 'version' => '4723d4f56e6951dfc10c');
+<?php return array('dependencies' => array('react', 'react-dom', 'wc-blocks-registry', 'wc-settings', 'wp-element', 'wp-html-entities'), 'version' => '4723d4f56e6951dfc10c');
--- a/upi-qr-code-payment-for-woocommerce/includes/blocks/class-blocks-support.php
+++ b/upi-qr-code-payment-for-woocommerce/includes/blocks/class-blocks-support.php
@@ -1,115 +1,115 @@
-<?php
-use AutomatticWooCommerceBlocksPaymentsIntegrationsAbstractPaymentMethodType;
-
-/**
- * UPI Payments Blocks integration
- *
- * @since 1.4.0
- */
-final class UPI_WC_Payment_Gateway_Blocks_Support extends AbstractPaymentMethodType {
-
- /**
- * Payment method name/id/slug.
- *
- * @var string
- */
- protected $name = 'wc-upi';
-
- /**
- * Initializes the payment method type.
- */
- public function initialize() {
- $this->settings = get_option( "woocommerce_{$this->name}_settings", [] );
- }
-
- /**
- * Returns if this payment method should be active. If false, the scripts will not be enqueued.
- *
- * @return boolean
- */
- public function is_active() {
- return ! empty( $this->settings['enabled'] ) && 'yes' === $this->settings['enabled'];
- }
-
- /**
- * Returns an array of scripts/handles to be registered for this payment method.
- *
- * @return array
- */
- public function get_payment_method_script_handles() {
- $script_path = 'includes/blocks/assets/blocks.js';
- $script_asset_path = UPIWC_PATH . 'includes/blocks/assets/blocks.asset.php';
- $script_asset = file_exists( $script_asset_path )
- ? require $script_asset_path
- : [
- 'dependencies' => [],
- 'version' => UPIWC_VERSION,
- ];
- $script_url = UPIWC_URL . $script_path;
-
- wp_register_script(
- 'upiwc-payment-blocks',
- $script_url,
- $script_asset['dependencies'],
- $script_asset['version'],
- true
- );
-
- if ( function_exists( 'wp_set_script_translations' ) ) {
- wp_set_script_translations( 'upiwc-payment-blocks', 'upi-qr-code-payment-for-woocommerce', UPIWC_PATH . 'languages/' );
- }
-
- return [ 'upiwc-payment-blocks' ];
- }
-
- /**
- * Returns an array of key=>value pairs of data made available to the payment methods script.
- *
- * @return array
- */
- public function get_payment_method_data() {
- $handles = array_unique( apply_filters( 'upiwc_upi_handle_list', [ 'airtel', 'airtelpaymentsbank', 'apb', 'apl', 'allbank', 'albk', 'allahabadbank', 'andb', 'axisgo', 'axis', 'axisbank', 'axisb', 'okaxis', 'abfspay', 'axl', 'barodampay', 'barodapay', 'boi', 'cnrb', 'csbpay', 'csbcash', 'centralbank', 'cbin', 'cboi', 'cub', 'dbs', 'dcb', 'dcbbank', 'denabank', 'equitas', 'federal', 'fbl', 'finobank', 'hdfcbank', 'payzapp', 'okhdfcbank', 'rajgovhdfcbank', 'hsbc', 'imobile', 'pockets', 'ezeepay', 'eazypay', 'idbi', 'idbibank', 'idfc', 'idfcbank', 'idfcnetc', 'cmsidfc', 'indianbank', 'indbank', 'indianbk', 'iob', 'indus', 'indusind', 'icici', 'myicici', 'okicici', 'ikwik', 'ibl', 'jkb', 'jsbp', 'kbl', 'karb', 'kbl052', 'kvb', 'karurvysyabank', 'kvbank', 'kotak', 'kaypay', 'kmb', 'kmbl', 'okbizaxis', 'obc', 'paytm', 'pingpay', 'psb', 'pnb', 'sib', 'srcb', 'sc', 'scmobile', 'scb', 'scbl', 'sbi', 'oksbi', 'syndicate', 'syndbank', 'synd', 'lvb', 'lvbank', 'rbl', 'tjsb', 'uco', 'unionbankofindia', 'unionbank', 'uboi', 'ubi', 'united', 'utbi', 'upi', 'vjb', 'vijb', 'vijayabank', 'ubi', 'yesbank', 'ybl', 'yesbankltd' ] ) );
- sort( $handles );
-
- $handles = array_map(
- function( $value ) {
- return [
- 'label' => '@' . $value,
- 'value' => $value,
- ];
- },
- $handles
- );
-
- $placeholder = ( $this->get_setting( 'upi_address' ) === 'show_handle' ) ? 'mobilenumber' : 'mobilenumber@oksbi';
- $placeholder = apply_filters( 'upiwc_upi_address_placeholder', $placeholder );
-
- return [
- 'title' => $this->get_setting( 'title' ),
- 'description' => $this->get_setting( 'description' ),
- 'upi_address' => $this->get_setting( 'upi_address' ),
- 'require_upi' => $this->get_setting( 'require_upi' ),
- 'supports' => $this->get_supported_features(),
- 'button_text' => apply_filters( 'upiwc_order_button_text', __( 'Proceed to Payment', 'upi-qr-code-payment-for-woocommerce' ) ),
- 'placeholder' => $placeholder,
- 'handles' => $handles,
- ];
- }
-
- /**
- * Returns an array of supported features.
- *
- * @return string[]
- */
- public function get_supported_features() {
- $gateways = WC()->payment_gateways->get_available_payment_gateways();
-
- if ( isset( $gateways[ $this->name ] ) ) {
- $gateway = $gateways[ $this->name ];
-
- return array_filter( $gateway->supports, [ $gateway, 'supports' ] );
- }
-
- return [];
- }
-}
+<?php
+use AutomatticWooCommerceBlocksPaymentsIntegrationsAbstractPaymentMethodType;
+
+/**
+ * UPI Payments Blocks integration
+ *
+ * @since 1.4.0
+ */
+final class UPI_WC_Payment_Gateway_Blocks_Support extends AbstractPaymentMethodType {
+
+ /**
+ * Payment method name/id/slug.
+ *
+ * @var string
+ */
+ protected $name = 'wc-upi';
+
+ /**
+ * Initializes the payment method type.
+ */
+ public function initialize() {
+ $this->settings = get_option( "woocommerce_{$this->name}_settings", [] );
+ }
+
+ /**
+ * Returns if this payment method should be active. If false, the scripts will not be enqueued.
+ *
+ * @return boolean
+ */
+ public function is_active() {
+ return ! empty( $this->settings['enabled'] ) && 'yes' === $this->settings['enabled'];
+ }
+
+ /**
+ * Returns an array of scripts/handles to be registered for this payment method.
+ *
+ * @return array
+ */
+ public function get_payment_method_script_handles() {
+ $script_path = 'includes/blocks/assets/blocks.js';
+ $script_asset_path = UPIWC_PATH . 'includes/blocks/assets/blocks.asset.php';
+ $script_asset = file_exists( $script_asset_path )
+ ? require $script_asset_path
+ : [
+ 'dependencies' => [],
+ 'version' => UPIWC_VERSION,
+ ];
+ $script_url = UPIWC_URL . $script_path;
+
+ wp_register_script(
+ 'upiwc-payment-blocks',
+ $script_url,
+ $script_asset['dependencies'],
+ $script_asset['version'],
+ true
+ );
+
+ if ( function_exists( 'wp_set_script_translations' ) ) {
+ wp_set_script_translations( 'upiwc-payment-blocks', 'upi-qr-code-payment-for-woocommerce', UPIWC_PATH . 'languages/' );
+ }
+
+ return [ 'upiwc-payment-blocks' ];
+ }
+
+ /**
+ * Returns an array of key=>value pairs of data made available to the payment methods script.
+ *
+ * @return array
+ */
+ public function get_payment_method_data() {
+ $handles = array_unique( apply_filters( 'upiwc_upi_handle_list', [ 'airtel', 'airtelpaymentsbank', 'apb', 'apl', 'allbank', 'albk', 'allahabadbank', 'andb', 'axisgo', 'axis', 'axisbank', 'axisb', 'okaxis', 'abfspay', 'axl', 'barodampay', 'barodapay', 'boi', 'cnrb', 'csbpay', 'csbcash', 'centralbank', 'cbin', 'cboi', 'cub', 'dbs', 'dcb', 'dcbbank', 'denabank', 'equitas', 'federal', 'fbl', 'finobank', 'hdfcbank', 'payzapp', 'okhdfcbank', 'rajgovhdfcbank', 'hsbc', 'imobile', 'pockets', 'ezeepay', 'eazypay', 'idbi', 'idbibank', 'idfc', 'idfcbank', 'idfcnetc', 'cmsidfc', 'indianbank', 'indbank', 'indianbk', 'iob', 'indus', 'indusind', 'icici', 'myicici', 'okicici', 'ikwik', 'ibl', 'jkb', 'jsbp', 'kbl', 'karb', 'kbl052', 'kvb', 'karurvysyabank', 'kvbank', 'kotak', 'kaypay', 'kmb', 'kmbl', 'okbizaxis', 'obc', 'paytm', 'pingpay', 'psb', 'pnb', 'sib', 'srcb', 'sc', 'scmobile', 'scb', 'scbl', 'sbi', 'oksbi', 'syndicate', 'syndbank', 'synd', 'lvb', 'lvbank', 'rbl', 'tjsb', 'uco', 'unionbankofindia', 'unionbank', 'uboi', 'ubi', 'united', 'utbi', 'upi', 'vjb', 'vijb', 'vijayabank', 'ubi', 'yesbank', 'ybl', 'yesbankltd' ] ) );
+ sort( $handles );
+
+ $handles = array_map(
+ function( $value ) {
+ return [
+ 'label' => '@' . $value,
+ 'value' => $value,
+ ];
+ },
+ $handles
+ );
+
+ $placeholder = ( $this->get_setting( 'upi_address' ) === 'show_handle' ) ? 'mobilenumber' : 'mobilenumber@oksbi';
+ $placeholder = apply_filters( 'upiwc_upi_address_placeholder', $placeholder );
+
+ return [
+ 'title' => $this->get_setting( 'title' ),
+ 'description' => $this->get_setting( 'description' ),
+ 'upi_address' => $this->get_setting( 'upi_address' ),
+ 'require_upi' => $this->get_setting( 'require_upi' ),
+ 'supports' => $this->get_supported_features(),
+ 'button_text' => apply_filters( 'upiwc_order_button_text', __( 'Proceed to Payment', 'upi-qr-code-payment-for-woocommerce' ) ),
+ 'placeholder' => $placeholder,
+ 'handles' => $handles,
+ ];
+ }
+
+ /**
+ * Returns an array of supported features.
+ *
+ * @return string[]
+ */
+ public function get_supported_features() {
+ $gateways = WC()->payment_gateways->get_available_payment_gateways();
+
+ if ( isset( $gateways[ $this->name ] ) ) {
+ $gateway = $gateways[ $this->name ];
+
+ return array_filter( $gateway->supports, [ $gateway, 'supports' ] );
+ }
+
+ return [];
+ }
+}
--- a/upi-qr-code-payment-for-woocommerce/includes/class-payment.php
+++ b/upi-qr-code-payment-for-woocommerce/includes/class-payment.php
@@ -1,1135 +1,1148 @@
-<?php
-/**
- * The admin-facing functionality of the plugin.
- *
- * @package UPI QR Code Payment Gateway
- * @subpackage Includes
- * @author Sayan Datta
- * @license http://www.gnu.org/licenses/ GNU General Public License
- */
-
-// If this file is called directly, abort!!!
-defined( 'ABSPATH' ) || exit;
-
-/**
- * UPI_WC_Payment_Gateway class.
- *
- * @class Main payment gateway class of the plugin.
- */
-class UPI_WC_Payment_Gateway extends WC_Payment_Gateway {
-
- /**
- * Unique id for the gateway.
- *
- * @var string
- */
- public $id = 'wc-upi';
-
- public $instructions;
- protected $instructions_mobile;
- protected $confirm_message;
- protected $thank_you;
- protected $payment_status;
- protected $name;
- protected $vpa;
- protected $pay_button;
- protected $mc_code;
- protected $upi_address;
- protected $require_upi;
- protected $theme;
- protected $transaction_id;
- protected $transaction_image;
- protected $intent;
- protected $download_qr;
- protected $qrcode_mobile;
- protected $hide_on_mobile;
- protected $email_enabled;
- protected $email_subject;
- protected $email_heading;
- protected $additional_content;
- protected $default_status;
-
- /**
- * Constructor for the gateway.
- */
- public function __construct() {
-
- $this->icon = apply_filters( 'upiwc_gateway_icon', UPIWC_URL . 'includes/icon/payment.gif' );
- $this->has_fields = true;
- $this->method_title = __( 'UPI QR Code', 'upi-qr-code-payment-for-woocommerce' );
- $this->method_description = sprintf( '%s <span style="font-weight: 600;color: #ff0000;">%s</span><br><span style="font-weight: 600;color: green;">%s</span>', __( 'Allows customers to use UPI mobile app like Paytm, Google Pay, BHIM, PhonePe to pay to your bank account directly using UPI.', 'upi-qr-code-payment-for-woocommerce' ), __( 'Merchant or Administrator of this site needs to manually check the payment and mark it as paid on the Order edit page as automatic payment verification is not available within this payment method.', 'upi-qr-code-payment-for-woocommerce' ), __( 'If you use Paytm for Business, PhonePe Business, or BharatPe UPI QR codes, consider utilizing the <a target="_blank" href="https://wordpress.org/plugins/knit-pay-upi/">"Knit Pay - UPI"</a> plugin to enable automatic payment verification functionality.', 'upi-qr-code-payment-for-woocommerce' ) );
- $this->order_button_text = apply_filters( 'upiwc_order_button_text', __( 'Proceed to Payment', 'upi-qr-code-payment-for-woocommerce' ) );
-
- // Method with all the options fields
- $this->init_form_fields();
-
- // Load the settings.
