403Webshell
Server IP : 85.158.181.41  /  Your IP : 216.73.217.12
Web Server : Apache
System : Linux cloud9-vm129 6.1.178+1-ph #ph SMP PREEMPT_DYNAMIC Wed Jul 29 09:00:54 UTC 2026 x86_64
User : moncbefd ( 1024)
PHP Version : 7.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/moncbefd/www.moneta.at/includes/modules/payment/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/moncbefd/www.moneta.at/includes/modules/payment//hpddpg.php
<?php
/*
   Released under the GNU General Public License (Version 2)
   [http://www.gnu.org/licenses/gpl-2.0.html]
*/

$languageTextManager = MainFactory::create_object('LanguageTextManager', array(), true);
$languageTextManager->init_from_lang_file('hgwConf', $_SESSION['languages_id']);
$languageTextManager->init_from_lang_file('hpddpg', $_SESSION['languages_id']);

if(file_exists(DIR_WS_CLASSES.'class.heidelpaygw.php')){
	include_once(DIR_WS_CLASSES.'class.heidelpaygw.php');
}else{
	require_once(DIR_FS_CATALOG.DIR_WS_CLASSES.'class.heidelpaygw.php');
}

class hpddpg_ORIGIN{
	var $code, $title, $description, $enabled, $hgw, $pm, $tmpOrders;

	// class constructor
	function __construct(){
		GLOBAL $order, $language;

		$this->hgw 				= new heidelpayGW();
		$this->pm 					= 'ddpg';
		$this->code 				= 'hp'.$this->pm;
		$this->title_txt 			= defined('MODULE_PAYMENT_HPDDPG_TEXT_TITLE') ? MODULE_PAYMENT_HPDDPG_TEXT_TITLE : '';
		$this->title 				= sprintf(HGW_LOGO, DIR_WS_CATALOG) . $this->title_txt;
		$this->description		= MODULE_PAYMENT_HPDDPG_TEXT_DESC.'<br/><i>['.$this->hgw->version.']</i>'.$this->hgw->modulConfButton;
		$this->sort_order		= defined('MODULE_PAYMENT_HPDDPG_SORT_ORDER') ? MODULE_PAYMENT_HPDDPG_SORT_ORDER : '0';
		$this->enabled			= defined('MODULE_PAYMENT_HPDDPG_STATUS') && MODULE_PAYMENT_HPDDPG_STATUS === 'True';
		$this->info					= defined('MODULE_PAYMENT_HPDDPG_TEXT_INFO') ? MODULE_PAYMENT_HPDDPG_TEXT_INFO : '';
		$this->tmpOrders		= true;
		$this->hgw->actualPaymethod = strtoupper($this->pm);
		$this->prefix				= 'MODULE_PAYMENT_HPDDPG_';
		$this->getConf			= $this->hgw->getConf;

		if(is_object($order)){ $this->update_status(); }
	}

	function update_status(){
		GLOBAL $order;

		if(($this->enabled == true) && ((int) MODULE_PAYMENT_HPDDPG_ZONE > 0)){
			$check_flag = false;
			$sql = xtc_db_query("SELECT zone_id FROM ". TABLE_ZONES_TO_GEO_ZONES ." WHERE geo_zone_id = '". MODULE_PAYMENT_HPDDPG_ZONE ."' AND zone_country_id = '". $order->billing['country']['id'] ."' ORDER BY zone_id");

			while($check = xtc_db_fetch_array($sql)){
				if($check['zone_id'] < 1){
					$check_flag = true;
					break;
				}elseif($check['zone_id'] == $order->billing['zone_id']){
					$check_flag = true;
					break;
				}
			}
			if($check_flag == false){ $this->enabled = false; }
		}
	}

	function javascript_validation(){
		return false;
	}

	function selection(){
		GLOBAL $order, $formUrl;

		$getConf			= $this->getConf;
		$content 			= array();
		$this->pmAv 		= true;
		$this->pmAv_error = '';

		// save supplimential fields in session if fields are set

        if (isset($_POST['DDPG_NAME_SALUTATION'])) {
            $_SESSION['HP']['NAME.SALUTATION'] = htmlspecialchars($_POST['DDPG_NAME_SALUTATION']);

            if (empty($_POST['DDPG_NAME_SALUTATION'])){
                $this->pmAv = false;
                $this->pmAv_error = HGW_ERROR_SALUTATION;

                $content = array(
                    array(
                        'title' 	=> '',
                        'field' 	=> $this->pmAv_error,
                    ),
                );
            }
        }

		if (isset($_POST['DDPG_NAME_BIRTHDAY'])) {
			$_SESSION['HP']['NAME.BIRTHDATE'] = htmlspecialchars($_POST['DDPG_NAME_BIRTHYEAR'] . '-' . $_POST['DDPG_NAME_BIRTHMONTH'] . '-' . $_POST['DDPG_NAME_BIRTHDAY']);

            if (empty($_POST['DDPG_NAME_BIRTHDAY']) || (time() - strtotime($_SESSION['HP']['NAME.BIRTHDATE'])) < (18 * 31536000)) {
				$this->pmAv = false;
				$this->pmAv_error = HGW_ERROR_BIRTHDAY;

				$content = array(
					array(
						'title' 	=> '',
						'field' 	=> $this->pmAv_error,
					),
				);
			}
		}

		if (isset($_POST['DDPG_ACCOUNT_HOLDER'])) {
			$_SESSION['HP']['ACCOUNT.HOLDER'] = htmlspecialchars($_POST['DDPG_ACCOUNT_HOLDER']);

			if (empty($_POST['DDPG_ACCOUNT_HOLDER'])){
				$this->pmAv = false;
				$this->pmAv_error = HGW_ERROR_ACCOUNT_HOLDER;

				$content = array(
						array(
								'title' 	=> '',
								'field' 	=> $this->pmAv_error,
						),
				);
			}
		}

		if (isset($_POST['DDPG_ACCOUNT_IBAN'])) {
			$_SESSION['HP']['ACCOUNT.IBAN'] = str_replace(' ', '', htmlspecialchars($_POST['DDPG_ACCOUNT_IBAN']));

			if(preg_match('/[A-Z]{2}[0-9]{18,30}/', $_SESSION['HP']['ACCOUNT.IBAN']) == false){
				$this->pmAv = false;
				$this->pmAv_error = HGW_ERROR_IBAN;

				$content = array(
						array(
								'title' 	=> '',
								'field' 	=> $this->pmAv_error,
						),
				);
			}
		}

		// message if no testing account is set
		if($getConf['transactionMode'] == '1' && isset($order) && strpos(strtolower(MODULE_PAYMENT_HPDDPG_TEST_ACCOUNT), strtolower($order->customer['email_address'])) === false){
			$this->pmAv = false;
			$this->pmAv_error = HGW_DEBUGTEXT;

			$content = array(
				array(
					'title' 	=> ' ',
					'field' 	=> $this->pmAv_error,
				),
			);
		}

		// check if shipping and delivery adress match
		if(!$this->hgw->checkAddressMatch($order)){
			$this->pmAv = false;
			$this->pmAv_error = HGW_ADDRESSCHECK;

			$content = array(
				array(
					'title' 	=> '',
					'field' 	=> $this->pmAv_error,
				),
			);
		}

		// check if customer is company
		if($this->hgw->checkIfCompany($order)){
			$this->pmAv = false;
			$this->pmAv_error = HGW_COMPANYCHECK;

			$content = array(
				array(
					'title' 	=> '',
					'field' 	=> $this->pmAv_error,
				),
			);
		}

		/*
		 * form fields for supplimental data
		 */

		$salutationfield = '';
		$salutationfield .= '<select name="DDPG.NAME.SALUTATION" class="form-control input-sm">';

		switch ($order->customer['gender']) {
			case 'f':
				$salutationfield .= '<option value="MRS" selected>'.MODULE_PAYMENT_HPDDPG_FEMALE.'</option>';
				$salutationfield .= '<option value="MR">'.MODULE_PAYMENT_HPDDPG_MALE.'</option>';
				break;
			case 'm':
				$salutationfield .= '<option value="MRS">'.MODULE_PAYMENT_HPDDPG_FEMALE.'</option>';
				$salutationfield .= '<option value="MR" selected>'.MODULE_PAYMENT_HPDDPG_MALE.'</option>';
				break;
			default:
				$salutationfield .= '<option value="MRS" selected>'.MODULE_PAYMENT_HPDDPG_FEMALE.'</option>';
				$salutationfield .= '<option value="MR">'.MODULE_PAYMENT_HPDDPG_MALE.'</option>';
				break;
		}

		$salutationfield .= '</select>';

		$content[] = array(
			'title' 	=> MODULE_PAYMENT_HPDDPG_SALUTATION,
			'field' 	=> $salutationfield
		);

		//birthdatefield with selects, defaults on empty
        $birthdatefield = '';
        $birthdatefield .= '<div class="row"><div class="col-sm-4"><select name="DDPG.NAME.BIRTHDAY" class="form-control input-sm"><option value="">' .
                               MODULE_PAYMENT_HPDDPG_BIRTHDAY .
                           '</option>';
        for ($i=1; $i<=31; $i++) {
            $birthdatefield .= '<option value="'.sprintf('%02d',$i).'">'.sprintf('%02d',$i).'</option>';
        }
        $birthdatefield .= '</select></div><div class="col-sm-4"><select name="DDPG.NAME.BIRTHMONTH" class="form-control input-sm"><option value="">' .
                               MODULE_PAYMENT_HPDDPG_BIRTHMONTH .
                           '</option>';
        for ($i=1; $i<=12; $i++) {
            $birthdatefield .= '<option value="'.sprintf('%02d',$i).'">'.sprintf('%02d',$i).'</option>';
        }
        $birthdatefield .= '</select></div><div class="col-sm-4"><select name="DDPG.NAME.BIRTHYEAR" class="form-control input-sm"><option value="">' .
                               MODULE_PAYMENT_HPDDPG_BIRTHYEAR .
                           '</option>';
        for ($i=date('Y')-18; $i>=1900; $i--) {
            $birthdatefield .= '<option value="'.$i.'">'.$i.'</option>';
        }
        $birthdatefield .= '</select></div></div>';


		$content[] = array(
			'title' 	=> MODULE_PAYMENT_HPDDPG_BIRTHDATE,
			'field' 	=> $birthdatefield
		);

		$content[] = array(
				'title' 	=> HGW_TXT_ACC_HOLDER,
				'field' 	=> '<input name="DDPG.ACCOUNT.HOLDER" class="form-control input-sm" placeholder="' . HGW_TXT_ACC_HOLDER . '" value="'.$order->customer['firstname'].' '.$order->customer['lastname'].'">',
		);

		$content[] = array(
				'title' 	=> HGW_TXT_ACC_IBAN,
				'field' 	=> '<input name="DDPG.ACCOUNT.IBAN" class="form-control input-sm" placeholder="' . HGW_TXT_ACC_IBAN . '" >',
		);

		return array(
			'id'					=> $this->code,
			'module'			=> $this->title_txt,
			'fields'				=> $content,
			'description'		=> $this->info
		);
	}

	function pre_confirmation_check(){
		if($this->pmAv === false){
			$_SESSION['redirect_error'] = $this->pmAv_error;
			$url = xtc_href_link(FILENAME_CHECKOUT_PAYMENT, 'payment_error=' . $this->code, 'SSL');
			xtc_redirect($url);
		}

		return false;
	}

	function confirmation(){
		return false;
	}

	function process_button(){
		return false;
	}

	function before_process(){
		return false;
	}

	function payment_action(){
		$_SESSION['hp_tmp_oID'] = $_SESSION['tmp_oID'];
		$_SESSION['hp_tmp_glob']['order'] = json_encode($GLOBALS['order']);

		foreach($GLOBALS as $key => $value){
			if(is_int(strpos($key, 'ot_'))){
				$_SESSION['hp_tmp_glob'][$key] = $value;
				$_SESSION['hp_tmp_otmod'][] = $key.'.php';
			}
		}
		$url = xtc_href_link('ext/heidelpay/heidelpayGW_gateway.php', '', 'SSL');
		xtc_redirect($url);

		return true;
	}

	function after_process(){
		unset($_SESSION['hp_tmp_oID']);
		unset($_SESSION['hp_tmp_glob']);
		unset($_SESSION['hp_tmp_otmod']);
		return true;
	}

	function get_error(){
		$error = array(
			'title' => MODULE_PAYMENT_HPDDPG_TEXT_ERROR,
			'error' => $_SESSION['redirect_error']
		);
		unset($_SESSION['redirect_error']);

		return $error;
	}

	function check(){
		if(!isset ($this->_check)){
			$sql = xtc_db_query("SELECT configuration_value FROM ".TABLE_CONFIGURATION." WHERE configuration_key = 'MODULE_PAYMENT_".  strtoupper($this->code) ."_STATUS'");
			$this->_check = xtc_db_num_rows($sql);
		}
		return $this->_check;
	}

	function install(){
		$this->hgw->checkRegTable();
		$this->hgw->checkOrderStatus();
		$this->hgw->checkTransactTable();

		$this->remove(true);

		$groupId = 6;
		$sqlBase = 'INSERT INTO `'.TABLE_CONFIGURATION.'` SET ';

		$inst = array();
		$inst[] = array(
			'configuration_key'		=> $this->prefix.'STATUS',
			'configuration_value'	=> 'True',
			'set_function'				=> 'xtc_cfg_select_option(array(\'True\', \'False\'), ',
		);
		$inst[] = array(
			'configuration_key'		=> $this->prefix.'TEST_ACCOUNT',
			'configuration_value'	=> '',
		);
		$inst[] = array(
			'configuration_key'		=> $this->prefix.'PROCESSED_STATUS_ID',
			'configuration_value'	=> '333',
			'set_function'				=> 'xtc_cfg_pull_down_order_statuses(',
			'use_function'			=> 'xtc_get_order_status_name',
		);
		$inst[] = array(
			'configuration_key'		=> $this->prefix.'PENDING_STATUS_ID',
			'configuration_value'	=> '2',
			'set_function'				=> 'xtc_cfg_pull_down_order_statuses(',
			'use_function'			=> 'xtc_get_order_status_name',
		);
		$inst[] = array(
			'configuration_key'		=> $this->prefix.'CANCELED_STATUS_ID',
			'configuration_value'	=> '330',
			'set_function'				=> 'xtc_cfg_pull_down_order_statuses(',
			'use_function'			=> 'xtc_get_order_status_name',
		);
		$inst[] = array(
			'configuration_key'	=> $this->prefix.'SORT_ORDER',
			'configuration_value'	=> '1.30',
		);
		$inst[] = array(
			'configuration_key'	=> $this->prefix.'ALLOWED',
			'configuration_value'	=> '',
		);
		$inst[] = array(
			'configuration_key'	=> $this->prefix.'ZONE',
			'configuration_value'	=> '',
			'set_function'				=> 'xtc_cfg_pull_down_zone_classes(',
			'use_function'			=> 'xtc_get_zone_class_title',
		);

		foreach($inst as $sort => $conf){
			$sql = $sqlBase.' ';
			foreach($conf as $key => $val){
				$sql.= '`'.addslashes($key).'` = "'.$val.'", ';
			}
			$sql .= '`sort_order` = "'.$sort.'", ';
			$sql .= '`configuration_group_id` = "'.addslashes($groupId).'", ';
			$sql .= '`date_added` = NOW() ';
			xtc_db_query($sql);
		}
	}

	function remove(){
		xtc_db_query("DELETE FROM ". TABLE_CONFIGURATION ." WHERE configuration_key IN ('". implode("', '", $this->keys()) ."')");
	}

	function keys(){
		return array(
			'MODULE_PAYMENT_HPDDPG_STATUS',
			'MODULE_PAYMENT_HPDDPG_TEST_ACCOUNT',
			'MODULE_PAYMENT_HPDDPG_PROCESSED_STATUS_ID',
			'MODULE_PAYMENT_HPDDPG_PENDING_STATUS_ID',
			'MODULE_PAYMENT_HPDDPG_CANCELED_STATUS_ID',
			'MODULE_PAYMENT_HPDDPG_SORT_ORDER',
			'MODULE_PAYMENT_HPDDPG_ALLOWED',
			'MODULE_PAYMENT_HPDDPG_ZONE',
		);
	}
}

MainFactory::load_origin_class('hpddpg');
?>

Youez - 2016 - github.com/yon3zu
LinuXploit