Maintenance Mode

query("SELECT * FROM site_settings LIMIT 1"); $siteSettings = $stmtSite->fetch() ?: []; // CEK MODE MAINTENANCE if (!empty($siteSettings['maintenance_mode']) && (int)$siteSettings['maintenance_mode'] === 1) { http_response_code(530); $mMsg = !empty($siteSettings['maintenance_message']) ? htmlspecialchars($siteSettings['maintenance_message']) : 'Kami sedang melakukan pemeliharaan sistem rutin. Silahkan kembali lagi nanti.'; echo 'Maintenance Mode

Sistem Dalam Pemeliharaan

' . $mMsg . '

'; exit; } // SELURUH PENGGUNA ADALAH GUEST (TANPA LOGIN & SALDO) $currentUser = null; $isGuest = true; /** * Helper: Mencatat Log Transaksi Penggunaan ke file log-transaksi.txt */ function logGuestTransaction(array $logDetails): void { try { $logFile = __DIR__ . '/log-transaksi.txt'; $timestamp = date('Y-m-d H:i:s') . ' WIB'; $divider = str_repeat('=', 75); $logText = "{$divider}\n"; $logText .= "[LOG TRANSAKSI GUEST] - {$timestamp}\n"; $logText .= "{$divider}\n"; $logText .= "TRX ID : " . ($logDetails['trx_id'] ?? '-') . "\n"; $logText .= "REF ID : " . ($logDetails['ref_id'] ?? '-') . "\n"; $logText .= "PEMBELI : GUEST (WA: " . ($logDetails['guest_phone'] ?? '-') . ")\n"; $logText .= "PRODUK : " . ($logDetails['product_name'] ?? '-') . " (Kode: " . ($logDetails['product_code'] ?? '-') . ")\n"; $logText .= "TARGET NO : " . ($logDetails['customer_no'] ?? '-') . "\n"; $logText .= "HARGA JUAL : Rp " . number_format((float)($logDetails['total_price'] ?? 0), 2, ',', '.') . "\n"; $logText .= "HARGA VENDOR : Rp " . number_format((float)($logDetails['harga_vendor'] ?? 0), 2, ',', '.') . "\n"; $logText .= "VENDOR TUJUAN : " . strtoupper($logDetails['vendor'] ?? 'MANUAL') . "\n"; $logText .= "STATUS LOG : " . ($logDetails['status'] ?? 'PENDING') . "\n"; $logText .= "CATATAN : " . ($logDetails['message'] ?? '-') . "\n"; if (!empty($logDetails['raw_response'])) { $raw = is_array($logDetails['raw_response']) ? json_encode($logDetails['raw_response'], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES) : $logDetails['raw_response']; $logText .= "RAW RESPONSE :\n{$raw}\n"; } $logText .= "{$divider}\n\n"; @file_put_contents($logFile, $logText, FILE_APPEND | LOCK_EX); } catch (Exception $e) { // Abaikan error penulisan file log } } /** * Helper: Mengirimkan Notifikasi Transaksi ke Telegram Bot untuk Vendor "MANUAL" */ function sendTelegramManualNotification(PDO $pdo, array $trx, array $product, array $paymentMethod): void { try { $stmtVM = $pdo->prepare("SELECT chat_id, bot_token FROM vendor_manual WHERE status = 1 LIMIT 1"); $stmtVM->execute(); $vm = $stmtVM->fetch(); if ($vm && !empty($vm['bot_token']) && !empty($vm['chat_id'])) { $usernameText = "GUEST (Tanpa Akun - WA: " . ($trx['guest_phone'] ?? '-') . ")"; $msg = "Halo, ada transaksi baru (GUEST)\n\n"; $msg .= "TRX ID: " . $trx['trx_id'] . "\n"; $msg .= "REFID: " . ($trx['ref_id'] ?? $trx['trx_id']) . "\n"; $msg .= "Pembeli: " . $usernameText . "\n"; $msg .= "Produk: " . $product['nama_produk'] . "\n"; $msg .= "Customer No: `" . $trx['customer_no'] . "`\n"; $msg .= "Harga jual: Rp " . number_format((float)$trx['harga_jual'], 0, ',', '.') . "\n"; $msg .= "Metode Bayar: " . $paymentMethod['nama_metode'] . "\n"; $msg .= "Status Payment: " . strtoupper($trx['status_payment']) . "\n"; $msg .= "Status Order: " . strtoupper($trx['status_order']) . "\n"; $msg .= "Waktu: " . date('Y-m-d H:i:s') . " WIB"; $inlineKeyboard = [ 'inline_keyboard' => [ [ ['text' => 'Konfirmasi', 'callback_data' => 'confirm_' . $trx['trx_id']], ['text' => 'Tolak', 'callback_data' => 'reject_' . $trx['trx_id']] ] ] ]; $url = "https://api.telegram.org/bot" . $vm['bot_token'] . "/sendMessage"; $postData = [ 'chat_id' => $vm['chat_id'], 'text' => $msg, 'parse_mode' => 'Markdown', 'reply_markup' => json_encode($inlineKeyboard) ]; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postData)); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_TIMEOUT, 8); curl_exec($ch); curl_close($ch); } } catch (Exception $e) { // Abaikan error cURL } } /** * Helper: Memproses Transaksi ke Vendor SABASTORE via API */ function processSabastoreTransaction(PDO $pdo, array $trx, array $product): array { try { $stmt = $pdo->query("SELECT member_code, api_key, status FROM vendor_sabastore WHERE status = 1 LIMIT 1"); $saba = $stmt->fetch(); if (!$saba || empty($saba['member_code']) || empty($saba['api_key'])) { return ['status' => false, 'message' => 'Sistem penyedia Sabastore sedang mengalami pemeliharaan rutin.', 'raw_response' => 'Config Sabastore kosong/nonaktif']; } $memberCode = $saba['member_code']; $apiKey = $saba['api_key']; $productCode = !empty($product['kode_produk_vendor']) ? $product['kode_produk_vendor'] : $product['kode_produk']; $refId = !empty($trx['ref_id']) ? $trx['ref_id'] : $trx['trx_id']; $customerNo = $trx['customer_no']; $sign = hash('sha256', $memberCode . $apiKey . $refId); $payload = [ 'member_code' => $memberCode, 'product_code' => $productCode, 'customer_no' => $customerNo, 'ref_id' => $refId, 'sign' => $sign ]; $ch = curl_init('https://api.sabastore.top/v1/transaksi'); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload)); curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_TIMEOUT, 15); $response = curl_exec($ch); $curlErr = curl_error($ch); curl_close($ch); if ($curlErr) { return ['status' => false, 'message' => 'Gagal terhubung ke penyedia layanan Sabastore.', 'raw_response' => $curlErr]; } $resData = json_decode($response, true); if (isset($resData['status_code']) && (int)$resData['status_code'] === 200 && ($resData['status'] ?? '') === 'success') { return ['status' => true, 'data' => $resData['data'] ?? [], 'raw_response' => $response]; } else { $msg = $resData['message'] ?? 'Terjadi kendala saat memproses pesanan otomatis di Sabastore.'; return ['status' => false, 'message' => 'Pesanan gagal diproses Sabastore: ' . htmlspecialchars($msg), 'raw_response' => $response]; } } catch (Exception $e) { return ['status' => false, 'message' => 'Terjadi kesalahan sistem internal pemrosesan Sabastore.', 'raw_response' => $e->getMessage()]; } } /** * Helper: Memproses Transaksi ke Vendor WARTOPCOIN via API */ function processWartopcoinTransaction(PDO $pdo, array $trx, array $product): array { try { $stmt = $pdo->query("SELECT member_code, api_key, status FROM vendor_wartopcoin WHERE status = 1 LIMIT 1"); $wtc = $stmt->fetch(); if (!$wtc || empty($wtc['member_code']) || empty($wtc['api_key'])) { return ['status' => false, 'message' => 'Sistem penyedia Wartopcoin sedang tidak tersedia atau dalam pemeliharaan.', 'raw_response' => 'Config Wartopcoin kosong/nonaktif']; } $memberCode = $wtc['member_code']; $apiKey = $wtc['api_key']; $productCode = !empty($product['kode_produk_vendor']) ? $product['kode_produk_vendor'] : $product['kode_produk']; $refId = !empty($trx['ref_id']) ? $trx['ref_id'] : $trx['trx_id']; $customerNo = $trx['customer_no']; $signature = hash('sha256', $memberCode . $apiKey . $refId); $payload = [ 'member_code' => $memberCode, 'ref_id' => $refId, 'product_code' => $productCode, 'customer_no' => $customerNo, 'signature' => $signature ]; $ch = curl_init('https://wartopcoin.com/api/transaksi'); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload)); curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_TIMEOUT, 20); $response = curl_exec($ch); $curlErr = curl_error($ch); curl_close($ch); if ($curlErr) { return ['status' => false, 'message' => 'Gagal terhubung ke penyedia layanan Wartopcoin: ' . $curlErr, 'raw_response' => $curlErr]; } $resData = json_decode($response, true); if (isset($resData['status']) && $resData['status'] === 'success') { return ['status' => true, 'data' => $resData['data'] ?? [], 'raw_response' => $response]; } else { $msg = $resData['message'] ?? 'Terjadi kesalahan saat memproses transaksi di Wartopcoin.'; return ['status' => false, 'message' => 'Pesanan gagal diproses Wartopcoin: ' . htmlspecialchars($msg), 'raw_response' => $response]; } } catch (Exception $e) { return ['status' => false, 'message' => 'Terjadi kesalahan sistem internal pemrosesan Wartopcoin.', 'raw_response' => $e->getMessage()]; } } /** * PENANGANAN ENDPOINT AJAX */ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax'])) { header('Content-Type: application/json'); $ajaxAction = trim($_POST['ajax']); // 1. AJAX: CREATE ORDER (PEMBUATAN TRANSAKSI BARU GUEST) if ($ajaxAction === 'create_order') { $productId = (int)($_POST['product_id'] ?? 0); $paymentMethodId = (int)($_POST['payment_method_id'] ?? 0); $userIdTarget = trim($_POST['user_id_target'] ?? ''); $guestPhone = trim($_POST['guest_phone'] ?? ''); if ($productId <= 0 || $paymentMethodId <= 0 || empty($userIdTarget)) { echo json_encode(['status' => 'error', 'message' => 'Lengkapi seluruh data pesanan Anda!']); exit; } $customerNo = $userIdTarget; try { $pdo->beginTransaction(); $stmtP = $pdo->prepare("SELECT * FROM products WHERE id = :id AND status = 1 LIMIT 1 FOR UPDATE"); $stmtP->execute([':id' => $productId]); $product = $stmtP->fetch(); if (!$product) { $pdo->rollBack(); echo json_encode(['status' => 'error', 'message' => 'Produk yang dipilih tidak ditemukan atau nonaktif.']); exit; } if ($product['vendor'] !== 'manual' && $product['vendor'] !== 'sabastore' && $product['vendor'] !== 'wartopcoin') { $pdo->rollBack(); echo json_encode(['status' => 'error', 'message' => 'Layanan untuk produk ini sedang dalam pemeliharaan.']); exit; } // AMBIL METODE PEMBAYARAN (TIDAK BOLEH 'SALDO') $stmtPM = $pdo->prepare("SELECT * FROM payment_methods WHERE id = :id AND status = 1 AND kategori != 'saldo' AND slug != 'saldo' LIMIT 1"); $stmtPM->execute([':id' => $paymentMethodId]); $paymentMethod = $stmtPM->fetch(); if (!$paymentMethod) { $pdo->rollBack(); echo json_encode(['status' => 'error', 'message' => 'Metode pembayaran tidak valid atau tidak tersedia.']); exit; } $basePrice = (float)$product['harga_umum']; $feeAdmin = (float)$paymentMethod['biaya_admin']; $feePersen = (float)$paymentMethod['biaya_persen']; $totalPrice = $basePrice + $feeAdmin + ($basePrice * ($feePersen / 100)); $trxPrefix = !empty($siteSettings['trx_id_prefix']) ? $siteSettings['trx_id_prefix'] : 'KDC'; $refPrefix = !empty($siteSettings['ref_id_prefix']) ? $siteSettings['ref_id_prefix'] : 'REF'; $trxId = $trxPrefix . '-' . date('YmdHis') . strtoupper(substr(bin2hex(random_bytes(2)), 0, 4)); $refId = $refPrefix . '-' . date('YmdHis') . strtoupper(substr(bin2hex(random_bytes(2)), 0, 4)); $statusPayment = 'pending'; $statusOrder = 'pending'; $insertTrx = $pdo->prepare(" INSERT INTO transactions (user_id, payment_method_id, product_id, transaction_type, trx_id, ref_id, customer_no, guest_phone, harga_jual, harga_vendor, status_payment, status_order, ordered_at) VALUES (NULL, :payment_method_id, :product_id, 'reguler', :trx_id, :ref_id, :customer_no, :guest_phone, :harga_jual, :harga_vendor, :status_payment, :status_order, NOW()) "); $insertTrx->execute([ ':payment_method_id' => $paymentMethod['id'], ':product_id' => $product['id'], ':trx_id' => $trxId, ':ref_id' => $refId, ':customer_no' => $customerNo, ':guest_phone' => !empty($guestPhone) ? $guestPhone : null, ':harga_jual' => $totalPrice, ':harga_vendor' => $product['harga_modal'], ':status_payment' => $statusPayment, ':status_order' => $statusOrder ]); $trxData = [ 'trx_id' => $trxId, 'ref_id' => $refId, 'customer_no' => $customerNo, 'guest_phone' => $guestPhone, 'harga_jual' => $totalPrice, 'status_payment' => $statusPayment, 'status_order' => $statusOrder ]; if ($product['vendor'] === 'manual') { sendTelegramManualNotification($pdo, $trxData, $product, $paymentMethod); } logGuestTransaction([ 'trx_id' => $trxId, 'ref_id' => $refId, 'guest_phone' => $guestPhone, 'product_name' => $product['nama_produk'], 'product_code' => $product['kode_produk'], 'customer_no' => $customerNo, 'total_price' => $totalPrice, 'harga_vendor' => $product['harga_modal'], 'vendor' => strtoupper($product['vendor']), 'status' => 'TRANSAKSI DIBUAT (PENDING BAYAR)', 'message' => 'Menunggu pembayaran dari pelanggan' ]); $pdo->commit(); echo json_encode([ 'status' => 'success', 'message' => 'Pesanan berhasil dibuat!', 'redirect' => 'detail-transaksi.php?trx_id=' . $trxId, 'trx_id' => $trxId ]); exit; } catch (Exception $e) { if ($pdo->inTransaction()) { $pdo->rollBack(); } echo json_encode(['status' => 'error', 'message' => 'Terjadi kesalahan sistem saat membuat transaksi: ' . $e->getMessage()]); exit; } } // 2. AJAX: LACAK TRANSAKSI (PERBAIKAN PARAMETER BINDING) if ($ajaxAction === 'track_order') { $search = trim($_POST['search'] ?? ''); if (empty($search)) { echo json_encode(['status' => 'error', 'message' => 'Masukkan No. Invoice atau User ID terlebih dahulu.']); exit; } // MENGGUNAKAN POSITIONAL PARAMETER (?) UNTUK MENCEGAH PDO HY093 ERRORS $stmtTrack = $pdo->prepare(" SELECT t.trx_id, t.ref_id, t.customer_no, t.harga_jual, t.status_payment, t.status_order, t.ordered_at, t.created_at, p.nama_produk, pm.nama_metode FROM transactions t LEFT JOIN products p ON t.product_id = p.id LEFT JOIN payment_methods pm ON t.payment_method_id = pm.id WHERE t.trx_id = ? OR t.customer_no = ? OR t.ref_id = ? ORDER BY t.id DESC LIMIT 5 "); $stmtTrack->execute([$search, $search, $search]); $results = $stmtTrack->fetchAll(); if (!empty($results)) { echo json_encode(['status' => 'success', 'data' => $results]); } else { echo json_encode(['status' => 'error', 'message' => 'Data transaksi tidak ditemukan untuk keyword tersebut.']); } exit; } } // AMBIL BANNER SLIDER DARI DATABASE $stmtBanner = $pdo->query(" SELECT id, judul, deskripsi, gambar_url, link_url FROM banners WHERE status = 'aktif' AND posisi = 'slider' ORDER BY urutan ASC, id DESC "); $banners = $stmtBanner->fetchAll(); // AMBIL METODE PEMBAYARAN DARI DATABASE (TANPA SALDO) $stmtPm = $pdo->query(" SELECT id, nama_metode, slug, kategori, provider, kode_channel, img_url, biaya_admin, biaya_persen FROM payment_methods WHERE status = 1 AND digunakan_untuk IN ('transaksi', 'semua') AND kategori != 'saldo' AND slug != 'saldo' ORDER BY urutan ASC, nama_metode ASC "); $paymentMethods = $stmtPm->fetchAll(); // PERMINTAAN: HANYA AMBIL TYPE DAN PRODUK DARI BRAND ID 1 DAN KATEGORI ID 1 DARI SQL $stmtTypes = $pdo->query(" SELECT id, brand_id, nama_type, slug, img_url FROM types WHERE brand_id = 1 AND status = 1 ORDER BY urutan ASC, id ASC "); $dbTypes = $stmtTypes->fetchAll(); $stmtProd = $pdo->query(" SELECT p.id, p.brand_id, p.type_id, p.nama_produk, p.harga_umum, p.img_url, p.deskripsi, p.kode_produk, t.nama_type, c.nama_kategori FROM products p LEFT JOIN types t ON p.type_id = t.id LEFT JOIN brands b ON p.brand_id = b.id LEFT JOIN categories c ON b.category_id = c.id WHERE p.brand_id = 1 AND b.category_id = 1 AND p.status = 1 ORDER BY p.harga_umum ASC "); $allProducts = $stmtProd->fetchAll(); // KATEGORISASI PRODUK BERDASARKAN TYPE_ID SQL (TERMASUK GAMBAR PRODUK img_url) $productsByType = []; foreach ($allProducts as $p) { $tId = (int)($p['type_id'] ?? 0); if (!isset($productsByType[$tId])) { $productsByType[$tId] = []; } $productsByType[$tId][] = [ 'id' => $p['id'], 'type_id' => $tId, 'title' => $p['nama_produk'], 'subtext' => !empty($p['deskripsi']) ? $p['deskripsi'] : 'Top Up Instan', 'price' => 'Rp ' . number_format((float)$p['harga_umum'], 0, ',', '.'), 'raw_price' => (float)$p['harga_umum'], 'img_url' => !empty($p['img_url']) ? $p['img_url'] : '', 'badge' => 'Resmi' ]; } // PENGATURAN VARIABLE SITUS $siteName = htmlspecialchars($siteSettings['nama_website'] ?? 'KedaiChip'); $siteLogo = !empty($siteSettings['logo_url']) ? htmlspecialchars($siteSettings['logo_url']) : 'https://files.catbox.moe/s9p14k.png'; $siteWaUrl = !empty($siteSettings['whatsapp_url']) ? htmlspecialchars($siteSettings['whatsapp_url']) : ('https://wa.me/' . htmlspecialchars($siteSettings['phone_number'] ?? '6281234567890')); ?> <?= $siteName ?> - Toko Higgs Games Official Top Up

Notifikasi

1

MASUKAN ID

Nama Akun: Player_ Terverifikasi

Silakan masukkan User ID Higgs Games Anda. Contoh: 1234567. Pastikan ID sudah benar sebelum melanjutkan.

2

PILIH NOMINAL TOP UP

$t): ?>

3

PILIH METODE PEMBAYARAN

'QRIS (Instant Scan All App)', 'ewallet' => 'E-Wallet & Dompet Digital', 'virtual_account' => 'Virtual Account (Bank Transfer)', 'retail' => 'Minimarket / Retail', 'manual' => 'Pembayaran Manual' ]; $indexCat = 0; foreach ($groupedPayments as $catKey => $pmList): $indexCat++; $labelCat = $categoryLabels[$catKey] ?? strtoupper($catKey); $catId = 'payment-cat-' . $catKey; $isActive = ($indexCat === 1) ? 'active' : ''; ?>

<?= htmlspecialchars($pMethod['nama_metode']) ?>

Info Instan: Pembayaran otomatis terverifikasi tanpa ribet.

LACAK TRANSAKSI ANDA

Masukkan Nomor Invoice atau User ID Anda untuk memeriksa status pengiriman koin/berlian secara real-time.

LAYANAN PELANGGAN 24/7

Ada kendala top up atau pertanyaaan seputar pesanan Anda? Tim customer service resmi kami siap membantu 24 jam setiap hari.

TENTANG OFFICIAL

merupakan platform penyedia layanan isi ulang (top up) game Higgs Games resmi dan terpercaya di Indonesia. Kami menjamin kecepatan pengiriman koin emas & berlian secara instan otomatis serta keamanan data akun 100%.

Versi Aplikasi: 2.4.0 (Official Stable)

Status Sistem: Sistem Normal & Lancar

Server: ID-Jakarta High Speed Server

Item & Metode Lengkapi Data Top Up