<?php
/**
* PayPal Class
*
* Author Seth Shoultes
* @package Event Espresso PayPal Gateway
* @category Library
*/
class EE_Paypal extends Espresso_PaymentGateway {
public $gateway_version = '1.0';
/**
* Initialize the PayPal gateway
*
* @param none
* @return void
*/
public function __construct() {
parent::__construct();
// Some default values of the class
$this->gatewayUrl = 'https://www.paypal.com/cgi-bin/webscr';
$this->ipnLogFile = EVENT_ESPRESSO_UPLOAD_DIR . 'logs/paypal.ipn_results.log';
// Populate $fields array with a few default
$this->addField('rm', '2'); // Return method = POST
$this->addField('cmd', '_xclick');
}
/**
* Enables the test mode
*
* @param none
* @return none
*/
public function enableTestMode() {
$this->testMode = TRUE;
$this->gatewayUrl = 'https://www.sandbox.paypal.com/cgi-bin/webscr';
}
public function logErrors($errors) {
if ($this->logIpn) {
// Timestamp
$text = '[' . date('m/d/Y g:i A') . '] - ';
// Success or failure being logged?
$text .= "Errors from IPN Validation:\n";
$text .= $errors;
// Write to log
file_put_contents($this->ipnLogFile, $text, FILE_APPEND) or do_action('action_hook_espresso_log', __FILE__, __FUNCTION__, 'could not write to paypal log file');
}
}
/**
* Validate the IPN notification
*
* @param none
* @return boolean
*/
public function validateIpn() {
global $org_options;
do_action('action_hook_espresso_log', __FILE__, __FUNCTION__, '');
if (function_exists('curl_init')) {
//new paypal code//
// parse the paypal URL
$urlParsed = parse_url($this->gatewayUrl);
// generate the post string from the _POST vars
$req = '';
$errors = "\nUsing BUILT-IN PHP curl methods\n";
// Run through the posted array
foreach ($_POST as $key => $value) {
$this->ipnData["$key"] = $value;
$errors .= "key = " . $key . "\nvalue = " . $value . "\n";
$value = urlencode(stripslashes($value));
$value = preg_replace('/(.*[^%^0^D])(%0A)(.*)/i', '${1}%0D%0A${3}', $value); // IPN fix
$req .= $key . '=' . $value . '&';
}
$req .= 'cmd=_notify-validate';
$url = $this->gatewayUrl;
$ch = curl_init(); // Starts the curl handler
$error = array();
$error["set_host"] = curl_setopt($ch, CURLOPT_URL, $url); // Sets the paypal address for curl
$error["set_fail_on_error"] = curl_setopt($ch, CURLOPT_FAILONERROR, 1);
$error["set_return_transfer"] = curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); // Returns result to a variable instead of echoing
$error["set_timeout"] = curl_setopt($ch, CURLOPT_TIMEOUT, 45); // Sets a time limit for curl in seconds (do not set too low)
$error["set_post"] = curl_setopt($ch, CURLOPT_POST, 1); // Set curl to send data using post
$error["set_post_fields"] = curl_setopt($ch, CURLOPT_POSTFIELDS, $req); // Add the request parameters to the post
$errors .= $error["set_host"] ? "Success" : "Failure";
$errors .= " Setting host: " . $url . "\n";
$errors .= $error["set_post"] ? "Success" : "Failure";
$errors .= " Setting request type to post\n";
$errors .= $error["set_post_fields"] ? "Success" : "Failure";
$errors .= " Setting post fields: " . htmlspecialchars($req) . "\n";
$errors .= $error["set_fail_on_error"] ? "Success" : "Failure";
$errors .= " Setting Fain On Error\n";
$errors .= $error["set_return_transfer"] ? "Success" : "Failure";
$errors .= " Setting return transfer\n";
$errors .= $error["set_timeout"] ? "Success" : "Failure";
$errors .= " Setting Timeout\n";
$error["set_verbose"] = curl_setopt($ch, CURLOPT_VERBOSE, 1);
$errors .= $error["set_verbose"] ? "Success" : "Failure";
$errors .= " Setting verbose mode\n";
$result = curl_exec($ch); // run the curl process (and return the result to $result
$this->ipnResponse = $result;
$error["result"] = curl_error($ch);
curl_close($ch);
$errors .= "Errors resulting from the execution of curl transfer: " . $error["result"];
$this->logErrors($errors);
if (strcmp(trim($result), "VERIFIED") == 0) { // It may seem strange but this function returns 0 if the result matches the string So you MUST check it is 0 and not just do strcmp ($result, "VERIFIED") (the if will fail as it will equate the result as false)
// Do some checks to ensure that the payment has been sent to the correct person
// Check and ensure currency and amount are correct
// Check that the transaction has not been processed before
// Ensure the payment is complete
// Valid IPN transaction.
$this->logResults(true);
return true;
} else {
// Log an invalid request to look into
// Invalid IPN transaction. Check the log for details.
$this->lastError = "IPN Validation Failed . $urlParsed[path] : $urlParsed[host]";
$this->logResults(false);
return false;
}
} else {
//Old paypal code
// parse the paypal URL
$urlParsed = parse_url($this->gatewayUrl);
// generate the post string from the _POST vars
$postString = '';
foreach ($_POST as $field => $value) {
$this->ipnData["$key"] = $value;
$value = urlencode(stripslashes($value));
$value = preg_replace('/(.*[^%^0^D])(%0A)(.*)/i', '${1}%0D%0A${3}', $value); // IPN fix
$req .= $key . '=' . $value . '&';
}
$postString .="cmd=_notify-validate"; // append ipn command
// open the connection to paypal
$fp = fsockopen($urlParsed[host], "80", $errNum, $errStr, 30);
if (!$fp) {
// Could not open the connection, log error if enabled
$this->lastError = "fsockopen error no. $errNum: $errStr";
$this->logResults(false);
return false;
} else {
// Post the data back to paypal
fputs($fp, "POST $urlParsed[path] HTTP/1.1\r\n");
fputs($fp, "Host: $urlParsed[host]\r\n");
fputs($fp, "Content-type: application/x-www-form-urlencoded\r\n");
fputs($fp, "Content-length: " . strlen($postString) . "\r\n");
fputs($fp, "Connection: close\r\n\r\n");
fputs($fp, $postString . "\r\n\r\n");
// loop through the response from the server and append to variable
while (!feof($fp)) {
$this->ipnResponse .= fgets($fp, 1024);
}
fclose($fp); // close connection
}
if (eregi("VERIFIED", $this->ipnResponse)) {
// Valid IPN transaction.
$this->logResults(true);
return true;
} else {
// Invalid IPN transaction. Check the log for details.
$this->lastError = "IPN Validation Failed . $urlParsed[path] : $urlParsed[host]";
$this->logResults(false);
return false;
}
}
}
public function submitButton($button_url, $gateway) {
$this->prepareSubmit();
global $gateway_name, $org_options;
echo '
<div id="' . $gateway . '-payment-option-dv" class="off-site-payment-gateway payment-option-dv">
<img class="off-site-payment-gateway-img" width="16" height="16" src="' . EVENT_ESPRESSO_PLUGINFULLURL . '/images/icons/external-link.png" alt="click to visit this payment gateway">
<form method="post" name="payment_form" action="' . $this->gatewayUrl . '">';
foreach ($this->fields as $name => $value) {
if($name != 'amount_1') {
echo "<input type=\"hidden\" name=\"$name\" value=\"$value\"/>\n";
} else {
echo "<label for='amount_1'>" . __("Payment Amount: ", "event_espresso") . $org_options['currency_symbol'] . "</label>";
echo "<input id='amount_1' name=\"$name\" value=\"$value\"/>\n";
}
}
echo '<input id="' . $gateway . '-payment-option-lnk" class="payment-option-lnk allow-leave-page" type="image" alt="Pay using ' . $gateway_name . '" src="' . $button_url . '" />';
echo '
</form>
</div>';
}
}