include "../islemler/baglan.php";
    if(isset($_POST['urunsatinal'])){
    $urunid = $_POST['urun_id'];
    $kulmail = $_POST['kul_mail'];
    $random_id = "11".rand(1,999).rand(1,88)*rand(1,50);
    
    $sorgu=$db->prepare("SELECT * FROM urunler WHERE id=:id");
    $sorgu->execute(array(
    'id' => $urunid
    ));
    $uruncek=$sorgu->fetch(PDO::FETCH_ASSOC);

    $kullanicisorgu=$db->prepare("SELECT * FROM kullanicilar WHERE kul_mail=:kul_mail");
    $kullanicisorgu->execute(array(
    'kul_mail' => $kulmail
    ));
    $kullanicicek=$kullanicisorgu->fetch(PDO::FETCH_ASSOC);

        
        $siparisekle=$db->prepare("INSERT INTO siparisler SET siparis_urunid=:siparis_urunid,siparis_urunadi=:siparis_urunadi,siparis_alanid=:siparis_alanid,siparis_fiyat=:siparis_fiyat,siparis_durum=:siparis_durum,paytr_id=:paytr_id");
        
        $insert=$siparisekle->execute(array(
          'siparis_urunid' => $uruncek['id'],
          'siparis_urunadi' => $uruncek['urun_adi'],
          'siparis_alanid' => $kullanicicek['kul_id'],
          'siparis_fiyat'  => $uruncek['urun_fiyat'],
          'siparis_durum'  => "0",
          'paytr_id' => $random_id
        ));
        

    $merchant_id     = '****';
    $merchant_key     = '***';
    $merchant_salt    = '***';

    $email = $kullanicicek['kul_mail'];
    $payment_amount    = $uruncek['urun_fiyat']*100; 
    $merchant_oid = $random_id;
    $user_name = $kullanicicek['kul_isim'];
    $user_address = "Derince/Kocaeli";
    $user_phone = $kullanicicek['kul_telefon'];
    $merchant_ok_url = "https://siteismi.com/musteri-paneli/urunler.php?durum=ok";
    $merchant_fail_url = "https://siteismi.com/musteri-paneli/urunler.php?durum=hta";

    $user_basket = array($uruncek['urun_adi'],$uruncek['urun_fiyat'], 1);

    if( isset( $_SERVER["HTTP_CLIENT_IP"] ) ) {
        $ip = $_SERVER["HTTP_CLIENT_IP"];
    } elseif( isset( $_SERVER["HTTP_X_FORWARDED_FOR"] ) ) {
        $ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
    } else {
        $ip = $_SERVER["REMOTE_ADDR"];
    }

    $user_ip=$ip;
    $timeout_limit = "30";
    $debug_on = 1;
    $test_mode = 1;

    $no_installment    = 0; 
    $max_installment = 0;

    $currency = "TL";
    
    $hash_str = $merchant_id .$user_ip .$merchant_oid .$email .$payment_amount .$user_basket.$no_installment.$max_installment.$currency.$test_mode;
    $paytr_token=base64_encode(hash_hmac('sha256',$hash_str.$merchant_salt,$merchant_key,true));
    $post_vals=array(
            'merchant_id'=>$merchant_id,
            'user_ip'=>$user_ip,
            'merchant_oid'=>$merchant_oid,
            'email'=>$email,
            'payment_amount'=>$payment_amount,
            'paytr_token'=>$paytr_token,
            'user_basket'=>$user_basket,
            'debug_on'=>$debug_on,
            'no_installment'=>$no_installment,
            'max_installment'=>$max_installment,
            'user_name'=>$user_name,
            'user_address'=>$user_address,
            'user_phone'=>$user_phone,
            'merchant_ok_url'=>$merchant_ok_url,
            'merchant_fail_url'=>$merchant_fail_url,
            'timeout_limit'=>$timeout_limit,
            'currency'=>$currency,
            'test_mode'=>$test_mode
        );
    
    $ch=curl_init();
    curl_setopt($ch, CURLOPT_URL, "https://www.paytr.com/odeme/api/get-token");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_POST, 1) ;
    curl_setopt($ch, CURLOPT_POSTFIELDS, $post_vals);
    curl_setopt($ch, CURLOPT_FRESH_CONNECT, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 20);
    

    $result = @curl_exec($ch);

    if(curl_errno($ch))
        die("PAYTR IFRAME connection error. err:".curl_error($ch));

    curl_close($ch);
    
    $result=json_decode($result,1);
        
    if($result['status']=='success')
        $token=$result['token'];
    else
        die("PAYTR IFRAME failed. reason:".$result['reason']);
    #########################################################################
    
    }