hcuACH.data

<?php
/*
 * File: hcuACH.data
 * Purpose: Handle the CRUD portion of the ACH. This includes ACH Payments and Collections,
 *            single and batch, and also Payroll. When returning the requested data
 *            do it in a JSON format, for the client to display accordingly.
 *
 *
 * Call this script with the following parameters
 *  action - what the client side is requesting.
 *
 * Returns JSON OBJECT.
 */
try {
  // ** SET HOMECU FLAGS
  $serviceShowInfo = false;
  $serviceLoadMenu = false;
  $serviceShowMenu = false;


  // ** INCLUDE MAIN GLOBAL SCRIPT -- Handles security / global variable values
  // hcuService will be returning a status object: e.g. ["homecuErrors":{[{"message":"message1"}...{"message":"messageN"}}]
  require_once(dirname(__FILE__) . '/../library/hcuService.i');

  require_once(dirname(__FILE__) . '/../library/permissions.i');
  require_once(dirname(__FILE__) . '/../library/hcuACH.i');
  require_once(dirname(__FILE__) . '/../library/hcuTransfer.i');
  require_once(dirname(__FILE__) . '/../library/hcuTransferScheduled.i');

  // ** IMPORT FORM VALUES
  $inputVars = array();
  $varOk = array(
    "action" => array('filter' => FILTER_SANITIZE_STRING),
    "ach_name" => array('filter' => FILTER_SANITIZE_STRING),
    "display_name" => array("filter" => FILTER_SANITIZE_STRING, 'options' => array('flags' => FILTER_FLAG_NO_ENCODE_QUOTES)),
    "email" => array('filter' => FILTER_SANITIZE_EMAIL),
    "email_notify" => array('filter' => FILTER_SANITIZE_NUMBER_INT),
    "address1" => array('filter' => FILTER_SANITIZE_STRING),
    "address2" => array('filter' => FILTER_SANITIZE_STRING),
    "city" => array('filter' => FILTER_SANITIZE_STRING),
    "state" => array('filter' => FILTER_SANITIZE_STRING),
    "zip" => array('filter' => FILTER_SANITIZE_STRING),
    "country" => array('filter' => FILTER_SANITIZE_STRING),
    "update_partner" => array('filter' => FILTER_SANITIZE_NUMBER_INT),
    "dfi_routing" => array('filter' => FILTER_SANITIZE_STRING),
    "dfi_account" => array('filter' => FILTER_SANITIZE_STRING),
    "dfi_account_type" => array('filter' => FILTER_SANITIZE_STRING),
    "addenda" => array('filter' => FILTER_SANITIZE_STRING),
    "internal_acct" => array('filter' => FILTER_SANITIZE_STRING),
    "internal_sub_acct" => array('filter' => FILTER_SANITIZE_STRING),
    "eff_date" => array('filter' => FILTER_SANITIZE_STRING),
    "end_date" => array('filter' => FILTER_SANITIZE_STRING),
    "frequency" => array('filter' => FILTER_SANITIZE_STRING),
    "continue" => array('filter' => FILTER_SANITIZE_STRING),
    "amount" => array('filter' => FILTER_SANITIZE_NUMBER_INT),
    "ach_type" => array('filter' => FILTER_SANITIZE_STRING),
    "memo" => array('filter' => FILTER_SANITIZE_STRING),
    "batch_data" => array('filter' => FILTER_UNSAFE_RAW),
    "partner_id" => array('filter' => FILTER_SANITIZE_NUMBER_INT),
    "partner_type" => array('filter' => FILTER_SANITIZE_STRING),
    "template_id" => array('filter' => FILTER_SANITIZE_NUMBER_INT),
    "template_name" => array('filter' => FILTER_SANITIZE_STRING),
    "update_template" => array('filter' => FILTER_SANITIZE_NUMBER_INT),
  );

  HCU_ImportVars( $inputVars, "", $varOk );
  header('Content-Type: application/json');

    if (!$dbh) {
        // The connection was not made to the database
        // unresolved: return an error??
    }

  $aryReply = array();
  $aryResult = array();

  $aryInfo = array();

  /*
   * Returned Errors Structure
   *
   * homecuInfo => An informational message to report to the user.
   *
   * The existence of Errors is proof of an error, if homecuErrors is NOT found or
   *  empty then success is assumed
   *
   * 'homecuErrors' element will contain an array of the following object
   *    'id' => the element id of the error, this is useful so the client side can
   *                highlight the affected element
   *    'message' => the error message to be displayed back to the member.  For
   *                   summary only information, leave the 'id' field blank and
   *                   enter the message here
   *
   * 'homecuData' element will return information to display for the member.
   */

  // ** First check the refer script -- This will be used to ensure proper usage later
  $parseRefer = parse_url($_SERVER['HTTP_REFERER']);
  $referScript = basename($parseRefer['path']);

  if (!in_array($referScript, array('hcuACHSingle.prg', 'hcuACHBatch.prg', 'hcuACHPartners.prg'))) {
    // ** Wrong script calling this data routine
    $aryErrors[] = $MC->msg('Feature Unavailable', HCU_DISPLAY_AS_RAW);
    throw new Exception (HCU_JsonEncode($aryErrors));
  }

  // don't worry about checking if ACH Enabled because they wouldn't get the feature if it wasn't
  $aryErrors = array();

  // do the requested operation
  switch ( $inputVars["action"] ) {
    case "submit_payment":
    case "submit_collection":// update has an id

      // ** Verify the user can access this feature.
      $permissionInputs = array();
      if ( $inputVars["action"] === "submit_payment" ) {
        $permissionInputs["feature"] = FEATURE_ACH_PAYMENTS;
      } else {
        $permissionInputs["feature"] = FEATURE_ACH_COLLECTIONS;
      }
      $return = Perm_AccessRights( $dbh, $HB_ENV, $permissionInputs );
      if ( !$return ) {
        // * Rights NOT set up for user access
        $aryErrors[] = $MC->msg('Rights not set', HCU_DISPLAY_AS_HTML);
        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // the amount came in as an integer so need to shift decimal back
      // NOTE: This only affects the single transaction because the batch comes in as a json stringified array.
      $inputVars["amount"] = round( $inputVars["amount"] / 100, 2 );

      // validate the inputs
      $aryValidate = ACH_ValidateInputs( $HB_ENV, $dbh, $inputVars, $MC );
      if ( !$aryValidate || ($aryValidate["code"] !== "000") ) {
        // an error occurred
        if ( is_array( $aryValidate["errors"] ) ) {
          for ( $e = 0; $e < count( $aryValidate["errors"] ); $e++ ) {
            $aryErrors[] = $aryValidate["errors"][$e];
          }
        } else {
          $aryErrors[] = $aryValidate["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // see if partner should be updated/added (first, because it might be needed for the notification)
      $partnerAddResult = false;
      if ( intval( $inputVars["update_partner"] ) === 1 ) {
        $partnerAddResult = ACH_UpdatePartner( $dbh, $HB_ENV, $inputVars, $MC );
        if ( $partnerAddResult["code"] !== "000" ) {
          // throw an error since the ACH submission may depend on the address
          // if we got here we were successful with the ach partner update
          $aryErrors[] = $MC->msg('ACH Partner update failed', HCU_DISPLAY_AS_RAW);

          if ( is_array( $partnerAddResult["errors"] ) ) {
            for ( $e = 0; $e < count( $partnerAddResult["errors"] ); $e++ ) {
              $aryErrors[] = $partnerAddResult["errors"][$e];
            }
          } else {
            $aryErrors[] = $partnerAddResult["errors"];
          }

          throw new Exception (HCU_JsonEncode($aryErrors));
        } else {
          // if we got here we were successful with the ach partner update
          $aryInfo[] = $MC->msg('ACH Partner updated', HCU_DISPLAY_AS_RAW);
        }
      }

      // decode the account info
      $decryptedAccountInfo = hcu_decrypturl( $inputVars["internal_sub_acct"], $HB_ENV['historyHash'] );

      // validate the amount is within limits (inputs set up previously)
      $accountParts = explode( "|", $decryptedAccountInfo );
      $permissionInputs["account"] = $accountParts[1];
      $permissionInputs["accounttype"] = $accountParts[2];
      $permissionInputs["amount"] = $inputVars["amount"];

      $return = Perm_CheckLimits( $dbh, $HB_ENV, $permissionInputs );
      if ( !$return || ($return["status"]["code"] !== "000") ) {
        $aryErrors[] = $MC->msg('ACH Exceeded Permissions', HCU_DISPLAY_AS_RAW);
        // add the returned message
        $aryErrors[] = Perm_GetLimitErrDesc($MC, $return["status"]["code"]);

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // clean up any user-supplied data - convert any UTF-8 characters to encoded html entities
      // NOTE: data was sanitized on input
      $inputVars["addenda"] = ConvertFromUTF8( $inputVars["addenda"] );
      $inputVars["memo"] = ConvertFromUTF8( $inputVars["memo"] );
      $inputVars["needs_confirmation"] = Perm_CheckConfirmReq( $dbh, $HB_ENV, $permissionInputs );

      // Because ACH transactions have an effectve date, one time
      // future dated transfers are still considered non-scheduled
      // so we only base non-scheduled on frequency = OneTime.
      $immdTransfer = $inputVars['frequency'] == "OneTime";

      if ( $immdTransfer ) {
        $return = ACH_Submit( $dbh, $HB_ENV,  $inputVars, $MC );
        if ( $return["code"] !== "000" ) {
          if ( is_array( $return["errors"] ) ) {
            for ( $e = 0; $e < count( $return["errors"] ); $e++ ) {
              $aryErrors[] = $return["errors"][$e];
            }
          } else {
            $aryErrors[] = $return["errors"];
          }

          throw new Exception (HCU_JsonEncode($aryErrors));
        }

        // Send transaction data and confirmation code to user
        $aryResult['txn'] = Array(
          Array("label" => $MC->msg('Date', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_date"]),
          Array("label" => $MC->msg('Action', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_action"]),
          Array("label" => $MC->msg('ACH Company Name Label', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_company"]),
          Array("label" => $MC->msg('Account', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_account"]),
          Array("label" => $MC->msg('Amount', HCU_DISPLAY_AS_RAW), 'caption' => "$" . mobile_formatnumber($return['data']["data_amount"]), ","),
          Array("label" => $MC->msg('Confirmation', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_confirm"])
        );

        // if we got here we were successful with the ach submission
        if ( $inputVars["action"] === "submit_payment" ) {
          $aryInfo[] = $MC->msg('ACH Payment Submitted', HCU_DISPLAY_AS_RAW);
        } else {
          $aryInfo[] = $MC->msg('ACH Collection Submitted', HCU_DISPLAY_AS_RAW);
        }
      }

      if ( !$immdTransfer ) {
        // ValidateTransfer in hcuTransfer.i sets the frequency count for scheduled
        // transfers to 0 when creating a new scheduled transfer, the ach validation
        // does no such thing so we must do it here to avoid php warnings.
        $inputVars['frequency_count'] = 0;
        // need to have a partner id to schedule an ACH transaction
        $partnerId = $inputVars["partner_id"] > 0 ? $inputVars["partner_id"] : $partnerAddResult["data"]["partner_id"];

        if ( $partnerId > 0 ) {
          //check if end date is valid for interval
          $nextIntervalDate = TxNextInterval($inputVars['eff_date'], $inputVars['frequency'], 0);
          if ($nextIntervalDate == null) {
            $aryErrors[] = $MC->msg('Continue Until greater than next', HCU_DISPLAY_AS_RAW);
            throw new Exception (HCU_JsonEncode($aryErrors));
          }
          // setup a schedule transaction for ACH
          $txScheduleData = array(
            "txAmount" => floatval($inputVars['amount']),
            "txLocalAccount" => $decryptedAccountInfo,
            "txLocalMember" => $inputVars['internal_acct'],
            "txPartnerId" => $partnerId,
            "txCode" => ACH_GetTransCode( $permissionInputs['feature'], $inputVars['ach_type'] ),
            "txMemo" => prep_save($inputVars['memo']),
            "txAddenda" => prep_save($inputVars['addenda']),
            "txType" => ($permissionInputs['feature'] == FEATURE_ACH_PAYMENTS ? "L2R" : "R2L")
          );
          $txScheduleParameters = array(
            "txFrequency" => prep_save($inputVars['frequency'], 50)
          );
          $txScheduleValues = array(
            "txDateStart" => $inputVars['eff_date'],
            "txDateEnd" => $inputVars['end_date'],
            "txFrequency" => $inputVars['frequency'],
            "txFrequencyCount" => $inputVars['frequency_count'],
            "txFeature" => $permissionInputs['feature'],
            "txParameters" => TxnSchedParameters($txScheduleParameters),
            "txData" => TxnSchedDataACH($txScheduleData)
          );

          // schedule the transfer with the create function
          $txScheduleCreate = TxnSchedCreate($HB_ENV, $dbh, $MC, $txScheduleValues);

          // ** check errors
          if ($txScheduleCreate['status']['code'] !== "000") {

            // display errors
            $aryErrors[] = $txScheduleCreate['status']['errors'];
          }

          // if we got here we were successful with the ach submission
          if ( $inputVars["action"] === "submit_payment" ) {
            $aryInfo[] = $MC->msg("ACH Scheduled A Payment", HCU_DISPLAY_AS_RAW);
          } else {
            $aryInfo[] = $MC->msg("ACH Scheduled A Collection", HCU_DISPLAY_AS_RAW);
          }
        } else {
          $aryErrors[] = $MC->msg("ACH Scheduled partner error", HCU_DISPLAY_AS_RAW);
          throw new Exception (HCU_JsonEncode($aryErrors));
        }
      }

      // if successful, return the partner list, if it was updated
      if ( $partnerAddResult !== false ) {
        // figure out the type of internal accounts to show (ones to pay from vs ones to deposit to)
        $fromTo = ( $inputVars["action"] === "submit_payment" ) ? "withdrawl" : "deposit";

        $return = ACH_GetPartners( $dbh, $HB_ENV );
        if ( $return["code"] !== "000" ) {
          if ( is_array( $return["errors"] ) ) {
            for ( $e = 0; $e < count( $return["errors"] ); $e++ ) {
              $aryErrors[] = $return["errors"][$e];
            }
          } else {
            $aryErrors[] = $return["errors"];
          }

          throw new Exception (HCU_JsonEncode($aryErrors));
        }

        // return the partner list
        $aryResult["partners"] = $return["data"];

        $return = ACH_GetAccounts( $dbh, $HB_ENV, $fromTo );
        if ( $return["code"] !== "000" ) {
          if ( is_array( $return["errors"] ) ) {
            for ( $e = 0; $e < count( $return["errors"] ); $e++ ) {
              $aryErrors[] = $return["errors"][$e];
            }
          } else {
            $aryErrors[] = $return["errors"];
          }

          throw new Exception (HCU_JsonEncode($aryErrors));
        }

        // return the account lists
        $aryResult["accounts"] = $return["data"];
      }

      break;
    case "get_ach_partners":
      // get the partners for the current user's group
      $partners = ACH_GetPartners( $dbh, $HB_ENV, $MC );
      if ( $partners["code"] !== "000" ) {
        $aryErrors[] = $MC->msg('ACH Error getting partners', HCU_DISPLAY_AS_RAW);

        if ( is_array( $partners["errors"] ) ) {
          for ( $e = 0; $e < count( $partners["errors"] ); $e++ ) {
            $aryErrors[] = $partners["errors"][$e];
          }
        } else {
          $aryErrors[] = $partners["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // return the requested list
      $aryResult["partners"] = $partners["data"];
      break;
    case "collections_list":
    case "payments_list":
      // figure out the type of internal accounts to show (ones to pay from vs ones to deposit to)
      // If payments, coming out of accounts; if collection, going into accounts.
      $fromTo = ( $inputVars["action"] === "payments_list" ) ? "withdrawl" : "deposit";

      $return = ACH_GetAccounts( $dbh, $HB_ENV, $fromTo );
      if ( $return["code"] !== "000" ) {
        $aryErrors[] = $MC->msg('ACH Error getting lists', HCU_DISPLAY_AS_RAW);

        if ( is_array( $return["errors"] ) ) {
          for ( $e = 0; $e < count( $return["errors"] ); $e++ ) {
            $aryErrors[] = $return["errors"][$e];
          }
        } else {
          $aryErrors[] = $return["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // return the requested list
      $aryResult["accounts"] = $return["data"];
      break;
    case "read_templates":
      // get the template information to show the user
      $return = ACH_GetTemplates( $dbh, $HB_ENV, $inputVars["action"], $MC );

      if ($return['code'] != '000') {
        // an error occurred
        if ( is_array( $return["errors"] ) ) {
          for ( $e = 0; $e < count( $return["errors"] ); $e++ ) {
            $aryErrors[] = $return["errors"][$e];
          }
        } else {
          $aryErrors[] = $return["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      $aryResult["templates"] = $return["data"];
      break;
    case "update_template":
    case "delete_template":
      // pass straight to the function
      $return = ACH_UpdateTemplate( $dbh, $HB_ENV, $inputVars, $MC );

      if ($return['code'] != '000') {
        // an error occurred
        if ( is_array( $return["errors"] ) ) {
          for ( $e = 0; $e < count( $return["errors"] ); $e++ ) {
            $aryErrors[] = $return["errors"][$e];
          }
        } else {
          $aryErrors[] = $return["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // re-get the template information to show the user
      $return = ACH_GetTemplates( $dbh, $HB_ENV, $inputVars["action"], $MC );

      if ($return['code'] != '000') {
        // an error occurred
        if ( is_array( $return["errors"] ) ) {
          for ( $e = 0; $e < count( $return["errors"] ); $e++ ) {
            $aryErrors[] = $return["errors"][$e];
          }
        } else {
          $aryErrors[] = $return["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      $aryResult["templates"] = $return["data"];
      break;
    case "ach_partner":
      $return = ACH_GetSinglePartner( $dbh, $HB_ENV, $inputVars["partner_id"] );

      if ($return['code'] != '000') {
        $aryErrors[] = $MC->msg('ACH Error getting partner info', HCU_DISPLAY_AS_RAW);
        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      $aryResult["one_partner"] = $return["data"];

      break;
    case "add_ach_partner":
    case "update_ach_partner":
      // the inputs were validated by the filtering above
      $partnerUpdateAddResult = ACH_UpdatePartner( $dbh, $HB_ENV, $inputVars, $MC );
      if ( $partnerUpdateAddResult["code"] !== "000" ) {
        $aryErrors[] = $MC->msg('ACH Error Partner update failed', HCU_DISPLAY_AS_RAW);

        if ( is_array( $partnerUpdateAddResult["errors"] ) ) {
          for ( $e = 0; $e < count( $partnerUpdateAddResult["errors"] ); $e++ ) {
            $aryErrors[] = $partnerUpdateAddResult["errors"][$e];
          }
        } else {
          $aryErrors[] = $partnerUpdateAddResult["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // if we got here we were successful with the ach partner update
      $aryInfo[] = $MC->msg('ACH Partner updated', HCU_DISPLAY_AS_RAW);

