?HAMA

Navigation

Breadcrumbs

/ / home / nshryvcy / blissfulnepal.com / wp-content / plugins / tourmaster / single / user

Create

Create File | Create Folder | Upload Files | Run Command

Edit File Size: 11.33 KB

/home/nshryvcy/blissfulnepal.com/wp-content/plugins/tourmaster/single/user/user-update.php

Text Base64

<?php
	
	// update the user data for change password page
	if( !empty($_GET['page_type']) && $_GET['page_type'] == 'change-password' ){

if( isset($_POST['security']) ){
			global $current_user, $tourmaster_updated_status;

if( wp_verify_nonce($_POST['security'], 'tourmaster-change-password') ){
				
				// check if every field is filled
				if( empty($_POST['old-password']) || empty($_POST['new-password']) || empty($_POST['confirm-password']) ){
					$tourmaster_updated_status = new WP_ERROR('1', esc_html__('Please fill all required fields.', 'tourmaster'));

// check if new password is matched
				}else if( $_POST['new-password'] != $_POST['confirm-password'] ){
					$tourmaster_updated_status = new WP_ERROR('3', esc_html__('Password does not match the confirm password.', 'tourmaster'));
				
				// check if old password is correct
				}else if( !wp_check_password($_POST['old-password'], $current_user->data->user_pass, $current_user->data->ID) ){
					$tourmaster_updated_status = new WP_ERROR('4', esc_html__('Old password incorrect.', 'tourmaster'));
				
				// update the data
				}else{
					wp_update_user(array( 
						'ID' => $current_user->ID, 
						'user_pass' => $_POST['new-password']
					));
					$tourmaster_updated_status = true;
				}
			}else{
				$tourmaster_updated_status = new WP_ERROR('5', esc_html__('The session is expired. Please refesh the page to try again.', 'tourmaster'));
			}

unset($_POST['security']);
			unset($_POST['old-password']);
			unset($_POST['new-password']);
			unset($_POST['confirm-password']);
		}

}

// remove booking data
	if( !empty($_GET['action']) && $_GET['action'] == 'remove' && !empty($_GET['id'])){
		global $current_user;

if( is_numeric($_GET['id']) ){

// remove room order
			if( !empty($_GET['page_type']) && $_GET['page_type'] == 'room-booking' ){
				global $wpdb;
				$updated = $wpdb->update("{$wpdb->prefix}tourmaster_room_order", 
					array('order_status' => 'cancel'),
					array('id' => $_GET['id'], 'user_id' => $current_user->data->ID),
					array('%s'),
					array('%d', '%d')
				);
				
				if( $updated ){
					$sql  = "SELECT DISTINCT room_id FROM {$wpdb->prefix}tourmaster_room_booking ";
					$sql .= $wpdb->prepare("WHERE order_id = %d", $_GET['id']);
					$results = $wpdb->get_results($sql);	
					
					$wpdb->delete("{$wpdb->prefix}tourmaster_room_booking", 
						array('order_id' => $_GET['id']), 
						array('%d')
					);

// update occupancy
					foreach( $results as $result ){
						tourmaster_room_check_occupied($result->room_id);
					}

tourmaster_room_mail_notification('booking-cancelled-mail', $_GET['id']);
				}

// remove tour order
			}else{
				$updated = tourmaster_update_booking_data(
					array('order_status' => 'cancel'),
					array('id' => $_GET['id'], 'user_id' => $current_user->data->ID),
					array('%s'),
					array('%d', '%d')
				);
	
				if( $updated ){
					tourmaster_mail_notification('booking-cancelled-mail', $_GET['id']);
				}
			}
			
		}

wp_redirect(remove_query_arg(array('action', 'id')));
	}

// tour submit payment evidence
	if( !empty($_POST['action']) && $_POST['action'] == 'payment-receipt' ){
		global $current_user, $wpdb;

if( !empty($_POST['id']) ){

// upload the file
			if( !empty($_FILES['receipt']['size']) ){
				if ( !function_exists('wp_handle_upload') ) {
				    require_once(ABSPATH . 'wp-admin/includes/file.php');
				}
				add_filter('upload_dir', 'tourmaster_set_receipt_upload_folder');
				$uploaded_file = wp_handle_upload($_FILES['receipt'],  array('test_form' => false));
				remove_filter('upload_dir', 'tourmaster_set_receipt_upload_folder');
			}

// upload error
			if( empty($uploaded_file) || !empty($uploaded_file['error']) ){
				wp_redirect(add_query_arg(array('error_code'=>'cannot_upload_file')));

// upload success
			}else{
				// get old payment info
				$result = tourmaster_get_booking_data(array('id' => $_POST['id']), array('single' => true));
				$payment_infos = json_decode($result->payment_info, true);
				$payment_infos = tourmaster_payment_info_format($payment_infos, $result->order_status);
				$price_settings = tourmaster_get_price_settings($result->tour_id, $payment_infos, $result->total_price, $result->travel_date);

// payment info
				$payment_info = array(
					'payment_method' => 'receipt'
				);

if( !empty($_POST['transaction-id']) ){
					$payment_info['transaction_id'] = $_POST['transaction-id'];
				}

if( empty($_POST['payment-type']) || $_POST['payment-type'] == 'full' ){
					$payment_info['amount'] = $price_settings['full-payment-amount'];
					$submission_amount = $payment_info['amount'];
				}else{
					$payment_info['deposit_rate'] = $price_settings['next-deposit-percent'];
					$payment_info['deposit_price'] = $price_settings['next-deposit-amount'];
					$submission_amount = $payment_info['deposit_price'];
				}

$payment_info['local_url'] = $uploaded_file['file'];
				$payment_info['file_url'] = $uploaded_file['url'];
				$payment_info['submission_date'] = current_time('mysql'); 
				$payment_info['payment_status'] = 'pending';
				$payment_infos[] = $payment_info;

// update database
				$update_status = $wpdb->update( "{$wpdb->prefix}tourmaster_order", 
					array(
						'order_status' => 'receipt-submitted',
						'payment_info' => json_encode($payment_infos),
						'payment_date' => current_time('mysql')
					), 
					array( 
						'id' => $_POST['id'], 
						'user_id' => $current_user->data->ID 
					), 
					array('%s', '%s'), 
					array('%d', '%d')
				);

tourmaster_mail_notification('receipt-submission-mail', $_POST['id'], '', array(
					'custom' => array(
						'payment-method' => 'receipt',
						'submission-date' => tourmaster_time_format($payment_info['submission_date']) . ' ' . tourmaster_date_format($payment_info['submission_date']),
						'submission-amount' => tourmaster_money_format($submission_amount),
						'transaction-id' => empty($payment_info['transaction_id'])? '': $payment_info['transaction_id']
					)
				));
				tourmaster_mail_notification('admin-payment-submitted-mail', $_POST['id']);
				
				wp_redirect(add_query_arg(array()));
			}
		}
	}

// room submit payment evidence
	if( !empty($_POST['action']) && $_POST['action'] == 'room-payment-receipt' ){
		global $current_user, $wpdb;

if( !empty($_POST['id']) ){

// upload error
			if( empty($uploaded_file) || !empty($uploaded_file['error']) ){
				wp_redirect(add_query_arg(array('error_code'=>'cannot_upload_file')));

// upload success
			}else{

// get old payment info
				$sql  = "SELECT total_price, payment_info FROM {$wpdb->prefix}tourmaster_room_order ";
				$sql .= $wpdb->prepare("WHERE id = %d", trim($_POST['id']));
				$result = $wpdb->get_row($sql);

$payment_infos = empty($result->payment_info)? array(): json_decode($result->payment_info, true);
				$price_settings = tourmaster_room_get_submit_receipt_settings($result->total_price, $payment_infos);

// payment info
				$payment_info = array(
					'payment_method' => 'receipt'
				);

if( !empty($_POST['transaction-id']) ){
					$payment_info['transaction_id'] = $_POST['transaction-id'];
				}
				if( empty($_POST['payment-type']) || $_POST['payment-type'] == 'full' ){
					$payment_info['amount'] = $price_settings['full-payment-amount'];
				}else{
					$payment_info['amount'] = $price_settings['next-deposit-amount'];
				}

// update database
				$wpdb->update(
					"{$wpdb->prefix}tourmaster_room_order", 
					array('payment_info'=> json_encode($payment_infos), 'order_status' => 'receipt-submitted'), 
					array('id' => trim($_POST['id'])),
					array('%s', '%s'),
					array('%d')
				);

// send an email
				tourmaster_room_mail_notification('receipt-submission-mail', $_POST['id'], '', array('custom' => $payment_info));
				tourmaster_room_mail_notification('admin-payment-submitted-mail', $_POST['id']);

wp_redirect(add_query_arg(array()));
			}
		}
	}

// process the submitted review
	if( !empty($_POST['review_id']) && is_numeric($_POST['review_id'])){

if( !empty($_GET['page_type']) && $_GET['page_type'] == 'room-reviews' ){

global $wpdb, $current_user;
			$sql  = "SELECT * FROM {$wpdb->prefix}tourmaster_room_order ";
			$sql .= $wpdb->prepare("WHERE id = %d ", $_POST['review_id']);
			$sql .= $wpdb->prepare("AND user_id = %d ", $current_user->data->ID);
			$result = $wpdb->get_row($sql);

if( !empty($result) && in_array($result->order_status, array('approved', 'online-paid', 'departed')) ){
				$review_score = empty($_POST['rating'])? 0: sanitize_text_field(tourmaster_process_post_data($_POST['rating']));
				$review_description = empty($_POST['description'])? '': sanitize_textarea_field(tourmaster_process_post_data($_POST['description']));

$room_ids = array();
				$booking_details = empty($result->booking_data)? array(): json_decode($result->booking_data, true);
				foreach( $booking_details as $booking_detail ){
					if( !in_array($booking_detail['room_id'], $room_ids) ){
						$room_ids[] = $booking_detail['room_id'];
					}
				}
				
				$contact_detail = empty($result->contact_info)? array(): json_decode($result->contact_info, true);
				foreach($room_ids as $room_id){
					$wpdb->insert("{$wpdb->prefix}tourmaster_room_review" ,array(
						'order_id' => $_POST['review_id'],
						'review_room_id' => $room_id,
						'reviewer_name' => $contact_detail['first_name'] . ' ' . $contact_detail['last_name'],
						'reviewer_email' => $contact_detail['email'],
						'review_date' => current_time('mysql'),
						'review_description' => $review_description,
						'review_score' => $review_score
					), array(
						'%d', '%d', '%s', '%s', '%s', '%s', '%d'
					));
				}
			}

}else{
			global $current_user;
	
			$result = tourmaster_get_booking_data(array( 
				'id' => sanitize_text_field($_POST['review_id'])
			), array('single' => true) );

if( !empty($result) && $result->order_status == 'departed' && $result->user_id == $current_user->data->ID ){
				$review_score = empty($_POST['rating'])? 0: sanitize_text_field(tourmaster_process_post_data($_POST['rating']));
				$review_type = empty($_POST['traveller-type'])? 'solo': sanitize_text_field(tourmaster_process_post_data($_POST['traveller-type']));
				$review_description = empty($_POST['description'])? '': sanitize_textarea_field(tourmaster_process_post_data($_POST['description']));

tourmaster_insert_review_data(array(
					'tour_id' => $result->tour_id,
					'score' => $review_score,
					'type' =>  $review_type,
					'description' => $review_description,
					'order_id' => $_POST['review_id']
				));
			}

// update the review score for each post
			if( !empty($_POST['tour_id']) && is_numeric($_POST['tour_id']) ){
				tourmaster_update_review_score($_POST['tour_id']);
			}
		}
		
		wp_redirect(add_query_arg(array()));
	}

Exit & Reset Text mode: syntax highlighting auto-detects file type.

Directory Contents

Dirs: 0 × Files: 6

Sort:

Enable drag-to-move

Name	Size	Perms	Modified	Actions
change-password.php	1.73 KB	lrw-r--r--	2024-05-28 15:48:43	Edit Download recursive recursive
dashboard.php	2.66 KB	lrw-r--r--	2024-05-28 15:48:43	Edit Download recursive recursive
edit-profile.php	2.40 KB	lrw-r--r--	2024-05-28 15:48:43	Edit Download recursive recursive
user-mobile-navigation.php	885 B	lrw-r--r--	2024-05-28 15:48:43	Edit Download recursive recursive
user-navigation.php	1.74 KB	lrw-r--r--	2024-05-28 15:48:43	Edit Download recursive recursive
user-update.php	11.33 KB	lrw-r--r--	2024-05-28 15:48:43	Edit Download recursive recursive