✏️ Editing: wire.php

<?php
include("functions.php");
include("userdata.php");
sleep(3);
if (isset($_POST)) {
	$recipient = filterString($_POST['recipient']);
	$dated = filterString($_POST['dated']);
	$amount = filterString($_POST['amount']);
	$description = filterString($_POST['description']);

if (empty($recipient)) {
		echo "<script>document.getElementById('recipient').style.borderColor='red';</script>";
	}else {echo "<script>document.getElementById('recipient').style.borderColor='green';</script>";}
	if (empty($dated)) {
		echo "<script>document.getElementById('dated').style.borderColor='red';</script>";
	}else {echo "<script>document.getElementById('dated').style.borderColor='green';</script>";}
	if (empty($amount)) {
		echo "<script>document.getElementById('amount').style.borderColor='red';</script>";
	}else {echo "<script>document.getElementById('amount').style.borderColor='green';</script>";}
	if (empty($description)) {
		echo "<script>document.getElementById('description').style.borderColor='red';</script>";
	}else {echo "<script>document.getElementById('description').style.borderColor='green';</script>";}

if (empty($recipient) || empty($dated) || empty($amount) || empty($description)) {
		echo"<script>    
              toastr.error('All fields are required!', 'Empty field(s)', {\"progressBar\": true});
             </script>";
             die();
	}
      $errorMsg = 0;
	if($amount >= $accountbalance){
       $errorMsg = 1;

echo"<script> Swal.fire('Insuficient account balance!!', 'Your account balance of $money $accountbalance will not be enough to proccess this transaction.', 'error');
          document.getElementById('amount').style.borderColor='red';
          document.getElementById('amount').style.color='red';</script>
		";	
	   }else{echo "<script>document.getElementById('amount').style.borderColor='green';
        document.getElementById('amount').style.color='green';
	   </script>";}

if ($errorMsg == 0) {
         if ($allowtransfer == 0 && $blocktransfer == 0) {
    echo "<script>
               Swal.fire('Transaction restricted', '$rest_msg', 'error');
         </script>"; 
         die();
  }
    	$query = $conn->query("SELECT * FROM wire WHERE id = '$recipient'");
    	$rows = mysqli_fetch_array($query);
    	$bankname = $rows['bankname']; $email = $rows['email']; $accountholder = $rows['accountholder']; $accountnumberB = $rows['account']; $accounttype = $rows['accounttype']; $iban = $rows['iban']; $country = $rows['country']; $state = $rows['state']; $city = $rows['city']; $zipcode = $rows['zipcode']; $fullname = $rows['fullname']; $type = $rows['type'];
    	?>

<div> 
                            	 <?php 
                            	$ref = randomString(54);
                                $_SESSION['transaction_session'] = $ref;
                            	$_SESSION['recipientDetailsB'] = array($country, $state, $city, $zipcode, $email, $fullname, $type, $iban, $accounttype, $accountholder, $accountnumberB, $bankname, $amount, $description, $recipient, $ref);

if ($enable_cot_imf == "Yes") {
                            	?>

<a href="wire-auth?token=<?php echo$ref ?>&verification=imf" class="btn btn-primary btn-lg btn-block" >Continue</a>

<?php }  elseif($enable_tin_ic_tac == "Yes") { ?>
                               <a href="wire-auth?token=<?php echo$ref ?>&verification=tac" class="btn btn-primary btn-lg btn-block" >Continue</a> 
                            <?php } else{ ?>
                                <a href="../email/wire-otp-mail.php" class="btn btn-primary btn-lg btn-block" >Continue</a>
                            <?php } ?>
                                </form>
                            
                            </div>
                            <div class="pt-3">
                                <a href="#" data-dismiss="modal" class="btn btn-sm btn-light">modify</a>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>

<?php
    }
  
}

Gifari Industries - BD Cyber Security Team