<?php

/************************************************************************************
            DOKU WALLET PAYMENT INTEGRATION FOR FIVERRSCRIPT
*************************************************************************************/

include("include/config.php");
include("include/functions/import.php");

    /** tes sederhana doku **/
    if(!empty($_REQUEST['TRANSIDMERCHANT'])){
        $TRANSIDMERCHANT = trim($_REQUEST['TRANSIDMERCHANT']);
    } else {
        $TRANSIDMERCHANT = '';
    }

    if(!empty($_REQUEST['RESULT'])){
        $RESULT = trim(strtoupper($_REQUEST['RESULT']));
    } else {
        $RESULT = '';
    }

    if(!empty($_REQUEST['AMOUNT'])){
        $AMOUNT = trim(number_format($_REQUEST['AMOUNT'], 0,"",""));
    } else {
        $AMOUNT = '';
    }

    $insert = "INSERT INTO get_data SET data='Remote Addr: ".$_SERVER[REMOTE_ADDR]." | TRANSIDMERCHANT: ".$TRANSIDMERCHANT." | RESULT: ".$RESULT." | AMOUNT: ".$AMOUNT."'";
    $conn->execute($insert); // eksekusi query

    exit;

/** Proses asli **/
if( $_SERVER['REMOTE_ADDR'] = '103.10.128.14' )
{
    if(!empty($_REQUEST['TRANSIDMERCHANT'])){
        $TRANSIDMERCHANT = trim($_REQUEST['TRANSIDMERCHANT']);
    } else {
        $TRANSIDMERCHANT = '';
    }

    if(!empty($_REQUEST['RESULT'])){
        $RESULT = trim(strtoupper($_REQUEST['RESULT']));
    } else {
        $RESULT = '';
    }

    if(!empty($_REQUEST['AMOUNT'])){
        $AMOUNT = trim(number_format($_REQUEST['AMOUNT'], 0,"",""));
    } else {
        $AMOUNT = '';
    }

    if($RESULT == 'SUCCESS' && $TRANSIDMERCHANT > 0)
    {
        //GET ORDER ITEMS
        $query = "select * from order_items where IID='".mysqli_real_escape_string($conn->_connectionID, $TRANSIDMERCHANT)."'";
        $executequery=$conn->execute($query);
        $userid = $executequery->fields['USERID'];
        $PID = $executequery->fields['PID'];
        $totalprice = $executequery->fields['totalprice'];
        $multi = $executequery->fields['multi'];
        if($multi == '0'){ $quantity = '1'; } else { $quantity = $multi; }

        $scriptolutionponly = $totalprice;
        if($config['scriptolution_enable_processing_fee'] == "1")
        {
            $gross = $executequery->fields['scriptolution_totalwfees'];
        }
        else
        {
            $gross = $totalprice;
        }

        if($AMOUNT == number_format($gross * $config['kurs_usdtoidr'], 0,"",""))
        {
            $qry = "INSERT INTO doku_wallet_payment SET USERID='".mysqli_real_escape_string($conn->_connectionID, $userid)."', IID='".mysqli_real_escape_string($conn->_connectionID, $TRANSIDMERCHANT)."', OID='0', payment_date='0', status='".mysqli_real_escape_string($conn->_connectionID, $RESULT)."', type='0', total_amount='".mysqli_real_escape_string($conn->_connectionID, $AMOUNT)."', extra_info='0'";
            if (mysqli_query($conn->_connectionID, $qry))
            {
                $transid = mysqli_insert_id($conn->_connectionID);
                if( $userid > 0 )
                {
                    if($multi > 1)
                    {
                        $eachprice = scriptolution_pdb("price", $PID);
                        for ($i=1; $i<=$multi; $i++)
                        {
                            $query = "INSERT INTO orders SET USERID='".mysqli_real_escape_string($conn->_connectionID, $userid)."', PID='".mysqli_real_escape_string($conn->_connectionID, $PID)."', IID='".mysqli_real_escape_string($conn->_connectionID, $TRANSIDMERCHANT)."', time_added='".time()."', status='0', price='".mysqli_real_escape_string($conn->_connectionID, $eachprice)."'";
                            $executequery=$conn->execute($query);
                            $order_id = mysqli_insert_id($conn->_connectionID);
                            if($order_id > 0)
                            {
                                $query = "INSERT INTO payments SET USERID='".mysqli_real_escape_string($conn->_connectionID, $userid)."', OID='".mysqli_real_escape_string($conn->_connectionID, $order_id)."', time='".time()."', price='".mysqli_real_escape_string($conn->_connectionID, $eachprice)."', t='1', doku_wallet='".mysqli_real_escape_string($conn->_connectionID, $transid)."'";
                                $executequery=$conn->execute($query);

                                $query = "UPDATE posts SET rev=rev+$eachprice WHERE PID='".mysqli_real_escape_string($conn->_connectionID, $PID)."'";
                                $executequery=$conn->execute($query);

                                $query = "UPDATE doku_wallet_payment SET OID='".mysqli_real_escape_string($conn->_connectionID, $order_id)."' WHERE IID='".mysqli_real_escape_string($conn->_connectionID, $TRANSIDMERCHANT)."'";
                                $executequery=$conn->execute($query);

                                scriptolution_dotcom_fiverrscript_dotcom("scriptolution_buyer_requirements", $userid, $order_id);

                                if($config['smsmasking'] == '1')
                                {
                                    //BEGIN:SMS MASKING TO BUYER
                                    $getbmphone = "SELECT * FROM members WHERE USERID = '".$userid."' LIMIT 1";
                                    $resbmphone = $conn->execute($getbmphone);
                                    $bmobile_phone = $resbmphone->fields['mobile_phone'];
                                    $busername = $resbmphone->fields['username'];

                                    if(!empty($bmobile_phone) && $bmobile_phone !== '0')
                                    {

                                        //SEND SMS MASKING
                                        $smsmasking_user = $config['smsmasking_user'];
                                        $smsmasking_pass = $config['smsmasking_pass'];
                                        //$smsmasking_auth = md5($smsmasking_user.''.$smsmasking_pass.''.$bmobile_phone);
                                        $payprice = number_format($AMOUNT, 0,"",".");
                                        $smsurl = 'https://reguler.zenziva.net/apps/smsapi.php?userkey='.$smsmasking_user.'&passkey='.$smsmasking_pass.'&nohp='.$bmobile_phone.'&pesan=Halo%20'.$busername.'%2C%20pembayaranmu%20sebesar%20Rp%20'.$payprice.'%20sudah%20kami%20terima%20dan%20validasi.%20Segera%20lengkapi%20pesananmu%20di%20https%3A%2F%2Fp-store.net%2Forders%20agar%20notifikasi%20pesanan%20dikirim%20ke%20penjual';
                                        sendsmsURL($smsurl);
                                    }
                                    //END:SMS MASKING
                                }

                            }
                        }

                        echo 'Continue'; //Continue proccess
                    }
                    else
                    {
                        $query = "INSERT INTO orders SET USERID='".mysqli_real_escape_string($conn->_connectionID, $userid)."', PID='".mysqli_real_escape_string($conn->_connectionID, $PID)."', IID='".mysqli_real_escape_string($conn->_connectionID, $TRANSIDMERCHANT)."', time_added='".time()."', status='0', price='".mysqli_real_escape_string($conn->_connectionID, $scriptolutionponly)."'"; //
                        $executequery=$conn->execute($query);
                        $order_id = mysqli_insert_id($conn->_connectionID);
                        if($order_id > 0)
                        {
                            $query = "INSERT INTO payments SET USERID='".mysqli_real_escape_string($conn->_connectionID, $userid)."', OID='".mysqli_real_escape_string($conn->_connectionID, $order_id)."', time='".time()."', price='".mysqli_real_escape_string($conn->_connectionID, $scriptolutionponly)."', t='1', doku_wallet='".mysqli_real_escape_string($conn->_connectionID, $transid)."', scriptolution_proc_fees3='".mysqli_real_escape_string($conn->_connectionID, $scriptolution_processing_fee)."', scriptolution_totalwfees3='".mysqli_real_escape_string($conn->_connectionID, $gross)."'"; //
                            $executequery=$conn->execute($query);

                            $query = "UPDATE posts SET rev=rev+$scriptolutionponly WHERE PID='".mysqli_real_escape_string($conn->_connectionID, $PID)."'"; //
                            $executequery=$conn->execute($query);

                            $query = "UPDATE doku_wallet_payment SET OID='".mysqli_real_escape_string($conn->_connectionID, $order_id)."' WHERE IID='".mysqli_real_escape_string($conn->_connectionID, $TRANSIDMERCHANT)."'";
                            $executequery=$conn->execute($query);

                            scriptolution_dotcom_fiverrscript_dotcom("scriptolution_buyer_requirements", $userid, $order_id);

                            if($config['smsmasking'] == '1')
                            {
                                //BEGIN:SMS MASKING TO BUYER
                                $getbmphone = "SELECT * FROM members WHERE USERID = '".$userid."' LIMIT 1";
                                $resbmphone = $conn->execute($getbmphone);
                                $bmobile_phone = $resbmphone->fields['mobile_phone'];
                                $busername = $resbmphone->fields['username'];

                                if(!empty($bmobile_phone) && $bmobile_phone !== '0')
                                {
                                    //SEND SMS MASKING
                                    $smsmasking_user = $config['smsmasking_user'];
                                    $smsmasking_pass = $config['smsmasking_pass'];
                                    //$smsmasking_auth = md5($smsmasking_user.''.$smsmasking_pass.''.$bmobile_phone);
                                    $payprice = number_format($AMOUNT, 0,"",".");
                                    $smsurl = 'https://reguler.zenziva.net/apps/smsapi.php?userkey='.$smsmasking_user.'&passkey='.$smsmasking_pass.'&nohp='.$bmobile_phone.'&pesan=Halo%20'.$busername.'%2C%20pembayaranmu%20sebesar%20Rp%20'.$payprice.'%20sudah%20kami%20terima%20dan%20validasi.%20Segera%20lengkapi%20pesananmu%20di%20https%3A%2F%2Fp-store.net%2Forders%20agar%20notifikasi%20pesanan%20dikirim%20ke%20penjual';
                                    sendsmsURL($smsurl);
                                }
                                    //END:SMS MASKING
                            }

                        }

                    echo "Continue"; //Continue proccess

                    }
                }
                else
                {
                    echo "Stop"; //Stop proccess
                }
            }
            else
            {
                echo "Stop"; //Stop proccess
            }
        }
        else
        {
            echo "Stop"; //Stop proccess
        }
    }
    else
    {
        echo "Stop"; //Stop proccess
    }
}
else
{
    echo "Stop"; //Stop proccess
}

?>