This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Savannabits\Daraja; |
||
4 | |||
5 | use Symfony\Component\Dotenv\Dotenv; |
||
6 | |||
7 | class Daraja |
||
8 | { |
||
9 | |||
10 | private $consumer_key, $consumer_secret, $access_token, $environment; |
||
11 | /** |
||
12 | * Define env method similar to laravel's |
||
13 | * |
||
14 | * @param String $env_param | Environment Param Name |
||
15 | * |
||
16 | * @return array|false|string |
||
17 | */ |
||
18 | public static function env($env_param){ |
||
19 | |||
20 | $dotenv = new Dotenv(); |
||
21 | |||
22 | $dotenv->load('../.env'); |
||
23 | |||
24 | $env = getenv($env_param); |
||
25 | |||
26 | return $env; |
||
27 | } |
||
28 | |||
29 | /** |
||
30 | * This is used to return an instance of the class especially when it is being used statically. |
||
31 | * @return Daraja |
||
32 | */ |
||
33 | public static function getInstance() { |
||
34 | return new self; |
||
35 | } |
||
36 | |||
37 | /** |
||
38 | * Generate instance's member credentials during runtime which will be used to generate tokens and make other calls |
||
39 | * @param $mpesa_consumer_key |
||
40 | * @param $mpesa_consumer_secret |
||
41 | * @return Daraja |
||
42 | */ |
||
43 | public function setCredentials($mpesa_consumer_key, $mpesa_consumer_secret, $mpesa_env='sandbox') { |
||
44 | if (!strlen($mpesa_consumer_key)|| !strlen($mpesa_consumer_secret)){ |
||
45 | die("Please provide a valid consumer key and secret as provided by safaricom"); |
||
46 | } |
||
47 | if ($mpesa_env!=='sandbox' && $mpesa_env !=='live') { |
||
48 | die('mpesa_env MUST be either sandbox or live'); |
||
49 | } |
||
50 | $this->consumer_key = $mpesa_consumer_key; |
||
51 | $this->consumer_secret = $mpesa_consumer_secret; |
||
52 | $this->environment = $mpesa_env; |
||
53 | return $this; |
||
54 | } |
||
55 | |||
56 | /** |
||
57 | * This is used to generate tokens for the live environment |
||
58 | * @return mixed |
||
59 | */ |
||
60 | View Code Duplication | public function generateLiveToken(){ |
|
61 | if(!isset($this->consumer_key)||!isset($this->consumer_secret)){ |
||
62 | die("please set the consumer key and consumer secret as defined in the documentation. You can use setCredentials() before calling this function."); |
||
63 | } |
||
64 | $consumer_key = $this->consumer_key; |
||
65 | $consumer_secret = $this->consumer_secret; |
||
66 | $url = 'https://api.safaricom.co.ke/oauth/v1/generate?grant_type=client_credentials'; |
||
67 | $curl = curl_init(); |
||
68 | curl_setopt($curl, CURLOPT_URL, $url); |
||
69 | $credentials = base64_encode($consumer_key.':'.$consumer_secret); |
||
70 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Authorization: Basic '.$credentials)); //setting a custom header |
||
71 | curl_setopt($curl, CURLOPT_HEADER, false); |
||
72 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); |
||
73 | curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); |
||
74 | $curl_response = curl_exec($curl); |
||
75 | $this->access_token = optional(json_decode($curl_response))->access_token; |
||
76 | if (!$this->access_token) { |
||
77 | abort(500, "Access token could not be generated."); |
||
78 | } |
||
79 | return $this; |
||
80 | } |
||
81 | |||
82 | public function getAccessToken() { |
||
83 | return $this->access_token; |
||
84 | } |
||
85 | /** |
||
86 | * use this function to generate a sandbox token |
||
87 | * @return mixed |
||
88 | */ |
||
89 | View Code Duplication | public function generateSandBoxToken(){ |
|
90 | |||
91 | if(!isset($this->consumer_key)||!isset($this->consumer_secret)){ |
||
92 | die("please set the consumer key and consumer secret as defined in the documentation. You can use setCredentials() before calling this function."); |
||
93 | } |
||
94 | $consumer_key = $this->consumer_key; |
||
95 | $consumer_secret = $this->consumer_secret; |
||
96 | $url = 'https://sandbox.safaricom.co.ke/oauth/v1/generate?grant_type=client_credentials'; |
||
97 | $curl = curl_init(); |
||
98 | curl_setopt($curl, CURLOPT_URL, $url); |
||
99 | $credentials = base64_encode($consumer_key.':'.$consumer_secret); |
||
100 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Authorization: Basic '.$credentials)); //setting a custom header |
||
101 | curl_setopt($curl, CURLOPT_HEADER, false); |
||
102 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); |
||
103 | |||
104 | curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); |
||
105 | |||
106 | $curl_response = curl_exec($curl); |
||
107 | |||
108 | $this->access_token = optional(json_decode($curl_response))->access_token; |
||
109 | if (!$this->access_token) { |
||
110 | abort(500, "Access token could not be generated."); |
||
111 | } |
||
112 | return $this; |
||
113 | } |
||
114 | |||
115 | /** |
||
116 | * Register Validation and Confirmation Callbacks |
||
117 | * @param $shortCode | The MPESA Short Code |
||
118 | * @param string $confirmationURL | Confirmation Callback URL |
||
119 | * @param string|null $validationURL | Validation Callback URL |
||
120 | * @param string $responseType | Default Response type in case the validation URL is unreachable or is undefined. Either Cancelled or Completed as per the safaricom documentation |
||
121 | * @return false|mixed|string |
||
122 | */ |
||
123 | View Code Duplication | public function registerCallbacks($shortCode,$confirmationURL, $validationURL=null, $responseType="Cancelled") { |
|
124 | $environment = $this->environment; |
||
125 | if( $environment =="live"){ |
||
126 | $url = "https://api.safaricom.co.ke/mpesa/c2b/v1/registerurl"; |
||
127 | $this->generateLiveToken(); |
||
128 | }elseif ($environment=="sandbox"){ |
||
129 | $url = "https://sandbox.safaricom.co.ke/mpesa/c2b/v1/registerurl"; |
||
130 | $this->generateSandBoxToken(); |
||
131 | }else{ |
||
132 | return json_encode(["Message"=>"Invalid App environment. Please set it via setCredentials() to either live or sandbox."]); |
||
133 | } |
||
134 | |||
135 | $token = $this->getAccessToken(); |
||
136 | $curl = curl_init(); |
||
137 | |||
138 | curl_setopt($curl, CURLOPT_URL, $url); |
||
139 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json','Authorization:Bearer '.$token)); |
||
140 | |||
141 | |||
142 | $curl_post_data = array( |
||
143 | "ValidationURL" => $validationURL, |
||
144 | "ConfirmationURL" => $confirmationURL, |
||
145 | "ResponseType" => $responseType, |
||
146 | "ShortCode" => $shortCode |
||
147 | ); |
||
148 | |||
149 | $data_string = json_encode($curl_post_data); |
||
150 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
||
151 | curl_setopt($curl, CURLOPT_POST, true); |
||
152 | curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); |
||
153 | curl_setopt($curl, CURLOPT_HEADER, false); |
||
154 | $curl_response = curl_exec($curl); |
||
155 | return json_decode($curl_response); |
||
156 | } |
||
157 | |||
158 | /** |
||
159 | * Generate an encrypted security credential from the initiator password on either live or sandbox env. |
||
160 | * @param string $initiatorPassword |
||
161 | * @param string $env live|sandbox |
||
162 | */ |
||
163 | public function encryptInitiatorPassword($initiatorPassword, $env="sandbox") { |
||
164 | if (!in_array($env,["live", "sandbox"])) { |
||
165 | throw new \Exception("Environment must be either live or sandbox"); |
||
166 | } |
||
167 | $publicKeyFile = config('daraja.mpesa.cert_path')."/".config('daraja.mpesa.'.$env.'_cert_name'); |
||
168 | $publicKey = $this->preparePublicKey($publicKeyFile); |
||
169 | openssl_public_encrypt($initiatorPassword, $encrypted,$publicKey, OPENSSL_PKCS1_PADDING); |
||
170 | return base64_encode($encrypted); |
||
171 | } |
||
172 | |||
173 | public function preparePublicKey($publicKeyFile) { |
||
174 | $pkey = file_get_contents($publicKeyFile); |
||
175 | $pkey = str_replace(["\r", "\n"],"", $pkey); |
||
176 | $pkey = str_replace(["-----BEGIN CERTIFICATE-----"],"-----BEGIN CERTIFICATE-----\n", $pkey); |
||
177 | $final = str_replace(["-----END CERTIFICATE-----"],"\n-----END CERTIFICATE-----", $pkey); |
||
178 | return $final; |
||
179 | } |
||
180 | |||
181 | /** |
||
182 | * Use this function to initiate a reversal request. This is an abstracted function that takes care of SecurityCredential Generation |
||
183 | * @param $Initiator | The name of Initiator - Username of user initiating the transaction |
||
184 | * @param $InitiatorPassword | Encrypted Initiator Password / security credential |
||
185 | * @param $TransactionID | Unique Id received with every transaction response. |
||
186 | * @param $Amount | Amount |
||
187 | * @param $ReceiverParty | Organization /MSISDN sending the transaction |
||
188 | * @param $ResultURL | The path that stores information of transaction |
||
189 | * @param $QueueTimeOutURL | The path that stores information of time out transaction |
||
190 | * @param $Remarks | Comments that are sent along with the transaction. |
||
191 | * @param $Occasion | Optional Parameter |
||
192 | * @return mixed|string |
||
193 | * @throws \Exception |
||
194 | */ |
||
195 | public function reverseTransaction($Initiator, $InitiatorPassword, $TransactionID, $Amount, $ReceiverParty, $ResultURL, $QueueTimeOutURL, $Remarks, $Occasion, $ReceiverIdentifierType=11) { |
||
196 | // $SecurityCredential = $this->encryptInitiatorPassword($InitiatorPassword,$this->environment); |
||
197 | $CommandID = 'TransactionReversal'; |
||
198 | return $this->reversal($CommandID,$Initiator,$InitiatorPassword,$TransactionID,$Amount,$ReceiverParty,$ReceiverIdentifierType,$ResultURL,$QueueTimeOutURL,$Remarks,$Occasion); |
||
199 | } |
||
200 | |||
201 | /** |
||
202 | * Use this function to initiate a transaciton status query |
||
203 | * @param $Initiator | The username of the user initiating the transaction. This is the credential/username used to authenticate the transaction request |
||
204 | * @param $InitiatorPassword | Encrypted Security Credential. see daraja docs on how to encrypt |
||
205 | * @param $TransactionID | Mpesa confirmation code of the trasaction whose query we are checking |
||
206 | * @param $PartyA | The shortcode or msisdn of the organization that is receiving the transaction |
||
207 | * @param $ResultURL | Where will the result be sent to |
||
208 | * @param $QueueTimeOutURL | In case of a timeout, this url will be called. |
||
209 | * @param $Remarks |Comments sent along with the transaction |
||
210 | * @param $Occasion | Optional Parameter. |
||
211 | * @param int $IdentifierType | The type of organization receiving the transaction: 1 = MSISDN, 2 = TILL, 4 = Org shortcode |
||
212 | * @return mixed|string |
||
213 | * @throws \Exception |
||
214 | */ |
||
215 | public function checkTransactionStatus($Initiator, $InitiatorPassword, $TransactionID, $PartyA, $ResultURL, $QueueTimeOutURL, $Remarks, $Occasion, $IdentifierType=4) { |
||
216 | // $SecurityCredential = $this->encryptInitiatorPassword($InitiatorPassword,$this->environment); |
||
217 | $CommandID = 'TransactionStatusQuery'; |
||
218 | return $this->transactionStatus($Initiator, $InitiatorPassword, $CommandID, $TransactionID, $PartyA, $IdentifierType, $ResultURL, $QueueTimeOutURL, $Remarks, $Occasion); |
||
219 | } |
||
220 | /** |
||
221 | * Use this function to initiate a reversal request. This is the lowest level function that can change even the Organization Id Type. |
||
222 | * @param $CommandID | Takes only 'TransactionReversal' Command id |
||
223 | * @param $Initiator | The name of Initiator to initiating the request |
||
224 | * @param $SecurityCredential | Encrypted Credential of user getting transaction amount |
||
225 | * @param $TransactionID | Unique Id received with every transaction response. |
||
226 | * @param $Amount | Amount |
||
227 | * @param $ReceiverParty | Organization /MSISDN sending the transaction |
||
228 | * @param $RecieverIdentifierType | Type of organization receiving the transaction |
||
229 | * @param $ResultURL | The path that stores information of transaction |
||
230 | * @param $QueueTimeOutURL | The path that stores information of time out transaction |
||
231 | * @param $Remarks | Comments that are sent along with the transaction. |
||
232 | * @param $Occasion | Optional Parameter |
||
233 | * @return mixed|string |
||
234 | */ |
||
235 | View Code Duplication | private function reversal($CommandID, $Initiator, $SecurityCredential, $TransactionID, $Amount, $ReceiverParty, $RecieverIdentifierType, $ResultURL, $QueueTimeOutURL, $Remarks, $Occasion){ |
|
236 | |||
237 | $environment = $this->environment; |
||
238 | if( $environment =="live"){ |
||
239 | $url = 'https://api.safaricom.co.ke/mpesa/reversal/v1/request'; |
||
240 | $this->generateLiveToken(); |
||
241 | }elseif ($environment=="sandbox"){ |
||
242 | $url = 'https://sandbox.safaricom.co.ke/mpesa/reversal/v1/request'; |
||
243 | $this->generateSandBoxToken(); |
||
244 | }else{ |
||
245 | return json_encode(["Message"=>"invalid application status. Please set mpesa_env credential as either live or sandbox."]); |
||
246 | } |
||
247 | |||
248 | $token = $this->getAccessToken(); |
||
249 | |||
250 | $curl = curl_init(); |
||
251 | |||
252 | curl_setopt($curl, CURLOPT_URL, $url); |
||
253 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json','Authorization:Bearer '.$token)); |
||
254 | |||
255 | $curl_post_data = array( |
||
256 | 'CommandID' => $CommandID, |
||
257 | 'Initiator' => $Initiator, |
||
258 | 'SecurityCredential' => $SecurityCredential, |
||
259 | 'TransactionID' => $TransactionID, |
||
260 | 'Amount' => $Amount, |
||
261 | 'ReceiverParty' => $ReceiverParty, |
||
262 | 'RecieverIdentifierType' => $RecieverIdentifierType, |
||
263 | 'ResultURL' => $ResultURL, |
||
264 | 'QueueTimeOutURL' => $QueueTimeOutURL, |
||
265 | 'Remarks' => $Remarks, |
||
266 | 'Occasion' => $Occasion |
||
267 | ); |
||
268 | |||
269 | $data_string = json_encode($curl_post_data); |
||
270 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
||
271 | curl_setopt($curl, CURLOPT_POST, true); |
||
272 | curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); |
||
273 | curl_setopt($curl, CURLOPT_HEADER, false); |
||
274 | $curl_response = curl_exec($curl); |
||
275 | return json_decode($curl_response); |
||
276 | } |
||
277 | |||
278 | /** |
||
279 | * @param $InitiatorName | This is the credential/username used to authenticate the transaction request. |
||
280 | * @param $SecurityCredential | Encrypted password for the initiator to autheticate the transaction request |
||
281 | * @param $CommandID | Unique command for each transaction type e.g. SalaryPayment, BusinessPayment, PromotionPayment |
||
282 | * @param $Amount | The amount being transacted |
||
283 | * @param $PartyA | Organization’s shortcode initiating the transaction. |
||
284 | * @param $PartyB | Phone number receiving the transaction |
||
285 | * @param $Remarks | Comments that are sent along with the transaction. |
||
286 | * @param $QueueTimeOutURL | The timeout end-point that receives a timeout response. |
||
287 | * @param $ResultURL | The end-point that receives the response of the transaction |
||
288 | * @param $Occasion | Optional |
||
289 | * @return string |
||
290 | */ |
||
291 | public function b2c($InitiatorName, $SecurityCredential, $CommandID, $Amount, $PartyA, $PartyB, $Remarks, $QueueTimeOutURL, $ResultURL, $Occasion){ |
||
292 | |||
293 | $environment = $this->environment; |
||
294 | |||
295 | if( $environment =="live"){ |
||
296 | $url = 'https://api.safaricom.co.ke/mpesa/b2c/v1/paymentrequest'; |
||
297 | $token=self::generateLiveToken(); |
||
298 | } elseif ($environment=="sandbox"){ |
||
299 | $url = 'https://sandbox.safaricom.co.ke/mpesa/b2c/v1/paymentrequest'; |
||
300 | $token=self::generateSandBoxToken(); |
||
301 | }else{ |
||
302 | return json_encode(["Message"=>"invalid application status. Please set mpesa_env to either live or sandbox via setCredentials()"]); |
||
303 | } |
||
304 | |||
305 | |||
306 | $curl = curl_init(); |
||
307 | curl_setopt($curl, CURLOPT_URL, $url); |
||
308 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json','Authorization:Bearer '.$token)); |
||
309 | |||
310 | |||
311 | $curl_post_data = array( |
||
312 | 'InitiatorName' => $InitiatorName, |
||
313 | 'SecurityCredential' => $SecurityCredential, |
||
314 | 'CommandID' => $CommandID , |
||
315 | 'Amount' => $Amount, |
||
316 | 'PartyA' => $PartyA , |
||
317 | 'PartyB' => $PartyB, |
||
318 | 'Remarks' => $Remarks, |
||
319 | 'QueueTimeOutURL' => $QueueTimeOutURL, |
||
320 | 'ResultURL' => $ResultURL, |
||
321 | 'Occasion' => $Occasion |
||
322 | ); |
||
323 | |||
324 | $data_string = json_encode($curl_post_data); |
||
325 | |||
326 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
||
327 | curl_setopt($curl, CURLOPT_POST, true); |
||
328 | curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); |
||
329 | |||
330 | $curl_response = curl_exec($curl); |
||
331 | |||
332 | return json_encode($curl_response); |
||
333 | |||
334 | } |
||
335 | /** |
||
336 | * Use this function to initiate a C2B transaction |
||
337 | * @param $ShortCode | 6 digit M-Pesa Till Number or PayBill Number |
||
338 | * @param $CommandID | Unique command for each transaction type. |
||
339 | * @param $Amount | The amount been transacted. |
||
340 | * @param $Msisdn | MSISDN (phone number) sending the transaction, start with country code without the plus(+) sign. |
||
341 | * @param $BillRefNumber | Bill Reference Number (Optional). |
||
342 | * @return mixed|string |
||
343 | */ |
||
344 | View Code Duplication | public function c2b($ShortCode, $CommandID, $Amount, $Msisdn, $BillRefNumber ){ |
|
345 | $environment = $this->environment; |
||
346 | if( $environment =="live"){ |
||
347 | $url = 'https://api.safaricom.co.ke/mpesa/c2b/v1/simulate'; |
||
348 | $this->generateLiveToken(); |
||
349 | }elseif ($environment=="sandbox"){ |
||
350 | $url = 'https://sandbox.safaricom.co.ke/mpesa/c2b/v1/simulate'; |
||
351 | $this->generateSandBoxToken(); |
||
352 | }else{ |
||
353 | return json_encode(["Message"=>"invalid application status. Please set mpesa_env to either sandbox or live"]); |
||
354 | } |
||
355 | |||
356 | $token = $this->getAccessToken(); |
||
357 | $curl = curl_init(); |
||
358 | curl_setopt($curl, CURLOPT_URL, $url); |
||
359 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json','Authorization:Bearer '.$token)); |
||
360 | |||
361 | $curl_post_data = array( |
||
362 | 'ShortCode' => $ShortCode, |
||
363 | 'CommandID' => $CommandID, |
||
364 | 'Amount' => $Amount, |
||
365 | 'Msisdn' => $Msisdn, |
||
366 | 'BillRefNumber' => $BillRefNumber |
||
367 | ); |
||
368 | |||
369 | $data_string = json_encode($curl_post_data); |
||
370 | |||
371 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
||
372 | curl_setopt($curl, CURLOPT_POST, true); |
||
373 | curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); |
||
374 | curl_setopt($curl, CURLOPT_HEADER, false); |
||
375 | $curl_response = curl_exec($curl); |
||
376 | return $curl_response; |
||
377 | } |
||
378 | |||
379 | |||
380 | /** |
||
381 | * Use this to initiate a balance inquiry request |
||
382 | * @param $CommandID | A unique command passed to the M-Pesa system. |
||
383 | * @param $Initiator | This is the credential/username used to authenticate the transaction request. |
||
384 | * @param $SecurityCredential | Encrypted password for the initiator to autheticate the transaction request |
||
385 | * @param $PartyA | Type of organization receiving the transaction |
||
386 | * @param $IdentifierType |Type of organization receiving the transaction |
||
387 | * @param $Remarks | Comments that are sent along with the transaction. |
||
388 | * @param $QueueTimeOutURL | The path that stores information of time out transaction |
||
389 | * @param $ResultURL | The path that stores information of transaction |
||
390 | * @return mixed|string |
||
391 | */ |
||
392 | public function accountBalance($CommandID, $Initiator, $SecurityCredential, $PartyA, $IdentifierType, $Remarks, $QueueTimeOutURL, $ResultURL){ |
||
393 | |||
394 | $environment = $this->environment; |
||
395 | if( $environment =="live"){ |
||
396 | $url = 'https://api.safaricom.co.ke/mpesa/accountbalance/v1/query'; |
||
397 | $this->generateLiveToken(); |
||
398 | }elseif ($environment=="sandbox"){ |
||
399 | $url = 'https://sandbox.safaricom.co.ke/mpesa/accountbalance/v1/query'; |
||
400 | $this->generateSandBoxToken(); |
||
401 | }else{ |
||
402 | return json_encode(["Message"=>"invalid application environment"]); |
||
403 | } |
||
404 | |||
405 | $token = $this->getAccessToken(); |
||
406 | $curl = curl_init(); |
||
407 | curl_setopt($curl, CURLOPT_URL, $url); |
||
408 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json','Authorization:Bearer '.$token)); //setting custom header |
||
409 | |||
410 | |||
411 | $curl_post_data = array( |
||
412 | 'CommandID' => $CommandID, |
||
413 | 'Initiator' => $Initiator, |
||
414 | 'SecurityCredential' => $SecurityCredential, |
||
415 | 'PartyA' => $PartyA, |
||
416 | 'IdentifierType' => $IdentifierType, |
||
417 | 'Remarks' => $Remarks, |
||
418 | 'QueueTimeOutURL' => $QueueTimeOutURL, |
||
419 | 'ResultURL' => $ResultURL |
||
420 | ); |
||
421 | |||
422 | $data_string = json_encode($curl_post_data); |
||
423 | |||
424 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
||
425 | curl_setopt($curl, CURLOPT_POST, true); |
||
426 | curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); |
||
427 | curl_setopt($curl, CURLOPT_HEADER, false); |
||
428 | $curl_response = curl_exec($curl); |
||
429 | return $curl_response; |
||
430 | } |
||
431 | |||
432 | /** |
||
433 | * Use this function to make a transaction status request |
||
434 | * @param $Initiator | The name of Initiator to initiating the request. |
||
435 | * @param $SecurityCredential | Encrypted password for the initiator to autheticate the transaction request. |
||
436 | * @param $CommandID | Unique command for each transaction type, possible values are: TransactionStatusQuery. |
||
437 | * @param $TransactionID | Organization Receiving the funds. |
||
438 | * @param $PartyA | Organization/MSISDN sending the transaction |
||
439 | * @param $IdentifierType | Type of organization receiving the transaction |
||
440 | * @param $ResultURL | The path that stores information of transaction |
||
441 | * @param $QueueTimeOutURL | The path that stores information of time out transaction |
||
442 | * @param $Remarks | Comments that are sent along with the transaction |
||
443 | * @param $Occasion | Optional Parameter |
||
444 | * @return mixed|string |
||
445 | */ |
||
446 | View Code Duplication | private function transactionStatus($Initiator, $SecurityCredential, $CommandID, $TransactionID, $PartyA, $IdentifierType, $ResultURL, $QueueTimeOutURL, $Remarks, $Occasion){ |
|
447 | |||
448 | $environment = $this->environment; |
||
449 | |||
450 | if( $environment =="live"){ |
||
451 | $url = 'https://api.safaricom.co.ke/mpesa/transactionstatus/v1/query'; |
||
452 | $this->generateLiveToken(); |
||
453 | }elseif ($environment=="sandbox"){ |
||
454 | $url = 'https://sandbox.safaricom.co.ke/mpesa/transactionstatus/v1/query'; |
||
455 | $this->generateSandBoxToken(); |
||
456 | }else{ |
||
457 | return json_encode(["Message"=>"invalid application status"]); |
||
458 | } |
||
459 | |||
460 | $token = $this->getAccessToken(); |
||
461 | $curl = curl_init(); |
||
462 | curl_setopt($curl, CURLOPT_URL, $url); |
||
463 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json','Authorization:Bearer '.$token)); //setting custom header |
||
464 | |||
465 | |||
466 | $curl_post_data = array( |
||
467 | 'Initiator' => $Initiator, |
||
468 | 'SecurityCredential' => $SecurityCredential, |
||
469 | 'CommandID' => $CommandID, |
||
470 | 'TransactionID' => $TransactionID, |
||
471 | 'PartyA' => $PartyA, |
||
472 | 'IdentifierType' => $IdentifierType, |
||
473 | 'ResultURL' => $ResultURL, |
||
474 | 'QueueTimeOutURL' => $QueueTimeOutURL, |
||
475 | 'Remarks' => $Remarks, |
||
476 | 'Occasion' => $Occasion |
||
477 | ); |
||
478 | |||
479 | $data_string = json_encode($curl_post_data); |
||
480 | |||
481 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
||
482 | curl_setopt($curl, CURLOPT_POST, true); |
||
483 | curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); |
||
484 | curl_setopt($curl, CURLOPT_HEADER, false); |
||
485 | $curl_response = curl_exec($curl); |
||
486 | |||
487 | |||
488 | return $curl_response; |
||
489 | } |
||
490 | |||
491 | |||
492 | /** |
||
493 | * Use this function to initiate a B2B request |
||
494 | * @param $Initiator | This is the credential/username used to authenticate the transaction request. |
||
495 | * @param $SecurityCredential | Encrypted password for the initiator to autheticate the transaction request. |
||
496 | * @param $Amount | Base64 encoded string of the B2B short code and password, which is encrypted using M-Pesa public key and validates the transaction on M-Pesa Core system. |
||
497 | * @param $PartyA | Organization’s short code initiating the transaction. |
||
498 | * @param $PartyB | Organization’s short code receiving the funds being transacted. |
||
499 | * @param $Remarks | Comments that are sent along with the transaction. |
||
500 | * @param $QueueTimeOutURL | The path that stores information of time out transactions.it should be properly validated to make sure that it contains the port, URI and domain name or publicly available IP. |
||
501 | * @param $ResultURL | The path that receives results from M-Pesa it should be properly validated to make sure that it contains the port, URI and domain name or publicly available IP. |
||
502 | * @param $AccountReference | Account Reference mandatory for “BusinessPaybill” CommandID. |
||
503 | * @param $commandID | Unique command for each transaction type, possible values are: BusinessPayBill, MerchantToMerchantTransfer, MerchantTransferFromMerchantToWorking, MerchantServicesMMFAccountTransfer, AgencyFloatAdvance |
||
504 | * @param $SenderIdentifierType | Type of organization sending the transaction. |
||
505 | * @param $RecieverIdentifierType | Type of organization receiving the funds being transacted. |
||
506 | |||
507 | * @return mixed|string |
||
508 | */ |
||
509 | public function b2b($Initiator, $SecurityCredential, $Amount, $PartyA, $PartyB, $Remarks, $QueueTimeOutURL, $ResultURL, $AccountReference, $commandID, $SenderIdentifierType, $RecieverIdentifierType){ |
||
510 | |||
511 | $environment = $this->environment; |
||
512 | |||
513 | if( $environment =="live"){ |
||
514 | $url = 'https://api.safaricom.co.ke/mpesa/b2b/v1/paymentrequest'; |
||
515 | $this->generateLiveToken(); |
||
516 | }elseif ($environment=="sandbox"){ |
||
517 | $url = 'https://sandbox.safaricom.co.ke/mpesa/b2b/v1/paymentrequest'; |
||
518 | $this->generateSandBoxToken(); |
||
519 | }else{ |
||
520 | return json_encode(["Message"=>"invalid application status"]); |
||
521 | } |
||
522 | |||
523 | $token = $this->getAccessToken(); |
||
524 | |||
525 | $curl = curl_init(); |
||
526 | curl_setopt($curl, CURLOPT_URL, $url); |
||
527 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json','Authorization:Bearer '.$token)); //setting custom header |
||
528 | $curl_post_data = array( |
||
529 | 'Initiator' => $Initiator, |
||
530 | 'SecurityCredential' => $SecurityCredential, |
||
531 | 'CommandID' => $commandID, |
||
532 | 'SenderIdentifierType' => $SenderIdentifierType, |
||
533 | 'RecieverIdentifierType' => $RecieverIdentifierType, |
||
534 | 'Amount' => $Amount, |
||
535 | 'PartyA' => $PartyA, |
||
536 | 'PartyB' => $PartyB, |
||
537 | 'AccountReference' => $AccountReference, |
||
538 | 'Remarks' => $Remarks, |
||
539 | 'QueueTimeOutURL' => $QueueTimeOutURL, |
||
540 | 'ResultURL' => $ResultURL |
||
541 | ); |
||
542 | $data_string = json_encode($curl_post_data); |
||
543 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
||
544 | curl_setopt($curl, CURLOPT_POST, true); |
||
545 | curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); |
||
546 | $curl_response = curl_exec($curl); |
||
547 | return $curl_response; |
||
548 | |||
549 | } |
||
550 | |||
551 | /** |
||
552 | * Use this function to initiate an STKPush Simulation |
||
553 | * @param $BusinessShortCode | The organization shortcode used to receive the transaction. |
||
554 | * @param $LipaNaMpesaPasskey | The password for encrypting the request. This is generated by base64 encoding BusinessShortcode, Passkey and Timestamp. |
||
555 | * @param $TransactionType | The transaction type to be used for this request. Only CustomerPayBillOnline is supported. |
||
556 | * @param $Amount | The amount to be transacted. |
||
557 | * @param $PartyA | The MSISDN sending the funds. |
||
558 | * @param $PartyB | The organization shortcode receiving the funds |
||
559 | * @param $PhoneNumber | The MSISDN sending the funds. |
||
560 | * @param $CallBackURL | The url to where responses from M-Pesa will be sent to. |
||
561 | * @param $AccountReference | Used with M-Pesa PayBills. |
||
562 | * @param $TransactionDesc | A description of the transaction. |
||
563 | * @param $Remark | Remarks |
||
564 | * @return mixed|string |
||
565 | */ |
||
566 | public function STKPushSimulation($BusinessShortCode, $LipaNaMpesaPasskey, $TransactionType, $Amount, $PartyA, $PartyB, $PhoneNumber, $CallBackURL, $AccountReference, $TransactionDesc, $Remark){ |
||
0 ignored issues
–
show
|
|||
567 | |||
568 | $environment = $this->environment; |
||
569 | |||
570 | if( $environment =="live"){ |
||
571 | $url = 'https://api.safaricom.co.ke/mpesa/stkpush/v1/processrequest'; |
||
572 | $this->generateLiveToken(); |
||
573 | }elseif ($environment=="sandbox"){ |
||
574 | $url = 'https://sandbox.safaricom.co.ke/mpesa/stkpush/v1/processrequest'; |
||
575 | $this->generateSandBoxToken(); |
||
576 | }else{ |
||
577 | return json_encode(["Message"=>"invalid application status"]); |
||
578 | } |
||
579 | |||
580 | $token = $this->getAccessToken(); |
||
581 | |||
582 | $timestamp= date( "Ymdhis"); |
||
583 | $password=base64_encode($BusinessShortCode.$LipaNaMpesaPasskey.$timestamp); |
||
584 | |||
585 | $curl = curl_init(); |
||
586 | curl_setopt($curl, CURLOPT_URL, $url); |
||
587 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json','Authorization:Bearer '.$token)); |
||
588 | |||
589 | |||
590 | $curl_post_data = array( |
||
591 | 'BusinessShortCode' => $BusinessShortCode, |
||
592 | 'Password' => $password, |
||
593 | 'Timestamp' => $timestamp, |
||
594 | 'TransactionType' => $TransactionType, |
||
595 | 'Amount' => $Amount, |
||
596 | 'PartyA' => $PartyA, |
||
597 | 'PartyB' => $PartyB, |
||
598 | 'PhoneNumber' => $PhoneNumber, |
||
599 | 'CallBackURL' => $CallBackURL, |
||
600 | 'AccountReference' => $AccountReference, |
||
601 | 'TransactionDesc' => $TransactionDesc |
||
602 | ); |
||
603 | |||
604 | $data_string = json_encode($curl_post_data); |
||
605 | |||
606 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
||
607 | curl_setopt($curl, CURLOPT_POST, true); |
||
608 | curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); |
||
609 | curl_setopt($curl, CURLOPT_HEADER, false); |
||
610 | $curl_response=curl_exec($curl); |
||
611 | return $curl_response; |
||
612 | |||
613 | } |
||
614 | |||
615 | |||
616 | /** |
||
617 | * Use this function to initiate an STKPush Status Query request. |
||
618 | * @param $checkoutRequestID | Checkout RequestID |
||
619 | * @param $businessShortCode | Business Short Code |
||
620 | * @param $password | Password |
||
621 | * @param $timestamp | Timestamp |
||
622 | * @return mixed|string |
||
623 | */ |
||
624 | View Code Duplication | public function STKPushQuery($checkoutRequestID, $businessShortCode, $password, $timestamp){ |
|
625 | |||
626 | $environment =$this->environment; |
||
627 | |||
628 | if( $environment =="live"){ |
||
629 | $url = 'https://api.safaricom.co.ke/mpesa/stkpushquery/v1/query'; |
||
630 | $this->generateLiveToken(); |
||
631 | }elseif ($environment=="sandbox"){ |
||
632 | $url = 'https://sandbox.safaricom.co.ke/mpesa/stkpushquery/v1/query'; |
||
633 | $this->generateSandBoxToken(); |
||
634 | }else{ |
||
635 | return json_encode(["Message"=>"invalid application status"]); |
||
636 | } |
||
637 | $token = $this->getAccessToken(); |
||
638 | |||
639 | $curl = curl_init(); |
||
640 | curl_setopt($curl, CURLOPT_URL, $url); |
||
641 | curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json','Authorization:Bearer '.$token)); |
||
642 | |||
643 | $curl_post_data = array( |
||
644 | 'BusinessShortCode' => $businessShortCode, |
||
645 | 'Password' => $password, |
||
646 | 'Timestamp' => $timestamp, |
||
647 | 'CheckoutRequestID' => $checkoutRequestID |
||
648 | ); |
||
649 | |||
650 | $data_string = json_encode($curl_post_data); |
||
651 | |||
652 | curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
||
653 | curl_setopt($curl, CURLOPT_POST, true); |
||
654 | curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); |
||
655 | curl_setopt($curl, CURLOPT_HEADER, false); |
||
656 | |||
657 | $curl_response = curl_exec($curl); |
||
658 | |||
659 | return $curl_response; |
||
660 | } |
||
661 | |||
662 | /** |
||
663 | *Use this function to confirm all transactions in callback routes |
||
664 | */ |
||
665 | public function finishTransaction($status = true) |
||
666 | { |
||
667 | if ($status === true) { |
||
668 | $resultArray=[ |
||
669 | "ResultDesc"=>"Confirmation Service request accepted successfully", |
||
670 | "ResultCode"=>"0" |
||
671 | ]; |
||
672 | } else { |
||
673 | $resultArray=[ |
||
674 | "ResultDesc"=>"Confirmation Service not accepted", |
||
675 | "ResultCode"=>"1" |
||
676 | ]; |
||
677 | } |
||
678 | |||
679 | header('Content-Type: application/json'); |
||
680 | echo json_encode($resultArray); |
||
681 | } |
||
682 | |||
683 | |||
684 | /** |
||
685 | *Use this function to get callback data posted in callback routes |
||
686 | */ |
||
687 | public function getDataFromCallback(){ |
||
688 | $callbackJSONData=file_get_contents('php://input'); |
||
689 | return $callbackJSONData; |
||
690 | } |
||
691 | |||
692 | } |
||
693 |
This check looks from parameters that have been defined for a function or method, but which are not used in the method body.