30 lines
795 B
PHP
30 lines
795 B
PHP
<?php
|
|
include "../../connect.php";
|
|
$driver_id = filterRequest("driver_id");
|
|
|
|
$sql = "SELECT
|
|
COUNT(id) AS count
|
|
FROM
|
|
`rideDB`.`ride`
|
|
WHERE
|
|
LOWER(`ride`.`status`) IN ('finished','completed')
|
|
AND driver_id = :driver_id
|
|
AND created_at >= CURDATE();
|
|
";
|
|
// كان المعرّف يُدمج في نص الاستعلام مباشرةً — حقن SQL.
|
|
try {
|
|
$stmt = $con->prepare($sql);
|
|
$stmt->bindValue(':driver_id', $driver_id);
|
|
$stmt->execute();
|
|
|
|
if ($stmt->rowCount() > 0) {
|
|
$row = $stmt->fetchAll(PDO::FETCH_ASSOC);
|
|
printSuccess($row);
|
|
} else {
|
|
printFailure("No wallet record found");
|
|
}
|
|
} catch (PDOException $e) {
|
|
http_response_code(500);
|
|
echo json_encode(["status" => "error", "message" => "SQL Error: " . $e->getMessage()]);
|
|
}
|
|
?>
|