root/donation/optionals/de.easy-coding.wcf.donation.paypal/files/lib/system/event/listener/DonationAddFormPayPalListener.class.php @ 255

<?php
require_once(WCF_DIR.'lib/system/event/listener/DonationAddFormAbstractListener.class.php');

/**
 * paypal
 *
 * @author      Torben Brodt
 * @package     de.easy-coding.wcf.donation.paypal
 * @license     GNU General Public License <http://opensource.org/licenses/gpl-3.0.html>
 */
class DonationAddFormPayPalListener extends DonationAddFormAbstractListener {
        protected $icon = 'paypal48.png';
        protected $templateName = 'donationPayPal';
        protected $system = 'paypal';
        
        //data
        protected $arr = array('paypal_enable','paypal_code');
        
        /**
         *
         */
        protected function validatePaypal() {
                // read the post from PayPal system and add 'cmd'
                $req = 'cmd=_notify-synch';

                $tx_token = $_GET['tx'];
                $auth_token = "GX_sTf5bW3wxRfFEbgofs88nQxvMQ7nsI8m21rzNESnl_79ccFTWj2aPgQ0";
                $req .= "&tx=$tx_token&at=$auth_token";

                // post back to PayPal system to validate
                $header .= "POST /cgi-bin/webscr HTTP/1.0\r\n";
                $header .= "Content-Type: application/x-www-form-urlencoded\r\n";
                $header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
                $fp = fsockopen ('www.paypal.com', 80, $errno, $errstr, 30);
                // If possible, securely post back to paypal using HTTPS
                // Your PHP server will need to be SSL enabled
                // $fp = fsockopen ('ssl://www.paypal.com', 443, $errno, $errstr, 30);

                if (!$fp) {
                        // HTTP ERROR
                } else {
                        fputs ($fp, $header . $req);
                        // read the body data
                        $res = '';
                        $headerdone = false;
                        while (!feof($fp)) {
                                $line = fgets ($fp, 1024);
                                if (strcmp($line, "\r\n") == 0) {
                                        // read the header
                                        $headerdone = true;
                                }
                                else if ($headerdone)
                                {
                                        // header has been read. now read the contents
                                        $res .= $line;
                                }
                        }

                        // parse the data
                        $lines = explode("\n", $res);
                        $keyarray = array();
                        if (strcmp ($lines[0], "SUCCESS") == 0) {
                                for ($i=1; $i<count($lines);$i++){
                                        list($key,$val) = explode("=", $lines[$i]);
                                        $keyarray[urldecode($key)] = urldecode($val);
                                }
                                // check the payment_status is Completed
                                // check that txn_id has not been previously processed
                                // check that receiver_email is your Primary PayPal email
                                // check that payment_amount/payment_currency are correct
                                // process payment
                                $firstname = $keyarray['first_name'];
                                $lastname = $keyarray['last_name'];
                                $itemname = $keyarray['item_name'];
                                $amount = $keyarray['payment_gross'];
                                $currency = $keyarray['mc_currency'];
                                $text = urldecode($keyarray['custom']);

                                echo ("<p><h3>Thank you for your purchase!</h3></p>");

                                echo ("<b>Payment Details</b><br>\n");
                                echo ("<li>Name: $firstname $lastname</li>\n");
                                echo ("<li>Item: $itemname</li>\n");
                                echo ("<li>Amount: $amount</li>\n");
                                echo ("");

                                fclose ($fp);           
                                return true;
                        }
                        else if (strcmp ($lines[0], "FAIL") == 0) {
                                // log for manual investigation
                        }

                }

                fclose ($fp);
                return false;
        }

        /**
         * @see Form::readFormParameters()
         */
        protected function readFormParameters() {
                //TODO: get information from paypal
        }
        
        /**
         * @see Form::validate()
         */
        protected function validate() {
                //TODO: did we get an answer from paypal? submission finished?
                switch($this->eventObj->step) {
                        case 10: // return page
                                if($this->validatePaypal()) {
                                        EventListener::fireEvent($this->eventObj, 'save'); //TODO: EventListener
                                }
                                
                        break;
                        case 20: // cancel page
                                
                        break;
                }
        }
}
?>