PageRenderTime 64ms CodeModel.GetById 25ms RepoModel.GetById 0ms app.codeStats 1ms

/includes/modules/payment/paypal/paypal_functions.php

https://github.com/happyxlq/zencart_svn
PHP | 994 lines | 820 code | 61 blank | 113 comment | 440 complexity | 4e17b6a2f462d6c709cb5ed55bcbedcc MD5 | raw file
Possible License(s): BSD-3-Clause, LGPL-2.1

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * functions used by payment module class for Paypal IPN payment method
    4. 

  4.  *
    5. 

  5.  * @package paymentMethod
    6. 

  6.  * @copyright Copyright 2003-2010 Zen Cart Development Team
    7. 

  7.  * @copyright Portions Copyright 2003 osCommerce
    8. 

  8.  * @copyright Portions Copyright 2004 DevosC.com
    9. 

  9.  * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
    10. 

  10.  * @version $Id: paypal_functions.php 16940 2010-07-21 19:54:44Z drbyte $
    11. 

  11.  */
    12. 

  12. 

  13. // Functions for paypal processing
    14. 

  14.   function datetime_to_sql_format($paypalDateTime) {
    15. 

  15.     //Copyright (c) 2004 DevosC.com
    16. 

  16.     $months = array('Jan' => '01', 'Feb' => '02', 'Mar' => '03', 'Apr' => '04', 'May' => '05',  'Jun' => '06',  'Jul' => '07', 'Aug' => '08', 'Sep' => '09', 'Oct' => '10', 'Nov' => '11', 'Dec' => '12');
    17. 

  17.     $hour = substr($paypalDateTime, 0, 2);$minute = substr($paypalDateTime, 3, 2);$second = substr($paypalDateTime, 6, 2);
    18. 

  18.     $month = $months[substr($paypalDateTime, 9, 3)];
    19. 

  19.     $day = (strlen($day = preg_replace("/,/" , '' , substr($paypalDateTime, 13, 2))) < 2) ? '0'.$day: $day;
    20. 

  20.     $year = substr($paypalDateTime, -8, 4);
    21. 

  21.     if (strlen($day)<2) $day = '0'.$day;
    22. 

  22.     return ($year . "-" . $month . "-" . $day . " " . $hour . ":" . $minute . ":" . $second);
    23. 

  23.   }
    24. 

  24. 

  25.   function ipn_debug_email($message, $email_address = '', $always_send = false, $subjecttext = 'IPN DEBUG message') {
    26. 

  26.     static $paypal_error_counter;
    27. 

  27.     static $paypal_instance_id;
    28. 

  28.     $logfile = '';
    29. 

  29.     if ($email_address == '') $email_address = (defined('MODULE_PAYMENT_PAYPAL_DEBUG_EMAIL_ADDRESS') ? MODULE_PAYMENT_PAYPAL_DEBUG_EMAIL_ADDRESS : STORE_OWNER_EMAIL_ADDRESS);
    30. 

  30.     if(!isset($paypal_error_counter)) $paypal_error_counter = 0;
    31. 

  31.     if(!isset($paypal_instance_id)) $paypal_instance_id = time() . '_' . zen_create_random_value(4);
    32. 

  32.     if ((defined('MODULE_PAYMENT_PAYPALWPP_DEBUGGING') && MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log and Email') || (defined('MODULE_PAYMENT_PAYPAL_IPN_DEBUG') && MODULE_PAYMENT_PAYPAL_IPN_DEBUG == 'Log and Email') || $always_send) {
    33. 

  33.       $paypal_error_counter ++;
    34. 

  34.       zen_mail(STORE_OWNER, $email_address, $subjecttext . ' (' . $paypal_instance_id . ') #' . $paypal_error_counter, $message, STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS, array('EMAIL_MESSAGE_HTML'=>$message), 'debug');
    35. 

  35.     }
    36. 

  36.     if ((defined('MODULE_PAYMENT_PAYPAL_IPN_DEBUG') && (MODULE_PAYMENT_PAYPAL_IPN_DEBUG == 'Log and Email' || MODULE_PAYMENT_PAYPAL_IPN_DEBUG == 'Log File' || MODULE_PAYMENT_PAYPAL_IPN_DEBUG == 'Yes')) || (defined('MODULE_PAYMENT_PAYPALWPP_DEBUGGING') && (MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log File' || MODULE_PAYMENT_PAYPALWPP_DEBUGGING == 'Log and Email'))) $logfile = ipn_add_error_log($message, $paypal_instance_id);
    37. 

  37.     return $logfile;
    38. 

  38.   }
    39. 

  39. 

  40.   function ipn_get_stored_session($session_stuff) {
    41. 

  41.     global $db;
    42. 

  42.     if (!is_array($session_stuff)) {
    43. 

  43.       ipn_debug_email('IPN FATAL ERROR :: Could not find Zen Cart custom variable in POST, cannot validate or re-create session as a transaction initiated from this store. Might be from another source such as eBay or another PayPal store using this PayPal account.');
    44. 

  44.       return false;
    45. 

  45.     }
    46. 

  46.     $sql = "SELECT *
    47. 

  47.             FROM " . TABLE_PAYPAL_SESSION . "
    48. 

  48.             WHERE session_id = :sessionID";
    49. 

  49.     $sql = $db->bindVars($sql, ':sessionID', $session_stuff[1], 'string');
    50. 

  50.     $stored_session = $db->Execute($sql);
    51. 

  51.     if ($stored_session->recordCount() < 1) {
    52. 

  52.       global $isECtransaction, $isDPtransaction;
    53. 

  53.       if ($_POST['payment_type'] == 'instant' && $isDPtransaction && ((isset($_POST['auth_status']) && $_POST['auth_status'] == 'Completed') || $_POST['payment_status'] == 'Completed')) {
    54. 

  54.         $session_stuff[1] = '(EC/DP transaction)';
    55. 

  55.       }
    56. 

  56.       ipn_debug_email('IPN ERROR :: Could not find stored session {' . $session_stuff[1] . '} in DB; thus cannot validate or re-create session as a transaction awaiting PayPal Website Payments Standard confirmation initiated by this store. Might be an Express Checkout or eBay transaction or some other action that triggers PayPal IPN notifications.');
    57. 

  57.       return false;
    58. 

  58.     }
    59. 

  59.     $_SESSION = unserialize(base64_decode($stored_session->fields['saved_session']));
    60. 

  60.     return true;
    61. 

  61.   }
    62. 

  62. /**
    63. 

  63.  * look up parent/original transaction record data and return matching order info if found, along with txn_type
    64. 

  64.  */
    65. 

  65.   function ipn_lookup_transaction($postArray) {
    66. 

  66.     global $db;
    67. 

  67.     // find Zen Cart order number from the transactionID in the IPN
    68. 

  68.     $ordersID = 0;
    69. 

  69.     $paypalipnID = 0;
    70. 

  70.     $transType = 'unknown';
    71. 

  71. 

  72.     $sql = "SELECT order_id, paypal_ipn_id, payment_status, txn_type, pending_reason
    73. 

  73.                 FROM " . TABLE_PAYPAL . "
    74. 

  74.                 WHERE txn_id = :transactionID
    75. 

  75.                 ORDER BY order_id DESC LIMIT 1 ";
    76. 

  76.     $sqlParent = $db->bindVars($sql, ':transactionID', $postArray['parent_txn_id'], 'string');
    77. 

  77.     $sqlTxn = $db->bindVars($sql, ':transactionID', $postArray['txn_id'], 'string');
    78. 

  78.     if (isset($postArray['parent_txn_id']) && trim($postArray['parent_txn_id']) != '') {
    79. 

  79.       $ipn_id = $db->Execute($sqlParent);
    80. 

  80.       if($ipn_id->RecordCount() > 0) {
    81. 

  81.         ipn_debug_email('IPN NOTICE :: This transaction HAS a parent record. Thus this is an update of some sort.');
    82. 

  82.         $transType = ($ipn_id->fields['pending_reason'] == 'paymentreview') ? 'reviewed' : 'parent';
    83. 

  83.         $ordersID = $ipn_id->fields['order_id'];
    84. 

  84.         $paypalipnID = $ipn_id->fields['paypal_ipn_id'];
    85. 

  85.       }
    86. 

  86.     } else {
    87. 

  87.       $ipn_id = $db->Execute($sqlTxn);
    88. 

  88.       if ($ipn_id->RecordCount() <= 0) {
    89. 

  89.         ipn_debug_email('IPN NOTICE :: Could not find matched txn_id record in DB. Therefore is new to us. ');
    90. 

  90.         $transType = 'unique';
    91. 

  91.       } else {
    92. 

  92.         while(!$ipn_id->EOF) {
    93. 

  93.           switch ($ipn_id->fields['pending_reason']) {
    94. 

  94.             case 'address':
    95. 

  95.               ipn_debug_email('IPN NOTICE :: Found pending-address record in database');
    96. 

  96.               if ($postArray['payment_status'] == 'Completed') $transType = 'cleared-address';
    97. 

  97.               if ($postArray['payment_status'] == 'Denied')    $transType = 'denied-address';
    98. 

  98.               if ($postArray['payment_status'] == 'Pending')   $transType = 'pending-address';
    99. 

  99.             break;
    100. 

  100.             case 'multi_currency':
    101. 

  101.               ipn_debug_email('IPN NOTICE :: Found pending-multicurrency record in database');
    102. 

  102.               if ($postArray['payment_status'] == 'Completed') $transType = 'cleared-multicurrency';
    103. 

  103.               if ($postArray['payment_status'] == 'Denied')    $transType = 'denied-multicurrency';
    104. 

  104.               if ($postArray['payment_status'] == 'Pending')   $transType = 'pending-multicurrency';
    105. 

  105.             break;
    106. 

  106.             case 'echeck':
    107. 

  107.               ipn_debug_email('IPN NOTICE :: Found pending-echeck record in database');
    108. 

  108.               if ($postArray['payment_status'] == 'Completed') $transType = 'cleared-echeck';
    109. 

  109.               if ($postArray['payment_status'] == 'Completed' && $postArray['txn_type'] == 'web_accept') $transType = 'cleared-echeck';
    110. 

  110.               if ($postArray['payment_status'] == 'Denied')    $transType = 'denied-echeck';
    111. 

  111.               if ($postArray['payment_status'] == 'Failed')    $transType = 'failed-echeck';
    112. 

  112.               if ($postArray['payment_status'] == 'Pending')   $transType = 'pending-echeck';
    113. 

  113.             break;
    114. 

  114.             case 'authorization':
    115. 

  115.               ipn_debug_email('IPN NOTICE :: Found pending-authorization record in database');
    116. 

  116.               $transType = 'cleared-authorization';
    117. 

  117.               if ($postArray['payment_status'] == 'Voided') $transType = 'voided';
    118. 

  118.               if ($postArray['payment_status'] == 'Pending') $transType = 'pending-authorization';
    119. 

  119.               if ($postArray['payment_status'] == 'Captured') $transType = 'captured';
    120. 

  120.               if ($postArray['payment_status'] == 'Completed') $transType = 'cleared-authorization';
    121. 

  121.               if ($postArray['auth_status'] == 'In_Progress') $transType = 'partial-authorization';
    122. 

  122.             break;
    123. 

  123.             case 'verify':
    124. 

  124.               ipn_debug_email('IPN NOTICE :: Found pending-verify record in database');
    125. 

  125.               $transType = 'cleared-verify';
    126. 

  126.             break;
    127. 

  127.             case 'paymentreview':
    128. 

  128.               ipn_debug_email('IPN NOTICE :: Found pending-review record in database');
    129. 

  129.               $transType = 'pending-paymentreview';
    130. 

  130.               if ($postArray['payment_status'] == 'Completed') $transType = 'cleared-review';
    131. 

  131.             break;
    132. 

  132.             case 'intl':
    133. 

  133.               ipn_debug_email('IPN NOTICE :: Found pending-intl record in database');
    134. 

  134.               if ($postArray['payment_status'] == 'Completed') $transType = 'cleared-intl';
    135. 

  135.               if ($postArray['payment_status'] == 'Denied')    $transType = 'denied-intl';
    136. 

  136.               if ($postArray['payment_status'] == 'Pending')   $transType = 'pending-intl';
    137. 

  137.             break;
    138. 

  138.             case 'unilateral':
    139. 

  139.               ipn_debug_email('IPN NOTICE :: Found record in database.' . "\n" . '*** NOTE: TRANSACTION IS IN *unilateral* STATUS pending creation of a PayPal account for this receiver_email address.' . "\n" . 'Please create the account, or make sure the account is *Verified*.');
    140. 

  140.               $transType = 'pending-unilateral';
    141. 

  141.             break;
    142. 

  142.           }
    143. 

  143.           if ($transType != 'unknown') {
    144. 

  144.             $ordersID = $ipn_id->fields['order_id'];
    145. 

  145.             $paypalipnID = $ipn_id->fields['paypal_ipn_id'];
    146. 

  146.           }
    147. 

  147.           $ipn_id->MoveNext();
    148. 

  148.         }
    149. 

  149.       }
    150. 

  150.     }
    151. 

  151.     return array('order_id' => $ordersID, 'paypal_ipn_id' => $paypalipnID, 'txn_type' => $transType);
    152. 

  152.   }
    153. 

  153. /**
    154. 

  154.  * IPN Validation
    155. 

  155.  * - match email addresses
    156. 

  156.  * - ensure that "VERIFIED" has been returned (otherwise somebody is trying to spoof)
    157. 

  157.  */
    158. 

  158.   function ipn_validate_transaction($info, $postArray, $mode='IPN') {
    159. 

  159.     if ($mode == 'IPN' && !preg_match("/VERIFIED/i", $info) && !preg_match("/SUCCESS/i", $info)) {
    160. 

  160.       ipn_debug_email('IPN WARNING :: Transaction was NOT marked as VERIFIED. Keep this report for potential use in fraud investigations.' . "\n" . 'IPN Info: ' . "\n" . $info);
    161. 

  161.       return false;
    162. 

  162.     } elseif ($mode == 'PDT' && (!preg_match("/SUCCESS/i", $info) || preg_match("/FAIL/i", $info))) {
    163. 

  163.       ipn_debug_email('IPN WARNING :: PDT Transaction was NOT marked as SUCCESS. Keep this report for potential use in fraud investigations.' . "\n" . 'IPN Info: ' . "\n" . $info);
    164. 

  164.       return false;
    165. 

  165.     }
    166. 

  166.     $ppBusEmail = false;
    167. 

  167.     $ppRecEmail = false;
    168. 

  168.     if (defined('MODULE_PAYMENT_PAYPAL_BUSINESS_ID')) {
    169. 

  169.       if (strtolower(trim($postArray['business'])) == strtolower(trim(MODULE_PAYMENT_PAYPAL_BUSINESS_ID))) $ppBusEmail = true;
    170. 

  170.       if (strtolower(trim($postArray['receiver_email'])) == strtolower(trim(MODULE_PAYMENT_PAYPAL_BUSINESS_ID))) $ppRecEmail = true;
    171. 

  171.       if (!$ppBusEmail && !$ppRecEmail) {
    172. 

  172.         ipn_debug_email('IPN WARNING :: Transaction email address NOT matched.' . "\n" . 'From IPN = ' . $postArray['business'] . ' | ' . $postArray['receiver_email'] . "\n" . 'From CONFIG = ' .  MODULE_PAYMENT_PAYPAL_BUSINESS_ID);
    173. 

  173.         return false;
    174. 

  174.       }
    175. 

  175.       ipn_debug_email('IPN INFO :: Transaction email details.' . "\n" . 'From IPN = ' . $postArray['business'] . ' | ' . $postArray['receiver_email'] . "\n" . 'From CONFIG = ' .  MODULE_PAYMENT_PAYPAL_BUSINESS_ID);
    176. 

  176.     }
    177. 

  177.     return true;
    178. 

  178.   }
    179. 

  179. 

  180.   // determine acceptable currencies
    181. 

  181.   function select_pp_currency() {
    182. 

  182.     if (MODULE_PAYMENT_PAYPAL_CURRENCY == 'Selected Currency') {
    183. 

  183.       $my_currency = $_SESSION['currency'];
    184. 

  184.     } else {
    185. 

  185.       $my_currency = substr(MODULE_PAYMENT_PAYPAL_CURRENCY, 5);
    186. 

  186.     }
    187. 

  187.     $pp_currencies = array('CAD', 'EUR', 'GBP', 'JPY', 'USD', 'AUD', 'CHF', 'CZK', 'DKK', 'HKD', 'HUF', 'NOK', 'NZD', 'PLN', 'SEK', 'SGD', 'THB', 'MXN', 'ILS', 'PHP', 'TWD', 'BRL', 'MYR');
    188. 

  188.     if (!in_array($my_currency, $pp_currencies)) {
    189. 

  189.       $my_currency = 'USD';
    190. 

  190.     }
    191. 

  191.     return $my_currency;
    192. 

  192.   }
    193. 

  193. 

  194.   function valid_payment($amount, $currency, $mode = 'IPN') {
    195. 

  195.     global $currencies;
    196. 

  196.     $my_currency = select_pp_currency();
    197. 

  197.     $exchanged_amount = ($mode == 'IPN' ? ($amount * $currencies->get_value($my_currency)) : $amount);
    198. 

  198.     $transaction_amount = preg_replace('/[^0-9.]/', '', number_format($exchanged_amount, $currencies->get_decimal_places($my_currency), '.', ''));
    199. 

  199.     if ( ($_POST['mc_currency'] != $my_currency) || ($_POST['mc_gross'] != $transaction_amount && $_POST['mc_gross'] != -0.01) && MODULE_PAYMENT_PAYPAL_TESTING != 'Test' ) {
    200. 

  200.       ipn_debug_email('IPN WARNING :: Currency/Amount Mismatch.  Details: ' . "\n" . 'PayPal email address = ' . $_POST['business'] . "\n" . ' | mc_currency = ' . $_POST['mc_currency'] . "\n" . ' | submitted_currency = ' . $my_currency . "\n" . ' | order_currency = ' . $currency . "\n" . ' | mc_gross = ' . $_POST['mc_gross'] . "\n" . ' | converted_amount = ' . $transaction_amount . "\n" . ' | order_amount = ' . $amount );
    201. 

  201.       return false;
    202. 

  202.     }
    203. 

  203.     ipn_debug_email('IPN INFO :: Currency/Amount Details: ' . "\n" . 'PayPal email address = ' . $_POST['business'] . "\n" . ' | mc_currency = ' . $_POST['mc_currency'] . "\n" . ' | submitted_currency = ' . $my_currency . "\n" . ' | order_currency = ' . $currency . "\n" . ' | mc_gross = ' . $_POST['mc_gross'] . "\n" . ' | converted_amount = ' . $transaction_amount . "\n" . ' | order_amount = ' . $amount );
    204. 

  204.     return true;
    205. 

  205.   }
    206. 

  206. 

  207. /**
    208. 

  208.  *  is this an existing transaction?
    209. 

  209.  *    (1) we find a matching record in the "paypal" table
    210. 

  210.  *    (2) we check for valid txn_types or payment_status such as Denied, Refunded, Partially-Refunded, Reversed, Voided, Expired
    211. 

  211.  */
    212. 

  212.   function ipn_determine_txn_type($postArray, $txn_type = 'unknown') {
    213. 

  213.     global $db, $parentLookup;
    214. 

  214.     if (substr($txn_type,0,8) == 'cleared-') return $txn_type;
    215. 

  215.     if ($postArray['txn_type'] == 'send_money') return $postArray['txn_type'];
    216. 

  216.     if ($postArray['txn_type'] == 'express_checkout' || $postArray['txn_type'] == 'cart') $txn_type = $postArray['txn_type'];
    217. 

  217. // if it's not unique or linked to a parent, then:
    218. 

  218. // 1. could be an e-check denied / cleared
    219. 

  219. // 2. could be an express-checkout "pending" transaction which has been Accepted in the merchant's PayPal console and needs activation in Zen Cart
    220. 

  220.     if ($postArray['payment_status']=='Completed' && txn_type=='express_checkout' && $postArray['payment_type']=='echeck') {
    221. 

  221.       $txn_type = 'express-checkout-cleared';
    222. 

  222.       return $txn_type;
    223. 

  223.     }
    224. 

  224.     if ($postArray['payment_status']=='Completed' && $postArray['payment_type']=='echeck') {
    225. 

  225.       $txn_type = 'echeck-cleared';
    226. 

  226.       return $txn_type;
    227. 

  227.     }
    228. 

  228.     if (($postArray['payment_status']=='Denied' || $postArray['payment_status']=='Failed') && $postArray['payment_type']=='echeck') {
    229. 

  229.       $txn_type = 'echeck-denied';
    230. 

  230.       return $txn_type;
    231. 

  231.     }
    232. 

  232.     if ($postArray['payment_status']=='Denied') {
    233. 

  233.       $txn_type = 'denied';
    234. 

  234.       return $txn_type;
    235. 

  235.     }
    236. 

  236.     if (($postArray['payment_status']=='Pending') && $postArray['pending_reason']=='echeck') {
    237. 

  237.       $txn_type = 'pending-echeck';
    238. 

  238.       return $txn_type;
    239. 

  239.     }
    240. 

  240.     if (($postArray['payment_status']=='Pending') && $postArray['pending_reason']=='address') {
    241. 

  241.       $txn_type = 'pending-address';
    242. 

  242.       return $txn_type;
    243. 

  243.     }
    244. 

  244.     if (($postArray['payment_status']=='Pending') && $postArray['pending_reason']=='intl') {
    245. 

  245.       $txn_type = 'pending-intl';
    246. 

  246.       return $txn_type;
    247. 

  247.     }
    248. 

  248.     if (($postArray['payment_status']=='Pending') && $postArray['pending_reason']=='multi_currency') {
    249. 

  249.       $txn_type = 'pending-multicurrency';
    250. 

  250.       return $txn_type;
    251. 

  251.     }
    252. 

  252.     if (($postArray['payment_status']=='Pending') && $postArray['pending_reason']=='paymentreview') {
    253. 

  253.       $txn_type = 'pending-paymentreview';
    254. 

  254.       return $txn_type;
    255. 

  255.     }
    256. 

  256.     if (($postArray['payment_status']=='Pending') && $postArray['pending_reason']=='verify') {
    257. 

  257.       $txn_type = 'pending-verify';
    258. 

  258.       return $txn_type;
    259. 

  259.     }
    260. 

  260.     if ($parentLookup == 'parent' && $postArray['payment_status']=='Completed' && $postArray['payment_type']=='instant') {
    261. 

  261.       $txn_type = 'cleared-authorization';
    262. 

  262.       return $txn_type;
    263. 

  263.     }
    264. 

  264.     if (($postArray['payment_status']=='Voided') && $postArray['payment_type']=='instant') {
    265. 

  265.       $txn_type = 'voided';
    266. 

  266.       return $txn_type;
    267. 

  267.     }
    268. 

  268.     return $txn_type;
    269. 

  269.   }
    270. 

  270. /**
    271. 

  271.  * Create order record from IPN data
    272. 

  272.  */
    273. 

  273.   function ipn_create_order_array($new_order_id, $txn_type) {
    274. 

  274.     $sql_data_array = array('order_id' => $new_order_id,
    275. 

  275.                             'txn_type' => $txn_type,
    276. 

  276.                             'module_name' => 'paypal (ipn-handler)',
    277. 

  277.                             'module_mode' => 'IPN',
    278. 

  278.                             'reason_code' => $_POST['reason_code'],
    279. 

  279.                             'payment_type' => $_POST['payment_type'],
    280. 

  280.                             'payment_status' => $_POST['payment_status'],
    281. 

  281.                             'pending_reason' => $_POST['pending_reason'],
    282. 

  282.                             'invoice' => $_POST['invoice'],
    283. 

  283.                             'mc_currency' => $_POST['mc_currency'],
    284. 

  284.                             'first_name' => $_POST['first_name'],
    285. 

  285.                             'last_name' => $_POST['last_name'],
    286. 

  286.                             'payer_business_name' => $_POST['payer_business_name'],
    287. 

  287.                             'address_name' => $_POST['address_name'],
    288. 

  288.                             'address_street' => $_POST['address_street'],
    289. 

  289.                             'address_city' => $_POST['address_city'],
    290. 

  290.                             'address_state' => $_POST['address_state'],
    291. 

  291.                             'address_zip' => $_POST['address_zip'],
    292. 

  292.                             'address_country' => $_POST['address_country'],
    293. 

  293.                             'address_status' => $_POST['address_status'],
    294. 

  294.                             'payer_email' => $_POST['payer_email'],
    295. 

  295.                             'payer_id' => $_POST['payer_id'],
    296. 

  296.                             'payer_status' => $_POST['payer_status'],
    297. 

  297.                             'payment_date' => datetime_to_sql_format($_POST['payment_date']),
    298. 

  298.                             'business' => $_POST['business'],
    299. 

  299.                             'receiver_email' => $_POST['receiver_email'],
    300. 

  300.                             'receiver_id' => $_POST['receiver_id'],
    301. 

  301.                             'txn_id' => $_POST['txn_id'],
    302. 

  302.                             'parent_txn_id' => $_POST['parent_txn_id'],
    303. 

  303.                             'num_cart_items' => (int)$_POST['num_cart_items'],
    304. 

  304.                             'mc_gross' => $_POST['mc_gross'],
    305. 

  305.                             'mc_fee' => $_POST['mc_fee'],
    306. 

  306.                             'settle_amount' => (isset($_POST['settle_amount']) && $_POST['settle_amount'] != '' ? $_POST['settle_amount'] : 0),
    307. 

  307.                             'settle_currency' => $_POST['settle_currency'],
    308. 

  308.                             'exchange_rate' => (isset($_POST['exchange_rate']) && $_POST['exchange_rate'] != '' ? $_POST['exchange_rate'] : 1),
    309. 

  309.                             'notify_version' => $_POST['notify_version'],
    310. 

  310.                             'verify_sign' => $_POST['verify_sign'],
    311. 

  311.                             'date_added' => 'now()',
    312. 

  312.                             'memo' => '{Record generated by IPN}'
    313. 

  313.                              );
    314. 

  314.     if (isset($_POST['protection_eligibility']) && $_POST['protection_eligibility'] != '') $sql_data_array['memo'] .= ' [ProtectionEligibility:' . $_POST['protection_eligibility'] .']';
    315. 

  315.     if (isset($_POST['memo']) && $_POST['memo'] != '') $sql_data_array['memo'] .= ' [Customer Comments:' . $_POST['memo'] .']';
    316. 

  316.      return $sql_data_array;
    317. 

  317.   }
    318. 

  318. /**
    319. 

  319.  * Create order-history record from IPN data
    320. 

  320.  */
    321. 

  321.   function ipn_create_order_history_array($insert_id) {
    322. 

  322.     $sql_data_array = array ('paypal_ipn_id' => $insert_id,
    323. 

  323.                              'txn_id' => $_POST['txn_id'],
    324. 

  324.                              'parent_txn_id' => $_POST['parent_txn_id'],
    325. 

  325.                              'payment_status' => $_POST['payment_status'],
    326. 

  326.                              'pending_reason' => $_POST['pending_reason'],
    327. 

  327.                              'date_added' => 'now()'
    328. 

  328.                              );
    329. 

  329.     return $sql_data_array;
    330. 

  330.   }
    331. 

  331. /**
    332. 

  332.  * Create order-update from IPN data
    333. 

  333.  */
    334. 

  334.   function ipn_create_order_update_array($txn_type) {
    335. 

  335.     $sql_data_array = array('payment_type' => $_POST['payment_type'],
    336. 

  336.                             'txn_type' => $txn_type,
    337. 

  337.                             'parent_txn_id' => $_POST['parent_txn_id'],
    338. 

  338.                             'payment_status' => $_POST['payment_status'],
    339. 

  339.                             'pending_reason' => $_POST['pending_reason'],
    340. 

  340.                             'payer_email' => $_POST['payer_email'],
    341. 

  341.                             'payer_id' => $_POST['payer_id'],
    342. 

  342.                             'business' => $_POST['business'],
    343. 

  343.                             'receiver_email' => $_POST['receiver_email'],
    344. 

  344.                             'receiver_id' => $_POST['receiver_id'],
    345. 

  345.                             'notify_version' => $_POST['notify_version'],
    346. 

  346.                             'verify_sign' => $_POST['verify_sign'],
    347. 

  347.                             'last_modified' => 'now()'
    348. 

  348.                          );
    349. 

  349.     if (isset($_POST['address_street']) && $_POST['address_street'] != '')
    350. 

  350.        $sql_data_array = array_merge($sql_data_array,
    351. 

  351.                     array('address_name' => $_POST['address_name'],
    352. 

  352.                           'address_street' => $_POST['address_street'],
    353. 

  353.                           'address_city' => $_POST['address_city'],
    354. 

  354.                           'address_state' => $_POST['address_state'],
    355. 

  355.                           'address_zip' => $_POST['address_zip'],
    356. 

  356.                           'address_country' => $_POST['address_country']));
    357. 

  357.     if (isset($_POST['payer_business_name']) && $_POST['payer_business_name'] != '') $sql_data_array['payer_business_name'] = $_POST['payer_business_name'];
    358. 

  358.     if (isset($_POST['reason_code']) && $_POST['reason_code'] != '') $sql_data_array['reason_code'] = $_POST['reason_code'];
    359. 

  359.     if (isset($_POST['invoice']) && $_POST['invoice'] != '') $sql_data_array['invoice'] = $_POST['invoice'];
    360. 

  360.     if (isset($_POST['mc_gross']) && $_POST['mc_gross'] > 0) $sql_data_array['mc_gross'] = $_POST['mc_gross'];
    361. 

  361.     if (isset($_POST['mc_fee']) && $_POST['mc_fee'] > 0) $sql_data_array['mc_fee'] = $_POST['mc_fee'];
    362. 

  362.     if (isset($_POST['settle_amount']) && $_POST['settle_amount'] > 0) $sql_data_array['settle_amount'] = $_POST['settle_amount'];
    363. 

  363.     if (isset($_POST['first_name']) && $_POST['first_name'] != '') $sql_data_array['first_name'] = $_POST['first_name'];
    364. 

  364.     if (isset($_POST['last_name']) && $_POST['last_name'] != '') $sql_data_array['last_name'] = $_POST['last_name'];
    365. 

  365.     if (isset($_POST['mc_currency']) && $_POST['mc_currency'] != '') $sql_data_array['mc_currency'] = $_POST['mc_currency'];
    366. 

  366.     if (isset($_POST['settle_currency']) && $_POST['settle_currency'] != '') $sql_data_array['settle_currency'] = $_POST['settle_currency'];
    367. 

  367.     if (isset($_POST['num_cart_items']) && $_POST['num_cart_items'] > 0) $sql_data_array['num_cart_items'] = $_POST['num_cart_items'];
    368. 

  368.     if (isset($_POST['exchange_rate']) && $_POST['exchange_rate'] > 0) $sql_data_array['exchange_rate'] = $_POST['exchange_rate'];
    369. 

  369.     $sql_data_array['memo'] = '{Record generated by IPN}';
    370. 

  370.     if (isset($_POST['protection_eligibility']) && $_POST['protection_eligibility'] != '') $sql_data_array['memo'] .= ' [ProtectionEligibility:' . $_POST['protection_eligibility'] .']';
    371. 

  371.     if (isset($_POST['memo']) && $_POST['memo'] != '') $sql_data_array['memo'] .= ' [Customer Comments:' . $_POST['memo'] .']';
    372. 

  372.     return $sql_data_array;
    373. 

  373.   }
    374. 

  374. /**
    375. 

  375.  * Debug to file
    376. 

  376.  */
    377. 

  377.   function ipn_fopen($filename) {
    378. 

  378.     $response = '';
    379. 

  379.     $fp = @fopen($filename,'rb');
    380. 

  380.     if ($fp) {
    381. 

  381.       $response = getRequestBodyContents($fp);
    382. 

  382.       fclose($fp);
    383. 

  383.     }
    384. 

  384.     return $response;
    385. 

  385.   }
    386. 

  386.   function getRequestBodyContents(&$handle) {
    387. 

  387.     if ($handle) {
    388. 

  388.       while(!feof($handle)) {
    389. 

  389.         $line .= @fgets($handle, 1024);
    390. 

  390.       }
    391. 

  391.       return $line;
    392. 

  392.     }
    393. 

  393.     return false;
    394. 

  394.   }
    395. 

  395. /**
    396. 

  396.  * Verify IPN by sending it back to PayPal for confirmation
    397. 

  397.  */
    398. 

  398.   function ipn_postback($mode = 'IPN', $pdtTX = '') {
    399. 

  399.     $postdata = '';
    400. 

  400.     $postback = '';
    401. 

  401.     $postback_array = array();
    402. 

  402. 

  403.     //build postback string
    404. 

  404.     if ($mode == 'PDT') {
    405. 

  405.       if ($pdtTX == '') return FALSE; // TX value not supplied, therefore PDT is disabled on merchant's PayPal profile.
    406. 

  406.       ipn_debug_email('PDT PROCESSING INITIATED.' . "\n" . 'Preparing to verify transaction via PDT.' . "\n\n" . 'The TX token for verification is: ' . print_r($_GET, TRUE));
    407. 

  407.       $postback .= "cmd=_notify-synch";
    408. 

  408.       $postback .= "&tx=" . $_GET['tx'];
    409. 

  409.       $postback .= "&at=" . trim(MODULE_PAYMENT_PAYPAL_PDTTOKEN);
    410. 

  410.       $postback .= "&";
    411. 

  411.       $postback_array['cmd'] = "_notify-sync";
    412. 

  412.       $postback_array['tx'] = $_GET['tx'];
    413. 

  413.       $postback_array['at'] = substr(MODULE_PAYMENT_PAYPAL_PDTTOKEN, 0, 5) . '**********' . substr(MODULE_PAYMENT_PAYPAL_PDTTOKEN,-5);
    414. 

  414.     } elseif ($mode == 'IPN') {
    415. 

  415.       $postback .= "cmd=_notify-validate";
    416. 

  416.       $postback .= "&";
    417. 

  417.       $postback_array['cmd'] = "_notify-validate";
    418. 

  418.     }
    419. 

  419.     foreach($_POST as $key=>$value) {
    420. 

  420.       $postdata .= $key . "=" . urlencode(stripslashes($value)) . "&";
    421. 

  421.       $postback .= $key . "=" . urlencode(stripslashes($value)) . "&";
    422. 

  422.       $postback_array[$key] = $value;
    423. 

  423.     }
    424. 

  424.     if (substr($postdata, -2) == '=&') {
    425. 

  425.       ipn_debug_email('IPN NOTICE :: No POST data to process -- Bad IPN data');
    426. 

  426.       return $postdata;
    427. 

  427.     }
    428. 

  428.     $postback = rtrim($postback, '&');
    429. 

  429.     $postdata = rtrim($postdata, '&');
    430. 

  430.     $postdata_array = $_POST;
    431. 

  431.     ksort($postdata_array);
    432. 

  432. 

  433.     if ($mode == 'IPN') {
    434. 

  434.       ipn_debug_email('IPN INFO - POST VARS received (sorted):' . "\n" . stripslashes(urldecode(print_r($postdata_array, true))));
    435. 

  435.       if (sizeof($postdata_array) == 0) die('Nothing to process. Please return to home page.');
    436. 

  436.     }
    437. 

  437. 

  438.     // send received data back to PayPal for validation
    439. 

  439.     $scheme = 'http://';
    440. 

  440.     //Parse url
    441. 

  441.     $web = parse_url($scheme . (defined('MODULE_PAYMENT_PAYPAL_HANDLER') ? MODULE_PAYMENT_PAYPAL_HANDLER : 'www.paypal.com/cgi-bin/webscr'));
    442. 

  442.     if (isset($_POST['test_ipn']) && $_POST['test_ipn'] == 1) {
    443. 

  443.       $web = parse_url($scheme . 'www.sandbox.paypal.com/cgi-bin/webscr');
    444. 

  444.     }
    445. 

  445.     //Set the port number
    446. 

  446.     if($web['scheme'] == "https") {
    447. 

  447.       $web['port']="443";  $ssl = "ssl://";
    448. 

  448.     } else {
    449. 

  449.       $web['port']="80";   $ssl = "";
    450. 

  450.     }
    451. 

  451. 

  452.     $result = '';
    453. 

  453.     if (function_exists('curl_init')) {
    454. 

  454.       $result = doPayPalIPNCurlPostback($web, $postback, $postback_array, $mode);
    455. 

  455.     }
    456. 

  456.     if ($mode == 'PDT') {
    457. 

  457.       $info = $result['info'];
    458. 

  458.       $result = $result['status'];
    459. 

  459.     }
    460. 

  460.     //DEBUG ONLY: ipn_debug_email('After CURL: $result='.$result);
    461. 

  461.     if (!in_array(trim($result), array('VERIFIED', 'SUCCESS', 'INVALID', 'FAIL'))) {
    462. 

  462.       ipn_debug_email('IPN NOTICE: Could not get usable response via CURL. Trying fsockopen() as fallback.' . ($result != '' ? ' ['.$result.']' : ''));
    463. 

  463.       $result = doPayPalIPNFsockopenPostback($web, $postback, $postback_array, $ssl, $mode);
    464. 

  464.       if ($mode == 'PDT') {
    465. 

  465.         $info = $result['info'];
    466. 

  466.         $result = $result['status'];
    467. 

  467.       }
    468. 

  468.     }
    469. 

  469.     return ($mode == 'PDT') ? array('status' => $result, 'info' => $info) : trim($result);
    470. 

  470.   }
    471. 

  471. 

  472.   function doPayPalIPNFsockopenPostback($web, $postback, $postback_array, $ssl, $mode = 'IPN') {
    473. 

  473.     $header  = "POST " . $web['path'] . " HTTP/1.1\r\n";
    474. 

  474.     $header .= "Host: " . $web['host'] . "\r\n";
    475. 

  475.     $header .= "Content-type: application/x-www-form-urlencoded\r\n";
    476. 

  476.     $header .= "Content-length: " . strlen($postback) . "\r\n";
    477. 

  477.     $header .= "Connection: close\r\n\r\n";
    478. 

  478.     $errnum = 0;
    479. 

  479.     $errstr = '';
    480. 

  480. 

  481.     ipn_debug_email('IPN INFO - POST VARS to be sent back (unsorted) for validation (using fsockopen): ' . "\n" . 'To: ' . $ssl . $web['host'] . ':' . $web['port'] . "\n" . $header . stripslashes(print_r($postback_array, true)));
    482. 

  482. 

  483.     //Create paypal connection
    484. 

  484.     if (MODULE_PAYMENT_PAYPAL_IPN_DEBUG == 'Yes') {
    485. 

  485.       $fp=fsockopen($ssl . $web['host'], $web['port'], $errnum, $errstr, 30);
    486. 

  486.     } else {
    487. 

  487.       $fp=@fsockopen($ssl . $web['host'], $web['port'], $errnum, $errstr, 30);
    488. 

  488.     }
    489. 

  489.     if(!$fp && $ssl == 'ssl://') {
    490. 

  490.       ipn_debug_email('IPN ERROR :: Could not establish fsockopen: ' . "\n" . 'Host Details = ' . $ssl . $web['host'] . ':' . $web['port'] . ' (' . $errnum . ') ' . $errstr . "\n Trying again with HTTPS over 443 ...");
    491. 

  491.       $ssl = 'https://';
    492. 

  492.       $web['port'] = '443';
    493. 

  493.       $fp=@fsockopen($ssl . $web['host'], $web['port'], $errnum, $errstr, 30);
    494. 

  494.     }
    495. 

  495.     if(!$fp && $ssl == 'https://') {
    496. 

  496.       ipn_debug_email('IPN ERROR :: Could not establish fsockopen: ' . "\n" . 'Host Details = ' . $ssl . $web['host'] . ':' . $web['port'] . ' (' . $errnum . ') ' . $errstr . "\n Trying again directly over 443 ...");
    497. 

  497.       $ssl = '';
    498. 

  498.       $web['port'] = '443';
    499. 

  499.       $fp=@fsockopen($ssl . $web['host'], $web['port'], $errnum, $errstr, 30);
    500. 

  500.     }
    501. 

  501.     if(!$fp) {
    502. 

  502.       ipn_debug_email('IPN ERROR :: Could not establish fsockopen: ' . "\n" . 'Host Details = ' . $ssl . $web['host'] . ':' . $web['port'] . ' (' . $errnum . ') ' . $errstr . "\n Trying again with HTTP over port 80 ...");
    503. 

  503.       $ssl = 'http://';
    504. 

  504.       $web['port'] = '80';
    505. 

  505.       $fp=@fsockopen($ssl . $web['host'], $web['port'], $errnum, $errstr, 30);
    506. 

  506.     }
    507. 

  507.     if(!$fp) {
    508. 

  508.       ipn_debug_email('IPN ERROR :: Could not establish fsockopen: ' . "\n" . 'Host Details = ' . $ssl . $web['host'] . ':' . $web['port'] . ' (' . $errnum . ') ' . $errstr . "\n Trying again without any specified protocol, using port 80 ...");
    509. 

  509.       $ssl = '';
    510. 

  510.       $web['port'] = '80';
    511. 

  511.       $fp=@fsockopen($ssl . $web['host'], $web['port'], $errnum, $errstr, 30);
    512. 

  512.     }
    513. 

  513.     if(!$fp) {
    514. 

  514.       ipn_debug_email('IPN FATAL ERROR :: Could not establish fsockopen. ' . "\n" . 'Host Details = ' . $ssl . $web['host'] . ':' . $web['port'] . ' (' . $errnum . ') ' . $errstr . "\nABORTED.");
    515. 

  515.       die();
    516. 

  516.     }
    517. 

  517.     $info = array();
    518. 

  518.     fputs($fp, $header . $postback . "\r\n\r\n");
    519. 

  519.     $header_data = '';
    520. 

  520.     $headerdone = false;
    521. 

  521.     //loop through the response from the server
    522. 

  522.     while(!feof($fp)) {
    523. 

  523.       $line = @fgets($fp, 1024);
    524. 

  524.       if (strcmp($line, "\r\n") == 0) {
    525. 

  525.         // this is a header row
    526. 

  526.         $headerdone = true;
    527. 

  527.         $header_data .= $line;
    528. 

  528.       } else if ($headerdone) {
    529. 

  529.         // header has been read. now read the contents
    530. 

  530.         $info[] = $line;
    531. 

  531.       }
    532. 

  532.     }
    533. 

  533.     //close $fp - we are done with it
    534. 

  534.     fclose($fp);
    535. 

  535.     //break up results into a string
    536. 

  536.     $info = implode("", $info);
    537. 

  537.     $firstline = trim(substr($info, 0, 20));
    538. 

  538.     $status = '';
    539. 

  539.     if ($status == '' && substr($firstline, 0, 8) == 'VERIFIED') $status = 'VERIFIED';
    540. 

  540.     if ($status == '' && substr($firstline, 0, 7) == 'SUCCESS') $status = 'SUCCESS';
    541. 

  541.     if ($status == '' && substr($firstline, 0, 4) == 'FAIL') $status = 'FAIL';
    542. 

  542.     if ($status == '' && substr($firstline, 0, 7) == 'INVALID') $status = 'INVALID';
    543. 

  543.     if ($status == '' && substr($firstline, 0, 12) == 'UNDETERMINED') $status = 'UNDETERMINED';
    544. 

  544.     ipn_debug_email('IPN INFO (fs) - Confirmation/Validation response ' . ($status != '' ? $status : $header_data . $info));
    545. 

  545. 

  546.     return ($mode == 'PDT') ? array('status' => $status, 'info' => $info) : $status;
    547. 

  547.   }
    548. 

  548. 

  549.   function doPayPalIPNCurlPostback($url, $vars, $varsArray, $mode = 'IPN') {
    550. 

  550.     ipn_debug_email('IPN INFO - POST VARS to be sent back (unsorted) for validation (using CURL): ' . "\n" . 'To: ' . $url['host'] . ':' . $url['port'] . "\n" . stripslashes(print_r($varsArray, true)));
    551. 

  551.     $curlOpts = array(CURLOPT_URL => 'https://' . $url['host'] . $url['path'],
    552. 

  552.                       CURLOPT_POST => TRUE,
    553. 

  553.                       CURLOPT_POSTFIELDS => $vars,
    554. 

  554.                       CURLOPT_TIMEOUT => 45,
    555. 

  555.                       CURLOPT_CONNECTTIMEOUT => 30,
    556. 

  556.                       CURLOPT_VERBOSE => FALSE,
    557. 

  557.                       CURLOPT_HEADER => FALSE,
    558. 

  558.                       CURLOPT_FOLLOWLOCATION => FALSE,
    559. 

  559.                       CURLOPT_RETURNTRANSFER => TRUE,
    560. 

  560.                       CURLOPT_SSL_VERIFYPEER => FALSE,
    561. 

  561.                       CURLOPT_SSL_VERIFYHOST => 2,
    562. 

  562.                       CURLOPT_FORBID_REUSE => TRUE,
    563. 

  563.                       CURLOPT_FRESH_CONNECT => TRUE,
    564. 

  564.                       CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
    565. 

  565.                       CURLOPT_USERAGENT => 'Zen Cart(tm) - IPN Postback',
    566. 

  566.                       );
    567. 

  567.     if (CURL_PROXY_REQUIRED == 'True') {
    568. 

  568.       $proxy_tunnel_flag = (defined('CURL_PROXY_TUNNEL_FLAG') && strtoupper(CURL_PROXY_TUNNEL_FLAG) == 'FALSE') ? false : true;
    569. 

  569.       $curlOpts[CURLOPT_HTTPPROXYTUNNEL] = $proxy_tunnel_flag;
    570. 

  570.       $curlOpts[CURLOPT_PROXYTYPE] = CURLPROXY_HTTP;
    571. 

  571.       $curlOpts[CURLOPT_PROXY] = CURL_PROXY_SERVER_DETAILS;
    572. 

  572.     }
    573. 

  573.     $ch = curl_init();
    574. 

  574.     curl_setopt_array($ch, $curlOpts);
    575. 

  575.     $response = curl_exec($ch);
    576. 

  576.     $commError = curl_error($ch);
    577. 

  577.     $commErrNo = curl_errno($ch);
    578. 

  578.     $commInfo = @curl_getinfo($ch);
    579. 

  579.     curl_close($ch);
    580. 

  580. 

  581.     $errors = ($commErrNo != 0 ? "CURL communication ERROR: (" . $commErrNo . ') ' . $commError : '');
    582. 

  582.     $response .= ($commErrNo != 0 ? '&CURL_ERRORS=' . urlencode('(' . $commErrNo . ') ' . $commError) : '') ;
    583. 

  583. //    $response .=  ($commErrNo != 0 ? '&CURL_INFO=' . urlencode($commInfo) : '');
    584. 

  584. 

  585.     ipn_debug_email('CURL OPTS: ' . print_r($curlOpts, true));
    586. 

  586.     ipn_debug_email('CURL response: ' . $response);
    587. 

  587. 

  588.     if ($errors != '') {
    589. 

  589.       ipn_debug_email('CURL errors: ' . $errors, print_r($commInfo, true));
    590. 

  590.     }
    591. 

  591.     //echo 'INFO: <pre>'; print_r($commInfo); echo '</pre><br />';
    592. 

  592.     //echo 'ERROR: ' . $errors . '<br />';
    593. 

  593.     //print_r($response) ;
    594. 

  594. 

  595.     if (($response == '' || $errors != '') && ($url['scheme'] != 'http')) {
    596. 

  596.       $url['scheme'] = 'http';
    597. 

  597.       $url['port'] = '80';
    598. 

  598.       ipn_debug_email('CURL ERROR: ' . $errors . "\n" . 'Trying direct HTTP on port 80 instead ... ' . $url['scheme'] . '://' . $url['host'] . $url['path'] . "\n");
    599. 

  599.       $ch = curl_init();
    600. 

  600.       $curlOpts[CURLOPT_URL] = $url['scheme'] . '://' . $url['host'] . $url['path'];
    601. 

  601.       $curlOpts[CURLOPT_FOLLOWLOCATION] = TRUE; // allow to follow redirects since PP usually redirects all non-SSL to SSL etc, do a redirect is almost certain to occur
    602. 

  602.       curl_setopt_array($ch, $curlOpts);
    603. 

  603.       curl_setopt($ch, CURLOPT_PORT, $url['port']);
    604. 

  604.       $response = curl_exec($ch);
    605. 

  605.       $commError = curl_error($ch);
    606. 

  606.       $commErrNo = curl_errno($ch);
    607. 

  607.       $commInfo = @curl_getinfo($ch);
    608. 

  608.       curl_close($ch);
    609. 

  609.       ipn_debug_email('CURL OPTS: ' . print_r($curlOpts, true));
    610. 

  610.       ipn_debug_email('CURL response: ' . $response);
    611. 

  611.       $errors = ($commErrNo != 0 ? "\n(" . $commErrNo . ') ' . $commError : '');
    612. 

  612.       if ($errors != '') {
    613. 

  613.         ipn_debug_email (nl2br('CURL ERROR: ' . $errors . "\n" . 'ABORTING CURL METHOD ...' . "\n\n"));
    614. 

  614.       }
    615. 

  615.     }
    616. 

  616.     $firstline = trim(substr($response, 0, 20));
    617. 

  617.     $status = '';
    618. 

  618.     if ($status == '' && substr($firstline, 0, 8) == 'VERIFIED') $status = 'VERIFIED';
    619. 

  619.     if ($status == '' && substr($firstline, 0, 7) == 'SUCCESS') $status = 'SUCCESS';
    620. 

  620.     if ($status == '' && substr($firstline, 0, 4) == 'FAIL') $status = 'FAIL';
    621. 

  621.     if ($status == '' && substr($firstline, 0, 7) == 'INVALID') $status = 'INVALID';
    622. 

  622.     if ($status == '' && substr($firstline, 0, 12) == 'UNDETERMINED') $status = 'UNDETERMINED';
    623. 

  623.     ipn_debug_email('IPN INFO (cl) - Confirmation/Validation response ' . ($status != '' ? $status : $response));
    624. 

  624. 

  625.     if ($response != '') {
    626. 

  626.       return ($mode == 'PDT') ? array('status' => $status, 'info' => $response) : $response;
    627. 

  627. 

  628.     } else {
    629. 

  629.       return $errors;
    630. 

  630.     }
    631. 

  631.   }
    632. 

  632. 

  633. /**
    634. 

  634.  * Write order-history update to ZC tables denoting the update supplied by the IPN
    635. 

  635.  */
    636. 

  636.   function ipn_update_orders_status_and_history($ordersID, $new_status = 1, $txn_type) {
    637. 

  637.     global $db;
    638. 

  638.     ipn_debug_email('IPN NOTICE :: Updating order #' . (int)$ordersID . ' to status: ' . (int)$new_status . ' (txn_type: ' . $txn_type . ')');
    639. 

  639.     $db->Execute("update " . TABLE_ORDERS  . "
    640. 

  640.                   set orders_status = '" . (int)$new_status . "'
    641. 

  641.                   where orders_id = '" . (int)$ordersID . "'");
    642. 

    643. 

  643.     $sql_data_array = array('orders_id' => (int)$ordersID,
    644. 

  644.                             'orders_status_id' => (int)$new_status,
    645. 

  645.                             'date_added' => 'now()',
    646. 

  646.                             'comments' => 'PayPal status: ' . $_POST['payment_status'] . ' ' . ' @ ' . $_POST['payment_date'] . (($_POST['parent_txn_id'] !='') ? "\n" . ' Parent Trans ID:' . $_POST['parent_txn_id'] : '') . "\n" . ' Trans ID:' . $_POST['txn_id'] . "\n" . ' Amount: ' . $_POST['mc_gross'] . ' ' . $_POST['mc_currency'],
    647. 

  647.                             'customer_notified' => false
    648. 

  648.                            );
    649. 

  649.     zen_db_perform(TABLE_ORDERS_STATUS_HISTORY, $sql_data_array);
    650. 

  650.     ipn_debug_email('IPN NOTICE :: Update complete.');
    651. 

  651. 

  652. /**
    653. 

  653.  * Activate any downloads associated with an order which has now been cleared
    654. 

  654.  */
    655. 

  655.     if ($txn_type=='echeck-cleared' || $txn_type == 'express-checkout-cleared' || substr($txn_type,0,8) == 'cleared-') {
    656. 

  656.       $check_status = $db->Execute("select date_purchased from " . TABLE_ORDERS . " where orders_id = '" . (int)$ordersID . "'");
    657. 

  657.       $zc_max_days = zen_date_diff($check_status->fields['date_purchased'], date('Y-m-d H:i:s', time())) + (int)DOWNLOAD_MAX_DAYS;
    658. 

  658.       ipn_debug_email('IPN NOTICE :: Updating order #' . (int)$ordersID . ' downloads (if any).  New max days: ' . (int)$zc_max_days . ', New count: ' . (int)DOWNLOAD_MAX_COUNT);
    659. 

  659.       $update_downloads_query = "update " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " set download_maxdays='" . (int)$zc_max_days . "', download_count='" . (int)DOWNLOAD_MAX_COUNT . "' where orders_id='" . (int)$ordersID . "'";
    660. 

  660.       $db->Execute($update_downloads_query);
    661. 

  661.     }
    662. 

  662.   }
    663. 

  663. 

  664.   /**
    665. 

  665.    * Prepare subtotal and line-item detail content to send to PayPal
    666. 

  666.    */
    667. 

  667.   function ipn_getLineItemDetails() {
    668. 

  668.     global $order, $currencies, $order_totals, $order_total_modules;
    669. 

  669. 

  670.     // if not default currency, do not send subtotals or line-item details
    671. 

  671.     if (DEFAULT_CURRENCY != $order->info['currency']) {
    672. 

  672.       ipn_logging('getLineItemDetails 1', 'Not using default currency. Thus, no line-item details can be submitted.');
    673. 

  673.       return array();
    674. 

  674.     }
    675. 

  675.     if ($currencies->currencies[$_SESSION['currency']]['value'] != 1 || $currencies->currencies[$order->info['currency']]['value'] != 1) {
    676. 

  676.       ipn_logging('getLineItemDetails 2', 'currency val not equal to 1.0000 - cannot proceed without coping with currency conversions. Aborting line-item details.');
    677. 

  677.       return array();
    678. 

  678.     }
    679. 

  679. 

  680.     $optionsST = array();
    681. 

  681.     $optionsLI = array();
    682. 

  682.     $optionsNB = array();
    683. 

  683.     $numberOfLineItemsProcessed = 0;
    684. 

  684.     $creditsApplied = 0;
    685. 

  685.     $surcharges = 0;
    686. 

  686.     $sumOfLineItems = 0;
    687. 

  687.     $sumOfLineTax = 0;
    688. 

  688.     $optionsST['amount'] = 0;
    689. 

  689.     $optionsST['subtotal'] = 0;
    690. 

  690.     $optionsST['tax_cart'] = 0;
    691. 

  691.     $optionsST['shipping'] = 0;
    692. 

  692.     $flagSubtotalsUnknownYet = true;
    693. 

  693.     $subTotalLI = 0;
    694. 

  694.     $subTotalTax = 0;
    695. 

  695.     $subTotalShipping = 0;
    696. 

  696.     $subtotalPRE = array('no data');
    697. 

  697. 

  698.     if (sizeof($order_totals)) {
    699. 

  699.       // prepare subtotals
    700. 

  700.       for ($i=0, $n=sizeof($order_totals); $i<$n; $i++) {
    701. 

  701.         if ($order_totals[$i]['code'] == '') continue;
    702. 

  702.         if (in_array($order_totals[$i]['code'], array('ot_total','ot_subtotal','ot_tax','ot_shipping')) || strstr($order_totals[$i]['code'], 'insurance')) {
    703. 

  703.           if ($order_totals[$i]['code'] == 'ot_shipping') $optionsST['shipping'] = round($order_totals[$i]['value'],2);
    704. 

  704.           if ($order_totals[$i]['code'] == 'ot_total')    $optionsST['amount']   = round($order_totals[$i]['value'],2);
    705. 

  705.           if ($order_totals[$i]['code'] == 'ot_tax')      $optionsST['tax_cart'] = round($order_totals[$i]['value'],2);
    706. 

  706.           if ($order_totals[$i]['code'] == 'ot_subtotal') $optionsST['subtotal'] = round($order_totals[$i]['value'],2);
    707. 

  707.         } else {
    708. 

  708.           // handle other order totals:
    709. 

  709.           global $$order_totals[$i]['code'];
    710. 

  710.           if ((substr($order_totals[$i]['text'], 0, 1) == '-') || (isset($$order_totals[$i]['code']->credit_class) && $$order_totals[$i]['code']->credit_class == true)) {
    711. 

  711.             // handle credits
    712. 

  712.             $creditsApplied += round($order_totals[$i]['value'], 2);
    713. 

  713.           } else {
    714. 

  714.             // treat all other OT's as if they're related to handling fees or other extra charges to be added/included
    715. 

  715.             $surcharges += $order_totals[$i]['value'];
    716. 

  716.           }
    717. 

  717.         }
    718. 

  718.       }
    719. 

  719. 

  720.       if ($creditsApplied > 0) $optionsST['subtotal'] -= $creditsApplied;
    721. 

  721.       if ($surcharges > 0) $optionsST['subtotal'] += $surcharges;
    722. 

  722. 

  723.       $optionsNB['creditsExist'] = ($creditsApplied > 0) ? TRUE : FALSE;
    724. 

  724. 

  725.       // Handle tax-included scenario
    726. 

  726.       if (DISPLAY_PRICE_WITH_TAX == 'true') $optionsST['tax_cart'] = 0;
    727. 

  727. 

  728.       $subtotalPRE = $optionsST;
    729. 

  729.       // Move shipping tax amount from Tax subtotal into Shipping subtotal for submission to PayPal, since PayPal applies tax to each line-item individually
    730. 

  730.       $module = strpos($_SESSION['shipping']['id'], '_') > 0 ? substr($_SESSION['shipping']['id'], 0, strpos($_SESSION['shipping']['id'], '_')) : $_SESSION['shipping'];
    731. 

  731.       if (isset($GLOBALS[$module]) && zen_not_null($order->info['shipping_method']) && DISPLAY_PRICE_WITH_TAX != 'true') {
    732. 

  732.         if ($GLOBALS[$module]->tax_class > 0) {
    733. 

  733.           $shipping_tax_basis = (!isset($GLOBALS[$module]->tax_basis)) ? STORE_SHIPPING_TAX_BASIS : $GLOBALS[$module]->tax_basis;
    734. 

  734.           $shippingOnBilling = zen_get_tax_rate($GLOBALS[$module]->tax_class, $order->billing['country']['id'], $order->billing['zone_id']);
    735. 

  735.           $shippingOnDelivery = zen_get_tax_rate($GLOBALS[$module]->tax_class, $order->delivery['country']['id'], $order->delivery['zone_id']);
    736. 

  736.           if ($shipping_tax_basis == 'Billing') {
    737. 

  737.             $shipping_tax = $shippingOnBilling;
    738. 

  738.           } elseif ($shipping_tax_basis == 'Shipping') {
    739. 

  739.             $shipping_tax = $shippingOnDelivery;
    740. 

  740.           } else {
    741. 

  741.             if (STORE_ZONE == $order->billing['zone_id']) {
    742. 

  742.               $shipping_tax = $shippingOnBilling;
    743. 

  743.             } elseif (STORE_ZONE == $order->delivery['zone_id']) {
    744. 

  744.               $shipping_tax = $shippingOnDelivery;
    745. 

  745.             } else {
    746. 

  746.               $shipping_tax = 0;
    747. 

  747.             }
    748. 

  748.           }
    749. 

  749.           $taxAdjustmentForShipping = zen_calculate_tax($order->info['shipping_cost'], $shipping_tax);
    750. 

  750.           $optionsST['shipping'] += $taxAdjustmentForShipping;
    751. 

  751.           $optionsST['tax_cart'] -= $taxAdjustmentForShipping;
    752. 

  752.         }
    753. 

  753.       }
    754. 

  754.       $flagSubtotalsUnknownYet = (($optionsST['shipping'] + $optionsST['amount'] + $optionsST['tax_cart'] + $optionsST['subtotal']) == 0);
    755. 

  755.     } else {
    756. 

  756.       // if we get here, we don't have any order-total information yet because the customer has clicked Express before starting normal checkout flow
    757. 

  757.       // thus, we must make a note to manually calculate subtotals, rather than relying on the more robust order-total infrastructure
    758. 

  758.       $flagSubtotalsUnknownYet = TRUE;
    759. 

  759.     }
    760. 

  760. 

  761.     // loop thru all products to prepare details of quantity and price.
    762. 

  762.     for ($i=0, $n=sizeof($order->products), $k=1; $i<$n; $i++, $k++) {
    763. 

  763.       // PayPal won't accept zero-value line-items, so skip this entry if price is zero
    764. 

  764.       if ($order->products[$i]['final_price'] == 0) continue;
    765. 

  765. 

  766.       $optionsLI["item_number_$k"] = $order->products[$i]['model'];
    767. 

  767.       $optionsLI["item_name_$k"]   = $order->products[$i]['name'];
    768. 

  768.       // Append *** if out-of-stock.
    769. 

  769.       $optionsLI["item_name_$k"]  .= ((zen_get_products_stock($order->products[$i]['id']) - $order->products[$i]['qty']) < 0 ? STOCK_MARK_PRODUCT_OUT_OF_STOCK : '');
    770. 

  770.       // if there are attributes, loop thru them and add to description
    771. 

  771.       if (isset($order->products[$i]['attributes']) && sizeof($order->products[$i]['attributes']) > 0 ) {
    772. 

  772.         $optionsLI["item_name_$k"] = '';
    773. 

  773.         for ($j=0, $n2=sizeof($order->products[$i]['attributes']); $j<$n2; $j++) {
    774. 

  774.           $optionsLI["item_name_$k"] .= "\n " . $order->products[$i]['attributes'][$j]['option'] .
    775. 

  775.                                         ': ' . $order->products[$i]['attributes'][$j]['value'];
    776. 

  776.         } // end loop
    777. 

  777.       } // endif attribute-info
    778. 

  778. 

  779.       // PayPal can't handle partial-quantity values, so fudge it here
    780. 

  780.       if ($order->products[$i]['qty'] != (int)$order->products[$i]['qty']) {
    781. 

  781.         $optionsLI["item_name_$k"] = '('.$order->products[$i]['qty'].' x ) ' . $optionsLI["item_name_$k"];
    782. 

  782.         $optionsLI["amount_$k"] = ($order->products[$i]['qty'] * $order->products[$i]['final_price']);
    783. 

  783.         $optionsLI["tax_$k"] = zen_calculate_tax($order->products[$i]['qty'] * $order->products[$i]['final_price'], $order->products[$i]['tax']);
    784. 

  784.         $optionsLI["quantity_$k"] = 1;
    785. 

  785.       } else {
    786. 

  786.         $optionsLI["amount_$k"] = $order->products[$i]['final_price'];
    787. 

  787.         $optionsLI["quantity_$k"] = $order->products[$i]['qty'];
    788. 

  788.         $optionsLI["tax_$k"] = zen_calculate_tax(1 * $order->products[$i]['final_price'], $order->products[$i]['tax']);
    789. 

  789.       }
    790. 

  790. 

  791.       // For tax-included pricing, combine tax with price instead of treating separately:
    792. 

  792.       if (DISPLAY_PRICE_WITH_TAX == 'true') {
    793. 

  793.         $optionsLI["amount_$k"] += $optionsLI["tax_$k"];
    794. 

  794.         $optionsLI["tax_$k"] = 0;
    795. 

  795.       }
    796. 

  796.       $subTotalLI += ($optionsLI["quantity_$k"] * $optionsLI["amount_$k"]);
    797. 

  797.       $subTotalTax += ($optionsLI["quantity_$k"] * $optionsLI["tax_$k"]);
    798. 

  798. 

  799.       // add line-item for one-time charges on this product
    800. 

  800.       if ($order->products[$i]['onetime_charges'] != 0 ) {
    801. 

  801.         $k++;
    802. 

  802.         $optionsLI["item_name_$k"]   = MODULES_PAYMENT_PAYPALSTD_LINEITEM_TEXT_ONETIME_CHARGES_PREFIX . substr(htmlentities($order->products[$i]['name'], ENT_QUOTES, 'UTF-8'), 0, 120);
    803. 

  803.         $optionsLI["amount_$k"]    = $order->products[$i]['onetime_charges'];
    804. 

  804.         $optionsLI["quantity_$k"]    = 1;
    805. 

  805.         $optionsLI["tax_$k"] = zen_calculate_tax($order->products[$i]['onetime_charges'], $order->products[$i]['tax']);
    806. 

  806.         $subTotalLI += $order->products[$i]['onetime_charges'];
    807. 

  807.         $subTotalTax += $optionsLI["tax_$k"];
    808. 

  808.       }
    809. 

  809.       $numberOfLineItemsProcessed = $k;
    810. 

  810.     }  // end for loopthru all products
    811. 

  811. 

  812.     // add line items for any surcharges added by order-total modules
    813. 

  813.     if ($surcharges > 0) {
    814. 

  814.       $numberOfLineItemsProcessed++;
    815. 

  815.       $k = $numberOfLineItemsProcessed;
    816. 

  816.       $optionsLI["item_name_$k"]   = MODULES_PAYMENT_PAYPALSTD_LINEITEM_TEXT_SURCHARGES_SHORT;
    817. 

  817.       $optionsLI["amount_$k"]    = $surcharges;
    818. 

  818.       $optionsLI["quantity_$k"]    = 1;
    819. 

  819.       $subTotalLI += $surcharges;
    820. 

  820.     }
    821. 

  821. 

  822.     // add line items for discounts such as gift certificates and coupons
    823. 

  823.     if ($creditsApplied > 0) {
    824. 

  824.       $numberOfLineItemsProcessed++;
    825. 

  825.       $k = $numberOfLineItemsProcessed;
    826. 

  826.       $optionsLI["item_name_$k"]   = MODULES_PAYMENT_PAYPALSTD_LINEITEM_TEXT_DISCOUNTS_SHORT;
    827. 

  827.       $optionsLI["amount_$k"]    = (-1 * $creditsApplied);
    828. 

  828.       $optionsLI["quantity_$k"]    = 1;
    829. 

  829.       $subTotalLI -= $creditsApplied;
    830. 

  830.     }
    831. 

  831. 

  832.     // Reformat properly
    833. 

  833.     for ($k=1, $n=$numberOfLineItemsProcessed+1; $k<$n; $k++) {
    834. 

  834.       // Replace & and = with * if found.
    835. 

  835.       $optionsLI["item_name_$k"] = str_replace(array('&','='), '*', $optionsLI["item_name_$k"]);
    836. 

  836. 

  837.       // Remove HTML markup if found
    838. 

  838.       $optionsLI["item_name_$k"] = zen_clean_html($optionsLI["item_name_$k"], 'strong');
    839. 

  839. 

  840.       // reformat properly according to API specs
    841. 

  841.       $optionsLI["item_name_$k"]   = substr($optionsLI["item_name_$k"], 0, 127);
    842. 

  842.       if (isset($optionsLI["item_number_$k"])) $optionsLI["item_number_$k"] = substr($optionsLI["item_number_$k"], 0, 127);
    843. 

  843. ;
    844. 

  844.       if (isset($optionsLI["tax_$k"]) && ($optionsLI["tax_$k"] != '' || $optionsLI["tax_$k"] > 0)) {
    845. 

  845.         $optionsLI["tax_$k"] = round($optionsLI["tax_$k"], 2);
    846. 

  846.       }
    847. 

  847.     }
    848. 

  848. 

  849. /**
    850. 

  850.  * PayPal says their math works like this:
    851. 

  851.  * a) ITEMAMT = L_AMTn * L_QTYn
    852. 

  852.  * b) TAXAMT = L_QTYn * L_TAXAMTn
    853. 

  853.  * c) AMT = ITEMAMT + SHIPPINGAMT + HANDLINGAMT + TAXAMT
    854. 

  854.  */
    855. 

  855. 

  856.     // Sanity Check of line-item subtotals
    857. 

  857.     $optionsLI['num_cart_items'] = 0;
    858. 

  858.     for ($j=1; $j<$k; $j++) {
    859. 

  859.       $itemAMT = $optionsLI["amount_$j"];
    860. 

  860.       $itemQTY = $optionsLI["quantity_$j"];
    861. 

  861.       $itemTAX = (isset($optionsLI["tax_$j"]) ? $optionsLI["tax_$j"] : 0);
    862. 

  862.       $sumOfLineItems += ($itemQTY * $itemAMT);
    863. 

  863.       $sumOfLineTax += ($itemQTY * $itemTAX);
    864. 

  864.       $optionsLI['num_cart_items']++;
    865. 

  865.     }
    866. 

  866.     $sumOfLineItems = round($sumOfLineItems, 2);
    867. 

  867.     $sumOfLineTax = round($sumOfLineTax, 2);
    868. 

  868. 

  869.     if ($sumOfLineItems == 0) {
    870. 

  870.       $sumofLineTax = 0;
    871. 

  871.       $optionsLI = array();
    872. 

  872.       $discountProblemsFlag = TRUE;
    873. 

  873.       if ($optionsST['shipping'] == $optionsST['amount']) {
    874. 

  874.         $optionsST['shipping'] = 0;
    875. 

  875.       }
    876. 

  876.     }
    877. 

  877. 

  878.     // Sanity check -- if tax-included pricing is causing problems, remove the numbers and put them in a comment instead:
    879. 

  879.     $stDiffTaxOnly = (strval($sumOfLineItems - $sumOfLineTax - round($optionsST['amount'], 2)) + 0);
    880. 

  880.     if (DISPLAY_PRICE_WITH_TAX == 'true' && $stDiffTaxOnly == 0) {
    881. 

  881.       //$optionsNB['DESC'] = 'Tax included in prices: ' . $sumOfLineTax . ' (' . $optionsST['tax_cart'] . ') ';
    882. 

  882.       $optionsST['tax_cart'] = 0;
    883. 

  883.       for ($k=1, $n=$numberOfLineItemsProcessed+1; $k<$n; $k++) {
    884. 

  884.         if (isset($optionsLI["tax_$k"])) unset($optionsLI["tax_$k"]);
    885. 

  885.       }
    886. 

  886.     }
    887. 

  887. 

  888.     // Do sanity check -- if any of the line-item subtotal math doesn't add up properly, skip line-item details,
    889. 

  889.     // so that the order can go through even though PayPal isn't being flexible to handle Zen Cart's diversity
    890. 

  890.     if ((strval($subTotalTax) - strval($sumOfLineTax)) > 0.02) {
    891. 

  891.       ipn_logging('getLineItemDetails 3', 'Tax Subtotal does not match sum of taxes for line-items. Tax details are being removed from line-item submission data.' . "\n" . $sumOfLineTax . ' ' . $subTotalTax . print_r(array_merge($optionsST, $optionsLI), true));
    892. 

  892.       for ($k=1, $n=$numberOfLineItemsProcessed+1; $k<$n; $k++) {
    893. 

  893.         if (isset($optionsLI["tax_$k"])) unset($optionsLI["tax_$k"]);
    894. 

  894.       }
    895. 

  895.       $subTotalTax = 0;
    896. 

  896.       $sumOfLineTax = 0;
    897. 

  897.     }
    898. 

  898. 

  899.     // If coupons exist and there's a calculation problem, then it's likely that taxes are incorrect, so reset L_TAXAMTn values
    900. 

  900.     if ($creditsApplied > 0 && (strval($options…
    901.

Large files files are truncated, but you can click here to view the full file