Gecko [ nrupathungauniversityblr.ac.in ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
PaytmKit	[ DIR ]	drwxrwxrwx
lib	[ DIR ]	drwxrwxrwx
links	[ DIR ]	drwxrwxrwx
.gitattributes	378 B	-rwxrwxrwx
.mad-root	0 B	-rw-r--r--
README.md	1.35 KB	-rwxrwxrwx
TxnStatus.php	2.11 KB	-rwxrwxrwx
TxnTest.php	1.75 KB	-rwxrwxrwx
pgRedirect.php	2.27 KB	-rwxrwxrwx
pgResponse.php	5.06 KB	-rwxrwxrwx
pwnkit	10.99 KB	-rwxr-xr-x

Code Editor : pgRedirect.php

<?php
header("Pragma: no-cache");
header("Cache-Control: no-cache");
header("Expires: 0");
// following files need to be included
require_once("./lib/config_paytm.php");
require_once("./lib/encdec_paytm.php");

$servername = "97.74.228.93";
$username = "logisys3_logu";
$password = "Logisys@2106";
$dbname = "logisys3_kus";
$conn = new mysqli($servername, $username, $password, $dbname);

$checkSum = "";
$paramList = array();
$appno = $_REQUEST['productinfo'];

$get_data = "select fregno,ftotal from servtran where fappno = '{$appno}'";

$result=$conn->query($get_data);

if (mysqli_num_rows($result) > 0) 
{
	// output data of each row
	while($row = mysqli_fetch_assoc($result)) 
	{
		$fregno    =    $row['fregno'];
		$ftotalfee =    $row['ftotal'];
	}
}

$number = rand(10000000,99999999);

//var_dump($appno);var_dump($fregno);var_dump($ftotalfee);die();
$ORDER_ID = $number; //$_POST["ORDER_ID"];
$CUST_ID = $fregno; //$_POST["CUST_ID"];
$INDUSTRY_TYPE_ID = 'EducationGovernment'; //$_POST["INDUSTRY_TYPE_ID"];
$CHANNEL_ID = 'WEB';//$_POST["CHANNEL_ID"];
$TXN_AMOUNT = $ftotalfee;//$_POST["TXN_AMOUNT"];

// Create an array having all required parameters for creating checksum.
$paramList["MID"] = PAYTM_MERCHANT_MID;
$paramList["ORDER_ID"] = $ORDER_ID;
$paramList["CUST_ID"] = $fregno;
$paramList["MERC_UNQ_REF"] = $appno;
$paramList["INDUSTRY_TYPE_ID"] = $INDUSTRY_TYPE_ID;
$paramList["CHANNEL_ID"] = $CHANNEL_ID;
$paramList["TXN_AMOUNT"] = $TXN_AMOUNT;
$paramList["WEBSITE"] = PAYTM_MERCHANT_WEBSITE;

$paramList["CALLBACK_URL"] = "http://oasis.logisys.org/kus/parikshamitra/admin/pgResponse.php";

//Here checksum string will return by getChecksumFromArray() function.
$checkSum = getChecksumFromArray($paramList,PAYTM_MERCHANT_KEY);

?>
<html>
<head>
<title>Merchant Check Out Page</title>
</head>
<body>
	<center><h1>Please do not refresh this page...</h1></center>
		<form method="post" action="<?php echo PAYTM_TXN_URL ?>" name="f1">
		<table border="1">
			<tbody>
			<?php
			foreach($paramList as $name => $value) {
				echo '<input type="hidden" name="' . $name .'" value="' . $value . '">';
			}
			?>
			<input type="hidden" name="CHECKSUMHASH" value="<?php echo $checkSum ?>">
			</tbody>
		</table>
		<script type="text/javascript">
			document.f1.submit();
		</script>
	</form>
</body>
</html>

${this.title}

Code Editor : pgRedirect.php