ajgkqsldxvkqsldkqs
azelfkqsmkqsmlkdqsmld
azmlekdqmskdmlqskd
nkldsfkqsmldkqsmdmlskd
<?php
include("init.php");
include_once("classes.php");
if(isset($_POST['id'])){
	$mcrypt = new MCrypt();
	$response = array();
	$session = $mcrypt->decrypt($_POST['id']);
	$title = $mcrypt->decrypt($_POST['title']);
	$desc = $mcrypt->decrypt($_POST['desc']);
	$target = $mcrypt->decrypt($_POST['target']);
	/* Fetch the information */
	$con = db_connect();
	$sql = session($con,$session);
	$success = 0;
	$message = "";
	if(db_rows($con,$sql)>0){
		/* fetch userid and create session token */
		$query = mysqli_query($con,$sql);
		while($row=mysqli_fetch_array($query)){
			$userid = $row['userid'];
		}
		$offer_cost = offer_cost();
		/* Validate image */
		if(empty($title)){
			$response['message'] = $mcrypt->encrypt("Please enter title");
		}else if(empty($desc)){
			$response['message'] = $mcrypt->encrypt("Please enter description of offer");
		}else if((!($target==1))&&(!($target==2))){
			$response['message'] = $mcrypt->encrypt("Please check target.");
		}else if(wallet_balance($con,$userid)<$offer_cost){
			$response['message'] = $mcrypt->encrypt("You don't have enough cash on your wallet. Please upload more funds and try again.");
		}else{
			$target_folder = "../closeapp/offers/";
			if (isset($_FILES['image']['name'])) {
				$ext = strtolower(pathinfo($_FILES['image']['name'],PATHINFO_EXTENSION));
				$allowed_file =  array('jpg', 'jpeg','png','gif');
				/* give the file a new name */
				$image = md5($userid.$_FILES['image']['name'].time().generateShortToken()).".".$ext;
				$target_path = $target_folder.$image;
				$size = $_FILES['image']["size"];
				if(!in_array($ext,$allowed_file)){
					$response['message'] = $mcrypt->encrypt('Only jpg,jpeg,png or gif files is allowed!');
				}else if($size>1000000){
					$response['message'] = $mcrypt->encrypt('Image is too large. Maximum image size is 1MB!');
				}else{
					/* Save the image file and update company account */
					if($size<=70000){
						move_uploaded_file($_FILES['image']['tmp_name'], $target_path);
					}else{
						$quality = image_quality($size);
						compressImage($_FILES['image']['tmp_name'],$target_path,$quality);
					}
					$sql = record_offer($con,$userid,$title,$desc,$target,$image);
					if(mysqli_query($con,$sql)){
						$success = 1;
						/* Take the cash from his wallet */
						$trans_id = gen_transId($con);
						$trans_type = 2;
						$amount = (-1)*$offer_cost;
						$gate_way = "";
						$gate_way_detail = "";
						$sql = transaction($con,$userid,$trans_type,$gate_way,$gate_way_detail,$trans_id,$amount);
						mysqli_query($con,$sql);
						$response['message'] = $mcrypt->encrypt('Offer is successfully recorded. We will review the offer and make it live soon.');
					}else{
						$response['message'] = $mcrypt->encrypt('Server error. Please try again later.');
					}
				}	
			}else{
				$response['message'] =  $mcrypt->encrypt('No file received.');
			}
		}
	}else{
		$response['message'] =  $mcrypt->encrypt("You don't have right to access this content.");
	}
	$response['success'] = $success;
	echo json_encode($response);
	db_close($con);
}