STORT PHL

DIGITAL GOODS BAZAAR

\n 👤\n \n

\n 🔑\n \n

\n \n

\n 🔗\n Chưa có mật khẩu? Nhắn /setpassword cho bot Telegram\n

\n \n \n\n`;\n}\n\nfunction storePage(user: any): string {\n return `\n\n\n \n \n STORT PHL — Cửa hàng\n \n\n\n

STORT PHL

\n 💵 ${fmt(user.balance)}\n \n

THÔNG TIN TÀI KHOẢN

👤 Username${user.username}

💵 Số dư${\n fmt(user.balance)\n }

📥 Tổng nạp${\n fmt(user.totalDeposit)\n }

📤 Tổng chi${\n fmt(user.totalSpent)\n }

🛒 SP đã mua${user.totalBought}

NẠP TIỀN

\n 🏦 Vietcombank
\n 📋 STK: ${BANK.accountNo}
\n 👤 Chủ TK: ${BANK.name}
\n 📝 Nội dung: NAP ${user.username.toUpperCase()}
\n ⚠️ Tối thiểu 10.000đ\n

\n \n\n`;\n}\n\n// ─── SESSION ĐƠN GIẢN (in-memory) ───────────────────────────────────────────\nconst sessions = new Map();\nfunction generateToken() {\n return Math.random().toString(36).slice(2) + Date.now().toString(36);\n}\n\n// ─── HANDLER CHÍNH ───────────────────────────────────────────────────────────\nexport default async function handler(req: Request): Promise {\n await initDB();\n\n const url = new URL(req.url);\n const STORE_URL = url.origin;\n\n // ── Setup webhook ──\n if (url.searchParams.get(\"setup\") === \"1\") {\n const webhookUrl = url.origin + url.pathname;\n const result = await bot.api.setWebhook(webhookUrl, {\n drop_pending_updates: true,\n });\n return new Response(\n result\n ? `✅ Webhook đã đăng ký!\\n📡 URL: ${webhookUrl}\\n\\nBot đang hoạt động 24/7.`\n : \"❌ Lỗi đăng ký webhook\",\n { status: 200, headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } },\n );\n }\n\n // ── Webhook Telegram ──\n if (req.method === \"POST\" && url.pathname === \"/\") {\n try {\n return await handleUpdate(req);\n } catch (e) {\n console.error(\"Webhook error:\", e);\n return new Response(\"OK\", { status: 200 });\n }\n }\n\n // ── Trang đăng nhập ──\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return new Response(loginPage(STORE_URL), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // ── API Đăng nhập ──\n if (req.method === \"POST\" && url.pathname === \"/login\") {\n const body = await req.json();\n const u = await getUserByUsername(body.username);\n if (!u || !u.password || u.password !== body.password) {\n return Response.json({ ok: false, error: \"Sai username hoặc mật khẩu.\" });\n }\n const token = generateToken();\n sessions.set(token, u.username);\n return new Response(JSON.stringify({ ok: true }), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\":\n `session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400`,\n },\n });\n }\n\n // ── API Đăng xuất ──\n if (req.method === \"POST\" && url.pathname === \"/logout\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n if (token) sessions.delete(token);\n return new Response(JSON.stringify({ ok: true }), {\n headers: {\n \"Content-Type\": \"application/json\",\n \"Set-Cookie\": \"session=; Path=/; Max-Age=0\",\n },\n });\n }\n\n // ── Trang store (cần đăng nhập) ──\n if (req.method === \"GET\" && url.pathname === \"/store\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n const username = token ? sessions.get(token) : null;\n if (!username) return Response.redirect(url.origin + \"/\", 302);\n const u = await getUserByUsername(username);\n if (!u) return Response.redirect(url.origin + \"/\", 302);\n return new Response(storePage(u), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // ── API nạp tiền (từ form web) ──\n if (req.method === \"POST\" && url.pathname === \"/deposit-request\") {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const token = cookie.split(\";\").find((c) => c.trim().startsWith(\"session=\"))\n ?.split(\"=\")[1];\n const username = token ? sessions.get(token) : null;\n if (!username) {\n return Response.json({ ok: false, error: \"Chưa đăng nhập\" }, {\n status: 401,\n });\n }\n const body = await req.json();\n const amount = parseInt(body.amount);\n if (isNaN(amount) || amount < BANK.min) {\n return Response.json({ ok: false, error: `Tối thiểu ${fmt(BANK.min)}` });\n }\n await sqlite.execute(\n \"INSERT INTO deposit_requests (username,amount,memo) VALUES (?,?,?)\",\n [username, amount, `NAP ${username.toUpperCase()}`],\n );\n return Response.json({ ok: true });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}",[130],"pulls","branches","forks","envVars",{"_143":39,"_145":39},"connections",{"_143":39,"_144":39},"count","unfilledCount","emptyCount",{"_18":129,"_20":130,"_113":131,"_115":-5,"_116":68,"_117":66,"_119":104,"_22":152,"_65":133,"_122":123,"_124":134,"_126":26,"_127":-5,"_149":153,"_86":154},{"_18":111,"_20":112,"_113":114,"_115":-5,"_116":68,"_117":118,"_119":104,"_22":148,"_65":121,"_122":123,"_124":125,"_126":26,"_127":-5,"_149":150,"_86":151},["D",1779072264740],"children",[],[112],["D",1779077206167],[],[130],["D",1779066141785],["D",1789555289887],{"_16":17,"_84":80},{"_16":17,"_77":78,"_79":80,"_32":33,"_81":82,"_83":26},{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"ctx",{"_58":-5,"_106":193,"_194":195,"_196":197,"_198":26,"_199":26,"_200":26,"_201":104,"_202":-5,"_203":-7,"_204":-7,"_205":39,"_206":26,"_207":26,"_208":-5,"_209":26,"_210":26,"_211":26,"_212":-5},"ENV",{"_164":165,"_166":167,"_168":67,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Search