Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/hifi11.in/public_html

Free Space:

10.3 TB

🔧 Quick Actions

✏️ Editing: payu-success.php

<?php
session_start();

// PayU Configuration
define('PAYU_SALT', 'KTnb9wlqo1wQsluOUIPkeQ9JVGurJZIH');

// Database configuration
$conn = new mysqli("localhost", "u329947844_course", "Ari@2025", "u329947844_course");

if ($conn->connect_error) {
    die("Database connection failed: " . $conn->connect_error);
}

// Function to verify PayU response hash
function verifyPayUResponse($post, $salt) {
    $status = $post['status'];
    $udf5 = isset($post['udf5']) ? $post['udf5'] : '';
    $udf4 = isset($post['udf4']) ? $post['udf4'] : '';
    $udf3 = isset($post['udf3']) ? $post['udf3'] : '';
    $udf2 = isset($post['udf2']) ? $post['udf2'] : '';
    $udf1 = isset($post['udf1']) ? $post['udf1'] : '';
    $email = $post['email'];
    $firstname = $post['firstname'];
    $productinfo = $post['productinfo'];
    $amount = $post['amount'];
    $txnid = $post['txnid'];
    $key = $post['key'];
    
    // Construct reverse hash string as per PayU documentation
    $reverseHashString = $salt . '|' . $status . '||||||' . $udf5 . '|' . $udf4 . '|' . $udf3 . '|' . $udf2 . '|' . $udf1 . '|' . $email . '|' . $firstname . '|' . $productinfo . '|' . $amount . '|' . $txnid . '|' . $key;
    
    $computedHash = strtolower(hash('sha512', $reverseHashString));
    return $computedHash === $post['hash'];
}

// Check if POST data exists
if ($_POST) {
    $isValidHash = verifyPayUResponse($_POST, PAYU_SALT);
    
    if ($isValidHash) {
        $txnid = $_POST['txnid'];
        $status = $_POST['status'];
        $mihpayid = $_POST['mihpayid'];
        $amount = $_POST['amount'];
        $userId = $_POST['udf1'];
        $courseType = $_POST['udf2'];
        $email = $_POST['email'];
        $firstname = $_POST['firstname'];
        
        // Update payment status
        $updateQuery = "UPDATE payu_payments SET 
            status = '$status',
            mihpayid = '$mihpayid',
            bank_ref_num = '" . ($_POST['bank_ref_num'] ?? '') . "',
            payment_mode = '" . ($_POST['mode'] ?? '') . "',
            updated_at = NOW()
            WHERE txnid = '$txnid'";
        
        if ($conn->query($updateQuery)) {
            // Payment successful - update user course access
            if ($status === 'success') {
                $updateUserQuery = "UPDATE users SET 
                    course_type = '$courseType',
                    payment_status = 'paid',
                    updated_at = NOW()
                    WHERE id = $userId";
                
                $conn->query($updateUserQuery);
                
                // Set user session
                $_SESSION['user_id'] = $userId;
                $_SESSION['user_email'] = $email;
                $_SESSION['user_name'] = $firstname;
                $_SESSION['course_access'] = true;
                $_SESSION['course_type'] = $courseType;
                
                // Log successful payment
                error_log("Payment Successful - TxnID: $txnid, UserID: $userId, Amount: $amount");
                
            } else {
                // Payment failed but hash is valid
                header("Location: payu-failure.php?txnid=" . $txnid . "&error=" . urlencode($_POST['error_Message'] ?? 'Payment failed'));
                exit();
            }
        } else {
            error_log("Error updating payment: " . $conn->error);
        }
    } else {
        // Invalid hash - potential tampering
        error_log("Security Alert: Invalid hash for TxnID: " . ($_POST['txnid'] ?? 'unknown'));
        die("Security alert: Invalid response hash detected.");
    }
} else {
    // No POST data - check if user came from payment flow
    if (isset($_SESSION['payu_payment'])) {
        $paymentData = $_SESSION['payu_payment'];
        $txnid = $paymentData['txnid'];
        
        // Check payment status from database
        $checkQuery = "SELECT * FROM payu_payments WHERE txnid = '$txnid'";
        $result = $conn->query($checkQuery);
        
        if ($result->num_rows > 0) {
            $payment = $result->fetch_assoc();
            if ($payment['status'] === 'success') {
                // Payment already successful
                $userId = $payment['user_id'];
                $userQuery = "SELECT * FROM users WHERE id = $userId";
                $userResult = $conn->query($userQuery);
                
                if ($userResult->num_rows > 0) {
                    $user = $userResult->fetch_assoc();
                    $_SESSION['user_id'] = $userId;
                    $_SESSION['user_email'] = $user['email'];
                    $_SESSION['user_name'] = $user['full_name'];
                    $_SESSION['course_access'] = true;
                    $_SESSION['course_type'] = $payment['course_type'];
                }
            } else {
                // Payment not successful, redirect to failure
                header("Location: payu-failure.php?txnid=" . $txnid);
                exit();
            }
        }
    } else {
        // No session data - redirect to home
        header("Location: /");
        exit();
    }
}

// Clear payment session data
unset($_SESSION['payu_payment']);
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Payment Successful - Hifi11</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
    <link href="https://fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700;800;900&display=swap" rel="stylesheet">
    <style>
        body {
            font-family: 'Montserrat', sans-serif;
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            min-height: 100vh;
            display: flex;
            align-items: center;
            justify-content: center;
            padding: 20px;
        }
        
        .success-container {
            background: white;
            border-radius: 20px;
            padding: 50px 40px;
            box-shadow: 0 20px 40px rgba(0,0,0,0.1);
            text-align: center;
            max-width: 600px;
            width: 100%;
        }
        
        .success-icon {
            width: 80px;
            height: 80px;
            background: #28a745;
            border-radius: 50%;
            display: flex;
            align-items: center;
            justify-content: center;
            margin: 0 auto 30px;
            animation: bounce 1s ease-in-out;
        }
        
        .success-icon i {
            color: white;
            font-size: 2.5rem;
        }
        
        @keyframes bounce {
            0%, 20%, 50%, 80%, 100% {transform: translateY(0);}
            40% {transform: translateY(-10px);}
            60% {transform: translateY(-5px);}
        }
        
        h1 {
            color: #28a745;
            margin-bottom: 20px;
            font-weight: 700;
        }
        
        .payment-details {
            background: #f8f9fa;
            border-radius: 15px;
            padding: 25px;
            margin: 30px 0;
            text-align: left;
        }
        
        .detail-item {
            display: flex;
            justify-content: space-between;
            margin-bottom: 12px;
            padding-bottom: 12px;
            border-bottom: 1px solid #e9ecef;
        }
        
        .detail-item:last-child {
            margin-bottom: 0;
            padding-bottom: 0;
            border-bottom: none;
        }
        
        .detail-label {
            font-weight: 600;
            color: #555;
        }
        
        .detail-value {
            font-weight: 700;
            color: #333;
        }
        
        .next-steps {
            background: #e7f3ff;
            border: 1px solid #b3d9ff;
            border-radius: 15px;
            padding: 25px;
            margin: 25px 0;
        }
        
        .steps-list {
            list-style: none;
            padding: 0;
            margin: 0;
        }
        
        .steps-list li {
            padding: 10px 0;
            border-bottom: 1px solid #d1e7ff;
            display: flex;
            align-items: center;
        }
        
        .steps-list li:last-child {
            border-bottom: none;
        }
        
        .steps-list i {
            color: #007bff;
            margin-right: 15px;
            font-size: 1.2rem;
        }
        
        .btn-success {
            background: linear-gradient(135deg, #28a745, #20c997);
            border: none;
            padding: 12px 30px;
            font-weight: 600;
            border-radius: 10px;
            margin: 5px;
        }
        
        .btn-outline-primary {
            border: 2px solid #007bff;
            color: #007bff;
            padding: 12px 30px;
            font-weight: 600;
            border-radius: 10px;
            margin: 5px;
        }
        
        .confetti {
            position: fixed;
            width: 10px;
            height: 10px;
            background: #ff6b6b;
            border-radius: 50%;
            animation: confetti-fall 5s linear forwards;
            z-index: 1000;
        }
        
