pre_payment.php

См. документацию.

<?if (!defined("B_PROLOG_INCLUDED") || B_PROLOG_INCLUDED !== true) die();?><?
include_once(GetLangFileName(dirname(__FILE__)."/", "/payment.php"));
include(dirname(__FILE__)."/common.php");
 
$strPaySysError = "";
 
if ($bDoPayAction)
{
    $INPUT_CARD_NUM = Trim($_REQUEST["ccard_num"]);
    if (!isset($INPUT_CARD_NUM) || $INPUT_CARD_NUM == '')
        $strPaySysError .= GetMessage("AN_CC_NUM")."<br />";
 
    $INPUT_CARD_NUM = preg_replace("/[\D]+/", "", $INPUT_CARD_NUM);
    if ($INPUT_CARD_NUM == '')
        $strPaySysError .= GetMessage("AN_CC_NUM")."<br />";
 
    $INPUT_CARD_EXP_MONTH = intval($_REQUEST["ccard_date1"]);
    if ($INPUT_CARD_EXP_MONTH < 1 || $INPUT_CARD_EXP_MONTH > 12)
        $strPaySysError .= GetMessage("AN_CC_MONTH")."<br />";
    elseif (mb_strlen($INPUT_CARD_EXP_MONTH) < 2)
        $INPUT_CARD_EXP_MONTH = "0".$INPUT_CARD_EXP_MONTH;
 
    $INPUT_CARD_EXP_YEAR = intval($_REQUEST["ccard_date2"]);
    if ($INPUT_CARD_EXP_YEAR < 2005)
        $strPaySysError .= GetMessage("AN_CC_YEAR")."<br />";
 
    $INPUT_CARD_CODE = Trim($_REQUEST["ccard_code"]);
 
    if ($strPaySysError == '')
    {
        $ORDER_ID = intval($GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["ID"]);
 
        // Merchant Account Information
        $strPostQueryString  = "x_version=3.1";
        $strPostQueryString .= "&x_login=".urlencode(CSalePaySystemAction::GetParamValue("PS_LOGIN"));
        $strPostQueryString .= "&x_tran_key=".urlencode(CSalePaySystemAction::GetParamValue("PS_TRANSACTION_KEY"));
        $strPostQueryString .= "&x_test_request=".(CSalePaySystemAction::GetParamValue("TEST_TRANSACTION") ? "TRUE" : "FALSE")."";
 
        // Gateway Response Configuration
        $strPostQueryString .= "&x_delim_data=True";
        $strPostQueryString .= "&x_relay_response=False";
        $strPostQueryString .= "&x_delim_char=,";
        $strPostQueryString .= "&x_encap_char=|";
 
        $arTmp = array("x_first_name" => "FIRST_NAME",   "x_last_name" => "LAST_NAME",
                "x_company" => "COMPANY",   "x_address" => "ADDRESS",   "x_city" => "CITY",
                "x_state" => "STATE",   "x_zip" => "ZIP",   "x_country" => "COUNTRY",
                "x_phone" => "PHONE",   "x_fax" => "FAX"
            );
        foreach ($arTmp as $key => $value)
        {
            if (($val = CSalePaySystemAction::GetParamValue($value)) !== False)
                $strPostQueryString .= "&".$key."=".urlencode($val);
        }
 
        // Additional Customer Data
        $strPostQueryString .= "&x_cust_id=".urlencode($GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["USER_ID"]);
        if (($val = CSalePaySystemAction::GetParamValue("REMOTE_ADDR")) !== False)
            $strPostQueryString .= "&x_customer_ip=".urlencode($val);
 
        // Email Settings
        if (($val = CSalePaySystemAction::GetParamValue("EMAIL")) !== False)
            $strPostQueryString .= "&x_email=".urlencode($val);
 
        $strPostQueryString .= "&x_email_customer=FALSE";
        $strPostQueryString .= "&x_merchant_email=".urlencode(COption::GetOptionString("sale", "order_email", ""));
 
        // Invoice Information
        $strPostQueryString .= "&x_invoice_num=".urlencode($GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["ID"]);
        $strPostQueryString .= "&x_description=".urlencode($GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["DATE_INSERT"]);
 
        // Customer Shipping Address
        $arTmp = array("x_ship_to_first_name" => "SHIP_FIRST_NAME",
                "x_ship_to_last_name" => "SHIP_LAST_NAME",  "x_ship_to_company" => "SHIP_COMPANY",
                "x_ship_to_address" => "SHIP_ADDRESS",  "x_ship_to_city" => "SHIP_CITY",
                "x_ship_to_state" => "SHIP_STATE",  "x_ship_to_zip" => "SHIP_ZIP",
                "x_ship_to_country" => "SHIP_COUNTRY"
            );
        foreach ($arTmp as $key => $value)
        {
            if (($val = CSalePaySystemAction::GetParamValue($value)) !== False)
                $strPostQueryString .= "&".$key."=".urlencode($val);
        }
 
        // Transaction Data
        $strPostQueryString .= "&x_amount=".urlencode($GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["SHOULD_PAY"]);
        $strPostQueryString .= "&x_currency_code=".urlencode($GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["CURRENCY"]);
        $strPostQueryString .= "&x_method=CC";
        $strPostQueryString .= "&x_type=AUTH_CAPTURE";
        $strPostQueryString .= "&x_recurring_billing=NO";
        $strPostQueryString .= "&x_card_num=".urlencode($INPUT_CARD_NUM);
        $strPostQueryString .= "&x_exp_date=".urlencode($INPUT_CARD_EXP_MONTH.$INPUT_CARD_EXP_YEAR);   // MMYYYY
        $strPostQueryString .= "&x_card_code=".urlencode($INPUT_CARD_CODE);
 
        // Level 2 Data
        $strPostQueryString .= "&x_tax=".urlencode($GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["TAX_VALUE"]);
        $strPostQueryString .= "&x_freight=".urlencode($GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["PRICE_DELIVERY"]);
        //echo $strPostQueryString;
 
        $strResult = QueryGetData("secure.authorize.net", 443, "/gateway/transact.dll", $strPostQueryString, $errno, $errstr, "POST", "ssl://");
 
        $mass = explode("|,|", "|,".$strResult);
 
        $strHashValue = CSalePaySystemAction::GetParamValue("HASH_VALUE");
        if ($strHashValue <> '')
        {
            if (md5($strHashValue.(CSalePaySystemAction::GetParamValue("PS_LOGIN")).$mass[7].sprintf("%.2f", $GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["SHOULD_PAY"])) != mb_strtolower($mass[38]))
            {
                $mass = array();
                $mass[1] = 3;
                $mass[4] = "MD5 transaction signature is incorrect!";
                $mass[3] = 0;
                $mass[2] = 0;
            }
        }
 
        $strPS_STATUS = ((intval($mass[1])==1) ? "Y" : "N");
        $strPS_STATUS_CODE = $mass[3];
        if ($strPS_STATUS == "Y")
            $strPS_STATUS_DESCRIPTION = "Approval Code: ".$mass[5].(!empty($mass[7]) ? "; Transaction ID: ".$mass[7] : "");
        else
        {
            $strPS_STATUS_DESCRIPTION = (intval($mass[1])==2 ? "Declined" : "Error").": ".$mass[4]." (Reason Code ".$mass[3]." / Sub ".$mass[2].")";
            $strPaySysError .= (intval($mass[1])==2 ? "Transaction was declined" : "Error while processing transaction").": ".$mass[4]." (".$mass[3]."/".$mass[2].")";
        }
 
        $strPS_STATUS_MESSAGE = "";
        if (!empty($mass[6]))
            $strPS_STATUS_MESSAGE .= "\nAVS Result: [".$mass[6]."] ".$arAVSErr[$mass[6]].";";
 
        if (!empty($mass[39]))
            $strPS_STATUS_MESSAGE .= "\nCard Code Result: [".$mass[39]."] ".$arCVVErr[$mass[39]].";";
 
        if (!empty($mass[40]))
            $strPS_STATUS_MESSAGE .= "\nCAVV: [".$mass[40]."] ".$arCAVVErr[$mass[40]].";";
 
        $strPS_SUM = $mass[10];
 
        $arPaySysResult = array(
                "PS_STATUS" => $strPS_STATUS,
                "PS_STATUS_CODE" => $strPS_STATUS_CODE,
                "PS_STATUS_DESCRIPTION" => $strPS_STATUS_DESCRIPTION,
                "PS_STATUS_MESSAGE" => $strPS_STATUS_MESSAGE,
                "PS_SUM" => $strPS_SUM,
                "PS_CURRENCY" => $GLOBALS["SALE_INPUT_PARAMS"]["ORDER"]["CURRENCY"],
                "PS_RESPONSE_DATE" => Date(CDatabase::DateFormatToPHP(CLang::GetDateFormat("FULL", SITE_ID))),
                "USER_CARD_TYPE" => false,
                "USER_CARD_NUM" => $INPUT_CARD_NUM,
                "USER_CARD_EXP_MONTH" => $INPUT_CARD_EXP_MONTH,
                "USER_CARD_EXP_YEAR" => $INPUT_CARD_EXP_YEAR,
                "USER_CARD_CODE" => $INPUT_CARD_CODE
            );
    }
}
else
{
    ?>
    <table border="0" cellpadding="3" cellspacing="0" width="100%">
        <tr>
            <td align="right" width="40%" class="tablebody">
                <font class="tablebodytext">
                <?=GetMessage("AN_CC")?>
                </font>
            </td>
            <td class="tablebody" width="60%">
                <input type="text" class="inputtext" name="ccard_num" size="30" value="<?= htmlspecialcharsbx($_REQUEST["ccard_num"]) ?>">
            </td>
        </tr>
        <tr>
            <td align="right" class="tablebody" width="40%">
                <font class="tablebodytext">
                <?=GetMessage("AN_CC_DATE")?>
                </font>
            </td>
            <td class="tablebody" width="60%">
                <select name="ccard_date1" class="inputselect">
                    <?for ($i = 1; $i <= 12; $i++):?>
                        <option value="<?= $i ?>"<?= (($i==$_REQUEST["ccard_date1"]) ? "selected" : "") ?>><?= $i ?></option>
                    <?endfor;?>
                </select>
                /
                <select name="ccard_date2" class="inputselect">
                    <?for ($i = 2005; $i <= 2010; $i++):?>
                        <option value="<?= $i ?>"<?= (($i==$_REQUEST["ccard_date2"]) ? "selected" : "") ?>><?= $i ?></option>
                    <?endfor;?>
                </select>
            </td>
        </tr>
        <tr>
            <td align="right" class="tablebody" width="40%">
                <font class="tablebodytext">
                <?=GetMessage("AN_CC_CVV2")?>
                </font>
            </td>
            <td class="tablebody" width="60%">
                <input type="text" class="inputtext" name="ccard_code" size="5" value="<?= htmlspecialcharsbx($_REQUEST["ccard_code"]) ?>">
            </td>
        </tr>
    </table>
    <?
}
?>