STORT PHL

DIGITAL GOODS BAZAAR

\n 👤\n \n

\n 🔑\n \n

\n \n

\n 🔗\n Chưa có mật khẩu? Nhắn /setpassword cho bot Telegram\n

\n \n \n\n`;\n}\n\nfunction storePage(user: any): string {\n return `\n\n\n \n \n STORT PHL — Cửa hàng\n \n\n\n

STORT PHL

\n 💵 ${fmt(user.balance)}\n \n

THÔNG TIN TÀI KHOẢN

👤 Username${user.username}

💵 Số dư${\n fmt(user.balance)\n }

📥 Tổng nạp${\n fmt(user.totalDeposit)\n }

📤 Tổng chi${\n fmt(user.totalSpent)\n }

🛒 SP đã mua${user.totalBought}

NẠP TIỀN

\n 🏦 Vietcombank
\n 📋 STK: ${BANK.accountNo}
\n 👤 Chủ TK: ${BANK.name}
\n 📝 Nội dung: NAP ${user.username.toUpperCase()}
\n ⚠️ Tối thiểu 10.000đ\n

\n \n\n`;\n}\n\n// ─── SESSION ĐƠN GIẢN (in-memory) ───────────────────────────────────────────\nconst sessions = new Map();\nfunction generateToken() {\n return Math.random().toString(36).slice(2) + Date.now().toString(36);\n}\n\n// ─── HANDLER CHÍNH ───────────────────────────────────────────────────────────\nexport default async function handler(req: Request): Promise {\n await initDB();\n\n const url = new URL(req.url);\n const STORE_URL = url.origin;\n\n // ── Setup webhook ──\n if (url.searchParams.get(\"setup\") === \"1\") {\n const webhookUrl = url.origin + url.pathname;\n const result = await bot.api.setWebhook(webhookUrl, {\n drop_pending_updates: true,\n });\n return new Response(\n result\n ? `✅ Webhook đã đăng ký!\\n📡 URL: ${webhookUrl}\\n\\nBot đang hoạt động 24/7.`\n : \"❌ Lỗi đăng ký webhook\",\n { status: 200, headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } },\n );\n }\n\n // ── Webhook Telegram ──\n if (req.method === \"POST\" && url.pathname === \"/\") {\n try {\n return await handleUpdate(req);\n } catch (e) {\n console.error(\"Webhook error:\", e);\n return new Response(\"OK\", { status: 200 });\n }\n }\n\n // ── Trang đăng nhập ──\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return new Response(loginPage(STORE_URL), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // ── API Đăng nhập ──\n if (req.method === \"POST\" && url.pathname === \"/login\") {\n const body = await req.json();\n const u = await getUserByUsername(body.username);\n if (!u || !u.password || u.password !== body.password) {\n return Response.json({ ok: false, error: \"Sai username hoặc mật khẩu.\" });\n }\n const token = generateToken();\n sessions.set(token, u.username);\n return new Response(JSON.stringify({ ok: true }), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\":\n `session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400`,\n },\n });\n }\n\n // ── API Đăng xuất ──\n if (req.method === \"POST\" && url.pathname === \"/logout\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n if (token) sessions.delete(token);\n return new Response(JSON.stringify({ ok: true }), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\": \"session=; Path=/; Max-Age=0\",\n },\n });\n }\n\n // ── Trang store (cần đăng nhập) ──\n if (req.method === \"GET\" && url.pathname === \"/store\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n const username = token ? sessions.get(token) : null;\n if (!username) return Response.redirect(url.origin + \"/\", 302);\n const u = await getUserByUsername(username);\n if (!u) return Response.redirect(url.origin + \"/\", 302);\n return new Response(storePage(u), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // ── API nạp tiền (từ form web) ──\n if (req.method === \"POST\" && url.pathname === \"/deposit-request\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n const username = token ? sessions.get(token) : null;\n if (!username) {\n return Response.json({ ok: false, error: \"Chưa đăng nhập\" }, {\n status: 401,\n });\n }\n const body = await req.json();\n const amount = parseInt(body.amount);\n if (isNaN(amount) || amount < BANK.min) {\n return Response.json({ ok: false, error: `Tối thiểu ${fmt(BANK.min)}` });\n }\n await sqlite.execute(\n \"INSERT INTO deposit_requests (username,amount,memo) VALUES (?,?,?)