Bài 35: E-commerce Practice Project (Part 3)

Checkout Process

Checkout Views

# orders/views.pyfrom django.shortcuts import render, redirect, get_object_or_404from django.contrib.auth.decorators import login_requiredfrom django.contrib import messagesfrom django.db import transactionfrom django.utils import timezonefrom cart.cart import SessionCartfrom .models import Order, OrderItemfrom .forms import CheckoutFormfrom decimal import Decimal @login_requireddef checkout(request):    """Trang checkout"""    cart = SessionCart(request)        if len(cart) == 0:        messages.warning(request, 'Your cart is empty.')        return redirect('cart:cart_detail')        # Pre-fill form với thông tin user    initial_data = {}    if request.user.is_authenticated:        profile = request.user.profile        initial_data = {            'first_name': request.user.first_name,            'last_name': request.user.last_name,            'email': request.user.email,            'phone': profile.phone,            'address_line1': profile.address_line1,            'address_line2': profile.address_line2,            'city': profile.city,            'state': profile.state,            'postal_code': profile.postal_code,            'country': profile.country,        }        if request.method == 'POST':        form = CheckoutForm(request.POST, initial=initial_data)        if form.is_valid():            # Create order            try:                with transaction.atomic():                    # Calculate totals                    subtotal = cart.get_total_price()                    shipping_cost = Decimal('30000')  # Fixed shipping                    tax = subtotal * Decimal('0.1')  # 10% tax                    total = subtotal + shipping_cost + tax                                        # Create order                    order = Order.objects.create(                        user=request.user,                        email=form.cleaned_data['email'],                        first_name=form.cleaned_data['first_name'],                        last_name=form.cleaned_data['last_name'],                        phone=form.cleaned_data['phone'],                        address_line1=form.cleaned_data['address_line1'],                        address_line2=form.cleaned_data['address_line2'],                        city=form.cleaned_data['city'],                        state=form.cleaned_data['state'],                        postal_code=form.cleaned_data['postal_code'],                        country=form.cleaned_data['country'],                        subtotal=subtotal,                        shipping_cost=shipping_cost,                        tax=tax,                        total=total,                        customer_note=form.cleaned_data['note'],                    )                                        # Create order items                    for item in cart:                        OrderItem.objects.create(                            order=order,                            product=item['product'],                            variant=item['variant'],                            quantity=item['quantity'],                            price=item['price'],                        )                                                # Reduce stock                        if item['variant']:                            item['variant'].stock -= item['quantity']                            item['variant'].save()                        else:                            item['product'].reduce_stock(item['quantity'])                                                # Increment sales count                        item['product'].increment_sales(item['quantity'])                                        # Clear cart                    cart.clear()                                        # Redirect to payment                    return redirect('orders:order_payment', order_number=order.order_number)                                except Exception as e:                messages.error(request, f'Error creating order: {str(e)}')                return redirect('cart:cart_detail')    else:        form = CheckoutForm(initial=initial_data)        # Calculate totals for display    subtotal = cart.get_total_price()    shipping_cost = Decimal('30000')    tax = subtotal * Decimal('0.1')    total = subtotal + shipping_cost + tax        context = {        'form': form,        'cart': cart,        'subtotal': subtotal,        'shipping_cost': shipping_cost,        'tax': tax,        'total': total,    }    return render(request, 'orders/checkout.html', context) @login_requireddef order_payment(request, order_number):    """Trang thanh toán"""    order = get_object_or_404(Order, order_number=order_number, user=request.user)        if order.payment_status == 'paid':        messages.info(request, 'This order has already been paid.')        return redirect('orders:order_detail', order_number=order_number)        context = {        'order': order,    }    return render(request, 'orders/payment.html', context) @login_requireddef order_detail(request, order_number):    """Chi tiết đơn hàng"""    order = get_object_or_404(Order, order_number=order_number, user=request.user)        context = {        'order': order,    }    return render(request, 'orders/order_detail.html', context) @login_requireddef order_list(request):    """Danh sách đơn hàng"""    orders = Order.objects.filter(user=request.user).order_by('-created_at')        context = {        'orders': orders,    }    return render(request, 'orders/order_list.html', context) @login_requireddef order_cancel(request, order_number):    """Hủy đơn hàng"""    order = get_object_or_404(Order, order_number=order_number, user=request.user)        if order.status in ['delivered', 'shipped']:        messages.error(request, 'Cannot cancel order that has been shipped or delivered.')        return redirect('orders:order_detail', order_number=order_number)        if request.method == 'POST':        with transaction.atomic():            # Restore stock            for item in order.items.all():                if item.variant:                    item.variant.stock += item.quantity                    item.variant.save()                else:                    item.product.stock += item.quantity                    item.product.save()                        # Update order status            order.status = 'cancelled'            order.save()                        messages.success(request, 'Order cancelled successfully.')            return redirect('orders:order_detail', order_number=order_number)        context = {        'order': order,    }    return render(request, 'orders/order_cancel_confirm.html', context)

Checkout Forms

# orders/forms.pyfrom django import formsfrom .models import Order class CheckoutForm(forms.Form):    """Form checkout"""    # Customer info    first_name = forms.CharField(        max_length=100,        widget=forms.TextInput(attrs={'class': 'form-control', 'placeholder': 'First Name'})    )    last_name = forms.CharField(        max_length=100,        widget=forms.TextInput(attrs={'class': 'form-control', 'placeholder': 'Last Name'})    )    email = forms.EmailField(        widget=forms.EmailInput(attrs={'class': 'form-control', 'placeholder': 'Email'})    )    phone = forms.CharField(        max_length=20,        widget=forms.TextInput(attrs={'class': 'form-control', 'placeholder': 'Phone Number'})    )        # Shipping address    address_line1 = forms.CharField(        max_length=300,        widget=forms.TextInput(attrs={'class': 'form-control', 'placeholder': 'Address Line 1'})    )    address_line2 = forms.CharField(        max_length=300,        required=False,        widget=forms.TextInput(attrs={'class': 'form-control', 'placeholder': 'Address Line 2 (Optional)'})    )    city = forms.CharField(        max_length=100,        widget=forms.TextInput(attrs={'class': 'form-control', 'placeholder': 'City'})    )    state = forms.CharField(        max_length=100,        widget=forms.TextInput(attrs={'class': 'form-control', 'placeholder': 'State/Province'})    )    postal_code = forms.CharField(        max_length=20,        widget=forms.TextInput(attrs={'class': 'form-control', 'placeholder': 'Postal Code'})    )    country = forms.CharField(        max_length=100,        initial='Vietnam',        widget=forms.TextInput(attrs={'class': 'form-control', 'placeholder': 'Country'})    )        # Note    note = forms.CharField(        required=False,        widget=forms.Textarea(attrs={            'class': 'form-control',            'placeholder': 'Order notes (optional)',            'rows': 3        })    )        def clean_phone(self):        phone = self.cleaned_data['phone']        # Basic phone validation        import re        if not re.match(r'^\+?1?\d{9,15}$', phone):            raise forms.ValidationError('Enter a valid phone number.')        return phone

Order URLs

# orders/urls.pyfrom django.urls import pathfrom . import views app_name = 'orders' urlpatterns = [    path('checkout/', views.checkout, name='checkout'),    path('payment/<str:order_number>/', views.order_payment, name='order_payment'),    path('orders/', views.order_list, name='order_list'),    path('orders/<str:order_number>/', views.order_detail, name='order_detail'),    path('orders/<str:order_number>/cancel/', views.order_cancel, name='order_cancel'),]

Payment Integration

Payment Models

# payments/models.pyfrom django.db import modelsfrom orders.models import Order class Payment(models.Model):    """Thông tin thanh toán"""    PAYMENT_METHOD_CHOICES = [        ('cod', 'Cash on Delivery'),        ('vnpay', 'VNPay'),        ('paypal', 'PayPal'),        ('stripe', 'Stripe'),    ]        STATUS_CHOICES = [        ('pending', 'Pending'),        ('processing', 'Processing'),        ('completed', 'Completed'),        ('failed', 'Failed'),        ('refunded', 'Refunded'),    ]        order = models.OneToOneField(Order, on_delete=models.PROTECT, related_name='payment')    payment_method = models.CharField(max_length=20, choices=PAYMENT_METHOD_CHOICES)    status = models.CharField(max_length=20, choices=STATUS_CHOICES, default='pending')        # Payment details    transaction_id = models.CharField(max_length=200, blank=True)    amount = models.DecimalField(max_digits=10, decimal_places=2)        # Payment gateway response    gateway_response = models.JSONField(default=dict, blank=True)        # Timestamps    created_at = models.DateTimeField(auto_now_add=True)    updated_at = models.DateTimeField(auto_now=True)    completed_at = models.DateTimeField(null=True, blank=True)        class Meta:        ordering = ['-created_at']        def __str__(self):        return f'Payment for {self.order.order_number}'

VNPay Integration

# payments/vnpay.pyimport hashlibimport hmacimport urllib.parsefrom datetime import datetimefrom django.conf import settings class VNPay:    """VNPay payment gateway"""        def __init__(self):        self.vnp_url = settings.VNPAY_URL        self.vnp_tmn_code = settings.VNPAY_TMN_CODE        self.vnp_hash_secret = settings.VNPAY_HASH_SECRET        self.vnp_return_url = settings.VNPAY_RETURN_URL        def create_payment_url(self, order, request):        """Tạo URL thanh toán"""        vnp_params = {            'vnp_Version': '2.1.0',            'vnp_Command': 'pay',            'vnp_TmnCode': self.vnp_tmn_code,            'vnp_Amount': int(order.total * 100),  # Convert to smallest unit            'vnp_CurrCode': 'VND',            'vnp_TxnRef': order.order_number,            'vnp_OrderInfo': f'Payment for order {order.order_number}',            'vnp_OrderType': 'other',            'vnp_Locale': 'vn',            'vnp_ReturnUrl': self.vnp_return_url,            'vnp_IpAddr': self.get_client_ip(request),            'vnp_CreateDate': datetime.now().strftime('%Y%m%d%H%M%S'),        }                # Sort params and create query string        sorted_params = sorted(vnp_params.items())        query_string = urllib.parse.urlencode(sorted_params)                # Create secure hash        hash_data = query_string.encode('utf-8')        hmac_obj = hmac.new(            self.vnp_hash_secret.encode('utf-8'),            hash_data,            hashlib.sha512        )        secure_hash = hmac_obj.hexdigest()                # Final URL        payment_url = f"{self.vnp_url}?{query_string}&vnp_SecureHash={secure_hash}"        return payment_url        def validate_response(self, request_data):        """Validate VNPay response"""        vnp_params = dict(request_data)        vnp_secure_hash = vnp_params.pop('vnp_SecureHash', None)                # Sort and create query string        sorted_params = sorted(vnp_params.items())        query_string = urllib.parse.urlencode(sorted_params)                # Calculate hash        hash_data = query_string.encode('utf-8')        hmac_obj = hmac.new(            self.vnp_hash_secret.encode('utf-8'),            hash_data,            hashlib.sha512        )        calculated_hash = hmac_obj.hexdigest()                return calculated_hash == vnp_secure_hash        @staticmethod    def get_client_ip(request):        """Get client IP address"""        x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')        if x_forwarded_for:            ip = x_forwarded_for.split(',')[0]        else:            ip = request.META.get('REMOTE_ADDR')        return ip

Payment Views

# payments/views.pyfrom django.shortcuts import render, redirect, get_object_or_404from django.contrib.auth.decorators import login_requiredfrom django.contrib import messagesfrom django.views.decorators.csrf import csrf_exemptfrom django.utils import timezonefrom django.db import transactionfrom orders.models import Orderfrom .models import Paymentfrom .vnpay import VNPay @login_requireddef payment_process(request, order_number):    """Xử lý thanh toán"""    order = get_object_or_404(Order, order_number=order_number, user=request.user)        if order.payment_status == 'paid':        messages.info(request, 'This order has already been paid.')        return redirect('orders:order_detail', order_number=order_number)        if request.method == 'POST':        payment_method = request.POST.get('payment_method')                # Create payment record        payment = Payment.objects.create(            order=order,            payment_method=payment_method,            amount=order.total,        )                if payment_method == 'cod':            # Cash on Delivery - just mark as processing            payment.status = 'pending'            payment.save()                        order.payment_status = 'pending'            order.status = 'processing'            order.save()                        messages.success(request, 'Order placed successfully! Pay on delivery.')            return redirect('orders:order_detail', order_number=order_number)                elif payment_method == 'vnpay':            # VNPay payment            vnpay = VNPay()            payment_url = vnpay.create_payment_url(order, request)            return redirect(payment_url)                else:            messages.error(request, 'Invalid payment method.')            return redirect('orders:order_payment', order_number=order_number)        return redirect('orders:order_payment', order_number=order_number) @csrf_exemptdef payment_return(request):    """VNPay return URL"""    vnpay = VNPay()        # Validate response    if vnpay.validate_response(request.GET):        order_number = request.GET.get('vnp_TxnRef')        response_code = request.GET.get('vnp_ResponseCode')        transaction_id = request.GET.get('vnp_TransactionNo')                try:            order = Order.objects.get(order_number=order_number)            payment = order.payment                        with transaction.atomic():                if response_code == '00':                    # Payment successful                    payment.status = 'completed'                    payment.transaction_id = transaction_id                    payment.completed_at = timezone.now()                    payment.gateway_response = dict(request.GET)                    payment.save()                                        order.payment_status = 'paid'                    order.paid_at = timezone.now()                    order.status = 'processing'                    order.save()                                        messages.success(request, 'Payment successful!')                else:                    # Payment failed                    payment.status = 'failed'                    payment.gateway_response = dict(request.GET)                    payment.save()                                        messages.error(request, 'Payment failed. Please try again.')                                return redirect('orders:order_detail', order_number=order_number)                        except Order.DoesNotExist:            messages.error(request, 'Order not found.')            return redirect('pages:home')    else:        messages.error(request, 'Invalid payment response.')        return redirect('pages:home') @login_requireddef payment_cancel(request, order_number):    """Cancel payment"""    order = get_object_or_404(Order, order_number=order_number, user=request.user)        if hasattr(order, 'payment'):        payment = order.payment        if payment.status == 'pending':            payment.status = 'failed'            payment.save()        messages.info(request, 'Payment cancelled.')    return redirect('orders:order_payment', order_number=order_number)

Checkout Templates

<!-- templates/orders/checkout.html -->{% extends 'base.html' %}{% load static %} {% block title %}Checkout{% endblock %} {% block content %}<div class="container my-5">    <h2 class="mb-4">Checkout</h2>        <form method="post">        {% csrf_token %}        <div class="row">            <div class="col-lg-8">                <!-- Shipping Information -->                <div class="card mb-4">                    <div class="card-header">                        <h5 class="mb-0">Shipping Information</h5>                    </div>                    <div class="card-body">                        <div class="row">                            <div class="col-md-6 mb-3">                                {{ form.first_name.label_tag }}                                {{ form.first_name }}                                {% if form.first_name.errors %}                                    <div class="text-danger">{{ form.first_name.errors }}</div>                                {% endif %}                            </div>                            <div class="col-md-6 mb-3">                                {{ form.last_name.label_tag }}                                {{ form.last_name }}                                {% if form.last_name.errors %}                                    <div class="text-danger">{{ form.last_name.errors }}</div>                                {% endif %}                            </div>                        </div>                                                <div class="row">                            <div class="col-md-6 mb-3">                                {{ form.email.label_tag }}                                {{ form.email }}                                {% if form.email.errors %}                                    <div class="text-danger">{{ form.email.errors }}</div>                                {% endif %}                            </div>                            <div class="col-md-6 mb-3">                                {{ form.phone.label_tag }}                                {{ form.phone }}                                {% if form.phone.errors %}                                    <div class="text-danger">{{ form.phone.errors }}</div>                                {% endif %}                            </div>                        </div>                                                <div class="mb-3">                            {{ form.address_line1.label_tag }}                            {{ form.address_line1 }}                            {% if form.address_line1.errors %}                                <div class="text-danger">{{ form.address_line1.errors }}</div>                            {% endif %}                        </div>                                                <div class="mb-3">                            {{ form.address_line2.label_tag }}                            {{ form.address_line2 }}                        </div>                                                <div class="row">                            <div class="col-md-4 mb-3">                                {{ form.city.label_tag }}                                {{ form.city }}                                {% if form.city.errors %}                                    <div class="text-danger">{{ form.city.errors }}</div>                                {% endif %}                            </div>                            <div class="col-md-4 mb-3">                                {{ form.state.label_tag }}                                {{ form.state }}                                {% if form.state.errors %}                                    <div class="text-danger">{{ form.state.errors }}</div>                                {% endif %}                            </div>                            <div class="col-md-4 mb-3">                                {{ form.postal_code.label_tag }}                                {{ form.postal_code }}                                {% if form.postal_code.errors %}                                    <div class="text-danger">{{ form.postal_code.errors }}</div>                                {% endif %}                            </div>                        </div>                                                <div class="mb-3">                            {{ form.country.label_tag }}                            {{ form.country }}                        </div>                                                <div class="mb-3">                            {{ form.note.label_tag }}                            {{ form.note }}                        </div>                    </div>                </div>            </div>                        <div class="col-lg-4">                <!-- Order Summary -->                <div class="card mb-4">                    <div class="card-header">                        <h5 class="mb-0">Order Summary</h5>                    </div>                    <div class="card-body">                        <!-- Cart Items -->                        {% for item in cart %}                        <div class="d-flex mb-3">                            {% if item.product.image %}                            <img src="{{ item.product.image.url }}"                                  alt="{{ item.product.name }}"                                 style="width: 50px; height: 50px; object-fit: cover;"                                 class="me-2">                            {% endif %}                            <div class="grow">                                <h6 class="mb-0">{{ item.product.name }}</h6>                                <small class="text-muted">Qty: {{ item.quantity }}</small>                            </div>                            <strong>{{ item.total_price|floatformat:0 }}đ</strong>                        </div>                        {% endfor %}                                                <hr>                                                <!-- Totals -->                        <div class="d-flex justify-content-between mb-2">                            <span>Subtotal:</span>                            <strong>{{ subtotal|floatformat:0 }}đ</strong>                        </div>                        <div class="d-flex justify-content-between mb-2">                            <span>Shipping:</span>                            <strong>{{ shipping_cost|floatformat:0 }}đ</strong>                        </div>                        <div class="d-flex justify-content-between mb-2">                            <span>Tax:</span>                            <strong>{{ tax|floatformat:0 }}đ</strong>                        </div>                        <hr>                        <div class="d-flex justify-content-between mb-3">                            <strong>Total:</strong>                            <strong class="text-primary">{{ total|floatformat:0 }}đ</strong>                        </div>                                                <button type="submit" class="btn btn-primary w-100">                            Place Order                        </button>                    </div>                </div>            </div>        </div>    </form></div>{% endblock %}

Bài Tập

Exercise 1: Complete Checkout

Task: Test checkout process:

# Requirements:# 1. Complete checkout form# 2. Validate all fields# 3. Create order successfully# 4. Check stock reduction# 5. Verify order details

Exercise 2: Payment Integration

Task: Implement payment methods:

# Requirements:# 1. Cash on Delivery# 2. VNPay integration# 3. PayPal integration (bonus)# 4. Handle payment success/failure# 5. Send order confirmation email

Tài Liệu Tham Khảo

Previous: Bài 35.2: Cart and Wishlist | Next: Bài 35.4: Reviews and Final Features

#payment

E-commerce Practice Project (Part 3)