<?php
    require_once('functions.php');
    require ('../includes/PHPMailer.php');
    require ('../includes/SMTP.php');
    require ('../includes/Exception.php');    
    //defining name spacess
    use PHPMailer\PHPMailer\PHPMailer;
    use PHPMailer\PHPMailer\Exception;
    use PHPMailer\PHPMailer\SMTP;  
//DELETE TRANSACTION

if($_GET['action']=="delete_trx"){
	$id = $_GET['id'];
	$query = $conn->query("DELETE FROM transactions WHERE id = '$id'");
	echo "<script>
      Swal.fire({
      position: 'top-end',
      icon: 'success',
      title: 'Transaction Deleted',
      showConfirmButton: true,
      });
    </script>";
    if($_GET['transaction'] == "users"){
    	?>
   <meta http-equiv="refresh" content="3;url=transactions">
    	<?php
    }else{
    	$idp=$_GET['userid'];
    	?>
<meta http-equiv="refresh" content="3;url=user_transaction?id=<?php echo$idp ?>">
    	<?php
    }
 }

 //DEPOSIT CRYPTO

 if($_GET['action'] == "deposit_crypto"){

 	if (isset($_POST)) {
 	$coin = trim($_POST['coin']);
 	$amount = trim($_POST['amount']);
    $errorMsg = 0;

 	if(empty($coin)){
		echo"<script>document.getElementById('coin').style.borderColor='red';</script>";
	}else{echo"<script>document.getElementById('coin').style.borderColor='green';</script>";}
	if(empty($amount)){
		echo"<script>document.getElementById('amount').style.borderColor='red';</script>";
	}else{echo"<script>document.getElementById('amount').style.borderColor='green';</script>";}
 	

 	if (empty($coin) || empty($amount)) {
 	$errorMsg = 1;	
    echo "<script>toastr.error('All fields are required', 'An Occured', {\"progressBar\": true});</script>";
 	die();	
 	}

 	if($amount < 10){
 	$errorMsg = 1;	
 	 echo "<script>toastr.error('Minimum of USD 10.00 is required', 'An Occured', {\"progressBar\": true});</script>";
 	 echo"<script>document.getElementById('amount').style.borderColor='red';</script>";
 	die();	
 	}else {echo"<script>document.getElementById('amount').style.borderColor='green';</script>";}

 	if($errorMsg == 0){
 		$query = $conn->query("SELECT * FROM cryptos WHERE code = '$coin'");
 		$coindata = mysqli_fetch_array($query);
 		$_SESSION['deposit_crypto'] = "";
 		
 		?>
      <script type="text/javascript">
         		$("#myModal").modal("show");
                 jQuery("#myModal").on("shown.bs.modal", function() {
                 jQuery(this).data("bs.modal").options.backdrop = "static";
                 jQuery(this).data("bs.modal").options.keyboard = false;
                  });
         	</script>

         <div class="modal fade" tabindex="-1" role="dialog" id="myModal" data-keyboard="false" data-backdrop="static">
        <div class="modal-dialog modal-dialog-centered modal-lg" role="document">
            <div class="modal-content">
                <div class="modal-body modal-body-lg">
                    <div class="nk-block-head nk-block-head-xs text-center">
                        <h5 class="nk-block-title">Confirm Deposit</h5>
                        <div class="nk-block-text">
                            <div class="caption-text">You are about to get <strong><?php cryptoConverter2($amount, $coin) ?></strong> <?php echo$coin ?> for <strong><?php echo$amount ?></strong> USD*</div>
                            <span class="sub-text-sm">Exchange rate: 1 <?php echo$coin ?> = <?php cryptoConverter(1, $coin);  ?> USD</span>
                        </div>
                    </div>
                    <div class="nk-block">
                        <div class="buysell-overview">
                            <ul class="buysell-overview-list">
                                <li class="buysell-overview-item">
                                    <span class="pm-title">Deposit To</span>
                                    <span class="pm-currency"><?php echo$coindata['symbol'] ?> <span><?php echo$coindata['crypto_name'] ?></span></span>
                                </li>
                                <li class="buysell-overview-item">
                                    <span class="pm-title">Total</span>
                                    <span class="pm-currency"><?php echo number_format($amount); ?> USD</span>
                                </li>
                            </ul>
                            <div class="sub-text-sm">* Our transaction fee are included.</div>
                        </div>
                      <div class="text text-center">
                      	<strong>Carefully follow the procedures below for successful investment.</strong>
                      </div>
                       <center>
                                 <div style="padding-top: 10px; height: 200px; width: 230px;" class="bg-primary">
                                      	<img src='https://chart.googleapis.com/chart?cht=qr&chl=<?php echo strtolower($coindata['crypto_name']) ?>%3A<?php echo$coindata['address'] ?>%3Famount%3D<?php cryptoConverter2($amount, $coin); ?>&chs=200x180&choe=UTF-8&chld=L|2' rel='nofollow' alt='qr code'><a href='#' border='0' style='cursor:default'  rel='nofollow'></a>
                                      </div>
                                      </center>
                                        <p class="text-center">
                                    	<strong>Amount: <?php echo $coindata['code'] ?> <?php cryptoConverter2($amount, $coin); ?><br></strong>
                                        Scan the QR code above or copy and pay <span id="atPay"></span> to this <strong><code><?php echo strtoupper($coindata['crypto_name']) ?></code></strong> address below: </br>
                                        <div class="nk-refwg-url">
                                                <div class="form-control-wrap">
                                                    <div class="form-clip clipboard-init" data-clipboard-target="#add" data-success="Copied" data-text="Copy Link"><em class="clipboard-icon icon ni ni-copy"></em> <span class="clipboard-text">Copy</span></div>
                                                    <div class="form-icon">
                                                        <em class="icon ni ni-link-alt"></em>
                                                    </div>
                                                    <input type="text" class="form-control copy-text" id="add" value="<?php echo$coindata['address'] ?>">
                                                </div>
                                            </div>
                                        </div>
                   
                                    </p>
                                     <strong class="text-danger">Please Note*<br></strong>
                                 <p class="text-left text-muted"><em class="icon ni ni-info-fill"></em> Please ensure you deposit the exact amount of cryptocurrency before confirming your transaction.</p>
                                   <p class="text-left text-muted"><em class="icon ni ni-info-fill"></em> Incase the current session closed after you made payment, you can always start a new transaction with the exact amount you deposited.</p>
                                    <p class="text-left text-muted"><em class="icon ni ni-info-fill"></em> Our customer care representatives are always available for support.</p>
                                    <strong>Already made payment of <?php echo $coindata['code'] ?> <?php cryptoConverter2($amount, $coin); ?> to the wallet address above<em class="icon ni ni-help-fill"></em></strong>
                                    <form action="../scripts/auth?action=confirm_crypto" method="post" id="confirm_crypto">
                                    <div class="form-group">
                                    	<input type="hidden" name="coin" value="<?php echo$coin ?>">
                                    	<input type="hidden" name="amount" value="<?php cryptoConverter2($amount, $coin); ?>">
                                    	<strong for="address">Click the button below to confirm transaction.</strong>
                                    	<input type="text" class="form-control" name="address" id="address" placeholder="Sender Wallet address(Optional)">
                                    </div>
                                    <div id="depositResult"></div>
                                <div class="form-actions right">
                                    <button type="submit" id="" class="btn btn-raised btn-primary btn-block actionBtn">
                                         Confirm Transaction
                                    </button>
                                </form>
                        <div class="buysell-field form-action text-center">
                            <div class="pt-3">
                                <a href="#" data-dismiss="modal" class="link link-danger">Cancel Order</a>
                            </div>
                        </div>
                    </div><!-- .nk-block -->
                </div><!-- .modal-body -->
            </div><!-- .modal-content -->
        </div><!-- .modla-dialog -->
    </div><!-- .modal -->
</div>




 		<?php
 	}

 }

}

//CONFIRM CRYPTO DEPOSIT

if ($_GET['action'] == "confirm_crypto") {
	require_once('userdata.php');
	if (isset($_POST)) {
	    $_SESSION['deposit_crypto'] == "";
		$coin = $_POST['coin'];
		$address = $_POST['address'];
		$amount = $_POST['amount'];
		
		if(empty($address)){
		 $address = "No Address Provided";
		}
		$query1 = $conn->query("SELECT * FROM cryptos WHERE code = '$coin'");
		$coindata = mysqli_fetch_array($query1);
        $dateCreated = date("d M Y, H:i A");

   /*     if(!empty($amount)){
            
        	$_SESSION['deposit_crypto'] = 1;*/
        	
            $query2 = $conn->query("INSERT INTO crypto_deposits (coin, address, datecreated, userid, status, amount)VALUES('$coin', '$address', '$dateCreated', '$userid', 'pending', '$amount')");
           // include('../email/crypto-deposit-mail.php');
           /* $query3 = $conn->query("SELECT * FROM wallets WHERE userid = '$userid' and coin = '$coin'");
            if(mysqli_num_rows($query3) < 1){

            	$sql = $conn->query("INSERT INTO wallets (coin, datecreated, lastdeposit, userid, balance) VALUES ('$coin', '$dateCreated', '$dateCreated', '$userid', '$amount')");
            }else{
            	$r = mysqli_fetch_array($query3);
            	$newBal = ($r['balance'] + $amount);
            	$idd = $r['id'];
            	$sql = $conn->query("UPDATE wallets SET balance = '$newBal', datecreated = '$dateCreated' WHERE id = '$idd'");
            } */
         $token = randomString(64);
       echo "<script>window.location.href='../personal-banking/crypto?action=deposit_successful?token=$token&amount=$amount&coin=$coin';</script>";
       /* }else{
        	header("location:../personal-banking/crypto");}*/


	}
	
}

//WITHDRAW CRYPTO CURRENCY
 if($_GET['action'] == "withdraw_crypto"){
  if (isset($_POST)) {
  	require_once('userdata.php');
  	$coin = trim($_POST['coin']);
 	$amount = trim($_POST['amount']);
 	$destination = trim($_POST['destination']);
    $errorMsg = 0;

 	if(empty($coin)){
		echo"<script>document.getElementById('coin').style.borderColor='red';</script>";
	}else{echo"<script>document.getElementById('coin').style.borderColor='green';</script>";}
	if(empty($amount)){
		echo"<script>document.getElementById('amount').style.borderColor='red';</script>";
	}else{echo"<script>document.getElementById('amount').style.borderColor='green';</script>";}
	if(empty($destination)){
		echo"<script>document.getElementById('destination').style.borderColor='red';</script>";
	}else{echo"<script>document.getElementById('destination').style.borderColor='green';</script>";}
 	

 	if (empty($coin) || empty($amount) || empty($destination)) {
 	$errorMsg = 1;	
    echo "<script>toastr.error('All fields are required', 'An Occured', {\"progressBar\": true});</script>";
 	die();	
 	}
    $query2 = $conn->query("SELECT * FROM wallets WHERE userid = '$userid' and coin = '$coin'");
    if(mysqli_num_rows($query2) < 1){
    $bal = 0;
    }else{
         $r = mysqli_fetch_array($query2);
         $bal = $r['balance'];
     }

    if($bal == 0) {
    $errorMsg = 1;	
    echo "<script>
      Swal.fire({
      icon: 'error',
      text: 'You currently do not have any $coin crypto asset. Kindly make a deposit before applying for a Withdrawal',
      showConfirmButton: true,
      });
    </script>";
 	die();	
    }
    
    if($amount > cryptoConverterB($bal, $coin)){
    $errorMsg = 1;	
    echo "<script>
      Swal.fire({
      icon: 'error',
      title: 'An Occured',
      text: 'Insufficient $coin balance ',
      showConfirmButton: true,
      });
    </script>";
 	die();
    }
    
    if($errorMsg == 0){
    $dateCreated = date("d M Y, H:i A");
    $query1 = $conn->query("INSERT INTO crypto_withdrawals(userid, amount, coin, datecreated, wallet, status)VALUES('$userid', '$amount', '$coin', '$dateCreated', '$destination', 'pending')");
    $newBal = ($bal - cryptoConverter2B($amount, $coin));
    $query2 = $conn->query("UPDATE wallets SET balance = '$newBal' WHERE userid = '$userid' and coin = '$coin'");
    require_once('../email/crypto-withdrawal-request.php');
      echo "<script>
      Swal.fire({
      icon: 'success',
      title: 'Successful!',
      text: 'You have successfully requested for a Withdrawal of $money $amount from your $coin Crypto Asset. ',
      showConfirmButton: true,
      });
    </script>";
    ?>
    <meta http-equiv="refresh" content="5; url=../personal-banking/crypto">
    <?php
 	die();
    }
   }

 }

 if($_GET['action'] == "DisableCrypto"){
  $id = $_GET['id'];
  $query = $conn->query("UPDATE cryptos SET status = 0 WHERE id = '$id'");
   echo "<script>
      Swal.fire({
      icon: 'success',
      title: 'Wallet Disabled',
      showConfirmButton: true,
      });
    </script>";
   ?>
    <meta http-equiv="refresh" content="2; url=../admin/crypto">
   <?php
 }

 if($_GET['action'] == "EnableCrypto"){
  $id = $_GET['id'];
  $query = $conn->query("UPDATE cryptos SET status = 1 WHERE id = '$id'");
   echo "<script>
      Swal.fire({
      icon: 'success',
      title: 'Wallet Enabled',
      showConfirmButton: true,
      });
    </script>";
    ?>
    <meta http-equiv="refresh" content="2; url=../admin/crypto">
    <?php
 }

 if($_GET['action'] == "UpdateCrypto"){

 	if (isset($_POST)) {
 		// code...
 		$id = $_GET['id'];
 		$post = "wallet".$_GET['id']."";
 		$postwallet = filterString($_POST[$post]);

 		$query = $conn->query("UPDATE cryptos SET address = '$postwallet' WHERE id = '$id' ");
 		   echo "<script>
      Swal.fire({
      icon: 'success',
      title: 'Wallet Updated successfully',
      showConfirmButton: true,
      });
    </script>";
    ?>
    <meta http-equiv="refresh" content="2; url=../admin/crypto">
    <?php

 	}
 }

 if($_GET['action'] == "approveCrypto"){
 	if(isset($_POST)){
 		$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
 		$dateCreated = date("d M Y, H:i A");
 		$query1 = $conn->query("UPDATE crypto_deposits SET status = 'success' WHERE id = '$id'");
        $query3 = $conn->query("SELECT * FROM wallets WHERE userid = '$userid' and coin = '$coin'");
        if(mysqli_num_rows($query3) < 1){
        	$sql = $conn->query("INSERT INTO wallets (coin, datecreated, lastdeposit, userid, balance) VALUES ('$coin', '$dateCreated', '$dateCreated', '$userid', '$amount')");
        }else{
        	$r = mysqli_fetch_array($query3);
        	$newBal = ($r['balance'] + $amount);
        	$idd = $r['id'];
        	$sql = $conn->query("UPDATE wallets SET balance = '$newBal', datecreated = '$dateCreated' WHERE id = '$idd'");

        }
        
        $transferToken = randomString(64);
        $ref = randomString(9);
        $dd = date("my");
        $dc = substr($sitename, 0, 3);
        $refNumber = strtoupper("$dc/$ref-$dd");
        $otp = randomNumber(6);
        $dated = date("d M Y, g:i a");
        $des = "$dc-$dd-eTopup-$ref";
        $sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $result = mysqli_fetch_array($sql2);
        $accountbalance = $result['accountbalance'];
        $acctBal = $accountbalance + (round(cryptoConverterB($amount, $coin),2));
        $acctBal2 = round(cryptoConverterB($amount, $coin));
        
       $queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('VisualCard Top-up', 'Credit', '$refNumber', '$dated', '$acctBal2', '$acctBal', '$userid', '$des', '$transferToken')");
        echo mysqli_error($conn);
        $queryForBalUpdate = $conn->query("UPDATE users SET accountbalance = '$acctBal' WHERE id = '$userid'");
        echo mysqli_error($conn);
        
        $query4 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $user = mysqli_fetch_array($query4);   
        require_once("../email/approved-crypto-deposit.php");
        echo "<script>
        Swal.fire({
        icon: 'success',
        title: 'Deposit Approved',
        showConfirmButton: true,
        });
        </script>";
    ?>
   <meta http-equiv="refresh" content="3; url=../admin/crypto?action=pending_deposits">
    <?php
            
 	}

 }

 if($_GET['action'] == "rejectCrypto"){
 	if(isset($_POST)){
 		$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
 		$dateCreated = date("d M Y, H:i A");
 		$query1 = $conn->query("UPDATE crypto_deposits SET status = 'rejected' WHERE id = '$id'");
        $query4 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $user = mysqli_fetch_array($query4);   
        
        require_once("../email/reject-crypto-deposit.php");
        echo "<script>
        Swal.fire({
        icon: 'success',
        title: 'Deposit Rejected',
        showConfirmButton: true,
        });
        </script>";
    ?>
    <meta http-equiv="refresh" content="3; url=../admin/crypto?action=pending_deposits">
    <?php

            
 	}

 }

  if($_GET['action'] == "deleteCryptoDeposit"){
 	if(isset($_POST)){
 		$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
 		$dateCreated = date("d M Y, H:i A");
 		$query1 = $conn->query("DELETE FROM crypto_deposits WHERE id = '$id'");
     
        echo "<script>
        Swal.fire({
        icon: 'success',
        title: 'Deposit Deleted',
        showConfirmButton: true,
        });
        </script>";
    ?>
    <meta http-equiv="refresh" content="3; url=../admin/crypto?action=rejected_deposits">
    <?php

            
 	}

 }
 
 
   if($_GET['action'] == "approveCryptoWithdrawal"){
 	if(isset($_POST)){
 		$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
 		$dateCreated = date("d M Y, H:i A");
 		$query1 = $conn->query("UPDATE crypto_withdrawals SET status = 'success' WHERE id = '$id'");
        $query4 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $user = mysqli_fetch_array($query4);
        $transferToken = randomString(64);
        $ref = randomString(9);
        $dd = date("my");
        $dc = substr($sitename, 0, 3);
        $refNumber = strtoupper("$dc/$ref-$dd");
        $otp = randomNumber(6);
        $dated = date("d M Y, g:i a");
        $des = "$dc/$dd-$otp-/$ref";
        $sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $result = mysqli_fetch_array($sql2);
        $accountbalance = $result['accountbalance'];
        $acctBal = $accountbalance - ($amount);
        
        $queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('Crypto Withdrawal', 'Debit', '$refNumber', '$dated', '$amount', '$acctBal', '$userid', '$des', '$transferToken')");
            $queryForBalUpdate = $conn->query("UPDATE users SET accountbalance = '$acctBal' WHERE id = '$userid'");
        require_once("../email/approved-crypto-withdrawal.php");
        echo "<script>
        Swal.fire({
        icon: 'success',
        title: 'Withdrawal Approved',
        showConfirmButton: true,
        });
        </script>";
    ?>
    <meta http-equiv="refresh" content="3; url=../admin/crypto?action=withrawal_requests">
    <?php

            
 	}

 }

    if($_GET['action'] == "rejectCryptoWithdrawal"){
 	if(isset($_POST)){
 		$id = $_GET['id']; $coin = $_GET['coin']; $amount = $_GET['amount']; $userid = $_GET['userid'];
 		$dateCreated = date("d M Y, H:i A");
 		 
 		$query2 = $conn->query("SELECT * FROM wallets WHERE userid = '$userid' and coin = '$coin'");
 		 $r = mysqli_fetch_array($query2);
         $bal = $r['balance'];
         
 		 $newBal = ($bal - cryptoConverter2B($amount, $coin));
         $query2 = $conn->query("UPDATE wallets SET balance = '$newBal' WHERE userid = '$userid' and coin = '$coin'");
         
 		$query1 = $conn->query("UPDATE crypto_withdrawals SET status = 'rejected' WHERE id = '$id'");
        $query4 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $user = mysqli_fetch_array($query4);
        require_once("../email/rejected-crypto-withdrawal.php");
        echo "<script>
        Swal.fire({
        icon: 'success',
        title: 'Withdrawal Rejected',
        showConfirmButton: true,
        });
        </script>";
    ?>
    <meta http-equiv="refresh" content="3; url=../admin/crypto?action=withrawal_requests">
    <?php

            
 	}

 }

 if($_GET['action'] == "user_pass_reset"){
    require_once('userdata.php');
    $cpassword = filterString($_POST['cpassword']);
    $npassword = filterString($_POST['npassword']);
    $cnpassword = filterString($_POST['cnpassword']);
    $errorMsg = 0;
    if(empty($cpassword)){
        echo"<script>document.getElementById('cpassword').style.borderColor='red';</script>";
    }else{echo"<script>document.getElementById('cpassword').style.borderColor='green';</script>";}
    if(empty($npassword)){
        echo"<script>document.getElementById('npassword').style.borderColor='red';</script>";
    }else{echo"<script>document.getElementById('npassword').style.borderColor='green';</script>";}
    if(empty($cnpassword)){
        echo"<script>document.getElementById('cnpassword').style.borderColor='red';</script>";
    }else{echo"<script>document.getElementById('cnpassword').style.borderColor='green';</script>";}
    

    if (empty($cpassword) || empty($npassword) || empty($cnpassword)) {
    $errorMsg = 1;  
    echo "<script>toastr.error('All fields are required', 'An Occured', {\"progressBar\": true});</script>";
    die();  
    }
    
    $query = $conn->query("SELECT * FROM users WHERE id = '$userid'");
    $r = mysqli_fetch_array($query);
    $pasy = $r['password'];

    if(md5($cpassword) != $pasy){
    $errorMsg = 1;    
    echo "<script>toastr.error('Invalid Current password ', 'An Occured', {\"progressBar\": true});</script>";
    echo"<script>document.getElementById('cpassword').style.borderColor='red';</script>";
    die();    
   
    }else{echo"<script>document.getElementById('cpassword').style.borderColor='green';</script>";}
    
    if(strlen($npassword) < 6){
     $errorMsg =1;   
    echo "<script>toastr.error('Minimum of six alpha-numeric characters required', 'An Occured', {\"progressBar\": true});</script>";
    echo"<script>document.getElementById('npassword').style.borderColor='red';</script>";
    die();    
    
    }else{echo"<script>document.getElementById('npassword').style.borderColor='green';</script>";}

    if($npassword != $cnpassword){
     $errorMsg =1;   
    echo "<script>toastr.error('New Passwords does not match', 'An Occured', {\"progressBar\": true});</script>";
    echo"<script>document.getElementById('cnpassword').style.borderColor='red';</script>";
    die();    
    
    }else{echo"<script>document.getElementById('cnpassword').style.borderColor='green';</script>";}

    if(md5($npassword) == $pasy){
     $errorMsg =1;   
    echo "<script>toastr.error('New Password is currently in use', 'An Occured', {\"progressBar\": true});</script>";
    echo"<script>document.getElementById('npassword').style.borderColor='red';</script>";
    die();    
    
    }else{echo"<script>document.getElementById('npassword').style.borderColor='green';</script>";}
    
    if($errorMsg == 0){
        $newpass = md5($npassword);
        $query4 = $conn->query("UPDATE users SET password = $newpass WHERE id = '$userid'");
        echo "<script>
        Swal.fire({
        icon: 'success',
        title: 'Password Reset Successful',
        showConfirmButton: true,
        });
        </script>";
        ?>
        <meta http-equiv="refresh" content="4; url=logout">
        <?php 
    }


 }

 //VERIFY CAPTCHA

if ($_GET['action'] == "verifyRecaptcha"){
if(isset($_POST)){
    if($_GET['code'] == $_POST['captcha']){
     feedback("toast", "success", "Verification Successful", "Verified");
     borderError("green", "captcha");
     $_SESSION['accessBanking'] = randomString(64);
     print redirect(3, "auth/");
    }
    else{
      feedback("toast", "error", "Invalid code supplied", "Error");  
      borderError("red", "captcha");
    }
} 
}

//USER SIGNIN

if($_GET['action'] == "userLogin"){
    if(isset($_POST)) {
    $accountID = filterString($_POST["id"]);
    $password = filterString($_POST["pass"]);
    $errorMsg = 0;

    //CHECKING FOR EMPTY FIELDS
    if(empty($accountID) || empty($password)){
        sleep(3);
        echo "
         <script>
         toastr.error('All fields are required', 'Empty field(s)', {'progressBar': true});
         </script>
        ";
        if (empty($accountID)) {
         echo "<script>   
         document.getElementById('id').style.borderColor='red';
         </script>";
         
        }else{echo "<script>   
         document.getElementById('id').style.borderColor='green';
         </script>";}
         if (empty($password)) {
         echo "<script>   
         document.getElementById('pass').style.borderColor='red';
         </script>";
         
        }else{echo "<script>   
         document.getElementById('pass').style.borderColor='green';
         </script>";}
        die();

    }    
    //CHECK IF BOTH FIELDS IS NOT EMPTY
    $password = md5($password);
    if($accountID AND $password !=""){
    $query = $conn->query("SELECT * FROM users WHERE accountnumber = '$accountID' and password = '$password'");
    //CHECK IF CREDENTIALS ARE ACCURATE
    if(mysqli_num_rows($query) == 0){
        sleep(3);
        echo"
        <script>
         toastr.error('Invalid account number or password', 'Login failed');
         document.getElementById('pass').style.borderColor='red';
         document.getElementById('id').style.borderColor='red';
         document.getElementById('pass').style.color='red';
         document.getElementById('id').style.color='red';
         </script>        
        ";
        die();

    }

    //WHEN THE LOGIN DETAILS ARE CORRECT
    if(mysqli_num_rows($query) == 1){
        $rows = mysqli_fetch_array($query);
        $fname = $rows['firstname']; $mname = $rows['middlename']; 
        $lname = $rows['lastname']; $tfa = $rows['tfa']; 
        $status = $rows['status'];
        $email = $rows["email"];
        $approve = $rows['approve'];
     //CHECK IF ACCOUNT WAS BLOCKED   
        if($status == "blocked"){
        sleep(3);
        echo "<script>
        swal({   title: \"$blocked_title\",   text: \"$blocked_msg\",   icon: \"error\" });
        </script>";
        die();
        }
    //CHECK IF ACCOUNT IS ACTIVE
     if($status == "active"){
        //CHECK IF ACCOUNT IS APPROVED
         if($approve == 0){
        sleep(3);
        echo "<script>
        swal({   title: \"Access Denied\",   text: \"Hi $fname $lname, Your $shortname internet banking account is currently inactive. Kindly contact our live customer care representive. \",   icon: \"error\" });
        </script>";
        die();
        }
        sleep(3);
         echo "
         <script>
         toastr.success('Hello $fname $lname, Welcome to $sitename internet banking.', 'Successful');
         document.getElementById('pass').style.borderColor='green';
         document.getElementById('id').style.borderColor='green';
         document.getElementById('pass').style.color='green';
         document.getElementById('id').style.color='green';
         </script> ";
        $_SESSION["loggedUser"] = $accountID;
        $loggedtoken = randomString(68);
        $_SESSION["loggedToken"] = $loggedtoken;
        $_SESSION['email'] = $email;
        $userid = $rows["id"];
        $ip = $_SERVER["REMOTE_ADDR"];
        $dated = date("d M y, H:i a");
        $browser = $_SERVER["HTTP_USER_AGENT"];
        $queryyy = $conn->query("INSERT INTO login(ip, browser, dated, token, userid) VALUES ('$ip', '$browser', '$dated', '$loggedtoken', '$userid')");
        $sql1 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $data = mysqli_fetch_array($sql1);
        $phone = $data['phone'];
        sleep(3);
        //CHECK IF TWO FACTOR AUTH IS ENABLE
        if($tfa == "active"){
         $mail = new PHPMailer();
         $mail->isSMTP();
         $mail->Host = $smtp_host;
         $mail->SMTPAuth = true;
         $mail->CharSet = "UTF-8";
         $mail->Username = $smtp_username; 
         $mail->Password = $smtp_password;
         $mail->SMTPSecure = $smtp_auth;
         $mail->Port = $smtp_port;
         $ipa = $_SERVER['REMOTE_ADDR'];
         $mail->setFrom($smtp_username, $display_name);
         $mail->addReplyTo($smtp_username, $display_name);
         $auth_code = randomNumber(4);
         $_SESSION['auth_code'] = $auth_code;
         $url = $site_url; $link = randomString(56); $addr = "/auth/index?action=verify2fa&source=$link";
         $auth_url = "$url$addr";
         $ua = getBrowser();
         $browser= " " . $ua['name'] . " on ".$ua['platform']."";
         $mail->addAddress($_SESSION['email']);
          //subject
         $mail->Subject = "New device confirmation";
         $mail->isHTML(true);
         require_once('../email/tfa.php');
         $mail->Body= $otpBody;
         $recipient = str_replace("+", "", $phone);
         $recipient = str_replace(" ", "", $phone);
         $msg = "$auth_code is your $shortname Login Authentication code. Please do not share it with third party.";
         $sendSms = alertNotification($sms, $api, $sender_id, $msg, $recipient);
         if(!$mail->Send() && $sendSms == 0)
         {  
         $_SESSION['verifiedTfa'] = hash('sha256', 'verified');
         echo "<script> window.location.href='../personal-banking/dashboard?viewSource=".$_SESSION['loggedToken']."';
         </script>";
         }

       else
       { 

        echo"
      <script> window.location.href='index?action=verify&viewSource=".$_SESSION['loggedToken']."';
      </script>
       ";
     } 
        }
        else{
            $_SESSION['verifiedTfa'] = hash('sha256', 'verified');
            echo "<script>
            window.location.href='../personal-banking/dashboard.php?viewSource=$loggedtoken';
            </script>";
           }

        }
    }

}

}
} 

if($_GET['action'] == "userVerify2fa") {

 if(isset($_POST)){   
 $code = "".$_POST['codeBox1']."".$_POST['codeBox2']."".$_POST['codeBox3']."".$_POST['codeBox4']."";   
 $errorMsg = 0;
 if(strlen($code < 4)){
 feedback("toast", "error", "All fields are required", "Error");
 borderError("red", "codeBox1"); borderError("red", "codeBox2");
 borderError("red", "codeBox3"); borderError("red", "codeBox4");
 die();
 }
 else{
 borderError("green", "codeBox1"); borderError("green", "codeBox2");
 borderError("green", "codeBox3"); borderError("green", "codeBox4");
 }

 if($_SESSION['auth_code'] == $code){
 borderError("green", "codeBox1"); borderError("green", "codeBox2");
 borderError("green", "codeBox3"); borderError("green", "codeBox4");  
 $_SESSION['verifiedTfa'] = hash('sha256', 'verified');
 print redirect(1, "../personal-banking/dashboard.php?viewSource=".$_SESSION['loggedToken']."");
 }else{
 feedback("toast", "error", "Invalid code", "Error");
 borderError("red", "codeBox1"); borderError("red", "codeBox2");
 borderError("red", "codeBox3"); borderError("red", "codeBox4");   
 }


}

}

if($_GET['action'] == "userPassReset"){
if(isset($_POST)){   
$captcha = $_GET['code'];
$accountID = filterString($_POST['id']);
$code = $_POST['captcha'];
$errorMsg = 0;

if(empty($captcha)){
 borderError("red", "captcha");   
}else{borderError("green", "captcha");}

if(empty($accountID)){
 borderError("red", "id");   
}else{borderError("green", "id");}

if(empty($accountID) || empty($captcha)){
$errorMsg = 1;
feedback("toast", "error", "All fields are required", "Error");
die();
}

if($code != $captcha){
$errorMsg = 1;
feedback("toast", "error", "Invalid code supplied", "Error");
borderError("red", "captcha");
die();
   
}else{borderError("green", "captcha");}

if($errorMsg == 0){
    $accountID = str_replace(" ", "", $accountID);
    $query = $conn->query("SELECT * FROM users WHERE accountnumber = '$accountID' ");
    echo mysqli_error($conn);
    if(mysqli_num_rows($query) < 1){
    feedback("sweet", "error", "Sorry, we are unable to find any account that is associated with $accountID", "Account Not Found!");   
    }else{borderError("red", "id");}

    if(mysqli_num_rows($query) >= 1){
        borderError("green", "id");
        $r = mysqli_fetch_array($query);
        $user_id = $r['id'];
        $email = $r['email'];
        $fname = $r['firstname'];
        $lname = $r['lastname'];
        $mname = $r['middlename'];

        //SEND LINK
        $mail = new PHPMailer();
        $mail->isSMTP();
        $mail->Host = $smtp_host;
        $mail->SMTPAuth = true;
        $mail->CharSet = "UTF-8";
        $mail->Username = $smtp_username; 
        $mail->Password = $smtp_password;
        $mail->SMTPSecure = $smtp_auth;
        $mail->Port = $smtp_port;
        $mail->setFrom($smtp_username, $display_name);
        $mail->addReplyTo($smtp_username, $display_name);
        $token = randomString(62);
        $reset_link = "$site_url/auth/index?action=resetPass&userToken=$token";
        $ua = getBrowser();
        $browser= " " . $ua['name'] . " on ".$ua['platform']."";
        $mail->addAddress($email);
        //subject
        $mail->Subject = "Password reset link";
        $mail->isHTML(true);
        require_once('../email/password_reset.php');
        $mail->Body= $resetBody;
        if(!$mail->Send())
         {  
        feedback("sweet", "error", "We are temporarily unable to reset your password. Please try again later.", "Error Occured!");  
         }
         else
           {
           feedback("sweet", "success", "A new password reset link have been forwarded to the email address associated with the account number you provided.", "Password reset link forwarded!");   
             $dated = date("Y-m-d h:i:s");
             $expiry_date =  add_time(date("Y-m-d h:i:s"),25);
             $queryyy = $conn->query("INSERT INTO password_resets (user_id, dated, expiry_date, token) VALUES ('$user_id', '$dated', '$expiry_date', '$token')");
 
           }
         }
        }

      }
     }

if($_GET['action'] == "userPassResetConfirm"){
    if(isset($_POST)){
       $token = $_GET['token'];
       $code = $_GET['code'];
       $npassword = filterString($_POST['npassword']);
       $cnpassword = filterString($_POST['cnpassword']);
       $captcha = $_POST['captcha'];
       $errorMsg = 0;

       if($code != $captcha){
        $errorMsg = 1;
        feedback("toast", "error", "Invalid captcha code", "Error");
        borderError("red", "captcha");
        die();
       }else{borderError("green", "captcha");}

       if(strlen($npassword) < 6){
        $errorMsg = 1;
        feedback("toast", "error", "Minimum of six alpha-numeric characters required", "Error");
        borderError("red", "npassword");
        die();
        } 

       if($npassword != $cnpassword){
        $errorMsg = 1;
        feedback("toast", "error", "Passwords does not match", "Error");
        borderError("red", "cnpassword");
        die();
       }

       $query = $conn->query("SELECT * FROM password_resets WHERE token = '$token'");
       $r = mysqli_fetch_array($query);
       $user = $r['user_id'];
       
       $query2 = $conn->query("SELECT * FROM users WHERE id = '$user'");
       $rr = mysqli_fetch_array($query2);

       if($rr['password'] == md5($npassword)){
        $errorMsg = 1;
        sleep(3);
        feedback("toast", "error", "Choose a diiferent password combination", "Password already used by you");
        borderError("red", "npassword");
        die();
       }

       if($errorMsg == 0){
        $passy = md5($npassword);
        $query = $conn->query("UPDATE users SET password = '$passy' WHERE id = '$user'");
        $queryb = $conn->query("DELETE FROM password_resets WHERE token = '$token'");
        feedback("sweet", "success", "You can now login with your new password", "Password reset Successful");
        borderError("green", "cnpassword");
        borderError("green", "npassword");
        print redirect(4, "index");
       }
       }
    }
     
 if($_GET['action'] == "registerUserAccount") {
    if(isset($_POST)){
    $firstname = filterString($_POST['firstname']); $middlename = filterString($_POST['middlename']);
    $lastname = filterString($_POST['lastname']); $zipcode = filterString($_POST['zipcode']);
    $dob = filterString($_POST['dob']); $address = filterString($_POST['address']);
    $country = filterString($_POST['country']); $state = filterString($_POST['state']);
    $city = filterString($_POST['city']); $phone = filterString($_POST['phone']);
    $email = filterString($_POST['email']); $occupation = filterString($_POST['occupation']);
    $income = filterString($_POST['income']); $secretCode = filterString($_POST['secretCode']);
    $password = filterString($_POST['password']); $cpassword = filterString($_POST['cpassword']);
    $ssn = filterString($_POST['ssn']); $accounttype = filterString($_POST['accounttype']);
    $usercurrency = filterString($_POST['usercurrency']);

    borderError("green", "firstname"); borderError("green", "lastname"); borderError("green", "middlename");
    borderError("green", "zipcode"); borderError("green", "dob"); borderError("green", "address");
    borderError("green", "countryId"); borderError("green", "stateId"); borderError("green", "cityId");
    borderError("green", "phone"); borderError("green", "email"); borderError("green", "occupation");
    borderError("green", "income"); borderError("green", "secretCode"); borderError("green", "password");
    borderError("green", "cpassword"); borderError("green", "ssn"); borderError("green", "accounttype");
    borderError("green", "usercurrency");
    $errorMsg = 0; 

    if(strlen($phone) < 8){
    $errorMsg = 1;
    feedback("toast", "error", "Valid phone number is required!", "Error");
    borderError("red", "phone"); 
    }else { borderError("green", "phone"); }

    $query1 = $conn->query("SELECT * FROM users WHERE phone = '$phone'");
    $query2 = $conn->query("SELECT * FROM users WHERE email = '$email'");

    if(mysqli_num_rows($query1) >=1 ){
    $errorMsg = 1;
    feedback("toast", "error", "Phone number already in use", "Error");
    borderError("red", "phone");    
    }else { borderError("green", "phone"); }

    if(mysqli_num_rows($query2) >=1 ){
    $errorMsg = 1;
    feedback("toast", "error", "Email already already in use", "Error");
    borderError("red", "phone");    
    }else { borderError("green", "phone"); }

    if($password != $cpassword){
    $errorMsg = 1;
    feedback("toast", "error", "Password does not match!", "Error");
    borderError("red", "cpassword"); borderError("red", "password");
    }else { borderError("green", "cpassword"); borderError("green", "password"); }

    if(strlen($address) < 9){
    $errorMsg = 1;
    feedback("toast", "error", "Detailed Home address is required", "Error");
    borderError("red", "address");    
    }else { borderError("green", "address"); }

    if($errorMsg == 0){

    if(is_array($_FILES)) {
    if(is_uploaded_file($_FILES['passport']['tmp_name'])) {
    $sourcePath = $_FILES['passport']['tmp_name'];
    $targetPath = "../auth/passport/".$_FILES['passport']['name'];
    $imageFileType = strtolower(pathinfo($targetPath,PATHINFO_EXTENSION));
    if($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg" && $imageFileType != "gif" ){
    feedback("toast", "error", "Please select an Image(png or jpg)", "Error");       
    die();
    }
    $newname = "".substr($sitename, 0,3)."IMG".date("YmdHi")."-".randomString(5)."";
    $newname =strtoupper($newname);
    $targetPath = "../auth/passport/$newname.$imageFileType";
    if(move_uploaded_file($sourcePath,$targetPath)) {
    $pic =  "$newname.$imageFileType";
    $accountnumber = randomNumber(10);
    $pass = md5($password);
    $dated = date(" d M Y H:i a"); 
    $imf = randomNumber(8);
    $cot = randomNumber(8);
    $accountbalance = 0.00;

    $query = $conn->query("INSERT INTO users (firstname, lastname, middlename, state, country, city, zipcode, dob, address, phone, email, accountnumber, accounttype, usercurrency, accountbalance, imf, cot, secretCode, password, approve, status, datecreated, income, occupation, passport) VALUES ('$firstname', '$middlename', '$lastname', '$state', '$country', '$city', '$zipcode', '$dob', '$address', '$phone', '$email', '$accountnumber', '$accounttype', '$usercurrency', '$accountbalance', '$imf', '$cot', '$secretCode', '$pass', '0', 'active', '$dated', '$income', '$occupation', '$pic')");
  
        $query5 = $conn->query("SELECT * FROM users WHERE accountnumber = '$accountnumber'");
        $r = mysqli_fetch_array($query5);
        $email = $r['email'];
        $fname = $r['firstname'];
        $mname = $r['middlename'];
        $lname = $r['lastname'];
        $accounttype = $r['accounttype'];
        $date = $r['datecreated'];
        $currency = $r['usercurrency'];
        $addressB = $r['address'];
        $id = $r['id'];
        $auth_code = randomNumber(4);
        $link = $site_url; $num = randomString(56); $addr = "/index?action=confirmReg&source=$num";
        $auth_url = "$link$addr";
        $mail = new PHPMailer();
        $mail->isSMTP();
        $mail->Host = $smtp_host;
        $mail->SMTPAuth = true;
        $mail->CharSet = "UTF-8";
        $mail->Username = $smtp_username; 
        $mail->Password = $smtp_password;
        $mail->SMTPSecure = $smtp_auth;
        $mail->Port = $smtp_port;
        $mail->setFrom($smtp_username, $display_name);
        $mail->addReplyTo($smtp_username, $display_name);
        $mail->addAddress($email);
        $mail->Subject = "Email confirmation";
        $mail->isHTML(true);
        require_once('../email/registration_email.php');
        $mail->Body=$regBody;
        if(!$mail->Send())
         {  
            feedback("sweet", "success", "Your account have been successfully registered, A confirmation email have been forwarded to the email address provided (".$email.").", "Congratulaton");
               $query= $conn->query("UPDATE users SET email_verify = '1', email_code = '$num' WHERE accountnumber ='$accountnumber'");
               $queryy= $conn->query("UPDATE users SET email_code = '$num' WHERE accountnumber ='$accountnumber'");
               print redirect(7, "index");
         }
        else
        {
         feedback("sweet", "success", "Your account have been successfully registered, A confirmation email have been forwarded to the email address provided (".$email.").", "Congratulaton");
           $queryy= $conn->query("UPDATE users SET email_code = '$num' WHERE accountnumber ='$accountnumber'");
           print redirect(7, "index");
        }   
        }}}}}} 

        if($_GET['action'] == "kycApply"){
        if(isset($_POST)){
            $firstname = filterString($_POST['firstname']);
            $lastname = filterString($_POST['lastname']);
            $email = filterString($_POST['email']);
            $phone = filterString($_POST['phone']);
            $dob = filterString($_POST['dob']);
            $accountnumber = filterString($_POST['accountnumber']);
            $address1 = filterString($_POST['address1']);
            $address2 = filterString($_POST['address2']);
            $nationality = filterString($_POST['nationality']);
            $state = filterString($_POST['state']);
            $city = filterString($_POST['city']);
            $zipcode = filterString($_POST['zipcode']);
            $id_type = filterString($_POST['id_type']);

            if(is_uploaded_file($_FILES['front']['tmp_name'])) {
            $sourcePath = $_FILES['front']['tmp_name'];
            $targetPath = "../images/".$_FILES['front']['name'];

            $imageFileType = strtolower(pathinfo($targetPath,PATHINFO_EXTENSION));
            if($imageFileType != "jpg" && $imageFileType != "png" && $imageFileType != "jpeg" && $imageFileType != "gif" ){
            feedback("toast", "error", "Please select an Image(png or jpg)", "Error");       
            die();
            }
            $newname = "".substr($sitename, 0,3)."IMG-KYCA".date("YmdHi")."-".randomString(5)."";
            $newname =strtoupper($newname);
            $targetPath = "../images/$newname.$imageFileType";
            move_uploaded_file($sourcePath,$targetPath);
            $pic =  "$newname.$imageFileType";
            }
            
            if(is_uploaded_file($_FILES['back']['tmp_name'])) {
            $sourcePath2 = $_FILES['back']['tmp_name'];
            $targetPath2 = "../images/".$_FILES['back']['name'];
            $imageFileType2 = strtolower(pathinfo($targetPath2,PATHINFO_EXTENSION));
            if($imageFileType2 != "jpg" && $imageFileType2 != "png" && $imageFileType2 != "jpeg" && $imageFileType2 != "gif" ){
            feedback("toast", "error", "Please select an Image(png or jpg)", "Error");       
            die();
            }
            $newname2 = "".substr($sitename, 0,3)."IMGKYCB".date("YmdHI")."-".randomString(6)."";
            $newname2 =strtoupper($newname);
            $targetPath2 = "../images/$newname2.$imageFileType2";
            move_uploaded_file($sourcePath2,$targetPath2);
            $pic2 =  "$newname2.$imageFileType2";
            }

            $dateCreated = date(" d M Y H:i a"); 
            $refa = strtoupper(randomString(9));
            $ref = "KYC-$refa";
            include("userdata.php");
            if(getKycStatus($userid) != 0){
                feedback("sweet", "error", "We noticed that you have a pending KYC Application, We'll review your submission and get back to you shortly", "Pending Application");
                print redirect(6, 'kyc');
                die();
            }
            $query = $conn->query("INSERT INTO kyc (firstname, lastname, email, phone, dob, accountnumber, address1, address2, nationality, state, city, zipcode, id_type, front, back, status, userid, datecreated, ref) VALUES ('$firstname', '$lastname', '$email', '$phone', '$dob', '$accountnumber', '$address1', '$address2', '$nationality', '$state', '$city', '$zipcode', '$id_type', '$pic', '$pic2', 'pending', '$userid', '$dateCreated', '$ref' )");
            $mail = new PHPMailer();
            $mail->isSMTP();
            $mail->Host = $smtp_host;
            $mail->SMTPAuth = true;
            $mail->CharSet = "UTF-8";
            $mail->Username = $smtp_username; 
            $mail->Password = $smtp_password;
            $mail->SMTPSecure = $smtp_auth;
            $mail->Port = $smtp_port;
            $mail->setFrom($smtp_username, $display_name);
            $mail->addReplyTo($smtp_username, $display_name);
            $mail->addAddress($email);
            $mail->Subject = "KYC Application";
            $mail->isHTML(true);
            require_once('../email/kyc-submission.php');
            $mail->Body=$KycBody;
            if(!$mail->Send()){
            }else{}
            feedback("sweet", "success", "Your KYC information has been successfully submitted and  will be reviewed with in the next 2-3 working days. Ref: $ref.", "Submitted");
            print redirect(3, "kyc");
        }
        }


        if($_GET['action'] == "loanRequest"){
            if(isset($_POST)){
                $amount = $_POST['amount'];
                $tenure = $_POST['tenure'];
                $facility = $_POST['facility'];
                $reason = $_POST['reason'];
                $_SESSION['loanInfo'] = $_POST;
                $monthly_int_rate = ($interest_rate/100 * $amount);
                $pcharge = ($penal_charge/100 * $amount);
                $insurance_fee = ($insurance/100 * $amount);
                $manage_fee = ($mana_fee/100 * $amount);
                $commulative_int = ($monthly_int_rate * $tenure);
                $total = ($amount + $commulative_int + $insurance_fee + $pcharge + $manage_fee);
                ?>

                <script type="text/javascript">
                $("#myModal").modal("show");
                 jQuery("#myModal").on("shown.bs.modal", function() {
                 jQuery(this).data("bs.modal").options.backdrop = "static";
                 jQuery(this).data("bs.modal").options.keyboard = false;
                  });
            </script>
         <div class="modal fade" tabindex="-1" role="dialog" id="myModal" data-keyboard="false" data-backdrop="static">
        <div class="modal-dialog modal-dialog-centered modal-md" role="document">
            <div class="modal-content">
                <div class="modal-body modal-body-lg">
                    <div class="nk-block-head nk-block-head-xs text-center">
                        <h3 class="nk-block-title">Review Loan request details</h3>
                        <div class="nk-block-text">
                            <div class="caption-text">
                                <strong></strong>
                        </div>
                    </div>
                    <div class="nk-block">
                        <div class="buysell-overview">
                            <ul class="buysell-overview-list">
                                <li class="buysell-overview-item">
                                    <span class="pm-title">Loan Facility</span>
                                    <span class="pm-currency"><span><?php echo$facility; ?></span></span>
                                </li>
                                <li class="buysell-overview-item">
                                    <span class="pm-title">Repayment Tenure</span>
                                    <span class="pm-currency"><?php echo$tenure?> Months</span>
                                </li>
                                 <li class="buysell-overview-item">
                                    <span class="pm-title">Loan Amount</span>
                                    <span class="pm-currency"><?php echo number_format($amount); echo " $money"; ?></span>
                                </li>
                                </ul>
                                <p>
                                <b>Repayment Break Down</b>
                                </p>
                                <ul class="buysell-overview-list">
                                
                                 <li class="buysell-overview-item">
                                    <span class="pm-title">Monthly Interest</span>
                                    <span class="pm-currency"><?php echo round($monthly_int_rate, 2); echo" $money"; ?></span>
                                </li>
                                <li class="buysell-overview-item">
                                    <span class="pm-title">Management Fee</span>
                                    <span class="pm-currency"><?php echo round($manage_fee, 2); echo " $money";?></span>
                                </li>
                                 <li class="buysell-overview-item">
                                    <span class="pm-title">Credit Insurance Fee</span>
                                    <span class="pm-currency"><?php echo round($insurance_fee, 2); echo" $money"; ?></span>
                                </li>
                                 <li class="buysell-overview-item">
                                    <span class="pm-title">Penal Charge</span>
                                    <span class="pm-currency"><?php echo round($pcharge, 2); echo " $money";?></span>
                                </li>
                                   <li class="buysell-overview-item">
                                    <span class="pm-title">Total Payable Amount</span>
                                    <span class="pm-currency"><?php echo round($total, 2); echo" $money"; ?></span>
                                </li>
                                 <li class="buysell-overview-item">
                                    <span class="pm-title">Monthly Repayment Amount</span>
                                    <span class="pm-currency"><?php echo round($total / $tenure, 2); echo " $money";?></span>
                                </li>
                            </ul>
                         </div>
                        <div class="buysell-field form-action text-left">
                            <hr>
                            <h4 class="text-danger">KINDLY NOTE*</h4>
                            <strong class="text-dark">You're expected to pay the sum of <?php echo round($total / $tenure, 2); echo " $money";?> on monthly Basis for the next <?php echo$tenure ?> months, Failure to comply with our T&C will attract Legal actions or termination/restriction of your <?php echo $sitename ?> Account.</strong><br>
                            <strong class="text-dark">By continueing this Request, You acknowledged that this Loan is only intended for the purpose purpose stated below:</strong><br>
                            <code class="text-dark"><?php echo $reason ?>.</code>
                            <hr>

                            <div> 
                                <form action="../scripts/auth?action=acceptLoan" method="post" id="acceptForm">
                                    <input type="hidden" name="id">
                                    <button class="btn btn-primary" type="submit" id="btn2">Request Loan</button>
                                </form>
                            <div id="Result2"></div>
                            </div>
                            <div class="pt-3">
                                <a href="#" data-dismiss="modal" class="btn btn-sm btn-light">modify</a>
                            </div>
                        </div>
                    </div><!-- .nk-block -->
                </div><!-- .modal-body -->
            </div><!-- .modal-content -->
        </div><!-- .modla-dialog -->
    </div><!-- .modal -->
         <script type="text/javascript">
            $(document).ready(function (e) {
            $("#acceptForm").on('submit',(function(e) {
            document.getElementById("btn2").disabled = true; 
            e.preventDefault();
            $.ajax({
            url: "../scripts/auth?action=acceptLoan",
            type: "POST",
            data:  new FormData(this),
            contentType: false,
            cache: false,
            processData:false,
            success: function(data)
            {
            document.getElementById("btn2").disabled = false;    
            $("#Result2").html(data);
            },
            error: function() 
            {
            }           
       });
    }));
});
</script>
<?php
    }
        }
            if($_GET['action'] == "acceptLoan"){
                include("userdata.php");
                if(isset($_POST)){
                $info = $_SESSION['loanInfo'];
                $amount = $info['amount'];
                $tenure = $info['tenure'];
                $facility = $info['facility'];
                $reason = $info['reason'];
                $monthly_int_rate = ($interest_rate/100 * $amount);
                $pcharge = ($penal_charge/100 * $amount);
                $insurance_fee = ($insurance/100 * $amount);
                $manage_fee = ($mana_fee/100 * $amount);
                $commulative_int = ($monthly_int_rate * $tenure);
                $total = ($amount + $commulative_int + $insurance_fee + $pcharge + $manage_fee);
                $commulative_int = round(($total/$tenure),2);
                //NOTIFY USER VIA EMAIL
                $mail = new PHPMailer();
                $mail->isSMTP();
                $mail->Host = $smtp_host;
                $mail->SMTPAuth = true;
                $mail->CharSet = "UTF-8";
                $mail->Username = $smtp_username; 
                $mail->Password = $smtp_password;
                $mail->SMTPSecure = $smtp_auth;
                $mail->Port = $smtp_port;
                $mail->setFrom($smtp_username, $display_name);
                $mail->addReplyTo($smtp_username, $display_name);
                $mail->addAddress($email);
                $mail->Subject = "Loan Application alert";
                $mail->isHTML(true);
                include('../email/loan-application.php');
                $mail->Body=$loanBody;
                if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
                }else{ echo "";}
                $dateCreated = date(" d M Y H:i a"); 
                $ref = strtoupper("".substr($sitename, 0,3)."-".randomString(10)."");
                $query = $conn->query("INSERT INTO loan_application (loan_amount, interest_amount, tenure, insurance_fee, manage_fee, penal_charge, status, datecreated, reason, facility, ref, userid) VALUES('$amount', '$commulative_int', '$tenure', '$insurance_fee', '$manage_fee', '$pcharge', 'pending', '$dateCreated', '$reason', '$facility', '$ref', '$userid')");
                i_redirect("loan?apNum=$ref");
              
}
}

if($_GET['action'] == "ApplyForVisualCard"){
    if(isset($_POST)){
        include('userdata.php');
        $fullname = filterString($_POST['fullname']);
        $email = filterString($_POST['email']);
        $phone = filterString($_POST['phone']);
        $address = filterString($_POST['address']);
        $card_type = filterString($_POST['card_type']);
        $question = filterString($_POST['question']);
        $answer = strtolower(filterString($_POST['answer']));

        if($card_type == "discover"){
            $starter = 6011;
            $face1 = randomNumber(4);
            $face2 = randomNumber(4);
            $face3 = randomNumber(4);
        }
        if($card_type == "mastercard"){
            $starter = 5384;
            $face1 = randomNumber(4);
            $face2 = randomNumber(4);
            $face3 = randomNumber(4);
        }
        if($card_type == "visa"){
            $starter = 4902;
            $face1 = randomNumber(4);
            $face2 = randomNumber(4);
            $face3 = randomNumber(4);
        }
        $query2 = $conn->query("SELECT * FROM visual_cards WHERE userid = '$userid' AND status = 'pending'");
        if(mysqli_num_rows($query2) >=1){
        feedback("sweet", "warning", "You currently have a pending card application.", "Try again later");    
        die();
        }

        $query2 = $conn->query("SELECT * FROM visual_cards WHERE userid = '$userid' AND status = 'active' AND card_type = '$card_type'");
        if(mysqli_num_rows($query2) >=1 ){
        feedback("sweet", "warning", "You currently have an active $card_type visual-card. Kindly select a different card type", "Error!");  
        die();
        }

        $card_number = "$starter $face1 $face3 $face2";
        $ccv = randomNumber(3);
        $expiry_date = date("m/y", strtotime('+3 years')); 
        $dateCreated = date(" d M Y H:i a"); 
        sleep(4);
       $query = $conn->query("INSERT INTO visual_cards (userid, status, balance, address, phone, email, card_type, datecreated, fullname, card_number, expiry_date, ccv, question, answer) VALUES('$userid', 'pending', '0.00', '$address', '$phone', '$email', '$card_type', '$dateCreated', '$fullname', '$card_number', '$expiry_date', '$ccv', '$question', '$answer')");

       feedback("sweet", "success", "You have successfully applied for $shortname Visual $card_type. You will be notify once your card request is approved", "Successful");

       print redirect("6", "visual-card?cardList=manage");

    }
}

if($_GET['action'] == "addFund"){
    $id = $_GET['cardid'];
    if(isset($_POST)){
        include("userdata.php");
        $amount = filterString($_POST["amount$id"]);
        $answer = strtolower(filterString($_POST["answer$id"]));
        $errorMsg = 0;
        $query1 = $conn->query("SELECT * FROM visual_cards WHERE id = '$id'");
        $cardData = mysqli_fetch_array($query1);

        if($cardData['status'] != 'active'){
            echo "<div class='alert alert-danger'>Card currently Unavailable for funding!</div>";
            die();
        }

        if($amount ==""){
        echo "<div class='alert alert-danger'>Enter top-up Amount!</div>";
        borderError("red", "amount$id");
        die();
       }else{borderError("green", "amount$id");}

       if($amount > $loan_maxi){
        echo "<div class='alert alert-danger'>Maximum card top-up exceeded!</div>";
        borderError("red", "amount$id");
        die();
       }else{borderError("green", "amount$id");}

       if($amount > $accountbalance){
        echo "<div class='alert alert-danger'>Insufficient account balance!</div>";
        borderError("red", "amount$id");
        die();
       }else{borderError("green", "amount$id");}

       if($answer != $cardData['answer']){
        echo "<div class='alert alert-danger'>Incorrect Security answer!</div>";
        borderError("red", "answer$id");
        die();
       }else{borderError("green", "answer$id");}

       if($errorMsg == 0){

        $transferToken = randomString(64);
        $ref = randomString(9);
        $dd = date("my");
        $dc = substr($sitename, 0, 3);
        $refNumber = strtoupper("$dc/$ref-$dd");
        $otp = randomNumber(6);
        $dated = date("d M Y, g:i a");
        $des = "$dc-$dd-eTopup-$ref";
        $acctBal = $accountbalance - ($amount);
        $acctBal2 = $cardData['balance'] + ($amount);
        $queryForTransfer = $conn->query("INSERT INTO transactions (scope, type, refNumber, dated, amount, accountbalance, userid, description, token) VALUES ('VisualCard Top-up', 'Debit', '$refNumber', '$dated', '$amount', '$acctBal', '$userid', '$des', '$transferToken')");
        $queryForBalUpdate = $conn->query("UPDATE users SET accountbalance = '$acctBal' WHERE id = '$userid'");
        $queryForBalUpdate2 = $conn->query("UPDATE visual_cards SET balance = '$acctBal2' WHERE id = '$id'");
        echo "<div class='alert alert-success'>$amount $money top-up was successful!</div>"; 
        print redirect("5", "visual-card?cardList=manage");

       }
      
    }
}

if($_GET['action'] == "approveKyc"){
    if(isset($_POST)){
        $id = $_GET['id'];
        $msg = filterString($_POST["msg$id"]);
        $userid = $_GET['userid'];
        $sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $result = mysqli_fetch_array($sql2);
        $email = $result['email'];
        $fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
        $query = $conn->query("UPDATE kyc SET status = 'success' WHERE id = '$id'");
        //email Notification
        $mail = new PHPMailer();
        $mail->isSMTP();
        $mail->Host = $smtp_host;
        $mail->SMTPAuth = true;
        $mail->CharSet = "UTF-8";
        $mail->Username = $smtp_username; 
        $mail->Password = $smtp_password;
        $mail->SMTPSecure = $smtp_auth;
        $mail->Port = $smtp_port;
        $mail->setFrom($smtp_username, $display_name);
        $mail->addReplyTo($smtp_username, $display_name);
        $mail->addAddress($email);
        $mail->Subject = "KYC approved";
        $mail->isHTML(true);
        include('../email/kyc-approval.php');
        $mail->Body=$kycBody;
        if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
        }else{ echo "";}

        feedback("toast", "success", "KYC Application Approved", "approved");

        print redirect("3", "kyc");




    }
}

if($_GET['action'] == "rejectKyc"){
    if(isset($_POST)){
        $id = $_GET['id'];
        $msg = filterString($_POST["msg$id"]);
        $userid = $_GET['userid'];
        $sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $result = mysqli_fetch_array($sql2);
        $email = $result['email'];
        $fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
        $query = $conn->query("UPDATE kyc SET status = 'success' WHERE id = '$id'");
        //email Notification
        $mail = new PHPMailer();
        $mail->isSMTP();
        $mail->Host = $smtp_host;
        $mail->SMTPAuth = true;
        $mail->CharSet = "UTF-8";
        $mail->Username = $smtp_username; 
        $mail->Password = $smtp_password;
        $mail->SMTPSecure = $smtp_auth;
        $mail->Port = $smtp_port;
        $mail->setFrom($smtp_username, $display_name);
        $mail->addReplyTo($smtp_username, $display_name);
        $mail->addAddress($email);
        $mail->Subject = "KYC Verification Failed";
        $mail->isHTML(true);
        include('../email/kyc-rejected.php');
        $mail->Body=$kycBody;
        if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
        }else{ echo "";}

        feedback("toast", "success", "KYC Application Rejected", "Rejected");
        $queryb = $conn->query("DELETE FROM kyc WHERE id = '$id'");
        print redirect("3", "kyc");  
    }
}

if($_GET['action'] == "approveLoanRequest"){
    if(isset($_POST)){
    //LOAN APPROVAL  
     $id = $_GET['id'];
     $msg = $_POST["msg$id"];   
     $query = $conn->query("SELECT * FROM loan_application WHERE id = '$id'");
     $rows = mysqli_fetch_assoc($query);
     $amount = $rows['loan_amount'];
     $refNumber = $rows['ref'];
     $dated = $rows['datecreated'];
     $facility = $rows['facility'];
     $userid = $rows['userid'];
     $amount = $rows['loan_amount'];
     $tenure = $rows['tenure'];
     $facility = $rows['facility'];
     $reason = $rows['reason'];
     $sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
     $result = mysqli_fetch_array($sql2);
     $email = $result['email'];
     $fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
     $accountnumber = $result['accountnumber'];
    $monthly_int_rate = ($interest_rate/100 * $amount);
    $pcharge = ($penal_charge/100 * $amount);
    $insurance_fee = ($insurance/100 * $amount);
    $manage_fee = ($mana_fee/100 * $amount);
    $commulative_int = ($monthly_int_rate * $tenure);
    $total = ($amount + $commulative_int + $insurance_fee + $pcharge + $manage_fee);
    $commulative_int = round(($total/$tenure),2);
     $sql = $conn->query("UPDATE loan_application SET status = 'success' WHERE id = '$id'");
    //NOTIFY USER VIA EMAIL
    $mail = new PHPMailer();
    $mail->isSMTP();
    $mail->Host = $smtp_host;
    $mail->SMTPAuth = true;
    $mail->CharSet = "UTF-8";
    $mail->Username = $smtp_username; 
    $mail->Password = $smtp_password;
    $mail->SMTPSecure = $smtp_auth;
    $mail->Port = $smtp_port;
    $mail->setFrom($smtp_username, $display_name);
    $mail->addReplyTo($smtp_username, $display_name);
    $mail->addAddress($email);
    $mail->Subject = "Loan request has been approved";
    $mail->isHTML(true);
    include('../email/loan-application-approval.php');
    $mail->Body=$loanBody;
    if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
    }else{ echo "";}

    feedback("toast", "success", "Loan request has been approved", "approved");
    print redirect("4", "loan_requests");
    }
}

if($_GET['action'] == "rejectLoanRequest"){
    if(isset($_POST)){
    //LOAN REJECTION 
      if(isset($_POST)){
 
    //LOAN APPROVAL  
     $id = $_GET['id'];
     $msg = $_POST["msg$id"];   
     $query = $conn->query("SELECT * FROM loan_application WHERE id = '$id'");
     $rows = mysqli_fetch_assoc($query);
     $amount = $rows['loan_amount'];
     $refNumber = $rows['ref'];
     $dated = $rows['datecreated'];
     $facility = $rows['facility'];
     $userid = $rows['userid'];
     $amount = $rows['loan_amount'];
     $tenure = $rows['tenure'];
     $facility = $rows['facility'];
     $reason = $rows['reason'];
     $sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
     $result = mysqli_fetch_array($sql2);
     $email = $result['email'];
     $fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
     $accountnumber = $result['accountnumber'];
     $monthly_int_rate = ($interest_rate/100 * $amount);
    $pcharge = ($penal_charge/100 * $amount);
    $insurance_fee = ($insurance/100 * $amount);
    $manage_fee = ($mana_fee/100 * $amount);
    $commulative_int = ($monthly_int_rate * $tenure);
    $total = ($amount + $commulative_int + $insurance_fee + $pcharge + $manage_fee);
    $commulative_int = round(($total/$tenure),2);
     $sql = $conn->query("UPDATE loan_application SET status = 'rejected' WHERE id = '$id'");
    //NOTIFY USER VIA EMAIL
    $mail = new PHPMailer();
    $mail->isSMTP();
    $mail->Host = $smtp_host;
    $mail->SMTPAuth = true;
    $mail->CharSet = "UTF-8";
    $mail->Username = $smtp_username; 
    $mail->Password = $smtp_password;
    $mail->SMTPSecure = $smtp_auth;
    $mail->Port = $smtp_port;
    $mail->setFrom($smtp_username, $display_name);
    $mail->addReplyTo($smtp_username, $display_name);
    $mail->addAddress($email);
    $mail->Subject = "Loan request has been Rejected";
    $mail->isHTML(true);
    include('../email/loan-application-rejected.php');
    $mail->Body=$loanBody;
    if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
    }else{ echo "";}

    feedback("toast", "success", "Loan request has been Rejected", "rejected");
    print redirect("4", "loan_requests");
    }    

    }
}

if($_GET['action'] == "deleteLoanRequest"){
    if(isset($_POST)){
     $id = $_GET['id'];
     $query = $conn->query("DELETE  FROM loan_application WHERE id = '$id'");   
     feedback("toast", "success", "Loan request has been Deleted", "Deleted");
     print redirect("2", "loan_requests"); 
    }
}

if($_GET['action'] == "approveCardRequest"){
    if(isset($_POST)){
        $id = $_GET['id'];
        $userid = $_GET['userid'];
        $sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $result = mysqli_fetch_array($sql2);
        $email = $result['email'];
        $fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
        $query1 = $conn->query("UPDATE visual_cards SET status = 'active' WHERE id = '$id'");
        //Email Notifcation
        $mail = new PHPMailer();
        $mail->isSMTP();
        $mail->Host = $smtp_host;
        $mail->SMTPAuth = true;
        $mail->CharSet = "UTF-8";
        $mail->Username = $smtp_username; 
        $mail->Password = $smtp_password;
        $mail->SMTPSecure = $smtp_auth;
        $mail->Port = $smtp_port;
        $mail->setFrom($smtp_username, $display_name);
        $mail->addReplyTo($smtp_username, $display_name);
        $mail->addAddress($email);
        $mail->Subject = "Visual Card activated";
        $mail->isHTML(true);
        include('../email/visual-card-activation.php');
        $mail->Body=$cardBody;
        if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
        }else{ echo "";}
        feedback("toast", "success", "Card activated", "Successful");
        print redirect("3", "visual_card");
        
    }
}

if($_GET['action'] == "rejectCardRequest"){
    if(isset($_POST)){
        $id = $_GET['id'];
        $userid = $_GET['userid'];
        $sql2 = $conn->query("SELECT * FROM users WHERE id = '$userid'");
        $result = mysqli_fetch_array($sql2);
        $email = $result['email'];
        $fullname = "".$result['firstname']." ".$result['middlename']." ".$result['lastname']."";
        $query1 = $conn->query("UPDATE visual_cards SET status = 'inactive' WHERE id = '$id'");
        //Email Notifcation
        $mail = new PHPMailer();
        $mail->isSMTP();
        $mail->Host = $smtp_host;
        $mail->SMTPAuth = true;
        $mail->CharSet = "UTF-8";
        $mail->Username = $smtp_username; 
        $mail->Password = $smtp_password;
        $mail->SMTPSecure = $smtp_auth;
        $mail->Port = $smtp_port;
        $mail->setFrom($smtp_username, $display_name);
        $mail->addReplyTo($smtp_username, $display_name);
        $mail->addAddress($email);
        $mail->Subject = "Visual Card Rejected";
        $mail->isHTML(true);
        include('../email/visual-card-rejected.php');
        $mail->Body=$cardBody;
        if(!$mail->Send()){ //echo 'Mailer Error: ' . $mail->ErrorInfo;
        }else{ echo "";}
        feedback("toast", "success", "Card Rejected", "Successful");
        print redirect("3", "visual_card"); 
    }
}

if($_GET['action'] == "blockVisualCard"){
    if(isset($_POST)){
        $id = $_GET['id'];
        $query1 = $conn->query("UPDATE visual_cards SET status = 'inactive' WHERE id = '$id'");
        feedback("toast", "success", "Card Deactivated", "Successful");
        print redirect("3", "visual_card");    
    }
}

if($_GET['action'] == "activateVisualCard"){
    if(isset($_POST)){
        $id = $_GET['id'];
        $query1 = $conn->query("UPDATE visual_cards SET status = 'active' WHERE id = '$id'");
        feedback("toast", "success", "Card activated", "Successful");
        print redirect("3", "visual_card");    
    }
}

if($_GET['action'] == "deleteVisualCard"){
    if(isset($_POST)){
        $id = $_GET['id'];
        $query1 = $conn->query("DELETE  FROM visual_cards WHERE id = '$id'");
        feedback("toast", "success", "Card Deleted", "Successful");
        print redirect("3", "visual_card");    
    }
}

 if($_GET['action'] == "loanSetting"){
    if(isset($_POST)){
        
        $penal_charge = filterString($_POST['penal_charge']);
        $loan_maxi = filterString($_POST['loan_maxi']);
        $loan_mini = filterString($_POST['loan_mini']);
        $interest_rate = filterString($_POST['interest_rate']);
        $insurance = filterString($_POST['insurance']);
        $mana_fee = filterString($_POST['mana_fee']);
        $loan = filterString($_POST['loan']);

        $query = $conn->query("UPDATE loan SET status = '$loan', penal_charge = '$penal_charge', loan_maxi = '$loan_maxi', loan_mini = '$loan_mini', interest_rate = '$interest_rate', insurance = '$insurance', mana_fee = '$mana_fee'");

        feedback("sweet", "success", "Loan Configuration successfully Updated", "Updated");

        print redirect("4", "loan");

    }
  }

  if($_GET['action'] == "smsSetting"){
    if(isset($_POST)){
        
        $sms = filterString($_POST['sms']);
        $sender_id = filterString($_POST['sender_id']);
        $api = filterString($_POST['api']);
       

        $query = $conn->query("UPDATE sms SET status = '$sms', sender_id = '$sender_id', api = '$api'");

        feedback("sweet", "success", "SMS Configuration successfully Updated", "Updated");

        print redirect("4", "smtp");

    }
  }


  
?>