payment_request.php 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478
  1. <?php
  2. date_default_timezone_set("Australia/Hobart");
  3. //error_reporting(E_ERROR | E_PARSE);
  4. error_reporting(E_ALL);
  5. ini_set('display_errors', '0');
  6. ini_set('log_errors', '1');
  7. require_once 'connection.php';
  8. include_once "vendor/autoload.php";
  9. $accessToken = getenv('HUBSPOT_TOKEN') ?: '';
  10. $enquiry_date = date("l dS M \'y");
  11. $drg = isset($_GET['drg']) ? (int)$_GET['drg'] : 0;
  12. $payment_no = isset($_GET['pn']) ? $_GET['pn'] : '';
  13. if (!empty($_GET['drg'])) {
  14. include "table.php";
  15. }
  16. ?>
  17. <!doctype html>
  18. <html lang="en">
  19. <head>
  20. <meta charset="utf-8">
  21. <meta name="viewport" content="width=device-width, initial-scale=1">
  22. <title>Payment Request Form</title>
  23. <link rel="shortcut icon" href="images/blueprint.ico" type="image/x-icon">
  24. <link href="css/bootstrap.css" rel="stylesheet">
  25. <link href="css/blueprint.css" rel="stylesheet">
  26. <link href="css/print.css" rel="stylesheet" media="print">
  27. <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.13.1/font/bootstrap-icons.min.css">
  28. <script src="https://code.jquery.com/jquery-3.3.1.min.js" integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=" crossorigin="anonymous"></script>
  29. </head>
  30. <body>
  31. <nav class="navbar bg-brown-dark brown-light border-bottom border-body d-print-none" data-bs-theme="dark">
  32. <div class="container-fluid">
  33. <a class="navbar-brand brown-light" href="dashboard.php">
  34. <img src="images/blueprint-logo-light.png" alt="Logo" width="30" height="24" class="d-inline-block align-text-top">
  35. Modulos Design
  36. </a>
  37. <div class="ms-auto d-flex gap-2">
  38. <a href="dashboard.php" class="btn btn-sm btn-outline-light"><i class="bi bi-grid-fill"></i> Dashboard</a>
  39. <?php if (!empty($drg)): ?><a href="client-brief.php?drg=<?= (int)$drg ?>" class="btn btn-sm btn-outline-light"><i class="bi bi-person-fill"></i> Client Brief</a><?php endif; ?>
  40. </div>
  41. </div>
  42. </nav>
  43. <div class="container">
  44. <div class="row pt-2">
  45. <div class="col-sm-4 col-md-4 pt-3">
  46. <img class="img-fluid logo pt-2" src="images/blueprint-full-logo-medium.png" alt="Blueprint Studio">
  47. </div>
  48. <div class="col-sm-4 col-md-4 m-auto text-center">
  49. <h3 class="architect text-center">Job: <?php echo $drg; ?></h3>
  50. </div>
  51. <div class="col-sm-4 col-md-4 text-end pt-3">
  52. <h2 class="fw-bold text-end mb-1">Client Onboarding Form</h2>
  53. <h4 class="text-end mb-1">
  54. <span class="fw-bold brown-two"><?php echo $enquiry_date; ?></span>
  55. </h4>
  56. </div>
  57. </div>
  58. <script type="text/javascript" src="https://sandbox.web.squarecdn.com/v1/square.js" ></script>
  59. <script>
  60. const appId = '{sandbox-sq0idb-ZUSNynWbeVYrFo3hjZFIQg}';
  61. const locationId = '{LYQ568H0H05Q2}';
  62. async function initializeCard(payments) {
  63. const card = await payments.card();
  64. await card.attach('#card-container');
  65. return card;
  66. }
  67. async function createPayment(token, verificationToken) {
  68. const body = JSON.stringify({
  69. locationId,
  70. sourceId: token,
  71. verificationToken,
  72. idempotencyKey: window.crypto.randomUUID(),
  73. });
  74. const paymentResponse = await fetch('/payment', {
  75. method: 'POST',
  76. headers: {
  77. 'Content-Type': 'application/json',
  78. },
  79. body,
  80. });
  81. if (paymentResponse.ok) {
  82. return paymentResponse.json();
  83. }
  84. const errorBody = await paymentResponse.text();
  85. throw new Error(errorBody);
  86. }
  87. async function tokenize(paymentMethod) {
  88. const tokenResult = await paymentMethod.tokenize();
  89. if (tokenResult.status === 'OK') {
  90. return tokenResult.token;
  91. } else {
  92. let errorMessage = `Tokenization failed with status: ${tokenResult.status}`;
  93. if (tokenResult.errors) {
  94. errorMessage += ` and errors: ${JSON.stringify(
  95. tokenResult.errors,
  96. )}`;
  97. }
  98. throw new Error(errorMessage);
  99. }
  100. }
  101. // Required in SCA Mandated Regions: Learn more at https://developer.squareup.com/docs/sca-overview
  102. async function verifyBuyer(payments, token) {
  103. const verificationDetails = {
  104. amount: '100.00',
  105. billingContact: {
  106. givenName: '<?php echo $firstname; ?>',
  107. familyName: '<?php echo $lastname; ?>',
  108. email: '<?php echo $client_email; ?>',
  109. phone: '<?php echo $client_mobile; ?>',
  110. addressLines: ['<?php echo $postal_address_street; ?>'],
  111. city: '<?php echo $postal_address_town; ?>',
  112. state: '<?php echo $postal_address_state; ?>',
  113. countryCode: 'AU',
  114. },
  115. currencyCode: 'AUD',
  116. intent: 'CHARGE',
  117. };
  118. const verificationResults = await payments.verifyBuyer(
  119. token,
  120. verificationDetails,
  121. );
  122. return verificationResults.token;
  123. }
  124. // status is either SUCCESS or FAILURE;
  125. function displayPaymentResults(status) {
  126. const statusContainer = document.getElementById(
  127. 'payment-status-container',
  128. );
  129. if (status === 'SUCCESS') {
  130. statusContainer.classList.remove('is-failure');
  131. statusContainer.classList.add('is-success');
  132. } else {
  133. statusContainer.classList.remove('is-success');
  134. statusContainer.classList.add('is-failure');
  135. }
  136. statusContainer.style.visibility = 'visible';
  137. }
  138. document.addEventListener('DOMContentLoaded', async function () {
  139. if (!window.Square) {
  140. throw new Error('Square.js failed to load properly');
  141. }
  142. let payments;
  143. try {
  144. payments = window.Square.payments(appId, locationId);
  145. } catch {
  146. const statusContainer = document.getElementById(
  147. 'payment-status-container',
  148. );
  149. statusContainer.className = 'missing-credentials';
  150. statusContainer.style.visibility = 'visible';
  151. return;
  152. }
  153. let card;
  154. try {
  155. card = await initializeCard(payments);
  156. } catch (e) {
  157. console.error('Initializing Card failed', e);
  158. return;
  159. }
  160. async function handlePaymentMethodSubmission(event, card) {
  161. event.preventDefault();
  162. try {
  163. // disable the submit button as we await tokenization and make a payment request.
  164. cardButton.disabled = true;
  165. const token = await tokenize(card);
  166. const verificationToken = await verifyBuyer(payments, token);
  167. const paymentResults = await createPayment(
  168. token,
  169. verificationToken,
  170. );
  171. displayPaymentResults('SUCCESS');
  172. console.debug('Payment Success', paymentResults);
  173. } catch (e) {
  174. cardButton.disabled = false;
  175. displayPaymentResults('FAILURE');
  176. console.error(e.message);
  177. }
  178. }
  179. const cardButton = document.getElementById('card-button');
  180. cardButton.addEventListener('click', async function (event) {
  181. await handlePaymentMethodSubmission(event, card);
  182. });
  183. });
  184. </script>
  185. <div class="row">
  186. <div class="col-12">
  187. <div class="row ">
  188. <div class="col ">
  189. <h4 class="fw-bold">Client Details</h4>
  190. </div>
  191. </div>
  192. <div class="mb-1">
  193. <div class="row ">
  194. <div class="col-6 col-md-3">
  195. <label for="firstname" class="form-label form-label-sm p-0 m-0">Clients Name</label>
  196. <input type="text" class="form-control form-control-sm architect brown-four" name="firstname" id="firstname" tabindex="1" value="<?php echo $firstname; ?>" readonly>
  197. </div>
  198. <div class="col-6 col-md-3">
  199. <label for="lastname" class="form-label form-label-sm p-0 m-0"></label>
  200. <input type="text" class="form-control form-control-sm architect brown-four" name="lastname" id="lastname" tabindex="2" value="<?php echo $lastname; ?>" readonly>
  201. </div>
  202. <div class="col-12 col-md-6">
  203. <label for="joint_name" class="form-label form-label-sm p-0 m-0">T/As - Joint Names</label>
  204. <input type="text" class="form-control form-control-sm architect brown-three" name="joint_name" id="joint_name" value="<?php echo $joint_name; ?>" readonly>
  205. </div>
  206. </div>
  207. </div>
  208. <div class="mb-1">
  209. <label for="postal_address" class="form-label form-label-sm p-0 m-0">Clients Postal Address</label>
  210. <input type="text" class="form-control form-control-sm fw-bold architect brown-three map-autocomplete" id="postal_address" name="postal_address" value="<?php echo $postal_address; ?>" readonly>
  211. </div>
  212. <div class="mb-1">
  213. <div class="row ">
  214. <div class="col-md-6">
  215. <label for="phoneNumber" class="form-label form-label-sm p-0 m-0">Clients Mobile</label>
  216. <input type="phone" class="form-control form-control-sm architect brown-three" minlength="12" id="phoneNumber" name="client_mobile" value="<?php echo $client_mobile; ?>" readonly>
  217. </div>
  218. <div class="col-md-6">
  219. <label for="client_email" class="form-label form-label-sm p-0 m-0">Email address</label>
  220. <input type="email" class="form-control form-control-sm architect brown-three" name="client_email" id="client_email" value="<?php echo $client_email; ?>" readonly>
  221. </div>
  222. </div>
  223. </div>
  224. </div>
  225. </div>
  226. <hr>
  227. <div class="row mt-3">
  228. <div class="col-md-1">Item</div>
  229. <div class="col-md-5">Description</div>
  230. <div class="col-md-2">Date Paid</div>
  231. <div class="col">Total</div>
  232. </div>
  233. <hr>
  234. <?php
  235. $checkRecord = mysqli_query($con, "SELECT * FROM `progress_payments` WHERE `drg` = '{$drg}' " );
  236. $rowcount = mysqli_num_rows($checkRecord);
  237. $result = mysqli_query($con, "SELECT *, @curRow := @curRow + 1 AS position FROM `progress_payments` JOIN (SELECT @curRow := 0) r WHERE `drg` = '{$drg}' ");
  238. if (!$result) {
  239. printf("Error: %s\n", mysqli_error($con));
  240. exit();
  241. }
  242. while ($row = mysqli_fetch_array($result)) {
  243. $pos = (int)$row['position'];
  244. $desc = htmlspecialchars($row['description'], ENT_QUOTES, 'UTF-8');
  245. $paid = htmlspecialchars($row['paid'], ENT_QUOTES, 'UTF-8');
  246. $val = htmlspecialchars($row['value'], ENT_QUOTES, 'UTF-8');
  247. echo "<div class='mb-1 row justify-content-start'>";
  248. echo "<label for='description' class='col-1 col-form-label'>" . $pos . "</label>";
  249. echo "<input type='hidden' id='progress' v-model='progress' value='" . $pos . "'>";
  250. echo "<div class='col-sm-5'>";
  251. echo "<input type='text' class='form-control form-control-sm' id='description' v-model='description' value='" . $desc . "' disabled>";
  252. echo "</div>";
  253. echo "<div class='col-sm-2'>";
  254. echo "<input type='text' class='form-control form-control-sm' id='paid' v-model='paid' value='" . $paid . "' disabled>";
  255. echo "</div>";
  256. echo "<div class='col-sm-2'>";
  257. echo "<input type='currency' class='form-control form-control-sm' id='value' v-model='value' value='" . $val . "' disabled>";
  258. echo "</div>";
  259. echo "<div class='col-sm-2'>";
  260. echo "<button class='btn btn-sm bg-brown-three brown-five' id='card-button' type='button' data-value='" . $val . "'>Pay $" . $val . "</button>";
  261. echo "</div>";
  262. echo "</div>";
  263. }
  264. ?>
  265. <hr>
  266. <div class="row">
  267. <form id="payment-form">
  268. <div id="card-container"></div>
  269. <button class="btn btn-sm bg-brown-three brown-five" id="card-button" type="button">Pay $100.00</button>
  270. </form>
  271. <div id="payment-status-container"></div>
  272. </div>
  273. <script type="text/javascript" src="https://sandbox.web.squarecdn.com/v1/square.js" ></script>
  274. <script>
  275. const appId = '{sandbox-sq0idb-ZUSNynWbeVYrFo3hjZFIQg}';
  276. const locationId = '{LYQ568H0H05Q2}';
  277. async function initializeCard(payments) {
  278. const card = await payments.card();
  279. await card.attach('#card-container');
  280. return card;
  281. }
  282. async function createPayment(token, verificationToken) {
  283. const body = JSON.stringify({
  284. locationId,
  285. sourceId: token,
  286. verificationToken,
  287. idempotencyKey: window.crypto.randomUUID(),
  288. });
  289. const paymentResponse = await fetch('/payment', {
  290. method: 'POST',
  291. headers: {
  292. 'Content-Type': 'application/json',
  293. },
  294. body,
  295. });
  296. if (paymentResponse.ok) {
  297. return paymentResponse.json();
  298. }
  299. const errorBody = await paymentResponse.text();
  300. throw new Error(errorBody);
  301. }
  302. async function tokenize(paymentMethod) {
  303. const tokenResult = await paymentMethod.tokenize();
  304. if (tokenResult.status === 'OK') {
  305. return tokenResult.token;
  306. } else {
  307. let errorMessage = `Tokenization failed with status: ${tokenResult.status}`;
  308. if (tokenResult.errors) {
  309. errorMessage += ` and errors: ${JSON.stringify(
  310. tokenResult.errors,
  311. )}`;
  312. }
  313. throw new Error(errorMessage);
  314. }
  315. }
  316. const amount = event.currentTarget.getAttribute('data-value');
  317. // Required in SCA Mandated Regions: Learn more at https://developer.squareup.com/docs/sca-overview
  318. async function verifyBuyer(payments, token) {
  319. const verificationDetails = {
  320. amount: amount,
  321. billingContact: {
  322. givenName: '<?php echo $firstname; ?>',
  323. familyName: '<?php echo $lastname; ?>',
  324. email: '<?php echo $client_email; ?>',
  325. phone: '<?php echo $client_mobile; ?>',
  326. addressLines: ['<?php echo $postal_address_street; ?>'],
  327. city: '<?php echo $postal_address_town; ?>',
  328. state: '<?php echo $postal_address_state; ?>',
  329. countryCode: 'AU',
  330. },
  331. currencyCode: 'AUD',
  332. intent: 'CHARGE',
  333. };
  334. const verificationResults = await payments.verifyBuyer(
  335. token,
  336. verificationDetails,
  337. );
  338. return verificationResults.token;
  339. }
  340. // status is either SUCCESS or FAILURE;
  341. function displayPaymentResults(status) {
  342. const statusContainer = document.getElementById(
  343. 'payment-status-container',
  344. );
  345. if (status === 'SUCCESS') {
  346. statusContainer.classList.remove('is-failure');
  347. statusContainer.classList.add('is-success');
  348. //
  349. // Add date payment success to data base
  350. //
  351. } else {
  352. statusContainer.classList.remove('is-success');
  353. statusContainer.classList.add('is-failure');
  354. }
  355. statusContainer.style.visibility = 'visible';
  356. }
  357. document.addEventListener('DOMContentLoaded', async function () {
  358. if (!window.Square) {
  359. throw new Error('Square.js failed to load properly');
  360. }
  361. let payments;
  362. try {
  363. payments = window.Square.payments(appId, locationId);
  364. } catch {
  365. const statusContainer = document.getElementById(
  366. 'payment-status-container',
  367. );
  368. statusContainer.className = 'missing-credentials';
  369. statusContainer.style.visibility = 'visible';
  370. return;
  371. }
  372. let card;
  373. try {
  374. card = await initializeCard(payments);
  375. } catch (e) {
  376. console.error('Initializing Card failed', e);
  377. return;
  378. }
  379. async function handlePaymentMethodSubmission(event, card) {
  380. event.preventDefault();
  381. try {
  382. // disable the submit button as we await tokenization and make a payment request.
  383. cardButton.disabled = true;
  384. const token = await tokenize(card);
  385. const verificationToken = await verifyBuyer(payments, token);
  386. const paymentResults = await createPayment(
  387. token,
  388. verificationToken,
  389. );
  390. displayPaymentResults('SUCCESS');
  391. console.debug('Payment Success', paymentResults);
  392. } catch (e) {
  393. cardButton.disabled = false;
  394. displayPaymentResults('FAILURE');
  395. console.error(e.message);
  396. }
  397. }
  398. const cardButton = document.getElementById('card-button');
  399. cardButton.addEventListener('click', async function (event) {
  400. await handlePaymentMethodSubmission(event, card);
  401. });
  402. });
  403. </script>
  404. <footer class="footer">
  405. <p class="text-center">&copy; <?php echo date('Y'); ?> - Modulos Design</p>
  406. </footer>
  407. </div>
  408. <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js" integrity="sha384-HwwvtgBNo3bZJJLYd8oVXjrBZt8cqVSpeBNS5n7C8IVInixGAoxmnlMuBnhbgrkm" crossorigin="anonymous"></script>
  409. <script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyB-QceOYrDe9otynMmQ9iNF3yEZzbpsanM&libraries=places&callback=initAutocomplete" async defer></script>
  410. <script src="https://cdn.jsdelivr.net/npm/signature_pad@4.0.0/dist/signature_pad.umd.min.js"></script>
  411. <script src="js/signature.js" ></script>
  412. <script async defer src="https://apis.google.com/js/api.js" onload="gapiLoaded()"></script>
  413. <script async defer src="https://accounts.google.com/gsi/client" onload="gisLoaded()"></script>
  414. </body>
  415. </html>