1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / earnlouq / oxyield.live / user /
Filename : process-deposit.php
back
<?php
session_start();
include '../../config/oxconfig.php';
include 'includes/checklogin.php';
check_login();

header('Content-Type: application/json');

$uid = $_SESSION['id'];
$usdt_amount = floatval($_POST['usdt_amount'] ?? 0);
$ton_amount = floatval($_POST['ton_amount'] ?? 0);
$tx_hash = $_POST['tx_hash'] ?? '';
$csrf_token = $_POST['csrf_token'] ?? '';

define('MINIMUM_DEPOSIT', 1.00);

// Validate CSRF token
if ($csrf_token !== $_SESSION['csrf_token']) {
    echo json_encode(['errors' => ['Invalid CSRF token']]);
    exit;
}

// Validate USDT amount
if ($usdt_amount < MINIMUM_DEPOSIT) {
    echo json_encode(['errors' => ['Amount must be at least $' . number_format(MINIMUM_DEPOSIT, 2)]]);
    exit;
}

try {
    // Check for existing transaction
    $stmt = $con->prepare("SELECT id FROM transactions WHERE tx_hash = ?");
    $stmt->bind_param('s', $tx_hash);
    $stmt->execute();
    $stmt->store_result();

    if ($stmt->num_rows > 0) {
        $stmt->close();
        echo json_encode(['errors' => ['Transaction already processed']]);
        exit;
    }
    $stmt->close();

    // Insert transaction as Pending
    $ref = uniqid('dep_');
    $now = date('Y-m-d H:i:s');
    $plan_id = null; 
    $stmt = $con->prepare("INSERT INTO transactions (user_id, plan_id, account_type, amount, coin, type, status, ref, code, tx_hash) VALUES (?, NULL, 'Balance', ?, 'USDT', 'Deposit', 'Pending', ?, '', ?)");
    $stmt->bind_param('idss', $uid, $usdt_amount, $ref, $tx_hash);


    if (!$stmt->execute()) {
        $stmt->close();
        echo json_encode(['errors' => ['Failed to record transaction']]);
        exit;
    }
    $stmt->close();

    // Insert notification
    $notification_body = "Your USDT deposit of $" . number_format($usdt_amount, 2) . " is processing.";
    $is_read = 0;
    $stmt = $con->prepare("INSERT INTO notifications (receiver_id, action_type, body, is_read, created_at, read_at) VALUES (?, 'Deposit', ?, ?, ?, NULL)");
    $stmt->bind_param('issi', $uid, $notification_body, $is_read, $now);

    if (!$stmt->execute()) {
        $stmt->close();
        echo json_encode(['errors' => ['Failed to create notification']]);
        exit;
    }
    $stmt->close();

    echo json_encode(['success' => 'Deposit successful!']);
    exit;

} catch (Exception $e) {
    echo json_encode(['errors' => ['Failed to process deposit: ' + $e->getMessage()]]);
    exit;
}
?>