examtimetable.php

<?php
    //http://stackoverflow.com/questions/18382740/cors-not-working-php
    if (isset($_SERVER['HTTP_ORIGIN'])) {
        header("Access-Control-Allow-Origin: {$_SERVER['HTTP_ORIGIN']}");
        header('Access-Control-Allow-Credentials: true');
        header('Access-Control-Max-Age: 86400');    // cache for 1 day
    }
	header("Content-Type: application/json; charset=UTF-8");
    // Access-Control headers are received during OPTIONS requests
    if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {

        if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']))
            header("Access-Control-Allow-Methods: POST");         

        if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']))
            header("Access-Control-Allow-Headers:        {$_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']}");

        exit(0);
    }


    //http://stackoverflow.com/questions/15485354/angular-http-post-to-php-and-undefined
    $postdata = file_get_contents("php://input");	include("../classes/config.php");
	error_reporting(0);
	if(mysqli_real_escape_string($conn,$postdata->keyvalue)==md5("xxx"))
	{
		
		$rollnumber=mysqli_real_escape_string($conn,$postdata->rollnumber);
		$testno=mysqli_real_escape_string($conn,$postdata->testno);
		if($rollnumber!="" AND $testno!="")
		{			
			$sql = $db->sql_query("SELECT dept_sec_id,year FROM mentor WHERE rollNumber='$rollnumber'");
			$r = $db->sql_fetchrow($sql);
			$dept_sec_id=$r['dept_sec_id'];
			$year=$r['year'];
			$sql = $db->sql_query("SELECT * FROM section WHERE dept_sec_id='$dept_sec_id'");
			$r = $db->sql_fetchrow($sql);
			$deptId=$r['deptId'];
			$q=$db->sql_fetchrow($db->sql_query("SELECT * FROM workingday WHERE year='$year'"));
			$clgsdate=strtotime($q['clgsdate']);
			$sql = $db->sql_query("SELECT * FROM semester");
			$r = $db->sql_fetchrow($sql);
			if($r['current']=="ODD"){
				if($year==1)
					$semester=1;
				if($year==2)
					$semester=3;
				if($year==3)
					$semester=5;
				if($year==4)
					$semester=7;
			}	
			else{
				if($year==1)
					$semester=2;
				if($year==2)
					$semester=4;
				if($year==3)
					$semester=6;
				if($year==4)
					$semester=8;
			}	
			$test='test'.$testno;
			$query="SELECT e.scode AS subjectcode,s.subname AS subjectname,e.date,e.session FROM `exam_timetable` AS e, subject AS s WHERE e.`year` = $year AND e.`test_no` = '$testno' AND e.`dept_sec_id` = '$dept_sec_id'  AND  e.scode=s.subcode AND s.deptId='$deptId' ORDER BY `date` ASC";
			$sql = $db->sql_query($query);
			$num=mysqli_num_rows($sql);
			$rows = array();
			while($r = $db->sql_fetchrow($sql)) {
				if(strtotime($r['date'])>$clgsdate)
				{
					$rows[] = $r;				
					$flag=1;
				}
			}
			if(empty($rows))
				$s->error = "Not Available";
		}
		else
			$s->error = "Empty Data";		
	}
	else
		$s->error = "Invaild Action";
	if($flag==1)
		print json_encode($rows);
	else
		print json_encode($s);
?>