FM / drivers

/home/desid573/public_html/drivers

Name	Size	Mode	Actions
training/	-	0755	rm
twilio-php-master/	-	0755	rm
avail.php	19359	0644	edit dl rm
cancel_booking.php	4537	0644	edit dl rm
checkDetails.php	1568	0644	edit dl rm
checkDetailsId.php	1774	0644	edit dl rm
cleaning_record.pdf	117117	0644	edit dl rm
contractor_conduct.pdf	110192	0644	edit dl rm
create.php	2610	0644	edit dl rm
createbilling.php	8952	0644	edit dl rm
createdriver.php	5278	0644	edit dl rm
createSMS.php	1844	0644	edit dl rm
daily.php	9342	0644	edit dl rm
default.php	16383	0644	edit dl rm
delete.php	935	0644	edit dl rm
deletedriver.php	3619	0644	edit dl rm
driverBilling.php	8378	0644	edit dl rm
driver_check_qld.php	3907	0644	edit dl rm
drugs_policy.pdf	78742	0644	edit dl rm
error_log	390475	0644	edit dl rm
getDailyAvailability.php	3065	0644	edit dl rm
getDefaultAvailability.php	1102	0644	edit dl rm
getDriverAvailability.php	1642	0644	edit dl rm
home.php	5517	0644	edit dl rm
incident.php	1871	0644	edit dl rm
incident_report.php	6179	0644	edit dl rm
index1.php	3937	0644	edit dl rm
licence_file_qld.php	1768	0644	edit dl rm
list.php	2046	0644	edit dl rm
login.php	7782	0644	edit dl rm
loginDriver.php	1214	0644	edit dl rm
medical.pdf	32899	0644	edit dl rm
new.php	835	0644	edit dl rm
off.php	3502	0644	edit dl rm
qld_report.php	1109	0644	edit dl rm
register.php	8676	0644	edit dl rm
setDefaultAvailability.php	3257	0644	edit dl rm
setDriverAvailability.php	3365	0644	edit dl rm
setDriverPin.php	2189	0644	edit dl rm
smsregister.php	1564	0644	edit dl rm
updateDetails.php	4527	0644	edit dl rm
updateDetailsDriver.php	5101	0644	edit dl rm

Edit: /home/desid573/public_html/drivers/setDriverPin.php (2189B)

<?php

$driver = $_POST['driver'];
$pin = MD5($_POST['pin']);
$email = strtolower($_POST['email']);

if($driver != "" && $email != "" && $pin != "") {

$dbhost = "localhost";
	    $dbuser = "desid573_famcab";
	    $dbpass = "C]+6wQySxov(";
	    $dbname = "desid573_eway_codes";
	    $conn = new mysqli($dbhost, $dbuser, $dbpass, $dbname) or die($conn->connect_error);
	    $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname);
	    
	    $query   = "SELECT * FROM drivers WHERE driver = '".$driver."'";
	    $success = $conn->query($query);
 
	    if (!$success) {
    		error_log("Couldn't enter data: ".$conn->error);
    		}
    		
    	if($success->num_rows > 0) {
    	    
    	   
	        $row = $success->fetch_assoc();
	        $driverid = $row["id"];
	        $query   = "SELECT * FROM driver_pin WHERE driver_id = '".$driverid."'";
	        $success = $conn->query($query);
    	        if (!$success) {
        		error_log("Couldn't enter data: ".$conn->error);
        		}
        		
        	    if($success->num_rows > 0) {
        	        
        	        $response = ["status" => "error", "message" => "driver pin already exists"];
        	        
        	    } else {
        	        
        	        $query   = "INSERT INTO driver_pin (id, driver_id, user_name, pin, created) VALUES(null,'".$driverid."', '".$email."', '".$pin."', NOW())";
        	        $success = $conn->query($query);
            	        if (!$success) {
                		error_log("Couldn't enter data: ".$conn->error);
                		    $response = ["status" => "error", "message" => "Error creating PIN"];
                		
                		} else {
                		    
                		    $response = ["status" => "OK", "message" => "PIN Created"];
                		    
                		}
        	        
        	        
        	    }
	        
	        
	  
    	    
    	} else {
    	    
    	    $response = ["status" => "error", "message" => "no driver with that name"];
	        
	        
    	}
    		
    		
} else {
    $response = ["status" => "error", "message" => "not enough data"];
}		
   echo json_encode($response, true); 		
    		
    		?>

connect_error); $qcon=mysqli_connect($dbhost, $dbuser, $dbpass, $dbname); $query = "SELECT * FROM drivers WHERE driver = '".$driver."'"; $success = $conn->query($query); if (!$success) { error_log("Couldn't enter data: ".$conn->error); } if($success->num_rows > 0) { $row = $success->fetch_assoc(); $driverid = $row["id"]; $query = "SELECT * FROM driver_pin WHERE driver_id = '".$driverid."'"; $success = $conn->query($query); if (!$success) { error_log("Couldn't enter data: ".$conn->error); } if($success->num_rows > 0) { $response = ["status" => "error", "message" => "driver pin already exists"]; } else { $query = "INSERT INTO driver_pin (id, driver_id, user_name, pin, created) VALUES(null,'".$driverid."', '".$email."', '".$pin."', NOW())"; $success = $conn->query($query); if (!$success) { error_log("Couldn't enter data: ".$conn->error); $response = ["status" => "error", "message" => "Error creating PIN"]; } else { $response = ["status" => "OK", "message" => "PIN Created"]; } } } else { $response = ["status" => "error", "message" => "no driver with that name"]; } } else { $response = ["status" => "error", "message" => "not enough data"]; } echo json_encode($response, true); ?>