Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/narumalaracademy.net/.trash

Free Space:

10.23 TB

🔧 Quick Actions

✏️ Editing: payment-callback.php

<?php
declare(strict_types=1);
if (session_status() === PHP_SESSION_NONE) {
    session_start();
}

require_once 'includes/config.php';
$conn = db();

// Verify PhonePe payment response
function verifyPhonePeResponse($response, $saltKey, $saltIndex) {
    $xVerify = $response['response'] . '/pg/v1/status/' . $response['merchantId'] . '/' . $response['transactionId'] . $saltKey;
    $sha256 = hash('sha256', $xVerify);
    $checksum = $sha256 . '###' . $saltIndex;
    
    return $checksum === $response['checksum'];
}

// Handle callback
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $response = json_decode(file_get_contents('php://input'), true);
    
    if ($response && isset($response['response'])) {
        $responseData = json_decode($response['response'], true);
        
        // Load PhonePe config
        $configResult = $conn->query("SELECT * FROM payment_gateway_config WHERE is_active = 1 LIMIT 1");
        if ($configResult && $configResult->num_rows > 0) {
            $phonepeConfig = $configResult->fetch_assoc();
            
            // Verify response
            if (verifyPhonePeResponse($response, $phonepeConfig['salt_key'], $phonepeConfig['salt_index'])) {
                $transactionId = $responseData['data']['transactionId'];
                $orderId = $responseData['data']['merchantTransactionId'];
                $amount = $responseData['data']['amount'] / 100; // Convert from paise to rupees
                $status = strtolower($responseData['data']['state']);
                
                // Update order status
                $stmt = $conn->prepare("
                    UPDATE orders 
                    SET pg_transaction_id = ?, payment_status = ?, payment_response = ?, status = ?
                    WHERE order_code = ?
                ");
                
                $newStatus = ($status === 'completed') ? 'confirmed' : 'pending';
                $stmt->bind_param('sssss', $transactionId, $status, json_encode($responseData), $newStatus, $orderId);
                $stmt->execute();
                
                // Insert into payment transactions
                $stmt2 = $conn->prepare("
                    INSERT INTO payment_transactions (order_id, transaction_id, amount, payment_method, status, pg_response)
                    SELECT id, ?, ?, ?, ?, ? FROM orders WHERE order_code = ?
                ");
                $paymentMethod = $responseData['data']['paymentInstrument']['type'] ?? 'unknown';
                $stmt2->bind_param('sdssss', $transactionId, $amount, $paymentMethod, $status, json_encode($responseData), $orderId);
                $stmt2->execute();
                
                if ($status === 'completed') {
                    // Redirect to success page
                    header('Location: thank-you.php?order=' . urlencode($orderId));
                } else {
                    // Redirect to failure page
                    header('Location: payment-failed.php?order=' . urlencode($orderId));
                }
                exit;
            }
        }
    }
}

// If verification fails or invalid request
header('Location: payment-failed.php');
exit;
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: payment-callback.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation