1. <?php
3. namespace App\Controller\RCS;
5. use Symfony\Component\Routing\Annotation\Route;
6. use Symfony\Component\HttpFoundation\Request;
7. use Symfony\Component\HttpFoundation\Response;
8. use Symfony\Component\HttpFoundation\RedirectResponse;
9. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
11. use App\Entity\Purchase;
12. use App\Entity\PurchaseItem;
13. use App\Entity\User;
14. use App\Entity\Contact;
15. use App\Entity\Coupon;
16. use App\Entity\PurchaseNote;
17. use App\Entity\Product;
19. use App\Utils\ContentHelper;
20. use App\Utils\UserHelper;
21. use App\Utils\ContactHelper;
22. use App\Utils\EmailHelper;
23. use App\Utils\OrderHelper;
24. use App\Utils\LeadHelper;
25. use App\Security\WordPressPasswordEncoder;
26. use App\Exception\ResourceNotFoundException;
28. //use Symfony\Bridge\Doctrine\Security\RememberMe\DoctrineTokenProvider;
29. use Symfony\Component\Security\Core\Authentication\RememberMe\PersistentToken;
30. use Symfony\Component\HttpFoundation\Cookie;
32. //todo: Make a Master AuthController, and combine any other controllers that we can
34. class AuthController extends DefaultController
35. {
37.     /**
38.      * @Route("/sign-in",
39.      *    name="sign-in-post",
40.      *    defaults={"message": ""},
41.      *  methods={"POST"}
42.      *    )
43.      */
44.     public function signInPost(
45.         Request $request,
46.         UserHelper $userHelper,
47.         EmailHelper $emailHelper,
48.         //DoctrineTokenProvider $doctrineTokenProvider,
49.         $message = ""
50.     ) 
51.     {
52.         $username = $request->get("_username");
53.         $password = $request->get("_password");
55.         if(!$emailHelper->checkCaptcha($request->get("g-recaptcha-response"))) {
56.             //$this->addFlash("warning", "The reCAPTCHA was invalid. Please try again.");
58.             $message = array (
59.                 "type" => "warning",
60.                 "text" => "The reCAPTCHA was invalid. Please try again.",
61.             );
63.             return $this->defaultRender("forms/sign-in.html.twig", [
64.                 "message" => $message,
65.             ]);
66.         }
68.         $session = $request->getSession();
69.         $nRoute = $session->get("non_sign_in_route");
70.         $path = !empty($nRoute["path"]) ? $nRoute["path"] : "/";
72.         $result = $userHelper->signIn(
73.             $username, 
74.             $password
75.         );
76.         if(is_array($result) && $result["status"] == 2) {
77.             return new RedirectResponse("/mfa/{$result['uid']}/{$result['token']}");
78.         }
79.         elseif (is_array($result) && $result["status"] == 1) {
80.             $this->addFlash("success", "You have successfully logged in.");
81.             $response = new RedirectResponse($path);
82.             //$response = $this->setRememberMe($request, $response, $doctrineTokenProvider, $username);
83.         }
84.         else {
85.             $message = array (
86.                 "type" => "warning",
87.                 "text" => "Invalid credentials provided.",
88.             );
89.             return $this->defaultRender("forms/sign-in.html.twig", [
90.                 "message" => $message,
91.             ]);
92.         }
93.         
94.         return $response;
95.     }
96.     
97.     /**
98.      * @Route("/sign-in",
99.      *    name="sign-in",
100.      *    defaults={"message": ""}
101.      *    )
102.      */
103.     public function signIn(
104.         Request $request,
105.         AuthenticationUtils $authUtils,
106.         WordPressPasswordEncoder $wpEncoder,
107.         $message = ""
108.     ) {
109.         //just testing: $message = $wpEncoder->hash("M0byd1ck771!"); 
110.         //$message = null;
111.         $message = $request->query->get("message") ?? "";
112.         
113.         $error = $authUtils->getLastAuthenticationError();
114.         $lastUsername = $authUtils->getLastUsername();
116.         if ($error) {
117.             $message = array (
118.                 "type" => "warning",
119.                 "text" => "Invalid credentials.",
120.             );
121.         }
122.         
123.         
124.         return $this->defaultRender("forms/sign-in.html.twig", [
125.             "last_username" => $lastUsername,
126.             // "error" => $error,
127.             "message" => $message,
128.         ]);
129.     }
130.     
131.     /**
132.      * @Route("/forgot-password", name="forgot-password")
133.      */
134.     public function forgotPassword (
135.         Request $request,
136.         UserHelper $userHelper,
137.         ContactHelper $contactHelper,
138.         EmailHelper $emailHelper
139.     ) {        
140.         // should we rate limit ??
141.         $username = $request->request->get("username");
142.         $message = array ();
143.         
144.         if ($username) {
145.             $rsp = $userHelper->forgotPassword($username);
146.             $message = array(
147.                 "type" => $rsp["status"] ? "success" : "warning",
148.                 "text" => $rsp["message"],
149.             );
150.         }
151.         
152.         return $this->defaultRender("forms/forgot-password.html.twig", [
153.             "message" => $message,
154.         ]);
155.     }
156.     
157.     /**
158.      * @Route("/forgot-username", name="forgot-username", methods={"POST"})
159.      */
160.     public function forgotUsername (
161.         Request $request,
162.         UserHelper $userHelper
163.     ) {
164.         $email = $request->get("email");
165.         $rsp = $userHelper->forgotUsername($email);
166.         $msg = array ();
167.         
168.         if ($rsp["status"]) {
169.             $msg = array (
170.                 "type" => "success",
171.                 "text" => $rsp["message"],
172.             );
173.         } 
174.         
175.         else {
176.             sleep (3);
177.             $msg = array (
178.                 "type" => "warning",
179.                 "text" => $rsp["message"],
180.             );
181.         }
182.         
183.         return $this->defaultRender("forms/forgot-username.html.twig", [
184.             "message" => $msg
185.         ]);
186.         
187.         /*
188.         try {
189.             $user = $userHelper->getUserByEmail($email);
190.             $username = $user->getUsername();
191.             
192.             return $this->defaultRender("forms/sign-in.html.twig", [
193.                 "message" => [
194.                     "type" => "success",
195.                     "text" => "The username linked to that account is <strong>{$username}</strong>.",
196.                 ]
197.             ]);
198.             
199.         } catch (ResourceNotFoundException $e) {
200.             sleep(3);
201.             return $this->defaultRender("forms/forgot-username.html.twig", [
202.                 "message" => [
203.                     "type" => "warning",
204.                     "text" => "That e-mail address was not found in the system.",
205.                 ]
206.             ]);
207.         } 
208.         */    
209.     }
210.     
211.     /**
212.      * @Route("/forgot-username", name="forgot-username-form")
213.      */
214.     public function viewForgotUsername (
215.     
216.     ) {
217.         
218.         return $this->defaultRender("forms/forgot-username.html.twig", [
219.             "message" => array ()
220.         ]);
221.     }
222.     
223.     /**
224.      * @Route("/rcs-reset-password/{id}/{token}", name="reset-password-form", defaults={"message": ""})
225.      */
226.     public function viewResetPassword (
227.         UserHelper $userHelper,
228.         Request $request,
229.         $id, 
230.         $token,
231.         $message = ""
232.     ) {
233.         
234.         try {
235.             $user = $userHelper->getUserById($id);
236.             
237.             $message = $request->query->get("message") ?? "";
239.             // if token does not match 
240.             if ($token != $user->getResetPwToken()) {
241.                 return $this->defaultRender("errors/404.html.twig");
242.             }
243.             
244.             return $this->defaultRender("forms/reset-password.html.twig", [
245.                 "user" => $user,
246.                 "id" => $id,
247.                 "token" => $token,
248.                 "message" => $message
249.             ]);
250.         } catch (ResourceNotFoundException $e) {
251.             
252.         }
253.     }
254.     
255.     /**
256.      * @Route("/rcs-reset-password", name="reset-password", methods={"POST"})
257.      */
258.     public function resetPassword (
259.         Request $request,
260.         WordPressPasswordEncoder $wpEncoder,
261.         UserHelper $userHelper
262.     ) {
263.         
264.         $id = $request->get("id");
265.         $token = $request->get("token");
266.         $password1 = $request->get("password1");
267.         $password2 = $request->get("password2");
268.         
269.         $rsp = $userHelper->resetPassword(
270.             $id,
271.             $token,
272.             $password1,
273.             $password2
274.         );
275.         
276.         $msg = array ();
277.         
278.         if ($rsp["status"]) {
279.             $msg = array (
280.                 "type" => "success",
281.                 "text" => $rsp["message"],
282.             );
283.             return $this->redirectToRoute("sign-in", [
284.                 "message" => $msg
285.             ]);
286.         } 
287.         
288.         else {
289.             $msg = array (
290.                 "type" => "warning",
291.                 "text" => $rsp["message"],
292.             );
293.             return $this->redirectToRoute("reset-password-form", [
294.                "id" => $id,
295.                "token" => $token,
296.                "message" => $msg
297.             ]);
298.         }
299.         
300.     }
301.      
302.     /* *
303.      * @ R o u t e ("/rcs-sign-up", name="sign-up", methods={"POST"})
304.      * /
305.     public function signUp (
306.         Request $request,
307.         UserHelper $userHelper,
308.         EmailHelper $emailHelper
309.     ) {
310.         
311.         $username = $request->get("username");
312.         $email = $request->get("email");
313.         
314.         if($emailHelper->checkCaptcha($request->get("g-recaptcha-response"))) {
315.             
316.             $password1 = $request->get("password1");
317.             $password2 = $request->get("password2");
318.             
319.             $rsp = $userHelper->signUp(
320.                 $username,
321.                 $email,
322.                 $password1,
323.                 $password2
324.             );
325.             
326.             if ($rsp["status"]) {
327.                 return $this->defaultRender("forms/sign-in.html.twig", [
328.                     "message" => $rsp["message"],
329.                 ]);
330.             }
331.             
332.             return $this->defaultRender("forms/sign-up.html.twig", [
333.                 "username" => $username,
334.                 "email" => $email,
335.                 "message" => $rsp["message"],
336.             ]);
337.         }
338.         else {
339.             return $this->defaultRender("forms/sign-up.html.twig", [
340.                 "username" => $username,
341.                 "email" => $email,
342.                 "message" => [
343.                     "type" => "warning",
344.                     "text" => "The reCAPTCHA was invalid. Please try again.",
345.                 ],
346.             ]);
347.         }
348.     }
349.     */
350.     
351.     /* *
352.      * @ R o u t e("/rcs-sign-up", name="sign-up-form")
353.      * /
354.     public function viewSignUp (
355.     
356.     ) {
357.         
358.         return $this->defaultRender("forms/sign-up.html.twig", [
359.             "username" => "",
360.             "email" => "",
361.             "message" => array (
362.             
363.             )
364.         ]);
365.     }
366.     */
367.     
368.     /**
369.      * @Route("/sign-up", name="new-sign-up", methods={"POST"})
370.      */
371.     public function newSignUp (
372.         Request $request,
373.         UserHelper $userHelper,
374.         EmailHelper $emailHelper,
375.         LeadHelper $leadHelper,
376.         ContentHelper $contentHelper
377.     ) {
378.         
379.         if(!$emailHelper->checkCaptcha($request->get("g-recaptcha-response"))) {
380.             
381.             $lead = $request->get("lead");
382.             
383.             $firstname = array_key_exists("firstname", $lead) ? $lead["firstname"] : "";
384.             $lastname = array_key_exists("lastname", $lead) ? $lead["lastname"] : "";
385.             $email = array_key_exists("email", $lead) ? $lead["email"] : "";
386.             $username = array_key_exists("username", $lead) ? $lead["username"] : "";
387.             $address1 = array_key_exists("address1", $lead) ? $lead["address1"] : "";
388.             $address2 = array_key_exists("address2", $lead) ? $lead["address2"] : "";
389.             $city = array_key_exists("city", $lead) ? $lead["city"] : "";
390.             $state = array_key_exists("state", $lead) ? $lead["state"] : "";
391.             $zip = array_key_exists("zip", $lead) ? $lead["zip"] : "";
392.             $company = array_key_exists("company", $lead) ? $lead["company"] : "";
393.             $phone = array_key_exists("phone", $lead) ? $lead["phone"] : "";
394.             
395.             //$this->addFlash("warning", "The reCAPTCHA was invalid. Please try again.");
396.             return $this->defaultRender("forms/new-sign-up.html.twig", [
397.                 "username" => $username,
398.                 "email" => $email,
399.                 "firstname" => $firstname,
400.                 "lastname" => $lastname,
401.                 "address1" => $address1,
402.                 "address2" => $address2,
403.                 "city" => $city,
404.                 "state" => $state,
405.                 "zip" => $zip,
406.                 "company" => $company,
407.                 "phone" => $phone,
408.                 "message" => [
409.                     "type" => "warning",
410.                     "text" => "The reCAPTCHA was invalid. Please try again.",
411.                 ]
412.             ]);
413.         }
414.         
415.         
416.         $siteSignup = $request->get("site-signup");
417.         $enewsSignup = $request->get("enews-signup");
418.         //$enewsMetalSignup = $request->get("enews-metal-signup");
419.         
420.         $enewsSignupSuccess = false; //store if they signed up for the enews
421.         $enewsMetalSignupSuccess = false; //store if they signed up for metal enews
422.         $siteSignupSuccess = false; //store if they signed up for the site
423.         
424.         
425.         if($siteSignup) {
426.             //Handle the form for signing up to the site.
427.             $lead = $request->get("lead");
428.             
429.             $username = $lead["username"];
430.             $email = $lead["email"];
431.             $email = trim($email);
432.             $firstname = $lead["firstname"];
433.             $lastname = $lead["lastname"];
434.             
435.             $address1 = $lead["address1"];
436.             $address2 = $lead["address2"];
437.             $city = $lead["city"];
438.             $state = $lead["state"];
439.             $zip = $lead["zip"];
440.             $company = $lead["company"];
441.             $phone = $lead["phone"];
442.             
443.             $password1 = $request->get("password1");
444.             $password2 = $request->get("password2");
445.             
446.             $rsp = $userHelper->signUp(
447.                 $firstname,
448.                 $lastname,
449.                 $username,
450.                 $email,
451.                 $password1,
452.                 $password2
453.             );
454.             
455.             if ($rsp["status"]) { //success
456.                 $siteSignupSuccess = true;
457.                 //return new RedirectResponse('/welcome-activation');
458.             }
459.             else {
460.                 
461.                 //$this->addFlash("warning", $rsp["message"]);
462.                 return $this->defaultRender("forms/new-sign-up.html.twig", [
463.                     "username" => $username,
464.                     "email" => $email,
465.                     "firstname" => $firstname,
466.                     "lastname" => $lastname,
467.                     "address1" => $address1,
468.                     "address2" => $address2,
469.                     "city" => $city,
470.                     "state" => $state,
471.                     "zip" => $zip,
472.                     "company" => $company,
473.                     "phone" => $phone,
474.                     "message" => $rsp["message"],
475.                 ]);
476.                 
477.             }
478.             
479.         }
480.         
481.         
482.         
483.         if ($enewsSignup || ($siteSignup && $siteSignupSuccess && ($request->get("enews") || $request->get("metal-enews") || $request->get("coatings-enews")))) {
484.             //Handle the form for signing up for just enews-signup
485.             $lead = $request->get("lead");
486.             
487.             $firstname = $lead["firstname"];
488.             $lastname = $lead["lastname"];
489.             $email = $lead["email"];
490.             $email = trim($email);
491.             $company = $lead["company"];
492.             $contractor_type = $lead["contractor_type"];
493.             $country = ($lead["country"] == "Other" ? $lead["country_other"] : $lead["country"]);
494.             $business_type = $lead["business_type"];
495.             
496.             if(empty($email) || filter_var($email, FILTER_VALIDATE_EMAIL) === false){
497.                 $this->addFlash("warning", "Please enter a valid email address.");
498.                 return new RedirectResponse($request->headers->get('referer'));
499.             }            
500.             if(empty($firstname)){
501.                 $this->addFlash("warning", "Please enter your first name");
502.                 return new RedirectResponse($request->headers->get('referer'));
503.             }
504.             if(empty($lastname)){
505.                 $this->addFlash("warning", "Please enter your last name");
506.                 return new RedirectResponse($request->headers->get('referer'));
507.             }
508.             if(empty($company)){
509.                 $this->addFlash("warning", "Please enter your company");
510.                 return new RedirectResponse($request->headers->get('referer'));
511.             }
512.             
513.             try {
514.                 //add to mailchimp list
515.                 
516.                 // MailChimp API credentials
517.                 $apiKey = "27ce559264a47aa3487224e1c95424bc-us10";
518.                 $listID = "3efdbc4139";
519.                 
520.                 // Determine wir wim or both
521.                 $keys = [];
523.                 if ($request->get("enews")) {
524.                     array_push($keys, 'WIR');
525.                 }
526.                 if ($request->get("metal-enews")) {
527.                     array_push($keys, 'WIM');
528.                 }
529.                 if ($request->get("coatings-enews")) {
530.                     array_push($keys, 'WIC');
531.                 }
532.                 // MailChimp API URL
533.                 $memberID = md5(strtolower($email));
534.                 $dataCenter = substr($apiKey,strpos($apiKey,'-')+1);
535.                 $url = 'https://' . $dataCenter . '.api.mailchimp.com/3.0/lists/' . $listID . '/members/' . $memberID;
536.                 
537.                 // member information
538.                 $json = json_encode([
539.                     'email_address' => $email,
540.                     'status'        => 'subscribed',
541.                     'merge_fields'  => [
542.                         'FNAME'     => $firstname,
543.                         'LNAME'     => $lastname,
544.                         'MMERGE3'    => $company,
545.                         'MMERGE4'    => $contractor_type,
546.                         'MMERGE5'    => $business_type
547.                     ],
548.                     'tags' => $keys
549.                 ]);
550.                 
551.                 $ch = curl_init($url);
552.                 curl_setopt($ch, CURLOPT_USERPWD, 'user:' . $apiKey);
553.                 curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
554.                 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
555.                 curl_setopt($ch, CURLOPT_TIMEOUT, 10);
556.                 curl_setopt($ch, CURLOPT_CUSTOMREQUEST, 'PUT');
557.                 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
558.                 curl_setopt($ch, CURLOPT_POSTFIELDS, $json);
559.                 $result = curl_exec($ch);
560.                 $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
561.                 curl_close($ch);
562.                 
563.                 if ($httpCode != 200) {
564.                     $httpErrorCode = $httpCode;
565.                 }
566.                 
567.                 // end mailchimp
568.                 
569.                 if ($request->get("enews")) {
570.                     $emailHelper->sendEmail(
571.                         ["rcs@rooferscoffeeshop.com"],
572.                         "New submission from the \"Week in Roofing\" sign-up form.",
573.                         [
574.                             ["p" => "New submission from the \"Week in Roofing\" sign-up form."],
575.                             ["table" => [
576.                                 "First Name" => $firstname,
577.                                 "Last Name" => $lastname,
578.                                 "Email Address" => $email,
579.                                 "Company" => $company,
580.                                 "Country" => $country,
581.                                 "Type of Work" => $contractor_type,
582.                                 "Type of Business" => $business_type,
583.                             ]],
584.                         ]
585.                     );
586.                 }
588.                 if ($request->get("metal-enews")) {
589.                     $emailHelper->sendEmail(
590.                         ["rcs@rooferscoffeeshop.com"],
591.                         "New submission from the \"Week in Metal\" sign-up form.",
592.                         [
593.                             ["p" => "New submission from the \"Week in Metal\" sign-up form."],
594.                             ["table" => [
595.                                 "First Name" => $firstname,
596.                                 "Last Name" => $lastname,
597.                                 "Email Address" => $email,
598.                                 "Company" => $company,
599.                                 "Country" => $country,
600.                                 "Type of Work" => $contractor_type,
601.                                 "Type of Business" => $business_type,
602.                             ]],
603.                         ]
604.                     );
605.                 }
607.                 if ($request->get("coatings-enews")) {
608.                     $emailHelper->sendEmail(
609.                         ["rcs@rooferscoffeeshop.com"],
610.                         "New submission from the \"Week in Coatings\" sign-up form.",
611.                         [
612.                             ["p" => "New submission from the \"Week in Coatings\" sign-up form."],
613.                             ["table" => [
614.                                 "First Name" => $firstname,
615.                                 "Last Name" => $lastname,
616.                                 "Email Address" => $email,
617.                                 "Company" => $company,
618.                                 "Country" => $country,
619.                                 "Type of Work" => $contractor_type,
620.                                 "Type of Business" => $business_type,
621.                             ]],
622.                         ]
623.                     );
624.                 }
625.                 // store the lead
626.                 $content = null;
627.                 
628.                 $lead_custom = $request->get("lead_custom");
629.                 $lead = $leadHelper->saveLead($lead, $content, $request, $lead_custom);
630.                 
631.                 if(isset($httpErrorCode)) {
632.                     $lead->setComments("MailChimp http code: {$httpErrorCode}");
633.                 }
634.                 
635.                 $em = $this->getDoctrine()->getManager();
636.                 $em->persist($lead);
637.                 $em->flush();
638.                 
639.                 if(isset($httpErrorCode)) {
640.                     $this->addFlash("warning", "An error occurred while attempting to add you to our mailing list. Please try again later.");
641.                     return new RedirectResponse($request->headers->get('referer'));
642.                 }
643.                 
644.                 //$this->addFlash("success", "Thank you for signing up for the RCS Week in Review.");
645.                 //return new RedirectResponse($request->headers->get('referer'));
646.                 $enewsSignupSuccess = true;
647.                 
648.             }
649.             
650.             catch (\Exception $e) {
651.                 $this->addFlash("warning", $e->getMessage());
652.                 return new RedirectResponse($request->headers->get('referer'));
653.             }
654.             
655.         }
656.         else {
657.             $lead = $request->get("lead");
658.             $lead_custom = $request->get("lead_custom");
659.             $lead = $leadHelper->saveLead($lead, null, $request, $lead_custom);
660.             $em = $this->getDoctrine()->getManager();
661.             $em->persist($lead);
662.             $em->flush();
663.         }
664.         
665.         if($siteSignupSuccess) {
666.             return new RedirectResponse('/welcome-activation');
667.         }
668.         
669.         if($enewsSignupSuccess) {
670.             // $this->addFlash("success", "Thank you for signing up for the RCS Week in Roofing.");
671.             return new RedirectResponse('/thank-you-wir');
672.         }
673.         
674.     }
675.     
676.     /**
677.      * @Route("/sign-up", name="new-sign-up-form")
678.      */
679.     public function viewNewSignUp (
680.     
681.     ) {
682.         
683.         return $this->defaultRender("forms/new-sign-up.html.twig", [
684.             "firstname" => "",
685.             "lastname" => "",
686.             "username" => "",
687.             "email" => "",
688.             "address1" => "",
689.             "address2" => "",
690.             "city" => "",
691.             "state" => "",
692.             "zip" => "",
693.             "company" => "",
694.             "message" => array (
695.             
696.             ),
697.             "meta" => array (
698.                "breadcrumbs" => [
699.                    [
700.                        "title" => "Sign Up",
701.                        "href" => "/sign-up",
702.                    ]
703.                ]
704.            )
705.         ]);
706.     }
707.     
708.     
709.     
710.     
711.     
712.     
713.     
714.     
715.     /**
716.      * @Route("/activate-account", name="activate", methods={"POST"})
717.      */
718.     public function activateAccount (
719.         Request $request,
720.         UserHelper $userHelper,
721.         ContentHelper $contentHelper
722.     ) {
723.         
724.         $id = $request->get("id");
725.         $token = $request->get("token");
726.         $rclubProdId = $request->get("rclubProdId");
727.         $rsp = $userHelper->activateAccount($id, $token);
728.         
729.         if ($rsp["status"]) {
730.             
731.             //redirect to purchase page if rclubProdId is set
732.             if($rclubProdId) {
733.                 $user = $userHelper->getUserById($id);
734.                 if ($user) {
735.             
736.                     // use the current cart or create one
737.                    $purchase = $user->getActivePurchase();
738.                    if (!$purchase) {
739.                        $purchase = new Purchase();
740.                    }
741.                    
742.                    //Remove all items since we're going straight to checkout
743.                    foreach($purchase->getItems() as $item) {
744.                        //$product = $item->getProduct();
745.                        //if($product->getType() == Product::PRODUCT_TYPE_MEMBERSHIP) {
746.                            $purchase->removeItem($item);
747.                        //}
748.                    }
749.                    
750.                    $newItem = new PurchaseItem();
751.                    
752.                    $newItem->setProduct($contentHelper->getProductById($rclubProdId));
753.                    $newItem->setType(PurchaseItem::TYPE_MEMBERSHIP);
754.                    $newItem->setPurchase($purchase);
755.                    
756.                    // add to the current Item
757.                    $purchase->setCurrentItem($newItem);
758.                    $purchase->setUser($user);
759.                    $purchase->setDiscount(0);
760.                    
761.                    $manager = $this->getDoctrine()->getManager();
762.                    $manager->persist($purchase);
763.                    $manager->flush();
764.                    
765.                    $this->addFlash("success", "You have successfully activated your account! Please complete your purchase below to join the R-Club.");
766.                    return $this->redirectToRoute("purchase", [
767.                    
768.                    ]);
769.         
770.                }
771.             }
774.             /*return $this->defaultRender("/", [
775.                 "message" => array (
776.                     "type" => "success",
777.                     "text" => $rsp["message"],
778.                 )
779.             ]);*/
780.             
781.             //$this->addFlash("success", $rsp["message"]);
782.             //return $this->redirect("/");
783.             return $this->redirect("/welcome-to-rcs");
784.             
785.             //$this->addFlash("success", $rsp["message"]);
786.             //return $this->redirect('http://staging.rooferscoffeeshop.com/post-a-classified-ad/2');
787.         } 
788.         
789.         else {
790.             return $this->defaultRender("forms/send-activation.html.twig", [
791.                 "type" => "warning",
792.                 "text" => $rsp["message"],
793.             ]);
794.         }
795.         
796.         
797.         /*
798.         try {
799.             $id = $request->get("id");
800.             $token = $request->get("token");
801.             
802.             $user = $userHelper->getUserById($id);
803.             $expires = $user->getActivationExpires();
804.             
805.             if ($user->getActivationToken() == $token && 
806.                 new \DateTime("now") < $expires
807.             ) {
808.                 $user->setActivationToken(null);
809.                 $user->setActivationExpires(null);
810.                 // $user->setIsActive(1);
811.                 $user->setStatus(1);
812.                 
813.                 $em = $this->getDoctrine()->getManager();
814.                 $em->persist($user);
815.                 $em->flush();
816.                 $em->clear();
817.                 
818.                 return $this->defaultRender("forms/sign-in.html.twig", [
819.                     "message" => array (
820.                         "type" => "success",
821.                         "text" => "The account has been activated. You may now sign in.",
822.                     ),
823.                 ]);
824.             }
825.         } 
826.         
827.         catch (ResourceNotFoundException $e) {
828.             // ... ignore
829.         }
830.         
831.         return $this->defaultRender("forms/send-activation.html.twig", [
832.             "message" => array (
833.                 "type" => "warning",
834.                 "text" => "The provided token was not found in the system. It is possible that it has expired. If the token has expired, you will need to sign up again.",
835.             ),
836.         ]);
837.         */
838.         
839.     }
840.     
841.     /**
842.      * @Route("/activate-account/{id}/{token}/{rclubProdId}", name="view-activation-form")
843.      */
844.     public function viewActivateAccount (
845.         UserHelper $userHelper,
846.         $id = "",
847.         $token = "",
848.         $rclubProdId = ""
849.     ) {
850.         try {
851.             $user = $userHelper->getUserById($id);
852.             $expires = $user->getActivationExpires();
853.             if ($token == $user->getActivationToken() && 
854.                 new \DateTime("now") < $expires 
855.             ) {
856.                 return $this->defaultRender("forms/activate.html.twig", [
857.                     "username" => $user->getUsername(),
858.                     "id" => $id,
859.                     "token" => $token,
860.                     "rclubProdId" => $rclubProdId,
861.                 ]);
862.             }
863.         } catch (ResourceNotFoundException $e) {
864.             // ... ignore
865.         }
866.         
