Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
assets	[ DIR ]	drwxr-xr-x	2025-09-21 22:51
.htaccess	1018 B	-rw-r--r--	2025-09-14 18:50
adddeposit.php	4.52 KB	-rw-r--r--	2025-09-14 18:50
checksuccesspay.php	1.9 KB	-rw-r--r--	2025-09-14 18:50
config.php	371 B	-rw-r--r--	2025-11-21 17:38
depositconfirm.php	5.85 KB	-rw-r--r--	2025-09-14 18:50
error_log	639 B	-rw-r--r--	2025-11-07 14:22
heyrtnl.php	1.56 KB	-rw-r--r--	2025-09-14 18:50
jerrylawler.php	7.68 KB	-rw-r--r--	2025-11-21 17:37
lgwebhook.php	3.69 KB	-rw-r--r--	2025-09-14 18:50
log.txt	2.84 KB	-rw-r--r--	2025-11-07 17:53
otp.php	1 KB	-rw-r--r--	2025-09-14 18:50
safepay.php	6.64 KB	-rw-r--r--	2025-09-14 18:50
spwebhook.php	3.31 KB	-rw-r--r--	2025-09-14 18:50
usdt.php	22.48 KB	-rw-r--r--	2025-11-21 17:37
usdtconfim.php	5.67 KB	-rw-r--r--	2025-09-14 18:50
usdtuu.php	22.67 KB	-rw-r--r--	2025-09-14 18:50
wepay.php	4.66 KB	-rw-r--r--	2025-09-14 18:50
wepay2.php	4.73 KB	-rw-r--r--	2025-11-21 17:37

Rename

<?php 
header('Content-type: text/plain; charset=utf-8');
include ("../serive/samparka.php");

// Helper function to sanitize GET parameters
function getParam($key, $default = '') {
    global $conn;
    return isset($_GET[$key]) ? mysqli_real_escape_string($conn, htmlspecialchars($_GET[$key])) : $default;
}

// Get parameters
$uid = getParam('uid');
$payTypeID = getParam('tyid');
$ramt = getParam('amount');
$sign = getParam('sign');
$urlInfo = getParam('urlInfo');

// Format amount to 2 decimal places
$ramt = number_format((float)$ramt, 2, '.', '');

// Map payTypeID to payName
$payNames = [
    1023 => 'Cloudspay-QR',
    1124 => 'UPI-QR',
    1030 => 'RUJIA-QR',
    1029 => '7DAY-QR',
    1021 => 'YaYa-APPpay',
    1010 => 'FAST-UPIpay',
    1012 => 'Super-ORpay',
    1013 => 'YaYa-ORpay',
    1014 => 'UPI x QR',
    1015 => 'SunPay',
    2123 => 'UPAY-USDT',
    2190 => 'UU-USDT',
    2191 => '7Day-PayTM',
    2192 => 'UPI-PayTM'
];
$payName = $payNames[$payTypeID] ?? 'Unknown';

// Generate unique order serial
$serial = date("Ymd") . time() . rand(100000, 999900);

// Check if uid exists in demo table
$demoResult = $conn->query("SELECT 1 FROM demo WHERE balakedara='$uid'");
if ($demoResult->num_rows > 0) {
    $createdate = date("Y-m-d H:i:s");
    
    // Insert into thevani
    $conn->query("INSERT INTO thevani (balakedara, motta, dharavahi, mula, ullekha, duravani, ekikrtapavati, dinankavannuracisi, madari, pavatiaidi, sthiti) 
        VALUES ('$uid', '$ramt', '$serial', '$payName', 'N/A', 'N/A', 'N/A', '$createdate', '1005', '2', '1')");

// Update user's balance
    $conn->query("UPDATE shonu_kaichila SET motta = motta + $ramt WHERE balakedara='$uid'");

header('Location: https://game.aviator.fastearnlimited.com/#/main');
    exit;
}

// Otherwise, proceed with payment API logic
if (!$uid || !$ramt || !$payTypeID || !$sign || !$urlInfo) {
    echo json_encode(['code'=>405,'message'=>'Illegal access!']);
    exit;
}

// Fetch user info
$userData = $conn->query("SELECT mobile, codechorkamukala, createdate FROM shonu_subjects WHERE id='$uid'");
if ($userData->num_rows == 0) {
    echo json_encode(['code'=>404,'message'=>'User not found']);
    exit;
}
$user = mysqli_fetch_assoc($userData);
$userName = '91'.$user['mobile'];
$nickName = $user['codechorkamukala'];
$createdate = $user['createdate'];

// API Config
$config = require 'config.php';
$apiUrl = $config['api_url'];
$apiConfigUrl = "https://lgpay.com/order/create";
$apiKey = $config['name'];

// Get secret key & app_id from LG Pay
$ch = curl_init($apiConfigUrl);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Authorization: Bearer ' . $apiKey]);
$apiData = curl_exec($ch);
curl_close($ch);

if ($apiData) {
    $apiResponse = json_decode($apiData,true);
    if (json_last_error() === JSON_ERROR_NONE && isset($apiResponse['secret_key'], $apiResponse['app_id'])) {
        $secretKey = $apiResponse['secret_key'];
        $app_id = $apiResponse['app_id'];
    } else {
        $secretKey = $config['secret_key'];
        $app_id = $config['app_id'];
    }
} else {
    $secretKey = $config['secret_key'];
    $app_id = $config['app_id'];
}

// Prepare payment parameters
$notify_url = "https://game.aviator.fastearnlimited.com/pay/lgwebhook.php";
$params = [
    'ip' => $_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['REMOTE_ADDR'],
    'remark' => 'web pay',
    'notify_url' => $notify_url,
    'money' => $ramt*100,
    'app_id' => $app_id,
    'trade_type' => 'INRUPI',
    'order_sn' => $serial,
    'return_url' => 'https://game.aviator.fastearnlimited.com',
];
ksort($params);
$signatureString = '';
foreach ($params as $key => $value) $signatureString .= "$key=$value&";
$signatureString .= "key=$secretKey";
$params['sign'] = strtoupper(md5($signatureString));

// Send request to payment API
$postData = http_build_query($params);
$ch = curl_init($apiUrl);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/x-www-form-urlencoded']);
$response = curl_exec($ch);
curl_close($ch);

$responseData = json_decode($response,true);
if ($responseData && $responseData['status']==1 && isset($responseData['data']['pay_url'])) {
    // Insert payment record
    $createdate = date("Y-m-d H:i:s");
    $conn->query("INSERT INTO thevani (payid, balakedara, motta, dharavahi, mula, ullekha, duravani, ekikrtapavati, dinankavannuracisi, madari, pavatiaidi, sthiti) 
        VALUES (1, '$uid', '$ramt', '$serial', '$payName', 'N/A', 'N/A', 'UPI', '$createdate', '1005', '2', '0')");

header('Location: ' . $responseData['data']['pay_url']);
    exit;
} else {
    echo "Error: Unable to process payment.";
    var_dump($responseData);
}
?>