HEX
Server: Apache/2.4.46 (Ubuntu)
System: Linux localhost 5.11.0-49-generic #55-Ubuntu SMP Wed Jan 12 17:36:34 UTC 2022 x86_64
User: root (0)
PHP: 7.4.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/company_app/include/functions.php
<?php
if (session_status() == PHP_SESSION_NONE) {
    session_start();
 }
require 'config.php';
$option = isset($_GET['option']) ? $_GET['option'] : '';

switch ($option) 
{
    case "login":
          login();
          break;  
    case "add_company":
          add_company();
          break;
    case "edit_company":
          edit_company();
          break;
    case "delete_company":
          delete_company();
          break;
    case "detail_company":
          detail_company();
          break;       
    case "logout":
        logout();
            break;   
                
    default:
      echo "Invalid function";
}

function login()
{
    extract($_POST);    
    $email = isset($email) ? $email : '';
    $password = isset($password) ? $password : '';
 
    if($email != 'admin')
    {
        $response = array();
        $response['errorcode'] = '201';
        $response['errormessage'] = 'Please enter valid email';
         
        echo json_encode($response);
    }
    else if($password != 'admin@1234')
    {
        $response = array();
        $response['errorcode'] = '202';
        $response['errormessage'] = 'Please enter valid password';         
        echo json_encode($response);
    }
    else
    {
        $_SESSION["email"] = $email;
        $response = array();
        $response['errorcode'] = '200';
        $response['errormessage'] = 'Success';         
        echo json_encode($response); 
    }
 
}

function logout()
{     
    if (session_status() != PHP_SESSION_NONE) {
        session_destroy();
     }
     header('Location: '.getParentDir().'/index.html');
}

function add_company()
{
    extract($_POST);    
    $company_id = isset($company_id) ? $company_id : '';
    $company_name = isset($company_name) ? $company_name : '';
    $end_url = isset($end_url) ? $end_url : '';
    $status = isset($status) ? $status : '';
    $status = '1';
     
    if($company_id == '')
    {
        $message = "company id is empty";
        echo $message;
    }
    else if($end_url == '')
    {
        $message = "end url is empty";
        echo $message;
    }
    else
    {
        global $conn;
        $sql = "INSERT INTO companies (company_id, company_name, end_url, status)
        VALUES ('".$company_id."', '".$company_name."', '".$end_url."', '".$status."')";

        if ($conn->query($sql) === TRUE) {
        $message = "New record created successfully";
        header('Location: '.getParentDir().'/company/dashboard.php?error='.$message);
        } else {
        echo "Error: " . $sql . "<br>" . $conn->error;
        }
        $conn->close();
    }    
}

function edit_company()
{
    extract($_POST);    
    $company_id = isset($company_id) ? $company_id : '';
    $company_name = isset($company_name) ? $company_name : '';
    $end_url = isset($end_url) ? $end_url : '';
    $status = isset($status) ? $status : '';
    $scheduler_time = isset($scheduler_time) ? $scheduler_time : '';
    
     
    if($company_id == '')
    {
        $message = "companyid is empty";
        echo $message;
    }     
    else
    {
        global $conn;
        $sql = "update companies set company_id = '".$company_id."', company_name = '".$company_name."', scheduler_time = '".$scheduler_time."', end_url = '".$end_url."', status = '".$status."' where company_id = '".$company_id."'";
        if ($conn->query($sql) === TRUE) {
        $message = "record updated successfully";
        header('Location: '.getParentDir().'/company/dashboard.php?error='.$message);
        } else {
        echo "Error: " . $sql . "<br>" . $conn->error;
        }
        $conn->close();
    }    
}

function delete_company()
{
    extract($_POST);    
    $company_id = isset($company_id) ? $company_id : '';     
  
    if($company_id == '')
    {
        $message = "companyid is empty";
        echo $message;
    }     
    else
    {
        global $conn;
        $sql = "Delete from companies where company_id = '".$company_id."'";
        if ($conn->query($sql) === TRUE) {
        echo $message = "record deleted successfully";
        //header('Location: '.getParentDir().'/company/dashboard.php?error='.$message);
        } else {
        echo "Error: " . $sql . "<br>" . $conn->error;
        }
        $conn->close();
    }    
}

function detail_company()
{
    
    $company_id = isset($_GET['company_id']) ? $_GET['company_id'] : '';     
  
    if($company_id == '')
    {
        $message = "companyid is empty";
        echo $message;
    }     
    else
    {         
        global $conn;
        $sql = "SELECT * FROM companies where company_id = '$company_id' and status = '1' order by id desc limit 0,1";
        $result = $conn->query($sql);
        $company_id = '';
        $company_name = '';
        $end_url = '';
        $status = '';
        if ($result->num_rows > 0) {
            // output data of each row
            $k=1;
            while($row = $result->fetch_assoc()) 
            {
                $company_id = $row['company_id'];
                $company_name = $row['company_name'];
                $end_url = $row['end_url'];
                $status = $row['status'];
            }
            $response = array();
            $response['errorcode'] = '200';
            $response['errormessage'] = 'Success';
            $response['company_id'] = $company_id;
            $response['company_name'] = $company_name;
            $response['end_url'] = $end_url;       
            echo json_encode($response);
        }
        else
        {
            $response = array();
            $response['errorcode'] = '204';
            $response['errormessage'] = 'Record not found';            
            echo json_encode($response);
        }
        $conn->close();        
    }    
}

function url(){
    if(isset($_SERVER['HTTPS'])){
        $protocol = ($_SERVER['HTTPS'] && $_SERVER['HTTPS'] != "off") ? "https" : "http";
    }
    else{
        $protocol = 'http';
    }
    return $protocol . "://" . $_SERVER['HTTP_HOST'];
}

function getParentDir()
{
    $parent_dir = dirname($_SERVER['PHP_SELF']);    
    $cur_dir = explode('/', $parent_dir);
    if(count($cur_dir) > 0)
    {
        return url().'/'.$cur_dir[1];
    }    
    return '';
}

function generateRandomNumber($digit){
$digit = 4;
    return substr(str_shuffle(str_repeat($x='0123456789',$digit)),0,$digit);
}

?>