Changeset 6834 for sites/trunk/wordcamp.org/public_html/wp-content/plugins

Timestamp:

03/07/2018 01:45:42 AM (7 years ago)

Author:

iandunn

Message:

WordCamp QBO: Apply coding standards.

Location:

sites/trunk/wordcamp.org/public_html/wp-content/plugins

Files:

• wordcamp-qbo-client/wordcamp-qbo-client.php (modified) (13 diffs)
• wordcamp-qbo/class-wordcamp-qbo-oauth-client.php (modified) (1 diff)
• wordcamp-qbo/wordcamp-qbo.php (modified) (26 diffs)

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-qbo-client/wordcamp-qbo-client.php

@@ -16 +16 @@
 
     public static function load_options() {
-        if ( isset( self::$options ) )
+        if ( isset( self::$options ) ) {
             return self::$options;
+        }
 
         self::$options = wp_parse_args( get_option( 'wordcamp-qbo-client', array() ), array(
@@ -34 +35 @@
         ) );
 
-        foreach ( $init_options as $key => $value )
+        foreach ( $init_options as $key => $value ) {
             self::$$key = $value;
-
-        if ( empty( self::$hmac_key ) )
-            return;
+        }
+
+        if ( empty( self::$hmac_key ) ) {
+            return;
+        }
 
         add_action( 'admin_init', array( __CLASS__, 'admin_init' ), 20 );
@@ -46 +49 @@
         $cap = is_multisite() ? 'manage_network' : 'manage_options';
 
-        if ( ! current_user_can( $cap ) )
-            return;
-
-        if ( ! class_exists( 'WCP_Payment_Request' ) )
-            return;
+        if ( ! current_user_can( $cap ) ) {
+            return;
+        }
+
+        if ( ! class_exists( 'WCP_Payment_Request' ) ) {
+            return;
+        }
 
         add_action( 'add_meta_boxes', array( __CLASS__, 'add_meta_boxes' ) );
@@ -59 +64 @@
     public static function admin_notices() {
         $screen = get_current_screen();
-        if ( $screen->id != 'wcp_payment_request' )
-            return;
+        if ( $screen->id != 'wcp_payment_request' ) {
+            return;
+        }
 
         $post = get_post();
-        if ( $post->post_status == 'auto-draft' )
-            return;
+        if ( $post->post_status == 'auto-draft' ) {
+            return;
+        }
 
         $data = get_post_meta( $post->ID, '_wordcamp-qbo-client-data', true );
-        if ( empty( $data['last_error'] ) )
-            return;
+        if ( empty( $data['last_error'] ) ) {
+            return;
+        }
 
         printf( '<div class="notice error is-dismissible"><p>QBO Sync Error: %s</p></div>', esc_html( $data['last_error'] ) );
@@ -97 +105 @@
         self::load_options();
 
-        $post = get_post();
+        $post    = get_post();
         $classes = self::get_classes();
-        $data = get_post_meta( $post->ID, '_wordcamp-qbo-client-data', true );
+        $data    = get_post_meta( $post->ID, '_wordcamp-qbo-client-data', true );
 
         $selected_class = self::$options['default-class'];
-        if ( ! empty( $data['class'] ) && array_key_exists( $data['class'], $classes ) )
+        if ( ! empty( $data['class'] ) && array_key_exists( $data['class'], $classes ) ) {
             $selected_class = $data['class'];
+        }
 
         ?>
@@ -113 +122 @@
         <?php if ( empty( $data['transaction_id'] ) ) : ?>
             <p>This request has not been synced with QuickBooks yet.</p>
-        <?php else: ?>
+        <?php else : ?>
             <pre><?php echo esc_html( print_r( $data, true ) ); ?></pre>
         <?php endif; ?>
@@ -152 +161 @@
 
     public static function save_post( $post_id, $post ) {
-        if ( $post->post_type !== WCP_Payment_Request::POST_TYPE )
-            return;
-
-        if ( empty( $_POST['wordcamp-qbo-client-nonce'] ) || empty( $_POST['wordcamp-qbo-client-post'] ) )
-            return;
-
-        if ( intval( $_POST['wordcamp-qbo-client-post'] ) !== $post->ID )
-            return;
-
-        if ( ! wp_verify_nonce( $_POST['wordcamp-qbo-client-nonce'], 'wordcamp-qbo-client-push-' . $post->ID ) )
+        if ( $post->post_type !== WCP_Payment_Request::POST_TYPE ) {
+            return;
+        }
+
+        if ( empty( $_POST['wordcamp-qbo-client-nonce'] ) || empty( $_POST['wordcamp-qbo-client-post'] ) ) {
+            return;
+        }
+
+        if ( intval( $_POST['wordcamp-qbo-client-post'] ) !== $post->ID ) {
+            return;
+        }
+
+        if ( ! wp_verify_nonce( $_POST['wordcamp-qbo-client-nonce'], 'wordcamp-qbo-client-push-' . $post->ID ) ) {
             wp_die( 'Could not verify QBO nonce. Please go back, refresh the page and try again.' );
+        }
 
         // No need to push.
-        if ( empty( $_POST['wordcamp-qbo-client-push'] ) )
-            return;
-
-        if ( $post->post_status != 'paid' )
+        if ( empty( $_POST['wordcamp-qbo-client-push'] ) ) {
+            return;
+        }
+
+        if ( $post->post_status != 'paid' ) {
             wp_die( 'A request has to be marked as paid before it could be synced to QuickBooks.' );
-
-        if ( empty( $_POST['wordcamp-qbo-client-class'] ) )
+        }
+
+        if ( empty( $_POST['wordcamp-qbo-client-class'] ) ) {
             wp_die( 'You need to set a QuickBooks class before you can sync this payment request.' );
+        }
 
         $class = $_POST['wordcamp-qbo-client-class'];
-        if ( ! array_key_exists( $class, self::get_classes() ) )
+        if ( ! array_key_exists( $class, self::get_classes() ) ) {
             wp_die( 'The class you have picked does not exist.' );
-
-        $data = get_post_meta( $post->ID, '_wordcamp-qbo-client-data', true );
+        }
+
+        $data   = get_post_meta( $post->ID, '_wordcamp-qbo-client-data', true );
         $txn_id = false;
 
-        if ( ! is_array( $data ) )
+        if ( ! is_array( $data ) ) {
             $data = array();
+        }
 
         // This request has not been synced before.
-        if ( ! empty( $data['transaction_id'] ) )
+        if ( ! empty( $data['transaction_id'] ) ) {
             $txn_id = $data['transaction_id'];
+        }
 
         $amount = get_post_meta( $post->ID, '_camppayments_payment_amount', true );
@@ -193 +212 @@
 
         $currency = get_post_meta( $post->ID, '_camppayments_currency', true );
-        if ( strtoupper( $currency ) != 'USD' )
+
+        if ( strtoupper( $currency ) != 'USD' ) {
             wp_die( 'Non-USD payments sync to QuickBooks is not available yet.' );
+        }
 
         $description_chunks = array( $post->post_title );
-        $description = get_post_meta( $post->ID, '_camppayments_description', true );
-        if ( ! empty( $description ) )
+        $description        = get_post_meta( $post->ID, '_camppayments_description', true );
+
+        if ( ! empty( $description ) ) {
             $description_chunks[] = $description;
+        }
 
         $description_chunks[] = esc_url_raw( get_edit_post_link( $post->ID, 'raw' ) );
-        $description = implode( "\n", $description_chunks );
+        $description          = implode( "\n", $description_chunks );
+
         unset( $description_chunks );
 
         $category = get_post_meta( $post->ID, '_camppayments_payment_category', true );
-        $date = absint( get_post_meta( $post->ID, '_camppayments_date_vendor_paid', true ) );
+        $date     = absint( get_post_meta( $post->ID, '_camppayments_date_vendor_paid', true ) );
 
         $body = array(
-            'id' => $txn_id,
-            'date' => $date,
-            'amount' => $amount,
-            'category' => $category,
+            'id'          => $txn_id,
+            'date'        => $date,
+            'amount'      => $amount,
+            'category'    => $category,
             'description' => $description,
-            'class' => $class,
-        );
-
-        $body = json_encode( $body );
-        $request_url = esc_url_raw( self::$api_base . '/expense/' );
+            'class'       => $class,
+        );
+
+        $body         = json_encode( $body );
+        $request_url  = esc_url_raw( self::$api_base . '/expense/' );
         $request_args = array(
             'timeout' => self::REMOTE_REQUEST_TIMEOUT,
-            'body' => $body,
+            'body'    => $body,
             'headers' => array(
-                'Content-Type' => 'application/json',
+                'Content-Type'  => 'application/json',
                 'Authorization' => self::_get_auth_header( 'post', $request_url, $body ),
             ),
         );
-        $response = wp_remote_post( $request_url, $request_args );
+        $response     = wp_remote_post( $request_url, $request_args );
 
         Logger\log( 'remote_request', compact( 'request_url', 'request_args', 'response' ) );
@@ -242 +266 @@
                 unset( $data['last_error'] );
                 $data['transaction_id'] = $body['transaction_id'];
-                $data['timestamp'] = time();
-                $data['class'] = $class;
+                $data['timestamp']      = time();
+                $data['class']          = $class;
 
                 // Remember this class for future reference.
@@ -307 +331 @@
             'description'       => sanitize_text_field( $invoice_meta['_wcbsi_description'    ][0] ),
 
-            'statement_memo' => sprintf(
+            'statement_memo'    => sprintf(
                 'WordCamp.org Invoice: %s',
                 esc_url_raw( admin_url( sprintf( 'post.php?post=%s&action=edit', $invoice_id ) ) )
@@ -340 +364 @@
 
         $args = array(
+            'body'    => $body,
             'timeout' => self::REMOTE_REQUEST_TIMEOUT,
             'headers' => array(
@@ -345 +370 @@
                 'Content-Type'  => 'application/json',
             ),
-            'body' => $body,
         );
 
@@ -498 +522 @@
      * @param string $request_url The clean request URI, without any query arguments.
      * @param string $body The payload body.
-     * @param array $args The query arguments.
+     * @param array  $args The query arguments.
      *
      * @return string A sha256 HMAC signature.
      */
     private static function _get_auth_header( $method, $request_url, $body = '', $args = array() ) {
-        $signature = hash_hmac( 'sha256', json_encode( array( strtolower( $method ),
-            strtolower( $request_url ), $body, $args ) ), self::$hmac_key );
+        $signature = hash_hmac( 'sha256', json_encode( array(
+            strtolower( $method ),
+            strtolower( $request_url ),
+            $body,
+            $args,
+        ) ), self::$hmac_key );
 
         return 'wordcamp-qbo-hmac ' . $signature;

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-qbo/class-wordcamp-qbo-oauth-client.php

@@ -3 +3 @@
  * WordCamp QBO Oauth Client
  *
- * Note: This is NOT a general-purpose OAuth client, it is only suitable
+ * SECURITY WARNING: This is NOT a general-purpose OAuth client, it is only suitable
  * for the WordCamp QBO plugin.
  */
 class WordCamp_QBO_OAuth_Client {
-    private $consumer_key;
-    private $consumer_secret;
-    private $oauth_token;
-    private $oauth_token_secret;
+    private $consumer_key;
+    private $consumer_secret;
+    private $oauth_token;
+    private $oauth_token_secret;
 
-    /**
-     * @param string $consumer_key The OAuth consumer key
-     * @param string $consumer_secret The secret
-     */
-    public function __construct( $consumer_key, $consumer_secret ) {
-        $this->consumer_key = $consumer_key;
-        $this->consumer_secret = $consumer_secret;
-    }
+    /**
+     * @param string $consumer_key    The OAuth consumer key
+     * @param string $consumer_secret The secret
+     */
+    public function __construct( $consumer_key, $consumer_secret ) {
+        $this->consumer_key    = $consumer_key;
+        $this->consumer_secret = $consumer_secret;
+    }
 
-    /**
-     * Set current OAuth token
-     *
-     * @param string $oauth_token An OAuth token.
-     * @param string $oauth_token_secret The OAuth token secret.
-     */
-    public function set_token( $oauth_token, $oauth_token_secret ) {
-        $this->oauth_token = $oauth_token;
-        $this->oauth_token_secret = $oauth_token_secret;
-    }
+    /**
+     * Set current OAuth token
+     *
+     * @param string $oauth_token        An OAuth token.
+     * @param string $oauth_token_secret The OAuth token secret.
+     */
+    public function set_token( $oauth_token, $oauth_token_secret ) {
+        $this->oauth_token        = $oauth_token;
+        $this->oauth_token_secret = $oauth_token_secret;
+    }
 
-    /**
-     * Get a request token.
-     *
-     * @param string $callback_url The URL to which a successful authentication will return.
-     *
-     * @return array An array with the tokens.
-     */
-    public function get_request_token( $request_url, $callback_url ) {
-        $args = array_merge( $this->_get_default_args(), array(
-            'oauth_callback' => $callback_url,
-        ) );
+    /**
+     * Get a request token.
+     *
+     * @param string $callback_url The URL to which a successful authentication will return.
+     *
+     * @return array|WP_Error An array with the tokens.
+     */
+    public function get_request_token( $request_url, $callback_url ) {
+        $args = array_merge( $this->_get_default_args(), array(
+            'oauth_callback' => $callback_url,
+        ) );
 
-        $args['oauth_signature'] = $this->_get_signature( 'POST', $request_url, $args );
-        $args = array_map( 'rawurlencode', $args );
+        $args['oauth_signature'] = $this->_get_signature( 'POST', $request_url, $args );
+        $args                    = array_map( 'rawurlencode', $args );
 
-        $response = wp_remote_post( add_query_arg( $args, $request_url ) );
-        if ( is_wp_error( $response ) )
-            return $response;
+        $response = wp_remote_post( add_query_arg( $args, $request_url ) );
 
-        if ( wp_remote_retrieve_response_code( $response ) != 200 )
-            return new WP_Error( 'error', 'Could not get OAuth request token.' );
+        if ( is_wp_error( $response ) ) {
+            return $response;
+        }
 
-        $result = wp_parse_args( wp_remote_retrieve_body( $response ), array(
-            'oauth_token' => '',
-            'oauth_token_secret' => '',
-            'oauth_callback_confirmed' => '',
-        ) );
+        if ( wp_remote_retrieve_response_code( $response ) != 200 ) {
+            return new WP_Error( 'error', 'Could not get OAuth request token.' );
+        }
 
-        return $result;
-    }
+        $result = wp_parse_args( wp_remote_retrieve_body( $response ), array(
+            'oauth_token'              => '',
+            'oauth_token_secret'       => '',
+            'oauth_callback_confirmed' => '',
+        ) );
 
-    /**
-     * Get an OAuth access token.
-     *
-     * @param string $verifier A verifier token from the authentication flow.
-     *
-     * @return array The access token.
-     */
-    public function get_access_token( $request_url, $verifier ) {
-        $args = array_merge( $this->_get_default_args(), array(
-            'oauth_verifier' => $verifier,
-            'oauth_token' => $this->oauth_token,
-        ) );
+        return $result;
+    }
 
-        $args['oauth_signature'] = $this->_get_signature( 'POST', $request_url, $args );
-        $args = array_map( 'rawurlencode', $args );
+    /**
+     * Get an OAuth access token.
+     *
+     * @param string $verifier A verifier token from the authentication flow.
+     *
+     * @return array|WP_Error The access token.
+     */
+    public function get_access_token( $request_url, $verifier ) {
+        $args = array_merge( $this->_get_default_args(), array(
+            'oauth_verifier' => $verifier,
+            'oauth_token'    => $this->oauth_token,
+        ) );
 
-        $response = wp_remote_post( add_query_arg( $args, $request_url ) );
+        $args['oauth_signature'] = $this->_get_signature( 'POST', $request_url, $args );
+        $args                    = array_map( 'rawurlencode', $args );
 
-        if ( is_wp_error( $response ) )
-            return $response;
+        $response = wp_remote_post( add_query_arg( $args, $request_url ) );
 
-        if ( wp_remote_retrieve_response_code( $response ) != 200 )
-            return new WP_Error( 'error', 'Could not get OAuth access token.' );
+        if ( is_wp_error( $response ) ) {
+            return $response;
+        }
 
-        $result = wp_parse_args( wp_remote_retrieve_body( $response ), array(
-            'oauth_token' => '',
-            'oauth_token_secret' => '',
-        ) );
+        if ( wp_remote_retrieve_response_code( $response ) != 200 ) {
+            return new WP_Error( 'error', 'Could not get OAuth access token.' );
+        }
 
-        return $result;
-    }
+        $result = wp_parse_args( wp_remote_retrieve_body( $response ), array(
+            'oauth_token'        => '',
+            'oauth_token_secret' => '',
+        ) );
 
-    /**
-     * Get a string suitable for the Authorization header.
-     *
-     * @see http://oauth.net/core/1.0a/#auth_header
-     *
-     * @param string $method The request method.
-     * @param string $request_url The request URL (without query)
-     * @param array|string $request_args Any additional query/body args.
-     *
-     * @return string An OAuth string ready for the Authorization header.
-     */
-    public function get_oauth_header( $method, $request_url, $request_args = array() ) {
-        $oauth_args = array_merge( $this->_get_default_args(), array(
-            'oauth_token' => $this->oauth_token,
-        ) );
+        return $result;
+    }
 
-        $all_args = $oauth_args;
-        if ( is_array( $request_args ) && ! empty( $request_args ) )
-            $all_args = array_merge( $oauth_args, $request_args );
+    /**
+     * Get a string suitable for the Authorization header.
+     *
+     * @see http://oauth.net/core/1.0a/#auth_header
+     *
+     * @param string       $method The request method.
+     * @param string       $request_url The request URL (without query)
+     * @param array|string $request_args Any additional query/body args.
+     *
+     * @return string An OAuth string ready for the Authorization header.
+     */
+    public function get_oauth_header( $method, $request_url, $request_args = array() ) {
+        $oauth_args = array_merge( $this->_get_default_args(), array(
+            'oauth_token' => $this->oauth_token,
+        ) );
 
-        $oauth_args['oauth_signature'] = $this->_get_signature( $method, $request_url, $all_args );
+        $all_args = $oauth_args;
 
-        $header_parts = array();
-        foreach ( $oauth_args as $key => $value )
-            $header_parts[] = sprintf( '%s="%s"', rawurlencode( $key ), rawurlencode( $value ) );
+        if ( is_array( $request_args ) && ! empty( $request_args ) ) {
+            $all_args = array_merge( $oauth_args, $request_args );
+        }
 
-        $header = 'OAuth ' . implode( ',', $header_parts );
-        return $header;
-    }
+        $oauth_args['oauth_signature'] = $this->_get_signature( $method, $request_url, $all_args );
 
-    /**
-     * Get a default set of OAuth arguments.
-     *
-     * @return array Default OAuth arguments.
-     */
-    private function _get_default_args() {
-        return array(
-            'oauth_nonce' => md5( wp_generate_password( 12 ) ),
-            'oauth_consumer_key' => $this->consumer_key,
-            'oauth_signature_method' => 'HMAC-SHA1',
-            'oauth_timestamp' => time(),
-            'oauth_version' => '1.0',
-        );
-    }
+        $header_parts = array();
 
-    /**
-     * Get an OAuth signature.
-     *
-     * @see http://oauth.net/core/1.0a/#signing_process
-     *
-     * @param string $method The request method, GET, POST, etc.
-     * @param string $url The request URL (without any query)
-     * @param array $args An optional array of query or body args.
-     *
-     * @return string A base64-encoded hmac-sha1 signature.
-     */
-    private function _get_signature( $method, $url, $args ) {
-        ksort( $args );
+        foreach ( $oauth_args as $key => $value ) {
+            $header_parts[] = sprintf( '%s="%s"', rawurlencode( $key ), rawurlencode( $value ) );
+        }
 
-        // Don't sign a signature.
-        unset( $args['oauth_signature'] );
+        $header = 'OAuth ' . implode( ',', $header_parts );
+        return $header;
+    }
 
-        $parameter_string = '';
-        foreach ( $args as $key => $value )
-            $parameter_string .= sprintf( '&%s=%s', rawurlencode( $key ), rawurlencode( $value ) );
+    /**
+     * Get a default set of OAuth arguments.
+     *
+     * @return array Default OAuth arguments.
+     */
+    private function _get_default_args() {
+        return array(
+            'oauth_nonce'            => md5( wp_generate_password( 12 ) ),
+            'oauth_consumer_key'     => $this->consumer_key,
+            'oauth_signature_method' => 'HMAC-SHA1',
+            'oauth_timestamp'        => time(),
+            'oauth_version'          => '1.0',
+        );
+    }
 
-        $parameter_string = trim( $parameter_string, '&' );
-        $signature_base = strtoupper( $method ) . '&' . rawurlencode( $url ) . '&' . rawurlencode( $parameter_string );
-        $signing_key = rawurlencode( $this->consumer_secret ) . '&' . rawurlencode( $this->oauth_token_secret );
+    /**
+     * Get an OAuth signature.
+     *
+     * @see http://oauth.net/core/1.0a/#signing_process
+     *
+     * @param string $method The request method, GET, POST, etc.
+     * @param string $url    The request URL (without any query)
+     * @param array  $args   An optional array of query or body args.
+     *
+     * @return string A base64-encoded hmac-sha1 signature.
+     */
+    private function _get_signature( $method, $url, $args ) {
+        ksort( $args );
 
-        return base64_encode( hash_hmac( 'sha1', $signature_base, $signing_key, true ) );
-    }
+        // Don't sign a signature.
+        unset( $args['oauth_signature'] );
+
+        $parameter_string = '';
+
+        foreach ( $args as $key => $value ) {
+            $parameter_string .= sprintf( '&%s=%s', rawurlencode( $key ), rawurlencode( $value ) );
+        }
+
+        $parameter_string = trim( $parameter_string, '&' );
+        $signature_base   = strtoupper( $method ) . '&' . rawurlencode( $url ) . '&' . rawurlencode( $parameter_string );
+        $signing_key      = rawurlencode( $this->consumer_secret ) . '&' . rawurlencode( $this->oauth_token_secret );
+
+        return base64_encode( hash_hmac( 'sha1', $signature_base, $signing_key, true ) );
+    }
 }

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-qbo/wordcamp-qbo.php

@@ -23 +23 @@
 
     public static function load_options() {
-        if ( isset( self::$options ) )
+        if ( isset( self::$options ) ) {
             return self::$options;
+        }
 
         self::$options = wp_parse_args( get_option( 'wordcamp-qbo', array() ), array(
@@ -50 +51 @@
 
         $init_options = wp_parse_args( apply_filters( 'wordcamp_qbo_options', array() ), array(
-            'app_token' => '',
-            'consumer_key' => '',
+            'app_token'       => '',
+            'consumer_key'    => '',
             'consumer_secret' => '',
-            'hmac_key' => '',
-
-            'categories_map' => array(),
+            'hmac_key'        => '',
+
+            'categories_map'  => array(),
         ) );
 
-        foreach ( $init_options as $key => $value )
+        foreach ( $init_options as $key => $value ) {
             self::$$key = $value;
+        }
 
         // There's no point in doing anything if we don't have the secrets.
-        if ( empty( self::$consumer_key ) )
+        if ( empty( self::$consumer_key ) ) {
             return;
+        }
 
         self::$api_base_url = sprintf(
@@ -87 +90 @@
     public static function rest_api_init() {
         register_rest_route( 'wordcamp-qbo/v1', '/expense', array(
-            'methods' => 'GET, POST',
+            'methods'  => 'GET, POST',
             'callback' => array( __CLASS__, 'rest_callback_expense' ),
         ) );
 
         register_rest_route( 'wordcamp-qbo/v1', '/invoice', array(
-            'methods' => 'GET, POST',
+            'methods'  => 'GET, POST',
             'callback' => array( __CLASS__, 'rest_callback_invoice' ),
         ) );
 
         register_rest_route( 'wordcamp-qbo/v1', '/invoice_pdf', array(
-            'methods' => 'GET',
+            'methods'  => 'GET',
             'callback' => array( __CLASS__, 'rest_callback_invoice_pdf' ),
         ) );
 
         register_rest_route( 'wordcamp-qbo/v1', '/paid_invoices', array(
-            'methods' => 'GET',
+            'methods'  => 'GET',
             'callback' => array( __CLASS__, 'rest_callback_paid_invoices' ),
         ) );
@@ -113 +116 @@
      */
     public static function rest_callback_expense( $request ) {
-        if ( ! self::_is_valid_request( $request ) )
+        if ( ! self::_is_valid_request( $request ) ) {
             return new WP_Error( 'unauthorized', 'Unauthorized', array( 'status' => 401 ) );
+        }
 
         self::load_options();
@@ -121 +125 @@
 
         $amount = floatval( $request->get_param( 'amount' ) );
-        if ( ! $amount )
+        if ( ! $amount ) {
             return new WP_Error( 'error', 'An amount was not given.' );
+        }
 
         $description = $request->get_param( 'description' );
-        if ( empty( $description ) )
+        if ( empty( $description ) ) {
             return new WP_Error( 'error', 'The expense description can not be empty.' );
+        }
 
         $category = $request->get_param( 'category' );
-        if ( empty( $category ) || ! array_key_exists( $category, self::$categories_map ) )
+        if ( empty( $category ) || ! array_key_exists( $category, self::$categories_map ) ) {
             return new WP_Error( 'error', 'The category you have picked is invalid.' );
+        }
 
         $date = $request->get_param( 'date' );
-        if ( empty( $date ) )
+        if ( empty( $date ) ) {
             return new WP_Error( 'error', 'The expense date can not be empty.' );
+        }
 
         $date = absint( $date );
 
         $class = $request->get_param( 'class' );
-        if ( empty( $class ) )
+        if ( empty( $class ) ) {
             return new WP_Error( 'error', 'You need to set a class.' );
+        }
 
         $classes = self::_get_classes();
-        if ( ! array_key_exists( $class, $classes ) )
+        if ( ! array_key_exists( $class, $classes ) ) {
             return new WP_Error( 'error', 'Unknown class.' );
+        }
 
         $class = array(
             'value' => $class,
-            'name' => $classes[ $class ],
+            'name'  => $classes[ $class ],
         );
 
         $payload = array(
-            'AccountRef' => self::$account,
-            'TxnDate' => gmdate( 'Y-m-d', $date ),
+            'AccountRef'  => self::$account,
+            'TxnDate'     => gmdate( 'Y-m-d', $date ),
             'PaymentType' => 'Cash',
-            'Line' => array(
+            'Line'        => array(
                 array(
-                    'Id' => 1,
-                    'Description' => $description,
-                    'Amount' => $amount,
-                    'DetailType' => 'AccountBasedExpenseLineDetail',
+                    'Id'                            => 1,
+                    'Description'                   => $description,
+                    'Amount'                        => $amount,
+                    'DetailType'                    => 'AccountBasedExpenseLineDetail',
                     'AccountBasedExpenseLineDetail' => array(
-                        'ClassRef' => $class,
+                        'ClassRef'   => $class,
                         'AccountRef' => self::$categories_map[ $category ],
                     ),
@@ -176 +186 @@
 
             $oauth_header = $oauth->get_oauth_header( 'GET', $request_url );
-            $response = wp_remote_get( $request_url, array(
+            $response     = wp_remote_get( $request_url, array(
                 'timeout' => self::REMOTE_REQUEST_TIMEOUT,
                 'headers' => array(
                     'Authorization' => $oauth_header,
-                    'Accept' => 'application/json',
+                    'Accept'        => 'application/json',
                 ),
             ) );
             Logger\log( 'remote_request_sync_token', compact( 'response' ) );
 
-            if ( is_wp_error( $response ) || wp_remote_retrieve_response_code( $response ) != 200 )
+            if ( is_wp_error( $response ) || wp_remote_retrieve_response_code( $response ) != 200 ) {
                 return new WP_Error( 'error', 'Could not find purchase to update.' );
+            }
 
             $body = json_decode( wp_remote_retrieve_body( $response ), true );
-            if ( ! isset( $body['Purchase']['SyncToken'] ) )
+            if ( ! isset( $body['Purchase']['SyncToken'] ) ) {
                 return new WP_Error( 'error', 'Could not decode purchase for update.' );
+            }
 
             $payload['SyncToken'] = $body['Purchase']['SyncToken'];
@@ -196 +208 @@
         }
 
-        $payload = json_encode( $payload );
+        $payload     = json_encode( $payload );
         $request_url = esc_url_raw( sprintf( '%s/v3/company/%d/purchase',
             self::$api_base_url, self::$options['auth']['realmId'] ) );
 
         $oauth_header = $oauth->get_oauth_header( 'POST', $request_url, $payload );
-        $response = wp_remote_post( $request_url, array(
+        $response     = wp_remote_post( $request_url, array(
             'timeout' => self::REMOTE_REQUEST_TIMEOUT,
             'headers' => array(
                 'Authorization' => $oauth_header,
-                'Accept' => 'application/json',
-                'Content-Type' => 'application/json',
-            ),
-            'body' => $payload,
+                'Accept'        => 'application/json',
+                'Content-Type'  => 'application/json',
+            ),
+            'body'    => $payload,
         ) );
         Logger\log( 'remote_request_create_expense', compact( 'payload', 'response' ) );
 
-        if ( is_wp_error( $response ) || wp_remote_retrieve_response_code( $response ) != 200 )
+        if ( is_wp_error( $response ) || wp_remote_retrieve_response_code( $response ) != 200 ) {
             return new WP_Error( 'error', 'Could not create purchase.' );
+        }
 
