payment_request.php 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480
  1. <?php
  2. date_default_timezone_set("Australia/Hobart");
  3. //error_reporting(E_ERROR | E_PARSE);
  4. error_reporting(E_ALL);
  5. ini_set('display_errors', '0');
  6. ini_set('log_errors', '1');
  7. require_once 'connection.php';
  8. include_once "vendor/autoload.php";
  9. $accessToken = getenv('HUBSPOT_TOKEN') ?: '';
  10. $enquiry_date = date("l dS M \'y");
  11. $drg = isset($_GET['drg']) ? $_GET['drg'] : '';
  12. $payment_no = isset($_GET['pn']) ? $_GET['pn'] : '';
  13. if (!empty($_GET['drg'])) {
  14. include "table.php";
  15. }
  16. ?>
  17. <!doctype html>
  18. <html lang="en">
  19. <head>
  20. <meta charset="utf-8">
  21. <meta name="viewport" content="width=device-width, initial-scale=1">
  22. <title>Payment Request Form</title>
  23. <link rel="shortcut icon" href="images/blueprint.ico" type="image/x-icon">
  24. <link href="css/bootstrap.css" rel="stylesheet">
  25. <link href="css/blueprint.css" rel="stylesheet">
  26. <link href="css/print.css" rel="stylesheet" media="print">
  27. <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css">
  28. <script src="https://code.jquery.com/jquery-3.3.1.min.js" integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=" crossorigin="anonymous"></script>
  29. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js" integrity="sha384-ZMP7rVo3mIykV+2+9J3UJ46jBk0WLaUAdn689aCwoqbBJiSnjAK/l8WvCWPIPm49" crossorigin="anonymous"></script>
  30. <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js" integrity="sha384-ChfqqxuZUCnJSK3+MXmPNIyE6ZbWh2IMqE241rYiqJxyMiZ6OW/JmZQ5stwEULTy" crossorigin="anonymous"></script>
  31. <script type="text/javascript" src="https://use.fontawesome.com/1e2844bb90.js"></script>
  32. <script src="https://code.jquery.com/ui/1.12.1/jquery-ui.js" integrity="sha256-T0Vest3yCU7pafRw9r+settMBX6JkKN06dqBnpQ8d30=" crossorigin="anonymous"></script>
  33. <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-throttle-debounce/1.1/jquery.ba-throttle-debounce.min.js" integrity="sha512-JZSo0h5TONFYmyLMqp8k4oPhuo6yNk9mHM+FY50aBjpypfofqtEWsAgRDQm94ImLCzSaHeqNvYuD9382CEn2zw==" crossorigin="anonymous" referrerpolicy="no-referrer"></script>
  34. </head>
  35. <body>
  36. <nav class="navbar bg-brown-dark brown-light border-bottom border-body d-print-none" data-bs-theme="dark">
  37. <div class="container-fluid">
  38. <a class="navbar-brand brown-light" href="dashboard.php">
  39. <img src="images/blueprint-logo-light.png" alt="Logo" width="30" height="24" class="d-inline-block align-text-top">
  40. Modulos Design
  41. </a>
  42. <div class="ms-auto d-flex gap-2">
  43. <a href="dashboard.php" class="btn btn-sm btn-outline-light"><i class="bi bi-grid-fill"></i> Dashboard</a>
  44. <?php if (!empty($drg)): ?><a href="client-brief.php?drg=<?= (int)$drg ?>" class="btn btn-sm btn-outline-light"><i class="bi bi-person-fill"></i> Client Brief</a><?php endif; ?>
  45. </div>
  46. </div>
  47. </nav>
  48. <div class="container">
  49. <div class="row pt-2">
  50. <div class="col-sm-4 col-md-4 pt-3">
  51. <img class="img-fluid logo pt-2" src="images/blueprint-full-logo-medium.png" alt="Blueprint Studio">
  52. </div>
  53. <div class="col-sm-4 col-md-4 m-auto text-center">
  54. <h3 class="architect text-center">Job: <?php echo $drg; ?></h3>
  55. </div>
  56. <div class="col-sm-4 col-md-4 text-end pt-3">
  57. <h2 class="fw-bold text-end mb-1">Client Onboarding Form</h2>
  58. <h4 class="text-end mb-1">
  59. <span class="fw-bold brown-two"><?php echo $enquiry_date; ?></span>
  60. </h4>
  61. </div>
  62. </div>
  63. <script type="text/javascript" src="https://sandbox.web.squarecdn.com/v1/square.js" ></script>
  64. <script>
  65. const appId = '{sandbox-sq0idb-ZUSNynWbeVYrFo3hjZFIQg}';
  66. const locationId = '{LYQ568H0H05Q2}';
  67. async function initializeCard(payments) {
  68. const card = await payments.card();
  69. await card.attach('#card-container');
  70. return card;
  71. }
  72. async function createPayment(token, verificationToken) {
  73. const body = JSON.stringify({
  74. locationId,
  75. sourceId: token,
  76. verificationToken,
  77. idempotencyKey: window.crypto.randomUUID(),
  78. });
  79. const paymentResponse = await fetch('/payment', {
  80. method: 'POST',
  81. headers: {
  82. 'Content-Type': 'application/json',
  83. },
  84. body,
  85. });
  86. if (paymentResponse.ok) {
  87. return paymentResponse.json();
  88. }
  89. const errorBody = await paymentResponse.text();
  90. throw new Error(errorBody);
  91. }
  92. async function tokenize(paymentMethod) {
  93. const tokenResult = await paymentMethod.tokenize();
  94. if (tokenResult.status === 'OK') {
  95. return tokenResult.token;
  96. } else {
  97. let errorMessage = `Tokenization failed with status: ${tokenResult.status}`;
  98. if (tokenResult.errors) {
  99. errorMessage += ` and errors: ${JSON.stringify(
  100. tokenResult.errors,
  101. )}`;
  102. }
  103. throw new Error(errorMessage);
  104. }
  105. }
  106. // Required in SCA Mandated Regions: Learn more at https://developer.squareup.com/docs/sca-overview
  107. async function verifyBuyer(payments, token) {
  108. const verificationDetails = {
  109. amount: '100.00',
  110. billingContact: {
  111. givenName: '<?php echo $firstname; ?>',
  112. familyName: '<?php echo $lastname; ?>',
  113. email: '<?php echo $client_email; ?>',
  114. phone: '<?php echo $client_mobile; ?>',
  115. addressLines: ['<?php echo $postal_address_street; ?>'],
  116. city: '<?php echo $postal_address_town; ?>',
  117. state: '<?php echo $postal_address_state; ?>',
  118. countryCode: 'AU',
  119. },
  120. currencyCode: 'AUD',
  121. intent: 'CHARGE',
  122. };
  123. const verificationResults = await payments.verifyBuyer(
  124. token,
  125. verificationDetails,
  126. );
  127. return verificationResults.token;
  128. }
  129. // status is either SUCCESS or FAILURE;
  130. function displayPaymentResults(status) {
  131. const statusContainer = document.getElementById(
  132. 'payment-status-container',
  133. );
  134. if (status === 'SUCCESS') {
  135. statusContainer.classList.remove('is-failure');
  136. statusContainer.classList.add('is-success');
  137. } else {
  138. statusContainer.classList.remove('is-success');
  139. statusContainer.classList.add('is-failure');
  140. }
  141. statusContainer.style.visibility = 'visible';
  142. }
  143. document.addEventListener('DOMContentLoaded', async function () {
  144. if (!window.Square) {
  145. throw new Error('Square.js failed to load properly');
  146. }
  147. let payments;
  148. try {
  149. payments = window.Square.payments(appId, locationId);
  150. } catch {
  151. const statusContainer = document.getElementById(
  152. 'payment-status-container',
  153. );
  154. statusContainer.className = 'missing-credentials';
  155. statusContainer.style.visibility = 'visible';
  156. return;
  157. }
  158. let card;
  159. try {
  160. card = await initializeCard(payments);
  161. } catch (e) {
  162. console.error('Initializing Card failed', e);
  163. return;
  164. }
  165. async function handlePaymentMethodSubmission(event, card) {
  166. event.preventDefault();
  167. try {
  168. // disable the submit button as we await tokenization and make a payment request.
