PageRenderTime 49ms CodeModel.GetById 19ms RepoModel.GetById 0ms app.codeStats 0ms

/administrator/components/com_virtuemart/classes/payment/ps_pbs.php

https://bitbucket.org/dgough/annamaria-daneswood-25102012
PHP | 303 lines | 235 code | 12 blank | 56 comment | 25 complexity | a9b9ad6ad6d231a2513c5be7004c4ec8 MD5 | raw file
Possible License(s): GPL-2.0, LGPL-2.1 
    

  1. <?php
    2. 

  2. if( !defined( '_VALID_MOS' ) && !defined( '_JEXEC' ) ) die( 'Direct Access to '.basename(__FILE__).' is not allowed.' );
    3. 

  3. /**
    4. 

  4. *
    5. 

  5. * @version $Id: ps_pbs.php 1095 2007-12-19 20:19:16Z soeren_nb $
    6. 

  6. * @package VirtueMart
    7. 

  7. * @subpackage payment
    8. 

  8. * @copyright Copyright (C) 2004-2007 soeren - All rights reserved.
    9. 

  9. * @license http://www.gnu.org/copyleft/gpl.html GNU/GPL, see LICENSE.php
    10. 

  10. * VirtueMart is free software. This version may have been modified pursuant
    11. 

  11. * to the GNU General Public License, and as distributed it includes or
    12. 

  12. * is derivative of works licensed under the GNU General Public License or
    13. 

  13. * other free or open source software licenses.
    14. 

  14. * See /administrator/components/com_virtuemart/COPYRIGHT.php for copyright notices and details.
    15. 

  15. *
    16. 

  16. * http://virtuemart.net
    17. 

  17. */
    18. 

  18. 

  19. /**
    20. 

  20. * The ps_pbs class, containing the payment processing code
    21. 

  21. *  for transactions with PBS supported Payment Gateways 
    22. 

  22. * @author soeren
    23. 

  23.  */
    24. 

  24. class ps_pbs {
    25. 

  25. 

  26.     var $payment_code = "PBS";
    27. 

  27.     var $classname = "ps_pbs";
    28. 

  28.   
    29. 

  29.     /**
    30. 

  30.     * Show all configuration parameters for this payment method
    31. 

  31.     * @returns boolean False when the Payment method has no configration
    32. 

  32.     */
    33. 

  33.     function show_configuration() {
    34. 

  34.     
    35. 

  35.       global $VM_LANG, $mosConfig_live_site;
    36. 

  36.       $db =& new ps_DB;
    37. 

  37.       /** Read current Configuration ***/
    38. 

  38.       require_once(CLASSPATH ."payment/".$this->classname.".cfg.php");
    39. 

  39.     ?>
    40. 

  40.       <table>
    41. 

  41.         <tr>
    42. 

  42.             <td><strong><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PBS_MERCHANT_ID') ?></strong></td>
    43. 

  43.             <td>
    44. 

  44.                 <input type="text" name="PBS_MERCHANT_ID" class="inputbox" value="<?php echo PBS_MERCHANT_ID ?>" />
    45. 

  45.             </td>
    46. 

  46.             <td><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PBS_MERCHANT_ID_EXPLAIN') ?></td>
    47. 

  47.         </tr>
    48. 

  48.         <tr>
    49. 

  49.             <td><strong><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PBD_GATEWAY') ?></strong></td>
    50. 

  50.             <td>
    51. 

  51.                 <select name="PBS_GATEWAY" onchange="updateExtraInfo();" class="inputbox">
    52. 

  52.                     <option <?php if (PBS_GATEWAY == 'freeway.dk') echo "selected=\"selected\""; ?> value="freeway.dk">freeway.dk</option>
    53. 

  53.                     <option <?php if (PBS_GATEWAY == 'danhost.dk') echo "selected=\"selected\""; ?> value="danhost.dk">danhost.dk</option>
    54. 

  54.                     <!--<option <?php if (PBS_GATEWAY == 'webhosting.dk') echo "selected=\"selected\""; ?> value="webhosting.dk">webhosting.dk</option>-->
    55. 

  55.                     <!--<option <?php if (PBS_GATEWAY == 'interpay.dk') echo "selected=\"selected\""; ?> value="interpay.dk">interpay.dk</option>-->
    56. 

  56.                     <option <?php if (PBS_GATEWAY == 'wannafind.dk') echo "selected=\"selected\""; ?> value="wannafind.dk">wannafind.dk</option>
    57. 

  57.                     <option <?php if (PBS_GATEWAY == 'dandomain.dk') echo "selected=\"selected\""; ?> value="dandomain.dk">dandomain.dk</option>
    58. 

  58.                 </select>
    59. 

  59.             </td>
    60. 

  60.             <td><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PBD_GATEWAY_EXPLAIN') ?></td>
    61. 

  61.         </tr>
    62. 

  62.         <tr>
    63. 

  63.             <td><strong><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PBS_SHOP_ID') ?></strong></td>
    64. 

  64.             <td>
    65. 

  65.                 <input type="text" name="PBS_SHOP_ID" class="inputbox" value="<?php echo PBS_SHOP_ID ?>" />
    66. 

  66.             </td>
    67. 

  67.             <td><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PBS_SHOP_ID_EXPLAIN') ?></td>
    68. 

  68.         </tr>
    69. 

  69.         <tr>
    70. 

  70.             <td><strong><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PAYMENT_ORDERSTATUS_SUCC') ?></strong></td>
    71. 

  71.             <td>
    72. 

  72.                 <select name="PBS_VERIFIED_STATUS" class="inputbox" >
    73. 

  73.                 <?php
    74. 

  74.                     $q = "SELECT order_status_name,order_status_code FROM #__{vm}_order_status ORDER BY list_order";
    75. 

  75.                     $db->query($q);
    76. 

  76.                     $order_status_code = Array();
    77. 

  77.                     $order_status_name = Array();
    78. 

  78.                     
    79. 

  79.                     while ($db->next_record()) {
    80. 

  80.                       $order_status_code[] = $db->f("order_status_code");
    81. 

  81.                       $order_status_name[] =  $db->f("order_status_name");
    82. 

  82.                     }
    83. 

  83.                     for ($i = 0; $i < sizeof($order_status_code); $i++) {
    84. 

  84.                       echo "<option value=\"" . $order_status_code[$i];
    85. 

  85.                       if (PBS_VERIFIED_STATUS == $order_status_code[$i]) 
    86. 

  86.                          echo "\" selected=\"selected\">";
    87. 

  87.                       else
    88. 

  88.                          echo "\">";
    89. 

  89.                       echo $order_status_name[$i] . "</option>\n";
    90. 

  90.                     }?>
    91. 

  91.                     </select>
    92. 

  92.             </td>
    93. 

  93.             <td><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PAYMENT_ORDERSTATUS_SUCC_EXPLAIN') ?></td>
    94. 

  94.         </tr>
    95. 

  95.             <tr>
    96. 

  96.             <td><strong><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PAYMENT_ORDERSTATUS_FAIL') ?></strong></td>
    97. 

  97.             <td>
    98. 

  98.                 <select name="PBS_INVALID_STATUS" class="inputbox" >
    99. 

  99.                 <?php
    100. 

  100.                     for ($i = 0; $i < sizeof($order_status_code); $i++) {
    101. 

  101.                       echo "<option value=\"" . $order_status_code[$i];
    102. 

  102.                       if (PBS_INVALID_STATUS == $order_status_code[$i]) 
    103. 

  103.                          echo "\" selected=\"selected\">";
    104. 

  104.                       else
    105. 

  105.                          echo "\">";
    106. 

  106.                       echo $order_status_name[$i] . "</option>\n";
    107. 

  107.                     } ?>
    108. 

  108.                     </select>
    109. 

  109.             </td>
    110. 

  110.             <td><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_PAYMENT_ORDERSTATUS_FAIL_EXPLAIN') ?></td>
    111. 

  111.         </tr>
    112. 

  112.         <tr>
    113. 

  113.             <td><strong><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_ENABLE_AUTORIZENET_TESTMODE') ?></strong></td>
    114. 

  114.             <td>
    115. 

  115.                 <select name="PBS_TEST_MODE" class="inputbox" >
    116. 

  116.                 <option <?php if (PBS_TEST_MODE == '1') echo "selected=\"selected\""; ?> value="1"><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_YES') ?></option>
    117. 

  117.                 <option <?php if (PBS_TEST_MODE == '0') echo "selected=\"selected\""; ?> value="0"><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_NO') ?></option>
    118. 

  118.                 </select>
    119. 

  119.             </td>
    120. 

  120.             <td><?php echo $VM_LANG->_('PHPSHOP_ADMIN_CFG_ENABLE_AUTORIZENET_TESTMODE_EXPLAIN') ?>
    121. 

  121.             </td>
    122. 

  122.         </tr>
    123. 

  123.       </table>
    124. 

  124.       <script type="text/javascript">
    125. 

  125.       function updateExtraInfo() {
    126. 

  126.         var form = document.adminForm;
    127. 

  127.         switch( form.PBS_GATEWAY.selectedIndex ) {
    128. 

  128.             // FreeWay.dk
    129. 

  129.             case 0:
    130. 

  130.                 form.payment_extrainfo.value = '<'+'?php\n'
    131. 

  131.                         +'// This is the Session ID\n'
    132. 

  132.                         +'// It contains the Order ID, the VirtueMart Session ID and an md5 HASH CheckCode\n'
    133. 

  133.                         +'$sessionid = sprintf("%08d", $order_id). $_COOKIE[\'virtuemart\'].md5($_SERVER[\'REMOTE_ADDR\']);\n'
    134. 

  134.                         +'$sessionid .= md5( $sessionid . $mosConfig_secret . ENCODE_KEY);\n'
    135. 

  135.                         +'$sessionid = base64_encode( $sessionid );\n'
    136. 

  136.                         +'?>\n'
    137. 

  137.                         +'<form action="https://pay.freeway.dk/payform/relay.asp/<'+'?php echo PBS_MERCHANT_ID ?>?sessionid=<'+'?php echo $sessionid ?>" method="post" name="paymentform">\n'
    138. 

  138.                         +'<input type="image" src="components/com_virtuemart/shop_image/ps_image/payment.gif" name="submit" alt="Pay your Order now - Click here!" align="center" border="0" />\n'
    139. 

  139.                         +'</form>'
    140. 

  140.                         +'<a href="#" onclick="document.paymentform.submit();">Pay your Order now - Click here!</a>\n';
    141. 

  141.                 break;
    142. 

  142.             // DanHost.dk
    143. 

  143.             case 1:
    144. 

  144.                 form.payment_extrainfo.value = '<'+'?php\n'
    145. 

  145.                         +'// This is the Session ID\n'
    146. 

  146.                         +'// It contains the Order ID, the VirtueMart Session ID and an md5 HASH CheckCode\n'
    147. 

  147.                         +'$sessionid = sprintf("%08d", $order_id). $_COOKIE[\'virtuemart\'].md5($_SERVER[\'REMOTE_ADDR\']);\n'
    148. 

  148.                         +'$sessionid .= md5( $sessionid . $mosConfig_secret . ENCODE_KEY);\n'
    149. 

  149.                         +'$sessionid = base64_encode( $sessionid );\n'
    150. 

  150.                         +'?>\n'
    151. 

  151.                         +'<form action="https://gateway.fuzion.dk/" method="post">\n'
    152. 

  152.                         +'<input type="image" src="components/com_virtuemart/shop_image/ps_image/payment.gif" name="submit" alt="Pay your Order now - Click here!" align="center" border="0" />\n'
    153. 

  153.                         +'<input type="hidden" name="shopid" value="<'+'?php echo PBS_SHOP_ID ?>" />\n'
    154. 

  154.                         +'<input type="hidden" name="sessionid" value="<'+'?php echo $sessionid ?>" />\n'
    155. 

  155.                         +'<input type="hidden" name="shop_orderid" value="<'+'?php echo $order_id ?>" />\n'
    156. 

  156.                         +'</form>'
    157. 

  157.                         +'<a href="#" onclick="document.paymentform.submit();">Pay your Order now - Click here!</a>\n';
    158. 

  158.                 break;
    159. 

  159.             // Webhosting.dk
    160. 

  160.             case 2:
    161. 

  161.                 form.payment_extrainfo.value = '<'+'?php\n'
    162. 

  162.                         +'// This is the Session ID\n'
    163. 

  163.                         +'// It contains the Order ID, the VirtueMart Session ID and an md5 HASH CheckCode\n'
    164. 

  164.                         +'$sessionid = sprintf("%08d", $order_id). $_COOKIE[\'virtuemart\'].md5($_SERVER[\'REMOTE_ADDR\']);\n'
    165. 

  165.                         +'$sessionid .= md5( $sessionid . $mosConfig_secret . ENCODE_KEY);\n'
    166. 

  166.                         +'$sessionid = base64_encode( $sessionid );\n'
    167. 

  167.                         +'?>\n'
    168. 

  168.                         +'<form action="https://secure.webhosting.dk/pbsgateway/index.php" method="post" name="paymentform">\n'
    169. 

  169.                         +'<input type="image" src="components/com_virtuemart/shop_image/ps_image/payment.gif" name="submit" alt="Pay your Order now - Click here!" align="center" border="0" />\n'
    170. 

  170.                         +'<input type="hidden" name="shopid" value="<'+'?php echo PBS_SHOP_ID ?>" />\n'
    171. 

  171.                         +'<input type="hidden" name="sessionid" value="<'+'?php echo $sessionid ?>" />\n'
    172. 

  172.                         +'<input type="hidden" name="orderid" value="<'+'?php echo $order_id ?>" />\n'
    173. 

  173.                         +'<input type="hidden" name="currencycode" value="208" />\n'
    174. 

  174.                         +'<input type="hidden" name="amount" value="<'+'?php echo $db->f("order_total") ?>" />\n'
    175. 

  175.                         +'</form>'
    176. 

  176.                         +'<a href="#" onclick="document.paymentform.submit();">Pay your Order now - Click here!</a>\n';
    177. 

  177.                 break;
    178. 

  178.             // Interpay.dk
    179. 

  179.             case 3:
    180. 

  180.                 form.payment_extrainfo.value = '<'+'?php\n'
    181. 

  181.                         +'// This is the Session ID\n'
    182. 

  182.                         +'// It contains the Order ID, the VirtueMart Session ID and an md5 HASH CheckCode\n'
    183. 

  183.                         +'$sessionid = sprintf("%08d", $order_id). $_COOKIE[\'virtuemart\'].md5($_SERVER[\'REMOTE_ADDR\']);\n'
    184. 

  184.                         +'$sessionid .= md5( $sessionid . $mosConfig_secret . ENCODE_KEY);\n'
    185. 

  185.                         +'$sessionid = base64_encode( $sessionid );\n'
    186. 

  186.                         +'?>\n'
    187. 

  187.                         +'<form action="https://pbs.interpay.dk/?sessionid=<'+'?php echo $sessionid ?>&amount=<'+'?php $db->p("order_total") ?>" method="post" name="paymentform">\n'
    188. 

  188.                         +'<input type="image" src="components/com_virtuemart/shop_image/ps_image/payment.gif" name="submit" alt="Pay your Order now - Click here!" align="center" border="0" />\n'
    189. 

  189.                         +'</form>'
    190. 

  190.                         +'<a href="#" onclick="document.paymentform.submit();">Pay your Order now - Click here!</a>\n';
    191. 

  191.                 break;
    192. 

  192.             // WannaFind.dk
    193. 

  193.             case 4:
    194. 

  194.                 form.payment_extrainfo.value = '<'+'?php\n'
    195. 

  195.                         +'// This is the Session ID\n'
    196. 

