GradyDavis

$ev = stripe_verify($payload, (string)($_SERVER['HTTP_STRIPE_SIGNATURE'] ?? ''), stripe_key('stripe_webhook_secret'));
if (!$ev || empty($ev['id'])) { http_response_code(400); exit('{"ok":false,"error":"Signature check failed"}'); }

// Each event is handled once, even when Stripe sends it again.
try { q('INSERT INTO stripe_events (id, type, created_at) VALUES (?,?,?)', [$ev['id'], (string)($ev['type'] ?? ''), now()]); }
catch (PDOException $e) { exit('{"ok":true,"result":"already handled"}'); }
try {
    $result = shop_handle_event($ev);
    q('DELETE FROM stripe_events WHERE created_at < ?', [date('Y-m-d H:i:s', time() - 60 * 86400)]);
    echo json_encode(['ok' => true, 'result' => $result]);
} catch (Throwable $e) {
    q('DELETE FROM stripe_events WHERE id = ?', [$ev['id']]); // let Stripe retry
    error_log('Stripe webhook ' . ($ev['type'] ?? '') . ' failed: ' . $e->getMessage());
    http_response_code(500);
    echo '{"ok":false}';

function ck_ip_public(string $ip): bool {
    if (!filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) return false;
    if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
        $n = ip2long($ip);
        foreach ([['100.64.0.0', 10], ['192.0.0.0', 24], ['198.18.0.0', 15], ['192.88.99.0', 24], ['224.0.0.0', 4], ['240.0.0.0', 4]] as [$net, $bits]) // shared, protocol, benchmark, relay, multicast, reserved
            if (($n & (-1 << (32 - $bits))) === (ip2long($net) & (-1 << (32 - $bits)))) return false;
        return true;
    }
    $l = strtolower($ip);
    return !preg_match('/^(fc|fd|fe[89ab]|ff|::ffff:|64:ff9b:|2001:db8:|2002:)/', $l);
}
// The address to connect to: an IP, '' (not found) or '!' (points somewhere private). Every address the name has must be public.
function ck_ip(string $host): string {
    static $cache = [];
    if (isset($cache[$host])) return $cache[$host];
    $ips = gethostbynamel($host) ?: [];
    if (function_exists('dns_get_record')) foreach ((array)@dns_get_record($host, DNS_AAAA) as $r) if (!empty($r['ipv6'])) $ips[] = $r['ipv6'];
    if (!$ips) return $cache[$host] = '';
    foreach ($ips as $ip) if (!ck_ip_public($ip)) return $cache[$host] = '!';
    return $cache[$host] = $ips[0];
}

function out_links_error(string $text, string $website): string {
    $own = out_site_domain($website);
    preg_match_all('#https?://[^\s<>()"\']+#i', $text, $m);
    foreach ($m[0] as $u) {
        $h = strtolower(preg_replace('/^www\./', '', (string)parse_url($u, PHP_URL_HOST)));
        $ok = $h !== '' && ($h === $own || in_array($h, OUT_LINK_HOSTS, true));
        if (!$ok) return "Link to $h isn’t allowed. Only our sites and the business’s own website.";
    }
    if (preg_match('/\{\{|\[(MAILING ADDRESS|NAME|BUSINESS|FIRST ?NAME)[^\]]*\]/i', $text)) return 'The email still has a placeholder in it.';
    return '';
}

function build_claim(): ?array {
    if (!build_on()) return null;
    $b = one("SELECT * FROM builds WHERE status IN ('ready','changes') ORDER BY CASE status WHEN 'changes' THEN 0 ELSE 1 END, updated_at LIMIT 1");
    if (!$b) return null;
    $claim = q("UPDATE builds SET status = 'building', claimed_at = ?, attempts = attempts + 1, updated_at = ? WHERE id = ? AND status IN ('ready','changes')", [time(), time(), $b['id']]);
    if ($claim->rowCount() === 0) return null;
    return build_job(build_row((int)$b['id']));
}

function pw_breached(string $pw): int {
    $sha = strtoupper(sha1($pw));
    $url = 'https://api.pwnedpasswords.com/range/' . substr($sha, 0, 5);
    $hdr = ['Add-Padding: true', 'User-Agent: Syndicate-Security-Check'];
    $raw = false;
    if (function_exists('curl_init')) {
        $ch = curl_init($url);
        curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER => true, CURLOPT_HTTPHEADER => $hdr, CURLOPT_TIMEOUT => 5, CURLOPT_CONNECTTIMEOUT => 3]);
        $raw = curl_exec($ch);
        if (curl_getinfo($ch, CURLINFO_RESPONSE_CODE) !== 200) $raw = false;
        curl_close($ch);
    } else {
        $raw = @file_get_contents($url, false, stream_context_create(['http' => ['header' => implode("\r\n", $hdr), 'timeout' => 5]]));
    }
    if (!is_string($raw) || $raw === '') { error_log('Breached-password check unreachable; password allowed.'); return -1; }
    $tail = substr($sha, 5);
    foreach (preg_split('/\r?\n/', $raw) as $line) {
        [$suffix, $count] = array_pad(explode(':', trim($line)), 2, '0');
        if (hash_equals($tail, strtoupper($suffix))) return (int)$count; // padding rows have a count of 0
    }
    return 0;
}