Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.84.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u176134211

Directory:

/home/u176134211/domains/cheapsubs.shop/public_html

Free Space:

8.3 TB

🔧 Quick Actions

✏️ Editing: payment-response.php

<?php
/**
 * CCAvenue Payment Response Handler
 */

require_once __DIR__ . '/includes/config.php';
require_once __DIR__ . '/includes/ccavenue.php';
require_once __DIR__ . '/includes/email.php';

$pageTitle = 'Payment Response';

// Check if response data is present
if (!isset($_POST['encResp'])) {
    setFlashMessage('error', 'Invalid payment response.');
    redirect('payment.php');
}

$encResponse = $_POST['encResp'];
$ccavenue = getCCAvenue();

// Decrypt response
$responseData = $ccavenue->processResponse($encResponse);

// Verify response
$verification = $ccavenue->verifyResponse($responseData);

if (!$verification['valid']) {
    setFlashMessage('error', 'Payment verification failed: ' . $verification['error']);
    redirect('payment-failure.php');
}

// Extract response data
$orderId = $responseData['order_id'] ?? '';
$trackingId = $responseData['tracking_id'] ?? '';
$bankRefNo = $responseData['bank_ref_no'] ?? '';
$orderStatus = $responseData['order_status'] ?? '';
$failureMessage = $responseData['failure_message'] ?? '';
$paymentMode = $responseData['payment_mode'] ?? '';
$cardName = $responseData['card_name'] ?? '';
$statusCode = $responseData['status_code'] ?? '';
$statusMessage = $responseData['status_message'] ?? '';
$amount = $responseData['amount'] ?? 0;
$currency = $responseData['currency'] ?? 'INR';

try {
    $db = getDB();
    
    // Get payment record
    $stmt = $db->prepare("SELECT p.*, s.id as student_id, s.application_id, s.email, s.first_name, s.last_name, s.course 
                          FROM payments p 
                          JOIN students s ON p.student_id = s.id 
                          WHERE p.order_id = ?");
    $stmt->execute([$orderId]);
    $payment = $stmt->fetch();
    
    if (!$payment) {
        setFlashMessage('error', 'Payment record not found.');
        redirect('payment-failure.php');
    }
    
    $studentId = $payment['student_id'];
    $applicationId = $payment['application_id'];
    
    // Update payment record
    $stmt = $db->prepare("UPDATE payments SET 
        transaction_id = ?, 
        tracking_id = ?, 
        bank_ref_no = ?, 
        status = ?, 
        status_message = ?, 
        payment_mode = ?, 
        card_name = ?, 
        response_code = ?, 
        response_message = ?, 
        error_message = ?, 
        paid_at = NOW() 
        WHERE order_id = ?");
    
    $status = strtolower($orderStatus);
    $stmt->execute([
        $trackingId,
        $trackingId,
        $bankRefNo,
        $status,
        $statusMessage,
        $paymentMode,
        $cardName,
        $statusCode,
        $statusMessage,
        $failureMessage,
        $orderId
    ]);
    
    // Update student payment status
    if ($orderStatus === 'Success') {
        $stmt = $db->prepare("UPDATE students SET payment_status = 'completed' WHERE id = ?");
        $stmt->execute([$studentId]);
        
        // Log activity
        logActivity(null, 'student', 'Payment Success', "Order: $orderId, Amount: $amount");
        
        // Send payment success email
        $studentData = [
            'first_name' => $payment['first_name'],
            'last_name' => $payment['last_name'],
            'email' => $payment['email'],
            'application_id' => $applicationId,
            'course' => $payment['course']
        ];
        
        $paymentData = [
            'order_id' => $orderId,
            'amount' => $amount,
            'transaction_id' => $trackingId
        ];
        
        sendPaymentSuccessEmail($studentData, $paymentData);
        
        // Store in session for success page
        $_SESSION['payment_success'] = [
            'order_id' => $orderId,
            'tracking_id' => $trackingId,
            'amount' => $amount,
            'application_id' => $applicationId
        ];
        
        redirect('payment-success.php');
        
    } else {
        // Payment failed or aborted
        $stmt = $db->prepare("UPDATE students SET payment_status = 'failed' WHERE id = ?");
        $stmt->execute([$studentId]);
        
        // Increment retry count
        $stmt = $db->prepare("UPDATE payments SET retry_count = retry_count + 1 WHERE order_id = ?");
        $stmt->execute([$orderId]);
        
        // Log activity
        logActivity(null, 'student', 'Payment Failed', "Order: $orderId, Status: $orderStatus, Reason: $failureMessage");
        
        // Send payment failure email
        $studentData = [
            'first_name' => $payment['first_name'],
            'last_name' => $payment['last_name'],
            'email' => $payment['email'],
            'application_id' => $applicationId
        ];
        
        $paymentData = [
            'status_message' => $failureMessage ?: $statusMessage
        ];
        
        sendPaymentFailureEmail($studentData, $paymentData);
        
        // Store in session for failure page
        $_SESSION['payment_failure'] = [
            'order_id' => $orderId,
            'status' => $orderStatus,
            'reason' => $failureMessage ?: $statusMessage,
            'application_id' => $applicationId
        ];
        
        redirect('payment-failure.php');
    }
    
} catch (Exception $e) {
    error_log("Payment Response Error: " . $e->getMessage());
    setFlashMessage('error', 'An error occurred while processing payment response.');
    redirect('payment-failure.php');
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: payment-response.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation