function SetToken($id)
 {
     $mysql = new MySQL();
     $token = generateCode();
     $mysql->UpdateString($this->NameBase, 'User', "token='" . $token . "'", "id='" . $id . "'");
     return $token;
 }

function generateStyles(array $styles)
{
    debug(count($styles) . " styles found");
    foreach ($styles as $style) {
        if (property_exists($style, 'styles') && count($style->styles) == 1 && property_exists($style, 'substyles') && count($style->substyles) > 0) {
            $sourceCode = generateCode($style->styles[0], $style->substyles, true);
            writeClass(filterKeyword($style->styles[0]), $sourceCode);
        } elseif (property_exists($style, 'styles') && count($style->styles) > 0 && !property_exists($style, 'substyles') && count($style->elements) == 1) {
            switch ($style->elements[0]) {
                case 'label':
                    $_style = 'LabelStyles';
                    break;
                case 'frame3d':
                    $_style = 'Frame3dStyles';
                    break;
                default:
                    throw new UnexpectedValueException('Woot');
            }
            $sourceCode = generateCode($_style, $style->styles, false);
            writeClass($_style, $sourceCode);
        } else {
            debug("Cannot process element");
        }
    }
}

function generateCookie($user, $extended)
{
    $code = generateCode(32, $user);
    $code2 = grHash($code, $user);
    $monthLater = time() + 30 * 24 * 60 * 60;
    $dbh = ConnectToDB();
    $stmt = $dbh->prepare("UPDATE active_users SET last_session_code=?,session_expiration=? WHERE email=?");
    $stmt->execute(array($code2, date("Y-m-d H:i:s", $monthLater), $user));
    return $code;
}

 public function submit_details()
 {
     $alphabet = '123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ';
     function generateCode($length = 2)
     {
         $az = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
         $azr = rand(0, 25);
         $azs = substr($az, $azr, 10);
         $stamp = hash('sha256', time());
         $mt = hash('sha256', mt_rand(5, 20));
         $alpha = hash('sha256', $azs);
         $hash = str_shuffle($stamp . $mt . $alpha);
         $code = ucfirst(substr($hash, $azr, $length));
         return $code;
     }
     function generateCode1($length = 3)
     {
         $az = '1234567890';
         $azr = rand(0, 9);
         $azs = substr($az, $azr, 5);
         $stamp = hash('sha256', time());
         $mt = hash('sha256', mt_rand(1, 5));
         $alpha = hash('sha256', $azs);
         $hash = str_shuffle($stamp . $mt . $alpha);
         $code1 = ucfirst(substr($hash, $azr, $length));
         return $code1;
     }
     $name = $this->input->post('txt_name');
     $mail = $this->input->post('txt_email');
     $phn = $this->input->post('txt_phn');
     $alt_phn = $this->input->post('txt_alt_phn');
     if ($alt_phn == '') {
         $alt_phn1 = 'N/A';
     } else {
         $alt_phn1 = $alt_phn;
     }
     $add = $this->input->post('txt_address');
     $country = $this->input->post('txt_country');
     $state = $this->input->post('txt_state');
     $city = $this->input->post('txt_city');
     $zip = $this->input->post('txt_pin');
     $id = generateCode() . '/' . generateCode1();
     $pass = generateCode() . '@' . generateCode1();
     $fields = array('name' => $name, 'email' => $mail, 'phone' => $phn, 'alt_phone' => $alt_phn1, 'address' => $add, 'country' => $country, 'state' => $state, 'city' => $city, 'zip' => $zip, 'emp_id' => $id, 'emp_pass' => $pass);
     $service = $this->base_model->form_post('td_employee_details', $fields);
     if ($service) {
         $category['data'] = $this->base_model->show_data('td_employee_details', '*', '')->result_array();
         $this->load->view('employee/emp_details', $category);
     } else {
         $category['msg'] = 'Sorry ! Category was not successfully Inserted';
         $this->load->view('employee/emp_details', $category);
     }
 }

