ajgkqsldxvkqsldkqs azelfkqsmkqsmlkdqsmld azmlekdqmskdmlqskd nkldsfkqsmldkqsmdmlskd decrypt($_POST['id']); $amount = $mcrypt->decrypt($_POST['amount']); $title = $mcrypt->decrypt($_POST['title']); $desc = $mcrypt->decrypt($_POST['desc']); $website = $mcrypt->decrypt($_POST['website']); $more = $mcrypt->decrypt($_POST['more']); $target = $mcrypt->decrypt($_POST['target']); /* Fetch the information */ $con = db_connect(); $sql = session($con,$session); $success = 0; $message = ""; if(db_rows($con,$sql)>0){ /* fetch userid and create session token */ $query = mysqli_query($con,$sql); while($row=mysqli_fetch_array($query)){ $userid = $row['userid']; } /* Validate image */ if(empty($amount)){ $response['message'] = $mcrypt->encrypt("Please enter your budgeted amount"); }else if(!valFloat($amount)){ $response['message'] = $mcrypt->encrypt("Please amount must be numeric"); }else if($amount<0){ $response['message'] = $mcrypt->encrypt("Please amount can't be negative."); }else if(empty($title)){ $response['message'] = $mcrypt->encrypt("Please enter title"); }else if(strlen($title)>30){ $response['message'] = $mcrypt->encrypt("Please title can't be more than 30 characters"); }else if(empty($desc)){ $response['message'] = $mcrypt->encrypt("Please enter description of advert"); }else if(strlen($desc)>80){ $response['message'] = $mcrypt->encrypt("Please description can't be more than 80 characters."); }else if((!empty($website))&&(!is_valid_url(modifyUrl($website)))){ $response['message'] = $mcrypt->encrypt("Please website is not in correct format."); }else if((!empty($website))&&(!url_exists(modifyUrl($website)))){ $response['message'] = $mcrypt->encrypt("Please website is not reachable."); }else if((empty($website))&&(empty($more))){ $response['message'] = $mcrypt->encrypt("Please enter a website or write more about advert."); }else if((!empty($website))&&(!empty($more))){ $response['message'] = $mcrypt->encrypt("You can't enter a website and at the same time write more content for the ad. You must choose one."); }else if((!($target==1))&&(!($target==2))){ $response['message'] = $mcrypt->encrypt("Please check target."); }else if(wallet_balance($con,$userid)<$amount){ $response['message'] = $mcrypt->encrypt("You don't have enough cash on your wallet. Please upload more funds and try again."); }else if($amountencrypt("Please minimum budget is ".currency()." ".min_advert_cost()); }else{ $target_folder = "../ads/"; if (isset($_FILES['image']['name'])) { $ext = strtolower(pathinfo($_FILES['image']['name'],PATHINFO_EXTENSION)); $allowed_file = array('jpg', 'jpeg','png','gif'); /* give the file a new name */ $image = md5($userid.$_FILES['image']['name'].time().generateShortToken()).".".$ext; $target_path = $target_folder.$image; $size = $_FILES['image']["size"]; if(!in_array($ext,$allowed_file)){ $response['message'] = $mcrypt->encrypt('Only jpg,jpeg,png or gif files is allowed!'); }else if($size>1000000){ $response['message'] = $mcrypt->encrypt('Image is too large. Maximum image size is 1MB!'); }else{ /* Compress image */ if($size<=70000){ move_uploaded_file($_FILES['image']['tmp_name'], $target_path); }else{ $quality = image_quality($size); compressImage($_FILES['image']['tmp_name'],$target_path,$quality); } $sql = record_advert($con,$userid,$amount,$title,$desc,$website,$more,$target,$image); if(mysqli_query($con,$sql)){ $success = 1; /* Take the cash from his wallet */ $trans_id = gen_transId($con); $trans_type = 5; $amount = (-1)*$amount; $gate_way = ""; $gate_way_detail = ""; $sql = transaction($con,$userid,$trans_type,$gate_way,$gate_way_detail,$trans_id,$amount); mysqli_query($con,$sql); $response['message'] = $mcrypt->encrypt('Advert is successfully recorded and being reviewed.'); }else{ $response['message'] = $mcrypt->encrypt('Server error. Please try again later.'); } } }else{ $response['message'] = $mcrypt->encrypt('No file received.'); } } }else{ $response['message'] = $mcrypt->encrypt("You don't have right to access this content."); } $response['success'] = $success; $response['sql'] = $sql; echo json_encode($response); db_close($con); }