FM / fc

/home/desid573/public_html/fc_api

Name	Size	Mode	Actions
lib/	-	0755	rm
twilio-php-master/	-	0755	rm
vendor/	-	0755	rm
after_booking_page.php	2595	0644	edit dl rm
appoff.php	4782	0644	edit dl rm
booking.php	17680	0644	edit dl rm
booking_edit_request.php	10196	0644	edit dl rm
cancel_booking.php	6064	0644	edit dl rm
check_open.php	0	0644	edit dl rm
composer.json	65	0644	edit dl rm
composer.lock	2355	0644	edit dl rm
confirmsend.php	2983	0644	edit dl rm
confirm_booking_change.php	6305	0644	edit dl rm
confirm_booking_change_ajax.php	6696	0644	edit dl rm
contact_us_mail.php	890	0644	edit dl rm
copy_account_to_homekey.php	4338	0644	edit dl rm
dispatch.php	877	0644	edit dl rm
emailConfirmReset.php	486	0644	edit dl rm
error_log	30761021	0644	edit dl rm
family-cab_small.jpg	98853	0644	edit dl rm
generate_credit.php	3098	0644	edit dl rm
generate_referall.php	2779	0644	edit dl rm
getuser_byid.php	2341	0644	edit dl rm
getuser_bymail.php	3419	0644	edit dl rm
get_all_booking.php	779	0644	edit dl rm
get_booking_bybooking_id.php	813	0644	edit dl rm
get_booking_byuser.php	1057	0644	edit dl rm
get_booking_status.php	3246	0644	edit dl rm
get_completed_bookings.php	710	0644	edit dl rm
get_ETA.php	5013	0644	edit dl rm
get_lead_message.php	673	0644	edit dl rm
get_open_bookings.php	1537	0644	edit dl rm
get_payment_byuser.php	1064	0644	edit dl rm
get_price.php	41	0644	edit dl rm
get_recipes.php	6361	0644	edit dl rm
get_request_details.php	976	0644	edit dl rm
get_TE.php	1217	0644	edit dl rm
index.php	13722	0644	edit dl rm
index_backup.php	4791	0644	edit dl rm
lib_tr.zip	105047	0644	edit dl rm
login_api.php	8679	0644	edit dl rm
noteconfirm.php	9228	0644	edit dl rm
off.php	2854	0644	edit dl rm
passwordResetLink.php	5170	0644	edit dl rm
pay_file.php	7302	0644	edit dl rm
pay_file_back.php	5326	0644	edit dl rm
placehold.html	2147	0644	edit dl rm
reset_email.php	1755	0644	edit dl rm
reset_phone.php	5717	0644	edit dl rm
test2.php	0	0644	edit dl rm
test_222.php	845	0644	edit dl rm
update_api.php	5910	0644	edit dl rm
update_api_on_mail.php	4723	0644	edit dl rm
validatecode.php	1094	0644	edit dl rm
validatephone.php	1034	0644	edit dl rm

Edit: /home/desid573/public_html/fc_api/login_api.php (8679B)

<?php
require("lib/config.php");
require_once 'vendor/eway/eway-rapid-php/include_eway.php';
// =============== Get customer user api ===================================
$data  = $_REQUEST;
error_log(json_encode($data, true));
$code_value = "";
$sql = "SELECT * FROM customers where email = '".$_REQUEST['username']."' and password = '".MD5($_REQUEST['pass'])."'";
$result = $conn->query($sql);
if ($result->num_rows > 0) 
{
    
    $Res = processLogin($result);
	
	
} 
else 
{
	if(isset($_REQUEST["google_id"]) && $_REQUEST["google_id"] != "") {
    $sql = "SELECT * FROM google_id where google_id = '".$_REQUEST["google_id"]."'";
    $result = $conn->query($sql);
    
        if ($result->num_rows > 0) 
        {
            $row = $result->fetch_assoc();
            $cid = $row["cid"];
            
            $sql = "SELECT * FROM customers where id = ".$cid;
            $result = $conn->query($sql);
            if ($result->num_rows > 0) 
            {
            
            $Res = processLogin($result);
            
            } else {
            
            $Res["message"] = "Google account not connected to an active account"; 
	        $Res["status"] = "missing_account"; 
            
            }
        	
        } else {
            
            $Res["message"] = "Google account not connected to an active account"; 
	        $Res["status"] = "missing_account"; 
            
        }
    
    
    } else if(isset($_REQUEST["facebook_id"]) && $_REQUEST["facebook_id"] != "") {
    $sql = "SELECT * FROM facebook_id where facebook_id = '".$_REQUEST['facebook_id']."'";
    $result = $conn->query($sql);
    
    if ($result->num_rows > 0) 
        {
            $row = $result->fetch_assoc();
            $cid = $row["cid"];
            
            $sql = "SELECT * FROM customers where id = ".$cid;
            $result = $conn->query($sql);
            if ($result->num_rows > 0) 
            {
            
            $Res = processLogin($result);
            
            } else {
            
            $Res["message"] = "Facebook account not connected to an active account"; 
	        $Res["status"] = "missing_account"; 
            
            }
            
            
        	
        } else {
            
            $Res["message"] = "Facebook Account Not Connected to an Active DesiDrivers Account"; 
	        $Res["status"] = "missing_account"; 
            
        }
    
    } else {
    
    
	$Res["message"] = "Username and Password combination not correct or username does not exist"; 
	$Res["status"] = "error"; 
	
    }
}
    
    
    
    
    
    
    
    
    
function processLogin($result) {
    
    global $conn;    
    $cid = "";
    while($row = $result->fetch_assoc()) 
	{   
	    $cid = $row["id"];
        $customer[] = $row;
		$sql = "SELECT * FROM `customer_details` where `cid` = '".$row["id"]."'"; 
		$result = $conn->query($sql);
		if ($result->num_rows > 0) 
		{
			while($row_details = $result->fetch_assoc()) 
			{
				$cust_detail[] = $row_details;
			}
		}
		
		$sql = "SELECT * FROM `promo_codes` where `code` = '".$row["promo_code"]."'"; 
		$result = $conn->query($sql);
			if($result->num_rows > 0) {
			$values = $result->fetch_assoc();
			$code_value = $values["value"];
			} else {
			$sql = "SELECT * FROM referrals where code = '".$row["promo_code"]."'";
				$result = $conn->query($sql);
				if ($result->num_rows > 0) {
					$row = $result->fetch_assoc();
					$code_value = $row['value'];
					}
			
			}
		
		$sql = "SELECT * FROM `customer_tokens`  where `cid` = '".$row["id"]."'"; 
		$result = $conn->query($sql);
		if ($result->num_rows > 0) 
		{
			while($row_token = $result->fetch_assoc()) 
			{
				$cust_token[] = $row_token;
			}
		}
    }
	$Res["message"] = "Login Successful"; 
	$Res["staus"] = "OK"; 
	$Res["status"] = "OK"; 
	
	$sql = "SELECT * FROM `new_lang_lat`"; 
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($lang_lat = $result->fetch_assoc()) 
		{
			$lang_lati[] = $lang_lat;
		}
	}
	
	
	$sql = "SELECT * FROM `flag_val`"; 
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($flag_val = $result->fetch_assoc()) 
		{
			$flag_value[] = $flag_val;
		}
	}
	$sql = "SELECT * FROM `homekey_hours`";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($hours = $result->fetch_assoc()) 
		{
			$start_time = $hours['time_start'];
			$end_time = $hours['time_end'];
		}
	}
	$sql = "SELECT * FROM `terminal_details`";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($terminals[] = $result->fetch_assoc()) {
			
		}
		
		
	}
	$sql = "SELECT array FROM `homekey_lat_lng` WHERE `id`=1";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($homekey_lang_lat = $result->fetch_assoc()) 
		{
			$homekey_lang_lati = $homekey_lang_lat['array'];
		}
	}
	$sql = "SELECT * FROM `desid573_familycab`.`terminal_details`";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		
		while($terminal = $result->fetch_assoc()) {
			
			$terminali[] = $terminal;
			
		}
		
	}
	
	$sql = "SELECT `lead_time` FROM `lead_time_poly` WHERE zone = 1";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($leadtimes = $result->fetch_assoc()) 
		{
			$zone1 = $leadtimes['lead_time'];
		}
	}
	$sql = "SELECT `lead_time` FROM `lead_time_poly` WHERE zone = 2";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($leadtimes = $result->fetch_assoc()) 
		{
			$zone2 = $leadtimes['lead_time'];
		}
	}$sql = "SELECT `lead_time` FROM `lead_time_poly` WHERE zone = 3";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($leadtimes = $result->fetch_assoc()) 
		{
			$zone3 = $leadtimes['lead_time'];
		}
	}
	$sql = "SELECT * FROM `prices` WHERE id = 0";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($prices = $result->fetch_assoc()) 
		{
			$HKbase = $prices['base'];
			$HKkm = $prices['km'];
			$HKlarge = $prices['large_km'];
			$HKtime = $prices['time'];
		}
	}
	$sql = "SELECT * FROM `prices` WHERE id = 1";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($prices = $result->fetch_assoc()) 
		{
			$SIbase = $prices['base'];
			$SIkm = $prices['km'];
			$SIlarge = $prices['large_km'];
			$SItime = $prices['time'];
		}
	}
	$sql = "SELECT * FROM `desid573_familycab`.`prices`";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) 
	{
		while($prices = $result->fetch_assoc()) 
		{
			$priceMatrix[] = $prices;
			
		}
	}
	$sql = "SELECT * FROM `booking` WHERE cid = ".$cid. " AND status != 'completed' AND status != 'cancelled' AND status != 'expired'";
	$result = $conn->query($sql);
	$open_bookings = $result->num_rows;
	
	
	if(isset($_REQUEST["all"]))
	{
		$Res["data"] = $customer;
		$Res["cust_detail"] = $cust_detail;
		$Res["cust_token"] = $cust_token;
	}
	else
	{
	    $sql = "INSERT INTO `login_token`(`id`,`cid`, `token`, `date_created`) VALUES (NULL,".$cid.",UUID(),NOW())";
	    $result = $conn->query($sql);
	    if($result) {
	    $id = $conn->insert_id;
	    
	    $sql = "SELECT * FROM `login_token` WHERE `id` = ".$id;
	    $result = $conn->query($sql);
	    $row = $result->fetch_assoc();
	    $token = $row["token"];
	    } else {
	        error_log("token error ".$conn->error);
	    }
	    
		$Res["data"]["name"] = $customer[0]["name"];
		$Res["data"]["mobile"] = $customer[0]["mobile"];
		$Res["data"]["email"] = $customer[0]["email"];
		$Res["data"]["address"] = $cust_detail[0]["address"];
		$Res["data"]["addr_lat"] = $cust_detail[0]["addr_lat"];
		$Res["data"]["addr_long"] = $cust_detail[0]["addr_long"];
		$Res["data"]["no_pax"] = $cust_detail[0]["no_pax"];
		$Res["data"]["no_rf"] = $cust_detail[0]["no_rf"];
		$Res["data"]["no_ff"] = $cust_detail[0]["no_ff"];
		$Res["data"]["no_b"] = $cust_detail[0]["no_b"];
		$Res["data"]["lang_lati"] = $lang_lati;
		$Res["data"]["flag_value"] = $flag_value;

$Res["data"]["promo_code"] = $customer[0]["promo_code"];
		$Res["data"]["promo_value"] = $code_value;

$Res["data"]["open"] = $open_bookings;
		$Res["data"]["terminals"] = $terminali;
		$Res["data"]["prices"] = $priceMatrix;
		$Res["token"] = $token;
	
	}
	
	return $Res;

}

if($_REQUEST['firebase_token'] != ""){
	$sql = "UPDATE customers SET firebase_token='".$_REQUEST["firebase_token"]."' WHERE email = '".$_REQUEST['username']."'";
	$result = $conn->query($sql);
	}
	$return = json_encode(new ArrayObject($Res));
	error_log($return);
echo $return;

//echo "<pre>";
//print_r($Res);
//print_r($response);
//echo "</pre>";
$conn->close();
// =============== New customer user api End Here ==========================

cmd: