FM / payment

/home/desid573/public_html/payment

Name	Size	Mode	Actions
assets/	-	0755	rm
eway-rapid-php-master/	-	0755	rm
pdd/	-	0755	rm
xero/	-	0755	rm
xero-2/	-	0755	rm
xero-php-oauth2-master/	-	0755	rm
10.php	1941	0644	edit dl rm
11.php	992	0644	edit dl rm
approved.php	1513	0644	edit dl rm
a_name_address.php	931	0644	edit dl rm
checktime.php	1436	0644	edit dl rm
driverCheck.php	794	0644	edit dl rm
eCrypt.js	68424	0644	edit dl rm
eway-rapid-php-master.zip	57270	0644	edit dl rm
eWay.php	42697	0644	edit dl rm
index.php	56045	0644	edit dl rm
index1.php	34506	0644	edit dl rm
index15May.php	48366	0644	edit dl rm
indexOLD.php	41793	0644	edit dl rm
indexTest.php	42517	0644	edit dl rm
payment-shutdown.log	517	0644	edit dl rm
quote.php	7218	0644	edit dl rm
test.php	1871	0644	edit dl rm
thankyou.php	24144	0644	edit dl rm
thankyouOLD.php	30110	0644	edit dl rm
thankyouTest.php	21950	0644	edit dl rm
tokenUpdate.php	10673	0644	edit dl rm
updatetoken.php	3696	0644	edit dl rm
xero-2-2.zip	2834178	0644	edit dl rm

Edit: /home/desid573/public_html/payment/thankyou.php (24144B)

<?php
error_reporting(E_ALL);

ini_set('log_errors', '1');
ini_set('error_log', __DIR__ . '/payment-debug.log');

require_once 'eway-rapid-php-master/include_eway.php';
require_once 'xero-2/invoiceSend.php';
require_once '../google/google-api-php-client-2.2.1/sheetsGetThenUpdate.php';

$client_key = '4T7y1vuKPkdhRYUQdH6msueW9hqV2wpcwnSk0Qwxkvwf7TjQn40qymPW7IJb66gUC1w1505cDMkj9IR82juQEnIp4/8nd0nDhwYDSDoqROtNBWmkqtqYmF6F4qVGMUq3HpJrY3y2kdSljCFfWzWc7LIEn4G5XY2IZAPgAO5+mhwvYrricmqwLhqzV4FBUII5AwTvJZl4awrdul4vLWkS73vJuW/XrXHseGK/nqB3oSRluZ1jKp2qDgVTwrXYEbx4rwwS42X2w0C9tLKywxf27WD2CCK8ftSeQBimVqFI0r6VuRXFVaOn6SQTOD9V/TsCfPk5Zh6/PWcfapyVKS+l1w==';
$tokencheck = "";
$apiKey = '44DD7APNUxR8/4sDLhEVT11OS00fmBo4Haxj4ZGJGHvtLBP0rC/ayqNhbVu9tEJrjlJPJm';
$apiPassword = 'y2b7QMpd';
?>
<!DOCTYPE html>
<html lang="en">
<head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    
    <title>Payment - Processed</title>

<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" rel="stylesheet">

<style>
        #map {
            height:300px;
        }
        body{
            background-color: #d9d9d9;
        }

</style>
</head>
<body>
<div class="container">
    <div class="row">
        <div class="col-lg-12 text-center">
        <?php
        $type = $_POST['type'];
        if($type == "DD") {
        $dbhost = "localhost";
	$dbuser = "desid573_inquiri";
	    		$dbpass = "@G&{)0*&Ts^V";
	    		$dbname = "desid573_inquiries";
        }
        if($type == "FC" OR $type == "SF" or $type == "MF" or $type == "BF" or $type == "GC" or $type == "SC") {
        $dbhost = "localhost";
	    $dbuser = "desid573_famcab";
	    		$dbpass = "C]+6wQySxov(";
	    		$dbname = "desid573_familycab";
        }
        if($type == "SI" OR $type == "HK") {
        $dbhost = "localhost";
	$dbuser = "desid573_inquiri";
	    		$dbpass = "@G&{)0*&Ts^V";
	    		$dbname = "desid573_new_pro_api";
        }
        if($type == "FA" OR $type == "BA" OR $type == "SA" or $type == "MA" or $type == "GA" or $type == "YA") {
        $dbhost = "localhost";
	$dbuser = "desid573_fam_app";
$dbpass = "TW#7CCqKReDn";
$dbname = "desid573_famcab_api";
        }
        if($type == "FC" or $type == "SF" or $type == "DD" or $type == "MF" or $type == "BF" or $type == "GC" or $type == "SC") {
            $table = "jobs";
            $spatulaID = "spat_ref";
        } else {
            $table = "booking";
            $spatulaID = "spatula_id";
        }
        $errormessage = '';
        $conn = new mysqli($dbhost , $dbuser , $dbpass , $dbname );

$email = trim($_POST['email']);
$phone= $_POST['phone'];
$fullname = trim($_POST['fullname']);
$homeaddress = $_POST['homeaddress'];
    if($_POST['tollAmount'] == "") {
        $charge = str_replace('.', '', $_POST['amount']);
    } else {
	$charge = str_replace('.', '', $_POST['amount']) + str_replace('.', '', $_POST['tollAmount']);
    }
	
	date_default_timezone_set('Australia/Perth');

if ($_POST['payment_type'] == 'card') {
	$chargeCard = true;
	if (isset($_POST['saveCustomer']) && $_POST['saveCustomer'] = 'yes') {

if($type == "FC" OR $type == "DD" OR $type == "SF" or $type == "MF" or $type == "BF" or $type == "GC" or $type == "SC") {
	    $conn = new mysqli($dbhost, $dbuser, $dbpass, $dbname) or die($conn->connect_error);
	    $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname);
	    $tokencheck = "";
	    error_log($phone);
        if($phone != "") {
            $query1 = "SELECT token FROM inquiries WHERE inquiry_mobile='".$phone."' ORDER BY token DESC LIMIT 0,1";
                    $result = mysqli_query($conn, $query1);
                    $row = mysqli_fetch_assoc($result);
                    $tokencheck = $row['token'];
            $success1 = $conn->query($query1);
            	    if (!$success1) {
                		$updatetoken = 0;
                		}
        }
        }

if( $tokencheck != ""){
    // Updates Token then charges token
$apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
		$client = \Eway\ Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);
    $tokencustomerid = $tokencheck;
    $customer = [
    'Email' => trim($_POST['email']),
    'TokenCustomerID' => $tokencustomerid,
    'CardDetails' => [
        'Name' => $fullname,
        'Number' => $_POST['EWAY_CARDNUMBER'],
        'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'],
        'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'],
        'CVN' => $_POST['EWAY_CARDCVN']
    ]
];

/*echo '<pre>';
	print_r($customer);
	echo '</pre>';
	exit;*/
$response = $client->updateCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer);

$transaction = [
			'Customer' => [
				'TokenCustomerID' => $tokencustomerid,
				'Reference' => $_POST['reference'],
					
			],
			'Payment' => [
				'TotalAmount' => $charge,
				'InvoiceReference' => $_POST['reference'],
			],
			'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING,
		];

$response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction);
}else{
    // Creates token and charges token
    
    $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
		$client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);

//create customer

$fullname = trim($_POST['fullname']);
		$nameparts = explode(' ', $fullname);
		$customer = [
			'Title' => 'Mr.',
			'FirstName' => trim($nameparts[0]),
			'LastName' => trim($nameparts[1]),
			'Country' => 'au',
			'Email' => trim($_POST['email']),
			'CardDetails' => [
				'Name' => $fullname,
				'Number' => $_POST['EWAY_CARDNUMBER'],
				'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'],
				'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'],
				'CVN' => $_POST['EWAY_CARDCVN']
			]
		];

$response = $client->createCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer);
			
		$tokencustomerid = $response->Customer->TokenCustomerID;

$response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction);
		
		if (isset($response->TransactionStatus) && $response->TransactionStatus) {
    		$query = "SELECT * FROM customer_tokens WHERE access_token_value='".$_POST['token']."'";
        	$result = $conn->query($query);
        	if(!$result) {
        	error_log("Token error: ".$conn->error);
        	
        	} else {
        	if ($result->num_rows > 0) 
		{
		$row = $result->fetch_assoc();
		$tokencheck = $row['access_token_value'];
		
		$query = "UPDATE customer_tokens SET modified = NOW() WHERE access_token_value = ".$tokencheck;
		$result = $conn->query($query);
		if(!$result) {
        	error_log("Token update error: ".$conn->error);
        	}

} else {
    		if($type == "DD" OR $type == "FC" OR $type == "SF" or $type == "MF" or $type == "BF" or $type == "GC" or $type == "SC") {
    		$query = "INSERT INTO customer_tokens (`id`, `cid`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL, '', ".$_POST['token'].", 1, NOW(), NOW())";
		$result = $conn->query($query);
		if(!$result) {
        	error_log("Token insert error: ".$conn->error);
    		
    		
    		}
    		}
    		
	}

}

} 
	}
$nameq = mysqli_real_escape_string($qcon, $fullname);
	    
	    $dropoffq = mysqli_real_escape_string($qcon, $homeaddress);
	    if($type == "DD") {
	    $query   = "INSERT into inquiries (inquiry_name, inquiry_mobile, inquiry_dropoff, inquiry_email, token, inquiry_created, welcomemess) VALUES ('" . $nameq . "','" . $phone . "','" . $dropoffq . "','" . $email . "','" . $tokencustomerid . "', NOW(), '') ON DUPLICATE KEY UPDATE inquiry_name='" . $nameq . "', inquiry_dropoff='" . $dropoffq . "', inquiry_email='" . $email . "', token='" . $tokencustomerid . "'";
	    }
	    if($type == "FC" or $type == "SF" or $type == "MF" or $type == "BF") {
	    $table = "customers";
	    $query   = "INSERT into customers (customer_name, customer_mobile, customer_email, token, date_added, welcomemess) VALUES ('" . $nameq . "','" . $phone . "','" . $email . "','" . $tokencustomerid . "', NOW(), '') ON DUPLICATE KEY UPDATE customer_name='" . $nameq . "', customer_email='" . $email . "', token='" . $tokencustomerid . "'";

}

$success = $conn->query($query);
 
	    if (!$success) {
    		die("Card could be processed but error with data/invoice: ".$conn->error);
    		}
  } else {
      // One time transaction
  $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
		$client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);

//create customer

$transaction = [
			'Customer' => [
                                'Email' => trim($_POST['email']),
                                'Reference' => $_POST['reference'],
				'CardDetails' => [
					'Name' => $fullname,
					'Number' => $_POST['EWAY_CARDNUMBER'],
					'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'],
					'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'],
					'CVN' => $_POST['EWAY_CARDCVN']
				]
			],
			'Payment' => [
				'TotalAmount' => $charge,
				'InvoiceReference' => $_POST['reference'],
			],
    	'TransactionType' => \Eway\Rapid\Enum\TransactionType::PURCHASE,
		];

$response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction);
  }

} else if ($_POST['payment_type'] == 'token') {
	    
	    $sql = "SELECT * FROM invoices WHERE reference = '".$_POST["reference"]."'";
	    
	    $result = $conn->query($sql); 
	    if (!$result->num_rows > 0) {

$apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
		$client = \Eway\ Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);
		$tokencustomerid = $_POST['token'];

$transaction = [
			'Customer' => [
				'TokenCustomerID' => $_POST['token'],
				'Reference' => $_POST['reference'],
					
			],
			'Payment' => [
				'TotalAmount' => $charge,
				'InvoiceReference' => $_POST['reference'],
			],
			'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING,
		];

} else {
    		if($type == "DD" OR $type == "FC" OR $type == "SF" or $type == "MF" or $type == "BF" or $type = "GC" or $type == "SC") {
    		$query = "INSERT INTO customer_tokens (`id`, `cid`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL, '', ".$_POST['token'].", 1, NOW(), NOW())";
		$result = $conn->query($query);
		if(!$result) {
        	error_log("Token insert error: ".$conn->error);
    		
    		
    		}
    		}
    		
	}

}
} 
} else {
    echo "Customer Already Charged";
}
}

if (isset($response->TransactionStatus) && $response->TransactionStatus) {
    		$transactionid = $response->TransactionID;
    		$AuthorisationCode = $response->AuthorisationCode;
    		$paymentCode = "1cb7bb21-739d-480d-909d-fe564b0e2df8";
    		$sql = "UPDATE ".$table." SET payment_eway = '".$charge."' WHERE reference = '".$reference."'";
    		$response = $conn->query($sql);
    		if(!$response) {
    		    error_log("payment add to database error ".$conn->error);
    		}
    		
	} else {
	if($_POST['payment_type'] != 'account'){
		$error = true;
    		if ($response->getErrors()) {
        		foreach ($response->getErrors() as $error) {
        	    		$errormessage.= "Error: $error (".\Eway\Rapid::getMessage($error).")<br>\n";
       	 		}
    		} else {
        		$errormessage.= "Sorry, your payment was declined";
        		
        		$query = "SELECT * FROM desid573_eway_codes.responses WHERE code = '".$response->ResponseMessage."'";
		$result = $conn->query($query);
    		if ($result->num_rows > 0) 
		{
		$row = $result->fetch_assoc();
		$responseMessage = $row['message'];
    		$errormessage = "<br>".$responseMessage;
    		}
    		}
    		
    		}
	}

/*
	echo '<pre>';
	print_r($response);
	echo '</pre>';
	*/
	 
	if (!$error) {
		echo "<h3>Transaction Approved</h3>";
		echo "<h4><a href='http://desidrivers.com.au/payment/'> Refresh </a></h4>";

$amount = $_POST['amount'];
	$reference = ($_POST['reference'] != '') ? $_POST['reference'] : $_POST['reference'];
	$invname = $_POST['invname'];
	$paidby = $_POST['payment_type'];
	
	$invdesc = $_POST['invdesc'];
	$invmessage = "Invoice Issued<br>
	Name $invname<br>
	Type $type<br>
	Email $email<br>
	Amount $amount<br>
	Paid By $paidby<br>
	Reference $reference<br>
	Description $invdesc";
send_mail('booking@perthdesignateddrivers.com.au', 'invoice@perthdesignateddrivers.com.au', 'New Invoice For '.$invname ,$invmessage);

$amountArray["total"] = $amount;
    if($_POST['levy'] != "0") {
        
        $amountArray["levy"] = $_POST['levy'];
        
        $sql = "INSERT INTO `desid573_eway_codes`.`levy` (`id`, `ref`, `levy`) VALUES (NULL,'".$reference."','".$_POST['levy']."')";
        
        $result = $conn->query($sql);
        if(!$result) {
            error_log("levy add error ".$conn->error);
        }
        
        
    }
    
    if($_POST['tollAmount'] != "0") {
        error_log("fired tolls");
        $amountArray["tolls"] = $_POST['tollAmount'];
    }
    $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname);
$query1 = "SELECT ".$spatulaID.", driver FROM ".$table." WHERE reference='".$reference."'";
        $result = mysqli_query($conn, $query1);
        $row = mysqli_fetch_assoc($result);
        $spat_ref = $row[$spatulaID];
        $driver_name = $row['driver'];
  $query1 = "SELECT id FROM desid573_eway_codes.drivers WHERE driver='".$driver_name."'";
        $result = mysqli_query($conn, $query1); 
        $row = mysqli_fetch_assoc($result);  
        $driver_id = $row['id'];
        $invnamed = mysqli_real_escape_string($qcon, $invname);
        $invdescd = mysqli_real_escape_string($qcon, str_replace("&","", $invdesc));   
        $invdescb = nl2br($invdesc);
        
        $query1 =   "INSERT INTO ".$dbname.".invoices (id, reference, tokenid, invname, amount, tollAmount, email, transactionid, date_created, type, paidby, invdesc, driver) VALUES (NULL,'" . $reference . "','" . $tokencustomerid . "','" . $invnamed . "','" . $amountArray["total"] . "','" . $amountArray["tolls"] . "','" . $email . "','" . $transactionid . "','" . date('Y-m-d H:i:s') . "','" . $type . "','" . $paidby . "','" . $invdescd . "','" . $driver_name . "')";
        $success = mysqli_query($conn, $query1);
        
	    if (!$success) {
    		die("Couldn't enter data: ".$conn->error);
    		}
    		
    		
	
	    
        
        
if($type == "SI" OR $type == "HK" OR $type == "FA" OR $type == "SA" OR $type == "MA" or $type == "BA" or $type == "GA" or $type == "YA") {

$query1 = "SELECT cid FROM booking WHERE reference='".$reference."'";
        $result = mysqli_query($conn, $query1);
        $row = mysqli_fetch_assoc($result);
        
        $cid = $row['cid'];
        
        if($_REQUEST["referral"] != "none") {
            $query1 = "UPDATE `credits` SET `reference` = '".$reference."', `is_used` = 1, `date_used` = NOW() WHERE `customer_id`='".$cid."' AND `is_used` = 0";
            $result = mysqli_query($conn, $query1);
            $query1 = "UPDATE `referal_claim` SET `reference_claimed` = '".$reference."', `date_last_claimed` = NOW() WHERE `customer_id`='".$cid."'";
            $result = mysqli_query($conn, $query1);
            
        }
  
        
        $query1 = "SELECT promo_code, promo_used FROM customers WHERE id='".$cid."' ";
        $result = mysqli_query($conn, $query1);
        $row = mysqli_fetch_assoc($result);
        $promo_code = $row['promo_code'];
        $is_used = $row['promo_used'];
        $is_used = $is_used + 1;
        
        if($promo_code != ""){
        $query1 = "UPDATE `".$dbname."`.`customers` SET `promo_code` = '', promo_used = '".$is_used."' WHERE `id`='".$cid."'";
        $result = mysqli_query($conn, $query1);
        if(substr($_REQUEST['promo_code'], 0, 2) === "RF"){
  				$sql = "UPDATE `".$dbname."`.`referrals` where `code` = '".$promo_code."' and `refered_id` = '".$cid."' SET `reference` = '".$reference."', `date_used` = NOW()";
				$result = $conn->query($sql);
				if(!$result) {
				error_log($conn->error);
				}
				}
        }

}

if (!$success) {
    die("Couldnt enter invoice data: ".$conn->error);
} else {
    date_default_timezone_set('Australia/Perth');
    $date = date("c");
    $tollDesc = "";
    if($amountArray["tolls"] != null) {
        $result = mysqli_query($conn, "SELECT * FROM toll_estimates WHERE reference='".$reference."'");
        if(!$result) {
            error_log($conn->error);
        } else {
            if($result->num_rows > 0) {
            $row = mysqli_fetch_assoc($result);
            $tollDesc = $row['description'];
            }
        }
        
    }
    error_log(json_encode($amountArray, true));
    error_log($driver_name);
    $invoiceDetails = submitInvoice($invnamed, $email, $date, $invdesc, $amountArray, $reference, $type, $tollDesc, $driver_name);
    
    error_log(json_encode($invoiceDetails, true));
    if($invoiceDetails != "") {
        
        
        $sql = "UPDATE ".$table." SET xero_inv = '".$invoiceDetails['invNum']."' WHERE reference = '".$reference."' ";
        $response = $conn->query($sql);
        if(!$response) {
            error_log("xero update database error ".$conn->error);
        }
        
        if($paymentCode != "") {
            $totalAmount = $amountArray["total"] + $amountArray["tolls"];
            error_log("totalAmount = ".$totalAmount);
            
            submitPayment($invoiceDetails['invoiceID'], $paymentCode, $date, $totalAmount, $reference);
            
        }
        $totalAmount = $amountArray["total"] + $amountArray["tolls"];
        addToSheets($reference, $invoiceDetails['invNum'], $totalAmount);
        
    } else {
        
        addToSheets($reference, "", $amountArray["total"] + $amountArray["tolls"]);
        
    }
    
    
}

if($spat_ref != "") {
require("../vromo.php");
$url = "https://api.vromo.io/v2/graph/role/jobs/$spat_ref/dispatches?access_token=".$vromo;

$curlObj = curl_init();

curl_setopt($curlObj, CURLOPT_URL, "$url");
curl_setopt($curlObj, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($curlObj, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($curlObj, CURLOPT_HEADER, 0);
curl_setopt($curlObj, CURLOPT_HTTPHEADER, array('Content-type:application/json'));
curl_setopt($curlObj, CURLOPT_POST, 1);
curl_setopt($curlObj, CURLOPT_POSTFIELDS, '[{"vehicle":{"id":' . $driver_id . '},"type":"closed"}]');

$response = curl_exec($curlObj);
error_log($response);
curl_close($curlObj);
    		
}
		
		
		$message = "Type $type <br>
Referecence $reference <br>";

$_POST = array();
die();	
			
			
	} else {
		echo "<h3>Transaction has been declined</h3><br>\n";
		echo $errormessage.
		"<br>\n";
		echo '<div class="container">

<div class="row" style="margin-top: 10px">
                <div class="">
                    <button id="tokenupdate" name="tokenupdate">Update Token</button>
                    </div>
                    </div>
<div class="update" id="update">
<form action="updatetoken.php" id="myForm" name="myForm" method="POST" data-eway-encrypt-key="'.$client_key.'">
<input type="hidden" name="submit_form" value="1">
<input type="hidden" name="url" value="'.$_POST['url'].'">
<input type="hidden" name="token" value="'.$_POST['token'].'">
              <div class="row" style="margin-top: 10px">
                <div class="">
                    <input type="text"  class=" form-control" id="fullname" placeholder="Full Name" maxlength="20" autocomplete="off" name="fullname" value="'.$_GET['name'].'">
                </div></div>
                
              <div class="row" style="margin-top: 10px">
                <div class="">
                    <input type="text" class=" form-control" id="EWAY_CARDNUMBER" placeholder="Credit Card Number" maxlength="20" autocomplete="off" name="EWAY_CARDNUMBER" data-eway-encrypt-name="EWAY_CARDNUMBER">
                </div></div>
                <div class="row" style="margin-top: 10px">

</select>

<select id="EWAY_CARDEXPIRYYEAR" name="EWAY_CARDEXPIRYYEAR">
            
            <option value="18">2018</option>
            <option value="19">2019</option>
            <option value="20">2020</option>
            <option value="21">2021</option>
            <option value="22">2022</option>
            <option value="23">2023</option>
            <option value="24">2024</option>
            <option value="25">2025</option>
            <option value="26">2026</option>
            <option value="27">2027</option>
        </select>
        
                </div></div>
                <br>
                             <button id="push" name="push">Update Token</button>
                <br>
                <br>
                
                
                </div>
   </form>
    
    <script src="https://secure.ewaypayments.com/scripts/eCrypt.min.js"></script>

</div>

';
		echo "<h4><a href='https://desidrivers.com.au/payment/'> Refresh </a></h4>";
		
	}

?>
</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js"></script>

$(document).ready(function(){
$("#update").hide();
})
$('#tokenupdate').click(function(){
$("#update").show();
})
</script>
</body>
</html>

<?php
function send_mail($to, $from, $title, $message)
{
    $headers = "MIME-Version: 1.0 \r\n";
    $headers .= "From: $from \n";
    $headers .= "MIME-Version: 1.0\r\n";
    $headers .= "Content-type: text/html;charset=ISO-8859-1 \r\n";
    $headers .= "X-Priority: 3\r\n";
    $headers .= "X-Mailer: smail-PHP " . phpversion() . "\r\n";
    return mail($to, $title, $message, $headers);
}
?>

Payment - Processed

connect_error); $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname); $tokencheck = ""; error_log($phone); if($phone != "") { $query1 = "SELECT token FROM inquiries WHERE inquiry_mobile='".$phone."' ORDER BY token DESC LIMIT 0,1"; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $tokencheck = $row['token']; $success1 = $conn->query($query1); if (!$success1) { $updatetoken = 0; } } } if( $tokencheck != ""){ // Updates Token then charges token $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION; $client = \Eway\ Rapid::createClient($apiKey, $apiPassword, $apiEndpoint); $tokencustomerid = $tokencheck; $customer = [ 'Email' => trim($_POST['email']), 'TokenCustomerID' => $tokencustomerid, 'CardDetails' => [ 'Name' => $fullname, 'Number' => $_POST['EWAY_CARDNUMBER'], 'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'], 'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'], 'CVN' => $_POST['EWAY_CARDCVN'] ] ]; /*echo '

';
	print_r($customer);
	echo '

'; exit;*/ $response = $client->updateCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer); $transaction = [ 'Customer' => [ 'TokenCustomerID' => $tokencustomerid, 'Reference' => $_POST['reference'], ], 'Payment' => [ 'TotalAmount' => $charge, 'InvoiceReference' => $_POST['reference'], ], 'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING, ]; $response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction); }else{ // Creates token and charges token $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION; $client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint); //create customer $fullname = trim($_POST['fullname']); $nameparts = explode(' ', $fullname); $customer = [ 'Title' => 'Mr.', 'FirstName' => trim($nameparts[0]), 'LastName' => trim($nameparts[1]), 'Country' => 'au', 'Email' => trim($_POST['email']), 'CardDetails' => [ 'Name' => $fullname, 'Number' => $_POST['EWAY_CARDNUMBER'], 'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'], 'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'], 'CVN' => $_POST['EWAY_CARDCVN'] ] ]; $response = $client->createCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer); $tokencustomerid = $response->Customer->TokenCustomerID; $transaction = [ 'Customer' => [ 'TokenCustomerID' => $tokencustomerid, 'Reference' => $_POST['reference'], ], 'Payment' => [ 'TotalAmount' => $charge, 'InvoiceReference' => $_POST['reference'], ], 'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING, ]; $response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction); if (isset($response->TransactionStatus) && $response->TransactionStatus) { $query = "SELECT * FROM customer_tokens WHERE access_token_value='".$_POST['token']."'"; $result = $conn->query($query); if(!$result) { error_log("Token error: ".$conn->error); } else { if ($result->num_rows > 0) { $row = $result->fetch_assoc(); $tokencheck = $row['access_token_value']; $query = "UPDATE customer_tokens SET modified = NOW() WHERE access_token_value = ".$tokencheck; $result = $conn->query($query); if(!$result) { error_log("Token update error: ".$conn->error); } } else { if($type == "DD" OR $type == "FC" OR $type == "SF" or $type == "MF" or $type == "BF" or $type == "GC" or $type == "SC") { $query = "INSERT INTO customer_tokens (`id`, `cid`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL, '', ".$_POST['token'].", 1, NOW(), NOW())"; $result = $conn->query($query); if(!$result) { error_log("Token insert error: ".$conn->error); } } } } } } $nameq = mysqli_real_escape_string($qcon, $fullname); $dropoffq = mysqli_real_escape_string($qcon, $homeaddress); if($type == "DD") { $query = "INSERT into inquiries (inquiry_name, inquiry_mobile, inquiry_dropoff, inquiry_email, token, inquiry_created, welcomemess) VALUES ('" . $nameq . "','" . $phone . "','" . $dropoffq . "','" . $email . "','" . $tokencustomerid . "', NOW(), '') ON DUPLICATE KEY UPDATE inquiry_name='" . $nameq . "', inquiry_dropoff='" . $dropoffq . "', inquiry_email='" . $email . "', token='" . $tokencustomerid . "'"; } if($type == "FC" or $type == "SF" or $type == "MF" or $type == "BF") { $table = "customers"; $query = "INSERT into customers (customer_name, customer_mobile, customer_email, token, date_added, welcomemess) VALUES ('" . $nameq . "','" . $phone . "','" . $email . "','" . $tokencustomerid . "', NOW(), '') ON DUPLICATE KEY UPDATE customer_name='" . $nameq . "', customer_email='" . $email . "', token='" . $tokencustomerid . "'"; } $success = $conn->query($query); if (!$success) { die("Card could be processed but error with data/invoice: ".$conn->error); } } else { // One time transaction $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION; $client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint); //create customer $transaction = [ 'Customer' => [ 'Email' => trim($_POST['email']), 'Reference' => $_POST['reference'], 'CardDetails' => [ 'Name' => $fullname, 'Number' => $_POST['EWAY_CARDNUMBER'], 'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'], 'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'], 'CVN' => $_POST['EWAY_CARDCVN'] ] ], 'Payment' => [ 'TotalAmount' => $charge, 'InvoiceReference' => $_POST['reference'], ], 'TransactionType' => \Eway\Rapid\Enum\TransactionType::PURCHASE, ]; $response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction); } } else if ($_POST['payment_type'] == 'token') { $sql = "SELECT * FROM invoices WHERE reference = '".$_POST["reference"]."'"; $result = $conn->query($sql); if (!$result->num_rows > 0) { $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION; $client = \Eway\ Rapid::createClient($apiKey, $apiPassword, $apiEndpoint); $tokencustomerid = $_POST['token']; $transaction = [ 'Customer' => [ 'TokenCustomerID' => $_POST['token'], 'Reference' => $_POST['reference'], ], 'Payment' => [ 'TotalAmount' => $charge, 'InvoiceReference' => $_POST['reference'], ], 'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING, ]; $response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction); if (isset($response->TransactionStatus) && $response->TransactionStatus) { $query = "SELECT * FROM customer_tokens WHERE access_token_value='".$_POST['token']."'"; $result = $conn->query($query); if(!$result) { error_log("Token error: ".$conn->error); } else { if ($result->num_rows > 0) { $row = $result->fetch_assoc(); $tokencheck = $row['access_token_value']; $query = "UPDATE customer_tokens SET modified = NOW() WHERE access_token_value = ".$tokencheck; $result = $conn->query($query); if(!$result) { error_log("Token update error: ".$conn->error); } } else { if($type == "DD" OR $type == "FC" OR $type == "SF" or $type == "MF" or $type == "BF" or $type = "GC" or $type == "SC") { $query = "INSERT INTO customer_tokens (`id`, `cid`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL, '', ".$_POST['token'].", 1, NOW(), NOW())"; $result = $conn->query($query); if(!$result) { error_log("Token insert error: ".$conn->error); } } } } } } else { echo "Customer Already Charged"; } } if (isset($response->TransactionStatus) && $response->TransactionStatus) { $transactionid = $response->TransactionID; $AuthorisationCode = $response->AuthorisationCode; $paymentCode = "1cb7bb21-739d-480d-909d-fe564b0e2df8"; $sql = "UPDATE ".$table." SET payment_eway = '".$charge."' WHERE reference = '".$reference."'"; $response = $conn->query($sql); if(!$response) { error_log("payment add to database error ".$conn->error); } } else { if($_POST['payment_type'] != 'account'){ $error = true; if ($response->getErrors()) { foreach ($response->getErrors() as $error) { $errormessage.= "Error: $error (".\Eway\Rapid::getMessage($error).")
\n"; } } else { $errormessage.= "Sorry, your payment was declined"; $query = "SELECT * FROM desid573_eway_codes.responses WHERE code = '".$response->ResponseMessage."'"; $result = $conn->query($query); if ($result->num_rows > 0) { $row = $result->fetch_assoc(); $responseMessage = $row['message']; $errormessage = "
".$responseMessage; } } } } /* echo '

';
	print_r($response);
	echo '

'; */ if (!$error) { echo "

Transaction Approved

"; echo "

Refresh

"; $amount = $_POST['amount']; $reference = ($_POST['reference'] != '') ? $_POST['reference'] : $_POST['reference']; $invname = $_POST['invname']; $paidby = $_POST['payment_type']; $invdesc = $_POST['invdesc']; $invmessage = "Invoice Issued
Name $invname
Type $type
Email $email
Amount $amount
Paid By $paidby
Reference $reference
Description $invdesc"; send_mail('booking@perthdesignateddrivers.com.au', 'invoice@perthdesignateddrivers.com.au', 'New Invoice For '.$invname ,$invmessage); $amountArray["total"] = $amount; if($_POST['levy'] != "0") { $amountArray["levy"] = $_POST['levy']; $sql = "INSERT INTO `desid573_eway_codes`.`levy` (`id`, `ref`, `levy`) VALUES (NULL,'".$reference."','".$_POST['levy']."')"; $result = $conn->query($sql); if(!$result) { error_log("levy add error ".$conn->error); } } if($_POST['tollAmount'] != "0") { error_log("fired tolls"); $amountArray["tolls"] = $_POST['tollAmount']; } $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname); $query1 = "SELECT ".$spatulaID.", driver FROM ".$table." WHERE reference='".$reference."'"; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $spat_ref = $row[$spatulaID]; $driver_name = $row['driver']; $query1 = "SELECT id FROM desid573_eway_codes.drivers WHERE driver='".$driver_name."'"; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $driver_id = $row['id']; $invnamed = mysqli_real_escape_string($qcon, $invname); $invdescd = mysqli_real_escape_string($qcon, str_replace("&","", $invdesc)); $invdescb = nl2br($invdesc); $query1 = "INSERT INTO ".$dbname.".invoices (id, reference, tokenid, invname, amount, tollAmount, email, transactionid, date_created, type, paidby, invdesc, driver) VALUES (NULL,'" . $reference . "','" . $tokencustomerid . "','" . $invnamed . "','" . $amountArray["total"] . "','" . $amountArray["tolls"] . "','" . $email . "','" . $transactionid . "','" . date('Y-m-d H:i:s') . "','" . $type . "','" . $paidby . "','" . $invdescd . "','" . $driver_name . "')"; $success = mysqli_query($conn, $query1); if (!$success) { die("Couldn't enter data: ".$conn->error); } if($type == "SI" OR $type == "HK" OR $type == "FA" OR $type == "SA" OR $type == "MA" or $type == "BA" or $type == "GA" or $type == "YA") { $query1 = "SELECT cid FROM booking WHERE reference='".$reference."'"; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $cid = $row['cid']; if($_REQUEST["referral"] != "none") { $query1 = "UPDATE `credits` SET `reference` = '".$reference."', `is_used` = 1, `date_used` = NOW() WHERE `customer_id`='".$cid."' AND `is_used` = 0"; $result = mysqli_query($conn, $query1); $query1 = "UPDATE `referal_claim` SET `reference_claimed` = '".$reference."', `date_last_claimed` = NOW() WHERE `customer_id`='".$cid."'"; $result = mysqli_query($conn, $query1); } $query1 = "SELECT promo_code, promo_used FROM customers WHERE id='".$cid."' "; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $promo_code = $row['promo_code']; $is_used = $row['promo_used']; $is_used = $is_used + 1; if($promo_code != ""){ $query1 = "UPDATE `".$dbname."`.`customers` SET `promo_code` = '', promo_used = '".$is_used."' WHERE `id`='".$cid."'"; $result = mysqli_query($conn, $query1); if(substr($_REQUEST['promo_code'], 0, 2) === "RF"){ $sql = "UPDATE `".$dbname."`.`referrals` where `code` = '".$promo_code."' and `refered_id` = '".$cid."' SET `reference` = '".$reference."', `date_used` = NOW()"; $result = $conn->query($sql); if(!$result) { error_log($conn->error); } } } } if (!$success) { die("Couldnt enter invoice data: ".$conn->error); } else { date_default_timezone_set('Australia/Perth'); $date = date("c"); $tollDesc = ""; if($amountArray["tolls"] != null) { $result = mysqli_query($conn, "SELECT * FROM toll_estimates WHERE reference='".$reference."'"); if(!$result) { error_log($conn->error); } else { if($result->num_rows > 0) { $row = mysqli_fetch_assoc($result); $tollDesc = $row['description']; } } } error_log(json_encode($amountArray, true)); error_log($driver_name); $invoiceDetails = submitInvoice($invnamed, $email, $date, $invdesc, $amountArray, $reference, $type, $tollDesc, $driver_name); error_log(json_encode($invoiceDetails, true)); if($invoiceDetails != "") { $sql = "UPDATE ".$table." SET xero_inv = '".$invoiceDetails['invNum']."' WHERE reference = '".$reference."' "; $response = $conn->query($sql); if(!$response) { error_log("xero update database error ".$conn->error); } if($paymentCode != "") { $totalAmount = $amountArray["total"] + $amountArray["tolls"]; error_log("totalAmount = ".$totalAmount); submitPayment($invoiceDetails['invoiceID'], $paymentCode, $date, $totalAmount, $reference); } $totalAmount = $amountArray["total"] + $amountArray["tolls"]; addToSheets($reference, $invoiceDetails['invNum'], $totalAmount); } else { addToSheets($reference, "", $amountArray["total"] + $amountArray["tolls"]); } } if($spat_ref != "") { require("../vromo.php"); $url = "https://api.vromo.io/v2/graph/role/jobs/$spat_ref/dispatches?access_token=".$vromo; $curlObj = curl_init(); curl_setopt($curlObj, CURLOPT_URL, "$url"); curl_setopt($curlObj, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curlObj, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($curlObj, CURLOPT_HEADER, 0); curl_setopt($curlObj, CURLOPT_HTTPHEADER, array('Content-type:application/json')); curl_setopt($curlObj, CURLOPT_POST, 1); curl_setopt($curlObj, CURLOPT_POSTFIELDS, '[{"vehicle":{"id":' . $driver_id . '},"type":"closed"}]'); $response = curl_exec($curlObj); error_log($response); curl_close($curlObj); } $message = "Type $type
Referecence $reference
"; $_POST = array(); die(); } else { echo "

Transaction has been declined

\n"; echo $errormessage. "
\n"; echo '

'; echo "

Refresh

"; } ?>