first commit

2025-07-21 21:38:17 +08:00
commit f8f8fcaf96
2529 changed files with 227800 additions and 0 deletions
@@ -0,0 +1,74 @@
+<?php
+$must_login     = false ;
+$require_path   = '../../' ;
+$require_sub    = '../' ;
+require( $require_sub.'header.php' ) ;
+
+$username       = $array['username'] ;
+$password       = $array['password'] ;
+$token          = $array['token'] ;
+
+$status         = '300' ;
+
+if ( $username != '' && $password != '' ){
+    $status     = '284' ;
+
+    $password     = passwordEncrypt( $password ) ;
+    $mysqli_staff = $mysqli->query("SELECT staff_id, staff_idno, staff_name, staff_shortname, staff_username, staff_email, staff_mobileno, staff_image, job_position_id, job_section_id, branch_id, staff_point_achievement, staff_point, staff_wallet, staff_tier, staff_achievement, staff_star, staff_settings, country_id FROM staff
+                                    WHERE deleted_at IS NULL AND ( staff_date_resigned IS NULL OR staff_date_resigned = '0000-00-00' || staff_date_resigned >= '".TODAYDATE."' ) AND staff_username = '".$username."' AND staff_password = '".$password."' LIMIT 1") ;
+    if ( $mysqli_staff->num_rows > 0 ){
+        $status                         = '200' ;
+
+        $row_staff                      = $mysqli_staff->fetch_array(MYSQLI_ASSOC) ;
+        
+        $code                           = time().strPad( 6, rand(000000, 999999) ) ;
+        $tokencode                      = $row_staff['staff_id'] . '_' . $code . md5($code) ;
+
+        $mysqli->query( "INSERT INTO staff_token
+                        ( staff_id, platform, token ) VALUES
+                        ( '".$row_staff['staff_id']."', '".$array['platform']."', '".$tokencode."' )" ) ;
+
+        if ( $array['notification']    != '' ){
+
+            $select_notification        = $mysqli->query( "SELECT * FROM staff_notification
+                                                           WHERE notification = '".$array['notification']."' LIMIT 1" ) ;
+            if ( $select_notification->num_rows == 0 ){
+                $mysqli->query( "INSERT INTO staff_notification
+                                 ( notification, staff_id ) VALUES
+                                 ( '".$array['notification']."', '".$row_staff['staff_id']."' )" ) ;
+            }else{
+                $mysqli->query( "UPDATE staff_notification SET
+                                 staff_id           = '".$row_staff['staff_id']."' 
+                                 WHERE notification = '".$array['notification']."'" ) ;
+            }
+        }
+
+        $row_staff['staff_image']                   = ( $row_staff['staff_image'] != '' ? PATH.'uploads/Staff/'.dataFilter($row_staff['staff_image']) : '' ) ;
+        $row_staff['token']                         = $tokencode ;
+        $row_staff['staff_settings']                = ( $row_staff['staff_settings'] != '' ? json_decode($row_staff['staff_settings'], true) : [] ) ;
+
+
+        $get_tier                                   = getTier( $row_staff['staff_tier'], $array['lang'] ) ;
+        $row_staff['staff_tier_level']              = $get_tier['level'] ;
+        $row_staff['staff_tier_title']              = $get_tier['title'] ;
+        $row_staff['staff_tier_is_task']            = $get_tier['is_task'] ;
+        $row_staff['staff_tier_is_task_assigned']   = $get_tier['is_task_assigned'] ;
+        $row_staff['staff_tier_is_task_incentive']  = $get_tier['is_task_incentive'] ;
+        $row_staff['staff_tier_is_task_incentive2'] = $get_tier['is_task_incentive2'] ;
+        $row_staff['staff_tier_is_task_extra']      = $get_tier['is_task_extra'] ;
+        $row_staff['staff_tier_is_adjustment']      = $get_tier['is_adjustment'] ;
+
+        $row_staff['staff_star']                    = ( $row_staff['staff_star'] + 0 ) ;
+
+
+
+
+
+        $data                                       = $row_staff ;
+
+    }
+
+}
+
+require( $require_sub.'footer.php' ) ;
+?>