  196.                         +'// It contains the Order ID, the VirtueMart Session ID and an md5 HASH CheckCode\n'
    197. 

  197.                         +'$sessionid = sprintf("%08d", $order_id). $_COOKIE[\'virtuemart\'].md5($_SERVER[\'REMOTE_ADDR\']);\n'
    198. 

  198.                         +'$sessionid .= md5( $sessionid . $mosConfig_secret . ENCODE_KEY);\n'
    199. 

  199.                         +'$sessionid = base64_encode( $sessionid );\n'
    200. 

  200.                         +'?>\n'
    201. 

  201.                         +'<form action="https://betaling.wannafind.dk/proxy/p.php/<'+'?php echo $mosConfig_live_site ?>/index.php?option=com_virtuemart&page=checkout.wannafind_cc_form&sessionid=<'+'?php echo $sessionid ?>" method="post" name="paymentform">\n'
    202. 

  202.                         +'<input type="image" src="components/com_virtuemart/shop_image/ps_image/payment.gif" name="submit" alt="Pay your Order now - Click here!" align="center" border="0" />\n'
    203. 

  203.                         +'<input type="hidden" name="shopid" value="<'+'?php echo PBS_SHOP_ID ?>" />\n'
    204. 

  204.                         +'<input type="hidden" name="orderid" value="<'+'?php echo $order_id ?>" />\n'
    205. 

  205.                         +'</form>'
    206. 

  206.                         +'<a href="#" onclick="document.paymentform.submit();">Pay your Order now - Click here!</a>\n';
    207. 

  207.                 break;
    208. 

  208.             // DanDomain.dk
    209. 

  209.             case 5:
    210. 

  210.                 form.payment_extrainfo.value = '<'+'?php\n'
    211. 

  211.                         +'// This is the Session ID\n'
    212. 

  212.                         +'// It contains the Order ID, the VirtueMart Session ID and an md5 HASH CheckCode\n'
    213. 

  213.                         +'$sessionid = sprintf("%08d", $order_id). $_COOKIE[\'virtuemart\'].md5($_SERVER[\'REMOTE_ADDR\']);\n'
    214. 

  214.                         +'$sessionid .= md5( $sessionid . $mosConfig_secret . ENCODE_KEY);\n'
    215. 

  215.                         +'$sessionid = base64_encode( $sessionid );\n'
    216. 

  216.                         +'?>\n'
    217. 

  217.                         +'<form action="https://pay.dandomain.dk/securetunnel.asp" method="post" name="paymentform">\n'
    218. 

  218.                         +'<input type="image" src="components/com_virtuemart/shop_image/ps_image/payment.gif" name="submit" alt="Pay your Order now - Click here!" align="center" border="0" />\n'
    219. 

  219.                         +'<input type="hidden" name="MerchantNumber" value="<'+'?php echo PBS_MERCHANT_ID ?>" />\n'
    220. 

  220.                         +'<input type="hidden" name="TunnelURL" value="<'+'?php echo $mosConfig_live_site ?>/index.php?option=com_virtuemart&page=checkout.dandomain_cc_form&sessionid=<'+'?php echo $sessionid ?>" />\n'
    221. 

  221.                         +'<input type="hidden" name="shopid" value="<'+'?php echo PBS_SHOP_ID ?>" />\n'
    222. 

  222.                         +'<input type="hidden" name="OrderID" value="<'+'?php echo $order_id ?>" />\n'
    223. 

  223.                         +'<input type="hidden" name="Amount" value="<'+'?php echo str_replace(".", ",", $db->f("order_total")) ?>" />\n'
    224. 

  224.                         +'<input type="hidden" name="CurrencyID" value="208" />\n'
    225. 

  225.                         +'</form>'
    226. 

  226.                         +'<a href="#" onclick="document.paymentform.submit();">Pay your Order now - Click here!</a>\n';
    227. 

  227.                 break;
    228. 

  228.         }
    229. 

  229.       }
    230. 

  230.       </script>
    231. 

  231.    <?php
    232. 

  232.       // return false if there\'s no configuration
    233. 

  233.       return true;
    234. 

  234.    }
    235. 

  235.    
    236. 

  236.     function has_configuration() {
    237. 

  237.       // return false if there's no configuration
    238. 

  238.       return true;
    239. 

  239.    }
    240. 

  240.    
    241. 

  241.   /**
    242. 

  242. 	* Returns the "is_writeable" status of the configuration file
    243. 

  243. 	* @param void
    244. 

  244. 	* @returns boolean True when the configuration file is writeable, false when not
    245. 

  245. 	*/
    246. 

  246.    function configfile_writeable() {
    247. 

  247.       return is_writeable( CLASSPATH."payment/".$this->classname.".cfg.php" );
    248. 

  248.    }
    249. 

  249.    
    250. 

  250.   /**
    251. 

  251. 	* Returns the "is_readable" status of the configuration file
    252. 

  252. 	* @param void
    253. 

  253. 	* @returns boolean True when the configuration file is writeable, false when not
    254. 

  254. 	*/
    255. 

  255.    function configfile_readable() {
    256. 

  256.       return is_readable( CLASSPATH."payment/".$this->classname.".cfg.php" );
    257. 

  257.    }   
    258. 

  258.   /**
    259. 

  259. 	* Writes the configuration file for this payment method
    260. 

  260. 	* @param array An array of objects
    261. 

  261. 	* @returns boolean True when writing was successful
    262. 

  262. 	*/
    263. 

  263.    function write_configuration( &$d ) {
    264. 

  264.       global $vmLogger;
    265. 

  265.       
    266. 

  266.       $my_config_array = array("PBS_MERCHANT_ID" => $d['PBS_MERCHANT_ID'],
    267. 

  267.                                 "PBS_GATEWAY" => $d['PBS_GATEWAY'],
    268. 

  268.                                 "PBS_SHOP_ID" => $d['PBS_SHOP_ID'],
    269. 

  269.                                 "PBS_VERIFIED_STATUS" => $d['PBS_VERIFIED_STATUS'],
    270. 

  270.                                 "PBS_INVALID_STATUS" => $d['PBS_INVALID_STATUS'],
    271. 

  271.                                 "PBS_TEST_MODE" => $d['PBS_TEST_MODE']
    272. 

  272.                         );
    273. 

  273.       $config = "<?php\n";
    274. 

  274.       $config .= "if( !defined( '_VALID_MOS' ) && !defined( '_JEXEC' ) ) die( 'Direct Access to '.basename(__FILE__).' is not allowed.' ); \n\n";
    275. 

  275.       foreach( $my_config_array as $key => $value ) {
    276. 

  276.         $config .= "define ('$key', '$value');\n";
    277. 

  277.       }
    278. 

  278.       
    279. 

  279.       $config .= "?>";
    280. 

  280.   
    281. 

  281.       if ($fp = fopen(CLASSPATH ."payment/".$this->classname.".cfg.php", "w")) {
    282. 

  282.           fputs($fp, $config, strlen($config));
    283. 

  283.           fclose ($fp);
    284. 

  284.           return true;
    285. 

  285.      }
    286. 

  286.      else {
    287. 

  287.         $vmLogger->err( "Could not write to configuration file ".CLASSPATH ."payment/".$this->classname.".cfg.php" );
    288. 

  288.         return false;
    289. 

  289.      }
    290. 

  290.    }
    291. 

  291.    
    292. 

  292.   /**************************************************************************
    293. 

  293.   ** name: process_payment()
    294. 

  294.   ** created by: ryan
    295. 

  295.   ** description: process transaction for PayMeNow
    296. 

  296.   ** parameters: $order_number, the number of the order, we're processing here
    297. 

  297.   **            $order_total, the total $ of the order
    298. 

  298.   ** returns: 
    299. 

  299.   ***************************************************************************/
    300. 

  300.    function process_payment($order_number, $order_total, &$d) {
    301. 

  301.     return true;
    302. 

  302.     }
    303. 

  303. }
    304. 

  304.