$isupdate = $this->database->update('usertoken', ['accesstoken' => $newtoken, 'expiry' => $new_expiredate], ['userid' => $userid]); setcookie($this->Medisave_Token . $site_info["table_postfix"], $newtoken, time() + (86400 * 30), "/"); $user_cart_qr = $c->ValidateCart($this->database, $userid, $cart_qr); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $user_cart_qr, time() + (86400 * 30), "/"); return $response->withRedirect($site_info["domain_url"] . "pending"); } else { return $response->withRedirect($site_info["domain_url"] . 'login'); } } } else { $result = array( "view" => "signup", "signup_stage" => "complete", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => $SignupResponse["message"], "message_type" => "error", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); } } else { $result = array( "view" => "signup", "signup_stage" => "complete", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "Signup Not Successful. Mobile Info Not Found.", "message_type" => "error", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); } } else { $result = array( "view" => "signup", "signup_stage" => "complete", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "Password Entered Not Match.", "message_type" => "error", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); } } else { $result = array( "view" => "signup", "signup_stage" => "complete", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "Please Enter Your Pasword", "message_type" => "error", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); } return $this->renderer->render($response, '/home.php', $result); } })->setName('signup'); $app->get('/download', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); ClearSession(); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $countrycode = $c->GetCountryCode($this->database); $result = array( "view" => 'downloadapp', "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "", "validate" => null, "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); })->setName('download'); $app->get('/profile', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); ClearSession(); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; if ($request->getAttribute('logininfo')['userinfo']["status"] == "1") { return $response->withRedirect($site_info["domain_url"] . "pending"); } } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $countrycode = $c->GetCountryCode($this->database); $homePage = $c->GetHomePage($this->database, $request->getAttribute('logininfo')); $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $userprofile = $c->GetUserProfile($this->database, $request->getAttribute('logininfo')); $user_statistics = array(); $points = $c->GetUserPoint($this->database, $request->getAttribute('logininfo')); $user_statistics["points"] = $points; $orders = $c->GetUserOrders($this->database, $request->getAttribute('logininfo')); $user_statistics["orders"] = $orders; $available_vouchers = $c->get_user_voucher($this->database, $site_info, $request->getAttribute('logininfo')['userinfo']['userid']); $user_statistics["promocode"] = count($available_vouchers); $seach_quicklink = $c->GetSearchQuickLink($this->database, $request->getAttribute('logininfo')); $all_category = $c->GetCategory($this->database, "", $request->getAttribute('logininfo')); $result = array( "view" => "me", "message" => "", "message_error" => "", "userprofile" => $userprofile, "cart_count" => $cartInfo["cart_count"], "saved_count" => $homePage["saved_count"], "chat_count" => $homePage["chat_count"], "seach_quicklink" => $seach_quicklink, "user_statistics" => $user_statistics, "cart" => $cartInfo["cart"], "country_code" => $countrycode, "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token'), "product_category" => $all_category ); return $this->renderer->render($response, '/home.php', $result); })->setName('me'); $app->post('/profile', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; if ($request->getAttribute('logininfo')['userinfo']["status"] == "1") { return $response->withRedirect($site_info["domain_url"] . "pending"); } } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $message = ""; $message_error = ""; if ($request->getParsedBody() != null) { $requestData = $request->getParsedBody(); $Update_Response = $c->UpdateUserProfile($this->database, $request->getAttribute('logininfo'), $requestData); $Update_Response = json_decode($Update_Response, true); if ($Update_Response["error"] == 0) { $message = $Update_Response["message"]; } else { $message_error = $Update_Response["message"]; } } else { $message_error = "Update Error"; } $countrycode = $c->GetCountryCode($this->database); $homePage = $c->GetHomePage($this->database, $request->getAttribute('logininfo')); $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $userprofile = $c->GetUserProfile($this->database, $request->getAttribute('logininfo')); $user_statistics = array(); $points = $c->GetUserPoint($this->database, $request->getAttribute('logininfo')); $user_statistics["points"] = $points; $orders = $c->GetUserOrders($this->database, $request->getAttribute('logininfo')); $user_statistics["orders"] = $orders; $available_vouchers = $c->get_user_voucher($this->database, $site_info, $request->getAttribute('logininfo')['userinfo']['userid']); $user_statistics["promocode"] = count($available_vouchers); $seach_quicklink = $c->GetSearchQuickLink($this->database, $request->getAttribute('logininfo')); $result = array( "view" => "me", "message" => $message, "message_error" => $message_error, "userprofile" => $userprofile, "cart_count" => $cartInfo["cart_count"], "saved_count" => $homePage["saved_count"], "chat_count" => $homePage["chat_count"], "user_statistics" => $user_statistics, "seach_quicklink" => $seach_quicklink, "cart" => $cartInfo["cart"], "country_code" => $countrycode, "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); })->setName('me'); $app->get('/pending', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); ClearSession(); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; if ($request->getAttribute('logininfo')['userinfo']["status"] == "0") { if (isset($_COOKIE["Shared_Product" . $site_info["table_postfix"]])) { return $response->withRedirect($_COOKIE["Shared_Product" . $site_info["table_postfix"]]); } else { return $response->withRedirect($site_info["domain_url"]); } } else { } } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $countrycode = $c->GetCountryCode($this->database); $site_settings_secondary = $c->GetSiteInfoSecondary($this->database); $uploaded = $c->checkUserUpload($this->database, $request->getAttribute('logininfo')['userinfo']['userid']); $result = array( "view" => "login_message", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => $site_settings_secondary["login_complete_message"], "message_type" => "info", "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token'), "license_uploaded" => $uploaded, ); return $this->renderer->render($response, '/home_pro.php', $result); })->setName('pending'); $app->post('/upload_poison_license', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $uploadedFiles = $request->getUploadedFiles(); if (!empty($uploadedFiles['poisons_license'])) { $uploadedFile = $uploadedFiles['poisons_license']; $directory = sys_get_temp_dir(); $filename = $uploadedFile->getClientFilename(); $uploadedFilePath = $directory . DIRECTORY_SEPARATOR . $filename; $uploadedFile->moveTo($uploadedFilePath); $userId = $request->getAttribute('logininfo')['userinfo']['userid']; $apiUrl = 'https://backstage.medisave.online/medisave.online/user/upload_license_image_online/' . $userId; $ch = curl_init(); $cfile = new CURLFile($uploadedFilePath, $uploadedFile->getClientMediaType(), $uploadedFile->getClientFilename()); $postData = ['file' => $cfile]; curl_setopt($ch, CURLOPT_URL, $apiUrl); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, $postData); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $result = curl_exec($ch); if (curl_errno($ch)) { $error_msg = curl_error($ch); } else { $decodedResponse = json_decode($result, true); if (isset($decodedResponse['file_url'])) { $fileUrl = $decodedResponse['file_url']; $c->addUserUpload($this->database, $userId, $fileUrl); } } curl_close($ch); unlink($uploadedFilePath); } })->setName('upload_poison_license'); $app->get('/company_profile', function (Request $request, Response $response) { ClearSession(); include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; if ($request->getAttribute('logininfo')['userinfo']["status"] == "1") { return $response->withRedirect($site_info["domain_url"] . "pending"); } } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $countrycode = $c->GetCountryCode($this->database); $homePage = $c->GetHomePage($this->database, $request->getAttribute('logininfo')); $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $companyprofile = $c->GetCompanyProfile($this->database, $request->getAttribute('logininfo')); $userprofile = $c->GetUserProfile($this->database, $request->getAttribute('logininfo')); $user_statistics = array(); $points = $c->GetUserPoint($this->database, $request->getAttribute('logininfo')); $user_statistics["points"] = $points; $orders = $c->GetUserOrders($this->database, $request->getAttribute('logininfo')); $user_statistics["orders"] = $orders; $available_vouchers = $c->get_user_voucher($this->database, $site_info, $request->getAttribute('logininfo')['userinfo']['userid']); $user_statistics["promocode"] = count($available_vouchers); $seach_quicklink = $c->GetSearchQuickLink($this->database, $request->getAttribute('logininfo')); $result = array( "view" => "company_profile", "message" => "", "message_error" => "", "userprofile" => $userprofile, "companyprofile" => $companyprofile, "cart_count" => $cartInfo["cart_count"], "saved_count" => $homePage["saved_count"], "chat_count" => $homePage["chat_count"], "seach_quicklink" => $seach_quicklink, "user_statistics" => $user_statistics, "cart" => $cartInfo["cart"], "country_code" => $countrycode, "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); })->setName('company_profile'); $app->post('/company_profile', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; if ($request->getAttribute('logininfo')['userinfo']["status"] == "1") { return $response->withRedirect($site_info["domain_url"] . "pending"); } } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $message = ""; $message_error = ""; if ($request->getParsedBody() != null) { $requestData = $request->getParsedBody(); $Update_Response = $c->UpdateCompanyProfile($this->database, $request->getAttribute('logininfo'), $requestData); $Update_Response = json_decode($Update_Response, true); if ($Update_Response["error"] == 0) { $message = $Update_Response["message"]; } else { $message_error = $Update_Response["message"]; } } else { $message_error = "Update Error"; } $countrycode = $c->GetCountryCode($this->database); $homePage = $c->GetHomePage($this->database, $request->getAttribute('logininfo')); $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $companyprofile = $c->GetCompanyProfile($this->database, $request->getAttribute('logininfo')); $userprofile = $c->GetUserProfile($this->database, $request->getAttribute('logininfo')); $user_statistics = array(); $points = $c->GetUserPoint($this->database, $request->getAttribute('logininfo')); $user_statistics["points"] = $points; $orders = $c->GetUserOrders($this->database, $request->getAttribute('logininfo')); $user_statistics["orders"] = $orders; $available_vouchers = $c->get_user_voucher($this->database, $site_info, $request->getAttribute('logininfo')['userinfo']['userid']); $user_statistics["promocode"] = count($available_vouchers); $seach_quicklink = $c->GetSearchQuickLink($this->database, $request->getAttribute('logininfo')); $result = array( "view" => "company_profile", "message" => $message, "message_error" => $message_error, "userprofile" => $userprofile, "companyprofile" => $companyprofile, "cart_count" => $cartInfo["cart_count"], "saved_count" => $homePage["saved_count"], "chat_count" => $homePage["chat_count"], "user_statistics" => $user_statistics, "seach_quicklink" => $seach_quicklink, "cart" => $cartInfo["cart"], "country_code" => $countrycode, "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); })->setName('company_profile'); $app->get('/changepass', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); ClearSession(); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; if ($request->getAttribute('logininfo')['userinfo']["status"] == "1") { return $response->withRedirect($site_info["domain_url"] . "pending"); } } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $homePage = $c->GetHomePage($this->database, $request->getAttribute('logininfo')); $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $seach_quicklink = $c->GetSearchQuickLink($this->database, $request->getAttribute('logininfo')); $all_category = $c->GetCategory($this->database, "", $request->getAttribute('logininfo')); $result = array( "view" => "changepass", "message" => "", "message_error" => "", "cart_count" => $cartInfo["cart_count"], "saved_count" => $homePage["saved_count"], "chat_count" => $homePage["chat_count"], "seach_quicklink" => $seach_quicklink, "cart" => $cartInfo["cart"], "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token'), "product_category" => $all_category ); return $this->renderer->render($response, '/home.php', $result); })->setName('changepass'); $app->post('/changepass', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $homePage = $c->GetHomePage($this->database, $request->getAttribute('logininfo')); $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $seach_quicklink = $c->GetSearchQuickLink($this->database, $request->getAttribute('logininfo')); $password_old = $_POST["password_old"]; $password_new = $_POST["password_new"]; $confirm_password_new = $_POST["confirm_password_new"]; $message = ""; $message_error = ""; if (isset($password_old) && isset($password_new) && isset($confirm_password_new)) { if ($password_new == $confirm_password_new) { $userid = $request->getAttribute('logininfo')["userinfo"]["userid"]; $data = $this->database->get("userlogin", "password", ["userid" => $userid]); if ($data == false || $data == null) { $message_error = "Info Not Found!"; } else { if (password_verify($password_old, $data) != $data) { $message_error = "Your current password is not match. Please Try Again!"; } else { $hashPassword = password_hash($password_new, PASSWORD_BCRYPT); $isupdate = $this->database->update('userlogin', ['password' => $hashPassword], ['userid' => $userid]); if ($isupdate == true) { $message = "Password Reset."; } } } } else { $message_error = "New Password and Confirm Password Not Match."; } } else { $message_error = "Password Cannot Leave Blank."; } $result = array( "view" => "changepass", "message" => $message, "message_error" => $message_error, "cart_count" => $cartInfo["cart_count"], "saved_count" => $homePage["saved_count"], "chat_count" => $homePage["chat_count"], "seach_quicklink" => $seach_quicklink, "cart" => $cartInfo["cart"], "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); })->setName('changepass'); $app->get('/address', function (Request $request, Response $response) { ClearSession(); include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; if ($request->getAttribute('logininfo')['userinfo']["status"] == "1") { return $response->withRedirect($site_info["domain_url"] . "pending"); } } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } $countrycode = $c->GetCountryCode($this->database); if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $homePage = $c->GetHomePage($this->database, $request->getAttribute('logininfo')); $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $addressInfo = $c->GetAddress($this->database, $request->getAttribute('logininfo')); $addressid = ""; if (isset($_GET["id"])) { if ($site_info["allow_own_address"] == "0") { $result = array( "view" => "error_500", "cart_count" => $cartInfo["cart_count"], "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); } $addressid = base64_decode(urldecode($_GET["id"])); } $mode = ""; $addressedit = null; if (isset($addressid)) { $mode = "edit"; $addressedit = $c->GetCurrentAddress($this->database, $request->getAttribute('logininfo'), $addressid); } $seach_quicklink = $c->GetSearchQuickLink($this->database, $request->getAttribute('logininfo')); $all_category = $c->GetCategory($this->database, "", $request->getAttribute('logininfo')); $result = array( "view" => "address", "mode" => $mode, "message" => "", "message_error" => "", "user_address" => $addressInfo, "edit_address" => $addressedit, "cart_count" => $cartInfo["cart_count"], "saved_count" => $homePage["saved_count"], "chat_count" => $homePage["chat_count"], "seach_quicklink" => $seach_quicklink, "cart" => $cartInfo["cart"], "country_code" => $countrycode, "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token'), "product_category" => $all_category ); return $this->renderer->render($response, '/home.php', $result); })->setName('address'); $app->POST('/address', function (Request $request, Response $response) { $accesstoken = ''; include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } if ($site_info["allow_own_address"] == "0") { $result = array( "view" => "error_500", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); } $addressid = ""; if (isset($_GET["id"])) { $addressid = base64_decode(urldecode($_GET["id"])); } $countrycode = $c->GetCountryCode($this->database); if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Casertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); } $countrycode = $c->GetCountryCode($this->database); if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $homePage = $c->GetHomePage($this->database, $request->getAttribute('logininfo')); $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $response_status = 0; $message = ""; $message_error = ""; if ($request->getParsedBody() != null) { $requestData = $request->getParsedBody(); $mobile_phone = ""; $substring = substr($requestData["mobile_number"], 0, strlen('+' . $requestData["country_code"])); if ($substring != ('+' . $requestData["country_code"])) { $message_error = "Mobile Number Invalid. Please Try Again."; } else { $requestData["mobile_number"] = substr($requestData["mobile_number"], strlen('+' . $requestData["country_code"])); $Add_Response = $c->AddUserAddress($this->database, $request->getAttribute('logininfo'), $requestData); $Add_Response = json_decode($Add_Response, true); if ($Add_Response["error"] == 0) { $response_status = 0; $message = $Add_Response["message"]; } else { $response_status = 1; $message_error = $Add_Response["message"]; } } } else { $response_status = 1; $message_error = "Update Error"; } $addressInfo = $c->GetAddress($this->database, $request->getAttribute('logininfo')); $seach_quicklink = $c->GetSearchQuickLink($this->database, $request->getAttribute('logininfo')); if ($response_status == 0) { return $response->withRedirect($site_info["domain_url"] . 'address'); } else { $result = array( "view" => "address", "mode" => "AddNew", "message" => $message, "message_error" => $message_error, "user_address" => $addressInfo, "cart_count" => $cartInfo["cart_count"], "saved_count" => $homePage["saved_count"], "chat_count" => $homePage["chat_count"], "seach_quicklink" => $seach_quicklink, "cart" => $cartInfo["cart"], "country_code" => $countrycode, "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); } })->setName('address'); $app->get('/forgotpassword', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); ClearSession(); session_start(); if ($request->getAttribute('logininfo')['IsLogin'] == 1) { return $response->withRedirect($site_info["domain_url"]); } else { if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $countrycode = $c->GetCountryCode($this->database); $all_category = $c->GetCategory($this->database, "", $request->getAttribute('logininfo')); $result = array( "view" => "forgotpassword", "reset_stage" => "mobile", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token'), "product_category" => $all_category ); return $this->renderer->render($response, '/home.php', $result); } })->setName('forgotpassword'); $app->post('/forgotpassword', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); $requestData = $request->getParsedBody(); session_start(); if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); if ($requestData["currentPage"] == "mobile") { $mobile_proceed = false; $errormessage = ""; if (isset($requestData["username"])) { $mobile_phone = ""; $substring = substr($requestData["username"], 0, strlen('+' . $requestData["countrycode"])); if ($substring != ('+' . $requestData["countrycode"])) { $mobile_proceed = false; $message_error = "Mobile Number Invalid. Please Try Again."; } else { $requestData["username"] = substr($requestData["username"], strlen('+' . $requestData["countrycode"])); $isUserExist = $c->VerifySignupUser($this->database, $requestData["countrycode"], $requestData["username"]); if ($isUserExist == null) { $mobile_proceed = false; $errormessage = "Current Mobile Number Does Not Exist."; } else { $mobileinfo = array( "userid" => $isUserExist["userid"], "mobile_countrycode" => $requestData["countrycode"], "mobile" => $requestData["username"] ); $_SESSION["user_info"] = $mobileinfo; $mobile_proceed = true; } } } else { $mobile_proceed = false; $errormessage = "Please Enter Your Mobile Number To Proceed."; } $countrycode = $c->GetCountryCode($this->database); if ($mobile_proceed == true) { return $response->withRedirect($site_info["domain_url"] . 'forgotpassword_otp'); } else { $result = array( "view" => "forgotpassword", "reset_stage" => "mobile", "message" => $errormessage, "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); } } })->setName('forgotpassword'); $app->get('/forgotpassword_otp', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); session_start(); if (!isset($_SESSION["user_info"]) || empty($_SESSION["user_info"])) { return $response->withRedirect($site_info["domain_url"] . 'forgotpassword'); } if ($request->getAttribute('logininfo')['IsLogin'] == 1) { return $response->withRedirect($site_info["domain_url"]); } else { if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $countrycode = $c->GetCountryCode($this->database); $newOTP = $c->GenerateOTP($this->database, $_SESSION["user_info"]["mobile_countrycode"], $_SESSION["user_info"]["mobile"], "forgotpassword"); $result = array( "view" => "forgotpassword", "reset_stage" => "otp", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); } })->setName('forgotpassword_otp'); $app->post('/forgotpassword_otp', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); $requestData = $request->getParsedBody(); session_start(); if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); if ($requestData["currentPage"] == "otp") { $nextpage = ""; $countrycode = $c->GetCountryCode($this->database); if (isset($_SESSION["user_info"])) { $formatOTP = $requestData["otp1"] . $requestData["otp2"] . $requestData["otp3"] . $requestData["otp4"]; $OTP = $this->database->get("OTP", 'OTP', [ "mobile_countrycode" => $_SESSION["user_info"]["mobile_countrycode"], "mobile_number" => $_SESSION["user_info"]["mobile"], "usage" => 1 ]); if ($OTP == $formatOTP) { $nextpage = "complete"; $otpinfo = array( "otp1" => $requestData["otp1"], "otp2" => $requestData["otp2"], "otp3" => $requestData["otp3"], "otp4" => $requestData["otp4"], ); $_SESSION["user_otp"] = $otpinfo; $mobile_proceed = true; $result = array( "view" => "forgotpassword", "reset_stage" => $nextpage, "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $response->withRedirect($site_info["domain_url"] . 'forgotpassword_complete'); } else { $result = array( "view" => "forgotpassword", "reset_stage" => "otp", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "OTP Entered Not Match. Please Try Again.", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); } } else { $result = array( "view" => "forgotpassword", "reset_stage" => "otp", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "Session Expired. Please Try Again.", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); return $this->renderer->render($response, '/home.php', $result); } } })->setName('forgotpassword_otp'); $app->get('/forgotpassword_complete', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); session_start(); if (!isset($_SESSION["user_info"]) || empty($_SESSION["user_info"]) || !isset($_SESSION["user_otp"]) || empty($_SESSION["user_otp"])) { return $response->withRedirect($site_info["domain_url"] . 'forgotpassword'); } if ($request->getAttribute('logininfo')['IsLogin'] == 1) { return $response->withRedirect($site_info["domain_url"]); } else { if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $countrycode = $c->GetCountryCode($this->database); $all_category = $c->GetCategory($this->database, "", $request->getAttribute('logininfo')); $result = array( "view" => "forgotpassword", "reset_stage" => "complete", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token'), "product_category" => $all_category ); return $this->renderer->render($response, '/home.php', $result); } })->setName('forgotpassword_complete'); $app->post('/forgotpassword_complete', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); $requestData = $request->getParsedBody(); session_start(); if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $countrycode = $c->GetCountryCode($this->database); if ($requestData["currentPage"] == "complete") { if (isset($requestData["password"]) && isset($requestData["confirmpassword"])) { if (isset($requestData["password"]) == isset($requestData["confirmpassword"])) { if (isset($_SESSION["user_info"])) { $hashPassword = password_hash($requestData["password"], PASSWORD_BCRYPT); $isupdate = $this->database->update('userlogin', ['password' => $hashPassword], ['userid' => $_SESSION["user_info"]["userid"]]); if ($isupdate == true) { $nickname = $this->database->get("userprofile", "nickname", ['userid' => $_SESSION["user_info"]["userid"]]); $userid = $_SESSION["user_info"]["userid"]; $nickname = $nickname; $countrycode = $_SESSION["user_info"]["mobile_countrycode"]; unset($_SESSION["user_info"]); $request = CreateAccessToken($this->database, $userid, $countrycode, $username, $nickname, $request, $this->Medisave_Token . $site_info["table_postfix"]); $userid = $request->getAttribute('logininfo')["userinfo"]["userid"]; $newtoken = $request->getAttribute('logininfo')["userinfo"]["accesstoken"]; $new_expiredate = $request->getAttribute('logininfo')["userinfo"]["expired_at"]; $isupdate = $this->database->update('usertoken', ['accesstoken' => $newtoken, 'expiry' => $new_expiredate], ['userid' => $userid]); setcookie($this->Medisave_Token . $site_info["table_postfix"], $newtoken, time() + (86400 * 30), "/"); $user_cart_qr = $c->ValidateCart($this->database, $userid, $cart_qr); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $user_cart_qr, time() + (86400 * 30), "/"); $result = array( "view" => "", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); if (isset($_COOKIE['MEDISAVE_REDIRECT_URL'])) { $url = $_COOKIE['MEDISAVE_REDIRECT_URL']; $_COOKIE['MEDISAVE_REDIRECT_URL'] = ""; setcookie('MEDISAVE_REDIRECT_URL', "", time() + (86400 * 30), "/"); return $response->withRedirect($url); } else { return $response->withRedirect($site_info["domain_url"]); } } else { if (isset($_SESSION["user_info"])) { $_SESSION["user_info"] = $_SESSION["user_info"]; } $result = array( "view" => "forgotpassword", "reset_stage" => "complete", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "Reset