1#@!#!123s

https 1#@!#!123s
: / home2 / affluencebiotech / public_html / absolutoffice.com /
Filename : manage_checkout.php
back
<?php include'config.php';?> 
<?php
	try
	{
		if(isset($_SESSION['user_id']))
		{
			if(isset($_REQUEST['checkout']) && isset($_SESSION['cart']) && count($_SESSION['cart'])>0)
			{
				if (!filter_var($_REQUEST['email'], FILTER_VALIDATE_EMAIL)) 
	            {
	                throw new Exception('Invalid email.');
	            }
	            else if(preg_match($mobile_regex, $_REQUEST['phone']) === 0)
	            {
	                throw new Exception('Invalid mobile.');
	            }
	            else
	            {
					$q = 'SELECT order_number FROM orders ORDER BY id DESC';
					$r = $d->selectQueryInArray($q);
					$order_number = isset($r[0]['order_number'])?($r[0]['order_number']+1):1000;
					$_SESSION['order_number'] = $order_number;
					$order_currency = 'INR';

					// insert post data in db & create order---------
					$q = 'INSERT INTO `orders`(`order_number`, `user_id`, `name`, `email`, `mobile`, `address`, `s-address`,`order_currency`, `addon`, `status`) VALUES ("'.$order_number.'","'.$_SESSION['id'].'","'.$_REQUEST['name'].'","'.$_REQUEST['email'].'","'.$_REQUEST['phone'].'","'.$_REQUEST['address'].'","'.$_REQUEST['s-address'].'","'.$order_currency.'",Now(),0)';
					$r = $d->insertQuery($q);
					if($r)
					{
						$q3 = 'SELECT id FROM orders WHERE order_number='.$order_number;
						$r3 = $d->selectQueryInArray($q3);
						$total_amount = 0;

						// insert order items---------
						foreach($_SESSION['cart'] AS $k => $v)
						{
							$amount = 0;
							$q2 = 'SELECT * FROM product WHERE id='.$k;
							$r2 = $d->selectQueryInArray($q2);
							$amount = ($r2[0]['price']*$v);

							$q1 = 'INSERT INTO `orders_item`(`order_id`, `order_number`, `product_id`, `quantity`, `name`, `amount`, `addon`, `status`) VALUES ("'.$r3[0]['id'].'","'.$order_number.'","'.$k.'","'.$v.'","'.$r2[0]['product'].'","'.$amount.'",Now(),1)';
							$r1 = $d->insertQuery($q1);
							if($r1)
							{
								$total_amount += $amount;
							}
						}

						$q4 = 'UPDATE orders SET total_amount = "'.$total_amount.'" WHERE order_number='.$order_number;
						$r4 = $d->insertQuery($q4);
						if($r1)
						{
							$url = CashfreeURL.'/orders';
							$return_url = local_base_url.'?order_id={order_id}&order_token={order_token}';
							$headers = array(
								'Content-Type: application/json',
								'x-api-version: '.CashfreeVersion,
								'x-client-id: '.CashfreeAppId,
								'x-client-secret: '.CashfreeSecret
							);
							$method = 'POST';
							$post_fields = '{
							  "order_id": "'.$order_number.'",
							  "order_amount": '.round($total_amount,2).',
							  "order_currency": "'.$order_currency.'",
							  "customer_details": {
							    "customer_id": "'.$_SESSION['user_id'].'",
							    "customer_email": "'.$_REQUEST['email'].'",
							    "customer_phone": "'.$_REQUEST['phone'].'"
							  },
							  "order_meta": {
							    "return_url": "'.$return_url.'"
							  }
							}';


							$curl = curl_init();
							curl_setopt_array($curl, array(
							    CURLOPT_URL => $url,
							    CURLOPT_RETURNTRANSFER => true,
					            CURLOPT_ENCODING => '',
					            CURLOPT_MAXREDIRS => 10,
					            CURLOPT_TIMEOUT => 0,
					            CURLOPT_FOLLOWLOCATION => true,
					            CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
							    CURLOPT_CUSTOMREQUEST => $method,
							    CURLOPT_HTTPHEADER => $headers,
							    CURLOPT_POSTFIELDS => $post_fields
							    )
							);
							$curl_resp = json_decode(curl_exec($curl));
							curl_close($curl);
							
							if(isset($curl_resp->payment_link))
							{
							    
								// unset cart item----------------
								unset($_SESSION['cart']);

								$q5 = 'UPDATE orders SET `cf_order_id`="'.$curl_resp->cf_order_id.'",`cf_order_expiry_time`="'.date("Y-m-d H:i:s",strtotime($curl_resp->order_expiry_time)).'",`cf_order_token`="'.$curl_resp->order_token.'",`cf_order_status`="'.$curl_resp->order_status.'",`cf_payment_link`="'.$curl_resp->payment_link.'",`cf_payments`="'.$curl_resp->payments->url.'",`cf_refunds`="'.$curl_resp->refunds->url.'",`cf_settlements`="'.$curl_resp->settlements->url.'" WHERE order_number='.$order_number;
								$r5 = $d->insertQuery($q5);
								if($r5)
								{
									// redeirect to payment page, it will given by cashfree---------
									// header('location:'.$curl_resp->payment_link);
									echo '<script>window.location.href="'.$curl_resp->payment_link.'";</script>';
								}
							}
							else
							{
								throw new Exception('Something went wrong while redirecting on payment page.');
							}
						}
						else
						{
							throw new Exception('Something went wrong while updating order record.');
						}
					}
					else
					{	
						throw new Exception('Something went wrong while inserting order record.');
					}	
	            }
			}
			else
			{
				throw new Exception('Invalid request.');
			}	
		}
		else
		{
			echo '<script>window.location.href="login.php";</script>';
		}
	}
	catch(Exception $e)
	{
		$response['message'] = $e->getMessage();
	}
	echo '<script>alert("'.$response['message'].'");window.history.back();</script>';
?>