354 lines
12 KiB
PHP
354 lines
12 KiB
PHP
<?php
|
|
|
|
include_once(dirname(__FILE__).'/../../../config/config.inc.php');
|
|
include_once(dirname(__FILE__).'/../../../init.php');
|
|
|
|
include_once(_PS_MODULE_DIR_.'paypalapi/paypalapi.php');
|
|
include_once(_PS_MODULE_DIR_.'paypalapi/express/paypalexpress.php');
|
|
|
|
$ppExpress = new PaypalExpress();
|
|
$errors = array();
|
|
|
|
// #####
|
|
// Functions
|
|
|
|
function getAuthorization()
|
|
{
|
|
global $ppExpress, $cookie;
|
|
|
|
$result = $ppExpress->getAuthorisation();
|
|
$logs = $ppExpress->getLogs();
|
|
if (is_array($result) AND sizeof($result))
|
|
{
|
|
if (strtoupper($result['ACK']) == 'SUCCESS')
|
|
{
|
|
if (isset($result['TOKEN']))
|
|
{
|
|
$cookie->paypal_token = strval($result['TOKEN']);
|
|
$cookie->paypal_token_date = time();
|
|
header('Location: https://'.$ppExpress->getPayPalURL().'/webscr&cmd=_express-checkout&token='.urldecode(strval($cookie->paypal_token)));
|
|
}
|
|
else
|
|
$logs[] = '<b>'.$ppExpress->l('No token given by PayPal', 'submit').'</b>';
|
|
} else
|
|
$logs[] = '<b>'.$ppExpress->l('PayPal returned error', 'submit').'</b>';
|
|
}
|
|
$ppExpress->displayError($ppExpress->l('Authorisation to PayPal failed', 'submit'), $logs);
|
|
}
|
|
|
|
function getInfos()
|
|
{
|
|
global $ppExpress, $cookie;
|
|
|
|
$result = $ppExpress->getCustomerInfos();
|
|
$logs = $ppExpress->getLogs();
|
|
|
|
if (!is_array($result) OR !isset($result['ACK']) OR strtoupper($result['ACK']) != 'SUCCESS')
|
|
{
|
|
$logs[] = '<b>'.$ppExpress->l('Cannot retreive PayPal account informations', 'submit').'</b>';
|
|
$ppExpress->displayError($ppExpress->l('PayPal returned error', 'submit'), $logs);
|
|
}
|
|
elseif (!isset($result['TOKEN']) OR $result['TOKEN'] != $cookie->paypal_token)
|
|
{
|
|
$logs[] = '<b>'.$ppExpress->l('Token given by PayPal is not the same that cookie one', 'submit').'</b>';
|
|
$ppExpress->displayError($ppExpress->l('PayPal returned error', 'submit'), $logs);
|
|
}
|
|
return $result;
|
|
}
|
|
|
|
function displayProcess($payerID)
|
|
{
|
|
global $cookie;
|
|
|
|
$cookie->paypal_token = strval($cookie->paypal_token);
|
|
$cookie->paypal_payer_id = $payerID;
|
|
Tools::redirect('order.php?step=1&back=paypalapi');
|
|
}
|
|
|
|
function displayConfirm()
|
|
{
|
|
global $cookie, $smarty, $ppExpress, $cart, $payerID;
|
|
|
|
if (!$cookie->isLogged())
|
|
die('Not logged');
|
|
if (!$payerID AND !$payerID = Tools::htmlentitiesUTF8(strval(Tools::getValue('payerID'))))
|
|
die('No payer ID');
|
|
|
|
// Display all and exit
|
|
include(_PS_ROOT_DIR_.'/header.php');
|
|
|
|
$smarty->assign(array(
|
|
'back' => 'paypalapi',
|
|
'logo' => $ppExpress->getLogo(),
|
|
'ppToken' => strval($cookie->paypal_token),
|
|
'cust_currency' => $cookie->id_currency,
|
|
'currencies' => $ppExpress->getCurrency(),
|
|
'total' => $cart->getOrderTotal(true, 3),
|
|
'this_path_ssl' => Tools::getHttpHost(true, true).__PS_BASE_URI__.'modules/'. $ppExpress->name.'/',
|
|
'payerID' => $payerID,
|
|
'mode' => 'express/'
|
|
));
|
|
|
|
echo $ppExpress->display(_PS_MODULE_DIR_.'paypalapi/express/PaypalExpress.php', '../confirm.tpl');
|
|
include(_PS_ROOT_DIR_.'/footer.php');
|
|
die ;
|
|
}
|
|
|
|
function submitConfirm()
|
|
{
|
|
global $cookie, $smarty, $ppExpress, $cart;
|
|
|
|
if (!$cookie->isLogged())
|
|
die('Not logged');
|
|
elseif (!$currency = intval(Tools::getValue('currency_payement')))
|
|
die('No currency');
|
|
elseif (!$payerID = Tools::htmlentitiesUTF8(strval(Tools::getValue('payerID'))))
|
|
die('No payer ID');
|
|
elseif (!$cart->getOrderTotal(true, 3))
|
|
die('Empty cart');
|
|
|
|
$ppExpress->validOrder($cookie, $cart, $currency, $payerID, 'express');
|
|
}
|
|
|
|
function submitAccount()
|
|
{
|
|
global $cookie, $errors, $smarty;
|
|
|
|
if (!Validate::isEmail($email = Tools::getValue('email')))
|
|
$errors[] = Tools::displayError('e-mail not valid');
|
|
elseif (!Validate::isPasswd(Tools::getValue('passwd')))
|
|
$errors[] = Tools::displayError('invalid password');
|
|
elseif (Customer::customerExists($email))
|
|
$errors[] = Tools::displayError('someone has already registered with this e-mail address');
|
|
elseif (!@checkdate(Tools::getValue('months'), Tools::getValue('days'), Tools::getValue('years')) AND !(Tools::getValue('months') == '' AND Tools::getValue('days') == '' AND Tools::getValue('years') == ''))
|
|
$errors[] = Tools::displayError('invalid birthday');
|
|
else
|
|
{
|
|
$customer = new Customer();
|
|
if (Tools::isSubmit('newsletter'))
|
|
{
|
|
$customer->ip_registration_newsletter = pSQL($_SERVER['REMOTE_ADDR']);
|
|
$customer->newsletter_date_add = pSQL(date('Y-m-d h:i:s'));
|
|
}
|
|
$customer->birthday = (empty($_POST['years']) ? '' : intval($_POST['years']).'-'.intval($_POST['months']).'-'.intval($_POST['days']));
|
|
/* Customer and address, same fields, caching data */
|
|
$errors = $customer->validateControler();
|
|
$address = new Address();
|
|
$address->id_customer = 1;
|
|
$errors = array_unique(array_merge($errors, $address->validateControler()));
|
|
if (!sizeof($errors))
|
|
{
|
|
$customer->active = 1;
|
|
if (!$customer->add())
|
|
$errors[] = Tools::displayError('an error occurred while creating your account');
|
|
else
|
|
{
|
|
$address->id_customer = intval($customer->id);
|
|
if (!$address->add())
|
|
$errors[] = Tools::displayError('an error occurred while creating your address');
|
|
else
|
|
{
|
|
if (Mail::Send(intval($cookie->id_lang), 'account', 'Welcome!',
|
|
array('{firstname}' => $customer->firstname, '{lastname}' => $customer->lastname, '{email}' => $customer->email, '{passwd}' => Tools::getValue('passwd')), $customer->email, $customer->firstname.' '.$customer->lastname))
|
|
$smarty->assign('confirmation', 1);
|
|
$cookie->id_customer = intval($customer->id);
|
|
$cookie->customer_lastname = $customer->lastname;
|
|
$cookie->customer_firstname = $customer->firstname;
|
|
$cookie->passwd = $customer->passwd;
|
|
$cookie->logged = 1;
|
|
$cookie->email = $customer->email;
|
|
Module::hookExec('createAccount', array(
|
|
'_POST' => $_POST,
|
|
'newCustomer' => $customer
|
|
));
|
|
|
|
// Next !
|
|
$payerID = strval(Tools::getValue('payerID'));
|
|
displayProcess($payerID);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
function submitLogin()
|
|
{
|
|
global $cookie, $errors;
|
|
|
|
$passwd = trim(Tools::getValue('passwd'));
|
|
$email = trim(Tools::getValue('email'));
|
|
if (empty($email))
|
|
$errors[] = Tools::displayError('e-mail address is required');
|
|
elseif (!Validate::isEmail($email))
|
|
$errors[] = Tools::displayError('invalid e-mail address');
|
|
elseif (empty($passwd))
|
|
$errors[] = Tools::displayError('password is required');
|
|
elseif (Tools::strlen($passwd) > 32)
|
|
$errors[] = Tools::displayError('password is too long');
|
|
elseif (!Validate::isPasswd($passwd))
|
|
$errors[] = Tools::displayError('invalid password');
|
|
else
|
|
{
|
|
$customer = new Customer();
|
|
$authentication = $customer->getByemail(trim($email), trim($passwd));
|
|
/* Handle brute force attacks */
|
|
sleep(1);
|
|
if (!$authentication OR !$customer->id)
|
|
$errors[] = Tools::displayError('authentication failed');
|
|
else
|
|
{
|
|
$cookie->id_customer = intval($customer->id);
|
|
$cookie->customer_lastname = $customer->lastname;
|
|
$cookie->customer_firstname = $customer->firstname;
|
|
$cookie->logged = 1;
|
|
$cookie->passwd = $customer->passwd;
|
|
$cookie->email = $customer->email;
|
|
if (Configuration::get('PS_CART_FOLLOWING') AND (empty($cookie->id_cart) OR Cart::getNbProducts($cookie->id_cart) == 0))
|
|
$cookie->id_cart = Cart::lastNoneOrderedCart($customer->id);
|
|
Module::hookExec('authentication');
|
|
|
|
// Next !
|
|
$payerID = strval(Tools::getValue('payerID'));
|
|
displayProcess($payerID);
|
|
}
|
|
}
|
|
}
|
|
|
|
function displayLogin()
|
|
{
|
|
global $cookie, $result, $email, $payerID, $errors, $ppExpress, $smarty;
|
|
|
|
// Customer exists, login form
|
|
|
|
// If customer already logged, check if same mail than PayPal, and go through, or unlog
|
|
if ($cookie->isLogged() AND isset($result['EMAIL']) AND $cookie->email == $result['EMAIL'])
|
|
displayProcess($payerID);
|
|
elseif ($cookie->isLogged())
|
|
$cookie->makeNewLog();
|
|
|
|
// Smarty assigns
|
|
$smarty->assign(array(
|
|
'email' => $email,
|
|
'ppToken' => strval($cookie->paypal_token),
|
|
'errors'=> $errors,
|
|
'payerID' => $payerID
|
|
));
|
|
|
|
// Display all and exit
|
|
include(_PS_ROOT_DIR_.'/header.php');
|
|
echo $ppExpress->display(_PS_MODULE_DIR_.'paypalapi/express/PaypalExpress.php', 'login.tpl');
|
|
include(_PS_ROOT_DIR_.'/footer.php');
|
|
die ;
|
|
}
|
|
|
|
function displayAccount()
|
|
{
|
|
global $cookie, $result, $email, $payerID, $errors, $ppExpress, $smarty;
|
|
|
|
// Customer does not exists, signup form
|
|
|
|
// If customer already logged, unlog him
|
|
if ($cookie->isLogged())
|
|
$cookie->makeNewLog();
|
|
|
|
// Generate years, months and days
|
|
if (isset($_POST['years']) AND is_numeric($_POST['years']))
|
|
$selectedYears = intval($_POST['years']);
|
|
$years = Tools::dateYears();
|
|
if (isset($_POST['months']) AND is_numeric($_POST['months']))
|
|
$selectedMonths = intval($_POST['months']);
|
|
$months = Tools::dateMonths();
|
|
if (isset($_POST['days']) AND is_numeric($_POST['days']))
|
|
$selectedDays = intval($_POST['days']);
|
|
$days = Tools::dateDays();
|
|
|
|
// Select the most appropriate country
|
|
if (Tools::getValue('id_country'))
|
|
$selectedCountry = intval(Tools::getValue('id_country'));
|
|
else
|
|
$selectedCountry = Country::getByIso(strval($result['COUNTRYCODE']));
|
|
$countries = Country::getCountries(intval($cookie->id_lang), true);
|
|
|
|
// Smarty assigns
|
|
$smarty->assign(array(
|
|
'years' => $years,
|
|
'sl_year' => (isset($selectedYears) ? $selectedYears : 0),
|
|
'months' => $months,
|
|
'sl_month' => (isset($selectedMonths) ? $selectedMonths : 0),
|
|
'days' => $days,
|
|
'sl_day' => (isset($selectedDays) ? $selectedDays : 0),
|
|
'countries' => $countries,
|
|
'sl_country' => (isset($selectedCountry) ? $selectedCountry : 0),
|
|
'email' => $email,
|
|
'firstname' => (Tools::getValue('customer_firstname') ? Tools::htmlentitiesUTF8(strval(Tools::getValue('customer_firstname'))) : $result['FIRSTNAME']),
|
|
'lastname' => (Tools::getValue('customer_lastname') ? Tools::htmlentitiesUTF8(strval(Tools::getValue('customer_lastname'))) : $result['LASTNAME']),
|
|
'street' => (Tools::getValue('address1') ? Tools::htmlentitiesUTF8(strval(Tools::getValue('address1'))) : (isset($result['SHIPTOSTREET']) ? $result['SHIPTOSTREET'] : '')),
|
|
'city' => (Tools::getValue('city') ? Tools::htmlentitiesUTF8(strval(Tools::getValue('city'))) : (isset($result['SHIPTOCITY']) ? $result['SHIPTOCITY'] : '')),
|
|
'zip' => (Tools::getValue('postcode') ? Tools::htmlentitiesUTF8(strval(Tools::getValue('postcode'))) : (isset($result['SHIPTOZIP']) ? $result['SHIPTOZIP'] : '')),
|
|
'payerID' => $payerID,
|
|
'ppToken' => strval($cookie->paypal_token),
|
|
'errors'=> $errors
|
|
));
|
|
|
|
// Display all and exit
|
|
include(_PS_ROOT_DIR_.'/header.php');
|
|
echo $ppExpress->display(_PS_MODULE_DIR_.'paypalapi/express/PaypalExpress.php', 'authentication.tpl');
|
|
include(_PS_ROOT_DIR_.'/footer.php');
|
|
die ;
|
|
}
|
|
|
|
// #####
|
|
// Process !!
|
|
|
|
// No token, we need to get one by making PayPal Authorisation
|
|
if (!isset($cookie->paypal_token) OR !$cookie->paypal_token)
|
|
getAuthorization();
|
|
else
|
|
{
|
|
// We have token, we need to confirm user informations (login or signup)
|
|
if (intval(Tools::getValue('confirm')))
|
|
displayConfirm();
|
|
elseif (Tools::isSubmit('submitAccount'))
|
|
submitAccount();
|
|
elseif (Tools::isSubmit('submitLogin'))
|
|
submitLogin();
|
|
elseif (Tools::isSubmit('submitPayment'))
|
|
submitConfirm();
|
|
|
|
// We got an error or we still not submit form
|
|
if ((!Tools::isSubmit('submitAccount') AND !Tools::isSubmit('submitLogin')) OR sizeof($errors))
|
|
{
|
|
if (isset($cookie->paypal_token) AND isset($cookie->paypal_token_date) AND (time() - 10800 > $cookie->paypal_token_date))
|
|
{
|
|
// Token expired, unset it
|
|
unset($cookie->paypal_token);
|
|
Tools::redirect('modules/paypalapi/express/submit.php');
|
|
}
|
|
// We didn't submit form, getting PayPal informations
|
|
if (!Tools::isSubmit('submitAccount') AND !Tools::isSubmit('submitLogin'))
|
|
$result = getInfos();
|
|
|
|
if (Tools::getValue('email') AND Tools::getValue('payerID'))
|
|
{
|
|
// Form was submitted (errors)
|
|
$email = Tools::htmlentitiesUTF8(strval(Tools::getValue('email')));
|
|
$payerID = Tools::htmlentitiesUTF8(strval(Tools::getValue('payerID')));
|
|
}
|
|
elseif (isset($result['EMAIL']) AND isset($result['PAYERID']))
|
|
{
|
|
// Displaying form for the first time
|
|
$email = $result['EMAIL'];
|
|
$payerID = $result['PAYERID'];
|
|
}
|
|
else
|
|
{
|
|
// Error in token, we need to make authorization again
|
|
unset($cookie->paypal_token);
|
|
Tools::redirect('modules/paypalapi/express/submit.php');
|
|
}
|
|
if (Customer::customerExists($email) OR Tools::isSubmit('submitLogin'))
|
|
displayLogin();
|
|
displayAccount();
|
|
}
|
|
}
|