PageRenderTime 59ms CodeModel.GetById 20ms RepoModel.GetById 0ms app.codeStats 1ms

/includes/modules/payment/paypalwpp.php

https://github.com/happyxlq/lt_svn
PHP | 2970 lines | 2068 code | 275 blank | 627 comment | 718 complexity | 9f0912611febbb9394825e30cebc86de MD5 | raw file
Possible License(s): AGPL-1.0, BSD-3-Clause, LGPL-2.1

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * paypalwpp.php payment module class for Paypal Express Checkout / Website Payments Pro / Payflow Pro payment methods
    4. 

  4.  *
    5. 

  5.  * @package paymentMethod
    6. 

  6.  * @copyright Copyright 2003-2007 Zen Cart Development Team
    7. 

  7.  * @copyright Portions Copyright 2003 osCommerce
    8. 

  8.  * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
    9. 

  9.  * @version $Id: paypalwpp.php 7620 2007-12-11 19:12:46Z drbyte $
    10. 

  10.  */
    11. 

  11. 

  12. /**
    13. 

  13.  * load the communications layer code
    14. 

  14.  */
    15. 

  15. require_once(DIR_FS_CATALOG . DIR_WS_MODULES . 'payment/paypal/paypal_curl.php');
    16. 

  16. /**
    17. 

  17.  * the PayPal payment module with Express Checkout
    18. 

  18.  *
    19. 

  19.  * currently supports US-NVP
    20. 

  20.  *
    21. 

  21.  */
    22. 

  22. class paypalwpp extends base {
    23. 

  23.   /**
    24. 

  24.    * name of this module
    25. 

  25.    *
    26. 

  26.    * @var string
    27. 

  27.    */
    28. 

  28.   var $code;
    29. 

  29.   /**
    30. 

  30.    * displayed module title
    31. 

  31.    *
    32. 

  32.    * @var string
    33. 

  33.    */
    34. 

  34.   var $title;
    35. 

  35.   /**
    36. 

  36.    * displayed module description
    37. 

  37.    *
    38. 

  38.    * @var string
    39. 

  39.    */
    40. 

  40.   var $description;
    41. 

  41.   /**
    42. 

  42.    * module status - set based on various config and zone criteria
    43. 

  43.    *
    44. 

  44.    * @var string
    45. 

  45.    */
    46. 

  46.   var $enabled;
    47. 

  47.   /**
    48. 

  48.    * the zone to which this module is restricted for use
    49. 

  49.    *
    50. 

  50.    * @var string
    51. 

  51.    */
    52. 

  52.   var $zone;
    53. 

  53.   /**
    54. 

  54.    * array holding accepted DP/gateway card types
    55. 

  55.    *
    56. 

  56.    * @var array
    57. 

  57.    */
    58. 

  58.   var $cards = array();
    59. 

  59.   /**
    60. 

  60.    * JS code used for gateway/DP mode
    61. 

  61.    *
    62. 

  62.    * @var string
    63. 

  63.    */
    64. 

  64.   var $cc_type_javascript = '';
    65. 

  65.   /**
    66. 

  66.    * JS code used for gateway/DP mode
    67. 

  67.    *
    68. 

  68.    * @var string
    69. 

  69.    */
    70. 

  70.   var $cc_type_check = '';
    71. 

  71.   /**
    72. 

  72.    * debugging flag
    73. 

  73.    *
    74. 

  74.    * @var boolean
    75. 

  75.    */
    76. 

  76.   var $enableDebugging = false;
    77. 

  77.   /**
    78. 

  78.    * is DP enabled ?
    79. 

  79.    *
    80. 

  80.    * @var boolean
    81. 

  81.    */
    82. 

  82.   var $enableDirectPayment = false;
    83. 

  83.   /**
    84. 

  84.    * Determines whether payment page is displayed or not
    85. 

  85.    *
    86. 

  86.    * @var boolean
    87. 

  87.    */
    88. 

  88.   var $showPaymentPage = false;
    89. 

  89.   var $flagDisablePaymentAddressChange = false;
    90. 

  90.   /**
    91. 

  91.    * sort order of display
    92. 

  92.    *
    93. 

  93.    * @var int
    94. 

  94.    */
    95. 

  95.   var $sort_order = 0;
    96. 

  96.   /**
    97. 

  97.    * Button Source / BN code -- enables the module to work for Zen Cart
    98. 

  98.    *
    99. 

  99.    * @var string
    100. 

  100.    */
    101. 

  101.   var $buttonSourceEC = 'ZenCart-EC_us';
    102. 

  102.   /**
    103. 

  103.    * order status setting for pending orders
    104. 

  104.    *
    105. 

  105.    * @var int
    106. 

  106.    */
    107. 

  107.   var $order_pending_status = 1;
    108. 

  108.   /**
    109. 

  109.    * order status setting for completed orders
    110. 

  110.    *
    111. 

  111.    * @var int
    112. 

  112.    */
    113. 

  113.   var $order_status = DEFAULT_ORDERS_STATUS_ID;
    114. 

  114.   /**
    115. 

  115.    * Debug tools
    116. 

  116.    */
    117. 

  117.   var $_logDir = 'includes/modules/payment/paypal/logs/';
    118. 

  118.   var $_logLevel = 0;
    119. 

  119.   /**
    120. 

  120.    * class constructor
    121. 

  121.    */
    122. 

  122.   function paypalwpp() {
    123. 

  123.     include_once(zen_get_file_directory(DIR_FS_CATALOG . DIR_WS_LANGUAGES . $_SESSION['language'] . '/modules/payment/', 'paypalwpp.php', 'false'));
    124. 

  124.     global $order;
    125. 

  125.     $this->code = 'paypalwpp';
    126. 

  126.     $this->codeTitle = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_EC;
    127. 

  127.     $this->codeVersion = '1.3.8a';
    128. 

  128.     $this->enableDirectPayment = (MODULE_PAYMENT_PAYPALWPP_DIRECT_ENABLED == 'True');
    129. 

  129.     $this->enabled = (MODULE_PAYMENT_PAYPALWPP_STATUS == 'True');
    130. 

  130.     // Set the title & description text based on the mode we're in ... EC vs DP vs admin
    131. 

  131.     if (IS_ADMIN_FLAG === true) {
    132. 

  132.       $this->description = sprintf(MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_DESCRIPTION, ' (rev' . $this->codeVersion . ')');
    133. 

  133.       switch (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE) {
    134. 

  134.         case ('PayPal'):
    135. 

  135.           if (MODULE_PAYMENT_PAYPALWPP_DIRECT_ENABLED == 'True') {
    136. 

  136.             $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_WPP;
    137. 

  137.           } else {
    138. 

  138.             $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_EC;
    139. 

  139.           }
    140. 

  140.         break;
    141. 

  141.         case ('Payflow-UK'):
    142. 

  142.           $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_PRO20;
    143. 

  143.         break;
    144. 

  144.         case ('Payflow-US'):
    145. 

  145.           if (defined('MODULE_PAYMENT_PAYPALWPP_PAYFLOW_EC') && MODULE_PAYMENT_PAYPALWPP_PAYFLOW_EC == 'Yes') {
    146. 

  146.             $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_PF_EC;
    147. 

  147.           } else {
    148. 

  148.             $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_PF_GATEWAY;
    149. 

  149.           }
    150. 

  150.         break;
    151. 

  151.         default:
    152. 

  152.           $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_EC;
    153. 

  153.       }
    154. 

  154.       if ($this->enabled) {
    155. 

  155.         if ( (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'PayPal' && (MODULE_PAYMENT_PAYPALWPP_APISIGNATURE == '' || MODULE_PAYMENT_PAYPALWPP_APIUSERNAME == '' || MODULE_PAYMENT_PAYPALWPP_APIPASSWORD == ''))
    156. 

  156.           || (substr(MODULE_PAYMENT_PAYPALWPP_MODULE_MODE,0,7) == 'Payflow' && (MODULE_PAYMENT_PAYPALWPP_PFPARTNER == '' || MODULE_PAYMENT_PAYPALWPP_PFVENDOR == '' || MODULE_PAYMENT_PAYPALWPP_PFUSER == '' || MODULE_PAYMENT_PAYPALWPP_PFPASSWORD == ''))
    157. 

  157.           ) $this->title .= '<span class="alert"><strong> NOT CONFIGURED YET</strong></span>';
    158. 

  158.         if (MODULE_PAYMENT_PAYPALWPP_SERVER =='sandbox') $this->title .= '<strong><span class="alert"> (sandbox active)</span></strong>';
    159. 

  159.         if (MODULE_PAYMENT_PAYPALWPP_DEBUGGING =='Log File' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING =='Log and Email') $this->title .= '<strong> (Debug)</strong>';
    160. 

  160.         if (!function_exists('curl_init')) $this->title .= '<strong><span class="alert"> CURL NOT FOUND. Cannot Use.</span></strong>';
    161. 

  161.       }
    162. 

  162.     } else {
    163. 

  163.       $this->description = MODULE_PAYMENT_PAYPALWPP_TEXT_DESCRIPTION;
    164. 

  164.       $this->title = MODULE_PAYMENT_PAYPALWPP_EC_TEXT_TITLE; //pp
    165. 

  165.       if (!$this->in_special_checkout() && $this->enableDirectPayment == true) {
    166. 

  166.         $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_TITLE; //cc
    167. 

  167.       }
    168. 

  168.     }
    169. 

  169. 

  170.     if ((!defined('PAYPAL_OVERRIDE_CURL_WARNING') || (defined('PAYPAL_OVERRIDE_CURL_WARNING') && PAYPAL_OVERRIDE_CURL_WARNING != 'True')) && !function_exists('curl_init')) $this->enabled = false;
    171. 

  171. 

  172.     $this->enableDebugging = (MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log File' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING =='Log and Email');
    173. 

  173.     $this->emailAlerts = (MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log File' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING =='Log and Email' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Alerts Only');
    174. 

  174.     $this->doDPonly = (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE =='Payflow-US' && !(defined('MODULE_PAYMENT_PAYPALWPP_PAYFLOW_EC') && MODULE_PAYMENT_PAYPALWPP_PAYFLOW_EC == 'Yes'));
    175. 

  175.     $this->showPaymentPage = (MODULE_PAYMENT_PAYPALWPP_SKIP_PAYMENT_PAGE == 'No') ? true : false;
    176. 

  176.     $this->sort_order = MODULE_PAYMENT_PAYPALWPP_SORT_ORDER;
    177. 

  177. 

  178.     $this->buttonSourceEC = 'ZenCart-EC_us';
    179. 

  179.     $this->buttonSourceDP = 'ZenCart-DP_us';
    180. 

  180.     if (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'Payflow-UK') {
    181. 

  181.       $this->buttonSourceEC = 'ZenCart-EC_uk';
    182. 

  182.       $this->buttonSourceDP = 'ZenCart-DP_uk';
    183. 

  183.     }
    184. 

  184.     if (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'Payflow-US') {
    185. 

  185.       $this->buttonSourceEC = 'ZenCart-ECGW_us';
    186. 

  186.       $this->buttonSourceDP = 'ZenCart-GW_us';
    187. 

  187.     }
    188. 

  188. 

  189.     $this->order_pending_status = MODULE_PAYMENT_PAYPALWPP_ORDER_PENDING_STATUS_ID;
    190. 

  190.     if ((int)MODULE_PAYMENT_PAYPALWPP_ORDER_STATUS_ID > 0) {
    191. 

  191.       $this->order_status = MODULE_PAYMENT_PAYPALWPP_ORDER_STATUS_ID;
    192. 

  192.     }
    193. 

  193.     $this->new_acct_notify = MODULE_PAYMENT_PAYPALWPP_NEW_ACCT_NOTIFY;
    194. 

  194.     $this->zone = (int)MODULE_PAYMENT_PAYPALWPP_ZONE;
    195. 

  195.     if (is_object($order)) $this->update_status();
    196. 

  196. 

  197.     if (PROJECT_VERSION_MAJOR != '1' && substr(PROJECT_VERSION_MINOR, 0, 3) != '3.8') $this->enabled = false;
    198. 

  198. 

  199.     // offer credit card choices for pull-down menu -- only needed for UK version
    200. 

  200.     $this->cards = array();
    201. 

  201.     if (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'Payflow-UK') {
    202. 

  202.       if (CC_ENABLED_VISA=='1')    $this->cards[] = array('id' => 'Visa', 'text' => 'Visa');
    203. 

  203.       if (CC_ENABLED_MC=='1')      $this->cards[] = array('id' => 'MasterCard', 'text' => 'MasterCard');
    204. 

  204.       if (CC_ENABLED_MAESTRO=='1') $this->cards[] = array('id' => 'Maestro', 'text' => 'Maestro');
    205. 

  205.       if (CC_ENABLED_SWITCH=='1')  $this->cards[] = array('id' => 'Switch', 'text' => 'Switch');
    206. 

  206.       if (CC_ENABLED_SOLO=='1')    $this->cards[] = array('id' => 'Solo', 'text' => 'Solo');
    207. 

  207.     }
    208. 

  208.     // if operating in markflow mode, start EC process when submitting order
    209. 

  209.     if (!$this->in_special_checkout() && $this->enableDirectPayment == false) {
    210. 

  210.       $this->form_action_url = zen_href_link('ipn_main_handler.php', 'type=ec&markflow=1&clearSess=1&stage=final', 'SSL', true, true, true);
    211. 

  211.     }
    212. 

  212. 

  213.     // debug setup
    214. 

  214.     if (!@is_writable($this->_logDir)) $this->_logDir = DIR_FS_CATALOG . $this->_logDir;
    215. 

  215.     if (!@is_writable($this->_logDir)) $this->_logDir = DIR_FS_SQL_CACHE;
    216. 

  216.     // Regular mode:
    217. 

  217.     if ($this->enableDebugging) $this->_logLevel = PEAR_LOG_INFO;
    218. 

  218.     // DEV MODE:
    219. 

  219.     if (defined('PAYPAL_DEV_MODE') && PAYPAL_DEV_MODE == 'true') $this->_logLevel = PEAR_LOG_DEBUG;
    220. 

  220. 

  221.     if (IS_ADMIN_FLAG === true) $this->tableCheckup();
    222. 

  222. 

  223.   }
    224. 

  224.   /**
    225. 

  225.    *  Sets payment module status based on zone restrictions etc
    226. 

  226.    */
    227. 

  227.   function update_status() {
    228. 

  228.     global $order, $db;
    229. 

  229.     if ($this->enabled && (int)$this->zone > 0) {
    230. 

  230.       $check_flag = false;
    231. 

  231.       $sql = "SELECT zone_id
    232. 

  232.               FROM " . TABLE_ZONES_TO_GEO_ZONES . "
    233. 

  233.               WHERE geo_zone_id = :zoneId
    234. 

  234.               AND zone_country_id = :countryId
    235. 

  235.               ORDER BY zone_id";
    236. 

  236.       $sql = $db->bindVars($sql, ':zoneId', $this->zone, 'integer');
    237. 

  237.       $sql = $db->bindVars($sql, ':countryId', $order->billing['country']['id'], 'integer');
    238. 

  238.       $check = $db->Execute($sql);
    239. 

  239.       while (!$check->EOF) {
    240. 

  240.         if ($check->fields['zone_id'] < 1) {
    241. 

  241.           $check_flag = true;
    242. 

  242.           break;
    243. 

  243.         } elseif ($check->fields['zone_id'] == $order->billing['zone_id']) {
    244. 

  244.           $check_flag = true;
    245. 

  245.           break;
    246. 

  246.         }
    247. 

  247.         $check->MoveNext();
    248. 

  248.       }
    249. 

  249. 

  250.       if (!$check_flag) {
    251. 

  251.         $this->enabled = false;
    252. 

  252.       }
    253. 

  253. 

  254.       // module cannot be used for purchase > $10,000 USD
    255. 

  255.       $order_amount = $this->calc_order_amount($order->info['total'], 'USD');
    256. 

  256.       if ($order_amount > 10000) $this->enabled = false;
    257. 

  257.     }
    258. 

  258.   }
    259. 

  259.   /**
    260. 

  260.    *  Validate the credit card information via javascript (Number, Owner, and CVV Lengths)
    261. 

  261.    */
    262. 

  262.   function javascript_validation() {
    263. 

  263.     if ($this->in_special_checkout() || $this->enableDirectPayment == false) {
    264. 

  264.       // if we are in express-checkout flow or if DirectPayment is disabled (ie: just mark flow) then no JS validation req'd
    265. 

  265.       return false;
    266. 

  266.     }
    267. 

  267. 

  268.     return '  if (payment_value == "' . $this->code . '") {' . "\n" .
    269. 

  269.            '    var cc_firstname = document.checkout_payment.paypalec_cc_firstname.value;' . "\n" .
    270. 

  270.            '    var cc_lastname = document.checkout_payment.paypalec_cc_lastname.value;' . "\n" .
    271. 

  271.            '    var cc_number = document.checkout_payment.paypalec_cc_number.value;' . "\n" .
    272. 

  272.            '    var cc_checkcode = document.checkout_payment.paypalwpp_cc_checkcode.value;' . "\n" .
    273. 

  273.            '    if (cc_firstname == "" || cc_lastname == "" || eval(cc_firstname.length) + eval(cc_lastname.length) < ' . CC_OWNER_MIN_LENGTH . ') {' . "\n" .
    274. 

  274.            '      error_message = error_message + "' . MODULE_PAYMENT_PAYPALWPP_TEXT_JS_CC_OWNER . '";' . "\n" .
    275. 

  275.            '      error = 1;' . "\n" .
    276. 

  276.            '    }' . "\n" .
    277. 

  277.            '    if (cc_number == "" || cc_number.length < ' . CC_NUMBER_MIN_LENGTH . ') {' . "\n" .
    278. 

  278.            '      error_message = error_message + "' . MODULE_PAYMENT_PAYPALWPP_TEXT_JS_CC_NUMBER . '";' . "\n" .
    279. 

  279.            '      error = 1;' . "\n" .
    280. 

  280.            '    }' . "\n" .
    281. 

  281.            '  }' . "\n";
    282. 

  282.   }
    283. 

  283.   /**
    284. 

  284.    * Display Credit Card Information Submission Fields on the Checkout Payment Page
    285. 

  285.    */
    286. 

  286.   function selection() {
    287. 

  287.     global $order;
    288. 

  288.     $this->cc_type_check =
    289. 

  289.             'var value = document.checkout_payment.paypalec_cc_type.value;' .
    290. 

  290.             'if (value == "Switch" || value == "Solo") {' .
    291. 

  291.             '    document.checkout_payment.paypalec_cc_issue_month.disabled = false;' .
    292. 

  292.             '    document.checkout_payment.paypalec_cc_issue_year.disabled = false;' .
    293. 

  293.             '    document.checkout_payment.paypalec_cc_checkcode.disabled = true;' .
    294. 

  294.             '    if (document.checkout_payment.paypalec_cc_issuenumber) document.checkout_payment.paypalec_cc_issuenumber.disabled = true;' .
    295. 

  295.             '} else if (value == "Maestro") {' .
    296. 

  296.             '    document.checkout_payment.paypalec_cc_issuenumber.disabled = false;' .
    297. 

  297.             '    if (document.checkout_payment.paypalec_cc_issue_month) document.checkout_payment.paypalec_cc_issue_month.disabled = true;' .
    298. 

  298.             '    if (document.checkout_payment.paypalec_cc_issue_year) document.checkout_payment.paypalec_cc_issue_year.disabled = true;' .
    299. 

  299.             '    document.checkout_payment.paypalec_cc_checkcode.disabled = false;' .
    300. 

  300.             '} else {' .
    301. 

  301.             '    if (document.checkout_payment.paypalec_cc_issuenumber) document.checkout_payment.paypalec_cc_issuenumber.disabled = true;' .
    302. 

  302.             '    document.checkout_payment.paypalec_cc_checkcode.disabled = false;' .
    303. 

  303.             '}';
    304. 

  304.     if (sizeof($this->cards) == 0 || $this->enableDirectPayment == false) $this->cc_type_check = '';
    305. 

  305. 

  306.     /**
    307. 

  307.      * if we are NOT processing via the gateway, we will only display MarkFlow payment option, and no CC fields
    308. 

  308.      */
    309. 

  309.     if ($this->enableDirectPayment == false) {
    310. 

  310.       return array('id' => $this->code,
    311. 

  311.                    'module' => '<img align="absmiddle" src="' . MODULE_PAYMENT_PAYPALWPP_MARK_BUTTON_IMG . '" alt="' . MODULE_PAYMENT_PAYPALWPP_MARK_BUTTON_TXT . '" />' . MODULE_PAYMENT_PAYPALWPP_MARK_BUTTON_TXT, 
    312. 

  312.                    'info'=>'<li>If you <b>have paypal account</b>, you can pay your order by your paypal account.</li>
    313. 

  313. 					                  <li>If you <b>don\'t have paypal account</b>, it doesn\'t matter. You canalso pay via paypal with you credit card or bank debit card.</li>
    314. 

  314. 					                  <li>Payment can be submitted in any currency.</li>
    315. 

  315. 					                  <li>Our paypal account is : <b>'.MODULE_PAYMENT_PAYPALWPP_APIUSERNAME.'</b></li>
    316. 

  316. 					                  <a onclick="javascript:window.open(\'https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/popup/OLCWhatIsPayPal-outside\',\'olcwhatispaypal\',\'toolbar=no, location=no, directories=no, status=no, menubar=no, scrollbars=yes, resizable=yes, width=400, height=350\');" class="hand">
    317. 

  317. 					                  <img border="0" alt="Solution Graphics" src="https://www.paypal.com/en_US/i/bnr/horizontal_solution_PP.gif"/></a>
    318. 

  318. 					                  <a onclick="javascript:window.open(\'https://www.paypal.com/verified/pal='.MODULE_PAYMENT_PAYPALWPP_APIUSERNAME.'\',\'olcwhatispaypal\',\'toolbar=no, location=no, directories=no, status=no, menubar=no, scrollbars=yes, resizable=yes, width=400, height=350\');" class="hand">
    319. 

  319.                             <img border="0" src="includes/templates/chanelwatches/images/logo/PaypalVerify.gif"/>
    320. 

  320.                             </a>'
    321. 

  321.                             );
    322. 

  322.     }
    323. 

  323. 

  324.     /**
    325. 

  325.      * if we ARE processing via the gateway, prepare and display both the CC fields and the PP option
    326. 

  326.      */
    327. 

  327.     $expires_month = array();
    328. 

  328.     $expires_year = array();
    329. 

  329.     $issue_year = array();
    330. 

  330.     for ($i = 1; $i < 13; $i++) {
    331. 

  331.       $expires_month[] = array('id' => sprintf('%02d', $i), 'text' => strftime('%B - (%m)',mktime(0,0,0,$i,1,2000)));
    332. 

  332.     }
    333. 

  333. 

  334.     $today = getdate();
    335. 

  335.     for ($i = $today['year']; $i < $today['year'] + 10; $i++) {
    336. 

  336.       $expires_year[] = array('id' => strftime('%y', mktime(0,0,0,1,1,$i)), 'text' => strftime('%Y',mktime(0,0,0,1,1,$i)));
    337. 

  337.     }
    338. 

  338. 

  339.     $onFocus = ' onfocus="methodSelect(\'pmt-' . $this->code . '\')"';
    340. 

  340. 

  341.     $fieldsArray = array();
    342. 

  342.     $fieldsArray[] = array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_FIRSTNAME,
    343. 

  343.                            'field' => zen_draw_input_field('paypalec_cc_firstname', $order->billing['firstname'], 'id="'.$this->code.'-cc-ownerf"'. $onFocus) . 
    344. 

  344.                            '<script type="text/javascript">function paypalec_cc_type_check() { ' . $this->cc_type_check . ' } </script>',
    345. 

  345.                            'tag' => $this->code.'-cc-ownerf');
    346. 

  346.     $fieldsArray[] = array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_LASTNAME,
    347. 

  347.                            'field' => zen_draw_input_field('paypalec_cc_lastname', $order->billing['lastname'], 'id="'.$this->code.'-cc-ownerl"'. $onFocus),
    348. 

  348.                            'tag' => $this->code.'-cc-ownerl');
    349. 

  349.     if (sizeof($this->cards)>0) $fieldsArray[] = array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_TYPE,
    350. 

  350.                             'field' => zen_draw_pull_down_menu('paypalec_cc_type', $this->cards, '', 'onchange="paypalec_cc_type_check();" onblur="paypalec_cc_type_check();"' . 'id="'.$this->code.'-cc-type"'. $onFocus),
    351. 

  351.                            'tag' => $this->code.'-cc-type');
    352. 

  352.     $fieldsArray[] = array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_NUMBER,
    353. 

  353.                            'field' => zen_draw_input_field('paypalec_cc_number', $ccnum, 'id="'.$this->code.'-cc-number"' . $onFocus),
    354. 

  354.                            'tag' => $this->code.'-cc-number');
    355. 

  355.     $fieldsArray[] = array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_EXPIRES,
    356. 

  356.                            'field' => zen_draw_pull_down_menu('paypalec_cc_expires_month', $expires_month, '', 'id="'.$this->code.'-cc-expires-month"' . $onFocus) . '&nbsp;' . zen_draw_pull_down_menu('paypalec_cc_expires_year', $expires_year, '', 'id="'.$this->code.'-cc-expires-year"' . $onFocus),
    357. 

  357.                            'tag' => $this->code.'-cc-expires-month');
    358. 

  358.     $fieldsArray[] = array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_CHECKNUMBER,
    359. 

  359.                            'field' => zen_draw_input_field('paypalec_cc_checkcode', '', 'size="4" maxlength="4"' . ' id="'.$this->code.'-cc-cvv"' . $onFocus) . '&nbsp;<small>' . MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_CHECKNUMBER_LOCATION . '</small><script type="text/javascript">paypalec_cc_type_check();</script>',
    360. 

  360.                            'tag' => $this->code.'-cc-cvv');
    361. 

  361.     if (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'PayPal')  $fieldsArray[] = array('title' => '<br /><img src="' . MODULE_PAYMENT_PAYPALWPP_MARK_BUTTON_IMG . '" alt="' . MODULE_PAYMENT_PAYPALWPP_MARK_BUTTON_TXT . '" /><span style="font-size:11px; font-family: Arial, Verdana;"> ' . MODULE_PAYMENT_PAYPALWPP_MARK_BUTTON_TXT . '</span>');
    362. 

