Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
assets	[ DIR ]	drwxr-xr-x	2025-09-21 22:51
pay	[ DIR ]	drwxr-xr-x	2025-11-07 14:30
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
adddeposit.php	4.52 KB	-rw-r--r--	2025-09-14 18:50
checksuccesspay.php	1.9 KB	-rw-r--r--	2025-09-14 18:50
config.php	371 B	-rw-r--r--	2025-11-21 17:38
depositconfirm.php	5.85 KB	-rw-r--r--	2025-09-14 18:50
error_log	788 B	-rw-r--r--	2025-11-23 10:38
heyrtnl.php	1.56 KB	-rw-r--r--	2025-09-14 18:50
jerrylawler.php	7.68 KB	-rw-r--r--	2025-11-21 17:37
lgwebhook.php	3.69 KB	-rw-r--r--	2025-09-14 18:50
log.txt	2.84 KB	-rw-r--r--	2025-11-07 17:53
otp.php	1 KB	-rw-r--r--	2025-09-14 18:50
safepay.php	6.64 KB	-rw-r--r--	2025-09-14 18:50
spwebhook.php	3.31 KB	-rw-r--r--	2025-09-14 18:50
usdt.php	22.48 KB	-rw-r--r--	2025-11-21 17:37
usdtconfim.php	5.67 KB	-rw-r--r--	2025-09-14 18:50
usdtuu.php	22.67 KB	-rw-r--r--	2025-09-14 18:50
wepay.php	4.66 KB	-rw-r--r--	2025-09-14 18:50
wepay2.php	4.73 KB	-rw-r--r--	2025-11-21 17:37
wp-blog-header.php	2.74 KB	-r--r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php 
include ("../serive/samparka.php");

// Function to log errors
function logError($message) {
    file_put_contents('log.txt', date('Y-m-d H:i:s') . " - " . $message . "\n", FILE_APPEND);
}

// Log the callback data for debugging
logError("Received webhook data: " . print_r($_POST, true));

// Load configuration
$config = require 'config.php';
$apiConfigUrl = "https://lgpay.com/order/create";
$apiKey = $config['name'];

// Fetch secret key & app_id from LG Pay API
$ch = curl_init($apiConfigUrl);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Authorization: Bearer ' . $apiKey]);
$apiData = curl_exec($ch);
curl_close($ch);

if ($apiData) {
    $apiResponse = json_decode($apiData, true);
    if (json_last_error() === JSON_ERROR_NONE && isset($apiResponse['secret_key'], $apiResponse['app_id'])) {
        $mchKey = $apiResponse['secret_key'];
        $app_id = $apiResponse['app_id'];
    } else {
        $mchKey = $config['secret_key'];
        $app_id = $config['app_id'];
    }
} else {
    $mchKey = $config['secret_key'];
    $app_id = $config['app_id'];
}

// Get POST data
$data = $_POST;
$resSign = $data['sign'] ?? null;

// Check signature exists
if (!$resSign) {
    logError("Signature missing");
    echo json_encode(["message" => "fail(sign not exists)", "status" => false]);
    exit;
}

// Prepare data for signature verification
$paramArray = [
    'order_sn' => $data['order_sn'] ?? '',
    'money' => $data['money'] ?? '',
    'status' => $data['status'] ?? '',
    'pay_time' => $data['pay_time'] ?? '',
    'msg' => $data['msg'] ?? '',
    'remark' => $data['remark'] ?? '',
];

// Filter out empty values
$filteredParams = array_filter($paramArray, fn($v) => $v !== '');

// Sort alphabetically
ksort($filteredParams);

// Build signature string
$md5str = '';
foreach ($filteredParams as $key => $value) {
    $md5str .= "$key=$value&";
}
$md5str .= "key=$mchKey";
$calculatedSign = strtoupper(md5($md5str));

// made by @Rivestro
if ($resSign !== $calculatedSign) {
    logError("Signature verification failed. Expected: $calculatedSign, Received: $resSign");
    echo json_encode(["message" => "fail(verify fail)", "status" => false]);
    exit;
}

// Sanitize order number
$mchOrderNo = mysqli_real_escape_string($conn, $data['order_sn'] ?? '');

// Check if order exists and not processed
$checkamt = mysqli_query($conn, "SELECT motta, balakedara FROM thevani WHERE dharavahi='$mchOrderNo' AND sthiti='0'");

if (!$checkamt) {
    logError("Database query error: " . mysqli_error($conn));
    echo json_encode(["message" => "fail(database error)", "status" => false]);
    exit;
}

// Process order if exists
if (mysqli_num_rows($checkamt) > 0) {
    $order = mysqli_fetch_assoc($checkamt);
    $motta = floatval($order['motta']);
    $userId = mysqli_real_escape_string($conn, $order['balakedara']);

// Update user balance safely
    $updateBalance = $conn->prepare("UPDATE shonu_kaichila SET motta = motta + ? WHERE balakedara = ?");
    $updateBalance->bind_param("ds", $motta, $userId);

if (!$updateBalance->execute()) {
        logError("Balance update failed: " . $updateBalance->error);
        echo json_encode(["message" => "fail(update error)", "status" => false]);
        exit;
    }

// Mark order as processed
    $updateOrder = $conn->prepare("UPDATE thevani SET sthiti='1' WHERE dharavahi=?");
    $updateOrder->bind_param("s", $mchOrderNo);

if (!$updateOrder->execute()) {
        logError("Order update failed: " . $updateOrder->error);
        echo json_encode(["message" => "fail(update error)", "status" => false]);
        exit;
    }

logError("Order $mchOrderNo processed successfully. Amount added: $motta");
}

// Respond to webhook
echo "ok";
exit;
?>