<?php
define('LICENSE_SECRET', 'TMIT_LIC_SECRET_2024_K9mPxZvR');

$licenses = [
    'tmitstore.top'  => 'TMIT-OWNER-0001',
    'tmitstore.top/udoktaecom'  => 'TMIT-OWNER-0001',
    'kismotshop.com'  => 'TMIT-OWNER-0002',
    'idikashop.com'  => 'TMIT-OWNER-2233',
    'epaper.tmitstore.top'  => 'TMIT-OWNER-006',
    'localhost'      => 'TMIT-DEV-LOCAL',
    ];
header('Content-Type: application/json; charset=UTF-8');
header('X-Robots-Tag: noindex, nofollow');
header('Cache-Control: no-store');

$secret = trim($_REQUEST['secret'] ?? '');
if ($secret !== LICENSE_SECRET) {
    http_response_code(403);
    echo json_encode(['valid' => false, 'message' => 'Forbidden']);
    exit;
}

$domain = strtolower(trim($_REQUEST['domain'] ?? ''));
$domain = preg_replace('/^www\./i', '', $domain);
$domain = explode(':', $domain)[0];

if (empty($domain)) {
    echo json_encode(['valid' => false, 'message' => 'No domain']);
    exit;
}

if (!array_key_exists($domain, $licenses)) {
    echo json_encode(['valid' => false, 'message' => 'Domain not licensed', 'domain' => $domain]);
    exit;
}

$code = trim($_REQUEST['code'] ?? '');
if (!empty($code) && $licenses[$domain] !== $code) {
    echo json_encode(['valid' => false, 'message' => 'Invalid purchase code']);
    exit;
}

echo json_encode(['valid' => true, 'message' => 'Licensed', 'domain' => $domain]);