% if ( $cgi->param('batch') ) { <% include( '/elements/header.html', ucfirst($type{$payby}). ' processing successful', include('/elements/menubar.html'), ) %> <% include( '/elements/small_custview.html', $cust_main, '', '', popurl(3). "view/cust_main.cgi" ) %> <% include('/elements/footer.html') %> % #2.5/2.7?# } elsif ( $curuser->access_right('View payments') ) { % } elsif ( $curuser->access_right(['View invoices', 'View payments']) ) { <% $cgi->redirect(popurl(3). "view/cust_pay.html?paynum=$paynum" ) %> % } else { <% $cgi->redirect(popurl(3). "view/cust_main.html?custnum=$custnum" ) %> % } <%init> my $curuser = $FS::CurrentUser::CurrentUser; die "access denied" unless $curuser->access_right('Process payment'); my $conf = new FS::Conf; ## # info for all payments, stored or unstored ## #some false laziness w/MyAccount::process_payment $cgi->param('custnum') =~ /^(\d+)$/ or die "illegal custnum ". $cgi->param('custnum'); my $custnum = $1; my $cust_main = qsearchs({ 'table' => 'cust_main', 'hashref' => { 'custnum' => $custnum }, 'extra_sql' => ' AND '. $curuser->agentnums_sql, }) or die "unknown custnum $custnum"; $cgi->param('amount') =~ /^\s*(\d*(\.\d\d)?)\s*$/ or errorpage("illegal amount ". $cgi->param('amount')); my $amount = $1; errorpage("amount <= 0") unless $amount > 0; if ( $cgi->param('fee') =~ /^\s*(\d*(\.\d\d)?)\s*$/ ) { my $fee = $1; $amount = sprintf('%.2f', $amount + $fee); } $cgi->param('payby') =~ /^(CARD|CHEK)$/ or errorpage("illegal payby ". $cgi->param('payby')); my $payby = $1; my %payby2fields = ( 'CARD' => [ qw( address1 address2 city county state zip country ) ], 'CHEK' => [ qw( ss paytype paystate stateid stateid_state ) ], ); my %type = ( 'CARD' => 'credit card', 'CHEK' => 'electronic check (ACH)', ); $cgi->param('payunique') =~ /^([\w \!\@\#\$\%\&\(\)\-\+\;\:\'\"\,\.\?\/\=]*)$/ or errorpage(gettext('illegal_text'). " payunique: ". $cgi->param('payunique')); my $payunique = $1; $cgi->param('balance') =~ /^\s*(\-?\s*\d*(\.\d\d)?)\s*$/ or errorpage("illegal balance"); my $balance = $1; $cgi->param('discount_term') =~ /^(\d*)$/ or errorpage("illegal discount_term"); my $discount_term = $1; my( $cust_payby, $payinfo, $paycvv, $month, $year, $payname ); my $paymask = ''; if ( (my $custpaybynum = scalar($cgi->param('custpaybynum'))) > 0 ) { ## # use stored cust_payby info ## $cust_payby = qsearchs('cust_payby', { custnum => $custnum, custpaybynum => $custpaybynum, } ) or die "unknown custpaybynum $custpaybynum"; # not needed for realtime_bop, but still needed for batch_card $payinfo = $cust_payby->payinfo; $paymask = $cust_payby->paymask; $paycvv = $cust_payby->paycvv; # pass it if we got it, running a transaction will clear it ( $month, $year ) = $cust_payby->paydate_mon_year; $payname = $cust_payby->payname; $cgi->param(-name=>"paytype", -value=>$cust_payby->paytype) unless $cgi->param("paytype"); } else { ## # use new info ## $cgi->param('year') =~ /^(\d+)$/ or errorpage("illegal year ". $cgi->param('year')); $year = $1; $cgi->param('month') =~ /^(\d+)$/ or errorpage("illegal month ". $cgi->param('month')); $month = $1; $cgi->param('payname') =~ /^([\w \,\.\-\']+)$/ or errorpage(gettext('illegal_name'). " payname: ". $cgi->param('payname')); $payname = $1; if ( $payby eq 'CHEK' ) { $cgi->param('payinfo1') =~ /^(\d+)$/ or errorpage("Illegal account number ". $cgi->param('payinfo1')); my $payinfo1 = $1; $cgi->param('payinfo2') =~ /^(\d+)$/ or errorpage("Illegal ABA/routing number ". $cgi->param('payinfo2')); my $payinfo2 = $1; if ( $conf->config('echeck-country') eq 'CA' ) { $cgi->param('payinfo3') =~ /^(\d{5})$/ or errorpage("Illegal branch number ". $cgi->param('payinfo2')); $payinfo2 = "$1.