This file is indexed.

/usr/share/php/kohana2/modules/payment/libraries/drivers/Payment/Authorize.php is in libkohana2-modules-php 2.3.4-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
<?php defined('SYSPATH') OR die('No direct access allowed.');
/**
 * Authorize.net Payment Driver
 *
 * $Id: Authorize.php 4160 2009-04-07 21:03:16Z ixmatus $
 *
 * @package    Payment
 * @author     Kohana Team
 * @copyright  (c) 2007-2008 Kohana Team
 * @license    http://kohanaphp.com/license.html
 */
class Payment_Authorize_Driver implements Payment_Driver
{
	// Array containing any response codes set from the gateway
	private $response        = Null;
	
	private $transaction     = False;

	// Fields required to do a transaction
	private $required_fields = array
	(
		'x_login'           => FALSE,
		'x_version'         => TRUE,
		'x_delim_char'      => TRUE,
		'x_url'             => TRUE,
		'x_type'            => TRUE,
		'x_method'          => TRUE,
		'x_tran_key'        => FALSE,
		'x_relay_response'  => TRUE,
		'x_card_num'        => FALSE,
		'x_exp_date'        => FALSE,
		'x_amount'          => FALSE,
	);

	// Default required values
	private $authnet_values = array
	(
		'x_version'         => '3.1',
		'x_delim_char'      => '|',
		'x_delim_data'      => 'TRUE',
		'x_url'             => 'FALSE',
		'x_type'            => 'AUTH_CAPTURE',
		'x_method'          => 'CC',
		'x_relay_response'  => 'FALSE',
	);

	private $test_mode = TRUE;

	/**
	 * Sets the config for the class.
	 *
	 * @param  array  config passed from the library
	 */
	public function __construct($config)
	{
		$this->authnet_values['x_login']    = $config['auth_net_login_id'];
		$this->authnet_values['x_tran_key'] = $config['auth_net_tran_key'];
		
		$this->required_fields['x_login']   = !empty($config['auth_net_login_id']);
		$this->required_fields['x_tran_key']= !empty($config['auth_net_tran_key']);

		$this->curl_config  = $config['curl_config'];
		$this->test_mode    = $config['test_mode'];

		Kohana::log('debug', 'Authorize.net Payment Driver Initialized');
	}

	public function set_fields($fields)
	{
		foreach ((array) $fields as $key => $value)
		{
			$this->authnet_values['x_'.$key] = $value;
			if (array_key_exists('x_'.$key, $this->required_fields) and !empty($value)) $this->required_fields['x_'.$key] = TRUE;
		}
	}
	
	/**
	 * Retreives the response array from a successful
	 * transaction.
	 *
	 * @return array or Null
	 */
	public function get_response()
	{
		if (!$this->transaction)
			return $this->response;
		
		return NULL;
	}

	/**
	 * Process a given transaction.
	 *
	 * @return boolean
	 */
	public function process()
	{
		// Check for required fields
		if (in_array(FALSE, $this->required_fields))
		{
			$fields = array();
			foreach ($this->required_fields as $key => $field)
			{
				if (!$field) $fields[] = $key;
			}
			throw new Kohana_Exception('payment.required', implode(', ', $fields));
		}

		$fields = '';
		foreach ( $this->authnet_values as $key => $value )
		{
			$fields .= $key.'='.urlencode($value).'&';
		}

		$post_url = ($this->test_mode) ?
					'https://certification.authorize.net/gateway/transact.dll' : // Test mode URL
					'https://secure.authorize.net/gateway/transact.dll'; // Live URL

		$ch = curl_init($post_url);

		// Set custom curl options
		curl_setopt_array($ch, $this->curl_config);

		// Set the curl POST fields
		curl_setopt($ch, CURLOPT_POSTFIELDS, rtrim($fields, '& '));

		//execute post and get results
		$response = curl_exec($ch);
		
		curl_close($ch);
		
		if (!$response)
			throw new Kohana_Exception('payment.gateway_connection_error');

		// This could probably be done better, but it's taken right from the Authorize.net manual
		// Need testing to opimize probably
		$heading = substr_count($response, '|');

		for ($i=1; $i <= $heading; $i++)
		{
			$delimiter_position = strpos($response, '|');

			if ($delimiter_position !== False)
			{
				$response_code = substr($response, 0, $delimiter_position);
				
				$response_code = rtrim($response_code, '|');
				
				if($response_code == '')
					throw new Kohana_Exception('payment.gateway_connection_error');

				switch ($i)
				{
					case 1:
						$this->response    = (($response_code == '1') ? explode('|', $response) : False); // Approved
						
						$this->transaction = TRUE;
						
						return $this->transaction;
					default:
						$this->transaction = FALSE;
						
						return $this->transaction;
				}
			}
		}
	}
} // End Payment_Authorize_Driver Class