File Manager

✏️ Edit File: /var/www/vhosts/nursoft.al/public_html/Borova/MobileAppApi/post_data.php

<?php 
if($_SERVER['REQUEST_METHOD']=='POST'){
include_once("lidhu_me_db.php");
//error_reporting(E_ALL);
//ini_set('display_errors', '1');
$response = array("error" => FALSE);
$nid = strip_tags($_POST['nid']);
$artikull_id = strip_tags($_POST['artikull_id']);
$produkt_id = strip_tags($_POST['produkt_id']);
$user_id = strip_tags($_POST['user_id']);
$dervice_id = strip_tags($_POST['dervice_id']);
$token = strip_tags($_POST['token']);
$email = strip_tags($_POST['email']);
$nga = strip_tags($_POST['nga']);
$id = strip_tags($_POST['id']);
$emri = strip_tags($_POST['emri']);
$konfirmuar = strip_tags($_POST['konfirmuar']);
$rand = strip_tags($_POST['randomnumber']);
$adresa = strip_tags($_POST['adresa']);
$sms = strip_tags($_POST['sms']);
$koordinatat = strip_tags($_POST['koordinatat']);
$shenime = strip_tags($_POST['shenime']);
$cel = strip_tags($_POST['cel']);
$sasia = strip_tags($_POST['sasia']);
$fjalekalimi = strip_tags($_POST['fjalekalimi']);
$fjalekalimi2 = strip_tags($_POST['fjalekalimi2']);
$pass2 = md5($fjalekalimi);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$tani =  date("Y-m-d H:i:s");
$p = preg_replace('#[^a-z0-9]#i', '', $pass4);
 if ($nid == "Login" && isset($_POST['cel']) && isset($_POST['fjalekalimi'])) {
    $user = getUserByEmailAndPassword($cel, $p, $dervice_id, $token, $nga);
    if ($user != false) {
        // user is found
        $response["error"] = FALSE;
		$response["user"]["id"] = $user["id"];
		$response["user"]["emri"] = $user["emri"];
        $response["user"]["cel"] = $user["cel"];
        $response["user"]["email"] = $user["email"];
        $response["user"]["adresa"] = $user["adresa"];
        $response["user"]["token"] = $user["token"];
        $response["user"]["dervice_id"] = $user["dervice_id"];
		$response["user"]["konfirmuar"] = $user["konfirmuar"];
		$response["user"]["kodi"] = $user["kodi"];
		//if($user["konfirmuar"] == "0"){ send_android_push($cel.":0", "Pizza Tirona \nKodi Konfirmimit: ".$user["kodi"], "NurSMS", "null", ""); }
	if($nga == "IOS"){	
$response = array("user" => array(array("error" => "0", "id" => $user["id"], "email" => $user["email"], "emri" => $user["emri"], "cel" => $user["cel"], "adresa" => $user["adresa"], "token" => $user["token"], "dervice_id" => $user["dervice_id"], "konfirmuar" => $user["konfirmuar"], "kodi" => $user["kodi"])));	}
        echo json_encode($response);
    } else {
        // user is not found with the credentials
        $response["error"] = TRUE;
        $response["error_msg"] = "Të dhënat tuaja janë të pa sakta! ";
			if($nga == "IOS"){	
$response = array("user" => array(array("error" => "1", "id" => "0", "emri" => "", "email" => "", "cel" => "", "adresa" => "", "token" => "", "dervice_id" => "", "konfirmuar" => "", "kodi" => "")));	}
        echo json_encode($response);
    }
	 exit();
}
	if ($nid == "Regjistrohu" && isset($_POST['cel']) && isset($_POST['fjalekalimi'])) { 
    // check if user already exists with the same email
    if(celExists($cel)){
		// email already exists
        $response["error"] = TRUE;
        $response["error_msg"] = "Ky nr celulari ekziston në sistem " . $cel;
				if($nga == "IOS"){	
$response = array("user" => array(array("error" => "Ky nr celulari ekziston në sistem " . $cel, "id" => "0", "emri" => "", "cel" => "", "adresa" => "", "token" => "", "dervice_id" => "", "konfirmuar" => "", "kodi" => "")));	}
        echo json_encode($response);
	}else {
        // create a new user
        $user = storeUser($emri,$p,$cel,$adresa,$token,$dervice_id,$ip,$nga,$rand,$email);
        if ($user) {
            // user stored successfully
            $response["error"] = FALSE;
            $response["user"]["id"] = $user["id"];
			$response["user"]["emri"] = $user["emri"];
			$response["user"]["cel"] = $user["cel"];
			$response["user"]["email"] = $user["email"];
			$response["user"]["token"] = $user["token"];
			$response["user"]["adresa"] = $user["adresa"];
			$response["user"]["dervice_id"] = $user["dervice_id"];
			$response["user"]["konfirmuar"] = $user["konfirmuar"];
			$response["user"]["kodi"] = $user["kodi"];
			//send_android_push($cel.":0", "Pizza Tirona \nKodi Konfirmimit: ".$rand, "NurSMS", "null", "");
	if($nga == "IOS"){	
$response = array("user" => array(array("error" => "0", "id" => $user["id"], "email" => $user["email"], "emri" => $user["emri"], "cel" => $user["cel"], "adresa" => $user["adresa"], "token" => $user["token"], "dervice_id" => $user["dervice_id"], "konfirmuar" => $user["konfirmuar"], "kodi" => $user["kodi"])));	}
            echo json_encode($response);
        } else {
            // user failed to store
            $response["error"] = TRUE;
            $response["error_msg"] = "Pati nje gabim, ju lutem provojeni perseri me vone!";
			if($nga == "IOS"){	
$response = array("user" => array(array("error" => "Pati nje gabim, ju lutem provojeni perseri me vone", "id" => "0","email" => "0", "emri" => "", "cel" => "", "adresa" => "", "token" => "", "dervice_id" => "", "konfirmuar" => "", "kodi" => "")));	}
            echo json_encode($response);
        }
	}	
		exit();
    }
$arrei = '{';
if(!isset($_POST["noshow"])){$arrei .= '"wisata": [';}

if($nid == "ndryshosasine"){
	$sql = "UPDATE `shporta` SET sasia = '$sasia' WHERE id != '' AND token = '$token' AND dervice_id = '$dervice_id' ";
//	if($user_id != ""){  $sql .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $sql .=" AND ip = '$ip' "; }
	if($produkt_id != ""){  $sql .=" AND  produkt_id = '$produkt_id' "; }else if($id != ""){  $sql .=" AND id = '$id' "; }
}

if($nid == "NdryshoProfilKlienti"){
$sql = "UPDATE `klient` SET emri = '$emri', adresa = '$adresa', cel = '$cel' , konfirmuar = '$konfirmuar' "; 
if($rand != ""){  $sql .=" , kodi = '$rand'"; }
if($fjalekalimi != "" && $fjalekalimi2 !="" && $fjalekalimi == $fjalekalimi2){  $sql .=" , password = '$p'"; }
	$sql .="  WHERE id = '$user_id' AND dervice_id = '$dervice_id' AND token = '$token' ";
//if($konfirmuar == "0"){ send_android_push($cel.":0", "Pizza Tirona \nKodi Konfirmimit: ".$rand, "NurSMS", "null", ""); }
}

if($nid == "KonfirmoNr"){
$conn->query("UPDATE `fatura` SET nr_konfirmuar = '1', ora_konfirmimit='$tani' WHERE klient_id = '$user_id' AND rand='$rand' AND dervice_id = '$dervice_id' AND token = '$token'"); 
$conn->query("UPDATE `produkte_te_shitura` SET nr_konfirmuar = '1' WHERE klient_id = '$user_id' AND rand='$rand' AND dervice_id = '$dervice_id' AND token = '$token'");
		$checkadresa = $conn->query("SELECT id FROM nr_telefoni WHERE user_id = '$user_id' AND nr = '$cel' ");	
if ($checkadresa->num_rows == 0) {
	$conn->query("INSERT INTO `nr_telefoni`(nr,user_id,dervice_id,token,nga) VALUES('$cel','$user_id','$dervice_id','$token','$nga')");
	}	
	exit();
}

if($nid == "KonfirmoProfilin"){
$sql = "UPDATE `klient` SET konfirmuar = '1' WHERE id = '$user_id' AND kodi = '$rand'"; 
$checkadresa = $conn->query("SELECT id FROM nr_telefoni WHERE user_id = '$user_id' AND nr = '$cel' ");	
if ($checkadresa->num_rows == 0) {
	$conn->query("INSERT INTO `nr_telefoni`(nr,user_id,dervice_id,token,nga) VALUES('$cel','$user_id','$dervice_id','$token','$nga')");
	}	
}
    if($nid == "ForgotPass"){
        
    $slllsd = $conn->query("SELECT email,id FROM klient where email = '$cel'");
    $sql = $slllsd->fetch_assoc();
    if($sql["email"] == $cel){
        $new_pass = rand(0,999999);
        $pass2 = md5($new_pass);
        $pass3 = sha1($pass2);
        $pass4 = crypt($pass3, st);
        $p = preg_replace('#[^a-z0-9]#i', '', $pass4);
        $conn->query("UPDATE klient set password = '$p' where email = '$cel' AND id = '$sql[id]'");
        $msg = "Pershendetje nga Pizza Tirona! \nFjalekalimi juaj i ri eshte: ".$new_pass;
  // the message
//$msg = "First line of text\nSecond line of text";

// use wordwrap() if lines are longer than 70 characters
$msg = wordwrap($msg,70);

// send email
mail($cel,"Pizza Tirona - Fjalekalimi juaj i ri!",$msg);
   // send_android_push($cel.":0", $msg, "NurSMS", "null", "");
    }
        exit();
    }
if($nid == "DergoSMSPushJoAktiv"){
$slllsd = $conn->query("SELECT konfirmuar_nga_arka, kontaktet FROM fatura where klient_id = '$user_id' AND id = '$id'"); 
	$sql = $slllsd->fetch_assoc();
	$nr = explode(",",$sql["kontaktet"]);
	if($sql["konfirmuar_nga_arka"]=="1"){ 
$msg = "Pershendetje nga Pizza Tirona!
Porosia juaj u KONFIRMUA me sukses!
Stafi"; 
}else{ 
$msg = "Pershendetje nga Pizza Tirona!
Porosia juaj u REFUZUA, per me shume informacion ju lutem na kontaktoni ne: +355672973240"; 
}			
send_android_push($nr[0].":0", $msg, "NurSMS", "null", ""); 
	exit();
}

if($nid == "shtoneshporte"){
    
    if($webtoken != ""){ $token = $webtoken; }
	$ch = "SELECT id from `shporta` WHERE id !='' AND token = '$token' AND dervice_id = '$dervice_id' ";
	//if($user_id != ""){  $ch .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $ch .=" AND ip = '$ip' "; }
	if($produkt_id != ""){  $ch .=" AND  produkt_id = '$produkt_id' "; }else if($id != ""){  $ch .=" AND id = '$id' "; }
	$chec = $conn->query($ch);
	if ($chec->num_rows > 0) {
	$sql = "UPDATE `shporta` SET sasia = sasia + '1' WHERE id != '' AND token = '$token' AND dervice_id = '$dervice_id' ";
	//if($user_id != ""){  $sql .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $sql .=" AND ip = '$ip' "; }
	if($produkt_id != ""){  $sql .=" AND  produkt_id = '$produkt_id' "; }else if($id != ""){  $sql .=" AND id = '$id' "; }
						   }else{ 
if($user_id == ""){ $user_id = "0"; }
$sql = "INSERT INTO `shporta`(user_id, produkt_id, dervice_id, token, nga, ip) VALUES('$user_id', '$produkt_id', '$dervice_id', '$token', '$nga', '$ip')"; }
    
    if($webtoken != ""){
        $conn->query($sql);
        exit();
    }
}

if($nid == "Porosit"){
		$dddatta = date("Y-m-d H:i:s");
	$ark = $conn->query("SELECT user_id FROM fatura WHERE dyqan_id = '1' AND katering = '1' order by id desc limit 1");
	$arketari = $ark->fetch_assoc();
	
	$ch = "SELECT sh.produkt_id, p.id, p.kategoria, sh.sasia from `shporta` sh INNER JOIN produkte p ON sh.produkt_id = p.id WHERE sh.id !='' AND sh.token = '$token' AND sh.dervice_id = '$dervice_id'"; 
	//if($user_id != ""){  $ch .=" AND (sh.user_id = '$user_id' OR sh.ip= '$ip') "; }else if($ip != ""){  $ch .=" AND sh.ip = '$ip' "; }
	$chec = $conn->query($ch);
	
if ($chec->num_rows > 0) {
		$dataaaaa = date("Y-m-d 00:00:00");
		$ddid = $conn->query("SELECT dailyid,id FROM fatura WHERE data > '$dataaaaa' order by id desc limit 1");
		$ddid222 = $ddid->fetch_assoc();
		if($ddid222["dailyid"] == ""){ $ddid222["dailyid"] = "0"; } 
		$ddid = $ddid222["dailyid"] + 1;
	$krijofature = $conn->query("INSERT INTO `fatura`(`kontaktet`,`data`, `user_id`, `shitur_nga`, `totali`, `skonto`,`dyqan_id`,`katering`,`arka`,`printuar`,`koha_pergatitjes`,`tavolina`,`koordinatat`,`shenime`,`fatura_gati`,`klient_id`,`dervice_id`,`token`,`rand`,`nr_konfirmuar`,`konfirmuar_nga_arka`,`dailyid`) VALUES('$cel, $adresa','$dddatta','$arketari[user_id]','$nga','0','0','3','1','0','0', '0','0','$koordinatat','$shenime','0','$user_id','$dervice_id','$token','$rand','$sms','0','$ddid')");
	$faturidd = $conn->insert_id;
	$totali = 0; $shuma = 0;
while($to = $chec->fetch_assoc()){
		$result3 = $conn->query("SELECT * FROM `cmimet` where produkt_id  = '$to[produkt_id]' AND dyqan_id = '1'");
		$to3 = $result3->fetch_assoc();
	
		$ka = $conn->query("SELECT * FROM `kategorite` where id  = '$to[kategoria]'");
		$kategori_tip = $ka->fetch_assoc();
	
		if($to3["cmimi"] =="" || $to3["cmimi"] ==" "){ $to3["cmimi"] = "0"; }
		$shuma = $to3["cmimi"] * $to["sasia"];
		$totali = $totali + $shuma;
	
$conn->query("INSERT INTO  `produkte_te_shitura`(`produkt_id`, `pacient_id`, `user_id`, `data`, `kategoria_viewed`, `sasia`, `skonto`, `arka`, 
`shitur_nga`, `cmimi`, `dyqan_id`, `fature_id`, `kategoria`, `koha`, `shenime`, `katering`, `printuar`, `kategoria_gati`,`koordinatat`,`klient_id`,`dervice_id`,`token`,`rand`,`nr_konfirmuar`,`konfirmuar_nga_arka`,`dailyid`) VALUES('$to[produkt_id]','', '$arketari[user_id]','$tani','0',
'$to[sasia]','','0','$nga','$shuma','1',' $faturidd','$to[kategoria]','','$shenime','1','0','0','$koordinatat','$user_id','$dervice_id','$token','$rand','$sms','0','$ddid')");
	
	//$kategori_tip[kategorite_app] .  -> u ndryshua me 3 per piken e re
}
	$conn->query("UPDATE fatura set totali ='$totali' where id='$faturidd' LIMIT 1");
	
	$checkadresa = $conn->query("SELECT id FROM adresa WHERE user_id = '$user_id' AND adresa = '$adresa' ");	
if ($checkadresa->num_rows == 0) {
	$conn->query("INSERT INTO `adresa`(adresa,user_id,dervice_id,token,nga) VALUES('$adresa','$user_id','$dervice_id','$token','$nga')");
	}	
}	
if($sms == "0"){	
//send_android_push($cel.":0", "Pizza Tirona \nKodi Konfirmimit: ".$rand, "NurSMS", "null", "");
}
	    if($krijofature){
        $ch = "DELETE from `shporta` WHERE id !=''  AND token = '$token' AND dervice_id = '$dervice_id' ";
        //if($user_id != ""){  $ch .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $ch .=" AND ip = '$ip' "; }
        $chec = $conn->query($ch);
        $response = array("wisata" => array(array("error" => "0", "error_text" => "Porosia juaj u mor me sukses, FALEMINDERIT!")));
    } else {
        $response = array("wisata" => array(array("error" => "1", "error_text" => "Error : Pati nje gabim gjate marjes se porosise, ju lutem provoni perseri!")));
    }
         echo json_encode($response);
	exit();
}

if($nid == "fshingashporta"){
 $sql = "DELETE FROM `shporta` WHERE id = '$id' AND token = '$token' AND dervice_id = '$dervice_id' ";
// if($user_id != ""){  $sql .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $sql .=" AND ip = '$ip' "; }
}

$result = $conn->query($sql);
 $to = $result->fetch_assoc();
 $arrei .= '{"id":"'.$to["id"].'","pozicioni":"'.$x.'","kategoria":"'.$to["id"].'","titulli":'.json_encode($to["emri"]).',"image":"","artikulli":'.json_encode($to3["idd"]." Produkte").'},';

$conn->close();

echo rtrim($arrei,",");

if(!isset($_GET["noshow"])){echo  ']';} 
echo "}";
}
exit();
?>

Batal

⬅ Naik ke Borova 6 item

Nama	Tipe	Ukuran	Diubah	Aksi
📁Android	dir	—	2023-07-24 12:33	📂 Buka
📁Ios	dir	—	2023-07-24 12:33	📂 Buka
🐘get_data.php	php	9 KB	2023-07-24 12:33	✏️ Edit 👁️ View
🐘lidhu_me_db.php	php	3.1 KB	2023-07-24 12:33	✏️ Edit 👁️ View
🐘post_data.php	php	13.8 KB	2023-07-24 12:33	✏️ Edit 👁️ View
🐘prova.php	php	603 B	2023-07-24 12:33	✏️ Edit 👁️ View