format("Y-m-d");
if(isset($_POST['done'])){
$myUID = mysql_escape_string($_POST['myUID']);
$tokenKey = mysql_escape_string($_POST['tokenKey']);
$myPONumber = mysql_escape_string($_POST['myPONumber']);
$otp = Rand(100001, 999999);
$MyAPIcode = mysql_result(mysql_query("SELECT `SMSAPICode` FROM `asa_versioning_db` WHERE `type`='Live'"),0);
$MyPasswd = mysql_result(mysql_query("SELECT `SMSAPIPass` FROM `asa_versioning_db` WHERE `type`='Live'"),0);
$getMaxCount = mysql_result(mysql_query("SELECT `max_otp_validate` FROM `prf_purchase_order` WHERE `po_number`='$myPONumber'"),0);
if($getMaxCount < 5){
//echo $otp;
mysql_query("UPDATE `prf_purchase_order` SET `po_status`='2',`otp_validation`='$otp',`otp_validation_start`='$prfDate' WHERE `po_number`='$myPONumber' AND `token`='$tokenKey'");
$SMSMessage = "Your OTP Code is ".$otp. ". Valid within 24 hours only.";
$empMobile = mysql_result(mysql_query("SELECT `usr_mobile` FROM `vts_users` WHERE `u_id`='$myUID'"),0);
//$result = itexmo($empMobile, $SMSMessage,$MyAPIcode,$MyPasswd);
$result = itexmoAA($empMobile, $SMSMessage,$MyAPIcode,$MyPasswd);
if ($result == ""){
//echo '';
}else if ($result == 0){
//echo "SMS Sent!";
}
else{
//echo "Error Num ". $result . " was encountered!";
}
$MaxCount = $getMaxCount + 1;
mysql_query("UPDATE `prf_purchase_order` SET `max_otp_validate`='$MaxCount' WHERE `po_number`='$myPONumber'");
echo "
SUCCESS: New OTP code has been sent to your registered mobile number.
";
}else{
echo "
ERROR: Maximum OTP request with same transaction detected. Please contact your system administrator for assistance or you may have to wait 24 hrs to reset your OTP counter for this record.
";
}
}
?>