using System;
using System.Collections.Specialized;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Data.SqlClient;
using System.Drawing;
using System.IO;
using System.Linq;
using System.Net;
using System.Reflection;
using System.Text;
using System.Web;
using System.Windows.Forms;
using System.Security.Cryptography.X509Certificates;

namespace Action_Tire_Payment_Processor
{
    public partial class Form1 : Form
    {
        public Form1()
        {
            InitializeComponent();
            Settings.Init();
            labelVersion.Text = Assembly.GetExecutingAssembly().GetName().Version.ToString()+" - 2015-4-30";
            updateModeButton();
            Database.Init();
            System.Net.ServicePointManager.ServerCertificateValidationCallback +=
                delegate(object sender, System.Security.Cryptography.X509Certificates.X509Certificate certificate,
                                        System.Security.Cryptography.X509Certificates.X509Chain chain,
                                        System.Net.Security.SslPolicyErrors sslPolicyErrors)
                {
                    return true; // **** Always accept
                };
            /*
            Settings.SetOption("DBSERVER", "ACTIONSQL1");
            Settings.SetOption("DBNAME", "ATPP");
            Settings.SetOption("DBUSER", "ATPP_USER");
            Settings.SetOption("DBPASSWORD", "BBDS@7pp");
            Settings.SetOption("DBWINDOWS", "True");
            */
            btnCardSwipe_Click(null, null);

            this.Text = this.Text + " - Store " + Settings.GetOption("STORE");

            CheckOptions();
        }

        private void CheckOptions()
        {
            this.Text = "Action Tire Payment Processor - Store "+Settings.GetOption("STORE");
            menuBatchStore.Text = "Store " + Settings.GetOption("STORE");
            string reg = Settings.GetOption("GIFTREGISTRATION");
            if (reg.ToLower().Equals("false"))
            {
                registerCardsToolStripMenuItem.Enabled = false;
            }
            if (reg.ToLower().Equals("true"))
            {
                registerCardsToolStripMenuItem.Enabled = true;
            }
        }

        private void preferencesToolStripMenuItem_Click(object sender, EventArgs e)
        {
            PasswordDialog pd = new PasswordDialog();
            pd.code = "ADMIN";
            pd.subcode = "PASS2";
            DialogResult dr = pd.ShowDialog();
            while (dr == DialogResult.No)
            {
                dr = pd.ShowDialog();
            }
            if (dr != DialogResult.Yes) return;

            SettingsForm sf = new SettingsForm();
            sf.ShowDialog();
            CheckOptions();
            btnCardSwipe_Click(null, null);
        }

        private void exitToolStripMenuItem_Click(object sender, EventArgs e)
        {
            System.Environment.Exit(0);
        }

        private void processingToolStripMenuItem_Click(object sender, EventArgs e)
        {
            processingToolStripMenuItem.Checked = true;
            searchingToolStripMenuItem.Checked = false;
            updateModeButton();
        }

        private void searchingToolStripMenuItem_Click(object sender, EventArgs e)
        {
            processingToolStripMenuItem.Checked = false;
            searchingToolStripMenuItem.Checked = true;
            updateModeButton();
        }

        private void btnMode_Click(object sender, EventArgs e)
        {
            if (processingToolStripMenuItem.Checked)
            {
                PasswordDialog pd = new PasswordDialog();
                pd.code = "ADMIN";
                pd.subcode = "PASS2";
                DialogResult dr = pd.ShowDialog();
                while (dr == DialogResult.No)
                {
                    dr = pd.ShowDialog();
                }
                if (dr != DialogResult.Yes)
                {
                    btnCardSwipe_Click(null, null);
                    return;
                }
                searchingToolStripMenuItem.Checked = true;
                processingToolStripMenuItem.Checked = false;
            }
            else
            {
                searchingToolStripMenuItem.Checked = false;
                processingToolStripMenuItem.Checked = true;
            }
            updateModeButton();
            btnCardSwipe_Click(null, null);
        }

        private void updateModeButton()
        {
            btnMode.BackgroundImageLayout = ImageLayout.Center;
            if (searchingToolStripMenuItem.Checked)
                btnMode.BackgroundImage = Action_Tire_Payment_Processor.Properties.Resources.search;
            else
                btnMode.BackgroundImage = Action_Tire_Payment_Processor.Properties.Resources.process;
        }

        CardInfoForm cif = null;

        private void btnManualEntry_Click(object sender, EventArgs e)
        {
            labelStatus.Text = "Ready";
            cif = new CardInfoForm();
            BeginProcessPayment(cif);
        }

        private void btnCardSwipe_Click(object sender, EventArgs e)
        {
            labelStatus.Text = "Awaiting Card Swipe...";
            tbCardData.Focus();
        }

        private void tbCardData_TextChanged(object sender, EventArgs e)
        {
            string text = tbCardData.Text;
            if (text == "") return;
            if (text.Contains("\n"))
            {
                tbCardData.Text = "";
                CardSwipeComplete(text);
            }
        }

        private void tbCardData_Leave(object sender, EventArgs e)
        {
            labelStatus.Text = "Ready";
        }

        private void Form1_Click(object sender, EventArgs e)
        {
            CardSwipeComplete("");
        }

        private void CardSwipeComplete(string data)
        {
            labelStatus.Text = "Ready";
            if (data == "") return;
            //TODO: Parse card data
            //MessageBox.Show(data);
            int ES = data.IndexOf('?');  //End Sentinel (?)

            string Track1 = data.Substring(2, ES-2);
            string Track2 = data.Substring(ES+2, data.Length - (ES+5));

            string CardNumber = "";
            string FirstName = "";
            string LastName = "";
            string ExpirationDate = "";

            if (Track2.Length > 0 && Track2[0] == 'E')
            {
                MessageBox.Show("Invalid Card or Card Read Error");
                btnCardSwipe_Click(null, null);
                return;
            }

            try
            {
                CardNumber = Track1.Substring(2, data.IndexOf('^') - 2);
                throw new Exception("Remove");
            }
            catch
            {
                CardNumber = Track2.Substring(0, Track2.IndexOf('='));
            }
            try
            {
                string Names = Track1.Split('^')[1];
                string AdditionalData = Track1.Split('^')[2];
                LastName = Names.Split('/')[0].Trim();
                FirstName = Names.Split('/')[1].Trim();
                ExpirationDate = AdditionalData.Substring(2, 2) + "/" + AdditionalData.Substring(0, 2);

                cif = new CardInfoForm();

                cif.CardHolder = Names.Trim();
                cif.tbCardNumber.Text = CardNumber;
                cif.tbExpirationDate.Text = ExpirationDate;
                cif.tbFirstName.Text = FirstName;
                cif.tbLastName.Text = LastName;
            }
            catch (Exception ex)
            {
                MessageBox.Show("Invalid Card or Card Read Error");
                btnCardSwipe_Click(null, null);
                return;
            }
            cif.CardSwiped = true;
            BeginProcessPayment(cif);
        }

        private void BeginProcessPayment(CardInfoForm cif)
        {
            DialogResult dr = cif.ShowDialog();
            if (dr == DialogResult.OK)
            {
                labelStatus.Text = "Processing Payment...";
                ProcessPayment(cif);
            }
            else
            {
                btnCardSwipe_Click(null, null);
            }
        }

        private void ProcessPayment(CardInfoForm cif)
        {
            string PAYSCAPE = "https://secure.payscapegateway.com/api/transact.php";

            string query = "INSERT INTO Transactions (StoreID, PrinterIP, OrderID, TransType, Amount, CardNbr, CardType, " +
                    "CardTypeGroup, CardHolder, FirstName, LastName, ExpDate, Address, City, State, Zip, Phone, Fax, Email, DateCreated) VALUES (" +
                    "@StoreID, @PrinterIP, @OrderID, @TransType, @Amount, @CardNbr, @CardType, " +
                    "@CardTypeGroup, @CardHolder, @FirstName, @LastName, @ExpDate, @Address, @City, @State, @Zip, @Phone, @Fax, @Email, GETDATE()) " +
                    "SELECT IDENT_CURRENT('Transactions') AS RecID";

            SqlCommand cmd = new SqlCommand(query, Database.sql);
            cmd.Parameters.AddWithValue("@StoreID", Settings.GetOption("STORE"));
            cmd.Parameters.AddWithValue("@PrinterIP", Settings.GetOption("PRINTERIP"));
            cmd.Parameters.AddWithValue("@OrderID", cif.tbOrderNumber.Text.Equals("") ? DBNull.Value : (object)cif.tbOrderNumber.Text);
            cmd.Parameters.AddWithValue("@TransType", cif.TransactionType);
            cmd.Parameters.AddWithValue("@Amount", cif.tbAmount.Text);
            cmd.Parameters.AddWithValue("@CardNbr", cif.tbCardNumber.Text.Equals("") ? "" : cif.tbCardNumber.Text.Substring(cif.tbCardNumber.Text.Length - 4, 4));
            cmd.Parameters.AddWithValue("@CardType", cif.CardType == null ? DBNull.Value : (object)cif.CardType);
            cmd.Parameters.AddWithValue("@CardTypeGroup", cif.CardTypeGroup == null ? DBNull.Value : (object)cif.CardTypeGroup);
            cmd.Parameters.AddWithValue("@CardHolder", cif.CardHolder == null ? DBNull.Value : (object)cif.CardHolder);
            cmd.Parameters.AddWithValue("@FirstName", cif.tbFirstName.Text.Equals("") ? DBNull.Value : (object)cif.tbFirstName.Text);
            cmd.Parameters.AddWithValue("@LastName", cif.tbLastName.Text.Equals("") ? DBNull.Value : (object)cif.tbLastName.Text);
            cmd.Parameters.AddWithValue("@ExpDate", cif.tbExpirationDate.Text);
            cmd.Parameters.AddWithValue("@Address", cif.tbAddress.Text.Equals("") ? (DBNull.Value) : (object)cif.tbAddress.Text);
            cmd.Parameters.AddWithValue("@City", cif.tbCity.Text.Equals("") ? (DBNull.Value) : (object)cif.tbCity.Text);
            cmd.Parameters.AddWithValue("@State", cif.tbState.Text.Equals("") ? (DBNull.Value) : (object)cif.tbState.Text);
            cmd.Parameters.AddWithValue("@Zip", cif.tbZip.Text.Equals("") ? (DBNull.Value) : (object)cif.tbZip.Text);
            cmd.Parameters.AddWithValue("@Phone", cif.tbPhone.Text.Equals("") ? (DBNull.Value) : (object)cif.tbPhone.Text);
            cmd.Parameters.AddWithValue("@Fax", cif.tbFax.Text.Equals("") ? (DBNull.Value) : (object)cif.tbFax.Text);
            cmd.Parameters.AddWithValue("@Email", cif.tbEmail.Text.Equals("") ? (DBNull.Value) : (object)cif.tbEmail.Text);

            DataTable result = Database.Query(cmd);

            tbResult.Text = "";

            int RecID = -1;

            if (result.Rows.Count > 0)
            {
                RecID = int.Parse(result.Rows[0]["RecID"].ToString());
            }

            result.Dispose();

            if (cif.TransactionType.Equals("refund"))
            {
                string QueryString =
                    "username=ATPP&password=BBDS2Tpp&" +
                    //"username=demo&password=password&" +
                    "type=refund&" +
                    "transactionid=" + cif.tbTransactionID.Text + "&" +
                    "amount=" + cif.tbAmount.Text;

                string results = ProcessHttpRequest(PAYSCAPE, QueryString);
                NameValueCollection whats = HttpUtility.ParseQueryString(results);
                labelStatus.Text = "Ready";

                query = "UPDATE Transactions SET Response = @Response, Response_Code = @ResponseCode, " +
                    "Response_Text = @ResponseText, AuthCode = @AuthCode, TransID = @TransID, AVS_Response = @AVSResponse, CVV_Response = @CVVResponse " +
                    "WHERE ID = @RecID";

                cmd = new SqlCommand(query, Database.sql);
                cmd.Parameters.AddWithValue("@Response", whats["response"].ToString().Equals("") ? DBNull.Value : (object)whats["response"].ToString());
                cmd.Parameters.AddWithValue("@ResponseCode", whats["response_code"].ToString().Equals("") ? DBNull.Value : (object)whats["response_code"].ToString());
                cmd.Parameters.AddWithValue("@ResponseText", whats["responsetext"].ToString().Equals("") ? DBNull.Value : (object)whats["responsetext"].ToString());
                cmd.Parameters.AddWithValue("@AuthCode", whats["authcode"].ToString().Equals("") ? DBNull.Value : (object)whats["authcode"].ToString());
                cmd.Parameters.AddWithValue("@TransID", whats["transactionid"].ToString().Equals("") ? DBNull.Value : (object)whats["transactionid"].ToString());
                cmd.Parameters.AddWithValue("@AVSResponse", whats["avsresponse"].ToString().Equals("") ? DBNull.Value : (object)whats["avsresponse"].ToString());
                cmd.Parameters.AddWithValue("@CVVResponse", whats["cvvresponse"].ToString().Equals("") ? DBNull.Value : (object)whats["cvvresponse"].ToString());
                cmd.Parameters.AddWithValue("@RecID", RecID);

                Database.NonQuery(cmd);

                //MessageBox.Show(whats["responsetext"]);
                ReceiptForm rf = new ReceiptForm(RecID, false);
                if (whats["response"] == "1")
                {
                    rf.pnlBackground.BackColor = Color.Green;
                    tbResult.Text = "Card #: XXXX" + (cif.tbCardNumber.Text.Equals("") ? "" : cif.tbCardNumber.Text.Substring(cif.tbCardNumber.Text.Length - 4, 4))
                                  + "    Auth: "+whats["authcode"];

                }
                else
                {
                    rf.pnlBackground.BackColor = Color.Red;
                }
                rf.lblResponse.Text = whats["responsetext"];
                rf.lblAmount.Text = cif.tbAmount.Text;
                rf.lblAuthCode.Text = whats["authcode"];
                rf.lblCardNumber.Text = "XXXXX";// +cif.tbCardNumber.Text.Substring(cif.tbCardNumber.Text.Length - 4, 4);
                rf.lblType.Text = cif.TransactionType;
                rf.lblTransactionID.Text = whats["transactionid"];
                rf.lblResponse2.Text = whats["responsetext"];

                rf.ShowDialog();
            }

            if (cif.TransactionType.Equals("sale") || cif.TransactionType.Equals("roa"))
            {
                //Send transaction to Payscape
                //
                //
                //https://secure.payscapegateway.com/api/transact.php?username=test&password=password&type=sale&ccnumber=4111111111111111&ccexp=0711&cvv=999&amount=10.00
                //  sUserName := 'ATPP';
                //  sPassword := 'BBDS2Tpp';
                
                string QueryString =
                    //"username=demo&password=password&" +
                    "username=ATPP&password=BBDS2Tpp&" +
                    "ccnumber=" + cif.tbCardNumber.Text + "&" +
                    "ccexp=" + cif.tbExpirationDate.Text.Replace("/", "") + "&" +
                    "cvv=" + cif.tbCVV.Text + "&" +
                    "orderid=" + cif.tbOrderNumber.Text + "&" +
                    "firstname=" + cif.tbFirstName.Text + "&" +
                    "lastname=" + cif.tbLastName.Text + "&" +
                    "address1=" + cif.tbAddress.Text + "&" +
                    "city=" + cif.tbCity.Text + "&" +
                    "state=" + cif.tbState.Text + "&" +
                    "zip=" + cif.tbZip.Text + "&" +
                    "phone=" + cif.tbPhone.Text + "&" +
                    "fax=" + cif.tbFax.Text + "&" +
                    "email=" + cif.tbEmail.Text + "&" +
                    "amount=" + cif.tbAmount.Text;

                string results = ProcessHttpRequest(PAYSCAPE, QueryString);
                /*
                ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls;

                HttpWebRequest request = (HttpWebRequest)WebRequest.Create(PAYSCAPE+"?"+QueryString);                
                //HttpWebRequest request = (HttpWebRequest)WebRequest.Create(PAYSCAPE+"?username=demo&password=password");
                request.KeepAlive = false;
                request.Timeout = 5000;
                request.ProtocolVersion = HttpVersion.Version10;
                request.Method = "POST";
                request.AllowWriteStreamBuffering = false;

                byte[] postBytes = Encoding.ASCII.GetBytes(QueryString);

                request.ContentType = "application/x-www-form-urlencoded";
                request.ContentLength = postBytes.Length;

                Stream requestStream = request.GetRequestStream();

                //
                try
                {
                    //StreamWriter writer = new StreamWriter(requestStream);
                    //writer.Write(QueryString);
                    requestStream.Write(postBytes, 0, postBytes.Length);
                    requestStream.Close();
                }
                catch (Exception ex)
                {
                    MessageBox.Show(ex.Message);
                }

                HttpWebResponse response = (HttpWebResponse)request.GetResponse();
                string results = new StreamReader(response.GetResponseStream()).ReadToEnd();
                 */
                NameValueCollection whats = HttpUtility.ParseQueryString(results);
                labelStatus.Text = "Ready";

                query = "UPDATE Transactions SET Response = @Response, Response_Code = @ResponseCode, " +
                    "Response_Text = @ResponseText, AuthCode = @AuthCode, TransID = @TransID, AVS_Response = @AVSResponse, CVV_Response = @CVVResponse " +
                    "WHERE ID = @RecID";

                cmd = new SqlCommand(query, Database.sql);
                cmd.Parameters.AddWithValue("@Response", whats["response"].ToString().Equals("") ? DBNull.Value : (object)whats["response"].ToString());
                cmd.Parameters.AddWithValue("@ResponseCode", whats["response_code"].ToString().Equals("") ? DBNull.Value : (object)whats["response_code"].ToString());
                cmd.Parameters.AddWithValue("@ResponseText", whats["responsetext"].ToString().Equals("") ? DBNull.Value : (object)whats["responsetext"].ToString());
                cmd.Parameters.AddWithValue("@AuthCode", whats["authcode"].ToString().Equals("") ? DBNull.Value : (object)whats["authcode"].ToString());
                cmd.Parameters.AddWithValue("@TransID", whats["transactionid"].ToString().Equals("") ? DBNull.Value : (object)whats["transactionid"].ToString());
                cmd.Parameters.AddWithValue("@AVSResponse", whats["avsresponse"].ToString().Equals("") ? DBNull.Value : (object)whats["avsresponse"].ToString());
                cmd.Parameters.AddWithValue("@CVVResponse", whats["cvvresponse"].ToString().Equals("") ? DBNull.Value : (object)whats["cvvresponse"].ToString());
                cmd.Parameters.AddWithValue("@RecID", RecID);

                Database.NonQuery(cmd);

                //MessageBox.Show(whats["responsetext"]);
                ReceiptForm rf = new ReceiptForm(RecID, false);
                if (whats["response"] == "1")
                {
                    rf.pnlBackground.BackColor = Color.Green;
                }
                else
                {
                    rf.pnlBackground.BackColor = Color.Red;
                }
                rf.lblResponse.Text = whats["responsetext"];
                rf.lblAmount.Text = cif.tbAmount.Text;
                rf.lblAuthCode.Text = whats["authcode"];
                rf.lblCardNumber.Text = "XXXXX"+cif.tbCardNumber.Text.Substring(cif.tbCardNumber.Text.Length - 4, 4);
                rf.lblType.Text = cif.TransactionType;
                rf.lblTransactionID.Text = whats["transactionid"];
                rf.lblResponse2.Text = whats["responsetext"];

                rf.ShowDialog();
                btnCardSwipe_Click(null, null);
            }
        }

        public string ProcessHttpRequest(string Url, string QueryString)
        {
            ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls;

            HttpWebRequest request = (HttpWebRequest)WebRequest.Create(Url + "?" + QueryString);
            //HttpWebRequest request = (HttpWebRequest)WebRequest.Create(PAYSCAPE+"?username=demo&password=password");
            request.KeepAlive = false;
            request.Timeout = 5000;
            request.ProtocolVersion = HttpVersion.Version10;
            request.Method = "POST";
            request.AllowWriteStreamBuffering = false;

            byte[] postBytes = Encoding.ASCII.GetBytes(QueryString);

            request.ContentType = "application/x-www-form-urlencoded";
            request.ContentLength = postBytes.Length;

            Stream requestStream = request.GetRequestStream();

            //
            try
            {
                //StreamWriter writer = new StreamWriter(requestStream);
                //writer.Write(QueryString);
                requestStream.Write(postBytes, 0, postBytes.Length);
                requestStream.Close();
            }
            catch (Exception ex)
            {
                MessageBox.Show(ex.Message);
            }

            HttpWebResponse response = (HttpWebResponse)request.GetResponse();
            string results = new StreamReader(response.GetResponseStream()).ReadToEnd();

            return results;
        }

        private void registerCardsToolStripMenuItem_Click(object sender, EventArgs e)
        {
            PasswordDialog pd = new PasswordDialog();
            pd.code = "ADMIN";
            pd.subcode = "PASS2";
            DialogResult dr = pd.ShowDialog();
            while (dr == DialogResult.No)
            {
                dr = pd.ShowDialog();
            }
            if (dr != DialogResult.Yes)
            {
                btnCardSwipe_Click(null, null);
                return;
            }
            GiftCardRegistrationForm gcf = new GiftCardRegistrationForm();
            DialogResult gcdr = gcf.ShowDialog();

            btnCardSwipe_Click(null, null);
        }

        private void checkCardInfoToolStripMenuItem_Click(object sender, EventArgs e)
        {
            GiftCardInfoForm gcif = new GiftCardInfoForm();
            DialogResult dr = gcif.ShowDialog();

        }

        private void panel1_Click(object sender, EventArgs e)
        {
            MessageBox.Show(Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.CommonApplicationData), "ATPP"));
        }

        private void menuBatchStore_Click(object sender, EventArgs e)
        {
            BatchReportForm brf = new BatchReportForm(Settings.GetOption("STORE"));
            brf.ShowDialog();
        }

        private void menuBatchAll_Click(object sender, EventArgs e)
        {
            PasswordDialog pd = new PasswordDialog();
            pd.code = "ADMIN";
            pd.subcode = "PASS2";
            DialogResult dr = pd.ShowDialog();
            while (dr == DialogResult.No)
            {
                dr = pd.ShowDialog();
            }
            if (dr != DialogResult.Yes)
            {
                btnCardSwipe_Click(null, null);
                return;
            }

            BatchReportForm brf = new BatchReportForm("all");
            brf.ShowDialog();
        }
    }

    

    public class AcceptEverythingPolicy : ICertificatePolicy
    {
        public bool CheckValidationResult(ServicePoint srvPoint,
          X509Certificate certificate, WebRequest request,
          int certificateProblem)
        {
            //Return True to force the certificate to be accepted.
            return true;
        }
    }
}