' . sprintf(
/* translators: 1: start month and year, 2: end month and year, 3: number of months */
_n(
'Selected month: %1$s (%3$s month)', // phpcs:ignore WordPress.WP.I18n.MissingSingularPlaceholder
'Selected months: %1$s - %2$s (%3$s months)',
$display_duration_months,
'woocommerce-bookings'
),
$start_month,
$end_month,
$display_duration_months
) . '
';
} else {
$display_duration = max( 1, absint( round( ( $booking_data['_end_date'] - $booking_data['_start_date'] ) / DAY_IN_SECONDS ) ) );
$selected_dates = '' . sprintf(
/* translators: 1: start date, 2: end date, 3: number of days */
_n(
'Selected date: %1$s (%3$s day)', // phpcs:ignore WordPress.WP.I18n.MissingSingularPlaceholder
'Selected dates: %1$s - %2$s (%3$s days)',
$display_duration,
'woocommerce-bookings'
),
$start_date,
$end_date,
$display_duration
) . '
';
}
}
/**
* Filter the selected dates string displayed in the booking form after calculating costs.
*
* @since 3.7.0
* @param string $selected_dates The selected dates HTML string.
* @param array $booking_data The booking data that was posted.
* @param WC_Product_Booking $product The booking product.
* @return string
*/
$selected_dates = apply_filters( 'woocommerce_bookings_calculated_booking_cost_selected_dates', $selected_dates, $booking_data, $product );
/**
* Filter the output string displayed in the booking form after calculating costs.
*
* Note: the value returned by this filter will be wrapped in
* `...
` before being injected into
* the booking form. Third-party code that previously returned
* self-contained block-level HTML (e.g. its own `` or `
`)
* should account for this wrapping.
*
* @since 3.7.0
* @param string $output The booking cost HTML string.
* @param float $display_price The displayed price.
* @param WC_Product_Booking $product The booking product.
* @return string The HTML string that will be wrapped in `
`.
*/
$output_html = apply_filters( 'woocommerce_bookings_calculated_booking_cost_success_output', $output, $display_price, $product );
$output_html = $selected_dates . '
' . $output_html . '
';
/**
* Filter the full JSON response array before it is sent.
*
* Use this filter (instead of woocommerce_bookings_calculated_booking_cost_success_output)
* when you need to add extra keys to the response or modify the assembled HTML,
* because the success_output filter may exit early via wp_send_json.
*
* @since 3.7.0
* @param array $response The response array with 'result' and 'html'.
* @param string $output The raw cost HTML string (pre-wrapping).
* @param float $display_price The displayed price.
* @param WC_Product_Booking $product The booking product.
* @return array
*/
$response = apply_filters(
'woocommerce_bookings_calculated_booking_cost_response',
array(
'result' => 'SUCCESS',
'html' => $output_html,
),
$output,
$display_price,
$product
);
wp_send_json( $response );
}
/**
* Get a list of time blocks available on a date.
*/
public function get_time_blocks_for_date() {
// clean posted data
$posted = array();
// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- $posted requires sanitization.
parse_str( wp_unslash( $_POST['form'] ), $posted );
if ( empty( $posted['add-to-cart'] ) ) {
return false;
}
// Product Checking
$booking_id = absint( $posted['add-to-cart'] );
$product = get_wc_product_booking( wc_get_product( $booking_id ) );
if ( ! $product ) {
return false;
}
// Check selected date.