- $this->init_settings();
-
- // Define user set variables
- $this->title = $this->get_option( 'title' );
- $this->description = $this->get_option( 'description' );
- $this->instructions = $this->get_option( 'instructions', $this->description );
- $this->instructions_mobile = $this->get_option( 'instructions_mobile', $this->description );
- $this->confirm_message = $this->get_option( 'confirm_message' );
- $this->thank_you = $this->get_option( 'thank_you' );
- $this->payment_status = $this->get_option( 'payment_status', 'on-hold' );
- $this->name = $this->get_option( 'name' );
- $this->vpa = $this->get_option( 'vpa' );
- $this->pay_button = $this->get_option( 'pay_button' );
- $this->mc_code = $this->get_option( 'mc_code' );
- $this->upi_address = $this->get_option( 'upi_address', 'show_require' );
- $this->require_upi = $this->get_option( 'require_upi', 'yes' );
- $this->theme = $this->get_option( 'theme', 'light' );
- $this->transaction_id = $this->get_option( 'transaction_id', 'show_require' );
- $this->transaction_image = $this->get_option( 'transaction_image', 'show_require' );
- $this->intent = 'no';// $this->get_option( 'intent', 'no' );
- $this->download_qr = $this->get_option( 'download_qr', 'no' );
- $this->qrcode_mobile = $this->get_option( 'qrcode_mobile', 'yes' );
- $this->hide_on_mobile = $this->get_option( 'hide_on_mobile', 'no' );
- $this->email_enabled = $this->get_option( 'email_enabled' );
- $this->email_subject = $this->get_option( 'email_subject' );
- $this->email_heading = $this->get_option( 'email_heading' );
- $this->additional_content = $this->get_option( 'additional_content' );
- $this->default_status = apply_filters( 'upiwc_process_payment_order_status', 'pending' );
-
- // Actions
- add_action( 'woocommerce_update_options_payment_gateways_' . $this->id, [ $this, 'process_admin_options' ] );
-
- // We need custom JavaScript to obtain the transaction number
- add_action( 'wp_enqueue_scripts', [ $this, 'payment_scripts' ] );
-
- // Thank you page output
- add_action( 'woocommerce_receipt_' . $this->id, [ $this, 'generate_qr_code' ], 4, 1 );
-
- // Verify payment from redirection
- add_action( 'woocommerce_api_upiwc-payment', [ $this, 'capture_payment' ] );
-
- // Customize on hold email template subject
- add_filter( 'woocommerce_email_subject_customer_on_hold_order', [ $this, 'email_subject_pending_order' ], 10, 3 );
-
- // Customize on hold email template heading
- add_filter( 'woocommerce_email_heading_customer_on_hold_order', [ $this, 'email_heading_pending_order' ], 10, 3 );
-
- // Customize on hold email template additional content
- add_filter( 'woocommerce_email_additional_content_customer_on_hold_order', [ $this, 'email_additional_content_pending_order' ], 10, 3 );
-
- // Customer Emails
- add_action( 'woocommerce_email_after_order_table', [ $this, 'email_instructions' ], 10, 4 );
-
- // Add support for payment for on hold orders
- add_action( 'woocommerce_valid_order_statuses_for_payment', [ $this, 'on_hold_payment' ], 99, 2 );
-
- // Change wc payment link if exists payment method is QR Code
- add_filter( 'woocommerce_get_checkout_payment_url', [ $this, 'custom_checkout_url' ], 99, 2 );
-
- // Add custom text on thankyou page
- add_filter( 'woocommerce_thankyou_order_received_text', [ $this, 'order_received_text' ], 99, 2 );
-
- // Disable upi payment gateway
- add_filter( 'woocommerce_available_payment_gateways', [ $this, 'disable_gateway' ], 999 );
-
- // Add order column data ( HPOS compatibility )
- add_filter( 'woocommerce_shop_order_list_table_columns', [ $this, 'column_item' ] );
- add_action( 'manage_woocommerce_page_wc-orders_custom_column', [ $this, 'render_column' ], 10, 2 );
-
- // Add order column data ( old post columns )
- add_filter( 'manage_edit-shop_order_columns', [ $this, 'column_item' ] );
- add_action( 'manage_shop_order_posts_custom_column', [ $this, 'render_column' ], 10, 2 );
-
- // Check plugin availability
- if ( ! $this->is_valid_for_use() ) {
- $this->enabled = 'no';
- }
- }
-
- /**
- * Check if this gateway is enabled and available in the user's country.
- *
- * @return bool
- */
- public function is_valid_for_use() {
- if ( in_array( get_woocommerce_currency(), apply_filters( 'upiwc_supported_currencies', [ 'INR' ] ) ) ) {
- return true;
- }
-
- return false;
- }
-
- /**
- * Admin Panel Options.
- *
- * @since 1.0.0
- */
- public function admin_options() {
- if ( $this->is_valid_for_use() ) {
- parent::admin_options();
- } else {
- ?>
- <div class="inline error">
- <p>
- <strong><?php esc_html_e( 'Gateway disabled', 'upi-qr-code-payment-for-woocommerce' ); ?></strong>: <?php esc_html_e( 'This plugin does not support your store currency. UPI Payment only supports Indian Currency. Contact developer for support.', 'upi-qr-code-payment-for-woocommerce' ); ?>
- </p>
- </div>
- <?php
- }
- }
-
- /**
- * Initialize Gateway Settings Form Fields
- */
- public function init_form_fields() {
-
- $this->form_fields = [
- 'enabled' => [
- 'title' => __( 'Enable / Disable:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'checkbox',
- 'label' => __( 'Enable UPI QR Code Payment Method', 'upi-qr-code-payment-for-woocommerce' ),
- 'description' => __( 'Enable this if you want to collect payment via UPI QR Codes.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => 'yes',
- 'desc_tip' => false,
- ],
- 'title' => [
- 'title' => __( 'Gateway Title:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'text',
- 'description' => __( 'This controls the title for the payment method the customer sees during checkout.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => __( 'Pay with UPI QR Code', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- ],
- 'description' => [
- 'title' => __( 'Description:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'textarea',
- 'description' => __( 'Payment method description that the customer will see on your checkout.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => __( 'It uses UPI apps like BHIM, Paytm, Google Pay, PhonePe or any Banking UPI app to make payment.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- ],
- 'upi_address' => [
- 'title' => __( 'Payee UPI Address (VPA):', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'select',
- 'description' => __( 'If you want to collect UPI Address from customers on checkout page, set it here. You can verify the payment against this UPI ID.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- 'default' => 'show_handle',
- 'options' => [
- 'hide' => __( 'Hide Field', 'upi-qr-code-payment-for-woocommerce' ),
- 'show' => __( 'Show Input Field', 'upi-qr-code-payment-for-woocommerce' ),
- 'show_handle' => __( 'Show Input Field & Handle', 'upi-qr-code-payment-for-woocommerce' ),
- ],
- ],
- 'require_upi' => [
- 'title' => __( 'Require UPI ID:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'select',
- 'description' => __( 'If you want to make UPI Address field required on checkout page, set it here.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- 'default' => 'yes',
- 'options' => [
- 'yes' => __( 'Require Field', 'upi-qr-code-payment-for-woocommerce' ),
- 'no' => __( 'Don't Require Field', 'upi-qr-code-payment-for-woocommerce' ),
- ],
- ],
- 'payment_status' => [
- 'title' => __( 'Payment Complete Status:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'select',
- 'description' => __( 'Payment action on successful UPI Transaction ID submission. Recommended: On Hold', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- 'default' => 'on-hold',
- 'options' => apply_filters(
- 'upiwc_settings_order_statuses',
- [
- 'pending' => __( 'Pending Payment', 'upi-qr-code-payment-for-woocommerce' ),
- 'on-hold' => __( 'On Hold', 'upi-qr-code-payment-for-woocommerce' ),
- 'processing' => __( 'Processing', 'upi-qr-code-payment-for-woocommerce' ),
- 'completed' => __( 'Completed', 'upi-qr-code-payment-for-woocommerce' ),
- ]
- ),
- ],
- 'thank_you' => [
- 'title' => __( 'Thank You Message:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'textarea',
- 'description' => __( 'This displays a message to customer after a successful payment is made.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => __( 'Thank you for your order. Your transaction has been completed, and order has been successfully placed. Please check you Email inbox for details.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- ],
- 'hide_on_mobile' => [
- 'title' => __( 'Mobile Visibility:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'checkbox',
- 'label' => __( 'Disable QR Code Payment Gateway on Mobile Devices', 'upi-qr-code-payment-for-woocommerce' ),
- 'description' => __( 'Enable this if you want to disable QR Code Payment Gateway on Mobile Devices.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => 'no',
- 'desc_tip' => false,
- ],
- 'payment_page' => [
- 'title' => __( 'Payment Popup Settings', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'title',
- 'description' => __( 'Customize various settings of the Payment Popup here.', 'upi-qr-code-payment-for-woocommerce' ),
- ],
- 'name' => [
- 'title' => __( 'Your Store or Shop Name:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'text',
- 'description' => __( 'Enter Your Store or Shop name. If you are a person, you can enter your name.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => get_bloginfo( 'name' ),
- 'desc_tip' => false,
- ],
- 'vpa' => [
- 'title' => __( 'Merchant UPI VPA ID:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'text',
- 'description' => sprintf( '%s <span style="color: #ff0000;font-weight: 600;">%s</span>', __( 'Enter Your Merchant UPI VPA (e.g. 12345678@icici) at which you want to collect payments.', 'upi-qr-code-payment-for-woocommerce' ), __( 'Use only Merchant UPI ID. General/Normal User UPI VPA will not work.', 'upi-qr-code-payment-for-woocommerce' ) ),
- 'default' => '',
- 'desc_tip' => false,
- ],
- 'pay_button' => [
- 'title' => __( 'Pay Now Button Text:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'text',
- 'description' => __( 'Enter the text to show as the payment button.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => __( 'Scan & Pay Now', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- ],
- 'mc_code' => [
- 'title' => __( 'Merchant Category Code:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'number',
- 'description' => sprintf( '%s <a href="https://www.citibank.com/tts/solutions/commercial-cards/assets/docs/govt/Merchant-Category-Codes.pdf" target="_blank">%s</a> or <a href="https://docs.checkout.com/resources/codes/merchant-category-codes" target="_blank">%s</a>', __( 'You can refer to these links to find out your MCC.', 'upi-qr-code-payment-for-woocommerce' ), 'Citi Bank', 'Checkout.com' ),
- 'default' => 0000,
- 'desc_tip' => false,
- ],
- 'theme' => [
- 'title' => __( 'Popup Theme:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'select',
- 'description' => __( 'Select the QR Code Popup theme here.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- 'default' => 'light',
- 'options' => apply_filters(
- 'upiwc_popup_themes',
- [
- 'light' => __( 'Light Theme', 'upi-qr-code-payment-for-woocommerce' ),
- 'dark' => __( 'Dark Theme', 'upi-qr-code-payment-for-woocommerce' ),
- ]
- ),
- ],
- 'transaction_id' => [
- 'title' => __( 'UPI Transaction ID:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'select',
- 'description' => __( 'If you want to collect UPI Transaction ID from customers on payment page, set it here. If you sell any downloable product, it is recommended to keep "Show & Require Input Field" option selected.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- 'default' => 'show_require',
- 'options' => [
- 'hide' => __( 'Hide Field', 'upi-qr-code-payment-for-woocommerce' ),
- 'show' => __( 'Show Input Field', 'upi-qr-code-payment-for-woocommerce' ),
- 'show_require' => __( 'Show & Require Input Field', 'upi-qr-code-payment-for-woocommerce' ),
- ],
- ],
- 'transaction_image' => [
- 'title' => __( 'UPI Screenshot / Image:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'select',
- 'description' => __( 'If you want to collect transaction screenshot from customers on payment page, set it here.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- 'default' => 'show_require',
- 'options' => [
- 'hide' => __( 'Hide Field', 'upi-qr-code-payment-for-woocommerce' ),
- 'show' => __( 'Show Upload Field', 'upi-qr-code-payment-for-woocommerce' ),
- 'show_require' => __( 'Show & Require Input Field', 'upi-qr-code-payment-for-woocommerce' ),
- ],
- ],
- /*
- 'intent' => [
- 'title' => __( 'Payment Buttons:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'checkbox',
- 'label' => __( 'Show / Hide Payment Buttons', 'upi-qr-code-payment-for-woocommerce' ),
- 'description' => sprintf( '%s <span style="color: #ff0000;font-weight: 600;">%s</span>', __( 'Enable this if you want to show direct pay now option.', 'upi-qr-code-payment-for-woocommerce' ), __( 'The payment Button will work only if the UPI Intent feature is enabled on your UPI ID.', 'upi-qr-code-payment-for-woocommerce' ) ),
- 'default' => 'no',
- 'desc_tip' => false,
- ],*/
- 'download_qr' => [
- 'title' => __( 'Download Button:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'checkbox',
- 'label' => __( 'Show / Hide download QR Code Button', 'upi-qr-code-payment-for-woocommerce' ),
- 'description' => __( 'Enable this if you want to show download QR Code Button. Buyers can pay using this QR Code by uploading it from gallery to any UPI supported apps.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => 'no',
- 'desc_tip' => false,
- ],
- 'qrcode_mobile' => [
- 'title' => __( 'Mobile QR Code:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'checkbox',
- 'label' => __( 'Show / Hide QR Code on Mobile Devices', 'upi-qr-code-payment-for-woocommerce' ),
- 'description' => __( 'Enable this if you want to show UPI QR Code on mobile devices.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => 'yes',
- 'desc_tip' => false,
- ],
- 'payment_content' => [
- 'title' => __( 'Payment Popup Content', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'title',
- 'description' => __( 'Customize various texts of the Payment Popup here.', 'upi-qr-code-payment-for-woocommerce' ),
- ],
- 'instructions' => [
- 'title' => __( 'Instructions:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'textarea',
- 'description' => __( 'Instructions that will be added to the order pay popup on desktop devices.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => __( 'Please scan the QR code with any UPI app to pay for your order. After payment, enter the UPI Reference ID or Transaction Number (e.g. 401422121258) on the next screen. We'll manually verify your payment using the provided information.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- ],
- 'instructions_mobile' => [
- 'title' => __( 'Mobile Instructions:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'textarea',
- 'description' => __( 'Instructions that will be added to the order pay popup on mobile devices.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => __( 'Please scan the QR code with any UPI app to pay for your order. After payment, enter the UPI Reference ID or Transaction Number (e.g. 401422121258) on the next screen. We'll manually verify your payment using the provided information.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- ],
- 'confirm_message' => [
- 'title' => __( 'Confirm Message:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'textarea',
- 'description' => __( 'This displays a message to customer as payment processing text.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => __( 'Please ensure that the amount has been deducted from your account before clicking "Confirm". We will manually verify your transaction once submitted.', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- ],
- 'email' => [
- 'title' => __( 'Configure Email', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'title',
- 'description' => __( 'Configure the Payment Pending email settings here.', 'upi-qr-code-payment-for-woocommerce' ),
- ],
- 'email_enabled' => [
- 'title' => __( 'Enable / Disable:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'checkbox',
- 'label' => __( 'Enable Email Notification', 'upi-qr-code-payment-for-woocommerce' ),
- 'description' => __( 'Enable this option if you want to send payment link to the customer via email after placing the successful order.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => 'yes',
- 'desc_tip' => false,
- ],
- 'email_subject' => [
- 'title' => __( 'Email Subject:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'text',
- 'desc_tip' => false,
- 'description' => sprintf( __( 'Available placeholders: %s', 'upi-qr-code-payment-for-woocommerce' ), '<code>' . esc_html( 'Atomic Edge, {site_address}, {order_date}, {order_number}' ) . '</code>' ),
- 'default' => __( '[Atomic Edge]: Payment pending #{order_number}', 'upi-qr-code-payment-for-woocommerce' ),
- ],
- 'email_heading' => [
- 'title' => __( 'Email Heading:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'text',
- 'desc_tip' => false,
- 'description' => sprintf( __( 'Available placeholders: %s', 'upi-qr-code-payment-for-woocommerce' ), '<code>' . esc_html( 'Atomic Edge, {site_address}, {order_date}, {order_number}' ) . '</code>' ),
- 'default' => __( 'Thank you for your order', 'upi-qr-code-payment-for-woocommerce' ),
- ],
- 'additional_content' => [
- 'title' => __( 'Email Body Text:', 'upi-qr-code-payment-for-woocommerce' ),
- 'type' => 'textarea',
- 'description' => __( 'This text will be attached to the On Hold email template sent to customer. Use {upi_pay_link} to add the link of payment page.', 'upi-qr-code-payment-for-woocommerce' ),
- 'default' => __( 'Please complete the payment via UPI by going to this link: {upi_pay_link} (ignore if already done).', 'upi-qr-code-payment-for-woocommerce' ),
- 'desc_tip' => false,
- ],
- ];
- }
-
- /**
- * Display the UPi Id field
- */
- public function payment_fields() {
- global $woocommerce;
-
- $order_id = $woocommerce->session->order_awaiting_payment ?? 0;
-
- if ( $order_id ) {
- $order = wc_get_order( $order_id );
- if ( is_a( $order, 'WC_Order' ) ) {
- $payment_upi_id = $order->get_meta( '_transaction_upi_id', true );
- }
- }
-
- $upi_address = $upi_handle = '';
- if ( isset( $payment_upi_id ) && ! empty( $payment_upi_id ) ) {
- $payment_upi_id = explode( '@', $payment_upi_id );
- if ( is_array( $payment_upi_id ) && count( $payment_upi_id ) == 2 ) {
- $upi_address = $payment_upi_id[0];
- $upi_handle = $payment_upi_id[1];
- }
- }
-
- // display description before the payment form
- if ( ! empty( $this->description ) ) {
- // display the description with <p> tags
- echo wp_kses_post( wpautop( wptexturize( $this->description ) ) );
- }
-
- $handles = array_unique( apply_filters( 'upiwc_upi_handle_list', [ 'airtel', 'airtelpaymentsbank', 'apb', 'apl', 'allbank', 'albk', 'allahabadbank', 'andb', 'axisgo', 'axis', 'axisbank', 'axisb', 'okaxis', 'abfspay', 'axl', 'barodampay', 'barodapay', 'boi', 'cnrb', 'csbpay', 'csbcash', 'centralbank', 'cbin', 'cboi', 'cub', 'dbs', 'dcb', 'dcbbank', 'denabank', 'equitas', 'federal', 'fbl', 'finobank', 'hdfcbank', 'payzapp', 'okhdfcbank', 'rajgovhdfcbank', 'hsbc', 'imobile', 'pockets', 'ezeepay', 'eazypay', 'idbi', 'idbibank', 'idfc', 'idfcbank', 'idfcnetc', 'cmsidfc', 'indianbank', 'indbank', 'indianbk', 'iob', 'indus', 'indusind', 'icici', 'myicici', 'okicici', 'ikwik', 'ibl', 'jkb', 'jsbp', 'kbl', 'karb', 'kbl052', 'kvb', 'karurvysyabank', 'kvbank', 'kotak', 'kaypay', 'kmb', 'kmbl', 'okbizaxis', 'obc', 'paytm', 'pingpay', 'psb', 'pnb', 'sib', 'srcb', 'sc', 'scmobile', 'scb', 'scbl', 'sbi', 'oksbi', 'syndicate', 'syndbank', 'synd', 'lvb', 'lvbank', 'rbl', 'tjsb', 'uco', 'unionbankofindia', 'unionbank', 'uboi', 'ubi', 'united', 'utbi', 'upi', 'vjb', 'vijb', 'vijayabank', 'ubi', 'yesbank', 'ybl', 'yesbankltd' ] ) );
- sort( $handles );
-
- $required = '';
- $upi_address = ( isset( $_POST['customer_upiwc_address'] ) ) ? sanitize_text_field( wp_unslash( $_POST['customer_upiwc_address'] ) ) : $upi_address;
- $placeholder = ( 'show_handle' === $this->upi_address ) ? 'mobilenumber' : 'mobilenumber@oksbi';
- $placeholder = apply_filters( 'upiwc_upi_address_placeholder', $placeholder );
-
- if ( 'yes' === $this->require_upi ) {
- $required = ' <span class="required">*</span>';
- }
-
- if ( in_array( $this->upi_address, [ 'show', 'show_handle' ] ) ) {
- ?>
- <fieldset id="upiwc-checkout-payment-form" class="upiwc-checkout-payment-form wc-payment-form">
- <?php do_action( 'woocommerce_upi_form_start', $this->id ); ?>
- <div class="upiwc-input">
- <label><?php echo esc_html__( 'UPI Address', 'upi-qr-code-payment-for-woocommerce' ) . $required; ?></label>
- <div class="upiwc-input-field">
- <input id="upiwc-address" pattern="[a-zA-Z0-9]+" class="upiwc-address <?php echo esc_attr( str_replace( '_', '-', $this->upi_address ) ); ?>" name="customer_upiwc_address" type="text" autocomplete="off" placeholder="e.g. <?php echo esc_attr( $placeholder ); ?>" value="<?php echo esc_attr( $upi_address ); ?>">
- <?php if ( 'show_handle' === $this->upi_address ) { ?>
- <select id="upiwc-handle" name="customer_upiwc_handle" style="width: 100%;"><option selected disabled hidden value=""><?php esc_html_e( '-- Select --', 'upi-qr-code-payment-for-woocommerce' ); ?></option>
- <?php
- foreach ( $handles as $handle ) {
- echo '<option value="' . $handle . '" ' . selected( $upi_handle, $handle, false ) . '>' . $handle . '</option>';
- }
- ?>
- </select>
- <?php } ?>
- </div>
- </div>
- <?php do_action( 'woocommerce_upi_form_end', $this->id ); ?>
- </fieldset>
- <script type="text/javascript">
- ( function( $ ) {
- if ( $( '#upiwc-handle' ).length ) {
- var upiwcSelect = $( "#upiwc-handle" ).selectize( {
- create: <?php echo apply_filters( 'upiwc_create_upi_handle', 'false' ); ?>,
- } );
- <?php if ( ! empty( $upi_handle ) ) { ?>
- var upiwcSelectize = upiwcSelect[0].selectize;
- upiwcSelectize.setValue( upiwcSelectize.search( '<?php echo $upi_handle; ?>').items[0].id );
- <?php } ?>
- }
- } )( jQuery );
- </script>
- <?php
- }
- }
-
- /**
- * Validate UPI ID field
- */
- public function validate_fields() {
- if ( empty( $_POST['customer_upiwc_address'] ) && in_array( $this->upi_address, [ 'show', 'show_handle' ] ) && 'yes' === $this->require_upi ) {
- wc_add_notice( __( '<strong>UPI Address</strong> is a required field.', 'upi-qr-code-payment-for-woocommerce' ), 'error' );
- return false;
- }
-
- if ( empty( $_POST['customer_upiwc_handle'] ) && 'show_handle' === $this->upi_address && 'yes' === $this->require_upi ) {
- wc_add_notice( __( '<strong>UPI Handle</strong> is a required field.', 'upi-qr-code-payment-for-woocommerce' ), 'error' );
- return false;
- }
-
- $regex = '/^[_a-z0-9-]+(.[_a-z0-9-]+)*@[a-z0-9-]+(.[a-z0-9-]+)*$/i';
- if ( 'show_handle' === $this->upi_address ) {
- $regex = '/^[_a-z0-9-]+(.[_a-z0-9-]+)*$/i';
- }
- if ( in_array( $this->upi_address, [ 'show', 'show_handle' ] ) && 'yes' === $this->require_upi && ! preg_match( $regex, sanitize_text_field( $_POST['customer_upiwc_address'] ) ) ) {
- wc_add_notice( __( 'Please enter a <strong>valid UPI Address</strong>!', 'upi-qr-code-payment-for-woocommerce' ), 'error' );
- return false;
- }
-
- return true;
- }
-
- /**
- * Custom CSS and JS
- */
- public function payment_scripts() {
- if ( 'no' === $this->enabled ) {
- return;
- }
-
- if ( is_checkout() && 'hide' !== $this->upi_address ) {
- wp_enqueue_style( 'upiwc-selectize', plugins_url( 'css/selectize.min.css', __FILE__ ), [], '0.15.2' );
- wp_enqueue_style( 'upiwc-checkout', plugins_url( 'css/checkout.min.css', __FILE__ ), [ 'upiwc-selectize' ], UPIWC_VERSION );
-
- wp_enqueue_script( 'upiwc-selectize', plugins_url( 'js/selectize.min.js', __FILE__ ), [ 'jquery' ], '0.15.2', false );
- }
-
- $order_id = get_query_var( 'order-pay' );
-
- if ( ! $order_id ) {
- return;
- }
-
- $order = wc_get_order( $order_id );
-
- if ( ! is_a( $order, 'WC_Order' ) ) {
- return;
- }
-
- wp_register_style( 'upiwc-jquery-confirm', plugins_url( 'css/jquery-confirm.min.css', __FILE__ ), [], '3.3.4' );
- wp_register_style( 'upiwc-payment', plugins_url( 'css/payment.min.css', __FILE__ ), [ 'upiwc-jquery-confirm' ], UPIWC_VERSION );
-
- wp_register_script( 'upiwc-qr-code', plugins_url( 'js/easy.qrcode.min.js', __FILE__ ), [ 'jquery' ], '3.8.3', true );
- wp_register_script( 'upiwc-jquery-confirm', plugins_url( 'js/jquery-confirm.min.js', __FILE__ ), [ 'jquery' ], '3.3.4', true );
- wp_register_script( 'upiwc-payment', plugins_url( 'js/payment.min.js', __FILE__ ), [ 'jquery', 'upiwc-qr-code', 'upiwc-jquery-confirm' ], UPIWC_VERSION, true );
-
- $total = apply_filters( 'upiwc_order_total_amount', $order->get_total(), $order );
- $payee_vpa = $this->get_vpa( $order );
-
- wp_localize_script(
- 'upiwc-payment',
- 'upiwcData',
- [
- 'order_id' => $order->get_id(),
- 'order_amount' => $total,
- 'order_key' => $order->get_order_key(),
- 'order_number' => htmlentities( $order->get_order_number() ),
- 'confirm_message' => $this->confirm_message,
- 'callback_url' => add_query_arg( [ 'wc-api' => 'upiwc-payment' ], trailingslashit( get_home_url() ) ),
- 'payment_url' => $order->get_checkout_payment_url(),
- 'cancel_url' => apply_filters( 'upiwc_payment_cancel_url', wc_get_checkout_url(), $this->get_return_url( $order ), $order ),
- 'transaction_id' => $this->transaction_id,
- 'transaction_image' => $this->transaction_image,
- 'mc_code' => $this->mc_code ? $this->mc_code : 8931,
- 'btn_timer' => apply_filters( 'upiwc_enable_button_timer', true ),
- 'btn_show_interval' => apply_filters( 'upiwc_button_show_interval', 30000 ),
- 'theme' => $this->theme ? $this->theme : 'light',
- 'payer_vpa' => htmlentities( strtolower( $order->get_meta( '_transaction_upi_id', true ) ) ),
- 'payee_vpa' => $payee_vpa,
- 'payee_name' => preg_replace( '/[^p{L}p{N}s]/u', '', $this->name ),
- 'is_mobile' => ( wp_is_mobile() ) ? 'yes' : 'no',
- 'nonce' => wp_create_nonce( 'upiwc_' . $order->get_order_key() ),
- 'app_version' => UPIWC_VERSION,
- ]
- );
- }
-
- /**
- * Process the payment and return the result
- *
- * @param int $order_id
- * @return array
- */
- public function process_payment( $order_id ) {
- $order = wc_get_order( $order_id );
- $upi_address = ! empty( $_POST['customer_upiwc_address'] ) ? sanitize_text_field( wp_unslash( $_POST['customer_upiwc_address'] ) ) : '';
- $upi_address = ! empty( $_POST['customer_upiwc_handle'] ) ? $upi_address . '@' . sanitize_text_field( wp_unslash( $_POST['customer_upiwc_handle'] ) ) : $upi_address;
- $message = __( 'Awaiting UPI Payment!', 'upi-qr-code-payment-for-woocommerce' );
-
- // Mark as pending (we're awaiting the payment)
- $order->update_status( $this->default_status );
-
- // update meta
- $order->update_meta_data( '_upiwc_order_paid', 'no' );
-
- if ( ! empty( $upi_address ) ) {
- $order->update_meta_data( '_transaction_upi_id', preg_replace( '/s+/', '', $upi_address ) );
- $message .= '<br />' . sprintf( __( 'UPI ID: %s', 'upi-qr-code-payment-for-woocommerce' ), preg_replace( '/s+/', '', $upi_address ) );
- }
-
- // add some order notes
- $order->add_order_note( apply_filters( 'upiwc_process_payment_note', $message, $order ), false );
- $order->save();
-
- if ( apply_filters( 'upiwc_payment_empty_cart', false ) ) {
- // Empty cart
- WC()->cart->empty_cart();
- }
-
- do_action( 'upiwc_after_payment_init', $order_id, $order );
-
- // check plugin settings
- if ( 'yes' === $this->enabled && 'yes' === $this->email_enabled && $order->has_status( 'pending' ) ) {
- // Get an instance of the WC_Email_Customer_On_Hold_Order object
- $wc_email = WC()->mailer()->get_emails()['WC_Email_Customer_On_Hold_Order'];
-
- // Send "New Email" notification
- $wc_email->trigger( $order_id );
- }
-
- // Return redirect
- return [
- 'result' => 'success',
- 'redirect' => apply_filters( 'upiwc_process_payment_redirect', $order->get_checkout_payment_url( true ), $order ),
- ];
- }
-
- /**
- * Show UPI details as html output
- *
- * @param WC_Order $order_id Order id.
- * @return string
- */
- public function generate_qr_code( $order_id ) {
- $order = wc_get_order( $order_id );
- $payee_vpa = $this->get_vpa( $order );
-
- // enqueue required css files
- wp_enqueue_style( 'upiwc-jquery-confirm' );
- wp_enqueue_style( 'upiwc-payment' );
-
- // enqueue required js files
- wp_enqueue_script( 'upiwc-qr-code' );
- wp_enqueue_script( 'upiwc-jquery-confirm' );
- wp_enqueue_script( 'upiwc-payment' );
-
- $hide_mobile_qr = ( wp_is_mobile() && 'no' === $this->qrcode_mobile );
- $show_intent_btn = ( wp_is_mobile() && 'yes' === $this->intent );
- $show_qr_download = ( wp_is_mobile() && 'yes' === $this->download_qr );
