MINI Sh3ll

Path : /var/www/html/viryaenergy.io/classes/
Current File : /var/www/html/viryaenergy.io/classes/user.cls.php
<?php
class user {
	private $objdb;

	public function __construct(){

		$this->objdb=new database;
		return true;
	}

    public function validateUser($loginid, $password){
        $sql = "select * from users u where status = 1 and email = '".$loginid."' 
        and password = '".md5(mysql_escape($this->objdb->connection, $password))."' order by id limit 1";
                
        $result = $this->objdb->get_records($sql);
        
        if($result == false)
            return false;
        else
            return $result[0];
    }
    

    public function createLoginSession($user_id, $session_id, $ip_address)
    {
        $sql = "insert into login_sessions(user_id,session_id,login_time,last_reported, ipaddress) values(
            '".mysql_escape($this->objdb->connection, $user_id)."', 
            '".mysql_escape($this->objdb->connection, $session_id)."', 
            '".date('Y-m-d H:i:s')."',      
            '".date('Y-m-d H:i:s')."',  
            '".$ip_address."'  
        )";
        
        $result = $this->objdb->saveRecords($sql);
        return $result;
    }

    public function getUserDetailsBySessionId($session_id = ''){
        if($session_id == '') return false;

        $sql = "select u.* from login_sessions ls LEFT join users u ON ls.user_id = u.id            
            where ls.session_id = '".$session_id."' AND u.`status` = 1 limit 1"; 
        
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else{
            return $result[0];
        }
    }

    public function getActiveClients() {        

        $sql = "SELECT *, ltrim(rtrim(concat(u.firstname,' ', u.lastname))) client_name FROM users u WHERE u.`status` = 1 and u.usertype = 'CLIENT' ORDER BY ltrim(rtrim(concat(u.firstname,' ', u.lastname)))";        
        
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else 
            return $result;        
    }

    public function getClients($status = '1') {        

        $sql = "SELECT c.*, LTRIM(RTRIM(CONCAT(c.firstname,' ', c.lastname))) client_name, 
            LTRIM(RTRIM(CONCAT(cb.firstname,' ', cb.lastname))) createdby_name,
            case c.`status` when 1 then 'Active' when 0 then 'Suspended' END client_status
            FROM users c
            LEFT JOIN users cb ON c.created_by = cb.id 
            WHERE c.`status` IN (".$status.") AND c.usertype = 'CLIENT'
            ORDER BY LTRIM(RTRIM(CONCAT(c.firstname,' ', c.lastname)))";
            
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else 
            return $result;        
    }

    public function updateUserStatus($user)
    {
        $sql = "update users SET status = ".$user['status']." WHERE id = '".$user['id']."'";

        // print $sql; die;
        
        $result = $this->objdb->saveRecords($sql);
        return $result;
    }

    function getUserDetailsById($user_id)
    {           
        $sql = "select * from users u where u.status in (0,1) and u.id = '".$user_id."' limit 1"; 
        
        $result = $this->objdb->get_records($sql);

        if($result == false){
            return false;
        }
        else
            return $result[0];        
    }

    function addUser($user = '')
    {
        if($user == '') return false;
        // print_r($user); die();
        $sql = "insert into users(reference_id,firstname, lastname, company_id, email, contactno, password, usertype, parent_id, plant_id, gstno, ipaddress, created_by) values(
            '".mysql_escape($this->objdb->connection, $user['reference_id'])."',             
            '".mysql_escape($this->objdb->connection, $user['firstname'])."',             
            '".mysql_escape($this->objdb->connection, $user['lastname'])."',             
            '".mysql_escape($this->objdb->connection, $user['company_id'])."', 
            '".mysql_escape($this->objdb->connection, $user['email'])."', 
            '".mysql_escape($this->objdb->connection, $user['contactno'])."', 
            '".mysql_escape($this->objdb->connection, $user['password'])."', 
            '".mysql_escape($this->objdb->connection, $user['usertype'])."', 
            '".mysql_escape($this->objdb->connection, $user['parent_id'])."', 
            '".mysql_escape($this->objdb->connection, $user['plant_id'])."', 
            '".mysql_escape($this->objdb->connection, $user['gstno'])."', 
            '".mysql_escape($this->objdb->connection, $user['ipaddress'])."', 
            '".mysql_escape($this->objdb->connection, $user['created_by'])."'
        )";
        $result = $this->objdb->saveRecords($sql);
        return $result;
    } 

    function updateUser($user = '')
    {
        if($user == '') return false;

        $sql ="update users set 
            firstname = '".mysql_escape($this->objdb->connection, $user['firstname'])."',            
            lastname = '".mysql_escape($this->objdb->connection, $user['lastname'])."',
            email = '".mysql_escape($this->objdb->connection, $user['email'])."',            
            contactno = '".mysql_escape($this->objdb->connection, $user['contactno'])."',            
            ipaddress = '".mysql_escape($this->objdb->connection, $user['ipaddress'])."',            
            modified_by = '".mysql_escape($this->objdb->connection, $user['modified_by'])."', 
            modified = now() 
            where id = '".$user['id']."' ";
        
        $result = $this->objdb->saveRecords($sql);        
    }
	
    public function getUserDetailsByEmail($email = '', $status = ''){
        if($email == '') return false;

        $status = $status != '' ? $status : '1'; 

        $sql = "select u.* from users u where u.email = '".$email."'  limit 1";
        
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else
            return $result[0];
    }   

    function getAnyUserByMobileNo($mobileno = ''){
        $sql = "select * from users u where md5(mobileno) = '".md5($mobileno)."' limit 1";
        
        $result = $this->objdb->get_records($sql);
        
        if($result == false)
            return false;
        else
            return $result[0];
    }  

    function getUsersList($parent_id){
        // $sql = "SELECT * FROM (SELECT u.id,u.firstname,u.lastname,u.contactno,u.email,u.usertype,u.status,c.name AS cname, p.name AS pname FROM companies c JOIN plants p ON p.company_id = c.id JOIN users u ON u.id = p.manager_id UNION SELECT u.id,u.firstname,u.lastname,u.contactno,u.email,u.usertype,u.status,c.name AS cname,NULL AS pname FROM users u JOIN companies c ON u.company_id = c.id WHERE u.usertype != 'PADMIN') AS t WHERE status in (0,1)";
        // $sql = "SELECT u.*, c.name AS cname, p.name AS pname FROM companies c JOIN plants p ON p.company_id = c.id JOIN users u ON u.id = p.manager_id WHERE u.parent_id = ".$parent_id." AND u.status in (0,1)";
        $sql = "SELECT u.*, c.name AS cname FROM companies c JOIN users u ON u.company_id = c.id WHERE u.status in (0,1)";
        if($parent_id != ""){
            $sql .= " AND u.parent_id = ".$parent_id;
        }
        // x($sql);
        $result = $this->objdb->get_records($sql);
        if($result == false)
            return false;
        else
            return $result;
    }

    function getUserDetails($id){
        $sql = "SELECT * from users u where id = ".$id;
        $result = $this->objdb->get_records($sql);
        if($result == false)
            return false;
        else
            return $result[0];
    }

    function getUsersByType($type='',$cid){
        // x($loginUser); die();
        $sql = "SELECT * from users u where u.company_id = ".$cid." and u.usertype = '".$type."'";
        $result = $this->objdb->get_records($sql);
        if($result == false)
            return false;
        else
            return $result;
    }
}
?>