paymentok.php

Go to the documentation of this file.

<?php
/* Copyright (C) 2001-2002  Rodolphe Quiedeville  <rodolphe@quiedeville.org>
 * Copyright (C) 2006-2013  Laurent Destailleur   <eldy@users.sourceforge.net>
 * Copyright (C) 2012   Regis Houssin     <regis.houssin@inodbox.com>
 * Copyright (C) 2021-2023  Waël Almoman      <info@almoman.com>
 * Copyright (C) 2021   Maxime Demarest     <maxime@indelog.fr>
 * Copyright (C) 2021   Dorian Vabre      <dorian.vabre@gmail.com>
 * Copyright (C) 2024-2025  Frédéric France         <frederic.france@free.fr>
 * Copyright (C) 2025   MDW           <mdeweerd@users.noreply.github.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 */
 
if (!defined('NOLOGIN')) {
  define("NOLOGIN", 1); // This means this output page does not require to be logged.
}
if (!defined('NOCSRFCHECK')) {
  define("NOCSRFCHECK", 1); // We accept to go on this page from external web site.
}
if (!defined('NOIPCHECK')) {
  define('NOIPCHECK', '1'); // Do not check IP defined into conf $dolibarr_main_restrict_ip
}
if (!defined('NOBROWSERNOTIF')) {
  define('NOBROWSERNOTIF', '1');
}
if (!defined('XFRAMEOPTIONS_ALLOWALL')) {
  define('XFRAMEOPTIONS_ALLOWALL', '1');
}
 
// For MultiCompany module.
// Do not use GETPOST here, function is not defined and define must be done before including main.inc.php
// Because 2 entities can have the same ref.
$entity = (!empty($_GET['e']) ? (int) $_GET['e'] : (!empty($_POST['e']) ? (int) $_POST['e'] : 1));
if (is_numeric($entity)) {
  define("DOLENTITY", $entity);
}
 
// Load Dolibarr environment
require '../../main.inc.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/company.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/payments.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/security2.lib.php';
if (isModEnabled('paypal')) {
  require_once DOL_DOCUMENT_ROOT.'/paypal/lib/paypal.lib.php';
  require_once DOL_DOCUMENT_ROOT.'/paypal/lib/paypalfunctions.lib.php';
}
 
// Hook to be used by external payment modules (ie Payzen, ...)
$hookmanager = new HookManager($db);
 
$hookmanager->initHooks(array('newpayment'));
 
$langs->loadLangs(array("main", "other", "dict", "bills", "companies", "paypal", "stripe"));
 
// Clean parameters
$PAYPAL_API_USER = "";
$PAYPAL_API_PASSWORD = "";
$PAYPAL_API_SIGNATURE = "";
$PAYPAL_API_SANDBOX = "";
$PAYPALTOKEN = "";
$PAYPALPAYERID = "";
if (isModEnabled('paypal')) {
  $PAYPAL_API_USER = getDolGlobalString('PAYPAL_API_USER');
  $PAYPAL_API_PASSWORD = getDolGlobalString('PAYPAL_API_PASSWORD');
  $PAYPAL_API_SIGNATURE = getDolGlobalString('PAYPAL_API_SIGNATURE');
  $PAYPAL_API_SANDBOX = getDolGlobalString('PAYPAL_API_SANDBOX');
 
  $PAYPALTOKEN = GETPOST('TOKEN');
  if (empty($PAYPALTOKEN)) {
    $PAYPALTOKEN = GETPOST('token');
  }
  $PAYPALPAYERID = GETPOST('PAYERID');
  if (empty($PAYPALPAYERID)) {
    $PAYPALPAYERID = GETPOST('PayerID');
  }
}
 
$FULLTAG = GETPOST('FULLTAG');
if (empty($FULLTAG)) {
  $FULLTAG = GETPOST('fulltag');
}
$source = GETPOST('s', 'alpha') ? GETPOST('s', 'alpha') : GETPOST('source', 'alpha');
$ref = GETPOST('ref');
 
$suffix = GETPOST("suffix", 'aZ09');
$membertypeid = GETPOSTINT("membertypeid");
 
 
// Detect $paymentmethod
$paymentmethod = '';
$reg = array();
if (preg_match('/PM=([^\.]+)/', $FULLTAG, $reg)) {
  $paymentmethod = $reg[1];
}
if (empty($paymentmethod)) {
  dol_syslog("***** paymentok.php was called with a non valid parameter FULLTAG=".$FULLTAG, LOG_DEBUG, 0, '_payment');
  dol_print_error(null, 'The callback url does not contain a parameter fulltag that should help us to find the payment method used');
  exit;
}
 
dol_syslog("***** paymentok.php is called paymentmethod=".$paymentmethod." FULLTAG=".$FULLTAG." REQUEST_URI=".$_SERVER["REQUEST_URI"], LOG_DEBUG, 0, '_payment');
 
// Detect $ws
$reg_ws = array();
$ws = preg_match('/WS=([^\.]+)/', $FULLTAG, $reg_ws) ? $reg_ws[1] : 0;
if ($ws) {
  dol_syslog("paymentok.php page is invoked from a website with ref ".$ws.". It performs actions and then redirects back to this website. A page with ref paymentok must be created for this website.", LOG_DEBUG, 0, '_payment');
}
 
$validpaymentmethod = getValidOnlinePaymentMethods($paymentmethod);
 
// Security check
if (empty($validpaymentmethod)) {
  httponly_accessforbidden('No valid payment mode');
}
 
// Common variables
$creditor = $mysoc->name;
$paramcreditor = 'ONLINE_PAYMENT_CREDITOR';
$paramcreditorlong = 'ONLINE_PAYMENT_CREDITOR_'.$suffix;
if (getDolGlobalString($paramcreditorlong)) {
  $creditor = getDolGlobalString($paramcreditorlong); // use label long of the seller to show
} elseif (getDolGlobalString($paramcreditor)) {
  $creditor = getDolGlobalString($paramcreditor);   // use label short of the seller to show
}
 
 
$ispaymentok = false;
// If payment is ok
$PAYMENTSTATUS = $TRANSACTIONID = $LONGTRANSACTIONID = $TAXAMT = $NOTE = '';
// If payment is ko
$ErrorCode = $ErrorShortMsg = $ErrorLongMsg = $ErrorSeverityCode = '';
 
 
$object = new stdClass(); // For triggers
 
$error = 0;
 
// Check if we have redirtodomain to do.
$ws_virtuelhost = null;
$ws_id = 0;
$doactionsthenredirect = 0;
if ($ws) {
  $doactionsthenredirect = 1;
  include_once DOL_DOCUMENT_ROOT.'/website/class/website.class.php';
  $website = new Website($db);
  $result = $website->fetch(0, $ws);
  if ($result > 0) {
    $ws_virtuelhost = $website->virtualhost;
    $ws_id = $website->id;
  }
}
 
/*
 * Actions
 */
 
// None
 
 
/*
 * View
 */
 
$now = dol_now();
 
dol_syslog("Callback url when a payment was done. doactionsthenredirect=".$doactionsthenredirect." query_string=".(empty($_SERVER["QUERY_STRING"]) ? '' : dol_escape_htmltag($_SERVER["QUERY_STRING"]))." script_uri=".(empty($_SERVER["SCRIPT_URI"]) ? '' : dol_escape_htmltag($_SERVER["SCRIPT_URI"])), LOG_DEBUG, 0, '_payment');
dol_syslog("_SERVER[SERVER_NAME] = ".(empty($_SERVER["SERVER_NAME"]) ? '' : dol_escape_htmltag($_SERVER["SERVER_NAME"])), LOG_DEBUG, 0, '_payment');
dol_syslog("_SERVER[SERVER_ADDR] = ".(empty($_SERVER["SERVER_ADDR"]) ? '' : dol_escape_htmltag($_SERVER["SERVER_ADDR"])), LOG_DEBUG, 0, '_payment');
 
$tracepost = "";
foreach ($_POST as $k => $v) {
  if (is_scalar($k) && is_scalar($v)) {
    $tracepost .= "$k=$v\n";
  }
}
dol_syslog("POST: ".$tracepost, LOG_DEBUG, 0, '_payment');
 
$tracesession = "";
foreach ($_SESSION as $k => $v) {
  if (is_scalar($k) && is_scalar($v) && in_array($k, array('currencyCodeType', 'errormessage', 'FinalPaymentAmt', 'ipaddress', 'onlinetoken', 'payerID', 'paymentType', 'TRANSACTIONID', 'paymentoksessionkey', 'paymentkosessionkey'))) {
    $tracesession .= "$k=$v\n";
  }
}
dol_syslog("session_id=".session_id()." SESSION: ".$tracesession, LOG_DEBUG, 0, '_payment');
 
dol_syslog("paymentoksessioncode=".GETPOST('paymentoksessioncode')." SESSION['paymentoksessioncode']=".$_SESSION['paymentoksessioncode'], LOG_DEBUG, 0, '_payment');
 
$head = '';
if (getDolGlobalString('ONLINE_PAYMENT_CSS_URL')) {
  $head = '<link rel="stylesheet" type="text/css" href="' . getDolGlobalString('ONLINE_PAYMENT_CSS_URL').'?lang='.$langs->defaultlang.'">'."\n";
}
 
$conf->dol_hide_topmenu = 1;
$conf->dol_hide_leftmenu = 1;
 
 
// Show header
if (empty($doactionsthenredirect)) {
  $replacemainarea = (empty($conf->dol_hide_leftmenu) ? '<div>' : '').'<div>';
  llxHeader($head, $langs->trans("PaymentForm"), '', '', 0, 0, '', '', '', 'onlinepaymentbody', $replacemainarea);
 
 
  // Show page content id="dolpaymentdiv"
  print '<span id="dolpaymentspan"></span>'."\n";
  print '<div id="dolpaymentdiv" class="center">'."\n";
 
 
  // Show logo (search order: logo defined by PAYMENT_LOGO_suffix, then PAYMENT_LOGO, then small company logo, large company logo, theme logo, common logo)
  // Define logo and logosmall
  $logosmall = $mysoc->logo_small;
  $logo = $mysoc->logo;
  $paramlogo = 'ONLINE_PAYMENT_LOGO_'.$suffix;
  if (getDolGlobalString($paramlogo)) {
    $logosmall = getDolGlobalString($paramlogo);
  } elseif (getDolGlobalString('ONLINE_PAYMENT_LOGO')) {
    $logosmall = getDolGlobalString('ONLINE_PAYMENT_LOGO');
  }
  //print '<!-- Show logo (logosmall='.$logosmall.' logo='.$logo.') -->'."\n";
  // Define urllogo
  $urllogo = '';
  $urllogofull = '';
  if (!empty($logosmall) && is_readable($conf->mycompany->dir_output.'/logos/thumbs/'.$logosmall)) {
    $urllogo = DOL_URL_ROOT.'/viewimage.php?modulepart=mycompany&amp;entity='.$conf->entity.'&amp;file='.urlencode('logos/thumbs/'.$logosmall);
    $urllogofull = $dolibarr_main_url_root.'/viewimage.php?modulepart=mycompany&entity='.$conf->entity.'&file='.urlencode('logos/thumbs/'.$logosmall);
  } elseif (!empty($logo) && is_readable($conf->mycompany->dir_output.'/logos/'.$logo)) {
    $urllogo = DOL_URL_ROOT.'/viewimage.php?modulepart=mycompany&amp;entity='.$conf->entity.'&amp;file='.urlencode('logos/'.$logo);
    $urllogofull = $dolibarr_main_url_root.'/viewimage.php?modulepart=mycompany&entity='.$conf->entity.'&file='.urlencode('logos/'.$logo);
  }
 
  // Output html code for logo
  if ($urllogo) {
    print '<div class="backgreypublicpayment">';
    print '<div class="logopublicpayment">';
    print '<img id="dolpaymentlogo" src="'.$urllogo.'"';
    print '>';
    print '</div>';
    if (!getDolGlobalString('MAIN_HIDE_POWERED_BY')) {
      print '<div class="poweredbypublicpayment opacitymedium right"><a class="poweredbyhref" href="https://www.dolibarr.org?utm_medium=website&utm_source=poweredby" target="dolibarr" rel="noopener">'.$langs->trans("PoweredBy").'<br><img class="poweredbyimg" src="'.DOL_URL_ROOT.'/theme/dolibarr_logo.svg" width="80px"></a></div>';
    }
    print '</div>';
  } elseif ($creditor) {
    print '<div class="backgreypublicpayment">';
    print '<div class="logopublicpayment">';
    print $creditor;
    print '</div>';
    print '</div>';
  }
  if (getDolGlobalString('MAIN_IMAGE_PUBLIC_PAYMENT')) {
    print '<div class="backimagepublicpayment">';
    print '<img id="idMAIN_IMAGE_PUBLIC_PAYMENT" src="' . getDolGlobalString('MAIN_IMAGE_PUBLIC_PAYMENT').'">';
    print '</div>';
  }
 
 
  print '<br><br><br>';
}
 
 
// Add steps to validate payment is complete when we enter this page
$service = $paymentmethod;  // to have a default value. We may change it later for 'StripeLive' or 'StripeTest'...
 
// For Paypal: validate the payment (Paypal need another step after the callback return to validate the payment).
if (isModEnabled('paypal') && $paymentmethod === 'paypal') {  // We call this page only if payment is ok on payment system
  if (!empty($PAYPALTOKEN)) {
    // TODO: Move this block to the top to ensure all session variables (e.g., TRANSACTIONID, FinalPaymentAmt, currencyCodeType, etc.) are loaded before executing checks for any payment module.
    // Get on url call
    $onlinetoken        = $PAYPALTOKEN;
    $fulltag            = $FULLTAG;
    $payerID      = !empty($PAYPALPAYERID) ? $PAYPALPAYERID : '';
    // Set by newpayment.php
    $ipaddress          = $_SESSION['ipaddress'];
    $currencyCodeType   = $_SESSION['currencyCodeType'];
    $FinalPaymentAmt    = $_SESSION["FinalPaymentAmt"];
    $paymentType        = $_SESSION['PaymentType'];     // Value can be 'Mark', 'Sole', 'Sale' for example
 
    dol_syslog("Call paymentok with token=".$onlinetoken." paymentType=".$paymentType." currencyCodeType=".$currencyCodeType." payerID=".$payerID." ipaddress=".$ipaddress." FinalPaymentAmt=".$FinalPaymentAmt." fulltag=".$fulltag, LOG_DEBUG, 0, '_payment');
 
    // Validate record
    if (!empty($paymentType)) {
      dol_syslog("We call GetExpressCheckoutDetails", LOG_DEBUG, 0, '_payment');
      $resArray = getDetails($onlinetoken);
      //var_dump($resarray);
 
      $ack = strtoupper($resArray["ACK"]);
      if ($ack == "SUCCESS" || $ack == "SUCCESSWITHWARNING") {
        // Nothing to do
        dol_syslog("Call to GetExpressCheckoutDetails return ".$ack, LOG_DEBUG, 0, '_payment');
      } else {
        dol_syslog("Call to GetExpressCheckoutDetails return error: ".formatLogObject($resArray), LOG_WARNING, 0, '_payment');
      }
 
      dol_syslog("We call DoExpressCheckoutPayment token=".$onlinetoken." paymentType=".$paymentType." currencyCodeType=".$currencyCodeType." payerID=".$payerID." ipaddress=".$ipaddress." FinalPaymentAmt=".$FinalPaymentAmt." fulltag=".$fulltag, LOG_DEBUG, 0, '_payment');
      $resArray2 = confirmPayment($onlinetoken, $paymentType, $currencyCodeType, $payerID, $ipaddress, $FinalPaymentAmt, $fulltag);
      //var_dump($resarray);
 
      $ack = strtoupper($resArray2["ACK"]);
      if ($ack == "SUCCESS" || $ack == "SUCCESSWITHWARNING") {
        dol_syslog("Call to GetExpressCheckoutDetails return ".$ack, LOG_DEBUG, 0, '_payment');
 
        $object->source   = $source;
        $object->ref = $ref;
        $object->payerID  = $payerID;
        $object->fulltag  = $fulltag;
        $object->resArray = $resArray2;
 
        // resArray was built from a string like that
        // TOKEN=EC%2d1NJ057703V9359028&TIMESTAMP=2010%2d11%2d01T11%3a40%3a13Z&CORRELATIONID=1efa8c6a36bd8&ACK=Success&VERSION=56&BUILD=1553277&TRANSACTIONID=9B994597K9921420R&TRANSACTIONTYPE=expresscheckout&PAYMENTTYPE=instant&ORDERTIME=2010%2d11%2d01T11%3a40%3a12Z&AMT=155%2e57&FEEAMT=5%2e54&TAXAMT=0%2e00&CURRENCYCODE=EUR&PAYMENTSTATUS=Completed&PENDINGREASON=None&REASONCODE=None
        $PAYMENTSTATUS = urldecode($resArray2["PAYMENTSTATUS"]); // Should contains 'Completed'
        $TRANSACTIONID = urldecode($resArray2["TRANSACTIONID"]);
        $TAXAMT = urldecode($resArray2["TAXAMT"]);
        $NOTE = urldecode($resArray2["NOTE"]);
 
        $ispaymentok = true;
      } else {
        dol_syslog("Call to DoExpressCheckoutPayment return error: ".formatLogObject($resArray2), LOG_WARNING, 0, '_payment');
 
        //Display a user friendly Error on the page using any of the following error information returned by PayPal
        $ErrorCode = urldecode($resArray2["L_ERRORCODE0"]);
        $ErrorShortMsg = urldecode($resArray2["L_SHORTMESSAGE0"]);
        $ErrorLongMsg = urldecode($resArray2["L_LONGMESSAGE0"]);
        $ErrorSeverityCode = urldecode($resArray2["L_SEVERITYCODE0"]);
      }
    } else {
      $ErrorCode = "SESSIONEXPIRED";
      $ErrorLongMsg = "Session expired. Can't retrieve PaymentType. Payment has not been validated.";
      $ErrorShortMsg = "Session expired";
 
      dol_syslog($ErrorLongMsg, LOG_WARNING, 0, '_payment');
      dol_print_error(null, 'Session expired');
    }
  } else {
    $ErrorCode = "PAYPALTOKENNOTDEFINED";
    $ErrorLongMsg = "The parameter PAYPALTOKEN was not defined. Payment has not been validated.";
    $ErrorShortMsg = "Parameter PAYPALTOKEN not defined";
 
    dol_syslog($ErrorLongMsg, LOG_WARNING, 0, '_payment');
    dol_print_error(null, 'PAYPALTOKEN not defined');
  }
}
 
// For Stripe
if (isModEnabled('stripe') && $paymentmethod === 'stripe') {
  // TODO: Move this block to the top to ensure all session variables (e.g., TRANSACTIONID, FinalPaymentAmt, currencyCodeType, etc.) are loaded before executing checks for any payment module.
  if (empty($TRANSACTIONID)) {
    $TRANSACTIONID = empty($_SESSION['TRANSACTIONID']) ? '' : $_SESSION['TRANSACTIONID']; // pi_... or ch_...
    if (empty($TRANSACTIONID) && GETPOST('payment_intent', 'alphanohtml')) {
      // For the case we use STRIPE_USE_INTENT_WITH_AUTOMATIC_CONFIRMATION = 2
      $TRANSACTIONID = GETPOST('payment_intent', 'alphanohtml');
    }
  }
  $FinalPaymentAmt = empty($_SESSION["FinalPaymentAmt"]) ? '' : $_SESSION["FinalPaymentAmt"];
  $currencyCodeType = empty($_SESSION['currencyCodeType']) ? '' : $_SESSION['currencyCodeType'];
 
  $service = 'StripeTest';
  $servicestatus = 0;
  if (getDolGlobalString('STRIPE_LIVE')/* && !GETPOSTINT('forcesandbox') */) {
    $service = 'StripeLive';
    $servicestatus = 1;
  }
 
  // Check we are coming from the newpaymentpage
  // Bypass session check when returning from Stripe confirmPayment() (mode STRIPE_USE_INTENT_WITH_AUTOMATIC_CONFIRMATION=2)
  // In that case, payment_intent is passed in GET by Stripe and PaymentIntent::retrieve() below acts as verification
  if (empty(GETPOST('payment_intent', 'alphanohtml')) && GETPOST('paymentoksessioncode') !== $_SESSION['paymentoksessioncode']) {
    $error++;
    $errmsg = 'Attempted direct access to the paymentok page without a valid session.';
    dol_syslog($errmsg, LOG_ERR, 0, '_payment');
  }
 
  // Check on payment platform that the payment has been really validated
  if (!$error && $TRANSACTIONID) {
    // Stripe payment verification via Stripe API
    try {
      include_once DOL_DOCUMENT_ROOT.'/stripe/class/stripe.class.php';
      $stripe = new Stripe($db);
      $stripeacc = $stripe->getStripeAccount($service);
 
      // Use the correct Stripe API key
      global $stripearrayofkeysbyenv;
      \Stripe\Stripe::setApiKey($stripearrayofkeysbyenv[$servicestatus]['secret_key']);
 
      try {
        if (empty($stripeacc)) {
          $paymentIntent = \Stripe\PaymentIntent::retrieve($TRANSACTIONID);
        } else {
          $paymentIntent = \Stripe\PaymentIntent::retrieve($TRANSACTIONID, array("stripe_account" => $stripeacc));
        }
 
        // Check amount and currency
        // Handle zero-decimal currencies that don't use cents/subunits
        $zeroDecimalCurrencies = array('BIF', 'CLP', 'DJF', 'GNF', 'JPY', 'KMF', 'KRW', 'MGA', 'PYG', 'RWF', 'VND', 'VUV', 'XAF', 'XOF', 'XPF');
        if (in_array(strtoupper($currencyCodeType), $zeroDecimalCurrencies)) {
          $expectedAmount = (int) round($FinalPaymentAmt); // No cents for these currencies
        } else {
          $expectedAmount = (int) round($FinalPaymentAmt * 100); // Stripe uses cents for most currencies
        }
        $expectedCurrency = strtolower($currencyCodeType);
 
        if ((int) $paymentIntent->amount !== $expectedAmount || strtolower($paymentIntent->currency) !== $expectedCurrency) {
          $error++;
          $errmsg = 'Stripe payment information mismatch: expected amount ' . $expectedAmount . ' and currency ' . $expectedCurrency . ', got amount ' . $paymentIntent->amount . ' and currency ' . $paymentIntent->currency;
          dol_syslog($errmsg, LOG_ERR, 0, '_payment');
        }
        if ($paymentIntent->status !== 'succeeded') {
          $error++;
          $errmsg = 'Stripe payment not succeeded. Status: ' . $paymentIntent->status;
          dol_syslog($errmsg, LOG_ERR, 0, '_payment');
        }
 
        // Get $customerid and $pkey to forge $LONGTRANSACTIONID
        $customerid = '';
        $pkey = '';
        if ($paymentIntent instanceof \Stripe\PaymentIntent) {
          $customerid = $paymentIntent->customer;
        }
        if (isset($stripearrayofkeysbyenv[$servicestatus]['publishable_key'])) {
          $pkey = $stripearrayofkeysbyenv[$servicestatus]['publishable_key'];
        }
 
        if ($customerid && $pkey) {
          $LONGTRANSACTIONID = $TRANSACTIONID.':'.$customerid.'@'.$pkey;
        }
      } catch (\Stripe\Exception\ApiErrorException $e) {
        $error++;
        $errormessage = "Stripe API error: ".$e->getMessage();
        dol_syslog($errormessage, LOG_ERR, 0, '_payment');
        setEventMessages($e->getMessage(), null, 'errors');
      } catch (Exception $e) {
        $error++;
        $errormessage = "CantRetrievePaymentIntent: ".$e->getMessage();
        dol_syslog($errormessage, LOG_ERR, 0, '_payment');
        setEventMessages($e->getMessage(), null, 'errors');
      }
    } catch (Exception $e) {
      $error++;
      $errmsg = 'Stripe API error: ' . $e->getMessage();
      dol_syslog($errmsg, LOG_ERR, 0, '_payment');
    }
  } else {
    $error++;
    $errmsg = 'Stripe payment verification failed: TRANSACTIONID is not set or session key does not match.';
    dol_syslog($errmsg, LOG_ERR, 0, '_payment');
    setEventMessages($errmsg, null, 'errors');
  }
 
  if (!$error) {
    $ispaymentok = true; // We will do the rest of code
  } else {
    $ispaymentok = false; // We won't do the rest of code
  }
}
 
// For other payment modules
if (!in_array($paymentmethod, array('paypal', 'paybox', 'stripe'))) {
  // Check status of the object to verify if it is paid by external payment modules
  $action = '';
  $parameters = [
    'paymentmethod' => $paymentmethod,
  ];
  $reshook = $hookmanager->executeHooks('isPaymentOK', $parameters, $object, $action);
  if ($reshook >= 0) {
    if (isset($hookmanager->resArray['ispaymentok'])) {
      dol_syslog('ispaymentok overwrite by hook return with value='.$hookmanager->resArray['ispaymentok'], LOG_DEBUG, 0, '_payment');
      $ispaymentok = $hookmanager->resArray['ispaymentok'];
    }
  } else {
    setEventMessages($hookmanager->error, $hookmanager->errors, 'errors');
  }
}
 
// TODO: Move this block to the top to ensure all session variables (e.g., TRANSACTIONID, FinalPaymentAmt, currencyCodeType, etc.) are loaded before executing checks for any payment module.
// Get variable into the session env
if (empty($ipaddress)) {
  $ipaddress = $_SESSION['ipaddress'];
}
if (empty($FinalPaymentAmt)) {
  $FinalPaymentAmt = empty($_SESSION["FinalPaymentAmt"]) ? '' : $_SESSION["FinalPaymentAmt"];
}
if (empty($currencyCodeType)) {
  $currencyCodeType = empty($_SESSION['currencyCodeType']) ? '' : $_SESSION['currencyCodeType'];
}
if (empty($paymentType)) {  // Seems used only by Paypal
  $paymentType = empty($_SESSION["paymentType"]) ? '' : $_SESSION["paymentType"];
}
 
if (empty($TRANSACTIONID)) {
  $TRANSACTIONID = empty($_SESSION['TRANSACTIONID']) ? '' : $_SESSION['TRANSACTIONID']; // pi_... or ch_...
  if (empty($TRANSACTIONID) && GETPOST('payment_intent', 'alphanohtml')) {
    // For the case we use STRIPE_USE_INTENT_WITH_AUTOMATIC_CONFIRMATION = 2
    $TRANSACTIONID = GETPOST('payment_intent', 'alphanohtml');
  }
}
 
$fulltag = $FULLTAG;
$tmptag = dolExplodeIntoArray($fulltag, '.', '=');
 
 
dol_syslog("ispaymentok=".$ispaymentok." tmptag=".formatLogObject($tmptag), LOG_DEBUG, 0, '_payment');
 
 
// Set $appli for emails title
$appli = $mysoc->name;
 
 
// Make complementary actions (post payment actions if payment is ok)
$ispostactionok = 0;
$paymentTypeId = 0;
$postactionmessages = array();
if ($ispaymentok) {
  // Set permission for the anonymous user
  if (empty($user->rights->societe)) {
    $user->rights->societe = new stdClass();
  }
  if (empty($user->rights->facture)) {
    $user->rights->facture = new stdClass();
    $user->rights->facture->invoice_advance = new stdClass();
  }
  if (empty($user->rights->adherent)) {
    $user->rights->adherent = new stdClass();
    $user->rights->adherent->cotisation = new stdClass();
  }
  $user->rights->societe->creer = 1;
  $user->rights->facture->creer = 1;
  $user->rights->facture->invoice_advance->validate = 1;
  $user->rights->adherent->cotisation->creer = 1;
 
  if (array_key_exists('MEM', $tmptag) && $tmptag['MEM'] > 0) {
    // Validate member
    // Create subscription
    // Create complementary actions (this include creation of thirdparty)
    // Send confirmation email
 
    // Record subscription
    include_once DOL_DOCUMENT_ROOT.'/adherents/class/adherent.class.php';
    include_once DOL_DOCUMENT_ROOT.'/adherents/class/adherent_type.class.php';
    include_once DOL_DOCUMENT_ROOT.'/adherents/class/subscription.class.php';
    $adht = new AdherentType($db);
    $object = new Adherent($db);
 
    $result1 = $object->fetch((int) $tmptag['MEM']);
    $result2 = $adht->fetch($object->typeid);
 
    $defaultdelay = !empty($adht->duration_value) ? $adht->duration_value : 1;
    $defaultdelayunit = !empty($adht->duration_unit) ? $adht->duration_unit : 'y';
 
    dol_syslog("We have to process member with id=".$tmptag['MEM']." result1=".$result1." result2=".$result2, LOG_DEBUG, 0, '_payment');
 
    if ($result1 > 0 && $result2 > 0) {
      if ($paymentmethod == 'paybox') {
        $paymentTypeId = getDolGlobalInt('PAYBOX_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'paypal') {
        $paymentTypeId = getDolGlobalInt('PAYPAL_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'stripe') {
        $paymentTypeId = getDolGlobalInt('STRIPE_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if (empty($paymentTypeId)) {
        dol_syslog("paymentType = ".$paymentType, LOG_DEBUG, 0, '_payment');
 
        if (empty($paymentType)) {
          $paymentType = 'CB';
        }
        // May return nothing when paymentType means nothing
        // (for example when paymentType is 'Mark', 'Sole', 'Sale', for paypal)
        $paymentTypeId = dol_getIdFromCode($db, $paymentType, 'c_paiement', 'code', 'id', 1);
 
        // If previous line has returned nothing, we force to get the ID of payment of Credit Card (hard coded code 'CB').
        if (empty($paymentTypeId) || $paymentTypeId < 0) {
          $paymentTypeId = dol_getIdFromCode($db, 'CB', 'c_paiement', 'code', 'id', 1);
        }
      }
 
      dol_syslog("FinalPaymentAmt=".$FinalPaymentAmt." paymentTypeId=".$paymentTypeId." currencyCodeType=".$currencyCodeType, LOG_DEBUG, 0, '_payment');
 
      // Do action only if $FinalPaymentAmt is set (session variable is cleaned after this page to avoid duplicate actions when page is POST a second time)
      if (!empty($FinalPaymentAmt) && $paymentTypeId > 0) {
        $typeid = $object->typeid;
        $amountbytype = $adht->amountByType(1);   // Load the array of amount per type
        $minimumamountbytype = $adht->minimumamountbytype(1); // Load the array of minimum amount per type
        $minimumamount = empty($minimumamountbytype[$typeid]) ? 0 : $minimumamountbytype[$typeid];
        // Security protection:
        if (empty($adht->caneditamount)) {  // If we didn't allow members to choose their membership amount (if the amount is allowed in edit mode, no need to check)
          if ($object->status == $object::STATUS_DRAFT) {   // If the member is not yet validated, we check that the amount is the same as expected.
            // Set amount for the subscription:
            // - First check the amount of the member type.
            $amountexpected = empty($amountbytype[$typeid]) ? 0 : $amountbytype[$typeid];
            // - If not set, we accept to have amount defined as parameter (for backward compatibility).
            //if (empty($amount)) {
            //  $amount = (GETPOST('amount') ? price2num(GETPOST('amount', 'alpha'), 'MT', 2) : '');
            //}
            // - If a min is set, we take it into account
            $amountexpected = max(0, (float) $amountexpected, (float) getDolGlobalInt("MEMBER_MIN_AMOUNT"), (float) $minimumamount);
 
            if ($amountexpected && $amountexpected != $FinalPaymentAmt) {
              $error++;
              $errmsg = 'Value of FinalPayment ('.$FinalPaymentAmt.') propagated by payment page differs from the expected value for membership ('.$amountexpected.'). May be a hack to try to pay a different amount ?';
              $postactionmessages[] = $errmsg;
              $ispostactionok = -1;
              dol_syslog("Failed to validate member (bad amount check): ".$errmsg, LOG_ERR, 0, '_payment');
            }
          }
        }
 
        // Security protection:
        if (getDolGlobalInt('MEMBER_MIN_AMOUNT')) {
          if ($FinalPaymentAmt < getDolGlobalInt('MEMBER_MIN_AMOUNT') || $FinalPaymentAmt < $minimumamount) {
            $error++;
            $errmsg = 'Value of FinalPayment ('.$FinalPaymentAmt.') is lower than the minimum allowed (' . max(getDolGlobalString('MEMBER_MIN_AMOUNT'), $minimumamount).'). May be a hack to try to pay a different amount ?';
            $postactionmessages[] = $errmsg;
            $ispostactionok = -1;
            dol_syslog("Failed to validate member (amount propagated from payment page is lower than allowed minimum): ".$errmsg, LOG_ERR, 0, '_payment');
          }
        }
 
        // Security protection:
        if ($currencyCodeType && $currencyCodeType != $conf->currency) {  // Check that currency is the good one
          $error++;
          $errmsg = 'Value of currencyCodeType ('.$currencyCodeType.') differs from value expected for membership ('.$conf->currency.'). May be a hack to try to pay a different amount ?';
          $postactionmessages[] = $errmsg;
          $ispostactionok = -1;
          dol_syslog("Failed to validate member (bad currency check): ".$errmsg, LOG_ERR, 0, '_payment');
        }
 
        if (! $error) {
          // We validate the member (no effect if it is already validated)
          $result = ($object->status == $object::STATUS_EXCLUDED) ? -1 : $object->validate($user); // if membre is excluded (status == -2) the new validation is not possible
          if ($result < 0 || empty($object->datevalid)) {
            $error++;
            $errmsg = $object->error;
            $postactionmessages[] = $errmsg;
            $postactionmessages = array_merge($postactionmessages, $object->errors);
            $ispostactionok = -1;
            dol_syslog("Failed to validate member: ".$errmsg, LOG_ERR, 0, '_payment');
          }
        }
 
        // Guess the subscription start date
        $datesubscription = $object->datevalid; // By default, the subscription start date is the payment date
        if ($object->datefin > 0) {
          $datesubscription = dol_time_plus_duree($object->datefin, 1, 'd');
        } elseif (getDolGlobalString('MEMBER_SUBSCRIPTION_START_AFTER')) {
          $datesubscription = dol_time_plus_duree($now, (int) substr(getDolGlobalString('MEMBER_SUBSCRIPTION_START_AFTER'), 0, -1), substr(getDolGlobalString('MEMBER_SUBSCRIPTION_START_AFTER'), -1));
        }
        // Now do a correction of the suggested date
        if (getDolGlobalString('MEMBER_SUBSCRIPTION_START_FIRST_DAY_OF') === "m") {
          $datesubscription = dol_get_first_day((int) dol_print_date($datesubscription, "%Y"), (int) dol_print_date($datesubscription, "%m"));
        } elseif (getDolGlobalString('MEMBER_SUBSCRIPTION_START_FIRST_DAY_OF') === "3m") {
          $datesubscription = dol_time_plus_duree($object->datefin, -3, 'm');
          $datesubscription = dol_get_first_day((int) dol_print_date($datesubscription, "%Y"), (int) dol_print_date($datesubscription, "%m"));
        } elseif (getDolGlobalString('MEMBER_SUBSCRIPTION_START_FIRST_DAY_OF') === "Y") {
          $datesubscription = dol_get_first_day((int) dol_print_date($datesubscription, "%Y"));
        }
 
        $datesubend = 0;
        if ($datesubscription && $defaultdelay && $defaultdelayunit) {
          $datesubend = dol_time_plus_duree($datesubscription, $defaultdelay, $defaultdelayunit);
          // the new end date of subscription must be in futur
          while ($datesubend < $now) {
            $datesubend = dol_time_plus_duree($datesubend, $defaultdelay, $defaultdelayunit);
            $datesubscription = dol_time_plus_duree($datesubscription, $defaultdelay, $defaultdelayunit);
          }
          $datesubend = dol_time_plus_duree($datesubend, -1, 'd');
        }
 
        // Set output language
        $outputlangs = new Translate('', $conf);
        $outputlangs->setDefaultLang(empty($object->thirdparty->default_lang) ? (string) $mysoc->default_lang : (string) $object->thirdparty->default_lang);
        $paymentdate = $now;
        $amount = $FinalPaymentAmt;
        $formatteddate = dol_print_date($paymentdate, 'dayhour', 'auto', $outputlangs);
        $label = $langs->trans("OnlineSubscriptionPaymentLine", $formatteddate, $paymentmethod, $ipaddress, $TRANSACTIONID);
 
        // Payment information
        $accountid = 0;
        if ($paymentmethod == 'paybox') {
          $accountid = getDolGlobalString('PAYBOX_BANK_ACCOUNT_FOR_PAYMENTS');
        }
        if ($paymentmethod == 'paypal') {
          $accountid = getDolGlobalString('PAYPAL_BANK_ACCOUNT_FOR_PAYMENTS');
        }
        if ($paymentmethod == 'stripe') {
          $accountid = getDolGlobalString('STRIPE_BANK_ACCOUNT_FOR_PAYMENTS');
        }
 
        //Get bank account for a specific paymentmedthod
        $parameters = [
          'paymentmethod' => $paymentmethod,
        ];
        $reshook = $hookmanager->executeHooks('getBankAccountPaymentMethod', $parameters, $object, $action);
        if ($reshook >= 0) {
          if (isset($hookmanager->resArray['bankaccountid'])) {
            dol_syslog('accountid overwrite by hook return with value='.$hookmanager->resArray['bankaccountid'], LOG_DEBUG, 0, '_payment');
            $accountid = $hookmanager->resArray['bankaccountid'];
          }
        }
        if ($accountid < 0) {
          $error++;
          $errmsg = 'Setup of bank account to use for payment is not correctly done for payment method '.$paymentmethod;
          $postactionmessages[] = $errmsg;
          $ispostactionok = -1;
          dol_syslog("Failed to get the bank account to record payment: ".$errmsg, LOG_ERR, 0, '_payment');
        }
 
        $operation = dol_getIdFromCode($db, $paymentTypeId, 'c_paiement', 'id', 'code', 1); // Payment mode code returned from payment mode id
        $num_chq = '';
        $emetteur_nom = '';
        $emetteur_banque = '';
        // Define default choice for complementary actions
        $option = '';
        if (getDolGlobalString('ADHERENT_BANK_USE') == 'bankviainvoice' && isModEnabled("bank") && isModEnabled("societe") && isModEnabled('invoice')) {
          $option = 'bankviainvoice';
        } elseif (getDolGlobalString('ADHERENT_BANK_USE') == 'bankdirect' && isModEnabled("bank")) {
          $option = 'bankdirect';
        } elseif (getDolGlobalString('ADHERENT_BANK_USE') == 'invoiceonly' && isModEnabled("bank") && isModEnabled("societe") && isModEnabled('invoice')) {
          $option = 'invoiceonly';
        }
        if (empty($option)) {
          $option = 'none';
        }
        $sendalsoemail = 1;
        $crowid = 0;
 
        // Record the subscription then complementary actions
        $db->begin();
 
        // Create subscription
        if (!$error) {
          dol_syslog("Call ->subscription to create subscription", LOG_DEBUG, 0, '_payment');
 
          $crowid = $object->subscription($datesubscription, $amount, $accountid, $operation, $label, $num_chq, $emetteur_nom, $emetteur_banque, $datesubend, $membertypeid);
          if ($crowid <= 0) {
            $error++;
            $errmsg = $object->error;
            $postactionmessages[] = $errmsg;
            $ispostactionok = -1;
          } else {
            $postactionmessages[] = 'Subscription created (id='.$crowid.')';
            $ispostactionok = 1;
          }
        }
 
        $autocreatethirdparty = 0;
 
        if (!$error) {
          dol_syslog("Call ->subscriptionComplementaryActions option=".$option, LOG_DEBUG, 0, '_payment');
 
          $autocreatethirdparty = 1; // will create third party if member not yet linked to a thirdparty
 
          $result = $object->subscriptionComplementaryActions($crowid, $option, $accountid, $datesubscription, $paymentdate, $operation, $label, $amount, $num_chq, $emetteur_nom, $emetteur_banque, $autocreatethirdparty, $TRANSACTIONID, $service);
          if ($result < 0) {
            dol_syslog("Error ".$object->error." ".implode(',', $object->errors), LOG_DEBUG, 0, '_payment');
 
            $error++;
            $postactionmessages[] = $object->error;
            $postactionmessages = array_merge($postactionmessages, $object->errors);
            $ispostactionok = -1;
          } else {
            if ($option == 'bankviainvoice') {
              $postactionmessages[] = 'Invoice, payment and bank record created';
              dol_syslog("Invoice, payment and bank record created", LOG_DEBUG, 0, '_payment');
            }
            if ($option == 'bankdirect') {
              $postactionmessages[] = 'Bank record created';
              dol_syslog("Bank record created", LOG_DEBUG, 0, '_payment');
            }
            if ($option == 'invoiceonly') {
              $postactionmessages[] = 'Invoice recorded';
              dol_syslog("Invoice recorded", LOG_DEBUG, 0, '_payment');
            }
            $ispostactionok = 1;
 
            // If an invoice was created, it is into $object->invoice
          }
        }
 
        if (!$error) {
          // If payment using Stripe, save the Stripe payment info into societe_account
          if ($paymentmethod == 'stripe' && $autocreatethirdparty && $option == 'bankviainvoice') {
            $thirdparty_id = ($object->socid ? $object->socid : $object->fk_soc);
 
            dol_syslog("Search existing Stripe customer profile for thirdparty_id=".$thirdparty_id, LOG_DEBUG, 0, '_payment');
 
            $service = 'StripeTest';
            $servicestatus = 0;
            if (getDolGlobalString('STRIPE_LIVE')/* && !GETPOST('forcesandbox', 'alpha') */) {
              $service = 'StripeLive';
              $servicestatus = 1;
            }
            $stripeacc = ''; // No Oauth/connect use for public pages
 
            $thirdparty = new Societe($db);
            $thirdparty->fetch($thirdparty_id);
 
            include_once DOL_DOCUMENT_ROOT.'/stripe/class/stripe.class.php';  // This also set $stripearrayofkeysbyenv
            $stripe = new Stripe($db);
            //$stripeacc = $stripe->getStripeAccount($service);   Already defined previously
 
            $customer = $stripe->customerStripe($thirdparty, $stripeacc, $servicestatus, 0);
 
            if (!$customer && $TRANSACTIONID) { // Not linked to a stripe customer, we make the link
              dol_syslog("No stripe profile found, so we add it for TRANSACTIONID = ".$TRANSACTIONID, LOG_DEBUG, 0, '_payment');
 
              try {
                global $stripearrayofkeysbyenv;
                \Stripe\Stripe::setApiKey($stripearrayofkeysbyenv[$servicestatus]['secret_key']);
 
                if (preg_match('/^pi_/', $TRANSACTIONID)) {
                  // This may throw an error if not found.
                  $chpi = \Stripe\PaymentIntent::retrieve($TRANSACTIONID);  // payment_intent (pi_...)
                } else {
                  // This throw an error if not found
                  $chpi = \Stripe\Charge::retrieve($TRANSACTIONID); // old method, contains the charge id (ch_...)
                }
 
                if ($chpi) {
                  $stripecu = $chpi->customer; // value 'cus_....'. WARNING: This property may be empty if first payment was recorded before the stripe customer was created.
 
                  if (empty($stripecu)) {
                    // This include the INSERT
                    $customer = $stripe->customerStripe($thirdparty, $stripeacc, $servicestatus, 1);
 
                    // Link this customer to the payment intent
                    if (preg_match('/^pi_/', $TRANSACTIONID) && $customer) {
                      \Stripe\PaymentIntent::update($chpi->id, array('customer' => $customer->id));
                    }
                  } else {
                    $sql = "INSERT INTO ".MAIN_DB_PREFIX."societe_account (fk_soc, login, key_account, site, site_account, status, entity, date_creation, fk_user_creat)";
                    $sql .= " VALUES (".((int) $thirdparty_id).", '', '".$db->escape($stripecu)."', 'stripe', '".$db->escape($stripearrayofkeysbyenv[$servicestatus]['publishable_key'])."', ".((int) $servicestatus).", ".((int) $conf->entity).", '".$db->idate(dol_now())."', 0)";
                    $resql = $db->query($sql);
                    if (!$resql) {  // should not happen
                      $error++;
                      $errmsg = 'Failed to insert customer stripe id in database : '.$db->lasterror();
                      dol_syslog($errmsg, LOG_ERR, 0, '_payment');
                      $postactionmessages[] = $errmsg;
                      $ispostactionok = -1;
                    }
                  }
                } else {  // should not happen
                  $error++;
                  $errmsg = 'Failed to retrieve paymentintent or charge from id';
                  dol_syslog($errmsg, LOG_ERR, 0, '_payment');
                  $postactionmessages[] = $errmsg;
                  $ispostactionok = -1;
                }
              } catch (Exception $e) {  // should not happen
                $error++;
                $errmsg = 'Failed to get or save customer stripe id in database : '.$e->getMessage();
                dol_syslog($errmsg, LOG_ERR, 0, '_payment');
                $postactionmessages[] = $errmsg;
                $ispostactionok = -1;
              }
            }
          }
        }
 
        if (!$error) {
          $db->commit();
        } else {
          $db->rollback();
        }
 
        // Set string to use to send email info
        $infouserlogin = '';
 
        // Create external user
        if (getDolGlobalString('ADHERENT_CREATE_EXTERNAL_USER_LOGIN')) {
          $nuser = new User($db);
          $tmpuser = dol_clone($object, 0);   // $object is type Adherent
 
          // Check if a user login already exists for this member or not
          $found = 0;
          $sql = "SELECT COUNT(rowid) as nb FROM ".MAIN_DB_PREFIX."user WHERE fk_member = ".((int) $object->id);
          $resqlcount = $db->query($sql);
          if ($resqlcount) {
            $objcount = $db->fetch_object($resqlcount);
            if ($objcount) {
              $found = $objcount->nb;
            }
          }
 
          if (!$found) {
            $result = $nuser->create_from_member($tmpuser, $object->login);
            $newpassword = $nuser->setPassword($user, '');
 
            if ($result < 0) {
              $outputlangs->load("errors");
              $postactionmessages[] = 'Error in create external user : '.$nuser->error;
            } else {
              $infouserlogin = $outputlangs->trans("Login").': '.$nuser->login.' '."\n".$outputlangs->trans("Password").': '.$newpassword;
              $postactionmessages[] = $langs->trans("NewUserCreated", $nuser->login);
            }
          } else {
            $outputlangs->load("errors");
            $postactionmessages[] = 'No user created because a user linked to member already exists';
          }
        }
 
        // Send email to member
        if (!$error) {
          dol_syslog("Send email to customer to ".$object->email." if we have to (sendalsoemail = ".$sendalsoemail.")", LOG_DEBUG, 0, '_payment');
 
          // Send confirmation Email
          if ($object->email && $sendalsoemail) {
            $subject = '';
            $msg = '';
 
            // Send subscription email
            include_once DOL_DOCUMENT_ROOT.'/core/class/html.formmail.class.php';
            $formmail = new FormMail($db);
            // Load traductions files required by page
            $outputlangs->loadLangs(array("main", "members"));
            // Get email content from template
            $arraydefaultmessage = null;
            $labeltouse = getDolGlobalString('ADHERENT_EMAIL_TEMPLATE_SUBSCRIPTION');
 
            if (!empty($labeltouse)) {
              $arraydefaultmessage = $formmail->getEMailTemplate($db, 'member', $user, $outputlangs, 0, 1, $labeltouse);
            }
 
            if (!empty($labeltouse) && is_object($arraydefaultmessage) && $arraydefaultmessage->id > 0) {
              $subject = $arraydefaultmessage->topic;
              $msg     = $arraydefaultmessage->content;
            }
 
            $substitutionarray = getCommonSubstitutionArray($outputlangs, 0, null, $object);
 
            if ($infouserlogin) {
              $substitutionarray['__MEMBER_USER_LOGIN_INFORMATION__'] = $infouserlogin;
            }
 
            complete_substitutions_array($substitutionarray, $outputlangs, $object);
            $subjecttosend = make_substitutions($subject, $substitutionarray, $outputlangs);
            $texttosend = make_substitutions(dol_concatdesc($msg, $adht->getMailOnSubscription()), $substitutionarray, $outputlangs);
 
            // Attach a file ?
            $file = '';
            $listofpaths = array();
            $listofnames = array();
            $listofmimes = array();
            if (is_object($object->invoice)) {
              $invoicediroutput = $conf->facture->dir_output;
              $fileparams = dol_most_recent_file($invoicediroutput.'/'.$object->invoice->ref, preg_quote($object->invoice->ref, '/').'[^\-]+');
              $file = $fileparams['fullname'];
 
              $listofpaths = array($file);
              $listofnames = array(basename($file));
              $listofmimes = array(dol_mimetype($file));
            }
 
            $moreinheader = 'X-Dolibarr-Info: send_an_email by public/payment/paymentok.php'."\r\n";
 
            $result = $object->sendEmail($texttosend, $subjecttosend, $listofpaths, $listofmimes, $listofnames, "", "", 0, -1, "", $moreinheader);
 
            if ($result < 0) {
              $errmsg = $object->error;
              $postactionmessages[] = $errmsg;
              $ispostactionok = -1;
            } else {
              if ($file) {
                $postactionmessages[] = 'Email sent to member (with invoice document attached)';
              } else {
                $postactionmessages[] = 'Email sent to member (without any attached document)';
              }
 
              // TODO Add actioncomm event
            }
          }
        }
      } else {
        $postactionmessages[] = 'Failed to get a valid value for "amount paid" or "payment type" to record the payment of subscription for member '.$tmptag['MEM'].'. May be payment was already recorded.';
        $ispostactionok = -1;
      }
    } else {
      $postactionmessages[] = 'Member '.$tmptag['MEM'].' for subscription paid was not found';
      $ispostactionok = -1;
    }
  } elseif (array_key_exists('INV', $tmptag) && $tmptag['INV'] > 0) {
    // Record payment
    include_once DOL_DOCUMENT_ROOT.'/compta/facture/class/facture.class.php';
    $object = new Facture($db);
    $result = $object->fetch((int) $tmptag['INV']);
    if ($result) {
      $FinalPaymentAmt = $_SESSION["FinalPaymentAmt"];
 
      $paymentTypeId = 0;
      if ($paymentmethod === 'paybox') {
        $paymentTypeId = getDolGlobalInt('PAYBOX_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod === 'paypal') {
        $paymentTypeId = getDolGlobalInt('PAYPAL_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod === 'stripe') {
        $paymentTypeId = getDolGlobalInt('STRIPE_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if (empty($paymentTypeId)) {
        dol_syslog("paymentType = ".$paymentType, LOG_DEBUG, 0, '_payment');
 
        if (empty($paymentType)) {
          $paymentType = 'CB';
        }
        // May return nothing when paymentType means nothing
        // (for example when paymentType is 'Mark', 'Sole', 'Sale', for paypal)
        $paymentTypeId = dol_getIdFromCode($db, $paymentType, 'c_paiement', 'code', 'id', 1);
 
        // If previous line has returned nothing, we force to get the ID of payment of Credit Card (hard coded code 'CB').
        if (empty($paymentTypeId) || $paymentTypeId < 0) {
          $paymentTypeId = dol_getIdFromCode($db, 'CB', 'c_paiement', 'code', 'id', 1);
        }
      }
 
      dol_syslog("FinalPaymentAmt = ".$FinalPaymentAmt." paymentTypeId = ".$paymentTypeId, LOG_DEBUG, 0, '_payment');
 
      // Do action only if $FinalPaymentAmt is set (session variable is cleaned after this page to avoid duplicate actions when page is POST a second time)
      if (!empty($FinalPaymentAmt) && $paymentTypeId > 0) {
        $db->begin();
 
        // Creation of payment line
        include_once DOL_DOCUMENT_ROOT.'/compta/paiement/class/paiement.class.php';
        $paiement = new Paiement($db);
        $paiement->datepaye = $now;
        if ($currencyCodeType == $conf->currency) {
          $paiement->amounts = array($object->id => $FinalPaymentAmt); // Array with all payments dispatching with invoice id
        } else {
          $paiement->multicurrency_amounts = array($object->id => $FinalPaymentAmt); // Array with all payments dispatching
 
          $postactionmessages[] = 'Payment was done in a currency ('.$currencyCodeType.') other than the expected currency of company ('.$conf->currency.')';
          $ispostactionok = -1;
          $error++; // Not yet supported
        }
        $paiement->paiementid   = $paymentTypeId;
        $paiement->num_payment = '';
        $paiement->note_public  = 'Online payment '.dol_print_date($now, 'standard').' from '.$ipaddress;
 
        // May be we should store py_... instead of pi_... but we started with pi_... so we continue.
        if ($LONGTRANSACTIONID) {
          $paiement->ext_payment_id = $LONGTRANSACTIONID;
        } else {
          $paiement->ext_payment_id = $TRANSACTIONID;
        }
        $paiement->ext_payment_site = $service;
 
        // Validate invoice if not already validated (this can happen for automatically generated invoices with a free amount)
        if (!$error && $object->status == Facture::STATUS_DRAFT) {
          $result = $object->validate($user);
          if ($result < 0) {
            $postactionmessages[] = $object->error;
            $ispostactionok = -1;
            $error++;
          } else {
            $postactionmessages[] = 'Invoice validated';
            $ispostactionok = 1;
          }
        }
 
        if (!$error) {
          $paiement_id = $paiement->create($user, 1); // This include closing invoices and regenerating documents
          if ($paiement_id < 0) {
            $postactionmessages[] = $paiement->error.' '.implode("<br>\n", $paiement->errors);
            $ispostactionok = -1;
            $error++;
          } else {
            $postactionmessages[] = 'Payment created';
            $ispostactionok = 1;
          }
        }
 
        if (!$error && isModEnabled("bank")) {
          $bankaccountid = 0;
          if ($paymentmethod == 'paybox') {
            $bankaccountid = getDolGlobalString('PAYBOX_BANK_ACCOUNT_FOR_PAYMENTS');
          } elseif ($paymentmethod == 'paypal') {
            $bankaccountid = getDolGlobalString('PAYPAL_BANK_ACCOUNT_FOR_PAYMENTS');
          } elseif ($paymentmethod == 'stripe') {
            $bankaccountid = getDolGlobalString('STRIPE_BANK_ACCOUNT_FOR_PAYMENTS');
          }
 
          //Get bank account for a specific paymentmedthod
          $parameters = [
            'paymentmethod' => $paymentmethod,
          ];
          $reshook = $hookmanager->executeHooks('getBankAccountPaymentMethod', $parameters, $object, $action);
          if ($reshook >= 0) {
            if (isset($hookmanager->resArray['bankaccountid'])) {
              dol_syslog('bankaccountid overwrite by hook return with value='.$hookmanager->resArray['bankaccountid'], LOG_DEBUG, 0, '_payment');
              $bankaccountid = $hookmanager->resArray['bankaccountid'];
            }
          }
          if ($bankaccountid > 0) {
            $label = '(CustomerInvoicePayment)';
            if ($object->type == Facture::TYPE_CREDIT_NOTE) {
              $label = '(CustomerInvoicePaymentBack)'; // Refund of a credit note
            }
            $result = $paiement->addPaymentToBank($user, 'payment', $label, $bankaccountid, '', '');
            if ($result < 0) {
              $postactionmessages[] = $paiement->error.' '.implode("<br>\n", $paiement->errors);
              $ispostactionok = -1;
              $error++;
            } else {
              $postactionmessages[] = 'Bank transaction of payment created';
              $ispostactionok = 1;
            }
          } else {
            $postactionmessages[] = 'Setup of bank account to use in module '.$paymentmethod.' was not set. Your payment was really executed but we failed to record it. Please contact us.';
            $ispostactionok = -1;
            $error++;
          }
        }
 
        if (!$error) {
          $db->commit();
        } else {
          $db->rollback();
        }
      } else {
        $postactionmessages[] = 'Failed to get a valid value for "amount paid" ('.$FinalPaymentAmt.') or "payment type id" ('.$paymentTypeId.') to record the payment of invoice '.$tmptag['INV'].'. May be payment was already recorded.';
        $ispostactionok = -1;
      }
    } else {
      $postactionmessages[] = 'Invoice paid '.$tmptag['INV'].' was not found';
      $ispostactionok = -1;
    }
  } elseif (array_key_exists('ORD', $tmptag) && $tmptag['ORD'] > 0) {
    include_once DOL_DOCUMENT_ROOT . '/commande/class/commande.class.php';
    $object = new Commande($db);
    $result = $object->fetch((int) $tmptag['ORD']);
    if ($result) {
      dol_syslog("We have loaded the order id=".$object->id." to use to create the invoice", LOG_DEBUG, 0, '_payment');
 
      $FinalPaymentAmt = $_SESSION["FinalPaymentAmt"];
 
      $paymentTypeId = 0;
      if ($paymentmethod == 'paybox') {
        $paymentTypeId = getDolGlobalInt('PAYBOX_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'paypal') {
        $paymentTypeId = getDolGlobalInt('PAYPAL_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'stripe') {
        $paymentTypeId = getDolGlobalInt('STRIPE_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if (empty($paymentTypeId)) {
        dol_syslog("paymentType = ".$paymentType, LOG_DEBUG, 0, '_payment');
 
        if (empty($paymentType)) {
          $paymentType = 'CB';
        }
        // May return nothing when paymentType means nothing
        // (for example when paymentType is 'Mark', 'Sole', 'Sale', for paypal)
        $paymentTypeId = dol_getIdFromCode($db, $paymentType, 'c_paiement', 'code', 'id', 1);
 
        // If previous line has returned nothing, we force to get the ID of payment of Credit Card (hard coded code 'CB').
        if (empty($paymentTypeId) || $paymentTypeId < 0) {
          $paymentTypeId = dol_getIdFromCode($db, 'CB', 'c_paiement', 'code', 'id', 1);
        }
      }
 
      dol_syslog("The payment type id to use is paymentTypeId=".$paymentTypeId." and FinalPaymentAmt=".$FinalPaymentAmt, LOG_DEBUG, 0, '_payment');
 
      // Do action only if $FinalPaymentAmt is set (session variable is cleaned after this page to avoid duplicate actions when page is POST a second time)
      if (isModEnabled('invoice')) {
        if (!empty($FinalPaymentAmt) && $paymentTypeId > 0) {
          $db->begin();
 
          include_once DOL_DOCUMENT_ROOT . '/compta/facture/class/facture.class.php';
          $invoice = new Facture($db);
          $result = $invoice->createFromOrder($object, $user);
          if ($result > 0) {
            if ($FinalPaymentAmt != $object->total_ttc) {
              // The amount paid can be lower than the order only if the user tried to modified the amount from the payment page. A payment has been received but it is a hack attempt
              // We can add a line to reduce the amount of the invoice but with which vat ?
              // TODO Test if vat on line is the same everywhere, if yes we can add
              // $invoice->addline('Fix amount of invoice', $FinalPaymentAmt - $object->total_ttc, 1, $txtva);
              // TODO Send a warning email.
            }
 
            $object->classifyBilled($user);   // The invoice has been created from the order so total is the same, so we can classify order to billed (even if payment may be partial).
 
            $invoice->validate($user);      // This may re-classify all linked orders to billed (done previously) if amount of invoice is ok by triggers, depending on the workflow module setup.
 
            // Creation of payment line (warning: if amount has been modified on page, the payment may be partial)
            include_once DOL_DOCUMENT_ROOT . '/compta/paiement/class/paiement.class.php';
            $paiement = new Paiement($db);
            $paiement->datepaye = $now;
            if ($currencyCodeType == $conf->currency) {
              $paiement->amounts = array($invoice->id => $FinalPaymentAmt); // Array with all payments dispatching with invoice id
            } else {
              $paiement->multicurrency_amounts = array($invoice->id => $FinalPaymentAmt); // Array with all payments dispatching
 
              $postactionmessages[] = 'Payment was done in a currency ('.$currencyCodeType.') other than the expected currency of company ('.$conf->currency.')';
              $ispostactionok = -1;
              $error++;
            }
            $paiement->paiementid = $paymentTypeId;
            $paiement->num_payment = '';
            $paiement->note_public = 'Online payment ' . dol_print_date($now, 'standard') . ' from ' . $ipaddress;
 
            // May be we should store py_... instead of pi_... but we started with pi_... so we continue.
            if ($LONGTRANSACTIONID) {
              $paiement->ext_payment_id = $LONGTRANSACTIONID;
            } else {
              $paiement->ext_payment_id = $TRANSACTIONID;
            }
            $paiement->ext_payment_site = $service;     // 'StripeLive' or 'Stripe', or ...
 
            if (!$error) {
              $paiement_id = $paiement->create($user, 1); // This include closing invoices and regenerating documents
              if ($paiement_id < 0) {
                $postactionmessages[] = $paiement->error . ' ' . implode("<br>\n", $paiement->errors);
                $ispostactionok = -1;
                $error++;
              } else {
                $postactionmessages[] = 'Payment created';
                $ispostactionok = 1;
              }
            }
 
            if (!$error && isModEnabled("bank")) {
              $bankaccountid = 0;
              if ($paymentmethod == 'paybox') {
                $bankaccountid = getDolGlobalString('PAYBOX_BANK_ACCOUNT_FOR_PAYMENTS');
              } elseif ($paymentmethod == 'paypal') {
                $bankaccountid = getDolGlobalString('PAYPAL_BANK_ACCOUNT_FOR_PAYMENTS');
              } elseif ($paymentmethod == 'stripe') {
                $bankaccountid = getDolGlobalString('STRIPE_BANK_ACCOUNT_FOR_PAYMENTS');
              }
 
              //Get bank account for a specific paymentmedthod
              $parameters = [
                'paymentmethod' => $paymentmethod,
              ];
              $reshook = $hookmanager->executeHooks('getBankAccountPaymentMethod', $parameters, $object, $action);
              if ($reshook >= 0) {
                if (isset($hookmanager->resArray['bankaccountid'])) {
                  dol_syslog('bankaccountid overwrite by hook return with value='.$hookmanager->resArray['bankaccountid'], LOG_DEBUG, 0, '_payment');
                  $bankaccountid = $hookmanager->resArray['bankaccountid'];
                }
              }
              if ($bankaccountid > 0) {
                $label = '(CustomerInvoicePayment)';
                if ($invoice->type == Facture::TYPE_CREDIT_NOTE) {
                  $label = '(CustomerInvoicePaymentBack)'; // Refund of a credit note
                }
                $result = $paiement->addPaymentToBank($user, 'payment', $label, $bankaccountid, '', '');
                if ($result < 0) {
                  $postactionmessages[] = $paiement->error . ' ' . implode("<br>\n", $paiement->errors);
                  $ispostactionok = -1;
                  $error++;
                } else {
                  $postactionmessages[] = 'Bank transaction of payment created';
                  $ispostactionok = 1;
                }
              } else {
                $postactionmessages[] = 'Setup of bank account to use in module ' . $paymentmethod . ' was not set. No way to record the payment.';
                $ispostactionok = -1;
                $error++;
              }
            }
          } else {
            $postactionmessages[] = 'Failed to create invoice form order ' . $tmptag['ORD'] . '.';
            $ispostactionok = -1;
            $error++;
          }
 
          if (!$error) {
            $db->commit();
          } else {
            $db->rollback();
          }
        } else {
          $postactionmessages[] = 'Failed to get a valid value for "amount paid" (' . $FinalPaymentAmt . ') or "payment type id" (' . $paymentTypeId . ') to record the payment of order ' . $tmptag['ORD'] . '. May be payment was already recorded.';
          $ispostactionok = -1;
        }
      } else {
        $postactionmessages[] = 'Invoice module is not enable';
        $ispostactionok = -1;
      }
    } else {
      $postactionmessages[] = 'Order paid ' . $tmptag['ORD'] . ' was not found';
      $ispostactionok = -1;
    }
  } elseif (array_key_exists('DON', $tmptag) && $tmptag['DON'] > 0) {
    include_once DOL_DOCUMENT_ROOT.'/don/class/don.class.php';
    $don = new Don($db);
    $result = $don->fetch((int) $tmptag['DON']);
    if ($result) {
      $paymentTypeId = 0;
      if ($paymentmethod == 'paybox') {
        $paymentTypeId = getDolGlobalInt('PAYBOX_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'paypal') {
        $paymentTypeId = getDolGlobalInt('PAYPAL_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'stripe') {
        $paymentTypeId = getDolGlobalInt('STRIPE_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if (empty($paymentTypeId)) {
        dol_syslog("paymentType = ".$paymentType, LOG_DEBUG, 0, '_payment');
 
        if (empty($paymentType)) {
          $paymentType = 'CB';
        }
        // May return nothing when paymentType means nothing
        // (for example when paymentType is 'Mark', 'Sole', 'Sale', for paypal)
        $paymentTypeId = dol_getIdFromCode($db, $paymentType, 'c_paiement', 'code', 'id', 1);
 
        // If previous line has returned nothing, we force to get the ID of payment of Credit Card (hard coded code 'CB').
        if (empty($paymentTypeId) || $paymentTypeId < 0) {
          $paymentTypeId = dol_getIdFromCode($db, 'CB', 'c_paiement', 'code', 'id', 1);
        }
      }
 
      // Do action only if $FinalPaymentAmt is set (session variable is cleaned after this page to avoid duplicate actions when page is POST a second time)
      if (!empty($FinalPaymentAmt) && $paymentTypeId > 0) {
        $db->begin();
 
        // Creation of paiement line for donation
        include_once DOL_DOCUMENT_ROOT.'/don/class/paymentdonation.class.php';
        $paiement = new PaymentDonation($db);
 
        $totalpaid = $FinalPaymentAmt;
 
        if ($currencyCodeType == $conf->currency) {
          $paiement->amounts = array($object->id => $totalpaid); // Array with all payments dispatching with donation
        } else {
          // PaymentDonation does not support multi currency
          $postactionmessages[] = 'Payment donation can\'t be paid with different currency than '.$conf->currency;
          $ispostactionok = -1;
          $error++; // Not yet supported
        }
 
        $paiement->fk_donation = $don->id;
        $paiement->datep = $now;
        $paiement->paymenttype = $paymentTypeId;
        $paiement->num_payment = '';
        $paiement->note_public  = 'Online payment '.dol_print_date($now, 'standard').' from '.$ipaddress;
 
        // May be we should store py_... instead of pi_... but we started with pi_... so we continue.
        if ($LONGTRANSACTIONID) {
          $paiement->ext_payment_id = $LONGTRANSACTIONID;
        } else {
          $paiement->ext_payment_id = $TRANSACTIONID;
        }
        $paiement->ext_payment_site = $service;     // 'StripeLive' or 'Stripe', or ...
 
        if (!$error) {
          $paiement_id = $paiement->create($user, 1);
          if ($paiement_id < 0) {
            $postactionmessages[] = $paiement->error.' '.implode("<br>\n", $paiement->errors);
            $ispostactionok = -1;
            $error++;
          } else {
            $postactionmessages[] = 'Payment created';
            $ispostactionok = 1;
 
            if ($totalpaid >= $don->getRemainToPay()) {
              $don->valid_promesse($don->id, $user->id); 
              $don->setPaid($don->id);
            }
          }
        }
 
        if (!$error && isModEnabled("bank")) {
          $bankaccountid = 0;
          if ($paymentmethod == 'paybox') {
            $bankaccountid = getDolGlobalString('PAYBOX_BANK_ACCOUNT_FOR_PAYMENTS');
          } elseif ($paymentmethod == 'paypal') {
            $bankaccountid = getDolGlobalString('PAYPAL_BANK_ACCOUNT_FOR_PAYMENTS');
          } elseif ($paymentmethod == 'stripe') {
            $bankaccountid = getDolGlobalString('STRIPE_BANK_ACCOUNT_FOR_PAYMENTS');
          }
 
          //Get bank account for a specific paymentmedthod
          $parameters = [
            'paymentmethod' => $paymentmethod,
          ];
          $reshook = $hookmanager->executeHooks('getBankAccountPaymentMethod', $parameters, $object, $action);
          if ($reshook >= 0) {
            if (isset($hookmanager->resArray['bankaccountid'])) {
              dol_syslog('bankaccountid overwrite by hook return with value='.$hookmanager->resArray['bankaccountid'], LOG_DEBUG, 0, '_payment');
              $bankaccountid = $hookmanager->resArray['bankaccountid'];
            }
          }
          if ($bankaccountid > 0) {
            $label = '(DonationPayment)';
            $result = $paiement->addPaymentToBank($user, 'payment_donation', $label, $bankaccountid, '', '');
            if ($result < 0) {
              $postactionmessages[] = $paiement->error.' '.implode("<br>\n", $paiement->errors);
              $ispostactionok = -1;
              $error++;
            } else {
              $postactionmessages[] = 'Bank transaction of payment created';
              $ispostactionok = 1;
            }
          } else {
            $postactionmessages[] = 'Setup of bank account to use in module '.$paymentmethod.' was not set. Your payment was really executed but we failed to record it. Please contact us.';
            $ispostactionok = -1;
            $error++;
          }
        }
 
        if (!$error) {
          $db->commit();
        } else {
          $db->rollback();
        }
      } else {
        $postactionmessages[] = 'Failed to get a valid value for "amount paid" ('.$FinalPaymentAmt.') or "payment type id" ('.$paymentTypeId.') to record the payment of donation '.$tmptag['DON'].'. May be payment was already recorded.';
        $ispostactionok = -1;
      }
    } else {
      $postactionmessages[] = 'Donation paid '.$tmptag['DON'].' was not found';
      $ispostactionok = -1;
    }
 
    // TODO send email with acknowledgment for the donation
    //      (we need first that the donation module is able to generate a pdf document for the cerfa with pre filled content)
  } elseif (array_key_exists('ATT', $tmptag) && $tmptag['ATT'] > 0) {
    // Record payment for registration to an event for an attendee
    require_once DOL_DOCUMENT_ROOT.'/eventorganization/class/conferenceorboothattendee.class.php';
    require_once DOL_DOCUMENT_ROOT.'/eventorganization/class/conferenceorbooth.class.php';
    include_once DOL_DOCUMENT_ROOT.'/compta/facture/class/facture.class.php';
    $object = new Facture($db);
    $result = $object->fetch((int) $ref);  // @phan-suppress-curren-line PhanPluginSuspiciousParamPosition
    if ($result) {
      $paymentTypeId = 0;
      if ($paymentmethod == 'paybox') {
        $paymentTypeId = getDolGlobalInt('PAYBOX_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'paypal') {
        $paymentTypeId = getDolGlobalInt('PAYPAL_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'stripe') {
        $paymentTypeId = getDolGlobalInt('STRIPE_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if (empty($paymentTypeId)) {
        dol_syslog("paymentType = ".$paymentType, LOG_DEBUG, 0, '_payment');
 
        if (empty($paymentType)) {
          $paymentType = 'CB';
        }
        // May return nothing when paymentType means nothing
        // (for example when paymentType is 'Mark', 'Sole', 'Sale', for paypal)
        $paymentTypeId = dol_getIdFromCode($db, $paymentType, 'c_paiement', 'code', 'id', 1);
 
        // If previous line has returned nothing, we force to get the ID of payment of Credit Card (hard coded code 'CB').
        if (empty($paymentTypeId) || $paymentTypeId < 0) {
          $paymentTypeId = dol_getIdFromCode($db, 'CB', 'c_paiement', 'code', 'id', 1);
        }
      }
 
      // Do action only if $FinalPaymentAmt is set (session variable is cleaned after this page to avoid duplicate actions when page is POST a second time)
      if (!empty($FinalPaymentAmt) && $paymentTypeId > 0) {
        $resultvalidate = $object->validate($user);
        if ($resultvalidate < 0) {
          $postactionmessages[] = 'Cannot validate invoice';
          $ispostactionok = -1;
          $error++; // Not yet supported
        } else {
          $db->begin();
 
          // Creation of payment line
          include_once DOL_DOCUMENT_ROOT.'/compta/paiement/class/paiement.class.php';
          $paiement = new Paiement($db);
          $paiement->datepaye = $now;
          if ($currencyCodeType == $conf->currency) {
            $paiement->amounts = array($object->id => $FinalPaymentAmt); // Array with all payments dispatching with invoice id
          } else {
            $paiement->multicurrency_amounts = array($object->id => $FinalPaymentAmt); // Array with all payments dispatching
 
            $postactionmessages[] = 'Payment was done in a currency ('.$currencyCodeType.') other than the expected currency of company ('.$conf->currency.')';
            $ispostactionok = -1;
            $error++; // Not yet supported
          }
          $paiement->paiementid   = $paymentTypeId;
          $paiement->num_payment = '';
          $paiement->note_public  = 'Online payment '.dol_print_date($now, 'standard').' from '.$ipaddress.' for event registration';
 
          // May be we should store py_... instead of pi_... but we started with pi_... so we continue.
          if ($LONGTRANSACTIONID) {
            $paiement->ext_payment_id = $LONGTRANSACTIONID;
          } else {
            $paiement->ext_payment_id = $TRANSACTIONID;
          }
          $paiement->ext_payment_site = $service;     // 'StripeLive' or 'Stripe', or ...
 
          if (!$error) {
            $paiement_id = $paiement->create($user, 1); // This include closing invoices and regenerating documents
            if ($paiement_id < 0) {
              $postactionmessages[] = $paiement->error.' '.implode("<br>\n", $paiement->errors);
              $ispostactionok = -1;
              $error++;
            } else {
              $postactionmessages[] = 'Payment created';
              $ispostactionok = 1;
            }
          }
 
          if (!$error && isModEnabled("bank")) {
            $bankaccountid = 0;
            if ($paymentmethod == 'paybox') {
              $bankaccountid = getDolGlobalString('PAYBOX_BANK_ACCOUNT_FOR_PAYMENTS');
            } elseif ($paymentmethod == 'paypal') {
              $bankaccountid = getDolGlobalString('PAYPAL_BANK_ACCOUNT_FOR_PAYMENTS');
            } elseif ($paymentmethod == 'stripe') {
              $bankaccountid = getDolGlobalString('STRIPE_BANK_ACCOUNT_FOR_PAYMENTS');
            }
 
            //Get bank account for a specific paymentmedthod
            $parameters = [
              'paymentmethod' => $paymentmethod,
            ];
            $reshook = $hookmanager->executeHooks('getBankAccountPaymentMethod', $parameters, $object, $action);
            if ($reshook >= 0) {
              if (isset($hookmanager->resArray['bankaccountid'])) {
                dol_syslog('bankaccountid overwrite by hook return with value='.$hookmanager->resArray['bankaccountid'], LOG_DEBUG, 0, '_payment');
                $bankaccountid = $hookmanager->resArray['bankaccountid'];
              }
            }
            if ($bankaccountid > 0) {
              $label = '(CustomerInvoicePayment)';
              if ($object->type == Facture::TYPE_CREDIT_NOTE) {
                $label = '(CustomerInvoicePaymentBack)'; // Refund of a credit note
              }
              $result = $paiement->addPaymentToBank($user, 'payment', $label, $bankaccountid, '', '');
              if ($result < 0) {
                $postactionmessages[] = $paiement->error.' '.implode("<br>\n", $paiement->errors);
                $ispostactionok = -1;
                $error++;
              } else {
                $postactionmessages[] = 'Bank transaction of payment created';
                $ispostactionok = 1;
              }
            } else {
              $postactionmessages[] = 'Setup of bank account to use in module '.$paymentmethod.' was not set. Your payment was really executed but we failed to record it. Please contact us.';
              $ispostactionok = -1;
              $error++;
            }
          }
 
          $attendeetovalidate = new ConferenceOrBoothAttendee($db);
 
          if (!$error) {
            // Validating the attendee
            $resultattendee = $attendeetovalidate->fetch((int) $tmptag['ATT']);
            if ($resultattendee < 0) {
              $error++;
              setEventMessages(null, $attendeetovalidate->errors, "errors");
            } else {
              $attendeetovalidate->validate($user);
 
              $attendeetovalidate->amount = $FinalPaymentAmt;
              $attendeetovalidate->date_subscription = dol_now();
              $attendeetovalidate->update($user);
            }
          }
 
          if (!$error) {
            $db->commit();
          } else {
            setEventMessages(null, $postactionmessages, 'warnings');
 
            $db->rollback();
          }
 
          if (! $error) {
            // Sending mail
            $thirdparty = new Societe($db);
            $resultthirdparty = $thirdparty->fetch($attendeetovalidate->fk_soc);
            if ($resultthirdparty < 0) {
              setEventMessages($thirdparty->error, $thirdparty->errors, "errors");
            } else {
              require_once DOL_DOCUMENT_ROOT.'/core/class/CMailFile.class.php';
              include_once DOL_DOCUMENT_ROOT.'/core/class/html.formmail.class.php';
              $formmail = new FormMail($db);
              // Set output language
              $outputlangs = new Translate('', $conf);
              $outputlangs->setDefaultLang(empty($thirdparty->default_lang) ? (string) $mysoc->default_lang : (string) $thirdparty->default_lang);
              // Load traductions files required by page
              $outputlangs->loadLangs(array("main", "members", "eventorganization"));
              // Get email content from template
              $arraydefaultmessage = null;
 
              $idoftemplatetouse = getDolGlobalInt('EVENTORGANIZATION_TEMPLATE_EMAIL_AFT_SUBS_EVENT');  // Email to send for Event organization registration
 
              if (!empty($idoftemplatetouse)) {
                $arraydefaultmessage = $formmail->getEMailTemplate($db, 'conferenceorbooth', $user, $outputlangs, $idoftemplatetouse, 1, '');
              }
 
              if (!empty($idoftemplatetouse) && is_object($arraydefaultmessage) && $arraydefaultmessage->id > 0) {
                $subject = $arraydefaultmessage->topic;
                $msg     = $arraydefaultmessage->content;
              } else {
                $subject = '['.$appli.'] '.$object->ref.' - '.$outputlangs->trans("NewRegistration");
                $msg = $outputlangs->trans("OrganizationEventPaymentOfRegistrationWasReceived");
              }
 
              $substitutionarray = getCommonSubstitutionArray($outputlangs, 0, null, $thirdparty);
              complete_substitutions_array($substitutionarray, $outputlangs, $object);
 
              $subjecttosend = make_substitutions($subject, $substitutionarray, $outputlangs);
              $texttosend = make_substitutions($msg, $substitutionarray, $outputlangs);
 
              $sendto = $attendeetovalidate->email;
              $cc = '';
              if ($thirdparty->email) {
                $cc = $thirdparty->email ?? '';
              }
              if ($attendeetovalidate->email_company && $attendeetovalidate->email_company != $thirdparty->email) {
                $cc = ($cc ? ', ' : '').$attendeetovalidate->email_company;
              }
 
              $from = getDolGlobalString('MAILING_EMAIL_FROM', getDolGlobalString("MAIN_MAIL_EMAIL_FROM"));
 
              $urlback = $_SERVER["REQUEST_URI"];
 
              $ishtml = dol_textishtml($texttosend); // May contain urls
 
              // Attach a file ?
              $file = '';
              $listofpaths = array();
              $listofnames = array();
              $listofmimes = array();
              if (is_object($object)) {
                $invoicediroutput = $conf->facture->dir_output;
                $fileparams = dol_most_recent_file($invoicediroutput.'/'.$object->ref, preg_quote($object->ref, '/').'[^\-]+');
                $file = $fileparams['fullname'];
 
                $listofpaths = array($file);
                $listofnames = array(basename($file));
                $listofmimes = array(dol_mimetype($file));
              }
 
              $trackid = 'inv'.$object->id;
 
              $mailfile = new CMailFile($subjecttosend, $sendto, $from, $texttosend, $listofpaths, $listofmimes, $listofnames, $cc, '', 0, ($ishtml ? 1 : 0), '', '', $trackid, '', 'standard');
 
              $result = $mailfile->sendfile();
              if ($result) {
                dol_syslog("EMail sent to ".$sendto, LOG_DEBUG, 0, '_payment');
              } else {
                dol_syslog("Failed to send EMail to ".$sendto.' - '.$mailfile->error, LOG_ERR, 0, '_payment');
              }
            }
          }
        }
      } else {
        $postactionmessages[] = 'Failed to get a valid value for "amount paid" ('.$FinalPaymentAmt.') or "payment type id" ('.$paymentTypeId.') to record the payment of invoice '.$tmptag['ATT'].'. May be payment was already recorded.';
        $ispostactionok = -1;
      }
    } else {
      $postactionmessages[] = 'Invoice paid '.$tmptag['ATT'].' was not found';
      $ispostactionok = -1;
    }
  } elseif (array_key_exists('BOO', $tmptag) && $tmptag['BOO'] > 0) {
    // Record payment for booth or conference
    require_once DOL_DOCUMENT_ROOT.'/eventorganization/class/conferenceorboothattendee.class.php';
    require_once DOL_DOCUMENT_ROOT.'/eventorganization/class/conferenceorbooth.class.php';
    include_once DOL_DOCUMENT_ROOT.'/compta/facture/class/facture.class.php';
    $object = new Facture($db);
    $result = $object->fetch((int) $ref);  // @phan-suppress-current-line PhanPluginSuspiciousParamPosition
    if ($result) {
      $FinalPaymentAmt = $_SESSION["FinalPaymentAmt"];
 
      $paymentTypeId = 0;
      if ($paymentmethod == 'paybox') {
        $paymentTypeId = getDolGlobalInt('PAYBOX_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'paypal') {
        $paymentTypeId = getDolGlobalInt('PAYPAL_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'stripe') {
        $paymentTypeId = getDolGlobalInt('STRIPE_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if (empty($paymentTypeId)) {
        dol_syslog("paymentType = ".$paymentType, LOG_DEBUG, 0, '_payment');
 
        if (empty($paymentType)) {
          $paymentType = 'CB';
        }
        // May return nothing when paymentType means nothing
        // (for example when paymentType is 'Mark', 'Sole', 'Sale', for paypal)
        $paymentTypeId = dol_getIdFromCode($db, $paymentType, 'c_paiement', 'code', 'id', 1);
 
        // If previous line has returned nothing, we force to get the ID of payment of Credit Card (hard coded code 'CB').
        if (empty($paymentTypeId) || $paymentTypeId < 0) {
          $paymentTypeId = dol_getIdFromCode($db, 'CB', 'c_paiement', 'code', 'id', 1);
        }
      }
 
      // Do action only if $FinalPaymentAmt is set (session variable is cleaned after this page to avoid duplicate actions when page is POST a second time)
      if (!empty($FinalPaymentAmt) && $paymentTypeId > 0) {
        $resultvalidate = $object->validate($user);
        if ($resultvalidate < 0) {
          $postactionmessages[] = 'Cannot validate invoice';
          $ispostactionok = -1;
          $error++; // Not yet supported
        } else {
          $db->begin();
 
          // Creation of payment line
          include_once DOL_DOCUMENT_ROOT.'/compta/paiement/class/paiement.class.php';
          $paiement = new Paiement($db);
          $paiement->datepaye = $now;
          if ($currencyCodeType == $conf->currency) {
            $paiement->amounts = array($object->id => $FinalPaymentAmt); // Array with all payments dispatching with invoice id
          } else {
            $paiement->multicurrency_amounts = array($object->id => $FinalPaymentAmt); // Array with all payments dispatching
 
            $postactionmessages[] = 'Payment was done in a currency ('.$currencyCodeType.') other than the expected currency of company ('.$conf->currency.')';
            $ispostactionok = -1;
            $error++; // Not yet supported
          }
          $paiement->paiementid   = $paymentTypeId;
          $paiement->num_payment = '';
          $paiement->note_public  = 'Online payment '.dol_print_date($now, 'standard').' from '.$ipaddress;
 
          // May be we should store py_... instead of pi_... but we started with pi_... so we continue.
          if ($LONGTRANSACTIONID) {
            $paiement->ext_payment_id = $LONGTRANSACTIONID;
          } else {
            $paiement->ext_payment_id = $TRANSACTIONID;
          }
          $paiement->ext_payment_site = $service;     // 'StripeLive' or 'Stripe', or ...
 
          if (!$error) {
            $paiement_id = $paiement->create($user, 1); // This include closing invoices and regenerating documents
            if ($paiement_id < 0) {
              $postactionmessages[] = $paiement->error.' '.implode("<br>\n", $paiement->errors);
              $ispostactionok = -1;
              $error++;
            } else {
              $postactionmessages[] = 'Payment created';
              $ispostactionok = 1;
            }
          }
 
          if (!$error && isModEnabled("bank")) {
            $bankaccountid = 0;
            if ($paymentmethod == 'paybox') {
              $bankaccountid = getDolGlobalString('PAYBOX_BANK_ACCOUNT_FOR_PAYMENTS');
            } elseif ($paymentmethod == 'paypal') {
              $bankaccountid = getDolGlobalString('PAYPAL_BANK_ACCOUNT_FOR_PAYMENTS');
            } elseif ($paymentmethod == 'stripe') {
              $bankaccountid = getDolGlobalString('STRIPE_BANK_ACCOUNT_FOR_PAYMENTS');
            }
 
            //Get bank account for a specific paymentmedthod
            $parameters = [
              'paymentmethod' => $paymentmethod,
            ];
            $reshook = $hookmanager->executeHooks('getBankAccountPaymentMethod', $parameters, $object, $action);
            if ($reshook >= 0) {
              if (isset($hookmanager->resArray['bankaccountid'])) {
                dol_syslog('bankaccountid overwrite by hook return with value='.$hookmanager->resArray['bankaccountid'], LOG_DEBUG, 0, '_payment');
                $bankaccountid = $hookmanager->resArray['bankaccountid'];
              }
            }
            if ($bankaccountid > 0) {
              $label = '(CustomerInvoicePayment)';
              if ($object->type == Facture::TYPE_CREDIT_NOTE) {
                $label = '(CustomerInvoicePaymentBack)'; // Refund of a credit note
              }
              $result = $paiement->addPaymentToBank($user, 'payment', $label, $bankaccountid, '', '');
              if ($result < 0) {
                $postactionmessages[] = $paiement->error.' '.implode("<br>\n", $paiement->errors);
                $ispostactionok = -1;
                $error++;
              } else {
                $postactionmessages[] = 'Bank transaction of payment created';
                $ispostactionok = 1;
              }
            } else {
              $postactionmessages[] = 'Setup of bank account to use in module '.$paymentmethod.' was not set. Your payment was really executed but we failed to record it. Please contact us.';
              $ispostactionok = -1;
              $error++;
            }
          }
 
          if (!$error) {
            // Putting the booth to "suggested" state
            require_once DOL_DOCUMENT_ROOT.'/eventorganization/class/conferenceorboothattendee.class.php';
            require_once DOL_DOCUMENT_ROOT.'/eventorganization/class/conferenceorbooth.class.php';
            $booth = new ConferenceOrBooth($db);
            $resultbooth = $booth->fetch((int) $tmptag['BOO']);
            if ($resultbooth < 0) {
              $error++;
              setEventMessages(null, $booth->errors, "errors");
            } else {
              $booth->status = ConferenceOrBooth::STATUS_SUGGESTED;
              $resultboothupdate = $booth->update($user);
              if ($resultboothupdate < 0) {
                // Finding the third party by getting the invoice
                $invoice = new Facture($db);
                $resultinvoice = $invoice->fetch((int) $ref);  // @phan-suppress-current-line PhanPluginSuspiciousParamPosition
                if ($resultinvoice < 0) {
                  $postactionmessages[] = 'Could not find the associated invoice.';
                  $ispostactionok = -1;
                  $error++;
                } else {
                  $thirdparty = new Societe($db);
                  $resultthirdparty = $thirdparty->fetch($invoice->socid);
                  if ($resultthirdparty < 0) {
                    $error++;
                    setEventMessages(null, $thirdparty->errors, "errors");
                  } else {
                    // TODO Move the send of email out of the db transaction
 
                    // Sending mail
                    require_once DOL_DOCUMENT_ROOT.'/core/class/CMailFile.class.php';
                    include_once DOL_DOCUMENT_ROOT.'/core/class/html.formmail.class.php';
                    $formmail = new FormMail($db);
                    // Set output language
                    $outputlangs = new Translate('', $conf);
                    $outputlangs->setDefaultLang(empty($thirdparty->default_lang) ? $mysoc->default_lang : $thirdparty->default_lang);
                    // Load traductions files required by page
                    $outputlangs->loadLangs(array("main", "members", "eventorganization"));
                    // Get email content from template
                    $arraydefaultmessage = null;
 
                    $idoftemplatetouse = getDolGlobalInt('EVENTORGANIZATION_TEMPLATE_EMAIL_AFT_SUBS_BOOTH');  // Email sent after registration for a Booth
 
                    if (!empty($idoftemplatetouse)) {
                      $arraydefaultmessage = $formmail->getEMailTemplate($db, 'conferenceorbooth', $user, $outputlangs, $idoftemplatetouse, 1, '');
                    }
 
                    if (!empty($idoftemplatetouse) && is_object($arraydefaultmessage) && $arraydefaultmessage->id > 0) {
                      $subject = $arraydefaultmessage->topic;
                      $msg     = $arraydefaultmessage->content;
                    } else {
                      $subject = '['.$appli.'] '.$booth->ref.' - '.$outputlangs->trans("NewRegistration").']';
                      $msg = $outputlangs->trans("OrganizationEventPaymentOfBoothWasReceived");
                    }
 
                    $substitutionarray = getCommonSubstitutionArray($outputlangs, 0, null, $thirdparty);
                    complete_substitutions_array($substitutionarray, $outputlangs, $object);
 
                    $subjecttosend = make_substitutions($subject, $substitutionarray, $outputlangs);
                    $texttosend = make_substitutions($msg, $substitutionarray, $outputlangs);
 
                    $sendto = $thirdparty->email;
                    $from = getDolGlobalString('MAILING_EMAIL_FROM');
                    $urlback = $_SERVER["REQUEST_URI"];
 
                    $ishtml = dol_textishtml($texttosend); // May contain urls
                    $trackid = 'inv'.$invoice->id;
 
                    $mailfile = new CMailFile($subjecttosend, $sendto, $from, $texttosend, array(), array(), array(), '', '', 0, $ishtml ? 1 : 0, '', '', $trackid, '', 'standard');
 
                    $result = $mailfile->sendfile();
                    if ($result) {
                      dol_syslog("EMail sent to ".$sendto, LOG_DEBUG, 0, '_payment');
                    } else {
                      dol_syslog("Failed to send EMail to ".$sendto, LOG_ERR, 0, '_payment');
                    }
                  }
                }
              }
            }
          }
 
          if (!$error) {
            $db->commit();
          } else {
            $db->rollback();
          }
        }
      } else {
        $postactionmessages[] = 'Failed to get a valid value for "amount paid" ('.$FinalPaymentAmt.') or "payment type id" ('.$paymentTypeId.') to record the payment of invoice '.$tmptag['ATT'].'. May be payment was already recorded.';
        $ispostactionok = -1;
      }
    } else {
      $postactionmessages[] = 'Invoice paid '.$tmptag['ATT'].' was not found';
      $ispostactionok = -1;
    }
  } elseif (array_key_exists('CON', $tmptag) && $tmptag['CON'] > 0) {
    include_once DOL_DOCUMENT_ROOT . '/contrat/class/contrat.class.php';
    $object = new Contrat($db);
    $result = $object->fetch((int) $tmptag['CON']);
    if ($result) {
      $FinalPaymentAmt = $_SESSION["FinalPaymentAmt"];
 
      $paymentTypeId = 0;
      if ($paymentmethod == 'paybox') {
        $paymentTypeId = getDolGlobalInt('PAYBOX_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'paypal') {
        $paymentTypeId = getDolGlobalInt('PAYPAL_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if ($paymentmethod == 'stripe') {
        $paymentTypeId = getDolGlobalInt('STRIPE_PAYMENT_MODE_FOR_PAYMENTS');
      }
      if (empty($paymentTypeId)) {
        dol_syslog("paymentType = ".$paymentType, LOG_DEBUG, 0, '_payment');
 
        if (empty($paymentType)) {
          $paymentType = 'CB';
        }
        // May return nothing when paymentType means nothing
        // (for example when paymentType is 'Mark', 'Sole', 'Sale', for paypal)
        $paymentTypeId = dol_getIdFromCode($db, $paymentType, 'c_paiement', 'code', 'id', 1);
 
        // If previous line has returned nothing, we force to get the ID of payment of Credit Card (hard coded code 'CB').
        if (empty($paymentTypeId) || $paymentTypeId < 0) {
          $paymentTypeId = dol_getIdFromCode($db, 'CB', 'c_paiement', 'code', 'id', 1);
        }
      }
 
      $currencyCodeType = $_SESSION['currencyCodeType'];
      $contract_lines = (array_key_exists('COL', $tmptag) && $tmptag['COL'] > 0) ? $tmptag['COL'] : null;
 
      // Do action only if $FinalPaymentAmt is set (session variable is cleaned after this page to avoid duplicate actions when page is POST a second time)
      if (isModEnabled('invoice')) {
        if (!empty($FinalPaymentAmt) && $paymentTypeId > 0) {
          $db->begin();
 
          include_once DOL_DOCUMENT_ROOT . '/compta/facture/class/facture.class.php';
          $invoice = new Facture($db);
          $result = $invoice->createFromContract($object, $user, array((int) $contract_lines));
          if ($result > 0) {
            // $object->classifyBilled($user);
            $invoice->validate($user);
            // Creation of payment line
            include_once DOL_DOCUMENT_ROOT . '/compta/paiement/class/paiement.class.php';
            $paiement = new Paiement($db);
            $paiement->datepaye = $now;
            if ($currencyCodeType == $conf->currency) {
              $paiement->amounts = array($invoice->id => $FinalPaymentAmt); // Array with all payments dispatching with invoice id
            } else {
              $paiement->multicurrency_amounts = array($invoice->id => $FinalPaymentAmt); // Array with all payments dispatching
 
              $postactionmessages[] = 'Payment was done in a currency ('.$currencyCodeType.') other than the expected currency of company ('.$conf->currency.')';
              $ispostactionok = -1;
              $error++;
            }
            $paiement->paiementid = $paymentTypeId;
            $paiement->num_payment = '';
            $paiement->note_public = 'Online payment ' . dol_print_date($now, 'standard') . ' from ' . $ipaddress;
 
            // May be we should store py_... instead of pi_... but we started with pi_... so we continue.
            if ($LONGTRANSACTIONID) {
              $paiement->ext_payment_id = $LONGTRANSACTIONID;
            } else {
              $paiement->ext_payment_id = $TRANSACTIONID;
            }
            $paiement->ext_payment_site = $service;     // 'StripeLive' or 'Stripe', or ...
 
            if (!$error) {
              $paiement_id = $paiement->create($user, 1); // This include closing invoices and regenerating documents
              if ($paiement_id < 0) {
                $postactionmessages[] = $paiement->error . ' ' . implode("<br>\n", $paiement->errors);
                $ispostactionok = -1;
                $error++;
              } else {
                $postactionmessages[] = 'Payment created';
                $ispostactionok = 1;
              }
            }
 
            if (!$error && isModEnabled("bank")) {
              $bankaccountid = 0;
              if ($paymentmethod == 'paybox') {
                $bankaccountid = getDolGlobalString('PAYBOX_BANK_ACCOUNT_FOR_PAYMENTS');
              } elseif ($paymentmethod == 'paypal') {
                $bankaccountid = getDolGlobalString('PAYPAL_BANK_ACCOUNT_FOR_PAYMENTS');
              } elseif ($paymentmethod == 'stripe') {
                $bankaccountid = getDolGlobalString('STRIPE_BANK_ACCOUNT_FOR_PAYMENTS');
              }
 
              //Get bank account for a specific paymentmedthod
              $parameters = [
                'paymentmethod' => $paymentmethod,
              ];
              $reshook = $hookmanager->executeHooks('getBankAccountPaymentMethod', $parameters, $object, $action);
              if ($reshook >= 0) {
                if (isset($hookmanager->resArray['bankaccountid'])) {
                  dol_syslog('bankaccountid overwrite by hook return with value='.$hookmanager->resArray['bankaccountid'], LOG_DEBUG, 0, '_payment');
                  $bankaccountid = $hookmanager->resArray['bankaccountid'];
                }
              }
              if ($bankaccountid > 0) {
                $label = '(CustomerInvoicePayment)';
                if ($invoice->type == Facture::TYPE_CREDIT_NOTE) {
                  $label = '(CustomerInvoicePaymentBack)'; // Refund of a credit note
                }
                $result = $paiement->addPaymentToBank($user, 'payment', $label, $bankaccountid, '', '');
                if ($result < 0) {
                  $postactionmessages[] = $paiement->error . ' ' . implode("<br>\n", $paiement->errors);
                  $ispostactionok = -1;
                  $error++;
                } else {
                  $postactionmessages[] = 'Bank transaction of payment created';
                  $ispostactionok = 1;
                }
              } else {
                $postactionmessages[] = 'Setup of bank account to use in module ' . $paymentmethod . ' was not set. No way to record the payment.';
                $ispostactionok = -1;
                $error++;
              }
            }
          } else {
            $msg = 'Failed to create invoice form contract ' . $tmptag['CON'];
            if (!empty($tmptag['COL'])) {
              $msg .= ' and col '. $tmptag['COL'] .'.';
            }
            $postactionmessages[] = $msg;
            $ispostactionok = -1;
            $error++;
          }
 
          if (!$error) {
            $db->commit();
          } else {
            $db->rollback();
          }
        } else {
          $postactionmessages[] = 'Failed to get a valid value for "amount paid" (' . $FinalPaymentAmt . ') or "payment type id" (' . $paymentTypeId . ') to record the payment of contract ' . $tmptag['CON'] .'. Maybe payment was already recorded.';
          $ispostactionok = -1;
        }
      } else {
        $postactionmessages[] = 'Invoice module is not enable';
        $ispostactionok = -1;
      }
    } else {
      $msg = 'Contract paid ' . $tmptag['CON'] . ' was not found';
      if (!empty($tmptag['COL'])) {
        $msg .= ' for col '.$tmptag['COL'] .'.';
      }
      $postactionmessages[] = $msg;
      $ispostactionok = -1;
    }
  } else {
    // Nothing done
  }
}
 
dol_syslog("ispaymentok=".$ispaymentok." ispostactionok=".$ispostactionok." doactionsthenredirect=".$doactionsthenredirect, LOG_DEBUG, 0, '_payment');
 
if ($ispaymentok) {
  // Get on url call
  $onlinetoken        = empty($PAYPALTOKEN) ? $_SESSION['onlinetoken'] : $PAYPALTOKEN;
  $payerID            = empty($PAYPALPAYERID) ? $_SESSION['payerID'] : $PAYPALPAYERID;
  // Set by newpayment.php
  $currencyCodeType   = empty($_SESSION['currencyCodeType']) ? '' : $_SESSION['currencyCodeType'];
  $FinalPaymentAmt    = empty($_SESSION["FinalPaymentAmt"]) ? '' : $_SESSION["FinalPaymentAmt"];
  $paymentType        = empty($_SESSION['PaymentType']) ? '' : $_SESSION['PaymentType'];  // Seems used by paypal only
 
  if (is_object($object) && method_exists($object, 'call_trigger')) {
    '@phan-var-force CommonObject $object';
    // Call trigger
    $result = $object->call_trigger('PAYMENTONLINE_PAYMENT_OK', $user);
    if ($result < 0) {
      $error++;
    }
    // End call triggers
  } elseif (get_class($object) == 'stdClass') {
    //In some cases $object is not instantiated (for payment on custom object) We need to deal with payment
    include_once DOL_DOCUMENT_ROOT.'/compta/paiement/class/paiement.class.php';
    $paiement = new Paiement($db);
    $result = $paiement->call_trigger('PAYMENTONLINE_PAYMENT_OK', $user);
    if ($result < 0) {
      $error++;
    }
  }
}
 
 
// Show result message
if (empty($doactionsthenredirect)) {
  if ($ispaymentok) {
    print $langs->trans("YourPaymentHasBeenRecorded")."<br>\n";
    if ($TRANSACTIONID) {
      print $langs->trans("ThisIsTransactionId")." : ".$TRANSACTIONID."<br><br>\n";
    }
 
    print '<center>';
    print img_picto('', 'tick', 'class="green fa-2x"');
    print '</center>';
 
    // Show a custom message
    $key = 'ONLINE_PAYMENT_MESSAGE_OK';
    if (getDolGlobalString($key)) {
      print '<br>';
      print getDolGlobalString($key);
    }
  } else {
    print $langs->trans('DoExpressCheckoutPaymentAPICallFailed')."<br>\n";
    if ($ErrorLongMsg) {
      print $langs->trans('DetailedErrorMessage').": ".$ErrorLongMsg."<br>\n";
    }
    if ($ErrorShortMsg) {
      print $langs->trans('ShortErrorMessage').": ".$ErrorShortMsg."<br>\n";
    }
    if ($ErrorCode) {
      print $langs->trans('ErrorCode').": ".$ErrorCode."<br>\n";
    }
    if ($ErrorSeverityCode) {
      print $langs->trans('ErrorSeverityCode').": ".$ErrorSeverityCode."<br>\n";
    }
 
    if ($mysoc->email) {
      print "\nPlease, send a screenshot of this page to ".$mysoc->email."<br>\n";
    }
  }
}
 
 
// Send email
if ($ispaymentok) {
  $sendemail = getDolGlobalString('ONLINE_PAYMENT_SENDEMAIL');
 
  $tmptag = dolExplodeIntoArray($fulltag, '.', '=');
 
  dol_syslog("Send email to admins if we have to (sendemail = ".$sendemail.")", LOG_DEBUG, 0, '_payment');
 
  // Send an email to the admins
  if ($sendemail) {
    // Get default language to use for the company for supervision emails
    $myCompanyDefaultLang = (string) $mysoc->default_lang;
    if (empty($myCompanyDefaultLang) || $myCompanyDefaultLang === 'auto') {
      // We must guess the language from the company country. We must not use the language of the visitor. This is a technical email for supervision
      // so it must always be into the same language.
      $myCompanyDefaultLang = (string) getLanguageCodeFromCountryCode($mysoc->country_code);
    }
 
    $companylangs = new Translate('', $conf);
    $companylangs->setDefaultLang($myCompanyDefaultLang);
    $companylangs->loadLangs(array('main', 'members', 'bills', 'paypal', 'paybox', 'stripe'));
 
    $sendto = $sendemail;
    $from = getDolGlobalString('MAIN_MAIL_EMAIL_FROM');
    // Define $urlwithroot
    $urlwithouturlroot = preg_replace('/'.preg_quote(DOL_URL_ROOT, '/').'$/i', '', trim($dolibarr_main_url_root));
    $urlwithroot = $urlwithouturlroot.DOL_URL_ROOT; // This is to use external domain name found into config file
    //$urlwithroot=DOL_MAIN_URL_ROOT;         // This is to use same domain name than current
 
    // Define link to login card
 
    $urlback = $_SERVER["REQUEST_URI"];
    $topic = '['.$appli.'] '.$companylangs->transnoentitiesnoconv("NewOnlinePaymentReceived");
    $content = "";
    if (array_key_exists('MEM', $tmptag)) {
      $url = $urlwithroot."/adherents/subscription.php?rowid=".((int) $tmptag['MEM']);
      $content .= '<strong>'.$companylangs->transnoentitiesnoconv("PaymentSubscription")."</strong><br><br>\n";
      $content .= $companylangs->transnoentitiesnoconv("MemberId").': <strong>'.$tmptag['MEM']."</strong><br>\n";
      $content .= $companylangs->transnoentitiesnoconv("Link").': <a href="'.$url.'">'.$url.'</a>'."<br>\n";
    } elseif (array_key_exists('INV', $tmptag)) {
      $url = $urlwithroot."/compta/facture/card.php?id=".((int) $tmptag['INV']);
      $content .= '<strong>'.$companylangs->transnoentitiesnoconv("Payment")."</strong><br><br>\n";
      $content .= $companylangs->transnoentitiesnoconv("InvoiceId").': <strong>'.$tmptag['INV']."</strong><br>\n";
      //$content.=$companylangs->trans("ThirdPartyId").': '.$tmptag['CUS']."<br>\n";
      $content .= $companylangs->transnoentitiesnoconv("Link").': <a href="'.$url.'">'.$url.'</a>'."<br>\n";
    } else {
      $content .= $companylangs->transnoentitiesnoconv("NewOnlinePaymentReceived")."<br>\n";
    }
    $content .= $companylangs->transnoentitiesnoconv("PostActionAfterPayment").' : ';
    if ($ispostactionok > 0) {
      //$topic.=' ('.$companylangs->transnoentitiesnoconv("Status").' '.$companylangs->transnoentitiesnoconv("OK").')';
      $content .= '<span style="color: green">'.$companylangs->transnoentitiesnoconv("OK").'</span>';
    } elseif ($ispostactionok == 0) {
      $content .= $companylangs->transnoentitiesnoconv("None");
    } else {
      $topic .= ($ispostactionok ? '' : ' ('.$companylangs->trans("WarningPostActionErrorAfterPayment").')');
      $content .= '<span class="star">'.$companylangs->transnoentitiesnoconv("Error").'</span>';
    }
    $content .= '<br>'."\n";
    foreach ($postactionmessages as $postactionmessage) {
      $content .= ' * '.$postactionmessage.'<br>'."\n";
    }
    if ($ispostactionok < 0) {
      $content .= $langs->transnoentitiesnoconv("ARollbackWasPerformedOnPostActions");
    }
    $content .= '<br>'."\n";
 
    $content .= "<br>\n";
    $content .= '<u>'.$companylangs->transnoentitiesnoconv("TechnicalInformation").":</u><br>\n";
    $content .= $companylangs->transnoentitiesnoconv("OnlinePaymentSystem").': <strong>'.$paymentmethod."</strong><br>\n";
    $content .= $companylangs->transnoentitiesnoconv("ThisIsTransactionId").': <strong>'.$TRANSACTIONID."</strong><br>\n";
    $content .= $companylangs->transnoentitiesnoconv("ReturnURLAfterPayment").': '.$urlback."<br>\n";
    $content .= "<br>\n";
    $content .= "tag=".$fulltag."<br>\ntoken=".$onlinetoken."<br>\npaymentType=".$paymentType."<br>\ncurrencycodeType=".$currencyCodeType."<br>\npayerId=".$payerID."<br>\nipaddress=".$ipaddress."<br>\nFinalPaymentAmt=".$FinalPaymentAmt."<br>\n";
 
    if (!empty($ErrorCode)) {
      $content .= "ErrorCode = ".$ErrorCode."<br>\n";
    }
    if (!empty($ErrorShortMsg)) {
      $content .= "ErrorShortMsg = ".$ErrorShortMsg."<br>\n";
    }
    if (!empty($ErrorLongMsg)) {
      $content .= "ErrorLongMsg = ".$ErrorLongMsg."<br>\n";
    }
    if (!empty($ErrorSeverityCode)) {
      $content .= "ErrorSeverityCode = ".$ErrorSeverityCode."<br>\n";
    }
 
    dol_syslog("Content of email: ".$content, LOG_DEBUG, 0, '_payment');
 
    $ishtml = dol_textishtml($content); // May contain urls
    $trackid = '';
 
    require_once DOL_DOCUMENT_ROOT.'/core/class/CMailFile.class.php';
    $mailfile = new CMailFile($topic, $sendto, $from, $content, array(), array(), array(), '', '', 0, $ishtml ? 1 : 0, '', '', $trackid, '', 'standard');
 
    $result = $mailfile->sendfile();
    if ($result) {
      dol_syslog("EMail sent to ".$sendto, LOG_DEBUG, 0, '_payment');
      //dol_syslog("EMail sent to ".$sendto, LOG_DEBUG, 0);
    } else {
      dol_syslog("Failed to send EMail to ".$sendto, LOG_ERR, 0, '_payment');
      //dol_syslog("Failed to send EMail to ".$sendto, LOG_ERR, 0);
    }
  }
} else {
  $sendemail = getDolGlobalString('ONLINE_PAYMENT_SENDEMAIL');
 
  // Get on url call
  $onlinetoken = empty($PAYPALTOKEN) ? $_SESSION['onlinetoken'] : $PAYPALTOKEN;
  $payerID            = empty($PAYPALPAYERID) ? $_SESSION['payerID'] : $PAYPALPAYERID;
  // Set by newpayment.php
  $paymentType        = $_SESSION['PaymentType'];
  $currencyCodeType   = $_SESSION['currencyCodeType'];
  $FinalPaymentAmt    = $_SESSION["FinalPaymentAmt"];
 
  if (is_object($object) && method_exists($object, 'call_trigger')) {
    // Call trigger
    $result = $object->call_trigger('PAYMENTONLINE_PAYMENT_KO', $user);
    if ($result < 0) {
      $error++;
    }
    // End call triggers
  }
 
  // Send warning of error to administrator
  if ($sendemail) {
    $companylangs = new Translate('', $conf);
    $companylangs->setDefaultLang($mysoc->default_lang);
    $companylangs->loadLangs(array('main', 'members', 'bills', 'paypal', 'paybox', 'stripe'));
 
    $sendto = $sendemail;
    $from = getDolGlobalString('MAILING_EMAIL_FROM', getDolGlobalString("MAIN_MAIL_EMAIL_FROM"));
    // Define $urlwithroot
    $urlwithouturlroot = preg_replace('/'.preg_quote(DOL_URL_ROOT, '/').'$/i', '', trim($dolibarr_main_url_root));
    $urlwithroot = $urlwithouturlroot.DOL_URL_ROOT; // This is to use external domain name found into config file
    //$urlwithroot=DOL_MAIN_URL_ROOT;         // This is to use same domain name than current
 
    $urlback = $_SERVER["REQUEST_URI"];
    $topic = '['.$appli.'] '.$companylangs->transnoentitiesnoconv("ValidationOfPaymentFailed");
    $content = "";
    $content .= '<span style="color: orange">'.$companylangs->transnoentitiesnoconv("PaymentSystemConfirmPaymentPageWasCalledButFailed")."</span>\n";
 
    $content .= "<br><br>\n";
    $content .= '<u>'.$companylangs->transnoentitiesnoconv("TechnicalInformation").":</u><br>\n";
    $content .= $companylangs->transnoentitiesnoconv("OnlinePaymentSystem").': <strong>'.$paymentmethod."</strong><br>\n";
    $content .= $companylangs->transnoentitiesnoconv("ReturnURLAfterPayment").': '.$urlback."<br>\n";
    $content .= "<br>\n";
    $content .= "tag=".$fulltag."<br>\ntoken=".$onlinetoken."<br>\npaymentType=".$paymentType."<br>\ncurrencycodeType=".$currencyCodeType."<br>\npayerId=".$payerID."<br>\nipaddress=".$ipaddress."<br>\nFinalPaymentAmt=".$FinalPaymentAmt."<br>\n";
 
 
    $ishtml = dol_textishtml($content); // May contain urls
    $trackid = '';
 
    require_once DOL_DOCUMENT_ROOT.'/core/class/CMailFile.class.php';
    $mailfile = new CMailFile($topic, $sendto, $from, $content, array(), array(), array(), '', '', 0, $ishtml ? 1 : 0, '', '', $trackid, '', 'standard');
 
    $result = $mailfile->sendfile();
    if ($result) {
      dol_syslog("EMail sent to ".$sendto, LOG_DEBUG, 0, '_payment');
    } else {
      dol_syslog("Failed to send EMail to ".$sendto, LOG_ERR, 0, '_payment');
    }
  }
}
 
 
// Clean session variables to avoid duplicate actions if post is resent
unset($_SESSION["FinalPaymentAmt"]);
unset($_SESSION["TRANSACTIONID"]);
 
 
// Close page content id="dolpaymentdiv"
if (empty($doactionsthenredirect)) {
  print "\n</div>\n";
 
  print "<!-- Info for payment: FinalPaymentAmt=".dol_escape_htmltag($FinalPaymentAmt)." paymentTypeId=".dol_escape_htmltag((string) $paymentTypeId)." currencyCodeType=".dol_escape_htmltag($currencyCodeType)." -->\n";
}
 
 
// Show footer
if (empty($doactionsthenredirect)) {
  htmlPrintOnlineFooter($mysoc, $langs, 0, $suffix);
 
  llxFooter('', 'public');
}
 
 
$db->close();
 
 
// If option to do a redirect somewhere else.
if (!empty($doactionsthenredirect)) {
  if ($ispaymentok) {
    // Redirect to a success page
    $randomseckey = getRandomPassword(true, null, 20);
    $_SESSION['paymentoksessioncode'] = $randomseckey;    // key propagated between paymentok.php to another page like a paymentok of the website.
 
    // Paymentok page must be created for the specific website
    if (!defined('USEDOLIBARRSERVER') && !empty($ws_virtuelhost)) {
      $ext_urlok = $ws_virtuelhost . '/paymentok.php?paymentoksessioncode='.urlencode($randomseckey).'&fulltag='.$FULLTAG;
    } else {
      $ext_urlok = DOL_URL_ROOT.'/public/website/index.php?paymentoksessioncode='.urlencode($randomseckey).'&website='.urlencode($ws).'&pageref=paymentok&fulltag='.$FULLTAG;
    }
 
    dol_syslog("Now do a redirect using a Location: ".$ext_urlok, LOG_DEBUG, 0, '_payment');
    header("Location: ".$ext_urlok);
    exit;
  } else {
    // Redirect to an error page
    $randomseckey = getRandomPassword(true, null, 20);
    $_SESSION['paymentkosessioncode'] = $randomseckey;    // key propagated between paymentok.php to another page like a paymentko of the website.
 
    // Paymentko page must be created for the specific website
    if (!defined('USEDOLIBARRSERVER') && !empty($ws_virtuelhost)) {
      $ext_urlko = $ws_virtuelhost . '/paymentko.php?paymentkosessioncode='.urlencode($randomseckey).'&fulltag='.$FULLTAG;
    } else {
      $ext_urlko = DOL_URL_ROOT.'/public/website/index.php?paymentkosessioncode='.urlencode($randomseckey).'&website='.urlencode($ws).'&pageref=paymentko&fulltag='.$FULLTAG;
    }
 
    dol_syslog("Now do a redirect using a Location:".$ext_urlko, LOG_DEBUG, 0, '_payment');
    header("Location: ".$ext_urlko);
    exit;
  }
}