FM / payment

/home/desid573/public_html/payment

Name	Size	Mode	Actions
assets/	-	0755	rm
eway-rapid-php-master/	-	0755	rm
pdd/	-	0755	rm
xero/	-	0755	rm
xero-2/	-	0755	rm
xero-php-oauth2-master/	-	0755	rm
10.php	1941	0644	edit dl rm
11.php	992	0644	edit dl rm
approved.php	1513	0644	edit dl rm
a_name_address.php	931	0644	edit dl rm
checktime.php	1436	0644	edit dl rm
driverCheck.php	794	0644	edit dl rm
eCrypt.js	68424	0644	edit dl rm
eway-rapid-php-master.zip	57270	0644	edit dl rm
eWay.php	42697	0644	edit dl rm
index.php	56045	0644	edit dl rm
index1.php	34506	0644	edit dl rm
index15May.php	48366	0644	edit dl rm
indexOLD.php	41793	0644	edit dl rm
indexTest.php	42517	0644	edit dl rm
payment-shutdown.log	517	0644	edit dl rm
quote.php	7218	0644	edit dl rm
test.php	1871	0644	edit dl rm
thankyou.php	24144	0644	edit dl rm
thankyouOLD.php	30110	0644	edit dl rm
thankyouTest.php	21950	0644	edit dl rm
tokenUpdate.php	10673	0644	edit dl rm
updatetoken.php	3696	0644	edit dl rm
xero-2-2.zip	2834178	0644	edit dl rm

Edit: /home/desid573/public_html/payment/thankyouTest.php (21950B)

<?php
//ini_set('display_errors', '1');
//error_reporting(E_ALL);

require_once 'eway-rapid-php-master/include_eway.php';
require_once 'xero/invoiceSend.php';

$client_key = '4T7y1vuKPkdhRYUQdH6msueW9hqV2wpcwnSk0Qwxkvwf7TjQn40qymPW7IJb66gUC1w1505cDMkj9IR82juQEnIp4/8nd0nDhwYDSDoqROtNBWmkqtqYmF6F4qVGMUq3HpJrY3y2kdSljCFfWzWc7LIEn4G5XY2IZAPgAO5+mhwvYrricmqwLhqzV4FBUII5AwTvJZl4awrdul4vLWkS73vJuW/XrXHseGK/nqB3oSRluZ1jKp2qDgVTwrXYEbx4rwwS42X2w0C9tLKywxf27WD2CCK8ftSeQBimVqFI0r6VuRXFVaOn6SQTOD9V/TsCfPk5Zh6/PWcfapyVKS+l1w==';

$apiKey = '44DD7APNUxR8/4sDLhEVT11OS00fmBo4Haxj4ZGJGHvtLBP0rC/ayqNhbVu9tEJrjlJPJm';
$apiPassword = 'y2b7QMpd';
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    
    <title>Payment - Processed</title>

<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" rel="stylesheet">

<style>
        #map {
            height:300px;
        }
        body{
            background-color: #d9d9d9;
        }

</style>
</head>
<body>
<div class="container">
    <div class="row">
        <div class="col-lg-12 text-center">
        <?php
        $type = $_POST['type'];
        if($type == "DD") {
        $dbhost = "localhost";
	$dbuser = "perthdes_inquiri";
	$dbpass = "@G&{)0*&Ts^V";
	$dbname = "perthdes_inquiries";
        }
        if($type == "FC" OR $type == "SF") {
        $dbhost = "localhost";
	    $dbuser = "perthdes_famcab";
	    $dbpass = "C]+6wQySxov(";
	    $dbname = "perthdes_familycab";;
        }
        if($type == "SI" OR $type == "HK") {
        $dbhost = "localhost";
	$dbuser = "perthdes_inquiri";
	    $dbpass = "@G&{)0*&Ts^V";
	    $dbname = "perthdes_new_pro_api";;
        }
        if($type == "FA" OR $type == "NW" OR $type == "SA") {
        $dbhost = "localhost";
	$dbuser = "perthdes_fam_app";
	$dbpass = "TW#7CCqKReDn";
	$dbname = "perthdes_famcab_api";
        }
        if($type == "FC" or $type == "SF" or $type == "DD") {
            $table = "jobs";
            $spatulaID = "spat_ref";
        } else {
            $table = "booking";
            $spatulaID = "spatula_id";
        }
        $errormessage = '';
        $conn = new mysqli($dbhost , $dbuser , $dbpass , $dbname );

$email = trim($_POST['email']);
$phone= $_POST['phone'];
$fullname = trim($_POST['fullname']);
$homeaddress = $_POST['homeaddress'];
	$charge = str_replace('.', '', $_POST['amount']);
	
	date_default_timezone_set('Australia/Perth');
	$currenttime = date('Y-m-d H:i:s');
	
	if ($_POST['payment_type'] == 'card') {
	$chargeCard = true;
	if (isset($_POST['saveCustomer']) && $_POST['saveCustomer'] = 'yes') {

if($type == "FC" OR $type == "DD" OR $type == "SF") {
	    $conn = new mysqli($dbhost, $dbuser, $dbpass, $dbname) or die($conn->connect_error);
	    $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname);

$query1 = "SELECT token FROM inquiries WHERE inquiry_mobile='".$phone."' ORDER BY token DESC LIMIT 0,1";
        $result = mysqli_query($conn, $query1);
        $row = mysqli_fetch_assoc($result);
        $tokencheck = $row['token'];
$success1 = $conn->query($query1);
	    if (!$success1) {
    		$updatetoken = 0;
    		}

if( $tokencheck != ""){
$apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
		$client = \Eway\ Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);
    $tokencustomerid = $tokencheck;
    $customer = [
    'Email' => trim($_POST['email']),
    'TokenCustomerID' => $tokencustomerid,
    'CardDetails' => [
        'Name' => $fullname,
        'Number' => $_POST['EWAY_CARDNUMBER'],
        'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'],
        'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'],
        'CVN' => $_POST['EWAY_CARDCVN']
    ]
];

/*echo '<pre>';
	print_r($customer);
	echo '</pre>';
	exit;*/
$response = $client->updateCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer);

$transaction = [
			'Customer' => [
				'TokenCustomerID' => $tokencustomerid,
				'Reference' => $_POST['reference'],
					
			],
			'Payment' => [
				'TotalAmount' => $charge,
				'InvoiceReference' => $_POST['reference'],
			],
			'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING,
		];

$response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction);
}else{
    
    
    $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
		$client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);

//create customer

$fullname = trim($_POST['fullname']);
		$nameparts = explode(' ', $fullname);
		$customer = [
			'Title' => 'Mr.',
			'FirstName' => trim($nameparts[0]),
			'LastName' => trim($nameparts[1]),
			'Country' => 'au',
			'Email' => trim($_POST['email']),
			'CardDetails' => [
				'Name' => $fullname,
				'Number' => $_POST['EWAY_CARDNUMBER'],
				'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'],
				'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'],
				'CVN' => $_POST['EWAY_CARDCVN']
			]
		];

$responce = $client->createCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer);
			
		$tokencustomerid = $response->Customer->TokenCustomerID;

$response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction);
		
		if (isset($response->TransactionStatus) && $response->TransactionStatus) {
    		$query = "SELECT * FROM customer_tokens WHERE access_token_value='".$_POST['token']."'";
        	$result = $conn->query($query);
        	if(!$result) {
        	error_log("Token error: ".$conn->error);
        	
        	} else {
        	if ($result->num_rows > 0) 
		{
		$row = $result->fetch_assoc();
		$tokencheck = $row['access_token_value'];
		
		$query = "UPDATE customer_tokens SET modified = NOW() WHERE access_token_value = ".$tokencheck;
		$result = $conn->query($query);
		if(!$result) {
        	error_log("Token update error: ".$conn->error);
        	}

} else {
    		if($type == "DD" OR $type == "FC" OR $type == "SF") {
    		$query = "INSERT INTO customer_tokens (`id`, `cid`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL, '', ".$_POST['token'].", 1, NOW(), NOW())";
		$result = $conn->query($query);
		if(!$result) {
        	error_log("Token insert error: ".$conn->error);
    		
    		
    		}
    		}
    		
	}

}

} 
	}
$nameq = mysqli_real_escape_string($qcon, $fullname);
	    
	    $dropoffq = mysqli_real_escape_string($qcon, $homeaddress);
	    $table = "inquiries";
	    if($type == "FC") {
	    $table = "customers";
	    }

$query   = "INSERT into ".$table." (inquiry_name, inquiry_mobile, inquiry_dropoff, inquiry_email, token, inquiry_created, welcomemess) VALUES ('" . $nameq . "','" . $phone . "','" . $dropoffq . "','" . $email . "','" . $tokencustomerid . "', NOW(), '') ON DUPLICATE KEY UPDATE inquiry_name='" . $nameq . "', inquiry_dropoff='" . $dropoffq . "', inquiry_email='" . $email . "', token='" . $tokencustomerid . "'";
	    $success = $conn->query($query);
 
	    if (!$success) {
    		die("Card could be processed but error with data/invoice: ".$conn->error);
    		}
  } else {
  $chargeCard == true;
  }  		
} else {
$chargeCard == false;
}

if($chargeCard) {

$apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
		$client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);

//create customer

$transaction = [
			'Customer' => [
                                'Email' => trim($_POST['email']),
                                'Reference' => $_POST['reference'],
				'CardDetails' => [
					'Name' => $fullname,
					'Number' => $_POST['EWAY_CARDNUMBER'],
					'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'],
					'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'],
					'CVN' => $_POST['EWAY_CARDCVN']
				]
			],
			'Payment' => [
				'TotalAmount' => $charge,
				'InvoiceReference' => $_POST['reference'],
			],
    	'TransactionType' => \Eway\Rapid\Enum\TransactionType::PURCHASE,
		];

$response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction);
}

} else if ($_POST['payment_type'] == 'token') {

$apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
		$client = \Eway\ Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);
		$tokencustomerid = $_POST['token'];

$transaction = [
			'Customer' => [
				'TokenCustomerID' => $_POST['token'],
				'Reference' => $_POST['reference'],
					
			],
			'Payment' => [
				'TotalAmount' => $charge,
				'InvoiceReference' => $_POST['reference'],
			],
			'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING,
		];

}
} 
}

if (isset($response->TransactionStatus) && $response->TransactionStatus) {
    		$transactionid = $response->TransactionID;
    		$AuthorisationCode = $response->AuthorisationCode;
    		$paymentCode = "1cb7bb21-739d-480d-909d-fe564b0e2df8";
    		$sql = "UPDATE ".$table." SET payment_eway = '".$charge."' WHERE reference = '".$ref."'";
    		$response = $conn->query($sql);
    		if(!$response) {
    		    error_log($conn->error);
    		}
    		
	} else {
	if($_POST['payment_type'] != 'account'){
		$error = true;
    		if ($response->getErrors()) {
        		foreach ($response->getErrors() as $error) {
        	    		$errormessage.= "Error: $error (".\Eway\Rapid::getMessage($error).")<br>\n";
       	 		}
    		} else {
        		$errormessage.= "Sorry, your payment was declined";
        		
        		$query = "SELECT * FROM perthdes_eway_codes.responses WHERE code = '".$response->ResponseMessage."'";
		$result = $conn->query($query);
    		if ($result->num_rows > 0) 
		{
		$row = $result->fetch_assoc();
		$responseMessage = $row['message'];
    		$errormessage = "<br>".$responseMessage;
    		}
    		}
    		
    		}
	}

/*
	echo '<pre>';
	print_r($response);
	echo '</pre>';
	*/
	 
	if (!$error) {
		echo "<h3>Transaction Approved</h3>";
		echo "<h4><a href='http://bookings.perthdesignateddrivers.com.au/payment/'> Refresh </a></h4>";

$amount = floatval($_POST['amount']);
	$reference = ($_POST['reference'] != '') ? $_POST['reference'] : $_POST['reference'];
	$invname = $_POST['invname'];
	$paidby = $_POST['payment_type'];
	
	$invdesc = $_POST['invdesc'];
	$invmessage = "Invoice Issued<br>
	Name $invname<br>
	Type $type<br>
	Email $email<br>
	Amount $amount<br>
	Paid By $paidby<br>
	Reference $reference<br>
	Description $invdesc";
send_mail('booking@perthdesignateddrivers.com.au', 'invoice@perthdesignateddrivers.com.au', 'New Invoice For '.$invname ,$invmessage);

$amountArray = [$amount];
    if($_POST['tollAmount'] != "0") {
        error_log("fired tolls");
        array_push($amountArray, floatval($_POST['tollAmount']));
    }
    $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname);
$query1 = "SELECT ".$spatulaID.", driver FROM ".$table." WHERE reference='".$reference."'";
        $result = mysqli_query($conn, $query1);
        $row = mysqli_fetch_assoc($result);
        $spat_ref = $row[$spatulaID];
        $driver_name = $row['driver'];
  $query1 = "SELECT id FROM perthdes_eway_codes.drivers WHERE driver='".$driver_name."'";
        $result = mysqli_query($conn, $query1); 
        $row = mysqli_fetch_assoc($result);  
        $driver_id = $row['id'];
        $invnamed = mysqli_real_escape_string($qcon, $invname);
        $invdescd = mysqli_real_escape_string($qcon, $invdesc);   
        
        $query1 =   "INSERT INTO ".$dbname.".invoices (id, reference, tokenid, invname, amount, tollAmount, email, transactionid, date_created, type, paidby, invdesc, driver) VALUES (NULL,'" . $reference . "','" . $tokencustomerid . "','" . $invnamed . "','" . $amountArray[0] . "','" . $amountArray[1] . "','" . $email . "','" . $transactionid . "','" . date('Y-m-d H:i:s') . "','" . $type . "','" . $paidby . "','" . $invdescd . "','" . $driver_name . "')";
        $success = mysqli_query($conn, $query1);
        
	    if (!$success) {
    		die("Couldn't enter data: ".$conn->error);
    		}
    		
    		$query1 = "SELECT reference FROM ".$table." WHERE reference='".$reference."' ORDER BY reference DESC LIMIT 0,1";
        $result = mysqli_query($conn, $query1);
        $row = mysqli_fetch_assoc($result);
        $refcheck = $row['reference'];
	$success = $conn->query($query1);
	
	    
        
        
if($type == "SI" OR $type=="HK" OR $type == "FA" OR $type == "SA") {

$query1 = "SELECT cid FROM booking WHERE reference='".$reference."'";
        $result = mysqli_query($conn, $query1);
        $row = mysqli_fetch_assoc($result);
        
        $cid = $row['cid'];
        
        if($_REQUEST["referral"] != "none") {
            $query1 = "UPDATE `credits` SET `reference` = '".$reference."', `is_used` = 1, `date_used` = NOW() WHERE `customer_id`='".$cid."' AND `is_used` = 0";
            $result = mysqli_query($conn, $query1);
            $query1 = "UPDATE `referal_claim` SET `reference_claimed` = '".$reference."', `date_last_claimed` = NOW() WHERE `customer_id`='".$cid."'";
            $result = mysqli_query($conn, $query1);
            
        }
  
        
        $query1 = "SELECT promo_code, promo_used FROM customers WHERE id='".$cid."' ";
        $result = mysqli_query($conn, $query1);
        $row = mysqli_fetch_assoc($result);
        $promo_code = $row['promo_code'];
        $is_used = $row['promo_used'];
        $is_used = $is_used + 1;
        
        if($promo_code != ""){
        $query1 = "UPDATE `".$dbname."`.`customers` SET `promo_code` = '', promo_used = '".$is_used."' WHERE `id`='".$cid."'";
        $result = mysqli_query($conn, $query1);
        if(substr($_REQUEST['promo_code'], 0, 2) === "RF"){
  				$sql = "UPDATE `".$dbname."`.`referrals` where `code` = '".$promo_code."' and `refered_id` = '".$cid."' SET `reference` = '".$reference."', `date_used` = NOW()";
				$result = $conn->query($sql);
				if(!$result) {
				error_log($conn->error);
				}
				}
        }

}

if (!$success) {
    die("Couldnt enter invoice data: ".$conn->error);
} else {
    $date = date("c", strtotime("today"));
    
    error_log(json_encode($amountArray, true));
    $invoiceDetails = submitInvoice($invnamed, $date, $invdescd, $amountArray, $reference, $type);
    
    
    if($invoiceDetails != "") {
        
        
        $sql = "UPDATE ".$table." SET xero_inv = '".$invoiceDetails['invoiceNumber']."' WHERE reference = '".$reference."' ";
        $response = $conn->query($sql);
        if(!$response) {
            error_log($conn->error);
        }
        
        if($paymentCode != "") {
            $totalAmount = $amountArray[0] + $amountArray[1];
            error_log("totalAmount = ".$totalAmount);
            submitPayment($invoiceDetails['invoiceID'], $paymentCode, $date, $totalAmount);
            
        }
        
    }
    
    
}

if($spat_ref != "") {
$url = "https://api.fleeteng.com.au/v2/graph/role/jobs/$spat_ref/dispatches?access_token=9olkJkrIcttN8Zlh1lgAch70KFC_nJiIpUiCeaBMswbs";

$curlObj = curl_init();

curl_setopt($curlObj, CURLOPT_URL, "$url");
curl_setopt($curlObj, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($curlObj, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($curlObj, CURLOPT_HEADER, 0);
curl_setopt($curlObj, CURLOPT_HTTPHEADER, array('Content-type:application/json'));
curl_setopt($curlObj, CURLOPT_POST, 1);
curl_setopt($curlObj, CURLOPT_POSTFIELDS, '[{"vehicle":{"id":' . $driver_id . '},"type":"closed"}]');

$response = curl_exec($curlObj);
error_log($response);
curl_close($curlObj);
    		
}
		
		
		$message = "Type $type <br>
Referecence $reference <br>";

header('Location: http://bookings.perthdesignateddrivers.com.au/payment/approved.php');
	
			
			
	} else {
		echo "<h3>Transaction has been declined</h3><br>\n";
		echo $errormessage.
		"<br>\n";
		echo '<div class="container">

<div class="row" style="margin-top: 10px">
                <div class="">
                    <button id="tokenupdate" name="tokenupdate">Update Token</button>
                    </div>
                    </div>
<div class="update" id="update">
<form action="updatetoken.php" id="myForm" name="myForm" method="POST" data-eway-encrypt-key="'.$client_key.'">
<input type="hidden" name="submit_form" value="1">
<input type="hidden" name="url" value="'.$_POST['url'].'">
<input type="hidden" name="token" value="'.$_POST['token'].'">
              <div class="row" style="margin-top: 10px">
                <div class="">
                    <input type="text"  class=" form-control" id="fullname" placeholder="Full Name" maxlength="20" autocomplete="off" name="fullname" value="'.$_GET['name'].'">
                </div></div>
                
              <div class="row" style="margin-top: 10px">
                <div class="">
                    <input type="text" class=" form-control" id="EWAY_CARDNUMBER" placeholder="Credit Card Number" maxlength="20" autocomplete="off" name="EWAY_CARDNUMBER" data-eway-encrypt-name="EWAY_CARDNUMBER">
                </div></div>
                <div class="row" style="margin-top: 10px">

</select>

<select id="EWAY_CARDEXPIRYYEAR" name="EWAY_CARDEXPIRYYEAR">
            
            <option value="18">2018</option>
            <option value="19">2019</option>
            <option value="20">2020</option>
            <option value="21">2021</option>
            <option value="22">2022</option>
            <option value="23">2023</option>
            <option value="24">2024</option>
            <option value="25">2025</option>
            <option value="26">2026</option>
            <option value="27">2027</option>
        </select>
        
                </div></div>
                <br>
                             <button id="push" name="push">Update Token</button>
                <br>
                <br>
                
                
                </div>
   </form>
    
    <script src="https://secure.ewaypayments.com/scripts/eCrypt.min.js"></script>

</div>

';
		echo "<h4><a href='http://bookings.perthdesignateddrivers.com.au/payment/'> Refresh </a></h4>";
		
	}

?>
</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js"></script>

$(document).ready(function(){
$("#update").hide();
})
$('#tokenupdate').click(function(){
$("#update").show();
})
</script>
</body>
</html>

<?php
function send_mail($to, $from, $title, $message)
{
    $headers = "MIME-Version: 1.0 \r\n";
    $headers .= "From: $from \n";
    $headers .= "MIME-Version: 1.0\r\n";
    $headers .= "Content-type: text/html;charset=ISO-8859-1 \r\n";
    $headers .= "X-Priority: 3\r\n";
    $headers .= "X-Mailer: smail-PHP " . phpversion() . "\r\n";
    return mail($to, $title, $message, $headers);
}
?>

Payment - Processed

connect_error); $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname); $query1 = "SELECT token FROM inquiries WHERE inquiry_mobile='".$phone."' ORDER BY token DESC LIMIT 0,1"; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $tokencheck = $row['token']; $success1 = $conn->query($query1); if (!$success1) { $updatetoken = 0; } if( $tokencheck != ""){ $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION; $client = \Eway\ Rapid::createClient($apiKey, $apiPassword, $apiEndpoint); $tokencustomerid = $tokencheck; $customer = [ 'Email' => trim($_POST['email']), 'TokenCustomerID' => $tokencustomerid, 'CardDetails' => [ 'Name' => $fullname, 'Number' => $_POST['EWAY_CARDNUMBER'], 'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'], 'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'], 'CVN' => $_POST['EWAY_CARDCVN'] ] ]; /*echo '

';
	print_r($customer);
	echo '

'; exit;*/ $response = $client->updateCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer); $transaction = [ 'Customer' => [ 'TokenCustomerID' => $tokencustomerid, 'Reference' => $_POST['reference'], ], 'Payment' => [ 'TotalAmount' => $charge, 'InvoiceReference' => $_POST['reference'], ], 'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING, ]; $response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction); }else{ $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION; $client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint); //create customer $fullname = trim($_POST['fullname']); $nameparts = explode(' ', $fullname); $customer = [ 'Title' => 'Mr.', 'FirstName' => trim($nameparts[0]), 'LastName' => trim($nameparts[1]), 'Country' => 'au', 'Email' => trim($_POST['email']), 'CardDetails' => [ 'Name' => $fullname, 'Number' => $_POST['EWAY_CARDNUMBER'], 'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'], 'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'], 'CVN' => $_POST['EWAY_CARDCVN'] ] ]; $responce = $client->createCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer); $tokencustomerid = $response->Customer->TokenCustomerID; $transaction = [ 'Customer' => [ 'TokenCustomerID' => $tokencustomerid, 'Reference' => $_POST['reference'], ], 'Payment' => [ 'TotalAmount' => $charge, 'InvoiceReference' => $_POST['reference'], ], 'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING, ]; $response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction); if (isset($response->TransactionStatus) && $response->TransactionStatus) { $query = "SELECT * FROM customer_tokens WHERE access_token_value='".$_POST['token']."'"; $result = $conn->query($query); if(!$result) { error_log("Token error: ".$conn->error); } else { if ($result->num_rows > 0) { $row = $result->fetch_assoc(); $tokencheck = $row['access_token_value']; $query = "UPDATE customer_tokens SET modified = NOW() WHERE access_token_value = ".$tokencheck; $result = $conn->query($query); if(!$result) { error_log("Token update error: ".$conn->error); } } else { if($type == "DD" OR $type == "FC" OR $type == "SF") { $query = "INSERT INTO customer_tokens (`id`, `cid`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL, '', ".$_POST['token'].", 1, NOW(), NOW())"; $result = $conn->query($query); if(!$result) { error_log("Token insert error: ".$conn->error); } } } } } } $nameq = mysqli_real_escape_string($qcon, $fullname); $dropoffq = mysqli_real_escape_string($qcon, $homeaddress); $table = "inquiries"; if($type == "FC") { $table = "customers"; } $query = "INSERT into ".$table." (inquiry_name, inquiry_mobile, inquiry_dropoff, inquiry_email, token, inquiry_created, welcomemess) VALUES ('" . $nameq . "','" . $phone . "','" . $dropoffq . "','" . $email . "','" . $tokencustomerid . "', NOW(), '') ON DUPLICATE KEY UPDATE inquiry_name='" . $nameq . "', inquiry_dropoff='" . $dropoffq . "', inquiry_email='" . $email . "', token='" . $tokencustomerid . "'"; $success = $conn->query($query); if (!$success) { die("Card could be processed but error with data/invoice: ".$conn->error); } } else { $chargeCard == true; } } else { $chargeCard == false; } if($chargeCard) { $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION; $client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint); //create customer $transaction = [ 'Customer' => [ 'Email' => trim($_POST['email']), 'Reference' => $_POST['reference'], 'CardDetails' => [ 'Name' => $fullname, 'Number' => $_POST['EWAY_CARDNUMBER'], 'ExpiryMonth' => $_POST['EWAY_CARDEXPIRYMONTH'], 'ExpiryYear' => $_POST['EWAY_CARDEXPIRYYEAR'], 'CVN' => $_POST['EWAY_CARDCVN'] ] ], 'Payment' => [ 'TotalAmount' => $charge, 'InvoiceReference' => $_POST['reference'], ], 'TransactionType' => \Eway\Rapid\Enum\TransactionType::PURCHASE, ]; $response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction); } } else if ($_POST['payment_type'] == 'token') { $apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION; $client = \Eway\ Rapid::createClient($apiKey, $apiPassword, $apiEndpoint); $tokencustomerid = $_POST['token']; $transaction = [ 'Customer' => [ 'TokenCustomerID' => $_POST['token'], 'Reference' => $_POST['reference'], ], 'Payment' => [ 'TotalAmount' => $charge, 'InvoiceReference' => $_POST['reference'], ], 'TransactionType' => \Eway\Rapid\Enum\TransactionType::RECURRING, ]; $response = $client->createTransaction(\Eway\Rapid\Enum\ApiMethod::DIRECT, $transaction); if (isset($response->TransactionStatus) && $response->TransactionStatus) { $query = "SELECT * FROM customer_tokens WHERE access_token_value='".$_POST['token']."'"; $result = $conn->query($query); if(!$result) { error_log("Token error: ".$conn->error); } else { if ($result->num_rows > 0) { $row = $result->fetch_assoc(); $tokencheck = $row['access_token_value']; $query = "UPDATE customer_tokens SET modified = NOW() WHERE access_token_value = ".$tokencheck; $result = $conn->query($query); if(!$result) { error_log("Token update error: ".$conn->error); } } else { if($type == "DD" OR $type == "FC" OR $type == "SF") { $query = "INSERT INTO customer_tokens (`id`, `cid`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL, '', ".$_POST['token'].", 1, NOW(), NOW())"; $result = $conn->query($query); if(!$result) { error_log("Token insert error: ".$conn->error); } } } } } } if (isset($response->TransactionStatus) && $response->TransactionStatus) { $transactionid = $response->TransactionID; $AuthorisationCode = $response->AuthorisationCode; $paymentCode = "1cb7bb21-739d-480d-909d-fe564b0e2df8"; $sql = "UPDATE ".$table." SET payment_eway = '".$charge."' WHERE reference = '".$ref."'"; $response = $conn->query($sql); if(!$response) { error_log($conn->error); } } else { if($_POST['payment_type'] != 'account'){ $error = true; if ($response->getErrors()) { foreach ($response->getErrors() as $error) { $errormessage.= "Error: $error (".\Eway\Rapid::getMessage($error).")
\n"; } } else { $errormessage.= "Sorry, your payment was declined"; $query = "SELECT * FROM perthdes_eway_codes.responses WHERE code = '".$response->ResponseMessage."'"; $result = $conn->query($query); if ($result->num_rows > 0) { $row = $result->fetch_assoc(); $responseMessage = $row['message']; $errormessage = "
".$responseMessage; } } } } /* echo '

';
	print_r($response);
	echo '

'; */ if (!$error) { echo "

Transaction Approved

"; echo "

Refresh

"; $amount = floatval($_POST['amount']); $reference = ($_POST['reference'] != '') ? $_POST['reference'] : $_POST['reference']; $invname = $_POST['invname']; $paidby = $_POST['payment_type']; $invdesc = $_POST['invdesc']; $invmessage = "Invoice Issued
Name $invname
Type $type
Email $email
Amount $amount
Paid By $paidby
Reference $reference
Description $invdesc"; send_mail('booking@perthdesignateddrivers.com.au', 'invoice@perthdesignateddrivers.com.au', 'New Invoice For '.$invname ,$invmessage); $amountArray = [$amount]; if($_POST['tollAmount'] != "0") { error_log("fired tolls"); array_push($amountArray, floatval($_POST['tollAmount'])); } $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname); $query1 = "SELECT ".$spatulaID.", driver FROM ".$table." WHERE reference='".$reference."'"; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $spat_ref = $row[$spatulaID]; $driver_name = $row['driver']; $query1 = "SELECT id FROM perthdes_eway_codes.drivers WHERE driver='".$driver_name."'"; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $driver_id = $row['id']; $invnamed = mysqli_real_escape_string($qcon, $invname); $invdescd = mysqli_real_escape_string($qcon, $invdesc); $query1 = "INSERT INTO ".$dbname.".invoices (id, reference, tokenid, invname, amount, tollAmount, email, transactionid, date_created, type, paidby, invdesc, driver) VALUES (NULL,'" . $reference . "','" . $tokencustomerid . "','" . $invnamed . "','" . $amountArray[0] . "','" . $amountArray[1] . "','" . $email . "','" . $transactionid . "','" . date('Y-m-d H:i:s') . "','" . $type . "','" . $paidby . "','" . $invdescd . "','" . $driver_name . "')"; $success = mysqli_query($conn, $query1); if (!$success) { die("Couldn't enter data: ".$conn->error); } $query1 = "SELECT reference FROM ".$table." WHERE reference='".$reference."' ORDER BY reference DESC LIMIT 0,1"; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $refcheck = $row['reference']; $success = $conn->query($query1); if($type == "SI" OR $type=="HK" OR $type == "FA" OR $type == "SA") { $query1 = "SELECT cid FROM booking WHERE reference='".$reference."'"; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $cid = $row['cid']; if($_REQUEST["referral"] != "none") { $query1 = "UPDATE `credits` SET `reference` = '".$reference."', `is_used` = 1, `date_used` = NOW() WHERE `customer_id`='".$cid."' AND `is_used` = 0"; $result = mysqli_query($conn, $query1); $query1 = "UPDATE `referal_claim` SET `reference_claimed` = '".$reference."', `date_last_claimed` = NOW() WHERE `customer_id`='".$cid."'"; $result = mysqli_query($conn, $query1); } $query1 = "SELECT promo_code, promo_used FROM customers WHERE id='".$cid."' "; $result = mysqli_query($conn, $query1); $row = mysqli_fetch_assoc($result); $promo_code = $row['promo_code']; $is_used = $row['promo_used']; $is_used = $is_used + 1; if($promo_code != ""){ $query1 = "UPDATE `".$dbname."`.`customers` SET `promo_code` = '', promo_used = '".$is_used."' WHERE `id`='".$cid."'"; $result = mysqli_query($conn, $query1); if(substr($_REQUEST['promo_code'], 0, 2) === "RF"){ $sql = "UPDATE `".$dbname."`.`referrals` where `code` = '".$promo_code."' and `refered_id` = '".$cid."' SET `reference` = '".$reference."', `date_used` = NOW()"; $result = $conn->query($sql); if(!$result) { error_log($conn->error); } } } } if (!$success) { die("Couldnt enter invoice data: ".$conn->error); } else { $date = date("c", strtotime("today")); error_log(json_encode($amountArray, true)); $invoiceDetails = submitInvoice($invnamed, $date, $invdescd, $amountArray, $reference, $type); if($invoiceDetails != "") { $sql = "UPDATE ".$table." SET xero_inv = '".$invoiceDetails['invoiceNumber']."' WHERE reference = '".$reference."' "; $response = $conn->query($sql); if(!$response) { error_log($conn->error); } if($paymentCode != "") { $totalAmount = $amountArray[0] + $amountArray[1]; error_log("totalAmount = ".$totalAmount); submitPayment($invoiceDetails['invoiceID'], $paymentCode, $date, $totalAmount); } } } if($spat_ref != "") { $url = "https://api.fleeteng.com.au/v2/graph/role/jobs/$spat_ref/dispatches?access_token=9olkJkrIcttN8Zlh1lgAch70KFC_nJiIpUiCeaBMswbs"; $curlObj = curl_init(); curl_setopt($curlObj, CURLOPT_URL, "$url"); curl_setopt($curlObj, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curlObj, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($curlObj, CURLOPT_HEADER, 0); curl_setopt($curlObj, CURLOPT_HTTPHEADER, array('Content-type:application/json')); curl_setopt($curlObj, CURLOPT_POST, 1); curl_setopt($curlObj, CURLOPT_POSTFIELDS, '[{"vehicle":{"id":' . $driver_id . '},"type":"closed"}]'); $response = curl_exec($curlObj); error_log($response); curl_close($curlObj); } $message = "Type $type
Referecence $reference
"; header('Location: http://bookings.perthdesignateddrivers.com.au/payment/approved.php'); } else { echo "

Transaction has been declined

\n"; echo $errormessage. "
\n"; echo '

'; echo "

Refresh

"; } ?>