invisio v2.0

<?php
include('../../../../config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

if ($connection) {
	$job_id = mysqli_real_escape_string($connection, $_POST['job_id']);
	///ถอด xapi
	$password = 'sd32f43q5we';
	$xapi = 'CXgvsdf542sdfg';
	$encryptedMessage = mysqli_real_escape_string($connection, $_POST['encryptedMessage']);

if (decryptMessage($encryptedMessage, $password) == $xapi) {

$sql = "SELECT active_status FROM tbl_job WHERE job_id = '$job_id'";
		$rs = mysqli_query($connection, $sql) or die($connection->error);
		$row = mysqli_fetch_array($rs);

// echo $sql;

if ($row['active_status'] == "1") {
			$new_status = "0";
		} else {
			$new_status = "1";
		}

$sql2 = "UPDATE tbl_job SET active_status = '$new_status' WHERE job_id = '$job_id'";
		$rs2 = mysqli_query($connection, $sql2) or die($connection->error);

if ($rs2) {
			$arr['result'] = 1;
			$arr['message'] = "sql success";
		} else {
			$arr['result'] = 0;
			$arr['message'] = "sql Err.";
		}
	} else {
		$arr['result'] = 0;
		$arr['message'] = "xapi is valid";
	}
} else {
	$arr['result'] = 9;
	$arr['message'] = "Connection Error";
}

echo json_encode($arr);