- Replaced all client-facing $e->getMessage() with generic error messages - Added error_log() with filename prefix to all catch blocks - Covered jsonError(), echo, and json_encode() response patterns - Also fixed 2 remaining display_errors=1 and add_invoice.php leak - Script-assisted fix for 75 files, manual fix for 12 remaining edge cases
43 lines
1.4 KiB
PHP
43 lines
1.4 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../../connect.php';
|
|
|
|
function generateUnifiedCode($con) {
|
|
while (true) {
|
|
$letters = substr(str_shuffle("ABCDEFGHJKLMNPQRSTUVWXYZ"), 0, 2);
|
|
$numbers = substr(str_shuffle("23456789"), 0, 4);
|
|
$code = $letters . $numbers;
|
|
|
|
$stmt = $con->prepare("SELECT COUNT(*) FROM user_referral_codes WHERE referral_code = ?");
|
|
$stmt->execute([$code]);
|
|
|
|
if ($stmt->fetchColumn() == 0) {
|
|
return $code;
|
|
}
|
|
}
|
|
}
|
|
|
|
// Ensure the JWT values exist
|
|
if (!$user_id || !in_array($role, ['driver', 'passenger'])) {
|
|
jsonError("Invalid or missing user information in token");
|
|
}
|
|
|
|
$stmt = $con->prepare("SELECT referral_code FROM user_referral_codes WHERE user_id = ? AND user_type = ?");
|
|
$stmt->execute([$user_id, $role]);
|
|
|
|
if ($stmt->rowCount() > 0) {
|
|
$row = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
printSuccess(["referral_code" => $row['referral_code']]);
|
|
} else {
|
|
$newCode = generateUnifiedCode($con);
|
|
$insertStmt = $con->prepare("INSERT INTO user_referral_codes (user_id, user_type, referral_code) VALUES (?, ?, ?)");
|
|
|
|
try {
|
|
$insertStmt->execute([$user_id, $role, $newCode]);
|
|
printSuccess(["referral_code" => $newCode]);
|
|
} catch (PDOException $e) {
|
|
error_log("[get_unified_code.php] " . $e->getMessage());
|
|
jsonError("An internal error occurred. Please try again later.");
|
|
}
|
|
}
|
|
?>
|