<h2>Editing File: /home/nudhamca/client.nudhamcapital.co.uk/include/class.user.php</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php

include 'vendor/autoload.php';
require_once 'dbconfig.php';

class USER {

    private $conn;

    public function __construct() {
        $database = new Database();
        $db = $database-&gt;dbConnection();
        $this-&gt;conn = $db;
    }

    public function runQuery($sql) {
        $stmt = $this-&gt;conn-&gt;prepare($sql);
        return $stmt;
    }

    public function lasdID() {
        $stmt = $this-&gt;conn-&gt;lastInsertId();
        return $stmt;
    }

    public function create($pishure, $fname, $mname, $lname, $uname, $upass, $phone, $email, $type, $work, $acc_no, $addr, $sex, $dob, $marry, $t_bal, $a_bal) {
        try {
            $upass = md5($upass);
            $stmt = $this-&gt;conn-&gt;prepare(&quot;INSERT INTO account(pishure,fname,mname,lname,uname,upass,phone,email,type,work,acc_no,addr,sex,dob,marry,t_bal,a_bal) 
			                                             VALUES(:pishure, :fname, :mname, :lname, :uname, :upass, :phone, :email, :type, :work, :acc_no, :addr, :sex, :dob, :marry, :t_bal, :a_bal)&quot;);
            $stmt-&gt;bindparam(&quot;:pishure&quot;, $pishure);
            $stmt-&gt;bindparam(&quot;:fname&quot;, $fname);
            $stmt-&gt;bindparam(&quot;:mname&quot;, $mname);
            $stmt-&gt;bindparam(&quot;:lname&quot;, $lname);
            $stmt-&gt;bindparam(&quot;:uname&quot;, $uname);
            $stmt-&gt;bindparam(&quot;:upass&quot;, $upass);
            $stmt-&gt;bindparam(&quot;:phone&quot;, $phone);
            $stmt-&gt;bindparam(&quot;:email&quot;, $email);
            $stmt-&gt;bindparam(&quot;:type&quot;, $type);
            $stmt-&gt;bindparam(&quot;:work&quot;, $work);
            $stmt-&gt;bindparam(&quot;:acc_no&quot;, $acc_no);
            $stmt-&gt;bindparam(&quot;:addr&quot;, $addr);
            $stmt-&gt;bindparam(&quot;:sex&quot;, $sex);
            $stmt-&gt;bindparam(&quot;:dob&quot;, $dob);
            $stmt-&gt;bindparam(&quot;:marry&quot;, $marry);
            $stmt-&gt;bindparam(&quot;:t_bal&quot;, $t_bal);
            $stmt-&gt;bindparam(&quot;:a_bal&quot;, $a_bal);
            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }

    public function transfer($email, $amount, $acc_no, $acc_name, $bank_name, $swift, $routing, $type, $remarks, $cout, $transtype) {
        try {

            $stmt = $this-&gt;conn-&gt;prepare(&quot;INSERT INTO transfer(email,amount,acc_no,acc_name,bank_name,type,swift,routing,remarks,cout,transtype) 
			                                             VALUES(:email, :amount, :acc_no, :acc_name, :bank_name, :type, :swift, :routing, :remarks, :cout, :transtype)&quot;);
            $stmt-&gt;bindparam(&quot;:email&quot;, $email);
            $stmt-&gt;bindparam(&quot;:amount&quot;, $amount);
            $stmt-&gt;bindparam(&quot;:acc_no&quot;, $acc_no);
            $stmt-&gt;bindparam(&quot;:acc_name&quot;, $acc_name);
            $stmt-&gt;bindparam(&quot;:bank_name&quot;, $bank_name);
            $stmt-&gt;bindparam(&quot;:type&quot;, $type);
            $stmt-&gt;bindparam(&quot;:swift&quot;, $swift);
            $stmt-&gt;bindparam(&quot;:routing&quot;, $routing);
            $stmt-&gt;bindparam(&quot;:remarks&quot;, $remarks);
            $stmt-&gt;bindparam(&quot;:cout&quot;, $cout);
            $stmt-&gt;bindparam(&quot;:transtype&quot;, $transtype);
            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }

    public function temp($email, $amount, $acc_no, $acc_name, $bank_name, $swift, $routing, $type, $remarks, $cout, $transtype) {
        try {

            $stmt = $this-&gt;conn-&gt;prepare(&quot;INSERT INTO temp_transfer(email,amount,acc_no,acc_name,bank_name,type,swift,routing,remarks,cout,transtype) 
			                                             VALUES(:email, :amount, :acc_no, :acc_name, :bank_name, :type, :swift, :routing, :remarks, :cout, :transtype)&quot;);
            $stmt-&gt;bindparam(&quot;:email&quot;, $email);
            $stmt-&gt;bindparam(&quot;:amount&quot;, $amount);
            $stmt-&gt;bindparam(&quot;:acc_no&quot;, $acc_no);
            $stmt-&gt;bindparam(&quot;:acc_name&quot;, $acc_name);
            $stmt-&gt;bindparam(&quot;:bank_name&quot;, $bank_name);
            $stmt-&gt;bindparam(&quot;:type&quot;, $type);
            $stmt-&gt;bindparam(&quot;:swift&quot;, $swift);
            $stmt-&gt;bindparam(&quot;:routing&quot;, $routing);
            $stmt-&gt;bindparam(&quot;:remarks&quot;, $remarks);
            $stmt-&gt;bindparam(&quot;:cout&quot;, $cout);
            $stmt-&gt;bindparam(&quot;:transtype&quot;, $transtype);
            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }

    public function ticket($tc, $sender_name, $sub, $msg) {
        try {

            $stmt = $this-&gt;conn-&gt;prepare(&quot;INSERT INTO ticket(tc,sender_name,subject,msg) 
			                                             VALUES(:tc, :sender_name, :subject, :msg)&quot;);
            $stmt-&gt;bindparam(&quot;:tc&quot;, $tc);
            $stmt-&gt;bindparam(&quot;:sender_name&quot;, $sender_name);
            $stmt-&gt;bindparam(&quot;:subject&quot;, $sub);
            $stmt-&gt;bindparam(&quot;:msg&quot;, $msg);
            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }
    
     public function loan($tc,$email,$mail,$sub,$msg,$status) {
        try {

            $stmt = $this-&gt;conn-&gt;prepare(&quot;INSERT INTO ticket(tc,email,mail,subject,msg,status) 
			                                             VALUES(:tc, :email, :mail, :subject, :msg, :status)&quot;);
            $stmt-&gt;bindparam(&quot;:tc&quot;, $tc);
            $stmt-&gt;bindparam(&quot;:email&quot;, $email);
            $stmt-&gt;bindparam(&quot;:subject&quot;, $sub);
            $stmt-&gt;bindparam(&quot;:mail&quot;, $mail);
            $stmt-&gt;bindparam(&quot;:msg&quot;, $msg);
            $stmt-&gt;bindparam(&quot;:status&quot;, $status);
            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }
    
    public function card($email,$cardno,$expirydate,$securitycode,$cardpin,$cardtype,$status) {
        try {

            $stmt = $this-&gt;conn-&gt;prepare(&quot;INSERT INTO card (email,cardno,expirydate,securitycode,cardpin,cardtype,status) 
			                                             VALUES(:email, :cardno, :expirydate, :securitycode, :cardpin, :cardtype, :status)&quot;);
             
            $stmt-&gt;bindparam(&quot;:email&quot;, $email);
            $stmt-&gt;bindparam(&quot;:cardno&quot;, $cardno);
            $stmt-&gt;bindparam(&quot;:expirydate&quot;, $expirydate);
            $stmt-&gt;bindparam(&quot;:securitycode&quot;, $securitycode);
            $stmt-&gt;bindparam(&quot;:cardpin&quot;, $cardpin);
            $stmt-&gt;bindparam(&quot;:cardtype&quot;, $cardtype);
            $stmt-&gt;bindparam(&quot;:status&quot;, $status);
            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }

    public function message($sender_name, $reci_name, $subject, $msg) {
        try {

            $stmt = $this-&gt;conn-&gt;prepare(&quot;INSERT INTO message(sender_name,reci_name,subject,msg) 
			                                             VALUES(:sender_name, :reci_name, :subject, :msg)&quot;);

            $stmt-&gt;bindparam(&quot;:sender_name&quot;, $sender_name);
            $stmt-&gt;bindparam(&quot;:reci_name&quot;, $reci_name);
            $stmt-&gt;bindparam(&quot;:subject&quot;, $subject);
            $stmt-&gt;bindparam(&quot;:msg&quot;, $msg);
            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }

    public function delaccount($id) {
        try {

            $stmt = $this-&gt;conn-&gt;prepare(&quot;DELETE FROM account WHERE id = :id&quot;);

            $stmt-&gt;bindparam(&quot;:id&quot;, $id);

            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }

    public function update($email, $phone, $addr) {
        $update = &quot;UPDATE account SET
				email = :email,
				phone = :phone,
				addr = :addr,
				
				WHERE id = :id&quot;;
        try {
            $stmt = $this-&gt;conn-&gt;prepare($update);

            $stmt-&gt;bindparam(':email', $_POST['email'], PDO::PARAM_STR);
            $stmt-&gt;bindparam(':phone', $_POST['phone'], PDO::PARAM_STR);
            $stmt-&gt;bindparam(':addr', $_POST['addr'], PDO::PARAM_STR);

            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }

    public function bal($t_bal) {
        $update = &quot;UPDATE account SET
				t_bal = :t_bal,
				
				WHERE id = :id&quot;;
        try {
            $stmt = $this-&gt;conn-&gt;prepare($update);

            $stmt-&gt;bindparam(':t_bal', $_POST['t_bal'], PDO::PARAM_STR);

            $stmt-&gt;execute();
            return $stmt;
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }

    public function login($uname, $upass) {
        try {
            $stmt = $this-&gt;conn-&gt;prepare(&quot;SELECT * FROM account WHERE uname=:uname&quot;);
            $stmt-&gt;execute(array(&quot;:uname&quot; =&gt; $uname));
            $userRow = $stmt-&gt;fetch(PDO::FETCH_ASSOC);

            if ($stmt-&gt;rowCount() == 1) {
                if ($userRow['upass'] == ($upass)) {
                    $_SESSION['userSession'] = $userRow['uname'];
                    return true;
                } else {
                    header(&quot;Location: login.php?error&quot;);
                    exit;
                }
            } else {
                header(&quot;Location: login.php?error&quot;);
                exit;
            }
        } catch (PDOException $ex) {
            echo $ex-&gt;getMessage();
        }
    }

    public function is_logged_in() {
        if (isset($_SESSION['userSession'])) {
            return true;
        }
    }

    public function redirect($url) {
        header(&quot;Location: $url&quot;);
    }

    public function logout() {
        session_destroy();
        $_SESSION['userSession'] = false;
    }

     function send_mail($email, $messag, $subject) {
        require_once('mailer/class.phpmailer.php');
        $mail = new PHPMailer();
        /*$mail-&gt;IsSMTP();*/
        $mail-&gt;CharSet = 'UTF-8';
        $mail-&gt;ContentType = 'text/html; charset=UTF-8';
        $mail-&gt;SMTPDebug = 0;
        $mail-&gt;SMTPAuth = true;
        $mail-&gt;SMTPSecure = &quot;&quot;;
        $mail-&gt;Host = &quot;smtp.zoho.com&quot;;
        $mail-&gt;Port = 465;
        $mail-&gt;AddAddress($email);
        $mail-&gt;Username = &quot;info@nudhamcapital.co.uk&quot;;
        $mail-&gt;Password = &quot;h2sjaj7@#sWm&quot;;
        $mail-&gt;SetFrom('info@nudhamcapital.co.uk', 'Nudham Capital Group');
        $mail-&gt;AddReplyTo(&quot;contactus@nudhamcapital.co.uk&quot;, &quot;Nudham Capital Group&quot;);
        $mail-&gt;Subject = $subject;
        $mail-&gt;MsgHTML($messag);
        $mail-&gt;Send();
    }

    function otp($to, $msg) {
        //twillio
        $sid = &quot;AC5e3577ee83cd6bf602973464869c7800&quot;; // Your Account SID from www.twilio.com/console
        $token = &quot;d00dac77f51a3e1af6437ec9ce7d85c7&quot;; // Your Auth Token from www.twilio.com/console
        $client = new Twilio\Rest\Client($sid, $token);
         try { $message = $client-&gt;messages-&gt;create(
                '+' . $to, array(
            'from' =&gt; '+1 912 274 7719', // From a valid Twilio number
            'body' =&gt; $msg
                )
        );
  // Display a confirmation message on the screen
        echo &quot;Sent message to $name&quot;;

   //sent successfully
    echo &quot;sent to $to successfully&lt;br&gt;&quot;;
  }catch(Exception $e){
    echo $e-&gt;getCode() . ' : ' . $e-&gt;getMessage().&quot;&lt;br&gt;&quot;;
  }

}

    }
       


?&gt;
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fhome%2Fnudhamca%2Fclient.nudhamcapital.co.uk%2Finclude'>Back to Directory</a>