sign up for one.', 'paypal-framework'), 'https://www.paypal.com/us/mrb/pal=TJ287296FD8KW'); ?>
sign up for it.', 'paypal-framework'), 'https://www.paypal.com/us/cgi-bin/webscr?cmd=_wp-pro-overview'); ?>
set it up.", 'paypal-framework' ), 'https://www.paypal.com/cgi-bin/webscr?cmd=xpt/cps/general/DPRPLaunch-outside'); ?>
"Profile" -> "Request API credentials" -> "PayPal API" -> "Set up PayPal API credentials and permissions". If asked, you want to request an "API signature" not a certificate. All the data that you are given should easily fit in this form.', 'paypal-framework'); ?>
Profile on the My Account tab.', 'paypal-framework'); ?>
Instant Payment Notification Preferences in the Selling Preferences column.', 'paypal-framework'); ?>
Edit IPN Settings to specify your listener's URL and activate the listener.", 'paypal-framework'); ?>
Save.', 'paypal-framework'); ?>
Back to Profile Summary to return to the Profile after activating your listener.", 'paypal-framework'); ?>
$this->_settings['version'],
'PWD' => $this->_settings["password-{$this->_settings['sandbox']}"],
'USER' => $this->_settings["username-{$this->_settings['sandbox']}"],
'SIGNATURE' => $this->_settings["signature-{$this->_settings['sandbox']}"],
'CURRENCYCODE' => $this->_settings['currency'],
);
return wp_parse_args( $req, $defaults );
}
/**
* Convert an associative array into an NVP string
*
* @param array Associative array to create NVP string from
* @param string[optional] Used to separate arguments (defaults to &)
*
* @return string NVP string
*/
public function makeNVP( $reqArray, $sep = '&' ) {
if ( !is_array($reqArray) )
return $reqArray;
return http_build_query( $reqArray, '', $sep );
}
/**
* hashCall: Function to perform the API call to PayPal using API signature
* @param string|array $args Parameters needed for call
*
* @return array On success return associtive array containing the response from the server.
*/
public function hashCall( $args ) {
$params = array(
'body' => $this->_prepRequest($args),
'sslverify' => apply_filters( 'paypal_framework_sslverify', false ),
'timeout' => 30,
);
// Send the request
$resp = wp_remote_post( $this->_endpoint[$this->_settings['sandbox']], $params );
// If the response was valid, decode it and return it. Otherwise return a WP_Error
if ( !is_wp_error($resp) && $resp['response']['code'] >= 200 && $resp['response']['code'] < 300 ) {
// Used for debugging.
$request = $this->_sanitizeRequest($params['body']);
$message = __( 'Request:', 'paypal-framework' );
$message .= "\r\n".print_r($request, true)."\r\n\r\n";
$message .= __( 'Response:', 'paypal-framework' );
$message .= "\r\n".print_r(wp_parse_args( $resp['body'] ), true)."\r\n\r\n";
$this->_debug_mail( __( 'PayPal Framework - hashCall sent successfully', 'paypal-framework' ), $message );
return wp_parse_args($resp['body']);
} else {
$request = $this->_sanitizeRequest($params['body']);
$message = __( 'Request:', 'paypal-framework' );
$message .= "\r\n".print_r($request, true)."\r\n\r\n";
$message .= __( 'Response:', 'paypal-framework' );
$message .= "\r\n".print_r($resp, true)."\r\n\r\n";
$this->_debug_mail( __( 'PayPal Framework - hashCall failed', 'paypal-framework' ), $message );
if ( !is_wp_error($resp) )
$resp = new WP_Error('http_request_failed', $resp['response']['message'], $resp['response']);
return $resp;
}
}
private function _sanitizeRequest($request) {
/**
* If this is a live request, hide sensitive data in the debug
* E-Mails we send
*/
if ( $this->_settings['sandbox'] != 'sandbox' ) {
if ( !empty( $request['ACCT'] ) )
$request['ACCT'] = str_repeat('*', strlen($request['ACCT'])-4) . substr($request['ACCT'], -4);
if ( !empty( $request['EXPDATE'] ) )
$request['EXPDATE'] = str_repeat('*', strlen($request['EXPDATE']));
if ( !empty( $request['CVV2'] ) )
$request['CVV2'] = str_repeat('*', strlen($request['CVV2']));
}
return $request;
}
/**
* Used to direct the user to the Express Checkout
*
* @param string|array $args Parameters needed for call. *token is REQUIRED*
*/
public function sendToExpressCheckout($args) {
$args['cmd'] = '_express-checkout';
$nvpString = $this->makeNVP($args);
wp_redirect($this->_url[$this->_settings['sandbox']] . "?{$nvpString}");
exit;
}
public function template_redirect() {
// Check that the query var is set and is the correct value.
if ( get_query_var( $this->_listener_query_var ) == $this->_listener_query_var_value )
$this->listener();
}
/**
* This is our listener. If the proper query var is set correctly it will
* attempt to handle the response.
*/
public function listener() {
$_POST = stripslashes_deep($_POST);
// Try to validate the response to make sure it's from PayPal
if ($this->_validateMessage())
$this->_processMessage();
// Stop WordPress entirely
exit;
}
/**
* Get the PayPal URL based on current setting for sandbox vs live
*/
public function getUrl() {
return $this->_url[$this->_settings['sandbox']];
}
public function _fixDebugEmails() {
$this->_settings['debugging_email'] = preg_split('/\s*,\s*/', $this->_settings['debugging_email']);
$this->_settings['debugging_email'] = array_filter($this->_settings['debugging_email'], 'is_email');
$this->_settings['debugging_email'] = implode(',', $this->_settings['debugging_email']);
}
private function _debug_mail( $subject, $message ) {
// Used for debugging.
if ( $this->_settings['debugging'] == 'on' && !empty($this->_settings['debugging_email']) )
wp_mail( $this->_settings['debugging_email'], $subject, $message );
}
/**
* Validate the message by checking with PayPal to make sure they really
* sent it
*/
private function _validateMessage() {
// Set the command that is used to validate the message
$_POST['cmd'] = "_notify-validate";
// We need to send the message back to PayPal just as we received it
$params = array(
'body' => $_POST,
'sslverify' => apply_filters( 'paypal_framework_sslverify', false ),
'timeout' => 30,
);
// Send the request
$resp = wp_remote_post( $this->_url[$this->_settings['sandbox']], $params );
// Put the $_POST data back to how it was so we can pass it to the action
unset( $_POST['cmd'] );
$message = __('URL:', 'paypal-framework' );
$message .= "\r\n".print_r($this->_url[$this->_settings['sandbox']], true)."\r\n\r\n";
$message .= __('Options:', 'paypal-framework' );
$message .= "\r\n".print_r($this->_settings, true)."\r\n\r\n";
$message .= __('Response:', 'paypal-framework' );
$message .= "\r\n".print_r($resp, true)."\r\n\r\n";
$message .= __('Post:', 'paypal-framework' );
$message .= "\r\n".print_r($_POST, true);
// If the response was valid, check to see if the request was valid
if ( !is_wp_error($resp) && $resp['response']['code'] >= 200 && $resp['response']['code'] < 300 && (strcmp( $resp['body'], "VERIFIED") == 0)) {
$this->_debug_mail( __( 'IPN Listener Test - Validation Succeeded', 'paypal-framework' ), $message );
return true;
} else {
// If we can't validate the message, assume it's bad
$this->_debug_mail( __( 'IPN Listener Test - Validation Failed', 'paypal-framework' ), $message );
return false;
}
}
/**
* Add our query var to the list of query vars
*/
public function addPaypalListenerVar($public_query_vars) {
$public_query_vars[] = $this->_listener_query_var;
return $public_query_vars;
}
/**
* Throw an action based off the transaction type of the message
*/
private function _processMessage() {
do_action( 'paypal-ipn', $_POST );
$actions = array( 'paypal-ipn' );
$subject = sprintf( __( 'IPN Listener Test - %s', 'paypal-framework' ), '_processMessage()' );
if ( !empty($_POST['txn_type']) ) {
do_action("paypal-{$_POST['txn_type']}", $_POST);
$actions[] = "paypal-{$_POST['txn_type']}";
}
$message = sprintf( __( 'Actions thrown: %s', 'paypal-framework' ), implode( ', ', $actions ) );
$message .= "\r\n\r\n";
$message .= sprintf( __( 'Passed to actions: %s', 'paypal-framework' ), "\r\n" . print_r($_POST, true) );
$this->_debug_mail( $subject, $message );
}
}
/**
* Helper functions
*/
function hashCall ($args) {
$wpPayPalFramework = wpPayPalFramework::getInstance();
return $wpPayPalFramework->hashCall($args);
}
function paypalFramework_legacy_function() {
//Only load if the function doesn't already exist
if ( !function_exists('hash_call') ) {
/**
* Support the old method of using hash_call
*/
function hash_call($methodName, $nvpStr) {
_deprecated_function(__FUNCTION__, '0.1', 'wpPayPalFramework::hashCall()');
$nvpStr = wp_parse_args( $nvpStr );
$nvpStr['METHOD'] = $methodName;
$nvpStr = array_map('urldecode', $nvpStr);
$wpPayPalFramework = wpPayPalFramework::getInstance();
return $wpPayPalFramework->hashCall($nvpStr);
}
}
}
// Instantiate our class
$wpPayPalFramework = wpPayPalFramework::getInstance();