payment.php

<?php
/**
 * @package     Redform
 * @subpackage  Payment.paypal
 * @copyright   Copyright (C) 2008 redCOMPONENT.com. All rights reserved.
 * @license     GNU/GPL, see LICENSE
 */

defined('_JEXEC') or die('Restricted access');

/**
 * Paypal helper
 *
 * @package     Redform
 * @subpackage  Payment.paypal
 * @since       2.5
 */
class PaymentPaypal extends  RdfPaymentHelper
{
	/**
	 * name of the gateway for dispatching
	 * @var string
	 */
	protected $gateway = 'paypal';

	protected $params = null;

	/**
	 * Display or redirect to the payment page for the gateway
	 *
	 * @param   object  $request     payment request object
	 * @param   string  $return_url  return url for redirection
	 * @param   string  $cancel_url  cancel url for redirection
	 *
	 * @return true on success
	 */
	public function process($request, $return_url = null, $cancel_url = null)
	{
		$app = JFactory::getApplication();
		$reference = $request->key;

		if (empty($return_url))
		{
			$return_url = $this->getUrl('processing', $reference);
		}

		if (empty($cancel_url))
		{
			$cancel_url = $this->getUrl('cancel', $reference);
		}

		// Get price and currency
		$res = $this->getDetails($reference);

		if ($this->params->get('paypal_sandbox', 1) == 1)
		{
			$paypalurl = "https://www.sandbox.paypal.com/cgi-bin/webscr";
		}
		else
		{
			$paypalurl = "https://www.paypal.com/cgi-bin/webscr";
		}

		$post_variables = Array(
			"cmd" => "_xclick",
			"business" => $this->params->get('paypal_account'),
			"item_name" => $request->title,
			"no_shipping" => '1',
			"invoice" => $request->uniqueid,
			"amount" => RedshopHelperCurrency::convert($this->getPrice($res), '', $this->params->get('currency')),
			"return" => $return_url,
			"notify_url" => $this->getUrl('notify', $reference),
			"cancel_return" => $cancel_url,
			"undefined_quantity" => "0",
			"currency_code" => $this->params->get('currency'),
			"no_note" => "1"
		);

		$query_string = "?";

		foreach ($post_variables as $name => $value)
		{
			$query_string .= $name . "=" . urlencode($value) . "&";
		}

		$app->redirect($paypalurl . $query_string);
	}

	/**
	 * handle the recpetion of notification
	 *
	 * @return bool paid status
	 */
	public function notify()
	{
		$mainframe = JFactory::getApplication();
		$db = JFactory::getDBO();

		$post = JRequest::get('post');
		$reference = JRequest::getvar('reference');
		$paid = 0;

		// read the post from PayPal system and add 'cmd'
		$req = 'cmd=_notify-validate';

		$data = array();

		foreach ($post as $key => $value)
		{
			$value = urlencode(stripslashes($value));
			$req .= "&$key=$value";
			$data[] = "$key=$value";
		}

		// Assign posted variables to local variables
		$item_name = $post['item_name'];
		$item_number = $post['item_number'];
		$payment_status = $post['payment_status'];
		$payment_amount = $post['mc_gross'];
		$payment_currency = $post['mc_currency'];
		$txn_id = $post['txn_id'];
		$receiver_email = $post['receiver_email'];
		$payer_email = $post['payer_email'];

		// Post back to PayPal system to validate
		if ($this->params->get('paypal_sandbox', 1) == 1)
		{
			$paypalurl = "https://www.sandbox.paypal.com";
		}
		else
		{
			$paypalurl = "https://www.paypal.com";
		}

		$ch = curl_init();
		curl_setopt($ch, CURLOPT_URL, $paypalurl . '/cgi-bin/webscr');
		curl_setopt($ch, CURLOPT_POST, 1);
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
		curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
		curl_setopt($ch, CURLOPT_HTTPHEADER, array('Host: www.paypal.com'));
		$res = curl_exec($ch);
		curl_close($ch);

		if (strcmp($res, "VERIFIED") == 0)
		{
			/* Check the payment_status is Completed
			   check that txn_id has not been previously processed
			   check that receiver_email is your Primary PayPal email
			   check that payment_amount/payment_currency are correct */

			$res = $this->getDetails($reference);

			if ($payment_amount != $this->getPrice($res))
			{
				RdfHelperLog::simpleLog('PAYPAL NOTIFICATION WRONG AMOUNT(' . $this->getPrice($res) . ') - ' . $reference);
			}
			elseif ($payment_currency != $res->currency)
			{
				RdfHelperLog::simpleLog('PAYPAL NOTIFICATION WRONG CURRENCY (' . $res->currency . ') - ' . $reference);
			}
			elseif (strcasecmp($payment_status, 'completed') == 0)
			{
				$paid = 1;
			}
		}
		elseif (strcmp($res, "INVALID") == 0)
		{
			// Log for manual investigation
			RdfHelperLog::simpleLog('PAYPAL NOTIFICATION INVALID IPN' . ' - ' . $reference);
		}
		else
		{
			RdfHelperLog::simpleLog('PAYPAL NOTIFICATION HTTP ERROR' . ' for ' . $reference);
		}

		$this->writeTransaction($reference, implode("\n", $data), $payment_status, $paid);

		// For routing
		JRequest::setVar('reference', $reference);

		return $paid;
	}
}