FM / drivers

/home/desid573/public_html/angel/drivers/

/home/desid573/public_html/angel/drivers

Name	Size	Mode	Actions
twilio-php-master/	-	0755	rm
avail.php	19359	0644	edit dl rm
cancel_booking.php	4537	0644	edit dl rm
checkDetails.php	1050	0644	edit dl rm
create.php	2332	0644	edit dl rm
createbilling.php	7335	0644	edit dl rm
createdriver.php	4708	0644	edit dl rm
daily.php	9342	0644	edit dl rm
default.php	16383	0644	edit dl rm
delete.php	942	0644	edit dl rm
deletedriver.php	3508	0644	edit dl rm
error_log	193375	0644	edit dl rm
getDailyAvailability.php	3065	0644	edit dl rm
getDefaultAvailability.php	1102	0644	edit dl rm
getDriverAvailability.php	1642	0644	edit dl rm
home.php	5517	0644	edit dl rm
login.php	7782	0644	edit dl rm
loginDriver.php	1214	0644	edit dl rm
new.php	835	0644	edit dl rm
off.php	3502	0644	edit dl rm
register.php	8676	0644	edit dl rm
setDefaultAvailability.php	3257	0644	edit dl rm
setDriverAvailability.php	3365	0644	edit dl rm
setDriverPin.php	2189	0644	edit dl rm
smsregister.php	1564	0644	edit dl rm
updateDetails.php	3350	0644	edit dl rm

Edit: /home/desid573/public_html/angel/drivers/setDriverPin.php (2189B)

<?php

$driver = $_POST['driver'];
$pin = MD5($_POST['pin']);
$email = strtolower($_POST['email']);

if($driver != "" && $email != "" && $pin != "") {

$dbhost = "localhost";
	    $dbuser = "desid573_famcab";
	    $dbpass = "C]+6wQySxov(";
	    $dbname = "desid573_eway_codes";
	    $conn = new mysqli($dbhost, $dbuser, $dbpass, $dbname) or die($conn->connect_error);
	    $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname);
	    
	    $query   = "SELECT * FROM drivers WHERE driver = '".$driver."'";
	    $success = $conn->query($query);
 
	    if (!$success) {
    		error_log("Couldn't enter data: ".$conn->error);
    		}
    		
    	if($success->num_rows > 0) {
    	    
    	   
	        $row = $success->fetch_assoc();
	        $driverid = $row["id"];
	        $query   = "SELECT * FROM driver_pin WHERE driver_id = '".$driverid."'";
	        $success = $conn->query($query);
    	        if (!$success) {
        		error_log("Couldn't enter data: ".$conn->error);
        		}
        		
        	    if($success->num_rows > 0) {
        	        
        	        $response = ["status" => "error", "message" => "driver pin already exists"];
        	        
        	    } else {
        	        
        	        $query   = "INSERT INTO driver_pin (id, driver_id, user_name, pin, created) VALUES(null,'".$driverid."', '".$email."', '".$pin."', NOW())";
        	        $success = $conn->query($query);
            	        if (!$success) {
                		error_log("Couldn't enter data: ".$conn->error);
                		    $response = ["status" => "error", "message" => "Error creating PIN"];
                		
                		} else {
                		    
                		    $response = ["status" => "OK", "message" => "PIN Created"];
                		    
                		}
        	        
        	        
        	    }
	        
	        
	  
    	    
    	} else {
    	    
    	    $response = ["status" => "error", "message" => "no driver with that name"];
	        
	        
    	}
    		
    		
} else {
    $response = ["status" => "error", "message" => "not enough data"];
}		
   echo json_encode($response, true); 		
    		
    		?>

connect_error); $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname); $query = "SELECT * FROM drivers WHERE driver = '".$driver."'"; $success = $conn->query($query); if (!$success) { error_log("Couldn't enter data: ".$conn->error); } if($success->num_rows > 0) { $row = $success->fetch_assoc(); $driverid = $row["id"]; $query = "SELECT * FROM driver_pin WHERE driver_id = '".$driverid."'"; $success = $conn->query($query); if (!$success) { error_log("Couldn't enter data: ".$conn->error); } if($success->num_rows > 0) { $response = ["status" => "error", "message" => "driver pin already exists"]; } else { $query = "INSERT INTO driver_pin (id, driver_id, user_name, pin, created) VALUES(null,'".$driverid."', '".$email."', '".$pin."', NOW())"; $success = $conn->query($query); if (!$success) { error_log("Couldn't enter data: ".$conn->error); $response = ["status" => "error", "message" => "Error creating PIN"]; } else { $response = ["status" => "OK", "message" => "PIN Created"]; } } } else { $response = ["status" => "error", "message" => "no driver with that name"]; } } else { $response = ["status" => "error", "message" => "not enough data"]; } echo json_encode($response, true); ?>