         $body = json_decode( wp_remote_retrieve_body( $response ), true );
-        if ( empty( $body ) )
+        if ( empty( $body ) ) {
             return new WP_Error( 'error', 'Could not decode create purchase result.' );
+        }
 
         return array(
@@ -248 +262 @@
 
         $args = array(
-            'query' => 'SELECT * FROM Class MAXRESULTS 1000',
+            'query'        => 'SELECT * FROM Class MAXRESULTS 1000',
             'minorversion' => 4,
         );
@@ -256 +270 @@
 
         $oauth_header = $oauth->get_oauth_header( 'GET', $request_url, $args );
-        $response = wp_remote_get(
+        $response     = wp_remote_get(
             esc_url_raw( add_query_arg( $args, $request_url ) ),
             array(
@@ -262 +276 @@
                 'headers' => array(
                     'Authorization' => $oauth_header,
-                    'Accept' => 'application/json',
-                )
+                    'Accept'        => 'application/json',
+                ),
             )
         );
@@ -475 +489 @@
          */
         $description_limit = abs( 995 - strlen( $payment_instructions ) );
-        $customer_memo = sprintf(
+        $customer_memo     = sprintf(
             "%s\n\n%s",
             substr( $description, 0, $description_limit ),
@@ -502 +516 @@
             'Line' => array(
                 array(
-                    'Amount'      => $amount,
-                    'Description' => $line_description,
-                    'DetailType'  => 'SalesItemLineDetail',
+                    'Amount'              => $amount,
+                    'Description'         => $line_description,
+                    'DetailType'          => 'SalesItemLineDetail',
 
                     'SalesItemLineDetail' => array(
-                        'ItemRef' => array(
+                        'ItemRef'   => array(
                             'value' => '20', // Sponsorship
                         ),
 
-                        'ClassRef' => array(
+                        'ClassRef'  => array(
                             'value' => $class_id,
                         ),
@@ -517 +531 @@
                         'UnitPrice' => $amount,
                         'Qty'       => 1,
-                    )
-                )
-            ),
-
-            'CustomerRef' => array(
+                    ),
+                ),
+            ),
+
+            'CustomerRef'  => array(
                 'value' => $customer_id,
             ),
@@ -533 +547 @@
             ),
 
-            'BillEmail' => array(
+            'BillEmail'    => array(
                 'Address' => $customer_email,
             ),
@@ -566 +580 @@
                 'Content-Type'  => 'application/json',
             ),
-            'body' => $payload,
+            'body'    => $payload,
         );
 
         return array(
             'url'  => $request_url,
-            'args' => $args
+            'args' => $args,
         );
     }
@@ -630 +644 @@
                 'Content-Type'  => 'application/octet-stream',
             ),
-            'body' => '',
+            'body'    => '',
         );
 
@@ -717 +731 @@
                 'Content-Type'  => 'application/pdf',
             ),
-            'body' => '',
+            'body'    => '',
         );
 
@@ -946 +960 @@
 
             'CurrencyRef' => array(
-                'value' => $currency_code
-            ),
-
-            'PreferredDeliveryMethod' =>'Email',
-
-            'GivenName'        => $sponsor['first-name'],
-            'FamilyName'       => $sponsor['last-name'],
-            'CompanyName'      => $sponsor['company-name'],
-            'DisplayName'      => sprintf( '%s - %s', $sponsor['company-name'], $currency_code ),
-            'PrintOnCheckName' => $sponsor['company-name'],
-
-            'PrimaryPhone' => array(
+                'value' => $currency_code,
+            ),
+
+            'PreferredDeliveryMethod' => 'Email',
+
+            'GivenName'               => $sponsor['first-name'],
+            'FamilyName'              => $sponsor['last-name'],
+            'CompanyName'             => $sponsor['company-name'],
+            'DisplayName'             => sprintf( '%s - %s', $sponsor['company-name'], $currency_code ),
+            'PrintOnCheckName'        => $sponsor['company-name'],
+
+            'PrimaryPhone'            => array(
                 'FreeFormNumber' => $sponsor['phone-number'],
             ),
 
-            'PrimaryEmailAddr' => array(
+            'PrimaryEmailAddr'        => array(
                 'Address' => $sponsor['email-address'],
             ),
@@ -985 +999 @@
                 'Content-Type'  => 'application/json',
             ),
-            'body' => $payload,
+            'body'    => $payload,
         );
 
@@ -1102 +1116 @@
      */
     private static function _is_valid_request( $request ) {
-        if ( ! $request->get_header( 'authorization' ) )
+        if ( ! $request->get_header( 'authorization' ) ) {
             return false;
-
-        if ( ! preg_match( '#^wordcamp-qbo-hmac (.+)$#', $request->get_header( 'authorization' ), $matches ) )
+        }
+
+        if ( ! preg_match( '#^wordcamp-qbo-hmac (.+)$#', $request->get_header( 'authorization' ), $matches ) ) {
             return false;
-
-        $given_hmac = $matches[1];
+        }
+
+        $given_hmac  = $matches[1];
         $request_url = esc_url_raw( home_url( parse_url( home_url( $_SERVER['REQUEST_URI'] ), PHP_URL_PATH ) ) );
-        $payload = json_encode( array( strtolower( $request->get_method() ), strtolower( $request_url ),
-            $request->get_body(), $request->get_query_params() ) );
+        $payload     = json_encode( array(
+            strtolower( $request->get_method() ),
+            strtolower( $request_url ),
+            $request->get_body(),
+            $request->get_query_params(),
+        ) );
 
         return hash_equals( hash_hmac( 'sha256', $payload, self::$hmac_key ), $given_hmac );
@@ -1128 +1148 @@
      */
     public static function maybe_oauth_request() {
-        if ( empty( $_GET['wordcamp-qbo-oauth-request'] ) )
+        if ( empty( $_GET['wordcamp-qbo-oauth-request'] ) ) {
             return;
-
-        if ( empty( $_GET['wordcamp-qbo-oauth-nonce'] ) || ! wp_verify_nonce( $_GET['wordcamp-qbo-oauth-nonce'], 'oauth-request' ) )
+        }
+
+        if ( empty( $_GET['wordcamp-qbo-oauth-nonce'] ) || ! wp_verify_nonce( $_GET['wordcamp-qbo-oauth-nonce'], 'oauth-request' ) ) {
             wp_die( 'Could not verify nonce.' );
+        }
 
         self::load_options();
@@ -1140 +1162 @@
 
             // We don't have an access token yet.
-            $request_url = 'https://oauth.intuit.com/oauth/v1/get_request_token';
+            $request_url  = 'https://oauth.intuit.com/oauth/v1/get_request_token';
             $callback_url = esc_url_raw( add_query_arg( array(
                 'wordcamp-qbo-oauth-request' => 1,
-                'wordcamp-qbo-oauth-nonce' => wp_create_nonce( 'oauth-request' ),
+                'wordcamp-qbo-oauth-nonce'   => wp_create_nonce( 'oauth-request' ),
             ), admin_url() ) );
 
             $request_token = $oauth->get_request_token( $request_url, $callback_url );
-            if ( is_wp_error( $request_token ) )
+            if ( is_wp_error( $request_token ) ) {
                 wp_die( $request_token->get_error_message() );
+            }
 
             update_user_meta( get_current_user_id(), 'wordcamp-qbo-oauth', $request_token );
@@ -1161 +1184 @@
             $request_token = get_user_meta( get_current_user_id(), 'wordcamp-qbo-oauth', true );
 
-            if ( $request_token['oauth_token'] != $_GET['oauth_token'] )
+            if ( $request_token['oauth_token'] != $_GET['oauth_token'] ) {
                 wp_die( 'Could not verify OAuth token.' );
-
-            if ( empty( $_GET['oauth_verifier'] ) )
+            }
+
+            if ( empty( $_GET['oauth_verifier'] ) ) {
                 wp_die( 'Could not obtain OAuth verifier.' );
+            }
 
             $oauth->set_token( $request_token['oauth_token'], $request_token['oauth_token_secret'] );
@@ -1172 +1197 @@
             $access_token = $oauth->get_access_token( $request_url, $_GET['oauth_verifier'] );
 
-            if ( is_wp_error( $access_token ) )
+            if ( is_wp_error( $access_token ) ) {
                 wp_die( 'Could not obtain an access token.' );
+            }
 
             // We have an access token.
             $data = array(
-                'oauth_token' => $access_token['oauth_token'],
+                'oauth_token'        => $access_token['oauth_token'],
                 'oauth_token_secret' => $access_token['oauth_token_secret'],
-                'realmId' => $_GET['realmId'],
+                'realmId'            => $_GET['realmId'],
             );
 
@@ -1185 +1211 @@
 
             $oauth->set_token( self::$options['auth']['oauth_token'], self::$options['auth']['oauth_token_secret'] );
-            $request_url = sprintf( '%s/v3/company/%d/companyinfo/%d',
-                self::$api_base_url, self::$options['auth']['realmId'], self::$options['auth']['realmId'] );
+
+            $request_url = sprintf(
+                '%s/v3/company/%d/companyinfo/%d',
+                self::$api_base_url,
+                self::$options['auth']['realmId'],
+                self::$options['auth']['realmId']
+            );
 
             $oauth_header = $oauth->get_oauth_header( 'GET', $request_url );
-            $response = wp_remote_get( $request_url, array(
+            $response     = wp_remote_get( $request_url, array(
                 'timeout' => self::REMOTE_REQUEST_TIMEOUT,
                 'headers' => array(
                     'Authorization' => $oauth_header,
-                    'Accept' => 'application/json',
-                )
+                    'Accept'        => 'application/json',
+                ),
             ) );
             Logger\log( 'remote_request', compact( 'response' ) );
@@ -1208 +1239 @@
             $company_name = $body['CompanyInfo']['CompanyName'];
 
-            self::$options['auth']['name'] = $company_name;
+            self::$options['auth']['name']      = $company_name;
             self::$options['auth']['timestamp'] = time();
             self::update_options();