This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace PayumTW\Ecpay; |
||
4 | |||
5 | use ECPay_DeviceType; |
||
6 | use ECPay_InvoiceState; |
||
7 | use PayumTW\Ecpay\Sdk\AllInOne; |
||
8 | use Http\Message\MessageFactory; |
||
9 | use Payum\Core\HttpClientInterface; |
||
10 | |||
11 | class EcpayApi extends Api |
||
12 | { |
||
13 | /** |
||
14 | * $client. |
||
15 | * |
||
16 | * @var \Payum\Core\HttpClientInterface |
||
17 | */ |
||
18 | protected $client; |
||
19 | |||
20 | /** |
||
21 | * MessageFactory. |
||
22 | * |
||
23 | * @var \Http\Message\MessageFactory |
||
24 | */ |
||
25 | protected $messageFactory; |
||
26 | |||
27 | /** |
||
28 | * $options. |
||
29 | * |
||
30 | * @var array |
||
31 | */ |
||
32 | protected $options = []; |
||
33 | |||
34 | /** |
||
35 | * $sdk. |
||
36 | * |
||
37 | * @var \PayumTW\Ecpay\Sdk\AllInOne |
||
38 | */ |
||
39 | protected $sdk; |
||
40 | |||
41 | /** |
||
42 | * @param array $options |
||
43 | * @param \Payum\Core\HttpClientInterface $client |
||
44 | * @param \Http\Message\MessageFactory $messageFactory |
||
45 | * @param \PayumTW\Ecpay\Sdk\AllInOne $sdk |
||
46 | * |
||
47 | * @throws \Payum\Core\Exception\InvalidArgumentException if an option is invalid |
||
48 | */ |
||
49 | 5 | View Code Duplication | public function __construct(array $options, HttpClientInterface $client, MessageFactory $messageFactory, AllInOne $sdk = null) |
50 | { |
||
51 | 5 | $this->options = $options; |
|
52 | 5 | $this->client = $client; |
|
53 | 5 | $this->messageFactory = $messageFactory; |
|
54 | 5 | $this->sdk = $sdk ?: new AllInOne(); |
|
55 | 5 | $this->sdk->HashKey = $this->options['HashKey']; |
|
56 | 5 | $this->sdk->HashIV = $this->options['HashIV']; |
|
57 | 5 | $this->sdk->MerchantID = $this->options['MerchantID']; |
|
58 | 5 | } |
|
59 | |||
60 | /** |
||
61 | * getApiEndpoint. |
||
62 | * |
||
63 | * @return string |
||
64 | */ |
||
65 | 4 | public function getApiEndpoint($name = 'AioCheckOut') |
|
66 | { |
||
67 | $map = [ |
||
68 | 4 | 'AioCheckOut' => 'https://payment.ecpay.com.tw/Cashier/AioCheckOut/V2 ', |
|
69 | 4 | 'QueryTradeInfo' => 'https://payment.ecpay.com.tw/Cashier/QueryTradeInfo/V2', |
|
70 | 4 | 'QueryPeriodCreditCardTradeInfo' => 'https://payment.ecpay.com.tw/Cashier/QueryCreditCardPeriodInfo', |
|
71 | 4 | 'DoAction' => 'https://payment.ecpay.com.tw/CreditDetail/DoAction', |
|
72 | 4 | 'AioChargeback' => 'https://payment.ecpay.com.tw/Cashier/AioChargeback', |
|
73 | 4 | ]; |
|
74 | |||
75 | 4 | if ($this->options['sandbox'] === true) { |
|
76 | $map = [ |
||
77 | 'AioCheckOut' => 'https://payment-stage.ecpay.com.tw/Cashier/AioCheckOut/V2', |
||
78 | 'QueryTradeInfo' => 'https://payment-stage.ecpay.com.tw/Cashier/QueryTradeInfo/V2', |
||
79 | 'QueryPeriodCreditCardTradeInfo' => 'https://payment-stage.ecpay.com.tw/Cashier/QueryCreditCardPeriodInfo', |
||
80 | 'DoAction' => null, |
||
81 | 'AioChargeback' => 'https://payment-stage.ecpay.com.tw/Cashier/AioChargeback', |
||
82 | ]; |
||
83 | } |
||
84 | |||
85 | 4 | return $map[$name]; |
|
86 | } |
||
87 | |||
88 | /** |
||
89 | * createTransaction. |
||
90 | * |
||
91 | * @param array $params |
||
92 | * @return array |
||
93 | */ |
||
94 | 1 | public function createTransaction(array $params) |
|
95 | { |
||
96 | 1 | $this->sdk->ServiceURL = $this->getApiEndpoint('AioCheckOut'); |
|
97 | 1 | $this->sdk->Send['MerchantTradeDate'] = date('Y/m/d H:i:s'); |
|
98 | 1 | $this->sdk->Send['DeviceSource'] = $this->isMobile() ? ECPay_DeviceType::Mobile : ECPay_DeviceType::PC; |
|
99 | 1 | $this->sdk->Send = array_replace( |
|
0 ignored issues
–
show
|
|||
100 | 1 | $this->sdk->Send, |
|
101 | 1 | array_intersect_key($params, $this->sdk->Send) |
|
102 | 1 | ); |
|
103 | |||
104 | /* |
||
105 | * 電子發票參數 |
||
106 | * $sdk->Send['InvoiceMark'] = ECPay_InvoiceState::Yes; |
||
107 | * $sdk->SendExtend['RelateNumber'] = $MerchantTradeNo; |
||
108 | * $sdk->SendExtend['CustomerEmail'] = '[email protected]'; |
||
109 | * $sdk->SendExtend['CustomerPhone'] = '0911222333'; |
||
110 | * $sdk->SendExtend['TaxType'] = TaxType::Dutiable; |
||
111 | * $sdk->SendExtend['CustomerAddr'] = '台北市南港區三重路19-2號5樓D棟'; |
||
112 | * $sdk->SendExtend['InvoiceItems'] = array(); |
||
113 | * 將商品加入電子發票商品列表陣列 |
||
114 | * foreach ($sdk->Send['Items'] as $info) { |
||
115 | * array_push($sdk->SendExtend['InvoiceItems'],array('Name' => $info['Name'],'Count' => |
||
116 | * $info['Quantity'],'Word' => '個','Price' => $info['Price'],'TaxType' => TaxType::Dutiable)); |
||
117 | * } |
||
118 | * $sdk->SendExtend['InvoiceRemark'] = '測試發票備註'; |
||
119 | * $sdk->SendExtend['DelayDay'] = '0'; |
||
120 | * $sdk->SendExtend['InvType'] = InvType::General; |
||
121 | */ |
||
122 | |||
123 | 1 | return $this->sdk->formToArray( |
|
124 | 1 | $this->sdk->CheckOutString() |
|
125 | 1 | ); |
|
126 | } |
||
127 | |||
128 | /** |
||
129 | * cancelTransaction. |
||
130 | * |
||
131 | * @param array $params |
||
132 | * @return array |
||
133 | */ |
||
134 | 1 | View Code Duplication | public function cancelTransaction($params) |
135 | { |
||
136 | 1 | $this->sdk->ServiceURL = $this->getApiEndpoint('DoAction'); |
|
137 | 1 | $this->sdk->Action = array_replace( |
|
0 ignored issues
–
show
It seems like
array_replace($this->sdk...s, $this->sdk->Action)) of type array is incompatible with the declared type string of property $Action .
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property. Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property.. ![]() |
|||
138 | 1 | $this->sdk->Action, |
|
139 | 1 | array_intersect_key($params, $this->sdk->Action) |
|
140 | 1 | ); |
|
141 | |||
142 | 1 | return $this->sdk->DoAction(); |
|
143 | } |
||
144 | |||
145 | /** |
||
146 | * refundTransaction. |
||
147 | * |
||
148 | * @param array $params |
||
149 | * @return array |
||
150 | */ |
||
151 | 1 | View Code Duplication | public function refundTransaction($params) |
152 | { |
||
153 | 1 | $this->sdk->ServiceURL = $this->getApiEndpoint('AioChargeback'); |
|
154 | 1 | $this->sdk->ChargeBack = array_replace( |
|
0 ignored issues
–
show
The property
ChargeBack does not seem to exist in PayumTW\Ecpay\Sdk\AllInOne .
An attempt at access to an undefined property has been detected. This may either be a typographical error or the property has been renamed but there are still references to its old name. If you really want to allow access to undefined properties, you can define magic methods to allow access. See the php core documentation on Overloading. ![]() |
|||
155 | 1 | $this->sdk->ChargeBack, |
|
156 | 1 | array_intersect_key($params, $this->sdk->ChargeBack) |
|
157 | 1 | ); |
|
158 | |||
159 | 1 | return $this->sdk->AioChargeback(); |
|
0 ignored issues
–
show
The method
AioChargeback() does not seem to exist on object<PayumTW\Ecpay\Sdk\AllInOne> .
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces. This is most likely a typographical error or the method has been renamed. ![]() |
|||
160 | } |
||
161 | |||
162 | /** |
||
163 | * getTransactionData. |
||
164 | * |
||
165 | * @param mixed $params |
||
166 | * @return array |
||
167 | */ |
||
168 | 1 | public function getTransactionData($params) |
|
169 | { |
||
170 | 1 | $this->sdk->ServiceURL = $this->getApiEndpoint('QueryTradeInfo'); |
|
171 | 1 | $this->sdk->Query['MerchantTradeNo'] = $params['MerchantTradeNo']; |
|
172 | 1 | $details = $this->sdk->QueryTradeInfo(); |
|
173 | 1 | $details['RtnCode'] = $details['TradeStatus'] === '1' ? '1' : '2'; |
|
174 | |||
175 | 1 | return $details; |
|
176 | } |
||
177 | } |
||
178 |
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property.
Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property..