Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/narumalaracademy.net/public_html

Free Space:

10.24 TB

🔧 Quick Actions

✏️ Editing: pp_create.php

<?php
declare(strict_types=1);
if (session_status() === PHP_SESSION_NONE) { session_start(); }
header('Content-Type: application/json');

require_once 'includes/config.php'; // db(), esc()
$conn = db();

/* ====== PhonePe config (Sandbox) ====== */
const PP_ENV            = 'production'; // 'production' for live
const PP_SANDBOX_TOKEN  = 'https://api-preprod.phonepe.com/apis/pg-sandbox/v1/oauth/token';
const PP_PROD_TOKEN     = 'https://api.phonepe.com/apis/identity-manager/v1/oauth/token';
const PP_SANDBOX_PAY    = 'https://api-preprod.phonepe.com/apis/pg-sandbox/checkout/v2/pay';
const PP_PROD_PAY       = 'https://api.phonepe.com/apis/pg/checkout/v2/pay';

const PP_CLIENT_ID      = 'SU2509121831234567979807';
const PP_CLIENT_VERSION = '1';
const PP_CLIENT_SECRET  = '774d3d99-08cb-4868-97df-0648060c4c36';

try {
  if ($_SERVER['REQUEST_METHOD']!=='POST') { http_response_code(405); echo json_encode(['ok'=>false,'error'=>'POST only']); exit; }
  if (empty($_SESSION['user_id'])) { http_response_code(401); echo json_encode(['ok'=>false,'error'=>'Not logged in']); exit; }

$cart = json_decode($_POST['cart_json'] ?? '[]', true);
  $promo= strtoupper(trim((string)($_POST['promo_code'] ?? '')));
  if (!is_array($cart) || !count($cart)) { http_response_code(400); echo json_encode(['ok'=>false,'error'=>'Empty cart']); exit; }

$subtotal=0.0;
  foreach ($cart as $it) {
    $price=(float)($it['price'] ?? 0); $qty=max(1,(int)($it['qty'] ?? 1)); $subtotal+= $price*$qty;
  }
  $disc = $promo==='WELCOME10' ? min(round($subtotal*0.10), 100.0) : 0.0;
  $total = max(0, $subtotal - $disc);

$uid=(int)$_SESSION['user_id'];
  $stmt=$conn->prepare("SELECT full_name, phone FROM users WHERE id=?");
  $stmt->bind_param('i',$uid); $stmt->execute();
  $user=$stmt->get_result()->fetch_assoc() ?: ['full_name'=>'','phone'=>'']; $stmt->close();

// Persist order
  $conn->begin_transaction();
  $orderCode = 'ORD-'.time().'-'.random_int(1000,9999);
  $ship = 0.0;
  $stmt=$conn->prepare("INSERT INTO orders (order_code,user_id,subtotal,discount,shipping,total,promo_code,payment_method,status,created_at) VALUES (?,?,?,?,?,?,?,'PHONEPE','pending',NOW())");
  $stmt->bind_param('sidddds',$orderCode,$uid,$subtotal,$disc,$ship,$total,$promo);
  $stmt->execute();
  $orderId=(int)$stmt->insert_id; $stmt->close();

$itemStmt=$conn->prepare("INSERT INTO order_items (order_id, book_id, title, variant_label, unit_price, qty, line_total) VALUES (?,?,?,?,?,?,?)");
  foreach ($cart as $it) {
    $name=(string)($it['name'] ?? ''); $pack=(string)($it['pack'] ?? 'PDF eBook');
    $price=(float)($it['price'] ?? 0); $qty=max(1,(int)($it['qty'] ?? 1)); $line=$price*$qty;
    $bookId = isset($it['book_id']) ? (int)$it['book_id'] : null;
    if ($bookId) $itemStmt->bind_param('iissdii',$orderId,$bookId,$name,$pack,$price,$qty,$line);
    else { $null = null; $itemStmt->bind_param('iissdii',$orderId,$null,$name,$pack,$price,$qty,$line); }
    $itemStmt->execute();
  }
  $itemStmt->close();
  $conn->commit();

// 1) Token
  [$tc,$tr,$te]=http_post_urlencoded(pp_url('token'),[
    'client_id'=>PP_CLIENT_ID, 'client_version'=>PP_CLIENT_VERSION, 'client_secret'=>PP_CLIENT_SECRET, 'grant_type'=>'client_credentials'
  ]);
  if ($tc<200 || $tc>=300) { echo json_encode(['ok'=>false,'stage'=>'token','http'=>$tc,'error'=>'Token HTTP error','raw'=>$tr,'curl'=>$te]); exit; }
  $tok=json_decode((string)$tr,true);
  $access=(string)($tok['access_token'] ?? '');
  if (!$access) { echo json_encode(['ok'=>false,'stage'=>'token','http'=>$tc,'error'=>'Token missing access_token','raw'=>$tr]); exit; }

// 2) Create payment (prefer UPI_INTENT)
  $redirectUrlBack = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']==='on'?'https':'http')."://{$_SERVER['HTTP_HOST']}/checkout.php";
  $payload = [
    'merchantOrderId' => $orderCode,
    'amount' => paisa($total),
    'paymentFlow' => [
      'type' => 'PG_CHECKOUT',
      'merchantUrls' => ['redirectUrl' => $redirectUrlBack],
      'paymentModeConfig' => [
        'enabledPaymentModes' => [
          ['type'=>'UPI_INTENT'],
          ['type'=>'UPI_QR'],
          ['type'=>'NET_BANKING'],
          ['type'=>'CARD','cardTypes'=>['DEBIT_CARD','CREDIT_CARD']]
        ]
      ]
    ],
    'metaInfo' => [
      'udf1' => (string)($user['full_name'] ?? ''),
      'udf2' => (string)($user['phone'] ?? ''),
      'udf3' => 'Narumalar-ebooks'
    ]
  ];

[$pc,$pr,$pe]=http_post_json(pp_url('pay'), $payload, ['Authorization: O-Bearer '.$access]);
  if ($pc<200 || $pc>=300) { echo json_encode(['ok'=>false,'stage'=>'pay','http'=>$pc,'error'=>'Create payment HTTP error','raw'=>$pr,'curl'=>$pe]); exit; }

$jr = json_decode((string)$pr,true);
  $redirectUrl = (string)($jr['redirectUrl'] ?? '');
  $ppOrderId   = (string)($jr['orderId'] ?? '');
  $state       = (string)($jr['state'] ?? '');

if (!$redirectUrl) { echo json_encode(['ok'=>false,'stage'=>'pay','http'=>$pc,'error'=>'No redirectUrl in response','raw'=>$jr]); exit; }

if ($stmt = $conn->prepare("UPDATE orders SET gateway_order_id=?, gateway_state=? WHERE id=?")) {
    $stmt->bind_param('ssi',$ppOrderId,$state,$orderId);
    $stmt->execute(); $stmt->close();
  }

echo json_encode(['ok'=>true,'order_code'=>$orderCode,'redirectUrl'=>$redirectUrl]);

} catch (Throwable $e) {
  if ($conn->errno) { $conn->rollback(); }
  http_response_code(500);
  echo json_encode(['ok'=>false,'error'=>$e->getMessage()]);
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: pp_create.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation