237 lines
7.4 KiB
PHP
237 lines
7.4 KiB
PHP
<?php
|
|
/**
|
|
* The MIT License (MIT)
|
|
*
|
|
* Copyright (c) 2011-2015 BitPay
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
* in the Software without restriction, including without limitation the rights
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
* furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in
|
|
* all copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
* THE SOFTWARE.
|
|
*/
|
|
|
|
require_once 'bp_options.php';
|
|
|
|
/**
|
|
* @param string $contents
|
|
*/
|
|
function bpLog($contents)
|
|
{
|
|
error_log($contents);
|
|
}
|
|
|
|
/**
|
|
* @param string $url
|
|
* @param string $apiKey
|
|
* @param bool|string $post
|
|
* @return array
|
|
*/
|
|
function bpCurl($url, $apiKey, $post = false)
|
|
{
|
|
global $bpOptions;
|
|
|
|
$curl = curl_init($url);
|
|
$length = 0;
|
|
if ($post) {
|
|
curl_setopt($curl, CURLOPT_POST, 1);
|
|
curl_setopt($curl, CURLOPT_POSTFIELDS, $post);
|
|
$length = strlen($post);
|
|
}
|
|
|
|
$uname = base64_encode($apiKey);
|
|
|
|
$header = array(
|
|
'Content-Type: application/json',
|
|
'Content-Length: ' . $length,
|
|
'Authorization: Basic ' . $uname,
|
|
'X-BitPay-Plugin-Info: whmcs3',
|
|
);
|
|
|
|
curl_setopt($curl, CURLOPT_PORT, 443);
|
|
curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
|
|
curl_setopt($curl, CURLOPT_TIMEOUT, 10);
|
|
curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
|
|
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 1); // verify certificate
|
|
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2); // check existence of CN and verify that it matches hostname
|
|
curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
|
|
curl_setopt($curl, CURLOPT_FORBID_REUSE, 1);
|
|
curl_setopt($curl, CURLOPT_FRESH_CONNECT, 1);
|
|
|
|
$responseString = curl_exec($curl);
|
|
|
|
if ($responseString == false) {
|
|
$response = array('error' => curl_error($curl));
|
|
bpLog('[ERROR] In modules/gateways/bitpay/bp_lib.php::bpCurl(): Invalid response received: ' . var_export($response, true));
|
|
} else {
|
|
$response = json_decode($responseString, true);
|
|
|
|
if (!$response) {
|
|
bpLog('[ERROR] In modules/gateways/bitpay/bp_lib.php::bpCurl(): Invalid response received: ' . var_export($responseString, true));
|
|
$response = array('error' => 'invalid json: ' . $responseString);
|
|
}
|
|
}
|
|
|
|
curl_close($curl);
|
|
|
|
return $response;
|
|
}
|
|
|
|
/**
|
|
* $orderId: Used to display an orderID to the buyer. In the account summary view, this value is used to
|
|
* identify a ledger entry if present.
|
|
*
|
|
* $price: by default, $price is expressed in the currency you set in bp_options.php. The currency can be
|
|
* changed in $options.
|
|
*
|
|
* $posData: this field is included in status updates or requests to get an invoice. It is intended to be used by
|
|
* the merchant to uniquely identify an order associated with an invoice in their system. Aside from that, BitPay does
|
|
* not use the data in this field. The data in this field can be anything that is meaningful to the merchant.
|
|
*
|
|
* $options keys can include any of:
|
|
* ('itemDesc', 'itemCode', 'notificationEmail', 'notificationURL', 'redirectURL', 'apiKey'
|
|
* 'currency', 'physical', 'fullNotifications', 'transactionSpeed', 'buyerName',
|
|
* 'buyerAddress1', 'buyerAddress2', 'buyerCity', 'buyerState', 'buyerZip', 'buyerEmail', 'buyerPhone')
|
|
* If a given option is not provided here, the value of that option will default to what is found in bp_options.php
|
|
* (see api documentation for information on these options).
|
|
*
|
|
* @param string $orderId
|
|
* @param string $price
|
|
* @param string $posData
|
|
* @param array $options
|
|
* @return array
|
|
*/
|
|
function bpCreateInvoice($orderId, $price, $posData, $options = array())
|
|
{
|
|
global $bpOptions;
|
|
|
|
$options = array_merge($bpOptions, $options); // $options override any options found in bp_options.php
|
|
|
|
$options['posData'] = '{"posData": "' . $posData . '"';
|
|
|
|
// if desired, a hash of the POS data is included to verify source in the callback
|
|
if ($bpOptions['verifyPos']) {
|
|
$options['posData'] .= ', "hash": "' . crypt($posData, $options['apiKey']) . '"';
|
|
}
|
|
|
|
$options['posData'] .= '}';
|
|
$options['orderID'] = $orderId;
|
|
$options['price'] = $price;
|
|
|
|
if ($options['network'] == 'test') {
|
|
$network = 'https://test.bitpay.com/api/invoice/';
|
|
} else {
|
|
$network = 'https://bitpay.com/api/invoice/';
|
|
}
|
|
|
|
$postOptions = array('orderID', 'itemDesc', 'itemCode', 'notificationEmail', 'notificationURL', 'redirectURL',
|
|
'posData', 'price', 'currency', 'physical', 'fullNotifications', 'transactionSpeed', 'buyerName',
|
|
'buyerAddress1', 'buyerAddress2', 'buyerCity', 'buyerState', 'buyerZip', 'buyerEmail', 'buyerPhone');
|
|
|
|
foreach ($postOptions as $o) {
|
|
if (array_key_exists($o, $options)) {
|
|
$post[$o] = $options[$o];
|
|
}
|
|
}
|
|
|
|
$post = json_encode($post);
|
|
$response = bpCurl($network, $options['apiKey'], $post);
|
|
|
|
return $response;
|
|
}
|
|
|
|
/**
|
|
* Call from your notification handler to convert $_POST data to an object containing invoice data
|
|
*
|
|
* @param string $apiKey
|
|
* @param null $network
|
|
* @return array
|
|
*/
|
|
function bpVerifyNotification($apiKey = false, $network = null)
|
|
{
|
|
global $bpOptions;
|
|
|
|
if (!$apiKey) {
|
|
$apiKey = $bpOptions['apiKey'];
|
|
}
|
|
|
|
$post = file_get_contents("php://input");
|
|
|
|
if (!$post) {
|
|
return 'No post data';
|
|
}
|
|
|
|
$json = json_decode($post, true);
|
|
|
|
if (is_string($json)) {
|
|
return $json; // error
|
|
}
|
|
|
|
if (!array_key_exists('posData', $json)) {
|
|
return 'no posData';
|
|
}
|
|
|
|
$posData = json_decode($json['posData'], true);
|
|
|
|
if ($bpOptions['verifyPos'] and $posData['hash'] != crypt($posData['posData'], $apiKey)) {
|
|
return 'ERROR: authentication failed (bad hash)';
|
|
}
|
|
|
|
$json['posData'] = $posData['posData'];
|
|
|
|
if (!array_key_exists('id', $json)) {
|
|
return 'Cannot find invoice ID';
|
|
}
|
|
|
|
return bpGetInvoice($json['id'], $apiKey, $network);
|
|
}
|
|
|
|
/**
|
|
* $options can include ('apiKey')
|
|
*
|
|
* @param string $invoiceId
|
|
* @param string $apiKey
|
|
* @param string $network
|
|
* @return array
|
|
*/
|
|
function bpGetInvoice($invoiceId, $apiKey = false, $network = null)
|
|
{
|
|
global $bpOptions;
|
|
|
|
if (!$apiKey) {
|
|
$apiKey = $bpOptions['apiKey'];
|
|
}
|
|
|
|
if (true == empty($network) || $network == 'live') {
|
|
$network = 'https://bitpay.com/api/invoice/';
|
|
} else {
|
|
$network = 'https://test.bitpay.com/api/invoice/';
|
|
}
|
|
|
|
$response = bpCurl($network . $invoiceId, $apiKey);
|
|
|
|
if (is_string($response)) {
|
|
return $response; // error
|
|
}
|
|
|
|
$response['posData'] = json_decode($response['posData'], true);
|
|
|
|
if($bpOptions['verifyPos']) {
|
|
$response['posData'] = $response['posData']['posData'];
|
|
}
|
|
|
|
return $response;
|
|
}
|