<?PHP
function mssql_real_escape_string($str) { return str_replace("'","''",$str); }
$item = mssql_real_escape_string($_REQUEST["item"]);
$fromnum = mssql_real_escape_string($_REQUEST["fromnum"]);
$extid = mssql_real_escape_string($_REQUEST["extid"]);
$mobio_remote_addrs = array("87.120.176.216", "194.12.244.114");
$servID = 1101;
$db_serv = '10.0.2.10';
$db_user = 'sa';
$db_pass = 'password';
$db_name = 'MuOnline';
$credits_to_add = '500';
if(in_array($_SERVER['REMOTE_ADDR'], $mobio_remote_addrs)) {
$sms_reply = 'Greshka. Spazvaite to4no instrukciite';
$conn = mssql_connect($db_serv, $db_user, $db_pass);
if($conn) {
mssql_select_db($db_name);
$res = mssql_query("SELECT credits FROM MEMB_CREDITS WHERE memb___id='$item'");
if(mssql_num_rows($res)>0) {
mssql_query("UPDATE MEMB_CREDITS SET credits=credits+'$credits_to_add' WHERE memb___id='$item'");
}else{
mssql_query("INSERT INTO MEMB_CREDITS (memb___id, credits) VALUES('$item', '$credits_to_add')");
}
$res = mssql_query("SELECT credits FROM MEMB_CREDITS WHERE memb___id='$item'");
if(mssql_num_rows($res)>0) {
$row = mssql_fetch_row($res);
$sms_reply = "Vashite krediti sa uspeshno zakupeni. Imate {$row[0]} crediti.";
}
}
file("http://mobio.bg/paynotify/pnsendsms.php?servID=$servID&tonum=$fromnum&extid=$extid&message=".urlencode($sms_reply));
}
?>