1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / sathmcmy / www / classes /
Filename : User.php
back
<?php 
    
    $filepath= realpath(dirname(__FILE__));
    include_once "$filepath/../lib/Database.php";
    include_once "$filepath/../helpers/Format.php";

    // include_once("../helpers/mailer_settings.php");

    // For system to operate
    define("EMAIL", "sathiecommerce@gmail.com");
    define("PASSWORD", "p@ssw0rD@321@@");

    // Organization, actual display email to end users
    define("FORMAL_EMAIL_SEEN_IN_MAIL", "sathiecommerce@gmail.com");
    define("FORMAL_NAME_SEEN_IN_MAIL", "sathibhai");

    // domain
    // define("DOMAIN", "192.168.64.2/visa_site");
    define("DOMAIN", "https://sathibhai.com");

    // mailer files
    require "PHPMailer/PHPMailer.php";
    require 'PHPMailer/Exception.php';
    require 'PHPMailer/SMTP.php';

    use PHPMailer\PHPMailer\PHPMailer;
    use PHPMailer\PHPMailer\Exception;
    use PHPMailer\PHPMailer\SMTP;

    /* 
        User class 
    */

    class User {

        private $db;
        private $fm;

        public function __construct()
        {

            $this->db= new Database();
            $this->fm= new Format();

        }


        public function customerRegistration($data)
        {
            
            $name       = $this->fm->validation($data['name']);
            $address    = $this->fm->validation($data['address']);
            $city       = $this->fm->validation($data['city']);
            $country    = $this->fm->validation($data['country']);
            $postal_code= $this->fm->validation($data['postal_code']);
            $phone      = $this->fm->validation($data['phone']);
            $email      = $this->fm->validation($data['email']);
            $password   = $this->fm->validation($data['password']);

            $name       = mysqli_real_escape_string($this->db->link, $name);
            $address    = mysqli_real_escape_string($this->db->link, $address);
            $city       = mysqli_real_escape_string($this->db->link, $city);
            $country    = mysqli_real_escape_string($this->db->link, $country);
            $postal_code= mysqli_real_escape_string($this->db->link, $postal_code);
            $phone      = mysqli_real_escape_string($this->db->link, $phone);
            $email      = mysqli_real_escape_string($this->db->link, $email);
            $password   = mysqli_real_escape_string($this->db->link, $password);

            /****** Validating full name, address, city, country, postal code, phone number and email  *******/
            /******* Validate using the regular expression ********/
            $validatedResult      = $this->validateText($name, $address, $city, $country);

            $postalCodeValidated  = $this->validatePostalCode($postal_code);
            $phoneNumberValidated = $this->validatePhone($phone);

            // if(!$this->checkemail($email)){
            //     return false;
            // }

            if(!filter_var($email, FILTER_VALIDATE_EMAIL)) {
                // echo "DEE";
                return false;
            }

            /******* checking validations of the inputs  *********/
            if(!empty($validatedResult)) {
                // echo "DEE";
                return false;
            }

            if(!empty($postalCodeValidated)) {
                // echo "DEE";
                return false;
            }

            if(!empty($phoneNumberValidated)) {
                // echo "FALSE";
                return false;
            }

            /******* checking validations of the inputs  *********/
            /****** Validating full name, address, city, country, postal code, phone number and email  *******/

            if ($name == "" || $address == "" || $city == "" || $country == "" || $postal_code == "" || $phone == "" || $email == "" || $password == "" ) {
                $msg = "<span id='err-msg' style='color:red'>Field Must Not be empty .</span> ";
                return $msg;
            }

            // check password length
            if(strlen($password) < 6){
                $msg = "<span id='err-msg' style='color:red'>At least 6 characters password is required</span> ";
                return $msg;
            }

            // validating length of the name
            if(strlen($name) > 32 && strlen($name) < 2) {
                $msg = "<span id='err-msg' style='color:red'>Invalid full name length.</span> ";
                return $msg;
            }

            $mailquery= "SELECT * FROM tbl_customer WHERE email= '$email' LIMIT 1";

            $mailchk= $this->db->select($mailquery);

            if($mailchk != false) {
                // $msg= "<p id='reg-msg' style='color: red; text-align: center; border: 1px solid red; padding: .5rem 2rem;'>Email already exists.</p>";
                $msg= "<p id='reg-msg' style='color: red; text-align: left;'>Email already exists.</p>";
                return $msg;
            } else {

                // token code generation
                // $token= '0123456789~sdghtyrehasadfsdf@_abcdefghijKLMNOPQRSTUVWXyz$';
                // $token= str_shuffle($token);
                // $token= substr($token, 0, 10);
                $token = bin2hex(random_bytes(32));

                // $pass= password_hash($password, PASSWORD_DEFAULT); // previous
                $pass= password_hash($password, PASSWORD_BCRYPT);

                $query= "INSERT INTO tbl_customer (name, address, city, country, zip, phone, email, pass, token) VALUES ('$name', '$address', '$city', '$country', '$postal_code', '$phone', '$email', '$pass', '$token')";

                $inserted_row= $this->db->insert($query);

                /* PHP Mailer */

                // Mailer constants
                // define("DOMAIN", "https://www.sathibhai.com");
                // define("EMAIL", "");
                // define("PASSWORD", "");
                // define("FORMAL_EMAIL_SEEN_IN_MAIL", "");
                // define("FORMAL_NAME_SEEN_IN_MAIL", "");


                $mail= new PHPMailer();
                try {
                    $mail->isSMTP();                                            // Set mailer to use SMTP
                    $mail->Host       = 'mail.privateemail.com';  // Specify main and backup SMTP servers
                    $mail->SMTPAuth   = true;                                   // Enable SMTP authentication
                    $mail->Username   = 'contact@sathibhai.com';                     // SMTP username
                    $mail->Password   = 'Allall123@';                               // SMTP password
                    $mail->SMTPSecure = 'ssl';                                  // Enable TLS encryption, [ICODE]ssl[/ICODE] also accepted
                    $mail->Port       = 465;
        
                    $mail->IsHTML(true);
                    $mail->From="contact@sathibhai.com";
                    $mail->FromName='sathibhai.com';
                    $mail->Sender='contact@sathibhai.com';
                    // $mail->AddReplyTo($email, $full_name);
                    // set reply to
                    $mail->setFrom('sathibhai.com', 'sathibhai.com', false);
                    $mail->addAddress($email, $name); // address to which we're sending email
                    $mail->Subject = 'Activate your account';

                    
                    $html= <<<DOC
                    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
                    <html>
                        <head>
                            <title>Please verify your email</title>
                            <meta http-equiv="Content-Type" content="text/html charset=UTF-8" />
                        </head>
                        <body>
                                
                                <p>Thank you for creating an account on sathibhai.com. Please complete your registration process by visiting the link below.</p>
                                <p>
                                    <a href="https://sathibhai.com/confirm.php?email=$email&token=$token">Verify</a>
                                </p>
                                <p>or, copy and paste this URL in your browser's address bar https://sathibhai.com/confirm.php?email=$email&token=$token</p>
                                <p>Thank you, <br />sathibhai team.</p>
                        </body>
                    </html>
DOC;

                    $mail->Body= $html;
    
                    if($mail->send()) {
                        $msg= "You have been registered. Please check spam folder or inbox in your e-mail to verify.";
                    } else {
                        $msg= "Something wrong happened! please try again.";
                    }
                } catch (Exception $e) {
                    exit("Sorry, registration failed. <a href='register.php'>Register again</a>");
                }
                /* PHP Mailer */


                if($inserted_row) {
                    $msg= "<span id='reg-msg' style='color: green; padding: .5rem 2rem; text-align: center'>Registration successful, Please check your email to activate your account.</span>";
                    return $msg;
                } else {
                    $msg= "<span id='reg-msg' style='color: red; padding: .5rem 2rem; text-align: center'>Sorry, something went wrong.</span>";
                    return $msg;
                }

            }

        }
        
        public function customerLogin($data)
        {

            $email      = $this->fm->validation($data['email']);
            $password   = $this->fm->validation($data['password']);

            $email      = mysqli_real_escape_string($this->db->link, $email);
            $password   = mysqli_real_escape_string($this->db->link, $password);

            if(!$this->checkemail($email)){
                return false;
            }

            if ($email == "" || $password == "" ) {
                $msg = "<span id='err-msg' style='color:red'>Field Must Not be empty .</span> ";
                return $msg;
            }

            $query= "SELECT * FROM tbl_customer WHERE email= '$email' AND active_status = 1";

            $result= $this->db->select($query);
            
            if($result) {

                $re= $result->fetch_assoc();
                if(password_verify($password, $re['pass'])) {

                    // fixes session fixation attacks
                    session_regenerate_id(true);

                    Session::set("cuslogin", true);
                    Session::set("cmrId", $re['id']);
                    Session::set('cmrName', $re['name']);
                    

                    
                    //echo "<script>window.location.href='index.php';</script>";
                    header("Location:order.php");
                    
                } else {
                    $msg = "<p style='color: red; padding: .5rem 2rem; text-align: center'>Invalid password</p>";
                    return $msg;
                }

            }

        }

        public function getCustomerData($id)
        {

            $query= "SELECT * FROM tbl_customer WHERE id= $id";

            $result= $this->db->select($query);

            return $result;

        }

        public function validateText($name, $address, $city, $country) {

            $errors= [];

            if(!preg_match('/^[a-zA-Z ]+$/', $name))  {
                // echo "fail";
                $errors[]= "Invalid name.";
            }

            if(!preg_match('/^[a-zA-Z0-9 \-,]+$/', $address)) {
                $errors[]= "Invalid address.";
            }

            if(!preg_match('/^[a-zA-Z0-9. ,]+$/', $city)) {
                $errors[]= "Invalid city";
            }

            if(!preg_match('/^[a-zA-Z0-9 ,]+$/', $country)) {
                $errors[]= "Invalid Country.";
            }

            return $errors;

        }

        public function validatePostalCode($postal_code)  {
            $err= [];

            if(!preg_match('/^[0-9]+$/', $postal_code)) {
                $err[]= "Postal code is invalid";
            }
            
            if(strlen($postal_code) != 5) {
                $err[]= "Postal code must be 5 digit only.";
            }

            return $err;
        }

        public function validatePhone($phone) {
            $e= [];
            if(!preg_match('/^[0-9]+$/', $phone)) {
                $e[]= "Invalid Phone number";
            }
            
            if(strlen($phone) > 10) {
                $e[]= "Phone number length should be less than or euqal to 10 ";
            }
            
            return $e;
        }

        public function checkemail($str) {
            return (!preg_match("/^([a-z0-9\+_\-]+)(\.[a-z0-9\+_\-]+)*@([a-z0-9\-]+\.)+[a-z]{2,6}$/ix", $str)) ? FALSE : TRUE;
        }

        public function customerUpdate($data, $cmrId)
        {
            $name       = $this->fm->validation($data['name']);
            $address    = $this->fm->validation($data['address']);
            $city       = $this->fm->validation($data['city']);
            $country    = $this->fm->validation($data['country']);
            $postal_code= $this->fm->validation($data['postal_code']);
            $phone      = $this->fm->validation($data['phone']);
            // $email      = $this->fm->validation($data['email']);

            $name       = mysqli_real_escape_string($this->db->link, $name);
            $address    = mysqli_real_escape_string($this->db->link, $address);
            $city       = mysqli_real_escape_string($this->db->link, $city);
            $country    = mysqli_real_escape_string($this->db->link, $country);
            $postal_code= mysqli_real_escape_string($this->db->link, $postal_code);
            $phone      = mysqli_real_escape_string($this->db->link, $phone);
            // $email      = mysqli_real_escape_string($this->db->link, $email);



            /******* Validate using the regular expression ********/
            $validatedResult      = $this->validateText($name, $address, $city, $country);

            $postalCodeValidated  = $this->validatePostalCode($postal_code);
            $phoneNumberValidated = $this->validatePhone($phone);

            // echo "<pre>";
            //     var_dump($postalCodeValidated);
            // echo "</pre>";

            // echo "<pre>";
            //     var_dump($postalCodeValidated);
            // echo "</pre>";


            // echo "<pre>";
            //     var_dump($phoneNumberValidated);
            // echo "</pre>";


            /******* Validate using the regular expression ********/


            /******** validate email  ********/
            // if(!$this->checkemail($email)){
            //     return false;
            // } else {
            //     return true;
            // }
            /******** validate email  ********/

            if ($name == "" || $address == "" || $city == "" || $country == "" || $postal_code == "" || $phone == "") {
                $msg = "<span id='reg-msg' style='color: red; border: 1px solid red; padding: .5rem 2rem; text-align: center; margin-bottom: .5rem; display: inline-block'>Field Must Not be empty.</span> ";
                return $msg;
            } else {

                /******* checking validations of the inputs  *********/
                if(!empty($validatedResult)) {
                    return false;
                }
    
                if(!empty($postalCodeValidated)) {
                    return false;
                }
    
                if(!empty($phoneNumberValidated)) {
                    // echo "FALSE";
                    return false;
                }

                // checking the id, if it's integer or not
                if(!preg_match('/^[0-9]+$/', $cmrId)) {
                    return false;
                }

                /******* checking validations of the inputs  *********/

                $query= "UPDATE tbl_customer SET 
                name='$name', 
                address='$address', 
                city='$city', 
                country='$country', 
                zip='$postal_code', 
                phone='$phone' 
                WHERE id=$cmrId";

                $updated_row= $this->db->update($query);

                if($updated_row) {
                    // header("Location:profile.php");
                    $msg= "<span id='reg-msg' style='color: green; padding: .5rem 0rem; text-align: center; margin-bottom: .5rem; display: inline-block'>Updated Successfully!</span>";
                    return $msg;
                } else {
                    $msg= "<span id='reg-msg' style='color: red; padding: .5rem 0rem; text-align: center; margin-bottom: .5rem; display: inline-block'>Sorry, something went wrong.</span>";
                    return $msg;
                }

            }

        }

    }

?>