MOON
Server: Apache
System: Linux ip-208-109-13-31.ip.secureserver.net 3.10.0-1160.119.1.el7.tuxcare.els4.x86_64 #1 SMP Sat Aug 31 06:58:57 UTC 2024 x86_64
User: durgeshpandey215 (1013)
PHP: 8.1.29
Disabled: NONE
Upload Files
File: /home/durgeshpandey215/public_html/zeeroprice.skilladders.com/confirmorder.php
<? require_once "application_top.php";
require_once "protect.php";
$i=0;
if(isset($_SESSION["products"]))
{
$orderid = $_SESSION['useridsess'].date('dHis');

	$totalamount=0;
	foreach($_SESSION['products'] as $item){
		print_r($item);
		$sqlc = "select sellerid,qty from products where pid = ? limit 1"; 
		$paramc = array();
		$paramc[] = $item['pid'];
		$rowsc = $db->rawQuery($sqlc,$paramc);
		if(count($rowsc)){
			if($rowsc[0]['qty'] >=  $item['qty'] ){
				$i++; //counting valid products
				$sellerid = $rowsc[0]['sellerid'];
				$totalamount= $totalamount + ($item['qty'] * $item['sellingcost']);
				//insert in order table
				$insertdata = array(
					'orderid'=> $orderid,
					'sellerid'=> $sellerid,
					'userid'=> $_SESSION['useridsess'],
					'pid'=> $item['pid'],
					'ititle' => $item['name'],
					'qty'=> $item['qty'],
					'finalcost'=> $item['sellingcost']																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																																											
				);
				$db->insert('orders_detail',$insertdata);
			}
		}
	}
	if($i){
		$totalwithPGcharge = $totalamount;
		$insertdata = array(
			'orderid'=> $orderid,
			'totalamount' => $totalwithPGcharge,
			'userid'=> $_SESSION['useridsess']
		);
		$db->insert('orders',$insertdata);
	}
	$_SESSION['products'] = "";
	unset($_SESSION['products']);
	header('location:pg4mrp.php?idtopg='.encode($orderid));exit;
}else{
//$_SESSION['msg'] = "Your order has been placed. (Order Id: ".$orderid.") ";
//header('location:trackorder.php');exit;
header('location:trackorder.php');exit;
}
?>