<h2>File Contents: /home/planet5/www/4xpips.net/secure/application/default/plugins/payment/allopass/allopass.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/www/4xpips.net/secure/application/default/plugins/payment/allopass/allopass.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php
/**
 * @todo Add cancellations support. 
 * 
 */
class Am_Paysystem_Allopass extends Am_Paysystem_Abstract{
    const PLUGIN_STATUS = self::STATUS_BETA;
    const PLUGIN_REVISION = &#039;4.2.9&#039;;
    
    const API_BASE_URL = &#039;http://api.allopass.com/rest&#039;;
    const API_HASH_FUNCTION = &#039;sha1&#039;; // md5
    const RESPONSE_FORMAT = &#039;xml&#039;; // json
    
    protected $defaultTitle = &#039;Allopass&#039;;
    protected $defaultDescription = &#039;Pay by credit card&#039;;
    
    protected $_canResendPostback = true;
    
    public function _initSetupForm(Am_Form_Setup $form)
    {
        $form-&gt;addText(&#039;site_id&#039;)-&gt;setLabel(array(&#039;Site ID&#039;, &#039;Identifier of the merchant site&#039;));
        $form-&gt;addText(&#039;api_key&#039;)-&gt;setLabel(array(&#039;API Key&#039;, &#039;This keyset is available under My Profile in the Allopass merchant account.&#039;));
        $form-&gt;addText(&#039;api_secret_key&#039;)-&gt;setLabel(array(&#039;API Secret Key&#039;, &#039;This keyset is available under My Profile in the Allopass merchant account.&#039;));
        $form-&gt;addAdvCheckbox(&#039;testing&#039;)-&gt;setLabel(&#039;Test Mode&#039;);
    }

    public function getSupportedCurrencies()
    {
        return array(&#039;EUR&#039;, &#039;GBP&#039;, &#039;USD&#039;);
    }

    function getHash($queryParameters = array())
    {
        ksort($queryParameters);
        $stringToHash = &#039;&#039;;
        foreach ($queryParameters as $parameter =&gt; $value) {
            $stringToHash .= $parameter . (is_array($value) ? implode(&#039;&#039;, $value) : $value);
        }
        $stringToHash .= $this-&gt;getConfig(&#039;api_secret_key&#039;);
        $signature = hash(self::API_HASH_FUNCTION, $stringToHash);
        return $signature;
    }
    
    public function _process(Invoice $invoice, Am_Request $request, Am_Paysystem_Result $result)
    {
        date_default_timezone_set(&#039;UTC&#039;);
        $params = array(
            &#039;api_hash&#039; =&gt; self::API_HASH_FUNCTION,
            &#039;api_ts&#039;   =&gt; time(),
            &#039;api_key&#039;  =&gt; $this-&gt;getConfig(&#039;api_key&#039;),
            &#039;format&#039;   =&gt; self::RESPONSE_FORMAT,

            &#039;site_id&#039;           =&gt; $this-&gt;getConfig(&#039;site_id&#039;),    // Identifier of the merchant site.
            &#039;product_name&#039;      =&gt; $invoice-&gt;getLineDescription(), // Product name.
            &#039;forward_url&#039;       =&gt; $this-&gt;getReturnUrl(),          // URL of the page where customers are forwarded when an access code
                                                                   //has been successfully redeemed or when a payment without code was successful.
            &#039;forward_target&#039;    =&gt; &#039;parent&#039;, // Specifies where to open the forward and error URL. Allowed values are:
                                             // parent – uses the parent window (default)
                                             // current – uses the current window (recommended if the payment dialog is loaded into an iframe)
            &#039;price_mode&#039;        =&gt; &#039;price&#039;,  // Defines what &quot;amount&quot; refers to. Currently, only end-user price is supported (&quot;price&quot;)

            &#039;error_url&#039;         =&gt; $this-&gt;getCancelUrl(),       // URL of the page where customers are forwarded if a transaction is denied.
            &#039;notification_url&#039;  =&gt; $this-&gt;getPluginUrl(&#039;ipn&#039;),  // Payment notification URL
            &#039;amount&#039;            =&gt; $invoice-&gt;first_total,       // Amount of the transaction. The currency is determined by the price point identifier.

            &#039;price_policy&#039;      =&gt; &#039;nearest&#039;, // Affects sorting and prioritization of retrieved price points. Given an amount:
                                             // high-preferred – First retrieves and presents those higher than amount, then those below
                                             // high-only – Only returns price points above the defined amount
                                             // low-preferred – First retrieves and presents those lower than amount, then those higher
                                             // low-only – Only returns price points below the defined amount
                                             // nearest – Pricepoints are sorted and listed by the absolute value difference to amount

            &#039;reference_currency&#039;      =&gt; $invoice-&gt;currency,  // Base currency (EUR is default)
            &#039;merchant_transaction_id&#039; =&gt; $invoice-&gt;public_id, // Identifier of the transaction
            &#039;data&#039;                    =&gt; $invoice-&gt;public_id  // Custom data
            );

        /*
        require_once(dirname(__FILE__).&#039;/apikit/api/AllopassAPI.php&#039;);
        $conf_xml = &#039;&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;
            &lt;data&gt;
                &lt;accounts&gt;
                    &lt;account email=&quot;&quot;&gt;
                        &lt;keys&gt;
                            &lt;api_key&gt;&#039; . $this-&gt;getConfig(&#039;api_key&#039;) . &#039;&lt;/api_key&gt;
                            &lt;private_key&gt;&#039; . $this-&gt;getConfig(&#039;api_secret_key&#039;) . &#039;&lt;/private_key&gt;
                        &lt;/keys&gt;
                    &lt;/account&gt;
                &lt;/accounts&gt;
                &lt;default_hash&gt;&#039; . self::API_HASH_FUNCTION . &#039;&lt;/default_hash&gt;
                &lt;default_format&gt;&#039; . self::RESPONSE_FORMAT . &#039;&lt;/default_format&gt;
                &lt;network_timeout&gt;30&lt;/network_timeout&gt;
                &lt;network_protocol&gt;http&lt;/network_protocol&gt;
                &lt;network_port&gt;80&lt;/network_port&gt;
                &lt;host&gt;api.allopass.com&lt;/host&gt;
            &lt;/data&gt;&#039;;

        $Allopas = new AllopassAPI($conf_xml); // use $configurationEmailAccount variable
        $Button = $Allopas-&gt;createButton($params);
        $BuyUrl = $Button-&gt;getBuyUrl();
        */

        /**/
        ksort($params);
        $hash = $this-&gt;getHash($params);
        $params[&#039;api_sig&#039;] = $hash;
        $request = new Am_Paysystem_Allopass_Request(self::RESPONSE_FORMAT, self::API_HASH_FUNCTION, $this-&gt;getConfig(&#039;api_secret_key&#039;));
        $request-&gt;makeRequest(self::API_BASE_URL . &#039;/onetime/button&#039;, http_build_query($params));
        $BuyUrl = $request-&gt;getResponse()-&gt;buy_url;
        /**/

        if ($request-&gt;isResponseValidated() &amp;&amp; $request-&gt;httpStatusCode == &#039;200&#039;)
        {
            $a = new Am_Paysystem_Action_Redirect($BuyUrl);
            $result-&gt;setAction($a);
        } else {
            throw new Am_Exception_Paysystem_TransactionSource(&#039;Validation failed. Status code: [&#039; . $request-&gt;httpStatusCode . &#039;] Error code: [&#039; . $request-&gt;code . &#039;] Message: [&#039; . $request-&gt;message . &#039;]&#039;);
        }
    }
    
    public function createTransaction(Am_Request $request, Zend_Controller_Response_Http $response, array $invokeArgs)
    {
        return new Am_Paysystem_Transaction_Allopass($this, $request, $response, $invokeArgs);
    }

    public function getRecurringType()
    {
        return self::REPORTS_NOT_RECURRING;
    }
    
    public function getReadme(){
        return &lt;&lt;&lt;CUT
&lt;b&gt;Allopass plugin installation&lt;/b&gt;

 - Configure plugin at aMember CP -&gt; Setup/Configuration -&gt; Allopass

 - Run a test transaction to ensure everything is working correctly.

        
CUT;
    }
}

class Am_Paysystem_Transaction_Allopass extends Am_Paysystem_Transaction_Incoming{
    
    function verifySignature($parameters = array())
    {
        $api_hash = $parameters[&#039;api_hash&#039;] ? $parameters[&#039;api_hash&#039;] : Am_Paysystem_Allopass::API_HASH_FUNCTION;
        $signature = $parameters[&#039;api_sig&#039;];
        unset($parameters[&#039;api_sig&#039;]);
        ksort($parameters);
        $string2compute = &#039;&#039;;
        foreach ($parameters as $name =&gt; $value)
            $string2compute .= $name . $value;
        return (hash($api_hash, $string2compute . $this-&gt;getPlugin()-&gt;getConfig(&#039;api_secret_key&#039;)) == $signature);
    }

    public function getUniqId()
    {
        return $this-&gt;request-&gt;get(&quot;transaction_id&quot;);
    }
    
    public function findInvoiceId(){
        return $this-&gt;request-&gt;get(&quot;merchant_transaction_id&quot;);
    }

    public function validateSource()
    {
        $vars = $this-&gt;request-&gt;getQuery();
        $verified = $this-&gt;verifySignature($vars);

        if(!$verified)
            throw new Am_Exception_Paysystem_TransactionSource(&#039;Received security hash is not correct&#039;);
            
        return true;
    }
    
    public function validateStatus()
    {
        if($this-&gt;request-&gt;get(&#039;test&#039;) == &#039;true&#039; &amp;&amp; !$this-&gt;getPlugin()-&gt;getConfig(&#039;testing&#039;)){
            throw new Am_Exception_Paysystem_TransactionInvalid(&#039;Test IPN received by test mode is not enabled&#039;);
        }
        return ($this-&gt;request-&gt;get(&#039;status&#039;) == &#039;0&#039;); //0 - Success - Payment accepted
        
    }

    public function validateTerms()
    {
        /**
         * @todo Add real validation here; Need to check variables that will be sent from Allopass. 
         */
        return true;
    }

    public function getAmount()
    {
        return $this-&gt;request-&gt;get(&#039;amount&#039;);
    }
    
    public function processValidated()
    {
        $this-&gt;invoice-&gt;addPayment($this);
        
        // Merchants may return an XML response to Allopass so as to explicitly acknowledge that the notification was successfully processed.
        // The Notification Response is optional but recommended. In the absence of a response from the merchant, Allopass will interpret an HTTP 200 return code as a success.
        // A response status of 0 is a failure, 1 is a success. After a failure, Allopass will attempt 4 more times.

        header(&#039;Content-Type: text/xml; charset=UTF-8&#039;);
        echo &#039;&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot; ?&gt;
&lt;response status=&quot;1&quot;&gt;
&lt;code&gt;123&lt;/code&gt;
&lt;message&gt;OK&lt;/message&gt;
&lt;/response&gt;&#039;;
        exit;
    }
}

class Am_Paysystem_Transaction_Allopass_Thanks extends Am_Paysystem_Transaction_Incoming_Thanks
{
    public function findInvoiceId()
    {
        return $this-&gt;request-&gt;get(&quot;merchant_transaction_id&quot;);
    }
    public function getUniqId()
    {
        return $this-&gt;request-&gt;get(&quot;transaction_id&quot;);
    }
    public function validateStatus()
    {
        return true;
    }
    public function validateTerms()
    {
        return true;
    }
    public function validateSource()
    {
        //After a successful payment the Forward URL passes GET parameters that you can collect and use to query the /transaction for verification.
        date_default_timezone_set(&#039;UTC&#039;);
        $params = array(
            &#039;id&#039;       =&gt; $this-&gt;getUniqId(),    // Transaction Identifier
            &#039;api_hash&#039; =&gt; Am_Paysystem_Allopass::API_HASH_FUNCTION,
            &#039;api_ts&#039;   =&gt; time(),
            &#039;api_key&#039;  =&gt; $this-&gt;getPlugin()-&gt;getConfig(&#039;api_key&#039;),
            &#039;format&#039;   =&gt; Am_Paysystem_Allopass::RESPONSE_FORMAT
            );

        /*
        require_once(dirname(__FILE__).&#039;/apikit/api/AllopassAPI.php&#039;);
        $conf_xml = &#039;&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;
            &lt;data&gt;
                &lt;accounts&gt;
                    &lt;account email=&quot;&quot;&gt;
                        &lt;keys&gt;
                            &lt;api_key&gt;&#039; . $this-&gt;getPlugin()-&gt;getConfig(&#039;api_key&#039;) . &#039;&lt;/api_key&gt;
                            &lt;private_key&gt;&#039; . $this-&gt;getPlugin()-&gt;getConfig(&#039;api_secret_key&#039;) . &#039;&lt;/private_key&gt;
                        &lt;/keys&gt;
                    &lt;/account&gt;
                &lt;/accounts&gt;
                &lt;default_hash&gt;&#039; . Am_Paysystem_Allopass::API_HASH_FUNCTION . &#039;&lt;/default_hash&gt;
                &lt;default_format&gt;&#039; . Am_Paysystem_Allopass::RESPONSE_FORMAT . &#039;&lt;/default_format&gt;
                &lt;network_timeout&gt;30&lt;/network_timeout&gt;
                &lt;network_protocol&gt;http&lt;/network_protocol&gt;
                &lt;network_port&gt;80&lt;/network_port&gt;
                &lt;host&gt;api.allopass.com&lt;/host&gt;
            &lt;/data&gt;&#039;;

        $Allopas = new AllopassAPI($conf_xml); // use $configurationEmailAccount variable
        $Transaction = $Allopas-&gt;getTransaction($this-&gt;getUniqId());
        $status = $Transaction-&gt;getStatus();
        */
        
        /**/
        ksort($params);
        $hash = $this-&gt;getHash($params);
        $params[&#039;api_sig&#039;] = $hash;
        $request = new Am_Paysystem_Allopass_Request(Am_Paysystem_Allopass::RESPONSE_FORMAT, Am_Paysystem_Allopass::API_HASH_FUNCTION, $this-&gt;getPlugin()-&gt;getConfig(&#039;api_secret_key&#039;));
        $request-&gt;makeRequest(self::API_BASE_URL . &#039;/transaction&#039;, http_build_query($params));
        $status = $request-&gt;getResponse()-&gt;status;
        /**/

        return ($status == &#039;0&#039;);
    }

    public function getInvoice()
    {
        return $this-&gt;invoice;
    }
}

class Am_Paysystem_Allopass_Request
{
    protected $api_secret_key;
    protected $responseFormat = &#039;xml&#039;;
    protected $hashFunction = &#039;sha1&#039;;

    public $httpStatusCode;
    public $code;
    public $message;


    protected $responseHeaders = array();
    protected $responseBody;


    function __construct($responseFormat, $hashFunction, $api_secret_key) {
        if ($responseFormat)
            $this-&gt;responseFormat = $responseFormat;
        if ($hashFunction)
            $this-&gt;hashFunction = $hashFunction;
        $this-&gt;api_secret_key = $api_secret_key;
    }

    public function makeRequest($url, $post=&#039;&#039;)
    {
        $sock = curl_init();
        $headers = array();
        if ($this-&gt;responseFormat == &#039;json&#039;)
            $headers[] = &#039;Content-type: application/json&#039;;
        elseif ($this-&gt;responseFormat == &#039;xml&#039;)
            $headers[] = &#039;Content-type: text/xml&#039;;

        /*
        curl_setopt_array($sock, array(
            CURLOPT_HEADER =&gt; true,
            CURLOPT_RETURNTRANSFER =&gt; true,
            CURLOPT_FOLLOWLOCATION =&gt; false,
            CURLOPT_CONNECTTIMEOUT =&gt; 10,
            CURLOPT_LOW_SPEED_TIME =&gt; 10,
            CURLOPT_TIMEOUT =&gt; 10,
            CURLOPT_POST =&gt; true,
            CURLOPT_POSTFIELDS =&gt; $post
        ));
        */
        curl_setopt($sock, CURLOPT_TIMEOUT, 30);
        curl_setopt($sock, CURLOPT_PORT,    80);
        curl_setopt($sock, CURLOPT_HEADER,  true);
        curl_setopt($sock, CURLOPT_USERAGENT, &#039;Allopass-ApiKit-PHP5&#039;);
        curl_setopt($sock, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($sock, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($sock, CURLOPT_SSL_VERIFYHOST, false);
        curl_setopt($sock, CURLOPT_POST, true);
        curl_setopt($sock, CURLOPT_POSTFIELDS, $post);
        
//        if (count($headers) &gt; 0)
//            curl_setopt($sock,  CURLOPT_HTTPHEADER, $headers);
        
        curl_setopt($sock, CURLOPT_URL, $url);
        $response = curl_exec($sock);
        
        if (0 &lt; ($curlErrno = curl_errno($sock))) {
            //trigger_error(&quot;CURL Error ($curlErrno): &quot; . curl_error($sock), E_USER_NOTICE);
            throw new Am_Exception_Paysystem(&quot;CURL Error ($curlErrno): &quot; . curl_error($sock));
        }

        $this-&gt;httpStatusCode = curl_getinfo($sock, CURLINFO_HTTP_CODE);
        $httpHeaderSize = curl_getinfo($sock, CURLINFO_HEADER_SIZE);
        curl_close($sock);

        $rawHeaders = substr($response, 0, $httpHeaderSize - 4);
        $this-&gt;responseBody = substr($response, $httpHeaderSize);

        if (preg_match(&#039;/code=&quot;(\d+)&quot; message=&quot;(.*)&quot;/&#039;, $response, $matches)){
            $this-&gt;code = $matches[1];
            $this-&gt;message = $matches[2];
        }

        foreach (explode(&quot;\r\n&quot;, $rawHeaders) as $header) {
            if (strpos($header, &quot;:&quot;) &gt; 0) {
                list($name, $value) = explode(&#039;:&#039;, $header);
                $name = trim($name);
                if ($name)
                    $this-&gt;responseHeaders[$name] = trim($value);
            }
        }
        
    } 
    
    public function isResponseValidated()
    {
        if (isset($this-&gt;responseHeaders[&#039;X-Allopass-Response-Signature&#039;])) {
            $returnedResponseSignature = $this-&gt;responseHeaders[&#039;X-Allopass-Response-Signature&#039;];
            $computedResponseSignature = hash($this-&gt;hashFunction, $this-&gt;responseBody . $this-&gt;api_secret_key);
            $responseValidated = (trim($returnedResponseSignature) == trim($computedResponseSignature));
        } else {
            $responseValidated = false;
        }
        return $responseValidated;
    }
    
    public function getResponse()
    {
        //if ($this-&gt;responseFormat == &#039;json&#039;)
        if (strpos($this-&gt;responseBody, &#039;&quot;response&quot;: {&#039;) &gt; 0)
            $response = json_decode($this-&gt;responseBody);

        //if ($this-&gt;responseFormat == &#039;xml&#039;) &gt; 0) {
        if (strpos($this-&gt;responseBody, &#039;response xmlns&#039;) &gt; 0)
            $response = simplexml_load_string($this-&gt;responseBody);

        if (!$response)
            $response = $this-&gt;responseBody;

        return $response;
    }
    
}

        /*
        &lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot; ?&gt;
        &lt;response xmlns=&quot;https://api.allopass.com/rest&quot; code=&quot;0&quot; message=&quot;OK&quot;&gt;
        &lt;id&gt;123456&lt;/id&gt;
        &lt;name&gt;&lt;![CDATA[PRODUCT NAME]]&gt;&lt;/name&gt;
        &lt;purchase_url&gt;&lt;![CDATA[http://localhost/purchase]]&gt;&lt;/purchase_url&gt;
        &lt;forward_url&gt;&lt;![CDATA[http://localhost/product]]&gt;&lt;/forward_url&gt;
        &lt;/response&gt;

        {&quot;response&quot;: {
            &quot;@attributes&quot;: {
                &quot;code&quot;: &quot;0&quot;,
                &quot;message&quot;: &quot;OK&quot;
            },
            &quot;id&quot;: &quot;123456&quot;,
            &quot;name&quot;: &quot;PRODUCT NAME&quot;,
            &quot;purchase_url&quot;: &quot;http:\/\/localhost\/purchase&quot;,
            &quot;forward_url&quot;: &quot; http:\/\/localhost\/product&quot;
        }
        */
        
       
        /*
        Response:
        
        creation_date
            Date of server reply (GMT)
            2009-08-30T12:04:21+00:00
        
        button_id
            Temporary button ID issued by Allopass
            12345678-1234-1234-1234-123456789012

        reference_currency
            Base currency (euro is default)
            USD

        website
            Customer website information – site name, forwarding URL, Allopass ID, category, audience restrictions 
            123456
        
        buy_url
            Secure button link provided by allopass
            payment.allopass.com URL with associated btnid

        checkout_button
            Code to create a modal window for merchant use payment
            allopass.com URL with associated btnid and carousel avascript code carousel presentation
        */        

?&gt;
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fwww%2F4xpips.net%2Fsecure%2Fapplication%2Fdefault%2Fplugins%2Fpayment%2Fallopass'>⬅ Back to Directory</a>