/**
* @url POST sendemail
*/
protected function postSendEmail($from, $to, $subject, $message)
{
if ($userId == \TTO::getUserId() || \TTO::getRole() == 'admin') {
\TTOMail::createAndSend($from, $to, $subject, $message);
} else {
throw new RestException(401, 'No Authorize or Invalid request !!!');
}
}
/**
* @url POST register
* @url POST
*/
function postRegister($email, $password, $firstname, $lastname, $nickname, $phone, $birthdate, $school, $province, $level, $purpose, $avatarId)
{
//Hash password
$hash = password_hash($password, PASSWORD_DEFAULT);
$serial = sha1(uniqid());
$statement = "\n \t\tINSERT INTO user \n \t\t\t(email, role, hash, serial, firstname, lastname, nickname, phone, birthdate, school, province, level, purpose, avatarId)\n \t\tVALUE \n \t\t\t(:email, :role, :hash, :serial, :firstname, :lastname, :nickname, :phone, :birthdate, :school, :province, :level, :purpose, :avatarId)\n \t";
$bind = array('email' => $email, 'role' => 'student', 'hash' => $hash, 'serial' => $serial, 'firstname' => $firstname, 'lastname' => $lastname, 'nickname' => $nickname, 'phone' => $phone, 'birthdate' => $birthdate, 'school' => $school, 'province' => $province, 'level' => $level, 'purpose' => $purpose, 'avatarId' => $avatarId);
$count = \Db::execute($statement, $bind);
$userId = \Db::getLastInsertId();
\TTOMail::createAndSendAdmin('A new user registered', json_encode($bind));
\TTOMail::createAndSend(ADMINEMAIL, \TTO::getEmail(), 'You have registered to Too Tutor Online', 'Your serial number : ' + $serial);
$response = new \stdClass();
$response->count = $count;
$response->userId = $last_insert_id;
return $response;
}
/**
* @url PUT {orderId}
*/
protected function postApproveOrder($orderId)
{
if (\TTO::getRole() == 'admin') {
$statement = 'UPDATE `order` SET status = :status WHERE orderId = :orderId';
$bind = array('orderId' => $orderId, 'status' => 'approve');
$count = \Db::execute($statement, $bind);
\TTOMail::createAndSendAdmin('Admin approved an order', json_encode($bind));
\TTOMail::createAndSend(ADMINEMAIL, \TTO::getUserEmail($userId), 'Admin have approved your order', 'Please check on the system');
if ($count > 0) {
$statement = 'SELECT coin + bonus FROM `order` WHERE orderId = :orderId';
$bind = array('orderId' => $orderId);
$coin = \Db::getValue($statement, $bind);
$statement = 'UPDATE user SET coin = coin + :coin WHERE userId = :userId';
$bind = array('userId' => $userId, 'coin' => $coin);
$count = \Db::execute($statement, $bind);
} else {
throw new RestException(500, 'Approve Error !!!');
}
} else {
throw new RestException(401, 'No Authorize or Invalid request !!!');
}
}
