Square Payment Module for Zen Cart [Support Thread]

[dennisns7d]

This sounds like what I encountered a couple years ago. My "fix" was to add a few lines to square_handler.php:

<?php
/**
 * Callback module for Square payment module
 * Updated 2019-03-15
 */
header('Access-Control-Allow-Origin: *');

$mode = 'cli';
if (!empty($_GET['code'])) {
    $mode = 'web';
}
$verbose = false;
if (!isset($_SERVER['REQUEST_URI'])) $_SERVER['REQUEST_URI'] = __FILE__;    // to avoid PHP notice for CLI
if (!isset($_SERVER['SCRIPT_NAME'])) $_SERVER['SCRIPT_NAME'] = __FILE__;    // to avoid PHP notice for CLI
require 'includes/application_top.php';
if (empty($PHP_SELF)) $PHP_SELF = __FILE__; // ensure that $PHP_SELF is not empty
require DIR_WS_CLASSES . 'payment.php';
if ($mode === 'web' && (empty($_GET['code']) || empty($_GET['state']))) {
    if ($verbose) echo 'INVALID PARAMS';
    http_response_code(400);
    exit(1);
}
$module = new payment('square');
$square = new square;
if ($mode === 'web') {
    if ($verbose) error_log('SQUARE TOKEN REQUEST - auth code for exchange: ' . $_GET['code'] . "\n\n" . print_r($_GET, true));
    $square->exchangeForToken($_GET['code']);
    exit(0);
}
if ($mode === 'cli') {
    if (!defined('MODULE_PAYMENT_SQUARE_STATUS') || MODULE_PAYMENT_SQUARE_STATUS !== 'True') {
        if ($verbose) echo 'MODULE DISABLED';
        http_response_code(417);
        exit(1);
    }
    $is_browser = (isset($_SERVER['HTTP_HOST']) || PHP_SAPI !== 'cli');
    $result = $square->token_refresh_check();
    if ($verbose) echo $result;
    if ($result === 'failure') {
        if (!$is_browser) echo 'Square Token Refresh Failure. See logs.';
        http_response_code(417);
        exit(1);
    }
}
exit(0);

I found that for the host I was using that $PHP_SELF was empty when the script was run via cron and prevented the proper setup of the necessary classes, tripping the failure of creating an instance of the square class. I also squashed a couple PHP notices when patching the bug.