PageRenderTime 48ms CodeModel.GetById 21ms RepoModel.GetById 1ms app.codeStats 0ms

/htdocs/paypal/lib/paypal.lib.php

https://github.com/asterix14/dolibarr
PHP | 722 lines | 408 code | 83 blank | 231 comment | 91 complexity | 570e38e8efec38877d7fee6935236613 MD5 | raw file
Possible License(s): LGPL-2.0 
    

  1. <?php
    2. 

  2. /* Copyright (C) 2008-2010 Laurent Destailleur  <eldy@users.sourceforge.net>
    3. 

  3.  * Copyright (C) 2011      Regis Houssin        <regis@dolibarr.fr>
    4. 

  4.  *
    5. 

  5.  * This program is free software; you can redistribute it and/or modify
    6. 

  6.  * it under the terms of the GNU General Public License as published by
    7. 

  7.  * the Free Software Foundation; either version 2 of the License, or
    8. 

  8.  * (at your option) any later version.
    9. 

  9.  *
    10. 

  10.  * This program is distributed in the hope that it will be useful,
    11. 

  11.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
    12. 

  12.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    13. 

  13.  * GNU General Public License for more details.
    14. 

  14.  *
    15. 

  15.  * You should have received a copy of the GNU General Public License
    16. 

  16.  * along with this program. If not, see <http://www.gnu.org/licenses/>.
    17. 

  17.  */
    18. 

  18. 

  19. /**
    20. 

  20.  *	\file			htdocs/paypal/lib/paypal.lib.php
    21. 

  21.  *  \ingroup		paypal
    22. 

  22.  *  \brief			Library for common paypal functions
    23. 

  23.  */
    24. 

  24. 

  25. 

  26. /**
    27. 

  27.  * Show header
    28. 

  28.  *
    29. 

  29.  * @param 	string	$title
    30. 

  30.  * @param 	string	$head
    31. 

  31.  * @return	void
    32. 

  32.  */
    33. 

  33. function llxHeaderPaypal($title, $head = "")
    34. 

  34. {
    35. 

  35. 	global $user, $conf, $langs;
    36. 

  36. 

  37. 	header("Content-type: text/html; charset=".$conf->file->character_set_client);
    38. 

  38. 

  39. 	print '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">';
    40. 

  40. 	//print '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" http://www.w3.org/TR/1999/REC-html401-19991224/strict.dtd>';
    41. 

  41. 	print "\n";
    42. 

  42. 	print "<html>\n";
    43. 

  43. 	print "<head>\n";
    44. 

  44. 	print '<meta name="robots" content="noindex,nofollow">'."\n";
    45. 

  45. 	print '<meta name="keywords" content="dolibarr,payment,online">'."\n";
    46. 

  46. 	print '<meta name="description" content="Welcome on Dolibarr online payment form">'."\n";
    47. 

  47. 	print "<title>".$title."</title>\n";
    48. 

  48. 	if ($head) print $head."\n";
    49. 

  49. 	if ($conf->global->PAYPAL_CSS_URL) print '<link rel="stylesheet" type="text/css" href="'.$conf->global->PAYPAL_CSS_URL.'?lang='.$langs->defaultlang.'">'."\n";
    50. 

  50. 	else
    51. 

  51. 	{
    52. 

  52. 		print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.$conf->css.'?lang='.$langs->defaultlang.'">'."\n";
    53. 

  53. 		print '<style type="text/css">';
    54. 

  54. 		print '.CTableRow1      { margin: 1px; padding: 3px; font: 12px verdana,arial; background: #e6E6eE; color: #000000; -moz-border-radius-topleft:6px; -moz-border-radius-topright:6px; -moz-border-radius-bottomleft:6px; -moz-border-radius-bottomright:6px;}';
    55. 

  55. 		print '.CTableRow2      { margin: 1px; padding: 3px; font: 12px verdana,arial; background: #FFFFFF; color: #000000; -moz-border-radius-topleft:6px; -moz-border-radius-topright:6px; -moz-border-radius-bottomleft:6px; -moz-border-radius-bottomright:6px;}';
    56. 

  56. 		print '</style>';
    57. 

  57. 	}
    58. 

  58. 	print "</head>\n";
    59. 

  59. 	print '<body style="margin: 20px;">'."\n";
    60. 

  60. }
    61. 

  61. 

  62. /**
    63. 

  63.  * Show footer
    64. 

  64.  *
    65. 

  65.  * @return	void
    66. 

  66.  */
    67. 

  67. function llxFooterPaypal()
    68. 

  68. {
    69. 

  69. 	print "</body>\n";
    70. 

  70. 	print "</html>\n";
    71. 

  71. }
    72. 

  72. 

  73. 

  74. /**
    75. 

  75.  * Show footer of company in HTML pages
    76. 

  76.  *
    77. 

  77.  * @param   Societe		$fromcompany	Third party
    78. 

  78.  * @param   Translate	$langs			Output language
    79. 

  79.  * @return	void
    80. 

  80.  */
    81. 

  81. function html_print_paypal_footer($fromcompany,$langs)
    82. 

  82. {
    83. 

  83. 	global $conf;
    84. 

  84. 

  85. 	// Juridical status
    86. 

  86. 	$line1="";
    87. 

  87. 	if ($fromcompany->forme_juridique_code)
    88. 

  88. 	{
    89. 

  89. 		$line1.=($line1?" - ":"").$langs->convToOutputCharset(getFormeJuridiqueLabel($fromcompany->forme_juridique_code));
    90. 

  90. 	}
    91. 

  91. 	// Capital
    92. 

  92. 	if ($fromcompany->capital)
    93. 

  93. 	{
    94. 

  94. 		$line1.=($line1?" - ":"").$langs->transnoentities("CapitalOf",$fromcompany->capital)." ".$langs->transnoentities("Currency".$conf->monnaie);
    95. 

  95. 	}
    96. 

  96. 	// Prof Id 1
    97. 

  97. 	if ($fromcompany->idprof1 && ($fromcompany->pays_code != 'FR' || ! $fromcompany->idprof2))
    98. 

