0xV3NOMx
Linux ip-172-26-7-228 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64



Your IP : 3.17.175.167


Current Path : /proc/thread-self/root/var/www/html/convocation/nehu/hdfc/
Upload File :
Current File : //proc/thread-self/root/var/www/html/convocation/nehu/hdfc/ccavRequestHandler.php

<html>
<head>
<title> Custom Form Kit </title>
</head>
<body>
<center>

<?php include('Crypto.php')?>
<?php 
	include("/var/www/config.php");
	error_reporting(0);
	
	$merchant_data='';
	//$working_key='4C951A28AAA39C9F123E3897FC1C699E';//Shared by CCAVENUES
	//$access_code='AVHI84GC05BH58IHHB';//Shared by CCAVENUES

	$appno     = $_GET['productinfo'];
	$type     = $_GET['type'];

	$funivcode = "005";
	$bank = 'hdfc';
	
	$servername = SERVERNAME;
	$username = USERNAME;
	$password = PASSWORD;

	$dbname = "logisys3_nehu";

	$conn = new mysqli($servername, $username, $password, $dbname);  
	//IFNULL(cs.ftotalfee,0)

	$get_data = "select * from masbank 
	where fenttype = 'adm' and fbank = '{$bank}'";

	$result=$conn->query($get_data); 

	if (mysqli_num_rows($result) > 0) 
	{
		// output data of each row
		while($row = mysqli_fetch_assoc($result)) 
		{
			// var_dump($row);
			$working_key  =    $row['fmid'];
			$access_code  =    $row['fkey'];
			$website      =    $row['fwebsite'];
			$returnurl    =    $row['freturnurl'];
		}
	}

	if($type == 'exam')
	{
		$get_data = "select cs.fregno, cs.fdegree, cs.fcollcode, cs.fyear, cs.fexamtype, 
		IFNULL(cs.ftotalfee,0) as ftotalfee, s.fname,control.funivname,pdf_logo_path,
		IFNULL(s.FCONTACT_NO,'9999999999') as fmobileno,IFNULL(s.femail,'') as femail,
		cs.fyear,cs.fexamtype  
		from control, appcandsum cs 
		inner join student s on cs.fregno = s.fregno
		where appno = '{$appno}'";
		$pname = "Exam Form";
	}else if($type == 'ppcfee')
	{
		$get_data = "select cs.fappno as fregno, s.fdegree, s.fcollcode,  
		IFNULL(cs.fremamount,0) as ftotalfee, s.fname,control.funivname,pdf_logo_path,
		IFNULL(s.FCONTACT_NO,'9999999999') as fmobileno,IFNULL(s.femail,'') as femail,
		YEAR(now()) as fyear, '1' as fexamtype,  
		from control, studmiscfee cs 
		inner join student s on cs.fregno = s.fregno
		where cs.fregno = '{$appno}'";
		$pname = "PPC Exam Form";

	}
	else if($type == 'res')
	{
		$get_data = "select cs.fregno as fregno, IFNULL(cs.FTOTAL,0) as ftotalfee,
		control.funivname,pdf_logo_path, '999999999' as fmobileno,
		'99999' as fname,'999999@gmail.com' as femail,cs.fcollcode,cs.fdegree,
		cs.fyear,cs.fexamtype
		from control, res_stud cs 
		where appno = '{$appno}'";
		$pname = "Re-evaluation";
	}else if($type == 'convo')
	{
		$get_data = "select cs.fregno, s.fdegree, s.fcollcode, YEAR(now()) as fyear, '1' as fexamtype, 
		IFNULL(cs.FAMOUNT,0) as ftotalfee, s.fname,control.funivname,pdf_logo_path,
		IFNULL(cs.FMOBILE,'') as fmobileno,IFNULL(cs.FEMAIL,'') as femail 
		from control, dctran cs 
		inner join dcstud s on cs.fregno = s.fregno
		where cs.fappno = '{$appno}'";
		$pname = "Convocation";
	}
	else
	{

		$get_data = "select cs.FROLLNO as fregno, IFNULL(cs.famount,0) as ftotalfee,
		control.funivname,pdf_logo_path, FCONTACT_NO as fmobileno,
		fname as fname,cs.femail as femail,cs.fcollcode,cs.fdegree,
		YEAR(now()) as fyear, '1' as fexamtype 
		from control, studadm cs 
		inner join college c on cs.fcollcode = c.fcollcode
		where fappno = '{$appno}'";
		
		$pname = "Registration";
		$type = 'ADM';
	}
		
//var_dump($get_data);
	$result=$conn->query($get_data); 

	if (mysqli_num_rows($result) > 0) 
	{
		// output data of each row
		while($row = mysqli_fetch_assoc($result)) 
		{
			// var_dump($row);
			$fregno    =    $row['fregno'];
			$ftotalfee =    $row['ftotalfee'];
			$fname     =    $row['fname'];
			$fcollcode     =    $row['fcollcode'];
			$fdegree     =    $row['fdegree'];
			$fmobileno =    $row['fmobileno'];
			$femail    =    $row['femail'];
			$funivname =    $row['funivname'];
			$logo      =    $row['pdf_logo_path'];  
			$fyear = $row['fyear'];
			$fexamtype = $row['fexamtype'];      
		}
	}

	$_POST['merchant_id'] = $website;
	//$number = rand(10000000,99999999);
	$number = (int)date("Ymdhis").rand(10000000,99999999);
	$orderid = "HDFC".$number;
	$_POST['order_id'] = $orderid;

	$_POST['currency'] = 'INR';
	$_POST['amount'] = $ftotalfee;

	if($type == 'exam')
	{
		$query = "update appcandsum set forderid = '{$orderid}', FPAYGATEWAY = '{$bank}' where appno = '{$appno}'";
	}
	else if($type == 'ppcfee')
	{
		$query = "update studmiscfee set forderid = '{$orderid}', fpaymentype = '{$bank}' 
		where fregno = '{$appno}'";
	}else if($type == 'res')
	{
		$query = "update res_stud set forderid = '{$orderid}', fpaymentype = '{$bank}' where appno = '{$appno}'";
	}
	else
	{
		$query = "update studadm set forderid = '{$orderid}', fpaymentype = '{$bank}' where fappno = '{$appno}'";
	}
	
	$res_update = $conn->query($query);

	$query = "insert into pgdet(ftype, appno, fappdate, fpaygateway, fregno, fdegree, fcollcode, famount,
	forderid, fyear, fexamtype, fcreatedate)
	values('{$type}', '{$appno}', current_date(), 'HDFC', '{$fregno}', '{$fdegree}', '{$fcollcode}', '{$ftotalfee}',
	'{$orderid}', '{$fyear}', '{$fexamtype}', now())";
	$res_update1 = $conn->query($query);


	$protocol = stripos($_SERVER['SERVER_PROTOCOL'],'https') === true ? 'https://' : 'http://';
	$protocol = "https://";
	$url = $protocol.$returnurl;

	//$_POST['redirect_url'] = $url;
	//$_POST['cancel_url'] = $url;
	
	$_POST['language'] = 'EN';
	
	$_POST['billing_name'] = "Sikkim University";

	$_POST['billing_tel'] = $fmobileno;
	$_POST['billing_email'] = "abcd@gmail.com";

	// merchant_param1

	if($type == 'ppcfee')
	{
		$_POST['merchant_param2'] = $appno;
		$_POST['merchant_param3'] = $fregno;
	}else
	{
		$_POST['merchant_param2'] = $fregno;
		$_POST['merchant_param3'] = $appno;
	}
	$_POST['merchant_param1'] = $funivcode;
	$_POST['merchant_param4'] = $pname;
	
	//var_dump($working_key);
// 	var_dump($_POST);
// die();
	foreach($_POST as $key => $value){
		$merchant_data .= $key.'='.urlencode($value).'&';
	}

	$merchant_data .= "&redirect_url=".$url."&cancel_url=".$url;
	// var_dump($merchant_data);
	// die();
	$encrypted_data=encrypt($merchant_data,$working_key); // Method for encrypting the data.
	//var_dump($encrypted_data);
	
	//die();
	//https://test.ccavenue.com/transaction/transaction.do?command=initiateTransaction 
	//https://secure.ccavenue.com/transaction/transaction.do?command=initiateTransaction
	
?>

<form method="post" name="redirect" action="https://secure.ccavenue.com/transaction/transaction.do?command=initiateTransaction"> 
<?php
echo "<input type=hidden name=encRequest value=$encrypted_data>";
echo "<input type=hidden name=access_code value=$access_code>";
?>
</form>
</center>
<script language='javascript'>document.redirect.submit();</script>
</body>
</html>