<?php
session_start();
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST');
header("Access-Control-Allow-Headers: X-Requested-With");

if (isset($_POST['user_id']) && isset($_POST['auth'])) {
    include 'config.php';

    $user_id = $_POST['user_id'];
    //$student_id = $_POST['student_id'];
    $auth = $_POST['auth'];

    $user_id = stripslashes($user_id);
    $user_id = mysqli_escape_string($con, $user_id);

  //  $student_id = stripslashes($student_id);
  //  $student_id = mysqli_escape_string($con, $student_id);

    $auth = stripslashes($auth);
    $auth = mysqli_escape_string($con, $auth);

    $sql = $con->query("SELECT * FROM payments WHERE user_id = '$user_id'") 
        or die("Error: " . mysqli_error($con));

    if ($sql->num_rows > 0) {
        $data = [];
        while ($rows = mysqli_fetch_assoc($sql)) {
            $data[] = $rows;
        }

        $suc = "Success";
        $status = true;
    } else {
        $data = [];
        $suc = "No record found";
        $status = false;
    }

    $con->close();

    $output = array('success' => $suc, 'status' => $status, 'data' => $data);
    echo json_encode($output); // Output JSON data
} else {
    echo json_encode(array('success' => "Failure", 'status' => false, 'message' => "Missing required fields"));
}
?>
