* Copyright (C) 2006-2012 Laurent Destailleur * Copyright (C) 2009 Regis Houssin * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . */ /** * \file htdocs/public/paybox/newpayment.php * \ingroup paybox * \brief File to offer a way to make a payment for a particular Dolibarr entity * \author Laurent Destailleur */ define("NOLOGIN",1); // This means this output page does not require to be logged. define("NOCSRFCHECK",1); // We accept to go on this page from external web site. // For MultiCompany module. // Do not use GETPOST here, function is not defined and define must be done before including main.inc.php // TODO This should be useless. Because entity must be retreive from object ref and not from url. $entity=(! empty($_GET['entity']) ? (int) $_GET['entity'] : (! empty($_POST['entity']) ? (int) $_POST['entity'] : 1)); if (is_numeric($entity)) define("DOLENTITY", $entity); require '../../main.inc.php'; require_once DOL_DOCUMENT_ROOT.'/paybox/lib/paybox.lib.php'; require_once DOL_DOCUMENT_ROOT.'/core/lib/company.lib.php'; require_once DOL_DOCUMENT_ROOT.'/core/lib/functions2.lib.php'; require_once DOL_DOCUMENT_ROOT.'/product/class/product.class.php'; // Security check if (empty($conf->paybox->enabled)) accessforbidden('',0,0,1); $langs->load("main"); $langs->load("other"); $langs->load("dict"); $langs->load("bills"); $langs->load("companies"); $langs->load("errors"); $langs->load("paybox"); // Input are: // type ('invoice','order','contractline'), // id (object id), // amount (required if id is empty), // tag (a free text, required if type is empty) // currency (iso code) $suffix=GETPOST("suffix",'alpha'); $amount=price2num(GETPOST("amount")); if (! GETPOST("currency",'alpha')) $currency=$conf->currency; else $currency=GETPOST("currency",'alpha'); if (! GETPOST("action")) { if (! GETPOST("amount") && ! GETPOST("source")) { dol_print_error('',$langs->trans('ErrorBadParameters')." - amount or source"); exit; } if (is_numeric($amount) && ! GETPOST("tag") && ! GETPOST("source")) { dol_print_error('',$langs->trans('ErrorBadParameters')." - tag or source"); exit; } if (GETPOST("source") && ! GETPOST("ref")) { dol_print_error('',$langs->trans('ErrorBadParameters')." - ref"); exit; } } // Define $urlwithroot $urlwithouturlroot=preg_replace('/'.preg_quote(DOL_URL_ROOT,'/').'$/i','',trim($dolibarr_main_url_root)); $urlwithroot=$urlwithouturlroot.DOL_URL_ROOT; // This is to use external domain name found into config file //$urlwithroot=DOL_MAIN_URL_ROOT; // This is to use same domain name than current $urlok=$urlwithroot.'/public/paybox/paymentok.php?'; $urlko=$urlwithroot.'/public/paybox/paymentko.php?'; // Complete urls $SOURCE=GETPOST("source",'alpha'); $ref=$REF=GETPOST('ref','alpha'); $TAG=GETPOST("tag",'alpha'); $FULLTAG=GETPOST("fulltag",'alpha'); // fulltag is tag with more informations $SECUREKEY=GETPOST("securekey"); // Secure key if (! empty($SOURCE)) { $urlok.='source='.urlencode($SOURCE).'&'; $urlko.='source='.urlencode($SOURCE).'&'; } if (! empty($REF)) { $urlok.='ref='.urlencode($REF).'&'; $urlko.='ref='.urlencode($REF).'&'; } if (!empty($TAG)) { $urlok.='tag='.urlencode($TAG).'&'; $urlko.='tag='.urlencode($TAG).'&'; } if (!empty($FULLTAG)) { $urlok.='fulltag='.urlencode($FULLTAG).'&'; $urlko.='fulltag='.urlencode($FULLTAG).'&'; } $urlok=preg_replace('/&$/','',$urlok); // Remove last & $urlko=preg_replace('/&$/','',$urlko); // Remove last & // Check security token $valid=true; /* * Actions */ if (GETPOST("action") == 'dopayment') { $PRICE=price2num(GETPOST("newamount"),'MT'); $email=GETPOST("email"); $mesg=''; if (empty($PRICE) || ! is_numeric($PRICE)) $mesg=$langs->trans("ErrorFieldRequired",$langs->transnoentitiesnoconv("Amount")); elseif (empty($email)) $mesg=$langs->trans("ErrorFieldRequired",$langs->transnoentitiesnoconv("YourEMail")); elseif (! isValidEMail($email)) $mesg=$langs->trans("ErrorBadEMail",$email); elseif (empty($FULLTAG)) $mesg=$langs->trans("ErrorFieldRequired",$langs->transnoentitiesnoconv("PaymentCode")); elseif (dol_strlen($urlok) > 150) $mesg='Error urlok too long '.$urlok; elseif (dol_strlen($urlko) > 150) $mesg='Error urlko too long '.$urlko; if (empty($mesg)) { dol_syslog("newpayment.php call paybox api and do redirect", LOG_DEBUG); print_paybox_redirect($PRICE, $conf->currency, $email, $urlok, $urlko, $FULLTAG); session_destroy(); exit; } } /* * View */ llxHeaderPayBox($langs->trans("PaymentForm")); // Common variables $creditor=$mysoc->name; $paramcreditor='PAYBOX_CREDITOR_'.$suffix; if (! empty($conf->global->$paramcreditor)) $creditor=$conf->global->$paramcreditor; else if (! empty($conf->global->PAYBOX_CREDITOR)) $creditor=$conf->global->PAYBOX_CREDITOR; print ''."\n"; print '
'; print '
'; print ''; print ''; print ''; print ''; print "\n"; print ''."\n"; print ''."\n"; print ''."\n"; print ''."\n"; print ''."\n"; print "\n"; print ''."\n"; // Show logo (search order: logo defined by PAYBOX_LOGO_suffix, then PAYBOX_LOGO, then small company logo, large company logo, theme logo, common logo) $width=0; // Define logo and logosmall $logosmall=$mysoc->logo_small; $logo=$mysoc->logo; $paramlogo='PAYBOX_LOGO_'.$suffix; if (! empty($conf->global->$paramlogo)) $logosmall=$conf->global->$paramlogo; else if (! empty($conf->global->PAYBOX_LOGO)) $logosmall=$conf->global->PAYBOX_LOGO; //print ''."\n"; // Define urllogo $urllogo=''; if (! empty($logosmall) && is_readable($conf->mycompany->dir_output.'/logos/thumbs/'.$logosmall)) { $urllogo=DOL_URL_ROOT.'/viewimage.php?modulepart=companylogo&file='.urlencode('thumbs/'.$logosmall); } elseif (! empty($logo) && is_readable($conf->mycompany->dir_output.'/logos/'.$logo)) { $urllogo=DOL_URL_ROOT.'/viewimage.php?modulepart=companylogo&file='.urlencode($logo); $width=96; } // Output html code for logo if ($urllogo) { print ''; print ''; print ''."\n"; } // Output introduction text $text=''; if (! empty($conf->global->PAYBOX_NEWFORM_TEXT)) { $langs->load("members"); if (preg_match('/^\((.*)\)$/',$conf->global->PAYBOX_NEWFORM_TEXT,$reg)) $text.=$langs->trans($reg[1])."
\n"; else $text.=$conf->global->PAYBOX_NEWFORM_TEXT."
\n"; $text=''."\n"; } if (empty($text)) { $text.=''."\n"; $text.=''."\n"; } print $text; // Output payment summary form print ''; } else { dol_print_error_email('ERRORNEWPAYMENTPAYBOX'); } print ''."\n"; print '

'.$text.'

'.$langs->trans("WelcomeOnPaymentPage").'

'.$langs->trans("ThisScreenAllowsYouToPay",$creditor).'

'; print ''; print ''."\n"; $found=false; $error=0; $var=false; // Free payment if (! GETPOST("source") && $valid) { $found=true; $tag=GETPOST("tag"); $fulltag=$tag; // Creditor $var=!$var; print ''."\n"; // Amount $var=!$var; print ''."\n"; // Tag $var=!$var; print ''."\n"; // EMail $var=!$var; print ''."\n"; } // Payment on customer order if (GETPOST("source") == 'order' && $valid) { $found=true; $langs->load("orders"); require_once DOL_DOCUMENT_ROOT.'/commande/class/commande.class.php'; $order=new Commande($db); $result=$order->fetch('',$ref); if ($result < 0) { $mesg=$order->error; $error++; } else { $result=$order->fetch_thirdparty($order->socid); } $amount=$order->total_ttc; if (GETPOST("amount",'int')) $amount=GETPOST("amount",'int'); $amount=price2num($amount); $fulltag='IR='.$order->ref.'.TPID='.$order->thirdparty->id; //$fulltag.='.TP='.strtr($order->thirdparty->name,"-"," "); We disable this because url that will contains FULLTAG must be lower than 150 if (! empty($TAG)) { $tag=$TAG; $fulltag.='.TAG='.$TAG; } $fulltag=dol_string_unaccent($fulltag); // Creditor $var=!$var; print ''."\n"; // Debitor $var=!$var; print ''."\n"; // Amount $var=!$var; print ''."\n"; // Tag $var=!$var; print ''."\n"; // EMail $var=!$var; print ''."\n"; } // Payment on customer invoice if (GETPOST("source") == 'invoice' && $valid) { $found=true; $langs->load("bills"); require_once DOL_DOCUMENT_ROOT.'/compta/facture/class/facture.class.php'; $invoice=new Facture($db); $result=$invoice->fetch('',$ref); if ($result < 0) { $mesg=$invoice->error; $error++; } else { $result=$invoice->fetch_thirdparty($invoice->socid); } $amount=price2num($invoice->total_ttc - $invoice->getSommePaiement()); if (GETPOST("amount",'int')) $amount=GETPOST("amount",'int'); $amount=price2num($amount); $fulltag='IR='.$invoice->ref.'.TPID='.$invoice->thirdparty->id; //$fulltag.='.TP='.strtr($invoice->thirdparty->name,"-"," "); We disable this because url that will contains FULLTAG must be lower than 150 if (! empty($TAG)) { $tag=$TAG; $fulltag.='.TAG='.$TAG; } $fulltag=dol_string_unaccent($fulltag); // Creditor $var=!$var; print ''."\n"; // Debitor $var=!$var; print ''."\n"; // Amount $var=!$var; print ''."\n"; // Tag $var=!$var; print ''."\n"; // EMail $var=!$var; print ''."\n"; } // Payment on contract line if (GETPOST("source") == 'contractline' && $valid) { $found=true; $langs->load("contracts"); require_once DOL_DOCUMENT_ROOT.'/contrat/class/contrat.class.php'; $contractline=new ContratLigne($db); $result=$contractline->fetch('',$ref); if ($result < 0) { $mesg=$contractline->error; $error++; } else { if ($contractline->fk_contrat > 0) { $contract=new Contrat($db); $result=$contract->fetch($contractline->fk_contrat); if ($result > 0) { $result=$contract->fetch_thirdparty($contract->socid); } else { $mesg=$contract->error; $error++; } } else { $mesg='ErrorRecordNotFound'; $error++; } } $amount=$contractline->total_ttc; if ($contractline->fk_product) { $product=new Product($db); $result=$product->fetch($contractline->fk_product); // We define price for product (TODO Put this in a method in product class) if (! empty($conf->global->PRODUIT_MULTIPRICES)) { $pu_ht = $product->multiprices[$contract->thirdparty->price_level]; $pu_ttc = $product->multiprices_ttc[$contract->thirdparty->price_level]; $price_base_type = $product->multiprices_base_type[$contract->thirdparty->price_level]; } else { $pu_ht = $product->price; $pu_ttc = $product->price_ttc; $price_base_type = $product->price_base_type; } $amount=$pu_ttc; if (empty($amount)) { dol_print_error('','ErrorNoPriceDefinedForThisProduct'); exit; } } if (GETPOST("amount",'int')) $amount=GETPOST("amount",'int'); $amount=price2num($amount); $fulltag='CLR='.$contractline->ref.'.CR='.$contract->ref.'.TPID='.$contract->thirdparty->id; //$fulltag.='.TP='.strtr($contract->thirdparty->name,"-"," "); We disable this because url that will contains FULLTAG must be lower than 150 if (! empty($TAG)) { $tag=$TAG; $fulltag.='.TAG='.$TAG; } $fulltag=dol_string_unaccent($fulltag); $qty=1; if (GETPOST('qty')) $qty=GETPOST('qty'); // Creditor $var=!$var; print ''."\n"; // Debitor $var=!$var; print ''."\n"; // Quantity $var=!$var; $label=$langs->trans("Quantity"); $qty=1; $duration=''; if ($contractline->fk_product) { if ($product->isservice() && $product->duration_value > 0) { $label=$langs->trans("Duration"); // TODO Put this in a global method if ($product->duration_value > 1) { $dur=array("h"=>$langs->trans("Hours"),"d"=>$langs->trans("DurationDays"),"w"=>$langs->trans("DurationWeeks"),"m"=>$langs->trans("DurationMonths"),"y"=>$langs->trans("DurationYears")); } else { $dur=array("h"=>$langs->trans("Hour"),"d"=>$langs->trans("DurationDay"),"w"=>$langs->trans("DurationWeek"),"m"=>$langs->trans("DurationMonth"),"y"=>$langs->trans("DurationYear")); } $duration=$product->duration_value.' '.$dur[$product->duration_unit]; } } print ''; print ''."\n"; // Amount $var=!$var; print ''."\n"; // Tag $var=!$var; print ''."\n"; // EMail $var=!$var; print ''."\n"; } // Payment on member subscription if (GETPOST("source") == 'membersubscription' && $valid) { $found=true; $langs->load("members"); require_once DOL_DOCUMENT_ROOT.'/adherents/class/adherent.class.php'; require_once DOL_DOCUMENT_ROOT.'/adherents/class/cotisation.class.php'; $member=new Adherent($db); $result=$member->fetch('',$ref); if ($result < 0) { $mesg=$member->error; $error++; } else { $subscription=new Cotisation($db); } $amount=$subscription->total_ttc; if (GETPOST("amount",'int')) $amount=GETPOST("amount",'int'); $amount=price2num($amount); $fulltag='MID='.$member->id; //$fulltag.='.M='.dol_trunc(strtr($member->getFullName($langs),"-"," "),12); We disable this because url that will contains FULLTAG must be lower than 150 if (! empty($TAG)) { $tag=$TAG; $fulltag.='.TAG='.$TAG; } $fulltag=dol_string_unaccent($fulltag); // Creditor $var=!$var; print ''."\n"; // Debitor $var=!$var; print ''."\n"; if ($member->last_subscription_date || $member->last_subscription_amount) { // Last subscription date $var=!$var; print ''."\n"; // Last subscription amount $var=!$var; print ''."\n"; if (empty($amount) && ! GETPOST('newamount')) $_GET['newamount']=$member->last_subscription_amount; } // Amount $var=!$var; print ''."\n"; // Tag $var=!$var; print ''."\n"; // EMail $var=!$var; print ''."\n"; } if (! $found && ! $mesg) $mesg=$langs->trans("ErrorBadParameters"); if ($mesg) print ''."\n"; print '
'.$langs->trans("ThisIsInformationOnPayment").' :
'.$langs->trans("Creditor"); print ''.$creditor.''; print ''; print '
'.$langs->trans("Amount"); if (empty($amount)) print ' ('.$langs->trans("ToComplete").')'; print ''; if (empty($amount) || ! is_numeric($amount)) { print ''; print ''; } else { print ''.price($amount).''; print ''; print ''; } // Currency print ' '.$langs->trans("Currency".$currency).''; print ''; print '
'.$langs->trans("PaymentCode"); print ''.$fulltag.''; print ''; print ''; print '
'.$langs->trans("YourEMail"); print ' ('.$langs->trans("ToComplete").')'; print '
'.$langs->trans("Creditor"); print ''.$creditor.''; print ''; print '
'.$langs->trans("ThirdParty"); print ''.$order->thirdparty->name.''; // Object $var=!$var; $text=''.$langs->trans("PaymentOrderRef",$order->ref).''; print '
'.$langs->trans("Designation"); print ''.$text; print ''; print ''; print '
'.$langs->trans("Amount"); if (empty($amount)) print ' ('.$langs->trans("ToComplete").')'; print ''; if (empty($amount) || ! is_numeric($amount)) { print ''; print ''; } else { print ''.price($amount).''; print ''; print ''; } // Currency print ' '.$langs->trans("Currency".$currency).''; print ''; print '
'.$langs->trans("PaymentCode"); print ''.$fulltag.''; print ''; print ''; print '
'.$langs->trans("YourEMail"); print ' ('.$langs->trans("ToComplete").')'; $email=$order->thirdparty->email; $email=(GETPOST("email")?GETPOST("email"):(isValidEmail($email)?$email:'')); print '
'.$langs->trans("Creditor"); print ''.$creditor.''; print ''; print '
'.$langs->trans("ThirdParty"); print ''.$invoice->thirdparty->name.''; // Object $var=!$var; $text=''.$langs->trans("PaymentInvoiceRef",$invoice->ref).''; print '
'.$langs->trans("Designation"); print ''.$text; print ''; print ''; print '
'.$langs->trans("Amount"); if (empty($amount)) print ' ('.$langs->trans("ToComplete").')'; print ''; if (empty($amount) || ! is_numeric($amount)) { print ''; print ''; } else { print ''.price($amount).''; print ''; print ''; } // Currency print ' '.$langs->trans("Currency".$currency).''; print ''; print '
'.$langs->trans("PaymentCode"); print ''.$fulltag.''; print ''; print ''; print '
'.$langs->trans("YourEMail"); print ' ('.$langs->trans("ToComplete").')'; $email=$invoice->thirdparty->email; $email=(GETPOST("email")?GETPOST("email"):(isValidEmail($email)?$email:'')); print '
'.$langs->trans("Creditor"); print ''.$creditor.''; print ''; print '
'.$langs->trans("ThirdParty"); print ''.$contract->thirdparty->name.''; // Object $var=!$var; $text=''.$langs->trans("PaymentRenewContractId",$contract->ref,$contractline->ref).''; if ($contractline->fk_product) { $text.='
'.$product->ref.($product->label?' - '.$product->label:''); } if ($contractline->description) $text.='
'.dol_htmlentitiesbr($contractline->description); //if ($contractline->date_fin_validite) { // $text.='
'.$langs->trans("DateEndPlanned").': '; // $text.=dol_print_date($contractline->date_fin_validite); //} if ($contractline->date_fin_validite) { $text.='
'.$langs->trans("ExpiredSince").': '.dol_print_date($contractline->date_fin_validite); } print '
'.$langs->trans("Designation"); print ''.$text; print ''; print ''; print '
'.$label.''.($duration?$duration:$qty).''; print ''; print '
'.$langs->trans("Amount"); if (empty($amount)) print ' ('.$langs->trans("ToComplete").')'; print ''; if (empty($amount) || ! is_numeric($amount)) { print ''; print ''; } else { print ''.price($amount).''; print ''; print ''; } // Currency print ' '.$langs->trans("Currency".$currency).''; print ''; print '
'.$langs->trans("PaymentCode"); print ''.$fulltag.''; print ''; print ''; print '
'.$langs->trans("YourEMail"); print ' ('.$langs->trans("ToComplete").')'; $email=$contract->thirdparty->email; $email=(GETPOST("email")?GETPOST("email"):(isValidEmail($email)?$email:'')); print '
'.$langs->trans("Creditor"); print ''.$creditor.''; print ''; print '
'.$langs->trans("Member"); print ''; if ($member->morphy == 'mor' && ! empty($member->societe)) print $member->societe; else print $member->getFullName($langs); print ''; // Object $var=!$var; $text=''.$langs->trans("PaymentSubscription").''; print '
'.$langs->trans("Designation"); print ''.$text; print ''; print ''; print '
'.$langs->trans("LastSubscriptionDate"); print ''.dol_print_date($member->last_subscription_date,'day'); print '
'.$langs->trans("LastSubscriptionAmount"); print ''.price($member->last_subscription_amount); print '
'.$langs->trans("Amount"); if (empty($amount)) print ' ('.$langs->trans("ToComplete").')'; print ''; if (empty($amount) || ! is_numeric($amount)) { $valtoshow=GETPOST("newamount",'int'); if (! empty($conf->global->MEMBER_MIN_AMOUNT) && $valtoshow) $valtoshow=max($conf->global->MEMBER_MIN_AMOUNT,$valtoshow); print ''; print ''; } else { $valtoshow=$amount; if (! empty($conf->global->MEMBER_MIN_AMOUNT) && $valtoshow) $valtoshow=max($conf->global->MEMBER_MIN_AMOUNT,$valtoshow); print ''.price($valtoshow).''; print ''; print ''; } // Currency print ' '.$langs->trans("Currency".$currency).''; print ''; print '
'.$langs->trans("PaymentCode"); print ''.$fulltag.''; print ''; print ''; print '
'.$langs->trans("YourEMail"); $email=$member->email; $email=(GETPOST("email")?GETPOST("email"):(isValidEmail($email)?$email:'')); if (empty($email)) print ' ('.$langs->trans("ToComplete").')'; print '

'.$mesg.'
'."\n"; print "\n"; if ($found && ! $error) // We are in a management option and no error { print '
'; //print '
'.$langs->trans("YouWillBeRedirectedOnPayBox").'...
'."\n"; print '
'."\n"; print '
'."\n"; print '
'; html_print_paybox_footer($mysoc,$langs); llxFooterPayBox(); $db->close();