function generateActivation($pdo, $userId)
{
    // Create an activation code 20 characters long
    $code = generateCode(20);
    // Create the activation code listing using $userId
    $stmt = $pdo->prepare('INSERT INTO AccountActivation (UserId, ActivationCode) VALUES (:userId, :activationCode);');
    $stmt->bindParam(':userId', $userId, PDO::PARAM_INT);
    // <-- Automatically sanitized for SQL by PDO
    $stmt->bindParam(':activationCode', $code, PDO::PARAM_STR);
    // <-- Automatically sanitized for SQL by PDO
    $stmt->execute();
    // Give the $code to the rest of the program
    return $code;
}

 public function create($input)
 {
     // Set transaction instance
     $transaction = new Transaction(['code' => generateCode(), 'draw' => getDrawTime()]);
     // Create transaction
     Auth::user()->transactions()->save($transaction);
     // Set transaction for the bet
     if ($input['type'] == 'fourdigit') {
         Auth::user()->bets()->whereIn('type', ['last2', 'last3', 'fourdigit'])->where('transaction_id', '=', null)->update(['transaction_id' => $transaction->id]);
     } elseif ($input['type'] == 'swertres') {
         Auth::user()->bets()->whereIn('type', ['swertwo', 'swertres'])->where('transaction_id', '=', null)->update(['transaction_id' => $transaction->id]);
     } else {
         Auth::user()->bets()->where('type', '=', $input['type'])->where('transaction_id', '=', null)->update(['transaction_id' => $transaction->id]);
     }
     return $transaction;
 }

function insertSmallJob()
{
    if (isset($_POST['agree'])) {
        include 'connection.php';
        $date = date("d/m/Y");
        $secretCode = generateCode();
        $name = $_POST['name'];
        $email = $_POST['email'];
        $phone = $_POST['phone'];
        $location = $_POST['location'];
        $region = $_POST['region'];
        $description = $_POST['description'];
        $type = $_POST['type'];
        if (!empty($name) && !empty($email) && !empty($phone) && !empty($location) && !empty($region) && !empty($description)) {
            $insert = "INSERT INTO smallJobs (name, phone, email, activation, secretCode, location, description, region, types, date) VALUES ('{$name}', '{$phone}', '{$email}', 0, '{$secretCode}' , '{$location}', '{$description}', '{$region}', '{$type}', '{$date}')";
            $insertSmallJob = mysqli_query($connect, $insert) or die(mysqli_error());
            echo "<div class='container'><h1>Skelbimas pridėtas</h1><br>Jūsų skelbimo slaptas kodas yra <h2>{$secretCode}</h2>. Prašome jį saugiai užsirašyti. Jūsų slaptas kodas taip pat išsiųstas Jūsų nurodytu el. paštu. Prašome pasitikrinti el.pašto dėžutę. Jeigu nematote, rekomenduojame patikrinti ir šiukšlių dėžutę (angl. spam). Su šiuo kodu Jūs bet kada galėsite koreguoti skelbimo turinį ar jį ištrinti.<br>Skelbimą galėsite matyti tinklapyje tuomet kai jį aktyvuos administratorius. Prašome palaukti. <br>Dėkojame, kad naudojatės mūsų paslaugomis.<br></div>";
            //================
            //   Mailing system
            //=================
            $to = $_POST['email'];
            $subject = "Jūsų smulkaus darbo registracija katalogas.no";
            $name = $_POST['name'];
            $headers = "From: Katalogas.no registracija <[email protected]>" . "\r\n";
            $headers .= "MIME-Version: 1.0\r\n";
            $headers .= "Content-Type: text/html; charset=UTF-8" . "\r\n";
            $message = '<html><body>';
            $message .= "Sveiki,";
            $message .= "<br><br>Jūs sėkmingai pridėjote reklamą/skelbimą " . $name . ". Norėdami jį redaguoti ar ištrinti naudokite šitą kodą: <b>" . $secretCode . "</b>.";
            $message .= "<br>Rekomenduojame šio kodo niekam neskleisti ir nesidalinti, taip siekiant užtikrinti Jūsų skelbimo saugumą.";
            $message .= "<br>Jeigu turite kokių nors klausimų ar pasiūlymų, prašome kreiptis el. paštu [email protected].";
            $message .= "<br><br>Taip pat prašome neatsakyti (nenaudoti reply) į šį el. laišką, nes tai yra automatinis pranešimas.";
            $message .= "<br><br>Dėkojame, kad naudojatės katalogas.no. <br><br> Pagarbiai <br> katalogas.no kolektyvas.";
            $message .= '</body></html>';
            mail($to, $subject, $message, $headers);
        } else {
            echo "<div class='container'><h1>Pažymėti laukai * yra privalomi. Prašome užpildyti pažymėtus * laukus.</h1></div>";
        }
    } else {
        echo "<div class='container'><h1>Jūs privalote susipažinti su taisyklėmis!</h1></div>";
    }
}

