Uname : Linux V-ShopU01 4.18.0-348.20.1.el8_5.x86_64 #1 SMP Thu Mar 10 20:59:28 UTC 2022 x86_64
Server : Apache/2.4.37 (rocky) OpenSSL/1.1.1k
Whoami : apache
Safe Mode : OFF
DOCUMENT ROOT : /var/www/html/site_shopudiet
Disable Function :
Path : /var/www/html/site_shopudiet/admin/

Server IP : 65.20.74.164 Client IP : 3.15.11.226
Current File : /var/www/html/site_shopudiet/admin/new_confirm_order.php

	<?php
	include 'dbconnect.php';
	$name = $_POST['name'];
	$email = $_POST['email'];
	$phone = $_POST['phone'];
	$address = $_POST['address'];
	$city = $_POST['city'];
	$postcode = $_POST['postcode'];
    
	$items = implode(',', $_POST['items']);
	$no_item=implode(',', $_POST['no_item']);
	$no_item_array=implode(',', $_POST['no_item']);
	$date=date('Y-m-d H:i:s');
	$status='confirm';
    $cart_id = mt_rand(100000, 999999); 

	
$new = "SELECT * FROM customer WHERE phone='$phone'";
$new1 = mysqli_query($conn,$new);
if (mysqli_num_rows($new1)==0) {	
    $i = mysqli_query($conn,"INSERT INTO customer(`name`, `email`, `phone`, `address`, `pincode`,`city`,`status`) VALUES ('$name','$email','$phone','$address','$postcode','$city','1')");
    $user_id = mysqli_insert_id($conn);
    $user_name=$_POST['name'];
        $user_email=$_POST['email'];
        $user_phone=$_POST['phone'];
} else {
    while($row = mysqli_fetch_array($new1)) {
        $user_id = $row['id'];
        $user_name=$row['name'];
        $user_email=$row['email'];
        $user_phone=$row['phone'];
    }
}	 
	 
	 

	$sam=explode(",",$items);
	$num=explode(",",$no_item);
	$count=count($sam);
	$prdctrate=0;
	$pkgrate=0;
	$prdctgrand=$pkggrand=0;
    $item_fin=array();
	for($i=0;$i<count($sam);$i++){
		$item1= $sam[$i];
		if(is_numeric($item1))
		{
		    	$sql="select * from product where id ='".$item1."'";
                $result_pin=mysqli_query($conn,$sql);
                while($row=mysqli_fetch_array($result_pin)) {
		            $pr[]=$row['product_name'];
                }
		} else {
		    $pr[]=$item1;
		}
		$no_item = $num[$i];
		$sql="select * from product where id ='".$item1."'";
                $result_pin=mysqli_query($conn,$sql);
                $row=mysqli_fetch_array($result_pin);
                $item_fin=array();
                if (mysqli_num_rows($result_pin)>0) {
                    $productpackage = 0;
                                          $pid[]=$row['id'];
                                          $prduct_id=$row['id'];
                                        	$prdctname=$row['product_name'];
                                        	$stock=$row['stock']; 
                                        	if($row['mrp']) { 
                                        	    $price=$row['mrp'];
                                        	} else {
                                        	    $price=$row['price'];
                                        	}
                                        	$quantity=$row['weight'];
                                        	$product_description=$row['description'];
                                        	$feature_image=$row['file1'];
                                        	
                                        	$gst = $row['gst'];
                                        	$cgst = $row['cgst'];
                                            $sgst = $row['sgst'];
                                        	
                                        	$no=$_POST['qnty'];
                                        	 $stock = $row['stock'];
                        $op = $stock-$no_item;
                           mysqli_query($conn," UPDATE product SET stock='$op' WHERE id='$item1' ");
                           if($op <= 0) {
                               $sts ='no';
                                mysqli_query($conn," UPDATE product SET status='$sts' WHERE id='$item1' ");
                           }

                                        	$total=$price*$no_item;
                                        $date = date('Y-m-d H:i:s');
                                        $flag='1';
                                        
                                        $sql="insert into product_cart(prdctname,price,prduct_id,user_id,user_name,email,phone,product_description,quantity,no_of_item,feature_image,status,date,total,flag,stock,gst,cgst,sgst,cart_id,productpackage) values('$prdctname','$price','$prduct_id','$user_id','$user_name','$user_email','$user_phone','$product_description','$quantity','$no_item','$feature_image','$status','$date','$total','$flag','$stock','$gst','$cgst','$sgst','$cart_id','$productpackage')";
                                        mysqli_query($conn,$sql);
                                        
                                        $prdctrate=$num[$i]*$price;
                                        $prdctgrand=$prdctgrand+$prdctrate;

                } else if (mysqli_num_rows($result_pin)==0) {
                    $productpackage = 1;
                    $sql="select * from packages where product_name='".$item1."'";
                             $result_pin=mysqli_query($conn,$sql);
                             $row = $row=mysqli_fetch_array($result_pin);
                             $pid[] = $row['id'];
                                    	$prduct_id=$row['id'];
                                    	$prdctname=$row['product_name'];
                                    	$price=$row['price'];
                                    	$total=$price*$no_item;
                                    	$quantity=$row['weight'];
                                    	$product_description=$row['description'];
                                    	$feature_image=$row['image'];
                                    	$status='confirm';
                                    	$flag=1;
                                    	$gst_price = $row['gst_price'];
                                    $date = date('Y-m-d H:i:s');
                                    $sql="insert into product_cart(prdctname,price,prduct_id,user_id,user_name,email,phone,product_description,quantity,no_of_item,feature_image,status,date,gst_price,cart_id,flag,total,productpackage) values('$prdctname','$price','$prduct_id','$user_id','$user_name','$user_email','$user_phone','$product_description','$quantity','$no_item','$feature_image','$status','$date','$gst_price','$cart_id','$flag','$total','$productpackage')";
                                    mysqli_query($conn,$sql);

                
                $pkgrate=$num[$i]*$price;
                $pkggrand=$pkggrand+$pkgrate;
                                                          
                  
                } 
                

	}

	$grand_total=$pkggrand+$prdctgrand+30;
$item_final = implode(',',$pr);
$item_id = implode(',',$pid);
	 mysqli_query($conn," INSERT INTO `confirm_order`(`username`, `email`, `phone`, `address`, `postcode`,`product`,`product_id`,`total`,`item_no`,`date`,`status`,`user_id`,`no_item`,`city`,`cartid_ref`) VALUES ('$name','$email','$phone','$address','$postcode','$item_final','$item_id','$grand_total','$count','$date','$status','$user_id','$no_item_array','$city','$cart_id') ");
	 $oid = mysqli_insert_id($conn);
	 $order_id = 'FC00'.$oid;
	 $fin = "select * from product_cart where cart_id='$cart_id'";
                    $res = mysqli_query($conn,$fin);
                    
                    while($r = mysqli_fetch_array($res))
                    {
                        $pro_id = $r['prduct_id'];
                        $usr_id = $user_id;
                        $car_id = $cart_id;
                        $con_id = $oid;
                        $price  = $r['price'];
                        $cgst   = $r['cgst'];
                        $sgst   = $r['sgst'];
                        $gst    = $r['gst'];
                        $gst_price = $r['gst_price'];
                        $no_item = $r['no_of_item'];
                        $total  = $r['total'];
                        $date   = date('y-m-d');
                        if($r['productpackage'] == 1) {
                            $is_pkg = 1; 
                        } else {
                            $is_pkg = 0;
                        }
                        mysqli_query($conn," INSERT INTO `purchased_products`(`product_id`, `user_id`, `cart_id`, `confirm_id`, `price`,`cgst`,`sgst`,`gst`,`gst_price`,`no_of_item`,`total`,`date`,`is_pkg`) VALUES ('$pro_id','$usr_id','$car_id','$con_id','$price','$cgst','$sgst','$gst','$gst_price','$no_item','$total','$date','$is_pkg')");
                        
                        
                        
                         $i = $r['id'];
                         $fins = "UPDATE product_cart SET status='$status',order_id ='$order_id' WHERE id='$i' ";
                         $ress = mysqli_query($conn,$fins);
                    }
	 header('location:conform_product.php');

	
	                         
	                         
mysqli_close($conn);
	                     
	      
	                    

	?>