API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 20th, 2018
142
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.37 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. session_start();
  3. require("mainconfig.php");
  4.  
  5. if (isset($_SESSION['user'])) {
  6. $sess_username = $_SESSION['user']['username'];
  7. $check_user = mysqli_query($db, "SELECT * FROM users WHERE username = '$sess_username'");
  8. $data_user = mysqli_fetch_assoc($check_user);
  9. if (mysqli_num_rows($check_user) == 0) {
  10. header("Location: ".$cfg_baseurl."logout.php");
  11. } else if ($data_user['status'] == "Suspended") {
  12. header("Location: ".$cfg_baseurl."logout.php");
  13. }
  14.  
  15. include("lib/header.php");
  16. $msg_type = "nothing";
  17.  
  18. if (isset($_POST['order'])) {
  19. $post_service = $_POST['service'];
  20. $post_quantity = $_POST['quantity'];
  21. $post_link = trim($_POST['link']);
  22. $post_category = $_POST['category'];
  23. $check_service = mysqli_query($db, "SELECT * FROM services WHERE sid = '$post_service' AND status = 'Active'");
  24. $data_service = mysqli_fetch_assoc($check_service);
  25.  
  26. $check_orders = mysqli_query($db, "SELECT * FROM orders WHERE link = '$post_link' AND status IN ('Pending','Processing')");
  27. $data_orders = mysqli_fetch_assoc($check_orders);
  28. $rate = $data_service['price'] / 1000;
  29. $price = $rate*$post_quantity;
  30. $oid = random_number(3).random_number(4);
  31. $service = $data_service['service'];
  32. $provider = $data_service['provider'];
  33. $pid = $data_service['pid'];
  34.  
  35. $check_provider = mysqli_query($db, "SELECT * FROM provider WHERE code = '$provider'");
  36. $data_provider = mysqli_fetch_assoc($check_provider);
  37.  
  38. // check user
  39. $check_user = mysqli_query($db, "SELECT * FROM users WHERE username = '$sess_username'");
  40. $data_user = mysqli_fetch_assoc($check_user);
  41.  
  42. $eusername = $data_user['username'];
  43. $ebalance = $data_user['balance'];
  44. $elevel = $data_user['level'];
  45. $eregist = $data_user['uplink'];
  46.  
  47. if ($post_category == "Instagram Followers") {
  48. $id = file_get_contents("https://instagram.com/".$post_link."?__a=1");
  49. $id = json_decode($id, true);
  50. $start_count = $id['user']['followed_by']['count'];
  51. } else if ($post_category == "Instagram Likes") {
  52. $id = file_get_contents("".$post_link."?__a=1");
  53. $id = json_decode($id, true);
  54. $start_count = $id['graphql']['shortcode_media']['edge_media_preview_like']['count'];
  55. } else if ($post_category == "Instagram Views") {
  56. $id = file_get_contents("".$post_link."?__a=1");
  57. $id = json_decode($id, true);
  58. $start_count = $id['graphql']['shortcode_media']['video_view_count'];
  59. } else {
  60.  
  61. }
  62.  
  63. if (empty($post_service) || empty($post_link) || empty($post_quantity)) {
  64. $msg_type = "error";
  65. $msg_content = "<b>Gagal:</b> Mohon mengisi input.";
  66. } else if (mysqli_num_rows($check_orders) == 1) {
  67. $msg_type = "error";
  68. $msg_content = "<b>Gagal:</b> Terdapat Orderan Username Yang Sama Dan berstatus Pending/Processing.";
  69. } else if (mysqli_num_rows($check_service) == 0) {
  70. $msg_type = "error";
  71. $msg_content = "<b>Gagal:</b> Layanan tidak ditemukan.";
  72. } else if (mysqli_num_rows($check_provider) == 0) {
  73. $msg_type = "error";
  74. $msg_content = "<b>Gagal:</b> Server Maintenance.";
  75. } else if ($post_quantity < $data_service['min']) {
  76. $msg_type = "error";
  77. $msg_content = "<b>Gagal:</b> Jumlah minimal adalah ".$data_service['min'].".";
  78. } else if ($post_quantity > $data_service['max']) {
  79. $msg_type = "error";
  80. $msg_content = "<b>Gagal:</b> Jumlah maksimal adalah ".$data_service['max'].".";
  81. } else if ($data_user['balance'] < $price) {
  82. $msg_type = "error";
  83. $msg_content = "<b>Gagal:</b> Saldo Anda tidak mencukupi untuk melakukan pembelian ini.";
  84. } else {
  85.  
  86. // api data
  87. $api_link = $data_provider['link'];
  88. $api_key = $data_provider['api_key'];
  89. // end api data
  90.  
  91. if ($provider == "MANUAL") {
  92. $api_postdata = "";
  93. $poid = $oid;
  94. } else if ($provider == "SASMEDIA") {
  95. $api_postdata = "api_key=$api_key&service=$pid&target=$post_link&quantity=$post_quantity";
  96. $ch = curl_init();
  97. curl_setopt($ch, CURLOPT_URL, "$api_link");
  98. curl_setopt($ch, CURLOPT_POST, 1);
  99. curl_setopt($ch, CURLOPT_POSTFIELDS, $api_postdata);
  100. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  101. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  102. $chresult = curl_exec($ch);
  103. curl_close($ch);
  104. $json_result = json_decode($chresult);
  105. $poid = $json_result->data->id;
  106. } else if ($provider == "IRVANKEDE") {
  107. $api_postdata = "api_key=$api_key&service=$pid&target=$post_link&quantity=$post_quantity";
  108. $ch = curl_init();
  109. curl_setopt($ch, CURLOPT_URL, "https:?/irvankede-smm.co.id/api/order");
  110. curl_setopt($ch, CURLOPT_POST, 1);
  111. curl_setopt($ch, CURLOPT_POSTFIELDS, $api_postdata);
  112. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  113. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  114. $chresult = curl_exec($ch);
  115. curl_close($ch);
  116. $json_result = json_decode($chresult);
  117. $poid = $json_result->data->id;
  118. } else {
  119. die("System Error!");
  120. }
  121.  
  122. if (empty($poid)) {
  123. $msg_type = "error";
  124. $msg_content = "<b>Gagal:</b> Server Maintenance.";
  125. } else {
  126. $update_user = mysqli_query($db, "UPDATE users SET balance = balance-$price-20 WHERE username = '$sess_username'");
  127.  
  128. $update_user = mysqli_query($db, "UPDATE users SET balance = balance+20 WHERE username = '$eregist'");
  129.  
  130. $update_user = mysqli_query($db, "UPDATE users SET balance = balance+1 WHERE username = 'sedekahysm'");
  131. if ($update_user == TRUE) {
  132. $insert_order = mysqli_query($db, "INSERT INTO komisi (uplink, downline, komisi, service, date, time) VALUES ('$eregist','$sess_username','20','$service','$date','$time')");
  133.  
  134. $insert_order = mysqli_query($db, "INSERT INTO orders (oid, poid, user, category, service, link, quantity, remains, start_count, price, status, date, time, provider, place_from, pengembalian) VALUES ('$oid', '$poid', '$sess_username', '$post_category', '$service', '$post_link', '$post_quantity', '$post_quantity', '$start_count', '$price', 'Pending', '$date', '$time', '$provider', 'WEB', '0')");
  135. $insert_order = mysqli_query($db, "INSERT INTO balance_history (username, action, type, quantity, msg, date, time) VALUES ('$sess_username', 'Pemotongan Saldo', '- Rp', '$price+20', 'Membuat Pesanan, ID: $poid', '$date', '$time')");
  136. if ($insert_order == TRUE) {
  137. $msg_type = "success";
  138. $msg_content = "<b>Order ID:</b> $poid<br /><b>Layanan:</b> $service<br /><b>Link:</b> $post_link<br /><b>Jumlah:</b> ".number_format($post_quantity,0,',','.')."<br /><b>Biaya:</b> Rp ".number_format($price,0,',','.');
  139. } else {
  140. $msg_type = "error";
  141. $msg_content = "<b>Gagal:</b> Error system (2).";
  142. }
  143. } else {
  144. $msg_type = "error";
  145. $msg_content = "<b>Gagal:</b> Error system (1).";
  146. }
  147. }
  148. }
  149. }
  150.  
  151. $check_user = mysqli_query($db, "SELECT * FROM users WHERE username = '$sess_username'");
  152. $data_user = mysqli_fetch_assoc($check_user);
  153. ?>
  154. <div class="row">
  155. <div class="col-md-12">
  156. <div class="nav-tabs-custom">
  157. <ul class="nav nav-tabs pull-right">
  158. <li><a href="#info" data-toggle="tab">Informasi</a></li>
  159. <li class="active"><a href="#form" data-toggle="tab">Form</a></li>
  160. <li class="pull-left header"><i class="fa fa-shopping-cart"></i> Pesan Baru</li>
  161. </ul>
  162. <div class="tab-content">
  163. <div class="tab-pane" id="info">
  164. Tata cara pengisian form pemesanan:
  165. <ul>
  166. <li>Pilih salah satu kategori pada <b>Kategori</b>, maka akan ditampilkan daftar layanan yang tersedia pada <b>Layanan</b>, silahkan pilih salah satu layanan.</li>
  167. <li>Masukkan data berupa username atau link pada <b>Data</b> sesuai permintaan yang ditampilkan setelah memilih layanan.</li>
  168. <li>Masukkan jumlah yang diinginkan pada <b>Jumlah</b>, maka akan ditampilkan total harga yang akan dibayar dengan saldo pada <b>Total harga</b>.</li>
  169. <li>Jika semua input sudah terisi dengan benar, klik <b>Kirim</b>. Pesanan akan diproses jika hasil yang ditampilkan setelah submit sukses.</li>
  170. <li>Jika pesanan <i>stuck</i>/tidak berubah status dari pending, Anda dapat menghubungi Admin melalui tiket.</li>
  171. </ul>
  172. Tata cara mengisi input <b>Data</b> yang sesuai:
  173. <ul>
  174. <li>Masukkan data berupa username atau link sesuai yang diminta.</li>
  175. <li>Pastikan akun target tidak berstatus <i>private</i>.</li>
  176. <li>Tidak ada pengembalian dana jika terjadi kesalahan pengisian data oleh pengguna.</li>
  177. </ul>
  178. Jika terjadi kesalahan saat melakukan permintaan deposit silahkan laporkan ke Admin melalui tiket, terimakasih.
  179. </div>
  180. <div class="tab-pane active" id="form">
  181. <form class="form-horizontal" method="post">
  182. <input type="hidden" name="codewsmm_token" value="17463cf3b533270f22747399ecc15b77" style="display: none;">
  183. <div class="alert alert-warning">
  184. <i class="fa fa-warning"></i> Sebelum membuat pesanan baru, silakan membaca <b>Informasi</b> terlebih dahulu.
  185. </div>
  186.  
  187. <?php
  188. if ($msg_type == "success") {
  189. ?>
  190. <div class="alert alert-success">
  191. <a href="#" class="close" data-dismiss="alert" aria-label="close">×</a>
  192. <i class="fa fa-check-circle"></i>
  193. <?php echo $msg_content; ?>
  194. </div>
  195. <?php
  196. } else if ($msg_type == "error") {
  197. ?>
  198. <div class="alert alert-danger">
  199. <a href="#" class="close" data-dismiss="alert" aria-label="close">×</a>
  200. <i class="fa fa-times-circle"></i>
  201. <?php echo $msg_content; ?>
  202. </div>
  203. <?php
  204. }
  205. ?>
  206. <div class="form-group">
  207. <label class="col-md-2 control-label">Kategori</label>
  208. <div class="col-md-10">
  209. <select class="form-control" id="category">
  210. <option value="0">Pilih salah satu...</option>
  211. <?php
  212. $check_cat = mysqli_query($db, "SELECT * FROM service_cat ORDER BY name ASC");
  213. while ($data_cat = mysqli_fetch_assoc($check_cat)) {
  214. ?>
  215. <option value="<?php echo $data_cat['code']; ?>"><?php echo $data_cat['name']; ?></option>
  216. <?php
  217. }
  218. ?>
  219. </select>
  220. </div>
  221. </div>
  222. <div class="form-group">
  223. <label class="col-md-2 control-label">Layanan</label>
  224. <div class="col-md-10">
  225. <select class="form-control" name="service" id="service">
  226. <option value="0">Pilih kategori...</option>
  227. </select>
  228. </div>
  229. </div>
  230. <div id="note">
  231. </div>
  232. <div class="form-group">
  233. <label class="col-md-2 control-label">Link/Target</label>
  234. <div class="col-md-10">
  235. <input type="text" name="link" class="form-control" placeholder="Link/Target">
  236. </div>
  237. </div>
  238. <div class="form-group">
  239. <label class="col-md-2 control-label">Jumlah</label>
  240. <div class="col-md-10">
  241. <input type="number" name="quantity" class="form-control" placeholder="Jumlah" onkeyup="get_total(this.value).value;">
  242. </div>
  243. </div>
  244.  
  245. <input type="hidden" id="rate" value="0">
  246. <div class="form-group">
  247. <label class="col-md-2 control-label">Total Harga</label>
  248. <div class="col-md-10">
  249. <input type="number" class="form-control" id="total" readonly>
  250. </div>
  251. </div>
  252. <button type="reset" class="btn btn-danger"><i class="fa fa-refresh"></i> Ulangi</a>
  253. <button type="submit" class="btn btn-info pull-right" name="order"><i class="fa fa-send"></i> Buat Pesanan</button>
  254. </form>
  255. </div>
  256. </div>
  257. </div>
  258. </div>
  259. </div>
  260.  
  261. <!-- end row -->
  262. <script type="text/javascript" src="https://code.jquery.com/jquery-1.10.2.js"></script>
  263. <script type="text/javascript">
  264. $(document).ready(function() {
  265. $("#category").change(function() {
  266. var category = $("#category").val();
  267. $.ajax({
  268. url: '<?php echo $cfg_baseurl; ?>inc/order_service.php',
  269. data: 'category=' + category,
  270. type: 'POST',
  271. dataType: 'html',
  272. success: function(msg) {
  273. $("#service").html(msg);
  274. }
  275. });
  276. });
  277. $("#service").change(function() {
  278. var service = $("#service").val();
  279. $.ajax({
  280. url: '<?php echo $cfg_baseurl; ?>inc/order_note.php',
  281. data: 'service=' + service,
  282. type: 'POST',
  283. dataType: 'html',
  284. success: function(msg) {
  285. $("#note").html(msg);
  286. }
  287. });
  288. $.ajax({
  289. url: '<?php echo $cfg_baseurl; ?>inc/order_rate.php',
  290. data: 'service=' + service,
  291. type: 'POST',
  292. dataType: 'html',
  293. success: function(msg) {
  294. $("#rate").val(msg);
  295. }
  296. });
  297. });
  298. });
  299.  
  300. function get_total(quantity) {
  301. var rate = $("#rate").val();
  302. var result = eval(quantity) * rate;
  303. $('#total').val(result);
  304. }
  305. </script>
  306. <?php
  307. include("lib/footer.php");
  308. } else {
  309. header("Location: ".$cfg_baseurl);
  310. }
  311. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!