<?php
if(!isset($_GET["status"]) || !isset($_GET["tel"]) || !isset($_GET["prefix"]) || !isset($_GET["text"]) || !isset($_GET["value"]) || !isset($_GET["id"])) die(utf8_decode("Szex..."));
if(!in_array($_SERVER["REMOTE_ADDR"], ["193.28.86.95", "195.228.45.25"])) die(utf8_decode("Helóóóóóó!"));

include 'sql.php';

if(mysqli_connect_errno()) die(utf8_decode("Mysql hiba: " . mysqli_connect_error()));

function esc($s){
	global $sql;
	return htmlspecialchars(mysqli_real_escape_string($sql, $s));
}

$stat=$_GET["status"];
$telefonszam=$_GET["tel"];
$prefix=$_GET["prefix"];
$uzenet=$_GET["text"];
$tarifa=$_GET["value"];
$smsid=$_GET["id"];
$provider=isset($_GET["provider"]) ? $_GET["provider"] : 0;

if($stat == 2){
	mysqli_query($sql, "UPDATE `logpp` SET `status` = 1 WHERE `sms_id` = '".esc($smsid)."' AND `tarifa` = '".esc($tarifa)."' AND `tel` = '".esc($telefonszam)."'");
	die("OK");
}

if(($stat == 1) || ($stat == 3))
{
	$pp = 0;
	switch($tarifa){
		case 400:
			$pp = 1000;
			break;
		case 800:
			$pp = 2000;
			break;
		case 1600:
			$pp = 5000;
			break;
		case 4000:
			$pp = 12000;
			break;
		default:
			$pp = 0;
			break;
	}

	$token = substr(md5(uniqid()), 0, 8);

	mysqli_query($sql, "UPDATE `characters` SET `premiumPoints` = '".$newPP."' WHERE `id` = '".$charData['id']."'");
	mysqli_query($sql, "INSERT INTO `logpp`(`id`, `date`, `tel`, `text`, `provider`, `sms_id`, `tarifa`, `newpp`, `token`, `status`) VALUES (0,NOW(),'".esc($telefonszam)."','".esc($uzenet)."','".esc($provider)."','".esc($smsid)."','".esc($tarifa)."','".esc($pp)."','".$token."', '0')");
	die(utf8_decode("Rendeltél ".$pp." PP-t. Aktiválási kód: ".$token));
}

?>