FM / fc

/home/desid573/public_html/fc_api

Name	Size	Mode	Actions
lib/	-	0755	rm
twilio-php-master/	-	0755	rm
vendor/	-	0755	rm
after_booking_page.php	2595	0644	edit dl rm
appoff.php	4782	0644	edit dl rm
booking.php	17680	0644	edit dl rm
booking_edit_request.php	10196	0644	edit dl rm
cancel_booking.php	6064	0644	edit dl rm
check_open.php	0	0644	edit dl rm
composer.json	65	0644	edit dl rm
composer.lock	2355	0644	edit dl rm
confirmsend.php	2983	0644	edit dl rm
confirm_booking_change.php	6305	0644	edit dl rm
confirm_booking_change_ajax.php	6696	0644	edit dl rm
contact_us_mail.php	890	0644	edit dl rm
copy_account_to_homekey.php	4338	0644	edit dl rm
dispatch.php	877	0644	edit dl rm
emailConfirmReset.php	486	0644	edit dl rm
error_log	30761021	0644	edit dl rm
family-cab_small.jpg	98853	0644	edit dl rm
generate_credit.php	3098	0644	edit dl rm
generate_referall.php	2779	0644	edit dl rm
getuser_byid.php	2341	0644	edit dl rm
getuser_bymail.php	3419	0644	edit dl rm
get_all_booking.php	779	0644	edit dl rm
get_booking_bybooking_id.php	813	0644	edit dl rm
get_booking_byuser.php	1057	0644	edit dl rm
get_booking_status.php	3246	0644	edit dl rm
get_completed_bookings.php	710	0644	edit dl rm
get_ETA.php	5013	0644	edit dl rm
get_lead_message.php	673	0644	edit dl rm
get_open_bookings.php	1537	0644	edit dl rm
get_payment_byuser.php	1064	0644	edit dl rm
get_price.php	41	0644	edit dl rm
get_recipes.php	6361	0644	edit dl rm
get_request_details.php	976	0644	edit dl rm
get_TE.php	1217	0644	edit dl rm
index.php	13722	0644	edit dl rm
index_backup.php	4791	0644	edit dl rm
lib_tr.zip	105047	0644	edit dl rm
login_api.php	8679	0644	edit dl rm
noteconfirm.php	9228	0644	edit dl rm
off.php	2854	0644	edit dl rm
passwordResetLink.php	5170	0644	edit dl rm
pay_file.php	7302	0644	edit dl rm
pay_file_back.php	5326	0644	edit dl rm
placehold.html	2147	0644	edit dl rm
reset_email.php	1755	0644	edit dl rm
reset_phone.php	5717	0644	edit dl rm
test2.php	0	0644	edit dl rm
test_222.php	845	0644	edit dl rm
update_api.php	5910	0644	edit dl rm
update_api_on_mail.php	4723	0644	edit dl rm
validatecode.php	1094	0644	edit dl rm
validatephone.php	1034	0644	edit dl rm

Edit: /home/desid573/public_html/fc_api/reset_phone.php (5717B)

<?php
require("lib/config.php");
require_once 'vendor/eway/eway-rapid-php/include_eway.php';
// =============== New customer user api ===================================
$data  = $_REQUEST;
//$fullname = $_REQUEST["fname"]." ".$_REQUEST["lname"];
$fname = trim($_REQUEST["fname"]);
$lname = trim($_REQUEST["lname"]);
$fullname  = $fname." ".$lname;
$exp = $_REQUEST["exp"];
$exp_split = explode("/" ,$exp);
$expmonth = $exp_split[0];
$expyear = $exp_split[1];
if($_REQUEST['update'] == "0"){
if(isset($_REQUEST["pass"]))
{
	$password = MD5($_REQUEST["pass"]);
}
$sql = "SELECT id FROM customers where email = '".$_REQUEST['email']."'";
$result = $conn->query($sql);
while($row_details = $result->fetch_assoc()) 
{
	$cid = $row_details["id"] ;
}
$cid;
if ($result->num_rows > 0) 
 {

$sql= "UPDATE `customers` SET ";
		if(isset($_REQUEST["fname"]) && isset($_REQUEST["lname"]))
		{
			$sql.= "`name` = '".$fullname."',";
		}
		if(isset($_REQUEST["phone"]))
		{
			$phone = str_replace(" ", "", $_REQUEST["phone"]);
			$sql.= "`mobile` = '".$phone."',";
		}
		if(isset($_REQUEST["email"]))
		{
			$sql.= "`email` = '".$_REQUEST["email"]."' ,";
		}
		if(isset($_REQUEST["new_pass"]) && $_REQUEST["new_pass"] != "")
		{
			$new_pass = MD5($_REQUEST["new_pass"]);
			$sql.= "`password` = '".$new_pass."',";
		}
		$sql.= "`modified` = NOW() WHERE `customers`.`email` ='".$_REQUEST["email"]."'";
		if($conn->query($sql))
		{
			$cust["status"][] = "ok";
			$sql_detail="UPDATE `customer_details` SET ";
			
			if(isset($_REQUEST["address"]))
			{
				$sql_detail.= "`address` = '".$_REQUEST["address"]."', ";
			}
			if(isset($_REQUEST["addr_la"]))
			{
				$sql_detail.="`addr_lat` = '".$_REQUEST["addr_la"]."', ";
			}
			if(isset($_REQUEST["addr_long"]))
			{			
				$sql_detail.="`addr_long` = '".$_REQUEST["addr_long"]."', ";
			}
			$sql_detail.="`no_pax` = '".$_REQUEST["no_pax"]."', ";
			$sql_detail.="`no_rf` = '".$_REQUEST["no_rf"]."', ";
			$sql_detail.="`no_ff` = '".$_REQUEST["no_ff"]."', ";
			$sql_detail.="`no_b` = '".$_REQUEST["no_b"]."' ";
			$sql_detail.="WHERE `customer_details`.`cid` =".$cid;
			if($conn->query($sql_detail))
			{
				$cust["status"][] = "ok";
				
