<?php
	use PHPMailer\PHPMailer\PHPMailer;
	require "PHPMailer/PHPMailer.php";
	require "PHPMailer/Exception.php";

	if ($_SERVER['REQUEST_METHOD'] != 'POST') {
		header('Location: index.php');
		exit();
	}

	$ch = curl_init();
	curl_setopt($ch, CURLOPT_URL, 'https://ipnpb.sandbox.paypal.com/cgi-bin/webscr');
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
	curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
	curl_setopt($ch, CURLOPT_POST, 1);
	curl_setopt($ch, CURLOPT_POSTFIELDS, "cmd=_notify-validate&" . http_build_query($_POST));
	$response = curl_exec($ch);
	curl_close($ch);

	if ($response == "VERIFIED" && $_POST['receiver_email'] == "paypalmmv@gmail.com") {
		$cEmail = $_POST['payer_email'];
		$name = $_POST['first_name'] . " " . $_POST['last_name'];

		$price = $_POST['mc_gross'];
		$currency = $_POST['mc_currency'];
		$item = $_POST['item_number'];
		$paymentStatus = $_POST['payment_status'];


		if ($item == "NFA" && $currency == "USD" && $paymentStatus == "Completed" && $price == 1.5) {
			$servername = "localhost";
			$username = "username";
			$password = "password";
			$dbname = "myDB";

			$conn = new mysqli($servername, $username, $password, $dbname);

			if ($conn->connect_error) {
    		die("Connection failed: " . $conn->connect_error);
			}

			$sql = "SELECT NFAs FROM Alts LIMIT 0, 150";
			$result = $conn->query($sql);
			$conn->close();


			$mail = new PHPMailer();
			$mail->setFrom("admin@godalts.com", "GodAlts - 150x NFA Purchase");
			$mail->addAddress($cEmail, $name);
			$mail->isHTML(true);
			$mail->Subject = "Purchase Details";
			$mail->Body = "
				Hi, <br><br>
			Thank you for your purchase of 100x NFA alts at GodAlts.<br><br>

			Purchased Alts:


				<br><br>Kind regards,
						<br>GodAlts
			";

			$mail->send();
		}
	}
?>