Version 4.3.0

applications/nexus/interface/email/sendDiscard.php

@@ -9,6 +9,7 @@
  * @since		25 Apr 2014
  */
 
+define('REPORT_EXCEPTIONS', TRUE);
 require_once '../../../../init.php';
 \IPS\Dispatcher\Front::i();
 

applications/nexus/interface/gateways/2checkout.php

@@ -9,6 +9,7 @@
  * @since		18 Mar 2014
  */
 
+define('REPORT_EXCEPTIONS', TRUE);
 require_once '../../../../init.php';
 
 try
@@ -22,7 +23,7 @@ try
 }
 catch ( \OutOfRangeException $e )
 {
-	\IPS\Output::i()->redirect( \IPS\Http\Url::internal( "app=nexus&module=checkout&controller=checkout&do=transaction&id=&t=" . \IPS\Request::i()->nexustransactionid, 'front', 'nexus_checkout', \IPS\Settings::i()->nexus_https ) );
+	\IPS\Output::i()->redirect( \IPS\Http\Url::internal( "app=nexus&module=checkout&controller=checkout&do=transaction&id=&t=" . \IPS\Request::i()->nexustransactionid, 'front', 'nexus_checkout' ) );
 }
 
 $settings = json_decode( $transaction->method->settings, TRUE );

applications/nexus/interface/gateways/authorize.php

@@ -9,6 +9,7 @@
  * @since		17 Mar 2014
  */
 
+define('REPORT_EXCEPTIONS', TRUE);
 require_once '../../../../init.php';
 
 try

applications/nexus/interface/gateways/paypal.php

@@ -9,6 +9,7 @@
  * @since		07 Mar 2014
  */
 
+define('REPORT_EXCEPTIONS', TRUE);
 require_once '../../../../init.php';
 \IPS\Session\Front::i();
 
@@ -24,7 +25,7 @@ try
 }
 catch ( \OutOfRangeException $e )
 {
-	\IPS\Output::i()->redirect( \IPS\Http\Url::internal( "app=nexus&module=checkout&controller=checkout&do=transaction&id=&t=" . \IPS\Request::i()->nexusTransactionId, 'front', 'nexus_checkout', \IPS\Settings::i()->nexus_https ) );
+	\IPS\Output::i()->redirect( \IPS\Http\Url::internal( "app=nexus&module=checkout&controller=checkout&do=transaction&id=&t=" . \IPS\Request::i()->nexusTransactionId, 'front', 'nexus_checkout' ) );
 }
 
 /* Process */

applications/nexus/interface/gateways/stripe-payrequest.php

@@ -0,0 +1,90 @@
+<?php
+/**
+ * @brief		Stripe Apple Pay Handler
+ * @author		<a href='https://www.invisioncommunity.com'>Invision Power Services, Inc.</a>
+ * @copyright	(c) Invision Power Services, Inc.
+ * @license		https://www.invisioncommunity.com/legal/standards/
+ * @package		Invision Community
+ * @subpackage	Nexus
+ * @since		20 Jul 2017
+ */
+
+define('REPORT_EXCEPTIONS', TRUE);
+require_once '../../../../init.php';
+\IPS\Session\Front::i();
+
+/* Get the invoice */
+try
+{
+	$invoice = \IPS\nexus\Invoice::load( \IPS\Request::i()->invoice );
+	
+	if ( !$invoice->canView() )
+	{
+		throw new \OutOfRangeException;
+	}
+}
+catch ( \OutOfRangeException $e )
+{
+	\IPS\Output::i()->sendOutput( json_encode( array( 'success' => 0 ) ), 500, 'application/json' );
+}
+
+/* Get the gateway */
+try
+{
+	$gateway = \IPS\nexus\Gateway::load( \IPS\Request::i()->gateway );
+	if ( !( $gateway instanceof \IPS\nexus\Gateway\Stripe ) )
+	{
+		throw new \OutOfRangeException;
+	}
+}
+catch ( \OutOfRangeException $e )
+{
+	\IPS\Output::i()->sendOutput( json_encode( array( 'success' => 0 ) ), 500, 'application/json' );
+}
+
+/* Create a transaction */
+$transaction = new \IPS\nexus\Transaction;
+$transaction->member = \IPS\Member::loggedIn();
+$transaction->invoice = $invoice;
+$transaction->amount = new \IPS\nexus\Money( \IPS\Request::i()->amount, mb_strtoupper( \IPS\Request::i()->currency ) );
+$transaction->ip = \IPS\Request::i()->ipAddress();
+$transaction->method = $gateway;
+
+/* Create a MaxMind request */
+$maxMind = NULL;
+if ( \IPS\Settings::i()->maxmind_key and ( !\IPS\Settings::i()->maxmind_gateways or \IPS\Settings::i()->maxmind_gateways == '*' or in_array( $transaction->method->id, explode( ',', \IPS\Settings::i()->maxmind_gateways ) ) ) )
+{
+	$maxMind = new \IPS\nexus\Fraud\MaxMind\Request;
+	$maxMind->setTransaction( $transaction );
+}
+
+/* Authorize and Capture */			
+try
+{
+	/* Create Card Object */
+	$card = new \IPS\nexus\CreditCard;
+	$card->token = \IPS\Request::i()->token;
+	
+	/* Authorize */
+	$transaction->auth = $gateway->auth( $transaction, array( "{$gateway->id}_card" => $card ), $maxMind );
+	
+	/* Check Fraud Rules and capture */
+	$memberJustCreated = $transaction->checkFraudRulesAndCapture( $maxMind );
+	if ( $memberJustCreated )
+	{
+		\IPS\Session::i()->setMember( $memberJustCreated );
+		\IPS\Member\Device::loadOrCreate( $memberJustCreated, FALSE )->updateAfterAuthentication( NULL );
+	}
+	
+}
+catch ( \Exception $e )
+{
+	\IPS\Log::log( $e, 'applepay' );
+	\IPS\Output::i()->sendOutput( json_encode( array( 'success' => 0 ) ), 500, 'application/json' );
+}
+
+/* Send email receipt */
+$transaction->sendNotification();
+
+/* Return */
+\IPS\Output::i()->sendOutput( json_encode( array( 'success' => 1, 'url' => (string) $transaction->url() ) ), 200, 'application/json' );

applications/nexus/interface/gateways/stripe-redirector.php

@@ -0,0 +1,45 @@
+<?php
+/**
+ * @brief		Stripe Handler
+ * @author		<a href='https://www.invisioncommunity.com'>Invision Power Services, Inc.</a>
+ * @copyright	(c) Invision Power Services, Inc.
+ * @license		https://www.invisioncommunity.com/legal/standards/
+ * @package		Invision Community
+ * @subpackage	Nexus
+ * @since		20 Jul 2017
+ */
+
+define('REPORT_EXCEPTIONS', TRUE);
+require_once '../../../../init.php';
+\IPS\Session\Front::i();
+
+/* Load Source */
+try
+{
+	$transaction = \IPS\nexus\Transaction::load( \IPS\Request::i()->nexusTransactionId );
+	$source = $transaction->method->api( 'sources/' . preg_replace( '/[^A-Z0-9_]/i', '', \IPS\Request::i()->source ) );
+	if ( $source['client_secret'] != \IPS\Request::i()->client_secret )
+	{
+		throw new \Exception;
+	}
+}
+catch ( \Exception $e )
+{
+	\IPS\Output::i()->redirect( \IPS\Http\Url::internal( "app=nexus&module=checkout&controller=checkout&do=transaction&id=&t=" . \IPS\Request::i()->nexusTransactionId, 'front', 'nexus_checkout', \IPS\Settings::i()->nexus_https ) );
+}
+
+/* If we haven't had the webhook yet, wait a few seconds */
+if ( !in_array( $source['status'], array( 'failed', 'consumed' ) ) )
+{
+	sleep( 5 );
+}
+
+/* And then send them on */
+if ( $source['status'] === 'failed' )
+{
+	\IPS\Output::i()->redirect( $transaction->invoice->checkoutUrl() );
+}
+else
+{
+	\IPS\Output::i()->redirect( $transaction->url()->setQueryString( 'pending', 1 ) );
+}

applications/nexus/interface/gateways/stripe.php

@@ -0,0 +1,284 @@
+<?php
+/**
+ * @brief		Stripe Webhook Handler
+ * @author		<a href='https://www.invisioncommunity.com'>Invision Power Services, Inc.</a>
+ * @copyright	(c) Invision Power Services, Inc.
+ * @license		https://www.invisioncommunity.com/legal/standards/
+ * @package		Invision Community
+ * @subpackage	Nexus
+ * @since		20 Jul 2017
+ */
+
+define('REPORT_EXCEPTIONS', TRUE);
+$body = trim( @file_get_contents('php://input') );
+$data = json_decode( $body, TRUE );
+require_once '../../../../init.php';
+\IPS\Session\Front::i();
+
+function loadTransaction( $returnUrl )
+{
+	$url = new \IPS\Http\Url( $returnUrl );
+	$transaction = \IPS\nexus\Transaction::load( $url->queryString['nexusTransactionId'] );
+		
+	$settings = json_decode( $transaction->method->settings, TRUE );
+	if ( !validate( $settings['webhook_secret'] ) )
+	{
+		throw new \Exception('INVALID_SIGNING_SECRET');
+	}
+	
+	return $transaction;
+}
+
+function validate( $correctSigningSecret )
+{
+	global $body;
+	
+	if ( !$correctSigningSecret )
+	{
+		return TRUE; // In case they upgraded and haven't provided one
+	}
+	
+	if ( isset( $_SERVER['HTTP_STRIPE_SIGNATURE'] ) )
+	{
+		foreach ( explode( ',', $_SERVER['HTTP_STRIPE_SIGNATURE'] ) as $row )
+		{
+			list( $k, $v ) = explode( '=', trim( $row ) );
+			$sig[ trim( $k ) ][] = trim( $v );
+		}
+		
+		$signedPayload = $sig['t'][0] . '.' . $body;
+		$signature = hash_hmac( 'sha256', $signedPayload, $correctSigningSecret );
+		
+		return in_array( $signature, $sig['v1'] );
+	}
+	else
+	{
+		return FALSE;
+	}
+}
+
+try
+{
+	/* source.chargeable means we're ready to charge (then we need to wait for charge.succeeded) */
+	if ( isset( $data['type'] ) and $data['type'] === 'source.chargeable' )
+	{
+		/* Is this a validation? */
+		if ( isset( $data['data']['object']['owner']['email'] ) and $data['data']['object']['owner']['email'] === 'webhook-validate@example.com' and isset( $data['data']['object']['metadata']['method'] ) )
+		{
+			$method = \IPS\nexus\Gateway::load( $data['data']['object']['metadata']['method'] );
+			$settings = json_decode( $method->settings, TRUE );
+			if ( !isset( $settings['webhook_verified'] ) )
+			{
+				if ( validate( $settings['webhook_secret'] ) )
+				{
+					$settings['webhook_verified'] = $settings['webhook_secret'];
+				}
+				else
+				{
+					$settings['webhook_verified'] = 'ERR';
+				}
+				$method->settings = json_encode( $settings );
+				$method->save();
+			}
+			exit;
+		}
+		
+		/* Load the transaction */
+		if ( isset( $data['data']['object']['metadata']['Transaction ID'] ) )
+		{
+			$transaction = \IPS\nexus\Transaction::load( $data['data']['object']['metadata']['Transaction ID'] );
+		}
+		else
+		{
+			$transaction = loadTransaction( $data['data']['object']['redirect']['return_url'] );
+		}
+		if ( $transaction->status !== \IPS\nexus\Transaction::STATUS_PENDING and $transaction->status !== \IPS\nexus\Transaction::STATUS_WAITING )
+		{
+			\IPS\Output::i()->sendOutput( 'BAD_STATUS', 403, 'text/plain' );
+			exit;
+		}
+		
+		/* Load the source */
+		$source = $transaction->method->api( 'sources/' . preg_replace( '/[^A-Z0-9_]/i', '', $data['data']['object']['id'] ) );
+		if ( $source['client_secret'] != $data['data']['object']['client_secret'] )
+		{
+			\IPS\Output::i()->sendOutput( 'BAD_SECRET', 403, 'text/plain' );
+			exit;
+		}
+		
+		/* Check we're not just going to refuse this */
+		$maxMind = NULL;
+		if ( \IPS\Settings::i()->maxmind_key and ( !\IPS\Settings::i()->maxmind_gateways or \IPS\Settings::i()->maxmind_gateways == '*' or in_array( $transaction->method->id, explode( ',', \IPS\Settings::i()->maxmind_gateways ) ) ) )
+		{
+			$maxMind = new \IPS\nexus\Fraud\MaxMind\Request;
+			$maxMind->setTransaction( $transaction );
+		}
+		$fraudResult = $transaction->runFraudCheck( $maxMind );
+		if ( $fraudResult === \IPS\nexus\Transaction::STATUS_REFUSED )
+		{
+			$transaction->executeFraudAction( $fraudResult, FALSE );
+			$transaction->sendNotification();
+		}
+		
+		/* Authorize */	
+		else
+		{	
+			$transaction->auth = $transaction->method->auth( $transaction, array( $transaction->method->id . '_card' => $source['id'] ) );
+			$transaction->status = \IPS\nexus\Transaction::STATUS_GATEWAY_PENDING;
+			$transaction->save();
+		}
+		
+		/* OK */
+		\IPS\Output::i()->sendOutput( 'OK', 200, 'text/plain' );
+	}
+	
+	/* charge.succeeded means we got the payment */
+	elseif ( isset( $data['type'] ) and $data['type'] === 'charge.succeeded' )
+	{
+		/* Load the transaction */
+		if ( isset( $data['data']['object']['metadata']['Transaction ID'] ) )
+		{
+			$transaction = \IPS\nexus\Transaction::load( $data['data']['object']['metadata']['Transaction ID'] );
+		}
+		else
+		{
+			$transaction = loadTransaction( $data['data']['object']['source']['redirect']['return_url'] );
+		}
+		if ( $transaction->status !== \IPS\nexus\Transaction::STATUS_GATEWAY_PENDING )
+		{
+			\IPS\Output::i()->sendOutput( 'BAD_STATUS', 403, 'text/plain' );
+			exit;
+		}
+		
+		/* Create a MaxMind request */
+		$maxMind = NULL;
+		if ( \IPS\Settings::i()->maxmind_key and ( !\IPS\Settings::i()->maxmind_gateways or \IPS\Settings::i()->maxmind_gateways == '*' or in_array( $transaction->method->id, explode( ',', \IPS\Settings::i()->maxmind_gateways ) ) ) )
+		{
+			$maxMind = new \IPS\nexus\Fraud\MaxMind\Request;
+			$maxMind->setTransaction( $transaction );
+		}
+		
+		/* Check fraud rules */
+		$fraudResult = $transaction->runFraudCheck( $maxMind );
+		if ( $fraudResult )
+		{
+			$transaction->executeFraudAction( $fraudResult, TRUE );
+		}
+		
+		/* If we're not being fraud blocked, we can approve */
+		if ( $fraudResult === \IPS\nexus\Transaction::STATUS_PAID )
+		{
+			$transaction->member->log( 'transaction', array(
+				'type'			=> 'paid',
+				'status'		=> \IPS\nexus\Transaction::STATUS_PAID,
+				'id'			=> $transaction->id,
+				'invoice_id'	=> $transaction->invoice->id,
+				'invoice_title'	=> $transaction->invoice->title,
+			) );
+			$transaction->approve();
+		}
+		
+		/* Either way, let the user know we got their payment */
+		$transaction->sendNotification();
+				
+		/* OK */
+		\IPS\Output::i()->sendOutput( 'OK', 200, 'text/plain' );
+	}
+	
+	/* charge.failed means it failed */
+	elseif ( isset( $data['type'] ) and $data['type'] === 'charge.failed' )
+	{
+		/* Load the transaction */
+		if ( isset( $data['data']['object']['metadata']['Transaction ID'] ) )
+		{
+			$transaction = \IPS\nexus\Transaction::load( $data['data']['object']['metadata']['Transaction ID'] );
+		}
+		else
+		{
+			$transaction = loadTransaction( $data['data']['object']['source']['redirect']['return_url'] );
+		}
+		if ( $transaction->status !== \IPS\nexus\Transaction::STATUS_GATEWAY_PENDING )
+		{
+			\IPS\Output::i()->sendOutput( 'BAD_STATUS', 403, 'text/plain' );
