<?php
// odeme.php - BoxPvP Paket Satın Alma Sayfası
session_start();

// ============= PAYTR API BİLGİLERİNİ BURAYA GİR =============
$merchant_id    = 'BURAYA_MAGAZA_NO';      // PayTR'dan aldığın Mağaza No
$merchant_key   = 'BURAYA_MAGAZA_ANAHTARI'; // PayTR'dan aldığın Mağaza Anahtarı
$merchant_salt  = 'BURAYA_MAGAZA_TUZU';     // PayTR'dan aldığın Mağaza Tuzu
// ============================================================

// Site adresin (sonunda / olmadan)
$site_url = 'https://www.sarmanetwork.com';

// Paket bilgileri (TL, kuruş cinsinden)
$paketler = [
    'vip'       => ['isim' => 'VIP',       'fiyat' => 5000],   // 50.00 TL
    'svip'      => ['isim' => 'SVIP',      'fiyat' => 8000],   // 80.00 TL
    'mvip'      => ['isim' => 'MVIP',      'fiyat' => 10000],  // 100.00 TL
    'sarmavip'  => ['isim' => 'SarmaVIP',  'fiyat' => 15000],  // 150.00 TL
    'sarmamvip' => ['isim' => 'SarmaMVIP', 'fiyat' => 25000],  // 250.00 TL
];

// URL'den gelen paket adı
$paket_adi = $_GET['paket'] ?? 'vip';

// Paket bulunamazsa VIP'yi göster
if (!isset($paketler[$paket_adi])) {
    $paket_adi = 'vip';
}

$secili_paket = $paketler[$paket_adi];

// ============= FORM GÖNDERİLDİ Mİ? =============
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    
    $kullanici_adi = $_POST['kullanici_adi'] ?? '';
    $email = $_POST['email'] ?? '';
    
    // Basit doğrulama
    if (empty($kullanici_adi) || empty($email)) {
        $hata = "Lütfen tüm alanları doldurun!";
    } else {
        
        // Sipariş numarası oluştur
        $merchant_oid = 'SN' . time() . rand(1000, 9999);
        
        // Kullanıcı IP
        $user_ip = $_SERVER['REMOTE_ADDR'];
        
        // Sepet içeriği (base64 + json)
        $user_basket = base64_encode(json_encode([
            [$secili_paket['isim'] . ' Paketi', $paket_adi, $secili_paket['fiyat'] / 100]
        ]));
        
        // Başarılı/başarısız sayfaları
        $ok_url   = $site_url . '/odeme-basarili.php';
        $fail_url = $site_url . '/odeme-basarisiz.php';
        
        // Token oluştur
        $hash_str = $merchant_id . $user_ip . $merchant_oid . $email . $secili_paket['fiyat'] . $user_basket;
        $paytr_token = base64_encode(hash_hmac('sha256', $hash_str . $merchant_salt, $merchant_key, true));
        
        // PayTR formunu otomatik gönder
        ?>
        <!DOCTYPE html>
        <html lang="tr">
        <head>
            <meta charset="UTF-8">
            <title>Ödemeye Yönlendiriliyor...</title>
            <style>
                body {
                    background: #0a0a1a;
                    display: flex;
                    justify-content: center;
                    align-items: center;
                    min-height: 100vh;
                    font-family: 'Segoe UI', sans-serif;
                    margin: 0;
                }
                .box {
                    background: #1a1a2e;
                    padding: 40px;
                    border-radius: 20px;
                    text-align: center;
                    border: 2px solid #ffd93d;
                }
                .loader {
                    border: 4px solid #1a1a2e;
                    border-top: 4px solid #ffd93d;
                    border-radius: 50%;
                    width: 50px;
                    height: 50px;
                    animation: spin 1s linear infinite;
                    margin: 20px auto;
                }
                @keyframes spin {
                    0% { transform: rotate(0deg); }
                    100% { transform: rotate(360deg); }
                }
                h2 { color: #ffd93d; }
                p { color: #c9ffe5; }
            </style>
        </head>
        <body>
            <div class="box">
                <h2>❤️ Sarma Network</h2>
                <div class="loader"></div>
                <p>PayTR ödeme sayfasına yönlendiriliyorsunuz...</p>
                <p style="color: #ffd93d; font-weight: 700;">
                    <?php echo $secili_paket['isim']; ?> Paketi - <?php echo number_format($secili_paket['fiyat']/100, 2); ?> TL
                </p>
                <p style="font-size: 0.85rem; color: #87ceeb;">
                    Oyuncu: <?php echo htmlspecialchars($kullanici_adi); ?>
                </p>
            </div>

            <!-- PayTR Formu -->
            <form action="https://www.paytr.com/odeme" method="post" id="paytr-form">
                <input type="hidden" name="merchant_id" value="<?php echo $merchant_id; ?>">
                <input type="hidden" name="merchant_key" value="<?php echo $merchant_key; ?>">
                <input type="hidden" name="merchant_salt" value="<?php echo $merchant_salt; ?>">
                <input type="hidden" name="merchant_oid" value="<?php echo $merchant_oid; ?>">
                <input type="hidden" name="email" value="<?php echo htmlspecialchars($email); ?>">
                <input type="hidden" name="payment_amount" value="<?php echo $secili_paket['fiyat']; ?>">
                <input type="hidden" name="paytr_token" value="<?php echo $paytr_token; ?>">
                <input type="hidden" name="user_basket" value="<?php echo $user_basket; ?>">
                <input type="hidden" name="debug_on" value="0">
                <input type="hidden" name="test_mode" value="0">
                <input type="hidden" name="no_installment" value="0">
                <input type="hidden" name="max_installment" value="0">
                <input type="hidden" name="user_name" value="<?php echo htmlspecialchars($kullanici_adi); ?>">
                <input type="hidden" name="user_ip" value="<?php echo $user_ip; ?>">
                <input type="hidden" name="lang" value="tr">
                <input type="hidden" name="currency" value="TL">
                <input type="hidden" name="ok_url" value="<?php echo $ok_url; ?>">
                <input type="hidden" name="fail_url" value="<?php echo $fail_url; ?>">
                <input type="hidden" name="timeout_limit" value="30">
            </form>

            <script>
                // Formu otomatik gönder
                document.getElementById('paytr-form').submit();
            </script>
        </body>
        </html>
        <?php
        exit;
    }
}
?>

<!-- ============= FORM SAYFASI ============= -->
<!DOCTYPE html>
<html lang="tr">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title><?php echo $secili_paket['isim']; ?> Satın Al | Sarma Network</title>
    <meta name="robots" content="noindex, nofollow">
    <style>
        * { margin: 0; padding: 0; box-sizing: border-box; }
        
        body {
            font-family: 'Segoe UI', sans-serif;
            background: linear-gradient(135deg, #0a0a1a, #1a1a2e);
            color: white;
            min-height: 100vh;
            display: flex;
            justify-content: center;
            align-items: center;
            padding: 20px;
        }

        .payment-box {
            background: rgba(26, 26, 46, 0.95);
            border: 2px solid #ffd93d;
            border-radius: 20px;
            padding: 40px;
            max-width: 500px;
            width: 100%;
            text-align: center;
        }

        .payment-box h2 {
            font-size: 2rem;
            color: #ffd93d;
            margin-bottom: 0.5rem;
        }

        .payment-box .icon {
            font-size: 3rem;
            margin-bottom: 0.5rem;
        }

        .divider {
            width: 50px;
            height: 3px;
            background: linear-gradient(90deg, #ff6b6b, #ffd93d);
            margin: 1rem auto;
            border-radius: 2px;
        }

        .price {
            font-size: 3.5rem;
            font-weight: 800;
            color: #ffd93d;
            margin: 1.5rem 0;
        }

        .price small {
            font-size: 1.2rem;
            color: #87ceeb;
        }

        .package-name {
            font-size: 1.3rem;
            color: #ffa07a;
            font-weight: 700;
            margin-bottom: 1rem;
        }

        .form-group {
            margin: 1.2rem 0;
            text-align: left;
        }

        .form-group label {
            display: block;
            margin-bottom: 0.5rem;
            color: #87ceeb;
            font-weight: 600;
            font-size: 0.9rem;
        }

        .form-group input {
            width: 100%;
            padding: 14px 16px;
            border-radius: 12px;
            border: 2px solid rgba(255, 255, 255, 0.2);
            background: rgba(255, 255, 255, 0.05);
            color: white;
            font-size: 1rem;
            transition: all 0.3s;
            outline: none;
        }

        .form-group input:focus {
            border-color: #ffd93d;
            background: rgba(255, 255, 255, 0.1);
        }

        .btn-pay {
            width: 100%;
            padding: 16px;
            background: linear-gradient(135deg, #ffd93d, #ffa07a);
            color: #0a0a1a;
            border: none;
            border-radius: 50px;
            font-size: 1.2rem;