From 71d30ff95faa90cff9ef8c969bdf1f345e27a67e Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Tue, 30 Sep 2025 12:14:24 -0400
Subject: [PATCH] Enforce Payment Provider Max Threshold for Stripe Paymented
 in Guest Invoice and Unpaid Invoices

---
 client/unpaid_invoices.php      | 6 +++++-
 guest/guest_view_invoice.php    | 2 +-
 guest/includes/guest_footer.php | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/client/unpaid_invoices.php b/client/unpaid_invoices.php
index 9276600b..9bca00aa 100644
--- a/client/unpaid_invoices.php
+++ b/client/unpaid_invoices.php
@@ -22,7 +22,9 @@ $invoices_sql = mysqli_query($mysqli, "SELECT * FROM invoices WHERE invoice_clie
 // Payment Provider Active Query
 $sql_payment_provider = mysqli_query($mysqli, "SELECT * FROM payment_providers WHERE payment_provider_active = 1 LIMIT 1;");
 $row = mysqli_fetch_array($sql_payment_provider);
+$payment_provider_id = intval($row['payment_provider_id']);
 $payment_provider_active = intval($row['payment_provider_active']);
+$payment_provider_threshold = floatval($row['payment_provider_threshold']);
 
 // Saved Payment Methods
 $sql_saved_payment_methods = mysqli_query($mysqli, "
@@ -140,7 +142,9 @@ $balance = $invoice_amounts - $amount_paid;
                     <td><?php echo $invoice_date; ?></td>
                     <td class="<?php echo $overdue_color; ?>"><?php echo $invoice_due; ?></td>
                     <td>
-                        <?php if ($payment_provider_active && ($invoice_status === 'Sent' || $invoice_status === 'Viewed')) { ?>
+                        <?php 
+                        if ($invoice_status !== "Paid" && $invoice_status  !== "Cancelled" && $invoice_status !== "Draft" && $payment_provider_id && $payment_provider_threshold > $invoice_amount) {
+                        ?>
                         <button type="button" class="btn btn-sm btn-outline-success dropdown-toggle" data-toggle="dropdown"><i class="fa fa-fw fa-credit-card mr-2"></i>Pay</button>
                         <div class="dropdown-menu">
                             <a class="dropdown-item" href="//<?php echo $config_base_url ?>/guest/guest_pay_invoice_stripe.php?invoice_id=<?php echo "$invoice_id&url_key=$invoice_url_key"; ?>">Enter Card Manually</a>
diff --git a/guest/guest_view_invoice.php b/guest/guest_view_invoice.php
index ddc8ae10..13003f69 100644
--- a/guest/guest_view_invoice.php
+++ b/guest/guest_view_invoice.php
@@ -173,7 +173,7 @@ if ($balance > 0) {
                         <i class="fa fa-fw fa-download mr-2"></i>Download
                     </a>
                     <?php
-                    if ($invoice_status !== "Paid" && $invoice_status  !== "Cancelled" && $invoice_status !== "Draft" && $payment_provider_id) { ?>
+                    if ($invoice_status !== "Paid" && $invoice_status  !== "Cancelled" && $invoice_status !== "Draft" && $payment_provider_id && $payment_provider_threshold > $invoice_amount) { ?>
                         <a class="btn btn-success" href="guest_pay_invoice_stripe.php?invoice_id=<?php echo $invoice_id; ?>&url_key=<?php echo $url_key; ?>"><i class="fa fa-fw fa-credit-card mr-2"></i>Pay Now </a>
                     <?php } ?>
                 </div>
diff --git a/guest/includes/guest_footer.php b/guest/includes/guest_footer.php
index 192aaae0..8421428e 100644
--- a/guest/includes/guest_footer.php
+++ b/guest/includes/guest_footer.php
@@ -7,7 +7,7 @@
   <!-- ./wrapper -->
 
   <!-- REQUIRED SCRIPTS -->
-  <?php require_once "/includes/inc_confirm_modal.php"; ?>
+  <?php require_once "../includes/inc_confirm_modal.php"; ?>
 
   <!-- jQuery -->
   <script src="/plugins/jquery/jquery.min.js"></script>