Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.84.1.lve.el8.x86_64

PHP Version:

8.2.30

User:

u176134211

Directory:

/home/u176134211/domains/pay.teamhydrashop.com/public_html/auth

Free Space:

8.24 TB

🔧 Quick Actions

✏️ Editing: payment_link.php

<?php
/***************************************************************
 * Payment Link page (with TWO features):
 * 1) Create Payment Link via your API (existing) -> $paymentlink modal
 * 2) Quick Pay Link Generator (no API) -> shareable https link + QR
 *
 * NEW: Lightweight router for customer view:
 * Visiting this page as ?open=<base64(upi://pay?...))> shows a redirect page
 ***************************************************************/

// ---------- Customer view router (must run BEFORE header.php include) ----------
if (isset($_GET['open'])) {
  $raw = $_GET['open'];
  $upi = @base64_decode($raw);
  if (!$upi || stripos($upi, 'upi://pay?') !== 0) {
    http_response_code(400);
    echo "<!doctype html><html><head><meta charset='utf-8'><title>Invalid Link</title></head><body><h3>Invalid payment link.</h3></body></html>";
    exit;
  }
  ?>
  <!doctype html>
  <html lang="en">
  <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width,initial-scale=1">
    <title>Open UPI</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
    <script src="https://cdn.jsdelivr.net/npm/qrcode@1.5.3/build/qrcode.min.js"></script>
    <style>
      body{font-family:system-ui,-apple-system,Segoe UI,Roboto,Inter,Arial,sans-serif;background:#fff}
      .wrap{max-width:560px;margin:10vh auto;padding:24px}
      .card{border:1px solid rgba(0,0,0,.08);border-radius:16px;box-shadow:0 4px 22px rgba(0,0,0,.06)}
      .hint{color:#6b7280;font-size:.95rem}
    </style>
  </head>
  <body>
    <div class="wrap">
      <div class="card p-4 text-center">
        <h4 class="mb-2">Open in your UPI app</h4>
        <p class="hint mb-3">If your app doesn’t open automatically, tap the button below or scan the QR code.</p>
        <a href="<?php echo htmlspecialchars($upi, ENT_QUOTES, 'UTF-8'); ?>" class="btn btn-primary btn-lg mb-3">Open UPI</a>
        <div id="qr"></div>
        <div class="mt-3">
          <button id="copy" class="btn btn-outline-secondary btn-sm">Copy UPI Link</button>
        </div>
      </div>
    </div>
    <script>
      const UPI = <?php echo json_encode($upi); ?>;
      // Auto-redirect (mobile will pick up UPI intent)
      setTimeout(()=>{ window.location.href = UPI; }, 250);
      // Render QR
      const qrDiv = document.getElementById('qr');
      QRCode.toCanvas(UPI, {width: 220, margin: 1}, (err, canvas)=>{
        if(!err){ qrDiv.appendChild(canvas); }
      });
      // Copy
      document.getElementById('copy').onclick = () => {
        navigator.clipboard?.writeText(UPI);
      };
    </script>
  </body>
  </html>
  <?php
  exit;
}

// ---------- Normal page flow ----------
include "header.php";

// Helper for base URL used by Quick Pay links
$scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on') ? 'https' : 'http';
$baseUrl = $scheme . '://' . $_SERVER['SERVER_NAME'] . strtok($_SERVER["REQUEST_URI"],'?');

// Styles for copy UI you already had
?>
<style>
  .clipboard { position: relative; }
  .copy-input {
    max-width: 370px; width: 100%; cursor: pointer; background-color:#eaeaeb;
    border: none; color:#6c6c6c; font-size:14px; border-radius:5px; padding:15px 45px 15px 15px;
    font-family: 'Montserrat', sans-serif;
  }
  .copy-input:focus { outline: none; }
  .copy-btn {
    width: 40px; background-color:#eaeaeb; font-size:18px; padding:6px 9px; border-radius:5px;
    border:none; color:#6c6c6c; margin-left:-50px; transition: all .4s;
  }
  .copy-btn:hover { transform: scale(1.3); color:#1a1a1a; cursor: pointer; }
  .copy-btn:focus { outline: none; }
  .copied {
    font-family:'Montserrat',sans-serif; width: 100px; opacity:0; position:fixed; bottom:20px; left:0; right:0; margin:auto;
    color:#000; padding:15px; background:#fff; border-radius:5px; transition:.4s opacity;
  }
</style>

<?php
//   ini_set("display_errors",true);
//   error_reporting(E_ALL);

$paymentlink = '';

// ========================= Existing: Create Payment Link via API =========================
if (isset($_POST['create'])) {
  $name   =  $_POST['name'];
  $mobile =  $_POST['mobile'];
  $remark = $_POST['remark'] ?: 'Your Payment Link is Created';
  $amount =  $_POST['amount'];

$orderid = mt_rand(10000000000, 9999999999999);

$data = array(
    'customer_mobile' => $mobile,
    'user_token'      => $userdata["user_token"],
    'amount'          => $amount,
    'order_id'        => $orderid,
    'redirect_url'    => $scheme . '://' . $_SERVER["SERVER_NAME"] . '/success',
    'remark1'         => $remark,
  );

$curl = curl_init();
  curl_setopt_array($curl, array(
    CURLOPT_URL            => $scheme . '://' . $_SERVER["SERVER_NAME"] . '/api/create-order',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_ENCODING       => '',
    CURLOPT_MAXREDIRS      => 10,
    CURLOPT_TIMEOUT        => 0,
    CURLOPT_FOLLOWLOCATION => true,
    CURLOPT_HTTP_VERSION   => CURL_HTTP_VERSION_1_1,
    CURLOPT_CUSTOMREQUEST  => 'POST',
    CURLOPT_POSTFIELDS     => http_build_query($data),
    CURLOPT_HTTPHEADER     => array('User-Agent: Apidog/1.0.0 (https://apidog.com)'),
  ));
  $response = curl_exec($curl);
  curl_close($curl);

$jsondatares = json_decode($response, true);

if (!empty($jsondatares["status"])) {
    $paymentlink = $jsondatares["result"]["payment_url"] ?? '';
  } else {
    echo '
    <script>
      Swal.fire({
        title: "Opps! Failed To Create Payment Link!",
        text: '.json_encode($jsondatares["message"] ?? "Unknown error").',
        confirmButtonText: "Ok",
        icon: "error"
      }).then((r)=>{ if(r.isConfirmed){ window.location.href = "payment_link"; }});
    </script>';
    exit;
  }
}
?>

<div class="page-heading">
  <h1 class="page-title">Create Payment Link</h1>
  <ol class="breadcrumb">
    <li class="breadcrumb-item">
      <a href="index.html"><i class="la la-home font-20"></i></a>
    </li>
  </ol>
</div>

<?php if ($userdata["role"] == 'User') {  ?>
                          
                          <div class="main-panel">
                            <div class="content">
                              <div class="container-fluid">

<h4 class="page-title">Create Payment Link (API)</h4>
                                <div class="row row-card-no-pd">
                                  <div class="col-md-12">
                                    <form class="row mb-4" method="POST" action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>">
                                      <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>">

<div class="col-md-6 mb-2">
                                        <label>Customer Name</label>
                                        <input type="text" name="name" placeholder="Your Name" class="form-control" required />
                                      </div>
                                      <div class="col-md-6 mb-2">
                                        <label>Mobile Number</label>
                                        <input type="number" name="mobile" placeholder="Your Mobile" class="form-control" required />
                                      </div>
                                      <div class="col-md-6 mb-2">
                                        <label>Amount (INR)</label>
                                        <input type="number" name="amount" placeholder="₹0.00" class="form-control" required />
                                      </div>
                                      <div class="col-md-6 mb-2">
                                        <label>Remark</label>
                                        <input type="text" name="remark" placeholder="Remarks Eg. Gift, Deposit etc." class="form-control" />
                                      </div>

<div class="col-md-12 mb-2 mt-2">
                                        <button type="submit" name="create" class="btn btn-primary btn-sm">Submit</button>
                                      </div>
                                    </form>
                                  </div>
                                </div>

<h4 class="page-title mt-4">Quick Pay Link Generator (No API)</h4>
                                <p class="text-muted mb-2">Create an instant, shareable link that opens customer’s UPI app and shows a QR on desktop.</p>

<div class="row gy-2">
                                  <div class="col-md-3">
                                    <label class="form-label">Payee VPA (your UPI ID)</label>
                                    <input id="qp_pa" class="form-control" placeholder="merchant@bank">
                                  </div>
                                  <div class="col-md-3">
                                    <label class="form-label">Payee Name</label>
                                    <input id="qp_pn" class="form-control" placeholder="Your Business">
                                  </div>
                                  <div class="col-md-2">
                                    <label class="form-label">Amount (₹)</label>
                                    <input id="qp_am" type="number" min="1" step="0.01" class="form-control" placeholder="499.00">
                                  </div>
                                  <div class="col-md-2">
                                    <label class="form-label">Order ID</label>
                                    <input id="qp_tr" class="form-control" placeholder="ORD12345" value="<?php echo 'ORD'.time(); ?>">
                                  </div>
                                  <div class="col-md-2">
                                    <label class="form-label">Note</label>
                                    <input id="qp_tn" class="form-control" placeholder="Invoice #1234">
                                  </div>
                                  <div class="col-12">
                                    <button id="qp_btn" type="button" class="btn btn-success mt-2">
                                      Generate Shareable Link
                                    </button>
                                  </div>
                                </div>

<div id="qp_result" class="mt-3" style="display:none">
                                  <div class="clipboard mb-2">
                                    <input class="copy-input" id="qp_link" readonly>
                                    <button class="copy-btn" id="qp_copy"><i class="fa fa-copy"></i></button>
                                  </div>
                                  <small class="text-muted">Share this HTTPS link with your client. On mobile it opens the UPI app, on desktop it shows a QR + “Open UPI” button.</small>
                                </div>

<div class="modal fade" id="qp_modal" tabindex="-1" aria-hidden="true">
                                  <div class="modal-dialog modal-dialog-centered">
                                    <div class="modal-content">
                                      <div class="modal-header">
                                        <h5 class="modal-title text-primary">Share Quick Pay Link</h5>
                                        <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                                          <span aria-hidden="true">&times;</span>
                                        </button>
                                      </div>
                                      <div class="modal-body">
                                        <div class="clipboard mb-3">
                                          <input class="copy-input" id="qp_modal_link" readonly>
                                          <button class="copy-btn" id="qp_modal_copy"><i class="fa fa-copy"></i></button>
                                        </div>
                                        <div id="qp_qr" class="text-center"></div>
                                      </div>
                                      <div class="modal-footer">
                                        <a id="qp_open_btn" class="btn btn-primary" target="_blank" rel="noopener">Open Now</a>
                                        <button class="btn btn-secondary" data-dismiss="modal">Close</button>
                                      </div>
                                    </div>
                                  </div>
                                </div>

<div id="copied-success" class="copied"><span>Link Copied !</span></div>

<h4 class="page-title mt-5">List Of Payment Link</h4>
                                <div class="row row-card-no-pd">
                                  <div class="col-md-12">
                                    <div class="table-responsive">
                                      <table class="table table-sm table-hover table-bordered table-head-bg-primary" id="dataTable" width="100%">
                                        <thead>
                                          <tr>
                                            <th>#</th>
                                            <th>Customer Mobile</th>
                                            <th>Amount</th>
                                            <th>Order id</th>
                                            <th>Status</th>
                                            <th>Remarks</th>
                                            <th>Date</th>
                                          </tr>
                                        </thead>
                                        <tbody>
                                          <?php
                                          $getst = $_GET["getfundst"] ?? '';
                                          $query = "SELECT * FROM `orders` WHERE user_id='{$userdata["id"]}' ORDER BY `id` DESC LIMIT 25";
                                          $query_run = mysqli_query($conn, $query);

if ($query_run) {
                                            while ($row = mysqli_fetch_assoc($query_run)) {
                                              if ($row['status'] == 'SUCCESS')      { $st = '<span class="badge badge-success">Success</span>'; }
                                              else if ($row['status'] == 'FAILURE') { $st = '<span class="badge badge-danger">Failed</span>'; }
                                              else                                   { $st = '<span class="badge badge-warning">Pending</span>'; }

echo "<tr>";
                                              echo "<td>" . htmlspecialchars($row['id'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . htmlspecialchars($row['customer_mobile'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . htmlspecialchars($row['amount'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . htmlspecialchars($row['order_id'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . $st . "</td>";
                                              echo "<td>" . htmlspecialchars($row['remark1'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . htmlspecialchars($row['create_date'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "</tr>";
                                            }
                                          } else {
                                            echo "Error in query: " . mysqli_error($conn);
                                          }
                                          ?>
                                        </tbody>
                                      </table>
                                    </div>
                                  </div>
                                </div>

</div>
                            </div>
                          </div>

<?php } else { // Admin/other role view ?>
                          <div class="main-panel">
                            <div class="content">
                              <div class="container-fluid">
                                <h4 class="page-title">List Of Payment Link</h4>
                                <div class="row row-card-no-pd">
                                  <div class="col-md-12">
                                    <div class="table-responsive">
                                      <table class="table table-sm table-hover table-bordered table-head-bg-primary" id="dataTable" width="100%">
                                        <thead>
                                          <tr>
                                            <th>#</th>
                                            <th>User</th>
                                            <th>Amount</th>
                                            <th>UTR Number</th>
                                            <th>Status</th>
                                            <th>Remarks</th>
                                            <th>Date</th>
                                          </tr>
                                        </thead>
                                        <tbody>
                                          <?php
                                          $getst = $_GET["getfundst"] ?? '';
                                          $query = "SELECT * FROM `settlement` WHERE status='$getst'";
                                          $query_run = mysqli_query($conn, $query);

if ($query_run) {
                                            while ($row = mysqli_fetch_assoc($query_run)) {
                                              $fetchuser = $conn->query("SELECT * FROM `users` WHERE id = '{$row["userid"]}'")->fetch_assoc();
                                              if ($row['status'] == 1)      { $st = '<span class="badge badge-success">Success</span>'; }
                                              else if ($row['status'] == 0) { $st = '<span class="badge badge-danger">Rejected</span>'; }
                                              else                           { $st = '<span class="badge badge-warning">Pending</span>'; }

echo "<tr>";
                                              echo "<td>" . htmlspecialchars($row['id'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . htmlspecialchars($fetchuser['name'], ENT_QUOTES, 'UTF-8') . " Mobile -" . htmlspecialchars($fetchuser['mobile'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . htmlspecialchars($row['amount'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . htmlspecialchars($row['utr_no'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . $st . "</td>";
                                              echo "<td>" . htmlspecialchars($row['remark'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "<td>" . htmlspecialchars($row['date'], ENT_QUOTES, 'UTF-8') . "</td>";
                                              echo "</tr>";
                                            }
                                          } else {
                                            echo "Error in query: " . mysqli_error($conn);
                                          }
                                          ?>
                                        </tbody>
                                      </table>
                                    </div>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                          <?php } ?>

<?php if (!empty($paymentlink)) { ?>
                          
                          <div class="modal fade" id="copypaymentlinkmodal" tabindex="-1" aria-hidden="true">
                            <div class="modal-dialog modal-dialog-centered modal-confirm">
                              <div class="modal-content">
                                <div class="modal-header">
                                  <h4 class="modal-title text-primary w-100">Payment Link Created Successfully</h4>
                                  <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                                    <span aria-hidden="true">&times;</span>
                                  </button>
                                </div>
                                <div class="modal-body">
                                  <div class="clipboard">
                                    <input onclick="copy('#copyClipboard')" class="copy-input" value="<?php echo htmlspecialchars($paymentlink, ENT_QUOTES, 'UTF-8'); ?>" id="copyClipboard" readonly>
                                    <button class="copy-btn" id="copyButton" onclick="copy('#copyClipboard')"><i class="fa fa-copy"></i></button>
                                  </div>
                                  <div id="copied-success" class="copied"><span>Link Copied !</span></div>
                                  <p>This Payment Link is valid for only 10 min.</p>
                                </div>
                                <div class="modal-footer justify-content-center">
                                  <button type="button" class="btn btn-secondary" data-dismiss="modal">Cancel</button>
                                  <button type="button" class="btn btn-primary" onclick="copy('#copyClipboard')" id="changeusrupimodebtn">Copy</button>
                                </div>
                              </div>
                            </div>
                          </div>
                          <style>
                            .modal { display:block !important; top:27%; left:15%; padding:35px; }
                            .fade { opacity:1; }
                          </style>
                          <?php } ?>

</div>
                      </div>

</div>
                  </div>
                </div>
              </div>
            </main>

<script src="https://code.jquery.com/jquery-3.6.3.min.js"></script>
            <script src="assets/vendors/bootstrap/dist/js/bootstrap.min.js"></script>
            <script src="assets/vendors/bootstrap/js/dist/modal.js"></script>
            <script src="./assets/js/scripts/dashboard_1_demo.js" type="text/javascript"></script>
            <script>
              $(document).ready(function() {
                $("#frubtn").click(function() {
                  $("#changefrform").slideToggle();
                });
                // If API created a link, open modal
                <?php if (!empty($paymentlink)) { ?>
                  $('#copypaymentlinkmodal').modal('show');
                <?php } ?>
              });

// Reusable copy function
              function copy(selector) {
                let el = document.querySelector(selector);
                if (!el) return;
                el.select && el.select();
                el.setSelectionRange && el.setSelectionRange(0, 99999);
                if (navigator.clipboard && el.value) {
                  navigator.clipboard.writeText(el.value);
                }
                let toast = document.getElementById("copied-success");
                if (toast) {
                  toast.style.opacity = "1";
                  setTimeout(function(){ toast.style.opacity = "0"; }, 700);
                }
              }
            </script>

<script src="./assets/vendors/jquery/dist/jquery.min.js" type="text/javascript"></script>
            <script src="./assets/vendors/popper.js/dist/umd/popper.min.js" type="text/javascript"></script>
            <script src="./assets/vendors/bootstrap/dist/js/bootstrap.min.js" type="text/javascript"></script>
            <script src="./assets/vendors/metisMenu/dist/metisMenu.min.js" type="text/javascript"></script>
            <script src="./assets/vendors/jquery-slimscroll/jquery.slimscroll.min.js" type="text/javascript"></script>
            <script src="./assets/js/app.min.js" type="text/javascript"></script>

<script src="https://cdn.jsdelivr.net/npm/qrcode@1.5.3/build/qrcode.min.js"></script>

function buildUpiUri({pa,pn,am,tr,tn}){
                const p = new URLSearchParams();
                p.set('pa', (pa||'').trim());
                if (pn) p.set('pn', pn.trim());
                if (am) p.set('am', Number(am).toFixed(2));
                p.set('cu','INR');
                if (tr) p.set('tr', tr.trim());
                if (tn) p.set('tn', tn.trim());
                return 'upi://pay?'+p.toString();
              }

function b64(s){ try { return btoa(s); } catch(e){ return ''; } }

qp.btn?.addEventListener('click', function(){
                const pa = qp.pa.value.trim();
                const am = qp.am.value.trim();
                if(!pa || !am){ alert('Enter your Payee VPA and Amount'); return; }

const upi = buildUpiUri({
                  pa: pa,
                  pn: qp.pn.value,
                  am: am,
                  tr: qp.tr.value,
                  tn: qp.tn.value
                });

const shareLink = baseUrl + (baseUrl.includes('?') ? '&' : '?') + 'open=' + encodeURIComponent(b64(upi));

// Show inline result
                qp.out.value = shareLink;
                qp.result.style.display = 'block';

// Prepare modal
                qp.modalLink.value = shareLink;
                qp.modalOpen.href = shareLink;

// Render QR for shareLink (so desktop users can open the landing page)
                qp.qr.innerHTML = '';
                if (typeof QRCode !== 'undefined' && QRCode.toCanvas) {
                  QRCode.toCanvas(shareLink, {width: 220, margin: 1}, function(err, canvas){
                    if (!err) qp.qr.appendChild(canvas);
                  });
                }

// Open modal
                $('#qp_modal').modal('show');
              });

// Copy buttons
              document.getElementById('qp_copy')?.addEventListener('click', function(){
                copy('#qp_link');
              });
              qp.modalCopy?.addEventListener('click', function(){
                copy('#qp_modal_link');
              });
            </script>

</div>
        </div>
      </div>

</div>
  </div>
</div>

</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: payment_link.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation