File: /var/www/selfanalyse/wp-content/plugins/psychometrics/api/psy_payment_confirmation.php
<?php
include("../../../../wp-config.php");
// ini_set('display_errors',1);
// ini_set('display_startup_errors',1);
// error_reporting(E_ALL);
global $current_user;
$user_id=$current_user->ID;
$slot = $_REQUEST['slot'];
global $wpdb;
$PSY_USERS_DETAILS = $wpdb->prefix . PSY_USERS_DETAILS;
$PSY_SLOT_AVAILABLE = $wpdb->prefix . PSY_SLOT_AVAILABLE;
$PSY_STATES = $wpdb->prefix . PSY_STATES;
$userDetails = $wpdb->get_row("SELECT mobile_number,email_address,state_id FROM $PSY_USERS_DETAILS where user_id='$user_id'");
$amount = $wpdb->get_var("SELECT pricing_for_slot FROM $PSY_SLOT_AVAILABLE where id='$slot'");
$getStates = $wpdb->get_results("SELECT state_id,state_name FROM $PSY_STATES order by state_name");
if (strcasecmp($_SERVER['REQUEST_METHOD'], 'POST') == 0) {
//Request hash
$contentType = isset($_SERVER["CONTENT_TYPE"]) ? trim($_SERVER["CONTENT_TYPE"]) : '';
if (strcasecmp($contentType, 'application/json') == 0) {
$data = json_decode(file_get_contents('php://input'));
$hash = hash('sha512', $data->key . '|' . $data->txnid . '|' . $data->amount . '|' . $data->pinfo . '|' . $data->fname . '|' . $data->email . '|||||' . $data->udf5 . '||||||' . $data->salt);
$json = array();
$json['success'] = $hash;
echo json_encode($json);
}
exit(0);
}
function getCallbackUrl()
{
$protocol = ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
return $protocol . $_SERVER['HTTP_HOST'] .'/thank-you';
}
$txn_id = date('dmyhis');
?>
<form class="signin-form bounceIn" method="post" id="payment_form">
<input type="hidden" id="udf5" name="udf5" value="BOLT_KIT_PHP7" />
<input type="hidden" id="surl" name="surl" value="<?php echo getCallbackUrl(); ?>" />
<div class="col-md-12 verify-modal-name">
<div class="signin-div">
<label><i class="fa fa-user"></i></label>
<input type="text" id="fname" name="fname" placeholder="Verify Name" value="" required>
</div>
<div class="signin-div <?php if($userDetails->state_id !='' && $userDetails->state_id !='0'){ echo "hide-div"; } ?>" >
<label><i class="fa fa-map-marker"></i></label>
<select name="state_verify" id="state_verify">
<option value="0">--Select State--</option>
<?php foreach($getStates as $s){ ?>
<option value="<?php echo $s->state_id ?>" <?php if($userDetails->state_id == $s->state_id){ echo "selected"; } ?>><?php echo $s->state_name ?></option>
<?php } ?>
</select>
</div>
<div class="signin-div hide-div">
<input type="hidden" value="rUZVouX0" id="key" name="key">
</div>
<div class="signin-div hide-div">
<input type="hidden" id="salt" name="salt" placeholder="Merchant Salt" value="RMa9r7VKX0">
</div>
<div class="signin-div hide-div">
<input type="hidden" id="txnid" name="txnid" placeholder="Transaction ID" value="<?php echo "Txn" . $txn_id ?>">
</div>
<div class="signin-div hide-div">
<input type="hidden" id="pinfo" name="pinfo" placeholder="Product Info" value="P01,P02" >
</div>
<div class="signin-div hide-div">
<input type="hidden" id="email" name="email" placeholder="Email ID" value="<?php echo $userDetails->email_address; ?>">
</div>
<div class="signin-div hide-div">
<input type="hidden" id="mobile" name="mobile" placeholder="Mobile/Cell Number" value="<?php echo $userDetails->mobile_number; ?>" >
</div>
<div class="signin-div hide-div">
<input type="hidden" id="hash" name="hash" placeholder="Hash" value="" >
</div>
<div class="signin-div hide-div">
<input type="number" id="amount" name="amount" placeholder="Amount" value="<?php echo $amount; ?>">
</div>
</div>
<input class="sign-in-button button-wrap header-btn submit-details" onclick="verify();" type="button" name="btn-sign-up" value="Verify">
</form>