GSP/Panel
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: relocate billing runtime to module and harden updater panel pathing

Browse source 
Agent-Logs-Url: https://github.com/GameServerPanel/GSP/sessions/50299e05-4ee0-4b5b-80e4-bc5f872c106e

Co-authored-by: iaretechnician <2749183+iaretechnician@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot] 2026-05-18 13:46:11 +00:00 • committed by GitHub
parent 651c935fa7
commit 176f532737
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
686 changed files with 92221 additions and 8198 deletions
Download patch file Download diff file Expand all files Collapse all files

18
.github/module-map.md vendored
View file

@ -42,18 +42,18 @@ This file captures how the control panel, storefront, agents, and helper scripts
| `news`, `circular`, `faq` | Content modules for panel UI. | Use standard MVC wrappers, share session/auth. |
| `cron` | Scheduler UI feeding `scripts/` commands. | Maintains job metadata that OS cron reads. |
## Storefront (Website/)
## Storefront (`Panel/modules/billing` runtime + `Website/` compatibility wrappers)
| Area | Key files | Notes |
| --- | --- | --- |
| Public pages | `index.php`, `serverlist.php`, `order.php`, `cart.php`, `payment_success.php`, `docs.php` | All include `bootstrap.php`, header/footer, shared CSS. Links remain root-relative. |
| Auth | `login.php`, `register.php`, `reset_password.php`, `forgot_password.php`, `includes/login_required.php`, `includes/admin_auth.php` | Share `opengamepanel_web` session, call into panel DB to validate roles. |
| Admin | `admin.php`, `adminserverlist.php`, `admin_orders.php`, `admin_coupons.php`, `admin_config.php`, `my_orders_panel.php` | Manage services, coupons, prices, and provisioning. `adminserverlist.php` controls service availability per node. |
| PayPal API | `api/create_order.php`, `api/capture_order.php`, `webhook.php`, `logs/payment_capture.log` | Implements REST checkout. The cart stamps PayPal `custom_id` with the exact invoice IDs being purchased; capture/webhook handlers use that to mark the correct invoices paid, create/extend orders, and kick provisioning idempotently. |
| Provisioning bridge | `create_servers.php`, `includes/provisioner.php`, `Website/includes/panel_bridge.php` | Shared between panel module and storefront backend. Encapsulates whole server creation/renewal pipeline. |
| Cron helpers | `cron-shop.php`, `diag_remote.php` | Automations for renewals, diagnostics, health checks. |
| Documentation | `docs.php`, `docs/*`, `docs/admin_xml_notes.php` (PHP mirror of XML wiki) | Provide guidance for editing XML and game configs directly inside repo. |
| Logs/data | `logs/`, `data/`, `timestamp.txt` | Payment JSON archives, debug traces, and "Last updated" canonical string. |
| Public pages | `Panel/modules/billing/index.php`, `serverlist.php`, `order.php`, `cart.php`, `payment_success.php`, `docs.php` | Runtime now lives under `Panel/modules/billing`. `Website/*.php` wrappers proxy legacy paths to these files. |
| Auth | `Panel/modules/billing/login.php`, `register.php`, `reset_password.php`, `forgot_password.php`, `includes/login_required.php`, `includes/admin_auth.php` | Share `opengamepanel_web` session, call into panel DB to validate roles. |
| Admin | `Panel/modules/billing/admin.php`, `adminserverlist.php`, `admin_orders.php`, `admin_coupons.php`, `admin_config.php`, `my_orders_panel.php` | Manage services, coupons, prices, and provisioning. `adminserverlist.php` controls service availability per node. |
| PayPal API | `Panel/modules/billing/api/create_order.php`, `api/capture_order.php`, `paypal/webhook.php`, `logs/payment_capture.log` | Implements REST checkout. Legacy `Website/api/*` and `Website/paypal/webhook.php` wrappers proxy to module runtime. |
| Provisioning bridge | `Panel/modules/billing/create_servers.php`, `includes/provisioner.php`, `includes/panel_bridge.php` | Shared between panel module and storefront backend. Encapsulates whole server creation/renewal pipeline. |
| Cron helpers | `Panel/modules/billing/cron-shop.php`, `diag_remote.php` | Automations for renewals, diagnostics, health checks. |
| Documentation | `Panel/modules/billing/docs.php`, `docs/*`, `docs/admin_xml_notes.php` (PHP mirror of XML wiki) | Provide guidance for editing XML and game configs directly inside repo. |
| Logs/data | `Panel/modules/billing/logs/`, `data/`, `timestamp.txt` | Payment JSON archives, debug traces, and runtime timestamp (synced from canonical `Website/timestamp.txt`). |
## External/agent side

6
.gitignore vendored
View file

@ -1,16 +1,22 @@
# Ignore database configuration files with sensitive credentials
Website/includes/config.inc.php
Panel/includes/config.inc.php
Panel/modules/billing/includes/config.inc.php
Panel/modules/billing/site_config.local.php
Panel/status/api/config.php
Panel/status_api_local.php
# Ignore logs
Website/logs/*.log
Website/logs/*.txt
Panel/modules/billing/logs/*.log
Panel/modules/billing/logs/*.txt
# Ignore data directory (payment JSONs)
Website/data/*.json
!Website/data/.gitkeep
Panel/modules/billing/data/*.json
!Panel/modules/billing/data/.gitkeep
# Ignore backup files
*.backup

2
Panel/CHANGELOG.md
View file

@ -1,6 +1,8 @@
# Changelog
## 2026-05-18
- **Billing runtime relocation + portable path bootstrap:** Re-homed storefront runtime to `Panel/modules/billing`, added portable runtime helpers (`billing_bootstrap.php`, `site_config.php`, `site_config.example.php`) with env/local override support for base path and panel path, normalized critical storefront redirects/links to computed billing URLs, and added `Website` compatibility wrappers for key billing entrypoints.
- **Panel updater panel-subtree safety:** Hardened updater logic to treat repository `/panel` as the update source when present (ZIP + git flows) so root-level docs/examples/scripts are no longer candidates for panel file overwrite during updates.
- **Panel registration stability + captcha fallback hardening:** Fixed a fatal syntax error in `modules/register/register-exec.php`, removed hardcoded/legacy registration redirects, added structured registration logging to `modules/register/logs/register.log` (auto-creates missing log dir), added duplicate username checks, added optional `users_pass_hash` write for PHP 8.3-compatible auth upgrades, and implemented graceful reCAPTCHA fallback when keys are missing/legacy-invalid or the widget reports an error so the themed registration flow no longer crashes with raw PHP errors.
## 2026-05-13

1
Panel/docs/COPILOT_TODO.md
View file

@ -15,3 +15,4 @@
- Add a repeatable QA fixture that exercises `modules/billing/logs/provisioning_trace.log` writability failures and verifies payment success pages surface the traced provision result for paid and free orders.
- Add an admin/serverlist UI badge that shows detected service OS variant (Windows/Linux/Any) from XML metadata next to each purchasable service row.
- Add a panel settings health check that validates reCAPTCHA site/secret keys against active panel/storefront domains and warns admins before registration users see widget errors.
- Add an automated deployment check that fails when `Website/timestamp.txt` and `modules/billing/timestamp.txt` diverge after storefront/content changes.

68
Panel/modules/administration/panel_update.php
View file

@ -22,6 +22,37 @@ defined('GSP_UPDATE_LOG') || define('GSP_UPDATE_LOG', GSP_PANEL_DIR . '/logs/
defined('GSP_VERSION_FILE') || define('GSP_VERSION_FILE', GSP_PANEL_DIR . '/includes/panel_version.php');
defined('GSP_VERSION_JSON') || define('GSP_VERSION_JSON', GSP_PANEL_DIR . '/version.json');
function gsp_detect_repo_root()
{
$panelGit = GSP_PANEL_DIR . '/.git';
if (is_dir($panelGit) || is_file($panelGit)) {
return GSP_PANEL_DIR;
}
$parent = dirname(GSP_PANEL_DIR);
$parentGit = $parent . '/.git';
if (is_dir($parentGit) || is_file($parentGit)) {
return $parent;
}
return null;
}
function gsp_locate_panel_source_dir($root_dir)
{
$root = realpath($root_dir);
if ($root === false) {
return null;
}
// New layout: repo root contains /panel subtree.
if (is_dir($root . '/panel/includes') && is_dir($root . '/panel/modules')) {
return realpath($root . '/panel');
}
// Legacy layout: panel is at repository root.
if (is_dir($root . '/includes') && is_dir($root . '/modules')) {
return $root;
}
return null;
}
// ---------------------------------------------------------------------------
// Helper: write a line to the panel update log
// ---------------------------------------------------------------------------
@ -80,6 +111,15 @@ function gsp_get_current_version()
function gsp_get_current_branch()
{
$repo_root = gsp_detect_repo_root();
if ($repo_root && function_exists('exec')) {
$out = [];
$ret = 0;
exec('git -C ' . escapeshellarg($repo_root) . ' rev-parse --abbrev-ref HEAD 2>/dev/null', $out, $ret);
if ($ret === 0 && !empty($out[0])) {
return trim($out[0]);
}
}
if (file_exists(GSP_VERSION_FILE)) {
$code = file_get_contents(GSP_VERSION_FILE);
if (preg_match("/define\('GSP_BRANCH',\s*'([^']+)'\)/", $code, $m)) {
@ -87,7 +127,8 @@ function gsp_get_current_branch()
}
}
// Fall back to reading .git/HEAD
$git_head = GSP_PANEL_DIR . '/.git/HEAD';
$repo_root = gsp_detect_repo_root() ?: GSP_PANEL_DIR;
$git_head = $repo_root . '/.git/HEAD';
if (file_exists($git_head)) {
$content = trim(file_get_contents($git_head));
if (preg_match('/^ref: refs\/heads\/(.+)$/', $content, $m)) {
@ -99,13 +140,14 @@ function gsp_get_current_branch()
function gsp_get_git_commit()
{
$git_head = GSP_PANEL_DIR . '/.git/HEAD';
$repo_root = gsp_detect_repo_root() ?: GSP_PANEL_DIR;
$git_head = $repo_root . '/.git/HEAD';
if (!file_exists($git_head)) {
return null;
}
$content = trim(file_get_contents($git_head));
if (preg_match('/^ref: refs\/heads\/(.+)$/', $content, $m)) {
$branch_file = GSP_PANEL_DIR . '/.git/refs/heads/' . $m[1];
$branch_file = $repo_root . '/.git/refs/heads/' . $m[1];
if (file_exists($branch_file)) {
return trim(file_get_contents($branch_file));
}
@ -620,7 +662,14 @@ function gsp_apply_update($zip_file)
$src_dir = $subdirs[0];
}
// Copy files from the extracted source into the panel directory
$panel_src = gsp_locate_panel_source_dir($src_dir);
if ($panel_src === null) {
gsp_rmdir_recursive($temp_dir);
return ['success' => false, 'error' => 'Update archive does not contain a valid panel source directory.'];
}
$src_dir = $panel_src;
// Copy files from the extracted panel source into the panel directory
$copied = 0;
$iter = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator($src_dir, RecursiveDirectoryIterator::SKIP_DOTS),
@ -747,11 +796,18 @@ function gsp_get_available_backups()
// ---------------------------------------------------------------------------
function gsp_try_git_update($branch)
{
if (!function_exists('exec') || !is_dir(GSP_PANEL_DIR . '/.git')) {
$repo_root = gsp_detect_repo_root();
if (!function_exists('exec') || !$repo_root) {
return null;
}
$panel_arg = escapeshellarg(GSP_PANEL_DIR);
$panel_source = gsp_locate_panel_source_dir($repo_root);
if ($panel_source === null) {
gsp_update_log("Git update aborted: panel source directory not found under repo root {$repo_root}");
return null;
}
$panel_arg = escapeshellarg($repo_root);
$branch_arg = escapeshellarg($branch);
$origin_ref = escapeshellarg('origin/' . $branch);

242
Panel/modules/billing/BILLING_FIX_SUMMARY.md Normal file
View file

@ -0,0 +1,242 @@
# Billing Invoice/Order Flow - Fix Summary
## Problem Statement
The billing system had several critical issues:
1. **JSON Error**: "Failed to execute 'json' on 'Response': Unexpected end of JSON input" when returning from PayPal payment
2. **Cart not clearing**: Items remained in cart after payment (invoices stayed as status='due')
3. **No order creation**: Orders were not being created after successful payment
4. **Missing renewal flow**: Renewal invoices (linked to existing orders) were not handled
5. **Free button errors**: The free/claim button was also experiencing errors
## Invoice-First Flow (Intended Design)
The system uses an invoice-first architecture:
1. **Add to Cart**: Creates INVOICE with status='due', order_id=0 (no order yet)
2. **View Cart**: Shows all invoices WHERE status='due'
3. **Payment**:
- For NEW orders (order_id=0): Mark invoice paid + CREATE new order
- For RENEWALS (order_id>0): Mark invoice paid + EXTEND existing order's end_date
4. **Provisioning**: Separate step that provisions servers for paid orders
## Root Causes Identified
### 1. Missing Function
- `process_payment_record()` was called but never defined
- Referenced in webhook.php, cart.php (free button), but didn't exist
- This prevented any payment processing from completing
### 2. JSON Response Corruption
- `capture_order.php` had PHP errors/warnings during DB operations
- These were being output to the response, corrupting the JSON
- JavaScript couldn't parse the malformed JSON → "Unexpected end of JSON input"
### 3. Incomplete Payment Processing
- `capture_order.php` was supposed to:
- Mark invoices as paid (status: 'due' → 'paid')
- Create new orders OR extend existing orders
- Link invoices to orders
- But the logic was incomplete and had issues
### 4. Session Compatibility
- capture_order.php used `$_SESSION['user_id']`
- cart.php used `$_SESSION['website_user_id']`
- This mismatch meant user couldn't be identified for payment processing
### 5. Hardcoded Table Names
- capture_order.php used hardcoded "ogp_billing_invoices" and "ogp_billing_orders"
- Should use `$table_prefix . "billing_invoices"` for flexibility
- Could cause failures if table prefix is different
## Solutions Implemented
### 1. Created payment_processor.php Helper
**File**: `modules/billing/includes/payment_processor.php`
**Function**: `process_payment_record($record)`
- Accepts payment record from webhook or direct capture
- Finds invoices to process by custom_id (invoice_id) or invoice reference
- For each invoice:
- Marks invoice as paid (status='due' → 'paid')
- If NEW order (order_id=0): Creates new order with calculated end_date
- If RENEWAL (order_id>0): Extends existing order's end_date by invoice duration
- Links invoice to order
- Returns true/false and logs all operations
- No HTML output (safe to require from webhook/API endpoints)
### 2. Fixed capture_order.php
**File**: `modules/billing/api/capture_order.php`
**Changes**:
- **Disabled error display**: `ini_set('display_errors', '0')` to prevent JSON corruption
- **Session compatibility**: Checks both `website_user_id` and `user_id`
- **Proper JSON errors**: Returns structured JSON on DB connection failure
- **Table prefix usage**: Uses `$table_prefix` instead of hardcoded names
- **Complete invoice processing**:
- Marks all due invoices as paid
- Handles both NEW orders and RENEWALS
- Proper end_date calculation (months from qty + invoice_duration)
- Links invoices to orders
### 3. Fixed payment_success.php
**File**: `modules/billing/payment_success.php`
**Changes**:
- Requires `payment_processor.php` helper
- Displays payment confirmation page
- Shows user's recent orders
- No longer contains duplicate/incomplete function definitions
### 4. Fixed webhook.php
**File**: `modules/billing/webhook.php`
**Changes**:
- Uses `payment_processor.php` instead of requiring full payment_success.php
- Prevents HTML output that would interfere with webhook response
- Processes payment record after verification
### 5. Fixed cart.php Free Button
**File**: `modules/billing/cart.php`
**Changes**:
- Uses `payment_processor.php` for consistent processing
- Free button now properly:
- Marks invoice as paid
- Creates order record
- Calculates end_date
- Processes payment record through shared function
## Payment Flow (After Fixes)
### PayPal Payment Flow
```
1. User clicks "Pay with PayPal" in cart.php
↓
2. JavaScript calls api/create_order.php
→ Creates PayPal order with custom_id = invoice_id
↓
3. User approves payment on PayPal
↓
4. JavaScript calls api/capture_order.php
→ PayPal captures payment
→ capture_order.php:
a) Marks invoices as paid (status='due' → 'paid')
b) For NEW: Creates order in billing_orders
c) For RENEW: Extends existing order's end_date
d) Links invoice to order (sets invoice.order_id)
→ Returns JSON: { status: "COMPLETED", ... }
↓
5. JavaScript redirects to payment_success.php
→ Shows confirmation page
→ Displays order details
↓
6. PayPal sends webhook to webhook.php (parallel)
→ Verifies signature
→ Calls process_payment_record()
→ Same processing as step 4 (idempotent)
↓
7. Cart is empty (invoices now have status='paid', not shown)
```
### Free/Claim Flow
```
1. User clicks "Claim (Free)" button in cart.php
↓
2. Cart.php POST handler:
→ Marks invoice as paid
→ Creates order record with calculated end_date
→ Links invoice to order
→ Creates simulated webhook file
→ Calls process_payment_record() for consistency
↓
3. Redirects to return.php
→ Shows payment confirmation
↓
4. Cart is empty (invoice marked paid)
```
### Renewal Flow
```
1. User has existing order (order_id > 0)
↓
2. System creates renewal invoice:
→ status = 'due'
→ order_id = <existing_order_id>
→ qty = renewal months
↓
3. Invoice appears in cart
↓
4. User pays (PayPal or Free)
↓
5. process_payment_record():
→ Detects order_id > 0 (renewal)
→ Fetches current end_date from existing order
→ Calculates new end_date:
- If current end_date > now: extend from current end_date
- Otherwise: extend from now
→ Updates order with new end_date
→ Marks invoice as paid
↓
6. Order subscription extended by renewal period
```
## Testing Checklist
Before deployment, verify:
- [ ] Config setup: Copy `config.inc.php.orig` to `config.inc.php` and configure
- [ ] Database: Ensure `ogp_billing_invoices` and `ogp_billing_orders` tables exist
- [ ] Test NEW order flow:
- [ ] Add item to cart (creates invoice with status='due')
- [ ] View cart (item appears)
- [ ] Click "Claim (Free)" for $0 item (creates order, clears cart)
- [ ] Verify order created in billing_orders
- [ ] Verify invoice marked paid, linked to order
- [ ] Test PayPal flow:
- [ ] Add paid item to cart
- [ ] Click PayPal button
- [ ] Complete payment on PayPal sandbox
- [ ] Verify returns to payment_success.php without errors
- [ ] Verify order created
- [ ] Verify invoice marked paid
- [ ] Verify cart is empty
- [ ] Test RENEWAL flow:
- [ ] Create renewal invoice for existing order
- [ ] Pay renewal invoice
- [ ] Verify order end_date extended correctly
- [ ] Verify invoice marked paid
## Security Considerations
All code changes maintain or improve security:
1. **SQL Injection Protection**: Uses prepared statements where possible
2. **Input Validation**: Validates all user inputs (invoice_id, user_id, etc.)
3. **Session Security**: Maintains separate website/panel sessions
4. **Webhook Verification**: PayPal signature verification still in place
5. **Error Logging**: Errors logged, not displayed to users (prevents information leakage)
6. **Database Credentials**: Configuration file outside web root (best practice)
## Files Changed
1. `modules/billing/includes/payment_processor.php` - NEW
2. `modules/billing/api/capture_order.php` - MODIFIED
3. `modules/billing/payment_success.php` - MODIFIED
4. `modules/billing/webhook.php` - MODIFIED
5. `modules/billing/cart.php` - MODIFIED
## Known Limitations
1. **Config file required**: System requires `includes/config.inc.php` to be created from .orig template
2. **Multi-item cart matching**: If cart has multiple items, all are processed together (could improve to match specific invoice_id)
3. **No transaction rollback**: If order creation fails, invoice may still be marked paid (could improve with DB transactions)
## Future Enhancements
1. Add database transactions for atomic invoice→order operations
2. Improve invoice matching in process_payment_record (more specific matching)
3. Add unit tests for payment processing logic
4. Add admin UI for viewing/managing invoice-order relationships
5. Add email notifications for payment confirmations

110
Panel/modules/billing/COLUMN_RENAME_SUMMARY.md Normal file
View file

@ -0,0 +1,110 @@
# Column Rename: finish_date → end_date
## Overview
Renamed the `finish_date` column to `end_date` across the entire billing module for better semantic clarity. The column represents when a server's subscription ends/expires, so "end_date" is more descriptive.
## Files Modified
### Database Schema
1. **module.php** - Line 77
- Updated schema definition: `finish_date` DATETIME NULL → `end_date` DATETIME NULL
2. **migration_to_invoices.sql**
- Line 26: Updated AFTER clause in ADD COLUMN statement
- Lines 49-60: Updated column conversion logic from VARCHAR to DATETIME
- All references to the column name updated
### PHP Application Code
3. **cron-shop.php** (19 occurrences)
- Lines 78-80: Updated query conditions checking end_date IS NOT NULL
- Lines 97, 121, 124: Updated email notification date formatting
- Lines 142, 150-151: Updated suspension query conditions
- Lines 218, 226-227: Updated deletion query conditions
- Lines 283, 288: Updated legacy code comments and queries
- Lines 301, 304: Updated developer notes
- Lines 336, 341: Updated suspension logic
- Line 395: Updated final cleanup query
4. **cart.php** (14 occurrences)
- Lines 89-106: Updated variable names from $finish_date to $end_date
- Line 111: Updated column existence check
- Lines 117, 119, 121, 127: Updated SQL UPDATE statements
- Line 148-149: Updated audit logging
5. **my_account.php** (4 occurrences)
- Line 128: Updated SELECT query field
- Line 328: Updated display formatting (3 references in same line)
6. **my_servers.php** (2 occurrences)
- Line 43: Updated SQL comment
- Line 44: Updated column alias
7. **admin_invoices.php** (1 occurrence)
- Line 99: Updated display column
8. **add_to_cart.php** (10 occurrences)
- Lines 134-151: Updated variable names, column checks, INSERT queries, logging
9. **create_servers.php** (12 occurrences)
- Line 244: Updated condition check
- Lines 295-296: Updated comments
- Lines 301-330: Updated variable names in date calculation logic
- Line 342: Updated SET clause in UPDATE query (2 references)
10. **payment_success.php** (11 occurrences)
- Lines 35-102: Updated all references in payment processing logic
- Variable renamed: $finish_date_val → $end_date_val
- Updated column existence checks and SQL generation
### Documentation
11. **INVOICE_SYSTEM.md** (6 occurrences)
- Line 27: Updated field description
- Line 67: Updated workflow documentation
- Line 74: Updated renewal process
- Line 84: Updated expiration logic
- Line 113: Updated payment completion notes
- Line 124: Updated My Account display notes
12. **MIGRATION_SUMMARY.md** (4 occurrences)
- Line 11: Updated changelog entry
- Line 18: Updated bug fix description
- Lines 30, 36: Updated cron process descriptions
- Line 87: Updated SQL schema example
- Line 141: Updated verification notes
## Database Impact
### For Fresh Installations
- New installations will create the `ogp_billing_orders` table with `end_date` DATETIME NULL
### For Existing Installations
- Run the updated `migration_to_invoices.sql` script
- The script will handle the column rename automatically using dynamic SQL:
```sql
-- Checks if column exists as 'finish_date' and renames to 'end_date'
-- Then converts data type from VARCHAR to DATETIME
```
## Testing Checklist
- [x] Module schema updated (module.php)
- [x] Migration script updated (migration_to_invoices.sql)
- [x] All PHP files using the column updated
- [x] All SQL queries updated
- [x] All variable names updated
- [x] All comments and documentation updated
- [x] Verified no remaining `finish_date` references (except log files)
## Backwards Compatibility
⚠️ **BREAKING CHANGE**: This rename requires running the migration script on existing databases.
**Migration Path:**
1. Backup database
2. Run updated `migration_to_invoices.sql`
3. The script will automatically rename `finish_date` to `end_date`
4. Verify column exists: `SHOW COLUMNS FROM ogp_billing_orders LIKE 'end_date';`
## Notes
- Log files may still contain old references to `finish_date` - this is expected and harmless
- The semantic meaning of the column is unchanged (server expiration date)
- All date calculations remain identical
- No functional changes, only naming improvement for clarity

364
Panel/modules/billing/COUPON_SYSTEM.md Normal file
View file

@ -0,0 +1,364 @@
# Coupon System Documentation
## Overview
The billing module now includes a comprehensive coupon system that allows administrators to create discount codes that customers can apply to their orders. The system supports:
- **Percentage-based discounts** (e.g., 10%, 25%, 50% off)
- **One-time or permanent discounts** (one-time applies to first invoice only, permanent applies to all renewals)
- **Game-specific filtering** (apply coupons to all games or specific games only)
- **Usage limits** (optional maximum number of uses per coupon)
- **Expiration dates** (optional expiry date for time-limited promotions)
- **Automatic usage tracking** (system tracks how many times each coupon has been used)
## Database Schema
### Table: `ogp_billing_coupons`
The main coupon table stores all coupon definitions:
```sql
CREATE TABLE `ogp_billing_coupons` (
`coupon_id` INT(11) NOT NULL AUTO_INCREMENT,
`code` VARCHAR(50) NOT NULL UNIQUE,
`name` VARCHAR(255) NOT NULL DEFAULT '',
`description` TEXT,
`discount_percent` DECIMAL(5,2) NOT NULL DEFAULT 0.00,
`usage_type` ENUM('one_time', 'permanent') NOT NULL DEFAULT 'one_time',
`game_filter_type` ENUM('all_games', 'specific_games') NOT NULL DEFAULT 'all_games',
`game_filter_list` TEXT COMMENT 'JSON array of game keys',
`max_uses` INT(11) DEFAULT NULL COMMENT 'NULL for unlimited',
`current_uses` INT(11) NOT NULL DEFAULT 0,
`expires` DATETIME DEFAULT NULL,
`created_date` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
`created_by` INT(11) DEFAULT NULL,
`is_active` TINYINT(1) NOT NULL DEFAULT 1,
PRIMARY KEY (`coupon_id`),
UNIQUE KEY `idx_code` (`code`)
);
```
### Updated Tables
#### `ogp_billing_invoices`
Added columns:
- `coupon_id` INT(11) - Links to the coupon used
- `discount_amount` DECIMAL(10,2) - Actual discount amount applied
#### `ogp_billing_orders`
Added columns:
- `coupon_id` INT(11) - Links to the coupon used (for permanent discounts)
- `discount_amount` DECIMAL(10,2) - Discount amount for renewals
## Installation
1. **Run the SQL migration:**
```bash
mysql -u [username] -p [database_name] < modules/billing/create_coupons_table.sql
```
2. **Verify installation:**
- Check that the `ogp_billing_coupons` table exists
- Verify that `coupon_id` and `discount_amount` columns were added to both `ogp_billing_invoices` and `ogp_billing_orders`
## Admin Interface
### Accessing Coupon Management
1. Log in as an administrator
2. Navigate to `/modules/billing/admin.php`
3. Click on "Manage Coupons" button
4. Or go directly to `/modules/billing/admin_coupons.php`
### Creating a New Coupon
1. On the Manage Coupons page, scroll to "Add New Coupon" section
2. Fill in the required fields:
- **Coupon Code**: Unique alphanumeric code (e.g., "SUMMER2025", "WELCOME10")
- **Display Name**: User-friendly name shown in admin interface
- **Description**: Internal notes about the coupon
- **Discount Percentage**: Number between 0-100 (e.g., 25 for 25% off)
- **Usage Type**:
- **One Time**: Discount applies only to the first invoice
- **Permanent**: Discount applies to initial order AND all future renewals
- **Apply To**:
- **All Games**: Works for any game server
- **Specific Games**: Works only for selected games
- **Maximum Uses**: Optional limit on total uses (blank = unlimited)
- **Expiration Date**: Optional expiry date (blank = never expires)
3. Click "Add Coupon" to save
### Example Coupons
#### Welcome Discount (One-Time, All Games)
```
Code: WELCOME10
Name: Welcome 10% Off
Discount: 10%
Usage Type: One Time
Apply To: All Games
Max Uses: (unlimited)
Expires: (none)
```
#### Arma Series Promotion (Permanent, Specific Games)
```
Code: ARMA25
Name: Arma Series 25% Off
Discount: 25%
Usage Type: Permanent
Apply To: Specific Games
- arma2_win32
- arma2oa_win32
- arma3_linux32
- arma3_linux64
- arma3_win64
- arma-reforger_linux64
- arma-reforger_win64
Max Uses: 100
Expires: 2025-12-31
```
### Editing Coupons
1. On the Manage Coupons page, find the coupon in the list
2. Click the "Edit" button
3. Modify any fields (except code uniqueness is enforced)
4. Click "Save Changes"
### Deactivating Coupons
1. Click "Edit" on the coupon
2. Uncheck the "Active" checkbox
3. Click "Save Changes"
Note: Deactivating prevents new uses but doesn't affect existing orders.
### Deleting Coupons
1. Find the coupon in the list
2. Click "Delete" button
3. Confirm the deletion
Warning: This permanently removes the coupon. Orders that used it will retain the discount but lose the coupon reference.
## Customer Usage
### Applying a Coupon
1. Customer adds items to cart at `/modules/billing/cart.php`
2. In the coupon section, enter coupon code in the input field
3. Click "Apply Coupon"
4. If valid, a success message appears showing:
- Coupon code
- Discount percentage
- Whether it's one-time or permanent
5. Cart totals update automatically with discounted prices
6. Proceed to checkout with PayPal as normal
### Coupon Validation
The system validates:
- ✅ Code exists and is active
- ✅ Coupon hasn't expired
- ✅ Usage limit hasn't been reached
- ✅ Game matches filter (if game-specific)
Error messages shown if:
- ❌ Code is invalid or expired
- ❌ Usage limit reached
- ❌ Coupon doesn't apply to games in cart
### Removing a Coupon
1. On cart page, click "Remove" button next to active coupon
2. Cart prices revert to original amounts
## Coupon Behavior
### One-Time Coupons
- Applied to the initial invoice only
- When order is renewed, renewal invoice uses original price
- Coupon is cleared from session after first payment
- Example: "WELCOME10" gives 10% off first month only
### Permanent Coupons
- Applied to initial invoice AND stored in order record
- When order is renewed, the discount is automatically applied to renewal invoices
- Coupon stays associated with the order forever
- Example: "VIP50" gives 50% off forever for that specific server
### Game Filtering
#### All Games
- Coupon applies to any game server in the cart
- All cart items receive the discount
#### Specific Games
- Coupon checks each cart item's `home_name` field
- Only matching games receive the discount
- Uses partial string matching (e.g., "arma3" matches "arma3_linux64")
- Non-matching games show original price
Example:
```
Cart contains:
1. Arma 3 Server → ARMA25 coupon applies (25% off)
2. Minecraft Server → ARMA25 doesn't apply (full price)
3. Arma Reforger → ARMA25 applies (25% off)
Total discount = 25% off Arma servers only
```
## Technical Implementation
### Session Storage
Coupons are stored in `$_SESSION['applied_coupon']` when applied:
```php
$_SESSION['applied_coupon'] = [
'coupon_id' => 1,
'code' => 'ARMA25',
'discount_percent' => 25.00,
'usage_type' => 'permanent',
'game_filter_type' => 'specific_games',
'game_filter_list' => '["arma3_linux64","arma2_win32"]',
// ... other fields
];
```
### Cart Calculation
In `cart.php`, the `couponAppliesTo()` function checks if a coupon applies to a specific game:
```php
function couponAppliesTo($coupon, $game_name) {
if (!$coupon || $coupon['game_filter_type'] === 'all_games') {
return true;
}
if ($coupon['game_filter_type'] === 'specific_games') {
$allowed_games = json_decode($coupon['game_filter_list'], true);
foreach ($allowed_games as $allowed_game) {
if (stripos($game_name, $allowed_game) !== false) {
return true;
}
}
}
return false;
}
```
Discount calculation:
```php
$rowtotal = $row['amount'] * $row['qty'] * $row['max_players'];
if ($applied_coupon && couponAppliesTo($applied_coupon, $row['home_name'])) {
$discountPercent = floatval($applied_coupon['discount_percent']);
$itemDiscount = ($rowtotal * $discountPercent) / 100;
$rowtotal = $rowtotal - $itemDiscount;
}
```
### Payment Processing
In `api/capture_order.php`, when PayPal payment completes:
1. Coupon info is retrieved from session
2. Invoices are updated with `coupon_id`
3. Coupon usage count is incremented
4. For one-time coupons, cleared from session
5. For permanent coupons, stored in order record
```php
// Update invoice with coupon
UPDATE ogp_billing_invoices
SET status='paid', coupon_id=?, discount_amount=?
WHERE user_id=? AND status='due'
// Increment usage count
UPDATE ogp_billing_coupons
SET current_uses = current_uses + 1
WHERE coupon_id = ?
// For permanent coupons, store in order
INSERT INTO ogp_billing_orders (
..., coupon_id, discount_amount
) VALUES (
..., ?, ?
)
```
## Display
### Cart Page
- Shows applied coupon with code and percentage
- Displays success/error messages
- Updates prices in real-time
### My Servers Page
- Shows original price (strikethrough)
- Shows discounted price (bold)
- Shows coupon code and percentage (green text)
### Admin Invoices Page
- Same display as My Servers
- Visible to administrators for all orders
## Troubleshooting
### Coupon not applying
- Check if code is typed correctly (case-sensitive)
- Verify coupon is active in admin panel
- Check expiration date hasn't passed
- Verify usage limit hasn't been reached
- For game-specific coupons, ensure game matches filter
### Discount not showing after payment
- Check `discount_amount` column exists in both tables
- Verify coupon_id was saved to invoice/order
- Clear browser cache and refresh page
### Permanent coupon not applying to renewals
- Verify `usage_type` is set to "permanent"
- Check order record has `coupon_id` populated
- Ensure renewal invoice creation copies coupon from order
## Security Considerations
1. **Code uniqueness**: System enforces unique coupon codes
2. **Usage tracking**: Prevents abuse by tracking total uses
3. **Expiration**: Automatic validation prevents expired coupon use
4. **Admin-only creation**: Only admins can create/edit coupons
5. **SQL injection protection**: All inputs are sanitized with `mysqli_real_escape_string()`
6. **CSRF protection**: Admin forms include CSRF tokens
## Future Enhancements
Potential features for future development:
- Minimum purchase amount requirements
- First-time customer restrictions
- User-specific coupons (assign to individual users)
- Combination rules (allow/prevent stacking)
- Auto-generated unique codes for campaigns
- Email notification when coupon is used
- Analytics dashboard for coupon performance
- Referral system integration
## Support
For issues or questions:
1. Check the troubleshooting section above
2. Review error logs in `/modules/billing/logs/`
3. Verify database schema matches documentation
4. Contact system administrator
---
**Last Updated**: 2025-10-29
**Version**: 1.0
**Module**: Billing/Coupons

248
Panel/modules/billing/FIXES_APPLIED.md Normal file
View file

@ -0,0 +1,248 @@
# Billing Module Fixes - Complete Report
**Date**: November 10, 2025
**Branch**: copilot/fix-billing-module-errors
**Status**: ✅ COMPLETE
## Issues Resolved
### 1. Critical Syntax Error in cart.php ✅
**Problem**:
- cart.php had a missing closing brace on line 98 (coupon validation logic)
- This caused a complete failure of the cart page
- PHP parser error: "Unclosed '{' on line 98"
- Even debug mode (cart.php?debug_cart=1) failed
**Root Cause**:
- The `else` block starting at line 107 (handling database connection for coupon validation) was not properly closed
- The if statement on line 113 (`if ($coupon_result && mysqli_num_rows($coupon_result) === 1)`) was inside the else block
- Missing closing brace after the coupon validation logic completed
**Fix Applied**:
- Added missing closing brace at line 181
- Properly closes the else block from line 107
- Brace structure now balances correctly (22 opening, 22 closing)
**Verification**:
```bash
$ php -l cart.php
No syntax errors detected in cart.php
```
```bash
$ cat data/debug_cart.log
[2025-11-10 03:16:07] SHUTDOWN: no error
```
---
### 2. VS Code "Undefined Variable" Warnings ✅
**Problem**:
- VS Code showed warnings: "$table_prefix is unassigned"
- Similar warnings for $db_host, $db_user, $db_pass, $db_name
- These warnings appeared even though config.inc.php was properly included
- Affected developer experience and code review
**Root Cause**:
- IDEs like VS Code don't trace through dynamic `require_once` includes
- Variables defined in config.inc.php were not visible to static analysis
- This is a limitation of IDE static analysis, not an actual code error
**Fix Applied**:
- Added PHPDoc `@var` annotations after config.inc.php includes
- Annotations help IDEs understand variable scope
- Pattern used:
```php
// Variables from config.inc.php (helps IDEs understand scope)
/** @var string $db_host Database host */
/** @var string $db_user Database user */
/** @var string $db_pass Database password */
/** @var string $db_name Database name */
/** @var string $table_prefix Table prefix for database tables */
```
**Files Updated** (16 total):
**Main Website Files**:
1. cart.php
2. add_to_cart.php
3. admin_coupons.php
4. my_servers.php
5. my_account.php
6. renew_server.php
7. forgot_password.php
8. reset_password.php
9. login.php
10. register.php
11. serverlist.php
12. payment_success.php
13. order.php
**Include Files**:
14. includes/admin_auth.php
15. includes/payment_processor.php
16. includes/menu.php
**Coverage**: 16 out of 25 files using $table_prefix now have PHPDoc annotations (64%)
---
### 3. Housekeeping ✅
**Added to .gitignore**:
- `modules/billing/data/*.log` - Prevents debug logs from being committed
---
## Validation Results
### Syntax Validation
- ✅ All 36 PHP files in modules/billing/ pass syntax check
- ✅ No parse errors detected
- ✅ All brace pairs balanced correctly
### Functional Testing
- ✅ cart.php loads without errors
- ✅ Debug mode (cart.php?debug_cart=1) works correctly
- ✅ Debug log shows "no error" status
- ✅ Shutdown function executes properly
### Code Quality
- ✅ PHPDoc annotations added for IDE support
- ✅ All key user-facing files updated
- ✅ No changes to business logic
- ✅ Minimal, surgical changes only
---
## Files Modified
### Commit 1: Fix cart.php syntax error and add PHPDoc hints
- modules/billing/cart.php (syntax fix + PHPDoc)
- modules/billing/add_to_cart.php (PHPDoc)
- modules/billing/admin_coupons.php (PHPDoc)
- modules/billing/my_servers.php (PHPDoc)
- modules/billing/my_account.php (PHPDoc)
- modules/billing/renew_server.php (PHPDoc)
- modules/billing/forgot_password.php (PHPDoc)
- modules/billing/reset_password.php (PHPDoc)
### Commit 2: Add PHPDoc hints to additional files
- modules/billing/login.php (PHPDoc)
- modules/billing/register.php (PHPDoc)
- modules/billing/serverlist.php (PHPDoc)
- modules/billing/payment_success.php (PHPDoc)
- modules/billing/order.php (PHPDoc)
- modules/billing/includes/admin_auth.php (PHPDoc)
- modules/billing/includes/payment_processor.php (PHPDoc)
- modules/billing/includes/menu.php (PHPDoc)
### Commit 3: Add billing data logs to gitignore
- .gitignore (added modules/billing/data/*.log)
**Total Files Changed**: 17 files
**Total Lines Changed**: ~120 lines (mostly documentation)
**Breaking Changes**: None
**Business Logic Changes**: None
---
## Testing Recommendations
To fully test the cart functionality in a live environment:
1. **Configure Database Connection**:
- Edit `modules/billing/includes/config.inc.php`
- Set correct database credentials
- Ensure $table_prefix matches your panel installation
2. **Test Basic Cart Access**:
```
http://yoursite.com/modules/billing/cart.php
```
- Should redirect to login if not authenticated
- Should show cart after login
3. **Test Debug Mode**:
```
http://yoursite.com/modules/billing/cart.php?debug_cart=1
```
- Should display detailed error messages
- Check data/debug_cart.log for shutdown messages
4. **Test Coupon Functionality**:
- Add items to cart
- Apply a test coupon code
- Verify discount calculation
- Verify coupon validation (expiry, usage limits, game filters)
5. **Test PayPal Integration**:
- Complete checkout flow
- Verify PayPal buttons render
- Test payment capture
---
## Notes for Developers
### About $table_prefix Variable
- Defined in `modules/billing/includes/config.inc.php`
- Default value: `"gsp_"`
- Used for database table prefixes
- Must match the panel installation's table prefix
### About PHPDoc Annotations
- These are ONLY for IDE support
- Do NOT change runtime behavior
- Safe to add to all files that include config.inc.php
- Pattern is consistent across all files
### Standalone Architecture
The billing module is designed to be standalone and relocatable:
- Uses ONLY standard PHP libraries (mysqli, json, curl, session)
- Does NOT include panel files (like includes/functions.php)
- Connects directly to MySQL using mysqli_connect()
- Can be deployed on same machine as panel OR external web host
- Sessions are separate: "opengamepanel_web" namespace
---
## Additional Notes
### Files That Could Benefit from PHPDoc (Not Critical)
These files use $table_prefix but don't have PHPDoc annotations yet:
- admin_invoices.php (4 uses)
- adminserverlist.php (8 uses)
- cart_old.php (4 uses)
- check_table.php (4 uses)
- create_servers.php (4 uses) - NOTE: This is a panel module, uses OGP_DB_PREFIX
- cron-shop.php (30 uses) - NOTE: This is a panel cron job
- server_status.php (4 uses)
- test_db_connection.php (9 uses)
These can be updated in a future enhancement if needed.
### create_servers.php Note
This file is actually a PANEL module (not a standalone billing website file):
- Uses panel's $db object
- Includes panel files (includes/lib_remote.php)
- Uses OGP_DB_PREFIX placeholder in some queries
- Inconsistently uses {$table_prefix} in a few places
- Should eventually be updated to use OGP_DB_PREFIX consistently
---
## Conclusion
✅ **All issues resolved successfully**
The billing module is now functional with:
1. cart.php working correctly (syntax error fixed)
2. VS Code warnings suppressed (PHPDoc added)
3. Debug logging configured properly
4. All files validated for syntax correctness
The changes are minimal, surgical, and follow the repository guidelines for standalone billing module architecture.

137
Panel/modules/billing/GAME_DOCS_TODO_REFERENCE.md Normal file
View file

@ -0,0 +1,137 @@
# Game Documentation TODO System - Quick Reference
## System Overview
All game documentation folders now have a "complete" status field. Incomplete documentation displays with "TODO: " prefix on the docs.php page for easy visual identification.
## Current Status (December 19, 2024)
### ✅ Complete Documentation (1 game)
- **Minecraft Server** - Full comprehensive documentation with all sections
### ❌ Incomplete Documentation (146 games)
All other games display with "TODO: " prefix and need comprehensive research
## Priority Order for Completion
### PHASE 2: ARMA Family + DayZ (NEXT - HIGH PRIORITY)
1. **Arma 3** - Modern ARMA platform, highly popular
2. **Arma 2: Operation Arrowhead** - Required for DayZ Mod
3. **Arma 2** - Base game (if separate from OA)
4. **Arma 2: Combined Operations** - ARMA2 + OA combo for DayZ Mod
5. **DayZ Standalone** - Standalone survival game
6. **DayZ Mod** (if exists) - Original mod version
**Research Sources for ARMA/DayZ:**
- Bohemia Interactive Wiki (https://community.bistudio.com/wiki)
- LGSM scripts (LinuxGSM game configs)
- r/arma, r/dayzservers Reddit communities
- BI Forums (https://forums.bohemia.net/)
- DayZ Forums (https://forums.dayz.com/)
- Steam Community Guides (highly-rated)
### PHASE 3: Popular Multiplayer Games
**Batch 1 (Counter-Strike Family):**
- Counter-Strike 1.6
- Counter-Strike: Source
- Counter-Strike 2
- Counter-Strike: Global Offensive
**Batch 2 (Survival/Building Games):**
- Rust
- Terraria
- Valheim
- Garry's Mod
- ARK: Survival Evolved
- 7 Days to Die
**Batch 3 (Co-op Shooters):**
- Left 4 Dead
- Left 4 Dead 2
- Killing Floor
- Killing Floor 2
- Team Fortress 2
**Batch 4 (Tactical Shooters):**
- Insurgency
- Insurgency: Sandstorm
- Squad
### PHASE 4: Remaining Games (50+ games)
All other game folders in alphabetical order
## Documentation Template Requirements
Each game must include (following Minecraft template):
### Required Sections:
1. **Navigation Box** - Quick links to all sections with emoji icons
2. **Quick Info** - Game overview and key details in styled box
3. **Comprehensive Ports Table:**
- Port number
- Protocol (TCP/UDP)
- Purpose/Description
- Required or Optional status
4. **Firewall Configuration Examples:**
- UFW (Ubuntu/Debian)
- FirewallD (CentOS/RHEL)
- Windows Firewall
- iptables (generic Linux)
5. **Startup Parameters Section:**
- Command syntax
- Parameter explanations
- Common configurations
- Examples with descriptions
6. **Troubleshooting Section:**
- Server won't start
- Connection issues
- Performance problems
- Mod/plugin conflicts (if applicable)
- Common error messages with solutions
7. **Performance Optimization**
8. **Security Best Practices**
9. **Additional Resources** - Links to official docs, wikis, community guides
10. **Important Notes** - Warning box with critical information
### Research Requirements:
- Search official game wikis
- Check LGSM scripts for accurate port/parameter info
- Review Steam Community guides (highly-rated)
- Check Reddit communities (r/gameservers, game-specific subs)
- Look for GitHub repos with server configs
- Include user-contributed solutions from forums
- Cite all sources used
## How to Mark Documentation Complete
When a game's documentation is finished:
1. **Edit metadata.json** in the game folder:
```json
{
"name": "Game Name",
"description": "Description",
"category": "game",
"order": 10,
"complete": true
}
```
2. **Change** `"complete": false` to `"complete": true`
3. **Verify** on docs.php - game name should no longer show "TODO: " prefix
## Estimated Time Per Game
- **Research:** 15-30 minutes (official docs, wikis, LGSM, Reddit, Steam)
- **Writing:** 20-30 minutes (following template structure)
- **Testing/Review:** 5-10 minutes
- **Total:** 40-70 minutes per game for comprehensive documentation
## Files Modified in TODO System Implementation
- `modules/billing/docs.php` - Added TODO prefix logic
- `modules/billing/docs/*/metadata.json` - Added complete field to 146 files
- `update_metadata_complete.ps1` - Batch update script
- `RECENT_FIXES_SUMMARY.md` - Updated with TODO system details
- `GAME_DOCS_TODO_REFERENCE.md` - This reference file
## Next Immediate Action
Begin Phase 2: Research and complete ARMA family + DayZ documentation (6 games total)

190
Panel/modules/billing/INVOICE_FIRST_FLOW.md Normal file
View file

@ -0,0 +1,190 @@
# Invoice-First Billing Flow
## Overview
The billing system now follows an **invoice-first** workflow where invoices are created BEFORE orders. Orders are only created after successful payment.
## Workflow
### 1. Add to Cart (order.php → add_to_cart.php)
**What happens:**
- User clicks "Add to Cart" button on order page
- System creates a **billing_invoices** record with:
- `status` = 'due'
- `order_id` = 0 (no order exists yet)
- All server details (service_id, home_name, ip, max_players, passwords, etc.)
- Customer details (name, email from ogp_users)
- Pricing (amount, qty, invoice_duration)
- `due_date` = now + 3 days
**Database changes:**
- INSERT into `ogp_billing_invoices`
- NO changes to `ogp_billing_orders` (order doesn't exist yet)
### 2. Cart Display (cart.php)
**What shows:**
- Query: `SELECT * FROM ogp_billing_invoices WHERE status = 'due' AND user_id = ?`
- Displays all **unpaid invoices** (status='due')
- Shows invoice_id, home_name, ip, max_players, amount, qty
- Free items show "Claim (Free)" button
- Paid items show PayPal button
**Actions available:**
- Delete invoice (removes from cart, no order cleanup needed)
- Pay invoice (via PayPal or Free button)
### 3. Payment (PayPal or Free)
#### 3a. Free/Claim Flow (cart.php POST handler)
**When:** User clicks "Claim (Free)" or admin clicks "Create (Free)"
**What happens:**
1. Mark invoice as paid:
- UPDATE `ogp_billing_invoices` SET status='paid', paid_date=NOW()
2. Create order record:
- Calculate end_date (qty * invoice_duration)
- INSERT into `ogp_billing_orders` with status='paid'
- Get new order_id from INSERT
3. Link invoice to order:
- UPDATE `ogp_billing_invoices` SET order_id=? WHERE invoice_id=?
**Database changes:**
- UPDATE `ogp_billing_invoices`: status='due' → 'paid', paid_date=NOW(), order_id=(new)
- INSERT `ogp_billing_orders`: New record with status='paid', end_date calculated
#### 3b. PayPal Flow (api/capture_order.php)
**When:** User pays via PayPal
**What should happen:**
1. PayPal sends capture webhook
2. System marks invoice as paid (same as Free flow)
3. System creates order record (same as Free flow)
4. System links invoice to order (same as Free flow)
**Database changes:** (Same as Free flow above)
### 4. Server Provisioning (create_servers.php)
**What happens:**
- Cron job or manual trigger finds orders with status='paid'
- Creates actual game server (home_id)
- Updates order: status='paid' → 'installed', home_id=(assigned)
**Database changes:**
- UPDATE `ogp_billing_orders`: status='paid' → 'installed', home_id=(assigned)
## Status Values
### Invoice Status
- **'due'** - Unpaid invoice (shows in cart)
- **'paid'** - Paid invoice (payment confirmed)
- **'cancelled'** - Deleted/cancelled invoice
### Order Status
- **'paid'** - Payment confirmed, awaiting provisioning
- **'installed'** - Server provisioned and running
- **'suspended'** - Server stopped for non-payment
- **'expired'** - Service ended
## Database Schema
### ogp_billing_invoices (INVOICE-FIRST)
```sql
invoice_id INT AUTO_INCREMENT PRIMARY KEY
order_id INT DEFAULT 0 -- Links to order AFTER payment (0 = not yet paid)
user_id INT NOT NULL
service_id INT NOT NULL -- Server package being purchased
home_name VARCHAR(255) -- Server name
ip INT -- IP assignment
max_players INT -- Player count
remote_control_password VARCHAR(255) -- Server RCON password
ftp_password VARCHAR(255) -- FTP password
customer_name VARCHAR(255) -- Billing name
customer_email VARCHAR(255) -- Billing email
amount FLOAT(15,2) -- Total price
currency VARCHAR(3) DEFAULT 'USD'
status VARCHAR(16) DEFAULT 'due' -- 'due', 'paid', 'cancelled'
invoice_date DATETIME DEFAULT NOW()
due_date DATETIME -- Payment deadline
paid_date DATETIME -- When paid
payment_txid VARCHAR(255) -- PayPal transaction ID
payment_method VARCHAR(50) -- 'paypal', 'free', etc.
description VARCHAR(500) -- Invoice description
invoice_duration VARCHAR(16) DEFAULT 'month' -- 'month', 'year', 'day'
qty INT DEFAULT 1 -- Quantity/duration multiplier
```
### ogp_billing_orders (ORDER-AFTER-PAYMENT)
```sql
order_id INT AUTO_INCREMENT PRIMARY KEY
user_id INT NOT NULL
service_id INT NOT NULL
home_name VARCHAR(255)
home_id VARCHAR(255) -- Panel game server ID (after provisioning)
ip INT
max_players INT
qty INT
invoice_duration VARCHAR(16)
price FLOAT(15,2)
remote_control_password VARCHAR(255)
ftp_password VARCHAR(255)
status VARCHAR(16) DEFAULT 'paid' -- 'paid', 'installed', 'suspended', 'expired'
order_date DATETIME DEFAULT NOW()
end_date DATETIME -- Subscription expiration
payment_txid VARCHAR(255)
paid_ts DATETIME
```
## Key Differences from Old Flow
### OLD (Order-First)
1. Add to cart → Create ORDER (status='in-cart')
2. View cart → Show orders WHERE status='in-cart'
3. Pay → UPDATE order status='in-cart' → 'paid'
4. Provision → UPDATE order status='paid' → 'installed'
### NEW (Invoice-First)
1. Add to cart → Create INVOICE (status='due', order_id=0)
2. View cart → Show invoices WHERE status='due'
3. Pay → Mark invoice paid + CREATE ORDER (status='paid') + Link invoice to order
4. Provision → UPDATE order status='paid' → 'installed'
## Benefits
1. **Clean Separation:** Invoices = payment requests, Orders = actual services
2. **Better Audit Trail:** Invoice IDs never change, order IDs created only after payment
3. **Renewal Support:** Can create multiple invoices for same order (renewals)
4. **Cart Simplicity:** Cart only shows unpaid invoices (single source of truth)
5. **Payment History:** All payments have invoice records, even free ones
## Migration Notes
**Existing orders with status='in-cart' need to be migrated:**
```sql
-- Convert existing cart items to invoices
INSERT INTO ogp_billing_invoices (
order_id, user_id, service_id, home_name, ip, max_players,
remote_control_password, ftp_password, customer_name, customer_email,
amount, status, invoice_duration, qty, description
)
SELECT
0, -- No order exists yet
o.user_id,
o.service_id,
o.home_name,
o.ip,
o.max_players,
o.remote_control_password,
o.ftp_password,
CONCAT(u.users_fname, ' ', u.users_lname),
u.users_email,
o.price,
'due', -- Convert 'in-cart' to 'due'
o.invoice_duration,
o.qty,
CONCAT('Migrated cart item: ', o.home_name)
FROM ogp_billing_orders o
LEFT JOIN ogp_users u ON o.user_id = u.user_id
WHERE o.status = 'in-cart';
-- Delete old cart items (now converted to invoices)
DELETE FROM ogp_billing_orders WHERE status = 'in-cart';
```

133
Panel/modules/billing/INVOICE_SYSTEM.md Normal file
View file

@ -0,0 +1,133 @@
# Billing System - Invoice-Based Architecture
## Overview
The billing system now uses a **dual-table architecture** separating orders (ongoing services) from invoices (payment records).
## Database Tables
### 1. `ogp_billing_services`
**Purpose:** Available game server packages/products
**Key Fields:**
- `service_id` - Unique identifier
- `service_name` - Display name
- `remote_server_id` - Target server(s)
- `price_monthly`, `price_year` - Pricing tiers
- `enabled` - Availability flag
### 2. `ogp_billing_orders` (formerly just cart items)
**Purpose:** Active game server instances (ongoing services)
**Key Fields:**
- `order_id` - Unique identifier
- `user_id` - Owner
- `service_id` - Product reference
- `home_id` - Panel game home ID (after provisioning)
- `home_name` - Server name
- `status` - Current state (see Status Flow below)
- `order_date` - When created
- `end_date` - Expiration date
- `payment_txid` - Last payment transaction
- `paid_ts` - Last payment timestamp
**Status Values:**
- `in-cart` - User added to cart, not yet paid
- `paid` - Payment received, awaiting provisioning
- `installed` - ✅ Server provisioned and running
- `suspended` - Server stopped due to non-payment
- `expired` - Service ended
- `renew` - Renewal pending in cart
### 3. `ogp_billing_invoices` (NEW)
**Purpose:** Payment records (one invoice per payment)
**Key Fields:**
- `invoice_id` - Unique identifier
- `order_id` - Links to the server order
- `user_id` - Customer
- `customer_name` - Full name
- `customer_email` - Email address
- `amount` - Total due
- `currency` - USD, EUR, etc.
- `status` - `unpaid` or `paid`
- `invoice_date` - When created
- `due_date` - Payment deadline
- `paid_date` - When paid
- `payment_txid` - PayPal/Stripe transaction ID
- `payment_method` - PayPal, Stripe, etc.
- `description` - Invoice line items
- `invoice_duration` - Billing period (month/year)
- `qty` - Quantity/duration multiplier
## Workflow
### Initial Purchase
1. User selects game server package → Creates row in `billing_orders` (status: `in-cart`)
2. System creates `billing_invoices` entry (status: `unpaid`, linked to order_id)
3. Cart page shows unpaid invoices
4. User pays → Invoice status becomes `paid`, order status becomes `paid`
5. Provisioning happens → Order status becomes `installed`
6. Server is active until `end_date`
### Renewal Process
1. User clicks "Renew" on active server (My Account page)
2. System creates NEW invoice in `billing_invoices` (status: `unpaid`, same order_id)
3. Cart shows the unpaid renewal invoice
4. User pays → Invoice status becomes `paid`
5. Order `end_date` is extended by the renewal period
### Cron Automation (`cron-shop.php`)
The cron job checks invoice status to manage servers:
**7 days before expiration:**
- Check if order has unpaid invoice for upcoming period
- If NO unpaid invoice exists → Create one (status: `unpaid`)
- Email customer about upcoming renewal
**On expiration (end_date reached):**
- Check if order has unpaid invoice
- If YES → Suspend server (stop, disable FTP, unassign from user)
- Order status → `suspended`
**7 days after suspension:**
- If still unpaid → Delete server permanently
- Order status → `expired`
## Key Advantages
1. **Clear Payment History:** Each invoice represents one payment
2. **Audit Trail:** Can track when/how much each renewal cost
3. **Flexible Pricing:** Can adjust price per renewal (discounts, promotions)
4. **Multi-Payment Support:** One order can have many invoices
5. **Accurate Status:** Order status reflects server state, invoice status reflects payment
6. **No Race Conditions:** Webhook updates invoice, provisioning updates order
## Cart Logic
**Cart page displays:**
- All invoices with `status = 'unpaid'` for the current user
- Groups by order_id to show which server each invoice is for
- Total amount = SUM of all unpaid invoice amounts
**After payment:**
- Invoice `status` → `paid`
- Invoice `paid_date` → NOW()
- Invoice `payment_txid` → transaction ID from PayPal/Stripe
- Order `status` → `paid` (if new order) or `end_date` extended (if renewal)
## My Account Logic
**Show Invoices Section:**
- Group invoices by status (unpaid, paid, overdue)
- Display invoice_date, amount, status
- Link to view invoice details
**Show Current Servers Section:**
- Display orders with `status = 'installed'`
- Show end_date (expiration)
- "Renew" button creates new invoice
## Migration Notes
- Run `migration_to_invoices.sql` on existing installations
- Creates `billing_invoices` table
- Adds missing columns to `billing_orders`
- Migrates existing paid orders to have invoices
- Removes obsolete `billing_carts` table

223
Panel/modules/billing/LOGGING_CHANGES_SUMMARY.md Normal file
View file

@ -0,0 +1,223 @@
# PayPal Payment Flow Logging Enhancement - Summary
## Problem Addressed
Users were experiencing intermittent errors when clicking "Pay from PayPal" button:
- **JSON parsing errors**
- **HTTP ERROR 500**
- **"Currently unable to handle this request"** errors
These errors would "flip-flop" between different types, making diagnosis difficult without proper logging.
## Solution Implemented
Added comprehensive logging throughout the entire PayPal payment flow to capture:
- All request/response data
- Error details with full context
- Unique request IDs for tracking
- Database operations and results
- Client-side JavaScript errors
## What Changed
### Modified Files
1. **`api/create_order.php`** - Enhanced with comprehensive logging
- Logs every step of order creation
- Captures request data, OAuth process, PayPal API calls
- Returns request IDs in error messages for tracking
- Logs to: `logs/paypal_create_order.log`
2. **`api/capture_order.php`** - Enhanced existing logging
- Logs payment capture process
- Tracks database operations (invoice updates, order creation)
- Captures all error conditions
- Logs to: `logs/paypal_capture.log`
3. **`cart.php`** - Improved client-side error handling
- Better error messages with reference IDs
- Enhanced console logging for debugging
- Sends errors to server for centralized logging
- Better user feedback during payment process
4. **`api/log_error.php`** - NEW: Client error logging endpoint
- Captures JavaScript errors from browser
- Logs to: `logs/client_errors.log`
### New Files
1. **`PAYPAL_DEBUGGING_GUIDE.md`** - Comprehensive debugging guide
- How to read logs
- Common issues and solutions
- Request flow documentation
- Monitoring commands
2. **`QUICK_DEBUG_REFERENCE.md`** - Quick reference card
- Common commands
- Error patterns
- Quick fixes
- Troubleshooting checklist
## How to Use
### When an error occurs:
1. **User will see an error message with a reference ID**, for example:
```
Failed to create order: API error 500 (Ref: req_abc123)
```
2. **Search the logs for that reference ID**:
```bash
cd /home/runner/work/GSP/GSP/modules/billing/logs
grep "req_abc123" paypal_create_order.log
```
3. **Review the full request flow** to identify where it failed
4. **Refer to the debugging guide** for common solutions
### Monitor logs in real-time:
```bash
cd /home/runner/work/GSP/GSP/modules/billing/logs
tail -f paypal_*.log
```
### Check for errors:
```bash
cd /home/runner/work/GSP/GSP/modules/billing/logs
grep -i error paypal_create_order.log
grep -i failed paypal_capture.log
```
## Log Files
All logs are written to: `/modules/billing/logs/`
| Log File | Purpose | When Created |
|----------|---------|--------------|
| `paypal_create_order.log` | Order creation requests | When user clicks "Pay with PayPal" |
| `paypal_capture.log` | Payment capture process | After PayPal approval, during payment capture |
| `client_errors.log` | JavaScript/browser errors | When browser encounters errors |
## Request Tracking
Each request has a unique ID:
- **Create order**: `req_XXXXXXXXXXXXX`
- **Capture order**: `cap_XXXXXXXXXXXXX`
These IDs:
- Appear in error messages shown to users
- Are logged in every log entry for that request
- Can be used to track a request through the entire flow
## Log Entry Format
```
[TIMESTAMP] [REQUEST_ID] LOG_LABEL
key => value
key => value
--------------------------------------------------------------------------------
```
Example:
```
[2025-10-29 21:30:00] [req_abc123] OAUTH_SUCCESS
token_length => 1024
--------------------------------------------------------------------------------
```
## What Gets Logged
### Create Order Flow (`api/create_order.php`):
- ✓ Incoming request data (amount, currency, items)
- ✓ JSON parsing status
- ✓ OAuth token acquisition
- ✓ PayPal order creation request/response
- ✓ All error conditions with full details
### Capture Order Flow (`api/capture_order.php`):
- ✓ Payment capture request
- ✓ OAuth process
- ✓ Database connection status
- ✓ Invoice update queries and results
- ✓ Order creation/renewal operations
- ✓ All error conditions with full details
### Client-Side (`cart.php` → `log_error.php`):
- ✓ JavaScript errors
- ✓ PayPal SDK errors
- ✓ Network failures
- ✓ JSON parsing errors
## Benefits
1. **Full Visibility**: Every step of payment flow is now logged
2. **Easy Troubleshooting**: Request IDs link user reports to log entries
3. **Root Cause Analysis**: Can identify exactly where and why failures occur
4. **Pattern Detection**: Can identify if errors are consistent or intermittent
5. **Better User Experience**: Users get reference IDs to report issues
## Next Steps
1. **Monitor the logs** after deploying this change
2. **Analyze error patterns** to identify the root cause
3. **Review common errors** in the debugging guide
4. **Fix underlying issues** once identified
## Documentation
- **Full Guide**: `PAYPAL_DEBUGGING_GUIDE.md`
- **Quick Reference**: `QUICK_DEBUG_REFERENCE.md`
- **This Summary**: `LOGGING_CHANGES_SUMMARY.md`
## Testing
The logging system has been tested and verified to work correctly. All components:
- ✓ Write to correct log files
- ✓ Include proper timestamps and request IDs
- ✓ Format data correctly
- ✓ Handle errors gracefully
## Maintenance
### Log Rotation
Logs will grow over time. Consider setting up log rotation:
```bash
# Manual rotation
cd /home/runner/work/GSP/GSP/modules/billing/logs
gzip paypal_create_order.log
mv paypal_create_order.log.gz paypal_create_order.$(date +%Y%m%d).log.gz
touch paypal_create_order.log
```
Or use `logrotate` (see `PAYPAL_DEBUGGING_GUIDE.md` for details).
### Monitoring
Set up automated monitoring to alert on:
- High error rates
- Specific error patterns (OAuth failures, DB connection issues)
- Unusual request volumes
## Support
If you encounter issues or need help interpreting logs:
1. Check `PAYPAL_DEBUGGING_GUIDE.md` for common issues
2. Review `QUICK_DEBUG_REFERENCE.md` for quick fixes
3. Provide log excerpts (with request IDs) when asking for help
## Changes Made By
- Enhanced logging system - Added 2025-10-29
- Documentation created - 2025-10-29
- Testing completed - 2025-10-29
---
**The intermittent JSON/HTTP 500 errors should now be fully traceable and debuggable with this comprehensive logging system.**

201
Panel/modules/billing/MIGRATION_SUMMARY.md Normal file
View file

@ -0,0 +1,201 @@
# Billing System Migration Summary
## Files Modified
### 1. `module.php` - Database Schema
**Changes:**
- Removed all legacy `ALTER TABLE` migration queries (db_version reset to 1)
- Updated to single clean install with current schema
- Added `ogp_billing_invoices` table definition
- Added missing columns to `billing_orders`: `order_date`, `payment_txid`, `paid_ts`
- Changed `end_date` from VARCHAR to DATETIME
- Removed obsolete columns: `cart_id`, `extended`
- Removed `billing_carts` table (replaced by invoices)
- Added proper indexes for performance
### 2. `cron-shop.php` - Server Lifecycle Automation
**Fixed Logic Errors:**
- OLD BUG: Was deleting servers with `status='paid'` or `status='installed'` if end_date was close
- NEW: Only processes servers based on **invoice payment status**, not just order status
- Now uses `billing_invoices` table to determine if payment is due
**New 3-Step Process:**
1. **Create Renewal Invoices** (7 days before expiration)
- Find `installed` servers expiring soon
- Check if unpaid invoice exists
- If not, create renewal invoice
- Send email reminder
2. **Suspend Servers** (on expiration with unpaid invoice)
- Find `installed` servers past end_date
- Check if they have unpaid invoices
- Stop server, disable FTP, unassign from user
- Status → `suspended`
3. **Delete Servers** (7 days after suspension)
- Find `suspended` servers 7+ days past end_date
- Still have unpaid invoices
- Permanently delete files and database
- Status → `deleted`
## New Files Created
### 1. `migration_to_invoices.sql`
**Purpose:** Upgrade existing installations
**What it does:**
- Adds new columns to `billing_orders`
- Creates `billing_invoices` table
- Migrates existing paid orders to have invoice records
- Removes obsolete `billing_carts` table
- Adds performance indexes
### 2. `INVOICE_SYSTEM.md`
**Purpose:** Documentation
**Contents:**
- Table schemas explained
- Workflow diagrams
- Status field definitions
- Cron automation logic
- Migration instructions
## SQL for Fresh Install
The `module.php` now contains clean CREATE TABLE statements for:
### ogp_billing_services
```sql
CREATE TABLE `ogp_billing_services` (
service_id INT AUTO_INCREMENT PRIMARY KEY,
service_name VARCHAR(255),
remote_server_id VARCHAR(255),
price_monthly FLOAT(15,4),
enabled INT DEFAULT 1,
... [other fields]
);
```
### ogp_billing_orders
```sql
CREATE TABLE `ogp_billing_orders` (
order_id INT AUTO_INCREMENT PRIMARY KEY,
user_id INT NOT NULL,
service_id INT NOT NULL,
home_name VARCHAR(255),
home_id VARCHAR(255),
status VARCHAR(16) DEFAULT 'in-cart',
order_date DATETIME DEFAULT CURRENT_TIMESTAMP,
end_date DATETIME NULL,
payment_txid VARCHAR(255) NULL,
paid_ts DATETIME NULL,
... [other fields]
KEY (user_id),
KEY (status),
KEY (home_id)
);
```
### ogp_billing_invoices (NEW)
```sql
CREATE TABLE `ogp_billing_invoices` (
invoice_id INT AUTO_INCREMENT PRIMARY KEY,
order_id INT NOT NULL,
user_id INT NOT NULL,
customer_name VARCHAR(255),
customer_email VARCHAR(255),
amount FLOAT(15,2),
currency VARCHAR(3) DEFAULT 'USD',
status VARCHAR(16) DEFAULT 'unpaid',
invoice_date DATETIME DEFAULT CURRENT_TIMESTAMP,
due_date DATETIME NULL,
paid_date DATETIME NULL,
payment_txid VARCHAR(255),
payment_method VARCHAR(50),
description VARCHAR(500),
invoice_duration VARCHAR(16),
qty INT DEFAULT 1,
KEY (order_id),
KEY (user_id),
KEY (status),
KEY (due_date)
);
```
## Migration Steps for Existing Installations
1. **Backup Database**
```bash
mysqldump -u root -p ogp_panel > backup_before_invoice_migration.sql
```
2. **Run Migration Script**
```bash
mysql -u root -p ogp_panel < modules/billing/migration_to_invoices.sql
```
3. **Verify Tables**
```sql
SHOW TABLES LIKE 'ogp_billing%';
-- Should show: billing_services, billing_orders, billing_invoices
DESCRIBE ogp_billing_orders;
-- Should have: order_date, payment_txid, paid_ts, end_date (DATETIME)
DESCRIBE ogp_billing_invoices;
-- Should exist with all invoice fields
```
4. **Test Cron Job**
```bash
cd /path/to/ogp/web
php modules/billing/cron-shop.php
```
5. **Check Logs**
```sql
SELECT * FROM ogp_logger WHERE type LIKE '%BILLING-CRON%' ORDER BY date DESC LIMIT 20;
```
## Key Improvements
1. **Accurate Server Management**
- Servers only suspended if they have **unpaid invoices**
- Active paid servers are never touched
- Clear separation between order state and payment state
2. **Audit Trail**
- Every payment creates an invoice record
- Can track payment history per server
- Know exactly when/why server was suspended
3. **Flexible Pricing**
- Each renewal can have different price
- Support for discounts and promotions
- Currency per invoice (multi-currency support ready)
4. **Better Customer Experience**
- Clear invoice emails with due dates
- 7-day warning before expiration
- 7-day grace period before deletion
## Status Field Values Reference
### billing_orders.status
- `in-cart` - Initial state, unpaid
- `paid` - Payment received, awaiting provisioning
- `installed` - Server active and running ✅
- `suspended` - Stopped due to non-payment
- `deleted` - Permanently removed
- `expired` - Service ended
- `renew` - Renewal in cart (legacy, now uses invoices)
### billing_invoices.status
- `unpaid` - Invoice created, awaiting payment
- `paid` - Invoice paid successfully
## Next Steps for Implementation
1. Update cart.php to show invoices instead of orders
2. Update my_account.php "Renew" button to create invoices
3. Update payment success flow to mark invoices paid
4. Add invoice viewing page
5. Test full workflow: order → pay → renew → pay renewal

300
Panel/modules/billing/PANEL_INTEGRATION.md Normal file
View file

@ -0,0 +1,300 @@
# GSP Billing Module - Panel Integration Complete
## Overview
The GSP billing module has been successfully integrated with the panel-side provisioning system. The standalone website handles public orders and payments, while the panel manages server provisioning.
## Changes Made
### 1. Navigation Configuration (`navigation.xml`)
**File:** `modules/billing/navigation.xml`
Created XML configuration to expose billing pages in the panel:
- `provision_servers` → `create_servers.php` (admin,user)
- `my_orders` → `my_orders_panel.php` (admin,user)
- `admin_orders` → `admin_orders.php` (admin only)
**Access URLs:**
- `home.php?m=billing&p=provision_servers` - Provision paid servers
- `home.php?m=billing&p=my_orders` - View user's orders
- `home.php?m=billing&p=admin_orders` - Admin order management
### 2. User Order Management (`my_orders_panel.php`)
**File:** `modules/billing/my_orders_panel.php`
User-facing page displaying paid but unprovisioned orders:
- Shows order details (service name, players, price, duration)
- "Provision Server" button for individual orders
- "Provision All My Servers" button for bulk provisioning
- Admin view includes username column
- Filters to show only `status='paid'` orders
### 3. Server Provisioning Updates (`create_servers.php`)
**File:** `modules/billing/create_servers.php`
Enhanced provisioning script to handle multiple workflows:
**NEW: provision_all Support**
```php
if (isset($_POST['provision_all'])) {
// Query all paid orders for user
// Process each in foreach loop
}
```
**NEW: provision_single Support**
```php
if (isset($_POST['provision_single']) && $_POST['order_id']) {
// Query specific order_id
// Process single order
}
```
**Improvements:**
- Added provisioning counters (`$provisioned_count`, `$failed_count`)
- Success message shows count of provisioned servers
- Auto-redirect to game monitor after 3 seconds
- Better error handling for missing order_id
- Clear feedback messages for all scenarios
### 4. Admin Order Management (`admin_orders.php`)
**File:** `modules/billing/admin_orders.php`
Comprehensive admin interface for managing all orders:
**Features:**
- View all orders across all users
- Filter by status (in-cart, paid, installed, invoiced, suspended, deleted)
- Search by order ID, username, email, server name
- Bulk actions:
- Provision multiple servers at once
- Activate (set to paid)
- Suspend orders
- Delete orders
- Quick links to provision or view active servers
- Order statistics summary (count and total value by status)
**Display Columns:**
- Order ID, Username, Email
- Server Name, Game Service, Players
- Price, Duration, Status
- Order Date, End Date, Home ID
- Action buttons
## Multi-Server Cart Support
The system already supports multiple servers in a single cart:
**How it works:**
1. Customer adds multiple services to cart on standalone website
2. Payment processed, all items marked `status='paid'`
3. User logs into panel → navigates to "My Orders"
4. Clicks "Provision All My Servers" button
5. `create_servers.php` queries all `WHERE status='paid' AND user_id=X`
6. `foreach ($orders as $order)` loop processes each:
- Creates game_home
- Assigns IP:Port
- Installs files via Steam/rsync/manual
- Calculates end_date based on duration
- Updates `status='installed'`, saves `home_id`, sets `end_date`
- Sends email and Discord notifications
7. All servers appear in Game Monitor as active
**Database Flow:**
```
billing_orders table:
status='in-cart' → (payment) → status='paid' → (provision) → status='installed'
↓
(renewal invoice) → status='invoiced'
↓
(non-payment) → status='suspended'
```
## Testing Workflow
### User Perspective:
1. Order servers on standalone website at `example.com/modules/billing/`
2. Complete payment (PayPal, Stripe, etc.)
3. Orders marked `status='paid'` in database
4. Log into panel at `panel.example.com/`
5. Navigate to `home.php?m=billing&p=my_orders`
6. Click "Provision Server" for individual order OR "Provision All" for bulk
7. Wait for provisioning (creates server, installs files)
8. Redirected to Game Monitor showing active servers
### Admin Perspective:
1. Log into panel with admin account
2. Navigate to `home.php?m=billing&p=admin_orders`
3. View all orders across all users
4. Filter by status or search for specific orders
5. Select multiple orders with checkboxes
6. Choose bulk action (provision, suspend, activate, delete)
7. Click individual "Provision" buttons for specific orders
8. Monitor order statistics at bottom of page
## Order Status Lifecycle
```
in-cart → User shopping, not paid yet
paid → Payment received, awaiting provisioning
installed → Server created and active
invoiced → Renewal invoice generated
suspended → Server suspended (non-payment, violation)
deleted → Order soft-deleted
```
## Database Schema Reference
### billing_orders Table (Key Fields)
- `order_id` - Primary key
- `user_id` - Links to ogp_users.user_id
- `service_id` - Links to billing_services.service_id
- `home_id` - Links to game_homes.home_id (after provisioning)
- `status` - Current order status (in-cart, paid, installed, etc.)
- `home_name` - Display name for server
- `max_players` - Player slot limit
- `price` - Order amount paid
- `qty` - Duration quantity (e.g., 3 for "3 months")
- `invoice_duration` - Duration unit (day, month, year)
- `order_date` - When order was created
- `end_date` - When service expires (calculated after provisioning)
- `extended` - Boolean flag for renewals vs new orders
- `ip` - Contains remote_server_id (target node)
### billing_services Table
- `service_id` - Primary key
- `service_name` - Display name (e.g., "Minecraft 25 Players")
- `home_cfg_id` - Links to game configs
- `mod_cfg_id` - Specific mod/version
- `install_method` - steam, rsync, manual
- `manual_url` - Direct download URL for manual installs
## Key Files Overview
```
modules/billing/
├── navigation.xml [NEW] - Panel page routing
├── my_orders_panel.php [NEW] - User order list
├── admin_orders.php [NEW] - Admin order management
├── create_servers.php [UPDATED] - Server provisioning
├── module.php [EXISTING] - Module metadata & schema
├── index.php [STANDALONE SITE] - Public storefront
├── cart.php [STANDALONE SITE] - Shopping cart
├── order.php [STANDALONE SITE] - Order checkout
├── payment_success.php [STANDALONE SITE] - Payment return
└── ... [STANDALONE SITE] - Other public pages
```
## Access Control
**User (admin,user):**
- Can provision their own paid orders
- View only their own orders
- Cannot manage other users' orders
**Admin (admin):**
- Full access to all pages
- Can provision any user's orders
- View and manage all orders across all users
- Bulk actions on multiple orders
- Access to order statistics
## Next Steps
1. **Test provisioning workflow:**
- Create test order with `status='paid'` in database
- Log in as that user
- Navigate to My Orders page
- Click "Provision Server" and verify server creation
2. **Test multi-server scenario:**
- Create multiple orders for same user with `status='paid'`
- Use "Provision All" button
- Verify all servers created and statuses updated
3. **Admin testing:**
- Log in as admin
- Access admin_orders page
- Test filters and search
- Test bulk actions
- Verify order statistics display
4. **Optional: Add menu items**
Edit `modules/billing/module.php` to add navigation menu:
```php
$module_menus = array(
array('subpage' => 'my_orders', 'name'=>'My Orders', 'group'=>'user'),
array('subpage' => 'admin_orders', 'name'=>'Manage Orders', 'group'=>'admin')
);
```
## Troubleshooting
**Issue: "No paid orders found"**
- Check database: `SELECT * FROM billing_orders WHERE status='paid'`
- Verify user_id matches logged-in user
- Ensure order_id is correct if using provision_servers directly
**Issue: Provisioning fails**
- Check create_servers.php for errors
- Verify remote_server_id (stored in ip field) is valid
- Ensure install_method is configured correctly (steam, rsync, manual)
- Check manual_url is accessible if using manual install
**Issue: Page not accessible**
- Verify navigation.xml is in `modules/billing/` directory
- Check XML syntax is valid
- Ensure file permissions allow reading
- Verify includes/navig.php is loading the module correctly
**Issue: "Access Denied"**
- Check user session: `$_SESSION['users_group']` must match page access
- admin_orders requires `$_SESSION['users_group'] = 'admin'`
- Regular pages need 'admin' or 'user' group
## Architecture Notes
**Separation of Concerns:**
- Standalone website: Public ordering, payment processing, cart management
- Panel: Server provisioning, lifecycle management, admin controls
- Database: Shared MySQL tables for order/service data
**Module Loading Pattern:**
1. User requests `home.php?m=billing&p=my_orders`
2. `includes/navig.php` validates module exists
3. Loads `modules/billing/navigation.xml`
4. Finds page with `key="my_orders"`
5. Checks user access against `access="admin,user"`
6. Includes `modules/billing/my_orders_panel.php`
7. Calls `exec_ogp_module()` function
8. Renders output in panel layout
**Multi-Server Processing:**
The `foreach ($orders as $order)` loop in create_servers.php handles multiple servers naturally:
- Query returns all paid orders for user
- Loop processes each order sequentially
- Each iteration creates one game_home
- Each iteration updates one order to 'installed'
- No special cart logic needed - works automatically
## Success Criteria Checklist
✅ navigation.xml created with 3 page definitions
✅ my_orders_panel.php displays user's paid orders
✅ Provision buttons link to create_servers.php with order_id
✅ create_servers.php handles provision_all and provision_single
✅ Multi-server support via foreach loop (already existed)
✅ admin_orders.php provides comprehensive order management
✅ Bulk actions for admin (provision, suspend, activate, delete)
✅ Status updates: paid → installed with end_date calculation
✅ home_id saved back to billing_orders after provisioning
✅ Success messages and auto-redirect after provisioning
✅ Access control enforced via navigation.xml attributes
## Conclusion
The GSP billing module is now fully integrated with the panel provisioning system. Users can order servers on the standalone website, then log into the panel to provision them. Admins have comprehensive tools to manage all orders. The multi-server cart functionality works automatically via the existing foreach loop.
**Panel URLs:**
- User Orders: `home.php?m=billing&p=my_orders`
- Admin Orders: `home.php?m=billing&p=admin_orders`
- Provision: `home.php?m=billing&p=provision_servers&order_id=X`

282
Panel/modules/billing/PAYMENT_IMPLEMENTATION_SUMMARY.md Normal file
View file

@ -0,0 +1,282 @@
# Payment System Implementation Summary
**Date:** November 5, 2025
**Status:** ✅ COMPLETED - Ready for Testing
## What Was Done
### 1. **Updated Copilot Instructions** ✅
- Added explicit standalone/relocatable requirements for `modules/billing/`
- Emphasized: NEVER include panel files, use only standard PHP mysqli
- Documented that billing module can be deployed on separate web host
- All URLs must be root-relative (no `/modules/billing/` in runtime paths)
### 2. **Documented Status Values** ✅
**Invoice Status** (`ogp_billing_invoices.status`):
- `due` - Unpaid invoice, awaiting payment
- `paid` - Invoice paid, order created
- `pending` - Legacy status (some admin pages use this)
- `renew` - Renewal invoice
**Order Status** (`ogp_billing_orders.status`):
- `paid` - Payment received, awaiting server provisioning (panel auto-creates and marks `active`)
- `active` - Server provisioned and running
- `suspended` - Payment overdue, server stopped (grace period)
- `deleted` - Server permanently removed
- `renew` - Active but needs renewal payment
### 3. **Rebuilt Cart System** ✅
**File:** `modules/billing/cart.php`
**Features:**
- Displays all unpaid invoices (`status='due'`) for logged-in user
- Shows: Game type, server name, duration, quantity, price
- Professional table layout with totals
- PayPal JS SDK integration (client-side payment)
- Calls `/api/capture_order.php` backend after PayPal approval
- Handles empty cart gracefully
- Uses only standard mysqli (standalone compatible)
**Payment Flow:**
1. User clicks PayPal button
2. PayPal JS SDK creates order and processes payment
3. On approval, calls our `/api/capture_order.php` with order_id
4. Backend marks invoices paid, creates orders
5. Redirects to `/payment_success.php`
### 4. **Rewrote Payment Capture Backend** ✅
**File:** `modules/billing/api/capture_order.php` (old version backed up as `.backup`)
**Features:**
- Simplified from 461 lines to ~250 lines
- Clean output buffering (prevents JSON corruption)
- Comprehensive logging to `logs/payment_capture.log`
- Verifies PayPal order capture
- Marks all `due` invoices as `paid`
- Creates `billing_orders` records with `status='paid'`
- Stores full PayPal response JSON in `paypal_data` column
- Returns minimal JSON response (no truncation issues)
**Security:**
- No output before JSON response
- Validates session user_id
- Logs all steps for debugging/audit trail
- Stores PayPal transaction ID for refunds
### 5. **Enhanced Success Page** ✅
**File:** `modules/billing/payment_success.php`
**Features:**
- Professional confirmation page with success icon
- Shows recent orders with details
- Explains next steps (panel auto-provisioning)
- Links to account management and order pages
- Uses only standard mysqli (standalone compatible)
## Database Schema
### Required Tables (Already Exist)
- ✅ `ogp_billing_invoices` - Stores invoices (due/paid)
- ✅ `ogp_billing_orders` - Stores orders (paid/active/suspended/deleted)
- ✅ `ogp_billing_services` - Game server packages/pricing
- ✅ `ogp_billing_coupons` - Discount coupons
### New Column Required
**Run this SQL:**
```sql
ALTER TABLE `ogp_billing_orders`
ADD COLUMN `paypal_data` TEXT NULL AFTER `payment_txid`
COMMENT 'Full PayPal API response JSON for tracking/refunds';
```
**File:** `modules/billing/add_paypal_data_column.sql`
## Payment Flow Diagram
```
User → order.php (select server)
↓
add_to_cart.php (create invoice with status='due')
↓
cart.php (show unpaid invoices + PayPal button)
↓
PayPal Checkout (user pays)
↓
api/capture_order.php (backend processing):
- Verify PayPal payment
- Mark invoices status='paid'
- Create orders with status='paid'
- Store PayPal JSON data
↓
payment_success.php (confirmation)
↓
User logs into Panel
↓
Panel auto-provisions servers (paid → active)
```
## Configuration
### PayPal Credentials
**Location:** `modules/billing/api/capture_order.php` (lines 44-45)
```php
$sandbox = true; // Set to false for live
$client_id = 'YOUR_CLIENT_ID';
$client_secret = 'YOUR_CLIENT_SECRET';
```
**Also update in:** `modules/billing/cart.php` (line 47)
### Database Connection
**Location:** `modules/billing/includes/config.inc.php`
```php
$db_host = "your_host";
$db_user = "your_user";
$db_pass = "your_password";
$db_name = "panel";
$table_prefix = "ogp_";
```
## Testing Checklist
### Pre-Test Setup
- [ ] Run SQL: `add_paypal_data_column.sql`
- [ ] Verify PayPal sandbox credentials are set
- [ ] Confirm database connection works
- [ ] Ensure user is logged in (session has `website_user_id`)
### Test Flow
1. **Order Creation**
- [ ] Go to `/order.php`
- [ ] Select a game server
- [ ] Configure settings
- [ ] Click "Add to Cart"
- [ ] Verify invoice created in `ogp_billing_invoices` with `status='due'`
2. **Cart Display**
- [ ] Go to `/cart.php`
- [ ] Verify invoice(s) displayed with correct details
- [ ] Verify total amount is correct
- [ ] Verify PayPal button appears
3. **Payment Processing**
- [ ] Click PayPal button
- [ ] Complete sandbox payment
- [ ] Check `logs/payment_capture.log` for processing details
- [ ] Verify no JSON errors in browser console
- [ ] Verify redirected to `/payment_success.php`
4. **Database Verification**
- [ ] Check `ogp_billing_invoices`: `status='paid'`, `payment_txid` set
- [ ] Check `ogp_billing_orders`: New record with `status='paid'`
- [ ] Check `paypal_data` column contains JSON
- [ ] Verify `order_id` in invoice links to order
5. **Success Page**
- [ ] Verify order(s) displayed
- [ ] Verify correct amounts shown
- [ ] Verify all links work
6. **Panel Provisioning** (Future - Not Implemented Yet)
- [ ] Log into panel
- [ ] Panel detects orders with `status='paid'`
- [ ] Panel creates game server homes
- [ ] Panel updates order `status='active'`
## What's NOT Done Yet (Todo)
### High Priority
- [ ] **Email Notifications** - Send confirmation email after payment
- [ ] **Invoice History Page** - Show user's paid invoices (`my_invoices.php`)
- [ ] **Suspended Status Support** - Verify cron job handles suspended orders correctly
### Medium Priority
- [ ] **Refund System** - Admin interface to issue PayPal refunds using stored JSON data
- [ ] **Webhook Support** - Add PayPal webhook handler for payment verification (more secure than client-side)
- [ ] **Coupon Application** - Apply discount coupons during checkout
### Low Priority
- [ ] **Multi-currency Support** - Currently USD only
- [ ] **Tax Calculation** - Add tax/VAT support
- [ ] **Payment Plans** - Recurring subscriptions via PayPal
## Files Modified
### Core Payment Files
- ✅ `modules/billing/cart.php` - Complete rewrite
- ✅ `modules/billing/api/capture_order.php` - Simplified rewrite (old backed up)
- ✅ `modules/billing/payment_success.php` - Enhanced with order display
### Configuration
- ✅ `.github/copilot-instructions.md` - Added standalone/relocatable requirements
### Database
- ✅ `modules/billing/add_paypal_data_column.sql` - New migration file
### Existing Files (Not Modified)
- `modules/billing/add_to_cart.php` - Already working correctly
- `modules/billing/order.php` - Already working correctly
- `modules/billing/includes/config.inc.php` - Config file (no changes needed)
## Troubleshooting
### Issue: JSON Parse Error
**Cause:** Output before JSON response (whitespace, errors, warnings)
**Fix:** Check `logs/payment_capture.log` for errors. Ensure `ob_start()` at top of `capture_order.php`
### Issue: No Orders Created
**Cause:** User not logged in or session lost
**Fix:** Verify session contains `website_user_id` or `user_id`
### Issue: Invoices Not Marked Paid
**Cause:** Database connection failed or SQL error
**Fix:** Check `logs/payment_capture.log` for database errors
### Issue: PayPal Button Doesn't Appear
**Cause:** Empty cart or JS error
**Fix:** Check browser console. Verify invoices exist with `status='due'`
### Issue: 500 Error on capture_order.php
**Cause:** PHP error in capture script
**Fix:** Check `logs/payment_capture.log` and PHP error logs
## Deployment Notes
### Same Host Deployment
Files already at correct location: `modules/billing/`
### External Host Deployment
1. Copy entire `modules/billing/` directory to external web host
2. Deploy at website root (not in subdirectory)
3. Update `includes/config.inc.php` with panel database credentials
4. Ensure external host can connect to panel database (firewall/network)
5. Update PayPal return URLs to external domain
## Security Considerations
✅ **Implemented:**
- Output buffering prevents JSON corruption
- SQL injection protection (mysqli_real_escape_string)
- Session validation (user_id required)
- PayPal OAuth token authentication
- Comprehensive audit logging
⚠️ **Recommended (Not Implemented):**
- CSRF token validation on payment endpoints
- Rate limiting on API endpoints
- PayPal webhook signature verification
- IP whitelisting for admin functions
## Support & Maintenance
### Log Files
- `modules/billing/logs/payment_capture.log` - Payment processing log
- `modules/billing/logs/add_to_cart.log` - Cart/invoice creation log
- `modules/billing/logs/site.log` - General site log
### Key Functions
- `capture_order.php::log_payment()` - Payment logging function
- Database schema in `create_invoices_table.sql`
### Contact
For issues or questions, refer to:
- GitHub repo: `GameServerPanel/GSP` branch `Panel-unstable`
- This summary: `modules/billing/PAYMENT_IMPLEMENTATION_SUMMARY.md`

316
Panel/modules/billing/PAYPAL_DEBUGGING_GUIDE.md Normal file
View file

@ -0,0 +1,316 @@
# PayPal Payment Flow Debugging Guide
## Overview
This guide explains how to diagnose and troubleshoot PayPal payment errors using the comprehensive logging system that has been added to the payment flow.
## Problem Being Addressed
Users were experiencing intermittent errors when clicking "Pay from PayPal" button:
- JSON parsing errors
- HTTP ERROR 500
- "Currently unable to handle this request" errors
These errors would "flip-flop" between different error types, making it difficult to diagnose the root cause.
## Log Files Location
All logs are stored in: `/modules/billing/logs/`
### Available Log Files
1. **`paypal_create_order.log`** - Logs all PayPal order creation requests
- When: Created when user clicks "Pay with PayPal" button
- Contains: Request data, OAuth tokens, PayPal API responses
2. **`paypal_capture.log`** - Logs all payment capture attempts
- When: Created when PayPal redirects user back after approving payment
- Contains: Capture requests, database operations, order creation
3. **`client_errors.log`** - Logs JavaScript errors from browser
- When: Created when browser encounters errors during checkout
- Contains: Client-side errors, PayPal SDK issues, network failures
## How to Debug Payment Issues
### Step 1: Identify the Request
Each request has a unique ID for tracking:
- Create order requests: `req_XXXXX`
- Capture order requests: `cap_XXXXX`
Look for these IDs in error messages shown to users.
### Step 2: Check the Logs
#### For "Failed to create order" errors:
```bash
tail -100 /modules/billing/logs/paypal_create_order.log
```
Look for:
- `JSON_DECODE_ERROR` - Invalid input from cart.php
- `OAUTH_CURL_ERROR` or `OAUTH_HTTP_ERROR` - Can't connect to PayPal
- `CREATE_ORDER_HTTP_ERROR` - PayPal rejected the order
#### For "Payment capture failed" errors:
```bash
tail -100 /modules/billing/logs/paypal_capture.log
```
Look for:
- `OAUTH_*_ERROR` - Authentication issues
- `CAPTURE_HTTP_ERROR` - PayPal rejected capture
- `DB_CONNECTION_FAILED` - Database issues
- `UPDATE_INVOICES_FAILED` - Can't mark invoices as paid
- `ORDER_CREATE_FAILED` - Can't create order record
#### For client-side errors:
```bash
tail -100 /modules/billing/logs/client_errors.log
```
Look for:
- Network errors (fetch failed)
- PayPal SDK errors
- JSON parsing errors
### Step 3: Common Issues and Solutions
#### Issue: OAuth fails (OAUTH_HTTP_ERROR)
**Log entry example:**
```
[2025-10-29 21:30:00] [req_12345] OAUTH_HTTP_ERROR
http_code => 401
```
**Cause:** Invalid PayPal credentials
**Solution:** Check that `$client_id` and `$client_secret` in `api/create_order.php` and `api/capture_order.php` are correct.
---
#### Issue: JSON decode error
**Log entry example:**
```
[2025-10-29 21:30:00] [req_12345] JSON_DECODE_ERROR
error => Syntax error
```
**Cause:** Malformed JSON from cart.php or corrupted request
**Solution:**
1. Check the `RAW_INPUT` entry before the error
2. Verify cart.php is sending valid JSON
3. Check for PHP errors that might corrupt the output
---
#### Issue: PayPal returns error creating order
**Log entry example:**
```
[2025-10-29 21:30:00] [req_12345] CREATE_ORDER_HTTP_ERROR
http_code => 400
response => {"name":"INVALID_REQUEST","details":[{"issue":"..."}]}
```
**Cause:** Invalid order data sent to PayPal
**Solution:**
1. Look at `PAYPAL_ORDER_PAYLOAD` entry to see what was sent
2. Common issues:
- Invalid amount format (must be 2 decimals)
- Invalid currency code
- Malformed items array
- Invalid URLs (return_url, cancel_url must be absolute URLs)
---
#### Issue: Database connection failed
**Log entry example:**
```
[2025-10-29 21:30:00] [cap_12345] DB_CONNECTION_FAILED
error => Access denied for user
```
**Cause:** Can't connect to database
**Solution:**
1. Check database credentials in `includes/config.inc.php`
2. Verify database server is running
3. Check database permissions
---
#### Issue: Invoice update failed
**Log entry example:**
```
[2025-10-29 21:30:00] [cap_12345] UPDATE_INVOICES_FAILED
error => Table 'ogp_billing_invoices' doesn't exist
```
**Cause:** Database schema issue
**Solution:**
1. Verify table exists and has correct name
2. Check `$table_prefix` variable in config
3. Run database migrations if needed
## Log Entry Structure
Each log entry includes:
```
[TIMESTAMP] [REQUEST_ID] LOG_LABEL
key => value
key => value
--------------------------------------------------------------------------------
```
- **TIMESTAMP**: When the event occurred (Y-m-d H:i:s format)
- **REQUEST_ID**: Unique identifier for tracking the request
- **LOG_LABEL**: What happened (e.g., OAUTH_SUCCESS, CREATE_ORDER_FAILED)
- **Data**: Relevant data for the event (arrays/objects pretty-printed)
## Request Flow with Logging
### Creating an Order
1. User clicks "Pay with PayPal" in cart.php
2. JavaScript calls `api/create_order.php`
3. Logs generated:
- `REQUEST_START` - Initial request info
- `RAW_INPUT` - What was received
- `PARSED_INPUT` - Decoded data
- `OAUTH_REQUEST_START` - Starting OAuth
- `OAUTH_RESPONSE` - OAuth result
- `OAUTH_SUCCESS` or `OAUTH_*_ERROR`
- `CREATE_ORDER_REQUEST_START` - Sending to PayPal
- `CREATE_ORDER_RESPONSE` - PayPal's response
- `CREATE_ORDER_SUCCESS` or `CREATE_ORDER_*_ERROR`
### Capturing Payment
1. User approves payment on PayPal
2. PayPal redirects back to site
3. JavaScript calls `api/capture_order.php`
4. Logs generated:
- `REQUEST_START` - Initial request
- `RAW_INPUT` - Order ID received
- `PARSED_INPUT` - Decoded data
- `OAUTH_*` - Authentication steps
- `CAPTURE_REQUEST_START` - Starting capture
- `CAPTURE_RESPONSE` - PayPal's response
- `CAPTURE_SUCCESS` or `CAPTURE_*_ERROR`
- `PAYMENT_DETAILS` - Extracted transaction info
- `STARTING_DB_PROCESSING` - Beginning database work
- `DB_CONNECTED` - Database ready
- `SESSION_INFO` - User session details
- `PROCESSING_INVOICES` - Starting invoice processing
- `UPDATE_INVOICES_*` - Invoice update results
- `PROCESSING_INVOICE` - For each invoice
- `NEW_ORDER_DETECTED` or `RENEWAL_DETECTED`
- `ORDER_CREATE_*` or `ORDER_EXTENDED_*`
- `PROCESSING_COMPLETE` - Done
## Monitoring Tips
### Watch logs in real-time
```bash
# Watch create order logs
tail -f /modules/billing/logs/paypal_create_order.log
# Watch capture logs
tail -f /modules/billing/logs/paypal_capture.log
# Watch all logs
tail -f /modules/billing/logs/*.log
```
### Filter for errors only
```bash
grep -i error /modules/billing/logs/paypal_create_order.log
grep -i failed /modules/billing/logs/paypal_capture.log
```
### Find specific request by ID
```bash
grep "req_abc123" /modules/billing/logs/paypal_create_order.log
grep "cap_xyz789" /modules/billing/logs/paypal_capture.log
```
### Count successful vs failed requests
```bash
grep -c "CREATE_ORDER_SUCCESS" /modules/billing/logs/paypal_create_order.log
grep -c "CREATE_ORDER.*ERROR" /modules/billing/logs/paypal_create_order.log
```
## Log Rotation
Logs will grow over time. Consider implementing log rotation:
```bash
# Archive old logs
cd /modules/billing/logs
gzip paypal_create_order.log
mv paypal_create_order.log.gz paypal_create_order.$(date +%Y%m%d).log.gz
touch paypal_create_order.log
```
Or use logrotate:
```
/path/to/modules/billing/logs/*.log {
daily
rotate 7
compress
delaycompress
notifempty
create 0644 www-data www-data
}
```
## Error Messages to Users
When errors occur, users now see messages with request IDs:
- "Failed to create order: API error 500 (Ref: req_abc123)"
- "Payment capture failed: oauth_fail (Ref: cap_xyz789)"
Use these reference IDs to search the logs for the full details.
## Getting Help
When reporting issues, include:
1. The exact error message shown to user (including Ref ID)
2. Relevant log entries (search by Ref ID)
3. What the user was trying to do
4. Whether it's consistent or intermittent
5. Browser console output (F12 → Console tab)
## Additional Resources
- PayPal API Documentation: https://developer.paypal.com/api/rest/
- PayPal Sandbox Testing: https://developer.paypal.com/developer/accounts/
- PayPal Error Codes: https://developer.paypal.com/api/rest/reference/orders/v2/errors/
## Changelog
### 2025-10-29
- Added comprehensive logging to create_order.php
- Enhanced logging in capture_order.php
- Added client-side error logging
- Created debugging guide

149
Panel/modules/billing/PHASE1_COMPLETE_SUMMARY.md Normal file
View file

@ -0,0 +1,149 @@
# Phase 1 Complete: Visual TODO System Implementation
## Date: December 19, 2024
## Summary
Successfully implemented a comprehensive visual identification system for incomplete game documentation. All 146 game folders now have completion tracking, with "TODO: " prefix displayed for incomplete documentation.
## What Was Accomplished
### 1. PowerShell Automation Script Created
**File:** `update_metadata_complete.ps1`
- Scans all game documentation folders
- Adds "complete" field to metadata.json files
- Marks Minecraft as complete (true), all others as incomplete (false)
- Executed successfully: 146 files updated, 2 skipped (already had field)
### 2. Documentation Display System Enhanced
**File:** `modules/billing/docs.php`
- Added logic to read "complete" status from metadata
- Automatically prefixes "TODO: " to incomplete game names
- No visual change for complete documentation
- Maintains proper sorting and categorization
### 3. Metadata Files Updated
**Files Modified:** 146 metadata.json files
- `minecraft/metadata.json` - complete: true ✅
- All other games - complete: false (displays with TODO prefix)
### 4. Documentation Created
- `RECENT_FIXES_SUMMARY.md` - Updated with Phase 1 details
- `GAME_DOCS_TODO_REFERENCE.md` - Complete reference guide for next phases
## Visual Result
### Before:
```
Game Servers (148)
├── 7 Days to Die
├── Aliens vs Predator
├── Arma 3
├── DayZ
├── Minecraft Server
├── Rust
└── ...
```
### After:
```
Game Servers (148)
├── TODO: 7 Days to Die
├── TODO: Aliens vs Predator
├── TODO: Arma 3
├── TODO: DayZ
├── Minecraft Server (✓ complete)
├── TODO: Rust
└── ...
```
## Benefits
1. **Instant Visibility** - Users/developers immediately see which games lack comprehensive docs
2. **Progress Tracking** - As games are completed, TODO prefix disappears
3. **Quality Control** - Clear standard (Minecraft template) vs incomplete stubs
4. **Systematic Completion** - Easy to prioritize and track remaining work
## Minecraft Template Reference (Complete Documentation Standard)
The only game marked complete serves as the template for all others:
- ✅ Comprehensive ports table (ALL ports with purposes)
- ✅ Firewall configurations (4 platforms)
- ✅ Startup parameters (detailed explanations)
- ✅ Troubleshooting sections (specific common issues)
- ✅ Performance optimization
- ✅ Security best practices
- ✅ Resource links with citations
- ✅ ~550 lines of comprehensive content
## Next Phase: ARMA Family + DayZ Documentation
### Priority Games (Phase 2):
1. Arma 3
2. Arma 2: Operation Arrowhead
3. Arma 2
4. Arma 2: Combined Operations (DayZ Mod base)
5. DayZ Standalone
6. DayZ Mod
### Research Sources:
- Bohemia Interactive Wiki
- LGSM (LinuxGSM) scripts and configs
- Reddit: r/arma, r/dayzservers
- BI Forums, DayZ Forums
- Steam Community Guides (highly-rated)
- GitHub repositories with server configurations
- User comments and community solutions
### Time Estimate:
- 6 games × 60 minutes average = ~6 hours total
- Each game: 15-30 min research + 20-30 min writing + 5-10 min review
## Technical Implementation Details
### Metadata Structure:
```json
{
"name": "Game Name",
"description": "Brief description",
"category": "game",
"order": 10,
"complete": false
}
```
### Display Logic (docs.php):
```php
$isComplete = isset($metadata['complete']) ? (bool)$metadata['complete'] : false;
$displayName = $metadata['name'] ?? ucfirst($folder);
if (!$isComplete) {
$displayName = 'TODO: ' . $displayName;
}
```
### Marking Complete:
When documentation is finished, change in metadata.json:
```json
"complete": true
```
## Files Modified Summary
- ✅ `modules/billing/docs.php` - Display logic
- ✅ `modules/billing/update_metadata_complete.ps1` - Automation script
- ✅ `modules/billing/docs/*/metadata.json` - 146 files updated
- ✅ `modules/billing/RECENT_FIXES_SUMMARY.md` - Updated
- ✅ `modules/billing/GAME_DOCS_TODO_REFERENCE.md` - Created
- ✅ `modules/billing/PHASE1_COMPLETE_SUMMARY.md` - This file
## Success Metrics
- ✅ 146 games marked with completion status
- ✅ Visual TODO system working on docs.php
- ✅ 1 complete game (Minecraft) serves as template
- ✅ Clear reference documentation for next phases
- ✅ Systematic approach established for remaining 146 games
## Approval & Sign-off
Phase 1 is complete and ready for Phase 2 (ARMA family research and documentation).
---
**Prepared by:** GitHub Copilot
**Date:** December 19, 2024
**Status:** Phase 1 Complete ✅

186
Panel/modules/billing/QUICK_DEBUG_REFERENCE.md Normal file
View file

@ -0,0 +1,186 @@
# PayPal Payment Flow - Quick Debug Reference
## Quick Commands
### View recent errors:
```bash
cd /home/runner/work/GSP/GSP/modules/billing/logs
# Last 50 lines of create order log
tail -50 paypal_create_order.log
# Last 50 lines of capture log
tail -50 paypal_capture.log
# Last 50 lines of client errors
tail -50 client_errors.log
```
### Watch logs live:
```bash
# In terminal, run:
tail -f /home/runner/work/GSP/GSP/modules/billing/logs/paypal_*.log
```
### Search for specific error:
```bash
# Find all OAuth errors
grep "OAUTH.*ERROR" paypal_create_order.log paypal_capture.log
# Find database errors
grep "DB.*FAILED" paypal_capture.log
# Find a specific request by ID
grep "req_12345" paypal_create_order.log
```
## Common Error Patterns
### ❌ "JSON error" or "unable to handle this request"
**What to check:**
1. Browser console (F12 → Console tab) for JavaScript errors
2. `client_errors.log` for client-side issues
3. `paypal_create_order.log` for `JSON_DECODE_ERROR`
**Quick fix:**
- Check if cart items are valid
- Verify amount calculations are correct
- Look for PHP errors that might corrupt JSON output
---
### ❌ HTTP ERROR 500
**What to check:**
1. `paypal_create_order.log` for `CREATE_ORDER_HTTP_ERROR`
2. `paypal_capture.log` for `CAPTURE_HTTP_ERROR`
3. Look for `OAUTH.*ERROR` entries
**Quick fix:**
- Verify PayPal credentials are correct
- Check PayPal API status: https://www.paypal-status.com/
- Verify sandbox vs live mode settings match credentials
---
### ❌ Payment seems successful but no order created
**What to check:**
1. `paypal_capture.log` for `DB_CONNECTION_FAILED`
2. Look for `UPDATE_INVOICES_FAILED`
3. Check `ORDER_CREATE_FAILED`
**Quick fix:**
- Verify database connection settings
- Check if `ogp_billing_invoices` table exists
- Verify `ogp_billing_orders` table exists
- Check table permissions
---
### ❌ Intermittent failures (works sometimes, fails sometimes)
**What to check:**
1. Compare successful vs failed requests in logs
2. Look for timeout errors (`CURL.*ERROR`)
3. Check for database connection pool exhaustion
**Quick fix:**
- Check server load/resources
- Verify network connectivity to PayPal API
- Check for rate limiting
## Log File Locations
```
/home/runner/work/GSP/GSP/modules/billing/logs/
├── paypal_create_order.log # Order creation (when clicking "Pay")
├── paypal_capture.log # Payment capture (after PayPal approval)
└── client_errors.log # JavaScript/browser errors
```
## Request ID Format
- Create order: `req_XXXXXXXXXXXXX`
- Capture order: `cap_XXXXXXXXXXXXX`
When user sees an error with `(Ref: req_abc123)`, search logs for that ID.
## Important Log Labels
### Create Order Flow:
- `REQUEST_START` → `RAW_INPUT` → `PARSED_INPUT`
- `OAUTH_REQUEST_START` → `OAUTH_SUCCESS`
- `CREATE_ORDER_REQUEST_START` → `CREATE_ORDER_SUCCESS`
### Capture Order Flow:
- `REQUEST_START` → `PARSED_INPUT`
- `OAUTH_SUCCESS` → `CAPTURE_SUCCESS`
- `DB_CONNECTED` → `PROCESSING_INVOICES`
- `ORDER_CREATED_SUCCESS` or `ORDER_EXTENDED_SUCCESS`
### Error Labels:
- `*_ERROR` - Something went wrong
- `*_FAILED` - Operation failed
- `INVALID_*` - Invalid input/data
## Browser Console Debugging
1. Open cart page
2. Press F12 to open DevTools
3. Go to Console tab
4. Click "Pay with PayPal"
5. Watch for:
- Red error messages
- `PayPal Error:` logs
- Network errors (check Network tab)
## Testing Checklist
When testing payments:
- [ ] Check browser console for errors
- [ ] Note the Ref ID if error occurs
- [ ] Check `paypal_create_order.log` for the request
- [ ] Check `paypal_capture.log` if got past order creation
- [ ] Verify database tables exist and have data
- [ ] Check PayPal sandbox account activity
## Need More Help?
See full guide: `PAYPAL_DEBUGGING_GUIDE.md`
## Key Configuration Files
- PayPal credentials: `api/create_order.php` and `api/capture_order.php`
- Lines 5-6: `$client_id` and `$client_secret`
- Line 4: `$sandbox` (true/false)
- Database config: `includes/config.inc.php`
- `$db_host`, `$db_user`, `$db_pass`, `$db_name`
- `$table_prefix`
## Status Checklist for Issues
When user reports error:
1. **Get details:**
- [ ] What error message did they see?
- [ ] What was the Ref ID (if shown)?
- [ ] Can they reproduce it?
2. **Check logs:**
- [ ] Find the request by Ref ID
- [ ] Look for ERROR or FAILED labels
- [ ] Check surrounding context (before/after)
3. **Verify config:**
- [ ] PayPal credentials valid?
- [ ] Database connection working?
- [ ] Correct sandbox/live mode?
4. **Test:**
- [ ] Try creating test order
- [ ] Watch logs in real-time
- [ ] Check database for created records

261
Panel/modules/billing/QUICK_START.md Normal file
View file

@ -0,0 +1,261 @@
# Quick Start Guide - GSP Billing Panel Integration
## What Was Completed
✅ Created `navigation.xml` - Routes panel URLs to billing pages
✅ Created `my_orders_panel.php` - User view of paid orders
✅ Updated `create_servers.php` - Enhanced provisioning with multi-server support
✅ Created `admin_orders.php` - Admin order management interface
✅ Created `test_integration.php` - Integration testing tool
✅ Created `PANEL_INTEGRATION.md` - Complete documentation
## How to Test Right Now
### Step 1: Test Integration
1. Log into your GSP panel
2. Navigate to: `home.php?m=billing&p=test_integration`
3. Review all checks - everything should show green ✓
### Step 2: Create a Test Order (Database)
If you don't have paid orders yet, create one in the database:
```sql
INSERT INTO billing_orders
(user_id, service_id, home_name, max_players, price, qty, invoice_duration, status, order_date)
VALUES
(1, 1, 'Test Minecraft Server', 25, 9.99, 1, 'month', 'paid', NOW());
```
Replace:
- `user_id = 1` with your actual user ID
- `service_id = 1` with a valid service_id from billing_services table
### Step 3: View Your Orders
Navigate to: `home.php?m=billing&p=my_orders`
You should see:
- Table with your paid orders
- "Provision Server" button for each order
- "Provision All My Servers" button if multiple orders
### Step 4: Provision a Server
Click "Provision Server" button
Expected behavior:
- Redirects to provision_servers page
- Creates game_home entry
- Assigns IP and port
- Installs game files (Steam/rsync/manual)
- Updates order status to 'installed'
- Shows success message
- Auto-redirects to Game Monitor after 3 seconds
### Step 5: Admin Testing (Admin Only)
Navigate to: `home.php?m=billing&p=admin_orders`
Features to test:
- View all orders across all users
- Filter by status dropdown
- Search by username/order ID/server name
- Select multiple orders with checkboxes
- Bulk actions dropdown
- Individual provision/view buttons
## Multi-Server Cart Testing
### Setup:
Create multiple paid orders for the same user:
```sql
INSERT INTO billing_orders
(user_id, service_id, home_name, max_players, price, qty, invoice_duration, status, order_date)
VALUES
(1, 1, 'Minecraft Server 1', 25, 9.99, 1, 'month', 'paid', NOW()),
(1, 2, 'Minecraft Server 2', 50, 14.99, 1, 'month', 'paid', NOW()),
(1, 3, 'ARK Server', 100, 19.99, 1, 'month', 'paid', NOW());
```
### Test:
1. Navigate to: `home.php?m=billing&p=my_orders`
2. Click "Provision All My Servers (3)" button
3. Wait for provisioning to complete
4. Verify all 3 orders changed to status='installed'
5. Check Game Monitor - all 3 servers should appear
## Panel URLs Reference
| Page | URL | Access | Purpose |
|------|-----|--------|---------|
| Test Integration | `home.php?m=billing&p=test_integration` | user, admin | Verify setup |
| My Orders | `home.php?m=billing&p=my_orders` | user, admin | View paid orders |
| Provision Servers | `home.php?m=billing&p=provision_servers&order_id=X` | user, admin | Create servers |
| Admin Orders | `home.php?m=billing&p=admin_orders` | admin only | Manage all orders |
## Common Issues & Solutions
### "No paid orders found"
**Problem:** No orders with status='paid' in database
**Solution:** Check database: `SELECT * FROM billing_orders WHERE status='paid'`
**Fix:** Update test order: `UPDATE billing_orders SET status='paid' WHERE order_id=X`
### "Page not found" / 404 error
**Problem:** navigation.xml not loaded or file missing
**Solution 1:** Verify navigation.xml exists in `modules/billing/`
**Solution 2:** Check file permissions (must be readable by web server)
**Solution 3:** Verify XML syntax is valid (no typos)
### "Access Denied"
**Problem:** User group doesn't match page access requirements
**Solution:** Check `$_SESSION['users_group']` matches navigation.xml access attribute
**Fix for admin pages:** Only 'admin' group can access admin_orders
### Provisioning fails silently
**Problem:** create_servers.php encounters error but doesn't show it
**Solution:** Check PHP error logs
**Common causes:**
- Invalid remote_server_id (stored in ip field)
- Missing game server files
- SteamCMD not configured
- Permissions issues on game directories
### Multiple servers provision but some fail
**Problem:** Foreach loop continues even if one fails
**Solution:** Check individual order details in admin_orders
**Fix:** Provision failed orders individually to see specific error
## Architecture Quick Reference
### Order Status Flow
```
in-cart → paid → installed → invoiced → suspended/deleted
↑ ↑
| |
(payment) (renewal or non-payment)
```
### Provisioning Flow
```
User orders on website → Payment processed → status='paid'
↓
User logs into panel → My Orders → Click "Provision Server"
↓
create_servers.php → Query WHERE status='paid' → foreach order
↓
Create game_home → Assign IP:Port → Install files → Update status='installed'
↓
Email + Discord notification → Redirect to Game Monitor
```
### File Locations
```
modules/billing/
├── navigation.xml [Panel routing config]
├── my_orders_panel.php [User order list]
├── admin_orders.php [Admin management]
├── create_servers.php [Server provisioning]
├── test_integration.php [Testing tool]
├── PANEL_INTEGRATION.md [Full documentation]
└── QUICK_START.md [This file]
```
## Next Steps After Testing
### 1. Optional: Add Menu Items
Edit `modules/billing/module.php` around line 20:
```php
$module_menus = array(
array('subpage' => 'my_orders', 'name'=>'My Orders', 'group'=>'user'),
array('subpage' => 'admin_orders', 'name'=>'Manage Orders', 'group'=>'admin')
);
```
This adds menu items to panel sidebar navigation.
### 2. Customize Success Messages
Edit `create_servers.php` around line 385 to customize redirect behavior:
- Change auto-redirect delay (currently 3 seconds)
- Add custom success messages
- Modify redirect destination
### 3. Add Email Templates
Enhance email notifications in create_servers.php:
- Custom HTML email templates
- Include server connection details
- Add next steps for users
### 4. Discord Webhook Formatting
Improve Discord notifications with:
- Rich embeds with server details
- Color coding by status
- Direct links to Game Monitor
### 5. Production Deployment
Before going live:
- Test with real payment gateway (PayPal/Stripe)
- Verify SteamCMD and game installs work
- Test with multiple concurrent users
- Set up monitoring and logging
- Configure backup system
## Support & Troubleshooting
### Debug Mode
To see detailed errors, enable PHP error reporting temporarily:
In `create_servers.php` at the top of exec_ogp_module():
```php
error_reporting(E_ALL);
ini_set('display_errors', 1);
```
### Database Debugging
Check order details:
```sql
SELECT o.*, s.service_name, u.users_login
FROM billing_orders o
LEFT JOIN billing_services s ON o.service_id = s.service_id
LEFT JOIN users u ON o.user_id = u.user_id
WHERE o.status = 'paid';
```
### Log Files to Check
- PHP error log: `/var/log/php_errors.log` (or server equivalent)
- Apache/Nginx error log: `/var/log/apache2/error.log`
- OGP agent log: Check agent output for remote commands
- Game server logs: In each game_home directory
## Questions?
Refer to:
- `PANEL_INTEGRATION.md` - Complete technical documentation
- `test_integration.php` - Run diagnostics: `home.php?m=billing&p=test_integration`
- OGP documentation - For panel-specific questions
- `create_servers.php` - Source code with comments
## Success Checklist
Before considering integration complete:
- [ ] test_integration.php shows all green checks
- [ ] Can view orders at my_orders page
- [ ] Can provision single order successfully
- [ ] Can provision multiple orders at once
- [ ] Orders update to status='installed' in database
- [ ] home_id saved correctly after provisioning
- [ ] end_date calculated and saved
- [ ] Servers appear in Game Monitor
- [ ] Admin can view all orders
- [ ] Admin can filter and search orders
- [ ] Bulk actions work (provision multiple)
- [ ] Email notifications sent (if configured)
- [ ] Discord webhooks work (if configured)
---
**Integration Status: COMPLETE**
**Multi-Server Support: FUNCTIONAL**
**Admin Tools: READY**
**Testing Tool: AVAILABLE**
Start with: `home.php?m=billing&p=test_integration`

196
Panel/modules/billing/README.md Normal file
View file

@ -0,0 +1,196 @@
# GameServers.World - Billing Module
## Overview
The billing module is a complete standalone website for selling game servers. It can be deployed on the same machine as the GSP panel or on a completely separate external web host.
## Runtime location and portability
- Primary runtime path: `Panel/modules/billing/`
- Legacy compatibility wrappers: `Website/` (key entrypoints proxy into `Panel/modules/billing`)
- Canonical human-facing timestamp source: `Website/timestamp.txt`
- Runtime timestamp file: `Panel/modules/billing/timestamp.txt` (synced from the canonical file at runtime)
### Standalone configuration values
Set one of the following (priority top-to-bottom) when running billing outside the panel tree:
1. Environment variables:
- `GSP_PANEL_PATH` (or `BILLING_PANEL_PATH`) for panel root
- `BILLING_BASE_PATH` for storefront URL base (e.g. `/billing`)
2. `Panel/modules/billing/site_config.local.php` overrides (git-ignored)
3. `Panel/modules/billing/site_config.php` defaults
`site_config.example.php` documents the expected keys and examples.
## Documentation System
### Visual TODO System ✅
As of December 19, 2024, all game documentation includes completion tracking:
- **Complete Documentation:** Displays with normal name (e.g., "Minecraft Server")
- **Incomplete Documentation:** Displays with "TODO: " prefix (e.g., "TODO: Arma 3")
### Current Status
- **Complete:** 1 game (Minecraft - comprehensive template)
- **Incomplete:** 146 games (marked with TODO prefix)
### Documentation Template Standard
All complete documentation should match the Minecraft template:
- Comprehensive ports table (ALL ports with purposes)
- Firewall configurations (UFW, FirewallD, Windows, iptables)
- Startup parameters with detailed explanations
- Troubleshooting sections with specific solutions
- Performance optimization tips
- Security best practices
- Resource links with citations
### Viewing Documentation
- Browse to `docs.php` to see all game documentation
- Games with "TODO: " prefix need comprehensive research and writing
- Click any game to view its documentation page
### Marking Documentation Complete
When game documentation is finished:
1. Edit `docs/{game}/metadata.json`
2. Change `"complete": false` to `"complete": true`
3. The TODO prefix will automatically disappear
## Recent Updates
### December 19, 2024 - Visual TODO System
- ✅ Implemented completion tracking for all 148 game folders
- ✅ Created PowerShell automation script (`update_metadata_complete.ps1`)
- ✅ Updated docs.php with automatic TODO prefix display
- ✅ Minecraft documentation completed as template example
### November 10, 2025 - Critical Fixes
- ✅ Fixed PayPal payment capture session issue
- ✅ Removed cart debug logging code
- ✅ Fixed cart page header/footer consistency
- ✅ Implemented AJAX invoice removal with Font Awesome icons
## Key Files
### Documentation System
- `docs.php` - Documentation browser with TODO system
- `docs/*/index.php` - Individual game documentation pages
- `docs/*/metadata.json` - Game metadata with completion status
- `update_metadata_complete.ps1` - Batch metadata update script
### Reference Documents
- `PHASE1_COMPLETE_SUMMARY.md` - Phase 1 implementation summary
- `GAME_DOCS_TODO_REFERENCE.md` - Complete reference for documentation system
- `RECENT_FIXES_SUMMARY.md` - All recent fixes and enhancements
### Payment Integration
- `api/capture_order.php` - PayPal payment capture (fixed session handling)
- `payment_success.php` - Payment success redirect
- `payment_cancel.php` - Payment cancellation handler
### Shopping Cart
- `cart.php` - Shopping cart UI with PayPal integration (cleaned up)
- `add_to_cart.php` - Add items to cart
- `remove_from_cart.php` - AJAX removal endpoint
## Development Guidelines
### Adding New Game Documentation
1. Create folder: `docs/{game-slug}/`
2. Create `metadata.json`:
```json
{
"name": "Game Name",
"description": "Brief description",
"category": "game",
"order": 100,
"complete": false
}
```
3. Create `index.php` following Minecraft template
4. Add optional `icon.png` or `icon.jpg`
5. When complete, set `"complete": true` in metadata
### Research Sources for Game Documentation
- Official game wikis and documentation
- LGSM (LinuxGSM) scripts and configuration files
- Steam Community Guides (highly-rated)
- Reddit communities (r/gameservers, game-specific)
- GitHub repositories with server configurations
- Official game forums
- User-contributed solutions and fixes
### Documentation Quality Standards
- **Comprehensive Ports:** List ALL ports with purposes (TCP/UDP)
- **Startup Parameters:** Full parameter explanations with examples
- **Troubleshooting:** Specific common issues with tested solutions
- **Firewall Configs:** Multiple platform examples (Linux + Windows)
- **Citations:** Link to all sources used in research
- **Testing:** Verify all commands and configurations are accurate
## Next Priorities
### Phase 2: ARMA Family + DayZ (HIGH PRIORITY)
1. Arma 3
2. Arma 2: Operation Arrowhead
3. Arma 2: Combined Operations
4. DayZ Standalone
5. DayZ Mod
### Phase 3: Popular Multiplayer Games
- Counter-Strike family (1.6, Source, CS2, CS:GO)
- Survival/Building (Rust, Terraria, Valheim, ARK)
- Co-op Shooters (L4D series, Killing Floor series, TF2)
- Tactical Shooters (Insurgency series, Squad)
### Phase 4: Remaining Games
- All other 50+ game folders in alphabetical order
## Testing Checklist
### PayPal Integration
- [ ] User can add servers to cart
- [ ] PayPal checkout button works
- [ ] Payment completes successfully
- [ ] Success page displays correctly
- [ ] No `NO_USER_SESSION` errors in logs
### Documentation System
- [ ] docs.php displays all games correctly
- [ ] TODO prefix shows for incomplete docs
- [ ] Complete docs show without TODO prefix
- [ ] Individual game pages load correctly
- [ ] Navigation links work within documentation
### Cart Functionality
- [ ] Cart displays all items correctly
- [ ] Remove button deletes items (AJAX)
- [ ] Header and footer display consistently
- [ ] Fonts match other billing pages
## Technical Notes
### Session Management
- **CRITICAL:** Always use `session_name("opengamepanel_web")` before `session_start()`
- Sessions are separate from panel sessions
- User authentication stored in `$_SESSION['website_user_id']`
### Database Connection
- Uses mysqli with credentials from `includes/config.inc.php`
- All database operations use native mysqli functions
- Never use panel-specific functions
### Standalone Design
- Module must work on external hosting
- No dependencies on panel files
- All paths use `__DIR__` relative references
- MySQL connection direct (not through panel)
## Support & Resources
- Main project: GameServerPanel/GSP
- Branch: Panel-unstable
- Documentation: Browse `docs.php` for game-specific guides
- Issues: Check logs in `modules/billing/logs/`
---
**Last Updated:** December 19, 2024
**Version:** 2.0 (with Visual TODO System)

287
Panel/modules/billing/README_COUPON_UPDATE.md Normal file
View file

@ -0,0 +1,287 @@
# Billing Module Standalone & Coupon System - Implementation Summary
## Overview
This update addresses two major requirements:
1. **Standalone Billing Module**: The billing module can now operate independently from the panel, either on the same server or on a separate web host.
2. **Enhanced Coupon System**: A comprehensive coupon system with game filters, usage tracking, and permanent/one-time discount options.
## Changes Made
### 1. Standalone Database Connection (Critical Fix)
**Problem**: The billing module was trying to use panel database functions that don't exist when deployed on a separate server, causing PayPal payment processing to fail with "Unexpected end of JSON input" error.
**Solution**:
- Removed all `require_once` statements that reference panel files like `includes/database_mysqli.php`
- Replaced panel database functions with native mysqli functions
- Created standalone `config.inc.php` file for database credentials
- Updated `api/capture_order.php` to use `mysqli_connect()` instead of `createDatabaseConnection()`
**Files Modified**:
- `.github/copilot-instructions.md` - Added standalone requirement documentation
- `modules/billing/includes/config.inc.php` - Created from template (should be gitignored in production)
- `modules/billing/api/capture_order.php` - Fixed database connection
### 2. Enhanced Coupon System
**Features Implemented**:
- ✅ Create, edit, delete coupons through admin interface
- ✅ Percentage-based discounts (0-100%)
- ✅ One-time vs. permanent discount types
- ✅ Game-specific filtering (all games or specific games)
- ✅ Usage limits and tracking
- ✅ Expiration dates
- ✅ Coupon application in cart with real-time price updates
- ✅ Automatic discount application on payment
- ✅ Discount display in My Servers and Admin Invoices views
**Files Created**:
- `modules/billing/create_coupons_table.sql` - Database schema
- `modules/billing/admin_coupons.php` - Admin management interface
- `modules/billing/COUPON_SYSTEM.md` - Comprehensive documentation
**Files Modified**:
- `modules/billing/admin.php` - Added "Manage Coupons" link
- `modules/billing/cart.php` - Added coupon application form and discount logic
- `modules/billing/api/capture_order.php` - Apply coupons on payment, track usage
- `modules/billing/my_servers.php` - Display discount information
- `modules/billing/admin_invoices.php` - Display discount information
### 3. Database Schema Updates
**New Table**: `ogp_billing_coupons`
```sql
- coupon_id (primary key)
- code (unique)
- name, description
- discount_percent
- usage_type (one_time/permanent)
- game_filter_type (all_games/specific_games)
- game_filter_list (JSON array of game keys)
- max_uses, current_uses
- expires, is_active
```
**Updated Tables**:
- `ogp_billing_invoices`: Added `coupon_id`, `discount_amount`
- `ogp_billing_orders`: Added `coupon_id`, `discount_amount`
## Installation Instructions
### Prerequisites
- MySQL/MariaDB database
- PHP 7.4 or higher
- Existing billing module installation
### Step 1: Create Configuration File
If deploying on a separate server (not co-located with panel):
```bash
cd modules/billing/includes/
cp config.inc.php.orig config.inc.php
```
Edit `config.inc.php` with your database credentials:
```php
$db_host = "your-db-host";
$db_user = "your-db-user";
$db_pass = "your-db-password";
$db_name = "your-db-name";
$table_prefix = "ogp_";
```
**Important**: Add `config.inc.php` to `.gitignore` to prevent committing sensitive credentials.
### Step 2: Run Database Migration
```bash
mysql -u [username] -p [database] < modules/billing/create_coupons_table.sql
```
Or import via phpMyAdmin.
### Step 3: Verify Installation
1. Log in as admin: `/modules/billing/admin.php`
2. Click "Manage Coupons"
3. You should see the coupon management interface with 2 sample coupons
### Step 4: Test Coupon System
1. Create a test coupon or use existing "WELCOME10"
2. Add a server to cart: `/modules/billing/order.php`
3. View cart: `/modules/billing/cart.php`
4. Apply coupon code
5. Verify discount is calculated correctly
6. Complete payment (or use free server button if admin)
7. Check My Servers page for discount display
## Usage
### For Administrators
**Create a Coupon**:
1. Navigate to Admin → Manage Coupons
2. Scroll to "Add New Coupon" form
3. Fill in details:
- Code (e.g., "SUMMER25")
- Discount percentage (e.g., 25 for 25% off)
- Usage type (one-time or permanent)
- Game filter (all games or specific)
4. Click "Add Coupon"
**Monitor Usage**:
- View current uses vs. max uses in coupon list
- Edit or deactivate coupons as needed
- Delete expired or unused coupons
### For Customers
**Apply a Coupon**:
1. Add servers to cart
2. On cart page, find "Have a coupon code?" section
3. Enter coupon code
4. Click "Apply Coupon"
5. Prices update automatically
6. Proceed to PayPal checkout
**View Discounts**:
- Cart page shows applied discount
- My Servers page shows original price (strikethrough) and discounted price
- Coupon code displayed with percentage
## Coupon Types Explained
### One-Time Coupons
- Applied to first invoice only
- Renewals use original price
- Example: "WELCOME10" for new customers
### Permanent Coupons
- Applied to initial purchase AND all renewals
- Discount stored in order record
- Example: "VIP50" for permanent 50% off
### Game Filters
**All Games**:
- Coupon applies to any game in cart
- Simplest option for general promotions
**Specific Games**:
- Define list of game keys
- Only matching games get discount
- Uses partial matching (e.g., "arma3" matches "arma3_linux64")
- Example: Arma-only promotion
## Troubleshooting
### PayPal Payment Returns JSON Error
**Symptom**: "Unexpected end of JSON input" on cart page after PayPal payment
**Cause**: Missing `config.inc.php` or incorrect database credentials
**Fix**:
1. Check `/modules/billing/includes/config.inc.php` exists
2. Verify credentials are correct
3. Test database connection: `/modules/billing/test_db_connection.php`
4. Check error logs: `/modules/billing/logs/` and server error log
### Coupon Not Applying
**Checks**:
- Code is correct (case-sensitive)
- Coupon is active
- Not expired
- Usage limit not reached
- Game matches filter (for game-specific coupons)
### Discount Not Showing After Payment
**Checks**:
- Database schema includes `discount_amount` columns
- `coupon_id` was saved to invoice/order
- Clear browser cache
## Security Notes
1. **Sensitive Files**: Add `modules/billing/includes/config.inc.php` to `.gitignore`
2. **Database Credentials**: Use read-only credentials if possible (billing only needs read/write to billing tables)
3. **CSRF Protection**: All admin forms include CSRF tokens
4. **Input Sanitization**: All user inputs are sanitized with `mysqli_real_escape_string()`
5. **SQL Injection**: Parameterized queries or escaped strings throughout
## File Structure
```
modules/billing/
├── api/
│ ├── capture_order.php (Modified - standalone DB connection)
│ └── create_order.php
├── includes/
│ ├── config.inc.php (Created - DB config)
│ └── config.inc.php.orig (Template)
├── admin_coupons.php (Created - Coupon management UI)
├── admin_invoices.php (Modified - Show discounts)
├── cart.php (Modified - Coupon application)
├── my_servers.php (Modified - Show discounts)
├── admin.php (Modified - Added coupon link)
├── create_coupons_table.sql (Created - DB schema)
└── COUPON_SYSTEM.md (Created - Documentation)
```
## Testing Checklist
- [ ] Database migration ran successfully
- [ ] Admin can access coupon management page
- [ ] Can create new coupon (all games)
- [ ] Can create game-specific coupon
- [ ] Can edit existing coupon
- [ ] Can delete coupon
- [ ] Customer can apply coupon in cart
- [ ] Cart prices update with discount
- [ ] Free server creation works (if admin)
- [ ] PayPal payment processes successfully
- [ ] Coupon usage count increments
- [ ] One-time coupon clears after payment
- [ ] Permanent coupon stays in order
- [ ] Discount shows on My Servers page
- [ ] Discount shows on Admin Invoices page
- [ ] Expired coupons are rejected
- [ ] Max uses limit is enforced
- [ ] Game filter works correctly
## Known Limitations
1. Coupons are percentage-based only (no fixed-amount discounts)
2. No minimum purchase requirement
3. No user-specific targeting (all users can use any active coupon)
4. No coupon stacking (one coupon per order)
5. Game matching uses partial string match (may need refinement)
## Future Enhancements
- Fixed-amount coupons (e.g., $5 off)
- Minimum purchase requirements
- User-specific or group-specific coupons
- Referral system integration
- Automatic coupon generation for campaigns
- Analytics dashboard
- Email notifications on coupon usage
## Support & Documentation
- Full documentation: `modules/billing/COUPON_SYSTEM.md`
- Copilot instructions: `.github/copilot-instructions.md`
- Issue tracker: GitHub Issues
---
**Version**: 1.0
**Date**: October 29, 2025
**Author**: Copilot Agent
**Tested**: Manual testing completed

326
Panel/modules/billing/RECENT_FIXES_SUMMARY.md Normal file
View file

@ -0,0 +1,326 @@
# Recent Fixes & Enhancements Summary
**Date:** December 19, 2024 (Updated)
## Phase 1: Visual TODO System Implementation ✅ **NEW**
### Overview
Implemented comprehensive system to visually identify incomplete game documentation across the entire billing website. All game documentation folders now have completion tracking.
### Changes Made
#### 1. Metadata Enhancement System
- **Created:** `update_metadata_complete.ps1` - PowerShell script for batch metadata updates
- **Updated:** 146 metadata.json files across all game documentation folders
- **New Field:** Added `"complete": false` to mark documentation status
- **Exception:** Minecraft marked as `"complete": true` (serves as complete template)
#### 2. Documentation Display Logic
- **File:** `modules/billing/docs.php`
- **Enhancement:** Added automatic "TODO: " prefix for incomplete documentation
- **Logic:**
```php
$isComplete = isset($metadata['complete']) ? (bool)$metadata['complete'] : false;
if (!$isComplete) {
$displayName = 'TODO: ' . $displayName;
}
```
- **Result:** Users immediately see which games need comprehensive documentation
#### 3. Visual Impact on docs.php
**Complete Documentation (no prefix):**
- ✅ Minecraft Server
**Incomplete Documentation (TODO prefix):**
- ❌ TODO: Arma 3
- ❌ TODO: Arma 2: Operation Arrowhead
- ❌ TODO: Arma 2: Combined Operations
- ❌ TODO: DayZ
- ❌ TODO: Rust
- ❌ TODO: Counter-Strike: Global Offensive
- ❌ TODO: Garry's Mod
- ❌ TODO: Valheim
- ❌ TODO: Terraria
- ❌ TODO: Left 4 Dead 2
- ❌ TODO: Team Fortress 2
- ❌ TODO: ARK: Survival Evolved
- ...and 134 more games
### Minecraft Documentation Template (Complete Example)
**File:** `modules/billing/docs/minecraft/index.php`
**Status:** Complete (~550 lines)
**Includes:**
- 📚 Navigation with anchor links
- 🔌 Comprehensive ports table (all ports with purposes)
- ⚙️ Startup parameters (JVM flags, optimizations)
- 🔧 Troubleshooting sections (specific solutions)
- 🔥 Firewall configs (UFW, FirewallD, Windows, iptables)
- 🔒 Security best practices
- ⚡ Performance optimization tips
- 🔗 Resource links with citations
---
## Critical Fixes Completed ✅
### 1. PayPal Payment Capture Session Issue (FIXED)
**Problem:** Payment capture was failing with `NO_USER_SESSION` error even though user was logged in.
**Root Cause:** The `api/capture_order.php` file was calling `session_start()` without setting the session name first, so it couldn't access the `opengamepanel_web` session where the user_id is stored.
**Solution:** Added `session_name("opengamepanel_web")` before `session_start()` in `capture_order.php`.
**File Modified:** `modules/billing/api/capture_order.php` (line ~148)
**Test Steps:**
1. Log into the billing site
2. Add a server to cart
3. Click PayPal checkout button
4. Complete payment in PayPal sandbox
5. Verify payment completes successfully and redirects to success page
6. Check `modules/billing/logs/payment_capture.log` - should no longer show `NO_USER_SESSION` error
---
### 2. Cart Page Debug Logging Removed (COMPLETED)
**What Was Removed:**
- Shutdown function that logged to `data/debug_cart.log`
- `?debug_cart=1` parameter handling
- Debug error display code
**File Modified:** `modules/billing/cart.php` (lines 1-30)
**Result:** Cart page now runs in production mode without debug overhead.
---
### 3. Cart Page Header/Footer Consistency (FIXED)
**Problem:** Cart page had different fonts and styling than other billing pages; missing footer entirely.
**Solutions Applied:**
1. Added `include(__DIR__ . '/includes/top.php');` before menu
2. Added `include(__DIR__ . '/includes/footer.php');` at page end
3. Removed global `font-family` and `background` override from inline CSS
4. Added favicon links to match other pages
**Files Modified:**
- `modules/billing/cart.php` (head section and body closing)
**Result:** Cart page now has consistent header/menu/footer with rest of billing module.
---
## Documentation Enhancements Started 📚
### 4. Minecraft Documentation Updated (TEMPLATE CREATED)
**What Was Added:**
- Comprehensive **Ports section** with table showing all ports (TCP 25565, UDP 25565, TCP 25575, UDP 19132)
- Port purposes clearly explained
- Firewall configuration examples for multiple platforms
- Security notes for RCON and port protection
- Enhanced navigation with icons (🔌 Ports, ⚙️ Startup Parameters, 🔧 Troubleshooting)
**File Modified:** `modules/billing/docs/minecraft/index.php`
**Template Pattern Established:**
- ✅ Quick Info section (at top)
- ✅ Ports section with complete table
- ✅ Installation steps
- ✅ Configuration examples
- ✅ Startup Parameters section (already excellent)
- ✅ Troubleshooting section (already comprehensive)
- ✅ Performance optimization
- ✅ Security best practices
---
## Remaining Documentation Work 📋
### Games Needing Full Port/Parameter/Troubleshooting Docs
The following games need their `docs/{game}/index.php` files updated with the Minecraft template pattern:
#### High Priority Games (Popular):
1. **Counter-Strike: Global Offensive** (`csgo/`)
2. **Team Fortress 2** (`tf2/`)
3. **Garry's Mod** (`garrysmod/`)
4. **Rust** (`rust/`)
5. **ARK: Survival Evolved** (`arkse/`)
6. **Terraria** (`terraria/`)
7. **Valheim** (`valheim/`)
8. **7 Days to Die** (`7daystodie/`)
9. **DayZ** (`dayz/`)
10. **Left 4 Dead 2** (`left4dead2/`)
#### Medium Priority:
11. Counter-Strike Source (`css/`)
12. Arma 3 (`arma3/`)
13. Squad (`squad/`)
14. Insurgency Sandstorm (`insurgencysandstorm/`)
15. Space Engineers (`space_engineers/`)
16. Conan Exiles (`conanexiles/`)
17. The Forest (`theforest/`)
18. Don't Starve Together (`dontstarvetogether/`)
19. Factorio (`factorio/`)
20. TeamSpeak 3 (`teamspeak3/`)
#### Lower Priority (Legacy/Niche):
21. All remaining games in `modules/billing/docs/`
---
### Research Needed Per Game
For each game, research and document:
1. **All Network Ports:**
- Game port (TCP/UDP)
- Query port
- RCON/Admin port
- Voice chat ports (if applicable)
- Steam port (if Steam-based)
- Additional service ports (web interfaces, etc.)
2. **Startup Parameters:**
- Command-line flags
- Memory allocation
- Server configuration switches
- Performance optimization flags
3. **Common Issues (from internet research):**
- "Server won't start" specific to that game
- Connection problems
- Performance/lag issues specific to game engine
- Mod/plugin conflicts
- Save corruption issues
- Update/patch problems
4. **Game-Specific Configuration:**
- Main config file locations
- Critical settings
- Player limits
- World/map settings
---
### Documentation Template Structure
Each game's `index.php` should follow this structure:
```php
<?php
/**
* {Game Name} Server Documentation
*/
?>
<!-- Navigation with icons -->
<div style="background: #1e3a5f...">
<h3>📚 Quick Navigation</h3>
<div>
<a href="#quick-info">Quick Info</a>
<a href="#ports">🔌 Ports</a>
<a href="#installation">Installation</a>
<a href="#configuration">Configuration</a>
<a href="#parameters">⚙️ Startup Parameters</a>
<a href="#troubleshooting">🔧 Troubleshooting</a>
<a href="#performance">Performance</a>
</div>
</div>
<h1>{Game Name} Server Hosting Guide</h1>
<h2 id="quick-info">Quick Info</h2>
<!-- Key stats in styled box -->
<h2 id="ports">🔌 Network Ports Used</h2>
<!-- Table with all ports, protocols, purposes, required/optional -->
<!-- Firewall examples -->
<!-- Port security notes -->
<h2 id="installation">Installation & Setup</h2>
<!-- Step-by-step installation -->
<h2 id="configuration">Server Configuration</h2>
<!-- Config file examples -->
<h2 id="parameters">⚙️ Startup Parameters</h2>
<!-- Command-line flags -->
<!-- Parameter explanations -->
<h2 id="troubleshooting">🔧 Troubleshooting</h2>
<!-- Common Issues section -->
<!-- Server Won't Start -->
<!-- Connection Problems -->
<!-- Performance Issues -->
<!-- Game-specific problems -->
<h2 id="performance">Performance Optimization</h2>
<!-- Optimization tips -->
<!-- Additional Resources -->
<!-- Important Notes -->
```
---
## Testing Checklist
### PayPal Payment Flow:
- [ ] Log into billing site
- [ ] Add server to cart
- [ ] Apply coupon (optional)
- [ ] Click PayPal button
- [ ] Complete sandbox payment
- [ ] Verify success page loads
- [ ] Check invoice marked as paid in database
- [ ] Verify no `NO_USER_SESSION` in `logs/payment_capture.log`
### Cart Page:
- [ ] Cart page loads with correct header/menu (same font as index.php)
- [ ] Footer appears with timestamp
- [ ] Favicon displays in browser tab
- [ ] Remove item (trash icon) works via AJAX
- [ ] Cart refreshes without full page reload after removal
- [ ] Database row hard-deleted (invoice removed from table)
### Documentation:
- [ ] Navigate to `/docs.php` (or docs index)
- [ ] Click on Minecraft documentation
- [ ] Verify new Ports section displays correctly
- [ ] Verify navigation links jump to correct sections
- [ ] Test on mobile/tablet for responsive layout
---
## Next Steps (Priority Order)
1. **Test PayPal payment flow end-to-end** (sandbox environment)
2. **Verify cart removal functionality** (AJAX + database deletion)
3. **Begin documentation expansion:**
- Start with top 10 popular games
- Research ports/parameters/issues for each
- Update docs using Minecraft template
- Test navigation and layout
4. **Consider automation:**
- Script to validate all game docs have required sections
- Port information database/reference
- Common troubleshooting template generator
---
## Files Modified in This Session
1. `modules/billing/api/capture_order.php` - Fixed session name issue
2. `modules/billing/cart.php` - Removed debug logging, fixed header/footer
3. `modules/billing/docs/minecraft/index.php` - Added ports section, enhanced navigation
## Files to Review
- `modules/billing/logs/payment_capture.log` - Check for successful captures
- `modules/billing/data/debug_cart.log` - Should no longer be written to
- Database table `{$table_prefix}billing_invoices` - Verify removals are hard-deleted
---
**End of Summary**

176
Panel/modules/billing/STATUS_REPORT.md Normal file
View file

@ -0,0 +1,176 @@
# Billing Module Status Report
**Date:** November 7, 2025
**Branch:** copilot/update-billing-table-prefix
## ✅ Completed Tasks
### 1. Table Prefix Updates
- **Status:** ✅ COMPLETE
- **Changes:**
- All SQL files updated to use hardcoded `gsp_` prefix
- `config.inc.php` default changed from `ogp_` to `gsp_`
- Panel tables (like `ogp_users`) correctly left unchanged
- All references properly updated in:
- create_invoices_table.sql
- create_coupons_table.sql
- migration_to_invoices.sql
- add_paypal_data_column.sql
- add_service_id_column.sql
- fix_invoices_table_columns.sql
### 2. Documentation System
- **Status:** ✅ COMPLETE
- **Implementation:**
- New `/modules/billing/docs.php` browser created
- Category-based organization (game, panel, mods, troubleshooting, other)
- Each doc folder contains:
- `index.php` - Documentation content
- `metadata.json` - Category, name, description, order
- `icon.png/jpg` - Visual icon
- Smart sorting by category and order number
- Clean, dark-themed UI matching site design
- Back button navigation
- "Documentation" link added to main menu
- Old docs preserved in `/docs_old/` for reference
- Complete README.md with instructions
**Example Documentation Created:**
- Minecraft Server Guide (game category)
- Getting Started (panel category)
- Common Issues & Solutions (troubleshooting category)
### 3. PayPal Integration
- **Status:** ✅ COMPLETE (Core Functionality)
- **Components:**
- `api/create_order.php` - Creates PayPal orders with comprehensive logging
- `api/capture_order.php` - Captures payments and marks invoices paid
- `webhook.php` - Handles PayPal webhooks with signature verification
- All use standalone mysqli (no panel dependencies)
- Full logging system for debugging
- Secure error handling
**Payment Flow:**
1. User views cart with unpaid invoices
2. Clicks PayPal button → creates order via API
3. Completes payment on PayPal
4. capture_order.php marks invoices paid, creates orders
5. Webhook confirms payment asynchronously
6. Success page shows confirmation
## ⚠️ Partially Complete
### Coupon System
- **Status:** ⚠️ BACKEND READY, FRONTEND MISSING
- **What Exists:**
- ✅ Database schema (`gsp_billing_coupons` table)
- ✅ Admin interface (`admin_coupons.php`)
- ✅ Coupon CRUD operations
- ✅ Fields in invoices/orders for coupon tracking
- ✅ Comprehensive documentation (COUPON_SYSTEM.md)
- **What's Missing:**
- ❌ Coupon input/validation in cart.php
- ❌ Discount calculation in checkout
- ❌ Session storage of applied coupons
- ❌ Coupon usage tracking on payment
**Impact:** Coupons can be created by admins but customers cannot apply them during checkout.
**Recommendation:** The problem statement asks to "verify all the paypal payment works and is complete with coupons". The PayPal payment WORKS but coupon integration in the checkout flow needs to be implemented to match the COUPON_SYSTEM.md documentation.
## 📋 Other Findings
### Inconsistencies Found
1. **Mixed URL Patterns**
- Some files use absolute URLs correctly
- create_order.php has hardcoded site base URL instead of using config
- Recommendation: Use `$SITE_BASE_URL` from config consistently
2. **Session Namespaces**
- Most files use `website_user_id` session variable
- Some fallback to `user_id`
- Recommendation: Standardize on `website_user_id`
3. **Error Handling**
- Most files have good error handling
- A few older files could use try/catch blocks
- Recommendation: Audit older PHP files for error handling
4. **Documentation Markdown Files**
- Multiple .md files in root of billing module
- Could be consolidated or moved to docs folder
- Recommendation: Create a `/docs/developer/` category for technical docs
### SQL Files Status
All SQL files properly use `gsp_` prefix:
- ✅ create_invoices_table.sql
- ✅ create_coupons_table.sql
- ✅ migration_to_invoices.sql
- ✅ add_paypal_data_column.sql
- ✅ add_service_id_column.sql
- ✅ fix_invoices_table_columns.sql
### Configuration Files
- ✅ `config.inc.php` - Default prefix is `gsp_`
- ✅ Standalone compatible (no panel includes)
- ✅ Database connection using mysqli
## 🎯 Recommended Next Steps
### Priority 1: Complete Coupon Integration
To match COUPON_SYSTEM.md documentation, implement in cart.php:
1. Add coupon input field
2. AJAX endpoint to validate and apply coupons
3. Discount calculation in cart totals
4. Store applied coupon in session
5. Pass coupon to payment processor
6. Update invoices with coupon_id on payment
7. Increment usage counter
8. Handle one-time vs permanent coupons
### Priority 2: Testing
1. Test PayPal sandbox end-to-end
2. Test invoice creation → cart → payment → success
3. Test webhook signature verification
4. Test error scenarios (payment failure, timeout, etc.)
5. Once coupons implemented, test coupon application
### Priority 3: Documentation
1. Move developer .md files to `/docs/developer/` category
2. Create user-facing coupon documentation in docs system
3. Add payment troubleshooting guide
### Priority 4: Code Quality
1. Audit older PHP files for error handling
2. Standardize session variable names
3. Use config SITE_BASE_URL consistently
4. Add input validation where missing
## 📊 Summary
### What Works Now
- ✅ Table prefixes corrected to `gsp_`
- ✅ Documentation system fully functional
- ✅ PayPal payment processing complete
- ✅ Coupon admin management ready
- ✅ Standalone deployment compatible
### What Needs Work
- ❌ Coupon checkout integration
- ⚠️ Some minor inconsistencies (URLs, sessions)
- ⚠️ Testing needed for full payment flow
### Files Modified in This PR
- SQL files (6 files) - table prefix updates
- config.inc.php - default prefix change
- docs.php (new) - documentation browser
- docs/ folder - restructured with examples
- includes/menu.php - added Documentation link
- STATUS_REPORT.md (this file)
### Files in docs_old/ (preserved for reference)
- 206 game markdown files
- Old docs.php, server.php, game.php
- all_hostable_games_union.csv

339
Panel/modules/billing/TESTING_CHECKLIST.md Normal file
View file

@ -0,0 +1,339 @@
# Testing Checklist for Billing Invoice/Order Flow Fixes
## Prerequisites
1. **Database Setup**
- [ ] Verify `ogp_billing_invoices` table exists
- [ ] Verify `ogp_billing_orders` table exists
- [ ] Verify tables have all required columns (see create_invoices_table.sql)
2. **Configuration**
- [ ] Copy `modules/billing/includes/config.inc.php.orig` to `modules/billing/includes/config.inc.php`
- [ ] Update database credentials in config.inc.php
- [ ] Verify `$table_prefix` is set correctly (default: "ogp_")
- [ ] Verify `$SITE_DATA_DIR` path is writable
3. **PayPal Configuration**
- [ ] Verify sandbox client_id and client_secret in api/create_order.php
- [ ] Verify sandbox client_id and client_secret in api/capture_order.php
- [ ] Verify webhook_id in webhook.php
## Test 1: Add to Cart (Invoice Creation)
**Test NEW Order Flow**
1. Navigate to order.php
2. Select a game server configuration
3. Set price to $0.00 for testing (or use regular price)
4. Fill in all required fields
5. Click "Add to Cart"
**Expected Results:**
- [ ] Redirects to cart.php
- [ ] Item appears in cart
- [ ] Database check: Invoice created in `ogp_billing_invoices`
- [ ] status = 'due'
- [ ] order_id = 0 (no order yet)
- [ ] user_id matches logged-in user
- [ ] amount, qty, service_id populated correctly
**Verification SQL:**
```sql
SELECT * FROM ogp_billing_invoices WHERE status='due' ORDER BY invoice_id DESC LIMIT 5;
```
## Test 2: Free Button (Manual Order Creation)
**Test Free/Claim Flow**
1. Ensure you have item in cart with amount = 0.00
2. Click "Claim (Free)" button
**Expected Results:**
- [ ] Redirects to return.php
- [ ] Shows payment confirmation
- [ ] Invoice marked as paid
- [ ] Order created
- [ ] Cart is empty
**Verification SQL:**
```sql
-- Check invoice was marked paid
SELECT invoice_id, status, paid_date, order_id FROM ogp_billing_invoices
WHERE status='paid' ORDER BY invoice_id DESC LIMIT 1;
-- Check order was created
SELECT order_id, user_id, status, end_date, payment_txid FROM ogp_billing_orders
ORDER BY order_id DESC LIMIT 1;
-- Verify link
SELECT i.invoice_id, i.order_id, o.order_id
FROM ogp_billing_invoices i
LEFT JOIN ogp_billing_orders o ON i.order_id = o.order_id
WHERE i.status='paid' ORDER BY i.invoice_id DESC LIMIT 5;
```
**Check Logs:**
```bash
tail -50 modules/billing/logs/site.log | grep -E "(payment|free_create)"
```
## Test 3: PayPal Payment Flow
**Test PayPal Checkout**
1. Add paid item to cart (e.g., $5.00)
2. Click PayPal button in cart
3. Should redirect to PayPal sandbox
4. Login with sandbox buyer account
5. Approve payment
6. Should return to payment_success.php
**Expected Results:**
- [ ] PayPal button renders correctly
- [ ] Creates PayPal order (check browser console for order ID)
- [ ] Redirects to PayPal sandbox
- [ ] After approval, returns to payment_success.php
- [ ] No JavaScript errors in console
- [ ] No "Unexpected end of JSON input" error
- [ ] Invoice marked as paid
- [ ] Order created
- [ ] Cart is empty
**Browser Console Checks:**
```
Look for:
✓ "PayPal cart debug: ..." - Shows cart data
✓ "Creating order..." - Order creation started
✓ "Order created." - Order creation succeeded
✓ "Capturing payment..." - Capture started
✗ Any errors - Should be none
```
**Verification SQL:**
```sql
-- Check invoice
SELECT invoice_id, status, paid_date, payment_txid, payment_method, order_id
FROM ogp_billing_invoices
WHERE payment_method='paypal'
ORDER BY invoice_id DESC LIMIT 1;
-- Check order
SELECT order_id, user_id, status, price, end_date, payment_txid
FROM ogp_billing_orders
WHERE payment_txid LIKE '%'
ORDER BY order_id DESC LIMIT 1;
```
**Check API Logs:**
```bash
# Check create_order.php payload
cat modules/billing/data/create_order_payload.log
# Check corrected URLs
cat modules/billing/data/corrected_urls.log
# Check for errors
cat modules/billing/data/create_order_errors.log
```
## Test 4: Webhook Processing
**Test Webhook Handler**
1. Trigger a PayPal payment (from Test 3)
2. PayPal will send webhook to webhook.php
**Expected Results:**
- [ ] Webhook receives POST from PayPal
- [ ] Signature verification succeeds
- [ ] Payment record processed
- [ ] Invoice marked paid (if not already)
- [ ] Order created/updated (if not already)
**Verification:**
```bash
# Check webhook log
tail -50 modules/billing/data/webhook.log
# Check for payment processing
grep "process_payment" modules/billing/data/webhook.log
```
**Check Data Files:**
```bash
ls -lah modules/billing/data/*.json
cat modules/billing/data/INV-*.json # Check payment record format
```
## Test 5: Renewal Flow
**Setup Renewal Invoice**
1. Create a test order manually:
```sql
INSERT INTO ogp_billing_orders (
user_id, service_id, home_name, ip, max_players, qty, invoice_duration,
price, remote_control_password, ftp_password, status, order_date, end_date,
payment_txid, paid_ts
) VALUES (
1, 1, 'Test Server', 1, 10, 1, 'month',
5.00, 'rconpass', 'ftppass', 'paid', NOW(), DATE_ADD(NOW(), INTERVAL 1 MONTH),
'TEST-INITIAL', NOW()
);
```
2. Get the order_id from the insert:
```sql
SELECT LAST_INSERT_ID();
```
3. Create renewal invoice:
```sql
INSERT INTO ogp_billing_invoices (
order_id, user_id, service_id, home_name, ip, max_players, qty, invoice_duration,
amount, status, customer_name, customer_email, due_date, description
) VALUES (
LAST_INSERT_ID(), -- Use order_id from step 2
1, 1, 'Test Server', 1, 10, 1, 'month',
5.00, 'due', 'Test User', 'test@test.com', DATE_ADD(NOW(), INTERVAL 3 DAY),
'Renewal invoice'
);
```
**Test Renewal Payment**
1. Log in as user who owns the order
2. View cart - should show renewal invoice
3. Pay using free button or PayPal
**Expected Results:**
- [ ] Invoice marked as paid
- [ ] Original order's end_date extended by 1 month
- [ ] No duplicate order created
- [ ] Invoice.order_id still points to original order
**Verification SQL:**
```sql
-- Check order end_date was extended
SELECT order_id, end_date, status, payment_txid
FROM ogp_billing_orders
WHERE order_id = <order_id_from_step_2>;
-- Should show end_date = original end_date + 1 month
-- Check invoice
SELECT invoice_id, order_id, status, paid_date
FROM ogp_billing_invoices
WHERE order_id = <order_id_from_step_2>;
-- Should show paid invoice linked to same order_id
```
## Test 6: Error Handling
**Test Invalid Scenarios**
1. **Missing session**: Try to pay without being logged in
- [ ] Should redirect to login or show error
2. **Database connection failure**: Temporarily break DB config
- [ ] capture_order.php should return JSON error, not crash
- [ ] Error should be logged
3. **PayPal API failure**: Use invalid credentials
- [ ] Should show error in console
- [ ] Should log error
- [ ] Should not corrupt database
## Common Issues and Solutions
### Issue: "Config file not found"
**Solution**: Copy config.inc.php.orig to config.inc.php
### Issue: "Table doesn't exist"
**Solution**: Run create_invoices_table.sql
### Issue: "Permission denied writing to data/"
**Solution**:
```bash
chmod 775 modules/billing/data
chown www-data:www-data modules/billing/data # Or your web server user
```
### Issue: "PayPal button doesn't render"
**Solution**: Check browser console for errors, verify client_id
### Issue: "Unexpected end of JSON input"
**Solution**:
- Check PHP error log: `tail -f /var/log/php/error.log`
- Verify display_errors=0 in capture_order.php
- Check for syntax errors: `php -l api/capture_order.php`
### Issue: "Cart still shows items after payment"
**Solution**:
- Check if invoice status changed to 'paid'
- Check if process_payment_record was called
- Check logs for errors
## Performance Testing
**Test with Multiple Items**
1. Add 5 items to cart
2. Pay with PayPal
3. Verify all 5 invoices marked paid
4. Verify all 5 orders created
5. Verify all linked correctly
**Test Concurrent Payments**
1. Add item to cart in two different browsers (same user)
2. Attempt to pay both simultaneously
3. Verify both process correctly
4. Check for race conditions
## Security Testing
**Test SQL Injection**
1. Try adding special characters to form fields
2. Try manipulating invoice_id in POST requests
3. Verify all inputs are sanitized/escaped
**Test Session Hijacking**
1. Try accessing cart with invalid session
2. Try paying for someone else's invoice
3. Verify proper authorization checks
**Test Webhook Signature**
1. Send fake webhook without valid signature
2. Verify it's rejected
3. Check logs for security events
## Cleanup
After testing, clean up test data:
```sql
-- Remove test invoices
DELETE FROM ogp_billing_invoices WHERE customer_email = 'test@test.com';
-- Remove test orders
DELETE FROM ogp_billing_orders WHERE remote_control_password = 'rconpass';
```
## Sign-off
- [ ] All tests passed
- [ ] No errors in logs
- [ ] Documentation reviewed
- [ ] Security checks completed
- [ ] Ready for production deployment
**Tested by**: _______________
**Date**: _______________
**Environment**: _______________ (Dev/Staging/Production)
**Notes**: _______________

165
Panel/modules/billing/_archived/CONFIGURATION.md Normal file
View file

@ -0,0 +1,165 @@
# Website Configuration Guide
## Overview
The `_website` folder is now a standalone site with centralized database configuration. All database connection settings are managed in a single location: `includes/config.inc.php`.
## Directory Structure
```
_website/
├── includes/
│ ├── config.inc.php # Central database configuration
│ └── README.md # Documentation for includes directory
├── db.php # Database connection (loads config.inc.php)
├── login.php # Uses db.php
├── logout.php # Uses db.php
├── cart.php # Uses db.php
├── order.php # Uses db.php
├── serverlist.php # Uses db.php
└── ...other files
```
## Configuration File
### Location
`_website/includes/config.inc.php`
### Contents
```php
<?php
$db_host="localhost"; // Database server hostname
$db_user="localuser"; // Database username
$db_pass="password"; // Database password
$db_name="panel"; // Database name
$table_prefix="ogp_"; // Table prefix
$db_type="mysql"; // Database type
?>
```
## How It Works
1. **Configuration Loading**
- Website files include `db.php`
- `db.php` loads `includes/config.inc.php`
- Configuration variables are available to all files
2. **Configuration Flow**
```
includes/config.inc.php → db.php → website files
```
3. **Database Connection**
- `db.php` uses the configuration variables to establish a connection
- Returns `$db` variable containing the mysqli connection
## Setup Instructions
### For Standalone Use
1. **Copy the _website folder** to your web server
2. **Edit configuration**:
```bash
nano _website/includes/config.inc.php
```
3. **Update database credentials**:
- Set `$db_host` to your database server
- Set `$db_user` to your database username
- Set `$db_pass` to your database password
- Set `$db_name` to your database name
4. **Verify permissions**:
```bash
chmod 600 _website/includes/config.inc.php
```
### For Panel Integration
The configuration in `_website/includes/config.inc.php` should match the panel's configuration in `/includes/config.inc.php` to ensure both the website and panel access the same database.
## Security Best Practices
1. **File Permissions**: Set `config.inc.php` to read-only for the web server user
```bash
chmod 600 includes/config.inc.php
```
2. **Web Server Configuration**: Ensure the `includes/` directory is not directly accessible via HTTP
```apache
<Directory "/path/to/_website/includes">
Require all denied
</Directory>
```
3. **Backup Configuration**: Keep a secure backup of your configuration file
## Troubleshooting
### Connection Errors
If you see database connection errors:
1. **Verify credentials** in `includes/config.inc.php`
2. **Check database server** is running
3. **Verify database exists**
4. **Check user permissions** in the database
### File Not Found Errors
If you see errors about missing `config.inc.php`:
1. **Verify the file exists** at `_website/includes/config.inc.php`
2. **Check file permissions** are readable by the web server
3. **Verify path** in `db.php` uses `__DIR__` for relative paths
### Include Errors
If website files can't include `db.php`:
1. **Check file paths** are correct
2. **Verify `db.php`** exists in the `_website/` root
3. **Check PHP include paths** in php.ini if needed
## Migration from Old Configuration
The old `db.php` had hardcoded credentials:
```php
// OLD (hardcoded)
$servername = "panel.iaregamer.com";
$username = "remoteuser";
```
The new `db.php` uses centralized config:
```php
// NEW (centralized)
require_once(__DIR__ . '/includes/config.inc.php');
$servername = $db_host;
$username = $db_user;
```
**No changes needed** to files that include `db.php` - they work automatically with the new configuration.
## Files Using Database Connection
The following files include `db.php` and use the centralized configuration:
- `login.php` - User authentication
- `logout.php` - Session termination
- `cart.php` - Shopping cart
- `order.php` - Order processing
- `serverlist.php` - Server listings
- `adminserverlist.php` - Admin server management
- `test_db_connection.php` - Database testing
## Benefits
1. **Single Source of Truth**: All database settings in one file
2. **Easy Configuration**: Change settings in one place
3. **Portable**: Copy folder and update one config file
4. **Secure**: Configuration separate from code
5. **Maintainable**: Easy to update and manage
## Support
For issues or questions about the configuration, please refer to:
- `includes/README.md` - Detailed information about includes directory
- Main project documentation
- Panel configuration at `/includes/config.inc.php`

383
Panel/modules/billing/_archived/FEATURES.md Normal file
View file

@ -0,0 +1,383 @@
# Website Features Documentation
This document describes the new features added to the GameServers.World website (_website folder).
## Table of Contents
1. [Password Reset System](#password-reset-system)
2. [My Servers Dashboard](#my-servers-dashboard)
3. [Server Status Page](#server-status-page)
4. [UI Improvements](#ui-improvements)
5. [Apache Configuration](#apache-configuration)
---
## Password Reset System
A complete password reset workflow has been implemented to allow users to recover their accounts.
### Files Created
- **forgot_password.php** - Request password reset
- **reset_password.php** - Reset password with token
### How It Works
1. User visits the login page and clicks "Forgot Password?"
2. User enters their username or email on `forgot_password.php`
3. System generates a secure token and stores it in `ogp_password_reset_tokens` table
4. Email is sent with reset link (falls back to displaying link if email fails)
5. User clicks link and is taken to `reset_password.php?token=XXX`
6. User enters new password (min 8 characters)
7. Password is updated using both MD5 (panel compatibility) and modern hash (if shadow column exists)
8. Token is marked as used
### Database Table
The system automatically creates this table if it doesn't exist:
```sql
CREATE TABLE ogp_password_reset_tokens (
id INT AUTO_INCREMENT PRIMARY KEY,
user_id INT NOT NULL,
token VARCHAR(64) NOT NULL,
expires DATETIME NOT NULL,
used TINYINT(1) DEFAULT 0,
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
INDEX idx_token (token),
INDEX idx_user_id (user_id)
)
```
### Security Features
- Tokens expire after 1 hour
- Tokens can only be used once
- Secure random token generation (64 hex characters)
- Password requirements enforced (min 8 chars)
- Passwords hashed with both MD5 (panel) and bcrypt (modern)
- User enumeration protection (doesn't reveal if account exists)
### Email Configuration
The system uses PHP's `mail()` function. For production:
1. Configure your server's mail system (sendmail, postfix, etc.)
2. Or integrate with an email service (SendGrid, Mailgun, etc.)
3. Update the email headers in `forgot_password.php` as needed
---
## My Servers Dashboard
A user dashboard showing all active game servers with renewal options.
### File Created
- **my_servers.php** - User's server management dashboard
- **renew_server.php** - Server renewal page
### Features
- **Server List**: Shows all servers owned by logged-in user
- **Server Details**: Name, game type, location, status
- **Expiration Tracking**: Shows expiration date for each server
- **Status Indicators**: Active, Inactive, Expired
- **Renewal Links**: Quick access to renew each server
- **Empty State**: Helpful message when user has no servers
### Access
- Menu link "My Servers" appears when user is logged in
- Requires authentication via `login_required.php`
### Database Query
Joins multiple tables:
- `ogp_home` - Server instances
- `ogp_remote_servers` - Server locations
- `ogp_game_configs` - Game information
- `ogp_billing_orders` - Order/expiration data
- `ogp_billing_services` - Service pricing
---
## Server Status Page
Public page showing real-time status of all game server infrastructure.
### File Created
- **server_status.php** - Server infrastructure status
### Features
- **Real-time Status**: Online, Offline, Maintenance, Unknown
- **Resource Usage**: CPU, Memory, Disk usage percentages
- **Uptime Display**: How long each server has been running
- **Last Updated**: Time since last status update
- **Color-coded Badges**: Visual status indicators
- **Notes Support**: Display maintenance or status messages
### Database Table
Automatically creates table if it doesn't exist:
```sql
CREATE TABLE ogp_server_status (
status_id INT AUTO_INCREMENT PRIMARY KEY,
remote_server_id INT NOT NULL,
server_name VARCHAR(255) NOT NULL,
ip_address VARCHAR(45),
status ENUM('online', 'offline', 'maintenance') DEFAULT 'offline',
cpu_usage DECIMAL(5,2),
memory_usage DECIMAL(5,2),
disk_usage DECIMAL(5,2),
uptime VARCHAR(50),
last_updated TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
notes TEXT,
INDEX idx_remote_server (remote_server_id),
UNIQUE KEY unique_server (remote_server_id)
)
```
### Server Updates
The page displays data from `ogp_server_status`. Servers should update this table:
```php
// Example server update code (run on each server periodically)
$stmt = $db->prepare("INSERT INTO ogp_server_status
(remote_server_id, server_name, ip_address, status, cpu_usage, memory_usage, disk_usage, uptime, notes)
VALUES (?, ?, ?, 'online', ?, ?, ?, ?, ?)
ON DUPLICATE KEY UPDATE
status = VALUES(status),
cpu_usage = VALUES(cpu_usage),
memory_usage = VALUES(memory_usage),
disk_usage = VALUES(disk_usage),
uptime = VALUES(uptime),
notes = VALUES(notes),
last_updated = NOW()");
```
### Access
- Link in footer: "Server Status"
- Public page (no login required)
---
## UI Improvements
### Server List Page
**Before**: "Order Server" was a plain link
**After**: Styled as a button with gradient background
```html
<a href="order.php?service_id=X" class="gsw-btn"
style="display:inline-block;padding:12px 24px;background:linear-gradient(135deg,#667eea 0%,#764ba2 100%);color:white;text-decoration:none;border-radius:8px;font-weight:600;transition:transform 0.2s;">
Order Now
</a>
```
### Order Page
**Fixed**: Game images now display correctly
- Changed from `src="<?php echo $img_url; ?>"`
- To `src="../<?php echo $img_url; ?>"`
- Assumes images are stored relative to panel root
### Login Page
**Added**: "Forgot Password?" link next to Register link
### Navigation Menu
**Added**: "My Servers" link for logged-in users
- Only visible when user is authenticated
- Positioned between "Game Servers" and "Cart"
### Footer
**Added**: "Server Status" link
- Public access to infrastructure status
- Positioned in footer with other utility links
---
## Apache Configuration
Three Apache virtual host configuration files have been created in the GSP root directory.
### Files Created
- **panel.conf** - Panel dashboard configuration
- **website.conf** - Storefront website configuration
- **fileserver.conf** - File server configuration
- **APACHE_SETUP.md** - Detailed installation guide
### panel.conf
Main Open Game Panel dashboard:
- Domain: panel.yourdomain.com
- Document Root: /var/www/GSP
- PHP settings optimized for panel operations
- Security headers enabled
### website.conf
GameServers.World storefront:
- Domain: gameservers.world
- Document Root: /var/www/GSP/_website
- Protected includes and data directories
- Static asset caching
- Compression enabled
- Separate session handling
### fileserver.conf
Game file distribution:
- Domain: files.yourdomain.com
- Document Root: /var/www/fileserver
- Directory browsing enabled
- Large file support
- Script execution disabled in uploads
- Bandwidth limiting support (optional)
### Installation
See `APACHE_SETUP.md` for complete installation instructions including:
- Copying configuration files
- Enabling sites and modules
- SSL/HTTPS setup with Let's Encrypt
- DNS configuration
- Firewall rules
- Troubleshooting
---
## Testing
### Password Reset
1. Visit `login.php`
2. Click "Forgot Password?"
3. Enter username or email
4. Check email or view on-screen link (development mode)
5. Click reset link
6. Enter new password (min 8 chars)
7. Confirm password matches
8. Submit and verify redirect to login
### My Servers
1. Login as a user with servers
2. Click "My Servers" in navigation
3. Verify all servers are listed
4. Check expiration dates
5. Click "Renew" on a server
6. Verify renewal page displays correctly
### Server Status
1. Visit footer link "Server Status"
2. Verify all remote servers are displayed
3. Check status badges (color coding)
4. Verify "Last Updated" formatting
5. Confirm public access (no login required)
### UI Changes
1. Visit `serverlist.php`
2. Verify "Order Now" displays as styled button
3. Click button to go to `order.php`
4. Verify game images display correctly
5. Check footer has "Server Status" link
6. Login and verify "My Servers" appears in menu
---
## Security Considerations
### Password Reset
- ✅ Tokens expire after 1 hour
- ✅ One-time use tokens
- ✅ Secure random generation
- ✅ User enumeration protection
- ✅ Password strength requirements
- ⚠️ Email delivery depends on server mail config
### My Servers
- ✅ Login required
- ✅ User can only see own servers
- ✅ SQL injection prevention with prepared statements
- ✅ XSS prevention with htmlspecialchars()
### Server Status
- ✅ Read-only public page
- ✅ No sensitive information exposed
- ✅ SQL injection prevention
- ℹ️ Server updates should be authenticated (implement separately)
### Apache Configs
- ✅ Security headers enabled
- ✅ Sensitive directories protected
- ✅ Directory listing disabled (except fileserver)
- ✅ HTTPS configurations ready
- ⚠️ Update domain names before deployment
- ⚠️ Configure SSL certificates for production
---
## Future Enhancements
### Password Reset
- Email template customization
- Integration with email service provider
- Rate limiting for reset requests
- SMS/2FA backup recovery
### My Servers
- Server control buttons (start/stop/restart)
- Real-time server metrics
- Configuration editor
- File manager integration
- Console access
- Backup/restore functionality
### Server Status
- Automated server monitoring agent
- Alert notifications
- Historical uptime graphs
- Incident history
- Scheduled maintenance display
- Status API for external monitoring
### General
- User profile management
- Invoice history
- Support ticket system
- Knowledge base integration
- Multi-language support
- Dark/light theme toggle
---
## Support
For issues or questions:
1. Check the main GSP documentation
2. Review Apache configuration in `APACHE_SETUP.md`
3. Check PHP error logs
4. Verify database connectivity
5. Ensure proper file permissions
## License
All new features follow the same license as the main Open Game Panel project.

181
Panel/modules/billing/_archived/IMPLEMENTATION_SUMMARY.md Normal file
View file

@ -0,0 +1,181 @@
# Website Login Implementation - Summary
## Task Completed
Successfully implemented login functionality for the website (_website/) that authenticates users against the panel database (ogp_users table) while maintaining separate sessions.
## Files Created
### 1. `_website/login.php` (NEW - 223 lines)
Full-featured login page with:
- Modern, responsive UI design
- Authentication against panel DB using MD5 (panel-compatible)
- Separate website session: `opengamepanel_web`
- Input validation and sanitization
- Error and success message display
- Automatic redirect after successful login
- Login attempt logging
- Already-logged-in detection and redirect
**Key Features:**
- SQL injection prevention via `mysqli_real_escape_string()`
- XSS prevention via `htmlspecialchars()` in output
- Password verification using MD5 (matching panel's method)
- Clean separation from panel session
- Responsive design that works on mobile and desktop
### 2. `_website/logout.php` (NEW - 23 lines)
Clean logout functionality:
- Destroys website session properly
- Clears session cookies
- Logs logout events
- Redirects to homepage
### 3. `_website/index.php` (MODIFIED)
Updated homepage with:
- Session management initialization
- Header with login status display
- "Welcome, [username]!" message when logged in
- Login/Logout button in header
- Maintains original design with minimal changes
**Changes Made:**
- Added session initialization at top (4 lines)
- Added proper HTML structure (DOCTYPE, html, head tags)
- Added header section with login/logout UI (19 lines)
- Converted from heredoc to regular HTML output
- All styling preserved with additions for header
### 4. `_website/README_LOGIN.md` (NEW - Documentation)
Comprehensive documentation covering:
- Overview of implementation
- File descriptions
- Session management details
- Security features
- Database requirements
- Usage instructions for users and developers
- Future enhancement suggestions
- Alignment with project guidelines
### 5. `_website/test_db_connection.php` (NEW - Test Script)
Database testing utility that checks:
- Database connection status
- ogp_users table existence
- Table structure verification
- User count
- Required columns presence
- MD5 hashing functionality
- Session functionality
**⚠️ Warning in file:** Must be deleted before production deployment
## Technical Details
### Session Management
- **Website Session Name:** `opengamepanel_web`
- **Panel Session Name:** `opengamepanel_web` (unchanged)
- **Complete separation:** Users can be logged into one without the other
### Session Variables Set on Login
```php
$_SESSION['website_user_id'] // User ID from ogp_users
$_SESSION['website_username'] // Username
$_SESSION['website_user_role'] // User role (admin, user, etc.)
$_SESSION['website_user_email'] // User email
$_SESSION['website_login_time'] // Timestamp of login
```
### Database Requirements
- Access to `ogp_users` table
- Required fields: `user_id`, `users_login`, `users_passwd`, `users_role`, `users_email`
- Uses existing `db.php` connection
### Security Measures Implemented
1. **SQL Injection Prevention:** `mysqli_real_escape_string()` on all user input
2. **XSS Prevention:** `htmlspecialchars()` on all output
3. **Session Isolation:** Separate session name prevents conflicts
4. **Password Compatibility:** MD5 hashing matches panel's method
5. **Logging:** All login/logout events logged via `logger()` function
6. **Input Validation:** Empty field checking
7. **Already-Logged-In Check:** Prevents duplicate sessions
### Code Quality
- All files pass PHP syntax validation (`php -l`)
- Follows existing code conventions
- Minimal changes to existing files
- Clean, readable code with comments
- Responsive design
## Testing Performed
### Automated Testing
✅ PHP syntax validation on all files
✅ File structure verification
✅ Git commit verification
### Manual Testing Required
⚠️ Requires live database connection:
- Login with valid credentials
- Login with invalid credentials
- Already-logged-in redirect
- Logout functionality
- Session persistence across page loads
- Use `test_db_connection.php` to verify database setup
## Alignment with Project Guidelines
From `.github/copilot-instructions.md`:
✅ **Website ↔ Panel on same host:** Uses panel DB for authentication
✅ **Sessions remain separate:** Different session names
✅ **Auth compatibility:** MD5 hashing matches panel
✅ **No-Code Planning:** Documented approach before implementation
✅ **Repository-first:** Reused existing `db.php`, `logger()` function
✅ **Minimal changes:** Surgical modifications to index.php only
✅ **Security considerations:** SQL injection, XSS prevention
## File Size Summary
- `login.php`: 7,282 bytes (223 lines)
- `logout.php`: 567 bytes (23 lines)
- `index.php`: Modified from 3,961 to 5,381 bytes (+1,420 bytes, +37 lines)
- `README_LOGIN.md`: 4,041 bytes (documentation)
- `test_db_connection.php`: 4,970 bytes (test utility)
- `IMPLEMENTATION_SUMMARY.md`: This file (documentation)
**Total New Code:** ~17,000 bytes across 3 new PHP files
## Next Steps
### For Testing
1. Run `test_db_connection.php` to verify database connectivity
2. Test login with valid panel credentials
3. Verify session persistence
4. Test logout functionality
5. **Delete `test_db_connection.php` after testing**
### For Production
1. Remove or restrict access to `test_db_connection.php`
2. Consider adding rate limiting for failed login attempts
3. Optional: Add CSRF token protection
4. Optional: Implement modern password hashing with transparent upgrade
5. Monitor `logfile.txt` for login activity
### Future Enhancements (Optional)
- Password hashing upgrade (bcrypt/argon2)
- CSRF protection
- Rate limiting (IP-based, like panel's ban_list)
- "Remember Me" functionality
- Two-factor authentication
- Password reset flow integration
- Session timeout management
## Conclusion
The implementation successfully provides a clean, secure login system for the website that authenticates against the panel database while maintaining complete session separation. The code follows best practices, includes comprehensive documentation, and is ready for testing with a live database connection.
All requirements from the problem statement have been met:
✅ Clone index page structure
✅ Create login page
✅ Authenticate against panel DB
✅ Create separate login session
✅ Maintain panel compatibility

110
Panel/modules/billing/_archived/README_LOGIN.md Normal file
View file

@ -0,0 +1,110 @@
# Website Login Implementation
## Overview
This implementation adds login functionality to the website that authenticates users against the panel's database (ogp_users table) while maintaining separate sessions for the website and panel.
## Files Created/Modified
### 1. `_website/login.php` (NEW)
- Full-featured login page with modern UI
- Authenticates against panel DB using MD5 password hashing (panel-compatible)
- Creates separate website session using `opengamepanel_web` session name
- Logs all login attempts via logger() function
- Session variables set:
- `$_SESSION['website_user_id']` - User ID from ogp_users
- `$_SESSION['website_username']` - Username
- `$_SESSION['website_user_role']` - User role (admin, user, etc.)
- `$_SESSION['website_user_email']` - User email
- `$_SESSION['website_login_time']` - Timestamp of login
### 2. `_website/logout.php` (NEW)
- Cleanly destroys website session
- Logs logout events
- Redirects to homepage after logout
- Properly clears session cookies
### 3. `_website/index.php` (MODIFIED)
- Added session management at the top
- Added header with Login/Logout button and user greeting
- Shows "Welcome, [username]!" when logged in
- Maintains same visual design with added header
## Session Management
### Separate Sessions
- **Website Session**: `opengamepanel_web` (this implementation)
- **Panel Session**: `opengamepanel_web` (existing panel)
These sessions are completely separate - users can be logged into one without being logged into the other.
## Security Features
1. **SQL Injection Prevention**: Uses `mysqli_real_escape_string()` for input sanitization
2. **Password Hashing**: Compatible with panel's MD5 hashing (legacy but matches panel)
3. **Session Isolation**: Separate session name prevents conflicts with panel
4. **XSS Prevention**: Uses `htmlspecialchars()` for output escaping
5. **Logging**: All login/logout events are logged via logger() function
## Database Requirements
Requires connection to panel database with access to:
- `ogp_users` table (fields: user_id, users_login, users_passwd, users_role, users_email)
- Connection configured in `db.php`
## Usage
### For Users:
1. Visit `_website/login.php` to login
2. Enter panel credentials (username/password)
3. After successful login, redirected to homepage with session active
4. Click "Logout" button to end session
### For Developers:
Check if user is logged in:
```php
session_name("opengamepanel_web");
session_start();
if (isset($_SESSION['website_user_id']) && !empty($_SESSION['website_user_id'])) {
// User is logged in
$username = $_SESSION['website_username'];
$user_id = $_SESSION['website_user_id'];
$user_role = $_SESSION['website_user_role'];
}
```
## Future Enhancements (Optional)
1. **Password Hashing Upgrade**: Implement modern bcrypt/argon2 with transparent upgrade on login
2. **CSRF Protection**: Add CSRF tokens to login form
3. **Rate Limiting**: Add IP-based login attempt limiting (similar to panel's ban_list)
4. **Remember Me**: Add persistent login cookie option
5. **Password Reset**: Integrate with panel's password reset flow
6. **Two-Factor Auth**: Optional 2FA for enhanced security
## Testing
All files pass PHP syntax validation:
```bash
php -l _website/index.php
php -l _website/login.php
php -l _website/logout.php
```
## Alignment with Copilot Instructions
This implementation follows the no-code planning guidelines from `.github/copilot-instructions.md`:
✅ Website uses panel DB for authentication
✅ Sessions remain separate (website ≠ panel)
✅ Auth compatibility maintained (MD5 hash for panel users)
✅ Minimal changes to existing code
✅ Repository-first approach (reused existing db.php, logger function)
✅ Security considerations (SQL injection prevention, session isolation)
## Notes
- Login credentials are the same as panel login (same user table)
- Website session does not grant access to panel - separate login required
- Logger function from db.php creates logfile.txt for audit trail

317
Panel/modules/billing/_archived/VISUAL_GUIDE.md Normal file
View file

@ -0,0 +1,317 @@
# Visual Guide - New Website Features
This document provides a visual description of the new features and UI changes.
## 1. Login Page Updates
### Before
```
┌─────────────────────────────────────┐
│ Welcome Back │
│ Sign in to your GameServers account│
│ │
│ Username: [____________] │
│ Password: [____________] │
│ │
│ [ Sign In ] │
│ │
│ Register │
│ ─── or ─── │
│ Back to Home | Panel Login │
└─────────────────────────────────────┘
```
### After
```
┌─────────────────────────────────────┐
│ Welcome Back │
│ Sign in to your GameServers account│
│ │
│ Username: [____________] │
│ Password: [____________] │
│ │
│ [ Sign In ] │
│ │
│ Register | Forgot Password? ←NEW │
│ ─── or ─── │
│ Back to Home | Panel Login │
└─────────────────────────────────────┘
```
## 2. Forgot Password Page (NEW)
```
┌─────────────────────────────────────┐
│ Forgot Password │
│ Enter your username or email to │
│ reset your password │
│ │
│ Username or Email: │
│ [_____________________________] │
│ │
│ [ Request Password Reset ] │
│ │
│ Back to Login | Home │
└─────────────────────────────────────┘
```
After submission (success):
```
┌─────────────────────────────────────┐
│ ✓ Password reset instructions have │
│ been sent to your email address. │
└─────────────────────────────────────┘
```
## 3. Reset Password Page (NEW)
```
┌─────────────────────────────────────┐
│ Reset Password │
│ Enter your new password │
│ │
│ New Password: │
│ [_____________________________] │
│ Must be at least 8 characters long │
│ │
│ Confirm Password: │
│ [_____________________________] │
│ │
│ [ Reset Password ] │
│ │
│ Back to Login | Home │
└─────────────────────────────────────┘
```
## 4. Navigation Menu Updates
### Before (Not Logged In)
```
┌──────────────────────────────────────────────────────────┐
│ GameServers.World [Login] │
│ Home | Game Servers | Cart │
└──────────────────────────────────────────────────────────┘
```
### After (Logged In)
```
┌──────────────────────────────────────────────────────────┐
│ GameServers.World Welcome, username! [Logout] │
│ Home | Game Servers | My Servers ←NEW | Cart │
└──────────────────────────────────────────────────────────┘
```
## 5. Server List Page
### Before
```
┌────────────────────────────┐
│ [Game Image] │
│ Counter-Strike 2 │
│ $15.99 Monthly │
│ │
│ Order Server (link) │
└────────────────────────────┘
```
### After
```
┌────────────────────────────┐
│ [Game Image] │
│ Counter-Strike 2 │
│ $15.99 Monthly │
│ │
│ ┌────────────┐ │
│ │ Order Now │ ←BUTTON │
│ └────────────┘ │
└────────────────────────────┘
```
Button styling:
- Gradient background (purple/blue)
- Rounded corners
- Hover effect (lift up)
- Better visibility
## 6. My Servers Page (NEW)
```
┌────────────────────────────────────────────────────────────────────────┐
│ My Game Servers │
├────────────────────────────────────────────────────────────────────────┤
│ Server Name │ Game │ Location │ Status │ Expires │ Price │ Action│
├──────────────┼─────────┼──────────┼────────┼────────────┼───────┼───────┤
│ My CS2 Srv │ CS2 │ US East │ Active │ Nov 22,2025│ $15.99│[Renew]│
│ Rust Server │ Rust │ US West │ Active │ Dec 5, 2025│ $19.99│[Renew]│
│ Minecraft │ MC │ EU │ Expired│ Oct 1, 2025│ $12.99│[Renew]│
└──────────────┴─────────┴──────────┴────────┴────────────┴───────┴───────┘
Status indicators:
- Active: Green badge
- Inactive: Red badge
- Expired: Red badge
```
Empty state (no servers):
```
┌────────────────────────────────────┐
│ My Game Servers │
├────────────────────────────────────┤
│ │
│ You don't have any game servers │
│ yet. │
│ │
│ ┌──────────────────────┐ │
│ │ Browse Game Servers │ │
│ └──────────────────────┘ │
└────────────────────────────────────┘
```
## 7. Renew Server Page (NEW)
```
┌─────────────────────────────────────┐
│ Renew Server │
├─────────────────────────────────────┤
│ Counter-Strike 2 Server │
│ │
│ ○ 1 Month - $15.99 │
│ ○ 1 Year - $159.99 │
│ │
│ ┌──────────────────────┐ Cancel │
│ │ Proceed to Payment │ │
│ └──────────────────────┘ │
└─────────────────────────────────────┘
```
## 8. Server Status Page (NEW)
```
┌────────────────────────────────────────────────────────────────────────────┐
│ Server Status │
│ Real-time status of our game server infrastructure │
├────────────────────────────────────────────────────────────────────────────┤
│ Server │Location/IP │Status │CPU │Memory│Disk │Uptime │Updated│
├─────────────┼─────────────┼────────────┼──────┼──────┼──────┼───────┼───────┤
│ US-East-1 │192.168.1.10 │ [Online] │45.2% │72.1% │38.5% │30 days│2m ago │
│ US-West-1 │192.168.1.11 │ [Online] │32.8% │65.3% │42.1% │15 days│1m ago │
│ EU-Central-1│192.168.1.12 │[Maintenance]│N/A │N/A │N/A │N/A │Never │
│ Asia-1 │192.168.1.13 │ [Offline] │N/A │N/A │N/A │N/A │2h ago │
└─────────────┴─────────────┴────────────┴──────┴──────┴──────┴───────┴───────┘
Server status is updated automatically every 5 minutes.
If you experience any issues, please contact support.
```
Status badge colors:
- Online: Green
- Offline: Red
- Maintenance: Orange
- Unknown: Gray
## 9. Footer Updates
### Before
```
┌────────────────────────────────────────────────┐
│ Privacy | TOS | Worlddomination.dev │
└────────────────────────────────────────────────┘
```
### After
```
┌────────────────────────────────────────────────────────┐
│ Privacy | TOS | Server Status ←NEW | Worlddomination.dev│
└────────────────────────────────────────────────────────┘
```
## 10. Order Page Image Fix
### Before (Broken)
```
┌────────────────────────────┐
│ [X] Image not found │
│ Counter-Strike 2 │
│ Description... │
└────────────────────────────┘
```
### After (Fixed)
```
┌────────────────────────────┐
│ [✓] ┌──────────┐ │
│ │ CS2 Image│ │
│ └──────────┘ │
│ Counter-Strike 2 │
│ Description... │
└────────────────────────────┘
```
Image path changed from `images/game.png` to `../images/game.png`
## Color Scheme
All pages use consistent styling:
### Primary Colors
- Purple/Blue Gradient: `#667eea` to `#764ba2`
- White backgrounds: `#ffffff`
- Dark backgrounds: `#0b1020`
### Status Colors
- Success/Active: `#10b981` (Green)
- Error/Expired: `#ef4444` (Red)
- Warning/Maintenance: `#f59e0b` (Orange)
- Info/Unknown: `#6b7280` (Gray)
### Typography
- Font: System fonts (-apple-system, Segoe UI, Roboto, Arial)
- Headings: Bold, 1.8rem
- Body: 1rem
- Small text: 0.9rem
### Buttons
- Primary: Gradient purple/blue
- Hover: Lift effect (translateY -2px)
- Border radius: 8px
- Padding: 12px 24px
## Responsive Design
All pages are mobile-responsive:
### Desktop (> 768px)
- Full navigation menu
- Side-by-side layouts
- Larger form fields
### Mobile (< 768px)
- Stacked navigation
- Single column layouts
- Touch-friendly buttons
- Larger tap targets
## Accessibility Features
- Semantic HTML elements
- Proper form labels
- Keyboard navigation support
- Focus indicators
- Alt text for images
- ARIA labels where needed
## Browser Compatibility
Tested and compatible with:
- Chrome/Edge (latest)
- Firefox (latest)
- Safari (latest)
- Mobile browsers (iOS Safari, Chrome Mobile)
## Performance
- Compressed CSS/JS
- Optimized images
- Cached static assets
- Minimal database queries
- Prepared statements for security and speed

16
Panel/modules/billing/_archived/removed-20251023-142000/ARCHIVE_README.txt Normal file
View file

@ -0,0 +1,16 @@
Archived files from _website on 2025-10-23 14:20:00
This folder contains a snapshot of removed documentation and test artifacts moved from the active `_website/` tree.
Files moved here (original paths):
- VISUAL_GUIDE.md
- README_LOGIN.md
- FEATURES.md
- IMPLEMENTATION_SUMMARY.md
- CONFIGURATION.md
- test_db_connection.php
- tools/simulate_webhook.php
- ai.php
- data/SIMULATED-WEBHOOK-20251022-101500.json
If you need to restore any of these, copy them back to the original paths.

3
Panel/modules/billing/_archived/removed-20251023-142000/MOVED_DOCS.md Normal file
View file

@ -0,0 +1,3 @@
The detailed game docs under `_website/docs/games/` were intentionally left in place (they are product-facing).
Top-level documentation (VISUAL_GUIDE.md, FEATURES.md, IMPLEMENTATION_SUMMARY.md, CONFIGURATION.md, README_LOGIN.md) were archived here and removed from the active site to reduce clutter.

75
Panel/modules/billing/_archived/removed-20251023-202500/MOVED_FILES.json Normal file
View file

@ -0,0 +1,75 @@
{
"moved_at": "2025-10-23T20:25:00Z",
"kept": {
"logs": "_website/logs/",
"docs": "_website/docs/"
},
"files": [
{
"original": "_website/ai.php",
"archived": "_website/_archived/removed-20251023-202500/ai.php",
"size_bytes": null,
"note": "archived sample and tools; size omitted"
},
{
"original": "_website/test_db_connection.php",
"archived": "_website/_archived/removed-20251023-202500/test_db_connection.php",
"size_bytes": null
},
{
"original": "_website/tools/simulate_webhook.php",
"archived": "_website/_archived/removed-20251023-202500/tools/simulate_webhook.php",
"size_bytes": null
},
{
"original": "_website/tools/check_db_user.php",
"archived": "_website/_archived/removed-20251023-202500/tools/check_db_user.php",
"size_bytes": null
},
{
"original": "_website/tools/check_invoices_redirect.php",
"archived": "_website/_archived/removed-20251023-202500/tools/check_invoices_redirect.php",
"size_bytes": null
},
{
"original": "_website/tools/debug_invoices_redirect.php",
"archived": "_website/_archived/removed-20251023-202500/tools/debug_invoices_redirect.php",
"size_bytes": null
},
{
"original": "_website/tools/check_logout_redirect.php",
"archived": "_website/_archived/removed-20251023-202500/tools/check_logout_redirect.php",
"size_bytes": null
},
{
"original": "_website/data/SIMULATED-WEBHOOK-20251022-101500.json",
"archived": "_website/_archived/removed-20251023-202500/data/SIMULATED-WEBHOOK-20251022-101500.json",
"size_bytes": null
},
{
"original": "_website/data/NO-INVOICE.json",
"archived": "_website/_archived/removed-20251023-202500/data/NO-INVOICE.json",
"size_bytes": null
},
{
"original": "_website/data/INV-20250825-174311-0a7993.json",
"archived": "_website/_archived/removed-20251023-202500/data/INV-20250825-174311-0a7993.json",
"size_bytes": null
},
{
"original": "_website/data/INV-20250825-170438-e37518.json",
"archived": "_website/_archived/removed-20251023-202500/data/INV-20250825-170438-e37518.json",
"size_bytes": null
},
{
"original": "_website/data/FREE-549-1761246925.json",
"archived": "_website/_archived/removed-20251023-202500/data/FREE-549-1761246925.json",
"size_bytes": null
},
{
"original": "_website/data/FREE-548-1761171178.json",
"archived": "_website/_archived/removed-20251023-202500/data/FREE-548-1761171178.json",
"size_bytes": null
}
]
}

325
Panel/modules/billing/_archived/removed-20251023-202500/ai.php Normal file
View file

@ -0,0 +1,325 @@
<?php
/***********************
* Assistant Chat (Full History) — PHP + cURL
* - Persistent thread in session
* - Full history render with Question / Answer labels
* - SSL verification disabled (your hosting constraint)
* - Citations: filename + page (when available)
***********************/
// Debug (disable on production)
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);
/* ------------------- CONFIG ------------------- */
$OPENAI_API_KEY = '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';
$ASSISTANT_ID = 'asst_RAhtGzcy6higJeMwomZSqVjM'; // <-- set to your existing assistant
$OPENAI_BASE_URL = 'https://api.openai.com/v1';
$OPENAI_BETA_HDR = 'assistants=v2'; // required for Assistants v2
$REQUEST_TIMEOUT = 30; // seconds for cURL calls
$RUN_POLL_DELAY = 500000; // microseconds between run polls (0.5s)
$RUN_POLL_MAX = 40; // max polls (~20s total); adjust as needed
/* ---------------------------------------------- */
if (session_status() === PHP_SESSION_NONE) {
session_start();
}
if (!isset($_SESSION['thread_id'])) {
$_SESSION['thread_id'] = null;
}
/** HTML escape helper */
function h($v) { return htmlspecialchars((string)$v, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8'); }
/** Low-level OpenAI request helper */
function openai_request($method, $endpoint, $payload = null, $query = []) {
global $OPENAI_API_KEY;
$url = "https://api.openai.com/v1" . $endpoint;
if (!empty($query)) $url .= '?' . http_build_query($query);
$headers = [
"Content-Type: application/json",
"Authorization: Bearer {$OPENAI_API_KEY}",
"OpenAI-Beta: assistants=v2"
];
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, strtoupper($method));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
// Host requires SSL verification disabled
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
if (!is_null($payload)) curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload));
$resp = curl_exec($ch);
if ($resp === false) {
$err = curl_error($ch);
curl_close($ch);
throw new RuntimeException("cURL error: {$err}");
}
$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
$data = json_decode($resp, true);
if ($code >= 400) {
$msg = isset($data['error']['message']) ? $data['error']['message'] : 'Unknown API error';
throw new RuntimeException("OpenAI API error ({$code}): {$msg}");
}
return is_array($data) ? $data : [];
}
/** Create or reuse a per-visitor thread */
function ensure_thread_id() {
if (!empty($_SESSION['thread_id'])) return $_SESSION['thread_id'];
$created = openai_request('POST', '/threads', ['metadata' => ['site' => $_SERVER['HTTP_HOST'] ?? 'unknown']]);
$tid = $created['id'] ?? null;
if (!$tid) throw new RuntimeException('Failed to create thread.');
$_SESSION['thread_id'] = $tid;
return $tid;
}
/** Add a user message */
function add_user_message($thread_id, $text) {
openai_request('POST', "/threads/{$thread_id}/messages", [
'role' => 'user',
'content' => $text,
]);
}
/** Start a run */
function start_run($thread_id, $assistant_id) {
$run = openai_request('POST', "/threads/{$thread_id}/runs", [
'assistant_id' => $assistant_id,
]);
$run_id = $run['id'] ?? null;
if (!$run_id) throw new RuntimeException('Failed to start run.');
return $run_id;
}
/** Wait for completion (or fail/timeout) */
function wait_for_run($thread_id, $run_id, $max_tries, $delay_us) {
$terminal = ['completed', 'failed', 'requires_action', 'cancelled', 'expired'];
for ($i = 0; $i < $max_tries; $i++) {
usleep($delay_us);
$run = openai_request('GET', "/threads/{$thread_id}/runs/{$run_id}");
$status = $run['status'] ?? '';
if (in_array($status, $terminal, true)) return $run;
}
return ['status' => 'timeout'];
}
/** Cache of file_id => filename (per request) */
$_FILE_NAME_CACHE = [];
/** Resolve file name from file_id (API returns "filename" or sometimes "display_name") */
function get_file_name_by_id($file_id) {
global $_FILE_NAME_CACHE;
if (isset($_FILE_NAME_CACHE[$file_id])) return $_FILE_NAME_CACHE[$file_id];
$file = openai_request('GET', "/files/{$file_id}");
$name = $file['filename'] ?? ($file['display_name'] ?? ($file['name'] ?? $file_id));
$_FILE_NAME_CACHE[$file_id] = $name;
return $name;
}
/**
* Extract message text + citations (filename + page if available).
* Returns an array of entries: ['role' => 'user|assistant', 'text' => '...', 'refs' => [['filename'=>'','page'=>'','file_id'=>'']]]
*/
function normalize_messages($messages) {
$out = [];
if (empty($messages['data']) || !is_array($messages['data'])) return $out;
// The API returns newest first by default if not specifying; we request 'asc' in fetch.
foreach ((array)$messages['data'] as $m) {
$role = $m['role'] ?? '';
if (!in_array($role, ['user', 'assistant', 'system'], true)) continue;
if (empty($m['content']) || !is_array($m['content'])) continue;
$all_text = [];
$refs = [];
foreach ((array)$m['content'] as $part) {
if (($part['type'] ?? '') === 'text' && !empty($part['text']['value'])) {
$all_text[] = $part['text']['value'];
// Parse annotations for citations (file_citation)
$anns = $part['text']['annotations'] ?? [];
if (is_array($anns)) {
foreach ((array)$anns as $ann) {
if (($ann['type'] ?? '') === 'file_citation' && !empty($ann['file_citation']['file_id'])) {
$fid = $ann['file_citation']['file_id'];
$page = null;
// Page can appear under different shapes depending on backend. Try common keys:
if (isset($ann['file_citation']['page'])) {
$page = $ann['file_citation']['page'];
} elseif (isset($ann['file_citation']['page_range']) && is_array($ann['file_citation']['page_range'])) {
// Example: ['start' => 5, 'end' => 6]
$start = $ann['file_citation']['page_range']['start'] ?? null;
$end = $ann['file_citation']['page_range']['end'] ?? null;
if ($start && $end && $start !== $end) $page = "{$start}-{$end}";
elseif ($start) $page = (string)$start;
}
// Fetch filename
try {
$filename = get_file_name_by_id($fid);
} catch (Throwable $e) {
$filename = $fid;
}
$refs[] = [
'file_id' => $fid,
'filename' => $filename,
'page' => $page ?? 'n/a',
];
}
}
}
}
}
if (!empty($all_text)) {
$out[] = [
'role' => $role,
'text' => implode("\n", $all_text),
'refs' => $refs,
];
}
}
return $out;
}
/** Fetch conversation (ascending) */
function fetch_history($thread_id) {
$messages = openai_request('GET', "/threads/{$thread_id}/messages", null, ['order' => 'asc', 'limit' => 50]);
return normalize_messages($messages);
}
/* ------------------- HANDLE POST ------------------- */
$error = null;
$history = [];
try {
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (!empty($_POST['reset_thread'])) {
$_SESSION['thread_id'] = null;
} elseif (isset($_POST['user_input'])) {
$user_text = trim((string)$_POST['user_input']);
if ($user_text !== '') {
$thread_id = ensure_thread_id();
add_user_message($thread_id, $user_text);
$run_id = start_run($thread_id, $ASSISTANT_ID);
$run = wait_for_run($thread_id, $run_id, $POLL_MAX_TRIES, $RUN_POLL_DELAY);
if (($run['status'] ?? '') === 'failed') {
$error = 'Assistant run failed.';
} elseif (($run['status'] ?? '') === 'requires_action') {
// If you later support tool calls, handle them here then submit outputs.
} elseif (($run['status'] ?? '') === 'timeout') {
$error = 'Assistant timed out. Please try again.';
}
}
}
}
if (!empty($_SESSION['thread_id'])) {
$history = fetch_history($_SESSION['thread_id']);
}
} catch (Throwable $e) {
$error = $e->getMessage();
}
?>
<?php
// Include top and menu for website UI (session already started above)
include(__DIR__ . '/includes/top.php');
include(__DIR__ . '/includes/menu.php');
?>
<!-- UI -->
<div class="ai-container">
<h3>Site Assistant</h3>
<p>Type a question below. Press <b>Enter</b> to send, <b>Shift+Enter</b> for a new line.</p>
<?php if ($error): ?>
<div class="ai-alert" style="border:1px solid #c00;">
<strong>Error:</strong> <?php echo h($error); ?>
</div>
<?php endif; ?>
<?php if (!empty($_SESSION['thread_id'])): ?>
<div class="ai-msg-meta">Thread: <?php echo h($_SESSION['thread_id']); ?></div>
<?php endif; ?>
<form id="chat-form" method="post" style="margin:12px 0;">
<textarea id="chat-input" name="user_input" rows="3" class="ai-textarea" placeholder="Ask your question..."></textarea>
<div style="margin-top:8px; display:flex; gap:8px;">
<button type="submit">Send</button>
<button type="submit" name="reset_thread" value="1">Reset Conversation</button>
</div>
</form>
<?php if (!empty($history) && is_array($history)): ?>
<div style="margin-top:16px; padding:10px; border:1px solid #ccc; border-radius:8px;">
<?php foreach ((array)$history as $msg):
// Label mapping: user => Question, assistant => Answer, system => (optional)
$role = $msg['role'] ?? 'assistant';
if ($role === 'user') $label = 'Question';
elseif ($role === 'assistant') $label = 'Answer';
else $label = ucfirst($role); // e.g., System
$text = str_replace("\r\n", "\n", $msg['text'] ?? '');
$refs = $msg['refs'] ?? [];
?>
<div style="margin-bottom:14px;">
<div style="font-weight:bold;"><?php echo h($label); ?></div>
<div style="white-space:pre-wrap;"><?php echo nl2br(h($text)); ?></div>
<?php if (!empty($refs)): ?>
<div style="margin-top:6px; font-size:12px;">
<em>References:</em>
<ul style="margin:6px 0 0 18px; padding:0;">
<?php foreach ((array)$refs as $r):
$fname = $r['filename'] ?? 'file';
$page = $r['page'] ?? 'n/a';
// If you have your own document links, replace '#' with a real URL.
?>
<li>
<a href="#" title="file_id: <?php echo h($r['file_id']); ?>">
<?php echo h($fname); ?> — page <?php echo h($page); ?>
</a>
</li>
<?php endforeach; ?>
</ul>
</div>
<?php endif; ?>
</div>
<?php endforeach; ?>
</div>
<?php else: ?>
<div style="margin-top:10px; color:#666;">No messages yet.</div>
<?php endif; ?>
<div style="margin-top:10px; font-size:12px; color:#555;">
Conversation persists until you click “Reset Conversation”.
</div>
</div>
<!-- Submit on Enter (Shift+Enter = newline) -->
<script>
(function(){
var form = document.getElementById('chat-form');
var input = document.getElementById('chat-input');
input.addEventListener('keydown', function(e){
if (e.key === 'Enter') {
if (!e.shiftKey) {
e.preventDefault();
form.submit();
}
// if Shift+Enter, allow newline
}
});
})();
</script>

12
Panel/modules/billing/_archived/removed-20251023-202500/data/FREE-548-1761171178.json Normal file
View file

@ -0,0 +1,12 @@
{
"event_type": "PAYMENT.CAPTURE.COMPLETED",
"status": "PAID",
"amount": 0,
"currency": "USD",
"payer": "iaretechnician@gmail.com",
"invoice": "FREE-548-1761171178",
"custom": "admin_free_create_order_548",
"resource_id": "FREE-439c594e1e65",
"items": [],
"ts": "2025-10-23T00:12:58+02:00"
}

12
Panel/modules/billing/_archived/removed-20251023-202500/data/FREE-549-1761246925.json Normal file
View file

@ -0,0 +1,12 @@
{
"event_type": "PAYMENT.CAPTURE.COMPLETED",
"status": "PAID",
"amount": 0,
"currency": "USD",
"payer": "iaretechnician@gmail.com",
"invoice": "FREE-549-1761246925",
"custom": "admin_free_create_order_549",
"resource_id": "FREE-439c594e1e65",
"items": [],
"ts": "2025-10-23T00:12:58+02:00"
}

11
Panel/modules/billing/_archived/removed-20251023-202500/data/INV-20250825-170438-e37518.json Normal file
View file

@ -0,0 +1,11 @@
{
"event_type": "PAYMENT.CAPTURE.COMPLETED",
"status": "PAID",
"amount": "19.99",
"currency": "USD",
"payer": null,
"invoice": "INV-20250825-170438-e37518",
"custom": "user_1234_order_5678",
"resource_id": "2V315801FX904340P",
"ts": "2025-08-25T17:05:27-04:00"
}

11
Panel/modules/billing/_archived/removed-20251023-202500/data/INV-20250825-174311-0a7993.json Normal file
View file

@ -0,0 +1,11 @@
{
"event_type": "PAYMENT.CAPTURE.COMPLETED",
"status": "PAID",
"amount": "19.99",
"currency": "USD",
"payer": null,
"invoice": "INV-20250825-174311-0a7993",
"custom": "user_1234_order_5678",
"resource_id": "2V315801FX904340P",
"ts": "2025-08-25T17:05:27-04:00"
}

10
Panel/modules/billing/_archived/removed-20251023-202500/data/NO-INVOICE.json Normal file
View file

@ -0,0 +1,10 @@
{
"event_type": "PAYMENT.SALE.COMPLETED",
"status": "PAID",
"amount": "0.48",
"currency": "USD",
"payer": null,
"invoice": null,
"custom": null,
"ts": "2025-08-25T16:46:11-04:00"
}

10
Panel/modules/billing/_archived/removed-20251023-202500/data/SIMULATED-WEBHOOK-20251022-101500.json Normal file
View file

@ -0,0 +1,10 @@
{
"event_type": "PAYMENT.CAPTURE.COMPLETED",
"status": "PAID",
"amount": "9.99",
"currency": "USD",
"invoice": "INV-20251022-101500-TEST",
"resource_id": "SIMULATED12345",
"ts": "2025-10-22T10:15:00-04:00",
"note": "Simulated webhook write for testing"
}

25
Panel/modules/billing/add_override_price_column.sql Normal file
View file

@ -0,0 +1,25 @@
-- DEPRECATED: This file is no longer needed.
--
-- The gsp_billing_service_remote_servers mapping table has been removed.
-- Server availability per game/service is now stored in gsp_billing_services.remote_server_id
-- as a comma-separated list of numeric server IDs (e.g. "1,3,7").
-- The module migration (db_version 4) drops the mapping table automatically.
--
-- The original content of this file is kept below for historical reference only.
-- Do NOT run this script on new installations.
--
-- Migration: add override_price to billing_service_remote_servers
-- Run once on existing installs that already have the mapping table (db_version 2)
-- but are missing the override_price column (added in db_version 3 / module v3.1).
--
-- Replace 'gsp_' with your actual table prefix if it differs.
--
-- This statement is safe to run multiple times only if your MySQL version supports
-- ADD COLUMN IF NOT EXISTS (MySQL 8.0.3+). On older versions, check first:
-- SHOW COLUMNS FROM gsp_billing_service_remote_servers LIKE 'override_price';
ALTER TABLE `gsp_billing_service_remote_servers`
ADD COLUMN IF NOT EXISTS `override_price` DECIMAL(10,2) NULL AFTER `enabled`;
-- If your MySQL is older than 8.0.3, use the conditional form instead:
-- ALTER TABLE `gsp_billing_service_remote_servers` ADD COLUMN `override_price` DECIMAL(10,2) NULL AFTER `enabled`;

10
Panel/modules/billing/add_paypal_data_column.sql Normal file
View file

@ -0,0 +1,10 @@
-- Add paypal_data column to billing_orders table
-- This stores the full PayPal response JSON for admin/refund tracking
-- Table prefix is hardcoded to gsp_ for standalone billing module
ALTER TABLE `gsp_billing_orders`
ADD COLUMN `paypal_data` TEXT NULL AFTER `payment_txid`;
-- Update comment
ALTER TABLE `gsp_billing_orders`
MODIFY COLUMN `paypal_data` TEXT NULL COMMENT 'Full PayPal API response JSON for tracking/refunds';

41
Panel/modules/billing/add_remote_server_enabled_column.sql Normal file
View file

@ -0,0 +1,41 @@
-- DEPRECATED: This file is no longer needed.
--
-- The billing module no longer references an `enabled` column on gsp_remote_servers.
-- gsp_remote_servers is the server inventory table only.
-- Server availability per game/service is stored in gsp_billing_services.remote_server_id
-- as a comma-separated list of numeric server IDs (e.g. "1,3,7").
--
-- The original content of this file is kept below for historical reference only.
-- Do NOT run this script on new installations.
--
-- Migration: add `enabled` column to gsp_remote_servers
--
-- The original panel schema (panel.sql / ogp_remote_servers) includes an `enabled`
-- INT(11) column. Installations that were created from an older schema, or whose
-- table was renamed without carrying the column forward, may be missing it.
--
-- Run this once against your panel database (replace `gsp_` with your prefix if
-- different). Safe to skip if the column already exists — just check with:
-- SHOW COLUMNS FROM `gsp_remote_servers` LIKE 'enabled';
--
-- Usage:
-- mysql -u <user> -p <db_name> < modules/billing/add_remote_server_enabled_column.sql
SET @table_name = 'gsp_remote_servers';
SET @col_name = 'enabled';
SET @sql = IF(
(
SELECT COUNT(*)
FROM INFORMATION_SCHEMA.COLUMNS
WHERE TABLE_SCHEMA = DATABASE()
AND TABLE_NAME = @table_name
AND COLUMN_NAME = @col_name
) = 0,
CONCAT('ALTER TABLE `', @table_name, '` ADD COLUMN `enabled` INT(11) NOT NULL DEFAULT 1'),
'SELECT "Column already exists — nothing to do" AS note'
);
PREPARE stmt FROM @sql;
EXECUTE stmt;
DEALLOCATE PREPARE stmt;

10
Panel/modules/billing/add_service_id_column.sql Normal file
View file

@ -0,0 +1,10 @@
-- Add missing service_id column to gsp_billing_invoices table
-- This column is required to track which service/game plan was purchased
-- Table prefix is hardcoded to gsp_ for standalone billing module
ALTER TABLE `gsp_billing_invoices`
ADD COLUMN `service_id` INT(11) NOT NULL AFTER `user_id`;
-- Add index for better query performance
ALTER TABLE `gsp_billing_invoices`
ADD KEY `service_id` (`service_id`);

468
Panel/modules/billing/add_to_cart.php Normal file
View file

@ -0,0 +1,468 @@
<?php
// _website/add_to_cart.php
// Handle Add to Cart posts from order.php
require_once(__DIR__ . '/bootstrap.php');
require_once(__DIR__ . '/includes/login_required.php');
require_once(__DIR__ . '/includes/log.php');
// Variables from config.inc.php (helps IDEs understand scope)
/** @var string $db_host Database host */
/** @var string $db_user Database user */
/** @var string $db_pass Database password */
/** @var string $db_name Database name */
/** @var string $table_prefix Table prefix for database tables */
// Start session if not already
if (session_status() === PHP_SESSION_NONE) {
session_name('opengamepanel_web');
session_start();
}
function billing_generate_password(): string
{
$alphabet = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
$len = strlen($alphabet);
$password = '';
for ($i = 0; $i < 6; $i++) {
try {
$password .= $alphabet[random_int(0, $len - 1)];
} catch (Throwable $e) {
$password .= $alphabet[mt_rand(0, $len - 1)];
}
}
return $password;
}
function billing_normalize_duration(string $duration): array
{
return ['invoice_duration' => 'month', 'rate_type' => 'monthly', 'days' => 31];
}
function billing_money_to_cents(float $amount): int
{
return (int) round($amount * 100);
}
function billing_cents_to_money(int $cents): float
{
return $cents / 100;
}
function billing_rate_from_service(mysqli $db, string $table_prefix, int $service_id, string $rate_type): float
{
if ($service_id <= 0) {
return 0.0;
}
$stmt = $db->prepare("SELECT price_monthly FROM {$table_prefix}billing_services WHERE service_id = ? LIMIT 1");
if (!$stmt) {
return 0.0;
}
$stmt->bind_param('i', $service_id);
$stmt->execute();
$stmt->bind_result($price_monthly);
$rate = 0.0;
if ($stmt->fetch()) {
$rate = floatval($price_monthly);
}
$stmt->close();
return $rate;
}
function billing_detect_service_os(string $cfgFile, string $gameKey): string
{
$haystack = strtolower(trim($cfgFile !== '' ? $cfgFile : $gameKey));
if ($haystack === '') {
return 'any';
}
if (preg_match('/(?:^|[_\\-])(win|windows)(?:[_\\-]|$)/i', $haystack)) {
return 'windows';
}
if (preg_match('/(?:^|[_\\-])linux(?:[_\\-]|$)/i', $haystack)) {
return 'linux';
}
return 'any';
}
function billing_normalize_node_os(string $serverOs): string
{
$value = strtolower(trim($serverOs));
if ($value === '' || $value === 'any') {
return 'any';
}
if (str_starts_with($value, 'win')) {
return 'windows';
}
if (str_starts_with($value, 'lin')) {
return 'linux';
}
return $value;
}
function billing_fail_add_to_cart(string $message, array $context = [], ?string $redirect = null): void
{
site_log_error('add_to_cart_failed', array_merge(['message' => $message], $context));
$target = $redirect ?? '/cart.php?error=add_to_cart';
header('Location: ' . $target);
exit;
}
// Immediate request tracing log (helps confirm the script is hit)
@mkdir(__DIR__ . '/logs', 0775, true);
$trace_file = __DIR__ . '/logs/add_to_cart_requests.log';
file_put_contents($trace_file, date('c') . " - REQUEST_METHOD=" . ($_SERVER['REQUEST_METHOD'] ?? '') . " URI=" . ($_SERVER['REQUEST_URI'] ?? '') . "\n", FILE_APPEND);
// Prefer website session id if set (login.php sets website_user_id in debug mode)
$user_id = 0;
if (isset($_SESSION['website_user_id']) && !empty($_SESSION['website_user_id'])) {
$user_id = intval($_SESSION['website_user_id']);
} elseif (isset($_SESSION['user_id']) && !empty($_SESSION['user_id'])) {
$user_id = intval($_SESSION['user_id']);
}
// If we don't have a numeric user_id but have a username, try to resolve it from the panel DB
if ($user_id <= 0 && isset($_SESSION['website_username']) && !empty($_SESSION['website_username'])) {
$uname = trim((string)$_SESSION['website_username']);
// attempt to lookup in DB (if connection available later we will set session after connecting)
// We'll set a temporary flag to resolve after DB connection is established below
$resolve_username_for_user_id = $uname;
} else {
$resolve_username_for_user_id = null;
}
/*
if ($user_id <= 0) {
// Not logged in - redirect to login with return
$return = urlencode('/' . trim(str_replace('\\', '/', $_SERVER['REQUEST_URI']), '/'));
header('Location: ' . billing_url('login.php') . '?return_to=' . $return);
exit;
}*/
// Basic validation and normalization
$service_id = isset($_POST['service_id']) ? intval($_POST['service_id']) : 0;
$home_name = isset($_POST['home_name']) ? trim($_POST['home_name']) : '';
$ip_id = isset($_POST['ip_id']) ? intval($_POST['ip_id']) : 0;
$max_players = isset($_POST['max_players']) ? intval($_POST['max_players']) : 0;
$qty = isset($_POST['qty']) ? intval($_POST['qty']) : 1;
$invoice_duration = isset($_POST['invoice_duration']) ? $_POST['invoice_duration'] : 'month';
$display_service_id = isset($_POST['display_service_id']) ? intval($_POST['display_service_id']) : 0;
$display_rate = isset($_POST['display_rate']) ? floatval($_POST['display_rate']) : 0.0;
$posted_total = isset($_POST['calculated_total']) ? floatval($_POST['calculated_total']) : 0.0;
$remote_control_password = isset($_POST['remote_control_password']) ? trim((string)$_POST['remote_control_password']) : '';
$ftp_password = isset($_POST['ftp_password']) ? trim((string)$_POST['ftp_password']) : '';
// Price lookup: try to find service price_monthly
$db = mysqli_connect($db_host, $db_user, $db_pass, $db_name, isset($db_port) ? (int)$db_port : null);
if (!$db) {
// Log connection error and return user to cart with a friendly error flag
@mkdir(__DIR__ . '/logs', 0775, true);
$trace = __DIR__ . '/logs/add_to_cart.log';
file_put_contents($trace, date('c') . " - mysqli_connect failed: " . mysqli_connect_error() . "\n", FILE_APPEND);
billing_fail_add_to_cart('DB connection failed');
} else {
mysqli_set_charset($db, 'utf8mb4');
// Log that config was loaded (mask password)
@mkdir(__DIR__ . '/logs', 0775, true);
$trace = __DIR__ . '/logs/add_to_cart.log';
$masked_pass = strlen($db_pass) ? '***' : '';
file_put_contents($trace, date('c') . " - DB connected host={$db_host} user={$db_user} pass={$masked_pass} db={$db_name}\n", FILE_APPEND);
}
// If we deferred resolving username to user_id, do it now with the DB connection
if (!empty($resolve_username_for_user_id) && $db) {
$safe_uname = mysqli_real_escape_string($db, $resolve_username_for_user_id);
// users_login is the correct column name in this schema
$q = mysqli_query($db, "SELECT user_id FROM {$table_prefix}users WHERE users_login = '$safe_uname' LIMIT 1");
if ($q && mysqli_num_rows($q) === 1) {
$r = mysqli_fetch_assoc($q);
$user_id = intval($r['user_id'] ?? 0);
// persist into session for subsequent requests
if ($user_id > 0) {
$_SESSION['website_user_id'] = $user_id;
site_log_info('resolved_user_id_from_username', ['username'=>$resolve_username_for_user_id,'user_id'=>$user_id]);
// Also resolve and persist the user's role so menus and admin checks are consistent
$role_q = mysqli_query($db, "SELECT users_role FROM {$table_prefix}users WHERE user_id = " . intval($user_id) . " LIMIT 1");
if ($role_q && mysqli_num_rows($role_q) === 1) {
$role_row = mysqli_fetch_assoc($role_q);
$_SESSION['website_user_role'] = $role_row['users_role'] ?? '';
}
}
} else {
site_log_warn('resolve_user_failed', ['username'=>$resolve_username_for_user_id]);
}
}
$service_name = '';
$base_rate = 0.0;
$slot_min_qty = 1;
$slot_max_qty = 1;
$service_home_cfg_id = 0;
$service_remote_server_csv = '';
$service_cfg_file = '';
$service_game_key = '';
$durationInfo = billing_normalize_duration($invoice_duration);
if ($service_id > 0) {
$stmt = $db->prepare("SELECT bs.service_name, bs.price_monthly, bs.slot_min_qty, bs.slot_max_qty, bs.home_cfg_id, bs.remote_server_id, ch.home_cfg_file, ch.game_key
FROM {$table_prefix}billing_services bs
LEFT JOIN {$table_prefix}config_homes ch ON ch.home_cfg_id = bs.home_cfg_id
WHERE bs.service_id = ? AND bs.enabled = 1
LIMIT 1");
if ($stmt) {
$stmt->bind_param('i', $service_id);
$stmt->execute();
$stmt->bind_result($service_name, $price_monthly, $slot_min_qty, $slot_max_qty, $service_home_cfg_id, $service_remote_server_csv, $service_cfg_file, $service_game_key);
if ($stmt->fetch()) {
$base_rate = floatval($price_monthly);
// constrain slots
if ($max_players < $slot_min_qty) $max_players = $slot_min_qty;
if ($max_players > $slot_max_qty) $max_players = $slot_max_qty;
}
$stmt->close();
}
}
if ($service_id <= 0 || $base_rate < 0) {
billing_fail_add_to_cart('Invalid service selection', ['service_id' => $service_id]);
}
if ($service_name === '') {
billing_fail_add_to_cart('Selected service is not available', ['service_id' => $service_id], '/serverlist.php');
}
if ($ip_id <= 0) {
billing_fail_add_to_cart('No location selected', ['service_id' => $service_id], '/order.php?service_id=' . intval($service_id) . '&error_message=' . rawurlencode('Please select a server location.'));
}
$allowedServerIds = [];
foreach (explode(',', (string)$service_remote_server_csv) as $part) {
$part = trim($part);
if ($part !== '' && ctype_digit($part)) {
$allowedServerIds[(int)$part] = true;
}
}
if (!isset($allowedServerIds[$ip_id])) {
billing_fail_add_to_cart('Selected location is not allowed for this service', [
'service_id' => $service_id,
'ip_id' => $ip_id,
'remote_server_csv' => $service_remote_server_csv,
], '/order.php?service_id=' . intval($service_id) . '&error_message=' . rawurlencode('Selected location is not available for this service.'));
}
$hasServerOsColumn = false;
$osColCheck = mysqli_query($db, "SHOW COLUMNS FROM {$table_prefix}remote_servers LIKE 'server_os'");
if ($osColCheck && mysqli_num_rows($osColCheck) > 0) {
$hasServerOsColumn = true;
}
if ($hasServerOsColumn) {
$rsQuery = mysqli_query($db, "SELECT remote_server_id, server_os FROM {$table_prefix}remote_servers WHERE remote_server_id = " . intval($ip_id) . " LIMIT 1");
if ($rsQuery && mysqli_num_rows($rsQuery) === 1) {
$rsRow = mysqli_fetch_assoc($rsQuery);
$serviceOs = billing_detect_service_os((string)$service_cfg_file, (string)$service_game_key);
$nodeOs = billing_normalize_node_os((string)($rsRow['server_os'] ?? 'any'));
if ($serviceOs !== 'any' && $nodeOs !== 'any' && $serviceOs !== $nodeOs) {
$message = $serviceOs === 'windows'
? 'This service requires a Windows server location.'
: 'This service requires a Linux server location.';
billing_fail_add_to_cart('Service and node OS mismatch', [
'service_id' => $service_id,
'home_cfg_id' => $service_home_cfg_id,
'cfg_file' => $service_cfg_file,
'node_os' => $nodeOs,
], '/order.php?service_id=' . intval($service_id) . '&error_message=' . rawurlencode($message));
}
} else {
billing_fail_add_to_cart('Selected remote server not found', ['service_id' => $service_id, 'ip_id' => $ip_id], '/order.php?service_id=' . intval($service_id) . '&error_message=' . rawurlencode('Selected server location no longer exists.'));
}
}
if ($base_rate <= 0 && $display_service_id > 0) {
$fallback_rate = billing_rate_from_service($db, $table_prefix, $display_service_id, $durationInfo['rate_type']);
if ($fallback_rate > 0) {
$base_rate = $fallback_rate;
}
}
if ($base_rate <= 0 && $display_rate > 0) {
$base_rate = $display_rate;
}
if ($remote_control_password === '' || strcasecmp($remote_control_password, 'ChangeMe') === 0) {
$remote_control_password = billing_generate_password();
}
if ($ftp_password === '' || strcasecmp($ftp_password, 'ChangeMe') === 0) {
$ftp_password = billing_generate_password();
}
// Insert into {table_prefix}billing_invoices (NOT orders - invoice created first)
$now = date('Y-m-d H:i:s');
$status = 'due'; // Invoice status: due (unpaid), paid
$payment_status = 'unpaid';
$qty = max(1, $qty);
$max_players = max(1, $max_players);
$rate_per_player_cents = max(0, billing_money_to_cents($base_rate));
$subtotal_cents = $rate_per_player_cents * $max_players * $qty;
$posted_total_cents = max(0, billing_money_to_cents($posted_total));
if ($subtotal_cents <= 0 && $posted_total_cents > 0 && $base_rate > 0) {
$subtotal_cents = $posted_total_cents;
}
$subtotal = billing_cents_to_money($subtotal_cents);
$amount = $subtotal;
$period_end = date('Y-m-d H:i:s', strtotime('+' . ($durationInfo['days'] * $qty) . ' days'));
// Normal flow: process POST immediately. If debug=1 is passed, we'll still log SQL and show results in logs.
$debug = (isset($_GET['debug']) && $_GET['debug'] == '1') || (isset($_POST['debug']) && $_POST['debug'] == '1');
// Build and execute the INSERT with prepared statements
@mkdir(__DIR__ . '/logs', 0775, true);
$logfile = __DIR__ . '/logs/add_to_cart.log';
site_log_info('add_to_cart_invoked', ['user_id'=>$user_id, 'service_id'=>$service_id]);
// Get customer name and email from {table_prefix}users
$customer_name = '';
$customer_email = '';
$user_q = mysqli_query($db, "SELECT users_fname, users_lname, users_email FROM {$table_prefix}users WHERE user_id = " . intval($user_id) . " LIMIT 1");
if ($user_q && mysqli_num_rows($user_q) === 1) {
$user_row = mysqli_fetch_assoc($user_q);
$customer_name = trim(($user_row['users_fname'] ?? '') . ' ' . ($user_row['users_lname'] ?? ''));
$customer_email = $user_row['users_email'] ?? '';
}
// Compute due_date = now + 3 days
$due_dt = new DateTime('now');
$due_dt->modify('+3 days');
$due_date = $due_dt->format('Y-m-d H:i:s');
// Escape values
$esc_user_id = intval($user_id);
$esc_service_id = intval($service_id);
$esc_ip_id = intval($ip_id);
$esc_max_players = intval($max_players);
$esc_qty = intval($qty);
$description = trim(($service_name !== '' ? $service_name : 'Game Server') . ': ' . $home_name);
$invoiceTable = $table_prefix . 'billing_invoices';
$invoiceColumns = [];
$columnsResult = mysqli_query($db, "SHOW COLUMNS FROM `{$invoiceTable}`");
if (!$columnsResult) {
billing_fail_add_to_cart('Could not inspect billing invoice schema', ['table' => $invoiceTable, 'error' => mysqli_error($db)]);
}
while ($col = mysqli_fetch_assoc($columnsResult)) {
$invoiceColumns[$col['Field']] = true;
}
mysqli_free_result($columnsResult);
$invoice_duration = $durationInfo['invoice_duration'];
$rate_type = $durationInfo['rate_type'];
$rowData = [
'order_id' => 0,
'user_id' => $esc_user_id,
'service_id' => $esc_service_id,
'home_id' => 0,
'home_name' => $home_name,
'ip' => $esc_ip_id,
'max_players' => $esc_max_players,
'remote_control_password' => $remote_control_password,
'ftp_password' => $ftp_password,
'customer_name' => $customer_name,
'customer_email' => $customer_email,
'amount' => $amount,
'discount_amount' => 0.00,
'currency' => 'USD',
'status' => $status,
'billing_status' => $status,
'invoice_date' => $now,
'due_date' => $due_date,
'description' => $description,
'invoice_duration' => $invoice_duration,
'rate_type' => $rate_type,
'rate_per_player' => (float)$base_rate,
'players' => $max_players,
'period_start' => $now,
'period_end' => $period_end,
'subtotal' => $subtotal,
'total_due' => $amount,
'payment_status' => $payment_status,
'qty' => $esc_qty,
'coupon_id' => 0,
];
$insertColumns = [];
$placeholders = [];
$bindTypes = '';
$bindValues = [];
foreach ($rowData as $column => $value) {
if (!isset($invoiceColumns[$column])) {
continue;
}
$insertColumns[] = "`{$column}`";
$placeholders[] = '?';
if (is_int($value)) {
$bindTypes .= 'i';
} elseif (is_float($value)) {
$bindTypes .= 'd';
} else {
$bindTypes .= 's';
}
$bindValues[] = $value;
}
if (empty($insertColumns)) {
billing_fail_add_to_cart('No compatible invoice columns were found for insert', ['table' => $invoiceTable]);
}
$sql = "INSERT INTO `{$invoiceTable}` (" . implode(', ', $insertColumns) . ")
VALUES (" . implode(', ', $placeholders) . ")";
$stmt = $db->prepare($sql);
$res = false;
$err_no = 0;
$err = '';
if ($stmt) {
$stmt->bind_param($bindTypes, ...$bindValues);
$res = @$stmt->execute();
$err_no = mysqli_errno($db);
$err = mysqli_error($db);
} else {
$err_no = mysqli_errno($db);
$err = mysqli_error($db);
}
site_log_info('add_to_cart_invoice', [
'user_id' => $user_id,
'service_id' => $service_id,
'home_name' => $home_name,
'remote_server_id' => $ip_id,
'players' => $max_players,
'qty' => $qty,
'invoice_duration' => $invoice_duration,
'subtotal' => $subtotal,
'total_due' => $amount,
]);
file_put_contents($logfile, date('c') . " - Creating invoice (not order): status=due total_due={$amount}\n", FILE_APPEND);
if (!$res || $err_no > 0) {
site_log_error('mysqli_query_failed', ['errno'=>$err_no, 'error'=>$err, 'sql'=>$sql]);
file_put_contents($logfile, date('c') . " - ERROR: " . $err . " (errno: {$err_no})\n", FILE_APPEND);
// Log table existence check
$tbl_check = mysqli_query($db, "SHOW TABLES LIKE '{$table_prefix}billing_invoices'");
$tbl_exists = ($tbl_check && mysqli_num_rows($tbl_check) > 0) ? 'yes' : 'no';
site_log_warn('billing_invoices_exists', ['exists'=>$tbl_exists]);
file_put_contents($logfile, date('c') . " - Table exists check: {$tbl_exists}\n", FILE_APPEND);
billing_fail_add_to_cart('Invoice insert failed', ['errno' => $err_no, 'error' => $err]);
} else {
$insert_id = mysqli_insert_id($db);
$affected = mysqli_affected_rows($db);
site_log_info('add_to_cart_insert', ['invoice_id'=>$insert_id, 'affected_rows'=>$affected]);
file_put_contents($logfile, date('c') . " - Invoice created: invoice_id={$insert_id}\n", FILE_APPEND);
}
if ($stmt instanceof mysqli_stmt) {
$stmt->close();
}
// Redirect to cart page
header('Location: cart.php');
exit;
?>

75
Panel/modules/billing/admin.php Normal file
View file

@ -0,0 +1,75 @@
<?php
// Admin landing page
require_once(__DIR__ . '/includes/admin_auth.php');
require_once(__DIR__ . '/includes/config_loader.php');
// config_loader.php now always loads billing/includes/config.inc.php first (which contains
// SITE_BASE_URL, SITE_DATA_DIR, PayPal settings, etc.) and then overlays panel DB settings
// when inside a GSP panel tree. Safe defaults are applied by the loader for any missing vars.
include(__DIR__ . '/includes/top.php');
include(__DIR__ . '/includes/menu.php');
function h($s){ return htmlspecialchars((string)$s, ENT_QUOTES, 'UTF-8'); }
?>
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>Admin — Dashboard</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="css/header.css">
</head>
<body>
<div class="container-wide panel">
<h1>Admin Dashboard</h1>
<p>Welcome to the admin area. From here you can manage servers, payments, and site settings.</p>
<div class="admin-flex-wrap">
<a class="gsw-btn" href="adminserverlist.php">Manage Servers &amp; Services</a>
<a class="gsw-btn" href="admin_invoices.php">Manage Invoices</a>
<a class="gsw-btn" href="admin_payments.php">Transaction Log</a>
<a class="gsw-btn" href="admin_coupons.php">Manage Coupons</a>
<a class="gsw-btn" href="admin_config.php">Edit Site Config</a>
</div>
<hr>
<h3>Quick usage notes</h3>
<ul>
<li>The <strong>Manage Servers & Services</strong> page allows enabling/disabling nodes and editing service rows.</li>
<li>The <strong>Invoice History</strong> page reads JSON payment records from <code><?php echo h($SITE_DATA_DIR); ?></code>.</li>
<li>The <strong>Edit Site Config</strong> page edits <code>_website/includes/config.inc.php</code>. Edits create a timestamped backup before saving.</li>
</ul>
<h3>Sandbox account (testing)</h3>
<p>Use PayPal sandbox credentials when testing payments. Set your sandbox <code>client_id</code> and <code>client_secret</code> in <code>modules/billing/includes/config.inc.php</code> (the <code>$paypal_client_id</code> and <code>$paypal_client_secret</code> variables). Set <code>$paypal_sandbox = false</code> for live payments.</p>
<ul>
<li>Create a sandbox business account at <a href="https://developer.paypal.com">PayPal Developer</a> and obtain a sandbox client ID/secret.</li>
<li>Update the payment handler config and restart the webserver if required.</li>
<li>Run a checkout using the PayPal JS button on the checkout page — after payment completes, the webhook will record a JSON file into <code><?php echo h($SITE_DATA_DIR); ?></code>.</li>
<li>If you need to simulate a webhook locally, drop a JSON file with the same schema into the <code>data/</code> folder (we added a sample: <code>SIMULATED-WEBHOOK-*.json</code>).</li>
</ul>
<h3>Payments: high-level program flow</h3>
<ol>
<li>User adds an item and proceeds to checkout (<code>_website/cart.php</code>).</li>
<li>The checkout page renders the PayPal JS SDK and calls server-side endpoints (create_order/capture_order).</li>
<li>After a successful capture, PayPal sends a webhook event to <code>_website/webhook.php</code> (or the equivalent handler under <code>_website/api/</code>).</li>
<li>The webhook verifies the signature, fetches any missing order details, and writes a JSON record to the <code>data/</code> directory (this powers <code>invoices.php</code> and <code>return.php</code>).</li>
<li>On successful payment we mark the order as PAID in the JSON and the site UI (invoices/returns) reads those JSONs to render receipts.</li>
<li>Admin pages can view invoices at <code>./invoices.php</code> and reconcile or trigger further provisioning via internal panel APIs.</li>
</ol>
<h3>Environment</h3>
<table class="cart-table">
<tr><th>Site Base URL</th><td><?php echo h($SITE_BASE_URL ?: '(empty — using relative paths)'); ?></td></tr>
<tr><th>Data directory</th><td><?php echo h($SITE_DATA_DIR); ?></td></tr>
<tr><th>PHP SAPI</th><td><?php echo h(PHP_SAPI); ?></td></tr>
<tr><th>Writable?</th><td><?php echo is_writable(__DIR__ . '/data') ? 'yes' : 'no'; ?></td></tr>
</table>
</div>
<?php include(__DIR__ . '/includes/footer.php'); ?>
</body>
</html>

896
Panel/modules/billing/admin_config.php Normal file
View file

@ -0,0 +1,896 @@
<?php
/**
* Admin Config Editor
*
* Provides two ways to edit modules/billing/includes/config.inc.php:
* A. Interactive form (top) — fields for each billing-specific setting.
* B. Raw PHP editor (bottom) — direct file content textarea (advanced).
*
* Both methods create a timestamped backup before saving and apply the
* $SITE_CONFIG_BACKUP_RETENTION limit (default 5) after writing.
* A post-save php -l syntax check rolls back the file on parse errors.
*
* Database settings (db_host, db_port, db_user, db_pass, db_name, table_prefix)
* are shown as read-only when the module is installed inside a GSP panel tree.
* They are managed via the panel and synced automatically by config_loader.php.
*/
require_once(__DIR__ . '/includes/admin_auth.php');
require_once(__DIR__ . '/includes/config_loader.php');
include(__DIR__ . '/includes/top.php');
include(__DIR__ . '/includes/menu.php');
if (session_status() === PHP_SESSION_NONE) {
session_name('opengamepanel_web');
session_start();
}
if (empty($_SESSION['admin_csrf'])) {
$_SESSION['admin_csrf'] = bin2hex(random_bytes(16));
}
$csrf = $_SESSION['admin_csrf'];
$cfgPath = __DIR__ . '/includes/config.inc.php';
$bakDir = dirname($cfgPath) . '/backups';
function h(string $s): string
{
return htmlspecialchars($s, ENT_QUOTES, 'UTF-8');
}
// ---------------------------------------------------------------------------
// Helper: apply backup retention — delete oldest .bak files beyond the limit.
// Only touches files with names matching *.bak inside the expected backup dir.
// ---------------------------------------------------------------------------
function billing_admin_apply_retention(string $dir, int $retention): void
{
$retention = max(1, min(10, $retention));
if (!is_dir($dir)) {
return;
}
$files = glob($dir . '/*.bak');
if (!is_array($files) || count($files) <= $retention) {
return;
}
// Sort oldest first (by file modification time)
usort($files, static function (string $a, string $b): int {
return filemtime($a) <=> filemtime($b);
});
$toDelete = count($files) - $retention;
for ($i = 0; $i < $toDelete; $i++) {
@unlink($files[$i]);
}
}
// ---------------------------------------------------------------------------
// Helper: create a backup of the config file; returns backup filename or ''.
// ---------------------------------------------------------------------------
function billing_admin_create_backup(string $cfgPath, string $bakDir): string
{
@mkdir($bakDir, 0775, true);
$bakName = $bakDir . '/config.inc.php.' . date('Ymd-His') . '.' . bin2hex(random_bytes(4)) . '.bak';
if (!copy($cfgPath, $bakName)) {
return '';
}
return $bakName;
}
// ---------------------------------------------------------------------------
// Helper: run php -l on a file and return [ok, output].
// ---------------------------------------------------------------------------
function billing_admin_lint(string $filePath): array
{
$phpExec = PHP_BINARY ?: null;
if (!$phpExec) {
return [true, 'PHP executable not found; skipping syntax check.'];
}
$cmd = escapeshellarg($phpExec) . ' -l ' . escapeshellarg($filePath);
$out = [];
$rc = 0;
@exec($cmd . ' 2>&1', $out, $rc);
return [$rc === 0, implode("\n", $out)];
}
// ---------------------------------------------------------------------------
// Helper: generate canonical config.inc.php content from an array of values.
// DB settings are preserved from the existing file; only billing fields change.
// ---------------------------------------------------------------------------
function billing_admin_build_config(string $existingContent, array $vals): string
{
// Extract current DB settings from existing file content so we never lose them.
$dbLines = [];
foreach (['db_host', 'db_port', 'db_user', 'db_pass', 'db_name', 'table_prefix', 'db_type'] as $var) {
if (preg_match('/^\s*\$' . preg_quote($var, '/') . '\s*=.*$/m', $existingContent, $m)) {
$dbLines[$var] = rtrim($m[0]);
}
}
$q = static function (string $v): string {
return '"' . addslashes($v) . '"';
};
$mode = (strtolower($vals['paypal_mode'] ?? 'sandbox') === 'live') ? 'live' : 'sandbox';
$retention = max(1, min(10, (int)($vals['backup_retention'] ?? 5)));
$baseUrl = rtrim(trim($vals['SITE_BASE_URL'] ?? ''), '/');
$bg = trim($vals['SITE_BACKGROUND'] ?? 'images/dark.jpg');
$dataDir = trim($vals['SITE_DATA_DIR'] ?? '');
$wh_path = '/' . ltrim(trim($vals['paypal_webhook_path'] ?? '/paypal/webhook.php'), '/');
// Sandbox credentials — never erase existing secret if field was left blank
$sb_id = trim($vals['paypal_sandbox_client_id'] ?? '');
$sb_sec = trim($vals['paypal_sandbox_client_secret'] ?? '');
$sb_wh = trim($vals['paypal_sandbox_webhook_id'] ?? '');
// Live credentials — never erase existing secret if field was left blank
$lv_id = trim($vals['paypal_live_client_id'] ?? '');
$lv_sec = trim($vals['paypal_live_client_secret'] ?? '');
$lv_wh = trim($vals['paypal_live_webhook_id'] ?? '');
$dbBlock = '';
foreach (['db_host', 'db_port', 'db_user', 'db_pass', 'db_name', 'table_prefix', 'db_type'] as $var) {
if (isset($dbLines[$var])) {
$dbBlock .= $dbLines[$var] . "\n";
}
}
$dataDirLine = ($dataDir !== '' && $dataDir !== 'auto')
? '$SITE_DATA_DIR = ' . $q($dataDir) . ';'
: "\$SITE_DATA_DIR = realpath(__DIR__ . '/..') . DIRECTORY_SEPARATOR . 'data';";
return '<?php' . "\n"
. '###############################################' . "\n"
. '# Website Database Configuration' . "\n"
. '# This file contains the database connection' . "\n"
. '# settings for the billing website.' . "\n"
. '#' . "\n"
. '# Managed via Admin > Edit Config.' . "\n"
. '###############################################' . "\n"
. $dbBlock
. "\n"
. '// Optional: base URL without trailing slash (e.g. https://gameservers.world).' . "\n"
. '// Leave empty to use relative paths.' . "\n"
. '$SITE_BASE_URL = ' . $q($baseUrl) . ';' . "\n"
. '$SITE_BASE_URL = rtrim(trim((string)$SITE_BASE_URL), \'/\');' . "\n"
. "\n"
. '// Site-wide background image (relative to site root).' . "\n"
. '$SITE_BACKGROUND = ' . $q($bg) . ';' . "\n"
. '$SITE_BACKGROUND = trim((string)$SITE_BACKGROUND);' . "\n"
. "\n"
. '// Data directory for persisted payment webhook JSON files.' . "\n"
. $dataDirLine . "\n"
. "\n"
. '// ---------------------------------------------------------------------------' . "\n"
. '// PayPal configuration' . "\n"
. '// ---------------------------------------------------------------------------' . "\n"
. '$paypal_mode = ' . $q($mode) . '; // \'sandbox\' or \'live\'' . "\n"
. "\n"
. '// Sandbox credentials (PayPal Developer Dashboard → sandbox app)' . "\n"
. '$paypal_sandbox_client_id = ' . $q($sb_id) . ';' . "\n"
. '$paypal_sandbox_client_secret = ' . $q($sb_sec) . ';' . "\n"
. '$paypal_sandbox_webhook_id = ' . $q($sb_wh) . ';' . "\n"
. "\n"
. '// Live credentials (leave blank until ready for production)' . "\n"
. '$paypal_live_client_id = ' . $q($lv_id) . ';' . "\n"
. '$paypal_live_client_secret = ' . $q($lv_sec) . ';' . "\n"
. '$paypal_live_webhook_id = ' . $q($lv_wh) . ';' . "\n"
. "\n"
. '// Webhook path (relative to billing site root, must start with /)' . "\n"
. '// Full public URL = $SITE_BASE_URL + $paypal_webhook_path' . "\n"
. '$paypal_webhook_path = ' . $q($wh_path) . ';' . "\n"
. "\n"
. '// Admin config backup retention: how many backups to keep (1–10). Default 5.' . "\n"
. '$SITE_CONFIG_BACKUP_RETENTION = ' . $retention . ';' . "\n"
. '?>' . "\n";
}
// ---------------------------------------------------------------------------
// Read current values from config (already loaded by config_loader above).
// ---------------------------------------------------------------------------
$cfgVals = [
'SITE_BASE_URL' => $SITE_BASE_URL ?? '',
'SITE_BACKGROUND' => $SITE_BACKGROUND ?? 'images/dark.jpg',
'SITE_DATA_DIR' => $SITE_DATA_DIR ?? '',
'paypal_mode' => $paypal_mode ?? 'sandbox',
'paypal_sandbox_client_id' => $paypal_sandbox_client_id ?? '',
'paypal_sandbox_client_secret' => $paypal_sandbox_client_secret ?? '',
'paypal_sandbox_webhook_id' => $paypal_sandbox_webhook_id ?? '',
'paypal_live_client_id' => $paypal_live_client_id ?? '',
'paypal_live_client_secret' => $paypal_live_client_secret ?? '',
'paypal_live_webhook_id' => $paypal_live_webhook_id ?? '',
'paypal_webhook_path' => $paypal_webhook_path ?? '/paypal/webhook.php',
'backup_retention' => $SITE_CONFIG_BACKUP_RETENTION ?? 5,
];
// Computed full webhook URL for display
$computedWebhookUrl = function_exists('gsp_paypal_get_full_webhook_url')
? gsp_paypal_get_full_webhook_url()
: rtrim($cfgVals['SITE_BASE_URL'], '/') . $cfgVals['paypal_webhook_path'];
// Detect panel-mode (DB settings are managed by the panel)
$panelMode = defined('BILLING_PANEL_CONFIG_PATH');
$panelCfgPath = $panelMode ? BILLING_PANEL_CONFIG_PATH : null;
$status = '';
$statusType = 'info'; // 'success' | 'error' | 'info'
// ---------------------------------------------------------------------------
// POST: Save interactive form
// ---------------------------------------------------------------------------
if ($_SERVER['REQUEST_METHOD'] === 'POST' && ($_POST['action'] ?? '') === 'save_form') {
$token = $_POST['csrf'] ?? '';
if (!hash_equals($csrf, (string)$token)) {
$status = 'Invalid CSRF token.';
$statusType = 'error';
} elseif (!is_writable($cfgPath)) {
$status = 'Config file is not writable: ' . h($cfgPath);
$statusType = 'error';
} else {
// Collect and validate form values
$formVals = [
'SITE_BASE_URL' => trim($_POST['SITE_BASE_URL'] ?? ''),
'SITE_BACKGROUND' => trim($_POST['SITE_BACKGROUND'] ?? 'images/dark.jpg'),
'SITE_DATA_DIR' => trim($_POST['SITE_DATA_DIR'] ?? ''),
'paypal_mode' => (strtolower(trim($_POST['paypal_mode'] ?? 'sandbox')) === 'live') ? 'live' : 'sandbox',
'paypal_sandbox_client_id' => trim($_POST['paypal_sandbox_client_id'] ?? ''),
'paypal_live_client_id' => trim($_POST['paypal_live_client_id'] ?? ''),
'paypal_sandbox_webhook_id' => trim($_POST['paypal_sandbox_webhook_id'] ?? ''),
'paypal_live_webhook_id' => trim($_POST['paypal_live_webhook_id'] ?? ''),
'paypal_webhook_path' => trim($_POST['paypal_webhook_path'] ?? '/paypal/webhook.php'),
'backup_retention' => (int)($_POST['backup_retention'] ?? 5),
];
// Client secrets: only update if a non-blank value was submitted (never erase existing).
$sbSecPost = trim($_POST['paypal_sandbox_client_secret'] ?? '');
$formVals['paypal_sandbox_client_secret'] = ($sbSecPost !== '') ? $sbSecPost : ($cfgVals['paypal_sandbox_client_secret'] ?? '');
$lvSecPost = trim($_POST['paypal_live_client_secret'] ?? '');
$formVals['paypal_live_client_secret'] = ($lvSecPost !== '') ? $lvSecPost : ($cfgVals['paypal_live_client_secret'] ?? '');
// Validate
$validationError = '';
if ($formVals['backup_retention'] < 1 || $formVals['backup_retention'] > 10) {
$validationError = 'Backup retention must be a number between 1 and 10.';
}
if ($validationError) {
$status = $validationError;
$statusType = 'error';
} else {
$existingContent = (string)file_get_contents($cfgPath);
$newContent = billing_admin_build_config($existingContent, $formVals);
// Backup before write.
// Note: the backup copy and subsequent file_put_contents are not covered by a
// single atomic lock. This is acceptable for an admin-only operation where
// concurrent writes are not expected.
$bakName = billing_admin_create_backup($cfgPath, $bakDir);
if (!$bakName) {
$status = 'Failed to create backup. Aborting save.';
$statusType = 'error';
} else {
if (file_put_contents($cfgPath, $newContent, LOCK_EX) === false) {
$status = 'Failed to write config file.';
$statusType = 'error';
} else {
// Syntax check
[$lintOk, $lintOut] = billing_admin_lint($cfgPath);
if (!$lintOk) {
@copy($bakName, $cfgPath); // rollback
$status = 'Syntax error in generated config; rolled back. Lint: ' . h($lintOut);
$statusType = 'error';
} else {
// Apply backup retention
$retention = max(1, min(10, $formVals['backup_retention']));
billing_admin_apply_retention($bakDir, $retention);
$cfgVals = $formVals; // update displayed values
$computedWebhookUrl = rtrim($formVals['SITE_BASE_URL'], '/') . ('/' . ltrim($formVals['paypal_webhook_path'] ?? '/paypal/webhook.php', '/'));
$status = 'Config saved successfully. Backup: ' . basename($bakName);
$statusType = 'success';
}
}
}
}
}
}
// ---------------------------------------------------------------------------
// POST: Save raw editor
// ---------------------------------------------------------------------------
if ($_SERVER['REQUEST_METHOD'] === 'POST' && ($_POST['action'] ?? '') === 'save_raw') {
$token = $_POST['csrf'] ?? '';
if (!hash_equals($csrf, (string)$token)) {
$status = 'Invalid CSRF token.';
$statusType = 'error';
} elseif (!is_writable($cfgPath)) {
$status = 'Config file is not writable: ' . h($cfgPath);
$statusType = 'error';
} else {
$newRaw = $_POST['config_text'] ?? '';
if (strpos(trim($newRaw), '<?php') !== 0) {
$status = 'Config must start with <?php';
$statusType = 'error';
} else {
// Backup then write (admin-only operation; concurrent writes are not expected).
$bakName = billing_admin_create_backup($cfgPath, $bakDir);
if (!$bakName) {
$status = 'Failed to create backup. Aborting save.';
$statusType = 'error';
} else {
if (file_put_contents($cfgPath, $newRaw, LOCK_EX) === false) {
$status = 'Failed to write config file.';
$statusType = 'error';
} else {
[$lintOk, $lintOut] = billing_admin_lint($cfgPath);
if (!$lintOk) {
@copy($bakName, $cfgPath); // rollback
$status = 'Syntax error detected; changes rolled back. Lint: ' . h($lintOut);
$statusType = 'error';
} else {
// Apply backup retention from config
$retentionNow = max(1, min(10, (int)($SITE_CONFIG_BACKUP_RETENTION ?? 5)));
billing_admin_apply_retention($bakDir, $retentionNow);
$status = 'Config saved successfully. Backup: ' . basename($bakName);
$statusType = 'success';
}
}
}
}
}
}
// Always read current raw content from disk for the raw editor
$currentText = '';
if (is_readable($cfgPath)) {
$currentText = file_get_contents($cfgPath);
}
// List current backups for display
$bakFiles = is_dir($bakDir) ? (array)glob($bakDir . '/*.bak') : [];
rsort($bakFiles); // newest first
?>
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>Admin — Edit Config</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="css/header.css">
<style>
.cfg-section { background:#fff; border:1px solid #ddd; border-radius:6px; padding:20px 24px; margin-bottom:28px; }
.cfg-section h2 { margin-top:0; color:#333; border-bottom:2px solid #eee; padding-bottom:8px; }
.field-group { margin-bottom:18px; }
.field-group label { display:block; font-weight:600; color:#333; margin-bottom:4px; }
.field-help { font-size:0.85em; color:#666; margin-bottom:6px; }
.field-group input[type=text],
.field-group input[type=password],
.field-group input[type=number],
.field-group select { width:100%; max-width:520px; padding:8px 10px; border:1px solid #ccc;
border-radius:4px; font-size:1em; box-sizing:border-box; }
.field-group .pw-wrap { display:flex; gap:6px; align-items:center; max-width:520px; }
.field-group .pw-wrap input { flex:1; }
.btn-show { padding:8px 14px; font-size:0.9em; border:1px solid #aaa; border-radius:4px;
background:#f5f5f5; cursor:pointer; white-space:nowrap; }
.status-box { padding:12px 16px; border-radius:4px; margin-bottom:18px; font-weight:600; }
.status-success { background:#d4edda; color:#155724; border:1px solid #c3e6cb; }
.status-error { background:#f8d7da; color:#721c24; border:1px solid #f5c6cb; }
.status-info { background:#d1ecf1; color:#0c5460; border:1px solid #bee5eb; }
.panel-badge { background:#e8f4fd; border:1px solid #9ec8f0; color:#1a5276; padding:10px 14px;
border-radius:4px; margin-bottom:18px; font-size:0.9em; }
.readonly-field { background:#f4f4f4; color:#555; cursor:not-allowed; }
.warn-box { background:#fff3cd; border:1px solid #ffc107; color:#856404; padding:10px 14px;
border-radius:4px; margin-bottom:14px; font-size:0.9em; }
.save-row { margin:14px 0; }
.save-row button { padding:10px 24px; font-size:1em; font-weight:600; }
.bak-list { font-size:0.85em; color:#555; margin-top:4px; }
</style>
</head>
<body>
<div class="container-wide panel">
<h1>Edit Site Config</h1>
<?php if ($status): ?>
<div class="status-box status-<?php echo h($statusType); ?>"><?php echo h($status); ?></div>
<?php endif; ?>
<?php if (!empty($billing_config_warning)): ?>
<div class="warn-box">⚠️ <?php echo h($billing_config_warning); ?></div>
<?php endif; ?>
<!-- ===================================================================
SECTION A: Interactive form
==================================================================== -->
<div class="cfg-section">
<h2>Site Settings</h2>
<?php if ($panelMode): ?>
<div class="panel-badge">
ℹ️ <strong>Panel-integrated mode.</strong>
Database settings are managed by the panel and synced automatically from
<code><?php echo h($panelCfgPath); ?></code>.
They are shown below for reference only.
</div>
<?php endif; ?>
<form method="post" action="">
<input type="hidden" name="csrf" value="<?php echo h($csrf); ?>">
<input type="hidden" name="action" value="save_form">
<!-- DB read-only info (panel mode) -->
<?php if ($panelMode): ?>
<div class="field-group">
<label>Database Host</label>
<div class="field-help">Managed by the panel config. Edit the panel's <code>includes/config.inc.php</code> to change.</div>
<input type="text" class="readonly-field" value="<?php echo h((string)($db_host ?? '')); ?>" readonly>
</div>
<div class="field-group">
<label>Database Name</label>
<input type="text" class="readonly-field" value="<?php echo h((string)($db_name ?? '')); ?>" readonly>
</div>
<div class="field-group">
<label>Table Prefix</label>
<input type="text" class="readonly-field" value="<?php echo h((string)($table_prefix ?? '')); ?>" readonly>
</div>
<?php endif; ?>
<!-- Site Base URL -->
<div class="field-group">
<label for="cfg_base_url">Site Base URL</label>
<div class="field-help">
Full base URL <strong>without trailing slash</strong> (e.g. <code>https://gameservers.world</code>).
Leave empty to use relative paths. Used to compute the full public PayPal webhook URL.
</div>
<input type="text" id="cfg_base_url" name="SITE_BASE_URL"
value="<?php echo h((string)$cfgVals['SITE_BASE_URL']); ?>"
placeholder="https://example.com">
</div>
<!-- Site Background -->
<div class="field-group">
<label for="cfg_bg">Site Background Image</label>
<div class="field-help">
Path to background image relative to the billing site root (e.g. <code>images/dark.jpg</code>).
</div>
<input type="text" id="cfg_bg" name="SITE_BACKGROUND"
value="<?php echo h((string)$cfgVals['SITE_BACKGROUND']); ?>"
placeholder="images/dark.jpg">
</div>
<!-- Data Directory -->
<div class="field-group">
<label for="cfg_datadir">Site Data Directory</label>
<div class="field-help">
Absolute path where payment webhook JSON files are stored.
Leave empty to use the default: <code>modules/billing/data/</code>.
</div>
<input type="text" id="cfg_datadir" name="SITE_DATA_DIR"
value="<?php echo h((string)$cfgVals['SITE_DATA_DIR']); ?>"
placeholder="(default: billing/data/)">
</div>
<hr style="border:none;border-top:1px solid #eee;margin:24px 0;">
<h3 style="margin-top:0;color:#333;">PayPal Configuration</h3>
<?php
$isSandboxMode = ($cfgVals['paypal_mode'] ?? 'sandbox') !== 'live';
$modeLabel = $isSandboxMode ? '🟡 Sandbox (test mode)' : '🟢 Live (real payments)';
$modeBadgeClass = $isSandboxMode ? 'status-info' : 'status-success';
?>
<div class="status-box <?php echo h($modeBadgeClass); ?>" style="margin-bottom:14px;font-size:0.95em;">
Currently active PayPal mode: <strong><?php echo h($modeLabel); ?></strong>
</div>
<!-- PayPal Mode -->
<div class="field-group">
<label for="cfg_mode">PayPal Mode</label>
<div class="field-help">
<strong>Sandbox</strong> uses test credentials and the PayPal sandbox API — safe for development.
<strong>Live</strong> processes real payments. Switch only after configuring live credentials.
</div>
<select id="cfg_mode" name="paypal_mode">
<option value="sandbox" <?php echo $isSandboxMode ? 'selected' : ''; ?>>Sandbox (test mode)</option>
<option value="live" <?php echo !$isSandboxMode ? 'selected' : ''; ?>>Live (real payments)</option>
</select>
</div>
<!-- Sandbox credentials -->
<h4 style="color:#555;margin:20px 0 8px;">Sandbox Credentials</h4>
<div class="field-group">
<label for="cfg_sb_id">Sandbox Client ID</label>
<div class="field-help">Found in PayPal Developer Dashboard → sandbox app. Safe to expose in browser JS.</div>
<input type="text" id="cfg_sb_id" name="paypal_sandbox_client_id"
value="<?php echo h((string)$cfgVals['paypal_sandbox_client_id']); ?>"
placeholder="AfvY_... or sandbox client ID">
</div>
<div class="field-group">
<label for="cfg_sb_sec">Sandbox Client Secret</label>
<div class="field-help"><strong>Server-side only</strong> — never sent to the browser. Leave blank to keep existing value.</div>
<div class="pw-wrap">
<input type="password" id="cfg_sb_sec" name="paypal_sandbox_client_secret"
placeholder="<?php echo $cfgVals['paypal_sandbox_client_secret'] !== '' ? '(set — leave blank to keep)' : '(not set)'; ?>"
autocomplete="new-password">
<button type="button" class="btn-show"
onclick="var f=document.getElementById('cfg_sb_sec');f.type=f.type==='password'?'text':'password';this.textContent=f.type==='password'?'Show':'Hide';">Show</button>
</div>
</div>
<div class="field-group">
<label for="cfg_sb_wh">Sandbox Webhook ID</label>
<div class="field-help">
Webhook ID from your PayPal sandbox app (for signature verification).
Leave empty to skip verification in sandbox mode (OK for initial setup).
</div>
<input type="text" id="cfg_sb_wh" name="paypal_sandbox_webhook_id"
value="<?php echo h((string)$cfgVals['paypal_sandbox_webhook_id']); ?>"
placeholder="Sandbox Webhook ID">
</div>
<!-- Live credentials -->
<h4 style="color:#555;margin:20px 0 8px;">Live Credentials</h4>
<div class="field-group">
<label for="cfg_lv_id">Live Client ID</label>
<div class="field-help">From your PayPal live app. Leave blank until ready for production.</div>
<input type="text" id="cfg_lv_id" name="paypal_live_client_id"
value="<?php echo h((string)$cfgVals['paypal_live_client_id']); ?>"
placeholder="Live Client ID">
</div>
<div class="field-group">
<label for="cfg_lv_sec">Live Client Secret</label>
<div class="field-help"><strong>Server-side only.</strong> Leave blank to keep existing value.</div>
<div class="pw-wrap">
<input type="password" id="cfg_lv_sec" name="paypal_live_client_secret"
placeholder="<?php echo $cfgVals['paypal_live_client_secret'] !== '' ? '(set — leave blank to keep)' : '(not set)'; ?>"
autocomplete="new-password">
<button type="button" class="btn-show"
onclick="var f=document.getElementById('cfg_lv_sec');f.type=f.type==='password'?'text':'password';this.textContent=f.type==='password'?'Show':'Hide';">Show</button>
</div>
</div>
<div class="field-group">
<label for="cfg_lv_wh">Live Webhook ID</label>
<div class="field-help">Webhook ID from your PayPal live app (for signature verification).</div>
<input type="text" id="cfg_lv_wh" name="paypal_live_webhook_id"
value="<?php echo h((string)$cfgVals['paypal_live_webhook_id']); ?>"
placeholder="Live Webhook ID">
</div>
<!-- Webhook path + computed URL -->
<h4 style="color:#555;margin:20px 0 8px;">Webhook Endpoint</h4>
<div class="field-help" style="margin-bottom:10px;">
PayPal requires a <strong>full public HTTPS URL</strong> to deliver webhook events.
Set your Site Base URL above, then copy the computed URL below into your PayPal app's webhook configuration.
</div>
<div class="field-group">
<label for="cfg_wh_path">Webhook Path</label>
<div class="field-help">Path relative to the billing site root (must start with <code>/</code>). Default: <code>/paypal/webhook.php</code></div>
<input type="text" id="cfg_wh_path" name="paypal_webhook_path"
value="<?php echo h((string)$cfgVals['paypal_webhook_path']); ?>"
placeholder="/paypal/webhook.php"
oninput="updateWebhookUrl()">
</div>
<div class="field-group">
<label>Computed Full Webhook URL <small style="font-weight:normal;color:#888;">(read-only — paste this into PayPal)</small></label>
<div class="field-help">
This is the URL PayPal will POST webhook events to.
It must be publicly accessible over HTTPS before enabling live mode.
</div>
<input type="text" id="computed_webhook_url"
class="readonly-field"
value="<?php echo h($computedWebhookUrl); ?>"
readonly
style="font-family:monospace;color:#333;background:#f0f4ff;">
<button type="button" id="copy_webhook_url_btn" class="btn-show" style="margin-top:4px;"
onclick="var u=document.getElementById('computed_webhook_url');if(u){navigator.clipboard.writeText(u.value).then(function(){var b=document.getElementById('copy_webhook_url_btn');b.textContent='Copied!';setTimeout(function(){b.textContent='Copy';},2000);});}">Copy</button>
</div>
<script>
function updateWebhookUrl() {
var base = document.getElementById('cfg_base_url');
var path = document.getElementById('cfg_wh_path');
var out = document.getElementById('computed_webhook_url');
if (!base || !path || !out) return;
var b = base.value.replace(/\/+$/, '');
var p = path.value.replace(/^([^\/])/, '/$1');
out.value = b + p;
}
document.addEventListener('DOMContentLoaded', function() {
var base = document.getElementById('cfg_base_url');
if (base) base.addEventListener('input', updateWebhookUrl);
});
</script>
<hr style="border:none;border-top:1px solid #eee;margin:24px 0;">
<h3 style="margin-top:0;color:#333;">Backup Settings</h3>
<!-- Backup Retention -->
<div class="field-group">
<label for="cfg_retention">Config Backup Retention</label>
<div class="field-help">
Number of config backups to keep (1–10). The oldest backup beyond this limit is
deleted after each save. Backups are stored in
<code><?php echo h($bakDir); ?></code>.
</div>
<input type="number" id="cfg_retention" name="backup_retention"
value="<?php echo (int)$cfgVals['backup_retention']; ?>"
min="1" max="10" style="max-width:100px;">
</div>
<div class="save-row">
<button type="submit">💾 Save Settings</button>
</div>
</form>
</div>
<!-- ===================================================================
SECTION B: PayPal Diagnostics
==================================================================== -->
<?php
// Gather diagnostics data
$diag_mode = $cfgVals['paypal_mode'] ?? 'sandbox';
$diag_is_sandbox = $diag_mode !== 'live';
$diag_sb_id_set = ($cfgVals['paypal_sandbox_client_id'] ?? '') !== '';
$diag_sb_sec_set = ($cfgVals['paypal_sandbox_client_secret'] ?? '') !== '';
$diag_sb_wh_set = ($cfgVals['paypal_sandbox_webhook_id'] ?? '') !== '';
$diag_lv_id_set = ($cfgVals['paypal_live_client_id'] ?? '') !== '';
$diag_lv_sec_set = ($cfgVals['paypal_live_client_secret'] ?? '') !== '';
$diag_lv_wh_set = ($cfgVals['paypal_live_webhook_id'] ?? '') !== '';
$diag_wh_path = '/' . ltrim((string)($cfgVals['paypal_webhook_path'] ?? '/paypal/webhook.php'), '/');
$diag_wh_full_url = $computedWebhookUrl;
$diag_wh_file = rtrim(__DIR__, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR . ltrim($diag_wh_path, '/');
$diag_wh_exists = file_exists($diag_wh_file);
// Active mode credential check
$diag_active_id_set = $diag_is_sandbox ? $diag_sb_id_set : $diag_lv_id_set;
$diag_active_sec_set = $diag_is_sandbox ? $diag_sb_sec_set : $diag_lv_sec_set;
$diag_active_wh_set = $diag_is_sandbox ? $diag_sb_wh_set : $diag_lv_wh_set;
function diag_badge(bool $ok, string $yes = 'Yes', string $no = 'No'): string {
$cls = $ok ? 'background:#d4edda;color:#155724;border:1px solid #c3e6cb;' : 'background:#f8d7da;color:#721c24;border:1px solid #f5c6cb;';
$label = $ok ? $yes : $no;
return '<span style="' . $cls . 'padding:2px 8px;border-radius:3px;font-size:0.85em;font-weight:600;display:inline-block;word-break:break-word;">' . htmlspecialchars($label, ENT_QUOTES, 'UTF-8') . '</span>';
}
// Last webhook events + recent PayPal errors
$diag_recent_events = [];
$diag_recent_errors = [];
$diag_errors_warning = '';
try {
$port_int = intval($db_port ?? 3306) ?: 3306;
$diag_db = @mysqli_connect($db_host ?? 'localhost', $db_user ?? '', $db_pass ?? '', $db_name ?? '', $port_int);
if ($diag_db) {
$pfx_diag = $table_prefix ?? 'gsp_';
mysqli_set_charset($diag_db, 'utf8mb4');
$res = @mysqli_query($diag_db, "SELECT paypal_event_id, event_type, processing_status, created_at FROM `{$pfx_diag}billing_paypal_webhook_events` ORDER BY id DESC LIMIT 5");
if ($res) {
while ($row = mysqli_fetch_assoc($res)) {
$diag_recent_events[] = $row;
}
}
// Recent PayPal errors — use BillingRepository for safe table creation
require_once __DIR__ . '/classes/BillingRepository.php';
$diag_repo = new BillingRepository($diag_db, $pfx_diag);
if ($diag_repo->ensureBillingPaypalErrorsTable()) {
$diag_recent_errors = $diag_repo->getRecentPaypalErrors(10);
} else {
$diag_errors_warning = 'Could not create billing_paypal_errors table. Check DB permissions.';
}
mysqli_close($diag_db);
}
} catch (Throwable $e) {
$diag_errors_warning = 'Diagnostics DB query failed: ' . htmlspecialchars($e->getMessage(), ENT_QUOTES, 'UTF-8');
}
?>
<style>
.diag-grid { display:grid; grid-template-columns:1fr; gap:8px; font-size:0.9em; }
@media (min-width:600px) { .diag-grid { grid-template-columns:220px 1fr; } }
.diag-row { display:contents; }
.diag-label { color:#555; font-weight:600; padding:6px 0; border-bottom:1px solid #f0f0f0; word-break:break-word; }
.diag-value { padding:6px 0; border-bottom:1px solid #f0f0f0; word-break:break-all; }
.diag-sub { font-size:0.85em; color:#888; margin-top:4px; }
.diag-sep { grid-column:1/-1; border-top:2px solid #e9ecef; margin:6px 0 2px; }
.recent-errors-table { width:100%; border-collapse:collapse; font-size:0.85em; overflow-x:auto; display:block; }
.recent-errors-table th { background:#f8f9fa; padding:6px 8px; text-align:left; border-bottom:2px solid #dee2e6; white-space:nowrap; }
.recent-errors-table td { padding:5px 8px; border-bottom:1px solid #eee; word-break:break-word; }
</style>
<div class="cfg-section">
<h2>PayPal Diagnostics</h2>
<!-- Self-check button -->
<form method="post" style="margin-bottom:16px;">
<input type="hidden" name="csrf" value="<?php echo h($csrf); ?>">
<input type="hidden" name="action" value="self_check">
<button type="submit" class="btn-show" style="padding:9px 18px;font-size:0.95em;">🔍 Run Billing Self-Check</button>
</form>
<?php
if ($_SERVER['REQUEST_METHOD'] === 'POST' && ($_POST['action'] ?? '') === 'self_check') {
$token = $_POST['csrf'] ?? '';
if (hash_equals($csrf, (string)$token)):
?>
<div class="status-box status-info" style="font-size:0.9em;">
<strong>Self-Check Results:</strong><br>
&bull; Mode: <strong><?php echo h($diag_mode ?: '(unknown)'); ?></strong><br>
&bull; Active Client ID: <?php echo $diag_active_id_set ? '✅ configured' : '❌ missing'; ?><br>
&bull; Active Client Secret: <?php echo $diag_active_sec_set ? '✅ configured' : '❌ missing'; ?><br>
&bull; Active Webhook ID: <?php echo $diag_active_wh_set ? '✅ configured' : '⚠️ missing (signature verification skipped)'; ?><br>
&bull; Webhook file: <?php echo $diag_wh_exists ? '✅ exists' : '❌ not found'; ?> — <code style="word-break:break-all"><?php echo h($diag_wh_file); ?></code><br>
&bull; Logs directory: <?php $logDir = __DIR__ . '/logs'; echo (is_dir($logDir) && is_writable($logDir)) ? '✅ writable' : '⚠️ ' . (is_dir($logDir) ? 'not writable' : 'missing'); ?><br>
&bull; Data directory: <?php echo (is_dir($SITE_DATA_DIR ?? '') && is_writable($SITE_DATA_DIR ?? '')) ? '✅ writable' : '⚠️ check path'; ?><br>
&bull; Config file: <?php echo is_writable($cfgPath) ? '✅ writable' : '⚠️ read-only'; ?><br>
</div>
<?php endif; } ?>
<div class="diag-grid">
<div class="diag-row">
<div class="diag-label">Current mode</div>
<div class="diag-value">
<strong><?php echo h($diag_mode !== '' ? $diag_mode : '(not set)'); ?></strong>
<?php if ($diag_mode === 'sandbox'): ?>
<span style="background:#fff3cd;color:#856404;border:1px solid #ffc107;padding:1px 7px;border-radius:3px;font-size:0.8em;margin-left:6px;">test</span>
<?php elseif ($diag_mode === 'live'): ?>
<span style="background:#d4edda;color:#155724;border:1px solid #c3e6cb;padding:1px 7px;border-radius:3px;font-size:0.8em;margin-left:6px;">live</span>
<?php endif; ?>
</div>
</div>
<div class="diag-sep"></div>
<div class="diag-row">
<div class="diag-label">Active Client ID</div>
<div class="diag-value"><?php echo diag_badge($diag_active_id_set); ?></div>
</div>
<div class="diag-row">
<div class="diag-label">Active Client Secret</div>
<div class="diag-value"><?php echo diag_badge($diag_active_sec_set); ?></div>
</div>
<div class="diag-row">
<div class="diag-label">Active Webhook ID</div>
<div class="diag-value"><?php echo diag_badge($diag_active_wh_set, 'Yes', 'No — signature verification skipped'); ?></div>
</div>
<div class="diag-sep"></div>
<div class="diag-row">
<div class="diag-label">Sandbox Client ID</div>
<div class="diag-value"><?php echo diag_badge($diag_sb_id_set); ?></div>
</div>
<div class="diag-row">
<div class="diag-label">Sandbox Client Secret</div>
<div class="diag-value"><?php echo diag_badge($diag_sb_sec_set); ?></div>
</div>
<div class="diag-row">
<div class="diag-label">Sandbox Webhook ID</div>
<div class="diag-value"><?php echo diag_badge($diag_sb_wh_set); ?></div>
</div>
<div class="diag-sep"></div>
<div class="diag-row">
<div class="diag-label">Live Client ID</div>
<div class="diag-value"><?php echo diag_badge($diag_lv_id_set); ?></div>
</div>
<div class="diag-row">
<div class="diag-label">Live Client Secret</div>
<div class="diag-value"><?php echo diag_badge($diag_lv_sec_set); ?></div>
</div>
<div class="diag-row">
<div class="diag-label">Live Webhook ID</div>
<div class="diag-value"><?php echo diag_badge($diag_lv_wh_set); ?></div>
</div>
<div class="diag-sep"></div>
<div class="diag-row">
<div class="diag-label">Webhook path</div>
<div class="diag-value"><code><?php echo h($diag_wh_path); ?></code></div>
</div>
<div class="diag-row">
<div class="diag-label">Full public webhook URL</div>
<div class="diag-value">
<code><?php echo h($diag_wh_full_url !== '' ? $diag_wh_full_url : '(Site Base URL not configured)'); ?></code>
</div>
</div>
<div class="diag-row">
<div class="diag-label">Webhook file on disk</div>
<div class="diag-value">
<?php echo diag_badge($diag_wh_exists, 'Found', 'Not found'); ?>
<div class="diag-sub"><code><?php echo h($diag_wh_file); ?></code></div>
</div>
</div>
</div>
<?php if (!empty($diag_recent_events)): ?>
<h4 style="margin-top:22px;color:#555;">Recent Webhook Events</h4>
<div style="overflow-x:auto;">
<table class="recent-errors-table">
<thead><tr>
<th>PayPal Event ID</th>
<th>Type</th>
<th>Status</th>
<th>Received</th>
</tr></thead>
<tbody>
<?php foreach ($diag_recent_events as $ev): ?>
<tr>
<td><code><?php echo h($ev['paypal_event_id'] ?: '—'); ?></code></td>
<td><?php echo h($ev['event_type']); ?></td>
<td><?php echo diag_badge($ev['processing_status'] === 'processed', $ev['processing_status'], $ev['processing_status']); ?></td>
<td><?php echo h($ev['created_at']); ?></td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</div>
<?php else: ?>
<p style="color:#888;font-size:0.9em;margin-top:12px;">No webhook events recorded yet. Events will appear here after PayPal delivers the first webhook to <code><?php echo h($diag_wh_full_url ?: $diag_wh_path); ?></code>.</p>
<?php endif; ?>
<h4 style="margin-top:22px;color:#555;">Recent PayPal Errors</h4>
<?php if ($diag_errors_warning): ?>
<div class="warn-box"><?php echo h($diag_errors_warning); ?></div>
<?php elseif (empty($diag_recent_errors)): ?>
<p style="color:#888;font-size:0.9em;">No PayPal errors logged yet.</p>
<?php else: ?>
<div style="overflow-x:auto;">
<table class="recent-errors-table">
<thead><tr>
<th>Time</th><th>Context</th><th>Error Code</th><th>Message</th>
<th>Debug ID</th><th>Order ID</th><th>User</th>
</tr></thead>
<tbody>
<?php foreach ($diag_recent_errors as $er): ?>
<tr>
<td style="white-space:nowrap"><?php echo h($er['created_at']); ?></td>
<td><?php echo h($er['context']); ?></td>
<td><code><?php echo h($er['error_code']); ?></code></td>
<td><?php echo h($er['message']); ?></td>
<td><code><?php echo h($er['paypal_debug_id'] ?? '—'); ?></code></td>
<td><code><?php echo h($er['order_id'] ?? '—'); ?></code></td>
<td><?php echo h($er['user_id'] ?? '—'); ?></td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</div>
<?php endif; ?>
</div>
<!-- ===================================================================
SECTION C: Raw PHP editor
==================================================================== -->
<div class="cfg-section">
<h2>Advanced: Raw Config Editor</h2>
<div class="warn-box">
⚠️ <strong>Warning:</strong> Manually editing the raw PHP file can break the billing
website if you introduce a syntax error or remove required variables.
A backup is created automatically before saving, and a syntax check runs after.
The file is rolled back if a parse error is detected.
</div>
<form method="post" action="">
<input type="hidden" name="csrf" value="<?php echo h($csrf); ?>">
<input type="hidden" name="action" value="save_raw">
<div class="save-row"><button type="submit">💾 Save Raw Config</button></div>
<textarea name="config_text" rows="28"
style="width:100%;font-family:monospace;font-size:0.9em;border:1px solid #ccc;border-radius:4px;padding:10px;box-sizing:border-box;"
><?php echo h((string)$currentText); ?></textarea>
<div class="save-row"><button type="submit">💾 Save Raw Config</button></div>
</form>
<p style="margin-top:16px;">
<strong>Backup directory:</strong> <code><?php echo h($bakDir); ?></code>
<?php if ($bakFiles): ?>
<br><span class="bak-list">
<?php echo count($bakFiles); ?> backup(s) stored.
Most recent: <code><?php echo h(basename($bakFiles[0])); ?></code>
</span>
<?php else: ?>
<br><span class="bak-list">No backups yet.</span>
<?php endif; ?>
</p>
</div>
</div>
<?php include(__DIR__ . '/includes/footer.php'); ?>
</body>
</html>

537
Panel/modules/billing/admin_coupons.php Normal file
View file

@ -0,0 +1,537 @@
<?php
// Admin coupon management page - standalone billing module
require_once(__DIR__ . '/includes/admin_auth.php');
require_once(__DIR__ . '/includes/config_loader.php');
// Variables from config.inc.php (helps IDEs understand scope)
/** @var string $db_host Database host */
/** @var string $db_user Database user */
/** @var string $db_pass Database password */
/** @var string $db_name Database name */
/** @var string $table_prefix Table prefix for database tables */
// Start session if not already started by admin_auth
if (session_status() === PHP_SESSION_NONE) session_start();
if (empty($_SESSION['admin_csrf'])) {
// generate a CSRF token with a safe fallback for older PHP builds
try {
$token = function_exists('random_bytes') ? bin2hex(random_bytes(16)) : null;
} catch (Exception $e) {
$token = null;
}
if (empty($token)) {
if (function_exists('openssl_random_pseudo_bytes')) {
$token = bin2hex(openssl_random_pseudo_bytes(16));
} else {
$token = bin2hex(bin2hex(substr(sha1(uniqid((string)microtime(true), true)), 0, 16)));
}
}
$_SESSION['admin_csrf'] = $token;
}
$csrf = $_SESSION['admin_csrf'];
function h($s){ return htmlspecialchars((string)$s, ENT_QUOTES, 'UTF-8'); }
// Connect to database (graceful failure)
$db = false;
try {
// suppress direct output; we'll log errors and show a friendly message
$db = @mysqli_connect($db_host, $db_user, $db_pass, $db_name, isset($db_port) ? (int)$db_port : null);
} catch (Throwable $e) {
error_log('[admin_coupons] mysqli_connect exception: ' . $e->getMessage());
$db = false;
}
if (!$db) {
$error = 'Database connection failed. Please check your configuration.';
error_log('[admin_coupons] DB connect failed for host=' . ($db_host ?? 'unknown') . ' user=' . ($db_user ?? 'unknown') . ' db=' . ($db_name ?? 'unknown') . ' - ' . mysqli_connect_error());
}
$status = '';
$error = '';
// Handle form submissions
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$token = $_POST['csrf'] ?? '';
if (!hash_equals($csrf, (string)$token)) {
$error = 'Invalid CSRF token.';
} else {
// Add new coupon
if (isset($_POST['add_coupon'])) {
$code = mysqli_real_escape_string($db, trim($_POST['code']));
$name = mysqli_real_escape_string($db, trim($_POST['name']));
$description = mysqli_real_escape_string($db, trim($_POST['description']));
$discount_percent = floatval($_POST['discount_percent']);
$usage_type = mysqli_real_escape_string($db, $_POST['usage_type']);
$game_filter_type = mysqli_real_escape_string($db, $_POST['game_filter_type']);
$game_filter_list = isset($_POST['game_filter_list']) && $_POST['game_filter_type'] === 'specific_games'
? mysqli_real_escape_string($db, json_encode($_POST['game_filter_list']))
: 'NULL';
$max_uses = !empty($_POST['max_uses']) ? intval($_POST['max_uses']) : 'NULL';
$expires = !empty($_POST['expires']) ? "'" . mysqli_real_escape_string($db, $_POST['expires']) . "'" : 'NULL';
// Validate code is unique
$check = mysqli_query($db, "SELECT coupon_id FROM {$table_prefix}billing_coupons WHERE code = '$code'");
if (mysqli_num_rows($check) > 0) {
$error = "Coupon code '$code' already exists.";
} else {
$sql = "INSERT INTO {$table_prefix}billing_coupons
(code, name, description, discount_percent, usage_type, game_filter_type, game_filter_list, max_uses, expires, is_active)
VALUES ('$code', '$name', '$description', $discount_percent, '$usage_type', '$game_filter_type', " .
($game_filter_list === 'NULL' ? 'NULL' : "'$game_filter_list'") . ", $max_uses, $expires, 1)";
if (mysqli_query($db, $sql)) {
$status = "Coupon '$code' added successfully.";
} else {
$error = "Error adding coupon: " . mysqli_error($db);
}
}
}
// Update existing coupon
elseif (isset($_POST['update_coupon'])) {
$coupon_id = intval($_POST['coupon_id']);
$code = mysqli_real_escape_string($db, trim($_POST['code']));
$name = mysqli_real_escape_string($db, trim($_POST['name']));
$description = mysqli_real_escape_string($db, trim($_POST['description']));
$discount_percent = floatval($_POST['discount_percent']);
$usage_type = mysqli_real_escape_string($db, $_POST['usage_type']);
$game_filter_type = mysqli_real_escape_string($db, $_POST['game_filter_type']);
$game_filter_list = isset($_POST['game_filter_list']) && $_POST['game_filter_type'] === 'specific_games'
? mysqli_real_escape_string($db, json_encode($_POST['game_filter_list']))
: 'NULL';
$max_uses = !empty($_POST['max_uses']) ? intval($_POST['max_uses']) : 'NULL';
$expires = !empty($_POST['expires']) ? "'" . mysqli_real_escape_string($db, $_POST['expires']) . "'" : 'NULL';
$is_active = isset($_POST['is_active']) ? 1 : 0;
$sql = "UPDATE {$table_prefix}billing_coupons SET
code = '$code',
name = '$name',
description = '$description',
discount_percent = $discount_percent,
usage_type = '$usage_type',
game_filter_type = '$game_filter_type',
game_filter_list = " . ($game_filter_list === 'NULL' ? 'NULL' : "'$game_filter_list'") . ",
max_uses = $max_uses,
expires = $expires,
is_active = $is_active
WHERE coupon_id = $coupon_id";
if (mysqli_query($db, $sql)) {
$status = "Coupon updated successfully.";
} else {
$error = "Error updating coupon: " . mysqli_error($db);
}
}
// Delete coupon
elseif (isset($_POST['delete_coupon'])) {
$coupon_id = intval($_POST['coupon_id']);
if (mysqli_query($db, "DELETE FROM {$table_prefix}billing_coupons WHERE coupon_id = $coupon_id")) {
$status = "Coupon deleted successfully.";
} else {
$error = "Error deleting coupon: " . mysqli_error($db);
}
}
}
}
// Get all available games from server configs
$game_options = [];
$games_dir = __DIR__ . '/../../config_games/server_configs/';
if (is_dir($games_dir)) {
$files = scandir($games_dir);
foreach ((array)$files as $file) {
if (pathinfo($file, PATHINFO_EXTENSION) === 'xml' && strpos($file, '.bak') === false) {
$game_key = str_replace('.xml', '', $file);
$game_options[] = $game_key;
}
}
sort($game_options);
}
// Get all coupons
$coupons_result = mysqli_query($db, "SELECT * FROM {$table_prefix}billing_coupons ORDER BY created_date DESC");
?>
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>Admin — Coupon Management</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="css/header.css">
<style>
/* Coupon admin — dark-theme overrides */
.coupon-form {
background: rgba(0,0,0,0.35);
border: 1px solid rgba(255,255,255,0.1);
padding: 20px;
margin: 20px 0;
border-radius: 8px;
}
.form-group { margin-bottom: 15px; }
.form-group label {
display: block;
margin-bottom: 6px;
font-weight: 600;
color: #e8e8e8;
}
.form-group input,
.form-group select,
.form-group textarea {
width: 100%;
padding: 9px 10px;
box-sizing: border-box;
background: #11141f;
color: #f0f0f0;
border: 1px solid rgba(255,255,255,0.18);
border-radius: 5px;
font-size: 0.97rem;
}
.form-group input::placeholder,
.form-group textarea::placeholder {
color: rgba(255,255,255,0.4);
}
.form-group input:focus,
.form-group select:focus,
.form-group textarea:focus {
outline: none;
border-color: #667eea;
box-shadow: 0 0 0 2px rgba(102,126,234,0.25);
}
.form-group textarea { min-height: 60px; }
.game-checkboxes {
max-height: 200px;
overflow-y: auto;
border: 1px solid rgba(255,255,255,0.15);
padding: 10px;
background: rgba(0,0,0,0.4);
border-radius: 5px;
}
.game-checkboxes label {
display: block;
margin: 5px 0;
font-weight: normal;
color: #d0d0d0;
cursor: pointer;
}
.game-checkboxes input[type="checkbox"] {
width: auto;
margin-right: 6px;
background: #11141f;
border: 1px solid rgba(255,255,255,0.25);
}
.coupon-table {
width: 100%;
border-collapse: collapse;
margin: 20px 0;
}
.coupon-table th,
.coupon-table td {
border: 1px solid rgba(255,255,255,0.1);
padding: 10px 12px;
text-align: left;
color: #e8e8e8;
}
.coupon-table th { background: rgba(76,175,80,0.25); color: #fff; }
.coupon-table tr:nth-child(even) td { background: rgba(255,255,255,0.03); }
.coupon-table tr:hover td { background: rgba(255,255,255,0.06); }
.btn { padding: 8px 16px; margin: 2px; cursor: pointer; border: none; border-radius: 4px; font-weight: 600; }
.btn-primary { background: linear-gradient(135deg,#667eea,#764ba2); color: #fff; }
.btn-warning { background: #ff9800; color: #fff; }
.btn-danger { background: #f44336; color: #fff; }
.status { padding: 10px 14px; margin: 10px 0; border-radius: 5px; }
.status.success { background: rgba(40,167,69,0.2); color: #8dffb0; border: 1px solid rgba(40,167,69,0.35); }
.status.error { background: rgba(220,53,69,0.2); color: #ffb3b8; border: 1px solid rgba(220,53,69,0.35); }
.badge { padding: 3px 8px; border-radius: 3px; font-size: 0.85em; font-weight: 600; }
.badge-active { background: #28a745; color: #fff; }
.badge-inactive { background: #6c757d; color: #fff; }
.badge-onetime { background: #17a2b8; color: #fff; }
.badge-permanent { background: #ffc107; color: #000; }
/* Inline select/option elements inside table rows */
.coupon-table select { background: #11141f; color: #f0f0f0; border: 1px solid rgba(255,255,255,0.18); border-radius: 4px; padding: 4px 6px; }
/* Mobile: stack table cells */
@media (max-width: 768px) {
.coupon-table, .coupon-table thead, .coupon-table tbody,
.coupon-table th, .coupon-table td, .coupon-table tr { display: block; }
.coupon-table thead tr { display: none; }
.coupon-table td {
position: relative;
padding-left: 45%;
border: none;
border-bottom: 1px solid rgba(255,255,255,0.07);
}
.coupon-table td::before {
position: absolute;
left: 10px;
width: 40%;
white-space: nowrap;
font-weight: 600;
color: rgba(255,255,255,0.55);
font-size: 0.82rem;
content: attr(data-label);
}
.coupon-table tr { border: 1px solid rgba(255,255,255,0.1); border-radius: 6px; margin-bottom: 12px; }
}
</style>
<script>
function toggleGameFilter(selectEl) {
const gameList = document.getElementById('game_filter_list_container');
if (selectEl.value === 'specific_games') {
gameList.style.display = 'block';
} else {
gameList.style.display = 'none';
}
}
function editCoupon(couponId) {
document.getElementById('edit-form-' + couponId).style.display = 'block';
document.getElementById('view-row-' + couponId).style.display = 'none';
}
function cancelEdit(couponId) {
document.getElementById('edit-form-' + couponId).style.display = 'none';
document.getElementById('view-row-' + couponId).style.display = 'table-row';
}
</script>
</head>
<body>
<?php
include(__DIR__ . '/includes/top.php');
include(__DIR__ . '/includes/menu.php');
?>
<div class="container-wide panel">
<h1>Coupon Management</h1>
<?php if ($status): ?>
<div class="status success"><?php echo h($status); ?></div>
<?php endif; ?>
<?php if ($error): ?>
<div class="status error"><?php echo h($error); ?></div>
<?php endif; ?>
<!-- Add New Coupon Form -->
<h2>Add New Coupon</h2>
<form method="POST" class="coupon-form">
<input type="hidden" name="csrf" value="<?php echo h($csrf); ?>">
<div class="form-group">
<label for="code">Coupon Code *</label>
<input type="text" id="code" name="code" required maxlength="50" placeholder="e.g., SUMMER2025">
</div>
<div class="form-group">
<label for="name">Display Name *</label>
<input type="text" id="name" name="name" required maxlength="255" placeholder="e.g., Summer Sale 2025">
</div>
<div class="form-group">
<label for="description">Description</label>
<textarea id="description" name="description" placeholder="Optional description for internal use"></textarea>
</div>
<div class="form-group">
<label for="discount_percent">Discount Percentage * (0-100)</label>
<input type="number" id="discount_percent" name="discount_percent" required min="0" max="100" step="0.01" value="10">
</div>
<div class="form-group">
<label for="usage_type">Usage Type *</label>
<select id="usage_type" name="usage_type" required>
<option value="one_time">One Time (applies to first invoice only)</option>
<option value="permanent">Permanent (applies to all renewals)</option>
</select>
</div>
<div class="form-group">
<label for="game_filter_type">Apply To *</label>
<select id="game_filter_type" name="game_filter_type" required onchange="toggleGameFilter(this)">
<option value="all_games">All Games</option>
<option value="specific_games">Specific Games</option>
</select>
</div>
<div id="game_filter_list_container" class="form-group" style="display:none;">
<label>Select Games</label>
<div class="game-checkboxes">
<?php foreach ((array)$game_options as $game): ?>
<label>
<input type="checkbox" name="game_filter_list[]" value="<?php echo h($game); ?>">
<?php echo h($game); ?>
</label>
<?php endforeach; ?>
</div>
</div>
<div class="form-group">
<label for="max_uses">Maximum Uses (leave empty for unlimited)</label>
<input type="number" id="max_uses" name="max_uses" min="1" placeholder="Unlimited">
</div>
<div class="form-group">
<label for="expires">Expiration Date (leave empty for no expiration)</label>
<input type="datetime-local" id="expires" name="expires">
</div>
<button type="submit" name="add_coupon" class="btn btn-primary">Add Coupon</button>
</form>
<!-- Existing Coupons Table -->
<h2>Existing Coupons</h2>
<?php if ($coupons_result && mysqli_num_rows($coupons_result) > 0): ?>
<table class="coupon-table">
<thead>
<tr>
<th>Code</th>
<th>Name</th>
<th>Discount</th>
<th>Type</th>
<th>Game Filter</th>
<th>Uses</th>
<th>Expires</th>
<th>Status</th>
<th>Actions</th>
</tr>
</thead>
<tbody>
<?php while ($coupon = mysqli_fetch_assoc($coupons_result)):
$games_filtered = $coupon['game_filter_type'] === 'specific_games'
? json_decode($coupon['game_filter_list'], true)
: [];
?>
<!-- View Row -->
<tr id="view-row-<?php echo $coupon['coupon_id']; ?>">
<td data-label="Code"><strong><?php echo h($coupon['code']); ?></strong></td>
<td data-label="Name"><?php echo h($coupon['name']); ?></td>
<td data-label="Discount"><?php echo h($coupon['discount_percent']); ?>%</td>
<td data-label="Type">
<span class="badge badge-<?php echo $coupon['usage_type'] === 'permanent' ? 'permanent' : 'onetime'; ?>">
<?php echo h(ucfirst(str_replace('_', ' ', $coupon['usage_type']))); ?>
</span>
</td>
<td data-label="Games">
<?php if ($coupon['game_filter_type'] === 'all_games'): ?>
All Games
<?php else: ?>
<?php echo count((array)$games_filtered); ?> specific games
<?php endif; ?>
</td>
<td data-label="Uses">
<?php if ($coupon['max_uses']): ?>
<?php echo h($coupon['current_uses']); ?> / <?php echo h($coupon['max_uses']); ?>
<?php else: ?>
<?php echo h($coupon['current_uses']); ?> (unlimited)
<?php endif; ?>
</td>
<td data-label="Expires"><?php echo $coupon['expires'] ? h($coupon['expires']) : 'Never'; ?></td>
<td data-label="Status">
<span class="badge badge-<?php echo $coupon['is_active'] ? 'active' : 'inactive'; ?>">
<?php echo $coupon['is_active'] ? 'Active' : 'Inactive'; ?>
</span>
</td>
<td data-label="Actions">
<button onclick="editCoupon(<?php echo $coupon['coupon_id']; ?>)" class="btn btn-warning">Edit</button>
<form method="POST" style="display:inline;" onsubmit="return confirm('Delete this coupon?');">
<input type="hidden" name="csrf" value="<?php echo h($csrf); ?>">
<input type="hidden" name="coupon_id" value="<?php echo $coupon['coupon_id']; ?>">
<button type="submit" name="delete_coupon" class="btn btn-danger">Delete</button>
</form>
</td>
</tr>
<!-- Edit Form Row (hidden by default) -->
<tr id="edit-form-<?php echo $coupon['coupon_id']; ?>" style="display:none;">
<td colspan="9">
<form method="POST" class="coupon-form">
<input type="hidden" name="csrf" value="<?php echo h($csrf); ?>">
<input type="hidden" name="coupon_id" value="<?php echo $coupon['coupon_id']; ?>">
<div class="form-group">
<label>Coupon Code</label>
<input type="text" name="code" required value="<?php echo h($coupon['code']); ?>">
</div>
<div class="form-group">
<label>Display Name</label>
<input type="text" name="name" required value="<?php echo h($coupon['name']); ?>">
</div>
<div class="form-group">
<label>Description</label>
<textarea name="description"><?php echo h($coupon['description']); ?></textarea>
</div>
<div class="form-group">
<label>Discount Percentage</label>
<input type="number" name="discount_percent" required min="0" max="100" step="0.01" value="<?php echo h($coupon['discount_percent']); ?>">
</div>
<div class="form-group">
<label>Usage Type</label>
<select name="usage_type" required>
<option value="one_time" <?php echo $coupon['usage_type'] === 'one_time' ? 'selected' : ''; ?>>One Time</option>
<option value="permanent" <?php echo $coupon['usage_type'] === 'permanent' ? 'selected' : ''; ?>>Permanent</option>
</select>
</div>
<div class="form-group">
<label>Apply To</label>
<select name="game_filter_type" required onchange="toggleGameFilter(this)">
<option value="all_games" <?php echo $coupon['game_filter_type'] === 'all_games' ? 'selected' : ''; ?>>All Games</option>
<option value="specific_games" <?php echo $coupon['game_filter_type'] === 'specific_games' ? 'selected' : ''; ?>>Specific Games</option>
</select>
</div>
<div class="form-group" style="display:<?php echo $coupon['game_filter_type'] === 'specific_games' ? 'block' : 'none'; ?>;">
<label>Select Games</label>
<div class="game-checkboxes">
<?php foreach ((array)$game_options as $game): ?>
<label>
<input type="checkbox" name="game_filter_list[]" value="<?php echo h($game); ?>"
<?php echo in_array($game, $games_filtered) ? 'checked' : ''; ?>>
<?php echo h($game); ?>
</label>
<?php endforeach; ?>
</div>
</div>
<div class="form-group">
<label>Maximum Uses</label>
<input type="number" name="max_uses" min="1" value="<?php echo h($coupon['max_uses']); ?>" placeholder="Unlimited">
</div>
<div class="form-group">
<label>Expiration Date</label>
<input type="datetime-local" name="expires" value="<?php echo $coupon['expires'] ? date('Y-m-d\TH:i', strtotime($coupon['expires'])) : ''; ?>">
</div>
<div class="form-group">
<label>
<input type="checkbox" name="is_active" <?php echo $coupon['is_active'] ? 'checked' : ''; ?>>
Active
</label>
</div>
<button type="submit" name="update_coupon" class="btn btn-primary">Save Changes</button>
<button type="button" onclick="cancelEdit(<?php echo $coupon['coupon_id']; ?>)" class="btn">Cancel</button>
</form>
</td>
</tr>
<?php endwhile; ?>
</tbody>
</table>
<?php else: ?>
<p>No coupons found. Add your first coupon above.</p>
<?php endif; ?>
</div>
<?php include(__DIR__ . '/includes/footer.php'); ?>
</body>
</html>
<?php
if ($db) mysqli_close($db);
?>

173
Panel/modules/billing/admin_invoices.php Normal file
View file

@ -0,0 +1,173 @@
<?php
// Admin invoices management
if (session_status() === PHP_SESSION_NONE) {
session_name('opengamepanel_web');
session_start();
}
require_once __DIR__ . '/bootstrap.php';
require_once __DIR__ . '/includes/admin_auth.php';
require_once __DIR__ . '/classes/BillingRepository.php';
require_once __DIR__ . '/classes/BillingService.php';
require_once __DIR__ . '/classes/GatewayFactory.php';
function h($s) { return htmlspecialchars((string)$s, ENT_QUOTES, 'UTF-8'); }
$db = mysqli_connect($db_host, $db_user, $db_pass, $db_name, isset($db_port) ? (int)$db_port : null);
if (!$db) die('DB connection failed');
mysqli_set_charset($db, 'utf8mb4');
$prefix = $table_prefix ?? 'gsp_';
$repo = new BillingRepository($db, $prefix);
$svc = new BillingService($repo);
$message = '';
$msgType = 'success';
// Handle POST: mark as paid (manual), cancel, or refund
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action'], $_POST['invoice_id'])) {
$invId = intval($_POST['invoice_id']);
$action = $_POST['action'];
$now = date('Y-m-d H:i:s');
// Fetch invoice to verify it exists
$invRow = null;
$stmt = $db->prepare("SELECT * FROM `{$prefix}billing_invoices` WHERE invoice_id = ? LIMIT 1");
if ($stmt) {
$stmt->bind_param('i', $invId);
$stmt->execute();
$invRow = $stmt->get_result()->fetch_assoc();
$stmt->close();
}
if (!$invRow) {
$message = "Invoice #{$invId} not found.";
$msgType = 'error';
} elseif ($action === 'mark_paid') {
$gateway = GatewayFactory::make('manual');
$captureResult = $gateway->handleCallback([
// total_due is the new schema field; amount is the legacy column during migration
'amount' => $invRow['total_due'] ?? $invRow['amount'] ?? 0,
'currency' => $invRow['currency'] ?? 'USD',
]);
$captureResult['payment_method'] = 'manual';
$homeId = intval($invRow['home_id'] ?? 0);
$result = $svc->processPaymentSuccess($captureResult, $invId, intval($invRow['user_id']), $homeId, $invRow);
$message = $result['success'] ? "Invoice #{$invId} marked as paid (manual)." : "Failed to mark invoice #{$invId} as paid.";
if (!$result['success']) $msgType = 'error';
} elseif ($action === 'cancel') {
$stmt = $db->prepare("UPDATE `{$prefix}billing_invoices` SET payment_status='cancelled' WHERE invoice_id=? LIMIT 1");
if ($stmt) { $stmt->bind_param('i', $invId); $stmt->execute(); $stmt->close(); }
$message = "Invoice #{$invId} cancelled.";
} elseif ($action === 'refund') {
$stmt = $db->prepare("UPDATE `{$prefix}billing_invoices` SET payment_status='refunded' WHERE invoice_id=? LIMIT 1");
if ($stmt) { $stmt->bind_param('i', $invId); $stmt->execute(); $stmt->close(); }
$message = "Invoice #{$invId} marked as refunded.";
}
if (!headers_sent()) {
header('Location: admin_invoices.php?msg=' . urlencode($message) . '&type=' . $msgType);
mysqli_close($db);
$db = null;
exit;
}
}
// Fetch invoices
$invoices = [];
$res = $db->query(
"SELECT i.*, u.users_login, u.users_email
FROM `{$prefix}billing_invoices` i
LEFT JOIN `{$prefix}users` u ON u.user_id = i.user_id
ORDER BY i.invoice_id DESC
LIMIT 500"
);
if ($res) $invoices = $res->fetch_all(MYSQLI_ASSOC);
mysqli_close($db);
$db = null;
if (isset($_GET['msg'])) $message = $_GET['msg'];
if (isset($_GET['type'])) $msgType = $_GET['type'];
?>
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Admin — Invoices</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="css/header.css">
<style>
.status-badge { display:inline-block; padding:2px 8px; border-radius:3px; font-size:12px; font-weight:600; }
.status-paid { background:#d4edda; color:#155724; }
.status-unpaid { background:#fff3cd; color:#856404; }
.status-cancelled { background:#e2e3e5; color:#383d41; }
.status-refunded { background:#f8d7da; color:#721c24; }
.action-btn { padding:3px 8px; font-size:12px; border:none; border-radius:3px; cursor:pointer; }
.btn-pay { background:#28a745; color:#fff; }
.btn-cancel { background:#6c757d; color:#fff; }
.btn-refund { background:#dc3545; color:#fff; }
</style>
</head>
<body>
<?php include __DIR__ . '/includes/top.php'; include __DIR__ . '/includes/menu.php'; ?>
<div class="container-wide panel">
<h1>Admin — All Invoices</h1>
<?php if ($message): ?>
<div style="background:<?= $msgType==='error' ? '#f8d7da' : '#d4edda' ?>;padding:10px;margin-bottom:15px;border-radius:3px;color:<?= $msgType==='error' ? '#721c24' : '#155724' ?>;">
<?= h($message) ?>
</div>
<?php endif; ?>
<table class="cart-table">
<thead>
<tr>
<th>#</th><th>User</th><th>Server</th><th>Service</th>
<th>Rate</th><th>Players</th><th>Period</th>
<th>Total</th><th>Status</th><th>Method</th><th>Txn ID</th><th>Actions</th>
</tr>
</thead>
<tbody>
<?php if (empty($invoices)): ?>
<tr><td colspan="12" style="text-align:center">No invoices found.</td></tr>
<?php else: foreach ($invoices as $inv): ?>
<tr>
<td><?= h($inv['invoice_id']) ?></td>
<td><?= h($inv['users_login'] ?? $inv['user_id']) ?></td>
<td><?= h($inv['home_id'] ?: '—') ?></td>
<td><?= h($inv['service_id']) ?></td>
<td><?= h($inv['rate_type'] ?? '—') ?></td>
<td><?= h($inv['players'] ?? '—') ?></td>
<td style="font-size:11px"><?= h(substr($inv['period_start'] ?? '', 0, 10)) ?> – <?= h(substr($inv['period_end'] ?? '', 0, 10)) ?></td>
<td><?= h(number_format((float)($inv['total_due'] ?? $inv['amount'] ?? 0), 2)) ?></td>
<td><span class="status-badge status-<?= h(in_array($inv['payment_status'] ?? '', ['unpaid','paid','cancelled','refunded']) ? $inv['payment_status'] : 'unpaid') ?>"><?= h($inv['payment_status'] ?? 'unpaid') ?></span></td>
<td><?= h($inv['payment_method'] ?? '—') ?></td>
<td style="font-size:11px;max-width:120px;overflow:hidden"><?= h($inv['payment_txid'] ?? '—') ?></td>
<td>
<?php if (($inv['payment_status'] ?? '') !== 'paid'): ?>
<form method="post" style="display:inline">
<input type="hidden" name="invoice_id" value="<?= intval($inv['invoice_id']) ?>">
<input type="hidden" name="action" value="mark_paid">
<button type="submit" class="action-btn btn-pay">Mark Paid</button>
</form>
<?php endif; ?>
<?php if (!in_array($inv['payment_status'] ?? '', ['cancelled','refunded'])): ?>
<form method="post" style="display:inline" onsubmit="return confirm('Cancel this invoice?')">
<input type="hidden" name="invoice_id" value="<?= intval($inv['invoice_id']) ?>">
<input type="hidden" name="action" value="cancel">
<button type="submit" class="action-btn btn-cancel">Cancel</button>
</form>
<?php endif; ?>
<?php if (($inv['payment_status'] ?? '') === 'paid'): ?>
<form method="post" style="display:inline" onsubmit="return confirm('Mark as refunded?')">
<input type="hidden" name="invoice_id" value="<?= intval($inv['invoice_id']) ?>">
<input type="hidden" name="action" value="refund">
<button type="submit" class="action-btn btn-refund">Refund</button>
</form>
<?php endif; ?>
</td>
</tr>
<?php endforeach; endif; ?>
</tbody>
</table>
</div>
<?php include __DIR__ . '/includes/footer.php'; ?>
</body>
</html>

241
Panel/modules/billing/admin_orders.php Normal file
View file

@ -0,0 +1,241 @@
<?php
/*
* Admin page to manage all billing orders
* Allows admins to view, provision, suspend, and delete orders
*/
function exec_ogp_module()
{
global $db, $view;
$user_id = $_SESSION['user_id'];
$isAdmin = $db->isAdmin($user_id);
if (!$isAdmin) {
echo "<div class='failure'><p>Access Denied: Admin privileges required.</p></div>";
return;
}
// Handle bulk actions
if (isset($_POST['bulk_action']) && isset($_POST['selected_orders'])) {
$action = $_POST['bulk_action'];
$selected = $_POST['selected_orders'];
foreach ((array)$selected as $order_id) {
$order_id = $db->realEscapeSingle($order_id);
switch ($action) {
case 'provision':
// Redirect to provision page for each order
header("Location: home.php?m=billing&p=provision_servers&order_id=".$order_id);
exit;
break;
case 'expire':
$db->query("UPDATE OGP_DB_PREFIXbilling_orders SET status='Expired' WHERE order_id=".$order_id);
break;
case 'activate':
$db->query("UPDATE OGP_DB_PREFIXbilling_orders SET status='Active' WHERE order_id=".$order_id);
break;
case 'invoice':
$db->query("UPDATE OGP_DB_PREFIXbilling_orders SET status='Invoiced' WHERE order_id=".$order_id);
break;
}
}
echo "<div class='success'><p>Bulk action completed for ".count((array)$selected)." order(s).</p></div>";
}
// Get filter parameters
$status_filter = isset($_GET['status']) ? $_GET['status'] : 'all';
$search = isset($_GET['search']) ? $_GET['search'] : '';
echo "<h2>Manage All Orders (Admin)</h2>";
// Filter form
echo "<form method='get' action='home.php' style='margin-bottom: 20px;'>";
echo "<input type='hidden' name='m' value='billing'>";
echo "<input type='hidden' name='p' value='admin_orders'>";
echo "Status: <select name='status' onchange='this.form.submit()'>";
echo "<option value='all' ".($status_filter == 'all' ? 'selected' : '').">All Orders</option>";
echo "<option value='Active' ".($status_filter == 'Active' ? 'selected' : '').">Active</option>";
echo "<option value='Invoiced' ".($status_filter == 'Invoiced' ? 'selected' : '').">Invoiced</option>";
echo "<option value='Expired' ".($status_filter == 'Expired' ? 'selected' : '').">Expired</option>";
echo "</select> ";
echo "Search: <input type='text' name='search' value='".$search."' placeholder='Order ID, username, server name...'> ";
echo "<button type='submit' class='btn'>Filter</button>";
echo "</form>";
// Build query
$query = "SELECT o.*, s.service_name, u.users_login, u.users_email
FROM OGP_DB_PREFIXbilling_orders o
LEFT JOIN OGP_DB_PREFIXbilling_services s ON o.service_id = s.service_id
LEFT JOIN OGP_DB_PREFIXusers u ON o.user_id = u.user_id
WHERE 1=1";
if ($status_filter != 'all') {
$query .= " AND o.status = '".$db->realEscapeSingle($status_filter)."'";
}
if (!empty($search)) {
$search_escaped = $db->realEscapeSingle($search);
$query .= " AND (o.order_id LIKE '%".$search_escaped."%'
OR o.home_name LIKE '%".$search_escaped."%'
OR u.users_login LIKE '%".$search_escaped."%'
OR u.users_email LIKE '%".$search_escaped."%')";
}
$query .= " ORDER BY o.order_date DESC";
$orders = $db->resultQuery($query);
if (empty($orders)) {
echo "<div class='info'><p>No orders found matching your filters.</p></div>";
return;
}
echo "<form method='post' action='home.php?m=billing&p=admin_orders'>";
echo "<div style='margin-bottom: 10px;'>";
echo "With selected: ";
echo "<select name='bulk_action'>";
echo "<option value=''>-- Choose Action --</option>";
echo "<option value='provision'>Provision Servers</option>";
echo "<option value='activate'>Set Active</option>";
echo "<option value='invoice'>Set Invoiced</option>";
echo "<option value='expire'>Set Expired</option>";
echo "</select> ";
echo "<button type='submit' class='btn'>Apply</button>";
echo "</div>";
echo "<table class='tablesorter'>";
echo "<thead><tr>";
echo "<th><input type='checkbox' id='select_all' onclick='toggleAll(this)'></th>";
echo "<th>Order ID</th>";
echo "<th>Username</th>";
echo "<th>Server Name</th>";
echo "<th>Game Service</th>";
echo "<th>Players</th>";
echo "<th>Price</th>";
echo "<th>Duration</th>";
echo "<th>Status</th>";
echo "<th>Order Date</th>";
echo "<th>End Date</th>";
echo "<th>Home ID</th>";
echo "<th>Actions</th>";
echo "</tr></thead><tbody>";
foreach ((array)$orders as $order) {
$status_class = '';
switch ($order['status']) {
case 'Active': $status_class = 'label-success'; break;
case 'Invoiced': $status_class = 'label-warning'; break;
case 'Expired': $status_class = 'label-danger'; break;
default: $status_class = 'label-info';
}
echo "<tr>";
echo "<td><input type='checkbox' name='selected_orders[]' value='".$order['order_id']."'></td>";
echo "<td>".$order['order_id']."</td>";
echo "<td>".$order['users_login']."<br><small>".$order['users_email']."</small></td>";
echo "<td>".$order['home_name']."</td>";
echo "<td>".$order['service_name']."</td>";
echo "<td>".$order['max_players']."</td>";
echo "<td>$".number_format($order['price'], 2)."</td>";
echo "<td>".$order['qty']." ".$order['invoice_duration']."(s)</td>";
echo "<td><span class='label ".$status_class."'>".$order['status']."</span></td>";
echo "<td>".date('Y-m-d H:i', strtotime($order['order_date']))."</td>";
echo "<td>".($order['end_date'] ? date('Y-m-d', strtotime($order['end_date'])) : 'N/A')."</td>";
echo "<td>".($order['home_id'] ? $order['home_id'] : 'N/A')."</td>";
echo "<td>";
if ($order['status'] == 'Active' && !$order['home_id']) {
echo "<a href='home.php?m=billing&p=provision_servers&order_id=".$order['order_id']."' class='btn btn-sm'>Provision</a> ";
}
if ($order['status'] == 'Active' && $order['home_id']) {
echo "<a href='home.php?m=gamemanager&p=game_monitor&home_id-mod_id-ip=".$order['home_id']."' class='btn btn-sm'>View Server</a> ";
}
echo "<a href='#' onclick='viewOrder(".$order['order_id'].")' class='btn btn-sm'>Details</a>";
echo "</td>";
echo "</tr>";
}
echo "</tbody></table>";
echo "</form>";
// JavaScript for checkbox toggle
echo "<script>
function toggleAll(checkbox) {
var checkboxes = document.getElementsByName('selected_orders[]');
for (var i = 0; i < checkboxes.length; i++) {
checkboxes[i].checked = checkbox.checked;
}
}
function viewOrder(orderId) {
alert('Order details for #' + orderId + '\\n\\nFull order details feature coming soon.');
return false;
}
</script>";
// Summary stats
$stats = $db->resultQuery("SELECT status, COUNT(*) as count, SUM(price) as total
FROM OGP_DB_PREFIXbilling_orders
GROUP BY status");
echo "<div style='margin-top: 30px;'>";
echo "<h3>Order Statistics</h3>";
echo "<table class='tablesorter' style='width: auto;'>";
echo "<thead><tr><th>Status</th><th>Count</th><th>Total Value</th></tr></thead><tbody>";
foreach ((array)$stats as $stat) {
echo "<tr>";
echo "<td>".$stat['status']."</td>";
echo "<td>".$stat['count']."</td>";
echo "<td>$".number_format($stat['total'], 2)."</td>";
echo "</tr>";
}
echo "</tbody></table>";
echo "</div>";
// Orphaned home_id diagnostics —————————————————————————————————————————
// Find billing_orders rows where home_id != 0 but no matching gsp_server_homes
// record exists. These indicate provisioning failures or stale data, and they
// are the reason the game monitor may show "No expiration date found".
$orphans = $db->resultQuery(
"SELECT o.order_id, o.user_id, o.home_name, o.home_id, o.status, o.end_date
FROM OGP_DB_PREFIXbilling_orders o
LEFT JOIN OGP_DB_PREFIXserver_homes sh ON sh.home_id = o.home_id
WHERE o.home_id != '0'
AND o.home_id != ''
AND sh.home_id IS NULL
ORDER BY o.order_id ASC"
);
echo "<div style='margin-top: 30px;'>";
echo "<h3>Orphaned home_id Diagnostics</h3>";
echo "<p style='color:#666;'>Billing orders that reference a <code>home_id</code> which no longer exists in <code>gsp_server_homes</code>. ";
echo "These orders will not show an expiration date on the game monitor. ";
echo "Reset <code>home_id</code> to <code>0</code> or re-provision these orders to fix them. ";
echo "Run <code>normalize_billing_order_status.sql</code> to standardize any legacy status values.</p>";
if (empty($orphans)) {
echo "<p style='color:green;'>&#10003; No orphaned billing orders found.</p>";
} else {
echo "<table class='tablesorter' style='width:100%;'>";
echo "<thead><tr><th>Order ID</th><th>User ID</th><th>Server Name</th><th>home_id (missing)</th><th>Status</th><th>End Date</th></tr></thead><tbody>";
foreach ($orphans as $row) {
echo "<tr>";
echo "<td>".intval($row['order_id'])."</td>";
echo "<td>".intval($row['user_id'])."</td>";
echo "<td>".htmlspecialchars($row['home_name'] ?? '')."</td>";
echo "<td style='color:red;'>".htmlspecialchars($row['home_id'] ?? '')."</td>";
echo "<td>".htmlspecialchars($row['status'] ?? '')."</td>";
echo "<td>".htmlspecialchars($row['end_date'] ?? 'NULL')."</td>";
echo "</tr>";
}
echo "</tbody></table>";
}
echo "</div>";
}
?>

97
Panel/modules/billing/admin_payments.php Normal file
View file

@ -0,0 +1,97 @@
<?php
// Admin payment transaction log viewer
if (session_status() === PHP_SESSION_NONE) {
session_name('opengamepanel_web');
session_start();
}
require_once __DIR__ . '/bootstrap.php';
require_once __DIR__ . '/includes/admin_auth.php';
require_once __DIR__ . '/classes/BillingRepository.php';
function h($s) { return htmlspecialchars((string)$s, ENT_QUOTES, 'UTF-8'); }
$db = mysqli_connect($db_host, $db_user, $db_pass, $db_name, isset($db_port) ? (int)$db_port : null);
$transactions = [];
$errorMsg = '';
if (!$db) {
$errorMsg = 'Database connection failed.';
} else {
mysqli_set_charset($db, 'utf8mb4');
$prefix = $table_prefix ?? 'gsp_';
$repo = new BillingRepository($db, $prefix);
// Build filter from GET params
$filter = [];
if (!empty($_GET['user_id'])) $filter['user_id'] = intval($_GET['user_id']);
if (!empty($_GET['home_id'])) $filter['home_id'] = intval($_GET['home_id']);
if (!empty($_GET['payment_method'])) $filter['payment_method'] = trim($_GET['payment_method']);
try {
$transactions = $repo->getTransactions($filter, 200, 0);
} catch (Throwable $e) {
$errorMsg = 'Could not load transactions: ' . htmlspecialchars($e->getMessage(), ENT_QUOTES, 'UTF-8');
}
mysqli_close($db);
$db = null;
}
?>
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Admin — Payment Transactions</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="css/header.css">
</head>
<body>
<?php include __DIR__ . '/includes/top.php'; include __DIR__ . '/includes/menu.php'; ?>
<div class="container-wide panel">
<h1>Payment Transaction Log</h1>
<?php if ($errorMsg): ?><div class="alert alert-error"><?= h($errorMsg) ?></div><?php endif; ?>
<form method="get" style="margin-bottom:15px;">
<label>User ID: <input name="user_id" value="<?= h($_GET['user_id'] ?? '') ?>" style="width:80px"></label>
<label>Server ID: <input name="home_id" value="<?= h($_GET['home_id'] ?? '') ?>" style="width:80px"></label>
<label>Method:
<select name="payment_method">
<option value="">All</option>
<option value="paypal" <?= ($_GET['payment_method'] ?? '') === 'paypal' ? 'selected' : '' ?>>PayPal</option>
<option value="stripe" <?= ($_GET['payment_method'] ?? '') === 'stripe' ? 'selected' : '' ?>>Stripe</option>
<option value="manual" <?= ($_GET['payment_method'] ?? '') === 'manual' ? 'selected' : '' ?>>Manual</option>
</select>
</label>
<button type="submit" class="gsw-btn">Filter</button>
<a href="admin_payments.php" class="gsw-btn-secondary">Clear</a>
</form>
<?php if (empty($transactions)): ?>
<p>No transactions found<?= (!empty($filter) ? ' matching filters' : '') ?>.</p>
<?php else: ?>
<table class="cart-table">
<thead>
<tr>
<th>#</th><th>Invoice</th><th>User</th><th>Server</th>
<th>Method</th><th>Txn ID</th><th>Amount</th><th>Status</th><th>Date</th>
</tr>
</thead>
<tbody>
<?php foreach ($transactions as $t): ?>
<tr>
<td><?= h($t['transaction_id']) ?></td>
<td><?= h($t['invoice_id']) ?></td>
<td><?= h($t['users_login'] ?? $t['user_id']) ?></td>
<td><?= $t['home_id'] ? h($t['home_id']) : '—' ?></td>
<td><?= h($t['payment_method']) ?></td>
<td style="font-size:11px;max-width:160px;overflow:hidden;text-overflow:ellipsis"><?= h($t['transaction_external_id']) ?></td>
<td><?= h($t['currency'] . ' ' . number_format((float)$t['amount'], 2)) ?></td>
<td><span class="status-badge status-<?= h(ucfirst($t['status'])) ?>"><?= h($t['status']) ?></span></td>
<td><?= h($t['created_at']) ?></td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
<?php endif; ?>
</div>
<?php include __DIR__ . '/includes/footer.php'; ?>
</body>
</html>

161
Panel/modules/billing/admin_xml_editor.php Normal file
View file

@ -0,0 +1,161 @@
<?php
require_once(__DIR__ . '/includes/admin_auth.php');
require_once(__DIR__ . '/includes/config_loader.php');
include(__DIR__ . '/includes/top.php');
include(__DIR__ . '/includes/menu.php');
$serverConfigDir = realpath(__DIR__ . '/../config_games/server_configs');
if ($serverConfigDir === false || !is_dir($serverConfigDir)) {
die('Server config directory not found.');
}
$messages = [];
$errors = [];
$availableFiles = [];
$directoryIterator = new DirectoryIterator($serverConfigDir);
foreach ((array)$directoryIterator as $fileInfo) {
if ($fileInfo->isFile() && strtolower($fileInfo->getExtension()) === 'xml') {
$availableFiles[] = $fileInfo->getFilename();
}
}
sort($availableFiles, SORT_NATURAL | SORT_FLAG_CASE);
$selectedFile = '';
$fileContents = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$postedFile = $_POST['file'] ?? '';
$postedFile = basename(trim((string)$postedFile));
if ($postedFile === '' || !in_array($postedFile, $availableFiles, true)) {
$errors[] = 'Invalid file selected.';
} else {
$fullPath = $serverConfigDir . DIRECTORY_SEPARATOR . $postedFile;
if (!is_file($fullPath) || !is_readable($fullPath)) {
$errors[] = 'Selected file is missing or unreadable.';
} elseif (!is_writable($fullPath)) {
$errors[] = 'Selected file is not writable.';
} else {
$newContents = $_POST['xml_contents'] ?? '';
$backupDir = $serverConfigDir . DIRECTORY_SEPARATOR . '_backups';
if (!is_dir($backupDir)) {
@mkdir($backupDir, 0775, true);
}
$timestamp = date('Ymd-His');
$backupPath = $backupDir . DIRECTORY_SEPARATOR . $postedFile . '.' . $timestamp . '.bak';
$original = file_get_contents($fullPath);
if ($original === false) {
$errors[] = 'Unable to read original file for backup.';
} elseif (@file_put_contents($backupPath, $original) === false) {
$errors[] = 'Failed to create backup copy before saving.';
} elseif (@file_put_contents($fullPath, $newContents) === false) {
$errors[] = 'Failed to write new XML contents.';
} else {
$messages[] = 'Saved changes to ' . htmlspecialchars($postedFile, ENT_QUOTES, 'UTF-8') . ' (backup: ' . basename($backupPath) . ').';
$selectedFile = $postedFile;
$fileContents = $newContents;
}
}
}
}
if ($selectedFile === '') {
$queryFile = $_GET['file'] ?? '';
$queryFile = basename(trim((string)$queryFile));
if ($queryFile !== '' && in_array($queryFile, $availableFiles, true)) {
$selectedFile = $queryFile;
}
}
if ($selectedFile !== '' && $fileContents === '') {
$fullPath = $serverConfigDir . DIRECTORY_SEPARATOR . $selectedFile;
if (is_file($fullPath) && is_readable($fullPath)) {
$fileContents = file_get_contents($fullPath);
if ($fileContents === false) {
$errors[] = 'Unable to read the selected file.';
$fileContents = '';
}
} else {
$errors[] = 'Selected file is missing or unreadable.';
$selectedFile = '';
}
}
function billing_render_flash(array $items, string $cssClass): void {
if (!$items) {
return;
}
echo '<div class="panel ' . $cssClass . '" style="margin-bottom:12px">';
foreach ((array)$items as $item) {
echo '<div>' . $item . '</div>';
}
echo '</div>';
}
?>
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>Admin — XML Config Editor</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="css/header.css">
<style>
.editor-wrapper { max-width: 1100px; margin: 30px auto; background: rgba(0,0,0,0.6); padding: 24px; border-radius: 10px; }
.editor-wrapper h1 { margin-top: 0; color: #fff; }
.editor-layout { display: flex; flex-wrap: wrap; gap: 20px; }
.file-list { flex: 1 1 240px; max-height: 520px; overflow-y: auto; background: rgba(0,0,0,0.35); border: 1px solid rgba(255,255,255,0.1); border-radius: 8px; padding: 16px; }
.file-list h2 { margin-top: 0; font-size: 1rem; color: #a5b4fc; }
.file-list a { display: block; color: #7fb3ff; text-decoration: none; padding: 6px 4px; border-radius: 6px; }
.file-list a:hover { background: rgba(102, 126, 234, 0.25); }
.file-list a.active { background: rgba(102, 126, 234, 0.45); color: #fff; }
.editor-form { flex: 3 1 500px; }
textarea { width: 100%; min-height: 480px; font-family: "SFMono-Regular", Consolas, "Liberation Mono", Menlo, monospace; font-size: 14px; line-height: 1.4; padding: 12px; color: #e5e7eb; background: rgba(15, 23, 42, 0.85); border: 1px solid rgba(148, 163, 184, 0.4); border-radius: 8px; }
textarea:focus { outline: none; border-color: #667eea; box-shadow: 0 0 0 2px rgba(102, 126, 234, 0.35); }
.editor-actions { margin-top: 16px; display: flex; gap: 12px; align-items: center; }
.editor-actions button { padding: 10px 18px; border: none; border-radius: 6px; background: #667eea; color: #fff; font-weight: 600; cursor: pointer; }
.editor-actions button:hover { background: #5563d6; }
.hint { color: #cbd5f5; font-size: 0.85rem; }
.panel.error div { color: #f87171; }
.panel.success div { color: #34d399; }
</style>
</head>
<body>
<div class="editor-wrapper">
<h1>XML Config Editor</h1>
<p class="hint">Editing files in <code><?php echo htmlspecialchars($serverConfigDir, ENT_QUOTES, 'UTF-8'); ?></code>. Each save creates a backup under <code>_backups/</code>.</p>
<?php billing_render_flash($messages, 'success'); ?>
<?php billing_render_flash($errors, 'error'); ?>
<div class="editor-layout">
<div class="file-list">
<h2>Server Config XML Files</h2>
<?php if (!$availableFiles): ?>
<p style="color:#e5e7eb;">No XML files found.</p>
<?php else: ?>
<?php foreach ((array)$availableFiles as $fileName): ?>
<?php $isActive = ($fileName === $selectedFile); ?>
<a href="admin_xml_editor.php?file=<?php echo urlencode($fileName); ?>" class="<?php echo $isActive ? 'active' : ''; ?>"><?php echo htmlspecialchars($fileName, ENT_QUOTES, 'UTF-8'); ?></a>
<?php endforeach; ?>
<?php endif; ?>
</div>
<div class="editor-form">
<?php if ($selectedFile === ''): ?>
<p style="color:#e5e7eb;">Select an XML file from the list to begin editing.</p>
<?php else: ?>
<form method="post" action="admin_xml_editor.php">
<input type="hidden" name="file" value="<?php echo htmlspecialchars($selectedFile, ENT_QUOTES, 'UTF-8'); ?>">
<textarea name="xml_contents" spellcheck="false"><?php echo htmlspecialchars($fileContents, ENT_QUOTES, 'UTF-8'); ?></textarea>
<div class="editor-actions">
<button type="submit">Save Changes</button>
<span class="hint">Backup created before each save.</span>
</div>
</form>
<?php endif; ?>
</div>
</div>
</div>
<?php include(__DIR__ . '/includes/footer.php'); ?>
</body>
</html>

718
Panel/modules/billing/adminserverlist.php Normal file
View file

@ -0,0 +1,718 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Admin Service Configuration - GSP</title>
<style>
.svc-table { border-collapse: collapse; width: 100%; }
.svc-table th, .svc-table td { border: 1px solid rgba(86,105,130,0.6); padding: 8px 10px; vertical-align: middle; }
/* Sticky header: stays visible while scrolling; dark background with light text for readability */
.svc-table thead th { position: sticky; top: 0; z-index: 10; background: #26354a; color: #f0f0f0; white-space: nowrap; text-align: center; }
.svc-table thead th.game-name { text-align: left; }
.svc-table td.game-name { text-align: left; white-space: nowrap; }
.price-input { width: 80px; }
.slot-input { width: 60px; }
.desc-input { width: 160px; }
.img-input { width: 160px; }
.img-select { max-width: 180px; }
.img-fallback { display: none; max-width: 180px; margin-top: 4px; }
.img-fallback.img-fallback-visible { display: block; }
.muted { color: #999; font-size: 0.85em; }
.flash-ok { background: #d4edda; border: 1px solid #c3e6cb; padding: 10px 12px; margin-bottom: 10px; border-radius: 6px; color: #155724; }
.flash-err { background: #f8d7da; border: 1px solid #f5c6cb; padding: 10px 12px; margin-bottom: 10px; border-radius: 6px; color: #721c24; }
.servers-cell { text-align: left; min-width: 160px; max-width: 220px; width: 220px; }
.server-cb-label { display: block; white-space: normal; margin: 2px 0; }
.action-cell { text-align: center; min-width: 120px; }
.btn-row-save, .btn-save-all {
border: 1px solid #3e7ab8;
border-radius: 6px;
background: #2f6dac;
color: #fff;
font-weight: 600;
padding: 6px 10px;
cursor: pointer;
}
.btn-save-all {
padding: 9px 14px;
font-size: 0.95rem;
}
.btn-row-save:hover, .btn-save-all:hover { background: #25598d; }
.sort-link { color: #d8e7ff; text-decoration: none; display: inline-flex; align-items: center; gap: 4px; }
.sort-link:hover { text-decoration: underline; }
.sort-active { color: #ffffff; font-weight: 700; }
</style>
</head>
<body>
<?php
/**
* Admin service configuration page.
*
* On every load this page syncs gsp_billing_services with the panel's game
* config list (config_homes). One billing_services row is maintained per
* config_homes entry; the row is keyed by home_cfg_id. config_mods is NOT
* used as the identity source — mods are install-time details that belong in
* the game config tables, not here.
*
* remote_server_id in gsp_billing_services stores a comma-separated list of
* numeric remote server IDs, e.g. "1,3,7". The deprecated
* gsp_billing_service_remote_servers mapping table is never referenced here.
*
* Columns synced from config_homes (read-only in the UI):
* service_name ← game_name
* description ← game_name (default; admin may override via separate edit)
* home_cfg_id ← home_cfg_id (sync key)
*
* Columns that are admin-editable and NEVER overwritten by sync:
* enabled, slot_min_qty, slot_max_qty,
* price_monthly,
* remote_server_id, description, img_url
*/
require_once(__DIR__ . '/bootstrap.php');
require_once(__DIR__ . '/includes/admin_auth.php');
if (session_status() === PHP_SESSION_NONE) {
session_name('opengamepanel_web');
session_start();
}
function h(mixed $s): string
{
return htmlspecialchars((string)$s, ENT_QUOTES, 'UTF-8');
}
/**
* Return a sorted list of image filenames available in /images/games/.
* Only files with recognised image extensions are included.
*/
function list_game_images(): array
{
$dir = __DIR__ . '/../../images/games';
if (!is_dir($dir)) {
return [];
}
$exts = ['jpg', 'jpeg', 'png', 'webp', 'gif'];
$files = [];
foreach (scandir($dir) as $f) {
if ($f === '.' || $f === '..') continue;
$ext = strtolower(pathinfo($f, PATHINFO_EXTENSION));
if (in_array($ext, $exts, true)) {
$files[] = $f;
}
}
natcasesort($files);
return array_values($files);
}
/**
* Normalize a game name or filename stem so that platform/architecture
* suffixes are stripped before comparison.
*
* Examples:
* "7 Days to Die linux64" → "7daystodie"
* "arma3_win64" → "arma3"
* "dayz_epoch_mod_win32" → "dayzepochmod"
*/
function normalize_game_name(string $name): string
{
$name = strtolower($name);
// Strip extension if present
$name = preg_replace('/\.[a-z]{2,4}$/', '', $name);
// Strip common platform/arch suffixes (as whole words or underscore-delimited tokens)
$name = preg_replace('/[\s_\-]*(linux64|linux32|linux|win64|win32|windows|win|x64|x86|32|64)/', '', $name);
// Remove punctuation, spaces and underscores
$name = preg_replace('/[^a-z0-9]/', '', $name);
return $name;
}
/**
* Given a game name (from config_homes.game_name or home_cfg_file), try to find
* a matching image filename from the list of available game images.
* Returns the filename (e.g. "arma_3.jpg") or '' if nothing suitable is found.
*/
function guess_game_image(string $gameName, string $cfgFile, array $availableImages): string
{
if (empty($availableImages)) {
return '';
}
// Build a normalised→filename map for available images
$normMap = [];
foreach ($availableImages as $imgFile) {
$stem = pathinfo($imgFile, PATHINFO_FILENAME);
$key = normalize_game_name($stem);
if ($key !== '') {
// Keep the first match for duplicate normalised keys
$normMap[$key] = $normMap[$key] ?? $imgFile;
}
}
// Candidates to try, in priority order: game display name, then cfg file stem
$candidates = [$gameName];
if ($cfgFile !== '') {
$candidates[] = pathinfo($cfgFile, PATHINFO_FILENAME);
}
foreach ($candidates as $candidate) {
$key = normalize_game_name($candidate);
if ($key !== '' && isset($normMap[$key])) {
return $normMap[$key];
}
// Also try prefix matching: game "dayz epoch" → find "dayz_epochmod"
foreach ($normMap as $normImgKey => $imgFile) {
if (str_starts_with($normImgKey, $key) || str_starts_with($key, $normImgKey)) {
return $imgFile;
}
}
}
return '';
}
$db = billing_get_db();
if (!($db instanceof mysqli)) {
die("Database connection failed.");
}
include(__DIR__ . '/includes/top.php');
include(__DIR__ . '/includes/menu.php');
/* -----------------------------------------------------------------------
Auto-sync: keep billing_services in step with config_homes
Source: one row per config_homes entry, keyed by home_cfg_id.
Runs on every page load; INSERT and soft-disable only — never hard-delete.
----------------------------------------------------------------------- */
function sync_billing_services(mysqli $db, string $prefix): array
{
$messages = [];
$tableName = $prefix . 'billing_services';
// Schema auto-repair: ensure all expected columns exist.
// col_exists() is provided by bootstrap.php.
$autoRepairCols = [
'home_cfg_id' => "ADD COLUMN `home_cfg_id` INT(11) NOT NULL DEFAULT 0",
'description' => "ADD COLUMN `description` VARCHAR(1000) NOT NULL DEFAULT ''",
'img_url' => "ADD COLUMN `img_url` VARCHAR(255) NOT NULL DEFAULT ''",
'slot_min_qty' => "ADD COLUMN `slot_min_qty` INT(11) NOT NULL DEFAULT 1",
'slot_max_qty' => "ADD COLUMN `slot_max_qty` INT(11) NOT NULL DEFAULT 100",
'price_daily' => "ADD COLUMN `price_daily` FLOAT(15,4) NOT NULL DEFAULT 0",
'price_monthly' => "ADD COLUMN `price_monthly` FLOAT(15,4) NOT NULL DEFAULT 0",
'price_year' => "ADD COLUMN `price_year` FLOAT(15,4) NOT NULL DEFAULT 0",
'remote_server_id' => "ADD COLUMN `remote_server_id` VARCHAR(255) NOT NULL DEFAULT ''",
];
foreach ($autoRepairCols as $col => $alterFragment) {
if (!col_exists($db, $tableName, $col)) {
if ($db->query("ALTER TABLE `{$tableName}` {$alterFragment}")) {
$messages[] = "✔ Auto-repaired: added column '{$col}' to {$tableName}.";
} else {
$messages[] = "✖ Could not add column '{$col}' to {$tableName}: " . $db->error;
}
}
}
// If critical columns are still absent after repair, abort to avoid SQL errors.
foreach (['service_name', 'home_cfg_id', 'enabled'] as $critical) {
if (!col_exists($db, $tableName, $critical)) {
$messages[] = "⚠ Critical column '{$critical}' missing from {$tableName}; skipping sync.";
return $messages;
}
}
// Load all game configs from config_homes — one entry per game XML.
$configHomes = [];
$res = $db->query(
"SELECT home_cfg_id, game_name, home_cfg_file
FROM `{$prefix}config_homes`
ORDER BY game_name"
);
if ($res) {
while ($row = $res->fetch_assoc()) {
$configHomes[(int)$row['home_cfg_id']] = $row;
}
}
if (empty($configHomes)) {
// config_homes is empty or the table does not exist yet — nothing to sync.
return $messages;
}
// Load existing billing_services indexed by home_cfg_id.
$existing = [];
$svcRes = $db->query(
"SELECT service_id, home_cfg_id, enabled
FROM `{$tableName}`"
);
if ($svcRes) {
while ($row = $svcRes->fetch_assoc()) {
$hid = (int)$row['home_cfg_id'];
if ($hid > 0) {
$existing[$hid] = $row;
}
}
}
// Insert a new row for every config_homes entry not yet in billing_services.
// Admin-editable fields (prices, slots, enabled, etc.) get safe defaults so
// the service is visible to the admin but not yet live in the store.
$availableImages = list_game_images();
foreach ($configHomes as $homeCfgId => $ch) {
if (isset($existing[$homeCfgId])) {
continue;
}
$svcName = $db->real_escape_string($ch['game_name']);
$guessedImg = $db->real_escape_string(
guess_game_image((string)$ch['game_name'], (string)($ch['home_cfg_file'] ?? ''), $availableImages)
);
$db->query(
"INSERT INTO `{$tableName}`
(home_cfg_id, mod_cfg_id, service_name, description,
remote_server_id, enabled,
price_daily, price_monthly, price_year,
slot_min_qty, slot_max_qty,
img_url, ftp, install_method, manual_url, access_rights)
VALUES
({$homeCfgId}, 0, '{$svcName}', '{$svcName}',
'', 0,
0.00, 0.00, 0.00,
1, 100,
'{$guessedImg}', '', 'steamcmd', '', '')"
);
$msg = "Added new service: " . $ch['game_name'];
if ($guessedImg !== '') {
$msg .= " (image auto-set: {$guessedImg})";
}
$messages[] = $msg;
}
// Soft-disable billing_services whose home_cfg_id no longer appears in config_homes.
foreach ($existing as $homeCfgId => $svcRow) {
if (!isset($configHomes[$homeCfgId])) {
$sid = (int)$svcRow['service_id'];
$db->query(
"UPDATE `{$tableName}`
SET enabled = 0
WHERE service_id = {$sid} AND enabled = 1"
);
if ($db->affected_rows > 0) {
$messages[] = "Service ID {$sid} disabled — game config no longer in config_homes.";
}
}
}
return $messages;
}
$syncMessages = sync_billing_services($db, $table_prefix);
$flash = [];
$flashType = 'ok';
$sort = strtolower((string)($_GET['sort'] ?? $_POST['sort'] ?? 'game'));
$dir = strtolower((string)($_GET['dir'] ?? $_POST['dir'] ?? 'asc')) === 'desc' ? 'desc' : 'asc';
$gameMode = strtolower((string)($_GET['game_mode'] ?? $_POST['game_mode'] ?? 'name'));
if (!in_array($sort, ['game', 'config', 'enabled', 'month', 'servers'], true)) {
$sort = 'game';
}
if (!in_array($gameMode, ['name', 'enabled'], true)) {
$gameMode = 'name';
}
$sortQuery = http_build_query([
'sort' => $sort,
'dir' => $dir,
'game_mode' => $gameMode,
]);
function sort_link_params(string $column, string $sort, string $dir, string $gameMode): array
{
$nextDir = ($sort === $column && $dir === 'asc') ? 'desc' : 'asc';
$nextGameMode = $gameMode;
if ($column === 'game' && $sort === 'game' && $gameMode === 'name') {
$nextGameMode = 'enabled';
$nextDir = 'asc';
} elseif ($column === 'game' && $sort === 'game' && $gameMode === 'enabled') {
$nextGameMode = 'name';
$nextDir = 'asc';
} elseif ($column !== 'game') {
$nextGameMode = 'name';
}
return [
'sort' => $column,
'dir' => $nextDir,
'game_mode' => $nextGameMode,
];
}
/* -----------------------------------------------------------------------
SAVE: service configuration form submitted
Only admin-editable fields are updated; service_name and home_cfg_id
are never overwritten here.
----------------------------------------------------------------------- */
if (isset($_POST['save_services']) || isset($_POST['save_row'])) {
// Load valid remote server IDs for validation
$validServerIds = [];
$rsRes = $db->query("SELECT remote_server_id FROM `{$table_prefix}remote_servers`");
while ($rsRes && ($rsRow = $rsRes->fetch_assoc())) {
$validServerIds[] = (int)$rsRow['remote_server_id'];
}
$validSet = array_flip($validServerIds);
$postedServices = $_POST['svc'] ?? [];
$postedServers = $_POST['servers'] ?? [];
$rowOnlyServiceId = isset($_POST['save_row']) ? (int)$_POST['save_row'] : 0;
$updatedCount = 0;
foreach ((array)$postedServices as $sid => $svcData) {
$sid = (int)$sid;
if ($rowOnlyServiceId > 0 && $sid !== $rowOnlyServiceId) {
continue;
}
$enabled = isset($svcData['enabled']) ? 1 : 0;
$priceMonthly = number_format((float)($svcData['price_monthly'] ?? 0), 2, '.', '');
$slotMin = max(1, (int)($svcData['slot_min_qty'] ?? 1));
$slotMax = max(1, (int)($svcData['slot_max_qty'] ?? 1));
if ($slotMax < $slotMin) { $slotMax = $slotMin; }
$description = $db->real_escape_string(substr((string)($svcData['description'] ?? ''), 0, 1000));
// Merge dropdown and fallback text input:
// - dropdown value "__other__" means use the text fallback field
// - otherwise use the dropdown value (bare filename or '')
$rawImgUrl = (string)($svcData['img_url'] ?? '');
if ($rawImgUrl === '__other__') {
$rawImgUrl = (string)($svcData['img_url_other'] ?? '');
}
$imgUrl = $db->real_escape_string(substr($rawImgUrl, 0, 255));
// Build comma-separated remote_server_id from checkboxes, validating each ID
$checkedIds = [];
foreach ((array)($postedServers[$sid] ?? []) as $rawId) {
$rid = (int)$rawId;
if (isset($validSet[$rid])) {
$checkedIds[] = $rid;
}
}
$remoteServerIdStr = $db->real_escape_string(implode(',', $checkedIds));
$ok = $db->query(
"UPDATE `{$table_prefix}billing_services`
SET enabled = {$enabled},
price_monthly = '{$priceMonthly}',
slot_min_qty = {$slotMin},
slot_max_qty = {$slotMax},
description = '{$description}',
img_url = '{$imgUrl}',
remote_server_id = '{$remoteServerIdStr}'
WHERE service_id = {$sid}"
);
if ($ok) {
$updatedCount++;
}
}
if ($updatedCount > 0) {
if ($rowOnlyServiceId > 0) {
$flash[] = "Service row #{$rowOnlyServiceId} saved.";
} else {
$flash[] = "{$updatedCount} service row(s) saved.";
}
} else {
$flashType = 'err';
if ($rowOnlyServiceId > 0) {
$flash[] = "No changes were saved for service row #{$rowOnlyServiceId}.";
} else {
$flash[] = "No service rows were updated.";
}
}
$_SESSION['billing_adminserverlist_flash'] = ['type' => $flashType, 'messages' => $flash];
header("Location: /adminserverlist.php?{$sortQuery}");
exit;
}
if (!empty($_SESSION['billing_adminserverlist_flash'])) {
$flashData = $_SESSION['billing_adminserverlist_flash'];
unset($_SESSION['billing_adminserverlist_flash']);
$flashType = ($flashData['type'] ?? 'ok') === 'err' ? 'err' : 'ok';
$flash = array_values(array_filter((array)($flashData['messages'] ?? []), 'is_string'));
}
/* -----------------------------------------------------------------------
Load data for display — join config_homes to show the config XML filename
----------------------------------------------------------------------- */
$remoteServers = [];
$rsRes = $db->query(
"SELECT remote_server_id, remote_server_name
FROM `{$table_prefix}remote_servers`
ORDER BY remote_server_name"
);
while ($rsRes && ($row = $rsRes->fetch_assoc())) {
$remoteServers[] = $row;
}
$services = [];
$svcRes = $db->query(
"SELECT bs.service_id, bs.service_name, bs.enabled,
bs.price_monthly,
bs.slot_min_qty, bs.slot_max_qty,
bs.remote_server_id, bs.description, bs.img_url,
ch.home_cfg_file
FROM `{$table_prefix}billing_services` bs
LEFT JOIN `{$table_prefix}config_homes` ch ON ch.home_cfg_id = bs.home_cfg_id
ORDER BY bs.service_name"
);
while ($svcRes && ($row = $svcRes->fetch_assoc())) {
$services[] = $row;
}
if (!empty($services)) {
usort($services, function (array $a, array $b) use ($sort, $dir, $gameMode): int {
$cmp = 0;
switch ($sort) {
case 'config':
$cmp = strcasecmp((string)($a['home_cfg_file'] ?? ''), (string)($b['home_cfg_file'] ?? ''));
break;
case 'enabled':
$cmp = ((int)($a['enabled'] ?? 0)) <=> ((int)($b['enabled'] ?? 0));
break;
case 'month':
$cmp = ((float)($a['price_monthly'] ?? 0)) <=> ((float)($b['price_monthly'] ?? 0));
break;
case 'servers':
$countA = trim((string)($a['remote_server_id'] ?? '')) === '' ? 0 : count(array_filter(explode(',', (string)$a['remote_server_id']), 'strlen'));
$countB = trim((string)($b['remote_server_id'] ?? '')) === '' ? 0 : count(array_filter(explode(',', (string)$b['remote_server_id']), 'strlen'));
$cmp = $countA <=> $countB;
break;
case 'game':
default:
if ($gameMode === 'enabled') {
$cmp = ((int)($b['enabled'] ?? 0)) <=> ((int)($a['enabled'] ?? 0));
if ($cmp === 0) {
$cmp = strcasecmp((string)($a['service_name'] ?? ''), (string)($b['service_name'] ?? ''));
}
} else {
$cmp = strcasecmp((string)($a['service_name'] ?? ''), (string)($b['service_name'] ?? ''));
}
break;
}
if ($cmp === 0) {
$cmp = ((int)($a['service_id'] ?? 0)) <=> ((int)($b['service_id'] ?? 0));
}
return $dir === 'desc' ? -$cmp : $cmp;
});
}
?>
<?php foreach (array_merge((array)$syncMessages, (array)$flash) as $msg): ?>
<div class="flash-<?php echo $flashType; ?>"><?php echo h($msg); ?></div>
<?php endforeach; ?>
<h2>Service Configuration</h2>
<p class="muted">
Enable services, configure pricing and slot ranges, and select which remote servers
each game can be installed on. The service list is automatically kept in sync with
the panel game configuration (<code>config_homes</code>). Check one or more servers
to make a game available for purchase; leaving all servers unchecked prevents the
game from appearing in the store.
</p>
<?php if (empty($services)): ?>
<p>No billing services found. Ensure game configs are loaded in the panel (Home &rarr; Games configuration).</p>
<?php else: ?>
<form method="post" action="">
<input type="hidden" name="save_services" value="1">
<input type="hidden" name="sort" value="<?php echo h($sort); ?>">
<input type="hidden" name="dir" value="<?php echo h($dir); ?>">
<input type="hidden" name="game_mode" value="<?php echo h($gameMode); ?>">
<div style="overflow-x:auto;">
<table class="svc-table">
<thead>
<tr>
<th class="game-name">
<?php $p = sort_link_params('game', $sort, $dir, $gameMode); ?>
<a class="sort-link <?php echo $sort === 'game' ? 'sort-active' : ''; ?>" href="<?php echo h(billing_url('adminserverlist.php') . '?' . http_build_query($p)); ?>">Game Name</a>
</th>
<th>
<?php $p = sort_link_params('config', $sort, $dir, $gameMode); ?>
<a class="sort-link <?php echo $sort === 'config' ? 'sort-active' : ''; ?>" href="<?php echo h(billing_url('adminserverlist.php') . '?' . http_build_query($p)); ?>">Config XML</a>
</th>
<th>
<?php $p = sort_link_params('enabled', $sort, $dir, $gameMode); ?>
<a class="sort-link <?php echo $sort === 'enabled' ? 'sort-active' : ''; ?>" href="<?php echo h(billing_url('adminserverlist.php') . '?' . http_build_query($p)); ?>">Enabled</a>
</th>
<th>Min Slots</th>
<th>Max Slots</th>
<th>
<?php $p = sort_link_params('month', $sort, $dir, $gameMode); ?>
<a class="sort-link <?php echo $sort === 'month' ? 'sort-active' : ''; ?>" href="<?php echo h(billing_url('adminserverlist.php') . '?' . http_build_query($p)); ?>">Price / Month ($)</a>
</th>
<th>Description</th>
<th>Image</th>
<th>
<?php $p = sort_link_params('servers', $sort, $dir, $gameMode); ?>
<a class="sort-link <?php echo $sort === 'servers' ? 'sort-active' : ''; ?>" href="<?php echo h(billing_url('adminserverlist.php') . '?' . http_build_query($p)); ?>">Available Servers</a>
</th>
<th>Action</th>
</tr>
</thead>
<tbody>
<?php
$gameImageFiles = list_game_images();
foreach ((array)$services as $svc):
$sid = (int)$svc['service_id'];
$svcEnabled = (int)$svc['enabled'];
$cfgFile = (string)($svc['home_cfg_file'] ?? '');
// Parse existing remote_server_id CSV into a set for fast checkbox lookup
$savedIds = [];
foreach (explode(',', (string)$svc['remote_server_id']) as $part) {
$part = trim($part);
if ($part !== '' && ctype_digit($part)) {
$savedIds[(int)$part] = true;
}
}
?>
<tr>
<td class="game-name">
<?php echo h($svc['service_name']); ?>
<div class="muted">ID: <?php echo $sid; ?></div>
</td>
<td class="muted">
<?php echo $cfgFile !== '' ? h($cfgFile) : '<em>—</em>'; ?>
</td>
<td style="text-align:center;">
<input type="hidden" name="svc[<?php echo $sid; ?>][enabled]" value="0">
<input type="checkbox" name="svc[<?php echo $sid; ?>][enabled]" value="1"
<?php echo $svcEnabled ? 'checked' : ''; ?>>
</td>
<td>
<input type="number" min="1" class="slot-input"
name="svc[<?php echo $sid; ?>][slot_min_qty]"
value="<?php echo (int)$svc['slot_min_qty']; ?>">
</td>
<td>
<input type="number" min="1" class="slot-input"
name="svc[<?php echo $sid; ?>][slot_max_qty]"
value="<?php echo (int)$svc['slot_max_qty']; ?>">
</td>
<td>
<input type="number" step="0.01" min="0" class="price-input"
name="svc[<?php echo $sid; ?>][price_monthly]"
value="<?php echo h(number_format((float)$svc['price_monthly'], 2, '.', '')); ?>">
</td>
<td>
<input type="text" class="desc-input"
name="svc[<?php echo $sid; ?>][description]"
value="<?php echo h($svc['description']); ?>">
</td>
<td>
<?php
// Determine whether saved value is a bare filename (in /images/games/),
// a full external URL, or empty.
$savedImg = (string)($svc['img_url'] ?? '');
$isExternal = (str_starts_with($savedImg, 'http://') || str_starts_with($savedImg, 'https://'));
$inDropdown = !$isExternal && in_array(basename($savedImg), $gameImageFiles, true);
// Value to pre-select in the dropdown: use bare filename, or '' if external/missing
$dropdownVal = (!$isExternal && $savedImg !== '') ? basename($savedImg) : '';
?>
<select name="svc[<?php echo $sid; ?>][img_url]"
class="img-select"
data-fallback-id="imgfb_<?php echo $sid; ?>">
<option value="">— none —</option>
<?php foreach ($gameImageFiles as $imgFile): ?>
<option value="<?php echo h($imgFile); ?>"
<?php echo ($dropdownVal === $imgFile) ? 'selected' : ''; ?>>
<?php echo h($imgFile); ?>
</option>
<?php endforeach; ?>
<option value="__other__" <?php echo ($isExternal || (!$inDropdown && $savedImg !== '')) ? 'selected' : ''; ?>>
— other / full URL —
</option>
</select>
<?php
// Show fallback text input when the saved value is external or not in dropdown
$fbClass = ($isExternal || (!$inDropdown && $savedImg !== '')) ? 'img-fallback img-fallback-visible' : 'img-fallback';
$fbValue = ($isExternal || (!$inDropdown && $savedImg !== '')) ? $savedImg : '';
?>
<input type="text"
id="imgfb_<?php echo $sid; ?>"
class="<?php echo $fbClass; ?>"
name="svc[<?php echo $sid; ?>][img_url_other]"
placeholder="Full URL or filename"
value="<?php echo h($fbValue); ?>">
</td>
<td class="servers-cell">
<?php if (empty($remoteServers)): ?>
<span class="muted">No remote servers configured</span>
<?php else: ?>
<?php foreach ((array)$remoteServers as $rs):
$rid = (int)$rs['remote_server_id'];
$checked = isset($savedIds[$rid]) ? 'checked' : '';
?>
<label class="server-cb-label">
<input type="checkbox"
name="servers[<?php echo $sid; ?>][]"
value="<?php echo $rid; ?>"
<?php echo $checked; ?>>
<?php echo h($rs['remote_server_name']); ?>
<span class="muted">(#<?php echo $rid; ?>)</span>
</label>
<?php endforeach; ?>
<?php endif; ?>
</td>
<td class="action-cell">
<button type="submit" class="btn-row-save" name="save_row" value="<?php echo $sid; ?>">Save Row</button>
</td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</div>
<div style="margin-top:14px;">
<button type="submit" class="btn-save-all">Save All Services</button>
</div>
</form>
<?php endif; ?>
<div style="margin-top:20px;" class="panel">
<p><strong>Notes:</strong></p>
<ul>
<li>A service will only appear in the store when <strong>Enabled</strong> is checked
<em>and</em> at least one server is selected.</li>
<li><strong>Price / Month ($)</strong> is the canonical billing price used by cart, checkout, and provisioning.</li>
<li>The <strong>Game Name</strong> and <strong>Config XML</strong> columns are sourced
from <code><?php echo h("{$table_prefix}config_homes"); ?></code> and are read-only
here. To change them, update the game XML config in the panel.</li>
<li>Available servers are stored as a comma-separated list of server IDs in
<code><?php echo h("{$table_prefix}billing_services.remote_server_id"); ?></code>.</li>
<li>The service list is automatically synced with the panel game configuration on
every page load. New games are added with <em>Enabled = off</em> so they do not
appear in the store until you configure and enable them.</li>
<li>Games removed from the panel configuration are disabled automatically; they are
never deleted while orders may reference them.</li>
</ul>
</div>
<?php billing_maybe_close_db($db); ?>
<script>
// Toggle fallback text input when image dropdown changes
document.querySelectorAll('select[data-fallback-id]').forEach((sel) => {
sel.addEventListener('change', function () {
const fb = document.getElementById(this.dataset.fallbackId);
if (!fb) return;
const show = (this.value === '__other__');
fb.classList.toggle('img-fallback-visible', show);
if (!show) fb.value = '';
});
});
</script>
</body>
</html>

326
Panel/modules/billing/ai.php Normal file
View file

@ -0,0 +1,326 @@
<?php
/***********************
* Assistant Chat (Full History) — PHP + cURL
* - Persistent thread in session
* - Full history render with Question / Answer labels
* - SSL verification disabled (your hosting constraint)
* - Citations: filename + page (when available)
***********************/
// Debug (disable on production)
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);
/* ------------------- CONFIG ------------------- */
$OPENAI_API_KEY = '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';
$ASSISTANT_ID = 'asst_RAhtGzcy6higJeMwomZSqVjM'; // <-- set to your existing assistant
$OPENAI_BASE_URL = 'https://api.openai.com/v1';
$OPENAI_BETA_HDR = 'assistants=v2'; // required for Assistants v2
$REQUEST_TIMEOUT = 30; // seconds for cURL calls
$RUN_POLL_DELAY = 500000; // microseconds between run polls (0.5s)
$RUN_POLL_MAX = 40; // max polls (~20s total); adjust as needed
/* ---------------------------------------------- */
if (session_status() === PHP_SESSION_NONE) {
session_start();
}
if (!isset($_SESSION['thread_id'])) {
$_SESSION['thread_id'] = null;
}
/** HTML escape helper */
function h($v) { return htmlspecialchars((string)$v, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8'); }
/** Low-level OpenAI request helper */
function openai_request($method, $endpoint, $payload = null, $query = []) {
global $OPENAI_API_KEY;
$url = "https://api.openai.com/v1" . $endpoint;
if (!empty($query)) $url .= '?' . http_build_query($query);
$headers = [
"Content-Type: application/json",
"Authorization: Bearer {$OPENAI_API_KEY}",
"OpenAI-Beta: assistants=v2"
];
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, strtoupper($method));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
// Host requires SSL verification disabled
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
if (!is_null($payload)) curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload));
$resp = curl_exec($ch);
if ($resp === false) {
$err = curl_error($ch);
curl_close($ch);
throw new RuntimeException("cURL error: {$err}");
}
$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
$data = json_decode($resp, true);
if ($code >= 400) {
$msg = isset($data['error']['message']) ? $data['error']['message'] : 'Unknown API error';
throw new RuntimeException("OpenAI API error ({$code}): {$msg}");
}
return is_array($data) ? $data : [];
}
/** Create or reuse a per-visitor thread */
function ensure_thread_id() {
if (!empty($_SESSION['thread_id'])) return $_SESSION['thread_id'];
$created = openai_request('POST', '/threads', ['metadata' => ['site' => $_SERVER['HTTP_HOST'] ?? 'unknown']]);
$tid = $created['id'] ?? null;
if (!$tid) throw new RuntimeException('Failed to create thread.');
$_SESSION['thread_id'] = $tid;
return $tid;
}
/** Add a user message */
function add_user_message($thread_id, $text) {
openai_request('POST', "/threads/{$thread_id}/messages", [
'role' => 'user',
'content' => $text,
]);
}
/** Start a run */
function start_run($thread_id, $assistant_id) {
$run = openai_request('POST', "/threads/{$thread_id}/runs", [
'assistant_id' => $assistant_id,
]);
$run_id = $run['id'] ?? null;
if (!$run_id) throw new RuntimeException('Failed to start run.');
return $run_id;
}
/** Wait for completion (or fail/timeout) */
function wait_for_run($thread_id, $run_id, $max_tries, $delay_us) {
$terminal = ['completed', 'failed', 'requires_action', 'cancelled', 'expired'];
for ($i = 0; $i < $max_tries; $i++) {
usleep($delay_us);
$run = openai_request('GET', "/threads/{$thread_id}/runs/{$run_id}");
$status = $run['status'] ?? '';
if (in_array($status, $terminal, true)) return $run;
}
return ['status' => 'timeout'];
}
/** Cache of file_id => filename (per request) */
$_FILE_NAME_CACHE = [];
/** Resolve file name from file_id (API returns "filename" or sometimes "display_name") */
function get_file_name_by_id($file_id) {
global $_FILE_NAME_CACHE;
if (isset($_FILE_NAME_CACHE[$file_id])) return $_FILE_NAME_CACHE[$file_id];
$file = openai_request('GET', "/files/{$file_id}");
$name = $file['filename'] ?? ($file['display_name'] ?? ($file['name'] ?? $file_id));
$_FILE_NAME_CACHE[$file_id] = $name;
return $name;
}
/**
* Extract message text + citations (filename + page if available).
* Returns an array of entries: ['role' => 'user|assistant', 'text' => '...', 'refs' => [['filename'=>'','page'=>'','file_id'=>'']]]
*/
function normalize_messages($messages) {
$out = [];
if (empty($messages['data']) || !is_array($messages['data'])) return $out;
// The API returns newest first by default if not specifying; we request 'asc' in fetch.
foreach ((array)$messages['data'] as $m) {
$role = $m['role'] ?? '';
if (!in_array($role, ['user', 'assistant', 'system'], true)) continue;
if (empty($m['content']) || !is_array($m['content'])) continue;
$all_text = [];
$refs = [];
foreach ((array)$m['content'] as $part) {
if (($part['type'] ?? '') === 'text' && !empty($part['text']['value'])) {
$all_text[] = $part['text']['value'];
// Parse annotations for citations (file_citation)
$anns = $part['text']['annotations'] ?? [];
if (is_array($anns)) {
foreach ((array)$anns as $ann) {
if (($ann['type'] ?? '') === 'file_citation' && !empty($ann['file_citation']['file_id'])) {
$fid = $ann['file_citation']['file_id'];
$page = null;
// Page can appear under different shapes depending on backend. Try common keys:
if (isset($ann['file_citation']['page'])) {
$page = $ann['file_citation']['page'];
} elseif (isset($ann['file_citation']['page_range']) && is_array($ann['file_citation']['page_range'])) {
// Example: ['start' => 5, 'end' => 6]
$start = $ann['file_citation']['page_range']['start'] ?? null;
$end = $ann['file_citation']['page_range']['end'] ?? null;
if ($start && $end && $start !== $end) $page = "{$start}-{$end}";
elseif ($start) $page = (string)$start;
}
// Fetch filename
try {
$filename = get_file_name_by_id($fid);
} catch (Throwable $e) {
$filename = $fid;
}
$refs[] = [
'file_id' => $fid,
'filename' => $filename,
'page' => $page ?? 'n/a',
];
}
}
}
}
}
if (!empty($all_text)) {
$out[] = [
'role' => $role,
'text' => implode("\n", $all_text),
'refs' => $refs,
];
}
}
return $out;
}
/** Fetch conversation (ascending) */
function fetch_history($thread_id) {
$messages = openai_request('GET', "/threads/{$thread_id}/messages", null, ['order' => 'asc', 'limit' => 50]);
return normalize_messages($messages);
}
/* ------------------- HANDLE POST ------------------- */
$error = null;
$history = [];
try {
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if (!empty($_POST['reset_thread'])) {
$_SESSION['thread_id'] = null;
} elseif (isset($_POST['user_input'])) {
$user_text = trim((string)$_POST['user_input']);
if ($user_text !== '') {
$thread_id = ensure_thread_id();
add_user_message($thread_id, $user_text);
$run_id = start_run($thread_id, $ASSISTANT_ID);
$run = wait_for_run($thread_id, $run_id, $POLL_MAX_TRIES, $POLL_DELAY_US);
if (($run['status'] ?? '') === 'failed') {
$error = 'Assistant run failed.';
} elseif (($run['status'] ?? '') === 'requires_action') {
// If you later support tool calls, handle them here then submit outputs.
} elseif (($run['status'] ?? '') === 'timeout') {
$error = 'Assistant timed out. Please try again.';
}
}
}
}
if (!empty($_SESSION['thread_id'])) {
$history = fetch_history($_SESSION['thread_id']);
}
} catch (Throwable $e) {
$error = $e->getMessage();
}
?>
<?php
// Include top and menu for website UI (session already started above)
include(__DIR__ . '/includes/top.php');
include(__DIR__ . '/includes/menu.php');
?>
<!-- UI -->
<div class="ai-container">
<h3>Site Assistant</h3>
<p>Type a question below. Press <b>Enter</b> to send, <b>Shift+Enter</b> for a new line.</p>
<?php if ($error): ?>
<div class="ai-alert" style="border:1px solid #c00;">
<strong>Error:</strong> <?php echo h($error); ?>
</div>
<?php endif; ?>
<?php if (!empty($_SESSION['thread_id'])): ?>
<div class="ai-msg-meta">Thread: <?php echo h($_SESSION['thread_id']); ?></div>
<?php endif; ?>
<form id="chat-form" method="post" style="margin:12px 0;">
<textarea id="chat-input" name="user_input" rows="3" class="ai-textarea" placeholder="Ask your question..."></textarea>
<div style="margin-top:8px; display:flex; gap:8px;">
<button type="submit">Send</button>
<button type="submit" name="reset_thread" value="1">Reset Conversation</button>
</div>
</form>
<?php if (!empty($history) && is_array($history)): ?>
<div style="margin-top:16px; padding:10px; border:1px solid #ccc; border-radius:8px;">
<?php foreach ((array)$history as $msg):
// Label mapping: user => Question, assistant => Answer, system => (optional)
$role = $msg['role'] ?? 'assistant';
if ($role === 'user') $label = 'Question';
elseif ($role === 'assistant') $label = 'Answer';
else $label = ucfirst($role); // e.g., System
$text = str_replace("\r\n", "\n", $msg['text'] ?? '');
$refs = $msg['refs'] ?? [];
?>
<div style="margin-bottom:14px;">
<div style="font-weight:bold;"><?php echo h($label); ?></div>
<div style="white-space:pre-wrap;"><?php echo nl2br(h($text)); ?></div>
<?php if (!empty($refs)): ?>
<div style="margin-top:6px; font-size:12px;">
<em>References:</em>
<ul style="margin:6px 0 0 18px; padding:0;">
<?php foreach ((array)$refs as $r):
$fname = $r['filename'] ?? 'file';
$page = $r['page'] ?? 'n/a';
// If you have your own document links, replace '#' with a real URL.
?>
<li>
<a href="#" title="file_id: <?php echo h($r['file_id']); ?>">
<?php echo h($fname); ?> — page <?php echo h($page); ?>
</a>
</li>
<?php endforeach; ?>
</ul>
</div>
<?php endif; ?>
</div>
<?php endforeach; ?>
</div>
<?php else: ?>
<div style="margin-top:10px; color:#666;">No messages yet.</div>
<?php endif; ?>
<div style="margin-top:10px; font-size:12px; color:#555;">
Conversation persists until you click “Reset Conversation”.
</div>
</div>
<!-- Submit on Enter (Shift+Enter = newline) -->
<script>
(function(){
var form = document.getElementById('chat-form');
var input = document.getElementById('chat-input');
input.addEventListener('keydown', function(e){
if (e.key === 'Enter') {
if (!e.shiftKey) {
e.preventDefault();
form.submit();
}
// if Shift+Enter, allow newline
}
});
})();
</script>

433
Panel/modules/billing/api/capture_order.php Normal file
View file

@ -0,0 +1,433 @@
<?php
/**
* PayPal Order Capture Endpoint
* Uses PayPalGateway, BillingService, and BillingRepository.
* Credentials come from config — NOT hardcoded here.
*/
ini_set('display_errors', '0');
error_reporting(E_ALL);
ob_start();
require_once __DIR__ . '/../includes/config_loader.php';
require_once __DIR__ . '/../classes/PaymentGatewayInterface.php';
require_once __DIR__ . '/../classes/PayPalGateway.php';
require_once __DIR__ . '/../classes/GatewayFactory.php';
require_once __DIR__ . '/../classes/BillingRepository.php';
require_once __DIR__ . '/../classes/BillingService.php';
// Logging setup
$logDir = __DIR__ . '/../logs';
@mkdir($logDir, 0755, true);
$logFile = $logDir . '/payment_capture.log';
$requestId = uniqid('req_', true);
function cap_log(string $label, $data): void {
global $logFile, $requestId;
$entry = '[' . date('Y-m-d H:i:s') . "] [$requestId] $label\n";
$entry .= is_array($data) || is_object($data) ? print_r($data, true) : (string)$data;
$entry .= "\n" . str_repeat('-', 80) . "\n";
@file_put_contents($logFile, $entry, FILE_APPEND | LOCK_EX);
}
header('Content-Type: application/json');
// Session (single call)
if (session_status() === PHP_SESSION_NONE) {
session_name('opengamepanel_web');
session_start();
}
$userId = intval($_SESSION['website_user_id'] ?? $_SESSION['user_id'] ?? 0);
if ($userId <= 0) {
cap_log('NO_USER_SESSION', ['session_keys' => array_keys($_SESSION)]);
ob_clean();
echo json_encode([
'success' => false,
'error_code' => 'no_user_session',
'message' => 'You must be logged in to complete payment.',
'timestamp' => date('c'),
'request_id' => $requestId,
]);
exit;
}
// Parse input
$rawInput = file_get_contents('php://input');
$input = json_decode($rawInput, true);
if (json_last_error() !== JSON_ERROR_NONE) {
ob_clean();
echo json_encode([
'success' => false,
'error_code' => 'invalid_json',
'message' => 'Invalid JSON in request body.',
'timestamp' => date('c'),
'request_id' => $requestId,
]);
exit;
}
$paypalOrderId = $input['order_id'] ?? null;
if (!$paypalOrderId) {
ob_clean();
echo json_encode([
'success' => false,
'error_code' => 'missing_order_id',
'message' => 'Missing PayPal order ID.',
'timestamp' => date('c'),
'request_id' => $requestId,
]);
exit;
}
cap_log('REQUEST', ['order_id' => $paypalOrderId, 'user_id' => $userId]);
// DB connection
$port = intval($db_port ?? 3306) ?: 3306;
$mysqli = @mysqli_connect($db_host, $db_user, $db_pass, $db_name, $port);
if (!$mysqli) {
cap_log('DB_FAILED', mysqli_connect_error());
ob_clean();
echo json_encode([
'success' => false,
'error_code' => 'db_connection_failed',
'message' => 'Database connection failed.',
'timestamp' => date('c'),
'request_id' => $requestId,
]);
exit;
}
mysqli_set_charset($mysqli, 'utf8mb4');
$prefix = $table_prefix ?? 'gsp_';
$repo = new BillingRepository($mysqli, $prefix);
function cap_invoice_ids_from_custom_id(?string $customId): array {
if (!is_string($customId) || $customId === '') {
return [];
}
if (ctype_digit($customId)) {
return [intval($customId)];
}
if (stripos($customId, 'cart:') !== 0) {
return [];
}
$parts = explode(',', substr($customId, 5));
$invoiceIds = [];
foreach ($parts as $part) {
$part = trim($part);
if ($part !== '' && ctype_digit($part)) {
$invoiceIds[] = intval($part);
}
}
return array_values(array_unique($invoiceIds));
}
function cap_get_duration_metadata(array $invoice): array {
return ['invoice_duration' => 'month', 'rate_type' => 'monthly', 'days' => 31];
}
function cap_get_end_date(array $invoice, ?string $fromDate = null): string {
$meta = cap_get_duration_metadata($invoice);
$qty = max(1, intval($invoice['qty'] ?? 1));
$baseTs = time();
if (!empty($fromDate)) {
$fromTs = strtotime($fromDate);
if ($fromTs !== false && $fromTs > time()) {
$baseTs = $fromTs;
}
}
return date('Y-m-d H:i:s', $baseTs + ($meta['days'] * $qty * 86400));
}
function cap_discount_map(array $invoices, float $paidAmount): array {
$baseTotals = [];
$baseAmount = 0.0;
foreach ($invoices as $invoice) {
$invoiceId = intval($invoice['invoice_id'] ?? 0);
$lineBase = round((float)($invoice['subtotal'] ?? $invoice['total_due'] ?? $invoice['amount'] ?? 0), 2);
$baseTotals[$invoiceId] = $lineBase;
$baseAmount += $lineBase;
}
$discountTotal = round(max(0, $baseAmount - $paidAmount), 2);
if ($discountTotal <= 0 || $baseAmount <= 0) {
return array_fill_keys(array_keys($baseTotals), 0.0);
}
$discounts = [];
$remaining = $discountTotal;
$lastInvoiceId = array_key_last($baseTotals);
foreach ($baseTotals as $invoiceId => $lineBase) {
if ($invoiceId === $lastInvoiceId) {
$lineDiscount = $remaining;
} else {
$lineDiscount = round($discountTotal * ($lineBase / $baseAmount), 2);
$remaining = round($remaining - $lineDiscount, 2);
}
$discounts[$invoiceId] = min($lineBase, max(0, $lineDiscount));
}
return $discounts;
}
// Capture payment via PayPal gateway
try {
$gateway = GatewayFactory::make('paypal');
} catch (Exception $e) {
cap_log('GATEWAY_ERROR', $e->getMessage());
$repo->logPaypalError([
'context' => 'gateway_init',
'error_code' => 'gateway_init_failed',
'message' => $e->getMessage(),
'order_id' => $paypalOrderId,
'user_id' => $userId,
]);
ob_clean();
echo json_encode([
'success' => false,
'error_code' => 'gateway_init_failed',
'message' => 'Payment gateway initialisation failed.',
'timestamp' => date('c'),
'request_id' => $requestId,
]);
mysqli_close($mysqli);
exit;
}
$capture = $gateway->handleCallback(['order_id' => $paypalOrderId]);
cap_log('CAPTURE_RESULT', ['success' => $capture['success'], 'txid' => $capture['transaction_id'] ?? null]);
if (!$capture['success']) {
cap_log('CAPTURE_FAILED', $capture);
// Sanitize raw capture data before logging — never store secrets
$captureForLog = $capture;
foreach (['client_secret', 'access_token', 'refresh_token'] as $_sk) {
unset($captureForLog[$_sk]);
}
$repo->logPaypalError([
'context' => 'capture_order',
'error_code' => $capture['error'] ?? 'capture_failed',
'message' => $capture['message'] ?? 'PayPal order capture failed.',
'paypal_debug_id' => $capture['debug_id'] ?? null,
'order_id' => $paypalOrderId,
'user_id' => $userId,
'raw_json' => $captureForLog,
]);
ob_clean();
echo json_encode([
'success' => false,
'error_code' => $capture['error'] ?? 'capture_failed',
'message' => $capture['message'] ?? 'PayPal order capture failed. Please try again.',
'debug_id' => $capture['debug_id'] ?? null,
'timestamp' => date('c'),
'request_id' => $requestId,
]);
mysqli_close($mysqli);
exit;
}
$txid = $capture['transaction_id'] ?? '';
$paidAmount = round((float)($capture['amount'] ?? 0), 2);
$capture['payment_method'] = 'paypal';
$invoiceIds = cap_invoice_ids_from_custom_id($capture['custom_id'] ?? null);
$invoices = !empty($invoiceIds)
? $repo->getInvoicesForUserByIds($userId, $invoiceIds, true)
: $repo->getUnpaidInvoicesForUser($userId);
$invoicesPaid = 0;
$ordersCreated = 0;
$newOrderIds = [];
$now = date('Y-m-d H:i:s');
$couponId = intval($_SESSION['cart_coupon_id'] ?? 0);
$discountMap = cap_discount_map($invoices, $paidAmount);
$couponCode = trim((string)($_SESSION['cart_coupon_code'] ?? ''));
if ($couponId <= 0 && $couponCode !== '') {
$coupon = $repo->getCouponByCode($couponCode);
$couponId = intval($coupon['coupon_id'] ?? 0);
}
if (empty($invoices)) {
cap_log('NO_INVOICES', ['user_id' => $userId, 'custom_id' => $capture['custom_id'] ?? null]);
ob_clean();
echo json_encode([
'success' => false,
'error_code' => 'no_matching_invoices',
'message' => 'No matching unpaid invoices were found for this payment.',
'timestamp' => date('c'),
'request_id' => $requestId,
]);
mysqli_close($mysqli);
exit;
}
foreach ($invoices as $inv) {
$invoiceId = intval($inv['invoice_id']);
$homeId = intval($inv['home_id'] ?? 0);
$invoiceBase = round((float)($inv['subtotal'] ?? $inv['total_due'] ?? $inv['amount'] ?? 0), 2);
$lineDiscount = round((float)($discountMap[$invoiceId] ?? 0), 2);
$lineTotal = round(max(0, $invoiceBase - $lineDiscount), 2);
$durationMeta = cap_get_duration_metadata($inv);
$invoiceUpdate = [
'coupon_id' => $couponId,
'discount_amount' => $lineDiscount,
'subtotal' => $invoiceBase,
'amount' => $lineTotal,
'total_due' => $lineTotal,
'status' => 'paid',
'billing_status' => 'Active',
'payment_status' => 'paid',
'payment_txid' => $txid,
'payment_method' => 'paypal',
'paid_date' => $now,
'invoice_duration' => $durationMeta['invoice_duration'],
'rate_type' => $durationMeta['rate_type'],
];
if (!$repo->updateInvoiceFields($invoiceId, $invoiceUpdate)) {
cap_log('INVOICE_PAY_FAILED', ['invoice_id' => $invoiceId, 'db_error' => $mysqli->error]);
continue;
}
$invoicesPaid++;
cap_log('INVOICE_PAID', ['invoice_id' => $invoiceId, 'txid' => $txid, 'amount' => $lineTotal]);
$rawCapture = $capture['raw_response'] ?? [];
if (is_array($rawCapture)) {
unset($rawCapture['client_secret'], $rawCapture['access_token']); // never log secrets
}
// Resolve (or create) the billing_orders row for this invoice so the provisioner can run.
// billing_orders.status='Active' is what create_servers.php queries.
$orderId = intval($inv['order_id'] ?? 0);
$currentHomeId = $homeId;
if ($orderId > 0) {
// Existing order linked to this invoice — extend it and mark Active.
$order = $repo->getOrder($orderId);
if ($order) {
$newEnd = cap_get_end_date($inv, $order['end_date'] ?? null);
$currentHomeId = intval($order['home_id'] ?? 0);
$repo->updateOrderFields($orderId, [
'status' => 'Active',
'end_date' => $newEnd,
'payment_txid' => $txid,
'paid_ts' => $now,
'price' => $lineTotal,
'discount_amount' => $lineDiscount,
'coupon_id' => $couponId,
]);
if ($currentHomeId > 0) {
$repo->updateInvoiceFields($invoiceId, ['home_id' => $currentHomeId]);
}
$ordersCreated++;
if (!in_array($orderId, $newOrderIds, true)) {
$newOrderIds[] = $orderId;
}
cap_log('ORDER_QUEUED_PROVISION', ['order_id' => $orderId, 'home_id' => $currentHomeId]);
}
} else {
// No billing_orders row yet — create one now so the provisioner can run.
$newEnd = cap_get_end_date($inv, null);
$newOrderId = $repo->createOrder([
'user_id' => intval($inv['user_id']),
'service_id' => intval($inv['service_id']),
'home_name' => $inv['home_name'] ?? '',
'ip' => (string)($inv['ip'] ?? '0'),
'qty' => intval($inv['qty'] ?? 1),
'invoice_duration' => $durationMeta['invoice_duration'],
'max_players' => intval($inv['max_players'] ?? 0),
'price' => $lineTotal,
'discount_amount' => $lineDiscount,
'remote_control_password' => $inv['remote_control_password'] ?? '',
'ftp_password' => $inv['ftp_password'] ?? '',
'status' => 'Active',
'end_date' => $newEnd,
'payment_txid' => $txid,
'paid_ts' => $now,
'coupon_id' => $couponId,
]);
if ($newOrderId > 0) {
// Link invoice → order so retried captures are idempotent.
$repo->updateInvoiceOrderId($invoiceId, $newOrderId);
$repo->updateInvoiceFields($invoiceId, ['order_id' => $newOrderId]);
if (!in_array($newOrderId, $newOrderIds, true)) {
$newOrderIds[] = $newOrderId;
}
$ordersCreated++;
cap_log('ORDER_CREATED', ['invoice_id' => $invoiceId, 'order_id' => $newOrderId]);
} else {
cap_log('ORDER_CREATE_FAILED', ['invoice_id' => $invoiceId, 'db_error' => $mysqli->error]);
continue;
}
}
$repo->logTransaction([
'invoice_id' => $invoiceId,
'user_id' => $userId,
'home_id' => $currentHomeId,
'payment_method' => 'paypal',
'transaction_external_id' => $txid,
'amount' => $lineTotal,
'currency' => (string)($inv['currency'] ?? 'USD'),
'status' => 'completed',
'raw_response' => $rawCapture,
]);
}
if ($couponId > 0 && $invoicesPaid > 0) {
$mysqli->query("UPDATE `{$prefix}billing_coupons`
SET current_uses = current_uses + 1
WHERE coupon_id = " . intval($couponId));
}
// Auto-provision new servers (orders without a home_id)
$autoProvision = ['provisioned_count' => 0, 'failed_count' => 0];
if (!empty($newOrderIds)) {
require_once __DIR__ . '/../includes/panel_bridge.php';
$panelCtx = billing_panel_bootstrap();
if ($panelCtx && isset($panelCtx['db'])) {
$GLOBALS['db'] = $panelCtx['db'];
$GLOBALS['settings'] = $panelCtx['settings'];
require_once __DIR__ . '/../create_servers.php';
$autoProvision = billing_invoke_provision(['order_ids' => $newOrderIds, 'user_id' => $userId, 'is_admin' => true]);
if (($autoProvision['failed_count'] ?? 0) > 0) {
cap_log('AUTO_PROVISION_PARTIAL_FAILURE', $autoProvision);
}
} else {
cap_log('AUTO_PROVISION_SKIPPED', 'panel bootstrap failed — orders require manual provisioning: ' . implode(',', $newOrderIds));
$autoProvision = [
'provisioned_count' => 0,
'failed_count' => count($newOrderIds),
'details' => [],
'trace_log_path' => 'modules/billing/logs/provisioning_trace.log',
'trace_error' => 'Panel bootstrap failed before billing provisioning could start.',
];
}
}
if (function_exists('billing_store_provision_session_result')) {
billing_store_provision_session_result($txid, [
'source' => 'api/capture_order.php',
'txid' => $txid,
'order_ids' => $newOrderIds,
'result' => $autoProvision,
]);
}
unset($_SESSION['cart_coupon_code'], $_SESSION['cart_coupon_id']);
mysqli_close($mysqli);
cap_log('COMPLETE', ['invoices_paid' => $invoicesPaid, 'txid' => $txid, 'orders' => $newOrderIds]);
ob_clean();
echo json_encode([
'success' => true,
'status' => 'COMPLETED',
'txid' => $txid,
'invoices_paid' => $invoicesPaid,
'orders_created' => $ordersCreated,
'provisioned' => $autoProvision['provisioned_count'] ?? 0,
'request_id' => $requestId,
]);

104
Panel/modules/billing/api/create_order.php Normal file
View file

@ -0,0 +1,104 @@
<?php
/**
* PayPal Create Order API Endpoint
* Uses PayPalGateway class. Credentials come from config — NOT hardcoded here.
*/
ini_set('display_errors', '0');
error_reporting(E_ALL);
require_once __DIR__ . '/../includes/config_loader.php';
require_once __DIR__ . '/../billing_bootstrap.php';
require_once __DIR__ . '/../classes/PaymentGatewayInterface.php';
require_once __DIR__ . '/../classes/PayPalGateway.php';
require_once __DIR__ . '/../classes/GatewayFactory.php';
// Logging
$logDir = __DIR__ . '/../logs';
@mkdir($logDir, 0755, true);
$logFile = $logDir . '/paypal_create_order.log';
$requestId = uniqid('req_', true);
function co_log(string $label, $data): void {
global $logFile, $requestId;
$entry = '[' . date('Y-m-d H:i:s') . "] [$requestId] $label\n";
$entry .= is_array($data) || is_object($data) ? print_r($data, true) : (string)$data;
$entry .= "\n" . str_repeat('-', 80) . "\n";
@file_put_contents($logFile, $entry, FILE_APPEND | LOCK_EX);
}
header('Content-Type: application/json');
$rawInput = file_get_contents('php://input');
$in = json_decode($rawInput, true);
if (json_last_error() !== JSON_ERROR_NONE || !$in) {
http_response_code(400);
echo json_encode([
'success' => false,
'error_code' => 'invalid_json',
'message' => 'Invalid JSON in request body.',
'timestamp' => date('c'),
'request_id' => $requestId,
]);
exit;
}
co_log('REQUEST', ['amount' => $in['amount'] ?? null, 'invoice_id' => $in['invoice_id'] ?? null]);
// Resolve portable return/cancel URLs
$returnUrl = $in['return_url'] ?? '/payment_success.php';
$cancelUrl = $in['cancel_url'] ?? '/payment_cancel.php';
// Ensure absolute URLs
if (strpos($returnUrl, 'http') !== 0) {
$returnUrl = billing_abs_url($returnUrl);
}
if (strpos($cancelUrl, 'http') !== 0) {
$cancelUrl = billing_abs_url($cancelUrl);
}
// Build gateway params
$params = [
'amount' => $in['amount'] ?? '0.00',
'currency' => $in['currency'] ?? 'USD',
'invoice_id' => $in['invoice_id'] ?? null,
'custom_id' => $in['custom_id'] ?? $in['invoice_id'] ?? null,
'description' => $in['description'] ?? 'Game Server Order',
'return_url' => $returnUrl,
'cancel_url' => $cancelUrl,
'items' => $in['items'] ?? null,
];
try {
$gateway = GatewayFactory::make('paypal');
$result = $gateway->createPayment($params);
} catch (Exception $e) {
co_log('EXCEPTION', $e->getMessage());
http_response_code(500);
echo json_encode([
'success' => false,
'error_code' => 'gateway_error',
'message' => $e->getMessage(),
'debug_id' => null,
'timestamp' => date('c'),
'request_id' => $requestId,
]);
exit;
}
if (!$result['success']) {
co_log('CREATE_FAILED', $result);
http_response_code(500);
echo json_encode([
'success' => false,
'error_code' => $result['error'] ?? 'create_failed',
'message' => $result['message'] ?? 'Failed to create PayPal order.',
'debug_id' => $result['debug_id'] ?? null,
'timestamp' => date('c'),
'request_id' => $requestId,
]);
exit;
}
co_log('CREATE_SUCCESS', ['provider_order_id' => $result['provider_order_id']]);
echo json_encode($result['raw_response']);

44
Panel/modules/billing/api/log_error.php Normal file
View file

@ -0,0 +1,44 @@
<?php
/**
* Client-side error logging endpoint
* Logs JavaScript errors from the cart page for debugging
*/
// Ensure all errors are logged, not displayed
ini_set('display_errors', '0');
error_reporting(E_ALL);
header('Content-Type: application/json');
// Setup logging
$logDir = __DIR__ . '/../logs';
@mkdir($logDir, 0755, true);
$logFile = $logDir . '/client_errors.log';
function log_client_error($data) {
global $logFile;
$timestamp = date('Y-m-d H:i:s');
$entry = "[$timestamp] CLIENT ERROR\n";
$entry .= "IP: " . ($_SERVER['REMOTE_ADDR'] ?? 'UNKNOWN') . "\n";
$entry .= "User Agent: " . ($_SERVER['HTTP_USER_AGENT'] ?? 'UNKNOWN') . "\n";
if (is_array($data) || is_object($data)) {
$entry .= print_r($data, true);
} else {
$entry .= (string)$data;
}
$entry .= "\n" . str_repeat('-', 80) . "\n";
@file_put_contents($logFile, $entry, FILE_APPEND | LOCK_EX);
}
// Read and parse input
$rawInput = file_get_contents('php://input');
$data = json_decode($rawInput, true);
if ($data) {
log_client_error($data);
echo json_encode(['status' => 'logged']);
} else {
log_client_error(['raw_input' => $rawInput, 'error' => 'Invalid JSON']);
echo json_encode(['status' => 'error', 'message' => 'Invalid JSON']);
}
?>

175
Panel/modules/billing/billing_bootstrap.php Normal file
View file

@ -0,0 +1,175 @@
<?php
/**
* Billing runtime bootstrap helpers.
* Supports embedded panel mode and standalone copied deployments.
*/
if (defined('BILLING_RUNTIME_BOOTSTRAPPED')) {
return;
}
define('BILLING_RUNTIME_BOOTSTRAPPED', true);
define('BILLING_ROOT_DIR', __DIR__);
if (!function_exists('billing_runtime_load_site_config')) {
function billing_runtime_load_site_config(): array
{
$defaults = [];
$defaultFile = BILLING_ROOT_DIR . '/site_config.php';
$localFile = BILLING_ROOT_DIR . '/site_config.local.php';
if (is_readable($defaultFile)) {
$data = require $defaultFile;
if (is_array($data)) {
$defaults = $data;
}
}
if (is_readable($localFile)) {
$local = require $localFile;
if (is_array($local)) {
$defaults = array_merge($defaults, $local);
}
}
return $defaults;
}
}
$billing_runtime_site_config = billing_runtime_load_site_config();
if (!function_exists('billing_runtime_panel_root')) {
function billing_runtime_panel_root(): ?string
{
static $panelRoot = null;
if ($panelRoot !== null) {
return $panelRoot ?: null;
}
global $billing_runtime_site_config;
$candidate = getenv('GSP_PANEL_PATH') ?: getenv('BILLING_PANEL_PATH');
if (!$candidate && !empty($billing_runtime_site_config['panel_path'])) {
$candidate = (string)$billing_runtime_site_config['panel_path'];
}
if (!$candidate) {
$candidate = dirname(BILLING_ROOT_DIR, 2);
}
$resolved = realpath($candidate);
if ($resolved && is_dir($resolved . '/includes') && is_dir($resolved . '/modules')) {
$panelRoot = $resolved;
return $panelRoot;
}
$panelRoot = '';
return null;
}
}
if (!function_exists('billing_runtime_mode')) {
function billing_runtime_mode(): string
{
return billing_runtime_panel_root() ? 'embedded' : 'standalone';
}
}
if (!function_exists('billing_base_path')) {
function billing_base_path(): string
{
static $basePath = null;
if ($basePath !== null) {
return $basePath;
}
global $billing_runtime_site_config;
$forced = getenv('BILLING_BASE_PATH');
if (!$forced && !empty($billing_runtime_site_config['base_path'])) {
$forced = (string)$billing_runtime_site_config['base_path'];
}
if (is_string($forced) && $forced !== '') {
$forced = '/' . trim($forced, '/');
$basePath = ($forced === '/') ? '' : $forced;
return $basePath;
}
$scriptName = (string)($_SERVER['SCRIPT_NAME'] ?? '');
if ($scriptName !== '') {
$norm = str_replace('\\', '/', $scriptName);
$marker = '/modules/billing/';
$pos = strpos($norm, $marker);
if ($pos !== false) {
$basePath = '/modules/billing';
return $basePath;
}
$dir = trim(str_replace('\\', '/', dirname($norm)), '/');
$basePath = $dir === '' ? '' : '/' . $dir;
return $basePath;
}
$basePath = '';
return $basePath;
}
}
if (!function_exists('billing_url')) {
function billing_url(string $path = ''): string
{
$base = rtrim(billing_base_path(), '/');
$path = ltrim($path, '/');
if ($path === '') {
return $base === '' ? '/' : $base . '/';
}
return ($base === '' ? '' : $base) . '/' . $path;
}
}
if (!function_exists('billing_abs_url')) {
function billing_abs_url(string $path = ''): string
{
$siteBase = rtrim((string)($GLOBALS['SITE_BASE_URL'] ?? ''), '/');
$rel = billing_url($path);
if ($siteBase === '') {
return $rel;
}
return $siteBase . $rel;
}
}
if (!function_exists('billing_sync_timestamp_from_legacy')) {
function billing_sync_timestamp_from_legacy(): void
{
global $billing_runtime_site_config;
$billingTs = BILLING_ROOT_DIR . '/timestamp.txt';
$legacy = getenv('BILLING_LEGACY_TIMESTAMP_PATH');
if (!$legacy && !empty($billing_runtime_site_config['legacy_timestamp_path'])) {
$legacy = (string)$billing_runtime_site_config['legacy_timestamp_path'];
}
if (!$legacy) {
$panelRoot = billing_runtime_panel_root();
if ($panelRoot) {
$legacy = dirname($panelRoot) . '/Website/timestamp.txt';
}
}
if (!$legacy || !is_readable($legacy)) {
return;
}
$legacyText = trim((string)@file_get_contents($legacy));
if ($legacyText === '') {
return;
}
$currentText = is_readable($billingTs) ? trim((string)@file_get_contents($billingTs)) : '';
if ($legacyText === $currentText) {
return;
}
$targetDir = dirname($billingTs);
if (!is_dir($targetDir)) {
@mkdir($targetDir, 0775, true);
}
if (is_writable($targetDir) || is_writable($billingTs)) {
@file_put_contents($billingTs, $legacyText . PHP_EOL, LOCK_EX);
}
}
}
billing_sync_timestamp_from_legacy();

143
Panel/modules/billing/bootstrap.php Normal file
View file

@ -0,0 +1,143 @@
<?php
// modules/billing/bootstrap.php
// Central bootstrap for billing website pages. Loads config, provides safe DB helper
// and ensures $table_prefix is available.
// Ensure session sync with panel happens first
require_once __DIR__ . '/billing_bootstrap.php';
require_once __DIR__ . '/includes/session_bridge.php';
require_once __DIR__ . '/includes/config_loader.php';
// Ensure $table_prefix exists (fallback to empty string)
if (!isset($table_prefix)) {
$table_prefix = '';
}
// Billing DB connection cached in $billing_db
if (!isset($billing_db)) {
$billing_db = null;
}
// Track whether bootstrap opened the connection (so callers can safely close it)
$billing_db_opened_by_bootstrap = false;
/**
* Get a mysqli connection for billing pages.
* - Reuses global $db if already created by other code.
* - Tries to open a new connection using config variables if needed.
* - Returns null on failure.
*/
function billing_get_db()
{
global $billing_db, $db, $db_host, $db_user, $db_pass, $db_name, $db_port, $billing_db_opened_by_bootstrap;
if (!empty($billing_db) && ($billing_db instanceof mysqli)) {
return $billing_db;
}
if (!empty($db) && ($db instanceof mysqli)) {
$billing_db = $db;
return $billing_db;
}
$port = isset($db_port) ? (int)$db_port : null;
// Try to connect (suppress warnings; caller may check return value)
$conn = @mysqli_connect($db_host ?? null, $db_user ?? null, $db_pass ?? null, $db_name ?? null, $port);
if ($conn) {
// Set charset when available
if (function_exists('mysqli_set_charset')) {
@mysqli_set_charset($conn, 'utf8mb4');
}
$billing_db = $conn;
$billing_db_opened_by_bootstrap = true;
return $billing_db;
}
// Leave $billing_db as null
$billing_db = null;
return null;
}
/**
* Close DB connection only if it was opened by bootstrap. If the connection
* is shared (created by other code) this function will not close it.
*/
function billing_maybe_close_db($conn)
{
global $billing_db, $billing_db_opened_by_bootstrap;
if (!($conn instanceof mysqli)) return;
if (!empty($billing_db_opened_by_bootstrap) && $billing_db === $conn) {
@mysqli_close($conn);
$billing_db = null;
$billing_db_opened_by_bootstrap = false;
}
}
// Small helper wrappers commonly used across billing pages
if (!function_exists('esc_mysqli')) {
function esc_mysqli($db, $v)
{
if ($db instanceof mysqli) {
return $db->real_escape_string((string)$v);
}
return addslashes((string)$v);
}
}
if (!function_exists('fetch_all_assoc')) {
function fetch_all_assoc($db, $sql)
{
if (!($db instanceof mysqli)) return [];
$res = $db->query($sql);
return $res ? $res->fetch_all(MYSQLI_ASSOC) : [];
}
}
if (!function_exists('col_exists')) {
function col_exists($db, $table, $col)
{
if (!($db instanceof mysqli)) return false;
$t = $db->real_escape_string($table);
$c = $db->real_escape_string($col);
$res = $db->query("SHOW COLUMNS FROM `{$t}` LIKE '{$c}'");
return ($res && $res->num_rows > 0);
}
}
// expose a convenience variable for scripts that expect $db
// Do not overwrite an existing $db if present
if (!isset($db) || !($db instanceof mysqli)) {
$maybe = billing_get_db();
if ($maybe instanceof mysqli) {
$db = $maybe;
}
}
/**
* Resolve a billing_services.img_url value to a browser-safe URL.
*
* Rules:
* - Empty string → '' (caller should skip the <img> tag).
* - Full URL (http:// or https://) → returned as-is.
* - Bare filename (e.g. "dayz.jpg") → "/images/games/{filename}".
* - Anything else treated as a bare filename for safety.
*
* Output is NOT htmlspecialchars'd here; callers must escape for HTML context.
*/
if (!function_exists('billing_image_url')) {
function billing_image_url(string $imgUrl): string
{
$imgUrl = trim($imgUrl);
if ($imgUrl === '') {
return '';
}
// Keep full external URLs intact
if (str_starts_with($imgUrl, 'http://') || str_starts_with($imgUrl, 'https://')) {
return $imgUrl;
}
// Strip any leading path separators/directories so we always get a bare filename
$filename = basename($imgUrl);
if ($filename === '') {
return '';
}
return billing_url('images/games/' . $filename);
}
}
// End bootstrap

956
Panel/modules/billing/cart.php Normal file
View file

@ -0,0 +1,956 @@
<?php
/**
* Shopping Cart - Rebuilt from scratch for reliability
* Displays unpaid invoices and provides PayPal checkout
* Standalone billing module - uses only standard PHP mysqli
*/
// Start session with website session name
if (session_status() === PHP_SESSION_NONE) {
session_name("opengamepanel_web");
session_start();
}
// Load configuration
require_once(__DIR__ . '/bootstrap.php');
function billing_cart_money_to_cents(float $amount): int
{
return (int) round($amount * 100);
}
function billing_cart_cents_to_money(int $cents): float
{
return $cents / 100;
}
// Variables from config.inc.php (helps IDEs understand scope)
/** @var string $db_host Database host */
/** @var string $db_user Database user */
/** @var string $db_pass Database password */
/** @var string $db_name Database name */
/** @var string $table_prefix Table prefix for database tables */
/** @var string $SITE_BASE_URL Site base URL */
/** @var string $SITE_DATA_DIR Data directory path */
// Check if user is logged in
$user_id = 0;
if (isset($_SESSION['website_user_id']) && !empty($_SESSION['website_user_id'])) {
$user_id = intval($_SESSION['website_user_id']);
} elseif (isset($_SESSION['user_id']) && !empty($_SESSION['user_id'])) {
$user_id = intval($_SESSION['user_id']);
}
// Redirect to login if not authenticated
if ($user_id <= 0) {
$return_to = urlencode($_SERVER['REQUEST_URI'] ?? billing_url('cart.php'));
header('Location: ' . billing_url('login.php') . '?return_to=' . $return_to);
exit;
}
// Connect to database (non-fatal)
$db = @mysqli_connect($db_host, $db_user, $db_pass, $db_name);
$db_error = '';
// Initialize variables
$invoices = [];
$total_amount = 0.00;
$total_amount_cents = 0;
$discount_amount = 0.00;
$discount_amount_cents = 0;
$coupon_discount_percent = 0;
$applied_coupon = null;
$error_message = '';
$success_message = '';
if (!$db) {
// record error for UI/debugging but do not die here
$db_error = 'Database connection failed: ' . mysqli_connect_error();
$cart_empty = true;
} else {
// Fetch unpaid invoices for this user. Select only invoice fields to avoid referencing
// columns that may not exist in all deployments (some schemas differ).
$query = "SELECT i.*
FROM {$table_prefix}billing_invoices i
WHERE i.user_id = " . intval($user_id) . "
AND (i.status = 'due' OR i.status = '')
AND (i.payment_status IS NULL OR i.payment_status NOT IN ('paid','cancelled','refunded'))
ORDER BY i.invoice_date ASC";
$result = mysqli_query($db, $query);
if ($result) {
while ($row = mysqli_fetch_assoc($result)) {
$invoices[] = $row;
$lineAmount = (float)($row['total_due'] ?? $row['amount'] ?? 0);
$total_amount_cents += billing_cart_money_to_cents($lineAmount);
}
mysqli_free_result($result);
}
$cart_empty = (count((array)$invoices) === 0);
$total_amount = billing_cart_cents_to_money($total_amount_cents);
}
// Handle coupon application
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['apply_coupon'])) {
$coupon_code = trim($_POST['coupon_code'] ?? '');
if (empty($coupon_code)) {
$error_message = 'Please enter a coupon code.';
} else {
// Validate coupon
if (!$db) {
$error_message = 'Coupon system unavailable: database connection failed.';
} else {
$safe_code = mysqli_real_escape_string($db, $coupon_code);
$coupon_query = "SELECT * FROM {$table_prefix}billing_coupons
WHERE code = '$safe_code' AND is_active = 1";
$coupon_result = mysqli_query($db, $coupon_query);
if ($coupon_result && mysqli_num_rows($coupon_result) === 1) {
$coupon = mysqli_fetch_assoc($coupon_result);
// Check if expired
$expired = false;
if (!empty($coupon['expires'])) {
$expires_time = strtotime($coupon['expires']);
if ($expires_time && $expires_time < time()) {
$expired = true;
}
}
// Check usage limit
$max_uses_reached = false;
if (!empty($coupon['max_uses'])) {
if (intval($coupon['current_uses']) >= intval($coupon['max_uses'])) {
$max_uses_reached = true;
}
}
if ($expired) {
$error_message = 'This coupon has expired.';
} elseif ($max_uses_reached) {
$error_message = 'This coupon has reached its maximum usage limit.';
} else {
// Check game filter
$game_valid = true;
if ($coupon['game_filter_type'] === 'specific_games' && !empty($coupon['game_filter_list'])) {
$allowed_games = json_decode($coupon['game_filter_list'], true);
if (is_array($allowed_games) && count((array)$allowed_games) > 0) {
$has_valid_game = false;
foreach ((array)$invoices as $inv) {
$inv_game_key = isset($inv['game_key']) ? $inv['game_key'] : null;
if ($inv_game_key !== null && in_array($inv_game_key, $allowed_games)) {
$has_valid_game = true;
break;
}
}
if (!$has_valid_game) {
$game_valid = false;
}
}
}
if (!$game_valid) {
$error_message = 'This coupon is not valid for the items in your cart.';
} else {
// Apply coupon
$applied_coupon = $coupon;
$coupon_discount_percent = floatval($coupon['discount_percent']);
$_SESSION['cart_coupon_code'] = $coupon_code;
$_SESSION['cart_coupon_id'] = $coupon['coupon_id'];
$success_message = 'Coupon "' . htmlspecialchars($coupon['name']) . '" applied! You save ' . $coupon_discount_percent . '%';
}
}
mysqli_free_result($coupon_result);
} else {
$error_message = 'Invalid coupon code.';
}
}
}
}
// Handle coupon removal
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['remove_coupon'])) {
unset($_SESSION['cart_coupon_code']);
unset($_SESSION['cart_coupon_id']);
$applied_coupon = null;
$coupon_discount_percent = 0;
}
// Re-validate coupon from session if present
if ($db && empty($applied_coupon) && isset($_SESSION['cart_coupon_code'])) {
$coupon_code = $_SESSION['cart_coupon_code'];
$safe_code = mysqli_real_escape_string($db, $coupon_code);
$coupon_query = "SELECT * FROM {$table_prefix}billing_coupons
WHERE code = '$safe_code' AND is_active = 1";
$coupon_result = mysqli_query($db, $coupon_query);
if ($coupon_result && mysqli_num_rows($coupon_result) === 1) {
$applied_coupon = mysqli_fetch_assoc($coupon_result);
$coupon_discount_percent = floatval($applied_coupon['discount_percent']);
mysqli_free_result($coupon_result);
} else {
// Coupon no longer valid, clear from session
unset($_SESSION['cart_coupon_code']);
unset($_SESSION['cart_coupon_id']);
}
}
// AJAX remove invoice action (hard delete) - returns JSON when remove_invoice_ajax is set
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['remove_invoice_ajax']) && isset($_POST['invoice_id'])) {
header('Content-Type: application/json');
$remove_id = intval($_POST['invoice_id']);
if ($remove_id <= 0) {
echo json_encode(['success' => false, 'error' => 'Invalid invoice id.']);
exit;
}
if (!$db) {
echo json_encode(['success' => false, 'error' => 'Database unavailable.']);
exit;
}
// Verify ownership and that invoice is still unpaid/due
$check_q = "SELECT invoice_id FROM {$table_prefix}billing_invoices WHERE invoice_id = " . intval($remove_id) . " AND user_id = " . intval($user_id) . " AND (status = 'due' OR status = '') AND (payment_status IS NULL OR payment_status NOT IN ('paid','cancelled','refunded')) LIMIT 1";
$check_r = mysqli_query($db, $check_q);
if (!($check_r && mysqli_num_rows($check_r) === 1)) {
echo json_encode(['success' => false, 'error' => 'Invoice not found or cannot be removed.']);
exit;
}
// Hard-delete the invoice row
$del_q = "DELETE FROM {$table_prefix}billing_invoices WHERE invoice_id = " . intval($remove_id) . " AND user_id = " . intval($user_id) . " AND (status = 'due' OR status = '') AND (payment_status IS NULL OR payment_status NOT IN ('paid','cancelled','refunded')) LIMIT 1";
$ok = mysqli_query($db, $del_q);
if ($ok && mysqli_affected_rows($db) > 0) {
echo json_encode(['success' => true]);
} else {
echo json_encode(['success' => false, 'error' => 'Failed to delete invoice.']);
}
exit;
}
// Handle non-AJAX remove invoice action (hard delete + redirect)
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['remove_invoice']) && isset($_POST['invoice_id'])) {
$remove_id = intval($_POST['invoice_id']);
if ($remove_id <= 0) {
$error_message = 'Invalid invoice id.';
} else {
if (!$db) {
$error_message = 'Unable to remove item: database unavailable.';
} else {
// Verify ownership and that invoice is still unpaid/due
$check_q = "SELECT invoice_id FROM {$table_prefix}billing_invoices WHERE invoice_id = " . intval($remove_id) . " AND user_id = " . intval($user_id) . " AND (status = 'due' OR status = '') AND (payment_status IS NULL OR payment_status NOT IN ('paid','cancelled','refunded')) LIMIT 1";
$check_r = mysqli_query($db, $check_q);
if ($check_r && mysqli_num_rows($check_r) === 1) {
// Hard-delete to remove from cart
$del_q = "DELETE FROM {$table_prefix}billing_invoices WHERE invoice_id = " . intval($remove_id) . " AND user_id = " . intval($user_id) . " AND (status = 'due' OR status = '') AND (payment_status IS NULL OR payment_status NOT IN ('paid','cancelled','refunded')) LIMIT 1";
if (mysqli_query($db, $del_q)) {
// Reload to avoid form re-submission and refresh invoice list
header('Location: ' . billing_url('cart.php'));
exit;
} else {
$error_message = 'Failed to remove item from cart.';
}
} else {
$error_message = 'Invoice not found or cannot be removed.';
}
}
}
}
// Calculate discount
if ($applied_coupon && $coupon_discount_percent > 0) {
$discount_amount_cents = (int) round($total_amount_cents * ($coupon_discount_percent / 100));
$discount_amount_cents = min($discount_amount_cents, $total_amount_cents);
}
$discount_amount = billing_cart_cents_to_money($discount_amount_cents);
$final_amount_cents = max(0, $total_amount_cents - $discount_amount_cents);
$final_amount = billing_cart_cents_to_money($final_amount_cents);
// PayPal configuration (from config)
$client_id = function_exists('gsp_paypal_get_client_id') ? gsp_paypal_get_client_id() : ($paypal_client_id ?? '');
$sandbox = function_exists('gsp_paypal_is_sandbox') ? gsp_paypal_is_sandbox() : ($paypal_sandbox ?? true);
// Prepare PayPal items
$paypal_items = [];
$paypal_invoice_ids = [];
foreach ((array)$invoices as $inv) {
$game_display = !empty($inv['game_name']) ? $inv['game_name'] : 'Game Server';
$qty = max(1, intval($inv['qty']));
$paypal_invoice_ids[] = intval($inv['invoice_id']);
$lineAmountCents = billing_cart_money_to_cents((float)($inv['total_due'] ?? $inv['amount'] ?? 0));
$lineAmount = billing_cart_cents_to_money($lineAmountCents);
$paypal_items[] = [
'name' => $inv['home_name'] . ' (' . $game_display . ')',
'description' => $inv['description'] ?? '',
'quantity' => $qty,
'unit_amount' => [
'currency_code' => 'USD',
'value' => number_format($lineAmount / $qty, 2, '.', '')
]
];
}
$paypal_custom_id = 'cart:' . implode(',', $paypal_invoice_ids);
// Get site base URL
$protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https://' : 'http://';
$host = $_SERVER['HTTP_HOST'] ?? 'localhost';
$siteBase = $protocol . $host;
// (Do not close the shared DB connection here; menu and other includes may use it.)
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Shopping Cart - Game Server Panel</title>
<link rel="stylesheet" href="css/header.css">
<style>
/* Do not override site-wide font or header/menu styles here.
Keep body reset minimal so includes/menu.php can control header styling. */
body {
margin: 0;
padding: 0;
}
.cart-container {
max-width: 900px;
margin: 24px auto;
background: white;
padding: 24px;
border-radius: 8px;
box-shadow: 0 2px 10px rgba(0,0,0,0.1);
width: min(100%, calc(100% - 24px));
box-sizing: border-box;
}
h1 {
color: #333;
margin-bottom: 30px;
font-size: 2em;
}
.alert {
padding: 12px 20px;
margin-bottom: 20px;
border-radius: 4px;
}
.alert-error {
background: #f8d7da;
color: #721c24;
border: 1px solid #f5c6cb;
}
.alert-success {
background: #d4edda;
color: #155724;
border: 1px solid #c3e6cb;
}
.cart-empty {
text-align: center;
padding: 60px 20px;
}
.cart-empty h2 {
color: #666;
margin-bottom: 15px;
}
.cart-empty p {
color: #999;
margin-bottom: 30px;
}
.cart-table {
width: 100%;
border-collapse: collapse;
margin-bottom: 30px;
table-layout: fixed;
}
.cart-table th {
background: #f8f9fa;
padding: 12px;
text-align: left;
border-bottom: 2px solid #dee2e6;
font-weight: 600;
color: #495057;
}
.cart-table td {
padding: 15px 12px;
border-bottom: 1px solid #dee2e6;
}
.cart-table tbody tr:hover {
background: #f8f9fa;
}
.game-name {
font-weight: 600;
color: #007bff;
font-size: 1.05em;
}
.server-name {
color: #666;
font-size: 0.9em;
margin-top: 4px;
}
.description {
color: #999;
font-size: 0.85em;
margin-top: 4px;
}
.price {
font-weight: 600;
color: #28a745;
font-size: 1.1em;
}
.status-badge {
display: inline-block;
padding: 4px 12px;
border-radius: 4px;
font-size: 0.85em;
font-weight: 600;
background: #fff3cd;
color: #856404;
}
.coupon-section {
background: #f8f9fa;
padding: 20px;
border-radius: 8px;
margin-bottom: 20px;
}
.coupon-section h3 {
margin-top: 0;
color: #333;
}
.coupon-form {
display: flex;
gap: 10px;
align-items: flex-end;
flex-wrap: wrap;
}
.coupon-form > div {
flex: 1;
}
.coupon-form label {
display: block;
margin-bottom: 5px;
font-weight: 600;
color: #495057;
}
.coupon-form input {
width: 100%;
padding: 10px;
border: 1px solid #ced4da;
border-radius: 4px;
font-size: 1em;
}
.coupon-applied {
display: flex;
justify-content: space-between;
align-items: center;
background: #d4edda;
padding: 15px;
border-radius: 4px;
border: 1px solid #c3e6cb;
}
.coupon-applied-text {
color: #155724;
}
.cart-total {
text-align: right;
padding: 20px 0;
border-top: 2px solid #dee2e6;
margin-bottom: 30px;
}
.cart-total-row {
margin-bottom: 10px;
}
.cart-total-label {
font-size: 1.2em;
font-weight: 600;
margin-right: 20px;
color: #495057;
}
.cart-total-amount {
font-size: 1.5em;
font-weight: 700;
color: #28a745;
}
.subtotal-amount {
font-size: 1.2em;
color: #666;
}
.discount-amount {
font-size: 1.2em;
font-weight: 600;
color: #28a745;
}
.btn {
display: inline-block;
padding: 12px 24px;
background: #007bff;
color: white;
text-decoration: none;
border: none;
border-radius: 5px;
font-weight: 600;
cursor: pointer;
font-size: 1em;
}
.btn:hover {
background: #0056b3;
}
.btn-secondary {
background: #6c757d;
}
.btn-secondary:hover {
background: #545b62;
}
.btn-small {
padding: 8px 16px;
font-size: 0.9em;
}
.checkout-section {
padding: 20px 0;
}
.checkout-section h3 {
color: #333;
margin-bottom: 10px;
}
.checkout-section p {
color: #666;
margin-bottom: 20px;
}
#paypal-button-container {
max-width: 400px;
margin: 20px 0;
}
.status-message {
text-align: center;
padding: 20px;
color: #666;
display: none;
}
.action-buttons {
margin-top: 30px;
display: flex;
flex-wrap: wrap;
gap: 10px;
}
.cart-table-wrap {
width: 100%;
max-width: 100%;
overflow-x: auto;
}
@media (max-width: 768px) {
.cart-container {
width: min(100%, calc(100% - 12px));
padding: 14px;
margin: 12px auto;
}
h1 {
font-size: 1.5rem;
margin-bottom: 18px;
}
.cart-table thead {
display: none;
}
.cart-table,
.cart-table tbody,
.cart-table tr,
.cart-table td {
display: block;
width: 100%;
}
.cart-table tr {
border: 1px solid #dee2e6;
border-radius: 8px;
margin-bottom: 12px;
padding: 6px 8px;
background: #fff;
}
.cart-table td {
border: 0;
padding: 6px 4px;
text-align: left !important;
}
.cart-table td[data-label]::before {
content: attr(data-label) ": ";
font-weight: 600;
color: #495057;
}
.coupon-form {
flex-direction: column;
align-items: stretch;
}
.coupon-form button {
width: 100%;
}
.coupon-applied {
flex-direction: column;
align-items: flex-start;
gap: 8px;
}
.cart-total {
text-align: left;
}
.cart-total-row {
display: flex;
justify-content: space-between;
gap: 10px;
}
.cart-total-label,
.cart-total-amount,
.subtotal-amount,
.discount-amount {
font-size: 1rem;
margin-right: 0;
}
.btn {
width: 100%;
text-align: center;
}
.action-buttons {
margin-top: 16px;
}
}
</style>
<?php // Font Awesome for small icon buttons ?>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
<!-- Favicon -->
<link rel="icon" href="images/logo-sm.png" type="image/png">
<link rel="apple-touch-icon" href="images/logo-sm.png">
<?php if (!$cart_empty && !empty($client_id)): ?>
<script src="https://www.paypal.com/sdk/js?client-id=<?php echo htmlspecialchars($client_id, ENT_QUOTES, 'UTF-8'); ?>&currency=USD&intent=capture<?php echo $sandbox ? '&debug=false' : ''; ?>"></script>
<?php endif; ?>
</head>
<body>
<?php include(__DIR__ . '/includes/top.php'); ?>
<?php include(__DIR__ . '/includes/menu.php'); ?>
<div class="cart-container">
<?php if (!empty($db_error)): ?>
<div class="alert-error" style="margin-bottom:15px;">
<strong>Database error:</strong> <?php echo htmlspecialchars($db_error); ?>
</div>
<?php endif; ?>
<h1>🛒 Shopping Cart</h1>
<?php if ($error_message): ?>
<div class="alert alert-error"><?php echo htmlspecialchars($error_message); ?></div>
<?php endif; ?>
<?php if ($success_message): ?>
<div class="alert alert-success"><?php echo htmlspecialchars($success_message); ?></div>
<?php endif; ?>
<?php if ($cart_empty): ?>
<div class="cart-empty">
<h2>Your cart is empty</h2>
<p>Browse our game servers and add them to your cart to get started!</p>
<a href="<?php echo htmlspecialchars(billing_url('serverlist.php'), ENT_QUOTES, 'UTF-8'); ?>" class="btn">Browse Servers</a>
</div>
<?php else: ?>
<div class="cart-table-wrap">
<table class="cart-table">
<thead>
<tr>
<th>Game Server</th>
<th>Duration</th>
<th>Quantity</th>
<th>Status</th>
<th style="text-align: right;">Price</th>
<th style="text-align: right;">Action</th>
</tr>
</thead>
<tbody>
<?php foreach ((array)$invoices as $inv): ?>
<tr>
<td data-label="Game Server">
<div class="game-name"><?php echo htmlspecialchars($inv['game_name'] ?? 'Game Server'); ?></div>
<div class="server-name"><?php echo htmlspecialchars($inv['home_name']); ?></div>
<?php if (!empty($inv['description'])): ?>
<div class="description"><?php echo htmlspecialchars($inv['description']); ?></div>
<?php endif; ?>
</td>
<td data-label="Duration"><?php echo htmlspecialchars((string)($inv['invoice_duration'] ?? 'month')); ?></td>
<td data-label="Quantity"><?php echo intval($inv['qty'] ?? 1); ?>x</td>
<td data-label="Status"><span class="status-badge"><?php echo htmlspecialchars(strtoupper((string)($inv['status'] ?? 'due'))); ?></span></td>
<td data-label="Price" style="text-align: right;">
<span class="price">$<?php echo number_format(floatval($inv['total_due'] ?? $inv['amount'] ?? 0), 2); ?></span>
</td>
<td data-label="Action" style="text-align: right;">
<button type="button" class="btn btn-secondary btn-small" title="Remove" onclick="removeInvoice(<?php echo intval($inv['invoice_id']); ?>)">
<i class="fa-solid fa-trash"></i>
</button>
</td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</div>
<!-- Coupon Section -->
<div class="coupon-section">
<h3>Coupon Code</h3>
<?php if (!$applied_coupon): ?>
<form method="POST" class="coupon-form">
<div>
<label>Enter Code:</label>
<input type="text" name="coupon_code" placeholder="Enter coupon code" required>
</div>
<button type="submit" name="apply_coupon" class="btn">Apply Coupon</button>
</form>
<?php else: ?>
<div class="coupon-applied">
<div class="coupon-applied-text">
<strong>Coupon Applied:</strong>
<?php echo htmlspecialchars($applied_coupon['name']); ?>
(<?php echo htmlspecialchars($applied_coupon['discount_percent']); ?>% off)
</div>
<form method="POST" style="margin: 0;">
<button type="submit" name="remove_coupon" class="btn btn-secondary btn-small">Remove</button>
</form>
</div>
<?php endif; ?>
</div>
<!-- Cart Total -->
<div class="cart-total">
<?php if ($discount_amount > 0): ?>
<div class="cart-total-row">
<span class="cart-total-label">Subtotal:</span>
<span class="subtotal-amount">$<?php echo number_format($total_amount, 2); ?></span>
</div>
<div class="cart-total-row">
<span class="cart-total-label">Discount (<?php echo $coupon_discount_percent; ?>%):</span>
<span class="discount-amount">-$<?php echo number_format($discount_amount, 2); ?></span>
</div>
<?php endif; ?>
<div class="cart-total-row">
<span class="cart-total-label">Total:</span>
<span class="cart-total-amount">$<?php echo number_format($final_amount, 2); ?></span>
</div>
</div>
<!-- Checkout Section -->
<?php if ($final_amount_cents === 0): ?>
<!-- Zero-dollar checkout: coupon covers the full amount, no PayPal needed -->
<div class="checkout-section">
<h3>🎉 Complete Your Free Order</h3>
<p>Your coupon covers the full amount. Click below to confirm and automatically provision your server(s).</p>
<div id="status-message" class="status-message"></div>
<form method="POST" action="<?php echo htmlspecialchars(billing_url('checkout_free.php'), ENT_QUOTES, 'UTF-8'); ?>" onsubmit="document.getElementById('free-submit-btn').disabled=true; document.getElementById('status-message').style.display='block'; document.getElementById('status-message').textContent='Processing…';">
<input type="hidden" name="coupon_id" value="<?php echo intval($_SESSION['cart_coupon_id'] ?? 0); ?>">
<input type="hidden" name="coupon_code" value="<?php echo htmlspecialchars($_SESSION['cart_coupon_code'] ?? '', ENT_QUOTES, 'UTF-8'); ?>">
<button id="free-submit-btn" type="submit" class="btn" style="background:#28a745;">
✓ Complete Free Order
</button>
</form>
<div class="action-buttons" style="margin-top:15px;">
<a href="<?php echo htmlspecialchars(billing_url('serverlist.php'), ENT_QUOTES, 'UTF-8'); ?>" class="btn btn-secondary">Continue Shopping</a>
<a href="<?php echo htmlspecialchars(billing_url('my_account.php'), ENT_QUOTES, 'UTF-8'); ?>" class="btn btn-secondary">My Account</a>
</div>
</div>
<?php else: ?>
<div class="checkout-section">
<h3>Checkout with PayPal</h3>
<?php if (empty($client_id)): ?>
<div class="alert alert-error">
<strong>Checkout Unavailable:</strong> PayPal has not been configured for this site.
Please contact the site administrator or try again later.
<?php
// Admin hint: only show config link if the current user is an admin
$cart_user_id_check = intval($_SESSION['website_user_id'] ?? 0);
$cart_is_admin = false;
if ($cart_user_id_check > 0 && $db) {
$ar = mysqli_query($db, "SELECT users_role FROM {$table_prefix}users WHERE user_id = " . $cart_user_id_check . " LIMIT 1");
if ($ar && ($arow = mysqli_fetch_assoc($ar))) {
$cart_is_admin = strtolower($arow['users_role'] ?? '') === 'admin';
}
}
if ($cart_is_admin):
?>
<br><small><em>Admin: configure PayPal credentials in <a href="<?php echo htmlspecialchars(billing_url('admin_config.php'), ENT_QUOTES, 'UTF-8'); ?>" style="color:inherit;text-decoration:underline;">Site Config</a>.</em></small>
<?php endif; ?>
</div>
<?php else: ?>
<p>Click the button below to complete your purchase securely through PayPal.</p>
<div id="paypal-button-container"></div>
<div id="status-message" class="status-message"></div>
<?php endif; ?>
<div class="action-buttons">
<a href="<?php echo htmlspecialchars(billing_url('serverlist.php'), ENT_QUOTES, 'UTF-8'); ?>" class="btn btn-secondary">Continue Shopping</a>
<a href="<?php echo htmlspecialchars(billing_url('my_account.php'), ENT_QUOTES, 'UTF-8'); ?>" class="btn btn-secondary">My Account</a>
</div>
</div>
<?php endif; ?>
<script>
function setStatus(msg) {
const statusDiv = document.getElementById('status-message');
if (statusDiv) {
statusDiv.textContent = msg;
statusDiv.style.display = 'block';
}
}
</script>
<?php if ($final_amount_cents > 0 && !empty($client_id)): ?>
<script>
function showPaymentError(msg) {
var statusDiv = document.getElementById('status-message');
if (statusDiv) {
statusDiv.textContent = msg;
statusDiv.style.display = 'block';
statusDiv.style.color = '#721c24';
statusDiv.style.background = '#f8d7da';
statusDiv.style.border = '1px solid #f5c6cb';
statusDiv.style.padding = '12px 16px';
statusDiv.style.borderRadius = '4px';
}
}
function logErrorToServer(context, errorCode, message, debugId, orderId) {
try {
fetch('/api/log_error.php', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
context: context,
error_code: errorCode,
message: message,
paypal_debug_id: debugId || null,
order_id: orderId || null,
timestamp: new Date().toISOString()
})
}).catch(function() {}); // silently ignore logging failures
} catch (e) {}
}
paypal.Buttons({
createOrder: function(data, actions) {
setStatus('Creating order...');
return actions.order.create({
purchase_units: [{
custom_id: '<?php echo htmlspecialchars($paypal_custom_id, ENT_QUOTES, 'UTF-8'); ?>',
amount: {
currency_code: 'USD',
value: '<?php echo number_format($final_amount, 2, '.', ''); ?>',
breakdown: {
item_total: {
currency_code: 'USD',
value: '<?php echo number_format($total_amount, 2, '.', ''); ?>'
}
<?php if ($discount_amount > 0): ?>
,
discount: {
currency_code: 'USD',
value: '<?php echo number_format($discount_amount, 2, '.', ''); ?>'
}
<?php endif; ?>
}
},
items: <?php echo json_encode($paypal_items); ?>
}]
});
},
onApprove: function(data, actions) {
setStatus('Processing payment...');
return fetch('/api/capture_order.php', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ order_id: data.orderID })
})
.then(function(res) {
return res.json().then(function(body) {
return { ok: res.ok, body: body };
}).catch(function() {
return { ok: false, body: { error_code: 'invalid_response', message: 'Server returned non-JSON response (HTTP ' + res.status + ').' } };
});
})
.then(function(result) {
if (!result.ok || result.body.success === false) {
var errCode = result.body.error_code || result.body.error || 'capture_failed';
var errMsg = result.body.message || 'Payment capture failed. Please try again or contact support.';
var debugId = result.body.debug_id || null;
logErrorToServer('cart_capture', errCode, errMsg, debugId, data.orderID);
showPaymentError('Payment failed: ' + errMsg);
return;
}
// status=COMPLETED is the success indicator
if (result.body.status === 'COMPLETED') {
setStatus('Payment successful! Redirecting...');
window.location.href = '/payment_success.php?order_id=' + encodeURIComponent(data.orderID);
} else {
var unexpectedMsg = 'Unexpected payment status: ' + (result.body.status || 'unknown');
logErrorToServer('cart_capture', 'unexpected_status', unexpectedMsg, null, data.orderID);
showPaymentError(unexpectedMsg + '. Please contact support.');
}
})
.catch(function(err) {
var errMsg = err && err.message ? err.message : 'Network error during payment capture.';
logErrorToServer('cart_capture', 'fetch_error', errMsg, null, data.orderID);
showPaymentError('Payment error: ' + errMsg);
});
},
onError: function(err) {
var errMsg = err && err.message ? err.message : String(err);
logErrorToServer('cart_paypal_sdk', 'sdk_error', errMsg, null, null);
showPaymentError('A PayPal error occurred. Please try again or contact support.');
},
onCancel: function(data) {
setStatus('Payment cancelled.');
window.location.href = '/payment_cancel.php';
}
}).render('#paypal-button-container');
</script>
<?php endif; ?>
<script>
// Remove invoice via AJAX and perform a partial reload of the cart container
function removeInvoice(invoiceId) {
if (!confirm('Remove this item from your cart?')) return;
setStatus('Removing item...');
var body = 'remove_invoice_ajax=1&invoice_id=' + encodeURIComponent(invoiceId);
fetch(window.location.href, {
method: 'POST',
headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
body: body
})
.then(function(res) { return res.json(); })
.then(function(data) {
if (data && data.success) {
// Partial reload: fetch the current page and replace the cart container
fetch(window.location.href, { method: 'GET', credentials: 'same-origin' })
.then(function(r) { return r.text(); })
.then(function(html) {
var parser = new DOMParser();
var doc = parser.parseFromString(html, 'text/html');
var newContainer = doc.querySelector('.cart-container');
var oldContainer = document.querySelector('.cart-container');
if (newContainer && oldContainer) {
oldContainer.innerHTML = newContainer.innerHTML;
} else {
// Fallback to full reload
window.location.reload();
}
});
} else {
alert(data && data.error ? data.error : 'Failed to remove item.');
setStatus('');
}
})
.catch(function(err) {
console.error('Remove error', err);
alert('Error removing item. See console for details.');
setStatus('');
});
}
</script>
<?php endif; ?>
</div>
<?php include(__DIR__ . '/includes/footer.php'); ?>
</body>
</html>

76
Panel/modules/billing/check_table.php Normal file
View file

@ -0,0 +1,76 @@
<?php
/**
* Check {table_prefix}billing_invoices table structure
*/
require_once(__DIR__ . '/bootstrap.php');
require_once('../../includes/database_mysqli.php');
$db = createDatabaseConnection($db_host, $db_user, $db_pass, $db_name, $db_port);
if (!$db) {
die("Database connection failed: " . mysqli_connect_error());
}
echo "<h2>{$table_prefix}billing_invoices Table Structure</h2>\n";
$result = mysqli_query($db, "DESCRIBE {$table_prefix}billing_invoices");
if (!$result) {
die("Table doesn't exist or query failed: " . mysqli_error($db));
}
echo "<table border='1' style='border-collapse: collapse;'>\n";
echo "<tr><th>Field</th><th>Type</th><th>Null</th><th>Key</th><th>Default</th><th>Extra</th></tr>\n";
while ($row = mysqli_fetch_assoc($result)) {
echo "<tr>";
echo "<td>{$row['Field']}</td>";
echo "<td>{$row['Type']}</td>";
echo "<td>{$row['Null']}</td>";
echo "<td>{$row['Key']}</td>";
echo "<td>" . ($row['Default'] ?? 'NULL') . "</td>";
echo "<td>{$row['Extra']}</td>";
echo "</tr>\n";
}
echo "</table>\n";
// Count existing invoices
$count_result = mysqli_query($db, "SELECT COUNT(*) as cnt FROM {$table_prefix}billing_invoices");
$count = mysqli_fetch_assoc($count_result);
echo "<p><strong>Total invoices in table:</strong> {$count['cnt']}</p>\n";
// Show last 5 invoices
echo "<h2>Last 5 Invoices</h2>\n";
$last_result = mysqli_query($db, "SELECT * FROM {$table_prefix}billing_invoices ORDER BY invoice_id DESC LIMIT 5");
if (mysqli_num_rows($last_result) > 0) {
echo "<table border='1' style='border-collapse: collapse;'>\n";
echo "<tr>";
$first = true;
while ($row = mysqli_fetch_assoc($last_result)) {
if ($first) {
foreach (array_keys($row) as $col) {
echo "<th>{$col}</th>";
}
echo "</tr>\n";
$first = false;
mysqli_data_seek($last_result, 0);
}
}
while ($row = mysqli_fetch_assoc($last_result)) {
echo "<tr>";
foreach ((array)$row as $val) {
echo "<td>" . htmlspecialchars($val ?? 'NULL') . "</td>";
}
echo "</tr>\n";
}
echo "</table>\n";
} else {
echo "<p>No invoices found.</p>\n";
}
billing_maybe_close_db($db);
?>

261
Panel/modules/billing/checkout_free.php Normal file
View file

@ -0,0 +1,261 @@
<?php
/**
* Free Checkout Handler
*
* Processes a zero-dollar cart when a coupon reduces the total to $0.
* Marks invoices paid (method=coupon, txid=free-<timestamp>),
* creates billing_orders rows, and triggers automatic server provisioning.
*
* POST params: coupon_id, coupon_code
*/
if (session_status() === PHP_SESSION_NONE) {
session_name('opengamepanel_web');
session_start();
}
require_once __DIR__ . '/bootstrap.php';
require_once __DIR__ . '/includes/login_required.php';
function billing_free_money_to_cents(float $amount): int
{
return (int) round($amount * 100);
}
$userId = intval($_SESSION['website_user_id'] ?? $_SESSION['user_id'] ?? 0);
if ($userId <= 0) {
header('Location: ' . billing_url('login.php'));
exit;
}
// Only accept POST
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
header('Location: ' . billing_url('cart.php'));
exit;
}
// DB connection
$mysqli = mysqli_connect($db_host, $db_user, $db_pass, $db_name, isset($db_port) ? (int)$db_port : null);
if (!$mysqli) {
die('<p>Database connection failed. Please <a href="' . htmlspecialchars(billing_url('serverlist.php'), ENT_QUOTES, 'UTF-8') . '">return to the shop</a> or contact support.</p>');
}
mysqli_set_charset($mysqli, 'utf8mb4');
// Fetch unpaid invoices for this user (prepared statement)
$invoices = [];
$stmt = mysqli_prepare($mysqli, "SELECT * FROM {$table_prefix}billing_invoices
WHERE user_id = ?
AND (status = 'due' OR status = '')
AND (payment_status IS NULL OR payment_status NOT IN ('paid','cancelled','refunded'))
ORDER BY invoice_id ASC");
if ($stmt) {
mysqli_stmt_bind_param($stmt, 'i', $userId);
mysqli_stmt_execute($stmt);
$result = mysqli_stmt_get_result($stmt);
while ($row = mysqli_fetch_assoc($result)) {
$invoices[] = $row;
}
mysqli_stmt_close($stmt);
}
if (empty($invoices)) {
if ($mysqli instanceof mysqli) {
mysqli_close($mysqli);
}
header('Location: ' . billing_url('cart.php') . '?msg=empty');
exit;
}
// Validate coupon from POST / session
$couponId = intval($_POST['coupon_id'] ?? $_SESSION['cart_coupon_id'] ?? 0);
$couponCode = trim($_POST['coupon_code'] ?? $_SESSION['cart_coupon_code'] ?? '');
$discountPct = 0.0;
if ($couponCode !== '') {
$safe = mysqli_real_escape_string($mysqli, $couponCode);
$cr = mysqli_query($mysqli, "SELECT * FROM {$table_prefix}billing_coupons
WHERE code = '$safe' AND is_active = 1 LIMIT 1");
if ($cr && mysqli_num_rows($cr) === 1) {
$coupon = mysqli_fetch_assoc($cr);
$discountPct = (float)($coupon['discount_percent'] ?? 0);
mysqli_free_result($cr);
}
}
// Calculate total and verify it is $0 after discount
$totalAmountCents = 0;
foreach ($invoices as $inv) {
$lineAmount = (float)($inv['total_due'] ?? $inv['amount'] ?? 0);
$totalAmountCents += billing_free_money_to_cents($lineAmount);
}
$discountAmountCents = (int) round($totalAmountCents * ($discountPct / 100.0));
$discountAmountCents = min($discountAmountCents, $totalAmountCents);
$finalAmountCents = max(0, $totalAmountCents - $discountAmountCents);
if ($finalAmountCents !== 0) {
// Coupon no longer covers the full amount — redirect to cart
if ($mysqli instanceof mysqli) {
mysqli_close($mysqli);
}
header('Location: ' . billing_url('cart.php') . '?msg=coupon_insufficient');
exit;
}
// Process the free checkout
$now = date('Y-m-d H:i:s');
$txid = 'free-' . time() . '-' . $userId;
require_once __DIR__ . '/classes/BillingRepository.php';
require_once __DIR__ . '/classes/BillingService.php';
$repo = new BillingRepository($mysqli, $table_prefix);
$newOrderIds = [];
$duration_meta = static function (array $invoice): array {
return ['invoice_duration' => 'month', 'rate_type' => 'monthly', 'days' => 31];
};
foreach ($invoices as $inv) {
$invoiceId = intval($inv['invoice_id']);
$invoiceBase = round((float)($inv['subtotal'] ?? $inv['total_due'] ?? $inv['amount'] ?? 0), 2);
$orderId = intval($inv['order_id'] ?? 0);
$meta = $duration_meta($inv);
$repo->updateInvoiceFields($invoiceId, [
'order_id' => $orderId,
'coupon_id' => $couponId,
'discount_amount' => $invoiceBase,
'subtotal' => $invoiceBase,
'amount' => 0.00,
'total_due' => 0.00,
'status' => 'paid',
'billing_status' => 'Active',
'payment_status' => 'paid',
'payment_txid' => $txid,
'payment_method' => 'coupon',
'paid_date' => $now,
'invoice_duration' => $meta['invoice_duration'],
'rate_type' => $meta['rate_type'],
]);
$repo->logTransaction([
'invoice_id' => $invoiceId,
'user_id' => $userId,
'home_id' => 0,
'payment_method' => 'coupon',
'transaction_external_id' => $txid,
'amount' => 0.00,
'currency' => 'USD',
'status' => 'completed',
'raw_response' => ['coupon_id' => $couponId, 'discount_pct' => $discountPct, 'original_amount' => (float)($inv['amount'] ?? 0)],
]);
$currentHomeId = 0;
$extendFrom = null;
if ($orderId > 0) {
$order = $repo->getOrder($orderId);
if ($order) {
$currentHomeId = intval($order['home_id'] ?? 0);
$extendFrom = $order['end_date'] ?? null;
}
}
$baseTs = time();
if (!empty($extendFrom)) {
$extendTs = strtotime($extendFrom);
if ($extendTs !== false && $extendTs > time()) {
$baseTs = $extendTs;
}
}
$endDate = date('Y-m-d H:i:s', $baseTs + ($meta['days'] * max(1, intval($inv['qty'] ?? 1)) * 86400));
if ($orderId > 0) {
$repo->updateOrderFields($orderId, [
'status' => 'Active',
'end_date' => $endDate,
'payment_txid' => $txid,
'paid_ts' => $now,
'price' => 0.00,
'discount_amount' => $invoiceBase,
'coupon_id' => $couponId,
]);
if ($currentHomeId > 0) {
$repo->updateInvoiceFields($invoiceId, ['home_id' => $currentHomeId]);
}
if (!in_array($orderId, $newOrderIds, true)) {
$newOrderIds[] = $orderId;
}
} else {
$newOrderId = $repo->createOrder([
'user_id' => intval($inv['user_id']),
'service_id' => intval($inv['service_id']),
'home_name' => $inv['home_name'] ?? '',
'ip' => (string)($inv['ip'] ?? '0'),
'qty' => intval($inv['qty'] ?? 1),
'invoice_duration' => $meta['invoice_duration'],
'max_players' => intval($inv['max_players'] ?? 0),
'price' => 0.00,
'discount_amount' => $invoiceBase,
'remote_control_password' => $inv['remote_control_password'] ?? '',
'ftp_password' => $inv['ftp_password'] ?? '',
'status' => 'Active',
'end_date' => $endDate,
'payment_txid' => $txid,
'paid_ts' => $now,
'coupon_id' => $couponId,
]);
if ($newOrderId > 0) {
$repo->updateInvoiceOrderId($invoiceId, $newOrderId);
$repo->updateInvoiceFields($invoiceId, ['order_id' => $newOrderId]);
if (!in_array($newOrderId, $newOrderIds, true)) {
$newOrderIds[] = $newOrderId;
}
}
}
}
if ($couponId > 0 && !empty($invoices)) {
mysqli_query($mysqli, "UPDATE {$table_prefix}billing_coupons
SET current_uses = current_uses + 1
WHERE coupon_id = " . intval($couponId));
}
// Clear coupon from session
unset($_SESSION['cart_coupon_code'], $_SESSION['cart_coupon_id']);
// Attempt automatic provisioning via panel bridge
$autoProvision = ['provisioned_count' => 0, 'failed_count' => 0, 'details' => [], 'trace_log_path' => 'modules/billing/logs/provisioning_trace.log'];
if (!empty($newOrderIds)) {
require_once __DIR__ . '/includes/panel_bridge.php';
$panelCtx = billing_panel_bootstrap();
if ($panelCtx && isset($panelCtx['db'])) {
$GLOBALS['db'] = $panelCtx['db'];
$GLOBALS['settings'] = $panelCtx['settings'];
require_once __DIR__ . '/create_servers.php';
$autoProvision = billing_invoke_provision(['order_ids' => $newOrderIds, 'user_id' => $userId, 'is_admin' => true]);
} else {
$autoProvision = [
'provisioned_count' => 0,
'failed_count' => count($newOrderIds),
'details' => [],
'trace_log_path' => 'modules/billing/logs/provisioning_trace.log',
'trace_error' => 'Panel bootstrap failed before billing provisioning could start.',
];
}
// If panel bootstrap fails the order is Active and admins can provision via the orders panel.
}
if (function_exists('billing_store_provision_session_result')) {
billing_store_provision_session_result($txid, [
'source' => 'checkout_free.php',
'txid' => $txid,
'order_ids' => $newOrderIds,
'result' => $autoProvision,
]);
}
if ($mysqli instanceof mysqli) {
mysqli_close($mysqli);
}
header('Location: ' . billing_url('payment_success.php') . '?order_id=' . urlencode($txid) . '&source=free');
exit;

674
Panel/modules/billing/classes/BillingRepository.php Normal file
View file

@ -0,0 +1,674 @@
<?php
/**
* BillingRepository — data layer for the billing module.
* All SQL lives here. Accepts a mysqli connection.
*/
class BillingRepository
{
private mysqli $db;
private string $prefix;
private array $columnCache = [];
public function __construct(mysqli $db, string $prefix = 'gsp_')
{
$this->db = $db;
$this->prefix = $prefix;
}
// ---------------------------------------------------------------
// Invoice helpers
// ---------------------------------------------------------------
/** Find a single 'unpaid' invoice by ID, owned by $userId. */
public function getUnpaidInvoice(int $invoiceId, int $userId): ?array
{
$stmt = $this->db->prepare(
"SELECT * FROM `{$this->prefix}billing_invoices`
WHERE invoice_id = ? AND user_id = ? AND payment_status IN ('unpaid','due') LIMIT 1"
);
if (!$stmt) return null;
$stmt->bind_param('ii', $invoiceId, $userId);
$stmt->execute();
$row = $stmt->get_result()->fetch_assoc();
$stmt->close();
return $row ?: null;
}
/** Get all unpaid invoices for a user. */
public function getUnpaidInvoicesForUser(int $userId): array
{
$stmt = $this->db->prepare(
"SELECT * FROM `{$this->prefix}billing_invoices`
WHERE user_id = ? AND payment_status IN ('unpaid','due')
ORDER BY invoice_id ASC"
);
if (!$stmt) return [];
$stmt->bind_param('i', $userId);
$stmt->execute();
return $stmt->get_result()->fetch_all(MYSQLI_ASSOC);
}
/** Get invoice rows for a specific user and invoice id list. */
public function getInvoicesForUserByIds(int $userId, array $invoiceIds, bool $onlyUnpaid = true): array
{
$invoiceIds = array_values(array_unique(array_filter(array_map('intval', $invoiceIds), static fn($id) => $id > 0)));
if (empty($invoiceIds)) {
return [];
}
$placeholders = implode(',', array_fill(0, count($invoiceIds), '?'));
$types = str_repeat('i', count($invoiceIds) + 1);
$params = array_merge([$userId], $invoiceIds);
$where = $onlyUnpaid ? " AND payment_status IN ('unpaid','due')" : '';
$sql = "SELECT * FROM `{$this->prefix}billing_invoices`
WHERE user_id = ? AND invoice_id IN ({$placeholders}){$where}
ORDER BY invoice_id ASC";
$stmt = $this->db->prepare($sql);
if (!$stmt) {
return [];
}
$stmt->bind_param($types, ...$params);
$stmt->execute();
$rows = $stmt->get_result()->fetch_all(MYSQLI_ASSOC);
$stmt->close();
return $rows;
}
/** Mark an invoice as paid. Also sets status='paid' so it disappears from cart queries. */
public function markInvoicePaid(int $invoiceId, string $txid, string $method, string $paidAt): bool
{
$stmt = $this->db->prepare(
"UPDATE `{$this->prefix}billing_invoices`
SET payment_status='paid', status='paid', payment_txid=?, payment_method=?, paid_date=?
WHERE invoice_id = ? LIMIT 1"
);
if (!$stmt) return false;
$stmt->bind_param('sssi', $txid, $method, $paidAt, $invoiceId);
$ok = $stmt->execute();
$stmt->close();
return $ok;
}
/**
* Create a billing_orders row from invoice/payment data.
* Returns new order_id (0 on failure).
*
* @param array $data Keys: user_id, service_id, home_name, ip, qty, invoice_duration,
* max_players, price, remote_control_password, ftp_password,
* status, end_date, payment_txid, paid_ts, coupon_id
*/
public function createOrder(array $data): int
{
$now = date('Y-m-d H:i:s');
$status = (string)($data['status'] ?? 'Active');
$endDate = $data['end_date'] ?? null;
$txid = (string)($data['payment_txid'] ?? '');
$paidTs = (string)($data['paid_ts'] ?? $now);
$couponId = intval($data['coupon_id'] ?? 0);
$discount = (float)($data['discount_amount'] ?? 0);
$ip = (string)($data['ip'] ?? '0');
$qty = intval($data['qty'] ?? 1);
$maxPl = intval($data['max_players'] ?? 0);
$price = (float)($data['price'] ?? 0);
$userId = intval($data['user_id']);
$svcId = intval($data['service_id']);
$homeName = (string)($data['home_name'] ?? '');
$invDur = (string)($data['invoice_duration'] ?? 'month');
$rcp = (string)($data['remote_control_password'] ?? '');
$ftp = (string)($data['ftp_password'] ?? '');
$fields = [
'user_id' => $userId,
'service_id' => $svcId,
'home_name' => $homeName,
'ip' => $ip,
'qty' => $qty,
'invoice_duration' => $invDur,
'max_players' => $maxPl,
'price' => $price,
'discount_amount' => $discount,
'remote_control_password' => $rcp,
'ftp_password' => $ftp,
'home_id' => '0',
'status' => $status,
'order_date' => $now,
'end_date' => $endDate,
'payment_txid' => $txid,
'paid_ts' => $paidTs,
'coupon_id' => $couponId,
];
if ($this->hasColumn('billing_orders', 'paypal_data')) {
$fields['paypal_data'] = isset($data['paypal_data'])
? (is_array($data['paypal_data']) ? json_encode($data['paypal_data']) : (string)$data['paypal_data'])
: null;
}
return $this->insertAssoc('billing_orders', $fields);
}
/**
* Link a billing_invoice row to its corresponding billing_orders row.
* Called after createOrder() so the capture endpoint can be idempotent.
*/
public function updateInvoiceOrderId(int $invoiceId, int $orderId): bool
{
$stmt = $this->db->prepare(
"UPDATE `{$this->prefix}billing_invoices` SET order_id = ? WHERE invoice_id = ? LIMIT 1"
);
if (!$stmt) return false;
$stmt->bind_param('ii', $orderId, $invoiceId);
$ok = $stmt->execute();
$stmt->close();
return $ok;
}
/** Create a new invoice record. Returns new invoice_id or 0 on failure. */
public function createInvoice(array $data): int
{
$fields = [
'user_id', 'service_id', 'home_id', 'home_name',
'customer_name', 'customer_email',
'rate_type', 'rate_per_player', 'players',
'period_start', 'period_end',
'subtotal', 'total_due',
'currency', 'payment_status', 'payment_method', 'description',
];
$cols = implode(',', array_map(fn($f) => "`$f`", $fields));
$places = implode(',', array_fill(0, count($fields), '?'));
$types = 'iiissssssiissssss';
$stmt = $this->db->prepare(
"INSERT INTO `{$this->prefix}billing_invoices` ({$cols}) VALUES ({$places})"
);
if (!$stmt) return 0;
$vals = [];
foreach ($fields as $f) {
$vals[] = $data[$f] ?? null;
}
$stmt->bind_param($types, ...$vals);
if (!$stmt->execute()) { $stmt->close(); return 0; }
$id = (int)$stmt->insert_id;
$stmt->close();
return $id;
}
// ---------------------------------------------------------------
// Safe table-creation helpers (idempotent, check INFORMATION_SCHEMA first)
// ---------------------------------------------------------------
/**
* Ensure billing_transactions table exists.
* Safe to call on every request; uses INFORMATION_SCHEMA to skip if already present.
*/
public function ensureBillingTransactionsTable(): bool
{
$res = $this->db->query(
"SELECT COUNT(*) AS cnt FROM INFORMATION_SCHEMA.TABLES
WHERE TABLE_SCHEMA = DATABASE()
AND TABLE_NAME = '{$this->prefix}billing_transactions'"
);
if ($res && (int)$res->fetch_assoc()['cnt'] > 0) {
return true;
}
return (bool)$this->db->query(
"CREATE TABLE IF NOT EXISTS `{$this->prefix}billing_transactions` (
`transaction_id` INT(11) NOT NULL AUTO_INCREMENT,
`invoice_id` INT(11) NOT NULL DEFAULT 0,
`user_id` INT(11) NOT NULL DEFAULT 0,
`home_id` INT(11) NOT NULL DEFAULT 0,
`payment_method` VARCHAR(50) NOT NULL DEFAULT 'paypal',
`transaction_external_id` VARCHAR(255) NOT NULL DEFAULT '',
`amount` DECIMAL(15,2) NOT NULL DEFAULT 0.00,
`currency` VARCHAR(3) NOT NULL DEFAULT 'USD',
`status` ENUM('pending','completed','failed','refunded') NOT NULL DEFAULT 'pending',
`raw_response` MEDIUMTEXT NULL,
`created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
`updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
PRIMARY KEY (`transaction_id`),
KEY `invoice_id` (`invoice_id`),
KEY `user_id` (`user_id`),
KEY `home_id` (`home_id`),
KEY `status` (`status`),
KEY `payment_method` (`payment_method`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"
);
}
/**
* Ensure billing_paypal_errors table exists.
* Safe to call on every request; uses INFORMATION_SCHEMA to skip if already present.
*/
public function ensureBillingPaypalErrorsTable(): bool
{
$res = $this->db->query(
"SELECT COUNT(*) AS cnt FROM INFORMATION_SCHEMA.TABLES
WHERE TABLE_SCHEMA = DATABASE()
AND TABLE_NAME = '{$this->prefix}billing_paypal_errors'"
);
if ($res && (int)$res->fetch_assoc()['cnt'] > 0) {
return true;
}
return (bool)$this->db->query(
"CREATE TABLE IF NOT EXISTS `{$this->prefix}billing_paypal_errors` (
`id` INT NOT NULL AUTO_INCREMENT,
`context` VARCHAR(64) NOT NULL DEFAULT '',
`error_code` VARCHAR(128) NOT NULL DEFAULT '',
`message` TEXT NULL,
`paypal_debug_id` VARCHAR(128) NULL,
`order_id` VARCHAR(128) NULL,
`capture_id` VARCHAR(128) NULL,
`billing_order_id` INT NULL,
`user_id` INT NULL,
`raw_json` LONGTEXT NULL,
`created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
PRIMARY KEY (`id`),
KEY `idx_context` (`context`),
KEY `idx_created_at` (`created_at`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4"
);
}
// ---------------------------------------------------------------
// Transaction (payment log) helpers
// ---------------------------------------------------------------
/** Insert a row into billing_transactions. Returns new transaction_id. */
public function logTransaction(array $data): int
{
$this->ensureBillingTransactionsTable();
$invoiceId = intval($data['invoice_id'] ?? 0);
$extId = (string)($data['transaction_external_id'] ?? '');
if ($invoiceId > 0 && $extId !== '') {
$existing = $this->db->prepare(
"SELECT transaction_id FROM `{$this->prefix}billing_transactions`
WHERE invoice_id = ? AND transaction_external_id = ?
LIMIT 1"
);
if ($existing) {
$existing->bind_param('is', $invoiceId, $extId);
$existing->execute();
$row = $existing->get_result()->fetch_assoc();
$existing->close();
if (!empty($row['transaction_id'])) {
return (int)$row['transaction_id'];
}
}
}
$stmt = $this->db->prepare(
"INSERT INTO `{$this->prefix}billing_transactions`
(invoice_id, user_id, home_id, payment_method, transaction_external_id,
amount, currency, status, raw_response)
VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)"
);
if (!$stmt) return 0;
$rawJson = is_array($data['raw_response']) ? json_encode($data['raw_response']) : (string)($data['raw_response'] ?? '');
$userId = intval($data['user_id'] ?? 0);
$homeId = intval($data['home_id'] ?? 0);
$method = (string)($data['payment_method'] ?? 'paypal');
$amount = (float)($data['amount'] ?? 0);
$currency = (string)($data['currency'] ?? 'USD');
$status = (string)($data['status'] ?? 'completed');
$stmt->bind_param(
'iiissdsss',
$invoiceId, $userId, $homeId, $method, $extId, $amount, $currency, $status, $rawJson
);
if (!$stmt->execute()) { $stmt->close(); return 0; }
$id = (int)$stmt->insert_id;
$stmt->close();
return $id;
}
/** Get all transactions, optionally filtered. Creates the table if missing. */
public function getTransactions(array $filter = [], int $limit = 100, int $offset = 0): array
{
if (!$this->ensureBillingTransactionsTable()) {
return [];
}
$where = '1=1';
$params = [];
$types = '';
if (!empty($filter['user_id'])) {
$where .= ' AND t.user_id = ?';
$params[] = intval($filter['user_id']);
$types .= 'i';
}
if (!empty($filter['home_id'])) {
$where .= ' AND t.home_id = ?';
$params[] = intval($filter['home_id']);
$types .= 'i';
}
if (!empty($filter['payment_method'])) {
$where .= ' AND t.payment_method = ?';
$params[] = $filter['payment_method'];
$types .= 's';
}
$sql = "SELECT t.*, u.users_login, u.users_email
FROM `{$this->prefix}billing_transactions` t
LEFT JOIN `{$this->prefix}users` u ON u.user_id = t.user_id
WHERE {$where}
ORDER BY t.transaction_id DESC
LIMIT ? OFFSET ?";
$params[] = $limit;
$params[] = $offset;
$types .= 'ii';
$stmt = $this->db->prepare($sql);
if (!$stmt) return [];
$stmt->bind_param($types, ...$params);
$stmt->execute();
return $stmt->get_result()->fetch_all(MYSQLI_ASSOC);
}
// ---------------------------------------------------------------
// PayPal error log helpers
// ---------------------------------------------------------------
/**
* Insert a row into billing_paypal_errors. Never logs client secrets.
* Returns new error log id (0 on failure).
*/
public function logPaypalError(array $data): int
{
$this->ensureBillingPaypalErrorsTable();
$stmt = $this->db->prepare(
"INSERT INTO `{$this->prefix}billing_paypal_errors`
(context, error_code, message, paypal_debug_id, order_id, capture_id,
billing_order_id, user_id, raw_json)
VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)"
);
if (!$stmt) return 0;
$context = substr((string)($data['context'] ?? ''), 0, 64);
$errorCode = substr((string)($data['error_code'] ?? ''), 0, 128);
$message = (string)($data['message'] ?? '');
$debugId = isset($data['paypal_debug_id']) ? substr((string)$data['paypal_debug_id'], 0, 128) : null;
$orderId = isset($data['order_id']) ? substr((string)$data['order_id'], 0, 128) : null;
$captureId = isset($data['capture_id']) ? substr((string)$data['capture_id'], 0, 128) : null;
$billingOrderId = isset($data['billing_order_id']) ? intval($data['billing_order_id']) : null;
$userId = isset($data['user_id']) ? intval($data['user_id']) : null;
$rawJson = isset($data['raw_json'])
? (is_array($data['raw_json']) ? json_encode($data['raw_json']) : (string)$data['raw_json'])
: null;
// Truncate large payloads to avoid LONGTEXT bloat
if ($rawJson !== null && strlen($rawJson) > 65536) {
$rawJson = substr($rawJson, 0, 65536) . '…[truncated]';
}
$stmt->bind_param(
'ssssssiis',
$context, $errorCode, $message, $debugId, $orderId, $captureId,
$billingOrderId, $userId, $rawJson
);
if (!$stmt->execute()) { $stmt->close(); return 0; }
$id = (int)$stmt->insert_id;
$stmt->close();
return $id;
}
/**
* Return the $limit most recent rows from billing_paypal_errors.
* Returns empty array if the table does not exist.
*/
public function getRecentPaypalErrors(int $limit = 10): array
{
if (!$this->ensureBillingPaypalErrorsTable()) {
return [];
}
$stmt = $this->db->prepare(
"SELECT id, created_at, context, error_code, message,
paypal_debug_id, order_id, capture_id, billing_order_id, user_id
FROM `{$this->prefix}billing_paypal_errors`
ORDER BY id DESC
LIMIT ?"
);
if (!$stmt) return [];
$stmt->bind_param('i', $limit);
$stmt->execute();
return $stmt->get_result()->fetch_all(MYSQLI_ASSOC);
}
// ---------------------------------------------------------------
// Server home (billing state) helpers
// ---------------------------------------------------------------
/** Get server home billing info by home_id. */
public function getServerHomeBilling(int $homeId): ?array
{
$stmt = $this->db->prepare(
"SELECT home_id, home_name, user_id_main, billing_status, billing_expires_at,
billing_price, billing_rate_type, billing_players, billing_enabled,
next_invoice_date, server_expiration_date, billing_invoice_sent_at
FROM `{$this->prefix}server_homes`
WHERE home_id = ? LIMIT 1"
);
if (!$stmt) return null;
$stmt->bind_param('i', $homeId);
$stmt->execute();
$row = $stmt->get_result()->fetch_assoc();
$stmt->close();
return $row ?: null;
}
/** Update billing state fields on server_homes. */
public function updateServerHomeBilling(int $homeId, array $data): bool
{
$allowed = [
'billing_status', 'billing_expires_at', 'billing_price',
'billing_rate_type', 'billing_players', 'billing_enabled',
'next_invoice_date', 'server_expiration_date', 'billing_invoice_sent_at',
];
$set = [];
$params = [];
$types = '';
foreach ($allowed as $col) {
if (array_key_exists($col, $data)) {
$set[] = "`{$col}` = ?";
$params[] = $data[$col];
$val = $data[$col];
if ($val === null) {
$types .= 's'; // NULL binds safely as string in mysqli
} elseif (is_int($val)) {
$types .= 'i';
} elseif (is_float($val)) {
$types .= 'd';
} else {
$types .= 's';
}
}
}
if (empty($set)) return false;
$params[] = $homeId;
$types .= 'i';
$stmt = $this->db->prepare(
"UPDATE `{$this->prefix}server_homes` SET " . implode(', ', $set) . " WHERE home_id = ? LIMIT 1"
);
if (!$stmt) return false;
$stmt->bind_param($types, ...$params);
$ok = $stmt->execute();
$stmt->close();
return $ok;
}
// ---------------------------------------------------------------
// Service helpers
// ---------------------------------------------------------------
/** Get a billing service by ID. Returns null if not found / disabled. */
public function getService(int $serviceId, bool $mustBeEnabled = true): ?array
{
$extra = $mustBeEnabled ? ' AND enabled = 1' : '';
$stmt = $this->db->prepare(
"SELECT * FROM `{$this->prefix}billing_services` WHERE service_id = ?{$extra} LIMIT 1"
);
if (!$stmt) return null;
$stmt->bind_param('i', $serviceId);
$stmt->execute();
$row = $stmt->get_result()->fetch_assoc();
$stmt->close();
return $row ?: null;
}
/** Get enabled services (for storefront listing). */
public function getEnabledServices(): array
{
$res = $this->db->query(
"SELECT * FROM `{$this->prefix}billing_services` WHERE enabled = 1 ORDER BY service_name"
);
return $res ? $res->fetch_all(MYSQLI_ASSOC) : [];
}
// ---------------------------------------------------------------
// Legacy billing_orders helpers (kept for backward compat during migration)
// ---------------------------------------------------------------
/** Get an active order by order_id. */
public function getOrder(int $orderId): ?array
{
$stmt = $this->db->prepare(
"SELECT * FROM `{$this->prefix}billing_orders` WHERE order_id = ? LIMIT 1"
);
if (!$stmt) return null;
$stmt->bind_param('i', $orderId);
$stmt->execute();
$row = $stmt->get_result()->fetch_assoc();
$stmt->close();
return $row ?: null;
}
/** Extend an existing order's end_date. */
public function extendOrder(int $orderId, string $newEndDate, string $txid, string $now): bool
{
$stmt = $this->db->prepare(
"UPDATE `{$this->prefix}billing_orders`
SET status='Active', end_date=?, payment_txid=?, paid_ts=?
WHERE order_id=? LIMIT 1"
);
if (!$stmt) return false;
$stmt->bind_param('sssi', $newEndDate, $txid, $now, $orderId);
$ok = $stmt->execute();
$stmt->close();
return $ok;
}
public function getCouponByCode(string $couponCode): ?array
{
$stmt = $this->db->prepare(
"SELECT * FROM `{$this->prefix}billing_coupons`
WHERE code = ? AND is_active = 1
LIMIT 1"
);
if (!$stmt) {
return null;
}
$stmt->bind_param('s', $couponCode);
$stmt->execute();
$row = $stmt->get_result()->fetch_assoc();
$stmt->close();
return $row ?: null;
}
public function updateInvoiceFields(int $invoiceId, array $data): bool
{
return $this->updateAssoc('billing_invoices', 'invoice_id', $invoiceId, $data);
}
public function updateOrderFields(int $orderId, array $data): bool
{
return $this->updateAssoc('billing_orders', 'order_id', $orderId, $data);
}
private function hasColumn(string $table, string $column): bool
{
$cacheKey = $table . '.' . $column;
if (array_key_exists($cacheKey, $this->columnCache)) {
return $this->columnCache[$cacheKey];
}
$tableName = $this->db->real_escape_string($this->prefix . $table);
$columnName = $this->db->real_escape_string($column);
$res = $this->db->query(
"SELECT COUNT(*) AS cnt
FROM INFORMATION_SCHEMA.COLUMNS
WHERE TABLE_SCHEMA = DATABASE()
AND TABLE_NAME = '{$tableName}'
AND COLUMN_NAME = '{$columnName}'"
);
$exists = $res ? ((int)($res->fetch_assoc()['cnt'] ?? 0) > 0) : false;
$this->columnCache[$cacheKey] = $exists;
return $exists;
}
private function insertAssoc(string $table, array $data): int
{
if (empty($data)) {
return 0;
}
$columns = array_keys($data);
$placeholders = implode(',', array_fill(0, count($columns), '?'));
$sql = sprintf(
"INSERT INTO `%s%s` (%s) VALUES (%s)",
$this->prefix,
$table,
implode(',', array_map(static fn($field) => "`{$field}`", $columns)),
$placeholders
);
$stmt = $this->db->prepare($sql);
if (!$stmt) {
return 0;
}
[$types, $values] = $this->prepareBindValues($data);
$stmt->bind_param($types, ...$values);
if (!$stmt->execute()) {
$stmt->close();
return 0;
}
$id = (int)$stmt->insert_id;
$stmt->close();
return $id;
}
private function updateAssoc(string $table, string $idColumn, int $idValue, array $data): bool
{
$data = array_filter($data, static fn($value) => $value !== null);
if (empty($data)) {
return true;
}
$set = [];
foreach (array_keys($data) as $field) {
$set[] = "`{$field}` = ?";
}
$sql = sprintf(
"UPDATE `%s%s` SET %s WHERE `%s` = ? LIMIT 1",
$this->prefix,
$table,
implode(', ', $set),
$idColumn
);
$stmt = $this->db->prepare($sql);
if (!$stmt) {
return false;
}
[$types, $values] = $this->prepareBindValues($data);
$types .= 'i';
$values[] = $idValue;
$stmt->bind_param($types, ...$values);
$ok = $stmt->execute();
$stmt->close();
return $ok;
}
private function prepareBindValues(array $data): array
{
$types = '';
$values = [];
foreach ($data as $value) {
if (is_int($value)) {
$types .= 'i';
$values[] = $value;
} elseif (is_float($value)) {
$types .= 'd';
$values[] = $value;
} else {
$types .= 's';
$values[] = ($value === null) ? null : (string)$value;
}
}
return [$types, $values];
}
}

179
Panel/modules/billing/classes/BillingService.php Normal file
View file

@ -0,0 +1,179 @@
<?php
require_once __DIR__ . '/../classes/BillingRepository.php';
require_once __DIR__ . '/../classes/PaymentGatewayInterface.php';
/**
* BillingService — core business logic for the billing module.
*
* Responsibilities:
* - Calculate pricing
* - Create invoices
* - Process payment results (log transaction, mark invoice paid, update server home)
* - Extend / reset server billing expiration
*/
class BillingService
{
private BillingRepository $repo;
public function __construct(BillingRepository $repo)
{
$this->repo = $repo;
}
/**
* Calculate pricing for a new order.
*
* @param array $service Row from gsp_billing_services
* @param string $rateType 'daily' | 'monthly' | 'yearly'
* @param int $players Number of player slots
* @param int $qty Duration quantity (e.g. 2 = 2 months)
* @return array { rate_per_player, subtotal, total_due, period_days }
*/
public function calculatePrice(array $service, string $rateType, int $players, int $qty = 1): array
{
$qty = max(1, $qty);
$players = max(1, $players);
$rateType = 'monthly';
$basePrice = (float)($service['price_monthly'] ?? 0);
$periodDays = $qty * 31;
// price_monthly etc is the per-player per-period rate
$ratePerPlayer = $basePrice;
$subtotal = round($ratePerPlayer * $players * $qty, 2);
$totalDue = $subtotal;
return [
'rate_type' => $rateType,
'rate_per_player' => $ratePerPlayer,
'players' => $players,
'qty' => $qty,
'subtotal' => $subtotal,
'total_due' => $totalDue,
'period_days' => $periodDays,
];
}
/**
* Create a billing invoice row.
*
* @param array $pricing Result from calculatePrice()
* @param array $context { user_id, service_id, home_id, home_name, customer_name, customer_email, description }
* @return int New invoice_id (0 on failure)
*/
public function createInvoice(array $pricing, array $context): int
{
$now = date('Y-m-d H:i:s');
$periodStart = $now;
$periodEnd = date('Y-m-d H:i:s', strtotime('+' . $pricing['period_days'] . ' days'));
return $this->repo->createInvoice([
'user_id' => intval($context['user_id'] ?? 0),
'service_id' => intval($context['service_id'] ?? 0),
'home_id' => intval($context['home_id'] ?? 0),
'home_name' => $context['home_name'] ?? '',
'customer_name' => $context['customer_name'] ?? '',
'customer_email' => $context['customer_email'] ?? '',
'rate_type' => $pricing['rate_type'],
'rate_per_player' => $pricing['rate_per_player'],
'players' => $pricing['players'],
'period_start' => $periodStart,
'period_end' => $periodEnd,
'subtotal' => $pricing['subtotal'],
'total_due' => $pricing['total_due'],
'currency' => $context['currency'] ?? 'USD',
'payment_status' => 'unpaid',
'payment_method' => '',
'description' => $context['description'] ?? '',
]);
}
/**
* Process a successful payment result from a gateway.
*
* 1. Log the transaction
* 2. Mark invoice paid
* 3. Update server home billing state (extend or reset expiration)
*
* @param array $captureResult Result from PaymentGatewayInterface::handleCallback()
* @param int $invoiceId
* @param int $userId
* @param int $homeId
* @param array $invoiceRow The invoice row (from DB) — needed for period/pricing
* @return array { success: bool, transaction_id: string, error?: string }
*/
public function processPaymentSuccess(
array $captureResult,
int $invoiceId,
int $userId,
int $homeId,
array $invoiceRow
): array {
$txid = $captureResult['transaction_id'] ?? null;
$method = $captureResult['payment_method'] ?? 'paypal';
$amount = (float)($captureResult['amount'] ?? $invoiceRow['total_due'] ?? 0);
$currency = $captureResult['currency'] ?? $invoiceRow['currency'] ?? 'USD';
$now = date('Y-m-d H:i:s');
// 1. Log transaction
$this->repo->logTransaction([
'invoice_id' => $invoiceId,
'user_id' => $userId,
'home_id' => $homeId,
'payment_method' => $method,
'transaction_external_id' => $txid ?? '',
'amount' => $amount,
'currency' => $currency,
'status' => 'completed',
'raw_response' => $captureResult['raw_response'] ?? [],
]);
// 2. Mark invoice paid
if ($invoiceId > 0) {
$this->repo->markInvoicePaid($invoiceId, $txid ?? '', $method, $now);
}
// 3. Update server home billing state
if ($homeId > 0) {
$this->extendServerBilling($homeId, $invoiceRow, $now);
}
return ['success' => true, 'transaction_id' => $txid];
}
/**
* Extend or reset a server's billing expiration based on the invoice period.
*/
public function extendServerBilling(int $homeId, array $invoiceRow, string $now): void
{
$home = $this->repo->getServerHomeBilling($homeId);
$periodEnd = $invoiceRow['period_end'] ?? null;
if (!$periodEnd) {
$periodEnd = date('Y-m-d H:i:s', strtotime('+31 days'));
}
// If current expiry is in the future, extend from it; otherwise reset from period_end
$currentExpiry = $home['billing_expires_at'] ?? null;
if ($currentExpiry && strtotime($currentExpiry) > time()) {
// Calculate the period length from the invoice; fall back to rate_type if dates are missing
$periodStart = $invoiceRow['period_start'] ?? null;
$periodEndVal = $invoiceRow['period_end'] ?? null;
if ($periodStart && $periodEndVal) {
$currentPeriodSecs = strtotime($periodEndVal) - strtotime($periodStart);
} else {
$currentPeriodSecs = 31 * 86400;
}
$newExpiry = date('Y-m-d H:i:s', strtotime($currentExpiry) + max(86400, $currentPeriodSecs));
} else {
$newExpiry = $periodEnd;
}
$this->repo->updateServerHomeBilling($homeId, [
'billing_status' => 'active',
'billing_expires_at' => $newExpiry,
'next_invoice_date' => $newExpiry,
'server_expiration_date' => null,
'billing_invoice_sent_at' => null,
]);
}
}

30
Panel/modules/billing/classes/GatewayFactory.php Normal file
View file

@ -0,0 +1,30 @@
<?php
require_once __DIR__ . '/../classes/PaymentGatewayInterface.php';
require_once __DIR__ . '/../classes/PayPalGateway.php';
require_once __DIR__ . '/../classes/ManualGateway.php';
require_once __DIR__ . '/../classes/StripeGateway.php';
/**
* Factory for instantiating payment gateways by name.
*/
class GatewayFactory
{
/**
* @param string $name Gateway name: 'paypal', 'stripe', 'manual'
* @return PaymentGatewayInterface
* @throws InvalidArgumentException
*/
public static function make(string $name): PaymentGatewayInterface
{
switch (strtolower($name)) {
case 'paypal':
return PayPalGateway::fromConfig();
case 'manual':
return new ManualGateway();
case 'stripe':
return new StripeGateway();
default:
throw new InvalidArgumentException("Unknown payment gateway: {$name}");
}
}
}

36
Panel/modules/billing/classes/ManualGateway.php Normal file
View file

@ -0,0 +1,36 @@
<?php
require_once __DIR__ . '/../classes/PaymentGatewayInterface.php';
/**
* Manual / offline payment gateway.
* Used when an admin marks a payment as paid directly.
*/
class ManualGateway implements PaymentGatewayInterface
{
public function getName(): string { return 'manual'; }
public function createPayment(array $params): array
{
return ['success' => true, 'provider_order_id' => 'MANUAL-' . uniqid(), 'raw_response' => []];
}
public function handleCallback(array $params): array
{
$txid = $params['admin_txid'] ?? ('MANUAL-' . uniqid());
return [
'success' => true,
'transaction_id' => $txid,
'amount' => (float)($params['amount'] ?? 0),
'currency' => $params['currency'] ?? 'USD',
'status' => 'completed',
'raw_response' => $params,
];
}
public function verifyPayment(array $payload): bool { return true; }
public function getTransactionId(array $captureResult): ?string
{
return $captureResult['transaction_id'] ?? null;
}
}

194
Panel/modules/billing/classes/PayPalGateway.php Normal file
View file

@ -0,0 +1,194 @@
<?php
require_once __DIR__ . '/../classes/PaymentGatewayInterface.php';
class PayPalGateway implements PaymentGatewayInterface
{
private string $clientId;
private string $clientSecret;
private bool $sandbox;
private string $apiBase;
public function __construct(string $clientId, string $clientSecret, bool $sandbox = true)
{
$this->clientId = $clientId;
$this->clientSecret = $clientSecret;
$this->sandbox = $sandbox;
$this->apiBase = $sandbox
? 'https://api-m.sandbox.paypal.com'
: 'https://api-m.paypal.com';
}
/**
* Build a PayPalGateway instance from global config variables.
* Prefers the new gsp_paypal_* helper functions; falls back to legacy globals.
*/
public static function fromConfig(): self
{
if (function_exists('gsp_paypal_get_client_id')) {
$clientId = gsp_paypal_get_client_id();
$clientSecret = gsp_paypal_get_client_secret();
$sandbox = gsp_paypal_is_sandbox();
} else {
$clientId = $GLOBALS['paypal_client_id'] ?? '';
$clientSecret = $GLOBALS['paypal_client_secret'] ?? '';
$sandbox = (bool)($GLOBALS['paypal_sandbox'] ?? true);
}
return new self($clientId, $clientSecret, $sandbox);
}
public function getName(): string { return 'paypal'; }
/** Exchange client credentials for a Bearer token. Returns token or null. */
private function getAccessToken(): ?string
{
$ch = curl_init("{$this->apiBase}/v1/oauth2/token");
curl_setopt_array($ch, [
CURLOPT_RETURNTRANSFER => true,
CURLOPT_POST => true,
CURLOPT_POSTFIELDS => 'grant_type=client_credentials',
CURLOPT_HTTPHEADER => ['Accept: application/json'],
CURLOPT_USERPWD => "{$this->clientId}:{$this->clientSecret}",
]);
$body = curl_exec($ch);
$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($code !== 200 || !$body) return null;
$data = json_decode($body, true);
return $data['access_token'] ?? null;
}
public function createPayment(array $params): array
{
$token = $this->getAccessToken();
if (!$token) {
return ['success' => false, 'error' => 'paypal_oauth_failed'];
}
$amount = number_format((float)($params['amount'] ?? 0), 2, '.', '');
$currency = $params['currency'] ?? 'USD';
$invoiceId = $params['invoice_id'] ?? null;
$description = $params['description'] ?? 'Game Server Order';
$returnUrl = $params['return_url'] ?? '';
$cancelUrl = $params['cancel_url'] ?? '';
$items = $params['items'] ?? null;
$purchaseUnit = [
'amount' => ['currency_code' => $currency, 'value' => $amount],
'description' => $description,
'custom_id' => (string)($params['custom_id'] ?? $invoiceId ?? ''),
];
if ($invoiceId) {
$purchaseUnit['invoice_id'] = (string)$invoiceId;
}
if ($items) {
$purchaseUnit['items'] = $items;
$purchaseUnit['amount']['breakdown'] = [
'item_total' => ['currency_code' => $currency, 'value' => $amount],
];
}
$body = [
'intent' => 'CAPTURE',
'purchase_units' => [$purchaseUnit],
'application_context' => [
'return_url' => $returnUrl,
'cancel_url' => $cancelUrl,
'user_action' => 'PAY_NOW',
],
];
$ch = curl_init("{$this->apiBase}/v2/checkout/orders");
curl_setopt_array($ch, [
CURLOPT_RETURNTRANSFER => true,
CURLOPT_POST => true,
CURLOPT_POSTFIELDS => json_encode($body),
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
"Authorization: Bearer {$token}",
],
]);
$res = curl_exec($ch);
$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($code !== 201 || !$res) {
return ['success' => false, 'error' => 'paypal_create_order_failed', 'http_code' => $code];
}
$data = json_decode($res, true);
if (json_last_error() !== JSON_ERROR_NONE) {
return ['success' => false, 'error' => 'paypal_invalid_response'];
}
return [
'success' => true,
'provider_order_id' => $data['id'] ?? '',
'raw_response' => $data,
];
}
public function handleCallback(array $params): array
{
$providerOrderId = $params['order_id'] ?? null;
if (!$providerOrderId) {
return ['success' => false, 'error' => 'missing_order_id'];
}
$token = $this->getAccessToken();
if (!$token) {
return ['success' => false, 'error' => 'paypal_oauth_failed'];
}
$ch = curl_init("{$this->apiBase}/v2/checkout/orders/{$providerOrderId}/capture");
curl_setopt_array($ch, [
CURLOPT_RETURNTRANSFER => true,
CURLOPT_POST => true,
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
"Authorization: Bearer {$token}",
],
]);
$res = curl_exec($ch);
$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if (($code !== 200 && $code !== 201) || !$res) {
return ['success' => false, 'error' => 'paypal_capture_failed', 'http_code' => $code];
}
$data = json_decode($res, true);
if (json_last_error() !== JSON_ERROR_NONE) {
return ['success' => false, 'error' => 'paypal_invalid_capture_response'];
}
$status = $data['status'] ?? '';
if ($status !== 'COMPLETED') {
return ['success' => false, 'error' => 'payment_not_completed', 'status' => $status];
}
$capture = $data['purchase_units'][0]['payments']['captures'][0] ?? [];
$txid = $capture['id'] ?? null;
$amount = (float)($capture['amount']['value'] ?? 0);
$currency = $capture['amount']['currency_code'] ?? 'USD';
$customId = $data['purchase_units'][0]['custom_id'] ?? null;
return [
'success' => true,
'transaction_id' => $txid,
'amount' => $amount,
'currency' => $currency,
'status' => 'completed',
'custom_id' => $customId,
'raw_response' => $data,
];
}
public function verifyPayment(array $payload): bool
{
// For REST API flow (JS SDK capture), verification is done by the capture response itself.
// Webhook signature verification would be implemented here for webhook events.
return true;
}
public function getTransactionId(array $captureResult): ?string
{
return $captureResult['transaction_id'] ?? null;
}
}

40
Panel/modules/billing/classes/PaymentGatewayInterface.php Normal file
View file

@ -0,0 +1,40 @@
<?php
/**
* Payment Gateway Interface
* All payment providers must implement this contract.
*/
interface PaymentGatewayInterface
{
/**
* Create a payment/order on the provider side.
* @param array $params { amount, currency, invoice_id, description, return_url, cancel_url, items? }
* @return array { success: bool, provider_order_id: string, redirect_url?: string, error?: string }
*/
public function createPayment(array $params): array;
/**
* Handle a provider callback/capture (webhook or return).
* @param array $params Provider-specific parameters (e.g. { order_id } for PayPal)
* @return array { success: bool, transaction_id: string, amount: float, status: string, raw_response: array, error?: string }
*/
public function handleCallback(array $params): array;
/**
* Verify that a payment/webhook is authentic.
* @param array $payload Raw request body / headers
* @return bool
*/
public function verifyPayment(array $payload): bool;
/**
* Get the provider's external transaction ID from a capture result.
* @param array $captureResult Result from handleCallback()
* @return string|null
*/
public function getTransactionId(array $captureResult): ?string;
/**
* Return a short machine name for this gateway (e.g. 'paypal', 'stripe', 'manual').
*/
public function getName(): string;
}

25
Panel/modules/billing/classes/StripeGateway.php Normal file
View file

@ -0,0 +1,25 @@
<?php
require_once __DIR__ . '/../classes/PaymentGatewayInterface.php';
/**
* Stripe payment gateway stub.
* Implement this class when Stripe support is needed.
*/
class StripeGateway implements PaymentGatewayInterface
{
public function getName(): string { return 'stripe'; }
public function createPayment(array $params): array
{
return ['success' => false, 'error' => 'stripe_not_implemented'];
}
public function handleCallback(array $params): array
{
return ['success' => false, 'error' => 'stripe_not_implemented'];
}
public function verifyPayment(array $payload): bool { return false; }
public function getTransactionId(array $captureResult): ?string { return null; }
}

3
Panel/modules/billing/cleanupDB.sh Normal file
View file

@ -0,0 +1,3 @@
$test_id = 1362;
$db->query( "DROP USER 'server_" .$test_id ."'@localhost'");
mysql -uremoteuser -pDrV75Uyyxr9VFVVt -hmysql.iaregamer.com -e "DROP USER server_'${test_id}'"

107
Panel/modules/billing/create_coupons_table.sql Normal file
View file

@ -0,0 +1,107 @@
-- Enhanced coupon system for billing module
-- This creates a flexible coupon system with game filters and usage tracking
-- Table prefix is hardcoded to gsp_ for standalone billing module
-- Drop existing table if upgrading from old coupon module
DROP TABLE IF EXISTS `gsp_billing_coupons`;
-- Create enhanced coupons table
CREATE TABLE `gsp_billing_coupons` (
`coupon_id` INT(11) NOT NULL AUTO_INCREMENT,
`code` VARCHAR(50) NOT NULL UNIQUE,
`name` VARCHAR(255) NOT NULL DEFAULT '',
`description` TEXT,
`discount_percent` DECIMAL(5,2) NOT NULL DEFAULT 0.00,
`usage_type` ENUM('one_time', 'permanent') NOT NULL DEFAULT 'one_time',
`game_filter_type` ENUM('all_games', 'specific_games') NOT NULL DEFAULT 'all_games',
`game_filter_list` TEXT COMMENT 'JSON array of game keys when game_filter_type=specific_games',
`max_uses` INT(11) DEFAULT NULL COMMENT 'NULL for unlimited uses',
`current_uses` INT(11) NOT NULL DEFAULT 0,
`expires` DATETIME DEFAULT NULL,
`created_date` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
`created_by` INT(11) DEFAULT NULL,
`is_active` TINYINT(1) NOT NULL DEFAULT 1,
PRIMARY KEY (`coupon_id`),
UNIQUE KEY `idx_code` (`code`),
KEY `idx_active_expires` (`is_active`, `expires`),
KEY `idx_created_by` (`created_by`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8mb4;
-- Add coupon_id field to billing_orders if it doesn't exist
SET @tablename = 'gsp_billing_orders';
SET @checkIfColumnExists = (
SELECT COUNT(*)
FROM information_schema.COLUMNS
WHERE TABLE_SCHEMA = DATABASE()
AND TABLE_NAME = @tablename
AND COLUMN_NAME = 'coupon_id'
);
SET @addColumn = IF(@checkIfColumnExists = 0,
'ALTER TABLE `gsp_billing_orders` ADD COLUMN `coupon_id` INT(11) DEFAULT NULL AFTER `user_id`, ADD KEY `idx_coupon` (`coupon_id`)',
'SELECT "Column coupon_id already exists in gsp_billing_orders"'
);
PREPARE stmt FROM @addColumn;
EXECUTE stmt;
DEALLOCATE PREPARE stmt;
-- Add coupon_id field to billing_invoices if it doesn't exist
SET @tablename = 'gsp_billing_invoices';
SET @checkIfColumnExists = (
SELECT COUNT(*)
FROM information_schema.COLUMNS
WHERE TABLE_SCHEMA = DATABASE()
AND TABLE_NAME = @tablename
AND COLUMN_NAME = 'coupon_id'
);
SET @addColumn = IF(@checkIfColumnExists = 0,
'ALTER TABLE `gsp_billing_invoices` ADD COLUMN `coupon_id` INT(11) DEFAULT NULL AFTER `user_id`, ADD KEY `idx_coupon` (`coupon_id`)',
'SELECT "Column coupon_id already exists in gsp_billing_invoices"'
);
PREPARE stmt FROM @addColumn;
EXECUTE stmt;
DEALLOCATE PREPARE stmt;
-- Add discount_amount field to billing_invoices to track actual discount applied
SET @checkIfColumnExists = (
SELECT COUNT(*)
FROM information_schema.COLUMNS
WHERE TABLE_SCHEMA = DATABASE()
AND TABLE_NAME = 'gsp_billing_invoices'
AND COLUMN_NAME = 'discount_amount'
);
SET @addColumn = IF(@checkIfColumnExists = 0,
'ALTER TABLE `gsp_billing_invoices` ADD COLUMN `discount_amount` DECIMAL(10,2) NOT NULL DEFAULT 0.00 AFTER `amount`',
'SELECT "Column discount_amount already exists in gsp_billing_invoices"'
);
PREPARE stmt FROM @addColumn;
EXECUTE stmt;
DEALLOCATE PREPARE stmt;
-- Add discount_amount field to billing_orders to track permanent discounts
SET @checkIfColumnExists = (
SELECT COUNT(*)
FROM information_schema.COLUMNS
WHERE TABLE_SCHEMA = DATABASE()
AND TABLE_NAME = 'gsp_billing_orders'
AND COLUMN_NAME = 'discount_amount'
);
SET @addColumn = IF(@checkIfColumnExists = 0,
'ALTER TABLE `gsp_billing_orders` ADD COLUMN `discount_amount` DECIMAL(10,2) NOT NULL DEFAULT 0.00 AFTER `price`',
'SELECT "Column discount_amount already exists in gsp_billing_orders"'
);
PREPARE stmt FROM @addColumn;
EXECUTE stmt;
DEALLOCATE PREPARE stmt;
-- Sample coupons for testing
INSERT INTO `gsp_billing_coupons` (`code`, `name`, `description`, `discount_percent`, `usage_type`, `game_filter_type`, `game_filter_list`, `expires`) VALUES
('WELCOME10', 'Welcome 10% Off', 'New customer welcome discount - 10% off any game', 10.00, 'one_time', 'all_games', NULL, DATE_ADD(NOW(), INTERVAL 1 YEAR)),
('ARMA25', 'Arma Series 25% Off', 'Save 25% on any Arma game server', 25.00, 'permanent', 'specific_games', '["arma2_win32", "arma2oa_win32", "arma3_linux32", "arma3_linux64", "arma3_win64", "arma-reforger_linux64", "arma-reforger_win64"]', NULL);

34
Panel/modules/billing/create_invoices_table.sql Normal file
View file

@ -0,0 +1,34 @@
-- Create billing_invoices table for invoice-first flow
-- Run this SQL to enable the new billing system
-- Table prefix is hardcoded to gsp_ for standalone billing module
CREATE TABLE IF NOT EXISTS `gsp_billing_invoices` (
`invoice_id` INT(11) NOT NULL AUTO_INCREMENT,
`order_id` INT(11) NOT NULL DEFAULT 0,
`user_id` INT(11) NOT NULL,
`service_id` INT(11) NOT NULL,
`home_name` VARCHAR(255) NOT NULL DEFAULT '',
`ip` INT(11) NOT NULL DEFAULT 0,
`max_players` INT(11) NOT NULL DEFAULT 0,
`remote_control_password` VARCHAR(255) NULL,
`ftp_password` VARCHAR(255) NULL,
`customer_name` VARCHAR(255) NOT NULL DEFAULT '',
`customer_email` VARCHAR(255) NOT NULL DEFAULT '',
`amount` FLOAT(15,2) NOT NULL DEFAULT 0,
`currency` VARCHAR(3) NOT NULL DEFAULT 'USD',
`status` VARCHAR(16) NOT NULL DEFAULT 'due',
`invoice_date` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
`due_date` DATETIME NULL,
`paid_date` DATETIME NULL,
`payment_txid` VARCHAR(255) NULL,
`payment_method` VARCHAR(50) NULL,
`description` VARCHAR(500) NOT NULL DEFAULT '',
`invoice_duration` VARCHAR(16) NOT NULL DEFAULT 'month',
`qty` INT(11) NOT NULL DEFAULT 1,
PRIMARY KEY (`invoice_id`),
KEY `order_id` (`order_id`),
KEY `user_id` (`user_id`),
KEY `status` (`status`),
KEY `due_date` (`due_date`),
KEY `service_id` (`service_id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8mb4;

1535
Panel/modules/billing/create_servers.php Normal file
View file

File diff suppressed because it is too large Load diff

433
Panel/modules/billing/cron-shop.php Normal file
View file

@ -0,0 +1,433 @@
<?php
/*
*
* OGP / GSP - Open Game Panel / Game Server Panel
* Copyright (C) 2008 - 2017 The OGP Development Team
*
* http://www.opengamepanel.org/
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*
*
* BILLING CRON - Three-Status Lifecycle
* ========================================
*
* Operates on server_homes.billing_status (separate from game-server runtime state).
*
* Status values:
* Active - Server is current; no unpaid renewal invoice.
* Invoiced - Renewal invoice generated; payment due.
* Expired - Invoice not paid by due date; server awaiting deletion.
*
* Steps run each night:
* A. Active -> Invoiced : next_invoice_date has arrived -> create {prefix}invoices record.
* B. Invoiced -> Expired : server_expiration_date passed and invoice unpaid.
* C. Expired -> Deleted : past delete_after_expired_days grace window -> remove server.
* D. Paid invoices (safety net): set server and invoice back to Active.
*
* Prerequisites (run once):
* sql/update_billing_status_active_invoiced_expired.sql
*/
chdir(realpath(dirname(__FILE__))); /* Change to the billing module directory */
chdir("../.."); /* Step back to the OGP/GSP web root */
error_reporting(E_ALL);
ini_set('display_errors', '1');
define("CONFIG_FILE", "includes/config.inc.php");
require_once("includes/functions.php");
require_once("includes/helpers.php");
require_once("includes/html_functions.php");
require_once("modules/config_games/server_config_parser.php");
require_once("includes/lib_remote.php");
require_once(CONFIG_FILE);
// Connect using the panel's DB helper (provides $db with logger(), resultQuery(), etc.)
$db = createDatabaseConnection(
$db_type, $db_host, $db_user, $db_pass, $db_name, $table_prefix,
isset($db_port) ? $db_port : null
);
$panel_settings = $db->getSettings();
if (!empty($panel_settings['time_zone'])) {
date_default_timezone_set($panel_settings['time_zone']);
}
$rundate = date('Y-m-d H:i:s');
$db->logger("BILLING-CRON: ===== Lifecycle automation started at {$rundate} =====");
// ----------------------------------------------------------------
// Load global billing config (grace_days, delete_after_expired_days)
// Falls back to safe defaults when {prefix}billing_config is empty.
// ----------------------------------------------------------------
$cfg_rows = $db->resultQuery(
"SELECT * FROM {$table_prefix}billing_config WHERE game_key IS NULL AND enabled = 1 ORDER BY config_id ASC LIMIT 1"
);
$global_cfg = is_array($cfg_rows) && !empty($cfg_rows) ? $cfg_rows[0] : [];
$grace_days = intval($global_cfg['grace_days'] ?? 0);
$delete_after_days = intval($global_cfg['delete_after_expired_days'] ?? 7);
$default_rate_type = $global_cfg['rate_type'] ?? 'monthly';
$default_price_player = floatval($global_cfg['price_per_player'] ?? 0.00);
$db->logger("BILLING-CRON: Config => grace_days={$grace_days}, delete_after={$delete_after_days}, rate={$default_rate_type}");
// ======================================================================
// STEP A - Active -> Invoiced
// Find billing-enabled servers whose next_invoice_date has arrived
// and that do not already have an open 'Invoiced' renewal invoice.
// ======================================================================
$db->logger("BILLING-CRON: --- Step A: Active -> Invoiced ---");
$due_for_invoice = $db->resultQuery("
SELECT sh.home_id, sh.home_name, sh.user_id_main AS user_id,
sh.next_invoice_date, sh.server_expiration_date,
bo.price, bo.invoice_duration, bo.qty, bo.order_id,
COALESCE(bs.price_monthly, 0) AS svc_price_monthly,
u.users_email,
CONCAT(COALESCE(u.users_fname,''), ' ', COALESCE(u.users_lname,'')) AS customer_name
FROM {$table_prefix}server_homes sh
LEFT JOIN {$table_prefix}users u ON u.user_id = sh.user_id_main
LEFT JOIN {$table_prefix}billing_orders bo
ON bo.home_id = sh.home_id AND bo.status = 'Active'
LEFT JOIN {$table_prefix}billing_services bs ON bs.service_id = bo.service_id
WHERE sh.billing_enabled = 1
AND sh.billing_status = 'Active'
AND sh.next_invoice_date IS NOT NULL
AND sh.next_invoice_date <= NOW()
AND NOT EXISTS (
SELECT 1 FROM {$table_prefix}billing_invoices inv
WHERE inv.home_id = sh.home_id AND inv.billing_status = 'Invoiced'
)
ORDER BY sh.home_id ASC
");
if (is_array($due_for_invoice)) {
foreach ($due_for_invoice as $srv) {
$home_id = intval($srv['home_id']);
$user_id = intval($srv['user_id']);
$home_name = $srv['home_name'] ?? 'Server #' . $home_id;
$qty = max(1, intval($srv['qty'] ?? 1));
// Normalise rate_type to the ENUM values used in {prefix}invoices
$raw_rate = strtolower($srv['invoice_duration'] ?? $default_rate_type);
$rate_map = ['day' => 'daily', 'month' => 'monthly', 'year' => 'yearly'];
$rate_type = $rate_map[$raw_rate] ?? $raw_rate;
// Pricing: billing_config > billing_orders flat price
$price_per_player = $default_price_player;
$player_slots = max(0, intval($srv['qty'] ?? 0));
$subtotal = $price_per_player * max(1, $player_slots);
if ($subtotal == 0.00 && floatval($srv['price'] ?? 0) > 0) {
$subtotal = floatval($srv['price']);
}
$total_due = $subtotal;
// Calculate due_date: now + 1 billing period
$period_map = ['daily' => '+1 day', 'monthly' => '+1 month', 'yearly' => '+1 year'];
$due_date_ts = strtotime($period_map[$rate_type], time());
$due_date = date('Y-m-d H:i:s', $due_date_ts);
// Guard: skip if an invoice for this exact period already exists
$exists = $db->resultQuery("
SELECT invoice_id FROM {$table_prefix}billing_invoices
WHERE home_id = {$home_id}
AND due_date = '" . $db->realEscapeSingle($due_date) . "'
LIMIT 1
");
if (is_array($exists) && !empty($exists)) {
$db->logger("BILLING-CRON: Step A - SKIP home {$home_id}: invoice for this period already exists");
continue;
}
// Create renewal invoice in {prefix}billing_invoices
$db->query("
INSERT INTO {$table_prefix}billing_invoices
(home_id, user_id, due_date, billing_status, rate_type,
rate_per_player, players, qty, subtotal, total_due)
VALUES (
{$home_id}, {$user_id},
'" . $db->realEscapeSingle($due_date) . "',
'Invoiced',
'" . $db->realEscapeSingle($rate_type) . "',
" . number_format($price_per_player, 2, '.', '') . ",
{$player_slots},
{$qty},
" . number_format($subtotal, 2, '.', '') . ",
" . number_format($total_due, 2, '.', '') . "
)
");
$new_invoice_id = $db->lastInsertId();
// Update server_homes: set Invoiced, store invoice id and expiration date
$db->query("
UPDATE {$table_prefix}server_homes
SET billing_status = 'Invoiced',
server_expiration_date = '" . $db->realEscapeSingle($due_date) . "',
last_invoice_id = " . intval($new_invoice_id) . "
WHERE home_id = {$home_id}
");
$db->logger("BILLING-CRON: Step A - INVOICED home {$home_id} (invoice #{$new_invoice_id}, due {$due_date})");
// Send renewal notice
if (!empty($srv['users_email'])) {
$settings = $db->getSettings();
$subject = "Renewal Invoice for {$home_name} - " . ($panel_settings['panel_name'] ?? 'Game Server Panel');
$message = "Your server '{$home_name}' (ID: {$home_id}) has a renewal invoice due on "
. date('F j, Y', $due_date_ts) . "."
. "<br><br>Amount Due: \$" . number_format($total_due, 2)
. "<br>Due Date: " . date('F j, Y', $due_date_ts)
. "<br><br>Please log in to pay your invoice and keep your server active."
. "<br><br>Thank you!";
if (!mymail($srv['users_email'], $subject, $message, $settings)) {
$db->logger("BILLING-CRON: Step A - Email FAILED for home {$home_id}");
}
}
}
}
// ======================================================================
// STEP B - Invoiced -> Expired
// Servers whose expiration date has passed and whose last invoice
// is still unpaid.
// ======================================================================
$db->logger("BILLING-CRON: --- Step B: Invoiced -> Expired (grace_days={$grace_days}) ---");
$past_due = $db->resultQuery("
SELECT sh.home_id, sh.home_name, sh.user_id_main AS user_id,
sh.last_invoice_id, sh.server_expiration_date,
u.users_email
FROM {$table_prefix}server_homes sh
LEFT JOIN {$table_prefix}users u ON u.user_id = sh.user_id_main
WHERE sh.billing_enabled = 1
AND sh.billing_status = 'Invoiced'
AND sh.server_expiration_date IS NOT NULL
AND DATE(sh.server_expiration_date) < DATE_SUB(CURDATE(), INTERVAL {$grace_days} DAY)
AND (
sh.last_invoice_id IS NULL
OR EXISTS (
SELECT 1 FROM {$table_prefix}billing_invoices inv
WHERE inv.invoice_id = sh.last_invoice_id
AND inv.billing_status = 'Invoiced'
AND inv.paid_date IS NULL
)
)
ORDER BY sh.home_id ASC
");
if (is_array($past_due)) {
foreach ($past_due as $srv) {
$home_id = intval($srv['home_id']);
$last_invoice_id = intval($srv['last_invoice_id'] ?? 0);
// Mark server Expired
$db->query("
UPDATE {$table_prefix}server_homes
SET billing_status = 'Expired'
WHERE home_id = {$home_id}
");
// Mark matching invoice Expired (if still unpaid)
if ($last_invoice_id > 0) {
$db->query("
UPDATE {$table_prefix}billing_invoices
SET billing_status = 'Expired'
WHERE invoice_id = {$last_invoice_id}
AND billing_status = 'Invoiced'
AND paid_date IS NULL
");
}
$db->logger("BILLING-CRON: Step B - EXPIRED home {$home_id}");
// Notify user
if (!empty($srv['users_email'])) {
$settings = $db->getSettings();
$home_name = $srv['home_name'] ?? 'Server #' . $home_id;
$subject = "Server Expired - {$home_name} - " . ($panel_settings['panel_name'] ?? 'Game Server Panel');
$message = "Your server '{$home_name}' (ID: {$home_id}) has expired due to non-payment."
. "<br><br>The server will be permanently deleted in {$delete_after_days} day(s) if payment is not received."
. "<br><br>Please log in and pay your outstanding invoice to restore service."
. "<br><br>Thank you.";
if (!mymail($srv['users_email'], $subject, $message, $settings)) {
$db->logger("BILLING-CRON: Step B - Email FAILED for home {$home_id}");
}
}
}
}
// ======================================================================
// STEP C - Expired -> Deleted
// Servers that have been Expired longer than delete_after_expired_days.
// ======================================================================
$db->logger("BILLING-CRON: --- Step C: Expired -> Deleted (window={$delete_after_days}d) ---");
$to_delete = $db->resultQuery("
SELECT sh.home_id, sh.home_name, sh.user_id_main AS user_id,
sh.server_expiration_date,
u.users_email
FROM {$table_prefix}server_homes sh
LEFT JOIN {$table_prefix}users u ON u.user_id = sh.user_id_main
WHERE sh.billing_enabled = 1
AND sh.billing_status = 'Expired'
AND sh.server_expiration_date IS NOT NULL
AND DATE(sh.server_expiration_date) < DATE_SUB(CURDATE(), INTERVAL {$delete_after_days} DAY)
ORDER BY sh.home_id ASC
");
if (is_array($to_delete)) {
foreach ($to_delete as $srv) {
$home_id = intval($srv['home_id']);
$user_id = intval($srv['user_id']);
$home_name = $srv['home_name'] ?? 'Server #' . $home_id;
// Fetch home info for remote deletion
$home_info = $db->getGameHomeWithoutMods($home_id);
if ($home_info) {
$server_info = $db->getRemoteServerById($home_info['remote_server_id']);
if ($server_info) {
$remote = new OGPRemoteLibrary(
$server_info['agent_ip'],
$server_info['agent_port'],
$server_info['encryption_key'],
$server_info['timeout']
);
// Stop the running server process
$server_xml = read_server_config(SERVER_CONFIG_LOCATION . "/" . $home_info['home_cfg_file']);
$control_type = isset($server_xml->control_protocol_type)
? (string)$server_xml->control_protocol_type : "";
$addresses = $db->getHomeIpPorts($home_id);
foreach ((array)$addresses as $addr) {
$remote->remote_stop_server(
$home_id, $addr['ip'], $addr['port'],
$server_xml->control_protocol,
$home_info['control_password'],
$control_type,
$home_info['home_path']
);
}
// Disable FTP
$ftp_login = !empty($home_info['ftp_login']) ? $home_info['ftp_login'] : $home_id;
$remote->ftp_mgr("userdel", $ftp_login);
$db->changeFtpStatus('disabled', $home_id);
// Unassign from user
$db->unassignHomeFrom("user", $user_id, $home_id);
// Delete home record from panel DB
$db->deleteGameHome($home_id);
// Remove server files on remote agent
$remote->remove_home($home_info['home_path']);
// Drop any per-server database/user accounts
@$db->query("DROP USER 'user_{$home_id}'@'%'");
@$db->query("DROP USER 'user_{$home_id}'@'localhost'");
@$db->query("DROP USER 'server_{$home_id}'@'%'");
@$db->query("DROP USER 'server_{$home_id}'@'localhost'");
@$db->query("DROP DATABASE IF EXISTS user_{$home_id}");
@$db->query("DROP DATABASE IF EXISTS server_{$home_id}");
} else {
$db->logger("BILLING-CRON: Step C - WARNING: no remote server info for home {$home_id}; removing panel record only");
$db->deleteGameHome($home_id);
}
} else {
$db->logger("BILLING-CRON: Step C - WARNING: home {$home_id} not found in panel DB (already removed)");
}
// Mark billing_orders record as Expired and clear home_id reference
$db->query("
UPDATE {$table_prefix}billing_orders
SET status = 'Expired',
home_id = '0'
WHERE home_id = '{$home_id}'
");
// Mark any open billing_invoices for this home as Expired
$db->query("
UPDATE {$table_prefix}billing_invoices
SET billing_status = 'Expired'
WHERE home_id = {$home_id}
AND billing_status = 'Invoiced'
");
$db->logger("BILLING-CRON: Step C - DELETED home {$home_id}");
// Notify user
if (!empty($srv['users_email'])) {
$settings = $db->getSettings();
$subject = "Server Permanently Deleted - {$home_name} - " . ($panel_settings['panel_name'] ?? 'Game Server Panel');
$message = "Your server '{$home_name}' (ID: {$home_id}) has been permanently deleted."
. "<br><br>The server expired and was removed after the grace period."
. "<br><br>If this was an error, contact us immediately - we may be able to restore from backup."
. "<br><br>Thank you for being a customer. We hope to serve you again.";
if (!mymail($srv['users_email'], $subject, $message, $settings)) {
$db->logger("BILLING-CRON: Step C - Email FAILED for home {$home_id}");
}
}
}
}
// ======================================================================
// STEP D - Paid invoice safety net
// If a payment was recorded on a {prefix}invoices row but the
// server_home was not updated (e.g. race condition at capture time),
// correct it here so the server is restored to Active.
// ======================================================================
$db->logger("BILLING-CRON: --- Step D: Paid invoice safety-net ---");
$paid_invoices = $db->resultQuery("
SELECT inv.invoice_id, inv.home_id, inv.rate_type,
sh.billing_status
FROM {$table_prefix}billing_invoices inv
INNER JOIN {$table_prefix}server_homes sh ON sh.home_id = inv.home_id
WHERE inv.billing_status = 'Invoiced'
AND sh.billing_status = 'Invoiced'
AND (inv.paid_date IS NOT NULL OR inv.payment_txid IS NOT NULL)
ORDER BY inv.invoice_id ASC
");
if (is_array($paid_invoices)) {
foreach ($paid_invoices as $inv) {
$home_id = intval($inv['home_id']);
$invoice_id = intval($inv['invoice_id']);
$rate_type = $inv['rate_type'] ?? 'monthly';
// Calculate next_invoice_date based on rate_type
$period_map = ['daily' => '+1 day', 'monthly' => '+1 month', 'yearly' => '+1 year'];
$next_invoice_date = date('Y-m-d H:i:s', strtotime($period_map[$rate_type] ?? '+1 month'));
$db->query("
UPDATE {$table_prefix}billing_invoices
SET billing_status = 'Active'
WHERE invoice_id = {$invoice_id}
");
$db->query("
UPDATE {$table_prefix}server_homes
SET billing_status = 'Active',
next_invoice_date = '" . $db->realEscapeSingle($next_invoice_date) . "',
server_expiration_date = NULL
WHERE home_id = {$home_id}
");
$db->logger("BILLING-CRON: Step D - RESTORED home {$home_id} to Active via paid invoice #{$invoice_id}");
}
}
$db->logger("BILLING-CRON: ===== Lifecycle automation completed at " . date('Y-m-d H:i:s') . " =====");

423
Panel/modules/billing/css/header.css Normal file
View file

@ -0,0 +1,423 @@
/* Global font family - legible sans-serif stack */
html,
body {
width: 100%;
max-width: 100%;
overflow-x: hidden;
}
body {
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";
}
#gsw-site {
width: 100%;
max-width: 100%;
overflow-x: hidden;
}
.gsw-top{display:flex;align-items:center;gap:12px;padding:12px 24px;background:#fff;border-bottom:1px solid rgba(0,0,0,0.05);}
.gsw-top img{height:40px;width:auto;display:block}
.gsw-top .gsw-site-name{font-weight:700;font-size:1.1rem;color:#333}
@media(max-width:480px){.gsw-top{padding:10px}.gsw-top img{height:32px}.gsw-top .gsw-site-name{font-size:1rem}}
/* Header: two-row layout with left/right divs on top row */
.gsw-header{display:flex;flex-direction:column;align-items:stretch;padding:0;background:transparent;margin-bottom:18px;}
/* Top row: contains left (logo/title) and right (login) divs as separate blocks */
#gsw-site .gsw-header-top{display:flex;flex-direction:row;justify-content:space-between;align-items:center;padding:12px 20px;background:#0b3b6f !important;backdrop-filter:blur(6px);box-shadow:0 2px 6px rgba(0,0,0,0.18);width:100%;max-width:100%;}
/* Left div: logo + title, takes up available space */
#gsw-site .gsw-header-left{flex:1 1 auto;display:flex;align-items:center;font-weight:700;font-size:1.4rem;color:#fff;padding-left:8px;}
/* Right div: login/logout button area, shrinks to content */
#gsw-site .gsw-header-right{flex:0 0 auto;display:flex;align-items:center;justify-content:flex-end;gap:12px;padding-right:8px;}
.gsw-logo{height:48px;width:auto;margin-right:12px;display:block}
.gsw-logo-link{display:flex;align-items:center;gap:10px;color:#fff;text-decoration:none}
.gsw-header-left a{color:#fff;text-decoration:none;}
/* Bottom row: centered navigation menu */
#gsw-site .gsw-header-bottom{display:flex;justify-content:center;padding:10px 20px;background:#0b3b6f !important;width:100%;max-width:100%;}
.gsw-header-nav{display:flex;gap:22px;align-items:center;max-width:100%;}
.gsw-nav-link{color:#fff;text-decoration:none;font-size:0.98rem;transition:opacity 0.2s;padding:6px 8px;border-radius:6px;}
.gsw-nav-link:hover{opacity:0.9;text-decoration:underline;background:rgba(255,255,255,0.03);}
/* My Account link styling - larger font in middle of menu */
.gsw-nav-link-myaccount{font-size:1.15rem;font-weight:600;padding:6px 12px;}
.gsw-user-info{color:#fff;font-size:0.95rem;margin-right:8px;}
/* Login/Logout button with gradient */
#gsw-site .gsw-header-btn,
#gsw-site a.gsw-header-btn{padding:10px 18px;background:linear-gradient(135deg,#667eea 0%,#764ba2 100%) !important;color:#fff !important;border-radius:8px;text-decoration:none;font-weight:700;transition:transform 0.2s;border:none;display:inline-block;cursor:pointer;}
#gsw-site .gsw-header-btn:hover,
#gsw-site a.gsw-header-btn:hover{transform:translateY(-2px);text-decoration:none;color:#fff !important;}
@media(max-width:768px){
.gsw-header{flex-direction:column;gap:12px;}
.gsw-header-nav{flex-wrap:wrap;justify-content:center;}
}
/* Banner styling (index only) */
.gsw-banner{width:100%;text-align:center;margin-bottom:18px}
.gsw-banner img{max-width:100%;height:auto;display:inline-block}
/* Footer styles: ultra-specific to override any theme CSS */
html body #gsw-site footer.gsw-footer{background:#0b3b6f !important;color:#fff;padding:18px 12px;text-align:center;margin-top:28px;}
#gsw-site footer.gsw-footer a{color:#cfe6ff;text-decoration:none;}
#gsw-site footer.gsw-footer a:hover{text-decoration:underline;}
/* Page color scheme: prefer dark text on light backgrounds by default */
/* Dark site theme: dark background with light text */
body { color: #fff; background: #0b1020; }
/* Make links readable on dark background */
a { color: #7fb3ff; }
/* But override for styled buttons/links inside our site wrapper */
#gsw-site a.gsw-btn,
#gsw-site a.gsw-btn-secondary,
#gsw-site a.gsw-header-btn,
#gsw-site .gsw-nav-link{color:#fff !important;}
/* Form inputs: light text on darker inputs by default */
input, textarea, select, button { color: #fff; background: #11141f; border: 1px solid rgba(255,255,255,0.06); }
.cart-badge{display:inline-block;background:#ff3b30;color:#fff;font-size:0.8rem;padding:2px 6px;border-radius:12px;margin-left:6px;vertical-align:middle}
.site-panel{width:100%; max-width:1000px; margin:auto; padding:1rem; background:rgba(0,0,0,0.25); border-radius:0.75rem;}
.site-panel-title{font-size:1.5rem; font-weight:bold; color:#fff; margin-bottom:1.5rem; text-align:center}
.cart-table{border-collapse:separate; border-spacing:0; width:100%; color:#fff}
.cart-table thead{background:rgba(255,255,255,0.03)}
.cart-table th, .cart-table td{padding:1rem 1.5rem; text-align:left; border-bottom:1px solid rgba(255,255,255,0.03)}
.cart-total-row{background:transparent; font-weight:bold}
.cart-total-label{padding:1rem 1.5rem; text-align:right; border-top:2px solid rgba(255,255,255,0.06); font-weight:600; color:#fff}
.cart-total-value{padding:1rem 1.5rem; text-align:left; border-top:2px solid rgba(255,255,255,0.06); font-weight:600; color:#fff; font-size:1.1rem}
/* Utility classes */
.container-wide{width:100%; max-width:1000px; margin:28px auto; padding-inline:12px; box-sizing:border-box;}
.panel{background:rgba(0,0,0,0.25); padding:16px; border-radius:8px}
.muted{color:rgba(255,255,255,0.6)}
.center{text-align:center}
.pad-40{padding:40px}
.btn-danger{background:#ef4444;color:#fff;border:none;padding:6px 10px;border-radius:6px}
.btn-primary{background:linear-gradient(135deg,#667eea 0%,#764ba2 100%);color:#fff;border:none;padding:8px 14px;border-radius:8px;font-weight:700}
/* Primary gradient button for links and buttons */
#gsw-site .gsw-btn,
#gsw-site a.gsw-btn,
#gsw-site button.gsw-btn{display:inline-block;padding:12px 24px;background:linear-gradient(135deg,#667eea 0%,#764ba2 100%) !important;color:#fff !important;text-decoration:none;border-radius:8px;font-weight:600;transition:transform 0.2s;border:none;cursor:pointer;}
#gsw-site .gsw-btn:hover,
#gsw-site a.gsw-btn:hover,
#gsw-site button.gsw-btn:hover{transform:translateY(-2px);color:#fff !important;text-decoration:none;}
/* Renew button: slightly smaller but matching gradient, used on My Account cards */
#gsw-site .renew-btn, #gsw-site a.renew-btn, #gsw-site button.renew-btn{
display:inline-block;
padding:8px 14px;
background:linear-gradient(135deg,#f59e0b 0%,#ef4444 100%) !important;
color:#fff !important;
text-decoration:none;
border-radius:8px;
font-weight:700;
transition:transform 0.12s;
border:none;
cursor:pointer;
}
#gsw-site .renew-btn:hover, #gsw-site a.renew-btn:hover, #gsw-site button.renew-btn:hover{transform:translateY(-2px);}
#gsw-site .gsw-btn-secondary,
#gsw-site a.gsw-btn-secondary{display:inline-block;padding:10px 16px;background:rgba(255,255,255,0.06);color:#fff !important;text-decoration:none;border-radius:8px;border:1px solid rgba(255,255,255,0.06);cursor:pointer;}
#gsw-site .gsw-btn-secondary:hover,
#gsw-site a.gsw-btn-secondary:hover{color:#fff !important;text-decoration:none;}
.float-left{float:left}
.clearfix::after{content:"";display:table;clear:both}
.table-compact th,.table-compact td{padding:0.5rem}
/* Small spacing utilities used by a few pages */
.mb-18{margin-bottom:18px}
.mt-6{margin-top:6px}
.mt-12{margin-top:12px}
/* Padding helper used where a wider card/panel is desired */
.p-30-20{padding:30px 20px}
/* Decorative container used in a few places */
.decorative-bottom{border:4px solid transparent;border-bottom:25px solid transparent}
/* Inline form helper (used for small inline forms inside table cells) */
.inline-form{margin:0;display:inline}
/* Small square button (used for delete icons) */
.btn-square{width:2rem;height:2rem;display:inline-flex;align-items:center;justify-content:center;font-weight:bold;border-radius:0.25rem;border:none}
.text-right{text-align:right}
.text-danger{color:#ef4444}
.text-center{text-align:center}
/* small helpers for admin server list inputs */
.min-w-260{min-width:260px}
.min-w-240{min-width:240px}
.w-90{width:90px}
.img-preview{max-height:48px; max-width:120px; border:1px solid #eee; display:block}
.loc-label{border:1px solid #eee;border-radius:6px;padding:6px 8px; display:inline-flex; align-items:center}
.small-muted{color:#777;font-size:12px;margin-top:2px}
/* PayPal status */
.pp-status{margin-top:12px;font:14px system-ui, -apple-system, Segoe UI, Roboto, Arial, sans-serif}
/* AI UI helpers */
.ai-container{max-width:760px; margin:20px auto; font-family:Arial, sans-serif}
.ai-panel{margin:10px 0; padding:8px; border-radius:6px}
.ai-alert{margin:10px 0; padding:8px; border-radius:6px; border:1px solid #c00}
.ai-textarea{width:100%; padding:6px}
.ai-message{margin-top:16px; padding:10px; border:1px solid #ccc; border-radius:8px}
.ai-msg-title{font-weight:bold}
.ai-msg-meta{margin-top:6px; font-size:12px}
.flex-gap-wrap{display:flex;flex-wrap:wrap;gap:10px}
.table-center{text-align:center;width:100%;border-collapse:collapse}
.tb-row-bottom{border-bottom:1px solid #f0f0f0;padding:8px 6px;text-align:left}
.locs-box{display:flex;flex-wrap:wrap;gap:8px}
.mb-12{margin-bottom:12px}
.mt-10{margin-top:10px}
.mt-14{margin-top:14px}
.mt-20{margin-top:20px}
.mt-8{margin-top:8px}
.btn-small{padding:3px 8px;font-size:12px}
.mr-6{margin-right:6px}
.ml-8{margin-left:8px}
.flex-row-gap{display:flex;gap:8px;align-items:center}
/* Account page styles */
.account-container{max-width:1000px;margin:20px auto;padding:20px}
.account-section{background:rgba(0,0,0,0.25);padding:20px;border-radius:8px;margin-bottom:20px}
.account-section h2{margin:0 0 15px 0;font-size:1.3rem;color:#fff;border-bottom:2px solid rgba(255,255,255,0.1);padding-bottom:10px}
.account-info-grid{display:grid;grid-template-columns:1fr 1fr;gap:15px;margin-bottom:15px}
.account-info-item{padding:10px;background:rgba(255,255,255,0.03);border-radius:6px}
.account-info-label{font-weight:600;color:rgba(255,255,255,0.7);font-size:0.9rem;margin-bottom:5px}
.account-info-value{color:#fff;font-size:1rem}
.account-edit-summary{cursor:pointer;color:#667eea;font-weight:600;margin-top:10px}
/* Form styles */
.form-group{margin-bottom:15px}
.form-group label{display:block;margin-bottom:5px;color:#fff;font-weight:500}
.form-group input{width:100%;padding:10px;border:1px solid rgba(255,255,255,0.1);border-radius:6px;background:rgba(0,0,0,0.3);color:#fff}
/* Alert messages */
.alert{padding:12px 16px;border-radius:8px;margin-bottom:20px;font-size:0.95rem}
.alert-error{background-color:rgba(255,0,0,0.2);border:1px solid rgba(255,0,0,0.3);color:#ffcccc}
.alert-success{background-color:rgba(0,255,0,0.2);border:1px solid rgba(0,255,0,0.3);color:#ccffcc}
/* Server item cards */
.server-item{background:rgba(255,255,255,0.03);padding:15px;border-radius:6px;margin-bottom:10px;border-left:3px solid #667eea}
.server-name{font-size:1.1rem;font-weight:600;color:#fff;margin-bottom:8px}
.server-details{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:10px;margin-top:10px}
.server-detail{font-size:0.9rem}
.server-detail-label{color:rgba(255,255,255,0.6)}
.server-detail-value{color:#fff;font-weight:500}
/* Invoice items */
.invoice-item{background:rgba(255,255,255,0.03);padding:12px 15px;border-radius:6px;margin-bottom:8px;display:flex;justify-content:space-between;align-items:center}
.invoice-id{font-weight:600;color:#fff}
.invoice-amount{color:#10b981;font-weight:600}
.invoice-status{padding:4px 10px;border-radius:4px;font-size:0.85rem;font-weight:600}
.invoice-status-paid{background:rgba(16,185,129,0.2);color:#10b981}
.invoice-status-pending{background:rgba(245,158,11,0.2);color:#f59e0b}
.invoice-status-expired{background:rgba(239,68,68,0.2);color:#ef4444}
.invoice-date{color:rgba(255,255,255,0.6);font-size:0.9rem}
/* Login placeholder for non-logged-in users */
.login-placeholder{padding:12px;background:rgba(255,255,255,0.03);border-radius:8px;color:#fff}
.login-placeholder a{color:#cfe6ff;text-decoration:underline}
/* No data state */
.no-data{text-align:center;padding:30px;color:rgba(255,255,255,0.6)}
/* Service description text */
.service-desc{color:gray;width:230px}
.service-desc-wide{color:gray;width:280px}
.service-textarea{resize:none;width:230px;height:132px}
/* Admin helpers */
.admin-note{font-size:11px;color:#666;margin-top:4px}
.admin-flex-wrap{display:flex;gap:12px;flex-wrap:wrap;margin-top:12px}
@media (max-width:768px){
.account-info-grid{grid-template-columns:1fr}
}
/* Responsive improvements for mobile devices */
@media (max-width: 600px) {
/* Stack header top and make logo smaller */
#gsw-site .gsw-header-top{flex-direction:column;align-items:flex-start;padding:10px 12px}
#gsw-site .gsw-header-left{width:100%;justify-content:flex-start;padding-left:4px}
.gsw-logo{height:40px}
.gsw-site-name{font-size:1rem}
/* Make header right area flow beneath the logo */
#gsw-site .gsw-header-right{width:100%;margin-top:8px;justify-content:flex-start;padding-right:4px;gap:8px}
/* Navigation: wrap and stack for easier tapping */
#gsw-site .gsw-header-bottom{padding:8px 12px}
.gsw-header-nav{flex-direction:column;align-items:stretch;gap:10px;width:100%;max-width:100%}
.gsw-nav-link{display:block;padding:12px 10px;border-radius:8px}
.gsw-nav-link-myaccount{font-size:1rem}
/* Make main panel use full width with reduced padding */
.site-panel{padding:0.75rem;margin:8px;border-radius:0.5rem;max-width:100%}
/* Tables and cart spacing adjustments */
.cart-table th, .cart-table td{padding:0.6rem 0.8rem}
/* Buttons become full-width for easier tapping on small screens */
#gsw-site .gsw-btn, #gsw-site a.gsw-btn, #gsw-site button.gsw-btn, #gsw-site .gsw-header-btn{
width:100%;display:block;text-align:center;padding:12px;border-radius:10px
}
/* Server cards: stack details and move actions below */
.server-details{grid-template-columns:1fr}
.server-actions{margin-top:12px;display:block}
.server-item{padding:12px}
/* Forms: make inputs and action buttons full width */
.form-group input, .form-group textarea, .form-group select{width:100%;box-sizing:border-box;max-width:100%}
/* Invoice items: stack label and amount for readability */
.invoice-item{flex-direction:column;align-items:flex-start;gap:8px}
.invoice-amount{font-size:1rem}
}
@media (max-width:420px){
/* Extra small devices: tighten spacing, smaller fonts */
.gsw-logo{height:34px}
.gsw-site-name{font-size:0.95rem}
.site-panel-title{font-size:1.25rem}
.server-name{font-size:1rem}
.account-section h2{font-size:1.1rem}
/* Reduce large paddings that consume screen real estate */
.panel{padding:10px}
.form-group{margin-bottom:12px}
.btn-primary, .btn-small{padding:10px}
}
/* Server status and utility classes */
#gsw-site .text-success {
color: #10b981 !important;
font-weight: 600 !important;
}
#gsw-site .text-danger {
color: #ef4444 !important;
font-weight: 600 !important;
}
#gsw-site .text-muted {
color: rgba(255,255,255,0.7) !important;
}
#gsw-site .text-center {
text-align: center !important;
}
#gsw-site .mb-20 {
margin-bottom: 20px !important;
}
#gsw-site .server-notes {
padding-left: 40px !important;
font-size: 0.9rem !important;
color: rgba(255,255,255,0.7) !important;
}
/* Status badges */
#gsw-site .status-badge {
display: inline-block;
padding: 4px 12px;
border-radius: 12px;
font-size: 0.85rem;
font-weight: 600;
text-transform: uppercase;
}
#gsw-site .status-online {
background-color: rgba(16, 185, 129, 0.2);
color: #10b981;
}
#gsw-site .status-offline {
background-color: rgba(239, 68, 68, 0.2);
color: #ef4444;
}
#gsw-site .status-maintenance {
background-color: rgba(251, 191, 36, 0.2);
color: #fbbf24;
}
#gsw-site .status-unknown {
background-color: rgba(156, 163, 175, 0.2);
color: #9ca3af;
}
/* Form radio labels in renewal page */
#gsw-site .form-group label {
display: block;
margin-bottom: 10px;
cursor: pointer;
padding: 12px;
border: 2px solid #e1e8ed;
border-radius: 8px;
background: rgba(255,255,255,0.05);
transition: background 0.2s ease;
}
#gsw-site .form-group label:hover {
background: rgba(255,255,255,0.1);
}
/* Ensure header-right sits flush to the far right */
#gsw-site .gsw-header-top .gsw-header-right{margin-left:auto}
/* User dropdown menu (small, CSS-only). Uses :focus-within and :hover for accessibility */
.gsw-user-menu{position:relative;display:inline-block}
.gsw-user-link{color:#fff;text-decoration:none;font-weight:600;padding:8px 12px;display:inline-block}
.gsw-user-caret{margin-left:6px;font-size:0.85rem;opacity:0.85}
.gsw-user-dropdown{display:none;position:absolute;right:0;top:calc(100% + 8px);background:rgba(255,255,255,0.06);backdrop-filter:blur(6px);border-radius:8px;padding:8px;min-width:160px;box-shadow:0 8px 24px rgba(0,0,0,0.35);z-index:60}
.gsw-user-dropdown-item{display:block;color:#fff;text-decoration:none;padding:8px 10px;border-radius:6px;margin:2px 0}
.gsw-user-dropdown-item:hover{background:rgba(255,255,255,0.03)}
.gsw-user-menu:hover .gsw-user-dropdown, .gsw-user-menu:focus-within .gsw-user-dropdown{display:block}
/* Mobile: make dropdown inline under header and full-width */
@media (max-width:600px){
.gsw-user-dropdown{position:static;top:auto;right:auto;margin-top:8px;background:rgba(255,255,255,0.03);width:100%;box-shadow:none;padding:6px}
.gsw-user-menu{width:100%}
.gsw-user-link{width:100%;display:flex;justify-content:space-between;padding:12px}
}
/* Prevent serverlist images from overflowing on small screens */
#gsw-site .server-item img,
#gsw-site .game-thumb,
#gsw-site .server-card img,
.server-list img{max-width:100%;height:auto;display:block;object-fit:cover}
#gsw-site img,
#gsw-site video,
#gsw-site iframe,
#gsw-site canvas,
#gsw-site svg {
max-width: 100%;
height: auto;
}
#gsw-site table {
max-width: 100%;
}
#gsw-site input,
#gsw-site select,
#gsw-site textarea,
#gsw-site button,
#gsw-site .btn,
#gsw-site .gsw-btn,
#gsw-site .gsw-btn-secondary {
max-width: 100%;
box-sizing: border-box;
}

77
Panel/modules/billing/diag_remote.php Normal file
View file

@ -0,0 +1,77 @@
<?php
// Remote diagnostic helper for GameServers.World (_website)
// Upload this file to the remote server and open it in the browser to collect environment info.
header('Content-Type: text/plain; charset=utf-8');
echo "GSP _website remote diagnostic\n";
echo "Date: " . date('c') . "\n\n";
// PHP info summary
echo "PHP Version: " . PHP_VERSION . "\n";
echo "Loaded extensions: " . implode(', ', get_loaded_extensions()) . "\n\n";
// Session settings
echo "Session save path: " . (ini_get('session.save_path') ?: '(not set)') . "\n";
echo "Session cookie params: " . json_encode(session_get_cookie_params()) . "\n";
echo "Session status (before start): " . session_status() . "\n";
// Try to start a named session used by _website
session_name('opengamepanel_web');
@session_start();
echo "Session status (after start): " . session_status() . "\n";
echo "Session id: " . session_id() . "\n";
echo "Session variables: \n" . print_r($_SESSION, true) . "\n";
// Check config file readability (panel root first, module local second)
$panelCfgRoot = realpath(__DIR__ . '/../../..');
$panelCfg = $panelCfgRoot ? $panelCfgRoot . '/includes/config.inc.php' : __DIR__ . '/../../..' . '/includes/config.inc.php';
$localCfg = __DIR__ . '/includes/config.inc.php';
echo "Panel config: " . $panelCfg . " exists=" . (file_exists($panelCfg) ? 'yes' : 'no') . " readable=" . (is_readable($panelCfg) ? 'yes' : 'no') . "\n";
echo "Local config: " . $localCfg . " exists=" . (file_exists($localCfg) ? 'yes' : 'no') . " readable=" . (is_readable($localCfg) ? 'yes' : 'no') . "\n";
require_once(__DIR__ . '/includes/config_loader.php');
echo "Active config source: " . (defined('BILLING_CONFIG_PATH') ? BILLING_CONFIG_PATH : '(unknown)') . "\n";
if (defined('BILLING_CONFIG_PATH') && is_readable(BILLING_CONFIG_PATH)) {
echo "Active config preview (first 200 chars):\n" . substr(file_get_contents(BILLING_CONFIG_PATH), 0, 200) . "\n";
}
echo "Trying DB connection...\n";
$ok = false;
if (isset($db_host)) {
$db = @mysqli_connect($db_host, $db_user, $db_pass, $db_name, isset($db_port) ? (int)$db_port : null);
if ($db) {
echo "DB connect: OK (host=$db_host db=$db_name)\n";
$ok = true;
// run a small query
$q = @mysqli_query($db, "SELECT COUNT(*) AS cnt FROM information_schema.tables WHERE table_schema = '".mysqli_real_escape_string($db,$db_name)."'");
if ($q) {
$r = mysqli_fetch_assoc($q);
echo "Tables in DB: " . ($r['cnt'] ?? 'unknown') . "\n";
}
mysqli_close($db);
} else {
echo "DB connect: FAILED (mysqli_connect_error: " . mysqli_connect_error() . ")\n";
}
} else {
echo "DB config not available to attempt connection.\n";
}
// Check data and logs directories
$data = realpath(__DIR__ . '/..') . DIRECTORY_SEPARATOR . 'data';
$logs = __DIR__ . DIRECTORY_SEPARATOR . 'logs';
echo "Site data dir: $data exists=" . (is_dir($data)?'yes':'no') . " writable=" . (is_writable($data)?'yes':'no') . "\n";
echo "Site logs dir: $logs exists=" . (is_dir($logs)?'yes':'no') . " writable=" . (is_writable($logs)?'yes':'no') . "\n";
// Try creating test files
if (is_dir($logs) && is_writable($logs)) {
$fn = $logs . DIRECTORY_SEPARATOR . date('Y-m-d') . '.diag.txt';
$w = @file_put_contents($fn, "diag " . date('c') . "\n", FILE_APPEND);
echo "Wrote diag file to $fn result=" . ($w ? 'ok' : 'fail') . "\n";
}
echo "\nSuggested next checks:\n";
echo " - Confirm PHP can write session files to session.save_path and that cookies are sent to browser (use browser devtools).\n";
echo " - Ensure the site path is served under the expected /_website/ path and that session cookie domain/path match the served path.\n";
echo " - If sessions aren't persistent across requests, check webserver user permissions and session.save_path.\n";
?>

431
Panel/modules/billing/docs.php Normal file
View file

@ -0,0 +1,431 @@
<?php
/**
* Documentation Browser
* Displays a list of documentation categories and allows viewing individual docs
*/
// Start session using the website session name to match the rest of the site
if (session_status() === PHP_SESSION_NONE) {
session_name("opengamepanel_web");
session_start();
}
// Include config
require_once(__DIR__ . '/includes/config_loader.php');
// Set the docs directory
$docsDir = __DIR__ . '/docs';
// Get action and doc parameters
$action = $_GET['action'] ?? 'list';
$doc = $_GET['doc'] ?? '';
$docsPagePath = '/docs.php';
/**
* Get all documentation folders with their metadata
*/
function getDocCategories($docsDir) {
$categories = [];
if (!is_dir($docsDir)) {
return $categories;
}
$folders = array_diff(scandir($docsDir), ['.', '..']);
foreach ((array)$folders as $folder) {
$folderPath = $docsDir . '/' . $folder;
// Skip if not a directory
if (!is_dir($folderPath)) {
continue;
}
// Check for required files
$indexPath = $folderPath . '/index.php';
$metadataPath = $folderPath . '/metadata.json';
if (!file_exists($indexPath) || !file_exists($metadataPath)) {
continue;
}
// Read metadata
$metadataContent = file_get_contents($metadataPath);
// Remove UTF-8 BOM if present
$metadataContent = preg_replace('/^\xEF\xBB\xBF/', '', $metadataContent);
$metadata = json_decode($metadataContent, true);
if (!$metadata) {
$metadata = [];
}
// Get display name (no TODO prefix - just display all docs)
$displayName = $metadata['name'] ?? ucfirst($folder);
// Find icon file
$icon = '';
if (file_exists($folderPath . '/icon.png')) {
$icon = '/docs/' . $folder . '/icon.png';
} elseif (file_exists($folderPath . '/icon.jpg')) {
$icon = '/docs/' . $folder . '/icon.jpg';
}
$categories[] = [
'folder' => $folder,
'name' => $displayName,
'description' => $metadata['description'] ?? '',
'category' => trim($metadata['category'] ?? 'other'),
'order' => $metadata['order'] ?? 999,
'icon' => $icon
];
}
// Sort alphabetically by name within categories
usort($categories, function($a, $b) {
if ($a['category'] !== $b['category']) {
// Keep category grouping (game, mods, other)
return strcmp($a['category'], $b['category']);
}
// Sort alphabetically by name (case-insensitive)
return strcasecmp($a['name'], $b['name']);
});
return $categories;
}
// Get all categories
$categories = getDocCategories($docsDir);
// Group by category
$grouped = [];
foreach ((array)$categories as $cat) {
$category = $cat['category'];
if (!isset($grouped[$category])) {
$grouped[$category] = [];
}
$grouped[$category][] = $cat;
}
// Category labels - can be extended via JSON
$categoryLabels = [
'todo' => 'TODO',
'game' => 'Game Servers',
'mods' => 'Mods & Plugins',
'panel' => 'Panel Documentation',
'troubleshooting' => 'Troubleshooting',
'other' => 'Other'
];
// Define category display order
$categoryOrder = ['todo', 'panel', 'game', 'mods', 'troubleshooting', 'other'];
// Sort categories by defined order
uksort($grouped, function($a, $b) use ($categoryOrder) {
$posA = array_search($a, $categoryOrder);
$posB = array_search($b, $categoryOrder);
// If not in order array, put at end
if ($posA === false) $posA = 999;
if ($posB === false) $posB = 999;
return $posA - $posB;
});
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate">
<meta http-equiv="Pragma" content="no-cache">
<meta http-equiv="Expires" content="0">
<title><?php echo htmlspecialchars('Documentation - GSP', ENT_QUOTES, 'UTF-8'); ?></title>
<link rel="stylesheet" href="css/header.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css" integrity="sha512-iecdLmaskl7CVkqkXNQ/ZH/XLlvWZOJyj7Yy7tcenmpD1ypASozpmT/E0iPtmFIB46ZmdtAc9eNBvH0H/ZpiBw==" crossorigin="anonymous" referrerpolicy="no-referrer" />
<style>
/* Documentation-specific styles - consistent with site theme */
.container {
max-width: 1200px;
margin: 0 auto;
padding: 40px 20px;
}
.header {
margin-bottom: 40px;
}
.header h1 {
font-size: 32px;
margin: 0 0 12px;
color: #fff;
}
.header p {
color: rgba(255,255,255,0.7);
margin: 0;
}
.back-button {
display: inline-block;
padding: 10px 20px;
background: rgba(255,255,255,0.03);
border: 1px solid rgba(255,255,255,0.1);
border-radius: 8px;
color: #7fb3ff;
text-decoration: none;
margin-bottom: 20px;
transition: all 0.2s;
}
.back-button:hover {
background: rgba(255,255,255,0.06);
border-color: #667eea;
}
.category-section {
margin-bottom: 40px;
}
.category-title {
font-size: 24px;
color: #667eea;
margin: 0 0 20px;
padding-bottom: 10px;
border-bottom: 2px solid rgba(255,255,255,0.1);
}
.docs-grid {
display: grid;
grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
gap: 20px;
}
.doc-card {
background: rgba(255,255,255,0.03);
border: 1px solid rgba(255,255,255,0.1);
border-radius: 12px;
padding: 20px;
transition: all 0.2s;
text-decoration: none;
display: flex;
flex-direction: column;
}
.doc-card:hover {
border-color: #667eea;
transform: translateY(-2px);
box-shadow: 0 4px 12px rgba(102, 126, 234, 0.1);
}
.doc-icon-wrapper {
width: 60px;
height: 60px;
background: rgba(0,0,0,0.3);
border-radius: 8px;
display: flex;
align-items: center;
justify-content: center;
margin-bottom: 15px;
}
.doc-icon {
max-width: 100%;
max-height: 100%;
border-radius: 6px;
}
.doc-icon-placeholder {
font-size: 28px;
color: rgba(255,255,255,0.6);
}
.doc-title {
font-size: 18px;
font-weight: 600;
color: #fff;
margin: 0 0 8px;
}
.doc-description {
font-size: 14px;
color: rgba(255,255,255,0.7);
margin: 0;
flex-grow: 1;
}
.doc-view-container {
background: rgba(255,255,255,0.03);
border: 1px solid rgba(255,255,255,0.1);
border-radius: 12px;
padding: 30px;
min-height: 400px;
}
.doc-view-container h1,
.doc-view-container h2,
.doc-view-container h3,
.doc-view-container h4 {
color: #fff;
}
.doc-view-container a {
color: #7fb3ff;
}
.doc-view-container code {
background: rgba(0,0,0,0.3);
padding: 2px 6px;
border-radius: 4px;
font-family: 'Courier New', monospace;
color: #a5b4fc;
}
.doc-view-container pre {
background: rgba(0,0,0,0.3);
padding: 15px;
border-radius: 8px;
overflow-x: auto;
}
.doc-view-container pre code {
background: none;
padding: 0;
}
.nav-links {
background: rgba(255,255,255,0.03);
border: 1px solid rgba(255,255,255,0.1);
border-radius: 8px;
padding: 20px;
margin-bottom: 30px;
}
.nav-links h3 {
margin: 0 0 15px;
color: #667eea;
font-size: 18px;
}
.nav-links a {
display: inline-block;
padding: 8px 15px;
margin: 5px 10px 5px 0;
background: rgba(0,0,0,0.3);
border: 1px solid rgba(255,255,255,0.1);
border-radius: 5px;
color: #7fb3ff;
text-decoration: none;
transition: all 0.2s;
}
.nav-links a:hover {
background: #667eea;
color: #fff;
border-color: #667eea;
}
.return-to-top {
text-align: center;
margin: 30px 0;
}
.return-to-top a {
display: inline-block;
padding: 10px 20px;
background: rgba(255,255,255,0.03);
border: 1px solid rgba(255,255,255,0.1);
border-radius: 8px;
color: #7fb3ff;
text-decoration: none;
transition: all 0.2s;
}
.return-to-top a:hover {
background: rgba(255,255,255,0.06);
border-color: #667eea;
}
</style>
</head>
<body>
<?php include(__DIR__ . '/includes/menu.php'); ?>
<div class="container">
<?php if ($action === 'view' && !empty($doc)): ?>
<!-- View specific documentation -->
<a href="<?php echo htmlspecialchars($docsPagePath, ENT_QUOTES, 'UTF-8'); ?>" class="back-button">← Back to Documentation List</a>
<div class="doc-view-container">
<?php
// Sanitize doc parameter to prevent directory traversal
$doc = basename($doc);
$docPath = $docsDir . '/' . $doc . '/index.php';
if (file_exists($docPath)) {
include($docPath);
} else {
echo '<p style="color: #ef4444;">Documentation not found.</p>';
}
?>
</div>
<?php else: ?>
<!-- List all documentation categories -->
<div class="header">
<h1 id="top">Documentation</h1>
<p>Browse our comprehensive documentation for game servers, panel features, and troubleshooting guides.</p>
</div>
<?php if (empty($grouped)): ?>
<div class="doc-view-container">
<p>No documentation available yet. Documentation folders should contain:</p>
<ul>
<li><code>index.php</code> - The documentation content</li>
<li><code>metadata.json</code> - Category and ordering information</li>
<li><code>icon.png</code> or <code>icon.jpg</code> - Category icon</li>
</ul>
</div>
<?php else: ?>
<!-- Navigation Links -->
<div class="nav-links">
<h3>Jump to Section:</h3>
<?php foreach ((array)$grouped as $category => $docs): ?>
<a href="#<?php echo htmlspecialchars($category); ?>">
<?php echo htmlspecialchars($categoryLabels[$category] ?? ucfirst($category)); ?>
(<?php echo count((array)$docs); ?>)
</a>
<?php endforeach; ?>
</div>
<?php foreach ((array)$grouped as $category => $docs): ?>
<div class="category-section" id="<?php echo htmlspecialchars($category); ?>">
<h2 class="category-title"><?php echo htmlspecialchars($categoryLabels[$category] ?? ucfirst($category)); ?></h2>
<div class="docs-grid">
<?php foreach ((array)$docs as $doc): ?>
<a href="<?php echo htmlspecialchars($docsPagePath . '?action=view&doc=' . urlencode($doc['folder']), ENT_QUOTES, 'UTF-8'); ?>" class="doc-card">
<div class="doc-icon-wrapper">
<?php if (!empty($doc['icon'])): ?>
<img src="<?php echo htmlspecialchars($doc['icon']); ?>" alt="" class="doc-icon">
<?php else: ?>
<span class="doc-icon-placeholder">📄</span>
<?php endif; ?>
</div>
<h3 class="doc-title"><?php echo htmlspecialchars($doc['name']); ?></h3>
<?php if (!empty($doc['description'])): ?>
<p class="doc-description"><?php echo htmlspecialchars($doc['description']); ?></p>
<?php endif; ?>
</a>
<?php endforeach; ?>
</div>
<div class="return-to-top">
<a href="#top">↑ Return to Top</a>
</div>
</div>
<?php endforeach; ?>
<?php endif; ?>
<?php endif; ?>
</div>
</body>
</html>

BIN
Panel/modules/billing/docs/7daystodie/icon.jpg Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 40 KiB

413
Panel/modules/billing/docs/7daystodie/index.php Normal file
View file

@ -0,0 +1,413 @@
<?php
/**
* 7 Days to Die Server Documentation - Comprehensive Guide
* General game server hosting information (not platform-specific)
*/
?>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">📚 Quick Navigation</h3>
<div style="display: flex; flex-wrap: wrap; gap: 10px;">
<a href="#quick-info" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Quick Info</a>
<a href="#ports" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔌 Ports</a>
<a href="#installation" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Installation</a>
<a href="#configuration" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Configuration</a>
<a href="#parameters" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">⚙️ Startup Parameters</a>
<a href="#troubleshooting" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔧 Troubleshooting</a>
<a href="#performance" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Performance</a>
<a href="#security" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Security</a>
</div>
</div>
<h1>7 Days to Die Server Hosting Guide</h1>
<h2>Overview</h2>
<p>7 Days to Die is a multiplayer game server that can be hosted on a VPS or dedicated server. This comprehensive guide covers everything you need to know about hosting a 7 Days to Die server for your community.</p>
<h2 id="quick-info">Quick Info</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<ul style="color: #e5e7eb; line-height: 1.8; margin: 0;">
<li><strong style="color: #ffffff;">Default Port:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">Varies (see configuration)</code></li>
<li><strong style="color: #ffffff;">Protocol:</strong> TCP/UDP</li>
<li><strong style="color: #ffffff;">Minimum RAM:</strong> 1GB</li>
<li><strong style="color: #ffffff;">Engine:</strong> Various</li>
<li><strong style="color: #ffffff;">Steam App ID:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">294420</code></li>
<li><strong style="color: #ffffff;">Recommended OS:</strong> Linux (Ubuntu/Debian) or Windows Server</li>
<li><strong style="color: #ffffff;">Configuration Files:</strong><ul style="margin-top: 8px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">serverconfig.xml</code> - Server Configurations</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">Saves/serveradmin.xml</code> - Admin Configurations</li>
</ul></li>
</ul>
</div>
<h2 id="ports">🔌 Network Ports</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">Required Ports</h3>
<p style="color: #e5e7eb;">The 7 Days to Die server typically uses a configurable port. Check your server configuration files for the specific port settings.</p>
<h3 style="color: #ffffff; margin-top: 20px;">Firewall Configuration</h3>
<p style="color: #e5e7eb;">Allow server ports through your firewall:</p>
<pre><code style="color: #a5b4fc;"># UFW (Ubuntu/Debian)
sudo ufw allow [PORT]/tcp
sudo ufw allow [PORT]/udp
sudo ufw reload
# FirewallD (CentOS/RHEL)
sudo firewall-cmd --permanent --add-port=[PORT]/tcp
sudo firewall-cmd --permanent --add-port=[PORT]/udp
sudo firewall-cmd --reload
# Windows Firewall
netsh advfirewall firewall add rule name="7 Days to Die Server" dir=in action=allow protocol=TCP localport=[PORT]
netsh advfirewall firewall add rule name="7 Days to Die Server" dir=in action=allow protocol=UDP localport=[PORT]
</code></pre>
<h3 style="color: #ffffff; margin-top: 20px;">⚠️ Port Security Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8;">
<li>Only open ports that are necessary for the game server to function</li>
<li>Consider using non-standard ports to reduce automated attacks</li>
<li>If using cloud hosting, configure security groups properly</li>
<li>Monitor connection attempts and unusual traffic patterns</li>
</ul>
</div>
<h2 id="installation">Installation & Setup</h2>
<h3>System Requirements</h3>
<ul>
<li><strong>OS:</strong> Linux (Ubuntu 20.04+ or Debian 11+ recommended) or Windows Server 2019+</li>
<li><strong>CPU:</strong> 2+ cores recommended (single-threaded performance important for most game servers)</li>
<li><strong>RAM:</strong> 1GB minimum (more for larger player counts)</li>
<li><strong>Storage:</strong> 5GB+ for server files (SSD recommended for better performance)</li>
<li><strong>Network:</strong> Stable internet connection with low latency</li>
</ul>
<h3>Installation Steps</h3>
<h4>Linux (Ubuntu/Debian)</h4>
<pre><code># Update system packages
sudo apt update && sudo apt upgrade -y
# Create server directory
mkdir -p ~/gameserver
cd ~/gameserver
# Download server files (method varies by game)
# Check official documentation for download links
</code></pre>
<h4>Windows Server</h4>
<p>Download the server files from the official game website or through Steam (if applicable). Extract to a dedicated folder and run the server executable.</p>
<h3>Using SteamCMD - RECOMMENDED METHOD</h3>
<p><strong>This game can be installed via SteamCMD using App ID: 294420</strong></p>
<h4>Install SteamCMD (Ubuntu/Debian)</h4>
<pre><code># Update package list
sudo apt update
# Enable 32-bit architecture
sudo dpkg --add-architecture i386
sudo apt update
# Install SteamCMD
sudo apt install -y lib32gcc-s1 steamcmd
</code></pre>
<h4>Download Server Files</h4>
<pre><code># Create directory for game server
mkdir -p ~/gameservers/7daystodie
# Run SteamCMD and download
steamcmd +login anonymous \
+force_install_dir ~/gameservers/7daystodie \
+app_update 294420 validate \
+quit
# Server files are now in ~/gameservers/7daystodie/
cd ~/gameservers/7daystodie
ls -la
</code></pre>
<h4>Windows Installation with SteamCMD</h4>
<ol>
<li>Download SteamCMD from: <a href="https://steamcdn-a.akamaihd.net/client/installer/steamcmd.zip" target="_blank">https://steamcdn-a.akamaihd.net/client/installer/steamcmd.zip</a></li>
<li>Extract to <code>C:\steamcmd\</code></li>
<li>Open Command Prompt and run:</li>
</ol>
<pre><code>cd C:\steamcmd
steamcmd.exe +login anonymous ^
+force_install_dir C:\gameservers\7daystodie ^
+app_update 294420 validate ^
+quit
</code></pre>
<h2 id="configuration">Server Configuration</h2>
<p>After installation, you'll need to configure your server. Here's where to find the configuration files and what settings you can change.</p>
<h3>Essential Settings</h3>
<ul>
<li><strong>Server Name:</strong> Set a descriptive name for your server</li>
<li><strong>Max Players:</strong> Configure based on your server's resources</li>
<li><strong>Password:</strong> Optional password protection for private servers</li>
<li><strong>Admin/RCON Password:</strong> Set a strong password for remote administration</li>
<li><strong>Game Mode:</strong> Configure game-specific modes and settings</li>
</ul>
<h3>Configuration Files</h3>
<p>Important configuration files for this server:</p>
<ul>
<li><strong><code>serverconfig.xml</code></strong> - Server Configurations</li>
<li><strong><code>Saves/serveradmin.xml</code></strong> - Admin Configurations</li>
</ul>
<h3>Server Commands</h3>
<p>Common administrative commands (access via console or RCON):</p>
<pre><code># Kick player
kick [player_name]
# Ban player
ban [player_name]
# Change map/level (syntax varies by game)
changelevel [map_name]
# Set admin password (if supported)
setadminpassword [password]
</code></pre>
<h2 id="parameters">⚙️ Startup Parameters</h2>
<h3>Basic Startup</h3>
<pre><code># Generic startup command structure
./server_executable [parameters]
</code></pre>
<h3>Common Parameters</h3>
<ul>
<li><code>-port [number]</code> - Set the server port</li>
<li><code>-maxplayers [number]</code> - Maximum player slots</li>
<li><code>-map [name]</code> - Starting map/level</li>
<li><code>-console</code> - Enable console output</li>
<li><code>-nographics</code> - Run without graphics (headless mode)</li>
</ul>
<h3>Creating a Start Script</h3>
<p><strong>Linux (start.sh):</strong></p>
<pre><code>#!/bin/bash
cd /path/to/server
./server_executable [parameters] 2>&1 | tee server.log
</code></pre>
<pre><code>chmod +x start.sh
./start.sh
</code></pre>
<p><strong>Windows (start.bat):</strong></p>
<pre><code>@echo off
cd /d "%~dp0"
server_executable.exe [parameters]
pause
</code></pre>
<h3>Running as a Service</h3>
<p><strong>Linux (systemd):</strong></p>
<pre><code># Create service file: /etc/systemd/system/gameserver.service
[Unit]
Description=7 Days to Die Server
After=network.target
[Service]
Type=simple
User=gameserver
WorkingDirectory=/home/gameserver/server
ExecStart=/home/gameserver/server/start.sh
Restart=on-failure
RestartSec=10
[Install]
WantedBy=multi-user.target
</code></pre>
<pre><code># Enable and start service
sudo systemctl daemon-reload
sudo systemctl enable gameserver
sudo systemctl start gameserver
sudo systemctl status gameserver
</code></pre>
<h2 id="troubleshooting">🔧 Troubleshooting</h2>
<h3>Server Won't Start</h3>
<h4>Check Server Logs</h4>
<pre><code># View recent log entries
tail -f server.log
# Or check system logs
journalctl -u gameserver -f
</code></pre>
<h4>Port Already in Use</h4>
<pre><code># Find what's using the port
sudo lsof -i :[PORT]
sudo netstat -tulpn | grep [PORT]
# Kill the process or change server port
</code></pre>
<h4>Missing Dependencies</h4>
<p>Ensure all required dependencies are installed. Check the error messages for missing libraries or packages.</p>
<h3>Connection Issues</h3>
<h4>Can't Connect to Server</h4>
<ol>
<li><strong>Verify server is running:</strong> <code>ps aux | grep server</code></li>
<li><strong>Check port is listening:</strong> <code>netstat -an | grep [PORT]</code></li>
<li><strong>Verify firewall rules</strong> (see Ports section above)</li>
<li><strong>Check server IP:</strong> Use external IP, not localhost</li>
<li><strong>Router/NAT:</strong> Ensure port forwarding is configured</li>
</ol>
<h4>High Latency/Lag</h4>
<ul>
<li>Check server resource usage (CPU, RAM, disk I/O)</li>
<li>Verify network bandwidth is adequate</li>
<li>Consider server location relative to players</li>
<li>Check for background processes consuming resources</li>
</ul>
<h3>Performance Issues</h3>
<h4>Server Lag</h4>
<ol>
<li><strong>Monitor resources:</strong> Use <code>htop</code> or <code>top</code></li>
<li><strong>Check disk I/O:</strong> Use <code>iotop</code></li>
<li><strong>Review server logs</strong> for errors or warnings</li>
<li><strong>Reduce player count</strong> or increase server resources</li>
<li><strong>Optimize configuration</strong> based on server capacity</li>
</ol>
<h4>Memory Leaks</h4>
<pre><code># Monitor memory usage
free -h
top -p $(pgrep -f server)
# Restart server regularly via cron if needed
0 4 * * * /home/gameserver/restart.sh
</code></pre>
<h2 id="performance">Performance Optimization</h2>
<h3>Server Tuning</h3>
<ul>
<li><strong>CPU:</strong> Ensure adequate CPU allocation; most game servers are single-threaded</li>
<li><strong>RAM:</strong> Allocate sufficient memory; monitor usage and adjust as needed</li>
<li><strong>Disk:</strong> Use SSD storage for better I/O performance</li>
<li><strong>Network:</strong> Ensure stable, low-latency connection</li>
</ul>
<h3>Operating System Optimization</h3>
<pre><code># Increase file descriptor limits
echo "* soft nofile 65536" >> /etc/security/limits.conf
echo "* hard nofile 65536" >> /etc/security/limits.conf
# Network tuning
sysctl -w net.core.rmem_max=16777216
sysctl -w net.core.wmem_max=16777216
sysctl -w net.ipv4.tcp_rmem="4096 87380 16777216"
sysctl -w net.ipv4.tcp_wmem="4096 87380 16777216"
</code></pre>
<h3>Monitoring</h3>
<p>Set up monitoring to track server health:</p>
<ul>
<li>CPU and memory usage</li>
<li>Network traffic and latency</li>
<li>Player count and activity</li>
<li>Error rates and crash logs</li>
</ul>
<h3>Backup Strategy</h3>
<pre><code>#!/bin/bash
# backup.sh - Run via cron
DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_DIR="/backups/gameserver"
SERVER_DIR="/home/gameserver/server"
# Create backup
tar -czf $BACKUP_DIR/backup_$DATE.tar.gz -C $SERVER_DIR .
# Keep only last 7 days
find $BACKUP_DIR -name "backup_*.tar.gz" -mtime +7 -delete
</code></pre>
<h2 id="security">Security Best Practices</h2>
<h3>Firewall Configuration</h3>
<pre><code># Minimal firewall - only allow necessary ports
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow [SERVER_PORT]/tcp
sudo ufw allow [SERVER_PORT]/udp
sudo ufw allow 22/tcp # SSH
sudo ufw enable
</code></pre>
<h3>Strong Passwords</h3>
<ul>
<li>Use strong, unique passwords for admin/RCON access</li>
<li>Never use default passwords</li>
<li>Change passwords regularly</li>
<li>Don't share admin credentials unnecessarily</li>
</ul>
<h3>Regular Updates</h3>
<ul>
<li>Keep server software updated to the latest stable version</li>
<li>Update operating system and dependencies regularly</li>
<li>Subscribe to security advisories for your game</li>
<li>Test updates on a staging server before production deployment</li>
</ul>
<h3>Access Control</h3>
<ul>
<li>Limit SSH access to specific IPs if possible</li>
<li>Use SSH keys instead of passwords</li>
<li>Disable root login via SSH</li>
<li>Implement fail2ban or similar intrusion prevention</li>
</ul>
<h3>DDoS Protection</h3>
<ul>
<li>Consider DDoS protection services (Cloudflare, OVH, etc.)</li>
<li>Implement rate limiting where supported</li>
<li>Monitor for unusual traffic patterns</li>
<li>Have an incident response plan</li>
</ul>
<h2>Additional Resources</h2>
<ul>
<li>Official 7 Days to Die documentation and forums</li>
<li>Community wikis and guides</li>
<li>Game-specific Discord or Reddit communities</li>
<li>Server hosting provider documentation</li>
</ul>
<div style="background: #78350f; padding: 20px; border-left: 4px solid #f59e0b; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;"><i class="fas fa-exclamation-triangle" style="color: #fbbf24; margin-right: 8px;"></i>Important Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8; margin: 0;">
<li>Always make backups before making configuration changes</li>
<li>Keep your server and dependencies updated</li>
<li>Monitor server resources and player activity</li>
<li>Follow the game's End User License Agreement (EULA) and Terms of Service</li>
<li>Join community forums for support and best practices</li>
</ul>
</div>
<p style="text-align: center; margin-top: 30px; color: #666;">
<em>Last updated: November 2025 | For 7 Days to Die server hosting</em>
</p>

7
Panel/modules/billing/docs/7daystodie/metadata.json Normal file
View file

@ -0,0 +1,7 @@
{
"description": "Comprehensive guide for 7 Days to Die dedicated servers with XML modding, ports, web control panel, and zombie survival hosting",
"name": "7 Days to Die",
"order": 33,
"category": "game",
"complete": true
}

234
Panel/modules/billing/docs/COMPREHENSIVE_DOCUMENTATION_UPDATE.md Normal file
View file

@ -0,0 +1,234 @@
# Comprehensive Game Documentation Update
## Date: November 22, 2025
## Overview
This document describes the comprehensive enhancement of ALL game server documentation in the GSP project. The goal was to replace generic placeholder text with detailed, actionable instructions for end users who want to install game servers on their own PC (Windows or Ubuntu).
## Problem Statement
The original documentation had several issues:
1. **Generic Port Placeholders**: Many games showed "Check server configuration" as the port number instead of actual ports
2. **Missing Installation Details**: No specific SteamCMD commands with App IDs
3. **Vague Configuration**: Generic instructions like "check configuration files" without specifics
4. **No Startup Parameters**: Missing detailed startup command explanations
5. **Generic Troubleshooting**: Common "check the logs" advice instead of game-specific solutions
## Solution Implemented
### 1. Enhanced Documentation Generator Script
Modified `tools/generate_game_docs.py` to:
- **Extract Real Data from XML Configs**: Parse actual port numbers, configuration files, and settings from the 244 XML server configs
- **Steam App ID Database**: Added lookup table for 50+ popular games with their Steam App IDs
- **Generate Exact Commands**: Create specific SteamCMD installation commands with real App IDs
- **Parse Configuration Details**: Extract all settings from XML `replace_texts` and `custom_fields` sections
- **Include Startup Parameters**: Extract parameters from XML `cli_template` and `server_params`
- **Add Troubleshooting**: Pull game-specific troubleshooting from knowledgepack YAML data
### 2. Processing Results
**Processed: 134 games**
**Skipped: 15 games** (already complete and no generic text)
**Errors: 0**
### 3. What Each Game Now Has
Every game documentation now includes:
1. **Quick Info Section**
- Actual port numbers (or "Varies" with explanation)
- Protocol (TCP/UDP)
- Memory requirements
- Engine information
- **Steam App ID** (e.g., 320850 for Life is Feudal)
- Recommended OS
2. **Comprehensive Port Information**
- Complete list of ALL ports the game uses
- What each port is for
- Whether it's required or optional
- Firewall configuration examples for:
- UFW (Ubuntu/Debian)
- FirewallD (CentOS/RHEL)
- Windows Firewall
- Router port forwarding instructions
3. **Detailed Installation Instructions**
- **For Steam games**: Exact SteamCMD commands
```bash
steamcmd +login anonymous \
+force_install_dir ~/gameservers/GAME \
+app_update APPID validate \
+quit
```
- Step-by-step for both Ubuntu and Windows
- System requirements
- Required dependencies
4. **Configuration File Details**
- Exact file paths from XML configs
- What each configuration file does
- Available settings extracted from XML
- Example configurations
5. **Startup Commands**
- Actual startup commands from XML
- Parameter explanations
- Example start scripts for Linux and Windows
- Systemd service file template
6. **Troubleshooting**
- Game-specific issues from knowledgepack where available
- Common server startup problems
- Connection troubleshooting
- Performance optimization tips
7. **Security Best Practices**
- Firewall configuration
- Password management
- Regular updates
- Backup strategies
## Example: Life is Feudal
### Before
- Default Port: "Check server configuration"
- No App ID mentioned
- Generic "download server files" instruction
### After
- Steam App ID: **320850**
- Exact command:
```bash
steamcmd +login anonymous \
+force_install_dir ~/gameservers/lifeisfeudal \
+app_update 320850 validate \
+quit
```
- Configuration file: `config/world_1.xml`
- Settings: name, adminPassword, port, maxPlayers (all extracted from XML)
## Files Modified
### Scripts
- `tools/generate_game_docs.py` - Enhanced with comprehensive data extraction
- `tools/find_missing_game_icons.py` - NEW - Icon checker script
### Documentation Files
- 134 `modules/billing/docs/*/index.php` files regenerated
- 134 `modules/billing/docs/*/metadata.json` files marked as complete
### Total Changes
- 299 files changed
- ~20,000 lines of new/updated documentation
- 0 errors during processing
## Verification
### Generic Text Check
**Before**: 95+ games with "Check server configuration" as port placeholder
**After**: Only 1 non-game file (common-issues) has placeholder text
### Port Information
- Real ports extracted from knowledgepack YAML
- Fallback to "Varies (see configuration)" when specific port unavailable
- All games have firewall configuration examples
### Steam App IDs
50+ games now have correct App IDs:
- Life is Feudal: 320850
- CS:GO: 740
- Rust: 258550
- Squad: 403240
- Valheim: 896660
- (and 45+ more)
## Remaining Tasks
### 1. Game Icons (Low Priority)
Only 4 games missing icons (all plugin/mod systems, not actual games):
- amxmodx
- b3
- metamodsource
- oxide
Use `tools/find_missing_game_icons.py` to check for missing icons.
### 2. Future Enhancements (Optional)
- Add web search capability to find game-specific troubleshooting solutions
- Expand knowledgepack YAML with more games
- Add more Steam App IDs to the database
- Include mod/plugin installation guides
## How to Use the Generator
### Process All Incomplete Games
```bash
cd /home/runner/work/GSP/GSP
python3 tools/generate_game_docs.py
```
### Check for Missing Icons
```bash
python3 tools/find_missing_game_icons.py
```
## Technical Details
### Steam App ID Database
Located in `generate_game_docs.py`, the `get_steam_app_id()` method contains a dictionary with 50+ mappings:
```python
app_ids = {
'7daystodie': '294420',
'arkse': '376030',
'arma3': '233780',
# ... 45+ more
}
```
### XML Config Parsing
The script extracts:
- Port configurations from `replace_texts` section
- Configuration files from `configuration_files` section
- Startup parameters from `cli_template` and `server_params`
- App IDs from `mods/mod/installer_name`
### Knowledgepack Integration
Pulls from `gameserver_knowledgepack_v2.yaml`:
- Port information with purposes
- System requirements
- Typical startup commands
- Troubleshooting issues and fixes
## Documentation Standards
All generated documentation follows this structure:
1. Quick Navigation (anchor links)
2. Overview
3. Quick Info box
4. System Requirements
5. Complete Port List
6. Installation (with exact commands)
7. Configuration (file-by-file)
8. Startup Parameters
9. Troubleshooting
10. Performance Optimization
11. Security Best Practices
12. Additional Resources
## Conclusion
The game documentation enhancement is **COMPLETE** with 134 games now having comprehensive, actionable installation and configuration guides. The documentation is suitable for end users with no prior knowledge of game server hosting, providing step-by-step instructions for both Windows and Ubuntu.
**Key Achievement**: Zero games now display "Check server configuration" as a port placeholder.
---
*Last Updated: November 22, 2025*
*Script: tools/generate_game_docs.py*
*Processed: 134 games successfully*

250
Panel/modules/billing/docs/DOCUMENTATION_ENHANCEMENT_SUMMARY.md Normal file
View file

@ -0,0 +1,250 @@
# Documentation Enhancement Summary
## Overview
This document summarizes the comprehensive enhancements made to the billing module's documentation system and session handling.
## Issues Resolved
### 1. Documentation Page Login Button Issue ✅
**Problem:** Documentation page showed "Login" button even when user was logged in.
**Root Cause:** docs.php used basic `session_start()` instead of the website's session name.
**Solution:** Changed to use `opengamepanel_web` session name to match rest of website.
### 2. Cart Page Display Issue ✅
**Problem:** Cart page didn't display when clicking menu link.
**Root Cause:** cart.php also used basic `session_start()` causing session inconsistency.
**Solution:** Changed to use `opengamepanel_web` session name for consistency.
### 3. Documentation Content Enhancement ✅
**Problem:** Documentation was basic, system-specific, and not comprehensive enough for SEO.
**Solution:** Created detailed, XML-independent, general hosting guides for major games.
## Changes Made
### Session Fixes
**Files Modified:**
- `modules/billing/docs.php`
- `modules/billing/cart.php`
**Change:**
```php
// OLD
session_start();
// NEW
if (session_status() === PHP_SESSION_NONE) {
session_name("opengamepanel_web");
session_start();
}
```
This ensures the documentation and cart pages use the same session as the rest of the website (login.php, menu.php, etc.), so login state is properly detected.
### Documentation Enhancements
#### Games Enhanced (3 of 151 total)
1. **Minecraft Java Edition** (549 lines)
2. **CS:GO & CS2** (584 lines)
3. **Rust** (455 lines)
#### Documentation Structure (Template for All Games)
Each comprehensive guide includes:
1. **Navigation Bar** - Quick links to all sections
2. **Quick Info Section** - Essential details at a glance:
- Default ports (game, RCON, query)
- RAM requirements (min/recommended)
- Storage requirements
- Log file locations
- Default configurations
- Protocol information
3. **Installation & Setup** - Complete instructions:
- System requirements (CPU, RAM, storage, bandwidth)
- Linux installation steps
- Windows installation steps
- SteamCMD usage (where applicable)
- First-time setup procedures
4. **Server Configuration** - Detailed config guides:
- All configuration files explained
- Every parameter documented
- Example configurations
- Best practices
5. **Startup Parameters** - Complete reference:
- All command-line parameters
- Parameter breakdown and explanations
- Startup script examples (Linux & Windows)
- Advanced optimization flags
6. **Plugins & Mods** - Enhancement guides:
- Plugin/mod platform installation
- Popular plugins/mods list with descriptions
- Installation procedures
- Configuration examples
7. **Troubleshooting** - Common issues & solutions:
- Server won't start
- Connection issues
- Performance problems
- Error messages and fixes
- Diagnostic commands
8. **Performance Optimization** - Tuning guides:
- Configuration optimization
- Resource management
- Automation scripts
- Monitoring tips
- Scheduled maintenance
9. **Additional Resources** - External links:
- Official documentation
- Community resources
- Tools and utilities
- Support forums
## Documentation Principles
### ✅ XML-Independent
- Does NOT pull information from panel XML files
- Does NOT reference `modules/config_games/server_configs/`
- Stands alone as general game server hosting information
### ✅ General Hosting Focus
- Written from VPS/dedicated server perspective
- Not specific to our panel system
- Applicable to any hosting environment
- User could follow these guides on any server
### ✅ SEO-Optimized
- Comprehensive content (400-600 lines per game)
- Covers all aspects of server hosting
- Natural keyword integration
- Designed to rank in Google search results
- Goal: Become go-to resource for game server hosting
### ✅ Professional Quality
- Clean, modern formatting
- Code examples with syntax highlighting
- Internal navigation between sections
- Consistent structure across all games
- Production-ready commands and configs
## Benefits
### For Users
- Complete guides for setting up game servers
- Troubleshooting help for common issues
- Performance optimization tips
- All info in one place
### For Business
- SEO boost - comprehensive guides rank well
- Authority building - comprehensive content
- Traffic generation - users find guides via Google
- Reduced support load - self-service documentation
### For Future Development
- Template established for remaining 148 games
- Consistent structure makes expansion easy
- Can be enhanced incrementally
- Scalable approach
## Remaining Games (148)
The same comprehensive template can be applied to all remaining games:
- ARK: Survival Evolved
- Valheim
- 7 Days to Die
- Team Fortress 2
- Garry's Mod
- Terraria
- Don't Starve Together
- Project Zomboid
- Satisfactory
- V Rising
- Palworld
- And 138 more...
## Testing Completed
✅ PHP syntax validation - No errors
✅ CodeQL security scan - No issues
✅ Session handling verified
✅ Documentation structure validated
✅ No XML references confirmed
✅ File permissions correct
## Implementation Notes
### Session Name Consistency
The entire billing module now uses `opengamepanel_web` session name:
- login.php ✅
- register.php ✅
- logout.php ✅
- menu.php ✅
- docs.php ✅ (FIXED)
- cart.php ✅ (FIXED)
- my_account.php ✅
- All other pages ✅
### Documentation File Structure
```
docs/
├── minecraft/
│ ├── index.php (549 lines - comprehensive)
│ ├── index_old.php (backup)
│ ├── metadata.json
│ └── icon.png
├── csgo/
│ ├── index.php (584 lines - comprehensive)
│ ├── index_old.php (backup)
│ ├── metadata.json
│ └── icon.jpg
├── rust/
│ ├── index.php (455 lines - comprehensive)
│ ├── index_old.php (backup)
│ ├── metadata.json
│ └── icon.png
└── [148 other games with basic docs to be enhanced]
```
## Future Enhancement Ideas
1. **Add More Games** - Apply template to remaining 148 games
2. **Video Tutorials** - Link to video guides where available
3. **Interactive Commands** - Copy-to-clipboard for commands
4. **Version History** - Track game version updates
5. **Community Contributions** - Allow user-submitted tips
6. **Search Functionality** - Cross-game documentation search
7. **Translations** - Multi-language support
## Maintenance
### Keeping Documentation Current
- Monitor game updates and patches
- Update documentation quarterly
- Track breaking changes in games
- Community feedback integration
### Backup Strategy
All original documentation files are preserved as `index_old.php` in each game folder for reference and potential rollback if needed.
## Conclusion
The documentation system is now:
- ✅ Fully functional with correct session handling
- ✅ Comprehensive for 3 major games (Minecraft, CS:GO/CS2, Rust)
- ✅ Template-based for easy expansion to remaining games
- ✅ SEO-optimized for Google search ranking
- ✅ XML-independent and general hosting focused
- ✅ Production-ready and tested
**Status:** Ready for review and deployment
---
*Created: November 8, 2024*
*Last Updated: November 8, 2024*

271
Panel/modules/billing/docs/DOCUMENTATION_EXPANSION_PLAN.md Normal file
View file

@ -0,0 +1,271 @@
# Game Server Documentation Expansion Plan
## Executive Summary
This document outlines the comprehensive plan for enhancing documentation for all 151 games supported by the GameServerPanel billing module. As of the current phase, 6 games have comprehensive documentation (200+ lines each), with 145 games remaining at basic level (67 lines average).
## Completed Games (6/151)
### Phase 1 - Already Enhanced (3 games)
1. **Minecraft Java Edition** (549 lines) - Complete
2. **CS:GO & CS2** (584 lines) - Complete
3. **Rust** (455 lines) - Complete
### Phase 2 - Recently Enhanced (3 games)
4. **Valheim** (325 lines) - Complete
5. **ARK: Survival Evolved** (303 lines) - Complete
6. **Terraria** (359 lines) - Complete
## Documentation Enhancement Template
Each enhanced game documentation includes:
### 1. Navigation Bar
- Quick links to all major sections
- Improves user experience and SEO
- Anchor links for easy jumping
### 2. Quick Info Section (Required Details)
- Default ports (game, query, RCON)
- Protocol (TCP/UDP)
- RAM requirements (min/recommended)
- CPU recommendations
- Storage requirements
- SteamCMD App ID (if applicable)
- Max players
- Config file locations
- Log file paths
### 3. Installation & Setup
- System requirements breakdown
- Windows installation steps
- Linux installation steps (preferred with SteamCMD)
- macOS installation (if supported)
- First-time setup procedures
- Directory structure explanation
### 4. Server Configuration
- Configuration file locations
- Complete parameter reference
- Example configurations
- Best practices for settings
- Multiple configuration scenarios
### 5. Startup Parameters
- Command-line options table
- Parameter descriptions
- Example startup scripts (Windows & Linux)
- Advanced optimization flags
- Launch parameter combinations
### 6. Port Forwarding & Networking
- Required ports list with protocols
- Router configuration examples
- Firewall rules (UFW for Linux, Windows Firewall)
- NAT configuration guidance
- DMZ considerations
### 7. Plugins/Mods/Extensions
- Popular mod loaders (if applicable)
- Plugin installation procedures
- Popular plugins/mods list
- Configuration examples
- Compatibility notes
### 8. Troubleshooting
- Server won't start solutions
- Connection issues diagnosis
- Performance problems
- Common error messages
- Log file analysis
- Diagnostic commands
### 9. Performance Optimization
- Server sizing guidelines by player count
- Resource management tips
- Configuration tuning
- Automated maintenance
- Monitoring recommendations
### 10. Admin Tools & Commands
- Console commands reference
- Admin authentication
- User management
- Server control commands
- Debugging tools
### 11. Backup & Recovery
- Backup strategy recommendations
- Automated backup scripts (Linux/Windows)
- World/save file locations
- Recovery procedures
- Disaster recovery planning
### 12. Additional Resources
- Official documentation links
- Community resources
- Forums and support
- Tool recommendations
- Related guides
## Priority Game List (Next 20 Games)
### High Priority (Most Popular)
1. Team Fortress 2 (TF2)
2. Garry's Mod
3. Don't Starve Together
4. Left 4 Dead 2
5. Counter-Strike: Source
6. Counter-Strike 1.6
7. Project Zomboid
8. V Rising
9. Satisfactory
10. Conan Exiles
### Medium Priority (Popular)
11. 7 Days to Die
12. Killing Floor 2
13. Insurgency Sandstorm
14. Squad
15. Arma 3
16. DayZ
17. Space Engineers
18. Eco
19. Factorio
20. Unturned
## Research Sources for Each Game
### Primary Sources
1. Official game websites and documentation
2. Official game wikis (Fandom, Wiki.gg)
3. Steam Community guides
4. Developer documentation
### Secondary Sources
1. Hosting provider knowledge bases (Nitrado, GTXGaming, etc.)
2. Reddit communities (r/[gamename])
3. GitHub repositories for tools/mods
4. YouTube server setup tutorials
5. Forum threads (AlliedModders, SRCDS, etc.)
### Information to Gather
- SteamCMD App ID
- Default ports and protocols
- Minimum and recommended hardware
- Configuration file formats and locations
- Startup parameters and options
- Common troubleshooting issues
- Popular mods/plugins
- Admin tools and commands
- Performance optimization tips
## Implementation Strategy
### Batch Processing Approach
1. **Research Phase** - Gather information for 5-10 games at once
2. **Documentation Phase** - Write comprehensive guides using template
3. **Review Phase** - Syntax check, link validation, formatting
4. **Commit Phase** - Commit in batches to track progress
### Quality Standards
- Minimum 300 lines per enhanced game
- All sections from template must be present
- At least 5 external resource links
- Proper formatting with code blocks and tables
- No syntax errors (PHP validation)
- SEO-optimized content
### Estimated Timeline
- **Per game:** 30-45 minutes (research + writing)
- **Batch of 10:** 5-8 hours
- **All 145 remaining:** 72-108 hours total work
## Automation Opportunities
### Possible Automations
1. **Port extraction** from XML config files
2. **Template generation** with game-specific placeholders
3. **Batch PHP syntax checking**
4. **Link validation** across all docs
5. **Formatting consistency** checks
### Manual Work Required
- Game-specific troubleshooting research
- Community resource identification
- Mod/plugin ecosystem understanding
- Performance optimization specifics
- Platform-specific considerations
## Progress Tracking
### Current Status
- **Enhanced:** 6 games (4% complete)
- **Remaining:** 145 games (96% to do)
- **Total Documentation Lines:** ~2,575 lines (enhanced games only)
- **Average Lines per Enhanced Game:** 429 lines
### Completion Milestones
- **10% (15 games):** Target date TBD
- **25% (38 games):** Target date TBD
- **50% (76 games):** Target date TBD
- **75% (113 games):** Target date TBD
- **100% (151 games):** Target date TBD
## Benefits of Completion
### For Users
- Comprehensive self-service documentation
- Reduced setup time and frustration
- Better troubleshooting guidance
- Performance optimization tips
- Community resource discovery
### For Business
- **SEO boost** - 145 new comprehensive pages ranking for game server hosting
- **Authority building** - Comprehensive resource destination
- **Traffic generation** - Organic search traffic from game communities
- **Support reduction** - Self-service documentation reduces tickets
- **Competitive advantage** - Most comprehensive game server hosting documentation
### For Search Rankings
- Long-form content (300+ lines per game)
- Natural keyword integration
- Internal linking structure
- External authoritative links
- Regular update potential
- User engagement (navigation, resource links)
## Maintenance Plan
### Regular Updates
- **Quarterly review** - Check for game updates, new versions
- **Version tracking** - Monitor major game releases
- **Link validation** - Ensure external resources remain valid
- **Community feedback** - Incorporate user suggestions
- **Error corrections** - Fix reported issues promptly
### Update Triggers
- Major game version releases
- New DLC or expansion launches
- Significant mod ecosystem changes
- Breaking configuration changes
- New hosting best practices
## Next Steps
1. **Immediate:** Complete next batch of 10-15 popular games
2. **Short-term:** Develop automation for repetitive tasks
3. **Mid-term:** Complete top 50 most popular games
4. **Long-term:** Achieve 100% documentation coverage
5. **Ongoing:** Maintain and update as games evolve
## Conclusion
The documentation expansion project is critical for establishing the platform as the authoritative resource for game server hosting. While comprehensive, the systematic approach outlined ensures quality, consistency, and long-term maintainability.
---
**Created:** November 2024
**Last Updated:** November 2024
**Status:** In Progress (6/151 games enhanced)

282
Panel/modules/billing/docs/GAME_SERVER_LIST.md Normal file
View file

@ -0,0 +1,282 @@
# Multiplayer Games with Dedicated Server Support
**Last Updated:** November 10, 2025
This list contains multiplayer games that support dedicated server hosting, ordered by popularity (most to least popular based on player counts, community activity, and hosting demand).
## Legend
- ~~Strikethrough~~ = Documentation complete
- Normal text = Documentation incomplete (shows with "TODO:" prefix on site)
---
## Top Tier (Extremely Popular)
1. ~~Minecraft~~ - Sandbox building and survival
2. Counter-Strike 2 - Tactical FPS (CS2 not yet in GSP, covered in CS:GO docs)
3. ~~Counter-Strike: Global Offensive~~ - Tactical FPS & CS2 (Source 2 engine)
4. ~~Rust~~ - Survival crafting and PvP
5. ~~Arma 3~~ - Military simulation
6. ~~ARK: Survival Evolved~~ - Dinosaur survival
7. Garry's Mod - Sandbox multiplayer
8. ~~Valheim~~ - Viking survival co-op
9. ~~7 Days to Die~~ - Zombie survival crafting
10. ~~Terraria~~ - 2D sandbox adventure
## High Popularity
11. ~~DayZ Standalone~~ - Zombie survival
12. ~~Team Fortress 2~~ - Team-based FPS
13. ~~Left 4 Dead 2~~ - Co-op zombie shooter
14. Squad - Tactical military FPS
15. ~~Killing Floor 2~~ - Co-op wave shooter
16. 21. ~~Insurgency: Sandstorm~~ - Tactical FPS
17. Space Engineers - Space sandbox engineering
18. Don't Starve Together - Survival co-op
19. ~~Conan Exiles~~ - Survival and building
20. Unturned - Zombie survival
## Medium-High Popularity
21. ~~Counter-Strike: Source~~ - Classic Source engine tactical FPS
22. ~~Counter-Strike 1.6~~ - Original CS (GoldSrc engine)
23. ~~Arma 2: Operation Arrowhead~~ - Military sim (DayZ Mod base)
24. ~~Arma 2: Combined Operations~~ - Arma 2 + OA (DayZ Mod)
25. ~~Left 4 Dead~~ - Co-op zombie shooter
26. 13. ~~Killing Floor~~ - Co-op horror shooter
27. Insurgency - Tactical FPS
28. The Forest - Survival horror co-op
29. Starbound - 2D space exploration
30. Project Zomboid - Zombie survival RPG
## Medium Popularity
31. Factorio - Factory building automation
32. Eco - Environmental survival simulation
33. V Rising - Vampire survival
34. Satisfactory - Factory building 3D
35. Stationeers - Space station engineering
36. Mordhau - Medieval combat
37. Red Orchestra 2 - WWII tactical shooter
38. Rising Storm 2: Vietnam - Tactical FPS
39. Day of Infamy - WWII FPS
40. Pavlov VR - VR tactical shooter
## Legacy / Niche Popular
41. Arma 2 - Military simulation
42. Arma Reforger - Modern military sim
43. Team Fortress Classic - Classic team FPS
44. Day of Defeat: Source - WWII team shooter
45. Natural Selection 2 - FPS/RTS hybrid
46. Nuclear Dawn - FPS/RTS hybrid
47. Dystopia - Cyberpunk source mod
48. Pirates, Vikings and Knights II - Medieval combat mod
49. Zombie Master: Reborn - Asymmetric zombie game
50. The Ship - Murder mystery multiplayer
## Specialized / Modding Communities
51. Multi Theft Auto (MTA) - GTA multiplayer mod
52. San Andreas Multiplayer (SAMP) - GTA SA multiplayer
53. FiveM - GTA V multiplayer mod
54. Just Cause 2 Multiplayer - JC2 mod
55. Mafia 2 Online - Mafia 2 multiplayer
56. Vice City Multiplayer - GTA VC multiplayer
57. IV Multiplayer - GTA IV multiplayer
## Survival & Building Games
58. Hurtworld - Survival crafting
59. Miscreated - Survival horror
60. Reign of Kings - Medieval survival
61. Life is Feudal - Medieval MMO survival
62. Empyrion: Galactic Survival - Space survival
63. ATLAS - Pirate MMO survival
64. PixARK - Voxel ARK variant
65. Wurm Unlimited - Medieval sandbox MMO
## Racing & Simulation
66. Assetto Corsa - Racing simulation
67. Euro Truck Simulator 2 - Truck driving sim
68. BeamNG.drive - Vehicle physics sim
69. Trackmania Nations Forever - Racing arcade
70. Trackmania - Modern racing arcade
## Tactical & Military Shooters
71. Battlefield 2 - Combined arms warfare
72. Battlefield: Bad Company 2 - Modern warfare
73. Call of Duty (original) - WWII FPS
74. Call of Duty 2 - WWII FPS
75. Call of Duty 4: Modern Warfare - Modern FPS
76. Call of Duty: World at War - WWII FPS
77. Call of Duty: Modern Warfare 2 - Modern FPS
78. Call of Duty: Modern Warfare 3 - Modern FPS
79. Call of Duty: United Offensive - WWII expansion
80. Call of Duty: Black Ops - Cold War FPS
81. Medal of Honor: Allied Assault - WWII FPS
82. Medal of Honor: Spearhead - WWII expansion
83. Medal of Honor: Breakthrough - WWII expansion
84. Homefront - Modern warfare FPS
85. Sniper Elite V2 - Tactical sniper game
## Classic Source Engine Games
86. Half-Life 2: Deathmatch - Physics-based deathmatch
87. Half-Life Deathmatch - Classic deathmatch
88. Deathmatch Classic - Quake-style deathmatch
89. Synergy - Half-Life 2 co-op mod
90. The Hidden: Source - Asymmetric multiplayer mod
91. Fistful of Frags - Western multiplayer mod
92. GoldenEye: Source - GoldenEye remake mod
## Arena Shooters
93. Quake 3 Arena - Classic arena shooter
94. Quake 4 - Sci-fi arena shooter
95. Unreal Tournament 99 - Classic arena shooter
96. Unreal Tournament 2004 - Arena shooter
97. Unreal Tournament 3 - Modern arena shooter
98. Warsow - Fast-paced arena shooter
99. Xonotic - Open-source arena shooter
100. Nexuiz - Arena shooter
101. Alien Arena - Sci-fi arena shooter
## RTS & Strategy
102. Age of Chivalry - Medieval Source mod
103. Chivalry: Medieval Warfare - Medieval slasher
## Zombie & Horror Co-op
104. No More Room in Hell - Realistic zombie co-op
105. Brain Bread 2 - Zombie co-op shooter
## MMO & Persistent Worlds
106. Soldat - 2D multiplayer shooter
107. OpenTTD - Transport simulation
108. Minetest - Open-source voxel game
109. Free Orion - Space strategy
110. Freeciv - Civilization-like strategy
## Voice & Communication Servers
111. TeamSpeak 2 - Voice communication
112. TeamSpeak 3 - Voice communication
113. Mumble - Low-latency voice chat
114. Ventrilo - Voice communication
## Streaming & Broadcasting
115. Shoutcast - Internet radio streaming
116. SinusBot - TeamSpeak music bot
## Specialized Game Servers
117. BattlEye - Anti-cheat system
118. BigBrotherBot - Game server admin bot
119. SpunkyBot - Urban Terror admin bot
120. Jedi Knight 2: Jedi Outcast - Star Wars FPS
121. Jedi Knight: Jedi Academy - Star Wars FPS
122. Halo: Combat Evolved - Sci-fi FPS
123. Serious Sam HD: First Encounter - Co-op shooter
124. Serious Sam HD: Second Encounter - Co-op shooter
125. Blood Frontier - Arena shooter
126. Citadel: Forged with Fire - Fantasy survival
127. Wreckfest - Demolition racing
128. Alien Swarm: Reactive Drop - Top-down co-op shooter
129. Aliens vs Predator - Sci-fi multiplayer FPS
## Flight Simulators
130. IL-2 Sturmovik - WWII flight sim
131. FlightGear Multi-Simulator (FGMS) - Open-source flight sim
## Legacy & Retro Games
132. Half-Life TV - HL spectator system
133. Ricochet - Disc-throwing arena game
134. Smashball - Sport/combat hybrid
135. Condition Zero - Counter-Strike variant
## Mods & Total Conversions
136. Counter-Strike: Promod - Competitive CS mod
137. Age of Chivalry - Source engine medieval mod
138. Empires Mod - RTS/FPS hybrid mod
139. Epsilon Source Mod - Source engine mod
140. Obsidian Conflict - Half-Life 2 co-op mod
141. Pirates, Vikings & Knights - Medieval combat
142. Smoking Guns - Western shooter mod
143. Soldier of Fortune - Tactical shooter
144. Urban Terror - Tactical realism mod
145. Wolfenstein: Return to Castle Wolfenstein - WWII FPS
146. Zombie Panic: Source - Zombie infection mod
147. ROR Server - Rigs of Rods multiplayer
## VPS/Panel Management Tools
148. Getting Started Guide - Server hosting basics
149. Common Issues - General troubleshooting guide
---
## Summary Statistics
- **Total Games Listed:** 149
- **Documentation Complete:** 8 (5.4%)
- ~~Minecraft~~
- ~~Arma 3~~
- ~~Arma 2: Operation Arrowhead~~
- ~~Arma 2: Combined Operations~~
- ~~DayZ Standalone~~
- ~~Counter-Strike: Global Offensive~~ (includes CS2)
- ~~Counter-Strike: Source~~
- ~~Counter-Strike 1.6~~
- **Documentation Incomplete:** 141 (94.6%)
## Next Priority Games for Documentation
### Phase 3 - Counter-Strike Family ✅ COMPLETE
All Counter-Strike games now documented:
- ~~Counter-Strike: Global Offensive~~ (includes CS2 coverage)
- ~~Counter-Strike: Source~~
- ~~Counter-Strike 1.6~~
### Phase 4 - Popular Survival Games (Target: 6 games)
4. Counter-Strike 1.6
### Phase 4 - Popular Survival Games (Target: 6 games)
1. Rust
2. ARK: Survival Evolved
3. Valheim
4. Terraria
5. 7 Days to Die
6. Conan Exiles
### Phase 5 - Co-op Shooters (Target: 6 games)
1. Left 4 Dead 2
2. Left 4 Dead
3. Killing Floor 2
4. Killing Floor
5. Team Fortress 2
6. Insurgency: Sandstorm
---
**Note:** Popularity rankings based on:
- Current Steam player counts (November 2025)
- Community activity and server hosting demand
- Active modding communities
- Longevity and continued support
**Documentation Standard:** Each complete game includes:
- ✅ Comprehensive ports table (all ports with purposes)
- ✅ Firewall configurations (UFW, FirewallD, Windows, iptables)
- ✅ Startup parameters with detailed explanations
- ✅ Troubleshooting sections with specific solutions
- ✅ Performance optimization tips
- ✅ Security best practices
- ✅ Resource links with citations

199
Panel/modules/billing/docs/GENERATION_README.md Normal file
View file

@ -0,0 +1,199 @@
# Game Server Documentation Generation
## Overview
This directory contains comprehensive game server hosting documentation for 143+ games. The documentation follows a consistent template structure based on the Minecraft server guide.
## Generated Documentation
In November 2024, we generated comprehensive documentation for 98 game servers that were previously in the "todo" category. Each game now has:
- **Quick Navigation Menu** - Easy access to all sections
- **Quick Info** - Default ports, protocols, RAM requirements, engine info
- **Network Ports** - Detailed port tables with firewall configuration examples
- **Installation & Setup** - System requirements and installation steps
- **Server Configuration** - Configuration files and essential settings
- **Startup Parameters** - Command-line parameters and service setup
- **Troubleshooting** - Common issues and solutions
- **Performance Optimization** - Tuning and monitoring tips
- **Security Best Practices** - Firewall, passwords, updates, DDoS protection
- **Additional Resources** - External references and community links
## Documentation Structure
Each game documentation folder contains:
```
gamename/
├── index.php - Main documentation content
├── metadata.json - Category, name, description, order
└── icon.png/jpg - Game icon (optional)
```
### metadata.json Format
```json
{
"name": "Game Name",
"description": "Brief description for the game",
"category": "game",
"order": 1
}
```
## Categories
Documentation is organized into categories:
- **game** - Game server documentation (143+ servers)
- **mods** - Mod/plugin documentation
- **panel** - Panel-specific documentation
- **troubleshooting** - General troubleshooting guides
- **other** - Other documentation
## Generation Tool
The documentation was generated using the `generate_game_docs.py` script located in `/tools/`.
### Data Sources
The generator uses multiple data sources:
1. **XML Configurations** (`/modules/config_games/server_configs/*.xml`)
- Port configurations
- Configuration file paths
- Custom fields and parameters
2. **YAML Knowledgepack** (`/modules/billing/docs/gameserver_knowledgepack_v2.yaml`)
- Network port details
- System requirements
- Startup commands
- Troubleshooting tips
- External references
3. **Template Structure** (Based on Minecraft documentation)
- Consistent formatting
- Comprehensive coverage
- User-friendly navigation
### Running the Generator
```bash
cd /home/runner/work/GSP/GSP
python3 tools/generate_game_docs.py
```
The script will:
1. Load XML configurations and YAML knowledgepack
2. Find all folders with `category: "todo"` in metadata.json
3. Generate comprehensive PHP documentation for each game
4. Update metadata.json to change category to "game"
## Games Documented
The following games now have comprehensive hosting documentation:
### Action/FPS Games
- Aliens vs Predator, Call of Duty series (COD, COD2, COD4, MW2, MW3, WAW, Black Ops)
- Counter-Strike variants (CS 1.6, CS:CZ, CS:S, CS:GO, CS:Promod, CS 2D)
- Battlefield 2, Battlefield Bad Company 2
- Half-Life variants (HLDM, HL2DM, HLTV)
- Insurgency, Medal of Honor series (MOHAA, MOHBR, MOHSP, MOHSPDEMO)
- Quake 3, Quake 4, Sniper Elite V2
### Source Engine Games
- Dystopia, Hidden: Source, Natural Selection 2, Nuclear Dawn
- Pirates Vikings and Knights II, Zombie Panic Source, Synergy
- Brain Bread 2, Day of Defeat: Source
### Open World/Survival
- Atlas, Hurtworld, Life is Feudal, Miscreated
- Reign of Kings, The Forest, Space Engineers
- Wurm Unlimited, PixArk
### Racing/Simulation
- Assetto Corsa, Euro Truck Simulator 2
- Trackmania Nations, Trackmania Forever
- Wreckfest
### Multiplayer Mods
- FiveM (GTA V), Multi Theft Auto (GTA SA/VC)
- IV:MP (GTA IV), JC:MP (Just Cause 2)
- Mafia II Online, Epoch Mod
### Strategy/Building
- Avorion, Colony Survival, Eco
- FreeCol, OpenTTD, Empyrion Galactic Survival
### Arena/Combat
- Jedi Knight 2, Jedi Knight: Jedi Academy
- Mount & Blade: Warband, Mordhau
- Soldat, Smashball, Blood Frontier
- Citadel: Forged with Fire, Red Orchestra 2, Rising Storm 2
- Arma Reforger, Homefront
### Voice/Communication
- TeamSpeak 2, TeamSpeak 3, Mumble, Ventrilo
- SinusBot, Shoutcast, Shoutcast Bot
### Classic/Retro
- Unreal Tournament 99, UT2004, UT3
- Serious Sam HD TFE, Serious Sam HD TSE
- Roadkill, Wolfenstein: Return to Castle Wolfenstein
- Enemy Territory, Warsow, Nexuiz, Xonotic
- IL-2 Sturmovik, Halo: Combat Evolved
### Other
- Feed the Beast (Minecraft modpack)
- Spigot MC (Minecraft server software)
- Rigs of Rods, Flight Gear Multiplayer Server
- Virtual Box, Smokinguns, DMC, Gearbox, ESMod
- SpunkyBot, AoC, SMS
## Viewing Documentation
Access the documentation through the billing website:
```
/modules/billing/docs.php
```
Or view a specific game:
```
/modules/billing/docs.php?action=view&doc=gamename
```
## Maintenance
To update or regenerate documentation:
1. Update data sources (XML configs, YAML knowledgepack)
2. Modify the generator script if needed
3. Run the generator script
4. Commit changes to the repository
## Template Customization
To customize the documentation template, edit the `build_php_content()` method in `generate_game_docs.py`.
The template includes:
- Inline CSS styling matching the site theme
- Responsive design for mobile/desktop
- Color-coded information boxes
- Syntax-highlighted code blocks
- Professional formatting
## Contributing
When adding new game documentation:
1. Create a folder with the game's slug name
2. Add metadata.json with game information
3. Add icon.png or icon.jpg (optional)
4. Either manually create index.php or add to "todo" category and run generator
5. Update this README if adding new categories
## License
Documentation follows the same license as the GSP project. See main repository LICENSE file.

BIN
Panel/modules/billing/docs/Game Server Hosting Reference (Multiplayer PC Games).pdf Normal file
View file

Binary file not shown.

198
Panel/modules/billing/docs/IMPLEMENTATION_SUMMARY.md Normal file
View file

@ -0,0 +1,198 @@
# Game Server Documentation Generation - Implementation Summary
## Task Completed
Successfully generated comprehensive hosting documentation for **98 game servers** that were previously in the "TODO" category, bringing the total documented game servers to **143**.
## Approach
### 1. Analysis Phase
- Examined the existing Minecraft documentation as the reference template
- Analyzed the `docs.php` file to understand the documentation framework
- Reviewed available data sources:
- XML server configurations (`/modules/config_games/server_configs/*.xml`)
- YAML knowledgepack (`/modules/billing/docs/gameserver_knowledgepack_v2.yaml`)
- Existing documentation structure
### 2. Implementation
Created a Python script (`tools/generate_game_docs.py`) that:
- Loads and parses 244 XML configuration files
- Loads YAML knowledgepack with detailed info for 20 games
- Finds all folders with `category: "todo"` in their metadata.json
- Generates comprehensive PHP documentation for each game
- Updates metadata.json from "todo" to "game" category
### 3. Documentation Template
Each generated documentation includes:
#### Navigation & Overview
- Quick navigation menu with anchor links
- Game name and comprehensive introduction
- Target audience: VPS/dedicated server administrators
#### Quick Info Section
- Default port and protocol
- Minimum RAM requirements
- Game engine information
- Configuration file paths (from XML)
#### Network Ports
- Detailed port tables with purpose descriptions
- Firewall configuration for UFW, FirewallD, iptables, Windows
- Port security best practices
#### Installation & Setup
- System requirements
- Installation steps for Linux and Windows
- SteamCMD instructions (where applicable)
- Dependency information (from knowledgepack)
#### Server Configuration
- Essential settings overview
- Configuration file documentation (from XML)
- Server console commands
- Admin/RCON setup
#### Startup Parameters
- Basic and advanced startup commands (from knowledgepack)
- Parameter explanations
- Start script examples for Linux/Windows
- systemd service configuration
#### Troubleshooting
- Common issues and solutions (from knowledgepack)
- Server won't start scenarios
- Connection problems
- Performance issues
- Log file locations
#### Performance Optimization
- Server tuning recommendations
- Operating system optimization
- Monitoring suggestions
- Backup strategies
#### Security
- Firewall configuration
- Password best practices
- Regular updates
- Access control
- DDoS protection
#### Resources
- External references (from knowledgepack)
- Community links
- Official documentation
## Data Integration
The generator intelligently combines data from multiple sources:
1. **For games in YAML knowledgepack** (20 games like COD4, Dystopia, HLDM):
- Accurate port numbers and protocols
- Detailed port tables with multiple ports
- System requirements (RAM, CPU, dependencies)
- Startup command examples
- Specific troubleshooting tips
- External reference links
2. **For games with XML configs** (all games):
- Configuration file paths
- Port configuration details
- Custom field documentation
3. **For all games**:
- Consistent template structure
- Professional formatting
- Complete hosting guide sections
## Games Documented (98 New + 45 Existing = 143 Total)
### Newly Documented Games Include:
**Action/FPS**: Aliens vs Predator, Battlefield series, Call of Duty variants, Counter-Strike variants, Half-Life variants, Insurgency, Medal of Honor series, Quake series, Sniper Elite
**Source Engine**: Dystopia, Hidden: Source, Natural Selection 2, Nuclear Dawn, Pirates Vikings Knights II, Zombie Panic Source, Synergy, Brain Bread 2
**Open World/Survival**: Atlas, Hurtworld, Life is Feudal, Miscreated, Reign of Kings, The Forest, Space Engineers, Wurm Unlimited, PixArk
**Racing/Sim**: Assetto Corsa, Euro Truck Simulator 2, Trackmania series, Wreckfest
**Multiplayer Mods**: FiveM, Multi Theft Auto, IV:MP, JC:MP, Mafia II Online, Epoch Mod
**Strategy/Building**: Avorion, Colony Survival, Eco, FreeCol, OpenTTD, Empyrion
**Arena/Combat**: Jedi Knight series, Mount & Blade, Mordhau, Soldat, Smashball, Blood Frontier, Citadel, Red Orchestra 2, Rising Storm 2, Arma Reforger, Homefront
**Voice/Communication**: TeamSpeak 2/3, Mumble, Ventrilo, SinusBot, Shoutcast
**Classic/Retro**: Unreal Tournament series, Serious Sam HD, Roadkill, Wolfenstein RTCW, Enemy Territory, Warsow, Nexuiz, Xonotic, IL-2, Halo CE
**Other**: Feed the Beast, Spigot MC, Rigs of Rods, Flight Gear, and more
## Technical Details
- **Script**: `tools/generate_game_docs.py` (968 lines)
- **Template Size**: ~370-420 lines of PHP per game
- **Files Modified**: 198 files (99 index.php + 99 metadata.json)
- **Total Documentation**: ~37,000 lines of comprehensive content
- **Syntax Validation**: All PHP files validated with `php -l`
- **Categories Updated**: All TODO → game
- **Remaining TODO**: 0
## Quality Assurance
1. **Template Consistency**: All docs follow the Minecraft template structure
2. **PHP Syntax**: All files validated for syntax errors
3. **Data Accuracy**: Port info and configurations pulled from authoritative sources
4. **Formatting**: Professional styling with inline CSS matching site theme
5. **Navigation**: Quick navigation menu for easy access
6. **Completeness**: All required sections included
## Files Created/Modified
### New Files
- `tools/generate_game_docs.py` - Documentation generator script
- `modules/billing/docs/GENERATION_README.md` - Comprehensive documentation README
- `modules/billing/docs/IMPLEMENTATION_SUMMARY.md` - This file
### Modified Files
- 98 × `index.php` files - Comprehensive game server documentation
- 98 × `metadata.json` files - Category updated from "todo" to "game"
## Usage
The documentation is accessible through:
- Main docs page: `/modules/billing/docs.php`
- Individual game: `/modules/billing/docs.php?action=view&doc=gamename`
## Future Maintenance
The generator script can be reused to:
1. Generate docs for new games (add folder with metadata.json set to "todo", run script)
2. Regenerate existing docs when data sources are updated
3. Maintain consistency across all documentation
## Benefits
1. **User Experience**: Comprehensive, professional documentation for 143 game servers
2. **SEO**: Rich content for search engine discovery
3. **Conversion**: Detailed guides drive awareness of hosting services
4. **Maintenance**: Automated generation ensures consistency
5. **Scalability**: Easy to add new games following the same process
## Testing Recommendations
To fully validate the implementation:
1. Start a PHP development server or configure Apache/Nginx
2. Navigate to `/modules/billing/docs.php`
3. Verify all 143 game servers appear in the list
4. Click through several game documentation pages
5. Test navigation menu functionality
6. Verify styling matches site theme
7. Check responsive design on mobile devices
## Conclusion
Successfully completed the task of generating comprehensive documentation for all games in the "TODO" category. The documentation follows the Minecraft template structure, includes all relevant details for VPS/dedicated server hosting, and is accessible through the existing docs.php page. The generator tool is saved for future use.

160
Panel/modules/billing/docs/README.md Normal file
View file

@ -0,0 +1,160 @@
# Documentation System
## Overview
The billing module now includes a flexible documentation browser that organizes documentation into categories with an easy-to-navigate interface.
## Structure
Documentation is organized in the `/modules/billing/docs/` folder with the following structure:
```
docs/
├── category-name-1/
│ ├── index.php (Required: Documentation content)
│ ├── metadata.json (Required: Category and ordering info)
│ └── icon.png or icon.jpg (Required: Category icon)
├── category-name-2/
│ ├── index.php
│ ├── metadata.json
│ └── icon.png
└── ...
```
## Creating New Documentation
### 1. Create a Folder
Create a new folder in `/modules/billing/docs/` with a descriptive name (lowercase, hyphens for spaces):
```bash
mkdir /modules/billing/docs/my-new-doc
```
### 2. Create metadata.json
This file defines how the documentation appears in the list:
```json
{
"name": "My Documentation Title",
"description": "A brief description of this documentation",
"category": "game",
"order": 10
}
```
**Fields:**
- `name`: Display name shown in the documentation list
- `description`: Brief description shown on the card
- `category`: One of: `game`, `panel`, `mods`, `troubleshooting`, `other`
- `order`: Sort order within the category (lower numbers appear first)
### 3. Create index.php
This file contains the actual documentation content. Use PHP and HTML:
```php
<?php
/**
* My Documentation
*/
?>
<h1>My Documentation Title</h1>
<h2>Section 1</h2>
<p>Your content here...</p>
<h3>Subsection</h3>
<ul>
<li>Item 1</li>
<li>Item 2</li>
</ul>
<h2>Code Examples</h2>
<pre><code>
# Your code here
command --option value
</code></pre>
```
The documentation system automatically styles:
- Headings (h1-h4)
- Links (styled with accent color)
- Code blocks (with dark background)
- Lists and other HTML elements
### 4. Add an Icon
Add either `icon.png` or `icon.jpg` to the folder. Recommended size: 60x60 pixels or larger (will be scaled down).
If no icon is provided, a default document emoji (📄) will be shown.
## Categories
Documentation is organized into these categories:
- **game** - Game-specific server guides
- **panel** - Panel usage and features
- **mods** - Mods and addon documentation
- **troubleshooting** - Problem-solving guides
- **other** - Miscellaneous documentation
Categories are sorted and labeled automatically on the documentation page.
## Example Documentation
See the included examples:
1. **minecraft** - Game server documentation example
2. **getting-started** - Panel documentation example
3. **common-issues** - Troubleshooting documentation example
## Accessing Documentation
Users can access documentation at:
- `/modules/billing/docs.php` - Main documentation list
- `/modules/billing/docs.php?action=view&doc=folder-name` - Specific doc
A "Documentation" link is added to the main navigation menu.
## Best Practices
1. **Keep it Organized**: Use clear, descriptive folder names
2. **Consistent Naming**: Use lowercase and hyphens (e.g., `my-game-guide`)
3. **Good Descriptions**: Write helpful metadata descriptions
4. **Visual Icons**: Use recognizable icons for each category
5. **Test Content**: Preview documentation after creating it
6. **Regular Updates**: Keep documentation current with panel changes
## Migration from Old System
The old docs folder with game markdown files has been moved to `/modules/billing/docs_old/` for reference. The new system provides:
- Better organization by category
- Consistent styling
- Easier navigation
- Extensible structure for any type of documentation
To migrate old documentation:
1. Create a new folder for each document
2. Convert markdown to HTML in index.php
3. Add appropriate metadata.json
4. Add an icon image
## Troubleshooting
### Documentation not appearing
- Check that folder has all three required files (index.php, metadata.json, icon)
- Verify metadata.json is valid JSON
- Ensure file permissions allow reading
### Styling issues
- The system uses inline styles from docs.php
- Custom styles in index.php may conflict
- Keep content semantic (use proper HTML tags)
### Icons not showing
- Check file exists and is named exactly `icon.png` or `icon.jpg`
- Verify image file is not corrupted
- Try a smaller image size if very large

622
Panel/modules/billing/docs/XML-Notes.md Normal file
View file

@ -0,0 +1,622 @@
## OGP XML Notes / still W.I.P.
_The order of each XML element matters, and this guide presents them in their order of appearance!_
___
### Linux and Windows:
#### Game Config:
This is the first element. There can only be one `<game_config>` element.
```
<game_config>
the whole XML file content here
</game_config>
```
All the following elements should be contained within `<game_config>` element.
___
#### Game Key:
Comes after `<game_config>` element (actually within `<game_config>` element as said above). There can only be one `<game_key>` element. Example:
```
<game_key>space_engineers_win64</game_key>
```
This is a unique key used to identify this specific game server in OGP. You should not use spaces, nor any special character in it, only alpha-numeric value and underscores. It should contain a suffix related to the compatible OS. Available suffixes are `_win32`, `_win64`, `_linux32`, `_linux64`, using one of these suffixes in the game_key will let OGP know which OS it is available on, making it visible or not when you install a new game server, depending on your OS architecture. `_win` and `_linux` work too, but we highly recommend to now use the previously listed suffixes.
___
#### Query Protocol:
Comes after `<game_key>` element. There can only be one `<protocol>` element. Example:
```
<protocol>lgsl</protocol>
```
It defines the query protocol used by OGP. Available protocols are `lgsl`, `gameq`, `rcon` (`rcon2`? `lcon`?)
___
#### LGSL Query Name:
Comes after `<protocol>` element. There can only be one `<lgsl_query_name>` element. Example:
```
<lgsl_query_name>killingfloor2</lgsl_query_name>
```
This is the unique key referencing this specific game server in the LGSL protocol file, used to query the game server.
___
#### GameQ Query Name:
Comes after `<protocol>` element. There can only be one `<gameq_query_name>` element. Example:
```
<gameq_query_name>redorchestra2</gameq_query_name>
```
This is the unique key referencing this specific game server in the GameQ protocol files, used to query the game server.
___
#### Installer:
Comes after `<protocol>` element (or comes after `<lgsl_query_name>` or `<gameq_query_name>` element when used). There can only be one `<installer>` element. Example:
```
<installer>steamcmd</installer>
```
Defines the use of SteamCMD tool to install the game server.
___
#### Game Name:
Comes after `<installer>` element. There can only be one `<game_name>` element. Example:
```
<game_name>Killing Floor 2</game_name>
```
This is the real game server name appearing in the list when installing a new game server.
___
#### Server Executable Name:
Comes after `<game_name>` element. There can only be one `<server_exec_name>` element. Example:
```
<server_exec_name>SpaceEngineersDedicated.exe</server_exec_name>
```
This is the server executable name used in the start command line.
___
#### Query Port:
Comes after `<server_exec_name>` element. There can only be one `<query_port>` element. Example:
```
<query_port type='add'>13</query_port>
```
Difference between the server port (`%PORT%`) and the query port (`%QUERY_PORT%`). In this example the variable %QUERY_PORT% will be 13 added to the port value.
___
#### CLI Template:
Comes after `<server_exec_name>` element. There can only be one `<cli_template>` element. Example:
```
<cli_template>-console %BASE_PATH% -ignorelastsession</cli_template>
```
```
<cli_template>%MAP%%GAMEMODE%%DIFFICULTY%%GAMELENGTH%%PLAYERS%%MUTATOR% %PORT% %IP% %WEB_ADMIN_PORT% %QUERY_PORT%</cli_template>
```
This is the template that will generate the start command line placed after the server executable name.
You can use these variables which are known to OGP:
```
GAME_TYPE
HOSTNAME
IP
MAP
PID_FILE
PLAYERS
PORT
QUERY_PORT
BASE_PATH
HOME_PATH
SAVE_PATH
OUTPUT_PATH
CONTROL_PASSWORD
```
These variable should be between `%` characters, the Panel will then replace them with the proper value when generating the start command line.
You can also use custom variables that you will define later in the XML.
___
#### CLI Parameters:
Comes after `<cli_template>` element. There can only be one `<cli_params>` element. Example:
```
<cli_params>
<cli_param id="MAP" cli_string="" />
<cli_param id="IP" cli_string="-MultiHome=" options="q"/>
<cli_param id="PORT" cli_string="-Port=" options="sq"/>
<cli_param id="PID_FILE" cli_string="" />
<cli_param id="GAME_TYPE" cli_string="" />
<cli_param id="HOME_PATH" cli_string="" />
</cli_params>
```
It defines the known variables used in `<cli_template>`. In this example we can imagine that for **%MAP%** it will generate the map name without space or quotes around it, because there is no `options`, for **%IP%** it will generate `-MultiHome="123.123.123.123"` using the `cli_string` and adding only quotes around the game server IP value because of `options="q"`, and **%PORT%** will generate `-Port= "27015"` using the `cli_string` and adding space and quotes around the game server port because of `options="sq"`.
___
#### Reserve Ports:
Comes after `<cli_template>` or `<cli_params>` element. There can only be one `<reserve_ports>` element. Example:
```
<reserve_ports>
<port type="subtract" id="WEB_ADMIN_PORT" cli_string="-WebAdminPort=">5</port>
<port type="add" id="STEAM_PORT" cli_string="-SteamPort=">19238</port>
<port type="add" id="MY_CUSTOM_PORT">666</port>
</reserve_ports>
```
You can add reserved ports here to use in the generated start command line. These ports will also be managed by OGP if OGP is used to manage the Agent machine firewall. Type can be `add` or `subtract` which is self explanatory. In this example when using the %WEB_ADMIN_PORT% variable in the `<cli_template>` it will generate `-WebAdminPort=XXX`, XXX being 5 subtracted to the Port set for this game server, when using the %STEAM_PORT% variable in the `<cli_template>` it will generate `-SteamPort=XXX` where XXX will be 19238 added to the Port set for this game server. As you can see, the variable %MY_CUSTOM_PORT% have no `cli_string`, this can be used this way to simply open this port (which here would be 666 added to the game server port) in the Agent machine firewall, when OGP is set to control the machine firewall (note: the firewall management may actually not open anything else than the game server port, to be verified).
___
#### CLI Allowed Characters:
Comes after `<reserve_ports>` element. There can only be one `<cli_allow_chars>` element. Example:
```
<cli_allow_chars>;</cli_allow_chars>
```
Used to allow some special characters in the command line. Escaped by default: ```\ " ' | & ; > < ` $ ( ) [ ]```
___
#### Maps Location:
Comes after `<cli_template>` element. There can only be one `<maps_location>` element. Example:
```
<maps_location>folder/maps</maps_location>
```
It sets the path of the map folder for this game server, which will be used to generate a selectable map list available before starting the game server. If folder contains map files it will use their name without the extension, if it contains sub folders with each map inside each own sub folder, it will generate the map list based on the folders names contained in the defined path. The selected map in the list will be used to replace the %MAP% variable in the `<cli_template>`.
___
#### Map List:
Comes after `<cli_template>` element. There can only be one `<map_list>` element. Example:
```
<map_list>maplist.txt</map_list>
```
The map list file path used to generate the selectable map list available before starting the game server. In this example it will look for a file called maplist.txt inside the root of the game server. Map list should have one map per line. The selected map in the list will be used to replace the %MAP% variable in the `<cli_template>`.
___
#### Console Log:
Comes after `<cli_template>` element. There can only be one `<console_log>` element. Example:
```
<console_log>KFGame/Logs/Launch.log</console_log>
```
It defines the path of the log file that will be shown in the LOG page of the game server. Most game servers, especially on Linux, will not need that, when in general, Windows game server will need it to properly show the output log.
___
#### Executable Location:
Comes after `<console_log>` element. There can only be one `<exe_location>` element. Example:
```
<exe_location>Binaries/Win64</exe_location>
```
It defines the path of the game server executable when not in the root folder.
___
#### Max User Amount:
Comes after `<exe_location>` element. There can only be one `<max_user_amount>` element. Example:
```
<max_user_amount>64</max_user_amount>
```
It defines the maximum player number you will be able to set when creating the game server.
___
#### Control Protocol:
Comes after `<max_user_amount>` element. There can only be one `<control_protocol>` element. Example:
```
<control_protocol>rcon2</control_protocol>
```
Can be `rcon`, `rcon2`, or `lcon` (legacy). Note that `rcon` can also have type option to define, which can be `old` or `new`. Example:
```
<control_protocol>rcon</control_protocol>
<control_protocol_type>old</control_protocol_type>
```
___
#### Mods:
Comes after `<control_protocol>` element. There can only be one `<mods>` element. Example:
```
<mods>
<mod key="insurgency">
<name>none</name>
<installer_name>237410</installer_name>
</mod>
</mods>
```
Used to define different mods for the game server, in this example there is only one mod available which will be the default installed one (actually the game server itself here). The `<installer_name>` here is the Steam appID that will be used to install and update the game server. (note: case RSync to explain? Case multi mods to explain?)
___
#### Replace Texts
`<replace_texts>` Comes after `<mods>`.
Contains multiple `<text>` entries like so:
```
<replace_texts>
<text key="control_password">
<default>ServerAdminPassword=.*</default>
<var>ServerAdminPassword=</var>
<filepath>ShooterGame/Saved/Config/LinuxServer/GameUserSettings.ini</filepath>
<options>sq</options>
</text>
<text key="home_name">
<default>SessionName=.*</default>
<var>SessionName=</var>
<filepath>ShooterGame/Saved/Config/LinuxServer/GameUserSettings.ini</filepath>
<options>sq</options>
</text>
</replace_texts>
```
`<default>` within `<text>` is what the line to replace starts with.
`<var>` within `<text>` is the key for what should be kept when the line is replaced with the value entered by the user when replacing text occurs.
`<filepath>` within `<text>` specifies the text file to make the replacement in.
`<options>` within `<text>` specifies how to enter the user's value after the `<var>` key. Possible options are:
```
nothing / no value = placed as is
s = space / separated
q = quoted
sq = space and quotes
sc = space and ends with a comma
sqc = space, quoted, and ends with a comma
```
These replace text will be applied on server start and modify the specified config files with the values generated by the Panel.
___
#### Server Params:
`<server_params>` Comes after `<replace_texts>`.
Contains multiple `<param>` entries like so:
```
<server_params>
<param id="SP" key="?ServerPassword=" type="text">
<option>ns</option>
<caption>Server Password</caption>
<desc>Players must know this password to connect.</desc>
</param>
<param id="DIFFICULTY" key="?Difficulty=" type="select">
<option value=""></option>
<option value="0">Normal</option>
<option value="1">Hard</option>
<options>ns</options>
<caption>Difficulty</caption>
<desc>This sets the server difficulty. Leave empty to configure this parameter in the config files or webadmin</desc>
</param>
<param key="-EnableCheats" type="checkbox_key_value">
<caption>Cheats</caption>
<desc>Enable the cheats to be used from the ingame Admin menu</desc>
</param>
</server_params>
```
`id` attribute on the `<param>` specifies which variable to replace in the `<cli_template>`
`key` attribute specifies what will replace the variable defined by id attribute
type attribute will define what kind of parameter it is, possible values are `text` `select` `checkbox_key_value`:
- `text` will allow to write text value to be added during the replacement of the variables in startup command line. For example, `%SP%` in `<cli_template>` would be replaced with `?ServerPassword=XXX` where XXX would be the value entered by the user in the text box, if nothing is entered the variable is not replaced but removed from `<cli_template>`. The value entered can be modified to fit your needs by using the `<option>` element within the `<param>` element.
- `select` will create a selectable list to choose the parameter value. The `%DIFFICULTY%` variable in `<cli_template>` would be replaced with `?Difficulty=1` if `Hard` would have been selected before starting the server.
- `checkbox_key_value` will add a simple checkbox that, if ticked before starting server, would add the parameter `-EnableCheats` at the end of the startup command line.
Valid options are for the `<options>` element within the `<param>` element within the `<server_params>` element are:
```
ns = no space between key and value
q = quotes wrapped around value after key (no space added)
s = space added after key before value (no quotes added)
anything else = space after key and quotes around the value
```
___
#### Custom Fields:
Comes after `<server_params>` element. There can only be one `<custom_fields>` element. Example:
```
<custom_fields>
<field key="sv_maxrate" type="text">
<default>sv_maxrate.*</default>
<default_value>0</default_value>
<var>sv_maxrate</var>
<filepath>orangebox/cspromod/cfg/server.cfg</filepath>
<options>s</options>
<desc>Max bandwidth rate allowed on server ( bytes per second ), 0 == unlimited.</desc>
</field>
<field key="sv_minrate" type="text">
<default>sv_minrate.*</default>
<default_value>5000</default_value>
<var>sv_minrate</var>
<filepath>orangebox/cspromod/cfg/server.cfg</filepath>
<options>s</options>
<desc>Min bandwidth rate allowed on server ( bytes per second ), 0 == unlimited.</desc>
</field>
<field key="sv_maxcmdrate" type="text">
<default>sv_maxcmdrate.*</default>
<default_value>66</default_value>
<var>sv_maxcmdrate</var>
<filepath>orangebox/cspromod/cfg/server.cfg</filepath>
<options>s</options>
<desc>If sv_mincmdrate is > 0, this sets the maximum value for cl_cmdrate.</desc>
</field>
<field key="sv_mincmdrate" type="text">
<default>sv_mincmdrate.*</default>
<default_value>67</default_value>
<var>sv_mincmdrate</var>
<filepath>orangebox/cspromod/cfg/server.cfg</filepath>
<options>s</options>
<desc>This sets the minimum value for cl_cmdrate. 0 == unlimited.</desc>
</field>
<field key="sv_maxupdaterate" type="text">
<default>sv_maxupdaterate.*</default>
<default_value>66</default_value>
<var>sv_maxupdaterate</var>
<filepath>orangebox/cspromod/cfg/server.cfg</filepath>
<options>s</options>
<desc>Maximum updates per second that the server will allow.</desc>
</field>
<field key="sv_minupdaterate" type="text">
<default>sv_minupdaterate.*</default>
<default_value>67</default_value>
<var>sv_minupdaterate</var>
<filepath>orangebox/cspromod/cfg/server.cfg</filepath>
<options>s</options>
<desc>Minimum updates per second that the server will allow.</desc>
</field>
</custom_fields>
```
Custom Fields available when you go to Custom Fields button from the game server page. These custom fields will be applied on every server start and will replace the specific values in the specified config files.
___
#### List Players Command:
Comes after `<custom_fields>` element. There can only be one `<list_players_command>` element. Example:
```
<list_players_command>status</list_players_command>
```
This is the command to list the players on the server when using `control_protocol`.
___
#### Player Info Regex:
Comes after `<list_players_command>` element. There can only be one `<player_info_regex>` element. Example:
```
<player_info_regex>#\#\s*(\d*)\s*\"(.*)\".*#</player_info_regex>
```
Regex used for player info when using `control_protocol`.
___
#### Player Info:
Comes after `<player_info_regex>` element. There can only be one `<player_info>` element. Example:
```
<player_info>
<index key="1">userid</index>
<index key="2">Name</index>
</player_info>
```
Defines the different keys for player infos when using `control_protocol`.
___
#### Player Commands:
Comes after `<player_info>` element. There can only be one `<player_commands>` element. Example:
```
<player_commands>
<command key="Kick" type="hidden">
<string>kick "%Name%"</string>
</command>
<command key="Ban" type="select">
<option value="0">Permanent</option>
<option value="15">15m</option>
<option value="30">30m</option>
<option value="60">1h</option>
<option value="1440">1D</option>
<option value="10080">1W</option>
<option value="43200">30D</option>
<string>banid %input% %userid% kick</string>
</command>
<command key="Change Nick" type="text">
<default>new nick</default>
<string>sm_rename #%userid% "%input%"</string>
</command>
</player_commands>
```
Defines the commands available when using `control_protocol`.
___
#### Pre Install:
Comes after `<player_commands>` element. There can only be one `<pre_install>` element. It can contain multiple entries one per line. Example:
```
<pre_install>
</pre_install>
```
Script executed before installing the game server.
___
#### Post Install:
Comes after `<pre_install>` element. There can only be one `<post_install>` element. It can contain multiple entries one per line. Example:
```
<post_install>
cp linux64/steamclient.so ./steamclient.so
echo &apos;#!/bin/bash
./bin/AvorionServer $@&apos; &gt; avorion_ogpstarter.sh
chmod +x avorion_ogpstarter.sh
</post_install>
```
Script executed after installing or updating the game server, similar to `pre_install` (which `pre_install is executed before installation/update obviously)`. In this example, after installation or update of the game server, it will copy the file linux64/steamclient.so to ./steamclient.so and generate a bash script in the file avorion_ogpstarter.sh and then make this bash script executable. Note that the bash script must be written to be properly interpreted by the XML (see the `"` character replaced by `&apos;`, `>` replaced by `&gt;`, and so on.. if you write plain bash script it will break the XML in Panel, so keep that in mind and replace special characters with their XML readable counterpart.
___
### Windows:
#### Pre-Start Commands:
Comes after the `<server_params>` element. There can only be one `<pre_start>` element. It can run multiple lines of script that will be executed by the cmd batch environment.
This can be filled with lines of script that will be run in a batch script just before the game server is started. The script will always change directory into the home directory before your commands will run, so you can reference things locally.
```
<pre_start></pre_start>
```
___
#### Environment Variables:
Comes after `<pre_start>` element. There can only be one `<environment_variables>` element. It can contain multiple entries one per line.
```
<environment_variables>
</environment_variables>
```
Used for setting environment variables which may be needed by some servers. This is run in the batch environment, so please make sure you're using Windows commands for your environment SETS.
Special entries:
`{OGP_HOME_DIR}` will be replaced by the home directory for the game server.
___
### Linux:
#### Pre-Start Commands:
Comes after the `<server_params>` element. There can only be one `<pre_start>` element. It can run multiple lines of script that will be executed by the bash shell.
This can be filled with lines of script that will be run in a bash script just before the game server is started. You do NOT need to provide the shebang "#!/bin/bash" in your commands. The script will always change directory into the home directory before your commands will run, so you can reference things locally.
```
<pre_start></pre_start>
```
Example (writes hiya to a file named testingPreStart in the home directory of the server):
```
<pre_start>
echo "hiya" >> testingPreStart
</pre_start>
```
___
#### Environment Variables:
Comes after `<pre_start>` element. There can only be one `<environment_variables>` element. It can contain multiple entries one per line.
```
<environment_variables>
</environment_variables>
```
Used for setting environment variables which may be needed by some servers such as Rust.
Example:
```
<environment_variables>
export LD_LIBRARY_PATH="{OGP_HOME_DIR}/RustDedicated_Data/Plugins/x86_64"
</environment_variables>
```
Special entries:
`{OGP_HOME_DIR}` will be replaced by the home directory for the game server.
___
### Linux and Windows:
#### Locking / Protecting Additional Files:
Comes after `<environment_variables>` element. There can only be one `<lock_files>` element. It can contain multiple entries one per line.
```
<lock_files>
</lock_files>
```
Used for protecting additional game server files by using the system program `chattr`. This is a Linux only element. You can use relative (paths are relative to the home directory for the game server) or absolute paths.
Example:
```
<lock_files>
bin/AvorionServer
</lock_files>
```
The above example adds chattr +i to the bin/AvorionServer executable. This prevents the user from changing it. When SteamCMD or Rsync is run to update the files, everything is unlocked, but the files specified here will be locked post update / install. These files are also locked again (just to make sure) before the server is restarted and started. Entries here will not BREAK or AFFECT the steamcmd or Rsync update process.
Special entries:
`{OGP_HOME_DIR}` will be replaced by the home directory for the game server. However, if you're using this variable, you should just use a local path.
___
#### Configuration Files:
Comes after `<lock_files>` element. There can only be one `<configuration_files>` element.
There can be multiple `<file>` entries within `<configuration_files>` element, the description in the `<file>` element is not mandatory. Example:
```
<configuration_files>
<file description="The Main config file">Path/To/Config/File.ini</file>
<file description="Another Config file">FolderX/GameEngine.ini</file>
<file>FolderZ/GameConfig.ini</file>
</configuration_files>
```
It defines the files directly editable from Panel even without access to the server files directly. This requires the EditConfigFiles extra module.

BIN
Panel/modules/billing/docs/aliensvspredator/icon.png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 2.8 KiB

411
Panel/modules/billing/docs/aliensvspredator/index.php Normal file
View file

@ -0,0 +1,411 @@
<?php
/**
* Aliens vs Predator Server Documentation - Comprehensive Guide
* General game server hosting information (not platform-specific)
*/
?>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">📚 Quick Navigation</h3>
<div style="display: flex; flex-wrap: wrap; gap: 10px;">
<a href="#quick-info" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Quick Info</a>
<a href="#ports" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔌 Ports</a>
<a href="#installation" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Installation</a>
<a href="#configuration" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Configuration</a>
<a href="#parameters" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">⚙️ Startup Parameters</a>
<a href="#troubleshooting" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔧 Troubleshooting</a>
<a href="#performance" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Performance</a>
<a href="#security" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Security</a>
</div>
</div>
<h1>Aliens vs Predator Server Hosting Guide</h1>
<h2>Overview</h2>
<p>Aliens vs Predator is a multiplayer game server that can be hosted on a VPS or dedicated server. This comprehensive guide covers everything you need to know about hosting a Aliens vs Predator server for your community.</p>
<h2 id="quick-info">Quick Info</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<ul style="color: #e5e7eb; line-height: 1.8; margin: 0;">
<li><strong style="color: #ffffff;">Default Port:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">Varies (see configuration)</code></li>
<li><strong style="color: #ffffff;">Protocol:</strong> TCP/UDP</li>
<li><strong style="color: #ffffff;">Minimum RAM:</strong> 1GB</li>
<li><strong style="color: #ffffff;">Engine:</strong> Various</li>
<li><strong style="color: #ffffff;">Steam App ID:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">34120</code></li>
<li><strong style="color: #ffffff;">Recommended OS:</strong> Linux (Ubuntu/Debian) or Windows Server</li>
<li><strong style="color: #ffffff;">Configuration Files:</strong><ul style="margin-top: 8px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">default.cfg</code> - Server Configurations</li>
</ul></li>
</ul>
</div>
<h2 id="ports">🔌 Network Ports</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">Required Ports</h3>
<p style="color: #e5e7eb;">The Aliens vs Predator server typically uses a configurable port. Check your server configuration files for the specific port settings.</p>
<h3 style="color: #ffffff; margin-top: 20px;">Firewall Configuration</h3>
<p style="color: #e5e7eb;">Allow server ports through your firewall:</p>
<pre><code style="color: #a5b4fc;"># UFW (Ubuntu/Debian)
sudo ufw allow [PORT]/tcp
sudo ufw allow [PORT]/udp
sudo ufw reload
# FirewallD (CentOS/RHEL)
sudo firewall-cmd --permanent --add-port=[PORT]/tcp
sudo firewall-cmd --permanent --add-port=[PORT]/udp
sudo firewall-cmd --reload
# Windows Firewall
netsh advfirewall firewall add rule name="Aliens vs Predator Server" dir=in action=allow protocol=TCP localport=[PORT]
netsh advfirewall firewall add rule name="Aliens vs Predator Server" dir=in action=allow protocol=UDP localport=[PORT]
</code></pre>
<h3 style="color: #ffffff; margin-top: 20px;">⚠️ Port Security Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8;">
<li>Only open ports that are necessary for the game server to function</li>
<li>Consider using non-standard ports to reduce automated attacks</li>
<li>If using cloud hosting, configure security groups properly</li>
<li>Monitor connection attempts and unusual traffic patterns</li>
</ul>
</div>
<h2 id="installation">Installation & Setup</h2>
<h3>System Requirements</h3>
<ul>
<li><strong>OS:</strong> Linux (Ubuntu 20.04+ or Debian 11+ recommended) or Windows Server 2019+</li>
<li><strong>CPU:</strong> 2+ cores recommended (single-threaded performance important for most game servers)</li>
<li><strong>RAM:</strong> 1GB minimum (more for larger player counts)</li>
<li><strong>Storage:</strong> 5GB+ for server files (SSD recommended for better performance)</li>
<li><strong>Network:</strong> Stable internet connection with low latency</li>
</ul>
<h3>Installation Steps</h3>
<h4>Linux (Ubuntu/Debian)</h4>
<pre><code># Update system packages
sudo apt update && sudo apt upgrade -y
# Create server directory
mkdir -p ~/gameserver
cd ~/gameserver
# Download server files (method varies by game)
# Check official documentation for download links
</code></pre>
<h4>Windows Server</h4>
<p>Download the server files from the official game website or through Steam (if applicable). Extract to a dedicated folder and run the server executable.</p>
<h3>Using SteamCMD - RECOMMENDED METHOD</h3>
<p><strong>This game can be installed via SteamCMD using App ID: 34120</strong></p>
<h4>Install SteamCMD (Ubuntu/Debian)</h4>
<pre><code># Update package list
sudo apt update
# Enable 32-bit architecture
sudo dpkg --add-architecture i386
sudo apt update
# Install SteamCMD
sudo apt install -y lib32gcc-s1 steamcmd
</code></pre>
<h4>Download Server Files</h4>
<pre><code># Create directory for game server
mkdir -p ~/gameservers/aliensvspredator
# Run SteamCMD and download
steamcmd +login anonymous \
+force_install_dir ~/gameservers/aliensvspredator \
+app_update 34120 validate \
+quit
# Server files are now in ~/gameservers/aliensvspredator/
cd ~/gameservers/aliensvspredator
ls -la
</code></pre>
<h4>Windows Installation with SteamCMD</h4>
<ol>
<li>Download SteamCMD from: <a href="https://steamcdn-a.akamaihd.net/client/installer/steamcmd.zip" target="_blank">https://steamcdn-a.akamaihd.net/client/installer/steamcmd.zip</a></li>
<li>Extract to <code>C:\steamcmd\</code></li>
<li>Open Command Prompt and run:</li>
</ol>
<pre><code>cd C:\steamcmd
steamcmd.exe +login anonymous ^
+force_install_dir C:\gameservers\aliensvspredator ^
+app_update 34120 validate ^
+quit
</code></pre>
<h2 id="configuration">Server Configuration</h2>
<p>After installation, you'll need to configure your server. Here's where to find the configuration files and what settings you can change.</p>
<h3>Essential Settings</h3>
<ul>
<li><strong>Server Name:</strong> Set a descriptive name for your server</li>
<li><strong>Max Players:</strong> Configure based on your server's resources</li>
<li><strong>Password:</strong> Optional password protection for private servers</li>
<li><strong>Admin/RCON Password:</strong> Set a strong password for remote administration</li>
<li><strong>Game Mode:</strong> Configure game-specific modes and settings</li>
</ul>
<h3>Configuration Files</h3>
<p>Important configuration files for this server:</p>
<ul>
<li><strong><code>default.cfg</code></strong> - Server Configurations</li>
</ul>
<h3>Server Commands</h3>
<p>Common administrative commands (access via console or RCON):</p>
<pre><code># Kick player
kick [player_name]
# Ban player
ban [player_name]
# Change map/level (syntax varies by game)
changelevel [map_name]
# Set admin password (if supported)
setadminpassword [password]
</code></pre>
<h2 id="parameters">⚙️ Startup Parameters</h2>
<h3>Basic Startup</h3>
<pre><code># Generic startup command structure
./server_executable [parameters]
</code></pre>
<h3>Common Parameters</h3>
<ul>
<li><code>-port [number]</code> - Set the server port</li>
<li><code>-maxplayers [number]</code> - Maximum player slots</li>
<li><code>-map [name]</code> - Starting map/level</li>
<li><code>-console</code> - Enable console output</li>
<li><code>-nographics</code> - Run without graphics (headless mode)</li>
</ul>
<h3>Creating a Start Script</h3>
<p><strong>Linux (start.sh):</strong></p>
<pre><code>#!/bin/bash
cd /path/to/server
./server_executable [parameters] 2>&1 | tee server.log
</code></pre>
<pre><code>chmod +x start.sh
./start.sh
</code></pre>
<p><strong>Windows (start.bat):</strong></p>
<pre><code>@echo off
cd /d "%~dp0"
server_executable.exe [parameters]
pause
</code></pre>
<h3>Running as a Service</h3>
<p><strong>Linux (systemd):</strong></p>
<pre><code># Create service file: /etc/systemd/system/gameserver.service
[Unit]
Description=Aliens vs Predator Server
After=network.target
[Service]
Type=simple
User=gameserver
WorkingDirectory=/home/gameserver/server
ExecStart=/home/gameserver/server/start.sh
Restart=on-failure
RestartSec=10
[Install]
WantedBy=multi-user.target
</code></pre>
<pre><code># Enable and start service
sudo systemctl daemon-reload
sudo systemctl enable gameserver
sudo systemctl start gameserver
sudo systemctl status gameserver
</code></pre>
<h2 id="troubleshooting">🔧 Troubleshooting</h2>
<h3>Server Won't Start</h3>
<h4>Check Server Logs</h4>
<pre><code># View recent log entries
tail -f server.log
# Or check system logs
journalctl -u gameserver -f
</code></pre>
<h4>Port Already in Use</h4>
<pre><code># Find what's using the port
sudo lsof -i :[PORT]
sudo netstat -tulpn | grep [PORT]
# Kill the process or change server port
</code></pre>
<h4>Missing Dependencies</h4>
<p>Ensure all required dependencies are installed. Check the error messages for missing libraries or packages.</p>
<h3>Connection Issues</h3>
<h4>Can't Connect to Server</h4>
<ol>
<li><strong>Verify server is running:</strong> <code>ps aux | grep server</code></li>
<li><strong>Check port is listening:</strong> <code>netstat -an | grep [PORT]</code></li>
<li><strong>Verify firewall rules</strong> (see Ports section above)</li>
<li><strong>Check server IP:</strong> Use external IP, not localhost</li>
<li><strong>Router/NAT:</strong> Ensure port forwarding is configured</li>
</ol>
<h4>High Latency/Lag</h4>
<ul>
<li>Check server resource usage (CPU, RAM, disk I/O)</li>
<li>Verify network bandwidth is adequate</li>
<li>Consider server location relative to players</li>
<li>Check for background processes consuming resources</li>
</ul>
<h3>Performance Issues</h3>
<h4>Server Lag</h4>
<ol>
<li><strong>Monitor resources:</strong> Use <code>htop</code> or <code>top</code></li>
<li><strong>Check disk I/O:</strong> Use <code>iotop</code></li>
<li><strong>Review server logs</strong> for errors or warnings</li>
<li><strong>Reduce player count</strong> or increase server resources</li>
<li><strong>Optimize configuration</strong> based on server capacity</li>
</ol>
<h4>Memory Leaks</h4>
<pre><code># Monitor memory usage
free -h
top -p $(pgrep -f server)
# Restart server regularly via cron if needed
0 4 * * * /home/gameserver/restart.sh
</code></pre>
<h2 id="performance">Performance Optimization</h2>
<h3>Server Tuning</h3>
<ul>
<li><strong>CPU:</strong> Ensure adequate CPU allocation; most game servers are single-threaded</li>
<li><strong>RAM:</strong> Allocate sufficient memory; monitor usage and adjust as needed</li>
<li><strong>Disk:</strong> Use SSD storage for better I/O performance</li>
<li><strong>Network:</strong> Ensure stable, low-latency connection</li>
</ul>
<h3>Operating System Optimization</h3>
<pre><code># Increase file descriptor limits
echo "* soft nofile 65536" >> /etc/security/limits.conf
echo "* hard nofile 65536" >> /etc/security/limits.conf
# Network tuning
sysctl -w net.core.rmem_max=16777216
sysctl -w net.core.wmem_max=16777216
sysctl -w net.ipv4.tcp_rmem="4096 87380 16777216"
sysctl -w net.ipv4.tcp_wmem="4096 87380 16777216"
</code></pre>
<h3>Monitoring</h3>
<p>Set up monitoring to track server health:</p>
<ul>
<li>CPU and memory usage</li>
<li>Network traffic and latency</li>
<li>Player count and activity</li>
<li>Error rates and crash logs</li>
</ul>
<h3>Backup Strategy</h3>
<pre><code>#!/bin/bash
# backup.sh - Run via cron
DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_DIR="/backups/gameserver"
SERVER_DIR="/home/gameserver/server"
# Create backup
tar -czf $BACKUP_DIR/backup_$DATE.tar.gz -C $SERVER_DIR .
# Keep only last 7 days
find $BACKUP_DIR -name "backup_*.tar.gz" -mtime +7 -delete
</code></pre>
<h2 id="security">Security Best Practices</h2>
<h3>Firewall Configuration</h3>
<pre><code># Minimal firewall - only allow necessary ports
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow [SERVER_PORT]/tcp
sudo ufw allow [SERVER_PORT]/udp
sudo ufw allow 22/tcp # SSH
sudo ufw enable
</code></pre>
<h3>Strong Passwords</h3>
<ul>
<li>Use strong, unique passwords for admin/RCON access</li>
<li>Never use default passwords</li>
<li>Change passwords regularly</li>
<li>Don't share admin credentials unnecessarily</li>
</ul>
<h3>Regular Updates</h3>
<ul>
<li>Keep server software updated to the latest stable version</li>
<li>Update operating system and dependencies regularly</li>
<li>Subscribe to security advisories for your game</li>
<li>Test updates on a staging server before production deployment</li>
</ul>
<h3>Access Control</h3>
<ul>
<li>Limit SSH access to specific IPs if possible</li>
<li>Use SSH keys instead of passwords</li>
<li>Disable root login via SSH</li>
<li>Implement fail2ban or similar intrusion prevention</li>
</ul>
<h3>DDoS Protection</h3>
<ul>
<li>Consider DDoS protection services (Cloudflare, OVH, etc.)</li>
<li>Implement rate limiting where supported</li>
<li>Monitor for unusual traffic patterns</li>
<li>Have an incident response plan</li>
</ul>
<h2>Additional Resources</h2>
<ul>
<li>Official Aliens vs Predator documentation and forums</li>
<li>Community wikis and guides</li>
<li>Game-specific Discord or Reddit communities</li>
<li>Server hosting provider documentation</li>
</ul>
<div style="background: #78350f; padding: 20px; border-left: 4px solid #f59e0b; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;"><i class="fas fa-exclamation-triangle" style="color: #fbbf24; margin-right: 8px;"></i>Important Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8; margin: 0;">
<li>Always make backups before making configuration changes</li>
<li>Keep your server and dependencies updated</li>
<li>Monitor server resources and player activity</li>
<li>Follow the game's End User License Agreement (EULA) and Terms of Service</li>
<li>Join community forums for support and best practices</li>
</ul>
</div>
<p style="text-align: center; margin-top: 30px; color: #666;">
<em>Last updated: November 2025 | For Aliens vs Predator server hosting</em>
</p>

7
Panel/modules/billing/docs/aliensvspredator/metadata.json Normal file
View file

@ -0,0 +1,7 @@
{
"description": "Setup and configuration guide for Aliens vs Predator game servers",
"name": "Aliens vs Predator",
"order": 5,
"category": "game",
"complete": true
}

362
Panel/modules/billing/docs/amxmodx/index.php Normal file
View file

@ -0,0 +1,362 @@
<?php
/**
* AMX Mod X Server Documentation - Comprehensive Guide
* General game server hosting information (not platform-specific)
*/
?>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">📚 Quick Navigation</h3>
<div style="display: flex; flex-wrap: wrap; gap: 10px;">
<a href="#quick-info" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Quick Info</a>
<a href="#ports" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔌 Ports</a>
<a href="#installation" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Installation</a>
<a href="#configuration" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Configuration</a>
<a href="#parameters" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">⚙️ Startup Parameters</a>
<a href="#troubleshooting" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔧 Troubleshooting</a>
<a href="#performance" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Performance</a>
<a href="#security" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Security</a>
</div>
</div>
<h1>AMX Mod X Server Hosting Guide</h1>
<h2>Overview</h2>
<p>AMX Mod X is a multiplayer game server that can be hosted on a VPS or dedicated server. This comprehensive guide covers everything you need to know about hosting a AMX Mod X server for your community.</p>
<h2 id="quick-info">Quick Info</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<ul style="color: #e5e7eb; line-height: 1.8; margin: 0;">
<li><strong style="color: #ffffff;">Default Port:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">Varies (see configuration)</code></li>
<li><strong style="color: #ffffff;">Protocol:</strong> TCP/UDP</li>
<li><strong style="color: #ffffff;">Minimum RAM:</strong> 1GB</li>
<li><strong style="color: #ffffff;">Engine:</strong> Various</li>
<li><strong style="color: #ffffff;">Steam App ID:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">N/A</code></li>
<li><strong style="color: #ffffff;">Recommended OS:</strong> Linux (Ubuntu/Debian) or Windows Server</li>
</ul>
</div>
<h2 id="ports">🔌 Network Ports</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">Required Ports</h3>
<p style="color: #e5e7eb;">The AMX Mod X server typically uses a configurable port. Check your server configuration files for the specific port settings.</p>
<h3 style="color: #ffffff; margin-top: 20px;">Firewall Configuration</h3>
<p style="color: #e5e7eb;">Allow server ports through your firewall:</p>
<pre><code style="color: #a5b4fc;"># UFW (Ubuntu/Debian)
sudo ufw allow [PORT]/tcp
sudo ufw allow [PORT]/udp
sudo ufw reload
# FirewallD (CentOS/RHEL)
sudo firewall-cmd --permanent --add-port=[PORT]/tcp
sudo firewall-cmd --permanent --add-port=[PORT]/udp
sudo firewall-cmd --reload
# Windows Firewall
netsh advfirewall firewall add rule name="AMX Mod X Server" dir=in action=allow protocol=TCP localport=[PORT]
netsh advfirewall firewall add rule name="AMX Mod X Server" dir=in action=allow protocol=UDP localport=[PORT]
</code></pre>
<h3 style="color: #ffffff; margin-top: 20px;">⚠️ Port Security Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8;">
<li>Only open ports that are necessary for the game server to function</li>
<li>Consider using non-standard ports to reduce automated attacks</li>
<li>If using cloud hosting, configure security groups properly</li>
<li>Monitor connection attempts and unusual traffic patterns</li>
</ul>
</div>
<h2 id="installation">Installation & Setup</h2>
<h3>System Requirements</h3>
<ul>
<li><strong>OS:</strong> Linux (Ubuntu 20.04+ or Debian 11+ recommended) or Windows Server 2019+</li>
<li><strong>CPU:</strong> 2+ cores recommended (single-threaded performance important for most game servers)</li>
<li><strong>RAM:</strong> 1GB minimum (more for larger player counts)</li>
<li><strong>Storage:</strong> 5GB+ for server files (SSD recommended for better performance)</li>
<li><strong>Network:</strong> Stable internet connection with low latency</li>
</ul>
<h3>Installation Steps</h3>
<h4>Linux (Ubuntu/Debian)</h4>
<pre><code># Update system packages
sudo apt update && sudo apt upgrade -y
# Create server directory
mkdir -p ~/gameserver
cd ~/gameserver
# Download server files (method varies by game)
# Check official documentation for download links
</code></pre>
<h4>Windows Server</h4>
<p>Download the server files from the official game website or through Steam (if applicable). Extract to a dedicated folder and run the server executable.</p>
<h3>Manual Installation</h3>
<p>This game requires manual download. Check the official game website or Steam store page for dedicated server downloads.</p>
<h2 id="configuration">Server Configuration</h2>
<p>After installation, you'll need to configure your server. Here's where to find the configuration files and what settings you can change.</p>
<h3>Essential Settings</h3>
<ul>
<li><strong>Server Name:</strong> Set a descriptive name for your server</li>
<li><strong>Max Players:</strong> Configure based on your server's resources</li>
<li><strong>Password:</strong> Optional password protection for private servers</li>
<li><strong>Admin/RCON Password:</strong> Set a strong password for remote administration</li>
<li><strong>Game Mode:</strong> Configure game-specific modes and settings</li>
</ul>
<h3>Server Commands</h3>
<p>Common administrative commands (access via console or RCON):</p>
<pre><code># Kick player
kick [player_name]
# Ban player
ban [player_name]
# Change map/level (syntax varies by game)
changelevel [map_name]
# Set admin password (if supported)
setadminpassword [password]
</code></pre>
<h2 id="parameters">⚙️ Startup Parameters</h2>
<h3>Basic Startup</h3>
<pre><code># Generic startup command structure
./server_executable [parameters]
</code></pre>
<h3>Common Parameters</h3>
<ul>
<li><code>-port [number]</code> - Set the server port</li>
<li><code>-maxplayers [number]</code> - Maximum player slots</li>
<li><code>-map [name]</code> - Starting map/level</li>
<li><code>-console</code> - Enable console output</li>
<li><code>-nographics</code> - Run without graphics (headless mode)</li>
</ul>
<h3>Creating a Start Script</h3>
<p><strong>Linux (start.sh):</strong></p>
<pre><code>#!/bin/bash
cd /path/to/server
./server_executable [parameters] 2>&1 | tee server.log
</code></pre>
<pre><code>chmod +x start.sh
./start.sh
</code></pre>
<p><strong>Windows (start.bat):</strong></p>
<pre><code>@echo off
cd /d "%~dp0"
server_executable.exe [parameters]
pause
</code></pre>
<h3>Running as a Service</h3>
<p><strong>Linux (systemd):</strong></p>
<pre><code># Create service file: /etc/systemd/system/gameserver.service
[Unit]
Description=AMX Mod X Server
After=network.target
[Service]
Type=simple
User=gameserver
WorkingDirectory=/home/gameserver/server
ExecStart=/home/gameserver/server/start.sh
Restart=on-failure
RestartSec=10
[Install]
WantedBy=multi-user.target
</code></pre>
<pre><code># Enable and start service
sudo systemctl daemon-reload
sudo systemctl enable gameserver
sudo systemctl start gameserver
sudo systemctl status gameserver
</code></pre>
<h2 id="troubleshooting">🔧 Troubleshooting</h2>
<h3>Server Won't Start</h3>
<h4>Check Server Logs</h4>
<pre><code># View recent log entries
tail -f server.log
# Or check system logs
journalctl -u gameserver -f
</code></pre>
<h4>Port Already in Use</h4>
<pre><code># Find what's using the port
sudo lsof -i :[PORT]
sudo netstat -tulpn | grep [PORT]
# Kill the process or change server port
</code></pre>
<h4>Missing Dependencies</h4>
<p>Ensure all required dependencies are installed. Check the error messages for missing libraries or packages.</p>
<h3>Connection Issues</h3>
<h4>Can't Connect to Server</h4>
<ol>
<li><strong>Verify server is running:</strong> <code>ps aux | grep server</code></li>
<li><strong>Check port is listening:</strong> <code>netstat -an | grep [PORT]</code></li>
<li><strong>Verify firewall rules</strong> (see Ports section above)</li>
<li><strong>Check server IP:</strong> Use external IP, not localhost</li>
<li><strong>Router/NAT:</strong> Ensure port forwarding is configured</li>
</ol>
<h4>High Latency/Lag</h4>
<ul>
<li>Check server resource usage (CPU, RAM, disk I/O)</li>
<li>Verify network bandwidth is adequate</li>
<li>Consider server location relative to players</li>
<li>Check for background processes consuming resources</li>
</ul>
<h3>Performance Issues</h3>
<h4>Server Lag</h4>
<ol>
<li><strong>Monitor resources:</strong> Use <code>htop</code> or <code>top</code></li>
<li><strong>Check disk I/O:</strong> Use <code>iotop</code></li>
<li><strong>Review server logs</strong> for errors or warnings</li>
<li><strong>Reduce player count</strong> or increase server resources</li>
<li><strong>Optimize configuration</strong> based on server capacity</li>
</ol>
<h4>Memory Leaks</h4>
<pre><code># Monitor memory usage
free -h
top -p $(pgrep -f server)
# Restart server regularly via cron if needed
0 4 * * * /home/gameserver/restart.sh
</code></pre>
<h2 id="performance">Performance Optimization</h2>
<h3>Server Tuning</h3>
<ul>
<li><strong>CPU:</strong> Ensure adequate CPU allocation; most game servers are single-threaded</li>
<li><strong>RAM:</strong> Allocate sufficient memory; monitor usage and adjust as needed</li>
<li><strong>Disk:</strong> Use SSD storage for better I/O performance</li>
<li><strong>Network:</strong> Ensure stable, low-latency connection</li>
</ul>
<h3>Operating System Optimization</h3>
<pre><code># Increase file descriptor limits
echo "* soft nofile 65536" >> /etc/security/limits.conf
echo "* hard nofile 65536" >> /etc/security/limits.conf
# Network tuning
sysctl -w net.core.rmem_max=16777216
sysctl -w net.core.wmem_max=16777216
sysctl -w net.ipv4.tcp_rmem="4096 87380 16777216"
sysctl -w net.ipv4.tcp_wmem="4096 87380 16777216"
</code></pre>
<h3>Monitoring</h3>
<p>Set up monitoring to track server health:</p>
<ul>
<li>CPU and memory usage</li>
<li>Network traffic and latency</li>
<li>Player count and activity</li>
<li>Error rates and crash logs</li>
</ul>
<h3>Backup Strategy</h3>
<pre><code>#!/bin/bash
# backup.sh - Run via cron
DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_DIR="/backups/gameserver"
SERVER_DIR="/home/gameserver/server"
# Create backup
tar -czf $BACKUP_DIR/backup_$DATE.tar.gz -C $SERVER_DIR .
# Keep only last 7 days
find $BACKUP_DIR -name "backup_*.tar.gz" -mtime +7 -delete
</code></pre>
<h2 id="security">Security Best Practices</h2>
<h3>Firewall Configuration</h3>
<pre><code># Minimal firewall - only allow necessary ports
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow [SERVER_PORT]/tcp
sudo ufw allow [SERVER_PORT]/udp
sudo ufw allow 22/tcp # SSH
sudo ufw enable
</code></pre>
<h3>Strong Passwords</h3>
<ul>
<li>Use strong, unique passwords for admin/RCON access</li>
<li>Never use default passwords</li>
<li>Change passwords regularly</li>
<li>Don't share admin credentials unnecessarily</li>
</ul>
<h3>Regular Updates</h3>
<ul>
<li>Keep server software updated to the latest stable version</li>
<li>Update operating system and dependencies regularly</li>
<li>Subscribe to security advisories for your game</li>
<li>Test updates on a staging server before production deployment</li>
</ul>
<h3>Access Control</h3>
<ul>
<li>Limit SSH access to specific IPs if possible</li>
<li>Use SSH keys instead of passwords</li>
<li>Disable root login via SSH</li>
<li>Implement fail2ban or similar intrusion prevention</li>
</ul>
<h3>DDoS Protection</h3>
<ul>
<li>Consider DDoS protection services (Cloudflare, OVH, etc.)</li>
<li>Implement rate limiting where supported</li>
<li>Monitor for unusual traffic patterns</li>
<li>Have an incident response plan</li>
</ul>
<h2>Additional Resources</h2>
<ul>
<li>Official AMX Mod X documentation and forums</li>
<li>Community wikis and guides</li>
<li>Game-specific Discord or Reddit communities</li>
<li>Server hosting provider documentation</li>
</ul>
<div style="background: #78350f; padding: 20px; border-left: 4px solid #f59e0b; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;"><i class="fas fa-exclamation-triangle" style="color: #fbbf24; margin-right: 8px;"></i>Important Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8; margin: 0;">
<li>Always make backups before making configuration changes</li>
<li>Keep your server and dependencies updated</li>
<li>Monitor server resources and player activity</li>
<li>Follow the game's End User License Agreement (EULA) and Terms of Service</li>
<li>Join community forums for support and best practices</li>
</ul>
</div>
<p style="text-align: center; margin-top: 30px; color: #666;">
<em>Last updated: November 2025 | For AMX Mod X server hosting</em>
</p>

7
Panel/modules/billing/docs/amxmodx/metadata.json Normal file
View file

@ -0,0 +1,7 @@
{
"description": "Comprehensive guide for AMX Mod X (Counter-Strike modding framework) with Pawn scripting, MetaMod requirement, admin system, plugin compilation, and popular game modes",
"name": "AMX Mod X",
"order": 62,
"category": "mods",
"complete": true
}

BIN
Panel/modules/billing/docs/aoc/icon.png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 3.5 KiB

430
Panel/modules/billing/docs/aoc/index.php Normal file
View file

@ -0,0 +1,430 @@
<?php
/**
* Age of Chivalry Server Documentation - Comprehensive Guide
* General game server hosting information (not platform-specific)
*/
?>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">📚 Quick Navigation</h3>
<div style="display: flex; flex-wrap: wrap; gap: 10px;">
<a href="#quick-info" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Quick Info</a>
<a href="#ports" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔌 Ports</a>
<a href="#installation" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Installation</a>
<a href="#configuration" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Configuration</a>
<a href="#parameters" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">⚙️ Startup Parameters</a>
<a href="#troubleshooting" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔧 Troubleshooting</a>
<a href="#performance" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Performance</a>
<a href="#security" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Security</a>
</div>
</div>
<h1>Age of Chivalry Server Hosting Guide</h1>
<h2>Overview</h2>
<p>Age of Chivalry is a multiplayer game server that can be hosted on a VPS or dedicated server. This comprehensive guide covers everything you need to know about hosting a Age of Chivalry server for your community.</p>
<h2 id="quick-info">Quick Info</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<ul style="color: #e5e7eb; line-height: 1.8; margin: 0;">
<li><strong style="color: #ffffff;">Default Port:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">Varies (see configuration)</code></li>
<li><strong style="color: #ffffff;">Protocol:</strong> TCP/UDP</li>
<li><strong style="color: #ffffff;">Minimum RAM:</strong> 1GB</li>
<li><strong style="color: #ffffff;">Engine:</strong> Various</li>
<li><strong style="color: #ffffff;">Steam App ID:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">17515</code></li>
<li><strong style="color: #ffffff;">Recommended OS:</strong> Linux (Ubuntu/Debian) or Windows Server</li>
</ul>
</div>
<h2 id="ports">🔌 Network Ports</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">Required Ports</h3>
<p style="color: #e5e7eb;">The Age of Chivalry server typically uses a configurable port. Check your server configuration files for the specific port settings.</p>
<h3 style="color: #ffffff; margin-top: 20px;">Firewall Configuration</h3>
<p style="color: #e5e7eb;">Allow server ports through your firewall:</p>
<pre><code style="color: #a5b4fc;"># UFW (Ubuntu/Debian)
sudo ufw allow [PORT]/tcp
sudo ufw allow [PORT]/udp
sudo ufw reload
# FirewallD (CentOS/RHEL)
sudo firewall-cmd --permanent --add-port=[PORT]/tcp
sudo firewall-cmd --permanent --add-port=[PORT]/udp
sudo firewall-cmd --reload
# Windows Firewall
netsh advfirewall firewall add rule name="Age of Chivalry Server" dir=in action=allow protocol=TCP localport=[PORT]
netsh advfirewall firewall add rule name="Age of Chivalry Server" dir=in action=allow protocol=UDP localport=[PORT]
</code></pre>
<h3 style="color: #ffffff; margin-top: 20px;">⚠️ Port Security Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8;">
<li>Only open ports that are necessary for the game server to function</li>
<li>Consider using non-standard ports to reduce automated attacks</li>
<li>If using cloud hosting, configure security groups properly</li>
<li>Monitor connection attempts and unusual traffic patterns</li>
</ul>
</div>
<h2 id="installation">Installation & Setup</h2>
<h3>System Requirements</h3>
<ul>
<li><strong>OS:</strong> Linux (Ubuntu 20.04+ or Debian 11+ recommended) or Windows Server 2019+</li>
<li><strong>CPU:</strong> 2+ cores recommended (single-threaded performance important for most game servers)</li>
<li><strong>RAM:</strong> 1GB minimum (more for larger player counts)</li>
<li><strong>Storage:</strong> 5GB+ for server files (SSD recommended for better performance)</li>
<li><strong>Network:</strong> Stable internet connection with low latency</li>
</ul>
<h3>Installation Steps</h3>
<h4>Linux (Ubuntu/Debian)</h4>
<pre><code># Update system packages
sudo apt update && sudo apt upgrade -y
# Create server directory
mkdir -p ~/gameserver
cd ~/gameserver
# Download server files (method varies by game)
# Check official documentation for download links
</code></pre>
<h4>Windows Server</h4>
<p>Download the server files from the official game website or through Steam (if applicable). Extract to a dedicated folder and run the server executable.</p>
<h3>Using SteamCMD - RECOMMENDED METHOD</h3>
<p><strong>This game can be installed via SteamCMD using App ID: 17515</strong></p>
<h4>Install SteamCMD (Ubuntu/Debian)</h4>
<pre><code># Update package list
sudo apt update
# Enable 32-bit architecture
sudo dpkg --add-architecture i386
sudo apt update
# Install SteamCMD
sudo apt install -y lib32gcc-s1 steamcmd
</code></pre>
<h4>Download Server Files</h4>
<pre><code># Create directory for game server
mkdir -p ~/gameservers/aoc
# Run SteamCMD and download
steamcmd +login anonymous \
+force_install_dir ~/gameservers/aoc \
+app_update 17515 validate \
+quit
# Server files are now in ~/gameservers/aoc/
cd ~/gameservers/aoc
ls -la
</code></pre>
<h4>Windows Installation with SteamCMD</h4>
<ol>
<li>Download SteamCMD from: <a href="https://steamcdn-a.akamaihd.net/client/installer/steamcmd.zip" target="_blank">https://steamcdn-a.akamaihd.net/client/installer/steamcmd.zip</a></li>
<li>Extract to <code>C:\steamcmd\</code></li>
<li>Open Command Prompt and run:</li>
</ol>
<pre><code>cd C:\steamcmd
steamcmd.exe +login anonymous ^
+force_install_dir C:\gameservers\aoc ^
+app_update 17515 validate ^
+quit
</code></pre>
<h2 id="configuration">Server Configuration</h2>
<p>After installation, you'll need to configure your server. Here's where to find the configuration files and what settings you can change.</p>
<h3>Essential Settings</h3>
<ul>
<li><strong>Server Name:</strong> Set a descriptive name for your server</li>
<li><strong>Max Players:</strong> Configure based on your server's resources</li>
<li><strong>Password:</strong> Optional password protection for private servers</li>
<li><strong>Admin/RCON Password:</strong> Set a strong password for remote administration</li>
<li><strong>Game Mode:</strong> Configure game-specific modes and settings</li>
</ul>
<h3>Server Commands</h3>
<p>Common administrative commands (access via console or RCON):</p>
<pre><code># Kick player
kick [player_name]
# Ban player
ban [player_name]
# Change map/level (syntax varies by game)
changelevel [map_name]
# Set admin password (if supported)
setadminpassword [password]
</code></pre>
<h2 id="parameters">⚙️ Startup Parameters</h2>
<h3>Command Line Template</h3>
<p>The server uses the following command line template:</p>
<pre><code>%GAME_TYPE% %PID_FILE% %MAP% %IP% %PORT% %PLAYERS%</code></pre>
<h3>Available Startup Parameters</h3>
<p>The following parameters can be configured when starting the server:</p>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-insecure</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - Disable Valve Anti-Cheat</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Will start the server without Valve Anti-Cheat technology.</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-nohltv</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - Half-life TV</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Will start the server without Half-life TV.</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-restart</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - Restart</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">The server restarts when it crashes.</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-nomaster</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - Disable master server communication</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">No description available</p>
</div>
</div>
<h3>Creating a Start Script</h3>
<p><strong>Linux (start.sh):</strong></p>
<pre><code>#!/bin/bash
cd /path/to/server
./server_executable [parameters] 2>&1 | tee server.log
</code></pre>
<pre><code>chmod +x start.sh
./start.sh
</code></pre>
<p><strong>Windows (start.bat):</strong></p>
<pre><code>@echo off
cd /d "%~dp0"
server_executable.exe [parameters]
pause
</code></pre>
<h3>Running as a Service</h3>
<p><strong>Linux (systemd):</strong></p>
<pre><code># Create service file: /etc/systemd/system/gameserver.service
[Unit]
Description=Age of Chivalry Server
After=network.target
[Service]
Type=simple
User=gameserver
WorkingDirectory=/home/gameserver/server
ExecStart=/home/gameserver/server/start.sh
Restart=on-failure
RestartSec=10
[Install]
WantedBy=multi-user.target
</code></pre>
<pre><code># Enable and start service
sudo systemctl daemon-reload
sudo systemctl enable gameserver
sudo systemctl start gameserver
sudo systemctl status gameserver
</code></pre>
<h2 id="troubleshooting">🔧 Troubleshooting</h2>
<h3>Server Won't Start</h3>
<h4>Check Server Logs</h4>
<pre><code># View recent log entries
tail -f server.log
# Or check system logs
journalctl -u gameserver -f
</code></pre>
<h4>Port Already in Use</h4>
<pre><code># Find what's using the port
sudo lsof -i :[PORT]
sudo netstat -tulpn | grep [PORT]
# Kill the process or change server port
</code></pre>
<h4>Missing Dependencies</h4>
<p>Ensure all required dependencies are installed. Check the error messages for missing libraries or packages.</p>
<h3>Connection Issues</h3>
<h4>Can't Connect to Server</h4>
<ol>
<li><strong>Verify server is running:</strong> <code>ps aux | grep server</code></li>
<li><strong>Check port is listening:</strong> <code>netstat -an | grep [PORT]</code></li>
<li><strong>Verify firewall rules</strong> (see Ports section above)</li>
<li><strong>Check server IP:</strong> Use external IP, not localhost</li>
<li><strong>Router/NAT:</strong> Ensure port forwarding is configured</li>
</ol>
<h4>High Latency/Lag</h4>
<ul>
<li>Check server resource usage (CPU, RAM, disk I/O)</li>
<li>Verify network bandwidth is adequate</li>
<li>Consider server location relative to players</li>
<li>Check for background processes consuming resources</li>
</ul>
<h3>Performance Issues</h3>
<h4>Server Lag</h4>
<ol>
<li><strong>Monitor resources:</strong> Use <code>htop</code> or <code>top</code></li>
<li><strong>Check disk I/O:</strong> Use <code>iotop</code></li>
<li><strong>Review server logs</strong> for errors or warnings</li>
<li><strong>Reduce player count</strong> or increase server resources</li>
<li><strong>Optimize configuration</strong> based on server capacity</li>
</ol>
<h4>Memory Leaks</h4>
<pre><code># Monitor memory usage
free -h
top -p $(pgrep -f server)
# Restart server regularly via cron if needed
0 4 * * * /home/gameserver/restart.sh
</code></pre>
<h2 id="performance">Performance Optimization</h2>
<h3>Server Tuning</h3>
<ul>
<li><strong>CPU:</strong> Ensure adequate CPU allocation; most game servers are single-threaded</li>
<li><strong>RAM:</strong> Allocate sufficient memory; monitor usage and adjust as needed</li>
<li><strong>Disk:</strong> Use SSD storage for better I/O performance</li>
<li><strong>Network:</strong> Ensure stable, low-latency connection</li>
</ul>
<h3>Operating System Optimization</h3>
<pre><code># Increase file descriptor limits
echo "* soft nofile 65536" >> /etc/security/limits.conf
echo "* hard nofile 65536" >> /etc/security/limits.conf
# Network tuning
sysctl -w net.core.rmem_max=16777216
sysctl -w net.core.wmem_max=16777216
sysctl -w net.ipv4.tcp_rmem="4096 87380 16777216"
sysctl -w net.ipv4.tcp_wmem="4096 87380 16777216"
</code></pre>
<h3>Monitoring</h3>
<p>Set up monitoring to track server health:</p>
<ul>
<li>CPU and memory usage</li>
<li>Network traffic and latency</li>
<li>Player count and activity</li>
<li>Error rates and crash logs</li>
</ul>
<h3>Backup Strategy</h3>
<pre><code>#!/bin/bash
# backup.sh - Run via cron
DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_DIR="/backups/gameserver"
SERVER_DIR="/home/gameserver/server"
# Create backup
tar -czf $BACKUP_DIR/backup_$DATE.tar.gz -C $SERVER_DIR .
# Keep only last 7 days
find $BACKUP_DIR -name "backup_*.tar.gz" -mtime +7 -delete
</code></pre>
<h2 id="security">Security Best Practices</h2>
<h3>Firewall Configuration</h3>
<pre><code># Minimal firewall - only allow necessary ports
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow [SERVER_PORT]/tcp
sudo ufw allow [SERVER_PORT]/udp
sudo ufw allow 22/tcp # SSH
sudo ufw enable
</code></pre>
<h3>Strong Passwords</h3>
<ul>
<li>Use strong, unique passwords for admin/RCON access</li>
<li>Never use default passwords</li>
<li>Change passwords regularly</li>
<li>Don't share admin credentials unnecessarily</li>
</ul>
<h3>Regular Updates</h3>
<ul>
<li>Keep server software updated to the latest stable version</li>
<li>Update operating system and dependencies regularly</li>
<li>Subscribe to security advisories for your game</li>
<li>Test updates on a staging server before production deployment</li>
</ul>
<h3>Access Control</h3>
<ul>
<li>Limit SSH access to specific IPs if possible</li>
<li>Use SSH keys instead of passwords</li>
<li>Disable root login via SSH</li>
<li>Implement fail2ban or similar intrusion prevention</li>
</ul>
<h3>DDoS Protection</h3>
<ul>
<li>Consider DDoS protection services (Cloudflare, OVH, etc.)</li>
<li>Implement rate limiting where supported</li>
<li>Monitor for unusual traffic patterns</li>
<li>Have an incident response plan</li>
</ul>
<h2>Additional Resources</h2>
<ul>
<li>Official Age of Chivalry documentation and forums</li>
<li>Community wikis and guides</li>
<li>Game-specific Discord or Reddit communities</li>
<li>Server hosting provider documentation</li>
</ul>
<div style="background: #78350f; padding: 20px; border-left: 4px solid #f59e0b; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;"><i class="fas fa-exclamation-triangle" style="color: #fbbf24; margin-right: 8px;"></i>Important Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8; margin: 0;">
<li>Always make backups before making configuration changes</li>
<li>Keep your server and dependencies updated</li>
<li>Monitor server resources and player activity</li>
<li>Follow the game's End User License Agreement (EULA) and Terms of Service</li>
<li>Join community forums for support and best practices</li>
</ul>
</div>
<p style="text-align: center; margin-top: 30px; color: #666;">
<em>Last updated: November 2025 | For Age of Chivalry server hosting</em>
</p>

7
Panel/modules/billing/docs/aoc/metadata.json Normal file
View file

@ -0,0 +1,7 @@
{
"description": "Setup and configuration guide for Age of Chivalry game servers",
"name": "Age of Chivalry",
"order": 6,
"category": "game",
"complete": true
}

BIN
Panel/modules/billing/docs/arkse/icon.jpg Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 130 KiB

600
Panel/modules/billing/docs/arkse/index.php Normal file
View file

@ -0,0 +1,600 @@
<?php
/**
* ARK: Survival Evolved Server Documentation - Comprehensive Guide
* General game server hosting information (not platform-specific)
*/
?>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">📚 Quick Navigation</h3>
<div style="display: flex; flex-wrap: wrap; gap: 10px;">
<a href="#quick-info" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Quick Info</a>
<a href="#ports" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔌 Ports</a>
<a href="#installation" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Installation</a>
<a href="#configuration" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Configuration</a>
<a href="#parameters" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">⚙️ Startup Parameters</a>
<a href="#troubleshooting" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">🔧 Troubleshooting</a>
<a href="#performance" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Performance</a>
<a href="#security" style="background: #0f172a; padding: 8px 16px; border-radius: 4px; color: #a5b4fc; text-decoration: none;">Security</a>
</div>
</div>
<h1>ARK: Survival Evolved Server Hosting Guide</h1>
<h2>Overview</h2>
<p>ARK: Survival Evolved is a multiplayer game server that can be hosted on a VPS or dedicated server. This comprehensive guide covers everything you need to know about hosting a ARK: Survival Evolved server for your community.</p>
<h2 id="quick-info">Quick Info</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<ul style="color: #e5e7eb; line-height: 1.8; margin: 0;">
<li><strong style="color: #ffffff;">Default Port:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">Varies (see configuration)</code></li>
<li><strong style="color: #ffffff;">Protocol:</strong> TCP/UDP</li>
<li><strong style="color: #ffffff;">Minimum RAM:</strong> 1GB</li>
<li><strong style="color: #ffffff;">Engine:</strong> Various</li>
<li><strong style="color: #ffffff;">Steam App ID:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">376030</code></li>
<li><strong style="color: #ffffff;">Recommended OS:</strong> Linux (Ubuntu/Debian) or Windows Server</li>
<li><strong style="color: #ffffff;">Configuration Files:</strong><ul style="margin-top: 8px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">ShooterGame/Saved/Config/WindowsServer/GameUserSettings.ini</code> - Server Configurations</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">ShooterGame/Saved/Config/WindowsServer/Game.ini</code> - Advanced Modifications</li>
</ul></li>
</ul>
</div>
<h2 id="ports">🔌 Network Ports</h2>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;">Required Ports</h3>
<p style="color: #e5e7eb;">The ARK: Survival Evolved server typically uses a configurable port. Check your server configuration files for the specific port settings.</p>
<h3 style="color: #ffffff; margin-top: 20px;">Firewall Configuration</h3>
<p style="color: #e5e7eb;">Allow server ports through your firewall:</p>
<pre><code style="color: #a5b4fc;"># UFW (Ubuntu/Debian)
sudo ufw allow [PORT]/tcp
sudo ufw allow [PORT]/udp
sudo ufw reload
# FirewallD (CentOS/RHEL)
sudo firewall-cmd --permanent --add-port=[PORT]/tcp
sudo firewall-cmd --permanent --add-port=[PORT]/udp
sudo firewall-cmd --reload
# Windows Firewall
netsh advfirewall firewall add rule name="ARK: Survival Evolved Server" dir=in action=allow protocol=TCP localport=[PORT]
netsh advfirewall firewall add rule name="ARK: Survival Evolved Server" dir=in action=allow protocol=UDP localport=[PORT]
</code></pre>
<h3 style="color: #ffffff; margin-top: 20px;">⚠️ Port Security Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8;">
<li>Only open ports that are necessary for the game server to function</li>
<li>Consider using non-standard ports to reduce automated attacks</li>
<li>If using cloud hosting, configure security groups properly</li>
<li>Monitor connection attempts and unusual traffic patterns</li>
</ul>
</div>
<h2 id="installation">Installation & Setup</h2>
<h3>System Requirements</h3>
<ul>
<li><strong>OS:</strong> Linux (Ubuntu 20.04+ or Debian 11+ recommended) or Windows Server 2019+</li>
<li><strong>CPU:</strong> 2+ cores recommended (single-threaded performance important for most game servers)</li>
<li><strong>RAM:</strong> 1GB minimum (more for larger player counts)</li>
<li><strong>Storage:</strong> 5GB+ for server files (SSD recommended for better performance)</li>
<li><strong>Network:</strong> Stable internet connection with low latency</li>
</ul>
<h3>Installation Steps</h3>
<h4>Linux (Ubuntu/Debian)</h4>
<pre><code># Update system packages
sudo apt update && sudo apt upgrade -y
# Create server directory
mkdir -p ~/gameserver
cd ~/gameserver
# Download server files (method varies by game)
# Check official documentation for download links
</code></pre>
<h4>Windows Server</h4>
<p>Download the server files from the official game website or through Steam (if applicable). Extract to a dedicated folder and run the server executable.</p>
<h3>Using SteamCMD - RECOMMENDED METHOD</h3>
<p><strong>This game can be installed via SteamCMD using App ID: 376030</strong></p>
<h4>Install SteamCMD (Ubuntu/Debian)</h4>
<pre><code># Update package list
sudo apt update
# Enable 32-bit architecture
sudo dpkg --add-architecture i386
sudo apt update
# Install SteamCMD
sudo apt install -y lib32gcc-s1 steamcmd
</code></pre>
<h4>Download Server Files</h4>
<pre><code># Create directory for game server
mkdir -p ~/gameservers/arkse
# Run SteamCMD and download
steamcmd +login anonymous \
+force_install_dir ~/gameservers/arkse \
+app_update 376030 validate \
+quit
# Server files are now in ~/gameservers/arkse/
cd ~/gameservers/arkse
ls -la
</code></pre>
<h4>Windows Installation with SteamCMD</h4>
<ol>
<li>Download SteamCMD from: <a href="https://steamcdn-a.akamaihd.net/client/installer/steamcmd.zip" target="_blank">https://steamcdn-a.akamaihd.net/client/installer/steamcmd.zip</a></li>
<li>Extract to <code>C:\steamcmd\</code></li>
<li>Open Command Prompt and run:</li>
</ol>
<pre><code>cd C:\steamcmd
steamcmd.exe +login anonymous ^
+force_install_dir C:\gameservers\arkse ^
+app_update 376030 validate ^
+quit
</code></pre>
<h2 id="configuration">Server Configuration</h2>
<p>After installation, you'll need to configure your server. Here's where to find the configuration files and what settings you can change.</p>
<h3>Essential Settings</h3>
<ul>
<li><strong>Server Name:</strong> Set a descriptive name for your server</li>
<li><strong>Max Players:</strong> Configure based on your server's resources</li>
<li><strong>Password:</strong> Optional password protection for private servers</li>
<li><strong>Admin/RCON Password:</strong> Set a strong password for remote administration</li>
<li><strong>Game Mode:</strong> Configure game-specific modes and settings</li>
</ul>
<h3>Configuration Files</h3>
<p>Important configuration files for this server:</p>
<ul>
<li><strong><code>ShooterGame/Saved/Config/WindowsServer/GameUserSettings.ini</code></strong> - Server Configurations</li>
<li><strong><code>ShooterGame/Saved/Config/WindowsServer/Game.ini</code></strong> - Advanced Modifications</li>
</ul>
<h3>Server Commands</h3>
<p>Common administrative commands (access via console or RCON):</p>
<pre><code># Kick player
kick [player_name]
# Ban player
ban [player_name]
# Change map/level (syntax varies by game)
changelevel [map_name]
# Set admin password (if supported)
setadminpassword [password]
</code></pre>
<h2 id="parameters">⚙️ Startup Parameters</h2>
<h3>Command Line Template</h3>
<p>The server uses the following command line template:</p>
<pre><code>%MAP%%IP%%PORT%%QUERY_PORT%%PLAYERS%%RCON%%CONTROL_PASSWORD%%PDS%%PDI%%PDD%%PUS%%PUI%%PUD%%ASDN%%POP%%POPI%%PTA%?listen %AMM% %CDO% %CID% %FACF% %NTFF% -server -log</code></pre>
<h3>Available Startup Parameters</h3>
<p>The following parameters can be configured when starting the server:</p>
<div style="background: #1e3a5f; padding: 20px; border-left: 4px solid #3b82f6; margin: 20px 0; border-radius: 4px;">
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?RCONEnabled=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?RCONEnabled=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable or disable remote control.</p>
<p style="color: #e5e7eb;"><strong>Options:</strong></p>
<ul style="color: #e5e7eb; margin-left: 20px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">True</code> - True</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">False</code> - False</li>
</ul>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-automanagedmods</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - -automanagedmods</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable automatic MOD downloading, installing and updating.</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-servergamelog</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - -servergamelog</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable server admin logs.</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-gameplaylogging</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - -gameplaylogging</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Log file will contain a timestamped kills and winners log listing Steam ID, Steam name, character name, etc.</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?PreventOfflinePvP=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?PreventOfflinePvP=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Use this to enable the offline raiding prevention option.</p>
<p style="color: #e5e7eb;"><strong>Options:</strong></p>
<ul style="color: #e5e7eb; margin-left: 20px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">True</code> - True</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">False</code> - False</li>
</ul>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?PreventOfflinePvPInterval=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?PreventOfflinePvPInterval=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Time in seconds to wait before a tribe/players dinos/structures become invulnerable/inactive after they log off. If tribe, requires ALL tribe members logged off!</p>
<p style="color: #fbbf24;"><strong>Default:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px;">900</code></p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?PreventTribeAlliances=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?PreventTribeAlliances=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable or disable tribe alliances.</p>
<p style="color: #e5e7eb;"><strong>Options:</strong></p>
<ul style="color: #e5e7eb; margin-left: 20px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">True</code> - True</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">False</code> - False</li>
</ul>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-ForceAllowCaveFlyers</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - -ForceAllowCaveFlyers</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Force flyer dinos to be allowed into caves (Flyers able to go into caves by default on custom maps).</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?AltSaveDirectoryName=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?AltSaveDirectoryName=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Name of the save folder.</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-NoTransferFromFiltering</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - -NoTransferFromFiltering</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Cross-ARK Data Transfer protection against other servers that use different Cluster IDs. If you set this, players from unknown servers will not able to transfer datas to your Cluster.</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-clusterid=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - -clusterid=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Unique identifier of your Cluster.</p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">-ClusterDirOverride=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - -ClusterDirOverride=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Specify a common cross-server storage location that functions between multiple servers running on the same machine.</p>
<p style="color: #fbbf24;"><strong>Default:</strong> <code style="background: #0f172a; padding: 2px 6px; border-radius: 3px;">ShooterGame/Saved</code></p>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?PreventDownloadSurvivors=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?PreventDownloadSurvivors=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable or disable downloading characters from Cluster to this server.</p>
<p style="color: #e5e7eb;"><strong>Options:</strong></p>
<ul style="color: #e5e7eb; margin-left: 20px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">True</code> - True</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">False</code> - False</li>
</ul>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?PreventDownloadItems=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?PreventDownloadItems=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable or disable downloading items from Cluster to this server.</p>
<p style="color: #e5e7eb;"><strong>Options:</strong></p>
<ul style="color: #e5e7eb; margin-left: 20px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">True</code> - True</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">False</code> - False</li>
</ul>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?PreventDownloadDinos=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?PreventDownloadDinos=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable or disable downloading tamed dinos from Cluster to this server.</p>
<p style="color: #e5e7eb;"><strong>Options:</strong></p>
<ul style="color: #e5e7eb; margin-left: 20px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">True</code> - True</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">False</code> - False</li>
</ul>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?PreventUploadSurvivors=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?PreventUploadSurvivors=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable or disable uploading characters from this server to Cluster.</p>
<p style="color: #e5e7eb;"><strong>Options:</strong></p>
<ul style="color: #e5e7eb; margin-left: 20px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">True</code> - True</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">False</code> - False</li>
</ul>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?PreventUploadItems=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?PreventUploadItems=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable or disable uploading items from this server to Cluster.</p>
<p style="color: #e5e7eb;"><strong>Options:</strong></p>
<ul style="color: #e5e7eb; margin-left: 20px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">True</code> - True</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">False</code> - False</li>
</ul>
</div>
<div style="margin-bottom: 20px; padding-bottom: 20px; border-bottom: 1px solid #374151;">
<h4 style="color: #ffffff; margin-top: 0;">
<code style="background: #0f172a; padding: 4px 8px; border-radius: 3px; color: #a5b4fc;">?PreventUploadDinos=</code>
<span style="color: #e5e7eb; font-weight: normal; font-size: 0.9em;"> - ?PreventUploadDinos=</span>
</h4>
<p style="color: #e5e7eb; margin: 10px 0;">Enable or disable uploading tamed dinos from this server to Cluster.</p>
<p style="color: #e5e7eb;"><strong>Options:</strong></p>
<ul style="color: #e5e7eb; margin-left: 20px;">
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">True</code> - True</li>
<li><code style="background: #0f172a; padding: 2px 6px; border-radius: 3px; color: #a5b4fc;">False</code> - False</li>
</ul>
</div>
</div>
<h3>Creating a Start Script</h3>
<p><strong>Linux (start.sh):</strong></p>
<pre><code>#!/bin/bash
cd /path/to/server
./server_executable [parameters] 2>&1 | tee server.log
</code></pre>
<pre><code>chmod +x start.sh
./start.sh
</code></pre>
<p><strong>Windows (start.bat):</strong></p>
<pre><code>@echo off
cd /d "%~dp0"
server_executable.exe [parameters]
pause
</code></pre>
<h3>Running as a Service</h3>
<p><strong>Linux (systemd):</strong></p>
<pre><code># Create service file: /etc/systemd/system/gameserver.service
[Unit]
Description=ARK: Survival Evolved Server
After=network.target
[Service]
Type=simple
User=gameserver
WorkingDirectory=/home/gameserver/server
ExecStart=/home/gameserver/server/start.sh
Restart=on-failure
RestartSec=10
[Install]
WantedBy=multi-user.target
</code></pre>
<pre><code># Enable and start service
sudo systemctl daemon-reload
sudo systemctl enable gameserver
sudo systemctl start gameserver
sudo systemctl status gameserver
</code></pre>
<h2 id="troubleshooting">🔧 Troubleshooting</h2>
<h3>Server Won't Start</h3>
<h4>Check Server Logs</h4>
<pre><code># View recent log entries
tail -f server.log
# Or check system logs
journalctl -u gameserver -f
</code></pre>
<h4>Port Already in Use</h4>
<pre><code># Find what's using the port
sudo lsof -i :[PORT]
sudo netstat -tulpn | grep [PORT]
# Kill the process or change server port
</code></pre>
<h4>Missing Dependencies</h4>
<p>Ensure all required dependencies are installed. Check the error messages for missing libraries or packages.</p>
<h3>Connection Issues</h3>
<h4>Can't Connect to Server</h4>
<ol>
<li><strong>Verify server is running:</strong> <code>ps aux | grep server</code></li>
<li><strong>Check port is listening:</strong> <code>netstat -an | grep [PORT]</code></li>
<li><strong>Verify firewall rules</strong> (see Ports section above)</li>
<li><strong>Check server IP:</strong> Use external IP, not localhost</li>
<li><strong>Router/NAT:</strong> Ensure port forwarding is configured</li>
</ol>
<h4>High Latency/Lag</h4>
<ul>
<li>Check server resource usage (CPU, RAM, disk I/O)</li>
<li>Verify network bandwidth is adequate</li>
<li>Consider server location relative to players</li>
<li>Check for background processes consuming resources</li>
</ul>
<h3>Performance Issues</h3>
<h4>Server Lag</h4>
<ol>
<li><strong>Monitor resources:</strong> Use <code>htop</code> or <code>top</code></li>
<li><strong>Check disk I/O:</strong> Use <code>iotop</code></li>
<li><strong>Review server logs</strong> for errors or warnings</li>
<li><strong>Reduce player count</strong> or increase server resources</li>
<li><strong>Optimize configuration</strong> based on server capacity</li>
</ol>
<h4>Memory Leaks</h4>
<pre><code># Monitor memory usage
free -h
top -p $(pgrep -f server)
# Restart server regularly via cron if needed
0 4 * * * /home/gameserver/restart.sh
</code></pre>
<h2 id="performance">Performance Optimization</h2>
<h3>Server Tuning</h3>
<ul>
<li><strong>CPU:</strong> Ensure adequate CPU allocation; most game servers are single-threaded</li>
<li><strong>RAM:</strong> Allocate sufficient memory; monitor usage and adjust as needed</li>
<li><strong>Disk:</strong> Use SSD storage for better I/O performance</li>
<li><strong>Network:</strong> Ensure stable, low-latency connection</li>
</ul>
<h3>Operating System Optimization</h3>
<pre><code># Increase file descriptor limits
echo "* soft nofile 65536" >> /etc/security/limits.conf
echo "* hard nofile 65536" >> /etc/security/limits.conf
# Network tuning
sysctl -w net.core.rmem_max=16777216
sysctl -w net.core.wmem_max=16777216
sysctl -w net.ipv4.tcp_rmem="4096 87380 16777216"
sysctl -w net.ipv4.tcp_wmem="4096 87380 16777216"
</code></pre>
<h3>Monitoring</h3>
<p>Set up monitoring to track server health:</p>
<ul>
<li>CPU and memory usage</li>
<li>Network traffic and latency</li>
<li>Player count and activity</li>
<li>Error rates and crash logs</li>
</ul>
<h3>Backup Strategy</h3>
<pre><code>#!/bin/bash
# backup.sh - Run via cron
DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_DIR="/backups/gameserver"
SERVER_DIR="/home/gameserver/server"
# Create backup
tar -czf $BACKUP_DIR/backup_$DATE.tar.gz -C $SERVER_DIR .
# Keep only last 7 days
find $BACKUP_DIR -name "backup_*.tar.gz" -mtime +7 -delete
</code></pre>
<h2 id="security">Security Best Practices</h2>
<h3>Firewall Configuration</h3>
<pre><code># Minimal firewall - only allow necessary ports
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow [SERVER_PORT]/tcp
sudo ufw allow [SERVER_PORT]/udp
sudo ufw allow 22/tcp # SSH
sudo ufw enable
</code></pre>
<h3>Strong Passwords</h3>
<ul>
<li>Use strong, unique passwords for admin/RCON access</li>
<li>Never use default passwords</li>
<li>Change passwords regularly</li>
<li>Don't share admin credentials unnecessarily</li>
</ul>
<h3>Regular Updates</h3>
<ul>
<li>Keep server software updated to the latest stable version</li>
<li>Update operating system and dependencies regularly</li>
<li>Subscribe to security advisories for your game</li>
<li>Test updates on a staging server before production deployment</li>
</ul>
<h3>Access Control</h3>
<ul>
<li>Limit SSH access to specific IPs if possible</li>
<li>Use SSH keys instead of passwords</li>
<li>Disable root login via SSH</li>
<li>Implement fail2ban or similar intrusion prevention</li>
</ul>
<h3>DDoS Protection</h3>
<ul>
<li>Consider DDoS protection services (Cloudflare, OVH, etc.)</li>
<li>Implement rate limiting where supported</li>
<li>Monitor for unusual traffic patterns</li>
<li>Have an incident response plan</li>
</ul>
<h2>Additional Resources</h2>
<ul>
<li>Official ARK: Survival Evolved documentation and forums</li>
<li>Community wikis and guides</li>
<li>Game-specific Discord or Reddit communities</li>
<li>Server hosting provider documentation</li>
</ul>
<div style="background: #78350f; padding: 20px; border-left: 4px solid #f59e0b; margin: 20px 0; border-radius: 4px;">
<h3 style="color: #ffffff; margin-top: 0;"><i class="fas fa-exclamation-triangle" style="color: #fbbf24; margin-right: 8px;"></i>Important Notes</h3>
<ul style="color: #fef3c7; line-height: 1.8; margin: 0;">
<li>Always make backups before making configuration changes</li>
<li>Keep your server and dependencies updated</li>
<li>Monitor server resources and player activity</li>
<li>Follow the game's End User License Agreement (EULA) and Terms of Service</li>
<li>Join community forums for support and best practices</li>
</ul>
</div>
<p style="text-align: center; margin-top: 30px; color: #666;">
<em>Last updated: November 2025 | For ARK: Survival Evolved server hosting</em>
</p>

7
Panel/modules/billing/docs/arkse/metadata.json Normal file
View file

@ -0,0 +1,7 @@
{
"description": "Comprehensive guide for ARK dedicated servers with ports, maps, mods, taming, and performance optimization",
"name": "ARK: Survival Evolved",
"order": 59,
"category": "game",
"complete": true
}

Some files were not shown because too many files have changed in this diff Show more