Files
roi-theme/wp-content/plugins/restrict-content-pro/pro/includes/gateways/class-rcp-payment-gateway-paypal.php
root a22573bf0b Commit inicial - WordPress Análisis de Precios Unitarios
- WordPress core y plugins
- Tema Twenty Twenty-Four configurado
- Plugin allow-unfiltered-html.php simplificado
- .gitignore configurado para excluir wp-config.php y uploads

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-03 21:04:30 -06:00

664 lines
19 KiB
PHP

<?php
use RCP\Membership_Level;
/**
* PayPal Standard Payment Gateway
*
* @package Restrict Content Pro
* @subpackage Classes/Gateways/PayPal
* @copyright Copyright (c) 2017, Pippin Williamson
* @license http://opensource.org/licenses/gpl-2.0.php GNU Public License
* @since 2.1
*/
class RCP_Payment_Gateway_PayPal extends RCP_Payment_Gateway {
private $api_endpoint;
private $checkout_url;
protected $username;
protected $password;
protected $signature;
/**
* Get things going
*
* @access public
* @since 2.1
* @return void
*/
public function init() {
global $rcp_options;
$this->supports[] = 'one-time';
$this->supports[] = 'recurring';
$this->supports[] = 'fees';
$this->supports[] = 'trial';
$this->supports[] = 'expiration-extension-on-renewals'; // @link https://github.com/restrictcontentpro/restrict-content-pro/issues/1259
if ( $this->test_mode ) {
$this->api_endpoint = 'https://api-3t.sandbox.paypal.com/nvp';
$this->checkout_url = 'https://www.sandbox.paypal.com/webscr&cmd=_express-checkout&token=';
} else {
$this->api_endpoint = 'https://api-3t.paypal.com/nvp';
$this->checkout_url = 'https://www.paypal.com/webscr&cmd=_express-checkout&token=';
}
if ( rcp_has_paypal_api_access() ) {
$creds = rcp_get_paypal_api_credentials();
$this->username = $creds['username'];
$this->password = $creds['password'];
$this->signature = $creds['signature'];
}
}
/**
* Process registration
*
* @access public
* @since 2.1
* @return void
*/
public function process_signup() {
global $rcp_options;
if ( $this->test_mode ) {
$paypal_redirect = 'https://www.sandbox.paypal.com/cgi-bin/webscr/?';
} else {
$paypal_redirect = 'https://www.paypal.com/cgi-bin/webscr/?';
}
$cancel_url = wp_get_referer();
if ( empty( $cancel_url ) ) {
$cancel_url = get_permalink( $rcp_options['registration_page'] );
}
// Setup PayPal arguments
$paypal_args = array(
'business' => trim( $rcp_options['paypal_email'] ),
'email' => $this->email,
'item_number' => $this->subscription_key,
'item_name' => $this->subscription_name,
'no_shipping' => '1',
'shipping' => '0',
'no_note' => '1',
'currency_code' => $this->currency,
'charset' => get_bloginfo( 'charset' ),
'custom' => $this->user_id,
'rm' => '2',
'return' => $this->return_url,
'cancel_return' => $cancel_url,
'notify_url' => add_query_arg( 'listener', 'IPN', home_url( 'index.php' ) ),
'cbt' => get_bloginfo( 'name' ),
'tax' => 0,
'page_style' => ! empty( $rcp_options['paypal_page_style'] ) ? trim( $rcp_options['paypal_page_style'] ) : '',
'bn' => 'RestrictContentPro_SP_PPCP'
);
// recurring paypal payment
if ( $this->auto_renew && ! empty( $this->length ) ) {
// recurring paypal payment
$paypal_args['cmd'] = '_xclick-subscriptions';
$paypal_args['src'] = '1';
$paypal_args['sra'] = '1';
$paypal_args['a3'] = $this->amount;
$paypal_args['p3'] = $this->length;
switch ( $this->length_unit ) {
case "day" :
$paypal_args['t3'] = 'D';
break;
case "month" :
$paypal_args['t3'] = 'M';
break;
case "year" :
$paypal_args['t3'] = 'Y';
break;
}
if ( 'renewal' === $this->payment->transaction_type && $this->membership->is_active() ) {
/*
* If this is a renewal then we want to charge the customer immediately, but then delay the
* first renewal payment until the RCP expiration date.
*
* @link https://github.com/restrictcontentpro/restrict-content-pro/issues/1259
*/
$current_date = new DateTime( 'now' );
$expiration = new DateTime( date( 'Y-m-d', strtotime( $this->membership->calculate_expiration( false ) ) ) );
$date_diff = $current_date->diff( $expiration );
$paypal_args['a1'] = $this->initial_amount;
$paypal_args['t1'] = 'D';
$paypal_args['p1'] = $date_diff->days;
/*
* PayPal has a maximum of 90 days for trial periods.
* If the difference between today & the next bill date is greater than 90 days then we need to
* split it into two trial periods.
*/
if ( $date_diff->days > 90 ) {
// Set up the default period times.
$first_period = $date_diff->days;
$second_period = 0;
$unit = 'D';
if ( ( $date_diff->days - 90 ) <= 90 ) {
// t1 = D, t2 = D
$unit = 'D';
$second_period = $date_diff->days - 90;
$first_period = 90;
} elseif ( $date_diff->days / 7 <= 52 ) {
// t1 = D, t2 = W
$unit = 'W';
$total_weeks = $date_diff->days / 7;
$second_period = (int) floor( $total_weeks );
$first_period = (int) absint( round( ( 7 * ( $total_weeks - $second_period ) ) ) );
} elseif ( $date_diff->days / 7 > 52 ) {
// t1 = D, t2 = M
$unit = 'M';
$first_period = $date_diff->d;
$second_period = $date_diff->m;
}
// Reudce things to be a bit more human readable.
switch ( $unit ) {
case 'W' :
if ( 52 === $second_period ) {
$unit = 'Y';
$second_period = 1;
} elseif ( 4 === $second_period ) {
$unit = 'M';
$second_period = 1;
}
break;
case 'M' :
if ( 12 === $second_period ) {
$unit = 'Y';
$second_period = 1;
}
break;
}
// Only create two trials if necessary.
if ( ! empty( $first_period ) ) {
$paypal_args['p1'] = $first_period;
$paypal_args['t1'] = 'D';
$paypal_args['a2'] = 0;
$paypal_args['p2'] = absint( $second_period );
$paypal_args['t2'] = $unit;
} else {
$paypal_args['p1'] = absint( $second_period );
$paypal_args['t1'] = $unit;
}
}
} elseif ( $this->initial_amount != $this->amount ) {
/*
* Add a trial period to charge the different "initial amount".
* This will be used for free trials, one-time discount codes, signup fees,
* and prorated credits.
*/
// By default we use the same values as the normal subscription period.
$paypal_args['a1'] = $this->initial_amount;
$paypal_args['p1'] = $this->length;
$paypal_args['t1'] = $paypal_args['t3'];
/*
* If this is not a free trial then the trial duration would have already been set above
* using the normal duration fields.
*
* If this is a free trial, then we'll override the values using the trial duration fields.
*/
if ( $this->is_trial() ) {
$paypal_args['a1'] = 0;
$paypal_args['p1'] = $this->subscription_data['trial_duration'];
switch ( $this->subscription_data['trial_duration_unit'] ) {
case 'day':
$paypal_args['t1'] = 'D';
break;
case 'month':
$paypal_args['t1'] = 'M';
break;
case 'year':
$paypal_args['t1'] = 'Y';
break;
}
}
}
} else {
// one time payment
$paypal_args['cmd'] = '_xclick';
$paypal_args['amount'] = $this->initial_amount;
}
$paypal_args = apply_filters( 'rcp_paypal_args', $paypal_args, $this );
// Build query
$paypal_redirect .= http_build_query( $paypal_args );
// Fix for some sites that encode the entities
$paypal_redirect = str_replace( '&amp;', '&', $paypal_redirect );
// Redirect to paypal
header( 'Location: ' . $paypal_redirect );
exit;
}
/**
* Process PayPal IPN
*
* @access public
* @since 2.1
* @return void
*/
public function process_webhooks() {
if ( ! isset( $_GET['listener'] ) || strtoupper( $_GET['listener'] ) != 'IPN' ) {
return;
}
rcp_log( 'Starting to process PayPal Standard IPN.' );
global $rcp_options;
nocache_headers();
if ( ! class_exists( 'IpnListener' ) ) {
// instantiate the IpnListener class
include( RCP_PLUGIN_DIR . 'pro/includes/gateways/paypal/paypal-ipnlistener.php' );
}
$listener = new IpnListener();
$verified = false;
if ( $this->test_mode ) {
$listener->use_sandbox = true;
}
/*
if( isset( $rcp_options['ssl'] ) ) {
$listener->use_ssl = true;
} else {
$listener->use_ssl = false;
}
*/
//To post using the fsockopen() function rather than cURL, use:
if ( isset( $rcp_options['disable_curl'] ) ) {
$listener->use_curl = false;
}
if ( ! isset( $rcp_options['disable_ipn_verify'] ) ) {
try {
$listener->requirePostMethod();
$verified = $listener->processIpn();
} catch ( Exception $e ) {
status_header( 402 );
//die( 'IPN exception: ' . $e->getMessage() );
}
}
/*
The processIpn() method returned true if the IPN was "VERIFIED" and false if it
was "INVALID".
*/
if ( $verified || isset( $_POST['verification_override'] ) || ( $this->test_mode || isset( $rcp_options['disable_ipn_verify'] ) ) ) {
status_header( 200 );
$user_id = 0;
$posted = apply_filters( 'rcp_ipn_post', $_POST ); // allow $_POST to be modified
if ( ! empty( $posted['subscr_id'] ) ) {
$this->membership = rcp_get_membership_by( 'gateway_subscription_id', $posted['subscr_id'] );
}
// Get by subscription key.
if ( empty( $this->membership ) && ! empty( $posted['item_number'] ) ) {
$membership = rcp_get_membership_by( 'subscription_key', sanitize_text_field( $posted['item_number'] ) );
if ( ! empty( $membership ) ) {
$this->membership = $membership;
}
}
if ( empty( $this->membership ) ) {
rcp_log( sprintf( 'PayPal IPN Failed: unable to find associated membership in RCP. Item Name: %s; Item Number: %d; TXN Type: %s; TXN ID: %s', $posted['item_name'], $posted['item_number'], $posted['txn_type'], $posted['txn_id'] ), true );
die( 'no membership found' );
}
if ( empty( $user_id ) ) {
$user_id = $this->membership->get_user_id();
}
$member = new RCP_Member( $this->membership->get_user_id() ); // for backwards compat
rcp_log( sprintf( 'Processing IPN for membership #%d.', $this->membership->get_id() ) );
if ( ! $this->membership->get_object_id() ) {
die( 'no membership level found' );
}
if ( ! rcp_get_membership_level( $this->membership->get_object_id() ) instanceof Membership_Level ) {
die( 'no membership level found' );
}
$rcp_payments = new RCP_Payments();
$subscription_key = $posted['item_number'];
$has_trial = isset( $posted['mc_amount1'] ) && '0.00' == $posted['mc_amount1'];
if ( ! $has_trial && isset( $posted['mc_gross'] ) ) {
$amount = number_format( (float) $posted['mc_gross'], 2, '.', '' );
} elseif ( $has_trial && isset( $posted['mc_amount1'] ) ) {
$amount = number_format( (float) $posted['mc_amount1'], 2, '.', '' );
} else {
$amount = false;
}
$payment_status = ! empty( $posted['payment_status'] ) ? $posted['payment_status'] : false;
$currency_code = $posted['mc_currency'];
$pending_payment_id = rcp_get_membership_meta( $this->membership->get_id(), 'pending_payment_id', true );
$pending_payment = ! empty( $pending_payment_id ) ? $rcp_payments->get_payment( $pending_payment_id ) : false;
// Check for invalid amounts in the IPN data
if ( ! empty( $pending_payment ) && ! empty( $pending_payment->amount ) && ! empty( $amount ) && in_array( $posted['txn_type'], array( 'web_accept', 'subscr_payment' ) ) ) {
if ( $amount < $pending_payment->amount ) {
$this->membership->add_note( sprintf( __( 'Incorrect amount received in the IPN. Amount received was %s. The amount should have been %s. PayPal Transaction ID: %s', 'rcp' ), $amount, $pending_payment->amount, sanitize_text_field( $posted['txn_id'] ) ) );
die( 'incorrect amount' );
}
}
// setup the payment info in an array for storage
$payment_data = array(
'date' => ! empty( $posted['payment_date'] ) ? date( 'Y-m-d H:i:s', strtotime( $posted['payment_date'], current_time( 'timestamp' ) ) ) : date( 'Y-m-d H:i:s', strtotime( 'now', current_time( 'timestamp' ) ) ),
'subscription' => $posted['item_name'],
'payment_type' => $posted['txn_type'],
'subscription_key' => $subscription_key,
'user_id' => $this->membership->get_user_id(),
'customer_id' => $this->membership->get_customer_id(),
'membership_id' => $this->membership->get_id(),
'transaction_id' => ! empty( $posted['txn_id'] ) ? $posted['txn_id'] : false,
'status' => 'complete',
'gateway' => 'paypal'
);
if ( false !== $amount ) {
$payment_data['amount'] = $amount;
}
// We don't want any empty values in the array in order to avoid deleting a transaction ID or other data.
foreach ( $payment_data as $payment_key => $payment_value ) {
if ( empty( $payment_value ) ) {
unset( $payment_data[ $payment_key ] );
}
}
do_action( 'rcp_valid_ipn', $payment_data, $user_id, $posted );
if ( $posted['txn_type'] == 'web_accept' || $posted['txn_type'] == 'subscr_payment' ) {
// only check for an existing payment if this is a payment IPD request
if ( ! empty( $posted['txn_id'] ) && $rcp_payments->payment_exists( $posted['txn_id'] ) ) {
do_action( 'rcp_ipn_duplicate_payment', $posted['txn_id'], $member, $this );
die( 'duplicate IPN detected' );
}
}
/* now process the kind of subscription/payment */
// Subscriptions
switch ( $posted['txn_type'] ) :
case "subscr_signup" :
// when a new user signs up
rcp_log( 'Processing PayPal Standard subscr_signup IPN.' );
$this->membership->set_gateway_subscription_id( $posted['subscr_id'] );
$this->membership->set_recurring( true );
if ( $has_trial && ! empty( $pending_payment_id ) ) {
// This activates the trial.
$rcp_payments->update( $pending_payment_id, $payment_data );
}
do_action( 'rcp_ipn_subscr_signup', $user_id );
do_action( 'rcp_webhook_recurring_payment_profile_created', $member, $this );
die( 'successful subscr_signup' );
break;
case "subscr_payment" :
// when a user makes a recurring payment
rcp_log( 'Processing PayPal Standard subscr_payment IPN.' );
if ( 'failed' == strtolower( $posted['payment_status'] ) ) {
// Recurring payment failed.
$this->membership->add_note( sprintf( __( 'Transaction ID %s failed in PayPal.', 'rcp' ), $posted['txn_id'] ) );
die( 'Subscription payment failed' );
} elseif ( 'pending' == strtolower( $posted['payment_status'] ) ) {
// Recurring payment pending (such as echeck).
$pending_reason = ! empty( $posted['pending_reason'] ) ? $posted['pending_reason'] : __( 'unknown', 'rcp' );
$this->membership->add_note( sprintf( __( 'Transaction ID %s is pending in PayPal for reason: %s', 'rcp' ), $posted['txn_id'], $pending_reason ) );
die( 'Subscription payment pending' );
}
// Payment completed.
if ( ! empty( $pending_payment_id ) ) {
$this->membership->set_recurring( true );
// This activates the membership.
$rcp_payments->update( $pending_payment_id, $payment_data );
$payment_id = $pending_payment_id;
} else {
$this->membership->renew( true );
$payment_data['subtotal'] = $payment_data['amount'];
$payment_data['transaction_type'] = 'renewal';
// record this payment in the database
$payment_id = $rcp_payments->insert( $payment_data );
do_action( 'rcp_webhook_recurring_payment_processed', $member, $payment_id, $this );
}
do_action( 'rcp_ipn_subscr_payment', $user_id );
do_action( 'rcp_gateway_payment_processed', $member, $payment_id, $this );
die( 'successful subscr_payment' );
break;
case "subscr_cancel" :
rcp_log( 'Processing PayPal Standard subscr_cancel IPN.' );
if ( isset( $posted['subscr_id'] ) && $posted['subscr_id'] == $this->membership->get_gateway_subscription_id() && 'cancelled' !== $this->membership->get_status() ) {
// If this is a completed payment plan, we can skip any cancellation actions. This is handled in renewals.
if ( $this->membership->has_payment_plan() && $this->membership->at_maximum_renewals() ) {
rcp_log( sprintf( 'Membership #%d has completed its payment plan - not cancelling.', $this->membership->get_id() ) );
die( 'membership payment plan completed' );
}
// user is marked as cancelled but retains access until end of term
if ( $this->membership->is_active() ) {
$this->membership->cancel();
$this->membership->add_note( __( 'Membership cancelled via PayPal Standard IPN.', 'rcp' ) );
} else {
rcp_log( sprintf( 'Membership #%d is not active - not cancelling.', $this->membership->get_id() ) );
}
do_action( 'rcp_ipn_subscr_cancel', $user_id );
do_action( 'rcp_webhook_cancel', $member, $this );
die( 'successful subscr_cancel' );
}
break;
case "subscr_failed" :
rcp_log( 'Processing PayPal Standard subscr_failed IPN.' );
if ( ! empty( $posted['txn_id'] ) ) {
$this->webhook_event_id = sanitize_text_field( $posted['txn_id'] );
} elseif ( ! empty( $posted['ipn_track_id'] ) ) {
$this->webhook_event_id = sanitize_text_field( $posted['ipn_track_id'] );
}
do_action( 'rcp_recurring_payment_failed', $member, $this );
do_action( 'rcp_ipn_subscr_failed' );
die( 'successful subscr_failed' );
break;
case "subscr_eot" :
// user's subscription has reached the end of its term
rcp_log( 'Processing PayPal Standard subscr_eot IPN.' );
if ( isset( $posted['subscr_id'] ) && $posted['subscr_id'] == $this->membership->get_gateway_subscription_id() && 'cancelled' !== $this->membership->get_status() ) {
$this->membership->set_status( 'expired' );
}
do_action( 'rcp_ipn_subscr_eot', $user_id );
die( 'successful subscr_eot' );
break;
case "web_accept" :
rcp_log( sprintf( 'Processing PayPal Standard web_accept IPN. Payment status: %s', $payment_status ) );
switch ( strtolower( $payment_status ) ) :
case 'completed' :
if ( ! empty( $pending_payment_id ) ) {
// Complete the pending payment. This activates the membership.
$rcp_payments->update( $pending_payment_id, $payment_data );
$payment_id = $pending_payment_id;
} else {
// Renew the account.
$this->membership->renew();
$payment_id = $rcp_payments->insert( $payment_data );
}
do_action( 'rcp_gateway_payment_processed', $member, $payment_id, $this );
break;
case 'denied' :
case 'expired' :
case 'failed' :
case 'voided' :
$this->membership->cancel();
break;
endswitch;
die( 'successful web_accept' );
break;
case "cart" :
case "express_checkout" :
default :
break;
endswitch;
} else {
rcp_log( 'Invalid PayPal IPN attempt.', true );
status_header( 400 );
die( 'invalid IPN' );
}
}
}