  362. 

  363.     $selection = array('id' => $this->code,
    364. 

  364.                        'module' => MODULE_PAYMENT_PAYPALWPP_TEXT_TITLE,
    365. 

  365.                        'fields' => $fieldsArray);
    366. 

  366. 

  367.     if (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'Payflow-UK' && (CC_ENABLED_SOLO=='1' || CC_ENABLED_SWITCH=='1')) {
    368. 

  368.       // add extra fields for Switch/Solo cards
    369. 

  369.       for ($i = $today['year'] - 10; $i <= $today['year']; $i++) {
    370. 

  370.         $issue_year[] = array('id' => strftime('%y',mktime(0,0,0,1,1,$i)), 'text' => strftime('%Y',mktime(0,0,0,1,1,$i)));
    371. 

  371.       }
    372. 

  372.       array_splice($selection['fields'], 4, 0,
    373. 

  373.                    array(array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_ISSUE,
    374. 

  374.                                'field' => zen_draw_pull_down_menu('paypalec_cc_issue_month', $expires_month, '', 'id="'.$this->code.'-cc-issue-month"' . $onFocus ) . '&nbsp;' . zen_draw_pull_down_menu('paypalec_cc_issue_year', $issue_year, '', 'id="'.$this->code.'-cc-issue-year"' . $onFocus),
    375. 

  375.                                'tag' => $this->code.'-cc-issue-month')));
    376. 

  376.     }
    377. 

  377. /* @TODO -- convert this to handle Issue Number
    378. 

  378.     if (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'Payflow-UK' && CC_ENABLED_MAESTRO=='1') {
    379. 

  379.       // add extra field for Maestro cards
    380. 

  380.       array_splice($selection['fields'], 4, 0,
    381. 

  381.                    array(array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_MAESTRO_ISSUENUMBER,
    382. 

  382.                                'field' => zen_draw_pull_down_menu('paypalec_cc_issuenumber', $expires_month, '', 'id="'.$this->code.'-cc-issue-month"' . $onFocus ),
    383. 

  383.                                'tag' => $this->code.'-cc-issue-month')));
    384. 

  384.     }
    385. 

  385. */
    386. 

  386.     return $selection;
    387. 

  387.   }
    388. 

  388.   /**
    389. 

  389.    * This is the credit card check done between checkout_payment and
    390. 

  390.    * checkout_confirmation (called from checkout_confirmation).
    391. 

  391.    * Evaluates the Credit Card Type for acceptance and the validity of the Credit Card Number & Expiration Date
    392. 

  392.    */
    393. 

  393.   function pre_confirmation_check() {
    394. 

  394.     // If this is an EC checkout, do nothing.
    395. 

  395.     if ($this->in_special_checkout() || $this->enableDirectPayment == false) {
    396. 

  396.       return false;
    397. 

  397.     }
    398. 

  398. 

  399.     include(DIR_WS_CLASSES . 'cc_validation.php');
    400. 

  400.     $cc_validation = new cc_validation();
    401. 

  401.     $result = $cc_validation->validate($_POST['paypalec_cc_number'],
    402. 

  402.                                        $_POST['paypalec_cc_expires_month'], $_POST['paypalec_cc_expires_year'],
    403. 

  403.                                        $_POST['paypalec_cc_issue_month'], $_POST['paypalec_cc_issue_year']);
    404. 

  404.     $error = '';
    405. 

  405.     switch ($result) {
    406. 

  406.       case -1:
    407. 

  407.       $error = sprintf(TEXT_CCVAL_ERROR_UNKNOWN_CARD, substr($cc_validation->cc_number, 0, 4));
    408. 

  408.       break;
    409. 

  409.       case -2:
    410. 

  410.       case -3:
    411. 

  411.       case -4:
    412. 

  412.       $error = TEXT_CCVAL_ERROR_INVALID_DATE;
    413. 

  413.       break;
    414. 

  414.       case false:
    415. 

  415.       $error = TEXT_CCVAL_ERROR_INVALID_NUMBER;
    416. 

  416.       break;
    417. 

  417.     }
    418. 

  418. 

  419.     $_POST['paypalec_cc_checkcode'] = preg_replace('/[^0-9]/i', '', $_POST['paypalec_cc_checkcode']);
    420. 

  420.     $_POST['paypalec_cc_issuenumber'] = preg_replace('/[^0-9]/i', '', $_POST['paypalec_cc_issuenumber']);
    421. 

  421. 

  422.     if (($result === false) || ($result < 1) ) {
    423. 

  423.       $this->terminateEC(MODULE_PAYMENT_PAYPALWPP_TEXT_CARD_ERROR . '<br />' . $error, false, FILENAME_CHECKOUT_PAYMENT);
    424. 

  424.     }
    425. 

  425. 

  426.     $this->cc_card_type = $cc_validation->cc_type;
    427. 

  427.     $this->cc_card_number = $cc_validation->cc_number;
    428. 

  428.     $this->cc_expiry_month = $cc_validation->cc_expiry_month;
    429. 

  429.     $this->cc_expiry_year = $cc_validation->cc_expiry_year;
    430. 

  430.     $this->cc_checkcode = $_POST['paypalec_cc_checkcode'];
    431. 

  431.   }
    432. 

  432.   /**
    433. 

  433.    * Display Credit Card Information for review on the Checkout Confirmation Page
    434. 

  434.    */
    435. 

  435.   function confirmation() {
    436. 

  436.     if ($this->in_special_checkout() || $this->enableDirectPayment == false) {
    437. 

  437.       $confirmation = array('title' => '', 'fields' => array());
    438. 

  438.     } else {
    439. 

  439.       $confirmation = array('title' => '',
    440. 

  440.                             'fields' => array(array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_FIRSTNAME,
    441. 

  441.                                                     'field' => $_POST['paypalec_cc_firstname']),
    442. 

  442.                                               array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_LASTNAME,
    443. 

  443.                                                     'field' => $_POST['paypalec_cc_lastname']),
    444. 

  444.                                               array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_TYPE,
    445. 

  445.                                                     'field' => $this->cc_card_type),
    446. 

  446.                                               array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_NUMBER,
    447. 

  447.                                                     'field' => substr($_POST['paypalec_cc_number'], 0, 4) . str_repeat('X', (strlen($_POST['paypalec_cc_number']) - 8)) . substr($_POST['paypalec_cc_number'], -4)),
    448. 

  448.                                               array('title' => MODULE_PAYMENT_PAYPALWPP_TEXT_CREDIT_CARD_EXPIRES,
    449. 

  449.                                                     'field' => strftime('%B, %Y', mktime(0,0,0,$_POST['paypalec_cc_expires_month'], 1, '20' . $_POST['paypalec_cc_expires_year'])))));
    450. 

  450.     }
    451. 

  451.     return $confirmation;
    452. 

  452.   }
    453. 

  453.   /**
    454. 

  454.    * Prepare the hidden fields comprising the parameters for the Submit button on the checkout confirmation page
    455. 

  455.    */
    456. 

  456.   function process_button() {
    457. 

  457.     if ($this->in_special_checkout() || $this->enableDirectPayment == false) {
    458. 

  458.       $process_button_string = '';
    459. 

  459.     } else {
    460. 

  460.       $_SESSION['paypal_ec_markflow'] = 1;
    461. 

  461.       $process_button_string = zen_draw_hidden_field('ec_cc_type', $_POST['paypalec_cc_type']) .
    462. 

  462.       zen_draw_hidden_field('ec_cc_expdate_month', $_POST['paypalec_cc_expires_month']) .
    463. 

  463.       zen_draw_hidden_field('ec_cc_expdate_year', $_POST['paypalec_cc_expires_year']) .
    464. 

  464.       zen_draw_hidden_field('ec_cc_issuedate_month', $_POST['paypalec_cc_issue_month']) .
    465. 

  465.       zen_draw_hidden_field('ec_cc_issuedate_year', $_POST['paypalec_cc_issue_year']) .
    466. 

  466.       zen_draw_hidden_field('ec_cc_number', $_POST['paypalec_cc_number']) .
    467. 

  467.       zen_draw_hidden_field('ec_cc_checkcode', $_POST['paypalec_cc_checkcode']) .
    468. 

  468.       zen_draw_hidden_field('ec_payer_firstname', $_POST['paypalec_cc_firstname']) .
    469. 

  469.       zen_draw_hidden_field('ec_payer_lastname', $_POST['paypalec_cc_lastname']);
    470. 

  470.     }
    471. 

  471.     return $process_button_string;
    472. 

  472.   }
    473. 

  473.   /**
    474. 

  474.    * Prepare and submit the final authorization to PayPal via the appropriate means as configured
    475. 

  475.    */
    476. 

  476.   function before_process() {
    477. 

