FAKE FR13NDS TOOLS

PRIV8

XRELAX SECURITY TEAM !!

	: 216.73.216.142
	: 94.229.79.146 / www.web-designs-uk.co.uk
	: Linux server.web-designs-uk.co.uk 3.10.0-1127.18.2.el7.x86_64 #1 SMP Sun Jul 26 15:27:06 UTC 2020 x86_64
: /home/webdesignsukco/public_html/
files >> /home/webdesignsukco/public_html/ConfirmPurchase.php
 <?php
session_start();
/*==================================================================
 PayPal Express Checkout Call
 ===================================================================
*/
// Check to see if the Request object contains a variable named 'token' 
$token = "";
if (isset($_REQUEST['token']))
{
  $token = $_REQUEST['token'];
  
}

// If the Request object contains the variable 'token' then it means that the user is coming from PayPal site.  
if ( $token != "" )
{

  require_once ("Pages/paypalfunctions.php");

  /*
  '------------------------------------
  ' Calls the GetExpressCheckoutDetails API call
  '
  ' The GetShippingDetails function is defined in PayPalFunctions.jsp
  ' included at the top of this file.
  '-------------------------------------------------
  */
  

  $resArray = GetShippingDetails( $token );
  $ack = strtoupper($resArray["ACK"]);
  if( $ack == "SUCCESS" || $ack == "SUCESSWITHWARNING") 
  {
    /*
    ' The information that is returned by the GetExpressCheckoutDetails call should be integrated by the partner into his Order Review 
    ' page    
    */
    $email        = $resArray["EMAIL"]; // ' Email address of payer.
    $_SESSION['PayerEmail'] = $email;
    $_SESSION['SaleArr']['SaleEmail'] = $email ;
    $payerId      = $resArray["PAYERID"]; // ' Unique PayPal customer account identification number.
    $payerStatus    = $resArray["PAYERSTATUS"]; // ' Status of payer. Character length and limitations: 10 single-byte alphabetic characters.
    $salutation     = $resArray["SALUTATION"]; // ' Payer's salutation.
    $firstName      = $resArray["FIRSTNAME"]; // ' Payer's first name.
    
    $middleName     = $resArray["MIDDLENAME"]; // ' Payer's middle name.
    $lastName     = $resArray["LASTNAME"]; // ' Payer's last name.

    $suffix       = $resArray["SUFFIX"]; // ' Payer's suffix.
    $cntryCode      = $resArray["COUNTRYCODE"]; // ' Payer's country of residence in the form of ISO standard 3166 two-character country codes.
    
    $business     = $resArray["BUSINESS"]; // ' Payer's business name.
    $shipToName     = $resArray["PAYMENTREQUEST_0_SHIPTONAME"]; // ' Person's name associated with this address.
    $_SESSION['SaleArr']['SaleName'] = $shipToName;
    $shipToStreet   = $resArray["PAYMENTREQUEST_0_SHIPTOSTREET"]; // ' First street address.
    $_SESSION['SaleArr']['SaleAddOne'] = $shipToStreet;
    $shipToStreet2    = $resArray["PAYMENTREQUEST_0_SHIPTOSTREET2"]; // ' Second street address.
    $_SESSION['SaleArr']['SaleAddTwo'] = $shipToStreet2;
    $shipToCity     = $resArray["PAYMENTREQUEST_0_SHIPTOCITY"]; // ' Name of city.
    $_SESSION['SaleArr']['City'] = $shipToCity  ;
    $shipToState    = $resArray["PAYMENTREQUEST_0_SHIPTOSTATE"]; // ' State or province
    $_SESSION['SaleArr']['County'] = $shipToState;
    $shipToCntryCode  = $resArray["PAYMENTREQUEST_0_SHIPTOCOUNTRYCODE"]; // ' Country code. 
    $_SESSION['SaleArr']['Country'] = $shipToCntryCode;
    $shipToZip      = $resArray["PAYMENTREQUEST_0_SHIPTOZIP"]; // ' U.S. Zip code or other country-specific postal code.
    $_SESSION['SaleArr']['PostCode'] = $shipToZip;
    $addressStatus    = $resArray["ADDRESSSTATUS"]; // ' Status of street address on file with PayPal   
    $invoiceNumber    = $resArray["INVNUM"]; // ' Your own invoice or tracking number, as set by you in the element of the same name in SetExpressCheckout request .

    $phonNumber     = $resArray["PHONENUM"]; // ' Payer's contact telephone number. Note:  PayPal returns a contact telephone number only if your Merchant account profile settings require that the buyer enter one. 
    $_SESSION['SaleArr']['PhoneNo'] = $phonNumber;
  } 
  else  
  {
    //Display a user friendly Error on the page using any of the following error information returned by PayPal
    $ErrorCode = urldecode($resArray["L_ERRORCODE0"]);
    $ErrorShortMsg = urldecode($resArray["L_SHORTMESSAGE0"]);
    $ErrorLongMsg = urldecode($resArray["L_LONGMESSAGE0"]);
    $ErrorSeverityCode = urldecode($resArray["L_SEVERITYCODE0"]);
    
    echo "GetExpressCheckoutDetails API call failed. ";
    echo "Detailed Error Message: " . $ErrorLongMsg;
    echo "Short Error Message: " . $ErrorShortMsg;
    echo "Error Code: " . $ErrorCode;
    echo "Error Severity Code: " . $ErrorSeverityCode;
  }
}
    
?>




<?php
if(isset($_SESSION['Basket'])
  && !empty($_SESSION['Basket'])){
 
  foreach($_SESSION['Basket'] as $Key => $Item){
$results = $connecDB->query("SELECT * FROM Products WHERE ProductID = '$Item' AND ProductLive = '1'");
    while($row = $results->fetch_array()){
    $Name = $row['ProductName'];
    $Cost = $row['ProductPrice'];
    $Thumb = $row['ProductThumb'];
    }
?>
<?php echo $Name; ?>
<?php echo $_SESSION['Qty'][$Key]; ?>
£<?php echo $Cost*$_SESSION['Qty'][$Key]; ?>
<?php
}
?>

<?php echo $_SESSION['Discount']; ?>

<?php $_SESSION['Shipping'] = 0; ?>


£<span id="TotalPrice"><?php INCLUDE'Pages/CalculateTotal.php'; ?></span>

<!-- Link to Click to Pay: ReviewPurchase.php?PayPalCK=S2315215bv2yhgv542hdem9 -->