<?php
include "general2.php";
include "connect.php";
include 'sendmailclient.php';


function rand_string( $length ) {
		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";	
		
		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}
		
		return $str;
	}
	
	
	
	
	 
  $newphone =$_REQUEST["newphone"];
  $submit =$_REQUEST["submit"];
  
  if ($submit =='cancel')
  
  {
     header('Location: preferences.php');
	 exit();
  }
  
  
  if (strlen($newphone) < 6 )
    {
     header('Location: editphonenumber.php?err=1');
	 exit();
  }
  
  if ((substr($newphone,0,3) =="234") && (strlen($newphone) != 13))
    {
     header('Location: editphonenumber.php?err=2');
	 exit();
  }
  
  
   $oldphone = $_SESSION["phoneedit"];  
  //$mpass = getpass($username,$domain);
   $username=$_SESSION['username'];
   //if ($mpass !=$currentPassword)
  
  //{
    // header('Location: preferences.php?err=2');
	 //exit();
 // }
   
   
   
   
   //get smscode


$smscode =rand_string(6);
$emailcode ="Passchg";
//send sms client

$transID= generateTransID();

$mess ="Dear ". $username ." use the smscode:   ". $smscode . "   to continue phonenumber change";
$mtype ="1";
$response = sendSMS( $username,$newphone, $transID, $domain,$mess,$sender,$mtype);

if ($response =="0"){
$query ="INSERT INTO Enquiry (username,phonenumber, email,smscode,emailcode,domain, dateused)  VALUES ('". $username."','". $newphone ."','changephone','". $smscode . "','".$emailcode."','". $domain. "','". date('Y-m-d H:i:s')."')";
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
 header('Location: editphonenumber.php?err=3');
  mysqli_close($con);
  die();
}



  $_SESSION['smscode'] =$smscode;   
  $_SESSION['cphonerequest'] ="yes";
  $_SESSION['newphone'] =$newphone;
     header('Location: cphonefinal.php');
	 exit();
  }
  else
  {
         header('Location: editphonenumber.php?err=4');
	     exit();
  
   
  }
  
  

?>