<?php
class ControllerExtensionPaymentSecureTradingWs extends Controller {
	public function index() {
		$this->load->model('checkout/order');
		$this->load->language('extension/payment/securetrading_ws');

		$order_info = $this->model_checkout_order->getOrder($this->session->data['order_id']);

		if ($order_info) {
			$data['entry_type'] = $this->language->get('entry_type');
			$data['entry_number'] = $this->language->get('entry_number');
			$data['entry_expire_date'] = $this->language->get('entry_expire_date');
			$data['entry_cvv2'] = $this->language->get('entry_cvv2');

			$data['text_card_details'] = $this->language->get('text_card_details');
			$data['text_wait'] = $this->language->get('text_wait');

			$data['button_confirm'] = $this->language->get('button_confirm');

			$cards = array(
				'AMEX' => 'American Express',
				'VISA' => 'Visa',
				'DELTA' => 'Visa Debit',
				'ELECTRON' => 'Visa Electron',
				'PURCHASING' => 'Visa Purchasing',
				'VPAY' => 'V Pay',
				'MASTERCARD' => 'MasterCard',
				'MASTERCARDDEBIT' => 'MasterCard Debit',
				'MAESTRO' => 'Maestro',
				'PAYPAL' => 'PayPal',
			);

			for ($i = 1; $i <= 12; $i++) {
				$data['months'][] = array(
					'text' => strftime('%B', mktime(0, 0, 0, $i, 1, 2000)),
					'value' => sprintf('%02d', $i)
				);
			}

			$today = getdate();

			$data['year_expire'] = array();

			for ($i = $today['year']; $i < $today['year'] + 11; $i++) {
				$data['year_expire'][] = array(
					'text' => strftime('%Y', mktime(0, 0, 0, 1, 1, $i)),
					'value' => strftime('%Y', mktime(0, 0, 0, 1, 1, $i))
				);
			}

			$data['cards'] = array();

			foreach ($this->config->get('payment_securetrading_ws_cards_accepted') as $card_type) {
				$data['cards'][$card_type] = $cards[$card_type];
			}

			return $this->load->view('extension/payment/securetrading_ws', $data);
		}
	}

	public function process() {
		$this->load->model('checkout/order');
		$this->load->model('localisation/country');
		$this->load->model('extension/payment/securetrading_ws');
		$this->load->language('extension/payment/securetrading_ws');

		$order_info = $this->model_checkout_order->getOrder($this->session->data['order_id']);

		if ($order_info) {
			if ($this->config->get('payment_securetrading_ws_3d_secure')) {
				$requestblock_xml = new SimpleXMLElement('<requestblock></requestblock>');
				$requestblock_xml->addAttribute('version', '3.67');
				$requestblock_xml->addChild('alias', $this->config->get('payment_securetrading_ws_username'));

				$request_node = $requestblock_xml->addChild('request');
				$request_node->addAttribute('type', 'THREEDQUERY');

				$merchant_node = $request_node->addChild('merchant');
				$merchant_node->addChild('orderreference', $order_info['order_id']);
				$merchant_node->addChild('termurl', $this->url->link('extension/payment/securetrading_ws/threedreturn', '', true));

				$settlement_node = $request_node->addChild('settlement');
				$settlement_date = date('Y-m-d', strtotime(date('Y-m-d') . ' +' . $this->config->get('payment_securetrading_ws_settle_due_date') . ' days'));
				$settlement_node->addChild('settleduedate', $settlement_date);
				$settlement_node->addChild('settlestatus', $this->config->get('payment_securetrading_ws_settle_status'));

				$customer_node = $request_node->addChild('customer');
				$customer_node->addChild('useragent', $order_info['user_agent']);
				$customer_node->addChild('accept', $this->request->server['HTTP_ACCEPT']);

				$billing_node = $request_node->addChild('billing');
				$amount_node = $billing_node->addChild('amount', str_replace('.', '', $this->model_extension_payment_securetrading_ws->format($order_info['total'], $order_info['currency_code'], $order_info['currency_value'])));
				$amount_node->addAttribute('currencycode', $order_info['currency_code']);

				$billing_node->addChild('premise', $order_info['payment_address_1']);
				$billing_node->addChild('postcode', $order_info['payment_postcode']);

				$name_node = $billing_node->addChild('name');
				$name_node->addChild('first', $order_info['payment_firstname']);
				$name_node->addChild('last', $order_info['payment_lastname']);

				$payment_node = $billing_node->addChild('payment');
				$payment_node->addAttribute('type', $this->request->post['type']);
				$payment_node->addChild('pan', $this->request->post['number']);
				$payment_node->addChild('expirydate', $this->request->post['expire_month'] . '/' . $this->request->post['expire_year']);
				$payment_node->addChild('securitycode', $this->request->post['cvv2']);

				$operation_node = $request_node->addChild('operation');
				$operation_node->addChild('sitereference', $this->config->get('payment_securetrading_ws_site_reference'));
				$operation_node->addChild('accounttypedescription', 'ECOM');

				$response = $this->model_extension_payment_securetrading_ws->call($requestblock_xml->asXML());

				if ($response !== false) {
					$response_xml = simplexml_load_string($response);

					if ($response_xml->response['type'] == 'THREEDQUERY') {
						$error_code = (int)$response_xml->response->error->code;

						if ($error_code == 0) {
							$enrolled = (string)$response_xml->response->threedsecure->enrolled;

							if ($enrolled == 'Y') {
								$acs_url = (string)$response_xml->response->threedsecure->acsurl;
								$md = (string)$response_xml->response->threedsecure->md;
								$pareq = (string)$response_xml->response->threedsecure->pareq;

								$this->model_extension_payment_securetrading_ws->addMd($order_info['order_id'], $md);

								$json['status'] = 1;
								$json['acs_url'] = $acs_url;
								$json['md'] = $md;
								$json['pareq'] = $pareq;
								$json['term_url'] = $this->url->link('extension/payment/securetrading_ws/threedreturn', '', true);
							} else {
								$requestblock_xml = new SimpleXMLElement('<requestblock></requestblock>');
								$requestblock_xml->addAttribute('version', '3.67');
								$requestblock_xml->addChild('alias', $this->config->get('payment_securetrading_ws_username'));

								$request_node = $requestblock_xml->addChild('request');
								$request_node->addAttribute('type', 'AUTH');

								$request_node->addChild('merchant')->addChild('orderreference', $order_info['order_id']);

								$operation_node = $request_node->addChild('operation');
								$operation_node->addChild('parenttransactionreference', (string)$response_xml->response->transactionreference);
								$operation_node->addChild('sitereference', $this->config->get('payment_securetrading_ws_site_reference'));

								$response = $this->model_extension_payment_securetrading_ws->call($requestblock_xml->asXML());

								$json = $this->processAuthResponse($response, $order_info['order_id']);
							}
						} else {
							$json['message'] = $this->language->get('text_transaction_declined');
							$json['status'] = 0;
						}
					} else {
						$json['message'] = $this->language->get('text_transaction_failed');
						$json['status'] = 0;
					}
				} else {
					$json['message'] = $this->language->get('text_connection_error');
					$json['status'] = 0;
				}
			} else {
				$country = $this->model_localisation_country->getCountry($order_info['payment_country_id']);

				$json = array();

				$requestblock_xml = new SimpleXMLElement('<requestblock></requestblock>');
				$requestblock_xml->addAttribute('version', '3.67');
				$requestblock_xml->addChild('alias', $this->config->get('payment_securetrading_ws_username'));

				$request_node = $requestblock_xml->addChild('request');
				$request_node->addAttribute('type', 'AUTH');
				$operation_node = $request_node->addChild('operation');
				$operation_node->addChild('sitereference', $this->config->get('payment_securetrading_ws_site_reference'));
				$operation_node->addChild('accounttypedescription', 'ECOM');

				$merchant_node = $request_node->addChild('merchant');
				$merchant_node->addChild('orderreference', $order_info['order_id']);

				$settlement_node = $request_node->addChild('settlement');
				$settlement_date = date('Y-m-d', strtotime(date('Y-m-d') . ' +' . $this->config->get('payment_securetrading_ws_settle_due_date') . ' days'));
				$settlement_node->addChild('settleduedate', $settlement_date);
				$settlement_node->addChild('settlestatus', $this->config->get('payment_securetrading_ws_settle_status'));

				$billing_node = $request_node->addChild('billing');
				$billing_node->addChild('premise', $order_info['payment_address_1']);
				$billing_node->addChild('street', $order_info['payment_address_2']);
				$billing_node->addChild('town', $order_info['payment_city']);
				$billing_node->addChild('county', $order_info['payment_zone']);
				$billing_node->addChild('country', $country['iso_code_2']);
				$billing_node->addChild('postcode', $order_info['payment_postcode']);
				$billing_node->addChild('email', $order_info['email']);
				$name_node = $billing_node->addChild('name');

				$name_node->addChild('first', $order_info['payment_firstname']);
				$name_node->addChild('last', $order_info['payment_lastname']);

				$amount_node = $billing_node->addChild('amount', str_replace('.', '', $this->model_extension_payment_securetrading_ws->format($order_info['total'], $order_info['currency_code'], $order_info['currency_value'])));
				$amount_node->addAttribute('currencycode', $order_info['currency_code']);

				$payment_node = $billing_node->addChild('payment');
				$payment_node->addAttribute('type', $this->request->post['type']);
				$payment_node->addChild('pan', $this->request->post['number']);
				$payment_node->addChild('expirydate', $this->request->post['expire_month'] . '/' . $this->request->post['expire_year']);
				$payment_node->addChild('securitycode', $this->request->post['cvv2']);

				$response = $this->model_extension_payment_securetrading_ws->call($requestblock_xml->asXML());

				$json = $this->processAuthResponse($response, $order_info['order_id']);
			}
			$this->response->setOutput(json_encode($json));
		}
	}

	public function threedreturn() {
		$this->load->model('checkout/order');
		$this->load->model('extension/payment/securetrading_ws');
		$this->load->language('extension/payment/securetrading_ws');

		// Using unmodified $_POST to access values as per Secure Trading's requirements
		if (isset($_POST['PaRes']) && !empty($_POST['PaRes']) && isset($_POST['MD']) && !empty($_POST['MD'])) {
			$md = $_POST['MD'];
			$pares = $_POST['PaRes'];

			$order_id = $this->model_extension_payment_securetrading_ws->getOrderId($md);

			if ($order_id) {
				$requestblock_xml = new SimpleXMLElement('<requestblock></requestblock>');
				$requestblock_xml->addAttribute('version', '3.67');
				$requestblock_xml->addChild('alias', $this->config->get('payment_securetrading_ws_username'));

				$request_node = $requestblock_xml->addChild('request');
				$request_node->addAttribute('type', 'AUTH');

				$request_node->addChild('merchant')->addChild('orderreference', $order_id);

				$operation_node = $request_node->addChild('operation');
				$operation_node->addChild('md', $md);
				$operation_node->addChild('pares', $pares);

				$response = $this->model_extension_payment_securetrading_ws->call($requestblock_xml->asXML());

				if ($response) {
					$response_xml = simplexml_load_string($response);

					$error_code = (int)$response_xml->response->error->code;

					if ($error_code == 0) {
						$postcode_status = (int)$response_xml->response->security->postcode;
						$security_code_status = (int)$response_xml->response->security->securitycode;
						$address_status = (int)$response_xml->response->security->address;
						$authcode = (string)$response_xml->response->authcode;
						$threed_status = (string)$response_xml->response->threedsecure->status;

						$status_code_mapping = array(
							0 => $this->language->get('text_not_given'),
							1 => $this->language->get('text_not_checked'),
							2 => $this->language->get('text_match'),
							4 => $this->language->get('text_not_match'),
						);

						$threed_status_mapping = array(
							'Y' => $this->language->get('text_authenticated'),
							'N' => $this->language->get('text_not_authenticated'),
							'A' => $this->language->get('text_authentication_not_completed'),
							'U' => $this->language->get('text_unable_to_perform'),
						);

						$message = sprintf($this->language->get('text_auth_code'), $authcode) . "\n";
						$message .= sprintf($this->language->get('text_postcode_check'), $status_code_mapping[$postcode_status]) . "\n";
						$message .= sprintf($this->language->get('text_security_code_check'), $status_code_mapping[$security_code_status]) . "\n";
						$message .= sprintf($this->language->get('text_address_check'), $status_code_mapping[$address_status]) . "\n";
						$message .= sprintf($this->language->get('text_3d_secure_check'), $threed_status_mapping[$threed_status]) . "\n";

						$transaction_reference = (string)$response_xml->response->transactionreference;
						$this->model_extension_payment_securetrading_ws->updateReference($order_id, $transaction_reference);

						$this->model_extension_payment_securetrading_ws->confirmOrder($order_id, $this->config->get('payment_securetrading_ws_order_status_id'));
						$this->model_extension_payment_securetrading_ws->updateOrder($order_id, $this->config->get('payment_securetrading_ws_order_status_id'), $message);

						$this->response->redirect($this->url->link('checkout/success', '', true));
					} else {
						$this->model_extension_payment_securetrading_ws->updateOrder($order_id, $this->config->get('payment_securetrading_ws_declined_order_status_id'));

						$this->session->data['error'] = $this->language->get('text_transaction_declined');
						$this->response->redirect($this->url->link('checkout/checkout', '', true));
					}
				} else {
					$this->session->data['error'] = $this->language->get('error_failure');
					$this->response->redirect($this->url->link('checkout/checkout', '', true));
				}
			} else {
				$this->session->data['error'] = $this->language->get('error_failure');
				$this->response->redirect($this->url->link('checkout/checkout', '', true));
			}
		} else {
			$this->session->data['error'] = $this->language->get('error_failure');
			$this->response->redirect($this->url->link('checkout/checkout', '', true));
		}
	}

	private function processAuthResponse($response, $order_id) {
		$json = array();

		if ($response !== false) {
			$response_xml = simplexml_load_string($response);

			if ($response_xml->response['type'] == 'AUTH') {
				$error_code = (int)$response_xml->response->error->code;

				if ($error_code == 0) {
					$postcode_status = (int)$response_xml->response->security->postcode;
					$security_code_status = (int)$response_xml->response->security->securitycode;
					$address_status = (int)$response_xml->response->security->address;
					$authcode = (string)$response_xml->response->authcode;

					$status_code_mapping = array(
						0 => $this->language->get('text_not_given'),
						1 => $this->language->get('text_not_checked'),
						2 => $this->language->get('text_match'),
						4 => $this->language->get('text_not_match'),
					);

					$message = sprintf($this->language->get('text_auth_code'), $authcode) . "\n";
					$message .= sprintf($this->language->get('text_postcode_check'), $status_code_mapping[$postcode_status]) . "\n";
					$message .= sprintf($this->language->get('text_security_code_check'), $status_code_mapping[$security_code_status]) . "\n";
					$message .= sprintf($this->language->get('text_address_check'), $status_code_mapping[$address_status]) . "\n";

					$transaction_reference = (string)$response_xml->response->transactionreference;
					$this->model_extension_payment_securetrading_ws->updateReference($order_id, $transaction_reference);

					$this->model_extension_payment_securetrading_ws->confirmOrder($order_id, $this->config->get('payment_securetrading_ws_order_status_id'));
					$this->model_extension_payment_securetrading_ws->updateOrder($order_id, $this->config->get('payment_securetrading_ws_order_status_id'), $message);

					$json['redirect'] = $this->url->link('checkout/success');
					$json['status'] = 1;
				} else {
					$this->model_extension_payment_securetrading_ws->updateOrder($order_id, $this->config->get('payment_securetrading_ws_declined_order_status_id'));

					$json['message'] = $this->language->get('text_transaction_declined');
					$json['status'] = 0;
				}
			} else {
				$this->model_extension_payment_securetrading_ws->updateOrder($order_id, $this->config->get('payment_securetrading_ws_failed_order_status_id'));

				$json['message'] = $this->language->get('text_transaction_failed');
				$json['status'] = 0;
			}
		} else {
			$json['message'] = $this->language->get('text_connection_error');
			$json['status'] = 0;
		}

		return $json;
	}
}