init wms

2026-02-19 14:48:40 +07:00
commit 9a50080ae5
221 changed files with 30788 additions and 0 deletions
@@ -0,0 +1,124 @@
+<?php 
+	session_start();
+
+	require '../../../preset.php';
+	require '../../../assets/utils/db_auth.php';
+
+	$data["username"] = $_SESSION["login_data"]['username'];
+	$data["password"] = $_SESSION["login_data"]['password'];
+	$user_id		= (int)$_SESSION["login_user_id"];
+	$password 		= md5(trim(strtolower($data["password"])));	
+	$salt_password 	= md5($user_id."_".trim(strtolower($data["password"])));
+
+    // get password 
+    $sth = $pdo1->prepare("select * from user where user_id = {$user_id} limit 1;");
+	$sth->execute();
+	$temp = $sth->fetch(PDO::FETCH_ASSOC);
+
+	// user email
+	$user_email = $temp["email"];
+
+    if( strtolower($data["username"]) == "support" ){
+		if( $data["password"] == strtolower(substr(md5("trcloud".date("Ymd")),0,4)) ){
+			$support = true;
+		}else{
+			$support = false;
+		}
+	}else{
+		$support = false;
+	}
+
+    /**
+	 * validate password
+	 */
+	if((($password == $temp["password"]||$salt_password == $temp["password"]) && strtolower($data["username"]) != "support") || $support == true ){
+
+		/**
+		 * Generate OTP
+		 */
+		function generateOTP($sercet_key, $time_step = 180, $length = 6){
+
+			global $otpTime;
+
+			$otpTime = time();
+
+			$counter = floor($otpTime / $time_step);
+			$data = pack("NN", 0, $counter);
+			$hash = hash_hmac('sha1', $data, $sercet_key, true);
+			$offset = ord(substr($hash, -1)) & 0x0F;
+			$value = unpack("N", substr($hash, $offset, 4));
+			$otp = ($value[1] & 0x7FFFFFFF) % pow(10, $length);
+
+			return str_pad(strval($otp), $length, '0', STR_PAD_LEFT);
+		}
+
+
+		function numberToLetters($num) {
+			$result = '';
+			while ($num > 0) {
+					$mod = ($num - 1) % 26;
+					$result = chr(65 + $mod) . $result;
+					$num = intval(($num - $mod) / 26);
+			}
+			return str_pad($result, 6, 'A', STR_PAD_LEFT);
+		}
+
+		$otp = generateOTP($password);
+
+		$reference_number = numberToLetters(generateOTP($otp));
+
+		/**
+		 * Sent Email With OTP
+		 */
+		require "../../../assets/utils/module/mailer.php";
+
+		// send email
+		if(true){
+
+			$mailer 	= new mailer(["pdo1"=>$pdo1,"pdo2"=>$pdo2]);
+
+			$mailer->send_email([
+				"company_id" 	=> 0,
+				"smtp" 	=> $SMTP,
+				"subject" 	 	=> "One Time Password (OTP) For reference number ".$reference_number,
+				"message" 	 	=> "Your OTP is ".$otp." for reference number ".$reference_number,
+				"channel_name" 	=> "WMS LOGIN OTP ",
+				"to" 			=> $user_email,
+				"key" 			=> $pinkey,
+			]);
+
+		}
+
+
+		$_SESSION = [];
+
+		$_SESSION["login_data"] = $data; // store variables
+
+		$_SESSION["otp"] = $otp;
+
+		$_SESSION["otpTime"] = $otpTime;
+
+		$_SESSION["reference"] = $reference_number;
+
+		$_SESSION["user_email"] = $user_email;
+
+		$_SESSION["login_user_id"] = $user_id;
+
+
+		$answer["success"] 	= 1;
+		$answer["message"] 	= "Login Complete!";
+		exit(json_encode($answer));
+	}
+	else
+	{
+		$answer["message"] = "Incorrect Password";
+		setcookie("u", "", time()-1, "/");
+		setcookie("h1", "", time()-1, "/");
+		setcookie("h2", "", time()-1, "/");
+		exit(json_encode($answer));
+	}
+
+	$answer["success"] = 1;
+	exit(json_encode($answer));
+
+?>