  98. 	{
    99. 

  99. 		$field=$langs->transcountrynoentities("ProfId1",$fromcompany->pays_code);
    100. 

  100. 		if (preg_match('/\((.*)\)/i',$field,$reg)) $field=$reg[1];
    101. 

  101. 		$line1.=($line1?" - ":"").$field.": ".$langs->convToOutputCharset($fromcompany->idprof1);
    102. 

  102. 	}
    103. 

  103. 	// Prof Id 2
    104. 

  104. 	if ($fromcompany->idprof2)
    105. 

  105. 	{
    106. 

  106. 		$field=$langs->transcountrynoentities("ProfId2",$fromcompany->pays_code);
    107. 

  107. 		if (preg_match('/\((.*)\)/i',$field,$reg)) $field=$reg[1];
    108. 

  108. 		$line1.=($line1?" - ":"").$field.": ".$langs->convToOutputCharset($fromcompany->idprof2);
    109. 

  109. 	}
    110. 

  110. 

  111. 	// Second line of company infos
    112. 

  112. 	$line2="";
    113. 

  113. 	// Prof Id 3
    114. 

  114. 	if ($fromcompany->idprof3)
    115. 

  115. 	{
    116. 

  116. 		$field=$langs->transcountrynoentities("ProfId3",$fromcompany->pays_code);
    117. 

  117. 		if (preg_match('/\((.*)\)/i',$field,$reg)) $field=$reg[1];
    118. 

  118. 		$line2.=($line2?" - ":"").$field.": ".$langs->convToOutputCharset($fromcompany->idprof3);
    119. 

  119. 	}
    120. 

  120. 	// Prof Id 4
    121. 

  121. 	if ($fromcompany->idprof4)
    122. 

  122. 	{
    123. 

  123. 		$field=$langs->transcountrynoentities("ProfId4",$fromcompany->pays_code);
    124. 

  124. 		if (preg_match('/\((.*)\)/i',$field,$reg)) $field=$reg[1];
    125. 

  125. 		$line2.=($line2?" - ":"").$field.": ".$langs->convToOutputCharset($fromcompany->idprof4);
    126. 

  126. 	}
    127. 

  127. 	// IntraCommunautary VAT
    128. 

  128. 	if ($fromcompany->tva_intra != '')
    129. 

  129. 	{
    130. 

  130. 		$line2.=($line2?" - ":"").$langs->transnoentities("VATIntraShort").": ".$langs->convToOutputCharset($fromcompany->tva_intra);
    131. 

  131. 	}
    132. 

  132. 

  133. 	print '<br><br><hr>'."\n";
    134. 

  134. 	print '<center><font style="font-size: 10px;">'."\n";
    135. 

  135. 	print $fromcompany->nom.'<br>';
    136. 

  136. 	print $line1.'<br>';
    137. 

  137. 	print $line2;
    138. 

  138. 	print '</font></center>'."\n";
    139. 

  139. }
    140. 

  140. 

  141. /**
    142. 

  142.  *  Define head array for tabs of paypal tools setup pages
    143. 

  143.  *
    144. 

  144.  *  @return			Array of head
    145. 

  145.  */
    146. 

  146. function paypaladmin_prepare_head()
    147. 

  147. {
    148. 

  148. 	global $langs, $conf;
    149. 

  149. 

  150. 	$h = 0;
    151. 

  151. 	$head = array();
    152. 

  152. 

  153. 	$head[$h][0] = DOL_URL_ROOT."/paypal/admin/paypal.php";
    154. 

  154. 	$head[$h][1] = $langs->trans("Account");
    155. 

  155. 	$head[$h][2] = 'paypalaccount';
    156. 

  156. 	$h++;
    157. 

  157. 

  158.     // Show more tabs from modules
    159. 

  159.     // Entries must be declared in modules descriptor with line
    160. 

  160.     // $this->tabs = array('entity:+tabname:Title:@mymodule:/mymodule/mypage.php?id=__ID__');   to add new tab
    161. 

  161.     // $this->tabs = array('entity:-tabname:Title:@mymodule:/mymodule/mypage.php?id=__ID__');   to remove a tab
    162. 

  162.     complete_head_from_modules($conf,$langs,$object,$head,$h,'paypaladmin');
    163. 

  163. 

  164.     return $head;
    165. 

  165. }
    166. 

  166. 

  167. 

  168. /**
    169. 

  169.  * Return string with full Url
    170. 

  170.  *
    171. 

  171.  * @param   int		$mode		0=True url, 1=Url formated with colors
    172. 

  172.  * @param   string	$type		Type of URL ('free', 'order', 'invoice', 'contractline', 'membersubscription' ...)
    173. 

  173.  * @param	string	$ref		Ref of object
    174. 

  174.  * @param	int		$amount		Amount
    175. 

  175.  * @param	string	$freetag	Free tag
    176. 

  176.  * @return	string				Url string
    177. 

  177.  */
    178. 

  178. function getPaypalPaymentUrl($mode,$type,$ref='',$amount='9.99',$freetag='your_free_tag')
    179. 

  179. {
    180. 

  180. 	global $conf;
    181. 

  181. 

  182.     if ($type == 'free')
    183. 

  183.     {
    184. 

  184. 	    $out=DOL_MAIN_URL_ROOT.'/public/paypal/newpayment.php?amount='.($mode?'<font color="#666666">':'').$amount.($mode?'</font>':'').'&tag='.($mode?'<font color="#666666">':'').$freetag.($mode?'</font>':'');
    185. 

  185. 	    if (! empty($conf->global->PAYPAL_SECURITY_TOKEN)) $out.='&securekey='.$conf->global->PAYPAL_SECURITY_TOKEN;
    186. 

  186.     }
    187. 

  187.     if ($type == 'order')
    188. 

  188.     {
    189. 

  189.         $out=DOL_MAIN_URL_ROOT.'/public/paypal/newpayment.php?source=order&ref='.($mode?'<font color="#666666">':'');
    190. 

  190.         if ($mode == 1) $out.='order_ref';
    191. 

  191.         if ($mode == 0) $out.=urlencode($ref);
    192. 

  192. 	    $out.=($mode?'</font>':'');
    193. 

  193.         if (! empty($conf->global->PAYPAL_SECURITY_TOKEN))
    194. 

  194.         {
    195. 

  195.     	    if (empty($conf->global->PAYPAL_SECURITY_TOKEN_UNIQUE)) $out.='&securekey='.$conf->global->PAYPAL_SECURITY_TOKEN;
    196. 

  196.             else
    197. 

  197.             {
    198. 

  198.                 $out.='&securekey='.($mode?'<font color="#666666">':'');
    199. 

  199.                 if ($mode == 1) $out.="hash('".$conf->global->PAYPAL_SECURITY_TOKEN."' + order + order_ref)";
    200. 

  200.                 if ($mode == 0) $out.= dol_hash($conf->global->PAYPAL_SECURITY_TOKEN . 'order' . $ref, 2);
    201. 

  201.                 $out.=($mode?'</font>':'');
    202. 

  202.             }
    203. 

  203.         }
    204. 

  204.     }
    205. 

  205.     if ($type == 'invoice')
    206. 

  206.     {
    207. 

  207.         $out=DOL_MAIN_URL_ROOT.'/public/paypal/newpayment.php?source=invoice&ref='.($mode?'<font color="#666666">':'');
    208. 

  208.         if ($mode == 1) $out.='invoice_ref';
    209. 

  209.         if ($mode == 0) $out.=urlencode($ref);
    210. 

  210. 	    $out.=($mode?'</font>':'');
    211. 

  211.         if (! empty($conf->global->PAYPAL_SECURITY_TOKEN))
    212. 

  212.         {
    213. 

  213.     	    if (empty($conf->global->PAYPAL_SECURITY_TOKEN_UNIQUE)) $out.='&securekey='.$conf->global->PAYPAL_SECURITY_TOKEN;
    214. 

  214.             else
    215. 

  215.             {
    216. 

  216.                 $out.='&securekey='.($mode?'<font color="#666666">':'');
    217. 

  217.                 if ($mode == 1) $out.="hash('".$conf->global->PAYPAL_SECURITY_TOKEN."' + invoice + invoice_ref)";
    218. 

  218.                 if ($mode == 0) $out.= dol_hash($conf->global->PAYPAL_SECURITY_TOKEN . 'invoice' . $ref, 2);
    219. 

  219.                 $out.=($mode?'</font>':'');
    220. 

  220.             }
    221. 

  221.         }
    222. 

  222.     }
    223. 

  223.     if ($type == 'contractline')
    224. 

  224.     {
    225. 

  225.         $out=DOL_MAIN_URL_ROOT.'/public/paypal/newpayment.php?source=contractline&ref='.($mode?'<font color="#666666">':'');
    226. 

  226.         if ($mode == 1) $out.='contractline_ref';
    227. 

  227.         if ($mode == 0) $out.=urlencode($ref);
    228. 

  228. 	    $out.=($mode?'</font>':'');
    229. 

  229.         if (! empty($conf->global->PAYPAL_SECURITY_TOKEN))
    230. 

  230.         {
    231. 

  231.     	    if (empty($conf->global->PAYPAL_SECURITY_TOKEN_UNIQUE)) $out.='&securekey='.$conf->global->PAYPAL_SECURITY_TOKEN;
    232. 

  232.             else
    233. 

  233.             {
    234. 

  234.                 $out.='&securekey='.($mode?'<font color="#666666">':'');
    235. 

  235.                 if ($mode == 1) $out.="hash('".$conf->global->PAYPAL_SECURITY_TOKEN."' + contactline + contractline_ref)";
    236. 

  236.                 if ($mode == 0) $out.= dol_hash($conf->global->PAYPAL_SECURITY_TOKEN . 'contractline' . $ref, 2);
    237. 

  237.                 $out.=($mode?'</font>':'');
    238. 

  238.             }
    239. 

  239.         }
    240. 

  240.     }
    241. 

  241.     if ($type == 'membersubscription')
    242. 

  242.     {
    243. 

  243.         $out=DOL_MAIN_URL_ROOT.'/public/paypal/newpayment.php?source=membersubscription&ref='.($mode?'<font color="#666666">':'');
    244. 

  244.         if ($mode == 1) $out.='member_ref';
    245. 

  245.         if ($mode == 0) $out.=urlencode($ref);
    246. 

  246. 	    $out.=($mode?'</font>':'');
    247. 

  247.         if (! empty($conf->global->PAYPAL_SECURITY_TOKEN))
    248. 

  248.         {
    249. 

  249.     	    if (empty($conf->global->PAYPAL_SECURITY_TOKEN_UNIQUE)) $out.='&securekey='.$conf->global->PAYPAL_SECURITY_TOKEN;
    250. 

  250.             else
    251. 

  251.             {
    252. 

  252.                 $out.='&securekey='.($mode?'<font color="#666666">':'');
    253. 

  253.                 if ($mode == 1) $out.="hash('".$conf->global->PAYPAL_SECURITY_TOKEN."' + membersubscription + member_ref)";
    254. 

  254.                 if ($mode == 0) $out.= dol_hash($conf->global->PAYPAL_SECURITY_TOKEN . 'membersubscription' . $ref, 2);
    255. 

  255.                 $out.=($mode?'</font>':'');
    256. 

  256.             }
    257. 

  257.         }
    258. 

  258.     }
    259. 

  259.     return $out;
    260. 

  260. }
    261. 

  261. 

  262. 

  263. /**
    264. 

  264.  * Send redirect to paypal to browser
    265. 

  265.  *
    266. 

  266.  * @param	float	$paymentAmount		Amount
    267. 

  267.  * @param   string	$currencyCodeType	Currency code
    268. 

  268.  * @param	string	$paymentType		Payment type
    269. 

  269.  * @param  	string	$returnURL			Url to use if payment is OK
    270. 

  270.  * @param   string	$cancelURL			Url to use if payment is KO
    271. 

  271.  * @param   string	$tag				Tag
    272. 

  272.  * @return	void
    273. 

  273.  */
    274. 

  274. function print_paypal_redirect($paymentAmount,$currencyCodeType,$paymentType,$returnURL,$cancelURL,$tag)
    275. 

  275. {
    276. 

  276.     //declaring of global variables
    277. 

  277.     global $conf, $langs;
    278. 

  278.     global $API_Endpoint, $API_Url, $API_version, $USE_PROXY, $PROXY_HOST, $PROXY_PORT;
    279. 

  279.     global $PAYPAL_API_USER, $PAYPAL_API_PASSWORD, $PAYPAL_API_SIGNATURE;
    280. 

  280. 

  281.     global $shipToName, $shipToStreet, $shipToCity, $shipToState, $shipToCountryCode, $shipToZip, $shipToStreet2, $phoneNum;
    282. 

  282. 

  283.     //'------------------------------------
    284. 

  284.     //' Calls the SetExpressCheckout API call
    285. 

  285.     //'
    286. 

  286.     //'-------------------------------------------------
    287. 

  287. 

  288.     if (empty($conf->global->PAYPAL_API_INTEGRAL_OR_PAYPALONLY)) $conf->global->PAYPAL_API_INTEGRAL_OR_PAYPALONLY='integral';
    289. 

  289. 

  290.     $solutionType='Sole';
    291. 

  291.     $landingPage='Billing';
    292. 

  292.     // For payment with Paypal only
    293. 

  293.     if ($conf->global->PAYPAL_API_INTEGRAL_OR_PAYPALONLY == 'paypalonly')
    294. 

  294.     {
    295. 

  295.         $solutionType='Mark';
    296. 

  296.         $landingPage='Login';
    297. 

  297.     }
    298. 

  298.     // For payment with Credit card or Paypal
    299. 

  299.     if ($conf->global->PAYPAL_API_INTEGRAL_OR_PAYPALONLY == 'integral')
    300. 

  300.     {
    301. 

  301.         $solutionType='Sole';
    302. 

  302.         $landingPage='Billing';
    303. 

  303.     }
    304. 

  304.     // For payment with Credit card
    305. 

  305.     if ($conf->global->PAYPAL_API_INTEGRAL_OR_PAYPALONLY == 'cconly')
    306. 

  306.     {
    307. 

  307.         $solutionType='Sole';
    308. 

  308.         $landingPage='Billing';
    309. 

  309.     }
    310. 

  310. 

  311.     dol_syslog("expresscheckout redirect with CallSetExpressCheckout $paymentAmount, $currencyCodeType, $paymentType, $returnURL, $cancelURL, $tag, $landingPage, $solutionType, $shipToName, $shipToStreet, $shipToCity, $shipToState, $shipToCountryCode, $shipToZip, $shipToStreet2, $phoneNum");
    312. 

  312.     $resArray = CallSetExpressCheckout(
    313. 

  313.         $paymentAmount,
    314. 

  314.         $currencyCodeType,
    315. 

  315.         $paymentType,
    316. 

  316.         $returnURL,
    317. 

  317.         $cancelURL,
    318. 

  318.         $tag,
    319. 

  319.         $solutionType,
    320. 

  320.         $landingPage,
    321. 

  321.         $shipToName,
    322. 

  322.         $shipToStreet,
    323. 

  323.         $shipToCity,
    324. 

  324.         $shipToState,
    325. 

  325.         $shipToCountryCode,
    326. 

  326.         $shipToZip,
    327. 

  327.         $shipToStreet2,
    328. 

  328.         $phoneNum
    329. 

  329.     );
    330. 

  330.     /* For direct payment with credit card
    331. 

  331.     {
    332. 

  332.         //$resArray = DirectPayment (...);
    333. 

  333.     }
    334. 

  334.     */
    335. 

  335. 

  336.     $ack = strtoupper($resArray["ACK"]);
    337. 

  337.     if($ack=="SUCCESS" || $ack=="SUCCESSWITHWARNING")
    338. 

  338.     {
    339. 

  339.         $token=$resArray["TOKEN"];
    340. 

  340. 

  341.         // Redirect to paypal.com here
    342. 

  342.         $payPalURL = $API_Url . $token;
    343. 

  343.         header("Location: ".$payPalURL);
    344. 

  344.         exit;
    345. 

  345.     }
    346. 

  346.     else
    347. 

  347.     {
    348. 

  348.         //Display a user friendly Error on the page using any of the following error information returned by PayPal
    349. 

  349.         $ErrorCode = urldecode($resArray["L_ERRORCODE0"]);
    350. 

  350.         $ErrorShortMsg = urldecode($resArray["L_SHORTMESSAGE0"]);
    351. 

  351.         $ErrorLongMsg = urldecode($resArray["L_LONGMESSAGE0"]);
    352. 

  352.         $ErrorSeverityCode = urldecode($resArray["L_SEVERITYCODE0"]);
    353. 

  353. 

  354.         echo "SetExpressCheckout API call failed. <br>\n";
    355. 

  355.         echo "Detailed Error Message: " . $ErrorLongMsg." <br>\n";
    356. 

  356.         echo "Short Error Message: " . $ErrorShortMsg." <br>\n";
    357. 

  357.         echo "Error Code: " . $ErrorCode." <br>\n";
    358. 

  358.         echo "Error Severity Code: " . $ErrorSeverityCode." <br>\n";
    359. 

  359.     }
    360. 

  360. 

  361. }
    362. 

  362. 

  363. /*
    364. 

  364.  '-------------------------------------------------------------------------------------------------------------------------------------------
    365. 

  365.  ' Purpose:     Prepares the parameters for the SetExpressCheckout API Call.
    366. 

  366.  ' Inputs:
    367. 

  367.  '      paymentAmount:      Total value of the shopping cart
    368. 

  368.  '      currencyCodeType:   Currency code value the PayPal API
    369. 

  369.  '      paymentType:        paymentType has to be one of the following values: Sale or Order or Authorization
    370. 

  370.  '      returnURL:          the page where buyers return to after they are done with the payment review on PayPal
    371. 

  371.  '      cancelURL:          the page where buyers return to when they cancel the payment review on PayPal
    372. 

  372.  '      shipToName:     the Ship to name entered on the merchant's site
    373. 

  373.  '      shipToStreet:       the Ship to Street entered on the merchant's site
    374. 

  374.  '      shipToCity:         the Ship to City entered on the merchant's site
    375. 

  375.  '      shipToState:        the Ship to State entered on the merchant's site
    376. 

  376.  '      shipToCountryCode:  the Code for Ship to Country entered on the merchant's site
    377. 

  377.  '      shipToZip:          the Ship to ZipCode entered on the merchant's site
    378. 

  378.  '      shipToStreet2:      the Ship to Street2 entered on the merchant's site
    379. 

  379.  '      phoneNum:           the phoneNum  entered on the merchant's site
    380. 

  380.  '--------------------------------------------------------------------------------------------------------------------------------------------
    381. 

  381.  */
    382. 

  382. function CallSetExpressCheckout($paymentAmount, $currencyCodeType, $paymentType, $returnURL, $cancelURL, $tag, $solutionType, $landingPage, $shipToName, $shipToStreet, $shipToCity, $shipToState, $shipToCountryCode, $shipToZip, $shipToStreet2, $phoneNum)
    383. 

  383. {
    384. 

  384.     //------------------------------------------------------------------------------------------------------------------------------------
    385. 

  385.     // Construct the parameter string that describes the SetExpressCheckout API call in the shortcut implementation
    386. 

  386. 

  387.     //declaring of global variables
    388. 

  388.     global $conf, $langs;
    389. 

  389.     global $API_Endpoint, $API_Url, $API_version, $USE_PROXY, $PROXY_HOST, $PROXY_PORT;
    390. 

  390.     global $PAYPAL_API_USER, $PAYPAL_API_PASSWORD, $PAYPAL_API_SIGNATURE;
    391. 

  391. 

  392.     $nvpstr="&AMT=". urlencode($paymentAmount);
    393. 

  393.     $nvpstr = $nvpstr . "&PAYMENTACTION=" . urlencode($paymentType);
    394. 

  394.     $nvpstr = $nvpstr . "&RETURNURL=" . urlencode($returnURL);
    395. 

  395.     $nvpstr = $nvpstr . "&CANCELURL=" . urlencode($cancelURL);
    396. 

  396.     $nvpstr = $nvpstr . "&CURRENCYCODE=" . urlencode($currencyCodeType);
    397. 

  397.     $nvpstr = $nvpstr . "&ADDROVERRIDE=1";
    398. 

  398.     //$nvpstr = $nvpstr . "&ALLOWNOTE=0";
    399. 

  399.     $nvpstr = $nvpstr . "&SHIPTONAME=" . urlencode($shipToName);
    400. 

  400.     $nvpstr = $nvpstr . "&SHIPTOSTREET=" . urlencode($shipToStreet);
    401. 

  401.     $nvpstr = $nvpstr . "&SHIPTOSTREET2=" . urlencode($shipToStreet2);
    402. 

  402.     $nvpstr = $nvpstr . "&SHIPTOCITY=" . urlencode($shipToCity);
    403. 

  403.     $nvpstr = $nvpstr . "&SHIPTOSTATE=" . urlencode($shipToState);
    404. 

  404.     $nvpstr = $nvpstr . "&SHIPTOCOUNTRYCODE=" . urlencode($shipToCountryCode);
    405. 

  405.     $nvpstr = $nvpstr . "&SHIPTOZIP=" . urlencode($shipToZip);
    406. 

  406.     $nvpstr = $nvpstr . "&PHONENUM=" . urlencode($phoneNum);
    407. 

  407.     $nvpstr = $nvpstr . "&SOLUTIONTYPE=" . urlencode($solutionType);
    408. 

  408.     $nvpstr = $nvpstr . "&LANDINGPAGE=" . urlencode($landingPage);
    409. 

  409.     //$nvpstr = $nvpstr . "&CUSTOMERSERVICENUMBER=" . urlencode($tag);
    410. 

  410.     $nvpstr = $nvpstr . "&INVNUM=" . urlencode($tag);
    411. 

  411. 

  412. 

  413. 

  414.     $_SESSION["currencyCodeType"] = $currencyCodeType;
    415. 

  415.     $_SESSION["PaymentType"] = $paymentType;
    416. 

  416. 

  417.     //'---------------------------------------------------------------------------------------------------------------
    418. 

  418.     //' Make the API call to PayPal
    419. 

  419.     //' If the API call succeded, then redirect the buyer to PayPal to begin to authorize payment.
    420. 

  420.     //' If an error occured, show the resulting errors
    421. 

  421.     //'---------------------------------------------------------------------------------------------------------------
    422. 

  422.     $resArray=hash_call("SetExpressCheckout", $nvpstr);
    423. 

  423.     $ack = strtoupper($resArray["ACK"]);
    424. 

  424.     if($ack=="SUCCESS" || $ack=="SUCCESSWITHWARNING")
    425. 

  425.     {
    426. 

  426.         $token = urldecode($resArray["TOKEN"]);
    427. 

  427.         $_SESSION['TOKEN']=$token;
    428. 

  428.         $_SESSION['ipaddress']=$_SERVER['REMOTE_ADDR '];  // Payer ip
    429. 

  429.     }
    430. 

  430. 

  431.     return $resArray;
    432. 

  432. }
    433. 

  433. 

  434. /**
    435. 

  435.  * 	Prepares the parameters for the GetExpressCheckoutDetails API Call.
    436. 

  436.  *
    437. 

  437.  *	@return	array		The NVP Collection object of the GetExpressCheckoutDetails Call Response.
    438. 

  438.  */
    439. 

  439. function GetDetails($token)
    440. 

  440. {
    441. 

  441.     //'--------------------------------------------------------------
    442. 

