STORT PHL

DIGITAL GOODS BAZAAR

\n 👤\n \n

\n 🔑\n \n

\n \n

\n 🔗\n Chưa có mật khẩu? Nhắn /setpassword cho bot Telegram\n

\n \n \n\n`;\n}\n\nfunction storePage(user: any): string {\n return `\n\n\n \n \n STORT PHL — Cửa hàng\n \n\n\n

STORT PHL

\n 💵 ${fmt(user.balance)}\n \n

THÔNG TIN TÀI KHOẢN

👤 Username${user.username}

💵 Số dư${\n fmt(user.balance)\n }

📥 Tổng nạp${\n fmt(user.totalDeposit)\n }

📤 Tổng chi${\n fmt(user.totalSpent)\n }

🛒 SP đã mua${user.totalBought}

NẠP TIỀN

\n 🏦 Vietcombank
\n 📋 STK: ${BANK.accountNo}
\n 👤 Chủ TK: ${BANK.name}
\n 📝 Nội dung: NAP ${user.username.toUpperCase()}
\n ⚠️ Tối thiểu 10.000đ\n

\n \n\n`;\n}\n\n// ─── SESSION ĐƠN GIẢN (in-memory) ───────────────────────────────────────────\nconst sessions = new Map();\nfunction generateToken() {\n return Math.random().toString(36).slice(2) + Date.now().toString(36);\n}\n\n// ─── HANDLER CHÍNH ───────────────────────────────────────────────────────────\nexport default async function handler(req: Request): Promise {\n await initDB();\n\n const url = new URL(req.url);\n const STORE_URL = url.origin;\n\n // ── Setup webhook ──\n if (url.searchParams.get(\"setup\") === \"1\") {\n const webhookUrl = url.origin + url.pathname;\n const result = await bot.api.setWebhook(webhookUrl, {\n drop_pending_updates: true,\n });\n return new Response(\n result\n ? `✅ Webhook đã đăng ký!\\n📡 URL: ${webhookUrl}\\n\\nBot đang hoạt động 24/7.`\n : \"❌ Lỗi đăng ký webhook\",\n { status: 200, headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } },\n );\n }\n\n // ── Webhook Telegram ──\n if (req.method === \"POST\" && url.pathname === \"/\") {\n try {\n return await handleUpdate(req);\n } catch (e) {\n console.error(\"Webhook error:\", e);\n return new Response(\"OK\", { status: 200 });\n }\n }\n\n // ── Trang đăng nhập ──\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return new Response(loginPage(STORE_URL), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // ── API Đăng nhập ──\n if (req.method === \"POST\" && url.pathname === \"/login\") {\n const body = await req.json();\n const u = await getUserByUsername(body.username);\n if (!u || !u.password || u.password !== body.password) {\n return Response.json({ ok: false, error: \"Sai username hoặc mật khẩu.\" });\n }\n const token = generateToken();\n sessions.set(token, u.username);\n return new Response(JSON.stringify({ ok: true }), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\":\n `session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400`,\n },\n });\n }\n\n // ── API Đăng xuất ──\n if (req.method === \"POST\" && url.pathname === \"/logout\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n if (token) sessions.delete(token);\n return new Response(JSON.stringify({ ok: true }), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\": \"session=; Path=/; Max-Age=0\",\n },\n });\n }\n\n // ── Trang store (cần đăng nhập) ──\n if (req.method === \"GET\" && url.pathname === \"/store\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n const username = token ? sessions.get(token) : null;\n if (!username) return Response.redirect(url.origin + \"/\", 302);\n const u = await getUserByUsername(username);\n if (!u) return Response.redirect(url.origin + \"/\", 302);\n return new Response(storePage(u), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // ── API nạp tiền (từ form web) ──\n if (req.method === \"POST\" && url.pathname === \"/deposit-request\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n const username = token ? sessions.get(token) : null;\n if (!username) {\n return Response.json({ ok: false, error: \"Chưa đăng nhập\" }, {\n status: 401,\n });\n }\n const body = await req.json();\n const amount = parseInt(body.amount);\n if (isNaN(amount) || amount < BANK.min) {\n return Response.json({ ok: false, error: `Tối thiểu ${fmt(BANK.min)}` });\n }\n await sqlite.execute(\n \"INSERT INTO deposit_requests (username,amount,memo) VALUES (?,?,?)\",\n [username, amount, `NAP ${username.toUpperCase()}`],\n );\n return Response.json({ ok: true });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}",[136],"pulls","forks","envVars",{"_148":51,"_150":51},"connections",{"_148":51,"_149":51},"count","unfilledCount","emptyCount",{"_20":135,"_13":136,"_119":137,"_121":-5,"_122":21,"_123":30,"_125":110,"_22":157,"_29":139,"_128":129,"_130":140,"_132":38,"_133":-5,"_154":158,"_91":159},{"_20":117,"_13":118,"_119":120,"_121":-5,"_122":21,"_123":124,"_125":110,"_22":153,"_29":127,"_128":129,"_130":131,"_132":38,"_133":-5,"_154":155,"_91":156},["D",1779072264740],"children",[],[118],["D",1779077206167],[],[136],["D",1779066141785],["D",1789555289887],{"_11":12,"_89":85},{"_11":12,"_82":83,"_84":85,"_44":45,"_86":87,"_88":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_77":-5,"_78":-5,"_79":-5,"_80":14,"_81":12},"ctx",{"_70":-5,"_112":198,"_199":200,"_201":202,"_203":38,"_204":38,"_205":38,"_206":110,"_207":-5,"_208":-7,"_209":-7,"_210":51,"_211":38,"_212":38,"_213":-5,"_214":38,"_215":38,"_216":38,"_217":-5},"ENV",{"_169":170,"_171":172,"_173":26,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1