Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-570.21.1.el9_6.x86_64

PHP Version:

8.2.28

User:

u184721437

Directory:

/home/u184721437/domains/malppa.com/public_html

Free Space:

7.12 TB

🔧 Quick Actions

✏️ Editing: OLD_checkout.php

<?php 
include('header.php'); 
if(!isset($_SESSION['cart']) || empty($_SESSION['cart'])){
echo"<script>window.location='".$base_url."';</script>";
}

if(isset($_POST['place_order'])){

$name = $_POST['name'];
$name=str_replace("'", "\'", $name);

$email = $_POST['email'];
$email=str_replace("'", "\'", $email);

$phone = $_POST['phone'];
$phone=str_replace("'", "\'", $phone);

$city = $_POST['city'];
$city=str_replace("'", "\'", $city);

$state = $_POST['state'];
$state=str_replace("'", "\'", $state);

$zipcode = $_POST['zip_code'];
$zipcode=str_replace("'", "\'", $zipcode);

$address = $_POST['address'];
$address=str_replace("'", "\'", $address);

if(isset($_SESSION['user_id'])){
$UserData=mysqli_fetch_assoc(mysqli_query($conn,"SELECT * FROM `user_tbl` WHERE  id='".$_SESSION['user_id']."'"));

$ChkQry=mysqli_query($conn,"SELECT * FROM `user_tbl` WHERE  email='$email' AND id!='".$_SESSION['user_id']."' AND user_type=1") or die(mysqli_error($conn));
if(mysqli_num_rows($ChkQry)>0){
echo '<p style="color:#dc3545;">Email already exists. Please choose another email</p>';
}

}else{

}

<div class="col-lg-7">
<h4 class=" fw-bold">CHECKOUT</h4>
<div class="">
<div class="row">

<div class="col-lg-6">
<label>Email</label>
<input type="email" class="form-control my-2 rounded-0" placeholder="Enter your Email" name="email" required="">
</div>

<div class="col-lg-6">
<?php
if(isset($_SESSION[''])){
 echo'<label>Phone Number</label>
<input type="text" class="form-control my-2 rounded-0" placeholder="Enter your Number" name="phone" required="" value="'.$UserData['phone'].'">';
}else
                                        {
                                        echo'<label>Phone Number</label>
                                       <input type="text" class="form-control my-2 rounded-0" placeholder="Enter your Number" name="phone" required="">';
                                    }
                                      ?>  
</div>

<div class="col-lg-6">
<label>State</label>
<input type="text" class="form-control my-2 rounded-0" placeholder="Enter your state" name="state" required="">
</div>

<div class="col-lg-12">
<label>Address</label>
<textarea class=" form-control my-2 rounded-0" name="address"></textarea>
</div>

</div>

<div class="container">
<div class="row">
<h4 class=" fw-bold">ORDER SUMMARY</h4>
<div class="col-lg-12">
<table class="table table-striped">
  <thead>
    <tr>
      <th scope="col">Image</th>
      <th scope="col">Name</th>
      <th scope="col">Qty</th>
      <th scope="col">Price</th>
      <th scope="col">Total</th>
    </tr>
  </thead>
  <tbody>
<?php
if(isset($_SESSION['cart']) && !empty($_SESSION['cart'])){ ?>
<?php 
$grandTotal = 0;

foreach ($_SESSION['cart'] as $productId => $productData) {
$quantity = (int)$productData['quantity'];
$size = $productData['size'];
$xpertId = $productData['xpert_id'];
$fetch_row=mysqli_fetch_assoc(mysqli_query($conn,"SELECT * FROM product_tbl WHERE id=$productId"));
// $price = (int)$fetch_row['price'];
// $totalProductAmount=intval($quantity*$price);
// $grandTotal += $totalProductAmount;

// $vatTotal=$grandTotal*5/100;
// $total=$grandTotal + $vatTotal;

$price = (int)$fetch_row['price'];
$totalProductAmount=intval($quantity*$price);
$grandTotal += $totalProductAmount;

$vatTotal=$grandTotal*5/100;
$total=$grandTotal + $vatTotal;

<tr>
<td><img src="<?=$base_url?>/images/Upload/product/<?=$fetch_row['image1']?>" class="img-fluid rounded-3 checkout-image" ></td>
<td><?=$fetch_row['title']?></td>
<td><?=$quantity?></td>
<td><?=$price?></td>
<td><strong><?=$totalProductAmount?></strong></td>
</tr>

<?php } ?>
<tr>
<td colspan="2" class="text-center"><strong>Sub Total</strong></td>
<td>---</td>
<td>---</td>
<td colspan="2"><strong><?=$grandTotal?></strong></td>
</tr>
<tr>
    <td colspan="2" class="text-center"><strong>Shipping</strong></td>
    <td>---</td>
<td>---</td>
<td colspan="2"><strong>Free</strong></td>
</tr>
<tr>
    <td colspan="2" class="text-center"><strong>Grand Total</strong></td>
    <td>---</td>
<td>---</td>
<td colspan="2"><strong><?=$total?></strong>
<p style="font-size: 10px;width: max-content">(includes 5% VAT)</p></td>

</tr>
 
<?php } else { ?>

<?php } ?>

</tbody>
</table>
<div class="fw-bold">
Your personal data will be used to process your order, support your experience throughout this website, and for other purposes described in our privacy policy.
</div>

<div class="text-end m-4">
<button type="submit" class=" text-center btn btn-success " name="place_order">PLACE ORDER</button>
</div>

</div>
</div>
</div>

</div>

</div>
</div>

</div>
</form>
</div>
</section>

<?php include('footer.php'); ?>

<?php

if (isset($_POST['place_order'])) {

$name = $_POST['name'];
    $phone = $_POST['phone'];
    $email = $_POST['email'];
    $city = $_POST['city'];
    $state = $_POST['state'];
    $zip_code = $_POST['zip_code'];
    $address = $_POST['address'];
    $date = date('Y-m-d');
    $status = 0;

if (isset($_SESSION['user_id'])) 
{
$user_id=$_SESSION['user_id'];
// $type='User';
$type='1';

}else{

$user_id='';
// $type='Guest';
$type='0';

}

if (!isset($_SESSION['user_id'])) {
  $ChkQry01 = mysqli_query($conn, "SELECT * FROM `user_tbl` WHERE email='$email'");
if (mysqli_num_rows($ChkQry01) > 0) {
 $error="Email already exists. Please use a different email address or login in.";
echo'<script>alert("'.$error.'");</script>';

}else{

$checkedQ=mysqli_query($conn,"INSERT INTO `user_tbl` SET
            `name`='$name',
            `phone`='$phone',
            `email`='$email',
            `city`='$city',
            `state`='$state',
            `zip_code`='$zip_code',
            `address`='$address',
            `status`='1',
            `user_type`='$type',
            `registration_date`='$date'"
        );

$user_id=mysqli_insert_id($conn);

$ido=mysqli_insert_id($conn);
$sf=sprintf("%04d",$ido);
$order_id="Order".$sf;
mysqli_query($conn,"INSERT INTO `order_tbl` SET
            `total_price`='$total',
            `user_id`='$user_id',
            `order_id`='$order_id',
            `add_date`='$date'");

mysqli_query($conn,"UPDATE `order_tbl` SET `order_id`='$order_id' WHERE id='$ido'");

foreach ($_SESSION['cart'] as $productId => $quantity) {
$pro_quantity = $quantity['quantity'];
$size = $quantity['size']; 
$fetch_row=mysqli_fetch_assoc(mysqli_query($conn,"SELECT * FROM product_tbl WHERE id='$productId'"));
$product_id = $fetch_row['id'];
$product_name = $fetch_row['title'];

$product_price = $fetch_row['price'];
$totalProductAmount = intval($pro_quantity * $product_price);

$mysqli01=mysqli_query($conn,"INSERT INTO `order_detail_tbl` SET
                `user_id`='$user_id',
                `order_id`='$order_id',
                `product_id`='$product_id',
                `product_name`='$product_name',
                `product_qty`='$pro_quantity',
                `size`='$size',
                `product_price`='$product_price',
                `total_amount`='$totalProductAmount',
                `type`='$type',
                `recieve_date`='$date',
                `status`='$status'");
}

if ($mysqli01) {
    $totalProductAmount_test = 1;
    // echo "<script>window.location='payu.php?orderid=".$order_id."&amount=".$totalProductAmount_test."&name=".$name."&email=".$email."';</script>"; 
echo "<script>window.location='thanks.php'</script>";
$_SESSION['thanks']=$order_id;
}
}
}else{

$ChkQry01 = mysqli_query($conn, "SELECT * FROM `user_tbl` WHERE user_type=1 AND id='$user_id' AND email='$email'");

if (mysqli_num_rows($ChkQry01) > 0) {
	
    // Update user information
    $data_update = mysqli_query($conn, "UPDATE `user_tbl` SET `name`='$name', `phone`='$phone',`city`='$city',`zip_code`='$zip_code',`state`='$state',`address`='$address', `email`='$email' WHERE id='".$_SESSION['user_id']."'");

// Check if user information was updated successfully
    if ($data_update) {
    
   
        // Insert order details
        $data_ins = mysqli_query($conn, "INSERT INTO `order_tbl` SET `total_price`='$total',
            `user_id`='$user_id',
            `order_id`='$order_id',
            `add_date`='$date'");
        
    
          // Get the inserted order ID
        $ido = mysqli_insert_id($conn);
        $sf = sprintf("%04d", $ido);
        $order_id = "Order".$sf;
    
        // Update the order with the generated order ID
        mysqli_query($conn, "UPDATE `order_tbl` SET `order_id`='$order_id' WHERE id='$ido'");
        
        
        foreach ($_SESSION['cart'] as $productId => $quantity) {
            // Fetch product details
            $pro_quantity = (int)$quantity['quantity'];
             $size = $quantity['size'];
            $fetch_row = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM product_tbl WHERE id='$productId'"));
            $product_id = $fetch_row['id'];
            $product_name = $fetch_row['title'];
            $product_price = (int)$fetch_row['price'];
            
           
            
$product_price = $fetch_row['price'];
$totalProductAmount = intval($pro_quantity * $product_price);

echo $query12="INSERT INTO `order_detail_tbl` SET 
                `user_id`='$user_id',
                `order_id`='$order_id',
                `product_id`='$product_id',
                `product_name`='$product_name',
                `product_qty`='$pro_quantity',
                `size`='$size',
                `product_price`='$product_price',
                `total_amount`='$totalProductAmount',
                `type`='$type',
                `recieve_date`='$date',
                `status`='$status'
                ";
            // Insert order details
            $mysqli01 = mysqli_query($conn, $query12);

if ($mysqli01) {
            $totalProductAmount_test = 1;
 // echo "<script>window.location='payu.php?orderid=".$order_id."&amount=".$totalProductAmount_test."&name=".$name."&email=".$email."';</script>";               
echo "<script>window.location='thanks.php'</script>";
$_SESSION['thanks']=$order_id;
}

}

}else{
    $_SESSION['error']="Email already exists. Please use a different email address.";
}
} 
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: OLD_checkout.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation