Uname: Linux p3plzcpnl499967.prod.phx3.secureserver.net 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
Software: Apache
PHP version: 8.2.30 [ PHP INFO ] PHP os: Linux
Server Ip: 208.109.40.231
Your Ip: 216.73.216.173
User: nayff91c5tsx (10005085) | Group: nayff91c5tsx (10005085)
Safe Mode: OFF
Disable Function:
NONE

name : API.php
<?php

namespace FluentFormPro\Payments\PaymentMethods\Square;

use FluentForm\Framework\Helpers\ArrayHelper;
use FluentFormPro\Payments\PaymentMethods\RazorPay\RazorPaySettings;

class API
{
    
    public function verifyIPN()
    {
        // Check the request method is POST
        if (isset($_SERVER['REQUEST_METHOD']) && $_SERVER['REQUEST_METHOD'] != 'POST') {
            return;
        }
        
        // Set initial post data to empty string
        $post_data = '';
        
        // Fallback just in case post_max_size is lower than needed
        if (ini_get('allow_url_fopen')) {
            $post_data = file_get_contents('php://input');
        } else {
            // If allow_url_fopen is not enabled, then make sure that post_max_size is large enough
            ini_set('post_max_size', '12M');
        }
        // Start the encoded data collection with notification command
        $encoded_data = 'cmd=_notify-validate';
        
        // Get current arg separator
        $arg_separator = ini_get('arg_separator.output');
        
        // Verify there is a post_data
        if ($post_data || strlen($post_data) > 0) {
            // Append the data
            $encoded_data .= $arg_separator . $post_data;
        } else {
            // Check if POST is empty
            if (empty($_POST)) {
                // Nothing to do
                return;
            } else {
                // Loop through each POST
                foreach ($_POST as $key => $value) {
                    // Encode the value and append the data
                    $encoded_data .= $arg_separator . "$key=" . urlencode($value);
                }
            }
        }
        
        // Convert collected post data to an array
        parse_str($encoded_data, $encoded_data_array);
        
        foreach ($encoded_data_array as $key => $value) {
            if (false !== strpos($key, 'amp;')) {
                $new_key = str_replace('&amp;', '&', $key);
                $new_key = str_replace('amp;', '&', $new_key);
                unset($encoded_data_array[$key]);
                $encoded_data_array[$new_key] = $value;
            }
        }
        
        $defaults = $_REQUEST;
        $encoded_data_array = wp_parse_args($encoded_data_array, $defaults);
        $this->handleIpn($encoded_data_array);
        exit(200);
    }
    
    protected function handleIpn($data)
    {
        $submissionId = intval(ArrayHelper::get($data, 'submission_id'));
        if (!$submissionId || empty($data['id'])) {
            return;
        }
        $submission = wpFluent()->table('fluentform_submissions')->where('id', $submissionId)->first();
        if (!$submission) {
            return;
        }
        $vendorTransaction = $this->makeApiCall('checkouts/'.$data['id'], [], $submission->form_id, 'GET');
        
        if(is_wp_error($vendorTransaction)) {
            do_action('fluentform/log_data', [
                'parent_source_id' => $submission->form_id,
                'source_type'      => 'submission_item',
                'source_id'        => $submission->id,
                'component'        => 'Payment',
                'status'           => 'error',
                'title'            => __('Square Payment Webhook Error', 'fluentformpro'),
                'description'      => $vendorTransaction->get_error_message()
            ]);
        }
        
        $status = $vendorTransaction['status'];
        
        if ($status == 'captured') {
            $status = 'paid';
        }
        
        do_action('fluentform_ipn_square_action_'.$status, $submission, $vendorTransaction, $data);
        
        if ($refundAmount = ArrayHelper::get($vendorTransaction, 'amountRefunded.value')) {
            $refundAmount = intval($refundAmount * 100); // in cents
            do_action('fluentform_ipn_square_action_refunded', $refundAmount, $submission, $vendorTransaction, $data);
        }
    }
    
    public function makeApiCall($path, $args, $formId, $method = 'GET', $isInline = false)
    {
        $keys = SquareSettings::getApiKeys();
        $headers = [
            'Authorization' => 'Bearer ' . $keys['access_key'],
            'Accept'        => 'application/json',
            'Content-type'  => 'application/json'
        ];

        $baseUrl = ArrayHelper::get($keys, 'api_url');
        if ($isInline) {
            if (SquareSettings::isLive()) {
                $baseUrl = 'https://connect.squareup.com/v2/';
            } else {
                $baseUrl = 'https://connect.squareupsandbox.com/v2/';
            }
        }

        if ($method == 'POST') {
            $response = wp_remote_post($baseUrl . $path, [
                'headers' => $headers,
                'body'    => json_encode($args)
            ]);
        } else {
            $response = wp_remote_get($baseUrl . $path, [
                'headers' => $headers,
                'body'    => $args
            ]);
        }
        if (is_wp_error($response)) {
            return $response;
        }
        
        $body = wp_remote_retrieve_body($response);
        $responseData = json_decode($body, true);
        
        if (!empty($responseData['errors'])) {
            $message = ArrayHelper::get($responseData, 'errors.0.detail', '');
            if (!$message) {
                $message = __('Unknown Square API request error', 'fluentformpro');
            }
            return new \WP_Error(423, $message, $responseData);
        }
        
        return $responseData;
    }
    
}
© 2026 GrazzMean