tba-git/shop-old
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(payments): Anbieter-Gerüst core/payments mit PayPal Orders v2

Browse Source 
- ProviderInterface/AbstractProvider: Vorgang mit Uhrzeit+Session (payment_transactions),
  Mail und Warenkorb erst nach Zahlung, idempotentes markPaid, Betragsabgleich,
  shop_event + PG payment_log
- Secrets verschluesselt (libsodium) in MySQL, Schluessel ausserhalb Docroot
- Cashdesk: ?payment_return/?payment_cancel, Pending-Riegel, zahlung_erst_spaeter()
- Backend Zahlart-Editor: Einstellungen speichern (war ohne Empfaenger), Secret-Felder
- payment_webhook.php (Standalone), cli.php (init-key, secret, reconcile, status)
- PayPal-v2-Blaupause vom Juli entfernt
This commit is contained in:
Thomas Bartelt
2026-09-13 19:51:52 +02:00
parent af81e8f63a
commit 397fb5944a
30 changed files with 2002 additions and 1104 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/admin_payment_method_editor.php
+81
View File
@@ -41,6 +41,14 @@ class admin_payment_method_editor {
$is_submitted = false;
}
// 13.09.2026: Reiter "Einstellungen" speichern (Konfigurationsgruppe + Secrets).
// Vorher hatte dieses Formular keinen Empfaenger -- es postete ins Leere.
if (isset($_POST['payment_config_save']) && $has_id) {
$this->save_provider_config((int)$_POST['id']);
$is_submitted = false;
$_GET['id'] = (int)$_POST['id'];
}
// decide what CRUD method to call and call it in ListAndEdit
// create
$payment_method_object = new Payment_method($this->base_object);
@@ -60,6 +68,7 @@ class admin_payment_method_editor {
$config_data = $this->config->get_config_elements($payment_method_data->configuration_group_id);
$this->layout_object->assign('config_data', $config_data);
}
$this->assign_provider($payment_method_data);
}// read
elseif($has_id && !$is_submitted && $_GET['mod'] != 'delete') {
// template variable name
@@ -72,6 +81,7 @@ class admin_payment_method_editor {
$config_data = $this->config->get_config_elements($payment_method_data->configuration_group_id);
$this->layout_object->assign('config_data', $config_data);
}
$this->assign_provider($payment_method_data);
} // update
elseif($has_id && $is_submitted && $_GET['mod'] != 'delete') {
$payment_method_object->id = $_POST['id'];
@@ -92,6 +102,7 @@ class admin_payment_method_editor {
$config_data = $this->config->get_config_elements($payment_method_data->configuration_group_id);
$this->layout_object->assign('config_data', $config_data);
}
$this->assign_provider($payment_method_data);
} // delete
elseif($has_id && isset($_GET['mod']) && $_GET['mod'] == 'delete'){
$payment_method_object->id = $_GET['id'];
@@ -103,6 +114,76 @@ class admin_payment_method_editor {
return $this->layout_object->fetch('admin_payment_method_editor.tpl');
}
/**
* 13.09.2026 -- Zahlungsanbieter aus core/payments: Secret-Felder fuers Template.
* Klartext wird nie ausgeliefert, nur "hinterlegt seit".
*/
private function assign_provider($payment_method_data) {
if (!is_object($payment_method_data) || empty($payment_method_data->module)) {
return;
}
include_once './core/payments/Registry.php';
if (!\Payments\Registry::has((string)$payment_method_data->module)) {
return;
}
try {
$provider = \Payments\Registry::get((string)$payment_method_data->module, $this->base_object);
} catch (Throwable $e) {
$this->layout_object->assign('provider_error', $e->getMessage());
return;
}
if (!$provider) {
return;
}
$key_ok = \Payments\Secrets::keyAvailable();
$status = $key_ok ? \Payments\Secrets::status($this->base_object->db, $provider->module()) : array();
$fields = array();
foreach ($provider->secretFields() as $name => $label) {
$fields[] = array(
'name' => $name,
'label' => $label,
'since' => isset($status[$name]) ? $status[$name] : '',
);
}
$this->layout_object->assign('provider_label', $provider->label());
$this->layout_object->assign('provider_module', $provider->module());
$this->layout_object->assign('provider_key_ok', $key_ok ? 1 : 0);
$this->layout_object->assign('provider_key_path', \Payments\Secrets::keyPath());
$this->layout_object->assign('provider_secrets', $fields);
$this->layout_object->assign('provider_webhook_url', rtrim(MAIN_URL, '/').'/payment_webhook.php?p='.$provider->module());
}
/** Einstellungen (configuration-Gruppe) und Secrets aus dem Reiter "Einstellungen" speichern. */
private function save_provider_config($payment_method_id) {
$pm_object = new Payment_method($this->base_object);
$pm_object->id = $payment_method_id;
$pm = $pm_object->get_data();
if (!$pm) {
return;
}
if (!empty($pm->configuration_group_id) && isset($_POST['form_field']) && is_array($_POST['form_field'])) {
$clean = array();
foreach ($_POST['form_field'] as $k => $v) {
$clean[$k] = $this->base_object->db->real_escape_string((string)$v);
}
$this->config->update($pm->configuration_group_id, $clean);
}
if (!empty($pm->module) && isset($_POST['secret_field']) && is_array($_POST['secret_field'])) {
include_once './core/payments/Registry.php';
if (\Payments\Registry::has((string)$pm->module) && \Payments\Secrets::keyAvailable()) {
$provider = \Payments\Registry::get((string)$pm->module, $this->base_object);
$allowed = $provider ? $provider->secretFields() : array();
foreach ($_POST['secret_field'] as $name => $value) {
$value = trim((string)$value);
if ($value === '' || !isset($allowed[$name])) {
continue; // leer = unveraendert lassen
}
\Payments\Secrets::set($this->base_object->db, $provider->module(), (string)$name, $value);
}
}
}
}
}