File "withdraw.php"

Full path: /home/eshuaesb/public_html/www.mhawaterpark.com/api/withdraw.php
File size: 1.96 KB B
MIME-type: text/x-php
Charset: utf-8

Download   Open   Edit   Advanced Editor   Back

<?php
header("Access-Control-Allow-Origin: *");
header("Content-Type: application/json; charset=UTF-8");
header("Access-Control-Allow-Methods: POST");
header("Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With");

$servername = "localhost";
$username = "eshuaesb_waterpark_api";
$password = "Waterpark@321";
$dbname = "eshuaesb_waterpark_api";

// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {
    die(json_encode(["status" => "error", "message" => "Connection failed"]));
}

$data = json_decode(file_get_contents("php://input"), true);

if (!empty($data['uid']) && !empty($data['balance'])) {
    $uid = $conn->real_escape_string($data['uid']);
    $withdraw_amount = (int)$conn->real_escape_string($data['balance']);

    // Fetch existing balance
    $result = $conn->query("SELECT balance FROM tbl_wallet WHERE uid='$uid'");
    
    if ($result->num_rows > 0) {
        $row = $result->fetch_assoc();
        $current_balance = (int)$row['balance'];

        if ($withdraw_amount > $current_balance) {
            echo json_encode(["status" => "error", "message" => "Insufficient balance"]);
        } else {
            $new_balance = $current_balance - $withdraw_amount;

            // Update balance
            $sql = "UPDATE tbl_wallet SET balance='$new_balance' WHERE uid='$uid'";
            
            if ($conn->query($sql) === TRUE) {
                echo json_encode(["status" => "success", "message" => "Withdrawal successful", "new_balance" => $new_balance]);
            } else {
                echo json_encode(["status" => "error", "message" => "Failed to update balance"]);
            }
        }
    } else {
        echo json_encode(["status" => "error", "message" => "User not found"]);
    }
} else {
    echo json_encode(["status" => "error", "message" => "Invalid input"]);
}

$conn->close();
?>