Open catalog/controller/payment/twocheckout.php
Select ALL.
Replace with:
Code: Select all
<?php
class ControllerPaymentTwoCheckout extends Controller {
protected function index() {
$this->data['button_confirm'] = $this->language->get('button_confirm');
$this->data['button_back'] = $this->language->get('button_back');
$this->load->model('checkout/order');
$order_info = $this->model_checkout_order->getOrder($this->session->data['order_id']);
/* $this->data['action'] = 'https://www.2checkout.com/2co/buyer/purchase'; */
$this->data['action'] = 'https://www.2checkout.com/checkout/spurchase'; // New single page checkout
$this->data['sid'] = $this->config->get('twocheckout_account');
$this->data['total'] = $this->currency->format($order_info['total'], $order_info['currency'], $order_info['value'], FALSE);
$this->data['cart_order_id'] = $this->session->data['order_id'];
$this->data['card_holder_name'] = $order_info['payment_firstname'] . ' ' . $order_info['payment_lastname'];
$this->data['street_address'] = $order_info['payment_address_1'];
$this->data['city'] = $order_info['payment_city'];
if ($order_info['payment_country'] == "United States" || $order_info['payment_country'] == "Canada") {
$this->data['state'] = $order_info['payment_zone'];
} else {
$this->data['state'] = "XX";
}
$this->data['zip'] = $order_info['payment_postcode'];
$this->data['country'] = $order_info['payment_country'];
$this->data['email'] = $order_info['email'];
$this->data['phone'] = $order_info['telephone'];
if ($this->cart->hasShipping()) {
$this->data['ship_street_address'] = $order_info['shipping_address_1'];
$this->data['ship_city'] = $order_info['shipping_city'];
$this->data['ship_state'] = $order_info['shipping_zone'];
$this->data['ship_zip'] = $order_info['shipping_postcode'];
$this->data['ship_country'] = $order_info['shipping_country'];
} else {
$this->data['ship_street_address'] = $order_info['payment_address_1'];
$this->data['ship_city'] = $order_info['payment_city'];
$this->data['ship_state'] = $order_info['payment_zone']; // was: $this->data['ship_state'] = $order_info['payment_zone'];
$this->data['ship_zip'] = $order_info['payment_postcode'];
$this->data['ship_country'] = $order_info['payment_country'];
}
$this->data['products'] = array();
$products = $this->cart->getProducts();
foreach ($products as $product) {
$this->data['products'][] = array(
'product_id' => $product['product_id'],
'name' => $product['name'],
'description' => $product['name'],
'quantity' => $product['quantity'],
'price' => $this->currency->format($product['price'], $order_info['currency'], $order_info['value'], FALSE)
);
}
if ($this->config->get('twocheckout_test')) {
$this->data['demo'] = 'Y';
}
$this->data['lang'] = $this->session->data['language'];
if ($this->request->get['route'] != 'checkout/guest_step_3') {
$this->data['return_url'] = HTTPS_SERVER . 'index.php?route=checkout/confirm';
} else {
$this->data['return_url'] = HTTPS_SERVER . 'index.php?route=checkout/guest_step_3';
}
if ($this->request->get['route'] != 'checkout/guest_step_3') {
$this->data['back'] = HTTPS_SERVER . 'index.php?route=checkout/payment';
} else {
$this->data['back'] = HTTPS_SERVER . 'index.php?route=checkout/guest_step_2';
}
$this->data['payment_callback'] = HTTPS_SERVER . 'index.php?route=payment/twocheckout/callback';
$this->id = 'payment';
if (file_exists(DIR_TEMPLATE . $this->config->get('config_template') . '/template/payment/twocheckout.tpl')) {
$this->template = $this->config->get('config_template') . '/template/payment/twocheckout.tpl';
} else {
$this->template = 'default/template/payment/twocheckout.tpl';
}
$this->render();
}
public function callback() {
$this->load->model('checkout/order');
$order_info = $this->model_checkout_order->getOrder($this->request->post['cart_order_id']);
$our_total = $this->currency->format($order_info['total'], $order_info['currency'], $order_info['value'], FALSE);
$hash_order_number = $this->request->post['order_number'];
if ($this->config->get('twocheckout_test')) {
// Checl "MD5 Hash in Demo Mode" section here:
// https://www.2checkout.com/documentation/UsersGuide2/chapter6/md5-hash.html
$hash_order_number = "1";
}
$hash = md5($this->config->get('twocheckout_secret') . $this->config->get('twocheckout_account') . $hash_order_number . $this->request->post['total']);
$hash = strtoupper($hash);
if ($hash == $this->request->post['key']) {
if ($our_total != $this->request->post['total']) {
// Ugh. Some one've faked the sum. What should we do? Probably drop a mail to the shop owner?
// As a first step we block the order.
$this->model_checkout_order->confirm($this->request->post['cart_order_id'], 8 /*Denied*/);
} else {
$this->model_checkout_order->confirm($this->request->post['cart_order_id'], $this->config->get('twocheckout_order_status_id'));
}
// We can't use $this->redirect() here, because of 2CO behavior. It fetches this page
// on behalf of the user and thus user (and his browser) see this as located at 2checkout.com
// domain. So user's cookies are not here and he will see empty basket and probably other
// weird things.
// $this->redirect(HTTP_SERVER . 'index.php?route=checkout/success');
echo "<html><head>\n";
echo " <meta http-equiv=\"Refresh\" content=\"0; url=".HTTP_SERVER.'index.php?route=checkout/success'."\">\n";
echo "</head><body>\n";
echo " <p>Please follow <a href=\"".HTTP_SERVER.'index.php?route=checkout/success'."\">link</a>!</p>\n";
echo "</body></html>\n";
exit();
} else {
echo "We response from 2checkout.com can't be parsed. Contact site adimistrator, please!";
// $this->redirect(HTTP_SERVER . 'index.php?route=checkout/failure');
//OLD (before patch)
// $order_info = $this->model_checkout_order->getOrder($this->request->post['order_number']);
//
// if (md5($this->config->get('twocheckout_secret') . $this->config->get('twocheckout_account') . $this->request->post['order_number'] . $this->request->post['total']) == $this->request->post['key']) {
// $this->model_checkout_order->confirm($this->request->post['order_number'], $this->config->get('twocheckout_order_status_id'));
//
// $this->redirect(HTTP_SERVER . 'index.php?route=checkout/success');
}
}
}
?>
Select all and replace with below
Code: Select all
<form action="<?php echo str_replace('&', '&', $action); ?>" method="post" id="checkout">
<input type="hidden" name="sid" value="<?php echo $sid; ?>" />
<input type="hidden" name="total" value="<?php echo $total; ?>" />
<input type="hidden" name="cart_order_id" value="<?php echo $cart_order_id; ?>" />
<input type="hidden" name="card_holder_name" value="<?php echo $card_holder_name; ?>" />
<input type="hidden" name="street_address" value="<?php echo $street_address; ?>" />
<input type="hidden" name="city" value="<?php echo $city; ?>" />
<input type="hidden" name="state" value="<?php echo $state; ?>" />
<input type="hidden" name="zip" value="<?php echo $zip; ?>" />
<input type="hidden" name="country" value="<?php echo $country; ?>" />
<input type="hidden" name="email" value="<?php echo $email; ?>" />
<input type="hidden" name="phone" value="<?php echo $phone; ?>" />
<input type="hidden" name="ship_street_address" value="<?php echo $ship_street_address; ?>" />
<input type="hidden" name="ship_city" value="<?php echo $ship_city; ?>" />
<input type="hidden" name="ship_state" value="<?php echo $ship_state; ?>" />
<input type="hidden" name="ship_zip" value="<?php echo $ship_zip; ?>" />
<input type="hidden" name="ship_country" value="<?php echo $ship_country; ?>" />
<?php $i = 0; ?>
<?php foreach ($products as $product) { ?>
<input type="hidden" name="c_prod_<?php echo $i; ?>" value="<?php echo $product['product_id']; ?>,<?php echo $product['quantity']; ?>" />
<input type="hidden" name="c_name_<?php echo $i; ?>" value="<?php echo $product['name']; ?>" />
<input type="hidden" name="c_description_<?php echo $i; ?>" value="<?php echo $product['description']; ?>" />
<input type="hidden" name="c_price_<?php echo $i; ?>" value="<?php echo $product['price']; ?>" />
<?php $i++; ?>
<?php } ?>
<input type="hidden" name="id_type" value="1" />
<?php if (isset($demo)) { ?>
<input type="hidden" name="demo" value="<?php echo $demo; ?>" />
<?php } ?>
<input type="hidden" name="lang" value="<?php echo $lang; ?>" />
<input type="hidden" name="return_url" value="<?php echo $return_url; ?>" />
</form>
<div class="buttons">
<table>
<tr>
<td align="left"><a onclick="location = '<?php echo str_replace('&', '&', $back); ?>'" class="button"><span><?php echo $button_back; ?></span></a></td>
<td align="right"><a onclick="$('#checkout').submit();" class="button"><span><?php echo $button_confirm; ?></span></a></td>
</tr>
</table>
</div>
Approved URL
Input a url for your customers to be sent to on a successful purchase.
[url]http://your_domain_name_here.com/index.php?route=payment/twocheckout/callback[/url]
That's it!
Enjoy!
Gilmore
