PluginProbe
Welcart e-Commerce / 2.12.4
Welcart e-Commerce v2.12.4
2.12.4 2.12.3 2.11.35 2.12.2 2.12.1 2.11.34 2.11.33 2.11.32 2.11.31 2.11.30 1.3.16 1.3.17 1.3.2 1.3.3 1.3.4 1.3.5 1.3.6 1.3.7 1.3.8 1.3.9 1.4.0 1.4.1 1.4.10 1.4.11 1.4.12 All 292 releases
← All changes | functions/hoock_func.php +980 -919 1.3.7 → 2.12.4 View file →
@@ -1,919 +1,980 @@
1 -<?php
2 -// Hoock functions
3 -add_action('usces_construct', 'usces_action_acting_construct', 10);
4 -add_action('usces_after_cart_instant', 'usces_action_acting_transaction', 10);
5 -
6 -function usces_action_acting_construct(){
7 -
8 - if(isset($_POST['X-TRANID']) && !isset($_POST['OPT'])){//remise
9 -
10 - $rand = $_POST['X-S_TORIHIKI_NO'];
11 - $datas = usces_get_order_acting_data($rand);
12 - $_GET['uscesid'] = $datas['sesid'];
13 - if( empty($datas['sesid']) ){
14 - usces_log('remise construct : error1', 'acting_transaction.log');
15 - }else{
16 - //usces_auth_order_acting_data($rand);
17 - usces_log('remise construct : '.$_POST['X-TRANID'], 'acting_transaction.log');
18 - usces_set_acting_notification_time( $rand );
19 - }
20 -
21 - }elseif( in_array($_SERVER['REMOTE_ADDR'], array('210.164.6.67', '202.221.139.50')) ){//zeus
22 -
23 - $rand = $_REQUEST['sendpoint'];
24 - $datas = usces_get_order_acting_data($rand);
25 - $_GET['uscesid'] = $datas['sesid'];
26 - if( empty($datas['sesid']) ){
27 - usces_log('zeus construct : error1', 'acting_transaction.log');
28 - }else{
29 - usces_log('zeus construct : '.$_REQUEST['sendpoint'], 'acting_transaction.log');
30 - }
31 -
32 - } elseif( isset($_POST['res_result']) && isset($_POST['res_pay_method']) ) {//SoftBankPayment
33 -
34 - $rand = $_REQUEST['order_id'];
35 - $datas = usces_get_order_acting_data($rand);
36 - $_GET['uscesid'] = $datas['sesid'];
37 - if( empty($datas['sesid']) ) {
38 - usces_log('SoftBankPayment construct : error1', 'acting_transaction.log');
39 - } else {
40 - usces_log('SoftBankPayment construct : '.$_REQUEST['order_id'], 'acting_transaction.log');
41 - }
42 -
43 - } elseif( isset($_POST['SID']) && isset($_POST['FUKA']) && isset($_POST['CVS']) ) {//digitalcheck_conv
44 -
45 - $rand = $_REQUEST['SID'];
46 - $datas = usces_get_order_acting_data($rand);
47 - $_GET['uscesid'] = $datas['sesid'];
48 - if( empty($datas['sesid']) ) {
49 - usces_log('digitalcheck construct : error1', 'acting_transaction.log');
50 - } else {
51 - usces_log('digitalcheck construct : '.$_REQUEST['SID'], 'acting_transaction.log');
52 - }
53 - }
54 -}
55 -
56 -function usces_action_acting_transaction(){
57 - global $usces, $wpdb;
58 -
59 - //*** remise_card ***//
60 - if(isset($_POST['X-TRANID']) && !isset($_POST['OPT'])){
61 - foreach( $_POST as $key => $value ){
62 - $data[$key] = mb_convert_encoding($value, 'UTF-8', 'SJIS');
63 - }
64 - usces_log('remise acting_transaction : '.print_r($data, true), 'acting_transaction.log');
65 -
66 - $rand = $_POST['X-S_TORIHIKI_NO'];
67 -// if( empty($rand) ){
68 -// usces_log('remise card error1 : '.print_r($data, true), 'acting_transaction.log');
69 -// die('error1');
70 -// }else{
71 -// $res = usces_check_notification_time( $rand, 15 );
72 -// if( !$res )
73 -// die('error : time over');
74 -// }
75 -//
76 -// if( 0 !== (int)$_POST['X-ERRLEVEL'] ){
77 -// usces_log('remise card error2 : '.print_r($data, true), 'acting_transaction.log');
78 -// die('error2');
79 -// }
80 -
81 - if( '0000000' === substr($rand, 0, 7) ){//card up
82 - usces_log('remise card_update : '.print_r($data, true), 'acting_transaction.log');
83 - if( isset($_POST['X-EXPIRE']) ){
84 - $expire = substr($_POST['X-EXPIRE'], 0, 2) . '/' . substr($_POST['X-EXPIRE'], 2, 2);
85 - $usces->set_member_meta_value('limitofcard', $expire, $_POST['X-AC_S_KAIIN_NO']);
86 - }
87 - if( isset($_POST['X-PARTOFCARD']) )
88 - $usces->set_member_meta_value('partofcard', $_POST['X-PARTOFCARD'], $_POST['X-AC_S_KAIIN_NO']);
89 -
90 -//20120510ysk start
91 - //die('<SDBKDATA>STATUS=800</SDBKDATA>');
92 - $status = (isset($_POST['CARIER_TYPE'])) ? '900' : '800';
93 - die('<SDBKDATA>STATUS='.$status.'</SDBKDATA>');
94 -//20120510ysk end
95 - }
96 -
97 -//20110203ysk start
98 -// $res = $usces->order_processing();
99 -// if( 'error' == $res ){
100 -// usces_log('remise card error3 : '.print_r($data, true), 'acting_transaction.log');
101 -// die('error3');
102 -// }else{
103 - if( isset($_POST['X-PAYQUICKID']) )
104 - $usces->set_member_meta_value('remise_pcid', $_POST['X-PAYQUICKID']);
105 - if( isset($_POST['X-AC_MEMBERID']) )
106 - $usces->set_member_meta_value('remise_memid', $_POST['X-AC_MEMBERID']);
107 -//20120511ysk start
108 - if( isset($_POST['X-EXPIRE']) ) {
109 - $limitofcard = substr($_POST['X-EXPIRE'], 0, 2) . '/' . substr($_POST['X-EXPIRE'], 2, 2);
110 - $usces->set_member_meta_value('limitofcard', $limitofcard);
111 - }
112 - if( isset($_POST['X-PARTOFCARD']) )
113 - $usces->set_member_meta_value('partofcard', $_POST['X-PARTOFCARD']);
114 -//20120511ysk end
115 - usces_log('remise card transaction : '.$_POST['X-TRANID'], 'acting_transaction.log');
116 -//20120510ysk start
117 - //die('<SDBKDATA>STATUS=800</SDBKDATA>');
118 - $status = (isset($_POST['CARIER_TYPE'])) ? '900' : '800';
119 - die('<SDBKDATA>STATUS='.$status.'</SDBKDATA>');
120 -//20120510ysk end
121 -// }
122 -//20110203ysk end
123 -
124 - //*** remise_conv ***//
125 - }elseif( isset($_POST['S_TORIHIKI_NO']) && isset($_POST['REC_FLG']) ){
126 - foreach( $_POST as $key => $value ){
127 - $data[$key] = mb_convert_encoding($value, 'UTF-8', 'SJIS');
128 - }
129 -
130 - $table_name = $wpdb->prefix . "usces_order";
131 - $table_meta_name = $wpdb->prefix . "usces_order_meta";
132 -
133 - $mquery = $wpdb->prepare("SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'settlement_id', $_POST['S_TORIHIKI_NO']);
134 - $order_id = $wpdb->get_var( $mquery );
135 - if( $order_id == NULL ){
136 - usces_log('remise conv error1 : '.print_r($data, true), 'acting_transaction.log');
137 - die('error1');
138 - }
139 -
140 - $mquery = $wpdb->prepare("
141 - UPDATE $table_name SET order_status =
142 - CASE
143 - WHEN LOCATE('noreceipt', order_status) > 0 THEN REPLACE(order_status, 'noreceipt', 'receipted')
144 - WHEN LOCATE('receipted', order_status) > 0 THEN order_status
145 - ELSE CONCAT('receipted,', order_status )
146 - END
147 - WHERE ID = %d", $order_id);
148 - $res = $wpdb->query( $mquery );
149 - if( $res === false ){
150 - usces_log('remise conv error2 : '.print_r($data, true), 'acting_transaction.log');
151 - die('error2');
152 - }
153 -
154 - $datastr = serialize( $data );
155 - $mquery = $wpdb->prepare(
156 - "UPDATE $table_meta_name SET meta_value = %s WHERE meta_key = %s AND order_id = %d", $datastr, 'settlement_id', $order_id);
157 - $res = $wpdb->query( $mquery );
158 - if( $res === false ){
159 - usces_log('remise conv error3 : '.print_r($data, true), 'acting_transaction.log');
160 - die('error3');
161 - }
162 -
163 - usces_action_acting_getpoint( $order_id );//20120306ysk 0000324
164 -
165 - //usces_send_receipted_mail( $order_id, 'remise_conv' );
166 - usces_log('remise conv transaction : '.$_POST['S_TORIHIKI_NO'], 'acting_transaction.log');
167 - die('<SDBKDATA>STATUS=800</SDBKDATA>');
168 -
169 - //*** zeus_card ***//
170 - }elseif( isset($_REQUEST['acting']) && 'zeus_card' == $_REQUEST['acting'] && isset($_REQUEST['result']) && isset($_REQUEST['ordd']) ){
171 - foreach( $_REQUEST as $key => $value ){
172 - $data[$key] = $value;
173 - }
174 -//usces_log('zeus card : '.print_r($data, true), 'acting_transaction.log');
175 -
176 - $acting_opts = $usces->options['acting_settings']['zeus'];
177 -
178 - $rand = $_GET['sendpoint'];
179 - if( empty($rand) ){
180 - usces_log('zeus card error1 : '.print_r($data, true), 'acting_transaction.log');
181 - die('error1');
182 - }
183 -
184 - if( 'OK' == $_REQUEST['result'] ){
185 - usces_auth_order_acting_data($rand);
186 - header("HTTP/1.0 200 OK");
187 - die('zeus');
188 - }else{
189 - usces_log('zeus card error3 : '.print_r($data, true), 'acting_transaction.log');
190 - header("HTTP/1.0 200 OK");
191 - die('error3');
192 - }
193 -
194 - //*** zeus_bank ***//
195 - }elseif( isset($_REQUEST['acting']) && 'zeus_bank' == $_REQUEST['acting'] && isset($_REQUEST['order_no']) && isset($_REQUEST['tracking_no']) ){
196 - foreach( $_REQUEST as $key => $value ){
197 - $data[$key] = $value;
198 - }
199 - usces_log('zeus construct_data : '.print_r($data,true), 'acting_transaction.log');
200 -
201 -//20130426ysk start 0000701
202 - if( '04' === $_REQUEST['status'] or '05' === $_REQUEST['status'] ) {
203 - usces_log( 'zeus bank error0 : status='.$_REQUEST['status'], 'acting_transaction.log' );
204 - die('error0');
205 - }
206 -//20130426ysk end
207 -
208 - $acting_opts = $usces->options['acting_settings']['zeus'];
209 -
210 - $table_name = $wpdb->prefix . "usces_order";
211 - $table_meta_name = $wpdb->prefix . "usces_order_meta";
212 - $mquery = $wpdb->prepare("SELECT order_id, meta_value FROM $table_meta_name WHERE meta_key = %s", 'acting_'.$_REQUEST['tracking_no']);
213 - $values = $wpdb->get_row( $mquery, ARRAY_A );
214 - //usces_log('zeus construct_values1 : '.print_r($values,true), 'acting_transaction.log');
215 - if( $values == NULL ){
216 -
217 -//20110203ysk start
218 - $res = $usces->order_processing();
219 - if( 'error' == $res ){
220 - //usces_log('zeus bank error1 : '.print_r($data, true), 'acting_transaction.log');
221 - usces_log('zeus bank error1 : order_processing', 'acting_transaction.log');
222 - die('error1');
223 - }else{
224 - $order_id = $usces->cart->get_order_entry('ID');
225 - $value = serialize($_GET);
226 - $query = $wpdb->prepare("INSERT INTO $table_meta_name (order_id, meta_key, meta_value) VALUES (%d, %s, %s)", $order_id, 'acting_'.$_REQUEST['tracking_no'], $value);
227 - $res = $wpdb->query( $query );
228 -
229 - $mquery = $wpdb->prepare("SELECT order_id, meta_value FROM $table_meta_name WHERE meta_key = %s", 'acting_'.$_REQUEST['tracking_no']);
230 - $values = $wpdb->get_row( $mquery, ARRAY_A );
231 - $usces->cart->crear_cart();
232 - }
233 -//20110203ysk end
234 - }
235 -
236 - //usces_log('zeus construct_values2 : '.print_r($values,true), 'acting_transaction.log');
237 - $value = unserialize($values['meta_value']);
238 - $status = ( '03' === $_REQUEST['status'] ) ? 'receipted,' : 'noreceipt,';
239 - $order_id = $values['order_id'];
240 - $add_point = true;//20120306ysk 0000324
241 - if( 'receipted,' == $status ){
242 - $mquery = $wpdb->prepare("
243 - UPDATE $table_name SET order_status =
244 - CASE
245 - WHEN LOCATE('noreceipt', order_status) > 0 THEN REPLACE(order_status, 'noreceipt', 'receipted')
246 - WHEN LOCATE('receipted', order_status) > 0 THEN order_status
247 - ELSE CONCAT('receipted,', order_status )
248 - END
249 - WHERE ID = %d", $order_id);
250 - }else{
251 - $mquery = $wpdb->prepare("
252 - UPDATE $table_name SET order_status =
253 - CASE
254 - WHEN LOCATE('receipted', order_status) > 0 THEN REPLACE(order_status, 'receipted', 'noreceipt')
255 - WHEN LOCATE('noreceipt', order_status) > 0 THEN order_status
256 - ELSE CONCAT('noreceipt,', order_status )
257 - END
258 - WHERE ID = %d", $order_id);
259 - $add_point = false;//20120306ysk 0000324
260 - }
261 - $res = $wpdb->query( $mquery );
262 - if( false === $res ){
263 - //usces_log('zeus bank error2 : '.print_r($data, true), 'acting_transaction.log');
264 - usces_log('zeus bank error2 : update usces_order', 'acting_transaction.log');
265 - die('error2');
266 - }
267 - usces_action_acting_getpoint( $order_id, $add_point );//20120306ysk 0000324
268 -
269 - $upvalue = array( 'acting' => $_GET['acting'], 'order_no' => $_GET['order_no'], 'tracking_no' => $_GET['tracking_no'], 'status' => $_GET['status'], 'error_message' => $_GET['error_message'], 'money' => $_GET['money'] );
270 - $mquery = $wpdb->prepare("UPDATE $table_meta_name SET meta_value = %s WHERE order_id = %d AND meta_key = %s", serialize($upvalue), $order_id, 'acting_'.$_REQUEST['tracking_no']);
271 - //usces_log('mquery2 : '.print_r($mquery, true), 'acting_transaction.log');
272 - $res = $wpdb->query( $mquery );
273 - if(!$res){
274 - //usces_log('zeus bank error3 : '.print_r($data, true), 'acting_transaction.log');
275 - usces_log('zeus bank error3 : update usces_order_meta', 'acting_transaction.log');
276 - die('error3');
277 - }
278 -
279 - usces_log('zeus bank transaction : '.$_REQUEST['tracking_no'], 'acting_transaction.log');
280 - die('zeus');
281 -
282 - //*** zeus_conv ***//
283 - }elseif( isset($_REQUEST['acting']) && 'zeus_conv' == $_REQUEST['acting'] && isset($_REQUEST['status']) && isset($_REQUEST['sendpoint']) ){
284 - foreach( $_REQUEST as $key => $value ){
285 - $data[$key] = $value;
286 - }
287 -
288 - $acting_opts = $usces->options['acting_settings']['zeus'];
289 -
290 - $table_name = $wpdb->prefix . "usces_order";
291 - $table_meta_name = $wpdb->prefix . "usces_order_meta";
292 - $mquery = $wpdb->prepare("SELECT order_id, meta_value FROM $table_meta_name WHERE meta_key = %s", 'acting_'.$_REQUEST['sendpoint']);
293 - $values = $wpdb->get_row( $mquery, ARRAY_A );
294 - if( $values == NULL ){
295 -
296 -//20110203ysk start
297 - $res = $usces->order_processing();
298 -
299 -
300 - if( 'error' == $res ){
301 - usces_log('zeus conv error1 : '.print_r($data, true), 'acting_transaction.log');
302 - die('error1');
303 - }else{
304 - $order_id = $usces->cart->get_order_entry('ID');
305 - $value = serialize($_GET);
306 - $query = $wpdb->prepare("INSERT INTO $table_meta_name (order_id, meta_key, meta_value) VALUES (%d, %s, %s)", $order_id, 'acting_'.$_REQUEST['sendpoint'], $value);
307 - $res = $wpdb->query( $query );
308 - usces_log('zeus conv ordered : OK', 'acting_transaction.log');
309 - }
310 -//20110203ysk end
311 -
312 -
313 - }else{
314 -
315 - $value = unserialize($values['meta_value']);
316 - $status = ( '04' === $_REQUEST['status'] ) ? 'receipted,' : 'noreceipt,';
317 - $order_id = $values['order_id'];
318 - $add_point = true;//20120306ysk 0000324
319 - if( 'receipted,' == $status ){
320 - $mquery = $wpdb->prepare("
321 - UPDATE $table_name SET order_status =
322 - CASE
323 - WHEN LOCATE('noreceipt', order_status) > 0 THEN REPLACE(order_status, 'noreceipt', 'receipted')
324 - WHEN LOCATE('receipted', order_status) > 0 THEN order_status
325 - ELSE CONCAT('receipted,', order_status )
326 - END
327 - WHERE ID = %d", $order_id);
328 - }else{
329 - $mquery = $wpdb->prepare("
330 - UPDATE $table_name SET order_status =
331 - CASE
332 - WHEN LOCATE('receipted', order_status) > 0 THEN REPLACE(order_status, 'receipted', 'noreceipt')
333 - WHEN LOCATE('noreceipt', order_status) > 0 THEN order_status
334 - ELSE CONCAT('noreceipt,', order_status )
335 - END
336 - WHERE ID = %d", $order_id);
337 - $add_point = false;//20120306ysk 0000324
338 - }
339 - $res = $wpdb->query( $mquery );
340 - if(!$res){
341 - usces_log('zeus conv error2 : '.print_r($data, true), 'acting_transaction.log');
342 - die('error2');
343 - }
344 -
345 - usces_log('zeus conv cgi : ' . $status, 'acting_transaction.log');
346 -
347 - foreach( $_GET as $key => $v ){
348 - $newvalue[$key] = mb_convert_encoding($v, 'UTF-8', 'SJIS');
349 - }
350 - $value = serialize($newvalue);
351 - $mquery = $wpdb->prepare("UPDATE $table_meta_name SET meta_value = %s WHERE order_id = %d AND meta_key = %s", $value, $order_id, 'acting_'.$_REQUEST['sendpoint']);
352 - $res = $wpdb->query( $mquery );
353 - if(!$res){
354 - usces_log('zeus conv error3 : '.print_r($data, true), 'acting_transaction.log');
355 - die('error3');
356 - }
357 - usces_action_acting_getpoint( $order_id, $add_point );//20120306ysk 0000324
358 - }
359 -
360 - usces_log('zeus conv transaction : '.$_REQUEST['sendpoint'], 'acting_transaction.log');
361 - die('zeus');
362 -
363 -//20101018ysk start
364 - //*** jpayment_card ***//
365 - } elseif(isset($_REQUEST['acting']) && 'jpayment_card' == $_REQUEST['acting']) {
366 - //$args='';
367 - //foreach((array)$_GET as $key => $value) {
368 - // $args.='&('.$key.')=('.$value.')';
369 - //}
370 - //usces_log('jpayment card : '.$args, 'acting_transaction.log');
371 -
372 - //*** jpayment_conv ***//
373 - } elseif(isset($_REQUEST['acting']) && 'jpayment_conv' == $_REQUEST['acting'] && isset($_GET['ap'])) {
374 - //$args='';
375 - //foreach((array)$_GET as $key => $value) {
376 - // $args.='&('.$key.')=('.$value.')';
377 - //}
378 - //usces_log('jpayment conv : '.$args, 'acting_transaction.log');
379 - foreach( $_REQUEST as $key => $value ){
380 - $data[$key] = $value;
381 - }
382 -
383 - switch($_GET['ap']) {
384 - case 'CPL_PRE'://コンビニペーパーレス決済識別コード
385 - break;
386 -
387 - case 'CPL'://入金確定
388 - $table_name = $wpdb->prefix."usces_order";
389 - $table_meta_name = $wpdb->prefix."usces_order_meta";
390 -
391 - $query = $wpdb->prepare("SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'settlement_id', $_GET['cod']);
392 - $order_id = $wpdb->get_var($query);
393 - if($order_id == NULL) {
394 - usces_log('jpayment conv error1 : '.print_r($data, true), 'acting_transaction.log');
395 - die('error1');
396 - }
397 -
398 - $query = $wpdb->prepare("
399 - UPDATE $table_name SET order_status =
400 - CASE
401 - WHEN LOCATE('noreceipt', order_status) > 0 THEN REPLACE(order_status, 'noreceipt', 'receipted')
402 - WHEN LOCATE('receipted', order_status) > 0 THEN order_status
403 - ELSE CONCAT('receipted,', order_status )
404 - END
405 - WHERE ID = %d", $order_id);
406 - $res = $wpdb->query($query);
407 - if($res === false) {
408 - usces_log('jpayment conv error2 : '.print_r($data, true), 'acting_transaction.log');
409 - die('error2');
410 - }
411 -
412 - foreach($_GET as $key => $value) {
413 - $data[$key] = mysql_real_escape_string($value);
414 - }
415 - $res = $usces->set_order_meta_value('acting_'.$_REQUEST['acting'], serialize($data), $order_id);
416 - if($res === false) {
417 - usces_log('jpayment conv error3 : '.print_r($data, true), 'acting_transaction.log');
418 - die('error3');
419 - }
420 -
421 - usces_action_acting_getpoint( $order_id );//20120306ysk 0000324
422 -
423 - usces_log('J-Payment conv transaction : '.$_GET['gid'], 'acting_transaction.log');
424 - die('J-Payment');
425 - break;
426 -
427 - case 'CVS_CAN'://入金取消
428 - $table_name = $wpdb->prefix."usces_order";
429 - $table_meta_name = $wpdb->prefix."usces_order_meta";
430 -
431 - $query = $wpdb->prepare("SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'settlement_id', $_GET['cod']);
432 - $order_id = $wpdb->get_var($query);
433 - if($order_id == NULL) {
434 - usces_log('jpayment conv error1 : '.print_r($data, true), 'acting_transaction.log');
435 - die('error1');
436 - }
437 -
438 - $query = $wpdb->prepare("
439 - UPDATE $table_name SET order_status =
440 - CASE
441 - WHEN LOCATE('receipted', order_status) > 0 THEN REPLACE(order_status, 'receipted', 'noreceipt')
442 - WHEN LOCATE('noreceipt', order_status) > 0 THEN order_status
443 - ELSE CONCAT('noreceipt,', order_status )
444 - END
445 - WHERE ID = %d", $order_id);
446 - $res = $wpdb->query($query);
447 - if($res === false) {
448 - usces_log('jpayment conv error2 : '.print_r($data, true), 'acting_transaction.log');
449 - die('error2');
450 - }
451 -
452 - foreach($_GET as $key => $value) {
453 - $data[$key] = mysql_real_escape_string($value);
454 - }
455 - $res = $usces->set_order_meta_value('acting_'.$_REQUEST['acting'], serialize($data), $order_id);
456 - if($res === false) {
457 - usces_log('jpayment conv error3 : '.print_r($data, true), 'acting_transaction.log');
458 - die('error3');
459 - }
460 -
461 - usces_action_acting_getpoint( $order_id, false );//20120306ysk 0000324
462 -
463 - usces_log('J-Payment conv transaction : '.$_GET['gid'], 'acting_transaction.log');
464 - die('J-Payment');
465 - break;
466 - }
467 -
468 - //*** jpayment_bank ***//
469 - } elseif(isset($_REQUEST['acting']) && 'jpayment_bank' == $_REQUEST['acting']) {
470 - //$args='';
471 - //foreach((array)$_GET as $key => $value) {
472 - // $args.='&('.$key.')=('.$value.')';
473 - //}
474 - //usces_log('jpayment bank : '.$args, 'acting_transaction.log');
475 - foreach( $_REQUEST as $key => $value ){
476 - $data[$key] = $value;
477 - }
478 -
479 - switch($_GET['ap']) {
480 - case 'BANK'://受付完了
481 - break;
482 -
483 - case 'BAN_SAL'://入金完了
484 - if($_GET['mf'] == '1') {//入金マッチングの場合
485 - $table_name = $wpdb->prefix."usces_order";
486 - $table_meta_name = $wpdb->prefix."usces_order_meta";
487 -
488 - $query = $wpdb->prepare("SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'settlement_id', $_GET['cod']);
489 - $order_id = $wpdb->get_var($query);
490 - if($order_id == NULL) {
491 - usces_log('jpayment bank error1 : '.print_r($data, true), 'acting_transaction.log');
492 - die('error1');
493 - }
494 -
495 - $query = $wpdb->prepare("
496 - UPDATE $table_name SET order_status =
497 - CASE
498 - WHEN LOCATE('noreceipt', order_status) > 0 THEN REPLACE(order_status, 'noreceipt', 'receipted')
499 - WHEN LOCATE('receipted', order_status) > 0 THEN order_status
500 - ELSE CONCAT('receipted,', order_status )
501 - END
502 - WHERE ID = %d", $order_id);
503 - $res = $wpdb->query($query);
504 - if($res === false) {
505 - usces_log('jpayment bank error2 : '.print_r($data, true), 'acting_transaction.log');
506 - die('error2');
507 - }
508 -
509 - foreach($_GET as $key => $value) {
510 - $data[$key] = mysql_real_escape_string($value);
511 - }
512 - $res = $usces->set_order_meta_value('acting_'.$_REQUEST['acting'], serialize($data), $order_id);
513 - if($res === false) {
514 - usces_log('jpayment bank error3 : '.print_r($data, true), 'acting_transaction.log');
515 - die('error3');
516 - }
517 -
518 - usces_action_acting_getpoint( $order_id );//20120306ysk 0000324
519 - }
520 -
521 - usces_log('J-Payment bank transaction : '.$_REQUEST['gid'], 'acting_transaction.log');
522 - die('J-Payment');
523 - break;
524 - }
525 -//20101018ysk end
526 - //*** epsilon ***//
527 - }elseif( !isset($_GET['acting_return']) && isset($_GET['trans_code']) && isset($_GET['user_id']) && isset($_GET['result']) && isset($_GET['order_number']) ){
528 - $query = 'trans_code=' . $_GET['trans_code'] . '&user_id=' . $_GET['user_id'] . '&result=' . $_GET['result'] . '&order_number=' . $_GET['order_number'];
529 - usces_log('epsilon (acting_transaction) : ' . $query, 'acting_transaction.log');
530 - $permalink_structure = get_option('permalink_structure');
531 - $delim = ( !$usces->use_ssl && $permalink_structure) ? '?' : '&';
532 -
533 - header('location: ' . USCES_CART_URL . $delim . 'acting=epsilon&acting_return=1&' . $query );
534 - exit;
535 -//20110208ysk start
536 - } elseif( !isset($_GET['acting_return']) && (isset($_GET['acting']) && 'paypal_ipn' == $_GET['acting']) ) {
537 - foreach( $_REQUEST as $key => $value ){
538 - $data[$key] = $value;
539 - }
540 - usces_log('paypal_ipn in '.print_r($data,true), 'acting_transaction.log');
541 - require_once($usces->options['settlement_path'] . 'paypal.php');
542 - $ipn_res = paypal_ipn_check($usces_paypal_url);
543 - if( $ipn_res[0] === true ){
544 - $res = $usces->order_processing( $ipn_res );
545 - if( 'ordercompletion' == $res ){
546 - $usces->cart->crear_cart();
547 - }else{
548 - usces_log('paypal_ipn error : '.print_r($data, true), 'acting_transaction.log');
549 - die('error1');
550 - }
551 - do_action('usces_action_paypal_ipn', $res, $ipn_res);
552 - }
553 - usces_log('PayPal IPN transaction : '.$_REQUEST['txn_id'], 'acting_transaction.log');
554 - die('PayPal');
555 -//20110523ysk start
556 - //*** paypal ipn ***//
557 - } elseif( isset($_GET['ipn_track_id']) ) {
558 - foreach( $_REQUEST as $key => $value ){
559 - $data[$key] = $value;
560 - }
561 - usces_log('paypal ipn : '.print_r($data, true), 'acting_transaction.log');
562 - die('PayPal');
563 -//20110523ysk end
564 -//20120413ysk start
565 - //*** SoftBankPayment ***//
566 - } elseif( !isset($_GET['acting_return']) && isset($_POST['res_result']) && isset($_POST['res_pay_method']) ) {
567 - //usces_log('SoftBankPayment : '.print_r($_REQUEST, true), 'acting_transaction.log');
568 - foreach( $_POST as $key => $value ) {
569 - $data[$key] = mb_convert_encoding($value, 'UTF-8', 'SJIS');
570 - }
571 - $acting = $data['free1'];
572 -
573 - switch( $data['res_result'] ) {
574 - case 'OK'://決済処理OK
575 - $table_meta_name = $wpdb->prefix."usces_order_meta";
576 - $query = $wpdb->prepare("SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'res_tracking_id', $data['res_tracking_id']);
577 - $order_id = $wpdb->get_var($query);
578 - if( !$order_id ) {
579 -
580 - $res = $usces->order_processing();
581 - if( 'ordercompletion' == $res ){
582 - $usces->cart->crear_cart();
583 - } else {
584 - usces_log('SoftBankPayment '.$data['res_pay_method'].' order processing error : '.print_r($data, true), 'acting_transaction.log');
585 - die('NG,order processing error');
586 - }
587 - }
588 -
589 - //$acting_opts = $usces->options['acting_settings']['sbps'];
590 - //if( 'on' == $acting_opts['cust'] ) {
591 - // $usces->set_member_meta_value( 'sbps_cust_no', $data['res_sps_cust_no'], $data['cust_code'] );
592 - // $usces->set_member_meta_value( 'sbps_payment_no', $data['res_sps_payment_no'], $data['cust_code'] );
593 - //}
594 - usces_log('SoftBankPayment '.$data['res_pay_method'].' [OK] transaction : '.$data['res_tracking_id'], 'acting_transaction.log');
595 - die('OK,');
596 - break;
597 -
598 - case 'PY'://入金結果通知
599 - $table_name = $wpdb->prefix."usces_order";
600 - $table_meta_name = $wpdb->prefix."usces_order_meta";
601 - $query = $wpdb->prepare("SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'res_tracking_id', $data['res_tracking_id']);
602 - $order_id = $wpdb->get_var($query);
603 - if( $order_id == NULL ) {
604 - usces_log('SoftBankPayment '.$data['res_pay_method'].' [PY] error1 : '.print_r($data, true), 'acting_transaction.log');
605 - die('NG,order_id error');
606 - }
607 -
608 - $query = $wpdb->prepare("
609 - UPDATE $table_name SET order_status =
610 - CASE
611 - WHEN LOCATE('noreceipt', order_status) > 0 THEN REPLACE(order_status, 'noreceipt', 'receipted')
612 - WHEN LOCATE('receipted', order_status) > 0 THEN order_status
613 - ELSE CONCAT('receipted,', order_status )
614 - END
615 - WHERE ID = %d", $order_id);
616 - $res = $wpdb->query($query);
617 - if( $res === false ) {
618 - usces_log('SoftBankPayment '.$data['res_pay_method'].' [PY] error2 : '.print_r($data, true), 'acting_transaction.log');
619 - die('NG,usces_order update error');
620 - }
621 -
622 - $res = $usces->set_order_meta_value($acting, serialize($data), $order_id);
623 - if( $res === false ) {
624 - usces_log('SoftBankPayment '.$data['res_pay_method'].' [PY] error3 : '.print_r($data, true), 'acting_transaction.log');
625 - die('NG,usces_order_meta update error');
626 - }
627 -
628 - usces_action_acting_getpoint( $order_id );
629 -
630 - usces_log('SoftBankPayment '.$data['res_pay_method'].' [PY] transaction : '.$order_id, 'acting_transaction.log');
631 - die('OK,');
632 -
633 - case 'CN'://期限切通知
634 - $table_name = $wpdb->prefix."usces_order";
635 - $table_meta_name = $wpdb->prefix."usces_order_meta";
636 - $query = $wpdb->prepare("SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'res_tracking_id', $data['res_tracking_id']);
637 - $order_id = $wpdb->get_var($query);
638 - if( $order_id == NULL ) {
639 - usces_log('SoftBankPayment '.$data['res_pay_method'].' [CN] error1 : '.print_r($data, true), 'acting_transaction.log');
640 - die('NG,order_id error');
641 - }
642 -
643 - $query = $wpdb->prepare("
644 - UPDATE $table_name SET order_status =
645 - CASE
646 - WHEN LOCATE('receipted', order_status) > 0 THEN REPLACE(order_status, 'receipted', 'noreceipt')
647 - WHEN LOCATE('noreceipt', order_status) > 0 THEN order_status
648 - ELSE CONCAT('noreceipt,', order_status )
649 - END
650 - WHERE ID = %d", $order_id);
651 - $res = $wpdb->query($query);
652 - if( $res === false ) {
653 - usces_log('SoftBankPayment '.$data['res_pay_method'].' [CN] error2 : '.print_r($data, true), 'acting_transaction.log');
654 - die('NG,usces_order update error');
655 - }
656 -
657 - $res = $usces->set_order_meta_value($acting, serialize($data), $order_id);
658 - if( $res === false ) {
659 - usces_log('SoftBankPayment '.$data['res_pay_method'].' [CN] error3 : '.print_r($data, true), 'acting_transaction.log');
660 - die('NG,usces_order_meta update error');
661 - }
662 -
663 - usces_action_acting_getpoint( $order_id, false );
664 -
665 - usces_log('SoftBankPayment '.$data['res_pay_method'].' [CN] transaction : '.$order_id, 'acting_transaction.log');
666 - die('OK,');
667 -
668 - default:
669 - usces_log('SoftBankPayment '.$data['res_pay_method'].' ['.$data['res_result'].'] : '.print_r($data,true), 'acting_transaction.log');
670 - die('OK,');
671 - }
672 -//20120413ysk end
673 -//20121030ysk start
674 - //*** telecom credit ***//
675 - } elseif( isset($_REQUEST['clientip']) && isset($_REQUEST['sendid']) && (isset($_REQUEST['acting']) && 'telecom_edy' == $_REQUEST['acting']) ) {
676 - foreach( $_REQUEST as $key => $value ) {
677 - $data[$key] = $value;
678 - }
679 - usces_log('telecom edy : '.print_r($data, true), 'acting_transaction.log');
680 - //die('SuccessOK');
681 - } elseif( isset($_REQUEST['clientip']) && isset($_REQUEST['sendid']) && isset($_REQUEST['edy']) ) {
682 - foreach( $_REQUEST as $key => $value ) {
683 - $data[$key] = $value;
684 - }
685 - if( $_REQUEST['rel'] === 'yes' && isset($_REQUEST['option']) ) {
686 - $table_meta_name = $wpdb->prefix."usces_order_meta";
687 - $mquery = $wpdb->prepare( "SELECT order_id, meta_value FROM $table_meta_name WHERE meta_key = %s", $_REQUEST['option'] );
688 - $mvalue = $wpdb->get_row( $mquery, ARRAY_A );
689 - $value = unserialize( $mvalue['meta_value'] );
690 - $_SESSION['usces_cart'] = $value['usces_cart'];
691 - $_SESSION['usces_entry'] = $value['usces_entry'];
692 - $_SESSION['usces_member'] = $value['usces_member'];
693 - $res = $usces->order_processing();
694 - if( 'ordercompletion' == $res ) {
695 - $query = $wpdb->prepare( "DELETE FROM $table_meta_name WHERE meta_key = %s", $_REQUEST['option'] );
696 - $res = $wpdb->query( $query );
697 - usces_log('telecom edy - Payment confirmation : '.print_r($data, true), 'acting_transaction.log');
698 - } else {
699 - usces_log('telecom edy - Error 1 : '.print_r($data, true), 'acting_transaction.log');
700 - }
701 - } else {
702 - usces_log('telecom edy - Error 2 : '.print_r($data, true), 'acting_transaction.log');
703 - }
704 - die('SuccessOK');
705 -//20121030ysk end
706 -//20120618ysk start
707 - //*** telecom credit ***//
708 - }elseif( isset($_REQUEST['clientip']) && isset($_REQUEST['sendid']) && isset($_REQUEST['rel']) ){
709 - foreach( $_REQUEST as $key => $value ){
710 - $data[$key] = $value;
711 - }
712 - usces_log('telecom card : '.print_r($data, true), 'acting_transaction.log');
713 - die('SuccessOK');
714 -//20120618ysk end
715 -//20121206ysk start
716 - //*** digitalcheck card ***//
717 - } elseif( isset($_REQUEST['SID']) && isset($_REQUEST['FUKA']) && substr($_REQUEST['FUKA'], 0, 24) == 'acting_digitalcheck_card' ) {
718 - foreach( $_REQUEST as $key => $value ) {
719 - $data[$key] = $value;
720 - }
721 - $sid = ( isset($data['SID']) ) ? $data['SID'] : '';
722 -//usces_log('digitalcheck card : '.print_r($data, true), 'digitalcheck.log');
723 -
724 - if( isset($data['SEQ']) ) {
725 - $acting_opts = $usces->options['acting_settings']['digitalcheck'];
726 - $ip_user_id = substr($data['FUKA'], 24);
727 -//usces_log('ip_user_id : '.$ip_user_id, 'digitalcheck.log');
728 - if( 'on' == $acting_opts['card_user_id'] and !empty($ip_user_id) ) {
729 - $usces->set_member_meta_value('digitalcheck_ip_user_id', $ip_user_id, $ip_user_id);
730 - }
731 -
732 - $res = $usces->order_processing();
733 - if( 'ordercompletion' == $res ) {
734 - $order_id = $usces->cart->get_order_entry('ID');
735 - $usces->set_order_meta_value( 'acting_digitalcheck_card', serialize( $data ), $order_id );
736 - } else {
737 - usces_log('digitalcheck card : order processing error', 'acting_transaction.log');
738 - }
739 -
740 - header('content-type : text/plain;charset=Shift_JIS');
741 - die("0");
742 - }
743 -
744 - //*** digitalcheck conv ***//
745 - } elseif( isset($_REQUEST['SID']) && isset($_REQUEST['FUKA']) && substr($_REQUEST['FUKA'], 0, 24) == 'acting_digitalcheck_conv' ) {
746 - foreach( $_REQUEST as $key => $value ) {
747 - $data[$key] = $value;
748 - }
749 - $sid = ( isset($data['SID']) ) ? $data['SID'] : '';
750 -//usces_log("digitalcheck conv : ".print_r($_REQUEST,true), 'digitalcheck.log');
751 -
752 - if( isset($data['SEQ']) ) {
753 - $table_name = $wpdb->prefix."usces_order";
754 - $table_meta_name = $wpdb->prefix."usces_order_meta";
755 -
756 - $query = $wpdb->prepare("SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'SID', $sid );
757 - $order_id = $wpdb->get_var( $query );
758 - if( $order_id == NULL ) {
759 - usces_log( 'digitalcheck conv error1 : '.print_r($data, true), 'acting_transaction.log' );
760 - header('content-type : text/plain;charset=Shift_JIS');
761 - die('9');
762 - }
763 -
764 - if( isset($data['CVS']) ) {//入金
765 - $mquery = $wpdb->prepare("
766 - UPDATE $table_name SET order_status =
767 - CASE
768 - WHEN LOCATE('noreceipt', order_status) > 0 THEN REPLACE(order_status, 'noreceipt', 'receipted')
769 - WHEN LOCATE('receipted', order_status) > 0 THEN order_status
770 - ELSE CONCAT('receipted,', order_status )
771 - END
772 - WHERE ID = %d", $order_id );
773 - $res = $wpdb->query( $mquery );
774 - if( $res === false ) {
775 - usces_log('digitalcheck conv error2 : '.print_r($data, true), 'acting_transaction.log');
776 - header('content-type : text/plain;charset=Shift_JIS');
777 - die('9');
778 - }
779 -
780 - usces_action_acting_getpoint( $order_id );
781 -
782 - } else {//取消
783 - $mquery = $wpdb->prepare("
784 - UPDATE $table_name SET order_status =
785 - CASE
786 - WHEN LOCATE('receipted', order_status) > 0 THEN REPLACE(order_status, 'receipted', 'noreceipt')
787 - WHEN LOCATE('noreceipt', order_status) > 0 THEN order_status
788 - ELSE CONCAT('noreceipt,', order_status )
789 - END
790 - WHERE ID = %d", $order_id );
791 - $res = $wpdb->query( $mquery );
792 - if( $res === false ) {
793 - usces_log('digitalcheck conv error3 : '.print_r($data, true), 'acting_transaction.log');
794 - header('content-type : text/plain;charset=Shift_JIS');
795 - die('9');
796 - }
797 -
798 - usces_action_acting_getpoint( $order_id, false );
799 - }
800 -
801 - $usces->set_order_meta_value( 'acting_digitalcheck_conv', serialize( $data ), $order_id );
802 -
803 - $dquery = $wpdb->prepare( "DELETE FROM $table_meta_name WHERE meta_key = %s", $sid );
804 - $res = $wpdb->query( $dquery );
805 -
806 - header('content-type : text/plain;charset=Shift_JIS');
807 - die("0");
808 -
809 - } else {
810 - if( isset($data['CVS']) and isset($data['SHNO']) ) {//決済
811 - $table_meta_name = $wpdb->prefix."usces_order_meta";
812 - $query = $wpdb->prepare("SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'SID', $sid );
813 - $order_id = $wpdb->get_var($query);
814 - if( $order_id ) {
815 - $usces->set_order_meta_value( 'acting_digitalcheck_conv', serialize( $data ), $order_id );
816 -
817 - } else {
818 - $res = $usces->order_processing();
819 - if( 'ordercompletion' == $res ) {
820 - $order_id = $usces->cart->get_order_entry('ID');
821 - $usces->set_order_meta_value( 'acting_digitalcheck_conv', serialize( $data ), $order_id );
822 - } else {
823 - usces_log('digitalcheck conv : order processing error', 'acting_transaction.log');
824 - }
825 - }
826 - header('content-type : text/plain;charset=Shift_JIS');
827 - die("0");
828 -
829 - } elseif( isset($data['purchase']) ) {
830 -
831 - } else {
832 - $permalink_structure = get_option('permalink_structure');
833 - $delim = ( !$usces->use_ssl && $permalink_structure ) ? '?' : '&';
834 - header( 'location: '.USCES_CART_URL.$delim.'acting=digitalcheck_conv&acting_return=1&SID='.$sid );
835 - exit;
836 - }
837 - }
838 -//20121206ysk end
839 -//20130225ysk start
840 - //*** mizuho card ***//
841 - } elseif( ( isset($_GET['p_ver']) && $_GET['p_ver'] == '0200' ) && ( isset($_GET['bkcode']) && $_GET['bkcode'] == 'bg01' ) ) {
842 - //usces_log('mizuho card : '.print_r($_GET,true),'mizuho.log');
843 - $stran = ( array_key_exists('stran', $_REQUEST) ) ? $_REQUEST['stran'] : '';
844 - $mbtran = ( array_key_exists('mbtran', $_REQUEST) ) ? $_REQUEST['mbtran'] : '';
845 - $rsltcd = ( array_key_exists('rsltcd', $_REQUEST) ) ? $_REQUEST['rsltcd'] : '';
846 - $permalink_structure = get_option( 'permalink_structure' );
847 - $delim = ( !$usces->use_ssl && $permalink_structure ) ? '?' : '&';
848 - if( '108' == substr($rsltcd, 0, 3) or '208' == substr($rsltcd, 0, 3) or '308' == substr($rsltcd, 0, 3 ) ) {//キャンセル
849 - header( 'location: '.USCES_CART_URL.$delim.'confirm=1' );
850 - } elseif( '109' == substr($rsltcd, 0, 3) or '209' == substr($rsltcd, 0, 3) or '309' == substr($rsltcd, 0, 3) ) {//エラー
851 - header( 'location: '.USCES_CART_URL.$delim.'confirm=1' );
852 - } else {
853 - header( 'location: '.USCES_CART_URL.$delim.'acting=mizuho_card&acting_return=1&stran='.$stran.'&mbtran='.$mbtran.'&rsltcd='.$rsltcd );
854 - }
855 - die();
856 -
857 - //*** mizuho conv ***//
858 - } elseif( ( isset($_GET['p_ver']) && $_GET['p_ver'] == '0200' ) && ( isset($_GET['bkcode']) && ( $_GET['bkcode'] == 'cv01' or $_GET['bkcode'] == 'cv02' ) ) ) {
859 - usces_log('mizuho conv : '.print_r($_GET,true),'mizuho.log');
860 - $stran = ( array_key_exists('stran', $_REQUEST) ) ? $_REQUEST['stran'] : '';
861 - $mbtran = ( array_key_exists('mbtran', $_REQUEST) ) ? $_REQUEST['mbtran'] : '';
862 - $bktrans = ( array_key_exists('bktrans', $_REQUEST) ) ? $_REQUEST['bktrans'] : '';
863 - $tranid = ( array_key_exists('tranid', $_REQUEST) ) ? $_REQUEST['tranid'] : '';
864 - $tdate = ( array_key_exists('tdate', $_REQUEST) ) ? $_REQUEST['tdate'] : '';
865 - $rsltcd = ( array_key_exists('rsltcd', $_REQUEST) ) ? $_REQUEST['rsltcd'] : '';
866 - $permalink_structure = get_option( 'permalink_structure' );
867 - $delim = ( !$usces->use_ssl && $permalink_structure ) ? '?' : '&';
868 - if( '' != $tdate ) {//入金通知
869 - foreach( $_REQUEST as $key => $value ) {
870 - $data[$key] = $value;
871 - }
872 - if( $rsltcd == "0000000000000" ) {
873 - $table_name = $wpdb->prefix."usces_order";
874 - $table_meta_name = $wpdb->prefix."usces_order_meta";
875 -
876 - $query = $wpdb->prepare( "SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'stran', $stran );
877 - $order_id = $wpdb->get_var( $query );
878 - if( $order_id == NULL ) {
879 - usces_log( 'mizuho conv error1 : '.print_r($data, true), 'acting_transaction.log' );
880 -
881 - } else {
882 - $mquery = $wpdb->prepare("
883 - UPDATE $table_name SET order_status =
884 - CASE
885 - WHEN LOCATE('noreceipt', order_status) > 0 THEN REPLACE(order_status, 'noreceipt', 'receipted')
886 - WHEN LOCATE('receipted', order_status) > 0 THEN order_status
887 - ELSE CONCAT('receipted,', order_status )
888 - END
889 - WHERE ID = %d", $order_id );
890 - $res = $wpdb->query( $mquery );
891 - if( $res === false ) {
892 - usces_log( 'mizuho conv error2 : '.print_r($data, true), 'acting_transaction.log' );
893 -
894 - } else {
895 - usces_action_acting_getpoint( $order_id );
896 -
897 - $usces->set_order_meta_value( 'acting_mizuho_conv', serialize($data), $order_id );
898 -
899 - $dquery = $wpdb->prepare( "DELETE FROM $table_meta_name WHERE meta_key = %s", $stran );
900 - $res = $wpdb->query( $dquery );
901 - }
902 - }
903 -
904 - } else {
905 - header( 'location: '.USCES_CART_URL.$delim.'confirm=1' );
906 - }
907 -
908 - } elseif( '108' == substr($rsltcd, 0, 3) or '208' == substr($rsltcd, 0, 3) or '308' == substr($rsltcd, 0, 3) ) {//キャンセル
909 - header( 'location: '.USCES_CART_URL.$delim.'confirm=1' );
910 - } elseif( '109' == substr($rsltcd, 0, 3) or '209' == substr($rsltcd, 0, 3) or '309' == substr($rsltcd, 0, 3) ) {//エラー
911 - header( 'location: '.USCES_CART_URL.$delim.'confirm=1' );
912 - } else {
913 - header( 'location: '.USCES_CART_URL.$delim.'acting=mizuho_conv&acting_return=1&stran='.$stran.'&mbtran='.$mbtran.'&bktrans='.$_GET['bktrans'].'&tranid='.$tranid.'&rsltcd='.$rsltcd );
914 - }
915 - die();
916 -//20130225ysk end
917 - }
918 -}
919 -?>
1 +<?php
2 +/**
3 + * Hoock functions.
4 + *
5 + * @package Welcart
6 + */
7 +
8 +add_action( 'usces_construct', 'usces_action_acting_construct', 10 );
9 +add_action( 'usces_after_cart_instant', 'usces_action_acting_transaction', 10 );
10 +// A3 (Layer 3 / uscesid removal): restore the shopper's cart/entry for settlement notifications
11 +// from the transaction-keyed DB store, uscesid-independently. Must run after usces_session_start()
12 +// (constructor end) and before usces_main()'s `new usces_cart()`, hence the usces_main hook.
13 +add_action( 'usces_main', 'usces_restore_acting_session_from_store', 1 );
14 +
15 +/**
16 + * Settlement Result Notification Processing.
17 + * usces_construct
18 + */
19 +function usces_action_acting_construct() {
20 + /* remise */
21 + if ( isset( $_POST['X-TRANID'] ) && ! isset( $_POST['OPT'] ) ) {
22 +
23 + $rand = wp_unslash( $_POST['X-S_TORIHIKI_NO'] );
24 + $datas = array();
25 + /* 決済成功の時のみセッション復帰 */
26 + if ( 0 == $_POST['X-ERRLEVEL'] ) {
27 + $datas = usces_get_order_acting_data( $rand );
28 + // A3: uscesid ブリッジは廃止。セッション復元は usces_restore_acting_session_from_store()（usces_main）で DBストアから実施.
29 + if ( empty( $datas['sesid'] ) ) {
30 + /* sesidが無い場合はファイルログのみ */
31 + usces_log( 'remise construct : error1', 'acting_transaction.log' );
32 + } else {
33 + /* 復帰できた場合のログ */
34 + usces_log( 'remise construct OK : ' . wp_unslash( $_POST['X-TRANID'] ), 'acting_transaction.log' );
35 + }
36 + }
37 +
38 + /* digitalcheck_conv */
39 + } elseif ( isset( $_POST['SID'] ) && isset( $_POST['FUKA'] ) && isset( $_POST['CVS'] ) ) {
40 +
41 + $sid = wp_unslash( $_POST['SID'] );
42 + $datas = usces_get_order_acting_data( $sid );
43 + // A3: uscesid ブリッジは廃止。セッション復元は usces_restore_acting_session_from_store()（usces_main）で DBストアから実施.
44 + if ( empty( $datas['sesid'] ) ) {
45 + $log = array(
46 + 'acting' => 'digitalcheck',
47 + 'key' => $sid,
48 + 'result' => 'SESSION ERROR',
49 + 'data' => wp_unslash( $_POST ),
50 + );
51 + usces_save_order_acting_error( $log );
52 + usces_log( 'digitalcheck construct : error1', 'acting_transaction.log' );
53 + } else {
54 + usces_log( 'digitalcheck construct : ' . $sid, 'acting_transaction.log' );
55 + }
56 +
57 + /* AnotherLane */
58 + } elseif ( isset( $_REQUEST['SiteId'] ) && isset( $_REQUEST['rand'] ) ) {
59 +
60 + $rand = wp_unslash( $_REQUEST['rand'] );
61 + $datas = usces_get_order_acting_data( $rand );
62 + // A3: uscesid ブリッジは廃止。セッション復元は usces_restore_acting_session_from_store()（usces_main）で DBストアから実施.
63 + if ( empty( $datas['sesid'] ) ) {
64 + $log = array(
65 + 'acting' => 'anotherlane',
66 + 'key' => $rand,
67 + 'result' => 'SESSION ERROR',
68 + 'data' => wp_unslash( $_REQUEST ),
69 + );
70 + usces_save_order_acting_error( $log );
71 + usces_log( 'anotherlane construct : error1', 'acting_transaction.log' );
72 + } else {
73 + usces_log( 'anotherlane construct : ' . $rand, 'acting_transaction.log' );
74 + }
75 +
76 + /* Veritrans */
77 + } elseif ( isset( $_POST['orderId'] ) && isset( $_POST['merchantEncryptionKey'] ) ) {
78 +
79 + $orderid = wp_unslash( $_POST['orderId'] );
80 + $datas = usces_get_order_acting_data( $orderid );
81 + // A3: uscesid ブリッジは廃止（$_GET['uscesid'] を読む処理は撤廃済みのため代入は無意味だった）。
82 + // ベリトランス Air-Web は選択可能な決済から除外済み（settlement.class.php）のため、DBストアからの
83 + // セッション復元（usces_restore_acting_session_from_store）の対象外とする.
84 + if ( empty( $datas['sesid'] ) ) {
85 + $log = array(
86 + 'acting' => 'veritrans',
87 + 'key' => $orderid,
88 + 'result' => 'SESSION ERROR',
89 + 'data' => wp_unslash( $_POST ),
90 + );
91 + usces_save_order_acting_error( $log );
92 + usces_log( 'Veritrans construct : error1', 'acting_transaction.log' );
93 + } else {
94 + usces_log( 'Veritrans construct : ' . $orderid, 'acting_transaction.log' );
95 + }
96 + }
97 +}
98 +
99 +/**
100 + * 決済通知（サーバー間・ブラウザ Cookie 無し）で、確定時に保存したカート/エントリを DBストア
101 + * （usces_access）から $_SESSION へ復元する。uscesid セッション橋渡しの置き換え（Layer 3 / A3）。
102 + *
103 + * usces_session_start()（コンストラクタ末尾）より後・usces_main() の `new usces_cart()` より前に
104 + * 実行する必要があるため usces_main フックに登録する（construct では直後の @session_start() に
105 + * 上書きされてしまうため）。復元後、usces_cart 生成 → usces_after_cart_instant
106 + * （usces_action_acting_transaction）が $usces->cart->get_cart() を参照して処理する。
107 + *
108 + * 対象はサーバー間通知でセッション復元が要る remise / digitalcheck_conv / AnotherLane。
109 + *
110 + * usces_main
111 + */
112 +function usces_restore_acting_session_from_store() {
113 + $rand = '';
114 + if ( isset( $_POST['X-TRANID'] ) && ! isset( $_POST['OPT'] ) && isset( $_POST['X-S_TORIHIKI_NO'] ) ) {
115 + /* remise: 決済成功時（X-ERRLEVEL == 0）のみ復元 */
116 + if ( isset( $_POST['X-ERRLEVEL'] ) && 0 == $_POST['X-ERRLEVEL'] ) {
117 + $rand = wp_unslash( $_POST['X-S_TORIHIKI_NO'] );
118 + }
119 + } elseif ( isset( $_POST['SID'] ) && isset( $_POST['FUKA'] ) && isset( $_POST['CVS'] ) ) {
120 + /* digitalcheck_conv */
121 + $rand = wp_unslash( $_POST['SID'] );
122 + } elseif ( isset( $_REQUEST['SiteId'] ) && isset( $_REQUEST['rand'] ) ) {
123 + /* AnotherLane: 通知は $_REQUEST（GET/POST 両様）。旧 usces_action_acting_construct の
124 + * $_GET['uscesid']=$datas['sesid'] ブリッジの置き換え。KickType サーバー通知で order_processing()
125 + * がカートを読む前にここで DBストアから復元する。 */
126 + $rand = wp_unslash( $_REQUEST['rand'] );
127 + }
128 +
129 + if ( '' === $rand ) {
130 + return;
131 + }
132 +
133 + $datas = usces_get_order_acting_data( $rand );
134 + if ( empty( $datas ) || empty( $datas['order_data'] ) ) {
135 + return;
136 + }
137 +
138 + $order_data = wel_safe_maybe_unserialize( $datas['order_data'] );
139 + if ( ! is_array( $order_data ) ) {
140 + return;
141 + }
142 +
143 + if ( isset( $order_data['cart'] ) && is_array( $order_data['cart'] ) ) {
144 + /*
145 + * DBストア（usces_access）の cart は save_order_acting_data() が保存した
146 + * $usces->cart->get_cart() の「出力形式」＝ [ i => array( serial, post_id, sku, options,
147 + * price, unit_price, quantity, advance ) ]（インデックス配列）。
148 + * 一方 $_SESSION['usces_cart'] の「内部形式」は
149 + * [ '<serial>' => array( 'price', 'unit_price', 'quant', 'advance' ) ]（serial をキーにしたマップ）で、
150 + * usces_cart::get_cart()/key_unserialize() はこの内部形式を前提に読む
151 + * （キー=serial／数量キーは 'quant'）。そのまま代入すると整数キー 0 が serial として
152 + * unserialize され false → array_keys(false) で致命的エラーになるため、内部形式へ変換して復元する。
153 + */
154 + $session_cart = array();
155 + foreach ( $order_data['cart'] as $item ) {
156 + if ( ! is_array( $item ) || ! isset( $item['serial'] ) ) {
157 + continue;
158 + }
159 + $session_cart[ $item['serial'] ] = array(
160 + 'price' => isset( $item['price'] ) ? $item['price'] : 0,
161 + 'unit_price' => isset( $item['unit_price'] ) ? $item['unit_price'] : 0,
162 + 'quant' => isset( $item['quantity'] ) ? $item['quantity'] : 0,
163 + 'advance' => isset( $item['advance'] ) ? $item['advance'] : '',
164 + );
165 + }
166 + $_SESSION['usces_cart'] = $session_cart;
167 + }
168 + if ( isset( $order_data['entry'] ) ) {
169 + $_SESSION['usces_entry'] = $order_data['entry'];
170 + }
171 + usces_log( 'acting session restored from DB store (uscesid-independent) : ' . $rand, 'acting_transaction.log' );
172 +}
173 +
174 +/**
175 + * 決済結果通知の送信元IPが許可リストに含まれるか判定する。
176 + *
177 + * @param string $remote_addr Source IP address of the notification.
178 + * @param array|string $allowed Allowed IP addresses / CIDR ranges.
179 + * @return bool True when the source IP is allowed.
180 + */
181 +function usces_acting_notice_ip_allowed( $remote_addr, $allowed ) {
182 + if ( empty( $remote_addr ) || empty( $allowed ) ) {
183 + return false;
184 + }
185 + $remote_long = ip2long( $remote_addr );
186 + if ( false === $remote_long ) {
187 + return false;
188 + }
189 + foreach ( (array) $allowed as $entry ) {
190 + $entry = trim( (string) $entry );
191 + if ( '' === $entry ) {
192 + continue;
193 + }
194 + if ( false !== strpos( $entry, '/' ) ) {
195 + list( $subnet, $bits ) = explode( '/', $entry, 2 );
196 + $subnet_long = ip2long( $subnet );
197 + $bits = (int) $bits;
198 + if ( false === $subnet_long || $bits < 1 || 32 < $bits ) {
199 + continue;
200 + }
201 + $mask = ( 0xFFFFFFFF << ( 32 - $bits ) ) & 0xFFFFFFFF;
202 + if ( ( $remote_long & $mask ) === ( $subnet_long & $mask ) ) {
203 + return true;
204 + }
205 + } elseif ( ip2long( $entry ) === $remote_long ) {
206 + return true;
207 + }
208 + }
209 + return false;
210 +}
211 +
212 +/**
213 + * Settlement Result Notification Processing.
214 + * usces_after_cart_instant
215 + */
216 +function usces_action_acting_transaction() {
217 + global $usces, $wpdb;
218 +
219 + /* remise_card */
220 + if ( isset( $_POST['X-TRANID'] ) && ! isset( $_POST['OPT'] ) ) {
221 + $data = array();
222 + foreach ( $_POST as $key => $value ) {
223 + $data[ $key ] = mb_convert_encoding( $value, 'UTF-8', 'SJIS' );
224 + }
225 + /* 決済エラーの場合は、エラーログを残してdie */
226 + if ( 0 != $data['X-ERRLEVEL'] ) {
227 + $log = array(
228 + 'acting' => 'remise_card',
229 + 'key' => $data['S_TORIHIKI_NO'],
230 + 'result' => $data['X-ERRCODE'],
231 + 'data' => $data,
232 + );
233 + usces_save_order_acting_error( $log );
234 + $status = ( isset( $_POST['CARIER_TYPE'] ) ) ? '900' : '800';
235 + die( '<SDBKDATA>STATUS=' . $status . '</SDBKDATA>' );
236 + }
237 + usces_log( 'remise acting_transaction : ' . print_r( $data, true ), 'acting_transaction.log' );
238 +
239 + $rand = wp_unslash( $_POST['X-S_TORIHIKI_NO'] );
240 +
241 + /* カード情報更新 */
242 + if ( '0000000' === substr( $rand, 0, 7 ) ) { /* card up */
243 + usces_log( 'remise card_update : ' . print_r( $data, true ), 'acting_transaction.log' );
244 + if ( isset( $_POST['X-AC_S_KAIIN_NO'] ) ) {
245 + if ( isset( $_POST['X-EXPIRE'] ) ) {
246 + $expire = wp_unslash( $_POST['X-EXPIRE'] );
247 + $limitofcard = substr( $expire, 0, 2 ) . '/' . substr( $expire, 2, 2 );
248 + $usces->set_member_meta_value( 'limitofcard', $limitofcard, wp_unslash( $_POST['X-AC_S_KAIIN_NO'] ) );
249 + }
250 + if ( isset( $_POST['X-PARTOFCARD'] ) ) {
251 + $usces->set_member_meta_value( 'partofcard', wp_unslash( $_POST['X-PARTOFCARD'] ), wp_unslash( $_POST['X-AC_S_KAIIN_NO'] ) );
252 + }
253 + } elseif ( isset( $_POST['X-PAYQUICKID'] ) ) {
254 + $member_id = substr( $rand, 7 );
255 + if ( $member_id ) {
256 + $usces->set_member_meta_value( 'remise_pcid', wp_unslash( $_POST['X-PAYQUICKID'] ), (int) $member_id );
257 + if ( isset( $_POST['X-EXPIRE'] ) ) {
258 + $expire = wp_unslash( $_POST['X-EXPIRE'] );
259 + $limitofcard = substr( $expire, 0, 2 ) . '/' . substr( $expire, 2, 2 );
260 + $usces->set_member_meta_value( 'limitofcard', $limitofcard, (int) $member_id );
261 + }
262 + if ( isset( $_POST['X-PARTOFCARD'] ) ) {
263 + $usces->set_member_meta_value( 'partofcard', wp_unslash( $_POST['X-PARTOFCARD'] ), (int) $member_id );
264 + }
265 + }
266 + }
267 +
268 + $status = ( isset( $_POST['CARIER_TYPE'] ) ) ? '900' : '800';
269 + die( '<SDBKDATA>STATUS=' . $status . '</SDBKDATA>' );
270 + }
271 +
272 + $cart = $usces->cart->get_cart();
273 + /* カートが無い（セッションが無い）場合、エラーログを残し、ルミーズにはerrorを返却 */
274 + if ( empty( $cart ) ) {
275 + usces_log( 'remise card error3 : ' . print_r( $data, true ), 'acting_transaction.log' );
276 + $log = array(
277 + 'acting' => 'remise',
278 + 'key' => wp_unslash( $_POST['X-S_TORIHIKI_NO'] ),
279 + 'result' => 'SESSION TIME OUT',
280 + 'data' => wp_unslash( $_POST ),
281 + );
282 + usces_save_order_acting_error( $log );
283 + die( 'SESSION TIME OUT' );
284 +
285 + /* セッションが存在する場合は、STATUSを返却 */
286 + } else {
287 + if ( isset( $_POST['X-PAYQUICKID'] ) ) {
288 + $usces->set_member_meta_value( 'remise_pcid', wp_unslash( $_POST['X-PAYQUICKID'] ) );
289 + }
290 + if ( isset( $_POST['X-AC_MEMBERID'] ) ) {
291 + $usces->set_member_meta_value( 'remise_memid', wp_unslash( $_POST['X-AC_MEMBERID'] ) );
292 + }
293 + if ( isset( $_POST['X-EXPIRE'] ) ) {
294 + $expire = wp_unslash( $_POST['X-EXPIRE'] );
295 + $limitofcard = substr( $expire, 0, 2 ) . '/' . substr( $expire, 2, 2 );
296 + $usces->set_member_meta_value( 'limitofcard', $limitofcard );
297 + }
298 + if ( isset( $_POST['X-PARTOFCARD'] ) ) {
299 + $usces->set_member_meta_value( 'partofcard', wp_unslash( $_POST['X-PARTOFCARD'] ) );
300 + }
301 + usces_log( 'remise card transaction : ' . wp_unslash( $_POST['X-TRANID'] ), 'acting_transaction.log' );
302 + $status = ( isset( $_POST['CARIER_TYPE'] ) ) ? '900' : '800';
303 + die( '<SDBKDATA>STATUS=' . $status . '</SDBKDATA>' );
304 + }
305 +
306 + /* remise_conv */
307 + } elseif ( isset( $_POST['S_TORIHIKI_NO'] ) && isset( $_POST['REC_FLG'] ) ) {
308 + $data = array();
309 + foreach ( $_POST as $key => $value ) {
310 + $data[ $key ] = mb_convert_encoding( $value, 'UTF-8', 'SJIS' );
311 + }
312 + REMISE_SETTLEMENT::get_instance()->acting_notice_ip_guard( $data );
313 +
314 + $table_name = $wpdb->prefix . 'usces_order';
315 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
316 +
317 + $mquery = $wpdb->prepare( "SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'settlement_id', wp_unslash( $_POST['S_TORIHIKI_NO'] ) );
318 + $order_id = $wpdb->get_var( $mquery );
319 + if ( null == $order_id ) {
320 + $log = array(
321 + 'acting' => 'remise_conv',
322 + 'key' => wp_unslash( $_POST['S_TORIHIKI_NO'] ),
323 + 'result' => 'ORDER DATA KEY ERROR',
324 + 'data' => wp_unslash( $_POST ),
325 + );
326 + usces_save_order_acting_error( $log );
327 + usces_log( 'remise conv error1 : ' . print_r( $data, true ), 'acting_transaction.log' );
328 + die( 'error1' );
329 + }
330 +
331 + $res = usces_change_order_receipt( $order_id, 'receipted' );
332 + if ( false === $res ) {
333 + $log = array(
334 + 'acting' => 'remise_conv',
335 + 'key' => wp_unslash( $_POST['S_TORIHIKI_NO'] ),
336 + 'result' => 'ORDER DATA UPDATE ERROR',
337 + 'data' => wp_unslash( $_POST ),
338 + );
339 + usces_save_order_acting_error( $log );
340 + usces_log( 'remise conv error2 : ' . print_r( $data, true ), 'acting_transaction.log' );
341 + die( 'error2' );
342 + }
343 +
344 + $datastr = serialize( $data );
345 + $mquery = $wpdb->prepare( "UPDATE $table_meta_name SET meta_value = %s WHERE meta_key = %s AND order_id = %d", $datastr, 'settlement_id', $order_id );
346 + $res = $wpdb->query( $mquery );
347 + if ( false === $res ) {
348 + $log = array(
349 + 'acting' => 'remise_conv',
350 + 'key' => wp_unslash( $_POST['S_TORIHIKI_NO'] ),
351 + 'result' => 'ORDER META DATA UPDATE ERROR',
352 + 'data' => wp_unslash( $_POST ),
353 + );
354 + usces_save_order_acting_error( $log );
355 + usces_log( 'remise conv error3 : ' . print_r( $data, true ), 'acting_transaction.log' );
356 + die( 'error3' );
357 + }
358 +
359 + usces_action_acting_getpoint( $order_id );
360 +
361 + usces_log( 'remise conv transaction : ' . wp_unslash( $_POST['S_TORIHIKI_NO'] ), 'acting_transaction.log' );
362 + die( '<SDBKDATA>STATUS=800</SDBKDATA>' );
363 +
364 + /* jpayment_card */
365 + } elseif ( isset( $_REQUEST['acting'] ) && 'jpayment_card' == $_REQUEST['acting'] ) {
366 +
367 + /* jpayment_conv */
368 + } elseif ( isset( $_REQUEST['acting'] ) && 'jpayment_conv' == $_REQUEST['acting'] && isset( $_GET['ap'] ) ) {
369 + switch ( $_GET['ap'] ) {
370 + case 'CPL_PRE': /* コンビニペーパーレス決済識別コード */
371 + break;
372 +
373 + case 'CPL': /* 入金確定 */
374 + JPAYMENT_SETTLEMENT::get_instance()->acting_notice_ip_guard();
375 + $acting = wp_unslash( $_REQUEST['acting'] );
376 + $data = array();
377 + foreach ( $_GET as $key => $value ) {
378 + $data[ $key ] = esc_sql( $value );
379 + }
380 + $cod = ( isset( $data['cod'] ) ) ? $data['cod'] : '';
381 +
382 + $table_name = $wpdb->prefix . 'usces_order';
383 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
384 +
385 + $query = $wpdb->prepare( "SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'settlement_id', $cod );
386 + $order_id = $wpdb->get_var( $query );
387 + if ( null == $order_id ) {
388 + $log = array(
389 + 'acting' => $acting,
390 + 'key' => $cod,
391 + 'result' => 'ORDER DATA KEY ERROR',
392 + 'data' => $data,
393 + );
394 + usces_save_order_acting_error( $log );
395 + usces_log( 'ROBOT PAYMENT conv error1 : ' . print_r( $data, true ), 'acting_transaction.log' );
396 + die( 'error1' );
397 + }
398 +
399 + $res = usces_change_order_receipt( $order_id, 'receipted' );
400 + if ( false === $res ) {
401 + $log = array(
402 + 'acting' => $acting,
403 + 'key' => $cod,
404 + 'result' => 'ORDER DATA UPDATE ERROR',
405 + 'data' => $data,
406 + );
407 + usces_save_order_acting_error( $log );
408 + usces_log( 'ROBOT PAYMENT conv error2 : ' . print_r( $data, true ), 'acting_transaction.log' );
409 + die( 'error2' );
410 + }
411 +
412 + $res = $usces->set_order_meta_value( 'acting_' . $acting, serialize( $data ), $order_id );
413 + if ( false === $res ) {
414 + $log = array(
415 + 'acting' => $acting,
416 + 'key' => $cod,
417 + 'result' => 'ORDER META DATA UPDATE ERROR',
418 + 'data' => $data,
419 + );
420 + usces_save_order_acting_error( $log );
421 + usces_log( 'ROBOT PAYMENT conv error3 : ' . print_r( $data, true ), 'acting_transaction.log' );
422 + die( 'error3' );
423 + }
424 +
425 + usces_action_acting_getpoint( $order_id );
426 +
427 + usces_log( 'ROBOT PAYMENT conv transaction : ' . $data['gid'], 'acting_transaction.log' );
428 + die( 'ROBOT PAYMENT' );
429 + break;
430 +
431 + case 'CVS_CAN': /* 入金取消 */
432 + JPAYMENT_SETTLEMENT::get_instance()->acting_notice_ip_guard();
433 + $acting = wp_unslash( $_REQUEST['acting'] );
434 + $data = array();
435 + foreach ( $_GET as $key => $value ) {
436 + $data[ $key ] = esc_sql( $value );
437 + }
438 + $cod = ( isset( $data['cod'] ) ) ? $data['cod'] : '';
439 +
440 + $table_name = $wpdb->prefix . 'usces_order';
441 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
442 +
443 + $query = $wpdb->prepare( "SELECT `order_id` FROM $table_meta_name WHERE `meta_key` = %s AND `meta_value` = %s", 'settlement_id', $cod );
444 + $order_id = $wpdb->get_var( $query );
445 + if ( null == $order_id ) {
446 + $log = array(
447 + 'acting' => $acting,
448 + 'key' => $cod,
449 + 'result' => 'ORDER DATA KEY ERROR',
450 + 'data' => $data,
451 + );
452 + usces_save_order_acting_error( $log );
453 + usces_log( 'ROBOT PAYMENT conv error1 : ' . print_r( $data, true ), 'acting_transaction.log' );
454 + die( 'error1' );
455 + }
456 +
457 + $res = usces_change_order_receipt( $order_id, 'noreceipt' );
458 + if ( false === $res ) {
459 + $log = array(
460 + 'acting' => $acting,
461 + 'key' => $cod,
462 + 'result' => 'ORDER DATA UPDATE ERROR',
463 + 'data' => $data,
464 + );
465 + usces_save_order_acting_error( $log );
466 + usces_log( 'ROBOT PAYMENT conv error2 : ' . print_r( $data, true ), 'acting_transaction.log' );
467 + die( 'error2' );
468 + }
469 +
470 + $res = $usces->set_order_meta_value( 'acting_' . $acting, serialize( $data ), $order_id );
471 + if ( false === $res ) {
472 + $log = array(
473 + 'acting' => $acting,
474 + 'key' => $cod,
475 + 'result' => 'ORDER META DATA UPDATE ERROR',
476 + 'data' => $data,
477 + );
478 + usces_save_order_acting_error( $log );
479 + usces_log( 'ROBOT PAYMENT conv error3 : ' . print_r( $data, true ), 'acting_transaction.log' );
480 + die( 'error3' );
481 + }
482 +
483 + usces_action_acting_getpoint( $order_id, false );
484 +
485 + usces_log( 'ROBOT PAYMENT conv transaction : ' . $data['gid'], 'acting_transaction.log' );
486 + die( 'ROBOT PAYMENT' );
487 + break;
488 + }
489 +
490 + /* jpayment_bank */
491 + } elseif ( isset( $_REQUEST['acting'] ) && 'jpayment_bank' == $_REQUEST['acting'] && isset( $_GET['ap'] ) ) {
492 + switch ( $_GET['ap'] ) {
493 + case 'BANK': /* 受付完了 */
494 + break;
495 +
496 + case 'BAN_SAL': /* 入金完了 */
497 + JPAYMENT_SETTLEMENT::get_instance()->acting_notice_ip_guard();
498 + if ( isset( $_GET['mf'] ) && '1' == wp_unslash( $_GET['mf'] ) ) { /* 入金マッチングの場合 */
499 + $acting = wp_unslash( $_REQUEST['acting'] );
500 + $data = array();
501 + foreach ( $_GET as $key => $value ) {
502 + $data[ $key ] = esc_sql( $value );
503 + }
504 + $cod = ( isset( $data['cod'] ) ) ? $data['cod'] : '';
505 +
506 + $table_name = $wpdb->prefix . 'usces_order';
507 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
508 +
509 + $query = $wpdb->prepare( "SELECT `order_id` FROM $table_meta_name WHERE `meta_key` = %s AND `meta_value` = %s", 'settlement_id', $cod );
510 + $order_id = $wpdb->get_var( $query );
511 + if ( null == $order_id ) {
512 + $log = array(
513 + 'acting' => $acting,
514 + 'key' => $cod,
515 + 'result' => 'ORDER DATA KEY ERROR',
516 + 'data' => $data,
517 + );
518 + usces_save_order_acting_error( $log );
519 + usces_log( 'ROBOT PAYMENT bank error1 : ' . print_r( $data, true ), 'acting_transaction.log' );
520 + die( 'error1' );
521 + }
522 +
523 + $res = usces_change_order_receipt( $order_id, 'receipted' );
524 + if ( false === $res ) {
525 + $log = array(
526 + 'acting' => $acting,
527 + 'key' => $cod,
528 + 'result' => 'ORDER DATA UPDATE ERROR',
529 + 'data' => $data,
530 + );
531 + usces_save_order_acting_error( $log );
532 + usces_log( 'ROBOT PAYMENT bank error2 : ' . print_r( $data, true ), 'acting_transaction.log' );
533 + die( 'error2' );
534 + }
535 +
536 + $res = $usces->set_order_meta_value( 'acting_' . $acting, serialize( $data ), $order_id );
537 + if ( false === $res ) {
538 + $log = array(
539 + 'acting' => $acting,
540 + 'key' => $cod,
541 + 'result' => 'ORDER META DATA UPDATE ERROR',
542 + 'data' => $data,
543 + );
544 + usces_save_order_acting_error( $log );
545 + usces_log( 'ROBOT PAYMENT bank error3 : ' . print_r( $data, true ), 'acting_transaction.log' );
546 + die( 'error3' );
547 + }
548 +
549 + usces_action_acting_getpoint( $order_id );
550 + }
551 +
552 + usces_log( 'ROBOT PAYMENT bank transaction : ' . $data['gid'], 'acting_transaction.log' );
553 + die( 'ROBOT PAYMENT' );
554 + break;
555 + }
556 +
557 + /* PayPal ipn */
558 + } elseif ( ! isset( $_GET['acting_return'] ) && ( isset( $_GET['acting'] ) && 'paypal_ipn' == wp_unslash( $_GET['acting'] ) ) ) {
559 + if ( file_exists( $usces->options['settlement_path'] . 'paypal.php' ) ) {
560 + $data = array();
561 + foreach ( $_REQUEST as $key => $value ) {
562 + $data[ $key ] = $value;
563 + }
564 + usces_log( 'paypal_ipn in ' . print_r( $data, true ), 'acting_transaction.log' );
565 + require_once( $usces->options['settlement_path'] . 'paypal.php' );
566 + $ipn_res = paypal_ipn_check( $usces_paypal_url );
567 + if ( true === $ipn_res[0] ) {
568 + $res = $usces->order_processing( $ipn_res );
569 + if ( 'ordercompletion' == $res ) {
570 + $usces->cart->crear_cart();
571 + } else {
572 + usces_log( 'paypal_ipn error : ' . print_r( $data, true ), 'acting_transaction.log' );
573 + die( 'error1' );
574 + }
575 + do_action( 'usces_action_paypal_ipn', $res, $ipn_res );
576 + }
577 + usces_log( 'PayPal IPN transaction : ' . wp_unslash( $_REQUEST['txn_id'] ), 'acting_transaction.log' );
578 + }
579 + die( 'PayPal' );
580 +
581 + /* telecom edy 提供対象外のため無効化. CVE-2026-19887(PHP Object Injection)対応.
582 + } elseif ( isset( $_REQUEST['clientip'] ) && isset( $_REQUEST['sendid'] ) && ( isset( $_REQUEST['acting'] ) && 'telecom_edy' == $_REQUEST['acting'] ) ) {
583 + $data = array();
584 + foreach ( $_REQUEST as $key => $value ) {
585 + $data[ $key ] = $value;
586 + }
587 + usces_log( 'telecom edy : ' . print_r( $data, true ), 'acting_transaction.log' );
588 +
589 + } elseif ( isset( $_REQUEST['clientip'] ) && isset( $_REQUEST['sendid'] ) && isset( $_REQUEST['edy'] ) ) {
590 + $data = array();
591 + foreach ( $_REQUEST as $key => $value ) {
592 + $data[ $key ] = $value;
593 + }
594 + if ( 'yes' === wp_unslash( $_REQUEST['rel'] ) && isset( $_REQUEST['option'] ) ) {
595 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
596 + $mquery = $wpdb->prepare( "SELECT order_id, meta_value FROM $table_meta_name WHERE meta_key = %s", wp_unslash( $_REQUEST['option'] ) );
597 + $mvalue = $wpdb->get_row( $mquery, ARRAY_A );
598 + $value = wel_safe_maybe_unserialize( $mvalue['meta_value'] );
599 + $_SESSION['usces_cart'] = $value['usces_cart'];
600 + $_SESSION['usces_entry'] = $value['usces_entry'];
601 + $_SESSION['usces_member'] = $value['usces_member'];
602 + $res = $usces->order_processing();
603 + if ( 'ordercompletion' == $res ) {
604 + $query = $wpdb->prepare( "DELETE FROM $table_meta_name WHERE meta_key = %s", wp_unslash( $_REQUEST['option'] ) );
605 + $res = $wpdb->query( $query );
606 + usces_log( 'telecom edy - Payment confirmation : ' . print_r( $data, true ), 'acting_transaction.log' );
607 + } else {
608 + $log = array(
609 + 'acting' => 'telecom_edy',
610 + 'key' => wp_unslash( $_REQUEST['option'] ),
611 + 'result' => 'ORDER DATA REGISTERED ERROR',
612 + 'data' => wp_unslash( $_REQUEST ),
613 + );
614 + usces_save_order_acting_error( $log );
615 + usces_log( 'telecom edy - Error 1 : ' . print_r( $data, true ), 'acting_transaction.log' );
616 + }
617 + } else {
618 + $log = array(
619 + 'acting' => 'telecom_edy',
620 + 'key' => wp_unslash( $_REQUEST['option'] ),
621 + 'result' => wp_unslash( $_REQUEST['rel'] ),
622 + 'data' => wp_unslash( $_REQUEST ),
623 + );
624 + usces_save_order_acting_error( $log );
625 + usces_log( 'telecom edy - Error 2 : ' . print_r( $data, true ), 'acting_transaction.log' );
626 + }
627 + die( 'SuccessOK' );
628 + */
629 +
630 + /* telecom credit */
631 + } elseif ( isset( $_REQUEST['clientip'] ) && isset( $_REQUEST['sendid'] ) && isset( $_REQUEST['rel'] ) ) {
632 + $acting_clientip = ( isset( $usces->options['acting_settings']['telecom']['clientip'] ) ) ? (string) $usces->options['acting_settings']['telecom']['clientip'] : '';
633 + if ( '' === $acting_clientip || (string) wp_unslash( $_REQUEST['clientip'] ) !== $acting_clientip ) {
634 + /* 設定済みクライアントIPと一致しない通知は正規のものではないため記録せず終了 */
635 + die( 'SuccessOK' );
636 + }
637 + $data = array();
638 + foreach ( $_REQUEST as $key => $value ) {
639 + $data[ $key ] = $value;
640 + }
641 + if ( 'yes' === wp_unslash( $_REQUEST['rel'] ) && isset( $_REQUEST['option'] ) ) {
642 + } else {
643 + $log = array(
644 + 'acting' => 'telecom_card',
645 + 'key' => wp_unslash( $_REQUEST['option'] ),
646 + 'result' => wp_unslash( $_REQUEST['rel'] ),
647 + 'data' => wp_unslash( $_REQUEST ),
648 + );
649 + usces_save_order_acting_error( $log );
650 + }
651 + usces_log( 'telecom card : ' . print_r( $data, true ), 'acting_transaction.log' );
652 + die( 'SuccessOK' );
653 +
654 + /* digitalcheck card */
655 + } elseif ( isset( $_REQUEST['SID'] ) && isset( $_REQUEST['FUKA'] ) && 'acting_digitalcheck_card' == substr( wp_unslash( $_REQUEST['FUKA'] ), 0, 24 ) ) {
656 + if ( isset( $_GET['acting_return'] ) && isset( $_GET['acting'] ) && 'digitalcheck_card' === $_GET['acting'] ) {
657 + return;
658 + }
659 +
660 + $data = array();
661 + foreach ( $_REQUEST as $key => $value ) {
662 + $data[ $key ] = $value;
663 + }
664 + $sid = ( isset( $data['SID'] ) ) ? $data['SID'] : '';
665 +
666 + if ( isset( $data['SEQ'] ) ) {
667 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
668 + $query = $wpdb->prepare( "SELECT `order_id` FROM $table_meta_name WHERE `meta_key` = %s AND `meta_value` = %s", 'SID', $sid );
669 + $order_id = $wpdb->get_var( $query );
670 + if ( ! $order_id ) {
671 + $acting_opts = $usces->options['acting_settings']['digitalcheck'];
672 + $ip_user_id = substr( $data['FUKA'], 24 );
673 + if ( 'on' == $acting_opts['card_user_id'] && ! empty( $ip_user_id ) ) {
674 + $usces->set_member_meta_value( 'digitalcheck_ip_user_id', $ip_user_id, $ip_user_id );
675 + }
676 +
677 + $res = $usces->order_processing();
678 + if ( 'ordercompletion' == $res ) {
679 + $order_id = $usces->cart->get_order_entry( 'ID' );
680 + $usces->set_order_meta_value( 'acting_digitalcheck_card', serialize( $data ), $order_id );
681 + $usces->set_order_meta_value( 'wc_trans_id', $sid, $order_id );
682 + } else {
683 + $log = array(
684 + 'acting' => 'digitalcheck_card',
685 + 'key' => $sid,
686 + 'result' => 'ORDER DATA REGISTERED ERROR',
687 + 'data' => wp_unslash( $_REQUEST ),
688 + );
689 + usces_save_order_acting_error( $log );
690 + // usces_log( 'digitalcheck card : order processing error', 'acting_transaction.log' );
691 + }
692 + }
693 +
694 + header( 'Content-Type: text/plain; charset=Shift_JIS' );
695 + die( "0\r\n" );
696 +
697 + } elseif ( isset( $data['purchase'] ) ) {
698 + return;
699 +
700 + } else {
701 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
702 + $query = $wpdb->prepare( "SELECT `order_id` FROM $table_meta_name WHERE `meta_key` = %s AND `meta_value` = %s", 'SID', $sid );
703 + $order_id = $wpdb->get_var( $query );
704 + if ( $order_id ) {
705 + header( 'Content-Type: text/plain; charset=Shift_JIS' );
706 + die( "0\r\n" );
707 + }
708 + }
709 +
710 + header( 'Content-Type: text/plain; charset=Shift_JIS' );
711 + die( "0\r\n" );
712 +
713 + /* digitalcheck conv */
714 + } elseif ( isset( $_REQUEST['SID'] ) && isset( $_REQUEST['FUKA'] ) && 'acting_digitalcheck_conv' == substr( wp_unslash( $_REQUEST['FUKA'] ), 0, 24 ) ) {
715 + if ( isset( $_GET['acting_return'] ) && isset( $_GET['acting'] ) && 'digitalcheck_conv' === $_GET['acting'] ) {
716 + return;
717 + }
718 +
719 + $data = array();
720 + foreach ( $_REQUEST as $key => $value ) {
721 + $data[ $key ] = $value;
722 + }
723 + $sid = ( isset( $data['SID'] ) ) ? $data['SID'] : '';
724 +
725 + if ( isset( $data['SEQ'] ) ) {
726 + DIGITALCHECK_SETTLEMENT::get_instance()->acting_notice_ip_guard( $data );
727 + $table_name = $wpdb->prefix . 'usces_order';
728 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
729 + $query = $wpdb->prepare( "SELECT `order_id` FROM $table_meta_name WHERE `meta_key` = %s AND `meta_value` = %s", 'SID', $sid );
730 + $order_id = $wpdb->get_var( $query );
731 + if ( null == $order_id ) {
732 + $log = array(
733 + 'acting' => 'digitalcheck_conv',
734 + 'key' => $sid,
735 + 'result' => 'ORDER DATA KEY ERROR',
736 + 'data' => wp_unslash( $_REQUEST ),
737 + );
738 + usces_save_order_acting_error( $log );
739 + usces_log( 'digitalcheck conv error1 : ' . print_r( $data, true ), 'acting_transaction.log' );
740 + header( 'Content-Type: text/plain; charset=Shift_JIS' );
741 + die( "9\r\n" );
742 + }
743 +
744 + if ( isset( $data['CVS'] ) ) { /* 入金 */
745 + $res = usces_change_order_receipt( $order_id, 'receipted' );
746 + if ( false === $res ) {
747 + $log = array(
748 + 'acting' => 'digitalcheck_conv',
749 + 'key' => $sid,
750 + 'result' => 'ORDER DATA UPDATE ERROR',
751 + 'data' => wp_unslash( $_REQUEST ),
752 + );
753 + usces_save_order_acting_error( $log );
754 + usces_log( 'digitalcheck conv error2 : ' . print_r( $data, true ), 'acting_transaction.log' );
755 + header( 'Content-Type: text/plain; charset=Shift_JIS' );
756 + die( "9\r\n" );
757 + }
758 +
759 + usces_action_acting_getpoint( $order_id );
760 +
761 + } else { /* 取消 */
762 + $res = usces_change_order_receipt( $order_id, 'noreceipt' );
763 + if ( false === $res ) {
764 + $log = array(
765 + 'acting' => 'digitalcheck_conv',
766 + 'key' => $sid,
767 + 'result' => 'ORDER DATA UPDATE ERROR',
768 + 'data' => wp_unslash( $_REQUEST ),
769 + );
770 + usces_save_order_acting_error( $log );
771 + usces_log( 'digitalcheck conv error3 : ' . print_r( $data, true ), 'acting_transaction.log' );
772 + header( 'Content-Type: text/plain; charset=Shift_JIS' );
773 + die( "9\r\n" );
774 + }
775 +
776 + usces_action_acting_getpoint( $order_id, false );
777 + }
778 +
779 + $usces->set_order_meta_value( 'acting_digitalcheck_conv', serialize( $data ), $order_id );
780 +
781 + $dquery = $wpdb->prepare( "DELETE FROM $table_meta_name WHERE meta_key = %s", $sid );
782 + $res = $wpdb->query( $dquery );
783 +
784 + header( 'Content-Type: text/plain; charset=Shift_JIS' );
785 + die( "0\r\n" );
786 +
787 + } else {
788 + if ( isset( $data['CVS'] ) && isset( $data['SHNO'] ) ) { /* 決済 */
789 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
790 + $query = $wpdb->prepare( "SELECT `order_id` FROM $table_meta_name WHERE `meta_key` = %s AND `meta_value` = %s", 'SID', $sid );
791 + $order_id = $wpdb->get_var( $query );
792 + if ( $order_id ) {
793 + $usces->set_order_meta_value( 'acting_digitalcheck_conv', serialize( $data ), $order_id );
794 +
795 + } else {
796 + $res = $usces->order_processing();
797 + if ( 'ordercompletion' == $res ) {
798 + $usces->set_order_meta_value( 'acting_digitalcheck_conv', serialize( $data ), $order_id );
799 + $usces->set_order_meta_value( 'wc_trans_id', $sid, $order_id );
800 + } else {
801 + $log = array(
802 + 'acting' => 'digitalcheck_conv',
803 + 'key' => $sid,
804 + 'result' => 'ORDER DATA REGISTERED ERROR',
805 + 'data' => wp_unslash( $_REQUEST ),
806 + );
807 + usces_save_order_acting_error( $log );
808 + usces_log( 'digitalcheck conv : order processing error', 'acting_transaction.log' );
809 + }
810 + }
811 +
812 + header( 'Content-Type: text/plain; charset=Shift_JIS' );
813 + die( "0\r\n" );
814 +
815 + } elseif ( isset( $data['purchase'] ) ) {
816 +
817 + } else {
818 + $permalink_structure = get_option( 'permalink_structure' );
819 + $delim = ( ! $usces->use_ssl && $permalink_structure ) ? '?' : '&';
820 + header( 'location: ' . USCES_CART_URL . $delim . 'acting=digitalcheck_conv&acting_return=1&SID=' . $sid );
821 + exit;
822 + }
823 + }
824 +
825 + /* mizuho card */
826 + } elseif ( ( isset( $_GET['p_ver'] ) && '0200' == wp_unslash( $_GET['p_ver'] ) ) && ( isset( $_GET['bkcode'] ) && 'bg01' == wp_unslash( $_GET['bkcode'] ) ) ) {
827 + usces_log( 'mizuho card : ' . print_r( wp_unslash( $_GET ), true ), 'acting_transaction.log' );
828 + $stran = ( array_key_exists( 'stran', $_REQUEST ) ) ? wp_unslash( $_REQUEST['stran'] ) : '';
829 + $mbtran = ( array_key_exists( 'mbtran', $_REQUEST ) ) ? wp_unslash( $_REQUEST['mbtran'] ) : '';
830 + $rsltcd = ( array_key_exists( 'rsltcd', $_REQUEST ) ) ? wp_unslash( $_REQUEST['rsltcd'] ) : '';
831 + $rsltdcd = ( array_key_exists( 'rsltdcd', $_REQUEST ) ) ? wp_unslash( $_REQUEST['rsltdcd'] ) : '';
832 + $permalink_structure = get_option( 'permalink_structure' );
833 + $delim = ( ! $usces->use_ssl && $permalink_structure ) ? '?' : '&';
834 + if ( '108' == substr( $rsltcd, 0, 3 ) || '208' == substr( $rsltcd, 0, 3 ) || '308' == substr( $rsltcd, 0, 3 ) ) { /* キャンセル */
835 + header( 'location: ' . USCES_CART_URL . $delim . 'confirm=1' );
836 + } elseif ( '109' == substr( $rsltcd, 0, 3 ) || '209' == substr( $rsltcd, 0, 3 ) || '309' == substr( $rsltcd, 0, 3 ) ) { /* エラー */
837 + $log = array(
838 + 'acting' => 'mizuho_card',
839 + 'key' => $stran,
840 + 'result' => $rsltcd,
841 + 'data' => wp_unslash( $_GET ),
842 + );
843 + usces_save_order_acting_error( $log );
844 + usces_log( 'mizuho card : ' . print_r( wp_unslash( $_GET ), true ), 'acting_transaction.log' );
845 + header( 'location: ' . USCES_CART_URL . $delim . 'acting=mizuho_card&acting_return=0&rsltdcd=' . $rsltdcd );
846 + } else {
847 + header( 'location: ' . USCES_CART_URL . $delim . 'acting=mizuho_card&acting_return=1&stran=' . $stran . '&mbtran=' . $mbtran . '&rsltcd=' . $rsltcd );
848 + }
849 + die();
850 +
851 + /* mizuho conv 提供対象外のため無効化。
852 + } elseif ( ( isset( $_GET['p_ver'] ) && '0200' == wp_unslash( $_GET['p_ver'] ) ) && ( isset( $_GET['bkcode'] ) && ( 'cv01' == wp_unslash( $_GET['bkcode'] ) || 'cv02' == wp_unslash( $_GET['bkcode'] ) ) ) ) {
853 + usces_log( 'mizuho conv : ' . print_r( $_GET, true ), 'acting_transaction.log' );
854 + $stran = ( array_key_exists( 'stran', $_REQUEST ) ) ? wp_unslash( $_REQUEST['stran'] ) : '';
855 + $mbtran = ( array_key_exists( 'mbtran', $_REQUEST ) ) ? wp_unslash( $_REQUEST['mbtran'] ) : '';
856 + $bktrans = ( array_key_exists( 'bktrans', $_REQUEST ) ) ? wp_unslash( $_REQUEST['bktrans'] ) : '';
857 + $tranid = ( array_key_exists( 'tranid', $_REQUEST ) ) ? wp_unslash( $_REQUEST['tranid'] ) : '';
858 + $tdate = ( array_key_exists( 'tdate', $_REQUEST ) ) ? wp_unslash( $_REQUEST['tdate'] ) : '';
859 + $rsltcd = ( array_key_exists( 'rsltcd', $_REQUEST ) ) ? wp_unslash( $_REQUEST['rsltcd'] ) : '';
860 + $permalink_structure = get_option( 'permalink_structure' );
861 + $delim = ( ! $usces->use_ssl && $permalink_structure ) ? '?' : '&';
862 + if ( '' != $tdate ) { // 入金通知
863 + $data = array();
864 + foreach ( $_REQUEST as $key => $value ) {
865 + $data[ $key ] = $value;
866 + }
867 + if ( '0000000000000' == $rsltcd ) {
868 + $table_name = $wpdb->prefix . 'usces_order';
869 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
870 +
871 + $query = $wpdb->prepare( "SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'stran', $stran );
872 + $order_id = $wpdb->get_var( $query );
873 + if ( null == $order_id ) {
874 + $log = array(
875 + 'acting' => 'mizuho_conv',
876 + 'key' => $stran,
877 + 'result' => 'ORDER DATA KEY ERROR',
878 + 'data' => wp_unslash( $_GET ),
879 + );
880 + usces_save_order_acting_error( $log );
881 + usces_log( 'mizuho conv error1 : ' . print_r( $data, true ), 'acting_transaction.log' );
882 + } else {
883 + $res = usces_change_order_receipt( $order_id, 'receipted' );
884 + if ( false === $res ) {
885 + $log = array(
886 + 'acting' => 'mizuho_conv',
887 + 'key' => $stran,
888 + 'result' => 'ORDER DATA UPDATE ERROR',
889 + 'data' => wp_unslash( $_GET ),
890 + );
891 + usces_save_order_acting_error( $log );
892 + usces_log( 'mizuho conv error2 : ' . print_r( $data, true ), 'acting_transaction.log' );
893 +
894 + } else {
895 + usces_action_acting_getpoint( $order_id );
896 +
897 + $usces->set_order_meta_value( 'acting_mizuho_conv', serialize( $data ), $order_id );
898 +
899 + $dquery = $wpdb->prepare( "DELETE FROM $table_meta_name WHERE meta_key = %s", $stran );
900 + $res = $wpdb->query( $dquery );
901 + }
902 + }
903 + } else {
904 + usces_log( 'mizuho conv : ' . print_r( wp_unslash( $_GET ), true ), 'acting_transaction.log' );
905 + }
906 + } elseif ( '108' == substr( $rsltcd, 0, 3 ) || '208' == substr( $rsltcd, 0, 3 ) || '308' == substr( $rsltcd, 0, 3 ) ) { // キャンセル
907 + header( 'location: ' . USCES_CART_URL . $delim . 'confirm=1' );
908 + } elseif ( '109' == substr( $rsltcd, 0, 3 ) || '209' == substr( $rsltcd, 0, 3 ) || '309' == substr( $rsltcd, 0, 3 ) ) { // エラー
909 + $log = array(
910 + 'acting' => 'mizuho_conv',
911 + 'key' => $stran,
912 + 'result' => $rsltcd,
913 + 'data' => wp_unslash( $_GET ),
914 + );
915 + usces_save_order_acting_error( $log );
916 + usces_log( 'mizuho conv : ' . print_r( wp_unslash( $_GET ), true ), 'acting_transaction.log' );
917 + header( 'location: ' . USCES_CART_URL . $delim . 'acting=mizuho_card&acting_return=0' );
918 + } else {
919 + header( 'location: ' . USCES_CART_URL . $delim . 'acting=mizuho_conv&acting_return=1&stran=' . $stran . '&mbtran=' . $mbtran . '&bktrans=' . wp_unslash( $_GET['bktrans'] ) . '&tranid=' . $tranid . '&rsltcd=' . $rsltcd );
920 + }
921 + die();
922 + */
923 +
924 + /* AnotherLane credit */
925 + } elseif ( isset( $_REQUEST['SiteId'] ) && isset( $_REQUEST['TransactionId'] ) && isset( $_REQUEST['Result'] ) ) {
926 + $data = array();
927 + foreach ( $_REQUEST as $key => $value ) {
928 + $data[ $key ] = $value;
929 + }
930 +
931 + $acting_opts = $usces->options['acting_settings']['anotherlane'];
932 + if ( ! isset( $_REQUEST['KickType'] ) && isset( $_REQUEST['TransactionId'] ) ) {
933 + $permalink_structure = get_option( 'permalink_structure' );
934 + $delim = ( ! $usces->use_ssl && $permalink_structure ) ? '?' : '&';
935 + if ( $acting_opts['siteid'] == wp_unslash( $_REQUEST['SiteId'] ) && 'NG' == wp_unslash( $_REQUEST['Result'] ) ) {
936 + $log = array(
937 + 'acting' => 'anotherlane_card',
938 + 'key' => wp_unslash( $_REQUEST['TransactionId'] ),
939 + 'result' => wp_unslash( $_REQUEST['Result'] ),
940 + 'data' => wp_unslash( $_REQUEST ),
941 + );
942 + usces_save_order_acting_error( $log );
943 + header( 'location: ' . USCES_CART_URL . $delim . 'confirm=1' );
944 + exit;
945 + } elseif ( $acting_opts['siteid'] == wp_unslash( $_REQUEST['SiteId'] ) && 'OK' == wp_unslash( $_REQUEST['Result'] ) ) {
946 + header( 'location: ' . USCES_CART_URL . $delim . 'acting=anotherlane_card&acting_return=1' );
947 + exit;
948 + }
949 + } elseif ( isset( $_REQUEST['KickType'] ) && $acting_opts['siteid'] == wp_unslash( $_GET['SiteId'] ) && 'OK' == wp_unslash( $_GET['Result'] ) ) {
950 + $table_meta_name = $wpdb->prefix . 'usces_order_meta';
951 + $query = $wpdb->prepare( "SELECT order_id FROM $table_meta_name WHERE meta_key = %s AND meta_value = %s", 'TransactionId', $data['TransactionId'] );
952 + $order_id = $wpdb->get_var( $query );
953 + if ( ! $order_id ) {
954 + $res = $usces->order_processing();
955 + if ( 'ordercompletion' == $res ) {
956 + $usces->set_order_meta_value( 'wc_trans_id', $data['TransactionId'], $order_id );
957 + usces_log( 'AnotherLane [OK] transaction : ' . $data['TransactionId'], 'acting_transaction.log' );
958 + } else {
959 + $log = array(
960 + 'acting' => 'anotherlane_card',
961 + 'key' => $data['TransactionId'],
962 + 'result' => 'ORDER DATA REGISTERED ERROR',
963 + 'data' => wp_unslash( $_GET ),
964 + );
965 + usces_save_order_acting_error( $log );
966 + usces_log( 'AnotherLane order processing error : ' . print_r( $data, true ), 'acting_transaction.log' );
967 + }
968 + }
969 + } else {
970 + $log = array(
971 + 'acting' => 'anotherlane_card',
972 + 'key' => $data['TransactionId'],
973 + 'result' => $data['Result'],
974 + 'data' => wp_unslash( $_GET ),
975 + );
976 + usces_save_order_acting_error( $log );
977 + }
978 + exit;
979 + }
980 +}