One Hat Cyber Team

Edit File: store.php

<?php

if ($action == 'get_paypal_link' && IS_LOGGED && !empty($config['paypal_id']) && !empty($config['paypal_secret'])) {
    $type = 'store';
    $sum = 0;
    $id = 0;
    $title = '';
    if (!empty($_POST['id']) && is_numeric($_POST['id']) && $_POST['id'] > 0) {
        $id = Generic::secure($_POST['id']);
    }
    if (!empty($_POST['item_license']) && !empty($_POST['item_license'])) {
        $item_license = Generic::secure($_POST['item_license']);
    }
    if (!empty($_POST['title'])) {
        $title = ' [ '.Generic::secure($_POST['title']). ' ]';
    }
    $dec = "Buy image" . $title;
    if (!empty($_POST['amount']) && is_numeric($_POST['amount']) && $_POST['amount'] > 0) {
        $sum = Generic::secure($_POST['amount']);
    }
    if( $sum > 0 ){
    $payer = new Payer();
    $payer->setPaymentMethod('paypal');
    $item = new Item();
    $item->setName($dec)->setQuantity(1)->setPrice($sum)->setCurrency($config['currency']);
    $itemList = new ItemList();
    $itemList->setItems(array(
        $item
    ));
    $details = new Details();
    $details->setSubtotal($sum);
    $amount = new Amount();
    $amount->setCurrency($config['currency'])->setTotal($sum)->setDetails($details);
    $transaction = new Transaction();
    $transaction->setAmount($amount)->setItemList($itemList)->setDescription($dec)->setInvoiceNumber(time());
    $redirectUrls = new RedirectUrls();
    $redirectUrls->setReturnUrl($config['site_url'] . "/aj/store/get_paid&success=1&item_license=".$item_license."&amount=".$sum."&id=".$id)->setCancelUrl($config['site_url']);
    $payment = new Payment();
    $payment->setIntent('sale')->setPayer($payer)->setRedirectUrls($redirectUrls)->setTransactions(array(
        $transaction
    ));
    try {
        $payment->create($paypal);
    }
    catch (Exception $e) {
        $data = array(
            'status' => 400,
            'message' => json_decode($e->getData())
        );
        if (empty($data['message'])) {
            $data['message'] = json_decode($e->getCode());
        }
    }
    if (empty($data['message'])) {
        $data = array(
            'status' => 200,
            'url' => $payment->getApprovalLink()
        );
    }

}else{
        $data = array(
            'status' => 400,
            'message' => ''
        );
    }

}
else if ($action == 'get_paid' && IS_LOGGED && !empty($config['paypal_id']) && !empty($config['paypal_secret']) && $_GET['success'] == 1 && !empty($_GET['paymentId']) && !empty($_GET['PayerID'])) {
    $paymentId = $_GET['paymentId'];
    $PayerID = $_GET['PayerID'];

$amount = Generic::secure($_GET['amount']);
    $id = Generic::secure($_GET['id']);
    $item_license = Generic::secure($_GET['item_license']);

$payment = Payment::get($paymentId, $paypal);
    $execute = new PaymentExecution();
    $execute->setPayerId($PayerID);
    $error = '';
    try {
        $result = $payment->execute($execute, $paypal);
    }
    catch (Exception $e) {
        $error = json_decode($e->getData(), true);
    }

if (empty($error)) {
        $store_image = $db->arrayBuilder()->where('id',$id)->getOne(T_STORE);
        $u = $db->arrayBuilder()->where('user_id',$store_image['user_id'])->getOne(T_USERS);
        $commesion = $amount / 2;
        $wallet = $u['balance'] + $commesion;
        $update = $user->updateStatic($store_image['user_id'],array('balance' => $wallet));
        $db->insert(T_TRANSACTIONS,array(
            'user_id'       => $me['user_id'],
            'amount'        => $amount,
            'type'          => 'store',
            'item_store_id' => $id,
            'admin_com'     => $commesion,
            'time'          => time(),
            'item_license'  => $item_license
            )
        );

$db->where('id',$id)->update(T_STORE, array( 'sells' => $db->inc(1)));

$notif   = new Notifications();

$re_data = array(
            'notifier_id' => $me['user_id'],
            'recipient_id' => $store_image['user_id'],
            'type' => 'store_purchase',
            'url' => $config['site_url'] . "/store/".$id,
            'time' => time()
        );
        try {
            $notif->notify($re_data);
        } catch (Exception $e) {
        }

header("Location: " . $config['site_url'] . "/store/".$id);
        exit();
    }
    else{
        header("Location: " . $config['site_url'] . "/oops");
        exit();
    }
}
elseif($action == 'delete-store-item' && IS_LOGGED && ($config['image_sell_system'] == 'on')){
    if ((!empty($_GET['post_id']) && is_numeric($_GET['post_id']))) {
        $post_id = Generic::secure($_GET['post_id']);

$store_image = $db->where('id',$post_id)->get(T_STORE,1);
        if(isset($store_image[0]) && !empty($store_image[0])){

$del = new Media();
            $del->deleteFromFTPorS3($store_image[0]->full_file);
            $del->deleteFromFTPorS3($store_image[0]->small_file);

if (file_exists($store_image[0]->full_file)) {
                try {
                    @unlink($store_image[0]->full_file);	
                }
                catch (Exception $e) {
                }
            }
            if (file_exists($store_image[0]->small_file)) {
                try {
                    @unlink($store_image[0]->small_file);	
                }
                catch (Exception $e) {
                }
            }

$db->where('id',$post_id)->delete(T_STORE);
            $data['status'] = 200;

}else{
            $data['status'] = 400;
        }

}else{
        $data['status'] = 400;
    }
}
elseif($action == 'edit-store-item' && IS_LOGGED && ($config['image_sell_system'] == 'on')){
    if ((!empty($_GET['post_id']) && is_numeric($_GET['post_id']))) {
        $post_id = $_GET['post_id'];
        $db->where('id',$post_id)->delete(T_STORE);
        $data['status'] = 200;
    }else{
        $data['status'] = 400;
    }
}
elseif($action == 'explore-user-store' && IS_LOGGED && ($config['image_sell_system'] == 'on')) {
    if (!empty($_GET['offset']) && is_numeric($_GET['offset'])) {
        $last_id      = Generic::secure($_GET['offset']);
        $context['images']  = array();
        $store_images = $db->arrayBuilder()->where('user_id',$context['user']['user_id'])->where('id', $last_id , '<')->orderBy('id','DESC')->get(T_STORE,20);
        foreach ($store_images as $key => $image_data) {
            $image_data['post_id'] = $image_data['id'];
            $image_data['type'] = 'image';
            $image_data['thumb'] = $image_data['small_file'];
            $image_data['boosted'] = 0;
            $image_data['avatar'] = $context['user']['avatar'];
            $image_data['username'] = $context['user']['username'];
            $image_data['category_name'] = $context['lang'][$image_data['category']];
            $image_data['text_time'] = time2str($image_data['created_at']);
            $context['images'][]    = $image_data;
        }
        $data['status'] = 404;
        $data['html']   = "";
        $context['app_name'] = 'store';
        if (!empty($store_images)) {
            foreach ($context['images'] as $key => $post_data) {
                $data['html']    .= $pixelphoto->PX_LoadPage('store/templates/store/includes/list-item');
            }
            $data['status'] = 200;
        }
    }
}
else if($action == 'explore-all-store' && IS_LOGGED && ($config['image_sell_system'] == 'on')) {
    if (isset( $_GET['offset'])) {
        $last_id      = ( isset( $_GET['offset'] ) ) ? (int)Generic::secure($_GET['offset']) : 0;
        $sort         = ( isset( $_GET['sort'] ) ) ? Generic::secure($_GET['sort']) : 'id';

if( isset( $_GET['mode']) && !empty( $_GET['mode']) ){
            // if( $_GET['mode'] == 'search' ){
            //     $sql   = "";
            //     if( isset( $_GET['search_title']) && !empty( $_GET['search_title']) ){
            //         $search_title = Generic::secure($_GET['search_title']);
            //         $sql   = "(title LIKE '%$filter_keyword%' ";
            //         if (empty( $_GET['search_tags'])) {
            //             $sql .= ')';
            //         }

//         // $db->where('title',"%".Generic::secure($_GET['search_title'])."%",'LIKE');
            //     }
            //     if( isset( $_GET['search_tags']) && !empty( $_GET['search_tags']) ){
            //         $search_tags = Generic::secure($_GET['search_tags']);
            //         if (!empty($sql)) {
            //             $sql .= " OR tags LIKE '%$search_tags%' )";
            //         }
            //         else{
            //             $sql   = "(tags LIKE '%$search_tags%') ";
            //         }
            //         // $db->where('tags',"%".Generic::secure($_GET['search_tags'])."%",'LIKE');
            //     }
            //     if( isset( $_GET['search_category']) && !empty( $_GET['search_category']) ){
            //         $db->where('category',Generic::secure($_GET['search_category']));
            //     }
            //     if( isset( $_GET['search_license']) && !empty( $_GET['search_license']) ){
            //         $db->where('license',Generic::secure($_GET['search_license']));
            //     }
            //     // if( isset( $_GET['search_min']) && !empty( $_GET['search_min']) ){
            //     //     $db->where('price',(int)Generic::secure($_GET['search_min']) , ">=");
            //     // }
            //     // if( isset( $_GET['search_max']) && !empty( $_GET['search_max']) ){
            //     //     $db->where('price',(int)Generic::secure($_GET['search_max']) , "<=");
            //     // }

// }
        }
        if($sort == 'id' && $last_id > 0){
            $db->where('id', $last_id , '<');
        }
        if($sort == 'popularity_desc'){
            if (isset( $_GET['last_views'] ) ) {
                if( !isset( $_GET['scroll'] ) ) {
                    $db->orderBy('id', 'DESC');
                }else{
                    $ids = array_unique($_GET['viewed_store_ids'], SORT_REGULAR);
                    $db->orderBy('views', 'DESC')->orderBy('id', 'DESC')->where('id', $ids , 'NOT IN')->having('views', Generic::secure($_GET['last_views']) , '<=');
                }
            }
        }elseif($sort == 'popularity_asc'){
            if (isset( $_GET['last_views'] ) ) {
                if( !isset( $_GET['scroll'] ) ) {
                    $db->orderBy('id', 'ASC');
                }else{
                    $ids = array_unique($_GET['viewed_store_ids'], SORT_REGULAR);
                    $db->orderBy('views', 'ASC')->orderBy('id', 'ASC')->where('id', $ids , 'NOT IN')->having('views', Generic::secure($_GET['last_views']) , '>=');
                }
            }
        }elseif($sort == 'downloads_desc'){
            if (isset( $_GET['last_download'] ) ) {
                if( !isset( $_GET['scroll'] ) ) {
                    $db->orderBy('id', 'DESC');
                }else{
                    $ids = array_unique($_GET['viewed_store_ids'], SORT_REGULAR);
                    $db->orderBy('downloads', 'DESC')->orderBy('id', 'DESC')->where('id', $ids , 'NOT IN')->having('downloads', Generic::secure($_GET['last_download']) , '<=');
                }
            }
        }elseif($sort == 'downloads_asc'){
            if (isset( $_GET['last_download'] ) ) {
                if( !isset( $_GET['scroll'] ) ) {
                    $db->orderBy('id', 'ASC');
                }else{
                    $ids = array_unique($_GET['viewed_store_ids'], SORT_REGULAR);
                    $db->orderBy('downloads', 'ASC')->orderBy('id', 'ASC')->where('id', $ids , 'NOT IN')->having('downloads', Generic::secure($_GET['last_download']) , '>=');
                }
            }
        }elseif($sort == 'sales_desc'){
            if (isset( $_GET['last_sells'] ) ) {
                if( !isset( $_GET['scroll'] ) ) {
                    $db->orderBy('id', 'DESC');
                }else{
                    $ids = array_unique($_GET['viewed_store_ids'], SORT_REGULAR);
                    $db->orderBy('sells', 'DESC')->orderBy('id', 'DESC')->where('id', $ids , 'NOT IN')->having('sells', Generic::secure($_GET['last_sells']) , '<=');
                }
            }
        }elseif($sort == 'sales_asc'){
            if (isset( $_GET['last_sells'] ) ) {
                if( !isset( $_GET['scroll'] ) ) {
                    $db->orderBy('id', 'ASC');
                }else{
                    $ids = array_unique($_GET['viewed_store_ids'], SORT_REGULAR);
                    $db->orderBy('sells', 'ASC')->orderBy('id', 'ASC')->where('id', $ids , 'NOT IN')->having('sells', Generic::secure($_GET['last_sells']) , '>=');
                }
            }
        }elseif($sort == 'date_desc'){
            if (isset( $_GET['last_date'] ) ) {
                if( !isset( $_GET['scroll'] ) ) {
                    $db->orderBy('id', 'DESC');
                }else{
                    $ids = array_unique($_GET['viewed_store_ids'], SORT_REGULAR);
                    $db->orderBy('created_date', 'DESC')->orderBy('id', 'DESC')->where('id', $ids , 'NOT IN')->having('created_date', Generic::secure($_GET['last_date']) , '<=');
                }
            }
        }elseif($sort == 'date_asc'){
            if (isset( $_GET['last_date'] ) ) {
                if( !isset( $_GET['scroll'] ) ) {
                    $db->orderBy('id', 'ASC');
                }else{
                    $ids = array_unique($_GET['viewed_store_ids'], SORT_REGULAR);
                    $db->orderBy('created_date', 'ASC')->orderBy('id', 'ASC')->where('id', $ids , 'NOT IN')->having('created_date', Generic::secure($_GET['last_date']) , '>=');
                }
            }
        }
        else{
            $db->orderBy('id','DESC');
        }
        // print_r($sort);

$context['images']  = array();
        $store_images = $db->get(T_STORE,6);
        if (!empty($store_images)) {
            foreach ($store_images as $key => $image_data) {
                $image_data = o2array($image_data);
                $price = getStoreItemPrice($image_data['license_options'], false);
                if(is_array($price) && count($price) === 2){
                    $min_price = (float)$price[0];
                    $max_price = (float)$price[1];
                }else{
                    $min_price = (float)$price;
                    $max_price = (float)$price;
                }

$exclude = false;
                if( 
                    ( isset( $_GET['search_min']) && !empty( $_GET['search_min']) ) &&
                    ( isset( $_GET['search_max']) && !empty( $_GET['search_max']) )
                ){
                    // var_dump($min_price);
                    // var_dump($max_price);

// var_dump((float)$_GET['search_min']);
                    // var_dump((float)$_GET['search_max']);

// float(34)
                    // float(100)
                    // float(80)
                    // float(150)
                    if( 
                        ( $min_price >= (float)$_GET['search_min'] && $max_price <= (float)$_GET['search_max'] ) || 
                        ( $max_price >= (float)$_GET['search_min'] && $max_price <= (float)$_GET['search_max'] )
                        
                    ){

}else{
                        $exclude = true;
                    }
                }

if($exclude === true){
                    continue;
                }
                // if( isset( $_GET['search_min']) && !empty( $_GET['search_min']) ){
                //     //$db->where('price',(int)Generic::secure($_GET['search_min']) , ">=");
                //     if(){
                        
                //     }
                // }
                // if( isset( $_GET['search_max']) && !empty( $_GET['search_max']) ){
                //     //$db->where('price',(int)Generic::secure($_GET['search_max']) , "<=");

// }

$image_data['post_id'] = $image_data['id'];
                $image_data['type'] = 'image';
                $image_data['thumb'] = $image_data['small_file'];
                $image_data['boosted'] = 0;

$_user_data = $user->getUserDataById($image_data['user_id']);
                $_user_data = o2array($_user_data);

$image_data['avatar'] = $_user_data['avatar'];
                $image_data['username'] = $_user_data['username'];
                $image_data['category_name'] = $context['lang'][$image_data['category']];
                $image_data['text_time'] = time2str($image_data['created_date']);
                $context['images'][]    = $image_data;
            }
        }
            
        $data['status'] = 404;
        $data['html']   = "";
        $context['app_name'] = 'store';
        if (!empty($store_images)) {
            foreach ($context['images'] as $key => $post_data) {
                $context['owner'] = false;
                if (IS_LOGGED && ($me['user_id'] == $post_data['user_id'])) {
                    $context['owner'] = true;
                }
                $data['html']    .= $pixelphoto->PX_LoadPage('store/templates/store/includes/list-item');
            }
            $data['status'] = 200;
            $data['last_id'] = end($context['images'])['id'];
            $data['data'] = $context['images'];
        }else{
            if( isset( $_GET['mode']) && !empty( $_GET['mode']) ) {
                if ($_GET['mode'] == 'search') {
                    $data['status'] = 300;
                    $data['html'] = $pixelphoto->PX_LoadPage('blog/templates/blog/includes/no-articles-found');
                }
            }
        }
    }
}
else if($action == 'lightbox') {
    if ((!empty($_GET['post_id']) && is_numeric($_GET['post_id']))) {

$post_id = $_GET['post_id'];
        $page    = (!empty($_GET['page'])) ? $_GET['page'] : false;

$context['images']  = array();
        $store_images = $db->arrayBuilder()->where('id',$post_id)->getOne(T_STORE);
        $store_images['category_name'] = $context['lang'][$store_images['category']];
        $store_images['text_time'] = time2str($store_images['created_date']);

$_user_data = $user->getUserDataById($store_images['user_id']);
        $_user_data = o2array($_user_data);

$store_images['avatar'] = $_user_data['avatar'];
        $store_images['username'] = $_user_data['username'];
        $store_images['is_verified'] = $_user_data['verified'];

list($_width, $_height, $_type) = getimagesize($store_images['full_file']);
        $store_images['dimensions'] = $_width . 'px X ' . $_height . 'px';

$types_array = array(
            '1' => 'GIF',
            '2' => 'JPG',
            '3' => 'PNG',
            '4' => 'SWF',
            '5' => 'PSD',
            '6' => 'BMP',
            '7' => 'TIFF',
            '8' => 'TIFF',
            '9' => 'JPC',
            '10' => 'JP2',
            '11' => 'JPX',
            '12' => 'JB2',
            '13' => 'SWC',
            '14' => 'IFF',
            '15' => 'WBMP',
            '16' => 'XBM'
        );
        $store_images['ext'] = $types_array[$_type];

$data['status'] = 404;
        $data['html']   = "";
        if (!empty($store_images) && !empty($page)) {
            $context['post_data'] = $store_images;
            $data['html'] = $pixelphoto->PX_LoadPage('store/templates/store/includes/lightbox');
            $data['status'] = 200;
        }
    }
}
elseif($action == 'bank_transfer' && IS_LOGGED){
    if (!empty($_FILES['image'])) {
        if (!empty($_FILES['image']) && file_exists($_FILES['image']['tmp_name'])) {
            $media = new Media();
            $media->setFile(array(
                'file' => $_FILES['image']['tmp_name'],
                'name' => $_FILES['image']['name'],
                'size' => $_FILES['image']['size'],
                'type' => $_FILES['image']['type'],
                'allowed' => 'jpeg,jpg,png'
            ));

$upload = $media->uploadFile();

$amount = Generic::secure($_POST['amount']);
            $id = Generic::secure($_POST['id']);
            $title = Generic::secure($_POST['title']);
            $item_license = Generic::secure($_POST['license']);

$description = 'Buy ' . $title . ' : ' . $item_license;
            $price = (int)$amount;
            $mode  = 'store';
            $funding_id  = $id;

if (!empty($upload)) { 
                $image = $upload['filename'];
                $db->insert(T_BANK_TRANSFER,array('user_id' => $me['user_id'],
                                          'receipt_file' => $image,
                                          'description' => $description,
                                          'price' => $price,
                                          'mode' => $mode,
                                          'funding_id' => $funding_id));
                $data['status']  = 200;
                $data['message'] = lang('bank_transfer_request');
            }
        }
    }
    else{
        $data = array(
            'status' => 400,
            'message' => lang('please_fill_fields')
        );
    }
}
elseif($action == 'stripe_payment' && IS_LOGGED && $config['credit_card'] == 'on' && !empty($config['stripe_id']) && !empty($config['stripe_id']) ){
    try {
        $customer = \Stripe\Customer::create(array(
            'source' => $token
        ));
        $charge   = \Stripe\Charge::create(array(
            'customer' => $customer->id,
            'amount' => (int)$_POST['amount'].'00',
            'currency' => 'usd'
        ));
        if ($charge) {

$amount = Generic::secure($_POST['amount']);
            $id = Generic::secure($_POST['id']);
            $license = Generic::secure($_POST['license']);

$store_image = $db->arrayBuilder()->where('id',$id)->getOne(T_STORE);
            $u = $db->arrayBuilder()->where('user_id',$store_image['user_id'])->getOne(T_USERS);
            $commesion = $amount / 2;
            $wallet = $u['balance'] + $commesion;
            $update = $user->updateStatic($store_image['user_id'],array('balance' => $wallet));
            $db->insert(T_TRANSACTIONS,array(
                'user_id'       => $me['user_id'],
                'amount'        => $amount,
                'type'          => 'store',
                'item_store_id' => $id,
                'admin_com'     => $commesion,
                'time'          => time(),
                'item_license'  => $license
                )
            );
            $db->where('id',$id)->update(T_STORE, array( 'sells' => $db->inc(1)));
            $notif   = new Notifications();
            $re_data = array(
                'notifier_id' => $me['user_id'],
                'recipient_id' => $store_image['user_id'],
                'type' => 'store_purchase',
                'url' => $config['site_url'] . "/store/".$id,
                'time' => time()
            );
            try {
                $notif->notify($re_data);
            } catch (Exception $e) {
            }
    
            $data = array(
                'status' => 200,
                'url' => $config['site_url'] . "/store/".$id
            );            
        }
    }
    catch (Exception $e) {
        $data = array(
            'status' => 400,
            'error' => $e->getMessage()
        );
    }
}
elseif($action == 'paysera_success' || $action == 'paysera_callback'){
    $response = WebToPay::checkResponse($_GET, array(
        'projectid'     => $config['paysera_project_id'],
        'sign_password' => $config['paysera_password'],
    ));

if ($response['type'] !== 'macro') {
        die('Only macro payment callbacks are accepted');
    }

$amount = intval( $response['amount'] ) / 100;
    $id = Generic::secure($_GET['id']);
    $license = Generic::secure($_GET['license']);

header('Location: ' . $config['site_url'] . "/store/".$id);
    exit();
}
elseif($action == 'paysera_cancel'){
    header('Location: ' . $config['site_url']);
    exit();
}
elseif($action == 'get_sms_link'){
    $amount = 0;
    if(isset($_POST['amount']) && !empty($_POST['amount'])){
        $amount = intval( Secure($_POST['amount']) );
    }
    $id = Generic::secure($_POST['id']);
    $title = Generic::secure($_POST['title']);
    $item_license = Generic::secure($_POST['license']);
    $url = '';
    try {
        $self_url = $config['site_url'];
        $payment_url = WebToPay::getPaymentUrl();

$request = WebToPay::buildRequest(array(
            'projectid'     => $config['paysera_project_id'],
            'sign_password' => $config['paysera_password'],
            'orderid'       => rand(1111,4444),
            'amount'        => $amount,
            'currency'      => $config['currency'],
            'country'       => 'TR',
            'accepturl'     => $self_url.'/aj/store/paysera_success?id='.$id.'&title='.$title.'&license='.$item_license,
            'cancelurl'     => $self_url.'/aj/store/paysera_cancel',
            'callbackurl'   => $self_url.'/aj/store/paysera_callback?id='.$id.'&title='.$title.'&license='.$item_license,
            'test'          => ($config['paysera_test_mode'] == 'test') ? 1 : 0,
        ));

$url = $payment_url . '?data='. $request['data'] . '&sign=' . $request['sign'];
        $data = array(
            'status' => 200,
            'url' => $url
        ); 
    }
    catch (WebToPayException $e) {
        echo $e->getMessage();
    }
}
elseif ($action == 'cashfree' && $config['cashfree_payment'] == 'yes') {
	if (!empty($_POST['name']) && !empty($_POST['phone']) && !empty($_POST['email']) && filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)) {
		
		$result = array();
	    $order_id = uniqid();
	    $name = Generic::secure($_POST['name']);
	    $email = Generic::secure($_POST['email']);
	    $phone = Generic::secure($_POST['phone']);
        
        $price = Generic::secure(intval($_POST['amount']));
        $id = Generic::secure(intval($_POST['store_item_id']));
        $item_license = Generic::secure($_POST['cashfree_item_license']);

$callback_url = $config['site_url'] . "/aj/store/cashfree_paid?amount=".$price.'&id='.$id.'&item_license='.$item_license.'&uid='.$me['user_id'];

$secretKey = $config['cashfree_secret_key'];
		$postData = array( 
		  "appId" => $config['cashfree_client_key'], 
		  "orderId" => "order".$order_id, 
		  "orderAmount" => $price, 
		  "orderCurrency" => "INR", 
		  "orderNote" => "", 
		  "customerName" => $name, 
		  "customerPhone" => $phone, 
		  "customerEmail" => $email,
		  "returnUrl" => $callback_url, 
		  "notifyUrl" => $callback_url,
		);
		 // get secret key from your config
		 ksort($postData);
		 $signatureData = "";
		 foreach ($postData as $key => $value){
		      $signatureData .= $key.$value;
		 }
		 $signature = hash_hmac('sha256', $signatureData, $secretKey,true);
		 $signature = base64_encode($signature);
		 $cashfree_link = 'https://test.cashfree.com/billpay/checkout/post/submit';
		 if ($config['cashfree_mode'] == 'live') {
		 	$cashfree_link = 'https://www.cashfree.com/checkout/post/submit';
		 }

$form = '<form id="redirectForm" method="post" action="'.$cashfree_link.'"><input type="hidden" name="appId" value="'.$config['cashfree_client_key'].'"/><input type="hidden" name="orderId" value="order'.$order_id.'"/><input type="hidden" name="orderAmount" value="'.$price.'"/><input type="hidden" name="orderCurrency" value="INR"/><input type="hidden" name="orderNote" value=""/><input type="hidden" name="customerName" value="'.$name.'"/><input type="hidden" name="customerEmail" value="'.$email.'"/><input type="hidden" name="customerPhone" value="'.$phone.'"/><input type="hidden" name="returnUrl" value="'.$callback_url.'"/><input type="hidden" name="notifyUrl" value="'.$callback_url.'"/><input type="hidden" name="signature" value="'.$signature.'"/></form>';
		$data['status'] = 200;
		$data['html'] = $form;
	}
	else{
		$data['message'] = lang('unknown_error');
	}
}
elseif ($action == 'cashfree_paid' && $config['cashfree_payment'] == 'yes') {
	if (empty($_POST['txStatus']) || $_POST['txStatus'] != 'SUCCESS') {
		header('Location: ' . $config['site_url'] . '/go_pro');
        exit();
	}
    $orderId = $_POST["orderId"];

$price = Generic::secure(intval($_GET['amount']));
    $id = Generic::secure(intval($_GET['id']));
    $item_license = Generic::secure($_GET['item_license']);
    $uid = Generic::secure($_GET['uid']);

$user__id = ($me['user_id']) ? $me['user_id'] : $uid;

$orderAmount = $_POST["orderAmount"];
	$referenceId = $_POST["referenceId"];
	$txStatus = $_POST["txStatus"];
	$paymentMode = $_POST["paymentMode"];
	$txMsg = $_POST["txMsg"];
	$txTime = $_POST["txTime"];
	$signature = $_POST["signature"];
	$data = $orderId.$orderAmount.$referenceId.$txStatus.$paymentMode.$txMsg.$txTime;
	$hash_hmac = hash_hmac('sha256', $data, $config['cashfree_secret_key'], true) ;
    $computedSignature = base64_encode($hash_hmac);
    
	if ($signature == $computedSignature) {

$db->where('id',$id)->update(T_STORE, array( 'sells' => $db->inc(1)));

$notif   = new Notifications();

$re_data = array(
            'notifier_id' => $user__id,
            'recipient_id' => $store_image['user_id'],
            'type' => 'store_purchase',
            'url' => $config['site_url'] . "/store/".$id,
            'time' => time()
        );
        try {
            $notif->notify($re_data);
        } catch (Exception $e) {
        }

header('Location: ' . $config['site_url'] . "/store/".$id);
        exit();

} else {
        header('Location: ' . $config['site_url'] . "/store/".$id);
        exit();
    }
}

elseif ($action == 'iyzipay' && ($config['iyzipay_payment'] == "yes" && !empty($config['iyzipay_key']) && !empty($config['iyzipay_secret_key']))) {
    require_once("sys/libs/iyzipay/samples/config.php");

$amount = Generic::secure(intval($_POST['amount']));
    $id = Generic::secure(intval($_POST['store_item_id']));
    $item_license = Generic::secure($_POST['item_license']);

$callback_url = $config['site_url'] . "aj/store/iyzipay_paid?amount=".$amount.'&id='.$id.'&item_license='.$item_license.'&uid='.$me['user_id'];

$request->setPrice($amount);
	$request->setPaidPrice($amount);
	$request->setCallbackUrl($callback_url);

$basketItems = array();
	$firstBasketItem = new \Iyzipay\Model\BasketItem();
	$firstBasketItem->setId("BI".rand(11111111,99999999));
	$firstBasketItem->setName("store");
	$firstBasketItem->setCategory1("store");
	$firstBasketItem->setItemType(\Iyzipay\Model\BasketItemType::PHYSICAL);
	$firstBasketItem->setPrice($amount);
	$basketItems[0] = $firstBasketItem;
	$request->setBasketItems($basketItems);
	$checkoutFormInitialize = \Iyzipay\Model\CheckoutFormInitialize::create($request, Config::options());
    $content = $checkoutFormInitialize->getCheckoutFormContent();
	if (!empty($content)) {
		$db->where('user_id',$me['user_id'])->update(T_USERS,array('conversation_id' => $ConversationId));
		$data['html'] = $content;
		$data['status'] = 200;
	}
	else{
		$data['message'] = lang('unknown_error');
	}
}

elseif ($action == 'iyzipay_paid' && $config['iyzipay_payment'] == "yes"){
    $price = Generic::secure(intval($_GET['amount']));
    $id = Generic::secure(intval($_GET['id']));
    $item_license = Generic::secure($_GET['item_license']);
    $uid = Generic::secure($_GET['uid']);

if (!empty($_POST['token']) && !empty($me['conversation_id'])) {
		require_once('assets/import/iyzipay/samples/config.php');

$user__id = ($me['user_id']) ? $me['user_id'] : $uid;

# create request class
		$request = new \Iyzipay\Request\RetrieveCheckoutFormRequest();
		$request->setLocale(\Iyzipay\Model\Locale::TR);
		$request->setConversationId($me['conversation_id']);
		$request->setToken($_POST['token']);

# make request
		$checkoutForm = \Iyzipay\Model\CheckoutForm::retrieve($request, Config::options());

# print result
		if ($checkoutForm->getPaymentStatus() == 'SUCCESS') {
            
            $store_image = $db->arrayBuilder()->where('id',$id)->getOne(T_STORE);
            $u = $db->arrayBuilder()->where('user_id',$store_image['user_id'])->getOne(T_USERS);
            $commesion = $amount / 2;
            $wallet = $u['balance'] + $commesion;
            $update = $user->updateStatic($store_image['user_id'],array('balance' => $wallet));
            $db->insert(T_TRANSACTIONS,array(
                'user_id'       => $user__id,
                'amount'        => $price,
                'type'          => 'store',
                'item_store_id' => $id,
                'admin_com'     => $commesion,
                'time'          => time(),
                'item_license'  => $item_license
                )
            );
    
            $db->where('id',$id)->update(T_STORE, array( 'sells' => $db->inc(1)));
    
            $notif   = new Notifications();
    
    
            $re_data = array(
                'notifier_id' => $user__id,
                'recipient_id' => $store_image['user_id'],
                'type' => 'store_purchase',
                'url' => $config['site_url'] . "/store/".$id,
                'time' => time()
            );
            try {
                $notif->notify($re_data);
            } catch (Exception $e) {
            }
    
            header('Location: ' . $config['site_url'] . "/store/".$id);
            exit();

}
		else{
			header('Location: ' . $config['site_url'] . "/store/".$id);
	        exit();
		}
	}
	else{
		header('Location: ' . $config['site_url'] . "/store/".$id);
	    exit();
	}
}