plugins/paymethod/paypal/PayPalPlugin.inc.php

<?php

import('classes.plugins.PaymethodPlugin');

class PayPalPlugin extends PaymethodPlugin {
   function PayPalPlugin() {
      parent::PaymethodPlugin();
   }

   function getName() {
      return 'Paypal';
   }

   function getDisplayName() {
      return __('plugins.paymethod.paypal.displayName');
   }

   function getDescription() {
      return __('plugins.paymethod.paypal.description');
   }   

   function register($category, $path) {
      if (parent::register($category, $path)) {
         if (!Config::getVar('general', 'installed') || defined('RUNNING_UPGRADE')) return true;
         $this->addLocaleData();
         $this->import('PayPalDAO');
         $payPalDao = new PayPalDAO();
         DAORegistry::registerDAO('PayPalDAO', $payPalDao);
         return true;
      }
      return false;
   }

   function getSettingsFormFieldNames() {
      return array('paypalurl', 'selleraccount');
   }

   function isCurlInstalled() {
      return (function_exists('curl_init'));
   }

   function isConfigured() {
      $press =& Request::getPress();
      if (!$press) return false;

      // Make sure CURL support is included.
      if (!$this->isCurlInstalled()) return false;

      // Make sure that all settings form fields have been filled in
      foreach ($this->getSettingsFormFieldNames() as $settingName) {
         $setting = $this->getSetting($press->getId(), $settingName);
         if (empty($setting)) return false;
      }
      return true;
   }

   function displayPaymentSettingsForm(&$params, &$smarty) {
      $smarty->assign('isCurlInstalled', $this->isCurlInstalled());
      return parent::displayPaymentSettingsForm($params, $smarty);
   }

   function displayPaymentForm($queuedPaymentId, &$queuedPayment, &$request) {
      if (!$this->isConfigured()) return false;
      $press =& $request->getPress();
      $user =& $request->getUser();

      $params = array(
         'charset' => Config::getVar('i18n', 'client_charset'),
         'business' => $this->getSetting($press->getId(), 'selleraccount'),
         'item_name' => $queuedPayment->getName(),
         'item_description' => $queuedPayment->getDescription(),  // not a paypal parameter (PayPal uses item_name)
         'amount' => sprintf('%.2F', $queuedPayment->getAmount()),
         'quantity' => 1,
         'no_note' => 1,
         'no_shipping' => 1,
         'currency_code' => $queuedPayment->getCurrencyCode(),
         'lc' => String::substr(AppLocale::getLocale(), 3), 
         'custom' => $queuedPaymentId,
         'notify_url' => $request->url(null, 'payment', 'plugin', array($this->getName(), 'ipn')),  
         'return' => $queuedPayment->getRequestUrl(),
         'cancel_return' => $request->url(null, 'payment', 'plugin', array($this->getName(), 'cancel')),
         'first_name' => ($user)?$user->getFirstName():'',  
         'last_name' => ($user)?$user->getLastname():'',
         'item_number' => $queuedPayment->getAssocId(),
         'cmd' => '_xclick'
      );

      AppLocale::requireComponents(LOCALE_COMPONENT_APPLICATION_COMMON);
      $templateMgr =& TemplateManager::getManager();
      $templateMgr->assign('params', $params);
      $templateMgr->assign('paypalFormUrl', $this->getSetting($press->getId(), 'paypalurl'));
      $templateMgr->display($this->getTemplatePath() . 'paymentForm.tpl');
   }

   function handle($args, &$request) {
      $templateMgr =& TemplateManager::getManager();
      $press =& $request->getPress();
      if (!$press) return parent::handle($args, $request);

      // Just in case we need to contact someone
      import('classes.mail.MailTemplate');
      // Prefer technical support contact
      $contactName = $press->getSetting('supportName');
      $contactEmail = $press->getSetting('supportEmail');
      if (!$contactEmail) { // Fall back on primary contact
         $contactName = $press->getSetting('contactName');
         $contactEmail = $press->getSetting('contactEmail');
      }
      $mail = new MailTemplate('PAYPAL_INVESTIGATE_PAYMENT');
      $mail->setFrom($contactEmail, $contactName);
      $mail->addRecipient($contactEmail, $contactName);

      $paymentStatus = $request->getUserVar('payment_status');

      switch (array_shift($args)) {
         case 'ipn':
            // Build a confirmation transaction.
            $req = 'cmd=_notify-validate';
            if (get_magic_quotes_gpc()) {
               foreach ($_POST as $key => $value) $req .= '&' . urlencode(stripslashes($key)) . '=' . urlencode(stripslashes($value));
            } else {
               foreach ($_POST as $key => $value) $req .= '&' . urlencode($key) . '=' . urlencode($value);  
            }
            // Create POST response
            $ch = curl_init();
            curl_setopt($ch, CURLOPT_URL, $this->getSetting($press->getId(), 'paypalurl'));
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_HTTPHEADER, Array('Content-Type: application/x-www-form-urlencoded', 'Content-Length: ' . strlen($req)));
            curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
            $ret = curl_exec ($ch);
            curl_close ($ch);

            // Check the confirmation response and handle as necessary.
            if (strcmp($ret, 'VERIFIED') == 0) switch ($paymentStatus) {
               case 'Completed':
                  $payPalDao =& DAORegistry::getDAO('PayPalDAO');
                  $transactionId = $request->getUserVar('txn_id');
                  if ($payPalDao->transactionExists($transactionId)) {
                     // A duplicate transaction was received; notify someone.
                     $mail->assignParams(array(
                        'pressName' => $press->getLocalizedTitle(),
                        'postInfo' => print_r($_POST, true),
                        'additionalInfo' => "Duplicate transaction ID: $transactionId",
                        'serverVars' => print_r($_SERVER, true)
                     ));
                     $mail->send();
                     exit();
                  } else {
                     // New transaction succeeded. Record it.
                     $payPalDao->insertTransaction(
                        $transactionId,
                        $request->getUserVar('txn_type'),
                        $request->getUserVar('payer_email'),
                        $request->getUserVar('receiver_email'),
                        $request->getUserVar('item_number'),
                        $request->getUserVar('payment_date'),
                        $request->getUserVar('payer_id'),
                        $request->getUserVar('receiver_id')
                     );
                     $queuedPaymentId = $request->getUserVar('custom');

                     import('classes.payment.omp.OMPPaymentManager');
                     $ompPaymentManager = new OMPPaymentManager($request);

                     // Verify the cost and user details as per PayPal spec.
                     $queuedPayment =& $ompPaymentManager->getQueuedPayment($queuedPaymentId);
                     if (!$queuedPayment) {
                        // The queued payment entry is missing. Complain.
                        $mail->assignParams(array(
                           'pressName' => $press->getLocalizedName(),
                           'postInfo' => print_r($_POST, true),
                           'additionalInfo' => "Missing queued payment ID: $queuedPaymentId",
                           'serverVars' => print_r($_SERVER, true)
                        ));
                        $mail->send();
                        exit();
                     }

                     //NB: if/when paypal subscriptions are enabled, these checks will have to be adjusted
                     // because subscription prices may change over time
                     if (
                        (($queuedAmount = $queuedPayment->getAmount()) != ($grantedAmount = $request->getUserVar('mc_gross')) && $queuedAmount > 0) ||
                        ($queuedCurrency = $queuedPayment->getCurrencyCode()) != ($grantedCurrency = $request->getUserVar('mc_currency')) ||
                        ($grantedEmail = $request->getUserVar('receiver_email')) != ($queuedEmail = $this->getSetting($press->getId(), 'selleraccount'))
                     ) {
                        // The integrity checks for the transaction failed. Complain.
                        $mail->assignParams(array(
                           'pressName' => $press->getLocalizedTitle(),
                           'postInfo' => print_r($_POST, true),
                           'additionalInfo' =>
                              "Granted amount: $grantedAmount\n" .
                              "Queued amount: $queuedAmount\n" .
                              "Granted currency: $grantedCurrency\n" .
                              "Queued currency: $queuedCurrency\n" .
                              "Granted to PayPal account: $grantedEmail\n" .
                              "Configured PayPal account: $queuedEmail",
                           'serverVars' => print_r($_SERVER, true)
                        ));
                        $mail->send();
                        exit();
                     }

                     // Update queued amount if amount set by user (e.g. donation)
                     if ($queuedAmount == 0 && $grantedAmount > 0) {
                        $queuedPaymentDao =& DAORegistry::getDAO('QueuedPaymentDAO');
                        $queuedPayment->setAmount($grantedAmount);
                        $queuedPayment->setCurrencyCode($grantedCurrency);
                        $queuedPaymentDao->updateQueuedPayment($queuedPaymentId, $queuedPayment);
                     }

                     // Fulfill the queued payment.
                     if ($ompPaymentManager->fulfillQueuedPayment($queuedPayment, $this->getName())) exit();
                     
                     // If we're still here, it means the payment couldn't be fulfilled.
                     $mail->assignParams(array(
                        'pressName' => $press->getLocalizedTitle(),
                        'postInfo' => print_r($_POST, true),
                        'additionalInfo' => "Queued payment ID $queuedPaymentId could not be fulfilled.",
                        'serverVars' => print_r($_SERVER, true)
                     ));
                     $mail->send();
                  }
                  exit();
               case 'Pending':
                  // Ignore.
                  exit();
               default:
                  // An unhandled payment status was received; notify someone.
                  $mail->assignParams(array(
                     'pressName' => $press->getLocalizedTitle(),
                     'postInfo' => print_r($_POST, true),
                     'additionalInfo' => "Payment status: $paymentStatus",
                     'serverVars' => print_r($_SERVER, true)
                  ));
                  $mail->send();
                  exit();
            } else {
               // An unknown confirmation response was received; notify someone.
               $mail->assignParams(array(
                  'pressName' => $press->getLocalizedTitle(),
                  'postInfo' => print_r($_POST, true),
                  'additionalInfo' => "Confirmation return: $ret",
                  'serverVars' => print_r($_SERVER, true)
               ));
               $mail->send();
               exit();
            }

            break;
         case 'cancel':
            Handler::setupTemplate();
            $templateMgr->assign(array(
               'currentUrl' => $request->url(null, 'index'),
               'pageTitle' => 'plugins.paymethod.paypal.purchase.cancelled.title',
               'message' => 'plugins.paymethod.paypal.purchase.cancelled',
               'backLink' => $request->getUserVar('ompReturnUrl'),
               'backLinkLabel' => 'common.continue'
            ));
            $templateMgr->display('common/message.tpl');
            exit();
            break;
      }
      parent::handle($args); // Don't know what to do with it
   }

   function getInstallSchemaFile() {
      return ($this->getPluginPath() . DIRECTORY_SEPARATOR . 'schema.xml');
   }

   function getInstallEmailTemplatesFile() {
      return ($this->getPluginPath() . DIRECTORY_SEPARATOR . 'emailTemplates.xml');
   }

   function getInstallEmailTemplateDataFile() {
      return ($this->getPluginPath() . '/locale/{$installedLocale}/emailTemplates.xml');
   }
}

?>