<?php
require_once __DIR__ . '/library/RazorPay/Razorpay.php';

function easebuzzAPIResponse($data) {
    print_r($data);
}

use Razorpay\Api\Api;

if ($_SERVER['HTTP_HOST'] == 'local.b2bzend.com') {
    $baseUrl = 'http://local.b2bzend.com/';
} else if ($_SERVER['HTTP_HOST'] == 'crm.ineedtrip.com') {
    $baseUrl = 'https://crm.ineedtrip.com/';
} else if ($_SERVER['HTTP_HOST'] == 'st.globaltravelexchange.com') {
    $baseUrl = 'http://st.globaltravelexchange.com/';
} else {
    $baseUrl = 'https://globaltravelexchange.com/';
}
require_once 'cronjob/init.php';
error_reporting(E_ALL);

function sanitize_data($input_data) {
    $searchArr = array("document", "write", "alert", "%", "$", ";", "+", "|", "#", "<", ">", "\'");
    $input_data = str_replace("script", "", $input_data);
    $input_data = str_replace("iframe", "", $input_data);
    $input_data = str_replace($searchArr, "", $input_data);
    return htmlentities(stripslashes($input_data), ENT_QUOTES);
}

$TblAgency = new Travel_Model_TblAgency();
$crmcustomerObj = new Travel_Model_CRM_Customer();
$crmagencyleadaccountObj = new Travel_Model_CRM_AgencyLeadAccount();
$agencycustomerObj = new Travel_Model_CRM_AgencyCustomer();
$paymentMdl = new Payment_Model_Payment();
$resultArr = array();
if ($_POST) {
    $AgencySysId = (int) $_POST['AgencySysId'];
    $ru = $baseUrl . "gtxPayReturn.php";
    $checkPaymentSetting = $paymentMdl->checkPaymentgatewaySetting($AgencySysId);
    //echo "<pre>";print_r($checkPaymentSetting);exit;
    if (!empty($checkPaymentSetting) && $checkPaymentSetting['IsPaymentGateway'] == true) {
        $CrPartyAccSysId = $AgencySysId;
        $CrPartyName = $checkPaymentSetting['DisplayName'];
        $ATOMPAYMENTURL = trim($checkPaymentSetting['PaymentUrl']);
        $ATOMLOGIN = trim($checkPaymentSetting['PaymentMerchantId']);
        $ATOMPASS = trim($checkPaymentSetting['PaymentSecretPwd']);
        $ATOMPRODID = trim($checkPaymentSetting['ProdId']);
        $REQHASHKEY = trim($checkPaymentSetting['ReqHashKey']);
        $RESPHASHKEY = trim($checkPaymentSetting['RespHashKey']);
        $AESREQUESTKEY = trim($checkPaymentSetting['ReqAESKey']);
        $AESREQUESTIV = trim($checkPaymentSetting['ReqAESSaltKey']);
        $AESRESPONSEKEY = trim($checkPaymentSetting['ResAESKey']);
        $AESRESPONSEIV = trim($checkPaymentSetting['ResAESSaltKey']);
    } else {
        $ATOMPAYMENTURL = "https://payment.atomtech.in/paynetz/epi/fts";
        $ATOMLOGIN = "23860";
        $ATOMPASS = "CATABATIC@123";
        $ATOMPRODID = "CATABATIC";
        $REQHASHKEY = "5a1507a1ad2b194e5b";
        $RESPHASHKEY = "0d3c1adc88d7f02ca6";
        $AESREQUESTKEY = "83D1E1EC3DEE483BB698935F9B323860";
        $AESREQUESTIV = "83D1E1EC3DEE483BB698935F9B323860";
        $AESRESPONSEKEY = "19DE2650AF672D308C508346BDD23860";
        $AESRESPONSEIV = "19DE2650AF672D308C508346BDD23860";
    }

    function GUIDD() {
        $timestamp = round(microtime(true) * 1000); // 13-digit timestamp
        $randomNumber = mt_rand(1000000000, 9999999999); // 10-digit random number
        $uniqueID = $timestamp . $randomNumber; // Combine timestamp and random number
        return substr($uniqueID, 0, 30); // Ensure exactly 30 digits
    }

    $paymentMdl = new Payment_Model_Payment();
    $txnid = GUIDD();
    $amount = isset($_POST['Amount']) ? (float) $_POST['Amount'] : '';
    $txncurr = trim("INR");
    $fullName = (isset($_POST['FullName']) && $_POST['FullName'] != '') ? trim($_POST['FullName']) : '';
    $EmailId = isset($_POST['Email']) ? trim($_POST['Email']) : '';
    $MobileNo = isset($_POST['Phone']) ? trim($_POST['Phone']) : '';
    $companyName = $AgencySysId;
    if (trim($checkPaymentSetting['Title']) == 'HESABE') {
        $paymentApiUrl = 'https://sandbox.hesabe.com';
        $merchantCode = $checkPaymentSetting['PaymentMerchantId'];
        $secretKey = $checkPaymentSetting['ReqHashKey'];
        $ivKey = $checkPaymentSetting['ReqAESKey'];
        $accessCode = $checkPaymentSetting['PaymentSecretPwd'];
        if (trim($checkPaymentSetting['PaymentGatewayMode']) == 1) {
            $paymentApiUrl = "https://api.hesabe.com";
        }
        $postData = array(
            "merchantCode" => $merchantCode,
            "amount" => $amount,
            "currency" => "KWD",
            "paymentType" => 1,
            "responseUrl" => $ru . '?accessCode=' . $merchantCode,
            "failureUrl" => $ru . '?accessCode=' . $merchantCode,
            "orderReferenceNumber" => $txnid,
            "variable1" => "",
            "variable2" => "",
            "variable3" => "",
            "variable4" => "",
            "variable5" => "",
            "version" => "2.0"
        );
        require_once __DIR__ . '/library/hesabe/Controllers/PaymentController.php';
        $paymentController = new PaymentController($paymentApiUrl, $secretKey, $ivKey, $accessCode);
        $paymentController->formSubmit($postData);
        $date = new DateTime();
    } else if (trim($checkPaymentSetting['Title']) == 'Razorpay') {
        $keyId = $ATOMLOGIN;
        $AESRESPONSEKEY = "19DE2650AF672D308C508346BDD23860";
        $transactionResponse = new Travel_Model_AtomAES();
        $returnPerameter = $transactionResponse->encrypt($keyId, $AESRESPONSEKEY, $AESRESPONSEKEY);
        $amount = $amount * 100;
        $api = new Api($keyId, $ATOMPASS);
        $orderData = [
            'receipt' => time(),
            'amount' => $amount, // 39900 rupees in paise    
            'currency' => $txncurr,
        ];
        $razorpayOrder = $api->order->create($orderData);
        $razorpayOrderId = $razorpayOrder->id;
        $data = [
            "key" => $keyId,
            "amount" => $amount,
            "name" => trim($checkPaymentSetting["AgencyDisplayName"]),
            "description" => trim($checkPaymentSetting["AgencyDisplayName"]),
            "image" => $baseUrl . "public/upload/media/agency/" . $AgencySysId . "/" . trim($checkPaymentSetting["Logo"]),
            "prefill" =>
            [
                "name" => $fullName,
                "email" => $EmailId,
                "contact" => $MobileNo
            ],
            "notes" =>
            [
                "address" => "India",
                "merchant_order_id" => $txnid,
            ],
            "theme" =>
            [
                "color" => "#FC9F84"
            ],
            "order_id" => $razorpayOrderId,
        ];
        ?>
        <script src="https://checkout.razorpay.com/v1/checkout.js"></script>
        <form name='razorpayform' action="<?php echo $ru; ?>?razor=<?php echo $returnPerameter; ?>" method="POST">    
            <input type="hidden" name="razorpay_order_id" id="razorpay_order_id" />
            <input type="hidden" name="razorpay_payment_id" id="razorpay_payment_id" />    
            <input type="hidden" name="razorpay_signature"  id="razorpay_signature" />
        </form>
        <script>
            var options = <?php echo json_encode($data); ?>;
            options.handler = function (response) {
                document.getElementById('razorpay_payment_id').value = response.razorpay_payment_id;
                document.getElementById('razorpay_signature').value = response.razorpay_signature;
                document.getElementById('razorpay_order_id').value = response.razorpay_order_id;
                document.razorpayform.submit();
            };
            options.theme.image_padding = false;
            var rzp = new Razorpay(options);
            rzp.open();
            e.preventDefault();
        </script>
        <?php
    } else if (trim($checkPaymentSetting['Title']) == 'CCAVENUE') {
        if ($checkPaymentSetting['PaymentGatewayMode'] == 1) {
            if ($AgencySysId == 130463) {
                $currency = 'AED';
                $paymenturl = 'https://secure.ccavenue.ae/transaction/transaction.do?command=initiateTransaction';
            } else {
                $currency = 'INR';
                $paymenturl = 'https://secure.ccavenue.com/transaction/transaction.do?command=initiateTransaction';
            }
        } else {
            $paymenturl = 'https://test.ccavenue.com/transaction/transaction.do?command=initiateTransaction';
        }
        $merchant_id = $checkPaymentSetting['ProdId'];
        $postData = array(
            "tid" => time(),
            "merchant_id" => $merchant_id,
            "order_id" => $txnid,
            "amount" => (float) $amount,
            "currency" => $currency,
            "redirect_url" => $ru . '?accessCode=' . $ATOMLOGIN,
            "cancel_url" => $ru . '?accessCode=' . $ATOMLOGIN,
            "language" => "EN",
            "billing_name" => $fullName,
            "billing_tel" => $MobileNo,
            "billing_email" => $EmailId,
            "delivery_name" => $fullName,
            "delivery_tel" => $MobileNo,
//            "merchant_param1" => '',
//            "merchant_param2" => '',
//            "merchant_param3" => '',
//            "merchant_param4" => '',
//            "merchant_param5" => '',
//            "promo_code" => '',
//            "customer_identifier" => ''
        );
        //echo "<pre>";print_r($postData);exit;
        ?>
        <html>
            <head>
                <title>CCAVENUE</title>
            </head>
            <body>
                <center>
                    <?php

                    function encrypt_cc($plainText, $key) {
                        $key = hextobin(md5($key));
                        $initVector = pack("C*", 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f);
                        $openMode = openssl_encrypt($plainText, 'AES-128-CBC', $key, OPENSSL_RAW_DATA, $initVector);
                        $encryptedText = bin2hex($openMode);
                        return $encryptedText;
                    }

                    function hextobin($hexString) {
                        $length = strlen($hexString);
                        $binString = "";
                        $count = 0;
                        while ($count < $length) {
                            $subString = substr($hexString, $count, 2);
                            $packedString = pack("H*", $subString);
                            if ($count == 0) {
                                $binString = $packedString;
                            } else {
                                $binString .= $packedString;
                            }
                            $count += 2;
                        }
                        return $binString;
                    }

                    $merchant_data = '';
                    $working_key = $ATOMPASS; //Shared by CCAVENUES
                    $access_code = $ATOMLOGIN; //Shared by CCAVENUES
                    foreach ($postData as $key => $value) {
                        $merchant_data .= $key . '=' . $value . '&';
                    }
                    $encrypted_data = encrypt_cc($merchant_data, $working_key); // Method for encrypting the data.
                    ?>
                    <form method="post" name="redirect" action="<?php echo $paymenturl; ?>"> 
                        <?php
                        echo "<input type=hidden name=encRequest value=$encrypted_data>";
                        echo "<input type=hidden name=access_code value=$access_code>";
                        ?>
                    </form>
                </center>
                <script language='javascript'>document.redirect.submit();</script>
            </body>
        </html>
        <?php
    } else if (trim($checkPaymentSetting['Title']) == 'Stripe') {
        ?>
        <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js"></script>
        <script src="https://checkout.stripe.com/checkout.js"></script>
        <script type="text/javascript">
                    function pay(amount) {
                        var handler = StripeCheckout.configure({
                            key: 'pk_test_51K1ZWrSDc7w4P8VLVOXjAOkbFdgMkuVnbHO0lsd4l2o05d6ExRvepJbTdjthARojEtOddfJduV1yJLWszMmxoiob00lkkTNGH6', // your publisher key id
                            locale: 'auto',
                            token: function (token) {
                                $('#token_response').html(JSON.stringify(token));
                            }
                        });
                        handler.open({
                            name: 'Hello GTX',
                            description: 'Mussories Hotels',
                            currency: 'inr',
                            amount: amount * 100
                        });
                    }
        </script>
        <?php
    } else if (trim($checkPaymentSetting['Title']) == 'EaseBuzz') {
        require_once __DIR__ . '/library/easebuzz-lib/easebuzz_payment_gateway.php';
        $AESRESPONSEKEY = "19DE2650AF672D308C508346BDD23860";
        $transactionResponse = new Travel_Model_AtomAES();
        $returnPerameter = $transactionResponse->encrypt($ATOMLOGIN, $AESRESPONSEKEY, $AESRESPONSEKEY);
        if ($checkPaymentSetting['PaymentGatewayMode'] == 1) {
            $ENV = "prod";
        } else {
            $ENV = "test";
        }
        $ru = $ru . '?login=' . $returnPerameter . '&razor=easebuzz';
        $postData = array(
            "txnid" => $txnid,
            "amount" => number_format((float) $amount, 2, '.', ''),
            "firstname" => $fullName,
            "email" => $EmailId,
            "phone" => $MobileNo,
            "productinfo" => $_POST['InvoiceNumber'] != '' ? trim($_POST['InvoiceNumber']) : 'GTX',
            "surl" => $ru,
            "furl" => $ru,
            "address1" => isset($_POST['Address']) ? trim($_POST['Address']) : 'Test',
            "city" => isset($_POST['City']) ? trim($_POST['City']) : 'Test',
            "zipcode" => isset($_POST['Pincode']) ? trim($_POST['Pincode']) : 'Test',
        );
        $easebuzzObj = new Easebuzz($ATOMLOGIN, $ATOMPASS, $ENV);
        $result = $easebuzzObj->initiatePaymentAPI($postData);
        echo "<pre>";
        print_r($result);
        exit;
        easebuzzAPIResponse($result);
        exit;
    } else if (trim($checkPaymentSetting['Title']) == 'CASHFEE') {
        $order_note = array("cn" => $companyName);
        $cashfeeru = $ru . '?login=' . $ATOMLOGIN . '&order_id={order_id}';
        $requestdata = array(
            "customer_details" =>
            array(
                "customer_id" => $txnid,
                "customer_name" => $fullName,
                "customer_email" => $EmailId,
                "customer_phone" => $MobileNo
            ),
            "order_id" => $txnid,
            "order_amount" => $amount,
            "order_currency" => $txncurr,
            "order_note" => json_encode($order_note),
            "order_meta" => array(
                "return_url" => $cashfeeru
            )
        );
        if (trim($checkPaymentSetting['PaymentGatewayMode']) == 1) {
            $url = "https://api.cashfree.com/pg/orders";
        } else {
            $url = "https://test.cashfree.com/billpay/checkout/post/submit";
        }
        $curl = curl_init();
        curl_setopt_array($curl, [
            CURLOPT_URL => $url,
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_ENCODING => "",
            CURLOPT_MAXREDIRS => 10,
            CURLOPT_TIMEOUT => 30,
            CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
            CURLOPT_CUSTOMREQUEST => "POST",
            CURLOPT_POSTFIELDS => json_encode($requestdata),
            CURLOPT_HTTPHEADER => [
                "Accept: application/json",
                "Content-Type: application/json",
                "x-api-version: 2023-08-01",
                "x-client-id:$ATOMLOGIN",
                "x-client-secret:$ATOMPASS"
            ],
        ]);
        $response = curl_exec($curl);
        $err = curl_error($curl);
        curl_close($curl);
        if ($err) {
            header('Content-Type: application/json; charset=utf-8');
            echo json_encode(array("error" => 1));
            echo "cURL Error #:" . $err;
            die();
        } else {
            $result = json_decode($response, true);
            if (isset($result["payment_session_id"]) && $result["payment_session_id"] != "") {
                ?>
                <!DOCTYPE html>
                <html>
                    <head></head>
                    <body>
                        <?php if (trim($checkPaymentSetting['PaymentGatewayMode']) == 1) { ?>
                            <script src="https://sdk.cashfree.com/js/ui/2.0.0/cashfree.prod.js"></script>
                        <?php } else { ?>
                            <script src="https://sdk.cashfree.com/js/ui/2.0.0/cashfree.sandbox.js"></script>
                        <?php } ?>
                        <script type="text/javascript">
                            const paymentSessionId = "<?php echo $result["payment_session_id"]; ?>";
                            const cf = new Cashfree(paymentSessionId);
                            cf.redirect();
                        </script>
                    </body>
                </html>
                <?php
            } else {
                echo "please contact to administrator";
                exit;
            }
        }
        ?>
        <?php
    } else if (trim($checkPaymentSetting['Title']) == 'Nestpay 3D Pay') {
        ?>
        <!DOCTYPE html>
        <html xmlns="http://www.w3.org/1999/xhtml">
            <head>
                <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
                <meta name="viewport" content="width=device-width, initial-scale=1" />
                <title>Pay Online</title>
                <link rel="stylesheet" href="<?php echo $baseUrl; ?>public/feedback/feedback-form/css/bootstrap.css" />
                <link href="https://fonts.googleapis.com/css?family=Montserrat" rel="stylesheet" />
                <link href="<?php echo $baseUrl; ?>public/feedback/feedback-form/font-awesome-4.7.0/css/font-awesome.min.css" rel="stylesheet" type="text/css" />
                <link rel="stylesheet" href="<?php echo $baseUrl; ?>public/feedback/feedback-form/css/feedback.css" />
                <link rel="stylesheet" href="<?php echo $baseUrl; ?>public/countrycode/style.css" />
                <style>
                    .txtfield.country_code {
                        border: 1px solid #ddd;
                        height: 45px;
                    }

                    .country_details {
                        height: 45px;
                    }
                </style>
            </head>
            <body onload="document.Nestpay3DPay.submit()">
                <?php
                $clientId = trim($ATOMLOGIN);
                $oid = time();
                $okUrl = "https://www.travelalbania-agency.com/payment/index/return";
                $failUrl = "https://www.travelalbania-agency.com/payment/index/return";
                $rnd = GUIDD();
                $instalment = '';
                $trantype = trim($ATOMPRODID);
                $storekey = $ATOMPASS;
                $hashstr = $clientId . $oid . $amount . $okUrl . $failUrl . $trantype . $instalment . $rnd . $storekey;
                $hash = base64_encode(pack('H*', sha1($hashstr)));
                ?>
                <center>
                    <form method="post" name="Nestpay3DPay" id="Nestpay3DPay" action="<?php echo $ATOMPAYMENTURL; ?>">
                        <input type="hidden" name="clientid" value="<?php echo $clientId ?>" />
                        <input type="hidden" name="amount" value="<?php echo $amount ?>" />
                        <input type="hidden" name="oid" value="<?php echo $oid ?>" />
                        <input type="hidden" name="okUrl" value="<?php echo $okUrl ?>" />
                        <input type="hidden" name="failUrl" value="<?php echo $failUrl ?>" />
                        <input type="hidden" name="rnd" value="<?php echo $rnd ?>" />
                        <input type="hidden" name="trantype" value="<?php echo $trantype ?>" />
                        <input type="hidden" name="hash" value="<?php echo $hash ?>" />
                        <input type="hidden" name="refreshtime" value="0" />
                        <input type="hidden" name="storetype" value="3d_pay_hosting" />
                        <input type="hidden" name="lang" value="en" />
                        <input type="hidden" name="currency" value="978" />
                        <input type="hidden" name="BillToCompany" value="TRAVEL ALBANIA" />
                        <input type="hidden" name="BillToName" value="<?php echo $fullName; ?>" />
                        <input type="hidden" name="BillToCity" value="<?php echo isset($_POST['City']) ? $_POST['City'] : '' ?>" />
                        <input type="hidden" name="BillToPostalCode" value="<?php echo isset($_POST['Pincode']) ? $_POST['Pincode'] : '' ?>" />
                        <input type="hidden" name="tel" value="<?php echo isset($_POST['CountryCode']) ? $_POST['CountryCode'] : '' . '-' . isset($_POST['Phone']) ? $_POST['Phone'] : ''; ?>" />
                        <input type="hidden" name="BillToStreet1" value="<?php echo isset($_POST['Email']) ? $_POST['Email'] : ''; ?>" />
                        <input type="hidden" name="BillToStreet2" value="<?php echo isset($_POST['Address']) ? $_POST['Address'] : ''; ?>" />
                    </form>
                </center>
            </body>
        </html>
        <?php
    } else {
        if ($checkPaymentSetting['PaymentGatewayMode'] == 1) {
            $ATOMPAYMENTURL = "https://payment.atomtech.in/paynetz/epi/fts";
        } else {
            $ATOMPAYMENTURL = "https://payment.atomtech.in/paynetz/epi/fts";
        }
        $login = trim($ATOMLOGIN);
        $pass = trim($ATOMPASS);
        $ttype = trim("NBFundTransfer");
        $prodid = trim($ATOMPRODID);
        $signatureVal = $login . $pass . $ttype . $prodid . $txnid . $amount . $txncurr;
        $signature = hash_hmac("sha512", $signatureVal, $REQHASHKEY, false);
        $datenow = date("d/m/Y h:m:s");
        $modifiedDate = str_replace(" ", "%20", $datenow);
        $City = isset($_POST['City']) ? $_POST['City'] : '';
        $Pincode = isset($_POST['Pincode']) ? $_POST['Pincode'] : '';
        $websiteURL = isset($_POST['NameonBill']) && $_POST['NameonBill'] != '' ? $_POST['NameonBill'] : 'NO Web site';
        $Address = isset($_POST['Address']) ? $_POST['Address'] : '';
        $postFields = "";
        $postFields .= "&login=$login";
        $postFields .= "&pass=$pass";
        $postFields .= "&ttype=$ttype";
        $postFields .= "&prodid=$prodid";
        $postFields .= "&amt=$amount";
        $postFields .= "&txncurr=$txncurr";
        $postFields .= "&txnscamt=0";
        $postFields .= "&signature=$signature";
        $postFields .= "&clientcode=" . urlencode(base64_encode($AgencySysId));
        $postFields .= "&txnid=" . $txnid;
        $postFields .= "&date=" . $modifiedDate;
        $postFields .= "&custacc=123456789";
        $postFields .= "&udf1=$fullName";
        $postFields .= "&udf2=$EmailId";
        $postFields .= "&udf3=$MobileNo";
        $postFields .= "&udf8=$Pincode";
        $postFields .= "&udf4=$City";
        $postFields .= "&udf9=$websiteURL";
        $postFields .= "&ru=$ru";
        $postString = substr($postFields, 1);
        //echo $postString; exit;
        $encryptedData = new Travel_Model_AtomAES();
        $encryptedVal = strtoupper($encryptedData->encrypt($postString, $AESREQUESTKEY, $AESREQUESTIV));
        $sendUrl = $ATOMPAYMENTURL . "?login=$login&encdata=" . $encryptedVal . "\n";
        header("Location: " . $sendUrl);
        exit;
    }
}
?>