|
1
|
|
|
<?php |
|
2
|
|
|
|
|
3
|
|
|
|
|
4
|
|
|
/** |
|
5
|
|
|
* @authors: Nicolaas [at] Sunny Side Up .co.nz |
|
6
|
|
|
* @package: ecommerce |
|
7
|
|
|
* @sub-package: model |
|
8
|
|
|
* @inspiration: Silverstripe Ltd, Jeremy |
|
9
|
|
|
**/ |
|
10
|
|
|
class OrderStatusLog_MinFraudStatusLog extends OrderStatusLog implements EcommerceSecurityLogInterface |
|
11
|
|
|
{ |
|
12
|
|
|
private static $db = array( |
|
|
|
|
|
|
13
|
|
|
'ServiceType' => 'Enum("Score,Insights,Factors","Score")', |
|
14
|
|
|
'RiskScore' => 'Float', |
|
15
|
|
|
'IPRiskScore' => 'Float', |
|
16
|
|
|
'DetailedInfo' => 'HTMLText' |
|
17
|
|
|
); |
|
18
|
|
|
|
|
19
|
|
|
public function canCreate($member = null) |
|
20
|
|
|
{ |
|
21
|
|
|
return false; |
|
22
|
|
|
} |
|
23
|
|
|
|
|
24
|
|
View Code Duplication |
public function canEdit($member = null) |
|
|
|
|
|
|
25
|
|
|
{ |
|
26
|
|
|
$order = $this->Order(); |
|
27
|
|
|
if ($order && $order->exists()) { |
|
28
|
|
|
$status = $order->MyStep(); |
|
29
|
|
|
if ($status && $status->Code == 'FRAUD_CHECK') { |
|
30
|
|
|
return parent::canEdit($member); |
|
31
|
|
|
} else { |
|
32
|
|
|
return false; |
|
33
|
|
|
} |
|
34
|
|
|
} else { |
|
35
|
|
|
return parent::canEdit($member); |
|
36
|
|
|
} |
|
37
|
|
|
} |
|
38
|
|
|
|
|
39
|
|
|
/** |
|
40
|
|
|
* adding a sequential order number. |
|
41
|
|
|
*/ |
|
42
|
|
|
public function onBeforeWrite() |
|
43
|
|
|
{ |
|
44
|
|
|
parent::onBeforeWrite(); |
|
45
|
|
|
|
|
46
|
|
|
$order = $this->Order(); |
|
47
|
|
|
|
|
48
|
|
|
Debug::log('before write'); |
|
49
|
|
|
|
|
50
|
|
|
$api = Injector::inst()->get('MinFraudAPIConnector'); |
|
51
|
|
|
try { |
|
52
|
|
|
switch ($this->ServiceType) { |
|
53
|
|
|
case 'Insights': |
|
54
|
|
|
$insightsResponse = $api->getInsights($order); |
|
55
|
|
|
$this->updateLogForInsightsResponse($insightsResponse); |
|
56
|
|
|
break; |
|
57
|
|
|
case 'Factors': |
|
58
|
|
|
$factorsResponse = $api->getFactors($order); |
|
59
|
|
|
$this->updateLogForFactorsResponse($factorsResponse); |
|
60
|
|
|
break; |
|
61
|
|
|
default: |
|
62
|
|
|
$scoreResponse = $api->getScore($order); |
|
63
|
|
|
$this->updateLogForScoreResponse($scoreResponse); |
|
64
|
|
|
} |
|
65
|
|
|
} catch (Exception $e) { |
|
66
|
|
|
$this->DetailedInfo = $e->getMessage(); |
|
67
|
|
|
} |
|
68
|
|
|
} |
|
69
|
|
|
|
|
70
|
|
|
/** |
|
71
|
|
|
* updates the db values for this status log based on the results of a getScore request |
|
72
|
|
|
* |
|
73
|
|
|
* @param MinFraud\Model\Score $response - minFraud Score model object |
|
74
|
|
|
*/ |
|
75
|
|
|
public function updateLogForScoreResponse($response) |
|
76
|
|
|
{ |
|
77
|
|
|
$this->RiskScore = $response->riskScore; |
|
78
|
|
|
$this->IPRiskScore = $response->ipAddress->risk; |
|
79
|
|
|
$this->DetailedInfo = 'Risk Scores retrieved using the ' . $this->ServiceType . ' service from MinFraud API on ' . date("Y-m-d H:i:s") . '<br>'; |
|
80
|
|
|
if ($response->warnings) { |
|
81
|
|
|
$this->DetailedInfo .= '<h2>Warnings</h2>'; |
|
82
|
|
|
foreach ($response->warnings as $warning) { |
|
83
|
|
|
$this->DetailedInfo .= $warning->warning . '<br><br>'; |
|
84
|
|
|
} |
|
85
|
|
|
} |
|
86
|
|
|
} |
|
87
|
|
|
|
|
88
|
|
|
/** |
|
89
|
|
|
* updates the db values for this status log based on the results of a getInsights request |
|
90
|
|
|
* |
|
91
|
|
|
* @param MinFraud\Model\Insights $response - minFraud Insights model object |
|
92
|
|
|
*/ |
|
93
|
|
|
public function updateLogForInsightsResponse($response) |
|
94
|
|
|
{ |
|
95
|
|
|
$this->updateLogForScoreResponse($response); |
|
96
|
|
|
$this->DetailedInfo .= '<h2>Further Insights</h2>'; |
|
97
|
|
|
if (isset($response->email)) { |
|
98
|
|
|
$this->DetailedInfo .= '<h5>Email Details</h5>'; |
|
99
|
|
|
$this->DetailedInfo .= 'Email address first seen by MaxMind on ' . $response->email->firstSeen . '<br>'; |
|
100
|
|
|
if ($response->email->isFree) { |
|
101
|
|
|
$this->DetailedInfo .= 'MaxMind believes that this email is hosted by a free email provider such as Gmail or Yahoo.<br>'; |
|
102
|
|
|
} |
|
103
|
|
|
if ($response->email->isHighRisk) { |
|
104
|
|
|
$this->DetailedInfo .= 'MaxMind believes that this email is likely to be used for fraud!<br>'; |
|
105
|
|
|
} |
|
106
|
|
|
} |
|
107
|
|
|
if (isset($response->billingAddress)) { |
|
108
|
|
|
$this->DetailedInfo .= '<h5>Billing Address Details</h5>'; |
|
109
|
|
|
$this->DetailedInfo .= '<strong>Longitude: </strong>' . $response->billingAddress->longitude . '<br>'; |
|
110
|
|
|
$this->DetailedInfo .= '<strong>Latitude: </strong>' . $response->billingAddress->latitude . '<br>'; |
|
111
|
|
|
$this->DetailedInfo .= 'Address is located ' . $response->billingAddress->distanceToIpLocation . 'km from the IP Address<br>'; |
|
112
|
|
|
if ($response->billingAddress->isInIpCountry) { |
|
113
|
|
|
$this->DetailedInfo .= 'The address is located within the country of the IP Address<br>'; |
|
114
|
|
|
} else { |
|
115
|
|
|
$this->DetailedInfo .= 'The address is not located within the country of the IP Address<br>'; |
|
116
|
|
|
} |
|
117
|
|
|
} |
|
118
|
|
|
if (isset($response->shippingAddress)) { |
|
119
|
|
|
$this->DetailedInfo .= '<h5>Billing Address Details</h5>'; |
|
120
|
|
|
$this->DetailedInfo .= '<strong>Longitude: </strong>' . $response->shippingAddress->longitude . '<br>'; |
|
121
|
|
|
$this->DetailedInfo .= '<strong>Latitude: </strong>' . $response->shippingAddress->latitude . '<br>'; |
|
122
|
|
|
$this->DetailedInfo .= 'Address is located ' . $response->shippingAddress->distanceToIpLocation . 'km from the IP Address<br>'; |
|
123
|
|
|
if ($response->shippingAddress->isInIpCountry) { |
|
124
|
|
|
$this->DetailedInfo .= 'The address is located within the country of the IP Address<br>'; |
|
125
|
|
|
} else { |
|
126
|
|
|
$this->DetailedInfo .= 'The address is not located within the country of the IP Address<br>'; |
|
127
|
|
|
} |
|
128
|
|
|
$this->DetailedInfo .= 'The Shipping Address is located ' . $response->shippingAddress->distanceToBillingAddress . 'km from the Billing Address.<br>'; |
|
129
|
|
|
if (is_null($response->shippingAddress->isHighRisk)) { |
|
130
|
|
|
$this->DetailedInfo .= 'The shipping address could not be parsed or was not provided or the IP address could not be geolocated.<br>'; |
|
131
|
|
|
} elseif ($response->shippingAddress->isHighRisk) { |
|
132
|
|
|
$this->DetailedInfo .= 'The shipping is located in the IP country.<br>'; |
|
133
|
|
|
} else { |
|
134
|
|
|
$this->DetailedInfo .= 'The shipping is not located in the IP country.<br>'; |
|
135
|
|
|
} |
|
136
|
|
|
} |
|
137
|
|
|
if (isset($response->ipAddress)) { |
|
138
|
|
|
$this->DetailedInfo .= '<h5>IP Address Details</h5>'; |
|
139
|
|
|
$this->DetailedInfo .= 'This IP Address belongs to a ' . $response->ipAddress->traits->userType . ' user.<br>'; |
|
140
|
|
|
$this->DetailedInfo .= 'The ISP is ' . $response->ipAddress->traits->organization . ' - '. $response->ipAddress->traits->isp . '.<br>'; |
|
141
|
|
|
} |
|
142
|
|
|
} |
|
143
|
|
|
|
|
144
|
|
|
/** |
|
145
|
|
|
* updates the db values for this status log based on the results of a getFactors request |
|
146
|
|
|
* |
|
147
|
|
|
* @param MinFraud\Model\Factors $response - minFraud Factors model object |
|
148
|
|
|
*/ |
|
149
|
|
|
public function updateLogForFactorsResponse($response) |
|
150
|
|
|
{ |
|
151
|
|
|
$this->updateLogForInsightsResponse($response); |
|
152
|
|
|
} |
|
153
|
|
|
|
|
154
|
|
|
/** |
|
155
|
|
|
* if does not return NULL, then a tab will be created in ecom Sec. with the |
|
156
|
|
|
* actual OrderStatusLog entry or entries |
|
157
|
|
|
* |
|
158
|
|
|
* @param Order $order |
|
159
|
|
|
* |
|
160
|
|
|
* @return FormField|null |
|
161
|
|
|
*/ |
|
162
|
|
|
public function getSecurityLogTable($order) |
|
163
|
|
|
{ |
|
164
|
|
|
$html = null; |
|
165
|
|
|
$orderLog = OrderStatusLog_MinFraudStatusLog::get()->filter(['OrderID' => $order->ID])->first(); |
|
166
|
|
|
if ($orderLog && $orderLog->exists()) { |
|
167
|
|
|
$html = '<strong>Risk Score: </strong>' . $orderLog->RiskScore . '<br>'; |
|
168
|
|
|
$html .= '<strong>IP Risk Score: </strong>' . $orderLog->IPRiskScore . '<br>'; |
|
169
|
|
|
$html .= $orderLog->DetailedInfo . '<br>'; |
|
170
|
|
|
return LiteralField::create('MinFraudSummary', $html); |
|
171
|
|
|
} |
|
172
|
|
|
return $html; |
|
173
|
|
|
} |
|
174
|
|
|
|
|
175
|
|
|
/** |
|
176
|
|
|
* the name of the where the SecurityLogTable will be added if getSecurityLogTable returns a formField |
|
177
|
|
|
* @return string |
|
178
|
|
|
*/ |
|
179
|
|
|
public function getSecurityLogTableTabName() |
|
180
|
|
|
{ |
|
181
|
|
|
return 'MinFraudRiskScore'; |
|
182
|
|
|
} |
|
183
|
|
|
|
|
184
|
|
|
/** |
|
185
|
|
|
* returns a summary without header for the Ecom Sec. Main summary Page |
|
186
|
|
|
* |
|
187
|
|
|
* @param Order $order |
|
188
|
|
|
* |
|
189
|
|
|
* @return LiteralField (html) |
|
190
|
|
|
*/ |
|
191
|
|
|
public function getSecuritySummary($order) |
|
192
|
|
|
{ |
|
193
|
|
|
$html = 'There is no MinFraud data for this order.'; |
|
194
|
|
|
$orderLog = OrderStatusLog_MinFraudStatusLog::get()->filter(['OrderID' => $order->ID])->first(); |
|
195
|
|
|
if ($orderLog && $orderLog->exists()) { |
|
196
|
|
|
$html = '<strong>Risk Score: </strong>' . $orderLog->RiskScore . '<br>'; |
|
197
|
|
|
$html .= '<strong>IP Risk Score: </strong>' . $orderLog->IPRiskScore . '<br>'; |
|
198
|
|
|
} |
|
199
|
|
|
return LiteralField::create('MinFraudSummary', $html); |
|
200
|
|
|
} |
|
201
|
|
|
|
|
202
|
|
|
/** |
|
203
|
|
|
* returns the header to be used in TAB and in Summary Page (on the Ecom Security Module) |
|
204
|
|
|
* @return HeaderField |
|
205
|
|
|
*/ |
|
206
|
|
|
public function getSecurityHeader() |
|
207
|
|
|
{ |
|
208
|
|
|
return HeaderField::create('MinFraudHeader', 'Min Fraud Risk Details'); |
|
209
|
|
|
} |
|
210
|
|
|
} |
|
211
|
|
|
|