<?php

use RCP\Membership_Level;

/**
 * PayPal Standard Payment Gateway
 *
 * @package     Restrict Content Pro
 * @subpackage  Classes/Gateways/PayPal
 * @copyright   Copyright (c) 2017, Pippin Williamson
 * @license     http://opensource.org/licenses/gpl-2.0.php GNU Public License
 * @since       2.1
 */

class RCP_Payment_Gateway_PayPal extends RCP_Payment_Gateway {

	private $api_endpoint;
	private $checkout_url;
	protected $username;
	protected $password;
	protected $signature;

	/**
	 * Get things going
	 *
	 * @access public
	 * @since  2.1
	 * @return void
	 */
	public function init() {

		global $rcp_options;

		$this->supports[] = 'one-time';
		$this->supports[] = 'recurring';
		$this->supports[] = 'fees';
		$this->supports[] = 'trial';
		$this->supports[] = 'expiration-extension-on-renewals'; // @link https://github.com/restrictcontentpro/restrict-content-pro/issues/1259

		if ( $this->test_mode ) {

			$this->api_endpoint = 'https://api-3t.sandbox.paypal.com/nvp';
			$this->checkout_url = 'https://www.sandbox.paypal.com/webscr&cmd=_express-checkout&token=';

		} else {

			$this->api_endpoint = 'https://api-3t.paypal.com/nvp';
			$this->checkout_url = 'https://www.paypal.com/webscr&cmd=_express-checkout&token=';

		}

		if ( rcp_has_paypal_api_access() ) {

			$creds = rcp_get_paypal_api_credentials();

			$this->username  = $creds['username'];
			$this->password  = $creds['password'];
			$this->signature = $creds['signature'];

		}

	}

	/**
	 * Process registration
	 *
	 * @access public
	 * @since  2.1
	 * @return void
	 */
	public function process_signup() {

		global $rcp_options;

		if ( $this->test_mode ) {
			$paypal_redirect = 'https://www.sandbox.paypal.com/cgi-bin/webscr/?';
		} else {
			$paypal_redirect = 'https://www.paypal.com/cgi-bin/webscr/?';
		}

		$cancel_url = wp_get_referer();
		if ( empty( $cancel_url ) ) {
			$cancel_url = get_permalink( $rcp_options['registration_page'] );
		}

		// Setup PayPal arguments
		$paypal_args = array(
			'business'      => trim( $rcp_options['paypal_email'] ),
			'email'         => $this->email,
			'item_number'   => $this->subscription_key,
			'item_name'     => $this->subscription_name,
			'no_shipping'   => '1',
			'shipping'      => '0',
			'no_note'       => '1',
			'currency_code' => $this->currency,
			'charset'       => get_bloginfo( 'charset' ),
			'custom'        => $this->user_id,
			'rm'            => '2',
			'return'        => $this->return_url,
			'cancel_return' => $cancel_url,
			'notify_url'    => add_query_arg( 'listener', 'IPN', home_url( 'index.php' ) ),
			'cbt'           => get_bloginfo( 'name' ),
			'tax'           => 0,
			'page_style'    => ! empty( $rcp_options['paypal_page_style'] ) ? trim( $rcp_options['paypal_page_style'] ) : '',
			'bn'            => 'RestrictContentPro_SP_PPCP'
		);

		// recurring paypal payment
		if ( $this->auto_renew && ! empty( $this->length ) ) {

			// recurring paypal payment
			$paypal_args['cmd'] = '_xclick-subscriptions';
			$paypal_args['src'] = '1';
			$paypal_args['sra'] = '1';
			$paypal_args['a3']  = $this->amount;

			$paypal_args['p3'] = $this->length;

			switch ( $this->length_unit ) {

				case "day" :

					$paypal_args['t3'] = 'D';
					break;

				case "month" :

					$paypal_args['t3'] = 'M';
					break;

				case "year" :

					$paypal_args['t3'] = 'Y';
					break;

			}

			if ( 'renewal' === $this->payment->transaction_type && $this->membership->is_active() ) {

				/*
				 * If this is a renewal then we want to charge the customer immediately, but then delay the
				 * first renewal payment until the RCP expiration date.
				 *
				 * @link https://github.com/restrictcontentpro/restrict-content-pro/issues/1259
				 */
				$current_date = new DateTime( 'now' );
				$expiration   = new DateTime( date( 'Y-m-d', strtotime( $this->membership->calculate_expiration( false ) ) ) );
				$date_diff    = $current_date->diff( $expiration );

				$paypal_args['a1'] = $this->initial_amount;
				$paypal_args['t1'] = 'D';
				$paypal_args['p1'] = $date_diff->days;

				/*
				 * PayPal has a maximum of 90 days for trial periods.
				 * If the difference between today & the next bill date is greater than 90 days then we need to
				 * split it into two trial periods.
				 */
				if ( $date_diff->days > 90 ) {
					// Set up the default period times.
					$first_period  = $date_diff->days;
					$second_period = 0;
					$unit          = 'D';

					if ( ( $date_diff->days - 90 ) <= 90 ) {
						// t1 = D, t2 = D
						$unit          = 'D';
						$second_period = $date_diff->days - 90;
						$first_period  = 90;
					} elseif ( $date_diff->days / 7 <= 52 ) {
						// t1 = D, t2 = W
						$unit          = 'W';
						$total_weeks   = $date_diff->days / 7;
						$second_period = (int) floor( $total_weeks );
						$first_period  = (int) absint( round( ( 7 * ( $total_weeks - $second_period ) ) ) );
					} elseif ( $date_diff->days / 7 > 52 ) {
						// t1 = D, t2 = M
						$unit          = 'M';
						$first_period  = $date_diff->d;
						$second_period = $date_diff->m;
					}

					// Reudce things to be a bit more human readable.
					switch ( $unit ) {
						case 'W' :
							if ( 52 === $second_period ) {
								$unit          = 'Y';
								$second_period = 1;
							} elseif ( 4 === $second_period ) {
								$unit          = 'M';
								$second_period = 1;
							}
							break;

						case 'M' :
							if ( 12 === $second_period ) {
								$unit          = 'Y';
								$second_period = 1;
							}
							break;
					}

					// Only create two trials if necessary.
					if ( ! empty( $first_period ) ) {
						$paypal_args['p1'] = $first_period;
						$paypal_args['t1'] = 'D';
						$paypal_args['a2'] = 0;
						$paypal_args['p2'] = absint( $second_period );
						$paypal_args['t2'] = $unit;
					} else {
						$paypal_args['p1'] = absint( $second_period );
						$paypal_args['t1'] = $unit;
					}
				}

			} elseif ( $this->initial_amount != $this->amount ) {

				/*
				 * Add a trial period to charge the different "initial amount".
				 * This will be used for free trials, one-time discount codes, signup fees,
				 * and prorated credits.
				 */

				// By default we use the same values as the normal subscription period.
				$paypal_args['a1'] = $this->initial_amount;
				$paypal_args['p1'] = $this->length;
				$paypal_args['t1'] = $paypal_args['t3'];

				/*
				 * If this is not a free trial then the trial duration would have already been set above
				 * using the normal duration fields.
				 *
				 * If this is a free trial, then we'll override the values using the trial duration fields.
				 */

				if ( $this->is_trial() ) {
					$paypal_args['a1'] = 0;
					$paypal_args['p1'] = $this->subscription_data['trial_duration'];

					switch ( $this->subscription_data['trial_duration_unit'] ) {

						case 'day':
							$paypal_args['t1'] = 'D';
							break;

						case 'month':
							$paypal_args['t1'] = 'M';
							break;

						case 'year':
							$paypal_args['t1'] = 'Y';
							break;
					}
				}

			}

		} else {

			// one time payment
			$paypal_args['cmd']    = '_xclick';
			$paypal_args['amount'] = $this->initial_amount;

		}

		$paypal_args = apply_filters( 'rcp_paypal_args', $paypal_args, $this );

		// Build query
		$paypal_redirect .= http_build_query( $paypal_args );

		// Fix for some sites that encode the entities
		$paypal_redirect = str_replace( '&amp;', '&', $paypal_redirect );

		// Redirect to paypal
		header( 'Location: ' . $paypal_redirect );
		exit;

