35 lines
1.0 KiB
PHP
35 lines
1.0 KiB
PHP
<?php
|
|
// transit/admin/login_request.php — الخطوة 1: هاتف المشرف → OTP
|
|
// POST: phone
|
|
|
|
require_once __DIR__ . '/../../core/bootstrap.php';
|
|
require_once __DIR__ . '/../functions.php';
|
|
|
|
try { $transit_con = Database::get('transit'); }
|
|
catch (Exception $e) { jsonError('Transit service unavailable', 503); }
|
|
|
|
$rawPhone = filterRequest('phone');
|
|
if (!$rawPhone) jsonError('Phone is required');
|
|
$phone = normalizePhone($rawPhone);
|
|
|
|
if (transitIsOtpLocked($phone)) {
|
|
jsonError('Too many attempts. Try again in 30 minutes.', 429);
|
|
}
|
|
|
|
$phoneEnc = $encryptionHelper->encryptData($phone);
|
|
$st = $transit_con->prepare(
|
|
"SELECT a.id, o.contract_status
|
|
FROM transit_org_admins a
|
|
JOIN transit_orgs o ON o.id = a.org_id
|
|
WHERE a.phone = ? AND a.is_active = 1 LIMIT 1"
|
|
);
|
|
$st->execute([$phoneEnc]);
|
|
$admin = $st->fetch();
|
|
|
|
if (!$admin) jsonError('Invalid credentials', 401);
|
|
if ($admin['contract_status'] === 'terminated') jsonError('Account suspended', 403);
|
|
|
|
transitSendAdminOtp($phone);
|
|
|
|
jsonSuccess(null, 'OTP sent successfully');
|