Gecko [ www.foryou-vip.com ]

Name	Size	Permission	Date
index.php	7.79 KB	-rw-r--r--	2025-11-25 13:09
newpayment.php	64.01 KB	-rw-r--r--	2025-11-25 13:09
paymentko.php	8.45 KB	-rw-r--r--	2025-11-25 13:09
paymentok.php	36.64 KB	-rw-r--r--	2025-11-25 13:09

Rename

<?php
/* Copyright (C) 2001-2002	Rodolphe Quiedeville	<rodolphe@quiedeville.org>
 * Copyright (C) 2006-2017	Laurent Destailleur		<eldy@users.sourceforge.net>
 * Copyright (C) 2009-2012	Regis Houssin			<regis.houssin@capnetworks.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <http://www.gnu.org/licenses/>.
 *
 * For Paypal test: https://developer.paypal.com/
 * For Paybox test: ???
 * For Stripe test: Use credit card 4242424242424242 .More example on https://stripe.com/docs/testing
 */

/**
 *     	\file       htdocs/public/payment/newpayment.php
 *		\ingroup    core
 *		\brief      File to offer a way to make a payment for a particular Dolibarr object
 */

define("NOLOGIN",1);		// This means this output page does not require to be logged.
define("NOCSRFCHECK",1);	// We accept to go on this page from external web site.

// For MultiCompany module.
// Do not use GETPOST here, function is not defined and get of entity must be done before including main.inc.php
$entity=(! empty($_GET['entity']) ? (int) $_GET['entity'] : (! empty($_POST['entity']) ? (int) $_POST['entity'] : (! empty($_GET['e']) ? (int) $_GET['e'] : (! empty($_POST['e']) ? (int) $_POST['e'] : 1))));
if (is_numeric($entity)) define("DOLENTITY", $entity);

require '../../main.inc.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/company.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/payments.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/functions2.lib.php';
require_once DOL_DOCUMENT_ROOT.'/product/class/product.class.php';
require_once DOL_DOCUMENT_ROOT.'/societe/class/societeaccount.class.php';

// Security check
// No check on module enabled. Done later according to $validpaymentmethod

$langs->loadLangs(array("main","other","dict","bills","companies","errors","paybox","paypal","stripe"));     // File with generic data

$action=GETPOST('action','aZ09');

// Input are:
// type ('invoice','order','contractline'),
// id (object id),
// amount (required if id is empty),
// tag (a free text, required if type is empty)
// currency (iso code)

$suffix=GETPOST("suffix",'aZ09');
$amount=price2num(GETPOST("amount",'alpha'));
if (! GETPOST("currency",'alpha')) $currency=$conf->currency;
else $currency=GETPOST("currency",'alpha');
$source = GETPOST("s",'alpha')?GETPOST("s",'alpha'):GETPOST("source",'alpha');
$download = GETPOST('d','int')?GETPOST('d','int'):GETPOST('download','int');

if (! $action)
{
	if (! GETPOST("amount",'alpha') && ! $source)
	{
		print $langs->trans('ErrorBadParameters')." - amount or source";
		exit;
	}
	if (is_numeric($amount) && ! GETPOST("tag",'alpha') && ! $source)
	{
		print $langs->trans('ErrorBadParameters')." - tag or source";
		exit;
	}
	if ($source && ! GETPOST("ref",'alpha'))
	{
		print $langs->trans('ErrorBadParameters')." - ref";
		exit;
	}
}

$paymentmethod=GETPOST('paymentmethod','alphanohtml')?GETPOST('paymentmethod','alphanohtml'):'';	// Empty in most cases. Defined when a payment mode is forced
$validpaymentmethod=array();

// Detect $paymentmethod
foreach($_POST as $key => $val)
{
	if (preg_match('/^dopayment_(.*)$/', $key, $reg))
	{
		$paymentmethod=$reg[1];
		break;
	}
}

// Define $urlwithroot
//$urlwithouturlroot=preg_replace('/'.preg_quote(DOL_URL_ROOT,'/').'$/i','',trim($dolibarr_main_url_root));
//$urlwithroot=$urlwithouturlroot.DOL_URL_ROOT;		// This is to use external domain name found into config file
$urlwithroot=DOL_MAIN_URL_ROOT;						// This is to use same domain name than current. For Paypal payment, we can use internal URL like localhost.

$urlok=$urlwithroot.'/public/payment/paymentok.php?';
$urlko=$urlwithroot.'/public/payment/paymentko.php?';

// Complete urls for post treatment
$ref=$REF=GETPOST('ref','alpha');
$TAG=GETPOST("tag",'alpha');
$FULLTAG=GETPOST("fulltag",'alpha');		// fulltag is tag with more informations
$SECUREKEY=GETPOST("securekey");	        // Secure key
if ($paymentmethod && ! preg_match('/'.preg_quote('PM='.$paymentmethod,'/').'/', $FULLTAG)) $FULLTAG.=($FULLTAG?'.':'').'PM='.$paymentmethod;

if (! empty($suffix))
{
	$urlok.='suffix='.urlencode($suffix).'&';
	$urlko.='suffix='.urlencode($suffix).'&';
}
if ($source)
{
	$urlok.='s='.urlencode($source).'&';
	$urlko.='s='.urlencode($source).'&';
}
if (! empty($REF))
{
	$urlok.='ref='.urlencode($REF).'&';
	$urlko.='ref='.urlencode($REF).'&';
}
if (! empty($TAG))
{
	$urlok.='tag='.urlencode($TAG).'&';
	$urlko.='tag='.urlencode($TAG).'&';
}
if (! empty($FULLTAG))
{
	$urlok.='fulltag='.urlencode($FULLTAG).'&';
	$urlko.='fulltag='.urlencode($FULLTAG).'&';
}
if (! empty($SECUREKEY))
{
	$urlok.='securekey='.urlencode($SECUREKEY).'&';
	$urlko.='securekey='.urlencode($SECUREKEY).'&';
}
if (! empty($entity))
{
	$urlok.='e='.urlencode($entity).'&';
	$urlko.='e='.urlencode($entity).'&';
}
$urlok=preg_replace('/&$/','',$urlok);  // Remove last &
$urlko=preg_replace('/&$/','',$urlko);  // Remove last &

// Find valid payment methods

if ((empty($paymentmethod) || $paymentmethod == 'paypal') && ! empty($conf->paypal->enabled))
{
	require_once DOL_DOCUMENT_ROOT.'/paypal/lib/paypal.lib.php';
	require_once DOL_DOCUMENT_ROOT.'/paypal/lib/paypalfunctions.lib.php';

// Check parameters
	$PAYPAL_API_OK="";
	if ($urlok) $PAYPAL_API_OK=$urlok;
	$PAYPAL_API_KO="";
	if ($urlko) $PAYPAL_API_KO=$urlko;
	if (empty($PAYPAL_API_USER))
	{
		dol_print_error('',"Paypal setup param PAYPAL_API_USER not defined");
		return -1;
	}
	if (empty($PAYPAL_API_PASSWORD))
	{
		dol_print_error('',"Paypal setup param PAYPAL_API_PASSWORD not defined");
		return -1;
	}
	if (empty($PAYPAL_API_SIGNATURE))
	{
		dol_print_error('',"Paypal setup param PAYPAL_API_SIGNATURE not defined");
		return -1;
	}

$validpaymentmethod['paypal']='valid';
}

if ((empty($paymentmethod) || $paymentmethod == 'paybox') && ! empty($conf->paybox->enabled))
{
	$langs->load("paybox");

// TODO

$validpaymentmethod['paybox']='valid';
}

if ((empty($paymentmethod) || $paymentmethod == 'stripe') && ! empty($conf->stripe->enabled))
{
	$langs->load("stripe");

require_once DOL_DOCUMENT_ROOT.'/stripe/config.php';
	/* already included into /stripe/config.php
	require_once DOL_DOCUMENT_ROOT.'/core/lib/company.lib.php';
	require_once DOL_DOCUMENT_ROOT.'/core/lib/payments.lib.php';
	require_once DOL_DOCUMENT_ROOT.'/stripe/lib/stripe.lib.php';
	require_once DOL_DOCUMENT_ROOT.'/includes/stripe/init.php';
	*/

$validpaymentmethod['stripe']='valid';
}

// TODO Replace previous set of $validpaymentmethod with this line:
//$validpaymentmethod = getValidOnlinePaymentMethods($paymentmethod);

// Check security token
$valid=true;
if (! empty($conf->global->PAYMENT_SECURITY_TOKEN))
{
	if (! empty($conf->global->PAYMENT_SECURITY_TOKEN_UNIQUE))
	{
		if ($source && $REF) $token = dol_hash($conf->global->PAYMENT_SECURITY_TOKEN . $source . $REF, 2);    // Use the source in the hash to avoid duplicates if the references are identical
		else $token = dol_hash($conf->global->PAYMENT_SECURITY_TOKEN, 2);
	}
	else
	{
		$token = $conf->global->PAYMENT_SECURITY_TOKEN;
	}
	if ($SECUREKEY != $token)
	{
		if (empty($conf->global->PAYMENT_SECURITY_ACCEPT_ANY_TOKEN)) $valid=false;	// PAYMENT_SECURITY_ACCEPT_ANY_TOKEN is for backward compatibility
		else dol_syslog("Warning: PAYMENT_SECURITY_ACCEPT_ANY_TOKEN is on", LOG_WARNING);
	}

if (! $valid)
	{
		print '<div class="error">Bad value for key.</div>';
		//print 'SECUREKEY='.$SECUREKEY.' token='.$token.' valid='.$valid;
		exit;
	}
}

if (! empty($paymentmethod) && empty($validpaymentmethod[$paymentmethod]))
{
	print 'Payment module for payment method '.$paymentmethod.' is not active';
	exit;
}
if (empty($validpaymentmethod))
{
	print 'No active payment module (Paypal, Stripe, Paybox, ...)';
	exit;
}

// Common variables
$creditor=$mysoc->name;
$paramcreditor='ONLINE_PAYMENT_CREDITOR';
$paramcreditorlong='ONLINE_PAYMENT_CREDITOR_'.$suffix;
if (! empty($conf->global->$paramcreditorlong)) $creditor=$conf->global->$paramcreditorlong;
else if (! empty($conf->global->$paramcreditor)) $creditor=$conf->global->$paramcreditor;

/*
 * Actions
 */

// Action dopayment is called after choosing the payment mode
if ($action == 'dopayment')
{
	if ($paymentmethod == 'paypal')
	{
		$PAYPAL_API_PRICE=price2num(GETPOST("newamount",'alpha'),'MT');
		$PAYPAL_PAYMENT_TYPE='Sale';

// Vars that are used as global var later in print_paypal_redirect()
		$origfulltag=GETPOST("fulltag",'alpha');
		$shipToName=GETPOST("shipToName",'alpha');
		$shipToStreet=GETPOST("shipToStreet",'alpha');
		$shipToCity=GETPOST("shipToCity",'alpha');
		$shipToState=GETPOST("shipToState",'alpha');
		$shipToCountryCode=GETPOST("shipToCountryCode",'alpha');
		$shipToZip=GETPOST("shipToZip",'alpha');
		$shipToStreet2=GETPOST("shipToStreet2",'alpha');
		$phoneNum=GETPOST("phoneNum",'alpha');
		$email=GETPOST("email",'alpha');
		$desc=GETPOST("desc",'alpha');
		$thirdparty_id=GETPOST('thirdparty_id', 'int');

// Special case for Paypal-Indonesia
		if ($shipToCountryCode == 'ID' && ! preg_match('/\-/', $shipToState))
		{
			$shipToState = 'ID-'.$shipToState;
		}

$mesg='';
		if (empty($PAYPAL_API_PRICE) || ! is_numeric($PAYPAL_API_PRICE))
		{
			$mesg=$langs->trans("ErrorFieldRequired",$langs->transnoentitiesnoconv("Amount"));
			$action = '';
		}
		//elseif (empty($EMAIL))          $mesg=$langs->trans("ErrorFieldRequired",$langs->transnoentitiesnoconv("YourEMail"));
		//elseif (! isValidEMail($EMAIL)) $mesg=$langs->trans("ErrorBadEMail",$EMAIL);
		elseif (! $origfulltag)
		{
			$mesg=$langs->trans("ErrorFieldRequired",$langs->transnoentitiesnoconv("PaymentCode"));
			$action = '';
		}

//var_dump($_POST);
		if (empty($mesg))
		{
			dol_syslog("newpayment.php call paypal api and do redirect", LOG_DEBUG);

// Other
			$PAYPAL_API_DEVISE="USD";
			//if ($currency == 'EUR') $PAYPAL_API_DEVISE="EUR";
			//if ($currency == 'USD') $PAYPAL_API_DEVISE="USD";
			if (! empty($currency)) $PAYPAL_API_DEVISE=$currency;

// Show var initialized by include fo paypal lib at begin of this file
			dol_syslog("Submit Paypal form", LOG_DEBUG);
			dol_syslog("PAYPAL_API_USER: $PAYPAL_API_USER", LOG_DEBUG);
			dol_syslog("PAYPAL_API_PASSWORD: ".preg_replace('/./', '*', $PAYPAL_API_PASSWORD), LOG_DEBUG);  // No password into log files
			dol_syslog("PAYPAL_API_SIGNATURE: $PAYPAL_API_SIGNATURE", LOG_DEBUG);
			dol_syslog("PAYPAL_API_SANDBOX: $PAYPAL_API_SANDBOX", LOG_DEBUG);
			dol_syslog("PAYPAL_API_OK: $PAYPAL_API_OK", LOG_DEBUG);
			dol_syslog("PAYPAL_API_KO: $PAYPAL_API_KO", LOG_DEBUG);
			dol_syslog("PAYPAL_API_PRICE: $PAYPAL_API_PRICE", LOG_DEBUG);
			dol_syslog("PAYPAL_API_DEVISE: $PAYPAL_API_DEVISE", LOG_DEBUG);
			// All those fields may be empty when making a payment for a free amount for example
			dol_syslog("shipToName: $shipToName", LOG_DEBUG);
			dol_syslog("shipToStreet: $shipToStreet", LOG_DEBUG);
			dol_syslog("shipToCity: $shipToCity", LOG_DEBUG);
			dol_syslog("shipToState: $shipToState", LOG_DEBUG);
			dol_syslog("shipToCountryCode: $shipToCountryCode", LOG_DEBUG);
			dol_syslog("shipToZip: $shipToZip", LOG_DEBUG);
			dol_syslog("shipToStreet2: $shipToStreet2", LOG_DEBUG);
			dol_syslog("phoneNum: $phoneNum", LOG_DEBUG);
			dol_syslog("email: $email", LOG_DEBUG);
			dol_syslog("desc: $desc", LOG_DEBUG);

dol_syslog("SCRIPT_URI: ".(empty($_SERVER["SCRIPT_URI"])?'':$_SERVER["SCRIPT_URI"]), LOG_DEBUG);	// If defined script uri must match domain of PAYPAL_API_OK and PAYPAL_API_KO
			//$_SESSION["PaymentType"]=$PAYPAL_PAYMENT_TYPE;
			//$_SESSION["currencyCodeType"]=$PAYPAL_API_DEVISE;
			//$_SESSION["FinalPaymentAmt"]=$PAYPAL_API_PRICE;

// A redirect is added if API call successfull
			$mesg = print_paypal_redirect($PAYPAL_API_PRICE,$PAYPAL_API_DEVISE,$PAYPAL_PAYMENT_TYPE,$PAYPAL_API_OK,$PAYPAL_API_KO, $FULLTAG);

// If we are here, it means the Paypal redirect was not done, so we show error message
			$action = '';
		}
	}

if ($paymentmethod == 'paybox')
	{
		$PRICE=price2num(GETPOST("newamount"),'MT');
		$email=GETPOST("email",'alpha');
		$thirdparty_id=GETPOST('thirdparty_id', 'int');

$origfulltag=GETPOST("fulltag",'alpha');

// Securekey into back url useless for back url and we need an url lower than 150.
		$urlok = preg_replace('/securekey=[^&]+/', '', $urlok);
		$urlko = preg_replace('/securekey=[^&]+/', '', $urlko);

$mesg='';
		if (empty($PRICE) || ! is_numeric($PRICE)) $mesg=$langs->trans("ErrorFieldRequired",$langs->transnoentitiesnoconv("Amount"));
		elseif (empty($email))            $mesg=$langs->trans("ErrorFieldRequired",$langs->transnoentitiesnoconv("YourEMail"));
		elseif (! isValidEMail($email))   $mesg=$langs->trans("ErrorBadEMail",$email);
		elseif (! $origfulltag)           $mesg=$langs->trans("ErrorFieldRequired",$langs->transnoentitiesnoconv("PaymentCode"));
		elseif (dol_strlen($urlok) > 150) $mesg='Error urlok too long '.$urlok.'( Paybox requires 150, found '.strlen($urlok).')';
		elseif (dol_strlen($urlko) > 150) $mesg='Error urlko too long '.$urlko.'( Paybox requires 150, found '.strlen($urlok).')';

if (empty($mesg))
		{
			dol_syslog("newpayment.php call paybox api and do redirect", LOG_DEBUG);

include_once DOL_DOCUMENT_ROOT.'/paybox/lib/paybox.lib.php';
			print_paybox_redirect($PRICE, $conf->currency, $email, $urlok, $urlko, $FULLTAG);

session_destroy();
			exit;
		}
	}

if ($paymentmethod == 'stripe')
	{
		if (GETPOST('newamount','alpha')) $amount = price2num(GETPOST('newamount','alpha'),'MT');
		else
		{
			setEventMessages($langs->trans("ErrorFieldRequired", $langs->transnoentitiesnoconv("Amount")), null, 'errors');
			$action = '';
		}
	}
}

