bnmbnmbnhjkhjkhjkhjktyutyutyuytutyutyutyhgjgjghjgjghjguytutyry

halohalo bnmbnmbnhjkhjkhjkhjktyutyutyuytutyutyutyhgjgjghjgjghjguytutyry

<?php
//include "back_functions.php";

if($_POST['update_customer']=='Update Customer Details'){
	$order_id = $_POST['order_id']; 
	$cust_name = $_POST['cust_name']; 
	$cust_mobile = $_POST['cust_mobile']; 
	$cust_email = $_POST['cust_email']; 
	$customer_details = $cust_name.",".$cust_mobile.",".$cust_email;
	$updtstatus="UPDATE shopping_tbl SET customer_details='$customer_details',`order_modified`=NOW() WHERE order_id='$order_id' ";
	$rsult_sts = mysqli_query($link,$updtstatus) or die("Cannot Update");
	echo "<script>window.location.href='view_orders.php'</script>";
}
if($_POST['update_payment']=='Update Payment Details'){
	$order_id = $_POST['order_id']; 
	$payment_status = $_POST['payment_status']; 
	$payment_type = $_POST['payment_type']; 
	$payment_date = $_POST['payment_date'];
	$payment_refno = $_POST['payment_refno'];
	$payment_desc = $_POST['payment_desc'];
	//$customer_details = $cust_name.",".$cust_mobile.",".$cust_email;
	if($payment_status != ""){
	$updtstatus1="UPDATE shopping_tbl SET payment_status='$payment_status', `order_modified`=NOW() WHERE order_id='$order_id' ";
	$rsult_sts1 = mysqli_query($link,$updtstatus1) or die("Cannot Update");
	}
	if($payment_type != ""){
	$updtstatus1="UPDATE shopping_tbl SET payment_type='$payment_type', `order_modified`=NOW() WHERE order_id='$order_id' ";
	$rsult_sts1 = mysqli_query($link,$updtstatus1) or die("Cannot Update");    
	}
	$updtstatus="UPDATE shopping_tbl SET payment_date='$payment_date', payment_refno='$payment_refno', payment_desc='$payment_desc', `order_modified`=NOW() WHERE order_id='$order_id' ";
	$rsult_sts = mysqli_query($link,$updtstatus) or die("Cannot Update");
	echo "<script>window.location.href='view_orders.php'</script>";
}

if($_POST['update_delivery']=='Update Delivery Details'){
	$order_id = $_POST['order_id'];  
	$delivery_details = $_POST['address']; 
	$updtstatus="UPDATE shopping_tbl SET delivery_details='$delivery_details',`order_modified`=NOW() WHERE order_id='$order_id' ";
	$rsult_sts = mysqli_query($link,$updtstatus) or die("Cannot Update");
	echo "<script>window.location.href='view_orders.php'</script>";
}

if($_POST['update_order']=='Update Order'){
	$total = $_POST['total'];
	$discount = $_POST['discount'];
	$delivery_charge = $_POST['delivery_charge'];
	$discount_per = $_POST['discount_per'];
	$grand_total = $total + $delivery_charge - $discount;
	$order_id = $_POST['order_id']; 
	$updtstatus="UPDATE shopping_tbl SET discount_per='$discount_per', discount='$discount', delivery_charge='$delivery_charge', grand_total='$grand_total', `order_modified`=NOW() WHERE order_id='$order_id' ";  
	$rsult_sts = mysqli_query($link,$updtstatus) or die("Cannot Update");
	echo "<script>window.location.href='view_orders.php'</script>";
}
if($_POST['submit']=='Add Products'){
    $order_id = $_POST['order_id']; 
    $sno = $_POST['sno'];
    $lang = mysqli_real_escape_string($link,$_POST['lang']);
    $new_total = mysqli_real_escape_string($link,$_POST['new_total']);
    $total = $_POST['total'];
    $sub_total = $total+$new_total;
	$discount = $_POST['discount'];
	$delivery_charge = $_POST['delivery_charge'];
	$customer_details = $_POST['customer_details'];
	$delivery_details = $_POST['delivery_details'];
	$grand_total = $new_total + $total + $delivery_charge - $discount;
	mysqli_query($link,"update shopping_tbl set `total`='$sub_total',`grand_total`='$grand_total' where order_id='$order_id'");
    foreach($_POST['pid'] as $pid){
		//echo "entered";
		list($proid,$product_name,$product_name_en) = mysqli_fetch_row(mysqli_query($link,"select id,product_name,product_name_en from product_tbl where product_id='$pid'"));
		list($inv_no,$inv_date,$state,$district,$pincode,$item_status,$order_status,$payment_type,$payment_date,$payment_status) = mysqli_fetch_row(mysqli_query($link,"select inv_no,inv_date,state,district,pincode,item_status,order_status,payment_type,payment_date,payment_status from shopping_tbl where order_id='$order_id'"));
        $qty = $_POST['qty'.$pid];
		$price = $_POST['price'.$pid];
		$ltotal = $_POST['ltotal'.$pid];
		mysqli_query($link,"INSERT INTO `shopping_tbl` (`sno`, `order_id`, `inv_no`,`inv_date`, `state`, `district`, `pincode`, `lang`, `customer_details`, `delivery_details`, `product_id`, `product_name`, `product_name_en`, `quantity`, `price`, `line_total`, `total`, `delivery_charge`, `grand_total`, `item_status`, `order_status`, `order_date`, `order_modified`, `order_modify_desc`, `ip_address`, `browser`) VALUES ('$sno', '$order_id', '$inv_no', '$inv_date', '$state', '$district', '$pincode', '$lang', '$customer_details', '$delivery_details', '$proid', '$product_name', '$product_name_en', '$qty', '$price', '$ltotal', '$sub_total', '$delivery_charge', '$grand_total', '$item_status', '$order_status', NOW(), NOW(), 'New Order', '$user_ip', '$agent')");
		
	
		list($max) = mysqli_fetch_row(mysqli_query($link,"SELECT MAX(id) AS max FROM `orderdetails_tbl`"));
        $max=$max+1;
        $auto="OD".$max."";
        $comment = "New Item Added";
        
		$updtstatus1=mysqli_query($link,"INSERT INTO `orderdetails_tbl` (`id`, `order_id`, `orderdetail_id`, `sno_id`, `order_modified`, `order_modify_desc`, `notify_sms`, `notify_email`, `order_status`, `courier`, `tracking_no`, `tracking_barcode`, `tracking_link`, `delivered_by`, `delivered_to`) VALUES ('', '$order_id', '$auto', '$pid', now(), '$comment', '$notify_sms', '$notify_email', '$order_status', '$courier', '$tracking_no', '$barcode_url', '$tracking_link', '$delivered_by', '$delivered_to')"); 
		$msg[] = "Successfully Updated!";
    }	
		
}

if($_POST['update_status']=='Update')
{
    $compan_name = "Aryam Iyarkai";	
    $order_id = $_POST['order_id'];
    $sno_id = $_POST['product_id'];
    $order_status = $_POST['order_status_id'];
   
    	list($max) = mysqli_fetch_row(mysqli_query($link,"SELECT MAX(id) AS max FROM `orderdetails_tbl`"));
    $max=$max+1;
    $auto="OD".$max."";
//list($inv_no)=mysql_fetch_row(mysql_query("select inv_no from shopping_tbl where order_id='$order_id'"));
//if($inv_no != ""){
	$courier = $_POST['courier'];
	$tracking_no = $_POST['tracking_no'];
	$tracking_link = $_POST['tracking_link'];
	$delivered_by = $_POST['delivered_by'];
	$delivered_to = $_POST['delivered_to'];
	$notify_sms = $_POST['notify_sms'];
	$notify_email = $_POST['notify_email'];
	$comment = $_POST['comment'];
	$updtstatus1="INSERT INTO `orderdetails_tbl` (`id`, `order_id`, `orderdetail_id`, `sno_id`, `order_modified`, `order_modify_desc`, `notify_sms`, `notify_email`, `order_status`, `courier`, `tracking_no`, `tracking_barcode`, `tracking_link`, `delivered_by`, `delivered_to`) VALUES ('', '$order_id', '$auto', '$sno_id', now(), '$comment', '$notify_sms', '$notify_email', '$order_status', '$courier', '$tracking_no', '$barcode_url', '$tracking_link', '$delivered_by', '$delivered_to')"; 
	$rsult_sts1 = mysqli_query($link,$updtstatus1) or die("Cannot Insert");
	$today = date("Y-M-d H:i:s");
	
    if($sno_id == "all"){
        $updtstatus="UPDATE shopping_tbl SET `item_status`='$order_status',order_status='$order_status', order_modify_desc='$comment', `order_modified`=NOW() WHERE order_id='$order_id'";  
        $rsult_sts = mysqli_query($link,$updtstatus) or die("Cannot Update");
    }
    else
    {
        //echo "UPDATE shopping_tbl SET item_status='$order_status', order_modify_desc='$comment', `order_modified`=NOW() WHERE order_id='$order_id' and product_id='$sno_id'";
        $updtstatus="UPDATE shopping_tbl SET item_status='$order_status', order_modify_desc='$comment', `order_modified`=NOW() WHERE order_id='$order_id' and product_id='$sno_id'";  
        $rsult_sts = mysqli_query($link,$updtstatus) or die("Cannot Update");
    }
    if($order_status == "Cancelled"){
        list($sub_total) = mysqli_fetch_row(mysqli_query($link,"select SUM(line_total) as sub_total from shopping_tbl where order_id='$order_id' and item_status!='Cancelled'"));
        list($delivery_charge,$dicount) = mysqli_fetch_row(mysqli_query($link,"select `delivery_charge`,`discount` from shopping_tbl where order_id='$order_id'"));
        $grand_total = $sub_total + $delivery_charge - $dicount; 
        mysqli_query($link,"UPDATE shopping_tbl SET `total`='$sub_total',`grand_total`='$grand_total' where order_id='$order_id'");
    }  
		
if($notify_email != 0){
$sel_order=mysqli_query($link,"select * from  shopping_tbl where order_id='$order_id'");
$res_order=mysqli_fetch_object($sel_order);
$cust = $res_order->customer_details;
$cus = explode(",",$cust);
$name = $cus[0];
$mobile = $cus[1];
$emailid = $cus[2];
$address = $res_order->delivery_details;    
$msg = '<table width="100%" border="0" cellspacing="0" cellpadding="0" style="width: 640px; color: rgb(51, 51, 51); margin: 0 auto; border-collapse: collapse;">
<tr>
<td>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td>
        <table width="100%" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td width="100%" style="padding:5px;" colspan="2" align="center"><img src="http://www.aramiyarkai.com/img/logo_english.png" height="100" /></td>
          </tr>
        </table>
    </td>
  </tr>
  <tr>
    <td>
    <h3>Hello '.$name.',</h3>
	<p>We have updated your order based on product availability. Please call us if you have any queries.</p>
    <br />
    <table width="100%" border="0" cellspacing="0" cellpadding="0" style="background:#F2F2F2; padding:5px;">
      <tr>
        <td width="100%" rowspan="4" valign="top"><p>Your order will be sent to: <br /></p>
        <address>
        '.$name.',<br /> 
        '.$address.',<br /> 
        '.$mobile.'
        </address>
        </td>
      </tr>
    </table>
    <br />
    <p>'.$comment.'</p><br />
    </td>
  </tr>
  <tr>
    <td>
    <h3 style="border-bottom:1px #ccc solid;">Order Details</h3><br />
    <p>Order #'.$order_id.'</p>
    <p>Placed on '.$today.'</p><br />
    <table width="100%" border="0" cellspacing="0" cellpadding="0">';
     $msg .='<tr>
        <td width="40%"><b>Products</b></td> 
		<td width="20%"><b>Quantity</b></td> 
		<td width="20%" align="right"><b>Rate</b></td>
		<td width="20%" align="right"><b>Line Total</b></td>
		<td width="20%" align="right"><b>Status</b></td>
      </tr>';
    if($sno_id == "all"){
	$sel_rw = mysqli_query($link,"select * from shopping_tbl where order_id='$order_id'");
	}
	else
	{
	$sel_rw = mysqli_query($link,"select * from shopping_tbl where order_id='$order_id' and product_id='$sno_id'");	
	}
	
	while($row_pro = mysqli_fetch_object($sel_rw))
    {
		
		//echo "entered";
		$pid = $row_pro->product_id;
		$product_name = $row_pro->product_name." - ".$row_pro->product_name_en;
		//list($product_name) = mysql_fetch_row(mysql_query("select  CONCAT(product_name, ' - ', product_name_en) as product_name from product_tbl where product_id='$pid'"));
		$qty = $row_pro->quantity;
		$price = $row_pro->price;
		$ltotal = $row_pro->line_total;
		$item_status = $row_pro->item_status;
		$msg .='
      <tr>
        <td width="50%">'.$product_name.'</td> 
		<td width="50%">'.$qty.'</td> 
		<td width="30%" align="right">Rs. '.$price.'</td>
		<td width="30%" align="right">Rs. '.$ltotal.'</td>
		<td width="30%" align="right">'.$item_status.'</td>
      </tr>';
    }
	
	$msg .='
      <tr>
      <td colspan="3" align="right">
      <table cellspacing="0" cellpadding="0" width="350">
          <tr>
            <td>Item Subtotal:</td>
            <td align="right">'.Rs.'. '.$res_order->total.'</td>
          </tr>
          <tr>
            <td>Discount:</td>
            <td align="right">'.Rs.'. '.$res_order->discount.'</td>
          </tr>
		  <tr>
            <td>Delivery Charges:</td>
            <td align="right">'.Rs.'. '.$res_order->delivery_charge.'</td>
          </tr>
          <tr>
            <td><strong>Grand Total:</strong></td>
            <td align="right"><strong>'.Rs.'. '.$res_order->grand_total.'</strong></td>
          </tr>
        </table>
        <br />
        <br />
      </td>
      </tr>
    </table>
    </td>
  </tr>
  <tr>
    <td>
    <p>Need to make changes to your order? Please Contact Us @ 9600836644.<br /><br />Thank you and see you again!<br /><br />
'.$company_name.'
</p>
    </td>
  </tr>
</table>
</td>
</tr>
</table>';
$subject = "Order Updated Successfully In $company_name";
$cc = "orders@aramiyarkai.com, aramiyarkai2019@gmail.com";

// To send HTML mail, the Content-type header must be set
$headers[] = 'MIME-Version: 1.0';
$headers[] = 'Content-type: text/html; charset=iso-8859-1';

// Additional headers
$headers[] = 'To: '.$name.' <'.$emailid.'>';
$headers[] = 'From: Orders <orders@aramiyarkai.com>';
$headers[] = 'Cc: '.$cc;
$headers[] = 'Bcc: '.$bcc;

// Mail it
mail($emailid, $subject, $msg, implode("\r\n", $headers));
}

echo "<script>window.location.href='edit_order_details.php?order_id=$order_id'</script>";
			 //}
			 //else
			 //{
				//$err[]="Kindly generate invoice number first!"; 
			 //}
			 }
?>