<?php
require_once("config.php");
header("Content-Type: application/json");
if(isset($_POST['api'])){
    $apinya = mysqli_real_escape_string($db, $_POST['api']);
    $check_user = mysqli_query($db, "SELECT * FROM users WHERE api_key = '$apinya'");
    $data_user = mysqli_fetch_assoc($check_user);
    $pembeli = $data_user['username'];
    if (mysqli_num_rows($check_user) == 1){
    	if(isset($_POST['service']) AND  isset($_POST['tujuan'])) {
    		$service = mysqli_real_escape_string($db, trim($_POST['service']));
    		$tujuan = mysqli_real_escape_string($db, trim($_POST['tujuan']));
    		if(empty($service) || empty($tujuan)) {
    			$output = array('result' => 'false','data' => array('msg' => 'Permintaan Tidak Sesuai'));
    			print_r(json_decode($output, JSON_PRETTY_PRINT));
    		} else {
    			$check_layanan = mysqli_query($db, "SELECT * FROM services_pulsa WHERE pid = '$service' AND status = 'Active'");
    			$data_layanan = mysqli_fetch_assoc($check_layanan);
    			$harga_h2h = $data_layanan['price'];
    			$serv_name = $data_layanan['service'];
    			if(mysqli_num_rows($check_layanan) == 0) {
    				$output = array('result' => 'false','data' => array('msg' => 'Service Tidak Ditemukan'));
                    print_r(json_encode($output, JSON_PRETTY_PRINT));
    			} else {
    				$order_id = rand(11111,99999);
    				if($data_user['balance'] < $harga_h2h) {
    					$output = array('result' => 'false','data' => array('msg' => 'Saldo Tidak Mencukupi'));
                        print_r(json_encode($output, JSON_PRETTY_PRINT));
    				} else {
    					$check_provider = mysqli_query($db, "SELECT * FROM provider WHERE code = 'PULSA'");
    					$data_provider = mysqli_fetch_assoc($check_provider);
    					$provider_link = $data_provider['link'];
    					$provider_key = $data_provider['api_key'];
    					if($provider == "PULSA") {
    				   $provider_postdata = "api_key=$api_key&action=pemesanan&layanan=$post_service&target=$post_phone&no_meter=$post_nometer";
    				   $provider_apibase = $provider_link;
    				   $ch = curl_init();
                       curl_setopt($ch, CURLOPT_URL, $provider_apibase);
                       curl_setopt($ch, CURLOPT_POST, 1);
                       curl_setopt($ch, CURLOPT_POSTFIELDS, $provider_postdata);
                       curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
                       curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
                       $chresult = curl_exec($ch);
                       curl_close($ch);
                       $json_result = json_decode($chresult, true);
                       $provider_status = $json_result['status'];
                       $provider_message = $json_result['data'];
    				} else{
    					if($provider_status == "true") {
    						$poid = $provider_message = $json_result['data']['id'];
    						$pesan = $provider_message['catatan'];
    						 $input = mysqli_query($db, "INSERT INTO orders_pulsa (oid, poid, user, service, target, price, status, date, provider, place_from) VALUES ('$order_id', '$poid', '$pembeli', '$serv_name', '$tujuan', '$harga_h2h', 'Pending', '$date', 'PULSA', 'API')");
    						 if($input == true){
                                $input1 = mysqli_query($db, "UPDATE users SET balance = balance-$harga_h2h WHERE username = '$pembeli'");
                                $input1 = mysqli_query($db, "INSERT INTO catatan (username, note, waktu) VALUES ('$pembeli', 'Kamu telah melakukan aktifitas Order $serv_name', '$date $time')");
                                $input1 = mysqli_query($db, "INSERT INTO hof (type, user, price) VALUES ('Pulsa', '$pembeli', '$harga_h2h')");
                                $output = array('result' => 'true', 'data' => array('msg' => $pesan, 'trxid' => $poid));
                                print_r(json_encode($output, JSON_PRETTY_PRINT));
                            } else {
                            if($provider_message == stristr($provider_message,'Saldo Anda Tidak Mencukupi,Sisa Saldo')) {
                                $output = array('result' => 'false','data' => array('msg' => $provider_message));
                                print_r(json_encode($output, JSON_PRETTY_PRINT));
                            } else {
                                $output = array('result' => 'false','data' => array('msg' => $provider_message));
                                print_r(json_encode($output, JSON_PRETTY_PRINT));
                            }
                        }


    				}
    			}
    		}
    	}
    }
     }else {
            $output = array('result' => 'false','data' => array('msg' => 'Permintaan Tidak Sesuai'));
            print_r(json_encode($output, JSON_PRETTY_PRINT));
        }
    } else {
        $output = array('result' => 'false','data' => array('msg' => 'User Tidak Ditemukan'));
        print_r(json_encode($output, JSON_PRETTY_PRINT));
    }
} else {
    $output = array('result' => 'false','data' => array('msg' => 'Tidak Ada Data API'));
    print_r(json_encode($output, JSON_PRETTY_PRINT));
}
?>