Simply Schedule Appointments Shortcodes

function ssa_booking( $atts, $is_embedded_page = false ) {
		$atts = shortcode_atts( $this->get_ssa_booking_arg_defaults(), $atts, 'ssa_booking' );
		$atts = apply_filters( 'ssa_booking_shortcode_atts', $atts );
		$paypal_payment = isset($_GET['paypal_payment']) ? esc_attr($_GET['paypal_payment']): '';
		$stripe_payment = isset($_GET['stripe_payment']) ? esc_attr($_GET['stripe_payment']): '';
		
		if(isset($_GET["paypal_cancel"]) && "1" === $_GET["paypal_cancel"]){
			$_GET["paypal_cancel"] = true;
			return $this->ssa_confirmation();
		}
		
		if($paypal_payment){
			$_GET["paypal_payment"] = 0;
			return $this->ssa_confirmation();
		}
		
		if( $stripe_payment ){
			$_GET['stripe_payment'] = 0;
			return $this->ssa_confirmation();
		}

		// First validate atts['types'] if set
		if( ! empty( $atts['types'] ) ){
			$types = sanitize_text_field( esc_attr( $atts['types'] ) );

			$is_valid = $this->is_valid_types_attribute( $types );

			if( ! $is_valid ){

				$error_message = '<h3>' . __('Sorry, no appointment types available, please check back later.', 'simply-schedule-appointments') . '</h3>';
				if ( current_user_can( 'ssa_manage_site_settings' ) ) {
					$error_message .= '<code>' . sprintf( __('The specified appointment types \'%1$s\' can\'t be found %2$s (this message is only viewable to site administrators)', 'simply-schedule-appointments'),
														$types,
														'</code>' );
				}
				return $error_message;
			}
		}

		// Check for atts['label'] if set, and convert it to atts['types']
		if( ! empty( $atts['label'] ) ) {
			$label = sanitize_text_field( esc_attr( $atts['label'] ) );

			$ids = $this->convert_label_to_appt_types_ids( $label );

			if ( empty( $ids ) ) {


				$error_message = '<h3>' . __('Sorry, no appointment types available for this label, please check back later.', 'simply-schedule-appointments') . '</h3>';
				if ( current_user_can( 'ssa_manage_site_settings' ) ) {
					$error_message .= '<code>' . sprintf( __('The specified appointment type label \'%1$s\' can\'t be found, or has no appointment types available %2$s (this message only viewable to site administrators)', 'simply-schedule-appointments'),
														$label,
														'</code>' );
				}
				return $error_message;

			} else {
				$atts['types'] = $ids;

			}
		}

		$appointment_type = '';
		if ( ! empty( $atts['type'] ) ) {
			if ( $atts['type'] == (string) (int) $atts['type'] ) {
				// integer ID provided
				$appointment_type_id = (int) sanitize_text_field( $atts['type'] );
			} else {
				// slug provided
				$appointment_types = $this->plugin->appointment_type_model->query(
					array(
						'slug'   => sanitize_text_field( $atts['type'] ),
						'status' => 'publish',
					)
				);
				if ( ! empty( $appointment_types['0']['id'] ) ) {
					$appointment_type_id = $appointment_types['0']['id'];
				}

				if ( empty( $appointment_type_id ) ) {

					$type = sanitize_text_field( esc_attr( $atts['type'] ) );

					$error_message = '<h3>' . __('Sorry this appointment type isn\'t available, please check back later', 'simply-schedule-appointments') . '</h3>';
					if ( current_user_can( 'ssa_manage_site_settings' ) ) {
						$error_message .= '<code>' . sprintf( __('The specified appointment type \'%1$s\' can\'t be found %2$s (this message only viewable to site administrators)', 'simply-schedule-appointments'),
															$type,
															'</code>' );
					}

					return $error_message;
				}
			}

			if ( ! empty( $appointment_type_id ) ) {
				$appointment_type = $this->plugin->appointment_type_model->get( $appointment_type_id );
				if ( empty( $atts['types'] ) ) {
					$atts['types'] = $appointment_type_id;
				}
			}
		}

		if ( $is_embedded_page || $this->is_embedded_page() ) {
			// wp_localize_script( 'ssa-booking-app', 'ssaBookingParams', array(
			// 'apptType' => $appointment_type,
			// 'translatedStrings' => array(
			// ),
			// ) );
			wp_localize_script( 'ssa-booking-app', 'ssa', $this->plugin->bootstrap->get_api_vars() );
			wp_localize_script( 'ssa-booking-app', 'ssa_translations', $this->get_translations() );

			wp_enqueue_script( 'ssa-unsupported-script' );
			wp_enqueue_script( 'ssa-booking-manifest' );
			wp_enqueue_script( 'ssa-booking-vendor' );
			wp_enqueue_script( 'ssa-booking-app' );
			wp_enqueue_script( 'ssa-iframe-inner' );

			return '
			<div id="ssa-booking-app">
				<noscript>
					<div class="unsupported">
						<div class="unsupported-container">
							<h1 class="unsupported-label">' . __( 'Simply Schedule Appointments requires JavaScript', 'simply-schedule-appointments' ) . '</h1>
							<p class="unsupported-description">' . __( 'To book an appointment, please make sure you enable JavaScript in your browser.', 'simply-schedule-appointments' ) . '</p>
						</div>
					</div>
				</noscript>
			</div>
			<div id="ssa-unsupported" style="display:none;">
					<div class="unsupported">
						<div class="unsupported-container">
							<h1 class="unsupported-label">' . __( 'Unsupported Browser', 'simply-schedule-appointments' ) . '</h1>
							<p class="unsupported-description">' . __( 'To book an appointment, please update your browser to something more modern. We recommend Firefox or Chrome.', 'simply-schedule-appointments' ) . '</p>
						</div>
					</div>
			</div>
			';
		}

		wp_localize_script( 'ssa-iframe-outer', 'ssa', $this->plugin->bootstrap->get_api_vars() );
		wp_enqueue_script( 'ssa-iframe-outer' );
		if ( $this->plugin->settings_installed->is_enabled( 'tracking' ) ) {
			wp_enqueue_script( 'ssa-tracking' );
		}
		if ( ! empty( $atts['integration'] ) ) {
			wp_enqueue_script( 'ssa-form-embed' );
		}
		$settings = $this->plugin->settings->get();
		// $link = get_page_link( $settings['global']['booking_post_id'] );
		$api_vars = $this->plugin->bootstrap->get_api_vars();

		if ( ! empty( $atts['edit'] ) ) {
			$appointment_id = sanitize_text_field( $atts['edit'] );
			if ( ! empty( $appointment_id ) ) {
				$appointment         = SSA_Appointment_Object::instance( $appointment_id );
				$appointment_type_id = $appointment->get_appointment_type()->id;

				if ( empty( $atts['types'] ) ) {
					$atts['types'] = $appointment_type_id;
				}
			}
		}

		$link = add_query_arg( $atts, $api_vars['api']['root'] . '/embed-inner' );

		if ( ! empty( $atts['edit'] ) ) {
			$appointment_id = sanitize_text_field( $atts['edit'] );

			// if it's an integration form, and the appointment status is 'pending_form', load the appointment on a pre confirmed state.
			if ( ! empty( $atts['integration'] ) && $appointment->is_reserved() ) {
				$appointment_id_token = ! empty( $atts['token'] ) ? $atts['token'] : $this->plugin->appointment_model->get_id_token( array( 'id' => sanitize_text_field( $atts['edit'] ) ) );

				$link = add_query_arg( array( 'token' => $appointment_id_token ), $link );
				$link = $link . '#/load-appointment/' . $appointment_id;
			} else {
				$appointment_id_token = $this->plugin->appointment_model->get_id_token( array( 'id' => $appointment_id ) );
				$link                 = $link . '#/change/' . $appointment_id_token . $appointment_id;
			}
		} else {
			$link = $link . '#/';
		}

		if ( ! empty( $atts['integration'] ) ) {
			$link = str_replace( '#/', '#/integration/' . esc_attr( $atts['integration'] ) . '/', $link );
		}

		if ( ! empty( $atts['view'] ) ) {
			$link .= '/view/' . $atts['view'];
		}

		$link                = SSA_Bootstrap::maybe_fix_protocol( $link );
		$escaped_passed_args = array();
		foreach ( $this->get_passed_args() as $passed_key => $passed_value ) {
			if ( ! is_string( $passed_key ) || ! is_string( $passed_value ) ) {
				continue; // needed to prevent error rendering gutenberg block
			}
			
			// at this point any escaped passed value has been decoded
			// the encode step below will handle the affected characters
			$passed_value = urlencode( $passed_value );
			
			if ( $passed_key === 'Email' ) {
				$passed_value = str_replace( '+', '%2B', trim( $passed_value ) ); // since + is a URL equivalent of %20, an email like 'example+123@gmail.com' needs to be re-encoded to prevent it from becoming 'example 123@gmail.com'
			}
			
			// if the first char of phone is a +, meaning the URL contained a literal unescaped +, it should be encoded to %2B
			if ( $passed_key === 'Phone' ) {
				$passed_value = preg_replace( '/^(\+)(.*)/', '%2B$2', $passed_value );
			}

			$escaped_passed_args[ htmlspecialchars( $passed_key ) ] = htmlspecialchars( $passed_value );
		}

		$link           = add_query_arg( $escaped_passed_args, $link );
		$lazy_load_mode = apply_filters( 'ssa/performance/lazy_load', false );
		if ( false === $lazy_load_mode ) {
			$iframe_src = '<iframe src="' . $link . '" height="400px" width="100%" name="ssa_booking" loading="eager" frameborder="0" data-skip-lazy="1" class="ssa_booking_iframe skip-lazy" title="' . esc_attr__( 'Book a time', 'simply-schedule-appointments' ) . '"></iframe>';
		} elseif ( true === $lazy_load_mode ) {
			$iframe_src = '<iframe src="' . $link . '" height="400px" width="100%" name="ssa_booking" loading="lazy" frameborder="0" class="ssa_booking_iframe" title="' . esc_attr__( 'Book a time', 'simply-schedule-appointments' ) . '"></iframe>';
		} else {
			$iframe_src = '<iframe src="' . $link . '" height="400px" width="100%" name="ssa_booking" frameborder="0" class="ssa_booking_iframe" title="' . esc_attr__( 'Book a time', 'simply-schedule-appointments' ) . '"></iframe>';
		}

		return $iframe_src;
	}

function tec_ssa_booking( $atts = array() ) {
		$post_id = get_the_ID();
		if ( ! function_exists( 'tribe_is_event' ) || ! tribe_is_event( $post_id ) ) {
			return $this->ssa_booking( $atts );
		}

		$event = tribe_get_event( $post_id );
		if ( empty( $atts ) ) {
			$atts = array();
		}
		$atts = array_merge(
			array(
				'availability_start_date' => $event->dates->start_utc->format( 'Y-m-d H:i:s' ),
				'availability_end_date'   => $event->dates->end_utc->format( 'Y-m-d H:i:s' ),
			),
			$atts
		);

		return $this->ssa_booking( $atts );
	}

function ssa_past_appointments( $atts ) {
		$atts = shortcode_atts(
			array(
				'status'                     => 'booked',
				'number'                     => 10,
				'orderby'                    => 'start_date',
				'order'                      => 'DESC',
				'customer_id'                => get_current_user_id(),
	
				'no_results_message'         => __( 'No past appointments', 'simply-schedule-appointments' ),
				'logged_out_message'         => '',
	
				'end_date_max'             => ssa_datetime()->format( 'Y-m-d H:i:s' ),
				'details_link_displayed'     => true,
				'details_link_label'         => __( 'View Details', 'simply-schedule-appointments' ),
	
				'web_meeting_url'            => false,
				'appointment_type_displayed' => false,
			),
			$atts,
			'ssa_upcoming_appointments'
		);
	
		ob_start();
		include $this->plugin->dir( 'templates/customer/past-appointments.php' );
		$output = ob_get_clean();
	
		return $output;
	}

function ssa_upcoming_appointments( $atts ) {
		$atts = shortcode_atts(
			array(
				'status'                     => 'booked',
				'number'                     => -1,
				'orderby'                    => 'start_date',
				'order'                      => 'ASC',
				'customer_id'                => get_current_user_id(),

				'no_results_message'         => __( 'No upcoming appointments', 'simply-schedule-appointments' ),
				'logged_out_message'         => '',

				'start_date_min'             => ssa_datetime()->sub( new DateInterval( 'PT1H' ) )->format( 'Y-m-d H:i:s' ),
				'details_link_displayed'     => true,
				'details_link_label'         => __( 'View Details', 'simply-schedule-appointments' ),

				'web_meeting_url'            => true,
				'appointment_type_displayed' => false,
			),
			$atts,
			'ssa_upcoming_appointments'
		);

		ob_start();
		include $this->plugin->dir( 'templates/customer/upcoming-appointments.php' );
		$output = ob_get_clean();

		return $output;
	}

function ssa_admin_upcoming_appointments( $atts ) {
		$atts = shortcode_atts(
			array(
				'status'                     => 'booked',
				'number'                     => 5,
				'orderby'                    => 'start_date',
				'order'                      => 'ASC',
				'customer_id'                => '',
				'staff_ids_any'               => current_user_can( 'ssa_manage_others_appointments' ) ? []: [ $this->plugin->staff_model->get_staff_id_for_user_id( get_current_user_id() ) ],

				'no_results_message'         => __( 'No upcoming appointments', 'simply-schedule-appointments' ),
				'logged_out_message'         => '',

				'start_date_min'             => ssa_datetime()->sub( new DateInterval( 'PT1H' ) )->format( 'Y-m-d H:i:s' ),
				'details_link_displayed'     => true,
				'details_link_label'         => __( 'View Details', 'simply-schedule-appointments' ),

				'web_meeting_url'            => true,
				'appointment_type_displayed' => false,
				'team_members_displayed' 	 => true,
			),
			$atts,
			'ssa_admin_upcoming_appointments'
		);

		ob_start();
		include $this->plugin->dir( 'templates/dashboard/dashboard-upcoming-appointments-widget.php' );
		$output = ob_get_clean();

		return $output;
	}

function ssa_admin() {
		if( ! is_user_logged_in() ) {
			return;
		}
		
		// If current user or visitor can't manage appointments, display a warning message.
		if ( ! current_user_can( 'ssa_manage_appointments' ) ) {
			return '<div class="ssa-admin-warning">' . __( 'It looks like you\'re not allowed to see this screen. Please check with your site administrator if you think this message is an error.', 'simply-schedule-appointments' ) . '</div>';
		}

		// Make sure we have the nonce for the admin page.
		$nonce = wp_create_nonce( 'wp_rest' );

		wp_localize_script( 'ssa-iframe-outer', 'ssa', $this->plugin->bootstrap->get_api_vars() );
		wp_enqueue_script( 'ssa-iframe-outer' );
		$api_vars = $this->plugin->bootstrap->get_api_vars();

		$link = add_query_arg(
			array(
				'_wpnonce' => $nonce,
			),
			$api_vars['api']['root'] . '/embed-inner-admin'
		);

		// Check if we have a 'ssa_state' url parameter on the current page. If so, we need to add it to the iframe src as a url hash.
		$ssa_state = isset( $_GET['ssa_state'] ) ? sanitize_text_field( $_GET['ssa_state'] ) : '';
		if ( ! empty( $ssa_state ) ) {
			$link = $link . '#' . $ssa_state;
		}

		$link = SSA_Bootstrap::maybe_fix_protocol( $link );

		return '<iframe src="' . $link . '" height="400px" width="100%" name="ssa_admin" loading="eager" frameborder="0" data-skip-lazy="1" class="ssa_booking_iframe skip-lazy"></iframe>';
	}

function ssa_confirmation() {
		$appointment_token = isset($_GET['appointment_token']) ? esc_attr($_GET['appointment_token']): (isset($_POST["appointment_token"]) ? esc_attr( $_POST["appointment_token"]): '');
		$error_message = '';
		$paypal_success = isset($_GET['paypal_success']) ? esc_attr($_GET['paypal_success']): '';
		$paypal_cancel = isset($_GET['paypal_cancel']) ? esc_attr($_GET['paypal_cancel']): '';

		if(empty($appointment_token)) {
			if ( current_user_can( 'ssa_manage_site_settings' ) ) {
				$error_message = '<h3 style="text-align: center">'. __('Simply Schedule Appointments Booking Confirmation' , 'simply-schedule-appointments') . '</h3>';
			}
			return $error_message;
		}
		
		// Validate Token and Appointment ID
		$provided_hash = substr($appointment_token, 0, 32);
		$appointment_id = substr($appointment_token, 32);

		$correct_hash = $this->plugin->appointment_model->get_id_token( array( 'id' => $appointment_id ) );

		if ( $correct_hash != $provided_hash ) {
			$error_message = '<h3 style="text-align: center">'. __('An error occurred, please check the URL.' , 'simply-schedule-appointments' ) . '</h3>';
			return $error_message;
		}

		$atts = array( 'edit' => $appointment_id );

		if ( "1" === $paypal_cancel ) {
			$atts = array_merge(array( 'view' => 'canceled_payment', 'payment_provider' => 'paypal' ), $atts);
		} else if ( ! empty( $paypal_success ) || ! empty( $paypal_cancel ) ) {
			// continue to show ssa_booking - consider appointment abandoned 
			$atts = array_merge(array( 'view' => "confirm_payment", 'payment_provider' => 'paypal' ), $atts);
		}

		
		if( isset( $_GET['stripe_payment'] ) && $_GET['stripe_payment'] === 0 ){
			if( isset( $_GET['redirect_status'] ) && $_GET['redirect_status'] === "failed" ){
				$atts = array_merge(array( 'view' => "canceled_payment", 'payment_provider' => 'stripe' ), $atts);
			} else {
				// Here we assume $_GET['redirect_status'] is "success"
				// We show the user confirm_payment view
				// The frontend will take over and only show the confirmation if the appointment status was updated to be booked
				$atts = array_merge(array( 'view' => "confirm_payment", 'payment_provider' => 'stripe' ), $atts);
			}
		}
		
		return $this->ssa_booking( $atts );
	}