Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
assets	[ DIR ]	drwxr-xr-x	2025-09-21 22:51
pay	[ DIR ]	drwxr-xr-x	2025-11-07 14:30
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
adddeposit.php	4.52 KB	-rw-r--r--	2025-09-14 18:50
checksuccesspay.php	1.9 KB	-rw-r--r--	2025-09-14 18:50
config.php	371 B	-rw-r--r--	2025-11-21 17:38
depositconfirm.php	5.85 KB	-rw-r--r--	2025-09-14 18:50
error_log	788 B	-rw-r--r--	2025-11-23 10:38
heyrtnl.php	1.56 KB	-rw-r--r--	2025-09-14 18:50
jerrylawler.php	7.68 KB	-rw-r--r--	2025-11-21 17:37
lgwebhook.php	3.69 KB	-rw-r--r--	2025-09-14 18:50
log.txt	2.84 KB	-rw-r--r--	2025-11-07 17:53
otp.php	1 KB	-rw-r--r--	2025-09-14 18:50
safepay.php	6.64 KB	-rw-r--r--	2025-09-14 18:50
spwebhook.php	3.31 KB	-rw-r--r--	2025-09-14 18:50
usdt.php	22.48 KB	-rw-r--r--	2025-11-21 17:37
usdtconfim.php	5.67 KB	-rw-r--r--	2025-09-14 18:50
usdtuu.php	22.67 KB	-rw-r--r--	2025-09-14 18:50
wepay.php	4.66 KB	-rw-r--r--	2025-09-14 18:50
wepay2.php	4.73 KB	-rw-r--r--	2025-11-21 17:37
wp-blog-header.php	2.74 KB	-r--r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php 
	include ("../serive/samparka.php");
	
	$res = [
		'code' => 405,
		'message' => 'Illegal access!',
	];
	
	if (isset($_GET['userId']) && isset($_GET['token'])) {	
		$refnum = htmlspecialchars(mysqli_real_escape_string($conn, $_GET['refnum']));
		$uid = htmlspecialchars(mysqli_real_escape_string($conn, $_GET['userId']));
		
		$userId = htmlspecialchars(mysqli_real_escape_string($conn, $_GET['userId']));
		$userPhoto = '1';
		
		$numquery = "SELECT mobile, codechorkamukala
		  FROM shonu_subjects
		  WHERE id = ".$userId;
		$numresult = $conn->query($numquery);
		$numarr = mysqli_fetch_array($numresult);
		
		$userName = '91'.$numarr['mobile'];
		$nickName = $numarr['codechorkamukala'];
		
		$creaquery = "SELECT createdate
		  FROM shonu_subjects
		  WHERE id = ".$userId;
		$crearesult = $conn->query($creaquery);
		$creaarr = mysqli_fetch_array($crearesult);
		
		$knbdstr = '{"userId":'.$userId.',"userPhoto":"'.$userPhoto.'","userName":'.$userName.',"nickName":"'.$nickName.'","createdate":"'.$creaarr['createdate'].'"}';
		$shonusign = strtoupper(hash('sha256', $knbdstr));
		
		$token = htmlspecialchars(mysqli_real_escape_string($conn, $_GET['token']));
		
		if($shonusign == $token){
		
			$refchk = mysqli_query($conn , "SELECT sthiti FROM `thevani` WHERE `ullekha` = '".$refnum."' AND `balakedara` = '".$uid."'");
			$refrow = mysqli_num_rows($refchk);
			if($refrow == 1){
				$refarr = mysqli_fetch_array($refchk);
				echo $refarr['sthiti'];
			}
			else{
				echo 0;
			}
		}
		else{
			$res['code'] = 10000;
			$res['success'] = 'false';
			$res['message'] = 'Sorry, The system is busy, please try again later!';
			
			header('Content-Type: text/html; charset=utf-8');
			http_response_code(200);
			echo json_encode($res);
		}
	}
	else{
		header('Content-Type: application/json; charset=utf-8');
		http_response_code(200);
		echo json_encode($res);	
	}
?>