File Manager

✏️ Edit File: /home/sgssmau.org/public_html/includes/functions.php

<?php
require_once __DIR__ . '/../config/database.php';

// Security Functions
function generateCSRFToken() {
    if (!isset($_SESSION['csrf_token'])) {
        $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
    }
    return $_SESSION['csrf_token'];
}

function verifyCSRFToken($token) {
    return isset($_SESSION['csrf_token']) && hash_equals($_SESSION['csrf_token'], $token);
}

function sanitizeInput($input) {
    return htmlspecialchars(trim($input), ENT_QUOTES, 'UTF-8');
}

function getIndianStates() {
    return [
        'Andhra Pradesh' => 'AP',
        'Arunachal Pradesh' => 'AR',
        'Assam' => 'AS',
        'Bihar' => 'BR',
        'Chhattisgarh' => 'CG',
        'Goa' => 'GA',
        'Gujarat' => 'GJ',
        'Haryana' => 'HR',
        'Himachal Pradesh' => 'HP',
        'Jharkhand' => 'JH',
        'Karnataka' => 'KA',
        'Kerala' => 'KL',
        'Madhya Pradesh' => 'MP',
        'Maharashtra' => 'MH',
        'Manipur' => 'MN',
        'Meghalaya' => 'ML',
        'Mizoram' => 'MZ',
        'Nagaland' => 'NL',
        'Odisha' => 'OD',
        'Punjab' => 'PB',
        'Rajasthan' => 'RJ',
        'Sikkim' => 'SK',
        'Tamil Nadu' => 'TN',
        'Telangana' => 'TS',
        'Tripura' => 'TR',
        'Uttar Pradesh' => 'UP',
        'Uttarakhand' => 'UK',
        'West Bengal' => 'WB',
        'Andaman and Nicobar Islands' => 'AN',
        'Chandigarh' => 'CH',
        'Dadra and Nagar Haveli and Daman and Diu' => 'DN',
        'Delhi' => 'DL',
        'Jammu and Kashmir' => 'JK',
        'Ladakh' => 'LA',
        'Lakshadweep' => 'LD',
        'Puducherry' => 'PY'
    ];
}

function validateEmail($email) {
    return filter_var($email, FILTER_VALIDATE_EMAIL);
}

//function generateMemberID() {
    //return 'IHRSO' . date('Y') . str_pad(rand(1, 9999), 4, '0', STR_PAD_LEFT);
//}

function generateMemberID($stateName = null) {
    $year = date('Y');
    $settings = getSiteSettings();
    $prefix = $settings['member_id_prefix'] ?? 'BMFI';
    $filename = __DIR__ . '/serial_' . $year . '.txt';

// Get state short code
    $stateCode = '';
    if ($stateName) {
        $states = getIndianStates();
        $stateCode = $states[$stateName] ?? '';
    }

// Check if file exists for current year
    if (file_exists($filename)) {
        $serial = (int)file_get_contents($filename);
        $serial++;
    } else {
        // Start new year with 1
        $serial = 1;
    }

// Save the new serial back to file
    file_put_contents($filename, $serial);

// Pad serial to 4 digits (e.g. 0001, 0002)
    $serialStr = str_pad($serial, 2, '0', STR_PAD_LEFT);

// Format: PREFIX/STATE/YEAR/SERIAL or PREFIX/YEAR/SERIAL if no code
    if ($stateCode) {
        return $prefix . '/' . $stateCode . '/' . $year . '/' . $serialStr;
    }
    return $prefix . '/' . $year . '/' . $serialStr;
}

function generateDonationReceiptNumber() {
    $year = date('Y');
    $month = date('m');
    $settings = getSiteSettings();
    $prefix = $settings['donation_prefix'] ?? 'GSF';
    // Use a separate serial file for donations
    $filename = __DIR__ . '/donation_serial_' . $year . '.txt';

// Save the new serial back to file
    file_put_contents($filename, $serial);

// Pad serial to 2 digits (e.g. 01, 02)
    $serialStr = str_pad($serial, 2, '0', STR_PAD_LEFT);

// Format: PREFIX/DON/YEAR/SERIAL
    // User asked for: BMFI/DON/2026/01
    return $prefix . '/DON/' . $year . '/' . $serialStr;
}

// Password Functions
function hashPassword($password) {
    return password_hash($password, PASSWORD_DEFAULT);
}

function verifyPassword($password, $hash) {
    return password_verify($password, $hash);
}

// File Upload Functions
function uploadFile($file, $uploadDir, $allowedTypes = ['jpg', 'jpeg', 'png', 'pdf']) {
    if ($file['error'] !== UPLOAD_ERR_OK) {
        return ['success' => false, 'message' => 'Upload error occurred'];
    }
    
    if ($file['size'] > MAX_FILE_SIZE) {
        return ['success' => false, 'message' => 'File size too large'];
    }
    
    $fileExtension = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
    if (!in_array($fileExtension, $allowedTypes)) {
        return ['success' => false, 'message' => 'Invalid file type'];
    }
    
    $fileName = uniqid() . '_' . time() . '.' . $fileExtension;
    $uploadPath = $uploadDir . $fileName;
    
    if (!is_dir($uploadDir)) {
        mkdir($uploadDir, 0755, true);
    }
    
    if (move_uploaded_file($file['tmp_name'], $uploadPath)) {
        return ['success' => true, 'filename' => $fileName, 'path' => $uploadPath];
    }
    
    return ['success' => false, 'message' => 'Failed to move uploaded file'];
}

// Database Helper Functions
function getSiteSettings() {
    try {
        $pdo = getConnection();
        $stmt = $pdo->query("SELECT setting_key, setting_value FROM site_settings");
        $settings = [];
        while ($row = $stmt->fetch()) {
            $settings[$row['setting_key']] = $row['setting_value'];
        }
        return $settings;
    } catch (Exception $e) {
        error_log("Error fetching site settings: " . $e->getMessage());
        return [];
    }
}

// Member Functions
function getMemberByEmail($email) {
    try {
        $pdo = getConnection();
        $stmt = $pdo->prepare("SELECT * FROM members WHERE email = ?");
        $stmt->execute([$email]);
        return $stmt->fetch();
    } catch (Exception $e) {
        error_log("Error fetching member: " . $e->getMessage());
        return false;
    }
}

// Admin Functions
function getAdminByUsername($username) {
    try {
        $pdo = getConnection();
        $stmt = $pdo->prepare("SELECT * FROM admin_users WHERE username = ? AND is_active = 1");
        $stmt->execute([$username]);
        return $stmt->fetch();
    } catch (Exception $e) {
        error_log("Error fetching admin: " . $e->getMessage());
        return false;
    }
}

// Email Functions
function sendEmail($to, $subject, $body, $isHTML = true) {
    // This is a basic implementation. In production, use PHPMailer or similar
    $headers = "From: " . (getSiteSettings()['site_email'] ?? 'noreply@hopefoundation.org') . "\r\n";
    if ($isHTML) {
        $headers .= "Content-Type: text/html; charset=UTF-8\r\n";
    }
    
    return mail($to, $subject, $body, $headers);
}

function sendWelcomeEmail($member) {
    $subject = "Welcome to " . (getSiteSettings()['site_name'] ?? 'Hope Foundation');
    $body = "
        <h2>Welcome {$member['first_name']}!</h2>
        <p>Thank you for joining our organization. Your membership application is being reviewed.</p>
        <p>You will receive a notification once your membership is approved.</p>
        <p>Best regards,<br>The Team</p>
    ";
    
    return sendEmail($member['email'], $subject, $body);
}

// Notification Functions
function createNotification($memberId, $adminId, $type, $title, $message) {
    try {
        $pdo = getConnection();
        $stmt = $pdo->prepare("
            INSERT INTO notifications (member_id, admin_id, type, title, message) 
            VALUES (?, ?, ?, ?, ?)
        ");
        return $stmt->execute([$memberId, $adminId, $type, $title, $message]);
    } catch (Exception $e) {
        error_log("Error creating notification: " . $e->getMessage());
        return false;
    }
}

// Donation Causes Functions
function getDonationCauses($status = null) {
    try {
        $pdo = getConnection();
        $sql = "SELECT * FROM donation_causes";
        if ($status) {
            $sql .= " WHERE status = " . $pdo->quote($status);
        }
        $sql .= " ORDER BY id ASC";
        $stmt = $pdo->query($sql);
        return $stmt->fetchAll(PDO::FETCH_ASSOC);
    } catch (Exception $e) {
        error_log("Error fetching causes: " . $e->getMessage());
        return [];
    }
}

// Payment Functions
function createPayment($memberId, $planId, $amount, $method, $transactionId = null) {
    try {
        $pdo = getConnection();
        $stmt = $pdo->prepare("
            INSERT INTO payments (member_id, plan_id, amount, payment_method, transaction_id, status) 
            VALUES (?, ?, ?, ?, ?, 'pending')
        ");
        $stmt->execute([$memberId, $planId, $amount, $method, $transactionId]);
        return $pdo->lastInsertId();
    } catch (Exception $e) {
        error_log("Error creating payment: " . $e->getMessage());
        return false;
    }
}

// Utility Functions
function redirect($url) {
    header("Location: $url");
    exit();
}

function formatDate($date, $format = 'M d, Y') {
    return date($format, strtotime($date));
}

function formatCurrency($amount, $currency = 'INR') {
    return '₹' . number_format($amount, 2);
}

function isLoggedIn($userType = 'member') {
    return isset($_SESSION[$userType . '_id']);
}

function requireLogin($userType = 'member', $redirectUrl = null) {
    if (!isLoggedIn($userType)) {
        $redirectUrl = $redirectUrl ?? ($userType === 'admin' ? '/admin/login.php' : '/member/login.php');
        redirect($redirectUrl);
    }
}

// Initialize database on first run
if (!file_exists(__DIR__ . '/../.db_initialized')) {
    if (initializeDatabase()) {
        // Create default admin user with correct password
        try {
            $pdo = getConnection();
            $hashedPassword = hashPassword('admin123');
            
            // Check if admin exists, if not create it
            $stmt = $pdo->prepare("SELECT id FROM admin_users WHERE username = 'admin'");
            $stmt->execute();
            
            if (!$stmt->fetch()) {
                $stmt = $pdo->prepare("
                    INSERT INTO admin_users (username, email, password, full_name, role) 
                    VALUES ('admin', 'admin@hopefoundation.org', ?, 'System Administrator', 'super_admin')
                ");
                $stmt->execute([$hashedPassword]);
            } else {
                // Update existing admin password
                $stmt = $pdo->prepare("UPDATE admin_users SET password = ? WHERE username = 'admin'");
                $stmt->execute([$hashedPassword]);
            }
        } catch (Exception $e) {
            error_log("Error creating admin user: " . $e->getMessage());
        }
        
        file_put_contents(__DIR__ . '/../.db_initialized', date('Y-m-d H:i:s'));
    }
}
?>

Batal

⬅ Naik ke public_html 7 item

Nama	Tipe	Ukuran	Diubah	Aksi
📝donation_serial_2026.txt	txt	1 B	2026-07-02 06:10	✏️ Edit 👁️ View
🐘functions.php	php	15.4 KB	2026-02-12 15:14	✏️ Edit 👁️ View
🐘google_translate.php	php	16.3 KB	2026-02-16 15:11	✏️ Edit 👁️ View
🐘navbar.php	php	5.3 KB	2026-06-04 09:58	✏️ Edit 👁️ View
🐘recent-members.php	php	2.5 KB	2025-07-10 22:22	✏️ Edit 👁️ View
📝serial_2026.txt	txt	2 B	2026-07-07 00:38	✏️ Edit 👁️ View
🐘topbar.php	php	2.6 KB	2026-02-11 18:56	✏️ Edit 👁️ View