867.         return $this->defaultRender("forms/send-activation.html.twig", [
868.             "message" => array (
869.                 "type" => "warning",
870.                 "text" => "The provided token was not found in the system. It is possible that it has expired. If the token has expired, you will need to sign up again or re-send the activation link.",
871.             ),
872.         ]);
873.     }
874.     
875.     /**
876.      * @Route("/send-activation", name="send-activation", methods={"POST"})
877.      */
878.     public function sendActivation (
879.         Request $request,
880.         UserHelper $userHelper,
881.         EmailHelper $emailHelper
882.     ) {
883.         
884.         $email = $request->get("email");
885.         $resp = $userHelper->sendActivation($email);
886.                  
887.         if ($resp["status"]) {
888.             return $this->defaultRender("forms/send-activation.html.twig", [
889.                 "message" => array (
890.                     "type" => "success",
891.                     "text" => $resp["message"],
892.                 )
893.             ]);
894.         }
895.         
896.         return $this->defaultRender("forms/send-activation.html.twig", [
897.             "message" => array (
898.                 "type" => "warning",
899.                 "text" => $resp["message"],
900.             )
901.         ]);
902.         
903.         /*
904.         try {
905.             $email = $request->get("email");
906.             $user = $userHelper->getUserByEmail($email);
907.             $uid = $user->getId();
908.             $token = $user->getActivationToken();
909.             $expires = $user->getActivationExpires();
910.             
911.             $pooled = $emailHelper->sendEmail($email, "Account Activation Link", [
912.                 ["p" => "Hello {$user->getFullName()},"],
913.                 ["p" => "You recently requested to receive an activation link for your RoofersCoffeeShop account. Click the button below to activate it."],
914.                 ["button" => [
915.                     "text" => "Activate Account",
916.                     "href" => "https://rooferscoffeeshop.com/activate-account/{$uid}/{$token}",
917.                 ]],
918.                 ["p" => "If you did not request a password reset, please ignore this email or reply to let us know. This password reset link is only valid for the next 2 hours."],
919.             ]);
920.             
921.             if ($pooled) {
922.                 return $this->defaultRender("forms/send-activation.html.twig", [
923.                     "message" => array (
924.                         "type" => "success",
925.                         "text" => "The activation link has been sent to that e-mail address.",
926.                     )
927.                 ]);
928.             } 
929.             
930.             return $this->defaultRender("forms/send-activation.html.twig", [
931.                 "message" => array (
932.                     "type" => "warning",
933.                     "text" => "An error occurred while trying to send a system e-mail. If this error continues to occur please contact support.",
934.                 )
935.             ]);
936.             
937.         } catch (ResourceNotFoundException $e) {
938.             
939.         }
940.         
941.         return $this->defaultRender("forms/send-activation.html.twig", [
942.             "message" => array (
943.                 "type" => "warning",
944.                 "text" => "No account found matching that criteria.",
945.             )
946.         ]);
947.         */
948.         
949.     }
950.     
951.     /**
952.      * @Route("/send-activation", name="send-activation-form")
953.      */
954.     public function viewSendActivation (
955.         UserHelper $userHelper
956.     ) {
957.         return $this->defaultRender("forms/send-activation.html.twig", [
958.             "message" => array (),
959.         ]);
960.     }
962.     /**
963.      * @Route("/mfa/{id}/{token}", name="view-mfa-form")
964.      */
965.     public function viewMfa (
966.         UserHelper $userHelper,
967.         $id = "",
968.         $token = ""
969.     ) {
970.         try {
971.             $user = $userHelper->getUserById($id);
972.             $expires = $user->getMfaTokenExpires();
973.             if ($token == $user->getMfaToken() && 
974.                 new \DateTime("now") < $expires 
975.             ) {
976.                 return $this->defaultRender("forms/mfa.html.twig", [
977.                     "username" => $user->getUsername(),
978.                     "id" => $id,
979.                     "token" => $token,
980.                 ]);
981.             }
982.         } catch (ResourceNotFoundException $e) {
983.             // ... ignore
984.         }
985.         
986.         return $this->defaultRender("forms/sign-in.html.twig", [
987.             "message" => array (
988.                 "type" => "warning",
989.                 "text" => "The provided token was not found in the system. It is possible that it has expired. Try signing in again.",
990.             ),
991.         ]);
992.     }
994.     /**
995.      * @Route("/mfasignin", name="mfasignin", methods={"POST"})
996.      */
997.     public function mfaSignIn (
998.         Request $request,
999.         UserHelper $userHelper
1000.         //DoctrineTokenProvider $doctrineTokenProvider
1001.     ) {
1002.         
1003.         $id = $request->get("id");
1004.         $token = $request->get("token");
1005.         $code = $request->get("code");
1006.         $rsp = $userHelper->signInMfa($id, $token, $code);
1007.         
1008.         if ($rsp["status"]) {
1009.             
1010.             /*return $this->defaultRender("/", [
1011.                 "message" => array (
1012.                     "type" => "success",
1013.                     "text" => $rsp["message"],
1014.                 )
1015.             ]);*/
1016.             $session = $request->getSession();
1017.             $nRoute = $session->get("non_sign_in_route");
1018.             $path = !empty($nRoute["path"]) ? $nRoute["path"] : "/";
1020.             $user = $userHelper->getUserById($id);
1021.             $username = $user->getUsername();
1022.             
1023.             $this->addFlash("success", "You have successfully logged in.");
1024.             $response = new RedirectResponse($path);
1025.             //$response = $this->setRememberMe($request, $response, $doctrineTokenProvider, $username);
1026.             return $response;
1027.             
1028.             //return $this->redirect("/");
1030.             
1031.             //$this->addFlash("success", $rsp["message"]);
1032.             //return $this->redirect('http://staging.rooferscoffeeshop.com/post-a-classified-ad/2');
1033.         } 
1034.         
1035.         else {
1036.             return $this->defaultRender("forms/mfa.html.twig", [
1037.                 //"username" => $user->getUsername(),
1038.                 "id" => $id,
1039.                 "token" => $token,
1040.                 "message" => array (
1041.                     "type" => "warning",
1042.                     "text" => $rsp["message"],
1043.                 )
1044.             ]);
1045.         }
1046.         
1047.     }
1049.     //no longer used
1050.     public function setRememberMe(
1051.         $request,
1052.         $response,
1053.         $doctrineTokenProvider,
1054.         $username
1055.     ) {
1056.         return false;
1057.         $series = base64_encode(random_bytes(64));
1058.         $tokenValue = base64_encode(random_bytes(64));
1060.         $user = $this->user;
1062.         $doctrineTokenProvider->createNewToken(
1063.             new PersistentToken(
1064.                 User::class,
1065.                 //$user->getUsername(),
1066.                 $username,
1067.                 $series,
1068.                 $tokenValue,
1069.                 new \DateTime()
1070.             )
1071.         );
1072.         
1073.         $options = [
1074.             'name' => 'REMEMBERME',
1075.             'lifetime' => 604800,
1076.             'path' => '/',
1077.             //'domain' => 'staging.rooferscoffeeshop.com',
1078.             'domain' => null,
1079.             'secure' => true,
1080.             'httponly' => true,
1081.             'samesite' => 'strict',
1082.         ];
1084.         //samesite = 
1085.         //public const SAMESITE_NONE = 'none';
1086.         //public const SAMESITE_LAX = 'lax';
1087.         //public const SAMESITE_STRICT = 'strict';
1089.         $cookieParts = [$series, $tokenValue];
1090.         
1091.         foreach ($cookieParts as $cookiePart) {
1092.             if (str_contains($cookiePart, ":")) {
1093.                 throw new \InvalidArgumentException(sprintf('$cookieParts should not contain the cookie delimiter "%s".', ":"));
1094.             }
1095.         }
1097.         $encodedCookie = base64_encode(implode(":", $cookieParts));
1100.         //$response = new Response();
1102.         $response->headers->setCookie(
1103.             new Cookie(
1104.                 $options['name'],
1105.                 //$this->encodeCookie([$series, $tokenValue]),
1106.                 $encodedCookie,
1107.                 time() + $options['lifetime'],
1108.                 $options['path'],
1109.                 $options['domain'],
1110.                 $options['secure'] ?? $request->isSecure(),
1111.                 $options['httponly'],
1112.                 false,
1113.                 $options['samesite']
1114.             )
1115.         );
1117.         return $response;
1118.     }
1119.     
1120.     /**
1121.      * @Route("/account", methods={"POST"}, name="post-account")
1122.      */
1123.     public function updateAccount (
1124.         Request $request,
1125.         UserHelper $userHelper
1126.     ) {
1127.         // if we have a current user
1128.         if ($this->user) {
1129.             // grab the fields
1130.             $data = [];
1131.             
1132.             if ($request->get("firstname")) {
1133.                 $data["firstname"] = $request->get("firstname");
1134.             }
1135.             
1136.             if ($request->get("lastname")) {
1137.                 $data["lastname"] = $request->get("lastname");
1138.             }
1139.             
1140.             if ($request->get("displayname")) {
1141.                 $data["displayname"] = $request->get("displayname");
1142.             }
1143.             
1144.             if ($request->get("username")) {
1145.                 $data["username"] = $request->get("username");
1146.             }
1147.             
1148.             if ($request->get("email")) {
1149.                 $data["email"] = $request->get("email");
1150.             }
1151.             
1152.             if ($request->get("password1")) {
1153.                 $data["password1"] = $request->get("password1");
1154.                 $data["password2"] = $request->get("password2");
1155.                 $data["password3"] = $request->get("password3");
1156.             }
1157.             
1158.             // user avatar
1159.             if ($request->files->get("avatar")) {
1160.                 $data["avatar"] = $request->files->get("avatar");
1163.                 $mime =  $data["avatar"]->getMimeType();
1164.                 if(!in_array($mime, ["image/jpg", "image/jpeg", "image/png", "image/gif"])) {
1165.                     $this->addFlash("danger", "Only PNG, JPG, and GIF file types are allowed.");
1166.                     return new RedirectResponse($request->headers->get('referer'));
1167.                 }
1168.             }
1169.             
1170.             else if ($request->get("remove_avatar")) {
1171.                 $data["remove_avatar"] = true;
1172.             }
1173.             
1174.             //Update notifications 
1175.             $data["usermeta"] = [];
1176.             $notifications = $request->get("notifications");
1177.             if(empty($notifications)) {
1178.                 $notifications = [];
1179.             }
1180.             $data["usermeta"]["member_notification_forum"] = in_array("forum", $notifications);
1181.             $data["usermeta"]["member_notification_page"] = in_array("page", $notifications);
1182.             $data["usermeta"]["member_notification_classifieds"] = in_array("classifieds", $notifications);
1183.             
1184.             
1185.             $rsp = $userHelper->updateAccount(
1186.                 $this->user->getId(),
1187.                 $data
1188.             );
1189.             $this->addFlash($rsp["type"], $rsp["message"]);
1190.         }
1191.         
1192.         return $this->redirectToRoute("account");
1193.     }
1194.     
1195.     
1196.     /**
1197.      * @Route("/account/profile", methods={"POST"}, name="post-account-profile")
1198.      */
1199.     public function updateAccountProfile (
1200.         Request $request,
1201.         ContactHelper $contactHelper,
1202.         EmailHelper $emailHelper
1203.     ) {
1204.         
1205.         $user = $this->user;
1206.         // if we have a current user
1207.         if($user) {
1208.             
1209.             $contact = $user->getContact();
1210.             if(!$contact) {
1211.                 $contact = new Contact();
1212.                 $user->setContact($contact);
1213.                 $entityManager = $this->getDoctrine()->getManager();
1214.                 $entityManager->persist($user);
1215.                 $entityManager->flush();
1216.             }
1217.             
1218.             $contactHelper->updateContact($contact->getId(), $request->request->all());
1219.             $this->addFlash("success", "Profile updated.");
1220.             
1221.             $emailHelper->sendEmail(
1222.                 ["rcs@rooferscoffeeshop.com"],
1223.                 "Profile Updated - {$user->getUsername()}",
1224.                 [
1225.                     ["p" => "{$user->getUsername()} has updated their account's profile information."],
1226.                     ["p" => "Visit the User Dashboard to view these changes."],
1227.                     ["button" => [
1228.                         "text" => "User Dashboard",
1229.                         "href" => "https://www.rooferscoffeeshop.com/user-dashboard",
1230.                     ]],
1231.                 ]
1232.             );
1233.             
1234.         }
1235.         
1236.         return $this->redirectToRoute("account", [
1237.            "slug" => "profile",
1238.         ]);
1239.     }
1240.     
1241.     /**
1242.      * @Route("/account/content/{type}", name="account-content-filter")
1243.      */
1244.     public function viewAccountContentType (
1245.         Request $request,
1246.         UserHelper $userHelper,
1247.         $type = ""
1248.     ) {
1249.         if (!$this->user) {
1250.             return $this->redirect("/sign-in");
1251.         }
1252.         $user = $this->user;
1253.         
1254.         return $this->defaultRender("forms/user-account.html.twig", [
1255.             "user" => $user,
1256.             "slug" => "content",
1257.             "type" => $type,
1258.             
1259.             "meta" => [
1260.                 "breadcrumbs" => [
1261.                     [
1262.                         "title" => "Your Account",
1263.                         "href" => "/account",
1264.                     ]
1265.                 ]
1266.             ]
1267.         ]);
1268.         
1269.         
1270.     }
1271.     
1272.     /**
1273.      * @Route("/account/membership/cancel", methods={"POST"}, name="post-account-membership-cancel")
1274.      */
1275.     public function cancelAccountMembership (
1276.         Request $request,
1277.         UserHelper $userHelper,
1278.         OrderHelper $orderHelper,
1279.         EmailHelper $emailHelper
1280.     ) {
1281.         if (!$this->user) {
1282.             return $this->redirect("/sign-in");
1283.         }
1284.         $user = $this->user;
1285.         
1286.         $manager = $this->getDoctrine()->getManager();
1287.         $item = $manager->getRepository(PurchaseItem::class)
1288.             ->findOneBy([
1289.                "id" => $request->get("item_id"),
1290.             ]);
1291.         
1292.         $item->setStatus(PurchaseItem::STATUS_ACTIVE);
1293.         $manager->persist($item);
1294.         $manager->flush();
1295.         
1296.         //send email
1297.         $message = [];
1298.         $message[] = ["p" => "Your R-Club membership has been cancelled and will not auto-renew."];
1299.         $message[] = ["a" => ["href" => "rooferscoffeeshop.com/account", "text" => "Go to your account page to turn auto-renew back on or update your settings."]];
1300.         
1301.         $emailHelper->sendEmail (
1302.             [$user->getEmail()],
1303.             "R-Club Auto-Renew Cancelled",
1304.             $message
1305.         );
1306.         
1307.         $this->addFlash("success", "Your membership has been cancelled and will not auto-renew.");
1308.         return $this->redirectToRoute("account", [
1309.            "slug" => "membership",
1310.         ]);
1311.     }
1312.     
1313.     /**
1314.      * @Route("/account/membership/continue", methods={"POST"}, name="post-account-membership-continue")
1315.      */
1316.     public function continueAccountMembership (
1317.         Request $request,
1318.         UserHelper $userHelper,
1319.         OrderHelper $orderHelper,
1320.         EmailHelper $emailHelper
1321.     ) {
1322.         if (!$this->user) {
1323.             return $this->redirect("/sign-in");
1324.         }
1325.         $user = $this->user;
1326.         
1327.         $manager = $this->getDoctrine()->getManager();
1328.         $item = $manager->getRepository(PurchaseItem::class)
1329.             ->findOneBy([
1330.                "id" => $request->get("item_id"),
1331.             ]);
1332.         
1333.         $item->setStatus($item->getPaymentFailed() ? PurchaseItem::STATUS_ACTIVE_RENEWING_FINAL : PurchaseItem::STATUS_ACTIVE_RENEWING);
1334.         $manager->persist($item);
1335.         $manager->flush();
1336.         
1337.         //send email
1338.         $message = [];
1339.         $message[] = ["p" => "Thank you for re-activating your R-Club membership."];
1340.         $message[] = ["a" => ["href" => "rooferscoffeeshop.com/account", "text" => "Go to your account page to view your renewal information."]];
1341.         
1342.         $emailHelper->sendEmail (
1343.             [$user->getEmail()],
1344.             "R-Club Auto-Renew Activated",
1345.             $message
1346.         );
1347.         
1348.         $this->addFlash("success", "Your membership has been re-activated and will now automatically renew.");
1349.         return $this->redirectToRoute("account", [
1350.            "slug" => "membership",
1351.         ]);
1352.     }
1353.     
1354.     /**
1355.      * @Route("/account/membership", methods={"POST"}, name="post-account-membership")
1356.      */
1357.     public function updateAccountMembership (
1358.         Request $request,
1359.         UserHelper $userHelper,
1360.         OrderHelper $orderHelper
1361.     ) {
1362.         
1363.         if (!$this->user) {
1364.             return $this->redirect("/sign-in");
1365.         }
1366.         $user = $this->user;
1367.         
1368.         $payment = $request->get("payment");
1369.         $card = $request->get("card");
1370.         
1371.         //expiration date
1372.         $card["card_expires"] = $card["card_expires_month"].$card["card_expires_year"];
1373.         
1374.         if (!$payment || !isset($payment["terms"])) {
1375.             $this->addFlash("warning", "You must accept the terms and conditions.");
1376.             return $this->redirectToRoute("account", [
1377.                "slug" => "membership",
1378.             ]);
1379.         }
1380.         
1381.         $result = $orderHelper->generateToken(
1382.            $payment["firstname"],
1383.            $payment["lastname"],
1384.            $payment["company"],
1385.            $payment["address1"],
1386.            $payment["address2"],
1387.            $payment["city"],
1388.            $payment["state"],
1389.            $payment["zip"],
1390.            $payment["country"],
1391.            $payment["email"],
1392.            $payment["phone"],
1393.            $_SERVER["REMOTE_ADDR"],
1394.            $card["card_number"],
1395.            $card["card_expires"],
1396.            $card["card_csc"]
1397.         );
1398.         
1399.         if ($result["result"] == "APPROVAL" || $result["result"] == "APPROVED") {
1400.             
1401.             $last4 = $card["card_number"];
1402.             $last4 = preg_replace("/[^0-9]/", '', $last4);
1403.             $last4 = substr($last4, -4);
1404.             
1405.             $user->setUsermetum("has_payment_info", "1");
1406.             $user->setUsermetum("payment_first_name", $payment["firstname"]);
1407.             $user->setUsermetum("payment_last_name", $payment["lastname"]);
1408.             $user->setUsermetum("payment_company", $payment["company"]);
1409.             $user->setUsermetum("payment_address_line_1", $payment["address1"]);
1410.             $user->setUsermetum("payment_address_line_2", $payment["address2"]);
1411.             $user->setUsermetum("payment_city", $payment["city"]);
1412.             $user->setUsermetum("payment_state_province", $payment["state"]);
1413.             $user->setUsermetum("payment_postal_code", $payment["zip"]);
1414.             $user->setUsermetum("payment_country", $payment["country"]);
1415.             $user->setUsermetum("payment_email", $payment["email"]);
1416.             $user->setUsermetum("payment_phone", $payment["phone"]);
1417.             $user->setUsermetum("payment_last4", $last4);
1418.             $user->setUsermetum("payment_exp", $card["card_expires"]);
1419.             //$user->setUsermetum("payment_cvv2", $card["card_csc"]);
1420.             $user->setUsermetum("payment_token", $result["token"]);
1421.             $user->setUsermetum("payment_token_response", $result["token_response"]);
1422.             
1423.             $manager = $this->getDoctrine()->getManager();
1424.             $manager->persist($user);
1425.             $manager->flush();
1426.             
1427.             $this->addFlash("success", "Membership settings updated.");
1428.             return $this->redirectToRoute("account", [
1429.                //"slug" => "membership",
1430.             ]);
1431.         }
1432.         else {
1433.             $this->addFlash("warning", "Their was an error while updating your payment information. Response: {$result["result"]}");
1434.             return $this->redirectToRoute("account", [
1435.                "slug" => "membership",
1436.             ]);
1437.         }
1438.         
1439.         
1440.         
1441.     }
1442.     
1443.     /**
1444.      * @Route("/account/{slug}/{id}", 
1445.      *      name="account",
1446.      *      defaults={"slug": "", "id": ""}
1447.      * )
1448.      */
1449.     public function viewAccount (
1450.         UserHelper $userHelper,
1451.         Request $request,
1452.         $slug = "",
1453.         $id = ""
1454.     ) {
1455.         if (!$this->user) {
1456.             return $this->redirect("/sign-in");
1457.         }
1458.         $user = $this->user;
1459.         $manager = $this->getDoctrine()->getManager();
1460.         $purchases = $user->getPurchases();
1461.         $purchase = null;
1462.         
1463.         if (!$slug) {
1464.             $slug = "account";
1465.         }
1466.         
1467.         if ($slug == "order" && $id) {
1468.             // show the order details
1469.             $purchase = $manager->getRepository(Purchase::class)
1470.                 ->findOneBy([
1471.                     "id" => $id
1472.                 ]);
1473.             
1474.             if (!$purchase || $purchase->getUser()->getId() != $user->getId()) {
1475.                 $purchase = null;
1476.             }
1477.         }
1478.         
1479.         $customers = $user->getCompanies();
1480.         
1481.         $membership_item = "";
1482.         $membership_product = "";
1483.         $will_renew = false;
1484.         //Get the current purchase item used to activate the user's membership
1485.         if($user->isMember()) {
1486.             $now = new \DateTime();
1487.             foreach($purchases as $p) {
1488.                 $items = $p->getItems();
1489.                 foreach($items as $item) {
1490.                     if(($item->getStatus() >= PurchaseItem::STATUS_ACTIVE) && ($item->getType() == PurchaseItem::TYPE_MEMBERSHIP) && ($item->getExpiresAt() > $now)) {
1491.                         $membership_item = $item;
1492.                         $membership_product = $item->getProduct();
1493.                         $will_renew = ($item->getStatus() >= PurchaseItem::STATUS_ACTIVE_RENEWING ? true : false);
1494.                     }
1495.                 }
1496.             }
1497.         }
1498.         
1499.         $payment = false;
1500.         if($slug == "membership") {
1501.             if($user->getUserMetaValueByKey("has_payment_info")) {
1502.                 $payment = [];
1503.                 $payment["firstname"] = $user->getUserMetaValueByKey("payment_first_name");
1504.                 $payment["lastname"] = $user->getUserMetaValueByKey("payment_last_name");
1505.                 $payment["company"] = $user->getUserMetaValueByKey("payment_company");
1506.                 $payment["address1"] = $user->getUserMetaValueByKey("payment_address_line_1");
1507.                 $payment["address2"] = $user->getUserMetaValueByKey("payment_address_line_2");
1508.                 $payment["city"] = $user->getUserMetaValueByKey("payment_city");
1509.                 $payment["state"] = $user->getUserMetaValueByKey("payment_state_province");
1510.                 $payment["zip"] = $user->getUserMetaValueByKey("payment_postal_code");
1511.                 $payment["country"] = $user->getUserMetaValueByKey("payment_country");
1512.                 $payment["email"] = $user->getUserMetaValueByKey("payment_email");
1513.                 $payment["phone"] = $user->getUserMetaValueByKey("payment_phone");
1514.             }
1515.         }
1516.         
1517.         return $this->defaultRender("forms/user-account.html.twig", [
1518.             "user" => $user,
1519.             "purchases" => $purchases,
1520.             "purchase" => $purchase,
1521.             "slug" => $slug,
1522.             "customers" => $customers,
1523.             "membership_item" => $membership_item,
1524.             "membership_product" => $membership_product,
1525.             "will_renew" => $will_renew,
1526.             "payment" => $payment,
1527.             
1528.             "meta" => [
1529.                 "breadcrumbs" => [
1530.                     [
1531.                         "title" => "Your Account",
1532.                         "href" => "/account",
1533.                     ]
1534.                 ]
1535.             ]
1536.         ]);
1537.     }
1538.     
1539.     /**
1540.      * @Route("/admin-account/membership/{id}", methods={"GET"}, name="admin-account-membership")
1541.      */
1542.     public function adminAccountMembership(
1543.         Request $request,
1544.         UserHelper $userHelper,
1545.         $id = ""
1546.     ) {
1547.         //Admin check
1548.         $access = false;
1549.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
1550.             $user = $this->getUser();
1551.             if($user) {
1552.                 if($user->isAdmin()) {
1553.                     $access = true;
1554.                 }
1555.             }
1556.         }
1557.         
1558.         if(!$access) {
1559.             $this->addFlash("warning", "This page is only accessible to site administrators.");
1560.             return $this->redirectToRoute("/");
1561.         }
1562.         
1563.         $member = "";
1564.         if($id) {
1565.             $member = $userHelper->getUserById($id);
1566.         }
1567.         $manager = $this->getDoctrine()->getManager();
1568.         $purchases = $member->getPurchases();
1569.         $purchase = null;
1570.         
1571.         $membership_item = "";
1572.         $membership_product = "";
1573.         $will_renew = false;
1574.         $last_membership_item = "";
1575.         $last_membership_product = "";
1576.         $renewal_price = "";
1577.         //Get the current purchase item used to activate the user's membership
1578.         if($member->isMember()) {
1579.             $now = new \DateTime();
1580.             foreach($purchases as $p) {
1581.                 $items = $p->getItems();
1582.                 foreach($items as $item) {
1583.                     if(($item->getStatus() >= PurchaseItem::STATUS_ACTIVE) && ($item->getType() == PurchaseItem::TYPE_MEMBERSHIP) && ($item->getExpiresAt() > $now)) {
1584.                         $membership_item = $item;
1585.                         $membership_product = $item->getProduct();
1586.                         $will_renew = ($item->getStatus() >= PurchaseItem::STATUS_ACTIVE_RENEWING ? true : false);
1587.                         $renewal_price = $membership_product->getPrice();
1589.                         $old_coupons = $p->getCoupons();
1590.                         foreach($old_coupons as $coupon) {
1591.                             if($coupon->getProductType() == Coupon::PRODUCT_TYPE_MEMBERSHIP
1592.                                 && ($coupon->getRecurringType() == Coupon::RECURRING_UNLIMITED
1593.                                 || ($coupon->getRecurringType() == Coupon::RECURRING_SET_MONTHS && $coupon->getMonthsRecurring() > $item->getMonthsRenewed()))
1594.                             ) {
1595.                                 switch ($coupon->getType()) {
1596.                 
1597.                                     case Coupon::TYPE_DISCOUNT:
1598.                                         $amount = $coupon->getAmount();
1599.                                         if (strpos($amount, ".") === false) {
1600.                                             $amount = "{$amount}00";
1601.                                         }
1602.                                         $amount = preg_replace("/[^0-9]*/", "", $amount);
1603.                                         $renewal_price = $renewal_price - (double)$amount;
1604.                                         break;
1605.                                         
1606.                                     case Coupon::TYPE_PERCENTAGE:
1607.                                         $amount = $coupon->getAmount();
1608.                                         $amount = (double) $amount / 100;
1609.                                         $amount = ($renewal_price * $amount);
1610.                                         $renewal_price = $renewal_price - $amount;
1611.                                         break;
1612.                                         
1613.                                     case Coupon::TYPE_FREE_PRODUCT:
1614.                                         $couponProducts = $coupon->getProducts();
1615.                                         if ($couponProducts->contains($membership_product)) {
1616.                                             $renewal_price = 0;
1617.                                         }
1618.                                         break;
1619.                                 }
1620.                                 break;
1621.                             }
1622.                         }
1624.                     }
1625.                 }
1626.             }
1627.         }
1628.         else {
1629.             //Get the most recent purchase item used to activate the user's membership
1630.             $now = new \DateTime();
1631.             foreach($purchases as $p) {
1632.                 if(!$last_membership_item) {
1633.                     $items = $p->getItems();
1634.                     foreach($items as $item) {
1635.                         if(($item->getStatus() == PurchaseItem::STATUS_INACTIVE) && ($item->getType() == PurchaseItem::TYPE_MEMBERSHIP) && ($item->getExpiresAt() < $now)) {
1636.                             $last_membership_item = $item;
1637.                             $last_membership_product = $item->getProduct();
1638.                             $renewal_price = $last_membership_product->getPrice();
1639.                             break;
1640.                         }
1641.                     }
1642.                 }
1643.             }
1644.         }
1645.         if($renewal_price) {
1646.             if($renewal_price < 0) {
1647.                 $renewal_price = 0;
1648.             }
1649.             $renewal_price = "$" . number_format(($renewal_price / 100), 2);
1650.         }
1651.         
1652.         $payment = false;
1653.         if($member->getUserMetaValueByKey("has_payment_info")) {
1654.             $payment = [];
1655.             $payment["firstname"] = $member->getUserMetaValueByKey("payment_first_name");
1656.             $payment["lastname"] = $member->getUserMetaValueByKey("payment_last_name");
1657.             $payment["company"] = $member->getUserMetaValueByKey("payment_company");
1658.             $payment["address1"] = $member->getUserMetaValueByKey("payment_address_line_1");
1659.             $payment["address2"] = $member->getUserMetaValueByKey("payment_address_line_2");
1660.             $payment["city"] = $member->getUserMetaValueByKey("payment_city");
1661.             $payment["state"] = $member->getUserMetaValueByKey("payment_state_province");
1662.             $payment["zip"] = $member->getUserMetaValueByKey("payment_postal_code");
1663.             $payment["country"] = $member->getUserMetaValueByKey("payment_country");
1664.             $payment["email"] = $member->getUserMetaValueByKey("payment_email");
1665.             $payment["phone"] = $member->getUserMetaValueByKey("payment_phone");
1666.         }
1667.         
1668.         return $this->defaultRender("forms/account/admin-membership.html.twig", [
1669.             "id" => $id,
1670.             "member" => $member,
1671.             "purchases" => $purchases,
1672.             "purchase" => $purchase,
1673.             "membership_item" => $membership_item,
1674.             "membership_product" => $membership_product,
1675.             "last_membership_item" => $last_membership_item,
1676.             "last_membership_product" => $last_membership_product,
1677.             "will_renew" => $will_renew,
1678.             "renewal_price" => $renewal_price,
1679.             "payment" => $payment,
1680.         ]);
1681.     }
1682.     
1683.     /**
1684.      * @Route("/admin-account/membership-cancel", methods={"POST"}, name="post-admin-account-membership-cancel")
1685.      */
1686.     public function adminCancelAccountMembership (
1687.         Request $request,
1688.         UserHelper $userHelper,
1689.         OrderHelper $orderHelper
1690.     ) {
1691.         //Admin check
1692.         $access = false;
1693.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
1694.             $admin = $this->getUser();
1695.             if($admin) {
1696.                 if($admin->isAdmin()) {
1697.                     $access = true;
1698.                 }
1699.             }
1700.         }
1701.         
1702.         if(!$access) {
1703.             $this->addFlash("warning", "This page is only accessible to site administrators.");
1704.             return $this->redirectToRoute("/");
1705.         }
1707.         $user_id = $request->get("user_id");
1708.         $user = $userHelper->getUserById($user_id);
1709.         
1710.         $manager = $this->getDoctrine()->getManager();
1711.         $item = $manager->getRepository(PurchaseItem::class)
1712.             ->findOneBy([
1713.                "id" => $request->get("item_id"),
1714.             ]);
1715.         
1716.         $item->setStatus(PurchaseItem::STATUS_ACTIVE);
1717.         $manager->persist($item);
1718.         $manager->flush();
1719.         
1720.         $this->addFlash("success", "Membership has been cancelled and will not auto-renew.");
1721.         return $this->redirectToRoute("admin-account-membership", [
1722.            "id" => $user_id,
1723.         ]);
1724.     }
1725.     
1726.     /**
1727.      * @Route("/admin-account/membership-continue", methods={"POST"}, name="post-admin-account-membership-continue")
1728.      */
1729.     public function adminContinueAccountMembership (
1730.         Request $request,
1731.         UserHelper $userHelper,
1732.         OrderHelper $orderHelper
1733.     ) {
1734.         //Admin check
1735.         $access = false;
1736.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
1737.             $admin = $this->getUser();
1738.             if($admin) {
1739.                 if($admin->isAdmin()) {
1740.                     $access = true;
1741.                 }
1742.             }
1743.         }
1744.         
1745.         if(!$access) {
1746.             $this->addFlash("warning", "This page is only accessible to site administrators.");
1747.             return $this->redirectToRoute("/");
1748.         }
1750.         $user_id = $request->get("user_id");
1751.         $user = $userHelper->getUserById($user_id);
1752.         
1753.         $manager = $this->getDoctrine()->getManager();
1754.         $item = $manager->getRepository(PurchaseItem::class)
1755.             ->findOneBy([
1756.                "id" => $request->get("item_id"),
1757.             ]);
1758.         
1759.         $item->setStatus($item->getPaymentFailed() ? PurchaseItem::STATUS_ACTIVE_RENEWING_FINAL : PurchaseItem::STATUS_ACTIVE_RENEWING);
1760.         $manager->persist($item);
1761.         $manager->flush();
1762.         
1763.         $this->addFlash("success", "Membership has been re-activated and will now automatically renew.");
1764.         return $this->redirectToRoute("admin-account-membership", [
1765.            "id" => $user_id,
1766.         ]);
1767.     }
1769.     
1770.     /**
1771.      * @Route("/admin-account/membership-retry", methods={"POST"}, name="post-admin-account-membership-retry")
1772.      */
1773.     public function adminRetryAccountMembership (
1774.         Request $request,
1775.         UserHelper $userHelper,
1776.         OrderHelper $orderHelper,
1777.         EmailHelper $emailHelper
1778.     ) {
1779.         //Admin check
1780.         $access = false;
1781.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
1782.             $admin = $this->getUser();
1783.             if($admin) {
1784.                 if($admin->isAdmin()) {
1785.                     $access = true;
1786.                 }
1787.             }
1788.         }
1789.         
1790.         if(!$access) {
1791.             $this->addFlash("warning", "This page is only accessible to site administrators.");
1792.             return $this->redirectToRoute("/");
1793.         }
1795.         $user_id = $request->get("user_id");
1796.         $user = $userHelper->getUserById($user_id);
1797.         
1798.         $entityManager = $this->getDoctrine()->getManager();
1799.         $item = $entityManager->getRepository(PurchaseItem::class)
1800.             ->findOneBy([
1801.                "id" => $request->get("item_id"),
1802.             ]);
1803.         
1804.         /*
1805.         $item->setStatus($item->getPaymentFailed() ? PurchaseItem::STATUS_ACTIVE_RENEWING_FINAL : PurchaseItem::STATUS_ACTIVE_RENEWING);
1806.         $entityManager->persist($item);
1807.         $entityManager->flush();
1808.         */
1809.         
1815.         /* Modified copy of the OrderHelper's "updateExpiredPurchaseItems" function */
1816.         //TODO: move this to the OrderHelper so code isn't repeated
1818.         $currentStatus = PurchaseItem::STATUS_ACTIVE_RENEWING;
1819.                 
1820.         //Do this first: in case there's an error, it won't keep trying to renew
1821.         $item->setStatus(PurchaseItem::STATUS_INACTIVE);
1822.         //$item->setExpiresAt(null); //might be useful to see when it expired
1823.         $entityManager->persist($item);
1824.         $entityManager->flush();
1825.         
1826.         $purchase_completed = false;
1827.         $product = $item->getProduct();
1828.         $purchase = $item->getPurchase();
1829.         if($purchase) {
1830.             $user = $purchase->getUser();
1831.             if($product && $user) {
1832.                 if($user->getUserMetaValueByKey("has_payment_info")) {
1833.                     
1834.                     $new_purchase = new Purchase();
1835.                     
1836.                     $newItem = new PurchaseItem();
1837.                     
1838.                     $newItem->setProduct($item->getProduct());
1839.                     $newItem->setType($item->getType());
1840.                     $newItem->setPurchase($new_purchase);
1841.                     
1842.                     $new_purchase->setStatus(Purchase::STATUS_FAILED); //default to failed (we don't ever want it 'active')
1843.                     $new_purchase->setCurrentItem($newItem);
1844.                     $new_purchase->setUser($user);
1845.                     $new_purchase->setDiscount(0);
1846.                     
1847.                     //apply any coupons
1848.                     $old_coupons = $purchase->getCoupons();
1849.                     foreach($old_coupons as $coupon) {
1850.                         if($coupon->getProductType() == $product->getType()
1851.                             && ($coupon->getRecurringType() == Coupon::RECURRING_UNLIMITED
1852.                             || ($coupon->getRecurringType() == Coupon::RECURRING_SET_MONTHS && $coupon->getMonthsRecurring() > $item->getMonthsRenewed()))
1853.                         ) {
1854.                             $new_purchase->addCoupon($coupon);
1855.                         }
1856.                     }
1857.                     
1858.                     //renew the purchase item
1859.                     $result = $orderHelper->placeOrder(
1860.                         $user->getUserMetaValueByKey("payment_first_name"),
1861.                         $user->getUserMetaValueByKey("payment_last_name"),
1862.                         $user->getUserMetaValueByKey("payment_company"),
1863.                         $user->getUserMetaValueByKey("payment_address_line_1"),
1864.                         $user->getUserMetaValueByKey("payment_address_line_2"),
1865.                         $user->getUserMetaValueByKey("payment_city"),
1866.                         $user->getUserMetaValueByKey("payment_state_province"),
1867.                         $user->getUserMetaValueByKey("payment_postal_code"),
1868.                         $user->getUserMetaValueByKey("payment_country"),
1869.                         $user->getUserMetaValueByKey("payment_email"),
1870.                         $user->getUserMetaValueByKey("payment_phone"),
1871.                         "", //$_SERVER["REMOTE_ADDR"],
1872.                         $new_purchase->getInvoiceNumber(),
1873.                         $new_purchase->getTotalUsd(true),
1874.                         $new_purchase->getTaxUsd(true),
1875.                         "", //no card number
1876.                         "", //no expiration date
1877.                         "", //$user->getUserMetaValueByKey("payment_cvv2"),
1878.                         false,
1879.                         $user->getUserMetaValueByKey("payment_token")
1880.                     );
1881.                     
1882.                     
1883.                     $new_purchase->setFirstname($user->getUserMetaValueByKey("payment_first_name"));
1884.                     $new_purchase->setLastname($user->getUserMetaValueByKey("payment_last_name"));
1885.                     $new_purchase->setCompany($user->getUserMetaValueByKey("payment_company"));
1886.                     $new_purchase->setAddressLine1($user->getUserMetaValueByKey("payment_address_line_1"));
1887.                     $new_purchase->setAddressLine2($user->getUserMetaValueByKey("payment_address_line_2"));
1888.                     $new_purchase->setCity($user->getUserMetaValueByKey("payment_city"));
1889.                     $new_purchase->setStateProvince($user->getUserMetaValueByKey("payment_state_province"));
1890.                     $new_purchase->setPostalCode($user->getUserMetaValueByKey("payment_postal_code"));
1891.                     $new_purchase->setCountry($user->getUserMetaValueByKey("payment_country"));
1892.                     $new_purchase->setEmail($user->getUserMetaValueByKey("payment_email"));
1893.                     $new_purchase->setPhone($user->getUserMetaValueByKey("payment_phone"));
1894.                     //$new_purchase->setLast4("");
1895.                     //$new_purchase->setUserIP($_SERVER["REMOTE_ADDR"]);
1896.                     //$new_purchase->setUserAgent($_SERVER["HTTP_USER_AGENT"]);
1897.                     $new_purchase->setRawResponse(json_encode([
1898.                         "body" => $result["raw"],
1899.                         "request" => $result["request"],
1900.                     ]));
1901.                     
1902.                     $purchaseNote = new PurchaseNote();
1903.                     $purchaseNote->setAuthorName("RCS Payment Gateway");
1904.                     $purchaseNote->setAuthorEmail("admin@rooferscoffeeshop.com");
1906.                     if($result["result"] == "DECLINED 82") {
1907.                         $result["result"] = "INVALID CAM\CVV";
1908.                     }
1909.                     
1910.                     if (/*true || */$result["result"] == "APPROVAL" || $result["result"] == "APPROVED") {
1911.                         
1912.                         $purchaseNote->setDescription("Automatic payment attempt was successful. Response Code: {$result["code"]}. Response Message: {$result["result"]}");
1913.                         $purchaseNote->setHiddenDescription(json_encode($result));
1914.                         $new_purchase->addPurchaseNote($purchaseNote);
1915.                         
1916.                         // mark purchase items as processed...
1917.                         $new_purchase->setStatus(Purchase::STATUS_PROCESSED); //< this updates all expiration dates based on product purchased...
1918.                         
1919.                         if($product->getPaymentRate() == Product::RENEW_YEARLY) {
1920.                             $newItem->setMonthsRenewed($item->getMonthsRenewed() + 12);
1921.                         }
1922.                         else {
1923.                             $newItem->setMonthsRenewed($item->getMonthsRenewed() + 1);
1924.                         }
1925.                         
1926.                         $purchase_completed = true;
1927.                     }else{
1928.                         $purchaseNote->setDescription("An error occurred while attempting to renew your purchase. Response Code: {$result["code"]}. Response Message: {$result["result"]}");
1929.                         $purchaseNote->setHiddenDescription(json_encode($result));
1930.                         $new_purchase->addPurchaseNote($purchaseNote);
1931.                         
1932.                         // mark purchase items as failed...
1933.                         $new_purchase->setStatus(Purchase::STATUS_FAILED); //< this updates all expiration dates based on product purchased...
1934.                     }
1935.                     
1936.                     $entityManager->persist($new_purchase);
1937.                     $entityManager->flush();
1938.                     
1939.                 } 
1940.                 else{
1941.                     $purchaseNote = new PurchaseNote();
1942.                     $purchaseNote->setAuthorName("RCS Payment Gateway");
1943.                     $purchaseNote->setAuthorEmail("admin@rooferscoffeeshop.com");
1945.                     $purchaseNote->setDescription("No Payment Information On Record.");
1946.                     $purchase->addPurchaseNote($purchaseNote);
1947.                     $purchase->setStatus(Purchase::STATUS_FAILED);
1948.                 }
1949.             }
1950.         }
1951.         
1952.         if($purchase_completed) {
1953.             //send purchase email
1954.             $message = [];
1955.             $message[] = ["p" => "Your R-Club membership has been successfully renewed for {$new_purchase->getTotalUsd()}."];
1956.             $message[] = ["a" => ["href" => "rooferscoffeeshop.com/account", "text" => "Go to your account page to update your membership settings at any time."]];
1957.             
1958.             $this->addFlash("success", "Payment successful. Membership has been re-activated and will now automatically renew.");
1959.             return $this->redirectToRoute("admin-account-membership", [
1960.                 "id" => $user_id,
1961.             ]);
1962.         }
1963.         else {
1964.             
1965.             $user->setMember(0);
1966.             $entityManager->persist($user);
1967.             $entityManager->flush();
1968.             
1969.             $this->addFlash("danger", "An error occurred when attempting to renew this user's membership. Response Code: {$result["code"]}. Response Message: {$result["result"]}");
1970.             return $this->redirectToRoute("admin-account-membership", [
1971.                 "id" => $user_id,
1972.             ]);
1973.         }
1974.         
1975.     
1993.         
1994.         
1995.         
1996.     }
2001.     /**
2002.      * @Route("/admin-account/membership", methods={"POST"}, name="post-admin-account-membership")
2003.      */
2004.     public function adminUpdateAccountMembership (
2005.         Request $request,
2006.         UserHelper $userHelper,
2007.         OrderHelper $orderHelper
2008.     ) {
2009.         //Admin check
2010.         $access = false;
2011.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
2012.             $admin = $this->getUser();
2013.             if($admin) {
2014.                 if($admin->isAdmin()) {
2015.                     $access = true;
2016.                 }
2017.             }
2018.         }
2019.         
2020.         if(!$access) {
2021.             $this->addFlash("warning", "This page is only accessible to site administrators.");
2022.             return $this->redirectToRoute("/");
2023.         }
2024.         
2025.         $user_id = $request->get("user_id");
2026.         $user = $userHelper->getUserById($user_id);
2027.         
2028.         $payment = $request->get("payment");
2029.         $card = $request->get("card");
2030.         
2031.         //expiration date
2032.         $card["card_expires"] = $card["card_expires_month"].$card["card_expires_year"];
2033.         
2034.         if (!$payment || !isset($payment["terms"])) {
2035.             $this->addFlash("warning", "You must accept the terms and conditions.");
2036.             return $this->redirectToRoute("admin-account-membership", [
2037.                 "id" => $user_id,
2038.              ]);
2039.         }
2040.         
2041.         $result = $orderHelper->generateToken(
2042.            $payment["firstname"],
2043.            $payment["lastname"],
2044.            $payment["company"],
2045.            $payment["address1"],
2046.            $payment["address2"],
2047.            $payment["city"],
2048.            $payment["state"],
2049.            $payment["zip"],
2050.            $payment["country"],
2051.            $payment["email"],
2052.            $payment["phone"],
2053.            $_SERVER["REMOTE_ADDR"],
2054.            $card["card_number"],
2055.            $card["card_expires"],
2056.            $card["card_csc"]
2057.         );
2058.         
2059.         if ($result["result"] == "APPROVAL" || $result["result"] == "APPROVED") {
2060.             
2061.             $last4 = $card["card_number"];
2062.             $last4 = preg_replace("/[^0-9]/", '', $last4);
2063.             $last4 = substr($last4, -4);
2064.             
2065.             $user->setUsermetum("has_payment_info", "1");
2066.             $user->setUsermetum("payment_first_name", $payment["firstname"]);
2067.             $user->setUsermetum("payment_last_name", $payment["lastname"]);
2068.             $user->setUsermetum("payment_company", $payment["company"]);
2069.             $user->setUsermetum("payment_address_line_1", $payment["address1"]);
2070.             $user->setUsermetum("payment_address_line_2", $payment["address2"]);
2071.             $user->setUsermetum("payment_city", $payment["city"]);
2072.             $user->setUsermetum("payment_state_province", $payment["state"]);
2073.             $user->setUsermetum("payment_postal_code", $payment["zip"]);
2074.             $user->setUsermetum("payment_country", $payment["country"]);
2075.             $user->setUsermetum("payment_email", $payment["email"]);
2076.             $user->setUsermetum("payment_phone", $payment["phone"]);
2077.             $user->setUsermetum("payment_last4", $last4);
2078.             $user->setUsermetum("payment_exp", $card["card_expires"]);
2079.             //$user->setUsermetum("payment_cvv2", $card["card_csc"]);
2080.             $user->setUsermetum("payment_token", $result["token"]);
2081.             $user->setUsermetum("payment_token_response", $result["token_response"]);
2082.             
2083.             $manager = $this->getDoctrine()->getManager();
2084.             $manager->persist($user);
2085.             $manager->flush();
2086.             
2087.             $this->addFlash("success", "Membership settings updated.");
2088.             return $this->redirectToRoute("admin-account-membership", [
2089.                 "id" => $user_id,
2090.              ]);
2091.         }
2092.         else {
2093.             $this->addFlash("warning", "Their was an error while updating your payment information. Response: {$result["result"]}");
2094.             return $this->redirectToRoute("admin-account-membership", [
2095.                 "id" => $user_id,
2096.              ]);
2097.         }
2098.         
2099.         
2100.         
2101.     }
2106.     
2107. }