Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-611.26.1.el9_7.x86_64

PHP Version:

8.4.15

User:

u892747680

Directory:

/home/u892747680/domains/sisteminformasic.com/public_html/freshfruty/checkout

Free Space:

9.88 TB

🔧 Quick Actions

✏️ Editing: payment_gate.php

<?php
// checkout/payment_gate.php
// Payment Gateway Integration - Mendukung Midtrans, Xendit, dan Manual

session_start();
require_once '../config/database.php';
require_once '../config/constants.php';

class PaymentGateway {
    private $db;
    
    public function __construct() {
        $database = new Database();
        $this->db = $database->getConnection();
    }
    
    /**
     * Inisiasi pembayaran Midtrans
     */
    public function initMidtrans($orderData) {
        // Set konfigurasi Midtrans
        \Midtrans\Config::$serverKey = MIDTRANS_SERVER_KEY;
        \Midtrans\Config::$isProduction = !MIDTRANS_SANDBOX;
        \Midtrans\Config::$isSanitized = true;
        \Midtrans\Config::$is3ds = true;

$params = [
            'transaction_details' => [
                'order_id' => $orderData['order_number'],
                'gross_amount' => $orderData['total_amount'],
            ],
            'customer_details' => [
                'first_name' => $orderData['customer_name'],
                'email' => $orderData['customer_email'] ?? 'customer@freshfruty.com',
                'phone' => $orderData['customer_phone'],
                'billing_address' => [
                    'address' => $orderData['shipping_address']
                ]
            ],
            'item_details' => $orderData['items']
        ];

try {
            $snapToken = \Midtrans\Snap::getSnapToken($params);
            return [
                'success' => true,
                'snap_token' => $snapToken,
                'redirect_url' => 'https://app.sandbox.midtrans.com/snap/v2/vtweb/' . $snapToken
            ];
        } catch (Exception $e) {
            return [
                'success' => false,
                'message' => $e->getMessage()
            ];
        }
    }
    
    /**
     * Inisiasi pembayaran Xendit
     */
    public function initXendit($orderData) {
        $url = 'https://api.xendit.co/v2/invoices';
        
        $data = [
            'external_id' => $orderData['order_number'],
            'amount' => $orderData['total_amount'],
            'description' => 'Pembayaran Pesanan ' . $orderData['order_number'],
            'invoice_duration' => 86400, // 24 jam
            'customer' => [
                'given_names' => $orderData['customer_name'],
                'email' => $orderData['customer_email'] ?? 'customer@freshfruty.com',
                'mobile_number' => $orderData['customer_phone']
            ],
            'success_redirect_url' => SITE_URL . '/checkout/success.php?order=' . $orderData['order_number'],
            'failure_redirect_url' => SITE_URL . '/checkout/failed.php?order=' . $orderData['order_number']
        ];
        
        $ch = curl_init($url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
        curl_setopt($ch, CURLOPT_HTTPHEADER, [
            'Content-Type: application/json',
            'Authorization: Basic ' . base64_encode(XENDIT_SECRET_KEY . ':')
        ]);
        
        $response = curl_exec($ch);
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);
        
        if ($httpCode == 200) {
            $result = json_decode($response, true);
            return [
                'success' => true,
                'invoice_url' => $result['invoice_url'],
                'invoice_id' => $result['id']
            ];
        } else {
            return [
                'success' => false,
                'message' => 'Gagal membuat invoice Xendit'
            ];
        }
    }
    
    /**
     * Generate Virtual Account Number (Manual/Simulasi)
     */
    public function generateVirtualAccount($orderData, $bank) {
        $bankCodes = [
            'bca' => '8830',
            'mandiri' => '8840',
            'bni' => '8850',
            'bri' => '8860'
        ];
        
        $prefix = $bankCodes[$bank] ?? '8830';
        $uniqueNumber = substr(str_pad($orderData['customer_id'], 8, '0', STR_PAD_LEFT), -8);
        
        return $prefix . $uniqueNumber;
    }
    
    /**
     * Verifikasi pembayaran manual
     */
    public function verifyManualPayment($orderId, $proofImage) {
        // Update order dengan bukti pembayaran
        $query = "UPDATE orders SET 
                  payment_status = 'pending', 
                  payment_proof = :proof 
                  WHERE id = :id";
        
        $stmt = $this->db->prepare($query);
        $stmt->bindParam(':proof', $proofImage);
        $stmt->bindParam(':id', $orderId);
        
        return $stmt->execute();
    }
    
    /**
     * Callback handler untuk Midtrans
     */
    public function handleMidtransCallback($notification) {
        $orderId = $notification->order_id;
        $transactionStatus = $notification->transaction_status;
        $fraudStatus = $notification->fraud_status;

if ($transactionStatus == 'capture') {
            if ($fraudStatus == 'challenge') {
                $status = 'pending';
            } else if ($fraudStatus == 'accept') {
                $status = 'paid';
            }
        } else if ($transactionStatus == 'settlement') {
            $status = 'paid';
        } else if ($transactionStatus == 'cancel' || 
                   $transactionStatus == 'deny' || 
                   $transactionStatus == 'expire') {
            $status = 'cancelled';
        } else if ($transactionStatus == 'pending') {
            $status = 'pending';
        }

// Update order status
        $query = "UPDATE orders SET payment_status = :status WHERE order_number = :order_number";
        $stmt = $this->db->prepare($query);
        $stmt->bindParam(':status', $status);
        $stmt->bindParam(':order_number', $orderId);
        
        return $stmt->execute();
    }
    
    /**
     * Callback handler untuk Xendit
     */
    public function handleXenditCallback($data) {
        $orderId = $data['external_id'];
        $status = $data['status'];
        
        $paymentStatus = 'pending';
        if ($status == 'PAID') {
            $paymentStatus = 'paid';
        } else if ($status == 'EXPIRED') {
            $paymentStatus = 'cancelled';
        }
        
        $query = "UPDATE orders SET payment_status = :status WHERE order_number = :order_number";
        $stmt = $this->db->prepare($query);
        $stmt->bindParam(':status', $paymentStatus);
        $stmt->bindParam(':order_number', $orderId);
        
        return $stmt->execute();
    }
}

// API Endpoint
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    header('Content-Type: application/json');
    
    $input = json_decode(file_get_contents('php://input'), true);
    $action = $input['action'] ?? '';
    
    $gateway = new PaymentGateway();
    
    switch($action) {
        case 'init_midtrans':
            $result = $gateway->initMidtrans($input['order_data']);
            echo json_encode($result);
            break;
            
        case 'init_xendit':
            $result = $gateway->initXendit($input['order_data']);
            echo json_encode($result);
            break;
            
        case 'generate_va':
            $va = $gateway->generateVirtualAccount($input['order_data'], $input['bank']);
            echo json_encode(['success' => true, 'va_number' => $va]);
            break;
            
        case 'upload_proof':
            // Handle file upload untuk bukti transfer
            if (isset($_FILES['proof'])) {
                $uploadDir = '../uploads/payment_proofs/';
                if (!file_exists($uploadDir)) {
                    mkdir($uploadDir, 0777, true);
                }
                
                $fileName = time() . '_' . basename($_FILES['proof']['name']);
                $targetPath = $uploadDir . $fileName;
                
                if (move_uploaded_file($_FILES['proof']['tmp_name'], $targetPath)) {
                    $result = $gateway->verifyManualPayment($input['order_id'], $fileName);
                    echo json_encode(['success' => $result]);
                } else {
                    echo json_encode(['success' => false, 'message' => 'Upload gagal']);
                }
            }
            break;
            
        default:
            echo json_encode(['success' => false, 'message' => 'Invalid action']);
    }
}
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: payment_gate.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation