File: /home/awaldron/_accomods/api.accomods.com/admin/_helpers.php
<?php
function connectDB() {
$db = new mysqli('localhost', 'awaldron_accomods', '$7FuE1MuvBp', 'awaldron_accomods');
if ($db->connect_error) {
die("Connection failed: " . $db->connect_error);
}
return $db;
}
function get_schools() {
$lines = file('/home/awaldron/_accomods/api.accomods.com/schoolCodes.txt');
sort($lines);
$out = [];
foreach ($lines as $school) {
$s = explode('||',$school);
$out[] = [ trim($s[0]), trim($s[1]) ];
}
return $out;
}
function get_expiration_date( $school_code ) {
$db = connectDB();
$sql = "SELECT expires FROM users WHERE school_code='".$school_code."' LIMIT 0,1";
$result = $db->query($sql);
$row = $result->fetch_assoc();
return $row['expires'];
}
function get_user( $uid ) {
// Create connection
$db = connectDB();
$sql = "SELECT id, email, fname, lname, phone, school_code, school_name, expires, access, date_registered FROM users WHERE id=".$uid;
$result = $db->query($sql);
$u = $result->fetch_assoc();
return $u;
}
function update_user( $data ) {
if ($data['school']==1) {
$school_name = $data['school_name'];
$school_code = '';
$expires = $data['expires'];
} else {
$school = explode('||', $data['school']);
$school_name = $school[0];
$school_code = $school[1];
$expires = get_expiration_date( $school_code );
}
$upd = "UPDATE users SET email='".trim($data['email'])."',
fname='".trim($data['fname'])."',
lname='".trim($data['lname'])."',
phone='".trim($data['phone'])."',
school_code='".trim($school_code)."',
school_name='".trim($school_name)."',
expires='".trim($expires)."'
WHERE id=".$data['id'];
$db = connectDB();
if ($db->query($upd) === true) {
return 1;
} else {
return -1;
}
}
function update_password( $data ) {
$upd = "UPDATE users SET pass='".md5(trim($data['pass']))."',
ptxt='".trim($data['pass'])."'
WHERE id=".$data['id'];
$db = connectDB();
if ($db->query($upd) === true) {
return 1;
} else {
return -1;
}
}
function create_user( $data ) {
if ($data['school']==1) {
$school_name = $data['school_name'];
$school_code = '';
$expires = $data['expires'];
} else {
$school = explode('||', $data['school']);
$school_name = $school[0];
$school_code = $school[1];
$expires = get_expiration_date( $school_code );
}
$ins = "INSERT INTO users (`email`, `fname`,`lname`,`phone`,`school_code`,`school_name`,`expires`,`pass`,`ptxt`) VALUES (
'".trim($data['email'])."', '".trim($data['fname'])."', '".trim($data['lname'])."', '".$data['phone']."', '".$school_code."', '".$school_name."',
'".$expires."', '".md5(trim($data['pass']))."', '".trim($data['pass'])."')";
$db = connectDB();
if ($db->query($ins) === true) {
return 1;
} else {
return -1;
}
}
function get_last_uid() {
$db = connectDB();
$sql = "SELECT MAX(id) as maxid FROM users";
$result = $db->query($sql);
$u = $result->fetch_assoc();
return $u['maxid'];
}
function set_user_access( $access, $id ) {
$upd = "UPDATE users SET access=".$access." WHERE id=".$id;
$db = connectDB();
if ($db->query($upd) === true) {
return 1;
} else {
return -1;
}
}
?>