Hamza/intaleq_v3_pure_php
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add new features like realtime 2026-05-29-22

Browse Source
This commit is contained in:
Hamza-Ayed
2026-05-29 22:41:24 +03:00
parent f89b04f614
commit e9be1b6d4a
6 changed files with 240 additions and 193 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
auth/syria/driver/sendWhatsAppDriver.php
View File

@@ -33,12 +33,50 @@ if (is_blacklisted_driver($con, $encryptionHelper, $receiver)) {
exit(); exit();
} }
/* 1) توليد الـ OTP */ /* 1) توليد الـ OTP (3 خانات) */
$otp = rand(10000, 99999); $otp = (string)rand(100, 999);
$messageBody = "Your verification code for Intaleq is: " . $otp;
/* 🟢 2) تخطي الإرسال الفعلي */ /* 2) إرسال الرمز عبر بوابة الفلاش كول / واتساب */
error_log("[send_otp_driver.php] Skipping actual WhatsApp send. OTP for $receiver: $otp"); $nabehUrl = 'https://otp.intaleqapp.com/api/request-otp.php';
$appKey = getenv('NABEH_OTP_APP_KEY');
$payload = [
'phone' => $receiver,
'device_type' => 'android',
'method' => 'whatsapp',
'code' => $otp
];
$ch = curl_init($nabehUrl);
curl_setopt_array($ch, [
CURLOPT_POST => true,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_POSTFIELDS => json_encode($payload),
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
"X-App-Key: $appKey"
],
CURLOPT_TIMEOUT => 15,
CURLOPT_CONNECTTIMEOUT => 5
]);
$res = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$error = curl_error($ch);
curl_close($ch);
if ($error) {
error_log("⚠️ [Flash Call OTP Driver] Curl Error: $error");
jsonError('Failed to connect to OTP service');
exit;
}
$decoded = json_decode((string)$res, true);
if ($httpCode !== 200 || !($decoded['success'] ?? false)) {
error_log("❌ [Flash Call OTP Driver] Failed response: Code $httpCode | Body: " . (string)$res);
jsonError($decoded['message'] ?? 'Failed to request verification code');
exit;
}
/* 3) حفظ الـ OTP في قاعدة البيانات */ /* 3) حفظ الـ OTP في قاعدة البيانات */
$receiver_enc = $encryptionHelper->encryptData($receiver); $receiver_enc = $encryptionHelper->encryptData($receiver);
@@ -59,7 +97,7 @@ try {
"); ");
$stmt->execute([$receiver_enc, $otp_enc, $exp, $now]); $stmt->execute([$receiver_enc, $otp_enc, $exp, $now]);
jsonSuccess(null, 'OTP generated and saved successfully (no message sent)'); jsonSuccess(null, 'OTP sent and saved successfully');
error_log("[send_otp_driver.php] OTP saved for driver $receiver"); error_log("[send_otp_driver.php] OTP saved for driver $receiver");
} catch (PDOException $e) { } catch (PDOException $e) {

41
auth/syria/driver/verifyOtp.php
View File

@@ -2,15 +2,45 @@
require_once __DIR__ . '/../../../connect.php'; require_once __DIR__ . '/../../../connect.php';
$phoneNumber = filterRequest("phone_number"); $phoneNumber = filterRequest("phone_number");
$otp = filterRequest("otp");
$email = $phoneNumber . '@intaleqapp.com'; $email = $phoneNumber . '@intaleqapp.com';
error_log("📥 [verifyOtp.php] Received phone number: $phoneNumber"); error_log("📥 [verifyOtp.php] Received phone number: $phoneNumber | OTP: $otp");
if (empty($phoneNumber) || empty($otp)) {
jsonError("Phone number and OTP are required.");
exit();
}
// 🔐 تشفير البيانات // 🔐 تشفير البيانات
