FM / angel

/home/desid573/public_html/angel

Name	Size	Mode	Actions
assets/	-	0755	rm
drivers/	-	0755	rm
font/	-	0755	rm
lib/	-	0755	rm
payment/	-	0755	rm
stripe/	-	0755	rm
twilio-php-master/	-	0755	rm
vendor/	-	0755	rm
after_booking_page.php	2595	0644	edit dl rm
angeldrivers.png	132095	0644	edit dl rm
a_name_address.php	1289	0644	edit dl rm
booking.php	9621	0644	edit dl rm
booking_28-04-2017.php	947	0644	edit dl rm
booking_29-04-2017.php	3717	0644	edit dl rm
cancel.php	2430	0644	edit dl rm
cancel_booking.php	5367	0644	edit dl rm
composer.json	65	0644	edit dl rm
composer.lock	2355	0644	edit dl rm
confirmsend.php	2582	0644	edit dl rm
contact_us_mail.php	903	0644	edit dl rm
dispatch.php	864	0644	edit dl rm
error_log	436257456	0644	edit dl rm
generate_credit.php	3187	0644	edit dl rm
generate_referall.php	2779	0644	edit dl rm
getPrice.php	738	0644	edit dl rm
getuser_byid.php	2341	0644	edit dl rm
getuser_bymail.php	1968	0644	edit dl rm
get_all_booking.php	779	0644	edit dl rm
get_booking_bybooking_id.php	813	0644	edit dl rm
get_booking_byuser.php	1057	0644	edit dl rm
get_booking_status.php	2219	0644	edit dl rm
get_completed_bookings.php	727	0644	edit dl rm
get_directions.php	813	0644	edit dl rm
get_lead_message.php	673	0644	edit dl rm
get_open_bookings.php	1465	0644	edit dl rm
get_payment_byuser.php	1064	0644	edit dl rm
home.php	1660	0644	edit dl rm
homekey_img.png	14037	0644	edit dl rm
hook.php	21267	0644	edit dl rm
hook_set_up.php	654	0644	edit dl rm
index.php	12007	0644	edit dl rm
index_backup.php	4791	0644	edit dl rm
jobdetails.php	12197	0644	edit dl rm
lib_tr.zip	105047	0644	edit dl rm
login_api.php	7798	0644	edit dl rm
login_api_old.php	5653	0644	edit dl rm
noteconfirm.php	9259	0644	edit dl rm
online_booking.php	28283	0644	edit dl rm
passwordResetLink.php	5195	0644	edit dl rm
pay_file.php	7302	0644	edit dl rm
pay_file_back.php	5326	0644	edit dl rm
placehold.html	2184	0644	edit dl rm
priceCheck.php	0	0644	edit dl rm
reset_email.php	1755	0644	edit dl rm
search.php	830	0644	edit dl rm
send_bulk_notif.php	1692	0644	edit dl rm
setprice.php	4429	0644	edit dl rm
setprice_database.php	585	0644	edit dl rm
smsconfirm.php	9830	0644	edit dl rm
smssend.php	2354	0644	edit dl rm
stripe-php-master.zip	254366	0644	edit dl rm
test1.php	159	0644	edit dl rm
test_222.php	845	0644	edit dl rm
thankyou.php	17470	0644	edit dl rm
update_api.php	6290	0644	edit dl rm
update_api_on_mail.php	4677	0644	edit dl rm
validatecode.php	1094	0644	edit dl rm
validatephone.php	1034	0644	edit dl rm

Edit: /home/desid573/public_html/angel/index.php (12007B)

<?php
require("lib/config.php");
require("stripe/init.php");

\Stripe\Stripe::setApiKey("sk_test_aTOq8LkQ3PNVwYgYQngURqpK00ixd8OTZQ");
// =============== New customer user api ===================================
$data  = $_REQUEST;
//echo "<pre>";
	//print_r($data);
//echo "<pre>";
$sql = "SELECT id FROM customers where email = '".$_REQUEST['email']."'";
$result = $conn->query($sql);
$promo_code = "";

$headers = 'From: '.$_REQUEST["email"] . "\r\n" .
    'X-Mailer: PHP/' . phpversion();

if ($result->num_rows > 0) 
 {
        $row = $result->fetch_assoc();
            $cid = $row["id"];
            if($row["password"] == "") {
                
                $sql = "SELECT id FROM google_id where cid = '".$cid."'";
                $result = $conn->query($sql);
                if($result->num_rows > 0) {
                    
                    $Res["message"] = "User already exists with that Email address and is linked to a Google Account";
        	        $Res["customer_status"] = "already exist";
        	        $Res["status"] = "already exist";
                    
                } else {
                    
                    $sql = "SELECT id FROM facebook_id where cid = '".$cid."'";
                    $result = $conn->query($sql);
                    if($result->num_rows > 0) {
                        $Res["message"] = "User already exists with that Email address and is linked to a Facebook Account";
        	            $Res["customer_status"] = "already exist";
        	            $Res["status"] = "already exist";
                    } else {
                       
                       $sql = "SELECT id FROM customer_tokens where cid = '".$cid."'";
                        $result = $conn->query($sql);
                       $row = $result->fetch_assoc();
                       $token = $row["access_token_value"];
                       $Res = createAccount($cid, $token);
                       
                        
                    }
                    
                }
                
            } else {
        	$Res["message"] = "User already exists with that Email address";
        	$Res["customer_status"] = "already exist";
        	$Res["status"] = "already exist";
            }
	
 }
 else 
 {
  
  $Res = createAccount("", "");
  
}
function createAccount($cid, $tokenID) {
    
    if($_REQUEST['user_agree']=="1")
  {
  if(isset($_REQUEST['promo_code']) && $_REQUEST['promo_code'] != "") {
  	if(substr($_REQUEST['promo_code'], 0, 2) === "RF"){
  		$sql = "SELECT * FROM referrals where code = '".$_REQUEST['promo_code']."'";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) {
		$promo_code = $_REQUEST['promo_code'];
		$promo_details = $result->fetch_assoc();
		$continue = 1;
		$referal = true;
		
		} else {
		error_log($conn->error);
		$continue = 0;
		$promo_code = "";
		
  	}
  	
  	} else {
  
  
  	$sql = "SELECT code FROM promo_codes where code = '".trim($_REQUEST['promo_code'])."'";
	$result = $conn->query($sql);
	if ($result->num_rows > 0) {
		$promo_code = $_REQUEST['promo_code'];
		$continue = 1;
		} else {
		error_log($conn->error);
		$continue = 0;
		$promo_code = "";
		
  	}
  	}
  
  } else {
  	$continue = 1;
  	$referal = false;
  }
  if($continue == 1) {
    
    $pass = MD5($_REQUEST["pass"]);
	//$fullname = $_REQUEST["name"];
	//$name_split = explode(" ",$fullname);
	$fname = trim($_REQUEST["fname"]);
	$lname = trim($_REQUEST["lname"]);
	$fullname  = $conn->real_escape_string($fname." ".$lname);
	error_log($_REQUEST["exp"]);
	$exp = $_REQUEST["exp"];
		error_log($_REQUEST["exp"]);
		if(strpos($exp, '/') !== false) {
		    $exp_split = explode("/",$exp);
					$expmonth = $exp_split[0];
					$expyear = $exp_split[1];
		   
		    
		} else {
		    
		    $expmonth = substr($exp, 0, 2);
		   $expyear = substr($exp, 2, 2);
					
		}
		
		error_log($expmonth." ".$expyear);
					
					$cvv = $_REQUEST["CVV"];
					
  //========================token Id ===================================	
					
				// Generate or update Token
					
				
					
				
			//===========================token id end here ========================	
  
  if($cid == "")
	{
	
	if($fname!="" && $lname!="")
	{
		$phone = str_replace(" ", "", $_REQUEST["phone"]);
			$sql = "INSERT INTO `customers` (`id`, `name`, `mobile`, `email`, `password`, `firebase_token`, `promo_code`, `promo_used`,  `is_delete`, `created`, `modified`) VALUES (NULL, '".$fullname."', '".$phone."', '".$_REQUEST['email']."', '".$pass."', '', '".$promo_code."', '0', '0',NOW() , NOW() )";
			error_log("reached build query");
			
			if ($conn->query($sql) === TRUE) 
			{
			error_log("query success");
				$cid = $conn->insert_id;
				if($conn->insert_id)
				{
				    
				    if(isset($_REQUEST["googleID"]) && $_REQUEST["googleID"] != "") {
				        
				        $sql = "SELECT * FROM `google_id` WHERE `google_id` = '".$_REQUEST["googleID"]."'";
    					$insert = $conn->query($sql);
    					
    					if($insert->num_row > 0) {
    					    
    					    $sql = "DELETE FROM `customers` WHERE `id` = ".$cid;
    					    
    					    $insert = $conn->query($sql);
    					    
    					    $Res["status"] = "error";
    					    $Res["message"] = "Google ID already attached to an account";
    					    
    					    die(json_encode(new ArrayObject($Res)));
    					    
    					} else {
				        
				        
				        $sql = "INSERT INTO `google_id` (`id`, `cid`, `google_id`, `date_created`) VALUES (NULL, '".$cid."', '".$_REQUEST["googleID"]."', NOW())";
    					$insert = $conn->query($sql);
    					if(!$insert) {error_log("google add error ".$conn->error);}
				        
    					}
				        
				        
				        
				    } else if(isset($_REQUEST["facebookID"]) && $_REQUEST["facebookID"] != "") {
				        
				        
				        $sql = "SELECT * FROM `facebook_id` WHERE `facebook_id` = '".$_REQUEST["facebookID"]."'";
    					$insert = $conn->query($sql);
    					
    					if($insert->num_row > 0) {
    					    
    					    $sql = "DELETE FROM `customers` WHERE `id` = ".$cid;
    					    
    					    $insert = $conn->query($sql);
    					    
    					    $Res["status"] = "error";
    					    $Res["message"] = "Google ID already attached to an account";
    					    
    					    die(json_encode(new ArrayObject($Res)));
    					    
    					} else {
				        
				        $sql = "INSERT INTO `facebook_id` (`id`, `cid`, `facebook_id`, `date_created`) VALUES (NULL, '".$cid."', '".$_REQUEST["facebookID"]."', NOW())";
    					$insert = $conn->query($sql);
    					if(!$insert) {error_log("facebook add error ".$conn->error);}
				        
				        
    					}
				        
				        
				    }
					//$expmonth = $_REQUEST["expmonth"];
					//$expyear = $_REQUEST["expyear"];
					if($referal) {
					$sql = "INSERT INTO `referral_use` (`id`, `referer_id`, `refered_id`, `code`, `value`, `reference`, `date_used`) VALUES (NULL, '".$promo_details['customer_id']."', '".$cid."', '".$promo_code."', '".$promo_details['value']."', '', NULL)";
					$insert = $conn->query($sql);
					if(!$insert) {error_log($conn->error);}
					
					$sql = "SELECT * FROM `referal_claim` WHERE `code` = '".$promo_code."'";
					$result = $conn->query($sql);
						if($result->num_rows > 0) {
						$claims = $result->fetch_assoc();
						$current_claims = $claims['referrals_generated'];
						$new_claims = $current_claims + 1;
						error_log("Number of claims: ".$new_claims);
						$sql = "UPDATE `referal_claim` SET `referrals_generated` = ".$new_claims.", `date_last_generated` = NOW() WHERE `code` = '".$promo_code."'";
						$update = $conn->query($sql);
						if(!$update) {error_log($conn->error);}
						
						
						} else {
						
						$sql = "INSERT INTO `referal_claim` (`id`, `customer_id`, `code`, `referrals_generated`, `date_last_generated`, `referrals_claimed`, `reference_claimed`, `date_last_claimed`, `value`) VALUES (NULL, '".$promo_details['customer_id']."',  '".$promo_code."', '1', NOW(), '0', '', NULL, '10')";
						$insert = $conn->query($sql);
						if(!$insert) {error_log($conn->error);}
						}
					
					}

$address = $pickup = $conn->real_escape_string($_REQUEST['address']);
					$addr_lat = $_REQUEST["addr_la"];
					$addr_long = $_REQUEST["addr_long"];
					$sql_detail = "INSERT INTO `customer_details` (`id`, `cid`, `address`, `addr_lat`, `addr_long`) VALUES (NULL, '".$cid."', '".$address."', '".$addr_lat."','".$_REQUEST['addr_long']."')";
					
					if ($conn->query($sql_detail) === TRUE) 
					{
						//$Res["customer_detail_id"] = $conn->insert_id;
						//$Res["customer_detail_status"] = "OK";
						$success[] = "Ok" ;
					}
					else
					{
						//$Res["customer_detail_status"] = "Error";
						$error[] = "Error";
						
						
					}
					
						
							$sql_token = "INSERT INTO `customer_tokens` (`id`, `cid`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL, '".$cid."', '".$tokencustomerid ."', '".$_REQUEST['user_agree']."', NOW(), NULL)";
							error_log($conn->error);
							$cid = $conn->insert_id;
							if ($conn->query($sql_token) === TRUE) 
							{
								//$Res["customer_token_id"] = $conn->insert_id;
								//$Res["customer_token_status"] = "OK";
								$success[] = "Ok" ;
							}
							else
							{
								//$Res["customer_token_status"] = "Error";
								$error[] = "Error";
							}
						}
						} else {
						error_log($conn->error);
						}
					} else
			{
				$Res["message"] = "First and Last Name required";
				$Res["customer_status"] = "name error";
				$Res["status"] = "name error";
			}
		
				$success = sizeof($success);
				$error = sizeof($error);
				if($success==2)
				{
					$Res["message"] = "New Customer is created successfully";
					$Res["customer_status"] = "ok";
					$Res["status"] = "ok";
					
					
					
					
					$curlObj = curl_init();
	curl_setopt($curlObj, CURLOPT_URL, 'https://hooks.slack.com/services/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');
	curl_setopt($curlObj, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($curlObj, CURLOPT_SSL_VERIFYPEER, 0);
	curl_setopt($curlObj, CURLOPT_HEADER, 0);
	curl_setopt($curlObj, CURLOPT_HTTPHEADER, array('Content-type:application/json'));
	curl_setopt($curlObj, CURLOPT_POST, 1);
	curl_setopt($curlObj, CURLOPT_POSTFIELDS, '{"text": "New Customer '.$fullname.' created '.$promo_code.'"}');

$response = curl_exec($curlObj);

curl_close($curlObj);
	
	
	
	$url = "https://hooks.zapier.com/hooks/catch/1952188/i1xop9/";
    			$curlObj = curl_init();

curl_setopt($curlObj, CURLOPT_URL, "$url");
			curl_setopt($curlObj, CURLOPT_RETURNTRANSFER, 1);
			curl_setopt($curlObj, CURLOPT_SSL_VERIFYPEER, 0);
			curl_setopt($curlObj, CURLOPT_HEADER, 0);
			curl_setopt($curlObj, CURLOPT_HTTPHEADER, array('Content-type:application/json'));
			curl_setopt($curlObj, CURLOPT_HTTPHEADER, array('Accept: application/json'));		
			curl_setopt($curlObj, CURLOPT_POST, 1);
			curl_setopt($curlObj, CURLOPT_POSTFIELDS, '[{"cid": "'.$cid.'"}]');

$response = curl_exec($curlObj);

curl_close($curlObj);
					
					
				}
				if($error>0)
				{
					$Res["message"] = "User data not accurate";
					$Res["customer_status"] = "error";
					$Res["status"] = "error";
				}
				
				
				
			} else {
					$Res["message"] = "Credit Card details invalid or incorrect";
					$Res["customer_status"] = "error";
					$Res["status"] = "error";
				}
 			
 
 	} else {
 		$Res["message"] = "Invalid Promo Code";
		$Res["customer_status"] = "promo error";
		$Res["status"] = "promo error";
 
 	}
 }
  else
  {
	 $Res["message"] = "Please accept the user agreement";
	 $Res["customer_status"] = "agreement error";
	 $Res["status"] = "error";
  }
    
    
    
    
    
}

echo json_encode(new ArrayObject($Res)); 
//echo "<pre>";
//print_r($Res);
//print_r($response);
//echo "</pre>";
$conn->close();
// =============== New customer user api End Here ==========================

cmd: