FM / xero

/home/desid573/public_html/gcdriver/payment/xero/

/home/desid573/public_html/gcdriver/payment/xero

Name	Size	Mode	Actions
certs/	-	0755	rm
lib/	-	0755	rm
tests/	-	0755	rm
.gitignore	142	0644	edit dl rm
.pdf	80381	0644	edit dl rm
7320c944-101d-4f21-924f-5c49298ec5df.pdf	80381	0644	edit dl rm
addContact.php	7956	0644	edit dl rm
addNewContact.php	0	0644	edit dl rm
class.phpmailer.php	80046	0644	edit dl rm
class.pop3.php	10385	0644	edit dl rm
class.smtp.php	24586	0644	edit dl rm
composer.json	556	0644	edit dl rm
error_log	1092195	0644	edit dl rm
getInvoice.php	7956	0644	edit dl rm
getInvoiceReturn.php	7956	0644	edit dl rm
index.php	500	0644	edit dl rm
invoiceRetrieve.php	2137	0644	edit dl rm
invoiceSend.php	10187	0644	edit dl rm
license.txt	1055	0644	edit dl rm
partner.php	4100	0644	edit dl rm
private.php	1622	0644	edit dl rm
public.php	4252	0644	edit dl rm
README.md	7266	0644	edit dl rm
webhook.php	1641	0644	edit dl rm
_config.php	2281	0644	edit dl rm

Edit: /home/desid573/public_html/gcdriver/payment/xero/public.php (4252B)

<?php
require 'lib/XeroOAuth.php';

/**
 * Define for file includes
 */
define ( 'BASE_PATH', dirname(__FILE__) );

/**
 * Define which app type you are using:
 * Private - private app method
 * Public - standard public app method
 * Public - partner app method
 */
define ( "XRO_APP_TYPE", "Public" );

/**
 * Set a user agent string that matches your application name as set in the Xero developer centre
 */
$useragent = "Xero-OAuth-PHP Public";

/**
 * Set your callback url or set 'oob' if none required
 * Make sure you've set the callback URL in the Xero Dashboard
 * Go to https://api.xero.com/Application/List and select your application
 * Under OAuth callback domain enter localhost or whatever domain you are using.
 */
define ( "OAUTH_CALLBACK", 'http://localhost/XeroOAuth-PHP/public.php' );

/**
 * Application specific settings
 * Not all are required for given application types
 * consumer_key: required for all applications
 * consumer_secret: for partner applications, set to: s (cannot be blank)
 * rsa_private_key: application certificate private key - not needed for public applications
 * rsa_public_key: application certificate public cert - not needed for public applications
 */

include 'tests/testRunner.php';

$signatures = array (
		'consumer_key' => 'YOURCONSUMERKEY',
		'shared_secret' => 'YOURSECRET',
		// API versions
		'core_version' => '2.0',
		'payroll_version' => '1.0',
		'file_version' => '1.0' 
);

if (XRO_APP_TYPE == "Private" || XRO_APP_TYPE == "Partner") {
	$signatures ['rsa_private_key'] = BASE_PATH . '/certs/privatekey.pem';
	$signatures ['rsa_public_key'] = BASE_PATH . '/certs/publickey.cer';
}
if (XRO_APP_TYPE == "Partner") {
	$signatures ['curl_ssl_cert'] = BASE_PATH . '/certs/entrust-cert-RQ3.pem';
	$signatures ['curl_ssl_password'] = '1234';
	$signatures ['curl_ssl_key'] = BASE_PATH . '/certs/entrust-private-RQ3.pem';
}

$XeroOAuth = new XeroOAuth ( array_merge ( array (
		'application_type' => XRO_APP_TYPE,
		'oauth_callback' => OAUTH_CALLBACK,
		'user_agent' => $useragent 
), $signatures ) );

$initialCheck = $XeroOAuth->diagnostics ();
$checkErrors = count ( $initialCheck );
if ($checkErrors > 0) {
	// you could handle any config errors here, or keep on truckin if you like to live dangerously
	foreach ( $initialCheck as $check ) {
		echo 'Error: ' . $check . PHP_EOL;
	}
} else {
	
	$here = XeroOAuth::php_self ();
	session_start ();
	$oauthSession = retrieveSession ();
	
	include 'tests/tests.php';
	
	if (isset ( $_REQUEST ['oauth_verifier'] )) {
		$XeroOAuth->config ['access_token'] = $_SESSION ['oauth'] ['oauth_token'];
		$XeroOAuth->config ['access_token_secret'] = $_SESSION ['oauth'] ['oauth_token_secret'];
		
		$code = $XeroOAuth->request ( 'GET', $XeroOAuth->url ( 'AccessToken', '' ), array (
				'oauth_verifier' => $_REQUEST ['oauth_verifier'],
				'oauth_token' => $_REQUEST ['oauth_token'] 
		) );
		
		if ($XeroOAuth->response ['code'] == 200) {
			
			$response = $XeroOAuth->extract_params ( $XeroOAuth->response ['response'] );
			$session = persistSession ( $response );
			
			unset ( $_SESSION ['oauth'] );
			header ( "Location: {$here}" );
		} else {
			outputError ( $XeroOAuth );
		}
		// start the OAuth dance
	} elseif (isset ( $_REQUEST ['authenticate'] ) || isset ( $_REQUEST ['authorize'] )) {
		$params = array (
				'oauth_callback' => OAUTH_CALLBACK 
		);
		
		$response = $XeroOAuth->request ( 'GET', $XeroOAuth->url ( 'RequestToken', '' ), $params );
		
		if ($XeroOAuth->response ['code'] == 200) {
			
			$scope = "";
			// $scope = 'payroll.payrollcalendars,payroll.superfunds,payroll.payruns,payroll.payslip,payroll.employees,payroll.TaxDeclaration';
			if ($_REQUEST ['authenticate'] > 1)
				$scope = 'payroll.employees,payroll.payruns,payroll.timesheets';
			
			print_r ( $XeroOAuth->extract_params ( $XeroOAuth->response ['response'] ) );
			$_SESSION ['oauth'] = $XeroOAuth->extract_params ( $XeroOAuth->response ['response'] );
			
			$authurl = $XeroOAuth->url ( "Authorize", '' ) . "?oauth_token={$_SESSION['oauth']['oauth_token']}&scope=" . $scope;
			echo '<p>To complete the OAuth flow follow this URL: <a href="' . $authurl . '">' . $authurl . '</a></p>';
		} else {
			outputError ( $XeroOAuth );
		}
	}
	
	testLinks ();
}

'YOURCONSUMERKEY', 'shared_secret' => 'YOURSECRET', // API versions 'core_version' => '2.0', 'payroll_version' => '1.0', 'file_version' => '1.0' ); if (XRO_APP_TYPE == "Private" || XRO_APP_TYPE == "Partner") { $signatures ['rsa_private_key'] = BASE_PATH . '/certs/privatekey.pem'; $signatures ['rsa_public_key'] = BASE_PATH . '/certs/publickey.cer'; } if (XRO_APP_TYPE == "Partner") { $signatures ['curl_ssl_cert'] = BASE_PATH . '/certs/entrust-cert-RQ3.pem'; $signatures ['curl_ssl_password'] = '1234'; $signatures ['curl_ssl_key'] = BASE_PATH . '/certs/entrust-private-RQ3.pem'; } $XeroOAuth = new XeroOAuth ( array_merge ( array ( 'application_type' => XRO_APP_TYPE, 'oauth_callback' => OAUTH_CALLBACK, 'user_agent' => $useragent ), $signatures ) ); $initialCheck = $XeroOAuth->diagnostics (); $checkErrors = count ( $initialCheck ); if ($checkErrors > 0) { // you could handle any config errors here, or keep on truckin if you like to live dangerously foreach ( $initialCheck as $check ) { echo 'Error: ' . $check . PHP_EOL; } } else { $here = XeroOAuth::php_self (); session_start (); $oauthSession = retrieveSession (); include 'tests/tests.php'; if (isset ( $_REQUEST ['oauth_verifier'] )) { $XeroOAuth->config ['access_token'] = $_SESSION ['oauth'] ['oauth_token']; $XeroOAuth->config ['access_token_secret'] = $_SESSION ['oauth'] ['oauth_token_secret']; $code = $XeroOAuth->request ( 'GET', $XeroOAuth->url ( 'AccessToken', '' ), array ( 'oauth_verifier' => $_REQUEST ['oauth_verifier'], 'oauth_token' => $_REQUEST ['oauth_token'] ) ); if ($XeroOAuth->response ['code'] == 200) { $response = $XeroOAuth->extract_params ( $XeroOAuth->response ['response'] ); $session = persistSession ( $response ); unset ( $_SESSION ['oauth'] ); header ( "Location: {$here}" ); } else { outputError ( $XeroOAuth ); } // start the OAuth dance } elseif (isset ( $_REQUEST ['authenticate'] ) || isset ( $_REQUEST ['authorize'] )) { $params = array ( 'oauth_callback' => OAUTH_CALLBACK ); $response = $XeroOAuth->request ( 'GET', $XeroOAuth->url ( 'RequestToken', '' ), $params ); if ($XeroOAuth->response ['code'] == 200) { $scope = ""; // $scope = 'payroll.payrollcalendars,payroll.superfunds,payroll.payruns,payroll.payslip,payroll.employees,payroll.TaxDeclaration'; if ($_REQUEST ['authenticate'] > 1) $scope = 'payroll.employees,payroll.payruns,payroll.timesheets'; print_r ( $XeroOAuth->extract_params ( $XeroOAuth->response ['response'] ) ); $_SESSION ['oauth'] = $XeroOAuth->extract_params ( $XeroOAuth->response ['response'] ); $authurl = $XeroOAuth->url ( "Authorize", '' ) . "?oauth_token={$_SESSION['oauth']['oauth_token']}&scope=" . $scope; echo '

To complete the OAuth flow follow this URL: ' . $authurl . '

'; } else { outputError ( $XeroOAuth ); } } testLinks (); }