Devil Killer Is Here MiNi Shell
MiNi SheLL

Current Path : /hermes/bosweb01/sb_web/b2920/jinnaweb.naymu.com/
Linux boscustweb5001.eigbox.net 5.4.91 #1 SMP Wed Jan 20 18:10:28 EST 2021 x86_64
Current File : //hermes/bosweb01/sb_web/b2920/jinnaweb.naymu.com/order.php
<?php
/**************************************************************************************************
| Fiverr Clone Script
| http://www.fiverrclonescript.com
| webmaster@fiverrclonescript.com
|
|**************************************************************************************************
|
| By using this software you agree that you have read and acknowledged our End-User License 
| Agreement available at http://www.fiverrclonescript.com/eula.html and to be bound by it.
|
| Copyright (c) fiverrclonescript.com. All rights reserved.
|**************************************************************************************************/

include("include/config.php");
include("include/functions/import.php");

if ($_SESSION['USERID'] != "" && $_SESSION['USERID'] >= 0 && is_numeric($_SESSION['USERID']))
{	
	$templateselect = "order.tpl";
	$pagetitle = $lang['550']; //
	STemplate::assign('pagetitle',$pagetitle);
	
	$iid = intval(cleanit($_REQUEST['item']));
	if($iid > 0)
	{
		$query="SELECT A.IID, A.PID, A.totalprice, A.multi, B.gtitle FROM order_items A, posts B WHERE A.IID='".mysql_real_escape_string($iid)."' AND A.USERID='".mysql_real_escape_string($_SESSION['USERID'])."' AND A.PID=B.PID";
		$results=$conn->execute($query);
		$p = $results->getrows();
		STemplate::assign('p',$p[0]);
		$eid = base64_encode($p[0]['IID']);
		STemplate::assign('eid',$eid);
		$id = $p[0]['PID'];
		$multi = $p[0]['multi'];
		
		$query = "select funds, afunds, email from members where USERID='".mysql_real_escape_string($_SESSION['USERID'])."'"; //
		$executequery=$conn->execute($query);
		$funds = $executequery->fields['funds'];
		STemplate::assign('funds',$funds);
		$afunds = $executequery->fields['afunds'];
		STemplate::assign('afunds',$afunds);
		$fiverrclonescriptuemail = $executequery->fields['email']; //
		STemplate::assign('fiverrclonescriptuemail',$fiverrclonescriptuemail); //
		
		$fiverrclonescriptencoded = hash('md5', $p[0]['IID'].$p[0]['PID'].$p[0]['USERID']); //
		STemplate::assign('fiverrclonescriptencoded',$fiverrclonescriptencoded); //
		
		if($_POST['subbal'] == "1")
		{
			$price = $p[0]['totalprice'];
			if($funds >= $price)
			{
				$query1 = "UPDATE members SET funds=funds-$price WHERE USERID='".mysql_real_escape_string($_SESSION['USERID'])."'"; 
				$executequery1=$conn->execute($query1);
				
				if($multi > 1)
				{
					$query = "select price from posts where PID='".mysql_real_escape_string($id)."'"; 
					$executequery=$conn->execute($query);
					$eachprice = $executequery->fields['price'];
		
					for ($i=1; $i<=$multi; $i++)
					{
						$query = "INSERT INTO orders SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', PID='".mysql_real_escape_string($id)."', IID='".mysql_real_escape_string($iid)."', time_added='".time()."', status='0', price='".mysql_real_escape_string($eachprice)."'"; 
						$executequery=$conn->execute($query);
						$order_id = mysql_insert_id();
						if($order_id > 0)
						{
							$query = "INSERT INTO payments SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', OID='".mysql_real_escape_string($order_id)."', IID='".mysql_real_escape_string($iid)."', time='".time()."', price='".mysql_real_escape_string($eachprice)."', t='1', fiverrscriptdotcom_balance='1'"; 
							$executequery=$conn->execute($query);
							
							$query = "UPDATE posts SET rev=rev+$eachprice WHERE PID='".mysql_real_escape_string($id)."'"; 
							$executequery=$conn->execute($query);		
							
							fiverrclonescript_dotcom_fiverrclonescript_dotcom("fiverrclonescript_buyer_requirements", $_SESSION['USERID'], $order_id);					
						}
					}
					header("Location:$config[baseurl]/thank_you?g=".$eid);exit;
				}
				else
				{
					$query = "INSERT INTO orders SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', PID='".mysql_real_escape_string($id)."', IID='".mysql_real_escape_string($iid)."', time_added='".time()."', status='0', price='".mysql_real_escape_string($price)."'"; 
					$executequery=$conn->execute($query);
					$order_id = mysql_insert_id();
					if($order_id > 0)
					{
						$query = "INSERT INTO payments SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', OID='".mysql_real_escape_string($order_id)."', IID='".mysql_real_escape_string($iid)."', time='".time()."', price='".mysql_real_escape_string($price)."', t='1', fiverrscriptdotcom_balance='1'"; 
						$executequery=$conn->execute($query);
						
						$query = "UPDATE posts SET rev=rev+$price WHERE PID='".mysql_real_escape_string($id)."'"; 
						$executequery=$conn->execute($query);
						
						fiverrclonescript_dotcom_fiverrclonescript_dotcom("fiverrclonescript_buyer_requirements", $_SESSION['USERID'], $order_id);
					
						header("Location:$config[baseurl]/thank_you?g=".$eid);exit;
					}
				}
			}
		}
		elseif($_POST['fiverrclonescript_mybal'] == "1")
		{
			$price = $p[0]['totalprice'];
			if($afunds >= $price)
			{
				$query1 = "UPDATE members SET afunds=afunds-$price , used=used+$price WHERE USERID='".mysql_real_escape_string($_SESSION['USERID'])."'"; 
				$executequery1=$conn->execute($query1);
				
				if($multi > 1)
				{
					$query = "select price from posts where PID='".mysql_real_escape_string($id)."'"; 
					$executequery=$conn->execute($query);
					$eachprice = $executequery->fields['price'];
		
					for ($i=1; $i<=$multi; $i++)
					{
						$query = "INSERT INTO orders SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', PID='".mysql_real_escape_string($id)."', IID='".mysql_real_escape_string($iid)."', time_added='".time()."', status='0', price='".mysql_real_escape_string($eachprice)."'"; 
						$executequery=$conn->execute($query);
						$order_id = mysql_insert_id();
						if($order_id > 0)
						{
							$query = "INSERT INTO payments SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', OID='".mysql_real_escape_string($order_id)."', IID='".mysql_real_escape_string($iid)."', time='".time()."', price='".mysql_real_escape_string($eachprice)."', t='1', fiverrscriptdotcom_available='1'"; 
							$executequery=$conn->execute($query);
							
							$query = "UPDATE posts SET rev=rev+$eachprice WHERE PID='".mysql_real_escape_string($id)."'"; 
							$executequery=$conn->execute($query);
							
							fiverrclonescript_dotcom_fiverrclonescript_dotcom("fiverrclonescript_buyer_requirements", $_SESSION['USERID'], $order_id);							
						}
					}
					header("Location:$config[baseurl]/thank_you?g=".$eid);exit;
				}
				else
				{
					$query = "INSERT INTO orders SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', PID='".mysql_real_escape_string($id)."', IID='".mysql_real_escape_string($iid)."', time_added='".time()."', status='0', price='".mysql_real_escape_string($price)."'"; 
					$executequery=$conn->execute($query);
					$order_id = mysql_insert_id();
					if($order_id > 0)
					{
						$query = "INSERT INTO payments SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', OID='".mysql_real_escape_string($order_id)."', IID='".mysql_real_escape_string($iid)."', time='".time()."', price='".mysql_real_escape_string($price)."', t='1', fiverrscriptdotcom_available='1'"; 
						$executequery=$conn->execute($query);
						
						$query = "UPDATE posts SET rev=rev+$price WHERE PID='".mysql_real_escape_string($id)."'"; 
						$executequery=$conn->execute($query);
						
						fiverrclonescript_dotcom_fiverrclonescript_dotcom("fiverrclonescript_buyer_requirements", $_SESSION['USERID'], $order_id);
					
						header("Location:$config[baseurl]/thank_you?g=".$eid);exit;
					}
				}
			}
		}
		elseif($_REQUEST['fiverrclonescriptstripe'] == "1") //
		{
			$price = $p[0]['totalprice'];
			$checkfiverrclonescriptencoded = cleanit($_REQUEST['fiverrclonescriptencoded']);						

			require_once('include/stripe-php-3.6.0/init.php');				
			\Stripe\Stripe::setApiKey($config['fiverrclonescriptstripesecret']);
			
			$token = cleanit($_REQUEST['token']);
			$fiverrclonescriptprocessedstripe = "1";
			$fiverrclonescriptstripeuserid = 0;

			try 
			{
				$customer = \Stripe\Customer::create(array(
				'email' => $fiverrclonescriptuemail,
				'card' => $token
				));
				
				$fiverrclonescriptstripeuserid = $customer->id;
				
				$charge = \Stripe\Charge::create(array(
				'customer' => $customer->id,
				'amount'   => $price.'00',
				'currency' => $config['fiverrclonescriptstripecurrency']
				));
			
			} 
			catch(Stripe_InvalidRequestError $e) 
			{
				$fiverrclonescriptprocessedstripe = "0";
			}
			
			if($fiverrclonescriptprocessedstripe == "0")
			{
				$error = $lang['611'];
			}
			elseif($price > 0 && isset($_GET['token']) && $token != "" && $fiverrclonescriptencoded == $checkfiverrclonescriptencoded && $fiverrclonescriptprocessedstripe == "1")
			{
				
				if($multi > 1)
				{
					$query = "select price from posts where PID='".mysql_real_escape_string($id)."'"; 
					$executequery=$conn->execute($query);
					$eachprice = $executequery->fields['price'];
		
					for ($i=1; $i<=$multi; $i++)
					{
						$query = "INSERT INTO orders SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', PID='".mysql_real_escape_string($id)."', IID='".mysql_real_escape_string($iid)."', time_added='".time()."', status='0', price='".mysql_real_escape_string($eachprice)."'"; 
						$executequery=$conn->execute($query);
						$order_id = mysql_insert_id();
						if($order_id > 0)
						{
							$query = "INSERT INTO payments SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', OID='".mysql_real_escape_string($order_id)."', IID='".mysql_real_escape_string($iid)."', time='".time()."', price='".mysql_real_escape_string($eachprice)."', t='1', fiverrscriptdotcom_stripe='1', fiverrscriptdotcom_stripe_user='".mysql_real_escape_string($fiverrclonescriptstripeuserid)."'"; 
							$executequery=$conn->execute($query);
							
							$query = "UPDATE posts SET rev=rev+$eachprice WHERE PID='".mysql_real_escape_string($id)."'"; 
							$executequery=$conn->execute($query);
							
							fiverrclonescript_dotcom_fiverrclonescript_dotcom("fiverrclonescript_buyer_requirements", $_SESSION['USERID'], $order_id);							
						}
					}
					header("Location:$config[baseurl]/thank_you?g=".$eid);exit;
				}
				else
				{
					$query = "INSERT INTO orders SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', PID='".mysql_real_escape_string($id)."', IID='".mysql_real_escape_string($iid)."', time_added='".time()."', status='0', price='".mysql_real_escape_string($price)."'"; 
					$executequery=$conn->execute($query);
					$order_id = mysql_insert_id();
					if($order_id > 0)
					{
						$query = "INSERT INTO payments SET USERID='".mysql_real_escape_string($_SESSION['USERID'])."', OID='".mysql_real_escape_string($order_id)."', IID='".mysql_real_escape_string($iid)."', time='".time()."', price='".mysql_real_escape_string($price)."', t='1', fiverrscriptdotcom_stripe='1', fiverrscriptdotcom_stripe_user='".mysql_real_escape_string($fiverrclonescriptstripeuserid)."'"; 
						$executequery=$conn->execute($query);
						
						$query = "UPDATE posts SET rev=rev+$price WHERE PID='".mysql_real_escape_string($id)."'"; 
						$executequery=$conn->execute($query);
						
						fiverrclonescript_dotcom_fiverrclonescript_dotcom("fiverrclonescript_buyer_requirements", $_SESSION['USERID'], $order_id);
					
						header("Location:$config[baseurl]/thank_you?g=".$eid);exit;
					}
				}
			}

		}
	}
	else
	{
		header("Location:$config[baseurl]/");exit;
	}
}
else
{
	header("Location:$config[baseurl]/");exit;
}

//TEMPLATES BEGIN
STemplate::assign('message',$message);
STemplate::assign('error',$error);
STemplate::display('fiverrclonescript_header.tpl');
STemplate::display($templateselect);
STemplate::display('fiverrclonescript_footer_nobottom.tpl');
//TEMPLATES END
?>
Creat By MiNi SheLL
Email: devilkiller@gmail.com