$payinfo2"; } $payinfo = $payinfo1. '@'. $payinfo2; } elsif ( $payby eq 'CARD' ) { $payinfo = $cgi->param('payinfo'); $payinfo =~ s/\D//g; $payinfo =~ /^(\d{13,19}|\d{8,9})$/ or errorpage(gettext('invalid_card')); $payinfo = $1; validate($payinfo) or errorpage(gettext('invalid_card')); unless ( $cust_main->tokenized($payinfo) ) { #token my $cardtype = cardtype($payinfo); errorpage(gettext('unknown_card_type')) if $cardtype eq "Unknown"; my %bop_card_types = map { $_=>1 } values %{ card_types() }; errorpage("$cardtype not accepted") unless $bop_card_types{$cardtype}; } if ( length($cgi->param('paycvv') ) ) { if ( cardtype($payinfo) eq 'American Express card' ) { $cgi->param('paycvv') =~ /^(\d{4})$/ or errorpage("CVV2 (CID) for American Express cards is four digits."); $paycvv = $1; } else { $cgi->param('paycvv') =~ /^(\d{3})$/ or errorpage("CVV2 (CVC2/CID) is three digits."); $paycvv = $1; } } elsif ( $conf->exists('backoffice-require_cvv') ){ errorpage("CVV2 is required"); } } else { die "unknown payby $payby"; } # save first, for proper tokenization if ( $cgi->param('save') ) { my %saveopt; if ( $payby eq 'CARD' ) { my $bill_location = FS::cust_location->new; $bill_location->set( $_ => scalar($cgi->param($_)) ) foreach @{$payby2fields{$payby}}; $saveopt{'bill_location'} = $bill_location; $saveopt{'paycvv'} = $paycvv; # save_cust_payby contains conf logic for when to use this $saveopt{'paydate'} = "$year-$month-01"; } else { # ss/stateid/stateid_state won't be saved, but should be harmless to pass %saveopt = map { $_ => scalar($cgi->param($_)) } @{$payby2fields{$payby}}; } my $error = $cust_main->save_cust_payby( 'saved_cust_payby' => \$cust_payby, 'payment_payby' => $payby, 'auto' => scalar($cgi->param('auto')), 'weight' => scalar($cgi->param('weight')), 'payinfo' => $payinfo, 'payname' => $payname, %saveopt ); errorpage("error saving info, payment not processed: $error") if $error; } elsif ( $payby eq 'CARD' ) { # not saving $paymask = FS::payinfo_Mixin->mask_payinfo('CARD',$payinfo); # for untokenized but tokenizable payinfo } } ## # now run the payment ## my $error = ''; my $paynum = ''; my $paydate; if ($cust_payby->paydate) { $paydate = "$year-$month-01"; } else { $paydate = "2037-12-01"; } if ( $cgi->param('batch') ) { $error = 'Prepayment discounts not supported with batched payments' if $discount_term; $error ||= $cust_main->batch_card( 'payby' => $payby, 'amount' => $amount, 'payinfo' => $payinfo, 'paydate' => $paydate, 'payname' => $payname, map { $_ => scalar($cgi->param($_)) } @{$payby2fields{$payby}} ); errorpage($error) if $error; } else { $error = $cust_main->realtime_bop( $FS::payby::payby2bop{$payby}, $amount, 'cust_payby' => $cust_payby, # if defined, will override passed payinfo, etc 'quiet' => 1, 'manual' => 1, 'balance' => $balance, 'payinfo' => $payinfo, 'paymask' => $paymask, 'paydate' => "$year-$month-01", 'payname' => $payname, 'payunique' => $payunique, 'paycvv' => $paycvv, 'paynum_ref' => \$paynum, 'discount_term' => $discount_term, 'no_auto_apply' => ($cgi->param('apply') eq 'never') ? 'Y' : '', 'no_invnum' => 1, map { $_ => scalar($cgi->param($_)) } @{$payby2fields{$payby}} ); errorpage($error) if $error; #no error, so order the fee package if applicable... if ( $cgi->param('fee_pkgpart') =~ /^(\d+)$/ ) { my $cust_pkg = new FS::cust_pkg { 'pkgpart' => $1 }; my $error = $cust_main->order_pkg( 'cust_pkg' => $cust_pkg ); errorpage("payment processed successfully, but error ordering fee: $error") if $error; #and generate an invoice for it now too $error = $cust_main->bill( 'pkg_list' => [ $cust_pkg ] ); errorpage("payment processed and fee ordered successfully, but error billing fee: $error") if $error; } $cust_main->apply_payments if ($cgi->param('apply') eq 'yes'); } ## # success! step 3: profit! ##