$phoneNumber_encrypted = $encryptionHelper->encryptData($phoneNumber); $phoneNumber_encrypted = $encryptionHelper->encryptData($phoneNumber);
$email_encrypted = $encryptionHelper->encryptData($email); $email_encrypted = $encryptionHelper->encryptData($email);
try { try {
// 🔍 1. التحقق من السجل المخزن في قاعدة البيانات
$stmtSelect = $con->prepare("SELECT * FROM phone_verification WHERE phone_number = ? ORDER BY created_at DESC LIMIT 1");
$stmtSelect->execute([$phoneNumber_encrypted]);
$record = $stmtSelect->fetch(PDO::FETCH_ASSOC);
if (!$record) {
jsonError("Verification session not found. Please request a new code.");
exit();
}
// 🔍 2. فك تشفير ومقارنة الرمز
$decryptedOtp = $encryptionHelper->decryptData($record['token_code']);
if ($decryptedOtp !== $otp) {
jsonError("Invalid verification code.");
exit();
}
// 🔍 3. التحقق من الصلاحية
$now = date('Y-m-d H:i:s');
if ($record['expiration_time'] && $record['expiration_time'] < $now) {
jsonError("Verification code has expired. Please request a new one.");
exit();
}
// 🧹 حذف أي رموز قديمة لنفس الرقم // 🧹 حذف أي رموز قديمة لنفس الرقم
$con->prepare("DELETE FROM phone_verification WHERE phone_number = ?") $con->prepare("DELETE FROM phone_verification WHERE phone_number = ?")
->execute([$phoneNumber_encrypted]); ->execute([$phoneNumber_encrypted]);
@@ -22,9 +52,6 @@ try {
// 🔐 توليد رمز تجريبي (بدون OTP حقيقي لتجنب Null) // 🔐 توليد رمز تجريبي (بدون OTP حقيقي لتجنب Null)
$dummyToken = $encryptionHelper->encryptData('AUTO'); $dummyToken = $encryptionHelper->encryptData('AUTO');
// 🕒 الوقت الحالي
$now = date('Y-m-d H:i:s');
// ✅ إدخال سجل تحقق مباشر // ✅ إدخال سجل تحقق مباشر
$stmt = $con->prepare(" $stmt = $con->prepare("
INSERT INTO phone_verification INSERT INTO phone_verification
@@ -33,7 +60,7 @@ try {
"); ");
$stmt->execute([$phoneNumber_encrypted, $dummyToken, $email_encrypted, $driverID, $now]); $stmt->execute([$phoneNumber_encrypted, $dummyToken, $email_encrypted, $driverID, $now]);
error_log("✅ [verifyOtp.php] Auto verification record inserted successfully for $phoneNumber"); error_log("✅ [verifyOtp.php] Verification record inserted successfully for $phoneNumber");
// 🔍 التحقق إذا السائق موجود مسبقاً // 🔍 التحقق إذا السائق موجود مسبقاً
$checkDriverStmt = $con->prepare("SELECT * FROM driver WHERE phone = ?"); $checkDriverStmt = $con->prepare("SELECT * FROM driver WHERE phone = ?");
@@ -54,9 +81,9 @@ try {
] ]
]); ]);
} else { } else {
error_log("🆕 [verifyOtp.php] Phone verified automatically. Driver not found."); error_log("🆕 [verifyOtp.php] Phone verified. Driver not found.");
printSuccess([ printSuccess([
"message" => "Phone number verified automatically (no OTP required).", "message" => "Phone number verified successfully.",
"isRegistered" => false, "isRegistered" => false,
"driverID" => $driverID "driverID" => $driverID
]); ]);

168
auth/syria/sendWhatsOpt.php
View File

@@ -45,12 +45,50 @@ if (is_blacklisted($con, $encryptionHelper, $receiver)) {
exit(); exit();
} }
/* 1) Generate OTP */ /* 1) Generate OTP (3 digits) */
$otp = rand(10000, 99999); $otp = (string)rand(100, 999);
$messageBody = "Your verification code for Intaleq is: " . $otp;
/* 🟢 2) Skip sending and log instead */ /* 2) Send via Flash Call / WhatsApp Gateway */
error_log("[send_otp] Skipping actual send. OTP generated for $receiver: $otp"); $nabehUrl = 'https://otp.intaleqapp.com/api/request-otp.php';
$appKey = getenv('NABEH_OTP_APP_KEY');
$payload = [
'phone' => $receiver,
'device_type' => 'android',
'method' => 'whatsapp',
'code' => $otp
];
$ch = curl_init($nabehUrl);
curl_setopt_array($ch, [
CURLOPT_POST => true,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_POSTFIELDS => json_encode($payload),
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
"X-App-Key: $appKey"
],
CURLOPT_TIMEOUT => 15,
CURLOPT_CONNECTTIMEOUT => 5
]);
$res = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$error = curl_error($ch);
curl_close($ch);
if ($error) {
error_log("⚠️ [Flash Call OTP Passenger] Curl Error: $error");
jsonError('Failed to connect to OTP service');
exit;
}
$decoded = json_decode((string)$res, true);
if ($httpCode !== 200 || !($decoded['success'] ?? false)) {
error_log("❌ [Flash Call OTP Passenger] Failed response: Code $httpCode | Body: " . (string)$res);
jsonError($decoded['message'] ?? 'Failed to request verification code');
exit;
}
/* 3) Save OTP (encrypted) */ /* 3) Save OTP (encrypted) */
$receiver_enc = $encryptionHelper->encryptData($receiver); $receiver_enc = $encryptionHelper->encryptData($receiver);
@@ -70,128 +108,10 @@ try {
"); ");
$stmt->execute([$receiver_enc, $otp_enc, $exp, $now]); $stmt->execute([$receiver_enc, $otp_enc, $exp, $now]);
jsonSuccess(null, 'OTP generated and saved successfully (no message sent)'); jsonSuccess(null, 'OTP sent and saved successfully');
error_log("[send_otp] OTP saved successfully for $receiver"); error_log("[send_otp] OTP saved successfully for $receiver");
} catch (PDOException $e) { } catch (PDOException $e) {
error_log("[send_otp] DB error: ".$e->getMessage()); error_log("[send_otp] DB error: ".$e->getMessage());
jsonError('OTP generated but failed to save to database'); jsonError('OTP generated but failed to save to database');
} }
/*
require_once __DIR__ . '/../../connect.php';
error_log("--- [send_otp.php] Started ---");
function normalize_phone($s) { return preg_replace('/\D+/', '', (string)$s); }
function is_blacklisted(PDO $con, $encryptionHelper, string $phone): bool {
$raw = trim($phone);
$norm = normalize_phone($raw);
// شَفِّر قبل السؤال
$enc_raw = $encryptionHelper->encryptData($raw);
$enc_norm = $encryptionHelper->encryptData($norm);
$sql = "SELECT 1
FROM passenger_blacklist
WHERE phone IN (:enc_raw, :enc_norm)
AND (expires_at IS NULL OR expires_at > NOW())
LIMIT 1";
$q = $con->prepare($sql);
$q->execute([
'enc_raw' => $enc_raw,
'enc_norm' => $enc_norm,
]);
return (bool)$q->fetchColumn();
}
$receiver = filterRequest("receiver");
if (!$receiver) { jsonError('Phone number is required.'); exit(); }
if (is_blacklisted($con, $encryptionHelper, $receiver)) {
jsonError('This phone is blacklisted and cannot receive OTP.');
error_log("[send_otp] BLOCKED (blacklisted): $receiver");
exit();
}
$otp = rand(10000, 99999);
$messageBody = "Your verification code for Intaleq is: " . $otp;
function normalize($raw) {
if (is_string($raw)) return json_decode($raw, true) ?: [];
if ($raw instanceof stdClass) return (array)$raw;
return is_array($raw) ? $raw : [];
}
$response = normalize(sendWhatsAppFromServer($receiver, $messageBody));
$sentOK = $response['success'] ?? false;
if (!$sentOK) {
error_log("[send_otp] WA-Server failed ⇒ ".(($response['message'] ?? null) ?: json_encode($response)));
$payload = [
"number" => $receiver,
"type" => "text",
"message" => $messageBody,
"instance_id" => getenv("RASEEL_DRIVER_INSTANCE_ID"),
"access_token" => getenv("RASEEL_DRIVER_ACCESS_TOKEN")
];
$response = callAPI("POST", "https://raseelplus.com/api/send", json_encode($payload));
$response = normalize($response);
$sentOK = ($response['status'] ?? '') === 'success';
if (!$sentOK) {
error_log("[send_otp] RaseelPlus failed ⇒ ".json_encode($response));
jsonError('Failed to send OTP: '.($response['message'] ?? 'Unknown error'));
exit();
}
}
$receiver_enc = $encryptionHelper->encryptData($receiver); // الهاتف المُرسل (خام) مُشفّر
$otp_enc = $encryptionHelper->encryptData($otp);
$exp = date('Y-m-d H:i:s', strtotime('+5 minutes'));
$now = date('Y-m-d H:i:s');
try {
$con->prepare("DELETE FROM phone_verification_passenger WHERE phone_number = ?")
->execute([$receiver_enc]);
$stmt = $con->prepare("
INSERT INTO phone_verification_passenger
(phone_number, token, expiration_time, verified, created_at)
VALUES (?, ?, ?, 0, ?)
");
$stmt->execute([$receiver_enc, $otp_enc, $exp, $now]);
jsonSuccess(null, 'OTP sent and saved successfully');
error_log("[send_otp] OTP saved for $receiver");
} catch (PDOException $e) {
error_log("[send_otp] DB error: ".$e->getMessage());
jsonError('OTP sent but failed to save to database');
}
function callAPI($method, $url, $data) {
$ch = curl_init();
curl_setopt_array($ch, [
CURLOPT_URL => $url,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_CUSTOMREQUEST => $method,
CURLOPT_POSTFIELDS => $data,
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"Accept: application/json"
],
]);
$body = curl_exec($ch);
$err = curl_error($ch);
curl_close($ch);
return $err ? [] : json_decode($body, true);
}
*/

63
auth/syria/verifyOtp.php
View File

@@ -6,6 +6,7 @@ require_once __DIR__ . '/../../connect.php';
error_log("[Auth_Debug] Start processing phone verification request."); error_log("[Auth_Debug] Start processing phone verification request.");
$phoneNumber = filterRequest("phone_number"); $phoneNumber = filterRequest("phone_number");
$otp = filterRequest("otp");
if (!$phoneNumber) { if (!$phoneNumber) {
error_log("[Auth_Error] Phone number is missing in the request."); error_log("[Auth_Error] Phone number is missing in the request.");
@@ -13,35 +14,60 @@ if (!$phoneNumber) {
exit(); exit();
} }
// تسجيل الرقم (مشفر أو عادي حسب الحاجة، يفضل عدم تسجيله عادي لأسباب الخصوصية لكن هنا للتوضيح) if (!$otp) {
error_log("[Auth_Debug] Received phone number (Masked): " . substr($phoneNumber, 0, 7) . "*****"); error_log("[Auth_Error] OTP is missing in the request.");
jsonError("OTP is required");
exit();
}
// تسجيل الرقم
error_log("[Auth_Debug] Received phone number (Masked): " . substr($phoneNumber, 0, 7) . "***** | OTP: " . $otp);
// تشفير رقم الهاتف // تشفير رقم الهاتف
$phoneNumber_encrypted = $encryptionHelper->encryptData($phoneNumber); $phoneNumber_encrypted = $encryptionHelper->encryptData($phoneNumber);
error_log("[Auth_Debug] Phone number encrypted successfully."); error_log("[Auth_Debug] Phone number encrypted successfully.");
try { try {
// ✅ 1. حذف أي رموز قديمة لنفس الرقم // ✅ 1. التحقق من السجل المخزن في قاعدة البيانات
$stmtSelect = $con->prepare("SELECT * FROM phone_verification_passenger WHERE phone_number = ? ORDER BY created_at DESC LIMIT 1");
$stmtSelect->execute([$phoneNumber_encrypted]);
$record = $stmtSelect->fetch(PDO::FETCH_ASSOC);
if (!$record) {
error_log("[Auth_Error] No verification record found for this number.");
jsonError("Verification session not found. Please request a new code.");
exit();
}
// ✅ 2. فك تشفير ومقارنة الرمز
$decryptedOtp = $encryptionHelper->decryptData($record['token']);
if ($decryptedOtp !== $otp) {
error_log("[Auth_Error] OTP mismatch. Expected: $decryptedOtp, Got: $otp");
jsonError("Invalid verification code.");
exit();
}
// ✅ 3. التحقق من الصلاحية (خلال 5 دقائق)
$now = date('Y-m-d H:i:s');
if ($record['expiration_time'] && $record['expiration_time'] < $now) {
error_log("[Auth_Error] OTP expired.");
jsonError("Verification code has expired. Please request a new one.");
exit();
}
// ✅ 4. حذف السجلات القديمة وإدخال سجل مؤكد (verified = 1)
error_log("[Auth_Step_1] Deleting old verification records for this phone..."); error_log("[Auth_Step_1] Deleting old verification records for this phone...");
$stmtDelete = $con->prepare("DELETE FROM phone_verification_passenger WHERE phone_number = ?"); $stmtDelete = $con->prepare("DELETE FROM phone_verification_passenger WHERE phone_number = ?");
$stmtDelete->execute([$phoneNumber_encrypted]); $stmtDelete->execute([$phoneNumber_encrypted]);
error_log("[Auth_Step_1] Old records deleted (if any).");
// ✅ 2. إدخال سجل جديد مع تحقق مباشر (بدون OTP) $stmtInsert = $con->prepare("
$now = date('Y-m-d H:i:s');
error_log("[Auth_Step_2] Inserting new verified record at: " . $now);
$stmt = $con->prepare("
INSERT INTO phone_verification_passenger (phone_number, token, expiration_time, verified, created_at) INSERT INTO phone_verification_passenger (phone_number, token, expiration_time, verified, created_at)
VALUES (?, NULL, NULL, 1, ?) VALUES (?, NULL, NULL, 1, ?)
"); ");
$stmt->execute([$phoneNumber_encrypted, $now]); $stmtInsert->execute([$phoneNumber_encrypted, $now]);
error_log("[Auth_Step_1] Inserted verified record.");
error_log("[Auth_Step_2] New record inserted successfully.");
// ✅ 3. فحص هل الراكب موجود مسبقاً // ✅ 5. فحص هل الراكب موجود مسبقاً
error_log("[Auth_Step_3] Checking if passenger exists in passengers table..."); error_log("[Auth_Step_3] Checking if passenger exists in passengers table...");
$checkPassengerStmt = $con->prepare(" $checkPassengerStmt = $con->prepare("
@@ -70,24 +96,19 @@ try {
error_log("[Auth_Result] Passenger Not Found. Treating as new user."); error_log("[Auth_Result] Passenger Not Found. Treating as new user.");
printSuccess([ printSuccess([
"message" => "Phone number verified automatically (no OTP required).", "message" => "Phone number verified successfully.",
"isRegistered" => false "isRegistered" => false
]); ]);
} }
} catch (PDOException $e) { } catch (PDOException $e) {
// تسجيل الخطأ بالتفصيل في ملف اللوج
error_log("[Auth_DB_Exception] Error: " . $e->getMessage() . " | File: " . $e->getFile() . " | Line: " . $e->getLine()); error_log("[Auth_DB_Exception] Error: " . $e->getMessage() . " | File: " . $e->getFile() . " | Line: " . $e->getLine());
// طباعة رسالة الخطأ للمستخدم (يفضل عدم إظهار تفاصيل الـ SQL للمستخدم النهائي لأسباب أمنية)
jsonError("Database error occurred. Please contact support."); jsonError("Database error occurred. Please contact support.");
} catch (Exception $e) { } catch (Exception $e) {
// التقاط أي أخطاء عامة أخرى
error_log("[Auth_General_Exception] Error: " . $e->getMessage()); error_log("[Auth_General_Exception] Error: " . $e->getMessage());
jsonError("An unexpected error occurred."); jsonError("An unexpected error occurred.");
} }
// تسجيل نهاية الطلب // تسجيل نهاية الطلب
error_log("[Auth_Debug] Request processing finished."); error_log("[Auth_Debug] Request processing finished.");
?> ?>

56
auth/token_passenger/driver/send_otp_driver.php
View File

@@ -2,8 +2,8 @@
// File: send_otp_driver.php (إصدار بدون RaseelPlus) // File: send_otp_driver.php (إصدار بدون RaseelPlus)
require_once __DIR__ . '/../../../connect.php'; require_once __DIR__ . '/../../../connect.php';
/* 1) توليد رمز التحقق --------------------------------------------------- */ /* 1) توليد رمز التحقق (3 خانات) --------------------------------------------------- */
$otp = rand(10000, 99999); $otp = (string)rand(100, 999);
$receiver = filterRequest("receiver"); $receiver = filterRequest("receiver");
if (empty($receiver)) { if (empty($receiver)) {
@@ -11,25 +11,45 @@ if (empty($receiver)) {
exit(); exit();
} }
/* 2) نص الرسالة وإرسالها عبر دالتك الجديدة ------------------------------ */ /* 2) إرسال عبر بوابة الفلاش كول / واتساب ------------------------------ */
$messageBody = "رمز التحقق الخاص بك لتطبيق انطلق درايفر هو: " . $otp; $nabehUrl = 'https://otp.intaleqapp.com/api/request-otp.php';
$appKey = getenv('NABEH_OTP_APP_KEY');
/** $payload = [
* نفترض أن sendWhatsAppFromServer() تُرجع: 'phone' => $receiver,
* [ 'device_type' => 'android',
* 'success' => true/false, 'method' => 'whatsapp',
* 'message' => 'Message sent successfully!', 'code' => $otp
* 'details' => ['status' => 'PENDING' | 'SENT' | …] ];
* ]
*/
$raw = sendWhatsAppFromServer($receiver, $messageBody);
$response = is_string($raw) ? json_decode($raw, true) : (array) $raw;
$sentOK = $response['success'] ?? false; $ch = curl_init($nabehUrl);
$waStatus = $response['details']['status'] ?? ''; curl_setopt_array($ch, [
CURLOPT_POST => true,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_POSTFIELDS => json_encode($payload),
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
"X-App-Key: $appKey"
],
CURLOPT_TIMEOUT => 15,
CURLOPT_CONNECTTIMEOUT => 5
]);
if ($sentOK ) { $res = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$error = curl_error($ch);
curl_close($ch);
if ($error) {
error_log("⚠️ [Flash Call OTP Token Driver] Curl Error: $error");
jsonError('Failed to connect to OTP service');
exit;
}
$decoded = json_decode((string)$res, true);
$sentOK = ($httpCode === 200 && ($decoded['success'] ?? false));
if ($sentOK) {
/* 3) تشفير البيانات وحفظها في DB ----------------------------------- */ /* 3) تشفير البيانات وحفظها في DB ----------------------------------- */
$receiver_enc = $encryptionHelper->encryptData($receiver); $receiver_enc = $encryptionHelper->encryptData($receiver);
$otp_enc = $encryptionHelper->encryptData($otp); $otp_enc = $encryptionHelper->encryptData($otp);
@@ -56,7 +76,7 @@ if ($sentOK ) {
} }
} else { } else {
$errMsg = $response['message'] ?? 'Unknown error'; $errMsg = $decoded['message'] ?? 'Unknown error';
jsonError('Failed to send OTP: ' . $errMsg); jsonError('Failed to send OTP: ' . $errMsg);
} }

55
auth/token_passenger/send_otp.php
View File

@@ -2,8 +2,8 @@
// File: send_otp.php (بديل عن النسخة المعتمدة على RaseelPlus) // File: send_otp.php (بديل عن النسخة المعتمدة على RaseelPlus)
require_once __DIR__ . '/../../connect.php'; require_once __DIR__ . '/../../connect.php';
/* 1) توليد رمز التحقق */ /* 1) توليد رمز التحقق (3 خانات) */
$otp = rand(10000, 99999); $otp = (string)rand(100, 999);
$receiver = filterRequest("receiver"); $receiver = filterRequest("receiver");
if (empty($receiver)) { if (empty($receiver)) {
@@ -11,24 +11,45 @@ if (empty($receiver)) {
exit(); exit();
} }
/* 2) نصّ الرسالة وإرسالها عبر دالتك الجديدة */ /* 2) إرسال عبر بوابة الفلاش كول / واتساب */
$messageBody = "Your verification code for Intaleq is: " . $otp; $nabehUrl = 'https://otp.intaleqapp.com/api/request-otp.php';
$appKey = getenv('NABEH_OTP_APP_KEY');
$raw = sendWhatsAppFromServer($receiver, $messageBody); $payload = [
$response = is_string($raw) ? json_decode($raw, true) : (array) $raw; 'phone' => $receiver,
'device_type' => 'android',
'method' => 'whatsapp',
'code' => $otp
];
/* $ch = curl_init($nabehUrl);
* نتوقع بنية مثل: curl_setopt_array($ch, [
* [ CURLOPT_POST => true,
* 'success' => true, CURLOPT_RETURNTRANSFER => true,
* 'details' => ['status' => 'PENDING' | 'SENT' | …] CURLOPT_POSTFIELDS => json_encode($payload),
* ] CURLOPT_HTTPHEADER => [
*/ 'Content-Type: application/json',
$sentOK = $response['success'] ?? false; "X-App-Key: $appKey"
$statusOK = in_array($response['details']['status'] ?? '', ['PENDING', 'SENT', 'DELIVERED'], true); ],
CURLOPT_TIMEOUT => 15,
CURLOPT_CONNECTTIMEOUT => 5
]);
if ($sentOK ) { $res = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$error = curl_error($ch);
curl_close($ch);
if ($error) {
error_log("⚠️ [Flash Call OTP Token Passenger] Curl Error: $error");
jsonError('Failed to connect to OTP service');
exit;
}
$decoded = json_decode((string)$res, true);
$sentOK = ($httpCode === 200 && ($decoded['success'] ?? false));
if ($sentOK) {
/* 3) تشفير البيانات وحفظ الرمز في قاعدة البيانات */ /* 3) تشفير البيانات وحفظ الرمز في قاعدة البيانات */
$receiver_enc = $encryptionHelper->encryptData($receiver); $receiver_enc = $encryptionHelper->encryptData($receiver);
$otp_enc = $encryptionHelper->encryptData($otp); $otp_enc = $encryptionHelper->encryptData($otp);
@@ -54,7 +75,7 @@ if ($sentOK ) {
} }
} else { } else {
$errMsg = $response['message'] ?? 'Unknown error'; $errMsg = $decoded['message'] ?? 'Unknown error';
jsonError('Failed to send OTP: ' . $errMsg); jsonError('Failed to send OTP: ' . $errMsg);
} }