fab27b3332
git-svn-id: http://svn.cleancode.org/svn/pickles@110 4d10bc64-7434-11dc-a737-d2d0f8310089
548 lines
19 KiB
PHP
548 lines
19 KiB
PHP
<?php
|
|
|
|
// @todo Add more error checking, basically against all queries
|
|
|
|
class store_checkout extends store {
|
|
|
|
protected $display = DISPLAY_JSON;
|
|
|
|
public function __default() {
|
|
|
|
// Required fields
|
|
$required = array(
|
|
'email',
|
|
'shipping_first_name',
|
|
'shipping_last_name',
|
|
'shipping_address1',
|
|
'shipping_city',
|
|
'shipping_state',
|
|
'shipping_zip_code',
|
|
'shipping_phone',
|
|
'referred_by',
|
|
'other_source',
|
|
'billing_first_name',
|
|
'billing_last_name',
|
|
'billing_address1',
|
|
'billing_city',
|
|
'billing_state',
|
|
'billing_zip_code',
|
|
'billing_phone',
|
|
'cc_type',
|
|
'cc_number',
|
|
'cc_expiration'
|
|
);
|
|
|
|
// Double safety in case the Javascript fails
|
|
if (isset($_REQUEST) && is_array($_REQUEST)) {
|
|
foreach ($_REQUEST as $key => $value) {
|
|
if (in_array($key, $required)) {
|
|
$values = is_array($value) ? $value : array($value);
|
|
|
|
foreach ($values as $value) {
|
|
if (trim($value) == '') {
|
|
$this->setPublic('message', 'Error: The ' . strtr($key, '_', ' ') . ' field is required.');
|
|
return false;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Checks that the password and confirmation are the same
|
|
if (isset($_REQUEST['password']) && trim($_REQUEST['password']) != '') {
|
|
if ($_REQUEST['password'] != $_REQUEST['confirm_password']) {
|
|
$this->setPublic('message', 'Error: The password and confirm password fields must match.');
|
|
return false;
|
|
}
|
|
}
|
|
|
|
// Adds the shipping information into the database
|
|
if (isset($_REQUEST['shipping_address1']) && trim($_REQUEST['shipping_address1']) != '') {
|
|
$shipping_address = array(
|
|
'company' => $_REQUEST['shipping_company'],
|
|
'first_name' => $_REQUEST['shipping_first_name'],
|
|
'last_name' => $_REQUEST['shipping_last_name'],
|
|
'address1' => $_REQUEST['shipping_address1'],
|
|
'address2' => $_REQUEST['shipping_address2'],
|
|
'city' => $_REQUEST['shipping_city'],
|
|
'state' => $_REQUEST['shipping_state'],
|
|
'zip_code' => $_REQUEST['shipping_zip_code'],
|
|
'country' => 'US',
|
|
'phone' => $_REQUEST['shipping_phone'],
|
|
'fax' => $_REQUEST['shipping_fax']
|
|
);
|
|
|
|
$shipping_address['hash'] = md5(implode('', $shipping_address));
|
|
|
|
if ($this->db->getField("SELECT COUNT(*) FROM addresses WHERE hash = '{$shipping_address['hash']}';") == 0) {
|
|
$shipping_address_id = $this->db->insert('addresses', $shipping_address);
|
|
}
|
|
else {
|
|
$shipping_address = $this->db->getRow("SELECT * FROM addresses WHERE hash = '{$shipping_address['hash']}';");
|
|
$shipping_address_id = $shipping_address['id'];
|
|
}
|
|
}
|
|
|
|
// Adds the billing information into the database
|
|
$billing_address_id = null;
|
|
|
|
if (isset($_REQUEST['billing_same_as_shipping']) && $_REQUEST['billing_same_as_shipping'] == 'on') {
|
|
$billing_address_id = $shipping_address_id;
|
|
$billing_address = $shipping_address;
|
|
}
|
|
else if (isset($_REQUEST['billing_address1']) && trim($_REQUEST['billing_address1']) != '') {
|
|
$billing_address = array(
|
|
'company' => $_REQUEST['billing_company'],
|
|
'first_name' => $_REQUEST['billing_first_name'],
|
|
'last_name' => $_REQUEST['billing_last_name'],
|
|
'address1' => $_REQUEST['billing_address1'],
|
|
'address2' => $_REQUEST['billing_address2'],
|
|
'city' => $_REQUEST['billing_city'],
|
|
'state' => $_REQUEST['billing_state'],
|
|
'zip_code' => $_REQUEST['billing_zip_code'],
|
|
'country' => 'US',
|
|
'phone' => $_REQUEST['billing_phone'],
|
|
'fax' => $_REQUEST['billing_fax']
|
|
);
|
|
|
|
$billing_address['hash'] = md5(implode('', $billing_address));
|
|
|
|
if ($this->db->getField("SELECT COUNT(*) FROM addresses WHERE hash = '{$billing_address['hash']}';") == 0) {
|
|
$billing_address_id = $this->db->insert('addresses', $billing_address);
|
|
}
|
|
else {
|
|
$billing_address = $this->db->getRow("SELECT * FROM addresses WHERE hash = '{$billing_address['hash']}';");
|
|
$billing_address_id = $billing_address['id'];
|
|
}
|
|
}
|
|
|
|
// @todo Remove this when I figure out how I want to control certain code inside the common modules
|
|
$this->error->resetErrors();
|
|
|
|
// Gets a reference to the cart in the session
|
|
$cart =& $_SESSION['cart'];
|
|
|
|
// Adds the addresses to the cart
|
|
if (isset($shipping_address, $shipping_address_id)) {
|
|
$cart['shipping_address'] = $shipping_address;
|
|
$cart['shipping_address']['id'] = $shipping_address_id;
|
|
}
|
|
|
|
if (isset($billing_address, $billing_address_id)) {
|
|
$cart['billing_address'] = $billing_address;
|
|
$cart['billing_address']['id'] = $billing_address_id;
|
|
}
|
|
|
|
// Adds the customer's email into the email database
|
|
if (isset($_REQUEST['email']) && trim($_REQUEST['email']) != '') {
|
|
$email = $_REQUEST['email'];
|
|
|
|
if ($this->db->getField("SELECT COUNT(*) FROM emails WHERE email = '{$email}';") == 0) {
|
|
$email_id = $this->db->insert('emails', array('email' => $email));
|
|
}
|
|
else {
|
|
$email_id = $this->db->getField("SELECT id FROM emails WHERE email = '{$email}';");
|
|
}
|
|
}
|
|
else if (isset($cart['email'])) {
|
|
$email = $cart['email'];
|
|
}
|
|
|
|
// Adds the customer's reference into the database
|
|
if (isset($_REQUEST['referred_by'])) {
|
|
$referrer = strtolower($_REQUEST['referred_by']) == 'other' ? $_REQUEST['other_source'] : $_REQUEST['referred_by'];
|
|
|
|
if ($this->db->getField("SELECT COUNT(*) FROM referrers WHERE referrer = '{$referrer}';") == 0) {
|
|
$referrer_id = $this->db->insert('referrers', array('referrer' => $referrer));
|
|
}
|
|
else {
|
|
$referrer_id = $this->db->getField("SELECT id FROM referrers WHERE referrer = '{$referrer}';");
|
|
}
|
|
}
|
|
else {
|
|
$referrer_id = null;
|
|
}
|
|
|
|
// If a password exists, try to create a customer account
|
|
if (isset($_REQUEST['password']) && trim($_REQUEST['password']) != '') {
|
|
$customer = array(
|
|
'email_id' => $email_id,
|
|
'password' => md5($_REQUEST['password']),
|
|
'billing_address_id' => $billing_address_id,
|
|
'shipping_address_id' => $shipping_address_id,
|
|
'created_at' => date('Y-m-d H:i:s')
|
|
);
|
|
|
|
if (!isset($cart['customer_id']) || $cart['customer_id'] == 0) {
|
|
// Adds the customer account
|
|
if ($this->db->getField("SELECT COUNT(*) FROM customers WHERE email_id = '{$email_id}';") == 0) {
|
|
$cart['customer_id'] = $this->db->insert('customers', $customer);
|
|
$cart['email'] = $email;
|
|
|
|
// Contacts the user to advise them of their sign up
|
|
$registration_message = "
|
|
{$this->config->store->title}
|
|
-------------------------------------------------------------------
|
|
|
|
Dear {$shipping_address['first_name']} {$shipping_address['last_name']},
|
|
|
|
You have been registered
|
|
|
|
Your profile:
|
|
---------------------
|
|
Login Information:
|
|
---------------------
|
|
Username: {$email}
|
|
Password: {$_REQUEST['password']}
|
|
|
|
" . (isset($billing_address) ? "Billing Address:
|
|
----------------
|
|
Company: {$billing_address['company']}
|
|
First Name: {$billing_address['first_name']}
|
|
Last Name: {$billing_address['last_name']}
|
|
Address: {$billing_address['address1']}
|
|
Address2: {$billing_address['address2']}
|
|
City: {$billing_address['city']}
|
|
State: {$billing_address['state']}
|
|
Postal Code: {$billing_address['zip_code']}
|
|
Country: {$billing_address['country']}
|
|
Phone: {$billing_address['phone']}
|
|
Fax: {$billing_address['fax']}
|
|
|
|
" : '') . "Shipping Address:
|
|
-----------------
|
|
Company: {$shipping_address['company']}
|
|
First Name: {$shipping_address['first_name']}
|
|
Last Name: {$shipping_address['last_name']}
|
|
Address: {$shipping_address['address1']}
|
|
Address2: {$shipping_address['address2']}
|
|
City: {$shipping_address['city']}
|
|
State: {$shipping_address['state']}
|
|
Postal Code: {$shipping_address['zip_code']}
|
|
Country: {$shipping_address['country']}
|
|
Phone: {$shipping_address['phone']}
|
|
Fax: {$shipping_address['fax']}
|
|
|
|
------------------
|
|
|
|
Thank you for your interest in {$this->config->store->title}.
|
|
|
|
{$this->config->store->title}
|
|
Phone: {$this->config->store->phone}
|
|
Fax: {$this->config->store->fax}
|
|
URL: {$this->config->store->url}
|
|
";
|
|
|
|
// @todo
|
|
mail($email, 'Welcome to ' . $this->config->store->title, $registration_message, 'From: ' . $this->config->store->return_email);
|
|
/*
|
|
$status = $this->mailer->send(
|
|
$email,
|
|
$this->config->store->return_email,
|
|
'Welcome to ' . $this->config->store->title,
|
|
$registration_message
|
|
);
|
|
*/
|
|
}
|
|
else {
|
|
// @todo Change this out for a confirmation box and re-submit
|
|
// $this->status = 'ExistingCustomer';
|
|
$this->setPublic('message', 'Error: The email address you supplied is already in use. There is an existing customer login form on the right-hand side of the page. If you wish to continue without logging in, please provide a different email address or delete the contents of the password box (this will skip the process of creating a new account).');
|
|
return false;
|
|
}
|
|
}
|
|
}
|
|
// Updates the existing customer account
|
|
else if (isset($cart['customer_id']) && $cart['customer_id'] != 0) {
|
|
$customer = array(
|
|
'billing_address_id' => $billing_address_id,
|
|
'shipping_address_id' => $shipping_address_id,
|
|
'updated_at' => date('Y-m-d H:i:s')
|
|
);
|
|
|
|
$this->db->update('customers', $customer, array('id' => $cart['customer_id']));
|
|
}
|
|
|
|
if ($this->error->getErrors()) {
|
|
$this->setPublic('status', 'Error');
|
|
$this->setPublic('message', 'There was an error adding the customer account (' . implode('. ', $this->error->getErrors()) . '.)');
|
|
return false;
|
|
}
|
|
else {
|
|
// Totals the subtotal and shipping cost (the grand total)
|
|
$total_amount = $cart['subtotal'] + $cart['shipping'];
|
|
|
|
// Determines what sort of cross reference we need to use
|
|
if (isset($cart['customer_id'])) {
|
|
$xref_id = $cart['customer_id'];
|
|
$xref_type = 'CUSTOMER';
|
|
}
|
|
else if (isset($email_id)) {
|
|
$xref_id = $email_id;
|
|
$xref_type = 'EMAIL';
|
|
}
|
|
else {
|
|
$this->setPublic('status', 'Error');
|
|
$this->setPublic('message', 'There was an internal error.');
|
|
return false;
|
|
}
|
|
|
|
$affiliate_id = null;
|
|
if (isset($cart['affiliate'])) {
|
|
if ($this->db->getField("SELECT COUNT(id) FROM affiliates WHERE MD5(id) = '{$cart['affiliate']}';") == 1) {
|
|
$affiliate = $this->db->getRow("SELECT id, commission_rate FROM affiliates WHERE MD5(id) = '{$cart['affiliate']}';");
|
|
$affiliate_id = $affiliate['id'];
|
|
}
|
|
}
|
|
|
|
// Assembles the order array
|
|
$order = array(
|
|
'xref_id' => $xref_id,
|
|
'xref_type' => $xref_type,
|
|
'shipping_address_id' => $shipping_address_id,
|
|
'billing_address_id' => $billing_address_id,
|
|
'referrer_id' => $referrer_id,
|
|
'affiliate_id' => $affiliate_id,
|
|
'cc_type' => isset($_REQUEST['cc_type']) ? $_REQUEST['cc_type'] : null,
|
|
'cc_last4' => isset($_REQUEST['cc_number']) ? substr($_REQUEST['cc_number'], -4) : null,
|
|
'cc_expiration' => isset($_REQUEST['cc_expiration']) ? '20' . $_REQUEST['cc_expiration']['year'] . '-' . $_REQUEST['cc_expiration']['month'] . '-01' : null,
|
|
'total_amount' => "{$total_amount}",
|
|
'shipping_amount' => "{$cart['shipping']}"
|
|
);
|
|
|
|
// Inserts the order into the database
|
|
if (!isset($cart['order_id']) || $cart['order_id'] == 0) {
|
|
$cart['order_id'] = $this->db->insert('orders', $order);
|
|
}
|
|
// Updates an existing order
|
|
else {
|
|
$this->db->update('orders', $order, array('id' => $cart['order_id']));
|
|
|
|
// Cleans out the order_* tables
|
|
$this->db->execute("DELETE FROM order_products WHERE order_id = '{$cart['order_id']}';");
|
|
$this->db->execute("DELETE FROM order_discounts WHERE order_id = '{$cart['order_id']}';");
|
|
}
|
|
|
|
// Populates the order_* tables and generates the line items for the receipt
|
|
$receipt_products = null;
|
|
foreach ($cart['products'] as $product_id => $product) {
|
|
$order_product = array(
|
|
'order_id' => $cart['order_id'],
|
|
'product_id' => $product_id,
|
|
'sequence' => '0',
|
|
'quantity' => $product['quantity']
|
|
);
|
|
$this->db->insert('order_products', $order_product);
|
|
|
|
if (isset($product['discounts']) && is_array($product['discounts'])) {
|
|
foreach ($product['discounts'] as $discount) {
|
|
$order_discount = array(
|
|
'order_id' => $cart['order_id'],
|
|
'discount_id' => $discount['id'],
|
|
'sequence' => '0'
|
|
);
|
|
$this->db->insert('order_discounts', $order_discount);
|
|
}
|
|
}
|
|
|
|
$receipt_products .= "
|
|
Item : {$product['sku']}
|
|
Description : >
|
|
{$product['name']}
|
|
Quantity : {$product['quantity']}
|
|
Unit Price : US \${$product['price']}
|
|
";
|
|
}
|
|
|
|
$receipt = "
|
|
========= ORDER INFORMATION =========
|
|
Invoice Number : {$cart['order_id']}
|
|
Description : Menopause Solutions
|
|
Total : US \${$total_amount}
|
|
Shipping : US \${$cart['shipping']}
|
|
|
|
{$receipt_products}
|
|
|
|
" . (isset($billing_address) ? "==== BILLING INFORMATION ===
|
|
Customer ID : " . (isset($cart['customer_id']) ? $cart['customer_id'] : 'N/A') . "
|
|
First Name : {$billing_address['first_name']}
|
|
Last Name : {$billing_address['last_name']}
|
|
Company : {$billing_address['company']}
|
|
Address : {$billing_address['address1']}
|
|
Address2 : {$billing_address['address2']}
|
|
City : {$billing_address['city']}
|
|
State/Province : {$billing_address['state']}
|
|
Zip/Postal Code : {$billing_address['zip_code']}
|
|
Country : {$billing_address['country']}
|
|
Phone : {$billing_address['phone']}
|
|
Fax : {$billing_address['fax']}
|
|
Email : {$email}
|
|
|
|
" : '') . "==== SHIPPING INFORMATION ===
|
|
Customer ID : " . (isset($cart['customer_id']) ? $cart['customer_id'] : 'N/A') . "
|
|
First Name : {$shipping_address['first_name']}
|
|
Last Name : {$shipping_address['last_name']}
|
|
Company : {$shipping_address['company']}
|
|
Address : {$shipping_address['address1']}
|
|
Address2 : {$shipping_address['address2']}
|
|
City : {$shipping_address['city']}
|
|
State/Province : {$shipping_address['state']}
|
|
Zip/Postal Code : {$shipping_address['zip_code']}
|
|
Country : {$shipping_address['country']}
|
|
Phone : {$shipping_address['phone']}
|
|
Fax : {$shipping_address['fax']}
|
|
Email : {$email}
|
|
";
|
|
|
|
// Checks if the transaction ID exists for the order, if not, process the order
|
|
if ($this->db->getField("SELECT transaction_id FROM orders WHERE id = '{$cart['order_id']}';") == NULL) {
|
|
if ($total_amount > 0) {
|
|
$gateway = new WebService_AuthorizeNet_AIM($this->config, $this->error);
|
|
|
|
// Customer and order information
|
|
$gateway->order_id = $cart['order_id'];
|
|
$gateway->customer_id = isset($cart['customer_id']) ? $cart['customer_id'] : 'N/A';
|
|
$gateway->customer_ip = $_SERVER['REMOTE_ADDR'];
|
|
|
|
// Payment information
|
|
$gateway->total_amount = $total_amount;
|
|
$gateway->shipping = $cart['shipping'];
|
|
$gateway->card_number = $_REQUEST['cc_number'];
|
|
$gateway->expiration_month = $_REQUEST['cc_expiration']['month'];
|
|
$gateway->expiration_year = $_REQUEST['cc_expiration']['year'];
|
|
|
|
if (isset($_REQUEST['ccv2'])) {
|
|
$gateway->cvv2 = $_REQUEST['ccv2'];
|
|
}
|
|
|
|
// Billing information
|
|
$gateway->billing_company = $billing_address['company'];
|
|
$gateway->billing_first_name = $billing_address['first_name'];
|
|
$gateway->billing_last_name = $billing_address['last_name'];
|
|
$gateway->billing_address1 = $billing_address['address1'];
|
|
$gateway->billing_address2 = $billing_address['address2'];
|
|
$gateway->billing_city = $billing_address['city'];
|
|
$gateway->billing_state = $billing_address['state'];
|
|
$gateway->billing_zip_code = $billing_address['zip_code'];
|
|
$gateway->billing_country = $billing_address['country'];
|
|
$gateway->billing_email = $email;
|
|
$gateway->billing_phone = $billing_address['phone'];
|
|
$gateway->billing_fax = $billing_address['fax'];
|
|
|
|
// Shipping information
|
|
$gateway->shipping_company = $shipping_address['company'];
|
|
$gateway->shipping_first_name = $shipping_address['first_name'];
|
|
$gateway->shipping_last_name = $shipping_address['last_name'];
|
|
$gateway->shipping_address1 = $shipping_address['address1'];
|
|
$gateway->shipping_address2 = $shipping_address['address2'];
|
|
$gateway->shipping_city = $shipping_address['city'];
|
|
$gateway->shipping_state = $shipping_address['state'];
|
|
$gateway->shipping_zip_code = $shipping_address['zip_code'];
|
|
$gateway->shipping_country = $shipping_address['country'];
|
|
$gateway->shipping_email = $email;
|
|
$gateway->shipping_phone = $shipping_address['phone'];
|
|
$gateway->shipping_fax = $shipping_address['fax'];
|
|
|
|
// Order information
|
|
$gateway->products = $cart['products'];
|
|
|
|
/*
|
|
$gateway->tax = '';
|
|
$gateway->order_number = '';
|
|
$gateway->session_number = '';
|
|
*/
|
|
|
|
$response = $gateway->process();
|
|
|
|
// If the transaction was approved, update the order
|
|
if ($response['response_code'] == 'Approved') {
|
|
$this->db->execute("
|
|
UPDATE orders
|
|
SET transaction_id = '{$response['transaction_id']}', time_placed = NOW()
|
|
WHERE id = '{$response['invoice_number']}';
|
|
");
|
|
|
|
// Updates the affiliates profile
|
|
if ($affiliate_id != null) {
|
|
$commission = round($cart['subtotal'] * ($affiliate['commission_rate'] / 100), 2);
|
|
|
|
$this->db->execute("
|
|
UPDATE affiliates
|
|
SET
|
|
order_count = order_count + 1,
|
|
commission_earned = commission_earned + {$commission},
|
|
unpaid_balance = unpaid_balance + {$commission}
|
|
WHERE id = '{$affiliate_id}';
|
|
");
|
|
}
|
|
|
|
// Does some clean up to avoid duplicate transactions
|
|
unset($_SESSION['cart']);
|
|
|
|
// Emails the shipping department
|
|
// @todo
|
|
mail($this->config->store->order_notification->recipient, $this->config->store->title . ' Order Notification', $receipt, 'From: ' . $this->config->store->return_email);
|
|
/*
|
|
$this->mailer->send(
|
|
$this->config->store->order_notification->recipient,
|
|
$this->config->store->return_email,
|
|
$this->config->store->title . ' Order Notification',
|
|
$receipt
|
|
);
|
|
*/
|
|
}
|
|
|
|
$this->setPublic('status', $response['response_code']);
|
|
$this->setPublic('message', $response['response_reason_text']);
|
|
}
|
|
// Free order (no payment processing necessary)
|
|
else {
|
|
$this->setPublic('status', 'Approved');
|
|
|
|
$this->db->execute("
|
|
UPDATE orders
|
|
SET transaction_id = '', time_placed = NOW()
|
|
WHERE id = '{$cart['order_id']}';
|
|
");
|
|
|
|
// Does some clean up to avoid duplicate transactions
|
|
unset($_SESSION['cart']);
|
|
|
|
// Emails the user a receipt
|
|
// @todo
|
|
mail($email, $this->config->store->title . ' Customer Receipt', $receipt, 'From: ' . $this->config->store->return_email);
|
|
/*
|
|
$this->mailer->send(
|
|
$email,
|
|
$this->config->store->return_email,
|
|
$this->config->store->title . ' Customer Receipt',
|
|
$receipt,
|
|
false
|
|
);
|
|
*/
|
|
|
|
// Emails the shipping department
|
|
// @todo
|
|
mail($this->config->store->order_notification->recipient, $this->config->store->title . ' Order Notification', $receipt, 'From: ' . $this->config->store->return_email);
|
|
/*
|
|
$this->mailer->send(
|
|
$this->config->store->order_notification->recipient,
|
|
$this->config->store->return_email,
|
|
$this->config->store->title . ' Order Notification',
|
|
$receipt
|
|
);
|
|
*/
|
|
}
|
|
}
|
|
else {
|
|
$this->setPublic('status', 'Error');
|
|
$this->setPublic('message', 'A duplicate transaction has been submitted.');
|
|
}
|
|
|
|
// Unsets the cart variable
|
|
unset($cart);
|
|
}
|
|
}
|
|
}
|
|
|
|
?>
|