261 lines
8.4 KiB
PHP
Executable File
261 lines
8.4 KiB
PHP
Executable File
<?php
|
|
/**
|
|
* The MIT License (MIT)
|
|
*
|
|
* Copyright (c) 2011-2018 BitPay, BTCPay server (c) 2019-2022
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
* in the Software without restriction, including without limitation the rights
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
* furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in
|
|
* all copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
* THE SOFTWARE.
|
|
*/
|
|
|
|
require_once 'bp_options.php';
|
|
require_once 'version.php';
|
|
|
|
/**
|
|
* @param string $contents
|
|
*/
|
|
function bpLog($contents)
|
|
{
|
|
error_log($contents);
|
|
}
|
|
|
|
/**
|
|
* @param string $url
|
|
* @param string $apiKey
|
|
* @param bool|string $post
|
|
* @return array
|
|
*/
|
|
function bpCurl($url, $apiKey, $post = false)
|
|
{
|
|
global $bpOptions;
|
|
global $version;
|
|
|
|
$curl = curl_init($url);
|
|
$length = 0;
|
|
if ($post) {
|
|
curl_setopt($curl, CURLOPT_POST, 1);
|
|
curl_setopt($curl, CURLOPT_POSTFIELDS, $post);
|
|
$length = strlen($post);
|
|
}
|
|
|
|
$uname = base64_encode($apiKey);
|
|
|
|
$header = array(
|
|
'Content-Type: application/json',
|
|
'Content-Length: ' . $length,
|
|
'Authorization: Basic ' . $uname,
|
|
'X-BitPay-Plugin-Info: whmcs '. $version,
|
|
);
|
|
|
|
curl_setopt($curl, CURLOPT_PORT, 443);
|
|
curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
|
|
curl_setopt($curl, CURLOPT_TIMEOUT, 10);
|
|
curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
|
|
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 1); // verify certificate
|
|
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2); // check existence of CN and verify that it matches hostname
|
|
curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
|
|
curl_setopt($curl, CURLOPT_FORBID_REUSE, 1);
|
|
curl_setopt($curl, CURLOPT_FRESH_CONNECT, 1);
|
|
|
|
$responseString = curl_exec($curl);
|
|
$httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
|
|
$curlError = curl_error($curl);
|
|
$curlErrno = curl_errno($curl);
|
|
|
|
if ($responseString === false) {
|
|
$response = array('error' => 'curl errno: ' . $curlErrno . ', error: ' . $curlError);
|
|
bpLog('[ERROR] In modules/gateways/btcpay/bp_lib.php::bpCurl(): cURL request failed: ' . var_export($response, true));
|
|
} else {
|
|
$response = json_decode($responseString, true);
|
|
|
|
if ($response === null && json_last_error() !== JSON_ERROR_NONE) {
|
|
$jsonError = json_last_error_msg();
|
|
$responsePreview = empty($responseString) ? '[EMPTY RESPONSE]' : (strlen($responseString) > 200 ? substr($responseString, 0, 200) . '...' : $responseString);
|
|
|
|
bpLog('[ERROR] In modules/gateways/btcpay/bp_lib.php::bpCurl(): JSON decode failed. HTTP Code: ' . $httpCode . ', JSON Error: ' . $jsonError . ', cURL errno: ' . $curlErrno . ', Response: ' . var_export($responsePreview, true));
|
|
|
|
$errorMsg = 'JSON decode failed (HTTP ' . $httpCode . '): ' . $jsonError;
|
|
if (!empty($responseString)) {
|
|
$errorMsg .= '. Response: ' . $responsePreview;
|
|
} else {
|
|
$errorMsg .= '. Empty response received from BTCPay Server.';
|
|
}
|
|
|
|
$response = array('error' => $errorMsg);
|
|
}
|
|
}
|
|
|
|
curl_close($curl);
|
|
|
|
return $response;
|
|
}
|
|
|
|
function getFullUri($baseUri, $path)
|
|
{
|
|
$uriNormalized = rtrim($baseUri, '/');
|
|
$pathNormalized = ltrim($path, '/');
|
|
return sprintf(
|
|
'%s/%s',
|
|
$uriNormalized,
|
|
$pathNormalized
|
|
);
|
|
}
|
|
|
|
/**
|
|
* $orderId: Used to display an orderID to the buyer. In the account summary view, this value is used to
|
|
* identify a ledger entry if present.
|
|
*
|
|
* $price: by default, $price is expressed in the currency you set in bp_options.php. The currency can be
|
|
* changed in $options.
|
|
*
|
|
* $posData: this field is included in status updates or requests to get an invoice. It is intended to be used by
|
|
* the merchant to uniquely identify an order associated with an invoice in their system. Aside from that, BitPay does
|
|
* not use the data in this field. The data in this field can be anything that is meaningful to the merchant.
|
|
*
|
|
* $options keys can include any of:
|
|
* ('itemDesc', 'itemCode', 'notificationEmail', 'notificationURL', 'redirectURL', 'apiKey'
|
|
* 'currency', 'physical', 'fullNotifications', 'transactionSpeed', 'buyerName',
|
|
* 'buyerAddress1', 'buyerAddress2', 'buyerCity', 'buyerState', 'buyerZip', 'buyerEmail', 'buyerPhone')
|
|
* If a given option is not provided here, the value of that option will default to what is found in bp_options.php
|
|
* (see api documentation for information on these options).
|
|
*
|
|
* @param string $orderId
|
|
* @param string $price
|
|
* @param string $posData
|
|
* @param array $options
|
|
* @return array
|
|
*/
|
|
function bpCreateInvoice($orderId, $price, $posData, $options = array())
|
|
{
|
|
global $bpOptions;
|
|
|
|
$options = array_merge($bpOptions, $options); // $options override any options found in bp_options.php
|
|
|
|
$options['posData'] = '{"posData": "' . $posData . '"';
|
|
|
|
// if desired, a hash of the POS data is included to verify source in the callback
|
|
if ($bpOptions['verifyPos']) {
|
|
$options['posData'] .= ', "hash": "' . crypt($posData, $options['apiKey']) . '"';
|
|
}
|
|
|
|
$options['posData'] .= '}';
|
|
$options['orderID'] = $orderId;
|
|
$options['price'] = $price;
|
|
|
|
$btcpayUrl = getFullUri($options['btcpayUrl'],"/invoices");
|
|
|
|
$postOptions = array('orderID', 'itemDesc', 'itemCode', 'notificationEmail', 'notificationURL', 'redirectURL',
|
|
'posData', 'price', 'currency', 'physical', 'fullNotifications', 'transactionSpeed', 'buyerName',
|
|
'buyerAddress1', 'buyerAddress2', 'buyerCity', 'buyerState', 'buyerZip', 'buyerEmail', 'buyerPhone');
|
|
|
|
foreach ($postOptions as $o) {
|
|
if (array_key_exists($o, $options)) {
|
|
$post[$o] = $options[$o];
|
|
}
|
|
}
|
|
|
|
$post = json_encode($post);
|
|
|
|
$response = bpCurl($btcpayUrl, $options['apiKey'], $post);
|
|
|
|
return $response;
|
|
}
|
|
|
|
/**
|
|
* Call from your notification handler to convert $_POST data to an object containing invoice data
|
|
*
|
|
* @param string $apiKey
|
|
* @param null $btcpayUrl
|
|
* @return array
|
|
*/
|
|
function bpVerifyNotification($apiKey = false, $btcpayUrl = null)
|
|
{
|
|
global $bpOptions;
|
|
|
|
if (!$apiKey) {
|
|
$apiKey = $bpOptions['apiKey'];
|
|
}
|
|
|
|
$post = file_get_contents("php://input");
|
|
|
|
if (!$post) {
|
|
return 'No post data';
|
|
}
|
|
|
|
$json = json_decode($post, true);
|
|
|
|
if (is_string($json)) {
|
|
return $json; // error
|
|
}
|
|
|
|
if (!array_key_exists('posData', $json)) {
|
|
return 'no posData';
|
|
}
|
|
|
|
$posData = json_decode($json['posData'], true);
|
|
|
|
if ($bpOptions['verifyPos'] and $posData['hash'] != crypt($posData['posData'], $apiKey)) {
|
|
return 'ERROR: payload validation failed (bad hash)';
|
|
}
|
|
|
|
$json['posData'] = $posData['posData'];
|
|
|
|
if (!array_key_exists('id', $json)) {
|
|
return 'Cannot find invoice ID';
|
|
}
|
|
|
|
return bpGetInvoice($json['id'], $apiKey, $btcpayUrl);
|
|
}
|
|
|
|
/**
|
|
* $options can include ('apiKey')
|
|
*
|
|
* @param string $invoiceId
|
|
* @param string $apiKey
|
|
* @param string $btcpayUrl
|
|
* @return array
|
|
*/
|
|
function bpGetInvoice($invoiceId, $apiKey = false, $btcpayUrl = null)
|
|
{
|
|
global $bpOptions;
|
|
|
|
if (!$apiKey) {
|
|
$apiKey = $bpOptions['apiKey'];
|
|
}
|
|
|
|
if (!$btcpayUrl) {
|
|
$btcpayUrl = $bpOptions['btcpayUrl'];
|
|
}
|
|
|
|
$btcpayUrl = getFullUri($btcpayUrl,"/invoices");
|
|
|
|
$response = bpCurl($btcpayUrl . '/' . $invoiceId, $apiKey);
|
|
|
|
if (is_string($response)) {
|
|
return $response; // error
|
|
}
|
|
|
|
$response['posData'] = json_decode($response['data']['posData'], true);
|
|
|
|
if ($bpOptions['verifyPos']) {
|
|
$response['posData'] = $response['data']['posData'];
|
|
}
|
|
|
|
return $response;
|
|
}
|