Hamza-AyedandClaude Opus 5
c9b4d14da6
These are the paths that must stop depending on deterministic encryption before storage can move to AES-GCM. Each keeps its original ciphertext comparison in the same statement, so behaviour is unchanged today and no account becomes unreachable during the transition. Lookups: - auth/login.php — passenger sign-in matched the raw value against the encrypted column, which only works because encryptData() is CBC with a fixed IV. - auth/passenger/register.php and auth/driver/register.php — duplicate detection. Without the index these would stop detecting existing accounts under GCM and allow the same phone to register twice. Writes now populate the index in the same statement as the value: - both registration paths write phone/email/name indexes with the row; driver indexes are computed before the encryption pass, since the raw values are unavailable afterwards. - passenger profile update and admin driver update refresh the index when the underlying field changes. For the composite name index the untouched half is read back from the row. Adds --audit to the backfill script: recomputes every index from its encrypted value and reports missing or stale entries. Drift here is silent by nature — it surfaces only when a real search fails. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
93 lines
3.6 KiB
PHP
93 lines
3.6 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../../connect.php';
|
|
|
|
// 🔥 [Fix Broken Access Control] كان يتحقق من صلاحية التوكن فقط — أي مستخدم
|
|
// مسجّل دخول كان يقدر يغيّر حالة أي سائق (تفعيل/رفض) أو رقم هاتفه.
|
|
if ($role !== 'admin' && $role !== 'super_admin') {
|
|
http_response_code(403);
|
|
echo json_encode(['error' => 'Unauthorized access. Admin role required.']);
|
|
exit;
|
|
}
|
|
|
|
$driver_id = filterRequest("id");
|
|
$phone = filterRequest("phone");
|
|
$status = filterRequest("status");
|
|
|
|
if (empty($driver_id)) {
|
|
jsonError("Driver ID is required.");
|
|
}
|
|
|
|
$updateFields = [];
|
|
$params = [':id' => $driver_id];
|
|
|
|
if ($phone !== null && $phone !== '') {
|
|
$encphone = $encryptionHelper->encryptData($phone);
|
|
$updateFields[] = "`phone` = :phone";
|
|
$params[':phone'] = $encphone;
|
|
|
|
// الفهرس يُحدَّث مع الرقم نفسه حتى لا يشير إلى القيمة القديمة
|
|
global $blindIndex;
|
|
if ($blindIndex) {
|
|
$updateFields[] = "`phone_bidx` = :phone_bidx";
|
|
$params[':phone_bidx'] = $blindIndex->index('driver.phone', $phone);
|
|
}
|
|
}
|
|
|
|
if ($status !== null && $status !== '') {
|
|
$updateFields[] = "`status` = :status";
|
|
$params[':status'] = $status;
|
|
}
|
|
|
|
if (empty($updateFields)) {
|
|
jsonError("No parameters provided for update.");
|
|
}
|
|
|
|
$sql = "UPDATE `driver` SET " . implode(", ", $updateFields) . " WHERE `id` = :id";
|
|
$stmt = $con->prepare($sql);
|
|
|
|
try {
|
|
$stmt->execute($params);
|
|
|
|
if ($stmt->rowCount() > 0) {
|
|
logAudit($con, $user_id, "تعديل بيانات سائق من لوحة التحكم", "driver", $driver_id, [
|
|
"phone" => $phone,
|
|
"status" => $status
|
|
]);
|
|
|
|
// إذا تم تفعيل السائق، نرسل له رسالة ترحيبية عبر الواتساب لتأكيد التفعيل
|
|
if ($status === 'active' || $status === 'actives') {
|
|
// جلب معلومات السائق لإرسال الرسالة
|
|
$selectSql = "SELECT `phone`, `first_name` FROM `driver` WHERE `id` = :id";
|
|
$selectStmt = $con->prepare($selectSql);
|
|
$selectStmt->execute([':id' => $driver_id]);
|
|
$driverData = $selectStmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if ($driverData) {
|
|
$decryptedPhone = $encryptionHelper->decryptData($driverData['phone']);
|
|
$firstName = $encryptionHelper->decryptData($driverData['first_name']);
|
|
|
|
$supportPhones = ['0952475740', '0952475742'];
|
|
$randomIndex = array_rand($supportPhones);
|
|
$phoneToUse = $supportPhones[$randomIndex];
|
|
$randomNumber = rand(1000, 999999);
|
|
|
|
$messageBody = "أهلاً وسهلاً كابتن $firstName 👋\n"
|
|
. "تم تفعيل حسابك على تطبيق *سيرو*.\n"
|
|
. "يمكنك الآن تسجيل الدخول والبدء بالعمل مباشرة.\n"
|
|
. "للمساعدة تواصل معنا على الرقم: $phoneToUse\n"
|
|
. "نتمنى لك عمل موفق 🚖\n\n"
|
|
. "معرف الرسالة: $randomNumber";
|
|
|
|
sendWhatsAppFromServer($decryptedPhone, $messageBody);
|
|
}
|
|
}
|
|
|
|
jsonSuccess(null, "Driver updated successfully.");
|
|
} else {
|
|
jsonError("No records updated or driver not found.");
|
|
}
|
|
} catch (PDOException $e) {
|
|
error_log("[updateDriverFromAdmin.php] " . $e->getMessage());
|
|
jsonError("An internal error occurred. Please try again later.");
|
|
}
|
|
?>
|