  442.     //' At this point, the buyer has completed authorizing the payment
    443. 

  443.     //' at PayPal.  The function will call PayPal to obtain the details
    444. 

  444.     //' of the authorization, incuding any shipping information of the
    445. 

  445.     //' buyer.  Remember, the authorization is not a completed transaction
    446. 

  446.     //' at this state - the buyer still needs an additional step to finalize
    447. 

  447.     //' the transaction
    448. 

  448.     //'--------------------------------------------------------------
    449. 

  449. 

  450.     //declaring of global variables
    451. 

  451.     global $conf, $langs;
    452. 

  452.     global $API_Endpoint, $API_Url, $API_version, $USE_PROXY, $PROXY_HOST, $PROXY_PORT;
    453. 

  453.     global $PAYPAL_API_USER, $PAYPAL_API_PASSWORD, $PAYPAL_API_SIGNATURE;
    454. 

  454. 

  455.     //'---------------------------------------------------------------------------
    456. 

  456.     //' Build a second API request to PayPal, using the token as the
    457. 

  457.     //'  ID to get the details on the payment authorization
    458. 

  458.     //'---------------------------------------------------------------------------
    459. 

  459.     $nvpstr="&TOKEN=" . $token;
    460. 

  460. 

  461.     //'---------------------------------------------------------------------------
    462. 

  462.     //' Make the API call and store the results in an array.
    463. 

  463.     //' If the call was a success, show the authorization details, and provide
    464. 

  464.     //'     an action to complete the payment.
    465. 

  465.     //' If failed, show the error
    466. 

  466.     //'---------------------------------------------------------------------------
    467. 

  467.     $resArray=hash_call("GetExpressCheckoutDetails",$nvpstr);
    468. 

  468.     $ack = strtoupper($resArray["ACK"]);
    469. 

  469.     if($ack == "SUCCESS" || $ack=="SUCCESSWITHWARNING")
    470. 

  470.     {
    471. 

  471.         $_SESSION['payer_id'] = $resArray['PAYERID'];
    472. 

  472.     }
    473. 

  473.     return $resArray;
    474. 

  474. }
    475. 

  475. 

  476. 

  477. /**
    478. 

  478.  *	Validate payment
    479. 

  479.  *
    480. 

  480.  *	@return	void
    481. 

  481.  */
    482. 

  482. function ConfirmPayment($token, $paymentType, $currencyCodeType, $payerID, $ipaddress, $FinalPaymentAmt, $tag)
    483. 

  483. {
    484. 

  484.     /* Gather the information to make the final call to
    485. 

  485.      finalize the PayPal payment.  The variable nvpstr
    486. 

  486.      holds the name value pairs
    487. 

  487.      */
    488. 

  488. 

  489.     //declaring of global variables
    490. 

  490.     global $conf, $langs;
    491. 

  491.     global $API_Endpoint, $API_Url, $API_version, $USE_PROXY, $PROXY_HOST, $PROXY_PORT;
    492. 

  492.     global $PAYPAL_API_USER, $PAYPAL_API_PASSWORD, $PAYPAL_API_SIGNATURE;
    493. 

  493. 

  494.     $nvpstr  = '&TOKEN=' . urlencode($token) . '&PAYERID=' . urlencode($payerID) . '&PAYMENTACTION=' . urlencode($paymentType) . '&AMT=' . urlencode($FinalPaymentAmt);
    495. 

  495.     $nvpstr .= '&CURRENCYCODE=' . urlencode($currencyCodeType) . '&IPADDRESS=' . urlencode($ipaddress);
    496. 

  496.     //$nvpstr .= '&CUSTOM=' . urlencode($tag);
    497. 

  497.     $nvpstr .= '&INVNUM=' . urlencode($tag);
    498. 

  498. 

  499.     /* Make the call to PayPal to finalize payment
    500. 

  500.      If an error occured, show the resulting errors
    501. 

  501.      */
    502. 

  502.     $resArray=hash_call("DoExpressCheckoutPayment",$nvpstr);
    503. 

  503. 

  504.     /* Display the API response back to the browser.
    505. 

  505.      If the response from PayPal was a success, display the response parameters'
    506. 

  506.      If the response was an error, display the errors received using APIError.php.
    507. 

  507.      */
    508. 

  508.     $ack = strtoupper($resArray["ACK"]);
    509. 

  509. 

  510.     return $resArray;
    511. 

  511. }
    512. 

  512. 

  513. /**
    514. 

  514.  *	This function makes a DoDirectPayment API call
    515. 

  515.  *
    516. 

  516.  *  paymentType:        paymentType has to be one of the following values: Sale or Order or Authorization
    517. 

  517.  *  paymentAmount:      total value of the shopping cart
    518. 

  518.  *  currencyCode:       currency code value the PayPal API
    519. 

  519.  *  firstName:          first name as it appears on credit card
    520. 

  520.  *  lastName:           last name as it appears on credit card
    521. 

  521.  *  street:             buyer's street address line as it appears on credit card
    522. 

  522.  *  city:               buyer's city
    523. 

  523.  *  state:              buyer's state
    524. 

  524.  *  countryCode:        buyer's country code
    525. 

  525.  *  zip:                buyer's zip
    526. 

  526.  *  creditCardType:     buyer's credit card type (i.e. Visa, MasterCard ... )
    527. 

  527.  *  creditCardNumber:   buyers credit card number without any spaces, dashes or any other characters
    528. 

  528.  *  expDate:            credit card expiration date
    529. 

  529.  *  cvv2:               Card Verification Value
    530. 

  530.  *	@return		array	The NVP Collection object of the DoDirectPayment Call Response.
    531. 

  531.  */
    532. 

  532. function DirectPayment($paymentType, $paymentAmount, $creditCardType, $creditCardNumber, $expDate, $cvv2, $firstName, $lastName, $street, $city, $state, $zip, $countryCode, $currencyCode, $tag)
    533. 

  533. {
    534. 

  534.     //declaring of global variables
    535. 

  535.     global $conf, $langs;
    536. 

  536.     global $API_Endpoint, $API_Url, $API_version, $USE_PROXY, $PROXY_HOST, $PROXY_PORT;
    537. 

  537.     global $PAYPAL_API_USER, $PAYPAL_API_PASSWORD, $PAYPAL_API_SIGNATURE;
    538. 

  538. 

  539.     //Construct the parameter string that describes DoDirectPayment
    540. 

  540.     $nvpstr = "&AMT=" . urlencode($paymentAmount);
    541. 

  541.     $nvpstr = $nvpstr . "&CURRENCYCODE=" . urlencode($currencyCode);
    542. 

  542.     $nvpstr = $nvpstr . "&PAYMENTACTION=" . urlencode($paymentType);
    543. 

  543.     $nvpstr = $nvpstr . "&CREDITCARDTYPE=" . urlencode($creditCardType);
    544. 

  544.     $nvpstr = $nvpstr . "&ACCT=" . urlencode($creditCardNumber);
    545. 

  545.     $nvpstr = $nvpstr . "&EXPDATE=" . urlencode($expDate);
    546. 

  546.     $nvpstr = $nvpstr . "&CVV2=" . urlencode($cvv2);
    547. 

  547.     $nvpstr = $nvpstr . "&FIRSTNAME=" . urlencode($firstName);
    548. 

  548.     $nvpstr = $nvpstr . "&LASTNAME=" . urlencode($lastName);
    549. 

  549.     $nvpstr = $nvpstr . "&STREET=" . urlencode($street);
    550. 

  550.     $nvpstr = $nvpstr . "&CITY=" . urlencode($city);
    551. 

  551.     $nvpstr = $nvpstr . "&STATE=" . urlencode($state);
    552. 

  552.     $nvpstr = $nvpstr . "&COUNTRYCODE=" . urlencode($countryCode);
    553. 

  553.     $nvpstr = $nvpstr . "&IPADDRESS=" . $_SERVER['REMOTE_ADDR'];
    554. 

  554.     $nvpstr = $nvpstr . "&INVNUM=" . urlencode($tag);
    555. 

  555. 

  556.     $resArray=hash_call("DoDirectPayment", $nvpstr);
    557. 

  557. 

  558.     return $resArray;
    559. 

  559. }
    560. 

  560. 

  561. 

  562. /**
    563. 

  563.  * hash_call: Function to perform the API call to PayPal using API signature
    564. 

  564.  *
    565. 

  565.  * @param	string	$methodName 	is name of API  method.
    566. 

  566.  * @param	string	$nvpStr 		is nvp string.
    567. 

  567.  * @return	array					returns an associtive array containing the response from the server.
    568. 

  568.  */
    569. 

  569. function hash_call($methodName,$nvpStr)
    570. 

  570. {
    571. 

  571.     //declaring of global variables
    572. 

  572.     global $conf, $langs;
    573. 

  573.     global $API_Endpoint, $API_Url, $API_version, $USE_PROXY, $PROXY_HOST, $PROXY_PORT, $PROXY_USER, $PROXY_PASS;
    574. 

  574.     global $PAYPAL_API_USER, $PAYPAL_API_PASSWORD, $PAYPAL_API_SIGNATURE;
    575. 

  575. 

  576.     // TODO problem with triggers
    577. 

  577.     $API_version="56";
    578. 

  578. 	if ($conf->global->PAYPAL_API_SANDBOX)
    579. 

  579. 	{
    580. 

  580. 	    $API_Endpoint = "https://api-3t.sandbox.paypal.com/nvp";
    581. 

  581. 	    $API_Url = "https://www.sandbox.paypal.com/webscr?cmd=_express-checkout&token=";
    582. 

  582. 	}
    583. 

  583. 	else
    584. 

  584. 	{
    585. 

  585. 	    $API_Endpoint = "https://api-3t.paypal.com/nvp";
    586. 

  586. 	    $API_Url = "https://www.paypal.com/cgi-bin/webscr?cmd=_express-checkout&token=";
    587. 

  587. 	}
    588. 

  588. 

  589. 	// Clean parameters
    590. 

  590. 	$PAYPAL_API_USER="";
    591. 

  591. 	if ($conf->global->PAYPAL_API_USER) $PAYPAL_API_USER=$conf->global->PAYPAL_API_USER;
    592. 

  592. 	$PAYPAL_API_PASSWORD="";
    593. 

  593. 	if ($conf->global->PAYPAL_API_PASSWORD) $PAYPAL_API_PASSWORD=$conf->global->PAYPAL_API_PASSWORD;
    594. 

  594. 	$PAYPAL_API_SIGNATURE="";
    595. 

  595. 	if ($conf->global->PAYPAL_API_SIGNATURE) $PAYPAL_API_SIGNATURE=$conf->global->PAYPAL_API_SIGNATURE;
    596. 

  596. 	$PAYPAL_API_SANDBOX="";
    597. 

  597. 	if ($conf->global->PAYPAL_API_SANDBOX) $PAYPAL_API_SANDBOX=$conf->global->PAYPAL_API_SANDBOX;
    598. 

  598. 	// TODO END problem with triggers
    599. 

  599. 

  600.     dol_syslog("Paypal API endpoint ".$API_Endpoint);
    601. 

  601. 

  602.     //setting the curl parameters.
    603. 

  603.     $ch = curl_init();
    604. 

  604. 

  605.     /*print $API_Endpoint."-".$API_version."-".$PAYPAL_API_USER."-".$PAYPAL_API_PASSWORD."-".$PAYPAL_API_SIGNATURE."<br>";
    606. 

  606.      print $USE_PROXY."-".$gv_ApiErrorURL."<br>";
    607. 

  607.      print $nvpStr;
    608. 

  608.      exit;*/
    609. 

  609.     curl_setopt($ch, CURLOPT_URL, $API_Endpoint);
    610. 

  610.     curl_setopt($ch, CURLOPT_VERBOSE, 1);
    611. 

  611. 

  612.     //turning off the server and peer verification(TrustManager Concept).
    613. 

  613.     curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    614. 

  614.     curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    615. 

  615. 

  616.     curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
    617. 

  617.     curl_setopt($ch, CURLOPT_POST, 1);
    618. 

  618. 

  619.     //if USE_PROXY constant set to TRUE in Constants.php, then only proxy will be enabled.
    620. 

  620.     if ($USE_PROXY)
    621. 

  621.     {
    622. 

  622.         dol_syslog("Paypal API hash_call set proxy to ".$PROXY_HOST. ":" . $PROXY_PORT." - ".$PROXY_USER. ":" . $PROXY_PASS);
    623. 

  623.         //curl_setopt ($ch, CURLOPT_PROXYTYPE, CURLPROXY_HTTP); // Curl 7.10
    624. 

  624.         curl_setopt($ch, CURLOPT_PROXY, $PROXY_HOST. ":" . $PROXY_PORT);
    625. 

  625.         if ($PROXY_USER) curl_setopt($ch, CURLOPT_PROXYUSERPWD, $PROXY_USER. ":" . $PROXY_PASS);
    626. 

  626.     }
    627. 

  627. 

  628.     //NVPRequest for submitting to server
    629. 

  629.     $nvpreq ="METHOD=" . urlencode($methodName) . "&VERSION=" . urlencode($API_version) . "&PWD=" . urlencode($PAYPAL_API_PASSWORD) . "&USER=" . urlencode($PAYPAL_API_USER) . "&SIGNATURE=" . urlencode($PAYPAL_API_SIGNATURE) . $nvpStr;
    630. 

  630.     $nvpreq.="&LOCALE=".strtoupper($langs->getDefaultLang(1));
    631. 

  631.     //$nvpreq.="&BRANDNAME=".urlencode();       // Override merchant name
    632. 

  632.     //$nvpreq.="&NOTIFYURL=".urlencode();       // For Instant Payment Notification url
    633. 

  633. 

  634. 

  635.     dol_syslog("Paypal API hash_call nvpreq=".$nvpreq);
    636. 

  636. 

  637.     //setting the nvpreq as POST FIELD to curl
    638. 

  638.     curl_setopt($ch, CURLOPT_POSTFIELDS, $nvpreq);
    639. 

  639. 

  640.     //getting response from server
    641. 

  641.     $response = curl_exec($ch);
    642. 

  642. 

  643.     $nvpReqArray=deformatNVP($nvpreq);
    644. 

  644.     $_SESSION['nvpReqArray']=$nvpReqArray;
    645. 

  645. 

  646.     //convrting NVPResponse to an Associative Array
    647. 

  647.     dol_syslog("Paypal API hash_call Response nvpresp=".$response);
    648. 

  648.     $nvpResArray=deformatNVP($response);
    649. 

  649. 

  650.     if (curl_errno($ch))
    651. 

  651.     {
    652. 

  652.         // moving to display page to display curl errors
    653. 

  653.         $_SESSION['curl_error_no']=curl_errno($ch);
    654. 

  654.         $_SESSION['curl_error_msg']=curl_error($ch);
    655. 

  655. 

  656.         //Execute the Error handling module to display errors.
    657. 

  657.     }
    658. 

  658.     else
    659. 

  659.     {
    660. 

  660.         //closing the curl
    661. 

  661.         curl_close($ch);
    662. 

  662.     }
    663. 

  663. 

  664.     return $nvpResArray;
    665. 

  665. }
    666. 

  666. 

  667. /**
    668. 

  668.  * Get API errors
    669. 

  669.  *
    670. 

  670.  * @return	array		Array of errors
    671. 

  671.  */
    672. 

  672. function GetApiError()
    673. 

  673. {
    674. 

  674. 	$errors=array();
    675. 

  675. 

  676. 	$resArray=$_SESSION['reshash'];
    677. 

  677. 

  678. 	if(isset($_SESSION['curl_error_no']))
    679. 

  679. 	{
    680. 

  680. 		$errors[] = $_SESSION['curl_error_no'].'-'.$_SESSION['curl_error_msg'];
    681. 

  681. 	}
    682. 

  682. 

  683. 	foreach($resArray as $key => $value)
    684. 

  684. 	{
    685. 

  685. 		$errors[] = $key.'-'.$value;
    686. 

  686. 	}
    687. 

  687. 

  688. 	return $errors;
    689. 

  689. }
    690. 

  690. 

  691. 

  692. /**
    693. 

  693.  * This function will take NVPString and convert it to an Associative Array and it will decode the response.
    694. 

  694.  * It is usefull to search for a particular key and displaying arrays.
    695. 

  695.  *
    696. 

  696.  * @param	string	$nvpstr 		NVPString
    697. 

  697.  * @return	array					nvpArray = Associative Array
    698. 

  698.  * ----------------------------------------------------------------------------------
    699. 

  699.  */
    700. 

  700. function deformatNVP($nvpstr)
    701. 

  701. {
    702. 

  702.     $intial=0;
    703. 

  703.     $nvpArray = array();
    704. 

  704. 

  705.     while(strlen($nvpstr))
    706. 

  706.     {
    707. 

  707.         //postion of Key
    708. 

  708.         $keypos= strpos($nvpstr,'=');
    709. 

  709.         //position of value
    710. 

  710.         $valuepos = strpos($nvpstr,'&') ? strpos($nvpstr,'&'): strlen($nvpstr);
    711. 

  711. 

  712.         /*getting the Key and Value values and storing in a Associative Array*/
    713. 

  713.         $keyval=substr($nvpstr,$intial,$keypos);
    714. 

  714.         $valval=substr($nvpstr,$keypos+1,$valuepos-$keypos-1);
    715. 

  715.         //decoding the respose
    716. 

  716.         $nvpArray[urldecode($keyval)] =urldecode($valval);
    717. 

  717.         $nvpstr=substr($nvpstr,$valuepos+1,strlen($nvpstr));
    718. 

  718.     }
    719. 

  719.     return $nvpArray;
    720. 

  720. }
    721. 

  721. 

  722. ?>
    723.