修复SQL语法错误: pay_order是MySQL保留字，加反引号

api/pay.php

@@ -712,7 +712,7 @@ function queryOrder($token) {
 function checkPlatformOrderStatus($outTradeNo) {
     try {
         $pdo = getPlatformDB();
-        $stmt = $pdo->prepare("SELECT status, trade_no, money, param, addtime FROM pay_order WHERE out_trade_no = ? LIMIT 1");
+        $stmt = $pdo->prepare("SELECT status, trade_no, money, param, addtime FROM `pay_order` WHERE out_trade_no = ? LIMIT 1");
         $stmt->execute([$outTradeNo]);
         $row = $stmt->fetch(PDO::FETCH_ASSOC);
         if (!$row) return 'not_found';

api/poller_online.php

@@ -185,7 +185,7 @@ function pollPaidOrders() {
     // 平台可能已标记 notify=1 但本地的 DB 未更新（HTTP 回调被 CF WAF 拦截），
     // 必须靠本地 SQLite 的 status='created' 来判断是否需要补单。
     $prefix = $GLOBALS['PLATFORM_DB_PREFIX'];
-    $stmt = $pdo->query("SELECT out_trade_no, trade_no, uid, money, status, notify, param, version, addtime FROM {$prefix}order WHERE status IN (1, 2) ORDER BY addtime ASC LIMIT 50");
+    $stmt = $pdo->query("SELECT out_trade_no, trade_no, uid, money, status, notify, param, version, addtime FROM `{$prefix}order` WHERE status IN (1, 2) ORDER BY addtime ASC LIMIT 50");
     $allOrders = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
     if (empty($allOrders)) {

api/recharge_orders_api.php

@@ -229,7 +229,7 @@ function handleSyncFromPlatform() {
         $pdo = getAdminPlatformDB();
 
         // 查所有已支付订单
-        $stmt = $pdo->query("SELECT out_trade_no, trade_no, uid, money, status, param, addtime FROM pay_order WHERE status IN (1, 2) ORDER BY addtime DESC LIMIT 200");
+        $stmt = $pdo->query("SELECT out_trade_no, trade_no, uid, money, status, param, addtime FROM `pay_order` WHERE status IN (1, 2) ORDER BY addtime DESC LIMIT 200");
         $platformOrders = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
         $synced = 0;