<?php
include "../../conn.php";
include "../../functions2.php";
header('Content-Type: application/json; charset=utf-8');
header('Strict-Transport-Security: max-age=31536000');
header('Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization');
header('Access-Control-Allow-Credentials: true');
$origin = isset($_SERVER['HTTP_ORIGIN']) ? $_SERVER['HTTP_ORIGIN'] : '';
header('Access-Control-Allow-Origin: ' . $origin);
header('vary: Origin');
date_default_timezone_set("Asia/Kolkata");
$shnunc = date("Y-m-d H:i:s");
$res = [
    'code' => 11,
    'msg' => 'Method not allowed',
    'msgCode' => 12,
    'serviceNowTime' => $shnunc,
];
$shonubody = file_get_contents("php://input");
$shonupost = json_decode($shonubody, true);
if ($_SERVER['REQUEST_METHOD'] != 'GET') {
    if (isset($shonupost['language']) && isset($shonupost['random']) && isset($shonupost['signature']) && isset($shonupost['timestamp'])) {
        $language = htmlspecialchars(mysqli_real_escape_string($conn, $shonupost['language']));
        $random = htmlspecialchars(mysqli_real_escape_string($conn, $shonupost['random']));
        $signature = htmlspecialchars(mysqli_real_escape_string($conn, $shonupost['signature']));
        $shonustr = '{"language":'.$language.',"random":"'.$random.'"}';
        $shonusign = strtoupper(md5($shonustr));
        if ($shonusign == $signature) {
            $bearer = explode(" ", $_SERVER['HTTP_AUTHORIZATION']);
            $author = $bearer[1];
            $is_jwt_valid = is_jwt_valid($author);
            $data_auth = json_decode($is_jwt_valid, 1);
            if ($data_auth['status'] === 'Success') {
                $sesquery = "SELECT akshinak
                    FROM shonu_subjects
                    WHERE akshinak = '$author'";
                $sesresult = $conn->query($sesquery);
                $sesnum = mysqli_num_rows($sesresult);
                if ($sesnum == 1) {
                    $balquery = "SELECT motta
                        FROM shonu_kaichila
                        WHERE balakedara = ".$data_auth['payload']['id'];
                    $balresult = $conn->query($balquery);
                    $balarr = mysqli_fetch_array($balresult);
                    $data['thidGameBalanceList'][0]['vendorCode'] = 'Lottery';
                    $data['thidGameBalanceList'][0]['balance'] = (int)$balarr['motta'];
                    
                     $userId = $data_auth['payload']['id'];
                    $uid = $userId;
						$spr_url = "https://tirnga.danzio.shop/api/api/webapi/apifiles/balance.php?user={$uid}";

						$ch = curl_init();
						curl_setopt_array($ch, [
							CURLOPT_URL            => $spr_url,
							CURLOPT_RETURNTRANSFER => true,
							CURLOPT_SSL_VERIFYPEER => false,
							CURLOPT_SSL_VERIFYHOST => false,
							CURLOPT_CONNECTTIMEOUT => 10,
							CURLOPT_TIMEOUT        => 20,
							CURLOPT_FOLLOWLOCATION => true,
							CURLOPT_IPRESOLVE      => CURL_IPRESOLVE_V4,
							CURLOPT_USERAGENT      => "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
						]);

						$response = curl_exec($ch);
						$curl_error = curl_error($ch);
						$http_code  = curl_getinfo($ch, CURLINFO_HTTP_CODE);
						curl_close($ch);
                    
                    
                    
                    
                    
                    
                    $apiUrl = $API_BALANCE_URL;
                    $memberAccount = $API_MEMBER_PREFIX . $data_auth['payload']['id'] . $API_MEMBER_SUFFIX;
                    $payload = [
                        "agency_uid" => $API_AGENCY_UID,
                        "member_account" => $memberAccount,
                        "timestamp" => gmdate("Y-m-d\TH:i:s\Z"),
                        "credit_amount" => 0,
                        "currency_code" => $API_CURRENCY,
                        "language" => $API_LANGUAGE,
                        "platform" => $API_PLATFORM,
                        "home_url" => (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https://" : "http://") . $_SERVER['HTTP_HOST'],
                        "transfer_id" => uniqid("tx_")
                    ];
                    $ch = curl_init($apiUrl);
                    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
                    curl_setopt($ch, CURLOPT_POST, true);
                    curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
                    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload));
                    $apiResponse = curl_exec($ch);
                    curl_close($ch);
                    $apiData = json_decode($apiResponse, true);
                    $huiduBal = 0;
                    if (isset($apiData['code']) && $apiData['code'] == 0 && isset($apiData['payload']['after_amount'])) {
                        $huiduBal = (float)$apiData['payload']['after_amount'];
                    }
                    $data['thidGameBalanceList'][1]['vendorCode'] = 'Ar_Wallet';
                    $data['thidGameBalanceList'][1]['balance'] = 0;
                    $data['totalWithdraw'] = 0;
                    $data['totalRecharge'] = 0;
                    $res['data'] = $data;
                    $res['code'] = 0;
                    $res['msg'] = 'Succeed';
                    $res['msgCode'] = 0;
                    http_response_code(200);
                    echo json_encode($res);
                } else {
                    $res['code'] = 4;
                    $res['msg'] = 'No operation permission';
                    $res['msgCode'] = 2;
                    http_response_code(401);
                    echo json_encode($res);
                }
            } else {
                $res['code'] = 4;
                $res['msg'] = 'No operation permission';
                $res['msgCode'] = 2;
                http_response_code(401);
                echo json_encode($res);
            }
        } else {
            $res['code'] = 5;
            $res['msg'] = 'Wrong signature';
            $res['msgCode'] = 3;
            http_response_code(200);
            echo json_encode($res);
        }
    } else {
        $res['code'] = 7;
        $res['msg'] = 'Param is Invalid';
        $res['msgCode'] = 6;
        http_response_code(200);
        echo json_encode($res);
    }
} else {
    http_response_code(405);
    echo json_encode($res);
}
?>