/administrator/components/com_virtuemart/html/checkout.danhost_cc_form.php

<?php
if( !defined( '_VALID_MOS' ) && !defined( '_JEXEC' ) ) die( 'Direct Access to '.basename(__FILE__).' is not allowed.' ); 
/**
*
* @version $Id: checkout.danhost_cc_form.php 1122 2008-01-07 14:52:31Z thepisu $
* @package VirtueMart
* @subpackage html
* @copyright Copyright (C) 2004-2007 soeren - All rights reserved.
* @license http://www.gnu.org/copyleft/gpl.html GNU/GPL, see LICENSE.php
* VirtueMart is free software. This version may have been modified pursuant
* to the GNU General Public License, and as distributed it includes or
* is derivative of works licensed under the GNU General Public License or
* other free or open source software licenses.
* See /administrator/components/com_virtuemart/COPYRIGHT.php for copyright notices and details.
*
* http://virtuemart.net
*/
mm_showMyFileName( __FILE__ );

require_once(  CLASSPATH ."payment/ps_pbs.cfg.php");

$sessionid = vmGet( $_GET, "sessionid" );

$cookievals = base64_decode( $sessionid );
$orderID = substr( $cookievals, 0, 8 );
$order_id = intval( $orderID );
$virtuemartcookie = substr( $cookievals, 8, 32 );
$sessioncookie = substr( $cookievals, 40, 32 );
$md5_check = substr( $cookievals, 72, 32 );

// Check Validity of the Page Load using the MD5 Check
$submitted_hashbase = $orderID . $virtuemartcookie . $sessioncookie;

// OK! VALID...
if( $md5_check === md5( $submitted_hashbase . $mosConfig_secret . ENCODE_KEY) ) {

  session_id( $virtuemartcookie );
  session_name( 'virtuemart' );
  @session_start();
  
  $session = new mosSession( $database );
  if ($session->load( $sessioncookie )) {
      // Session cookie exists, update time in session table
      $session->time = time();
      $session->update();
      $mainframe->_session = $session;
      $my = $mainframe->getUser();
  }
  
  /** Retrieve Order & Payment Info **/
  $db = new ps_DB;
  $q  = "SELECT order_id,order_total FROM #__{vm}_orders ";
  $q .= "WHERE #__{vm}_orders.user_id='" . $my->id . "' ";
  $q .= "AND #__{vm}_orders.order_id='$order_id' ";
  $db->query($q);
  if ($db->next_record()) {
  
    switch( $_SESSION['vendor_currency'] ) {
      case "DKK":
        $currency_iso_4217 = 208;
        break;
      case "EUR":
        $currency_iso_4217 = 978;
        break;
      case "USD":
        $currency_iso_4217 = 840;
        break;
      default:
        // assume that a danish gateway is used with Danish Krona
        $currency_iso_4217 = 208;
    }
    
    $q  = "SELECT * FROM #__users WHERE id='".$my->id."'"; 
    $dbbt = new ps_DB;
    $dbbt->setQuery($q);
    $dbbt->query();
    $dbbt->next_record();
    ?>  
    <div id="overDiv" style="position:absolute; visibility:hidden; z-index:10000;"></div>
    <script type="text/javascript" src="<?php echo $mosConfig_live_site ?>/includes/js/overlib_mini.js"></script>
    <script type="text/javascript">
    function check_pbscc_form() {
      // Remove all non-digits from CardNumber
      document.checkout_pbscc_payment.cardnum.value = document.checkout_pbscc_payment.cardnum.value.replace(/(\D)+/g,"");
    
      // Remove all non-digits from Control-digits
      document.checkout_pbscc_payment.cvc.value = document.checkout_pbscc_payment.cvc.value.replace(/(\D)+/g,"");
      
      if(document.checkout_pbscc_payment.cardnum.value.length < 10 ) {
        alert('<?php echo $VM_LANG->_('PHPSHOP_CHECKOUT_ERR_NO_CCDATE',false) ?>');
        return false;
      }      
      else if(document.checkout_pbscc_payment.cvc.value.length < 3 ) {
        alert('<?php echo $VM_LANG->_('CONTACT_FORM_NC',false) ?>');
        return false;
      }
      return true;
    }
    </script>
            
        <h2><?php echo $VM_LANG->_('PHPSHOP_ORDER_PRINT_PAYINFO_LBL') ?></h2>
        <h3><?php echo $VM_LANG->_('VM_CHECKOUT_PAGE_GATEWAY_EXPLAIN_1'); ?><br/>
			<?php echo $VM_LANG->_('VM_CHECKOUT_PAGE_GATEWAY_EXPLAIN_2'); ?>
        </h3>
    
        &nbsp;<form method="post" action="https://gateway.fuzion.dk/auth/" name="checkout_pbscc_payment">
    <input type="hidden" name="currency" value="<?php echo $currency_iso_4217 ?>" />
    <input type="hidden" name="amount" value="<?php echo $db->f("order_total") ?>" />
    <input type="hidden" name="shopid" value="<?php echo PBS_SHOP_ID ?>" />
    <input type="hidden" name="sessionid" value="<?php echo $sessionid ?>" />
    <input type="hidden" name="cust_name" value="<?php echo $dbbt->f("first_name") ." ".$dbbt->f("last_name") ?>" />
    <input type="hidden" name="cust_street" value="<?php echo $dbbt->f("address_1") ?>" />
    <input type="hidden" name="cust_zip" value="<?php echo $dbbt->f("zip") ?>" />
    <input type="hidden" name="cust_city" value="<?php echo $dbbt->f("city") ?>" />
    <input type="hidden" name="cust_state" value="<?php echo $dbbt->f("state") ?>" />
    <input type="hidden" name="cust_country" value="<?php echo $dbbt->f("country") ?>" />
    <input type="hidden" name="cust_phone" value="<?php echo $dbbt->f("phone_1") ?>" />
    <input type="hidden" name="cust_fax" value="<?php echo $dbbt->f("fax") ?>" />
    <input type="hidden" name="cust_email" value="<?php echo $dbbt->f("email") ?>" />
    <br/>
    <table>
      <tr>
        <td><?php echo $VM_LANG->_('PHPSHOP_ORDER_PRINT_PO_NUMBER') ?>:</td>
        <td><?php printf("%08d", $db->f("order_id")); ?></td>
      </tr>
      <tr>
        <td><?php echo $VM_LANG->_('PHPSHOP_CART_TOTAL') ?>:</td>
        <td><?php echo $CURRENCY_DISPLAY->getFullValue( $db->f("order_total")); ?></td>
      </tr>
      <tr>
        <td colspan="2"><hr/></td>
      </tr>
      <tr>
        <td><?php echo $VM_LANG->_('PHPSHOP_CHECKOUT_CONF_PAYINFO_CCNUM') ?>:</td>
        <td><input class="inputbox" type="text" name="cardnum" size="20"></td>
      </tr>
      <tr>
        <td><?php echo $VM_LANG->_('PHPSHOP_CHECKOUT_CONF_PAYINFO_EXDATE') ?>:</td>
        <td>
          <select class="inputbox" name="emonth">
            <option value="01">01</option>
            <option value="02">02</option>
            <option value="03">03</option>
            <option value="04">04</option>
            <option value="05">05</option>
            <option value="06">06</option>
            <option value="07">07</option>
            <option value="08">08</option>
            <option value="09">09</option>
            <option value="10">10</option>
            <option value="11">11</option>
            <option value="12">12</option>
          </select>&nbsp;&nbsp;
          <select class="inputbox" size="1" name="eyear">
            <option value="05">2005</option>
            <option value="06">2006</option>
            <option value="07">2007</option>
            <option value="08">2008</option>
            <option value="09">2009</option>
            <option value="10">2010</option>
            <option value="11">2011</option>
            <option value="12">2012</option>
            <option value="13">2013</option>
            <option value="14">2014</option>
            <option value="15">2015</option>
            <option value="16">2016</option>
            <option value="17">2017</option>
          </select>
        </td>
      </tr>
      <tr>
        <td><?php echo $VM_LANG->_('VM_CHECKOUT_CCV_CODE'); ?>:</td>
        <td><input class="inputbox" type="text" name="cvc" size="5" />
        <?php echo mm_ToolTip($VM_LANG->_('PHPSHOP_CUSTOMER_CVV2_TOOLTIP'), $VM_LANG->_('VM_CHECKOUT_CCV_CODE_TIPTITLE')); ?>
        </td>
      </tr>
    </table>
    <p align="center"><input type="submit" name="submit" onclick="return check_pbscc_form();" /></p>
    </form>
    
  <?php
  }
}
else {
?>
      <img src="<?php echo IMAGEURL ?>ps_image/button_cancel.png" align="center" alt="<?php echo $VM_LANG->_('VM_CHECKOUT_FAILURE'); ?>" border="0" />
      <span class="message"><?php echo $VM_LANG->_('PHPSHOP_PAYMENT_ERROR') . ' (' . $VM_LANG->_('VM_CHECKOUT_MD5_FAILED') . ')'; ?></span>
<?php
}
?>