317 lines
11 KiB
PHP
317 lines
11 KiB
PHP
<?php
|
|
exit();
|
|
|
|
$noSession = 1;
|
|
require("db.php");
|
|
include("include/school-functions.php");
|
|
include("include/logging-functions.php");
|
|
include("include/date-time.php");
|
|
include("table.php");
|
|
|
|
$moduleName = "maPayment.php";
|
|
// startLog($moduleName);
|
|
|
|
|
|
// start capturing output
|
|
function saveOutput($contents) {
|
|
global $ltime, $school_num;
|
|
|
|
$f = fopen("/m/data1/app.hotlunches.net/maPayment.log", "w");
|
|
fwrite($f, $contents);
|
|
fclose($f);
|
|
|
|
$f = fopen("/m/data1/app.hotlunches.net/maPayment.trx.log", "a");
|
|
fwrite($f, $contents);
|
|
fclose($f);
|
|
|
|
$f = fopen("/m/data1/app.hotlunches.net/logs/ma/ma.$school_num.$ltime", "w");
|
|
fwrite($f, $contents);
|
|
fclose($f);
|
|
|
|
return nl2br(htmlentities($contents));
|
|
}
|
|
|
|
|
|
// Set time values for posting
|
|
date_default_timezone_set("Canada/Pacific");
|
|
$posting_time = date("Y-m-d H:i:s",$now);
|
|
$ltime = date("Y-m-d.H.i.s",$now);
|
|
|
|
|
|
// output date and POST-ed values for logging
|
|
$contents = (date('r') . "\n\n");
|
|
$x = $_GET;
|
|
$contents .= print_r($x, TRUE);
|
|
$contents .= "\n\n";
|
|
|
|
|
|
|
|
//
|
|
// Process parameters to script
|
|
//
|
|
$responsetext = $_GET['responsetext'];
|
|
// if (strlen($responsetext) == 0 || $responsetext != 'SUCCESS') exit();
|
|
|
|
$trx_result = $responsetext;
|
|
$trxMsg = $school_record['merchant_account_thanks_message'];
|
|
if (strlen($trxMsg) == 0) $trxMsg = getLanguageText('TEXT-THANK-YOU-FOR-PAYMENT');
|
|
|
|
|
|
// Get info
|
|
$user_num = intval($_GET['merchant_defined_field_1']);
|
|
$trx_num = intval($_GET['merchant_defined_field_2']);
|
|
$trxNum = $trx_num;
|
|
|
|
// Use the posted transaction number value to get the post values from DB
|
|
$query = "SELECT * FROM user_online_payments WHERE record_num = $trx_num AND user_num = $user_num";
|
|
$r = db_query($query);
|
|
if (db_num_rows($r) > 0) {
|
|
extract(db_fetch_assoc($r), EXTR_PREFIX_ALL, 'PMTS');
|
|
$school_num = $PMTS_school_num;
|
|
}
|
|
|
|
|
|
// Parse returned values
|
|
$trx_result = $trxResult;
|
|
$trx_msg = $trxMsg;
|
|
$response = $_GET['response'];
|
|
$responsetext = $_GET['responsetext'];
|
|
$authcode = $_GET['authcode'];
|
|
$avsresponse = $_GET['avsresponse'];
|
|
$transactionid = $_GET['transactionid'];
|
|
$orderid = $_GET['orderid'];
|
|
$amount = $_GET['amount'];
|
|
$first_name = $_GET['first_name'];
|
|
$last_name = $_GET['last_name'];
|
|
$address_1 = $_GET['address_1'];
|
|
$address_2 = $_GET['address_2'];
|
|
$city = $_GET['city'];
|
|
$state = $_GET['state'];
|
|
$country = $_GET['country'];
|
|
$phone = $_GET['phone'];
|
|
$postal_code = $_GET['postal_code'];
|
|
$email = $_GET['email'];
|
|
$referrer_url = $_GET['referrer_url'];
|
|
|
|
|
|
// Create entry in user_merchant_account_transactions table
|
|
$table = new Table('user_merchant_account_transactions');
|
|
$trxSQL = $table->BuildInsert();
|
|
db_query($trxSQL);
|
|
$contents .= "$query\n";
|
|
$trxID = db_insert_id();
|
|
$contents .= "Insert ID: $trxID\n\n";
|
|
|
|
|
|
// Check if this entry is in the user_merchant_account_transactions table
|
|
$query = "SELECT * FROM user_merchant_account_transactions " .
|
|
"WHERE school_num = $school_num " .
|
|
"AND trx_num = $trx_num " .
|
|
"AND trx_result = '$trx_result' " .
|
|
"AND authcode = '$authcode' " .
|
|
"AND record_num != $trxID";
|
|
$r = db_query($query);
|
|
if (db_num_rows($r) > 0) {
|
|
$error_message = "Duplicate Posting - Transaction Has Already Been Processed: $trx_num";
|
|
$contents .= "$error_message\n\n";
|
|
saveOutput($contents);
|
|
header("Location: /?error_message=" . urlencode($error_message));
|
|
exit();
|
|
}
|
|
|
|
|
|
|
|
// Load school information from the database
|
|
$r = db_query("SELECT * FROM schools WHERE record_num = {$school_num}");
|
|
if (db_num_rows($r) != 1) {
|
|
$error_message = "Invalid school.";
|
|
db_query("UPDATE user_merchant_account_transactions SET posting_result = 'Error', posting_message = 'Invalid school' WHERE record_num = $trxID");
|
|
$contents .= "$error_message\n\n";
|
|
saveOutput($contents);
|
|
header("Location: /?error_message=" . urlencode($error_message));
|
|
exit();
|
|
} else {
|
|
extract(db_fetch_assoc($r), EXTR_PREFIX_ALL, 's');
|
|
}
|
|
|
|
|
|
// Update online_payments database table
|
|
$query = "UPDATE user_online_payments " .
|
|
"SET status = 'Paid', payment_amount = balance_owing, reference = '{$transactionid}', trx_fee = 0, completed_time = $now " .
|
|
"WHERE record_num = $trxNum";
|
|
db_query($query);
|
|
|
|
|
|
// Get largest unpaid order to use schedule number for posting
|
|
$query = "SELECT hloh.schedule_num,hloh.record_num AS order_num, hloh.order_total - hloh.amount_paid AS balance FROM hotlunch_order_header as hloh, people as p " .
|
|
"WHERE hloh.school_num = {$school_num} " .
|
|
"AND ordered_by_num = p.record_num " .
|
|
"AND p.user_num = {$user_num} " .
|
|
"AND hloh.status NOT IN ('Paid','Complimentary','Concession') " .
|
|
"ORDER BY balance DESC " .
|
|
"LIMIT 0,1";
|
|
// writeLog("query: $query\n");
|
|
$r = db_query($query);
|
|
$row = db_fetch_assoc($r);
|
|
$snum = $row['schedule_num'];
|
|
$onum = $row['order_num'];
|
|
|
|
|
|
|
|
// Post transaction to the user_account
|
|
date_default_timezone_set(mapTimeZone($s_timezone));
|
|
$entered_time = $now;
|
|
$trx_time = date("Y-m-d H:i:s",$entered_time);
|
|
$schedule_num = $snum;
|
|
|
|
|
|
// Post payment discount if there is one
|
|
if ($PMTS_payment_discount != 0) {
|
|
$trxRecord = array();
|
|
$trxRecord['school_num'] = $school_num;
|
|
$trxRecord['user_num'] = $user_num;
|
|
$trxRecord['schedule_num'] = $schedule_num;
|
|
$trxRecord['transaction_datetime'] = $trx_time;
|
|
$trxRecord['transaction_type'] = 'Generated Credit';
|
|
$trxRecord['note'] = 'Payment Discount';
|
|
$trxRecord['transaction_amount'] = abs($PMTS_payment_discount) * -1;
|
|
$trxRecord['amount_paid'] = 0;
|
|
$trxRecord['transaction_fee'] = 0;
|
|
$trxRecord['payment_method'] = '';
|
|
$trxRecord['payment_reference'] = $transactionid;
|
|
$trxRecord['order_payments'] = '';
|
|
|
|
postTransaction($trxRecord);
|
|
$entered_time += 1;
|
|
$trx_time = date("Y-m-d H:i:s",$entered_time);
|
|
}
|
|
|
|
|
|
// Post transaction fee if there is one
|
|
if ($PMTS_transaction_fee != 0) {
|
|
$trxRecord = array();
|
|
$trxRecord['school_num'] = $school_num;
|
|
$trxRecord['user_num'] = $user_num;
|
|
$trxRecord['schedule_num'] = $schedule_num;
|
|
$trxRecord['transaction_datetime'] = $trx_time;
|
|
$trxRecord['transaction_type'] = 'Credit Card Transaction Fee';
|
|
$trxRecord['note'] = '';
|
|
$trxRecord['transaction_amount'] = abs($PMTS_transaction_fee);
|
|
$trxRecord['amount_paid'] = 0;
|
|
$trxRecord['transaction_fee'] = 0;
|
|
$trxRecord['payment_method'] = '';
|
|
$trxRecord['payment_reference'] = $transactionid;
|
|
$trxRecord['order_payments'] = '';
|
|
|
|
postTransaction($trxRecord);
|
|
$entered_time += 1;
|
|
$trx_time = date("Y-m-d H:i:s",$entered_time);
|
|
}
|
|
|
|
|
|
|
|
// Set amount to a negative amount as it is a credit to the account
|
|
$amount = $amount * -1;
|
|
$trxRecord = array();
|
|
$trxRecord['school_num'] = $school_num;
|
|
$trxRecord['user_num'] = $user_num;
|
|
$trxRecord['schedule_num'] = $schedule_num;
|
|
$trxRecord['transaction_datetime'] = $trx_time;
|
|
$trxRecord['transaction_type'] = 'Payment';
|
|
$trxRecord['note'] = 'On-Line Payment';
|
|
$trxRecord['transaction_amount'] = $amount;
|
|
$trxRecord['amount_paid'] = 0;
|
|
$trxRecord['transaction_fee'] = 0;
|
|
$trxRecord['payment_method'] = 'Credit Card';
|
|
$trxRecord['payment_reference'] = $transactionid;
|
|
$trxRecord['order_payments'] = $order_payments;
|
|
|
|
$ptrx_num = postCredit($trxRecord);
|
|
|
|
// Close all transactions
|
|
$query = "UPDATE user_account SET transaction_status = 'Closed' WHERE school_num = $school_num AND user_num = $user_num";
|
|
db_query($query);
|
|
|
|
// Update all orders to set amount paid
|
|
$query = "UPDATE user_account SET amount_paid = transaction_amount WHERE school_num = $school_num AND user_num = $user_num AND transaction_amount > 0";
|
|
db_query($query);
|
|
|
|
|
|
// Update hotlunch_orders table
|
|
$query = "SELECT hloh.* FROM hotlunch_order_header as hloh, people as p " .
|
|
"WHERE hloh.school_num = {$school_num} " .
|
|
"AND ordered_by_num = p.record_num " .
|
|
"AND p.user_num = {$user_num} " .
|
|
"AND hloh.status NOT IN ('Paid','Complimentary','Concession')";
|
|
$orders = db_query($query);
|
|
$contents .= "$query\n";
|
|
$contents .= "Orders Found: " . db_num_rows($orders) . "\n";
|
|
|
|
$today = date("Y-m-d",$now);
|
|
$order_payments = "";
|
|
$snum = 0;
|
|
if (db_num_rows($orders) > 0) {
|
|
while ($row = db_fetch_array($orders)) {
|
|
$onum = $row['record_num'];
|
|
$ototal = $row['order_total'];
|
|
$opaid = $row['amount_paid'];
|
|
$snum = $row['schedule_num'];
|
|
$amt = $ototal - $opaid;
|
|
if (strlen($order_payments) > 0) $order_payments .= "|";
|
|
$order_payments .= "{" . $onum . ":" . $amt . "}";
|
|
$payment_amt = abs($amt);
|
|
$snum = sprintf("%0d",intval($snum));
|
|
|
|
// Save transaction details
|
|
$query = "INSERT INTO user_account_detail (school_num,user_num,transaction_num,posted_to_transaction,posted_amount,posted_schedule,entered_time,deleted) " .
|
|
"VALUES ($school_num, $user_num, $ptrx_num, $onum, $payment_amt, $snum, $now, 'N')";
|
|
db_query($query);
|
|
|
|
$query = "UPDATE hotlunch_order_header " .
|
|
"SET amount_paid = order_total, " .
|
|
"status = 'Paid', " .
|
|
"paid_date = '$today', " .
|
|
"payment_method = 'On-Line Payment' " .
|
|
"WHERE record_num = {$onum}";
|
|
db_query($query);
|
|
|
|
$contents .= " - Order Paid: $onum\n";
|
|
}
|
|
|
|
$query = "UPDATE user_account SET order_payments = '$order_payments' WHERE record_num = $ptrx_num";
|
|
db_query($query);
|
|
}
|
|
|
|
$contents .= "\n";
|
|
|
|
|
|
// Make activity_log entry
|
|
$username = db_getVal("SELECT userid FROM users WHERE school_num = $base_school_num AND record_num = $user_num");
|
|
$activity = "On-Line Payment";
|
|
$additional_info = "TRX ID: $trx_num\nAmount: " . number_format(abs($amount),2) . "\n";
|
|
$curr_time = $now;
|
|
$activity_datetime = date("Y-m-d H:i:s",$curr_time);
|
|
$uid = db_escape_string($username);
|
|
$query = "insert into activity_log (school_num,userid,user_ip,activity_time,activity_datetime,activity,information) " .
|
|
"values($school_num,'$uid','0.0.0.0',$curr_time,'$activity_datetime','$activity','$additional_info')";
|
|
db_query($query);
|
|
|
|
// Reset user transaction status
|
|
$query = "update users set trx_status = NULL where school_num = $school_num and record_num = $user_num";
|
|
db_query($query);
|
|
|
|
// Reset user can_order flag
|
|
$query = "update users set can_order = 'Yes' where school_num = $school_num and can_order = 'Balance' and record_num = $user_num";
|
|
db_query($query);
|
|
|
|
// Update user_merchant_account_transactions
|
|
db_query("UPDATE user_merchant_account_transactions SET posting_message = 'Payment processed ok', posting_result = 'Posted' WHERE record_num = $trxID");
|
|
$contents .= "Payment processed ok\n\n\n";
|
|
|
|
adjustUserAccountDetails($user_num,$school_num);
|
|
|
|
saveOutput($contents);
|
|
header("Location: /?tnum=$ptrx_num&unum=$user_num&rcpt_link=Y&form_message=" . urlencode($trxMsg));
|
|
|
|
?>
|