add new features like realtime 2026-05-29-22

auth/syria/driver/verifyOtp.php

@@ -2,15 +2,45 @@
 require_once __DIR__ . '/../../../connect.php';
 
 $phoneNumber = filterRequest("phone_number");
+$otp = filterRequest("otp");
 $email = $phoneNumber . '@intaleqapp.com';
 
-error_log("📥 [verifyOtp.php] Received phone number: $phoneNumber");
+error_log("📥 [verifyOtp.php] Received phone number: $phoneNumber | OTP: $otp");
+
+if (empty($phoneNumber) || empty($otp)) {
+    jsonError("Phone number and OTP are required.");
+    exit();
+}
 
 // 🔐 تشفير البيانات
 $phoneNumber_encrypted = $encryptionHelper->encryptData($phoneNumber);
 $email_encrypted       = $encryptionHelper->encryptData($email);
 
 try {
+    // 🔍 1. التحقق من السجل المخزن في قاعدة البيانات
+    $stmtSelect = $con->prepare("SELECT * FROM phone_verification WHERE phone_number = ? ORDER BY created_at DESC LIMIT 1");
+    $stmtSelect->execute([$phoneNumber_encrypted]);
+    $record = $stmtSelect->fetch(PDO::FETCH_ASSOC);
+
+    if (!$record) {
+        jsonError("Verification session not found. Please request a new code.");
+        exit();
+    }
+
+    // 🔍 2. فك تشفير ومقارنة الرمز
+    $decryptedOtp = $encryptionHelper->decryptData($record['token_code']);
+    if ($decryptedOtp !== $otp) {
+        jsonError("Invalid verification code.");
+        exit();
+    }
+
+    // 🔍 3. التحقق من الصلاحية
+    $now = date('Y-m-d H:i:s');
+    if ($record['expiration_time'] && $record['expiration_time'] < $now) {
+        jsonError("Verification code has expired. Please request a new one.");
+        exit();
+    }
+
     // 🧹 حذف أي رموز قديمة لنفس الرقم
     $con->prepare("DELETE FROM phone_verification WHERE phone_number = ?")
         ->execute([$phoneNumber_encrypted]);
@@ -22,9 +52,6 @@ try {
     // 🔐 توليد رمز تجريبي (بدون OTP حقيقي لتجنب Null)
     $dummyToken = $encryptionHelper->encryptData('AUTO');
 
-    // 🕒 الوقت الحالي
-    $now = date('Y-m-d H:i:s');
-
     // ✅ إدخال سجل تحقق مباشر
     $stmt = $con->prepare("
         INSERT INTO phone_verification 
@@ -33,7 +60,7 @@ try {
     ");
     $stmt->execute([$phoneNumber_encrypted, $dummyToken, $email_encrypted, $driverID, $now]);
 
-    error_log("✅ [verifyOtp.php] Auto verification record inserted successfully for $phoneNumber");
+    error_log("✅ [verifyOtp.php] Verification record inserted successfully for $phoneNumber");
 
     // 🔍 التحقق إذا السائق موجود مسبقاً
     $checkDriverStmt = $con->prepare("SELECT * FROM driver WHERE phone = ?");
@@ -54,9 +81,9 @@ try {
             ]
         ]);
     } else {
-        error_log("🆕 [verifyOtp.php] Phone verified automatically. Driver not found.");
+        error_log("🆕 [verifyOtp.php] Phone verified. Driver not found.");
         printSuccess([
-            "message" => "Phone number verified automatically (no OTP required).",
+            "message" => "Phone number verified successfully.",
             "isRegistered" => false,
             "driverID" => $driverID
         ]);