<?php
  require("../config.php");
  require("classes/db_class.php");
  require("classes/comman_class.php");
  require("classes/user_class.php");
  require("classes/common/Common.php");
  require("classes/jwt_encode_decode.php");

  $helpers = new Helper_class();
  $commonfunction = new Common();
  $mysqlClass = new Mysql_class();
  $userClass = new User_class();
  $jwtED = new jwt_encode_decode();

function requiredInput($inputArr,$requiredFields){
	foreach($requiredFields as $v) {
	   if(!isset($inputArr[$v]) || empty($inputArr[$v])) {
		  $emptyError[] = $v;
	   }
	}
	return $emptyError;
}
  
  if($_SERVER['HTTP_X_API_KEY']==HTTP_X_API_KEY && $_SERVER['HTTP_DGFNAPASSKEY']==DGFNAPASSKEY){  
  } else {
    $helpers->errorResponse("Authorization Invalid !");
  }
  
  if($_SERVER['REQUEST_METHOD']=="POST" && isset($_POST)){
  
    $post = $helpers->clearSlashes($_POST);
	
	
	/*
	if(isset($post['token'])){
		$res = $jwtED->decode_token($post['token']);
		if(isset($res->USER_ID) && $res->USER_ID > 0){
			$USER_ID 	= $res->USER_ID;
			$CREATOR_ID	= $res->CREATOR_ID;
			$WL_ID 		= $res->WL_ID;
			$ADMIN_ID 	= $res->ADMIN_ID;
		} else {
			$helpers->errorResponse("Token Expire");
		}
	} else {
		$helpers->errorResponse("Token not set!");
	}
	*/
	
	//echo json_encode($post); die();
	$requiredFields = array('updated_pin', 'user_id', 'old_pin');
	$errorRequired = requiredInput($post,$requiredFields);
	if(!empty($errorRequired)) {
	  foreach($errorRequired as $eE){
		  $helpers->errorResponse("Please enter valid ". $eE);
	  }
	}
	$user_id = $post['user_id'];  
	$old_pin = $post['old_pin'];
	$spin_old = $helpers->hashPin($old_pin);
	$hash_spin_old = $spin_old['encrypted'];
	$sql_v = "SELECT id FROM add_cust where user = '".$user_id."' and security_pin = '".$hash_spin_old."' ";
	//echo $sql_v;
	$objRec = $mysqlClass->mysqlQuery($sql_v)->fetch();
	//print_r($objRec);
	//exit($sql_v);
	
	if( empty($objRec)  ){
		$helpers->errorResponse("Invalid User !");
	}
	
	
	$s_pin = $post['updated_pin'];   // new pin
	$spin = $helpers->hashPin($s_pin);
	
	//echo "<pre>";print_r($spin);exit;
	
	/*
	if($USER_ID != $user_id ){
		$helpers->errorResponse("User ID mismatch");
	}
	*/
	$dValues = array(
		'security_pin'  => $spin['encrypted'],
		'master_pin'    => $spin['encrypted']
	);  
	//echo "<pre>";print_r($dValues);echo "</pre>";exit;
	$updated = $mysqlClass->updateData(' add_cust ', $dValues, " where user = '".$user_id."' ");
	//if($updated){
		$response['ERROR_CODE'] = 0;
		$response['MESSAGE'] = "PIN updated successfully!";	
	/*}else{
		$response['ERROR_CODE'] = 1;
		$response['MESSAGE'] = 'There is some error in PIN updation !';
	}*/
	//echo "<pre>";print_r($post);echo "</pre>";exit;
	
  }else{
	$response['ERROR_CODE'] = 1;
	$response['MESSAGE'] = 'Invalid request !';
  }
echo json_encode($response);  
$mysqlClass->close_connection();
die();
?>