View file public_html/vipadz/money/transfer.php

<?php

include '../../db.php';
include '../../functions.php';

headtag("$SiteName - Send Money");

if($adminlog==1){
$receiver=formget("receiver");
echo '<div class="title">Transfer Money To Receiver <font color="red">'.$receiver.'</font></div>';
 {
 if(isset($_POST["sender"]) AND isset($_POST["amount"]) AND isset($_POST["mode"])){

$sender=formpost("sender");
$amount=formpost("amount");
$mode=formpost("mode");
$date=date("d-m-Y");

$set = mysql_query("SELECT * FROM moneyconfig");
$ing = mysql_fetch_array($set);
$pin=$ing["pin"];
$authkey=$ing["authkey"];
$perdaytransfer=$ing["perdaytransfer"];

if($perdaytransfer=="Enabled")
{
$querydata=mysql_query("SELECT id FROM transfers WHERE receiver='$receiver' AND date='$date' AND status='Success'");
}
$errors=array();

if(strlen($sender)<1){
  $errors[]='Please Select Sender.';
 }
if(strlen($amount)<1){
  $errors[]='Please Enter Amount.';
 }
if(strlen($mode)<1){
  $errors[]='Please Select Mode.';
 }

if(mysql_num_rows($querydata) > 0)
{
           $errors[]="You Have Already Transferred Money To This Receiver Today. Now You Can Send Again Tomorrow.";
}

if(empty($errors)){

$url='https://www.pay2all.in/moneyapi/pay/money_transfer?pin='.$pin.'&authkey='.$authkey.'&senderid='.$sender.'&receiverid='.$receiver.'&amount='.$amount.'&mode='.$mode.'';
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_FAILONERROR, TRUE);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 9);
$transfer_contents = curl_exec($ch);
$transfer_decode=json_decode($transfer_contents);
$payid=$transfer_decode->payid;
$status=$transfer_decode->status;
$txnid=$transfer_decode->txnid;
$tnxmode=$transfer_decode->mode;
$time=$transfer_decode->time;
$txnid=$transfer_decode->txnid;
$message=$transfer_decode->message;
curl_close($ch);

if($status=='Success')
{
$doit=mysql_query("INSERT INTO transfers (sender, receiver, date, time, amount, tnxid, payid, mode, status)
VALUES ('$sender', '$receiver', '$date', '$time', '$amount', '$txnid', '$payid', '$tnxmode', 'Pending')");
}

  if($doit){
   echo '<div class="success">Receiver: '.$receiver.' '.$amount.' Rs Payment Request Successfull. <a href="verifytransfer.php?tnxid='.$txnid.'">Click Here For Verification</a></div>';
  }
  else {
   echo '<div class="error">'.$message.'</div>';
}

}
else {

dump_error($errors);

}
}

$getrec=mysql_fetch_array(mysql_query("SELECT sender,name,accountno,ifsc FROM receivers WHERE receiverid='$receiver' AND status='Verified'"));
$sender=$getrec["sender"];
$name=$getrec["name"];
$accountno=$getrec["accountno"];
$ifsc=$getrec["ifsc"];
echo '<div class="form"><form method="post">Sender<br/><select name="sender"><option value="'.$sender.'">'.$sender.'</option></select><br/>Amount<br/><input type="text" name="amount""/><br/>Mode<br/><select name="mode" style="width:170px">    
 <option value="IMPS" selected="yes">IMPS</option>
 <option value="NEFT">NEFT</option>
 </select>
<br/>Name<br/><input type="text" value="'.$name.'" disabled="disabled"/><br/>Account No<br/><input type="text" value="'.$accountno.'" disabled="disabled"/><br/>IFSC Code<br/><input type="text" value="'.$ifsc.'" disabled="disabled"/><br/><input type="submit" value="Send Money"/></form></div>';

}

 echo '<a href="transfers.php"><div class="ua">Transfers</div></a>';
 include '../../foot.php';
 }
 else {
 header('Location:/login.php');
 }
 ?>