FM / angel

/home/desid573/public_html/angel

Name	Size	Mode	Actions
assets/	-	0755	rm
drivers/	-	0755	rm
font/	-	0755	rm
lib/	-	0755	rm
payment/	-	0755	rm
stripe/	-	0755	rm
twilio-php-master/	-	0755	rm
vendor/	-	0755	rm
after_booking_page.php	2595	0644	edit dl rm
angeldrivers.png	132095	0644	edit dl rm
a_name_address.php	1289	0644	edit dl rm
booking.php	9621	0644	edit dl rm
booking_28-04-2017.php	947	0644	edit dl rm
booking_29-04-2017.php	3717	0644	edit dl rm
cancel.php	2430	0644	edit dl rm
cancel_booking.php	5367	0644	edit dl rm
composer.json	65	0644	edit dl rm
composer.lock	2355	0644	edit dl rm
confirmsend.php	2582	0644	edit dl rm
contact_us_mail.php	903	0644	edit dl rm
dispatch.php	864	0644	edit dl rm
error_log	436257456	0644	edit dl rm
generate_credit.php	3187	0644	edit dl rm
generate_referall.php	2779	0644	edit dl rm
getPrice.php	738	0644	edit dl rm
getuser_byid.php	2341	0644	edit dl rm
getuser_bymail.php	1968	0644	edit dl rm
get_all_booking.php	779	0644	edit dl rm
get_booking_bybooking_id.php	813	0644	edit dl rm
get_booking_byuser.php	1057	0644	edit dl rm
get_booking_status.php	2219	0644	edit dl rm
get_completed_bookings.php	727	0644	edit dl rm
get_directions.php	813	0644	edit dl rm
get_lead_message.php	673	0644	edit dl rm
get_open_bookings.php	1465	0644	edit dl rm
get_payment_byuser.php	1064	0644	edit dl rm
home.php	1660	0644	edit dl rm
homekey_img.png	14037	0644	edit dl rm
hook.php	21267	0644	edit dl rm
hook_set_up.php	654	0644	edit dl rm
index.php	12007	0644	edit dl rm
index_backup.php	4791	0644	edit dl rm
jobdetails.php	12197	0644	edit dl rm
lib_tr.zip	105047	0644	edit dl rm
login_api.php	7798	0644	edit dl rm
login_api_old.php	5653	0644	edit dl rm
noteconfirm.php	9259	0644	edit dl rm
online_booking.php	28283	0644	edit dl rm
passwordResetLink.php	5195	0644	edit dl rm
pay_file.php	7302	0644	edit dl rm
pay_file_back.php	5326	0644	edit dl rm
placehold.html	2184	0644	edit dl rm
priceCheck.php	0	0644	edit dl rm
reset_email.php	1755	0644	edit dl rm
search.php	830	0644	edit dl rm
send_bulk_notif.php	1692	0644	edit dl rm
setprice.php	4429	0644	edit dl rm
setprice_database.php	585	0644	edit dl rm
smsconfirm.php	9830	0644	edit dl rm
smssend.php	2354	0644	edit dl rm
stripe-php-master.zip	254366	0644	edit dl rm
test1.php	159	0644	edit dl rm
test_222.php	845	0644	edit dl rm
thankyou.php	17470	0644	edit dl rm
update_api.php	6290	0644	edit dl rm
update_api_on_mail.php	4677	0644	edit dl rm
validatecode.php	1094	0644	edit dl rm
validatephone.php	1034	0644	edit dl rm

Edit: /home/desid573/public_html/angel/update_api.php (6290B)

<?php
require("lib/config.php");
require_once 'vendor/eway/eway-rapid-php/include_eway.php';
// =============== New customer user api ===================================
$data  = $_REQUEST;
//$fullname = $_REQUEST["fname"]." ".$_REQUEST["lname"];
$fname = trim($_REQUEST["fname"]);
$lname = trim($_REQUEST["lname"]);
$fullname  = $fname." ".$lname;
$exp = $_REQUEST["exp"];
if(strpos($exp, "/") !== false) {
$exp_split = explode("/" ,$exp);
$expmonth = $exp_split[0];
$expyear = $exp_split[1];
} else {
    $expmonth = substr($exp, 0, 2);
    $expyear = substr($exp, 2);
}
if($_REQUEST['update'] == "0"){
if(isset($_REQUEST["pass"]))
{
	$password = MD5($_REQUEST["pass"]);
}
$sql = "SELECT id FROM customers where email = '".$_REQUEST['email']."'";
$result = $conn->query($sql);
while($row_details = $result->fetch_assoc()) 
{
	$cid = $row_details["id"] ;
}
$cid;
if ($result->num_rows > 0) 
 {

$sql= "UPDATE `customers` SET ";
		if(isset($_REQUEST["fname"]) && isset($_REQUEST["lname"]))
		{
			$sql.= "`name` = '".$fullname."',";
		}
		if(isset($_REQUEST["phone"]))
		{
			$phone = str_replace(" ", "", $_REQUEST["phone"]);
			$sql.= "`mobile` = '".$phone."',";
		}
		if(isset($_REQUEST["email"]))
		{
			$sql.= "`email` = '".$_REQUEST["email"]."' ,";
		}
		if(isset($_REQUEST["new_pass"]))
		{
			$new_pass = MD5($_REQUEST["new_pass"]);
			$sql.= "`password` = '".$new_pass."',";
		}
		$sql.= "`modified` = NOW() WHERE `customers`.`email` ='".$_REQUEST["email"]."'";
		if($conn->query($sql))
		{
			$cust["status"][] = "ok";
			$sql_detail="UPDATE `customer_details` SET ";
			
			if(isset($_REQUEST["address"]))
			{
				$sql_detail.= "`address` = '".$_REQUEST["address"]."', ";
			}
			if(isset($_REQUEST["addr_la"]))
			{
				$sql_detail.="`addr_lat` = '".$_REQUEST["addr_la"]."', ";
			}
			if(isset($_REQUEST["addr_long"]))
			{			
				$sql_detail.="`addr_long` = '".$_REQUEST["addr_long"]."' ";
			}
			$sql_detail.="WHERE `customer_details`.`cid` =".$cid;
			if($conn->query($sql_detail))
			{
				$cust["status"][] = "ok";
				
				
				//-----------------------------------------
				
			
					
			}
			else
			{
				$cust["error"][] = "error";
			}
		}
		else
		{
			$cust["error"][] = "error";
		}

$count = sizeof($cust["status"]);
	 $count_error = sizeof($cust["error"]);
	 if($count==2)
	 {
		 $Res["massege"] = "Customer Details are Updated";
		 $Res["status"] = "ok";
	 }
	 if($count_error >0)
	 {
		 $Res["massege"] = "Error in update, please contact us";
		 $Res["status"] = "error";
	 }
 }
 else
 {
	  $Res["massege"] = "No such Id present in database";
	  $Res["status"] = "error";
 }
 
 
echo json_encode(new ArrayObject($Res));
}

//echo "<pre>";
//print_r($response);
//print_r($data);
//print_r($Res);
//echo "</pre>";
if($_REQUEST['update'] == "1"){
				$sql = "SELECT * FROM customers where email = '".$_REQUEST["email"]."'";
				$result = $conn->query($sql);
				if ($result->num_rows > 0) {
					while($row = $result->fetch_assoc()) {
						$customer[] = $row;
						$sql = "SELECT * FROM `customer_details` where `cid` = '".$row["id"]."'"; 
						$result = $conn->query($sql);
							if ($result->num_rows > 0) {
								while($row_details = $result->fetch_assoc()) {
									$cust_detail[] = $row_details;
									}
							}
						$sql = "SELECT * FROM `customer_tokens`  where `cid` = '".$row["id"]."'"; 
						$result = $conn->query($sql);
						if ($result->num_rows > 0) {
							while($row_token = $result->fetch_assoc()) {
								$cust_token[] = $row_token;
							}
						}
					}
					}
	$cus = $customer[0]["name"];
	$mob = $customer[0]["mobile"];
	$cid = $customer[0]['id'];
	$tokencustomerid = $cust_token[0]["access_token_value"];

//========================token Id ===================================	
					$client_key = '4T7y1vuKPkdhRYUQdH6msueW9hqV2wpcwnSk0Qwxkvwf7TjQn40qymPW7IJb66gUC1w1505cDMkj9IR82juQEnIp4/8nd0nDhwYDSDoqROtNBWmkqtqYmF6F4qVGMUq3HpJrY3y2kdSljCFfWzWc7LIEn4G5XY2IZAPgAO5+mhwvYrricmqwLhqzV4FBUII5AwTvJZl4awrdul4vLWkS73vJuW/XrXHseGK/nqB3oSRluZ1jKp2qDgVTwrXYEbx4rwwS42X2w0C9tLKywxf27WD2CCK8ftSeQBimVqFI0r6VuRXFVaOn6SQTOD9V/TsCfPk5Zh6/PWcfapyVKS+l1w==';

$apiKey = '44DD7APNUxR8/4sDLhEVT11OS00fmBo4Haxj4ZGJGHvtLBP0rC/ayqNhbVu9tEJrjlJPJm';
					$apiPassword = 'y2b7QMpd';
				
				
					//$apiKey = '60CF3Ce97nRS1Z1Wp5m9kMmzHHEh8Rkuj31QCtVxjPWGYA9FymyqsK0Enm1P6mHJf0THbR';
					//$apiPassword = 'API-P4ss';
					
					$apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
					
					//$apiEndpoint = \Eway\Rapid\Client::MODE_SANDBOX; // Use \Eway\Rapid\Client::MODE_PRODUCTION when you go live
					$client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);
					$customer = [
						
							'Country' => 'au',
							'Email' => $_REQUEST['email'],
							'TokenCustomerID' => $tokencustomerid,
							'CardDetails' => [
									'Name' => $cus,
									'Number' => $_REQUEST["credit_card"],
									'ExpiryMonth' => $expmonth,
									'ExpiryYear' => $expyear,
									//'CVN' => $_REQUEST["CVV"],
									]
								];
					$response = $client->updateCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer);
					$json = json_decode($response, true);
					error_log($response);
					if($json["ResponseCode"] == "00") {
					    
						$Res["massege"] = "Credit Card is Updated";
		 				$Res["status"] = "ok";
		 				
		 				$slackmessage = $cus." has updated their card";
		 				
		 				$curlObj = curl_init();
	curl_setopt($curlObj, CURLOPT_URL, 'https://hooks.slack.com/services/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');
	curl_setopt($curlObj, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($curlObj, CURLOPT_SSL_VERIFYPEER, 0);
	curl_setopt($curlObj, CURLOPT_HEADER, 0);
	curl_setopt($curlObj, CURLOPT_HTTPHEADER, array('Content-type:application/json'));
	curl_setopt($curlObj, CURLOPT_POST, 1);
	curl_setopt($curlObj, CURLOPT_POSTFIELDS, '{"text": "'.$slackmessage.'"}');

$response = curl_exec($curlObj);

curl_close($curlObj);
		 				} else {
		 				$Res["massege"] = "Error in Credit Card Update";
		 				$Res["status"] = "error";
		 				}
		 			echo json_encode(new ArrayObject($Res));
					
					//===========================token id end here ========================	
			}

$conn->close();
// =============== New customer user api End Here ==========================

cmd: