header('Content-Type: text/xml');
include_once "../../config.php";
include_once "../../smalldbcore.php";
if ($GLOBALS ["UseKrasplat_IPFilter"] == 'True') {
$allowed_ips = $GLOBALS ['Krasplat_allowed_ips'];
if (array_search($_SERVER["REMOTE_ADDR"], $allowed_ips) === false) {
echo("Запрос выполнен с неразрешенного IP адреса!");
exit();
}
}
$client_secret_key=$GLOBALS ["KrasplatSecretWord"];
$server_secret_key=$GLOBALS ["KrasplatSecretWord2"];
//if ($GLOBALS ["EnableKrasplat"] <> "True") {exit();}
$out='';
$time_p=mysql_real_escape_string($_REQUEST['time_p']);
$acc=mysql_real_escape_string($_REQUEST['acc']);
$check_md5=mysql_real_escape_string($_REQUEST['md5']);
$good_md5=md5($time_p.$acc.$client_secret_key);
//echo $good_md5; exit();
if ($check_md5==$good_md5){
$acc2=ltrim($acc,'0');
//Верификация аккаунта, есть ли такой клиент в базе MikroBILL
$sql="SELECT `user_name`, `ballance`, `FIO`, `contract` FROM `stat` WHERE (`user_name` = '$acc' or TRIM(LEADING '0' FROM `contract`) = '$acc2');";
$ballance=0;
$mysqlResult = mysql_query($sql,$mysql);
$row = mysql_fetch_array($mysqlResult);
$UN = $row[0];
$ballance=$row[1];
$fio=$row[2];
$contract=$row[3];
//$fio=iconv('cp1251', 'utf-8', $fio);
//$ballance=iconv('cp1251', 'utf-8', $ballance);
$t=time();
$good_md5= md5($t.$fio.$server_secret_key);
if (strlen($UN)>0) {
$out="
$t
$fio
$ballance
0
$good_md5
";
} else {
$out="
$t
$fio
3
$good_md5
";
}
} else
{
$fio='';
$t=time();
$good_md5= md5($t.$fio.$server_secret_key);
$out="
$t
5
$good_md5
";
}
echo $out;
?>