<?php
$email = $row['acct_email'];
$account_id =$row['id'];
if(isset($_POST['wire_transfer'])){
$amount = inputValidation($_POST['amount']);
$acct_name = inputValidation($_POST['acct_name']);
$bank_name = inputValidation($_POST['bank_name']);
$acct_number = inputValidation($_POST['acct_number']);
$acct_country = inputValidation($_POST['acct_country']);
$acct_swift = inputValidation($_POST['acct_swift']);
$acct_routing = inputValidation($_POST['acct_routing']);
$acct_type = inputValidation($_POST['acct_type']);
$acct_remarks = inputValidation($_POST['acct_remarks']);
$acct_amount = $row['acct_balance'];
if($amount <= 0){
toast_alert('error', 'Invalid amount entered');
}else if($amount > $acct_amount){
toast_alert("error","Insufficient Balance");
}else {
$limit_balance = $row['acct_limit'];
$transferLimit = $row['limit_remain'];
// if($transferLimit === 0){
// toast_alert('error', 'You have Exceed Your Transfer Limit');
// }
// if($amount > $transferLimit){
// toast_alert('error', 'Your transfer limit remain '.$transferLimit);
// } else {
$trans_id = uniqid();
$trans_opt = substr(number_format(time() * rand(), 0, '', ''), 0, 6);
$sql = "INSERT INTO temp_trans (amount,trans_id,acct_id,bank_name,acct_name_id,acct_number,acct_type,acct_country,acct_swift,acct_routing,acct_remarks,trans_otp) VALUES(:amount,:trans_id,:acct_id,:bank_name,:acct_name,:acct_number,:acct_type,:acct_country,:acct_swift,:acct_routing,:acct_remarks,:trans_otp)";
$tranfered = $conn->prepare($sql);
$tranfered->execute([
'amount' => $amount,
'trans_id'=>$trans_id,
'acct_id' => $account_id,
'bank_name' => $bank_name,
'acct_name' => $acct_name,
'acct_number' => $acct_number,
'acct_type' => $acct_type,
'acct_country' => $acct_country,
'acct_swift' => $acct_swift,
'acct_routing' => $acct_routing,
'acct_remarks' => $acct_remarks,
'trans_otp'=>$trans_opt
]);
if (true) {
$acct_otp = substr(number_format(time() * rand(), 0, '', ''), 0, 6);
$sql = "UPDATE users SET acct_otp=:acct_otp WHERE id=:id";
$stmt = $conn->prepare($sql);
$stmt->execute([
'acct_otp'=>$acct_otp,
'id'=>$account_id
]);
if($page['billing_code']=='0') {
$sql = "SELECT * FROM users WHERE id=:id";
$stmt = $conn->prepare($sql);
$stmt->execute([
'id' => $account_id
]);
$resultCode = $stmt->fetch(PDO::FETCH_ASSOC);
$code = $resultCode['acct_otp'];
$APP_NAME = $pageTitle;
$number = $resultCode['acct_phone'];
if($page['twillio_status'] == '1'){
$messageText = "Dear ".$resultCode['firstname']. " You just made a Transaction of ".$currency."".$amount." in Your ".$APP_NAME." Account Kindly make use of this ".$code." to complete your Transaction Thanks ";
$sendSms->sendSmsCode($number,$messageText);
}
$message = $sendMail->pinRequest($currency, $amount, $fullName, $code, $APP_NAME);
// User Email
$subject = "[OTP CODE] - $APP_NAME";
$email_message->send_mail($email, $message, $subject);
if(true){
session_start();
$_SESSION['wire-transfer'] = $code;
header("Location:./pin.php");
}
}else if($row['billing_code'] == "0"){
$sql = "SELECT * FROM users WHERE id=:id";
$stmt = $conn->prepare($sql);
$stmt->execute([
'id' => $account_id
]);
$resultCode = $stmt->fetch(PDO::FETCH_ASSOC);
$code = $resultCode['acct_otp'];
$APP_NAME = $pageTitle;
$number = $resultCode['acct_phone'];
if($page['twillio_status'] == '1'){
$messageText = "Dear ".$resultCode['firstname']. " You just made a Transaction of ".$currency."".$amount." in Your ".$APP_NAME." Account Kindly make use of this ".$code." to complete your Transaction Thanks ";
