header('Content-Type: text/xml');
include_once "../../config.php";
include_once "../../smalldbcore.php";
if ($GLOBALS ["EnableKrasplat"]<>'True'){exit();}
if ($GLOBALS ["UseKrasplat_IPFilter"] == 'True') {
$allowed_ips = $GLOBALS ['Krasplat_allowed_ips'];
if (array_search($_SERVER["REMOTE_ADDR"], $allowed_ips) === false) {
echo("Запрос выполнен с неразрешенного IP адреса!");
exit();
}
}
$client_secret_key=$GLOBALS ["KrasplatSecretWord"];
$server_secret_key=$GLOBALS ["KrasplatSecretWord2"];
//if ($GLOBALS ["EnableKrasplat"] <> "True") {exit();}
$out='';
$time_p=mysql_real_escape_string($_REQUEST['time_p']);
$id_v=mysql_real_escape_string($_REQUEST['id_v']);
$check_md5=mysql_real_escape_string($_REQUEST['md5']);
$good_md5=md5($time_p.$id_v.$client_secret_key);
$error_code=7;
//echo $good_md5; exit();
if ($check_md5==$good_md5){
// Проверка уникальности платежа
$sql="SELECT * FROM `operations_krasplat` WHERE `id` = $id_v and `status`=0;";
$mysqlResult = mysql_query($sql,$mysql);
if (mysql_num_rows($mysqlResult) == 0 ) {
// Читаем данные о платеже
$sql="SELECT * FROM `operations_krasplat` WHERE `id` = $id_v and `status`=7;";
$mysqlResult = mysql_query($sql,$mysql);
if (mysql_num_rows($mysqlResult) == 0 ) {
$out="
$t
2
$good_md5
";
} else {
// Пополняем счёт абонента
$row = mysql_fetch_array($mysqlResult);
$m=$row[1];
$guid=$row[3];
$comment='Krasplat';
$uid = uniqid("",true) . uniqid("",true);
$datetoday = date("Y-m-d H:i:s");
$query="INSERT INTO addcash2 VALUES ($guid,$m,0,'Krasplat',0, '$uid', '$comment','$datetoday');";
mysql_query($query,$mysql);
//$sql = "INSERT INTO workparams VALUES('REFRESH_DB','');";
$sql = "INSERT INTO `refresh_db` VALUES (1);";
mysql_query($sql,$mysql);
//echo $query;exit();
$query="UPDATE `operations_krasplat` SET `status`=0 WHERE `id` = $id_v;";
mysql_query($query,$mysql);
$t=time();
$good_md5= md5($t.$server_secret_key);
$out="
$t
0
$good_md5
";
}
} else {
$t=time();
$good_md5= md5($t.$server_secret_key);
$out="
$t
6
$good_md5
";
}
} else
{
$t=time();
$good_md5= md5($t.$server_secret_key);
$out="
$t
5
$good_md5
";
$error_code=5;
}
echo $out;
?>