СS:Bans 1.3-billing

<?php

class Freekassa
{
private $merchantid = null;
private $secretword = null;
private $link = 'http://www.free-kassa.ru/merchant/cash.php';
private $testing = false;
private $success = false;

function __construct()
{
$this->merchantid = $this->params['freekassa_merchantid'];
$this->secretword = $this->params['freekassa_secret'];

if (Yii::app( )->params['freekassa_testing'])
{
$this->link = 'http://www.free-kassa.ru/merchant/cash.php';

$this->testing = true;
}
}

function isSuccess()
{
return $this->success;
}

function getIdField()
{
return 'InvId';
}

function getForm($model)
{
$Sign = md5( $this->merchantid . ':' . $model->OutSum . ':' . $this->secretword . ':' . $model->InvId );
$data['oa'] = $model->OutSum;
$data['URL'] = $this->link;
$data['Hidden']['m'] = $this->merchantid;  //ID магазина
$data['Hidden']['oa'] = $model->OutSum;   //Сумма оплаты
$data['Hidden']['o'] = $model->InvId;    //Вывод ID или коментарий оплаты
$data['Hidden']['s'] = $Sign;

return $data;
}

function resultUrl($model)
{
if ((double)$_POST['OutSum'] != (double)$model->sum)
return 'Invalid OutSum';

$Sign = md5($this->merchantid . ':' . $_POST['OutSum'] . ':' . $this->secretword . ':' . $_POST['InvId'] );

if ($Sign != strtolower( $_POST['SignatureValue'] ))
return 'Invalid Sign';

$this->success = true;

return 'OK' . $_POST['InvId'];
}
}

<?php return array(
'merchantid' => '666',
'secretword' => '123456',
'freekassa_testing' => FALSE,);

<?php
/**
* Контроллер тарифов
*
* @author Craft-Soft Team
* @version 1.0 beta
* @copyright (C)2013 Craft-Soft.ru.  Все права защищены.
* @package CS:Bans
* @link http://craft-soft.ru/
*/
class TariffController extends Controller
{
    /**
     * @var string the default layout for the views. Defaults to '//layouts/column2', meaning
     * using two-column layout. See 'protected/views/layouts/column2.php'.
     */
    public $layout='//layouts/column2';

    /**
     * @return array action filters
     */
    public function filters()
    {
        return array(
            //'accessControl', // perform access control for CRUD operations
        );
    }

    /**
     * Displays a particular model.
     * @param integer $id the ID of the model to be displayed
     */
    public function actionView($id)
    {
        if(!Webadmins::checkAccess('websettings_edit'))
            throw new CHttpException(403, 'У Вас недостаточно прав');

        $this->render('view',array(
            'model'=>$this->loadModel($id),
        ));
    }

    /**
     * Creates a new model.
     * If creation is successful, the browser will be redirected to the 'view' page.
     */
    public function actionCreate()
    {
        if(!Webadmins::checkAccess('websettings_edit'))
            throw new CHttpException(403, 'У Вас недостаточно прав');

        $model=new Tariff;

        // Uncomment the following line if AJAX validation is needed
        // $this->performAjaxValidation($model);

        if(isset($_POST['Tariff']))
        {
            $model->attributes=$_POST['Tariff'];
            if($model->save())
                $this->redirect(array('admin'));
        }

        $this->render('create',array(
            'model'=>$model,
        ));
    }

    /**
     * Updates a particular model.
     * If update is successful, the browser will be redirected to the 'view' page.
     * @param integer $id the ID of the model to be updated
     */
    public function actionUpdate($id)
    {
        if(!Webadmins::checkAccess('websettings_edit'))
            throw new CHttpException(403, 'У Вас недостаточно прав');

        $model=$this->loadModel($id);

        // Uncomment the following line if AJAX validation is needed
        // $this->performAjaxValidation($model);

        if(isset($_POST['Tariff']))
        {
            $model->attributes=$_POST['Tariff'];
            if($model->save())
                $this->redirect(array('admin'));
        }

        $this->render('update',array(
            'model'=>$model,
        ));
    }

    /**
     * Deletes a particular model.
     * If deletion is successful, the browser will be redirected to the 'admin' page.
     * @param integer $id the ID of the model to be deleted
     */
    public function actionDelete($id)
    {
        if(!Webadmins::checkAccess('websettings_edit'))
            throw new CHttpException(403, 'У Вас недостаточно прав');

        if(Yii::app()->request->isPostRequest)
        {
            // we only allow deletion via POST request
            $this->loadModel($id)->delete();

            // if AJAX request (triggered by deletion via admin grid view), we should not redirect the browser
            if(!isset($_GET['ajax']))
                $this->redirect(isset($_POST['returnUrl']) ? $_POST['returnUrl'] : array('admin'));
        }
        else
            throw new CHttpException(400,'Invalid request. Please do not repeat this request again.');
    }

    /**
     * Manages all models.
     */
    public function actionAdmin()
    {
        if(!Webadmins::checkAccess('websettings_edit'))
            throw new CHttpException(403, 'У Вас недостаточно прав');

        $model=new Tariff('search');
        $model->unsetAttributes();  // clear any default values
        if(isset($_GET['Tariff']))
            $model->attributes=$_GET['Tariff'];

        $config = Config::getCfg();

        if(isset($_POST['Config']))
        {
            $config->attributes=$_POST['Config'];
            if($config->save())
                $this->redirect(array('admin'));
        }

        $this->render('admin',array(
            'model'=>$model,
            'config' => $config
        ));
    }

    /**
     * Manages all models.
     */
    public function actionSettings()
    {
        if(!Webadmins::checkAccess('websettings_edit'))
            throw new CHttpException(403, 'У Вас недостаточно прав');

        $isInstalled = count(Yii::app()->db->createCommand('SHOW TABLES LIKE \'{{billing}}\'')->queryAll());
            
        if(Yii::app()->request->isPostRequest)
        {
            if(!$isInstalled && isset($_POST['robokassa_license'])) {

                $file = __DIR__ . '/../data/update.sql';
                $cmd = explode(';', file_get_contents($file));

                try {
                    foreach($cmd AS $sql) {

                        $sql = trim($sql);
                        if(!$sql) continue;

                        Yii::app()->db->createCommand(str_replace('%prefix%_', Yii::app()->db->tablePrefix, $sql))->execute();
                    }
                    Yii::app()->cache->flush();
                }
                catch(Exception $e) {
                    $this->render('//site/error', array(
                        'code' => '',
                        'message' => 'Произошла ошибка: ' . $e->getMessage(),
                    ));
                    Yii::app()->end();
                }
                
                $isInstalled = TRUE;
            }
        
            $file = __DIR__ . '/../config/freekassa.php';

            $data = '<?php return array(' . PHP_EOL;
            $data .= '\'merchantid\' => \''.CHtml::encode($_POST['merchantid']).'\',' . PHP_EOL;
            $data .= '\'secretword\' => \''.CHtml::encode($_POST['secretword']).'\',' . PHP_EOL;
            $data .= '\'freekassa_testing\' => '.(isset($_POST['robokassa_testing']) ? 'TRUE' : 'FALSE').',);' . PHP_EOL;

            if(!file_put_contents($file, $data)) {
                $this->render('/site/error', array(
                    'code' => '',
                    'message' => 'Недостаточно прав для записи настроек в файл <b>'.realpath($file).'</b>.',
                ));
            }

            foreach($_POST AS $k => $v) {
                Yii::app()->params[$k] = $v;
            }
        }

        $this->render('settings', array(
            'installed' => $isInstalled,
        ));
    }

    /**
     * Returns the data model based on the primary key given in the GET variable.
     * If the data model is not found, an HTTP exception will be raised.
     * @param integer the ID of the model to be loaded
     */
    public function loadModel($id)
    {
        $model=Tariff::model()->findByPk($id);
        if($model===null)
            throw new CHttpException(404,'The requested page does not exist.');
        return $model;
    }

    /**
     * Performs the AJAX validation.
     * @param CModel the model to be validated
     */
    protected function performAjaxValidation($model)
    {
        if(isset($_POST['ajax']) && $_POST['ajax']==='tariff-form')
        {
            echo CActiveForm::validate($model);
            Yii::app()->end();
        }
    }
}

<?php
/**
* Вьюшка редактирования тарифа
*
* @author Craft-Soft Team
* @version 6.1 beta
* @copyright (C)2013 Craft-Soft.ru.  Все права защищены.
* @package AmxBans
* @link http://craft-soft.ru/
*
*/

$this->pageTitle = Yii::app()->name .' :: Админцентр - Фрикасса';
$this->breadcrumbs=array(
    'Админцентр' => array('/admin/index'),
    'Тарифы'=>array('admin'),
    'Фрикасса',
);

$this->menu=array(
    array('label'=>'Управление тарифами','url'=>array('admin')),
);
$this->renderPartial('//admin/mainmenu', array('active' =>'site', 'activebtn' => 'tariffs'));
?>

<h2>Настройки Фрикассы</h2>

<?php
$form=$this->beginWidget('bootstrap.widgets.TbActiveForm',array(
    'id'=>'robo-form',
    'enableAjaxValidation'=>false,
));
?>
    <?php echo CHtml::textField('merchantid', Yii::app()->params['merchantid'], array('placeholder' => 'IDSHOP')); ?><br>
    <?php echo CHtml::textField('secretword', Yii::app()->params['secretword'], array('placeholder' => 'SECRETWORD')); ?><br>
    <label class="checkbox"><?php echo CHtml::checkBox('freekassa_testing', (bool)Yii::app()->params['robokassa_testing']); ?> Тестовый режим</label>
    <?php if(!$installed): ?>
    <label class="checkbox"><?php echo CHtml::checkBox('robokassa_license'); ?> Я петух и согласен с условиями <?php echo CHtml::link('лицензионного соглашения', array('/billing/license'))?></label>
    <?php endif; ?>

    <div class="form-actions">
        <?php $this->widget('bootstrap.widgets.TbButton', array(
            'buttonType' => 'submit',
            'type' =>'primary',
            'label' => 'Сохранить',
        )); ?>
    </div>

<?php $this->endWidget(); ?>

<?php

class BillingModule extends CWebModule
{

    public $defaultController = 'default';

    public function init()
    {
        // this method is called when the module is being created
        // you may place code here to customize the module or the application

        // import the module-level models and components
        $this->setImport(array(
            'billing.models.*',
            'billing.components.*',
        ));

        $robo_data = include __DIR__ . '/config/freekassa.php';

        CMap::mergeArray(Yii::app()->params, (array)$robo_data);
    }

    public function beforeControllerAction($controller, $action)
    {
        if(parent::beforeControllerAction($controller, $action))
        {
        
            if(
                !($controller->id === 'tariff' && $action->id === 'settings')
                    &&
                !($controller->id === 'default' && $action->id === 'license')
            ) {
                $info = Yii::app()->db->createCommand('SHOW TABLES LIKE \'{{billing}}\'')->queryAll();

                if(!count($info)) {
                    
                    if(Webadmins::checkAccess('websettings_edit')) {
                        
                        $controller->redirect(array('/billing/tariff/settings'));
                    }
                    else {
                        throw new CHttpException(404, 'Модуль не установлен админом');
                    }
                }
            }
            
            // this method is called before any module controller action is performed
            // you may place customized code here
            return true;
        }
        else
            return false;
    }
}