payment_request.php 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475
  1. <?php
  2. date_default_timezone_set("Australia/Hobart");
  3. //error_reporting(E_ERROR | E_PARSE);
  4. error_reporting(E_ALL);
  5. ini_set('display_errors', 1);
  6. require_once 'connection.php';
  7. include_once "vendor/autoload.php";
  8. $accessToken = 'pat-na1-64db9489-15fe-461d-b64c-941c4d80ba8a';
  9. $enquiry_date = date("l dS M \'y");
  10. $drg = isset($_GET['drg']) ? $_GET['drg'] : '';
  11. $payment_no = isset($_GET['pn']) ? $_GET['pn'] : '';
  12. if (!empty($_GET['drg'])) {
  13. include "table.php";
  14. }
  15. ?>
  16. <!doctype html>
  17. <html lang="en">
  18. <head>
  19. <meta charset="utf-8">
  20. <meta name="viewport" content="width=device-width, initial-scale=1">
  21. <title>Payment Request Form</title>
  22. <link rel="shortcut icon" href="images/blueprint.ico" type="image/x-icon">
  23. <link href="css/bootstrap.css" rel="stylesheet">
  24. <link href="css/blueprint.css" rel="stylesheet">
  25. <link href="css/print.css" rel="stylesheet" media="print">
  26. <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css">
  27. <script src="https://code.jquery.com/jquery-3.3.1.min.js" integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=" crossorigin="anonymous"></script>
  28. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js" integrity="sha384-ZMP7rVo3mIykV+2+9J3UJ46jBk0WLaUAdn689aCwoqbBJiSnjAK/l8WvCWPIPm49" crossorigin="anonymous"></script>
  29. <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js" integrity="sha384-ChfqqxuZUCnJSK3+MXmPNIyE6ZbWh2IMqE241rYiqJxyMiZ6OW/JmZQ5stwEULTy" crossorigin="anonymous"></script>
  30. <script type="text/javascript" src="https://use.fontawesome.com/1e2844bb90.js"></script>
  31. <script src="https://code.jquery.com/ui/1.12.1/jquery-ui.js" integrity="sha256-T0Vest3yCU7pafRw9r+settMBX6JkKN06dqBnpQ8d30=" crossorigin="anonymous"></script>
  32. <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-throttle-debounce/1.1/jquery.ba-throttle-debounce.min.js" integrity="sha512-JZSo0h5TONFYmyLMqp8k4oPhuo6yNk9mHM+FY50aBjpypfofqtEWsAgRDQm94ImLCzSaHeqNvYuD9382CEn2zw==" crossorigin="anonymous" referrerpolicy="no-referrer"></script>
  33. </head>
  34. <body>
  35. <nav class="navbar bg-brown-dark brown-light border-bottom border-body d-print-none" data-bs-theme="dark">
  36. <div class="container-fluid">
  37. <a class="navbar-brand brown-light" href="#">
  38. <img src="images/blueprint-logo-light.png" alt="Logo" width="30" height="24" class="d-inline-block align-text-top">
  39. Modulos Design
  40. </a>
  41. </div>
  42. </nav>
  43. <div class="container">
  44. <div class="row pt-2">
  45. <div class="col-sm-4 col-md-4 pt-3">
  46. <img class="img-fluid logo pt-2" src="images/blueprint-full-logo-medium.png" alt="Blueprint Studio">
  47. </div>
  48. <div class="col-sm-4 col-md-4 m-auto text-center">
  49. <h3 class="architect text-center">Job: <?php echo $drg; ?></h3>
  50. </div>
  51. <div class="col-sm-4 col-md-4 text-end pt-3">
  52. <h2 class="fw-bold text-end mb-1">Client Onboarding Form</h2>
  53. <h4 class="text-end mb-1">
  54. <span class="fw-bold brown-two"><?php echo $enquiry_date; ?></span>
  55. </h4>
  56. </div>
  57. </div>
  58. <script type="text/javascript" src="https://sandbox.web.squarecdn.com/v1/square.js" ></script>
  59. <script>
  60. const appId = '{sandbox-sq0idb-ZUSNynWbeVYrFo3hjZFIQg}';
  61. const locationId = '{LYQ568H0H05Q2}';
  62. async function initializeCard(payments) {
  63. const card = await payments.card();
  64. await card.attach('#card-container');
  65. return card;
  66. }
  67. async function createPayment(token, verificationToken) {
  68. const body = JSON.stringify({
  69. locationId,
  70. sourceId: token,
  71. verificationToken,
  72. idempotencyKey: window.crypto.randomUUID(),
  73. });
  74. const paymentResponse = await fetch('/payment', {
  75. method: 'POST',
  76. headers: {
  77. 'Content-Type': 'application/json',
  78. },
  79. body,
  80. });
  81. if (paymentResponse.ok) {
  82. return paymentResponse.json();
  83. }
  84. const errorBody = await paymentResponse.text();
  85. throw new Error(errorBody);
  86. }
  87. async function tokenize(paymentMethod) {
  88. const tokenResult = await paymentMethod.tokenize();
  89. if (tokenResult.status === 'OK') {
  90. return tokenResult.token;
  91. } else {
