PageRenderTime 56ms CodeModel.GetById 16ms RepoModel.GetById 1ms app.codeStats 0ms

/includes/classes/paypal_checkout.php

https://bitbucket.org/flth/xtcm
PHP | 1456 lines | 1223 code | 0 blank | 233 comment | 172 complexity | ebb07b6ab38649b3391328a00f316083 MD5 | raw file
Possible License(s): AGPL-1.0

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * Project: xt:Commerce - eCommerce Engine
    4. 

  4.  * @version $Id
    5. 

  5.  *
    6. 

  6.  * xt:Commerce - Shopsoftware
    7. 

  7.  * (c) 2003-2007 xt:Commerce (Winger/Zanier), http://www.xt-commerce.com
    8. 

  8.  *
    9. 

  9.  * xt:Commerce ist eine geschŸtzte Handelsmarke und wird vertreten durch die xt:Commerce GmbH (Austria)
    10. 

  10.  * xt:Commerce is a protected trademark and represented by the xt:Commerce GmbH (Austria)
    11. 

  11.  *
    12. 

  12.  * @copyright Copyright 2003-2007 xt:Commerce (Winger/Zanier), www.xt-commerce.com
    13. 

  13.  * @copyright based on Copyright 2002-2003 osCommerce; www.oscommerce.com
    14. 

  14.  * @copyright Porttions Copyright 2003-2007 Zen Cart Development Team
    15. 

  15.  * @copyright Porttions Copyright 2004 DevosC.com
    16. 

  16.  * @license http://www.xt-commerce.com.com/license/2_0.txt GNU Public License V2.0
    17. 

  17.  *
    18. 

  18.  * For questions, help, comments, discussion, etc., please join the
    19. 

  19.  * xt:Commerce Support Forums at www.xt-commerce.com
    20. 

  20.  *
    21. 

  21.  * ab 15.08.2008 Teile vom Hamburger-Internetdienst geändert
    22. 

  22.  * Hamburger-Internetdienst Support Forums at www.forum.hamburger-internetdienst.de
    23. 

  23.  * Stand: 16.05.2010
    24. 

  24. */
    25. 

  25. require_once(DIR_FS_INC . 'xtc_write_user_info.inc.php');
    26. 

  26. define('PROXY_HOST', '127.0.0.1');
    27. 

  27. define('PROXY_PORT', '808');
    28. 

  28. define('VERSION', PAYPAL_API_VERSION);
    29. 

  29. class paypal_checkout {
    30. 

  30. 	var $API_UserName,
    31. 

  31. 			$API_Password,
    32. 

  32. 			$API_Signature,
    33. 

  33. 			$API_Endpoint,
    34. 

  34. 			$version,
    35. 

  35. 			$location_error,
    36. 

  36. 			$NOTIFY_URL,
    37. 

  37. 			$EXPRESS_CANCEL_URL,
    38. 

  38. 			$EXPRESS_RETURN_URL,
    39. 

  39. 			$CANCEL_URL,
    40. 

  40. 			$RETURN_URL,
    41. 

  41. 			$GIROPAY_SUCCESS_URL,
    42. 

  42. 			$GIROPAY_CANCEL_URL,
    43. 

  43. 			$BANKTXN_PENDING_URL,
    44. 

  44. 			$EXPRESS_URL,
    45. 

  45. 			$GIROPAY_URL,
    46. 

  46. 			$IPN_URL,
    47. 

  47. 			$ppAPIec,
    48. 

  48. 			$payPalURL;
    49. 

  49. /*************************************************************/
    50. 

  50. 	function paypal_checkout() {
    51. 

  51. 		// Stand: 27.03.2010
    52. 

  52. 		if(PAYPAL_MODE=='sandbox'){
    53. 

  53. 			$this->API_UserName		= PAYPAL_API_SANDBOX_USER;
    54. 

  54. 			$this->API_Password		= PAYPAL_API_SANDBOX_PWD;
    55. 

  55. 			$this->API_Signature	= PAYPAL_API_SANDBOX_SIGNATURE;
    56. 

  56. 			$this->API_Endpoint		= 'https://api-3t.sandbox.paypal.com/nvp';
    57. 

  57. 			$this->EXPRESS_URL		= 'https://www.sandbox.paypal.com/webscr?cmd=_express-checkout&token=';
    58. 

  58. 			$this->GIROPAY_URL		= 'https://www.sandbox.paypal.com/webscr?cmd=_complete-express-checkout&token=';
    59. 

  59. 			$this->IPN_URL				= 'https://www.sandbox.paypal.com/cgi-bin/webscr';
    60. 

  60. 		}elseif(PAYPAL_MODE=='live'){
    61. 

  61. 			$this->API_UserName		= PAYPAL_API_USER;
    62. 

  62. 			$this->API_Password		= PAYPAL_API_PWD;
    63. 

  63. 			$this->API_Signature	= PAYPAL_API_SIGNATURE;
    64. 

  64. 			$this->API_Endpoint		= 'https://api-3t.paypal.com/nvp';
    65. 

  65. 			$this->EXPRESS_URL		= 'https://www.paypal.com/webscr?cmd=_express-checkout&token=';
    66. 

  66. 			$this->GIROPAY_URL		= 'https://www.paypal.com/webscr?cmd=_complete-express-checkout&token=';
    67. 

  67. 			$this->IPN_URL				= 'https://www.paypal.com/cgi-bin/webscr';
    68. 

  68. 		}
    69. 

  69. 		if(ENABLE_SSL == true){
    70. 

  70. 			$this->NOTIFY_URL = HTTPS_SERVER.DIR_WS_CATALOG.'callback/paypal/ipn.php';
    71. 

  71. 			$this->EXPRESS_CANCEL_URL = HTTPS_SERVER.DIR_WS_CATALOG.FILENAME_SHOPPING_CART.'?XTCsid='.xtc_session_id();
    72. 

  72. 			$this->EXPRESS_RETURN_URL = HTTPS_SERVER.DIR_WS_CATALOG.FILENAME_PAYPAL_CHECKOUT.'?XTCsid='.xtc_session_id();
    73. 

  73. 			$this->PRE_CANCEL_URL = HTTPS_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_PAYMENT.'?XTCsid='.xtc_session_id();
    74. 

  74. 			$this->CANCEL_URL = HTTPS_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_PAYMENT.'?XTCsid='.xtc_session_id().'&error=true&error_message='.PAYPAL_ERROR;
    75. 

  75. 			$this->RETURN_URL = HTTPS_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_PROCESS.'?XTCsid='.xtc_session_id();
    76. 

  76. 			$this->GIROPAY_SUCCESS_URL = HTTPS_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_SUCCESS.'?XTCsid='.xtc_session_id();
    77. 

  77. 			$this->GIROPAY_CANCEL_URL = HTTPS_SERVER.DIR_WS_CATALOG.FILENAME_SHOPPING_CART.'?XTCsid='.xtc_session_id();
    78. 

  78. 			$this->BANKTXN_PENDING_URL = HTTPS_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_SUCCESS.'?XTCsid='.xtc_session_id();
    79. 

  79. 		}else{
    80. 

  80. 			$this->NOTIFY_URL = HTTP_SERVER.DIR_WS_CATALOG.'callback/paypal/ipn.php';
    81. 

  81. 			$this->EXPRESS_CANCEL_URL = HTTP_SERVER.DIR_WS_CATALOG.FILENAME_SHOPPING_CART.'?XTCsid='.xtc_session_id();
    82. 

  82. 			$this->EXPRESS_RETURN_URL = HTTP_SERVER.DIR_WS_CATALOG.FILENAME_PAYPAL_CHECKOUT.'?XTCsid='.xtc_session_id();
    83. 

  83. 			$this->PRE_CANCEL_URL = HTTP_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_PAYMENT.'?XTCsid='.xtc_session_id();
    84. 

  84. 			$this->CANCEL_URL = HTTP_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_PAYMENT.'?XTCsid='.xtc_session_id().'&error=true&error_message='.PAYPAL_ERROR;
    85. 

  85. 			$this->RETURN_URL = HTTP_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_PROCESS.'?XTCsid='.xtc_session_id();
    86. 

  86. 			$this->GIROPAY_SUCCESS_URL = HTTP_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_SUCCESS.'?XTCsid='.xtc_session_id();
    87. 

  87. 			$this->GIROPAY_CANCEL_URL = HTTP_SERVER.DIR_WS_CATALOG.FILENAME_SHOPPING_CART.'?XTCsid='.xtc_session_id();
    88. 

  88. 			$this->BANKTXN_PENDING_URL = HTTP_SERVER.DIR_WS_CATALOG.FILENAME_CHECKOUT_SUCCESS.'?XTCsid='.xtc_session_id();
    89. 

  89. 		}
    90. 

  90. 		$this->version   = VERSION;
    91. 

  91. 		$this->USE_PROXY = FALSE;
    92. 

  92. 		$this->payPalURL = '';
    93. 

  93. 		$this->ppAPIec = $this->buildAPIKey(PAYPAL_API_KEY, 'ec');
    94. 

  94. 		if(ENABLE_SSL == true):
    95. 

  95. 			$hdrImg='templates/'.CURRENT_TEMPLATE.'/img/'.PAYPAL_API_IMAGE;
    96. 

  96. 			if(file_exists(DIR_FS_CATALOG.$hdrImg) AND PAYPAL_API_IMAGE!=''):
    97. 

  97. 				$hdrSize = getimagesize(DIR_FS_CATALOG.$hdrImg);
    98. 

  98. 				if($hdrSize[0]<=750 AND $hdrSize[1]<=90):
    99. 

  99. 					$this->Image = urlencode(HTTPS_SERVER.DIR_WS_CATALOG.$hdrImg);
    100. 

  100. 				endif;
    101. 

  101. 			endif;
    102. 

  102. 		endif;
    103. 

  103. 		// BOF - Hetfield - 2009-11-19 - replaced deprecated function ereg with preg_match to be ready for PHP >= 5.3
    104. 

  104. 		//if(ereg('^(([a-f]|[A-F]|[0-9]){6})$',PAYPAL_API_CO_BACK))
    105. 

