<?php
$txnid = isset($_GET['txnid']) ? filter_var($_GET['txnid'], FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH) : '';
$token = isset($_GET['token']) ? filter_var($_GET['token'], FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH) : '';
$status = isset($_GET['status']) ? filter_var($_GET['status'], FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH) : '';

if ($txnid && $token && $status) {
    $mysqli = new mysqli('localhost', 'akiniktransactions', '.3[HO07+LWo{', 'akiniktransactions');

    $stmt = $mysqli->prepare("SELECT COUNT(*), success_url, failed_url FROM transactions WHERE (txnid = ? AND token = ?)");
    $stmt->bind_param('ss', $txnid, $token);
    $stmt->execute();
    $stmt->store_result();
    $stmt->bind_result($count, $success_url, $failed_url);
    $stmt->fetch();
    $stmt->close();
    if ($count == 1) {
        if ($status === 'success') {
            header('Location:' . $success_url); exit();
        }
        if ($status === 'failed') {
            header('Location:' . $failed_url); exit();
        }
    } else {
        header('Location:https://www.akinik.com'); exit();
    }
} else {
    header('Location:https://www.akinik.com'); exit();
}
?>