invisio v2.0

<?php
    session_start();
    include('../../../config/main_function.php');
    $secure = "cAh3DrJACzw4RbU";
    $connection = connectDB($secure);

$member_id = mysqli_real_escape_string($connection, $_POST['member_id']);
    $temp_id = explode(".", $member_id);
    $member_id = bigsara_decode($temp_id[0], $temp_id[1]);

$level =  mysqli_real_escape_string($connection, $_POST['level']);

switch ($level) {
        case '1':
            $register_level = 'g9k1s';
            break;

case '2':
            $register_level = 'kki22';
            break;

case '3':
            $register_level = 'x9fkq';
            break;
        default:
            $register_level = '';
            break;
    }

if ($connection) {

$sql_update = "UPDATE tbl_member SET  
        register_level = '$register_level'
        WHERE member_id = '$member_id'";
        $res_update = mysqli_query($connection, $sql_update)  or die($connection->error);

if ($res_update) {

$payment_id = getRandomID(10, 'tbl_member_payment', 'payment_id');
            $gb_ref_no = getRandomID2(15, 'tbl_member_payment', 'gb_ref_no');
            //// get unit_price
            $sql_package = "SELECT * FROM tbl_package_price WHERE member_type = '$register_level'";
            $rs_package = mysqli_query($connection, $sql_package);
            $row_package = mysqli_fetch_array($rs_package);

$check_payment = "SELECT * FROM tbl_member_payment WHERE member_id = '$member_id'";
            $res_check = mysqli_query($connection, $check_payment);
            $num_row = mysqli_num_rows($res_check);
            
            if ($num_row < 1) {
                $payment_insert = "INSERT INTO tbl_member_payment SET
                payment_id = '$payment_id'
                ,member_id = '$member_id'
                ,gb_ref_no = '$gb_ref_no'
                ,member_level = '$register_level'
                ,payment_amount = '{$row_package['unit_price']}';";
                $rs_payment_insert = mysqli_query($connection, $payment_insert);

} elseif ($num_row >= 1) {

$payment_update = "UPDATE tbl_member_payment SET
                payment_id = '$payment_id'
                ,gb_ref_no = '$gb_ref_no'
                ,member_level = '$register_level'
                ,payment_amount = '{$row_package['unit_price']}'
                WHERE member_id = '$member_id';";
                $rs_payment_update = mysqli_query($connection, $payment_update);
            }

$arr['result'] = 1;
        } else {
            $arr['result'] = 0;
        }
    } else {
        $arr['result'] = 9;
    }

mysqli_close($connection);
    echo json_encode($arr);
    ?>