MAINHACK

Viewing / Editing File: place_online_order.php

<?php 
    include("header.php");$order_id=$_REQUEST['id'];

<?php
$show=new Oops($db);

$stmt1=$show->readwithdata('place_order','order_id',$order_id);
$num1=$stmt1->rowCount();
if($num1>0){
	while($row=$stmt1->fetch(PDO::FETCH_ASSOC)){
	  
        $address=$row['address'];
         $amount=$row['amount'];
         $status=$row['status'];
      $date=$row['date'];
         $pstatus=$row['pay_status'];
         $user_id=$row['user_id'];

}
    
}
?>
<?php 
$MERCHANT_KEY = $merchant_key;

// Merchant Salt as provided by Payu
$SALT = $merchant_salt;

// End point - change to https://secure.payu.in for LIVE mode
$PAYU_BASE_URL = "https://secure.payu.in";

$action = '';

$posted = array();
if(!empty($_POST)) {
    //print_r($_POST);
  foreach($_POST as $key => $value) {    
    $posted[$key] = $value; 
	
  }
}

$formError = 0;

if(empty($posted['txnid'])) {
  // Generate random transaction id
  $txnid = substr(hash('sha256', mt_rand() . microtime()), 0, 20);
} else {
  $txnid = $posted['txnid'];
}
$hash = '';
// Hash Sequence
$hashSequence = "key|txnid|amount|productinfo|firstname|email|udf1|udf2|udf3|udf4|udf5|udf6|udf7|udf8|udf9|udf10";
if(empty($posted['hash']) && sizeof($posted) > 0) {
  if(
          empty($posted['key'])
          || empty($posted['txnid'])
          || empty($posted['amount'])
          || empty($posted['firstname'])
          || empty($posted['email'])
          || empty($posted['phone'])
          || empty($posted['productinfo'])
          || empty($posted['surl'])
          || empty($posted['furl'])
		  || empty($posted['service_provider'])
  ) {
    $formError = 1;
  } else {
    //$posted['productinfo'] = json_encode(json_decode('[{"name":"tutionfee","description":"","value":"500","isRequired":"false"},{"name":"developmentfee","description":"monthly tution fee","value":"1500","isRequired":"false"}]'));
	$hashVarsSeq = explode('|', $hashSequence);
    $hash_string = '';	
	foreach($hashVarsSeq as $hash_var) {
      $hash_string .= isset($posted[$hash_var]) ? $posted[$hash_var] : '';
      $hash_string .= '|';
    }

$hash_string .= $SALT;

$hash = strtolower(hash('sha512', $hash_string));
    $action = $PAYU_BASE_URL . '/_payment';
  }
} elseif(!empty($posted['hash'])) {
  $hash = $posted['hash'];
  $action = $PAYU_BASE_URL . '/_payment';
}
?><script>
    var hash = '<?php echo $hash ?>';
    function submitPayuForm() {
      if(hash == '') {
        return;
      }
      var payuForm = document.forms.payuForm;
      payuForm.submit();
    }
  </script>
 <body onLoad="submitPayuForm()">    
  <?php if($formError) { ?>
	
      <span style="color:red"></span>
      <br/>
      
    <?php } ?>

<div class="your-order">
    <div class="container">
        <h2>Place Order</h2>
        <div class="row">
            <div class="col-md-3">
                <?php 
                    include("user.php");
                ?>
            </div>
            <div class="col-md-9">
                <div class="tex-box">
                    <h4>Place Order Information :</h4>
                    <div class="place-box">
                        <div class="place-box-lt">
                            <label>Order No </label>
                        </div> 
                        <div class="place-box-rt">
                            <p ><?=$order_id?></p>
                        </div>                      
                    </div>
                    <div class="place-box">
                        <div class="place-box-lt">
                            <label>Status</label>
                        </div> 
                        <div class="place-box-rt">
                            <p>Placed</p>
                        </div>                      
                    </div>
                    <div class="place-box">
                        <div class="place-box-lt">
                            <label>Order Placed </label>
                        </div> 
                        <div class="place-box-rt">
                            <p ><?php echo date("l ,jS F Y h:i:s A",strtotime($date)); ?></p>
                        </div>                      
                    </div>
                    <div class="place-box">
                        <div class="place-box-lt">
                            <label>Payment Mode </label>
                        </div> 
                        <div class="place-box-rt">
                            <p ><?=$pstatus?></p>
                        </div>                      
                    </div>
                    <div class="place-box">
                        <div class="place-box-lt">
                            <label>Address </label>
                        </div> 
                        <div class="place-box-rt">
                            <p ><?=$address?></p>
                        </div>                      
                    </div>
                </div>

<form action="<?php echo $action; ?>" method="post" name="payuForm">
                     <input type="hidden" name="key" value="<?php echo $MERCHANT_KEY ?>" />
                <input type="hidden" name="hash" value="<?php echo $hash ?>"/>
                <input type="hidden" name="txnid" value="<?php echo $txnid ?>" />		
                <input name="firstname"  type="hidden"  id="firstname" value="<?=$_SESSION['login_user']?>" />	
                <input name="email" type="hidden" id="email" value="<?=$_SESSION['username'];?>"/>
                <input name="phone" type="hidden" value="<?=$phn;?>" />
                <textarea name="productinfo" style="display:none;"><?=$order_id?></textarea>
                <input name="surl" type="hidden" value="http://<?=$_SERVER['HTTP_HOST'].$dir1?>/success.php" size="64" />
                <input name="furl" type="hidden" value="http://<?=$_SERVER['HTTP_HOST'].$dir1?>/failure.php" size="64" />
                <input  type="hidden" name="service_provider" value="payu_paisa" size="64" />
                    <div class="tabel-box">
                        <table>
                            <tbody>
                                <tr>
                                    <th style="width:20%;">Photo </th>
                                    <th style="width:50%;">Name </th>
                                    <th style="width:10%;">Quantity</th>
                                    <th style="width:10%;">Price</th>
                                    <th style="width:10%;">Total Price</th>
                                </tr>
    <?php
$count=1;
$st="select * from bill inner join place_order on bill.order_id=place_order.order_id where place_order.order_id='".$order_id."'";
//echo  $st;
$stmt=$con->prepare($st);
$stmt->execute();
$num = $stmt->rowCount();
     if($num>0){
     $count=1;
    while ($row = $stmt->fetch(PDO::FETCH_ASSOC)){ //echo $row['product_id'];
 $stmt1=$show->readwithdata_clause('product_img','product_id',$row['product_id'],'limit 1');
 $row1=$stmt1->fetch(PDO::FETCH_ASSOC);
 $img=$row1['img'];       
extract($row);
?>                             <tr>
                                    <td style="width:20%;"><img src="<?=$pic_img?>/<?=$img?>" alt="LOGO"></td>
                                    <td style="width:50%;"><?=$row['product_name']?></td>
                                    <td style="width:10%;"><?=$row['quantity']?></td>
                                    <td style="width:10%;"><?=$row['price']?></td>
                                    <td style="width:10%;"><?=$row['quantity']*$row['price']?></td>
                                </tr>
                                <?php } } ?>
                            </tbody>
                        </table>
                    </div>
                    <div class="bil">
                        <ol>
                            <li>Sub Total Rs :<span> <?=$amount?>/-</span></li>
                            
                  <?php if($pstatus=='Online'){?>
                    <?php if(!$hash) { ?>
                     <li><input type="submit" value="Confirm & Pay" class="button"/> </li>
                 <?php
                    }?><?php }else{?>
        	       <a href="bill_final.php?user=<?=$user_id?>&order=<?=$order_id?>" target="_blank" class="button">Print bill</a>
        	       <?php } ?>
                            
                        </ol>
                    </div>    
                </form>

</div>
            
           
                    
        </div>
    </div>
</div>

<?php 
    include("footer.php");
?>

Cancel / Back

[ MAINHACK ]

Viewing / Editing File: place_online_order.php

Server Info

System Features

User Info