File Manager
Viewing File: class.admin.php
<?php
include 'vendor/autoload.php';
require_once 'connectdb.php';
class USER {
private $conn;
public function __construct() {
$database = new Database();
$db = $database->dbConnection();
$this->conn = $db;
}
public function runQuery($sql) {
$stmt = $this->conn->prepare($sql);
return $stmt;
}
public function lasdID() {
$stmt = $this->conn->lastInsertId();
return $stmt;
}
public function create($fname, $mname, $lname, $uname, $upass, $phone, $email, $type, $reg_date, $work, $acc_no, $addr, $sex, $dob, $marry, $t_bal, $a_bal, $currency, $cot, $tax, $imf, $pin_auth, $pin, $verify, $phone_verify, $status) {
try {
$stmt = $this->conn->prepare("INSERT INTO account(fname,mname,lname,uname,upass,phone,email,type,reg_date,work,acc_no,addr,sex,dob,marry,t_bal,a_bal,currency,cot,tax,imf,pin_auth,pin,verify,phone_verify,status)
VALUES(:fname, :mname, :lname, :uname, :upass, :phone, :email, :type, :reg_date, :work, :acc_no, :addr, :sex, :dob, :marry, :t_bal, :a_bal, :currency, :cot, :tax, :imf, :pin_auth, :pin, :verify, :phone_verify, :status)");
$stmt->bindparam(":fname", $fname);
$stmt->bindparam(":mname", $mname);
$stmt->bindparam(":lname", $lname);
$stmt->bindparam(":uname", $uname);
$stmt->bindparam(":upass", $upass);
$stmt->bindparam(":phone", $phone);
$stmt->bindparam(":email", $email);
$stmt->bindparam(":type", $type);
$stmt->bindparam(":reg_date", $reg_date);
$stmt->bindparam(":work", $work);
$stmt->bindparam(":acc_no", $acc_no);
$stmt->bindparam(":addr", $addr);
$stmt->bindparam(":sex", $sex);
$stmt->bindparam(":dob", $dob);
$stmt->bindparam(":marry", $marry);
$stmt->bindparam(":t_bal", $t_bal);
$stmt->bindparam(":a_bal", $a_bal);
$stmt->bindparam(":currency", $currency);
$stmt->bindparam(":cot", $cot);
$stmt->bindparam(":tax", $tax);
$stmt->bindparam(":imf", $imf);
$stmt->bindparam(":pin_auth", $pin_auth);
$stmt->bindparam(":pin", $pin);
$stmt->bindparam(":verify", $verify);
$stmt->bindparam(":phone_verify", $phone_verify);
$stmt->bindparam(":status", $status);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function createsign($fname, $mname, $lname, $uname, $upass, $phone, $email, $adminemail, $type, $reg_date, $work, $acc_no, $addr, $sex, $dob, $marry, $t_bal, $a_bal, $currency, $cot, $tax, $imf, $pin_auth, $pin, $verify, $status) {
try {
$stmt = $this->conn->prepare("INSERT INTO account(fname,mname,lname,uname,upass,phone,email,adminemail,type,reg_date,work,acc_no,addr,sex,dob,marry,t_bal,a_bal,currency,cot,tax,imf,pin_auth,pin,verify,status)
VALUES(:fname, :mname, :lname, :uname, :upass, :phone, :email, :adminemail, :type, :reg_date, :work, :acc_no, :addr, :sex, :dob, :marry, :t_bal, :a_bal, :currency, :cot, :tax, :imf, :pin_auth, :pin, :verify, :status)");
$stmt->bindparam(":fname", $fname);
$stmt->bindparam(":mname", $mname);
$stmt->bindparam(":lname", $lname);
$stmt->bindparam(":uname", $uname);
$stmt->bindparam(":upass", $upass);
$stmt->bindparam(":phone", $phone);
$stmt->bindparam(":email", $email);
$stmt->bindparam(":adminemail", $adminemail);
$stmt->bindparam(":type", $type);
$stmt->bindparam(":reg_date", $reg_date);
$stmt->bindparam(":work", $work);
$stmt->bindparam(":acc_no", $acc_no);
$stmt->bindparam(":addr", $addr);
$stmt->bindparam(":sex", $sex);
$stmt->bindparam(":dob", $dob);
$stmt->bindparam(":marry", $marry);
$stmt->bindparam(":t_bal", $t_bal);
$stmt->bindparam(":a_bal", $a_bal);
$stmt->bindparam(":currency", $currency);
$stmt->bindparam(":cot", $cot);
$stmt->bindparam(":tax", $tax);
$stmt->bindparam(":imf", $imf);
$stmt->bindparam(":pin_auth", $pin_auth);
$stmt->bindparam(":pin", $pin);
$stmt->bindparam(":verify", $verify);
$stmt->bindparam(":status", $status);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function signup($fname, $mname, $lname, $upass, $phone, $email, $type, $work, $addr, $sex, $dob, $marry, $currency) {
try {
$stmt = $this->conn->prepare("INSERT INTO temp_account(fname,mname,lname,upass,phone,email,type,work,addr,sex,dob,marry,currency)
VALUES(:fname, :mname, :lname, :upass, :phone, :email, :type, :work, :addr, :sex, :dob, :marry, :currency)");
$stmt->bindparam(":fname", $fname);
$stmt->bindparam(":mname", $mname);
$stmt->bindparam(":lname", $lname);
$stmt->bindparam(":upass", $upass);
$stmt->bindparam(":phone", $phone);
$stmt->bindparam(":email", $email);
$stmt->bindparam(":type", $type);
$stmt->bindparam(":work", $work);
$stmt->bindparam(":addr", $addr);
$stmt->bindparam(":sex", $sex);
$stmt->bindparam(":dob", $dob);
$stmt->bindparam(":marry", $marry);
$stmt->bindparam(":currency", $currency);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function approve($fname, $mname, $lname, $uname, $upass, $phone, $email, $type, $work, $acc_no, $addr, $sex, $dob, $marry, $t_bal, $a_bal, $currency, $cot, $tax, $imf, $pin_auth, $pin) {
try {
$stmt = $this->conn->prepare("INSERT INTO account(fname,mname,lname,uname,upass,phone,email,type,work,acc_no,addr,sex,dob,marry,t_bal,a_bal,currency,cot,tax,imf,pin_auth,pin)
VALUES(:fname, :mname, :lname, :uname, :upass, :phone, :email, :type, :reg_date, :work, :acc_no, :addr, :sex, :dob, :marry, :t_bal, :a_bal, :currency, :cot, :tax, :imf, :pin_auth, :pin)");
$stmt->bindparam(":fname", $fname);
$stmt->bindparam(":mname", $mname);
$stmt->bindparam(":lname", $lname);
$stmt->bindparam(":uname", $uname);
$stmt->bindparam(":upass", $upass);
$stmt->bindparam(":phone", $phone);
$stmt->bindparam(":email", $email);
$stmt->bindparam(":type", $type);
$stmt->bindparam(":work", $work);
$stmt->bindparam(":acc_no", $acc_no);
$stmt->bindparam(":addr", $addr);
$stmt->bindparam(":sex", $sex);
$stmt->bindparam(":dob", $dob);
$stmt->bindparam(":marry", $marry);
$stmt->bindparam(":t_bal", $t_bal);
$stmt->bindparam(":a_bal", $a_bal);
$stmt->bindparam(":currency", $currency);
$stmt->bindparam(":cot", $cot);
$stmt->bindparam(":tax", $tax);
$stmt->bindparam(":imf", $imf);
$stmt->bindparam(":pin_auth", $pin_auth);
$stmt->bindparam(":pin", $pin);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function his($uname, $amount, $sender_name, $type, $remarks, $date, $time) {
try {
$stmt = $this->conn->prepare("INSERT INTO alerts(uname,amount,sender_name,type,remarks,date,time)
VALUES(:uname, :amount, :sender_name, :type, :remarks, :date, :time)");
$stmt->bindparam(":uname", $uname);
$stmt->bindparam(":amount", $amount);
$stmt->bindparam(":sender_name", $sender_name);
$stmt->bindparam(":type", $type);
$stmt->bindparam(":remarks", $remarks);
$stmt->bindparam(":date", $date);
$stmt->bindparam(":time", $time);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function transfer($amount, $uname, $bank_name, $acc_name, $acc_no, $type, $swift, $routing, $remarks, $email, $phone) {
try {
$stmt = $this->conn->prepare("INSERT INTO transfer(amount,uname,bank_name,acc_name,acc_no,type,swift,routing,remarks,email,phone)
VALUES(:amount, :unmae, :bank_name, :acc_name, :acc_no, :type, :swift, :routing, :remarks, :email, :phone)");
$stmt->bindparam(":amount", $amount);
$stmt->bindparam(":uname", $uname);
$stmt->bindparam(":bank_name", $bank_name);
$stmt->bindparam(":acc_name", $acc_name);
$stmt->bindparam(":acc_no", $acc_no);
$stmt->bindparam(":type", $type);
$stmt->bindparam(":swift", $swift);
$stmt->bindparam(":routing", $routing);
$stmt->bindparam(":remarks", $remarks);
$stmt->bindparam(":email", $email);
$stmt->bindparam(":phone", $phone);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function ticket($tc, $sender_name, $subject, $msg, $status) {
try {
$stmt = $this->conn->prepare("INSERT INTO ticket(tc,sender_name,subject,msg,$tatus)
VALUES(:tc, :sender_name, :subject, :msg, :status)");
$stmt->bindparam(":tc", $tc);
$stmt->bindparam(":sender_name", $sender_name);
$stmt->bindparam(":subject", $subject);
$stmt->bindparam(":msg", $msg);
$stmt->bindparam(":status", $status);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function message($sender_name, $reci_name, $subject, $msg) {
try {
$stmt = $this->conn->prepare("INSERT INTO message(sender_name,reci_name,subject,msg)
VALUES(:sender_name, :reci_name, :subject, :msg)");
$stmt->bindparam(":sender_name", $sender_name);
$stmt->bindparam(":reci_name", $reci_name);
$stmt->bindparam(":subject", $subject);
$stmt->bindparam(":msg", $msg);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function del($id) {
try {
$stmt = $this->conn->prepare("DELETE FROM account WHERE id = :id");
$stmt->bindparam(":id", $id);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function delt($id) {
try {
$stmt = $this->conn->prepare("DELETE FROM ticket WHERE id = :id");
$stmt->bindparam(":id", $id);
$stmt->execute();
return $stmt;
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function update($fname, $mname, $lname, $uname, $upass, $phone, $email, $type, $work, $acc_no, $addr, $sex, $dob, $marry, $t_bal, $a_bal, $cot, $tax, $imf, $currency, $pin_auth, $pin, $status, $verify, $phone_verify) {
try {
$id = $_GET['id'];
$stmt = $this->conn->prepare("UPDATE account SET fname = :fname, mname = :mname, lname = :lname, uname = :uname, upass = :upass, phone = :phone, email = :email, type = :type, work = :work, acc_no = :acc_no, addr = :addr, sex = :sex, dob = :dob, marry = :marry, t_bal = :t_bal, a_bal = :a_bal, cot = :cot, tax = :tax, imf = :imf, currency = :currency, pin_auth = :pin_auth, pin = :pin, status = :status, verify = :verify, phone_verify = :phone_verify WHERE id='$id'");
$stmt->bindparam(":fname", $fname);
$stmt->bindparam(":mname", $mname);
$stmt->bindparam(":lname", $lname);
$stmt->bindparam(":uname", $uname);
$stmt->bindparam(":upass", $upass);
$stmt->bindparam(":phone", $phone);
$stmt->bindparam(":email", $email);
$stmt->bindparam(":type", $type);
$stmt->bindparam(":work", $work);
$stmt->bindparam(":acc_no", $acc_no);
$stmt->bindparam(":addr", $addr);
$stmt->bindparam(":sex", $sex);
$stmt->bindparam(":dob", $dob);
$stmt->bindparam(":marry", $marry);
$stmt->bindparam(":t_bal", $t_bal);
$stmt->bindparam(":a_bal", $a_bal);
$stmt->bindparam(":cot", $cot);
$stmt->bindparam(":tax", $tax);
$stmt->bindparam(":imf", $imf);
$stmt->bindparam(":currency", $currency);
$stmt->bindparam(":pin_auth", $pin_auth);
$stmt->bindparam(":pin", $pin);
$stmt->bindparam(":status", $status);
$stmt->bindparam(":verify", $verify);
$stmt->bindparam(":phone_verify", $phone_verify);
$stmt->execute();
return true;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function updatecr($uname, $amount, $remarks, $type, $date, $time, $statz) {
try {
$id = $_GET['id'];
$stmt = $this->conn->prepare("UPDATE account SET uname = :uname, amount = :amount, remarks = :remarks, type = :type, date = :date, time = :time, statz = :statz WHERE id='$id'");
$stmt->bindparam(":uname", $uname);
$stmt->bindparam(":amount", $amount);
$stmt->bindparam(":remarks", $remarks);
$stmt->bindparam(":type", $type);
$stmt->bindparam(":date", $date);
$stmt->bindparam(":time", $time);
$stmt->bindparam(":statz", $statz);
$stmt->execute();
return true;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function login($email, $upass) {
try {
$stmt = $this->conn->prepare("SELECT * FROM admin WHERE email=:email");
$stmt->execute(array(":email" => $email));
$userRow = $stmt->fetch(PDO::FETCH_ASSOC);
if ($stmt->rowCount() == 1) {
if ($userRow['verified_count'] == "Y") {
if ($userRow['upass'] == md5($upass)) {
$_SESSION['userSession'] = $userRow['id'];
return true;
} else {
header("Location: login.php?error");
exit;
}
} else {
header("Location: login.php?inactive");
exit;
}
} else {
header("Location: login.php?error");
exit;
}
} catch (PDOException $ex) {
echo $ex->getMessage();
}
}
public function is_logged_in() {
if (isset($_SESSION['userSession'])) {
return true;
}
}
public function redirect($url) {
header("Location: $url");
}
public function logout() {
session_destroy();
$_SESSION['userSession'] = false;
}
function send_mail($email, $messag, $subject) {
require_once('mailer/class.phpmailer.php');
$mail = new PHPMailer();
/*$mail->IsSMTP();*/
$mail->SMTPDebug = 0;
$mail->SMTPAuth = true;
$mail->SMTPSecure = "";
$mail->Host = "send.heznutprivate.com";
$mail->Port = 465;
$mail->AddAddress($email);
$mail->Username = "noreply@send.heznutprivate.com";
$mail->Password = "vcmP8VcqBU7R";
$mail->SetFrom('noreply@send.heznutprivate.com', 'Heznut Private Bank');
$mail->AddReplyTo("info@heznutprivate.com", "Heznut Private Bank");
$mail->Subject = $subject;
$mail->MsgHTML($messag);
$mail->Send();
}
function otp($to, $msg) {
//twillio
$sid = "AC48562614b2c077e0b1896f91111387b3"; // Your Account SID from www.twilio.com/console
$token = "f5add5a1ba7df3e46a9ea542eefebd29"; // Your Auth Token from www.twilio.com/console
$client = new Twilio\Rest\Client($sid, $token);
try { $message = $client->messages->create(
'+' . $to, array(
'from' => '+16198212117', // From a valid Twilio number
'body' => $msg
)
);
// Display a confirmation message on the screen
echo "Sent message to $name";
//sent successfully
echo "sent to $to successfully<br>";
}catch(Exception $e){
echo $e->getCode() . ' : ' . $e->getMessage()."<br>";
}
}
}
?>