Password Not Successful.", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); } } else { $result = array( "view" => "forgotpassword", "reset_stage" => "complete", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "Reset Password Not Successful.", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); } } else { if (isset($_SESSION["user_info"])) { $_SESSION["user_info"] = $_SESSION["user_info"]; } $result = array( "view" => "forgotpassword", "reset_stage" => "complete", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "Password Entered Not Match.", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); } } else { if (isset($_SESSION["user_info"])) { $_SESSION["user_info"] = $_SESSION["user_info"]; } $result = array( "view" => "forgotpassword", "reset_stage" => "complete", "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "message" => "Please Enter Your Pasword", "cart_count" => $cartInfo["cart_count"], "cart" => $cartInfo["cart"], "country_code" => $countrycode, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token') ); } return $this->renderer->render($response, '/home.php', $result); } })->setName('forgotpassword_complete'); $app->get('/user_dashboard', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; if ($request->getAttribute('logininfo')['userinfo']["status"] == "1") { return $response->withRedirect($site_info["domain_url"] . "pending"); } } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } $countrycode = $c->GetCountryCode($this->database); if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createCart($this->database, $request->getAttribute('logininfo')); setcookie($this->Medisave_Cart . $site_info["table_postfix"], $cart_qr, time() + (86400 * 30), "/"); } $homePage = $c->GetHomePage($this->database, $request->getAttribute('logininfo')); $cartInfo = $c->GetCart($this->database, $cart_qr, $site_info["domain_url"], $request->getAttribute('logininfo')); $userprofile = $c->GetUserProfile($this->database, $request->getAttribute('logininfo')); $referee_list = $c->GetUserReferee($this->database, $request->getAttribute('logininfo')); $referrer = $c->GetUserReferrer($this->database, $request->getAttribute('logininfo')); $user_statistics = array(); $points = $c->GetUserPoint($this->database, $request->getAttribute('logininfo')); $user_statistics["points"] = $points; $orders = $c->GetUserOrders($this->database, $request->getAttribute('logininfo')); $user_statistics["orders"] = $orders; $available_vouchers = $c->get_user_voucher($this->database, $site_info, $request->getAttribute('logininfo')['userinfo']['userid']); $user_statistics["promocode"] = count($available_vouchers); $seach_quicklink = $c->GetSearchQuickLink($this->database, $request->getAttribute('logininfo')); $all_category = $c->GetCategory($this->database, "", $request->getAttribute('logininfo')); $result = array( "view" => "dashboard", "userprofile" => $userprofile, "cart_count" => $cartInfo["cart_count"], "saved_count" => $homePage["saved_count"], "chat_count" => $homePage["chat_count"], "seach_quicklink" => $seach_quicklink, "cart" => $cartInfo["cart"], "referee_list" => $referee_list, "referrer" => $referrer, "user_statistics" => $user_statistics, "country_code" => $countrycode, "baseUrl" => $site_info["domain_url"], "site_info" => $site_info, "logininfo" => $request->getAttribute('logininfo'), "usertoken" => $request->getAttribute('user_token'), "product_category" => $all_category ); return $this->renderer->render($response, '/home.php', $result); })->setName('user_dashboard'); $app->get('/points_history', function (Request $request, Response $response) { include "controller.php"; $c = new controller; $site_info = $c->GetSiteInfo($this->database); $accesstoken = ''; if ($request->getAttribute('logininfo')['IsLogin'] == 1) { $accesstoken = $request->getAttribute('logininfo')['userinfo']['accesstoken']; if ($request->getAttribute('logininfo')['userinfo']["status"] == "1") { return $response->withRedirect($site_info["domain_url"] . "pending"); } } else { if ($site_info["allow_non_login_visit"] == "0") { return $response->withRedirect($site_info["domain_url"] . 'login'); } } if (isset($_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]])) { $cart_qr = $_COOKIE[$this->Medisave_Cart . $site_info["table_postfix"]]; } else { $cart_qr = $c->createC Xepa Novomin Syrup | Medisave Online
  • 020-800-456-747

We sell only genuine medicine

SHARE NOW to Give yourself RM30 and your friend RM30
Hot Categories
Hot Products
Prevention & treatment of nausea & vomiting, associated w/ motion sickness. Meniere's disease.