Ticket #1760: PayPalPayment.php

<?php



/**
 * @package ecommerce
 */
 
/**
 * Sub-class of Payment that supports PayPal Website Payment Standard 
 * (https://www.paypal.com/IntegrationCenter/ic_standard_home.html) as its payment processor
 Configure using 
  PayPalPayment::setMyVariable(value); 
 in www.mysite.com/ecommerce/_config.php file

 Must configure:
 $setPayPalRealAccount;
 $setPayPalTestAccount;
 $setPayPalUseTestAccount;
 
 May configure
 $setPayPalImageLocation;
 $setPayPalContinueNextButton;
 $setPayPalPurchaseName;
 $setPayPalCppHeaderImage;
 $setPayPalCppHeaderBackcolor;
 $setPayPalCppHeaderBordercolor;
 $setPayPalCppPayflowColor;
 $setPayPalCs;
 
 REQUIREMENTS:
  need to add: "PayPalInstructions" field to CheckoutPage.php
  static $db = array(
   "PayPalInstructions" => "HTMLText"
  );
  
  have a paypalPaymentPage.ss template or replace some code below (search for renderwith)
  on the paypalPaymentPage you can use $PayPalInstructions (see above) 
**/ 
 

class PayPalPayment extends Payment {
 
 protected static $payPalRealAccount; static function setPayPalRealAccount($payPalRealAccount) { self::$payPalRealAccount = $payPalRealAccount; }
 protected static $payPalTestAccount; static function setPayPalTestAccount($payPalTestAccount) { self::$payPalTestAccount = $payPalTestAccount; } 
 protected static $payPalUseTestAccount; static function setPayPalUseTestAccount($payPalUseTestAccount) { self::$payPalUseTestAccount = $payPalUseTestAccount; }
 protected static $payPalImageLocation; static function setPayPalImageLocation($payPalImageLocation) { self::$payPalImageLocation = $payPalImageLocation; }
 protected static $payPalContinueNextButton; static function setPayPalContinueNextButton($payPalContinueNextButton) { self::$payPalContinueNextButton = $payPalContinueNextButton; }
 protected static $payPalPurchaseName; static function setPayPalPurchaseName($payPalPurchaseName) { self::$payPalPurchaseName = $payPalPurchaseName; }
 protected static $payPalCppHeaderImage; static function setPayPalCppHeaderImage($payPalCppHeaderImage) { self::$payPalCppHeaderImage = $payPalCppHeaderImage; }
 protected static $payPalCppHeaderBackcolor; static function setPayPalCppHeaderBackcolor($payPalCppHeaderBackcolor) { self::$payPalCppHeaderBackcolor = $payPalCppHeaderBackcolor; }
 protected static $payPalCppHeaderBordercolor; static function setPayPalCppHeaderBordercolor($payPalCppHeaderBordercolor) { self::$payPalCppHeaderBordercolor = $payPalCppHeaderBordercolor; }
 protected static $payPalCppPayflowColor; static function setPayPalCppPayflowColor($payPalCppPayflowColor) { self::$payPalCppPayflowColor = $payPalCppPayflowColor; } 
 protected static $payPalCs; static function setPayPalCs($payPalCs) { self::$payPalCs = $payPalCs; } 
 
 
 // extra fields to be added to the checkout form
 // at present we do not do anything with this selection
 // however, on the paypal select payment type the user is pushed toward paypal while they can also pay with credit card
 // in the future, it is envisaged that their choice will be forwarded to paypal so that they can skip this section
 function getPaymentFormFields() {
  $field = new OptionsetField("PayPalPaymentMethod", "preferred payment method", array("VISA" => "VISA", "MASTERCARD" => "MASTERCARD", "AMEX" => "AMEX", "PAYPAL ACCOUNT" => "PAYPAL ACCOUNT"), "" );
  $field->addExtraClass("optionSet");
  $fieldSet = new FieldSet(
   $field
  );
  return $fieldSet;
 }
 
 function getPaymentFormRequirements() {
  null;
 }
 
 function getPaymentFormRequiredFields() {
  return array();
 }
 
 function processPayment($data, $form) {
  $tmpPage = new Page();
  $tmpPage->Title = "Make payment at Paypal";
  /*
  echo $this->StartPayPalForm();
  return array('Processing' => true, 'ReturnValue' => $form);
  */
  $CheckoutPageObject = DataObject::get_one("CheckoutPage", "");
  $message = $CheckoutPageObject->PayPalInstructions;    
  $tmpPage->PayPalInstructions = $message;
  $tmpPage->Content = $this->buildPayPalSubmission();
  $tmpPage->URLSegment = "paypalpayment";
  $controller = new Page_Controller($tmpPage);
  //$controller->pushCurrent();/* does not work! */
  $form = $controller->renderWith("paypalPaymentPage");
  Requirements::clear(); /* does not work! */
  return array('Processing' => true, 'ReturnValue' => $form);
 }
 
 function buildPayPalSubmission() {
  $member = $this->Member();
  $o = DataObject::get_by_id("Order", $this->OrderID);
  if(self::$payPalUseTestAccount) {
   $accountEmail = self::$payPalTestAccount;
   $URL = "https://www.sandbox.paypal.com/cgi-bin/webscr";
  }
  else {
   $accountEmail = self::$payPalRealAccount;
   $URL = "https://www.paypal.com/cgi-bin/webscr";
  }

  $returnUrl = Director::absoluteBaseURL(). 'PayPalPayment_Handler/?flush=1';
  $cancelUrl = Director::absoluteBaseURL().  CheckoutPage::find_link() . "ConfirmPayPal/$order->ID";
  $notifyUrl = $returnUrl;
  
  $info = array(
   //<!-- PayPal Configuration -->
   "business" => $accountEmail,
    //rather than uploading the cart, the decision was made to just upload the total cost of the purchase    
   "cmd" => "_xclick", //The button that the person clicked was a Buy Now button
   "return" => $returnUrl,
   "cancel_return" => $cancelUrl,
   "notify_url" => $notifyUrl,
   "rm" => 0, // 0 = GET with all variables, 1 GET without transaction variables, 2 = POST with transaction variables
   "currency_code" => Order::site_currency(),
   "bn" => "Silverstripe", //name of cart I think ....
   
   //<!-- Payment Page Information -->
   "no_shipping" => 1,//  silverstripe collects this 0: (default) buyer is prompted to include a shipping address. 1: buyer is not asked for a shipping address? 2: buyer must provide a shipping address
   "noShipping" => 1,//  check!
   "no_note" => 1, //buyer does not have to leave a note
   "cn" => "",//Label above the note field.
   
   //payment page look and paypal customisation
   "image_url" => self::$payPalImageLocation,
   "cbt" => self::$payPalContinueNextButton,
   "lc" => "NZ", //language of login page on Paypal
   "cpp_header_image" => self::$payPalCppHeaderImage, //Sets the image at the top left of the payment page. The image’s maximum size is 750 pixels wide by 90 pixels high. PayPal recommends that you provide an image that is stored only on a secure (https) server.
   "cpp_headerback_color" => self::$payPalCppHeaderBackcolor, 
   "cpp_headerborder_color" => self::$payPalCppHeaderBordercolor, 
   "cpp_payflow_color" => self::$payPalCppPayflowColor, 
   "cs" => self::$payPalCs, //background color - this can be set using your paypal account
   "page_style" => "primary", //you can set different styles or choose paypal
   
   //<!-- Product Information -->
   "item_name" => self::$payPalPurchaseName,
   "amount" => $this->Amount,
   "quantity" => 1,
   "item_number" => $this->OrderID,
   "undefined_quantity" => 0,
  /* set options - colours - etc...
   "on0" => $paypal[on0],
   "os0" => $paypal[os0],  
   "on1" => $paypal[on1],
   "os1" => $paypal[os1],
  */
   //<!-- Shipping and Misc Information -->
   "shipping" => $this->Shipping,
   "shipping2" => 0,
   "handling" => 0,
   "tax" => $this->AddedTax,
   "custom" => $this->OrderID,//add anything extra here
   "invoice" => "", //
   
   //<!-- Customer Information -->
   "address_override" => 1,
   "first_name" => $member->FirstName,
   "last_name" => $member->Surname,
   "address1" => $member->Address,
   "address2" =>  $member->AddressLine2,
   "city" =>  $member->City,
   "country" => $member->Country,
   "state" => $member->State,
   "zip" => $member->Postcode,
   //it is hard to change the SS phone number (basically one number / string) to the PayPal one (broken down into parts)
   "night_phone_a" => "", // country code or area code
   "night_phone_b" => "", //phone without country code or next three digits
   "night_phone_c" => "", // last four digits
  );
  
  foreach($info as $k => $v) {
   $fields .= "<input type=\"hidden\" name=\"" . Convert::raw2att($k) . "\" value=\"" . Convert::raw2att($v) . "\" />\n";
  }
  return <<<HTML
   <form id="PaymentForm" method="post" action="$URL">
    <p>
     $fields
    </p>
    <p class="Actions" id="Submit">
     <input type="submit" value="Start Payment Process" />
    </p>
   </form>
HTML;
 }
}

/**
 * Handler for responses from the PayPal site
 */
class PayPalPayment_Handler extends Controller {

 function init() {
  parent::init();
  ManifestBuilder::compileManifest();
  $this->paid();  
 }
 function paid(){
  $order = DataObject::get_by_id("Order", $_REQUEST["item_number"]);
  if($_REQUEST['payment_status']=='Completed' && $order->Status == "Unpaid"){
   $payment = Object::create("Payment");
   $payment->Amount = $_REQUEST["payment_gross"];
   $payment->OrderID = $_REQUEST["item_number"];
   $payment->Status = 'Success';
   $payment->Currency = $_REQUEST["mc_currency"];
   $payment->TxnRef = 'PayPal technical details: '.
    $_REQUEST["txn_id"]." | ".$_REQUEST["verify_sign"]." | ".$_REQUEST["payer_id"]." | ".
    $_REQUEST["receiver_id"]." | ".$_REQUEST["payer_email"]." | ".$_REQUEST["mc_gross"]." | ".
    $_REQUEST["item_number"];
   $paymentID = $payment->write();
   Session::set('Order.OrderID', $order->ID);
   Session::set('Order.PurchaseComplete',true);
   $order->Status = 'paid';
   $order->sendReceipt();
   $order->isComplete();
   $order->write();   
   Director::redirect(CheckoutPage::find_link() . "OrderSuccessful/$order->ID");
  }
  elseif($_REQUEST['payment_status']=='Completed' && $order->Status == "Paid") {
   Director::redirect(CheckoutPage::find_link() . "OrderSuccessful/$order->ID");
  }
  elseif($_REQUEST['payment_status']=='Pending'){
   /* CHECK THIS */
   Director::redirect(CheckoutPage::find_link() . "ConfirmPayPal/$order->ID");
  }
  else{
   Director::redirect(CheckoutPage::find_link() . "ConfirmPayPal/$order->ID");
  }
 }
 
 function PayPalInstructions() {
  return DataObject::get_one('CheckoutPage')->PayPalInstructions;
 } 
}



/* what comes back from Paypal as get variables (see https://www.paypal.com/IntegrationCenter/ic_ipn-pdt-variable-reference.html)
 txn_type=web_accept
 payment_date=19%3A09%3A25+Apr+15%2C+2008+PDT
 last_name=Tester
 residence_country=US
 item_name=templates
 payment_gross=70.00
 mc_currency=USD
 business=abc%40def.ghi (email of business owner)
 payment_type=instant
 payer_status=verified
 verify_sign=AFhW6IfTc.P96fDJUr48Gahf6BlHAhxUUkTH59p-rGnYUe2n5es5ZeLn
 test_ipn=1
 payer_email=testpayer%40abc.def.ghi (person paying)
 tax=0.00
 txn_id=40863971JS8149811
 first_name=Chester
 receiver_email=aaa%40bbb.com
 quantity=1
 payer_id=QW5PPSM3TFGPA
 receiver_id=LZZDEWP3XWLUG
 item_number=39
 payment_status=Completed
 mc_fee=3.03
 payment_fee=3.03
 shipping=0.00
 mc_gross=70.00
 custom=39
*/