PNG
IHDR x sBIT|d pHYs + tEXtSoftware www.inkscape.org< ,tEXtComment
File Manager
File Manager
Viewing File: auth.php
<?php
require_once('functions.php');
require ('../includes/PHPMailer.php');
require ('../includes/SMTP.php');
require ('../includes/Exception.php');
//defining name spacess
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\Exception;
use PHPMailer\PHPMailer\SMTP;
function Sendmail($subject, $email, $body){
include('connect.php');
$smtpquery = $conn->query("SELECT * FROM smtp_setting WHERE id = 1");
while($rowsmtp = mysqli_fetch_assoc($smtpquery)){
$smtp_host = $rowsmtp["host"];
$smtp_username = $rowsmtp["username"];
$smtp_password = $rowsmtp["password"];
$smtp_port = $rowsmtp["port"];
$display_name = $rowsmtp["display_name"];
$smtp_auth = $rowsmtp["smtp_auth"];
$emaillogo = $rowsmtp['emaillogo'];
}
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = $subject;
$mail->isHTML(true);
$mail->Body=$body;
if(!$mail->Send()){
return 0;
}
else{
return 1;
}
}
//DELETE TRANSACTION
if($_GET['action']=="delete_trx"){
$id = $_GET['id'];
$query = $conn->query("DELETE FROM transactions WHERE id = '$id'");
echo "<script>
Swal.fire({
position: 'top-end',
icon: 'success',
title: 'Transaction Deleted',
showConfirmButton: true,
});
</script>";
if($_GET['transaction'] == "users"){
?>
<meta http-equiv="refresh" content="3;url=transactions">
<?php
}else{
$idp=$_GET['userid'];
?>
<meta http-equiv="refresh" content="3;url=user_transaction?id=<?php echo$idp ?>">
<?php
}
}
//DEPOSIT CRYPTO
if($_GET['action'] == "deposit_crypto"){
if (isset($_POST)) {
$coin = trim($_POST['coin']);
$amount = trim($_POST['amount']);
$errorMsg = 0;
if(empty($coin)){
echo"<script>document.getElementById('coin').style.borderColor='red';</script>";
}else{echo"<script>document.getElementById('coin').style.borderColor='green';</script>";}
if(empty($amount)){
echo"<script>document.getElementById('amount').style.borderColor='red';</script>";
}else{echo"<script>document.getElementById('amount').style.borderColor='green';</script>";}
if (empty($coin) || empty($amount)) {
$errorMsg = 1;
echo "<script>toastr.error('All fields are required', 'An Occured', {\"progressBar\": true});</script>";
die();
}
if($amount < 10){
$errorMsg = 1;
echo "<script>toastr.error('Minimum of USD 10.00 is required', 'An Occured', {\"progressBar\": true});</script>";
echo"<script>document.getElementById('amount').style.borderColor='red';</script>";
die();
}else {echo"<script>document.getElementById('amount').style.borderColor='green';</script>";}
if($errorMsg == 0){
$query = $conn->query("SELECT * FROM cryptos WHERE code = '$coin'");
$coindata = mysqli_fetch_array($query);
$_SESSION['deposit_crypto'] = "";
?>
<script type="text/javascript">
$("#myModal").modal("show");
jQuery("#myModal").on("shown.bs.modal", function() {
jQuery(this).data("bs.modal").options.backdrop = "static";
jQuery(this).data("bs.modal").options.keyboard = false;
});
</script>
<div class="modal fade" tabindex="-1" role="dialog" id="myModal" data-keyboard="false" data-backdrop="static">
<div class="modal-dialog modal-dialog-centered modal-lg" role="document">
<div class="modal-content">
<div class="modal-body modal-body-lg">
<div class="nk-block-head nk-block-head-xs text-center">
<h5 class="nk-block-title">Confirm Deposit</h5>
<div class="nk-block-text">
<div class="caption-text">You are about to get <strong><?php cryptoConverter2($amount, $coin,$money) ?></strong> <?php echo$coin ?> for <strong><?php echo$amount ?></strong> USD*</div>
<span class="sub-text-sm">Exchange rate: 1 <?php echo$coin ?> = <?php cryptoConverter(1, $coin,$money); ?> USD</span>
</div>
</div>
<div class="nk-block">
<div class="buysell-overview">
<ul class="buysell-overview-list">
<li class="buysell-overview-item">
<span class="pm-title">Deposit To</span>
<span class="pm-currency"><?php echo$coindata['symbol'] ?> <span><?php echo$coindata['crypto_name'] ?></span></span>
</li>
<li class="buysell-overview-item">
<span class="pm-title">Total</span>
<span class="pm-currency"><?php echo number_format($amount); ?> USD</span>
</li>
</ul>
<div class="sub-text-sm">* Our transaction fee are included.</div>
</div>
<div class="text text-center">
<strong>Carefully follow the procedures below for successful investment.</strong>
</div>
<center>
<div style="padding-top: 10px; height: 200px; width: 230px;" class="bg-primary">
<img src='https://chart.googleapis.com/chart?cht=qr&chl=<?php echo strtolower($coindata['crypto_name']) ?>%3A<?php echo$coindata['address'] ?>%3Famount%3D<?php cryptoConverter2($amount, $coin,$money); ?>&chs=200x180&choe=UTF-8&chld=L|2' rel='nofollow' alt='qr code'><a href='#' border='0' style='cursor:default' rel='nofollow'></a>
</div>
</center>
<p class="text-center">
<strong>Amount: <?php echo $coindata['code'] ?> <?php cryptoConverter2($amount, $coin,$money); ?><br></strong>
Scan the QR code above or copy and pay <span id="atPay"></span> to this <strong><code><?php echo strtoupper($coindata['crypto_name']) ?></code></strong> address below: </br>
<div class="nk-refwg-url">
<div class="form-control-wrap">
<div class="form-clip clipboard-init" data-clipboard-target="#add" data-success="Copied" data-text="Copy Link"><em class="clipboard-icon icon ni ni-copy"></em> <span class="clipboard-text">Copy</span></div>
<div class="form-icon">
<em class="icon ni ni-link-alt"></em>
</div>
<input type="text" class="form-control copy-text" id="add" value="<?php echo$coindata['address'] ?>">
</div>
</div>
</div>
</p>
<strong class="text-danger">Please Note*<br></strong>
<p class="text-left text-muted"><em class="icon ni ni-info-fill"></em> Please ensure you deposit the exact amount of cryptocurrency before confirming your transaction.</p>
<p class="text-left text-muted"><em class="icon ni ni-info-fill"></em> Incase the current session closed after you made payment, you can always start a new transaction with the exact amount you deposited.</p>
<p class="text-left text-muted"><em class="icon ni ni-info-fill"></em> Our customer care representatives are always available for support.</p>
<strong>Already made payment of <?php echo $coindata['code'] ?> <?php cryptoConverter2($amount, $coin,$money); ?> to the wallet address above<em class="icon ni ni-help-fill"></em></strong>
<form action="../scripts/auth?action=confirm_crypto" method="post" id="confirm_crypto">
<div class="form-group">
<input type="hidden" name="coin" value="<?php echo$coin ?>">
<input type="hidden" name="amount" value="<?php cryptoConverter2($amount, $coin,$money); ?>">
<strong for="address">Click the button below to confirm transaction.</strong>
<input type="text" class="form-control" name="address" id="address" placeholder="Sender Wallet address(Optional)">
</div>
<div id="depositResult"></div>
<div class="form-actions right">
<button type="submit" id="" class="btn btn-raised btn-primary btn-block actionBtn">
Confirm Transaction
</button>
</form>
<div class="buysell-field form-action text-center">
<div class="pt-3">
<a href="#" data-dismiss="modal" class="link link-danger">Cancel Order</a>
</div>
</div>
</div><!-- .nk-block -->
</div><!-- .modal-body -->
</div><!-- .modal-content -->
</div><!-- .modla-dialog -->
</div><!-- .modal -->
</div>
<?php
}
}
}
//CONFIRM CRYPTO DEPOSIT
if ($_GET['action'] == "confirm_crypto") {
require_once('userdata.php');
if (isset($_POST)) {
$_SESSION['deposit_crypto'] == "";
$coin = $_POST['coin'];
$address = $_POST['address'];
$amount = $_POST['amount'];
if(empty($address)){
$address = "No Address Provided";
}
$query1 = $conn->query("SELECT * FROM cryptos WHERE code = '$coin'");
$coindata = mysqli_fetch_array($query1);
$dateCreated = date("d M Y, H:i A");
/* if(!empty($amount)){
$_SESSION['deposit_crypto'] = 1;*/
$query2 = $conn->query("INSERT INTO crypto_deposits (coin, address, datecreated, userid, status, amount)VALUES('$coin', '$address', '$dateCreated', '$userid', 'pending', '$amount')");
// include('../email/crypto-deposit-mail.php');
/* $query3 = $conn->query("SELECT * FROM wallets WHERE userid = '$userid' and coin = '$coin'");
if(mysqli_num_rows($query3) < 1){
$sql = $conn->query("INSERT INTO wallets (coin, datecreated, lastdeposit, userid, balance) VALUES ('$coin', '$dateCreated', '$dateCreated', '$userid', '$amount')");
}else{
$r = mysqli_fetch_array($query3);
$newBal = ($r['balance'] + $amount);
$idd = $r['id'];
$sql = $conn->query("UPDATE wallets SET balance = '$newBal', datecreated = '$dateCreated' WHERE id = '$idd'");
} */
$token = randomString(64);
echo "<script>window.location.href='../personal-banking/crypto?action=deposit_successful?token=$token&amount=$amount&coin=$coin';</script>";
/* }else{
header("location:../personal-banking/crypto");}*/
}
}
//WITHDRAW CRYPTO CURRENCY
if($_GET['action'] == "withdraw_crypto"){
if (isset($_POST)) {
require_once('userdata.php');
$coin = trim($_POST['coin']);
$amount = trim($_POST['amount']);
$destination = trim($_POST['destination']);
$errorMsg = 0;
if(empty($coin)){
echo"<script>document.getElementById('coin').style.borderColor='red';</script>";
}else{echo"<script>document.getElementById('coin').style.borderColor='green';</script>";}
if(empty($amount)){
echo"<script>document.getElementById('amount').style.borderColor='red';</script>";
}else{echo"<script>document.getElementById('amount').style.borderColor='green';</script>";}
if(empty($destination)){
echo"<script>document.getElementById('destination').style.borderColor='red';</script>";
}else{echo"<script>document.getElementById('destination').style.borderColor='green';</script>";}
if (empty($coin) || empty($amount) || empty($destination)) {
$errorMsg = 1;
echo "<script>toastr.error('All fields are required', 'An Occured', {\"progressBar\": true});</script>";
die();
}
$query2 = $conn->query("SELECT * FROM wallets WHERE userid = '$userid' and coin = '$coin'");
if(mysqli_num_rows($query2) < 1){
$bal = 0;
}else{
$r = mysqli_fetch_array($query2);
$bal = $r['balance'];
}
if($bal == 0) {
$errorMsg = 1;
echo "<script>
Swal.fire({
icon: 'error',
text: 'You currently do not have any $coin crypto asset. Kindly make a deposit before applying for a Withdrawal',
showConfirmButton: true,
});
</script>";
die();
}
if($amount > cryptoConverterB($bal, $coin,$money)){
$errorMsg = 1;
echo "<script>
Swal.fire({
icon: 'error',
title: 'An Occured',
text: 'Insufficient $coin balance ',
showConfirmButton: true,
});
</script>";
die();
}
if($errorMsg == 0){
$dateCreated = date("d M Y, H:i A");
$query1 = $conn->query("INSERT INTO crypto_withdrawals(userid, amount, coin, datecreated, wallet, status)VALUES('$userid', '$amount', '$coin', '$dateCreated', '$destination', 'pending')");
$newBal = ($bal - cryptoConverter2B($amount, $coin,$money));
$query2 = $conn->query("UPDATE wallets SET balance = '$newBal' WHERE userid = '$userid' and coin = '$coin'");
require_once('../email/crypto-withdrawal-request.php');
echo "<script>
Swal.fire({
icon: 'success',
title: 'Successful!',
text: 'You have successfully requested for a Withdrawal of $money $amount from your $coin Crypto Asset. ',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="5; url=../personal-banking/crypto">
<?php
die();
}
}
}
if($_GET['action'] == "DisableCrypto"){
$id = $_GET['id'];
$query = $conn->query("UPDATE cryptos SET status = 0 WHERE id = '$id'");
echo "<script>
Swal.fire({
icon: 'success',
title: 'Wallet Disabled',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="2; url=../admin/crypto">
<?php
}
if($_GET['action'] == "EnableCrypto"){
$id = $_GET['id'];
$query = $conn->query("UPDATE cryptos SET status = 1 WHERE id = '$id'");
echo "<script>
Swal.fire({
icon: 'success',
title: 'Wallet Enabled',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="2; url=../admin/crypto">
<?php
}
if($_GET['action'] == "UpdateCrypto"){
if (isset($_POST)) {
// code...
$id = $_GET['id'];
$post = "wallet".$_GET['id']."";
$postwallet = filterString($_POST[$post]);
$query = $conn->query("UPDATE cryptos SET address = '$postwallet' WHERE id = '$id' ");
echo "<script>
Swal.fire({
icon: 'success',
title: 'Wallet Updated successfully',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="2; url=../admin/crypto">
<?php
}
}
if($_GET['action'] == "approveCrypto"){
if(isset($_POST)){
$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
$dateCreated = date("d M Y, H:i A");
$query1 = $conn->query("UPDATE crypto_deposits SET status = 'success' WHERE id = '$id'");
$query3 = $conn->query("SELECT * FROM wallets WHERE userid = '$userid' and coin = '$coin'");
if(mysqli_num_rows($query3) < 1){
$sql = $conn->query("INSERT INTO wallets (coin, datecreated, lastdeposit, userid, balance) VALUES ('$coin', '$dateCreated', '$dateCreated', '$userid', '$amount')");
}else{
$r = mysqli_fetch_array($query3);
$newBal = ($r['balance'] + $amount);
$idd = $r['id'];
$sql = $conn->query("UPDATE wallets SET balance = '$newBal', datecreated = '$dateCreated' WHERE id = '$idd'");
}
$transferToken = randomString(64);
$ref = randomString(9);
$dd = date("my");
$dc = substr($sitename, 0, 3);
$refNumber = strtoupper("$dc/$ref-$dd");
$otp = randomNumber(6);
$dated = date("d M Y, g:i a");
$des = "$dc-$dd-eTopup-$ref";
$sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$result = mysqli_fetch_array($sql2);
$accountbalance = $result['accountbalance'];
$acctBal = $accountbalance + (round(cryptoConverterB($amount, $coin,$money),2));
$acctBal2 = round(cryptoConverterB($amount, $coin,$money));
$queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('VisualCard Top-up', 'Credit', '$refNumber', '$dated', '$acctBal2', '$acctBal', '$userid', '$des', '$transferToken')");
echo mysqli_error($conn);
$queryForBalUpdate = $conn->query("UPDATE users SET accountbalance = '$acctBal' WHERE id = '$userid'");
echo mysqli_error($conn);
$query4 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$user = mysqli_fetch_array($query4);
require_once("../email/approved-crypto-deposit.php");
echo "<script>
Swal.fire({
icon: 'success',
title: 'Deposit Approved',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="3; url=../admin/crypto?action=pending_deposits">
<?php
}
}
if($_GET['action'] == "rejectCrypto"){
if(isset($_POST)){
$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
$dateCreated = date("d M Y, H:i A");
$query1 = $conn->query("UPDATE crypto_deposits SET status = 'rejected' WHERE id = '$id'");
$query4 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$user = mysqli_fetch_array($query4);
require_once("../email/reject-crypto-deposit.php");
echo "<script>
Swal.fire({
icon: 'success',
title: 'Deposit Rejected',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="3; url=../admin/crypto?action=pending_deposits">
<?php
}
}
if($_GET['action'] == "deleteCryptoDeposit"){
if(isset($_POST)){
$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
$dateCreated = date("d M Y, H:i A");
$query1 = $conn->query("DELETE FROM crypto_deposits WHERE id = '$id'");
echo "<script>
Swal.fire({
icon: 'success',
title: 'Deposit Deleted',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="3; url=../admin/crypto?action=rejected_deposits">
<?php
}
}
if($_GET['action'] == "approveCryptoWithdrawal"){
if(isset($_POST)){
$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
$dateCreated = date("d M Y, H:i A");
$query1 = $conn->query("UPDATE crypto_withdrawals SET status = 'success' WHERE id = '$id'");
$query4 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$user = mysqli_fetch_array($query4);
$transferToken = randomString(64);
$ref = randomString(9);
$dd = date("my");
$dc = substr($sitename, 0, 3);
$refNumber = strtoupper("$dc/$ref-$dd");
$otp = randomNumber(6);
$dated = date("d M Y, g:i a");
$des = "$dc/$dd-$otp-/$ref";
$sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$result = mysqli_fetch_array($sql2);
$accountbalance = $result['accountbalance'];
$acctBal = $accountbalance - ($amount);
$queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('Crypto Withdrawal', 'Debit', '$refNumber', '$dated', '$amount', '$acctBal', '$userid', '$des', '$transferToken')");
$queryForBalUpdate = $conn->query("UPDATE users SET accountbalance = '$acctBal' WHERE id = '$userid'");
require_once("../email/approved-crypto-withdrawal.php");
echo "<script>
Swal.fire({
icon: 'success',
title: 'Withdrawal Approved',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="3; url=../admin/crypto?action=withrawal_requests">
<?php
}
}
if($_GET['action'] == "rejectCryptoWithdrawal"){
if(isset($_POST)){
$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
$dateCreated = date("d M Y, H:i A");
$query2 = $conn->query("SELECT * FROM wallets WHERE userid = '$userid' and coin = '$coin'");
$r = mysqli_fetch_array($query2);
$bal = $r['balance'];
$newBal = ($bal - cryptoConverter2B($amount, $coin,$money));
$query2 = $conn->query("UPDATE wallets SET balance = '$newBal' WHERE userid = '$userid' and coin = '$coin'");
$query1 = $conn->query("UPDATE crypto_withdrawals SET status = 'rejected' WHERE id = '$id'");
$query4 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$user = mysqli_fetch_array($query4);
require_once("../email/rejected-crypto-withdrawal.php");
echo "<script>
Swal.fire({
icon: 'success',
title: 'Withdrawal Rejected',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="3; url=../admin/crypto?action=withrawal_requests">
<?php
}
}
if($_GET['action'] == "user_pass_reset"){
require_once('userdata.php');
$cpassword = filterString($_POST['cpassword']);
$npassword = filterString($_POST['npassword']);
$cnpassword = filterString($_POST['cnpassword']);
$errorMsg = 0;
if(empty($cpassword)){
echo"<script>document.getElementById('cpassword').style.borderColor='red';</script>";
}else{echo"<script>document.getElementById('cpassword').style.borderColor='green';</script>";}
if(empty($npassword)){
echo"<script>document.getElementById('npassword').style.borderColor='red';</script>";
}else{echo"<script>document.getElementById('npassword').style.borderColor='green';</script>";}
if(empty($cnpassword)){
echo"<script>document.getElementById('cnpassword').style.borderColor='red';</script>";
}else{echo"<script>document.getElementById('cnpassword').style.borderColor='green';</script>";}
if (empty($cpassword) || empty($npassword) || empty($cnpassword)) {
$errorMsg = 1;
echo "<script>toastr.error('All fields are required', 'An Occured', {\"progressBar\": true});</script>";
die();
}
$query = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$r = mysqli_fetch_array($query);
$pasy = $r['password'];
if(md5($cpassword) != $pasy){
$errorMsg = 1;
echo "<script>toastr.error('Invalid Current password ', 'An Occured', {\"progressBar\": true});</script>";
echo"<script>document.getElementById('cpassword').style.borderColor='red';</script>";
die();
}else{echo"<script>document.getElementById('cpassword').style.borderColor='green';</script>";}
if(strlen($npassword) < 6){
$errorMsg =1;
echo "<script>toastr.error('Minimum of six alpha-numeric characters required', 'An Occured', {\"progressBar\": true});</script>";
echo"<script>document.getElementById('npassword').style.borderColor='red';</script>";
die();
}else{echo"<script>document.getElementById('npassword').style.borderColor='green';</script>";}
if($npassword != $cnpassword){
$errorMsg =1;
echo "<script>toastr.error('New Passwords does not match', 'An Occured', {\"progressBar\": true});</script>";
echo"<script>document.getElementById('cnpassword').style.borderColor='red';</script>";
die();
}else{echo"<script>document.getElementById('cnpassword').style.borderColor='green';</script>";}
if(md5($npassword) == $pasy){
$errorMsg =1;
echo "<script>toastr.error('New Password is currently in use', 'An Occured', {\"progressBar\": true});</script>";
echo"<script>document.getElementById('npassword').style.borderColor='red';</script>";
die();
}else{echo"<script>document.getElementById('npassword').style.borderColor='green';</script>";}
if($errorMsg == 0){
$newpass = md5($npassword);
$query4 = $conn->query("UPDATE users SET password = $newpass WHERE id = '$userid'");
echo "<script>
Swal.fire({
icon: 'success',
title: 'Password Reset Successful',
showConfirmButton: true,
});
</script>";
?>
<meta http-equiv="refresh" content="4; url=logout">
<?php
}
}
//VERIFY CAPTCHA
if ($_GET['action'] == "verifyRecaptcha"){
if(isset($_POST)){
if($_GET['code'] == $_POST['captcha']){
feedback("toast", "success", "Verification Successful", "Verified");
borderError("green", "captcha");
$_SESSION['accessBanking'] = randomString(64);
print redirect(3, "secure/");
}
else{
feedback("toast", "error", "Invalid code supplied", "Error");
borderError("red", "captcha");
}
}
}
//USER SIGNIN
if($_GET['action'] == "userLogin"){
if(isset($_POST)) {
$accountID = filterString($_POST["id"]);
$password = filterString($_POST["pass"]);
$errorMsg = 0;
//CHECKING FOR EMPTY FIELDS
if(empty($accountID) || empty($password)){
sleep(3);
echo "
<script>
toastr.error('All fields are required', 'Empty field(s)', {'progressBar': true});
</script>
";
if (empty($accountID)) {
echo "<script>
document.getElementById('id').style.borderColor='red';
</script>";
}else{echo "<script>
document.getElementById('id').style.borderColor='green';
</script>";}
if (empty($password)) {
echo "<script>
document.getElementById('pass').style.borderColor='red';
</script>";
}else{echo "<script>
document.getElementById('pass').style.borderColor='green';
</script>";}
die();
}
//CHECK IF BOTH FIELDS IS NOT EMPTY
$password = md5($password);
if($accountID AND $password !=""){
$query = $conn->query("SELECT * FROM users WHERE accountnumber = '$accountID' and password = '$password'");
//CHECK IF CREDENTIALS ARE ACCURATE
if(mysqli_num_rows($query) == 0){
sleep(3);
echo"
<script>
toastr.error('Invalid account number or password', 'Login failed');
document.getElementById('pass').style.borderColor='red';
document.getElementById('id').style.borderColor='red';
document.getElementById('pass').style.color='red';
document.getElementById('id').style.color='red';
</script>
";
die();
}
//WHEN THE LOGIN DETAILS ARE CORRECT
if(mysqli_num_rows($query) == 1){
$rows = mysqli_fetch_array($query);
$fname = $rows['firstname']; $mname = $rows['middlename'];
$lname = $rows['lastname']; $tfa = $rows['tfa'];
$status = $rows['status'];
$email = $rows["email"];
$approve = $rows['approve'];
//CHECK IF ACCOUNT WAS BLOCKED
if($status == "blocked"){
sleep(3);
echo "<script>
swal({ title: \"$blocked_title\", text: \"$blocked_msg\", icon: \"error\" });
</script>";
die();
}
//CHECK IF ACCOUNT IS ACTIVE
if($status == "active"){
//CHECK IF ACCOUNT IS APPROVED
if($approve == 0){
sleep(3);
echo "<script>
swal({ title: \"Access Denied\", text: \"Hi $fname $lname, Your $shortname internet banking account is currently inactive. Kindly contact our live customer care representive. \", icon: \"error\" });
</script>";
die();
}
sleep(3);
echo "
<script>
toastr.success('Hello $fname $lname, Welcome to $sitename internet banking.', 'Successful');
document.getElementById('pass').style.borderColor='green';
document.getElementById('id').style.borderColor='green';
document.getElementById('pass').style.color='green';
document.getElementById('id').style.color='green';
</script> ";
$_SESSION["loggedUser"] = $accountID;
$loggedtoken = randomString(68);
$_SESSION["loggedToken"] = $loggedtoken;
$_SESSION['email'] = $email;
$userid = $rows["id"];
$ip = $_SERVER["REMOTE_ADDR"];
$dated = date("d M y, H:i a");
$browser = $_SERVER["HTTP_USER_AGENT"];
$queryyy = $conn->query("INSERT INTO login(ip, browser, dated, token, userid) VALUES ('$ip', '$browser', '$dated', '$loggedtoken', '$userid')");
$sql1 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$data = mysqli_fetch_array($sql1);
$phone = $data['phone'];
sleep(3);
//CHECK IF TWO FACTOR AUTH IS ENABLE
if($tfa == "active"){
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$ipa = $_SERVER['REMOTE_ADDR'];
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$auth_code = randomNumber(4);
$_SESSION['auth_code'] = $auth_code;
$url = $site_url; $link = randomString(56); $addr = "/secure/index?action=verify2fa&source=$link";
$auth_url = "$url$addr";
$ua = getBrowser();
$browser= " " . $ua['name'] . " on ".$ua['platform']."";
$mail->addAddress($_SESSION['email']);
//subject
$mail->Subject = "New device confirmation";
$mail->isHTML(true);
require_once('../email/tfa.php');
$mail->Body= $otpBody;
$recipient = str_replace("+", "", $phone);
$recipient = str_replace(" ", "", $phone);
$msg = "$auth_code is your $shortname Login Authentication code. Please do not share it with third party.";
$sendSms = alertNotification($sms, $api, $sender_id, $msg, $recipient);
if(!$mail->Send() && $sendSms == 0)
{
$_SESSION['verifiedTfa'] = hash('sha256', 'verified');
echo "<script> window.location.href='../personal-banking/dashboard?viewSource=".$_SESSION['loggedToken']."';
</script>";
}
else
{
echo"
<script> window.location.href='index?action=verify&viewSource=".$_SESSION['loggedToken']."';
</script>
";
}
}
else{
$_SESSION['verifiedTfa'] = hash('sha256', 'verified');
echo "<script>
window.location.href='../personal-banking/dashboard.php?viewSource=$loggedtoken';
</script>";
}
}
}
}
}
}
if($_GET['action'] == "userVerify2fa") {
if(isset($_POST)){
$code = "".$_POST['codeBox1']."".$_POST['codeBox2']."".$_POST['codeBox3']."".$_POST['codeBox4']."";
$errorMsg = 0;
if(strlen($code < 4)){
feedback("toast", "error", "All fields are required", "Error");
borderError("red", "codeBox1"); borderError("red", "codeBox2");
borderError("red", "codeBox3"); borderError("red", "codeBox4");
die();
}
else{
borderError("green", "codeBox1"); borderError("green", "codeBox2");
borderError("green", "codeBox3"); borderError("green", "codeBox4");
}
if($_SESSION['auth_code'] == $code){
borderError("green", "codeBox1"); borderError("green", "codeBox2");
borderError("green", "codeBox3"); borderError("green", "codeBox4");
$_SESSION['verifiedTfa'] = hash('sha256', 'verified');
print redirect(1, "../personal-banking/dashboard.php?viewSource=".$_SESSION['loggedToken']."");
}else{
feedback("toast", "error", "Invalid code", "Error");
borderError("red", "codeBox1"); borderError("red", "codeBox2");
borderError("red", "codeBox3"); borderError("red", "codeBox4");
}
}
}
if($_GET['action'] == "userPassReset"){
if(isset($_POST)){
$captcha = $_GET['code'];
$accountID = filterString($_POST['id']);
$code = $_POST['captcha'];
$errorMsg = 0;
if(empty($captcha)){
borderError("red", "captcha");
}else{borderError("green", "captcha");}
if(empty($accountID)){
borderError("red", "id");
}else{borderError("green", "id");}
if(empty($accountID) || empty($captcha)){
$errorMsg = 1;
feedback("toast", "error", "All fields are required", "Error");
die();
}
if($code != $captcha){
$errorMsg = 1;
feedback("toast", "error", "Invalid code supplied", "Error");
borderError("red", "captcha");
die();
}else{borderError("green", "captcha");}
if($errorMsg == 0){
$accountID = str_replace(" ", "", $accountID);
$query = $conn->query("SELECT * FROM users WHERE accountnumber = '$accountID' ");
echo mysqli_error($conn);
if(mysqli_num_rows($query) < 1){
feedback("sweet", "error", "Sorry, we are unable to find any account that is associated with $accountID", "Account Not Found!");
}else{borderError("red", "id");}
if(mysqli_num_rows($query) >= 1){
borderError("green", "id");
$r = mysqli_fetch_array($query);
$user_id = $r['id'];
$email = $r['email'];
$fname = $r['firstname'];
$lname = $r['lastname'];
$mname = $r['middlename'];
//SEND LINK
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$token = randomString(62);
$reset_link = "$site_url/secure/index?action=resetPass&userToken=$token";
$ua = getBrowser();
$browser= " " . $ua['name'] . " on ".$ua['platform']."";
$mail->addAddress($email);
//subject
$mail->Subject = "Password reset link";
$mail->isHTML(true);
require_once('../email/password_reset.php');
$mail->Body= $resetBody;
if(!$mail->Send())
{
feedback("sweet", "error", "We are temporarily unable to reset your password. Please try again later.", "Error Occured!");
}
else
{
feedback("sweet", "success", "A new password reset link have been forwarded to the email address associated with the account number you provided.", "Password reset link forwarded!");
$dated = date("Y-m-d h:i:s");
$expiry_date = add_time(date("Y-m-d h:i:s"),25);
$queryyy = $conn->query("INSERT INTO password_resets (user_id, dated, expiry_date, token) VALUES ('$user_id', '$dated', '$expiry_date', '$token')");
}
}
}
}
}
if($_GET['action'] == "userPassResetConfirm"){
if(isset($_POST)){
$token = $_GET['token'];
$code = $_GET['code'];
$npassword = filterString($_POST['npassword']);
$cnpassword = filterString($_POST['cnpassword']);
$captcha = $_POST['captcha'];
$errorMsg = 0;
if($code != $captcha){
$errorMsg = 1;
feedback("toast", "error", "Invalid captcha code", "Error");
borderError("red", "captcha");
die();
}else{borderError("green", "captcha");}
if(strlen($npassword) < 6){
$errorMsg = 1;
feedback("toast", "error", "Minimum of six alpha-numeric characters required", "Error");
borderError("red", "npassword");
die();
}
if($npassword != $cnpassword){
$errorMsg = 1;
feedback("toast", "error", "Passwords does not match", "Error");
borderError("red", "cnpassword");
die();
}
$query = $conn->query("SELECT * FROM password_resets WHERE token = '$token'");
$r = mysqli_fetch_array($query);
$user = $r['user_id'];
$query2 = $conn->query("SELECT * FROM users WHERE id = '$user'");
$rr = mysqli_fetch_array($query2);
if($rr['password'] == md5($npassword)){
$errorMsg = 1;
sleep(3);
feedback("toast", "error", "Choose a diiferent password combination", "Password already used by you");
borderError("red", "npassword");
die();
}
if($errorMsg == 0){
$passy = md5($npassword);
$query = $conn->query("UPDATE users SET password = '$passy' WHERE id = '$user'");
$queryb = $conn->query("DELETE FROM password_resets WHERE token = '$token'");
feedback("sweet", "success", "You can now login with your new password", "Password reset Successful");
borderError("green", "cnpassword");
borderError("green", "npassword");
print redirect(4, "index");
}
}
}
if($_GET['action'] == "registerUserAccount") {
if(isset($_POST)){
$firstname = filterString($_POST['firstname']); $middlename = filterString($_POST['middlename']);
$lastname = filterString($_POST['lastname']); $zipcode = filterString($_POST['zipcode']);
$dob = filterString($_POST['dob']); $address = filterString($_POST['address']);
$country = filterString($_POST['country']); $state = filterString($_POST['state']);
$city = filterString($_POST['city']); $phone = filterString($_POST['phone']);
$email = filterString($_POST['email']); $occupation = filterString($_POST['occupation']);
$income = filterString($_POST['income']); $secretCode = filterString($_POST['secretCode']);
$password = filterString($_POST['password']); $cpassword = filterString($_POST['cpassword']);
$ssn = filterString($_POST['ssn']); $accounttype = filterString($_POST['accounttype']);
$usercurrency = filterString($_POST['usercurrency']);
borderError("green", "firstname"); borderError("green", "lastname"); borderError("green", "middlename");
borderError("green", "zipcode"); borderError("green", "dob"); borderError("green", "address");
borderError("green", "countryId"); borderError("green", "stateId"); borderError("green", "cityId");
borderError("green", "phone"); borderError("green", "email"); borderError("green", "occupation");
borderError("green", "income"); borderError("green", "secretCode"); borderError("green", "password");
borderError("green", "cpassword"); borderError("green", "ssn"); borderError("green", "accounttype");
borderError("green", "usercurrency");
$errorMsg = 0;
if(strlen($phone) < 8){
$errorMsg = 1;
feedback("toast", "error", "Valid phone number is required!", "Error");
borderError("red", "phone");
}else { borderError("green", "phone"); }
$query1 = $conn->query("SELECT * FROM users WHERE phone = '$phone'");
$query2 = $conn->query("SELECT * FROM users WHERE email = '$email'");
if(mysqli_num_rows($query1) >=1 ){
$errorMsg = 1;
feedback("toast", "error", "Phone number already in use", "Error");
borderError("red", "phone");
}else { borderError("green", "phone"); }
if(mysqli_num_rows($query2) >=1 ){
$errorMsg = 1;
feedback("toast", "error", "Email already already in use", "Error");
borderError("red", "phone");
}else { borderError("green", "phone"); }
if($password != $cpassword){
$errorMsg = 1;
feedback("toast", "error", "Password does not match!", "Error");
borderError("red", "cpassword"); borderError("red", "password");
}else { borderError("green", "cpassword"); borderError("green", "password"); }
if(strlen($address) < 9){
$errorMsg = 1;
feedback("toast", "error", "Detailed Home address is required", "Error");
borderError("red", "address");
}else { borderError("green", "address"); }
if($errorMsg == 0){
if(is_array($_FILES)) {
if(is_uploaded_file($_FILES['passport']['tmp_name'])) {
$sourcePath = $_FILES['passport']['tmp_name'];
$targetPath = "../secure/passport/".$_FILES['passport']['name'];
$imageFileType = strtolower(pathinfo($targetPath,PATHINFO_EXTENSION));
if($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg" && $imageFileType != "gif" ){
feedback("toast", "error", "Please select an Image(png or jpg)", "Error");
die();
}
$newname = "".substr($sitename, 0,3)."IMG".date("YmdHi")."-".randomString(5)."";
$newname =strtoupper($newname);
$targetPath = "../secure/passport/$newname.$imageFileType";
if(move_uploaded_file($sourcePath,$targetPath)) {
$pic = "$newname.$imageFileType";
$accountnumber = randomNumber(10);
$pass = md5($password);
$dated = date(" d M Y H:i a");
$imf = randomNumber(8);
$cot = randomNumber(8);
$accountbalance = 0.00;
$query = $conn->query("INSERT INTO users (firstname, lastname, middlename, state, country, city, zipcode, dob, address, phone, email, accountnumber, accounttype, usercurrency, accountbalance, imf, cot, secretCode, password, approve, status, datecreated, income, occupation, passport) VALUES ('$firstname', '$middlename', '$lastname', '$state', '$country', '$city', '$zipcode', '$dob', '$address', '$phone', '$email', '$accountnumber', '$accounttype', '$usercurrency', '$accountbalance', '$imf', '$cot', '$secretCode', '$pass', '0', 'active', '$dated', '$income', '$occupation', '$pic')");
$query5 = $conn->query("SELECT * FROM users WHERE accountnumber = '$accountnumber'");
$r = mysqli_fetch_array($query5);
$email = $r['email'];
$fname = $r['firstname'];
$mname = $r['middlename'];
$lname = $r['lastname'];
$accounttype = $r['accounttype'];
$date = $r['datecreated'];
$currency = $r['usercurrency'];
$addressB = $r['address'];
$id = $r['id'];
$auth_code = randomNumber(4);
$link = $site_url; $num = randomString(56); $addr = "/index?action=confirmReg&source=$num";
$auth_url = "$link$addr";
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = "Email confirmation";
$mail->isHTML(true);
require_once('../email/registration_email.php');
$mail->Body=$regBody;
if(!$mail->Send())
{
feedback("sweet", "success", "Your account have been successfully registered, A confirmation email have been forwarded to the email address provided (".$email.").", "Congratulaton");
$query= $conn->query("UPDATE users SET email_verify = '1', email_code = '$num' WHERE accountnumber ='$accountnumber'");
$queryy= $conn->query("UPDATE users SET email_code = '$num' WHERE accountnumber ='$accountnumber'");
print redirect(7, "index");
}
else
{
feedback("sweet", "success", "Your account have been successfully registered, A confirmation email have been forwarded to the email address provided (".$email.").", "Congratulaton");
$queryy= $conn->query("UPDATE users SET email_code = '$num' WHERE accountnumber ='$accountnumber'");
print redirect(7, "index");
}
}}}}}}
if($_GET['action'] == "kycApply"){
if(isset($_POST)){
$firstname = filterString($_POST['firstname']);
$lastname = filterString($_POST['lastname']);
$email = filterString($_POST['email']);
$phone = filterString($_POST['phone']);
$dob = filterString($_POST['dob']);
$accountnumber = filterString($_POST['accountnumber']);
$address1 = filterString($_POST['address1']);
$address2 = filterString($_POST['address2']);
$nationality = filterString($_POST['nationality']);
$state = filterString($_POST['state']);
$city = filterString($_POST['city']);
$zipcode = filterString($_POST['zipcode']);
$id_type = filterString($_POST['id_type']);
if(is_uploaded_file($_FILES['front']['tmp_name'])) {
$sourcePath = $_FILES['front']['tmp_name'];
$targetPath = "../images/".$_FILES['front']['name'];
$imageFileType = strtolower(pathinfo($targetPath,PATHINFO_EXTENSION));
if($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg" && $imageFileType != "gif" ){
feedback("toast", "error", "Please select an Image(png or jpg)", "Error");
die();
}
$newname = "".substr($sitename, 0,3)."IMG-KYCA".date("YmdHi")."-".randomString(5)."";
$newname =strtoupper($newname);
$targetPath = "../images/$newname.$imageFileType";
move_uploaded_file($sourcePath,$targetPath);
$pic = "$newname.$imageFileType";
}
if(is_uploaded_file($_FILES['back']['tmp_name'])) {
$sourcePath2 = $_FILES['back']['tmp_name'];
$targetPath2 = "../images/".$_FILES['back']['name'];
$imageFileType2 = strtolower(pathinfo($targetPath2,PATHINFO_EXTENSION));
if($imageFileType2 != "jpg" && $imageFileType2 != "png" && $imageFileType2 != "jpeg" && $imageFileType2 != "gif" ){
feedback("toast", "error", "Please select an Image(png or jpg)", "Error");
die();
}
$newname2 = "".substr($sitename, 0,3)."IMGKYCB".date("YmdHI")."-".randomString(6)."";
$newname2 =strtoupper($newname);
$targetPath2 = "../images/$newname2.$imageFileType2";
move_uploaded_file($sourcePath2,$targetPath2);
$pic2 = "$newname2.$imageFileType2";
}
$dateCreated = date(" d M Y H:i a");
$refa = strtoupper(randomString(9));
$ref = "KYC-$refa";
include("userdata.php");
if(getKycStatus($userid) != 0){
feedback("sweet", "error", "We noticed that you have a pending KYC Application, We'll review your submission and get back to you shortly", "Pending Application");
print redirect(6, 'kyc');
die();
}
$query = $conn->query("INSERT INTO kyc (firstname, lastname, email, phone, dob, accountnumber, address1, address2, nationality, state, city, zipcode, id_type, front, back, status, userid, datecreated, ref) VALUES ('$firstname', '$lastname', '$email', '$phone', '$dob', '$accountnumber', '$address1', '$address2', '$nationality', '$state', '$city', '$zipcode', '$id_type', '$pic', '$pic2', 'pending', '$userid', '$dateCreated', '$ref' )");
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = "KYC Application";
$mail->isHTML(true);
require_once('../email/kyc-submission.php');
$mail->Body=$KycBody;
if(!$mail->Send()){
}else{}
feedback("sweet", "success", "Your KYC information has been successfully submitted and will be reviewed with in the next 2-3 working days. Ref: $ref.", "Submitted");
print redirect(3, "kyc");
}
}
if($_GET['action'] == "loanRequest"){
if(isset($_POST)){
$amount = $_POST['amount'];
$tenure = $_POST['tenure'];
$facility = $_POST['facility'];
$reason = $_POST['reason'];
$_SESSION['loanInfo'] = $_POST;
$monthly_int_rate = ($interest_rate/100 * $amount);
$pcharge = ($penal_charge/100 * $amount);
$insurance_fee = ($insurance/100 * $amount);
$manage_fee = ($mana_fee/100 * $amount);
$commulative_int = ($monthly_int_rate * $tenure);
$total = ($amount + $commulative_int + $insurance_fee + $pcharge + $manage_fee);
?>
<script type="text/javascript">
$("#myModal").modal("show");
jQuery("#myModal").on("shown.bs.modal", function() {
jQuery(this).data("bs.modal").options.backdrop = "static";
jQuery(this).data("bs.modal").options.keyboard = false;
});
</script>
<div class="modal fade" tabindex="-1" role="dialog" id="myModal" data-keyboard="false" data-backdrop="static">
<div class="modal-dialog modal-dialog-centered modal-md" role="document">
<div class="modal-content">
<div class="modal-body modal-body-lg">
<div class="nk-block-head nk-block-head-xs text-center">
<h3 class="nk-block-title">Review Loan request details</h3>
<div class="nk-block-text">
<div class="caption-text">
<strong></strong>
</div>
</div>
<div class="nk-block">
<div class="buysell-overview">
<ul class="buysell-overview-list">
<li class="buysell-overview-item">
<span class="pm-title">Loan Facility</span>
<span class="pm-currency"><span><?php echo$facility; ?></span></span>
</li>
<li class="buysell-overview-item">
<span class="pm-title">Repayment Tenure</span>
<span class="pm-currency"><?php echo$tenure?> Months</span>
</li>
<li class="buysell-overview-item">
<span class="pm-title">Loan Amount</span>
<span class="pm-currency"><?php echo number_format($amount); echo " $money"; ?></span>
</li>
</ul>
<p>
<b>Repayment Break Down</b>
</p>
<ul class="buysell-overview-list">
<li class="buysell-overview-item">
<span class="pm-title">Monthly Interest</span>
<span class="pm-currency"><?php echo round($monthly_int_rate, 2); echo" $money"; ?></span>
</li>
<li class="buysell-overview-item">
<span class="pm-title">Management Fee</span>
<span class="pm-currency"><?php echo round($manage_fee, 2); echo " $money";?></span>
</li>
<li class="buysell-overview-item">
<span class="pm-title">Credit Insurance Fee</span>
<span class="pm-currency"><?php echo round($insurance_fee, 2); echo" $money"; ?></span>
</li>
<li class="buysell-overview-item">
<span class="pm-title">Penal Charge</span>
<span class="pm-currency"><?php echo round($pcharge, 2); echo " $money";?></span>
</li>
<li class="buysell-overview-item">
<span class="pm-title">Total Payable Amount</span>
<span class="pm-currency"><?php echo round($total, 2); echo" $money"; ?></span>
</li>
<li class="buysell-overview-item">
<span class="pm-title">Monthly Repayment Amount</span>
<span class="pm-currency"><?php echo round($total / $tenure, 2); echo " $money";?></span>
</li>
</ul>
</div>
<div class="buysell-field form-action text-left">
<hr>
<h4 class="text-danger">KINDLY NOTE*</h4>
<strong class="text-dark">You're expected to pay the sum of <?php echo round($total / $tenure, 2); echo " $money";?> on monthly Basis for the next <?php echo$tenure ?> months, Failure to comply with our T&C will attract Legal actions or termination/restriction of your <?php echo $sitename ?> Account.</strong><br>
<strong class="text-dark">By continueing this Request, You acknowledged that this Loan is only intended for the purpose purpose stated below:</strong><br>
<code class="text-dark"><?php echo $reason ?>.</code>
<hr>
<div>
<form action="../scripts/auth?action=acceptLoan" method="post" id="acceptForm">
<input type="hidden" name="id">
<button class="btn btn-primary" type="submit" id="btn2">Request Loan</button>
</form>
<div id="Result2"></div>
</div>
<div class="pt-3">
<a href="#" data-dismiss="modal" class="btn btn-sm btn-light">modify</a>
</div>
</div>
</div><!-- .nk-block -->
</div><!-- .modal-body -->
</div><!-- .modal-content -->
</div><!-- .modla-dialog -->
</div><!-- .modal -->
<script type="text/javascript">
$(document).ready(function (e) {
$("#acceptForm").on('submit',(function(e) {
document.getElementById("btn2").disabled = true;
e.preventDefault();
$.ajax({
url: "../scripts/auth?action=acceptLoan",
type: "POST",
data: new FormData(this),
contentType: false,
cache: false,
processData:false,
success: function(data)
{
document.getElementById("btn2").disabled = false;
$("#Result2").html(data);
},
error: function()
{
}
});
}));
});
</script>
<?php
}
}
if($_GET['action'] == "acceptLoan"){
include("userdata.php");
if(isset($_POST)){
$info = $_SESSION['loanInfo'];
$amount = $info['amount'];
$tenure = $info['tenure'];
$facility = $info['facility'];
$reason = $info['reason'];
$monthly_int_rate = ($interest_rate/100 * $amount);
$pcharge = ($penal_charge/100 * $amount);
$insurance_fee = ($insurance/100 * $amount);
$manage_fee = ($mana_fee/100 * $amount);
$commulative_int = ($monthly_int_rate * $tenure);
$total = ($amount + $commulative_int + $insurance_fee + $pcharge + $manage_fee);
$commulative_int = round(($total/$tenure),2);
//NOTIFY USER VIA EMAIL
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = "Loan Application alert";
$mail->isHTML(true);
include('../email/loan-application.php');
$mail->Body=$loanBody;
if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
}else{ echo "";}
$dateCreated = date(" d M Y H:i a");
$ref = strtoupper("".substr($sitename, 0,3)."-".randomString(10)."");
$query = $conn->query("INSERT INTO loan_application (loan_amount, interest_amount, tenure, insurance_fee, manage_fee, penal_charge, status, datecreated, reason, facility, ref, userid) VALUES('$amount', '$commulative_int', '$tenure', '$insurance_fee', '$manage_fee', '$pcharge', 'pending', '$dateCreated', '$reason', '$facility', '$ref', '$userid')");
i_redirect("loan?apNum=$ref");
}
}
if($_GET['action'] == "ApplyForVisualCard"){
if(isset($_POST)){
include('userdata.php');
$fullname = filterString($_POST['fullname']);
$email = filterString($_POST['email']);
$phone = filterString($_POST['phone']);
$address = filterString($_POST['address']);
$card_type = filterString($_POST['card_type']);
$question = filterString($_POST['question']);
$answer = strtolower(filterString($_POST['answer']));
if($card_type == "discover"){
$starter = 6011;
$face1 = randomNumber(4);
$face2 = randomNumber(4);
$face3 = randomNumber(4);
}
if($card_type == "mastercard"){
$starter = 5384;
$face1 = randomNumber(4);
$face2 = randomNumber(4);
$face3 = randomNumber(4);
}
if($card_type == "visa"){
$starter = 4902;
$face1 = randomNumber(4);
$face2 = randomNumber(4);
$face3 = randomNumber(4);
}
$query2 = $conn->query("SELECT * FROM visual_cards WHERE userid = '$userid' AND status = 'pending'");
if(mysqli_num_rows($query2) >=1){
feedback("sweet", "warning", "You currently have a pending card application.", "Try again later");
die();
}
$query2 = $conn->query("SELECT * FROM visual_cards WHERE userid = '$userid' AND status = 'active' AND card_type = '$card_type'");
if(mysqli_num_rows($query2) >=1 ){
feedback("sweet", "warning", "You currently have an active $card_type visual-card. Kindly select a different card type", "Error!");
die();
}
$card_number = "$starter $face1 $face3 $face2";
$ccv = randomNumber(3);
$expiry_date = date("m/y", strtotime('+3 years'));
$dateCreated = date(" d M Y H:i a");
sleep(4);
$query = $conn->query("INSERT INTO visual_cards (userid, status, balance, address, phone, email, card_type, datecreated, fullname, card_number, expiry_date, ccv, question, answer) VALUES('$userid', 'pending', '0.00', '$address', '$phone', '$email', '$card_type', '$dateCreated', '$fullname', '$card_number', '$expiry_date', '$ccv', '$question', '$answer')");
feedback("sweet", "success", "You have successfully applied for $shortname Visual $card_type. You will be notify once your card request is approved", "Successful");
print redirect("6", "visual-card?cardList=manage");
}
}
if($_GET['action'] == "addFund"){
$id = $_GET['cardid'];
if(isset($_POST)){
include("userdata.php");
$amount = filterString($_POST["amount$id"]);
$answer = strtolower(filterString($_POST["answer$id"]));
$errorMsg = 0;
$query1 = $conn->query("SELECT * FROM visual_cards WHERE id = '$id'");
$cardData = mysqli_fetch_array($query1);
if($cardData['status'] != 'active'){
echo "<div class='alert alert-danger'>Card currently Unavailable for funding!</div>";
die();
}
if($amount ==""){
echo "<div class='alert alert-danger'>Enter top-up Amount!</div>";
borderError("red", "amount$id");
die();
}else{borderError("green", "amount$id");}
if($amount > $loan_maxi){
echo "<div class='alert alert-danger'>Maximum card top-up exceeded!</div>";
borderError("red", "amount$id");
die();
}else{borderError("green", "amount$id");}
if($amount > $accountbalance){
echo "<div class='alert alert-danger'>Insufficient account balance!</div>";
borderError("red", "amount$id");
die();
}else{borderError("green", "amount$id");}
if($answer != $cardData['answer']){
echo "<div class='alert alert-danger'>Incorrect Security answer!</div>";
borderError("red", "answer$id");
die();
}else{borderError("green", "answer$id");}
if($errorMsg == 0){
$transferToken = randomString(64);
$ref = randomString(9);
$dd = date("my");
$dc = substr($sitename, 0, 3);
$refNumber = strtoupper("$dc/$ref-$dd");
$otp = randomNumber(6);
$dated = date("d M Y, g:i a");
$des = "$dc-$dd-eTopup-$ref";
$acctBal = $accountbalance - ($amount);
$acctBal2 = $cardData['balance'] + ($amount);
$queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('VisualCard Top-up', 'Debit', '$refNumber', '$dated', '$amount', '$acctBal', '$userid', '$des', '$transferToken')");
$queryForBalUpdate = $conn->query("UPDATE users SET accountbalance = '$acctBal' WHERE id = '$userid'");
$queryForBalUpdate2 = $conn->query("UPDATE visual_cards SET balance = '$acctBal2' WHERE id = '$id'");
echo "<div class='alert alert-success'>$amount $money top-up was successful!</div>";
print redirect("5", "visual-card?cardList=manage");
}
}
}
if($_GET['action'] == "approveKyc"){
if(isset($_POST)){
$id = $_GET['id'];
$msg = filterString($_POST["msg$id"]);
$userid = $_GET['userid'];
$sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$result = mysqli_fetch_array($sql2);
$email = $result['email'];
$fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
$query = $conn->query("UPDATE kyc SET status = 'success' WHERE id = '$id'");
//email Notification
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = "KYC approved";
$mail->isHTML(true);
include('../email/kyc-approval.php');
$mail->Body=$kycBody;
if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
}else{ echo "";}
feedback("toast", "success", "KYC Application Approved", "approved");
print redirect("3", "kyc");
}
}
if($_GET['action'] == "rejectKyc"){
if(isset($_POST)){
$id = $_GET['id'];
$msg = filterString($_POST["msg$id"]);
$userid = $_GET['userid'];
$sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$result = mysqli_fetch_array($sql2);
$email = $result['email'];
$fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
$query = $conn->query("UPDATE kyc SET status = 'success' WHERE id = '$id'");
//email Notification
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = "KYC Verification Failed";
$mail->isHTML(true);
include('../email/kyc-rejected.php');
$mail->Body=$kycBody;
if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
}else{ echo "";}
feedback("toast", "success", "KYC Application Rejected", "Rejected");
$queryb = $conn->query("DELETE FROM kyc WHERE id = '$id'");
print redirect("3", "kyc");
}
}
if($_GET['action'] == "approveLoanRequest"){
if(isset($_POST)){
//LOAN APPROVAL
$id = $_GET['id'];
$msg = $_POST["msg$id"];
$query = $conn->query("SELECT * FROM loan_application WHERE id = '$id'");
$rows = mysqli_fetch_assoc($query);
$amount = $rows['loan_amount'];
$refNumber = $rows['ref'];
$dated = $rows['datecreated'];
$facility = $rows['facility'];
$userid = $rows['userid'];
$amount = $rows['loan_amount'];
$tenure = $rows['tenure'];
$facility = $rows['facility'];
$reason = $rows['reason'];
$sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$result = mysqli_fetch_array($sql2);
$email = $result['email'];
$fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
$accountnumber = $result['accountnumber'];
$monthly_int_rate = ($interest_rate/100 * $amount);
$pcharge = ($penal_charge/100 * $amount);
$insurance_fee = ($insurance/100 * $amount);
$manage_fee = ($mana_fee/100 * $amount);
$commulative_int = ($monthly_int_rate * $tenure);
$total = ($amount + $commulative_int + $insurance_fee + $pcharge + $manage_fee);
$commulative_int = round(($total/$tenure),2);
$sql = $conn->query("UPDATE loan_application SET status = 'success' WHERE id = '$id'");
//NOTIFY USER VIA EMAIL
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = "Loan request has been approved";
$mail->isHTML(true);
include('../email/loan-application-approval.php');
$mail->Body=$loanBody;
if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
}else{ echo "";}
feedback("toast", "success", "Loan request has been approved", "approved");
print redirect("4", "loan_requests");
}
}
if($_GET['action'] == "rejectLoanRequest"){
if(isset($_POST)){
//LOAN REJECTION
if(isset($_POST)){
//LOAN APPROVAL
$id = $_GET['id'];
$msg = $_POST["msg$id"];
$query = $conn->query("SELECT * FROM loan_application WHERE id = '$id'");
$rows = mysqli_fetch_assoc($query);
$amount = $rows['loan_amount'];
$refNumber = $rows['ref'];
$dated = $rows['datecreated'];
$facility = $rows['facility'];
$userid = $rows['userid'];
$amount = $rows['loan_amount'];
$tenure = $rows['tenure'];
$facility = $rows['facility'];
$reason = $rows['reason'];
$sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$result = mysqli_fetch_array($sql2);
$email = $result['email'];
$fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
$accountnumber = $result['accountnumber'];
$monthly_int_rate = ($interest_rate/100 * $amount);
$pcharge = ($penal_charge/100 * $amount);
$insurance_fee = ($insurance/100 * $amount);
$manage_fee = ($mana_fee/100 * $amount);
$commulative_int = ($monthly_int_rate * $tenure);
$total = ($amount + $commulative_int + $insurance_fee + $pcharge + $manage_fee);
$commulative_int = round(($total/$tenure),2);
$sql = $conn->query("UPDATE loan_application SET status = 'rejected' WHERE id = '$id'");
//NOTIFY USER VIA EMAIL
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = "Loan request has been Rejected";
$mail->isHTML(true);
include('../email/loan-application-rejected.php');
$mail->Body=$loanBody;
if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
}else{ echo "";}
feedback("toast", "success", "Loan request has been Rejected", "rejected");
print redirect("4", "loan_requests");
}
}
}
if($_GET['action'] == "deleteLoanRequest"){
if(isset($_POST)){
$id = $_GET['id'];
$query = $conn->query("DELETE FROM loan_application WHERE id = '$id'");
feedback("toast", "success", "Loan request has been Deleted", "Deleted");
print redirect("2", "loan_requests");
}
}
if($_GET['action'] == "approveCardRequest"){
if(isset($_POST)){
$id = $_GET['id'];
$userid = $_GET['userid'];
$sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$result = mysqli_fetch_array($sql2);
$email = $result['email'];
$fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
$query1 = $conn->query("UPDATE visual_cards SET status = 'active' WHERE id = '$id'");
//Email Notifcation
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = "Visual Card activated";
$mail->isHTML(true);
include('../email/visual-card-activation.php');
$mail->Body=$cardBody;
if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
}else{ echo "";}
feedback("toast", "success", "Card activated", "Successful");
print redirect("3", "visual_card");
}
}
if($_GET['action'] == "rejectCardRequest"){
if(isset($_POST)){
$id = $_GET['id'];
$userid = $_GET['userid'];
$sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
$result = mysqli_fetch_array($sql2);
$email = $result['email'];
$fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
$query1 = $conn->query("UPDATE visual_cards SET status = 'inactive' WHERE id = '$id'");
//Email Notifcation
$mail = new PHPMailer();
$mail->isSMTP();
$mail->Host = $smtp_host;
$mail->SMTPAuth = true;
$mail->CharSet = "UTF-8";
$mail->Username = $smtp_username;
$mail->Password = $smtp_password;
$mail->SMTPSecure = $smtp_auth;
$mail->Port = $smtp_port;
$mail->setFrom($smtp_username, $display_name);
$mail->addReplyTo($smtp_username, $display_name);
$mail->addAddress($email);
$mail->Subject = "Visual Card Rejected";
$mail->isHTML(true);
include('../email/visual-card-rejected.php');
$mail->Body=$cardBody;
if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
}else{ echo "";}
feedback("toast", "success", "Card Rejected", "Successful");
print redirect("3", "visual_card");
}
}
if($_GET['action'] == "blockVisualCard"){
if(isset($_POST)){
$id = $_GET['id'];
$query1 = $conn->query("UPDATE visual_cards SET status = 'inactive' WHERE id = '$id'");
feedback("toast", "success", "Card Deactivated", "Successful");
print redirect("3", "visual_card");
}
}
if($_GET['action'] == "activateVisualCard"){
if(isset($_POST)){
$id = $_GET['id'];
$query1 = $conn->query("UPDATE visual_cards SET status = 'active' WHERE id = '$id'");
feedback("toast", "success", "Card activated", "Successful");
print redirect("3", "visual_card");
}
}
if($_GET['action'] == "deleteVisualCard"){
if(isset($_POST)){
$id = $_GET['id'];
$query1 = $conn->query("DELETE FROM visual_cards WHERE id = '$id'");
feedback("toast", "success", "Card Deleted", "Successful");
print redirect("3", "visual_card");
}
}
if($_GET['action'] == "loanSetting"){
if(isset($_POST)){
$penal_charge = filterString($_POST['penal_charge']);
$loan_maxi = filterString($_POST['loan_maxi']);
$loan_mini = filterString($_POST['loan_mini']);
$interest_rate = filterString($_POST['interest_rate']);
$insurance = filterString($_POST['insurance']);
$mana_fee = filterString($_POST['mana_fee']);
$loan = filterString($_POST['loan']);
$query = $conn->query("UPDATE loan SET status = '$loan', penal_charge = '$penal_charge', loan_maxi = '$loan_maxi', loan_mini = '$loan_mini', interest_rate = '$interest_rate', insurance = '$insurance', mana_fee = '$mana_fee'");
feedback("sweet", "success", "Loan Configuration successfully Updated", "Updated");
print redirect("4", "loan");
}
}
if($_GET['action'] == "smsSetting"){
if(isset($_POST)){
$sms = filterString($_POST['sms']);
$sender_id = filterString($_POST['sender_id']);
$api = filterString($_POST['api']);
$query = $conn->query("UPDATE sms SET status = '$sms', sender_id = '$sender_id', api = '$api'");
feedback("sweet", "success", "SMS Configuration successfully Updated", "Updated");
print redirect("4", "smtp");
}
}
if($_GET['action'] == "twilioSetting"){
checkAdmin();
$f = (object)$_POST;
foreach ($f as $key => $formelement) {
if(empty($formelement)){
borderError("red", $key);
}else{
borderError("green", $key);
}
}
if (in_array(null, $_POST, true) || in_array('', $_POST, true)) {
die(feedback("sweet", "error", "All fields are required", "Error"));
}
$db->where("id",1);
if($db->update("twilio",(array)$f)){
print redirect("3", "smtp");
die(feedback("sweet", "success", "Twilio Details Updated", "Success"));
}
}
if($_GET['action'] == "p2pStart"){
include('userdata.php');
$account = filterString($_POST['account']);
$amount = filterString($_POST['amount']);
if($account == "" || $amount == ""){
feedback("sweet", "error", "All fields are required", "Failed");
die();
}
if (empty($amount)) {
borderError('red', 'amount');
}else{borderError('green', 'amount');}
if (empty($account)) {
borderError('red', 'account');
}else{borderError('green', 'account');}
if($daily_limit < checkLimit($userid) + $amount){
echo "<script>
Swal.fire('Error Occured', 'Daily Transaction Limit Exceeded! Kindly contact our customer service at $siteemail For information on how to upgrade your Account', 'error');
</script>";
die();
}
if($amount > $accountbalance){
feedback("sweet", "error", "Insufficient account balance", "Failed");
die();
}
$sql = $conn->query("SELECT * FROM users WHERE accountnumber = '$account'");
if (mysqli_num_rows($sql) > 0) {
$result = mysqli_fetch_array($sql);
if($result['accountnumber'] != $accountnumber){
?>
<script type="text/javascript">
$("#myModal").modal("show");
</script>
<div class="modal fade" tabindex="-1" role="dialog" id="myModal" data-keyboard="false" data-backdrop="static">
<div class="modal-dialog modal-dialog-centered " role="document">
<div class="modal-content">
<div class="modal-body modal-body-md">
<div class="nk-block-head nk-block-head-xs text-center">
<h5 class="nk-block-title">Review Transaction</h5>
<div class="nk-block-text">
<div class="caption-text">You are about to send <strong><?php echo "$money ".number_format($amount,2).""; ?></strong> to <strong> <?php echo "".$result['firstname']." ".$result['middlename']." ".$result['lastname'].""; ?></strong></div>
</div>
</div>
<div class="nk-block">
<div class="buysell-overview">
<ul class="buysell-overview-list">
<li class="buysell-overview-item">
<span class="pm-title">Send to:</span>
<span><?php echo "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";?> (<?php echo$account ?>)</span>
</li>
<li class="buysell-overview-item">
<span class="pm-title">Total Amount:</span>
<span class="pm-currency"><?php echo number_format((5.8+$amount),2); echo " $money"; ?> </span>
</li>
</ul>
<div class="sub-text-sm">*Our transaction fee are included.</div>
</div>
<form action="../scripts/auth?action=confirmP2p" method="post" id="confirmP2p">
<div id="p2pResut"></div>
<input type="hidden" name="sender" value="<?php echo$userid ?>">
<input type="hidden" name="receiver" value="<?php echo$result['id'] ?>">
<input type="hidden" name="amount" value="<?php echo $amount?>">
<div class="form-actions right">
<button type="submit" class="btn btn-raised btn-primary btn-block actionBtn" id="btn2">
Confirm Transaction
</button>
</form>
<div class="buysell-field form-action text-center actionBtn">
<div class="pt-3">
<a href="#" data-dismiss="modal" class="link link-danger">Cancel</a>
</div>
</div>
</div><!-- .nk-block -->
</div><!-- .modal-body -->
</div><!-- .modal-content -->
</div><!-- .modla-dialog -->
</div><!-- .modal -->
<?php
AjaxForm('../scripts/auth?action=confirmP2p', 'confirmP2p', 'p2pResut', 'btn2');
}
else{
feedback("toast", "error", "You cant transfer within the same account", "Failed");
borderError('red', 'account');
}
}else{
feedback("sweet", "error", "Account Not Found", "Failed");
borderError('red', 'account');
}
}
if($_GET['action'] == "confirmP2p"){
if(!isset($_SESSION['active_transaction'])){
include('userdata.php');
$sender = filterString($_POST['sender']);
$receiver = filterString($_POST['receiver']);
$amount = filterString($_POST['amount']);
$query1 = $conn->query("SELECT * FROM users WHERE id = '$sender'");
$senderdata = mysqli_fetch_array($query1);
$query2 = $conn->query("SELECT * FROM users WHERE id = '$receiver'");
$recidata = mysqli_fetch_array($query2);
$otp = randomNumber(4);
$_SESSION['p2potp'] = $otp;
include('../email/p2p-otp.php');
$recipient = str_replace("+", "", $senderdata['phone']);
$recipient = str_replace(" ", "", $senderdata['phone']);
$msg = "Dear $fullname, Your One Time Password is $otp. Please do not share it with third party.";
$sendSms = alertNotification($sms, $api, $sender_id, $msg, $recipient);
$rando = randomString(6);
if(Sendmail('Confirm transaction', $senderdata['email'], $emailBody) == 0 && $sendSms == 0){
$ref = randomString(9);
$dd = date("my");
$dc = substr($sitename, 0, 3);
$refNumber = strtoupper("$dc/$ref-$dd");
$dated = date("d M Y, g:i a");
$acctBal = $accountbalance - ($amount);
$description = strtoupper("DOM transfer/$rando/$dd");
$acctBal2 = $recidata['accountbalance'] + ($amount);
$renumber = $recidata['accountnumber'];
$accountholder = "".$recidata['firstname']." ".$recidata['middlename']." ".$recidata['lastname']."";
$transferToken = randomString(65);
$queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, bankname, accountnumber, accountholder, otp, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('Domestic Transfer', 'Debit', '$sitename', '$renumber', '$accountholder', '$otp', '$refNumber', '$dated', '$amount', '$acctBal', '$userid', '$description', '$transferToken')");
$queryForBalUpdate = $conn->query("UPDATE users SET accountbalance = '$acctBal' WHERE id = '$userid'");
//CREDIT RECIPIENT
$queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, bankname, accountnumber, accountholder, otp, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('Domestic Transfer', 'Credit', '$sitename', '$accountnumber', '$fullname', '$otp', '$refNumber', '$dated', '$amount', '$acctBal2', '$receiver', '$description', '$transferToken')");
$queryForBalUpdate2 = $conn->query("UPDATE users SET accountbalance = '$acctBal2' WHERE id = '$receiver'");
$_SESSION['active_transaction'] = "true";
//DEBIT ALERT TO USER
include('../email/p2p-credit_credit.php');
Sendmail("Debit alert Notification [$money $amount]", $senderdata['email'], $debitBody);
//CREDIT ALERT TO RECIPIENT
Sendmail("Credit alert Notification [$money $amount]", $recidata['email'], $creditBody);
$recipient = str_replace("+", "", $senderdata['phone']);
$recipient = str_replace(" ", "", $senderdata['phone']);
$dex = $description;
$dated = date("d/m/Y, H:ia");
$msg = "Debit alert\nAcct: ".substr($accountnumber, 0,3)."****".substr($accountnumber, 7,10)."\nAmt: $money ".number_format($amount,2)." DR\nDesc: $dex\nAcct Balance: $money ".number_format($acctBal)."\nTotal: $money ".number_format($acctBal)."\nDate: $dated";
alertNotification($sms, $api, $sender_id, $msg, $recipient);
//FOR RECIPIENT
$recipient = str_replace("+", "", $recidata['phone']);
$recipient = str_replace(" ", "", $recidata['phone']);
$dex = $description;
$dated = date("d/m/Y, H:ia");
$msg = "Credit alert\nAcct: ".substr($recidata['accountnumber'], 0,3)."****".substr($recidata['accountnumber'], 7,10)."\nAmt: $money ".number_format($amount,2)." DR\nDesc: $dex\nAcct Balance: $money ".number_format($acctBal2)."\nTotal: $money ".number_format($acctBal2)."\nDate: $dated";
alertNotification($sms, $api, $sender_id, $msg, $recipient);
feedback("sweet", "success", "Transaction successful", "Sent");
print redirect(4, "local_transfer?success/$transferToken&ref=$refNumber");
?>
<?php
//echo 'Mailer Error: ' . $mail->ErrorInfo;
}else{
$_SESSION['otp'] = $otp;
$_SESSION['receiver'] = $receiver;
$_SESSION['sender'] = $sender;
?>
<script type="text/javascript">
$("#otpModal").modal("show");
</script>
<div class="modal fade border-success" tabindex="-1" role="dialog" id="otpModal" data-keyboard="false" data-backdrop="static">
<div class="modal-dialog modal-dialog-centered modal-lg" role="document">
<div class="modal-content">
<div class="modal-body modal-body-lg">
<div class="nk-block-head nk-block-head-xs text-center">
<h5 class="nk-block-title">Confirm Transaction</h5>
<div class="nk-block-text">
<div class="caption-text">A four digits OTP has been forwarded to email address( *********<?php echo substr($email, 5,12); ?>) and phone( *********<?php echo substr($phone, 9,11); ?>) number associated with your account. Kindly use the code to complete this transaction.</div>
</div>
</div>
<div class="nk-block">
<form action="../scripts/auth?action=confirmP2pOTP" method="post" id="confirmP2pOTP">
<div class="buysell-field form-group">
<div class="form-label-group">
<label class="form-label" for="buysell-amount">Enter OTP</label>
</div>
<div class="form-control-group">
<input type="number" class="form-control form-control form-control-number" id="otp" name="otp" placeholder="****" style="word-spacing: 20px;">
<div class="form-dropdown">
<div class="text">OTP<span></span></div>
</div>
</div>
<div class="form-note-group">
<span class="buysell-min form-note-alt">Note: OTP expires in <span class="" id="timer">10:00<span> minutes</span>
</div>
<input type="hidden" name="sender" value="<?php echo$userid ?>">
<input type="hidden" name="receiver" value="<?php echo$recidata['id'] ?>">
<input type="hidden" name="amount" value="<?php echo $amount?>">
</div>
<div id="p2pResutOTP"></div>
<div class="form-actions right">
<button type="submit" class="btn btn-raised btn-primary btn-block actionBtn" id="btn3">
Confirm Transaction
</button>
</form>
<div class="buysell-field form-action text-center">
<div class="pt-3">
<a href="#" data-dismiss="modal" class="link link-danger">Cancel</a>
</div>
</div>
</div><!-- .nk-block -->
</div><!-- .modal-body -->
</div><!-- .modal-content -->
</div><!-- .modla-dialog -->
</div><!-- .modal -->
<?php AjaxForm('../scripts/auth?action=confirmP2pOTP', 'confirmP2pOTP', 'p2pResutOTP', 'btn3'); ?>
<?php
}
}else{
print redirect(0,'local_transfer');
}
}
if($_GET['action'] == "confirmP2pOTP"){
if(!isset($_SESSION['active_transaction'])){
include('userdata.php');
$sender = filterString($_POST['sender']);
$receiver = filterString($_POST['receiver']);
$amount = filterString($_POST['amount']);
if(empty($_POST['otp'])){
borderError('red', 'otp');
die(feedback("toast", "error", "Enter otp code", "Failed"));
}
if(filterString($_POST['otp']) != $_SESSION['otp']){
die(feedback("toast", "error", "Invalid OTP code", "Failed"));
}
$query1 = $conn->query("SELECT * FROM users WHERE id = '$sender'");
$senderdata = mysqli_fetch_array($query1);
$query2 = $conn->query("SELECT * FROM users WHERE id = '$receiver'");
$recidata = mysqli_fetch_array($query2);
$otp = $_SESSION['otp'];
$rando = randomString(6);
$ref = randomString(9);
$dd = date("my");
$dc = substr($sitename, 0, 3);
$refNumber = strtoupper("$dc/$ref-$dd");
$dated = date("d M Y, g:i a");
$acctBal = $accountbalance - ($amount);
$description = strtoupper("DOM transfer/$rando/$dd");
$acctBal2 = $recidata['accountbalance'] + ($amount);
$renumber = $recidata['accountnumber'];
$accountholder = "".$recidata['firstname']." ".$recidata['middlename']." ".$recidata['lastname']."";
$transferToken = randomString(65);
$queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, bankname, accountnumber, accountholder, otp, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('Domestic Transfer', 'Debit', '$sitename', '$renumber', '$accountholder', '$otp', '$refNumber', '$dated', '$amount', '$acctBal', '$userid', '$description', '$transferToken')");
$queryForBalUpdate = $conn->query("UPDATE users SET accountbalance = '$acctBal' WHERE id = '$userid'");
//CREDIT RECIPIENT
$queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, bankname, accountnumber, accountholder, otp, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('Domestic Transfer', 'Credit', '$sitename', '$accountnumber', '$fullname', '$otp', '$refNumber', '$dated', '$amount', '$acctBal2', '$receiver', '$description', '$transferToken')");
$queryForBalUpdate2 = $conn->query("UPDATE users SET accountbalance = '$acctBal2' WHERE id = '$receiver'");
$_SESSION['active_transaction'] = "true";
//DEBIT ALERT TO USER
include('../email/p2p-credit_credit.php');
Sendmail("Debit alert Notification [$money $amount]", $senderdata['email'], $debitBody);
//CREDIT ALERT TO RECIPIENT
Sendmail("Credit alert Notification [$money $amount]", $recidata['email'], $creditBody);
$recipient = str_replace("+", "", $senderdata['phone']);
$recipient = str_replace(" ", "", $senderdata['phone']);
$dex = $description;
$dated = date("d/m/Y, H:ia");
$msg = "Debit alert\nAcct: ".substr($accountnumber, 0,3)."****".substr($accountnumber, 7,10)."\nAmt: $money ".number_format($amount,2)." DR\nDesc: $dex\nAcct Balance: $money ".number_format($acctBal)."\nTotal: $money ".number_format($acctBal)."\nDate: $dated";
alertNotification($sms, $api, $sender_id, $msg, $recipient);
//FOR RECIPIENT
$recipient = str_replace("+", "", $recidata['phone']);
$recipient = str_replace(" ", "", $recidata['phone']);
$dex = $description;
$dated = date("d/m/Y, H:ia");
$msg = "Credit alert\nAcct: ".substr($recidata['accountnumber'], 0,3)."****".substr($recidata['accountnumber'], 7,10)."\nAmt: $money ".number_format($amount,2)." DR\nDesc: $dex\nAcct Balance: $money ".number_format($acctBal2)."\nTotal: $money ".number_format($acctBal2)."\nDate: $dated";
alertNotification($sms, $api, $sender_id, $msg, $recipient);
feedback("toast", "success", "Transaction successful", "Sent");
print redirect(4, "local_transfer?success/$transferToken&ref=$refNumber");
}
else{
print redirect(0, 'local_transfer');
}}
if($_GET['action'] == "ContinuePendingTransfer"){
$id = $_POST['transactionid'];
$query = $conn->query("SELECT * FROM pending_transcation WHERE id = '$id' and status = 0 ORDER BY id LIMIT 1");
if (mysqli_num_rows($query) > 0) {
$data = mysqli_fetch_array($query);
$data = (object)$data;
$info = preg_replace_callback(
'!s:(\d+):"(.*?)";!',
function ($m) {
return 's:' . strlen($m[2]) . ':"' . $m[2] . '";';
},
$data->data
);
$infos = unserialize($info);
$infos = (object)$infos[0];
$_SESSION['bankname'] = $infos->bankname; $_SESSION['accountholder'] = $infos->accountholder; $_SESSION['routineNumber'] = $infos->routineNumber; $_SESSION['accountnumberB'] = $infos->accountnumberB; $_SESSION['description'] = $infos->description; $_SESSION['amount'] = $infos->amount;
$_SESSION['transaction_session'] = $infos->transaction_session;
$_SESSION['pendingTransfer'] = $id;
$stage = $data->stage;
if ($enable_cot_imf == "Yes") {
$link = "../personal-banking/auth?verification=$stage&transferToken=".$_SESSION['transaction_session']."";
$_SESSION['link'] = $link;
}
elseif($enable_tin_ic_tac == "Yes"){
$link = "../personal-banking/auth?verification=$stage&transferToken=".$_SESSION['transaction_session']."";
$_SESSION['link'] = $link;
}
else{
$_SESSION['link'] = $link;
$link="../email/otp-mail.php?transferToken=".$_SESSION['transaction_session']."";
}
echo "
<script>
var timerInterval;
Swal.fire({
allowOutsideClick: false,
title: 'Proccessing Transaction!',
html: 'Please wait...',
timer: 1000,
timerProgressBar: true,
onBeforeOpen: function onBeforeOpen() {
Swal.showLoading();
timerInterval = setInterval(function () {
Swal.getContent().querySelector('b').textContent = Swal.getTimerLeft();
}, 100);
},
onClose: function onClose() {
clearInterval(timerInterval);
window.location.href='authenticating?i80993=".$_SESSION['transaction_session']."';
}
}).then(function (result) {
if (
result.dismiss === Swal.DismissReason.timer) {
console.log('I was closed by the timer'); // eslint-disable-line
}
});
</script>
";
}
}
if($_GET['action'] == "AuthCodesSetting"){
if(isset($_POST)){
$code_1 = filterString($_POST['code_1']);
$code_2 = filterString($_POST['code_2']);
$code_3 = filterString($_POST['code_3']);
$code_4 = filterString($_POST['code_4']);
$code_5 = filterString($_POST['code_5']);
$query = $conn->query("UPDATE auth_code SET code_1 = '$code_1', code_2 = '$code_2', code_3 = '$code_3', code_4 = '$code_4', code_5 = '$code_5' WHERE id = 1");
feedback("sweet", "success", "Auth Code Configuration successfully Updated", "Updated");
echo mysqli_error($conn);
print redirect("4", "auth_codes");
}
}
b IDATxytVսϓ22 A@IR :hCiZ[v*E:WũZA ^dQeQ @ !jZ'>gsV仿$|?g)&x-E IENT ; @x T.i%-X} SvS5.r/ UHz^_$-W" w)Ɗ/ @Z &IoX P$K} JzX:;` &, ŋui,e6mX
Եr Kb1ԗ) D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A D A ݀!I*]R;I2$eZ#ORZSrr 6mteffu*((Pu'v{ DIߔ4^pIm '77WEEE;vƎ 4- $]'RI{\I&G :IHJ
DWBB=\WRm
o$K(V 9 ABB.}jѢv `^?IOȅ} ڶmG }T#FJ`5 6$- ھ}FI&v;0(h; Б 38CӧOWf!; A
i:F _m9s&|q%=# wZprrrla
A & P\\СC[A#! { olF}
`E2} MK/vV )i{ 4BffV\|ۭX `b@kɶ@%i$K z5zhmX [IXZ ` 'b%$r5 M4º /l
ԃ ߖ xhʔ)[@=}
K6IM}^ 5k㏷݆z
ΗÿO:gdGBmyT/@+Vɶ纽zl.yit뭷zV 0[Y^>Wsqs}\/@$(T7f.Inݺi R$푔n.~?H))\Z RW'Mo~v
Ov6oԃ xz! S,&xm/yɞԟ?'uaSѽb, 8GלKboi&3 t7Y,)JJ c[nzӳdE&KsZLӄ I ?@ & %ӟ۶mSMMњ0 iؐSZ, |J+N
~,0A 0!5%Q-YQQa 3 }$_vVr f9f?S 8` z D A D A D A D A D A D A D A D A D A dqP,تmMmg 1V?rSI꒟]u|l
RCyEf٢9 jURbztѰ!m5~tGj2DhG*{H9)꒟ר3:(+3\?/;TUݭʴ~S6lڧUJ*i$d(#=Yݺd{,p|3B)) q:vN0Y.jkק6;SɶVzHJJЀ-utѹսk>QUU \~]fFnK?&ߡ5b=z9)^|u_k-[ y%ZNU6 7Mi:]ۦ tk[n
X(e6 Bb."8cۭ|~teuuw|ήI-5"~Uk;ZicEmN/:]M>
cQ^uiƞ??Ң pc# TUU3UakNwA`:Y_V-8.KKfRi tv*
9S6ֿj,ՃNOMߤ]z^fOh|<>@Å5 _/Iu?{SY4hK/2]4%it5q]GGe2%iR|
W&f*^]??vq[LgE_3f}Fxu~}qd-ږFxu~I N >\;͗O֊:̗WJ@ Bh W=y|GgwܷH_NY?)Tdi'?խwhlmQi !SUUsw4kӺe4rfxu-[nHtMFj}H_u~w>)oV}(T'ebʒv3_[+vn @Ȭ\S}ot}w=k HFnxg S 0eޢm~l}uqZfF oZuuEg
`zt~? b;t%>WTkķh[ 2eG8LIWx,^\thrl^Ϊ{=dž<}qV@ ⠨Wy^LF_>0UkD uʫuCs$)I v:IK; 6ֲ4{^6 եm+l 3>݆uM 9u ?>Zc }g~qhKwڭ e FMM~pМuqǿz6Tb@8 @Y|jx](^]gf}M"tG
-w.@ vOqh~/HII` S[l.6nØXL9vU cOoB\xoǤ'T&I ǍQw_wpv[kmO{w~>#=P1Pɞa-we:iǏlHo꒟f9SzH?+shk%Fs:q VhqY `jvO'ρ?PyX3lх]˾uV{ݞ]1,MzYNW~̈́ joYn}ȚF߾mS]F z+EDxm/d{F{-W-4wY듏:??_gPf
^3ecg ҵs8R2מz@TA NGj)}CNi/R~}c:5{! ZHӋӾ6}T] G]7W6^n
9*,YqOZj :P?Q D FL|?-^.Ɵ7}fFhxe2Ps cz1&5\cn[=Vn[ĶE鎀uˌd3GII k;lNmشOuuRVfBE]ۣe Ӷu
:X-[(er4~LHi6:Ѻ@ԅr ST0 trk%$Č0 ez" *z " T/X9|8.C5Feg} C Q%͞ˣJvL/? j^ h & 9xF`њZ( & yF&Iݻfg #W;3^{Wo^4'v V[[K';+mӍִ] AC @ W?1^{එyh +^]fm~iԵ] AB @WTk̏t uR?l.OIHiYyԶ] Aˀ 7c:q}ힽaf6Z~қm(+sK4{^6}T *UUu]n.:kx{:2 _m=sAߤU@? Z-Vކе z왍Nэ{|5 pڶn b
p-@sPg]0G7fy-M{GCF'%{4` =$-Ge\ eU:m+Zt'WjO!OAF @ik&t݆ϥ_
e}=]" Wz_.͜E3leW Fih|t-wZۍ-uw=6 YN {6|} | *={Ѽn.S .z1z jۻTH]흾 D uDvmvK .` V]yY~sI@t?/ϓ. m&[ " +P?MzovVЫG3- G RR[(!!\_,^%?v@ ҵő
m`Y)tem8GM x.))A]Y i`ViW`?^~! S#^+ѽGZj?Vģ 0.))AlzL*]OXrY `DBBLOj{-MH'ii-ϰ ok7^
)쭡b]UXSְmռY|5 *cֽk0B7镹%ڽP# 8nȎq}mJr23_>lE5$iwui+ H~F`IjƵ@q
\ @#qG 0" . 0" l ` . 0! , AQHN6qzkKJ#o;`Xv2>,tێJJ7Z/*A .@fفjMzkg @TvZH3Zxu6Ra'%O?/d Q5x YkU]Rֽkق@ DaS^RSּ5|BeHNN͘p
HvcYcC5:y
#`οb; z2 .!kr}gUWkyZn=f Pvsn3p~;4p˚=ē~NmI] ¾ 0lH[_L hs h_ ғߤc_њe c) g 7VIZ5 yrgk̞W#IjӪv>՞y睝M8[ |]\շ 8M 6%|@P ZڨI-m>=k= 'aiRo-x?>Q. }`Ȏ:Wsmu u >
.@,&;+!!˱tﭧD QwRW\vF\~Q7>sp Yw$%A~;~}6 ¾ g &if_=j,v+U L1(tW ake:@Ș>j$Gq2t7S?vL|]u/ .(0 E 6Mk6hiۺzښOrifޱxm/Gx> Lal%%~{lBsR4* }{0Z/ tNIɚpV ^# Lf:u@k#RSu
=S^ZyuR/.@n&z~B=0eg뺆#,Þ[ B/?H uUf7y
Wy}Bwegל`Wh(||`l`.;Ws?V@" c:iɍL֯PGv6zctM̠':wuW;d=;EveD}9J@ B(0iհ bvP1{\P&G7DIy_$-Q jm~Yrr&]CDv%bh|Yzni _ R ;kg}nJOIIwy uL}{ЌNj}:+3Y?:WJ/N+Rzd=hb;dj͒suݔ@NKMԄ jqzC5 @y°hL m;*5ezᕏ=ep
XL n?מ:r`۵tŤZ|1v`V뽧_csج'ߤ%oTuumk%%%h)uy]Nk[n
'b2 l.=͜E%gf$[c;s:V-͞WߤWh-j7]4=F-X]>ZLSi[Y*We; Zan(Ӈ W|e(HNNP5[=
r4tP
&0< pc# `vTNV
GFqvTi * Tyam$ߏWyE* VJKMTfFw >'$-ؽ.Ho.8c"@ D A D A D A D A D A D A D A D A D A~j*֘, N;Pi3599h=g oض L giJ5փy~}&Zd9 p֚
e:|hL``b/d9 p? fgg+%%hMg Xosج, ΩOl0Zh=x djL mhݻo O [g_l, 8a]٭+ӧ0 $I] c]:粹:Teꢢ"5a^Kgh,&= =՟ ^߶ߢE ܹS J}I%:8
IDAT~,9/ʃ PW'Mo }zNƍ쨓zPb NZ~^z=4mswg;5 Y~SVMR XUյڱRf?s:w
; 6H:º i 5 -maM &O3; 1IKeam Zh͛7+##v+c ~u~ca] GnF'ټL~ PPPbn
v oC 4R,ӟgg %hq} @#M4IÇ Oy^xM Zx
) yO w @HkN˖-Sǎ mb]X@n+i͖ !++K3gd\$mt$^ YfJ \8PRF )77Wא!Cl $i: @@_oG I{$# 8磌ŋ9 1A (Im7 ֭>}ߴJq7ޗt^ -[ԩSj*}%]&'
- ɓ'ꫯVzzvB#; a
7@GxI{jƌ.LÇWBB7 `O"I$ /@R @ eee@۷ >}0 ,ɒ2$53Xs|cS~r pTYYY} k Hc %&k.], @ A D A D A D A D A D A D A D A D A @lT<%''*Lo^={رc5h %$+CnܸQ3fҥK}vUVVs9G
R,_{ xˇ3 o߾;TTTd}馛]uuuG~iԩ@4 bnvmvfϞ /Peeeq}}z a
I~,誫{UWW뮻}_~YƍSMMMYχ ֝waw \ ď cxꩧtEƍկ_?۷5@u ?1kNׯWzz/wy>}zj3 k (ٺu q_Zvf̘:~ AB Q&r| ! %KҥKg Ԟ={<_X-z ! CyFUUz~ AB QIIIjݺW $ UXXDٳZ~ AB QƍecW $<(~<RSSvZujjjԧO ZQu@4 8m&&&jԩg $ ď 1h ͟?_{768@ g
=@ `)))5o6m 3 ) ѣƌJ;wҿUTT /KZR{~a=@ 0o<*狔iFɶ[ˎ ;T]] OX@ ?K.ۈxN p p p p p p p p p p p p p p p p pP fl߾] ,{ｧk۶mڿo5 BTӦMӴiӴ|r D B2e |An!D y'tkΝ[A $***t5'
" !駟oaD nΝ:t֭[gD ШQ0 6qD;@ x M6v( PiizmZ 4ew" @ ̴ixf [~-F ٱc&IZ 2|n!?$ @{[HTɏ #@h Ȏ I# _m (F /6Z3 z'\r, r!;w2Z3j=~G Y 7"I$i I. p_" ? p N` y D D ?: _ G ÿa b7 J ! Bx @0 Bo
cG @`1C [ @0G
@`0C _ u V1 aC X > W ` | `! < S `" <. `# c `? cA C 4
? c p# ~ @0 ?: 0 8& _ M Q1 J h# ? /` 7; I q 7 a w Q A 1 H p
! #< 8/# @1Ul7 =S=K.4Z?E _$i@ ! 1!E 4? ` P_ @B ă 1 0# : " aU,xb F Y1
[n |n
#' v EH:`x b
# v D 4 Y hi.i& EΖv# O H 4IŶ}:Ik h @tZRF # (tXҙzZ ? I3l7 q@õ|ۍ 1,GpuY Ꮿ@ hJv# x xk$
v# 9 5 }_$ c S#=+"K {F*m7`# %H:NRS p6I?sIՖ{Ap$I$I:QRv2$Z @UJ*$]<FO4 IENDB`