URW-180 PayPal API

paypal/event-notify.php

@@ -0,0 +1,42 @@
+<?php
+require_once('../api/discord/bots/admin.php');
+require_once('../api/paypal/webhook.php');
+if(isset($_POST)) { // webhook events are sent via POST
+    $event = new PaypalWebhookEvent(file_get_contents('php://input'));
+    try {
+        // try to verify using PayPal's API before relying on the certificate.... Consider swapping the order
+        try {
+            $verified = $event->verify_external();
+        } catch (PayPalCustomApiException $e) {
+            $verified = $event->verify_internal();
+        }
+    } catch(Exception $e) {
+        // catch all exceptions so we can send a 400 in case the issue was with PayPal
+        http_response_code(400);
+        throw $e;
+    }
+    if(!$verified) {
+        http_response_code(400);
+        error_log("Received a webhook event that couldn't be verified. Webhook event ID: {$event->payload['id']}");
+    }
+//    http_response_code(200);    // this is implied
+    switch($event->payload['event_type']) {
+        case 'CHECKOUT.ORDER.APPROVED':{
+            // capture payment
+            require_once('../api/paypal/paypal.php');
+            $paypal = new PayPalCustomApi();
+            $result = json_decode($paypal->capture_payment($event->payload['resource']['id']), true);
+            if($result['status'] !== 'COMPLETED') {
+                error_log("Issue capturing payment for order ID {$event->payload['resource']['id']}. Order status is {$result['status']}");
+            }
+            break;
+        }
+        case 'PAYMENT.CAPTURE.COMPLETED':{
+            // check if printful or dues
+            break;
+        }
+        default:{
+            error_log("Unknown or unhandled PayPal webhook event: {$event->payload['event_type']}");
+        }
+    }
+}

sql/paypal_transactions.sql

@@ -0,0 +1,17 @@
+CREATE TABLE `paypal_transactions` (
+    `id` int(11) NOT NULL AUTO_INCREMENT,
+    `custom_id`             varchar(255) NOT NULL,  -- This is the ID that PayPal receives for transactions; we generate this
+    `paypal_order_id`       varchar(255) NOT NULL,  -- This is the order ID that PayPal generates
+    `creation_date`         datetime NOT NULL DEFAULT NOW(),
+    `payment_received`      bool NOT NULL DEFAULT FALSE,
+    `payment_receipt_date`  datetime,   -- The datetime when payment was captured
+    `item_type`             enum('dues', 'prtinful_product', 'donation') NOT NULL,
+    `custom_data`           text,   -- Custom info e.g., Printful product ID
+    `fulfillment_status`    enum('await_payment', 'fulfilled', 'error') NOT NULL DEFAULT 'await_payment',   -- fulfilled means we've completed our side of the transaction (e.g., made a Printful order or gave the user Good Standing status
+    PRIMARY KEY (`id`)
+) ENGINE=InnoDB AUTO_INCREMENT=47 DEFAULT CHARSET=latin1;
+
+/*CREATE TABLE `paypal_orders` (
+    `id` int(11) NOT NULL AUTO_INCREMENT,
+    `paypal_id` varchar(255) NOT NULL,                                  -- The order ID PayPal generates
+)*/