if ($MG['article_free_limit'] >= 0) {
     $fee_add = $MOD['fee_add'] && (!$MOD['fee_mode'] || !$MG['fee_mode']) && $limit_used >= $MG['article_free_limit'] && $_userid ? dround($MOD['fee_add']) : 0;
 } else {
     $fee_add = 0;
 }
 $fee_currency = $MOD['fee_currency'];
 $fee_unit = $fee_currency == 'money' ? $DT['money_unit'] : $DT['credit_unit'];
 $need_password = $fee_add && $fee_currency == 'money';
 $need_captcha = $MOD['captcha_add'] == 2 ? $MG['captcha'] : $MOD['captcha_add'];
 $need_question = $MOD['question_add'] == 2 ? $MG['question'] : $MOD['question_add'];
 $could_color = check_group($_groupid, $MOD['group_color']) && $MOD['credit_color'] && $_userid;
 if ($submit) {
     if ($fee_add && $fee_add > ($fee_currency == 'money' ? $_money : $_credit)) {
         dalert($L['balance_lack']);
     }
     if ($need_password && !is_payword($_username, $password)) {
         dalert($L['error_payword']);
     }
     if ($MG['add_limit']) {
         $last = $db->get_one("SELECT addtime FROM {$table} WHERE {$sql} ORDER BY itemid DESC");
         if ($last && $DT_TIME - $last['addtime'] < $MG['add_limit']) {
             dalert(lang($L['add_limit'], array($MG['add_limit'])));
         }
     }
     $msg = captcha($captcha, $need_captcha, true);
     if ($msg) {
         dalert($msg);
     }
     $msg = question($answer, $need_question, true);
     if ($msg) {
         dalert($msg);

 if ($buy_price < $price) {
     message($L['spread_msg_price_min']);
 }
 if (($buy_price - $price) % $step != 0) {
     message($L['spread_msg_step']);
 }
 $buy_month = intval($buy_month);
 if ($buy_month < 1 || $buy_month > $month) {
     message($L['spread_msg_month']);
 }
 $amount = $buy_price * $buy_month;
 if ($currency == 'money') {
     if ($amount > $_money) {
         message($L['money_not_enough'], $MODULE[2]['linkurl'] . 'charge.php?action=pay&amount=' . ($amount - $_money));
     }
     is_payword($_username, $password) or message($L['error_payword']);
 } else {
     if ($amount > $_credit) {
         message($L['credit_not_enough'], $MODULE[2]['linkurl'] . 'trade.php?action=credit');
     }
 }
 $buy_tid = $mid == 4 ? $_userid : intval($buy_tid);
 if (!$buy_tid) {
     message($L['spread_msg_itemid']);
 }
 if ($mid == 5 || $mid == 6) {
     $table = get_table($mid);
     $item = $db->get_one("SELECT itemid FROM {$table} WHERE itemid='{$buy_tid}' AND status=3 AND username='{$_username}'");
     if (!$item) {
         message($L['spread_msg_yours']);
     }

require 'common.inc.php';
require DT_ROOT . '/include/post.func.php';
require DT_ROOT . '/include/module.func.php';
isset($auth) or $auth = '';
$_auth = decrypt($auth, DT_KEY . 'PAY');
$_auth or dheader('channel.php?reload=' . $DT_TIME);
list($moduleid, $itemid, $currency, $fee, $title) = explode('|', $_auth);
isset($MODULE[$moduleid]) or dheader('channel.php?reload=' . $DT_TIME);
$itemid = intval($itemid);
$itemid or dheader('channel.php?reload=' . $DT_TIME);
$fee = dround($fee);
$fee > 0 or dheader('channel.php?reload=' . $DT_TIME);
$note = $MODULE[$moduleid]['name'] . '/' . $itemid;
if ($currency == 'money') {
    if (isset($password)) {
        is_payword($_username, $password) or mobile_msg($L['not_payword']);
        $discount = $MG['discount'] > 0 && $MG['discount'] < 100 ? $MG['discount'] : 100;
        $discount = dround($discount / 100);
        $_fee = dround($fee * $discount);
        $_money >= $_fee or mobile_msg($L['need_charge']);
        $db->query("INSERT INTO {$DT_PRE}finance_pay (moduleid,itemid,username,fee,currency,paytime,ip,title) VALUES ('{$moduleid}','{$itemid}','{$_username}','{$fee}','{$currency}','{$DT_TIME}','{$DT_IP}','" . addslashes($title) . "')");
        money_add($_username, -$fee);
        money_record($_username, -$fee, $L['pay_by_site'], 'system', $L['pay_info'], $note);
        mobile_msg($L['pay_success'], mobileurl($moduleid, 0, $itemid));
    } else {
        $head_title = $L['pay_title'] . $DT['seo_delimiter'] . $head_title;
        $foot = 'channel';
        include template('pay', 'mobile');
        if (DT_CHARSET != 'UTF-8') {
            toutf8();
        }

         $db->query("INSERT INTO {$DT_PRE}validate (type,username,ip,addtime,status,title,editor,edittime) VALUES ('mobile','{$username}','{$DT_IP}','{$DT_TIME}','3','{$mobile}','system','{$DT_TIME}')");
         message($L['send_mobile_success'], $MOD['linkurl']);
     }
     message($L['send_mobile_code_error']);
 } else {
     $DT['sms'] or message($L['send_sms_close']);
     $fee = $DT['sms_fee'];
     if ($submit) {
         is_mobile($mobile) or message($L['send_mobile_bad']);
         $r = $db->get_one("SELECT userid FROM {$DT_PRE}member WHERE mobile='{$mobile}' AND vmobile=1 AND userid<>{$_userid}");
         if ($r) {
             message($L['send_mobile_exist']);
         }
         if ($fee && $_sms < 1) {
             $fee <= $_money or message($L['money_not_enough'], $MOD['linkurl'] . 'charge.php?action=pay');
             is_payword($_username, $password) or dalert($L['error_payword']);
         }
         $auth = random(6, '0123456789');
         $content = lang('sms->sms_code', array($auth, $MOD['auth_days'])) . $DT['sms_sign'];
         $sms_code = send_sms($mobile, $content);
         if (strpos($sms_code, $DT['sms_ok']) !== false) {
             if ($fee) {
                 if ($_sms < 1) {
                     money_add($_username, -$fee);
                     money_record($_username, -$fee, $L['in_site'], $_username, $L['send_mobile_record'], $mobile);
                 } else {
                     sms_add($_username, -1);
                     sms_record($_username, -1, $_username, $L['send_mobile_record'], $mobile);
                 }
             }
             $db->query("UPDATE {$DT_PRE}member SET auth='{$auth}',authvalue='{$mobile}',authtime='{$DT_TIME}' WHERE username='{$username}'");

<?php

/*
	[Destoon B2B System] Copyright (c) 2008-2013 Destoon.COM
	This is NOT a freeware, use is subject to license.txt
*/
defined('IN_DESTOON') or exit('Access Denied');
require_once DT_ROOT . '/include/post.func.php';
$currency = $MOD['fee_currency'];
$mid = isset($resume) ? -$moduleid : $moduleid;
$note = ($mid == -9 ? $L['resume'] : $MODULE[$mid]['name']) . '/' . $itemid;
if ($currency == 'money') {
    $password or wap_msg($L['type_payword']);
    is_payword($_username, $password) or wap_msg($L['not_payword']);
    $discount = $MG['discount'] > 0 && $MG['discount'] < 100 ? $MG['discount'] : 100;
    $discount = dround($discount / 100);
    $_fee = dround($fee * $discount);
    $_money >= $_fee or wap_msg($L['need_charge']);
    $db->query("INSERT INTO {$DT_PRE}finance_pay (moduleid,itemid,username,fee,currency,paytime,ip,title) VALUES ('{$mid}','{$itemid}','{$_username}','{$fee}','{$currency}','{$DT_TIME}','{$DT_IP}','" . addslashes($title) . "')");
    money_add($_username, -$fee);
    money_record($_username, -$fee, $L['pay_by_site'], 'system', $L['pay_info'], $note);
} else {
    if ($_credit >= $fee) {
        $db->query("INSERT INTO {$DT_PRE}finance_pay (moduleid,itemid,username,fee,currency,paytime,ip,title) VALUES ('{$mid}','{$itemid}','{$_username}','{$fee}','{$currency}','{$DT_TIME}','{$DT_IP}','" . addslashes($title) . "')");
        credit_add($_username, -$fee);
        credit_record($_username, -$fee, 'system', $L['pay_info'], $note);
    } else {
        wap_msg($L['need_credit']);
    }
}
wap_msg($L['pay_success'], 'index.php?moduleid=' . $moduleid . '&amp;itemid=' . $itemid . (isset($resume) && $resume ? '&amp;resume=1' : ''));