\",\n [username, amount, `NAP ${username.toUpperCase()}`],\n );\n return Response.json({ ok: true });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}",[],[65],{"_40":64,"_13":65,"_43":66,"_45":-5,"_46":47,"_48":67,"_50":34,"_51":77,"_16":69,"_54":55,"_56":70,"_58":36,"_59":-5,"_62":78},{"_40":41,"_13":42,"_43":44,"_45":-5,"_46":47,"_48":49,"_50":34,"_51":75,"_16":53,"_54":55,"_56":57,"_58":36,"_59":-5,"_62":76},["D",1779072264740],[42],["D",1779077206167],[65],"pulls",0,"branches","forks","envVars",{"_87":80,"_89":80},"connections",{"_87":80,"_88":80},"count","unfilledCount","emptyCount","39a2c816-5255-11f1-a98c-ee650bb23af1",["D",1779066141785],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","f2481e92-a5b3-4e33-b5e5-16d09f5db5a7","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019e2e4a-a137-7707-9a63-fefdf136c1db","tursoName","39a2c816525511f1a98cee650bb23af1","tursoHostname","39a2c816525511f1a98cee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789468254172],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_147":143},"org",{"_11":12,"_140":141,"_142":143,"_99":100,"_144":145,"_146":36},"branch",{"_16":67,"_13":131,"_40":47,"_132":90,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":14,"_139":12},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","LONG PHẠM","avatar","https://lh3.googleusercontent.com/a/ACg8ocJss9C4mawe-_hl76iYlqEJquNzBxJA2KXzp58yDjl-FFR1Ykqc=s96-c","tier","free","canRestrictVals","profileImageUrl","","adoptOrgId",{"_40":90,"_13":14,"_51":179,"_92":-5,"_93":36,"_94":95,"_96":95,"_97":-5,"_98":-5,"_99":100,"_101":-5,"_102":36,"_103":-5,"_104":-5,"_105":80,"_106":107,"_108":109,"_110":111,"_112":180,"_114":-5,"_115":116,"_117":116,"_118":119,"_120":119,"_121":119,"_122":116,"_123":116,"_124":181,"_126":182,"_128":183,"_130":36},"tree",[173,174],[173,174],{"_79":80,"_81":69,"_82":80,"_83":171,"_85":172},[167,168],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_40":64,"_13":65,"_43":66,"_45":-5,"_46":47,"_48":67,"_50":34,"_51":77,"_16":69,"_54":55,"_56":70,"_58":36,"_59":-5,"_62":170},{"_40":41,"_13":42,"_43":44,"_45":-5,"_46":47,"_48":49,"_50":34,"_51":75,"_16":53,"_54":55,"_56":57,"_58":36,"_59":-5,"_62":169},[42],[65],{"_87":80,"_89":80},{"_87":80,"_88":80},{"_40":64,"_13":65,"_43":66,"_45":-5,"_46":47,"_48":67,"_50":34,"_51":68,"_16":69,"_54":55,"_56":70,"_58":36,"_59":-5,"_60":177,"_62":178},{"_40":41,"_13":42,"_43":44,"_45":-5,"_46":47,"_48":49,"_50":34,"_51":52,"_16":53,"_54":55,"_56":57,"_58":36,"_59":-5,"_60":175,"_62":176},[],[42],[],[65],["D",1779066141785],["D",1789468254172],{"_11":12,"_147":143},{"_11":12,"_140":141,"_142":143,"_99":100,"_144":145,"_146":36},{"_16":67,"_13":131,"_40":47,"_132":90,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":14,"_139":12},"ctx",{"_124":-5,"_164":217,"_218":219,"_220":221,"_222":36,"_223":36,"_224":36,"_225":34,"_226":-5,"_227":-7,"_228":-7,"_229":80,"_230":36,"_231":36,"_232":-5,"_233":36,"_234":36,"_235":36,"_236":-5},"ENV",{"_188":189,"_190":191,"_192":131,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

longpham

untitled-3955