| Server IP : 37.220.80.31 / Your IP : 18.226.164.216 Web Server : Apache/2.4.52 (Ubuntu) System : Linux 3051455-guretool.twc1.net 5.15.0-107-generic #117-Ubuntu SMP Fri Apr 26 12:26:49 UTC 2024 x86_64 User : www-root ( 1010) PHP Version : 7.4.33 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority, MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /var/www/www-root/data/www/dev.artlot24.ru/bitrix/modules/sale/payment/eximb/ |
Upload File : |
<?if (!defined("B_PROLOG_INCLUDED") || B_PROLOG_INCLUDED !== true) die();?><?
include(GetLangFileName(dirname(__FILE__)."/", "/payment.php"));
if(!function_exists("bx_hmac"))
{
function bx_hmac($algo, $data, $key, $raw_output = false)
{
$algo = mb_strtolower($algo);
$pack = "H".mb_strlen($algo("test"));
$size = 64;
$opad = str_repeat(chr(0x5C), $size);
$ipad = str_repeat(chr(0x36), $size);
if (mb_strlen($key) > $size) {
$key = str_pad(pack($pack, $algo($key)), $size, chr(0x00));
} else {
$key = str_pad($key, $size, chr(0x00));
}
$lenKey = mb_strlen($key) - 1;
for ($i = 0; $i < $lenKey; $i++) {
$opad[$i] = $opad[$i] ^ $key[$i];
$ipad[$i] = $ipad[$i] ^ $key[$i];
}
$output = $algo($opad.pack($pack, $algo($ipad.$data)));
return ($raw_output) ? pack($pack, $output) : $output;
}
}
$p_terminal = $_POST["TERMINAL"];
$p_trtype = $_POST["TRTYPE"];
$p_order = $_POST["ORDER"];
$p_amount = $_POST["AMOUNT"];
$p_currency = $_POST["CURRENCY"];
$p_action = $_POST["ACTION"];
$p_rc = $_POST["RC"];
$p_approval = $_POST["APPROVAL"];
$p_rrn = $_POST["RRN"];
$p_int_ref = $_POST["INT_REF"];
$p_tm = $_POST["TIMESTAMP"];
$p_cardbin = $_POST["CARDBIN"];
$p_nonce = $_POST["NONCE"];
$p_sign = $_POST["P_SIGN"];
$p_extcode = $_POST["EXTCODE"];
$bError = true;
$mac = CSalePaySystemAction::GetParamValue("MAC");
if($mac <> '' && $arOrder = CSaleOrder::GetByID(intval($p_order)))
{
CSalePaySystemAction::InitParamArrays($arOrder, $arOrder["ID"]);
$amount = CSalePaySystemAction::GetParamValue("SHOULD_PAY");
$amount = number_format($amount, 2, ".", "");
$currency = CSalePaySystemAction::GetParamValue("CURRENCY");
if($currency == '')
$currency = "UAH";
$order = CSalePaySystemAction::GetParamValue("ORDER_ID");
if(mb_strlen($order) < 6)
{
$n = 6 - mb_strlen($order);
for($i = 0; $i < $n; $i++)
$order = "0".$order;
}
$desc = trim(CSalePaySystemAction::GetParamValue("ORDER_DESC").CSalePaySystemAction::GetParamValue("ORDER_ID"));
$merchant = CSalePaySystemAction::GetParamValue("MERCHANT");
$terminal = CSalePaySystemAction::GetParamValue("TERMINAL");
$email = CSalePaySystemAction::GetParamValue("EMAIL");
$PAY_OK = str_replace("#ID#", $arOrder["ID"], CSalePaySystemAction::GetParamValue("PAY_OK"));
$PAY_ERROR = str_replace("#ID#", $arOrder["ID"], CSalePaySystemAction::GetParamValue("PAY_ERROR"));
$ALLOW_DELIVERY = CSalePaySystemAction::GetParamValue("ALLOW_DELIVERY");
if(CSalePaySystemAction::GetParamValue("IS_TEST") <> '')
$server_url = "/cgi-bin/cgi_test";
else
$server_url = "/cgi-bin/cgi_link";
$key = pack("H*", $mac);
$sign = ToUpper(bx_hmac("sha1",
($p_rrn <> '' ? mb_strlen($p_rrn).$p_rrn : "-").
($p_int_ref <> '' ? mb_strlen($p_int_ref).$p_int_ref : "-").
($p_terminal <> '' ? mb_strlen($p_terminal).$p_terminal : "-").
($p_trtype <> '' ? mb_strlen($p_trtype).$p_trtype : "-").
($p_order <> '' ? mb_strlen($p_order).$p_order : "-").
($p_amount <> '' ? mb_strlen($p_amount).$p_amount : "-").
($p_currency <> '' ? mb_strlen($p_currency).$p_currency : "-").
($p_action <> '' ? mb_strlen($p_action).$p_action : "-").
($p_rc <> '' ? mb_strlen($p_rc).$p_rc : "-").
($p_approval <> '' ? mb_strlen($p_approval).$p_approval : "-").
($p_tm <> '' ? mb_strlen($p_tm).$p_tm : "-").
($p_nonce <> '' ? mb_strlen($p_nonce).$p_nonce : "-")
,
$key
));
$strPS_STATUS_DESCRIPTION = "";
$strPS_STATUS_DESCRIPTION .= "ACTION: ".$p_action."; ";
$strPS_STATUS_DESCRIPTION .= "RC: ".$p_rc."; ";
$strPS_STATUS_DESCRIPTION .= "APPROVAL: ".$p_approval."; ";
$strPS_STATUS_DESCRIPTION .= "RRN: ".$p_rrn."; ";
$strPS_STATUS_DESCRIPTION .= "INT_REF: ".$p_int_ref."; ";
$arFields = array(
"PS_STATUS" => "N",
"PS_STATUS_CODE" => $p_action,
"PS_STATUS_DESCRIPTION" => $strPS_STATUS_DESCRIPTION,
"PS_STATUS_MESSAGE" => "",
"PS_SUM" => $p_amount,
"PS_CURRENCY" => $p_currency,
"PS_RESPONSE_DATE" => Date(CDatabase::DateFormatToPHP(CLang::GetDateFormat("FULL", LANG))),
);
if($p_extcode <> '' && $p_extcode != "NONE")
$arFields["PS_STATUS_MESSAGE"] .= GetMessage("EXTCODE_".$p_extcode).". ";
if($sign == $p_sign)
{
if($p_action == "0" && $p_rc = "00")
{
if(DoubleVal($p_amount) == DoubleVal($arOrder["PRICE"]) && $p_currency == $currency)
{
echo $PAY_OK;
$bError = false;
$arFields["PS_STATUS"] = "Y";
if($arOrder["PAYED"] != "Y")
CSaleOrder::PayOrder($arOrder["ID"], "Y", true, true);
if($arOrder["ALLOW_DELIVERY"] != "Y" && $ALLOW_DELIVERY == "Y")
CSaleOrder::DeliverOrder($arOrder["ID"], "Y");
$trtype = 21;
$time = gmdate("YmdHis", time());
$var = unpack("H*r", ToUpper(mb_substr(md5(uniqid(30)), 0, 8)));
$nonce = $var[r];
$signew = bx_hmac("sha1",
mb_strlen($order).$order.
mb_strlen($amount).$amount.
mb_strlen($currency).$currency.
mb_strlen($p_rrn).$p_rrn.
mb_strlen($p_int_ref).$p_int_ref.
mb_strlen($trtype).$trtype.
mb_strlen($terminal).$terminal.
mb_strlen($time).$time.
mb_strlen($nonce).$nonce
,
$key
);
$res = "";
$res .= "TRTYPE=".$trtype;
$res .= "&ORDER=".$order;
$res .= "&AMOUNT=".$amount;
$res .= "&CURRENCY=".$currency;
$res .= "&RRN=".$p_rrn;
$res .= "&INT_REF=".$p_int_ref;
$res .= "&TERMINAL=".$terminal;
$res .= "&TIMESTAMP=".$time;
$res .= "&NONCE=".$nonce;
$res .= "&EMAIL=".$email;
$res .= "&LANG=";
$res .= "&P_SIGN=".$signew;
$header = "POST ".$server_url." HTTP/1.0\r\n";
$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
$header .= "Content-Length: ".mb_strlen($res) . "\r\n\r\n";
$fp = fsockopen("ssl://3ds.eximb.com", 443, $errno, $errstr, 60);
if($fp)
fputs ($fp, $header.$res);
fclose ($fp);
}
else
$arFields["PS_STATUS_MESSAGE"] .= GetMessage("ERROR_SUM").". ";
}
}
else
$arFields["PS_STATUS_MESSAGE"] .= GetMessage("ERROR_CHECKSUM")."";
if($bError)
echo $PAY_ERROR;
CSaleOrder::Update($arOrder["ID"], $arFields);
}
?>