123 lines
3.9 KiB
PHP
123 lines
3.9 KiB
PHP
<?php
|
|
|
|
require_once __DIR__ . '/../../connect.php';
|
|
|
|
global $blindIndex;
|
|
|
|
$email = filterRequest('email');
|
|
$phone = filterRequest('phone');
|
|
$password = filterRequest('password');
|
|
|
|
if (empty($phone) && empty($email)) {
|
|
jsonError("Phone or email is required.");
|
|
exit;
|
|
}
|
|
|
|
$conditions = [];
|
|
$params = [];
|
|
|
|
if (!empty($phone)) {
|
|
$phoneEnc = $encryptionHelper->encryptData($phone);
|
|
$conditions[] = "driver.phone = :phone";
|
|
$params[':phone'] = $phoneEnc;
|
|
|
|
$phoneBidx = $blindIndex ? $blindIndex->index('driver.phone', $phone) : null;
|
|
if ($phoneBidx) {
|
|
$conditions[] = "driver.phone_bidx = :phone_bidx";
|
|
$params[':phone_bidx'] = $phoneBidx;
|
|
}
|
|
}
|
|
|
|
if (!empty($email)) {
|
|
$emailEnc = $encryptionHelper->encryptData($email);
|
|
$conditions[] = "driver.email = :email";
|
|
$params[':email'] = $emailEnc;
|
|
|
|
$emailBidx = $blindIndex ? $blindIndex->index('driver.email', $email) : null;
|
|
if ($emailBidx) {
|
|
$conditions[] = "driver.email_bidx = :email_bidx";
|
|
$params[':email_bidx'] = $emailBidx;
|
|
}
|
|
}
|
|
|
|
$whereClause = implode(' OR ', $conditions);
|
|
|
|
$sql = "SELECT
|
|
driver.id,
|
|
driver.phone,
|
|
driver.email,
|
|
driver.password,
|
|
driver.gender,
|
|
driver.birthdate,
|
|
driver.site,
|
|
driver.first_name,
|
|
driver.last_name,
|
|
driver.education,
|
|
driver.employmentType,
|
|
driver.maritalStatus,
|
|
driver.created_at,
|
|
driver.updated_at,
|
|
driver.email AS _email_enc
|
|
FROM
|
|
driver
|
|
WHERE
|
|
$whereClause";
|
|
|
|
|
|
/**
|
|
* حالة توثيق البريد.
|
|
*
|
|
* كان الاستعلام يربط email_verifications.email بعمود البريد في الحساب، لكن
|
|
* الأول يُخزَّن نصاً صريحاً والثاني مشفّراً — فالربط لم يكن يطابق شيئاً أصلاً
|
|
* وكانت verified تعود NULL دائماً. نجلبها هنا بالبريد الأصلي.
|
|
*/
|
|
function fetchEmailVerified(PDO $con, ?string $plainEmail): ?int
|
|
{
|
|
if (!$plainEmail) return null;
|
|
try {
|
|
$st = $con->prepare("SELECT verified FROM email_verifications WHERE email = ? LIMIT 1");
|
|
$st->execute([$plainEmail]);
|
|
$v = $st->fetchColumn();
|
|
return $v === false ? null : (int) $v;
|
|
} catch (PDOException $e) {
|
|
error_log('[email_verifications] ' . $e->getMessage());
|
|
return null;
|
|
}
|
|
}
|
|
|
|
$stmt = $con->prepare($sql);
|
|
$stmt->execute($params);
|
|
$data = $stmt->fetchAll(PDO::FETCH_ASSOC);
|
|
$count = count($data);
|
|
|
|
if ($count > 0) {
|
|
$plainEmail = $encryptionHelper->decryptData($data[0]['_email_enc'] ?? null) ?: null;
|
|
$data[0]['verified'] = fetchEmailVerified($con, $plainEmail);
|
|
unset($data[0]['_email_enc']);
|
|
}
|
|
|
|
if ($count > 0) {
|
|
$stored_password = $data[0]['password'];
|
|
if (password_verify($password, $stored_password)) {
|
|
|
|
// فك التشفير للحقول الحساسة
|
|
$data[0]['phone'] = $encryptionHelper->decryptData($data[0]['phone']);
|
|
$data[0]['email'] = $encryptionHelper->decryptData($data[0]['email']);
|
|
$data[0]['gender'] = $encryptionHelper->decryptData($data[0]['gender']);
|
|
$data[0]['birthdate'] = $encryptionHelper->decryptData($data[0]['birthdate']);
|
|
$data[0]['site'] = $encryptionHelper->decryptData($data[0]['site']);
|
|
$data[0]['first_name'] = $encryptionHelper->decryptData($data[0]['first_name']);
|
|
$data[0]['last_name'] = $encryptionHelper->decryptData($data[0]['last_name']);
|
|
$data[0]['education'] = $encryptionHelper->decryptData($data[0]['education']);
|
|
$data[0]['employmentType'] = $encryptionHelper->decryptData($data[0]['employmentType']);
|
|
$data[0]['maritalStatus'] = $encryptionHelper->decryptData($data[0]['maritalStatus']);
|
|
|
|
unset($data[0]['password']); // لا نرجّع الباسورد
|
|
jsonSuccess($data);
|
|
} else {
|
|
jsonError("Incorrect password.");
|
|
}
|
|
} else {
|
|
jsonError("User does not exist.");
|
|
}
|
|
?>
|