JezK

Edit File: functions.php

<?php

// Source - https://stackoverflow.com/a
// Posted by Fancy John, modified by community. See post 'Timeline' for change history
// Retrieved 2026-01-27, License - CC BY-SA 4.0

// ini_set('display_errors', '1');
// ini_set('display_startup_errors', '1');
// error_reporting(E_ALL);

class Functions
{
	function __construct()
	{
		require_once dirname(__FILE__) . '/dbconnect.php';
		// opening db connection
		$db = new DbConnect();
		$this->con = $db->connect();
	}

function getBaseURL()
	{
		$protocol = ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
		$url = ($protocol . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
		$url1 = explode('BC-BF-Admin', $url);
		return $url1[0];
	}

function verifyOtp($userId, $otp)
	{
		// Prepare the SQL statement with placeholders
		$stmt = $this->con->prepare("SELECT * FROM bcAdmin WHERE id = ?");

if (!$stmt) {
			// Handle prepare error if needed
			return 0;
		}
		// Bind parameters (both are strings)
		$stmt->bind_param("i", $userId);
		// Execute the prepared statement
		$stmt->execute();
		// Get the result set from the statement
		$result = $stmt->get_result();

// Fetch the associated row
		$data = $result->fetch_assoc();

if ($data['otp'] == $otp) {
			return 1;
		} else {
			return 0;
		}
	}

function isValidMonthReport($userID, $reportMonth, $reportYear)
	{
		$query = "select * from bcUserMonthlyReport where userID = " . $userID . " and reportMonth = '" . $reportMonth . "' and reportYear = '" . $reportYear . "' ";
		$cmd = mysqli_query($this->con, $query);
		return mysqli_num_rows($cmd);
	}

function isValidUserReport($reportID, $userID)
	{
		$query = "select * from bcUserMonthlyReport where id = " . $reportID . " and userID = " . $userID;
		$cmd = mysqli_query($this->con, $query);
		return mysqli_num_rows($cmd);
	}

function getDashboardData()
	{
		$query = "select * from bcUsers where submissionStatus = 1 and registrationStatus = 0 order by id desc";
		$cmd = mysqli_query($this->con, $query);
		$pendingApplications = mysqli_num_rows($cmd);
		$query = "SELECT  * FROM    bcRegistrations WHERE   DATE(expiryDate) <= DATE_SUB(NOW(), INTERVAL -3 MONTH) and Not Date(expiryDate) < date(NOW())";
		$cmd = mysqli_query($this->con, $query);
		$renewalApplications = mysqli_num_rows($cmd);
		$query = "select * from bcRegistrations where applicationType = 1";
		$cmd = mysqli_query($this->con, $query);
		$totalFacilitators = mysqli_num_rows($cmd);
		$query = "select * from bcRegistrations where applicationType = 2";
		$cmd = mysqli_query($this->con, $query);
		$totalCoordinators = mysqli_num_rows($cmd);
		return array("pendingApplications" => $pendingApplications, "renewalApplications" => $renewalApplications, "totalFacilitators" => $totalFacilitators, "totalCoordinators" => $totalCoordinators);
	}

function isUserExpired($userID)
	{
		$query = "SELECT * FROM bcRegistrations WHERE DATE(expiryDate) < date(NOW()) and userID = " . $userID;
		$cmd = mysqli_query($this->con, $query);
		return mysqli_num_rows($cmd);
	}

/********** Note ******************/
		//if (user already expired)
			//add expiryDate from currentDate;
		//else
			//add expiryDate from actual expiryDate
		/********** Note ******************/
		$query = "select * from bcUsers where id = " . $userID;
		$cmd = mysqli_query($this->con, $query);
		$userDetails = mysqli_fetch_assoc($cmd);
		$applicationType = $userDetails["applicationType"];
		$expiry = ($applicationType == 1) ? '+2 years' : '+3 years';
		$isUserExpired = $this->isUserExpired($userID);
		if ($isUserExpired) {
			$expiryDate = date('Y-m-d H:i:s', strtotime($expiry, strtotime(Date('Y-m-d H:i:s'))));
		} else {
			$expiryDate = date('Y-m-d H:i:s', strtotime($expiry, strtotime($userDetails["expiryDate"])));
		}
		$expiryDate = date('Y-m-d H:i:s', strtotime($expiry, strtotime(Date('Y-m-d H:i:s'))));
		$query = "update bcUsers set expiryDate = '" . $expiryDate . "',renewalStatus = 1 where id = " . $userID;
		$cmd = mysqli_query($this->con, $query);
		$query = "update bcRegistrations set expiryDate = '" . $expiryDate . "' where userID = " . $userID;
		$cmd = mysqli_query($this->con, $query);
		if ($cmd) {
			return 1; //success
		} else {
			return -3; //error
		}
	}

function updateSignatureStatus($userID, $managementID, $status)
	{
		$query = "update authorisedSignatures set status = " . $status . " where userID = " . $userID . " and managementID = " . $managementID;
		$cmd = mysqli_query($this->con, $query);
	}
	function deleteOtherData($userID)
	{
		//$query = "delete othername,otherDescription,otherRemarks from bcUsers where id = ".$userID;
		$query = "update bcUsers set othername ='',otherDescription ='',otherRemarks=''  where id =" . $userID;
		$cmd = mysqli_query($this->con, $query);
	}

function sendSMS($mobile, $message, $template_id = "1707161726833412527")
	{
		$api_key     = "C7U9UJtI";
		$sender_id   = "NABFIN";
		$entity_id   = "1701159306599716894";

// Build query string safely
		$query = http_build_query([
			'key'        => $api_key,
			'to'         => $mobile,
			'from'       => $sender_id,
			'body'       => $message,
			'entityid'   => $entity_id,
			'templateid' => $template_id
		]);

$url = "https://api.onex-aura.com/api/sms?" . $query;

$ch = curl_init();

curl_setopt_array($ch, [
			CURLOPT_URL            => $url,
			CURLOPT_RETURNTRANSFER => true,
			CURLOPT_SSL_VERIFYPEER => false,
			CURLOPT_TIMEOUT        => 30
		]);

$response = curl_exec($ch);

// Handle cURL error
		if ($response === false) {
			$error = curl_error($ch);
			curl_close($ch);
			return [
				'status'  => 'error',
				'message' => $error
			];
		}

$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
		curl_close($ch);

return [
			'http_code' => $httpCode,
			'response'  => $response
		];
	}

function randomOtp()
	{
		return rand(100000, 999999);
	}

function updateOTP($id, $otp)
	{
		$stmt = $this->con->prepare(
			"UPDATE bcAdmin SET otp = ? WHERE id = ?"
		);

if (!$stmt) {
			return -3;   // prepare failed
		}

$stmt->bind_param("si", $otp, $id);

$exec = $stmt->execute();

return $exec ? 1 : -3;
	}
}