HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //home/awaldron/_accomods/_apibak/admin/_helpers.php
<?php

function connectDB() {
    $db = new mysqli('localhost', 'awaldron_accomods', '$7FuE1MuvBp', 'awaldron_accomods');
    if ($db->connect_error) {
        die("Connection failed: " . $db->connect_error);
    }
    return $db;
}

function get_schools() {
    $lines = file('/home/awaldron/_accomods/api.accomods.com/schoolCodes.txt');
    sort($lines);
    $out = [];
    foreach ($lines as $school) {
        $s = explode('||',$school);
        $out[] = [ trim($s[0]), trim($s[1]) ];
    }
    return $out;
}

function get_expiration_date( $school_code ) {
    $db = connectDB();
    $sql = "SELECT expires FROM users WHERE school_code='".$school_code."' LIMIT 0,1";
    $result = $db->query($sql);
    $row = $result->fetch_assoc();
    return $row['expires'];
}

function get_user( $uid ) {
    // Create connection
    $db = connectDB();
    $sql = "SELECT id, email, fname, lname, phone, school_code, school_name, expires, access, date_registered FROM users WHERE id=".$uid;
    $result = $db->query($sql);
    $u = $result->fetch_assoc();
    return $u;
}

function update_user( $data ) {
    if ($data['school']==1) {
        $school_name = $data['school_name'];
        $school_code = '';
        $expires = $data['expires'];
    } else {
        $school = explode('||', $data['school']);
        $school_name = $school[0];
        $school_code = $school[1];
        $expires = get_expiration_date( $school_code );
    }

    $upd = "UPDATE users SET email='".trim($data['email'])."', 
                             fname='".trim($data['fname'])."', 
                             lname='".trim($data['lname'])."', 
                             phone='".trim($data['phone'])."', 
                             school_code='".trim($school_code)."', 
                             school_name='".trim($school_name)."', 
                             expires='".trim($expires)."' 
            WHERE id=".$data['id'];

    $db = connectDB();

    if ($db->query($upd) === true) {
        return 1;
    } else {
        return -1;
    }
}

function update_password( $data ) {
    $upd = "UPDATE users SET pass='".md5(trim($data['pass']))."', 
                             ptxt='".trim($data['pass'])."' 
            WHERE id=".$data['id'];

    $db = connectDB();

    if ($db->query($upd) === true) {
        return 1;
    } else {
        return -1;
    }
}

function create_user( $data ) {
    if ($data['school']==1) {
        $school_name = $data['school_name'];
        $school_code = '';
        $expires = $data['expires'];
    } else {
        $school = explode('||', $data['school']);
        $school_name = $school[0];
        $school_code = $school[1];
        $expires = get_expiration_date( $school_code );
    }

    $ins = "INSERT INTO users (`email`, `fname`,`lname`,`phone`,`school_code`,`school_name`,`expires`,`pass`,`ptxt`) VALUES ( 
                '".trim($data['email'])."', '".trim($data['fname'])."', '".trim($data['lname'])."', '".$data['phone']."', '".$school_code."', '".$school_name."', 
                '".$expires."', '".md5(trim($data['pass']))."', '".trim($data['pass'])."')";

    $db = connectDB();

    if ($db->query($ins) === true) {
        return 1;
    } else {
        return -1;
    }
}

function get_last_uid() {
    $db = connectDB();
    $sql = "SELECT MAX(id) as maxid FROM users";
    $result = $db->query($sql);
    $u = $result->fetch_assoc();
    return $u['maxid'];
}

function set_user_access( $access, $id ) {
    $upd = "UPDATE users SET access=".$access." WHERE id=".$id;

    $db = connectDB();

    if ($db->query($upd) === true) {
        return 1;
    } else {
        return -1;
    }
}
?>