moved website outside of panel folder
This commit is contained in:
parent
92ac778956
commit
08f07dca97
10328 changed files with 90 additions and 501 deletions
|
|
@ -1,223 +0,0 @@
|
|||
<?php
|
||||
/**
|
||||
* Standalone Payment Processing Helper (module-local)
|
||||
*
|
||||
* This file is intentionally self-contained and does NOT include or rely on
|
||||
* panel-wide files. Configure the DB connection information below (edit
|
||||
* the $DB_* variables) or provide a module-local `config.local.php` that defines
|
||||
* the same variables.
|
||||
*
|
||||
* Usage:
|
||||
* require_once __DIR__ . '/payment_processor.php';
|
||||
* process_payment_record($record);
|
||||
*/
|
||||
|
||||
// Load panel config first, falling back to a module-local copy if needed.
|
||||
require_once __DIR__ . '/config_loader.php';
|
||||
|
||||
// Variables from config.inc.php (helps IDEs understand scope)
|
||||
/** @var string $db_host Database host */
|
||||
/** @var string $db_user Database user */
|
||||
/** @var string $db_pass Database password */
|
||||
/** @var string $db_name Database name */
|
||||
/** @var string $table_prefix Table prefix for database tables */
|
||||
|
||||
// Normalize table prefix variable: many files use $table_prefix (lowercase)
|
||||
if (!isset($TABLE_PREFIX) && isset($table_prefix)) {
|
||||
$TABLE_PREFIX = $table_prefix;
|
||||
}
|
||||
|
||||
/**
|
||||
* Create and return a mysqli connection using the site's config values.
|
||||
* Returns mysqli or false on failure.
|
||||
*/
|
||||
function payment_db_connect() {
|
||||
global $db_host, $db_user, $db_pass, $db_name, $db_port;
|
||||
|
||||
if (empty($db_host) || empty($db_user) || empty($db_name)) {
|
||||
error_log('[payment_processor] DB globals not available from includes/config.inc.php');
|
||||
return false;
|
||||
}
|
||||
|
||||
$port = intval($db_port) ?: 3306;
|
||||
$db = @mysqli_connect($db_host, $db_user, $db_pass, $db_name, $port);
|
||||
if (!$db) {
|
||||
error_log('[payment_processor] mysqli_connect failed: ' . mysqli_connect_error());
|
||||
return false;
|
||||
}
|
||||
mysqli_set_charset($db, 'utf8mb4');
|
||||
return $db;
|
||||
}
|
||||
|
||||
/**
|
||||
* Process a payment record. Self-contained: uses module-local DB config.
|
||||
* @param array $record { invoice, custom, resource_id, amount }
|
||||
* @return bool true if at least one invoice processed
|
||||
*/
|
||||
function process_payment_record(array $record) {
|
||||
global $TABLE_PREFIX;
|
||||
|
||||
// Normalize inputs
|
||||
$invoice_ref = $record['invoice'] ?? null; // e.g. PayPal invoice id or custom label
|
||||
$custom = $record['custom'] ?? null; // our custom_id (often invoice_id)
|
||||
$txid = $record['resource_id'] ?? ($record['txid'] ?? null);
|
||||
$amount = isset($record['amount']) ? floatval($record['amount']) : null;
|
||||
|
||||
$db = payment_db_connect();
|
||||
if (!$db) return false;
|
||||
|
||||
$now = date('Y-m-d H:i:s');
|
||||
$esc_txid = mysqli_real_escape_string($db, (string)$txid);
|
||||
|
||||
$invoices_to_process = [];
|
||||
|
||||
// 1) If custom is a single numeric invoice id, try to fetch that exact invoice
|
||||
if ($custom && ctype_digit((string)$custom)) {
|
||||
$invoice_id = intval($custom);
|
||||
$sql = "SELECT * FROM `" . $TABLE_PREFIX . "billing_invoices` WHERE invoice_id = ? AND status = 'due' LIMIT 1";
|
||||
if ($stmt = mysqli_prepare($db, $sql)) {
|
||||
mysqli_stmt_bind_param($stmt, 'i', $invoice_id);
|
||||
mysqli_stmt_execute($stmt);
|
||||
$res = mysqli_stmt_get_result($stmt);
|
||||
if ($res && $row = mysqli_fetch_assoc($res)) $invoices_to_process[] = $row;
|
||||
mysqli_stmt_close($stmt);
|
||||
}
|
||||
}
|
||||
|
||||
// 2) If we didn't find by custom and invoice_ref is provided, match by description containing invoice_ref
|
||||
if (empty($invoices_to_process) && $invoice_ref) {
|
||||
$like = '%' . mysqli_real_escape_string($db, $invoice_ref) . '%';
|
||||
$sql = "SELECT * FROM `" . $TABLE_PREFIX . "billing_invoices` WHERE status = 'due' AND description LIKE ?";
|
||||
if ($stmt = mysqli_prepare($db, $sql)) {
|
||||
mysqli_stmt_bind_param($stmt, 's', $like);
|
||||
mysqli_stmt_execute($stmt);
|
||||
$res = mysqli_stmt_get_result($stmt);
|
||||
if ($res) {
|
||||
while ($row = mysqli_fetch_assoc($res)) $invoices_to_process[] = $row;
|
||||
}
|
||||
mysqli_stmt_close($stmt);
|
||||
}
|
||||
}
|
||||
|
||||
// 3) As a fallback, match unpaid invoices by amount (exact match). Useful for simple carts.
|
||||
if (empty($invoices_to_process) && $amount !== null) {
|
||||
$sql = "SELECT * FROM `" . $TABLE_PREFIX . "billing_invoices` WHERE status = 'due' AND amount = ?";
|
||||
if ($stmt = mysqli_prepare($db, $sql)) {
|
||||
mysqli_stmt_bind_param($stmt, 'd', $amount);
|
||||
mysqli_stmt_execute($stmt);
|
||||
$res = mysqli_stmt_get_result($stmt);
|
||||
if ($res) {
|
||||
while ($row = mysqli_fetch_assoc($res)) $invoices_to_process[] = $row;
|
||||
}
|
||||
mysqli_stmt_close($stmt);
|
||||
}
|
||||
}
|
||||
|
||||
$processed_count = 0;
|
||||
|
||||
foreach ((array)$invoices_to_process as $inv) {
|
||||
$invoice_id = intval($inv['invoice_id']);
|
||||
$order_id = intval($inv['order_id'] ?? 0);
|
||||
$user_id = intval($inv['user_id']);
|
||||
$service_id = intval($inv['service_id'] ?? 0);
|
||||
$home_name = mysqli_real_escape_string($db, $inv['home_name'] ?? '');
|
||||
$ip = intval($inv['ip'] ?? 0);
|
||||
$max_players = intval($inv['max_players'] ?? 0);
|
||||
$qty = intval($inv['qty'] ?? 1);
|
||||
$duration = $inv['invoice_duration'] ?? 'month';
|
||||
$invoice_amount = floatval($inv['amount'] ?? 0);
|
||||
$rcon_pw = mysqli_real_escape_string($db, $inv['remote_control_password'] ?? '');
|
||||
$ftp_pw = mysqli_real_escape_string($db, $inv['ftp_password'] ?? '');
|
||||
|
||||
// Mark invoice as paid
|
||||
$upd = "UPDATE `" . $TABLE_PREFIX . "billing_invoices` SET status='paid', paid_date=?, payment_txid=?, payment_method='paypal' WHERE invoice_id = ? LIMIT 1";
|
||||
if ($stmt = mysqli_prepare($db, $upd)) {
|
||||
mysqli_stmt_bind_param($stmt, 'ssi', $now, $esc_txid, $invoice_id);
|
||||
mysqli_stmt_execute($stmt);
|
||||
mysqli_stmt_close($stmt);
|
||||
}
|
||||
|
||||
// If invoice has a coupon, increment usage count
|
||||
$coupon_id = intval($inv['coupon_id'] ?? 0);
|
||||
if ($coupon_id > 0) {
|
||||
$upd_coupon = "UPDATE `" . $TABLE_PREFIX . "billing_coupons` SET current_uses = current_uses + 1 WHERE coupon_id = ?";
|
||||
if ($stmt = mysqli_prepare($db, $upd_coupon)) {
|
||||
mysqli_stmt_bind_param($stmt, 'i', $coupon_id);
|
||||
mysqli_stmt_execute($stmt);
|
||||
mysqli_stmt_close($stmt);
|
||||
}
|
||||
}
|
||||
|
||||
// If this invoice already has an order -> treat as renewal
|
||||
if ($order_id > 0) {
|
||||
// compute months
|
||||
$months = (stripos($duration, 'year') !== false) ? ($qty * 12) : $qty;
|
||||
// fetch current end_date
|
||||
$get = "SELECT end_date FROM `" . $TABLE_PREFIX . "billing_orders` WHERE order_id = ? LIMIT 1";
|
||||
if ($stmt = mysqli_prepare($db, $get)) {
|
||||
mysqli_stmt_bind_param($stmt, 'i', $order_id);
|
||||
mysqli_stmt_execute($stmt);
|
||||
$res = mysqli_stmt_get_result($stmt);
|
||||
if ($res && $row = mysqli_fetch_assoc($res)) {
|
||||
$current_end = $row['end_date'] ?? date('Y-m-d H:i:s');
|
||||
$extend_from = (strtotime($current_end) > time()) ? $current_end : date('Y-m-d H:i:s');
|
||||
$dt = new DateTime($extend_from);
|
||||
if ($months > 0) $dt->modify('+' . intval($months) . ' months');
|
||||
$new_end = $dt->format('Y-m-d H:i:s');
|
||||
$update = "UPDATE `" . $TABLE_PREFIX . "billing_orders` SET end_date = ?, status='Active', payment_txid = ?, paid_ts = ? WHERE order_id = ?";
|
||||
if ($u = mysqli_prepare($db, $update)) {
|
||||
mysqli_stmt_bind_param($u, 'sssi', $new_end, $esc_txid, $now, $order_id);
|
||||
mysqli_stmt_execute($u);
|
||||
mysqli_stmt_close($u);
|
||||
$processed_count++;
|
||||
}
|
||||
}
|
||||
mysqli_stmt_close($stmt);
|
||||
}
|
||||
} else {
|
||||
// Create new order
|
||||
$months = (stripos($duration, 'year') !== false) ? ($qty * 12) : $qty;
|
||||
$dt = new DateTime('now');
|
||||
if ($months > 0) $dt->modify('+' . intval($months) . ' months');
|
||||
$end_date = $dt->format('Y-m-d H:i:s');
|
||||
|
||||
// Simpler insert using properly escaped values
|
||||
$esc_home = mysqli_real_escape_string($db, $home_name);
|
||||
$esc_rcon = mysqli_real_escape_string($db, $rcon_pw);
|
||||
$esc_ftp = mysqli_real_escape_string($db, $ftp_pw);
|
||||
$esc_duration = mysqli_real_escape_string($db, $duration);
|
||||
$price = number_format($invoice_amount, 2, '.', '');
|
||||
|
||||
$insert2 = sprintf(
|
||||
"INSERT INTO `%s` (user_id, service_id, home_name, ip, max_players, qty, invoice_duration, price, remote_control_password, ftp_password, status, order_date, end_date, payment_txid, paid_ts) VALUES (%d, %d, '%s', %d, %d, %d, '%s', %s, '%s', '%s', 'Active', '%s', '%s', '%s', '%s')",
|
||||
$TABLE_PREFIX . 'billing_orders',
|
||||
$user_id, $service_id, $esc_home, $ip, $max_players, $qty, $esc_duration, $price, $esc_rcon, $esc_ftp, $now, $end_date, $esc_txid, $now
|
||||
);
|
||||
if (mysqli_query($db, $insert2)) {
|
||||
$new_order_id = mysqli_insert_id($db);
|
||||
$link = "UPDATE `" . $TABLE_PREFIX . "billing_invoices` SET order_id = ? WHERE invoice_id = ?";
|
||||
if ($u = mysqli_prepare($db, $link)) {
|
||||
mysqli_stmt_bind_param($u, 'ii', $new_order_id, $invoice_id);
|
||||
mysqli_stmt_execute($u);
|
||||
mysqli_stmt_close($u);
|
||||
}
|
||||
$processed_count++;
|
||||
} else {
|
||||
error_log('[payment_processor] Failed to insert order: ' . mysqli_error($db));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
mysqli_close($db);
|
||||
|
||||
if ($processed_count > 0) {
|
||||
error_log('[payment_processor] Processed ' . $processed_count . ' invoice(s)');
|
||||
return true;
|
||||
}
|
||||
|
||||
error_log('[payment_processor] No matching invoices processed for record: ' . json_encode($record));
|
||||
return false;
|
||||
}
|
||||
|
||||
?>
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue