HEX
Server: Apache
System: Linux p3plzcpnl506847.prod.phx3.secureserver.net 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: slfopp7cb1df (5698090)
PHP: 8.1.34
Disabled: NONE
Upload Files
File: /home/slfopp7cb1df/www/sitepacket.com/system/app/Controllers/Pay_invoice.php
<?php

namespace App\Controllers;

use App\Libraries\Paypal;
use App\Libraries\Paytm;
use App\Libraries\Stripe;

class Pay_invoice extends App_Controller {

    function __construct() {
        parent::__construct();
    }

    function index($verification_code = "") {
        if (!get_setting("client_can_pay_invoice_without_login")) {
            app_redirect("forbidden");
        }

        if (!$verification_code) {
            show_404();
        }

        // verification code should be 10 characters
        if (strlen($verification_code) !== 10) {
            show_404();
        }

        $options = array("code" => $verification_code, "type" => "invoice_payment");
        $verification_info = $this->Verification_model->get_details($options)->getRow();
        if (!($verification_info && $verification_info->id)) {
            show_404();
        }

        $invoice_data = unserialize($verification_info->params);

        $invoice_id = get_array_value($invoice_data, "invoice_id");
        $client_id = get_array_value($invoice_data, "client_id");
        $contact_id = get_array_value($invoice_data, "contact_id");

        $this->_log("invoice_id:$invoice_id, client_id:$client_id, contact_id:$contact_id");

        if ($invoice_id && is_numeric($invoice_id) && $client_id && is_numeric($client_id) && $contact_id && is_numeric($contact_id)) {
            $view_data = get_invoice_making_data($invoice_id);
            $view_data['payment_methods'] = $this->Payment_methods_model->get_available_online_payment_methods();

            //check access of this invoice
            $this->_check_access_of_invoice($view_data);

            $view_data['invoice_preview'] = prepare_invoice_pdf($view_data, "html");

            $view_data['invoice_id'] = $invoice_id;

            $paytm = new Paytm();
            $view_data['paytm_url'] = $paytm->get_paytm_url();

            $view_data['contact_id'] = $contact_id;
            $view_data['verification_code'] = clean_data($verification_code);

            return $this->template->view("invoices/public_invoice_preview", $view_data);
        } else {
            show_404();
        }
    }

    private function _check_access_of_invoice($view_data) {
        if (count($view_data) && !get_array_value($view_data, "client_info")->disable_online_payment) {
            return true;
        } else {
            app_redirect("forbidden");
        }
    }

    function get_stripe_checkout_session() {
        if (!get_setting("client_can_pay_invoice_without_login")) {
            app_redirect("forbidden");
        }

        $stripe = new Stripe();

        try {
            $session = $stripe->get_stripe_checkout_session($this->request->getPost("input_data"));
            if ($session->id) {
                echo json_encode(array("success" => true, "checkout_url" => $session->url));
            } else {
                echo json_encode(array('success' => false, 'message' => app_lang('error_occurred')));
            }
        } catch (\Exception $ex) {
            echo json_encode(array("success" => false, "message" => $ex->getMessage()));
        }
    }

    function get_paypal_checkout_url() {
        if (!get_setting("client_can_pay_invoice_without_login")) {
            app_redirect("forbidden");
        }

        $paypal = new Paypal();

        try {
            $checkout_url = $paypal->get_paypal_checkout_url($this->request->getPost("input_data"));
            if ($checkout_url) {
                echo json_encode(array("success" => true, "checkout_url" => $checkout_url));
            } else {
                echo json_encode(array('success' => false, 'message' => app_lang('error_occurred')));
            }
        } catch (\Exception $ex) {
            echo json_encode(array("success" => false, "message" => $ex->getMessage()));
        }
    }

    private function _log($text = "") {
        if ($text && get_setting("enable_public_pay_invoice_logging")) {
            error_log(date('[Y-m-d H:i e] ') . $text . PHP_EOL, 3, "public_pay_invoice_logs.txt");
        }
    }

    function get_paytm_checksum_hash() {
        $paytm = new Paytm();
        $payment_data = $paytm->get_paytm_checksum_hash($this->request->getPost("input_data"), $this->request->getPost("verification_data"));

        if ($payment_data) {
            echo json_encode(array("success" => true, "checksum_hash" => get_array_value($payment_data, "checksum_hash"), "payment_verification_code" => get_array_value($payment_data, "payment_verification_code")));
        } else {
            echo json_encode(array("success" => false, "message" => app_lang("paytm_checksum_hash_error_message")));
        }
    }
}

/* End of file Pay_invoice.php */
/* Location: ./app/controllers/Pay_invoice.php */