+			exit;
+		}
+		
+		/* Mark it failed */
+		$transaction->status = \IPS\nexus\Transaction::STATUS_REFUSED;
+		$extra = $transaction->extra;
+		$extra['history'][] = array( 's' => \IPS\nexus\Transaction::STATUS_REFUSED, 'noteRaw' => $data['data']['object']['failure_message'] );
+		$transaction->extra = $extra;
+		$transaction->save();
+		$transaction->member->log( 'transaction', array(
+			'type'			=> 'paid',
+			'status'		=> \IPS\nexus\Transaction::STATUS_REFUSED,
+			'id'			=> $transaction->id,
+			'invoice_id'	=> $transaction->invoice->id,
+			'invoice_title'	=> $transaction->title,
+		), FALSE );
+		
+		/* Send notification */
+		$transaction->sendNotification();
+		
+		/* Return */
+		\IPS\Output::i()->sendOutput( 'OK', 200, 'text/plain' );
+	}
+	
+	/* charge.dispute.created is a chargeback */
+	elseif ( isset( $data['type'] ) and $data['type'] === 'charge.dispute.created' and isset( $data['data']['object']['charge'] ) )
+	{
+		$transaction = \IPS\nexus\Transaction::constructFromData( \IPS\Db::i()->select( '*', 'nexus_transactions', array( 't_gw_id=?', $data['data']['object']['charge'] ) )->first() );
+		$settings = json_decode( $transaction->method->settings, TRUE );
+		if ( !validate( $settings['webhook_secret'] ) )
+		{
+			throw new \Exception('INVALID_SIGNING_SECRET');
+		}
+		
+		$transaction->status = $transaction::STATUS_DISPUTED;
+		$extra = $transaction->extra;
+		$extra['history'][] = array( 's' => $transaction::STATUS_DISPUTED, 'on' => $data['data']['object']['created'], 'ref' => $data['data']['object']['id'] );
+		$transaction->extra = $extra;
+		$transaction->save();
+		
+		if ( $transaction->member )
+		{
+			$transaction->member->log( 'transaction', array(
+				'type'		=> 'status',
+				'status'	=> $transaction::STATUS_DISPUTED,
+				'id'		=> $transaction->id
+			) );
+		}
+		
+		$transaction->invoice->markUnpaid( \IPS\nexus\Invoice::STATUS_CANCELED );
+	}
+	
+	/* charge.dispute.closed is a chargeback being resolved */
+	elseif ( isset( $data['type'] ) and $data['type'] === 'charge.dispute.closed' and isset( $data['data']['object']['charge'] ) and isset( $data['data']['object']['status'] ) )
+	{
+		$transaction = \IPS\nexus\Transaction::constructFromData( \IPS\Db::i()->select( '*', 'nexus_transactions', array( 't_gw_id=?', $data['data']['object']['charge'] ) )->first() );
+		$settings = json_decode( $transaction->method->settings, TRUE );
+		if ( !validate( $settings['webhook_secret'] ) )
+		{
+			throw new \Exception('INVALID_SIGNING_SECRET');
+		}
+		
+		if ( $data['data']['object']['status'] === 'won' )
+		{
+			$transaction->status = $transaction::STATUS_PAID;
+			$transaction->save();
+			if ( !$transaction->invoice->amountToPay()->amount->isGreaterThanZero() )
+			{	
+				$transaction->invoice->markPaid();
+			}
+		}
+		else
+		{
+			$transaction->status = $transaction::STATUS_REFUNDED;
+			$transaction->save();
+		}
+	}
+}
+catch ( \Exception $e )
+{
+	\IPS\Output::i()->sendOutput( $e->getMessage(), 500, 'text/plain' );
+}

applications/nexus/interface/licenses/index.php

@@ -9,6 +9,7 @@
  * @since		01 Apr 2015
  */
 
+define('REPORT_EXCEPTIONS', TRUE);
 require_once '../../../../init.php';
 
 if ( \IPS\NEXUS_LKEY_API_ALLOW_IP_OVERRIDE )

applications/nexus/interface/monitoring/respond.php

@@ -9,6 +9,7 @@
  * @since		07 Aug 2014
  */
 
+define('REPORT_EXCEPTIONS', TRUE);
 require_once '../../../../init.php';
 \IPS\Dispatcher\External::i();
 try