0b7e2d0a5b
- Created complete documentation in docs/ directory - Added PROJECT_OVERVIEW.md with feature highlights and getting started guide - Added ARCHITECTURE.md with system design and technical details - Added SECURITY.md with comprehensive security implementation guide - Added DEVELOPMENT.md with development workflows and best practices - Added DEPLOYMENT.md with production deployment instructions - Added API.md with complete REST API documentation - Added CONTRIBUTING.md with contribution guidelines - Added CHANGELOG.md with version history and migration notes - Reorganized all documentation files into docs/ directory for better organization - Updated README.md with proper documentation links and quick navigation - Enhanced project structure with professional documentation standards
286 lines
11 KiB
PHP
286 lines
11 KiB
PHP
<?php
|
|
/*******************************************************************************************************************
|
|
| Software Name : EasyStream
|
|
| Software Description : High End YouTube Clone Script with Videos, Shorts, Streams, Images, Audio, Documents, Blogs
|
|
| Software Author : (c) Sami Ahmed
|
|
|*******************************************************************************************************************
|
|
|
|
|
|*******************************************************************************************************************
|
|
| This source file is subject to the EasyStream Proprietary License Agreement.
|
|
|
|
|
| By using this software, you acknowledge having read this Agreement and agree to be bound thereby.
|
|
|*******************************************************************************************************************
|
|
| Copyright (c) 2025 Sami Ahmed. All rights reserved.
|
|
|*******************************************************************************************************************/
|
|
|
|
defined('_ISVALID') or header('Location: /error');
|
|
|
|
class VPaypalAffiliate
|
|
{
|
|
public $paypal_host; // holds the paypal hostname
|
|
public $paypal_url; // holds the paypal verification url
|
|
public $paypal_mail; // holds your primary paypal email
|
|
public $ipn_log; // bool: log IPN results to text file?
|
|
public $ipn_log_file; // filename of the IPN log
|
|
public $last_error; // holds the last error encountered
|
|
public $ipn_response; // holds the IPN response from paypal
|
|
public $ipn_data = array(); // array contains the POST values for IPN
|
|
public $fields = array(); // array holds the fields to submit to paypal
|
|
/* paypal setup */
|
|
public function VPaypalAffiliate()
|
|
{
|
|
global $cfg, $class_database;
|
|
|
|
$pp = $class_database->getConfigurations('paypal_log_file,paypal_logging,paypal_test,paypal_email,paypal_test_email');
|
|
|
|
$this->paypal_host = $pp['paypal_test'] == 0 ? 'www.paypal.com' : 'www.sandbox.paypal.com';
|
|
$this->paypal_url = $pp['paypal_test'] == 0 ? 'https://www.paypal.com/cgi-bin/webscr' : 'https://www.sandbox.paypal.com/cgi-bin/webscr';
|
|
$this->paypal_mail = $pp['paypal_test'] == 0 ? $pp['paypal_email'] : $pp['paypal_test_email'];
|
|
$this->ipn_log = $pp['paypal_logging'] == 1 ? true : false;
|
|
$this->ipn_log_file = $cfg['main_dir'] . '/' . $pp['paypal_log_file'];
|
|
$this->last_error = '';
|
|
$this->ipn_response = '';
|
|
|
|
$this->add_field('rm', '2');
|
|
$this->add_field('cmd', '_xclick');
|
|
}
|
|
/* add configuration */
|
|
public function add_field($field, $value)
|
|
{
|
|
$this->fields[$field] = $value;
|
|
}
|
|
/* submit to paypal */
|
|
public function submit_paypal_post()
|
|
{
|
|
foreach ($this->fields as $name => $value) {
|
|
$link .= '&' . $name . '=' . $value;
|
|
}
|
|
echo '<script type="text/javascript">window.location = "' . $this->paypal_url . '?' . (substr($link, 1)) . '";</script>';
|
|
}
|
|
/* validate IPN */
|
|
public function validate_ipn()
|
|
{
|
|
define("LOG_FILE", $this->ipn_log_file);
|
|
define("DEBUG", 0);
|
|
|
|
$ver = false;
|
|
$adr = $_SERVER[REM_ADDR];
|
|
//$ppn = array('173.0.80.0/24', '173.0.81.0/24', '173.0.82.0/24', '173.0.83.0/24');
|
|
$ppn = array(
|
|
'173.0.80.0/21',
|
|
'173.0.80.0/22',
|
|
'173.0.81.0/24',
|
|
'173.0.84.0/24',
|
|
'173.0.88.0/21',
|
|
'173.0.88.0/24',
|
|
'173.0.93.0/24',
|
|
'173.0.94.0/24',
|
|
'173.0.95.0/24',
|
|
'64.4.240.0/21',
|
|
'64.4.240.0/22',
|
|
'64.4.240.0/24',
|
|
'64.4.241.0/24',
|
|
'64.4.242.0/24',
|
|
'64.4.243.0/24',
|
|
'64.4.244.0/22',
|
|
'64.4.244.0/24',
|
|
'64.4.246.0/24',
|
|
'64.4.247.0/24',
|
|
'64.4.248.0/22',
|
|
'64.4.248.0/23',
|
|
'64.4.248.0/24',
|
|
'64.4.249.0/24',
|
|
'64.4.250.0/23',
|
|
'64.4.250.0/24',
|
|
'66.211.168.0/22',
|
|
'66.211.168.0/23',
|
|
'66.211.170.0/23',
|
|
'91.243.72.0/23',
|
|
);
|
|
|
|
foreach ($ppn as $range) {
|
|
if (VIPrange::ip_in_range($adr, $range)) {
|
|
$ver = true;
|
|
}
|
|
|
|
}
|
|
|
|
if (!$ver) {
|
|
return false;
|
|
}
|
|
|
|
$myPost = array();
|
|
$raw_post_data = file_get_contents('php://input');
|
|
$raw_post_array = explode('&', $raw_post_data);
|
|
|
|
foreach ($raw_post_array as $keyval) {
|
|
$keyval = explode('=', $keyval);
|
|
|
|
if (count($keyval) == 2) {
|
|
if ($keyval[0] == 'payment_date') {
|
|
if (substr_count($keyval[1], '+') == 1) {
|
|
$keyval[1] = str_replace('+', '%2B', $keyval[1]);
|
|
}
|
|
|
|
}
|
|
|
|
$myPost[$keyval[0]] = rawurldecode($keyval[1]);
|
|
}
|
|
}
|
|
// read the post from PayPal system and add 'cmd'
|
|
$req = 'cmd=_notify-validate';
|
|
if (function_exists('get_magic_quotes_gpc')) {
|
|
$get_magic_quotes_exits = true;
|
|
}
|
|
foreach ($myPost as $key => $value) {
|
|
if ($get_magic_quotes_exits == true && get_magic_quotes_gpc() == 1) {
|
|
$value = rawurlencode(stripslashes($value));
|
|
} else {
|
|
$value = rawurlencode($value);
|
|
}
|
|
$req .= "&$key=$value";
|
|
$this->ipn_data[$key] = $value;
|
|
}
|
|
$req = str_replace('%2B', '%20', $req);
|
|
|
|
$ch = curl_init();
|
|
curl_setopt($ch, CURLOPT_URL, $this->paypal_url);
|
|
curl_setopt($ch, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1);
|
|
curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
|
|
curl_setopt($ch, CURLOPT_POST, 1);
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
|
|
curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
|
|
curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
|
|
if (DEBUG == true) {
|
|
curl_setopt($ch, CURLOPT_HEADER, 1);
|
|
curl_setopt($ch, CURLINFO_HEADER_OUT, 1);
|
|
}
|
|
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
|
|
curl_setopt($ch, CURLOPT_HTTPHEADER, array('User-Agent: PHP-IPN-Verification-Script', 'Connection: Close'));
|
|
|
|
$res = curl_exec($ch);
|
|
|
|
if (curl_errno($ch) != 0) {
|
|
// cURL error
|
|
if (DEBUG == true) {
|
|
error_log(date('[Y-m-d H:i e] ') . "Can't connect to PayPal to validate IPN message: " . curl_error($ch) . PHP_EOL, 3, LOG_FILE);
|
|
}
|
|
} else {
|
|
// Log the entire HTTP response if debug is switched on.
|
|
if (DEBUG == true) {
|
|
error_log(date('[Y-m-d H:i e] ') . "HTTP request of validation request:" . curl_getinfo($ch, CURLINFO_HEADER_OUT) . " for IPN payload: $req" . PHP_EOL, 3, LOG_FILE);
|
|
error_log(date('[Y-m-d H:i e] ') . "HTTP response of validation request: $res" . PHP_EOL, 3, LOG_FILE);
|
|
}
|
|
}
|
|
|
|
curl_close($ch);
|
|
|
|
$tokens = explode("\r\n\r\n", trim($res));
|
|
$res = trim(end($tokens));
|
|
|
|
$payment_status = $_POST['payment_status'];
|
|
$receiver_email = $_POST['receiver_email'];
|
|
$payment_amount = $_POST['mc_gross'];
|
|
$payment_currency = $_POST['mc_currency'];
|
|
$quantity = $_POST['quantity'];
|
|
$item = explode('|', rawurldecode($_POST['item_number']));
|
|
$item_id = $item[1];
|
|
$type = $item[0];
|
|
|
|
if (strcmp($res, "VERIFIED") == 0) {
|
|
// check the payment_status is Completed
|
|
// check that txn_id has not been previously processed - not really needed for now
|
|
// check that receiver_email is your Primary PayPal email
|
|
// check that payment_amount/payment_currency are correct
|
|
// return true for membership updating
|
|
if ($payment_status == 'Completed' and self::checkItem($type, $item_id, $quantity, $discount, $payment_amount, $payment_currency)) {
|
|
$this->ipn_response = 'VERIFIED';
|
|
$this->log_ipn_results(true);
|
|
return true;
|
|
} else {
|
|
$this->ipn_response = 'FAILED';
|
|
$this->log_ipn_results(false);
|
|
return false;
|
|
}
|
|
} else if (strcmp($res, "INVALID") == 0) {
|
|
$this->ipn_response = 'FAILED';
|
|
$this->log_ipn_results(false);
|
|
return false;
|
|
}
|
|
}
|
|
/* validate paid item */
|
|
public function checkItem($type, $item_id, $quantity, $discount, $payment_amount, $payment_currency)
|
|
{
|
|
global $db, $cfg, $class_database;
|
|
|
|
$pcfg = $class_database->getConfigurations('affiliate_payout_currency,affiliate_payout_share,affiliate_payout_figure');
|
|
|
|
switch ($type) {
|
|
default:
|
|
case "l":$db_tbl = 'live';
|
|
break;
|
|
case "v":$db_tbl = 'video';
|
|
break;
|
|
case "s":$db_tbl = 'short';
|
|
break;
|
|
case "i":$db_tbl = 'image';
|
|
break;
|
|
case "a":$db_tbl = 'audio';
|
|
break;
|
|
case "d":$db_tbl = 'doc';
|
|
break;
|
|
case "b":$db_tbl = 'blog';
|
|
break;
|
|
}
|
|
$q = $db->execute(sprintf("SELECT `usr_id`, `p_amount`, `p_amount_shared`, `p_views` FROM `db_%spayouts` WHERE `p_id`='%s' LIMIT 1;", $db_tbl, (int) $item_id));
|
|
$usr_id = $q->fields['usr_id'];
|
|
$unit = $q->fields['p_views'];
|
|
|
|
if ($usr_id) {
|
|
$cp = $db->execute(sprintf("SELECT `affiliate_pay_custom`, `affiliate_custom` FROM `db_accountuser` WHERE `usr_id`='%s' LIMIT 1;", $usr_id));
|
|
$af_custom = ($cp->fields['affiliate_pay_custom'] == 1 and $cp->fields['affiliate_custom'] != '') ? unserialize($cp->fields['affiliate_custom']) : false;
|
|
|
|
if ($af_custom['share'] != '' and $af_custom['units'] != '' and $af_custom['figure'] != '' and $af_custom['currency'] != '') {
|
|
$pcfg['affiliate_payout_currency'] = $af_custom['currency'];
|
|
$pcfg['affiliate_payout_share'] = $af_custom['share'];
|
|
$pcfg['affiliate_payout_figure'] = $af_custom['figure'];
|
|
|
|
$payment_amount = round((($unit * $pcfg['affiliate_payout_figure']) / $af_custom['units']), 2);
|
|
$payment_amount = round((($pcfg['affiliate_payout_share'] * $payment_amount) / 100), 2);
|
|
}
|
|
}
|
|
|
|
$price = round((($pcfg['affiliate_payout_share'] * $q->fields['p_amount']) / 100), 2);
|
|
|
|
if ($price == $payment_amount) {
|
|
return true;
|
|
} else {
|
|
return false;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
/* logging */
|
|
public function log_ipn_results($success)
|
|
{
|
|
if (!$this->ipn_log) {
|
|
return;
|
|
}
|
|
|
|
$text = '[' . date('m/d/Y g:i A') . '] - ';
|
|
$text .= ($success) ? "SUCCESS!\n" : "FAIL: " . $this->last_error . "\n";
|
|
$text .= "PP IPN POST Vars:\n";
|
|
foreach ($this->ipn_data as $key => $value) {
|
|
$text .= "$key=$value, ";
|
|
}
|
|
$text .= "\nAFFILIATE PP IPN Server Response:\n " . $this->ipn_response;
|
|
if (!file_exists($this->ipn_log_file)) {touch($this->ipn_log_file);}
|
|
$fp = fopen($this->ipn_log_file, 'a');
|
|
|
|
fwrite($fp, $text . "\n\n");
|
|
fclose($fp);
|
|
}
|
|
}
|