webShop/callback.php at master · ibbtco/webShop · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
<?php
session_start();
require 'connect.php';
include "/home/goberdns/public_html/admin/mail.php";

$id ="";
$pw = "";

$secret = "";  //md5 hash a unui cuvant
$address = "";

if ($_GET['test'] == "true") {
     echo 'Ignoring Test Callback';
     return;
   }

if($_GET['secret'] != $secret){
echo "Invalid";
return;
}

if($_GET['mainaddress'] != $address){
echo "Invalid";
return;
}
if (!isset($_GET['btc'])){
echo "Invalid";
return;
}
if (!isset($_GET['value'])){
echo "Invalid";
return;
}
if (!isset($_GET['email'];)){
	echo "Invalid";
	return;
}
if (!isset($_GET['product'])){
	echo "Invalid";
	return;
}
$price = $_GET['btc'];
$value= $_GET['value'] / 10000000;

if ($value >= $price){
	$invoice= $_GET['invoice'];
	$email= $_GET['email'];
	$now = new DateTime();
	$date = $now->format('d-m-Y');
	$product= $_GET['product'];
	if ($product== "pr1"){
		$product="CS:GO Guardian T-Shirt";
	}
	if ($product== "pr2"){
		$product="CS:GO Mug";
	}
	if ($product== "pr3"){
		$product="CS:GO Softshell Jacket";
	}
	if ($product== "pr4"){
		$product="CS:GO Globe Mousepad";
	}
	if ($product== "pr5"){
		$product="CS:GO Reversible Vest";
	}
		$query = "INSERT INTO orders (orderid, email, price,date,product) VALUES ('$invoice', '$email', '$value','$date','$product')";
        if ($connection->query($query) === TRUE) {
	$sendto = $email;
	$subj = "Your order at webShop";
	$title ="Order #" . $_GET['invoice'];
	$body = "Your order #". $_GET['invoice'] . "<br>" . "Amount paid: " . $value . " BTC" . "<br>" . "Product name:";
	sendmail($title,$body,$sendto,$subj);
        } else{
		  echo 'Something went wrong while updating the DB!';
		  echo $connection->error;
		}


}else{
echo "There was an error, the amount paid is probably less than the price of the product!</br>";
echo "Amount to be paid: " . $price . "</br>" . "Amount paid: " . $value;
}
?>