Add remaining project files (exclude ignored folders)

payment/paydisini/index.php

@@ -0,0 +1,68 @@
+<?php 
+
+// Redirect jika index.php ada di URL
+$requestUri = $_SERVER['REQUEST_URI'];
+if (strpos($requestUri, 'index.php') !== false) {
+    $newUrl = str_replace('index.php', '', $requestUri);
+    header('Location: ' . $newUrl);
+    exit;
+}
+
+// Validasi dan sanitasi input
+$order_id = isset($_GET['order_id']) ? $_GET['order_id'] : '';
+$order_id = filter_var($order_id, FILTER_SANITIZE_STRING);
+
+// Validasi agar order_id tidak kosong
+if (empty($order_id)) {
+    http_response_code(400); // Bad Request
+    echo "Invalid order_id.";
+    exit;
+}
+
+//encrypt_url
+define('ENCRYPTION_KEY', hex2bin('9a307dfcf16ac2e4406b1a59a31c1d096eafe37e40c60ddee4bb827b6a947079'));
+define('ENCRYPTION_METHOD', 'AES-256-CBC');
+
+function encrypt_url($data) {
+    $iv = random_bytes(16);
+    $encrypted = openssl_encrypt($data, ENCRYPTION_METHOD, ENCRYPTION_KEY, OPENSSL_RAW_DATA, $iv);
+    // Gabungkan IV hex + "::" + encrypted base64, lalu base64 encode seluruh string
+    $result = base64_encode(bin2hex($iv) . "::" . base64_encode($encrypted));
+    return $result;
+}
+
+// Include konfigurasi dengan perlindungan keamanan
+include '../../config/connect.php';
+include '../../list_data/sweetalert.php';
+require_once ('api_control.php');
+
+try {
+    // Query untuk mengambil data dari tabel apk_payment
+    $stmt = $pdo->prepare("SELECT status FROM apk_payment WHERE order_id = :order_id");
+    $stmt->bindParam(':order_id', $order_id, PDO::PARAM_STR);
+    $stmt->execute();
+    $result = $stmt->fetch(PDO::FETCH_ASSOC);
+
+    if ($result === false) {
+        http_response_code(404); // Not Found
+        echo "Order not found.";
+        exit;
+    }
+
+    if ($result['status'] == 'BELUM DIBAYAR') {
+        include "pay.php";
+    } elseif ($result['status'] == 'PENDING' || $result['status'] == 'LUNAS' || $result['status'] == 'CANCELED') {
+        include "proses.php";
+    } else {
+        http_response_code(400); // Bad Request
+        echo "Unknown status.";
+        exit;
+    }
+
+} catch (PDOException $e) {
+    // Tangani kesalahan database
+    http_response_code(500); // Internal Server Error
+    echo "Database error: " . htmlspecialchars($e->getMessage());
+    exit;
+}
+?>