api

<?php
/**
 * KangHL
 * Domain: https://kanghl.web.id/
 */
require '../config.php';
header('Content-Type: application/json');
if ($maintenance == 1) {
	$hasilnya = array('status' => false, 'data' => array('pesan' => 'Maintenance'));
	exit(json_encode($hasilnya, JSON_PRETTY_PRINT));
}
if (isset($_POST['api_key']) AND isset($_POST['action'])) {
	$apinya = $conn->real_escape_string($_POST['api_key']);
	$aksinya = $_POST['action'];

	if (!$apinya || !$aksinya) {
		$hasilnya = array('status' => false, 'data' => array('pesan' => 'Permintaan Tidak Sesuai'));

	} else {
		$cek_usernya = $conn->query("SELECT * FROM users WHERE api_key = '$apinya'");
		$datanya = $cek_usernya->fetch_assoc();
		if (mysqli_num_rows($cek_usernya) == 1) {
			if ($aksinya == 'pemesanan') {
				if (isset($_POST['layanan']) AND isset($_POST['target']) AND isset($_POST['no_meter'])) {
					$layanan = $conn->real_escape_string(trim(filter($_POST['layanan'])));
					$target = $conn->real_escape_string(trim(filter($_POST['target'])));
					$nomor_meteran = $conn->real_escape_string(trim(filter($_POST['no_meter'])));
					if (!$layanan || !$target || !$nomor_meteran) {
						$hasilnya = array('status' => false, 'data' => array('pesan' => 'Permintaan Tidak Sesuai'));
					} else {
						$cek_layanan = $conn->query("SELECT * FROM layanan_pulsa WHERE service_id = '$layanan' AND status = 'Normal'");
						$data_layanan = $cek_layanan->fetch_assoc();
						if (mysqli_num_rows($cek_layanan) == 0) {
							$hasilnya = array('status' => false, 'data' => array('pesan' =>'Layanan Tidak Tersedia'));
						} else {
							$order_id = acak_nomor(3).acak_nomor(4);
							$provider = $data_layanan['provider'];
							 if ($datanya['saldo'] < $data_layanan['harga']) {
								$hasilnya = array('status' => false, 'data' => array('pesan' =>'Saldo Tidak Mencukupi'));
							} else {
								$cek_provider = $conn->query("SELECT * FROM provider WHERE code = '$provider'");
								$data_provider = $cek_provider->fetch_assoc();


            if ($provider == "JAVAH2H") {
            $url = 'https://javah2h.com/api/connect/';
            $header = array(
             'h2h-userid: ',
             'h2h-key: ', // lihat hasil autogenerate di member area
             'h2h-secret: ', // lihat hasil autogenerate di member area
            );
				if ($nomor_meteran == false) {
					$data = array(
						'inquiry' => 'I', // konstan
						'code' =>  $data_layanan['provider_id'], // kode produk
						'phone' => $target, // nohp pembeli
						'trxid_api' => $order_id, // Trxid / Reffid dari sisi client
					);
				} else if ($nomor_meteran == true) {
					$data = array(
						'inquiry' => 'PLN', // konstan
						'code' =>  $data_layanan['provider_id'], // kode produk
						'idcust' => $nomor_meteran, // nohp pembeli
						'trxid_api' => $order_id, // Trxid / Reffid dari sisi client
					);
				}
            }
                	$ch = curl_init();
                	curl_setopt($ch, CURLOPT_URL, $url);
                	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
                	curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
                	curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
                	curl_setopt($ch, CURLOPT_POST, 1);
                	curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
                	$response = curl_exec($ch);
			    	$result = json_decode($response, true);

			if ($provider = 'JAVAH2H' AND $result['result'] == 'failed') {
		        $hasilnya = array('status' => false, 'data' => array('pesan' =>'Gangguan'));
			} else {
			    if ($provider == "JAVAH2H") {
					$provider_oid = $order_id;
			    }
									if ($conn->query("INSERT INTO pembelian_pulsa VALUES ('','$order_id', '$provider_oid', '".$datanya['username']."', '".$data_layanan['layanan']."', '".$data_layanan['harga']."', '".$data_layanan['profit']."', '$target', '$nomor_meteran', '-', 'Pending', '$date', '$time', 'API', '$provider', '0')") == true) {

										$conn->query("UPDATE users SET saldo = saldo-".$data_layanan['harga'].", pemakaian_saldo = pemakaian_saldo+".$data_layanan['harga']." WHERE username = '".$datanya['username']."'");
										$conn->query("INSERT INTO history_saldo VALUES ('', '".$datanya['username']."', 'Pengurangan Saldo', '".$data_layanan['harga']."', 'Pemesanan Pulsa Via API Dengan Order ID $order_id', '$date', '$time')");
										$hasilnya = array('status' => true, 'data' => array('id' => $order_id));
										} else {
										$hasilnya = array('status' => false, 'data' => array('pesan' => 'System Error'));
									}
								}
							}
						}
					}
				} else {
					$hasilnya = array('status' => false, 'data' => array('pesan' => 'System Error'));
					}
			} else if ($aksinya == 'status') {
				if (isset($_POST['id'])) {
					$order_id = $conn->real_escape_string(trim($_POST['id']));
					$cek_pesanan = $conn->query("SELECT * FROM pembelian_pulsa WHERE oid = '$order_id' AND user = '".$datanya['username']."'");
					$data_pesanan = mysqli_fetch_array($cek_pesanan);
					if (mysqli_num_rows($cek_pesanan) == 0) {
						$hasilnya = array('status' => false, 'data' => array('pesan' => 'Order ID Tidak Di Temukan'));
					} else {
						$hasilnya = array('status' => true, 'data' => array("id" => $data_pesanan['oid'], 'status' => $data_pesanan['status'], 'catatan' => $data_pesanan['keterangan']));
					}
				} else {
					$hasilnya = array('status' => false, 'data' => array('pesan' => 'Permintaan Tidak Sesuai'));
				}
			} else if ($aksinya == 'layanan') {
					$cek_layanan = $conn->query("SELECT * FROM layanan_pulsa ORDER BY service_id ASC");
					while($rows = mysqli_fetch_array($cek_layanan)){
					$hasilnya = "-";
					$this_data[] = array('sid' => $rows['service_id'], 'operator' => $rows['operator'], 'layanan' => $rows['layanan'], 'harga' => $rows['harga'],'status' => $rows['status']);
                }
						$hasilnya = array('status' => true, 'data' => $this_data);
			} else {
				$hasilnya = array('status' => false, 'data' => array('pesan' => 'Permintaan Salah'));
			}
		} else {
			$hasilnya = array('status' => false, 'data' => array('pesan' => 'Api Key Salah'));
		}
	}
} else {
	$hasilnya = array('status' => false, 'data' => array('pesan' => 'Permintaan Tidak Sesuai'));
}

print(json_encode($hasilnya, JSON_PRETTY_PRINT));