File Manager

✏️ Edit File: /var/www/vhosts/nursoft.al/public_html/NurSoft/NurSMS/MobileAppApi/post_data.php

<?php 
if($_SERVER['REQUEST_METHOD']=='POST'){
include_once("lidhu_me_db.php");
//error_reporting(E_ALL);
//ini_set('display_errors', '1');
$response = array("error" => FALSE);
$nid = strip_tags($_POST['nid']);
$artikull_id = strip_tags($_POST['artikull_id']);
$produkt_id = strip_tags($_POST['produkt_id']);
$user_id = strip_tags($_POST['user_id']);
$dervice_id = strip_tags($_POST['dervice_id']);
$token = strip_tags($_POST['token']);
$nga = strip_tags($_POST['nga']);
$id = strip_tags($_POST['id']);
$emri = strip_tags($_POST['emri']);
$konfirmuar = strip_tags($_POST['konfirmuar']);
$rand = strip_tags($_POST['randomnumber']);
$adresa = strip_tags($_POST['adresa']);
$sms = strip_tags($_POST['sms']);
$koordinatat = strip_tags($_POST['koordinatat']);
$shenime = strip_tags($_POST['shenime']);
$cel = strip_tags($_POST['cel']);
$username = strip_tags($_POST['username']);
$sasia = strip_tags($_POST['sasia']);
$fjalekalimi = strip_tags($_POST['fjalekalimi']);
$fjalekalimi2 = strip_tags($_POST['fjalekalimi2']);
$pass2 = md5($fjalekalimi);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$tani =  date("Y-m-d H:i:s");
$p = preg_replace('#[^a-z0-9]#i', '', $pass4);
	if ($_POST["veprimi"] =="updatesms" && $_POST["smsid"] !="" && $_POST["cel"] !="") {
	$smsid = preg_replace("/[^0-9]/", "", $_POST["smsid"]);
	$vlera = preg_replace("/[^0-9]/", "", $_POST["vlera"]);
	$cel = preg_replace("/[^0-9+]/", "", $_POST["cel"]);
	//$chcek_first_number = substr($cel, 0, 1);
	//if($chcek_first_number != "0"){ $cel = "+".$cel; }
	$pergjigja_delivered = strip_tags($_POST["pergjigja_delivered"]);
	$pergjigja_sent = strip_tags($_POST["pergjigja_sent"]);
	$data_ora = date("Y-m-d H:i:s");
	
	if(isset($_POST["derguar_kerkese"]) && $_POST["derguar_kerkese"] !="") { $kerkese_sql = " derguar_kerkese = '1', derguar_kerkese_data = '$data_ora' "; }
	if(isset($_POST["pergjigja_sent"]) && $_POST["pergjigja_sent"] !="") { $kerkese_sql = " pergjigja_sent = '$pergjigja_sent', sms_sent = '$vlera', sms_sent_data = '$data_ora' "; }
	if(isset($_POST["pergjigja_delivered"]) && $_POST["pergjigja_delivered"] !="") { $kerkese_sql = " pergjigja_delivered = '$pergjigja_delivered', sms_delivered = '$vlera', sms_delivered_data = '$data_ora' "; }
	$conn->query("UPDATE sms SET $kerkese_sql WHERE id = '$smsid' AND cel = '$cel'");
	echo "UPDATE sms SET $kerkese_sql WHERE id = '$smsid' AND cel = '$cel'";
	exit();
}
	
if($nid == "DergoSMS" && $_POST["user_id"] !="" && $_POST["mesazhi"] !="" && $_POST["titulli"] !="" && $_POST["paisja"] !="" && $_POST["lista"] !="") {
	$titulli = strip_tags($_POST["titulli"]);
	$mesazhi = strip_tags($_POST["mesazhi"]);
	$data = strip_tags($_POST["data"]);
	$pai = explode("-", $_POST["paisja"]);
	$paisja = preg_replace('#[^0-9]#i', '', $pai[0]);
	$lis = explode("-", $_POST["lista"]);
	$lista = preg_replace('#[^0-9]#i', '', $lis[0]);
	$fushata = $conn->query("INSERT INTO `fushatat`(`titulli`, `mesazhi`, `user_id`, `klient_id`, `dervice_id`,`token`,`paisja`,`nga`,`list_id`,`data_dergeses`)VALUES('$titulli','$mesazhi','$user_id','$user_id','$dervice_id','$token','$paisja','$nga','$lista','$data')");
	$fushataid = $conn->insert_id;
	$nr = "";
	$num = $conn->query("SELECT * FROM `nr_telefoni` WHERE klient_id = '$user_id' AND list_id = '$lista' AND aktiv = '1'");
	 if ($num->num_rows > 0) { 
		 while($numbers = $num->fetch_assoc()) {
$cel = preg_replace("/[^0-9+]/", "", $numbers["cel"]);
				 $conn->query("INSERT INTO `sms`(`nr_celi_id`, `klient_id`, `cel`, `msg`, `user_id`, `fushat_id`, `list_id`) VALUES('$numbers[id]','$user_id','$cel','$mesazhi','0','$fushataid','$lista')");
			 $sms_id = $conn->insert_id;
			 $nr .= $cel .":".$sms_id.",";
	}
	 $nr = rtrim($nr,",");
	 send_android_push($nr, $mesazhi, $paisja, "null", $fushataid); 
	 }
		exit();
}
	
 if ($nid == "Login" && isset($_POST['username']) && isset($_POST['fjalekalimi'])) {
    $user = getUserByEmailAndPassword($username, $p, $dervice_id, $token, $nga);
    if ($user != false) {
		$check = $conn->query("SELECT COUNT(id) as idd FROM android_devices where  dervice_id ='$dervice_id' and user_id = '$user[id]'");
		$checkvlera = $check->fetch_assoc();
		if($checkvlera["idd"] > 0){
		$conn->query("UPDATE android_devices SET token ='$token', name='$emri', updated = '$tani' where  dervice_id ='$dervice_id' and user_id = '$user[id]' LIMIT 1");
		}else{
		$conn->query("INSERT INTO `android_devices`(`user_id`, `token`,  `dervice_id`, `name`, `data`) VALUES('$user[id]','$token','$dervice_id','$emri','$tani')");
		}
        $response["error"] = FALSE;
		$response["user"]["id"] = $user["id"];
		$response["user"]["emri"] = $user["emri"];
        $response["user"]["cel"] = $user["cel"];
        $response["user"]["username"] = $user["username"];
        $response["user"]["adresa"] = $user["adresa"];
        $response["user"]["token"] = $user["token"];
        $response["user"]["dervice_id"] = $user["dervice_id"];
		$response["user"]["konfirmuar"] = $user["konfirmuar"];
		$response["user"]["kodi"] = $user["kodi"];
		if($user["konfirmuar"] == "0"){ send_android_push($cel, "Kodi: ".$user["kodi"], "NurSMS", "null", ""); }
	if($nga == "IOS"){	
$response = array("user" => array(array("error" => "0", "id" => $user["id"], "emri" => $user["emri"], "cel" => $user["cel"], "adresa" => $user["adresa"], "token" => $user["token"], "dervice_id" => $user["dervice_id"], "konfirmuar" => $user["konfirmuar"], "kodi" => $user["kodi"])));	}
        echo json_encode($response);
    } else {
        // user is not found with the credentials
        $response["error"] = TRUE;
        $response["error_msg"] = "Të dhënat tuaja janë të pa sakta! ";
			if($nga == "IOS"){	
$response = array("user" => array(array("error" => "1", "id" => "0", "emri" => "", "cel" => "", "adresa" => "", "token" => "", "dervice_id" => "", "konfirmuar" => "", "kodi" => "")));	}
        echo json_encode($response);
    }
	 exit();
}
	if ($nid == "Regjistrohu" && isset($_POST['cel']) && isset($_POST['fjalekalimi'])) { 
    // check if user already exists with the same email
    if(celExists($cel)){
		// email already exists
        $response["error"] = TRUE;
        $response["error_msg"] = "Ky nr celulari emaili ekziston në sistem " . $cel;
				if($nga == "IOS"){	
$response = array("user" => array(array("error" => "Ky nr celulari emaili ekziston në sistem " . $cel, "id" => "0", "emri" => "", "cel" => "", "adresa" => "", "token" => "", "dervice_id" => "", "konfirmuar" => "", "kodi" => "")));	}
        echo json_encode($response);
	}else {
        // create a new user
        $user = storeUser($emri,$p,$cel,$adresa,$token,$dervice_id,$ip,$nga,$rand);
        if ($user) {
            // user stored successfully
            $response["error"] = FALSE;
            $response["user"]["id"] = $user["id"];
			$response["user"]["emri"] = $user["emri"];
			$response["user"]["cel"] = $user["cel"];
			$response["user"]["token"] = $user["token"];
			$response["user"]["adresa"] = $user["adresa"];
			$response["user"]["dervice_id"] = $user["dervice_id"];
			$response["user"]["konfirmuar"] = $user["konfirmuar"];
			$response["user"]["kodi"] = $user["kodi"];
			send_android_push($cel, "Kodi: ".$rand, "NurSMS", "null", ""); 
	if($nga == "IOS"){	
$response = array("user" => array(array("error" => "0", "id" => $user["id"], "emri" => $user["emri"], "cel" => $user["cel"], "adresa" => $user["adresa"], "token" => $user["token"], "dervice_id" => $user["dervice_id"], "konfirmuar" => $user["konfirmuar"], "kodi" => $user["kodi"])));	}
            echo json_encode($response);
        } else {
            // user failed to store
            $response["error"] = TRUE;
            $response["error_msg"] = "Pati nje gabim, ju lutem provojeni perseri me vone!";
			if($nga == "IOS"){	
$response = array("user" => array(array("error" => "Pati nje gabim, ju lutem provojeni perseri me vone", "id" => "0", "emri" => "", "cel" => "", "adresa" => "", "token" => "", "dervice_id" => "", "konfirmuar" => "", "kodi" => "")));	}
            echo json_encode($response);
        }
	}	
		exit();
    }
$arrei = '{';
if(!isset($_POST["noshow"])){$arrei .= '"wisata": [';}

if($nid == "ndryshosasine"){
	$sql = "UPDATE `shporta` SET sasia = '$sasia' WHERE id != '' "; 
	if($user_id != ""){  $sql .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $sql .=" AND ip = '$ip' "; }
	if($produkt_id != ""){  $sql .=" AND  produkt_id = '$produkt_id' "; }else if($id != ""){  $sql .=" AND id = '$id' "; }
}

if($nid == "NdryshoProfilKlienti"){
$sql = "UPDATE `klient` SET emri = '$emri', adresa = '$adresa', cel = '$cel' , konfirmuar = '$konfirmuar' "; 
if($rand != ""){  $sql .=" , kodi = '$rand'"; }
if($fjalekalimi != "" && $fjalekalimi2 !="" && $fjalekalimi == $fjalekalimi2){  $sql .=" , password = '$p'"; }
	$sql .="  WHERE id = '$user_id' AND dervice_id = '$dervice_id' AND token = '$token' ";
if($konfirmuar == "0"){ send_android_push($cel, "Kodi: ".$rand, "NurSMS", "null", ""); }
}

if($nid == "KonfirmoNr"){
$sql = "UPDATE `fatura` SET nr_konfirmuar = '1', ora_konfirmimit='$tani' WHERE klient_id = '$user_id' AND rand='$rand' AND dervice_id = '$dervice_id' AND token = '$token'"; 
$conn->query("UPDATE `produkte_te_shitura` SET nr_konfirmuar = '1' WHERE klient_id = '$user_id' AND rand='$rand' AND dervice_id = '$dervice_id' AND token = '$token'");
		$checkadresa = $conn->query("SELECT id FROM nr_telefoni WHERE user_id = '$user_id' AND nr = '$cel' ");	
if ($checkadresa->num_rows == 0) {
	$conn->query("INSERT INTO `nr_telefoni`(nr,user_id,dervice_id,token,nga) VALUES('$cel','$user_id','$dervice_id','$token','$nga')");
	}	
	exit();
}

if($nid == "KonfirmoProfilin"){
$sql = "UPDATE `klient` SET konfirmuar = '1' WHERE id = '$user_id' AND kodi = '$rand'"; 
$checkadresa = $conn->query("SELECT id FROM nr_telefoni WHERE user_id = '$user_id' AND nr = '$cel' ");	
if ($checkadresa->num_rows == 0) {
	$conn->query("INSERT INTO `nr_telefoni`(nr,user_id,dervice_id,token,nga) VALUES('$cel','$user_id','$dervice_id','$token','$nga')");
	}	
}

if($nid == "shtoneshporte"){
	
	$ch = "SELECT id from `shporta` WHERE id !=''"; 
	if($user_id != ""){  $ch .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $ch .=" AND ip = '$ip' "; }
	if($produkt_id != ""){  $ch .=" AND  produkt_id = '$produkt_id' "; }else if($ip != ""){  $ch .=" AND id = '$id' "; }
	$chec = $conn->query($ch);
	if ($chec->num_rows > 0) {
	$sql = "UPDATE `shporta` SET sasia = sasia + '1' WHERE id != '' "; 
	if($user_id != ""){  $sql .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $sql .=" AND ip = '$ip' "; }
	if($produkt_id != ""){  $sql .=" AND  produkt_id = '$produkt_id' "; }else if($ip != ""){  $sql .=" AND id = '$id' "; }
						   }else{ 
if($user_id == ""){ $user_id = "0"; }
$sql = "INSERT INTO `shporta`(user_id, produkt_id, dervice_id, token, nga, ip) VALUES('$user_id', '$produkt_id', '$dervice_id', '$token', '$nga', '$ip')"; }
}

if($nid == "Porosit"){
		$dddatta = date("Y-m-d H:i:s");
	$ark = $conn->query("SELECT user_id FROM fatura WHERE dyqan_id = '2' AND katering = '1' order by id desc limit 1");
	$arketari = $ark->fetch_assoc();
	
	$ch = "SELECT sh.produkt_id, p.id, p.kategoria, sh.sasia from `shporta` sh INNER JOIN produkte p ON sh.produkt_id = p.id WHERE sh.id !=''"; 
	if($user_id != ""){  $ch .=" AND (sh.user_id = '$user_id' OR sh.ip= '$ip') "; }else if($ip != ""){  $ch .=" AND sh.ip = '$ip' "; }
	$chec = $conn->query($ch);
	
if ($chec->num_rows > 0) {
		$dataaaaa = date("Y-m-d 00:00:00");
		$ddid = $conn->query("SELECT dailyid,id FROM fatura WHERE data > '$dataaaaa' order by id desc limit 1");
		$ddid222 = $ddid->fetch_assoc();
		if($ddid222["dailyid"] == ""){ $ddid222["dailyid"] = "0"; } 
		$ddid = $ddid222["dailyid"] + 1;
	$krijofature = $conn->query("INSERT INTO `fatura`(`kontaktet`,`data`, `user_id`, `shitur_nga`, `totali`, `skonto`,`dyqan_id`,`katering`,`arka`,`printuar`,`koha_pergatitjes`,`tavolina`,`koordinatat`,`shenime`,`fatura_gati`,`klient_id`,`dervice_id`,`token`,`rand`,`nr_konfirmuar`,`konfirmuar_nga_arka`,`dailyid`) VALUES('$cel, $adresa','$dddatta','$arketari[user_id]','$nga','0','0','2','1','0','0', '0','0','$koordinatat','$shenime','0','$user_id','$dervice_id','$token','$rand','$sms','0','$ddid')");
	$faturidd = $conn->insert_id;
	$totali = 0; $shuma = 0;
while($to = $chec->fetch_assoc()){
	
		$result3 = $conn->query("SELECT * FROM `cmimet` where produkt_id  = '$to[produkt_id]' AND dyqan_id = '2'");
		$to3 = $result3->fetch_assoc();
	
		$ka = $conn->query("SELECT * FROM `kategorite` where id  = '$to[kategoria]'");
		$kategori_tip = $ka->fetch_assoc();
	
		if($to3["cmimi"] =="" || $to3["cmimi"] ==" "){ $to3["cmimi"] = "0"; }
		$shuma = $to3["cmimi"] * $to["sasia"];
		$totali = $totali + $shuma;
	
$conn->query("INSERT INTO  `produkte_te_shitura`(`produkt_id`, `pacient_id`, `user_id`, `data`, `kategoria_viewed`, `sasia`, `skonto`, `arka`, 
`shitur_nga`, `cmimi`, `dyqan_id`, `fature_id`, `kategoria`, `koha`, `shenime`, `katering`, `printuar`, `kategoria_gati`,`koordinatat`,`klient_id`,`dervice_id`,`token`,`rand`,`nr_konfirmuar`,`konfirmuar_nga_arka`,`dailyid`) VALUES('$to[produkt_id]','', '$arketari[user_id]','$tani','0',
'$to[sasia]','','0','$nga','$shuma','$kategori_tip[kategorite_app]',' $faturidd','$to[kategoria]','','$shenime','1','0','0','$koordinatat','$user_id','$dervice_id','$token','$rand','$sms','0','$ddid')");
}
	$conn->query("UPDATE fatura set totali ='$totali' where id='$faturidd' LIMIT 1");
	
	$checkadresa = $conn->query("SELECT id FROM adresa WHERE user_id = '$user_id' AND adresa = '$adresa' ");	
if ($checkadresa->num_rows == 0) {
	$conn->query("INSERT INTO `adresa`(adresa,user_id,dervice_id,token,nga) VALUES('$adresa','$user_id','$dervice_id','$token','$nga')");
	}	
}	
if($sms == "0"){	
send_android_push($cel, "Kodi: ".$rand, "NurSMS", "null", "");
}
	
		$ch = "DELETE from `shporta` WHERE id !=''"; 
	if($user_id != ""){  $ch .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $ch .=" AND ip = '$ip' "; }
	$chec = $conn->query($ch);
	exit();
}

if($nid == "fshingashporta"){
 $sql = "DELETE FROM `shporta` WHERE id = '$id' ";
 if($user_id != ""){  $sql .=" AND (user_id = '$user_id' OR ip= '$ip') "; }else if($ip != ""){  $sql .=" AND ip = '$ip' "; }
}

$result = $conn->query($sql);
 $to = $result->fetch_assoc();
 $arrei .= '{"id":"'.$to["id"].'","pozicioni":"'.$x.'","kategoria":"'.$to["id"].'","titulli":'.json_encode($to["emri"]).',"image":"","artikulli":'.json_encode($to3["idd"]." Produkte").'},';

$conn->close();

echo rtrim($arrei,",");

if(!isset($_GET["noshow"])){echo  ']';} 
echo "}";
}
exit();
?>

Batal

⬅ Naik ke NurSMS 6 item

Nama	Tipe	Ukuran	Diubah	Aksi
📁Android	dir	—	2020-04-01 22:11	📂 Buka
📁Ios	dir	—	2020-04-01 22:01	📂 Buka
🐘get_data.php	php	9.5 KB	2020-04-02 18:16	✏️ Edit 👁️ View
🐘lidhu_me_db.php	php	2.5 KB	2020-04-01 22:12	✏️ Edit 👁️ View
🐘post_data.php	php	14.3 KB	2020-04-06 17:12	✏️ Edit 👁️ View
🐘prova.php	php	603 B	2020-04-01 22:01	✏️ Edit 👁️ View