<?php
include "cfg.php";
$ch = curl_init('https://www.paypal.com/cgi-bin/webscr');
curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "cmd=_notify-validate&" . file_get_contents("php://input"));
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Connection: Close'));
curl_setopt($ch, CURLOPT_CAINFO, dirname(__FILE__) . '/cacert.pem');
$res = curl_exec($ch);
if($res == false) {
 file_put_contents("ipnerror.txt", curl_error($ch));
}
curl_close($ch);
if (strcmp ($res, "VERIFIED") == 0) {
 mysql_connect('127.0.0.1', $pre . 'root', 'j9vQQYfuMq2');
 mysql_select_db($pre . 'ipn');
 $item_name = mysql_real_escape_string($_POST['item_name']);
 $item_number = mysql_real_escape_string($_POST['item_number']);
 $status = mysql_real_escape_string($_POST['payment_status']);
 $gross = mysql_real_escape_string($_POST['mc_gross']);
 $currency = mysql_real_escape_string($_POST['mc_currency']);
 $first_name = mysql_real_escape_string($_POST['first_name']);
 $last_name = mysql_real_escape_string($_POST['last_name']);
 $txn_id = mysql_real_escape_string($_POST['txn_id']);
 $receiver_email = mysql_real_escape_string($_POST['receiver_email']);
 $payer_email = mysql_real_escape_string($_POST['payer_email']);
 $date = mysql_real_escape_string($_POST['payment_date']);
 $wid = mysql_real_escape_string($_POST['custom']);
 if($item_name == 'MC Alts') {
 $price = mysql_fetch_assoc(mysql_query("SELECT price FROM ipn_waiting WHERE (id=".$wid.")"))['price'];
 $uni = mysql_num_rows(mysql_query("SELECT txn_id FROM ipn_received WHERE (txn_id='".$txn_id."')")) == 0 ? true : false;
 if($status == 'Completed' && $currency == 'USD' && $receiver_email == 'max.bruce12@gmail.com' && $uni) {
  mysql_query("INSERT INTO ipn_received VALUES ('".$txn_id."', '".$payer_email."', '".$first_name."', '".$last_name."', '".$gross."', '".$date."', '".$wid."')");
  $q = mysql_query("SELECT * FROM ipn_waiting WHERE (id='".$wid."')");
  $qr = mysql_fetch_assoc($q);
  $ao = $qr['orderalts'];
  $oo = $qr['orderoptifine'];
  $ne = $qr['notifyemail'];
  $ppemail = $qr['paypalemail'];
  mysql_query("UPDATE ipn_cid SET txn_id='".$txn_id."' WHERE (wid='".$wid."')");
  if(floatval($gross) >= floatval($price)) {
  if($ao > 0) {
   $resa = mysql_query('SELECT * FROM ipn_alts LIMIT '.$ao);
   while($r = mysql_fetch_assoc($resa)) {
    $u = $r['username'];
    $p = $r['password'];
    mysql_query("DELETE FROM ipn_alts WHERE (username='".$u."' AND password='".$p."')");
    mysql_query("INSERT INTO ipn_alt_reserved (username, password, rid) VALUES ('".$u."', '".$p."', '".$txn_id."')");
   }
  }
  if($oo > 0) {
   $reso = mysql_query('SELECT * FROM ipn_optifine LIMIT '.$oo);
   while($r = mysql_fetch_assoc($reso)) {
    $u = $r['username'];
    $p = $r['password'];
    mysql_query("DELETE FROM ipn_optifine WHERE (username='".$u."' AND password='".$p."')");
    mysql_query("INSERT INTO ipn_opti_reserved (username, password, rid) VALUES ('".$u."', '".$p."', '".$txn_id."')");
   }
  }
  }
  $to = $ne;
  $subject = 'MCAlts.com - Your Minecraft Alts are Ready.';
  $message = 'Your Minecraft Alts are ready for pickup, please visit this link: http://www.mcalts.com/alts.php?txn_id=' . $txn_id . '&wid=' . $wid;
  $headers = "Reply-To: max.bruce12@gmail.com\r\nReturn-Path: Sales@mcalts.com\r\nFrom: Sales@mcalts.com\r\nOrganization: McAlts\r\nContent-Type: text/plain\r\n";
  mail($to, $subject, $message, $headers);
  $subject2 = 'Paypal Sale Made - ' . $gross;
  $message2 = 'Their link is: http://www.mcalts.com/alts.php?txn_id=' . $txn_id . '&wid=' . $wid . "\r\nThey paid: " . $gross . "\r\nTheir paypal email is: " . $ppemail . "\r\nAnd their notification email: " . $ne . "\r\nTransaction ID: " . $txn_id;
  mail("max.bruce12@gmail.com", $subject2, $message2, $headers);
  //mail("thesean976@gmail.com", $subject2, $message2, $headers);
  mail("danihashweh3@gmail.com", $subject2, $message2, $headers);
  mail("ganizgfx@gmail.com", $subject2, $message2, $headers);
 }else{
  mysql_query("INSERT INTO ipn_received_rogue VALUES ('".$txn_id."', '".$payer_email."', '".$first_name."', '".$last_name."', '".$gross."', '".$date."')");
 }
 }elseif($item_name == 'MC Full Access') {
  $accw = mysql_fetch_assoc(mysql_query("SELECT * FROM ipn_faw WHERE (id='".$wid."')"));
  $username = $accw['username'];
  $accf;
  if($username != 'random') {
   $accf = mysql_fetch_assoc(mysql_query("SELECT * FROM ipn_fa WHERE (username='".$username."')"));
  }
  $price = 0.00;
  if($accf) {
   $price = $accf['price'];
  }else{
   $price = '4.95';
  }
  $uni = mysql_num_rows(mysql_query("SELECT txn_id FROM ipn_fareceived WHERE (txn_id='".$txn_id."')")) == 0 ? true : false;
  if($status == 'Completed' && $currency == 'USD' && $receiver_email == 'max.bruce12@gmail.com' && $uni) {
   mysql_query("INSERT INTO ipn_fareceived VALUES ('".$txn_id."', '".$payer_email."', '".$first_name."', '".$last_name."', '".$gross."', '".$date."', '".$wid."')");
   $ne = $accw['email'];
   $ppemail = $accw['ppemail'];
   if(floatval($gross) >= floatval($price)) {
    $password = "";
    if($username != 'random') {
     mysql_query("DELETE FROM ipn_fa WHERE (username='".$username."') LIMIT 1");
     $password = $accf['password'];
    }
    mysql_query("INSERT INTO ipn_fatp (firstname, lastname, email, wid, username, password, pemail, pemailp) VALUES ('".$first_name."', '".$last_name."', '".$ne."', '".$wid."', '".$username."', '".$password."', '".$accf['pemail']."', '".$accf['pemailp']."')");
   }
   $to = $ne;
   $subject = 'MCAlts.com - Your Minecraft Full Access Accounts are now being processed.';
   $message = "Transaction ID: " . $txn_id . "\r\nThe accounts will be transferred to: " . $ne . "\r\nYou should receive your email/password within the next 24 hours.";
   $headers = "Reply-To: max.bruce12@gmail.com\r\nReturn-Path: Sales@mcalts.com\r\nFrom: Sales@mcalts.com\r\nOrganization: McAlts\r\nContent-Type: text/plain\r\n";
   mail($to, $subject, $message, $headers);
   $subject2 = 'Paypal FA Sale Made - '.$username.' - ' . $gross;
   $message2 = "They paid: $" . $gross . "\r\nTheir paypal email is: " . $ppemail . "\r\nAnd their notification email: " . $ne . "\r\nTransaction ID: " . $txn_id . "\r\nDelivery Details: \r\nTransfer Email: " . $ne . "\r\nUsername: " . $username;
   mail("max.bruce12@gmail.com", $subject2, $message2, $headers);
   //mail("thesean976@gmail.com", $subject2, $message2, $headers);
  }else{
   mysql_query("INSERT INTO ipn_received_rogue VALUES ('".$txn_id."', '".$payer_email."', '".$first_name."', '".$last_name."', '".$gross."', '".$date."')");
  }
 }else{
  mysql_query(&quot..
Java Prophet