View file public_html/vipadz/money/addsender.php

<?php

include '../../db.php';
include '../../functions.php';

headtag("$SiteName - Add Sender");

if($adminlog==1){

echo '<div class="title">Add Sender</div>';
 {
 if(isset($_POST["firstname"]) AND isset($_POST["middlename"]) AND isset($_POST["lastname"]) AND isset($_POST["mobile"]) AND isset($_POST["email"]) AND isset($_POST["pincode"]) AND isset($_POST["dob"])){


$firstname=formpost("firstname");
$middlename=formpost("middlename");
$lastname=formpost("lastname");
$mobile=formpost("mobile");
$email=formpost("email");
$pincode=formpost("pincode");
$dob=formpost("dob");

$querydata=mysql_query("SELECT id FROM senders WHERE mobile='$mobile'");
$errors=array();

if(strlen($firstname)<1){
  $errors[]='Please Enter First Name.';
 }
if(strlen($middlename)<1){
  $errors[]='Please Enter Middle Name.';
 }
if(strlen($lastname)<1){
  $errors[]='Please Enter Last Name.';
 }
if(strlen($mobile)<1){
  $errors[]='Please Enter Mobile.';
 }
if(strlen($mobile)<10){
  $errors[]='Please Enter Valid 10 Digit Mobile Number.';
 }
if(strlen($mobile)>10){
  $errors[]='Please Enter Valid 10 Digit Mobile Number.';
 }
if(strlen($email)<1){
  $errors[]='Please Enter Email.';
 }
if(strlen($pincode)<1){
  $errors[]='Please Enter Pincode.';
 }
if(strlen($dob)<1){
  $errors[]='Please Enter Date Of Birth.';
 }

if(mysql_num_rows($querydata) > 0)
{
           $errors[]="This Sender Is Already Exists.";
}

if(empty($errors)){
$set = mysql_query("SELECT * FROM moneyconfig");
$ing = mysql_fetch_array($set);
$pin=$ing["pin"];
$authkey=$ing["authkey"];

$url='https://www.pay2all.in/moneyapi/pay/sender_registration?pin='.$pin.'&authkey='.$authkey.'&firstname='.$firstname.'&middlename='.$middlename.'&lastname='.$lastname.'&mobile='.$mobile.'&email='.$email.'&pincode='.$pincode.'&dob='.$dob.'';
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_FAILONERROR, TRUE);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 9);
$sender_contents = curl_exec($ch);
$sender_decode=json_decode($sender_contents);
$payid=$sender_decode->payid;
$status=$sender_decode->status;
$senderid=$sender_decode->senderid;
$message=$sender_decode->message;
curl_close($ch);

if($status=='Success')
{
$doit=mysql_query("INSERT INTO senders (senderid, payid, firstname, middlename, lastname, mobile, email, pincode, dob, status)
VALUES ('$senderid', '$payid', '$firstname', '$middlename', '$lastname', '$mobile', '$email', '$pincode', '$dob', 'Unverified')");
}

  if($doit){
   echo '<div class="success">'.$firstname.' '.$middlename.' '.$lastname.' Sender Added. <a href="verifysender.php?sender='.$senderid.'">Click Here For Verification</a></div>';
  }
  else {
   echo '<div class="error">'.$message.'</div>';
}

}
else {

dump_error($errors);

}
}

echo '<div class="form"><form method="post">First Name<br/><input type="text" name="firstname""/><br/>Middle Name<br/><input type="text" name="middlename""/><br/>Last Name<br/><input type="text" name="lastname""/><br/>Mobile<br/><input type="text" name="mobile"/><br/>Email<br/><input type="text" name="email"/><br/>Pincode<br/><input type="text" name="pincode"/><br/>Date Of Birth (DD-MM-YYYY)<br/><input type="text" name="dob"/><br/><input type="submit" value="Add Sender"/></form></div>';

}

 echo '<a href="senders.php"><div class="ua">Senders</div></a>';
 include '../../foot.php';
 }
 else {
 header('Location:/login.php');
 }
 ?>