if ( ! empty( $posted['wc_bookings_field_start_date_year'] ) && ! empty( $posted['wc_bookings_field_start_date_month'] ) && ! empty( $posted['wc_bookings_field_start_date_day'] ) ) {
$year = max( date( 'Y' ), absint( $posted['wc_bookings_field_start_date_year'] ) );
$month = absint( $posted['wc_bookings_field_start_date_month'] );
$day = absint( $posted['wc_bookings_field_start_date_day'] );
$timestamp = strtotime( "{$year}-{$month}-{$day}" );
}
if ( empty( $timestamp ) ) {
die( '
' . esc_html__( 'Please enter a valid date.', 'woocommerce-bookings' ) . '' );
}
if ( ! empty( $posted['wc_bookings_field_duration'] ) ) {
$interval = (int) $posted['wc_bookings_field_duration'] * $product->get_duration();
} else {
$interval = $product->get_duration();
}
$base_interval = $product->get_duration();
if ( 'hour' === $product->get_duration_unit() ) {
$interval = $interval * 60;
$base_interval = $base_interval * 60;
}
$first_block_time = $product->get_first_block_time();
$from = strtotime( $first_block_time ? $first_block_time : 'midnight', $timestamp );
$standard_from = $from;
// Get an extra day before/after so front-end can get enough blocks to fill out 24 hours in client time.
if ( isset( $posted['get_prev_day'] ) ) {
$from = strtotime( '- 1 day', $from );
}
$to = strtotime( '+ 1 day', $standard_from ) + $interval;
if ( isset( $posted['get_next_day'] ) ) {
$to = strtotime( '+ 1 day', $to );
}
// cap the upper range
$to = strtotime( 'midnight', $to ) - 1;
$resource_id_to_check = ( ! empty( $posted['wc_bookings_field_resource'] ) ? (int) $posted['wc_bookings_field_resource'] : 0 );
$resource = $product->get_resource( absint( $resource_id_to_check ) );
$resources = $product->get_resources();
if ( $resource_id_to_check && $resource ) {
$resource_id_to_check = $resource->ID;
} elseif ( $product->has_resources() && $resources && count( $resources ) === 1 ) {
$resource_id_to_check = current( $resources )->ID;
} else {
$resource_id_to_check = 0;
}
$booking_form = new WC_Booking_Form( $product );
$blocks = $product->get_blocks_in_range( $from, $to, array( $interval, $base_interval ), $resource_id_to_check );
$block_html = $booking_form->get_time_slots_html( $blocks, array( $interval, $base_interval ), $resource_id_to_check, $from, $to );
if ( empty( $block_html ) ) {
$block_html .= '
' . __( 'No blocks available.', 'woocommerce-bookings' ) . '';
}
die( $block_html ); // phpcs:ignore WordPress.Security.EscapeOutput
}
/**
* Gets the end time html dropdown.
*
* @since 1.13.0
* @return HTML
*/
public function get_end_time_html() {
/**
* Filter to disable nonce check for find booked day blocks.
*
* Disabling this nonce check can expose the site to potential security risks,
* especially on the frontend where user input is less controlled.
* Use this filter with caution and only if necessary.
*
* @since 2.2.4
*
* @param bool Disable nonce check for find booked day blocks.
*
* @return bool
*/
$is_nonce_disabled = apply_filters( 'disable_find_booked_day_blocks_nonce_check', false );
// If conditional checks were combined then an unset $_POST['security'] property would skip the wp_verify_nonce check.
if (
! $is_nonce_disabled &&
! isset( $_POST['security'] )
) {
wp_die( esc_html__( 'No nonce sent with request', 'woocommerce-bookings' ) );
}
if (
! $is_nonce_disabled &&
! wp_verify_nonce( wc_clean( wp_unslash( $_POST['security'] ) ), 'get_end_time_html' )
) {
// This nonce is not valid.
wp_die( esc_html__( 'Cheatin’ huh?', 'woocommerce-bookings' ) );
}
$start_date_time = isset( $_POST['start_date_time'] ) ? wc_clean( wp_unslash( $_POST['start_date_time'] ) ) : '';
$product_id = isset( $_POST['product_id'] ) ? intval( $_POST['product_id'] ) : false;
$blocks = isset( $_POST['blocks'] ) ? wc_clean( wp_unslash( $_POST['blocks'] ) ) : array();
$bookable_product = wc_get_product( $product_id );
$booking_form = new WC_Booking_Form( $bookable_product );
$resource_id_to_check = isset( $_POST['resource_id'] ) ? absint( wc_clean( wp_unslash( $_POST['resource_id'] ) ) ) : 0;
$html = $booking_form->get_end_time_html( $blocks, $start_date_time, array(), $resource_id_to_check );
echo $html; // phpcs:ignore WordPress.Security.EscapeOutput
exit;
}
/**
* Search for customers and return json.
*/
public function json_search_order() {
global $wpdb;
// Check the nonce.
$booking_id = absint( $_GET['booking_id'] );
check_ajax_referer( "search-booking-order-$booking_id", 'security' );
// Check permissions.
if ( ! current_user_can( 'edit_wc_booking', $booking_id ) ) {
wp_die( -1, 403 );
}
$term = wc_clean( wp_unslash( $_GET['term'] ) );
if ( empty( $term ) ) {
die();
}
$found_orders = array();
$term = apply_filters( 'woocommerce_booking_json_search_order_number', $term );
if ( WC_Booking_Order_Compat::is_cot_enabled() ) {
$query_orders = $wpdb->get_results(
$wpdb->prepare( "SELECT id as ID FROM {$wpdb->prefix}wc_orders AS wc_orders WHERE wc_orders.id LIKE %s LIMIT 10", $term . '%' )
);
} else {
$query_orders = $wpdb->get_results(
$wpdb->prepare( "SELECT ID, post_title FROM {$wpdb->posts} AS posts WHERE posts.post_type = 'shop_order' AND posts.ID LIKE %s LIMIT 10", $term . '%' )
);
}
if ( $query_orders ) {
foreach ( $query_orders as $item ) {
$order = wc_get_order( $item->ID );
if ( $order ) {
$found_orders[ ( is_callable( array( $order, 'get_id' ) ) ? $order->get_id() : $order->id ) ] = $order->get_order_number() . ' – ' . date_i18n( wc_bookings_date_format(), strtotime( is_callable( array( $order, 'get_date_created' ) ) ? $order->get_date_created() : $order->post_date ) );
}
}
}
wp_send_json( $found_orders );
}
/**
* Adds a store availability rule.
*
* @since 1.16.0
* @return array
*/
public function add_store_availability_rule() {
check_ajax_referer( 'add-store-availability-rule', 'security' );
if ( empty( $_POST['event_data'] ) || ! is_array( $_POST['event_data'] ) ) {
wp_send_json_error( 'Missing or malformed event data' );
}
$event = new WC_Global_Availability();
$event_data = wc_clean( wp_unslash( $_POST['event_data'] ) );
foreach ( $event_data as $field => $value ) {
if ( ! is_callable( array( $event, 'set_' . $field ) ) ) {
continue;
}
$event->{"set_{$field}"}( $value );
}
$event->set_range_type( 'store_availability' );
$data_store = WC_Data_Store::load( 'booking-global-availability' );
try {
$data_store->create( $event );
} catch ( Exception $e ) {
wp_send_json_error( $e->getMessage() );
}
wp_send_json( array(
'success' => true,
'id' => $event->get_id(),
) );
}
/**
* Reads a store availability rule.
*
* @since 1.16.0
* @return array
*/
public function get_store_availability_rules() {
check_ajax_referer( 'get-store-availability-rules', 'security' );
$start_time = ! empty( $_GET['start_time'] ) ? wc_clean( wp_unslash( $_GET['start_time'] ) ) : 'today';
$end_time = ! empty( $_GET['end_time'] ) ? wc_clean( wp_unslash( $_GET['end_time'] ) ) : 'tomorrow';
$rules = WC_Data_Store::load( 'booking-global-availability' )->get_all_as_array(
array( array(
'key' => 'range_type',
'value' => 'store_availability',
'compare' => '=',
) ),
date( 'Y-m-d', strtotime( $start_time ) ),
date( 'Y-m-d', strtotime( $end_time ) )
);
wp_send_json( $rules );
}
/**
* Updates a store availability rule.
