protected function process_api_error( $type ) {

[1000] Fix | Delete

[1001] Fix | Delete

$message = $this->api->get_error();

[1002] Fix | Delete

[1003] Fix | Delete

if ( empty( $message ) ) {

[1004] Fix | Delete

return;

[1005] Fix | Delete

}

[1006] Fix | Delete

[1007] Fix | Delete

$message = sprintf(

[1008] Fix | Delete

/* translators: %s - error message. */

[1009] Fix | Delete

esc_html__( 'Payment Error: %s', 'wpforms-lite' ),

[1010] Fix | Delete

$message

[1011] Fix | Delete

);

[1012] Fix | Delete

[1013] Fix | Delete

$this->display_error( $message );

[1014] Fix | Delete

[1015] Fix | Delete

if ( $type === 'subscription' ) {

[1016] Fix | Delete

$title = esc_html__( 'Stripe subscription payment stopped by error', 'wpforms-lite' );

[1017] Fix | Delete

} else {

[1018] Fix | Delete

$title = esc_html__( 'Stripe payment stopped by error', 'wpforms-lite' );

[1019] Fix | Delete

}

[1020] Fix | Delete

[1021] Fix | Delete

$this->log_error( $title, $this->api->get_exception() );

[1022] Fix | Delete

}

[1023] Fix | Delete

[1024] Fix | Delete

/**

[1025] Fix | Delete

* Display form error.

[1026] Fix | Delete

*

[1027] Fix | Delete

* @since 1.8.2

[1028] Fix | Delete

*

[1029] Fix | Delete

* @param string $error Error to display.

[1030] Fix | Delete

*/

[1031] Fix | Delete

private function display_error( $error ) {

[1032] Fix | Delete

[1033] Fix | Delete

if ( ! $error ) {

[1034] Fix | Delete

return;

[1035] Fix | Delete

}

[1036] Fix | Delete

[1037] Fix | Delete

$field_slug = $this->api->get_config( 'field_slug' );

[1038] Fix | Delete

[1039] Fix | Delete

// Check if the form contains a required credit card. If it does

[1040] Fix | Delete

// and there was an error, return the error to the user and prevent

[1041] Fix | Delete

// the form from being submitted. This should not occur under normal

[1042] Fix | Delete

// circumstances.

[1043] Fix | Delete

foreach ( $this->form_data['fields'] as $field ) {

[1044] Fix | Delete

[1045] Fix | Delete

if ( empty( $field['type'] ) || $field_slug !== $field['type'] ) {

[1046] Fix | Delete

continue;

[1047] Fix | Delete

}

[1048] Fix | Delete

[1049] Fix | Delete

if ( ! empty( $field['required'] ) ) {

[1050] Fix | Delete

wpforms()->obj( 'process' )->errors[ $this->form_id ]['footer'] = $error;

[1051] Fix | Delete

[1052] Fix | Delete

return;

[1053] Fix | Delete

}

[1054] Fix | Delete

}

[1055] Fix | Delete

}

[1056] Fix | Delete

[1057] Fix | Delete

/**

[1058] Fix | Delete

* Process card error from Stripe API exception and adds rate limit tracking.

[1059] Fix | Delete

*

[1060] Fix | Delete

* @since 1.8.2

[1061] Fix | Delete

*

[1062] Fix | Delete

* @param ApiErrorException $e Stripe API exception to process.

[1063] Fix | Delete

*/

[1064] Fix | Delete

public function process_card_error( $e ) {

[1065] Fix | Delete

[1066] Fix | Delete

if ( Helpers::get_stripe_mode() === 'test' ) {

[1067] Fix | Delete

return;

[1068] Fix | Delete

}

[1069] Fix | Delete

[1070] Fix | Delete

if ( ! is_a( $e, '\WPForms\Vendor\Stripe\Exception\CardException' ) ) {

[1071] Fix | Delete

return;

[1072] Fix | Delete

}

[1073] Fix | Delete

[1074] Fix | Delete

/**

[1075] Fix | Delete

* Allow to filter Stripe process card error.

[1076] Fix | Delete

*

[1077] Fix | Delete

* @since 1.8.2

[1078] Fix | Delete

*

[1079] Fix | Delete

* @param bool $flag True if any error.

[1080] Fix | Delete

*/

[1081] Fix | Delete

if ( ! apply_filters( 'wpforms_stripe_process_process_card_error', true ) ) { // phpcs:ignore WPForms.PHP.ValidateHooks.InvalidHookName

[1082] Fix | Delete

return;

[1083] Fix | Delete

}

[1084] Fix | Delete

[1085] Fix | Delete

$this->rate_limit->increment_attempts();

[1086] Fix | Delete

}

[1087] Fix | Delete

[1088] Fix | Delete

/**

[1089] Fix | Delete

* Check if rate limit is under threshold and passes.

[1090] Fix | Delete

*

[1091] Fix | Delete

* @since 1.8.2

[1092] Fix | Delete

*/

[1093] Fix | Delete

protected function is_rate_limit_ok() {

[1094] Fix | Delete

[1095] Fix | Delete

return $this->rate_limit->is_ok();

[1096] Fix | Delete

}

[1097] Fix | Delete

[1098] Fix | Delete

/**

[1099] Fix | Delete

* Check if any API errors occurs.

[1100] Fix | Delete

*

[1101] Fix | Delete

* @since 1.8.4

[1102] Fix | Delete

*

[1103] Fix | Delete

* @return bool

[1104] Fix | Delete

*/

[1105] Fix | Delete

protected function is_api_errors() {

[1106] Fix | Delete

[1107] Fix | Delete

$this->api->setup_stripe();

[1108] Fix | Delete

[1109] Fix | Delete

$error = $this->api->get_error();

[1110] Fix | Delete

[1111] Fix | Delete

if ( $error ) {

[1112] Fix | Delete

$this->process_api_error( 'general' );

[1113] Fix | Delete

[1114] Fix | Delete

return true;

[1115] Fix | Delete

}

[1116] Fix | Delete

[1117] Fix | Delete

return false;

[1118] Fix | Delete

}

[1119] Fix | Delete

[1120] Fix | Delete

/**

[1121] Fix | Delete

* Check if recurring settings is configured correctly.

[1122] Fix | Delete

*

[1123] Fix | Delete

* @since 1.8.4

[1124] Fix | Delete

*

[1125] Fix | Delete

* @param {array} $settings Settings data.

[1126] Fix | Delete

*

[1127] Fix | Delete

* @return bool

[1128] Fix | Delete

*/

[1129] Fix | Delete

protected function is_recurring_settings_ok( $settings ) {

[1130] Fix | Delete

[1131] Fix | Delete

$error = '';

[1132] Fix | Delete

[1133] Fix | Delete

// Check subscription settings are provided.

[1134] Fix | Delete

if ( empty( $settings['period'] ) || empty( $settings['email'] ) ) {

[1135] Fix | Delete

$error = esc_html__( 'Stripe subscription payment stopped, missing form settings.', 'wpforms-lite' );

[1136] Fix | Delete

}

[1137] Fix | Delete

[1138] Fix | Delete

// Check for required customer email.

[1139] Fix | Delete

if ( ! $error && empty( $this->fields[ $settings['email'] ]['value'] ) ) {

[1140] Fix | Delete

$error = esc_html__( 'Stripe subscription payment stopped, customer email not found.', 'wpforms-lite' );

[1141] Fix | Delete

}

[1142] Fix | Delete

[1143] Fix | Delete

// Before proceeding, check if any basic errors were detected.

[1144] Fix | Delete

if ( $error ) {

[1145] Fix | Delete

$this->log_error( $error );

[1146] Fix | Delete

$this->display_error( $error );

[1147] Fix | Delete

[1148] Fix | Delete

return false;

[1149] Fix | Delete

}

[1150] Fix | Delete

[1151] Fix | Delete

return true;

[1152] Fix | Delete

}

[1153] Fix | Delete

[1154] Fix | Delete

/**

[1155] Fix | Delete

* Process subscription API call.

[1156] Fix | Delete

*

[1157] Fix | Delete

* @since 1.8.4

[1158] Fix | Delete

*

[1159] Fix | Delete

* @param array $args Prepared subscription arguments.

[1160] Fix | Delete

*/

[1161] Fix | Delete

protected function process_subscription( $args ) {

[1162] Fix | Delete

[1163] Fix | Delete

$this->subscription_settings = $args['settings'];

[1164] Fix | Delete

[1165] Fix | Delete

if ( ! Helpers::is_license_ok() && Helpers::is_application_fee_supported() ) {

[1166] Fix | Delete

$args['application_fee_percent'] = 3;

[1167] Fix | Delete

}

[1168] Fix | Delete

[1169] Fix | Delete

// Store spam reason if exists.

[1170] Fix | Delete

if ( isset( $this->form_data['spam_reason'] ) ) {

[1171] Fix | Delete

$args['metadata']['spam_reason'] = $this->form_data['spam_reason'];

[1172] Fix | Delete

}

[1173] Fix | Delete

[1174] Fix | Delete

$this->api->process_subscription( $args );

[1175] Fix | Delete

[1176] Fix | Delete

// Set payment processing flag.

[1177] Fix | Delete

$this->is_payment_processed = true;

[1178] Fix | Delete

[1179] Fix | Delete

// Update the credit card field value to contain basic details.

[1180] Fix | Delete

$this->update_credit_card_field_value();

[1181] Fix | Delete

[1182] Fix | Delete

$this->process_api_error( 'subscription' );

[1183] Fix | Delete

}

[1184] Fix | Delete

[1185] Fix | Delete

/**

[1186] Fix | Delete

* Get base subscription arguments.

[1187] Fix | Delete

*

[1188] Fix | Delete

* @since 1.8.4

[1189] Fix | Delete

*

[1190] Fix | Delete

* @return array

[1191] Fix | Delete

*/

[1192] Fix | Delete

protected function get_base_subscription_args() {

[1193] Fix | Delete

[1194] Fix | Delete

return [

[1195] Fix | Delete

'form_id' => $this->form_id,

[1196] Fix | Delete

'form_title' => sanitize_text_field( $this->form_data['settings']['form_title'] ),

[1197] Fix | Delete

'amount' => $this->amount * wpforms_get_currency_multiplier(),

[1198] Fix | Delete

];

[1199] Fix | Delete

}

[1200] Fix | Delete

[1201] Fix | Delete

/**

[1202] Fix | Delete

* Map WPForms Address field to Stripe format.

[1203] Fix | Delete

*

[1204] Fix | Delete

* @since 1.8.8

[1205] Fix | Delete

*

[1206] Fix | Delete

* @param array $submitted_data Submitted address data.

[1207] Fix | Delete

* @param string $field_id Address field ID.

[1208] Fix | Delete

*

[1209] Fix | Delete

* @return array

[1210] Fix | Delete

*/

[1211] Fix | Delete

private function map_address_field( array $submitted_data, string $field_id ): array {

[1212] Fix | Delete

[1213] Fix | Delete

$line = sanitize_text_field( $submitted_data['address1'] );

[1214] Fix | Delete

$country = '';

[1215] Fix | Delete

[1216] Fix | Delete

if ( isset( $submitted_data['address2'] ) ) {

[1217] Fix | Delete

$line .= ' ' . sanitize_text_field( $submitted_data['address2'] );

[1218] Fix | Delete

}

[1219] Fix | Delete

[1220] Fix | Delete

if ( isset( $submitted_data['country'] ) ) {

[1221] Fix | Delete

$country = sanitize_text_field( $submitted_data['country'] );

[1222] Fix | Delete

} elseif ( $this->form_data['fields'][ $field_id ]['scheme'] !== 'international' ) {

[1223] Fix | Delete

$country = 'US';

[1224] Fix | Delete

}

[1225] Fix | Delete

[1226] Fix | Delete

return [

[1227] Fix | Delete

'line1' => $line,

[1228] Fix | Delete

'state' => isset( $submitted_data['state'] ) ? sanitize_text_field( $submitted_data['state'] ) : '',

[1229] Fix | Delete

'city' => sanitize_text_field( $submitted_data['city'] ),

[1230] Fix | Delete

'postal_code' => sanitize_text_field( $submitted_data['postal'] ),

[1231] Fix | Delete

'country' => $country,

[1232] Fix | Delete

];

[1233] Fix | Delete

}

[1234] Fix | Delete

[1235] Fix | Delete

/**

[1236] Fix | Delete

* Check the submitted payment data whether it was corrupted.

[1237] Fix | Delete

* If so, refund a payment / cancel subscription.

[1238] Fix | Delete

*

[1239] Fix | Delete

* @since 1.8.8.2

[1240] Fix | Delete

*

[1241] Fix | Delete

* @param array $entry Submitted entry data.

[1242] Fix | Delete

*

[1243] Fix | Delete

* @return bool

[1244] Fix | Delete

*/

[1245] Fix | Delete

private function is_submitted_payment_data_corrupted( array $entry ): bool {

[1246] Fix | Delete

[1247] Fix | Delete

// Bail early if there are no payment intents.

[1248] Fix | Delete

if ( empty( $entry['payment_intent_id'] ) ) {

[1249] Fix | Delete

return false;

[1250] Fix | Delete

}

[1251] Fix | Delete

[1252] Fix | Delete

// Get stored corrupted payment intents if exist.

[1253] Fix | Delete

$corrupted_intents = (array) Transient::get( 'corrupted-stripe-intents' );

[1254] Fix | Delete

[1255] Fix | Delete

// We must prevent a processing if payment intent was identified as corrupted.

[1256] Fix | Delete

// Also if the transaction ID exists in DB (transaction ID is unique value).

[1257] Fix | Delete

if ( in_array( $entry['payment_intent_id'], $corrupted_intents, true ) || wpforms()->obj( 'payment' )->get_by( 'transaction_id', $entry['payment_intent_id'] ) ) {

[1258] Fix | Delete

wpforms()->obj( 'process' )->errors[ $this->form_id ]['footer'] = esc_html__( 'Secondary form submission was declined.', 'wpforms-lite' );

[1259] Fix | Delete

[1260] Fix | Delete

return true;

[1261] Fix | Delete

}

[1262] Fix | Delete

[1263] Fix | Delete

$intent = $this->api->retrieve_payment_intent(

[1264] Fix | Delete

$entry['payment_intent_id'],

[1265] Fix | Delete

[

[1266] Fix | Delete

'expand' => [ 'invoice.subscription' ],

[1267] Fix | Delete

]

[1268] Fix | Delete

);

[1269] Fix | Delete

[1270] Fix | Delete

// Round to the nearest whole number because $this->amount can contain a number close to,

[1271] Fix | Delete

// but slightly under it, due to how it is stored in the memory.

[1272] Fix | Delete

$submitted_amount = round( $this->amount * wpforms_get_currency_multiplier() );

[1273] Fix | Delete

[1274] Fix | Delete

// Prevent form submission if a mismatch of the payment amount is detected.

[1275] Fix | Delete

if ( ! empty( $intent ) && (int) $submitted_amount !== (int) $intent->amount ) {

[1276] Fix | Delete

wpforms()->obj( 'process' )->errors[ $this->form_id ]['footer'] = esc_html__( 'Irregular activity detected. Your submission has been declined and payment refunded.', 'wpforms-lite' );

[1277] Fix | Delete

[1278] Fix | Delete

$args = [

[1279] Fix | Delete

'reason' => 'fraudulent',

[1280] Fix | Delete

];

[1281] Fix | Delete

[1282] Fix | Delete

// We can't cancel a payment because it's already paid.

[1283] Fix | Delete

// So we can perform a refund only.

[1284] Fix | Delete

$this->api->refund_payment( $entry['payment_intent_id'], $args );

[1285] Fix | Delete

[1286] Fix | Delete

// Cancel subscription if exists.

[1287] Fix | Delete

if ( ! empty( $intent->invoice->subscription ) ) {

[1288] Fix | Delete

$this->api->cancel_subscription( $intent->invoice->subscription->id );

[1289] Fix | Delete

}

[1290] Fix | Delete

[1291] Fix | Delete

// This payment indent is identified as corrupted.

[1292] Fix | Delete

// Store it in order to prevent re-using it (form re-submitting).

[1293] Fix | Delete

if ( ! in_array( $entry['payment_intent_id'], $corrupted_intents, true ) ) {

[1294] Fix | Delete

$corrupted_intents[] = $entry['payment_intent_id'];

[1295] Fix | Delete

[1296] Fix | Delete

Transient::set( 'corrupted-stripe-intents', $corrupted_intents, WEEK_IN_SECONDS );

[1297] Fix | Delete

}

[1298] Fix | Delete

[1299] Fix | Delete

return true;

[1300] Fix | Delete

}

[1301] Fix | Delete

[1302] Fix | Delete

return false;

[1303] Fix | Delete

}

[1304] Fix | Delete

}

[1305] Fix | Delete

[1306] Fix | Delete