HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux ip-172-31-18-78 6.17.0-1017-aws #17~24.04.1-Ubuntu SMP Tue May 26 21:09:53 UTC 2026 aarch64
User: ubuntu (1000)
PHP: 8.2.31
Disabled: NONE
Upload Files
File: /var/www/selfanalyse/wp-content/plugins/psychometrics/api/psy_payment_confirmation.php
<?php
include("../../../../wp-config.php");

// ini_set('display_errors',1);
// ini_set('display_startup_errors',1);
// error_reporting(E_ALL);

global $current_user;
$user_id=$current_user->ID;

$slot = $_REQUEST['slot'];


global $wpdb;
$PSY_USERS_DETAILS = $wpdb->prefix . PSY_USERS_DETAILS;
$PSY_SLOT_AVAILABLE = $wpdb->prefix . PSY_SLOT_AVAILABLE;
$PSY_STATES = $wpdb->prefix . PSY_STATES;

$userDetails = $wpdb->get_row("SELECT mobile_number,email_address,state_id FROM $PSY_USERS_DETAILS where user_id='$user_id'");
$amount = $wpdb->get_var("SELECT pricing_for_slot FROM $PSY_SLOT_AVAILABLE where id='$slot'");

$getStates = $wpdb->get_results("SELECT state_id,state_name FROM $PSY_STATES order by state_name");

if (strcasecmp($_SERVER['REQUEST_METHOD'], 'POST') == 0) {
    //Request hash
    $contentType = isset($_SERVER["CONTENT_TYPE"]) ? trim($_SERVER["CONTENT_TYPE"]) : '';
    if (strcasecmp($contentType, 'application/json') == 0) {
        $data = json_decode(file_get_contents('php://input'));
        $hash = hash('sha512', $data->key . '|' . $data->txnid . '|' . $data->amount . '|' . $data->pinfo . '|' . $data->fname . '|' . $data->email . '|||||' . $data->udf5 . '||||||' . $data->salt);
        $json = array();
        $json['success'] = $hash;
        echo json_encode($json);
    }
    exit(0);
}

function getCallbackUrl()
{
    $protocol = ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
    return $protocol . $_SERVER['HTTP_HOST'] .'/thank-you';
}
$txn_id = date('dmyhis');
?>
<form class="signin-form bounceIn" method="post" id="payment_form">
<input type="hidden" id="udf5" name="udf5" value="BOLT_KIT_PHP7" />
<input type="hidden" id="surl" name="surl" value="<?php echo getCallbackUrl(); ?>" />
<div class="col-md-12 verify-modal-name">
    <div class="signin-div">
        <label><i class="fa fa-user"></i></label>
        <input type="text" id="fname" name="fname" placeholder="Verify Name" value="" required>
    </div>
    <div class="signin-div <?php if($userDetails->state_id !='' && $userDetails->state_id !='0'){ echo "hide-div"; } ?>" >
        <label><i class="fa fa-map-marker"></i></label>
        <select name="state_verify" id="state_verify">
            <option value="0">--Select State--</option>
            <?php foreach($getStates as $s){ ?>
                <option value="<?php echo $s->state_id ?>" <?php if($userDetails->state_id == $s->state_id){ echo "selected"; } ?>><?php echo $s->state_name ?></option>
            <?php } ?>
        </select>
    </div>
    <div class="signin-div hide-div">
        <input type="hidden" value="rUZVouX0" id="key" name="key">
    </div>
    <div class="signin-div hide-div">
        <input type="hidden" id="salt" name="salt" placeholder="Merchant Salt" value="RMa9r7VKX0">
    </div>
    <div class="signin-div hide-div">
        <input type="hidden" id="txnid" name="txnid" placeholder="Transaction ID" value="<?php echo  "Txn" . $txn_id ?>">
    </div>
    <div class="signin-div hide-div">
        <input type="hidden" id="pinfo" name="pinfo" placeholder="Product Info" value="P01,P02" >
    </div>
    <div class="signin-div hide-div">
        <input type="hidden" id="email" name="email" placeholder="Email ID" value="<?php echo $userDetails->email_address; ?>">
    </div>
    <div class="signin-div hide-div">
        <input type="hidden" id="mobile" name="mobile" placeholder="Mobile/Cell Number" value="<?php echo $userDetails->mobile_number; ?>" >
    </div>
    <div class="signin-div hide-div">
        <input type="hidden" id="hash" name="hash" placeholder="Hash" value="" >
    </div>
    <div class="signin-div hide-div">
        <input type="number" id="amount" name="amount" placeholder="Amount" value="<?php echo $amount; ?>">
    </div>
</div>
<input class="sign-in-button button-wrap header-btn submit-details" onclick="verify();" type="button" name="btn-sign-up" value="Verify">
</form>