Linux, Apache, MySQL, PHP

I'm stuck with this problem, any help will be appreciated.

I have a web service, it requires authentication to call functions but I couldn't authenticate.

The function XML is like this:

    <s11:Envelope xmlns:s11='http://schemas.xmlsoap.org/soap/envelope/'>
      <s11:Header>
        <ns1:AuthHeader xmlns:ns1='MOD'>
    <!-- optional -->
          <ns1:Channel>?XXX?</ns1:Channel>
    <!-- optional -->
          <ns1:Username>?XXX?</ns1:Username>
    <!-- optional -->
          <ns1:Password>?XXX?</ns1:Password><!-- This element can be extended by any attribute from any namespace -->
        </ns1:AuthHeader>
      </s11:Header>
      <s11:Body>
        <ns1:GetBankList xmlns:ns1='MOD' />
      </s11:Body>
    </s11:Envelope>

my connection codes are:

    $baglanti = new :confused:SoapClient("https://galaksi.turknippon.com/appservice/mod.asmx?wsdl");
    $parm = array();
    $parm[] = new SoapVar('channelcode', XSD_STRING, null, null, 'Channel' );
    $parm[] = new SoapVar('myusername', XSD_STRING, null, null, 'Username' );
    $parm[] = new SoapVar('mypassword', XSD_STRING, null, null, 'Password' );

    $Adres = "https://galaksi.turknippon.com/appservice/";
    $Baslik =  new SoapHeader($Adres, "AuthHeader",new SoapVar($parm, SOAP_ENC_OBJECT));
    $baglanti->__setSoapHeaders(array($Baslik));
    $sonuc = $baglanti->AuthHeader(new SoapVar($parm, SOAP_ENC_OBJECT));
    print_r ($sonuc);

Here is a stack trace:



     System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> System.NullReferenceException: Object reference not set to an instance of an object. at AppServiceLibrary.AuthHeader.Validate(AuthHeader& credential) in xxxx\Galaxy\Galaxy\AppServiceLibrary\AuthHeader.cs:line 132 at xxxx.AppService.MODService.GetBankList() in xxxx\AppService\mod.asmx.cs:line 1148 --- End of inner exception stack trace --- –

CREATE DEFINER=`root`@`%` PROCEDURE `sp_web_login_employee`(IN param_login_name varchar(255), IN param_login_password_salt varchar(255), IN param_login_password_hash varchar(255), IN param_ip_address varchar(255))
BEGIN
	DECLARE param_employee_id INT;
	DECLARE email_address VARCHAR(255);

	-- IF EXISTS (SELECT user_id FROM users WHERE login_name = param_login_name AND login_password_hash = param_login_password_hash AND is_blocked = FALSE) THEN
	IF EXISTS (SELECT employee_guid FROM employees WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE) THEN
	BEGIN
		DECLARE param_employee_guid VARCHAR(255);

		SET param_employee_id = (SELECT employee_id FROM employees WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE);
		SET param_employee_guid = (SELECT employee_guid FROM employees WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE);

		UPDATE employees SET last_login_date = UTC_TIMESTAMP(), last_login_ip = param_ip_address WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE;
		-- CALL sp_add_event_log("USER", param_user_id, param_user_id, "User logged on successfully.");

		-- UPDATE employees SET last_login = NOW(), allow_delete = FALSE WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE;

		SET email_address = (SELECT contact_details FROM employee_contacts INNER JOIN contact_category ON contact_category.contact_category_id = employee_contacts.contact_category WHERE contact_category.contact_category_type = "EMAIL" AND employee_contacts.employee_id = param_employee_id AND employee_contacts.use_for_communication = TRUE);

		SELECT email_address, employees_table.employee_id, employees_table.employee_number, employees_table.employee_guid, employees_table.first_name, employees_table.second_name,
		employees_table.third_name, employees_table.fourth_name, employees_table.last_name, employees_table.official_name, employees_table.photo,
		managers_table.employee_id AS manager_id, managers_table.official_name AS manager_name, employee_job.contract_id, employee_contracts.contract_start,
		employee_contracts.contract_expiry, job_titles.job_title_name, departments.department_name, companies.company_name, locations.location_name, country.country_name
		FROM employees employees_table
		JOIN employee_contracts ON employees_table.employee_id = employee_contracts.employee_id
		JOIN employee_job ON employees_table.employee_id = employee_job.employee_id
		JOIN job_titles ON employee_job.job_title = job_titles.job_title_id
		JOIN companies ON employee_job.company_id = companies.company_id
		JOIN departments ON employee_job.department = departments.department_id
		JOIN locations ON employee_job.company_location = locations.location_id
		JOIN country ON locations.country_code = country.country_code_alpha2
		LEFT JOIN employees managers_table ON employee_job.reporting_to = managers_table.employee_id
		WHERE employees_table.login_name = param_login_name AND employees_table.login_password_salt = param_login_password_salt AND employees_table.login_password_hash = param_login_password_hash AND employees_table.is_active = TRUE AND employees_table.current_employee = TRUE AND employee_job.is_current = TRUE;
	END;
	END IF;

END

<input type="hidden" name="Action" value="EDIT" /><input type="hidden" name="Selection"  id="Selection" value="-1"><div>Below is the list of your saved codes. To edit your codes, select it from the list.</div>
<select size="1" name="CodeList" id="CodeList">
<?php
   $directory = $directory = 'users/' . $_SESSION['username'];
   $filesContents = Array();
   $files = scandir( $directory ) ;

   foreach( $files as $file )
  {
   if ( ! is_dir( $file ) )
  {
   $filesContents[$file] = file_get_contents($directory , $file);
  echo "<option>" . $file . "</option>";
  }
   }
   ?>
   </select>

<?php
   session_start();
    $directory = $directory = $_SERVER['DOCUMENT_ROOT'] . '/users/' . $_SESSION['username'];
    $file_to_delete = $_POST['CodeList'];
    if ( unlink ($directory.'/'.$file_to_delete) ) {
      echo $file_to_delete . " deleted.";
   } else {
echo "Error.";
}
?>

<select name="SType">
  <option value=""></option>
  <option value="Bid" name="Bid">Bid[2]</option>
  <option value="Lib CM" name="Library CM">Lib CM[23]</option>
  <option value="Quote" name="Quote">Quote[20]</option>
  <option value="RFP" name="RFP">RFP[2]</option>
  <option value="Removed" name="Removed">Removed[29]</option>
  <option value="Archived" name="Archived">Archived[4501]</option>
  <option value="Awarded" name="Awarded">Awarded[40]</option>
  <option value="Open" name="Open">Open[47]</option>
  <option value="Closed" name="Closed">Closed[11]</option>
  <option value="Under Review" name="Under Review">Under Review[126]</option>
  <option value="Cancelled" name="Cancelled">Cancelled[64]</option>
</select>

//If value matches dropdown value, then display records associated with dropdown value
if(isset($_REQUEST['Solicitations'])){
    if($_GET['Solicitations'] == "Bid"){
    $result = "SELECT * FROM bids where BidStatus = 1 and BidType = 'Bid' ORDER BY title";
    $query = sqlsrv_query( $conn, $sql , $params, $options );
    }
  }

<?php
error_reporting(E_ERROR | E_WARNING | E_PARSE);

?>

<?php
// Connect to SQL Server database
include("connections/CWDevConnect.php");

// this function is used to sanitize code against sql injection attack.
function ms_escape_string($data) {
        if ( !isset($data) or empty($data) ) return '';
        if ( is_numeric($data) ) return $data;

        $non_displayables = array(
            '/%0[0-8bcef]/',            // url encoded 00-08, 11, 12, 14, 15
            '/%1[0-9a-f]/',             // url encoded 16-31
            '/[\x00-\x08]/',            // 00-08
            '/\x0b/',                   // 11
            '/\x0c/',                   // 12
            '/[\x0e-\x1f]/'             // 14-31
        );
        foreach ( $non_displayables as $regex )
            $data = preg_replace( $regex, '', $data );
        $data = str_replace("'", "''", $data );
        return $data;
    }

$fields = array(
    'projectTitle' => array('field' => 'b.BidTitle', 'searchType' => 'like'),
    'BidType' => array('field' => 'b.BidType', 'searchType' => 'equal'),
    'BidStatus' => array('field' => 'b.BidStatus', 'searchType' => 'equal'),
    'department' => array('field' => 'b.Department', 'searchType' => 'equal'),
    'bidId' => array('field' => 'b.BidID', 'searchType' => 'equal'),
    'bidDate' => array('field' => 'b.BidDate', 'searchType' => 'equal'),
    'dueDate' => array('field' => 'b.DueDate', 'searchType' => 'equal')

);

$where = array();
foreach($fields as $fieldPost => $field) {
    if(isset($_POST[$fieldPost]) && strlen($_POST[$fieldPost]) > 0) {
        if($field['searchType'] == 'like') {
            $where[] = "".$field['field']." LIKE '%" . ms_escape_string($_POST[$fieldPost]) . "%'";
        } else {
            $where[] = "".$field['field']." = '" . ms_escape_string($_POST[$fieldPost]) . "'";
        }
    }
}
   $sql = "Select b.ID,convert(char(10),b.BidDate,101) BidDate,convert(char(10),
          b.DueDate,101)DueDate,b.BidTitle,b.DueTime,b.BidID,BidIDFile,
          d.Department,b.BidType,CASE WHEN b.AwardDate ='01/01/1900' Then NULL ELSe convert(char(10),b.AwardDate,101)END AS AwardDate,
          convert(char(10),b.LastUpdate,101) LastUpdate,s.Status
          FROM bids b inner join dept d on b.Department=d.DeptID inner join Status s on b.BidStatus=s.StatusId " . ( count($where) > 0 ? " WHERE " . implode(' AND ', $where) : "" );
//echo $sql;
  $params = array();
  $options =  array( "Scrollable" => SQLSRV_CURSOR_KEYSET );
  $query = sqlsrv_query( $conn, $sql , $params, $options );

  $num_rows = sqlsrv_num_rows($query);

  $per_page = 20;   // Per Page
  $page  = 1;

  if(isset($_GET["Page"]))
  {
      $page = $_GET["Page"];
  }

  $prev_page = $page-1;
  $next_page = $page+1;

  $row_start = (($per_page*$page)-$per_page);
  if($num_rows<=$per_page)
  {
      $num_pages =1;
  }
  else if(($num_rows % $per_page)==0)
  {
      $num_pages =($num_rows/$per_page) ;
  }
  else
  {
      $num_pages =($num_rows/$per_page)+1;
      $num_pages = (int)$num_pages;
  }
  $row_end = $per_page * $page;
  if($row_end > $num_rows)
  {
      $row_end = $num_rows;
  }

  $sql = " SELECT c.* FROM (
      SELECT ROW_NUMBER() OVER(ORDER BY ID) AS RowID,ID,convert(char(10),b.BidDate,101) BidDate,convert(char(10),
          b.DueDate,101)DueDate,b.BidTitle,b.DueTime,b.BidID,BidIDFile,
          d.Department,b.BidType,CASE WHEN b.AwardDate ='01/01/1900' Then NULL ELSe convert(char(10),b.AwardDate,101)END AS AwardDate,
          convert(char(10),b.LastUpdate,101) LastUpdate,s.Status
          FROM bids b inner join dept d on b.Department=d.DeptID inner join Status s on b.BidStatus=s.StatusId " . ( count($where) > 0 ) ? " WHERE " . implode(' AND ', $where) : " )
      ) AS c
  WHERE c.RowID > $row_start AND c.RowID <= $row_end

  $query = sqlsrv_query( $conn, $sql);
  ";
?>
  <table>
      <thead>
      <tr style="white-space:nowrap">
          <th></th>
          <th>Issue Date</th>
          <th>Due Date</th>
          <th>Project Title</th>
          <th>ID</th>
          <th>Department</th>
          <th>Type</th>
          <th>Award Date</th>
          <th>Last Update</th>
          <th>Status</th>
      </tr>
      </thead>
<?php
while($result = sqlsrv_fetch_array($query, SQLSRV_FETCH_ASSOC))
{
?>
 <tbody>
 <?php echo '<tr style="background:',(($c=!$c)? '#eee' : '#ddd' ),';font-size:12px;">'; ?>
    <td><div align="center"><a href="bidDetails.php?Id=<?php echo $result["ID"];?>"><img src="images/details.gif" alt="" title="Details" /></a></div></td>
    <td><div align="center"><?php echo $result["BidDate"];?></div></td>
    <td><?php echo $result["DueDate"];?><br />@<?php echo $result["DueTime"];?></td>
   <!-- <td><a href="pdfdownload.php?file=<?php echo $result["BidIDFile"];?>"><?php echo $result["BidTitle"];?></a></td>  -->
    <td><a href="uploads/<?php echo $result["BidIDFile"]; ?>" Target="DETAILS" onClick="window.open('','DETAILS','width=850,height=700,scrollbars=yes'); return true;" type="application/octet-stream"><?php echo $result["BidTitle"];?></a></td>
    <td style="white-space:nowrap"><div align="center"><?php echo $result["BidID"];?></div></td>
    <td align="right"><?php echo $result["Department"];?></td>
    <td align="right"><?php echo $result["BidType"];?></td>
    <td align="right"><?php echo $result["AwardDate"];?></td>
    <td align="right"><?php echo format_date($result["LastUpdate"]);?></td>
    <td align="right"><?php echo $result["Status"];?></td>
  </tr>
<?php
}
?>
</tbody>
</table>
<br>
Total <?php echo $num_rows;?> Record : <?php echo $num_pages;?> Page :
<?php
if($prev_page)
{
  echo " <a href='$_SERVER[SCRIPT_NAME]?Page=$prev_page&txtKeyword=$strprojectTitle&BidType=$strbidType'><< Back</a> ";
}

for($i=1; $i<=$num_pages; $i++){
  if($i != $page)
  {
      echo "[ <a href='$_SERVER[SCRIPT_NAME]?Page=$i&txtKeyword=$strprojectTitle&BidType=$strbidType'>$i</a> ]";
  }
  else
  {
      echo "<b> $i </b>";
  }
}
if($page!=$num_pages)
{
  echo " <a href ='$_SERVER[SCRIPT_NAME]?Page=$next_page&txtKeyword=$strprojectTitle&BidType=$strbidType'>Next>></a> ";
}
sqlsrv_close($conn);
?>