Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
call_actions.php	3.5 KB	-rw-r--r--	2026-02-22 20:21
chat_actions.php	4.36 KB	-rw-r--r--	2026-02-22 19:13
delete_story.php	1.79 KB	-rw-r--r--	2026-02-21 23:17
error_log	14.72 KB	-rw-r--r--	2026-03-05 18:14
get_friends.php	1.83 KB	-rw-r--r--	2026-02-22 18:39
get_messages.php	1.17 KB	-rw-r--r--	2026-02-22 17:43
get_my_stories.php	1.02 KB	-rw-r--r--	2026-02-21 23:06
get_stories.php	1.92 KB	-rw-r--r--	2026-02-21 23:03
handle_request.php	2.05 KB	-rw-r--r--	2026-02-21 21:55
mark_story_seen.php	853 B	-rw-r--r--	2026-02-21 23:03
message_action.php	1.8 KB	-rw-r--r--	2026-02-21 23:19
search_users.php	1.07 KB	-rw-r--r--	2026-02-21 21:55
send_message.php	1.68 KB	-rw-r--r--	2026-02-21 23:17
send_request.php	1.65 KB	-rw-r--r--	2026-02-21 22:18
update_profile.php	4.85 KB	-rw-r--r--	2026-02-21 22:49
upload_chat_media.php	1.86 KB	-rw-r--r--	2026-02-22 18:37
upload_story.php	2.6 KB	-rw-r--r--	2026-02-21 22:59
wp-blog-header.php	2.74 KB	-r--r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php
session_start();
require_once '../includes/db.php';
require_once '../includes/functions.php';

header('Content-Type: application/json');

if (!isLoggedIn()) {
    echo json_encode(['success' => false, 'error' => 'Unauthorized']);
    exit;
}

$user_id = $_SESSION['user_id'];
$action = isset($_POST['action']) ? $_POST['action'] : (isset($_GET['action']) ? $_GET['action'] : '');
$friend_id = isset($_POST['friend_id']) ? intval($_POST['friend_id']) : (isset($_GET['friend_id']) ? intval($_GET['friend_id']) : 0);

if ($friend_id === 0) {
    echo json_encode(['success' => false, 'error' => 'Invalid friend']);
    exit;
}

// Helper to get or init settings
function getSettings($pdo, $user_id, $friend_id)
{
    $stmt = $pdo->prepare("SELECT * FROM user_chat_settings WHERE user_id = ? AND friend_id = ?");
    $stmt->execute([$user_id, $friend_id]);
    $settings = $stmt->fetch();
    if (!$settings) {
        $pdo->prepare("INSERT INTO user_chat_settings (user_id, friend_id) VALUES (?, ?)")->execute([$user_id, $friend_id]);
        $stmt->execute([$user_id, $friend_id]);
        $settings = $stmt->fetch();
    }
    return $settings;
}

if ($action === 'clear') {
    // Clear chat for me
    $pdo->prepare("UPDATE messages SET deleted_for_sender = TRUE WHERE sender_id = ? AND receiver_id = ?")->execute([$user_id, $friend_id]);
    $pdo->prepare("UPDATE messages SET deleted_for_receiver = TRUE WHERE sender_id = ? AND receiver_id = ?")->execute([$friend_id, $user_id]);
    echo json_encode(['success' => true]);
}

elseif ($action === 'set_bg') {
    if (!isset($_FILES['bg']) || $_FILES['bg']['error'] !== UPLOAD_ERR_OK) {
        // Reset to default
        $pdo->prepare("UPDATE user_chat_settings SET background_url = NULL WHERE user_id = ? AND friend_id = ?")->execute([$user_id, $friend_id]);
        echo json_encode(['success' => true, 'background' => null]);
        exit;
    }

$fileTmpPath = $_FILES['bg']['tmp_name'];
    $fileName = $_FILES['bg']['name'];
    $ext = strtolower(pathinfo($fileName, PATHINFO_EXTENSION));
    $allowed = ['jpg', 'jpeg', 'png', 'webp', 'gif'];

if (!in_array($ext, $allowed)) {
        echo json_encode(['success' => false, 'error' => 'Invalid file type']);
        exit;
    }

$newFileName = 'bg_' . md5(time() . $user_id . $friend_id) . '.' . $ext;
    $uploadDir = '../assets/uploads/backgrounds/';
    if (!is_dir($uploadDir))
        mkdir($uploadDir, 0777, true);

if (move_uploaded_file($fileTmpPath, $uploadDir . $newFileName)) {
        getSettings($pdo, $user_id, $friend_id); // ensure exists
        $pdo->prepare("UPDATE user_chat_settings SET background_url = ? WHERE user_id = ? AND friend_id = ?")->execute([$newFileName, $user_id, $friend_id]);
        echo json_encode(['success' => true, 'background' => $newFileName]);
    }
    else {
        echo json_encode(['success' => false, 'error' => 'Upload failed']);
    }
}
elseif ($action === 'lock') {
    $password = isset($_POST['password']) ? $_POST['password'] : '';
    if (empty($password)) {
        // Unlock (disable lock)
        $pdo->prepare("UPDATE user_chat_settings SET is_locked = FALSE, lock_password = NULL WHERE user_id = ? AND friend_id = ?")->execute([$user_id, $friend_id]);
        echo json_encode(['success' => true, 'locked' => false]);
    }
    else {
        getSettings($pdo, $user_id, $friend_id);
        $pdo->prepare("UPDATE user_chat_settings SET is_locked = TRUE, lock_password = ? WHERE user_id = ? AND friend_id = ?")->execute([$password, $user_id, $friend_id]);
        echo json_encode(['success' => true, 'locked' => true]);
    }
}
elseif ($action === 'get_settings') {
    $settings = getSettings($pdo, $user_id, $friend_id);
    echo json_encode([
        'success' => true,
        'background' => $settings['background_url'],
        'is_locked' => (bool)$settings['is_locked']
    ]);
}
elseif ($action === 'unlock') {
    $password = isset($_POST['password']) ? $_POST['password'] : '';
    $settings = getSettings($pdo, $user_id, $friend_id);
    if ($settings['is_locked'] && $settings['lock_password'] === $password) {
        echo json_encode(['success' => true]);
    }
    else {
        echo json_encode(['success' => false, 'error' => 'Incorrect password']);
    }
}
else {
    echo json_encode(['success' => false, 'error' => 'Unknown action']);
}