1. <?php
3. namespace App\Controller\RCS;
5. use Symfony\Component\Routing\Annotation\Route;
6. use Symfony\Component\HttpFoundation\Request;
7. use Symfony\Component\HttpFoundation\Response;
8. use Symfony\Component\HttpFoundation\RedirectResponse;
9. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
11. use App\Entity\Purchase;
12. use App\Entity\PurchaseItem;
13. use App\Entity\User;
14. use App\Entity\Contact;
15. use App\Entity\Coupon;
16. use App\Entity\PurchaseNote;
17. use App\Entity\Product;
19. use App\Utils\ContentHelper;
20. use App\Utils\UserHelper;
21. use App\Utils\ContactHelper;
22. use App\Utils\EmailHelper;
23. use App\Utils\OrderHelper;
24. use App\Utils\LeadHelper;
25. use App\Security\WordPressPasswordEncoder;
26. use App\Exception\ResourceNotFoundException;
28. //use Symfony\Bridge\Doctrine\Security\RememberMe\DoctrineTokenProvider;
29. use Symfony\Component\Security\Core\Authentication\RememberMe\PersistentToken;
30. use Symfony\Component\HttpFoundation\Cookie;
32. //todo: Make a Master AuthController, and combine any other controllers that we can
34. class AuthController extends DefaultController
35. {
37.     /**
38.      * @Route("/sign-in",
39.      *    name="sign-in-post",
40.      *    defaults={"message": ""},
41.      *  methods={"POST"}
42.      *    )
43.      */
44.     public function signInPost(
45.         Request $request,
46.         UserHelper $userHelper,
47.         EmailHelper $emailHelper,
48.         //DoctrineTokenProvider $doctrineTokenProvider,
49.         $message = ""
50.     ) 
51.     {
52.         $username = $request->get("_username");
53.         $password = $request->get("_password");
55.         if(!$emailHelper->checkCaptcha($request->get("g-recaptcha-response"))) {
56.             //$this->addFlash("warning", "The reCAPTCHA was invalid. Please try again.");
58.             $message = array (
59.                 "type" => "warning",
60.                 "text" => "The reCAPTCHA was invalid. Please try again.",
61.             );
63.             return $this->defaultRender("forms/sign-in.html.twig", [
64.                 "message" => $message,
65.             ]);
66.         }
68.         $session = $request->getSession();
69.         $nRoute = $session->get("non_sign_in_route");
70.         $path = !empty($nRoute["path"]) ? $nRoute["path"] : "/";
72.         $result = $userHelper->signIn(
73.             $username, 
74.             $password
75.         );
76.         if(is_array($result) && $result["status"] == 2) {
77.             return new RedirectResponse("/mfa/{$result['uid']}/{$result['token']}");
78.         }
79.         elseif (is_array($result) && $result["status"] == 1) {
80.             $this->addFlash("success", "You have successfully logged in.");
81.             $response = new RedirectResponse($path);
82.             //$response = $this->setRememberMe($request, $response, $doctrineTokenProvider, $username);
83.         }
84.         else {
85.             $message = array (
86.                 "type" => "warning",
87.                 "text" => "Invalid credentials provided.",
88.             );
89.             return $this->defaultRender("forms/sign-in.html.twig", [
90.                 "message" => $message,
91.             ]);
92.         }
93.         
94.         return $response;
95.     }
96.     
97.     /**
98.      * @Route("/sign-in",
99.      *    name="sign-in",
100.      *    defaults={"message": ""}
101.      *    )
102.      */
103.     public function signIn(
104.         Request $request,
105.         AuthenticationUtils $authUtils,
106.         WordPressPasswordEncoder $wpEncoder,
107.         $message = ""
108.     ) {
109.         //just testing: $message = $wpEncoder->hash("M0byd1ck771!"); 
110.         //$message = null;
111.         $message = $request->query->get("message") ?? "";
112.         
113.         $error = $authUtils->getLastAuthenticationError();
114.         $lastUsername = $authUtils->getLastUsername();
116.         if ($error) {
117.             $message = array (
118.                 "type" => "warning",
119.                 "text" => "Invalid credentials.",
120.             );
121.         }
122.         
123.         
124.         return $this->defaultRender("forms/sign-in.html.twig", [
125.             "last_username" => $lastUsername,
126.             // "error" => $error,
127.             "message" => $message,
128.         ]);
129.     }
130.     
131.     /**
132.      * @Route("/forgot-password", name="forgot-password")
133.      */
134.     public function forgotPassword (
135.         Request $request,
136.         UserHelper $userHelper,
137.         ContactHelper $contactHelper,
138.         EmailHelper $emailHelper
139.     ) {        
140.         // should we rate limit ??
141.         $username = $request->request->get("username");
142.         $message = array ();
143.         
144.         if ($username) {
145.             $rsp = $userHelper->forgotPassword($username);
146.             $message = array(
147.                 "type" => $rsp["status"] ? "success" : "warning",
148.                 "text" => $rsp["message"],
149.             );
150.         }
151.         
152.         return $this->defaultRender("forms/forgot-password.html.twig", [
153.             "message" => $message,
154.         ]);
155.     }
156.     
157.     /**
158.      * @Route("/forgot-username", name="forgot-username", methods={"POST"})
159.      */
160.     public function forgotUsername (
161.         Request $request,
162.         UserHelper $userHelper
163.     ) {
164.         $email = $request->get("email");
165.         $rsp = $userHelper->forgotUsername($email);
166.         $msg = array ();
167.         
168.         if ($rsp["status"]) {
169.             $msg = array (
170.                 "type" => "success",
171.                 "text" => $rsp["message"],
172.             );
173.         } 
174.         
175.         else {
176.             sleep (3);
177.             $msg = array (
178.                 "type" => "warning",
179.                 "text" => $rsp["message"],
180.             );
181.         }
182.         
183.         return $this->defaultRender("forms/forgot-username.html.twig", [
184.             "message" => $msg
185.         ]);
186.         
187.         /*
188.         try {
189.             $user = $userHelper->getUserByEmail($email);
190.             $username = $user->getUsername();
191.             
192.             return $this->defaultRender("forms/sign-in.html.twig", [
193.                 "message" => [
194.                     "type" => "success",
195.                     "text" => "The username linked to that account is <strong>{$username}</strong>.",
196.                 ]
197.             ]);
198.             
199.         } catch (ResourceNotFoundException $e) {
200.             sleep(3);
201.             return $this->defaultRender("forms/forgot-username.html.twig", [
202.                 "message" => [
203.                     "type" => "warning",
204.                     "text" => "That e-mail address was not found in the system.",
205.                 ]
206.             ]);
207.         } 
208.         */    
209.     }
210.     
211.     /**
212.      * @Route("/forgot-username", name="forgot-username-form")
213.      */
214.     public function viewForgotUsername (
215.     
216.     ) {
217.         
218.         return $this->defaultRender("forms/forgot-username.html.twig", [
219.             "message" => array ()
220.         ]);
221.     }
222.     
223.     /**
224.      * @Route("/rcs-reset-password/{id}/{token}", name="reset-password-form", defaults={"message": ""})
225.      */
226.     public function viewResetPassword (
227.         UserHelper $userHelper,
228.         Request $request,
229.         $id, 
230.         $token,
231.         $message = ""
232.     ) {
233.         
234.         try {
235.             $user = $userHelper->getUserById($id);
236.             
237.             $message = $request->query->get("message") ?? "";
239.             // if token does not match 
240.             if ($token != $user->getResetPwToken()) {
241.                 return $this->defaultRender("errors/404.html.twig");
242.             }
243.             
244.             return $this->defaultRender("forms/reset-password.html.twig", [
245.                 "user" => $user,
246.                 "id" => $id,
247.                 "token" => $token,
248.                 "message" => $message
249.             ]);
250.         } catch (ResourceNotFoundException $e) {
251.             
252.         }
253.     }
254.     
255.     /**
256.      * @Route("/rcs-reset-password", name="reset-password", methods={"POST"})
257.      */
258.     public function resetPassword (
259.         Request $request,
260.         WordPressPasswordEncoder $wpEncoder,
261.         UserHelper $userHelper
262.     ) {
263.         
264.         $id = $request->get("id");
265.         $token = $request->get("token");
266.         $password1 = $request->get("password1");
267.         $password2 = $request->get("password2");
268.         
269.         $rsp = $userHelper->resetPassword(
270.             $id,
271.             $token,
272.             $password1,
273.             $password2
274.         );
275.         
276.         $msg = array ();
277.         
278.         if ($rsp["status"]) {
279.             $msg = array (
280.                 "type" => "success",
281.                 "text" => $rsp["message"],
282.             );
283.             return $this->redirectToRoute("sign-in", [
284.                 "message" => $msg
285.             ]);
286.         } 
287.         
288.         else {
289.             $msg = array (
290.                 "type" => "warning",
291.                 "text" => $rsp["message"],
292.             );
293.             return $this->redirectToRoute("reset-password-form", [
294.                "id" => $id,
295.                "token" => $token,
296.                "message" => $msg
297.             ]);
298.         }
299.         
300.     }
301.      
302.     /* *
303.      * @ R o u t e ("/rcs-sign-up", name="sign-up", methods={"POST"})
304.      * /
305.     public function signUp (
306.         Request $request,
307.         UserHelper $userHelper,
308.         EmailHelper $emailHelper
309.     ) {
310.         
311.         $username = $request->get("username");
312.         $email = $request->get("email");
313.         
314.         if($emailHelper->checkCaptcha($request->get("g-recaptcha-response"))) {
315.             
316.             $password1 = $request->get("password1");
317.             $password2 = $request->get("password2");
318.             
319.             $rsp = $userHelper->signUp(
320.                 $username,
321.                 $email,
322.                 $password1,
323.                 $password2
324.             );
325.             
326.             if ($rsp["status"]) {
327.                 return $this->defaultRender("forms/sign-in.html.twig", [
328.                     "message" => $rsp["message"],
329.                 ]);
330.             }
331.             
332.             return $this->defaultRender("forms/sign-up.html.twig", [
333.                 "username" => $username,
334.                 "email" => $email,
335.                 "message" => $rsp["message"],
336.             ]);
337.         }
338.         else {
339.             return $this->defaultRender("forms/sign-up.html.twig", [
340.                 "username" => $username,
341.                 "email" => $email,
342.                 "message" => [
343.                     "type" => "warning",
344.                     "text" => "The reCAPTCHA was invalid. Please try again.",
345.                 ],
346.             ]);
347.         }
348.     }
349.     */
350.     
351.     /* *
352.      * @ R o u t e("/rcs-sign-up", name="sign-up-form")
353.      * /
354.     public function viewSignUp (
355.     
356.     ) {
357.         
358.         return $this->defaultRender("forms/sign-up.html.twig", [
359.             "username" => "",
360.             "email" => "",
361.             "message" => array (
362.             
363.             )
364.         ]);
365.     }
366.     */
367.     
368.     /**
369.      * @Route("/sign-up", name="new-sign-up", methods={"POST"})
370.      */
371.     public function newSignUp (
372.         Request $request,
373.         UserHelper $userHelper,
374.         EmailHelper $emailHelper,
375.         LeadHelper $leadHelper,
376.         ContentHelper $contentHelper
377.     ) {
379.         //Switching from reCaptcha to Cloudflare turnstile
380.         $secret = "0x4AAAAAAAi4CA7s2RKmrc-uH218wVf8Bcs";
381.         //$secret = "0x4AAAAAAAi4CA7s2RKmrc-uH218wVf8bct"; //bad
382.         $remote_addr = $_SERVER['REMOTE_ADDR'];
383.         $cf_url = 'https://challenges.cloudflare.com/turnstile/v0/siteverify';
384.         //$token = $_POST['cf-turnstile-response'];
385.         $token = $request->get("cf-turnstile-response");
386.         
387.         $cfVerified = false;
389.          // Request data
390.          $data = array(
391.             "secret" => $secret,
392.             "response" => $token,
393.             "remoteip" => $remote_addr
394.         );
395.         // Initialize cURL
396.         $curl = curl_init();
398.          // Set the cURL options
399.          curl_setopt($curl, CURLOPT_URL, $cf_url);
400.          curl_setopt($curl, CURLOPT_POST, true);
401.          curl_setopt($curl, CURLOPT_POSTFIELDS, $data);
402.          curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
403.          // Execute the cURL request
404.          $response = curl_exec($curl);
406.           // Check for errors
407.         if (curl_errno($curl)) {
408.             $error_message = curl_error($curl);
409.             // Handle the error the way you like it
410.             //echo 'cURL Error: ' . $error_message.'<br>';
411.         }else{
412.                 /* Parse Cloudflare's response and check if there are any validation errors */
413.                 $response = json_decode($response,true);
414.                 if ($response['error-codes'] && count($response['error-codes']) > 0){
415.                     /*
416.                     echo 'Cloudflare Turnstile check failed. Error codes:<br>';
417.                     echo '<ul>';
418.                     foreach($response['error-codes'] as $e){
419.                         echo '<li>'.$e.'</li>';
420.                     }
421.                     echo '</ul>';
422.                     echo '<br><br>Output from Cloudflare:<br><br>';
423.                     print_r($response);
424.                     */
425.                 }else{
426.                     $cfVerified = true;
427.                     /*
428.                     echo 'Passed Cloudflare Turnstile check.<br><br>Output from Cloudflare:<br><br>';
429.                     print_r($response);
430.                     echo '<hr>';
431.                     // Process the response
432.                     //echo 'The submitted form data is : '.$_POST['field1'];
433.                     */
434.                 }
435.         }
436.             // Close cURL
437.             curl_close($curl);
440.         $honeypot = $request->get("timer1"); //this is a honeypot field
441.         $timer = $request->get("timer2");
442.         if($honeypot != "" || $timer == "" || !is_numeric($timer) || (int)$timer < 11 ) {
443.             $cfVerified = false;
444.         }
446.         //if(!$emailHelper->checkCaptcha($request->get("g-recaptcha-response"))) {
447.         if(!$cfVerified) {
448.             
449.             $lead = $request->get("lead");
450.             
451.             $firstname = array_key_exists("firstname", $lead) ? $lead["firstname"] : "";
452.             $lastname = array_key_exists("lastname", $lead) ? $lead["lastname"] : "";
453.             $email = array_key_exists("email", $lead) ? $lead["email"] : "";
454.             $username = array_key_exists("username", $lead) ? $lead["username"] : "";
455.             $address1 = array_key_exists("address1", $lead) ? $lead["address1"] : "";
456.             $address2 = array_key_exists("address2", $lead) ? $lead["address2"] : "";
457.             $city = array_key_exists("city", $lead) ? $lead["city"] : "";
458.             $state = array_key_exists("state", $lead) ? $lead["state"] : "";
459.             $zip = array_key_exists("zip", $lead) ? $lead["zip"] : "";
460.             $company = array_key_exists("company", $lead) ? $lead["company"] : "";
461.             $phone = array_key_exists("phone", $lead) ? $lead["phone"] : "";
462.             
463.             //$this->addFlash("warning", "The reCAPTCHA was invalid. Please try again.");
464.             return $this->defaultRender("forms/new-sign-up.html.twig", [
465.                 "username" => $username,
466.                 "email" => $email,
467.                 "firstname" => $firstname,
468.                 "lastname" => $lastname,
469.                 "address1" => $address1,
470.                 "address2" => $address2,
471.                 "city" => $city,
472.                 "state" => $state,
473.                 "zip" => $zip,
474.                 "company" => $company,
475.                 "phone" => $phone,
476.                 "message" => [
477.                     "type" => "warning",
478.                     "text" => "The reCAPTCHA was invalid. Please try again.",
479.                 ]
480.             ]);
481.         }
482.         
483.         
484.         $siteSignup = $request->get("site-signup");
485.         $enewsSignup = $request->get("enews-signup");
486.         //$enewsMetalSignup = $request->get("enews-metal-signup");
487.         
488.         $enewsSignupSuccess = false; //store if they signed up for the enews
489.         $enewsMetalSignupSuccess = false; //store if they signed up for metal enews
490.         $siteSignupSuccess = false; //store if they signed up for the site
491.         
492.         
493.         if($siteSignup) {
494.             //Handle the form for signing up to the site.
495.             $lead = $request->get("lead");
496.             
497.             $username = $lead["username"];
498.             $email = $lead["email"];
499.             $email = trim($email);
500.             $firstname = $lead["firstname"];
501.             $lastname = $lead["lastname"];
502.             
503.             $address1 = $lead["address1"];
504.             $address2 = $lead["address2"];
505.             $city = $lead["city"];
506.             $state = $lead["state"];
507.             $zip = $lead["zip"];
508.             $company = $lead["company"];
509.             $phone = $lead["phone"];
510.             
511.             $password1 = $request->get("password1");
512.             $password2 = $request->get("password2");
513.             
514.             $rsp = $userHelper->signUp(
515.                 $firstname,
516.                 $lastname,
517.                 $username,
518.                 $email,
519.                 $password1,
520.                 $password2
521.             );
522.             
523.             if ($rsp["status"]) { //success
524.                 $siteSignupSuccess = true;
525.                 //return new RedirectResponse('/welcome-activation');
526.             }
527.             else {
528.                 
529.                 //$this->addFlash("warning", $rsp["message"]);
530.                 return $this->defaultRender("forms/new-sign-up.html.twig", [
531.                     "username" => $username,
532.                     "email" => $email,
533.                     "firstname" => $firstname,
534.                     "lastname" => $lastname,
535.                     "address1" => $address1,
536.                     "address2" => $address2,
537.                     "city" => $city,
538.                     "state" => $state,
539.                     "zip" => $zip,
540.                     "company" => $company,
541.                     "phone" => $phone,
542.                     "message" => $rsp["message"],
543.                 ]);
544.                 
545.             }
546.             
547.         }
548.         
549.         
550.         
551.         if ($enewsSignup || ($siteSignup && $siteSignupSuccess && ($request->get("enews") || $request->get("metal-enews") || $request->get("coatings-enews")))) {
552.             //Handle the form for signing up for just enews-signup
553.             $lead = $request->get("lead");
554.             
555.             $firstname = $lead["firstname"];
556.             $lastname = $lead["lastname"];
557.             $email = $lead["email"];
558.             $email = trim($email);
559.             $company = $lead["company"];
560.             $contractor_type = $lead["contractor_type"];
561.             $country = ($lead["country"] == "Other" ? $lead["country_other"] : $lead["country"]);
562.             $business_type = $lead["business_type"];
563.             
564.             if(empty($email) || filter_var($email, FILTER_VALIDATE_EMAIL) === false){
565.                 $this->addFlash("warning", "Please enter a valid email address.");
566.                 return new RedirectResponse($request->headers->get('referer'));
567.             }            
568.             if(empty($firstname)){
569.                 $this->addFlash("warning", "Please enter your first name");
570.                 return new RedirectResponse($request->headers->get('referer'));
571.             }
572.             if(empty($lastname)){
573.                 $this->addFlash("warning", "Please enter your last name");
574.                 return new RedirectResponse($request->headers->get('referer'));
575.             }
576.             if(empty($company)){
577.                 $this->addFlash("warning", "Please enter your company");
578.                 return new RedirectResponse($request->headers->get('referer'));
579.             }
580.             
581.             try {
582.                 //add to mailchimp list
583.                 
584.                 // MailChimp API credentials
585.                 $apiKey = "27ce559264a47aa3487224e1c95424bc-us10";
586.                 $listID = "3efdbc4139";
587.                 
588.                 // Determine wir wim or both
589.                 $keys = [];
591.                 if ($request->get("enews")) {
592.                     array_push($keys, 'WIR');
593.                 }
594.                 if ($request->get("metal-enews")) {
595.                     array_push($keys, 'WIM');
596.                 }
597.                 if ($request->get("coatings-enews")) {
598.                     array_push($keys, 'WIC');
599.                 }
600.                 // MailChimp API URL
601.                 $memberID = md5(strtolower($email));
602.                 $dataCenter = substr($apiKey,strpos($apiKey,'-')+1);
603.                 $url = 'https://' . $dataCenter . '.api.mailchimp.com/3.0/lists/' . $listID . '/members/' . $memberID;
604.                 
605.                 // member information
606.                 $json = json_encode([
607.                     'email_address' => $email,
608.                     'status'        => 'subscribed',
609.                     'merge_fields'  => [
610.                         'FNAME'     => $firstname,
611.                         'LNAME'     => $lastname,
612.                         'MMERGE3'    => $company,
613.                         'MMERGE4'    => $contractor_type,
614.                         'MMERGE5'    => $business_type
615.                     ],
616.                     'tags' => $keys
617.                 ]);
618.                 
619.                 $ch = curl_init($url);
620.                 curl_setopt($ch, CURLOPT_USERPWD, 'user:' . $apiKey);
621.                 curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
622.                 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
623.                 curl_setopt($ch, CURLOPT_TIMEOUT, 10);
624.                 curl_setopt($ch, CURLOPT_CUSTOMREQUEST, 'PUT');
625.                 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
626.                 curl_setopt($ch, CURLOPT_POSTFIELDS, $json);
627.                 $result = curl_exec($ch);
628.                 $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
629.                 curl_close($ch);
630.                 
631.                 if ($httpCode != 200) {
632.                     $httpErrorCode = $httpCode;
633.                 }
634.                 
635.                 // end mailchimp
636.                 
637.                 if ($request->get("enews")) {
638.                     $emailHelper->sendEmail(
639.                         ["rcs@rooferscoffeeshop.com"],
640.                         "New submission from the \"Week in Roofing\" sign-up form.",
641.                         [
642.                             ["p" => "New submission from the \"Week in Roofing\" sign-up form."],
643.                             ["table" => [
644.                                 "First Name" => $firstname,
645.                                 "Last Name" => $lastname,
646.                                 "Email Address" => $email,
647.                                 "Company" => $company,
648.                                 "Country" => $country,
649.                                 "Type of Work" => $contractor_type,
650.                                 "Type of Business" => $business_type,
651.                             ]],
652.                         ]
653.                     );
654.                 }
656.                 if ($request->get("metal-enews")) {
657.                     $emailHelper->sendEmail(
658.                         ["rcs@rooferscoffeeshop.com"],
659.                         "New submission from the \"Week in Metal\" sign-up form.",
660.                         [
661.                             ["p" => "New submission from the \"Week in Metal\" sign-up form."],
662.                             ["table" => [
663.                                 "First Name" => $firstname,
664.                                 "Last Name" => $lastname,
665.                                 "Email Address" => $email,
666.                                 "Company" => $company,
667.                                 "Country" => $country,
668.                                 "Type of Work" => $contractor_type,
669.                                 "Type of Business" => $business_type,
670.                             ]],
671.                         ]
672.                     );
673.                 }
675.                 if ($request->get("coatings-enews")) {
676.                     $emailHelper->sendEmail(
677.                         ["rcs@rooferscoffeeshop.com"],
678.                         "New submission from the \"Week in Coatings\" sign-up form.",
679.                         [
680.                             ["p" => "New submission from the \"Week in Coatings\" sign-up form."],
681.                             ["table" => [
682.                                 "First Name" => $firstname,
683.                                 "Last Name" => $lastname,
684.                                 "Email Address" => $email,
685.                                 "Company" => $company,
686.                                 "Country" => $country,
687.                                 "Type of Work" => $contractor_type,
688.                                 "Type of Business" => $business_type,
689.                             ]],
690.                         ]
691.                     );
692.                 }
693.                 // store the lead
694.                 $content = null;
695.                 
696.                 $lead_custom = $request->get("lead_custom");
697.                 $lead = $leadHelper->saveLead($lead, $content, $request, $lead_custom);
698.                 
699.                 if(isset($httpErrorCode)) {
700.                     $lead->setComments("MailChimp http code: {$httpErrorCode}");
701.                 }
702.                 
703.                 $em = $this->getDoctrine()->getManager();
704.                 $em->persist($lead);
705.                 $em->flush();
706.                 
707.                 if(isset($httpErrorCode)) {
708.                     $this->addFlash("warning", "An error occurred while attempting to add you to our mailing list. Please try again later.");
709.                     return new RedirectResponse($request->headers->get('referer'));
710.                 }
711.                 
712.                 //$this->addFlash("success", "Thank you for signing up for the RCS Week in Review.");
713.                 //return new RedirectResponse($request->headers->get('referer'));
714.                 $enewsSignupSuccess = true;
715.                 
716.             }
717.             
718.             catch (\Exception $e) {
719.                 $this->addFlash("warning", $e->getMessage());
720.                 return new RedirectResponse($request->headers->get('referer'));
721.             }
722.             
723.         }
724.         else {
725.             $lead = $request->get("lead");
726.             $lead_custom = $request->get("lead_custom");
727.             $lead = $leadHelper->saveLead($lead, null, $request, $lead_custom);
728.             $em = $this->getDoctrine()->getManager();
729.             $em->persist($lead);
730.             $em->flush();
731.         }
732.         
733.         if($siteSignupSuccess) {
734.             return new RedirectResponse('/welcome-activation');
735.         }
736.         
737.         if($enewsSignupSuccess) {
738.             // $this->addFlash("success", "Thank you for signing up for the RCS Week in Roofing.");
739.             return new RedirectResponse('/thank-you-wir');
740.         }
741.         
742.     }
743.     
744.     /**
745.      * @Route("/sign-up", name="new-sign-up-form")
746.      */
747.     public function viewNewSignUp (
748.     
749.     ) {
750.         
751.         return $this->defaultRender("forms/new-sign-up.html.twig", [
752.             "firstname" => "",
753.             "lastname" => "",
754.             "username" => "",
755.             "email" => "",
756.             "address1" => "",
757.             "address2" => "",
758.             "city" => "",
759.             "state" => "",
760.             "zip" => "",
761.             "company" => "",
762.             "message" => array (
763.             
764.             ),
765.             "meta" => array (
766.                "breadcrumbs" => [
767.                    [
768.                        "title" => "Sign Up",
769.                        "href" => "/sign-up",
770.                    ]
771.                ]
772.            )
773.         ]);
774.     }
775.     
776.     
777.     
778.     
779.     
780.     
781.     
782.     
783.     /**
784.      * @Route("/activate-account", name="activate", methods={"POST"})
785.      */
786.     public function activateAccount (
787.         Request $request,
788.         UserHelper $userHelper,
789.         ContentHelper $contentHelper
790.     ) {
791.         
792.         $id = $request->get("id");
793.         $token = $request->get("token");
794.         $rclubProdId = $request->get("rclubProdId");
795.         $rsp = $userHelper->activateAccount($id, $token);
796.         
797.         if ($rsp["status"]) {
798.             
799.             //redirect to purchase page if rclubProdId is set
800.             if($rclubProdId) {
801.                 $user = $userHelper->getUserById($id);
802.                 if ($user) {
803.             
804.                     // use the current cart or create one
805.                    $purchase = $user->getActivePurchase();
806.                    if (!$purchase) {
807.                        $purchase = new Purchase();
808.                    }
809.                    
810.                    //Remove all items since we're going straight to checkout
811.                    foreach($purchase->getItems() as $item) {
812.                        //$product = $item->getProduct();
813.                        //if($product->getType() == Product::PRODUCT_TYPE_MEMBERSHIP) {
814.                            $purchase->removeItem($item);
815.                        //}
816.                    }
817.                    
818.                    $newItem = new PurchaseItem();
819.                    
820.                    $newItem->setProduct($contentHelper->getProductById($rclubProdId));
821.                    $newItem->setType(PurchaseItem::TYPE_MEMBERSHIP);
822.                    $newItem->setPurchase($purchase);
823.                    
824.                    // add to the current Item
825.                    $purchase->setCurrentItem($newItem);
826.                    $purchase->setUser($user);
827.                    $purchase->setDiscount(0);
828.                    
829.                    $manager = $this->getDoctrine()->getManager();
830.                    $manager->persist($purchase);
831.                    $manager->flush();
832.                    
833.                    $this->addFlash("success", "You have successfully activated your account! Please complete your purchase below to join the R-Club.");
834.                    return $this->redirectToRoute("purchase", [
835.                    
836.                    ]);
837.         
838.                }
839.             }
842.             /*return $this->defaultRender("/", [
843.                 "message" => array (
844.                     "type" => "success",
845.                     "text" => $rsp["message"],
846.                 )
847.             ]);*/
848.             
849.             //$this->addFlash("success", $rsp["message"]);
850.             //return $this->redirect("/");
851.             return $this->redirect("/welcome-to-rcs");
852.             
853.             //$this->addFlash("success", $rsp["message"]);
854.             //return $this->redirect('http://staging.rooferscoffeeshop.com/post-a-classified-ad/2');
855.         } 
856.         
857.         else {
858.             return $this->defaultRender("forms/send-activation.html.twig", [
859.                 "type" => "warning",
860.                 "text" => $rsp["message"],
861.             ]);
862.         }
863.         
864.         
865.         /*
866.         try {
867.             $id = $request->get("id");
868.             $token = $request->get("token");
869.             
870.             $user = $userHelper->getUserById($id);
871.             $expires = $user->getActivationExpires();
872.             
873.             if ($user->getActivationToken() == $token && 
874.                 new \DateTime("now") < $expires
875.             ) {
876.                 $user->setActivationToken(null);
877.                 $user->setActivationExpires(null);
878.                 // $user->setIsActive(1);
879.                 $user->setStatus(1);
880.                 
881.                 $em = $this->getDoctrine()->getManager();
882.                 $em->persist($user);
883.                 $em->flush();
884.                 $em->clear();
885.                 
886.                 return $this->defaultRender("forms/sign-in.html.twig", [
887.                     "message" => array (
888.                         "type" => "success",
889.                         "text" => "The account has been activated. You may now sign in.",
890.                     ),
891.                 ]);
892.             }
893.         } 
894.         
895.         catch (ResourceNotFoundException $e) {
896.             // ... ignore
897.         }
898.         
899.         return $this->defaultRender("forms/send-activation.html.twig", [
900.             "message" => array (
901.                 "type" => "warning",
902.                 "text" => "The provided token was not found in the system. It is possible that it has expired. If the token has expired, you will need to sign up again.",
903.             ),
904.         ]);
905.         */
906.         
907.     }
908.     
909.     /**
910.      * @Route("/activate-account/{id}/{token}/{rclubProdId}", name="view-activation-form")
911.      */
912.     public function viewActivateAccount (
913.         UserHelper $userHelper,
914.         $id = "",
915.         $token = "",
916.         $rclubProdId = ""
917.     ) {
918.         try {
919.             $user = $userHelper->getUserById($id);
920.             $expires = $user->getActivationExpires();
921.             if ($token == $user->getActivationToken() && 
922.                 new \DateTime("now") < $expires 
923.             ) {
924.                 return $this->defaultRender("forms/activate.html.twig", [
925.                     "username" => $user->getUsername(),
926.                     "id" => $id,
927.                     "token" => $token,
928.                     "rclubProdId" => $rclubProdId,
929.                 ]);
930.             }
931.         } catch (ResourceNotFoundException $e) {
932.             // ... ignore
933.         }
934.         
935.         return $this->defaultRender("forms/send-activation.html.twig", [
936.             "message" => array (
937.                 "type" => "warning",
938.                 "text" => "The provided token was not found in the system. It is possible that it has expired. If the token has expired, you will need to sign up again or re-send the activation link.",
939.             ),
940.         ]);
941.     }
942.     
943.     /**
944.      * @Route("/send-activation", name="send-activation", methods={"POST"})
945.      */
946.     public function sendActivation (
947.         Request $request,
948.         UserHelper $userHelper,
949.         EmailHelper $emailHelper
950.     ) {
951.         
952.         $email = $request->get("email");
953.         $resp = $userHelper->sendActivation($email);
954.                  
955.         if ($resp["status"]) {
956.             return $this->defaultRender("forms/send-activation.html.twig", [
957.                 "message" => array (
958.                     "type" => "success",
959.                     "text" => $resp["message"],
960.                 )
961.             ]);
962.         }
963.         
964.         return $this->defaultRender("forms/send-activation.html.twig", [
965.             "message" => array (
966.                 "type" => "warning",
967.                 "text" => $resp["message"],
968.             )
969.         ]);
970.         
971.         /*
972.         try {
973.             $email = $request->get("email");
974.             $user = $userHelper->getUserByEmail($email);
975.             $uid = $user->getId();
976.             $token = $user->getActivationToken();
977.             $expires = $user->getActivationExpires();
978.             
979.             $pooled = $emailHelper->sendEmail($email, "Account Activation Link", [
980.                 ["p" => "Hello {$user->getFullName()},"],
981.                 ["p" => "You recently requested to receive an activation link for your RoofersCoffeeShop account. Click the button below to activate it."],
982.                 ["button" => [
983.                     "text" => "Activate Account",
984.                     "href" => "https://rooferscoffeeshop.com/activate-account/{$uid}/{$token}",
985.                 ]],
986.                 ["p" => "If you did not request a password reset, please ignore this email or reply to let us know. This password reset link is only valid for the next 2 hours."],
987.             ]);
988.             
989.             if ($pooled) {
990.                 return $this->defaultRender("forms/send-activation.html.twig", [
991.                     "message" => array (
992.                         "type" => "success",
993.                         "text" => "The activation link has been sent to that e-mail address.",
994.                     )
995.                 ]);
996.             } 
997.             
998.             return $this->defaultRender("forms/send-activation.html.twig", [
999.                 "message" => array (
1000.                     "type" => "warning",
1001.                     "text" => "An error occurred while trying to send a system e-mail. If this error continues to occur please contact support.",
1002.                 )
1003.             ]);
1004.             
1005.         } catch (ResourceNotFoundException $e) {
1006.             
1007.         }
1008.         
1009.         return $this->defaultRender("forms/send-activation.html.twig", [
1010.             "message" => array (
1011.                 "type" => "warning",
1012.                 "text" => "No account found matching that criteria.",
1013.             )
1014.         ]);
1015.         */
1016.         
1017.     }
1018.     
1019.     /**
1020.      * @Route("/send-activation", name="send-activation-form")
1021.      */
1022.     public function viewSendActivation (
1023.         UserHelper $userHelper
1024.     ) {
1025.         return $this->defaultRender("forms/send-activation.html.twig", [
1026.             "message" => array (),
1027.         ]);
1028.     }
1030.     /**
1031.      * @Route("/mfa/{id}/{token}", name="view-mfa-form")
1032.      */
1033.     public function viewMfa (
1034.         UserHelper $userHelper,
1035.         $id = "",
1036.         $token = ""
1037.     ) {
1038.         try {
1039.             $user = $userHelper->getUserById($id);
1040.             $expires = $user->getMfaTokenExpires();
1041.             if ($token == $user->getMfaToken() && 
1042.                 new \DateTime("now") < $expires 
1043.             ) {
1044.                 return $this->defaultRender("forms/mfa.html.twig", [
1045.                     "username" => $user->getUsername(),
1046.                     "id" => $id,
1047.                     "token" => $token,
1048.                 ]);
1049.             }
1050.         } catch (ResourceNotFoundException $e) {
1051.             // ... ignore
1052.         }
1053.         
1054.         return $this->defaultRender("forms/sign-in.html.twig", [
1055.             "message" => array (
1056.                 "type" => "warning",
1057.                 "text" => "The provided token was not found in the system. It is possible that it has expired. Try signing in again.",
1058.             ),
1059.         ]);
1060.     }
1062.     /**
1063.      * @Route("/mfasignin", name="mfasignin", methods={"POST"})
1064.      */
1065.     public function mfaSignIn (
1066.         Request $request,
1067.         UserHelper $userHelper
1068.         //DoctrineTokenProvider $doctrineTokenProvider
1069.     ) {
1070.         
1071.         $id = $request->get("id");
1072.         $token = $request->get("token");
1073.         $code = $request->get("code");
1074.         $rsp = $userHelper->signInMfa($id, $token, $code);
1075.         
1076.         if ($rsp["status"]) {
1077.             
1078.             /*return $this->defaultRender("/", [
1079.                 "message" => array (
1080.                     "type" => "success",
1081.                     "text" => $rsp["message"],
1082.                 )
1083.             ]);*/
1084.             $session = $request->getSession();
1085.             $nRoute = $session->get("non_sign_in_route");
1086.             $path = !empty($nRoute["path"]) ? $nRoute["path"] : "/";
1088.             $user = $userHelper->getUserById($id);
1089.             $username = $user->getUsername();
1090.             
1091.             $this->addFlash("success", "You have successfully logged in.");
1092.             $response = new RedirectResponse($path);
1093.             //$response = $this->setRememberMe($request, $response, $doctrineTokenProvider, $username);
1094.             return $response;
1095.             
1096.             //return $this->redirect("/");
1098.             
1099.             //$this->addFlash("success", $rsp["message"]);
1100.             //return $this->redirect('http://staging.rooferscoffeeshop.com/post-a-classified-ad/2');
1101.         } 
1102.         
1103.         else {
1104.             return $this->defaultRender("forms/mfa.html.twig", [
1105.                 //"username" => $user->getUsername(),
1106.                 "id" => $id,
1107.                 "token" => $token,
1108.                 "message" => array (
1109.                     "type" => "warning",
1110.                     "text" => $rsp["message"],
1111.                 )
1112.             ]);
1113.         }
1114.         
1115.     }
1117.     //no longer used
1118.     public function setRememberMe(
1119.         $request,
1120.         $response,
1121.         $doctrineTokenProvider,
1122.         $username
1123.     ) {
1124.         return false;
1125.         $series = base64_encode(random_bytes(64));
1126.         $tokenValue = base64_encode(random_bytes(64));
1128.         $user = $this->user;
1130.         $doctrineTokenProvider->createNewToken(
1131.             new PersistentToken(
1132.                 User::class,
1133.                 //$user->getUsername(),
1134.                 $username,
1135.                 $series,
1136.                 $tokenValue,
1137.                 new \DateTime()
1138.             )
1139.         );
1140.         
1141.         $options = [
1142.             'name' => 'REMEMBERME',
1143.             'lifetime' => 604800,
1144.             'path' => '/',
1145.             //'domain' => 'staging.rooferscoffeeshop.com',
1146.             'domain' => null,
1147.             'secure' => true,
1148.             'httponly' => true,
1149.             'samesite' => 'strict',
1150.         ];
1152.         //samesite = 
1153.         //public const SAMESITE_NONE = 'none';
1154.         //public const SAMESITE_LAX = 'lax';
1155.         //public const SAMESITE_STRICT = 'strict';
1157.         $cookieParts = [$series, $tokenValue];
1158.         
1159.         foreach ($cookieParts as $cookiePart) {
1160.             if (str_contains($cookiePart, ":")) {
1161.                 throw new \InvalidArgumentException(sprintf('$cookieParts should not contain the cookie delimiter "%s".', ":"));
1162.             }
1163.         }
1165.         $encodedCookie = base64_encode(implode(":", $cookieParts));
1168.         //$response = new Response();
1170.         $response->headers->setCookie(
1171.             new Cookie(
1172.                 $options['name'],
1173.                 //$this->encodeCookie([$series, $tokenValue]),
1174.                 $encodedCookie,
1175.                 time() + $options['lifetime'],
1176.                 $options['path'],
1177.                 $options['domain'],
1178.                 $options['secure'] ?? $request->isSecure(),
1179.                 $options['httponly'],
1180.                 false,
1181.                 $options['samesite']
1182.             )
1183.         );
1185.         return $response;
1186.     }
1187.     
1188.     /**
1189.      * @Route("/account", methods={"POST"}, name="post-account")
1190.      */
1191.     public function updateAccount (
1192.         Request $request,
1193.         UserHelper $userHelper
1194.     ) {
1195.         // if we have a current user
1196.         if ($this->user) {
1197.             // grab the fields
1198.             $data = [];
1199.             
1200.             if ($request->get("firstname")) {
1201.                 $data["firstname"] = $request->get("firstname");
1202.             }
1203.             
1204.             if ($request->get("lastname")) {
1205.                 $data["lastname"] = $request->get("lastname");
1206.             }
1207.             
1208.             if ($request->get("displayname")) {
1209.                 $data["displayname"] = $request->get("displayname");
1210.             }
1211.             
1212.             if ($request->get("username")) {
1213.                 $data["username"] = $request->get("username");
1214.             }
1215.             
1216.             if ($request->get("email")) {
1217.                 $data["email"] = $request->get("email");
1218.             }
1219.             
1220.             if ($request->get("password1")) {
1221.                 $data["password1"] = $request->get("password1");
1222.                 $data["password2"] = $request->get("password2");
1223.                 $data["password3"] = $request->get("password3");
1224.             }
1225.             
1226.             // user avatar
1227.             if ($request->files->get("avatar")) {
1228.                 $data["avatar"] = $request->files->get("avatar");
1231.                 $mime =  $data["avatar"]->getMimeType();
1232.                 if(!in_array($mime, ["image/jpg", "image/jpeg", "image/png", "image/gif"])) {
1233.                     $this->addFlash("danger", "Only PNG, JPG, and GIF file types are allowed.");
1234.                     return new RedirectResponse($request->headers->get('referer'));
1235.                 }
1236.             }
1237.             
1238.             else if ($request->get("remove_avatar")) {
1239.                 $data["remove_avatar"] = true;
1240.             }
1241.             
1242.             //Update notifications 
1243.             $data["usermeta"] = [];
1244.             $notifications = $request->get("notifications");
1245.             if(empty($notifications)) {
1246.                 $notifications = [];
1247.             }
1248.             $data["usermeta"]["member_notification_forum"] = in_array("forum", $notifications);
1249.             $data["usermeta"]["member_notification_page"] = in_array("page", $notifications);
1250.             $data["usermeta"]["member_notification_classifieds"] = in_array("classifieds", $notifications);
1251.             
1252.             
1253.             $rsp = $userHelper->updateAccount(
1254.                 $this->user->getId(),
1255.                 $data
1256.             );
1257.             $this->addFlash($rsp["type"], $rsp["message"]);
1258.         }
1259.         
1260.         return $this->redirectToRoute("account");
1261.     }
1262.     
1263.     
1264.     /**
1265.      * @Route("/account/profile", methods={"POST"}, name="post-account-profile")
1266.      */
1267.     public function updateAccountProfile (
1268.         Request $request,
1269.         ContactHelper $contactHelper,
1270.         EmailHelper $emailHelper
1271.     ) {
1272.         
1273.         $user = $this->user;
1274.         // if we have a current user
1275.         if($user) {
1276.             
1277.             $contact = $user->getContact();
1278.             if(!$contact) {
1279.                 $contact = new Contact();
1280.                 $user->setContact($contact);
1281.                 $entityManager = $this->getDoctrine()->getManager();
1282.                 $entityManager->persist($user);
1283.                 $entityManager->flush();
1284.             }
1285.             
1286.             $contactHelper->updateContact($contact->getId(), $request->request->all());
1287.             $this->addFlash("success", "Profile updated.");
1288.             
1289.             $emailHelper->sendEmail(
1290.                 ["rcs@rooferscoffeeshop.com"],
1291.                 "Profile Updated - {$user->getUsername()}",
1292.                 [
1293.                     ["p" => "{$user->getUsername()} has updated their account's profile information."],
1294.                     ["p" => "Visit the User Dashboard to view these changes."],
1295.                     ["button" => [
1296.                         "text" => "User Dashboard",
1297.                         "href" => "https://www.rooferscoffeeshop.com/user-dashboard",
1298.                     ]],
1299.                 ]
1300.             );
1301.             
1302.         }
1303.         
1304.         return $this->redirectToRoute("account", [
1305.            "slug" => "profile",
1306.         ]);
1307.     }
1308.     
1309.     /**
1310.      * @Route("/account/content/{type}", name="account-content-filter")
1311.      */
1312.     public function viewAccountContentType (
1313.         Request $request,
1314.         UserHelper $userHelper,
1315.         $type = ""
1316.     ) {
1317.         if (!$this->user) {
1318.             return $this->redirect("/sign-in");
1319.         }
1320.         $user = $this->user;
1321.         
1322.         return $this->defaultRender("forms/user-account.html.twig", [
1323.             "user" => $user,
1324.             "slug" => "content",
1325.             "type" => $type,
1326.             
1327.             "meta" => [
1328.                 "breadcrumbs" => [
1329.                     [
1330.                         "title" => "Your Account",
1331.                         "href" => "/account",
1332.                     ]
1333.                 ]
1334.             ]
1335.         ]);
1336.         
1337.         
1338.     }
1339.     
1340.     /**
1341.      * @Route("/account/membership/cancel", methods={"POST"}, name="post-account-membership-cancel")
1342.      */
1343.     public function cancelAccountMembership (
1344.         Request $request,
1345.         UserHelper $userHelper,
1346.         OrderHelper $orderHelper,
1347.         EmailHelper $emailHelper
1348.     ) {
1349.         if (!$this->user) {
1350.             return $this->redirect("/sign-in");
1351.         }
1352.         $user = $this->user;
1353.         
1354.         $manager = $this->getDoctrine()->getManager();
1355.         $item = $manager->getRepository(PurchaseItem::class)
1356.             ->findOneBy([
1357.                "id" => $request->get("item_id"),
1358.             ]);
1359.         
1360.         $item->setStatus(PurchaseItem::STATUS_ACTIVE);
1361.         $manager->persist($item);
1362.         $manager->flush();
1363.         
1364.         //send email
1365.         $message = [];
1366.         $message[] = ["p" => "Your R-Club membership has been cancelled and will not auto-renew."];
1367.         $message[] = ["a" => ["href" => "rooferscoffeeshop.com/account", "text" => "Go to your account page to turn auto-renew back on or update your settings."]];
1368.         
1369.         $emailHelper->sendEmail (
1370.             [$user->getEmail()],
1371.             "R-Club Auto-Renew Cancelled",
1372.             $message
1373.         );
1374.         
1375.         $this->addFlash("success", "Your membership has been cancelled and will not auto-renew.");
1376.         return $this->redirectToRoute("account", [
1377.            "slug" => "membership",
1378.         ]);
1379.     }
1380.     
1381.     /**
1382.      * @Route("/account/membership/continue", methods={"POST"}, name="post-account-membership-continue")
1383.      */
1384.     public function continueAccountMembership (
1385.         Request $request,
1386.         UserHelper $userHelper,
1387.         OrderHelper $orderHelper,
1388.         EmailHelper $emailHelper
1389.     ) {
1390.         if (!$this->user) {
1391.             return $this->redirect("/sign-in");
1392.         }
1393.         $user = $this->user;
1394.         
1395.         $manager = $this->getDoctrine()->getManager();
1396.         $item = $manager->getRepository(PurchaseItem::class)
1397.             ->findOneBy([
1398.                "id" => $request->get("item_id"),
1399.             ]);
1400.         
1401.         $item->setStatus($item->getPaymentFailed() ? PurchaseItem::STATUS_ACTIVE_RENEWING_FINAL : PurchaseItem::STATUS_ACTIVE_RENEWING);
1402.         $manager->persist($item);
1403.         $manager->flush();
1404.         
1405.         //send email
1406.         $message = [];
1407.         $message[] = ["p" => "Thank you for re-activating your R-Club membership."];
1408.         $message[] = ["a" => ["href" => "rooferscoffeeshop.com/account", "text" => "Go to your account page to view your renewal information."]];
1409.         
1410.         $emailHelper->sendEmail (
1411.             [$user->getEmail()],
1412.             "R-Club Auto-Renew Activated",
1413.             $message
1414.         );
1415.         
1416.         $this->addFlash("success", "Your membership has been re-activated and will now automatically renew.");
1417.         return $this->redirectToRoute("account", [
1418.            "slug" => "membership",
1419.         ]);
1420.     }
1421.     
1422.     /**
1423.      * @Route("/account/membership", methods={"POST"}, name="post-account-membership")
1424.      */
1425.     public function updateAccountMembership (
1426.         Request $request,
1427.         UserHelper $userHelper,
1428.         OrderHelper $orderHelper
1429.     ) {
1430.         
1431.         if (!$this->user) {
1432.             return $this->redirect("/sign-in");
1433.         }
1434.         $user = $this->user;
1435.         
1436.         $payment = $request->get("payment");
1437.         $card = $request->get("card");
1438.         
1439.         //expiration date
1440.         $card["card_expires"] = $card["card_expires_month"].$card["card_expires_year"];
1441.         
1442.         if (!$payment || !isset($payment["terms"])) {
1443.             $this->addFlash("warning", "You must accept the terms and conditions.");
1444.             return $this->redirectToRoute("account", [
1445.                "slug" => "membership",
1446.             ]);
1447.         }
1448.         
1449.         $result = $orderHelper->generateToken(
1450.            $payment["firstname"],
1451.            $payment["lastname"],
1452.            $payment["company"],
1453.            $payment["address1"],
1454.            $payment["address2"],
1455.            $payment["city"],
1456.            $payment["state"],
1457.            $payment["zip"],
1458.            $payment["country"],
1459.            $payment["email"],
1460.            $payment["phone"],
1461.            $_SERVER["REMOTE_ADDR"],
1462.            $card["card_number"],
1463.            $card["card_expires"],
1464.            $card["card_csc"]
1465.         );
1466.         
1467.         if ($result["result"] == "APPROVAL" || $result["result"] == "APPROVED") {
1468.             
1469.             $last4 = $card["card_number"];
1470.             $last4 = preg_replace("/[^0-9]/", '', $last4);
1471.             $last4 = substr($last4, -4);
1472.             
1473.             $user->setUsermetum("has_payment_info", "1");
1474.             $user->setUsermetum("payment_first_name", $payment["firstname"]);
1475.             $user->setUsermetum("payment_last_name", $payment["lastname"]);
1476.             $user->setUsermetum("payment_company", $payment["company"]);
1477.             $user->setUsermetum("payment_address_line_1", $payment["address1"]);
1478.             $user->setUsermetum("payment_address_line_2", $payment["address2"]);
1479.             $user->setUsermetum("payment_city", $payment["city"]);
1480.             $user->setUsermetum("payment_state_province", $payment["state"]);
1481.             $user->setUsermetum("payment_postal_code", $payment["zip"]);
1482.             $user->setUsermetum("payment_country", $payment["country"]);
1483.             $user->setUsermetum("payment_email", $payment["email"]);
1484.             $user->setUsermetum("payment_phone", $payment["phone"]);
1485.             $user->setUsermetum("payment_last4", $last4);
1486.             $user->setUsermetum("payment_exp", $card["card_expires"]);
1487.             //$user->setUsermetum("payment_cvv2", $card["card_csc"]);
1488.             $user->setUsermetum("payment_token", $result["token"]);
1489.             $user->setUsermetum("payment_token_response", $result["token_response"]);
1490.             
1491.             $manager = $this->getDoctrine()->getManager();
1492.             $manager->persist($user);
1493.             $manager->flush();
1494.             
1495.             $this->addFlash("success", "Membership settings updated.");
1496.             return $this->redirectToRoute("account", [
1497.                //"slug" => "membership",
1498.             ]);
1499.         }
1500.         else {
1501.             $this->addFlash("warning", "Their was an error while updating your payment information. Response: {$result["result"]}");
1502.             return $this->redirectToRoute("account", [
1503.                "slug" => "membership",
1504.             ]);
1505.         }
1506.         
1507.         
1508.         
1509.     }
1510.     
1511.     /**
1512.      * @Route("/account/{slug}/{id}", 
1513.      *      name="account",
1514.      *      defaults={"slug": "", "id": ""}
1515.      * )
1516.      */
1517.     public function viewAccount (
1518.         UserHelper $userHelper,
1519.         Request $request,
1520.         $slug = "",
1521.         $id = ""
1522.     ) {
1523.         if (!$this->user) {
1524.             return $this->redirect("/sign-in");
1525.         }
1526.         $user = $this->user;
1527.         $manager = $this->getDoctrine()->getManager();
1528.         $purchases = $user->getPurchases();
1529.         $purchase = null;
1530.         
1531.         if (!$slug) {
1532.             $slug = "account";
1533.         }
1534.         
1535.         if ($slug == "order" && $id) {
1536.             // show the order details
1537.             $purchase = $manager->getRepository(Purchase::class)
1538.                 ->findOneBy([
1539.                     "id" => $id
1540.                 ]);
1541.             
1542.             if (!$purchase || $purchase->getUser()->getId() != $user->getId()) {
1543.                 $purchase = null;
1544.             }
1545.         }
1546.         
1547.         $customers = $user->getCompanies();
1548.         
1549.         $membership_item = "";
1550.         $membership_product = "";
1551.         $will_renew = false;
1552.         //Get the current purchase item used to activate the user's membership
1553.         if($user->isMember()) {
1554.             $now = new \DateTime();
1555.             foreach($purchases as $p) {
1556.                 $items = $p->getItems();
1557.                 foreach($items as $item) {
1558.                     if(($item->getStatus() >= PurchaseItem::STATUS_ACTIVE) && ($item->getType() == PurchaseItem::TYPE_MEMBERSHIP) && ($item->getExpiresAt() > $now)) {
1559.                         $membership_item = $item;
1560.                         $membership_product = $item->getProduct();
1561.                         $will_renew = ($item->getStatus() >= PurchaseItem::STATUS_ACTIVE_RENEWING ? true : false);
1562.                     }
1563.                 }
1564.             }
1565.         }
1566.         
1567.         $payment = false;
1568.         if($slug == "membership") {
1569.             if($user->getUserMetaValueByKey("has_payment_info")) {
1570.                 $payment = [];
1571.                 $payment["firstname"] = $user->getUserMetaValueByKey("payment_first_name");
1572.                 $payment["lastname"] = $user->getUserMetaValueByKey("payment_last_name");
1573.                 $payment["company"] = $user->getUserMetaValueByKey("payment_company");
1574.                 $payment["address1"] = $user->getUserMetaValueByKey("payment_address_line_1");
1575.                 $payment["address2"] = $user->getUserMetaValueByKey("payment_address_line_2");
1576.                 $payment["city"] = $user->getUserMetaValueByKey("payment_city");
1577.                 $payment["state"] = $user->getUserMetaValueByKey("payment_state_province");
1578.                 $payment["zip"] = $user->getUserMetaValueByKey("payment_postal_code");
1579.                 $payment["country"] = $user->getUserMetaValueByKey("payment_country");
1580.                 $payment["email"] = $user->getUserMetaValueByKey("payment_email");
1581.                 $payment["phone"] = $user->getUserMetaValueByKey("payment_phone");
1582.             }
1583.         }
1584.         
1585.         return $this->defaultRender("forms/user-account.html.twig", [
1586.             "user" => $user,
1587.             "purchases" => $purchases,
1588.             "purchase" => $purchase,
1589.             "slug" => $slug,
1590.             "customers" => $customers,
1591.             "membership_item" => $membership_item,
1592.             "membership_product" => $membership_product,
1593.             "will_renew" => $will_renew,
1594.             "payment" => $payment,
1595.             
1596.             "meta" => [
1597.                 "breadcrumbs" => [
1598.                     [
1599.                         "title" => "Your Account",
1600.                         "href" => "/account",
1601.                     ]
1602.                 ]
1603.             ]
1604.         ]);
1605.     }
1606.     
1607.     /**
1608.      * @Route("/admin-account/membership/{id}", methods={"GET"}, name="admin-account-membership")
1609.      */
1610.     public function adminAccountMembership(
1611.         Request $request,
1612.         UserHelper $userHelper,
1613.         $id = ""
1614.     ) {
1615.         //Admin check
1616.         $access = false;
1617.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
1618.             $user = $this->getUser();
1619.             if($user) {
1620.                 if($user->isAdmin()) {
1621.                     $access = true;
1622.                 }
1623.             }
1624.         }
1625.         
1626.         if(!$access) {
1627.             $this->addFlash("warning", "This page is only accessible to site administrators.");
1628.             return $this->redirectToRoute("/");
1629.         }
1630.         
1631.         $member = "";
1632.         if($id) {
1633.             $member = $userHelper->getUserById($id);
1634.         }
1635.         $manager = $this->getDoctrine()->getManager();
1636.         $purchases = $member->getPurchases();
1637.         $purchase = null;
1638.         
1639.         $membership_item = "";
1640.         $membership_product = "";
1641.         $will_renew = false;
1642.         $last_membership_item = "";
1643.         $last_membership_product = "";
1644.         $renewal_price = "";
1645.         //Get the current purchase item used to activate the user's membership
1646.         if($member->isMember()) {
1647.             $now = new \DateTime();
1648.             foreach($purchases as $p) {
1649.                 $items = $p->getItems();
1650.                 foreach($items as $item) {
1651.                     if(($item->getStatus() >= PurchaseItem::STATUS_ACTIVE) && ($item->getType() == PurchaseItem::TYPE_MEMBERSHIP) && ($item->getExpiresAt() > $now)) {
1652.                         $membership_item = $item;
1653.                         $membership_product = $item->getProduct();
1654.                         $will_renew = ($item->getStatus() >= PurchaseItem::STATUS_ACTIVE_RENEWING ? true : false);
1655.                         $renewal_price = $membership_product->getPrice();
1657.                         $old_coupons = $p->getCoupons();
1658.                         foreach($old_coupons as $coupon) {
1659.                             if($coupon->getProductType() == Coupon::PRODUCT_TYPE_MEMBERSHIP
1660.                                 && ($coupon->getRecurringType() == Coupon::RECURRING_UNLIMITED
1661.                                 || ($coupon->getRecurringType() == Coupon::RECURRING_SET_MONTHS && $coupon->getMonthsRecurring() > $item->getMonthsRenewed()))
1662.                             ) {
1663.                                 switch ($coupon->getType()) {
1664.                 
1665.                                     case Coupon::TYPE_DISCOUNT:
1666.                                         $amount = $coupon->getAmount();
1667.                                         if (strpos($amount, ".") === false) {
1668.                                             $amount = "{$amount}00";
1669.                                         }
1670.                                         $amount = preg_replace("/[^0-9]*/", "", $amount);
1671.                                         $renewal_price = $renewal_price - (double)$amount;
1672.                                         break;
1673.                                         
1674.                                     case Coupon::TYPE_PERCENTAGE:
1675.                                         $amount = $coupon->getAmount();
1676.                                         $amount = (double) $amount / 100;
1677.                                         $amount = ($renewal_price * $amount);
1678.                                         $renewal_price = $renewal_price - $amount;
1679.                                         break;
1680.                                         
1681.                                     case Coupon::TYPE_FREE_PRODUCT:
1682.                                         $couponProducts = $coupon->getProducts();
1683.                                         if ($couponProducts->contains($membership_product)) {
1684.                                             $renewal_price = 0;
1685.                                         }
1686.                                         break;
1687.                                 }
1688.                                 break;
1689.                             }
1690.                         }
1692.                     }
1693.                 }
1694.             }
1695.         }
1696.         else {
1697.             //Get the most recent purchase item used to activate the user's membership
1698.             $now = new \DateTime();
1699.             foreach($purchases as $p) {
1700.                 if(!$last_membership_item) {
1701.                     $items = $p->getItems();
1702.                     foreach($items as $item) {
1703.                         if(($item->getStatus() == PurchaseItem::STATUS_INACTIVE) && ($item->getType() == PurchaseItem::TYPE_MEMBERSHIP) && ($item->getExpiresAt() < $now)) {
1704.                             $last_membership_item = $item;
1705.                             $last_membership_product = $item->getProduct();
1706.                             $renewal_price = $last_membership_product->getPrice();
1707.                             break;
1708.                         }
1709.                     }
1710.                 }
1711.             }
1712.         }
1713.         if($renewal_price) {
1714.             if($renewal_price < 0) {
1715.                 $renewal_price = 0;
1716.             }
1717.             $renewal_price = "$" . number_format(($renewal_price / 100), 2);
1718.         }
1719.         
1720.         $payment = false;
1721.         if($member->getUserMetaValueByKey("has_payment_info")) {
1722.             $payment = [];
1723.             $payment["firstname"] = $member->getUserMetaValueByKey("payment_first_name");
1724.             $payment["lastname"] = $member->getUserMetaValueByKey("payment_last_name");
1725.             $payment["company"] = $member->getUserMetaValueByKey("payment_company");
1726.             $payment["address1"] = $member->getUserMetaValueByKey("payment_address_line_1");
1727.             $payment["address2"] = $member->getUserMetaValueByKey("payment_address_line_2");
1728.             $payment["city"] = $member->getUserMetaValueByKey("payment_city");
1729.             $payment["state"] = $member->getUserMetaValueByKey("payment_state_province");
1730.             $payment["zip"] = $member->getUserMetaValueByKey("payment_postal_code");
1731.             $payment["country"] = $member->getUserMetaValueByKey("payment_country");
1732.             $payment["email"] = $member->getUserMetaValueByKey("payment_email");
1733.             $payment["phone"] = $member->getUserMetaValueByKey("payment_phone");
1734.         }
1735.         
1736.         return $this->defaultRender("forms/account/admin-membership.html.twig", [
1737.             "id" => $id,
1738.             "member" => $member,
1739.             "purchases" => $purchases,
1740.             "purchase" => $purchase,
1741.             "membership_item" => $membership_item,
1742.             "membership_product" => $membership_product,
1743.             "last_membership_item" => $last_membership_item,
1744.             "last_membership_product" => $last_membership_product,
1745.             "will_renew" => $will_renew,
1746.             "renewal_price" => $renewal_price,
1747.             "payment" => $payment,
1748.         ]);
1749.     }
1750.     
1751.     /**
1752.      * @Route("/admin-account/membership-cancel", methods={"POST"}, name="post-admin-account-membership-cancel")
1753.      */
1754.     public function adminCancelAccountMembership (
1755.         Request $request,
1756.         UserHelper $userHelper,
1757.         OrderHelper $orderHelper
1758.     ) {
1759.         //Admin check
1760.         $access = false;
1761.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
1762.             $admin = $this->getUser();
1763.             if($admin) {
1764.                 if($admin->isAdmin()) {
1765.                     $access = true;
1766.                 }
1767.             }
1768.         }
1769.         
1770.         if(!$access) {
1771.             $this->addFlash("warning", "This page is only accessible to site administrators.");
1772.             return $this->redirectToRoute("/");
1773.         }
1775.         $user_id = $request->get("user_id");
1776.         $user = $userHelper->getUserById($user_id);
1777.         
1778.         $manager = $this->getDoctrine()->getManager();
1779.         $item = $manager->getRepository(PurchaseItem::class)
1780.             ->findOneBy([
1781.                "id" => $request->get("item_id"),
1782.             ]);
1783.         
1784.         $item->setStatus(PurchaseItem::STATUS_ACTIVE);
1785.         $manager->persist($item);
1786.         $manager->flush();
1787.         
1788.         $this->addFlash("success", "Membership has been cancelled and will not auto-renew.");
1789.         return $this->redirectToRoute("admin-account-membership", [
1790.            "id" => $user_id,
1791.         ]);
1792.     }
1793.     
1794.     /**
1795.      * @Route("/admin-account/membership-continue", methods={"POST"}, name="post-admin-account-membership-continue")
1796.      */
1797.     public function adminContinueAccountMembership (
1798.         Request $request,
1799.         UserHelper $userHelper,
1800.         OrderHelper $orderHelper
1801.     ) {
1802.         //Admin check
1803.         $access = false;
1804.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
1805.             $admin = $this->getUser();
1806.             if($admin) {
1807.                 if($admin->isAdmin()) {
1808.                     $access = true;
1809.                 }
1810.             }
1811.         }
1812.         
1813.         if(!$access) {
1814.             $this->addFlash("warning", "This page is only accessible to site administrators.");
1815.             return $this->redirectToRoute("/");
1816.         }
1818.         $user_id = $request->get("user_id");
1819.         $user = $userHelper->getUserById($user_id);
1820.         
1821.         $manager = $this->getDoctrine()->getManager();
1822.         $item = $manager->getRepository(PurchaseItem::class)
1823.             ->findOneBy([
1824.                "id" => $request->get("item_id"),
1825.             ]);
1826.         
1827.         $item->setStatus($item->getPaymentFailed() ? PurchaseItem::STATUS_ACTIVE_RENEWING_FINAL : PurchaseItem::STATUS_ACTIVE_RENEWING);
1828.         $manager->persist($item);
1829.         $manager->flush();
1830.         
1831.         $this->addFlash("success", "Membership has been re-activated and will now automatically renew.");
1832.         return $this->redirectToRoute("admin-account-membership", [
1833.            "id" => $user_id,
1834.         ]);
1835.     }
1837.     
1838.     /**
1839.      * @Route("/admin-account/membership-retry", methods={"POST"}, name="post-admin-account-membership-retry")
1840.      */
1841.     public function adminRetryAccountMembership (
1842.         Request $request,
1843.         UserHelper $userHelper,
1844.         OrderHelper $orderHelper,
1845.         EmailHelper $emailHelper
1846.     ) {
1847.         //Admin check
1848.         $access = false;
1849.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
1850.             $admin = $this->getUser();
1851.             if($admin) {
1852.                 if($admin->isAdmin()) {
1853.                     $access = true;
1854.                 }
1855.             }
1856.         }
1857.         
1858.         if(!$access) {
1859.             $this->addFlash("warning", "This page is only accessible to site administrators.");
1860.             return $this->redirectToRoute("/");
1861.         }
1863.         $user_id = $request->get("user_id");
1864.         $user = $userHelper->getUserById($user_id);
1865.         
1866.         $entityManager = $this->getDoctrine()->getManager();
1867.         $item = $entityManager->getRepository(PurchaseItem::class)
1868.             ->findOneBy([
1869.                "id" => $request->get("item_id"),
1870.             ]);
1871.         
1872.         /*
1873.         $item->setStatus($item->getPaymentFailed() ? PurchaseItem::STATUS_ACTIVE_RENEWING_FINAL : PurchaseItem::STATUS_ACTIVE_RENEWING);
1874.         $entityManager->persist($item);
1875.         $entityManager->flush();
1876.         */
1877.         
1883.         /* Modified copy of the OrderHelper's "updateExpiredPurchaseItems" function */
1884.         //TODO: move this to the OrderHelper so code isn't repeated
1886.         $currentStatus = PurchaseItem::STATUS_ACTIVE_RENEWING;
1887.                 
1888.         //Do this first: in case there's an error, it won't keep trying to renew
1889.         $item->setStatus(PurchaseItem::STATUS_INACTIVE);
1890.         //$item->setExpiresAt(null); //might be useful to see when it expired
1891.         $entityManager->persist($item);
1892.         $entityManager->flush();
1893.         
1894.         $purchase_completed = false;
1895.         $product = $item->getProduct();
1896.         $purchase = $item->getPurchase();
1897.         if($purchase) {
1898.             $user = $purchase->getUser();
1899.             if($product && $user) {
1900.                 if($user->getUserMetaValueByKey("has_payment_info")) {
1901.                     
1902.                     $new_purchase = new Purchase();
1903.                     
1904.                     $newItem = new PurchaseItem();
1905.                     
1906.                     $newItem->setProduct($item->getProduct());
1907.                     $newItem->setType($item->getType());
1908.                     $newItem->setPurchase($new_purchase);
1909.                     
1910.                     $new_purchase->setStatus(Purchase::STATUS_FAILED); //default to failed (we don't ever want it 'active')
1911.                     $new_purchase->setCurrentItem($newItem);
1912.                     $new_purchase->setUser($user);
1913.                     $new_purchase->setDiscount(0);
1914.                     
1915.                     //apply any coupons
1916.                     $old_coupons = $purchase->getCoupons();
1917.                     foreach($old_coupons as $coupon) {
1918.                         if($coupon->getProductType() == $product->getType()
1919.                             && ($coupon->getRecurringType() == Coupon::RECURRING_UNLIMITED
1920.                             || ($coupon->getRecurringType() == Coupon::RECURRING_SET_MONTHS && $coupon->getMonthsRecurring() > $item->getMonthsRenewed()))
1921.                         ) {
1922.                             $new_purchase->addCoupon($coupon);
1923.                         }
1924.                     }
1925.                     
1926.                     //renew the purchase item
1927.                     $result = $orderHelper->placeOrder(
1928.                         $user->getUserMetaValueByKey("payment_first_name"),
1929.                         $user->getUserMetaValueByKey("payment_last_name"),
1930.                         $user->getUserMetaValueByKey("payment_company"),
1931.                         $user->getUserMetaValueByKey("payment_address_line_1"),
1932.                         $user->getUserMetaValueByKey("payment_address_line_2"),
1933.                         $user->getUserMetaValueByKey("payment_city"),
1934.                         $user->getUserMetaValueByKey("payment_state_province"),
1935.                         $user->getUserMetaValueByKey("payment_postal_code"),
1936.                         $user->getUserMetaValueByKey("payment_country"),
1937.                         $user->getUserMetaValueByKey("payment_email"),
1938.                         $user->getUserMetaValueByKey("payment_phone"),
1939.                         "", //$_SERVER["REMOTE_ADDR"],
1940.                         $new_purchase->getInvoiceNumber(),
1941.                         $new_purchase->getTotalUsd(true),
1942.                         $new_purchase->getTaxUsd(true),
1943.                         "", //no card number
1944.                         "", //no expiration date
1945.                         "", //$user->getUserMetaValueByKey("payment_cvv2"),
1946.                         false,
1947.                         $user->getUserMetaValueByKey("payment_token")
1948.                     );
1949.                     
1950.                     
1951.                     $new_purchase->setFirstname($user->getUserMetaValueByKey("payment_first_name"));
1952.                     $new_purchase->setLastname($user->getUserMetaValueByKey("payment_last_name"));
1953.                     $new_purchase->setCompany($user->getUserMetaValueByKey("payment_company"));
1954.                     $new_purchase->setAddressLine1($user->getUserMetaValueByKey("payment_address_line_1"));
1955.                     $new_purchase->setAddressLine2($user->getUserMetaValueByKey("payment_address_line_2"));
1956.                     $new_purchase->setCity($user->getUserMetaValueByKey("payment_city"));
1957.                     $new_purchase->setStateProvince($user->getUserMetaValueByKey("payment_state_province"));
1958.                     $new_purchase->setPostalCode($user->getUserMetaValueByKey("payment_postal_code"));
1959.                     $new_purchase->setCountry($user->getUserMetaValueByKey("payment_country"));
1960.                     $new_purchase->setEmail($user->getUserMetaValueByKey("payment_email"));
1961.                     $new_purchase->setPhone($user->getUserMetaValueByKey("payment_phone"));
1962.                     //$new_purchase->setLast4("");
1963.                     //$new_purchase->setUserIP($_SERVER["REMOTE_ADDR"]);
1964.                     //$new_purchase->setUserAgent($_SERVER["HTTP_USER_AGENT"]);
1965.                     $new_purchase->setRawResponse(json_encode([
1966.                         "body" => $result["raw"],
1967.                         "request" => $result["request"],
1968.                     ]));
1969.                     
1970.                     $purchaseNote = new PurchaseNote();
1971.                     $purchaseNote->setAuthorName("RCS Payment Gateway");
1972.                     $purchaseNote->setAuthorEmail("admin@rooferscoffeeshop.com");
1974.                     if($result["result"] == "DECLINED 82") {
1975.                         $result["result"] = "INVALID CAM\CVV";
1976.                     }
1977.                     
1978.                     if (/*true || */$result["result"] == "APPROVAL" || $result["result"] == "APPROVED") {
1979.                         
1980.                         $purchaseNote->setDescription("Automatic payment attempt was successful. Response Code: {$result["code"]}. Response Message: {$result["result"]}");
1981.                         $purchaseNote->setHiddenDescription(json_encode($result));
1982.                         $new_purchase->addPurchaseNote($purchaseNote);
1983.                         
1984.                         // mark purchase items as processed...
1985.                         $new_purchase->setStatus(Purchase::STATUS_PROCESSED); //< this updates all expiration dates based on product purchased...
1986.                         
1987.                         if($product->getPaymentRate() == Product::RENEW_YEARLY) {
1988.                             $newItem->setMonthsRenewed($item->getMonthsRenewed() + 12);
1989.                         }
1990.                         else {
1991.                             $newItem->setMonthsRenewed($item->getMonthsRenewed() + 1);
1992.                         }
1993.                         
1994.                         $purchase_completed = true;
1995.                     }else{
1996.                         $purchaseNote->setDescription("An error occurred while attempting to renew your purchase. Response Code: {$result["code"]}. Response Message: {$result["result"]}");
1997.                         $purchaseNote->setHiddenDescription(json_encode($result));
1998.                         $new_purchase->addPurchaseNote($purchaseNote);
1999.                         
2000.                         // mark purchase items as failed...
2001.                         $new_purchase->setStatus(Purchase::STATUS_FAILED); //< this updates all expiration dates based on product purchased...
2002.                     }
2003.                     
2004.                     $entityManager->persist($new_purchase);
2005.                     $entityManager->flush();
2006.                     
2007.                 } 
2008.                 else{
2009.                     $purchaseNote = new PurchaseNote();
2010.                     $purchaseNote->setAuthorName("RCS Payment Gateway");
2011.                     $purchaseNote->setAuthorEmail("admin@rooferscoffeeshop.com");
2013.                     $purchaseNote->setDescription("No Payment Information On Record.");
2014.                     $purchase->addPurchaseNote($purchaseNote);
2015.                     $purchase->setStatus(Purchase::STATUS_FAILED);
2016.                 }
2017.             }
2018.         }
2019.         
2020.         if($purchase_completed) {
2021.             //send purchase email
2022.             $message = [];
2023.             $message[] = ["p" => "Your R-Club membership has been successfully renewed for {$new_purchase->getTotalUsd()}."];
2024.             $message[] = ["a" => ["href" => "rooferscoffeeshop.com/account", "text" => "Go to your account page to update your membership settings at any time."]];
2025.             
2026.             $this->addFlash("success", "Payment successful. Membership has been re-activated and will now automatically renew.");
2027.             return $this->redirectToRoute("admin-account-membership", [
2028.                 "id" => $user_id,
2029.             ]);
2030.         }
2031.         else {
2032.             
2033.             $user->setMember(0);
2034.             $entityManager->persist($user);
2035.             $entityManager->flush();
2036.             
2037.             $this->addFlash("danger", "An error occurred when attempting to renew this user's membership. Response Code: {$result["code"]}. Response Message: {$result["result"]}");
2038.             return $this->redirectToRoute("admin-account-membership", [
2039.                 "id" => $user_id,
2040.             ]);
2041.         }
2042.         
2043.     
2061.         
2062.         
2063.         
2064.     }
2069.     /**
2070.      * @Route("/admin-account/membership", methods={"POST"}, name="post-admin-account-membership")
2071.      */
2072.     public function adminUpdateAccountMembership (
2073.         Request $request,
2074.         UserHelper $userHelper,
2075.         OrderHelper $orderHelper
2076.     ) {
2077.         //Admin check
2078.         $access = false;
2079.         if ($this->isGranted('IS_AUTHENTICATED_REMEMBERED')) {
2080.             $admin = $this->getUser();
2081.             if($admin) {
2082.                 if($admin->isAdmin()) {
2083.                     $access = true;
2084.                 }
2085.             }
2086.         }
2087.         
2088.         if(!$access) {
2089.             $this->addFlash("warning", "This page is only accessible to site administrators.");
2090.             return $this->redirectToRoute("/");
2091.         }
2092.         
2093.         $user_id = $request->get("user_id");
2094.         $user = $userHelper->getUserById($user_id);
2095.         
2096.         $payment = $request->get("payment");
2097.         $card = $request->get("card");
2098.         
2099.         //expiration date
2100.         $card["card_expires"] = $card["card_expires_month"].$card["card_expires_year"];
2101.         
2102.         if (!$payment || !isset($payment["terms"])) {
2103.             $this->addFlash("warning", "You must accept the terms and conditions.");
2104.             return $this->redirectToRoute("admin-account-membership", [
2105.                 "id" => $user_id,
2106.              ]);
2107.         }
2108.         
2109.         $result = $orderHelper->generateToken(
2110.            $payment["firstname"],
2111.            $payment["lastname"],
2112.            $payment["company"],
2113.            $payment["address1"],
2114.            $payment["address2"],
2115.            $payment["city"],
2116.            $payment["state"],
2117.            $payment["zip"],
2118.            $payment["country"],
2119.            $payment["email"],
2120.            $payment["phone"],
2121.            $_SERVER["REMOTE_ADDR"],
2122.            $card["card_number"],
2123.            $card["card_expires"],
2124.            $card["card_csc"]
2125.         );
2126.         
2127.         if ($result["result"] == "APPROVAL" || $result["result"] == "APPROVED") {
2128.             
2129.             $last4 = $card["card_number"];
2130.             $last4 = preg_replace("/[^0-9]/", '', $last4);
2131.             $last4 = substr($last4, -4);
2132.             
2133.             $user->setUsermetum("has_payment_info", "1");
2134.             $user->setUsermetum("payment_first_name", $payment["firstname"]);
2135.             $user->setUsermetum("payment_last_name", $payment["lastname"]);
2136.             $user->setUsermetum("payment_company", $payment["company"]);
2137.             $user->setUsermetum("payment_address_line_1", $payment["address1"]);
2138.             $user->setUsermetum("payment_address_line_2", $payment["address2"]);
2139.             $user->setUsermetum("payment_city", $payment["city"]);
2140.             $user->setUsermetum("payment_state_province", $payment["state"]);
2141.             $user->setUsermetum("payment_postal_code", $payment["zip"]);
2142.             $user->setUsermetum("payment_country", $payment["country"]);
2143.             $user->setUsermetum("payment_email", $payment["email"]);
2144.             $user->setUsermetum("payment_phone", $payment["phone"]);
2145.             $user->setUsermetum("payment_last4", $last4);
2146.             $user->setUsermetum("payment_exp", $card["card_expires"]);
2147.             //$user->setUsermetum("payment_cvv2", $card["card_csc"]);
2148.             $user->setUsermetum("payment_token", $result["token"]);
2149.             $user->setUsermetum("payment_token_response", $result["token_response"]);
2150.             
2151.             $manager = $this->getDoctrine()->getManager();
2152.             $manager->persist($user);
2153.             $manager->flush();
2154.             
2155.             $this->addFlash("success", "Membership settings updated.");
2156.             return $this->redirectToRoute("admin-account-membership", [
2157.                 "id" => $user_id,
2158.              ]);
2159.         }
2160.         else {
2161.             $this->addFlash("warning", "Their was an error while updating your payment information. Response: {$result["result"]}");
2162.             return $this->redirectToRoute("admin-account-membership", [
2163.                 "id" => $user_id,
2164.              ]);
2165.         }
2166.         
2167.         
2168.         
2169.     }
2174.     
2175. }