📡 ScapePulse Vote Callback System

<?php
// ScapePulse Vote Callback Handler
include 'config.php';

// Database connection
$db = new PDO("mysql:host=$host;dbname=$database", $username, $password);

// Process all callback parameters
foreach ($_REQUEST as $player => $uid) {
    // Validate UID format (alphanumeric + underscores only)
    if (!preg_match('/^[a-zA-Z0-9_]+$/', $uid)) {
        error_log("Invalid UID format: " . $uid);
        continue;
    }
    
    // Validate username format
    if (!preg_match('/^[a-zA-Z0-9_]{1,64}$/', $player)) {
        error_log("Invalid username format: " . $player);
        continue;
    }
    
    // Check if vote already processed
    $stmt = $db->prepare("SELECT id FROM votes WHERE uid = ? AND processed = 1");
    $stmt->execute([$uid]);
    
    if ($stmt->rowCount() > 0) {
        error_log("Vote already processed: " . $uid);
        continue;
    }
    
    // Process the vote
    try {
        $db->beginTransaction();
        
        // Mark vote as processed
        $stmt = $db->prepare("
            INSERT INTO votes (player_name, uid, processed, vote_time, ip_address) 
            VALUES (?, ?, 1, NOW(), ?)
            ON DUPLICATE KEY UPDATE processed = 1
        ");
        $stmt->execute([$player, $uid, $_SERVER['REMOTE_ADDR']]);
        
        // Give reward to player (example: add 1000 GP)
        $stmt = $db->prepare("
            UPDATE player_data 
            SET coins = coins + 1000, vote_points = vote_points + 1 
            WHERE username = ?
        ");
        $stmt->execute([$player]);
        
        $db->commit();
        
        error_log("Vote processed successfully for " . $player . " (UID: " . $uid . ")");
        
    } catch (Exception $e) {
        $db->rollback();
        error_log("Error processing vote: " . $e->getMessage());
    }
}

// Return success response
http_response_code(200);
echo "OK";
?>

-- Votes table to track callback processing
CREATE TABLE votes (
    id INT PRIMARY KEY AUTO_INCREMENT,
    player_name VARCHAR(64) NOT NULL,
    uid VARCHAR(32) NOT NULL UNIQUE,
    processed TINYINT DEFAULT 0,
    vote_time TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
    ip_address VARCHAR(45),
    INDEX idx_player (player_name),
    INDEX idx_uid (uid),
    INDEX idx_processed (processed)
);

-- Player data table (example)
CREATE TABLE player_data (
    id INT PRIMARY KEY AUTO_INCREMENT,
    username VARCHAR(64) NOT NULL UNIQUE,
    coins BIGINT DEFAULT 0,
    vote_points INT DEFAULT 0,
    last_vote TIMESTAMP NULL
);