| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/hkosl.com/m.musiccircle/ |
Upload File : |
<?
include('_init.php');
//$data = $_POST;
$invalid_upload_file_format = false;
require_once("webadmin/mime_type_lib.php");
switch ($_POST['action']) {
case 'course_share_email':
//
$id = (int)$_POST['course_id'];
$sql = "select * from tutor_postjob as tb where id = ? and deleted = ? and approved = ? and status = ? and (NOW() between start_date and end_date)";
$parameters = array($id, 0, 1, 1);
$row_detail = bind_pdo($sql, $parameters, "selectone");
$sql = "select nickname,tutor_no, id
from tutor_main where id = ? and deleted = ? LIMIT 1";
$parameters = array($row_detail["tutormain_id"], 0);
$row_tutor = bind_pdo($sql, $parameters, "selectone");
$sql = "select name_cn as name
from master_type_code where id = ? and typeid = ? and deleted = ? LIMIT 1";
$parameters = array($row_detail["mas_instrument"], 'INSTRUMENT', 0);
$row_instrument = bind_pdo($sql, $parameters, "selectone");
$sql = "select * from master_type_code where typeid = ? and id = ? and deleted = ?";
$parameters = array('RESIDENCE_POSITIONCODE', $row_detail['classlocation'], 0);
$row_position = bind_pdo($sql, $parameters, "selectone");
$sql = "SELECT date FROM tutor_postjob_date WHERE postjob_refid = ?";
$parameters99 = array(intval($row_detail['id']));
$rows_postjob_date = bind_pdo($sql, $parameters99, "selectall");
if ($row_detail['level'] == 1) {
$level = '初級';
} else if ($row_detail['level'] == 3) {
$level = '三級';
}
//
$to = $_POST['email'];
$sender_name = $site_info['companyname_' . $lang];
$sender_email = $site_info['enquiryemail'];
$content_arr['member_name'] = '你好,';
$subject = $row_instrument["name"] . " " . $row_detail["people_count"].'人班';
$content_arr['titlename'] = $row_instrument["name"] . " " . $row_detail["people_count"].'人班';
$content_arr['msg'] = '每人收費 : $'.(float)$row_detail["fee"].'<br>級別 : '.$level;
$content_arr['date'] = date('Y-m-d');
$content_arr['time'] = date('H:i:s');
$map_file = 'email/page.html';
sendEmail2($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
$path = $_SERVER['HTTP_REFERER'];
@header("Location: {$path}");
echo "<script language='JavaScript'>window.location='{$path}'</script>";
exit();
break;
case 'profile_adminmsg':
$msg = $_POST['msg'];
$tel = $_POST['tel'];
$email = $_POST['email'];
if($email && $tel && $msg){
$msg = '留言: '.$msg.'<br>
電郵: '.$_POST['email'].'<br>
電話: '.$_POST['tel'];
unset($data);
$data['type'] = 'findtutor';
$data['msg'] = $msg;
$data['lastupdate'] = date('Y-m-d H:i:s');
$data['status'] = 1;
$data['deleted'] = 0;
$sql = mysql_install($data, 'admin_msg', 'add');
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
//
$lang = 'cn';
$to = $site_info['enquiryemail'];
$sender_name = $site_info['companyname_' . $lang];
$sender_email = $_POST['email'];
$content_arr['member_name'] = '';
if ($lang == 'en') {
$subject = '聯絡導師';
} else if ($lang == 'cn') {
$subject = '聯絡導師';
}
$content_arr['titlename'] = '';
$content_arr['msg'] = $msg;
$content_arr['date'] = date('Y-m-d');
$content_arr['time'] = date('H:i:s');
$map_file = 'email/page.html';
sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
$path = $_SERVER['HTTP_REFERER'];
@header("Location: {$path}");
echo "<script language='JavaScript'>window.location='{$path}'</script>";
exit();
}
break;
case 'category_adminmsg':
$instrument = $_POST['instrument_id'];
$tel = $_POST['tel'];
$email = $_POST['email'];
if($email && $tel && $instrument){
$sql = "select name_en,name_cn from master_type_code where id = ? and typeid = 'INSTRUMENT' LIMIT 1";
$parameters = array($instrument);
$row_instrument = bind_pdo($sql, $parameters, "selectone");
$msg = '樂器: '.$row_instrument['name_cn'].'<br>
電郵: '.$_POST['email'].'<br>
電話: '.$_POST['tel'];
unset($data);
$data['type'] = 'findtutor';
$data['msg'] = $msg;
$data['lastupdate'] = date('Y-m-d H:i:s');
$data['status'] = 1;
$data['deleted'] = 0;
$sql = mysql_install($data, 'admin_msg', 'add');
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
$lang = 'cn';
$to = $site_info['enquiryemail'];
$sender_name = $site_info['companyname_' . $lang];
$sender_email = $site_info['enquiryemail'];
$content_arr['member_name'] = '';
if ($lang == 'en') {
$subject = '使用導師配對顧問服務';
} else if ($lang == 'cn') {
$subject = '使用導師配對顧問服務';
}
$content_arr['titlename'] = '';
$content_arr['msg'] = $msg;
$content_arr['date'] = date('Y-m-d');
$content_arr['time'] = date('H:i:s');
$map_file = 'email/page.html';
$result = sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
if($result == "OK"){
$_SESSION['course_msg'] = true;
}
$path = $_SERVER['HTTP_REFERER'];
@header("Location: {$path}");
echo "<script language='JavaScript'>window.location='{$path}'</script>";
exit();
}
break;
case 'course_category_adminmsg':
if($_POST["tel"] && $_POST["email"] && $_POST["instrument"] && $_POST["district"]){
$msg = '電話: '.$_POST['tel'].'<br>
電郵: '.$_POST['email'].'<br>
樂器: '.$_POST['instrument'].'<br>
地區: '.$_POST['district'].'<br>';
unset($data);
$data['type'] = 'course_enquiry';
$data['msg'] = $msg;
$data['lastupdate'] = date('Y-m-d H:i:s');
$data['status'] = 1;
$data['deleted'] = 0;
$sql = mysql_install($data, 'admin_msg', 'add');
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
$lang = 'cn';
$to = $site_info['enquiryemail'];
$sender_name = $site_info['companyname_' . $lang];
$sender_email = $site_info['enquiryemail'];
$content_arr['member_name'] = '';
if ($lang == 'en') {
$subject = '使用音樂班配對顧問服務';
} else if ($lang == 'cn') {
$subject = '使用音樂班配對顧問服務';
}
$content_arr['titlename'] = '';
$content_arr['msg'] = $msg;
$content_arr['date'] = date('Y-m-d');
$content_arr['time'] = date('H:i:s');
$map_file = 'email/page.html';
$result = sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
if($result == "OK"){
$_SESSION['course_msg'] = true;
}
$path = $_SERVER['HTTP_REFERER'];
@header("Location: {$path}");
echo "<script language='JavaScript'>window.location='{$path}'</script>";
exit();
}
break;
case 'forgetpassword':
unset($tmp_data);
//檢查該電郵是否是導師
$sql = "SELECT cmsloginid,email,nickname as name FROM tutor_main WHERE email=? AND deleted = 0";
$parameters = array(aes_crypt(strtolower($_POST['email']), 1));
$record_email = bind_pdo($sql, $parameters, "selectone");
//檢查該電郵是否是學生
$sql = "SELECT cmsloginid,email,contactname as name FROM student_main WHERE email=? AND deleted = 0";
$parameters = array(aes_crypt(strtolower($_POST['email']), 1));
$record_email2 = bind_pdo($sql, $parameters, "selectone");
//查看是否找到學生或導師資料
if ($record_email['cmsloginid'] || $record_email2['cmsloginid']) {
if ($record_email['cmsloginid']) {
$record_member = $record_email;
} else {
$record_member = $record_email2;
}
/*---------------創建密碼---------------*/
include('webadmin/function_auth.php');
$password = pass_gen(8); //隨機8個字元密碼
$tmp_data['cmsloginpw'] = Password::hash($password); //加密
//儲存密碼
$sql = mysql_install($tmp_data, 'sys_cms_login', 'edit', 'cmsloginid');
$tmp_data['cmsloginid'] = $record_member['cmsloginid'];
$arraykey = array_keys($tmp_data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmp_data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
//
/*---------------完---------------*/
/*---------------發送電郵---------------*/
#$to = $record_member['email'].',bennyleung@onesolution.com.hk';
$lang = $_SESSION['langcode'];
$to = aes_crypt($record_member['email'], 2); //解密發送者電郵
$sender_name = $site_info['companyname_' . $lang];
$sender_email = $site_info['enquiryemail'];
$content_arr['member_name'] = $record_member['name'];
if ($lang == 'en') {
$subject = 'Password of Member 【Forget password】';
} else if ($lang == 'cn') {
$subject = '會員密碼【忘記密碼】';
}
//拿取網頁資料
$sql = "select cmsloginname from sys_cms_login as tb
where `cmsloginid` = ? and deleted = ? LIMIT 1";
$parameters = array($record_member['cmsloginid'], 0);
$record_cmslogin = bind_pdo($sql, $parameters, "selectone");
//
$sender_name = $site_info['companyname_' . $lang];
if ($lang == 'en') {
$content_arr['titlename'] = 'Password of Member 【Account Activation】';
$content_arr['msg'] = 'Your Password : ' . $password . '<br>';
} else if ($lang == 'cn') {
$content_arr['titlename'] = '會員密碼【忘記密碼】';
$content_arr['msg'] = '你的新密碼 : ' . $password . '<br>';
}
$content_arr['date'] = date('Y-m-d');
$content_arr['time'] = date('H:i:s');
$map_file = 'email/page.html';
sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
/*---------------完---------------*/
$path = 'forget_password.php?action=success';
} else {
$path = 'forget_password.php?action=fail';
}
@header("Location: {$path}");
exit;
break;
case 'logout':
/*---------------APP-----------------*/
//unlink device id and notification token of user
$sql = "update sys_cms_login set app_device_id = ?, app_notification_token = ?, app_device = ? where app_device_id = ?";
$parameters = array("", "", "", $_SESSION["app_device_id"]);
bind_pdo($sql, $parameters);
/*---------------後台使用---------------*/
unset($_SESSION['loginname']);
unset($_SESSION['cmsloginname']);
unset($_SESSION['cmsusername']);
unset($_SESSION['password']);
unset($_SESSION['loginid']);
unset($_SESSION['cmsloginid']);
unset($_SESSION['role']);
unset($_SESSION['cmsrole']);
unset($_SESSION['is_tutor']);
unset($_SESSION['is_student']);
/*---------------完---------------*/
/*---------------前台使用---------------*/
unset($_SESSION['member_login']);
unset($_SESSION['student_login']);
unset($_SESSION['login_user_name']);
/*---------------完---------------*/
$path = 'index.php';
break;
case 'login':
/*---------------找尋登入資料是導師或是學生---------------*/
if ($_POST['facebook_id']) { // 如使用facebook登入
//檢查該facebook回傳來的數據是否是導師
$sql = "SELECT cmsloginid FROM tutor_main WHERE facebook_id=? AND deleted = 0";
$parameters = array($_POST['facebook_id']);
$record = bind_pdo($sql, $parameters, "selectone");
//檢查該facebook回傳來的數據是否是學生
$sql = "SELECT cmsloginid FROM student_main WHERE facebook_id=? AND deleted = 0";
$parameters = array($_POST['facebook_id']);
$record2 = bind_pdo($sql, $parameters, "selectone");
$sql = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb
where `cmsloginid` = ? and deleted = ? LIMIT 1";
if ($record['cmsloginid']) {
$parameters = array($record['cmsloginid'], 0); //讀取導師資料
} else if ($record2['cmsloginid']) {
$parameters = array($record2['cmsloginid'], 0); //讀取學生資料
} else {
$parameters = array(0, 0); //什麼都找不到
}
} else {
//使用電郵密碼讀取導師資料
include('webadmin/function_auth.php');
$sql = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb
where `cmsloginname` = ? and `cmsloginpw` = ? and cmsrole = ? and deleted = ? LIMIT 1";
$parameters = array(aes_crypt(strtolower($_POST['email']), 1), Password::hash($_POST['password']), 'user', 0);
}
$row_cms = bind_pdo($sql, $parameters, "selectone");
$sql = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb
where `cmsloginname` = ? and cmsrole = ? and deleted = ? LIMIT 1";
$parameters = array(aes_crypt(strtolower($_POST['email']), 1), 'user', 0);
$email_exist = bind_pdo($sql, $parameters, "selectone");
/*---------------完---------------*/
/*---------------更新最後登入日期及時間---------------*/
if (!empty($row_cms)) {
$sql = "update sys_cms_login set last_login_date = ? where cmsloginid = ?";
$parameters = array(date("Y-m:d H:i:s"), $row_cms['cmsloginid']);
bind_pdo($sql, $parameters);
//update user app device id and notification token
$sql = "update sys_cms_login set app_device_id = ?, app_notification_token = ?, app_device = ? where cmsloginid = ?";
$parameters = array($_SESSION["app_device_id"], $_SESSION["app_notification_token"], $_SESSION["app_device"], $row_cms["cmsloginid"]);
bind_pdo($sql, $parameters);
}
/*---------------完---------------*/
if ($row_cms['is_tutor'] == 1) { //如果是導師
//查看是否已經電郵驗證
$sql = "select id,status,nickname from tutor_main
where `cmsloginid` = ? and `isemailverified` = 1 LIMIT 1";
$parameters = array($row_cms['cmsloginid']);
$row = bind_pdo($sql, $parameters, "selectone");
//
if ($row['id']) {
//儲存SESSION
$_SESSION['loginname'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsloginname'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsusername'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsloginid'] = $row_cms['cmsloginid'];
$_SESSION['loginid'] = $row_cms['cmsloginid'];
$_SESSION['cmsrole'] = $row_cms['cmsrole'];
$_SESSION['role'] = $row_cms['cmsrole'];
$_SESSION['is_tutor'] = $row_cms['is_tutor'];
$_SESSION['is_student'] = $row_cms['is_student'];
$_SESSION['login_user_name'] = $row['nickname'];
$_SESSION['member_login'] = $row['id'];
if ($row['status'] == 3 || $row['status'] == 4) { //查看是否已經手機或管理員驗證
if ($row['status'] == 4) { //管理員驗證
//$path = 'webadmin/index.php';
$path = 'index.php';
} else if ($row['status'] == 3) { //手機驗證
$path = 'job.php';
}
} else {
$_SESSION['member_login'] = $row['id'];
$_SESSION['login_user_name'] = $row['nickname'];
//$path = 'signupTutor.php';
$path = 'tutor_profile.php';
}
} else {
$_SESSION['login'] = 'fail';
$path = 'login.php';
}
} else if ($row_cms['is_student'] == 1) {
//查看是否已經電郵驗證
$sql = "select id,status,contactname from student_main
where `cmsloginid` = ? and `isemailverified` = 1 LIMIT 1";
$parameters = array($row_cms['cmsloginid']);
$row = bind_pdo($sql, $parameters, "selectone");
//
if ($row['id']) {
$_SESSION['loginname'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsloginname'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsusername'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsloginid'] = $row_cms['cmsloginid'];
$_SESSION['loginid'] = $row_cms['cmsloginid'];
$_SESSION['cmsrole'] = $row_cms['cmsrole'];
$_SESSION['role'] = $row_cms['cmsrole'];
$_SESSION['is_tutor'] = $row_cms['is_tutor'];
$_SESSION['is_student'] = $row_cms['is_student'];
$_SESSION['login_user_name'] = $row['contactname'];
$_SESSION['student_login'] = $row['id'];
if ($row['status'] == 3 || $row['status'] == 4) { //查看是否已經手機或管理員驗證
//$path = 'webadmin/index.php';
$path = 'index.php';
} else {
$_SESSION['login_user_name'] = $row['contactname'];
$_SESSION['student_login'] = $row['id'];
//$path = 'signupStudent.php';
$path = 'student_profile.php';
}
} else {
$_SESSION['login'] = 'fail';
$path = 'login.php';
}
} else {
$_SESSION['login'] = 'fail';
if(empty($email_exist)){
$path = 'login.php?error=1';
}else{
$path = 'login.php?error=2';
}
}
break;
case 'signup_tutorverification':
$nowdate = date("Y-m-d H:i:s");
$id = $_SESSION['member_login'];
if ($id) {
/*----------儲存成功註冊----------*/
$data['status'] = 3;
$data['lastupdate'] = $nowdate;
$sql = mysql_install($data, 'tutor_main', 'edit', 'id');
$data['id'] = $id;
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
$sql = "select cmsloginid
from tutor_main as tb where id = ? and deleted = ? and status = ?";
$parameters = array($id, 0, 3);
$row = bind_pdo($sql, $parameters, "selectone");
$sql = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb
where `cmsloginid` = ? and cmsrole = ? and deleted = ? LIMIT 1";
$parameters = array($row['cmsloginid'], 'user', 0);
$row_cms = bind_pdo($sql, $parameters, "selectone");
$_SESSION['loginname'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsloginname'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsusername'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsloginid'] = $row_cms['cmsloginid'];
$_SESSION['loginid'] = $row_cms['cmsloginid'];
$_SESSION['cmsrole'] = $row_cms['cmsrole'];
$_SESSION['role'] = $row_cms['cmsrole'];
$_SESSION['is_tutor'] = $row_cms['is_tutor'];
$_SESSION['is_student'] = $row_cms['is_student'];
$_SESSION['login_user_name'] = $row['nickname'];
insert_approval_list('TUTOR', 'tutor_main', $id);
}
$path = 'index.php';
break;
case 'tutor_signup':
if ($_POST['email'] && $_POST['password'] && $_POST['repassword'] && $_POST['mobno']) { // 如有電郵及密碼
if (!filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)) {
echo '<script>alert("'._lang("Please check email format.").'"); history.back();</script>';
exit;
}
if ($_POST['mobno'] != (int)$_POST['mobno'] || strlen($_POST['mobno']) != 8) {
echo '<script>alert("'._lang("Mobile number should be 8 digital number.").'"); history.back();</script>';
exit;
}
//check if tel verified
//skip for tel verify
/*$sql = "SELECT lastupdate FROM sms_log WHERE tel = ? AND type = ? and verified = ? order by lastupdate desc LIMIT 1";
$parameters = array((int)$_POST['mobno'], "tutor", 1);
$verified_tel = bind_pdo($sql, $parameters, "selectone");
if(empty($verified_tel)){
//not verified tel
echo '<script>alert("'._lang("Please verify mobile number.").'"); history.back();</script>';
exit;
}*/
include('webadmin/function_auth.php');
$nowdate = date("Y-m-d H:i:s");
/*------------創建後台帳號------------*/
$sql = "select max(cmsloginid) as maxid from sys_cms_login ";
$parameters = array();
$row2 = bind_pdo($sql, $parameters, "selectone");
$cmsloginid = $row2{"maxid"} + 1;
$data['cmsloginid'] = $cmsloginid;
$data['cmsusername'] = aes_crypt(strtolower($_POST['email']), 1);
$data['cmsloginname'] = aes_crypt(strtolower($_POST['email']), 1);
$data['cmsloginpw'] = Password::hash($_POST['password']);
$data['cmsrole'] = 'user';
$data['cmsstatus'] = '1';
$data['createdate'] = $nowdate;
$data['createby'] = '';
$data['lastupdate'] = $nowdate;
$data['lastupby'] = '';
$data['password_expirydate'] = '2047-07-01';
$data['deleted'] = 0;
$data['is_tutor'] = 1;
$data['is_student'] = 0;
$sql = mysql_install($data, 'sys_cms_login', 'add');
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
/*------------------------*/
/*------------設定權限------------*/
unset($data);
$data['deleted'] = 0;
$data['profile_id'] = 3;
$data['user_id'] = $cmsloginid;
$sql = mysql_install($data, 'profile_user', 'add');
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
/*------------------------*/
/*------------創建新導師------------*/
unset($data);
$sql = "select max(id) as maxid from tutor_main ";
$parameters = array();
$row2 = bind_pdo($sql, $parameters, "selectone");
$id = $row2{"maxid"} + 1;
$data['id'] = $id;
$data['tutor_no'] = gettutorNo($data['id']);
$data['cmsloginid'] = $cmsloginid;
$data['email'] = aes_crypt(strtolower($_POST['email']), 1);
$data['mobno'] = aes_crypt($_POST['mobno'], 1);
$data['createdate'] = $nowdate;
$data['lastupdate'] = $nowdate;
$data['deleted'] = 0;
$data['status'] = 2;
$data['isphoneverified'] = 1;
$data['isemailverified'] = 1;
$data['reg_from'] = "APP";
$sql = mysql_install($data, 'tutor_main', 'add');
$data['id'] = $id;
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
$path = 'tutor_profile.php';
$_SESSION['loginname'] = strtolower($_POST['email']);
$_SESSION['cmsloginname'] = strtolower($_POST['email']);
$_SESSION['cmsusername'] = strtolower($_POST['email']);
$_SESSION['cmsloginid'] = $cmsloginid;
$_SESSION['loginid'] = $cmsloginid;
$_SESSION['cmsrole'] = "user";
$_SESSION['role'] = "user";
$_SESSION['is_tutor'] = 1;
$_SESSION['is_student'] = 0;
$_SESSION['member_login'] = $id;
if (!empty($_SESSION["app_device_id"]) && !empty($_SESSION["app_notification_token"])) {
//update user app device id and notification token
$sql = "update sys_cms_login set app_device_id = ?, app_notification_token = ?, app_device = ? where cmsloginid = ?";
$parameters = array($_SESSION["app_device_id"], $_SESSION["app_notification_token"], $_SESSION["app_device"], $cmsloginid);
bind_pdo($sql, $parameters);
}
//no email verify for app
/*------------------------*/
/*------------發送電郵------------*/
/*$to = aes_crypt($data['email'], 2);
$sender_name = $site_info['companyname_' . $lang];
$sender_email = $site_info['enquiryemail'];
$lang = $_SESSION['langcode'];
if ($lang == 'cn') {
$subject = '導師註冊【電郵驗證】';
$content_arr['member_name'] = '你好';
$content_arr['titlename'] = '導師註冊【電郵驗證】';
$content_arr['msg'] = '
歡迎加入iMusicCircle。
<br><br>
多謝你申請成為iMusicCircle的導師。你的用戶資料如下：
<br><br>
電郵地址 : ' . strtolower($_POST['email']) . '
<br><br>
請點擊以下連結，確認你的電郵地址以啟動你的導師賬戶。
<br><br>
<a href="http://' . $_SERVER['HTTP_HOST'] . '/activation.php?type=' . aes_crypt('tutor', 1) . '&link=' . aes_crypt($id, 1) . '">http://' . $_SERVER['HTTP_HOST'] . '/activation.php?type=' . aes_crypt('tutor', 1) . '&link=' . aes_crypt($id, 1) . '</a><br>
(如未能直接點擊以上連結，請將連結複製到瀏覽器上打開)
<br><br>
啟動賬戶後，我們會先確定導師資歷。一般需時48－72小時。
<br><br>
我們亦建議導師同時進行手機短訊(SMS)認証，只有經過手機短訊認証，導師才可於音樂圈網上平台跟學生直接對話。
<br><br>
手機號碼及導師資歷一經確定後，你將可使用音樂圈的相關導師服務。
<br><br>
如有任何問題，請電郵至cs@imusiccircle.com 跟我們聯絡。
<br><br>
音樂圈客戶服務
';
} else if ($lang == 'en') {
$subject = 'Tutor Registration 【Email Verification】';
$content_arr['member_name'] = 'Hello ,';
$content_arr['titlename'] = 'Tutor Registration 【Email Verification】';
$content_arr['msg'] = '
Welcome to iMusicCircle.
<br><br>
Thanks for your registration as our Tutor and please find below with your login information.
<br><br>
Email Address : ' . strtolower($_POST['email']) . '
<br><br>
To complete the registration process, please click the link below for verification.
<br><br>
<a href="http://' . $_SERVER['HTTP_HOST'] . '/activation.php?type=' . aes_crypt('tutor', 1) . '&link=' . aes_crypt($id, 1) . '">http://' . $_SERVER['HTTP_HOST'] . '/activation.php?type=' . aes_crypt('tutor', 1) . '&link=' . aes_crypt($id, 1) . '</a><br>
(Please copy and paste the full address on your Internet Browser if the link doesn’t work)
<br><br>
We will check and confirm with your qualification as our tutor. This will take around 48 to 72 hours.
<br><br>
At the same time, we suggest our tutors to complete the mobile SMS verification. Tutors can only chat with students on iMusicCircle online platform after the mobile SMS verification.
<br><br>
After confirmation, you will be able to enjoy the service provided by iMusicCircle.
<br><br>
Please feel free to contact us at cs@imusiccircle.com if you have any question.
<br><br>
Yours sincerely,<br>
Customer Service, iMusicCircle
';
}
$content_arr['date'] = date('Y-m-d');
$content_arr['time'] = date('H:i:s');
$map_file = 'email/page.html';
$_SESSION['reg']['email'] = sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
$path = 'registration.php';*/
} else {
//$path = 'index.php';
echo '<script>history.back();</script>';
exit;
}
break;
case 'signup_subject':
$id = $_SESSION['member_login'];
if ($id) {
//
$data['canaccompany'] = $_POST['canaccompany'];
$sql = mysql_install($data, 'tutor_main', 'edit', 'id');
$data['id'] = $id;
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
// Fee
unset($tmpdata);
$post = formatPostData($_POST['area']);
foreach ($post as $array) {
unset($tmpdata);
$tmpdata['studenhome_addcharge'] = $array['studenhome_addcharge'];
$sql = mysql_install($tmpdata, 'tutor_teachareacode', 'edit', 'id');
$tmpdata['id'] = $array['id'];
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
// Teacher Expect Charge
unset($tmpdata);
$sql = "select * from tutor_charge WHERE tutormain_id=?;";
$parameters = array($id);
$rows_charge = bind_pdo($sql, $parameters, "selectall");
unset($array);
foreach ($rows_charge as $row_charge) {
$array[] = $row_charge['id'];
}
if (is_array($array)) {
$sql = "DELETE FROM `tutor_expectcharge` WHERE charge_id in (" . implode(',', $array) . ");";
$parameters = array();
bind_pdo($sql, $parameters);
}
$sql = "select id from tutor_charge where tutormain_id = ?";
$parameters = array($id);
$rows_charge = bind_pdo($sql, $parameters, "selectall");
foreach ($rows_charge as $row_charge) {
$sql = "DELETE FROM `tutor_expectcharge` WHERE charge_id = ?;";
$parameters = array($row_charge['id']);
bind_pdo($sql, $parameters);
}
$sql = "DELETE FROM `tutor_charge` WHERE tutormain_id=?;";
$parameters = array($id);
bind_pdo($sql, $parameters);
if (is_array($_POST['tutor_expectcharge'])) {
//print_r($_POST['tutor_expectcharge']);
for ($q = 1; $q <= 6; $q++) {
if ($_POST['tutor_expectcharge']['mas_instrument' . $q]) {
unset($tmpdata);
$sql = "select max(id) as maxid from tutor_charge ";
$parameters = array();
$row2 = bind_pdo($sql, $parameters, "selectone");
$charge_id = $row2{"maxid"} + 1;
$tmpdata['id'] = $charge_id;
$tmpdata['tutormain_id'] = $id;
$tmpdata['instrument_no'] = $q;
$tmpdata['mas_instrument'] = $_POST['tutor_expectcharge']['mas_instrument' . $q];
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$sql = mysql_install($tmpdata, 'tutor_charge', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
for ($a = 1; $a <= 8; $a++) {
if ($_POST['tutor_expectcharge']['charge_30min' . $q . '_' . $a] || $_POST['tutor_expectcharge']['charge_45min' . $q . '_' . $a] || $_POST['tutor_expectcharge']['charge_60min' . $q . '_' . $a]) {
unset($tmpdata);
$tmpdata['charge_id'] = $charge_id;
$tmpdata['type'] = 'fee';
$tmpdata['grade'] = $a;
$tmpdata['charge_30min'] = $_POST['tutor_expectcharge']['charge_30min' . $q . '_' . $a];
$tmpdata['charge_45min'] = $_POST['tutor_expectcharge']['charge_45min' . $q . '_' . $a];
$tmpdata['charge_60min'] = $_POST['tutor_expectcharge']['charge_60min' . $q . '_' . $a];
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$sql = mysql_install($tmpdata, 'tutor_expectcharge', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
}
for ($a = 1; $a <= 3; $a++) {
if ($_POST['tutor_expectcharge']['t_charge_30min' . $q . '_' . $a] || $_POST['tutor_expectcharge']['t_charge_45min' . $q . '_' . $a] || $_POST['tutor_expectcharge']['t_charge_60min' . $q . '_' . $a]) {
unset($tmpdata);
$tmpdata['charge_id'] = $charge_id;
$tmpdata['type'] = 'tfee';
$tmpdata['grade'] = $a;
$tmpdata['charge_30min'] = $_POST['tutor_expectcharge']['t_charge_30min' . $q . '_' . $a];
$tmpdata['charge_45min'] = $_POST['tutor_expectcharge']['t_charge_45min' . $q . '_' . $a];
$tmpdata['charge_60min'] = $_POST['tutor_expectcharge']['t_charge_60min' . $q . '_' . $a];
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$sql = mysql_install($tmpdata, 'tutor_expectcharge', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
}
}
}
}
//exit();
// Teacher Mode
unset($tmpdata);
$sql = "DELETE FROM `tutor_expstudentage` WHERE tutormain_id=?;";
$parameters = array($id);
bind_pdo($sql, $parameters);
if (is_array($_POST['expstudentage_id'])) {
foreach ($_POST['expstudentage_id'] as $value) {
$tmpdata['tutormain_id'] = $id;
$tmpdata['mas_expstudentage'] = $value;
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$sql = mysql_install($tmpdata, 'tutor_expstudentage', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
}
}
$path = 'signupTutorVerification.php?refid=' . $id;
break;
case 'signup_tutor':
$nowdate = date("Y-m-d H:i:s");
$id = $_SESSION['member_login'];
if ($id) {
$data['name_en'] = $_POST['name_en'];
$data['name_cn'] = $_POST['name_cn'];
if ($_FILES["profilephoto_path"]['name'] <> '') {
//check if image type is valid or not
$mime = get_file_mime_type($_FILES["profilephoto_path"]['tmp_name']);
if (($mime == "image/jpeg") || ($mime == "image/png")) {
$filename = $_FILES["profilephoto_path"]['name'];
preg_match("/\.([^\.]+)$/", $filename, $file_ext);
$newfilename = random_string(10) . "_teacher_refid_" . $id . "." . $file_ext[1]; // default length 8
move_uploaded_file($_FILES["profilephoto_path"]['tmp_name'], "file/teacher/" . $newfilename) or die ("Could not copy the file");
image_fix_orientation("file/teacher/" . $newfilename);
$photo = $newfilename;
$data['profilephoto_path'] = $photo;
//copy file to production
$auth_code = aes_crypt(date("Ymd")."imusiccircle", 1);
$url = $site_info["url"]."copy_files.php";
$postData = array("auth_code" => $auth_code, "app_file_full_path" => $site_info["url"]."file/teacher/" . $newfilename, "app_file_path" => "file/teacher/" . $newfilename);
$copy_files = call_curl($url, $postData, 1);
$sql = "update tutor_main set copy_files = ? where id = ?";
$parameters = array($copy_files, $id);
bind_pdo($sql, $parameters);
} else {
$invalid_upload_file_format = true;
}
if ($invalid_upload_file_format) {
echo '<script>alert("' . _lang("Invalid file format.") . '"); history.back();</script>';
exit;
}
}
//$data['email'] = $_POST['email'];
//$data['username'] = $_POST['username'];
$data['nickname'] = $_POST['nickname'];
$data['gender'] = $_POST['gender'];
$data['idno'] = aes_crypt($_POST['idno'], 1);
//$data['mobno'] = aes_crypt($_POST['mobno'], 1);
$data['hometelno'] = aes_crypt($_POST['hometelno'], 1);
//$data['mas_area_code'] = $_POST['mobno'];
$data['dob_year'] = $_POST['dob_year'];
$data['dob_mon'] = $_POST['dob_mon'];
$data['mas_residencecode'] = $_POST['mas_residencecode'];
$data['mas_area_code'] = $_POST['mas_area_code'];
$data['mas_teachexp'] = $_POST['mas_teachexp'];
$data['self_describemyself'] = $_POST['self_describemyself'];
$data['self_intro'] = $_POST['self_intro'];
$data['youtube_url'] = $_POST['youtube_url'];
$data['studentagerange_expected'] = $_POST['studentagerange_expected'];
$data['cansupplyinstrument'] = $_POST['cansupplyinstrument'];
$data['lastupdate'] = $nowdate;
$data['deleted'] = 0;
$sql = mysql_install($data, 'tutor_main', 'edit', 'id');
$data['id'] = $id;
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
// Teacher Area Code
$sql = "DELETE FROM `tutor_teachareacode` WHERE tutormain_id=?;";
$parameters = array($id);
bind_pdo($sql, $parameters);
$sql = "select * from master_type_code where typeid = ? and deleted = ?";
$parameters = array('TEACH_AREACODE', 0);
$rows_area = bind_pdo($sql, $parameters, "selectall");
foreach ($rows_area as $row_area) {
unset($studenhome_addcharge);
foreach($_POST['studenhome_addcharge'.$row_area['id']] as $value){
if($value){
$studenhome_addcharge[] = $value;
}
}
foreach ($_POST['area' . $row_area['id']] as $index => $value) {
unset($tmpdata);
$tmpdata['tutormain_id'] = $id;
$tmpdata['mas_teachareacode'] = $value;
//$tmpdata['studenhome_addcharge'] = $_POST['studenhome_addcharge'.$data['mas_area_code']][$index]?$_POST['studenhome_addcharge'.$data['mas_area_code']][$index]:0;
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$sql = mysql_install($tmpdata, 'tutor_teachareacode', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
}
// Teacher Venus
unset($tmpdata);
$sql = "DELETE FROM `tutor_teachvenus` WHERE tutormain_id=?;";
$parameters = array($id);
bind_pdo($sql, $parameters);
foreach ($_POST['teachvenus_id'] as $value) {
$tmpdata['tutormain_id'] = $id;
$tmpdata['mas_teachvenus'] = $value;
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$sql = mysql_install($tmpdata, 'tutor_teachvenus', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
// Teacher Mode
unset($tmpdata);
$sql = "DELETE FROM `tutor_teachmode` WHERE tutormain_id=?;";
$parameters = array($id);
bind_pdo($sql, $parameters);
if (is_array($_POST['teachmode_id'])) {
foreach ($_POST['teachmode_id'] as $value) {
$tmpdata['tutormain_id'] = $id;
$tmpdata['mas_teachmode'] = $value;
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$sql = mysql_install($tmpdata, 'tutor_teachmode', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
}
// instrumentquali
unset($tmpdata);
$sql = "DELETE FROM `tutor_instrumentquali` WHERE tutormain_id=?;";
$post = formatPostData($_POST['instrumentquali']);
$parameters = array($id);
bind_pdo($sql, $parameters);
if (is_array($post)) {
foreach ($post as $value) {
unset($tmpdata);
if ($value['mas_instrument'] && $value['grade'] && $value['year']) {
$tmpdata['tutormain_id'] = $id;
$tmpdata['mas_instrument'] = $value['mas_instrument'];
$tmpdata['grade'] = $value['grade'];
$tmpdata['year'] = $value['year'];
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$sql = mysql_install($tmpdata, 'tutor_instrumentquali', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
}
}
//tutor_cert
unset($tmpdata);
if (is_array($_POST['tutor_cert']['id'])) {
$sql = "DELETE FROM `tutor_cert` WHERE tutormain_id=? and id not in (" . implode(',', $_POST['tutor_cert']['id']) . ");";
} else {
$sql = "DELETE FROM `tutor_cert` WHERE tutormain_id=?;";
}
$file = formatPostData($_FILES['tutor_cert']);
unset($parameters);
$parameters = array($id);
bind_pdo($sql, $parameters);
if (is_array($file)) {
foreach ($file['file']['name'] as $i => $file_item) {
//for($i=0;$i<count($file['file']['name']);$i++){
if ($file['file']['name'][$i]) {
//check if image type is valid or not
$mime = get_file_mime_type($file['file']['tmp_name'][$i]);
if (($mime == "image/jpeg") || ($mime == "image/png") || ($mime == "application/pdf")) {
$filename = $file['file']['name'][$i];
preg_match("/\.([^\.]+)$/", $filename, $file_ext);
$newfilename = random_string(10) . "_cert_refid_" . $id . "." . $file_ext[1]; // default length 8
move_uploaded_file($file['file']['tmp_name'][$i], "file/teacher/" . $newfilename) or die ("Could not copy the file2");
$photo = $newfilename;
//copy file to production
$auth_code = aes_crypt(date("Ymd")."imusiccircle", 1);
$url = $site_info["url"]."copy_files.php";
$postData = array("auth_code" => $auth_code, "app_file_full_path" => $site_info["url"]."file/teacher/" . $newfilename, "app_file_path" => "file/teacher/" . $newfilename);
$copy_files = call_curl($url, $postData, 1);
/*$sql = "update tutor_cert set copy_files = ? where id = ?";
$parameters = array($copy_files, $id);
bind_pdo($sql, $parameters);*/
$tmpdata['tutormain_id'] = $id;
$tmpdata['cert_path'] = $photo;
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$tmpdata['reg_from'] = "APP";
$tmpdata['copy_files'] = $copy_files;
if ($_POST['tutor_cert']['id'][$i]) {
$sql = mysql_install($tmpdata, 'tutor_cert', 'edit', 'id');
$tmpdata['id'] = $_POST['tutor_cert']['id'][$i];
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
} else {
$sql = mysql_install($tmpdata, 'tutor_cert', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
} else {
$invalid_upload_file_format = true;
}
}
}
if ($invalid_upload_file_format) {
echo '<script>alert("' . _lang("Invalid file format.") . '"); history.back();</script>';
exit;
}
}
}
$path = 'signupTutorSubject.php';
break;
case 'signup_studentverification':
$nowdate = date("Y-m-d H:i:s");
$id = $_SESSION['student_login'];
if ($id) {
$data['status'] = 4;
$data['approved'] = 1;
$data['lastupdate'] = $nowdate;
$sql = mysql_install($data, 'student_main', 'edit', 'id');
$data['id'] = $id;
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
$sql = "select cmsloginid
from student_main as tb where id = ? and deleted = ? and status = ?";
$parameters = array($id, 0, 4);
$row = bind_pdo($sql, $parameters, "selectone");
$sql = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb
where `cmsloginid` = ? and cmsrole = ? and deleted = ? LIMIT 1";
$parameters = array($row['cmsloginid'], 'user', 0);
$row_cms = bind_pdo($sql, $parameters, "selectone");
$_SESSION['loginname'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsloginname'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsusername'] = aes_crypt($row_cms['cmsloginname'], 2);
$_SESSION['cmsloginid'] = $row_cms['cmsloginid'];
$_SESSION['loginid'] = $row_cms['cmsloginid'];
$_SESSION['cmsrole'] = $row_cms['cmsrole'];
$_SESSION['is_tutor'] = $row_cms['is_tutor'];
$_SESSION['is_student'] = $row_cms['is_student'];
$_SESSION['login_user_name'] = $row['contactname'];
}
$path = 'index.php';
break;
case 'signup_student':
$nowdate = date("Y-m-d H:i:s");
$id = $_SESSION['student_login'];
if ($id) {
$data['contactname'] = $_POST['contactname'];
$data['gender'] = $_POST['gender'];
$data['restelno'] = aes_crypt($_POST['hometelno'], 1);
$data['mas_yearrange'] = $_POST['mas_yearrange'];
$data['mas_contactstudentrel'] = $_POST['mas_contactstudentrel'];
$data['mas_residencecode'] = $_POST['mas_residencecode'];
$data['address'] = $_POST['address'];
$data['mas_contacttimerange'] = $_POST['mas_contacttimerange'];
$data['lastupdate'] = $nowdate;
$data['deleted'] = 0;
$sql = mysql_install($data, 'student_main', 'edit', 'id');
$data['id'] = $id;
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
// instrumentquali
unset($tmpdata);
$sql = "DELETE FROM `student_instrumentquali` WHERE studentmain_id=?;";
$post = formatPostData($_POST['instrumentquali']);
$parameters = array($id);
bind_pdo($sql, $parameters);
if (is_array($post)) {
foreach ($post as $value) {
unset($tmpdata);
if ($value['mas_instrument'] && $value['grade'] && $value['year']) {
$tmpdata['studentmain_id'] = $id;
$tmpdata['mas_instrument'] = $value['mas_instrument'];
$tmpdata['grade'] = $value['grade'];
$tmpdata['year'] = $value['year'];
$tmpdata['lastupdate'] = $nowdate;
$tmpdata['deleted'] = 0;
$sql = mysql_install($tmpdata, 'student_instrumentquali', 'add');
$arraykey = array_keys($tmpdata);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $tmpdata[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
}
}
}
}
$path = 'signupStudentVerification.php';
break;
case 'student_signup':
if ($_POST['email'] && $_POST['password'] && $_POST['repassword'] && $_POST['mobno']) {
if (!filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)) {
echo '<script>alert("'._lang("Please check email format.").'"); history.back();</script>';
exit;
}
if ($_POST['mobno'] != (int)$_POST['mobno'] || strlen($_POST['mobno']) != 8) {
echo '<script>alert("'._lang("Mobile number should be 8 digital number.").'"); history.back();</script>';
exit;
}
//check if tel verified
//skip for tel verify
/*$sql = "SELECT lastupdate FROM sms_log WHERE tel = ? AND type = ? and verified = ? order by lastupdate desc LIMIT 1";
$parameters = array((int)$_POST['mobno'], "student", 1);
$verified_tel = bind_pdo($sql, $parameters, "selectone");
if(empty($verified_tel)){
//not verified tel
echo '<script>alert("'._lang("Please verify mobile number.").'"); history.back();</script>';
exit;
}*/
include('webadmin/function_auth.php');
$nowdate = date("Y-m-d H:i:s");
//CMS Login
$sql = "select max(cmsloginid) as maxid from sys_cms_login ";
$parameters = array();
$row2 = bind_pdo($sql, $parameters, "selectone");
$cmsloginid = $row2{"maxid"} + 1;
$data['cmsloginid'] = $cmsloginid;
$data['cmsusername'] = aes_crypt(strtolower($_POST['email']), 1);
$data['cmsloginname'] = aes_crypt(strtolower($_POST['email']), 1);
$data['cmsloginpw'] = Password::hash($_POST['password']);
$data['cmsrole'] = 'user';
$data['cmsstatus'] = '1';
$data['createdate'] = $nowdate;
$data['createby'] = '';
$data['lastupdate'] = $nowdate;
$data['lastupby'] = '';
$data['password_expirydate'] = '2047-07-01';
$data['deleted'] = 0;
$data['is_tutor'] = 0;
$data['is_student'] = 1;
$sql = mysql_install($data, 'sys_cms_login', 'add');
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
//
unset($data);
$data['deleted'] = 0;
$data['profile_id'] = 4;
$data['user_id'] = $cmsloginid;
$sql = mysql_install($data, 'profile_user', 'add');
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
//
unset($data);
$sql = "select max(id) as maxid from student_main ";
$parameters = array();
$row2 = bind_pdo($sql, $parameters, "selectone");
$id = $row2{"maxid"} + 1;
$data['id'] = $id;
$data['student_no'] = getstudentNo($data['id']);
$data['cmsloginid'] = $cmsloginid;
$data['mobno'] = aes_crypt($_POST['mobno'], 1);
$data['email'] = aes_crypt(strtolower($_POST['email']), 1);
$data['createdate'] = $nowdate;
$data['lastupdate'] = $nowdate;
$data['deleted'] = 0;
$data['status'] = 3;
$data['isphoneverified'] = 1;
$data['isemailverified'] = 1;
$data['approved'] = 1;
$data['reg_from'] = "APP";
$sql = mysql_install($data, 'student_main', 'add');
$data['id'] = $id;
$arraykey = array_keys($data);
unset($parameters);
for ($i = 0; $i < count($arraykey); $i++) {
$parameters[$i] = $data[$arraykey[$i]];
}
bind_pdo($sql, $parameters);
$path = 'student_profile.php';
$_SESSION['loginname'] = strtolower($_POST['email']);
$_SESSION['cmsloginname'] = strtolower($_POST['email']);
$_SESSION['cmsusername'] = strtolower($_POST['email']);
$_SESSION['cmsloginid'] = $cmsloginid;
$_SESSION['loginid'] = $cmsloginid;
$_SESSION['cmsrole'] = "user";
$_SESSION['role'] = "user";
$_SESSION['is_tutor'] = 0;
$_SESSION['is_student'] = 1;
$_SESSION['student_login'] = $id;
if (!empty($_SESSION["app_device_id"]) && !empty($_SESSION["app_notification_token"])) {
//update user app device id and notification token
$sql = "update sys_cms_login set app_device_id = ?, app_notification_token = ?, app_device = ? where cmsloginid = ?";
$parameters = array($_SESSION["app_device_id"], $_SESSION["app_notification_token"], $_SESSION["app_device"], $cmsloginid);
bind_pdo($sql, $parameters);
}
//no email verify for app
/*$to = aes_crypt($data['email'], 2);
$sender_name = $site_info['companyname_' . $lang];
$sender_email = $site_info['enquiryemail'];
$content_arr['title'] = 'iMusic Circle';
$lang = $_SESSION['langcode'];
if ($lang == 'cn') {
$subject = '學生註冊【電郵驗證】';
$content_arr['member_name'] = '你好';
$content_arr['titlename'] = '學生註冊【電郵驗證】';
$content_arr['msg'] = '
歡迎加入iMusicCircle。
<br><br>
多謝你申請成為iMusicCircle的學生。你的用戶資料如下：
<br><br>
電郵地址 : ' . strtolower($_POST['email']) . '
<br><br>
請點擊以下連結，確認你的電郵地址以啟動你的學生賬戶。
<br><br>
<a href="http://' . $_SERVER['HTTP_HOST'] . '/activation.php?type=' . aes_crypt('student', 1) . '&link=' . aes_crypt($id, 1) . '">http://' . $_SERVER['HTTP_HOST'] . '/activation.php?type=' . aes_crypt('student', 1) . '&link=' . aes_crypt($id, 1) . '</a><br>
(如未能直接點擊以上連結，請將連結複製到瀏覽器上打開)
<br><br>
啟動賬戶後，我們建議學生同時進行手機短訊(SMS)認証，只有經過手機短訊認証，學生才可於音樂圈網上平台跟導師直接對話。
<br><br>
如有任何問題，請電郵至cs@imusiccircle.com 跟我們聯絡。
<br><br>
音樂圈客戶服務
';
} else if ($lang == 'en') {
$subject = 'Student Registration 【Email Verification】';
$content_arr['member_name'] = 'Hello ,';
$content_arr['titlename'] = 'Student Registration 【Email Verification】';
$content_arr['msg'] = '
Welcome to iMusicCircle.
<br><br>
Thanks for your registration as our Student and please find below with your login information.
<br><br>
Email Address : ' . strtolower($_POST['email']) . '
<br><br>
To complete the registration process, please click the link below for verification.
<br><br>
<a href="http://' . $_SERVER['HTTP_HOST'] . '/activation.php?type=' . aes_crypt('student', 1) . '&link=' . aes_crypt($id, 1) . '">http://' . $_SERVER['HTTP_HOST'] . '/activation.php?type=' . aes_crypt('student', 1) . '&link=' . aes_crypt($id, 1) . '</a><br>
(Please copy and paste the full address on your Internet Browser if the link doesn’t work)
<br><br>
We suggest our students to complete the mobile SMS verification at the same time. Students can only chat with tutors on iMusicCircle online platform after the mobile SMS verification.
<br><br>
Please feel free to contact us at cs@imusiccircle.com if you have any question.
<br><br>
Yours sincerely,<br>
Customer Service, iMusicCircle
';
}
$content_arr['date'] = date('Y-m-d');
$content_arr['time'] = date('H:i:s');
$map_file = 'email/page.html';
$_SESSION['reg']['email'] = sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
//
$path = 'registration.php';*/
} else {
//$path = 'index.php';
echo '<script>history.back();</script>';
exit;
}
break;
}
@header("Location: {$path}");
echo "<script language='JavaScript'>window.location='{$path}'</script>";
exit();
?>