MINI Sh3ll

<?

function getDBConenction(){
    $servername = "192.168.10.53";
    $username = "tollfreesms";
    $password = "To0!ghbFe60EVQ";
    $dbname = "tollfreesms";
    
    // Create connection
    $conn = new mysqli($servername, $username, $password, $dbname);

    // Check connection
    if ($conn->connect_error) {
      die("Connection failed: " . $conn->connect_error);
    }

    $conn->set_charset("utf8"); 

    return $conn;
}

function closeDBConenction($conn){
    $conn->close();
}

function mysql_escape($con, $parameter){
    return mysqli_escape_string($con, $parameter);
}

function insertMessage($request) {
    $con = getDBConenction();

    $insert_id = false;
    $query = "insert into sms_log(mobile_no, message_id, message, response_text) 
    values(
    '".mysql_escape($con, $request['mobile_no'])."',
    '".mysql_escape($con, $request['message_id'])."',
    '".mysql_escape($con, $request['message'])."',
    '".mysql_escape($con, $request['response_text'])."'
    )";
    
    if ($con->query($query) === TRUE) {
        $insert_id = $con->insert_id;        
    }
    else 
        $insert_id = false;

    closeDBConenction($con);    

    return $insert_id;
}

function closePreviousSessions($mobile_no){
    $con = getDBConenction();
    
    $query = "update sms_log_transactions set log_status = '1' where mobile_no = '".mysql_escape($con, $mobile_no)."' and log_status = '0'";
    // print $query;
    $status = false;
    if ($con->query($query) === TRUE) {
        $status = true;
    }
    else 
        $status = false;

    closeDBConenction($con);    

    return $status;
}

function startNewSession($request) {
    $con = getDBConenction();

    closePreviousSessions($request['mobile_no']);

    $insert_id = false;
    $query = "insert into sms_log_transactions(mobile_no, message_id, l1_message, l1_response, l1_date) 
    values(
    '".mysql_escape($con, $request['mobile_no'])."',
    '".mysql_escape($con, $request['message_id'])."',
    '".mysql_escape($con, $request['message'])."',
    '".mysql_escape($con, $request['response_text'])."',
    now()
    )";
    
    if ($con->query($query) === TRUE) {
        $insert_id = $con->insert_id;        
    }
    else 
        $insert_id = false;

    closeDBConenction($con);    

    return $insert_id;
}

function getActiveSession($mobile_no) {
    if($mobile_no == '') return false;
    $con = getDBConenction();
    
    $sql = "SELECT * FROM sms_log_transactions WHERE mobile_NO = '".$mobile_no."' AND log_status = '0' LIMIT 1";
    
    $result = $con->query($sql);
    
    closeDBConenction($con);
    if ($result->num_rows > 0) {
        $retres = [];
        while($row = $result->fetch_assoc()) {
            $retres[] = $row;
        }
        return $retres[0];
    }
    else {
        return false;
    }  
}

function updateSessionResponse($session, $request, $level) {
    $con = getDBConenction();    

    $query = "update sms_log_transactions set 
        ".$level."_message = '".$request['message']."', 
        ".$level."_response = '".$request['response_text']."',
        ".$level."_date = now() 
        where id = '".mysql_escape($con, $session['id'])."'";
    
    $status = false;
    if ($con->query($query) === TRUE) {
        $status = true;
    }
    else 
        $status = false;

    closeDBConenction($con);
}


?>