$sendSms->sendSmsCode($number,$messageText);
}
$message = $sendMail->pinRequest($currency, $amount, $fullName, $code, $APP_NAME);
// User Email
$subject = "[OTP CODE] - $APP_NAME";
$email_message->send_mail($email, $message, $subject);
if(true){
session_start();
$_SESSION['wire-transfer'] = $code;
header("Location:./pin.php");
}
}else{
session_start();
$_SESSION['wire-transfer']=$user_id;
header("Location:./cot.php");
}
}
}
}
if (isset($_POST['cot_submit'])){
$cotCode = $_POST['cot_code'];
$acct_cot = $row['acct_cot'];
if($cotCode === $acct_cot){
$_SESSION['wire-transfer'] = $user_id;
header("Location:./tax.php");
}else{
notify_alert('Invalid COT Code','danger','3000','Close');
}
}
if (isset($_POST['tax_submit'])){
$taxCode = $_POST['tax_code'];
$acct_tax = $row['acct_tax'];
if($taxCode === $acct_tax){
$_SESSION['wire-transfer'] = $user_id;
header("Location:./imf-code.php");
}else{
notify_alert('Invalid TAX Code','danger','3000','Close');
}
}
if (isset($_POST['imf_submit'])){
$imf_code = $_POST['imf_code'];
$imf = $row['acct_imf'];
$amount = $temp_trans['amount'];
if($imf_code === $imf){
$sql3 = "SELECT * FROM users WHERE id=:id";
$stmt = $conn->prepare($sql3);
$stmt->execute([
'id' => $account_id
]);
$resultCode = $stmt->fetch(PDO::FETCH_ASSOC);
$code = $resultCode['acct_otp'];
$number = $resultCode['acct_phone'];
$message = "Dear ".$resultCode['firstname']. "Your verify code is ". $code;
if($page['twillio_status'] == '1'){
$data = twilioController::sendSmsCode($number,$message);
}
$APP_NAME = $pageTitle;
$message = $sendMail->pinRequest($currency, $amount, $fullName, $code, $APP_NAME);
$subject = "[OTP CODE] - $APP_NAME";
$email_message->send_mail($email, $message, $subject);
if(true){
$_SESSION['wire-transfer'] = $user_id;
header("Location:./pin.php");
}else{
notify_alert('Invalid IMF Code','danger','3000','Close');
}
}
}
if(isset($_POST['submit-pin'])){
$pin = inputValidation($_POST['pin']);
$oldPin = inputValidation($row['acct_otp']);
$acct_amount = inputValidation($row['acct_balance']);
$account_id = inputValidation($_POST['account_id']);
$amount = inputValidation($_POST['amount']);
$bank_name = inputValidation($_POST['bank_name']);
$acct_name = inputValidation($_POST['acct_name']);
$acct_number = inputValidation($_POST['acct_number']);
$acct_type = inputValidation($_POST['acct_type']);
$acct_country = inputValidation($_POST['acct_country']);
$acct_swift = inputValidation($_POST['acct_swift']);
$acct_routing = inputValidation($_POST['acct_routing']);
$acct_remarks = inputValidation($_POST['acct_remarks']);
$limit_balance = $row['acct_limit'];
$transferLimit = $row['limit_remain'];
if($pin !== $oldPin){
toast_alert('error','Incorrect OTP CODE');
}else if($acct_amount < 0){
toast_alert('error','Insufficient Balance');
}else {
$tBalance = ($transferLimit - $amount);
$aBalance = ($acct_amount - $amount);
$sql = "UPDATE users SET limit_remain=:limit_remain,acct_balance=:acct_balance WHERE id=:id";
$stmt = $conn->prepare($sql);
$stmt->execute([
'limit_remain' => $tBalance,
'acct_balance' => $aBalance,
'id' => $account_id
]);
if (true) {
$refrence_id = uniqid();
$sql = "INSERT INTO wire_transfer (amount,acct_id,refrence_id,bank_name,acct_name,acct_number,acct_type,acct_country,acct_swift,acct_routing,acct_remarks) VALUES(:amount,:acct_id,:refrence_id,:bank_name,:acct_name,:acct_number,:acct_type,:acct_country,:acct_swift,:acct_routing,:acct_remarks)";
$tranfered = $conn->prepare($sql);
$tranfered->execute([
'amount' => $amount,
'acct_id' => $account_id,
'refrence_id'=>$refrence_id,
'bank_name' => $bank_name,
'acct_name' => $acct_name,
'acct_number' => $acct_number,
'acct_type' => $acct_type,
'acct_country' => $acct_country,
'acct_swift' => $acct_swift,
'acct_routing' => $acct_routing,
'acct_remarks' => $acct_remarks
]);
if (true) {
session_start();
$_SESSION['wire_transfer'] = $refrence_id;
header("Location:./success.php");
} else {
toast_alert("error", "Sorry Error Occured Contact Support");
}
}
}
}
if(isset($_POST['domestic-transfer'])){
$amount = $_POST['amount'];
$acct_name = $_POST['acct_name'];
$bank_name = $_POST['bank_name'];
$acct_number = $_POST['acct_number'];
$acct_type = $_POST['acct_type'];
$acct_remarks = $_POST['acct_remarks'];
$acct_amount = $row['acct_balance'];
$account_id =$row['id'];
if($acct_stat === 'hold' ){
toast_alert("error","Account on Hold Contact Support");
}elseif($amount > $acct_amount){
toast_alert("error","Insufficient Balance!");
}else {
$trans_id = uniqid();
$trans_opt = substr(number_format(time() * rand(), 0, '', ''), 0, 6);
$trans_type = "domestic transfer";
$sql = "INSERT INTO temp_trans (amount,trans_id,acct_id,bank_name,acct_name_id,acct_number,acct_type,acct_remarks,trans_otp,trans_type) VALUES(:amount,:trans_id,:acct_id,:bank_name,:acct_name,:acct_number,:acct_type,:acct_remarks,:trans_otp,:trans_type )";
$tranfered = $conn->prepare($sql);
$tranfered->execute([
'amount' => $amount,
'trans_id' => $trans_id,
'acct_id' => $account_id,
'bank_name' => $bank_name,
'acct_name' => $acct_name,
'acct_number' => $acct_number,
'acct_type' => $acct_type,
'acct_remarks' => $acct_remarks,
'trans_otp' => $trans_opt,
'trans_type' =>$trans_type
]);
if (true) {
// $TRANS = uniqid('w', true);
$trans_id = mt_rand(100000, 999999);
$trans_opt = substr(number_format(time() * rand(), 0, '', ''), 0, 6);
$sql = "UPDATE users SET acct_otp=:acct_otp WHERE id=:id";
$stmt = $conn->prepare($sql);
$stmt->execute([
'acct_otp' => $trans_opt,
'id' => $account_id
]);
if (true) {
$sql = "SELECT * FROM users WHERE id=:id";
$stmt = $conn->prepare($sql);
$stmt->execute([
'id' => $account_id
]);
$result = $stmt->fetch(PDO::FETCH_ASSOC);
$code = $result['acct_otp'];
$number = $result['acct_phone'];
$message = "Dear ".$result['firstname']. "Your verify code is ". $code;
if($page['twillio_status'] == '1'){
$data = twilioController::sendSmsCode($number,$message);
}
$APP_NAME = $pageTitle;
$message = $sendMail->pinRequest($currency, $amount, $fullName, $code, $APP_NAME);
$subject = "[OTP CODE] - $APP_NAME";
$email_message->send_mail($email, $message, $subject);
}
if (true) {
session_start();
$_SESSION['dom-transfer'] = $code;
header("Location:./pin.php");
}
// if (true) {
// if($row['billing_code']==='0') {
// $sql = "SELECT * FROM users WHERE id=:id";
// $stmt = $conn->prepare($sql);
// $stmt->execute([
// 'id' => $account_id
// ]);
// $resultCode = $stmt->fetch(PDO::FETCH_ASSOC);
// $code = $resultCode['acct_otp'];
// $APP_NAME = $pageTitle;
// $message = $sendMail->pinRequest($currency, $amount, $fullName, $code, $APP_NAME);
// $subject = "[OTP CODE] - $APP_NAME";
// $email_message->send_mail($email, $message, $subject);
// if(true){
// session_start();
// $_SESSION['dom-transfer'] = $code;
// header("Location:./pin.php");
// }
// }else{
// session_start();
// $_SESSION['dom-transfer']=$user_id;
// header("Location:./cot.php");
// }
// }
}
}
}
userPinfunction.txt