  169. cardButton.disabled = true;
  170. const token = await tokenize(card);
  171. const verificationToken = await verifyBuyer(payments, token);
  172. const paymentResults = await createPayment(
  173. token,
  174. verificationToken,
  175. );
  176. displayPaymentResults('SUCCESS');
  177. console.debug('Payment Success', paymentResults);
  178. } catch (e) {
  179. cardButton.disabled = false;
  180. displayPaymentResults('FAILURE');
  181. console.error(e.message);
  182. }
  183. }
  184. const cardButton = document.getElementById('card-button');
  185. cardButton.addEventListener('click', async function (event) {
  186. await handlePaymentMethodSubmission(event, card);
  187. });
  188. });
  189. </script>
  190. <div class="row">
  191. <div class="col-12">
  192. <div class="row ">
  193. <div class="col ">
  194. <h4 class="fw-bold">Client Details</h4>
  195. </div>
  196. </div>
  197. <div class="mb-1">
  198. <div class="row ">
  199. <div class="col-6 col-md-3">
  200. <label for="firstname" class="form-label form-label-sm p-0 m-0">Clients Name</label>
  201. <input type="text" class="form-control form-control-sm architect brown-four" name="firstname" id="firstname" tabindex="1" value="<?php echo $firstname; ?>" readonly>
  202. </div>
  203. <div class="col-6 col-md-3">
  204. <label for="lastname" class="form-label form-label-sm p-0 m-0"></label>
  205. <input type="text" class="form-control form-control-sm architect brown-four" name="lastname" id="lastname" tabindex="2" value="<?php echo $lastname; ?>" readonly>
  206. </div>
  207. <div class="col-12 col-md-6">
  208. <label for="joint_name" class="form-label form-label-sm p-0 m-0">T/As - Joint Names</label>
  209. <input type="text" class="form-control form-control-sm architect brown-three" name="joint_name" id="joint_name" value="<?php echo $joint_name; ?>" readonly>
  210. </div>
  211. </div>
  212. </div>
  213. <div class="mb-1">
  214. <label for="postal_address" class="form-label form-label-sm p-0 m-0">Clients Postal Address</label>
  215. <input type="text" class="form-control form-control-sm fw-bold architect brown-three map-autocomplete" id="postal_address" name="postal_address" value="<?php echo $postal_address; ?>" readonly>
  216. </div>
  217. <div class="mb-1">
  218. <div class="row ">
  219. <div class="col-md-6">
  220. <label for="phoneNumber" class="form-label form-label-sm p-0 m-0">Clients Mobile</label>
  221. <input type="phone" class="form-control form-control-sm architect brown-three" minlength="12" id="phoneNumber" name="client_mobile" value="<?php echo $client_mobile; ?>" readonly>
  222. </div>
  223. <div class="col-md-6">
  224. <label for="client_email" class="form-label form-label-sm p-0 m-0">Email address</label>
  225. <input type="email" class="form-control form-control-sm architect brown-three" name="client_email" id="client_email" value="<?php echo $client_email; ?>" readonly>
  226. </div>
  227. </div>
  228. </div>
  229. </div>
  230. </div>
  231. <hr>
  232. <div class="row mt-3">
  233. <div class="col-md-1">Item</div>
  234. <div class="col-md-5">Description</div>
  235. <div class="col-md-2">Date Paid</div>
  236. <div class="col">Total</div>
  237. </div>
  238. <hr>
  239. <?php
  240. $checkRecord = mysqli_query($con, "SELECT * FROM `progress_payments` WHERE `drg` = '{$drg}' " );
  241. $rowcount = mysqli_num_rows($checkRecord);
  242. $result = mysqli_query($con, "SELECT *, @curRow := @curRow + 1 AS position FROM `progress_payments` JOIN (SELECT @curRow := 0) r WHERE `drg` = '{$drg}' ");
  243. if (!$result) {
  244. printf("Error: %s\n", mysqli_error($con));
  245. exit();
  246. }
  247. while ($row = mysqli_fetch_array($result)) {
  248. echo "<div class='mb-1 row justify-content-start'>";
  249. echo "<label for='description' class='col-1 col-form-label'>" . $row['position'] . "</label>";
  250. echo "<input type='hidden' id='progress' v-model='progress' value='" . $row['position'] . "'>";
  251. echo "<div class='col-sm-5'>";
  252. echo "<input type='text' class='form-control form-control-sm' id='description' v-model='description' value='" . $row['description'] . "' disabled>";
  253. echo "</div>";
  254. echo "<div class='col-sm-2'>";
  255. echo "<input type='text' class='form-control form-control-sm' id='paid' v-model='paid' value='" . $row['paid'] . "' disabled>";
  256. echo "</div>";
  257. echo "<div class='col-sm-2'>";
  258. echo "<input type='currency' class='form-control form-control-sm' id='value' v-model='value' value='" . $row['value'] . "' disabled>";
  259. echo "</div>";
  260. echo "<div class='col-sm-2'>";
  261. echo "<button class='btn btn-sm bg-brown-three brown-five' id='card-button' type='button' data-value=" . $row['value'] . " >Pay $" . $row['value'] . "</button>";
  262. echo "</div>";
  263. echo "</div>";
  264. }
  265. ?>
  266. <hr>
  267. <div class="row">
  268. <form id="payment-form">
  269. <div id="card-container"></div>
  270. <button class="btn btn-sm bg-brown-three brown-five" id="card-button" type="button">Pay $100.00</button>
  271. </form>
  272. <div id="payment-status-container"></div>
  273. </div>
  274. <script type="text/javascript" src="https://sandbox.web.squarecdn.com/v1/square.js" ></script>
  275. <script>
  276. const appId = '{sandbox-sq0idb-ZUSNynWbeVYrFo3hjZFIQg}';
  277. const locationId = '{LYQ568H0H05Q2}';
  278. async function initializeCard(payments) {
  279. const card = await payments.card();
  280. await card.attach('#card-container');
  281. return card;
  282. }
  283. async function createPayment(token, verificationToken) {
  284. const body = JSON.stringify({
  285. locationId,
  286. sourceId: token,
  287. verificationToken,
  288. idempotencyKey: window.crypto.randomUUID(),
  289. });
  290. const paymentResponse = await fetch('/payment', {
  291. method: 'POST',
  292. headers: {
  293. 'Content-Type': 'application/json',
  294. },
  295. body,
  296. });
  297. if (paymentResponse.ok) {
  298. return paymentResponse.json();
  299. }
  300. const errorBody = await paymentResponse.text();
  301. throw new Error(errorBody);
  302. }
  303. async function tokenize(paymentMethod) {
  304. const tokenResult = await paymentMethod.tokenize();
  305. if (tokenResult.status === 'OK') {
  306. return tokenResult.token;
  307. } else {
  308. let errorMessage = `Tokenization failed with status: ${tokenResult.status}`;
  309. if (tokenResult.errors) {
  310. errorMessage += ` and errors: ${JSON.stringify(
  311. tokenResult.errors,
  312. )}`;
  313. }
  314. throw new Error(errorMessage);
  315. }
  316. }
  317. const amount = event.currentTarget.getAttribute('data-value');
  318. // Required in SCA Mandated Regions: Learn more at https://developer.squareup.com/docs/sca-overview
  319. async function verifyBuyer(payments, token) {
  320. const verificationDetails = {
  321. amount: amount,
  322. billingContact: {
  323. givenName: '<?php echo $firstname; ?>',
  324. familyName: '<?php echo $lastname; ?>',
  325. email: '<?php echo $client_email; ?>',
  326. phone: '<?php echo $client_mobile; ?>',
  327. addressLines: ['<?php echo $postal_address_street; ?>'],
  328. city: '<?php echo $postal_address_town; ?>',
  329. state: '<?php echo $postal_address_state; ?>',
  330. countryCode: 'AU',
  331. },
  332. currencyCode: 'AUD',
  333. intent: 'CHARGE',
  334. };
  335. const verificationResults = await payments.verifyBuyer(
  336. token,
  337. verificationDetails,
  338. );
  339. return verificationResults.token;
  340. }
  341. // status is either SUCCESS or FAILURE;
  342. function displayPaymentResults(status) {
  343. const statusContainer = document.getElementById(
  344. 'payment-status-container',
  345. );
  346. if (status === 'SUCCESS') {
  347. statusContainer.classList.remove('is-failure');
  348. statusContainer.classList.add('is-success');
  349. //
  350. // Add date payment success to data base
  351. //
  352. } else {
  353. statusContainer.classList.remove('is-success');
  354. statusContainer.classList.add('is-failure');
  355. }
  356. statusContainer.style.visibility = 'visible';
  357. }
  358. document.addEventListener('DOMContentLoaded', async function () {
  359. if (!window.Square) {
  360. throw new Error('Square.js failed to load properly');
  361. }
  362. let payments;
  363. try {
  364. payments = window.Square.payments(appId, locationId);
  365. } catch {
  366. const statusContainer = document.getElementById(
  367. 'payment-status-container',
  368. );
  369. statusContainer.className = 'missing-credentials';
  370. statusContainer.style.visibility = 'visible';
  371. return;
  372. }
  373. let card;
  374. try {
  375. card = await initializeCard(payments);
  376. } catch (e) {
  377. console.error('Initializing Card failed', e);
  378. return;
  379. }
  380. async function handlePaymentMethodSubmission(event, card) {
  381. event.preventDefault();
  382. try {
  383. // disable the submit button as we await tokenization and make a payment request.
  384. cardButton.disabled = true;
  385. const token = await tokenize(card);
  386. const verificationToken = await verifyBuyer(payments, token);
  387. const paymentResults = await createPayment(
  388. token,
  389. verificationToken,
  390. );
  391. displayPaymentResults('SUCCESS');
  392. console.debug('Payment Success', paymentResults);
  393. } catch (e) {
  394. cardButton.disabled = false;
  395. displayPaymentResults('FAILURE');
  396. console.error(e.message);
  397. }
  398. }
  399. const cardButton = document.getElementById('card-button');
  400. cardButton.addEventListener('click', async function (event) {
  401. await handlePaymentMethodSubmission(event, card);
  402. });
  403. });
  404. </script>
  405. <footer class="footer">
  406. <p class="text-center">&copy; <?php echo date('Y'); ?> - Modulos Design</p>
  407. </footer>
  408. </div>
  409. <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js" integrity="sha384-HwwvtgBNo3bZJJLYd8oVXjrBZt8cqVSpeBNS5n7C8IVInixGAoxmnlMuBnhbgrkm" crossorigin="anonymous"></script>
  410. <script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyB-QceOYrDe9otynMmQ9iNF3yEZzbpsanM&libraries=places&callback=initAutocomplete" async defer></script>
  411. <script src="https://cdn.jsdelivr.net/npm/signature_pad@4.0.0/dist/signature_pad.umd.min.js"></script>
  412. <script src="js/signature.js" ></script>
  413. <script async defer src="https://apis.google.com/js/api.js" onload="gapiLoaded()"></script>
  414. <script async defer src="https://accounts.google.com/gsi/client" onload="gisLoaded()"></script>
  415. </body>
  416. </html>