total amount check added on success url

YenePay · Oct 9, 2020 · ed90465 · ed90465
1 parent 0d4180b
commit ed90465
Showing 1 changed file with 10 additions and 6 deletions.
diff --git a/woo-yenepay.php b/woo-yenepay.php
@@ -230,11 +230,15 @@ public function success_webhook() {
 								//cURL used here to call yenepay's payment gateway API
 								$result = $checkoutHelper->RequestPDT($pdtModel);
 								if($result['result'] == 'SUCCESS' && ($result['Status'] == 'Paid' || $result['Status'] == 'Delivered' || $result['Status'] == 'Completed')){
-									// Payment complete
-									$order->payment_complete();
-									// Add order note
-									$order->add_order_note( sprintf( __( 'YenePay payment approved! Transaction ID: %s ', 'woocommerce' ), $transactionId ) );
-
+									if(floatval($result['TotalAmount']) == $order->get_total()){
+										// Payment complete
+										$order->payment_complete();
+										// Add order note
+										$order->add_order_note( sprintf( __( 'YenePay payment approved! Transaction ID: %s ', 'woocommerce' ), $transactionId ) );
+									}
+									else{
+										self::log("Total amount mismatch on PDT request for order: ".$order_id);
+									}
 								}
 								else{
 									self::log("failed PDT request. PDT result is: ".var_dump($result));
@@ -310,7 +314,7 @@ public function ipn_webhook(){
 			$helper = new CheckoutHelper();
 
 			//check if the order total here and the total amount sent via ipn match
-			if(floatval($_POST['TotalAmount']) == $wc_order->get_order_total){
+			if(floatval($_POST['TotalAmount']) == $wc_order->get_total()){
 				//Call yenepay's payment gateway API and check the IPN validity
 				//cURL used here to call yenepay's payment gateway API
 				if($helper->isIPNAuthentic($ipnModel))