  477.     global $order, $doPayPal;
    478. 

  478.     $options = array();
    479. 

  479.     $optionsShip = array();
    480. 

  480.     $optionsNVP = array();
    481. 

  481. 

  482.     $options = $this->getLineItemDetails();
    483. 

  483. 

  484.     //$this->zcLog('before_process - 1', 'Have line-item details:' . "\n" . print_r($options, true));
    485. 

  485. 

  486.     $doPayPal = $this->paypal_init();
    487. 

  487.     if ($this->in_special_checkout() || $this->enableDirectPayment == false) {
    488. 

  488.     $this->zcLog('before_process - EC-1', 'Beginning EC mode');
    489. 

  489.      /****************************************
    490. 

  490.       * Do EC checkout
    491. 

  491.       ****************************************/
    492. 

  492.       // do not allow blank address to be sent to PayPal
    493. 

  493.       if ($_SESSION['paypal_ec_payer_info']['ship_street_1'] != '' && $_SESSION['paypal_ec_payer_info']['ship_address_status'] != 'None') {
    494. 

  494.         $options = array_merge($options, 
    495. 

  495.                  array('SHIPTONAME'   => $_SESSION['paypal_ec_payer_info']['ship_name'],
    496. 

  496.                        'SHIPTOSTREET' => $_SESSION['paypal_ec_payer_info']['ship_street_1'],
    497. 

  497.                        'SHIPTOSTREET2'=> $_SESSION['paypal_ec_payer_info']['ship_street_2'],
    498. 

  498.                        'SHIPTOCITY'   => $_SESSION['paypal_ec_payer_info']['ship_city'],
    499. 

  499.                        'SHIPTOSTATE'  => $_SESSION['paypal_ec_payer_info']['ship_state'],
    500. 

  500.                        'SHIPTOZIP'    => $_SESSION['paypal_ec_payer_info']['ship_postal_code'],
    501. 

  501.                        'SHIPTOCOUNTRYCODE'=> $_SESSION['paypal_ec_payer_info']['ship_country_code'],
    502. 

  502.                        ));
    503. 

  503.         $this->zcLog('before_process - EC-2', 'address overrides added:' . "\n" . print_r($options, true));
    504. 

  504.       }
    505. 

  505. 

  506.       $this->zcLog('before_process - EC-3', 'address info added:' . "\n" . print_r($options, true));
    507. 

  507. 

  508.       // If the customer has changed their shipping address, 
    509. 

  509.       // override the shipping address in PayPal with the shipping
    510. 

  510.       // address that is selected in Zen Cart.
    511. 

  511.       if ($order->delivery['street_address'] != $_SESSION['paypal_ec_payer_info']['ship_street_1'] && $_SESSION['paypal_ec_payer_info']['ship_street_1'] != '') {
    512. 

  512.         $_GET['markflow'] = 2;
    513. 

  513.         if (($address_arr = $this->getOverrideAddress()) !== false) {
    514. 

  514.           // set the override var
    515. 

  515.           $options['ADDROVERRIDE'] = 1;
    516. 

  516.           // set the address info
    517. 

  517.           $options['SHIPTONAME']    = $address_arr['entry_firstname'] . ' ' . $address_arr['entry_lastname'];
    518. 

  518.           $options['SHIPTOSTREET']  = $address_arr['entry_street_address'];
    519. 

  519.           if ($address_arr['entry_suburb'] != '') $options['SHIPTOSTREET2'] = $address_arr['entry_suburb'];
    520. 

  520.           $options['SHIPTOCITY']    = $address_arr['entry_city'];
    521. 

  521.           $options['SHIPTOZIP']     = $address_arr['entry_postcode'];
    522. 

  522.           $options['SHIPTOSTATE']   = $address_arr['zone_code'];
    523. 

  523.           $options['SHIPTOCOUNTRYCODE'] = $address_arr['countries_iso_code_2'];
    524. 

  524.         }
    525. 

  525.       }
    526. 

  526.       // if these optional parameters are blank, remove them from transaction
    527. 

  527.       if (isset($options['SHIPTOSTREET2']) && trim($options['SHIPTOSTREET2']) == '') unset($options['SHIPTOSTREET2']);
    528. 

  528.       if (isset($options['SHIPTOPHONE']) && trim($options['SHIPTOPHONE']) == '') unset($options['SHIPTOPHONE']);
    529. 

  529. 

  530.       // if State is not supplied, repeat the city so that it's not blank, otherwise PayPal croaks
    531. 

  531.       if ((!isset($options['SHIPTOSTATE']) || trim($options['SHIPTOSTATE']) == '') && $options['SHIPTOCITY'] != '') $options['SHIPTOSTATE'] = $options['SHIPTOCITY'];
    532. 

  532. 

  533.       $options['BUTTONSOURCE'] = $this->buttonSourceEC;
    534. 

  534.       $options['CURRENCY'] = $this->selectCurrency($order->info['currency']);
    535. 

  535.       $order_amount = $this->calc_order_amount($order->info['total'], $options['CURRENCY']);
    536. 

  536. 

  537.       // unused at present:
    538. 

  538.       // $options['CUSTOM'] = '';
    539. 

  539.       // $options['INVNUM'] = '';
    540. 

  540.       // $options['DESC'] = '';
    541. 

  541. 

  542.       // debug output
    543. 

  543.       $this->zcLog('before_process - EC-4', 'info being submitted:' . "\n" . $_SESSION['paypal_ec_token'] . ' ' . $_SESSION['paypal_ec_payer_id'] . ' ' . number_format($order_amount, 2) .  "\n" . print_r($options, true));
    544. 

  544. 

  545.       $response = $doPayPal->DoExpressCheckoutPayment($_SESSION['paypal_ec_token'],
    546. 

  546.                                                       $_SESSION['paypal_ec_payer_id'],
    547. 

  547.                                                       number_format((isset($options['AMT']) ? $options['AMT'] : $order_amount), 2),
    548. 

  548.                                                       $options);
    549. 

  549. 

  550.       $this->zcLog('before_process - EC-5', 'resultset:' . "\n" . urldecode(print_r($response, true)));
    551. 

  551. 

  552.       // CHECK RESPONSE -- if error, actions are taken in the errorHandler
    553. 

  553.       $error = $this->_errorHandler($response, 'DoExpressCheckoutPayment');
    554. 

  554. 

  555.       // SUCCESS
    556. 

  556.       $this->payment_type = MODULE_PAYMENT_PAYPALWPP_EC_TEXT_TYPE;
    557. 

  557.       $this->responsedata = $response;
    558. 

  558.       if ($response['PAYMENTTYPE'] != '') $this->payment_type .=  ' (' . urldecode($response['PAYMENTTYPE']) . ')';
    559. 

  559. 

  560.       $this->transaction_id = trim($response['PNREF'] . ' ' . $response['TRANSACTIONID']);
    561. 

  561.       if (empty($response['PENDINGREASON']) || 
    562. 

  562.           $response['PENDINGREASON'] == 'none' || 
    563. 

  563.           $response['PENDINGREASON'] == 'completed' || 
    564. 

  564.           $response['PAYMENTSTATUS'] == 'Completed') {
    565. 

  565.         $this->payment_status = 'Completed';
    566. 

  566.         if ($this->order_status > 0) $order->info['order_status'] = $this->order_status;
    567. 

  567.       } else {
    568. 

  568.         $this->payment_status = 'Pending (' . $response['PENDINGREASON'] . ')';
    569. 

  569.         $order->info['order_status'] = $this->order_pending_status;
    570. 

  570.       }
    571. 

  571.       $this->avs = 'N/A';
    572. 

  572.       $this->cvv2 = 'N/A';
    573. 

  573.       $this->correlationid = $response['CORRELATIONID'];
    574. 

  574.       $this->transactiontype = $response['TRANSACTIONTYPE'];
    575. 

  575.       $this->payment_time = urldecode($response['ORDERTIME']);
    576. 

  576.       $this->feeamt = urldecode($response['FEEAMT']);
    577. 

  577.       $this->taxamt = urldecode($response['TAXAMT']);
    578. 

  578.       $this->pendingreason = $response['PENDINGREASON'];
    579. 

  579.       $this->reasoncode = $response['REASONCODE'];
    580. 

  580. //      $this->numitems = $_SESSION['cart']->count_contents();
    581. 

  581.       $this->numitems = sizeof($order->products);
    582. 

  582.       $this->amt = urldecode($response['AMT'] . ' ' . $response['CURRENCYCODE']);
    583. 

  583.       $this->auth_code = (isset($this->response['AUTHCODE'])) ? $this->response['AUTHCODE'] : $this->response['TOKEN'];
    584. 

  584. 

  585.     } else {
    586. 

  586.       /****************************************
    587. 

  587.        * Do DP checkout
    588. 

  588.        ****************************************/
    589. 

  589.       $this->zcLog('before_process - DP-1', 'Beginning DP mode');
    590. 

  590.       // Set state fields depending on what PayPal wants to see for that country
    591. 

  591.       $this->setStateAndCountry($order->billing);
    592. 

  592.       if (zen_not_null($order->delivery['street_address'])) {
    593. 

  593.         $this->setStateAndCountry($order->delivery);
    594. 

  594.       }
    595. 

  595. 

  596.       // Validate credit card data
    597. 

  597.       include(DIR_WS_CLASSES . 'cc_validation.php');
    598. 

  598.       $cc_validation = new cc_validation();
    599. 

  599.       $response = $cc_validation->validate($_POST['ec_cc_number'], $_POST['ec_cc_expdate_month'], $_POST['ec_cc_expdate_year'], 
    600. 

  600.                                            $_POST['ec_cc_issuedate_month'], $_POST['ec_cc_issuedate_year']);
    601. 

  601.       $error = '';
    602. 

  602.       switch ($response) {
    603. 

  603.         case -1:
    604. 

  604.           $error = sprintf(TEXT_CCVAL_ERROR_UNKNOWN_CARD, substr($cc_validation->cc_number, 0, 4));
    605. 

  605.           break;
    606. 

  606.         case -2:
    607. 

  607.         case -3:
    608. 

  608.         case -4:
    609. 

  609.           $error = TEXT_CCVAL_ERROR_INVALID_DATE;
    610. 

  610.           break;
    611. 

  611.         case false:
    612. 

  612.           $error = TEXT_CCVAL_ERROR_INVALID_NUMBER;
    613. 

  613.           break;
    614. 

  614.       }
    615. 

  615. 

  616.       $this->zcLog('before_process - DP-2', 'CC validation results: ' . $error . '(' . $response . ')');
    617. 

  617. 

  618.       if ($response == false || $response < 1) {
    619. 

  619.         $this->terminateEC($error, false, FILENAME_CHECKOUT_PAYMENT);
    620. 

  620.       }
    621. 

  621.       if (!in_array($cc_validation->cc_type, array('Visa', 'MasterCard', 'Switch', 'Solo', 'Discover', 'American Express', 'Maestro'))) { 
    622. 

  622.         $this->terminateEC(MODULE_PAYMENT_PAYPALWPP_TEXT_BAD_CARD, false, FILENAME_CHECKOUT_PAYMENT);
    623. 

  623.       }
    624. 

  624. 

  625.       $this->zcLog('before_process - DP-3', 'CC info: ' . $cc_validation->cc_type . ' ' . substr($cc_validation->cc_number, 0, 4) . str_repeat('X', (strlen($cc_validation->cc_number) - 8)) . substr($cc_validation->cc_number, -4));
    626. 

  626. 

  627.       // if CC validation passed, continue using the validated data
    628. 

  628.       $cc_type = $cc_validation->cc_type;
    629. 

  629.       $cc_number = $cc_validation->cc_number;
    630. 

  630.       $cc_first_name = $_POST['ec_payer_firstname'];
    631. 

  631.       $cc_last_name = $_POST['ec_payer_lastname'];
    632. 

  632.       $cc_checkcode = $_POST['ec_cc_checkcode'];
    633. 

  633.       $cc_expdate_month = $cc_validation->cc_expiry_month;
    634. 

  634.       $cc_expdate_year = $cc_validation->cc_expiry_year;
    635. 

  635.       $cc_issuedate_month = $_POST['ec_cc_issuedate_month'];
    636. 

  636.       $cc_issuedate_year = $_POST['ec_cc_issuedate_year'];
    637. 

  637.       $cc_owner_ip = zen_get_ip_address();
    638. 

  638. 

  639. 

  640.       // If they're still here, set some of the order object's variables.
    641. 

  641.       $order->info['cc_type'] = $cc_type;
    642. 

  642.       $order->info['cc_number'] = substr($cc_number, 0, 4) . str_repeat('X', (strlen($cc_number) - 8)) . substr($cc_number, -4);
    643. 

  643.       $order->info['cc_owner'] = $cc_first_name . ' ' . $cc_last_name;
    644. 

  644.       $order->info['cc_expires'] = $cc_expdate_month . substr($cc_expdate_year, -2);
    645. 

  645.       $order->info['ip_address'] = $cc_owner_ip;
    646. 

  646. 

  647.       // Set currency
    648. 

  648.       $my_currency = $this->selectCurrency($order->info['currency'], 'DP');
    649. 

  649. /*
    650. 

  650.       // if CC is switch or solo, must be GBP
    651. 

  651.       if (in_array($cc_type, array('Switch', 'Solo', 'Maestro'))) {
    652. 

  652.         $my_currency = 'GBP';
    653. 

  653.       }
    654. 

  654. */
    655. 

  655.       $order_amount = $this->calc_order_amount($order->info['total'], $my_currency);
    656. 

  656. 

  657.       // Initialize the paypal caller object.
    658. 

  658.       $doPayPal = $this->paypal_init();
    659. 

  659.       $optionsAll = array_merge($options, 
    660. 

  660.                     array('STREET'      => $order->billing['street_address'],
    661. 

  661.                           'ZIP'         => $order->billing['postcode']));
    662. 

  662.       $optionsNVP = array('CITY'        => $order->billing['city'],
    663. 

  663.                           'STATE'       => $order->billing['state'],
    664. 

  664.                           'COUNTRYCODE' => $order->billing['country']['iso_code_2'],
    665. 

  665.                           'EXPDATE'     => $cc_expdate_month . $cc_expdate_year );
    666. 

  666. 

  667.       $optionsShip = array();
    668. 

  668.       if (isset($order->delivery) && $order->delivery['street_address'] != '') {
    669. 

  669.         $optionsShip= array('SHIPTONAME'   => ($order->delivery['name'] == '' ? $order->delivery['firstname'] . ' ' . $order->delivery['lastname'] : $order->delivery['name']),
    670. 

  670.                             'SHIPTOSTREET' => $order->delivery['street_address'],
    671. 

  671.                             'SHIPTOSTREET2'=> $order->delivery['suburb'],
    672. 

  672.                             'SHIPTOCITY'   => $order->delivery['city'],
    673. 

  673.                             'SHIPTOZIP'    => $order->delivery['postcode'],
    674. 

  674.                             'SHIPTOSTATE'  => $order->delivery['state'],
    675. 

  675.                             'SHIPTOCOUNTRYCODE'=> $order->delivery['country']['iso_code_2']);
    676. 

  676.       }
    677. 

  677.       // if these optional parameters are blank, remove them from transaction
    678. 

  678.       if (isset($optionsShip['SHIPTOSTREET2']) && trim($optionsShip['SHIPTOSTREET2']) == '') unset($optionsShip['SHIPTOSTREET2']);
    679. 

  679.       if (isset($optionsShip['SHIPTOPHONE']) && trim($optionsShip['SHIPTOPHONE']) == '') unset($optionsShip['SHIPTOPHONE']);
    680. 

  680. 

  681.       // if State is not supplied, repeat the city so that it's not blank, otherwise PayPal croaks
    682. 

  682.       if (!isset($optionsShip['SHIPTOSTATE']) || trim($optionsShip['SHIPTOSTATE']) == '') $optionsShip['SHIPTOSTATE'] = $optionsShip['SHIPTOCITY'];
    683. 

  683. 

  684.       // Payment Transaction/Authorization Mode
    685. 

  685.       $optionsNVP['PAYMENTACTION'] = (MODULE_PAYMENT_PAYPALWPP_TRANSACTION_MODE == 'Auth Only') ? 'Authorization' : 'Sale';
    686. 

  686. //      if (in_array($cc_type, array('Switch', 'Solo'))) {
    687. 

  687. //        $optionsNVP['PAYMENTACTION'] = 'Authorization';
    688. 

  688. //      }
    689. 

  689.       $optionsAll['BUTTONSOURCE'] = $this->buttonSourceDP;
    690. 

  690.       $optionsAll['CURRENCY']     = $my_currency;
    691. 

  691.       $optionsAll['IPADDRESS']    = $cc_owner_ip;
    692. 

  692.       if ($cc_issuedate_month && $cc_issuedate_year) {
    693. 

  693.         $optionsAll['CARDSTART'] = $cc_issuedate_month . substr($cc_issuedate_year, -2);
    694. 

  694.       }
    695. 

  695. 

  696.       // unused at present:
    697. 

  697.       // $options['CUSTOM'] = '';
    698. 

  698.       // $options['INVNUM'] = '';
    699. 

  699.       // $options['DESC'] = '';
    700. 

  700. 

  701.       $this->zcLog('before_process - DP-4', 'optionsAll: ' . print_r($optionsAll, true) . "\n" . 'optionsNVP: ' . print_r($optionsNVP, true) . "\n" . 'optionsShip' . print_r($optionsShip, true) . "\n" . 'Rest of data: ' . "\n" . number_format($order_amount, 2) . ' ' . $cc_expdate_month . ' ' . substr($cc_expdate_year, -2) . ' ' . $cc_first_name . ' ' . $cc_last_name . ' ' . $cc_type);
    702. 

  702. 

  703.       $response = $doPayPal->DoDirectPayment(number_format($order_amount, 2),
    704. 

  704.                                            $cc_number,
    705. 

  705.                                            $cc_checkcode,
    706. 

  706.                                            $cc_expdate_month . substr($cc_expdate_year, -2),
    707. 

  707.                                            $cc_first_name, $cc_last_name,
    708. 

  708.                                            $cc_type,
    709. 

  709.                                            $optionsAll, array_merge($optionsNVP, $optionsShip));
    710. 

  710. 

  711.       $this->zcLog('before_process - DP-5', 'resultset:' . "\n" . print_r($response, true));
    712. 

  712. 

  713.       // CHECK RESPONSE
    714. 

  714.       $error = $this->_errorHandler($response, 'DoDirectPayment');
    715. 

  715. 

  716.       $this->feeamt = '';
    717. 

  717.       $this->taxamt = '';
    718. 

  718.       $this->pendingreason = '';
    719. 

  719.       $this->reasoncode = '';
    720. 

  720.       $this->numitems = sizeof($order->products);
    721. 

  721.       $this->responsedata = $response;
    722. 

  722. 

  723.       if ($response['PNREF']) {
    724. 

  724.       // PNREF only comes from payflow mode
    725. 

  725.         $this->payment_type = MODULE_PAYMENT_PAYPALWPP_PF_TEXT_TYPE;
    726. 

  726.         $this->transaction_id = $response['PNREF'];
    727. 

  727.         $this->payment_status = (MODULE_PAYMENT_PAYPALWPP_TRANSACTION_MODE == 'Auth Only') ? 'Authorization' : 'Completed';
    728. 

  728.         $this->avs = 'AVSADDR: ' . $response['AVSADDR'] . ', AVSZIP: ' . $response['AVSZIP'] . ', IAVS: ' . $response['IAVS'];
    729. 

  729.         $this->cvv2 = $response['CVV2MATCH'];
    730. 

  730.         $this->amt = $order_amount . ' ' . $my_currency;
    731. 

  731.         $this->payment_time = date('Y-m-d h:i:s');
    732. 

  732.         $this->responsedata['CURRENCYCODE'] = $my_currency;
    733. 

  733.         $this->responsedata['EXCHANGERATE'] = $order->info['currency_value'];
    734. 

  734.         $this->auth_code = $this->response['AUTHCODE'];
    735. 

  735.       } else {
    736. 

  736.         // here we're in NVP mode
    737. 

  737.         $this->transaction_id = $response['TRANSACTIONID'];
    738. 

  738.         $this->payment_type = MODULE_PAYMENT_PAYPALWPP_DP_TEXT_TYPE;
    739. 

  739.         $this->payment_status = (MODULE_PAYMENT_PAYPALWPP_TRANSACTION_MODE == 'Auth Only') ? 'Authorization' : 'Completed';
    740. 

  740.         $this->pendingreason = (MODULE_PAYMENT_PAYPALWPP_TRANSACTION_MODE == 'Auth Only') ? 'authorization' : '';
    741. 

  741.         $this->avs = $response['AVSCODE'];
    742. 

  742.         $this->cvv2 = $response['CVV2MATCH'];
    743. 

  743.         $this->correlationid = $response['CORRELATIONID'];
    744. 

  744.         $this->payment_time = urldecode($response['TIMESTAMP']);
    745. 

  745.         $this->amt = urldecode($response['AMT'] . ' ' . $response['CURRENCYCODE']);
    746. 

  746.         $this->auth_code = (isset($this->response['AUTHCODE'])) ? $this->response['AUTHCODE'] : $this->response['TOKEN'];
    747. 

  747.         $this->transactiontype = 'cart';
    748. 

  748.       }
    749. 

  749.     }
    750. 

  750.   }
    751. 

  751.   /**
    752. 

  752.    * When the order returns from the processor, this stores the results in order-status-history and logs data for subsequent use
    753. 

  753.    */
    754. 

  754.   function after_process() {
    755. 

  755.     global $insert_id, $db, $order;
    756. 

  756.     // add a new OSH record for this order's PP details
    757. 

  757.     $commentString = "Transaction ID: :transID: " . 
    758. 

  758.                      (isset($this->responsedata['PPREF']) ? "\nPPRef: " . $this->responsedata['PPREF'] : "") . 
    759. 

  759.                      (isset($this->responsedata['AUTHCODE'])? "\nAuthCode: " . $this->responsedata['AUTHCODE'] : "") . 
    760. 

  760.                                  "\nPayment Type: :pmtType: " . 
    761. 

  761.                                  "\nTimestamp: :pmtTime: " . 
    762. 

  762.                                  "\nPayment Status: :pmtStatus: " . 
    763. 

  763.                      ($this->avs != 'N/A' ? "\nAVS Code: ".$this->avs."\nCVV2 Code: ".$this->cvv2 : '') .
    764. 

  764.                                  "\nAmount: :orderAmt: ";
    765. 

  765.     $commentString = $db->bindVars($commentString, ':transID:', $this->transaction_id, 'noquotestring');
    766. 

  766.     $commentString = $db->bindVars($commentString, ':pmtType:', $this->payment_type, 'noquotestring');
    767. 

  767.     $commentString = $db->bindVars($commentString, ':pmtTime:', $this->payment_time, 'noquotestring');
    768. 

  768.     $commentString = $db->bindVars($commentString, ':pmtStatus:', $this->payment_status, 'noquotestring');
    769. 

  769.     $commentString = $db->bindVars($commentString, ':orderAmt:', $this->amt, 'noquotestring');
    770. 

  770. 

  771.     $sql_data_array= array(array('fieldName'=>'orders_id', 'value'=>$insert_id, 'type'=>'integer'),
    772. 

  772.                            array('fieldName'=>'orders_status_id', 'value'=>$order->info['order_status'], 'type'=>'integer'),
    773. 

  773.                            array('fieldName'=>'date_added', 'value'=>'now()', 'type'=>'noquotestring'),
    774. 

  774.                            array('fieldName'=>'customer_notified', 'value'=>0, 'type'=>'integer'),
    775. 

  775.                            array('fieldName'=>'comments', 'value'=>$commentString, 'type'=>'string'));
    776. 

  776.     $db->perform(TABLE_ORDERS_STATUS_HISTORY, $sql_data_array);
    777. 

  777. 

  778. 

  779. 

  780.     // store the PayPal order meta data -- used for later matching and back-end processing activities
    781. 

  781.     $paypal_order = array('order_id' => $insert_id,
    782. 

  782.                           'txn_type' => $this->transactiontype,
    783. 

  783.                           'module_name' => $this->code,
    784. 

  784.                           'module_mode' => MODULE_PAYMENT_PAYPALWPP_MODULE_MODE,
    785. 

  785.                           'reason_code' => $this->reasoncode,
    786. 

  786.                           'payment_type' => $this->payment_type,
    787. 

  787.                           'payment_status' => $this->payment_status,
    788. 

  788.                           'pending_reason' => $this->pendingreason,
    789. 

  789.                           'invoice' => urldecode($_SESSION['paypal_ec_token'] . $this->responsedata['PPREF']),
    790. 

  790.                           'first_name' => $_SESSION['paypal_ec_payer_info']['payer_firstname'],
    791. 

  791.                           'last_name' => $_SESSION['paypal_ec_payer_info']['payer_lastname'],
    792. 

  792.                           'payer_business_name' => $_SESSION['paypal_ec_payer_info']['payer_business'],
    793. 

  793.                           'address_name' => $_SESSION['paypal_ec_payer_info']['ship_name'],
    794. 

  794.                           'address_street' => $_SESSION['paypal_ec_payer_info']['ship_street_1'],
    795. 

  795.                           'address_city' => $_SESSION['paypal_ec_payer_info']['ship_city'],
    796. 

  796.                           'address_state' => $_SESSION['paypal_ec_payer_info']['ship_state'],
    797. 

  797.                           'address_zip' => $_SESSION['paypal_ec_payer_info']['ship_postal_code'],
    798. 

  798.                           'address_country' => $_SESSION['paypal_ec_payer_info']['ship_country'],
    799. 

  799.                           'address_status' => $_SESSION['paypal_ec_payer_info']['ship_address_status'],
    800. 

  800.                           'payer_email' => $_SESSION['paypal_ec_payer_info']['payer_email'],
    801. 

  801.                           'payer_id' => $_SESSION['paypal_ec_payer_id'],
    802. 

  802.                           'payer_status' => $_SESSION['paypal_ec_payer_info']['payer_status'],
    803. 

  803.                           'payment_date' => trim(preg_replace('/[^0-9-:]/', ' ', $this->payment_time)),
    804. 

  804.                           'business' => '',
    805. 

  805.                           'receiver_email' => (substr(MODULE_PAYMENT_PAYPALWPP_MODULE_MODE,0,7) == 'Payflow' ? MODULE_PAYMENT_PAYPALWPP_PFVENDOR : str_replace('_api1', '', MODULE_PAYMENT_PAYPALWPP_APIUSERNAME)),
    806. 

  806.                           'receiver_id' => '',
    807. 

  807.                           'txn_id' => $this->transaction_id,
    808. 

  808.                           'parent_txn_id' => '',
    809. 

  809.                           'num_cart_items' => (float)$this->numitems,
    810. 

  810.                           'mc_gross' => (float)$this->amt,
    811. 

  811.                           'mc_fee' => (float)urldecode($this->feeamt),
    812. 

  812.                           'mc_currency' => $this->responsedata['CURRENCYCODE'],
    813. 

  813.                           'settle_amount' => (float)urldecode($this->responsedata['SETTLEAMT']),
    814. 

  814.                           'settle_currency' => $this->responsedata['CURRENCYCODE'],
    815. 

  815.                           'exchange_rate' => (urldecode($this->responsedata['EXCHANGERATE']) > 0 ? urldecode($this->responsedata['EXCHANGERATE']) : 1.0),
    816. 

  816.                           'notify_version' => '0',
    817. 

  817.                           'verify_sign' =>'',
    818. 

  818.                           'date_added' => 'now()',
    819. 

  819.                           'memo' => '{Record generated by payment module}'
    820. 

  820.                          );
    821. 

  821.     zen_db_perform(TABLE_PAYPAL, $paypal_order);
    822. 

  822. 

  823.     // Unregister the paypal session variables, making it necessary to start again for another purchase
    824. 

  824.     unset($_SESSION['paypal_ec_temp']);
    825. 

  825.     unset($_SESSION['paypal_ec_token']);
    826. 

  826.     unset($_SESSION['paypal_ec_payer_id']);
    827. 

  827.     unset($_SESSION['paypal_ec_payer_info']);
    828. 

  828.     unset($_SESSION['paypal_ec_final']);
    829. 

  829.     unset($_SESSION['paypal_ec_markflow']);
    830. 

  830.   }
    831. 

  831.   /**
    832. 

  832.     * Build admin-page components
    833. 

  833.     *
    834. 

  834.     * @param int $zf_order_id
    835. 

  835.     * @return string
    836. 

  836.     */
    837. 

  837.   function admin_notification($zf_order_id) {
    838. 

  838.     global $db;
    839. 

  839.     $module = $this->code;
    840. 

  840.     $output = '';
    841. 

  841.     $response = $this->_GetTransactionDetails($zf_order_id);
    842. 

  842.     //$response = $this->_TransactionSearch('2006-12-01T00:00:00Z', $zf_order_id);
    843. 

  843.     $sql = "SELECT * from " . TABLE_PAYPAL . " WHERE order_id = :orderID 
    844. 

  844.             AND parent_txn_id = '' AND order_id > 0 
    845. 

  845.             ORDER BY paypal_ipn_id DESC LIMIT 1";
    846. 

  846.     $sql = $db->bindVars($sql, ':orderID', $zf_order_id, 'integer');
    847. 

  847.     $ipn = $db->Execute($sql);
    848. 

  848.     if ($ipn->RecordCount() == 0) $ipn->fields = array(); 
    849. 

  849.     if (file_exists(DIR_FS_CATALOG . DIR_WS_MODULES . 'payment/paypal/paypalwpp_admin_notification.php')) require(DIR_FS_CATALOG . DIR_WS_MODULES . 'payment/paypal/paypalwpp_admin_notification.php');
    850. 

  850.     return $output;
    851. 

  851.   }
    852. 

  852.   /**
    853. 

  853.    * Used to read details of an existing transaction.  FOR FUTURE USE.
    854. 

  854.    */
    855. 

  855.   function _GetTransactionDetails($oID) {
    856. 

  856.     global $db, $messageStack, $doPayPal;
    857. 

  857.     $doPayPal = $this->paypal_init();
    858. 

  858.     // look up history on this order from PayPal table
    859. 

  859.     $sql = "select * from " . TABLE_PAYPAL . " where order_id = :orderID  AND parent_txn_id = '' ";
    860. 

  860.     $sql = $db->bindVars($sql, ':orderID', $oID, 'integer');
    861. 

  861.     $zc_ppHist = $db->Execute($sql);
    862. 

  862.     if ($zc_ppHist->RecordCount() == 0) return false;
    863. 

  863.     $txnID = $zc_ppHist->fields['txn_id'];
    864. 

  864.     /**
    865. 

  865.      * Read data from PayPal
    866. 

  866.      */
    867. 

  867.     $response = $doPayPal->GetTransactionDetails($txnID);
    868. 

  868. 

  869.     $error = $this->_errorHandler($response, 'GetTransactionDetails', 10007);
    870. 

  870.     if ($error === false) {
    871. 

  871.       return false;
    872. 

  872.     } else {
    873. 

  873.       return $response;
    874. 

  874.     }
    875. 

  875.   }
    876. 

  876.   /**
    877. 

  877.    * Used to read details of existing transactions.  FOR FUTURE USE.
    878. 

  878.    */
    879. 

  879.   function _TransactionSearch($startDate = '', $oID = '', $criteria = '') {
    880. 

  880.     global $db, $messageStack, $doPayPal;
    881. 

  881.     $doPayPal = $this->paypal_init();
    882. 

  882.     // look up history on this order from PayPal table
    883. 

  883.     $sql = "select * from " . TABLE_PAYPAL . " where order_id = :orderID  AND parent_txn_id = '' ";
    884. 

  884.     $sql = $db->bindVars($sql, ':orderID', $oID, 'integer');
    885. 

  885.     $zc_ppHist = $db->Execute($sql);
    886. 

  886.     if ($zc_ppHist->RecordCount() == 0) return false;
    887. 

  887.     $txnID = $zc_ppHist->fields['txn_id'];
    888. 

  888.     $startDate = $zc_ppHist->fields['payment_date'];
    889. 

  889.     $timeval = time();
    890. 

  890.     if ($startDate == '') $startDate = date('Y-m-d', $timeval) . 'T' . date('h:i:s', $timeval) . 'Z';
    891. 

  891.     /**
    892. 

  892.      * Read data from PayPal
    893. 

  893.      */
    894. 

  894.     $response = $doPayPal->TransactionSearch($startDate, $txnID, $email, $criteria);
    895. 

  895. 

  896.     $error = $this->_errorHandler($response, 'TransactionSearch');
    897. 

  897.     if ($error === false) {
    898. 

  898.       return false;
    899. 

  899.     } else {
    900. 

  900.       return $response;
    901. 

  901.     }
    902. 

  902.   }
    903. 

  903.   /**
    904. 

  904.    * Display appropriate error message when needed
    905. 

  905.    */
    906. 

  906.   function get_error() {
    907. 

  907.     include_once(zen_get_file_directory(DIR_FS_CATALOG . DIR_WS_LANGUAGES . $_SESSION['language'] . '/modules/payment/', 'paypalwpp.php', 'false'));
    908. 

  908.     $error = array('title' => MODULE_PAYMENT_PAYPALWPP_ERROR_HEADING,
    909. 

  909.                    'error' => ((isset($_GET['error'])) ? stripslashes(urldecode($_GET['error'])) : MODULE_PAYMENT_PAYPALWPP_TEXT_CARD_ERROR));
    910. 

  910.     return $error;
    911. 

  911.   }
    912. 

  912.   /**
    913. 

  913.    * Evaluate installation status of this module. Returns true if the status key is found.
    914. 

  914.    */
    915. 

  915.   function check() {
    916. 

  916.     global $db;
    917. 

  917.     if (!isset($this->_check)) {
    918. 

  918.       $check_query = $db->Execute("select configuration_value from " . TABLE_CONFIGURATION . " where configuration_key = 'MODULE_PAYMENT_PAYPALWPP_STATUS'");
    919. 

  919.       $this->_check = !$check_query->EOF;
    920. 

  920.     }
    921. 

  921.     return $this->_check;
    922. 

  922.   }
    923. 

  923.   /**
    924. 

  924.    * Installs all the configuration keys for this module
    925. 

  925.    */
    926. 

  926.   function install() {
    927. 

  927.     global $db;
    928. 

  928. 

  929.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Enable this Payment Module', 'MODULE_PAYMENT_PAYPALWPP_STATUS', 'True', 'Do you want to enable this payment module?', '6', '25', 'zen_cfg_select_option(array(\'True\', \'False\'), ', now())");
    930. 

  930.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Enable Direct Payment', 'MODULE_PAYMENT_PAYPALWPP_DIRECT_ENABLED', 'False', 'Would you like to enable credit card payments through PayPal DIRECTLY on your website? <br />(<strong…
    931.

Large files files are truncated, but you can click here to view the full file