  105. 		if(preg_match('/^(([a-f]|[A-F]|[0-9]){6})$/',PAYPAL_API_CO_BACK))
    106. 

  106. 			$this->BackColor = PAYPAL_API_CO_BACK;
    107. 

  107. 		//if(ereg('^(([a-f]|[A-F]|[0-9]){6})$',PAYPAL_API_CO_BORD))
    108. 

  108. 		if(preg_match('/^(([a-f]|[A-F]|[0-9]){6})$/',PAYPAL_API_CO_BORD))
    109. 

  109. 			$this->BorderColor = PAYPAL_API_CO_BORD;
    110. 

  110. 		// EOF - Hetfield - 2009-11-19 - replaced deprecated function ereg with preg_match to be ready for PHP >= 5.3
    111. 

  111. 	}
    112. 

  112. /*************************************************************/
    113. 

  113. 	function build_express_checkout_button(){
    114. 

  114. 		// Stand: 01.06.2009
    115. 

  115. 		global $PHP_SELF;
    116. 

  116. 		if($_SESSION['allow_checkout'] == 'true' AND $_SESSION['cart']->show_total()>0 AND MODULE_PAYMENT_PAYPALEXPRESS_STATUS=='True'):
    117. 

  117. 			$unallowed_modules = explode(',', $_SESSION['customers_status']['customers_status_payment_unallowed']);
    118. 

  118. 			if(!in_array('paypalexpress', $unallowed_modules)):
    119. 

  119. 				include(DIR_WS_LANGUAGES . $_SESSION['language'] . '/modules/payment/paypalexpress.php');
    120. 

  120. 				$alt=((defined('MODULE_PAYMENT_PAYPALEXPRESS_ALT_BUTTON'))? MODULE_PAYMENT_PAYPALEXPRESS_ALT_BUTTON :'PayPal');
    121. 

  121. 				$source=((strtoupper($_SESSION['language_code'])=='DE')?'epaypal_de.gif':'epaypal_en.gif');
    122. 

  122. 				$button .= '<a style="cursor:pointer;" onfocus="if(this.blur) this.blur();" onmouseover="window.status = '."''".'; return true;" href="'.xtc_href_link(basename($PHP_SELF), xtc_get_all_get_params(array('action')).'action=paypal_express_checkout').'"><img src="'.DIR_WS_ICONS.$source.'" alt="'.$alt.'" title="'.$alt.'" /></a>';
    123. 

  123. 				return $button;
    124. 

  124. 			endif;
    125. 

  125. 		endif;
    126. 

  126. 		return;
    127. 

  127. 	}
    128. 

  128. /*************************************************************/
    129. 

  129. 	function build_express_fehler_button(){
    130. 

  130. 		// Stand: 01.06.2009
    131. 

  131. 		if(MODULE_PAYMENT_PAYPALEXPRESS_STATUS=='True'){
    132. 

  132. 			include(DIR_WS_LANGUAGES . $_SESSION['language'] . '/modules/payment/paypalexpress.php');
    133. 

  133. 			$alt=((defined('MODULE_PAYMENT_PAYPALEXPRESS_ALT_BUTTON'))? MODULE_PAYMENT_PAYPALEXPRESS_ALT_BUTTON :'PayPal');
    134. 

  134. 			$source=((strtoupper($_SESSION['language_code'])=='DE')?'epaypal_de.gif':'epaypal_en.gif');
    135. 

  135. 			$button .= '<a style="cursor:pointer;" onfocus="if(this.blur) this.blur();" onmouseover="window.status = '."''".'; return true;" href="'.$this->EXPRESS_CANCEL_URL.'"><img src="'.DIR_WS_ICONS.$source.'" alt="'.$alt.'" title="'.$alt.'" /></a>';
    136. 

  136. 			return $button;
    137. 

  137. 		}
    138. 

  138. 		return;
    139. 

  139. 	}
    140. 

  140. /*************************************************************/
    141. 

  141. /******* fürs express als Zahlbedingung **********************/
    142. 

  142. /*************************************************************/
    143. 

  143. 	function paypal_auth_call(){
    144. 

  144. 		// aufruf aus paypal.php NICHT für PP Express aus Warenkorb
    145. 

  145. 		// Daten aus der Cart - Order noch nicht gespeichert
    146. 

  146. 		// 1. Call um die Token ID zu bekommen
    147. 

  147. 		// Daten mitgeben, da direkt bestätigung ohne nochmaliges Confirm im Shop
    148. 

  148. 		// Stand: 05.01.2010
    149. 

  149. 		global $xtPrice,$order;
    150. 

  150. 		// Session säubern
    151. 

  151. 		unset($_SESSION['reshash']);
    152. 

  152. 		unset($_SESSION['nvpReqArray']);
    153. 

  153. 		require(DIR_WS_CLASSES.'order_total.php');
    154. 

  154. 		$order_total_modules = new order_total();
    155. 

  155. 		$order_totals = $order_total_modules->process();
    156. 

  156. 		$order_tax=0;
    157. 

  157. 		$order_discount=0;
    158. 

  158. 		$order_fee=0;
    159. 

  159. 		$order_gs=0;
    160. 

  160. 		$order_shipping=0;
    161. 

  161. 		for($i = 0, $n = sizeof($order_totals); $i < $n; $i ++):
    162. 

  162. 			switch($order_totals[$i]['code']):
    163. 

  163. 				case 'ot_total':
    164. 

  164. 					$paymentAmount=$order_totals[$i]['value'];
    165. 

  165. 					break;
    166. 

  166. 				case 'ot_shipping':
    167. 

  167. 					$order_shipping=$order_totals[$i]['value'];
    168. 

  168. 					break;
    169. 

  169. 				case 'ot_tax':
    170. 

  170. 					$order_tax+=$order_totals[$i]['value'];
    171. 

  171. 					break;
    172. 

  172. 				case 'ot_discount':
    173. 

  173. 					$order_discount+=$order_totals[$i]['value'];
    174. 

  174. 					break;
    175. 

  175.           case 'ot_coupon':
    176. 

  176.             $order_gs+= ($order_totals[$i]['value'] < 0) ? $order_totals[$i]['value'] : $order_totals[$i]['value'] *(-1);
    177. 

  177.             break;
    178. 

  178.           case 'ot_gv':
    179. 

  179.             $order_gs+= ($order_totals[$i]['value'] < 0) ? $order_totals[$i]['value'] : $order_totals[$i]['value'] *(-1);
    180. 

  180.             break;
    181. 

  181.           ///  customers bonus
    182. 

  182.           case 'ot_bonus_fee':
    183. 

  183.             $order_gs+= ($order_totals[$i]['value'] < 0) ? $order_totals[$i]['value'] : $order_totals[$i]['value'] *(-1);
    184. 

  184.             break;
    185. 

  185. 				case 'ot_payment':
    186. 

  186. 					if($order_totals[$i]['value'] < 0): // Rabatt aus Fremd Modul
    187. 

  187. 						$order_discount+=$order_totals[$i]['value'];
    188. 

  188. 					else:
    189. 

  189. 						$order_fee+=$order_totals[$i]['value'];
    190. 

  190. 					endif;
    191. 

  191. 					break;
    192. 

  192. 				case 'ot_cod_fee':
    193. 

  193. 					$order_fee+=$order_totals[$i]['value'];
    194. 

  194. 					break;
    195. 

  195. 				case 'ot_ps_fee':
    196. 

  196. 					$order_fee+=$order_totals[$i]['value'];
    197. 

  197. 					break;
    198. 

  198. 				case 'ot_loworderfee':
    199. 

  199. 					$order_fee+=$order_totals[$i]['value'];
    200. 

  200. 			endswitch;
    201. 

  201. 		endfor;
    202. 

  202. 		// AMT
    203. 

  203. 		$paymentAmount = round($paymentAmount, $xtPrice->get_decimal_places($order->info['currency']));
    204. 

  204. 		// Summen der Order
    205. 

  205. 		$order_tax=round($order_tax, $xtPrice->get_decimal_places($order->info['currency']));
    206. 

  206. 		$order_discount=round($order_discount, $xtPrice->get_decimal_places($order->info['currency']));
    207. 

  207. 		$order_gs=round($order_gs, $xtPrice->get_decimal_places($order->info['currency']));
    208. 

  208. 		$order_fee=round($order_fee, $xtPrice->get_decimal_places($order->info['currency']));
    209. 

  209. 		$order_shipping=round($order_shipping, $xtPrice->get_decimal_places($order->info['currency']));
    210. 

  210. 		$nvp_products=$this->paypal_get_products($paymentAmount,$order_tax,$order_discount,$order_fee,$order_shipping,$order_gs);
    211. 

  211. 		$paymentAmount = urlencode(number_format($paymentAmount, $xtPrice->get_decimal_places($order->info['currency']), '.', ','));
    212. 

  212. 		$currencyCodeType = urlencode($order->info['currency']);
    213. 

  213. 		// Payment Type
    214. 

  214. 		$paymentType='Sale';
    215. 

  215. 		// The returnURL is the location where buyers return when a
    216. 

  216. 		// payment has been succesfully authorized.
    217. 

  217. 		// The cancelURL is the location buyers are sent to when they hit the
    218. 

  218. 		// cancel button during authorization of payment during the PayPal flow
    219. 

  219. 		$returnURL =urlencode($this->RETURN_URL);
    220. 

  220. 		$cancelURL =urlencode($this->CANCEL_URL);
    221. 

  221. 		$gpsucssesURL =urlencode($this->GIROPAY_SUCCESS_URL);
    222. 

  222. 		$gpcancelURL =urlencode($this->GIROPAY_CANCEL_URL);
    223. 

  223. 		$bankpending =urlencode($this->BANKTXN_PENDING_URL);
    224. 

  224. 		// Construct the parameter string that describes the PayPal payment
    225. 

  225. 		// the varialbes were set in the web form, and the resulting string
    226. 

  226. 		// is stored in $nvpstr
    227. 

