NoNodePay/order.php at master · coinables/NoNodePay · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
<?php
require_once('config.php');

//session
session_start();

if(!isset($_SESSION["logged"])){
	header("Location: index.php");
	exit();
}

$order = $_GET['id'];

$queryOrder = "SELECT * FROM orders WHERE orderid = '$order'";
$doOrder = mysqli_query($conn, $queryOrder) or die(mysqli_error($conn));
$fetchOrder = mysqli_fetch_assoc($doOrder);
$uname = $fetchOrder['name'];
$ship = $fetchOrder['address'];
$ship2 = $fetchOrder['address2'];
$city = $fetchOrder['city'];
$state = $fetchOrder['state'];
$zip = $fetchOrder['zip'];
$country = $fetchOrder['country'];
$email = $fetchOrder['email'];
$confirmShip = htmlspecialchars($uname)."<br>".htmlspecialchars($ship)."<br>".htmlspecialchars($ship2)."<br>".htmlspecialchars($city).", ".htmlspecialchars($state)." ".htmlspecialchars($zip)."<br>".htmlspecialchars($country)."<br>".htmlspecialchars($email);
$address = $fetchOrder['payto'];
$items = $fetchOrder['items'];
$itemsArr = explode(" ", $items);
$orderItems = count($itemsArr);
$paid = $fetchOrder['paid'];
$recd = $fetchOrder['recd'];
$recdCalc = $recd / 100000000;
$cost = $fetchOrder['cost'];
if($cost > $recdCalc){
  $difMsg = "Under Paid";
} else if($recdCalc > $cost){
  $difMsg = "Over Paid";
} else {
  $difMsg = "None";
}
if($paid == 1){
   $paidMsg = "Yes - <a href='https://blockchain.info/address/".$address."' target='_blank'>View on Blockchain.info</a>";
} else {
   $paidMsg = "No - <form method='post'><input class='checkPmt' type='submit' value='Check For Payment' name='".$order."'></form>";
}

if(isset($_POST[$order])){
		   $order_num = $order;
		   $address = $address;
		   $getBalance = file_get_contents("https://blockchain.info/q/addressbalance/".$address."?confirmations=1");
		   $getUnconfirmed = file_get_contents("https://blockchain.info/q/addressbalance/".$address."?confirmations=0");
		   if($getBalance > 0)
		   {
		   $queryUpdate = "UPDATE orders SET paid = 1, recd = $getBalance WHERE orderid = '$order'";
		   $doUpdate = mysqli_query($conn, $queryUpdate) or die(mysqli_error($conn));
		   header("Location: order.php");
		   } elseif($getUnconfirmed > 0){
		   $utxConvert = $getUnconfirmed / 100000000;
		   $utxConvert = number_format($utxConvert, 8);
		   $message = "Unconfirmed payment pending: ".$utxConvert."BTC";
		   }else {
		   $message = "No Payment Yet";
		   }
		}

if(isset($_POST['complete'])){
   $queryComplete = "UPDATE orders SET complete = 1 WHERE orderid = '$order'";
   $doComplete = mysqli_query($conn, $queryComplete) or die(mysqli_error($conn));
   $message = "Order Marked Complete";
}

?>
<!DOCTYPE html>
<html>
<head>
<title>Order</title>
<link rel="stylesheet" type="text/css" href="style.css">
<script type="text/javascript" src="js/jquery.min.js"></script>
<script type="text/javascript" src="js/qrcode.js"></script>
</head>
<body>
<h1><?php echo $storeName; ?></h1>
<?php if(isset($message)){ echo "<center>".$message."</center>"; } ?>
<div id="viewCart">
  <span id="viewTitle">Order: <?php echo $order; ?></span><a href="admin.php">Back to Admin Panel</a><br><br>
     <b>Paid:</b> <?php echo $paidMsg; ?><br>
	 <b>Amount Paid:</b> <?php echo number_format($recdCalc, 8); ?><br>
	 <b>Order Amount:</b> <?php echo $cost; ?><br>
	 <b>Difference:</b> <?php echo $difMsg; ?><br>
	 <form method="post"><input type="submit" name="complete" value="Mark Order Complete"></form>
	 <br>
	 Receiving Address: <?php echo $address; ?>
	 <br>
	 <br>
	 Ship To:
  <div class="confirmShip">
  <?php echo $confirmShip; ?>
  </div><br><br>
  Order:
  <div class="confirmShip">
 <?php echo $items."<br>";
 for($i=0; $i<$orderItems; $i++)
	{
	$queryLoopOrder = "SELECT * FROM products WHERE id = '$itemsArr[$i]'";
	$doLoopOrder = mysqli_query($conn, $queryLoopOrder);
	$rowLoopOrder = mysqli_fetch_assoc($doLoopOrder);
	$loopName = $rowLoopOrder['name'];
	$loopPrice = $rowLoopOrder['price'];
	echo $loopName." $".$loopPrice."<br>";
	}
 ?>

  </div><br>
</div>
<br>
</body>
<script   src="https://code.jquery.com/jquery-2.2.4.min.js"   integrity="sha256-BbhdlvQf/xTY9gja0Dq3HiwQF8LaCRTXxZKRutelT44="   crossorigin="anonymous"></script>

</html>