PageRenderTime 65ms CodeModel.GetById 28ms RepoModel.GetById 1ms app.codeStats 1ms

/includes/modules/payment/paypalwpp.php

https://github.com/happyxlq/zencart_svn
PHP | 2848 lines | 2011 code | 254 blank | 583 comment | 774 complexity | ac449f49cbcd135a624063dd2c7e4221 MD5 | raw file
Possible License(s): BSD-3-Clause, LGPL-2.1

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * paypalwpp.php payment module class for PayPal Express Checkout payment method
    4. 

  4.  *
    5. 

  5.  * @package paymentMethod
    6. 

  6.  * @copyright Copyright 2003-2010 Zen Cart Development Team
    7. 

  7.  * @copyright Portions Copyright 2003 osCommerce
    8. 

  8.  * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
    9. 

  9.  * @version $Id: paypalwpp.php 16878 2010-07-08 17:03:31Z drbyte $
    10. 

  10.  */
    11. 

  11. /**
    12. 

  12.  * load the communications layer code
    13. 

  13.  */
    14. 

  14. require_once(DIR_FS_CATALOG . DIR_WS_MODULES . 'payment/paypal/paypal_curl.php');
    15. 

  15. /**
    16. 

  16.  * the PayPal payment module with Express Checkout
    17. 

  17.  */
    18. 

  18. class paypalwpp extends base {
    19. 

  19.   /**
    20. 

  20.    * name of this module
    21. 

  21.    *
    22. 

  22.    * @var string
    23. 

  23.    */
    24. 

  24.   var $code;
    25. 

  25.   /**
    26. 

  26.    * displayed module title
    27. 

  27.    *
    28. 

  28.    * @var string
    29. 

  29.    */
    30. 

  30.   var $title;
    31. 

  31.   /**
    32. 

  32.    * displayed module description
    33. 

  33.    *
    34. 

  34.    * @var string
    35. 

  35.    */
    36. 

  36.   var $description;
    37. 

  37.   /**
    38. 

  38.    * module status - set based on various config and zone criteria
    39. 

  39.    *
    40. 

  40.    * @var string
    41. 

  41.    */
    42. 

  42.   var $enabled;
    43. 

  43.   /**
    44. 

  44.    * the zone to which this module is restricted for use
    45. 

  45.    *
    46. 

  46.    * @var string
    47. 

  47.    */
    48. 

  48.   var $zone;
    49. 

  49.   /**
    50. 

  50.    * debugging flag
    51. 

  51.    *
    52. 

  52.    * @var boolean
    53. 

  53.    */
    54. 

  54.   var $enableDebugging = false;
    55. 

  55.   /**
    56. 

  56.    * Determines whether payment page is displayed or not
    57. 

  57.    *
    58. 

  58.    * @var boolean
    59. 

  59.    */
    60. 

  60.   var $showPaymentPage = false;
    61. 

  61.   var $flagDisablePaymentAddressChange = false;
    62. 

  62.   /**
    63. 

  63.    * sort order of display
    64. 

  64.    *
    65. 

  65.    * @var int
    66. 

  66.    */
    67. 

  67.   var $sort_order = 0;
    68. 

  68.   /**
    69. 

  69.    * Button Source / BN code -- enables the module to work for Zen Cart
    70. 

  70.    *
    71. 

  71.    * @var string
    72. 

  72.    */
    73. 

  73.   var $buttonSourceEC = 'zhongtuo_cart_ec_c2';
    74. 

  74.   /**
    75. 

  75.    * order status setting for pending orders
    76. 

  76.    *
    77. 

  77.    * @var int
    78. 

  78.    */
    79. 

  79.   var $order_pending_status = 1;
    80. 

  80.   /**
    81. 

  81.    * order status setting for completed orders
    82. 

  82.    *
    83. 

  83.    * @var int
    84. 

  84.    */
    85. 

  85.   var $order_status = DEFAULT_ORDERS_STATUS_ID;
    86. 

  86.   /**
    87. 

  87.    * Debug tools
    88. 

  88.    */
    89. 

  89.   var $_logDir = 'includes/modules/payment/paypal/logs/';
    90. 

  90.   var $_logLevel = 0;
    91. 

  91.   /**
    92. 

  92.    * FMF
    93. 

  93.    */
    94. 

  94.   var $fmfResponse = '';
    95. 

  95.   var $fmfErrors = array();
    96. 

  96.   /**
    97. 

  97.    * class constructor
    98. 

  98.    */
    99. 

  99.   function paypalwpp() {
    100. 

  100.     include_once(zen_get_file_directory(DIR_FS_CATALOG . DIR_WS_LANGUAGES . $_SESSION['language'] . '/modules/payment/', 'paypalwpp.php', 'false'));
    101. 

  101.     global $order;
    102. 

  102.     $this->code = 'paypalwpp';
    103. 

  103.     $this->codeTitle = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_EC;
    104. 

  104.     $this->codeVersion = '1.3.9e';
    105. 

  105.     $this->enableDirectPayment = FALSE;
    106. 

  106.     $this->enabled = (MODULE_PAYMENT_PAYPALWPP_STATUS == 'True');
    107. 

  107.     // Set the title & description text based on the mode we're in ... EC vs US/UK vs admin
    108. 

  108.     if (IS_ADMIN_FLAG === true) {
    109. 

  109.       $this->description = sprintf(MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_DESCRIPTION, ' (rev' . $this->codeVersion . ')');
    110. 

  110.       switch (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE) {
    111. 

  111.         case ('PayPal'):
    112. 

  112.           $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_EC;
    113. 

  113.         break;
    114. 

  114.         case ('Payflow-UK'):
    115. 

  115.           $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_PRO20;
    116. 

  116.         break;
    117. 

  117.         case ('Payflow-US'):
    118. 

  118.           if (defined('MODULE_PAYMENT_PAYPALWPP_PAYFLOW_EC') && MODULE_PAYMENT_PAYPALWPP_PAYFLOW_EC == 'Yes') {
    119. 

  119.             $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_PF_EC;
    120. 

  120.           } else {
    121. 

  121.             $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_PF_GATEWAY;
    122. 

  122.           }
    123. 

  123.         break;
    124. 

  124.         default:
    125. 

  125.           $this->title = MODULE_PAYMENT_PAYPALWPP_TEXT_ADMIN_TITLE_EC;
    126. 

  126.       }
    127. 

  127.       if ($this->enabled) {
    128. 

  128.         if ( (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'PayPal' && (MODULE_PAYMENT_PAYPALWPP_APISIGNATURE == '' || MODULE_PAYMENT_PAYPALWPP_APIUSERNAME == '' || MODULE_PAYMENT_PAYPALWPP_APIPASSWORD == ''))
    129. 

  129.           || (substr(MODULE_PAYMENT_PAYPALWPP_MODULE_MODE,0,7) == 'Payflow' && (MODULE_PAYMENT_PAYPALWPP_PFPARTNER == '' || MODULE_PAYMENT_PAYPALWPP_PFVENDOR == '' || MODULE_PAYMENT_PAYPALWPP_PFUSER == '' || MODULE_PAYMENT_PAYPALWPP_PFPASSWORD == ''))
    130. 

  130.           ) $this->title .= '<span class="alert"><strong> NOT CONFIGURED YET</strong></span>';
    131. 

  131.         if (MODULE_PAYMENT_PAYPALWPP_SERVER =='sandbox') $this->title .= '<strong><span class="alert"> (sandbox active)</span></strong>';
    132. 

  132.         if (MODULE_PAYMENT_PAYPALWPP_DEBUGGING =='Log File' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING =='Log and Email') $this->title .= '<strong> (Debug)</strong>';
    133. 

  133.         if (!function_exists('curl_init')) $this->title .= '<strong><span class="alert"> CURL NOT FOUND. Cannot Use.</span></strong>';
    134. 

  134.       }
    135. 

  135.     } else {
    136. 

  136.       $this->description = MODULE_PAYMENT_PAYPALWPP_TEXT_DESCRIPTION;
    137. 

  137.       $this->title = MODULE_PAYMENT_PAYPALWPP_EC_TEXT_TITLE; //pp
    138. 

  138.     }
    139. 

  139. 

  140.     if ((!defined('PAYPAL_OVERRIDE_CURL_WARNING') || (defined('PAYPAL_OVERRIDE_CURL_WARNING') && PAYPAL_OVERRIDE_CURL_WARNING != 'True')) && !function_exists('curl_init')) $this->enabled = false;
    141. 