      // return the updated information (it might be a new partner id, if an add)
      $partnerId = $partnerUpdateAddResult["data"]["partner_id"];
      $partnerRead = ACH_GetSinglePartner( $dbh, $HB_ENV, $partnerId );

      if ($partnerRead['code'] != '000') {
        $aryErrors[] = $MC->msg('ACH Error getting partner info', HCU_DISPLAY_AS_RAW);
        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      $aryResult["partner_data"] = $partnerRead["data"];
      $aryResult["update_partner"] = $partnerUpdateAddResult["data"];

      break;
    case "delete_ach_partner":
      $partnerDeleteResult = ACH_DeletePartner( $dbh, $HB_ENV, $inputVars, $MC);
      if ( $partnerDeleteResult["code"] !== "000" ) {

        if ( is_array( $partnerDeleteResult["errors"] ) ) {
          for ( $e = 0; $e < count( $partnerDeleteResult["errors"] ); $e++ ) {
            $aryErrors[] = $partnerDeleteResult["errors"][$e];
          }
        } else {
          $aryErrors[] = $partnerDeleteResult["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // if we got here we were successful with the ach partner update
      $aryInfo[] = $MC->msg('ACH Partner deleted', HCU_DISPLAY_AS_RAW);
      $aryResult["update_partner"] = $partnerDeleteResult["data"];

      break;
    case "read_template_partners":
      // get the template information to show the user
      $return = ACH_GetTemplatePartners( $dbh, $HB_ENV, $inputVars["template_id"], $MC );

      if ($return['code'] != '000') {
        // an error occurred
        if ( is_array( $return["errors"] ) ) {
          for ( $e = 0; $e < count( $return["errors"] ); $e++ ) {
            $aryErrors[] = $return["errors"][$e];
          }
        } else {
          $aryErrors[] = $return["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      $aryResult["read_template_partners"] = $return["data"];
      break;
    case "add_template_partner":
      // add the partner to the template's list
      $return = ACH_AddPartnerToTemplate( $dbh, $HB_ENV, $inputVars["template_id"], $inputVars["partner_id"], $MC );
      if ($return['code'] != '000') {
        $aryErrors[] = $MC->msg('ACH Error Adding Template Partner', HCU_DISPLAY_AS_RAW);
        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // return partner information for client to use
      $return = ACH_GetSinglePartner( $dbh, $HB_ENV, $inputVars["partner_id"] );

      if ($return['code'] != '000') {
        $aryErrors[] = $MC->msg('ACH Error getting partner info', HCU_DISPLAY_AS_RAW);
        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      $aryResult["one_partner"] = $return["data"];

      break;
    case "remove_template_partner":
      // remove the partner from the template's list
      $return = ACH_RemovePartnerFromTemplate( $dbh, $HB_ENV, $inputVars["template_id"], $inputVars["partner_id"], $MC );
      if ($return['code'] != '000') {
        $aryErrors[] = $MC->msg('ACH Error removing partner template', HCU_DISPLAY_AS_RAW);
        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      $aryResult["partner_removed"] = $inputVars["partner_id"];

      break;
    case "submit_batch_payment":
    case "submit_batch_collection":
      // ** Verify the user can access this feature.
      $permissionInputs = array();
      if ( $inputVars["action"] === "submit_batch_payment" ) {
        $permissionInputs["feature"] = FEATURE_ACH_PAYMENTS;
      } else {
        $permissionInputs["feature"] = FEATURE_ACH_COLLECTIONS;
      }
      $return = Perm_AccessRights( $dbh, $HB_ENV, $permissionInputs );
      if ( !$return ) {
        // * Rights NOT set up for user access
        $aryErrors[] = $MC->msg('Rights not set', HCU_DISPLAY_AS_HTML);
        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // validate the inputs
      $aryValidate = ACH_ValidateInputs( $HB_ENV, $dbh, $inputVars, $MC );
      if ( !$aryValidate || ($aryValidate["code"] !== "000") ) {
        // an error occurred
        if ( is_array( $aryValidate["errors"] ) ) {
          for ( $e = 0; $e < count( $aryValidate["errors"] ); $e++ ) {
            $aryErrors[] = $aryValidate["errors"][$e];
          }
        } else {
          $aryErrors[] = $aryValidate["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // decode the account info
      $decryptedAccountInfo = hcu_decrypturl( $inputVars["internal_sub_acct"], $HB_ENV['historyHash'] );

      // validate the amount is within limits (inputs set up previously)
      $accountParts = explode( "|", $decryptedAccountInfo );
      $permissionInputs["account"] = $accountParts[1];
      $permissionInputs["accounttype"] = $accountParts[2];

      // add up the amounts from the batch data
      $batchInfo = HCU_JsonDecode( $inputVars["batch_data"]);

      $batchAmount = 0;
      for ( $i = 0; $i < count( $batchInfo ); $i++ ) {
        $batchAmount += $batchInfo[$i]["amount"];

        // clean up the input while we are at it
        $batchInfo[$i]["addenda"] = ConvertFromUTF8( $batchInfo[$i]["addenda"] );
      }

      $permissionInputs["amount"] = $batchAmount;


      $return = Perm_CheckLimits( $dbh, $HB_ENV, $permissionInputs );
      if ( !$return || ($return["status"]["code"] !== "000") ) {
        $aryErrors[] = $MC->msg('ACH Exceeded Permissions', HCU_DISPLAY_AS_RAW);
        // add the returned message
        $aryErrors[] = Perm_GetLimitErrDesc($MC, $return["status"]["code"]);

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // clean up any user-supplied data - convert any UTF-8 characters to encoded html entities
      // NOTE: data was sanitized on input
      $inputVars["memo"] = ConvertFromUTF8( $inputVars["memo"] );
      $inputVars["needs_confirmation"] = Perm_CheckConfirmReq( $dbh, $HB_ENV, $permissionInputs );

      // submit the ach
      $return = ACH_SubmitBatch( $dbh, $HB_ENV, $inputVars, $batchInfo, $MC );
      if ( $return["code"] !== "000" ) {
        if ( is_array( $return["errors"] ) ) {
          for ( $e = 0; $e < count( $return["errors"] ); $e++ ) {
            $aryErrors[] = $return["errors"][$e];
          }
        } else {
          $aryErrors[] = $return["errors"];
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // Send transaction data and confirmation code to user
      $aryResult['txn'] = Array(
        Array("label" => $MC->msg('Date', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_date"]),
        Array("label" => $MC->msg('Action', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_action"]),
        Array("label" => $MC->msg('ACH Company Name Label', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_company"]),
        Array("label" => $MC->msg('Account', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_account"]),
        Array("label" => $MC->msg('Amount', HCU_DISPLAY_AS_RAW), 'caption' => "$" . mobile_formatnumber($return['data']["data_amount"]), ","),
        Array("label" => $MC->msg('Confirmation', HCU_DISPLAY_AS_RAW), 'caption' => $return['data']["data_confirm"])
      );

      // if we got here we were successful with the ach submission
      if ( $inputVars["action"] === "submit_batch_payment" ) {
        $aryInfo[] = $MC->msg('ACH Payment Submitted', HCU_DISPLAY_AS_RAW);
      } else {
        $aryInfo[] = $MC->msg('ACH Collection Submitted', HCU_DISPLAY_AS_RAW);
      }

      // see if partner should be updated/added
      if ( intval( $inputVars["update_template"] ) === 1 ) {
        $partnerAddResult = ACH_UpdateTemplatePartners( $dbh, $HB_ENV, $inputVars["template_id"], $batchInfo, $MC );
        if ( $partnerAddResult["code"] !== "000" ) {
          // don't throw an error since the ACH submission happened - just let the user know the partner update failed
          // if we got here we were successful with the ach partner update
          $aryInfo[] = $MC->msg('ACH Error Template partner update failed', HCU_DISPLAY_AS_RAW);

          for ( $i = 0 ; $i < count( $partnerAddResult["errors"] ); $i++ ) {
            $aryInfo[] = $partnerAddResult["errors"][$i];
          }
        } else {
          // if we got here we were successful with the ach partner update
          $aryInfo[] = $MC->msg('ACH Template Updated', HCU_DISPLAY_AS_RAW);
        }
      }

      $aryResult["submit_batch"] = "Success";
      break;
    case "approve":

      break;
    case "csv":
        $uploadFile = $_FILES["csvFile"];
        if ( $uploadFile["error"] !== 0  || $uploadFile["type"] != "text/csv" ) {
          $aryErrors[] = $MC->msg('Upload file error', HCU_DISPLAY_AS_RAW) . " 1000";
          throw new Exception (HCU_JsonEncode($aryErrors));
        }

        $tmpName = $uploadFile["tmp_name"];

        if ( !is_uploaded_file( $tmpName ) ) {
          $aryErrors[] = $MC->msg('Upload file error', HCU_DISPLAY_AS_RAW) . " 1001";
          throw new Exception (HCU_JsonEncode($aryErrors));
        }

        // open the file and check it for correctness
        $contents = file( $tmpName, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES );

        // delete the uploaded file
        unlink( $tmpName );

        $csvResult = ACH_ProcessCSV( $HB_ENV, $inputVars["template_id"], $contents, $MC );
        if ( $csvResult["code"] !== "000" ) {
          $aryErrors[] = $csvResult["errors"];
          throw new Exception (HCU_JsonEncode($aryErrors));
        }

        // these partners were found and are id, amount, addenda, notify
        $aryResult["csv"]["found"] = $csvResult["data"]["found"];
        // these were in csv and not found in partners and are a list of names
        $aryResult["csv"]["not_found"] = $csvResult["data"]["not_found"];
        // these were template partners that weren't in the csv and are a list of names
        $aryResult["csv"]["missed"] = $csvResult["data"]["missed"];
      break;
    default:
      $aryErrors[] = "Unexpected action: {$inputVars["action"]}";
      throw new Exception (HCU_JsonEncode($aryErrors));
  }
}
catch(Exception $ex)
{
  //Return error message
    $aryReply["homecuErrors"] = HCU_JsonDecode( $ex->getMessage() );

  // if returning error, not replying with data
  $aryResult = array();

  // if returning error, not returning status
  $aryInfo = array();
}

  if ( count( $aryInfo ) ) {
    $aryReply["homecuInfo"] = $aryInfo;
  }

  if ( count( $aryResult ) ) {
    $aryReply["homecuData"] = $aryResult;
  }

  print HCU_JsonEncode(Array("Results" => $aryReply));

// Do the actual entity conversion for a single element (one dimentional associative array).
function FixOneElement( $pInputList ) {
  $outputArray = array();

  $keys = HCU_array_keys( $pInputList );

  foreach ( $keys as $key ) {
    $outputArray[$key] = html_entity_decode( $pInputList[$key] );
  }

  return $outputArray;
} // end FixOneElement

/*
 * Go through and change any html entities into the correct html character.
 * Returns an array with the same keys as came in but the fields are converted.
 */
function FixEntities( $pHBEnv, $pInputArray ) {

  $retArray = array();

  try {
    if ( !is_array( $pInputArray ) ) {
      throw new Exception ("Parameter must be an array.");
    }

    for ( $i = 0; $i < count( $pInputArray ); $i++ ) {
      $element = $pInputArray[$i];

      // add to output array
      $retArray[] = FixOneElement( $element );
    }

  } catch (Exception $ex) {
    $reason = $ex->getMessage();
    $pHBEnv["SYSENV"]["logger"]->info( __FILE__ . " FixEntities error: " . $reason );

    // return what we got
    $retArray = $pInputArray;
  }

  return $retArray;
} // end FixEntities