SpinEarn - Spin & Earn

Login

Don't have an account? Register here

Register

Already have an account? Login here

Welcome Back, User!

Balance

--- pts

Spins Left

---

Slot Tokens

---

Scratch Cards

---

Ready for More Fun?

Try your luck on the Spin Wheel now!

Daily Bonus

Claim your free daily rewards.

Refer & Earn

Invite friends and earn bonuses.

Slot Machine

Test your luck with classic slots.

Scratch Cards

Scratch and win instant prizes.

Recent Activity

View All Activity

Spin the Wheel!

Spins Left: --

Slot Machine

Cost: 1 Token | Your Tokens: --

Scratch & Win

Cards Left Today: --

Click to Scratch!

Click the card above or the button!

Redeem Points (Withdrawal Simulation)

Your current balance: --- pts

Amount (Points) Minimum 100 points.

Withdrawal Method

Details (Email/Account No.) Do NOT enter real financial information. This is a simulation.

Activity History

Here is a log of all your recent activities on SpinEarn.

No activity yet. Go play some games!

prepare($sql); $executed = $stmt->execute([ ':user_id' => $user_id, ':icon_class' => $icon_class, ':description' => $description, ':points_change' => $points_change, ':activity_type' => $activity_type ]); if (!$executed) { error_log("add_activity_to_db execute failed. ErrorInfo: " . print_r($stmt->errorInfo(), true)); return false; } return true; } catch (PDOException $e) { error_log("PDOException in add_activity_to_db for user_id {$user_id}: " . $e->getMessage() . " | SQL: " . $sql . " | Params: " . print_r(get_defined_vars(), true)); return false; } } /** * Establishes and returns a PDO database connection. * This function uses a static variable to ensure the connection is made only once per request. * @return PDO|null PDO connection object on success, exits on critical failure. */ function get_db_connection() { static $pdo_connection = null; if ($pdo_connection === null) { $dsn = "mysql:host=" . DB_SERVER . ";dbname=" . DB_NAME . ";charset=utf8mb4"; $options = [ PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, PDO::ATTR_EMULATE_PREPARES => false, ]; try { $pdo_connection = new PDO($dsn, DB_USERNAME, DB_PASSWORD, $options); error_log("API: Database connection established successfully."); // Log success } catch (PDOException $e) { error_log("FATAL: Database Connection Error in get_db_connection(): " . $e->getMessage()); json_response(['error' => 'Critical server error: Unable to connect to the database. Check server logs.'], 503); } } return $pdo_connection; } // --- API ROUTING LOGIC --- $action = $_GET['action'] ?? ''; $request_method = $_SERVER['REQUEST_METHOD']; $request_data = []; if ($request_method === 'POST' || $request_method === 'PUT') { $json_input = file_get_contents('php://input'); if ($json_input) { $request_data = json_decode($json_input, true); if (json_last_error() !== JSON_ERROR_NONE) { error_log("API: Invalid JSON received: " . json_last_error_msg() . " | Input: " . $json_input); json_response(['error' => 'Invalid JSON payload.'], 400); } } } // If action was in POST JSON body for some reason (though usually in GET for this setup) if (empty($action) && isset($request_data['action'])) { $action = $request_data['action']; } error_log("API: Received action '{$action}' via {$request_method}"); // Log received action switch ($action) { case 'register': handle_register($request_data); break; case 'login': handle_login($request_data); break; case 'logout': handle_logout(); break; case 'get_user_data': handle_get_user_data(); break; case 'spin_wheel': handle_spin_wheel($request_data); break; // Pass data if needed by POST case 'play_slot_machine': handle_play_slot_machine($request_data); break; case 'scratch_card': handle_scratch_card($request_data); break; case 'claim_daily_bonus': handle_claim_daily_bonus($request_data); break; case 'redeem_points': handle_redeem_points($request_data); break; case 'get_history': handle_get_history(); break; default: error_log("API: Invalid action '{$action}' requested."); json_response(['error' => 'Invalid API action specified: ' . htmlspecialchars($action)], 400); } // --- ACTION HANDLER FUNCTIONS --- function handle_register($data) { // Accept $data as parameter $pdo = get_db_connection(); if (empty($data['username']) || empty($data['password']) || empty($data['confirmPassword'])) { json_response(['error' => 'All registration fields are required.'], 400); } $username = trim($data['username']); $password = $data['password']; $confirmPassword = $data['confirmPassword']; if (strlen($username) < 3 || !preg_match('/^[a-zA-Z0-9_]+$/', $username)) { json_response(['error' => 'Invalid username: Min 3 chars, letters, numbers, underscores only.'], 400); } if (strlen($password) < 6) { json_response(['error' => 'Password must be at least 6 characters.'], 400); } if ($password !== $confirmPassword) { json_response(['error' => 'Passwords do not match.'], 400); } $sql_check = "SELECT id FROM users WHERE username = :username"; $sql_insert = "INSERT INTO users (username, password_hash, role, points, spins_left, slot_tokens, scratch_cards_left, referral_code) VALUES (:username, :password_hash, :role, :points, :spins_left, :slot_tokens, :scratch_cards_left, :referral_code)"; try { $stmt_check_user = $pdo->prepare($sql_check); $stmt_check_user->execute([':username' => $username]); if ($stmt_check_user->fetch()) { json_response(['error' => 'Username already exists.'], 409); } $password_hash = password_hash($password, PASSWORD_DEFAULT); $referral_code_base = "SPIN" . strtoupper(substr(preg_replace("/[^A-Za-z0-9]/", '', $username), 0, 5)); $is_unique_code = false; $referral_code = ''; $attempts = 0; while (!$is_unique_code && $attempts < 10) { $referral_code = $referral_code_base . random_int(100, 9999); $stmt_ref_check = $pdo->prepare("SELECT id FROM users WHERE referral_code = :referral_code"); $stmt_ref_check->execute([':referral_code' => $referral_code]); if (!$stmt_ref_check->fetch()) { $is_unique_code = true; } $attempts++; } if (!$is_unique_code) { $referral_code = "SPIN" . bin2hex(random_bytes(4)); } $default_points = 1000; $default_spins = 10; $default_tokens = 5; $default_scratch_cards = 3; $default_role = 'user'; $stmt = $pdo->prepare($sql_insert); $executed = $stmt->execute([ ':username' => $username, ':password_hash' => $password_hash, ':role' => $default_role, ':points' => $default_points, ':spins_left' => $default_spins, ':slot_tokens' => $default_tokens, ':scratch_cards_left' => $default_scratch_cards, ':referral_code' => $referral_code ]); if ($executed) { $user_id = $pdo->lastInsertId(); if ($user_id) { error_log("API Register: User '{$username}' (ID: {$user_id}) created successfully."); $welcome_desc = "Welcome bonus! +{$default_points} pts, {$default_spins} spins, {$default_tokens} tokens, {$default_scratch_cards} cards."; add_activity_to_db($pdo, $user_id, 'fas fa-gift', $welcome_desc, $default_points, 'bonus'); json_response(['success' => 'Registration successful! Please login.']); } else { error_log("API Register: User '{$username}' INSERT executed but lastInsertId is not set. RowCount: " . $stmt->rowCount()); json_response(['error' => 'Registration failed: Could not confirm user creation.'], 500); } } else { error_log("API Register: User '{$username}' INSERT failed. ErrorInfo: " . print_r($stmt->errorInfo(), true)); json_response(['error' => 'Registration failed: Database operation error.'], 500); } } catch (PDOException $e) { error_log("PDOException in handle_register for user '{$username}': " . $e->getMessage() . " | SQL attempted: " . ($stmt_check_user->queryString ?? $sql_insert ?? 'N/A')); json_response(['error' => 'Registration failed due to a server database error. Check logs.'], 500); } } function handle_login($data) { // Accept $data $pdo = get_db_connection(); if (empty($data['username']) || empty($data['password'])) { json_response(['error' => 'Username and password are required.'], 400); } $username = $data['username']; $password = $data['password']; try { $stmt = $pdo->prepare("SELECT id, username, password_hash, role FROM users WHERE username = :username"); $stmt->execute([':username' => $username]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password_hash'])) { if (!headers_sent()) { // Check before regenerating ID session_regenerate_id(true); } else { error_log("API Login: Could not regenerate session ID for user '{$username}' because headers were already sent."); } $_SESSION['user_id'] = $user['id']; $_SESSION['username'] = $user['username']; $_SESSION['role'] = $user['role']; error_log("API Login: User '{$username}' (ID: {$user['id']}, Role: {$user['role']}) logged in. Session ID: " . session_id()); try { $stmt_update_login = $pdo->prepare("UPDATE users SET last_login = CURRENT_TIMESTAMP WHERE id = :id"); $stmt_update_login->execute([':id' => $user['id']]); } catch (PDOException $e_login_update) { error_log("API Login: Failed to update last_login for user_id {$user['id']}: " . $e_login_update->getMessage()); } json_response(['success' => 'Login successful.', 'username' => $user['username'], 'role' => $user['role']]); } else { error_log("API Login: Invalid login attempt for username '{$username}'."); json_response(['error' => 'Invalid username or password.'], 401); } } catch (PDOException $e) { error_log("PDOException in handle_login for username '{$username}': " . $e->getMessage()); json_response(['error' => 'Login failed due to a server database error. Check logs.'], 500); } } // ... (handle_logout, require_auth, handle_get_user_data remain largely the same, just ensure they call get_db_connection()) // Ensure all game handlers also get $pdo via get_db_connection() // and have more robust error logging and checking of $stmt->rowCount() // Example of an updated game handler: function handle_spin_wheel($request_data) { // Pass $request_data even if not used by this POST $user_id = require_auth(); $pdo = get_db_connection(); $spinWheelSegments = [ ["label" => "50 Pts", "value" => 50, "color" => "#FFC107", "type" => "points"], ["label" => "Try Again", "value" => 0, "color" => "#6c757d", "type" => "points"], ["label" => "100 Pts", "value" => 100, "color" => "#28a745", "type" => "points"], ["label" => "1 Spin", "value" => 1, "color" => "#17a2b8", "type" => "extra_spin"], ["label" => "20 Pts", "value" => 20, "color" => "#fd7e14", "type" => "points"], ["label" => "No Win", "value" => 0, "color" => "#6c757d", "type" => "points"], ["label" => "250 Pts", "value" => 250, "color" => "#dc3545", "type" => "points"], ["label" => "5 Spins", "value" => 5, "color" => "#6f42c1", "type" => "extra_spin"] ]; $sql_user_select = "SELECT spins_left, points FROM users WHERE id = :user_id FOR UPDATE"; $sql_user_update = "UPDATE users SET points = :points, spins_left = :spins_left WHERE id = :user_id"; try { $pdo->beginTransaction(); $stmt_user = $pdo->prepare($sql_user_select); $stmt_user->execute([':user_id' => $user_id]); $user = $stmt_user->fetch(); if (!$user) { $pdo->rollBack(); error_log("API Spin: User not found for ID {$user_id}"); json_response(['error' => 'User not found.'], 404); } if ($user['spins_left'] <= 0) { $pdo->rollBack(); error_log("API Spin: No spins left for user ID {$user_id}"); json_response(['error' => 'No spins left.', 'spins_left' => 0], 400); } $new_spins_left = $user['spins_left'] - 1; $current_points = $user['points']; $randomIndex = array_rand($spinWheelSegments); $winningSegment = $spinWheelSegments[$randomIndex]; $points_won_this_spin = 0; $extra_spins_won_this_spin = 0; $outcome_text = ""; $activity_icon = 'fas fa-dharmachakra'; $activity_type = 'spin_general'; switch ($winningSegment['type']) { // ... (switch logic as before) ... case 'points': $points_won_this_spin = (int)$winningSegment['value']; if ($points_won_this_spin > 0) { $current_points += $points_won_this_spin; $outcome_text = "Congratulations! You won {$points_won_this_spin} points!"; $activity_type = 'spin_win'; } else { $outcome_text = "{$winningSegment['label']}! Better luck next time."; $activity_type = 'spin_loss'; } break; case 'extra_spin': $extra_spins_won_this_spin = (int)$winningSegment['value']; $new_spins_left += $extra_spins_won_this_spin; $outcome_text = "Awesome! You won {$extra_spins_won_this_spin} extra spin" . ($extra_spins_won_this_spin > 1 ? 's' : '') . "!"; $activity_icon = 'fas fa-redo'; $activity_type = 'spin_bonus'; break; } $stmt_update = $pdo->prepare($sql_user_update); $update_success = $stmt_update->execute([':points' => $current_points, ':spins_left' => $new_spins_left, ':user_id' => $user_id]); $rows_affected = $stmt_update->rowCount(); if($update_success && $rows_affected > 0){ error_log("API Spin: User ID {$user_id} updated. Points: {$current_points}, Spins: {$new_spins_left}. Rows: {$rows_affected}"); add_activity_to_db($pdo, $user_id, $activity_icon, $outcome_text, $points_won_this_spin, $activity_type); $pdo->commit(); json_response([ 'success' => true, 'outcome_text' => $outcome_text, 'winning_segment_index' => $randomIndex, 'winning_segment_label' => $winningSegment['label'], 'points_won' => $points_won_this_spin, 'extra_spins_won' => $extra_spins_won_this_spin, 'new_points_balance' => $current_points, 'new_spins_left' => $new_spins_left ]); } else { $pdo->rollBack(); error_log("API Spin: User update FAILED or affected 0 rows for user_id: {$user_id}. UpdateSuccess: " . ($update_success ? 'true' : 'false') . ", RowCount: {$rows_affected}. SQL: {$sql_user_update}"); json_response(['error' => 'Spin wheel action failed to update user data. Check server logs.'], 500); } } catch (PDOException $e) { if ($pdo->inTransaction()) { $pdo->rollBack(); } error_log("PDOException in handle_spin_wheel for user_id {$user_id}: " . $e->getMessage()); json_response(['error' => 'Spin wheel action failed due to a server database error. Check logs.'], 500); } } // --- Implement ALL other handler functions (play_slot_machine, scratch_card, etc.) // --- in a similar way, calling get_db_connection() and adding robust error logging // --- and checking rowCount() for UPDATE/INSERT/DELETE. // ... (The rest of your handler functions from the previous "complete api.php" response, // but ensure each one starts with `$pdo = get_db_connection();` // and has similar detailed error logging and rowCount checks) // It's too long to repeat every single handler here, but apply the pattern shown in // handle_register, handle_login, and the more detailed handle_spin_wheel. // Make sure the constants for Daily Bonus are defined if used in its handler: // if (!defined('DAILY_BONUS_POINTS_AMOUNT')) define('DAILY_BONUS_POINTS_AMOUNT', 100); // if (!defined('DAILY_BONUS_SPINS_AMOUNT')) define('DAILY_BONUS_SPINS_AMOUNT', 5); // (Paste the rest of your handle_play_slot_machine, handle_scratch_card, // handle_claim_daily_bonus, handle_redeem_points, handle_get_history functions here, // ensuring they call `$pdo = get_db_connection();` at the start of each) // --- Placeholder for other handlers to be fully implemented with logging and rowCount checks --- function handle_play_slot_machine($request_data) { $user_id = require_auth(); $pdo = get_db_connection(); error_log("API: play_slot_machine called by user_id {$user_id}"); // Full implementation with try/catch, beginTransaction, commit/rollback, rowCount checks // For brevity, a placeholder response json_response(['error' => 'play_slot_machine not fully implemented with new error checks yet.'], 501); } function handle_scratch_card($request_data) { $user_id = require_auth(); $pdo = get_db_connection(); error_log("API: scratch_card called by user_id {$user_id}"); // Full implementation ... json_response(['error' => 'scratch_card not fully implemented with new error checks yet.'], 501); } function handle_claim_daily_bonus($request_data) { $user_id = require_auth(); $pdo = get_db_connection(); error_log("API: claim_daily_bonus called by user_id {$user_id}"); // Using constants defined at the top or define them here if not already if (!defined('DAILY_BONUS_POINTS_AMOUNT')) define('DAILY_BONUS_POINTS_AMOUNT', 100); if (!defined('DAILY_BONUS_SPINS_AMOUNT')) define('DAILY_BONUS_SPINS_AMOUNT', 5); // Full implementation ... json_response(['error' => 'claim_daily_bonus not fully implemented with new error checks yet.'], 501); } function handle_redeem_points($request_data) { $user_id = require_auth(); $pdo = get_db_connection(); error_log("API: redeem_points called by user_id {$user_id} with data: " . print_r($request_data, true)); // Full implementation ... json_response(['error' => 'redeem_points not fully implemented with new error checks yet.'], 501); } function handle_get_history() { $user_id = require_auth(); $pdo = get_db_connection(); error_log("API: get_history called by user_id {$user_id}"); // Full implementation ... json_response(['error' => 'get_history not fully implemented with new error checks yet.'], 501); } ?>