PK

<?php
header("Pragma: no-cache");
header("Cache-Control: no-cache");
header("Expires: 0");
ob_start();
//error_reporting(E_ALL ^ E_NOTICE);
@session_start();
ini_set('allow_url_include',1);    
date_default_timezone_set("Asia/Kolkata");
set_time_limit(600);
ini_set('max_execution_time',600);


// following files need to be included
require_once("./lib/config_paytm.php");
require_once("./lib/encdec_paytm.php");

require_once '../admin/includes/settings/PDODB.php';
include '../admin/includes/modules/functions.php';
include '../admin/includes/settings/constant.php';


/*if(empty($_SESSION['userId'])){
header("Location: ../index.php");
exit();
}*/
//print_r($_SESSION['house_no']); exit();
$function = new FUNCTIONS();


//print_r($_SESSION);

$paytmChecksum = "";
$paramList = array();
$isValidChecksum = "FALSE";

$paramList = $_POST;
$paytmChecksum = isset($_POST["CHECKSUMHASH"]) ? $_POST["CHECKSUMHASH"] : ""; //Sent by Paytm pg

//Verify all parameters received from Paytm pg to your application. Like MID received from paytm pg is same as your application�s MID, TXN_AMOUNT and ORDER_ID are same as what was sent by you to Paytm PG for initiating transaction etc.
$isValidChecksum = verifychecksum_e($paramList, PAYTM_MERCHANT_KEY, $paytmChecksum); //will return TRUE or FALSE string.


$ORDERID=!empty($_POST['ORDERID'])?trim($_POST['ORDERID']):"";
$TXNID=!empty($_POST['TXNID'])?trim($_POST['TXNID']):"";
$TXNAMOUNT=!empty($_POST['TXNAMOUNT'])?(int)trim($_POST['TXNAMOUNT']):"";
$PAYMENTMODE=!empty($_POST['PAYMENTMODE'])?trim($_POST['PAYMENTMODE']):"";
$CURRENCY=!empty($_POST['CURRENCY'])?trim($_POST['CURRENCY']):"";
//$TXNDATE=!empty($_POST['TXNDATE'])?trim($_POST['TXNDATE']):"";
$STATUS=!empty($_POST['STATUS'])?trim($_POST['STATUS']):"";
$RESPCODE=!empty($_POST['RESPCODE'])?trim($_POST['RESPCODE']):"";
$RESPMSG=!empty($_POST['RESPMSG'])?trim($_POST['RESPMSG']):"";
$GATEWAYNAME=!empty($_POST['GATEWAYNAME'])?trim($_POST['GATEWAYNAME']):"";
$BANKTXNID=!empty($_POST['BANKTXNID'])?trim($_POST['BANKTXNID']):"";
$BANKNAME=!empty($_POST['BANKNAME'])?trim($_POST['BANKNAME']):"";
$CHECKSUMHASH=!empty($_POST['CHECKSUMHASH'])?trim($_POST['CHECKSUMHASH']):"";
$ipaddress = $function->getRealIpAddr();
$TXNDATE = date('Y-m-d H:i:s');

$payLogerDetails = $function->getVaccineLogerDetails($uid=NULL,$orderid=$ORDERID);

//print_r($_POST);
$payid = $payLogerDetails[0]['id'];
$uid = $payLogerDetails[0]['uid'];
//exit();
$pdodb = PDODB::getInstance();
$sql = "UPDATE `vaccine_payment_loger` SET orderid='".$ORDERID."',txnid='".$TXNID."',currency='".$CURRENCY."',txndate='".$TXNDATE."',status='".$STATUS."',respcode='".$RESPCODE."',respmsg='".$RESPMSG."',gatewayname='".$GATEWAYNAME."',checksumhash='".$CHECKSUMHASH."'  WHERE id='$payid'";
//exit;
$result = $pdodb->query($sql);
PDODB::closeInstance();

$user = $function->getUsers($uid,NULL,NULL,1);
$user_details = $function->getUserDetails($uid,NULL,1);


$_SESSION['owner_name'] = $user[0]['owner_name'];
$_SESSION['house_no'] = $user_details[0]['house_no'];


$_SESSION['orderid'] = $ORDERID;
$_SESSION['userId'] = $uid;

$owner_name = $user[0]['owner_name'];
$house_no = $user_details[0]['house_no'];

if($isValidChecksum == "TRUE") {
	echo "<b>Checksum matched and following are the transaction details:</b>" . "<br/>";
	if ($_POST["STATUS"] == "TXN_SUCCESS") {
		echo "<b>Transaction status is success</b>" . "<br/>";
		//Process your transaction here as success transaction.
		//Verify amount & order id received from Payment gateway with your application's order id and amount.
		echo "success page"; 
			//exit;
		$sql1 = "INSERT INTO `transaction_vaccine` SET uid='".$uid."',owner_name='".$owner_name."',house_no='".$house_no."',orderid='".$ORDERID."',txnid='".$TXNID."',txnamount='".$TXNAMOUNT."',paymentmode='".$PAYMENTMODE."',currency='".$CURRENCY."',txndate='".$TXNDATE."',status='".$STATUS."',respcode='".$RESPCODE."',respmsg='".$RESPMSG."',gatewayname='".$GATEWAYNAME."',banktxnid='".$BANKTXNID."',bankname='".$BANKNAME."',checksumhash='".$CHECKSUMHASH."',ipaddress='".$ipaddress."'";
        
        $result = $pdodb->query($sql1);
        //print_r($result2); exit;
        PDODB::closeInstance();

        header("Location: ../invoice-vaccine.php?orderid=$ORDERID");
        
	}
	else {
		echo "<b>Transaction status is failure</b>" . "<br/>";
		echo "failure page";
		header("Location: ../vfailure.php");

	}
	if (isset($_POST) && count($_POST)>0 )
	{ 
		foreach($_POST as $paramName => $paramValue) {
			echo "<br/>" . $paramName . " = " . $paramValue;
		}
	}
}
else {
	echo "<b>Checksum mismatched.</b>";
	//Process transaction as suspicious.
}

?>

PK 99