Просмотр архива Money Exchange Script v2.1


<?php

if ($_SERVER['REMOTE_ADDR'] != '37.59.221.230') return;



if (isset($_POST['m_operation_id']) && isset($_POST['m_sign']))

{

    $m_operation_id = $_POST['m_operation_id'];

    $m_operation_date = $_POST['m_operation_date'];

    $m_orderid = $_POST['m_orderid'];

    $m_amount = $_POST['m_amount'];

    $m_currency = $_POST['m_curr'];

    $query = $db->query("SELECT * FROM exchanges WHERE id='$m_orderid'");

    if($query->num_rows==0) { header("Location: $settings[url]"); }

    $row = $query->fetch_assoc();

    $accountQuery = $db->query("SELECT * FROM companies WHERE name='$row[cfrom]'");

$acc = $accountQuery->fetch_assoc();

    if(checkSession()) { $uid = $_SESSION['suid']; } else { $uid = 0; }

    $check_trans = $db->query("SELECT * FROM transactions WHERE txn_id='$m_operation_id' and time='$m_operation_date' and uid='$uid'");

    $m_key = $acc['a_field_2'];

    $arHash = array($_POST['m_operation_id'],

            $_POST['m_operation_ps'],

            $_POST['m_operation_date'],

            $_POST['m_operation_pay_date'],

            $_POST['m_shop'],

            $_POST['m_orderid'],

            $_POST['m_amount'],

            $_POST['m_curr'],

            $_POST['m_desc'],

            $_POST['m_status'],

            $m_key);

    $sign_hash = strtoupper(hash('sha256', implode(':', $arHash)));

    if ($_POST['m_sign'] == $sign_hash && $_POST['m_status'] == 'success')

    {

            if($m_amount == $row['amount_send'] or $m_currency == $row['amount_currency']) {

                if($check_trans->num_rows>0) {

                    echo error($lang['error_15']);

                } else {

                    $insert = $db->query("INSERT transactions (txn_id,payee,uid,company,amount,currency,time) VALUES ('$m_operation_id','','$uid','Payeer','$m_amount','$m_currency','$m_operation_date')");

                    $update = $db->query("UPDATE exchanges SET status='2' WHERE id='$row[id]'");

                    echo success($lang['success_4']);

                }

            } else {

                echo error($lang['error_16']);

            }

    } else {

        $update = $db->query("UPDATE exchanges SET status='3' WHERE id='$row[id]'");

        echo error($lang['error_18']);

    }

}

?>