WD - Dev
69 lines
2.1 KiB
PHP
69 lines
2.1 KiB
PHP
<?php
|
|
|
|
// Redirect jika index.php ada di URL
|
|
$requestUri = $_SERVER['REQUEST_URI'];
|
|
if (strpos($requestUri, 'index.php') !== false) {
|
|
$newUrl = str_replace('index.php', '', $requestUri);
|
|
header('Location: ' . $newUrl);
|
|
exit;
|
|
}
|
|
|
|
// Validasi dan sanitasi input
|
|
$order_id = isset($_GET['order_id']) ? $_GET['order_id'] : '';
|
|
$order_id = filter_var($order_id, FILTER_SANITIZE_STRING);
|
|
|
|
// Validasi agar order_id tidak kosong
|
|
if (empty($order_id)) {
|
|
http_response_code(400); // Bad Request
|
|
echo "Invalid order_id.";
|
|
exit;
|
|
}
|
|
|
|
//encrypt_url
|
|
define('ENCRYPTION_KEY', hex2bin('9a307dfcf16ac2e4406b1a59a31c1d096eafe37e40c60ddee4bb827b6a947079'));
|
|
define('ENCRYPTION_METHOD', 'AES-256-CBC');
|
|
|
|
function encrypt_url($data) {
|
|
$iv = random_bytes(16);
|
|
$encrypted = openssl_encrypt($data, ENCRYPTION_METHOD, ENCRYPTION_KEY, OPENSSL_RAW_DATA, $iv);
|
|
// Gabungkan IV hex + "::" + encrypted base64, lalu base64 encode seluruh string
|
|
$result = base64_encode(bin2hex($iv) . "::" . base64_encode($encrypted));
|
|
return $result;
|
|
}
|
|
|
|
// Include konfigurasi dengan perlindungan keamanan
|
|
include '../../config/connect.php';
|
|
include '../../list_data/sweetalert.php';
|
|
require_once ('api_control.php');
|
|
|
|
try {
|
|
// Query untuk mengambil data dari tabel apk_payment
|
|
$stmt = $pdo->prepare("SELECT status FROM apk_payment WHERE order_id = :order_id");
|
|
$stmt->bindParam(':order_id', $order_id, PDO::PARAM_STR);
|
|
$stmt->execute();
|
|
$result = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if ($result === false) {
|
|
http_response_code(404); // Not Found
|
|
echo "Order not found.";
|
|
exit;
|
|
}
|
|
|
|
if ($result['status'] == 'BELUM DIBAYAR') {
|
|
include "pay.php";
|
|
} elseif ($result['status'] == 'PENDING' || $result['status'] == 'LUNAS' || $result['status'] == 'CANCELED') {
|
|
include "proses.php";
|
|
} else {
|
|
http_response_code(400); // Bad Request
|
|
echo "Unknown status.";
|
|
exit;
|
|
}
|
|
|
|
} catch (PDOException $e) {
|
|
// Tangani kesalahan database
|
|
http_response_code(500); // Internal Server Error
|
|
echo "Database error: " . htmlspecialchars($e->getMessage());
|
|
exit;
|
|
}
|
|
?>
|