Update: 2026-06-11 18:22:57

walletintaleq.intaleq.xyz/v2/main/ride/mtn/driver/confirm_payment.php

@@ -0,0 +1,125 @@
+<?php
+// /v1/main/ride/mtn/driver/confirm_payment.php
+include "../../../connect.php";
+
+// It's better to use __DIR__ for reliable file path resolution.
+// Assuming your private_key.pem is in the same directory as this script.
+$privateKeyPath = __DIR__ . "/private_key.pem";
+
+$baseUrl         = rtrim(getenv('MTN_API_BASE_URL'), '/');
+$terminalId      = getenv('MTN_TERMINAL_ID');
+$privateKey      = openssl_pkey_get_private(file_get_contents($privateKeyPath));
+
+$invoice         = filterRequest('invoiceNumber');
+$phone           = filterRequest('phone');
+$guid            = filterRequest('guid');
+$operationNumber = filterRequest('operationNumber');
+$code            = filterRequest('otp');  // The OTP
+
+error_log("MTN Confirm (Driver): Start request for invoice={$invoice}, phone={$phone}, guid={$guid}, opNum={$operationNumber}");
+
+if (!$invoice || !$phone || !$guid || !$operationNumber || !$code) {
+    error_log("MTN Confirm (Driver): Missing parameters");
+    printFailure("Missing parameters.");
+    exit;
+}
+
+// Encrypt the code
+$hashBin  = hash('sha256', $code, true);
+$codeB64  = base64_encode($hashBin);
+
+$body = [
+    'Invoice'         => intval($invoice),
+    'Phone'           => $phone,
+    'Guid'            => $guid,
+    'OperationNumber' => intval($operationNumber),
+    'Code'            => $codeB64
+];
+$bodyJson = json_encode($body, JSON_UNESCAPED_UNICODE);
+
+error_log("MTN Confirm (Driver): Prepared body JSON: " . $bodyJson);
+
+// Generate signature
+$signResult = openssl_sign($bodyJson, $sig, $privateKey, OPENSSL_ALGO_SHA256);
+if (!$signResult) {
+    error_log("MTN Confirm (Driver): Failed to generate signature");
+    printFailure("Signature error.");
+    exit;
+}
+$xSignature = base64_encode($sig);
+error_log("MTN Confirm (Driver): Generated signature");
+
+// Send the request
+$ch = curl_init("{$baseUrl}/pos_web/payment_phone/confirm");
+curl_setopt_array($ch, [
+    CURLOPT_POST           => true,
+    CURLOPT_POSTFIELDS     => $bodyJson,
+    CURLOPT_RETURNTRANSFER => true,
+    CURLOPT_HTTPHEADER     => [
+        "Content-Type: application/json",
+        "Request-Name: pos_web/payment_phone/confirm",
+        "Subject: {$terminalId}",
+        "X-Signature: {$xSignature}"
+    ]
+]);
+
+$response  = curl_exec($ch);
+$httpCode  = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+$curlError = curl_error($ch);
+curl_close($ch);
+
+error_log("MTN Confirm (Driver): HTTP $httpCode - Response: $response");
+if ($curlError) {
+    error_log("MTN Confirm (Driver): cURL error - $curlError");
+}
+
+// --- SOLUTION IMPLEMENTED HERE ---
+// 1. Decode the response from MTN to check its contents.
+$responseData = json_decode($response, true) ?: [];
+
+// 2. First, check for network/gateway level failure.
+if ($httpCode !== 200) {
+    error_log("MTN Confirm (Driver): HTTP failure for invoice {$invoice}. Code: {$httpCode}");
+    // Use printFailure to send a structured error to Flutter
+    printFailure(['message' => 'MTN Gateway Error', 'http' => $httpCode, 'details' => $responseData]);
+    exit;
+}
+
+// 3. Now, check for business-logic failure (like "Balance not enough").
+$errno = $responseData['Errno'] ?? -1; // Default to an error state if Errno is missing
+if ($errno !== 0) {
+    $apiError = $responseData['Error'] ?? 'Unknown MTN API Error';
+    error_log("MTN Confirm (Driver): Business failure for invoice {$invoice}. Errno: {$errno}, Reason: {$apiError}");
+    // This now sends the specific error message in the format Flutter expects!
+    printFailure(['message' => $apiError, 'errno' => $errno, 'details' => $responseData]);
+    exit;
+}
+
+// --- ONLY PROCEED TO DATABASE ON FULL SUCCESS (HTTP 200 AND Errno 0) ---
+try {
+    $stmt = $con->prepare(
+        "UPDATE `paymentsLogSyriaDriver` SET status = 1, updated_at = NOW()
+         WHERE order_ref = :inv"
+    );
+    $stmt->execute([':inv' => $invoice]);
+    error_log("MTN Confirm (Driver): Payment updated successfully in DB for invoice={$invoice}");
+
+    // The file path correction from before remains important.
+    include_once __DIR__ . '/finalize_wallet_payment.php';
+
+    // Call the wallet finalization logic
+    if (function_exists('finalizeWalletPayment')) {
+        $_GET['orderRef'] = $invoice;
+        finalizeWalletPayment($con);
+    } else {
+        error_log("MTN Confirm (Driver): FATAL - finalizeWalletPayment() function does not exist after include.");
+    }
+
+    // On success, send a success response to Flutter
+    printSuccess(['message' => 'Payment confirmed successfully', 'details' => $responseData]);
+
+} catch (PDOException $e) {
+    error_log("MTN Confirm (Driver): DB update error - " . $e->getMessage());
+    printFailure("Database processing error.");
+}
+