PageRenderTime 44ms CodeModel.GetById 14ms RepoModel.GetById 1ms app.codeStats 0ms

/u/require/userpay/userpay.php

https://bitbucket.org/johnroyer/phpwind8.7
PHP | 437 lines | 371 code | 43 blank | 23 comment | 95 complexity | ab3f159a791e2dda9be20f276d31eb42 MD5 | raw file
    

  1. <?php

    2. 

  2. !defined('R_P') && exit('Forbidden');

    3. 

  3. $db_menuinit .= ",'td_userinfomore' : 'menu_userinfomore'";

    4. 

  4. require_once(R_P.'require/credit.php');

    5. 

  5. $creditdb = array(

    6. 

  6. 	'money'		=> $winddb['money'],

    7. 

  7. 	'rvrc'		=> $userrvrc,

    8. 

  8. 	'credit'	=> $winddb['credit'],

    9. 

  9. 	'currency'	=> $winddb['currency']

    10. 

  10. );

    11. 

  11. $creditdb += (array)$credit->get($winduid,'CUSTOM');

    12. 

  12. /*SEO*/

    13. 

  13. bbsSeoSettings();

    14. 

  14. S::gp(array('action'));

    15. 

  15. require_once(R_P . 'require/showimg.php');

    16. 

  16. list($faceurl) = showfacedesign($winddb['icon'], 1, 's');

    17. 

  17. $pro_tab = 'userpay';

    18. 

  18. 

    19. 

  19. if (empty($action)) {

    20. 

  20. 	$orderdb = array();

    21. 

  21. 	$query = $db->query("SELECT * FROM pw_clientorder WHERE uid=" . S::sqlEscape($winduid) . " ORDER BY date DESC LIMIT 5");

    22. 

  22. 	while ($rt = $db->fetch_array($query)) {

    23. 

  23. 		$rt['date'] = get_date($rt['date']);

    24. 

  24. 		$orderdb[] = $rt;

    25. 

  25. 	}

    26. 

  26. 

    27. 

  27. 	require_once GetLang('logtype');

    28. 

  28. 	$query = $db->query("SELECT * FROM pw_creditlog WHERE uid=". S::sqlEscape($winduid) . " ORDER BY id DESC LIMIT 5");

    29. 

  29. 	while ($rt = $db->fetch_array($query)) {

    30. 

  30. 		$rt['adddate'] = get_date($rt['adddate']);

    31. 

  31. 		$rt['descrip'] = descriplog($rt['descrip']);

    32. 

  32. 		$logdb[] = $rt;

    33. 

  33. 	}

    34. 

  34. 

    35. 

  35. 	!$db_creditpay && $db_creditpay = array();

    36. 

  36. 	$paycredit = key($db_creditpay);

    37. 

  37. 	$pay_link = "<span class=\"btn\"><span><button onClick=\"location.href='userpay.php?action=buy';\">馬上充值</button></span></span>";

    38. 

  38. 	//* include_once pwCache::getPath(D_P.'data/bbscache/ol_config.php');

    39. 

  39. 	pwCache::getData(D_P.'data/bbscache/ol_config.php');

    40. 

  40. 	if (!$ol_onlinepay || empty($db_creditpay)) {

    41. 

  41. 		$pay_link = "<div class=\"blockquote3\">支付功能尚未開啟</div>";

    42. 

  42. 	}

    43. 

  43. 	if (!$ol_payto && (!$ol_paypal || !$ol_paypalcode) && (!$ol_99bill || !$ol_99billcode) && (!$ol_tenpay || !$ol_tenpaycode)) {

    44. 

  44. 		$pay_link = "<div class=\"blockquote3\">支付功能尚未開啟</div>";

    45. 

  45. 	}

    46. 

  46. 	require_once uTemplate::PrintEot('userpay');

    47. 

  47. 	pwOutPut();

    48. 

  48. 

    49. 

  49. } elseif ($action == 'buy') {

    50. 

  50. 

    51. 

  51. 	S::gp(array('paycredit'));

    52. 

  52. 	//* include_once pwCache::getPath(D_P.'data/bbscache/ol_config.php');

    53. 

  53. 	pwCache::getData(D_P.'data/bbscache/ol_config.php');

    54. 

  54. 	if (!$ol_onlinepay) {

    55. 

  55. 		Showmsg($ol_whycolse);

    56. 

  56. 	}

    57. 

  57. 	if (!$ol_payto && (!$ol_paypal || !$ol_paypalcode) && (!$ol_99bill || !$ol_99billcode) && (!$ol_tenpay || !$ol_tenpaycode)) {

    58. 

  58. 		Showmsg('olpay_seterror');

    59. 

  59. 	}

    60. 

  60. 	if (empty($db_creditpay)) {

    61. 

  61. 		Showmsg('creditpay_empty');

    62. 

  62. 	}

    63. 

  63. 	$creditinfo = '';

    64. 

  64. 	foreach ($db_creditpay as $key => $value) {

    65. 

  65. 		$creditinfo .= "'$key' : ['$value[rmbrate]','$value[rmblest]','{$credit->cType[$key]}'],";

    66. 

  66. 	}

    67. 

  67. 	$creditinfo = '{'.rtrim($creditinfo,',').'}';

    68. 

  68. 

    69. 

  69. 	require_once uTemplate::PrintEot('userpay');

    70. 

  70. 	pwOutPut();

    71. 

  71. 

    72. 

  72. } elseif ($action == 'pay') {

    73. 

  73. 

    74. 

  74. 	//* include_once pwCache::getPath(D_P.'data/bbscache/ol_config.php');

    75. 

  75. 	pwCache::getData(D_P.'data/bbscache/ol_config.php');

    76. 

  76. 	if (!$ol_onlinepay) {

    77. 

  77. 		Showmsg($ol_whycolse);

    78. 

  78. 	}

    79. 

  79. 	S::gp(array('number','method','paycredit'));

    80. 

  80. 

    81. 

  81. 	if (!isset($db_creditpay[$paycredit])) {

    82. 

  82. 		Showmsg('olpay_errortype');

    83. 

  83. 	}

    84. 

  84. 	$number = round($number,2);

    85. 

  85. 	$paynum	= max(0, $db_creditpay[$paycredit]['rmblest']);

    86. 

  86. 	if ($number < $paynum) {

    87. 

  87. 		Showmsg('olpay_numerror');

    88. 

  88. 	}

    89. 

  89. 	$creditName = $credit->cType[$paycredit];

    90. 

  90. 

    91. 

  91. 	$order_no = ($method-1).str_pad($winduid,10, "0",STR_PAD_LEFT).get_date($timestamp,'YmdHis').num_rand(5);

    92. 

  92. 	$db->update("INSERT INTO pw_clientorder SET " . S::sqlSingle(array(

    93. 

  93. 		'order_no'	=> $order_no,

    94. 

  94. 		'type'		=> 0,

    95. 

  95. 		'uid'		=> $winduid,

    96. 

  96. 		'paycredit'	=> $paycredit,

    97. 

  97. 		'price'		=> $number,

    98. 

  98. 		'number'	=> 1,

    99. 

  99. 		'date'		=> $timestamp,

    100. 

  100. 		'state'		=> 0

    101. 

  101. 	)));

    102. 

  102. 

    103. 

  103. 	if ($method == 1) {

    104. 

  104. 

    105. 

  105. 		if (!$ol_paypal || !$ol_paypalcode) {

    106. 

  106. 			Showmsg('olpay_paypalerror');

    107. 

  107. 		}

    108. 

  108. 		$url  = "https://www.paypal.com/cgi-bin/webscr?";

    109. 

  109. 		$para = array(

    110. 

  110. 			'cmd'			=> '_xclick',

    111. 

  111. 			'invoice'		=> $order_no,

    112. 

  112. 			'business'		=> $ol_paypal,

    113. 

  113. 			'item_name'		=> getLangInfo('olpay', "olpay_0_title", array('order_no' => $order_no)),

    114. 

  114. 			'item_number'	=> 'phpw*',

    115. 

  115. 			'amount'		=> $number,

    116. 

  116. 			'no_shipping'	=> 0,

    117. 

  117. 			'no_note'		=> 1,

    118. 

  118. 			'currency_code'	=> 'CNY',

    119. 

  119. 			'bn'			=> 'phpwind',

    120. 

  120. 			'charset'		=> $db_charset

    121. 

  121. 		);

    122. 

  122. 		foreach ($para as $key => $value) {

    123. 

  123. 			$url .= $key."=".urlencode($value)."&";

    124. 

  124. 		}

    125. 

  125. 		ObHeader($url);

    126. 

  126. 

    127. 

  127. 	} elseif ($method == 2) {

    128. 

  128. 

    129. 

  129. 		if (!$ol_payto) {

    130. 

  130. 			Showmsg('olpay_alipayerror');

    131. 

  131. 		}

    132. 

  132. 		require_once(R_P.'require/onlinepay.php');

    133. 

  133. 		$olpay = new OnlinePay($ol_payto);

    134. 

  134. 		ObHeader($olpay->alipayurl($order_no, $number, 0));

    135. 

  135. 

    136. 

  136. 	} elseif ($method == 3) {//fix by noizy

    137. 

  137. 

    138. 

  138. 		if (!$ol_99bill || !$ol_99billcode) {

    139. 

  139. 			Showmsg('olpay_pay99error');

    140. 

  140. 		}

    141. 

  141. 		strlen($ol_99bill) == 11 && $ol_99bill .= '01';

    142. 

  142. 		//require_once(R_P.'require/header.php');

    143. 

  143. 		!$db_rmbrate && $db_rmbrate=10;

    144. 

  144. 		$para = array(

    145. 

  145. 			'inputCharset'		=> ($db_charset == 'gbk' ? 2 : 1),

    146. 

  146. 			'pageUrl'			=> "{$db_bbsurl}/pay99bill.php",

    147. 

  147. 			'version'			=> 'v2.0',

    148. 

  148. 			'language'			=> 1,

    149. 

  149. 			'signType'			=> 1,

    150. 

  150. 			'merchantAcctId'	=> $ol_99bill,

    151. 

  151. 			'payerName'			=> $windid,

    152. 

  152. 			'orderId'			=> $order_no,

    153. 

  153. 			'orderAmount'		=> ($number*100),

    154. 

  154. 			'orderTime'			=> get_date($timestamp,'YmdHis'),

    155. 

  155. 			'productName'		=> getLangInfo('other','userpay_content'),

    156. 

  156. 			'productNum'		=> ($number*$db_rmbrate),

    157. 

  157. 			'payType'			=> '00',

    158. 

  158. 			'redoFlag'			=> 1

    159. 

  159. 		);

    160. 

  160. 		$signMsg = $inputMsg = '';

    161. 

  161. 		foreach ($para as $key => $value) {

    162. 

  162. 			$value = trim($value);

    163. 

  163. 			if (strlen($value) > 0) {

    164. 

  164. 				$signMsg .= "$key=$value&";

    165. 

  165. 				$inputMsg .= "<input type=\"hidden\" name=\"$key\" value=\"$value\" />";

    166. 

  166. 			}

    167. 

  167. 		}

    168. 

  168. 		$signMsg = strtoupper(md5($signMsg."key=$ol_99billcode"));

    169. 

  169. 		require_once uTemplate::PrintEot('userpay');

    170. 

  170. 		pwOutPut();

    171. 

  171. 

    172. 

  172. 	} elseif ($method == 4) {

    173. 

  173. 

    174. 

  174. 		if (!$ol_tenpay || !$ol_tenpaycode) {

    175. 

  175. 			Showmsg('olpay_tenpayerror');

    176. 

  176. 		}

    177. 

  177. 		$strBillDate = get_date($timestamp,'Ymd');

    178. 

  178. 		$strSpBillNo = substr($order_no,-10);

    179. 

  179. 		$strTransactionId = $ol_tenpay . $strBillDate . $strSpBillNo;

    180. 

  180. 		$db->update("UPDATE pw_clientorder SET order_no=".S::sqlEscape($strTransactionId)."WHERE order_no=".S::sqlEscape($order_no));

    181. 

  181. 

    182. 

  182. //		$url  = "https://www.tenpay.com/cgi-bin/v1.0/pay_gate.cgi?";

    183. 

  183. 		$url  = "http://pay.phpwind.net/pay/create_payurl.php?";

    184. 

  184. 		$para = array(

    185. 

  185. 			'cmdno'				=> '1',

    186. 

  186. 			'date'				=> $strBillDate,

    187. 

  187. 			'bargainor_id'		=> $ol_tenpay,

    188. 

  188. 			'transaction_id'	=> $strTransactionId,

    189. 

  189. 			'sp_billno'			=> $strSpBillNo,

    190. 

  190. 			'total_fee'			=> $number*100,

    191. 

  191. 			'bank_type'			=> 0,

    192. 

  192. 			'fee_type'			=> 1,

    193. 

  193. 			'return_url'		=> "{$db_bbsurl}/tenpay.php",

    194. 

  194. 			'attach'			=> 'my_magic_string',

    195. 

  195. 			'spbill_create_ip'	=> $onlineip

    196. 

  196. 		);

    197. 

  197. 		$arg = '';

    198. 

  198. 		foreach ($para as $key => $value) {

    199. 

  199. 			if ($value) {

    200. 

  200. 				$url .= "$key=".urlencode($value)."&";

    201. 

  201. 				$arg .= "$key=$value&";

    202. 

  202. 			}

    203. 

  203. 		}

    204. 

  204. 		$strSign = strtoupper(md5($arg."key=$ol_tenpaycode"));

    205. 

  205. 		$url .= "desc=".urlencode(getLangInfo('olpay', "olpay_0_title", array('order_no' => $strTransactionId)))."&sign=$strSign";

    206. 

  206. 		ObHeader($url);

    207. 

  207. 	}

    208. 

  208. } elseif ($action == 'list') {

    209. 

  209. 

    210. 

  210. 	S::gp(array('state'));

    211. 

  211. 	$sqladd = "WHERE uid=" . S::sqlEscape($winduid) . ' AND type=0';

    212. 

  212. 	if ($state == 1) {

    213. 

  213. 		$sqladd .= " AND state<2";

    214. 

  214. 	} elseif ($state == 2) {

    215. 

  215. 		$sqladd .= " AND state=2";

    216. 

  216. 	}

    217. 

  217. 	(!is_numeric($page) || $page < 1) && $page = 1;

    218. 

  218. 	$limit = S::sqlLimit(($page-1)*$db_perpage,$db_perpage);

    219. 

  219. 	$rt    = $db->get_one("SELECT COUNT(*) AS sum FROM pw_clientorder $sqladd");

    220. 

  220. 	$pages = numofpage($rt['sum'],$page,ceil($rt['sum']/$db_perpage),"userpay.php?action=list&state=$state&");

    221. 

  221. 

    222. 

  222. 	$query = $db->query("SELECT * FROM pw_clientorder $sqladd ORDER BY date DESC $limit");

    223. 

  223. 	while ($rt = $db->fetch_array($query)) {

    224. 

  224. 		!$rt['paycredit'] && $rt['paycredit'] = 'currency';

    225. 

  225. 		$rt['date'] = get_date($rt['date']);

    226. 

  226. 		$orderdb[] = $rt;

    227. 

  227. 	}

    228. 

  228. 	//require_once(R_P.'require/header.php');

    229. 

  229. 	require_once uTemplate::PrintEot('userpay');

    230. 

  230. 	pwOutPut();

    231. 

  231. 

    232. 

  232. } elseif ($action == 'log') {

    233. 

  233. 

    234. 

  234. 	S::gp(array('ctype','stime','etime','logtype','page'));

    235. 

  235. 	$page = (int)$page;

    236. 

  236. 	$sqladd = " uid=".S::sqlEscape($winduid);

    237. 

  237. 	$urladd = '';

    238. 

  238. 	if ($ctype) {

    239. 

  239. 		$sqladd .= " AND ctype=".S::sqlEscape($ctype);

    240. 

  240. 		$urladd .= "ctype=$ctype&";

    241. 

  241. 	}

    242. 

  242. 	if ($stime) {

    243. 

  243. 		$stimeView = $stime;

    244. 

  244. 		!is_numeric($stime) && $stime = PwStrtoTime($stime);

    245. 

  245. 		$sqladd .= " AND adddate>".S::sqlEscape($stime);

    246. 

  246. 		$urladd .= "stime=$stime&";

    247. 

  247. 	}

    248. 

  248. 	if ($etime) {

    249. 

  249. 		$etimeView = $etime;

    250. 

  250. 		!is_numeric($etime) && $etime = PwStrtoTime($etime);

    251. 

  251. 		if ($etime == $stime) $etime = $etime + 86400;

    252. 

  252. 		$sqladd .= " AND adddate<".S::sqlEscape($etime);

    253. 

  253. 		$urladd .= "etime=$etime&";

    254. 

  254. 	}

    255. 

  255. 	if ($logtype) {

    256. 

  256. 		$sqladd .= " AND logtype".(strpos($logtype,'_') !== false ? "=".S::sqlEscape($logtype) : " LIKE ".S::sqlEscape("$logtype%"));

    257. 

  257. 		$urladd .= "logtype=$logtype&";

    258. 

  258. 	}

    259. 

  259. 	require_once(R_P.'require/forum.php');

    260. 

  260. 	require_once GetLang('logtype');

    261. 

  261. 

    262. 

  262. 	(!is_numeric($page) || $page<1) && $page = 1;

    263. 

  263. 	$limit = S::sqlLimit(($page-1)*$db_perpage,$db_perpage);

    264. 

  264. 	$rt	= $db->get_one("SELECT COUNT(*) AS sum FROM pw_creditlog WHERE $sqladd");

    265. 

  265. 	$pages = numofpage($rt['sum'],$page,ceil($rt['sum']/$db_perpage),"userpay.php?action=log&$urladd");

    266. 

  266. 

    267. 

  267. 	$query = $db->query("SELECT * FROM pw_creditlog WHERE $sqladd ORDER BY id DESC $limit");

    268. 

  268. 	while ($rt = $db->fetch_array($query)) {

    269. 

  269. 		$rt['adddate'] = get_date($rt['adddate']);

    270. 

  270. 		$rt['descrip'] = descriplog($rt['descrip']);

    271. 

  271. 		$logdb[] = $rt;

    272. 

  272. 	}

    273. 

  273. 	//require_once(R_P.'require/header.php');

    274. 

  274. 	require_once uTemplate::PrintEot('userpay');

    275. 

  275. 	pwOutPut();

    276. 

  276. 

    277. 

  277. } elseif ($action == 'virement') {

    278. 

  278. 

    279. 

  279. 	$vm_credit = array();

    280. 

  280. 	foreach ($db_creditpay as $key => $value) {

    281. 

  281. 		if ($value['virement']) {

    282. 

  282. 			$vm_credit[] = $key;

    283. 

  283. 		}

    284. 

  284. 	}

    285. 

  285. 	empty($vm_credit) && Showmsg('virement_closed');

    286. 

  286. 

    287. 

  287. 	if (empty($_POST['step'])) {

    288. 

  288. 			$db_virelimit = (int) $db_virelimit;

    289. 

  289. 		//require_once(R_P.'require/header.php');

    290. 

  290. 			require_once uTemplate::PrintEot('userpay');

    291. 

  291. 			pwOutPut();

    292. 

  292. 

    293. 

  293. 	} else {

    294. 

  294. 

    295. 

  295. 		PostCheck();

    296. 

  296. 		S::gp(array('pwuser','pwpwd','vmcredit','paynum'),'P');

    297. 

  297. 		if (!in_array($vmcredit,$vm_credit)) {

    298. 

  298. 			Showmsg('undefined_action');

    299. 

  299. 		}

    300. 

  300. 

    301. 

  301. 		$userService = L::loadClass('UserService', 'user'); /* @var $userService PW_UserService */

    302. 

  302. 		$touid	= $userService->getUserIdByUserName($pwuser);

    303. 

  303. 		if (!$touid) {

    304. 

  304. 			$errorname = $pwuser;

    305. 

  305. 			Showmsg('user_not_exists');

    306. 

  306. 		}

    307. 

  307. 		$paynum = (int)$paynum;

    308. 

  308. 		if ($paynum <= 0) {

    309. 

  309. 			Showmsg('illegal_nums');

    310. 

  310. 		}

    311. 

  311. 		if (!$pwpwd) {

    312. 

  312. 			Showmsg('empty_password');

    313. 

  313. 		}

    314. 

  314. 		if ($db_virelimit && $paynum < $db_virelimit) {

    315. 

  315. 			Showmsg('currency_limit');

    316. 

  316. 		}

    317. 

  317. 		/*

    318. 

  318. 		$lockfile = D_P.'data/bbscache/lock_userpay.txt';

    319. 

  319. 		$fp = fopen($lockfile,'wb+');

    320. 

  320. 		flock($fp,LOCK_EX);

    321. 

  321. 		*/

    322. 

  322. 		$rt = $userService->get($winduid);

    323. 

  323. 		if (md5($pwpwd) != $rt['password']) {

    324. 

  324. 			Showmsg('password_error');

    325. 

  325. 		}

    326. 

  326. 		if (procLock('userpay',$winduid)) {

    327. 

  327. 

    328. 

  328. 			$tax = round($paynum * $db_virerate/100);

    329. 

  329. 			$needpay = $paynum + $tax;

    330. 

  330. 			if ($credit->get($winduid,$vmcredit) < $needpay) {

    331. 

  331. 				procUnLock('userpay',$winduid);

    332. 

  332. 				Showmsg('noenough_currency');

    333. 

  333. 			}

    334. 

  334. 			$credit->addLog('main_virefrom',array($vmcredit => -$needpay),array(

    335. 

  335. 				'uid'		=> $winduid,

    336. 

  336. 				'username'	=> $windid,

    337. 

  337. 				'ip'		=> $onlineip,

    338. 

  338. 				'toname'	=> stripslashes($pwuser)

    339. 

  339. 			));

    340. 

  340. 			$credit->addLog('main_vireto',array($vmcredit => $paynum),array(

    341. 

  341. 				'uid'		=> $touid,

    342. 

  342. 				'username'	=> stripslashes($pwuser),

    343. 

  343. 				'ip'		=> $onlineip,

    344. 

  344. 				'fromname'	=> $windid

    345. 

  345. 			));

    346. 

  346. 			$credit->set($winduid,$vmcredit,-$needpay,false);

    347. 

  347. 			$credit->set($touid,$vmcredit,$paynum,false);

    348. 

  348. 			$credit->runsql();

    349. 

  349. 

    350. 

  350. 			//fclose($fp);

    351. 

  351. 

    352. 

  352. 			M::sendNotice(

    353. 

  353. 				array($pwuser),

    354. 

  354. 				array(

    355. 

  355. 					'title' => getLangInfo('writemsg','vire_title'),

    356. 

  356. 					'content' => getLangInfo('writemsg','vire_content',array(

    357. 

  357. 						'windid'	=> $windid,

    358. 

  358. 						'paynum'	=> $paynum,

    359. 

  359. 						'cname'		=> $credit->cType[$vmcredit]

    360. 

  360. 					)),

    361. 

  361. 				)

    362. 

  362. 			);

    363. 

  363. 

    364. 

  364. 			procUnLock('userpay',$winduid);

    365. 

  365. 			refreshto('userpay.php?action=virement',getLangInfo('msg','virement_success'));

    366. 

  366. 		} else {

    367. 

  367. 			Showmsg('virement_lock');

    368. 

  368. 		}

    369. 

  369. 	}

    370. 

  370. } elseif ($action == 'change') {

    371. 

  371. 

    372. 

  372. 	require_once(R_P.'require/credit.php');

    373. 

  373. 	$rt = $db->get_one("SELECT db_value FROM pw_config WHERE db_name='jf_A'");

    374. 

  374. 	$jf_A = $rt['db_value'] ? unserialize($rt['db_value']) : array();

    375. 

  375. 

    376. 

  376. 	if (empty($_POST['step'])) {

    377. 

  377. 

    378. 

  378. 		$creditdb = $credit->get($winduid,'CUSTOM');

    379. 

  379. 		$jf = array();

    380. 

  380. 		foreach ($jf_A as $key => $value) {

    381. 

  381. 			if ($value[2]) {

    382. 

  382. 				list($j_1,$j_2) = explode('_',$key);

    383. 

  383. 				$jf[$key] = array($credit->cType[$j_1],$credit->cType[$j_2],$value[0],$value[1]);

    384. 

  384. 			}

    385. 

  385. 		}

    386. 

  386. 		!$jf && Showmsg('jfchange_empty');

    387. 

  387. 

    388. 

  388. 		require_once uTemplate::PrintEot('userpay');

    389. 

  389. 		pwOutPut();

    390. 

  390. 

    391. 

  391. 	} else {

    392. 

  392. 		PostCheck();

    393. 

  393. 		S::gp(array('type','change'));

    394. 

  394. 		if (!$jf_A[$type] || !$jf_A[$type][2]) {

    395. 

  395. 			Showmsg('bk_credit_type_error');

    396. 

  396. 		}

    397. 

  397. 		$change = (int)$change;

    398. 

  398. 		if (!is_numeric($change) || $change <= 0) Showmsg('bk_credit_fillin_error');

    399. 

  399. 		$change%$jf_A[$type][0] != 0 && Showmsg('change_error');

    400. 

  400. 

    401. 

  401. 		list($sell,$buy) = explode('_',$type);

    402. 

  402. 		$credit1 = $change;

    403. 

  403. 		$credit2 = intval($change/$jf_A[$type][0]*$jf_A[$type][1]);

    404. 

  404. 		/*

    405. 

  405. 		$db->query("LOCK TABLES pw_memberdata WRITE,pw_membercredit WRITE");

    406. 

  406. 		$lockfile = D_P.'data/bbscache/lock_profile.txt';

    407. 

  407. 		$fp = fopen($lockfile,'wb+');

    408. 

  408. 		flock($fp,LOCK_EX);

    409. 

  409. 		*/

    410. 

  410. 		if (procLock('credit_change',$winduid)) {

    411. 

  411. 

    412. 

  412. 			if ($credit1 > $credit->get($winduid,$sell)) {

    413. 

  413. 				procUnLock('credit_change',$winduid);

    414. 

  414. 				Showmsg('bk_credit_change_error');

    415. 

  415. 			}

    416. 

  416. 			$credit->addLog('main_changereduce',array($sell => -$credit1),array(

    417. 

  417. 				'uid'		=> $winduid,

    418. 

  418. 				'username'	=> $windid,

    419. 

  419. 				'ip'		=> $onlineip,

    420. 

  420. 				'tocname'	=> $credit->cType[$buy]

    421. 

  421. 			));

    422. 

  422. 			$credit->addLog('main_changeadd',array($buy => $credit2),array(

    423. 

  423. 				'uid'		=> $winduid,

    424. 

  424. 				'username'	=> $windid,

    425. 

  425. 				'ip'		=> $onlineip,

    426. 

  426. 				'fromcname'	=> $credit->cType[$sell]

    427. 

  427. 			));

    428. 

  428. 			$credit->sets($winduid,array($sell => -$credit1, $buy => $credit2));

    429. 

  429. 

    430. 

  430. 			procUnLock('credit_change',$winduid);

    431. 

  431. 			//fclose($fp);

    432. 

  432. 			//$db->query("UNLOCK TABLES");

    433. 

  433. 		}

    434. 

  434. 		refreshto('userpay.php?action=change','bank_creditsuccess',1,true);

    435. 

  435. 	}

    436. 

  436. }

    437. 

  437. ?>
    438.