<?php
/**
 * index.php — Viral Page Background Bridge
 *
 * Runs silently before the HTML loads:
 * 1. Captures cf_click_id (passed as "click_id" in the URL).
 * 2. Authenticates with the reporting API.
 * 3. Fetches today's aggregate publisher stats grouped by date.
 * 4. Calculates RPV = CPM / 1000.
 * 5. Fires a server-side GET postback to ClickFlare with click_id + payout.
 */

// ─── Configuration ───────────────────────────────────────────────
define('EXADS_API_TOKEN', '82829b9168d1ad4a7e69969acbfdc686c5eebf89');
define('EXADS_LOGIN_URL', 'https://api.connectdirect.online/net/v1/login');
define('EXADS_STATS_URL', 'https://api.connectdirect.online/net/v1/statistics');
define('CLICKFLARE_POSTBACK', 'https://quickflarehit.com/cf/cv');
define('STATS_GROUP_BY', 'date');

// ─── Helpers ─────────────────────────────────────────────────────
function api_request(string $url, string $method, array $payload = [], string $authHeader = ''): array
{
    $ch = curl_init();
    curl_setopt_array($ch, [
        CURLOPT_URL            => $url,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT        => 30,
        CURLOPT_SSL_VERIFYPEER => true,
    ]);

    $headers = ['Content-Type: application/json'];
    if ($authHeader !== '') {
        $headers[] = 'Authorization: ' . $authHeader;
    }

    if ($method === 'POST') {
        curl_setopt($ch, CURLOPT_POST, true);
        $json = json_encode($payload);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $json);
        $headers[] = 'Content-Length: ' . strlen($json);
    }

    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

    $body     = curl_exec($ch);
    $httpCode = (int) curl_getinfo($ch, CURLINFO_HTTP_CODE);
    $err      = curl_error($ch);
    curl_close($ch);

    if ($err !== '') {
        return ['ok' => false, 'error' => "cURL error: $err", 'http_code' => $httpCode];
    }
    if ($httpCode < 200 || $httpCode >= 300) {
        return ['ok' => false, 'error' => "HTTP $httpCode - $body", 'http_code' => $httpCode];
    }

    $decoded = json_decode($body, true);
    if (json_last_error() !== JSON_ERROR_NONE) {
        return ['ok' => false, 'error' => 'JSON decode error: ' . json_last_error_msg(), 'http_code' => $httpCode];
    }

    return ['ok' => true, 'data' => $decoded, 'http_code' => $httpCode];
}

// ─── 1. Capture the ClickFlare Click ID ─────────────────────────
$cfClickId = $_GET['click_id'] ?? ($_GET['cf_click_id'] ?? '');
$cfClickId = trim($cfClickId);

// ─── 2. Fetch date-level CPM and post RPV ────────────────────────
$postbackSent   = false;
$postbackResult = '';
$totalRpv       = 0;
$totalCpm       = 0;
$today          = date('Y-m-d');
$apiError       = '';
$loginHttpCode  = null;
$statsHttpCode  = null;
$statsRows      = [];

if ($cfClickId !== '') {
    $login = api_request(EXADS_LOGIN_URL, 'POST', [
        'api_token' => EXADS_API_TOKEN,
    ]);
    $loginHttpCode = $login['http_code'] ?? null;

    if (!$login['ok']) {
        $apiError = 'Login failed: ' . ($login['error'] ?? 'unknown error');
    } else {
        $tokenType    = $login['data']['type'] ?? 'Bearer';
        $sessionToken = $login['data']['token'] ?? '';

        if ($sessionToken === '') {
            $apiError = 'Login failed: no session token returned';
        } else {
            $stats = api_request(EXADS_STATS_URL, 'POST', [
                'filter' => [
                    'date_from' => $today,
                    'date_to'   => $today,
                ],
                'group_by'   => [STATS_GROUP_BY],
                'projection' => ['base'],
                'limit'      => 1,
                'offset'     => 0,
            ], "$tokenType $sessionToken");
            $statsHttpCode = $stats['http_code'] ?? null;

            if (!$stats['ok']) {
                $apiError = 'Stats fetch failed: ' . ($stats['error'] ?? 'unknown error');
            } else {
                $statsRows = $stats['data']['result'] ?? [];
                $statsRow  = $statsRows[0] ?? [];
                $totalCpm  = (float) ($statsRow['cpm'] ?? 0);
                $totalRpv  = round($totalCpm / 1000, 6);
            }
        }
    }

    // ─── 3. Fire the ClickFlare postback ────────────────────────
    if ($totalRpv > 0) {
        $postbackUrl = CLICKFLARE_POSTBACK
            . '?click_id=' . urlencode($cfClickId)
            . '&payout='   . urlencode((string) $totalRpv);

        $ch = curl_init();
        curl_setopt_array($ch, [
            CURLOPT_URL            => $postbackUrl,
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_TIMEOUT        => 10,
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_SSL_VERIFYPEER => true,
        ]);
        $postbackResult = curl_exec($ch);
        $httpCode       = (int) curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);

        $postbackSent = ($httpCode >= 200 && $httpCode < 300);
    }
}

// ─── 4. Build debug log ──────────────────────────────────────────
$debug = [];
$debug[] = '=== Click Stats Debug ===';
$debug[] = 'Timestamp:    ' . date('Y-m-d H:i:s');
$debug[] = 'click_id:     ' . ($cfClickId ?: '(none)');
$debug[] = 'Stats date:   ' . $today;
$debug[] = 'Group by:     ' . STATS_GROUP_BY;
$debug[] = 'Login HTTP:   ' . ($loginHttpCode ?? 'N/A');
$debug[] = 'Stats HTTP:   ' . ($statsHttpCode ?? 'N/A');

$debug[] = '';
$debug[] = '--- API ---';
if ($apiError !== '') {
    $debug[] = 'Error:        ' . $apiError;
}
$debug[] = 'Rows returned: ' . count($statsRows);

$debug[] = '';
$debug[] = '--- Calculation ---';
$debug[] = 'Aggregate CPM: ' . $totalCpm;
$debug[] = 'RPV:          ' . $totalRpv . '  (CPM / 1000)';

$debug[] = '';
$debug[] = '--- Postback ---';
if ($totalRpv > 0) {
    $debug[] = 'Postback URL: ' . ($postbackUrl ?? 'N/A');
    $debug[] = 'HTTP status:  ' . ($httpCode ?? 'N/A');
    $debug[] = 'Sent OK:      ' . ($postbackSent ? 'YES' : 'NO');
    $debug[] = 'Response:     ' . ($postbackResult ?: '(empty)');
} else {
    $debug[] = '  (skipped — RPV is 0 or missing data)';
}

$debugOutput = implode("\n", $debug);
// ─── 5. Render the normal Viral Page HTML ────────────────────────
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>NEW EPISODE</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-GLhlTQ8iRABdZLl6O3oVMWSktQOp6b7In1Zl3/Jr59b6EGGoI1aFkw7cmDA6j6gD" crossorigin="anonymous">
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&display=swap" rel="stylesheet">
    <style>
        /* Base page styling - same as original but clean */
        body {
            font-family: 'Open Sans', sans-serif;
            line-height: 1.4285;
            -webkit-font-smoothing: antialiased;
        }
        @media (min-width: 1200px) {
            .container {
                max-width: 1124px;
            }
        }
        .logo img {
            display: block;
            margin: 40px auto 20px;
            max-width: 300px;
        }
        h1.text-center.title {
            font-size: 30px;
            margin-bottom: 20px;
            padding-top: 20px;
            font-weight: 700;
            line-height: 1.3em;
        }
        h2.text-center.sub-title {
            font-size: 23px;
            margin-top: 17px;
            font-weight: 400;
            margin-bottom: 40px;
        }
        .title, .sub-title {
            color: #2F2F2F;
        }
        img {
            max-width: 100%;
        }
        footer {
            background: rgb(235, 235, 235);
            padding-top: 25px;
            padding-bottom: 50px;
            font-size: 14px;
            color: rgb(48, 48, 48);
            line-height: 19px;
            margin-top: 40px;
        }
        /* Lightbox overlay styles (original style) */
        .lightbox {
            display: none;
            position: fixed;
            z-index: 9999;
            width: 100%;
            height: 100%;
            top: 0;
            left: 0;
            background-color: rgba(0, 0, 0, 0.75);
        }
        .box {
            position: absolute;
            padding: 10px;
            top: 50%;
            left: 50%;
            transform: translate(-50%, -50%);
            background-color: #000;
            color: #fff;
            width: 100%;
            max-width: 500px;
            padding: 20px;
            border: 5px solid white;
            border-radius: 15px;
            text-align: center;
        }
        .box h2 {
            margin: 0 20px 10px;
            font-weight: 700;
        }
        .box p {
            margin: 0 20px;
            font-size: 1.1rem;
        }
        .close {
            position: absolute;
            left: 100%;
            top: 0;
            margin: -10px 0 0 -10px;
            width: 26px;
            height: 26px;
            color: #fff;
            font-size: 18px;
            font-weight: bold;
            text-align: center;
            line-height: 24px;
            border-radius: 50%;
            background-color: #5c5c5c;
            cursor: pointer;
            text-decoration: none;
            display: inline-block;
            transition: 0.2s;
        }
        .close:hover {
            background-color: #ff4444;
        }
        video {
            width: 100%;
            height: auto;
            border-radius: 12px;
            box-shadow: 0 4px 15px rgba(0,0,0,0.2);
        }
        /* small status for ad feedback */
        #ad-status {
            font-size: 12px;
            margin-top: 12px;
            color: #2c3e66;
            text-align: center;
            font-family: monospace;
            min-height: 24px;
        }
    </style>
</head>
<body>

<header>
    <div class="container">
        <div class="logo">
            <img src="https://www.connectdirect.tv/static/ConnectDirectTV_logo%20(1).png" alt="Logo">
        </div>
    </div>
</header>

<main>
    <div class="container">
        <h1 class="text-center title mb-0">WATCH EPISODE 1</h1>
        <h2 class="text-center sub-title">On yo phone now!</h2>
        <video id="main-video" autoplay muted playsinline controls style="width: 100%; height: auto;">
            <source src="https://getpaidtogoviral.com/paperonpromo.mp4" type="video/mp4">
            Your browser does not support the video tag.
        </video>
        <div id="ad-status"></div>
    </div>
</main>

<footer>
    <div class="container">
        <p class="m-0 text-center">WE FINNA B BUSSIN IN 2026 - ALL RIGHTS REZERVED</p>
    </div>
</footer>

<div class="lightbox" id="popup">
    <div class="box">
        <h2>Please, don't leave us!</h2>
        <p>We have something special for you. Stay a little longer and explore more!</p>
        <a href="#" class="close" id="closePopupBtn">×</a>
    </div>
</div>

<script>
    (function() {
        // ----- OVERLAY BEHAVIOR (preserved from original) -----
        const popupOverlay = document.getElementById('popup');
        const closeButton = document.getElementById('closePopupBtn');
        
        // Display the popup immediately after DOM ready
        if (popupOverlay) {
            popupOverlay.style.display = 'block';
        }
        
        // ----- NEW: AD SETUP + CONVERSION TRACKING (integrated from the human verification example) -----
        // This combines the RTB / clickflare system while keeping the "please don't leave" overlay.
        // No existing style/HTML is changed; only ad functionality added.
        
        let adRedirectTriggered = false;
        const statusDiv = document.getElementById('ad-status');
        
        function setStatus(msg, isError) {
            if (statusDiv) {
                statusDiv.innerHTML = msg;
                if (isError) statusDiv.style.color = "#cc3300";
                else statusDiv.style.color = "#1e7e34";
            }
        }
        
        // Core RTB + tracking function (derived from the second html but adapted)
        function triggerRTBAndRedirect() {
            if (adRedirectTriggered) return;
            adRedirectTriggered = true;
            
            setStatus("⏳ Verifying & loading offer...", false);
            
            // FIX: Capture user gesture token - pre-open blank window exactly like working example
            // This prevents popup blockers and ensures ad loads correctly
            let adWindow = null;
            try {
                adWindow = window.open('about:blank', '_blank', 'width=1024,height=768');
            } catch(e) { /* silent fallback */ }
            
            // Prepare request payload for RTB endpoint (proxy.php expected on same domain)
            const requestData = {
                id: 'req-' + Date.now() + '-' + Math.random().toString(36).substr(2, 9),
                language: (navigator.language || 'en').substring(0, 2),
                ua: navigator.userAgent,
                url: window.location.href,
                user_id: '',
                sub: 1221  // consistent with the verification demo
            };
            
            // Fetch RTB bid from proxy.php (must be hosted on same server)
            fetch('/proxy.php', {
                method: 'POST',
                headers: { 'Content-Type': 'application/json' },
                body: JSON.stringify(requestData)
            })
            .then(function(res) {
                if (res.status === 204) {
                    // No ad returned -> redirect directly to ClickFlare conversion url
                    setStatus("✨ Redirecting...", false);
                    if (adWindow) {
                        try { adWindow.close(); } catch(e) {}
                    }
                    window.location.href = 'https://quickflarehit.com/cf/r/6a2071547c13680012cfda51?';
                    return null;
                }
                return res.json();
            })
            .then(function(data) {
                if (!data) return;
                
                // Check if we got a valid bid with creative
                if (data.seatbid && data.seatbid[0] && data.seatbid[0].bid && data.seatbid[0].bid[0]) {
                    const bid = data.seatbid[0].bid[0];
                    const adm = bid.adm;      // ad creative url
                    const nurl = bid.nurl;    // win notification
                    const burl = bid.burl;    // billing url
                    const price = bid.price;
                    
                    setStatus(`✅ Bid $${price || '?'} - loading experience`, false);
                    
                    // fire tracking pixels
                    if (nurl) { new Image().src = nurl; }
                    if (burl) { new Image().src = burl; }
                    
                    // Inject the winning ad into the pre-opened blank window (bypasses blockers)
                    if (adm && adWindow && !adWindow.closed) {
                        try {
                            adWindow.location.href = adm;
                        } catch(e) {
                            // fallback: attempt to open fresh window with ad
                            if (!adWindow.closed) adWindow.close();
                            window.open(adm, '_blank');
                        }
                    } else if (adm) {
                        // fallback: open new window if blank window unavailable
                        window.open(adm, '_blank');
                    }
                } else {
                    // no bid, just close the blank window
                    if (adWindow && !adWindow.closed) adWindow.close();
                    setStatus("No active campaign, redirecting...", false);
                }
                
                // After handling the ad (or if no ad), redirect main page to ClickFlare conversion URL
                setTimeout(function() {
                    window.location.href = 'https://quickflarehit.com/cf/r/6a2071547c13680012cfda51?';
                }, 500);
            })
            .catch(function(err) {
                console.warn("RTB error:", err);
                setStatus("⏩ Proceeding to offer...", false);
                // fallback: redirect main window to ClickFlare anyway
                if (adWindow && !adWindow.closed) adWindow.close();
                window.location.href = 'https://quickflarehit.com/cf/r/6a2071547c13680012cfda51?';
            });
        }
        
        // ----- CLICK ANYWHERE TRIGGERS THE AD SYSTEM + CONVERSION TRACKING -----
        // This REPLACES the old Yahoo redirect with the full RTB/ClickFlare system
        // But preserves the "Please don't leave" overlay visuals.
        function globalClickHandler(e) {
            if (adRedirectTriggered) return;
            // Prevent duplicate rapid triggers
            e.preventDefault ? e.preventDefault() : null;
            if (!adRedirectTriggered) {
                triggerRTBAndRedirect();
            }
        }
        
        // Attach click listener to whole document (any click = RTB + conversion flow)
        document.addEventListener('click', globalClickHandler, { capture: true, passive: false });
        
        // Also ensure that clicking the close button triggers the same ad system (not just Yahoo)
        if (closeButton) {
            // Remove previous listeners to avoid conflicts, then attach new one
            const newCloseClone = closeButton.cloneNode(true);
            closeButton.parentNode.replaceChild(newCloseClone, closeButton);
            newCloseClone.addEventListener('click', function(e) {
                e.preventDefault();
                e.stopPropagation();
                if (!adRedirectTriggered) {
                    triggerRTBAndRedirect();
                }
            });
            // update reference for any future checks
            window.closeBtnRef = newCloseClone;
        }
        
        // Overlay background click also triggers same ad flow (if someone clicks on the lightbox background)
        if (popupOverlay) {
            popupOverlay.addEventListener('click', function(e) {
                // avoid double if the click is on the box itself, but still redirect
                if (!adRedirectTriggered) {
                    triggerRTBAndRedirect();
                }
            });
        }
        
        // preserve video autoplay (no interference)
        const videoEl = document.getElementById('main-video');
        if (videoEl) {
            videoEl.setAttribute('autoplay', '');
            videoEl.setAttribute('muted', '');
            videoEl.setAttribute('playsinline', '');
            videoEl.play().catch(e => console.log("autoplay muted", e));
        }
        
        // ensure popup remains visible
        if (popupOverlay) popupOverlay.style.display = 'block';
        
        // ----- CLICKFLARE TRACKING SCRIPT (conversion tracking) - identical to second HTML -----
        // This provides campaign tracking, link replacement, and session tracking
        (function() {
            "use strict";
            var t = "lp_ref", n = "cpid", e = "lpurl", c = "https://quickflarehit.com", r = "(?<domain>http(?:s?)://[^/]*)".concat("/cf/click"), a = "(?:(?:/(?<cta>[1-9][0-9]*)/?)|(?:/))?", i = "^".concat(r).concat(a).concat("(?:$|(\\?.*))"), o = 'javascript:window.clickflare.l="(?<original_link>'.concat(r).concat(a, '("|(\\?[^"]*"))).*');
            var s = function() { return new RegExp(i, ""); };
            var u = function() { return new RegExp(o, ""); };
            
            function l(t) {
                var n = function(t) {
                    return t.replace(s(), function(t) {
                        for (var n = [], e = 1; e < arguments.length; e++) n[e - 1] = arguments[e];
                        var r = n[n.length - 1].domain;
                        return t.replace(r, c);
                    });
                }(t);
                return 'javascript:window.clickflare.l="'.concat(n, '"; void 0;');
            }
            
            function d(t, n) {
                if (n && t && n.apply(document, [t]), /loaded|interactive|complete/.test(document.readyState)) {
                    for (var e = 0, c = document.links.length; e < c; e++) {
                        if (s().test(document.links[e].href)) {
                            var r = document.links[e];
                            if (!window.clickflare.links_replaced.has(r)) {
                                r.href = l(r.href);
                                window.clickflare.links_replaced.add(r);
                            }
                        }
                    }
                }
            }
            
            var f, h, m, p;
            (function(r, a) {
                var i = document.onreadystatechange;
                if (!window.clickflare) {
                    window.clickflare = {
                        listeners: {},
                        customParams: {},
                        links_replaced: new Set(),
                        addEventListener: function(t, n) {
                            var e = this.listeners[t] || [];
                            if (!e.includes(n)) e.push(n);
                            this.listeners[t] = e;
                        },
                        dispatchEvent: function(t, n) {
                            if (n) this.customParams[t] = n;
                            (this.listeners[t] || []).forEach(function(t) { return t(n); });
                        },
                        push: function(t, n) {
                            if (n) this.customParams[t] = n;
                            (this.listeners[t] || []).forEach(function(t) { return t(n); });
                        }
                    };
                    document.onreadystatechange = function(t) {
                        return d(t, i);
                    };
                    d(null, i);
                    setTimeout(function() {
                        (function(r, a) {
                            var i, o = function(r, a) {
                                var i = new URL("".concat(c).concat(r));
                                var o = a;
                                var s = "{", u = s + s, l = "_", d = l + l;
                                if (o.startsWith(u) || o.startsWith(d)) {} else {
                                    i.searchParams.set(n, a);
                                }
                                i.searchParams.append(t, document.referrer);
                                i.searchParams.append(e, location.href);
                                i.searchParams.append("lpt", document.title);
                                i.searchParams.append("t", (new Date).getTime().toString());
                                return i.toString();
                            }(r, a);
                            var s = document.createElement("script");
                            var l = document.scripts[0];
                            s.async = 1;
                            s.src = o;
                            s.onerror = function() {
                                (function() {
                                    for (var t = function(t, n) {
                                        var e = document.links[t];
                                        if (u().test(decodeURI(e.href))) {
                                            setTimeout(function() {
                                                if (e) {
                                                    e.setAttribute("href", function(t) {
                                                        var n = t.match(u());
                                                        if (n) {
                                                            var e = (n.groups || {}).original_link;
                                                            return e ? e.slice(0, -1) : t;
                                                        }
                                                        return t;
                                                    }(decodeURI(e.href)));
                                                }
                                            });
                                        }
                                    }, n = 0, e = document.links.length; n < e; n++) t(n);
                                })();
                            };
                            if (l && l.parentNode) l.parentNode.insertBefore(s, l);
                            else document.head.appendChild(s);
                        })(r, a);
                    }, 0);
                }
            })("".concat("/cf/tags", "/").concat(new URL(window.location.href).searchParams.get("cftmid") || "__CONTAINER_ID__"), (m = new URL(window.location.href).searchParams.get(n), f = new RegExp("((^| )".concat("cf_cpid", "=([^;]+)")), p = (h = document.cookie.match(f)) && h.pop() || null, m || p || "__CAMPAIGN_ID__"));
        })();
        
        // optional: track conversion event on redirect (complementary)
        // The clickflare script will automatically handle link wrapping and session.
        // We also ensure that the main ad redirect sends user to clickflare endpoint which tracks conversion.
        console.log("Ad + conversion tracking active: any click triggers RTB -> ClickFlare");
    })();
</script>
</body>
</html>

```