AnonSec Team
Server IP : 10.131.40.8  /  Your IP : 216.73.216.15
Web Server : Apache
System : Linux webd008.cluster131.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
User : ludmqhh ( 137773)
PHP Version : 8.4.10
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON
Directory (0755) :  /home/ludmqhh/www/hotel-forum/wp-content/plugins/stm-configurations/paypal/

[  Home  ][  C0mmand  ][  Upload File  ]

Current File : /home/ludmqhh/www/hotel-forum/wp-content/plugins/stm-configurations/paypal/paypal.php
<?php

if (!class_exists('STM_PayPal')) {
	class STM_PayPal {

		private $url;
		public $currency_code;
		public $email;
		public $return_url;




		function __construct($amount = 10, $invoice, $items = array(), $return_url = '')
		{


			$this->url = (pearl_get_option('paypal_mode') == 'live') ? 'www.paypal.com' : 'www.sandbox.paypal.com';
			$this->currency_code = pearl_get_option('paypal_currency_code', 'USD');
			$this->email = $paypal_email = pearl_get_option('paypal_email');
			$this->return_url = empty($return_url) ? home_url() : $return_url;
			$this->items = $items;
			$this->invoice = $invoice;


			$this->return_url = apply_filters('stm_paypal_return_url', $this->return_url);
		}

		function generate_payment_url() {
			$items = http_build_query($this->items);

			$url = 'https://' . $this->url . '/cgi-bin/webscr?cmd=_xclick&business=' . $this->email . '&' . $items . '
			&no_shipping=1&no_note=1&currency_code=' . $this->currency_code . '&bn=PP%2dBuyNowBF&charset=UTF%2d8&invoice=' . $this->invoice . '&return=' . $this->return_url . '&rm=2&notify_url=' . $this->return_url;


			return $url;
		}

		function check_payment($data) {
			$item_name = $data['item_name'];
			$item_number = $data['item_number'];
			$payment_status = $data['payment_status'];
			$payment_amount = $data['mc_gross'];
			$payment_currency = $data['mc_currency'];
			$txn_id = $data['txn_id'];
			$receiver_email = $data['receiver_email'];
			$payer_email = $data['payer_email'];
			$invoice = $data['invoice'];

			$req = 'cmd=_notify-validate';

			foreach ($data as $key => $value) {
				$value = urlencode(stripslashes($value));
				$req .= "&$key=$value";
			}

			$ch = curl_init('https://' . $this->url . '/cgi-bin/webscr');
			curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
			curl_setopt($ch, CURLOPT_POST, 1);
			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
			curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
			curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
			curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
			curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
			curl_setopt($ch, CURLOPT_HTTPHEADER, array('Connection: Close'));

			if (!($res = curl_exec($ch))) {
				echo("Got " . curl_error($ch) . " when processing IPN data");
				curl_close($ch);
				return false;
			}
			curl_close($ch);


//			$res = "VERIFIED"; //TODO remove this

			if (strcmp($res, "VERIFIED") == 0) {


				$mail_To = get_option('admin_email');
				$mail_Subject = "VERIFIED IPN";
				$mail_Body = $req;
				//wp_mail($mail_To, $mail_Subject, $mail_Body);


				wp_update_post(array('ID' => $invoice, 'post_status' => 'publish'));

				if (get_post_type($invoice) == 'event_participants') {
					$participant_info = get_post($invoice);
					$events_admin_email_subject = str_replace(array('[event]'), array(get_the_title($item_number)), get_theme_mod('events_admin_email_subject', __('New participant for [event]', 'stm-configurations')));
					$events_admin_email_message = str_replace(array('[event]', '[name]', '[email]', '[phone]', '[message]'), array(get_the_title($item_number), get_the_title($invoice), get_post_meta($invoice, 'participant_email', true), get_post_meta($invoice, 'participant_phone', true), $participant_info->post_excerpt), get_theme_mod('events_admin_email_message', __('A new member wants to join your [event]
				Participant Info:
		        Name: [name]
				Email: [email]
				Phone: [phone]
				Message: [message]', 'stm-configurations')));
					$events_participant_email_subject = str_replace(array('[event]'), array(get_the_title($item_number)), get_theme_mod('events_participant_email_subject', __('Confirmation of your pariticipation in the [event]', 'stm-configurations')));
					$events_participant_email_message = str_replace(array('[name]'), array(get_the_title($invoice)), get_theme_mod('events_participant_email_message', __('Dear [name]
				This email is sent to you to confirm your participation in the event.
				We will contact you soon with further details.
				With any question, feel free to phone +999999999999 or write to <a href="mailto:' . get_bloginfo('admin_email') . '">' . get_bloginfo('admin_email') . '</a>.
	
	
				Regards,
				Pearl Team', 'stm-configurations')));

					add_filter('wp_mail_content_type', 'set_html_content_type');

					$headers[] = 'From: ' . get_bloginfo('blogname') . ' <' . get_bloginfo('admin_email') . '>';

					wp_mail(get_bloginfo('admin_email'), $events_admin_email_subject, nl2br($events_admin_email_message), $headers);

					wp_mail(get_post_meta($invoice, 'participant_email', true), $events_participant_email_subject, nl2br($events_participant_email_message), $headers);

					remove_filter('wp_mail_content_type', 'set_html_content_type');
				} else {
//					$donors = get_post_meta($item_number, 'donation_donors', true);
//					$donors = intval($donors);
//					if (!$donors) {
//						$donors = 0;
//					}
//					$donors = $donors + 1;
//					update_post_meta($item_number, 'donation_donors', $donors);


					$raised = get_post_meta($item_number, 'raised_amount', true);

					file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/pp2.txt', print_r($raised, true));


					$donor_amount = get_post_meta($invoice, 'donor_amount', true);
					$donor_amount = intval($donor_amount);

					$raised = intval($raised);
					if (!$raised) {
						$raised = 0;
					}
					$raised = $raised + $donor_amount;
					update_post_meta($item_number, 'raised_amount', $raised);

					$donation_options = get_theme_mod('donation_options');
					$email_message_search = array('[name]', '[amount]', '[cause]');
					$email_message_replace = array(get_the_title($invoice), $donor_amount, '<a href="' . get_permalink($item_number) . '">' . get_the_title($item_number) . '</a>');
					$admin_email_subject = $donation_options['admin_email_subject'];
					$admin_email_message = str_replace($email_message_search, $email_message_replace, $donation_options['admin_email_message']);
					$donor_email_subject = $donation_options['donor_email_subject'];
					$donor_email_message = str_replace($email_message_search, $email_message_replace, $donation_options['donor_email_message']);

					add_filter('wp_mail_content_type', 'set_html_content_type');

					$headers[] = 'From: ' . get_bloginfo('blogname') . ' <' . get_bloginfo('admin_email') . '>';

					wp_mail(get_bloginfo('admin_email'), $admin_email_subject, nl2br($admin_email_message), $headers);

					wp_mail(get_post_meta($invoice, 'donor_email', true), $donor_email_subject, nl2br($donor_email_message), $headers);

					remove_filter('wp_mail_content_type', 'set_html_content_type');

					if (get_post_meta($invoice, 'donor_subscribe', true) && get_post_meta($invoice, 'donor_email', true)) {
						require_once("lib/mailchimp/Handling.class.php");
						Handling::handling_request_with_confirmation(get_post_meta($invoice, 'donor_email', true), NULL);
					}
				}

			} else if (strcmp($res, "INVALID") == 0) {

				$mail_To = get_option('admin_email');
				$mail_Subject = "INVALID IPN";
				$mail_Body = $req;

				//wp_mail($mail_To, $mail_Subject, $mail_Body);
			}
		}

		function generate_payment() {
			$this->generate_payment_url();
			$this->check_payment();
		}
	}
}


if (!empty($_GET['stm_check_donation_ipn'])) {
	$paypal = new STM_PayPal();
	$paypal->check_payment($_REQUEST);
	header('HTTP/1.1 200 OK');

	exit;
}

function paypal_url()
{
	$paypal_mode = pearl_get_option('paypal_mode');
	$paypal_url = ($paypal_mode == 'live') ? 'www.paypal.com' : 'www.sandbox.paypal.com';

	return $paypal_url;
}

if (!function_exists('generatePayment')) {

	function generatePayment($data, $event = false)
	{
		$paypal_currency_code = pearl_get_option('paypal_currency_code');
		$paypal_email = pearl_get_option('paypal_email');


		if (!$event) {
			if (empty($data['amount'])) {
				$data['amount'] = 10;
			}

			$return['result'] = true;



			$donor_data['post_title'] = $data['first_name'] . ' ' . $data['last_name'];
			$donor_data['post_type'] = 'donor';
			$donor_id = wp_insert_post($donor_data);

			update_post_meta($donor_id, 'donor_email', $data['email']);
			update_post_meta($donor_id, 'donor_phone', $data['phone']);
			update_post_meta($donor_id, 'donor_address', $data['address']);
			update_post_meta($donor_id, 'donor_note', $data['notes']);
			update_post_meta($donor_id, 'donor_amount', $data['amount']);
			if (!empty($data['sign_up'])) {
				update_post_meta($donor_id, 'donor_subscribe', $data['sign_up']);
			}
			if ($data['donation_id'] == 0) {
				update_post_meta($donor_id, 'donor_donation', '');
				$returnUrl = home_url();
				$items['item_name'] = __('Site Donation', 'stm-configurations');
			} else {
				update_post_meta($donor_id, 'donor_donation', get_the_title($data['donation_id']));
				$returnUrl = get_permalink($data['donation_id']);
				$items['item_name'] = get_the_title($data['donation_id']);
			}

			$items['item_number'] = $data['donation_id'];
			$items['amount'] = $data['amount'];
			$items = http_build_query($items);

			$return = 'https://' . paypal_url() . '/cgi-bin/webscr?cmd=_xclick&business=' . $paypal_email . '&' . $items . '&no_shipping=1&no_note=1&currency_code=' . $paypal_currency_code . '&bn=PP%2dBuyNowBF&charset=UTF%2d8&invoice=' . $donor_id . '&return=' . $returnUrl . '&rm=2&notify_url=' . $returnUrl;
		} else {
			$participant_id = $event;
			$amount = get_post_meta($data['event_id'], 'event_amount', true);
			$return['result'] = true;
			$returnUrl = home_url();

			$items['item_name'] = get_the_title($data['event_id']);
			$items['item_number'] = $data['event_id'];
			$items['amount'] = $amount;
			$items = http_build_query($items);

			$return = 'https://' . paypal_url() . '/cgi-bin/webscr?cmd=_xclick&business=' . $paypal_email . '&' . $items . '&no_shipping=1&no_note=1&currency_code=' . $paypal_currency_code . '&bn=PP%2dBuyNowBF&charset=UTF%2d8&invoice=' . $participant_id . '&return=' . $returnUrl . '&rm=2&notify_url=' . $returnUrl;
		}

		return $return;

	}
}

if (!function_exists('checkPayment')) {

	function checkPayment($data)
	{

		$donationOptions = get_theme_mod('donation_options');

		$item_name = $data['item_name'];
		$item_number = $data['item_number'];
		$payment_status = $data['payment_status'];
		$payment_amount = $data['mc_gross'];
		$payment_currency = $data['mc_currency'];
		$txn_id = $data['txn_id'];
		$receiver_email = $data['receiver_email'];
		$payer_email = $data['payer_email'];
		$invoice = $data['invoice'];

		$req = 'cmd=_notify-validate';

		foreach ($data as $key => $value) {
			$value = urlencode(stripslashes($value));
			$req .= "&$key=$value";
		}

		$ch = curl_init('https://' . paypal_url() . '/cgi-bin/webscr');
		curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
		curl_setopt($ch, CURLOPT_POST, 1);
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
		curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
		curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
		curl_setopt($ch, CURLOPT_HTTPHEADER, array('Connection: Close'));

		if (!($res = curl_exec($ch))) {
			echo("Got " . curl_error($ch) . " when processing IPN data");
			curl_close($ch);
			return false;
		}
		curl_close($ch);

		if (strcmp($res, "VERIFIED") == 0) {

			$mail_To = get_option('admin_email');
			$mail_Subject = "VERIFIED IPN";
			$mail_Body = $req;
			//wp_mail($mail_To, $mail_Subject, $mail_Body);


			wp_update_post(array('ID' => $invoice, 'post_status' => 'publish'));

			if (get_post_type($invoice) == 'event_participant') {
				$participant_info = get_post($invoice);
				$events_admin_email_subject = str_replace(array('[event]'), array(get_the_title($item_number)), get_theme_mod('events_admin_email_subject', __('New participant for [event]', 'stm-configurations')));
				$events_admin_email_message = str_replace(array('[event]', '[name]', '[email]', '[phone]', '[message]'), array(get_the_title($item_number), get_the_title($invoice), get_post_meta($invoice, 'participant_email', true), get_post_meta($invoice, 'participant_phone', true), $participant_info->post_excerpt), get_theme_mod('events_admin_email_message', __('A new member wants to join your [event]
				Participant Info:
		        Name: [name]
				Email: [email]
				Phone: [phone]
				Message: [message]', 'stm-configurations')));
				$events_participant_email_subject = str_replace(array('[event]'), array(get_the_title($item_number)), get_theme_mod('events_participant_email_subject', __('Confirmation of your pariticipation in the [event]', 'stm-configurations')));
				$events_participant_email_message = str_replace(array('[name]'), array(get_the_title($invoice)), get_theme_mod('events_participant_email_message', __('Dear [name]
				This email is sent to you to confirm your participation in the event.
				We will contact you soon with further details.
				With any question, feel free to phone +999999999999 or write to <a href="mailto:' . get_bloginfo('admin_email') . '">' . get_bloginfo('admin_email') . '</a>.
	
	
				Regards,
				Savior Team', 'stm-configurations')));

				add_filter('wp_mail_content_type', 'set_html_content_type');

				$headers[] = 'From: ' . get_bloginfo('blogname') . ' <' . get_bloginfo('admin_email') . '>';

				wp_mail(get_bloginfo('admin_email'), $events_admin_email_subject, nl2br($events_admin_email_message), $headers);

				wp_mail(get_post_meta($invoice, 'participant_email', true), $events_participant_email_subject, nl2br($events_participant_email_message), $headers);

				remove_filter('wp_mail_content_type', 'set_html_content_type');
			} else {
				$donors = get_post_meta($item_number, 'donation_donors', true);
				$donors = intval($donors);
				if (!$donors) {
					$donors = 0;
				}
				$donors = $donors + 1;
				update_post_meta($item_number, 'donation_donors', $donors);

				$raised = get_post_meta($item_number, 'donation_raised', true);
				$donor_amount = get_post_meta($invoice, 'donor_amount', true);
				$donor_amount = intval($donor_amount);

				$raised = intval($raised);
				if (!$raised) {
					$raised = 0;
				}
				$raised = $raised + $donor_amount;
				update_post_meta($item_number, 'donation_raised', $raised);

				$donation_options = get_theme_mod('donation_options');
				$email_message_search = array('[name]', '[amount]', '[cause]');
				$email_message_replace = array(get_the_title($invoice), $donor_amount, '<a href="' . get_permalink($item_number) . '">' . get_the_title($item_number) . '</a>');
				$admin_email_subject = $donation_options['admin_email_subject'];
				$admin_email_message = str_replace($email_message_search, $email_message_replace, $donation_options['admin_email_message']);
				$donor_email_subject = $donation_options['donor_email_subject'];
				$donor_email_message = str_replace($email_message_search, $email_message_replace, $donation_options['donor_email_message']);

				add_filter('wp_mail_content_type', 'set_html_content_type');

				$headers[] = 'From: ' . get_bloginfo('blogname') . ' <' . get_bloginfo('admin_email') . '>';

				wp_mail(get_bloginfo('admin_email'), $admin_email_subject, nl2br($admin_email_message), $headers);

				wp_mail(get_post_meta($invoice, 'donor_email', true), $donor_email_subject, nl2br($donor_email_message), $headers);

				remove_filter('wp_mail_content_type', 'set_html_content_type');

				if (get_post_meta($invoice, 'donor_subscribe', true) && get_post_meta($invoice, 'donor_email', true)) {
					require_once("lib/mailchimp/Handling.class.php");
					Handling::handling_request_with_confirmation(get_post_meta($invoice, 'donor_email', true), NULL);
				}
			}

		} else if (strcmp($res, "INVALID") == 0) {

			$mail_To = get_option('admin_email');
			$mail_Subject = "INVALID IPN";
			$mail_Body = $req;

			//wp_mail($mail_To, $mail_Subject, $mail_Body);
		}


	}

}

AnonSec - 2021