1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / earnlouq / oxyield.live / user /
Filename : process-bot-purchase.php
back
<?php
session_start();
include '../../config/oxconfig.php';
include 'includes/checklogin.php';
include 'includes/functions.php';
check_login();
$uid = $_SESSION['id'];
$user = getUserInfo($con, $uid);
extract($user);

$response = ['status' => 'error', 'message' => 'Invalid request'];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $bot_id = intval($_POST['bot_id'] ?? 0);
    $promo_code = $_POST['promo_code'] ?? '';
    $mt5_demo_id = $_POST['mt5_demo_id'] ?? '';
    $mt5_live_id = $_POST['mt5_live_id'] ?? '';

    // Log input data for debugging
    error_log("Input: bot_id=$bot_id, promo_code=$promo_code, mt5_demo_id=$mt5_demo_id, mt5_live_id=$mt5_live_id, user_id=$uid");

    // Fetch bot details
    $stmt = $con->prepare("SELECT id, bot_name, price, duration, platform FROM trading_bots WHERE id = ?");
    if (!$stmt) {
        $response['message'] = 'Database error: Failed to prepare bot query';
        echo json_encode($response);
        exit;
    }
    $stmt->bind_param("i", $bot_id);
    $stmt->execute();
    $bot = $stmt->get_result()->fetch_assoc();
    $stmt->close();

    if (!$bot) {
        $response['message'] = 'Invalid bot ID';
        echo json_encode($response);
        exit;
    }

    // Validate MT5 IDs for Forex Bot
    if ($bot['platform'] === 'MT5' && (empty($mt5_demo_id) || empty($mt5_live_id))) {
        $response['message'] = 'MT5 Demo and Live IDs required for Forex Bot';
        echo json_encode($response);
        exit;
    }

    // Check promo code
    $discount_percentage = 0;
    if ($promo_code) {
        $stmt = $con->prepare("SELECT discount_percentage, created_at, duration FROM promo_codes WHERE code = ? AND bot_id = ?");
        if (!$stmt) {
            $response['message'] = 'Database error: Failed to prepare promo code query';
            echo json_encode($response);
            exit;
        }
        $stmt->bind_param("si", $promo_code, $bot_id);
        $stmt->execute();
        $promo = $stmt->get_result()->fetch_assoc();
        $stmt->close();
        if (!$promo) {
            $response['message'] = 'Invalid promo code';
            echo json_encode($response);
            exit;
        }
        $created_at = strtotime($promo['created_at']);
        $duration = $promo['duration'];
        $expiry_date = $created_at + ($duration * 86400);
        if (time() > $expiry_date) {
            $response['message'] = 'Promo code has expired';
            echo json_encode($response);
            exit;
        }
        $discount_percentage = $promo['discount_percentage'];
    }

    // Calculate final price
    $base_price = $bot['price'];
    $final_price = $base_price * (1 - $discount_percentage / 100);

    // Check balance
    if ($final_price > $user['balance']) {
        $response['message'] = 'Insufficient balance. Please deposit funds.';
        echo json_encode($response);
        exit;
    }

    // Start transaction
    $con->begin_transaction();

    // Update user balance
    $stmt = $con->prepare("UPDATE users SET balance = ? WHERE id = ?");
    if (!$stmt) {
        $response['message'] = 'Database error: Failed to prepare balance update query';
        $con->rollback();
        echo json_encode($response);
        exit;
    }
    $new_balance = $user['balance'] - $final_price;
    $stmt->bind_param("di", $new_balance, $uid);
    if (!$stmt->execute()) {
        $response['message'] = 'Database error: Balance update failed';
        $con->rollback();
        echo json_encode($response);
        exit;
    }
    $stmt->close();

    // Handle Yielder purchase
    if ($bot['bot_name'] === 'Ox Yielder') {
        $stmt = $con->prepare("UPDATE users SET is_yielder_active = 1 WHERE id = ?");
        if (!$stmt) {
            $response['message'] = 'Database error: Failed to prepare Yielder update query';
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $stmt->bind_param("i", $uid);
        if (!$stmt->execute()) {
            $response['message'] = 'Database error: Yielder update failed';
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $stmt->close();
    }

    // Record purchase in user_bots
    $expiry_date = date('Y-m-d H:i:s', strtotime("+" . $bot['duration'] . " days"));
    $stmt = $con->prepare("INSERT INTO user_bots (user_id, bot_name, mt5_demo_id, mt5_live_id, platform, purchase_date, expiry_date) 
                           VALUES (?, ?, ?, ?, ?, NOW(), ?)");
    if (!$stmt) {
        $response['message'] = 'Database error: Failed to prepare user_bots insert query';
        $con->rollback();
        echo json_encode($response);
        exit;
    }
    $stmt->bind_param("isssss", $uid, $bot['bot_name'], $mt5_demo_id, $mt5_live_id, $bot['platform'], $expiry_date);
    if (!$stmt->execute()) {
        $response['message'] = 'Database error: user_bots insert failed';
        $con->rollback();
        echo json_encode($response);
        exit;
    }
    $stmt->close();

    // Record transaction
    $stmt = $con->prepare("INSERT INTO transactions (user_id, amount, type, account_type, status, created_at) 
                           VALUES (?, ?, 'Bot Purchase', 'Balance', 'Completed', NOW())");
    if (!$stmt) {
        $response['message'] = 'Database error: Failed to prepare transactions insert query';
        $con->rollback();
        echo json_encode($response);
        exit;
    }
    $stmt->bind_param("id", $uid, $final_price);
    if (!$stmt->execute()) {
        $response['message'] = 'Database error: Transactions insert failed';
        $con->rollback();
        echo json_encode($response);
        exit;
    }
    $stmt->close();

    // Handle referral commission (20% if no promo code)
    if (empty($promo_code) && !empty($user['referred_by'])) {
        $referrer_code = $user['referred_by'];
        $commission = $final_price * 0.20;

        // Verify referrer exists by referral_code
        $stmt = $con->prepare("SELECT id FROM users WHERE referral_code = ?");
        if (!$stmt) {
            $response['message'] = 'Database error: Failed to prepare referrer check query';
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $stmt->bind_param("s", $referrer_code);
        $stmt->execute();
        $referrer = $stmt->get_result()->fetch_assoc();
        $stmt->close();
        if (!$referrer) {
            $response['message'] = "Invalid referrer code: $referrer_code";
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $referrer_id = $referrer['id'];

        // Update referrer's balance
        $stmt = $con->prepare("UPDATE users SET balance = balance + ? WHERE id = ?");
        if (!$stmt) {
            $response['message'] = 'Database error: Failed to prepare balance update query';
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $stmt->bind_param("di", $commission, $referrer_id);
        if (!$stmt->execute()) {
            $response['message'] = 'Database error: Profit update failed';
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $stmt->close();

        // Record in earning_history
        $stmt = $con->prepare("INSERT INTO earning_history (user_id, amount, type, created_at) 
                               VALUES (?, ?, 'Referral Commission', NOW())");
        if (!$stmt) {
            $response['message'] = 'Database error: Failed to prepare earning_history insert query';
            error_log("SQL Error: " . $con->error);
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $stmt->bind_param("id", $referrer_id, $commission);
        if (!$stmt->execute()) {
            $response['message'] = 'Database error: earning_history insert failed';
            error_log("SQL Error: " . $stmt->error);
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $stmt->close();

        // Record in notifications
        $stmt = $con->prepare("INSERT INTO notifications (receiver_id, action_type, body, is_read, created_at) 
                               VALUES (?, ?, ?, 0, NOW())");
        if (!$stmt) {
            $response['message'] = 'Database error: Failed to prepare notifications insert query';
            error_log("SQL Error: " . $con->error);
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $action_type = "Referral Commission";
        $body = "You earned $$commission as a referral commission for a {$bot['bot_name']} purchase.";
        $stmt->bind_param("iss", $referrer_id, $action_type, $body);
        if (!$stmt->execute()) {
            $response['message'] = 'Database error: Notifications insert failed';
            error_log("SQL Error: " . $stmt->error);
            $con->rollback();
            echo json_encode($response);
            exit;
        }
        $stmt->close();
    }

    // Commit transaction
    $con->commit();

    $response = [
        'status' => 'success',
        'message' => "Purchased {$bot['bot_name']} for $" . number_format($final_price, 2) . ($discount_percentage > 0 ? " with $discount_percentage% discount." : ".")
    ];
}

echo json_encode($response);
?>