add new features like realtime 2026-05-29-22

auth/syria/sendWhatsOpt.php

@@ -45,12 +45,50 @@ if (is_blacklisted($con, $encryptionHelper, $receiver)) {
     exit();
 }
 
-/* 1) Generate OTP */
-$otp = rand(10000, 99999);
-$messageBody = "Your verification code for Intaleq is: " . $otp;
+/* 1) Generate OTP (3 digits) */
+$otp = (string)rand(100, 999);
 
-/* 🟢 2) Skip sending and log instead */
-error_log("[send_otp] Skipping actual send. OTP generated for $receiver: $otp");
+/* 2) Send via Flash Call / WhatsApp Gateway */
+$nabehUrl = 'https://otp.intaleqapp.com/api/request-otp.php';
+$appKey = getenv('NABEH_OTP_APP_KEY');
+
+$payload = [
+    'phone' => $receiver,
+    'device_type' => 'android',
+    'method' => 'whatsapp',
+    'code' => $otp
+];
+
+$ch = curl_init($nabehUrl);
+curl_setopt_array($ch, [
+    CURLOPT_POST => true,
+    CURLOPT_RETURNTRANSFER => true,
+    CURLOPT_POSTFIELDS => json_encode($payload),
+    CURLOPT_HTTPHEADER => [
+        'Content-Type: application/json',
+        "X-App-Key: $appKey"
+    ],
+    CURLOPT_TIMEOUT => 15,
+    CURLOPT_CONNECTTIMEOUT => 5
+]);
+
+$res = curl_exec($ch);
+$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+$error = curl_error($ch);
+curl_close($ch);
+
+if ($error) {
+    error_log("⚠️ [Flash Call OTP Passenger] Curl Error: $error");
+    jsonError('Failed to connect to OTP service');
+    exit;
+}
+
+$decoded = json_decode((string)$res, true);
+if ($httpCode !== 200 || !($decoded['success'] ?? false)) {
+    error_log("❌ [Flash Call OTP Passenger] Failed response: Code $httpCode | Body: " . (string)$res);
+    jsonError($decoded['message'] ?? 'Failed to request verification code');
+    exit;
+}
 
 /* 3) Save OTP (encrypted) */
 $receiver_enc = $encryptionHelper->encryptData($receiver);
@@ -70,128 +108,10 @@ try {
     ");
     $stmt->execute([$receiver_enc, $otp_enc, $exp, $now]);
 
-    jsonSuccess(null, 'OTP generated and saved successfully (no message sent)');
+    jsonSuccess(null, 'OTP sent and saved successfully');
     error_log("[send_otp] OTP saved successfully for $receiver");
 
 } catch (PDOException $e) {
     error_log("[send_otp] DB error: ".$e->getMessage());
     jsonError('OTP generated but failed to save to database');
 }
-
-/*
-require_once __DIR__ . '/../../connect.php';
-
-error_log("--- [send_otp.php] Started ---");
-
-
-function normalize_phone($s) { return preg_replace('/\D+/', '', (string)$s); }
-
-
-function is_blacklisted(PDO $con, $encryptionHelper, string $phone): bool {
-    $raw   = trim($phone);
-    $norm  = normalize_phone($raw);
-
-    // شَفِّر قبل السؤال
-    $enc_raw  = $encryptionHelper->encryptData($raw);
-    $enc_norm = $encryptionHelper->encryptData($norm);
-
-    $sql = "SELECT 1
-              FROM passenger_blacklist
-             WHERE phone IN (:enc_raw, :enc_norm)
-               AND (expires_at IS NULL OR expires_at > NOW())
-             LIMIT 1";
-
-    $q = $con->prepare($sql);
-    $q->execute([
-        'enc_raw'  => $enc_raw,
-        'enc_norm' => $enc_norm,
-    ]);
-
-    return (bool)$q->fetchColumn();
-}
-
-$receiver = filterRequest("receiver");
-if (!$receiver) { jsonError('Phone number is required.'); exit(); }
-
-if (is_blacklisted($con, $encryptionHelper, $receiver)) {
-    jsonError('This phone is blacklisted and cannot receive OTP.');
-    error_log("[send_otp] BLOCKED (blacklisted): $receiver");
-    exit();
-}
-
-$otp = rand(10000, 99999);
-$messageBody = "Your verification code for Intaleq is: " . $otp;
-
-function normalize($raw) {
-    if (is_string($raw)) return json_decode($raw, true) ?: [];
-    if ($raw instanceof stdClass) return (array)$raw;
-    return is_array($raw) ? $raw : [];
-}
-
-$response = normalize(sendWhatsAppFromServer($receiver, $messageBody));
-$sentOK   = $response['success'] ?? false;
-
-if (!$sentOK) {
-    error_log("[send_otp] WA-Server failed ⇒ ".(($response['message'] ?? null) ?: json_encode($response)));
-
-    $payload = [
-        "number"       => $receiver,
-        "type"         => "text",
-        "message"      => $messageBody,
-        "instance_id"  => getenv("RASEEL_DRIVER_INSTANCE_ID"),
-        "access_token" => getenv("RASEEL_DRIVER_ACCESS_TOKEN")
-    ];
-    $response = callAPI("POST", "https://raseelplus.com/api/send", json_encode($payload));
-    $response = normalize($response);
-
-    $sentOK   = ($response['status'] ?? '') === 'success';
-    if (!$sentOK) {
-        error_log("[send_otp] RaseelPlus failed ⇒ ".json_encode($response));
-        jsonError('Failed to send OTP: '.($response['message'] ?? 'Unknown error'));
-        exit();
-    }
-}
-
-$receiver_enc = $encryptionHelper->encryptData($receiver);          // الهاتف المُرسل (خام) مُشفّر
-$otp_enc      = $encryptionHelper->encryptData($otp);
-
-$exp = date('Y-m-d H:i:s', strtotime('+5 minutes'));
-$now = date('Y-m-d H:i:s');
-
-try {
-    $con->prepare("DELETE FROM phone_verification_passenger WHERE phone_number = ?")
-        ->execute([$receiver_enc]);
-
-    $stmt = $con->prepare("
-        INSERT INTO phone_verification_passenger
-            (phone_number, token, expiration_time, verified, created_at)
-        VALUES (?, ?, ?, 0, ?)
-    ");
-    $stmt->execute([$receiver_enc, $otp_enc, $exp, $now]);
-
-    jsonSuccess(null, 'OTP sent and saved successfully');
-    error_log("[send_otp] OTP saved for $receiver");
-
-} catch (PDOException $e) {
-    error_log("[send_otp] DB error: ".$e->getMessage());
-    jsonError('OTP sent but failed to save to database');
-}
-
-function callAPI($method, $url, $data) {
-    $ch = curl_init();
-    curl_setopt_array($ch, [
-        CURLOPT_URL            => $url,
-        CURLOPT_RETURNTRANSFER => true,
-        CURLOPT_CUSTOMREQUEST  => $method,
-        CURLOPT_POSTFIELDS     => $data,
-        CURLOPT_HTTPHEADER     => [
-            "Content-Type: application/json",
-            "Accept: application/json"
-        ],
-    ]);
-    $body = curl_exec($ch);
-    $err  = curl_error($ch);
-    curl_close($ch);
-    return $err ? [] : json_decode($body, true);
-}
-*/