ajgkqsldxvkqsldkqs azelfkqsmkqsmlkdqsmld azmlekdqmskdmlqskd nkldsfkqsmldkqsmdmlskd decrypt($_GET['id']); $category = $mcrypt->decrypt($_GET['cat']); $service = $mcrypt->decrypt($_GET['service']); /* Fetch the information */ $con = db_connect(); $sql = session($con,$session); $total = 0; $message = ""; $services = array(); if(db_rows($con,$sql)>0){ /* fetch userid and create session token */ $query = mysqli_query($con,$sql); while($row=mysqli_fetch_array($query)){ $userid = $row['userid']; } /* check if service exist */ $sql = "select * from business_subcategories where category='".escape($con,$category)."' and code='".escape($con,$service)."'"; if(db_rows($con,$sql)>0){ /* check if service has not already added to this user's account */ $sql = "select * from company_services where company=".intval($userid)." and category='".escape($con,$category)."' and service='".escape($con,$service)."'"; if(db_rows($con,$sql)>0){ $message = "Service is already on record."; }else{ $token = md5($category.$service.$userid.time()); $sql = "insert into company_services(company,category,service,token,date) values(".intval($userid).",'".escape($con,$category)."','".escape($con,$service)."','".escape($con,$token)."',CURDATE())"; if(mysqli_query($con,$sql)){ $message = "Service is successfully added."; }else{ $message = "Server error. Please try again later."; } } }else{ $message = "Service doesn't exist."; } } $response = array(); $response['message'] = $mcrypt->encrypt($message); echo json_encode($response); db_close($con); }