trustcommerce.php

   1 <?php
   2 /*
   3  * This file is part of CiviCRM.
   4  *
   5  * CiviCRM is free software: you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation, either version 3 of the License, or
   8  * (at your option) any later version.
   9  *
  10  * CiviCRM is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  13  * GNU General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License
  16  * along with CiviCRM.  If not, see <http://www.gnu.org/licenses/>.
  17  *
  18  * Copyright (C) 2012
  19  * Licensed to CiviCRM under the GPL v3 or higher
  20  *
  21  * Written and contributed by Ward Vandewege <ward@fsf.org> (http://www.fsf.org)
  22  * Modified by Lisa Marie Maginnis <lisa@fsf.org> (http://www.fsf.org)
  23  *
  24  */
  25
  26 // Define logging level (0 = off, 4 = log everything)
  27 define('TRUSTCOMMERCE_LOGGING_LEVEL', 4);
  28
  29 require_once 'CRM/Core/Payment.php';
  30 class org_fsf_payment_trustcommerce extends CRM_Core_Payment {
  31   CONST CHARSET = 'iso-8859-1';
  32   CONST AUTH_APPROVED = 'approve';
  33   CONST AUTH_DECLINED = 'decline';
  34   CONST AUTH_BADDATA = 'baddata';
  35   CONST AUTH_ERROR = 'error';
  36   CONST AUTH_BLACKLIST = 'blacklisted';
  37
  38   static protected $_mode = NULL;
  39
  40   static protected $_params = array();
  41
  42   /**
  43    * We only need one instance of this object. So we use the singleton
  44    * pattern and cache the instance in this variable
  45    *
  46    * @var object
  47    * @static
  48    */
  49   static private $_singleton = NULL;
  50
  51   /**
  52    * Constructor
  53    *
  54    * @param string $mode the mode of operation: live or test
  55    *
  56    * @return void
  57    */ function __construct($mode, &$paymentProcessor) {
  58     $this->_mode = $mode;
  59
  60     $this->_paymentProcessor = $paymentProcessor;
  61
  62     $this->_processorName = ts('TrustCommerce');
  63
  64     $config = CRM_Core_Config::singleton();
  65     $this->_setParam('user_name', $paymentProcessor['user_name']);
  66     $this->_setParam('password', $paymentProcessor['password']);
  67
  68     $this->_setParam('timestamp', time());
  69     srand(time());
  70     $this->_setParam('sequence', rand(1, 1000));
  71     $this->logging_level     = TRUSTCOMMERCE_LOGGING_LEVEL;
  72
  73   }
  74
  75   /**
  76    * singleton function used to manage this object
  77    *
  78    * @param string $mode the mode of operation: live or test
  79    *
  80    * @return object
  81    * @static
  82    *
  83    */
  84   static
  85   function &singleton($mode, &$paymentProcessor) {
  86     $processorName = $paymentProcessor['name'];
  87     if (self::$_singleton[$processorName] === NULL) {
  88       self::$_singleton[$processorName] = new org_fsf_payment_trustcommerce($mode, $paymentProcessor);
  89     }
  90     return self::$_singleton[$processorName];
  91   }
  92
  93   /**
  94    * Submit a payment using the TC API
  95    * @param  array $params The params we will be sending to tclink_send()
  96    * @return mixed An array of our results, or an error object if the transaction fails.
  97    * @public
  98    */
  99   function doDirectPayment(&$params) {
 100     if (!extension_loaded("tclink")) {
 101       return self::error(9001, 'TrustCommerce requires that the tclink module is loaded');
 102     }
 103
 104     /* Copy our paramaters to ourself */
 105     foreach ($params as $field => $value) {
 106       $this->_setParam($field, $value);
 107     }
 108
 109     /* Get our fields to pass to tclink_send() */
 110     $tc_params = $this->_getTrustCommerceFields();
 111
 112     /* Are we recurring? If so add the extra API fields. */
 113     if (CRM_Utils_Array::value('is_recur', $params) && $params['contributionRecurID']) {
 114       $tc_params = $this->_getRecurPaymentFields($tc_params);
 115     }
 116
 117     /* Pass our cooked params to the alter hook, per Core/Payment/Dummy.php */
 118     CRM_Utils_Hook::alterPaymentProcessorParams($this, $params, $tc_params);
 119
 120     // TrustCommerce will not refuse duplicates, so we should check if the user already submitted this transaction
 121     if ($this->_checkDupe($tc_params['ticket'])) {
 122       return self::error(9004, 'It appears that this transaction is a duplicate.  Have you already submitted the form once?  If so there may have been a connection problem. You can try your transaction again.  If you continue to have problems please contact the site administrator.');
 123     }
 124
 125     /* This implements a local blacklist, and passes us though as a normal failure
 126      * if the luser is on the blacklist. */
 127     if(!$this->_isBlacklisted()) {
 128       /* Call the TC API, and grab the reply */
 129       $reply = $this->_sendTCRequest($tc_params);
 130     } else {
 131       $this->_logger($tc_params);
 132       $reply['status'] = self::AUTH_BLACKLIST;
 133     }
 134
 135     /* Parse our reply */
 136     $result = $this->_getTCReply($reply);
 137
 138     if($result == 0) {
 139       /* We were successful, congrats. Lets wrap it up:
 140        * Convert back to dollars
 141        * Save the transaction ID
 142        */
 143       $params['trxn_id'] = $reply['transid'];
 144       $params['gross_amount'] = $tc_params['amount'] / 100;
 145
 146       return $params;
 147
 148     } else {
 149       /* Otherwise we return the error object */
 150       return $result;
 151     }
 152   }
 153
 154   /* Return TRUE when client is either IP or agent blacklisted, or
 155    * FALSE otherwise.
 156    */
 157   function _isBlacklisted() {
 158     return $this->_isIPBlacklisted() || $this->_IsAgentBlacklisted();
 159   }
 160
 161   function _isAgentBlacklisted() {
 162     $ip = $_SERVER['REMOTE_ADDR'];
 163     $agent = $_SERVER['HTTP_USER_AGENT'];
 164     $dao = CRM_Core_DAO::executeQuery('SELECT * FROM `trustcommerce_useragent_blacklist`');
 165     while($dao->fetch()) {
 166       if(preg_match('/'.$dao->name.'/', $agent) === 1) {
 167         error_log(' [client '.$ip.'] [agent '.$agent.'] - Blacklisted by USER_AGENT rule #'.$dao->id);
 168         return TRUE;
 169       }
 170     }
 171     return FALSE;
 172   }
 173
 174   function _isIPBlacklisted() {
 175     $ip = $_SERVER['REMOTE_ADDR'];
 176     $ip = ip2long($ip);
 177     $blacklist = array();
 178     $dao = CRM_Core_DAO::executeQuery('SELECT * FROM `trustcommerce_blacklist`');
 179     while($dao->fetch()) {
 180       if($ip >= $dao->start && $ip <= $dao->end) {
 181         error_log('[client '.$ip.'] [agent '.$agent.'] Blacklisted by IP rule #'.$dao->id);
 182         return TRUE;
 183       }
 184     }
 185     return FALSE;
 186   }
 187
 188   function _sendTCRequest($request) {
 189     $this->_logger($request);
 190     return tclink_send($request);
 191   }
 192
 193   function _logger($params) {
 194     $msg = '';
 195     foreach ($params as $key => $data) {
 196       /* Delete any data we should not be writing to disk. This includes:
 197        * custid, password, cc, exp, and cvv
 198        */
 199       switch($key) {
 200       case 'custid':
 201       case 'password':
 202       case 'cc':
 203       case 'exp':
 204       case 'cvv':
 205         break;
 206       default:
 207         $msg .= ' '.$key.' => '.$data;
 208       }
 209     }
 210     error_log('[client '.$_SERVER['REMOTE_ADDR'].'] TrustCommerce:'.$msg);
 211   }
 212
 213   /**
 214    * Gets the recurring billing fields for the TC API
 215    * @param  array $fields The fields to modify.
 216    * @return array The fields for tclink_send(), modified for recurring billing.
 217    * @public
 218    */
 219   function _getRecurPaymentFields($fields) {
 220     $payments = $this->_getParam('frequency_interval');
 221     $cycle = $this->_getParam('frequency_unit');
 222
 223     /* Translate billing cycle from CiviCRM -> TC */
 224     switch($cycle) {
 225     case 'day':
 226       $cycle = 'd';
 227       break;
 228     case 'week':
 229       $cycle = 'w';
 230       break;
 231     case 'month':
 232       $cycle = 'm';
 233       break;
 234     case 'year':
 235       $cycle = 'y';
 236       break;
 237     }
 238
 239     /* Translate frequency interval from CiviCRM -> TC
 240      * Payments are the same, HOWEVER a payment of 1 (forever) should be 0 in TC */
 241     if($payments == 1) {
 242       $payments = 0;
 243     }
 244
 245     $fields['cycle'] = '1'.$cycle;   /* The billing cycle in years, months, weeks, or days. */
 246     $fields['payments'] = $payments;
 247     $fields['action'] = 'store';      /* Change our mode to `store' mode. */
 248
 249     return $fields;
 250   }
 251
 252   /* Parses a response from TC via the tclink_send() command.
 253    * @param  $reply array The result of a call to tclink_send().
 254    * @return mixed self::error() if transaction failed, otherwise returns 0.
 255    */
 256   function _getTCReply($reply) {
 257
 258     /* DUPLIATE CODE, please refactor. ~lisa */
 259     if (!$reply) {
 260       return self::error(9002, 'Could not initiate connection to payment gateway');
 261     }
 262
 263     $this->_logger($reply);
 264
 265     switch($reply['status']) {
 266     case self::AUTH_BLACKLIST:
 267       return self::error(9001, "Your transaction was declined: error #90210");
 268       break;
 269     case self::AUTH_APPROVED:
 270       // It's all good
 271       break;
 272     case self::AUTH_DECLINED:
 273       // TODO FIXME be more or less specific?
 274       // declinetype can be: decline, avs, cvv, call, expiredcard, carderror, authexpired, fraud, blacklist, velocity
 275       // See TC documentation for more info
 276       return self::error(9009, "Your transaction was declined: {$reply['declinetype']}");
 277       break;
 278     case self::AUTH_BADDATA:
 279       // TODO FIXME do something with $reply['error'] and $reply['offender']
 280       return self::error(9011, "Invalid credit card information. The following fields were invalid: {$reply['offenders']}.");
 281       break;
 282     case self::AUTH_ERROR:
 283       return self::error(9002, 'Could not initiate connection to payment gateway');
 284       break;
 285     }
 286     return 0;
 287   }
 288
 289   function _getTrustCommerceFields() {
 290     // Total amount is from the form contribution field
 291     $amount = $this->_getParam('total_amount');
 292     // CRM-9894 would this ever be the case??
 293     if (empty($amount)) {
 294       $amount = $this->_getParam('amount');
 295     }
 296     $fields = array();
 297     $fields['custid'] = $this->_getParam('user_name');
 298     $fields['password'] = $this->_getParam('password');
 299     $fields['action'] = 'sale';
 300
 301     // Enable address verification
 302     $fields['avs'] = 'y';
 303
 304     $fields['address1'] = $this->_getParam('street_address');
 305     $fields['zip'] = $this->_getParam('postal_code');
 306
 307     $fields['name'] = $this->_getParam('billing_first_name') . ' ' . $this->_getParam('billing_last_name');
 308
 309     // This assumes currencies where the . is used as the decimal point, like USD
 310     $amount = preg_replace("/([^0-9\\.])/i", "", $amount);
 311
 312     // We need to pass the amount to TrustCommerce in dollar cents
 313     $fields['amount'] = $amount * 100;
 314
 315     // Unique identifier
 316     $fields['ticket'] = substr($this->_getParam('invoiceID'), 0, 20);
 317
 318     // cc info
 319     $fields['cc'] = $this->_getParam('credit_card_number');
 320     $fields['cvv'] = $this->_getParam('cvv2');
 321     $exp_month = str_pad($this->_getParam('month'), 2, '0', STR_PAD_LEFT);
 322     $exp_year = substr($this->_getParam('year'),-2);
 323     $fields['exp'] = "$exp_month$exp_year";
 324
 325     if ($this->_mode != 'live') {
 326       $fields['demo'] = 'y';
 327     }
 328     return $fields;
 329   }
 330
 331   /**
 332    * Checks to see if invoice_id already exists in db
 333    *
 334    * @param  int     $invoiceId   The ID to check
 335    *
 336    * @return bool                 True if ID exists, else false
 337    */
 338   function _checkDupe($invoiceId) {
 339     require_once 'CRM/Contribute/DAO/Contribution.php';
 340     $contribution = new CRM_Contribute_DAO_Contribution();
 341     $contribution->invoice_id = $invoiceId;
 342     return $contribution->find();
 343   }
 344
 345   /**
 346    * Get the value of a field if set
 347    *
 348    * @param string $field the field
 349    *
 350    * @return mixed value of the field, or empty string if the field is
 351    * not set
 352    */
 353   function _getParam($field) {
 354     return CRM_Utils_Array::value($field, $this->_params, '');
 355   }
 356
 357   function &error($errorCode = NULL, $errorMessage = NULL) {
 358     $e = CRM_Core_Error::singleton();
 359     if ($errorCode) {
 360       $e->push($errorCode, 0, NULL, $errorMessage);
 361     }
 362     else {
 363       $e->push(9001, 0, NULL, 'Unknown System Error.');
 364     }
 365     return $e;
 366   }
 367
 368   /**
 369    * Set a field to the specified value.  Value must be a scalar (int,
 370    * float, string, or boolean)
 371    *
 372    * @param string $field
 373    * @param mixed $value
 374    *
 375    * @return bool false if value is not a scalar, true if successful
 376    */
 377   function _setParam($field, $value) {
 378     if (!is_scalar($value)) {
 379       return FALSE;
 380     }
 381     else {
 382       $this->_params[$field] = $value;
 383     }
 384   }
 385
 386   /**
 387    * This function checks to see if we have the right config values
 388    *
 389    * @return string the error message if any
 390    * @public
 391    */
 392   function checkConfig() {
 393     $error = array();
 394     if (empty($this->_paymentProcessor['user_name'])) {
 395       $error[] = ts('Customer ID is not set for this payment processor');
 396     }
 397
 398     if (empty($this->_paymentProcessor['password'])) {
 399       $error[] = ts('Password is not set for this payment processor');
 400     }
 401
 402     if (!empty($error)) {
 403       return implode('<p>', $error);
 404     } else {
 405       return NULL;
 406     }
 407   }
 408
 409   function cancelSubscription(&$message = '', $params = array()) {
 410     $tc_params['custid'] = $this->_getParam('user_name');
 411     $tc_params['password'] = $this->_getParam('password');
 412     $tc_params['action'] = 'unstore';
 413     $tc_params['billingid'] = CRM_Utils_Array::value('trxn_id', $params);
 414
 415     $result = $this->_sendTCRequest($tc_params);
 416
 417     /* Test if call failed */
 418     if(!$result) {
 419       return self::error(9002, 'Could not initiate connection to payment gateway');
 420     }
 421     /* We are done, pass success */
 422     return TRUE;
 423   }
 424
 425   public function install() {
 426     return TRUE;
 427   }
 428
 429   public function uninstall() {
 430     return TRUE;
 431   }
 432
 433 }