src/Controller/PaymentController.php line 363

Open in your IDE?
  1. <?php
  3. /*
  4.  * The Payment controller contains methods for the following payment gateways:
  5.  * BarclaysSmart Pay - http://www.barclaycard.com/smartpay/documentation/pdf/SmartPay_HPP_IntegrationGuide.pdf
  6.  * Authorize.net - https://developer.authorize.net/guides/DPM/wwhelp/wwhimpl/js/html/wwhelp.htm
  7.  */
  9. namespace App\Controller;
  11. use Doctrine\Persistence\ManagerRegistry;
  12. use Sensio\Bundle\FrameworkExtraBundle\Configuration\Security;
  13. use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
  14. use Symfony\Bridge\Twig\Mime\TemplatedEmail;
  15. use Symfony\Bridge\Twig\Mime\WrappedTemplatedEmail;
  16. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  17. use Symfony\Component\HttpFoundation\RedirectResponse;
  18. use Symfony\Component\HttpFoundation\Request;
  19. use Symfony\Component\HttpFoundation\Response;
  20. use Symfony\Component\Mailer\Mailer;
  21. use Symfony\Component\Mailer\MailerInterface;
  22. use Symfony\Component\Mailer\Transport;
  23. use Symfony\Component\Mime\Email;
  24. use Symfony\Component\Routing\Annotation\Route;
  25. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  26. use Symfony\Contracts\Translation\TranslatorInterface;
  27. use Psr\Log\LoggerInterface;
  28. use Twig\Environment;
  30. use App\Entity\Booking as Booking;
  32. class PaymentController extends AbstractController
  33. {
  34.     private $loggedUser;
  35.     
  36.     public function __construct(private ManagerRegistry $doctrine, private LoggerInterface $logger, private TranslatorInterface $trans, private MailerInterface $mailer, private Environment $twig)
  37.     {
  38.         
  39.     }
  41.     #[Route('/customer/booking-confirmation/{ref}', name: 'bookingLink')]
  42.     public function confirmAction($ref)
  43.     {
  44.         $em = $this->doctrine->getManager();
  45.         $booking = $this->decodeRef(urldecode($ref));
  46.         $this->loggedUser = $this->getUser();
  47.         $this->logger->info('Confirm booking for ref '.$ref);
  48.         
  49.         if ($booking)
  50.         {
  51.             $this->logger->info('Found booking Id: '.$booking->getBookingid());
  52.             $paid = false;
  53.             $payment = $this->getPayment($em, $booking, $paid);
  54.             $this->logger->info("paid: ".$paid);
  55.             
  56.             if (!$payment)
  57.             {
  58.                 $payment = new Payment();
  59.                 $payment->setPaymentgateway($booking->getBookingoffice()->getPaymentgateway());
  60.                 $payment->setBooking($booking);
  61.                 $payment->setUpdated( new \DateTime() );
  62.                 $em->persist($payment);
  63.                 $em->flush();
  64.                 $paymentArray = $em->getRepository('App\Entity\Payment')->findByBooking($booking->getBookingid());
  65.                 $payment = array_pop($paymentArray); 
  66.             }
  67.             else if ($paid)
  68.             {
  69.                 $redirect = $this->generateUrl('successPayment', array('payment' => $this->createPaymentRef($payment)), UrlGeneratorInterface::ABSOLUTE_URL);
  70.                 return new RedirectResponse($redirect);
  71.             }
  73.             $paymentTemplate = $booking->getBookingoffice()->getPaymentgateway()->getTemplate();
  74.             $this->logger->info('paymentTemplate: '.$paymentTemplate);
  75.             $func = 'appendData_'.$paymentTemplate;
  76.             $this->logger->info("Looking for appendData func: ".$func);
  77.             
  78.             if (method_exists($this, $func))
  79.                 $data = $this->$func($booking, $payment);
  80.             else 
  81.                 $data = array();
  82.             
  83.             $this->logger->info('Got payment Id: '.$payment->getPaymentid());
  84.             
  85.             $data['bookingRef'] =     $ref;
  86.             $data['booking']    =    $booking;
  87.             $data['payment']    =    $payment;
  88.             $data['user']        =    $this->loggedUser;
  89.             $data['resURL']        =    $this->generateURL('processBooking', array('gateway' => $payment->getPaymentgateway()->getPaymentgatewayid()), UrlGeneratorInterface::ABSOLUTE_URL);
  90.             $data['paid']        =    $paid;
  91.             $data['footer']     =     'booking.confirmation.footer.'.$paymentTemplate;
  92.             $data['template']    =     $paymentTemplate;
  93.             
  94.             $response             =     $this->render('booking/confirm.html.twig', $data);
  95.             $date                 =     new \DateTime();  // Set expire date to +2 seconds to prevent caching
  96.             $date->modify('+2 seconds');
  97.             $response->setExpires($date);
  98.             
  99.             return $response;
  100.         } 
  101.         else 
  102.             return $this->render('booking/notfound.html.twig', array("user" => $this->loggedUser));
  103.     }
  105.     #[Route('/customer/payment-failure/{payment}', name: 'failurePayment')]
  106.     public function failureAction($payment, Request $request)
  107.     {
  108.         $payment = $this->decodePaymentRef($payment);
  109.         if ($payment)
  110.         {
  111.             $notificationData = explode('\n', $payment->getNotification());
  112.             $this->logger->info('$notificationData: '.end($notificationData));
  113.             $notificationData = json_decode(end($notificationData));
  114.             return $this->render('payment/failure.html.twig', array('payment' => $payment, 'failureReason' => $notificationData->code.': '.$notificationData->status));
  115.         }
  116.         else
  117.             return $this->render('booking/notfound.html.twig', array("user"=>$this->loggedUser ));
  118.     }
  120.     #[Route('/customer/worldpay/getRedirectUrl/{ref}', name: 'getWorldpayRedirectUrl')]
  121.     public function getWorldpayRedirectUrlAction($ref)
  122.     {
  123.         //BE 190702: this is for Worldpay XML payments only
  124.         $em = $this->doctrine->getManager();
  125.         $booking = $this->decodeRef(urldecode($ref));
  126.         $this->loggedUser = $this->getUser();        
  127.         $this->logger->info("getRedirectUrlAction for ref ".$ref);
  129.         if ($booking)
  130.         {
  131.             $this->logger->info("Found booking Id: ".$booking->getBookingid());
  132.             $paid = false;
  133.             $payment = $this->getPayment($em, $booking, $paid);
  134.             $this->logger->info("Found payment Id: ".$payment->getPaymentid());
  135.             $office = $booking->getBookingoffice();
  136.             //$data = $this->appendData_worldpay($booking, $payment);
  137.             
  138.             $cost = number_format($booking->getTotalprice(), 2, '', '');
  139.             $currency = $booking->getBookingcurrency()->getCode();
  140.             $officeSalt = $office->getMerchantsalt();
  141.             $merchantCode = $this->decrypt($office->getMerchantcode(), $officeSalt).$currency;
  142.             //$merchantCode = $office->getMerchantcode().$currency;
  144.             $xml = '<?xml version="1.0" encoding="UTF-8"?>
  145.             <!DOCTYPE paymentService PUBLIC "-//Worldpay//DTD Worldpay PaymentService v1//EN" "http://dtd.worldpay.com/paymentService_v1.dtd">
  146.             <paymentService version="1.4" merchantCode="'.$merchantCode.'">
  147.                <submit>
  148.                   <order orderCode="'.$payment->getPaymentid().'" installationId="1356990">
  149.                      <description>'.$booking->__toString().'</description>
  150.                      <amount currencyCode="'.$currency.'" exponent="2" value="'.$cost.'" />
  151.                      <orderContent><![CDATA[]]></orderContent>
  152.                      <paymentMethodMask>
  153.                         <include code="ALL" />
  154.                      </paymentMethodMask>
  155.                      <shopper>
  156.                         <shopperEmailAddress>'.$booking->getCustomer()->getEmail().'</shopperEmailAddress>
  157.                      </shopper>
  158.                      <billingAddress>
  159.                         <address>
  160.                            <address1>'.$booking->getCustomer()->getAddress().'</address1>
  161.                            <address2></address2>
  162.                            <address3></address3>
  163.                            <postalCode>'.$booking->getCustomer()->getPostcode().'</postalCode>
  164.                            <city>'.$booking->getCustomer()->getCity().'</city>
  165.                            <state>'.$booking->getCustomer()->getState().'</state>
  166.                            <countryCode>'.$booking->getCustomer()->getCustomercountry()->getCountry2Code().'</countryCode>
  167.                         </address>
  168.                      </billingAddress>
  169.                   </order>
  170.                </submit>
  171.             </paymentService>';
  173.             $this->logger->info("Xml: ".$xml);
  174.             $username = $merchantCode;//$this->decrypt($office->getMerchantusername(), $officeSalt);
  175.             $pwd = $this->decrypt($office->getMerchantpassword(), $officeSalt);
  176.             $test_mode = $this->getParameter('app.worldpayxml_test_mode') == 'TRUE';
  177.             $basicAuth = $username . ':' . $pwd;
  178.             //$this->logger->info("Using Auth: ".$basicAuth);
  179.             $basicAuthBase64 = base64_encode($basicAuth);
  180.             $basicAuthUrlEncoded = urlencode($username) . ":" . urlencode($pwd);
  181.             
  182.             if ($test_mode)
  183.                 $url = "https://secure-test.worldpay.com/jsp/merchant/xml/paymentService.jsp";
  184.             else
  185.                 $url = "https://secure.worldpay.com/jsp/merchant/xml/paymentService.jsp";
  186.             
  187.             $this->logger->info("Using Url: ".$url);
  188.             //$this->logger->info("Using Url: ".str_replace($basicAuth, "user:pwd", $url));            
  189.             
  190.             $ch = curl_init();            
  191.             curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  192.             curl_setopt($ch, CURLOPT_USERPWD,  $basicAuth);
  193.             //curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: text/xml', 'Authorization: ' . $basicAuthBase64));
  194.             
  195.             curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: text/xml'));            
  196.             curl_setopt($ch, CURLOPT_URL, $url);
  197.             curl_setopt($ch, CURLOPT_POST, true);
  198.             curl_setopt($ch, CURLOPT_POSTFIELDS, $xml);
  199.             curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  200.             curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 300);
  201.             $response = curl_exec($ch);
  202.             
  203.             if ($response == false)
  204.             {
  205.                 $this->logger->error('Error code: '.curl_error($ch));
  206.                 $url = $this->generateUrl('failurePayment', array('payment'=>$this->createPaymentRef($payment)), UrlGeneratorInterface::ABSOLUTE_URL);
  207.                 $err = array('date' => date('Y-m-d H:i:s'),'code' => 999, 'status' => 'XML Response empty - contact Support');
  208.                 $payment->setNotification($payment->getNotification().'\n'.json_encode($err));
  209.                 $em->persist($payment);
  210.                 $em->flush();
  211.                     
  212.                 $this->mailSalesFailure($payment);
  213.                 //$this->logger->info("failurePayment: ".$serializedData);
  214.                 return new RedirectResponse($url);
  215.              }
  216.              else
  217.              {
  218.                 $this->logger->info("response: ".$response);
  219.                 $responseXml = simplexml_load_string($response);
  220.                 //$this->logger->info("responseXml: ".print_r($responseXml, true));
  221.                 
  222.                 if (property_exists($responseXml->reply, 'error') || strpos($response, '<html') !== false)
  223.                 {
  224.                     $url = $this->generateUrl('failurePayment', array('payment'=>$this->createPaymentRef($payment)), UrlGeneratorInterface::ABSOLUTE_URL);
  226.                     if (property_exists($responseXml->reply, 'error'))
  227.                     {
  228.                         $code = (int)$responseXml->reply->error['code'];
  229.                         $error = (string)$responseXml->reply->error;
  230.                         if ($error == 'Order has already been paid')
  231.                             $status = $error;
  232.                         else
  233.                             $status = 'There was an unknown problem with the gateway - Contact Support, and give them this info: '.(string)$responseXml->reply->error;
  234.                     }
  235.                     else if (strpos($response, '<html') !== false && strpos($response, 'Status: 401') !== false)
  236.                     {
  237.                         $code = '401';
  238.                         $status = 'There was an authentication problem with the gateway - contact Support, and give them this info: Status 401: Authentication Problem';
  239.                     }
  240.                     else
  241.                     {
  242.                         $code = '?';
  243.                         $status = 'There was an unknown problem with the gateway - Contact Support, and give them this info: '.htmlentities($response);
  244.                     }
  245.                     
  246.                     $err = array('date' => date('Y-m-d H:i:s'), 'code' => $code, 'status' => $status);
  247.                     $payment->setNotification($payment->getNotification().'\n'.json_encode($err));
  248.                     $em->persist($payment);
  249.                     $em->flush();
  250.                     
  251.                     $this->mailSalesFailure($payment);
  252.                     //$this->logger->info("failurePayment: ".$serializedData);
  253.                     return new RedirectResponse($url);
  254.                     
  255.                 }
  256.                 else if (property_exists($responseXml->reply, 'orderStatus') && property_exists($responseXml->reply->orderStatus, 'reference'))
  257.                 {
  258.                     $refUrl = (string)$responseXml->reply->orderStatus->reference[0];
  259.                     $this->logger->info("reference: ".$refUrl);
  260.                     //$this->logger->info("reference: ".print_r($refUrl, true));
  261.                     //$this->logger->info("reference type: ".gettype($refUrl));
  262.                     //return $this->redirect($refUrl);
  263.                     
  264.                     $successURL    = urlencode($this->generateURL("processWorldpay", array("pid" => $payment->getPaymentID() ), UrlGeneratorInterface::ABSOLUTE_URL));
  265.                     $refUrl .= '&successURL='.$successURL.'&failureURL='.$successURL.'&cancelURL='.$successURL.'&errorURL='.$successURL;
  266.                     $this->logger->info("reference: ".$refUrl);
  267.                     return new RedirectResponse($refUrl);
  268.                 }
  269.             }
  270.             
  271.             curl_close($ch);
  272.         }
  273.         else
  274.             $this->logger->info("No booking found!");
  275.     }
  277.     public function paymentNotificationAction($template, Request $request)
  278.     {
  279.         $this->logger->info("PaymentController.paymentNotificationAction started template:$template");
  280.         if ($template == "barclays")
  281.         {        
  282.             $dataChk=array();
  283.             $dataChk['live']                =    $request->get("live");  // live or test
  284.             $dataChk["eventCode"]            =    $request->get("eventCode");  // event code - will be AUTHORISATION
  285.             $dataChk["pspReference"]        =    $request->get("pspReference");  // Barclay ref code
  286.             $dataChk["originalReference"]    =    $request->get("originalReference");  // blank
  287.             $dataChk["merchantReference"]    =    $request->get("merchantReference");  // Our ref code
  288.             $dataChk["merchantAccountCode"]    =    $request->get("merchantAccountCode");  // Merchant account code
  289.             $dataChk["success"]                =    $request->get("success");
  290.             $dataChk["paymentMethod"]        =    $request->get("paymentMethod");
  291.             $dataChk["operations"]            =    $request->get("operations");
  292.             $dataChk["reason"]                =    $request->get("reason");
  293.             $dataChk["amount"]                =    $request->get("amount");
  294.             
  295.             $this->logger->info("PaymentController.paymentNotificationAction Request Data: ".print_r($dataChk,true));
  296.                         
  297.             $em = $this->doctrine->getManager();
  298.             $payment    =    false;
  299.             
  300.             if ($dataChk["merchantReference"] > 0)
  301.             {
  302.                 $this->logger->info("PaymentController.paymentNotificationAction Retrieving Payment: ".$dataChk['merchantReference']);
  303.                 $payment    =    $em->getRepository('App\Entity\Payment')->find($dataChk["merchantReference"]);
  304.             } else {
  305.                 $this->logger->info("PaymentController.paymentNotificationAction No Asscociated Payment");
  306.             }
  307.             if ($payment)
  308.             {
  309.                 $this->logger->info("PaymentController.paymentNotificationAction Payment Successfully Retreived: ".$dataChk['merchantReference']);
  310.                 $payment->setNotification(serialize($dataChk));
  311.                 $em->persist($payment);
  312.                 $em->flush();
  313.                 if ($dataChk["success"]=='false') 
  314.                 {
  315.                     $this->logger->info("PaymentController.paymentNotificationAction Payment Unsuccessful, Mailing Sales Rep: ".$dataChk['merchantReference']);
  316.                     $this->mailSalesFailure($payment);
  317.                 } else 
  318.                 {
  319.                     $this->logger->info("PaymentController.paymentNotificationAction Payment Successful: ".$dataChk['merchantReference']);                    
  320.                 }
  321.             }
  322.             $this->logger->info("PaymentController.paymentNotificationAction Returning 200 Response");                    
  323.             return new Response('[accepted]',200,array('content-type' => 'text/html'));
  324.         }
  325.     }
  326.     
  327.     #[Route('/customer/worldpay/redirect/{pid}', name: 'processWorldpay')]
  328.     public function processWorldpayAction($pid, MailerInterface $mailer, Request $request)
  329.     {
  330.         $em = $this->doctrine->getManager();
  331.         $payment =     $this->saveReturnData_worldpay($pid, $request);
  332.         $msg = 'NONE';
  333.         
  334.         if ($payment)
  335.         {
  336.             $paymentRef = $this->createPaymentRef($payment);
  337.             $booking = $payment->getBooking();
  339.             if ($payment->getSuccessful() == 1)
  340.             {
  341.                 $redirect = $this->generateUrl('successPayment', array("payment"=>$paymentRef), UrlGeneratorInterface::ABSOLUTE_URL);
  342.                 $this->mailCustomerConfirmation($booking, $payment);
  343.                 $this->mailSalesConfirmation($booking, $payment, $request);
  344.                 
  345.                 $booking->setPaid(1);
  346.                 $em->persist($booking);
  347.                 $em->flush();
  348.             } else {
  349.                 $redirect = $this->generateUrl('failurePayment', array("payment"=>$paymentRef), UrlGeneratorInterface::ABSOLUTE_URL);
  350.                 $this->mailSalesFailure($payment);
  351.             }
  352.         } else
  353.             $redirect = $this->generateUrl('failurePayment', array("payment"=>$paymentRef), UrlGeneratorInterface::ABSOLUTE_URL);
  354.         
  355.         //$redirect             =     $redirect===false ?  $request->get("MC_failure") : $redirect;
  356.         //$params                =    $request->query->all();
  357.         //return $this->render("ACSBundle:Payment:process_worldpay.html.twig", array("redirect"=>$redirect, "payment"=>$payment, 'params'=>$params, 'msg'=>$msg) );
  358.         //return new Response("done");
  359.         return new RedirectResponse($redirect);
  360.     }
  362.     #[Route('/customer/payment-success/{payment}', name: 'successPayment')]
  363.     public function successAction($payment)
  364.     {
  365.         $payment = $this->decodePaymentRef($payment);
  366.         if ($payment)
  367.             return $this->render("payment/success.html.twig", array('payment' => $payment));
  368.         else
  369.             return $this->render("booking/notfound.html.twig", array("user"=>$this->loggedUser ));
  370.     }
  371.     
  372.     public function testAction()
  373.     {
  374.         $test = 'MYADMINCODE^MYMERCHANT^T0211010:1400:GBP:AUTHORISED';
  375.         $result = hash_hmac('sha256', $test, '@p-p1epie');
  376.         return new Response($result);
  378.         /*$em             =     $this->getDoctrine()->getManager();
  379.         $payment        =    $em->getRepository('App\Entity\Payment')->find(57);
  380.         $booking         =     $payment->getBooking();
  381.         $this->mailCustomerConfirmation($booking, $payment);
  382.         
  383.         $customer        =    $booking->getCustomer();
  384.         $user            =    $booking->getCreatedby(); 
  385.         
  386.         $recipient        =    trim($customer->getFirstname()." ".$customer->getSurname());
  387.         $sender            =    trim($user->getFirstname()." ".$user->getSurname());
  388.         
  389.         return $this->render("emails/CustomerConfirmation.html.twig", 
  390.                 array(
  391.                         'recipient' => $recipient,
  392.                         'sender'=> $sender,
  393.                         'booking'=>$booking,
  394.                         'payment'=>$payment,
  395.                 ));*/
  396.     }
  398.     /*** PRIVATE HELPER METHODS ***/
  399.     private function appendData_worldpay($booking, $payment)
  400.     {
  401.         // See docs for implementation : https://beta.developer.worldpay.com/docs/wpg/hostedintegration/quickstart
  402.         $test_mode        =    $this->getParameter('app.worldpayxml_test_mode') == 'TRUE';
  403.         
  404.         // MD5 hash params may be chosen from the merchant interface.  Currently set to 
  405.         // md5_secret:instId:currency:amount:paymentid
  406.         $cost            =    number_format($booking->getTotalprice(), 2, '.', '');
  407.         $currency        =    $booking->getBookingcurrency()->getCode();
  408.         
  409.         $sig_params        =    array();
  410.         $sig_params[]     =    null; //$md5_secret;
  411.         $sig_params[]     =    null; //$instId;
  412.         $sig_params[]     =    $currency;
  413.         $sig_params[]     =    $cost;
  414.         $sig_params[]     =    $payment->getPaymentid();
  415.         
  416.         $bookingOffice = $booking->getBookingoffice();
  417.         $bookingAgentEmail = $booking->getCreatedby()->getEmail();
  418.         $bookingAgentName = trim($booking->getCreatedby()->getFirstname()." ".$booking->getCreatedby()->getSurname());
  419.         $contactDetails = $bookingOffice->getAddress()."<br />".$bookingOffice->getCity()."<br />".$bookingOffice->getZipcode()."<br />".$bookingOffice->getOfficecountry()->getName()."<br />Reg. No.: ".$bookingOffice->getRegnumber()."<br />Phone: ".$bookingOffice->getPhone()."<br />Booking agent: ".$bookingAgentName." - <a href='mailto:".$bookingAgentEmail."'>".$bookingAgentEmail."</a>";
  420.         
  421.         $data            =    array(
  422.                                 "orderId"        =>     $payment->getPaymentid(),
  423.                                 "testMode"        =>    $test_mode,
  424.                                 "orderCurrency" =>     $currency,
  425.                                 "orderAmount"     =>     $cost,
  426.                                 "description"     =>     $booking->__toString(),
  427.                                 "shopperEmail"     =>     $booking->getCustomer()->getEmail(),
  428.                                 "name"            =>     $booking->getCustomer()->getFirstname()." ".$booking->getCustomer()->getSurname(),
  429.                                 "address"        =>     $booking->getCustomer()->getAddress(),
  430.                                 "city"            =>     $booking->getCustomer()->getCity(),
  431.                                 "zip"            =>     $booking->getCustomer()->getPostcode(),
  432.                                 "state"            =>     $booking->getCustomer()->getState(),
  433.                                 "country"        =>     $booking->getCustomer()->getCustomercountry()->getCountry2Code(),
  434.                                 "phone"         =>     preg_replace("/^![0-9]$/","",$booking->getCustomer()->getPhone()),
  435.                                 "successURL"    =>     $this->generateURL("successPayment", array( "payment"=>$payment->getPaymentID() ), UrlGeneratorInterface::ABSOLUTE_URL),
  436.                                 "failureURL"    =>     $this->generateURL("failurePayment", array( "payment"=>$payment->getPaymentID() ), UrlGeneratorInterface::ABSOLUTE_URL),
  437.                                 // Following fields required by VISA for payments in GBP
  438.                                 "shopperAdditionalAccountNumber"     =>     "",
  439.                                 "shopperAdditionalLastName"            =>     "",
  440.                                 "shopperAdditionalBirthDate"        =>     "",
  441.                                 "shopperAdditionalPostalCode"        =>    "",    
  442.                                 "contactDetails"                    => $contactDetails
  443.                             );
  445.         $data['MD5sig']    =    md5(implode(":", $sig_params));
  446.         return $data;
  447.     }
  449.     private function createPaymentRef($payment)
  450.     {
  451.         $booking = $payment->getBooking();
  452.         $ref=array();
  453.         $ref[]=$payment->getPaymentid();
  454.         $ref[]=$booking->getBookingid();
  455.         $ref[]=$booking->getCustomer()->getCustomerid();
  456.         $ref[]=$booking->getBookingoffice()->getOfficeid();
  457.         
  458.         /*$finalRef = $ref[0].$ref[1].$ref[2].$ref[3];
  459.         $next = $this->getEverySecondDigit($finalRef);
  460.         $finalRef = $finalRef / $next;
  461.         $next = $this->getEverySecondDigit($finalRef);
  462.         $finalRef = $finalRef / $next;
  463.         $next = $this->getEverySecondDigit($finalRef);
  464.         $finalRef = $finalRef * $next;
  465.         $decimalPos = strrpos($finalRef, '.');
  466.         $finalRef = str_replace('.', '', $finalRef);
  467.         $finalRef .= $decimalPos;
  468.         $this->logger->info('$finalRef: '.$finalRef);
  470.         return urlencode($finalRef);*/
  471.         return urlencode(bin2hex(implode(Booking::URL_SECRET, $ref)));
  472.     }
  474.     private function decodePaymentRef($ref)
  475.     {
  476.         $this->logger->info('decodePaymentRef: '.$ref);
  478.         //$decimalPos = (string)$ref[strlen((string)$ref) - 1];
  479.         //$this->logger->info('decimalPos: '.$decimalPos);
  480.         
  481.         $data        =    explode(Booking::URL_SECRET, pack("H*", $ref));
  482.         $this->logger->info('Data: '.print_r($data, true));
  483.         $id            =    array_shift($data);
  484.         $em = $this->doctrine->getManager();
  485.         $payment    =    $em->getRepository('App\Entity\Payment')->find($id);
  486.         if ($payment) 
  487.         {
  488.             $this->logger->info('Got payment: '.$payment->getPaymentid());
  489.             $booking = $payment->getBooking();
  490.             if ($booking->getBookingid() == $data[0] && $booking->getCustomer()->getCustomerid() == $data[1] && $booking->getBookingoffice()->getOfficeid() == $data[2])
  491.                 return $payment;
  492.             else {
  493.                 $this->logger->info('Did not match criteria: bid: '.$booking->getBookingid().' $data[0]: '.$data[0].', cid: '.$booking->getCustomer()->getCustomerid().' $data[1]: '.$data[1].', oid: '.$booking->getBookingoffice()->getOfficeid().' $data[2]: '.$data[2]);
  494.                 return false;
  495.             }
  496.         } else {
  497.             $this->logger->info('Could not find payment from id: '.$id);
  498.             return false; 
  499.         }
  500.     }
  502.     private function decodeRef($ref)
  503.     {
  504.         $data        =    explode(Booking::URL_SECRET, pack("H*", $ref));
  505.         //$decimalPos = (string)$ref[(strlen($ref) - 1];
  507.         $id            =    array_shift($data);
  508.         $em = $this->doctrine->getManager();
  509.         $booking    =    $em->getRepository('App\Entity\Booking')->find($id);
  511.         if ($booking) 
  512.         {
  513.             if ($booking->getCustomer()->getCustomerid() == $data[0] && $booking->getBookingoffice()->getOfficeid()==$data[1])
  514.                 return $booking;
  515.             else 
  516.                 return false;
  517.         } else
  518.             return false; 
  519.     }
  521.     private function decrypt($encrypted, $salt) {
  522.         //https://www.the-art-of-web.com/php/two-way-encryption/
  523.         $encKey = $this->getParameter('app.worldpayxml_enckey').$salt;
  524.         $method = 'AES-256-CTR';
  525.         list($encrypted, $encIV) = explode("::", $encrypted);
  526.         $decrypted = openssl_decrypt($encrypted, $method, $encKey, 0, hex2bin($encIV));
  527.         return $decrypted;
  528.     }
  530.     private function encrypt($token, $salt) {
  531.         //https://www.the-art-of-web.com/php/two-way-encryption/
  532.         $encKey = $this->getParameter('app.worldpayxml_enckey').$salt;
  533.         $method = 'AES-256-CTR';
  534.         $encIV = openssl_random_pseudo_bytes(openssl_cipher_iv_length($method));
  535.         $encrypted = openssl_encrypt($token, $method, $encKey, 0, $encIV) . "::" . bin2hex($encIV);
  536.         return $encrypted;
  537.     }
  539.     public static function getEverySecondDigit($input) {
  540.         //$this->logger = Logger::getLogger(__CLASS__);
  541.         $input = (string)$input;
  542.         $len = strlen($input);
  543.         //$this->logger->info('Length of '.$input.' is '.$len);
  544.         $final = '';
  546.         for ($x = 0; $x < $len; $x++) {
  547.             if ($input[$x] != '.') {
  548.                 if (($x + 1) % 2 === 0) {
  549.                     $final .= $input[$x];
  550.                 }
  551.             } else {
  552.                 $final .= '.';
  553.             }
  554.         }
  556.         //$this->logger->info('From $input: '.$input.', calculated: '.$final);
  557.         return $final;
  558.     }
  560.     private function getPayment($em, $booking, &$paid)
  561.     {
  562.         $this->logger->info('getPayment for booking: '.$booking->getBookingid());
  563.         $paymentArray    =    $em->getRepository('App\Entity\Payment')->findByBooking($booking->getBookingid());
  564.         $payment        =    false;
  565.         foreach ($paymentArray as $p)
  566.         {
  567.             $this->logger->info('Found payment: '.$p->getPaymentid().', is successful: '.$p->getSuccessful());
  568.             $payment = $p;
  569.             if ($p->getSuccessful() == 1)
  570.             {
  571.                 $paid =    true;
  572.                 break;
  573.             }
  574.             //else if ($p->getResulttoken() == null && $p->getAuthcode() == null && $p->getSuccessful() == null) {
  575.             //    $payment = $p;
  576.             //    break;
  577.             //} 
  578.         }
  580.         return $payment;
  581.     }
  583.     private function mailCustomerConfirmation($booking, $payment)
  584.     {
  585.         $customer        = $booking->getCustomer();
  586.         $user            = $booking->getCreatedby();
  587.         $office         = $booking->getBookingoffice();
  589.         $recipient        = trim($customer->getFirstname().' '.$customer->getSurname());
  590.         $sender            = trim($user->getFirstname().' '.$user->getSurname());
  591.         $from           = $office->getEmailaddress();
  592.         
  593.         $message = (new TemplatedEmail())
  594.             ->subject('Booking Payment Received')
  595.             ->from($from)
  596.             ->to($customer->getEmail());
  598.         //https://github.com/symfony/symfony/issues/42407#issuecomment-1006995400
  599.         $html = $this->render('emails/CustomerConfirmation.html.twig',
  600.         [
  601.             'recipient' => $recipient,
  602.             'sender' => $sender,
  603.             'booking' => $booking,
  604.             'payment' => $payment,
  605.             'email' => new WrappedTemplatedEmail($this->twig, $message),                        
  606.         ])
  607.         ->getContent();
  608.         $message->html($html);
  609.         
  610.         $this->mailer = new Mailer(Transport::fromDsn('sendmail://default'));
  611.         $sent = $this->mailer->send($message);
  613.         //https://stackoverflow.com/q/71496164/206852
  614.         // if ($sent !== null)
  615.         //     dd($sent->getDebug());
  616.     }
  617.     
  618.     private function mailSalesConfirmation($booking, $payment, $request) {        
  619.         $customer       = $booking->getCustomer();
  620.         $user           = $booking->getCreatedby();
  621.         $office         = $booking->getBookingoffice();
  622.         
  623.         $recipient        =    trim($user->getFirstname().' '.$user->getSurname());
  624.         $sender            = 'System';
  625.         $from           = $office->getEmailaddress();
  626.         
  627.         $message = (new TemplatedEmail())
  628.             ->subject('Booking Payment Received')
  629.             ->from($from)
  630.             ->to($user->getEmail())
  631.             ->cc($this->getParameter('app.accountsemail'));
  633.         //https://github.com/symfony/symfony/issues/42407#issuecomment-1006995400
  634.         $html = $this->render('emails/SalesConfirmation.txt.twig',
  635.         [
  636.             'recipient' => $recipient,
  637.             'sender' => $sender,
  638.             'booking' => $booking,
  639.             'payment' => $payment,
  640.             'cardUsed' => $request->get('cardType'),
  641.             'email' => new WrappedTemplatedEmail($this->twig, $message),                        
  642.         ])
  643.         ->getContent();
  644.         $message->html($html);
  645.         
  646.         $this->mailer = new Mailer(Transport::fromDsn('sendmail://default'));
  647.         $sent = $this->mailer->send($message);
  649.         //https://stackoverflow.com/q/71496164/206852
  650.         // if ($sent !== null)
  651.         //     dd($sent->getDebug());
  652.     }
  653.     
  654.     private function mailSalesFailure($payment)
  655.     {
  656.         $this->logger->info('mailSalesFailure');
  657.             
  658.         if ($payment)
  659.         {
  660.             $booking        = $payment->getBooking();            
  661.             $customer        = $booking->getCustomer();
  662.             $user            = $booking->getCreatedby();        
  663.             $office         = $booking->getBookingoffice();
  665.             $recipient        = trim($user->getFirstname().' '.$user->getSurname());
  666.             $sender            = 'System';
  667.             $name            = trim($customer->getFirstname().' '.$customer->getSurname());
  668.             $from           = $office->getEmailaddress();
  669.             
  670.             $template         =    $booking->getBookingoffice()->getPaymentgateway()->getTemplate();
  671.             $notificationData = explode('\n', $payment->getNotification());
  672.             $notificationData = json_decode(end($notificationData));
  673.             
  674.             //$this->logger->info('$payment->getNotification(): '.$payment->getNotification());
  675.             $this->logger->info('$notificationData: '.print_r($notificationData, true));
  676.             $this->logger->info('json_last_error: '.json_last_error());
  677.             
  678.             switch ($template)
  679.             {
  680.                 case 'authorize':
  681.                     $reason =    $notificationData->response_reason_text;
  682.                     break;
  684.                 case 'barclays':
  685.                     $reason    =     $notificationData['reason'];
  686.                     break;
  688.                 case 'worldpay':
  689.                     $reason =     'Error code: '.$notificationData->code.', Error message: '.$notificationData->status;
  690.                     break;
  691.             }
  692.             
  693.             $message = (new TemplatedEmail())
  694.                 ->subject('Booking Payment Failed')
  695.                 ->from($from)
  696.                 ->to($user->getEmail());
  697.             
  698.             //https://github.com/symfony/symfony/issues/42407#issuecomment-1006995400
  699.             $html = $this->render('emails/Failure.txt.twig',
  700.             [
  701.                 'recipient'     =>     $recipient,
  702.                 'sender'        =>     $sender,
  703.                 'booking'        =>    $booking,
  704.                 'payment'        =>    $payment,
  705.                 'name'            =>    $name,
  706.                 'reason'        =>    $reason,
  707.                 'email' => new WrappedTemplatedEmail($this->twig, $message),                        
  708.             ])
  709.             ->getContent();
  710.             $message->html($html);
  711.             
  712.             $this->mailer = new Mailer(Transport::fromDsn('sendmail://default'));
  713.             $sent = $this->mailer->send($message);
  714.     
  715.             //https://stackoverflow.com/q/71496164/206852
  716.             // if ($sent !== null)
  717.             //     dd($sen
  718.         }
  719.     }
  721.     private function saveReturnData_worldpay($pid, Request $request)
  722.     {
  723.         $this->logger->info('saveReturnData_worldpay');
  724.         
  725.         $em = $this->doctrine->getManager();
  726.         $payment = $em->getRepository('App\Entity\Payment')->find($pid);
  727.         
  728.         if ($payment)
  729.         {
  730.             $this->logger->info("Found payment with id ".$pid);
  731.             
  732.             if ($request->query->has('errorRefNumber') && $request->query->has('errors'))
  733.             {
  734.                 $err = array('date' => date('Y-m-d H:i:s'), 'code' => $request->get('errorRefNumber'), 'status' => 'Worldpay error: '.$request->get('errors'));
  735.                 $payment->setNotification($payment->getNotification().'\n'.json_encode($err));        
  736.                 $payment->setSuccessful(0);
  737.                 $em->persist($payment);
  738.                 $em->flush();
  739.                 return $payment;
  740.             }
  741.             
  742.             //AUTHORISED EXAMPLE
  743.             //https://dev.onlinepayments.aircharterservice.com/customer/worldpay/redirect/296?orderKey=AIRCHARTERSERVICES%5EAIRCHARTERUKECOMGBP%5E296&paymentStatus=AUTHORISED&paymentAmount=1234565&paymentCurrency=GBP&mac2=c975417ba3d7b63a29c1457802379b4f6b799a67750d9aab590dd277622ff92e
  745.             //CANCELLED EXAMPLE
  746.             //https://dev.onlinepayments.aircharterservice.com/customer/worldpay/redirect/309?orderKey=AIRCHARTERSERVICES%5EAIRCHARTERUKECOMGBP%5E309&orderAmount=65421&orderCurrency=GBP&mac2=5e3ee235214f9906c3869bb916f49477f126d076cb11c6497472f07b2528fdbf
  748.             //REFUSED EXAMPLE
  749.             //https://dev.onlinepayments.aircharterservice.com/customer/worldpay/redirect/309?orderKey=AIRCHARTERSERVICES%5EAIRCHARTERUKECOMGBP%5E309&paymentStatus=REFUSED&paymentAmount=65421&paymentCurrency=GBP&mac2=8911c0e65ad5d7bbd219db86581c84fe63a532a34023b2ac670e44f0d6e6c677
  751.             //ERROR EXAMPLE
  752.             //https://dev.onlinepayments.aircharterservice.com/customer/worldpay/redirect/309?orderKey=AIRCHARTERSERVICES%5EAIRCHARTERUKECOMGBP%5E309&errorRefNumber=D190710-T154806-M001-43&errors=Gateway+error
  754.             //BE 190708: documentation at https://beta.developer.worldpay.com/docs/wpg/hostedintegration/securingpayments
  755.             $booking = $payment->getBooking();
  756.             $office = $booking->getBookingoffice();
  757.             $officeSalt = $office->getMerchantsalt();
  758.             $macSecret = $this->decrypt($office->getMerchantmacsecret(), $officeSalt);
  759.             $test_mode = $this->getParameter('app.worldpayxml_test_mode') == 'TRUE';
  760.             $currency = $booking->getBookingcurrency()->getCode();
  761.             $merchantCode = $this->decrypt($office->getMerchantcode(), $officeSalt).$currency;
  762.             
  763.             // status can be "AUTHORISED" or "REFUSED"
  764.             $status            =    $request->get('paymentStatus');
  765.             
  766.             $sig_params        =    array();
  767.             $sig_params[]     =    $request->get('orderKey');
  768.             $sig_params[]     =    $request->get('paymentAmount');
  769.             $sig_params[]     =    $request->get('paymentCurrency');
  771.             if ($status)
  772.                 $sig_params[] =    $status;
  773.             
  774.             $sig_check        =    array();
  775.             $sig_check[]     =    'AIRCHARTERSERVICES^'.$merchantCode.'^'.$payment->getPaymentId();
  776.             $sig_check[]     =    ltrim((string)number_format($booking->getTotalprice(), 2, '', ''), '0');
  777.             $sig_check[]     =    $currency;
  779.             if ($status)
  780.                 $sig_check[] = $status;
  781.             
  782.             $sigSent = implode(":", $sig_params);
  783.             $sigCalculated = implode(":", $sig_check);
  784.             $calculated_hash = hash_hmac('sha256', $sigCalculated, $macSecret);
  785.             //$this->logger->info('Using secret: '.$macSecret);
  786.             $hash_check = $calculated_hash == $request->get('mac2');
  787.             $retVal = false;
  789.             if ($hash_check)
  790.             {
  791.                 $statusCode = 1;
  793.                 if (!$status || $status == 'CANCELLED')
  794.                     $statusCode = 3;
  795.                 else if ($status == 'AUTHORISED')
  796.                     $statusCode = 1;
  797.                 else if ($status == 'REFUSED')
  798.                     $statusCode = 2;
  799.                 else
  800.                     $statusCode = 99;
  801.                     
  802.                 $this->logger->info('Hash check succeeded!');
  803.                 $payment->setResulttoken($request->get('mac2'));
  804.                 $payment->setAuthcode($request->get('mac2'));
  805.                 $payment->setSuccessful($statusCode == 1);
  806.                 $payment->setNotification($payment->getNotification().'\n'.json_encode(array('date' => date('Y-m-d H:i:s'), 'code' => $statusCode, 'status' => $status, 'params' => $request->query->all())));
  807.                 $retVal = $payment;
  808.             }
  809.             else
  810.             {
  811.                 $this->logger->info('Sig params sent: '.$sigSent.', Sig params calculated: '.$sigCalculated.', are equal = '.($sigSent == $sigCalculated));
  812.                 $this->logger->info('Failed Hash Check: Calculated Value: '.$calculated_hash.', Sent Value (mac): '.$request->get('mac').', Sent Value (mac2): '.$request->get('mac2'));
  813.                 $payment->setNotification($payment->getNotification().'\n'.json_encode(array('date' => date('Y-m-d H:i:s'), 'code' => 4, 'status' => 'Failed Auth Hash Check - contact Support', 'params' => $request->query->all())));
  814.                 $retVal = $payment;
  815.             }
  817.             $em->persist($payment);
  818.             $em->flush();
  819.             return $retVal;
  820.         } else {
  821.             $this->logger->info("Payment with id ".$pid." was NOT found.");
  822.             return false;
  823.         }
  824.     }
  826.     /*** OLD CODE - KEPT FOR REFERENCE IF REQUIRED IN THE FUTURE ***/
  827.     private function appendData_barclays($booking, $payment) {
  828.         $hmac_key         =     $this->getParameter('barclays_hmac_key'); 
  829.         $skin_code        =    $this->getParameter('barclays_skin_code'); 
  830.         $merchant_acc    =    $this->getParameter('barclays_merchant_acc');
  831.         
  832.         $time            =    $payment->getUpdated()->format("U") + 60*60*24*30;
  833.         $paymentexpires    =    gmdate("Y-m-d", $time) . 'T' . gmdate("H:i:s", $time) ."Z";
  834.         //$paymentexpires=gmdate(DATE_ISO8601,$expTimestamp);
  835.     
  836.         $data = array(
  837.             'paymentAmount'        =>    $booking->getTotalprice()*100,
  838.             'currencyCode'        =>    $booking->getBookingcurrency()->getCode(),
  839.             'shipBeforeDate'    =>    $payment->getUpdated()->format('Y-m-d'),
  840.             'merchantReference'    =>    $payment->getPaymentid(),
  841.             'skinCode'            =>    $skin_code,
  842.             'merchantAccount'    =>    $merchant_acc,
  843.             'sessionValidity'    =>    $paymentexpires,
  844.             'shopperEmail'        =>    $booking->getCustomer()->getEmail(),
  845.             'shopperReference'    =>    $booking->getCustomer()->getCustomerid(),
  846.             'allowedMethods'    =>    '',
  847.             'blockedMethods'    =>    '',
  848.             'shopperStatement'    =>    '',
  849.             'billingAddressType'=>    '',
  850.         );
  851.         $summary                =    implode("",$data);
  852.         
  853.         $merchantSig            =    base64_encode(hash_hmac('sha1',$summary,$hmac_key,true));
  854.         
  855.         $data['orderData']        =    base64_encode($booking->__toString());
  856.         $data['merchantSig']    =    $merchantSig;
  857.         
  858.         return $data;
  859.     }
  860.     
  861.     private function appendData_authorize($booking,$payment) {
  862.         $hmac_key         =     $this->getParameter('authorize_hmac_key'); 
  863.         $api_login        =    $this->getParameter('authorize_api_login');
  864.         
  865.         /*added by vazquel on 2014-02-19*/
  866.         $md5_hash     =     $this->getParameter('authorize_md5_hash'); 
  867.         $gateway = new \Authorizenet_Authorizenet($api_login, $md5_hash);
  868.         $response = $gateway->AuthorizeSIM;
  869.         $fp_timestamp = gmdate("U");
  870.         $fingerprint = \AuthorizeNetSIM_Form::getFingerprint($api_login, $hmac_key, $booking->getTotalprice(), $payment->getPaymentid(), $fp_timestamp, $booking->getBookingcurrency()->getCode());
  871.         
  872.         $data['x_login']         =     $api_login;
  873.         $data['x_test_request'] =     $this->getParameter('authorize_test_mode');
  874.         $data['x_fp_sequence']    =     $payment->getPaymentid();
  875.         $data['x_fp_timestamp']    =     $fp_timestamp;
  876.         $data['x_amount']         =     $booking->getTotalprice();
  877.         $data['x_currency_code']=     $booking->getBookingcurrency()->getCode();
  878.         $data['x_fp_hash']        =     $fingerprint;
  879.         $data['x_description']    =     $booking->__toString();
  880.         $data['x_first_name']    =     $booking->getCustomer()->getFirstname();
  881.         $data['x_last_name']    =     $booking->getCustomer()->getSurname();
  882.         $data['x_address']        =     $booking->getCustomer()->getAddress();
  883.         $data['x_city']            =     $booking->getCustomer()->getCity();
  884.         $data['x_zip']            =     $booking->getCustomer()->getPostcode();
  885.         $data['x_state']        =     $booking->getCustomer()->getState();
  886.         $data['x_country']        =     $booking->getCustomer()->getCustomercountry()->getName();
  887.         $data['x_phone']         =     preg_replace("/^![0-9]$/","",$booking->getCustomer()->getPhone());
  888.         $data['x_email']        =     $booking->getCustomer()->getEmail();
  889.         $data['booking']        =    $booking;
  890.         $data['payment']        =    $payment;
  891.         
  892.         return $data;
  893.     }
  894.     
  895.     private function appendData_moneyswap($booking, $payment) {
  896.         $moneyswap_aid                 = $this->getParameter('moneyswap_aid');
  897.         $moneyswap_md5_signature     = $this->getParameter('moneyswap_md5_signature');
  898.     
  899.         $data = array(
  900.             "acqID" => $moneyswap_aid,
  901.             //"acqID" => "04020826",
  902.             "backURL" => $this->generateURL("processBooking", array( "gateway"=>$payment->getPaymentgateway()->getPaymentgatewayid() ), UrlGeneratorInterface::ABSOLUTE_URL),
  903.             "charSet" => "UTF-8",
  904.             "frontURL" => $this->generateURL("processBooking", array( "gateway"=>$payment->getPaymentgateway()->getPaymentgatewayid() ), UrlGeneratorInterface::ABSOLUTE_URL),
  905.             "merID" => "846084045110001",
  906.             "merReserve" => $booking->__toString(),
  907.             "orderAmount" => number_format($booking->getTotalprice(), 2, '.', ''),
  908.             "orderCurrency" => $booking->getBookingcurrency()->getCode(),
  909.             "orderNum" => $payment->getPaymentid(),
  910.             "paymentSchema" => "UP",
  911.             "transTime" => date("YmdHis"),
  912.             "transType" => "PURC",
  913.             "signType" => "MD5",
  914.             "version" => "VER000000002",
  915.         );
  916.         $signature = MoneySwapHelper::createSignature($moneyswap_md5_signature, $data);
  917.         $data['signature'] = $signature;
  918.         
  919.         return $data;
  920.     }
  922.     private function getRelayResponseSnippet($redirect_url) {
  923.         return "<html><head><script language=\"javascript\">
  924.                 <!--
  925.                 window.location1=\"{$redirect_url}\";
  926.                 //-->
  927.                 </script>
  928.                 </head><body><noscript><meta http-equiv=\"refresh\" content=\"1;url={$redirect_url}\"></noscript>Test</body></html>";
  929.     }
  931.     #[Route('/customer/process/{gateway}', name: 'processBooking')]
  932.     public function processAction($gateway, MailerInterface $mailer, Request $request)
  933.     {
  934.         $em             =     $this->getDoctrine()->getManager();
  935.         $paymentGateway    =    $em->getRepository('App\Entity\Paymentgateway')->find($gateway);
  936.         $func            =    "saveReturnData_".$paymentGateway->getTemplate();
  938.         $api_login     =     $this->getParameter('authorize_api_login');
  939.         $md5_hash     =     $this->getParameter('authorize_md5_hash');
  940.         
  941.         $fullDomain      =     ($request->server->get("https") ? "https://" : "http://") . $request->getHost();
  942.         
  943.         if (method_exists($this, $func))
  944.             $payment    =    $this->$func($request);
  945.         
  946.         if ($payment)
  947.         {
  948.             $booking=$payment->getBooking();
  949.             if ($payment->getSuccessful()==1)
  950.             {
  951.                 if ($gateway == 3) {
  952.                     if (!$booking->getPaid()) {
  953.                         $this->mailCustomerConfirmation($booking,$payment);
  954.                         $this->mailSalesConfirmation($booking,$payment,$request);
  955.                     }
  956.                 } else {
  957.                     $this->mailCustomerConfirmation($booking,$payment);
  958.                     $this->mailSalesConfirmation($booking,$payment,$request);
  959.                 }
  960.                 $booking->setPaid(1);
  961.                 $em->persist($booking);
  962.                 $em->flush();
  963.                 //$this->mailCustomerConfirmation($booking,$payment);
  964.                 //$this->mailSalesConfirmation($booking,$payment);
  965.                 $fail = 0;
  966.                 $url = $this->generateUrl('successPayment', array("payment"=>$payment->getPaymentid()), UrlGeneratorInterface::ABSOLUTE_URL);
  967.                 if ($gateway == 2)
  968.                 {
  969.                     //added by vazquel on 2014-02-19
  970.                     $auth_controller = new \Authorizenet_Authorizenet($api_login, $md5_hash);
  971.                     $response = $auth_controller->AuthorizeSIM;
  972.                     
  973.                     //added by vazquel on 2014-02-19 (Redirect to the payment success page)
  974.                     if ($response->isAuthorizeNet())
  975.                         return new Response($this->getRelayResponseSnippet($fullDomain.$url));
  976.                     else
  977.                         return $this->redirect($url);
  978.                 }
  979.                 else
  980.                     return $this->redirect($url);
  981.             } else 
  982.                 $fail=1;
  983.         } else 
  984.             $fail=2;
  985.         
  986.         if ($fail == 1)
  987.         {
  988.             $url = $this->generateUrl('failurePayment', array("payment"=>$payment->getPaymentid()), UrlGeneratorInterface::ABSOLUTE_URL);
  989.             if ($gateway == 2)
  990.             {
  991.                 $this->mailSalesFailure($payment); 
  992.                 $auth_controller = new \Authorizenet_Authorizenet($api_login, $md5_hash);
  993.                 $response = $auth_controller->AuthorizeSIM;
  994.                 
  995.                 if ($response->isAuthorizeNet())
  996.                     return new Response($this->getRelayResponseSnippet($fullDomain.$url));
  997.                 else
  998.                     return $this->redirect($url);
  999.             }
  1000.             else 
  1001.                 return $this->redirect($url);
  1002.         }
  1003.     }
  1005.     private function saveReturnData_barclays(Request $request) {
  1006.         $hmac_key         =     $this->getParameter('barclays_hmac_key'); 
  1007.         $em             =     $this->getDoctrine()->getManager();
  1008.         $payment        =     $em->getRepository('App\Entity\Payment')->find($request->get("merchantReference"));
  1009.         
  1010.         if ($payment)
  1011.         {
  1012.             $booking    =     $payment->getBooking();
  1013.             $data        =    $this->appendData_barclays($booking, $payment);
  1014.             
  1015.             $dataChk    =     array();
  1016.             $dataChk[]    =    $request->get("authResult");
  1017.             $dataChk[]    =    $request->get("pspReference");
  1018.             $dataChk[]    =    $request->get("merchantReference");
  1019.             $dataChk[]    =    $request->get("skinCode");
  1020.             $dataChk[]    =    $request->get("merchantReturnData");
  1021.             
  1022.             $sig        =     base64_encode(hash_hmac('sha1',implode("", $dataChk),$hmac_key,true));
  1023.             
  1024.             if ($sig==$request->get("merchantSig"))
  1025.             {
  1026.                 $payment->setResulttoken($request->get("pspReference"));
  1027.                 $payment->setAuthcode($request->get("authResult"));
  1028.                 $payment->setSuccessful("AUTHORISED"==$request->get("authResult"));
  1029.                 
  1030.                 $em->persist($payment);
  1031.                 $em->flush();
  1032.                 
  1033.                 return $payment;                
  1034.             }
  1035.             else
  1036.                 return false;
  1037.         } 
  1038.         else        
  1039.             return false;
  1040.     }
  1041.     
  1042.     private function saveReturnData_authorize(Request $request) {
  1043.         $hmac_key     =     $this->getParameter('authorize_hmac_key'); 
  1044.         $api_login     =     $this->getParameter('authorize_api_login'); 
  1045.         $md5_hash     =     $this->getParameter('authorize_md5_hash'); 
  1046.         
  1047.         $em = $this->doctrine->getManager();
  1048.         $payment    =    $em->getRepository('App\Entity\Payment')->find($request->get("x_invoice_num"));
  1049.         
  1050.         $gateway     =     new \Authorizenet_Authorizenet($api_login, $md5_hash);
  1051.         $response     =     $gateway->AuthorizeSIM;
  1052.         
  1053.             if ($response->isAuthorizeNet() && $payment instanceof Payment)
  1054.         {
  1055.             $payment->setResulttoken($response->authorization_code);
  1056.             $payment->setAuthcode($response->response_reason_code);
  1057.             $payment->setSuccessful($response->approved*1);
  1058.             $payment->setNotification(serialize($response));
  1059.             $em->persist($payment);
  1060.             $em->flush();
  1061.                  
  1062.             return $payment;
  1063.         }
  1064.         else
  1065.             die( "Error. Check your MD5 Setting.<br>Received: $response->md5_hash<br>Calculated: ".$response->generateHash());
  1066.     }
  1067.     
  1068.     private function saveReturnData_moneyswap(Request $request) {
  1069.         $moneyswap_aid                 = $this->getParameter('moneyswap_aid');
  1070.         $moneyswap_md5_signature     = $this->getParameter('moneyswap_md5_signature');
  1071.         $em             =     $this->getDoctrine()->getManager();
  1072.         $payment        =     $em->getRepository('App\Entity\Payment')->find($request->get("orderNum"));
  1073.         
  1074.         if ($payment)
  1075.         {
  1076.             $booking    =     $payment->getBooking();
  1077.             
  1078.             $query = "version=".$request->get("version");
  1079.             $query .= "&charSet=".$request->get("charSet");
  1080.             $query .= "&transType=".$request->get("transType");
  1081.             $query .= "&orderNum=".$request->get("orderNum");
  1082.             $query .= "&orderAmount=".$request->get("orderAmount");
  1083.             $query .= "&orderCurrency=".$request->get("orderCurrency");
  1084.             $query .= "&settAmount=".$request->get("settAmount");
  1085.             $query .= "&settCurrency=".$request->get("settCurrency");
  1086.             $query .= "&rate=".$request->get("rate");
  1087.             $query .= "&merReserve=".$request->get("merReserve");
  1088.             $query .= "&transID=".$request->get("transID");
  1089.             $query .= "&merID=".$request->get("merID");
  1090.             $query .= "&acqID=".$request->get("acqID");
  1091.             $query .= "&paymentSchema=".$request->get("paymentSchema");
  1092.             $query .= "&RespCode=".$request->get("RespCode");
  1093.             $query .= "&RespMsg=".$request->get("RespMsg");
  1094.             $query .= "&transTime=".$request->get("transTime");
  1095.             $query .= "&GWTime=".$request->get("GWTime");
  1096.             $query .= "&signType=".$request->get("signType");
  1097.             $query .= "&signature=".$request->get("signature");
  1098.             
  1099.             $isValid = MoneySwapHelper::verifySignature($moneyswap_md5_signature, $query);
  1100.             
  1101.             if ($isValid)
  1102.             {
  1103.                 $payment->setResulttoken($request->get("RespMsg"));
  1104.                 $payment->setAuthcode($request->get("RespCode"));
  1105.                 $payment->setSuccessful("00"==$request->get("RespCode"));
  1106.                 $payment->setNotification(serialize($query));
  1107.                 
  1108.                 $em->persist($payment);
  1109.                 $em->flush();
  1110.                 
  1111.                 return $payment;                
  1112.             }
  1113.             else
  1114.                 return false;
  1115.         } 
  1116.         else
  1117.             return false;
  1118.     }
  1119. }