1#@!#!123s

https 1#@!#!123s
: / home5 / ragvieco / www /
Filename : response.php
back
<?php
// response.php
require_once 'function.php';

// Enable detailed error reporting for debugging
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);
echo '<pre>';
print_r($_POST);
echo '</pre>';
// Log the raw incoming data
$log_data = [
    'timestamp' => date('Y-m-d H:i:s'),
    'post_data' => $_POST,
    'get_data' => $_GET,
    'server_data' => $_SERVER
];

file_put_contents('qpay_response.log', print_r($log_data, true), FILE_APPEND);

// Validate required parameters
$required_fields = ['MerchantOrderID', 'ResponseCode', 'MSPReferenceID', 'secure_hash'];
foreach ($required_fields as $field) {
    if (empty($_POST[$field])) {
        $error_msg = "Missing required field: $field";
        file_put_contents('qpay_errors.log', $error_msg . "\n", FILE_APPEND);
        die($error_msg);
    }
}

// Verify the secure hash
$received_hash = $_POST['secure_hash'];
$expected_hash_data = [
    $_POST['MSPReferenceID'],
    $_POST['ResponseCode'],
    $_POST['MerchantOrderID'],
    $_POST['Amount'],
    $_POST['Currency'],
    "HM5GPofrdArBLVyb4pbhacyYMXe2SGCqA2vtBDzzn5VFa9ZWE7s=" // Use same secret key as in pay.php
];

$expected_hash = strtoupper(hash('sha512', implode('|', $expected_hash_data)));

if ($received_hash !== $expected_hash) {
    $error_msg = "Hash verification failed - Possible tampering detected";
    file_put_contents('qpay_errors.log', $error_msg . "\n", FILE_APPEND);
    die($error_msg);
}

// Process the payment response
$order_id = $_POST['MerchantOrderID'];
$status_code = $_POST['ResponseCode'];
$transaction_id = $_POST['MSPReferenceID'];
$amount = $_POST['Amount'];
$currency = $_POST['Currency'];

// Check payment status (200 typically means success in QPay)
if ($status_code == '200') {
    // Update database using prepared statement
    $stmt = $connect->prepare("UPDATE orders SET 
        payment_status = 'completed', 
        transaction_id = ?,
        payment_date = NOW()
        WHERE order_id = ?");
    
    $stmt->bind_param("ss", $transaction_id, $order_id);
    $stmt->execute();
    
    // Send confirmation email (implement your email function)
    // sendPaymentConfirmation($order_id);
    
    // Redirect to success page
    header("Location: payment_success.php?order_id=" . urlencode($order_id));
    exit();
} else {
    // Payment failed
    $error_msg = $_POST['Message'] ?? 'Payment failed with code: ' . $status_code;
    
    // Update database
    $stmt = $connect->prepare("UPDATE orders SET 
        payment_status = 'failed', 
        payment_error = ?,
        transaction_id = ?
        WHERE order_id = ?");
    
    $stmt->bind_param("sss", $error_msg, $transaction_id, $order_id);
    $stmt->execute();
    
    // Redirect to failure page
    header("Location: payment_failed.php?order_id=" . urlencode($order_id) . "&error=" . urlencode($error_msg));
    exit();
}


if (!empty($session_id) && !empty($order_no)) {
    $get_order = mysqli_query(
        $connect,
        "SELECT * FROM `order_cart_add` WHERE session_id = '$session_id' AND order_no = '$order_no'"
    ) or die(mysqli_error($connect));

    $order = mysqli_fetch_assoc($get_order);

    if ($order) {
        $grand_total = rtrim(rtrim(number_format((float)$order['total'], 2, '.', ''), '0'), '.');
        $order_date = $order['order_date'];
    }
}
?>
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Payment Successful - <?php echo $site_title; ?></title>
    <link href="img/ragvilogo.png" rel="shortcut icon" type="image/png">
    <link rel="stylesheet" href="plugins/bootstrap4/css/bootstrap.min.css">
    <link rel="stylesheet" href="css/style.css">

    <style>
        .success-animation {
            margin: 20px auto;
        }

        .checkmark {
            width: 100px;
            height: 100px;
            border-radius: 50%;
            display: block;
            stroke-width: 2;
            stroke: #4bb71b;
            stroke-miterlimit: 10;
            box-shadow: inset 0px 0px 0px #4bb71b;
            animation: fill .4s ease-in-out .4s forwards, scale .3s ease-in-out .9s both;
            position: relative;
            margin: 0 auto;
        }

        .checkmark__circle {
            stroke-dasharray: 166;
            stroke-dashoffset: 166;
            stroke-width: 2;
            stroke-miterlimit: 10;
            stroke: #4bb71b;
            fill: #fff;
            animation: stroke 0.6s cubic-bezier(0.65, 0, 0.45, 1) forwards;
        }

        .checkmark__check {
            transform-origin: 50% 50%;
            stroke-dasharray: 48;
            stroke-dashoffset: 48;
            animation: stroke 0.3s cubic-bezier(0.65, 0, 0.45, 1) 0.8s forwards;
        }

        @keyframes stroke {
            100% {
                stroke-dashoffset: 0;
            }
        }

        @keyframes scale {
            0%,
            100% {
                transform: none;
            }

            50% {
                transform: scale3d(1.1, 1.1, 1);
            }
        }

        @keyframes fill {
            100% {
                box-shadow: inset 0px 0px 0px 30px #4bb71b;
            }
        }

        .text_align {
            text-align: center;
        }

        .padding {
            padding: 150px 0 20px 0;
        }

        footer.ps-footer.ps-footer--1 {
            position: fixed;
            bottom: 0;
            left: 0;
            right: 0;
        }
    </style>
</head>

<body>
    <div class="ps-page">
        <div class="ps-shop padding">
            <div class="container">
                <div class="success-animation">
                    <svg class="checkmark" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 52 52">
                        <circle class="checkmark__circle" cx="26" cy="26" r="25" fill="none" />
                        <path class="checkmark__check" fill="none" d="M14.1 27.2l7.1 7.2 16.7-16.8" />
                    </svg>
                </div>

                <h3 class="text_align">Payment Successful</h3>

                <?php if (!empty($order_no)): ?>
                    <p class="text_align">✅ Order ID: <strong><?php echo $order_no; ?></strong></p>
                <?php endif; ?>

                <?php if (!empty($grand_total)): ?>
                    <p class="text_align">💰 Total Paid: ₹<?php echo $grand_total; ?></p>
                <?php endif; ?>

                <?php if (!empty($order_date)): ?>
                    <p class="text_align">📅 Order Date: <?php echo date("d M Y, h:i A", strtotime($order_date)); ?></p>
                <?php endif; ?>

                <div class="text_align">
                    <a href="index.php" class="btn btn-success mt-3">Back to Home</a>
                </div>
            </div>
        </div>
    </div>

    <script src="plugins/jquery.min.js"></script>
    <script src="plugins/bootstrap4/js/bootstrap.min.js"></script>
</body>

</html>