Payment Wall

[TheQE]

I found pingback in SubHelper folder
Code:

<?php
session_start();
// MySql Settinngs
include site_configs/con_set.php;
define(SECRET, HERE YOU SECRET CODE);
define(CREDIT_TYPE_CHARGEBACK, 2);

$ipsWhitelist = array(
        174.36.92.186,
        174.36.96.66,
        174.36.92.187,
        174.36.92.192,
        174.37.14.28
);
$userId = isset($_GET[uid]) ? $_GET[uid] : null;
$credits = isset($_GET[currency]) ? $_GET[currency] : null;
$type = isset($_GET[type]) ? $_GET[type] : null;
$refId = isset($_GET[ref]) ? $_GET[ref] : null;
$signature = isset($_GET[sig]) ? $_GET[sig] : null;
$result = false;
if (!empty($userId) && !empty($credits) && isset($type) && !empty($refId) && !empty($signature)) {
        $signatureParams = array(
                uid => $userId,
                currency => $credits,
                type => $type,
                ref => $refId
        );
        $signatureCalculated = generateSignature($signatureParams, SECRET);
        // check if IP is in whitelist and if signature matches
        if (in_array($_SERVER[REMOTE_ADDR], $ipsWhitelist) && ($signature == $signatureCalculated)) {
                $result = true;
                $user = mysql_real_escape_string($userId);
                $cash = mysql_real_escape_string($credits);
                $mysql = mysql_select_db( $SiteSQL["config-database_auth"] , $Site_sqlcon) or die( mysql_error() );
                mysql_query("UPDATE bg_user SET cash = cash + ".$cash." WHERE user_id = ".$user."");
                
        }
}
if ($result) {
        echo OK;
}
function generateSignature($params, $secret) {
        $str = ;
        foreach ($params as $k=>$v) {
                $str .= "$k=$v";
        }
        $str .= $secret;
        return md5($str);
}