<?php
define("_VALID_PHP", true);

  if (isset($_POST['payment_status'])) {
	  include 'main.php';
      set_time_limit(0);
      function verifyTxnId($txn_id, $odb) {
          $sql = $odb->prepare("SELECT COUNT(id) FROM `payments` WHERE tid = :tid LIMIT 1");
			$sql -> execute(array(":tid" => $txn_id));
          if ($sql -> fetchColumn(0) > 0)
              return false;
          else
              return true;
      }

      $req = 'cmd=_notify-validate';

      foreach ($_POST as $key => $value) {
          $value = urlencode(stripslashes($value));
          $req .= '&' . $key . '=' . $value;
      }
      $demo = false;
      $url = 'www.paypal.com';

      $header = "POST /cgi-bin/webscr HTTP/1.0\r\n";
      $header .= "Content-Type: application/x-www-form-urlencoded\r\n";
      $header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
      $fp = fsockopen($url, 80, $errno, $errstr, 30);

      $payment_status = $_POST['payment_status'];
      $receiver_email = $_POST['business'];
      list($membership_id, $user_id) = explode("_", $_POST['item_number']);
      $mc_gross = $_POST['mc_gross'];
      $txn_id = $_POST['txn_id'];

      $getxn_id = verifyTxnId($txn_id, $odb);
      $pricesql = $odb -> prepare("SELECT `price` FROM `plans` WHERE id = :id");
      $pricesql -> execute(array(":id" => (int)$membership_id));
      $price = $pricesql -> fetchColumn(0);

      $pp_emailsql = $odb -> query("SELECT `email` FROM `gateway` LIMIT 1");
      $pp_email = $pp_emailsql->fetchColumn(0);

      if (!$fp) {
          echo $errstr . ' (' . $errno . ')';
      } else {
          fputs($fp, $header . $req);

          while (!feof($fp)) {
	      $res = fgets($fp, 1024);
              if (strcmp($res, "VERIFIED") == 0) {
                  if (preg_match('/Completed/', $payment_status)) {
                      if ($receiver_email == $pp_email && $mc_gross == $price && $getxn_id == true) {
			  $usernamesql = $odb -> prepare("SELECT `username` FROM `users` WHERE `ID` = :id");
			  $usernamesql -> execute(array(":id" => (int)$user_id));
			  $username = $usernamesql -> fetchColumn(0);

			  $data = array(
				':tid' => $txn_id,
				':plan' => (int)$membership_id,
				':user' => (int)$user_id,
				':paid' => (float)$mc_gross,
			  );
			  $odb -> setAttribute( PDO::ATTR_ERRMODE, PDO::ERRMODE_WARNING );
			  $insertsql = $odb -> prepare("INSERT INTO `payments` VALUES(NULL, :paid, :plan, :user, :tid, UNIX_TIMESTAMP())");
			  $insertsql -> execute($data);

			  $getPlanInfo = $odb -> prepare("SELECT `unit`,`length` FROM `plans` WHERE `ID` = :plan");
                          $getPlanInfo -> execute(array(':plan' => (int)$membership_id));
                          $plan = $getPlanInfo -> fetch(PDO::FETCH_ASSOC);
                          $unit = $plan['unit'];
                          $length = $plan['length'];
                          $newExpire = strtotime("+{$length} {$unit}");
                          $updateSQL = $odb -> prepare("UPDATE `users` SET `expire` = :expire, `membership` = :plan WHERE `ID` = :id");
                          $updateSQL -> execute(array(':expire' => $newExpire, ':plan' => (int)$membership_id, ':id' => (int)$user_id));

							function generateRandomString($length = 8) {
								$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
								$randomString = '';
								for ($i = 0; $i < $length; $i++) {
									$randomString .= $characters[rand(0, strlen($characters) - 1)];
								}
								return $randomString;
							}

							$password = generateRandomString();

							$updateSQL = $odb -> prepare("UPDATE `users` SET `vpnpass` = :vpnpass WHERE `ID` = :id");
							$updateSQL -> execute(array(':vpnpass' => $password, ':id' => (int)$user_id));

							$GetServers = $odb -> query("SELECT * FROM `servers`");
							while ($row = $GetServers -> fetch(PDO::FETCH_ASSOC)) {
								$connection = ssh2_connect(''.$row['ip'].'', 22);
								ssh2_auth_password($connection, 'root', ''.$row['pass'].'');
								$cmd = ssh2_exec($connection, 'useradd '.$user_id.' -s /bin/false; echo -e "'.$password.'\n'.$password.'" | passwd '.$user_id.'');
							}
		        }
                  }

              }
          }
          fclose($fp);
      }
  }

?>