invisio v2.0

<?php
include('../../../config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

$member_id = mysqli_real_escape_string($connection, $_POST['member_id']);
$temp_id = explode(".", $member_id);
$member_id = bigsara_decode($temp_id[0], $temp_id[1]);

if ($connection) {
    ///ถอด xapi
    $password = 'sd32f43q5we';
    $xapi = 'CXgvsdf542sdfg';
    $decryptedMessage = mysqli_real_escape_string($connection, $_POST['decryptedMessage']);

if (decryptMessage($decryptedMessage, $password) == $xapi) {

$sql = "UPDATE tbl_member SET register_status = '1'  WHERE member_id = '$member_id' ";
        $res = mysqli_query($connection, $sql);

if ($res) {
            $arr['result'] = 1;
        } else {
            $arr['result'] = 0;
            $arr['message'] = "sql Err.";
        }
    } else {
        $arr['result'] = 0;
        $arr['message'] = "xapi is valid";
    }
} else {
    $arr['result'] = 9;
    $arr['message'] = "Connection Error";
}

echo json_encode($arr);