Maintenance Mode

$cookieLifetime, 'path' => '/', 'domain' => '', 'secure' => isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on', 'httponly' => true, 'samesite' => 'Lax' ]); if (session_status() === PHP_SESSION_NONE) { session_start(); } require_once __DIR__ . '/config.php'; /** * 1. AMBIL DETAIL PENGATURAN SITUS (site_settings) */ $stmtSite = $pdo->query("SELECT * FROM site_settings LIMIT 1"); $siteSettings = $stmtSite->fetch() ?: []; // CEK MODE MAINTENANCE if (!empty($siteSettings['maintenance_mode']) && (int)$siteSettings['maintenance_mode'] === 1) { http_response_code(530); $mMsg = !empty($siteSettings['maintenance_message']) ? htmlspecialchars($siteSettings['maintenance_message']) : 'Kami sedang melakukan pemeliharaan sistem rutin. Silahkan kembali lagi nanti.'; echo 'Maintenance Mode

Sistem Dalam Pemeliharaan

' . $mMsg . '

'; exit; } /** * Memeriksa status login pengguna via Session atau Cookie Remember Me */ function checkUserSession(PDO $pdo): ?array { if (isset($_SESSION['user_id']) && !empty($_SESSION['user_id'])) { $stmt = $pdo->prepare("SELECT id, username, email, phone_number, saldo, poin, user_type, referral_code, status FROM users WHERE id = :id LIMIT 1"); $stmt->execute([':id' => $_SESSION['user_id']]); $user = $stmt->fetch(); if ($user && $user['status'] === 'aktif') { return $user; } } if (!empty($_COOKIE['pusatchip_remember'])) { $cookieValue = $_COOKIE['pusatchip_remember']; $parts = explode(':', $cookieValue); if (count($parts) === 2) { [$selector, $validator] = $parts; $stmt = $pdo->prepare(" SELECT t.user_id, t.token_hash, u.id, u.username, u.email, u.phone_number, u.saldo, u.poin, u.user_type, u.referral_code, u.status FROM user_remember_tokens t JOIN users u ON t.user_id = u.id WHERE t.selector = :selector AND t.expires_at > NOW() LIMIT 1 "); $stmt->execute([':selector' => $selector]); $data = $stmt->fetch(); if ($data && $data['status'] === 'aktif') { $calcHash = hash('sha256', $validator); if (hash_equals($data['token_hash'], $calcHash)) { $_SESSION['user_id'] = (int)$data['id']; $up = $pdo->prepare("UPDATE users SET last_login_at = NOW() WHERE id = :id"); $up->execute([':id' => $data['id']]); return $data; } } } setcookie('pusatchip_remember', '', time() - 3600, '/', '', isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on', true); } return null; } // PERBAIKAN: MENDUKUNG TRANSAKSI GUEST (JIKA TDK LOGIN, $currentUser BERISI NULL) $currentUser = checkUserSession($pdo); $isGuest = ($currentUser === null); /** * Helper: Mencatat Log Transaksi Penggunaan Saldo ke file log-transaksi.txt */ function logSaldoTransaction(array $logDetails): void { try { $logFile = __DIR__ . '/log-transaksi.txt'; $timestamp = date('Y-m-d H:i:s') . ' WIB'; $divider = str_repeat('=', 75); $logText = "{$divider}\n"; $logText .= "[LOG TRANSAKSI SALDO] - {$timestamp}\n"; $logText .= "{$divider}\n"; $logText .= "TRX ID : " . ($logDetails['trx_id'] ?? '-') . "\n"; $logText .= "REF ID : " . ($logDetails['ref_id'] ?? '-') . "\n"; $logText .= "PEMBELI : " . ($logDetails['user_info'] ?? 'GUEST') . "\n"; $logText .= "PRODUK : " . ($logDetails['product_name'] ?? '-') . " (Kode: " . ($logDetails['product_code'] ?? '-') . ")\n"; $logText .= "TARGET NO : " . ($logDetails['customer_no'] ?? '-') . "\n"; $logText .= "HARGA JUAL : Rp " . number_format((float)($logDetails['total_price'] ?? 0), 2, ',', '.') . "\n"; $logText .= "HARGA VENDOR : Rp " . number_format((float)($logDetails['harga_vendor'] ?? 0), 2, ',', '.') . "\n"; $logText .= "VENDOR TUJUAN : " . strtoupper($logDetails['vendor'] ?? 'MANUAL') . "\n"; $logText .= "STATUS LOG : " . ($logDetails['status'] ?? 'PENDING') . "\n"; $logText .= "CATATAN : " . ($logDetails['message'] ?? '-') . "\n"; if (!empty($logDetails['raw_response'])) { $raw = is_array($logDetails['raw_response']) ? json_encode($logDetails['raw_response'], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES) : $logDetails['raw_response']; $logText .= "RAW RESPONSE :\n{$raw}\n"; } $logText .= "{$divider}\n\n"; @file_put_contents($logFile, $logText, FILE_APPEND | LOCK_EX); } catch (Exception $e) { // Abaikan error penulisan file log agar transaksi utama tidak gagal } } /** * Helper: Mengirimkan Notifikasi Transaksi ke Telegram Bot untuk Vendor "MANUAL" */ function sendTelegramManualNotification(PDO $pdo, array $trx, ?array $user, array $product, array $paymentMethod): void { try { $stmtVM = $pdo->prepare("SELECT chat_id, bot_token FROM vendor_manual WHERE status = 1 LIMIT 1"); $stmtVM->execute(); $vm = $stmtVM->fetch(); if ($vm && !empty($vm['bot_token']) && !empty($vm['chat_id'])) { $usernameText = $user ? $user['username'] . " (ID: " . $user['id'] . " - " . strtoupper($user['user_type']) . ")" : "GUEST (Tanpa Akun - WA: " . ($trx['guest_phone'] ?? '-') . ")"; $msg = "Halo, ada transaksi baru\n\n"; $msg .= "TRX ID: " . $trx['trx_id'] . "\n"; $msg .= "REFID: " . ($trx['ref_id'] ?? $trx['trx_id']) . "\n"; $msg .= "Pembeli: " . $usernameText . "\n"; $msg .= "Produk: " . $product['nama_produk'] . "\n"; $msg .= "Customer No: `" . $trx['customer_no'] . "`\n"; $msg .= "Harga jual: Rp " . number_format((float)$trx['harga_jual'], 0, ',', '.') . "\n"; $msg .= "Metode Bayar: " . $paymentMethod['nama_metode'] . "\n"; $msg .= "Status Payment: " . strtoupper($trx['status_payment']) . "\n"; $msg .= "Status Order: " . strtoupper($trx['status_order']) . "\n"; $msg .= "Waktu: " . date('Y-m-d H:i:s') . " WIB"; // INLINE KEYBOARD (TOMBOL KONFIRMASI DAN TOLAK) $inlineKeyboard = [ 'inline_keyboard' => [ [ ['text' => 'Konfirmasi', 'callback_data' => 'confirm_' . $trx['trx_id']], ['text' => 'Tolak', 'callback_data' => 'reject_' . $trx['trx_id']] ] ] ]; $url = "https://api.telegram.org/bot" . $vm['bot_token'] . "/sendMessage"; $postData = [ 'chat_id' => $vm['chat_id'], 'text' => $msg, 'parse_mode' => 'Markdown', 'reply_markup' => json_encode($inlineKeyboard) ]; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postData)); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_TIMEOUT, 8); curl_exec($ch); curl_close($ch); } } catch (Exception $e) { // Abaikan error cURL agar transaksi tetap berjalan lancar } } /** * Helper: Memproses Transaksi ke Vendor SABASTORE via API */ function processSabastoreTransaction(PDO $pdo, array $trx, array $product): array { try { $stmt = $pdo->query("SELECT member_code, api_key, status FROM vendor_sabastore WHERE status = 1 LIMIT 1"); $saba = $stmt->fetch(); if (!$saba || empty($saba['member_code']) || empty($saba['api_key'])) { return ['status' => false, 'message' => 'Sistem penyedia Sabastore sedang mengalami pemeliharaan rutin.', 'raw_response' => 'Config Sabastore kosong/nonaktif']; } $memberCode = $saba['member_code']; $apiKey = $saba['api_key']; $productCode = !empty($product['kode_produk_vendor']) ? $product['kode_produk_vendor'] : $product['kode_produk']; $refId = !empty($trx['ref_id']) ? $trx['ref_id'] : $trx['trx_id']; $customerNo = $trx['customer_no']; // Formula Signature API Sabastore: SHA256(member_code + api_key + ref_id) $sign = hash('sha256', $memberCode . $apiKey . $refId); $payload = [ 'member_code' => $memberCode, 'product_code' => $productCode, 'customer_no' => $customerNo, 'ref_id' => $refId, 'sign' => $sign ]; $ch = curl_init('https://api.sabastore.top/v1/transaksi'); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload)); curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_TIMEOUT, 15); $response = curl_exec($ch); $curlErr = curl_error($ch); curl_close($ch); if ($curlErr) { return ['status' => false, 'message' => 'Gagal terhubung ke penyedia layanan Sabastore.', 'raw_response' => $curlErr]; } $resData = json_decode($response, true); if (isset($resData['status_code']) && (int)$resData['status_code'] === 200 && ($resData['status'] ?? '') === 'success') { return ['status' => true, 'data' => $resData['data'] ?? [], 'raw_response' => $response]; } else { $msg = $resData['message'] ?? 'Terjadi kendala saat memproses pesanan otomatis di Sabastore.'; return ['status' => false, 'message' => 'Pesanan gagal dipproses Sabastore: ' . htmlspecialchars($msg), 'raw_response' => $response]; } } catch (Exception $e) { return ['status' => false, 'message' => 'Terjadi kesalahan sistem internal pemrosesan Sabastore.', 'raw_response' => $e->getMessage()]; } } /** * Helper: Memproses Transaksi ke Vendor WARTOPCOIN via API */ function processWartopcoinTransaction(PDO $pdo, array $trx, array $product): array { try { $stmt = $pdo->query("SELECT member_code, api_key, status FROM vendor_wartopcoin WHERE status = 1 LIMIT 1"); $wtc = $stmt->fetch(); if (!$wtc || empty($wtc['member_code']) || empty($wtc['api_key'])) { return ['status' => false, 'message' => 'Sistem penyedia Wartopcoin sedang tidak tersedia atau dalam pemeliharaan.', 'raw_response' => 'Config Wartopcoin kosong/nonaktif']; } $memberCode = $wtc['member_code']; $apiKey = $wtc['api_key']; $productCode = !empty($product['kode_produk_vendor']) ? $product['kode_produk_vendor'] : $product['kode_produk']; $refId = !empty($trx['ref_id']) ? $trx['ref_id'] : $trx['trx_id']; $customerNo = $trx['customer_no']; // Formula Signature API Wartopcoin: sha256(member_code + apikey + ref_id) $signature = hash('sha256', $memberCode . $apiKey . $refId); $payload = [ 'member_code' => $memberCode, 'ref_id' => $refId, 'product_code' => $productCode, 'customer_no' => $customerNo, 'signature' => $signature ]; $ch = curl_init('https://wartopcoin.com/api/transaksi'); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload)); curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_TIMEOUT, 20); $response = curl_exec($ch); $curlErr = curl_error($ch); curl_close($ch); if ($curlErr) { return ['status' => false, 'message' => 'Gagal terhubung ke penyedia layanan Wartopcoin: ' . $curlErr, 'raw_response' => $curlErr]; } $resData = json_decode($response, true); if (isset($resData['status']) && $resData['status'] === 'success') { return ['status' => true, 'data' => $resData['data'] ?? [], 'raw_response' => $response]; } else { $msg = $resData['message'] ?? 'Terjadi kesalahan saat memproses transaksi di Wartopcoin.'; return ['status' => false, 'message' => 'Pesanan gagal dipproses Wartopcoin: ' . htmlspecialchars($msg), 'raw_response' => $response]; } } catch (Exception $e) { return ['status' => false, 'message' => 'Terjadi kesalahan sistem internal pemrosesan Wartopcoin.', 'raw_response' => $e->getMessage()]; } } /** * PENANGANAN SELURUH ENDPOINT AJAX SIKLUS (METODE POST) */ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax'])) { header('Content-Type: application/json'); $ajaxAction = trim($_POST['ajax']); // 1. AJAX: GET NOTIFICATIONS if ($ajaxAction === 'get_notifications') { if ($isGuest || !$currentUser) { echo json_encode(['status' => 'error', 'message' => 'Silahkan login terlebih dahulu.']); exit; } $stmtNotif = $pdo->prepare(" SELECT id, judul, pesan, type, icon, url, is_read, created_at FROM notifications WHERE user_id = :user_id ORDER BY id DESC LIMIT 15 "); $stmtNotif->execute([':user_id' => $currentUser['id']]); $notifications = $stmtNotif->fetchAll(); $upNotif = $pdo->prepare("UPDATE notifications SET is_read = 1, read_at = NOW() WHERE user_id = :user_id AND is_read = 0"); $upNotif->execute([':user_id' => $currentUser['id']]); echo json_encode(['status' => 'success', 'notifications' => $notifications]); exit; } // 2. AJAX: GET BRAND DETAIL if ($ajaxAction === 'get_brand_detail') { $brandSlug = trim($_POST['slug'] ?? ''); $brandId = (int)($_POST['brand_id'] ?? 0); if ($brandId > 0) { $stmtB = $pdo->prepare("SELECT b.*, c.nama_kategori FROM brands b LEFT JOIN categories c ON b.category_id = c.id WHERE b.id = :id AND b.status = 1 LIMIT 1"); $stmtB->execute([':id' => $brandId]); } else { $stmtB = $pdo->prepare("SELECT b.*, c.nama_kategori FROM brands b LEFT JOIN categories c ON b.category_id = c.id WHERE b.slug = :slug AND b.status = 1 LIMIT 1"); $stmtB->execute([':slug' => $brandSlug]); } $brand = $stmtB->fetch(); if (!$brand) { echo json_encode(['status' => 'error', 'message' => 'Brand tidak ditemukan.']); exit; } $stmtT = $pdo->prepare("SELECT id, brand_id, nama_type, slug, img_url FROM types WHERE brand_id = :brand_id AND status = 1 ORDER BY urutan ASC, id ASC"); $stmtT->execute([':brand_id' => $brand['id']]); $types = $stmtT->fetchAll(); $stmtP = $pdo->prepare("SELECT id, brand_id, type_id, nama_produk, harga_modal, harga_umum, harga_reseller, img_url, kode_produk, kode_produk_vendor, vendor, deskripsi FROM products WHERE brand_id = :brand_id AND status = 1 ORDER BY harga_umum ASC"); $stmtP->execute([':brand_id' => $brand['id']]); $products = $stmtP->fetchAll(); $stmtPm = $pdo->prepare(" SELECT id, nama_metode, slug, kategori, provider, kode_channel, img_url, biaya_admin, biaya_persen, minimal_nominal, maksimal_nominal, is_populer, urutan FROM payment_methods WHERE status = 1 AND digunakan_untuk IN ('transaksi', 'semua') ORDER BY urutan ASC, nama_metode ASC "); $stmtPm->execute(); $paymentMethods = $stmtPm->fetchAll(); echo json_encode([ 'status' => 'success', 'brand' => $brand, 'types' => $types, 'products' => $products, 'payment_methods' => $paymentMethods, 'user_type' => $currentUser['user_type'] ?? 'umum', 'is_guest' => $isGuest ]); exit; } // 3. AJAX: CREATE ORDER (PROSES PEMBUATAN TRANSAKSI BARU) if ($ajaxAction === 'create_order') { $productId = (int)($_POST['product_id'] ?? 0); $paymentMethodId = (int)($_POST['payment_method_id'] ?? 0); $userIdTarget = trim($_POST['user_id_target'] ?? ''); $zoneIdTarget = trim($_POST['zone_id_target'] ?? ''); $guestPhone = trim($_POST['guest_phone'] ?? ''); if ($productId <= 0 || $paymentMethodId <= 0 || empty($userIdTarget)) { echo json_encode(['status' => 'error', 'message' => 'Lengkapi seluruh data pesanan Anda!']); exit; } // PEMERIKSAAN WAJIB NOMOR WHATSAPP UNTUK GUEST if ($isGuest && empty($guestPhone)) { echo json_encode(['status' => 'error', 'message' => 'Pengguna Guest wajib memasukkan nomor WhatsApp aktif!']); exit; } $customerNo = !empty($zoneIdTarget) ? $userIdTarget . ' (' . $zoneIdTarget . ')' : $userIdTarget; try { $pdo->beginTransaction(); $userData = null; if ($currentUser) { $stmtUser = $pdo->prepare("SELECT id, saldo, username, user_type FROM users WHERE id = :id LIMIT 1 FOR UPDATE"); $stmtUser->execute([':id' => $currentUser['id']]); $userData = $stmtUser->fetch(); } $stmtP = $pdo->prepare("SELECT * FROM products WHERE id = :id AND status = 1 LIMIT 1 FOR UPDATE"); $stmtP->execute([':id' => $productId]); $product = $stmtP->fetch(); if (!$product) { $pdo->rollBack(); echo json_encode(['status' => 'error', 'message' => 'Produk yang dipilih tidak ditemukan atau nonaktif.']); exit; } // PERIKSA VENDOR YANG DIDUKUNG (MANUAL, SABASTORE, WARTOPCOIN) if ($product['vendor'] !== 'manual' && $product['vendor'] !== 'sabastore' && $product['vendor'] !== 'wartopcoin') { $pdo->rollBack(); echo json_encode(['status' => 'error', 'message' => 'Layanan untuk produk ini sedang dalam pemeliharaan (maintenance). Silahkan pilih produk lain.']); exit; } $stmtPM = $pdo->prepare("SELECT * FROM payment_methods WHERE id = :id AND status = 1 LIMIT 1"); $stmtPM->execute([':id' => $paymentMethodId]); $paymentMethod = $stmtPM->fetch(); if (!$paymentMethod) { $pdo->rollBack(); echo json_encode(['status' => 'error', 'message' => 'Metode pembayaran tidak valid.']); exit; } $isSaldoPayment = ($paymentMethod['kategori'] === 'saldo' || $paymentMethod['slug'] === 'saldo'); if ($isGuest && $isSaldoPayment) { $pdo->rollBack(); echo json_encode(['status' => 'error', 'message' => 'Pengguna Guest tidak dapat menggunakan pembayaran saldo. Silahkan login terlebih dahulu atau pilih metode pembayaran lain.']); exit; } $userType = $userData['user_type'] ?? 'umum'; if ($userType === 'reseller') { $basePrice = (float)$product['harga_reseller']; } else { $basePrice = (float)$product['harga_umum']; } $feeAdmin = (float)$paymentMethod['biaya_admin']; $feePersen = (float)$paymentMethod['biaya_persen']; $totalPrice = $basePrice + $feeAdmin + ($basePrice * ($feePersen / 100)); // AMBIL PREFIX DARI SITE_SETTINGS DATABASE $trxPrefix = !empty($siteSettings['trx_id_prefix']) ? $siteSettings['trx_id_prefix'] : 'TRX'; $refPrefix = !empty($siteSettings['ref_id_prefix']) ? $siteSettings['ref_id_prefix'] : 'REF'; // GENERATE TRX ID DAN REF ID MENGGUNAKAN PREFIX $trxId = $trxPrefix . date('YmdHis') . strtoupper(substr(bin2hex(random_bytes(3)), 0, 4)); $refId = $refPrefix . date('YmdHis') . strtoupper(substr(bin2hex(random_bytes(3)), 0, 4)); $statusPayment = 'pending'; $statusOrder = 'pending'; // Status Order WAJIB Tetap 'pending' Sesuai ENUM SQL if ($isSaldoPayment) { $userSaldoBefore = (float)$userData['saldo']; if ($userSaldoBefore < $totalPrice) { $pdo->rollBack(); echo json_encode([ 'status' => 'error', 'message' => 'Saldo akun Anda tidak mencukupi! Sisa Saldo: Rp ' . number_format($userSaldoBefore, 0, ',', '.') . ', Total Bayar: Rp ' . number_format($totalPrice, 0, ',', '.') ]); exit; } $userSaldoAfter = $userSaldoBefore - $totalPrice; $updateSaldo = $pdo->prepare("UPDATE users SET saldo = :saldo WHERE id = :id"); $updateSaldo->execute([':saldo' => $userSaldoAfter, ':id' => $currentUser['id']]); $insertMutation = $pdo->prepare(" INSERT INTO balance_mutations (user_id, tipe, kategori, ref_id, saldo_sebelum, nominal, saldo_sesudah, keterangan) VALUES (:user_id, 'debit', 'transaksi', :ref_id, :saldo_sebelum, :nominal, :saldo_sesudah, :keterangan) "); $insertMutation->execute([ ':user_id' => $currentUser['id'], ':ref_id' => $trxId, ':saldo_sebelum' => $userSaldoBefore, ':nominal' => $totalPrice, ':saldo_sesudah' => $userSaldoAfter, ':keterangan' => 'Pembelian ' . $product['nama_produk'] . ' (' . $customerNo . ')' ]); $statusPayment = 'sukses'; } // SIMPAN DATA TRANSAKSI $insertTrx = $pdo->prepare(" INSERT INTO transactions (user_id, payment_method_id, product_id, transaction_type, trx_id, ref_id, customer_no, guest_phone, harga_jual, harga_vendor, status_payment, status_order, ordered_at) VALUES (:user_id, :payment_method_id, :product_id, 'reguler', :trx_id, :ref_id, :customer_no, :guest_phone, :harga_jual, :harga_vendor, :status_payment, :status_order, NOW()) "); $insertTrx->execute([ ':user_id' => $currentUser ? $currentUser['id'] : null, ':payment_method_id' => $paymentMethod['id'], ':product_id' => $product['id'], ':trx_id' => $trxId, ':ref_id' => $refId, ':customer_no' => $customerNo, ':guest_phone' => $isGuest ? $guestPhone : null, ':harga_jual' => $totalPrice, ':harga_vendor' => $product['harga_modal'], ':status_payment' => $statusPayment, ':status_order' => $statusOrder ]); $trxData = [ 'trx_id' => $trxId, 'ref_id' => $refId, 'customer_no' => $customerNo, 'guest_phone' => $isGuest ? $guestPhone : null, 'harga_jual' => $totalPrice, 'status_payment' => $statusPayment, 'status_order' => $statusOrder ]; // KONEKSI LANGSUNG VENDOR HANYA JIKA METODE PEMBAYARAN SALDO if ($isSaldoPayment) { $vendorResponse = null; $vendorMessage = 'Transaksi berhasil dikirim ke vendor.'; if ($product['vendor'] === 'wartopcoin') { $wtcRes = processWartopcoinTransaction($pdo, $trxData, $product); $vendorResponse = $wtcRes['raw_response'] ?? null; if (!$wtcRes['status']) { $pdo->rollBack(); // SIMPAN LOG KETIKA GAGAL TRANSAKSI VENDOR SALDO logSaldoTransaction([ 'trx_id' => $trxId, 'ref_id' => $refId, 'user_info' => $currentUser ? ($currentUser['username'] . " (ID: {$currentUser['id']})") : 'GUEST', 'product_name' => $product['nama_produk'], 'product_code' => $product['kode_produk'], 'customer_no' => $customerNo, 'total_price' => $totalPrice, 'harga_vendor' => $product['harga_modal'], 'vendor' => 'WARTOPCOIN', 'status' => 'GAGAL', 'message' => $wtcRes['message'], 'raw_response' => $vendorResponse ]); echo json_encode(['status' => 'error', 'message' => $wtcRes['message']]); exit; } } elseif ($product['vendor'] === 'sabastore') { $sabaRes = processSabastoreTransaction($pdo, $trxData, $product); $vendorResponse = $sabaRes['raw_response'] ?? null; if (!$sabaRes['status']) { $pdo->rollBack(); // SIMPAN LOG KETIKA GAGAL TRANSAKSI VENDOR SALDO logSaldoTransaction([ 'trx_id' => $trxId, 'ref_id' => $refId, 'user_info' => $currentUser ? ($currentUser['username'] . " (ID: {$currentUser['id']})") : 'GUEST', 'product_name' => $product['nama_produk'], 'product_code' => $product['kode_produk'], 'customer_no' => $customerNo, 'total_price' => $totalPrice, 'harga_vendor' => $product['harga_modal'], 'vendor' => 'SABASTORE', 'status' => 'GAGAL', 'message' => $sabaRes['message'], 'raw_response' => $vendorResponse ]); echo json_encode(['status' => 'error', 'message' => $sabaRes['message']]); exit; } } elseif ($product['vendor'] === 'manual') { sendTelegramManualNotification($pdo, $trxData, $userData, $product, $paymentMethod); $vendorMessage = 'Notifikasi Telegram Vendor Manual terkirim.'; } // SIMPAN LOG KETIKA SUKSES TRANSAKSI VENDOR SALDO logSaldoTransaction([ 'trx_id' => $trxId, 'ref_id' => $refId, 'user_info' => $currentUser ? ($currentUser['username'] . " (ID: {$currentUser['id']})") : 'GUEST', 'product_name' => $product['nama_produk'], 'product_code' => $product['kode_produk'], 'customer_no' => $customerNo, 'total_price' => $totalPrice, 'harga_vendor' => $product['harga_modal'], 'vendor' => strtoupper($product['vendor']), 'status' => 'BERHASIL DIPROSES / PENDING VENDOR', 'message' => $vendorMessage, 'raw_response' => $vendorResponse ]); } $pdo->commit(); echo json_encode([ 'status' => 'success', 'message' => 'Pesanan berhasil dibuat!', 'redirect' => 'detail-transaksi.php?trx_id=' . $trxId ]); exit; } catch (Exception $e) { if ($pdo->inTransaction()) { $pdo->rollBack(); } echo json_encode(['status' => 'error', 'message' => 'Terjadi kesalahan sistem saat membuat transaksi: ' . $e->getMessage()]); exit; } } } // 2. AMBIL KATEGORI DARI DATABASE (categories) $stmtCat = $pdo->query("SELECT id, nama_kategori, slug, img_url FROM categories WHERE status = 1 ORDER BY id ASC"); $categories = $stmtCat->fetchAll(); // 3. AMBIL BRAND DARI DATABASE (brands) $stmtBrand = $pdo->query(" SELECT b.id, b.category_id, b.nama_brand, b.slug, b.is_populer, b.img_url, b.keterangan, c.nama_kategori FROM brands b LEFT JOIN categories c ON b.category_id = c.id WHERE b.status = 1 ORDER BY b.is_populer DESC, b.nama_brand ASC "); $brands = $stmtBrand->fetchAll(); // 4. AMBIL BANNER SLIDER DARI DATABASE (banners) $targetUserVal = $isGuest ? 'guest' : ($currentUser['user_type'] ?? 'umum'); $stmtBanner = $pdo->prepare(" SELECT id, judul, deskripsi, gambar_url, link_url FROM banners WHERE status = 'aktif' AND posisi = 'slider' AND target_user IN ('all', :target_user) AND (tanggal_mulai IS NULL OR tanggal_mulai <= NOW()) AND (tanggal_selesai IS NULL OR tanggal_selesai >= NOW()) ORDER BY urutan ASC, id DESC "); $stmtBanner->execute([':target_user' => $targetUserVal]); $banners = $stmtBanner->fetchAll(); // 5. AMBIL JUMLAH NOTIFIKASI BELUM DIBACA (JIKA LOGIN) $unreadNotifCount = 0; if (!$isGuest && $currentUser) { $stmtUnread = $pdo->prepare("SELECT COUNT(*) FROM notifications WHERE user_id = :user_id AND is_read = 0"); $stmtUnread->execute([':user_id' => $currentUser['id']]); $unreadNotifCount = (int)$stmtUnread->fetchColumn(); } // 6. AMBIL AKTIVITAS TRANSAKSI TERAKHIR DARI DATABASE (transactions) UNTUK USER LOGIN $recentTransactions = []; if (!$isGuest && $currentUser) { $stmtTrx = $pdo->prepare(" SELECT t.trx_id, t.ref_id, t.customer_no, t.status_payment, t.status_order, t.created_at, p.nama_produk FROM transactions t LEFT JOIN products p ON t.product_id = p.id WHERE t.user_id = :user_id ORDER BY t.id DESC LIMIT 5 "); $stmtTrx->execute([':user_id' => $currentUser['id']]); $recentTransactions = $stmtTrx->fetchAll(); } // 7. AMBIL DATA FAQ DARI DATABASE (faqs) UNTUK TAMPILAN SECTION FAQ BERANDA $stmtFaqs = $pdo->query("SELECT id, pertanyaan, jawaban, kategori, urutan FROM faqs WHERE status = 'aktif' ORDER BY urutan ASC, id ASC"); $faqs = $stmtFaqs->fetchAll(); // Inisial avatar user / Guest Initials $userInitials = $currentUser ? strtoupper(substr($currentUser['username'], 0, 2)) : 'GT'; // Variabel Situs $siteName = htmlspecialchars($siteSettings['nama_website'] ?? 'PUSATCHIP'); $siteLogo = !empty($siteSettings['logo_url']) ? htmlspecialchars($siteSettings['logo_url']) : 'https://via.placeholder.com/100'; $siteWaUrl = !empty($siteSettings['whatsapp_url']) ? htmlspecialchars($siteSettings['whatsapp_url']) : ('https://wa.me/' . htmlspecialchars($siteSettings['phone_number'] ?? '6281234567890')); ?> <?= $siteName ?> - Topup Game & Digital Ecosystem