File Explorer

<?php include("includes/db_config.php"); 
if(isset($_POST['order_comm'])){
var_dump($_POST);
extract($_POST);
date_default_timezone_set('Asia/Kolkata');
$date = date('Y-m-d H:i:s');
date_default_timezone_set('Asia/Kolkata');
$shdate = date('Y-m-d');
$user_id="11";
$session_id=$_SESSION['prd_session_id'];
$sql_plr="select * from addto_cart where session_id='".$session_id."' and addto_cart.invoice_id='1'";
$res_pltrr = mysqli_query($conn, $sql_plr);
while($res_ptrr= mysqli_fetch_array($res_pltrr)){
    $ord_id[]=$res_ptrr['id'];
}
$names_str = implode(" , ",$ord_id);
$rndno=rand(1000, 9999);
$order="AMX".$rndno;
$id="11";
$sql_ttl="select SUM(quantity * price) as ttl from addto_cart where session_id='".$session_id."' and addto_cart.invoice_id='1'";
$resu_ttl = mysqli_query($conn, $sql_ttl);
$res_ttl= mysqli_fetch_assoc($resu_ttl);
$pr_id=$_GET['pr'];
if($pr_id !="0"){
$pr_id=$_GET['pr'];
$sql_pr="select * from promo_code where id='".$pr_id."'";
$result_code = mysqli_query($conn, $sql_pr);
$res_code= mysqli_fetch_assoc($result_code);
$discount=$res_code['discount'];
$total_price=(int)$res_ttl['ttl'];
$dis_price = $total_price - ($total_price * ($discount / 100));
}else{
$dis_price=$res_ttl['ttl'];
}
$name = mysqli_real_escape_string($conn,$_POST['fname']);
$lname = mysqli_real_escape_string($conn,$_POST['lname']);
$mob_no = mysqli_real_escape_string($conn,$_POST['mob_no']);
$email_id = mysqli_real_escape_string($conn,$_POST['email_id']);
$landmark = mysqli_real_escape_string($conn,$_POST['landmark']);
$country = mysqli_real_escape_string($conn,$_POST['country']);
$state = mysqli_real_escape_string($conn,$_POST['state']);
$city = mysqli_real_escape_string($conn,$_POST['city']);
$pincode = mysqli_real_escape_string($conn,$_POST['pincode']);
$addr = mysqli_real_escape_string($conn,$_POST['addr']);
$address="billing";
$statuss=1;
$dis_price=round($dis_price,2);
 $sql_rd="INSERT into user_payment(order_id,user_id,cart_id,promo_id,total_price,name,lname,phone,country,state,city,landmark,pincode,address,payment_method,pay_status,payable_status,message,created_date) values ('".$order."','".$id."','".$names_str."','".$pr_id."','".$dis_price."','".$name."','".$lname."','".$mob_no."','".$country."','".$state."','".$city."','".$landmark."','".$pincode."','".$addr."','".$payment_method."','".$payment_status."','".$statuss."','".$message."','".$date."')";
    echo $sql_rd;
if(mysqli_query($conn,$sql_rd)){
    $last_id= mysqli_insert_id($conn);
    $session_id=$_SESSION['prd_session_id'];
    $sql_ptm="select * from user_payment where id='".$last_id."'";
    $result_ptm = mysqli_query($conn, $sql_ptm);
    $res_ptm= mysqli_fetch_array($result_ptm);
    $plan_id=$res_ptm['cart_id'];
    // $rid = explode(",",$plan_id);
    // $user_id=$_SESSION['id'];
    // foreach($rid as $pm_id){
    // $status="1";
    // $stat="0";
    // $sql_paytm ="UPDATE  addto_cart SET payment_status='$status',invoice_id='$stat' WHERE user_id='".$user_id."' and id='".$pm_id."'"; 
    // $result_ptm=mysqli_query($conn,$sql_paytm) or die(mysqli_error());
    // $sql_adt="select addto_cart.*  from addto_cart  where id='".$pm_id."'";
    // $result_dt = mysqli_query($conn, $sql_adt);
    // $rowdt=mysqli_fetch_array($result_dt);
    // $pid=$rowdt['prod_id'];
    // $qty=$rowdt['quantity'];
    // $pd_id=$rowdt['prod_details_id'];
    // $sql_pd=mysqli_fetch_array(mysqli_query($conn,"select *  from product_detail where id='".$pd_id."'"));
    // $total_qty=$sql_pd['total_no_prod_quantity'];
    //  $totalqty=$total_qty - $qty;
    // $sqlp ="UPDATE product_detail SET total_no_prod_quantity='$totalqty' WHERE id='".$pd_id."'";
    // $resp=mysqli_query($conn,$sqlp) or die(mysqli_error()); 
    // if($totalqty == "0"){
    // $prstatus="Out_Of_Stock";
    // $stock="0";
    // $sqlsts ="UPDATE  product  SET status='$prstatus',in_stock='$stock' WHERE id='$pid'"; 
    // $rests=mysqli_query($conn,$sqlsts) or die(mysqli_error());
    //  }
    // }
    $sqqq="select * from user_profile where id=".$user_id;
    $sql1=mysqli_query($conn, $sqqq);
    $row1=mysqli_fetch_array($sql1);
    $total_price = $res_ptm['total_price'];
    $order_id = $res_ptm['order_id'];
    $email = $row1['email'];
    $name = $row1['fname'];
    $date = date("d-m-Y");
    $from_team = "Amerx";
    $from_website = "https://www.amerx.in/index.php";
    $from_email = "no-reply@amerx.in";
    $subject = "Order Placed With Amerx";
    $to = $email;
//       $message = "
//                 <html>
//                     <head>
//                         <title>$body_title</title>
//                     </head>
//                     <body style='border: 4px solid #57b018;background-color:#f7f7f7; color:#000;'>
//                         <center>
//                             <div style='width: $width_of_mail_body; padding: $padding_of_mail_body;' >
                                
//                                     <table style='width:99%;text-align:left; padding-left:10px;padding-right:10px;background-color:#f7f7f7;border-bottom:1px solid #ccc;'>
//                                     <tr>
//                                     <td style='font-size:20px;font-weight:bold;height:40px;'>$name Your Order Placed   </td>
//                                      </tr> 
//                                     </table>

//                                      <table style='width:99%;text-align:left; background-color:#f7f7f7;padding-left:10px;padding-right:10px;'>
//                                     </table>

//                                     <table style='width:99%;background-color:#f7f7f7;padding-left:10px;padding-right:10px;'>
//                                     <tr>
//                                     <td style='height:40px;'><strong>Order Id :</strong></td>
//                                     <td style='height:40px;'> <font style='color:#84c225'>$order_id</font></td>
//                                     </tr>
//                                     <tr>
//                                     <td style='height:40px;'><strong>Total Cost :</strong></td>
//                                     <td style='height:40px;'> $<font style='color:#84c225'>$total_price</font></td>
//                                     </tr>
//                                      <tr>
//                                     <td style='height:40px;'><strong>Payment Method :</strong></td>
//                                     <td style='height:40px;'> <font style='color:#84c225'>Cash On Delivery</font></td>
//                                     </tr>
//                                     </table>

//                                     <table style='width:99%;text-align:left;padding-left:10px;padding-right:10px; background-color:#f7f7f7;'>
//                                     <tr>
//                                     <td colspan='2' style='height:30px;'>Happy Shopping! </td> 
//                                      </tr> 
//                                      <tr>
//                                       <tr>
//                                     <td colspan='2' style='height:20px;'>Team Amerx </td> 
//                                      </tr> 
//                                      <tr>
//                                     <td colspan='2' style='height:40px;'><a href='mailto:info@amerx.in'>info@amerx.in</a></td> 
//                                      </tr> 
//                                     </table>
 
//                             </div>
//                         </center>
//                     </body>
//                 </html>";             
// $mail = new PHPMailer(true); // create a new object
// $mail->IsSMTP(); // enable SMTP
// $mail->SMTPDebug = 0; // debugging: 1 = errors and messages, 2 = messages only
// $mail->SMTPAuth = true; // authentication enabled
// $mail->SMTPSecure = 'ssl'; // secure transfer enabled REQUIRED for Gmail
// $mail->Host = "cs2006.webhostbox.net";
// $mail->Port = 465; // or 587
// $mail->IsHTML(true);
// $mail->Username = "no-reply@amerx.in";
// $mail->Password = "vrMifZSf2}-m";
// $mail->SetFrom("no-reply@amerx.in");
// $mail->Subject = "Order Placed successfully With Amerx";
// $mail->Body = $message;
// $mail->AddAddress($to);
//  if(!$mail->Send()) {
//     echo "Mailer Error: " . $mail->ErrorInfo;
//  } else {
//    $to_email = "damu2018@gmail.com";
//     $messages = "
//                 <html>
//                     <head>
//                         <title>$body_title</title>
//                     </head>
//                     <body style='border: 4px solid #57b018;background-color:#f7f7f7; color:#000;'>
//                         <center>
//                             <div style='width: $width_of_mail_body; padding: $padding_of_mail_body;' >
                                
//                                     <table style='width:99%;text-align:left; padding-left:10px;padding-right:10px;background-color:#f7f7f7;border-bottom:1px solid #ccc;'>
//                                     <tr>
//                                     <td style='font-size:20px;font-weight:bold;height:40px;'>Order Placed By $name </td>
//                                      </tr> 
//                                     </table>

//                                      <table style='width:99%;text-align:left; background-color:#f7f7f7;padding-left:10px;padding-right:10px;'>
//                                     </table>

//                                     <table style='width:99%;background-color:#f7f7f7;padding-left:10px;padding-right:10px;'>
//                                     <tr>
//                                     <td style='height:40px;'><strong>Total Price :</strong></td>
//                                     <td style='height:40px;'> $<font style='color:#84c225'>$total_price</font></td>
//                                     </tr>
//                                      <tr>
//                                     <td style='height:40px;'><strong>Payment Method :</strong></td>
//                                     <td style='height:40px;'> <font style='color:#84c225'>Cash On Delivery</font></td>
//                                     </tr>
//                                     </table>

//                                     <table style='width:99%;text-align:left;padding-left:10px;padding-right:10px; background-color:#f7f7f7;'>
//                                      <tr>
//                                      <tr>
//                                     <td colspan='2' style='height:40px;'><a href='mailto:info@amerx.in'>info@amerx.in</a></td> 
//                                      </tr> 
//                                     </table>
 
//                             </div>
//                         </center>
//                     </body>
//                 </html>";  
// $mail = new PHPMailer(true); // create a new object
// $mail->IsSMTP(); // enable SMTP
// $mail->SMTPDebug = 0; // debugging: 1 = errors and messages, 2 = messages only
// $mail->SMTPAuth = true; // authentication enabled
// $mail->SMTPSecure = 'ssl'; // secure transfer enabled REQUIRED for Gmail
// $mail->Host = "cs2006.webhostbox.net";
// $mail->Port = 465; // or 587
// $mail->IsHTML(true);
// $mail->Username = "no-reply@amerx.in";
// $mail->Password = "vrMifZSf2}-m";
// $mail->SetFrom("no-reply@amerx.in");
// $mail->Subject = "Order Placed successfully With Amerx";
// $mail->Body = $messages;
// $mail->AddAddress($to_email);
// $mail->addCC('mmjaved07@gmail.com');
// $mail->addBCC('mmjaved07@gmail.com');
//  if(!$mail->Send()) {
//     echo "Mailer Error: " . $mail->ErrorInfo;
//  } else {                                       
//      header("location:invoice.php?id=".$last_id);
//     }
 // }
   header("location:book_payment.php?id=".$last_id);
  }
}
?>
<!DOCTYPE html>
<html lang="zxx">

<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="description" content="Amerx - Online Store" />
     <meta name="keywords" content="men cloths, tshirts, cap, men tshirt, men caps, amerx tshirt" />
    <meta name="author" content="" />
    <title>Amerx</title>
    <?php include("includes/css.php");?>
    <style type="text/css">.billing-info-wrap .billing-info label{margin:0 0 1px;font-weight: 600}.billing-info-wrap .billing-info input, .billing-info-wrap .additional-info-wrap textarea{background-color:#fff;}.billing-info-wrap .additional-info-wrap .radio-inline {display: inline!important;margin-right:10px!important;}.billing-info-wrap .billing-info select{width:100%;
        border:1px solid #e5e5e5;background-color:#fff;color:#495057;font-size:14px;height:45px;padding:4px 16px 0;}.your-order-area .your-order-wrap .payment-condition{border-bottom:0px solid #e5e5e5;}.shop-checkout-area{padding:45px 0 45px;}</style>
</head>
<body>
    <div class="wrapper home-default-wrapper">
        <?php include("includes/header.php");?>
        <main class="main-content">
             <section class="">
                <div class="container">
                    <div class="row align-items-center">
                        <div class="col-lg-12 m-auto">
                            <div class="page-title-content text-left">
                                 <div class="bread-crumbs"><a href="index.php">Home</a><span class="breadcrumb-sep"> / </span><span>Checkout</span></div>
                            </div>
                        </div>
                    </div>
                </div>
            </section> 
            <section class="product-area shop-checkout-area">
                <div class="container">
                   
                     <form action="" method="post">
                    <div class="row">
                       
                        <div class="col-lg-7">
                            <div style="background-color:#f3f3f3;padding:20px">
                            <div class="billing-info-wrap">
                                <h3 style="font-weight:900;font-size:24px;">Billing Details</h3>
                            <?php $uid='11';
                            $sql_user="select * from user_profile where id='".$uid."'";
                            $result_user = mysqli_query($conn, $sql_user);
                            $res_user= mysqli_fetch_array($result_user);
                            $country=$res_user['country'];
                            $state=$res_user['state'];
                            $city=$res_user['city'];
                            $sql_country =mysqli_query($conn,"select * from countries where id = '$country'");
                            $row_country = mysqli_fetch_array($sql_country);
                            $sql_state = mysqli_query($conn,"select * from states where id = '$state'");
                            $row_state = mysqli_fetch_array($sql_state);
                            $sql_city = mysqli_query($conn,"select * from cities where id = '$city'");
                            $row_city = mysqli_fetch_array($sql_city);
                             ?>
                                <div class="row">
                                    <div class="col-md-6 col-12">
                                        <div class="billing-info mb-10">
                                            <label>First Name <abbr class="required" title="required">*</abbr></label>
                                            <input type="text" name="fname" id="fname" required>
                                            <span style="color: red" id="fname_alert"></span>
                                        </div>
                                    </div>
                                   
                                   <div class="col-md-6 col-12">
                                        <div class="billing-info mb-10">
                                            <label>Last Name <abbr class="required"></abbr></label>
                                            <input type="text" name="lname" id="lname" required>
                                            <span style="color: red" id="lname_alert"></span>
                                        </div>
                                    </div>  
                                    <div class="col-md-6 col-12">
                                        <div class="billing-info mb-10">
                                            <label>Phone <abbr class="required" title="required">*</abbr></label>
                                            <input type="text" name="" value="+91"  style="width:20%;float:left;margin-bottom: 10px;">
                                            <input type="text" name="mob_no" id="phone" style="width:80%;float:left;margin-bottom: 10px;" required maxlength="10"> 
                                            <span style="color: red" id="phone_alert"></span>
                                        </div>
                                    </div>
                                    <div class="col-md-6 col-12">
                                        <div class="billing-info mb-10">
                                            <label>Email-Id <abbr class="required" title="required">*</abbr></label>
                                            <input type="email" name="email_id" id="email_id">
                                            <span style="color: red" id="emailid_alert"></span>
                                        </div>
                                    </div>
                                    <div class="col-md-6 col-12">
                                        <div class="billing-info mb-10">
                                            <label>Block / Unit No. <abbr class="required" title="required">*</abbr></label>
                                            <input type="text" name="landmark" id="landmark">
                                            <span style="color: red" id="landmark_alert"></span>
                                        </div>
                                    </div> 
                                    <div class="col-md-6 col-12">
                                        <div class="billing-info mb-10">
                                            <label>Country / Region <abbr class="required" title="required">*</abbr></label>
                                            <div class="select-style">
                                                <select class="" name="country" id="country_id">
                                                    <option value="">Select</option>
                                                 <?php $sql_country = mysqli_query($conn,"select * from countries where id='101'")or die(mysqli_error($con));
                                                 while($row_country = mysqli_fetch_array($sql_country)){ ?>
                                                  <option value="<?php echo $row_country["id"];?>"><?php echo $row_country["name"];?></option>
                                                   <?php } ?> 
                                                 </select>
                                            </div>
                                        </div>
                                    </div>

<div class="col-md-6 col-12">
                                        <div class="billing-info mb-10">
                                            <label>State <abbr class="required" title="required">*</abbr></label>
                                            <div class="select-style">
                                                <select class="select-active" name="state" id="state_id">
                                                  <option value=""></option>
                                                 </select>
                                            </div>
                                        </div>
                                    </div>
                                  <div class="col-md-6 col-12">
                                        <div class="billing-info mb-20">
                                            <label>Town / City <abbr class="required" title="required">*</abbr></label>
                                            <select class="form-control select" name="city" id="city_id">
                                               <option value=""></option>
                                            </select>
                                        </div>
                                    </div>

<div class="col-md-6 col-12">
                                        <div class="billing-info mb-10">
                                            <label>Street Address <abbr class="required" title="required">*</abbr></label>
                                            <input class="billing-address" name="addr" placeholder="House number and street name" type="text">
                                        </div>
                                    </div>
                                   
                                    <div class="col-md-6 col-12">
                                        <div class="billing-info mb-10">
                                            <label>Postcode / ZIP (optional) <abbr class="required" title="required">*</abbr></label>
                                            <input type="text" name="pincode" id="pincode">
                                            <span style="color: red" id="pincode_alert"></span>
                                        </div>
                                    </div> 
                                    <div class="col-md-12 col-12">
                                    <div class="billing-info mb-10">
                                    <label>Order Notes (optional)</label>
                                    <textarea placeholder="Notes about your order, e.g. special notes for delivery. " name="message" style="width:100%"></textarea>
                                </div>
                                </div>
                             </div>
                            </div>
                          </div> 
                        </div> 
                        <div class="col-lg-5">
                            <div class="your-order-area">
                                <h3 style="font-weight:900;font-size:24px;">Your order</h3>
                                <div class="your-order-wrap">
                                    <div class="your-order-info-wrap">
                                        <div class="your-order-title">
                                            <h4><strong style="width:42%">Product</strong> <span><strong>Size</strong></span><span><strong>Qty.</strong></span> <span><strong>Subtotal</strong></span></h4>
                                        </div>
                                        <div class="your-order-product">
                                            <ul> 
                                            <?php $user_id='11';
                                            $session_id=$_SESSION['prd_session_id'];
                                            $sql_qry="select addto_cart.*,product.prod_name from addto_cart join product on addto_cart.prod_id=product.id where  session_id='".$session_id."' and invoice_id='1'";
                                            $resu = mysqli_query($conn, $sql_qry);
                                                while($res_data= mysqli_fetch_assoc($resu)){
                                                $prd_did=$res_data['prod_details_id'];
                                                $sql_prdd="SELECT * from product_detail where id='$prd_did'";
                                                $exe_prdd=mysqli_query($conn,$sql_prdd);
                                                $res_prdd=mysqli_fetch_array($exe_prdd);
                                                $ttl=$res_data['price'] * $res_data['quantity']; ?>
                                                <li><strong style="width:42%;font-size:12px;line-height:18px;"><?php echo $res_data['prod_name'];?></strong><strong><?php echo $res_data['prod_size']?></strong><span><?= $res_data['quantity']; ?></span><span>Rs.<?= $res_data['price'];?></span></li>
                                                <?php } ?>
                                            </ul>
                                        </div>
                                        <?php $session_id=$_SESSION['prd_session_id'];
                                         $sql_ttl="select SUM(quantity * price) as ttl from addto_cart where session_id='".$session_id."' and addto_cart.invoice_id='1'";
                                        $resu_ttl = mysqli_query($conn, $sql_ttl);
                                        $res_ttl= mysqli_fetch_assoc($resu_ttl); 
                                        $totalp=$res_ttl['ttl']; ?>
                                        <div class="your-order-subtotal">
                                            <h3><strong>Subtotal </strong><span>Rs.<?= $totalp; ?></span></h3>
                                        </div>
                                       <?php $pr_id=$_GET['pr'];
                                        if($pr_id !="0"){
                                        $pr_id=$_GET['pr'];
                                        $sql_pr="select * from promo_code where id='".$pr_id."'";
                                        $result_code = mysqli_query($conn, $sql_pr);
                                        $res_code= mysqli_fetch_assoc($result_code);
                                         $discount=$res_code['discount'];
                                         $total_price=(int)$res_ttl['ttl'];
                                         $dis_price = $total_price - ($total_price * ($discount / 100)); ?>
                                        <div class="your-order-subtotal">
                                            <h3><strong>Discount(%) </strong><span><?= $discount; ?></span></h3>
                                        </div>
                                        <?php }else{ $dis_price=$res_ttl['ttl']; } ?>
                                        <div class="your-order-total">
                                            <h3><strong>Total </strong><span>Rs.<?= $dis_price; ?> </span></h3>
                                        </div>
                                    </div>
                                    <div class="payment-method">
                                        
                                    
                                     <div class="pay-top sin-payment">
                                            <input id="payment-method-3" class="input-radio" type="radio" value="cod" name="payment_method" checked="checked">
                                            <label for="payment-method-3">Razorpay </label>
                                            <div class="payment-box payment_method_bacs">
                                                <p>Pay with credit card,debit card. </p>
                                            </div>
                                        </div>
                                    </div>
                                    <div class="payment-condition mb-1">
                                        <p>Your personal data will be used to process your order, support your experience throughout this website, and for other purposes described in our <a href="privacy-policy.php">privacy policy</a>.</p>
                                    </div>
                                </div>
                                <div class="place-order">
                                    <input type="submit" value="Place Order" id="chk_submit" name="order_comm" class="btn btn-secondary mb-2 btn-lg" class="btn btn-primary">
                                </div>
                            </div>
                        </div>
                    </div>
                   </form> 
                </div>
            </section>
            
        </main> 
        <?php include("includes/footer.php");?>
    </div>
    <?php include("includes/js.php");?>
    <script type="text/javascript">
       $(document).ready(function(){
            $('#country_id').on('change', function(){
                var cat_id = $(this).val();
               //alert(cat_id);
                if(cat_id){
                    $.ajax({
                        type:'POST',
                        url:'ajax_city.php',
                        data:'cat_id='+cat_id,
                        success:function(html){
                            $('#state_id').html(html);
                            console.log(html);
                           // $('#city').html('<option value="">Select Division</option>'); 
                        }
                    }); 
                }
            });
            $('#state_id').on('change', function(){
                var scat_id = $(this).val();
                if(scat_id){
                    $.ajax({
                        type:'POST',
                        url:'ajax_city.php',
                        data:'scat_id='+scat_id,
                        success:function(html){
                            $('#city_id').html(html);
                        }
                    }); 
                }
            });
        });

$(document).ready(function(){  
    $("#fname").keyup(function(){
      return validatetext('fname','fname_alert'); 
    });   }); 
    $(document).ready(function(){  
    $("#lname").keyup(function(){
      return validatetext('lname','lname_alert'); 
    });   }); 
    $(document).ready(function(){  
    $("#landmark").keyup(function(){
      return validatetext('landmark','landmark_alert'); 
    });   }); 
    $(document).ready(function(){  
        $("#phone").keyup(function(){
          return validmobile('phone','phone_alert'); 
    });   }); 
    $(document).ready(function(){  
        $("#email_id").keyup(function(){
          return validemailid('email_id','emailid_alert'); 
    });   }); 
     $(document).ready(function(){  
        $("#pincode").keyup(function(){
          return validatetext('pincode','pincode_alert'); 
    });   }); 
    $(document).ready(function(){ 
    $("#chk_submit").click(function(){
      var fname    = validatetext('fname','fname_alert'); 
      var lname    = validatetext('lname','lname_alert'); 
      var landmark    = validatetext('landmark','landmark_alert'); 
      var phone    = validmobile('phone','phone_alert'); 
      var email_id    = validemailid('email_id','emailid_alert'); 
      var pincode    = validatetext('pincode','pincode_alert'); 
      if(phone == 0 || email_id == 0 || fname == 0 || lname == 0 || landmark == 0 || pincode == 0 )
      {
        return false;
      }

});  
    });  
    </script>
</body>

</html>

Editing File: guest-checkout.php