function insertAd()
{
    if (isset($_POST['agree'])) {
        include 'connection.php';
        $adsCode = generateCode();
        $name = $_POST['name'];
        $email = $_POST['email'];
        $phone = $_POST['phone'];
        $website = $_POST['website'];
        $facebook = $_POST['facebook'];
        $town = $_POST['town'];
        $region = $_POST['region'];
        $category = $_POST['category'];
        $description = $_POST['description'];
        $worksHours = $_POST['workHours'];
        $workHoursWeekend = $_POST['workHoursWeekend'];
        //==============
        // Photo upload
        //==============
        $logoRandom = imageNameGenerator();
        $logoName = $_FILES['logo']['name'];
        $logoSize = $_FILES['logo']['size'];
        $logoType = $_FILES['logo']['type'];
        $logoTemp = $_FILES['logo']['tmp_name'];
        $logoExtension = strtolower(substr(strrchr($logoName, '.'), 1));
        $newLogoName = $logoRandom . '.' . $logoExtension;
        if (!empty($name) && !empty($email) && !empty($phone) && !empty($description) && !empty($town)) {
            if (!empty($logoName)) {
                if ($logoType == "image/jpeg" || $logoType == "image/png" || $logoType == "image/bmp" || $logoType == "image/gif" || $logoType == "image/jpg" || $logoType == "image/psd" || $logoType == "image/tiff" || $logoType == "image/tga" || $logoType == "") {
                    if ($logoSize < 500000) {
                        move_uploaded_file($logoTemp, "images/catalogLogos/" . $newLogoName);
                        echo "Logotipas ikeltas!";
                    } else {
                        die("Paveikslelis per didelis.");
                    }
                } else {
                    die("Neleistinas failo formatas.");
                }
            } else {
                $newLogoName = "noLogo.png";
            }
            $insert = "INSERT INTO katalogas (name, phone, email, activation, adsCode, website, facebook, town, description, worksHours, workHoursWeekend, logoName, region, category) VALUES ('{$name}', '{$phone}', '{$email}', 0, '{$adsCode}', '{$website}', '{$facebook}', '{$town}', '{$description}', '{$worksHours}' , '{$workHoursWeekend}', '{$newLogoName}', '{$region}', '{$category}')";
            $insertAd = mysqli_query($connect, $insert) or die(mysqli_error());
            echo "<div class='container'><h1>Įmonė/paslauga pridėta</h1><br>Jūsų skelbimo slaptas kodas yra <h2> {$adsCode} </h2>. Prašome jį saugiai užsirašyti.Jūsų slaptas kodas taip pat išsiųstas Jūsų nurodytu el. paštu. Prašome pasitikrinti el.pašto dėžutę. Jeigu nematote, rekomenduojame patikrinti ir šiukšlių dėžutę (angl. spam). Su šiuo kodu Jūs bet kada galėsite koreguoti įmonės/paslaugos reklamos turinį ar ją ištrinti.<br>Skelbimą galėsite matyti tinklapyje tuomet kai jį aktyvuos administratorius. Prašome palaukti. <br>Dėkojame, kad naudojatės mūsų paslaugomis.<br></div>";
            //================
            //   Mailing system
            //=================
            $to = $_POST['email'];
            $subject = "Jūsų kompanijos registracija katalogas.no";
            $headers = "From: Katalogas.no registracija <[email protected]>" . "\r\n";
            $headers .= "MIME-Version: 1.0\r\n";
            $headers .= "Content-Type: text/html; charset=UTF-8" . "\r\n";
            $message = '<html><body>';
            $message .= "Sveiki,";
            $message .= "<br><br>Jūs sėkmingai pridėjote įmonę/paslaugą " . $name . ". Norėdami ją redaguoti ar ištrinti naudokite šitą kodą: <b>" . $adsCode . "</b>.";
            $message .= "<br>Rekomenduojame šio kodo niekam neskleisti ir nesidalinti, taip siekiant užtikrinti Jūsų skelbimo saugumą.";
            $message .= "<br>Jeigu turite kokių nors klausimų ar pasiūlymų, prašome kreiptis el. paštu [email protected].";
            $message .= "<br><br>Taip pat prašome neatsakyti (nenaudoti reply) į šį el. laišką, nes tai yra automatinis pranešimas.";
            $message .= "<br><br>Dėkojame, kad naudojatės katalogas.no. <br><br> Pagarbiai <br> katalogas.no kolektyvas.";
            $message .= '</body></html>';
            mail($to, $subject, $message, $headers);
        } else {
            echo "<div class='container'><h1>Pažymėti laukai * yra privalomi. Prašome užpildyti pažymėtus * laukus.</h1></div>";
        }
    } else {
        echo "<div class='container'>Jūs privalote susipažinti su taisyklėmis!</div>";
    }
}

//$targetPath="".WEB_PATH."";
//var $font = '/home/www/htdocs/capcha/monofont.ttf'; //╡├╟и╩═║ path р═з┴╥у╩ш╣╨д├╤║
$_SERVER['DOCUMENT_ROOT'] = dirname(dirname(__FILE__));
$targetPath = $_SERVER['DOCUMENT_ROOT'];
function generateCode($characters)
{
    $possible = '╝╗═╖┴┐╦б┤╩╟з╛├╣┬║┼└╢д╡ивк';
    //		$possible = _CAPTCHA_RAN;
    $code = '';
    $i = 0;
    while ($i < $characters) {
        $code .= substr($possible, mt_rand(0, strlen($possible) - 1), 1);
        $i++;
    }
    return $code;
}
$font = $targetPath . "/capcha/font/angsab.ttf";
$code = generateCode($_GET['characters']);
$im = imagecreate($_GET['width'], $_GET['height']);
$white = ImageColorAllocate($im, 255, 255, 255);
$black = ImageColorAllocate($im, 0, 0, 0);
$new_string = tis620_to_utf8($code);
imagefill($im, 0, 0, $black);
imageTTFText($im, 20, 0, 6, 18, $white, $font, $new_string);
if (ISO == 'utf-8') {
    $_SESSION["security_code"] = $new_string;
} else {
    $_SESSION["security_code"] = utf8_to_tis620($new_string);
}
imagepng($im);
imagedestroy($im);

 $SUSERID = $result->fields['USERID'];
 $SEMAIL = $result->fields['email'];
 $SUSERNAME = $result->fields['username'];
 $SVERIFIED = $result->fields['verified'];
 $SPP = $result->fields['profilepicture'];
 $SFNAME = $result->fields['fname'];
 $SLNAME = $result->fields['lname'];
 $_SESSION['USERID'] = $SUSERID;
 $_SESSION['EMAIL'] = $SEMAIL;
 $_SESSION['USERNAME'] = $SUSERNAME;
 $_SESSION['VERIFIED'] = $SVERIFIED;
 $_SESSION['PP'] = $SPP;
 $_SESSION['FNAME'] = $SFNAME;
 $_SESSION['LNAME'] = $SLNAME;
 // Generate Verify Code Begin
 $verifycode = generateCode(5) . time();
 $query = "INSERT INTO members_verifycode SET USERID='" . mysql_real_escape_string($SUSERID) . "', code='{$verifycode}'";
 $conn->execute($query);
 if (mysql_affected_rows() >= 1) {
     $proceedtoemail = true;
 } else {
     $proceedtoemail = false;
 }
 // Generate Verify Code End
 // Send Welcome E-Mail Begin
 if ($proceedtoemail) {
     $sendto = $SEMAIL;
     $sendername = $config['site_name'];
     $from = $config['site_email'];
     $subject = $lang['67'] . " " . $sendername;
     $sendmailbody = stripslashes($_SESSION['USERNAME']) . ",<br><br>";

    while ($i < $characters) {
        $code .= substr($possible, mt_rand(0, strlen($possible) - 1), 1);
        $i++;
    }
    return $code;
}
function print_image($code, $width = 120, $height = 40, $characters = 6)
{
    $font_path = __DIR__ . '/monofont.ttf';
    $font_size = $height * 0.75;
    $image = @imagecreate($width, $height) or die('Cannot initialize new GD image stream');
    $background_color = imagecolorallocate($image, 255, 255, 255);
    $text_color = imagecolorallocate($image, 20, 40, 100);
    $noise_color = imagecolorallocate($image, 225, 160, 11);
    for ($i = 0; $i < $width * $height / 3; $i++) {
        imagefilledellipse($image, mt_rand(0, $width), mt_rand(0, $height), 1, 1, $noise_color);
    }
    $textbox = imagettfbbox($font_size, 0, $font_path, $code) or die('Error in imagettfbbox function');
    $x = ($width - $textbox[4]) / 2;
    $y = ($height - $textbox[5]) / 2;
    imagettftext($image, $font_size, 0, $x, $y, $text_color, $font_path, $code) or die('Error in imagettftext function');
    header('Content-Type: image/jpeg');
    imagejpeg($image);
    imagedestroy($image);
    exit;
}
$width = isset($_GET['width']) ? (int) $_GET['width'] : 253;
$height = isset($_GET['height']) ? (int) $_GET['height'] : 60;
$characters = isset($_GET['characters']) && $_GET['characters'] > 1 ? (int) $_GET['characters'] : 6;
$_SESSION['security_code'] = generateCode($characters);
print_image($_SESSION['security_code'], $width, $height, $characters);

 public function __construct($app)
 {
     $this->app = $app;
     $app->group('/user', function () use($app) {
         $app->get('/autocomplete', function () {
             $userService = new \Core\Service\UserService();
             echo json_encode($userService->getAutocomplete($_GET['s']));
         });
         $app->get('/check', function () {
             $userAvailible = ECP\UserQuery::create()->filterByName($_GET['name'])->count() == 0;
             echo json_encode((object) array('isAvailible' => $userAvailible));
         });
         $app->get('/status', function () {
             $userService = new \Core\Service\UserService();
             $isLoggedIn = $userService->isLoggedIn();
             if (!$isLoggedIn) {
                 die(json_encode((object) array('isLoggedIn' => false)));
             }
             $user = $userService->getLoggedInUser();
             echo json_encode((object) array('isLoggedIn' => true, 'id' => $user->id, 'username' => $user->username));
         });
         $app->post('/login', function () {
             $p = getPost();
             $user = ECP\UserQuery::create()->filterByName($p->username)->filterByPassword(sha1($p->password))->filterByConfirmationCode('')->findOne();
             if (!$user) {
                 die(json_encode((object) array('status' => 'incorrect credentials')));
             }
             $_SESSION['ecp'] = (object) array('id' => $user->getId(), 'username' => $user->getName());
             echo $this->getBoolStatus(true);
         });
         $app->post('/register', function () {
             $userService = new \Core\Service\UserService();
             $p = getPost();
             if (strpos($p->username, '/') !== false) {
                 die_err('Slashes are not allowed in names!');
             }
             $code = generateCode();
             $user = new ECP\User();
             $user->setName($p->username);
             $user->setPassword(sha1($p->password));
             $user->setEmail($p->email);
             $user->setCreated(time());
             $user->setConfirmationCode($code);
             $user->save();
             $userService->sendRegistrationMail($user);
             echo $this->getBoolStatus(true);
         });
         $app->post('/logout', function () {
             unset($_SESSION['ecp']);
             echo '{}';
         });
         $app->post('/recover-password', function () {
             $userService = new \Core\Service\UserService();
             $p = getPost();
             $users = ECP\UserQuery::create()->filterByEmail($p->email)->filterByConfirmationCode('')->find();
             foreach ($users as $user) {
                 $code = generateCode();
                 $user->setRecoverPasswordCode($code);
                 $user->save();
                 $userService->sendRecoverPassword($user);
             }
             echo $this->getBoolStatus(true);
         });
         $app->get('/reset-password-check', function () {
             $userCount = ECP\UserQuery::create()->filterByRecoverPasswordCode($_GET['code'])->count();
             echo $this->getBoolStatus($userCount != 0);
         });
         $app->post('/reset-password', function () {
             $p = getPost();
             $users = ECP\UserQuery::create()->filterByRecoverPasswordCode($p->code)->find();
             $found = false;
             foreach ($users as $user) {
                 $user->setRecoverPasswordCode('');
                 $user->setPassword(sha1($p->password));
                 $user->save();
                 $found = true;
             }
             echo $this->getBoolStatus($found);
         });
         $app->post('/confirm-registration', function () {
             $p = getPost();
             $users = ECP\UserQuery::create()->filterByConfirmationCode($p->code)->find();
             $found = false;
             foreach ($users as $user) {
                 $user->setConfirmationCode('');
                 $user->save();
                 $found = true;
             }
             echo $this->getBoolStatus($found);
         });
     });
 }

function sendRandomPass($email)
{
    $query = "select name from user where email='{$email}'";
    $status = mysql_query($query);
    $row = mysql_fetch_array($status);
    $user = $row['name'];
    $pass = generateCode();
    $salt = substr("{$user}", 0, 2);
    $epass = crypt($pass, $salt);
    $email = mysql_real_escape_string($email);
    $to = "{$email}";
    $from = "From: [email protected]";
    $subject = "password";
    $body = "hi, your password is {$pass}. please login using your email address and the password.  feel free to change your password at anytime.";
    if (mail($to, $subject, $body, $from)) {
        $params = array('email' => $email, 'pass' => $epass);
        $result = query("user.sendRandomPass", $params);
        echo "<p>Your new password has been sent!  <a href='login.php'>login</a> after you receive your password.</p>";
    } else {
        echo "<p>Message delivery failed...</p>";
    }
}

$HOST_NAME = '127.0.0.1';
$USER_NAME = 'root';
$PASSWORD = '';
// Parse command line
if ($argc > 1) {
    $ACTION = $argv[1];
}
if ($ACTION == 'help') {
    die("Usage:\n\tphp query_cache_triggers [<action> [<hostname> [<username> [<password>]]]]\n");
}
$ALLOWED_ACTIONS = array('create', 'remove', 'gencode');
if (!in_array($ACTION, $ALLOWED_ACTIONS)) {
    die("Error: Invalid action {$ACTION} possible actions: " . implode(', ', $ALLOWED_ACTIONS) . "\n");
}
if ($ACTION == 'gencode') {
    generateCode();
    die;
}
if ($argc > 2) {
    $HOST_NAME = $argv[2];
}
if ($argc > 3) {
    $USER_NAME = $argv[3];
}
if ($argc > 4) {
    $PASSWORD = $argv[4];
}
// Connect to database
$link = mysql_connect($HOST_NAME, $USER_NAME, $PASSWORD) or die('Error: Could not connect: ' . mysql_error() . "\n");
// Make sure 'Memcached Functions for MySQL' is installed
mysql_select_db('mysql') or die("Error: Could not select 'mysql' database\n");

}
function generateCode($characters)
{
    // list all possible characters, similar looking characters and vowels have been removed
    $possible = '23456789bcdfghjkmnpqrstvwxyz';
    $code = '';
    $i = 0;
    while ($i < $characters) {
        $code .= substr($possible, mt_rand(0, strlen($possible) - 1), 1);
        $i++;
    }
    $session =& JFactory::getSession();
    $session->set('code', $code);
    return $code;
}
generateCode(5);
?>
	<script>
function clear_ses()
{
var form=document.contactform;
my_name.value="";
email.value="";
testimonial.value="";
return false;
}
</script>

<h2><?php 
echo $menuname;
?>

 public function sendCheckcode()
 {
     $phone = I('get.phone');
     if (!preg_match('/^[1][3458]{1}[0-9]{9}$/', $phone)) {
         $this->error('手机号码格式有误');
     }
     //手机号码格式检测
     $res = M('Member')->where(array('user_phone' => $phone))->field('user_phone')->find();
     if ($res['user_phone']) {
         $this->error("手机号码已经被注册了");
     }
     $code = generateCode();
     if (sendSMS($phone, $code)) {
         $this->success('发送成功,请注意查收短信');
     } else {
         $this->error('未知错误,短信发送失败,请联系hmv客服');
     }
 }

function addAccount($username, $password, $email, $phone)
{
    $code = generateCode($username, $email);
    $password = ENCRYPT . $password;
    $password = SHA1($password);
    $added_by = "admin";
    //Add an account
    $sql = "INSERT INTO users(username, password, code, email, added_by, added_on) VALUES(:username, :password, :code, :email, :added_by, NOW())";
    $params = array(':username' => $username, ':password' => $password, ':email' => $email, ':code' => $code, ':added_by' => $added_by);
    $result = DatabaseHandler::Execute($sql, $params);
    //Add empty profile for that account
    $user_id = getAccountid($username);
    $sql = "INSERT INTO user_details(user_id, contact, added_on) VALUES(:user_id, :phone, NOW())";
    $params = array(':user_id' => $user_id, ':phone' => $phone);
    $result = DatabaseHandler::Execute($sql, $params);
    //login time
    $ip = $_SERVER['REMOTE_ADDR'];
    $sql = "INSERT INTO log_login_sessions(username, ip) VALUES(:username, :ip)";
    $params = array(':username' => $username, ':ip' => $ip);
    $result = DatabaseHandler::Execute($sql, $params);
    return;
}

 private function _generateBarCodes($nos)
 {
     $barcodes = array();
     for ($i = 1; $i <= $nos; $i++) {
         $text = generateCode(10, 2);
         $dest = "assets/barcodes/" . $text . ".jpg";
         Barcode39($text, $text, $dest, 220, 120);
         $barcodes[$i] = $text;
     }
     return $barcodes;
 }

<?php

include_once "base.php";
session_start();
$p = $_POST;
$cIdE = explode(",", $p['cId']);
$countE = explode(",", $p['count']);
$cId = $p['cId'];
$count = $p['count'];
$email = $p['email'];
$hash = generateCode(32);
$_SESSION['hash'] = $hash;
$first_name = $p['first_name'];
$last_name = $p['last_name'];
$address = $p['address'];
$query = "SELECT * FROM `js_catalog` WHERE 1!=1";
for ($i = 0; $i < sizeof($cIdE); $i++) {
    $query .= " OR `cId`=" . $cIdE[$i];
}
$d = SQL($query);
SQL("INSERT INTO `js_card`(`cId`, `count`, `hash`, `email`, `first_name`, `last_name`, `address`) VALUES ('" . $cId . "', '" . $count . "', '" . $hash . "', '" . $email . "', '" . $first_name . "', '" . $last_name . "', '" . $address . "')");
$m = '<a href="http://js.apicat.ru/' . $hash . '">Перейти к заказу</a>';
$m .= '<br/>Имя: ' . $first_name;
$m .= '<br/>Фамилия: ' . $last_name;
$m .= '<br/>Адрес: ' . $address;
$to = $email;
$text = $m;
$subject = "Заказ оформлен!";
$from_name = "[email protected]";
$dc = "UTF-8";
$sc = "windows-1251";

         $_SESSION['FNAME'] = $result->fields['fname'];
         $_SESSION['LNAME'] = $result->fields['lname'];
         $_SESSION['FB'] = "1";
         if (isset($_SESSION['PINREDIRECT'])) {
             $pindir = $_SESSION['PINREDIRECT'];
             $pindir = base64_decode($pindir);
             $_SESSION['PINREDIRECT'] = "";
             header("Location:{$config['baseurl']}" . $pindir);
             exit;
         } else {
             header("Location:{$config['baseurl']}/");
             exit;
         }
     }
 } else {
     $mdpass = generateCode(5) . time();
     $md5pass = md5($mdpass);
     if ($fname != "" && $femail != "") {
         $thename = explode(" ", $fname);
         $fname = $thename[0];
         $mname = $thename[1];
         $lname = $thename[2];
         if ($lname == "") {
             $lname = $mname;
         }
         $query = "INSERT INTO members SET email='" . mysql_real_escape_string($femail) . "', fname='" . mysql_real_escape_string($fname) . "', lname='" . mysql_real_escape_string($lname) . "', username='', password='" . mysql_real_escape_string($md5pass) . "', pwd='" . mysql_real_escape_string($mdpass) . "', addtime='" . time() . "', lastlogin='" . time() . "', ip='" . $_SERVER['REMOTE_ADDR'] . "', lip='" . $_SERVER['REMOTE_ADDR'] . "', verified='1'";
         $result = $conn->execute($query);
         $userid = mysql_insert_id();
         if ($userid != "" && is_numeric($userid) && $userid > 0) {
             $query = "SELECT USERID,email,verified,profilepicture,fname,lname from members WHERE USERID='" . mysql_real_escape_string($userid) . "'";
             $result = $conn->execute($query);