	}

	/**
	 * Process PayPal IPN
	 *
	 * @access public
	 * @since  2.1
	 * @return void
	 */
	public function process_webhooks() {

		if ( ! isset( $_GET['listener'] ) || strtoupper( $_GET['listener'] ) != 'IPN' ) {
			return;
		}

		rcp_log( 'Starting to process PayPal Standard IPN.' );

		global $rcp_options;

		nocache_headers();

		if ( ! class_exists( 'IpnListener' ) ) {
			// instantiate the IpnListener class
			include( RCP_PLUGIN_DIR . 'pro/includes/gateways/paypal/paypal-ipnlistener.php' );
		}

		$listener = new IpnListener();
		$verified = false;

		if ( $this->test_mode ) {
			$listener->use_sandbox = true;
		}

		/*
		if( isset( $rcp_options['ssl'] ) ) {
			$listener->use_ssl = true;
		} else {
			$listener->use_ssl = false;
		}
		*/

		//To post using the fsockopen() function rather than cURL, use:
		if ( isset( $rcp_options['disable_curl'] ) ) {
			$listener->use_curl = false;
		}

		if ( ! isset( $rcp_options['disable_ipn_verify'] ) ) {
			try {
				$listener->requirePostMethod();
				$verified = $listener->processIpn();
			} catch ( Exception $e ) {
				status_header( 402 );
				//die( 'IPN exception: ' . $e->getMessage() );
			}
		}

		/*
		The processIpn() method returned true if the IPN was "VERIFIED" and false if it
		was "INVALID".
		*/
		if ( $verified || isset( $_POST['verification_override'] ) || ( $this->test_mode || isset( $rcp_options['disable_ipn_verify'] ) ) ) {

			status_header( 200 );

			$user_id = 0;
			$posted  = apply_filters( 'rcp_ipn_post', $_POST ); // allow $_POST to be modified

			if ( ! empty( $posted['subscr_id'] ) ) {

				$this->membership = rcp_get_membership_by( 'gateway_subscription_id', $posted['subscr_id'] );

			}

			// Get by subscription key.
			if ( empty( $this->membership ) && ! empty( $posted['item_number'] ) ) {

				$membership = rcp_get_membership_by( 'subscription_key', sanitize_text_field( $posted['item_number'] ) );

				if ( ! empty( $membership ) ) {
					$this->membership = $membership;
				}

			}

			if ( empty( $this->membership ) ) {
				rcp_log( sprintf( 'PayPal IPN Failed: unable to find associated membership in RCP. Item Name: %s; Item Number: %d; TXN Type: %s; TXN ID: %s', $posted['item_name'], $posted['item_number'], $posted['txn_type'], $posted['txn_id'] ), true );
				die( 'no membership found' );
			}

			if ( empty( $user_id ) ) {
				$user_id = $this->membership->get_user_id();
			}

			$member = new RCP_Member( $this->membership->get_user_id() ); // for backwards compat

			rcp_log( sprintf( 'Processing IPN for membership #%d.', $this->membership->get_id() ) );

			if ( ! $this->membership->get_object_id() ) {
				die( 'no membership level found' );
			}

			if ( ! rcp_get_membership_level( $this->membership->get_object_id() ) instanceof Membership_Level ) {
				die( 'no membership level found' );
			}

			$rcp_payments = new RCP_Payments();

			$subscription_key = $posted['item_number'];
			$has_trial        = isset( $posted['mc_amount1'] ) && '0.00' == $posted['mc_amount1'];

			if ( ! $has_trial && isset( $posted['mc_gross'] ) ) {
				$amount = number_format( (float) $posted['mc_gross'], 2, '.', '' );
			} elseif ( $has_trial && isset( $posted['mc_amount1'] ) ) {
				$amount = number_format( (float) $posted['mc_amount1'], 2, '.', '' );
			} else {
				$amount = false;
			}

			$payment_status = ! empty( $posted['payment_status'] ) ? $posted['payment_status'] : false;
			$currency_code  = $posted['mc_currency'];

			$pending_payment_id = rcp_get_membership_meta( $this->membership->get_id(), 'pending_payment_id', true );
			$pending_payment    = ! empty( $pending_payment_id ) ? $rcp_payments->get_payment( $pending_payment_id ) : false;

			// Check for invalid amounts in the IPN data
			if ( ! empty( $pending_payment ) && ! empty( $pending_payment->amount ) && ! empty( $amount ) && in_array( $posted['txn_type'], array( 'web_accept', 'subscr_payment' ) ) ) {

				if ( $amount < $pending_payment->amount ) {

					$this->membership->add_note( sprintf( __( 'Incorrect amount received in the IPN. Amount received was %s. The amount should have been %s. PayPal Transaction ID: %s', 'rcp' ), $amount, $pending_payment->amount, sanitize_text_field( $posted['txn_id'] ) ) );

					die( 'incorrect amount' );

				}

			}

			// setup the payment info in an array for storage
			$payment_data = array(
				'date'             => ! empty( $posted['payment_date'] ) ? date( 'Y-m-d H:i:s', strtotime( $posted['payment_date'], current_time( 'timestamp' ) ) ) : date( 'Y-m-d H:i:s', strtotime( 'now', current_time( 'timestamp' ) ) ),
				'subscription'     => $posted['item_name'],
				'payment_type'     => $posted['txn_type'],
				'subscription_key' => $subscription_key,
				'user_id'          => $this->membership->get_user_id(),
				'customer_id'      => $this->membership->get_customer_id(),
				'membership_id'    => $this->membership->get_id(),
				'transaction_id'   => ! empty( $posted['txn_id'] ) ? $posted['txn_id'] : false,
				'status'           => 'complete',
				'gateway'          => 'paypal'
			);

			if ( false !== $amount ) {
				$payment_data['amount'] = $amount;
			}

			// We don't want any empty values in the array in order to avoid deleting a transaction ID or other data.
			foreach ( $payment_data as $payment_key => $payment_value ) {
				if ( empty( $payment_value ) ) {
					unset( $payment_data[ $payment_key ] );
				}
			}

			do_action( 'rcp_valid_ipn', $payment_data, $user_id, $posted );

			if ( $posted['txn_type'] == 'web_accept' || $posted['txn_type'] == 'subscr_payment' ) {

				// only check for an existing payment if this is a payment IPD request
				if ( ! empty( $posted['txn_id'] ) && $rcp_payments->payment_exists( $posted['txn_id'] ) ) {

					do_action( 'rcp_ipn_duplicate_payment', $posted['txn_id'], $member, $this );

					die( 'duplicate IPN detected' );
				}
			}

			/* now process the kind of subscription/payment */

			// Subscriptions
			switch ( $posted['txn_type'] ) :

				case "subscr_signup" :
					// when a new user signs up

					rcp_log( 'Processing PayPal Standard subscr_signup IPN.' );

					$this->membership->set_gateway_subscription_id( $posted['subscr_id'] );
					$this->membership->set_recurring( true );

					if ( $has_trial && ! empty( $pending_payment_id ) ) {
						// This activates the trial.
						$rcp_payments->update( $pending_payment_id, $payment_data );
					}

					do_action( 'rcp_ipn_subscr_signup', $user_id );
					do_action( 'rcp_webhook_recurring_payment_profile_created', $member, $this );


					die( 'successful subscr_signup' );

					break;

				case "subscr_payment" :

					// when a user makes a recurring payment

					rcp_log( 'Processing PayPal Standard subscr_payment IPN.' );

					if ( 'failed' == strtolower( $posted['payment_status'] ) ) {

						// Recurring payment failed.
						$this->membership->add_note( sprintf( __( 'Transaction ID %s failed in PayPal.', 'rcp' ), $posted['txn_id'] ) );

						die( 'Subscription payment failed' );

					} elseif ( 'pending' == strtolower( $posted['payment_status'] ) ) {

						// Recurring payment pending (such as echeck).
						$pending_reason = ! empty( $posted['pending_reason'] ) ? $posted['pending_reason'] : __( 'unknown', 'rcp' );
						$this->membership->add_note( sprintf( __( 'Transaction ID %s is pending in PayPal for reason: %s', 'rcp' ), $posted['txn_id'], $pending_reason ) );

						die( 'Subscription payment pending' );

					}

					// Payment completed.

					if ( ! empty( $pending_payment_id ) ) {

						$this->membership->set_recurring( true );

						// This activates the membership.
						$rcp_payments->update( $pending_payment_id, $payment_data );

						$payment_id = $pending_payment_id;

					} else {

						$this->membership->renew( true );

						$payment_data['subtotal']         = $payment_data['amount'];
						$payment_data['transaction_type'] = 'renewal';

						// record this payment in the database
						$payment_id = $rcp_payments->insert( $payment_data );

						do_action( 'rcp_webhook_recurring_payment_processed', $member, $payment_id, $this );

					}

					do_action( 'rcp_ipn_subscr_payment', $user_id );
					do_action( 'rcp_gateway_payment_processed', $member, $payment_id, $this );

					die( 'successful subscr_payment' );

					break;

				case "subscr_cancel" :

					rcp_log( 'Processing PayPal Standard subscr_cancel IPN.' );

					if ( isset( $posted['subscr_id'] ) && $posted['subscr_id'] == $this->membership->get_gateway_subscription_id() && 'cancelled' !== $this->membership->get_status() ) {

						// If this is a completed payment plan, we can skip any cancellation actions. This is handled in renewals.
						if ( $this->membership->has_payment_plan() && $this->membership->at_maximum_renewals() ) {
							rcp_log( sprintf( 'Membership #%d has completed its payment plan - not cancelling.', $this->membership->get_id() ) );
							die( 'membership payment plan completed' );
						}

						// user is marked as cancelled but retains access until end of term
						if ( $this->membership->is_active() ) {
							$this->membership->cancel();
							$this->membership->add_note( __( 'Membership cancelled via PayPal Standard IPN.', 'rcp' ) );
						} else {
							rcp_log( sprintf( 'Membership #%d is not active - not cancelling.', $this->membership->get_id() ) );
						}

						do_action( 'rcp_ipn_subscr_cancel', $user_id );
						do_action( 'rcp_webhook_cancel', $member, $this );

						die( 'successful subscr_cancel' );

					}

					break;

				case "subscr_failed" :

					rcp_log( 'Processing PayPal Standard subscr_failed IPN.' );

					if ( ! empty( $posted['txn_id'] ) ) {

						$this->webhook_event_id = sanitize_text_field( $posted['txn_id'] );

					} elseif ( ! empty( $posted['ipn_track_id'] ) ) {

						$this->webhook_event_id = sanitize_text_field( $posted['ipn_track_id'] );
					}

					do_action( 'rcp_recurring_payment_failed', $member, $this );
					do_action( 'rcp_ipn_subscr_failed' );

					die( 'successful subscr_failed' );

					break;

				case "subscr_eot" :

					// user's subscription has reached the end of its term

					rcp_log( 'Processing PayPal Standard subscr_eot IPN.' );

					if ( isset( $posted['subscr_id'] ) && $posted['subscr_id'] == $this->membership->get_gateway_subscription_id() && 'cancelled' !== $this->membership->get_status() ) {

						$this->membership->set_status( 'expired' );

					}

					do_action( 'rcp_ipn_subscr_eot', $user_id );


					die( 'successful subscr_eot' );

					break;

				case "web_accept" :

					rcp_log( sprintf( 'Processing PayPal Standard web_accept IPN. Payment status: %s', $payment_status ) );

					switch ( strtolower( $payment_status ) ) :

						case 'completed' :

							if ( ! empty( $pending_payment_id ) ) {

								// Complete the pending payment. This activates the membership.
								$rcp_payments->update( $pending_payment_id, $payment_data );

								$payment_id = $pending_payment_id;

							} else {

								// Renew the account.
								$this->membership->renew();

								$payment_id = $rcp_payments->insert( $payment_data );

							}

							do_action( 'rcp_gateway_payment_processed', $member, $payment_id, $this );

							break;

						case 'denied' :
						case 'expired' :
						case 'failed' :
						case 'voided' :
							$this->membership->cancel();
							break;

					endswitch;


					die( 'successful web_accept' );

					break;

				case "cart" :
				case "express_checkout" :
				default :

					break;

			endswitch;

		} else {

			rcp_log( 'Invalid PayPal IPN attempt.', true );

			status_header( 400 );
			die( 'invalid IPN' );

		}

	}

}