Invision Power Services, Inc. * @copyright (c) Invision Power Services, Inc. * @license https://www.invisioncommunity.com/legal/standards/ * @package Invision Community * @subpackage Nexus * @since 07 Mar 2014 */ namespace IPS\nexus\Fraud\MaxMind; /* To prevent PHP errors (extending class does not exist) revealing path */ if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) ) { header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' ); exit; } /** * MaxMind Request */ class _Request { /** * @brief Data that will be posted */ protected $data = array(); /** * Constructor * * @param bool $session Set session data (set to FALSE if this is being initiated outside the checkout sequence) * @param NULL|string $maxmindKey MaxMind License Key (NULL to get from settings) * @return void */ public function __construct( $session=TRUE, $maxmindKey=NULL ) { $this->data['license_key'] = $maxmindKey ?: \IPS\Settings::i()->maxmind_key; if ( $session ) { $this->setIpAddress( \IPS\Request::i()->ipAddress() ); $this->data['sessionID'] = session_id(); if ( isset( $_SERVER['HTTP_USER_AGENT'] ) and $_SERVER['HTTP_USER_AGENT'] ) { $this->data['user_agent'] = $_SERVER['HTTP_USER_AGENT']; } if ( isset( $_SERVER['HTTP_ACCEPT_LANGUAGE'] ) and $_SERVER['HTTP_ACCEPT_LANGUAGE'] ) { $this->data['accept_language'] = $_SERVER['HTTP_ACCEPT_LANGUAGE']; } } } /** * Set IP Address * * @param string $ipAddress IP Address * @return void */ public function setIpAddress( $ipAddress ) { $this->data['i'] = $ipAddress; } /** * Set Transaction * * @param \IPS\nexus\Transaction $transaction * @return void */ public function setTransaction( \IPS\nexus\Transaction $transaction ) { $this->setMember( $transaction->member->member_id ? $transaction->member : $transaction->invoice->member ); if ( $billingAddress = $transaction->invoice->billaddress ) { $this->setBillingAddress( $transaction->invoice->billaddress ); } if ( $shippingAddress = $transaction->invoice->shipaddress ) { $this->setShippingAddress( $transaction->invoice->shipaddress ); } $this->data['order_amount'] = (string) $transaction->amount->amount; $this->data['order_currency'] = $transaction->amount->currency; } /** * Set Billing Address * * @param \IPS\GeoLocation $billingAddress * @return void */ public function setBillingAddress( \IPS\GeoLocation $billingAddress ) { $this->data['city'] = $billingAddress->city; $this->data['region'] = $billingAddress->region; $this->data['postal'] = $billingAddress->postalCode; $this->data['country'] = $billingAddress->country; } /** * Set Shipping Address * * @param \IPS\GeoLocation $shippingAddress * @return void */ public function setShippingAddress( \IPS\GeoLocation $shippingAddress ) { $this->data['shipAddr'] = implode( ', ', $shippingAddress->addressLines ); $this->data['shipCity'] = $shippingAddress->city; $this->data['shipRegion'] = $shippingAddress->region; $this->data['shipPostal'] = $shippingAddress->postalCode; $this->data['shipCountry'] = $shippingAddress->country; } /** * Set Member * * @param \IPS\Member $member * @return void */ public function setMember( \IPS\Member $member ) { $this->_setEmailProperties( $member->email ); $this->data['usernameMD5'] = md5( $member->name ); } /** * @brief MaxMind common typo domains list * @see https://github.com/maxmind/minfraud-api-php/blob/b08158b6c096bde8560b1b7fb8bb548c79f8d57b/src/MinFraud/Util.php#L18 */ protected static $typoDomains = [ // gmail.com '35gmai.com' => 'gmail.com', '636gmail.com' => 'gmail.com', 'gamil.com' => 'gmail.com', 'gmail.comu' => 'gmail.com', 'gmial.com' => 'gmail.com', 'gmil.com' => 'gmail.com', 'yahoogmail.com' => 'gmail.com', // outlook.com 'putlook.com' => 'outlook.com', ]; /** * Set the email properties after applying MaxMind's recommended normalization * * @see https://dev.maxmind.com/normalizing-email-addresses-for-minfraud/ * @param string $email The member's email address * @return void */ protected function _setEmailProperties( $email ) { $email = trim( \strtolower( $email ) ); $local = \substr( $email, 0, \strrpos( $email, '@' ) ); $domain = \substr( $email, \strrpos( $email, '@' ) + 1 ); /* Trim the domain and remove trailing dots */ $domain = rtrim( trim( $domain ), '.' ); /* Convert IDNs to ASCII */ if ( !\function_exists('idn_to_ascii') ) { \IPS\IPS::$PSR0Namespaces['TrueBV'] = \IPS\ROOT_PATH . "/system/3rd_party/php-punycode"; require_once \IPS\ROOT_PATH . "/system/3rd_party/php-punycode/polyfill.php"; } $asciiDomain = idn_to_ascii( $domain, \IDNA_NONTRANSITIONAL_TO_ASCII, \INTL_IDNA_VARIANT_UTS46 ); if( $asciiDomain !== FALSE ) { $domain = $asciiDomain; } /* Then address common typos */ $domain = isset( static::$typoDomains[ $domain ] ) ? static::$typoDomains[ $domain ] : $domain; /* Now remove email aliases from the local part */ $divider = ( $domain === 'yahoo.com' ) ? '-' : '+'; if( $alias = \strpos( $local, $divider ) ) { $local = \substr( $local, 0, $alias ); } $this->data['domain'] = $domain; $this->data['emailMD5'] = md5( $local . '@' . $domain ); } /** * Set Phone Number * * @param string $phoneNumber * @return void */ public function setPhone( $phoneNumber ) { $this->data['custPhone'] = $phoneNumber; } /** * Set Credit Card * * @param \IPS\nexus\CreditCard|string $card The card number * @return void */ public function setCard( $card ) { $this->data['txn_type'] = 'creditcard'; $cardNumber = ( $card instanceof \IPS\nexus\CreditCard ) ? $card->number : $card; $this->data['bin'] = mb_substr( $cardNumber, 0, 6 ); } /** * Set Transaction Type * * @param string $type Transaction Type * @return void */ public function setTransactionType( $type ) { $this->data['txn_type'] = $type; } /** * Set AVS Result * * @param string $code AVS Code * @return void */ public function setAVS( $code ) { $this->data['avs_result'] = $code; } /** * Set CVV Result * * @param bool $result CVV check result (boolean only - do not provide actual code) * @return void */ public function setCVV( $result ) { $this->data['cvv_result'] = $result ? 'Y' : 'N'; } /** * Make Request * * @return \IPS\nexus\Fraud\MaxMind\Response * @throws \IPS\Http\Request\Exception */ public function request() { $response = \IPS\Http\Url::external( 'https://minfraud.maxmind.com/app/ccv2r' )->request()->post( $this->data ); if ( isset( $response->httpHeaders['Content-Type'] ) and preg_match( '/; charset=(.+?)$/', $response->httpHeaders['Content-Type'], $matches ) ) { $response = mb_convert_encoding( $response, 'UTF-8', $matches[1] ); } return new \IPS\nexus\Fraud\MaxMind\Response( (string) $response ); } }