payment-wall [ Pingback & API ]

<?php
/*  
 *  Pingback Listener Script
 *  For Virtual Currency API
 *  Copyright (c) 2010-2013 *********** Team
 */
/*  
 *  Define your application-specific options
 */
define('SECRET', 'Your Secret here'); // secret key of your application
define('IP_WHITELIST_CHECK_ACTIVE', true);
define('CREDIT_TYPE_CHARGEBACK', 2);
/**  
 *  The IP addresses below are ***********'s
 *  servers. Make sure your pingback script
 *  accepts requests from these addresses ONLY.
 *
 */
$ipsWhitelist = array(
    '174.36.92.186',
    '174.36.96.66',
    '174.36.92.187',
    '174.36.92.192',
    '174.37.14.28'
);

/**  
 *  Collect the GET parameters from the request URL
 */
$userId = isset($_GET['uid']) ? $_GET['uid'] : null;
$credits = isset($_GET['currency']) ? $_GET['currency'] : null;
$type = isset($_GET['type']) ? $_GET['type'] : null;
$refId = isset($_GET['ref']) ? $_GET['ref'] : null;
$signature = isset($_GET['sig']) ? $_GET['sig'] : null;
$sign_version = isset($_GET['sign_version']) ? $_GET['sign_version'] : null;

$result = false;

/**  
 *  If there are any errors encountered, the script will list them
 *  in an array.
 */
$errors = array ();

if (!empty($userId) && !empty($credits) && isset($type) && !empty($refId) && !empty($signature)) {
    $signatureParams = array();

    /** 
  *  version 1 signature
  */
    if (empty($sign_version) || $sign_version <= 1) {
  $signatureParams = array(
    'uid' => $userId,
    'currency' => $credits,
    'type' => $type,
    'ref' => $refId
  );
    }
    /** 
  *  version 2+ signature
  */
    else {
  $signatureParams = array();
  foreach ($_GET as $param => $value) {    
    $signatureParams[$param] = $value;
  }
  unset($signatureParams['sig']);
    }

    /** 
  *  check if IP is in whitelist and if signature matches    
  */
    $signatureCalculated = calculatePingbackSignature($signatureParams, SECRET, $sign_version);

    /** 
  *  Run the security check -- if the request's origin is one
  *  of ***********'s servers, and if the signature matches
  *  the parameters.
  */
    if (!IP_WHITELIST_CHECK_ACTIVE || in_array($_SERVER['REMOTE_ADDR'], $ipsWhitelist)) {
  if ($signature == $signatureCalculated) {
    $result = true;
    if ($type == CREDIT_TYPE_CHARGEBACK) {
    /** 
  *  Deduct credits from user. Note that currency amount
  *  sent for chargeback is negative, e.g. -5, so be
  *  careful about the sign Don't deduct negative
  *  number, otherwise user will gain credits instead
  *  of losing them
  *
  */
            //editing parts
                $con = new Database("PC-Name\SQLEXPRESS","sa","password","SRO_VT_SHARD") OR DIE('Cannot connect to the Database Connector');
                  $query = $con->runQuery("SELECT `row` FROM `table` WHERE `userid row` = '".$userId."';");
        if($query->rowCount() != 0) {
                while($row = $query->fetch(PDO::FETCH_ASSOC)) {
        $final = $row['row'] + $credits;
        $con->runQuery("UPDATE `table` SET `row` = '{$final}' WHERE `userid` = '{$userId}'");
        }
        $con = null;
    }
    } else {
            //editing parts
                $con = new Database("PC-Name","sa","pw","SRO_VT_ACCOUNT") OR DIE('Cannot connect to the Database Connector');
                  $query = $con->runQuery("SELECT `row` FROM `table` WHERE `userid row` = '".$userId."';");
        if($query->rowCount() != 0) {
                while($row = $query->fetch(PDO::FETCH_ASSOC)) {
        $final = $row['row'] + $credits;
        $con->runQuery("UPDATE `table` SET `row` = '{$final}' WHERE `userid` = '{$userId}'");
        }
        $con = null;
    }
    // Give credits to user
    }
  } else {
    $errors['signature'] = 'Signature is not valid!';    
  }
    } else {
  $errors['whitelist'] = 'IP not in whitelist!';
    }
} else {
    $errors['params'] = 'Missing parameters!';
}
/**  
 *  Always make sure to echo OK so ***********
 *  will know that the transaction is successful.
 */
if ($result) {
    echo 'OK';
} else {
    echo implode(' ', $errors);
}

/**  
 *  Signature calculation function
 */
function calculatePingbackSignature($params, $secret, $version) {
    $str = '';
    if ($version == 2) {
  ksort($params);
    }
    foreach ($params as $k=>$v) {
  $str .= "$k=$v";
    }
    $str .= $secret;
    return md5($str);
}
class Database
    {
        private $db;
        public function Database($host, $user, $pass, $db) {
            try {
                $this->db = new PDO("mysql:dbname=".$db.";host=".$host.";", $user, $pass);        
            } catch(PDOEXCEPTION $e) {
                die('An error oncorupied! [Code: '.$e->getCode().']!');
            }
        }
        public function runQuery($query) {
            return $this->db->query($query);    
        }
    }
    ?>

<?php
/*  
 *  Pingback Listener Script
 *  For Virtual Currency API
 *  Copyright (c) 2010-2013 *********** Team
 */
/*  
 *  Define your application-specific options
 */
define('SECRET', 'Your Secret here'); // secret key of your application
define('IP_WHITELIST_CHECK_ACTIVE', false);
define('CREDIT_TYPE_CHARGEBACK', 2);
/**  
 *  The IP addresses below are ***********'s
 *  servers. Make sure your pingback script
 *  accepts requests from these addresses ONLY.
 *
 */
$ipsWhitelist = array(
    '174.36.92.186',
    '174.36.96.66',
    '174.36.92.187',
    '174.36.92.192',
    '174.37.14.28'
);

/**  
 *  Collect the GET parameters from the request URL
 */
$userId = isset($_GET['uid']) ? $_GET['uid'] : null;
$credits = isset($_GET['currency']) ? $_GET['currency'] : null;
$type = isset($_GET['type']) ? $_GET['type'] : null;
$refId = isset($_GET['ref']) ? $_GET['ref'] : null;
$signature = isset($_GET['sig']) ? $_GET['sig'] : null;
$sign_version = isset($_GET['sign_version']) ? $_GET['sign_version'] : null;

$result = false;

/**  
 *  If there are any errors encountered, the script will list them
 *  in an array.
 */
$errors = array ();

if (!empty($userId) && !empty($credits) && isset($type) && !empty($refId) && !empty($signature)) {
    $signatureParams = array();

    /** 
  *  version 1 signature
  */
    if (empty($sign_version) || $sign_version <= 1) {
  $signatureParams = array(
    'uid' => $userId,
    'currency' => $credits,
    'type' => $type,
    'ref' => $refId
  );
    }
    /** 
  *  version 2+ signature
  */
    else {
  $signatureParams = array();
  foreach ($_GET as $param => $value) {    
    $signatureParams[$param] = $value;
  }
  unset($signatureParams['sig']);
    }

    /** 
  *  check if IP is in whitelist and if signature matches    
  */
    $signatureCalculated = calculatePingbackSignature($signatureParams, SECRET, $sign_version);

    /** 
  *  Run the security check -- if the request's origin is one
  *  of ***********'s servers, and if the signature matches
  *  the parameters.
  */
    if (!IP_WHITELIST_CHECK_ACTIVE || in_array($_SERVER['REMOTE_ADDR'], $ipsWhitelist)) {
  if ($signature == $signatureCalculated) {
    $result = true;
    if ($type == CREDIT_TYPE_CHARGEBACK) {
    /** 
  *  Deduct credits from user. Note that currency amount
  *  sent for chargeback is negative, e.g. -5, so be
  *  careful about the sign Don't deduct negative
  *  number, otherwise user will gain credits instead
  *  of losing them
  *
  */
            //editing parts
                $con = new Database("PC-Name\SQLEXPRESS","sa","password","SRO_VT_SHARD") OR DIE('Cannot connect to the Database Connector');
                  $query = $con->runQuery("SELECT `row` FROM `table` WHERE `userid row` = '".$userId."';");
        if($query->rowCount() != 0) {
                while($row = $query->fetch(PDO::FETCH_ASSOC)) {
        $final = $row['row'] + $credits;
        $con->runQuery("UPDATE `table` SET `row` = '{$final}' WHERE `userid` = '{$userId}'");
        }
        $con = null;
    }
    } else {
            //editing parts
                $con = new Database("PC-Name","sa","pw","SRO_VT_ACCOUNT") OR DIE('Cannot connect to the Database Connector');
                  $query = $con->runQuery("SELECT `row` FROM `table` WHERE `userid row` = '".$userId."';");
        if($query->rowCount() != 0) {
                while($row = $query->fetch(PDO::FETCH_ASSOC)) {
        $final = $row['row'] + $credits;
        $con->runQuery("UPDATE `table` SET `row` = '{$final}' WHERE `userid` = '{$userId}'");
        }
        $con = null;
    }
    // Give credits to user
    }
  } else {
    $errors['signature'] = 'Signature is not valid!';    
  }
    } else {
  $errors['whitelist'] = 'IP not in whitelist!';
    }
} else {
    $errors['params'] = 'Missing parameters!';
}
/**  
 *  Always make sure to echo OK so ***********
 *  will know that the transaction is successful.
 */
if ($result) {
    echo 'OK';
} else {
    echo implode(' ', $errors);
}

/**  
 *  Signature calculation function
 */
function calculatePingbackSignature($params, $secret, $version) {
    $str = '';
    if ($version == 2) {
  ksort($params);
    }
    foreach ($params as $k=>$v) {
  $str .= "$k=$v";
    }
    $str .= $secret;
    return md5($str);
}
class Database
    {
        private $db;
        public function Database($host, $user, $pass, $db) {
            try {
                $this->db = new PDO("mysql:dbname=".$db.";host=".$host.";", $user, $pass);        
            } catch(PDOEXCEPTION $e) {
                die('An error oncorupied! [Code: '.$e->getCode().']!');
            }
        }
        public function runQuery($query) {
            return $this->db->query($query);    
        }
    }
    ?>