Может ошибка где то в обработчике ?
<?php
include('config.php');
$merchant_id = $fk_id;
$merchant_secret = $fk_secret_1;
function getIP() {
if(isset($_SERVER['HTTP_X_REAL_IP'])) return $_SERVER['HTTP_X_REAL_IP'];
return $_SERVER['REMOTE_ADDR'];
}
if (!in_array(getIP(), array('136.243.38.147', '136.243.38.149', '136.243.38.150', '136.243.38.151', '136.243.38.189', '136.243.38.108'))) {
die("hacking attempt!");
}
$sign = md5($merchant_id.':'.$_REQUEST['AMOUNT'].':'.$merchant_secret.':'.$_REQUEST['MERCHANT_ORDER_ID']);
if ($sign != $_REQUEST['SIGN']) {
die('wrong sign');
}
$label = $_GET['intid'];
$idmoney = $_GET['MERCHANT_ORDER_ID'];
$data = date('d-m-Y H:i:s');
$yandex = '';
$suma = $_GET['AMOUNT'];
if (is_numeric($idmoney))
{
$sql_select = "SELECT * FROM users WHERE id='$idmoney'";
$result = mysql_query($sql_select);
$row = mysql_fetch_array($result);
if($row)
{
$balance = $row['balance'];
}
$balancenew = $row['balance'] + $suma;
$update_sql1 = "Update users set balance='$balancenew' WHERE id='$idmoney'";
mysql_query($update_sql1) or die("" . mysql_error());
$insert_sql1 = "
INSERT INTO `payments` (`user_id`, `suma`, `data`, `qiwi`, `transaction`)
VALUES ('{$idmoney}', '{$suma}', '{$data}', '{$yandex}', '{$label}')
";
mysql_query($insert_sql1);
}
die('YES');
?>