1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / sathmcmy / www / inc /
Filename : header.php
back
<?
// ini_set( 'session.cookie_httponly', 1 );
// ini_set( 'session.use_strict_mode', 1 );

    error_reporting(0);
    $filepath= realpath(dirname(__FILE__));

    
    // include $filepath."/../lib/Session.php"; //previous
    include "lib/Session.php";
    Session::init();

    include $filepath."/../lib/Database.php";
    include $filepath."/../helpers/Format.php";

    // previous
    // spl_autoload_register(function($class) {
    //     require $filepath."/../classes/$class.php";
    // });

    spl_autoload_register(function($class) {
        include "classes/$class.php";
    });

    $db= new Database();

    $fm= new Format();

    $pd= new Product();

    $cat= new Category();

    $ct= new Cart();

    $cmr= new User();

    
    $page_name = basename($_SERVER['PHP_SELF']);
    
    
    if ($page_name == 'login.php' && Session::get("cuslogin")) {
        header("Location:index.php");
    }

    // if user is not logged in
    if(Session::get("cuslogin") == false) {
        // redirect to the login page
        if ($page_name == 'cart.php') {
            header("Location:login.php");
        }
        // and tries to visit mentioned pages in the condition, then don't allow
        if (
            // $page_name == 'cart.php' || 
            $page_name == 'wishlist.php' || 
            $page_name == 'profile.php' || 
            $page_name == 'compare.php' || 
            $page_name == 'order.php' || 
            $page_name == 'editprofile.php' || 
            $page_name == 'offline.php' || 
            $page_name == 'payment.php' || 
            $page_name == 'success.php'
        ) {
            header("Location:index.php");
        }
    }
    
    
    if(isset($_GET["cid"])) {
        $cmrId= Session::get("cmrId");

        if(!empty($cmrId)) {
            $delData= $ct->delCustomerCart();
            $delComp= $pd->delCompareData($cmrId);
            // Session::destroy();
            // Removing the session.
            unset($_SESSION["cuslogin"]);
            unset($_SESSION["cmrId"]);
            unset($_SESSION["cmrName"]);
        }

        header("Location:index.php");
    }
    
    // for payment.php
    if ($page_name == 'payment.php') {
        if(!$_SERVER["HTTP_REFERER"] == 'https://sathibhai.com/cart.php') {
            header("Location: index.php");
        }
    }
    
    // for offline.php
    if ($page_name == 'offline.php') {
        if(!$_SERVER["HTTP_REFERER"] == 'https://sathibhai.com/payment.php') {
            header("Location: index.php");
        }

        $getPro= $ct->getCartProduct();
        if($getPro == false) {
            header('Location:index.php');
        }
    }
    
    
    // for login/register feature
    if ($page_name == 'login.php') {
        // Create token for CSRF protection
        function token_login() {
            $token= bin2hex(random_bytes(32));
            $_SESSION['token_login'] = $token;
            return $token;
        }

        // Create token for registration
        function token_register() {
            $token                      = bin2hex(random_bytes(32));
            $_SESSION['token_register'] = $token;
            return $token;
        }

        // code for login
        if($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['login'])) {

            // validate token
            if(empty($_POST['cus_t_login'])) {
                header("Location: index.php");
            }

            if($_SESSION['token_login'] != $_POST['cus_t_login']) {
                header("Location: index.php");
            }

            $customLogin= $cmr->customerLogin($_POST);
        }

        // for register
        if($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['register'])) {
                    
            // token validation
            if(empty($_POST['cus_t_register'])) {
                header("Location: index.php");
            }

            if($_POST['cus_t_register'] != $_SESSION['token_register']) {
                header("Location: index.php");
            }

            $customerReg= $cmr->customerRegistration($_POST);
        }
    }
    
        // for reset.php
    if ($page_name == 'reset.php') {
        $login= Session::get('cuslogin');
    
        if(isset($login)) {
            if($login == true) {
                header('Location:order.php');
            }
        }

        // Redirect to 404 page if token is not available.
        if(!isset($_GET['token'])) {
            header("Location: 404.php");
        }

        // check if the token is present in the database, if not, redirect to 404 page
        $token = trim($_GET['token']);
        $token = htmlspecialchars($token);
        $token = $db->link->escape_string($token);

        $check_token = "SELECT token FROM reset_password WHERE token= '$token' LIMIT 1";
        $token_res   = $db->link->query($check_token);

        if($token_res->num_rows != 1) {
            header("Location: 404.php");
        }

        // for form submission
        if($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['reset'])) {

            // validate token
            if(empty($_POST['reset_pass_token'])) {
                header("Location: index.php");
            }
    
            if($_SESSION['reset_pass_token'] != $_POST['reset_pass_token']) {
                header("Location: index.php");
            }
    
            // check of the token is available in the database
            $sql    = "SELECT email FROM reset_password WHERE token='$token' LIMIT 1";
            $result = $db->link->query($sql);
    
            // print_r($result);exit;
    
            // if the email is available in the reset_password table, then get the email.
            if($result->num_rows > 0) {
                $email  = $result->fetch_assoc();
                $email  = $email['email'];

                // check if the email is available in the tbl_customer
                $check_query     = "SELECT email FROM tbl_customer WHERE email='$email' LIMIT 1";
                $check_query_res = $db->link->query($check_query);
    
                if($check_query_res > 0) {
    
                    $customer_email= $check_query_res->fetch_assoc()['email'];
    
                    $err_msg= [];
                    $password           = $_POST['password'];
                    $confirm_password   = $_POST['confirm_password'];
    
                    if($password != $confirm_password) {
                        $err_msg[] = "Password does not match";
                    } 
                    
                    if(strlen($password) < 6)  {
                        $err_msg[]= "Password length must be 6 characters or more";
                    }
    
                    // If there is no errors, then perform update
                    if(empty($err_msg)) {
    
                        $password    = trim($password);
                        $password    = htmlspecialchars($password);
                        $password    = $db->link->escape_string($password);
                        
                        $hashed_pass = password_hash($password, PASSWORD_BCRYPT);
    
                        // update the new password in the database.
                        $update_pass  = "UPDATE tbl_customer SET pass='$hashed_pass' WHERE email='$customer_email'";
                        $updated_pass = $db->link->query($update_pass);
    
                        // Reset token to empty after update is done.
                        $reset_query= "UPDATE reset_password SET token='' WHERE email='$customer_email' AND token='$token' ORDER BY reset_date DESC LIMIT 1";
                        $db->link->query($reset_query);
    
                        if($updated_pass) {
                            $_SESSION['reset_successful']= "Your Password has been reset, Please login.";
                            header("Location: login.php");
                        } else {
                            $_SESSION['reset_successful']= "Something went wrong, please try again resetting your password.";
                            header("Location: login.php");
                        }
    
                    }
    
                }
    
            }
        }
    }
    
    
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <link rel="icon" type="image/png" href="./images/favicon.png">
    <link rel="stylesheet" href="https://cdn.linearicons.com/free/1.0.0/icon-font.min.css">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css">
    
    <?php 
    
        $curPageName = substr($_SERVER["SCRIPT_NAME"],strrpos($_SERVER["SCRIPT_NAME"],"/")+1);

        if($curPageName == 'cart.php' || $curPageName == 'compare.php' || $curPageName == 'offline.php' || $curPageName == "order.php" || $curPageName == "wishlist.php") {  
        
    ?>

    <link rel="stylesheet" href="//cdn.datatables.net/1.10.20/css/jquery.dataTables.min.css">
    <link rel="stylesheet" href="https://cdn.datatables.net/rowreorder/1.2.6/css/rowReorder.dataTables.min.css">
    <link rel="stylesheet" href="https://cdn.datatables.net/responsive/2.2.3/css/responsive.dataTables.min.css">
    
    <?php  } ?>
    
    <link rel="stylesheet" href="./css/style.css">
    <link rel="stylesheet" href="./css/mobile.css">
    <link rel="stylesheet" href="./slider/slick.css">
    <link rel="stylesheet" href="./css/clothing_panel.css">
    <script>
        function validate() {
            const searchInput= document.getElementById('search').value;

            if(searchInput.length <= 2) {
                return false;
            }

            if(searchInput=='' || searchInput== null) {
                return false;
            }
        }
    </script>
    <title>sathibhai- let's shop with us to find awesome products!</title>
</head>
<body>

    <!-- Section: top-notice -->
    <div id="top-notice">
        <div class="top-notice-container">
            <p>We're only available inside Ring road (kathmandu) at the moment. </p>
            <span class='remove-msg-top'>X</span>
        </div>
    </div>
    
    <!-- Header -->
    <header>
        <div class="header-first">
            <div class="first-address" style="line-height: 2">
                <!-- <div class="phone-number" style="font-size: 12px"> <i class="fa fa-phone-alt" style='color: #333;'></i> Phone</div> -->
                <div class="contact-mail" style="font-size: 12px"><i class="fa fa-mail-bulk" style='color: #333;'></i> sathiecommerce@gmail.com</div>
            </div>
            <div class="second-social-links">
                <a href="https://www.facebook.com/sathibhaiecommerce" target="_blank" class="facebook"><i class="fab fa-facebook fa-2x"></i></a>
                <!-- <a href="#" class="linkedin"><i class="fab fa-linkedin fa-2x"></i></a>
                <a href="#" class="twitter"><i class="fab fa-twitter fa-2x"></i></a> -->
            </div>
        </div>
    </header>

    <!-- Section: Header -->
    <div id="header-second">
        <div class="logo-container">
            <img src="./images/logo.png" alt="Logo" id="logo">
            <form action="search.php" method="get" class="search-container">
                <input type="text" name="search" placeholder="Search" id="search">
                <input type="submit" value="Search" onclick="return validate();" id="search-btn">
            </form>
        </div>
        <div class="header-extras">
            <div class="buttons-container">
                <a href="cart.php" class="button-cart"><i class="lnr lnr-cart"></i> Cart
                    <?php 

                        $getData= $ct->checkCartTable();

                        if($getData) {
                            $sum= Session::get("sum");
                            $qty= Session::get("qty");
                            echo /* "( Rs.". $sum . ")".  */" (Qty: ". $qty. ")" ;
                        } else {
                            echo "(empty)";
                        }

                    ?>
                </a>

                <?php
                    $login= Session::get("cuslogin");
                    if($login == false) { 
                ?>
                    <a href="login.php" class="button-login"><i class="lnr lnr-lock"></i> Login</a>
                <?php 
                    } else {
                ?>
                
                <a href="?cid<?php // echo Session::get("cmrId"); ?>" class="button-login"><i class="lnr lnr-exit"></i> Logout</a>
                <!-- <a href="?logout" class="button-login"><i class="fa fa-sign-out-alt"></i> Logout</a> -->

                    <?php } ?>
            </div>
        </div>
    </div>

    <!-- Section: Order(s), Profile, Wishlist -->
    <section id="login-details">
        <?php 

            $login= Session::get("cuslogin");

            if($login) {
        ?>
        <div class="container login-details-container">
            <a href="order.php"><i class="lnr lnr-pencil"></i> Order(s)</a>
            <a href="wishlist.php"><i class="lnr lnr-star"></i> Wishlist</a>
    <?php 

        $login= Session::get("cuslogin");

        if($login == true) {

    ?>

            <a href="profile.php"><i class="lnr lnr-user"></i> Profile</a>

    <?php
            
        }
            
    ?>
            <a href="compare.php"><i class="lnr lnr-chart-bars"></i> Compare</a>
        </div>
    <?php } ?>
    </section>