Devil Killer Is Here MiNi Shell
MiNi SheLL

Current Path : /hermes/bosnacweb04/bosnacweb04ac/b1072/ipg.liuyuan7592410/wb_moge/
Linux boscustweb5005.eigbox.net 5.4.91 #1 SMP Wed Jan 20 18:10:28 EST 2021 x86_64
Current File : /hermes/bosnacweb04/bosnacweb04ac/b1072/ipg.liuyuan7592410/wb_moge/storeAPI.bkup230828.php
<?PHP
	/**
	* version 1.0.1 2022-01-03
	* version 1.0.3 2022-01-06 getStoreList()增加对输入参数的判断。
	* 							屏蔽对$_SESSION["cur_pos_lat"]和$_SESSION["cur_pos_lng"]赋值
	* version 1.0.5 2022-01-09 增加sendLogVerifyCode消息。
	* version 1.0.7 2022-03-06 增加login的处理逻辑
	* version 1.0.9 2022-03-19 COOKIE添加了CUS_ID;
	* version 1.0.11 2023-05-21 增加reqStoreListOnly和updateStoreGeo消息处理
	**/ 
	require_once(__DIR__."/lib/php/config.inc.php");
	require_once(__DIR__."/lib/php/add_to_cart.class.php");
	require_once(__DIR__."/lib/php/geo.php");
	require_once(__DIR__."/lib/php/coupon.class.php");
	$msg_type = get_safe_value($con,$_POST["msg_type"]);
	switch($msg_type){
		case "closestStore":
			if((!isset($_POST["lat"]))||(!isset($_POST["lng"]))){
				die(json_encode(["code"=>"103","description"=>"Invalid invoke the API. Lack of parameters"]));
			}else{
				$lat = get_safe_value($con,$_POST["lat"]);
				$lng = get_safe_value($con,$_POST['lng']);
				echo getClosestStoreFrDB($con,$lat,$lng);
			}
		break;
		case "storeList":
			if((!isset($_POST["lat"]))||(!isset($_POST["lng"]))){
				die(json_encode(["code"=>"103","description"=>"Invalid invoke the API. Lack of parameters"]));
			}else{
				$lat = get_safe_value($con,$_POST["lat"]);
				$lng = get_safe_value($con,$_POST['lng']);
				echo getStoreList($con,$lat,$lng);
			}
		break;
		case "setPickupStore":
			if(!isset($_POST["sid"])){
				die(json_encode(["code"=>"105","description"=>"set pickup store, no sid info"]));
			}else{
				$sid = get_safe_value($con,$_POST["sid"]);
				echo setPickupStore($con,$sid);
			}
		break;
		case "reqVerifyCode":
			if(!isset($_POST["cell_num"])){
				die(json_encode(["code"=>"106","description"=>"lack of cell phone number when request sending Login SMS!"]));
			}else{
				$cell_num = get_safe_value($con,$_POST["cell_num"]);
				$clnt = isset($_POST["clnt_name"])?get_safe_value($con,$_POST["clnt_name"]):NULL;
				$dob = isset($_POST["dob"])?get_safe_value($con,$_POST["dob"]):"00-00";
				echo reqVerifyCode($con,$cell_num,$clnt,$dob);
			}
		break;
		case "sendVerifyCode":
			if(!isset($_POST["veriCode"])){
				die(json_encode(["code"=>"107","description"=>"Lack of verify code"]));
			}else{
				$veri_code = get_safe_value($con,$_POST["veriCode"]);
				echo checkVerifyCode($con,$veri_code);
			}
		break;
		case "isNewCus":
			if(!isset($_POST["cell_num"])){
				die(json_encode(["code"=>"108","description"=>"No cell phone number received"]));
			}else{
				$cell_num = get_safe_value($con,$_POST["cell_num"]);
				echo checkNewCus($con,$cell_num);
			}
		break;
		case "logout_req":
			unset($_SESSION);
			cookie("TOKEN",0,-1);
			echo(json_encode(["code"=>"200","msg_type"=>"rsp_logout_req"]));
		break;
		case "applyCupnCard":
			if(!isset($_POST["coupon_code"])){
				die(json_encode(["code"=>"109","description"=>"No coupon code received!"]));
			}else if((!isset($_SESSION["CLNT_LOGIN"]))||(!isset($_SESSION["CUS_ID"]))){
				die(json_encode(["code"=>"110","description"=>"NOT SIGN IN YET! coockie:".$_SESSION["CUS_ID"]]));
			}else if(!isset($_COOKIE['pickupSID'])){
				die(json_encode(["code"=>"111","description"=>"Please select pickup store first!"]));
			}else{
				$cupn_card_code = get_safe_value($con,$_POST["coupon_code"]);
				$cupn_card_key = substr($cupn_card_code,0,1);
				$arr = explode("-",$cupn_card_code);
				switch($arr[0]){
					case COUPON:
   						$coupon = $arr[1];
   						echo appCoupon($con,$coupon,$_SESSION["CUS_ID"],$_COOKIE['pickupSID']);
   					break;
   					default:
   						echo appCard($con,$arr);
				}			
			}
		break;
		case "updateUsrProfile":
			echo updateProfile($con);			
		break;
		case "reqCupnCardRem":
			echo removeCupnCard($con);
		break;
		case "reqStoreListOnly":
			echo getStoreListOnly($con);
		break;
		case "updateStoreGeo":
			if(!isset($_POST['sid'])){
				die((["code"=>"115","description"=>"Tell me your store_id please!"]));
			}elseif((!isset($_POST['lat'])) || (!isset($_POST['lng']))){
				die(json_encode(["code"=>"114","description"=>"No GEO information received!"]));
			}
			echo update_store_geo($con,$_POST['sid'],$_POST['lat'],$_POST['lng']);
		break;
		default:
			die(json_encode(["code"=>"102","rcvd_msg"=>$msg_type,"description"=>"invalid message type"]));
	}

	/**
	* 更新store地理位置信息
	**/
	function update_store_geo($con,$store_id,$lat,$lng){
		$sql = "update t_store set lat='$lat',lng='$lng' where id=$store_id";
		mysqli_query($con,$sql);
		$updated_lines = mysqli_affected_rows($con);
		return json_encode(["code"=>"200","msg_type"=>"rsp_updateStoreGeo","store_id"=>$store_id,"updateLines"=>$updated_lines]);
	}

	function getStoreListOnly($con){
		$storeList = [];
		$sql = "select id,vid,name from t_store order by id asc";
		$res = mysqli_query($con,$sql);
		$i=0;
		while($row = mysqli_fetch_assoc($res)){
			$storeList[$i]["id"]=$row['id'];
			$storeList[$i]["vid"]=$row["vid"];
			$storeList[$i]["name"]=$row["name"];
			$i++;
		}
		return json_encode(["code"=>"200","msg_type"=>"rsp_reqStoreListOnly","storeList"=>$storeList]);
	}


	/**
	 * 获取距离指定地点距离最近的店的信息。
	 **/
	function getClosestStoreFrDB($con,$lat,$lng){
		/*$_SESSION["cur_pos_lat"]=$lat;
		$_SESSION['cur_pos_lng']=$lng;*/
		$sql = "select * from t_store where status=".ALL_ACTIVE;

		$res = mysqli_query($con,$sql);
		$closestDis= -1;
		$closestStore = [];

		while($row = mysqli_fetch_assoc($res)){
			$cur_dis = getDistance($lat,$lng,$row["lat"],$row["lng"]);
			if(($cur_dis<$closestDis)||($closestDis== -1)){
				$closestStore = $row;
				$closestStore["distance"]=$cur_dis;
				$closestDis = $cur_dis;
			}
		}
		return json_encode(["code"=>"200","msg_type"=>"rsp_closestStore","store_id"=>$closestStore["id"],"storeName"=>$closestStore["name"],"address"=>$closestStore["address"].", ".$closestStore["city"].", ".$closestStore["PC"],"distance"=>$closestStore["distance"]]);
	}


	/**
	 * 根据指定点与所有店面距离的远近，获取所有店面的列表，距离近的排在前面
	 **/
	function getStoreList($con,$lat,$lng){
		$storeList = getStoreArray($con,$lat,$lng);

		return json_encode(["code"=>"200","msg_type"=>"rsp_storeList","storeList"=>$storeList]);
	}

	/**
	 * 设置取餐店面：设置_COOKIE['pickupSID'];返回取餐店面的信息。
	 **/
	function setPickupStore($con,$sid){
		$sql = "select * from t_store where id=".$sid." and status=".ALL_ACTIVE;
		$res = mysqli_query($con,$sql);

		if(mysqli_num_rows($res) == 0){
			return json_encode(["code"=>"104","description"=>"Invalid store ID"]);
		}else{
			$row = mysqli_fetch_assoc($res);
			//$_SESSION['pickupSID'] = $sid;
			cookie("pickupSID",$sid,31536000);
			return json_encode(["code"=>"200","msg_type"=>"rsp_setPickupStore","store_id"=>$row["id"],"storeName"=>$row["name"],"address"=>$row["address"].", ".$row["city"].", ".$row["PC"],"lat"=>$row["lat"],"lng"=>$row["lng"]]);
		}
	}

	function reqVerifyCode($con,$cell_num,$cln_name=NULL,$dob=NULL){
		$sql = "select * from t_users where mobile='$cell_num'";
		$_SESSION['MY_CELL'] = $cell_num;
		$res = mysqli_query($con,$sql);

		$retn = ["code"=>"200",
				"msg_type"=>"rsp_reqVerifyCode",
				"cell_num"=>$cell_num,
				"AS"=>"existed"];
		if(mysqli_num_rows($res) == 0){
			/*new phone number.*/
			$cus_id = createNewCusID($con);
			$ref_by = isset($_SESSION['ref'])?($_SESSION['ref']):"000000000";
			$sql = "insert into t_users (cus_ID,name,dob,type,mobile,ref_by) values ('$cus_id','$cln_name','$dob','".USER_ROLE_CLIENT."','$cell_num','$ref_by')";
			$res = mysqli_query($con,$sql);
			$retn['AS'] = "new"; 
			$retn['cus_id'] = $cus_id;
		}else{
			$row = mysqli_fetch_assoc($res);
			$retn['cus_id'] = $row["cus_ID"];
			if((isset($cln_name))&&(trim($cln_name)!="")){
				$sql = "update t_users set name='".$cln_name."' where cus_ID='".$row["cus_ID"]."'";		
				mysqli_query($con,$sql);
			}else{
				$cln_name = $row['name'];
			}
		}
		$ver_code = sendSMSLoginVerifyCode($con,$cell_num);
		$retn['cus_name']=$cln_name;
		$_SESSION['CUS_NAME']=$cln_name;
		$_SESSION['CUS_ID'] = $retn['cus_id'];
		$retn['pin_length'] = strlen($ver_code);
		return json_encode($retn);
	}

	function checkVerifyCode($con,$veri_code){
		$retn = ["code"=>"200",
				"msg_type"=>"rsp_sendVerifyCode"];
		if($_SESSION['v_code']==$veri_code){
			$retn['veri_rslt']="success";
			cookie("MY_CELL", $_SESSION['MY_CELL'],31536000);
			cookie("CUS_ID",$_SESSION['CUS_ID'],31536000);
			$token = rand_digits(48);
			cookie("TOKEN",$token,31536000);
			$sql = "update t_users set token='".$token."' where mobile='".$_SESSION['MY_CELL']."'";
			$res = mysqli_query($con,$sql);
			$retn['my_cell'] = $_COOKIE['MY_CELL'];
			$retn['cus_name'] = $_SESSION['CUS_NAME'];
			$retn['cus_ID'] = $_COOKIE['CUS_ID'];
		}else{
			$retn['veri_rslt'] = "failed";
		}

		return json_encode($retn);
	}

    /**
     * cus_ID格式是YYYYMMDDXXXX;每天最多接受9999个新手机号码
     * */
	function createNewCusID($con){
		return createID($con,"t_users","cus_ID",12);
	}

	function sendSMSLoginVerifyCode($con,$cell_num){
		$verify_code = rand_digits(6);
		$_SESSION['v_code'] = $verify_code;
		$sms_msg = "You MogeTee account login verification code is: ".$verify_code;
		$sql = "select item,value from t_sys_config where item='sms_sc' or item='sms_account_user' or item='sms_account_token'";
		$res = mysqli_query($con,$sql);
		$sms_sc = [];
		while($row = mysqli_fetch_assoc($res)){
			$sms_sc[$row["item"]] = $row["value"];
		}
		$sms_data = ["clientID"=>$sms_sc['sms_account_user'],
					 "token"=>$sms_sc['sms_account_token'],
					 "req_type"=>"send_sms_req",
					 "to"=>$cell_num,
					 "body"=>$sms_msg,
					 "msg_id"=>createSMSMsgID($con)];
		$res = requestPost($sms_sc['sms_sc'],json_encode($sms_data));

		$sql = "insert into t_sms_record (msg_id,send_to,msg) values ('".$sms_data["msg_id"]."','$cell_num','$sms_msg')";
		mysqli_query($con,$sql);
		return $verify_code;
	}

	function createSMSMsgID($con){
		return createID($con,"t_SMS_record","msg_id",13);
	}

	/**
	 * 创建ID，ID格式是YYYYMMDDXXXXXXXXX,ID的长度由$id_length定义,最小是9位，最大是17位。
	 * $db_table是设置在哪个DB表定义ID, 
	 * $tbl_field_id是设置该表中哪个域定义id。
	 * */
	function createID($con,$db_table,$tbl_field_id,$id_length){
		$p1 = adjustDateFmt();
		$sql = "select * from $db_table where $tbl_field_id like \"$p1%\"";
		$res = mysqli_query($con,$sql);
		$p2 = mysqli_num_rows($res);
		$p2 = "00000000".(string)($p2+1);
		$id = ((($id_length)>8)&&(($id_length)<18))?$p1.substr($p2, -($id_length-8)):-1;

		return $id;
	}

	/**
	 * AS - Account Status
	 * */
	function checkNewCus($con,$cell_num){
		$sql = "select * from t_users where mobile='$cell_num'";
		$res = mysqli_query($con,$sql);
		$retn = ["code"=>"200",
				"msg_type"=>"rsp_isNewCus",
				"cell_num"=>$cell_num,
				"AS"=>"existed"];
		if(mysqli_num_rows($res) == 0){
			/*new phone number.*/
			$retn['AS'] = "new"; 
		}else{
			$row = mysqli_fetch_assoc($res);
			if(trim($row["name"])==""){
				$retn['AS'] = "new";
			} 
		}

		return json_encode($retn);
	}

	function appCoupon($con,$cupn_code,$cid,$sid){
		$cupn = new cupn($con,$cupn_code);
		$check = $cupn->checkAvailability($cid,$sid);
		if($check['valid']){
			$_SESSION['COUPON'] = $cupn->getCouponInfo();
			unset($_SESSION['CARD']);
			$retn = ["code"=>"200","msg_type"=>"rsp_applyCupnCard","coupon_code"=>$_SESSION['COUPON']['cupn_code']];
		}else{
			$retn = ["code"=>"112","description"=>"coupon invalid, error code:".$check["code"]];
		}

		return json_encode($retn);
	}

	function appCard($con,$info){
		switch($info[0]){
			case CARD_KEY_POINT:
				$card = new pointCard($con,$info[1]);
			break;
			case CARD_KEY_PERCENT:
				$card = new discountCard($con,$info[1],$info[2]);
			break;
			case CARD_KEY_CASH_VALUE:
				$card = new giftCard($con,$info[1],$_SESSION["CUS_ID"],$info[2]);
				break;
		}
		if($card->isValidToUse()){
			$_SESSION['CARD']=$card->getCardInfo();
			unset($_SESSION['COUPON']);
			$retn = ["code"=>"200","msg_type"=>"rsp_applyCupnCard","crd_id"=>$_SESSION['CARD']["crd_id"]];
		}else{
			$retn = ["code"=>"113","description"=>"Invalid to use the card."];
		}
		return json_encode($retn);
	}

	function updateProfile($con){
		$set_val ="";
		$data = [];
		if($_SESSION["CLNT_LOGIN"]){
			if(isset($_POST["name"])){
				$_SESSION['CNT_NAME'] = get_safe_value($con,$_POST["name"]);
				$set_val .= ",name='".$_SESSION['CNT_NAME']."'";
				$data["name"] = $_SESSION['CNT_NAME'];
			}
			if(isset($_POST["email"])){
				$set_val .= ",email='".get_safe_value($con,$_POST["email"])."'";
				$data["email"] = get_safe_value($con,$_POST["email"]);
			}
			if(isset($_POST["password"])){
				$set_val .= ",password='".get_safe_value($con,$_POST["password"])."'";
				$data["password"] = "password changed";
			}
			$set_val = substr($set_val,1);

			$sql = "update t_users set ".$set_val." where cus_ID='".$_SESSION["CUS_ID"]."'";
			mysqli_query($con,$sql);
			$retn = json_encode(["code"=>"200","msg_type"=>"rsp_updateUsrProfile","data"=>$data]);
		}else{
			$retn = json_encode(["code"=>"113","description"=>"Please login first! Then you can update profile information."]);
		}

		return $retn;
	}

	function removeCupnCard($con){
		unset($_SESSION['COUPON']);
		unset($_SESSION['CARD']);
		return json_encode(["code"=>"200","msg_type"=>"rsp_reqCupnCardRem"]);
	}
?>
Creat By MiNi SheLL
Email: devilkiller@gmail.com