<?php
if(empty($_POST)){
  die;
}

require_once 'connect.php';


$key = 'WrnpFQjLtaa6ZmMG';

$ik_id ='5de6b8581ae1bd13008b4569';

$dataSet = $_POST;

unset($dataSet['ik_sign']);
ksort($dataSet, SORT_STRING);
array_push($dataSet, $key);
$signString = implode(':', $dataSet);
$sign = base64_encode(md5($signString, true));


$order = R::load('shop',(int)$dataSet['ik_pm_no']);
if(!$order) die;

if($dataSet['ik_co_id'] != $ik_id ||$dataSet['ik_inv_st'] != 'success'|| $dataSet['ik_am'] != $order->price || $sign != $_POST['ik_sign']) {
  die;
}

$order->status= '1';
R::store($order);
?>