88 lines
3.4 KiB
PHP
88 lines
3.4 KiB
PHP
<?php
|
|
if (!DEFINED('EGP'))
|
|
exit(header('Refresh: 0; URL=http://' . $_SERVER['SERVER_NAME'] . '/404'));
|
|
|
|
if (!isset($_POST['MERCHANT_ID']) || $_POST['MERCHANT_ID'] != $cfg['freekassa_id'])
|
|
sys::out('bad kassa');
|
|
|
|
$key = md5($_POST['MERCHANT_ID'] . ':' . $_POST['AMOUNT'] . ':' . $cfg['freekassa_key_2'] . ':' . $_POST['MERCHANT_ORDER_ID']);
|
|
|
|
if (!isset($_POST['MERCHANT_ID']) || $_POST['SIGN'] != $key)
|
|
sys::out('bad sign');
|
|
|
|
if (!isset($_POST['AMOUNT']))
|
|
sys::out('bad amount');
|
|
|
|
$sum = round($_POST['AMOUNT'], 2);
|
|
|
|
// Оплата по ключу
|
|
if (!sys::valid($_POST['us_user'], 'md5')) {
|
|
$sql->query('SELECT `id`, `server`, `price` FROM `privileges_buy` WHERE `key`="' . $_POST['us_user'] . '" LIMIT 1');
|
|
if (!$sql->num())
|
|
sys::out('bad key');
|
|
|
|
$privilege = $sql->get();
|
|
|
|
$money = round($sum * $cfg['curinrub'], 2);
|
|
|
|
if ($money < $privilege['price'])
|
|
sys::out('bad sum');
|
|
|
|
$sql->query('SELECT `user` FROM `servers` WHERE `id`="' . $privilege['server'] . '" LIMIT 1');
|
|
if (!$sql->num())
|
|
sys::out('bad server');
|
|
|
|
$server = $sql->get();
|
|
|
|
$sql->query('SELECT `id`, `balance`, `part_money` FROM `users` WHERE `id`="' . $server['user'] . '" LIMIT 1');
|
|
if (!$sql->num())
|
|
sys::out('bad owner');
|
|
|
|
$user = $sql->get();
|
|
|
|
if ($cfg['part_money'])
|
|
$sql->query('UPDATE `users` set `part_money`="' . ($user['part_money'] + $money) . '" WHERE `id`="' . $user['id'] . '" LIMIT 1');
|
|
else
|
|
$sql->query('UPDATE `users` set `balance`="' . ($user['balance'] + $money) . '" WHERE `id`="' . $user['id'] . '" LIMIT 1');
|
|
|
|
$sql->query('INSERT INTO `logs` set `user`="' . $user['id'] . '", `text`="' . sys::updtext(sys::text('logs', 'profit'),
|
|
array('server' => $privilege['server'], 'money' => $money)) . '", `date`="' . $start_point . '", `type`="part", `money`="' . $money . '"');
|
|
|
|
$sql->query('UPDATE `privileges_buy` set `status`="1" WHERE `id`="' . $privilege['id'] . '" LIMIT 1');
|
|
|
|
sys::out('YES');
|
|
}
|
|
|
|
$user = intval($_POST['us_user']);
|
|
|
|
$sql->query('SELECT `id`, `balance`, `part` FROM `users` WHERE `id`="' . $user . '" LIMIT 1');
|
|
if (!$sql->num())
|
|
sys::out('bad user');
|
|
|
|
$user = $sql->get();
|
|
|
|
$money = round($user['balance'] + $sum * $cfg['curinrub'], 2);
|
|
|
|
if ($cfg['part']) {
|
|
$part_sum = round($sum / 100 * $cfg['part_proc'], 2);
|
|
|
|
$sql->query('SELECT `balance`, `part_money` FROM `users` WHERE `id`="' . $user['part'] . '" LIMIT 1');
|
|
if ($sql->num()) {
|
|
$part = $sql->get();
|
|
|
|
if ($cfg['part_money'])
|
|
$sql->query('UPDATE `users` set `part_money`="' . ($part['part_money'] + $part_sum) . '" WHERE `id`="' . $user['part'] . '" LIMIT 1');
|
|
else
|
|
$sql->query('UPDATE `users` set `balance`="' . ($part['balance'] + $part_sum) . '" WHERE `id`="' . $user['part'] . '" LIMIT 1');
|
|
|
|
$sql->query('INSERT INTO `logs` set `user`="' . $user['part'] . '", `text`="' . sys::updtext(sys::text('logs', 'part'),
|
|
array('part' => $uid, 'money' => $part_sum)) . '", `date`="' . $start_point . '", `type`="part", `money`="' . $part_sum . '"');
|
|
}
|
|
}
|
|
|
|
$sql->query('UPDATE `users` set `balance`="' . $money . '" WHERE `id`="' . $user['id'] . '" LIMIT 1');
|
|
|
|
$sql->query('INSERT INTO `logs` set `user`="' . $user['id'] . '", `text`="Пополнение баланса на сумму: ' . $sum . ' ' . $cfg['currency'] . '", `date`="' . $start_point . '", `type`="replenish", `money`="' . $sum . '"');
|
|
|
|
sys::out('YES');
|
|
?>
|