// Called when choosing Stripe mode, after the 'dopayment'
if ($action == 'charge' && ! empty($conf->stripe->enabled))
{
	$amountstripe = $amount;

// Correct the amount according to unit of currency
	// See https://support.stripe.com/questions/which-zero-decimal-currencies-does-stripe-support
	$arrayzerounitcurrency=array('BIF', 'CLP', 'DJF', 'GNF', 'JPY', 'KMF', 'KRW', 'MGA', 'PYG', 'RWF', 'VND', 'VUV', 'XAF', 'XOF', 'XPF');
	if (! in_array($currency, $arrayzerounitcurrency)) $amountstripe=$amountstripe * 100;

dol_syslog("POST keys  : ".join(',', array_keys($_POST)), LOG_DEBUG, 0, '_stripe');
	dol_syslog("POST values: ".join(',', $_POST), LOG_DEBUG, 0, '_stripe');

$stripeToken = GETPOST("stripeToken",'alpha');
	$email = GETPOST("email",'alpha');
	$thirdparty_id=GETPOST('thirdparty_id', 'int');		// Note that for payment following online registration for members, this is empty because thirdparty is created once payment is confirmed by paymentok.php
	$dol_type=(GETPOST('s', 'alpha') ? GETPOST('s', 'alpha') : GETPOST('source', 'alpha'));
  	$dol_id=GETPOST('dol_id', 'int');
  	$vatnumber = GETPOST('vatnumber','alpha');
	$savesource=GETPOSTISSET('savesource')?GETPOST('savesource', 'int'):1;

dol_syslog("stripeToken = ".$stripeToken, LOG_DEBUG, 0, '_stripe');
	dol_syslog("email = ".$email, LOG_DEBUG, 0, '_stripe');
	dol_syslog("thirdparty_id = ".$thirdparty_id, LOG_DEBUG, 0, '_stripe');
	dol_syslog("vatnumber = ".$vatnumber, LOG_DEBUG, 0, '_stripe');

$error = 0;

try {
		$metadata = array(
			'dol_version' => DOL_VERSION,
			'dol_entity'  => $conf->entity,
			'dol_company' => $mysoc->name,		// Usefull when using multicompany
			'ipaddress'=>(empty($_SERVER['REMOTE_ADDR'])?'':$_SERVER['REMOTE_ADDR'])
		);

if (! empty($thirdparty_id)) $metadata["dol_thirdparty_id"] = $thirdparty_id;

if ($thirdparty_id > 0)
		{
			dol_syslog("Search existing Stripe customer profile for thirdparty_id=".$thirdparty_id, LOG_DEBUG, 0, '_stripe');

$service = 'StripeTest';
			$servicestatus = 0;
			if (! empty($conf->global->STRIPE_LIVE) && ! GETPOST('forcesandbox','alpha'))
			{
				$service = 'StripeLive';
				$servicestatus = 1;
			}
			$stripeacc = null;	// No Oauth/connect use for public pages

$thirdparty = new Societe($db);
			$thirdparty->fetch($thirdparty_id);

// Create Stripe customer
			include_once DOL_DOCUMENT_ROOT.'/stripe/class/stripe.class.php';
			$stripe = new Stripe($db);
			$customer = $stripe->customerStripe($thirdparty, $stripeacc, $servicestatus, 1);

// Create Stripe card from Token
			if ($savesource) {
				$card = $customer->sources->create(array("source" => $stripeToken, "metadata" => $metadata));
			} else {
				$card = $stripeToken;
			}

if (empty($card))
			{
				$error++;
				dol_syslog('Failed to create card record', LOG_WARNING, 0, '_stripe');
				setEventMessages('Failed to create card record', null, 'errors');
				$action='';
			}
			else
			{
				if (! empty($FULLTAG))       $metadata["FULLTAG"] = $FULLTAG;
				if (! empty($dol_id))        $metadata["dol_id"] = $dol_id;
				if (! empty($dol_type))      $metadata["dol_type"] = $dol_type;

dol_syslog("Create charge on card ".$card->id, LOG_DEBUG, 0, '_stripe');
				$charge = \Stripe\Charge::create(array(
					'amount'   => price2num($amountstripe, 'MU'),
					'currency' => $currency,
					'capture'  => true,							// Charge immediatly
					'description' => 'Stripe payment: '.$FULLTAG,
					'metadata' => $metadata,
					'customer' => $customer->id,
					'source' => $card,
					'statement_descriptor' => dol_trunc(dol_trunc(dol_string_unaccent($mysoc->name), 6, 'right', 'UTF-8', 1).' '.$FULLTAG, 22, 'right', 'UTF-8', 1)     // 22 chars that appears on bank receipt
				));
				// Return $charge = array('id'=>'ch_XXXX', 'status'=>'succeeded|pending|failed', 'failure_code'=>, 'failure_message'=>...)
				if (empty($charge))
				{
					$error++;
					dol_syslog('Failed to charge card', LOG_WARNING, 0, '_stripe');
					setEventMessages('Failed to charge card', null, 'errors');
					$action='';
				}
			}
		}
		else
		{
			dol_syslog("Create anonymous customer card profile", LOG_DEBUG, 0, '_stripe');
			$customer = \Stripe\Customer::create(array(
				'email' => $email,
				'description' => ($email?'Anonymous customer for '.$email:'Anonymous customer'),
				'metadata' => $metadata,
				'business_vat_id' => ($vatnumber?$vatnumber:null),
				'source'  => $stripeToken           // source can be a token OR array('object'=>'card', 'exp_month'=>xx, 'exp_year'=>xxxx, 'number'=>xxxxxxx, 'cvc'=>xxx, 'name'=>'Cardholder's full name', zip ?)
			));
			// Return $customer = array('id'=>'cus_XXXX', ...)

if (! empty($FULLTAG))       $metadata["FULLTAG"] = $FULLTAG;
        if (! empty($dol_id))        $metadata["dol_id"] = $dol_id;
        if (! empty($dol_type))      $metadata["dol_type"] = $dol_type;

// The customer was just created with a source, so we can make a charge
			// with no card defined, the source just used for customer creation will be used.
			dol_syslog("Create charge", LOG_DEBUG, 0, '_stripe');
			$charge = \Stripe\Charge::create(array(
				'customer' => $customer->id,
				'amount'   => price2num($amountstripe, 'MU'),
				'currency' => $currency,
				'capture'  => true,							// Charge immediatly
				'description' => 'Stripe payment: '.$FULLTAG,
				'metadata' => $metadata,
				'statement_descriptor' => dol_trunc(dol_trunc(dol_string_unaccent($mysoc->name), 6, 'right', 'UTF-8', 1).' '.$FULLTAG, 22, 'right', 'UTF-8', 1)     // 22 chars that appears on bank receipt
			));
			// Return $charge = array('id'=>'ch_XXXX', 'status'=>'succeeded|pending|failed', 'failure_code'=>, 'failure_message'=>...)
			if (empty($charge))
			{
				$error++;
				dol_syslog('Failed to charge card', LOG_WARNING, 0, '_stripe');
				setEventMessages('Failed to charge card', null, 'errors');
				$action='';
			}
		}
	} catch(\Stripe\Error\Card $e) {
		// Since it's a decline, \Stripe\Error\Card will be caught
		$body = $e->getJsonBody();
		$err  = $body['error'];

print('Status is:' . $e->getHttpStatus() . "\n");
		print('Type is:' . $err['type'] . "\n");
		print('Code is:' . $err['code'] . "\n");
		// param is '' in this case
		print('Param is:' . $err['param'] . "\n");
		print('Message is:' . $err['message'] . "\n");

$error++;
		dol_syslog($e->getMessage(), LOG_WARNING, 0, '_stripe');
		setEventMessages($e->getMessage(), null, 'errors');
		$action='';
	} catch (\Stripe\Error\RateLimit $e) {
		// Too many requests made to the API too quickly
		$error++;
		dol_syslog($e->getMessage(), LOG_WARNING, 0, '_stripe');
		setEventMessages($e->getMessage(), null, 'errors');
		$action='';
	} catch (\Stripe\Error\InvalidRequest $e) {
		// Invalid parameters were supplied to Stripe's API
		$error++;
		dol_syslog($e->getMessage(), LOG_WARNING, 0, '_stripe');
		setEventMessages($e->getMessage(), null, 'errors');
		$action='';
	} catch (\Stripe\Error\Authentication $e) {
		// Authentication with Stripe's API failed
		// (maybe you changed API keys recently)
		$error++;
		dol_syslog($e->getMessage(), LOG_WARNING, 0, '_stripe');
		setEventMessages($e->getMessage(), null, 'errors');
		$action='';
	} catch (\Stripe\Error\ApiConnection $e) {
		// Network communication with Stripe failed
		$error++;
		dol_syslog($e->getMessage(), LOG_WARNING, 0, '_stripe');
		setEventMessages($e->getMessage(), null, 'errors');
		$action='';
	} catch (\Stripe\Error\Base $e) {
		// Display a very generic error to the user, and maybe send
		// yourself an email
		$error++;
		dol_syslog($e->getMessage(), LOG_WARNING, 0, '_stripe');
		setEventMessages($e->getMessage(), null, 'errors');
		$action='';
	} catch (Exception $e) {
		// Something else happened, completely unrelated to Stripe
		$error++;
		dol_syslog($e->getMessage(), LOG_WARNING, 0, '_stripe');
		setEventMessages($e->getMessage(), null, 'errors');
		$action='';
	}

$_SESSION["onlinetoken"] = $stripeToken;
	$_SESSION["FinalPaymentAmt"] = $amount;
	$_SESSION["currencyCodeType"] = $currency;
	$_SESSION["paymentType"] = '';
	$_SESSION['ipaddress'] = $_SERVER['REMOTE_ADDR'];  // Payer ip
	$_SESSION['payerID'] = is_object($customer)?$customer->id:'';
	$_SESSION['TRANSACTIONID'] = is_object($charge)?$charge->id:'';

dol_syslog("Action charge stripe result=".$error." ip=".$_SESSION['ipaddress'], LOG_DEBUG, 0, '_stripe');
	dol_syslog("onlinetoken=".$_SESSION["onlinetoken"]." FinalPaymentAmt=".$_SESSION["FinalPaymentAmt"]." currencyCodeType=".$_SESSION["currencyCodeType"]." payerID=".$_SESSION['payerID']." TRANSACTIONID=".$_SESSION['TRANSACTIONID'], LOG_DEBUG, 0, '_stripe');
	dol_syslog("FULLTAG=".$FULLTAG, LOG_DEBUG, 0, '_stripe');
	dol_syslog("Now call the redirect to paymentok or paymentko", LOG_DEBUG, 0, '_stripe');

if ($error)
	{
		header("Location: ".$urlko);
		exit;
	}
	else
	{
		header("Location: ".$urlok);
		exit;
	}

}

/*
 * View
 */

$head='';
if (! empty($conf->global->ONLINE_PAYMENT_CSS_URL)) $head='<link rel="stylesheet" type="text/css" href="'.$conf->global->ONLINE_PAYMENT_CSS_URL.'?lang='.$langs->defaultlang.'">'."\n";

$conf->dol_hide_topmenu=1;
$conf->dol_hide_leftmenu=1;

llxHeader($head, $langs->trans("PaymentForm"), '', '', 0, 0, '', '', '', 'onlinepaymentbody');

// Check link validity
if ($source && in_array($ref, array('member_ref', 'contractline_ref', 'invoice_ref', 'order_ref', '')))
{
	$langs->load("errors");
	dol_print_error_email('BADREFINPAYMENTFORM', $langs->trans("ErrorBadLinkSourceSetButBadValueForRef", $source, $ref));
	llxFooter();
	$db->close();
	exit;
}

// Show sandbox warning
if ((empty($paymentmethod) || $paymentmethod == 'paypal') && ! empty($conf->paypal->enabled) && (! empty($conf->global->PAYPAL_API_SANDBOX) || GETPOST('forcesandbox','alpha')))		// We can force sand box with param 'forcesandbox'
{
	dol_htmloutput_mesg($langs->trans('YouAreCurrentlyInSandboxMode','Paypal'),'','warning');
}
if ((empty($paymentmethod) || $paymentmethod == 'stripe') && ! empty($conf->stripe->enabled) && (empty($conf->global->STRIPE_LIVE) || GETPOST('forcesandbox','alpha')))
{
	dol_htmloutput_mesg($langs->trans('YouAreCurrentlyInSandboxMode','Stripe'),'','warning');
}

print '<span id="dolpaymentspan"></span>'."\n";
print '<div class="center">'."\n";
print '<form id="dolpaymentform" class="center" name="paymentform" action="'.$_SERVER["PHP_SELF"].'" method="POST">'."\n";
print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">'."\n";
print '<input type="hidden" name="action" value="dopayment">'."\n";
print '<input type="hidden" name="tag" value="'.GETPOST("tag",'alpha').'">'."\n";
print '<input type="hidden" name="suffix" value="'.GETPOST("suffix",'alpha').'">'."\n";
print '<input type="hidden" name="securekey" value="'.$SECUREKEY.'">'."\n";
print '<input type="hidden" name="e" value="'.$entity.'" />';
print '<input type="hidden" name="forcesandbox" value="'.GETPOST('forcesandbox','alpha').'" />';
print "\n";
print ''."\n";
print ''."\n";
// Additionnal information for each payment system
if (! empty($conf->paypal->enabled))
{
	print ''."\n";
	print ''."\n";
}
if (! empty($conf->paybox->enabled))
{

}
if (! empty($conf->stripe->enabled))
{
	print ''."\n";
}
print ''."\n";
print ''."\n";
print "\n";

print '<table id="dolpaymenttable" summary="Payment form" class="center">'."\n";

// Show logo (search order: logo defined by PAYMENT_LOGO_suffix, then PAYMENT_LOGO, then small company logo, large company logo, theme logo, common logo)
$width=0;
// Define logo and logosmall
$logosmall=$mysoc->logo_small;
$logo=$mysoc->logo;
$paramlogo='ONLINE_PAYMENT_LOGO_'.$suffix;
if (! empty($conf->global->$paramlogo)) $logosmall=$conf->global->$paramlogo;
else if (! empty($conf->global->ONLINE_PAYMENT_LOGO)) $logosmall=$conf->global->ONLINE_PAYMENT_LOGO;
//print ''."\n";
// Define urllogo
$urllogo='';
if (! empty($logosmall) && is_readable($conf->mycompany->dir_output.'/logos/thumbs/'.$logosmall))
{
	$urllogo=DOL_URL_ROOT.'/viewimage.php?modulepart=mycompany&amp;file='.urlencode('thumbs/'.$logosmall);
	$width=150;
}
elseif (! empty($logo) && is_readable($conf->mycompany->dir_output.'/logos/'.$logo))
{
	$urllogo=DOL_URL_ROOT.'/viewimage.php?modulepart=mycompany&amp;file='.urlencode($logo);
	$width=150;
}
// Output html code for logo
if ($urllogo)
{
	print '<tr>';
	print '<td align="center"><img id="dolpaymentlogo" title="'.$title.'" src="'.$urllogo.'"';
	if ($width) print ' width="'.$width.'"';
	print '></td>';
	print '</tr>'."\n";
}

// Output introduction text
$text='';
if (! empty($conf->global->PAYMENT_NEWFORM_TEXT))
{
	$langs->load("members");
	if (preg_match('/^$(.*)$$/',$conf->global->PAYMENT_NEWFORM_TEXT,$reg)) $text.=$langs->trans($reg[1])."<br>\n";
	else $text.=$conf->global->PAYMENT_NEWFORM_TEXT."<br>\n";
	$text='<tr><td align="center"><br>'.$text.'<br></td></tr>'."\n";
}
if (empty($text))
{
	$text.='<tr><td class="textpublicpayment"><br><strong>'.$langs->trans("WelcomeOnPaymentPage").'</strong></td></tr>'."\n";
	$text.='<tr><td class="textpublicpayment">'.$langs->trans("ThisScreenAllowsYouToPay",$creditor).'<br><br></td></tr>'."\n";
}
print $text;

// Output payment summary form
print '<tr><td align="center">';
print '<table with="100%" id="tablepublicpayment">';
print '<tr><td align="left" colspan="2" class="opacitymedium">'.$langs->trans("ThisIsInformationOnPayment").' :</td></tr>'."\n";

$found=false;
$error=0;
$var=false;

$object = null;

// Free payment
if (! $source)
{
	$found=true;
	$tag=GETPOST("tag");
	$fulltag=$tag;

// Creditor
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Creditor");
	print '</td><td class="CTableRow'.($var?'1':'2').'"><b>'.$creditor.'</b>';
	print '<input type="hidden" name="creditor" value="'.$creditor.'">';
	print '</td></tr>'."\n";

// Amount
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Amount");
	if (empty($amount)) print ' ('.$langs->trans("ToComplete").')';
	print '</td><td class="CTableRow'.($var?'1':'2').'">';
	if (empty($amount) || ! is_numeric($amount))
	{
		print '<input type="hidden" name="amount" value="'.GETPOST("amount",'int').'">';
		print '<input class="flat maxwidth75" type="text" name="newamount" value="'.price2num(GETPOST("newamount","alpha"),'MT').'">';
	}
	else {
		print '<b>'.price($amount).'</b>';
		print '<input type="hidden" name="amount" value="'.$amount.'">';
		print '<input type="hidden" name="newamount" value="'.$amount.'">';
	}
	// Currency
	print ' <b>'.$langs->trans("Currency".$currency).'</b>';
	print '<input type="hidden" name="currency" value="'.$currency.'">';
	print '</td></tr>'."\n";

// Tag
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("PaymentCode");
	print '</td><td class="CTableRow'.($var?'1':'2').'"><b style="word-break: break-all;">'.$fulltag.'</b>';
	print '<input type="hidden" name="tag" value="'.$tag.'">';
	print '<input type="hidden" name="fulltag" value="'.$fulltag.'">';
	print '</td></tr>'."\n";

// We do not add fields shipToName, shipToStreet, shipToCity, shipToState, shipToCountryCode, shipToZip, shipToStreet2, phoneNum
	// as they don't exists (buyer is unknown, tag is free).
}

// Payment on customer order
if ($source == 'order')
{
	$found=true;
	$langs->load("orders");

require_once DOL_DOCUMENT_ROOT.'/commande/class/commande.class.php';

$order=new Commande($db);
	$result=$order->fetch('',$ref);
	if ($result <= 0)
	{
		$mesg=$order->error;
		$error++;
	}
	else
	{
		$result=$order->fetch_thirdparty($order->socid);

$object = $order;
	}

if ($action != 'dopayment') // Do not change amount if we just click on first dopayment
	{
		$amount=$order->total_ttc;
		if (GETPOST("amount",'int')) $amount=GETPOST("amount",'int');
		$amount=price2num($amount);
	}

$fulltag='ORD='.$order->ref.'.CUS='.$order->thirdparty->id;
	//$fulltag.='.NAM='.strtr($order->thirdparty->name,"-"," ");
	if (! empty($TAG)) { $tag=$TAG; $fulltag.='.TAG='.$TAG; }
	$fulltag=dol_string_unaccent($fulltag);

// Debitor
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("ThirdParty");
	print '</td><td class="CTableRow'.($var?'1':'2').'"><b>'.$order->thirdparty->name.'</b>';

// Object
	$text='<b>'.$langs->trans("PaymentOrderRef",$order->ref).'</b>';
	if (GETPOST('desc','alpha')) $text='<b>'.$langs->trans(GETPOST('desc','alpha')).'</b>';
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Designation");
	print '</td><td class="CTableRow'.($var?'1':'2').'">'.$text;
	print '<input type="hidden" name="s" value="'.dol_escape_htmltag($source).'">';
	print '<input type="hidden" name="ref" value="'.dol_escape_htmltag($order->ref).'">';
  	print '<input type="hidden" name="dol_id" value="'.dol_escape_htmltag($order->id).'">';
	$directdownloadlink = $order->getLastMainDocLink('commande');
	if ($directdownloadlink)
	{
		print '<br><a href="'.$directdownloadlink.'">';
		print img_mime($order->last_main_doc,'');
		print $langs->trans("DownloadDocument").'</a>';
	}
	print '</td></tr>'."\n";

// Shipping address
	$shipToName=$order->thirdparty->name;
	$shipToStreet=$order->thirdparty->address;
	$shipToCity=$order->thirdparty->town;
	$shipToState=$order->thirdparty->state_code;
	$shipToCountryCode=$order->thirdparty->country_code;
	$shipToZip=$order->thirdparty->zip;
	$shipToStreet2='';
	$phoneNum=$order->thirdparty->phone;
	if ($shipToName && $shipToStreet && $shipToCity && $shipToCountryCode && $shipToZip)
	{
		print '<input type="hidden" name="shipToName" value="'.$shipToName.'">'."\n";
		print '<input type="hidden" name="shipToStreet" value="'.$shipToStreet.'">'."\n";
		print '<input type="hidden" name="shipToCity" value="'.$shipToCity.'">'."\n";
		print '<input type="hidden" name="shipToState" value="'.$shipToState.'">'."\n";
		print '<input type="hidden" name="shipToCountryCode" value="'.$shipToCountryCode.'">'."\n";
		print '<input type="hidden" name="shipToZip" value="'.$shipToZip.'">'."\n";
		print '<input type="hidden" name="shipToStreet2" value="'.$shipToStreet2.'">'."\n";
		print '<input type="hidden" name="phoneNum" value="'.$phoneNum.'">'."\n";
	}
	else
	{
		print ''."\n";
	}
	if (is_object($order->thirdparty)) print '<input type="hidden" name="thirdparty_id" value="'.$order->thirdparty->id.'">'."\n";
	print '<input type="hidden" name="email" value="'.$order->thirdparty->email.'">'."\n";
	print '<input type="hidden" name="vatnumber" value="'.$order->thirdparty->tva_intra.'">'."\n";
	$labeldesc=$langs->trans("Order").' '.$order->ref;
	if (GETPOST('desc','alpha')) $labeldesc=GETPOST('desc','alpha');
	print '<input type="hidden" name="desc" value="'.dol_escape_htmltag($labeldesc).'">'."\n";
}

// Payment on customer invoice
if ($source == 'invoice')
{
	$found=true;
	$langs->load("bills");

require_once DOL_DOCUMENT_ROOT.'/compta/facture/class/facture.class.php';

$invoice=new Facture($db);
	$result=$invoice->fetch('',$ref);
	if ($result <= 0)
	{
		$mesg=$invoice->error;
		$error++;
	}
	else
	{
		$result=$invoice->fetch_thirdparty($invoice->socid);

$object = $invoice;
	}

if ($action != 'dopayment') // Do not change amount if we just click on first dopayment
	{
		$amount=price2num($invoice->total_ttc - $invoice->getSommePaiement());
		if (GETPOST("amount",'int')) $amount=GETPOST("amount",'int');
		$amount=price2num($amount);
	}

$fulltag='INV='.$invoice->ref.'.CUS='.$invoice->thirdparty->id;
	//$fulltag.='.NAM='.strtr($invoice->thirdparty->name,"-"," ");
	if (! empty($TAG)) { $tag=$TAG; $fulltag.='.TAG='.$TAG; }
	$fulltag=dol_string_unaccent($fulltag);

// Object
	$text='<b>'.$langs->trans("PaymentInvoiceRef",$invoice->ref).'</b>';
	if (GETPOST('desc','alpha')) $text='<b>'.$langs->trans(GETPOST('desc','alpha')).'</b>';
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Designation");
	print '</td><td class="CTableRow'.($var?'1':'2').'">'.$text;
	print '<input type="hidden" name="s" value="'.dol_escape_htmltag($source).'">';
	print '<input type="hidden" name="ref" value="'.dol_escape_htmltag($invoice->ref).'">';
 	print '<input type="hidden" name="dol_id" value="'.dol_escape_htmltag($invoice->id).'">';
	$directdownloadlink = $invoice->getLastMainDocLink('facture');
	if ($directdownloadlink)
	{
		print '<br><a href="'.$directdownloadlink.'">';
		print img_mime($invoice->last_main_doc,'');
		print $langs->trans("DownloadDocument").'</a>';
	}
	print '</td></tr>'."\n";

// Amount
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("PaymentAmount");
	if (empty($amount) && empty($object->paye)) print ' ('.$langs->trans("ToComplete").')';
	print '</td><td class="CTableRow'.($var?'1':'2').'">';
	if (empty($object->paye))
	{
		if (empty($amount) || ! is_numeric($amount))
		{
			print '<input type="hidden" name="amount" value="'.GETPOST("amount",'int').'">';
			print '<input class="flat maxwidth75" type="text" name="newamount" value="'.price2num(GETPOST("newamount","alpha"), 'MT').'">';
		}
		else {
			print '<b>'.price($amount).'</b>';
			print '<input type="hidden" name="amount" value="'.$amount.'">';
			print '<input type="hidden" name="newamount" value="'.$amount.'">';
		}
		// Currency
		print ' <b>'.$langs->trans("Currency".$currency).'</b>';
		print '<input type="hidden" name="currency" value="'.$currency.'">';
	}
	else
	{
		print price($object->total_ttc, 1, $langs);
	}
	print '</td></tr>'."\n";

// Add download link
	if ($download > 0)
	{
		print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Document");
		print '</td><td class="CTableRow'.($var?'1':'2').'">';
		print $invoice->getDirectExternalLink(1);
		print '</td></tr>'."\n";
	}

// Shipping address
	$shipToName=$invoice->thirdparty->name;
	$shipToStreet=$invoice->thirdparty->address;
	$shipToCity=$invoice->thirdparty->town;
	$shipToState=$invoice->thirdparty->state_code;
	$shipToCountryCode=$invoice->thirdparty->country_code;
	$shipToZip=$invoice->thirdparty->zip;
	$shipToStreet2='';
	$phoneNum=$invoice->thirdparty->phone;
	if ($shipToName && $shipToStreet && $shipToCity && $shipToCountryCode && $shipToZip)
	{
		print '<input type="hidden" name="shipToName" value="'.$shipToName.'">'."\n";
		print '<input type="hidden" name="shipToStreet" value="'.$shipToStreet.'">'."\n";
		print '<input type="hidden" name="shipToCity" value="'.$shipToCity.'">'."\n";
		print '<input type="hidden" name="shipToState" value="'.$shipToState.'">'."\n";
		print '<input type="hidden" name="shipToCountryCode" value="'.$shipToCountryCode.'">'."\n";
		print '<input type="hidden" name="shipToZip" value="'.$shipToZip.'">'."\n";
		print '<input type="hidden" name="shipToStreet2" value="'.$shipToStreet2.'">'."\n";
		print '<input type="hidden" name="phoneNum" value="'.$phoneNum.'">'."\n";
	}
	else
	{
		print ''."\n";
	}
	if (is_object($invoice->thirdparty)) print '<input type="hidden" name="thirdparty_id" value="'.$invoice->thirdparty->id.'">'."\n";
	print '<input type="hidden" name="email" value="'.$invoice->thirdparty->email.'">'."\n";
	print '<input type="hidden" name="vatnumber" value="'.$invoice->thirdparty->tva_intra.'">'."\n";
	$labeldesc=$langs->trans("Invoice").' '.$invoice->ref;
	if (GETPOST('desc','alpha')) $labeldesc=GETPOST('desc','alpha');
	print '<input type="hidden" name="desc" value="'.dol_escape_htmltag($labeldesc).'">'."\n";
}

// Payment on contract line
if ($source == 'contractline')
{
	$found=true;
	$langs->load("contracts");

require_once DOL_DOCUMENT_ROOT.'/contrat/class/contrat.class.php';

$contract=new Contrat($db);
	$contractline=new ContratLigne($db);

$result=$contractline->fetch('',$ref);
	if ($result <= 0)
	{
		$mesg=$contractline->error;
		$error++;
	}
	else
	{
		if ($contractline->fk_contrat > 0)
		{
			$object = $contractline;

$result=$contract->fetch($contractline->fk_contrat);
			if ($result > 0)
			{
				$result=$contract->fetch_thirdparty($contract->socid);
			}
			else
			{
				$mesg=$contract->error;
				$error++;
			}
		}
		else
		{
			$mesg='ErrorRecordNotFound';
			$error++;
		}
	}

if ($action != 'dopayment') // Do not change amount if we just click on first dopayment
	{
		$amount=$contractline->total_ttc;

if ($contractline->fk_product && ! empty($conf->global->PAYMENT_USE_NEW_PRICE_FOR_CONTRACTLINES))
		{
			$product=new Product($db);
			$result=$product->fetch($contractline->fk_product);

// We define price for product (TODO Put this in a method in product class)
			if (! empty($conf->global->PRODUIT_MULTIPRICES))
			{
				$pu_ht = $product->multiprices[$contract->thirdparty->price_level];
				$pu_ttc = $product->multiprices_ttc[$contract->thirdparty->price_level];
				$price_base_type = $product->multiprices_base_type[$contract->thirdparty->price_level];
			}
			else
			{
				$pu_ht = $product->price;
				$pu_ttc = $product->price_ttc;
				$price_base_type = $product->price_base_type;
			}

$amount=$pu_ttc;
			if (empty($amount))
			{
				dol_print_error('','ErrorNoPriceDefinedForThisProduct');
				exit;
			}
		}

if (GETPOST("amount",'int')) $amount=GETPOST("amount",'int');
		$amount=price2num($amount);
	}

$fulltag='COL='.$contractline->ref.'.CON='.$contract->ref.'.CUS='.$contract->thirdparty->id.'.DAT='.dol_print_date(dol_now(),'%Y%m%d%H%M');
	//$fulltag.='.NAM='.strtr($contract->thirdparty->name,"-"," ");
	if (! empty($TAG)) { $tag=$TAG; $fulltag.='.TAG='.$TAG; }
	$fulltag=dol_string_unaccent($fulltag);

$qty=1;
	if (GETPOST('qty')) $qty=GETPOST('qty');

// Object
	$text='<b>'.$langs->trans("PaymentRenewContractId",$contract->ref,$contractline->ref).'</b>';
	if ($contractline->fk_product)
	{
		$contractline->fetch_product();
		$text.='<br>'.$contractline->product->ref.($contractline->product->label?' - '.$contractline->product->label:'');
	}
	if ($contractline->description) $text.='<br>'.dol_htmlentitiesbr($contractline->description);
	//if ($contractline->date_fin_validite) {
	//	$text.='<br>'.$langs->trans("DateEndPlanned").': ';
	//	$text.=dol_print_date($contractline->date_fin_validite);
	//}
	if ($contractline->date_fin_validite)
	{
		$text.='<br>'.$langs->trans("ExpiredSince").': '.dol_print_date($contractline->date_fin_validite);
	}
	if (GETPOST('desc','alpha')) $text='<b>'.$langs->trans(GETPOST('desc','alpha')).'</b>';
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Designation");
	print '</td><td class="CTableRow'.($var?'1':'2').'">'.$text;
	print '<input type="hidden" name="source" value="'.dol_escape_htmltag($source).'">';
	print '<input type="hidden" name="ref" value="'.dol_escape_htmltag($contractline->ref).'">';
	print '<input type="hidden" name="dol_id" value="'.dol_escape_htmltag($contractline->id).'">';
	$directdownloadlink = $contract->getLastMainDocLink('contract');
	if ($directdownloadlink)
	{
		print '<br><a href="'.$directdownloadlink.'">';
		print img_mime($contract->last_main_doc,'');
		print $langs->trans("DownloadDocument").'</a>';
	}
	print '</td></tr>'."\n";

// Quantity
	$label=$langs->trans("Quantity");
	$qty=1;
	$duration='';
	if ($contractline->fk_product)
	{
		if ($contractline->product->isService() && $contractline->product->duration_value > 0)
		{
			$label=$langs->trans("Duration");

// TODO Put this in a global method
			if ($contractline->product->duration_value > 1)
			{
				$dur=array("h"=>$langs->trans("Hours"),"d"=>$langs->trans("DurationDays"),"w"=>$langs->trans("DurationWeeks"),"m"=>$langs->trans("DurationMonths"),"y"=>$langs->trans("DurationYears"));
			}
			else
			{
				$dur=array("h"=>$langs->trans("Hour"),"d"=>$langs->trans("DurationDay"),"w"=>$langs->trans("DurationWeek"),"m"=>$langs->trans("DurationMonth"),"y"=>$langs->trans("DurationYear"));
			}
			$duration=$contractline->product->duration_value.' '.$dur[$contractline->product->duration_unit];
		}
	}
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$label.'</td>';
	print '<td class="CTableRow'.($var?'1':'2').'"><b>'.($duration?$duration:$qty).'</b>';
	print '<input type="hidden" name="newqty" value="'.dol_escape_htmltag($qty).'">';
	print '</b></td></tr>'."\n";

// Shipping address
	$shipToName=$contract->thirdparty->name;
	$shipToStreet=$contract->thirdparty->address;
	$shipToCity=$contract->thirdparty->town;
	$shipToState=$contract->thirdparty->state_code;
	$shipToCountryCode=$contract->thirdparty->country_code;
	$shipToZip=$contract->thirdparty->zip;
	$shipToStreet2='';
	$phoneNum=$contract->thirdparty->phone;
	if ($shipToName && $shipToStreet && $shipToCity && $shipToCountryCode && $shipToZip)
	{
		print '<input type="hidden" name="shipToName" value="'.$shipToName.'">'."\n";
		print '<input type="hidden" name="shipToStreet" value="'.$shipToStreet.'">'."\n";
		print '<input type="hidden" name="shipToCity" value="'.$shipToCity.'">'."\n";
		print '<input type="hidden" name="shipToState" value="'.$shipToState.'">'."\n";
		print '<input type="hidden" name="shipToCountryCode" value="'.$shipToCountryCode.'">'."\n";
		print '<input type="hidden" name="shipToZip" value="'.$shipToZip.'">'."\n";
		print '<input type="hidden" name="shipToStreet2" value="'.$shipToStreet2.'">'."\n";
		print '<input type="hidden" name="phoneNum" value="'.$phoneNum.'">'."\n";
	}
	else
	{
		print ''."\n";
	}
	if (is_object($contract->thirdparty)) print '<input type="hidden" name="thirdparty_id" value="'.$contract->thirdparty->id.'">'."\n";
	print '<input type="hidden" name="email" value="'.$contract->thirdparty->email.'">'."\n";
	print '<input type="hidden" name="vatnumber" value="'.$contract->thirdparty->tva_intra.'">'."\n";
	$labeldesc=$langs->trans("Contract").' '.$contract->ref;
	if (GETPOST('desc','alpha')) $labeldesc=GETPOST('desc','alpha');
	print '<input type="hidden" name="desc" value="'.dol_escape_htmltag($labeldesc).'">'."\n";
}

// Payment on member subscription
if ($source == 'membersubscription')
{
	$found=true;
	$langs->load("members");

require_once DOL_DOCUMENT_ROOT.'/adherents/class/adherent.class.php';
	require_once DOL_DOCUMENT_ROOT.'/adherents/class/subscription.class.php';

$member=new Adherent($db);
	$result=$member->fetch('',$ref);
	if ($result <= 0)
	{
		$mesg=$member->error;
		$error++;
	}
	else
	{
		$member->fetch_thirdparty();
		$object = $member;
		$subscription=new Subscription($db);
	}

if ($action != 'dopayment') // Do not change amount if we just click on first dopayment
	{
		$amount=$subscription->total_ttc;
		if (GETPOST("amount",'int')) $amount=GETPOST("amount",'int');
		$amount=price2num($amount);
	}

$fulltag='MEM='.$member->id.'.DAT='.dol_print_date(dol_now(),'%Y%m%d%H%M');
	if (! empty($TAG)) { $tag=$TAG; $fulltag.='.TAG='.$TAG; }
	$fulltag=dol_string_unaccent($fulltag);

// Creditor

print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Creditor");
	print '</td><td class="CTableRow'.($var?'1':'2').'"><b>'.$creditor.'</b>';
	print '<input type="hidden" name="creditor" value="'.$creditor.'">';
	print '</td></tr>'."\n";

// Debitor

print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Member");
	print '</td><td class="CTableRow'.($var?'1':'2').'"><b>';
	if ($member->morphy == 'mor' && ! empty($member->societe)) print $member->societe;
	else print $member->getFullName($langs);
	print '</b>';

// Object

$text='<b>'.$langs->trans("PaymentSubscription").'</b>';
	if (GETPOST('desc','alpha')) $text='<b>'.$langs->trans(GETPOST('desc','alpha')).'</b>';
	print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Designation");
	print '</td><td class="CTableRow'.($var?'1':'2').'">'.$text;
	print '<input type="hidden" name="source" value="'.dol_escape_htmltag($source).'">';
	print '<input type="hidden" name="ref" value="'.dol_escape_htmltag($member->ref).'">';
	print '</td></tr>'."\n";

if ($member->last_subscription_date || $member->last_subscription_amount)
	{
		// Last subscription date

print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("LastSubscriptionDate");
		print '</td><td class="CTableRow'.($var?'1':'2').'">'.dol_print_date($member->last_subscription_date,'day');
		print '</td></tr>'."\n";

// Last subscription amount

print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("LastSubscriptionAmount");
		print '</td><td class="CTableRow'.($var?'1':'2').'">'.price($member->last_subscription_amount);
		print '</td></tr>'."\n";

if (empty($amount) && ! GETPOST('newamount','alpha')) $_GET['newamount']=$member->last_subscription_amount;
	}

// Amount

print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("Amount");
	if (empty($amount))
	{
		if (empty($conf->global->MEMBER_NEWFORM_AMOUNT)) print ' ('.$langs->trans("ToComplete");
		if (! empty($conf->global->MEMBER_EXT_URL_SUBSCRIPTION_INFO)) print ' - <a href="'.$conf->global->MEMBER_EXT_URL_SUBSCRIPTION_INFO.'" rel="external" target="_blank">'.$langs->trans("SeeHere").'</a>';
		if (empty($conf->global->MEMBER_NEWFORM_AMOUNT)) print ')';
	}
	print '</td><td class="CTableRow'.($var?'1':'2').'">';
	$valtoshow='';
	if (empty($amount) || ! is_numeric($amount))
	{
		$valtoshow=price2num(GETPOST("newamount",'alpha'),'MT');
		// force default subscription amount to value defined into constant...
		if (empty($valtoshow))
		{
			if (! empty($conf->global->MEMBER_NEWFORM_EDITAMOUNT)) {
				if (! empty($conf->global->MEMBER_NEWFORM_AMOUNT)) {
					$valtoshow = $conf->global->MEMBER_NEWFORM_AMOUNT;
				}
			}
			else {
				if (! empty($conf->global->MEMBER_NEWFORM_AMOUNT)) {
					$amount = $conf->global->MEMBER_NEWFORM_AMOUNT;
				}
			}
		}
	}
	if (empty($amount) || ! is_numeric($amount))
	{
		//$valtoshow=price2num(GETPOST("newamount",'alpha'),'MT');
		if (! empty($conf->global->MEMBER_MIN_AMOUNT) && $valtoshow) $valtoshow=max($conf->global->MEMBER_MIN_AMOUNT,$valtoshow);
		print '<input type="hidden" name="amount" value="'.GETPOST("amount",'int').'">';
		print '<input class="flat maxwidth75" type="text" name="newamount" value="'.$valtoshow.'">';
	}
	else {
		$valtoshow=$amount;
		if (! empty($conf->global->MEMBER_MIN_AMOUNT) && $valtoshow) $valtoshow=max($conf->global->MEMBER_MIN_AMOUNT,$valtoshow);
		print '<b>'.price($valtoshow).'</b>';
		print '<input type="hidden" name="amount" value="'.$valtoshow.'">';
		print '<input type="hidden" name="newamount" value="'.$valtoshow.'">';
	}
	// Currency
	print ' <b>'.$langs->trans("Currency".$currency).'</b>';
	print '<input type="hidden" name="currency" value="'.$currency.'">';
	print '</td></tr>'."\n";

// Tag

print '<tr class="CTableRow'.($var?'1':'2').'"><td class="CTableRow'.($var?'1':'2').'">'.$langs->trans("PaymentCode");
	print '</td><td class="CTableRow'.($var?'1':'2').'"><b style="word-break: break-all;">'.$fulltag.'</b>';
	print '<input type="hidden" name="tag" value="'.$tag.'">';
	print '<input type="hidden" name="fulltag" value="'.$fulltag.'">';
	print '</td></tr>'."\n";

// Shipping address
	$shipToName=$member->getFullName($langs);
	$shipToStreet=$member->address;
	$shipToCity=$member->town;
	$shipToState=$member->state_code;
	$shipToCountryCode=$member->country_code;
	$shipToZip=$member->zip;
	$shipToStreet2='';
	$phoneNum=$member->phone;
	if ($shipToName && $shipToStreet && $shipToCity && $shipToCountryCode && $shipToZip)
	{
		print '';
		print '<input type="hidden" name="shipToName" value="'.$shipToName.'">'."\n";
		print '<input type="hidden" name="shipToStreet" value="'.$shipToStreet.'">'."\n";
		print '<input type="hidden" name="shipToCity" value="'.$shipToCity.'">'."\n";
		print '<input type="hidden" name="shipToState" value="'.$shipToState.'">'."\n";
		print '<input type="hidden" name="shipToCountryCode" value="'.$shipToCountryCode.'">'."\n";
		print '<input type="hidden" name="shipToZip" value="'.$shipToZip.'">'."\n";
		print '<input type="hidden" name="shipToStreet2" value="'.$shipToStreet2.'">'."\n";
		print '<input type="hidden" name="phoneNum" value="'.$phoneNum.'">'."\n";
	}
	else
	{
		print ''."\n";
	}
	if (is_object($member->thirdparty)) print '<input type="hidden" name="thirdparty_id" value="'.$member->thirdparty->id.'">'."\n";
	print '<input type="hidden" name="email" value="'.$member->email.'">'."\n";
	$labeldesc = $langs->trans("PaymentSubscription");
	if (GETPOST('desc','alpha')) $labeldesc=GETPOST('desc','alpha');
	print '<input type="hidden" name="desc" value="'.dol_escape_htmltag($labeldesc).'">'."\n";
}

if (! $found && ! $mesg) $mesg=$langs->trans("ErrorBadParameters");

if ($mesg) print '<tr><td align="center" colspan="2"><br><div class="warning">'.$mesg.'</div></td></tr>'."\n";

print '</table>'."\n";
print "\n";

if ($action != 'dopayment')
{
	if ($found && ! $error)	// We are in a management option and no error
	{
		if ($source == 'invoice' && $object->paye)
		{
			print '<br><br><span class="amountpaymentcomplete">'.$langs->trans("InvoicePaid").'</span>';
		}
		else
		{
			// Buttons for all payments registration methods

if ((empty($paymentmethod) || $paymentmethod == 'paybox') && ! empty($conf->paybox->enabled))
			{
				// If STRIPE_PICTO_FOR_PAYMENT is 'cb' we show a picto of a crdit card instead of paybox
				print '<br><input class="button buttonpayment buttonpayment'.(empty($conf->global->PAYBOX_PICTO_FOR_PAYMENT)?'paybox':$conf->global->PAYBOX_PICTO_FOR_PAYMENT).'" type="submit" name="dopayment_paybox" value="'.$langs->trans("PayBoxDoPayment").'">';
			}

if ((empty($paymentmethod) || $paymentmethod == 'stripe') && ! empty($conf->stripe->enabled))
			{
				// If STRIPE_PICTO_FOR_PAYMENT is 'cb' we show a picto of a crdit card instead of stripe
				print '<br><input class="button buttonpayment buttonpayment'.(empty($conf->global->STRIPE_PICTO_FOR_PAYMENT)?'stripe':$conf->global->STRIPE_PICTO_FOR_PAYMENT).'" type="submit" name="dopayment_stripe" value="'.$langs->trans("StripeDoPayment").'">';
			}

if ((empty($paymentmethod) || $paymentmethod == 'paypal') && ! empty($conf->paypal->enabled))
			{
				if (empty($conf->global->PAYPAL_API_INTEGRAL_OR_PAYPALONLY)) $conf->global->PAYPAL_API_INTEGRAL_OR_PAYPALONLY='integral';

if ($conf->global->PAYPAL_API_INTEGRAL_OR_PAYPALONLY == 'integral')
				{
					print '<br><input class="button buttonpayment buttonpaymentpaypal" type="submit" name="dopayment_paypal" value="'.$langs->trans("PaypalOrCBDoPayment").'">';
				}
				if ($conf->global->PAYPAL_API_INTEGRAL_OR_PAYPALONLY == 'paypalonly')
				{
					print '<br><input class="button buttonpayment buttonpaymentpaypal" type="submit" name="dopayment_paypal" value="'.$langs->trans("PaypalDoPayment").'">';
				}
			}
		}
	}
	else
	{
		dol_print_error_email('ERRORNEWPAYMENT');
	}
}
else
{
	// Print
}

print '</td></tr>'."\n";

print '</table>'."\n";

print '</form>'."\n";
print '</div>'."\n";
print '<br>';

// Add more content on page for some services
if (preg_match('/^dopayment/',$action))
{

// Strip
	if (GETPOST('dopayment_stripe','alpha'))
	{
		// Simple checkout
		/*
		print '<script src="https://checkout.stripe.com/checkout.js"
		class="stripe-button"
		data-key="'.$stripearrayofkeys['publishable_key'].'"
		data-amount="'.$ttc.'"
		data-currency="'.$conf->currency.'"
		data-description="'.$ref.'">
		</script>';
		*/

// Personalized checkout
		print '<style>
	    /**
	     * The CSS shown here will not be introduced in the Quickstart guide, but shows
	     * how you can use CSS to style your Element s container.
	     */
	    .StripeElement {
	        background-color: white;
	        padding: 8px 12px;
	        border-radius: 4px;
	        border: 1px solid transparent;
	        box-shadow: 0 1px 3px 0 #e6ebf1;
	        -webkit-transition: box-shadow 150ms ease;
	        transition: box-shadow 150ms ease;
	    }

.StripeElement--focus {
	        box-shadow: 0 1px 3px 0 #cfd7df;
	    }

.StripeElement--invalid {
	        border-color: #fa755a;
	    }

.StripeElement--webkit-autofill {
	        background-color: #fefde5 !important;
	    }
	    </style>';

print '

<br>
	    <form action="'.$_SERVER['REQUEST_URI'].'" method="POST" id="payment-form">';

print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">'."\n";
		print '<input type="hidden" name="dopayment_stripe" value="1">'."\n";
		print '<input type="hidden" name="action" value="charge">'."\n";
		print '<input type="hidden" name="tag" value="'.$TAG.'">'."\n";
		print '<input type="hidden" name="s" value="'.$source.'">'."\n";
		print '<input type="hidden" name="ref" value="'.$REF.'">'."\n";
		print '<input type="hidden" name="fulltag" value="'.$FULLTAG.'">'."\n";
		print '<input type="hidden" name="suffix" value="'.$suffix.'">'."\n";
		print '<input type="hidden" name="securekey" value="'.$SECUREKEY.'">'."\n";
		print '<input type="hidden" name="e" value="'.$entity.'" />';
		print '<input type="hidden" name="amount" value="'.$amount.'">'."\n";
		print '<input type="hidden" name="currency" value="'.$currency.'">'."\n";
		print '<input type="hidden" name="forcesandbox" value="'.GETPOST('forcesandbox','alpha').'" />';
		print '<input type="hidden" name="email" value="'.GETPOST('email','alpha').'" />';
		print '<input type="hidden" name="thirdparty_id" value="'.GETPOST('thirdparty_id','int').'" />';

print '
	    <table id="dolpaymenttable" summary="Payment form" class="center">
	    <tbody><tr><td class="textpublicpayment">

<div class="form-row left">
	    <label for="card-element">
	    '.$langs->trans("CreditOrDebitCard").'
	    </label>
	    <div id="card-element">
	    
	    </div>
	    
	    <div id="card-errors" role="alert"></div>
	    </div>
	    <br>
	    <button class="butAction" id="buttontopay">'.$langs->trans("ValidatePayment").'</button>
	    <img id="hourglasstopay" class="hidden" src="'.DOL_URL_ROOT.'/theme/'.$conf->theme.'/img/working.gif'.'">
	    </td></tr></tbody></table>

</form>

// Create a Stripe client.
	    var stripe = Stripe('<?php echo $stripearrayofkeys['publishable_key']; // Defined into config.php ?>');

// Create an instance of Elements
	    var elements = stripe.elements();

// Custom styling can be passed to options when creating an Element.
	    // (Note that this demo uses a wider set of styles than the guide below.)
	    var style = {
	      base: {
	        color: '#32325d',
	        lineHeight: '24px',
	        fontFamily: '"Helvetica Neue", Helvetica, sans-serif',
	        fontSmoothing: 'antialiased',
	        fontSize: '16px',
	        '::placeholder': {
	          color: '#aab7c4'
	        }
	      },
	      invalid: {
	        color: '#fa755a',
	        iconColor: '#fa755a'
	      }
	    };

// Create an instance of the card Element
	    var card = elements.create('card', {style: style});

// Add an instance of the card Element into the `card-element` <div>
	    card.mount('#card-element');

// Handle real-time validation errors from the card Element.
	    card.addEventListener('change', function(event) {
	      var displayError = document.getElementById('card-errors');
	      if (event.error) {
	        displayError.textContent = event.error.message;
	      } else {
	        displayError.textContent = '';
	      }
	    });

// Handle form submission
	    var form = document.getElementById('payment-form');
	    console.log(form);
	    form.addEventListener('submit', function(event) {
	      event.preventDefault();
			<?php
			if (empty($conf->global->STRIPE_USE_3DSECURE))	// Ask credit card directly, no 3DS test
			{
			?>
				/* Use token */
				stripe.createToken(card).then(function(result) {
			        if (result.error) {
			          // Inform the user if there was an error
			          var errorElement = document.getElementById('card-errors');
			          errorElement.textContent = result.error.message;
			        } else {
			          // Send the token to your server
			          stripeTokenHandler(result.token);
			        }
				});
			<?php
			}
			else											// Ask credit card with 3DS test
			{
			?>
				/* Use 3DS source */
				stripe.createSource(card).then(function(result) {
				    if (result.error) {
				      // Inform the user if there was an error
				      var errorElement = document.getElementById('card-errors');
				      errorElement.textContent = result.error.message;
				    } else {
				      // Send the source to your server
				      stripeSourceHandler(result.source);
				    }
				});
			<?php
			}
			?>
	    });

/* Insert the Token into the form so it gets submitted to the server */
	    function stripeTokenHandler(token) {
	      // Insert the token ID into the form so it gets submitted to the server
	      var form = document.getElementById('payment-form');
	      var hiddenInput = document.createElement('input');
	      hiddenInput.setAttribute('type', 'hidden');
	      hiddenInput.setAttribute('name', 'stripeToken');
	      hiddenInput.setAttribute('value', token.id);
	      form.appendChild(hiddenInput);

// Submit the form
	      jQuery('#buttontopay').hide();
	      jQuery('#hourglasstopay').show();
	      console.log("submit token");
	      form.submit();
	    }

/* Insert the Source into the form so it gets submitted to the server */
		function stripeSourceHandler(source) {
		  // Insert the source ID into the form so it gets submitted to the server
		  var form = document.getElementById('payment-form');
		  var hiddenInput = document.createElement('input');
		  hiddenInput.setAttribute('type', 'hidden');
		  hiddenInput.setAttribute('name', 'stripeSource');
		  hiddenInput.setAttribute('value', source.id);
		  form.appendChild(hiddenInput);

// Submit the form
	      jQuery('#buttontopay').hide();
	      jQuery('#hourglasstopay').show();
	      console.log("submit source");
		  form.submit();
		}

<?php
		print '</script>';
	}
}

htmlPrintOnlinePaymentFooter($mysoc,$langs,1,$suffix,$object);

llxFooter('', 'public');

$db->close();