FM / api

/home/u764571690/domains/savitrfoundation.com/public_html/api/

/home/u764571690/domains/savitrfoundation.com/public_html/api

Name	Size	Mode	Actions
.htaccess	817	0644	edit dl rm
auth.php	1736	0644	edit dl rm
dashboard.php	24674	0644	edit dl rm
database_config.php	981	0644	edit dl rm
index.php	6857	0644	edit dl rm
logout.php	59	0644	edit dl rm
photo.php	9813	0644	edit dl rm
register_device.php	3549	0644	edit dl rm
view.php	17280	0644	edit dl rm

Edit: /home/u764571690/domains/savitrfoundation.com/public_html/api/auth.php (1736B)

<?php
// Authentication Helper - Check if admin is logged in
session_start();

require_once __DIR__ . '/database_config.php';

function checkAdminLogin() {
    if (!isset($_SESSION['admin_id']) || !isset($_SESSION['admin_token'])) {
        return false;
    }
    
    // Verify token in database
    $conn = getDBConnection();
    if (!$conn) {
        return false;
    }
    
    $token = $_SESSION['admin_token'];
    $adminId = $_SESSION['admin_id'];
    
    $stmt = $conn->prepare("SELECT expires_at FROM admin_tokens WHERE token = ? AND admin_id = ? AND expires_at > NOW()");
    $stmt->bind_param("si", $token, $adminId);
    $stmt->execute();
    $result = $stmt->get_result();
    
    $isValid = $result->num_rows > 0;
    
    $stmt->close();
    closeDBConnection($conn);
    
    if (!$isValid) {
        // Invalid session - clear it
        session_destroy();
        return false;
    }
    
    return true;
}

function requireAdminLogin() {
    if (!checkAdminLogin()) {
        header('Location: index.php');
        exit;
    }
}

function getAdminId() {
    return isset($_SESSION['admin_id']) ? $_SESSION['admin_id'] : null;
}

function logout() {
    // Delete token from database
    if (isset($_SESSION['admin_token'])) {
        $conn = getDBConnection();
        if ($conn) {
            $token = $_SESSION['admin_token'];
            $stmt = $conn->prepare("DELETE FROM admin_tokens WHERE token = ?");
            $stmt->bind_param("s", $token);
            $stmt->execute();
            $stmt->close();
            closeDBConnection($conn);
        }
    }
    
    session_destroy();
    header('Location: index.php');
    exit;
}
?>

cmd: