.-.-.-.-.-

<?php
session_start();
include('../connection.php');
include '../function_lib.php';

$pin_no = tres($_POST['pin_no']);
//$refer_id = tres($_POST['refer_id']);
$refer_login_id = tres($_POST['refer_id']);
$login_id = tres($_POST['login_id']);
$password = tres($_POST['password']);
$position = tres($_POST['position']);

$name = $_POST['name'];
$dob = $_POST['dob'];
$sex = $_POST['sex'];
$address = $_POST['address'];
$city = $_POST['city'];
$country = $_POST['country'];
$mobile = $_POST['mobile'];
$email = $_POST['email'];

$account_number = $_POST['account_number'];
$account_holder_name = $_POST['account_holder_name'];
$account_type = $_POST['account_type'];
$ifsc = $_POST['ifsc'];
$bank_name = $_POST['bank_name'];
$branch_name = $_POST['branch_name'];
$bank_address = $_POST['bank_address'];
$pan_no = $_POST['pan_no'];
$transaction_password = $_POST['transaction_password'];

$refer_id = mysqli_fetch_object(mysqli_query($connection, "SELECT uid FROM user WHERE login_id='$refer_login_id'"))->uid;

$uid = createId();

if(isset($_SESSION['placement_id'])){
    $placement_id = $_SESSION['placement_id'];
}
else{
    $placement_id = get_terminal_id($refer_id, $position);
}

$child_ids = get_child_ids($refer_id);

$check_placement_id = get_placement_id($child_ids, $placement_id);
$check_position = mysqli_query($connection, "SELECT uid, position FROM user WHERE placement_id='$placement_id'");
$position_row = mysqli_fetch_object($check_position)->position;
$check_refer_id = mysqli_query($connection, "SELECT uid FROM user WHERE uid='$refer_id'");
$check_login_id = mysqli_query($connection, "SELECT uid FROM user WHERE login_id='$login_id'");
$check_pin_no=mysqli_query($connection, "SELECT uid, type FROM dynamicpinnumber WHERE pinumber='".$pin_no."' AND status!='used'");
if(mysqli_num_rows($check_pin_no)==0){
    setMessage('Invalid pin.', 'alert-msg error');
    redirect('./register.php');
}
elseif(mysqli_num_rows($check_refer_id)==0){
    setMessage('Invalid sponser id.', 'alert-msg error');
    redirect('./register.php');
}
elseif($check_placement_id=='' || $check_placement_id==0){
    setMessage('Invalid placement id.', 'alert-msg error');
    redirect('./register.php');
}
elseif($position==''){
    setMessage('Invalid position.', 'alert-msg error');
    redirect('./register.php');
}
elseif(mysqli_num_rows($check_position)>=2){
    setMessage('Left and Right child are already exist.', 'alert-msg error');
    redirect('./register.php');
}
elseif(mysqli_num_rows($check_position)==1 && $position_row==$position){
    setMessage('Position already exist.', 'alert-msg error');
    redirect('./register.php');
}
elseif(mysqli_num_rows($check_login_id)){
    setMessage('Login id already axist.', 'alert-msg error');
    redirect('./register.php');
}
else{
    //insert new user
    $sql = "INSERT INTO `user` (`uid`, `login_id`, `refer_id`, `placement_id`, `position`, `password`, `name`, `dob`,`gender`, `address`, `city`, `country`,
        `mobile`, `email`, `reg_date`, `account_number`, `account_holder_name`, `account_type`, `ifsc`, `bank_name`, `branch_name`, `bank_address`, `pan_no`, `transaction_password`) VALUES ('".$uid ."','".$login_id."','".$refer_id."','".$placement_id."','".$position."','".$password."','".$name."','".$dob."','".$sex."','".$address."','".$city."','".$country."','".$mobile."','".$email."','".date('Y-m-d H:i:s')."','".$account_number."','".$account_holder_name."','".$account_type."','".$ifsc."','".$bank_name."','".$branch_name."','".$bank_address."', '$pan_no', '".$transaction_password."')";

mysqli_query($connection, $sql);

mysqli_query($connection, "INSERT INTO `bank_details` (`uid`, `account_number`, `account_holder_name`, `account_type`, `ifsc`, `bank_name`, `branch_name`, `bank_address`, `datetime`) VALUES ('" .$uid ."','".$account_number."','".$account_holder_name."','".$account_type."','".$ifsc."','".$bank_name."','".$branch_name."','".$bank_address."','".date('Y-m-d H:i:s')."')");

mysqli_query($connection, "UPDATE dynamicpinnumber SET uid='$uid', status='used', used_datetime='".date('Y-m-d H:i:s')."' WHERE pinumber='".$pin_no."'");

/* Send SMS */

//$msg = "Dear $name, welcome tomindspace. Your Id no. is $login_id and password is $password Visit us on www.mindspace";
    //send_sms($mobile, $msg);
    /*
    $pin_type = mysqli_fetch_object($check_pin_no)->type;
    if($pin_type=='a'){
       
        $i = 1;
        while ($i <= 23){
            insert($uid, $i);
            $i++;
        }
    }
    elseif($pin_type=='b'){
        mysqli_query($connection, "INSERT INTO referral_income (uid, from_uid, amount, datetime) VALUES ('$refer_id', '$uid', 11500, '".date('Y-m-d H:i:s')."')");
    }
*/
    if(isset($_SESSION['placement_id'])){
        unset($_SESSION['placement_id']);
    }
    if(isset($_SESSION['position'])){
        unset($_SESSION['position']);
    }

$uniqid=uniqid();
    $_SESSION['uniqid'] = $uniqid;

redirect("../member/register_success.php?uid=$uid&&uniqid=$uniqid");
}
function insert($uid, $i){
    $paid = 0;
    $from_day = 30 * ($i - 1);
    $to_day = 30 * $i;
    
    $from_date = date('Y-m-d', strtotime("+$from_day days", strtotime(date('Y-m-d H:i:s'))));
    $to_date = date('Y-m-d', strtotime("+$to_day days", strtotime(date('Y-m-d H:i:s'))));
    mysqli_query($connection, "INSERT INTO installment (uid, month, amount, from_date, to_date) VALUES('$uid', '$i', '5000', '$from_date', '$to_date')");
}
?>

/home2/wtmwscom/public_html/./resources/../member/register_model.php