[orbis] Weekly backup 2026-07-07 — 318 files changed, 48597 insertions(+), 7 deletions(-)

sites/tomtomgames.com/public_html/api/my_purchases.php

@@ -0,0 +1,17 @@
+<?php
+require_once __DIR__ . '/../../includes/auth.php';
+header('Content-Type: application/json');
+
+if (!isLoggedIn()) { echo json_encode(['success'=>false,'error'=>'Not authenticated']); exit; }
+
+$userId = $_SESSION['user_id'];
+$stmt = db()->prepare("
+    SELECT id, tokens, amount_cents, payment_method, platform_id, game_alias,
+           card_brand, card_last4, status, created_at
+    FROM token_purchases
+    WHERE user_id = ?
+    ORDER BY created_at DESC
+    LIMIT 20
+");
+$stmt->execute([$userId]);
+echo json_encode(['success'=>true, 'purchases'=>$stmt->fetchAll()]);