user_fields = " `smpin`, `emp_code`, `fname`, `lname`, `emailid`, `mobileno`, `role`,`dealer_code`, `address_1`, `address_2`, `address_3`, `profile_photo`, `dob`,`doj`, `country`, `language`, `is_married`, `marriage_date`, `last_password_change`, `is_first_login`, `is_profile_updated`, `mpin`,`epin` , `created_on`, `modified_on`"; //GET PAGE MESSAGE $this->page_data = globalfunc::getMessage($parent, $parent->lang, 'user'); if (count($parent->params) == 0) { $parent->response(array('response' => 'failed', 'message' => 'PAGE NOT FOUND'), 404); } else { $qry_params = explode("?", $parent->params[0]); $parameter_val = strtolower($qry_params[0]); if (strtolower($parent->device_type) == 'app') { switch ($parameter_val) { case "signup": case "signup_otp": case "otp_validation": case "signin": case "forgot_password": case "change_password": //case "check_token": case "devicetoken": case "reset_password": case "profile": case "profileimage": case "resetuser": case "resetfirstlogin": case "getuserdetails": case "userpasswordrest123": case "mpin_otp": case "epin_otp": case 'acceptleadmodule': $this->$parameter_val($parent); break; default: $parent->response(array('response' => 'failed', 'message' => 'PAGE NOT FOUND'), 404); break; } } else if (strtolower($parent->device_type) == 'web') { switch ($parameter_val) { case "signup": case "signup_otp": case "otp_validation": case "signin": case "forgot_password": case "change_password": //case "check_token": case "devicetoken": case "reset_password": case "profile": case "profileimage": case "resetuser": case "resetfirstlogin": case "getuserdetails": case "userpasswordrest123": case "mpin_otp": case "epin_otp": case 'acceptleadmodule': $this->$parameter_val($parent); break; default: $parent->response(array('response' => 'failed', 'message' => 'PAGE NOT FOUND'), 404); break; } } } $parent->response(array('response' => 'failed', 'message' => 'PAGE NOT FOUND'), 404); } /* /////////////////////////////// USER SIGNUP //////////////////////////////////////////////// */ private function signup($parent) { globalfunc::checkMethodType($parent, array('POST')); globalfunc::checkParamCount($parent, 1); $REQUEST_KEYS = array('username' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $username = escape_str($parent->_request['username']); //CHECK USER ALREADY REGISTER $query_getuserarr = $parent->selectQuery(TABLE_USER, "userid", " (emp_code='" . $username . "' OR smpin='" . $username . "' ) AND is_deleted=0 AND role>2", "1"); if ($query_getuserarr['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error8']), 406); } //CHECK IN EMPLOYEE TABLE $query_emparr = $parent->selectQuery(DMS_EMPLOYEE, "*", "smpin='" . $username . "' AND status='1' ", "1"); if (!$query_emparr['nr'] > 0) { //CHECK IN HOUSER $query_houserarr = $parent->selectQuery(DMS_HOUSER, "*", "emp_code='" . $username . "' AND status='1'", "1"); if (!$query_houserarr['nr'] > 0) { //NOT FOUND IN EMPLOYEE AND HO USER $parent->response(array('response' => 'failed', 'message' => $this->page_data['error9']), 406); } else { //HO USER FOUND $parent->executeQuery("DELETE FROM " . TABLE_TEMP_REGISTRATION . " WHERE emp_code='" . $username . "'"); $insert_temp_str = "INSERT INTO " . TABLE_TEMP_REGISTRATION . "(`smpin`, `emp_code`, `mobile`, `created_on`) VALUES ('','" . $username . "','" . $query_houserarr['result'][0]->mobile . "', '" . NOW . "')"; $parent->executeQuery($insert_temp_str); $query_houserarr['result'][0]->username = strtolower($username); $parent->response(array('response' => 'success', 'data' => $query_houserarr['result'][0], 'message' => $this->page_data['success1']), 200); } } else { //EMPLOYEE FOUND //DELETE OLD TEMP REGISTER $parent->executeQuery("DELETE FROM " . TABLE_TEMP_REGISTRATION . " WHERE smpin='" . $username . "'"); //INSERT IN TEMP REGISTRATION $insert_temp_str = "INSERT INTO " . TABLE_TEMP_REGISTRATION . "(`smpin`, `emp_code`, `mobile`,`created_on`) VALUES ('" . $username . "','','" . $query_emparr['result'][0]->mobile . "','" . NOW . "')"; $parent->executeQuery($insert_temp_str); $query_emparr['result'][0]->username = strtolower($username); $parent->response(array('response' => 'success', 'data' => $query_emparr['result'][0], 'message' => $this->page_data['success1']), 200); } } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// SEND OTP //////////////////////////////////////////////// */ private function signup_otp($parent) { globalfunc::checkMethodType($parent, array('POST')); globalfunc::checkParamCount($parent, 1); $REQUEST_KEYS = array('username' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $username = escape_str($parent->_request['username']); $device_type = escape_str($parent->_request['device_type']); $hashkey = escape_str($parent->_request['hashkey']); $query_temp_user = $parent->selectQuery(TABLE_TEMP_REGISTRATION, "*", "smpin='" . $username . "' OR emp_code='" . $username . "'", "1"); if ($query_temp_user['nr'] > 0) { $otp_expiry = globalfunc::generateExpiryTime($parent, OTP_EXPIRY_MIN); $otp = globalfunc::generateOTP(); $update_temp_str = "UPDATE " . TABLE_TEMP_REGISTRATION . " SET `otp`='" . $otp . "', `otp_expiry`='" . $otp_expiry . "' WHERE tid='" . $query_temp_user['result'][0]->tid . "'"; $parent->executeQuery($update_temp_str); //SEND SMS $parent->current_smpin = $query_temp_user['result'][0]->smpin; $parent->current_emp_code = $query_temp_user['result'][0]->emp_code; // if($device_type=='android') // { // $sms_message='<#>HYPER-M One Time Password (OTP) to register is '.$otp.'. Valid for 1 minute '.$hashkey; // }else // { // $sms_message='Dear User, Your One Time Password (OTP) to register with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; // } //$sms_message='Dear User, Your One Time Password (OTP) to register with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; $sms_message = "Your one time password is " . $otp; // globalfunc::sendSMS($parent, $query_temp_user['result'][0]->mobile, $sms_message); $parent->response(array('response' => 'success', 'data' => array('otp_expiry' => OTP_EXPIRY_MIN), 'message' => $this->page_data['success1']), 200); } else { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error9']), 406); } } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// SEND OTP //////////////////////////////////////////////// */ private function mpin_otp($parent) { globalfunc::checkMethodType($parent, array('GET', 'POST')); switch ($parent->get_request_method()) { case "GET": globalfunc::checkParamCount($parent, 1); globalfunc::checkAuthrozation($parent, array('type' => 'user')); $otp_expiry = globalfunc::generateExpiryTime($parent, OTP_EXPIRY_MIN); $otp = globalfunc::generateOTP(); $update_user_str = "UPDATE " . TABLE_USER . " SET `otp`='" . $otp . "', `otp_expiry`='" . $otp_expiry . "' WHERE userid='" . $parent->current_user_id . "'"; $parent->executeQuery($update_user_str); //$sms_message='Dear User, Your One Time Password (OTP) to change mpin with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; $sms_message = "Your one time password is " . $otp; // globalfunc::sendSMS($parent, $parent->current_user_data->mobileno, $sms_message); $parent->response(array('response' => 'success', 'data' => array('otp_expiry' => OTP_EXPIRY_MIN), 'message' => $this->page_data['success1']), 200); break; case "POST": globalfunc::checkParamCount($parent, 1); globalfunc::checkAuthrozation($parent, array('type' => 'user')); $device_type = escape_str($parent->_request['device_type']); $hashkey = escape_str($parent->_request['hashkey']); $otp_expiry = globalfunc::generateExpiryTime($parent, OTP_EXPIRY_MIN); $otp = globalfunc::generateOTP(); $update_user_str = "UPDATE " . TABLE_USER . " SET `otp`='" . $otp . "', `otp_expiry`='" . $otp_expiry . "' WHERE userid='" . $parent->current_user_id . "'"; $parent->executeQuery($update_user_str); // if($device_type=='android') // { // $sms_message='<#>HYPER-M One Time Password (OTP) to change mpin is '.$otp.'. Valid for 1 minute '.$hashkey; // }else // { // $sms_message='Dear User, Your One Time Password (OTP) to change mpin with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; // } //$sms_message='Dear User, Your One Time Password (OTP) to change mpin with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; $sms_message = "Your one time password is " . $otp; // globalfunc::sendSMS($parent, $parent->current_user_data->mobileno, $sms_message); $parent->response(array('response' => 'success', 'data' => array('otp_expiry' => OTP_EXPIRY_MIN), 'message' => $this->page_data['success1']), 200); break; } } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// SEND OTP //////////////////////////////////////////////// */ private function epin_otp($parent) { globalfunc::checkMethodType($parent, array('GET', 'POST')); switch ($parent->get_request_method()) { case "GET": globalfunc::checkParamCount($parent, 1); globalfunc::checkAuthrozation($parent, array('type' => 'user')); $otp_expiry = globalfunc::generateExpiryTime($parent, OTP_EXPIRY_MIN); $otp = globalfunc::generateOTP(); $update_user_str = "UPDATE " . TABLE_USER . " SET `otp`='" . $otp . "', `otp_expiry`='" . $otp_expiry . "' WHERE userid='" . $parent->current_user_id . "'"; $parent->executeQuery($update_user_str); //$sms_message='Dear User, Your One Time Password (OTP) to change mpin with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; $sms_message = "Your one time password is " . $otp; // globalfunc::sendSMS($parent, $parent->current_user_data->mobileno, $sms_message); $parent->response(array('response' => 'success', 'data' => array('otp_expiry' => OTP_EXPIRY_MIN), 'message' => $this->page_data['success1']), 200); break; case "POST": globalfunc::checkParamCount($parent, 1); globalfunc::checkAuthrozation($parent, array('type' => 'user')); $device_type = escape_str($parent->_request['device_type']); $hashkey = escape_str($parent->_request['hashkey']); $otp_expiry = globalfunc::generateExpiryTime($parent, OTP_EXPIRY_MIN); $otp = globalfunc::generateOTP(); $update_user_str = "UPDATE " . TABLE_USER . " SET `otp`='" . $otp . "', `otp_expiry`='" . $otp_expiry . "' WHERE userid='" . $parent->current_user_id . "'"; $parent->executeQuery($update_user_str); // if($device_type=='android') // { // $sms_message='<#>HYPER-M One Time Password (OTP) to change mpin is '.$otp.'. Valid for 1 minute '.$hashkey; // }else // { // $sms_message='Dear User, Your One Time Password (OTP) to change mpin with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; // } //$sms_message='Dear User, Your One Time Password (OTP) to change mpin with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; $sms_message = "Your one time password is " . $otp; // globalfunc::sendSMS($parent, $parent->current_user_data->mobileno, $sms_message); $parent->response(array('response' => 'success', 'data' => array('otp_expiry' => OTP_EXPIRY_MIN), 'message' => $this->page_data['success1']), 200); break; } } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// USER OTP VALIDATION //////////////////////////////////////////////// */ private function otp_validation($parent) { globalfunc::checkMethodType($parent, array('POST')); globalfunc::checkParamCount($parent, 1); $REQUEST_KEYS = array('otp' => 'string', 'type' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $otp = escape_str($parent->_request['otp']); $type = escape_str($parent->_request['type']); switch ($type) { case "register": $REQUEST_KEYS = array('username' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $username = escape_str($parent->_request['username']); //CHECK IN TEMP REGISTER $query_check_temparr = $parent->selectQuery(TABLE_TEMP_REGISTRATION, "*", " (smpin='" . $username . "' OR emp_code='" . $username . "')", "1"); if (!$query_check_temparr['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error9']), 406); } //CHECK OTP if ($query_check_temparr['result'][0]->otp != $otp) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error11']), 406); } if (!(strtotime($query_check_temparr['result'][0]->otp_expiry) > strtotime(NOW))) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error12']), 406); } //CHECK USER ALREADY REGISTER $query_checkuserarr = $parent->selectQuery(TABLE_USER, "userid", " (emp_code='" . $username . "' OR smpin='" . $username . "' ) AND is_deleted=0 AND role>2", "1"); if ($query_checkuserarr['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error8']), 406); } //GENERATE TOKEN $access_token = globalfunc::generateToken($parent, 'access', 128); $update_temp_str = "UPDATE " . TABLE_TEMP_REGISTRATION . " SET `auth_token`='" . $access_token . "' WHERE tid='" . $query_check_temparr['result'][0]->tid . "'"; $parent->executeQuery($update_temp_str); $parent->response(array('response' => 'success', 'access_token' => $access_token, 'message' => $this->page_data['success1']), 200); break; case "forgot_password": $REQUEST_KEYS = array('username' => 'string', 'otp' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $username = escape_str($parent->_request['username']); $otp = escape_str($parent->_request['otp']); //CHECK USER EXIST $query_checkuserarr = $parent->selectQuery(TABLE_USER, "*", " (emp_code='" . $username . "' OR smpin='" . $username . "' ) AND is_deleted=0 AND role>2", "1"); if (!$query_checkuserarr['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error9']), 406); } //CHECK OTP AND EXIPRY if ($query_checkuserarr['result'][0]->otp != $otp) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error11']), 406); } if (!(strtotime($query_checkuserarr['result'][0]->otp_expiry) > strtotime(NOW))) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error12']), 406); } //GET USER DATA $current_user_data = $this->getuserdata($parent, $query_checkuserarr['result'][0]->userid); //GENERATE TOKEN $access_token = globalfunc::generateToken($parent, 'access', 128); $parent->executeQuery(" UPDATE " . TABLE_USER . " SET auth_token='" . $access_token . "',otp='',otp_expiry='0000-00-00 00:00:00' WHERE userid='" . $query_checkuserarr['result'][0]->userid . "'"); //LOG $logstr = 'FORGOT PASSWORD UPDATE'; $parent->current_user_id = $userid; globalfunc::insertUserLog($parent, $logstr); $parent->response(array('response' => 'success', 'access_token' => $access_token, 'data' => $current_user_data, 'message' => $this->page_data['success1']), 200); break; case "mpin": globalfunc::checkAuthrozation($parent, array('type' => 'user')); $REQUEST_KEYS = array('otp' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); //CHECK USER EXIST $query_checkuserarr = $parent->selectQuery(TABLE_USER, "*", " userid='" . $parent->current_user_id . "' AND is_deleted=0 AND role>2", "1"); if (!$query_checkuserarr['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error9']), 406); } //CHECK OTP AND EXIPRY if ($query_checkuserarr['result'][0]->otp != $otp) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error11']), 406); } if (!(strtotime($query_checkuserarr['result'][0]->otp_expiry) > strtotime(NOW))) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error12']), 406); } $parent->executeQuery(" UPDATE " . TABLE_USER . " SET otp='',otp_expiry='0000-00-00 00:00:00' WHERE userid='" . $query_checkuserarr['result'][0]->userid . "'"); //LOG $logstr = 'MPIN OTP'; globalfunc::insertUserLog($parent, $logstr); //GET USER DATA $current_user_data = $this->getuserdata($parent, $parent->current_user_id); $parent->response(array('response' => 'success', 'data' => $current_user_data, 'message' => $this->page_data['success1']), 200); break; case "epin": globalfunc::checkAuthrozation($parent, array('type' => 'user')); $REQUEST_KEYS = array('otp' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); //CHECK USER EXIST $query_checkuserarr = $parent->selectQuery(TABLE_USER, "*", " userid='" . $parent->current_user_id . "' AND is_deleted=0 AND role>2", "1"); if (!$query_checkuserarr['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error9']), 406); } //CHECK OTP AND EXIPRY if ($query_checkuserarr['result'][0]->otp != $otp) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error11']), 406); } if (!(strtotime($query_checkuserarr['result'][0]->otp_expiry) > strtotime(NOW))) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error12']), 406); } $parent->executeQuery(" UPDATE " . TABLE_USER . " SET otp='',otp_expiry='0000-00-00 00:00:00' WHERE userid='" . $query_checkuserarr['result'][0]->userid . "'"); //LOG $logstr = 'EPIN OTP'; globalfunc::insertUserLog($parent, $logstr); //GET USER DATA $current_user_data = $this->getuserdata($parent, $parent->current_user_id); $parent->response(array('response' => 'success', 'data' => $current_user_data, 'message' => $this->page_data['success1']), 200); break; default: $parent->response(array('response' => 'failed', 'message' => $this->page_data['error10']), 406); break; } $parent->response(array('response' => 'success', 'message' => $this->page_data['success1']), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// USER SIGN IN //////////////////////////////////////////////// */ private function signin($parent) { globalfunc::checkMethodType($parent, array('POST')); globalfunc::checkParamCount($parent, 1); $REQUEST_KEYS = array('username' => 'string', 'password' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $username = escape_str($parent->_request['username']); $password = escape_str($parent->_request['password']); //CHECK USER EXIST $query_getuserarr = $parent->selectQuery(TABLE_USER, "userid,role,status", " ((smpin='" . $username . "' AND role in (8,9,10,11,12,13,15)) OR (emp_code='" . $username . "' AND ( role<8 OR role='14' OR role='16' OR role='17'))) AND is_deleted=0 AND role>2", "1"); if (!$query_getuserarr['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error3']), 406); } if ($query_getuserarr['nr'] > 0 && $query_getuserarr['result'][0]->status != '1') { $msg = ($query_getuserarr['result'][0]->role > 7 && $query_getuserarr['result'][0]->role < 14) ? 'error14' : 'error16'; $parent->response(array('response' => 'failed', 'message' => $this->page_data[$msg]), 406); } $userid = $query_getuserarr['result'][0]->userid; if ($parent->device_type != 'app' && in_array($parent->current_user_role, array(16, 17))) { $parent->response(array('response' => 'failed', 'message' => "Sorry Invalid Device Access"), 406); } //INVALID PASSWORD $query_password_validation = $parent->selectQuery(TABLE_USER, 'userid,' . $this->user_fields, "userid='" . $userid . "' AND ( password = '" . md5($password) . "') AND status=1 AND is_deleted=0 AND role>2", "1"); if (!$query_password_validation['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error2']), 406); } //GENERATE TOKEN $access_token = globalfunc::generateToken($parent, 'access', 128); $parent->executeQuery(" UPDATE " . TABLE_USER . " SET auth_token='" . $access_token . "' WHERE userid='" . $userid . "'"); //USER LOG UPDATE $parent->current_user_id = $query_password_validation['result'][0]->userid; $parent->current_user_data = $query_password_validation['result'][0]; $parent->current_user_data->access_token = $access_token; //LOG $logstr = 'SIGNIN'; globalfunc::insertUserLog($parent, $logstr); $current_user_data = $this->getuserdata($parent, $parent->current_user_id); //MIN REDEEM $data['setting'] = 'REDEEM'; $data = globalfunc::getSiteSetting($parent, $data); $min_redeem_point = $data->REDEEM_MIN_VALUE; $current_user_data->min_redeem_point = $min_redeem_point; $parent->response(array('response' => 'success', 'access_token' => $access_token, 'data' => $current_user_data, 'message' => $this->page_data['success1']), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// USER CHANGE PASSWORD//////////////////////////////////////// */ private function change_password($parent) { globalfunc::checkMethodType($parent, array('POST')); globalfunc::checkParamCount($parent, 1); $REQUEST_KEYS = array('new_password' => 'string', 'type' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $new_password = $parent->_request['new_password']; $type = escape_str($parent->_request['type']); if ($type == 'reset') { $user_details = globalfunc::checkAuthrozation($parent, array('type' => 'set_password')); } else if ($type == 'old') { $user_details = globalfunc::checkAuthrozation($parent, array('type' => 'user')); $REQUEST_KEYS = array('current_password' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $current_password = $parent->_request['current_password']; if ($new_password == $current_password) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error15']), 401); } $query_getuserarr = $parent->selectQuery(TABLE_USER, "userid", " userid='" . $parent->current_user_id . "' AND password='" . md5($current_password) . "' AND status=1 AND is_deleted=0 AND role>2", "1"); if (!$query_getuserarr['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error7']), 406); } } else if ($type == 'register') { $access_token = globalfunc::getAuthrozation($parent); $query_check_temparr = $parent->selectQuery(TABLE_TEMP_REGISTRATION, "*", " auth_token='" . $access_token . "'", "1"); if (!$query_check_temparr['nr'] > 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error13']), 401); } $REQUEST_KEYS = array('username' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $username = escape_str($parent->_request['username']); //VALIDATE PASSWORD globalfunc::passwordPolicy($parent, array('password' => $new_password)); $doj = '0000-00-00'; //EMPLOYEE $query_emparr = $parent->selectQuery(DMS_EMPLOYEE, "*", "smpin='" . $username . "' AND status='1' ", "1"); if ($query_emparr['nr'] > 0) { $smpin = $query_emparr['result'][0]->smpin; $emp_code = $query_emparr['result'][0]->emp_code; $fname = $query_emparr['result'][0]->fname; $lname = $query_emparr['result'][0]->lname; $emailid = $query_emparr['result'][0]->emailid; $mobileno = $query_emparr['result'][0]->mobile; //GET USER ROLE ID $role = projectfunc::getUserRoleId($parent, $query_emparr['result'][0]->role); $dealer_code = $query_emparr['result'][0]->dealer_code; $address_1 = $query_emparr['result'][0]->address_1; $address_2 = $query_emparr['result'][0]->address_2; $address_3 = $query_emparr['result'][0]->address_3; $doj = $query_emparr['result'][0]->date_of_join; $segment = $query_emparr['result'][0]->segment; //DELETE TEMP REGISTER $parent->executeQuery("DELETE FROM " . TABLE_TEMP_REGISTRATION . " WHERE smpin='" . $username . "'"); } else { $query_houserarr = $parent->selectQuery(DMS_HOUSER, "*", "emp_code='" . $username . "' AND status='1'", "1"); if ($query_houserarr['nr'] > 0) { $smpin = ''; $emp_code = $query_houserarr['result'][0]->emp_code; $fname = $query_houserarr['result'][0]->fname; $lname = $query_houserarr['result'][0]->lname; $emailid = $query_houserarr['result'][0]->emailid; $mobileno = $query_houserarr['result'][0]->mobile; //GET USER ROLE ID $role = projectfunc::getUserRoleId($parent, $query_houserarr['result'][0]->role); $dealer_code = $query_houserarr['result'][0]->dealer_code; $address_1 = $query_houserarr['result'][0]->address_1; $address_2 = $query_houserarr['result'][0]->address_2; $address_3 = $query_houserarr['result'][0]->address_3; $segment = 0; //DELETE TEMP REGISTER $parent->executeQuery("DELETE FROM " . TABLE_TEMP_REGISTRATION . " WHERE emp_code='" . $username . "'"); } else { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error8']), 406); } } $password = md5(globalfunc::generateToken($parent, '', 10)); $country = '105'; $language = 'en_us'; //GENERATE TOKEN $access_token = globalfunc::generateToken($parent, 'access', 128); //INSERT IN USER $insert_user_str = "INSERT INTO " . TABLE_USER . "(`smpin`, `emp_code`, `password`, `fname`, `lname`, `emailid`, `mobileno`, `role`, `doj`, `segment`, `dealer_code`, `address_1`, `address_2`, `address_3`, `auth_token`,`country`, `language`, `status`,`is_first_login`, `is_deleted`, `created_on`, `modified_on`) VALUES ('" . $smpin . "','" . $emp_code . "','" . md5($new_password) . "','" . $fname . "','" . $lname . "','" . $emailid . "','" . $mobileno . "','" . $role . "','" . $doj . "','" . $segment . "','" . $dealer_code . "','" . $address_1 . "','" . $address_2 . "','" . $address_3 . "','" . $access_token . "','" . $country . "', 'en_us','1','0','0','" . NOW . "','" . NOW . "')"; $parent->executeQuery($insert_user_str); $userid = $parent->lastInsertId(); $query_userarr = $parent->selectQuery(TABLE_USER, "*", "userid='" . $userid . "'", "1"); //INSERT LEARNING FOR DSE if ($query_emparr['nr'] > 0) { //CHECK LEARNING EXIST $query_learning = $parent->selectQuery(TABLE_USER_LEARNING, "*", "smpin='" . $smpin . "'", "1"); if (!($query_learning['nr'] > 0)) { $insert_learn_str = "INSERT INTO " . TABLE_USER_LEARNING . "( `smpin`, `lvl_id`, `status`, `current_status`, `created_on`, `modified_on`) VALUES ('" . $smpin . "','1','0','1','" . NOW . "','" . NOW . "')"; $parent->executeQuery($insert_learn_str); } //CREATE USER TABLES projectfunc::userTableCreate($parent, $smpin); //NEW CONDITION POINTS FOR FIRST 500 USER ONLY $query_countuserarr = $parent->selectQuery(TABLE_USER, "COUNT(userid) as ucount", "role in (8,9,10,11,12,13) ", "1"); if ($query_countuserarr['nr'] && $role != 15) //NO POINTS FOR INTERNATIONAL { if ($query_countuserarr['result'][0]->ucount < REGISTER_REWARD_LIMIT) { //ADD REWARD POINTS $obj = new stdClass(); $obj->type = "registration"; $obj->type_id = "0"; $obj->description = "Points for Login Registration"; $obj->points = REWARD_POINT_ONE; projectfunc::userAddPoints($parent, $obj, $userid); } else { //ADD REWARD POINTS $obj = new stdClass(); $obj->type = "registration"; $obj->type_id = "0"; $obj->description = "Points for Login Registration"; $obj->points = REWARD_POINT_TWO; projectfunc::userAddPoints($parent, $obj, $userid); } } } //LOG $logstr = 'REGISTER'; $parent->current_user_id = $userid; globalfunc::insertUserLog($parent, $logstr); $current_user_data = $this->getuserdata($parent, $parent->current_user_id); $parent->response(array('response' => 'success', 'access_token' => $access_token, 'data' => $current_user_data, 'message' => $this->page_data['success1']), 200); } else { $user_details = globalfunc::checkAuthrozation($parent, array('type' => 'user')); } //VALIDATE PASSWORD globalfunc::passwordPolicy($parent, array('password' => $new_password)); //UPDATE PASSWORD globalfunc::updatePassword($parent, array('password' => $new_password, 'current_password' => $current_password, 'userid' => $parent->current_user_id, 'type' => 'change')); if ($type == 'reset') { //LOG $logstr = 'RESET CHANGE PASSWORD'; globalfunc::insertUserLog($parent, $logstr); //REST USER TOKEN $parent->executeQuery(" UPDATE " . TABLE_USER . " SET valid_token='', validate_time='0000-00-00 00:00:00' WHERE userid='" . $parent->current_user_id . "'"); } else { //LOG $logstr = 'CHANGE PASSWORD'; globalfunc::insertUserLog($parent, $logstr); } if ($parent->current_user_data->is_first_login == '1') { //FIRST TIME CHANGE PASSWORD $parent->executeQuery("UPDATE " . TABLE_USER . " SET is_first_login='0' WHERE userid='" . $parent->current_user_id . "'"); } $parent->response(array('response' => 'success', 'message' => $this->page_data['success2']), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// DEVICETOKEN ////////////////////////////////////////// */ private function devicetoken($parent) { globalfunc::checkMethodType($parent, array('POST')); globalfunc::checkParamCount($parent, 1); globalfunc::checkAuthrozation($parent, array('type' => 'user')); $REQUEST_KEYS = array('token' => 'string', 'devicetype' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); $token = escape_str($parent->_request['token']); $deviceid = escape_str($parent->_request['deviceid']); $devicetype = strtolower(escape_str($parent->_request['devicetype'])); $model = escape_str($parent->_request['model']); $manufacture = escape_str($parent->_request['manufacture']); $version = escape_str($parent->_request['version']); $client_ip = globalfunc::getIp($parent, $data = array()); $user_device = $parent->selectQuery(TABLE_USER_DEVICES, "*", "userid='" . $parent->current_user_id . "' AND is_deleted='0'", "1"); if ($user_device['nr']) { //REMOVE DEVICE OF PREV USER $update_prev_str = "UPDATE " . TABLE_USER_DEVICES . " SET is_deleted='1' WHERE token='" . $token . "' AND id!='" . $user_device['result'][0]->id . "'"; $parent->executeQuery($update_prev_str); $update_token_str = "UPDATE " . TABLE_USER_DEVICES . " SET `devicetype`='" . $devicetype . "',`token`='" . $token . "',`android_id`='" . $deviceid . "',`model`='" . $model . "',`manufacture`='" . $manufacture . "',`version`='" . $version . "',`client_ip`='" . $client_ip . "',`modified_on`='" . NOW . "',is_deleted='0' WHERE id='" . $user_device['result'][0]->id . "'"; $user_device_res = $parent->executeQuery($update_token_str); } else { $insert_token_str = "INSERT INTO " . TABLE_USER_DEVICES . "(`userid`, `devicetype`, `token`, `android_id`, `model`, `manufacture`, `version`, `client_ip`, `created_on`, `modified_on`) VALUES ('" . $parent->current_user_id . "','" . $devicetype . "','" . $token . "','" . $deviceid . "','" . $model . "','" . $manufacture . "','" . $version . "','" . $client_ip . "','" . NOW . "','" . NOW . "')"; $user_device_res = $parent->executeQuery($insert_token_str); } //LOG $logstr = 'DEVICE TOKEN'; globalfunc::insertUserLog($parent, $logstr); $parent->response(array('response' => 'success', 'message' => $this->page_data['success1']), 200); } /* ////////////////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// USER FORGOT PASSWORD////////////////////////////////////////////// */ private function forgot_password($parent) { globalfunc::checkMethodType($parent, array('POST')); globalfunc::checkParamCount($parent, 1); $REQUEST_KEYS = array('username' => 'string'); globalfunc::checkAnyKey($parent, $REQUEST_KEYS); $username = escape_str($parent->_request['username']); $device_type = escape_str($parent->_request['device_type']); $hashkey = escape_str($parent->_request['hashkey']); $query_getuserarr = $parent->selectQuery(TABLE_USER, "*", " (smpin='" . $username . "' OR emp_code='" . $username . "') AND is_deleted=0 ", "1"); if ($query_getuserarr['nr'] <= 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error3']), 406); } if ($query_getuserarr['result'][0]->status != 1) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error14']), 406); } $userid = $query_getuserarr['result'][0]->userid; //SEND SMS $parent->current_user_id = $query_getuserarr['result'][0]->userid; $parent->current_smpin = $query_getuserarr['result'][0]->smpin; $parent->current_emp_code = $query_getuserarr['result'][0]->emp_code; //OTP UPDATE $otp_expiry = globalfunc::generateExpiryTime($parent, OTP_EXPIRY_MIN); $otp = globalfunc::generateOTP(); $update_update_str = "UPDATE " . TABLE_USER . " SET `otp`='" . $otp . "', `otp_expiry`='" . $otp_expiry . "' WHERE userid='" . $userid . "'"; $parent->executeQuery($update_update_str); // if($device_type=='android') // { // $sms_message='<#>HYPER-M One Time Password (OTP) to reset password is '.$otp.'. Valid for 1 minute '.$hashkey; // }else{ // $sms_message='Dear User, Your One Time Password (OTP) to reset password with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; // } //$sms_message='Dear User, Your One Time Password (OTP) to reset password with HYPER-M is '.$otp.' and is valid for 1 minute. Thank you, Team HYPER-M'; $sms_message = "Your one time password is " . $otp; // globalfunc::sendSMS($parent, $query_getuserarr['result'][0]->mobileno, $sms_message); //LOG $logstr = 'FORGOT PASSWORD OTP'; globalfunc::insertUserLog($parent, $logstr); $parent->response(array('response' => 'success', 'data' => $query_getuserarr['result'][0]->mobileno, 'otp_expiry' => OTP_EXPIRY_MIN, 'message' => $this->page_data['success1']), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// USER PROFILE //////////////////////////////////////////////// */ private function profile($parent) { globalfunc::checkMethodType($parent, array('GET', 'POST')); switch ($parent->get_request_method()) { case "GET": globalfunc::checkParamCount($parent, 1); $user_details = globalfunc::checkAuthrozation($parent, array('type' => 'user')); //LOG $logstr = 'PROFILE'; globalfunc::insertUserLog($parent, $logstr); $current_user_data = $this->getuserdata($parent, $parent->current_user_id); //MIN REDEEM $data['setting'] = 'REDEEM'; $data = globalfunc::getSiteSetting($parent, $data); $min_redeem_point = $data->REDEEM_MIN_VALUE; $current_user_data->min_redeem_point = $min_redeem_point; $parent->response(array('response' => 'success', 'data' => $current_user_data, 'message' => $this->page_data['success1']), 200); break; case "POST": globalfunc::checkParamCount($parent, 1); $user_details = globalfunc::checkAuthrozation($parent, array('type' => 'user')); $REQUEST_KEYS = array('dob' => 'date|Y-m-d', 'email' => 'string'); globalfunc::mandatoryKey($parent, $REQUEST_KEYS); //$fname=escape_str($parent->_request['fname']); //$lname=escape_str($parent->_request['lname']); //$mobileno=escape_str($parent->_request['mobileno']); $dob = escape_str($parent->_request['dob']); // $doj=escape_str($parent->_request['doj']); // if(isset($parent->_request['doj']) && $parent->_request['doj']!='' && $parent->_request['doj']!='0000-00-00' ) // { // $REQUEST_KEYS=array('doj'=>'date|Y-m-d'); // globalfunc::mandatoryKey($parent,$REQUEST_KEYS); // } $email = escape_str($parent->_request['email']); $is_married = (escape_str($parent->_request['is_married']) == '1') ? '1' : '0'; $marriage_date = ($is_married == '1' && escape_str($parent->_request['marriage_date'])) ? escape_str($parent->_request['marriage_date']) : '0000-00-00'; //CHECK FILE if (isset($_FILES['file']) && $_FILES['file']['name']) { //CONNECT S3 $s3 = awsfileserver::connectS3(); //IMAGE UPLOAD $obj = new stdClass(); $obj->filekey = 'file'; $obj->size = '10'; //IN MB $obj->type = array('jpg', 'jpeg', 'png'); globalfunc::validateFile($parent, $obj); $obj->path = $this->profile_path; $obj->filename = 'profile_' . $parent->current_user_id . '_' . date('Ymd') . uniqid(); if (isset($parent->_request['width'])) { $obj->width = $parent->_request['width']; } if (isset($parent->_request['height'])) { $obj->height = $parent->_request['height']; } $obj->cord = (isset($parent->_request['cord'])) ? $parent->_request['cord'] : null; $fileName = globalfunc::uploadFile($parent, $obj); awsfileserver::checkupload($parent, $s3, S3_BUCKET, S3_PROFILE_IMAGE_URL . $fileName, dirname(__FILE__) . "/../../../" . S3_PROFILE_IMAGE_URL . $fileName); //UNLINK @unlink(dirname(__FILE__) . '/../' . $this->profile_path . $fileName); $econd = " ,profile_photo='" . $fileName . "'"; } //$parent->executeQuery(" UPDATE ".TABLE_USER." SET fname='".$fname."',lname='".$lname."',mobileno='".$mobileno."',modified_on='".NOW."' ".$econd." WHERE userid='".$parent->current_user_id."'"); $emailcond = ''; if ($parent->current_user_role > 7) { $emailcond = " ,emailid='" . $email . "'"; } $parent->executeQuery(" UPDATE " . TABLE_USER . " SET dob='" . $dob . "',is_married='" . $is_married . "', marriage_date='" . $marriage_date . "',is_profile_updated='1' " . $econd . $emailcond . " WHERE userid='" . $parent->current_user_id . "'"); //LOG $logstr = 'PROFILE UPDATE'; globalfunc::insertUserLog($parent, $logstr); $current_user_data = $this->getuserdata($parent, $parent->current_user_id); $parent->response(array('response' => 'success', 'data' => $current_user_data, 'message' => $this->page_data['success1']), 200); break; } } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// USER PROFILE IMAGE //////////////////////////////////////////////// */ private function profileimage($parent) { globalfunc::checkMethodType($parent, array('POST')); globalfunc::checkParamCount($parent, 1); $user_details = globalfunc::checkAuthrozation($parent, array('type' => 'user')); //CHECK FILE if (!isset($_FILES['file'])) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error5']), 406); } //CONNECT S3 $s3 = awsfileserver::connectS3(); //IMAGE UPLOAD $obj = new stdClass(); $obj->filekey = 'file'; $obj->size = '10'; //IN MB $obj->type = array('jpg', 'jpeg', 'png'); globalfunc::validateFile($parent, $obj); $obj->path = $this->profile_path; $obj->filename = 'profile_' . $parent->current_user_id . '_' . date('Ymd') . "_" . uniqid(); if (isset($parent->_request['width'])) { $obj->width = $parent->_request['width']; } if (isset($parent->_request['height'])) { $obj->height = $parent->_request['height']; } $obj->cord = (isset($parent->_request['cord'])) ? $parent->_request['cord'] : null; $fileName = globalfunc::uploadFile($parent, $obj); awsfileserver::checkupload($parent, $s3, S3_BUCKET, S3_PROFILE_IMAGE_URL . $fileName, dirname(__FILE__) . "/../../../" . S3_PROFILE_IMAGE_URL . $fileName); //UNLINK @unlink(dirname(__FILE__) . '/../' . $this->profile_path . $fileName); $parent->executeQuery(" UPDATE " . TABLE_USER . " SET profile_photo='" . $fileName . "',modified_on='" . NOW . "' WHERE userid='" . $parent->current_user_id . "'"); $current_user_data = $this->getuserdata($parent, $parent->current_user_id); //LOG $logstr = 'PROFILE IMAGE UPDATE'; globalfunc::insertUserLog($parent, $logstr); $parent->response(array('response' => 'success', 'data' => $current_user_data, 'message' => $this->page_data['success1']), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// USER DATA //////////////////////////////////////////////// */ private function getuserdata($parent, $userid) { if (!isset($userid)) { globalfunc::callErrorMsg($parent, array('message' => 'user(getuserdata):REQUIRED userid')); } $query_getuserarr = $parent->selectQuery(TABLE_USER, " `smpin`, `emp_code`, `fname`, `lname`, `emailid`, `mobileno`, `role`, `dealer_code`, `address_1`, `address_2`, `address_3`, `profile_photo`, `dob`,`doj`, `country`, `language`, `is_married`, `marriage_date`, `mpin`,epin, `last_password_change`, `is_first_login`,`is_profile_updated` , `created_on`, `modified_on`", "userid='" . $userid . "' AND is_deleted='0' ", "1"); if ($query_getuserarr['nr'] <= 0) { $parent->response(array('response' => 'failed', 'message' => $this->page_data['error6']), 406); } $query_getuserarr['result'][0]->username = ($query_getuserarr['result'][0]->role < 8 || in_array($query_getuserarr['result'][0]->role, array("14", "16", "17"))) ? $query_getuserarr['result'][0]->emp_code : $query_getuserarr['result'][0]->smpin; $query_getuserarr['result'][0]->dob_time = ($query_getuserarr['result'][0]->dob == '0000-00-00') ? "0000-00-00 00:00:00" : $query_getuserarr['result'][0]->dob . " 00:00:00"; $query_getuserarr['result'][0]->doj_time = ($query_getuserarr['result'][0]->doj == '0000-00-00') ? "0000-00-00 00:00:00" : $query_getuserarr['result'][0]->doj . " 00:00:00"; $query_getuserarr['result'][0]->marriage_date_time = ($query_getuserarr['result'][0]->marriage_date == '0000-00-00') ? "0000-00-00 00:00:00" : $query_getuserarr['result'][0]->marriage_date . " 00:00:00"; $query_getuserarr['result'][0]->doj = ($query_getuserarr['result'][0]->doj == '0000-00-00') ? '0000-00-00' : $query_getuserarr['result'][0]->doj; if ($query_getuserarr['result'][0]->profile_photo != '') { //CONNECT S3 $s3 = awsfileserver::connectS3(); $query_getuserarr['result'][0]->profile_photo = awsfileserver::getS3FileUrl($s3, S3_BUCKET, S3_PROFILE_IMAGE_URL . $query_getuserarr['result'][0]->profile_photo); } else { $query_getuserarr['result'][0]->profile_photo = USER_NOIMAGE_URL; } //GET ROLE $query_rolearr = $parent->selectQuery(TABLE_ROLE, "*", "id='" . $query_getuserarr['result'][0]->role . "' ", "1"); $query_getuserarr['result'][0]->rolename = ($query_rolearr['nr'] > 0) ? $query_rolearr['result'][0]->rolename : ''; //GET DELAER $query_getuserarr['result'][0]->dealer = array(); $query_getdealerarr = $parent->selectQuery(DMS_DEALER, "`dealer_code`, `dealer_name`,address,email, `city`, `state`, `zone`, `country`, `phone`, `zm_name`, `rm_name`, `am_name`, `zm_email`, `rm_email`, `am_email`, `zm_mobile`, `rm_mobile`, `am_mobile`,is_enquirymodule", "dealer_code='" . $query_getuserarr['result'][0]->dealer_code . "' ", "1"); //ENQUIRY $query_getuserarr['result'][0]->is_enquirymodule = ($query_getdealerarr['nr'] > 0) ? $query_getdealerarr['result'][0]->is_enquirymodule : 0; $query_getuserarr['result'][0]->country = 'India'; if ($query_getuserarr['result'][0]->role == '5') { $query_dataarr = $parent->selectQuery(DMS_HOUSER, "*", "emp_code='" . $query_getuserarr['result'][0]->emp_code . "' ", "1"); $query_getuserarr['result'][0]->zone = ($query_dataarr['nr'] > 0) ? $query_dataarr['result'][0]->zone : ''; } else { $query_getuserarr['result'][0]->zone = ($query_getdealerarr['nr'] > 0) ? $query_getdealerarr['result'][0]->zone : ''; } $query_getuserarr['result'][0]->state = ($query_getdealerarr['nr'] > 0) ? $query_getdealerarr['result'][0]->state : ''; $query_getuserarr['result'][0]->city = ($query_getdealerarr['nr'] > 0) ? $query_getdealerarr['result'][0]->city : ''; $query_getuserarr['result'][0]->dealer = ($query_getdealerarr['nr'] > 0) ? $query_getdealerarr['result'][0] : new stdClass(); $query_getuserarr['result'][0]->is_password_expired = projectfunc::checkUserPasswordExpiry($parent, $userid); if ($query_getuserarr['result'][0]->role > 7 && $query_getuserarr['result'][0]->role < 14) { $query_getuserarr['result'][0]->is_redeem_point = (projectfunc::checkValidReedem($parent, $userid)) ? "1" : "0"; $query_getuserarr['result'][0]->wallet_amount = projectfunc::userWalletamount($parent, $query_getuserarr['result'][0]->smpin); $query_getuserarr['result'][0]->unapproved_amount = projectfunc::userUnapprovedamount($parent, $query_getuserarr['result'][0]->smpin); } else { $query_getuserarr['result'][0]->is_redeem_point = '0'; $query_getuserarr['result'][0]->wallet_amount = '0'; $query_getuserarr['result'][0]->unapproved_amount = '0'; } return $query_getuserarr['result'][0]; } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// ACCEPT LEAD LOGIN //////////////////////////////////////////////// */ private function acceptleadmodule($parent) { globalfunc::checkParamCount($parent, 1); globalfunc::checkMethodType($parent, array('GET')); $user_details = globalfunc::checkAuthrozation($parent, array('type' => 'user')); projectfunc::authorizedRole($parent, array('14')); $dealer_code = $parent->current_user_data->dealer_code; $parent->executeQuery("UPDATE " . DMS_DEALER . " SET is_enquirymodule='1' WHERE dealer_code='" . $dealer_code . "'"); $parent->executeQuery("UPDATE " . TABLE_USER . " SET epin='' WHERE role=14 AND dealer_code='" . $dealer_code . "'"); //LOG $logstr = 'ACCEPT LEAD MODULE'; globalfunc::insertUserLog($parent, $logstr); $parent->response(array('response' => 'success', 'message' => "SUCCESS"), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////////////////////////////////////////////////////////////////////////////////////////*/ /* */ /* */ /* */ /* FOR DEVELOPMENT TESTING ONLY */ /* */ /* */ /* */ /* /////////////////////////////////////////////////////////////////////////////////////////////////////////////////*/ /* /////////////////////////////// RESET FIRST LOGIN //////////////////////////////////////////////// */ private function resetuser($parent) { globalfunc::checkParamCount($parent, 2); if (IS_LIVE_SERVER) { $parent->response(array('response' => 'failed', 'message' => 'PAGE NOT FOUND'), 404); } exit; $smpin = escape_str($parent->params[1]); if ($smpin) { $parent->executeQuery(" DELETE FROM " . TABLE_USER . " WHERE smpin='" . $smpin . "' OR emp_code='" . $smpin . "'"); } $parent->response(array('response' => 'success', 'message' => "SUCCESS"), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// RESET FIRST LOGIN //////////////////////////////////////////////// */ private function resetfirstlogin($parent) { globalfunc::checkParamCount($parent, 2); if (IS_LIVE_SERVER) { $parent->response(array('response' => 'failed', 'message' => 'PAGE NOT FOUND'), 404); } exit; $userid = escape_str($parent->params[1]); $parent->executeQuery(" UPDATE " . TABLE_USER . " SET is_first_login='1' WHERE userid='" . $userid . "'"); $parent->response(array('response' => 'success', 'message' => "SUCCESS"), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// RESET FIRST LOGIN //////////////////////////////////////////////// */ private function getuserdetails($parent) { globalfunc::checkParamCount($parent, 2); if (IS_LIVE_SERVER) { $parent->response(array('response' => 'failed', 'message' => 'PAGE NOT FOUND'), 404); } exit; $userid = escape_str($parent->params[1]); $query_getuserarr = $parent->selectQuery(TABLE_USER, "*", "smpin='" . $userid . "' OR emp_code='" . $userid . "'", "1"); $data = ($query_getuserarr['nr'] > 0) ? $query_getuserarr['result'][0] : null; $parent->response(array('response' => 'success', 'data' => $data, 'message' => "SUCCESS"), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ /* /////////////////////////////// RESET FIRST LOGIN //////////////////////////////////////////////// */ private function userpasswordrest123($parent) { globalfunc::checkParamCount($parent, 2); if (IS_LIVE_SERVER) { $parent->response(array('response' => 'failed', 'message' => 'PAGE NOT FOUND'), 404); } exit; $userid = escape_str($parent->params[1]); $parent->executeQuery(" UPDATE " . TABLE_USER . " SET password='" . md5('123') . "' WHERE userid='" . $userid . "'"); $parent->response(array('response' => 'success', 'message' => "SUCCESS"), 200); } /* //////////////////////////////////////////////////////////////////////////////////////////// */ }