JEMBOT MAWOT Bypass Shell

<?php
/**
 * Mollie       https://www.mollie.nl
 *
 * @author      Mollie B.V. <info@mollie.nl>
 * @copyright   Mollie B.V.
 * @license     https://github.com/mollie/PrestaShop/blob/master/LICENSE.md
 *
 * @see        https://github.com/mollie/PrestaShop
 * @codingStandardsIgnoreStart
 */

namespace Mollie\Repository;

use Context;
use Db;
use DbQuery;
use Exception;
use Mollie\Api\Types\PaymentStatus;
use Mollie\Shared\Infrastructure\Repository\AbstractRepository;
use MolPaymentMethod;
use mysqli_result;
use PDOStatement;
use PrestaShopDatabaseException;

if (!defined('_PS_VERSION_')) {
    exit;
}

/**
 * @deprecated - outside code must always use interface. Use PaymentMethodRepositoryInterface instead.
 * In Containers use PaymentMethodRepositoryInterface::class
 */
class PaymentMethodRepository extends AbstractRepository implements PaymentMethodRepositoryInterface
{
    public function __construct()
    {
        parent::__construct(MolPaymentMethod::class);
    }

    /**
     * @param int $environment
     *
     * @return bool
     */
    public function deleteOldPaymentMethods(array $savedPaymentMethods, $environment, int $shopId)
    {
        $escapedMethods = array_map(static function ($str) { return pSQL($str); }, $savedPaymentMethods);

        return Db::getInstance()->delete(
            'mol_payment_method',
            'id_method NOT IN ("' . implode('", "', $escapedMethods) . '")
            AND `live_environment` = ' . (int) $environment . ' AND `id_shop` = ' . (int) $shopId
        );
    }

    /**
     * @param string $paymentMethodId
     * @param int $environment
     *
     * @return false|string|null
     */
    public function getPaymentMethodIdByMethodId($paymentMethodId, $environment, $shopId = null)
    {
        if (!$shopId) {
            $shopId = Context::getContext()->shop->id;
        }

        $sql = 'SELECT id_payment_method FROM `' . _DB_PREFIX_ . 'mol_payment_method`
        WHERE id_method = "' . pSQL($paymentMethodId) . '" AND live_environment = "' . (int) $environment . '"
        AND id_shop = ' . (int) $shopId;

        return Db::getInstance()->getValue($sql);
    }

    /**
     * @todo create const for table keys
     *
     * @param string $column
     * @param string|int $value
     *
     * @return array|bool|object|null
     *
     * @throws PrestaShopDatabaseException
     */
    public function getPaymentBy($column, $value)
    {
        try {
            $paidPayment = Db::getInstance()->getRow(
                sprintf(
                    'SELECT * FROM `%s` WHERE `%s` = \'%s\' AND `bank_status` IN(\'%s\', \'%s\')',
                    _DB_PREFIX_ . 'mollie_payments',
                    bqSQL($column),
                    pSQL($value),
                    PaymentStatus::STATUS_PAID,
                    PaymentStatus::STATUS_AUTHORIZED
                )
            );
        } catch (PrestaShopDatabaseException $e) {
            throw $e;
        }

        if ($paidPayment) {
            return $paidPayment;
        }

        try {
            $nonPaidPayment = Db::getInstance()->getRow(
                sprintf(
                    'SELECT * FROM `%s` WHERE `%s` = \'%s\' ORDER BY `created_at` DESC',
                    _DB_PREFIX_ . 'mollie_payments',
                    bqSQL($column),
                    pSQL($value)
                )
            );
        } catch (PrestaShopDatabaseException $e) {
            throw $e;
        }

        return $nonPaidPayment;
    }

    /**
     * @return array|false|mysqli_result|PDOStatement|resource|null
     *
     * @throws PrestaShopDatabaseException
     */
    public function getMethodsForCheckout($environment, $shopId)
    {
        $sql = new DbQuery();
        $sql->select('*');
        $sql->from('mol_payment_method');
        $sql->where('live_environment = ' . pSQL($environment));
        $sql->where('id_shop = ' . (int) $shopId);

        return Db::getInstance()->executeS($sql);
    }

    /**
     * @param string $oldTransactionId
     * @param string $newTransactionId
     *
     * @return bool
     */
    public function updateTransactionId($oldTransactionId, $newTransactionId)
    {
        return Db::getInstance()->update(
            'mollie_payments',
            [
                'transaction_id' => pSQL($newTransactionId),
            ],
            '`transaction_id` = \'' . pSQL($oldTransactionId) . '\''
        );
    }

    public function savePaymentStatus($transactionId, $status, $orderId, $paymentMethod)
    {
        try {
            return Db::getInstance()->update(
                'mollie_payments',
                [
                    'updated_at' => ['type' => 'sql', 'value' => 'NOW()'],
                    'bank_status' => pSQL($status),
                    'order_id' => (int) $orderId,
                    'method' => pSQL($paymentMethod),
                ],
                '`transaction_id` = \'' . pSQL($transactionId) . '\''
            );
        } catch (Exception $e) {
            throw $e;
        }
    }

    public function addOpenStatusPayment($cartId, $orderPayment, $transactionId, $orderId, $orderReference)
    {
        return Db::getInstance()->insert(
            'mollie_payments',
            [
                'cart_id' => (int) $cartId,
                'method' => pSQL($orderPayment),
                'transaction_id' => pSQL($transactionId),
                'bank_status' => PaymentStatus::STATUS_OPEN,
                'order_id' => (int) $orderId,
                'order_reference' => pSQL($orderReference),
                'created_at' => ['type' => 'sql', 'value' => 'NOW()'],
            ]
        );
    }

    public function updatePaymentReason($transactionId, $reason)
    {
        try {
            return Db::getInstance()->update(
                'mollie_payments',
                [
                    'updated_at' => ['type' => 'sql', 'value' => 'NOW()'],
                    'reason' => pSQL($reason),
                ],
                '`transaction_id` = \'' . pSQL($transactionId) . '\''
            );
        } catch (Exception $e) {
            throw $e;
        }
    }
}