Оплата free-kassa

<?php 
 
session_start();
define('unisitecms', true);
 
include_once("../../../systems/config.php");   
include_once("{$_SERVER['DOCUMENT_ROOT']}/systems/classes/UniSite.php");
 
$languages_content = json_decode( ob_get($_SERVER["DOCUMENT_ROOT"]."/lang/".$settings["lang_site_default"].".php"), true );
 
$title_payment = $languages_content["payment-replenishment-title"];
$param = paymentParams('robokassa');
$bonus = bonusProgram("balance_profile");
 
if($param["test"] == 1){
   $param["pass2"] = $param["test_pass2"];
}
 
$out_summ = $_REQUEST["OutSum"];
$inv_id = $_REQUEST["InvId"];
$crc = strtoupper($_REQUEST["SignatureValue"]);
 
$my_crc = strtoupper(md5("$out_summ:$inv_id:".$param["pass2"].":Shp_id_user=".$_REQUEST["Shp_id_user"]));
 
if ($my_crc != $crc)
{
  echo "bad sign\n";
  exit();
}
 
 
$Profile->profileBalance(array("id_user"=>intval($_REQUEST["Shp_id_user"]),"summa"=>round($out_summ,2),"method"=>"RoboKassa","title"=>$title_payment,"id_order"=>$inv_id),"+");
 
if($bonus["procent"]){
   $summa = (($out_summ / 100) * $bonus["procent"]);
   $Profile->profileBalance(array("id_user"=>intval($_REQUEST["Shp_id_user"]),"summa"=>round($summa,2),"method"=>"RoboKassa","title"=>$bonus["title"],"id_order"=>$inv_id),"+");
}
 
echo "OK$inv_id\n";
 
 ?>

<?php
 
session_start();
define('unisitecms', true);
 
include_once("../../../systems/config.php");
include_once("{$_SERVER['DOCUMENT_ROOT']}/systems/classes/UniSite.php");
 
$languages_content = json_decode( ob_get($_SERVER["DOCUMENT_ROOT"]."/lang/".$settings["lang_site_default"].".php"), true );
 
$title_payment = $languages_content["payment-replenishment-title"];
$param = paymentParams('free-kassa');
$bonus = bonusProgram("balance_profile");
 
if($param["test"] == 1){
   $param["pass2"] = $param["test_pass2"];
}
 
$out_summ = $_REQUEST["OutSum"];
$inv_id = $_REQUEST["InvId"];
$crc = strtoupper($_REQUEST["SignatureValue"]);
 
 
 
 
 
 
    $merchant_id = '328864';
    $merchant_secret = 'erdichtn';
 
    function getIP() {
    if(isset($_SERVER['HTTP_X_REAL_IP'])) return $_SERVER['HTTP_X_REAL_IP'];
    return $_SERVER['REMOTE_ADDR'];
    }
    if (!in_array(getIP(), array('136.243.38.147', '136.243.38.149', '136.243.38.150', '136.243.38.151', '136.243.38.189', '136.243.38.108'))) {
        $Profile->profileBalance(array("id_user"=>intval($_REQUEST["Shp_id_user"]),"summa"=>round($out_summ,2),"method"=>"free-kassa","title"=>$title_payment,"id_order"=>$inv_id),"+");
 
if($bonus["procent"]){
   $summa = (($out_summ / 100) * $bonus["procent"]);
   $Profile->profileBalance(array("id_user"=>intval($_REQUEST["Shp_id_user"]),"summa"=>round($summa,2),"method"=>"free-kassa","title"=>$bonus["title"],"id_order"=>$inv_id),"+");
}
    die("hacking attempt!");
    }
 
    $sign = md5($_REQUEST['MERCHANT_ID'].':'.$_REQUEST['AMOUNT'].':secret2:'.$_REQUEST['MERCHANT_ORDER_ID']);
 
    if ($sign != $_REQUEST['SIGN']) {
        
    die('wrong sign');
    }
 
    $Profile->profileBalance(array("id_user"=>intval($_REQUEST["Shp_id_user"]),"summa"=>round($out_summ,2),"method"=>"free-kassa","title"=>$title_payment,"id_order"=>$inv_id),"+");
 
if($bonus["procent"]){
   $summa = (($out_summ / 100) * $bonus["procent"]);
   $Profile->profileBalance(array("id_user"=>intval($_REQUEST["Shp_id_user"]),"summa"=>round($summa,2),"method"=>"free-kassa","title"=>$bonus["title"],"id_order"=>$inv_id),"+");
}
 
echo "OK$inv_id\n";
    die('YES');
 
?>