403 Forbidden

�� 403 ForbiddenYOUR IP:216.73.216.102
SERVER IP:35.172.177.19 / solutions.clientpoint.net
DOMAIN ON SERVER :8 Domain
SERVER INFO:Linux ip-172-26-10-115.ec2.internal 4.18.0-513.11.1.el8_9.x86_64 #1 SMP Wed Jan 17 02:00:40 EST 2024 x86_64

<?php
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST');
header("Access-Control-Allow-Headers: X-Requested-With");
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
$logFile = 'logfile.log';

error_reporting(E_ALL);

require_once '../PHPToolkit/NetSuiteService.php';

$service = new NetSuiteService();

if ($file = fopen($logFile, 'a')) {
    // Optionally, you can add a timestamp to each log entry
    fwrite($file, date('Y-m-d H:i:s') . ' - Script started.' . PHP_EOL);
} else {
    // Handle file open error
}

function generateRandomString() {
    $length = 20;
    $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
    $charactersLength = strlen($characters);
    $randomString = '';
    for ($i = 0; $i < $length; $i++) {
        $randomString .= $characters[rand(0, $charactersLength - 1)]; // CAUTION: The rand function does not generate cryptographically secure values
        // Since PHP 7 the cryptographically secure random_int can be used
    }
    return $randomString;
}

// $account = '4661993_SB1';
// $consumerKey = '501f01252029274a27e2752f1b17319656f685b7d0887d8d6c94865ed64d7ea4';
// $consumer_secret = 'dba66943303e874bf621bf9d71fb5303dd01aacf4409fa4586b2a3078f64a2df';
// $token = '7b36add588df3d9adb6ab14d36b4dd43acb92d68eabd9eaa30876346c052ac53';
// $tokenSecret = '4e1fce8b5842768cd245729c5e5c7e7de120711b0e8379c852f2bcb1c276d86d';

//production
$account = '4661993';
$consumerKey = '705b585c35ac6f6ce8ea92e10fe27ac3db54652a747ec382b7efe86f81ca40c0';
$consumer_secret = '49619d1595658db3074b8afba91fe30a76a0a43fcdbd6129e88eb00532ba1bc7';
$token = '20b7c9410b2d1ca083f2c6f5147ef7f49abec6696a57b6b8c7cb4ef43f1a238d';
$tokenSecret = 'fcb0960741bed2605f34181849c2893c04a335bdcdbdeab4e0c0fca2682e1cba';

$nonce = generateRandomString();
$timestamp = time();
$baseString = urlencode($account) ."&". urlencode($consumerKey) ."&". urlencode($token) ."&". urlencode($nonce) ."&". urlencode($timestamp);
$secret = urlencode($consumer_secret) .'&'. urlencode($tokenSecret);
// Create the signature
$signature = base64_encode(hash_hmac('sha256', $baseString, $secret, true));

// Endpoint to retrieve user information
if ($_SERVER['REQUEST_METHOD'] === 'GET' && $_GET['action'] === 'getProductStatus') {

if ($_GET['code']) {
        $service->setSearchPreferences(false, 20);
        $code=$_GET['code'];
        if (strpos($code, '^') !== false) {
            $code = str_replace('^', ' ', $code);
        }

$emailSearchField = new SearchStringField();
        $emailSearchField->operator = "contains";
        $emailSearchField->searchValue = $code;

$search = new ItemSearchBasic();
        $search->itemId = $emailSearchField;

$request = new SearchRequest();
        $request->searchRecord = $search;

// Add retry logic for concurrent request limit errors
        $maxRetries = 3;
        $retryDelay = 1; // Start with 1 second delay
        $searchResponse = null;
        
        for ($attempt = 1; $attempt <= $maxRetries; $attempt++) {
            try {
        $searchResponse = $service->search($request);
                break; // Success, exit retry loop
            } catch (SoapFault $e) {
                // Log the error
                if ($file = fopen($logFile, 'a')) {
                    fwrite($file, date('Y-m-d H:i:s') . ' - SoapFault on attempt ' . $attempt . ': ' . $e->getMessage() . PHP_EOL);
                    fclose($file);
                }
                
                // Check if it's a retryable error (concurrent limit or connection issues)
                $isRetryableError = (
                    strpos($e->getMessage(), 'concurrent request limit exceeded') !== false || 
                    strpos($e->getMessage(), 'Request blocked') !== false ||
                    strpos($e->getMessage(), 'Could not connect to host') !== false ||
                    strpos($e->getMessage(), 'Connection timed out') !== false ||
                    strpos($e->getMessage(), 'HTTP request failed') !== false ||
                    strpos($e->getMessage(), 'SSL connection timeout') !== false ||
                    strpos($e->getMessage(), 'Connection refused') !== false
                );
                
                if ($isRetryableError) {
                    if ($attempt < $maxRetries) {
                        // Wait before retrying with exponential backoff
                        sleep($retryDelay);
                        $retryDelay *= 2; // Double the delay for next attempt
                        continue;
                    } else {
                        // Max retries reached, determine specific error message
                        if (strpos($e->getMessage(), 'concurrent request limit exceeded') !== false || 
                            strpos($e->getMessage(), 'Request blocked') !== false) {
                            $response = [
                                'status' => 'error',
                                'message' => 'Service temporarily unavailable due to high load. Please try again later.',
                                'error_code' => 'CONCURRENT_LIMIT_EXCEEDED',
                                'details' => $e->getMessage(),
                                'attempts' => $maxRetries
                            ];
                        } else {
                            $response = [
                                'status' => 'error',
                                'message' => 'Connection to service failed after multiple attempts. Please try again later.',
                                'error_code' => 'CONNECTION_FAILED',
                                'details' => $e->getMessage(),
                                'attempts' => $maxRetries
                            ];
                        }
                        header('Content-Type: application/json');
                        echo json_encode($response);
                        exit;
                    }
                } else {
                    // Non-retryable SoapFault, return error immediately
                    $response = [
                        'status' => 'error',
                        'message' => 'An error occurred while processing your request.',
                        'error_code' => 'SOAP_FAULT',
                        'details' => $e->getMessage(),
                        'attempts' => $attempt
                    ];
                    header('Content-Type: application/json');
                    echo json_encode($response);
                    exit;
                }
            } catch (Exception $e) {
                // Handle other types of exceptions
                if ($file = fopen($logFile, 'a')) {
                    fwrite($file, date('Y-m-d H:i:s') . ' - General Exception: ' . $e->getMessage() . PHP_EOL);
                    fclose($file);
                }
                
                $response = [
                    'status' => 'error',
                    'message' => 'An unexpected error occurred.',
                    'error_code' => 'GENERAL_ERROR'
                ];
                header('Content-Type: application/json');
                echo json_encode($response);
                exit;
            }
        }

// Check if we have a valid search response
        if ($searchResponse === null) {
            $response = [
                'status' => 'error',
                'message' => 'Failed to get response from service after multiple attempts.',
                'error_code' => 'NO_RESPONSE'
            ];
            header('Content-Type: application/json');
            echo json_encode($response);
            exit;
        }

if ($searchResponse->searchResult->totalRecords == 0) {

$response = [
                'status' => 'error',
                'message' => 'Sales order item not found!',
                'data'=>[]
            ];
        } else {
//            $internalId=$searchResponse->searchResult->recordList->record[0]->internalId;
            $internalId='';
            foreach($searchResponse->searchResult->recordList->record as $record){
                if($record->itemId==$code){
                    $internalId=$record->internalId;
                }
            }

$response = [
                'status' => 'success',
                'message' => 'Sales order item found!',
                'data'=>[
                    'id'=>$internalId
                ]
            ];
        }
    } else {
        $response = [
            'status' => 'error',
            'message' => 'Please provide item code!'
        ];
    }

header('Content-Type: application/json');
    echo json_encode($response);
    exit;
}

if ($_SERVER['REQUEST_METHOD'] === 'GET' && $_GET['action'] === 'getSalesOrder') {

if ($_GET['id']) {
        $service->setSearchPreferences(false, 20);

$request = new GetRequest();
        $request->baseRef = new RecordRef();
        $request->baseRef->internalId = $_GET['id'];
        $request->baseRef->type = "salesOrder";
        
        // Add retry logic for concurrent request limit errors
        $maxRetries = 3;
        $retryDelay = 1; // Start with 1 second delay
        $getResponse = null;
        
        for ($attempt = 1; $attempt <= $maxRetries; $attempt++) {
            try {
        $getResponse = $service->get($request);
                break; // Success, exit retry loop
            } catch (SoapFault $e) {
                // Log the error
                if ($file = fopen($logFile, 'a')) {
                    fwrite($file, date('Y-m-d H:i:s') . ' - SoapFault on getSalesOrder attempt ' . $attempt . ': ' . $e->getMessage() . PHP_EOL);
                    fclose($file);
                }
                
                // Check if it's a retryable error (concurrent limit or connection issues)
                $isRetryableError = (
                    strpos($e->getMessage(), 'concurrent request limit exceeded') !== false || 
                    strpos($e->getMessage(), 'Request blocked') !== false ||
                    strpos($e->getMessage(), 'Could not connect to host') !== false ||
                    strpos($e->getMessage(), 'Connection timed out') !== false ||
                    strpos($e->getMessage(), 'HTTP request failed') !== false ||
                    strpos($e->getMessage(), 'SSL connection timeout') !== false ||
                    strpos($e->getMessage(), 'Connection refused') !== false
                );
                
                if ($isRetryableError) {
                    if ($attempt < $maxRetries) {
                        // Wait before retrying with exponential backoff
                        sleep($retryDelay);
                        $retryDelay *= 2; // Double the delay for next attempt
                        continue;
                    } else {
                        // Max retries reached, determine specific error message
                        if (strpos($e->getMessage(), 'concurrent request limit exceeded') !== false || 
                            strpos($e->getMessage(), 'Request blocked') !== false) {
                            $response = [
                                'status' => 'error',
                                'message' => 'Service temporarily unavailable due to high load. Please try again later.',
                                'error_code' => 'CONCURRENT_LIMIT_EXCEEDED',
                                'details' => $e->getMessage(),
                                'attempts' => $maxRetries
                            ];
                        } else {
                            $response = [
                                'status' => 'error',
                                'message' => 'Connection to service failed after multiple attempts. Please try again later.',
                                'error_code' => 'CONNECTION_FAILED',
                                'details' => $e->getMessage(),
                                'attempts' => $maxRetries
                            ];
                        }
                        header('Content-Type: application/json');
                        echo json_encode($response);
                        exit;
                    }
                } else {
                    // Non-retryable SoapFault, return error immediately
                    $response = [
                        'status' => 'error',
                        'message' => 'An error occurred while processing your request.',
                        'error_code' => 'SOAP_FAULT',
                        'details' => $e->getMessage(),
                        'attempts' => $attempt
                    ];
                    header('Content-Type: application/json');
                    echo json_encode($response);
                    exit;
                }
            } catch (Exception $e) {
                // Handle other types of exceptions
                if ($file = fopen($logFile, 'a')) {
                    fwrite($file, date('Y-m-d H:i:s') . ' - General Exception on getSalesOrder: ' . $e->getMessage() . PHP_EOL);
                    fclose($file);
                }
                
                $response = [
                    'status' => 'error',
                    'message' => 'An unexpected error occurred.',
                    'error_code' => 'GENERAL_ERROR'
                ];
                header('Content-Type: application/json');
                echo json_encode($response);
                exit;
            }
        }

// Check if we have a valid response
        if ($getResponse === null) {
            $response = [
                'status' => 'error',
                'message' => 'Failed to get response from service after multiple attempts.',
                'error_code' => 'NO_RESPONSE'
            ];
            header('Content-Type: application/json');
            echo json_encode($response);
            exit;
        }

if (!$getResponse->readResponse->status->isSuccess) {
            $response = [
                'status' => 'error',
                'message' => 'Sales order not found!'

];
        } else {
            $response = [
                'status' => 'success',
                'message' => 'Sales order found!',
                'data'=>array(
                    'OrderNo'=>$getResponse->readResponse->record->tranId
                )
            ];
        }
    } else {
        $response = [
            'status' => 'error',
            'message' => 'Please provide sales order Id!'
        ];
    }

header('Content-Type: application/json');
    echo json_encode($response);
    exit;
}

// Endpoint to update a sales order item
if ($_SERVER['REQUEST_METHOD'] === 'POST' && $_GET['action'] === 'updateSalesOrderItem') {
    $exchangeRate=$_GET['exchangeRate']? $_GET['exchangeRate'] :0.00;
    $documentLink=$_GET['documentLink']? $_GET['documentLink'] :"https://lifefitness.clientpoint.net/";

$requestData = json_decode(file_get_contents('php://input'), true);
    $postField = "<soapenv:Envelope
    xmlns:xsd='http://www.w3.org/2001/XMLSchema'
    xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance'
    xmlns:soapenv='http://schemas.xmlsoap.org/soap/envelope/'
    xmlns:platformCore='urn:core_2023_1.platform.webservices.netsuite.com'
    xmlns:tranSales='urn:sales_2023_1.transactions.webservices.netsuite.com'
    xmlns:platformMsgs='urn:messages_2023_1.platform.webservices.netsuite.com'>
    <soapenv:Header>
        <tokenPassport xsi:type='platformCore:TokenPassport'>
            <account xsi:type='xsd:string'>".$account."</account>
            <consumerKey xsi:type='xsd:string'>".$consumerKey."</consumerKey>
            <token xsi:type='xsd:string'>".$token."</token>
            <nonce xsi:type='xsd:string'>".$nonce."</nonce>
            <timestamp xsi:type='xsd:long'>".$timestamp."</timestamp>
            <signature algorithm='HMAC_SHA256' xsi:type='platformCore:TokenPassportSignature'>".$signature."</signature>
        </tokenPassport>
        <preferences>
            <ignoreReadOnlyFields>true</ignoreReadOnlyFields>
        </preferences>
    </soapenv:Header>
    <soapenv:Body>
        <update xsi:type='platformMsgs:UpdateRequest'>
            <record xsi:type='tranSales:SalesOrder' internalId='".$_GET['salesorderId']."'>
                <itemList xsi:type='tranSales:SalesOrderItemList' replaceAll='true'>";
    foreach($requestData as $data) {
//        fwrite($file, $data['trade_in'] . PHP_EOL);

$price = str_replace(',', '', $data['price']);
        $price = (float)$price;
        $price1 = number_format($price, 2); // Convert to two decimal places
        $rate=$price / $data['quantity'];
        $rate = number_format($rate, 2); // Convert to two decimal places
        $price1 = (float)str_replace(',', '', $price1);
        $rate = (float)str_replace(',', '', $rate);
        if (!empty($data['trade_in'])) {
            $trade_in = (int) $data['trade_in'];
        } else {
            $trade_in = 0;
        }

$postField .= "<item xsi:type='tranSales:SalesOrderItem'>
                    <item xsi:type='platformCore:RecordRef' internalId='".$data['internalId']."'/>
                    <quantity>".$data['quantity']."</quantity>
                    <description>".htmlspecialchars($data['description'])."</description>
                    <price internalId='-1'/>
                    <rate>".$rate."</rate>
                    <amount>".$price1."</amount>
                    <location>00.Vic-Product</location>
                    <customFieldList xsi:type='platformCore:CustomFieldList'>
                        <customField xsi:type='platformCore:DoubleCustomFieldRef' scriptId='custcol_trade_in_amount'>
                            <value xsi:type='xsd:double'>".$trade_in."</value>
                        </customField>
                    </customFieldList>
                </item>";
    }
    $postField .= " </itemList>
                <customFieldList xsi:type='platformCore:CustomFieldList'>
                    <customField scriptId='custbody_lfa_exchange_rate' xsi:type='platformCore:DoubleCustomFieldRef'>
                        <value xsi:type='xsd:double'>".$exchangeRate."</value>
                    </customField>
                     <customField scriptId='custbody_lfa_document_link' xsi:type='platformCore:StringCustomFieldRef'>
                        <value xsi:type='xsd:string'>".$documentLink."</value>
                    </customField>
                </customFieldList>
            </record>
        </update>
    </soapenv:Body>
</soapenv:Envelope>";

$curl = curl_init();

curl_setopt_array($curl, array(
        CURLOPT_URL => 'https://4661993.suitetalk.api.netsuite.com/services/NetSuitePort_2023_1',
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_ENCODING => '',
        CURLOPT_MAXREDIRS => 10,
        CURLOPT_TIMEOUT => 0,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
        CURLOPT_CUSTOMREQUEST => 'POST',
        CURLOPT_POSTFIELDS =>$postField,
        CURLOPT_HTTPHEADER => array(
            'Content-Type: text/xml',
            'SOAPAction: update'
        ),
    ));

$response = curl_exec($curl);

curl_close($curl);
    if ($file = fopen($logFile, 'a')) {
        // Optionally, you can add a timestamp to each log entry
        fwrite($file, $postField);
    } else {
        // Handle file open error
    }
    if ($file = fopen($logFile, 'a')) {
        // Optionally, you can add a timestamp to each log entry
        fwrite($file, $response);
    } else {
        // Handle file open error
    }
    echo $response;
    exit;

$response = [
        'status' => 'success',
        'response' => $error,
    ];

// header('Content-Type: application/json');
    echo json_encode($response);
    exit;

}

// If no matching endpoint is found, return a 404 response
http_response_code(404);
header('Content-Type: application/json');
echo json_encode([
    'status' => 'error',
    'message' => 'API not found!',
]);

	SIZE	Modified Date	PERMS
..	---	Aug-02-2025 01:03:29	drwxr-xr-x 0755
apiTes.php	13KB	May-13-2025 12:44:24	rrw------- 0600
index.php	20KB	Jun-25-2025 18:15:40	rrw------- 0600
logfile.log	25MB	Jul-30-2025 05:54:45	rrw------- 0600

Modified By #No_Identity :: github.com/yon3zu - linuxploit.com