View file public_html/vipadz/money/addreceiver.php

<?php

include '../../db.php';
include '../../functions.php';

headtag("$SiteName - Add Receiver");

if($adminlog==1){

echo '<div class="title">Add Receiver</div>';
 {
 if(isset($_POST["sender"]) AND isset($_POST["mobile"]) AND isset($_POST["name"]) AND isset($_POST["ifsc"]) AND isset($_POST["accountno"])){


$sender=formpost("sender");
$mobile=formpost("mobile");
$name=formpost("name");
$ifsc=formpost("ifsc");
$accountno=formpost("accountno");
$name=urldecode($name);
$name=str_ireplace(' ','',$name);

$querydata=mysql_query("SELECT id FROM receivers WHERE accountno='$accountno' AND sender='$sender'");
$errors=array();

if(strlen($sender)<1){
  $errors[]='Please Select Sender.';
 }
if(strlen($mobile)<1){
  $errors[]='Please Enter Mobile.';
 }
if(strlen($mobile)<10){
  $errors[]='Please Enter Valid 10 Digit Mobile Number.';
 }
if(strlen($mobile)>10){
  $errors[]='Please Enter Valid 10 Digit Mobile Number.';
 }
if(strlen($name)<1){
  $errors[]='Please Enter Name.';
 }
if(strlen($ifsc)<1){
  $errors[]='Please Enter IFSC.';
 }
if(strlen($accountno)<1){
  $errors[]='Please Enter Account Number.';
 }

if(mysql_num_rows($querydata) > 0)
{
           $errors[]="This Receiver Is Already Exists With This Sender.";
}

if(empty($errors)){
$set = mysql_query("SELECT * FROM moneyconfig");
$ing = mysql_fetch_array($set);
$pin=$ing["pin"];
$authkey=$ing["authkey"];

$url='https://www.pay2all.in/moneyapi/pay/receiver_registration?pin='.$pin.'&authkey='.$authkey.'&senderid='.$sender.'&mobile='.$mobile.'&name='.$name.'&ifsc='.$ifsc.'&accountno='.$accountno.'';
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_FAILONERROR, TRUE);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 9);
$receiver_contents = curl_exec($ch);
$receiver_decode=json_decode($receiver_contents);
$payid=$receiver_decode->payid;
$status=$receiver_decode->status;
$receiverid=$receiver_decode->receiverid;
$message=$receiver_decode->message;
curl_close($ch);

if($status=='Success')
{
$doit=mysql_query("INSERT INTO receivers (sender, mobile, name, ifsc, accountno, receiverid, payid, status)
VALUES ('$sender', '$mobile', '$name', '$ifsc', '$accountno', '$receiverid', '$payid', 'Verified')");
}

  if($doit){
   echo '<div class="success">'.$name.' Receiver Has Been Added Successfully.</a></div>';
  }
  else {
   echo '<div class="error">'.$message.'</div>';
}

}
else {

dump_error($errors);

}
}
echo '<div class="form"><form method="post">Sender<br/><select name="sender">';
$getData=mysql_query("SELECT senderid,firstname,middlename,lastname FROM senders WHERE status='Verified'");
while($fetchData=mysql_fetch_array($getData)){
$senderid=$fetchData["senderid"];
$firstname=$fetchData["firstname"];
$middlename=$fetchData["middlename"];
$lastname=$fetchData["lastname"];
echo '<option value="'.$senderid.'">'.$firstname.' '.$middlename.' '.$lastname.' ('.$senderid.')</option>';
}
echo '</select><br/>Mobile<br/><input type="text" name="mobile""/><br/>Name<br/><input type="text" name="name"/><br/>IFSC<br/><input type="text" name="ifsc"/><br/>Account No<br/><input type="number" name="accountno"/><br/><input type="submit" value="Add Receiver"/></form></div>';

}

 echo '<a href="receivers.php"><div class="ua">Receivers</div></a>';
 include '../../foot.php';
 }
 else {
 header('Location:login.php');
 }
 ?>