<?php
    if (isset($_POST['popoln'])){
    echo "Пополнить счет на сумму  <b>".$_POST['ps']." руб.</b>?";
$m_shop = '0000000';
$m_orderid = $userdata['pk_user'];
$m_amount = number_format($_POST['ps'], 2, '.', '');
$m_curr = 'RUB';
$m_desc = base64_encode('Пополнение счета на Soc-Money.net');
$m_key = '000000000';
$arHash = array(
    $m_shop,
    $m_orderid,
    $m_amount,
    $m_curr,
    $m_desc,
    $m_key
);
$sign = strtoupper(hash('sha256', implode(':', $arHash)));
?>
<form method="GET" action="//payeer.com/merchant/">
<input type="hidden" name="m_shop" value="<?=$m_shop?>">
<input type="hidden" name="m_orderid" value="<?=$m_orderid?>">
<input type="hidden" name="m_amount" value="<?=$m_amount?>">
<input type="hidden" name="m_curr" value="<?=$m_curr?>">
<input type="hidden" name="m_desc" value="<?=$m_desc?>">
<input type="hidden" name="m_sign" value="<?=$sign?>">
<input type="submit" name="m_process" value="Пополнить" />
</form>

<?php


if (isset($_POST['m_operation_id']) && isset($_POST['m_sign']))
{
    
    $m_key = '0000000000';
    $arHash = array($_POST['m_operation_id'],
            $_POST['m_operation_ps'],
            $_POST['m_operation_date'],
            $_POST['m_operation_pay_date'],
            $_POST['m_shop'],
            $_POST['m_orderid'],
            $_POST['m_amount'],
            $_POST['m_curr'],
            $_POST['m_desc'],
            $_POST['m_status'],
            $m_key);
    $sign_hash = strtoupper(hash('sha256', implode(':', $arHash)));
    if ($_POST['m_sign'] == $sign_hash && $_POST['m_status'] == 'success')
    {
        echo $_POST['m_orderid'].'|success';
        exit;
    }
    echo $_POST['m_orderid'].'|error';
}

    }
    else {
        ?>
        <form action="" method="post">
    <input name="ps" type="text">
    <input name="popoln" type="submit" value="Пополнить">
    </form>
    <?php
    }

if (isset($_POST['m_operation_id']) && isset($_POST['m_sign']))
{
    
    $m_key = '00000000';
    $arHash = array($_POST['m_operation_id'],
            $_POST['m_operation_ps'],
            $_POST['m_operation_date'],
            $_POST['m_operation_pay_date'],
            $_POST['m_shop'],
            $_POST['m_orderid'],
            $_POST['m_amount'],
            $_POST['m_curr'],
            $_POST['m_desc'],
            $_POST['m_status'],
            $m_key);
    $sign_hash = strtoupper(hash('sha256', implode(':', $arHash)));
    if ($_POST['m_sign'] == $sign_hash && $_POST['m_status'] == 'success')
    {
        mysql_query("UPDATE users SET balanse_popolnen=balanse_popolnen+'".$_POST['m_amount']."' WHERE pk_user='$id'");
        echo $_POST['m_orderid'].'|success';
        exit;
    }
    echo $_POST['m_orderid'].'|error';
}

    }