micropaiment was out

diff --git a/htdocs/paiement/cyberpaiement.inc.php b/htdocs/paiement/cyberpaiement.inc.php
new file mode 100644 (file)
index 0000000..b92494e
--- /dev/null
+++ b/htdocs/paiement/cyberpaiement.inc.php
@@ -0,0 +1,82 @@
+<?php
+
+global $baseurl,$ref_flags,$fullref,$montant,$ref_text,$ref;
+
+// on construit l'adresse de retour pour le robot de la banque
+$roboturl = str_replace("https://","http://",$baseurl)."/paiement/cyberpaiement_retour.php?uid={$_SESSION['uid']}&amp;CHAMPBPX";
+
+// on construit l'adresse de retour pour l'utilisateur
+$returnurl = "$baseurl/";
+if (! isset($_COOKIE[session_name()]))
+    $returnurl .= "?".SID;
+
+// on constuit la reference de la transaction
+$prefix = ($ref_flags->hasflag('unique')) ? str_pad("",15,"0") : rand_url_id();
+$fullref = substr("$prefix-xorg-$ref",-15);
+
+// on recupere les infos sur l'utilisateur
+$res = mysql_query("SELECT  a.alias, u.nom, u.prenom
+                     FROM  auth_user_md5 AS u
+               INNER JOIN  aliases       AS a ON (u.user_id=a.id AND a.type='a_vie')
+                    WHERE  user_id={$_SESSION['uid']}");
+list($username,$nom,$prenom) = mysql_fetch_row($res);
+mysql_free_result($res);
+?>
+
+<form method="post" action="https://ecom.cimetz.com/telepaie/cgishell.exe/epaie01.exe">
+  <table class="bicol">
+    <tr>
+      <th colspan="2">Paiement via CyberP@iement</th>
+    </tr>
+    <tr>
+      <td><b>Transaction</b></td>
+      <td><?php echo $ref_text; ?></td>
+    </tr>
+    <tr>
+      <td><b>Montant (euros)</b></td>
+      <td><?php echo $montant; ?></td>
+    </tr>
+    <tr>
+      <td>&nbsp;</td>
+      <td>
+       <!-- infos commercant -->
+       <input type="hidden" name="CHAMP000" value="510879" />
+       <input type="hidden" name="CHAMP001" value="5965" />
+       <input type="hidden" name="CHAMP002" value="5429159012" />
+       <input type="hidden" name="CHAMP003" value="I" />
+       <input type="hidden" name="CHAMP004" value="Polytechnique.org" />
+       <input type="hidden" name="CHAMP005" value="<?php echo $roboturl; ?>" />
+       <input type="hidden" name="CHAMP006" value="Polytechnique.org" />
+       <input type="hidden" name="CHAMP007" value="<?php echo $returnurl; ?>" />
+       <input type="hidden" name="CHAMP008" value="<?php echo $ref_mail; ?>" />
+       <!-- infos client -->
+       <input type="hidden" name="CHAMP100" value="<?php echo $nom; ?>" />
+       <input type="hidden" name="CHAMP101" value="<?php echo $prenom; ?>" />
+       <input type="hidden" name="CHAMP102" value="." />
+       <input type="hidden" name="CHAMP103" value="." />
+       <input type="hidden" name="CHAMP104" value="<?php echo $username; ?>@polytechnique.org" />
+       <input type="hidden" name="CHAMP106" value="." />
+       <input type="hidden" name="CHAMP107" value="." />
+       <input type="hidden" name="CHAMP108" value="." />
+       <input type="hidden" name="CHAMP109" value="." />
+       <input type="hidden" name="CHAMP110" value="." />
+       <!-- infos commande -->
+       <input type="hidden" name="CHAMP200" value="<?php echo $fullref; ?>" />
+       <input type="hidden" name="CHAMP201" value="<?php echo $montant; ?>" />
+       <input type="hidden" name="CHAMP202" value="EUR" />
+       <!-- infos divers -->
+       <input type="hidden" name="CHAMP900" value="01" />
+       <input type="submit" value="Valider" />
+      </td>
+    </tr>
+  </table>
+</form>
+
+<p class="normal">
+En cliquant sur "Valider", tu seras
+redirigé<?php if ($_SESSION['femme']) echo "e"; ?> vers le site de la 
+BP Lorraine Champagne, où il te sera demandé de saisir ton numéro de
+carte bancaire. Lorsque le paiement aura été effectué, tu recevras
+une confirmation par email.
+</p>
+

diff --git a/htdocs/paiement/index.php b/htdocs/paiement/index.php
index e13aa94..c62da8d 100644 (file)
--- a/htdocs/paiement/index.php
+++ b/htdocs/paiement/index.php
@@ -18,7 +18,7 @@
  *  Foundation, Inc.,                                                      *
  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
  ***************************************************************************
-        $Id: index.php,v 1.3 2004-09-02 21:22:19 x2000habouzit Exp $
+        $Id: index.php,v 1.4 2004-10-09 09:29:03 x2000habouzit Exp $
  ***************************************************************************/
 
 require("auto.prepend.inc.php");
@@ -80,12 +80,12 @@ if (!ereg("^[0-9]+,[0-9]{2}$",$montant)) {
     $montant = $montant_def;
 }
 
-if ($montant < $montant_min) {
+if (intval($montant) < $montant_min) {
     $erreur[] = "Montant inférieur au minimum autorisé ($montant_min).";
     $montant = $montant_min;
 }
 
-if ($montant > $montant_max) {
+if (intval($montant) > $montant_max) {
     $erreur[] = "Montant supérieur au maximum autorisé ($montant_max).";
     $montant = $montant_max;
 }