*
* @since 1.16.0
* @return array
*/
public function update_store_availability_rule() {
check_ajax_referer( 'update-store-availability-rule', 'security' );
if ( empty( $_POST['event_data'] ) || empty( $_POST['event_data']['id'] ) ) {
wp_send_json_error( 'Missing event data and/or id' );
}
try {
$event = new WC_Global_Availability( absint( $_POST['event_data']['id'] ) );
} catch ( Exception $e ) {
wp_send_json_error( $e->getMessage() );
}
if ( ! $event->is_store_availability() ) {
wp_send_json_error( 'Event is not a store availability' );
}
$event_data = wc_clean( wp_unslash( $_POST['event_data'] ) );
foreach ( $event_data as $field => $value ) {
$field = strtolower( $field );
if ( in_array( $field, array( 'id' ) ) ) {
continue;
}
if ( ! is_callable( array( $event, 'set_' . $field ) ) ) {
continue;
}
$event->{"set_{$field}"}( $value );
}
$data_store = WC_Data_Store::load( 'booking-global-availability' );
try {
$data_store->update( $event );
} catch ( Exception $e ) {
wp_send_json_error( $e->getMessage() );
}
wp_send_json( array(
'success' => true,
'id' => $event->get_id(),
) );
}
/**
* Deletes a store availability rule.
*
* @since 1.16.0
* @return array
*/
public function delete_store_availability_rules() {
check_ajax_referer( 'delete-store-availability-rules', 'security' );
if ( empty( $_POST['ids'] ) ) {
wp_send_json_error( 'Missing event IDs' );
}
$ids = explode( ',', wc_clean( wp_unslash( $_POST['ids'] ) ) );
$events = array_map( function( $event_id ) {
return new WC_Global_Availability( absint( $event_id ) );
}, $ids );
$events = array_filter( $events, function( $event ) {
return $event->is_store_availability();
} );
$data_store = WC_Data_Store::load( 'booking-global-availability' );
foreach ( $events as $event ) {
$data_store->delete( $event );
}
wp_send_json( array( 'success' => true ) );
}
/**
* Should return availability rules html.
*
* @since 1.15.69
*
* @return void
* @throws Exception
*/
public function lazy_load_availability_rules() {
$data = array_map( 'sanitize_text_field', $_POST );
if (
! wp_verify_nonce( $data['nonce'], 'lazy_load_availability_rules' ) ||
! current_user_can( 'read_global_availability' )
) {
wp_send_json_error( [
'error_message' => esc_html__( 'You are not authorized to perform this action', 'woocommerce-bookings' )
] );
}
/* @var WC_Global_Availability_Data_Store $global_availabilities_data_store */
$global_availabilities_data_store = WC_Data_Store::load( 'booking-global-availability' );
$global_availability_rule_per_page = absint( $data['per_page'] );
$global_availabilities = $global_availabilities_data_store->get_all();
$show_title = true;
$show_google_event = isset( $data['show'] ) && 'google-events' === $data['show'];
$can_lazy_load_availability_rules = false;
$availability_rules_html = '';
$offset = absint( $data['step'] ) * $global_availability_rule_per_page;
$live_global_availabilities_counter = 0;
if ( ! empty( $global_availabilities ) && is_array( $global_availabilities ) ) {
ob_start();
foreach ( $global_availabilities as $index => $availability ) {
if ( $availability->has_past() ) {
continue;
}
if (
// Hide availability rules from Google event store availability rules.
( $show_google_event && ! $availability->get_gcal_event_id() ) ||
// Hide Google event rules from Google event store availability rules.
( ! $show_google_event && $availability->get_gcal_event_id() )
) {
continue;
}
// Skip already rendered availability rules.
if ( $offset ) {
-- $offset;
continue;
}
include WC_BOOKINGS_PLUGIN_PATH . '/includes/admin/views/html-booking-availability-fields.php';
++ $live_global_availabilities_counter;
// Check whether availability rules remaining to render.
// Lazy load ajax request will continue to fetch availability rules html if availability rules remaining.
if ( $global_availability_rule_per_page === $live_global_availabilities_counter ) {
$can_lazy_load_availability_rules = $index !== array_key_last( $global_availabilities );
break;
}
}
$availability_rules_html = ob_get_clean();
}
wp_send_json_success( [
'html' => $availability_rules_html,
'last_step' => $data['step'],
'lazy_load_availability_rules' => absint( $can_lazy_load_availability_rules )
] );
}
}