Devil Killer Is Here MiNi Shell
MiNi SheLL

Current Path : /hermes/bosnacweb04/bosnacweb04ac/b1072/ipg.liuyuan7592410/wb_ecom/admin/
Linux boscustweb5003.eigbox.net 5.4.91 #1 SMP Wed Jan 20 18:10:28 EST 2021 x86_64
Current File : /hermes/bosnacweb04/bosnacweb04ac/b1072/ipg.liuyuan7592410/wb_ecom/admin/order_master_details.php
<?PHP 
	require "top.inc.php";
	$allowedRole = SUPER_ADMIN|ADMIN|RETAILER_ADMIN|RETAILER_USER;
	whoAllowed($allowedRole);

	$order_id = get_safe_value($con,$_GET['id']);
	if(($_SESSION['ADMIN_ROLE']&(RETAILER_ADMIN|RETAILER_USER))!=0){
		$sql = "select * from t_order a left join t_users b on a.user_id=b.id where a.id='$order_id' and b.master_retailer=".$_SESSION['RETAILER_ID'];
		$check = mysqli_num_rows(mysqli_query($con,$sql));
		if($check==0){
			?>
			<script type="text/javascript">
				window.location.href = <?PHP echo "\"".DEFAULT_ERROR_PAGE."?err_code=a10004\"" ?>;
			</script>
			<?php
		}
	}
	if(isset($_POST['update_order_status'])){
		$sql = "update t_order set order_status='".$_POST['update_order_status']."' where id='$order_id'";
		mysqli_query($con,$sql);
	}
?>
	<div class="content pb-0">
		<div class="orders">
			<div class="row">
				<div class="col-xl-12">
					<div class="card">
						<div class="card-body">
							<h4 class="box-title">Orders detail</h4>
						</div>
						<div class="card-body--">
							<div class="table-stats order-table ov-h">
								<table class="table">
									<thead>
										<tr>
											<th class="product-thumbnail">Product Name</th>
											<th class="product-thumbnail">Product Image</th>
											<th class="product-name">Qty</th>
											<th class="product-price">Price</th>
											<th class="product-price">Sub Total</th>
										</tr>
									</thead>
									<tbody>
										<?PHP
											$sql = "select b.name, b.image, a.qty, a.price, a.qty*a.price as sub_total from t_order_details a left join t_product b on a.pid=b.id where a.order_id='$order_id'";
											$res = mysqli_query($con,$sql);
											$product_subtotal = 0;
											while($row=mysqli_fetch_assoc($res)){
												$product_subtotal += $row['sub_total'];
										?>
										<tr>
											<td class="product-name"><?PHP echo $row['name']; ?></td>
											<td class="product-name"><img src="<?PHP echo PRODUCT_IMAGE_SITE_PATH.$row['image']; ?>"></td>
											<td class="product-name"><?PHP echo $row['qty']; ?></td>
											<td class="product-name"><?PHP echo cvrtToDollar($row['price']); ?></td>
											<td class="product-name"><?PHP echo cvrtToDollar($row['sub_total']); ?></td>
										</tr>
										<?PHP
											}
										?>
										<tr>
											<td colspan="3" rowspan="3"><?PHP echo $row['qty']; ?></td>
											<td class="product-name">SubTotal</td>
											<td class="product-name"><?PHP echo cvrtToDollar($product_subtotal); ?></td>
										</tr>
										<tr>
											<td class="product-name">Tax</td>
											<td class="product-name"><?PHP echo cvrtToDollar($product_subtotal*TAX_RATE); ?></td>
										</tr>
										<tr>
											<td class="product-name">Total</td>
											<td class="product-name"><?PHP echo cvrtToDollar($product_subtotal*(1+TAX_RATE)); ?></td>
										</tr>
									</tbody>

								</table>
								<?PHP
									$sql="select a.*,b.name as order_status_name,c.pmnt_status from t_order a left join t_order_status b on a.order_status=b.id left join t_payment c on a.payment_id=c.id where a.id='$order_id'";
									$row=mysqli_fetch_assoc(mysqli_query($con,$sql));
									$order_status = $row['order_status'];
								?>
								<div class="order_info_card">
									<div>
										<strong> Shipping Address:</strong>
										<div><?PHP echo $row['address1'].", ".$row['city']." ".$row['province'].", ".$row['pc'];?></div>
									</div>
									<div>
										<strong> Payment Status:</strong>
										<span><?PHP echo $row['pmnt_status'];?></span>
									</div>
									<div>
										<strong> Order Status:</strong>
										<span><?PHP echo $row['order_status_name'];?></span>
									</div>
									<div>
										<form method="post">
											<select class="form-control" name="update_order_status">
												<option>Select Order Status</option>
												<?PHP
												$res = mysqli_query($con,"select id,name from t_order_status order by id asc");
												while($row = mysqli_fetch_assoc($res)){
													if($row["id"]==$order_status){
														echo "<option selected value=".$row["id"].">".$row["name"]."</option>\n";
													}else{
														echo "<option value=".$row["id"].">".$row["name"]."</option>\n";
													}
												}
												?>
											</select>
											<input type="submit" name="submit" class="form-control"/>
										</form>
									</div>
								</div>
							</div>
						</div>
					</div>
				</div>
			</div>
		</div>
	</div>
<?PHP 
	require "footer.inc.php";
?>
Creat By MiNi SheLL
Email: devilkiller@gmail.com