				
				//-----------------------------------------
				
			
					
			}
			else
			{
				$cust["error"][] = "error";
			}
		}
		else
		{
			$cust["error"][] = "error";
		}

$count = sizeof($cust["status"]);
	 $count_error = sizeof($cust["error"]);
	 if($count==2)
	 {
		 $Res["massege"] = "Customer Details are Updated";
		 $Res["status"] = "ok";
	 }
	 if($count_error >0)
	 {
		 $Res["massege"] = "Error in update, please contact us";
		 $Res["status"] = "error";
	 }
 }
 else
 {
	  $Res["massege"] = "No such Id present in database";
	  $Res["status"] = "error";
 }
 
 
echo json_encode(new ArrayObject($Res));
}

//echo "<pre>";
//print_r($response);
//print_r($data);
//print_r($Res);
//echo "</pre>";
if($_REQUEST['update'] == "1"){
				$sql = "SELECT * FROM customers where email = '".$_REQUEST["email"]."'";
				$result = $conn->query($sql);
				if ($result->num_rows > 0) {
					while($row = $result->fetch_assoc()) {
						$customer[] = $row;
						$sql = "SELECT * FROM `customer_details` where `cid` = '".$row["id"]."'"; 
						$result = $conn->query($sql);
							if ($result->num_rows > 0) {
								while($row_details = $result->fetch_assoc()) {
									$cust_detail[] = $row_details;
									}
							}
						$sql = "SELECT * FROM `customer_tokens`  where `cid` = '".$row["id"]."'"; 
						$result = $conn->query($sql);
						if ($result->num_rows > 0) {
							while($row_token = $result->fetch_assoc()) {
								$cust_token[] = $row_token;
							}
						}
					}
					}
	$cus = $customer[0]["name"];
	$mob = $customer[0]["mobile"];
	$cid = $customer[0]['id'];
	$tokencustomerid = $cust_token[0]["access_token_value"];

//========================token Id ===================================	
					$client_key = '4T7y1vuKPkdhRYUQdH6msueW9hqV2wpcwnSk0Qwxkvwf7TjQn40qymPW7IJb66gUC1w1505cDMkj9IR82juQEnIp4/8nd0nDhwYDSDoqROtNBWmkqtqYmF6F4qVGMUq3HpJrY3y2kdSljCFfWzWc7LIEn4G5XY2IZAPgAO5+mhwvYrricmqwLhqzV4FBUII5AwTvJZl4awrdul4vLWkS73vJuW/XrXHseGK/nqB3oSRluZ1jKp2qDgVTwrXYEbx4rwwS42X2w0C9tLKywxf27WD2CCK8ftSeQBimVqFI0r6VuRXFVaOn6SQTOD9V/TsCfPk5Zh6/PWcfapyVKS+l1w==';

$apiKey = '44DD7APNUxR8/4sDLhEVT11OS00fmBo4Haxj4ZGJGHvtLBP0rC/ayqNhbVu9tEJrjlJPJm';
					$apiPassword = 'y2b7QMpd';
				
				
					//$apiKey = '60CF3Ce97nRS1Z1Wp5m9kMmzHHEh8Rkuj31QCtVxjPWGYA9FymyqsK0Enm1P6mHJf0THbR';
					//$apiPassword = 'API-P4ss';
					
					$apiEndpoint = \Eway\Rapid\Client::MODE_PRODUCTION;
					
					//$apiEndpoint = \Eway\Rapid\Client::MODE_SANDBOX; // Use \Eway\Rapid\Client::MODE_PRODUCTION when you go live
					$client = \Eway\Rapid::createClient($apiKey, $apiPassword, $apiEndpoint);
					$customer = [
						
							'Country' => 'au',
							'Email' => $_REQUEST['email'],
							'TokenCustomerID' => $tokencustomerid,
							'CardDetails' => [
									'Name' => $cus,
									'Number' => $_REQUEST["credit_card"],
									'ExpiryMonth' => $expmonth,
									'ExpiryYear' => $expyear,
									'CVN' => $_REQUEST["CVV"],
									]
								];
					$response = $client->updateCustomer(\Eway\Rapid\Enum\ApiMethod::DIRECT, $customer);
					
					if(isset($response)) {
						$Res["massege"] = "credit card is updated";
		 				$Res["status"] = "ok";
		 				} else {
		 				$Res["massege"] = "error in credit card update";
		 				$Res["status"] = "error";
		 				}
		 			echo json_encode(new ArrayObject($Res));
					
					//===========================token id end here ========================	
			}

$conn->close();
// =============== New customer user api End Here ==========================

cmd: