<?php
/***************************************************************************
- * Copyright (C) 2003-2007 Polytechnique.org *
+ * Copyright (C) 2003-2009 Polytechnique.org *
* http://opensource.polytechnique.org/ *
* *
* This program is free software; you can redistribute it and/or modify *
/* sort en affichant une erreur */
function cb_erreur($text) {
+ global $globals;
$mymail = new PlMailer();
$mymail->addTo($globals->money->email);
$mymail->setFrom("webmaster@" . $globals->mail->domain);
/* sort en affichant une erreur */
function paypal_erreur($text, $send=true)
{
- global $page, $erreur;
+ global $erreur, $globals;
if ($erreur) return;
$erreur = $text;
if (!$send) return;
$mymail->setTxtBody("\n\n".var_export($_REQUEST,true));
$mymail->send();
- $page->trig($text);
+ Platal::page()->trigError($text);
}
/* http://fr.wikipedia.org/wiki/Formule_de_Luhn */
return $alpha{$n-1}.$m1.$m2.$m3.$m4;
}
+/* decode the comment */
+function comment_decode($comment) {
+ $comment = urldecode($comment);
+ if (is_utf8($comment)) {
+ return $comment;
+ } else {
+ return utf8_encode($comment);
+ }
+}
+
class PaymentModule extends PLModule
{
{
return array(
'payment' => $this->make_hook('payment', AUTH_MDP),
- 'payment/cyber_return' => $this->make_hook('cyber_return', AUTH_PUBLIC),
- 'payment/paypal_return' => $this->make_hook('paypal_return', AUTH_PUBLIC),
- '%grp/paiement' => $this->make_hook('xnet_payment', AUTH_MDP, 'groupmember'),
- '%grp/payment' => $this->make_hook('xnet_payment', AUTH_MDP, 'groupmember'),
- '%grp/payment/cyber_return' => $this->make_hook('cyber_return', AUTH_PUBLIC),
- '%grp/payment/paypal_return' => $this->make_hook('paypal_return', AUTH_PUBLIC),
+ 'payment/cyber_return' => $this->make_hook('cyber_return', AUTH_PUBLIC, 'user', NO_HTTPS),
+ 'payment/paypal_return' => $this->make_hook('paypal_return', AUTH_PUBLIC, 'user', NO_HTTPS),
+ '%grp/paiement' => $this->make_hook('xnet_payment', AUTH_MDP),
+ '%grp/payment' => $this->make_hook('xnet_payment', AUTH_MDP),
+ '%grp/payment/cyber_return' => $this->make_hook('cyber_return', AUTH_PUBLIC, 'user', NO_HTTPS),
+ '%grp/payment/paypal_return' => $this->make_hook('paypal_return', AUTH_PUBLIC, 'user', NO_HTTPS),
'admin/payments' => $this->make_hook('admin', AUTH_MDP, 'admin'),
);
global $globals;
require_once 'profil.func.inc.php' ;
- require_once dirname(__FILE__).'/payment/money.inc.php' ;
+ $this->load('money.inc.php');
if (!empty($GLOBALS['IS_XNET_SITE'])) {
if (!$globals->asso('id')) {
}
}
$page->changeTpl('payment/index.tpl');
- $page->assign('xorg_title','Polytechnique.org - Télépaiements');
+ $page->setTitle('Télépaiements');
// initialisation
$op = Env::v('op', 'select');
$pay = new Payment($ref);
if($pay->flags->hasflag('old')){
- $page->trig("La transaction selectionnée est périmée.");
+ $page->trigError("La transaction selectionnée est périmée.");
$pay = new Payment();
}
$val = Env::v('montant') != 0 ? Env::v('montant') : $pay->montant_def;
if (($e = $pay->check($val)) !== true) {
- $page->trig($e);
+ $page->trigError($e);
}
if ($op=='submit') {
$res = XDB::query("SELECT rcb.text,c.id,c.text
FROM paiement.codeRCB AS rcb
LEFT JOIN paiement.codeC AS c ON rcb.codeC=c.id
- WHERE rcb.id='$champ906'");
+ WHERE rcb.id={?}", $champ906);
if (list($rcb_text, $c_id, $c_text) = $res->fetchOneRow()) {
cb_erreur("erreur lors du paiement : $c_text ($c_id)");
} else{
$conf_text = str_replace("<salutation>",$femme ? "Chère" : "Cher",$conf_text);
$conf_text = str_replace("<cher>",$femme ? "Chère" : "Cher",$conf_text);
+ global $globals;
$mymail = new PlMailer();
$mymail->setFrom($conf_mail);
$mymail->addTo("\"$prenom $nom\" <$forlife@" . $globals->mail->domain . '>');
$conf_text = str_replace("<salutation>",$femme ? "Chère" : "Cher",$conf_text);
$conf_text = str_replace("<cher>",$femme ? "Chère" : "Cher",$conf_text);
+ global $globals;
$mymail = new PlMailer();
$mymail->setFrom($conf_mail);
$mymail->addTo("\"$prenom $nom\" <$forlife@" . $globals->mail->domain . '>');
{
global $globals;
+ $perms = S::v('perms');
+ if (!$perms->hasFlag('groupmember')) {
+ if (is_null($pid)) {
+ return PL_FORBIDDEN;
+ }
+ $res = XDB::query("SELECT 1
+ FROM groupex.evenements AS e
+ INNER JOIN groupex.evenements_participants AS ep ON (ep.eid = e.eid AND uid = {?})
+ WHERE e.paiement_id = {?} AND e.asso_id = {?}",
+ S::i('uid'), $pid, $globals->asso('id'));
+ if ($res->numRows() == 0) {
+ return PL_FORBIDDEN;
+ }
+ }
+
if (!is_null($pid)) {
return $this->handler_payment($page, $pid);
}
$event[$pid]['paid'] += trim($p);
}
}
+ $page->register_modifier('decode_comment', 'decode_comment');
$page->assign('trans', $trans);
$page->assign('event', $event);
}
function handler_admin(&$page, $action = 'list', $id = null) {
- $page->assign('xorg_title','Polytechnique.org - Administration - Paiements');
+ $page->setTitle('Administration - Paiements');
$page->assign('title', 'Gestion des télépaiements');
$table_editor = new PLTableEditor('admin/payments','paiement.paiements','id');
$table_editor->add_join_table('paiement.transactions','ref',true);