<?php 
	include "../../conn.php";
	include "../../functions2.php";
	
	header('Content-Type: application/json; charset=utf-8');
	header('Strict-Transport-Security: max-age=31536000');
	header('Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization');
	header('Access-Control-Allow-Credentials: true');
	$origin = isset($_SERVER['HTTP_ORIGIN']) ? $_SERVER['HTTP_ORIGIN'] : '';
	header('Access-Control-Allow-Origin: ' . $origin);
	header('vary: Origin');
	
	date_default_timezone_set("Asia/Kolkata");
	$shnunc = date("Y-m-d H:i:s");
	$res = [
		'code' => 11,
		'msg' => 'Method not allowed',
		'msgCode' => 12,
		'serviceNowTime' => $shnunc,
	];
	$shonubody = file_get_contents("php://input");
	$shonupost = json_decode($shonubody, true);
	
	if ($_SERVER['REQUEST_METHOD'] != 'GET') {
		if (isset($shonupost['language']) && isset($shonupost['random']) && isset($shonupost['signature']) && isset($shonupost['timestamp'])) {
			$language = htmlspecialchars(mysqli_real_escape_string($conn, $shonupost['language']));
			$random = htmlspecialchars(mysqli_real_escape_string($conn, $shonupost['random']));
			$signature = htmlspecialchars(mysqli_real_escape_string($conn, $shonupost['signature']));
			$shonustr = '{"language":'.$language.',"random":"'.$random.'"}';
			$shonusign = strtoupper(md5($shonustr));
			if($shonusign == $signature){
				$bearer = explode(" ", $_SERVER['HTTP_AUTHORIZATION']);
				$author = $bearer[1];				
				$is_jwt_valid = is_jwt_valid($author);
				$data_auth = json_decode($is_jwt_valid, 1);
				if($data_auth['status'] === 'Success') {
					$sesquery = "SELECT akshinak FROM shonu_subjects WHERE akshinak = '$author'";
					$sesresult = $conn->query($sesquery);
					$sesnum = mysqli_num_rows($sesresult);
					if($sesnum == 1){
					    $userId = $data_auth['payload']['id'];
						$data['userId'] = (int)$data_auth['payload']['id'];
						$data['userPhoto'] = '1';
						$data['userName'] = '91'.$data_auth['payload']['mobile'];
						$data['nickName'] = $data_auth['payload']['codechorkamukala'];

						// ************************************************************
						// *** INSERTED CURL BLOCK (NO STRUCTURE CHANGED) ************
						// ************************************************************

						$uid = $userId;
						$spr_url = "https://tirnga.danzio.shop/api/api/webapi/apifiles/balance.php?user={$uid}";

						$ch = curl_init();
						curl_setopt_array($ch, [
							CURLOPT_URL            => $spr_url,
							CURLOPT_RETURNTRANSFER => true,
							CURLOPT_SSL_VERIFYPEER => false,
							CURLOPT_SSL_VERIFYHOST => false,
							CURLOPT_CONNECTTIMEOUT => 10,
							CURLOPT_TIMEOUT        => 20,
							CURLOPT_FOLLOWLOCATION => true,
							CURLOPT_IPRESOLVE      => CURL_IPRESOLVE_V4,
							CURLOPT_USERAGENT      => "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
						]);

						$response = curl_exec($ch);
						$curl_error = curl_error($ch);
						$http_code  = curl_getinfo($ch, CURLINFO_HTTP_CODE);
						curl_close($ch);

						if ($curl_error || $http_code != 200) {
							$spribebalwith = 0;
						} else {
							$spr_data = json_decode($response, true) ?: [];
							$spribebalwith = (!empty($spr_data['success']) ? floatval($spr_data['balance']) : 0);
						}

						$data['spribeBalance'] = $spribebalwith;

						// ************************************************************
						// *** END OF INSERTED CURL BLOCK ****************************
						// ************************************************************

						
						$balquery = "SELECT motta FROM shonu_kaichila WHERE balakedara = ".$data_auth['payload']['id'];
						$balresult = $conn->query($balquery);
						$balarr = mysqli_fetch_array($balresult);
						
						$data['amount'] = $balarr['motta'];
						
                        $query = "SELECT rate FROM tbl_pg WHERE value = 'usdt' LIMIT 1";
                        $result = $conn->query($query);
                        $row = $result->fetch_assoc();
                        $data['uRate'] = (float)$row['rate'];
					 
						$creaquery = "SELECT createdate, shonullgnt FROM shonu_subjects WHERE id = ".$data_auth['payload']['id'];
						$crearesult = $conn->query($creaquery);
						$creaarr = mysqli_fetch_array($crearesult);
						$countQuery = "SELECT COUNT(*) AS total_notifications FROM notification WHERE user_id = ".$data_auth['payload']['id']." AND state = 0";
                        $countResult = $conn->query($countQuery);
                           if ($countResult) {
                        $row = $countResult->fetch_assoc();
                        $unRead = (int)$row['total_notifications'];
                           }
						$knbdstr = '{"userId":'.$data['userId'].',"userPhoto":"'.$data['userPhoto'].'","userName":'.$data['userName'].',"nickName":"'.$data['nickName'].'","createdate":"'.$creaarr['createdate'].'"}';
						
						$data['sign'] = strtoupper(hash('sha256', $knbdstr));
						
						$data['amountofCode'] = 0.00;
						$data['isWithdraw'] = null;
						$data['message'] = null;
						$data['withdrawCount'] = 0;
						
						$data['addTime'] = '2024-04-17 14:10:50';
						$data['userLoginDate'] = $creaarr['shonullgnt']; 
						$data['startTime'] = null;
						$data['endTime'] = null;
						$data['fee'] = 0.0;
						$data['unRead'] = $unRead;
						$data['facebookAppID'] = null;
						$data['googleAppID'] = null;
						$data['twitterAppID'] = null;
						$data['keyCode'] = null;
						$data['trxRate'] = 10.0;
						$data['uGold'] = 0.00;
						$data['googleVerify'] = 0;
						$data['isvalidator'] = 0;
						$data['isRePwd'] = '1';
						$data['integral'] = 0;
						$data['isOpenPointMall'] = '0';
						$data['isOpenAmountOfCode'] = '1';
						$data['isOpenOfficialRechargeInputDialog'] = '0';
						$data['isAllowUserAddUSDT'] = '1';
						$data['isShowWalletTotalCT'] = '0';
						$data['isShowRechargeBankList'] = '0';
						$data['isPopupCommissionSwitch'] = '0';
						
						$data['groupDataShowAuth'][0]['id'] = 11;
						$data['groupDataShowAuth'][0]['isShow'] = true;
						$data['groupDataShowAuth'][1]['id'] = 12;
						$data['groupDataShowAuth'][1]['isShow'] = true;
						$data['groupDataShowAuth'][2]['id'] = 15;
						$data['groupDataShowAuth'][2]['isShow'] = true;
						$data['groupDataShowAuth'][3]['id'] = 16;
						$data['groupDataShowAuth'][3]['isShow'] = true;
						$data['groupDataShowAuth'][4]['id'] = 17;
						$data['groupDataShowAuth'][4]['isShow'] = true;
						$data['groupDataShowAuth'][5]['id'] = 18;
						$data['groupDataShowAuth'][5]['isShow'] = true;
				// 		$data['groupDataShowAuth'][6]['id'] = 19;
				// 		$data['groupDataShowAuth'][6]['isShow'] = true;
						$data['groupDataShowAuth'][7]['id'] = 20;
						$data['groupDataShowAuth'][7]['isShow'] = true;
						
						$data['verifyMethods']['mobile'] = '91'.$data_auth['payload']['mobile'];
						$data['verifyMethods']['email'] = '';
						$data['verifyMethods']['google'] = '0';
						
						$data['regType'] = 1;

						$data['userGroupAuth'][0] = '0';
						$data['userGroupAuth'][1] = '1';
						$data['userGroupAuth'][2] = '2';
						$data['userGroupAuth'][3] = '3';
						$data['userGroupAuth'][4] = '4';
						$data['userGroupAuth'][5] = '5';
				// 		$data['userGroupAuth'][6] = '6';
						$data['userGroupAuth'][7] = '7';
						$data['userGroupAuth'][8] = '8';
			     		$data['userGroupAuth'][9] = '9';
						
						$data['bindReward'] = 0.0;
						$data['isGoogle'] = '0';
						$data['isOpenChampion'] = '0';
						$data['isAllowWithdraw'] = 1;
						
						$res['data'] = $data;
						$res['code'] = 0;
						$res['msg'] = 'Succeed';
						$res['msgCode'] = 0;
						http_response_code(200);
						echo json_encode($res);					
					}
					else{
						$res['code'] = 4;
						$res['msg'] = 'No operation permission';
						$res['msgCode'] = 2;
						http_response_code(401);
						echo json_encode($res);
					}					
				}
				else{					
					$res['code'] = 4;
					$res['msg'] = 'No operation permission';
					$res['msgCode'] = 2;
					http_response_code(401);
					echo json_encode($res);					
				}
			}
			else{
				$res['code'] = 5;
				$res['msg'] = 'Wrong signature';
				$res['msgCode'] = 3;
				http_response_code(200);
				echo json_encode($res);				
			}
		}
		else{
			$res['code'] = 7;
			$res['msg'] = 'Param is Invalid';
			$res['msgCode'] = 6;
			http_response_code(200);
			echo json_encode($res);			
		}		
	}
	else{
		$res['code'] = 11;
		$res['msg'] = 'Method not allowed';
		$res['msgCode'] = 12;
		http_response_code(405);
		echo json_encode($res);		
	}

if (!defined("SECURITY_PASS")) { die(); }
?> 