  92. let errorMessage = `Tokenization failed with status: ${tokenResult.status}`;
  93. if (tokenResult.errors) {
  94. errorMessage += ` and errors: ${JSON.stringify(
  95. tokenResult.errors,
  96. )}`;
  97. }
  98. throw new Error(errorMessage);
  99. }
  100. }
  101. // Required in SCA Mandated Regions: Learn more at https://developer.squareup.com/docs/sca-overview
  102. async function verifyBuyer(payments, token) {
  103. const verificationDetails = {
  104. amount: '100.00',
  105. billingContact: {
  106. givenName: '<?php echo $firstname; ?>',
  107. familyName: '<?php echo $lastname; ?>',
  108. email: '<?php echo $client_email; ?>',
  109. phone: '<?php echo $client_mobile; ?>',
  110. addressLines: ['<?php echo $postal_address_street; ?>'],
  111. city: '<?php echo $postal_address_town; ?>',
  112. state: '<?php echo $postal_address_state; ?>',
  113. countryCode: 'AU',
  114. },
  115. currencyCode: 'AUD',
  116. intent: 'CHARGE',
  117. };
  118. const verificationResults = await payments.verifyBuyer(
  119. token,
  120. verificationDetails,
  121. );
  122. return verificationResults.token;
  123. }
  124. // status is either SUCCESS or FAILURE;
  125. function displayPaymentResults(status) {
  126. const statusContainer = document.getElementById(
  127. 'payment-status-container',
  128. );
  129. if (status === 'SUCCESS') {
  130. statusContainer.classList.remove('is-failure');
  131. statusContainer.classList.add('is-success');
  132. } else {
  133. statusContainer.classList.remove('is-success');
  134. statusContainer.classList.add('is-failure');
  135. }
  136. statusContainer.style.visibility = 'visible';
  137. }
  138. document.addEventListener('DOMContentLoaded', async function () {
  139. if (!window.Square) {
  140. throw new Error('Square.js failed to load properly');
  141. }
  142. let payments;
  143. try {
  144. payments = window.Square.payments(appId, locationId);
  145. } catch {
  146. const statusContainer = document.getElementById(
  147. 'payment-status-container',
  148. );
  149. statusContainer.className = 'missing-credentials';
  150. statusContainer.style.visibility = 'visible';
  151. return;
  152. }
  153. let card;
  154. try {
  155. card = await initializeCard(payments);
  156. } catch (e) {
  157. console.error('Initializing Card failed', e);
  158. return;
  159. }
  160. async function handlePaymentMethodSubmission(event, card) {
  161. event.preventDefault();
  162. try {
  163. // disable the submit button as we await tokenization and make a payment request.
  164. cardButton.disabled = true;
  165. const token = await tokenize(card);
  166. const verificationToken = await verifyBuyer(payments, token);
  167. const paymentResults = await createPayment(
  168. token,
  169. verificationToken,
  170. );
  171. displayPaymentResults('SUCCESS');
  172. console.debug('Payment Success', paymentResults);
  173. } catch (e) {
  174. cardButton.disabled = false;
  175. displayPaymentResults('FAILURE');
  176. console.error(e.message);
  177. }
  178. }
  179. const cardButton = document.getElementById('card-button');
  180. cardButton.addEventListener('click', async function (event) {
  181. await handlePaymentMethodSubmission(event, card);
  182. });
  183. });
  184. </script>
  185. <div class="row">
  186. <div class="col-12">
  187. <div class="row ">
  188. <div class="col ">
  189. <h4 class="fw-bold">Client Details</h4>
  190. </div>
  191. </div>
  192. <div class="mb-1">
  193. <div class="row ">
  194. <div class="col-6 col-md-3">
  195. <label for="firstname" class="form-label form-label-sm p-0 m-0">Clients Name</label>
  196. <input type="text" class="form-control form-control-sm architect brown-four" name="firstname" id="firstname" tabindex="1" value="<?php echo $firstname; ?>" readonly>
  197. </div>
  198. <div class="col-6 col-md-3">
  199. <label for="lastname" class="form-label form-label-sm p-0 m-0"></label>
  200. <input type="text" class="form-control form-control-sm architect brown-four" name="lastname" id="lastname" tabindex="2" value="<?php echo $lastname; ?>" readonly>
  201. </div>
  202. <div class="col-12 col-md-6">
  203. <label for="joint_name" class="form-label form-label-sm p-0 m-0">T/As - Joint Names</label>
  204. <input type="text" class="form-control form-control-sm architect brown-three" name="joint_name" id="joint_name" value="<?php echo $joint_name; ?>" readonly>
  205. </div>
  206. </div>
  207. </div>
  208. <div class="mb-1">
  209. <label for="postal_address" class="form-label form-label-sm p-0 m-0">Clients Postal Address</label>
  210. <input type="text" class="form-control form-control-sm fw-bold architect brown-three map-autocomplete" id="postal_address" name="postal_address" value="<?php echo $postal_address; ?>" readonly>
  211. </div>
  212. <div class="mb-1">
  213. <div class="row ">
  214. <div class="col-md-6">
  215. <label for="phoneNumber" class="form-label form-label-sm p-0 m-0">Clients Mobile</label>
  216. <input type="phone" class="form-control form-control-sm architect brown-three" minlength="12" id="phoneNumber" name="client_mobile" value="<?php echo $client_mobile; ?>" readonly>
  217. </div>
  218. <div class="col-md-6">
  219. <label for="client_email" class="form-label form-label-sm p-0 m-0">Email address</label>
  220. <input type="email" class="form-control form-control-sm architect brown-three" name="client_email" id="client_email" value="<?php echo $client_email; ?>" readonly>
  221. </div>
  222. </div>
  223. </div>
  224. </div>
  225. </div>
  226. <hr>
  227. <div class="row mt-3">
  228. <div class="col-md-1">Item</div>
  229. <div class="col-md-5">Description</div>
  230. <div class="col-md-2">Date Paid</div>
  231. <div class="col">Total</div>
  232. </div>
  233. <hr>
  234. <?php
  235. $checkRecord = mysqli_query($con, "SELECT * FROM `progress_payments` WHERE `drg` = '{$drg}' " );
  236. $rowcount = mysqli_num_rows($checkRecord);
  237. $result = mysqli_query($con, "SELECT *, @curRow := @curRow + 1 AS position FROM `progress_payments` JOIN (SELECT @curRow := 0) r WHERE `drg` = '{$drg}' ");
  238. if (!$result) {
  239. printf("Error: %s\n", mysqli_error($con));
  240. exit();
  241. }
  242. while ($row = mysqli_fetch_array($result)) {
  243. echo "<div class='mb-1 row justify-content-start'>";
  244. echo "<label for='description' class='col-1 col-form-label'>" . $row['position'] . "</label>";
  245. echo "<input type='hidden' id='progress' v-model='progress' value='" . $row['position'] . "'>";
  246. echo "<div class='col-sm-5'>";
  247. echo "<input type='text' class='form-control form-control-sm' id='description' v-model='description' value='" . $row['description'] . "' disabled>";
  248. echo "</div>";
  249. echo "<div class='col-sm-2'>";
  250. echo "<input type='text' class='form-control form-control-sm' id='paid' v-model='paid' value='" . $row['paid'] . "' disabled>";
  251. echo "</div>";
  252. echo "<div class='col-sm-2'>";
  253. echo "<input type='currency' class='form-control form-control-sm' id='value' v-model='value' value='" . $row['value'] . "' disabled>";
  254. echo "</div>";
  255. echo "<div class='col-sm-2'>";
  256. echo "<button class='btn btn-sm bg-brown-three brown-five' id='card-button' type='button' data-value=" . $row['value'] . " >Pay $" . $row['value'] . "</button>";
  257. echo "</div>";
  258. echo "</div>";
  259. }
  260. ?>
  261. <hr>
  262. <div class="row">
  263. <form id="payment-form">
  264. <div id="card-container"></div>
  265. <button class="btn btn-sm bg-brown-three brown-five" id="card-button" type="button">Pay $100.00</button>
  266. </form>
  267. <div id="payment-status-container"></div>
  268. </div>
  269. <script type="text/javascript" src="https://sandbox.web.squarecdn.com/v1/square.js" ></script>
  270. <script>
  271. const appId = '{sandbox-sq0idb-ZUSNynWbeVYrFo3hjZFIQg}';
  272. const locationId = '{LYQ568H0H05Q2}';
  273. async function initializeCard(payments) {
  274. const card = await payments.card();
  275. await card.attach('#card-container');
  276. return card;
  277. }
  278. async function createPayment(token, verificationToken) {
  279. const body = JSON.stringify({
  280. locationId,
  281. sourceId: token,
  282. verificationToken,
  283. idempotencyKey: window.crypto.randomUUID(),
  284. });
  285. const paymentResponse = await fetch('/payment', {
  286. method: 'POST',
  287. headers: {
  288. 'Content-Type': 'application/json',
  289. },
  290. body,
  291. });
  292. if (paymentResponse.ok) {
  293. return paymentResponse.json();
  294. }
  295. const errorBody = await paymentResponse.text();
  296. throw new Error(errorBody);
  297. }
  298. async function tokenize(paymentMethod) {
  299. const tokenResult = await paymentMethod.tokenize();
  300. if (tokenResult.status === 'OK') {
  301. return tokenResult.token;
  302. } else {
  303. let errorMessage = `Tokenization failed with status: ${tokenResult.status}`;
  304. if (tokenResult.errors) {
  305. errorMessage += ` and errors: ${JSON.stringify(
  306. tokenResult.errors,
  307. )}`;
  308. }
  309. throw new Error(errorMessage);
  310. }
  311. }
  312. const amount = event.currentTarget.getAttribute('data-value');
  313. // Required in SCA Mandated Regions: Learn more at https://developer.squareup.com/docs/sca-overview
  314. async function verifyBuyer(payments, token) {
  315. const verificationDetails = {
  316. amount: amount,
  317. billingContact: {
  318. givenName: '<?php echo $firstname; ?>',
  319. familyName: '<?php echo $lastname; ?>',
  320. email: '<?php echo $client_email; ?>',
  321. phone: '<?php echo $client_mobile; ?>',
  322. addressLines: ['<?php echo $postal_address_street; ?>'],
  323. city: '<?php echo $postal_address_town; ?>',
  324. state: '<?php echo $postal_address_state; ?>',
  325. countryCode: 'AU',
  326. },
  327. currencyCode: 'AUD',
  328. intent: 'CHARGE',
  329. };
  330. const verificationResults = await payments.verifyBuyer(
  331. token,
  332. verificationDetails,
  333. );
  334. return verificationResults.token;
  335. }
  336. // status is either SUCCESS or FAILURE;
  337. function displayPaymentResults(status) {
  338. const statusContainer = document.getElementById(
  339. 'payment-status-container',
  340. );
  341. if (status === 'SUCCESS') {
  342. statusContainer.classList.remove('is-failure');
  343. statusContainer.classList.add('is-success');
  344. //
  345. // Add date payment success to data base
  346. //
  347. } else {
  348. statusContainer.classList.remove('is-success');
  349. statusContainer.classList.add('is-failure');
  350. }
  351. statusContainer.style.visibility = 'visible';
  352. }
  353. document.addEventListener('DOMContentLoaded', async function () {
  354. if (!window.Square) {
  355. throw new Error('Square.js failed to load properly');
  356. }
  357. let payments;
  358. try {
  359. payments = window.Square.payments(appId, locationId);
  360. } catch {
  361. const statusContainer = document.getElementById(
  362. 'payment-status-container',
  363. );
  364. statusContainer.className = 'missing-credentials';
  365. statusContainer.style.visibility = 'visible';
  366. return;
  367. }
  368. let card;
  369. try {
  370. card = await initializeCard(payments);
  371. } catch (e) {
  372. console.error('Initializing Card failed', e);
  373. return;
  374. }
  375. async function handlePaymentMethodSubmission(event, card) {
  376. event.preventDefault();
  377. try {
  378. // disable the submit button as we await tokenization and make a payment request.
  379. cardButton.disabled = true;
  380. const token = await tokenize(card);
  381. const verificationToken = await verifyBuyer(payments, token);
  382. const paymentResults = await createPayment(
  383. token,
  384. verificationToken,
  385. );
  386. displayPaymentResults('SUCCESS');
  387. console.debug('Payment Success', paymentResults);
  388. } catch (e) {
  389. cardButton.disabled = false;
  390. displayPaymentResults('FAILURE');
  391. console.error(e.message);
  392. }
  393. }
  394. const cardButton = document.getElementById('card-button');
  395. cardButton.addEventListener('click', async function (event) {
  396. await handlePaymentMethodSubmission(event, card);
  397. });
  398. });
  399. </script>
  400. <footer class="footer">
  401. <p class="text-center">&copy; <?php echo date('Y'); ?> - Modulos Design</p>
  402. </footer>
  403. </div>
  404. <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js" integrity="sha384-HwwvtgBNo3bZJJLYd8oVXjrBZt8cqVSpeBNS5n7C8IVInixGAoxmnlMuBnhbgrkm" crossorigin="anonymous"></script>
  405. <script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyB-QceOYrDe9otynMmQ9iNF3yEZzbpsanM&libraries=places&callback=initAutocomplete" async defer></script>
  406. <script src="https://cdn.jsdelivr.net/npm/signature_pad@4.0.0/dist/signature_pad.umd.min.js"></script>
  407. <script src="js/signature.js" ></script>
  408. <script async defer src="https://apis.google.com/js/api.js" onload="gapiLoaded()"></script>
  409. <script async defer src="https://accounts.google.com/gsi/client" onload="gisLoaded()"></script>
  410. </body>
  411. </html>