Просмотр архива платёжная касса

<?php
define('WP_ID', 1); //id площадки
define('WP_HASH',
'12345678'); //секретный код
if
(isset($_POST['WP_PAYMENT_AMOUNT']) &&
isset($_POST['WP_PAYMENT_DATE']) &&
isset($_POST['WP_PAYMENT_HASH']))
{
$wp = array(
'platform' =>
trim(filter_input(INPUT_POST, 'WP_PAYMENT_SITE', FILTER_UNSAFE_RAW)), //ID
PLATFORM
'money' => trim(filter_input(INPUT_POST, 'WP_PAYMENT_AMOUNT',
FILTER_UNSAFE_RAW)), //MONEY
'var' => trim(filter_input(INPUT_POST,
'WP_PAYMENT_VAR', FILTER_UNSAFE_RAW)), //ID USER or NUMBER PAY
'time' =>
trim(filter_input(INPUT_POST, 'WP_PAYMENT_DATE', FILTER_UNSAFE_RAW)),
//DATE 2020-03-30 10:44:15
'id' => trim(filter_input(INPUT_POST,
'WP_PAYMENT_ID', FILTER_UNSAFE_RAW)), //ID Pay
'com' =>
trim(htmlspecialchars(base64_decode($_POST['WP_PAYMENT_COMM']), ENT_QUOTES,
'UTF-8')), // Commetnts
'hash' => trim(filter_input(INPUT_POST,
'WP_PAYMENT_HASH', FILTER_UNSAFE_RAW)), //Hash
);

$hash =
strtoupper(hash('sha256', implode(":", WP_HASH.WP_ID)));
if($hash
!= $wp['hash']) exit('NO | Не верный хэш');
elseif(WP_ID !=
$wp['platform']) exit('NO | Не верный ID
платформы');

$update = $db->prepare("UPDATE `users` SET
`money` = `money` + ? WHERE `id` = ?");
$update ->
execute([$wp['money'],$wp['var']]);
exit('YES|'.$wp['id']);
}
?>