  227. 		$sh_name = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['firstname'].' '.$order->delivery['lastname']));
    228. 

  228. 		$sh_street = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['street_address']));
    229. 

  229. 		$sh_street_2 = '';
    230. 

  230. 		$sh_city = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['city']));
    231. 

  231. 		$sh_zip = urlencode($order->delivery['postcode']);
    232. 

  232. 		$sh_state = urlencode($this->state_code($order->delivery['state']));
    233. 

  233. 		$sh_countrycode = urlencode($order->delivery['country']['iso_code_2']);
    234. 

  234. 		$sh_countryname = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",$order->delivery['country']['title']));
    235. 

  235. 		$sh_phonenum = urlencode($order->customer['telephone']);
    236. 

  236. 		// String zusammenbauen
    237. 

  237. 		$nvpstr="&AMT=".$paymentAmount.
    238. 

  238. 						"&CURRENCYCODE=".$currencyCodeType.
    239. 

  239. 						"&PAYMENTACTION=".$paymentType.
    240. 

  240. 						"&LOCALECODE=".$_SESSION['language_code'].
    241. 

  241. 						"&RETURNURL=".$returnURL.
    242. 

  242. 						"&CANCELURL=".$cancelURL.
    243. 

  243. 						"&GIROPAYSUCCESSURL=".$gpsucssesURL.
    244. 

  244. 						"&GIROPAYCANCELURL=".$gpcancelURL.
    245. 

  245. 						"&BANKTXNPENDINGURL=".$bankpending.
    246. 

  246. 						"&HDRIMG=".$this->Image.
    247. 

  247. 						"&HDRBORDERCOLOR=".$this->BorderColor.
    248. 

  248. 						"&HDRBACKCOLOR=".$this->BackColor.
    249. 

  249. 						"&CUSTOM=".''.
    250. 

  250. 						"&SHIPTONAME=".$sh_name.
    251. 

  251. 						"&SHIPTOSTREET=".$sh_street.
    252. 

  252. 						"&SHIPTOSTREET2=".$sh_street2.
    253. 

  253. 						"&SHIPTOCITY=".$sh_city.
    254. 

  254. 						"&SHIPTOZIP=".$sh_zip.
    255. 

  255. 						"&SHIPTOSTATE=".$sh_state.
    256. 

  256. 						"&SHIPTOCOUNTRYCODE=".$sh_countrycode.
    257. 

  257. 						"&SHIPTOCOUNTRYNAME=".$sh_countryname.
    258. 

  258. 						"&PHONENUM=".$sh_phonenum.
    259. 

  259. 						"&ALLOWNOTE=0".
    260. 

  260. 						"&ADDROVERRIDE=1";
    261. 

  261. 		// Artikel Details mitgeben
    262. 

  262. 		$nvpstr.=$nvp_products;
    263. 

  263. 		// Senden
    264. 

  264. 		$resArray=$this->hash_call("SetExpressCheckout",$nvpstr);
    265. 

  265. 		$_SESSION['reshash']= $resArray;
    266. 

  266. 		$ack = strtoupper($resArray["ACK"]);
    267. 

  267. 		if($ack!="SUCCESS"):
    268. 

  268. 			if(PAYPAL_ERROR_DEBUG=='true'):
    269. 

  269. 				$this->build_error_message($_SESSION['reshash']);
    270. 

  270. 			else:
    271. 

  271. 				$_SESSION['reshash']['FORMATED_ERRORS'] = PAYPAL_NOT_AVIABLE;
    272. 

  272. 			endif;
    273. 

  273. 			xtc_redirect($this->PRE_CANCEL_URL);
    274. 

  274. 		endif;
    275. 

  275. 		if($ack=="SUCCESS"){
    276. 

  276. 			$token = urldecode($resArray["TOKEN"]);
    277. 

  277. 			$this->payPalURL = $this->EXPRESS_URL.''.$token;
    278. 

  278. 			return $this->payPalURL;
    279. 

  279. 		}
    280. 

  280. 	}
    281. 

  281. /*************************************************************/
    282. 

  282. /******* fürs express aus dem warenkorb **********************/
    283. 

  283. /*************************************************************/
    284. 

  284. 	function paypal_express_auth_call(){
    285. 

  285. 		// aufruf aus cart_actions.php
    286. 

  286. 		// 1. Call um die Token ID zu bekommen
    287. 

  287. 		// Steuer, Artikel usw bei eingeloggt
    288. 

  288. 		// Stand: 05.01.2010
    289. 

  289. 		global $xtPrice,$order;
    290. 

  290. 		// Session säubern
    291. 

  291. 		unset($_SESSION['reshash']);
    292. 

  292. 		unset($_SESSION['nvpReqArray']);
    293. 

  293. 		// Shipping:
    294. 

  294. 		if(!isset($_SESSION['sendto'])) {
    295. 

  295. 			$_SESSION['sendto'] = $_SESSION['customer_default_address_id'];
    296. 

  296. 		} else {
    297. 

  297. 			// verify the selected shipping address
    298. 

  298. 			$check_address_query = xtc_db_query("select count(*) as total from ".TABLE_ADDRESS_BOOK." where customers_id = '".(int) $_SESSION['customer_id']."' and address_book_id = '".(int) $_SESSION['sendto']."'");
    299. 

  299. 			$check_address = xtc_db_fetch_array($check_address_query);
    300. 

  300. 			if($check_address['total'] != '1') {
    301. 

  301. 				$_SESSION['sendto'] = $_SESSION['customer_default_address_id'];
    302. 

  302. 				if(isset($_SESSION['shipping']))
    303. 

  303. 					unset($_SESSION['shipping']);
    304. 

  304. 			}
    305. 

  305. 		}
    306. 

  306. 		// Shipping END
    307. 

  307. 		require(DIR_WS_CLASSES.'order.php');
    308. 

  308. 		$order = new order();
    309. 

  309. 		require(DIR_WS_CLASSES.'order_total.php');
    310. 

  310. 		$order_total_modules = new order_total();
    311. 

  311. 		$order_totals = $order_total_modules->process();
    312. 

  312. 		$order_tax=0;
    313. 

  313. 		$order_discount=0;
    314. 

  314. 		$order_gs=0;
    315. 

  315. 		$order_fee=0;
    316. 

  316. 		$order_shipping=0;
    317. 

  317. 		for($i = 0, $n = sizeof($order_totals); $i < $n; $i ++):
    318. 

  318. 			switch($order_totals[$i]['code']):
    319. 

  319.           case 'ot_discount':
    320. 

  320.             $order_discount+=$order_totals[$i]['value'];
    321. 

  321.             break;
    322. 

  322.           case 'ot_coupon':
    323. 

  323.             $order_gs+= ($order_totals[$i]['value'] < 0) ? $order_totals[$i]['value'] : $order_totals[$i]['value'] *(-1);
    324. 

  324.             break;
    325. 

  325.           case 'ot_gv':
    326. 

  326.             $order_gs+= ($order_totals[$i]['value'] < 0) ? $order_totals[$i]['value'] : $order_totals[$i]['value'] *(-1);
    327. 

  327.             break;
    328. 

  328.           ///  customers bonus
    329. 

  329.           case 'ot_bonus_fee':
    330. 

  330.             $order_gs+= ($order_totals[$i]['value'] < 0) ? $order_totals[$i]['value'] : $order_totals[$i]['value'] *(-1);
    331. 

  331.             break;
    332. 

  332. 				case 'ot_payment':
    333. 

  333. 					if($order_totals[$i]['value'] < 0): // Rabatt aus Fremd Modul
    334. 

  334. 						$order_discount+=$order_totals[$i]['value'];
    335. 

  335. 					else:
    336. 

  336. 						$order_fee+=$order_totals[$i]['value'];
    337. 

  337. 					endif;
    338. 

  338. 				case 'ot_cod_fee':
    339. 

  339. 					$order_fee+=$order_totals[$i]['value'];
    340. 

  340. 					break;
    341. 

  341. 				case 'ot_ps_fee':
    342. 

  342. 					$order_fee+=$order_totals[$i]['value'];
    343. 

  343. 					break;
    344. 

  344. 				case 'ot_loworderfee':
    345. 

  345. 					$order_fee+=$order_totals[$i]['value'];
    346. 

  346. 			endswitch;
    347. 

  347. 		endfor;
    348. 

  348. 		// AMT
    349. 

  349. 		$paymentAmount=$_SESSION['cart']->show_total()
    350. 

  350. 									+$order_discount
    351. 

  351. 									+$order_gs
    352. 

  352. 									+$order_fee;
    353. 

  353. 		if($_SESSION['customers_status']['customers_status_show_price_tax'] == 0 && $_SESSION['customers_status']['customers_status_add_tax_ot'] == 1):
    354. 

  354. 			$order_tax=$_SESSION['cart']->show_tax(false);
    355. 

  355. 		endif;
    356. 

  356. 		// Vorläufige Versandkosten
    357. 

  357. 		if(PAYPAL_EXP_VORL!='' AND PAYPAL_EXP_VERS!=0):
    358. 

  358. 			$paymentAmount+=PAYPAL_EXP_VERS;
    359. 

  359. 		endif;
    360. 

  360. 		// AMT
    361. 

  361. 		$paymentAmount = round($paymentAmount, $xtPrice->get_decimal_places($order->info['currency']));
    362. 

  362. 		// Summen der Order
    363. 

  363. 		$order_tax=round($order_tax, $xtPrice->get_decimal_places($order->info['currency']));
    364. 

  364. 		$order_discount=round($order_discount, $xtPrice->get_decimal_places($order->info['currency']));
    365. 

  365. 		$order_gs=round($order_gs, $xtPrice->get_decimal_places($order->info['currency']));
    366. 

  366. 		$order_fee=round($order_fee, $xtPrice->get_decimal_places($order->info['currency']));
    367. 

  367. 		$nvp_products=$this->paypal_get_products($paymentAmount,$order_tax,$order_discount,$order_fee,$order_shipping,$order_gs,True);
    368. 

  368. 		$paymentAmount = urlencode(number_format($paymentAmount, $xtPrice->get_decimal_places($order->info['currency']), '.', ','));
    369. 

  369. 		$currencyCodeType = urlencode($order->info['currency']);
    370. 

  370. 		// Payment Type
    371. 

  371. 		$paymentType='Sale';
    372. 

  372. 		$returnURL =urlencode($this->EXPRESS_RETURN_URL);
    373. 

  373. 		$cancelURL =urlencode($this->EXPRESS_CANCEL_URL);
    374. 

  374. 		$gpsucssesURL =urlencode($this->GIROPAY_SUCCESS_URL);
    375. 

  375. 		$gpcancelURL =urlencode($this->EXPRESS_CANCEL_URL);
    376. 

  376. 		$bankpending =urlencode($this->BANKTXN_PENDING_URL);
    377. 

  377. 		if(isset($_SESSION['sendto']) AND isset($_SESSION['customer_id'])):
    378. 

  378. 			// User eingeloggt
    379. 

  379. 			$sh_name = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['firstname'].' '.$order->delivery['lastname']));
    380. 

  380. 			$sh_street = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['street_address']));
    381. 

  381. 			$sh_street_2 = '';
    382. 

  382. 			$sh_city = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['city']));
    383. 

  383. 			$sh_zip = urlencode($order->delivery['postcode']);
    384. 

  384. 			$sh_state = urlencode($this->state_code($order->delivery['state']));
    385. 

  385. 			$sh_countrycode = urlencode($order->delivery['country']['iso_code_2']);
    386. 

  386. 			$sh_countryname = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",$order->delivery['country']['title']));
    387. 

  387. 			$sh_phonenum = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",$order->customer['telephone']));
    388. 

  388. 			if($_SESSION['paypal_express_new_customer']!='true')
    389. 

  389. 				$address = "&SHIPTONAME=".$sh_name."&SHIPTOSTREET=".$sh_street."&SHIPTOSTREET2=".$sh_street2."&SHIPTOCITY=".$sh_city."&SHIPTOZIP=".$sh_zip."&SHIPTOSTATE=".$sh_state."&SHIPTOCOUNTRYCODE=".$sh_countrycode."&SHIPTOCOUNTRYNAME=".$sh_countryname."&PHONENUM=".$sh_phonenum;
    390. 

  390. 		endif;
    391. 

  391. 		// String zusammenbauen
    392. 

  392. 		$nvpstr="&AMT=".$paymentAmount.
    393. 

  393. 						"&CURRENCYCODE=".$currencyCodeType.
    394. 

  394. 						"&PAYMENTACTION=".$paymentType.
    395. 

  395. 						"&LOCALECODE=".$_SESSION['language_code'].
    396. 

  396. 						"&RETURNURL=".$returnURL.
    397. 

  397. 						"&CANCELURL=".$cancelURL.
    398. 

  398. 						"&GIROPAYSUCCESSURL=".$gpsucssesURL.
    399. 

  399. 						"&GIROPAYCANCELURL=".$gpcancelURL.
    400. 

  400. 						"&BANKTXNPENDINGURL=".$bankpending.
    401. 

  401. 						"&HDRIMG=".$this->Image.
    402. 

  402. 						"&HDRBORDERCOLOR=".$this->BorderColor.
    403. 

  403. 						"&HDRBACKCOLOR=".$this->BackColor.
    404. 

  404. 						"&CUSTOM=".''.
    405. 

  405. 						$address.
    406. 

  406. 						"&ALLOWNOTE=0".
    407. 

  407. 						"&ADDROVERRIDE=0";
    408. 

  408. 		// Artikel Details mitgeben
    409. 

  409. 		$nvpstr.=$nvp_products;
    410. 

  410. 		// Make the call to PayPal to set the Express Checkout token
    411. 

  411. 		// If the API call succeded, then redirect the buyer to PayPal
    412. 

  412. 		// to begin to authorize payment.  If an error occured, show the
    413. 

  413. 		// resulting errors
    414. 

  414. 		$resArray=$this->hash_call("SetExpressCheckout",$nvpstr);
    415. 

  415. 		$_SESSION['reshash']= $resArray;
    416. 

  416. 		$ack = strtoupper($resArray["ACK"]);
    417. 

  417. 		if($ack=="SUCCESS"){
    418. 

  418. 			$token = urldecode($resArray["TOKEN"]);
    419. 

  419. 			$this->payPalURL = $this->EXPRESS_URL.''.$token;
    420. 

  420. 			return $this->payPalURL;
    421. 

  421. 		} else  {
    422. 

  422. 			if(PAYPAL_ERROR_DEBUG=='true'):
    423. 

  423. 				$this->build_error_message($_SESSION['reshash']);
    424. 

  424. 			else:
    425. 

  425. 				$_SESSION['reshash']['FORMATED_ERRORS'] = PAYPAL_NOT_AVIABLE;
    426. 

  426. 			endif;
    427. 

  427. 			$this->payPalURL = $this->EXPRESS_CANCEL_URL;
    428. 

  428. 			return $this->payPalURL;
    429. 

  429. 		}
    430. 

  430. 	}
    431. 

  431. /*************************************************************/
    432. 

  432. /******* für abgelehnte Zahlungen **********************/
    433. 

  433. /*************************************************************/
    434. 

  434. 	function paypal_second_auth_call($insert_id){
    435. 

  435. 		// aufruf aus shopping_cart.php
    436. 

  436. 		// 1. Call um die Token ID zu bekommen
    437. 

  437. 		// Daten aus der Order !
    438. 

  438. 		// Stand: 29.04.2009
    439. 

  439. 		global $xtPrice,$order;
    440. 

  440. 		// Session säubern
    441. 

  441. 		unset($_SESSION['reshash']);
    442. 

  442. 		unset($_SESSION['nvpReqArray']);
    443. 

  443. 		require(DIR_WS_CLASSES.'order.php');
    444. 

  444. 		$order = new order($insert_id);
    445. 

  445. 		// Amt
    446. 

  446. 		$paymentAmount = round($order->info['pp_total'], $xtPrice->get_decimal_places($order->info['currency']));
    447. 

  447. 		// Summen der Order
    448. 

  448. 		$order_tax = round($order->info['pp_tax'], $xtPrice->get_decimal_places($order->info['currency']));
    449. 

  449. 		$order_discount = round($order->info['pp_disc'], $xtPrice->get_decimal_places($order->info['currency']));
    450. 

  450. 		$order_gs = round($order->info['pp_gs'], $xtPrice->get_decimal_places($order->info['currency']));
    451. 

  451. 		$order_fee = round($order->info['pp_fee'], $xtPrice->get_decimal_places($order->info['currency']));
    452. 

  452. 		$order_shipping = round($order->info['pp_shipping'], $xtPrice->get_decimal_places($order->info['currency']));
    453. 

  453. 		$nvp_products=$this->paypal_get_products($paymentAmount,$order_tax,$order_discount,$order_fee,$order_shipping,$order_gs);
    454. 

  454. 		$paymentAmount = urlencode(number_format($paymentAmount, $xtPrice->get_decimal_places($order->info['currency']), '.', ','));
    455. 

  455. 		$currencyCodeType = urlencode($order->info['currency']);
    456. 

  456. 		// Payment Type
    457. 

  457. 		$paymentType='Sale';
    458. 

  458. 		$returnURL =urlencode($this->EXPRESS_CANCEL_URL);
    459. 

  459. 		$cancelURL =urlencode($this->EXPRESS_CANCEL_URL);
    460. 

  460. 		$gpsucssesURL =urlencode($this->GIROPAY_SUCCESS_URL);
    461. 

  461. 		$gpcancelURL =urlencode($this->EXPRESS_CANCEL_URL);
    462. 

  462. 		$bankpending =urlencode($this->BANKTXN_PENDING_URL);
    463. 

  463. 		$notify_url  = urlencode($this->NOTIFY_URL);
    464. 

  464. 		$inv_num = urlencode($insert_id);
    465. 

  465. 		// Versandadresse
    466. 

  466. 		$sh_name = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['firstname'].' '.$order->delivery['lastname']));
    467. 

  467. 		$sh_street = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['street_address']));
    468. 

  468. 		$sh_street_2 = '';
    469. 

  469. 		$sh_city = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['city']));
    470. 

  470. 		$sh_state = urlencode($this->state_code($order->delivery['state']));
    471. 

  471. 		if(is_array($order->delivery['country'])):
    472. 

  472. 			$sh_countrycode = urlencode($order->delivery['country']['iso_code_2']);
    473. 

  473. 			$sh_countryname = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",$order->delivery['country']['title']));
    474. 

  474. 		else:
    475. 

  475. 			$sh_countrycode = urlencode($order->delivery['country_iso_2']);
    476. 

  476. 			$sh_countryname = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",$order->delivery['country']));
    477. 

  477. 		endif;
    478. 

  478. 		$sh_phonenum = urlencode($order->customer['telephone']);
    479. 

  479. 		$sh_zip = urlencode($order->delivery['postcode']);
    480. 

  480. 		$address = "&SHIPTONAME=".$sh_name."&SHIPTOSTREET=".$sh_street."&SHIPTOSTREET2=".$sh_street2."&SHIPTOCITY=".$sh_city."&SHIPTOZIP=".$sh_zip."&SHIPTOSTATE=".$sh_state."&SHIPTOCOUNTRYCODE=".$sh_countrycode."&SHIPTOCOUNTRYNAME=".$sh_countryname."&PHONENUM=".$sh_phonenum;
    481. 

  481. 		// String zusammenbauen
    482. 

  482. 		$nvpstr="&AMT=".$paymentAmount.
    483. 

  483. 						"&CURRENCYCODE=".$currencyCodeType.
    484. 

  484. 						"&PAYMENTACTION=".$paymentType.
    485. 

  485. 						"&NOTIFYURL=".$notify_url.
    486. 

  486. 						"&INVNUM=".$inv_num.$adress.
    487. 

  487. 						"&LOCALECODE=".$_SESSION['language_code'].
    488. 

  488. 						"&RETURNURL=".$returnURL.
    489. 

  489. 						"&CANCELURL=".$cancelURL.
    490. 

  490. 						"&GIROPAYSUCCESSURL=".$gpsucssesURL.
    491. 

  491. 						"&GIROPAYCANCELURL=".$gpcancelURL.
    492. 

  492. 						"&BANKTXNPENDINGURL=".$bankpending.
    493. 

  493. 						"&HDRIMG=".$this->Image.
    494. 

  494. 						"&HDRBORDERCOLOR=".$this->BorderColor.
    495. 

  495. 						"&HDRBACKCOLOR=".$this->BackColor.
    496. 

  496. 						"&CUSTOM=".''.
    497. 

  497. 						$address.
    498. 

  498. 						"&ALLOWNOTE=0".
    499. 

  499. 						"&ADDROVERRIDE=1";
    500. 

  500. 		// Artikel Details mitgeben
    501. 

  501. 		$nvpstr.=$nvp_products;
    502. 

  502. 		// Make the call to PayPal to set the Express Checkout token
    503. 

  503. 		// If the API call succeded, then redirect the buyer to PayPal
    504. 

  504. 		// to begin to authorize payment.  If an error occured, show the
    505. 

  505. 		// resulting errors
    506. 

  506. 		$resArray=$this->hash_call("SetExpressCheckout",$nvpstr);
    507. 

  507. 		$_SESSION['reshash']= $resArray;
    508. 

  508. 		$ack = strtoupper($resArray["ACK"]);
    509. 

  509. 		if($ack=="SUCCESS"){
    510. 

  510. 			$token = urldecode($resArray["TOKEN"]);
    511. 

  511. 			$this->payPalURL = $this->EXPRESS_URL.''.$token;
    512. 

  512. 			return $this->payPalURL;
    513. 

  513. 		} else  {
    514. 

  514. 			$this->build_error_message($_SESSION['reshash']);
    515. 

  515. 			if(PAYPAL_ERROR_DEBUG=='true'):
    516. 

  516. 				$_SESSION['reshash']['FORMATED_ERRORS'] = PAYPAL_NOT_AVIABLE;
    517. 

  517. 			else:
    518. 

  518. 				$this->payPalURL = $this->EXPRESS_CANCEL_URL;
    519. 

  519. 			endif;
    520. 

  520. 			return $this->payPalURL;
    521. 

  521. 		}
    522. 

  522. 	}
    523. 

  523. /*************************************************************/
    524. 

  524. /******* für beide Versionen *********************************/
    525. 

  525. /*************************************************************/
    526. 

  526. 	function complete_ceckout($insert_id, $data=''){
    527. 

  527. 		// aufruf aus paypal.php oder paypalexpress.php aus Warenkorb
    528. 

  528. 		// 2. Call um die PayPal Aktion abzuschliessen
    529. 

  529. 		// Daten aus der Order
    530. 

  530. 		// Stand: 29.04.2009
    531. 

  531. 		global $xtPrice,$order;
    532. 

  532. 		$order = new order($insert_id);
    533. 

  533. 		// IP Adresse
    534. 

  534. 		if($_SERVER["HTTP_X_FORWARDED_FOR"]) {
    535. 

  535. 			$customers_ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
    536. 

  536. 		} else {
    537. 

  537. 			$customers_ip = $_SERVER["REMOTE_ADDR"];
    538. 

  538. 		}
    539. 

  539. 		// Amt
    540. 

  540. 		$paymentAmount = round($order->info['pp_total'], $xtPrice->get_decimal_places($order->info['currency']));
    541. 

  541. 		// Summen der Order
    542. 

  542. 		$order_tax = round($order->info['pp_tax'], $xtPrice->get_decimal_places($order->info['currency']));
    543. 

  543. 		$order_discount = round($order->info['pp_disc'], $xtPrice->get_decimal_places($order->info['currency']));
    544. 

  544. 		$order_gs = round($order->info['pp_gs'], $xtPrice->get_decimal_places($order->info['currency']));
    545. 

  545. 		$order_fee = round($order->info['pp_fee'], $xtPrice->get_decimal_places($order->info['currency']));
    546. 

  546. 		$order_shipping = round($order->info['pp_shipping'], $xtPrice->get_decimal_places($order->info['currency']));
    547. 

  547. 		$nvp_products=$this->paypal_get_products($paymentAmount,$order_tax,$order_discount,$order_fee,$order_shipping,$order_gs);
    548. 

  548. 		$paymentAmount = urlencode(number_format($paymentAmount, $xtPrice->get_decimal_places($order->info['currency']), '.', ','));
    549. 

  549. 		$currencyCodeType = urlencode($order->info['currency']);
    550. 

  550. 		$tkn=(($data['token']!='')?$data['token']:$_SESSION['nvpReqArray']['TOKEN']);
    551. 

  551. 		$payer=(($data['PayerID']!='')?$data['PayerID']:$payer = $_SESSION['reshash']['PAYERID']);
    552. 

  552. 		$token =urlencode($tkn);
    553. 

  553. 		$payerID = urlencode($payer);
    554. 

  554. 		$paymentType='Sale';
    555. 

  555. 		$notify_url  = urlencode($this->NOTIFY_URL);
    556. 

  556. 		$inv_num = urlencode($insert_id);
    557. 

  557. 		$button_source = urlencode($this->ppAPIec);
    558. 

  558. 		// Versandadresse
    559. 

  559. 		$sh_name = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['firstname'].' '.$order->delivery['lastname']));
    560. 

  560. 		$sh_street = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['street_address']));
    561. 

  561. 		$sh_street_2 = '';
    562. 

  562. 		$sh_city = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8", $order->delivery['city']));
    563. 

  563. 		$sh_state = urlencode($this->state_code($order->delivery['state']));
    564. 

  564. 		if(is_array($order->delivery['country'])):
    565. 

  565. 			$sh_countrycode = urlencode($order->delivery['country']['iso_code_2']);
    566. 

  566. 			$sh_countryname = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",$order->delivery['country']['title']));
    567. 

  567. 		else:
    568. 

  568. 			$sh_countrycode = urlencode($order->delivery['country_iso_2']);
    569. 

  569. 			$sh_countryname = urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",$order->delivery['country']));
    570. 

  570. 		endif;
    571. 

  571. 		$sh_phonenum = urlencode($order->customer['telephone']);
    572. 

  572. 		$sh_zip = urlencode($order->delivery['postcode']);
    573. 

  573. 		$address = "&SHIPTONAME=".$sh_name."&SHIPTOSTREET=".$sh_street."&SHIPTOSTREET2=".$sh_street2."&SHIPTOCITY=".$sh_city."&SHIPTOZIP=".$sh_zip."&SHIPTOSTATE=".$sh_state."&SHIPTOCOUNTRYCODE=".$sh_countrycode."&SHIPTOCOUNTRYNAME=".$sh_countryname."&PHONENUM=".$sh_phonenum;
    574. 

  574. 		// Versand Ende
    575. 

  575. 		$nvpstr='&TOKEN='.$token.
    576. 

  576. 						'&PAYERID='.$payerID.
    577. 

  577. 						'&PAYMENTACTION='.$paymentType.
    578. 

  578. 						'&AMT='.$paymentAmount.
    579. 

  579. 						'&CURRENCYCODE='.$currencyCodeType.
    580. 

  580. 						'&IPADDRESS='.$customers_ip.
    581. 

  581. 						'&NOTIFYURL='.$notify_url.
    582. 

  582. 						'&INVNUM='.$inv_num.$adress.
    583. 

  583. 						'&BUTTONSOURCE='.$button_source.
    584. 

  584. 						$address;
    585. 

  585. 		// Artikel Details mitgeben
    586. 

  586. 		$nvpstr.=$nvp_products;
    587. 

  587. 		// Make the call to PayPal to finalize payment
    588. 

  588. 		// If an error occured, show the resulting errors
    589. 

  589. 		$resArray=$this->hash_call("DoExpressCheckoutPayment",$nvpstr);
    590. 

  590. 		$_SESSION['reshash'] = array_merge($_SESSION['reshash'], $resArray) ;
    591. 

  591. 		$ack = strtoupper($resArray["ACK"]);
    592. 

  592. 		if($ack!="SUCCESS" AND $ack!="SUCCESSWITHWARNING"){
    593. 

  593. 			$this->build_error_message($_SESSION['reshash'],'DoEx');
    594. 

  594. 		}
    595. 

  595. 	}
    596. 

  596. /*************************************************************/
    597. 

  597. /******* funktionen nur für Warenkorb ************************/
    598. 

  598. /*************************************************************/
    599. 

  599. 	function paypal_get_customer_data(){
    600. 

  600. 		// Stand: 29.04.2009
    601. 

  601. 		$nvpstr="&TOKEN=".$_SESSION['reshash']['TOKEN'];
    602. 

  602. 		// Make the API call and store the results in an array.  If the
    603. 

  603. 		// call was a success, show the authorization details, and provide
    604. 

  604. 		// an action to complete the payment.  If failed, show the error
    605. 

  605. 		$resArray=$this->hash_call("GetExpressCheckoutDetails",$nvpstr);
    606. 

  606. 		$_SESSION['reshash'] = array_merge($_SESSION['reshash'], $resArray) ;
    607. 

  607. 		$ack = strtoupper($resArray["ACK"]);
    608. 

  608. 		if($ack=="SUCCESS"){
    609. 

  609. 			$_SESSION['paypal_express_checkout'] = true;
    610. 

  610. 			$_SESSION['paypal_express_payment_modules'] = 'paypalexpress.php';
    611. 

  611. 			$this->check_customer();
    612. 

  612. 		} else  {
    613. 

  613. 			$this->build_error_message($_SESSION['reshash']);
    614. 

  614. 			$this->payPalURL = $this->EXPRESS_CANCEL_URL;
    615. 

  615. 			return $this->payPalURL;
    616. 

  616. 		}
    617. 

  617. 	}
    618. 

  618. /*************************************************************/
    619. 

  619. 	function check_customer(){
    620. 

  620. 		// Stand: 29.04.2009
    621. 

  621. 		if(!isset($_SESSION['customer_id'])) {
    622. 

  622. 			$check_customer_query = xtc_db_query("select * from ".TABLE_CUSTOMERS." where customers_email_address = '".xtc_db_input($_SESSION['reshash']['EMAIL'])."' and account_type = '0'");
    623. 

  623. 			if(!xtc_db_num_rows($check_customer_query)) {
    624. 

  624. 				$this->create_account();
    625. 

  625. 			}else{
    626. 

  626. 				$check_customer = xtc_db_fetch_array($check_customer_query);
    627. 

  627. 				$this->login_customer($check_customer);
    628. 

  628. 				if(PAYPAL_EXPRESS_ADDRESS_OVERRIDE == 'true' && $_SESSION['pp_allow_address_change']!='true')
    629. 

  629. 					$this->create_shipping_address();
    630. 

  630. 			}
    631. 

  631. 		}else{
    632. 

  632. 			if(PAYPAL_EXPRESS_ADDRESS_OVERRIDE == 'true' && $_SESSION['pp_allow_address_change']!='true'){
    633. 

  633. 				$check_customer_query = xtc_db_query("select * from ".TABLE_CUSTOMERS." where customers_id = '".xtc_db_input($_SESSION['customer_id'])."' and account_type = '0'");
    634. 

  634. 				$check_customer = xtc_db_fetch_array($check_customer_query);
    635. 

  635. 				$this->create_shipping_address();
    636. 

  636. 			}
    637. 

  637. 		}
    638. 

  638. 	}
    639. 

  639. /*************************************************************/
    640. 

  640. 	function create_account(){
    641. 

  641. 		// Stand: 29.04.2009
    642. 

  642. 		$firstname = xtc_db_prepare_input($this->UTF8decode($_SESSION['reshash']['FIRSTNAME']));
    643. 

  643. 		$lastname = xtc_db_prepare_input($this->UTF8decode($_SESSION['reshash']['LASTNAME']));
    644. 

  644. 		$email_address = xtc_db_prepare_input($_SESSION['reshash']['EMAIL']);
    645. 

  645. 		$company = xtc_db_prepare_input($this->UTF8decode($_SESSION['reshash']['BUSINESS']));
    646. 

  646. 		$street_address = xtc_db_prepare_input($this->UTF8decode($_SESSION['reshash']['SHIPTOSTREET'] . $_SESSION['reshash']['SHIPTOSTREET_2']));
    647. 

  647. 		$postcode = xtc_db_prepare_input($_SESSION['reshash']['SHIPTOZIP']);
    648. 

  648. 		$city = xtc_db_prepare_input($this->UTF8decode($_SESSION['reshash']['SHIPTOCITY']));
    649. 

  649. 		$state = xtc_db_prepare_input($_SESSION['reshash']['SHIPTOSTATE']);
    650. 

  650. 		$telephone = xtc_db_prepare_input($_SESSION['reshash']['PHONENUM']);
    651. 

  651. 		$country_query = xtc_db_query("select * from ".TABLE_COUNTRIES." where countries_iso_code_2 = '".xtc_db_input($_SESSION['reshash']['SHIPTOCOUNTRYCODE'])."' ");
    652. 

  652. 		$tmp_country = xtc_db_fetch_array($country_query);
    653. 

  653. 		$country = xtc_db_prepare_input($tmp_country['countries_id']);
    654. 

  654. 		$customers_status = DEFAULT_CUSTOMERS_STATUS_ID;
    655. 

  655. 		$sql_data_array = array(
    656. 

  656. 											'customers_status' => $customers_status,
    657. 

  657. 											'customers_firstname' => $firstname,
    658. 

  658. 											'customers_lastname' => $lastname,
    659. 

  659. 											'customers_email_address' => $email_address,
    660. 

  660. 											'customers_telephone' => $telephone,
    661. 

  661. 											'customers_date_added' => 'now()',
    662. 

  662. 											'customers_last_modified' => 'now()');
    663. 

  663. 		xtc_db_perform(TABLE_CUSTOMERS, $sql_data_array);
    664. 

  664. 		$_SESSION['paypal_express_new_customer'] = 'true';
    665. 

  665. 		$_SESSION['customer_id'] = xtc_db_insert_id();
    666. 

  666. 		$user_id = xtc_db_insert_id();
    667. 

  667. 		xtc_write_user_info($user_id);
    668. 

  668. 		$sql_data_array = array(
    669. 

  669. 											'customers_id' => $_SESSION['customer_id'],
    670. 

  670. 											'entry_firstname' => $firstname,
    671. 

  671. 											'entry_lastname' => $lastname,
    672. 

  672. 											'entry_street_address' => $street_address,
    673. 

  673. 											'entry_postcode' => $postcode,
    674. 

  674. 											'entry_city' => $city,
    675. 

  675. 											'entry_country_id' => $country,
    676. 

  676. 											'entry_company' => $company,
    677. 

  677. 											'entry_zone_id' => '0',
    678. 

  678. 											'entry_state' => $state,
    679. 

  679. 											'address_date_added' => 'now()',
    680. 

  680. 											'address_last_modified' => 'now()');
    681. 

  681. 		xtc_db_perform(TABLE_ADDRESS_BOOK, $sql_data_array);
    682. 

  682. 		$address_id = xtc_db_insert_id();
    683. 

  683. 		$_SESSION['sendto'] = $address_id;
    684. 

  684. 		xtc_db_query("update " . TABLE_CUSTOMERS . " set customers_default_address_id = '" . $address_id . "' where customers_id = '" . (int) $_SESSION['customer_id'] . "'");
    685. 

  685. 		xtc_db_query("insert into " . TABLE_CUSTOMERS_INFO . " (customers_info_id, customers_info_number_of_logons, customers_info_date_account_created) values ('" . (int) $_SESSION['customer_id'] . "', '0', now())");
    686. 

  686. 		if(isset($_SESSION['tracking']['refID'])) {
    687. 

  687. 			$campaign_check_query_raw = "SELECT *
    688. 

  688. 																	FROM " . TABLE_CAMPAIGNS . "
    689. 

  689. 																	WHERE campaigns_refID = '" . $_SESSION[tracking][refID] . "'";
    690. 

  690. 			$campaign_check_query = xtc_db_query($campaign_check_query_raw);
    691. 

  691. 			if(xtc_db_num_rows($campaign_check_query) > 0) {
    692. 

  692. 				$campaign = xtc_db_fetch_array($campaign_check_query);
    693. 

  693. 				$refID = $campaign['campaigns_id'];
    694. 

  694. 			} else {
    695. 

  695. 				$refID = 0;
    696. 

  696. 			}
    697. 

  697. 			xtc_db_query("update " . TABLE_CUSTOMERS . " set
    698. 

  698. 										refferers_id = '" . $refID . "'
    699. 

  699. 										where customers_id = '" . (int) $_SESSION['customer_id'] . "'");
    700. 

  700. 			$leads = $campaign['campaigns_leads'] + 1;
    701. 

  701. 			xtc_db_query("update " . TABLE_CAMPAIGNS . " set
    702. 

  702. 										campaigns_leads = '" . $leads . "'
    703. 

  703. 										where campaigns_id = '" . $refID . "'");
    704. 

  704. 		}
    705. 

  705. 		if(ACTIVATE_GIFT_SYSTEM == 'true') {
    706. 

  706. 			// GV Code Start
    707. 

  707. 			// ICW - CREDIT CLASS CODE BLOCK ADDED  ******************************************************* BEGIN
    708. 

  708. 			if(NEW_SIGNUP_GIFT_VOUCHER_AMOUNT > 0) {
    709. 

  709. 				$coupon_code = create_coupon_code();
    710. 

  710. 				$insert_query = xtc_db_query("insert into " . TABLE_COUPONS . " (coupon_code, coupon_type, coupon_amount, date_created) values ('" . $coupon_code . "', 'G', '" . NEW_SIGNUP_GIFT_VOUCHER_AMOUNT . "', now())");
    711. 

  711. 				$insert_id = xtc_db_insert_id($insert_query);
    712. 

  712. 				$insert_query = xtc_db_query("insert into " . TABLE_COUPON_EMAIL_TRACK . " (coupon_id, customer_id_sent, sent_firstname, emailed_to, date_sent) values ('" . $insert_id . "', '0', 'Admin', '" . $email_address . "', now() )");
    713. 

  713. 				$_SESSION['reshash']['SEND_GIFT'] = 'true';
    714. 

  714. 				$_SESSION['reshash']['GIFT_AMMOUNT'] = $xtPrice->xtcFormat(NEW_SIGNUP_GIFT_VOUCHER_AMOUNT, true);
    715. 

  715. 				$_SESSION['reshash']['GIFT_CODE'] = $coupon_code;
    716. 

  716. 				$_SESSION['reshash']['GIFT_LINK'] = xtc_href_link(FILENAME_GV_REDEEM, 'gv_no=' . $coupon_code, 'NONSSL', false);
    717. 

  717. 			}
    718. 

  718. 			if(NEW_SIGNUP_DISCOUNT_COUPON != '') {
    719. 

  719. 				$coupon_code = NEW_SIGNUP_DISCOUNT_COUPON;
    720. 

  720. 				$coupon_query = xtc_db_query("select * from " . TABLE_COUPONS . " where coupon_code = '" . $coupon_code . "'");
    721. 

  721. 				$coupon = xtc_db_fetch_array($coupon_query);
    722. 

  722. 				$coupon_id = $coupon['coupon_id'];
    723. 

  723. 				$coupon_desc_query = xtc_db_query("select * from " . TABLE_COUPONS_DESCRIPTION . " where coupon_id = '" . $coupon_id . "' and language_id = '" . (int) $_SESSION['language_id'] . "'");
    724. 

  724. 				$coupon_desc = xtc_db_fetch_array($coupon_desc_query);
    725. 

  725. 				$insert_query = xtc_db_query("insert into " . TABLE_COUPON_EMAIL_TRACK . " (coupon_id, customer_id_sent, sent_firstname, emailed_to, date_sent) values ('" . $coupon_id . "', '0', 'Admin', '" . $email_address . "', now() )");
    726. 

  726. 				$_SESSION['reshash']['SEND_COUPON'] = 'true';
    727. 

  727. 				$_SESSION['reshash']['COUPON_DESC'] = $coupon_desc['coupon_description'];
    728. 

  728. 				$_SESSION['reshash']['COUPON_CODE'] = $coupon['coupon_code'];
    729. 

  729. 			}
    730. 

  730. 			// ICW - CREDIT CLASS CODE BLOCK ADDED  ******************************************************* END
    731. 

  731. 			// GV Code End       // create templates
    732. 

  732. 		}
    733. 

  733. 		$_SESSION['ACCOUNT_PASSWORD'] = 'true';
    734. 

  734. 		// Login Customer
    735. 

  735. 		$check_customer_query = xtc_db_query("select * from ".TABLE_CUSTOMERS." where customers_email_address = '".xtc_db_input($email_address)."' and account_type = '0'");
    736. 

  736. 		$check_customer = xtc_db_fetch_array($check_customer_query);
    737. 

  737. 		$this->login_customer($check_customer);
    738. 

  738. 		if(PAYPAL_EXPRESS_ADDRESS_OVERRIDE == 'true'):
    739. 

  739. 			if($firstname.' '.$lastname != $this->UTF8decode($_SESSION['reshash']['SHIPTONAME']))
    740. 

  740. 				$this->create_shipping_address();
    741. 

  741. 		endif;
    742. 

  742. 	}
    743. 

  743. /*************************************************************/
    744. 

  744. 	function login_customer($check_customer){
    745. 

  745. 		// Stand: 29.04.2009
    746. 

  746. 		global $main,$xtPrice,$econda;
    747. 

  747. 		if(SESSION_RECREATE == 'True')
    748. 

  748. 			xtc_session_recreate();
    749. 

  749. 		$check_country_query = xtc_db_query("select entry_country_id, entry_zone_id from ".TABLE_ADDRESS_BOOK." where customers_id = '".(int) $check_customer['customers_id']."' and address_book_id = '".$check_customer['customers_default_address_id']."'");
    750. 

  750. 		$check_country = xtc_db_fetch_array($check_country_query);
    751. 

  751. 		$_SESSION['customer_gender'] = $check_customer['customers_gender'];
    752. 

  752. 		$_SESSION['customer_first_name'] = $check_customer['customers_firstname'];
    753. 

  753. 		$_SESSION['customer_last_name'] = $check_customer['customers_lastname'];
    754. 

  754. 		$_SESSION['customer_id'] = $check_customer['customers_id'];
    755. 

  755. 		$_SESSION['customer_vat_id'] = $check_customer['customers_vat_id'];
    756. 

  756. 		$_SESSION['customer_default_address_id'] = $check_customer['customers_default_address_id'];
    757. 

  757. 		$_SESSION['customer_country_id'] = $check_country['entry_country_id'];
    758. 

  758. 		$_SESSION['customer_zone_id'] = $check_country['entry_zone_id'];
    759. 

  759. 		$_SESSION['customer_email_address'] = $check_customer['customers_email_address'];
    760. 

  760. 		$date_now = date('Ymd');
    761. 

  761. 		xtc_db_query("update ".TABLE_CUSTOMERS_INFO." SET customers_info_date_of_last_logon = now(), customers_info_number_of_logons = customers_info_number_of_logons+1 WHERE customers_info_id = '".(int) $_SESSION['customer_id']."'");
    762. 

  762. 		xtc_write_user_info((int) $_SESSION['customer_id']);
    763. 

  763. 		// Falls vorher schon mal eingeloggt und was in der Cart war
    764. 

  764. 		xtc_db_query("delete from ".TABLE_CUSTOMERS_BASKET." where customers_id = '".(int)$_SESSION['customer_id']."'");
    765. 

  765. 		xtc_db_query("delete from ".TABLE_CUSTOMERS_BASKET_ATTRIBUTES." where customers_id = '".(int)$_SESSION['customer_id']."'");
    766. 

  766. 		// Warenkorb restoren
    767. 

  767. 		$_SESSION['cart']->restore_contents();
    768. 

  768. 		if(is_object($econda)) $econda->_loginUser();
    769. 

  769. 		// write customers status in session
    770. 

  770. 		require(DIR_WS_INCLUDES.'write_customers_status.php');
    771. 

  771. 		$xtPrice = new xtcPrice($_SESSION['currency'], $_SESSION['customers_status']['customers_status_id']);
    772. 

  772. 	}
    773. 

  773. /*************************************************************/
    774. 

  774. 	function create_shipping_address(){
    775. 

  775. 		// Stand: 29.04.2009
    776. 

  776. 		$pos = strrpos($_SESSION['reshash']['SHIPTONAME'], ' ');
    777. 

  777. 		$lenght = strlen($_SESSION['reshash']['SHIPTONAME']);
    778. 

  778. 		$firstname = $this->UTF8decode(substr($_SESSION['reshash']['SHIPTONAME'], 0, $pos));
    779. 

  779. 		$lastname = $this->UTF8decode(substr($_SESSION['reshash']['SHIPTONAME'], ($pos+1), $lenght));
    780. 

  780. 		$email_address = xtc_db_prepare_input($_SESSION['reshash']['EMAIL']);
    781. 

  781. 		$company = xtc_db_prepare_input($_SESSION['reshash']['BUSINESS']);
    782. 

  782. 		$street_address = xtc_db_prepare_input($this->UTF8decode($_SESSION['reshash']['SHIPTOSTREET'] . $_SESSION['reshash']['SHIPTOSTREET_2']));
    783. 

  783. 		$postcode = xtc_db_prepare_input($_SESSION['reshash']['SHIPTOZIP']);
    784. 

  784. 		$city = xtc_db_prepare_input($this->UTF8decode($_SESSION['reshash']['SHIPTOCITY']));
    785. 

  785. 		$state = xtc_db_prepare_input($_SESSION['reshash']['SHIPTOSTATE']);
    786. 

  786. 		$telephone = xtc_db_prepare_input($_SESSION['reshash']['PHONENUM']);
    787. 

  787. 		$country_query = xtc_db_query("select * from ".TABLE_COUNTRIES." where countries_iso_code_2 = '".xtc_db_input($_SESSION['reshash']['SHIPTOCOUNTRYCODE'])."' ");
    788. 

  788. 		$tmp_country = xtc_db_fetch_array($country_query);
    789. 

  789. 		$country = xtc_db_prepare_input($tmp_country['countries_id']);
    790. 

  790. 		$sql_data_array = array(
    791. 

  791. 											'customers_id' => $_SESSION['customer_id'],
    792. 

  792. 											'entry_firstname' => $firstname,
    793. 

  793. 											'entry_lastname' => $lastname,
    794. 

  794. 											'entry_street_address' => $street_address,
    795. 

  795. 											'entry_postcode' => $postcode,
    796. 

  796. 											'entry_city' => $city,
    797. 

  797. 											'entry_country_id' => $country,
    798. 

  798. 											'entry_company' => $company,
    799. 

  799. 											'entry_zone_id' => '0',
    800. 

  800. 											'entry_state' => $state,
    801. 

  801. 											'address_date_added' => 'now()',
    802. 

  802. 											'address_last_modified' => 'now()',
    803. 

  803. 											'address_class' => 'paypal');
    804. 

  804. 		$check_address_query = xtc_db_query("select address_book_id from ".TABLE_ADDRESS_BOOK." where customers_id = '".(int) $_SESSION['customer_id']."' and address_class = 'paypal'");
    805. 

  805. 		$check_address = xtc_db_fetch_array($check_address_query);
    806. 

  806. 		if($check_address['address_book_id']!='') {
    807. 

  807. 			xtc_db_perform(TABLE_ADDRESS_BOOK, $sql_data_array, 'update', "address_book_id = '".(int) $check_address['address_book_id']."' and customers_id ='".(int) $_SESSION['customer_id']."'");
    808. 

  808. 			$send_to = $check_address['address_book_id'];
    809. 

  809. 		}else{
    810. 

  810. 			xtc_db_perform(TABLE_ADDRESS_BOOK, $sql_data_array);
    811. 

  811. 			$send_to = xtc_db_insert_id();
    812. 

  812. 		}
    813. 

  813. 		$_SESSION['sendto'] = $send_to;
    814. 

  814. 	}
    815. 

  815. /*************************************************************/
    816. 

  816. /******* funktionen für beide versionen **********************/
    817. 

  817. /*************************************************************/
    818. 

  818. 	//  hash_call: Function to perform the API call to PayPal using API signature
    819. 

  819. 	//  @methodName is name of API  method.
    820. 

  820. 	//  @nvpStr is nvp string.
    821. 

  821. 	//  returns an associtive array containing the response from the server.
    822. 

  822. 	//  08.01.2009.ergänzt für PHP ohne cURL von Stefan Kl.
    823. 

  823. 	//  05.01.2010 Verbose auf 0 da bei einigen Hostern sonst zuviel angezeigt wird
    824. 

  824. 	function hash_call($methodName,$nvpStr,$pp_token=''){
    825. 

  825. 		// Stand: 05.01.2010
    826. 

  826. 		if(function_exists('curl_init')):
    827. 

  827. 			$ch = curl_init();
    828. 

  828. 			curl_setopt($ch, CURLOPT_URL,$this->API_Endpoint.$pp_token);
    829. 

  829. 			curl_setopt($ch, CURLOPT_VERBOSE, 0);
    830. 

  830. 			//turning off the server and peer verification(TrustManager Concept).
    831. 

  831. 			curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    832. 

  832. 			curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    833. 

  833. 			curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
    834. 

  834. 			curl_setopt($ch, CURLOPT_POST, 1);
    835. 

  835. 			//if USE_PROXY constant set to TRUE am Anfang dieser Datei, then only proxy will be enabled.
    836. 

  836. 			//Set proxy name to PROXY_HOST and port number to PROXY_PORT im Anfang dieser Datei
    837. 

  837. 			if($this->USE_PROXY)
    838. 

  838. 				curl_setopt($ch, CURLOPT_PROXY, PROXY_HOST.":".PROXY_PORT);
    839. 

  839. 			//NVPRequest for submitting to server
    840. 

  840. 			$nvpreq="METHOD=".urlencode($methodName)."&VERSION=".urlencode($this->version)."&PWD=".urlencode($this->API_Password)."&USER=".urlencode($this->API_UserName)."&SIGNATURE=".urlencode($this->API_Signature).$nvpStr;
    841. 

  841. 			//setting the nvpreq as POST FIELD to curl
    842. 

  842. 			curl_setopt($ch,CURLOPT_POSTFIELDS,$nvpreq);
    843. 

  843. 			//getting response from server
    844. 

  844. 			$response = curl_exec($ch);
    845. 

  845. 			//convrting NVPResponse to an Associative Array
    846. 

  846. 			$nvpResArray=$this->deformatNVP($response);
    847. 

  847. 			$nvpReqArray=$this->deformatNVP($nvpreq);
    848. 

  848. 			$_SESSION['nvpReqArray']= $nvpReqArray;
    849. 

  849. 			/* Mit cURL Fehleranzeige und nicht Versuch mit file_get_contents
    850. 

  850. 			if(curl_errno($ch)) {
    851. 

  851. 				// moving to display page to display curl errors
    852. 

  852. 				$_SESSION['curl_error_no']=curl_errno($ch) ;
    853. 

  853. 				$_SESSION['curl_error_msg']=curl_error($ch);
    854. 

  854. 				$this->build_error_message($_SESSION['reshash']);
    855. 

  855. 			}
    856. 

  856. 			*/
    857. 

  857. 			$curl_fehler=curl_errno($ch);
    858. 

  858. 			//closing the curl
    859. 

  859. 			curl_close($ch);
    860. 

  860. 			//return $nvpResArray;
    861. 

  861. 			if(!$curl_fehler)
    862. 

  862. 				return $nvpResArray;
    863. 

  863. 			//else:
    864. 

  864. 		endif;
    865. 

  865. 		/// Falls cURL nicht da oder Fehlerhaft
    866. 

  866. 		global $API_Endpoint,$version,$API_UserName,$API_Password,$API_Signature,$nvp_Header;
    867. 

  867. 		$nvpreq="METHOD=".urlencode($methodName)."&VERSION=".urlencode($this->version)."&PWD=".urlencode($this->API_Password)."&USER=".urlencode($this->API_UserName)."&SIGNATURE=".urlencode($this->API_Signature).$nvpStr;
    868. 

  868. 		$request_post = array(
    869. 

  869. 										'http'=>array(
    870. 

  870. 										'method'=>'POST',
    871. 

  871. 										'header'=>"Content-type: application/x-www-form-urlencoded\r\n",
    872. 

  872. 										'content'=>$nvpreq));
    873. 

  873. 		$request = stream_context_create($request_post);
    874. 

  874. 		$response= file_get_contents($this->API_Endpoint.$pp_token, false, $request);
    875. 

  875. 		$nvpResArray=$this->deformatNVP($response);
    876. 

  876. 		$nvpReqArray=$this->deformatNVP($nvpreq);
    877. 

  877. 		$_SESSION['nvpReqArray']= $nvpReqArray;
    878. 

  878. 		return $nvpResArray;
    879. 

  879. 		//endif;
    880. 

  880. 	}
    881. 

  881. /*************************************************************/
    882. 

  882. 	//  This function will take NVPString and convert it to an Associative Array and it will decode the response.
    883. 

  883. 	//  It is usefull to search for a particular key and displaying arrays.
    884. 

  884. 	//  @nvpstr is NVPString.
    885. 

  885. 	//  @nvpArray is Associative Array.
    886. 

  886. 	function deformatNVP($nvpstr){
    887. 

  887. 		// Stand: 29.04.2009
    888. 

  888. 		$intial=0;
    889. 

  889. 		$nvpArray = array();
    890. 

  890. 		while(strlen($nvpstr)){
    891. 

  891. 			//postion of Key
    892. 

  892. 			$keypos= strpos($nvpstr,'=');
    893. 

  893. 			//position of value
    894. 

  894. 			$valuepos = strpos($nvpstr,'&') ? strpos($nvpstr,'&'): strlen($nvpstr);
    895. 

  895. 			// getting the Key and Value values and storing in a Associative Array
    896. 

  896. 			$keyval=substr($nvpstr,$intial,$keypos);
    897. 

  897. 			$valval=substr($nvpstr,$keypos+1,$valuepos-$keypos-1);
    898. 

  898. 			//decoding the respose
    899. 

  899. 			$nvpArray[urldecode($keyval)] =urldecode( $valval);
    900. 

  900. 			$nvpstr=substr($nvpstr,$valuepos+1,strlen($nvpstr));
    901. 

  901. 		}
    902. 

  902. 		return $nvpArray;
    903. 

  903. 	}
    904. 

  904. /*************************************************************/
    905. 

  905. 	function build_error_message($resArray='',$Aufruf=''){
    906. 

  906. 		// Stand: 29.04.2009
    907. 

  907. 		global $messageStack;
    908. 

  908. 		if(isset($_SESSION['curl_error_no'])) {
    909. 

  909. 			$errorCode= $_SESSION['curl_error_no'] ;
    910. 

  910. 			$errorMessage=$_SESSION['curl_error_msg'] ;
    911. 

  911. 			$error .=  'Error Number: '.  $errorCode . '<br />';
    912. 

  912. 			$error .=  'Error Message: '.  $errorMessage . '<br />';
    913. 

  913. 		} else {
    914. 

  914. 			$error .=  'Ack: '.  $resArray['ACK'] . '<br />';
    915. 

  915. 			$error .=  'Correlation ID: '.  $resArray['CORRELATIONID']  . '<br />';
    916. 

  916. 			$error .=  'Version:'.  $resArray['VERSION'] . '<br />';
    917. 

  917. 			$count=0;
    918. 

  918. 			$redirect=0;
    919. 

  919. 			while(isset($resArray["L_SHORTMESSAGE".$count])) {
    920. 

  920. 				$errorCode    = $resArray["L_ERRORCODE".$count];
    921. 

  921. 				$shortMessage = $resArray["L_SHORTMESSAGE".$count];
    922. 

  922. 				$longMessage  = $resArray["L_LONGMESSAGE".$count];
    923. 

  923. 				if($Aufruf=='DoEx' AND ($errorCode=='10422' OR $errorCode=='10417'))
    924. 

  924. 					$redirect=1;
    925. 

  925. 				$count=$count+1;
    926. 

  926. 				$error .=  'Error Number:'.  $errorCode . '<br />';
    927. 

  927. 				$error .=  'Error Short Message: '.   $shortMessage . '<br />';
    928. 

  928. 				$error .=  'Error Long Message: '.  $longMessage . '<br />';
    929. 

  929. 			}//end while
    930. 

  930. 			if($redirect==1)
    931. 

  931. 				$_SESSION['reshash']['REDIRECTREQUIRED']="TRUE";
    932. 

  932. 		}// end else
    933. 

  933. 		$_SESSION['reshash']['FORMATED_ERRORS'] = $error;
    934. 

  934. 	}
    935. 

  935. /*************************************************************/
    936. 

  936. 	function paypal_get_products($paymentAmount,$order_tax,$order_discount,$order_fee,$order_shipping,$order_gs,$express_call=False){
    937. 

  937. 		// für beide PayPal Versionen
    938. 

  938. 		// Artikel Details mitgeben
    939. 

  939. 		// Für den Express Call Vermerk für den Versand + Vorläufige Kosten mitgeben
    940. 

  940. 		// Stand: 05.01.2010
    941. 

  941. 		global $xtPrice,$order;
    942. 

  942. 		$products_sum_amt = 0;
    943. 

  943. 		$tmp_products='';
    944. 

  944. 		for($i = 0, $n = sizeof($order->products); $i < $n; $i ++) {
    945. 

  945. 			$products_price = round($order->products[$i]['price'],$xtPrice->get_decimal_places($order->info['currency']));
    946. 

  946. 			$products_sum_amt+=$products_price*$order->products[$i]['qty'];
    947. 

  947. 			$tmp_products .='&L_NAME'.$i.'='.urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",substr($order->products[$i]['name'],0,127))).
    948. 

  948. 											'&L_NUMBER'.$i.'='.urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",substr($order->products[$i]['model'],0,127))).
    949. 

  949. 											'&L_QTY'.$i.'='.urlencode($order->products[$i]['qty']).
    950. 

  950. 											'&L_AMT'.$i.'='.urlencode(number_format($products_price, $xtPrice->get_decimal_places($order->info['currency']), '.', ','));
    951. 

  951. 		}
    952. 

  952. 		if($order_discount!=0):  // ist ein - Betrag !
    953. 

  953. 			$products_sum_amt+=$order_discount;
    954. 

  954. 			$tmp_products .='&L_NAME'.$i.'='.urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",substr(SUB_TITLE_OT_DISCOUNT,0,127))).
    955. 

  955. 											'&L_NUMBER'.$i.'='.
    956. 

  956. 											'&L_QTY'.$i.'=1'.
    957. 

  957. 											'&L_AMT'.$i.'='.urlencode(number_format($order_discount, $xtPrice->get_decimal_places($order->info['currency']), '.', ','));
    958. 

  958. 			$i++;
    959. 

  959. 		endif;
    960. 

  960. 		if($order_gs!=0):  // ist ein - Betrag !
    961. 

  961. 			$products_sum_amt+=$order_gs;
    962. 

  962. 			$tmp_products .='&L_NAME'.$i.'='.urlencode($this->mn_iconv($_SESSION['language_charset'], "UTF-8",substr(PAYPAL_GS,0,127))).
    963. 

  963. 											'&L_NUMBER'.$i.'='.
    964. 

  964. 											'&L_QTY'.$i.'=1'.
    965. 

  965. 											…
    966.

Large files files are truncated, but you can click here to view the full file