The Wandering Sysadmin

Extracting Credit Card data from Ubersmith

October 27th, 2016 By Damien Gardner

So we recently purchased a number of companies who use Ubersmith as their billing system.

As I’ve mentioned before, we use WHMCS. Ubersmith weren’t overly helpful with extracting our customers’ credit card data, so I had to spend some time playing about with ubersmith. As it turned out, it wasn’t hard at all to pull credit card data out. Most of my required code was in re-encrypting it to store it back into the database with a encryption format so we can pull it out with our standard merge scripts to import into our WHMCS install.

First we want a table to store the data in.

create table whmcs_merge_carddata (
  billing_info_id INTEGER NOT NULL,
  cc_num          VARCHAR(64),
  cc_cvv2         VARCHAR(64),
  cc_issuenr      VARCHAR(64)
);

create table whmcs_merge_carddata (

billing_info_id INTEGER NOT NULL,

cc_num VARCHAR(64),

cc_cvv2 VARCHAR(64),

cc_issuenr VARCHAR(64)

);

I then placed the below script in the ubersmith web root. And popped a copy of lib_crypt.php (from https://sourceforge.net/projects/warp-cms/files/smart-framework/ library) into the parent directory – just so it wasn’t polluting the ubersmith install.

<?PHP
$_SERVER['SERVER_NAME'] = $_SERVER['argv'][1];
require_once( 'incs.php' );
require_once('../lib_crypt.php');

// This is a temporary hash to be used by our import routine later
$new_cc_encryption_hash='ApPTRYWQCF4LqMvYObfENwlaVd4VzBeZQUJyJwfb29NiM97qbcVOy6Ok9J6zbbpR';
$he_key2 = md5 (md5 ($new_cc_encryption_hash)) . md5 ($new_cc_encryption_hash);
$he_new = new hash_encryption($he_key2);

class ExtractCard extends sb_ccbackend {
 public function getRaw($id) {
 return parent::_get_raw($id);
 }
}

$backend = new ExtractCard();
$result = $_SESSION['DB']->query("select i.billing_info_id, c.class_id, i.cc_num from billing_info i JOIN CLIENT c ON c.clientid=i.clientid where c.active=1 and i.payment_type='cc'");
$results = [];
while (($row = $result->fetchRow())) {
$results[] = $row;
}

foreach ($results as $row) {
 $card = $backend->getRaw($row['billing_info_id']);
 $sql = "INSERT INTO whmcs_merge_carddata (billing_info_id, cc_num, cc_cvv2, cc_issuenr) values (?, ?, ?, ?)";
 // Encrypt the values with our temporary hash
 $qargs = array(
 $row['billing_info_id'],
 $he_new->encrypt($card[0].$row['cc_num']),
 $he_new->encrypt($card[1]),
 $he_new->encrypt($card[2])
 );
 $result2 = $_SESSION['DB']->query($sql, $qargs);
 echo "Inserting record ".$row['billing_info_id']."\n";
 
}
?>

<?PHP

$_SERVER['SERVER_NAME'] = $_SERVER['argv'][1];

require_once( 'incs.php' );

require_once('../lib_crypt.php');

// This is a temporary hash to be used by our import routine later

$new_cc_encryption_hash='ApPTRYWQCF4LqMvYObfENwlaVd4VzBeZQUJyJwfb29NiM97qbcVOy6Ok9J6zbbpR';

$he_key2 = md5 (md5 ($new_cc_encryption_hash)) . md5 ($new_cc_encryption_hash);

$he_new = new hash_encryption($he_key2);

class ExtractCard extends sb_ccbackend {

public function getRaw($id) {

return parent::_get_raw($id);

}

$backend = new ExtractCard();

$result = $_SESSION['DB']->query("select i.billing_info_id, c.class_id, i.cc_num from billing_info i JOIN CLIENT c ON c.clientid=i.clientid where c.active=1 and i.payment_type='cc'");

$results = [];

while (($row = $result->fetchRow())) {

$results[] = $row;

}

foreach ($results as $row) {

$card = $backend->getRaw($row['billing_info_id']);

$sql = "INSERT INTO whmcs_merge_carddata (billing_info_id, cc_num, cc_cvv2, cc_issuenr) values (?, ?, ?, ?)";

// Encrypt the values with our temporary hash

$qargs = array(

$row['billing_info_id'],

$he_new->encrypt($card[0].$row['cc_num']),

$he_new->encrypt($card[1]),

$he_new->encrypt($card[2])

);

$result2 = $_SESSION['DB']->query($sql, $qargs);

echo "Inserting record ".$row['billing_info_id']."\n";

}

After this, it was a simple matter of running “php extractcards.php ubsermith.panel.url.here”, and all cards were saved into the whmcs_merge_carddata table, ready for our merge scripts.

Posted in PHP, Uncategorized, WHMCS
No Comments

Extending the WHMCS API and Fetching Invoice PDF’s

September 17th, 2014 By Damien Gardner

At work, we’re currently doing a FULL rebuild of our customer portal. Part of the requirements of the system are that our staff must only be logging into one place. At present they have to be logged into the portal AND WHMCS. So in v2, we have to basically rebuild 90% of the WHMCS admin interface into our portal, and use the WHMCS API for manipulating data stored in WHMCS. (We’re also adding a MongoDB caching layer for read access, and then using hooks in WHMCS to update the cache whenever data is modified).

We found a few ‘holes’ (read: missing functionality) in the WHMCS API, so had to see about adding an API to sit alongside WHMCS. We did ask WHMCS how to go about writing custom API functions to use within the WHMCS API framework, but they came back saying this was not possible. A fair bit of Googling around, and I managed to find a blog post detailing how to write custom API functions for WHMCS. With a bit of work, we now have a nice basis for writing WHMCS API modules. The first one I built for testing was for pulling Invoice PDF’s, which is not currently available in the WHMCS API.

<?PHP

// We don't want someone getting crafy and calling this manually without using the WHMCS API authentications
if (!defined("WHMCS")) {
  die("This file cannot be accessed directly");
}

// Borrowed from http://bobcares.com/blog/extend-whmcs-create-your-own-whmcs-api-functions/
function buildParams($vars)
{
  $param = array(
    'action' => array(),
    'params' => array()
  );
  
  // Is cmd set? If so we're being used as Local API
  if (isset($vars['cmd'])) {
    $param['action']    = $vars['cmd'];
    $param['params']    = (object) $vars['apivalues1'];
    $param['adminuser'] = $vars['adminuser'];
  } else {
    // Nope, then we're in remote API mode..

    // Fix for WHMCS > 7.x
    if (!isset($vars['_POST']) && isset($vars['_POSTbackup'])) {
       $vars['_POST'] = $vars['_POSTbackup'];
    }
    $param['action'] = $vars['_POST']['action'];
    // Just cleaning up a bit, so these don't go into the params sub array..
    unset($vars['_POST']['username']);
    unset($vars['_POST']['password']);
    unset($vars['_POST']['action']);
    $param['params'] = (object) $vars['_POST'];
  }
  return (object) $param;
}

try {
  
  // Get the arguments
  $vars       = get_defined_vars();
  $postFields = buildParams($vars);
  
  // Include the WHMCS invoicefunctions
  if (!function_exists('pdfInvoice')) {
    require_once('invoicefunctions.php');
  }
  // And build an invoice PDF for the given invoiceID  - Note, if this invoice ID is invalid, it will return a blank PDF..
  $pdfdata = pdfInvoice($postFields->params->invoiceid);
  
  // Base64 encode it so it doesn't break the xml or json return
  $doc = base64_encode($pdfdata);
  
  // And return.  WHMCS takes care of the json/xml encoding
  $apiresults = array(
    "result" => "success",
    "pdf" => $doc,
    "message" => "Success Message"
  );
  
}
catch (Exception $e) {
  // Return with an error!
  $apiresults = array(
    "result" => "error",
    "message" => $e->getMessage()
  );
}

<?PHP

// We don't want someone getting crafy and calling this manually without using the WHMCS API authentications

if (!defined("WHMCS")) {

die("This file cannot be accessed directly");

}

// Borrowed from http://bobcares.com/blog/extend-whmcs-create-your-own-whmcs-api-functions/

function buildParams($vars)

{

$param = array(

'action' => array(),

'params' => array()

);

// Is cmd set? If so we're being used as Local API

if (isset($vars['cmd'])) {

$param['action'] = $vars['cmd'];

$param['params'] = (object) $vars['apivalues1'];

$param['adminuser'] = $vars['adminuser'];

} else {

// Nope, then we're in remote API mode..

// Fix for WHMCS > 7.x

if (!isset($vars['_POST']) && isset($vars['_POSTbackup'])) {

$vars['_POST'] = $vars['_POSTbackup'];

}

$param['action'] = $vars['_POST']['action'];

// Just cleaning up a bit, so these don't go into the params sub array..

unset($vars['_POST']['username']);

unset($vars['_POST']['password']);

unset($vars['_POST']['action']);

$param['params'] = (object) $vars['_POST'];

}

return (object) $param;

}

try {

// Get the arguments

$vars = get_defined_vars();

$postFields = buildParams($vars);

// Include the WHMCS invoicefunctions

if (!function_exists('pdfInvoice')) {

require_once('invoicefunctions.php');

}

// And build an invoice PDF for the given invoiceID - Note, if this invoice ID is invalid, it will return a blank PDF..

$pdfdata = pdfInvoice($postFields->params->invoiceid);

// Base64 encode it so it doesn't break the xml or json return

$doc = base64_encode($pdfdata);

// And return. WHMCS takes care of the json/xml encoding

$apiresults = array(

"result" => "success",

"pdf" => $doc,

"message" => "Success Message"

);

}

catch (Exception $e) {

// Return with an error!

$apiresults = array(

"result" => "error",

"message" => $e->getMessage()

);

}

And Voila, a simple WHMCS call such as:

$postfields["action"] = "saugetinvoicepdf";
$postfields["invoiceid"] = "16";

1 2	$postfields["action"] = "saugetinvoicepdf"; $postfields["invoiceid"] = "16";

Returned Variables

 <whmcsapi>
   <action>saugetinvoicepdf</action>
   <result>success</result>
   <pdf>......BASE64DATA......</pdf>
   <message>Success Message</message>
 </whmcsapi>

<action>saugetinvoicepdf</action>

<result>success</result>

<message>Success Message</message>

</whmcsapi>

Then it’s a simple matter to go base64_decode($jsondata->pdf) (assuming you used json format and had done a json_decode() on the returned data…), and you have the binary data for the PDF, ready to save to disk, or pass back out to the user via HTTP.

Posted in PHP, WHMCS
12 Comments

The Wandering Sysadmin

Recent Posts

Recent Comments

Archives

Categories

Meta

Extracting Credit Card data from Ubersmith

Extending the WHMCS API and Fetching Invoice PDF’s

Returned Variables