<?php
$qs = str_replace('$', '', $_SERVER['QUERY_STRING']); // get rid of the $
$qs = str_replace('*', '', $qs); // get rid of the *

$submissions = explode(',', $qs); // split the subs

$SID = ""; // store for sid
$MID = ""; // store for mid

include"dbconnect.php";

// loop
for ($i = 0; $i < count($submissions); $i++) 
{
    $sections = explode('&', $submissions[$i]);

    if($i == 0) {
        $SID = $sections[0];
        $MID = $sections[1];
        $RFID = $sections[2];
        $DOT = $sections[3];
    } else {
        $RFID = $sections[0];
        $DOT = $sections[1];

    }


    //select school
    $con_school=mysqli_connect($servername,$username,$password,$dbname);
    $sel_school=mysqli_query($con_school,"select * from schools where bio_machine_id='$MID'");
    $main_username="";
    $main_password="";
    $main_dbname="";
    //for sms
    $smsId="";
    $smsAPI="";
    $smsURL="";
    $smsTempId="";
    $smsIsActive=0;
    $sms_schoolname="";
    $receiver_admin="";
    $smsIsActive_stu = 0;
    while($row_school=mysqli_fetch_array($sel_school))
    {
        $main_username=$row_school['dbUsernameStudent'];
        $main_password=$row_school['dbPassword'];
        $main_dbname=$row_school['dbStudent'];
        
        //for sms
        $smsId=$row_school['smsId'];
        $smsAPI=$row_school['smsAPI'];
        $smsURL=$row_school['smsURL'];
        $smsTempId=$row_school['smsTempIdAtten'];
        $smsIsActive=$row_school['smsIsActive_Teacher'];
        $smsIsActive_stu=$row_school['smsIsActive_Student'];
        $sms_schoolname=$row_school['sms_schoolname'];
        $receiver_admin=$row_school['Bio_SMS'];
    }
    
    $con=mysqli_connect("localhost",$main_username,$main_password,$main_dbname);
    // Check connection
    if (!$con)
    {
        echo "Failed to connect to MySQL: " . mysqli_connect_error(); exit;
    }

    $string = $DOT;

    $day = substr($string, 0, 2);
    $month = substr($string, 2, 2);
    $year = substr($string, 4, 4);

    $hour = substr($string, 8, 2);
    $min = substr($string, 10, 2);
    $sec = substr($string, 12, 2);

    $result_date = $year.'-'.$month.'-'.$day; 
    $result_time= $hour.':'.$min.':'.$sec;
    
    mysqli_query($con,"ALTER TABLE `attendreports`  ADD `TimeIN` TIME NOT NULL  AFTER `TimeOfTransaction`,  ADD `TimeOUT` TIME NOT NULL  AFTER `TimeIN`;");
    
    $insert=mysqli_query($con,"INSERT INTO `attendreports`(`OrgId`, `MachineId`, `RFId`, `DateOfTransaction`, `TimeIN`, `TimeOUT`) VALUES ('$SID','$MID','$RFID','$result_date','$result_time','$result_time')");

    if($insert)
    {
        echo '$RFID=0#';
        $result_check=mysqli_query($con,"select * from attendence as att inner join student_registration as st on st.S_id=att.S_id where att.date='$result_date' and st.RFId='$RFID' and (att.IN_TIME != '00:00:00' OR att.IN_TIME!='')");
        $result_check1=mysqli_num_rows($result_check);
        if($result_check1==1)
        {
            $result_student=mysqli_query($con,"select att.id as AttendanceId from attendence as att inner join student_registration as st on st.S_id=att.S_id where att.date='$result_date' and st.RFId='$RFID' and (att.IN_TIME != '00:00:00' OR att.IN_TIME!='')");
            $res_student=mysqli_fetch_array($result_student);
            $AttendanceId=$res_student['AttendanceId'];
            mysqli_query($con,"UPDATE `attendence` SET `OUT_TIME` = '$result_time' where id=$AttendanceId");
            
            $res15=mysqli_query($con,"SELECT * FROM `student_registration` WHERE  `RFID`='$RFID'");
             $res16=mysqli_fetch_array($res15);
             
            if($res16['Class']=="Teacher")
            {
                if($smsIsActive=="1")
                {
                    $Communication_number= $res16['Communication_number'];
                    $receiver_admin_sms='';
                    if($Communication_number!='')
                    {
                        if($receiver_admin!='')
                        {
                            $receiver_admin_sms = $receiver_admin.",".$Communication_number;
                        }
                        else
                        {
                            $receiver_admin_sms=$Communication_number;
                        }
                    }
                    else
                    {
                        if($receiver_admin!='')
                        {
                            $receiver_admin_sms = $receiver_admin;
                        }
                    }
                    $bd=$result_date." ".$result_time;
                    if($receiver_admin_sms!='')
                    {
                        sendAttensms($res16['Name'],$bd,$sms_schoolname,$receiver_admin_sms,$smsURL,$smsAPI,$smsId,$smsTempId);
                    }
                }
            }
            else
            {
                if($smsIsActive_stu=="1")
                {
                    $result_time_123=mysqli_query($con,"select min(AttendanceId) from attendreports where `DateOfTransaction`='$result_date' and `RFId`='$RFID'");
                    $result_student=mysqli_fetch_array($result_time_123);
                 
                    $result_time11=mysqli_query($con,"select * from attendreports where AttendanceId=$result_student[0]");
                    $result_student1_123=mysqli_fetch_array($result_time11);
                 
                    $bd=$result_date." ".$result_student1_123['TimeIN']." To ".$result_time;
                    
                    if($MID>=50)
                    {
                       sendAttensms($res16['Name'],$bd,$sms_schoolname,$res16['Communication_number'],$smsURL,$smsAPI,$smsId,$smsTempId);
                    }
                }
            }
            
        }
         else
         { 
             $result_time=mysqli_query($con,"select min(AttendanceId) from attendreports where `DateOfTransaction`='$result_date' and `RFId`='$RFID'");
             $result_student=mysqli_fetch_array($result_time);
             
             $result_time11=mysqli_query($con,"select * from attendreports where AttendanceId=$result_student[0]");
             $result_student1=mysqli_fetch_array($result_time11);
             
             $res15=mysqli_query($con,"SELECT * FROM `student_registration` WHERE  `RFID`='$result_student1[RFId]'  ");
             $res16=mysqli_fetch_array($res15);
             
             $orderdate = explode('-', $result_date);
             $year = $orderdate[0];
             $month   = $orderdate[1];
             $day  = $orderdate[2]; 
            
            $S_id=$res16['S_id'];
             mysqli_query($con,"INSERT INTO `attendence`(`S_id`, `Class`, `Division`, `Subject`, `Roll_number`, `Name`, `Sex`, `Mobile`, `date`, `Status`, `DD`, `MM`, `YYYY`, `Nature_Student`, `IN_TIME`, `OUT_TIME`, `Att_Time`) VALUES ('$S_id','$res16[Class]','$res16[Division]','Day', '$res16[Roll_number]', '$res16[Name]', '$res16[Sex]','$res16[Communication_number]','$result_date', 'PRESENT', '$day', '$month', '$year','$res16[Nature_Student]','$result_student1[TimeIN]','','$result_student1[DateOfTransaction]')") or die("error");
             
            if($res16['Class']=="Teacher")
            {
                if($smsIsActive=="1")
                {
                    $bd=$result_date." ".$result_student1['TimeIN'];
                    $Communication_number= $res16['Communication_number'];
                    $receiver_admin_sms='';
                    if($Communication_number!='')
                    {
                        if($receiver_admin!='')
                        {
                            $receiver_admin_sms = $receiver_admin.",".$Communication_number;
                        }
                        else
                        {
                            $receiver_admin_sms=$Communication_number;
                        }
                    }
                    else
                    {
                        if($receiver_admin!='')
                        {
                            $receiver_admin_sms = $receiver_admin;
                        }
                    }
                    if($receiver_admin_sms!='')
                    {
                        sendAttensms($res16['Name'],$bd,$sms_schoolname,$receiver_admin_sms,$smsURL,$smsAPI,$smsId,$smsTempId);
                    }
                }
            }

         }
     }
     else
     {
        echo 'Values are not registered';
      }
}