  141. 

  142.     $this->enableDebugging = (MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log File' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING =='Log and Email');
    143. 

  143.     $this->emailAlerts = (MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log File' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING =='Log and Email' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Alerts Only');
    144. 

  144.     $this->doDPonly = (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE =='Payflow-US' && !(defined('MODULE_PAYMENT_PAYPALWPP_PAYFLOW_EC') && MODULE_PAYMENT_PAYPALWPP_PAYFLOW_EC == 'Yes'));
    145. 

  145.     $this->showPaymentPage = (MODULE_PAYMENT_PAYPALWPP_SKIP_PAYMENT_PAGE == 'No') ? true : false;
    146. 

  146.     $this->sort_order = MODULE_PAYMENT_PAYPALWPP_SORT_ORDER;
    147. 

  147. 

  148.     $this->buttonSourceEC = 'ZenCart-EC_us';
    149. 

  149.     $this->buttonSourceDP = 'ZenCart-DP_us';
    150. 

  150.     if (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'Payflow-UK') {
    151. 

  151.       $this->buttonSourceEC = 'ZenCart-EC_uk';
    152. 

  152.       $this->buttonSourceDP = 'ZenCart-DP_uk';
    153. 

  153.     }
    154. 

  154.     if (MODULE_PAYMENT_PAYPALWPP_MODULE_MODE == 'Payflow-US') {
    155. 

  155.       $this->buttonSourceEC = 'ZenCart-ECGW_us';
    156. 

  156.       $this->buttonSourceDP = 'ZenCart-GW_us';
    157. 

  157.     }
    158. 

  158. 

  159.     $this->order_pending_status = MODULE_PAYMENT_PAYPALWPP_ORDER_PENDING_STATUS_ID;
    160. 

  160.     if ((int)MODULE_PAYMENT_PAYPALWPP_ORDER_STATUS_ID > 0) {
    161. 

  161.       $this->order_status = MODULE_PAYMENT_PAYPALWPP_ORDER_STATUS_ID;
    162. 

  162.     }
    163. 

  163.     $this->new_acct_notify = MODULE_PAYMENT_PAYPALWPP_NEW_ACCT_NOTIFY;
    164. 

  164.     $this->zone = (int)MODULE_PAYMENT_PAYPALWPP_ZONE;
    165. 

  165.     if (is_object($order)) $this->update_status();
    166. 

  166. 

  167.     if (PROJECT_VERSION_MAJOR != '1' && substr(PROJECT_VERSION_MINOR, 0, 3) != '3.9') $this->enabled = false;
    168. 

  168. 

  169.     $this->cards = array();
    170. 

  170.     // if operating in markflow mode, start EC process when submitting order
    171. 

  171.     if (!$this->in_special_checkout()) {
    172. 

  172.       $this->form_action_url = zen_href_link('ipn_main_handler.php', 'type=ec&markflow=1&clearSess=1&stage=final', 'SSL', true, true, true);
    173. 

  173.     }
    174. 

  174. 

  175.     // debug setup
    176. 

  176.     if (!@is_writable($this->_logDir)) $this->_logDir = DIR_FS_CATALOG . $this->_logDir;
    177. 

  177.     if (!@is_writable($this->_logDir)) $this->_logDir = DIR_FS_SQL_CACHE;
    178. 

  178.     // Regular mode:
    179. 

  179.     if ($this->enableDebugging) $this->_logLevel = PEAR_LOG_INFO;
    180. 

  180.     // DEV MODE:
    181. 

  181.     if (defined('PAYPAL_DEV_MODE') && PAYPAL_DEV_MODE == 'true') $this->_logLevel = PEAR_LOG_DEBUG;
    182. 

  182. 

  183.     if (IS_ADMIN_FLAG === true) $this->tableCheckup();
    184. 

  184. 

  185.   }
    186. 

  186.   /**
    187. 

  187.    *  Sets payment module status based on zone restrictions etc
    188. 

  188.    */
    189. 

  189.   function update_status() {
    190. 

  190.     global $order, $db;
    191. 

  191.     if ($this->enabled && (int)$this->zone > 0) {
    192. 

  192.       $check_flag = false;
    193. 

  193.       $sql = "SELECT zone_id
    194. 

  194.               FROM " . TABLE_ZONES_TO_GEO_ZONES . "
    195. 

  195.               WHERE geo_zone_id = :zoneId
    196. 

  196.               AND zone_country_id = :countryId
    197. 

  197.               ORDER BY zone_id";
    198. 

  198.       $sql = $db->bindVars($sql, ':zoneId', $this->zone, 'integer');
    199. 

  199.       $sql = $db->bindVars($sql, ':countryId', $order->billing['country']['id'], 'integer');
    200. 

  200.       $check = $db->Execute($sql);
    201. 

  201.       while (!$check->EOF) {
    202. 

  202.         if ($check->fields['zone_id'] < 1) {
    203. 

  203.           $check_flag = true;
    204. 

  204.           break;
    205. 

  205.         } elseif ($check->fields['zone_id'] == $order->billing['zone_id']) {
    206. 

  206.           $check_flag = true;
    207. 

  207.           break;
    208. 

  208.         }
    209. 

  209.         $check->MoveNext();
    210. 

  210.       }
    211. 

  211. 

  212.       if (!$check_flag) {
    213. 

  213.         $this->enabled = false;
    214. 

  214.       }
    215. 

  215. 

  216.       // module cannot be used for purchase > $10,000 USD
    217. 

  217.       $order_amount = $this->calc_order_amount($order->info['total'], 'USD');
    218. 

  218.       if ($order_amount > 10000) $this->enabled = false;
    219. 

  219.       if ($order->info['total'] == 0) $this->enabled = false;
    220. 

  220.     }
    221. 

  221.   }
    222. 

  222.   /**
    223. 

  223.    *  Validate the credit card information via javascript (Number, Owner, and CVV Lengths)
    224. 

  224.    */
    225. 

  225.   function javascript_validation() {
    226. 

  226.     return false;
    227. 

  227.   }
    228. 

  228.   /**
    229. 

  229.    * Display Credit Card Information Submission Fields on the Checkout Payment Page
    230. 

  230.    */
    231. 

  231.   function selection() {
    232. 

  232.     $this->cc_type_check = '';
    233. 

  233.     /**
    234. 

  234.      * since we are NOT processing via the gateway, we will only display MarkFlow payment option, and no CC fields
    235. 

  235.      */
    236. 

  236.     return array('id' => $this->code,
    237. 

  237.                  'module' => '<img src="' . MODULE_PAYMENT_PAYPALEC_MARK_BUTTON_IMG . '" alt="' . MODULE_PAYMENT_PAYPALWPP_TEXT_BUTTON_ALTTEXT . '" /><span style="font-size:11px; font-family: Arial, Verdana;"> ' . MODULE_PAYMENT_PAYPALWPP_MARK_BUTTON_TXT . '</span>');
    238. 

  238.   }
    239. 

  239.   function pre_confirmation_check() {
    240. 

  240.     // Since this is an EC checkout, do nothing.
    241. 

  241.     return false;
    242. 

  242.   }
    243. 

  243.   /**
    244. 

  244.    * Display Payment Information for review on the Checkout Confirmation Page
    245. 

  245.    */
    246. 

  246.   function confirmation() {
    247. 

  247.     $confirmation = array('title' => '', 'fields' => array());
    248. 

  248.     return $confirmation;
    249. 

  249.   }
    250. 

  250.   /**
    251. 

  251.    * Prepare the hidden fields comprising the parameters for the Submit button on the checkout confirmation page
    252. 

  252.    */
    253. 

  253.   function process_button() {
    254. 

  254.     $_SESSION['paypal_ec_markflow'] = 1;
    255. 

  255.     return '';
    256. 

  256.   }
    257. 

  257.   /**
    258. 

  258.    * Prepare and submit the final authorization to PayPal via the appropriate means as configured
    259. 

  259.    */
    260. 

  260.   function before_process() {
    261. 

  261.     global $order, $doPayPal, $messageStack;
    262. 

  262.     $options = array();
    263. 

  263.     $optionsShip = array();
    264. 

  264.     $optionsNVP = array();
    265. 

  265. 

  266.     $options = $this->getLineItemDetails($this->selectCurrency($order->info['currency']));
    267. 

  267. 

  268.     //$this->zcLog('before_process - 1', 'Have line-item details:' . "\n" . print_r($options, true));
    269. 

  269. 

  270.     // Initializing DESC field: using for comments related to tax-included pricing, populated by getLineItemDetails()
    271. 

  271.     $options['DESC'] = '';
    272. 

  272. 

  273.     $doPayPal = $this->paypal_init();
    274. 

  274.     $this->zcLog('before_process - EC-1', 'Beginning EC mode');
    275. 

  275.      /****************************************
    276. 

  276.       * Do EC checkout
    277. 

  277.       ****************************************/
    278. 

  278.       // do not allow blank address to be sent to PayPal
    279. 

  279.       if ($_SESSION['paypal_ec_payer_info']['ship_street_1'] != '' && strtoupper($_SESSION['paypal_ec_payer_info']['ship_address_status']) != 'NONE') {
    280. 

  280.         $options = array_merge($options,
    281. 

  281.                  array('SHIPTONAME'   => $_SESSION['paypal_ec_payer_info']['ship_name'],
    282. 

  282.                        'SHIPTOSTREET' => $_SESSION['paypal_ec_payer_info']['ship_street_1'],
    283. 

  283.                        'SHIPTOSTREET2'=> $_SESSION['paypal_ec_payer_info']['ship_street_2'],
    284. 

  284.                        'SHIPTOCITY'   => $_SESSION['paypal_ec_payer_info']['ship_city'],
    285. 

  285.                        'SHIPTOSTATE'  => $_SESSION['paypal_ec_payer_info']['ship_state'],
    286. 

  286.                        'SHIPTOZIP'    => $_SESSION['paypal_ec_payer_info']['ship_postal_code'],
    287. 

  287.                        'SHIPTOCOUNTRYCODE'=> $_SESSION['paypal_ec_payer_info']['ship_country_code'],
    288. 

  288.                        ));
    289. 

  289.         $this->zcLog('before_process - EC-2', 'address overrides added:' . "\n" . print_r($options, true));
    290. 

  290.       }
    291. 

  291. 

  292.       $this->zcLog('before_process - EC-3', 'address info added:' . "\n" . print_r($options, true));
    293. 

  293. 

  294.       $options['BUTTONSOURCE'] = $this->buttonSourceEC;
    295. 

  295. 

  296.       // If the customer has changed their shipping address,
    297. 

  297.       // override the shipping address in PayPal with the shipping
    298. 

  298.       // address that is selected in Zen Cart.
    299. 

  299.       if ($order->delivery['street_address'] != $_SESSION['paypal_ec_payer_info']['ship_street_1'] && $_SESSION['paypal_ec_payer_info']['ship_street_1'] != '') {
    300. 

  300.         $_GET['markflow'] = 2;
    301. 

  301.         if (($address_arr = $this->getOverrideAddress()) !== false) {
    302. 

  302.           // set the override var
    303. 

  303.           $options['ADDROVERRIDE'] = 1;
    304. 

  304.           // set the address info
    305. 

  305.           $options['SHIPTONAME']    = $address_arr['entry_firstname'] . ' ' . $address_arr['entry_lastname'];
    306. 

  306.           $options['SHIPTOSTREET']  = $address_arr['entry_street_address'];
    307. 

  307.           if ($address_arr['entry_suburb'] != '') $options['SHIPTOSTREET2'] = $address_arr['entry_suburb'];
    308. 

  308.           $options['SHIPTOCITY']    = $address_arr['entry_city'];
    309. 

  309.           $options['SHIPTOZIP']     = $address_arr['entry_postcode'];
    310. 

  310.           $options['SHIPTOSTATE']   = $address_arr['zone_code'];
    311. 

  311.           $options['SHIPTOCOUNTRYCODE'] = $address_arr['countries_iso_code_2'];
    312. 

  312.         }
    313. 

  313.       }
    314. 

  314.       // if these optional parameters are blank, remove them from transaction
    315. 

  315.       if (isset($options['SHIPTOSTREET2']) && trim($options['SHIPTOSTREET2']) == '') unset($options['SHIPTOSTREET2']);
    316. 

  316.       if (isset($options['SHIPTOPHONE']) && trim($options['SHIPTOPHONE']) == '') unset($options['SHIPTOPHONE']);
    317. 

  317. 

  318.       // if State is not supplied, repeat the city so that it's not blank, otherwise PayPal croaks
    319. 

  319.       if ((!isset($options['SHIPTOSTATE']) || trim($options['SHIPTOSTATE']) == '') && $options['SHIPTOCITY'] != '') $options['SHIPTOSTATE'] = $options['SHIPTOCITY'];
    320. 

  320. 

  321.       // FMF support
    322. 

  322.       $options['RETURNFMFDETAILS'] = (MODULE_PAYMENT_PAYPALWPP_EC_RETURN_FMF_DETAILS == 'Yes') ? 1 : 0;
    323. 

  323. 

  324.       // Add note to track that this was an EC transaction (used in properly handling update IPNs related to EC transactions):
    325. 

  325.       $options['CUSTOM'] = 'EC-' . (int)$_SESSION['customer_id'] . '-' . time();
    326. 

  326. 

  327.       // send the store name as transaction identifier, to help distinguish payments between multiple stores:
    328. 

  328.       $options['INVNUM'] = (int)$_SESSION['customer_id'] . '-' . time() . '-[' . substr(preg_replace('/[^a-zA-Z0-9_]/', '', STORE_NAME), 0, 30) . ']';  // (cannot send actual invoice number because it's not assigned until after payment is completed)
    329. 

  329. 

  330.       $options['CURRENCY'] = $this->selectCurrency($order->info['currency']);
    331. 

  331.       $order_amount = $this->calc_order_amount($order->info['total'], $options['CURRENCY'], FALSE);
    332. 

  332. 

  333.       // debug output
    334. 

  334.       $this->zcLog('before_process - EC-4', 'info being submitted:' . "\n" . $_SESSION['paypal_ec_token'] . ' ' . $_SESSION['paypal_ec_payer_id'] . ' ' . number_format($order_amount, 2) .  "\n" . print_r($options, true));
    335. 

  335. 

  336.       if (isset($options['DESC']) && $options['DESC'] == '') unset($options['DESC']);
    337. 

  337. 

  338.       if (!isset($options['AMT'])) $options['AMT'] = number_format($order_amount, 2, '.', '');
    339. 

  339.       $response = $doPayPal->DoExpressCheckoutPayment($_SESSION['paypal_ec_token'],
    340. 

  340.                                                       $_SESSION['paypal_ec_payer_id'],
    341. 

  341.                                                       $options);
    342. 

  342. 

  343.       $this->zcLog('before_process - EC-5', 'resultset:' . "\n" . urldecode(print_r($response, true)));
    344. 

  344. 

  345.       // CHECK RESPONSE -- if error, actions are taken in the errorHandler
    346. 

  346.       $errorHandlerMessage = $this->_errorHandler($response, 'DoExpressCheckoutPayment');
    347. 

  347. 

  348.       if ($this->fmfResponse != '') {
    349. 

  349.         $this->order_status = $this->order_pending_status;
    350. 

  350.       }
    351. 

  351. 

  352.       // SUCCESS
    353. 

  353.       $this->payment_type = MODULE_PAYMENT_PAYPALWPP_EC_TEXT_TYPE;
    354. 

  354.       $this->responsedata = $response;
    355. 

  355.       if ($response['PAYMENTTYPE'] != '') $this->payment_type .=  ' (' . urldecode($response['PAYMENTTYPE']) . ')';
    356. 

  356. 

  357.       $this->transaction_id = trim($response['PNREF'] . ' ' . $response['TRANSACTIONID']);
    358. 

  358.       if (empty($response['PENDINGREASON']) ||
    359. 

  359.           $response['PENDINGREASON'] == 'none' ||
    360. 

  360.           $response['PENDINGREASON'] == 'completed' ||
    361. 

  361.           $response['PAYMENTSTATUS'] == 'Completed') {
    362. 

  362.         $this->payment_status = 'Completed';
    363. 

  363.         if ($this->order_status > 0) $order->info['order_status'] = $this->order_status;
    364. 

  364.       } else {
    365. 

  365.         if ($response['PAYMENTSTATUS'] == 'Pending')
    366. 

  366.         {
    367. 

  367.           if ($response['L_ERRORCODE0'] == 11610 && $response['PENDINGREASON'] == '') $response['PENDINGREASON'] = 'Pending FMF Review by Storeowner';
    368. 

  368.         }
    369. 

  369.         $this->payment_status = 'Pending (' . $response['PENDINGREASON'] . ')';
    370. 

  370.         $order->info['order_status'] = $this->order_pending_status;
    371. 

  371.       }
    372. 

  372.       $this->avs = 'N/A';
    373. 

  373.       $this->cvv2 = 'N/A';
    374. 

  374.       $this->correlationid = $response['CORRELATIONID'];
    375. 

  375.       $this->transactiontype = $response['TRANSACTIONTYPE'];
    376. 

  376.       $this->payment_time = urldecode($response['ORDERTIME']);
    377. 

  377.       $this->feeamt = urldecode($response['FEEAMT']);
    378. 

  378.       $this->taxamt = urldecode($response['TAXAMT']);
    379. 

  379.       $this->pendingreason = $response['PENDINGREASON'];
    380. 

  380.       $this->reasoncode = $response['REASONCODE'];
    381. 

  381.       $this->numitems = sizeof($order->products);
    382. 

  382.       $this->amt = urldecode($response['AMT'] . ' ' . $response['CURRENCYCODE']);
    383. 

  383.       $this->auth_code = (isset($this->response['AUTHCODE'])) ? $this->response['AUTHCODE'] : $this->response['TOKEN'];
    384. 

  384.   }
    385. 

  385.   /**
    386. 

  386.    * When the order returns from the processor, this stores the results in order-status-history and logs data for subsequent use
    387. 

  387.    */
    388. 

  388.   function after_process() {
    389. 

  389.     global $insert_id, $db, $order;
    390. 

  390.     // FMF
    391. 

  391.     if ($this->fmfResponse != '') {
    392. 

  392.       $detailedMessage = $insert_id . "\n" . $this->fmfResponse . "\n" . MODULE_PAYMENT_PAYPALDP_TEXT_EMAIL_FMF_INTRO . "\n" . print_r($this->fmfErrors, TRUE);
    393. 

  393.       zen_mail(STORE_NAME, STORE_OWNER_EMAIL_ADDRESS, MODULE_PAYMENT_PAYPALDP_TEXT_EMAIL_FMF_SUBJECT . ' (' . $insert_id . ')', $detailedMessage, STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS, array('EMAIL_MESSAGE_HTML'=>nl2br($detailedMessage)), 'paymentalert');
    394. 

  394.     }
    395. 

  395. 

  396.     // add a new OSH record for this order's PP details
    397. 

  397.     $commentString = "Transaction ID: :transID: " .
    398. 

  398.                      (isset($this->responsedata['PPREF']) ? "\nPPRef: " . $this->responsedata['PPREF'] : "") .
    399. 

  399.                      (isset($this->responsedata['AUTHCODE'])? "\nAuthCode: " . $this->responsedata['AUTHCODE'] : "") .
    400. 

  400.                                  "\nPayment Type: :pmtType: " .
    401. 

  401.                      ($this->payment_time != '' ? "\nTimestamp: :pmtTime: " : "") .
    402. 

  402.                                  "\nPayment Status: :pmtStatus: " .
    403. 

  403.                      (isset($this->responsedata['auth_exp']) ? "\nAuth-Exp: " . $this->responsedata['auth_exp'] : "") .
    404. 

  404.                      ($this->avs != 'N/A' ? "\nAVS Code: ".$this->avs."\nCVV2 Code: ".$this->cvv2 : '') .
    405. 

  405.                      (trim($this->amt) != '' ? "\nAmount: :orderAmt: " : "");
    406. 

  406.     $commentString = $db->bindVars($commentString, ':transID:', $this->transaction_id, 'noquotestring');
    407. 

  407.     $commentString = $db->bindVars($commentString, ':pmtType:', $this->payment_type, 'noquotestring');
    408. 

  408.     $commentString = $db->bindVars($commentString, ':pmtTime:', $this->payment_time, 'noquotestring');
    409. 

  409.     $commentString = $db->bindVars($commentString, ':pmtStatus:', $this->payment_status, 'noquotestring');
    410. 

  410.     $commentString = $db->bindVars($commentString, ':orderAmt:', $this->amt, 'noquotestring');
    411. 

  411. 

  412.     $sql_data_array= array(array('fieldName'=>'orders_id', 'value'=>$insert_id, 'type'=>'integer'),
    413. 

  413.                            array('fieldName'=>'orders_status_id', 'value'=>$order->info['order_status'], 'type'=>'integer'),
    414. 

  414.                            array('fieldName'=>'date_added', 'value'=>'now()', 'type'=>'noquotestring'),
    415. 

  415.                            array('fieldName'=>'customer_notified', 'value'=>0, 'type'=>'integer'),
    416. 

  416.                            array('fieldName'=>'comments', 'value'=>$commentString, 'type'=>'string'));
    417. 

  417.     $db->perform(TABLE_ORDERS_STATUS_HISTORY, $sql_data_array);
    418. 

  418. 

  419.     // store the PayPal order meta data -- used for later matching and back-end processing activities
    420. 

  420.     $paypal_order = array('order_id' => $insert_id,
    421. 

  421.                           'txn_type' => $this->transactiontype,
    422. 

  422.                           'module_name' => $this->code,
    423. 

  423.                           'module_mode' => MODULE_PAYMENT_PAYPALWPP_MODULE_MODE,
    424. 

  424.                           'reason_code' => $this->reasoncode,
    425. 

  425.                           'payment_type' => $this->payment_type,
    426. 

  426.                           'payment_status' => $this->payment_status,
    427. 

  427.                           'pending_reason' => $this->pendingreason,
    428. 

  428.                           'invoice' => urldecode($_SESSION['paypal_ec_token'] . $this->responsedata['PPREF']),
    429. 

  429.                           'first_name' => $_SESSION['paypal_ec_payer_info']['payer_firstname'],
    430. 

  430.                           'last_name' => $_SESSION['paypal_ec_payer_info']['payer_lastname'],
    431. 

  431.                           'payer_business_name' => $_SESSION['paypal_ec_payer_info']['payer_business'],
    432. 

  432.                           'address_name' => $_SESSION['paypal_ec_payer_info']['ship_name'],
    433. 

  433.                           'address_street' => $_SESSION['paypal_ec_payer_info']['ship_street_1'],
    434. 

  434.                           'address_city' => $_SESSION['paypal_ec_payer_info']['ship_city'],
    435. 

  435.                           'address_state' => $_SESSION['paypal_ec_payer_info']['ship_state'],
    436. 

  436.                           'address_zip' => $_SESSION['paypal_ec_payer_info']['ship_postal_code'],
    437. 

  437.                           'address_country' => $_SESSION['paypal_ec_payer_info']['ship_country'],
    438. 

  438.                           'address_status' => $_SESSION['paypal_ec_payer_info']['ship_address_status'],
    439. 

  439.                           'payer_email' => $_SESSION['paypal_ec_payer_info']['payer_email'],
    440. 

  440.                           'payer_id' => $_SESSION['paypal_ec_payer_id'],
    441. 

  441.                           'payer_status' => $_SESSION['paypal_ec_payer_info']['payer_status'],
    442. 

  442.                           'payment_date' => trim(preg_replace('/[^0-9-:]/', ' ', $this->payment_time)),
    443. 

  443.                           'business' => '',
    444. 

  444.                           'receiver_email' => (substr(MODULE_PAYMENT_PAYPALWPP_MODULE_MODE,0,7) == 'Payflow' ? MODULE_PAYMENT_PAYPALWPP_PFVENDOR : str_replace('_api1', '', MODULE_PAYMENT_PAYPALWPP_APIUSERNAME)),
    445. 

  445.                           'receiver_id' => '',
    446. 

  446.                           'txn_id' => $this->transaction_id,
    447. 

  447.                           'parent_txn_id' => '',
    448. 

  448.                           'num_cart_items' => (float)$this->numitems,
    449. 

  449.                           'mc_gross' => (float)$this->amt,
    450. 

  450.                           'mc_fee' => (float)urldecode($this->feeamt),
    451. 

  451.                           'mc_currency' => $this->responsedata['CURRENCYCODE'],
    452. 

  452.                           'settle_amount' => (float)urldecode($this->responsedata['SETTLEAMT']),
    453. 

  453.                           'settle_currency' => $this->responsedata['CURRENCYCODE'],
    454. 

  454.                           'exchange_rate' => (urldecode($this->responsedata['EXCHANGERATE']) > 0 ? urldecode($this->responsedata['EXCHANGERATE']) : 1.0),
    455. 

  455.                           'notify_version' => '0',
    456. 

  456.                           'verify_sign' =>'',
    457. 

  457.                           'date_added' => 'now()',
    458. 

  458.                           'memo' => (sizeof($this->fmfErrors) > 0 ? 'FMF Details ' . print_r($this->fmfErrors, TRUE) : '{Record generated by payment module}'),
    459. 

  459.                          );
    460. 

  460.     zen_db_perform(TABLE_PAYPAL, $paypal_order);
    461. 

  461. 

  462.     // Unregister the paypal session variables, making it necessary to start again for another purchase
    463. 

  463.     unset($_SESSION['paypal_ec_temp']);
    464. 

  464.     unset($_SESSION['paypal_ec_token']);
    465. 

  465.     unset($_SESSION['paypal_ec_payer_id']);
    466. 

  466.     unset($_SESSION['paypal_ec_payer_info']);
    467. 

  467.     unset($_SESSION['paypal_ec_final']);
    468. 

  468.     unset($_SESSION['paypal_ec_markflow']);
    469. 

  469.   }
    470. 

  470.   /**
    471. 

  471.     * Build admin-page components
    472. 

  472.     *
    473. 

  473.     * @param int $zf_order_id
    474. 

  474.     * @return string
    475. 

  475.     */
    476. 

  476.   function admin_notification($zf_order_id) {
    477. 

  477.     if (!defined('MODULE_PAYMENT_PAYPALWPP_STATUS')) return '';
    478. 

  478.     global $db;
    479. 

  479.     $module = $this->code;
    480. 

  480.     $output = '';
    481. 

  481.     $response = $this->_GetTransactionDetails($zf_order_id);
    482. 

  482.     //$response = $this->_TransactionSearch('2006-12-01T00:00:00Z', $zf_order_id);
    483. 

  483.     $sql = "SELECT * from " . TABLE_PAYPAL . " WHERE order_id = :orderID
    484. 

  484.             AND parent_txn_id = '' AND order_id > 0
    485. 

  485.             ORDER BY paypal_ipn_id DESC LIMIT 1";
    486. 

  486.     $sql = $db->bindVars($sql, ':orderID', $zf_order_id, 'integer');
    487. 

  487.     $ipn = $db->Execute($sql);
    488. 

  488.     if ($ipn->RecordCount() == 0) $ipn->fields = array();
    489. 

  489.     if (file_exists(DIR_FS_CATALOG . DIR_WS_MODULES . 'payment/paypal/paypalwpp_admin_notification.php')) require(DIR_FS_CATALOG . DIR_WS_MODULES . 'payment/paypal/paypalwpp_admin_notification.php');
    490. 

  490.     return $output;
    491. 

  491.   }
    492. 

  492.   /**
    493. 

  493.    * Used to read details of an existing transaction.  FOR FUTURE USE.
    494. 

  494.    */
    495. 

  495.   function _GetTransactionDetails($oID) {
    496. 

  496.     global $db, $messageStack, $doPayPal;
    497. 

  497.     $doPayPal = $this->paypal_init();
    498. 

  498.     // look up history on this order from PayPal table
    499. 

  499.     $sql = "select * from " . TABLE_PAYPAL . " where order_id = :orderID order by last_modified DESC, date_added DESC, parent_txn_id DESC, paypal_ipn_id DESC ";
    500. 

  500.     $sql = $db->bindVars($sql, ':orderID', $oID, 'integer');
    501. 

  501.     $zc_ppHist = $db->Execute($sql);
    502. 

  502.     if ($zc_ppHist->RecordCount() == 0) return false;
    503. 

  503.     $txnID = $zc_ppHist->fields['txn_id'];
    504. 

  504.     /**
    505. 

  505.      * Read data from PayPal
    506. 

  506.      */
    507. 

  507.     $response = $doPayPal->GetTransactionDetails($txnID);
    508. 

  508. 

  509.     $error = $this->_errorHandler($response, 'GetTransactionDetails', 10007);
    510. 

  510.     if ($error === false) {
    511. 

  511.       return false;
    512. 

  512.     } else {
    513. 

  513.       return $response;
    514. 

  514.     }
    515. 

  515.   }
    516. 

  516.   /**
    517. 

  517.    * Used to read details of existing transactions.  FOR FUTURE USE.
    518. 

  518.    */
    519. 

  519.   function _TransactionSearch($startDate = '', $oID = '', $criteria = '') {
    520. 

  520.     global $db, $messageStack, $doPayPal;
    521. 

  521.     $doPayPal = $this->paypal_init();
    522. 

  522.     // look up history on this order from PayPal table
    523. 

  523.     $sql = "select * from " . TABLE_PAYPAL . " where order_id = :orderID  AND parent_txn_id = '' ";
    524. 

  524.     $sql = $db->bindVars($sql, ':orderID', $oID, 'integer');
    525. 

  525.     $zc_ppHist = $db->Execute($sql);
    526. 

  526.     if ($zc_ppHist->RecordCount() == 0) return false;
    527. 

  527.     $txnID = $zc_ppHist->fields['txn_id'];
    528. 

  528.     $startDate = $zc_ppHist->fields['payment_date'];
    529. 

  529.     $timeval = time();
    530. 

  530.     if ($startDate == '') $startDate = date('Y-m-d', $timeval) . 'T' . date('h:i:s', $timeval) . 'Z';
    531. 

  531.     /**
    532. 

  532.      * Read data from PayPal
    533. 

  533.      */
    534. 

  534.     $response = $doPayPal->TransactionSearch($startDate, $txnID, $email, $criteria);
    535. 

  535. 

  536.     $error = $this->_errorHandler($response, 'TransactionSearch');
    537. 

  537.     if ($error === false) {
    538. 

  538.       return false;
    539. 

  539.     } else {
    540. 

  540.       return $response;
    541. 

  541.     }
    542. 

  542.   }
    543. 

  543.   /**
    544. 

  544.    * Evaluate installation status of this module. Returns true if the status key is found.
    545. 

  545.    */
    546. 

  546.   function check() {
    547. 

  547.     global $db;
    548. 

  548.     if (!isset($this->_check)) {
    549. 

  549.       $check_query = $db->Execute("select configuration_value from " . TABLE_CONFIGURATION . " where configuration_key = 'MODULE_PAYMENT_PAYPALWPP_STATUS'");
    550. 

  550.       $this->_check = !$check_query->EOF;
    551. 

  551.     }
    552. 

  552.     return $this->_check;
    553. 

  553.   }
    554. 

  554.   /**
    555. 

  555.    * Installs all the configuration keys for this module
    556. 

  556.    */
    557. 

  557.   function install() {
    558. 

  558.     global $db, $messageStack;
    559. 

  559.     if (defined('MODULE_PAYMENT_PAYPALWPP_STATUS')) {
    560. 

  560.       $messageStack->add_session('Express Checkout module already installed.', 'error');
    561. 

  561.       zen_redirect(zen_href_link(FILENAME_MODULES, 'set=payment&module=paypalwpp', 'NONSSL'));
    562. 

  562.       return 'failed';
    563. 

  563.     }
    564. 

  564.     if (defined('MODULE_PAYMENT_PAYPAL_STATUS')) {
    565. 

  565.       $messageStack->add_session('NOTE: You already have the PayPal Website Payments Standard module installed. You should REMOVE it if you want to install Express Checkout.', 'error');
    566. 

  566.       zen_redirect(zen_href_link(FILENAME_MODULES, 'set=payment&module=paypal', 'NONSSL'));
    567. 

  567.       return 'failed';
    568. 

  568.     }
    569. 

  569. 

  570.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Enable this Payment Module', 'MODULE_PAYMENT_PAYPALWPP_STATUS', 'True', 'Do you want to enable this payment module?', '6', '25', 'zen_cfg_select_option(array(\'True\', \'False\'), ', now())");
    571. 

  571.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Live or Sandbox', 'MODULE_PAYMENT_PAYPALWPP_SERVER', 'live', '<strong>Live: </strong> Used to process Live transactions<br><strong>Sandbox: </strong>For developers and testing', '6', '25', 'zen_cfg_select_option(array(\'live\', \'sandbox\'), ', now())");
    572. 

  572. 

  573.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Express Checkout: Require Confirmed Address', 'MODULE_PAYMENT_PAYPALWPP_CONFIRMED_ADDRESS', 'No', 'Do you want to require that your (not-logged-in) customers use a *confirmed* address when choosing their shipping address in PayPal?<br />(this is ignored for logged-in customers)', '6', '25',  'zen_cfg_select_option(array(\'Yes\', \'No\'), ', now())");
    574. 

  574.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Express Checkout: Select Cheapest Shipping Automatically', 'MODULE_PAYMENT_PAYPALWPP_AUTOSELECT_CHEAPEST_SHIPPING', 'Yes', 'When customer returns from PayPal, do we want to automatically select the Cheapest shipping method and skip the shipping page? (making it more *express*)<br />Note: enabling this means the customer does *not* have easy access to select an alternate shipping method (without going back to the Checkout-Step-1 page)', '6', '25',  'zen_cfg_select_option(array(\'Yes\', \'No\'), ', now())");
    575. 

  575.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Express Checkout: Skip Payment Page', 'MODULE_PAYMENT_PAYPALWPP_SKIP_PAYMENT_PAGE', 'Yes', 'If the customer is checking out with Express Checkout, do you want to skip the checkout payment page, making things more *express*? <br /><strong>(NOTE: The Payment Page will auto-display regardless of this setting if you have Coupons or Gift Certificates enabled in your store.)</strong>', '6', '25',  'zen_cfg_select_option(array(\'Yes\', \'No\'), ', now())");
    576. 

  576.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Express Checkout: Automatic Account Creation', 'MODULE_PAYMENT_PAYPALWPP_NEW_ACCT_NOTIFY', 'Yes', 'If a visitor is not an existing customer, a Zen Cart account is created for them.  Would you like make it a permanent account and send them an email containing their login information?<br />NOTE: Permanent accounts are auto-created if the customer purchases downloads or gift certificates, regardless of this setting.', '6', '25', 'zen_cfg_select_option(array(\'Yes\', \'No\'), ', now())");
    577. 

  577.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added) values ('Sort order of display.', 'MODULE_PAYMENT_PAYPALWPP_SORT_ORDER', '0', 'Sort order of display. Lowest is displayed first.', '6', '25', now())");
    578. 

  578.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, use_function, set_function, date_added) values ('Payment Zone', 'MODULE_PAYMENT_PAYPALWPP_ZONE', '0', 'If a zone is selected, only enable this payment method for that zone.', '6', '25', 'zen_get_zone_class_title', 'zen_cfg_pull_down_zone_classes(', now())");
    579. 

  579.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, use_function, date_added) values ('Set Order Status', 'MODULE_PAYMENT_PAYPALWPP_ORDER_STATUS_ID', '2', 'Set the status of orders paid with this payment module to this value. <br /><strong>Recommended: Processing[2]</strong>', '6', '25', 'zen_cfg_pull_down_order_statuses(', 'zen_get_order_status_name', now())");
    580. 

  580.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, use_function, date_added) values ('Set Unpaid Order Status', 'MODULE_PAYMENT_PAYPALWPP_ORDER_PENDING_STATUS_ID', '1', 'Set the status of unpaid orders made with this payment module to this value. <br /><strong>Recommended: Pending[1]</strong>', '6', '25', 'zen_cfg_pull_down_order_statuses(', 'zen_get_order_status_name', now())");
    581. 

  581.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, use_function, date_added) values ('Set Refund Order Status', 'MODULE_PAYMENT_PAYPALWPP_REFUNDED_STATUS_ID', '1', 'Set the status of refunded orders to this value. <br /><strong>Recommended: Pending[1]</strong>', '6', '25', 'zen_cfg_pull_down_order_statuses(', 'zen_get_order_status_name', now())");
    582. 

  582.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added) values ('PayPal Page Style', 'MODULE_PAYMENT_PAYPALWPP_PAGE_STYLE', 'Primary', 'The page-layout style you want customers to see when they visit the PayPal site. You can configure your <strong>Custom Page Styles</strong> in your PayPal Profile settings. This value is case-sensitive.', '6', '25', now())");
    583. 

  583.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Payment Action', 'MODULE_PAYMENT_PAYPALWPP_TRANSACTION_MODE', 'Final Sale', 'How do you want to obtain payment?<br /><strong>Default: Final Sale</strong>', '6', '25', 'zen_cfg_select_option(array(\'Auth Only\', \'Final Sale\'), ',  now())");
    584. 

  584.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Transaction Currency', 'MODULE_PAYMENT_PAYPALWPP_CURRENCY', 'Selected Currency', 'Which currency should the order be sent to PayPal as? <br />NOTE: if an unsupported currency is sent to PayPal, it will be auto-converted to USD (or GBP if using UK account)<br /><strong>Default: Selected Currency</strong>', '6', '25', 'zen_cfg_select_option(array(\'Selected Currency\', \'Only USD\', \'Only AUD\', \'Only CAD\', \'Only EUR\', \'Only GBP\', \'Only CHF\', \'Only CZK\', \'Only DKK\', \'Only HKD\', \'Only HUF\', \'Only JPY\', \'Only NOK\', \'Only NZD\', \'Only PLN\', \'Only SEK\', \'Only SGD\', \'Only THB\', \'Only MXN\', \'Only ILS\', \'Only PHP\', \'Only TWD\', \'Only BRL\', \'Only MYR\'), ', now())");
    585. 

  585. 

  586.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Fraud Mgmt Filters - FMF', 'MODULE_PAYMENT_PAYPALWPP_EC_RETURN_FMF_DETAILS', 'No', 'If you have enabled FMF support in your PayPal account and wish to utilize it in your transactions, set this to yes. Otherwise, leave it at No.', '6', '25','zen_cfg_select_option(array(\'No\', \'Yes\'), ', now())");
    587. 

  587.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added) values ('API Signature -- Username', 'MODULE_PAYMENT_PAYPALWPP_APIUSERNAME', '', 'The API Username from your PayPal API Signature settings under *API Access*. This value typically looks like an email address and is case-sensitive.', '6', '25', now())");
    588. 

  588.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added, set_function, use_function) values ('API Signature -- Password', 'MODULE_PAYMENT_PAYPALWPP_APIPASSWORD', '', 'The API Password from your PayPal API Signature settings under *API Access*. This value is a 16-character code and is case-sensitive.', '6', '25', now(), 'zen_cfg_password_input(', 'zen_cfg_password_display')");
    589. 

  589.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added, set_function, use_function) values ('API Signature -- Signature Code', 'MODULE_PAYMENT_PAYPALWPP_APISIGNATURE', '', 'The API Signature from your PayPal API Signature settings under *API Access*. This value is a 56-character code, and is case-sensitive.', '6', '25', now(), '', 'zen_cfg_password_display')");
    590. 

  590. 

  591.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added) values ('PAYFLOW: User', 'MODULE_PAYMENT_PAYPALWPP_PFUSER', '', 'If you set up one or more additional users on the account, this value is the ID of the user authorized to process transactions. Otherwise it should be the same value as VENDOR. This value is case-sensitive.', '6', '25', now())");
    592. 

  592.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added) values ('PAYFLOW: Partner', 'MODULE_PAYMENT_PAYPALWPP_PFPARTNER', 'ZenCart', 'Your Payflow Partner name linked to your Payflow account. This value is case-sensitive.<br />Typical values: <strong>PayPal</strong> or <strong>ZenCart</strong>', '6', '25', now())");
    593. 

  593.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added) values ('PAYFLOW: Vendor', 'MODULE_PAYMENT_PAYPALWPP_PFVENDOR', '', 'Your merchant login ID that you created when you registered for the Payflow Pro account. This value is case-sensitive.', '6', '25', now())");
    594. 

  594.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added, set_function, use_function) values ('PAYFLOW: Password', 'MODULE_PAYMENT_PAYPALWPP_PFPASSWORD', '', 'The 6- to 32-character password that you defined while registering for the account. This value is case-sensitive.', '6', '25', now(), 'zen_cfg_password_input(', 'zen_cfg_password_display')");
    595. 

  595. 

  596.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('PayPal Mode', 'MODULE_PAYMENT_PAYPALWPP_MODULE_MODE', 'PayPal', 'Which PayPal API system should be used for processing? <br /><u>Choices:</u><br /><font color=green>For choice #1, you need to supply <strong>API Settings</strong> above.</font><br /><strong>1. PayPal</strong> = Express Checkout with a regular PayPal account<br />or<br /><font color=green>for choices 2 &amp; 3 you need to supply <strong>PAYFLOW settings</strong>, below (and have a Payflow account)</font><br /><strong>2. Payflow-UK</strong> = Website Payments Pro UK Payflow Edition<br /><strong>3. Payflow-US</strong> = Payflow Pro Gateway only<!--<br /><strong>4. PayflowUS+EC</strong> = Payflow Pro with Express Checkout-->', '6', '25',  'zen_cfg_select_option(array(\'PayPal\', \'Payflow-UK\', \'Payflow-US\'), ', now())");
    597. 

  597.     $db->Execute("insert into " . TABLE_CONFIGURATION . " (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, set_function, date_added) values ('Debug Mode', 'MODULE_PAYMENT_PAYPALWPP_DEBUGGING', 'Off', 'Would you like to enable debug mode?  A complete detailed log of failed transactions will be emailed to the store owner.', '6', '25', 'zen_cfg_select_option(array(\'Off\', \'Alerts Only\', \'Log File\', \'Log and Email\'), ', now())");
    598. 

  598. 

  599.     $this->notify('NOTIFY_PAYMENT_PAYPALWPP_INSTALLED');
    600. 

  600.   }
    601. 

  601. 

  602.   function keys() {
    603. 

  603.     $keys_list = array('MODULE_PAYMENT_PAYPALWPP_STATUS', 'MODULE_PAYMENT_PAYPALWPP_SORT_ORDER', 'MODULE_PAYMENT_PAYPALWPP_ZONE', 'MODULE_PAYMENT_PAYPALWPP_ORDER_STATUS_ID', 'MODULE_PAYMENT_PAYPALWPP_ORDER_PENDING_STATUS_ID', 'MODULE_PAYMENT_PAYPALWPP_REFUNDED_STATUS_ID', 'MODULE_PAYMENT_PAYPALWPP_CONFIRMED_ADDRESS', 'MODULE_PAYMENT_PAYPALWPP_AUTOSELECT_CHEAPEST_SHIPPING', 'MODULE_PAYMENT_PAYPALWPP_SKIP_PAYMENT_PAGE', 'MODULE_PAYMENT_PAYPALWPP_NEW_ACCT_NOTIFY', 'MODULE_PAYMENT_PAYPALWPP_TRANSACTION_MODE', 'MODULE_PAYMENT_PAYPALWPP_CURRENCY', 'MODULE_PAYMENT_PAYPALWPP_PAGE_STYLE', 'MODULE_PAYMENT_PAYPALWPP_APIUSERNAME', 'MODULE_PAYMENT_PAYPALWPP_APIPASSWORD', 'MODULE_PAYMENT_PAYPALWPP_APISIGNATURE', 'MODULE_PAYMENT_PAYPALWPP_MODULE_MODE', /*'MODULE_PAYMENT_PAYPALWPP_PFPARTNER', 'MODULE_PAYMENT_PAYPALWPP_PFVENDOR', 'MODULE_PAYMENT_PAYPALWPP_PFUSER', 'MODULE_PAYMENT_PAYPALWPP_PFPASSWORD', */'MODULE_PAYMENT_PAYPALWPP_SERVER', 'MODULE_PAYMENT_PAYPALWPP_DEBUGGING');
    604. 

  604.     if (IS_ADMIN_FLAG === true && (PAYPAL_DEV_MODE == 'true' || strstr(MODULE_PAYMENT_PAYPALWPP_MODULE_MODE, 'Payflow'))) {
    605. 

  605.       $keys_list = array_merge($keys_list, array('MODULE_PAYMENT_PAYPALWPP_PFPARTNER', 'MODULE_PAYMENT_PAYPALWPP_PFVENDOR', 'MODULE_PAYMENT_PAYPALWPP_PFUSER', 'MODULE_PAYMENT_PAYPALWPP_PFPASSWORD'));
    606. 

  606.     }
    607. 

  607.     return $keys_list;
    608. 

  608.   }
    609. 

  609.   /**
    610. 

  610.    * De-install this module
    611. 

  611.    */
    612. 

  612.   function remove() {
    613. 

  613.     global $messageStack;
    614. 

  614.     // cannot remove EC if DP installed:
    615. 

  615.     if (defined('MODULE_PAYMENT_PAYPALDP_STATUS')) {
    616. 

  616.       // this language text is hard-coded in english since Website Payments Pro is not yet available in any countries that speak any other language at this time.
    617. 

  617.       $messageStack->add_session('<strong>Sorry, you must remove Website Payments Pro (paypaldp) first.</strong> Website Payments Pro requires that you offer Express Checkout to your customers.<br /><a href="' . zen_href_link('modules.php?set=payment&module=paypaldp', '', 'NONSSL') . '">Click here to edit or remove your Website Payments Pro module.</a>' , 'error');
    618. 

  618.       zen_redirect(zen_href_link(FILENAME_MODULES, 'set=payment&module=paypalwpp', 'NONSSL'));
    619. 

  619.       return 'failed';
    620. 

  620.     }
    621. 

  621. 

  622.     global $db;
    623. 

  623.     $db->Execute("delete from " . TABLE_CONFIGURATION . " where configuration_key LIKE 'MODULE\_PAYMENT\_PAYPALWPP\_%'");
    624. 

  624.     $this->notify('NOTIFY_PAYMENT_PAYPALWPP_UNINSTALLED');
    625. 

  625.   }
    626. 

  626.   /**
    627. 

  627.    * Check settings and conditions to determine whether we are in an Express Checkout phase or not
    628. 

  628.    */
    629. 

  629.   function in_special_checkout() {
    630. 

  630.     if ((defined('MODULE_PAYMENT_PAYPALWPP_STATUS') && MODULE_PAYMENT_PAYPALWPP_STATUS == 'True') &&
    631. 

  631.              !empty($_SESSION['paypal_ec_token']) &&
    632. 

  632.              !empty($_SESSION['paypal_ec_payer_id']) &&
    633. 

  633.              !empty($_SESSION['paypal_ec_payer_info'])) {
    634. 

  634.       $this->flagDisablePaymentAddressChange = true;
    635. 

  635.       return true;
    636. 

  636.     }
    637. 

  637.   }
    638. 

  638.   /**
    639. 

  639.    * Determine whether the shipping-edit button should be displayed or not
    640. 

  640.    */
    641. 

  641.   function alterShippingEditButton() {
    642. 

  642.     return false;
    643. 

  643.     if ($this->in_special_checkout() && empty($_SESSION['paypal_ec_markflow'])) {
    644. 

  644.       return zen_href_link('ipn_main_handler.php', 'type=ec&clearSess=1', 'SSL', true,true, true);
    645. 

  645.     }
    646. 

  646.   }
    647. 

  647.   /**
    648. 

  648.    * Debug Logging support
    649. 

  649.    */
    650. 

  650.   function zcLog($stage, $message) {
    651. 

  651.     static $tokenHash;
    652. 

  652.     if ($tokenHash == '') $tokenHash = '_' . zen_create_random_value(4);
    653. 

  653.     if (MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log and Email' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log File') {
    654. 

  654.       $token = (isset($_SESSION['paypal_ec_token'])) ? $_SESSION['paypal_ec_token'] : preg_replace('/[^0-9.A-Z\-]/', '', $_GET['token']);
    655. 

  655.       $token = ($token == '') ? date('m-d-Y-H-i') : $token; // or time()
    656. 

  656.       $token .= $tokenHash;
    657. 

  657.       $file = $this->_logDir . '/' . $this->code . '_Paypal_Action_' . $token . '.log';
    658. 

  658.       if (defined('PAYPAL_DEV_MODE') && PAYPAL_DEV_MODE == 'true') $file = $this->_logDir . '/' . $this->code . '_Paypal_Debug_' . $token . '.log';
    659. 

  659.       $fp = @fopen($file, 'a');
    660. 

  660.       @fwrite($fp, date('M-d-Y H:i:s') . ' (' . time() . ')' . "\n" . $stage . "\n" . $message . "\n=================================\n\n");
    661. 

  661.       @fclose($fp);
    662. 

  662.     }
    663. 

  663.     $this->_doDebug($stage, $message, false);
    664. 

  664.   }
    665. 

  665.   /**
    666. 

  666.    * Debug Emailing support
    667. 

  667.    */
    668. 

  668.   function _doDebug($subject = 'PayPal debug data', $data, $useSession = true) {
    669. 

  669.     if (MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log and Email') {
    670. 

  670.       $data =  urldecode($data) . "\n\n";
    671. 

  671.       if ($useSession) $data .= "\nSession data: " . print_r($_SESSION, true);
    672. 

  672.       zen_mail(STORE_NAME, STORE_OWNER_EMAIL_ADDRESS, $subject, $this->code . "\n" . $data, STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS, array('EMAIL_MESSAGE_HTML'=>nl2br($this->code . "\n" . $data)), 'debug');
    673. 

  673.     }
    674. 

  674.   }
    675. 

  675.   /**
    676. 

  676.    * Initialize the PayPal/PayflowPro object for communication to the processing gateways
    677. 

  677.    */
    678. 

  678.   function paypal_init() {
    679. 

  679.     if (!defined('MODULE_PAYMENT_PAYPALWPP_STATUS') || !defined('MODULE_PAYMENT_PAYPALWPP_SERVER')) {
    680. 

  680.       $doPayPal = new paypal_curl(array('mode' => 'NOTCONFIGURED'));
    681. 

  681.       return $doPayPal;
    682. 

  682.     }
    683. 

  683.     $ec_uses_gateway = (defined('MODULE_PAYMENT_PAYPALWPP_PRO20_EC_METHOD') && MODULE_PAYMENT_PAYPALWPP_PRO20_EC_METHOD == 'Payflow') ? true : false;
    684. 

  684.     if (substr(MODULE_PAYMENT_PAYPALWPP_MODULE_MODE,0,7) == 'Payflow') {
    685. 

  685.       $doPayPal = new paypal_curl(array('mode' => 'payflow',
    686. 

  686.                                         'user' =>   trim(MODULE_PAYMENT_PAYPALWPP_PFUSER),
    687. 

  687.                                         'vendor' => trim(MODULE_PAYMENT_PAYPALWPP_PFVENDOR),
    688. 

  688.                                         'partner'=> trim(MODULE_PAYMENT_PAYPALWPP_PFPARTNER),
    689. 

  689.                                         'pwd' =>    trim(MODULE_PAYMENT_PAYPALWPP_PFPASSWORD),
    690. 

  690.                                         'server' => MODULE_PAYMENT_PAYPALWPP_SERVER));
    691. 

  691.       $doPayPal->_endpoints = array('live'    => 'https://payflowpro.paypal.com/transaction',
    692. 

  692.                                     'sandbox' => 'https://pilot-payflowpro.paypal.com/transaction');
    693. 

  693.     } else {
    694. 

  694.       $doPayPal = new paypal_curl(array('mode' => 'nvp',
    695. 

  695.                                         'user' => trim(MODULE_PAYMENT_PAYPALWPP_APIUSERNAME),
    696. 

  696.                                         'pwd' =>  trim(MODULE_PAYMENT_PAYPALWPP_APIPASSWORD),
    697. 

  697.                                         'signature' => trim(MODULE_PAYMENT_PAYPALWPP_APISIGNATURE),
    698. 

  698.                                         'version' => '60.0',
    699. 

  699.                                         'server' => MODULE_PAYMENT_PAYPALWPP_SERVER));
    700. 

  700.       $doPayPal->_endpoints = array('live'    => 'https://api-3t.paypal.com/nvp',
    701. 

  701.                                     'sandbox' => 'https://api.sandbox.paypal.com/nvp');
    702. 

  702.     }
    703. 

  703. 

  704.     // set logging options
    705. 

  705.     $doPayPal->_logDir = $this->_logDir;
    706. 

  706. //    $doPayPal->_logLevel = $this->_logLevel;
    707. 

  707. 

  708.     // set proxy options if configured
    709. 

  709.     if (CURL_PROXY_REQUIRED == 'True' && CURL_PROXY_SERVER_DETAILS != '') {
    710. 

  710.       $proxy_tunnel_flag = (defined('CURL_PROXY_TUNNEL_FLAG') && strtoupper(CURL_PROXY_TUNNEL_FLAG) == 'FALSE') ? false : true;
    711. 

  711.       $doPayPal->setCurlOption(CURLOPT_HTTPPROXYTUNNEL, $proxy_tunnel_flag);
    712. 

  712.       $doPayPal->setCurlOption(CURLOPT_PROXYTYPE, CURLPROXY_HTTP);
    713. 

  713.       $doPayPal->setCurlOption(CURLOPT_PROXY, CURL_PROXY_SERVER_DETAILS);
    714. 

  714.     }
    715. 

  715. 

  716.     // transaction processing mode
    717. 

  717.     $doPayPal->_trxtype = (in_array(MODULE_PAYMENT_PAYPALWPP_TRANSACTION_MODE, array('Auth Only', 'Order'))) ? 'A' : 'S';
    718. 

  718. 

  719.     return $doPayPal;
    720. 

  720.   }
    721. 

  721.   /**
    722. 

  722.    * Determine which PayPal URL to direct the customer's browser to when needed
    723. 

  723.    */
    724. 

  724.   function getPayPalLoginServer() {
    725. 

  725.     if (MODULE_PAYMENT_PAYPALWPP_SERVER == 'live') {
    726. 

  726.       // live url
    727. 

  727.       $paypal_url = 'https://www.paypal.com/cgi-bin/webscr';
    728. 

  728.     } else {
    729. 

  729.       // sandbox url
    730. 

  730.       $paypal_url = 'https://www.sandbox.paypal.com/cgi-bin/webscr';
    731. 

  731.     }
    732. 

  732.     return $paypal_url;
    733. 

  733.   }
    734. 

  734.   /**
    735. 

  735.    * Used to submit a refund for a given transaction.  FOR FUTURE USE.
    736. 

  736.    */
    737. 

  737.   function _doRefund($oID, $amount = 'Full', $note = '') {
    738. 

  738.     global $db, $doPayPal, $messageStack;
    739. 

  739.     $new_order_status = (int)MODULE_PAYMENT_PAYPALWPP_REFUNDED_STATUS_ID;
    740. 

  740.     $orig_order_amount = 0;
    741. 

  741.     $doPayPal = $this->paypal_init();
    742. 

  742.     $proceedToRefund = false;
    743. 

  743.     $refundNote = strip_tags(zen_db_input($_POST['refnote']));
    744. 

  744.     if (isset($_POST['fullrefund']) && $_POST['fullrefund'] == MODULE_PAYMENT_PAYPAL_ENTRY_REFUND_BUTTON_TEXT_FULL) {
    745. 

  745.       $refundAmt = 'Full';
    746. 

  746.       if (isset($_POST['reffullconfirm']) && $_POST['reffullconfirm'] == 'on') {
    747. 

  747.         $proceedToRefund = true;
    748. 

  748.       } else {
    749. 

  749.         $messageStack->add_session(MODULE_PAYMENT_PAYPALWPP_TEXT_REFUND_FULL_CONFIRM_ERROR, 'error');
    750. 

  750.       }
    751. 

  751.     }
    752. 

  752.     if (isset($_POST['partialrefund']) && $_POST['partialrefund'] == MODULE_PAYMENT_PAYPAL_ENTRY_REFUND_BUTTON_TEXT_PARTIAL) {
    753. 

  753.       $refundAmt = (float)$_POST['refamt'];
    754. 

  754.       $proceedToRefund = true;
    755. 

  755.       if ($refundAmt == 0) {
    756. 

  756.         $messageStack->add_session(MODULE_PAYMENT_PAYPALWPP_TEXT_INVALID_REFUND_AMOUNT, 'error');
    757. 

  757.         $proceedToRefund = false;
    758. 

  758.       }
    759. 

  759.     }
    760. 

  760. 

  761.     // look up history on this order from PayPal table
    762. 

  762.     $sql = "select * from " . TABLE_PAYPAL . " wh…
    763.

Large files files are truncated, but you can click here to view the full file