prepare(" SELECT * FROM users WHERE email = ? OR phone = ? LIMIT 1 "); $stmt->execute([$identifier, $identifier]); $user = $stmt->fetch(PDO::FETCH_ASSOC); if ($user && password_verify($password, $user['password_hash'])) { // Password verified! $_SESSION['athlete_user_id'] = $user['id']; $_SESSION['athlete_email'] = $user['email']; $_SESSION['athlete_phone'] = $user['phone']; $_SESSION['athlete_name'] = $user['name']; header("Location: " . $redirect); exit(); } else { $errorMessage = "Invalid credentials. Please check your Email/Phone and Password."; } } } // ------------------------------------------------------------- // 2. ATHLETE REGISTRATION HANDLER // ------------------------------------------------------------- if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['athlete_register'])) { $name = trim($_POST['name'] ?? ''); $email = trim($_POST['email'] ?? ''); $phone = trim($_POST['phone'] ?? ''); $password = trim($_POST['password'] ?? ''); if (empty($name) || empty($email) || empty($phone) || empty($password)) { $errorMessage = "Please fill in all registration fields."; $activeTab = 'register'; } elseif (strlen($password) < 6) { $errorMessage = "Password must be at least 6 characters long."; $activeTab = 'register'; } elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) { $errorMessage = "Please provide a valid email address."; $activeTab = 'register'; } else { // Check if email exists $chk = $pdo->prepare("SELECT id FROM users WHERE email = ?"); $chk->execute([$email]); if ($chk->fetch()) { $errorMessage = "An account with this email already exists. Please log in instead."; $activeTab = 'login'; } else { $hash = password_hash($password, PASSWORD_BCRYPT); $ins = $pdo->prepare("INSERT INTO users (name, email, phone, password_hash) VALUES (?, ?, ?, ?)"); $ins->execute([$name, $email, $phone, $hash]); $newUserId = (int)$pdo->lastInsertId(); $_SESSION['athlete_user_id'] = $newUserId; $_SESSION['athlete_email'] = $email; $_SESSION['athlete_phone'] = $phone; $_SESSION['athlete_name'] = $name; header("Location: portal.php?msg=account_created"); exit(); } } } // ------------------------------------------------------------- // 3. SELF-SERVICE DEVICE UNBIND / RESET // ------------------------------------------------------------- if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['unbind_license_id'])) { $licenseId = (int)$_POST['unbind_license_id']; $athleteEmail = $_SESSION['athlete_email'] ?? ''; $athletePhone = $_SESSION['athlete_phone'] ?? ''; if (!empty($athleteEmail) || !empty($athletePhone)) { // Verify ownership $verify = $pdo->prepare("SELECT id, license_key FROM licenses WHERE id = ? AND (customer_email = ? OR customer_phone = ?)"); $verify->execute([$licenseId, $athleteEmail, $athletePhone]); $lic = $verify->fetch(PDO::FETCH_ASSOC); if ($lic) { $del = $pdo->prepare("DELETE FROM activations WHERE license_id = ?"); $del->execute([$licenseId]); // Log $log = $pdo->prepare("INSERT INTO audit_logs (action, license_key, details, ip_address) VALUES ('SELF_DEVICE_RESET', ?, 'Customer unbind via Portal', ?)"); $log->execute([$lic['license_key'], $_SERVER['REMOTE_ADDR'] ?? '127.0.0.1']); $successMessage = "Successfully unbound device for key: " . htmlspecialchars($lic['license_key']) . ". You can now activate your new phone in GymFuel!"; } } } $isCustomerLoggedIn = !empty($_SESSION['athlete_user_id']); $customerLicenses = []; $customerOrders = []; if ($isCustomerLoggedIn) { $email = $_SESSION['athlete_email'] ?? '___'; $phone = $_SESSION['athlete_phone'] ?? '___'; // Fetch Licenses $stmtLic = $pdo->prepare(" SELECT l.*, (SELECT COUNT(*) FROM activations a WHERE a.license_id = l.id) as bound_devices_count FROM licenses l WHERE l.customer_email = ? OR l.customer_phone = ? ORDER BY l.created_at DESC "); $stmtLic->execute([$email, $phone]); $customerLicenses = $stmtLic->fetchAll(PDO::FETCH_ASSOC); // Fetch Activations Details for each license foreach ($customerLicenses as &$cl) { $stmtAct = $pdo->prepare("SELECT device_model, activated_at, last_check_at FROM activations WHERE license_id = ?"); $stmtAct->execute([$cl['id']]); $cl['activations_list'] = $stmtAct->fetchAll(PDO::FETCH_ASSOC); } unset($cl); // Fetch Orders $stmtOrd = $pdo->prepare("SELECT * FROM orders WHERE customer_email = ? OR customer_phone = ? ORDER BY created_at DESC"); $stmtOrd->execute([$email, $phone]); $customerOrders = $stmtOrd->fetchAll(PDO::FETCH_ASSOC); } ?> Athlete Portal • My GymFuel Licenses
⚡
GymFuel Titan
Secure Athlete Portal
🛍️ Buy Key Logout
🔒

Athlete Account Access

Log in with your password to view your bought license keys & manage devices.

Login to Account Create Account

Don't have a license key yet? Buy Instant Access Here

Welcome, !

Email: • Phone:

➕ Buy Another Key
✅
🏋️

No Licenses Found

You don't have any active license keys linked to this email/phone yet.

🛍️ Purchase Access Key
ACTIVE
Access:
License Key
📱 Bound Devices ( / ) 0): ?>
ℹ️ No device registered yet. Paste this key into the GymFuel app on your phone!
Activated:
● Connected