MAINHACK

Viewing / Editing File: verify_this.php

<?php
header("Content-Type: application/json");
date_default_timezone_set('UTC');

$exttrid = $_GET['exttrid'] ?? null;
if (!$exttrid) {
    http_response_code(400);
    echo json_encode(["error" => "Missing exttrid"]);
    exit;
}

// TODO: MOVE these to env vars and ROTATE them since they were posted publicly
$secret_key = "dXYiHBO7YhvKMtq/MDhLMHTEDwF6U0EcpMPe7jjLwWsej+t+L5FwvJ3u+OR84IIAu6w2QOp6bMghhVDQ6iJF+A==";
$Client_Token = "Cb1FP/Qi5dTSviC9Les9ckO+H7y/CJFBlL9gP7nnvTsb38V8rAmNCPtbxDXAnavgU9m4t6fy9JrECM1UmIhCig==";
$service_id   = "4788";

$url = "https://orchard-api.anmgw.com/checkTransaction";

// Build the EXACT payload required by AppsNmobile for status check
$payload = [
    "exttrid"    => $exttrid,
    "trans_type" => "CTM",
    "service_id" => $service_id
];

// Encode ONCE and sign THIS EXACT string
$payload_json = json_encode($payload, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);

// HMAC-SHA256 as lowercase hex (hash_hmac default) over the JSON string
$signature = hash_hmac('SHA256', $payload_json, $secret_key);

// Required headers
$headers = [
    "Authorization: {$Client_Token}:{$signature}",
    "Content-Type: application/json"
];

// cURL request
$ch = curl_init($url);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => $headers,
    CURLOPT_POSTFIELDS     => $payload_json,
    CURLOPT_TIMEOUT        => 30,
]);
$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$err      = curl_error($ch);
curl_close($ch);

// Handle response
if ($err) {
    echo json_encode(["error" => "curl_error", "detail" => $err]);
    exit;
}

$data = json_decode($response, true);

// Normalize to your front-end’s expectation: { status: "SUCCESS" | "FAILED" | "PENDING" }
$status = "PENDING";
if (is_array($data)) {
    $msg = isset($data["message"]) ? strtoupper($data["message"]) : "";
    // Adjust these heuristics to match the exact fields AppsNmobile returns to you
    if ($msg === "SUCCESSFUL" || $msg === "SUCCESS") {
        $status = "SUCCESS";
    } elseif (strpos($msg, "FAIL") !== false || $msg === "FAILED") {
        $status = "FAILED";
    }
}

echo json_encode([
    "http"   => $httpCode,
    "status" => $status,
    "raw"    => $data
]);

Cancel / Back

[ MAINHACK ]

Viewing / Editing File: verify_this.php

Server Info

System Features

User Info