<?

include("dbase.php");
include("settings.php");

//The value is the Security Code generated from the IPN section of your AlertPay account. Please change it to yours.
define("IPN_SECURITY_CODE", "XXXXXXXXXXXXXXX");
define("MY_MERCHANT_EMAIL", "example@example.com");


//Setting information about the transaction
$receivedSecurityCode = urldecode($_POST['ap_securitycode']);
$receivedMerchantEmailAddress = urldecode($_POST['ap_merchant']);
$customerEmailAddress = urldecode($_POST['ap_custemailaddress']);
$transactionStatus = urldecode($_POST['ap_status']);
$testModeStatus = urldecode($_POST['ap_test']);
$netAmount = urldecode($_POST['ap_amount']);

if ($receivedMerchantEmailAddress != MY_MERCHANT_EMAIL) {
// The data was not meant for the business profile under this email address.
// Take appropriate action
}
else {
//Check if the security code matches
if ($receivedSecurityCode != IPN_SECURITY_CODE) {
// The data is NOT sent by AlertPay.
// Take appropriate action.
}
else {
if ($transactionStatus == "Success") {
if ($testModeStatus == "1") {
// Since Test Mode is ON, no transaction reference number will be returned.
// Your site is currently being integrated with AlertPay IPN for TESTING PURPOSES
// ONLY. Don't store any information in your production database and
// DO NOT process this transaction as a real order.
}
else {
// This REAL transaction is complete and the amount was paid successfully.
// Process the order here by cross referencing the received data with your database.
// Check that the total amount paid was the expected amount.
// Check that the amount paid was for the correct service.
// Check that the currency is correct.
// ie: if ($totalAmountReceived == 50) ... etc ...
// After verification, update your database accordingly.

include("dbase.php");
$result=mysql_query("SELECT user,money from chatusers WHERE email='$customerEmailAddress' LIMIT 1");
$row = mysql_fetch_assoc($result);
$username=$row['user'];
$money=$row['money'];

$money += $netAmount;
$money = number_format($money, 2, '.', '');

$sql="Update chatusers set money=$money where email='$customerEmailAddress'";
$res=mysql_query($sql);
mysql_query("insert into payments (ammount, details) values ('".$netAmount."', '$username')");

}
}
else {
// Transaction was cancelled or an incorrect status was returned.
// Take appropriate action.
}
}
}
?>