[wolontariat] Proszę o sprawdzenie kodu płatności paypal i dotpay Opcje

[Lejto]

Witajcie mam 2 kody do płatności pay pal i dot pay użytkownik wybiera ilość punktów płaci i wraca do danej strony koniec.php i koniecp.php, proszę o to aby ktoś rzucił okiem czy jest ok z tym kodem.

DotPay

[PHP] pobierz, plaintext 
<form action="https://ssl.dotpay.eu" method="POST">
<input name="id" type="hidden" value="36961" />
<input name="opis" type="hidden" value="Kupno punktów" />
<input name="control" type="hidden" value="<?=$con;?>" />
do 2500 captch = 0% rabatu <br />
od 2500 do 3500 = 5%<br />
od 3500 do 5000 = 10%<br />
od 5000 do 6500 = 15%<br />
od 6500 do więcej = 20%<br />
<p>Wybierz ilość</p>
<select name="amount">
<?
 
$z = '9.10';
$x = 500;
while($x <= 9000)
{     
	 if($x <= 2500)
	 {
		 $r = NULL;
	 }
	 elseif($x == 2500 or $x < 3500)
	 {
		 $r = '0.05';
	 }
	 elseif($x == 3500 or $x < 5000)
	 {
		 $r = '0.10';
	 }
	 elseif($x == 5000 or $x < 6500)
	 {
		 $r = '0.15';
	 }
	 elseif($x == 6500 or $x > 6500)
	 {
		 $r = '0.20';
	 }
	 $ce = $z*$r;
	 ?><option value="<? echo $z-$ce;?>"><?=$x;?></option><? 
	 $x += 500;
	 $z += '9.10';
}
?>
 
</select>
<input name="typ" type="hidden" value="3" />
<input name="URL" type="hidden" value="koniec" />
<input name="URLC" type="hidden" value="kup" />
<input name="dalej" type="submit" value="zapłać teraz" />
</form>
[PHP] pobierz, plaintext 

i strona która wyświetla się po zakończeniu płatności

[PHP] pobierz, plaintext 
/*sprawdzam czy nadaje serwer DOTPAY`a */
$ip=$_SERVER['REMOTE_ADDR'];
if($ip=='217.17.41.5'){
$test=1;
}
if($ip=='195.150.9.51'){
$test=1;
}
if($test!=1){
echo "Nie jestes serwerem Dotpay";
exit;
}
 
$a = $_POST['amount'];
 
if($a == '9.10' or $a == '9.1')
{
	$b = '500';
}
elseif($a == '18.20' or $a == '18.2')
{
	$b = '1000';
}
elseif($a == '18.20' or $a == '18.2')
{
	$b = '1500';
}elseif($a == '27.30' or $a == '27.3')
{
	$b = '2000';
}elseif($a == '36.40' or $a == '36.4')
{
	$b = '2500';
}elseif($a == '45.50' or $a == '45.5')
{
	$b = '3000';
}elseif($a == '54.60' or $a == '54.6')
{
	$b = '3500';
}elseif($a == '63.70' or $a == '63.7')
{
	$b = '4000';
}elseif($a == '81.90' or $a == '81.9')
{
	$b = '4500';
}elseif($a == '91' or $a == '91')
{
	$b = '5000';
}elseif($a == '100.0' or $a == '100.00')
{
	$b = '5500';
}elseif($a == '109.2' or $a == '109.20')
{
	$b = '6000';
}elseif($a == '118.30' or $a == '118.3')
{
	$b = '6500';
}elseif($a == '127.40' or $a == '127.4')
{
	$b = '7000';
}elseif($a == '136.50' or $a == '136.5')
{
	$b = '7500';
}elseif($a == '145.60' or $a == '145.6')
{
	$b = '8000';
}elseif($a == '154.70' or $a == '154.7')
{
	$b = '8500';
}elseif($a == '163.80' or $a == '163.8')
{
	$b = '9000';
}
/* Jeśli wszystko ok to zaczynamy ksiegowanie */
if($_POST['t_status']==2 and $_POST['amount']!=null and $_POST['control']!=null){
$control= $_POST['control'];
$amount= $_POST['amount'];
if(is_numeric($control)==true and is_numeric($amount)){
/* tabela mysql [transid w primary z autoinkrementem], [uid], [kwota], [czas] */
 
$sql = $db->query('update users set punkty = punkty + "'.$b.'" where id = "'.$control.'"');
 
echo 'Wykonano pomyślnie';
}
}
 
[PHP] pobierz, plaintext 

pay pal

[PHP] pobierz, plaintext 
	?>
    <form action="https://www.paypal.pl/cgi-bin/webscr" method="post">
    <label>Kup punkty: </label>
    <input type="hidden" name="cmd" value="_xclick"  />
    <input type="hidden" value="lc" name="PL" />
    <input type="hidden" name = "return" value= "koniecp" />
	<input type="hidden" name = "notify_url" value = "kup" />
	<input type="hidden" value="PLN" name="currency_code" /> 
    <input type="hidden" name="business" value="hiddenlockerzplayer@gmail.com" />
    <input type="hidden" name="item_name" value="Punkty" />
    <input type="hidden" name="item_number" value="<?=$con;?>" />
do 2500 captch = 0% rabatu <br />
od 2500 do 3500 = 5%<br />
od 3500 do 5000 = 10%<br />
od 5000 do 6500 = 15%<br />
od 6500 do więcej = 20%<br />
<p>Wybierz ilość</p>
<select name="amount">
<?
 
$z = '7';
$x = 500;
while($x <= 9000)
{     
	 if($x <= 2500)
	 {
		 $r = NULL;
	 }
	 elseif($x == 2500 or $x < 3500)
	 {
		 $r = '0.05';
	 }
	 elseif($x == 3500 or $x < 5000)
	 {
		 $r = '0.10';
	 }
	 elseif($x == 5000 or $x < 6500)
	 {
		 $r = '0.15';
	 }
	 elseif($x == 6500 or $x > 6500)
	 {
		 $r = '0.20';
	 }
	 $ce = $z*$r;
	 ?><option value="<? echo $z-$ce;?>"><?=$x;?></option><? 
	 $x += 500;
	 $z += '7';
}
?>
 
</select>    <input type="hidden" name="no_note" value="1" />
     <input type="image" src="https://wwww.paypal.com/en_US/i/btn/x-click-but23.gif" border="0" name="submit" />
    </form>
     <?
[PHP] pobierz, plaintext 

i skrypt który kończy

[PHP] pobierz, plaintext 
 
 
/*sprawdzam czy nadaje serwer paypal`a */
$ip=$_SERVER['REMOTE_ADDR'];
if($ip=='62.168.214.50'){
$test=1;
}
if($ip=='66.211.169.2'){
$test=1;
}
if($test!=1){
echo "Nie jestes serwerem paypal";
exit;
}
 
$a = $_POST['amount'];
 
if($a == '9.10' or $a == '9.1')
{
	$b = '500';
}
elseif($a == '18.20' or $a == '18.2')
{
	$b = '1000';
}
elseif($a == '18.20' or $a == '18.2')
{
	$b = '1500';
}elseif($a == '27.30' or $a == '27.3')
{
	$b = '2000';
}elseif($a == '36.40' or $a == '36.4')
{
	$b = '2500';
}elseif($a == '45.50' or $a == '45.5')
{
	$b = '3000';
}elseif($a == '54.60' or $a == '54.6')
{
	$b = '3500';
}elseif($a == '63.70' or $a == '63.7')
{
	$b = '4000';
}elseif($a == '81.90' or $a == '81.9')
{
	$b = '4500';
}elseif($a == '91' or $a == '91')
{
	$b = '5000';
}elseif($a == '100.0' or $a == '100.00')
{
	$b = '5500';
}elseif($a == '109.2' or $a == '109.20')
{
	$b = '6000';
}elseif($a == '118.30' or $a == '118.3')
{
	$b = '6500';
}elseif($a == '127.40' or $a == '127.4')
{
	$b = '7000';
}elseif($a == '136.50' or $a == '136.5')
{
	$b = '7500';
}elseif($a == '145.60' or $a == '145.6')
{
	$b = '8000';
}elseif($a == '154.70' or $a == '154.7')
{
	$b = '8500';
}elseif($a == '163.80' or $a == '163.8')
{
	$b = '9000';
}
/* Jeśli wszystko ok to zaczynamy ksiegowanie */
if($_POST['amount']!=null and $_POST['control']!=null){
$control= $_POST['item_number'];
$amount= $_POST['amount'];
if(is_numeric($control)==true and is_numeric($amount)){
/* tabela mysql [transid w primary z autoinkrementem], [uid], [kwota], [czas] */
 
$sql = $db->query('update users set punkty = punkty + "'.$b.'" where id = "'.$control.'"');
 
echo 'Wykonano pomyślnie';
}
}
[PHP] pobierz, plaintext 

Czy formularze i skrypty kończące są dobrze napisane?

Pozdrawiam

Powód edycji: [Spawnm]: