✏️ Editing: Withdraw.php

<?php
/**
 * Withdraw class
 *
 * @package Tutor\Withdraw
 * @author Themeum <support@themeum.com>
 * @link https://themeum.com
 * @since 1.0.0
 */

namespace TUTOR;

use Exception;
use Tutor\Models\WithdrawModel;
use Tutor\Traits\JsonResponse;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Withdraw class
 *
 * @since 1.0.0
 */
class Withdraw {
	use JsonResponse;

/**
	 * Withdraw method
	 *
	 * @since 1.0.0
	 *
	 * @var mixed
	 */
	public $withdraw_methods;

/**
	 * Register hooks
	 *
	 * @since 1.0.0
	 */
	public function __construct() {
		add_action( 'wp_ajax_tutor_save_withdraw_account', array( $this, 'tutor_save_withdraw_account' ) );
		add_action( 'wp_ajax_tutor_make_an_withdraw', array( $this, 'tutor_make_an_withdraw' ) );
		add_filter( 'tutor_withdrawal_methods_all', array( $this, 'withdraw_methods_all' ) );
		add_filter( 'tutor_withdrawal_methods_available', array( $this, 'withdraw_methods_available' ) );
	}

/**
	 * Available withdraw methods
	 *
	 * @since 1.0.0
	 *
	 * @return array
	 */
	public function withdraw_methods_all() {

$this->migrate_withdrawal_method_data();

$methods = array(
			'bank_transfer_withdraw' => array(
				'method_name' => __( 'Bank Transfer', 'tutor' ),
				'image'       => tutor()->url . 'assets/images/payment-bank.png',
				'desc'        => __( 'Get your payment directly into your bank account', 'tutor' ),

'form_fields' => array(
					'account_name'   => array(
						'type'  => 'text',
						'label' => __( 'Account Name', 'tutor' ),
					),
					'account_number' => array(
						'type'  => 'text',
						'label' => __( 'Account Number', 'tutor' ),
					),
					'bank_name'      => array(
						'type'  => 'text',
						'label' => __( 'Bank Name', 'tutor' ),
					),
					'iban'           => array(
						'type'  => 'text',
						'label' => __( 'IBAN', 'tutor' ),
					),
					'swift'          => array(
						'type'  => 'text',
						'label' => __( 'BIC / SWIFT', 'tutor' ),
					),

),
			),

'echeck_withdraw'        => array(
				'method_name' => __( 'E-Check', 'tutor' ),
				'image'       => tutor()->url . 'assets/images/payment-echeck.png',
				'form_fields' => array(
					'physical_address' => array(
						'type'  => 'text',
						'label' => __( 'Your Physical Address', 'tutor' ),
						'desc'  => __( 'We will send you an E-Check to this address directly.', 'tutor' ),
					),
				),
			),

'paypal_withdraw'        => array(
				'method_name' => __( 'PayPal', 'tutor' ),
				'image'       => tutor()->url . 'assets/images/payment-paypal.png',
				'form_fields' => array(
					'paypal_email' => array(
						'type'  => 'email',
						'label' => __( 'PayPal E-Mail Address', 'tutor' ),
						'desc'  => __( 'We will use this email address to send the money to your Paypal account', 'tutor' ),
					),

),
			),
		);

$saved_options              = (array) get_option( 'tutor_option', array() );
		$withdrawal_payment_methods = $saved_options['tutor_withdrawal_methods'] ?? array();
		foreach ( $methods as $key => $method ) {
			$methods[ $key ]['enabled'] = in_array( $key, $withdrawal_payment_methods, true );
		}

return apply_filters( 'tutor_withdraw_methods', $methods );
	}

/**
	 * Withdraw method's tab
	 *
	 * @return void
	 */
	private function migrate_withdrawal_method_data() {
		$old_data = get_option( 'tutor_withdraw_options', null );

if ( ! $old_data ) {
			// Return if already migrated.
			return;
		}

$withdraw_options  = (array) maybe_unserialize( $old_data );
		$new_methods_array = array();

foreach ( $withdraw_options as $key => $option ) {
			if ( is_array( $option ) ) {

// Set enable state.
				if ( isset( $option['enabled'] ) ) {
					$option['enabled'] ? $new_methods_array[] = $key : 0;
				}

// Set instruction.
				if ( isset( $option['instruction'] ) ) {
					tutor_utils()->update_option( 'tutor_' . $key . '_instruction', $option['instruction'] );
				}
			}
		}

// Update new.
		tutor_utils()->update_option( 'tutor_withdrawal_methods', $new_methods_array );

// Delete old.
		delete_option( 'tutor_withdraw_options' );
	}

/**
	 * Return only enabled methods
	 *
	 * @since 1.0.0
	 *
	 * @return mixed|array
	 */
	public function withdraw_methods_available() {
		$methods          = $this->withdraw_methods_all();
		$withdraw_options = tutor_utils()->get_option( 'tutor_withdrawal_methods', array() );

foreach ( $methods as $method_id => $method ) {
			if ( ! in_array( $method_id, $withdraw_options ) ) {
				// Remove the unavailable methods from array.
				unset( $methods[ $method_id ] );
			}
		}

return $methods;
	}

/**
	 * Save Withdraw Method Data
	 *
	 * @since 1.2.0
	 *
	 * @return void send wp_json response
	 */
	public function tutor_save_withdraw_account() {
		// Checking nonce.
		tutor_utils()->checking_nonce();

//phpcs:disable WordPress.Security.NonceVerification.Missing -- nonce already verified
		$user_id = get_current_user_id();
		$method  = sanitize_text_field( tutor_utils()->avalue_dot( 'tutor_selected_withdraw_method', $_POST ) );
		if ( ! $method ) {
			wp_send_json_error();
		}

$method_data               = tutor_utils()->avalue_dot( 'withdraw_method_field.' . $method, $_POST );
		$available_withdraw_method = $this->withdraw_methods_all();

if ( tutor_utils()->count( $method_data ) ) {
			$saved_data                         = array();
			$saved_data['withdraw_method_key']  = $method;
			$saved_data['withdraw_method_name'] = tutor_utils()->avalue_dot( $method . '.method_name', $available_withdraw_method );

foreach ( $method_data as $input_name => $value ) {
				$saved_data[ $input_name ]['value'] = esc_sql( sanitize_text_field( $value ) );
				$saved_data[ $input_name ]['label'] = tutor_utils()->avalue_dot( $method . ".form_fields.{$input_name}.label", $available_withdraw_method );
			}

update_user_meta( $user_id, '_tutor_withdraw_method_data', $saved_data );
			update_user_meta( $user_id, '_tutor_withdraw_selected_method', $method );
			update_user_meta( $user_id, '_tutor_withdraw_method_data_' . $method, $saved_data );
		}

$msg = apply_filters( 'tutor_withdraw_method_set_success_msg', __( 'Withdrawal information saved!', 'tutor' ) );
		wp_send_json_success( array( 'msg' => $msg ) );
	}

/**
	 * Handle withdraw request form submit.
	 *
	 * @since 1.0.0
	 *
	 * @return void
	 *
	 * @throws Exception If any validation fails.
	 */
	public function tutor_make_an_withdraw() {
		global $wpdb;

tutor_utils()->checking_nonce();

$user_id = get_current_user_id();
		if ( ! tutor_utils()->is_instructor( $user_id ) ) {
			wp_send_json_error( array( 'msg' => tutor_utils()->error_message() ) );
		}

$lock_name = 'tutor_withdraw_lock_' . $user_id;
		$locked    = $wpdb->get_var( $wpdb->prepare( 'SELECT GET_LOCK(%s, 10)', $lock_name ) );

if ( 1 !== (int) $locked ) {
			wp_send_json_error(
				array(
					'msg' => __( 'Another withdrawal request is in progress. Please try again.', 'tutor' ),
				)
			);
		}

try {
			$withdraw_amount = (float) Input::post( 'amount' );
			$earning_summary = WithdrawModel::get_withdraw_summary( $user_id );
			$min_withdraw    = (float) tutor_utils()->get_option( 'min_withdraw_amount' );

if ( ( $earning_summary->total_pending + $withdraw_amount ) > $earning_summary->available_for_withdraw ) {
				throw new Exception(
					wp_sprintf(
					/* translators: 1: total pending withdraw request 2: available for withdraw */
						__( "You have total %1\$s pending withdraw request. You can't make more than %2\$s withdraw request at a time", 'tutor' ),
						$earning_summary->total_pending,
						$earning_summary->available_for_withdraw
					)
				);
			}

$saved_withdraw_account        = WithdrawModel::get_user_withdraw_method();
			$formatted_min_withdraw_amount = tutor_utils()->tutor_price( $min_withdraw );

if ( ! tutor_utils()->count( $saved_withdraw_account ) ) {
				$no_withdraw_method = apply_filters( 'tutor_no_withdraw_method_msg', __( 'Please save withdraw method ', 'tutor' ) );
				throw new Exception( $no_withdraw_method );
			}

if ( ( ! is_numeric( $withdraw_amount ) && ! is_float( $withdraw_amount ) ) || $withdraw_amount < $min_withdraw ) {
				/* translators: 1: strong tag start 2: min withdrawal amount 3: strong tag end */
				$required_min_withdraw = apply_filters( 'tutor_required_min_amount_msg', sprintf( __( 'Minimum withdrawal amount is %1$s %2$s %3$s ', 'tutor' ), '<strong>', $formatted_min_withdraw_amount, '</strong>' ) );
				throw new Exception( $required_min_withdraw );
			}

if ( $earning_summary->available_for_withdraw < $withdraw_amount ) {
				$insufficient_balence = apply_filters( 'tutor_withdraw_insufficient_balance_msg', __( 'Insufficient balance.', 'tutor' ) );
				throw new Exception( $insufficient_balence );
			}

$date = gmdate( 'Y-m-d H:i:s', tutor_time() );

$withdraw_data = apply_filters(
				'tutor_pre_withdraw_data',
				array(
					'user_id'     => $user_id,
					'amount'      => $withdraw_amount,
					'method_data' => maybe_serialize( $saved_withdraw_account ),
					'status'      => 'pending',
					'created_at'  => $date,
				)
			);

do_action( 'tutor_insert_withdraw_before', $withdraw_data );

$inserted = $wpdb->insert( $wpdb->prefix . 'tutor_withdraws', $withdraw_data );
			if ( false === $inserted ) {
				throw new Exception( __( 'Unable to process withdrawal request. Please try again.', 'tutor' ) );
			}

$withdraw_id = $wpdb->insert_id;

do_action( 'tutor_insert_withdraw_after', $withdraw_id, $withdraw_data );

/**
			* Getting earning and balance data again
			*/
			$earning               = WithdrawModel::get_withdraw_summary( $user_id );
			$new_available_balance = tutor_utils()->tutor_price( $earning->available_for_withdraw );

do_action( 'tutor_withdraw_after' );

$response = array(
				'msg'               => apply_filters( 'tutor_withdraw_successful_msg', __( 'Withdrawal Request Sent!', 'tutor' ) ),
				'available_balance' => $new_available_balance,
			);

} catch ( Exception $e ) {

$response = array(
				'error' => true,
				'msg'   => $e->getMessage(),
			);

} finally {

$wpdb->query(
				$wpdb->prepare(
					'SELECT RELEASE_LOCK(%s)',
					$lock_name
				)
			);
		}

if ( ! empty( $response['error'] ) ) {
			wp_send_json_error(
				array(
					'msg' => $response['msg'],
				)
			);
		}

wp_send_json_success( $response );
	}
}

Gifari Industries - BD Cyber Security Team