1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / earnlouq / tapnaire.live / user /
Filename : tapping.php
back
<?php
session_start();
include('../../config/conn.php');
include('includes/checklogin.php');
check_login();

$uid = $_SESSION['id'];

// Validate CSRF token
if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token']) {
    echo json_encode(['status' => 'error', 'message' => 'Invalid CSRF token']);
    exit();
}

// Validate tap_value
$tap_value = isset($_POST['tap_value']) ? (int) $_POST['tap_value'] : 0;
if ($tap_value <= 0 || $tap_value > 10000) {
    echo json_encode(['status' => 'error', 'message' => 'Invalid tap value']);
    exit();
}

// Fetch user data securely
$sql = "SELECT tapping, total_tapping_capacity, tap_cooldown_endtime, last_tap_time, tapping_power, referred_by FROM users WHERE id = ?";
$stmt = mysqli_prepare($con, $sql);
mysqli_stmt_bind_param($stmt, "i", $uid);
mysqli_stmt_execute($stmt);
$result = mysqli_stmt_get_result($stmt);
$user = mysqli_fetch_assoc($result);

if (!$user) {
    echo json_encode(['status' => 'error', 'message' => 'User not found']);
    exit();
}

$current_time = time();
$cooldown_end = strtotime($user['tap_cooldown_endtime']);

// Enforce cooldown
if ($user['total_tapping_capacity'] <= 0 && $current_time < $cooldown_end) {
    echo json_encode([
        'status' => 'cooldown',
        'message' => 'Cooldown active',
        'new_balance' => $user['tapping'] / 100, // Return current balance in Naira
        'cooldown_end' => $user['tap_cooldown_endtime']
    ]);
    exit();
}

// Begin transaction
mysqli_begin_transaction($con);

try {
    // Reset tapping capacity if cooldown expired
    $default_capacity = 1000;
    if ($user['total_tapping_capacity'] <= 0 && $current_time >= $cooldown_end) {
        $user['total_tapping_capacity'] = $default_capacity;
    }

    // Calculate new balance and capacity for tapping user
    $new_balance = $user['tapping'] + $tap_value; // Balance in kobo
    $new_capacity = max(0, $user['total_tapping_capacity'] - 1); // Deduct 1 energy per tap
    $new_last_tap_time = date("Y-m-d H:i:s", $current_time);

    // Set fixed 2-hour cooldown if capacity is exhausted
    $cooldown_time = $new_capacity <= 0 ? date("Y-m-d H:i:s", strtotime("+2 hours")) : $user['tap_cooldown_endtime'];

    // Update tapping user
    $update_sql = "UPDATE users SET tapping = ?, total_tapping_capacity = ?, tap_cooldown_endtime = ?, last_tap_time = ? WHERE id = ?";
    $update_stmt = mysqli_prepare($con, $update_sql);
    mysqli_stmt_bind_param($update_stmt, "iissi", $new_balance, $new_capacity, $cooldown_time, $new_last_tap_time, $uid);

    if (!mysqli_stmt_execute($update_stmt)) {
        throw new Exception('Failed to update user data');
    }

    // Handle referral bonus (add to referrer's tapping balance)
    $referral_bonus = floor($tap_value * 0.01); // 1% of tap_value in kobo
    if ($referral_bonus > 0 && !empty($user['referred_by'])) {
        // Find referrer
        $referrer_sql = "SELECT id, tapping FROM users WHERE referral_code = ?";
        $referrer_stmt = mysqli_prepare($con, $referrer_sql);
        mysqli_stmt_bind_param($referrer_stmt, "s", $user['referred_by']);
        mysqli_stmt_execute($referrer_stmt);
        $referrer_result = mysqli_stmt_get_result($referrer_stmt);
        $referrer = mysqli_fetch_assoc($referrer_result);

        if ($referrer) {
            $new_referrer_tapping = $referrer['tapping'] + $referral_bonus;
            $update_referrer_sql = "UPDATE users SET tapping = ? WHERE id = ?";
            $update_referrer_stmt = mysqli_prepare($con, $update_referrer_sql);
            mysqli_stmt_bind_param($update_referrer_stmt, "ii", $new_referrer_tapping, $referrer['id']);

            if (!mysqli_stmt_execute($update_referrer_stmt)) {
                throw new Exception('Failed to update referrer tapping balance');
            }
        }
    }

    mysqli_commit($con);

    echo json_encode([
        'status' => 'success',
        'new_balance' => $new_balance / 100, // Convert kobo to Naira
        'new_capacity' => $new_capacity,
        'cooldown_end' => $cooldown_time
    ]);

} catch (Exception $e) {
    mysqli_rollback($con);
    echo json_encode(['status' => 'error', 'message' => 'Transaction failed: ' . $e->getMessage()]);
}
?>