-
- $qr_code_class = ( $hide_mobile_qr ) ? 'upiwc-hide' : 'upiwc-show';
- $form_class = ( 'hide' !== $this->transaction_id || 'hide' !== $this->transaction_image ) ? 'upiwc-payment-confirm-form-container' : 'upiwc-payment-confirm-form-container upiwc-hidden';
-
- // add html output on payment endpoint
- if ( 'yes' === $this->enabled && $order->needs_payment() === true && $order->has_status( $this->default_status ) && ! empty( $payee_vpa ) ) {
- ?>
- <section class="upiwc-section">
- <div class="upiwc-info">
- <h6 class="upiwc-waiting-text"><?php esc_html_e( 'Please wait and don't press back or refresh this page while we are processing your payment.', 'upi-qr-code-payment-for-woocommerce' ); ?></h6>
- <?php do_action( 'upiwc_after_before_title', $order ); ?>
- <div class="upiwc-buttons">
- <button id="upiwc-processing" class="btn button" disabled="disabled"><?php esc_html_e( 'Waiting for payment...', 'upi-qr-code-payment-for-woocommerce' ); ?></button>
- <button id="upiwc-confirm-payment" class="btn button" style="display: none;"><?php echo esc_html( apply_filters( 'upiwc_payment_button_text', $this->pay_button ) ); ?></button>
- <?php if ( apply_filters( 'upiwc_show_cancel_button', true ) ) { ?>
- <button id="upiwc-cancel-payment" class="btn button" style="display: none;"><?php esc_html_e( 'Cancel', 'upi-qr-code-payment-for-woocommerce' ); ?></button>
- <?php } ?>
- </div>
- <?php if ( apply_filters( 'upiwc_show_choose_payment_method', true ) ) { ?>
- <div class="upiwc-return-link" style="margin-top: 5px;"><?php esc_html_e( 'Choose another payment method', 'upi-qr-code-payment-for-woocommerce' ); ?></div>
- <?php } ?>
- <?php do_action( 'upiwc_after_payment_buttons', $order ); ?>
- <div id="upiwc-payment-success-container" style="display: none;"></div>
- </div>
- <div class="upiwc-modal-header">
- <div class="upiwc-payment-header">
- <div class="upiwc-payment-merchant-name"><?php echo preg_replace( '/[^p{L}p{N}s]/u', '', $this->name ); ?></div>
- <div class="upiwc-payment-order-info">
- <span class="upiwc-payment-prefix"><?php esc_html_e( 'Order ID: ', 'upi-qr-code-payment-for-woocommerce' ); ?></span>
- <span class="upiwc-payment-order-id">#<?php echo esc_html( $order->get_order_number() ); ?></span>
- </div>
- </div>
- </div>
- <div class="upiwc-modal-content">
- <div class="upiwc-payment-content">
- <div id="upiwc-payment-qr-code" class="upiwc-payment-qr-code <?php echo esc_attr( $qr_code_class ); ?>"></div>
- <div class="upiwc-payment-actions">
- <div class="upiwc-payment-upi-id" title="<?php esc_attr_e( 'Click to Copy', 'upi-qr-code-payment-for-woocommerce' ); ?>"><?php echo $payee_vpa; ?></div>
- <?php if ( $show_qr_download ) { ?>
- <button type="button" id="upi-download" class="btn upiwc-payment-button"><?php echo apply_filters( 'upiwc_donwload_button_text', __( 'Download QR Code', 'upi-qr-code-payment-for-woocommerce' ) ); ?></button>
- <?php } ?>
- </div>
- <?php if ( $show_intent_btn ) { ?>
- <div class="upiwc-payment-container">
- <?php if ( stripos( $_SERVER['HTTP_USER_AGENT'], 'iPhone' ) !== false ) { ?>
- <div class="upiwc-payment-hint"><?php esc_html_e( 'Pay with installed app', 'upi-qr-code-payment-for-woocommerce' ); ?></div>
- <?php } else { ?>
- <div class="upiwc-payment-hint"><?php esc_html_e( 'Pay with installed app, or use others', 'upi-qr-code-payment-for-woocommerce' ); ?></div>
- <?php } ?>
- <div class="upiwc-payment-btn-container">
- <div class="upiwc-payment-btn" data-type="gpay">
- <div class="app-logo">
- <img src="<?php echo esc_url( UPIWC_URL . 'includes/icon/googlepay.svg' ); ?>" alt="google-pay-app-logo" class="logo">
- </div>
- <div class="app-title"><?php esc_html_e( 'Google Pay', 'upi-qr-code-payment-for-woocommerce' ); ?></div>
- </div>
- <div class="upiwc-payment-btn" data-type="phonepe">
- <div class="app-logo">
- <img src="<?php echo esc_url( UPIWC_URL . 'includes/icon/phonepe.svg' ); ?>" alt="phonepe-app-logo" class="logo">
- </div>
- <div class="app-title"><?php esc_html_e( 'PhonePe', 'upi-qr-code-payment-for-woocommerce' ); ?></div>
- </div>
- <div class="upiwc-payment-btn" data-type="paytm">
- <div class="app-logo">
- <img src="<?php echo esc_url( UPIWC_URL . 'includes/icon/paytm.svg' ); ?>" alt="paytm-app-logo" class="logo">
- </div>
- <div class="app-title"><?php esc_html_e( 'Paytm', 'upi-qr-code-payment-for-woocommerce' ); ?></div>
- </div>
- <?php if ( stripos( $_SERVER['HTTP_USER_AGENT'], 'iPhone' ) === false ) { ?>
- <div class="upiwc-payment-btn" data-type="upi">
- <div class="app-logo">
- <img src="<?php echo esc_url( UPIWC_URL . 'includes/icon/bhim.svg' ); ?>" alt="bhim-app-logo" class="logo">
- </div>
- <div class="app-title"><?php esc_html_e( 'Others', 'upi-qr-code-payment-for-woocommerce' ); ?></div>
- </div>
- <?php } ?>
- </div>
- <div class="upiwc-payment-intent-error" style="display: none;"></div>
- </div>
- <?php } ?>
- <div class="upiwc-payment-info">
- <div class="upiwc-payment-info-text">
- <?php
- if ( wp_is_mobile() ) {
- echo wptexturize( $this->instructions_mobile );
- } else {
- echo wptexturize( $this->instructions );
- }
- ?>
- </div>
- <?php if ( ! $show_intent_btn ) { ?>
- <div class="upiwc-payment-info-logo">
- <img src="<?php echo esc_url( UPIWC_URL . 'includes/icon/googlepay.svg' ); ?>" alt="google-pay-app-logo" class="logo">
- <img src="<?php echo esc_url( UPIWC_URL . 'includes/icon/phonepe.svg' ); ?>" alt="phonepe-app-logo" class="logo">
- <img src="<?php echo esc_url( UPIWC_URL . 'includes/icon/paytm.svg' ); ?>" alt="paytm-app-logo" class="logo">
- <img src="<?php echo esc_url( UPIWC_URL . 'includes/icon/bhim.svg' ); ?>" alt="bhim-app-logo" class="logo">
- </div>
- <?php } ?>
- </div>
- <div class="upiwc-payment-confirm" style="display: none;">
- <div class="<?php echo esc_attr( $form_class ); ?>">
- <form id="upiwc-payment-confirm-form" class="upiwc-payment-confirm-form">
- <?php if ( 'hide' !== $this->transaction_id ) { ?>
- <div class="upiwc-form-row">
- <label for="upiwc-payment-transaction-number">
- <strong><?php esc_html_e( 'Enter 12-digit Transaction / UTR / Reference ID:', 'upi-qr-code-payment-for-woocommerce' ); ?></strong>
- <?php if ( 'show_require' === $this->transaction_id ) { ?>
- <span class="field-required">*</span>
- <?php } ?>
- </label>
- <input type="text" id="upiwc-payment-transaction-number" name="upiwc_transaction_id" maxlength="12" onkeypress="return upiwcIsNumber(event)" />
- </div>
- <?php } ?>
- <?php if ( 'hide' !== $this->transaction_image ) { ?>
- <div class="upiwc-form-row">
- <label for="upiwc-payment-file">
- <strong><?php esc_html_e( 'Upload Screenshot:', 'upi-qr-code-payment-for-woocommerce' ); ?></strong>
- <?php if ( 'show_require' === $this->transaction_image ) { ?>
- <span class="field-required">*</span>
- <?php } ?>
- </label>
- <input type="file" id="upiwc-payment-file" name="upiwc_file" accept=".jpg, .jpeg, .png," />
- </div>
- <?php } ?>
- </form>
- <div class="upiwc-payment-error" style="display: none;"></div>
- </div>
- <div class="upiwc-payment-confirm-text"><?php echo $this->confirm_message; ?></div>
- </div>
- </div>
- </div>
- </section>
- <?php
- }
- }
-
- /**
- * Process payment verification.
- */
- public function capture_payment() {
- // get order id
- if ( ( 'POST' !== $_SERVER['REQUEST_METHOD'] ) || ! isset( $_GET['wc-api'] ) || ( 'upiwc-payment' !== $_GET['wc-api'] ) ) {
- return;
- }
-
- if ( empty( $_POST['upiwc_nonce'] ) || empty( $_POST['upiwc_order_key'] ) ) {
- $title = __( 'Mandatory fields are missing.', 'upi-qr-code-payment-for-woocommerce' );
- wp_die( $title, get_bloginfo( 'name' ) );
- exit;
- }
-
- // Get order first to verify nonce
- $post_order_key = sanitize_text_field( $_POST['upiwc_order_key'] );
- $post_order_id = absint( $_POST['upiwc_order_id'] );
- $order = wc_get_order( $post_order_id );
-
- if ( ! is_a( $order, 'WC_Order' ) ) {
- $order_id = wc_get_order_id_by_order_key( $post_order_key );
- $order = wc_get_order( $order_id );
- }
-
- if ( ! is_a( $order, 'WC_Order' ) ) {
- $title = __( 'Order can't be found against this Order ID.', 'upi-qr-code-payment-for-woocommerce' );
- wp_die( $title, get_bloginfo( 'name' ) );
- exit;
- }
-
- // Verify order key matches
- if ( $order->get_order_key() !== $post_order_key ) {
- $title = __( 'Invalid order key.', 'upi-qr-code-payment-for-woocommerce' );
- wp_die( $title, get_bloginfo( 'name' ) );
- exit;
- }
-
- // Verify nonce is bound to this order
- if ( ! wp_verify_nonce( $_POST['upiwc_nonce'], 'upiwc_' . $order->get_order_key() ) ) {
- $title = __( 'Security check failed!', 'upi-qr-code-payment-for-woocommerce' );
-
- wp_die( $title, get_bloginfo( 'name' ) );
- exit;
- }
-
- // Verify order needs payment and is in expected status
- if ( ! $order->needs_payment() ) {
- $title = __( 'Order does not need payment.', 'upi-qr-code-payment-for-woocommerce' );
- wp_die( $title, get_bloginfo( 'name' ) );
- exit;
- }
-
- if ( ! $order->has_status( $this->default_status ) ) {
- $title = __( 'Order status mismatch.', 'upi-qr-code-payment-for-woocommerce' );
- wp_die( $title, get_bloginfo( 'name' ) );
- exit;
- }
-
- // check if it an order
- if ( is_a( $order, 'WC_Order' ) ) {
- // set upi id as trnsaction id
- if ( isset( $_POST['upiwc_transaction_id'] ) && ! empty( $_POST['upiwc_transaction_id'] ) ) {
- $transaction_id = sanitize_text_field( $_POST['upiwc_transaction_id'] );
-
- $old_orders = wc_get_orders(
- [
- 'transaction_id' => $transaction_id,
- 'limit' => 1,
- ]
- );
- if ( ! empty( $old_orders ) ) {
- // old transaction id.
- $title = __( 'Transaction ID was already used in the previous order.', 'upi-qr-code-payment-for-woocommerce' );
-
- wp_die( $title, get_bloginfo( 'name' ) );
- exit;
- }
-
- $order->set_transaction_id( $transaction_id );
- }
-
- $status_to_update = apply_filters( 'upiwc_capture_payment_order_status', $this->payment_status, $order );
- $order->update_status( $status_to_update );
-
- // reduce stock level
- wc_reduce_stock_levels( $order->get_id() );
-
- // check order if it actually needs payment
- if ( in_array( $status_to_update, apply_filters( 'upiwc_valid_order_status_for_note', [ 'pending', 'on-hold' ] ) ) ) {
- // set order note
- $order->add_order_note( __( 'Payment primarily completed. Needs shop owner's verification.', 'upi-qr-code-payment-for-woocommerce' ), false );
- }
-
- // update post meta
- $order->update_meta_data( '_upiwc_order_paid', 'yes' );
-
- if ( ! empty( $_FILES['upiwc_file'] ) && ! empty( $_FILES['upiwc_file']['name'] ) ) {
- $allowed_extensions = [ 'image/jpeg', 'image/png' ];
-
- if ( in_array( $_FILES['upiwc_file']['type'], $allowed_extensions ) ) {
- require_once ABSPATH . 'wp-admin/includes/media.php';
- require_once ABSPATH . 'wp-admin/includes/file.php';
- require_once ABSPATH . 'wp-admin/includes/image.php';
-
- $attachment_id = media_handle_upload( 'upiwc_file', 0 );
-
- if ( is_wp_error( $attachment_id ) ) {
- $order->add_order_note( $attachment_id->get_error_message(), false );
- } else {
- $order->update_meta_data( '_upiwc_order_attachment_id', $attachment_id );
- $order_note = __( 'Screenshot uploaded successfully.', 'upi-qr-code-payment-for-woocommerce' );
- $order->add_order_note( sprintf( '%s <a href="%s" target="_blank">%s</a>', $order_note, wp_get_attachment_url( esc_attr( $attachment_id ) ), __( 'View', 'upi-qr-code-payment-for-woocommerce' ) ), false );
- }
- } else {
- $order->add_order_note( __( 'File type is not valid!', 'upi-qr-code-payment-for-woocommerce' ), false );
- }
- }
-
- $order->save();
-
- // add custom actions
- do_action( 'upiwc_after_payment_verify', $order->get_id(), $order );
-
- // create redirect
- wp_safe_redirect( apply_filters( 'upiwc_payment_redirect_url', $this->get_return_url( $order ), $order ) );
- exit;
- } else {
- // create redirect
- $title = __( 'Order can't be found against this Order ID. If the money debited from your account, please Contact with Site Administrator for further action.', 'upi-qr-code-payment-for-woocommerce' );
-
- wp_die( $title, get_bloginfo( 'name' ) );
- exit;
- }
- }
-
- /**
- * Customize the WC emails template.
- *
- * @access public
- * @param string $formated_subject
- * @param WC_Order $order
- * @param object $object
- */
- public function email_subject_pending_order( $formated_subject, $order, $object ) {
- // We exit for 'order-accepted' custom order status
- if ( is_a( $order, 'WC_Order' ) && $this->id === $order->get_payment_method() && 'yes' === $this->enabled && $order->has_status( 'pending' ) ) {
- return $object->format_string( $this->email_subject );
- }
-
- return $formated_subject;
- }
-
- /**
- * Customize the WC emails template.
- *
- * @access public
- * @param string $formated_subject
- * @param WC_Order $order
- * @param object $object
- */
- public function email_heading_pending_order( $formated_heading, $order, $object ) {
- // We exit for 'order-accepted' custom order status
- if ( is_a( $order, 'WC_Order' ) && $this->id === $order->get_payment_method() && 'yes' === $this->enabled && $order->has_status( 'pending' ) ) {
- return $object->format_string( $this->email_heading );
- }
-
- return $formated_heading;
- }
-
- /**
- * Customize the WC emails template.
- *
- * @access public
- * @param string $formated_subject
- * @param WC_Order $order
- * @param object $object
- */
- public function email_additional_content_pending_order( $formated_additional_content, $order, $object ) {
- // We exit for 'order-accepted' custom order status
- if ( is_a( $order, 'WC_Order' ) && $this->id === $order->get_payment_method() && 'yes' === $this->enabled && $order->has_status( 'pending' ) ) {
- return $object->format_string( str_replace( '{upi_pay_link}', $order->get_checkout_payment_url( true ), $this->additional_content ) );
- }
-
- return $formated_additional_content;
- }
-
- /**
- * Custom order received text.
- *
- * @param string $text Default text.
- * @param WC_Order $order Order data.
- * @return string
- */
- public function order_received_text( $text, $order ) {
- if ( is_a( $order, 'WC_Order' ) && $this->id === $order->get_payment_method() && ! empty( $this->thank_you ) ) {
- return esc_html( $this->thank_you );
- }
-
- return $text;
- }
-
- /**
- * Custom checkout URL.
- *
- * @param string $url Default URL.
- * @param WC_Order $order Order data.
- * @return string
- */
- public function custom_checkout_url( $url, $order ) {
- if ( is_a( $order, 'WC_Order' ) && $this->id === $order->get_payment_method() && ( ( $order->has_status( 'on-hold' ) && $this->default_status === 'on-hold' ) || ( $order->has_status( 'pending' ) && apply_filters( 'upiwc_custom_checkout_url', false ) ) ) ) {
- return esc_url( remove_query_arg( 'pay_for_order', $url ) );
- }
-
- return $url;
- }
-
- /**
- * Add content to the WC emails.
- *
- * @access public
- * @param WC_Order $order
- * @param bool $sent_to_admin
- * @param bool $plain_text
- * @param object $email
- */
- public function email_instructions( $order, $sent_to_admin, $plain_text, $email ) {
- // check upi gateway name
- if ( is_a( $order, 'WC_Order' ) && 'yes' === $this->enabled && 'yes' === $this->email_enabled && ! empty( $this->additional_content ) && ! $sent_to_
