Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
activate_dpin.php	7.76 KB	-rw-r--r--	2025-10-18 22:14
ads.php	11.49 KB	-rw-r--r--	2025-10-18 22:44
commission.php	7.01 KB	-rw-r--r--	2025-10-18 21:56
dashboard.php	17.28 KB	-rw-r--r--	2025-10-18 22:49
deposit.php	6.03 KB	-rw-r--r--	2025-10-18 21:45
deposit_history.php	4.26 KB	-rw-r--r--	2025-10-18 21:55
dpin.php	7.2 KB	-rw-r--r--	2025-10-18 22:26
dpin_history.php	5.91 KB	-rw-r--r--	2025-10-18 22:15
invite.php	6.44 KB	-rw-r--r--	2025-10-18 21:43
logout.php	91 B	-rw-r--r--	2025-10-18 21:42
notifications.php	3.73 KB	-rw-r--r--	2025-10-18 21:47
plans.php	10.34 KB	-rw-r--r--	2025-10-18 22:43
profile.php	6.69 KB	-rw-r--r--	2025-10-18 21:43
purchase_plan.php	4.99 KB	-rw-r--r--	2025-10-18 21:46
sidebar.php	5.16 KB	-rw-r--r--	2025-10-18 22:15
team.php	6.81 KB	-rw-r--r--	2025-10-18 21:47
transactions.php	4.37 KB	-rw-r--r--	2025-10-18 21:47
withdraw.php	7.92 KB	-rw-r--r--	2025-10-18 21:56
withdraw_history.php	7.74 KB	-rw-r--r--	2025-10-18 21:56

Rename

<?php
require_once '../config.php';

// Check if user is logged in
if (!isset($_SESSION['user_id'])) {
    header("Location: ../index.php");
    exit();
}

// Handle plan purchase
if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['plan_id'])) {
    $plan_id = intval($_POST['plan_id']);
    $payment_method = sanitize_input($_POST['payment_method']);
    $dpin = isset($_POST['dpin']) ? sanitize_input($_POST['dpin']) : '';
    
    // Get plan details
    $stmt = $conn->prepare("SELECT * FROM plans WHERE id = ? AND status = 'active'");
    $stmt->bind_param("i", $plan_id);
    $stmt->execute();
    $plan_result = $stmt->get_result();
    
    if ($plan_result->num_rows == 0) {
        header("Location: plans.php?error=invalid_plan");
        exit();
    }
    
    $plan = $plan_result->fetch_assoc();
    
    // Check if user already has this plan
    if ($user['current_plan'] == $plan_id) {
        header("Location: plans.php?error=already_purchased");
        exit();
    }
    
    // Process payment based on method
    if ($payment_method == 'balance') {
        // Check if user has sufficient balance
        if ($user['balance'] < $plan['price']) {
            header("Location: plans.php?error=insufficient_balance");
            exit();
        }
        
        // Deduct balance
        $new_balance = $user['balance'] - $plan['price'];
        $stmt = $conn->prepare("UPDATE users SET balance = ?, current_plan = ? WHERE id = ?");
        $stmt->bind_param("dii", $new_balance, $plan_id, $_SESSION['user_id']);
        
        if ($stmt->execute()) {
            // Add transaction record
            $stmt = $conn->prepare("INSERT INTO transactions (user_id, type, amount, status, description) VALUES (?, 'plan_purchase', ?, 'completed', ?)");
            $description = "Purchased " . $plan['name'] . " plan";
            $stmt->bind_param("ids", $_SESSION['user_id'], $plan['price'], $description);
            $stmt->execute();
            
            // Add notification
            $message = "You have successfully purchased the " . $plan['name'] . " plan.";
            $stmt = $conn->prepare("INSERT INTO notifications (user_id, message, type) VALUES (?, ?, 'success')");
            $stmt->bind_param("is", $_SESSION['user_id'], $message);
            $stmt->execute();
            
            header("Location: plans.php?success=purchase_complete");
            exit();
        } else {
            header("Location: plans.php?error=purchase_failed");
            exit();
        }
    } elseif ($payment_method == 'dpin') {
        // Validate D.Pin
        if (empty($dpin)) {
            header("Location: plans.php?error=invalid_dpin");
            exit();
        }
        
        // Check if D.Pin exists and is valid
        $stmt = $conn->prepare("SELECT id, user_id, status FROM dpins WHERE pin_code = ? AND status = 'active'");
        $stmt->bind_param("s", $dpin);
        $stmt->execute();
        $dpin_result = $stmt->get_result();
        
        if ($dpin_result->num_rows == 0) {
            header("Location: plans.php?error=invalid_dpin");
            exit();
        }
        
        $dpin_data = $dpin_result->fetch_assoc();
        
        // Check if D.Pin belongs to this user
        if ($dpin_data['user_id'] != $_SESSION['user_id']) {
            header("Location: plans.php?error=invalid_dpin");
            exit();
        }
        
        // Mark D.Pin as used
        $stmt = $conn->prepare("UPDATE dpins SET status = 'used', activated_at = NOW() WHERE id = ?");
        $stmt->bind_param("i", $dpin_data['id']);
        $stmt->execute();
        
        // Assign plan to user
        $stmt = $conn->prepare("UPDATE users SET current_plan = ? WHERE id = ?");
        $stmt->bind_param("ii", $plan_id, $_SESSION['user_id']);
        
        if ($stmt->execute()) {
            // Add transaction record
            $stmt = $conn->prepare("INSERT INTO transactions (user_id, type, amount, status, description) VALUES (?, 'plan_purchase', ?, 'completed', ?)");
            $description = "Purchased " . $plan['name'] . " plan using D.Pin";
            $stmt->bind_param("ids", $_SESSION['user_id'], $plan['price'], $description);
            $stmt->execute();
            
            // Add notification
            $message = "You have successfully purchased the " . $plan['name'] . " plan using D.Pin.";
            $stmt = $conn->prepare("INSERT INTO notifications (user_id, message, type) VALUES (?, ?, 'success')");
            $stmt->bind_param("is", $_SESSION['user_id'], $message);
            $stmt->execute();
            
            header("Location: plans.php?success=purchase_complete");
            exit();
        } else {
            header("Location: plans.php?error=purchase_failed");
            exit();
        }
    } else {
        header("Location: plans.php?error=invalid_payment_method");
        exit();
    }
} else {
    header("Location: plans.php");
    exit();
}
?>