[PHP] PayPal einbinden

<?php

/********************************************
ReviewOrder.php

This file is called after the user clicks on a button during
the checkout process to use PayPal's Express Checkout. The
user logs in to their PayPal account.

This file is called twice.

On the first pass, the code executes the if statement:

if (! isset ($token))

The code collects transaction parameters from the form
displayed by SetExpressCheckout.html then constructs and
sends a SetExpressCheckout request string to the PayPal
server. The paymentType variable becomes the PAYMENTACTION
parameter of the request string. The RETURNURL parameter
is set to this file; this is how ReviewOrder.php is called
twice.

On the second pass, the code executes the else statement.

On the first pass, the buyer completed the authorization in
their PayPal account; now the code gets the payer details
by sending a GetExpressCheckoutDetails request to the PayPal
server. Then the code calls GetExpressCheckoutDetails.php.

Note: Be sure to check the value of PAYPAL_URL. The buyer is
sent to this URL to authorize payment with their PayPal
account. For testing purposes, this should be set to the
PayPal sandbox.

Called by SetExpressCheckout.html.

Calls GetExpressCheckoutDetails.php, CallerService.php,
and APIError.php.

********************************************/

require_once 'CallerService.php';
require_once 'constants.php';

session_start();

/* An express checkout transaction starts with a token, that
 identifies to PayPal your transaction
 In this example, when the script sees a token, the script
 knows that the buyer has already authorized payment through
 paypal. If no token was found, the action is to send the buyer
 to PayPal to first authorize payment
 */

$token = $_REQUEST['token'];
if(! isset($token)) {

 /* The servername and serverport tells PayPal where the buyer
 should be directed back to after authorizing payment.
 In this case, its the local webserver that is running this script
 Using the servername and serverport, the return URL is the first
 portion of the URL that buyers will return to after authorizing payment
 */
 $serverName = $_SERVER['SERVER_NAME'];
 $serverPort = $_SERVER['SERVER_PORT'];
 $url=dirname('http://'.$serverName.':'.$serverPort.$_SERVER['REQUEST_URI']);

 $paymentAmount = $_REQUEST['paymentAmount'];
 $currencyCodeType = $_REQUEST['currencyCodeType'];
 $paymentType = $_REQUEST['paymentType'];
 $name = "testprodukt";



 /* The returnURL is the location where buyers return when a
 payment has been succesfully authorized.
 The cancelURL is the location buyers are sent to when they hit the
 cancel button during authorization of payment during the PayPal flow
 */

 $returnURL =urlencode($url.'/ReviewOrder.php?currencyCodeType='.$currencyCodeType.'&paymentType='.$paymentType.'&paymentAmount='.$paymentAmount); //Bei erfolgreichen Abschluss
 $cancelURL =urlencode("$url/test.php?paymentType=$paymentType" ); //Wenn man auf abbrechen klickt

 /* Construct the parameter string that describes the PayPal payment
 the varialbes were set in the web form, and the resulting string
 is stored in $nvpstr
 */

 $nvpstr="&Amt=".$paymentAmount."&PAYMENTACTION=".$paymentType."&ReturnUrl=".$returnURL."&CANCELURL=".$cancelURL ."&CURRENCYCODE=".$currencyCodeType."&L_NAMEn=".$name;

 /* Make the call to PayPal to set the Express Checkout token
 If the API call succeded, then redirect the buyer to PayPal
 to begin to authorize payment. If an error occured, show the
 resulting errors
 */
 $resArray=hash_call("SetExpressCheckout",$nvpstr);
 $_SESSION['reshash']=$resArray;

 $ack = strtoupper($resArray["ACK"]);

 if($ack=="SUCCESS"){
 // Redirect to paypal.com here
 $token = urldecode($resArray["TOKEN"]);
 $payPalURL = PAYPAL_URL.$token;
 header("Location: ".$payPalURL);
 } else {
 //Redirecting to APIError.php to display errors.
 $location = "APIError.php";
 header("Location: $location");
 }
} else {
 /* At this point, the buyer has completed in authorizing payment
 at PayPal. The script will now call PayPal with the details
 of the authorization, incuding any shipping information of the
 buyer. Remember, the authorization is not a completed transaction
 at this state - the buyer still needs an additional step to finalize
 the transaction
 */

 $token =urlencode( $_REQUEST['token']);

 /* Build a second API request to PayPal, using the token as the
 ID to get the details on the payment authorization
 */
 $nvpstr="&TOKEN=".$token;

 /* Make the API call and store the results in an array. If the
 call was a success, show the authorization details, and provide
 an action to complete the payment. If failed, show the error
 */
 $resArray=hash_call("GetExpressCheckoutDetails",$nvpstr);
 $_SESSION['reshash']=$resArray;
 $ack = strtoupper($resArray["ACK"]);

 if($ack=="SUCCESS"){
 require_once "GetExpressCheckoutDetails.php";
 } else {
 //Redirecting to APIError.php to display errors.
 $location = "APIError.php";
 header("Location: $location");
 }
}
?>