        @keyframes confetti-fall {
            0% {
                transform: translateY(-100px) rotate(0deg);
                opacity: 1;
            }
            100% {
                transform: translateY(100vh) rotate(360deg);
                opacity: 0;
            }
        }
        
        @media (max-width: 576px) {
            .success-container {
                padding: 30px 20px;
            }
            
            .btn-success, .btn-outline-primary {
                width: 100%;
                margin: 5px 0;
            }
        }
    </style>
</head>
<body>
    <div class="success-container">
        <div class="success-icon">
            <i class="fas fa-check"></i>
        </div>
        
        <h1>Payment Successful! 🎉</h1>
        <p class="lead">Thank you for your payment. Your enrollment in the AI Full Stack Mastery course is confirmed!</p>
        
        <div class="payment-details">
            <div class="detail-item">
                <span class="detail-label">Transaction ID:</span>
                <span class="detail-value"><?php echo $_POST['mihpayid'] ?? $payment['mihpayid'] ?? 'N/A'; ?></span>
            </div>
            <div class="detail-item">
                <span class="detail-label">Amount Paid:</span>
                <span class="detail-value">₹<?php echo number_format($amount ?? $payment['amount'] ?? 0, 2); ?></span>
            </div>
            <div class="detail-item">
                <span class="detail-label">Course:</span>
                <span class="detail-value"><?php echo htmlspecialchars($courseType ?? $payment['course_type'] ?? 'AI Full Stack Mastery'); ?></span>
            </div>
            <div class="detail-item">
                <span class="detail-label">Payment Mode:</span>
                <span class="detail-value"><?php echo $_POST['mode'] ?? $payment['payment_mode'] ?? 'N/A'; ?></span>
            </div>
            <div class="detail-item">
                <span class="detail-label">Date & Time:</span>
                <span class="detail-value"><?php echo date('M j, Y g:i A'); ?></span>
            </div>
        </div>
        
        <div class="next-steps">
            <h5 class="mb-3"><i class="fas fa-rocket me-2"></i>What's Next?</h5>
            <ul class="steps-list">
                <li>
                    <i class="fas fa-envelope"></i>
                    <span>Check your email for course access details and login credentials</span>
                </li>
                <li>
                    <i class="fas fa-video"></i>
                    <span>Access course materials immediately in your student dashboard</span>
                </li>
                <li>
                    <i class="fas fa-users"></i>
                    <span>Join our student community for support and networking</span>
                </li>
                <li>
                    <i class="fas fa-download"></i>
                    <span>Download resources and start your learning journey</span>
                </li>
            </ul>
        </div>
        
        <div class="action-buttons">
            <a href="/student-dashboard.php" class="btn btn-success">
                <i class="fas fa-tachometer-alt me-2"></i>Go to Dashboard
            </a>
            <a href="/recorded-course" class="btn btn-outline-primary">
                <i class="fas fa-home me-2"></i>Back to Course
            </a>
        </div>
        
        <div class="mt-4">
            <small class="text-muted">
                Need help? Contact us at <a href="mailto:support@hifi11.in">support@hifi11.in</a> or WhatsApp: +91-XXXXXXXXXX
            </small>
        </div>
    </div>
    
    
    <script>
        document.addEventListener('DOMContentLoaded', function() {
            // Create confetti
            for (let i = 0; i < 50; i++) {
                createConfetti();
            }
            
            function createConfetti() {
                const confetti = document.createElement('div');
                confetti.className = 'confetti';
                confetti.style.left = Math.random() * 100 + 'vw';
                confetti.style.background = getRandomColor();
                confetti.style.animationDuration = (Math.random() * 3 + 2) + 's';
                document.body.appendChild(confetti);
                
                // Remove confetti after animation
                setTimeout(() => {
                    confetti.remove();
                }, 5000);
            }
            
            function getRandomColor() {
                const colors = ['#ff6b6b', '#4ecdc4', '#45b7d1', '#96ceb4', '#feca57', '#ff9ff3', '#54a0ff'];
                return colors[Math.floor(Math.random() * colors.length)];
            }
        });
    </script>
    
</body>
</html>

<?php
// Close database connection
$conn->close();
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: payu-success.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation