Hamza-AyedandClaude Opus 5
92dc6b3641
نسخة كاملة من مستودع سيرو عند ecfe7568 لتكون أساس تطبيق «انطلق». نُسخ المتعقَّب في git فقط (12,509 ملفاً / 302 م.ب) بـ git archive، لا `cp -r` — فاستُثنيت تلقائياً مخلفات البناء (build · node_modules · .dart_tool · .gradle · Pods ≈ 10.7 غ.ب) وكل ما يستثنيه .gitignore. هذا الكوميت **بلا أي تعديل عمداً** حتى يكون كل ما يليه فرقاً مقروءاً مقابل سيرو الأصلي. سيرو نفسه لم يُمسّ. ⚠️ لا يبني بعد: `.env` و`lib/env/env.g.dart` غير متعقَّبين في سيرو (وهذا صحيح — أسرار لكل مستأجر). كل تطبيق فلاتر هنا يحتاج .env خاصاً بانطلق ثم توليد env.g.dart عبر build_runner. لا تُنسخ أسرار سيرو. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
105 lines
3.1 KiB
PHP
105 lines
3.1 KiB
PHP
<?php
|
|
/**
|
|
* add_s2s_reward.php — Payment Server Endpoint
|
|
*
|
|
* Inserts wallet credit/debit records into driverWallet.
|
|
* Authenticated via X-S2S-Api-Key header matching the S2S_SHARED_KEY environment variable.
|
|
*/
|
|
|
|
require_once __DIR__ . '/../../jwtconnect.php';
|
|
|
|
define('S2S_SHARED_KEY', getenv('S2S_SHARED_KEY'));
|
|
|
|
$providedKey = $_SERVER['HTTP_X_S2S_API_KEY'] ?? '';
|
|
|
|
if (empty($providedKey) || $providedKey !== S2S_SHARED_KEY) {
|
|
http_response_code(401);
|
|
printFailure("Unauthorized: Invalid or missing X-S2S-Api-Key.");
|
|
exit;
|
|
}
|
|
|
|
$driverID = filterRequest("driverID");
|
|
$paymentID = filterRequest("paymentID");
|
|
$amount = filterRequest("amount");
|
|
$paymentMethod = filterRequest("paymentMethod");
|
|
$points = filterRequest("points"); // Optional raw points
|
|
|
|
if (empty($driverID) || empty($paymentID) || !isset($amount) || empty($paymentMethod)) {
|
|
printFailure("Missing required parameters: driverID, paymentID, amount, paymentMethod");
|
|
exit;
|
|
}
|
|
|
|
try {
|
|
$con->beginTransaction();
|
|
|
|
// Prevent duplicate challenge claims using paymentsDriverPoints table
|
|
if (strpos($paymentMethod, 'daily_') === 0 || strpos($paymentMethod, 'weekly_') === 0) {
|
|
$checkSql = "SELECT id FROM paymentsDriverPoints WHERE driverID = :driver_id AND payment_method = :challenge_id AND DATE(created_at) = CURDATE() FOR UPDATE";
|
|
$stmtCheck = $con->prepare($checkSql);
|
|
$stmtCheck->execute([
|
|
':driver_id' => $driverID,
|
|
':challenge_id' => $paymentMethod
|
|
]);
|
|
|
|
if ($stmtCheck->rowCount() > 0) {
|
|
$con->rollBack();
|
|
printFailure("Reward already claimed today");
|
|
exit();
|
|
}
|
|
}
|
|
|
|
$sql = "INSERT INTO `driverWallet` (
|
|
`driverID`,
|
|
`paymentID`,
|
|
`amount`,
|
|
`paymentMethod`
|
|
) VALUES (
|
|
:driverID,
|
|
:paymentID,
|
|
:amount,
|
|
:paymentMethod
|
|
);";
|
|
|
|
$stmt = $con->prepare($sql);
|
|
$stmt->execute([
|
|
':driverID' => $driverID,
|
|
':paymentID' => $paymentID,
|
|
':amount' => $amount,
|
|
':paymentMethod' => $paymentMethod
|
|
]);
|
|
|
|
if ($stmt->rowCount() > 0) {
|
|
// If points are provided, also insert into paymentsDriverPoints
|
|
if (!empty($points)) {
|
|
$sqlPoints = "INSERT INTO `paymentsDriverPoints` (
|
|
`amount`,
|
|
`payment_method`,
|
|
`driverID`
|
|
) VALUES (
|
|
:points,
|
|
:paymentMethod,
|
|
:driverID
|
|
);";
|
|
$stmtPoints = $con->prepare($sqlPoints);
|
|
$stmtPoints->execute([
|
|
':points' => $points,
|
|
':paymentMethod' => $paymentMethod,
|
|
':driverID' => $driverID
|
|
]);
|
|
}
|
|
|
|
$con->commit();
|
|
printSuccess("Record saved successfully");
|
|
} else {
|
|
$con->rollBack();
|
|
printFailure("Failed to save record");
|
|
}
|
|
} catch (Exception $e) {
|
|
if ($con->inTransaction()) {
|
|
$con->rollBack();
|
|
}
|
|
error_log("add_s2s_reward: " . $e->getMessage());
|
|
printFailure("An error occurred");
|
|
}
|
|
?>
|