MINI Sh3ll

<?php
function getDBConenction(){
    /*$servername = "127.0.0.1";
    $username = "dbuser";
    $password = "DBUser@2019";
    $dbname = "smartcodes";*/

    $servername = "192.168.10.42";
    $username = "smartcodeuid";
    $password = "XCDE4J8gQS";
    $dbname = "smartcodes";

    // Create connection
    $conn = new mysqli($servername, $username, $password, $dbname);

    // Check connection
    if ($conn->connect_error) {
      die("Connection failed: " . $conn->connect_error);
    }

    $conn->set_charset("utf8"); 

    return $conn;
}

function closeDBConenction($conn){
    $conn->close();
}

function mysql_escape($con, $parameter){
    return mysqli_escape_string($con, $parameter);
}

function startNewSession($mobileno = '', $option = ''){
    //if($mobileno == '') return false;
    $connection = getDBConenction();
    
    $query = "update boi_sessions SET status = 1 where status = 0 and mobileno = '".$mobileno."'";
    $connection->query($query);

    $query = "insert into boi_sessions(mobileno) 
    values( '".mysql_escape($connection, $mobileno)."')";
    
    if ($connection->query($query) === TRUE) {
        closeDBConenction($connection);
        return "success";        
    }
    else {
        closeDBConenction($connection);
        return "";
    }
}

function updateMenuOption($session_id = '', $option = ''){
    if($session_id == '') return false;

    $connection = getDBConenction();
    
    $query = "update boi_sessions SET menu_option = '".$option."' where id = '".$session_id."'";

    $connection->query($query);
    closeDBConenction($connection);
}

function updateSubMenuOption($session_id = '', $option = ''){
    if($session_id == '') return false;

    $connection = getDBConenction();
    
    $query = "update boi_sessions SET submenu_option = '".$option."' where id = '".$session_id."'";

    $connection->query($query);
    closeDBConenction($connection);
}

function logRequest($request = []){    
    $connection = getDBConenction();    

    $query = "insert into boi_requests(mobileno, message, response) 
    values(
    '".mysql_escape($connection, $request['mobileno'])."',
    '".mysql_escape($connection, $request['message'])."',
    '".mysql_escape($connection, $request['response'])."' 
    )";
    
    if ($connection->query($query) === TRUE) {
        closeDBConenction($connection);
        return "success";        
    }
    else {
        closeDBConenction($connection);
        return "";
    }
}

function getOpenSession($mobileno){
    $connection = getDBConenction();
    $sql = "SELECT * FROM boi_sessions s WHERE s.`status` = 0 AND s.mobileno = '".$mobileno."' ORDER BY s.id LIMIT 1;";
    
    $result = $connection->query($sql);
    
    closeDBConenction($connection);
    if ($result->num_rows > 0) {
        $retres = [];
        while($row = $result->fetch_assoc()) {
            $retres[] = $row;
        }
        return $retres[0];
    }
    else {
        return false;
    }   
}

function closeSession($session_id = ''){
    if($session_id == '') return false;

    $connection = getDBConenction();
    
    $query = "update boi_sessions SET status = '1' where id = '".$session_id."' and status = 0";

    $connection->query($query);
    closeDBConenction($connection);
}
?>