MAINHACK

Viewing / Editing File: insertBusiness.php

<?php  include("../auth/functions.php");

$shopname = $_SESSION['business_name_Xw211qAAsq4'];
  $business_name = sql_prep($_POST['business_name']);
  $business_name = h($_POST['business_name']);
  $business_name = dirty_html($_POST['business_name']);

$phone = sql_prep($_POST['phone']);
  $phone = h($_POST['phone']);
  $phone = dirty_html($_POST['phone']);

$location = sql_prep($_POST['location']);
  $location = h($_POST['location']);
  $location = dirty_html($_POST['location']);

$email = sql_prep($_POST['email']);
  $email = h($_POST['email']);
  $email = dirty_html($_POST['email']);

$password = sql_prep($_POST['password']);
  $password = h($_POST['password']);
  $password = dirty_html($_POST['password']);

$select = mysqli_query($new,"SELECT * FROM barber_admin WHERE business_name = '$shopname'");
 $dbmail = mysqli_fetch_array($select);
 $mail = $dbmail['email'];
 $username = $dbmail['username'];
 $full_name = $dbmail['full_name'];
 $active = $dbmail['active'];
 $expired = $dbmail['expired'];
 $account_status = $dbmail['account_status'];
 $forgot_pass_expire_time = $dbmail['forgot_pass_expire_time'];
 $db_email = $dbmail['email'];

if(empty($business_name)){
echo json_encode(['status' => 'error', 'message' => 'Business name  is required']);
 }elseif(empty($phone)){
    echo json_encode(['status' => 'error', 'message' => 'Business phone number  is required']);
 }elseif(empty($email)){
    echo json_encode(['status' => 'error', 'message' => 'Business email  is required']);
 }elseif(empty($password)){
    echo json_encode(['status' => 'error', 'message' => 'Login password is required']);
 }elseif($email == $db_email){
       echo json_encode(['status' => 'error', 'message' => 'Business already exist']);
 }

else {

$pass = password_hash($password,PASSWORD_BCRYPT, array('cost'=>12));

$validation_code = md5($email . microtime());

$account_type = "Owner";
$open_clode_time = '9:00 am - 9:00 pm';

$stmt = $con->prepare("insert into barber_admin (username,email,full_name,password,validation_code,active,forgot_pass_expire_time,phone,business_name,location,account_type,expired,open_clode_time,account_status,master_account) values(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)");
$stmt->execute(array($username,$email,$full_name,$pass,$validation_code,$active,$forgot_pass_expire_time,$phone,$business_name,$location,$account_type,$expired,$open_clode_time,$account_status,$shopname));

$checkbox_value = $_POST['checkbox_values'];
 $status = 0;
 $account_type2 = "Admin";

foreach ($checkbox_value as $value) {
        $query = "INSERT INTO role_permissions (page_name,status,business_name,type) VALUES (?,?,?,?)";
        $stmt = mysqli_prepare($new,$query);
        mysqli_stmt_bind_param($stmt, "ssss", $value,$status,$business_name,$account_type2);
        mysqli_stmt_execute($stmt);
    }

echo json_encode(['status' => 'success', 'message' => 'New bussniess added']);

}

Cancel / Back

[ MAINHACK ]

Viewing / Editing File: insertBusiness.php

Server Info

System Features

User Info