<?php
include 'inc/check_login.php';
include 'connectiondb.php';
$_SESSION['username'] = $_SESSION['manager']; // Must be already set
?>
<?php
$userid="";
if (loggedin())
{
$query = mysql_query("SELECT * FROM account WHERE username='$_SESSION[manager]' AND description='admin' ");
while ($row = mysql_fetch_assoc($query))
{
$username = $row ['username'];
}
}
else
{
header("Location:login.php");
exit();
}
?>
<?php include 'admin.php'?>

<tr>
<td height="450" colspan="2" align="left" valign="top"><br />
<table width="960" border="0">
<tr>
<td colspan="7" align="center" valign="middle">



<?php
if (isset($_GET['updateid']))
{
$id = ($_GET['updateid']);
echo 'Are you sure you want to accept return ID no : '.$id.' ? <a
href="deliver.php?yesid='.$id.'">Yes!</a> |<a href="deliver.php"> No</a>!';
}
?>
<?php
include 'connectiondb.php';
if (isset($_GET['yesid']))
{
$trans_id = $_GET['yesid'];
$status = $_GET['status'];
$email = $_POST['receiver_email'];

$query = mysql_query("SELECT * FROM transactions WHERE 'id'='$trans_id'");
while($row = mysql_fetch_assoc($query))
{
	$db_status = $row['status'];
	$db_id = $_row['id'];
	$db_email = $row['receiver_email'];
}

if($status == $db_status && $email == $db_email)
{
$sql=mysql_query("SELECT * FROM transactions WHERE id='$trans_id'");
while($row = mysql_fetch_assoc($sql))
{
$email=$row['receiver_email'];
}
{
$cnumber=$row['contact_number'];
}

	mysql_query("UPDATE `transactions` SET `status` = 'Complete' WHERE `transactions`.`id` = '$trans_id'");
	$message = "
This is an automated message. Please do not reply.

You can now return the product by visiting our company
just present your valid receipt
thank you!";
mail($email, "New Horizon Infinity Global Solutions Inc. Product Return",$message,"From: DoNotReply@nhi2014.com");
	    $user = "itachi12";
		$password = "";
		$api_id = "1";
		$baseurl ="hm";

		$text = urlencode("You can now return the product by visiting our company just present your valid receipt thank you! from http://nhiglobalsolutions.tk/");
		$to = "$cnumber";

		// auth call
		$url = "$baseurl/http/auth?user=$user&password=$password&api_id=$api_id";

		// do auth call
		$ret = file($url);

		// explode our response. return string is on first line of the data returned
		$sess = explode(":",$ret[0]);
		if ($sess[0] == "OK") {

			$sess_id = trim($sess[1]); // remove any whitespace
			$url = "$baseurl/http/sendmsg?session_id=$sess_id&to=$to&text=$text";

			// do sendmsg call
			$ret = file($url);
			$send = explode(":",$ret[0]);

			if ($send[0] == "ID") {
				echo "successnmessage ID: ". $send[1];
			} else {
				echo "send message failed invalid Contact No.";
			}
		} else {
			echo "Authentication failure: ". $ret[0];
		}
	echo '<div class="success">Successfully accepted the request <a href="transactions.php">click here to continue</a></div>';
}
else
{
	echo '<div class="errormsgbox">"invalid"</div>';
}
}
?>

<?php
if (isset($_GET['declineid']))
{
$id = ($_GET['declineid']);
echo 'Are you sure you want to decline return ID no : '.$id.' ? <a
href="transactions.php?noid='.$id.'">Yes!</a> |<a href="transactions.php"> No</a>!';
}
?>
<?php
include 'connectiondb.php';
if (isset($_GET['noid']))
{
$trans_id = $_GET['noid'];
$status = $_GET['status'];
$email = mysql_real_escape_string(strip_tags($_POST['email']));

$query = mysql_query("SELECT * FROM `return_product` WHERE 'id'='$trans_id'");
while($row = mysql_fetch_assoc($query))
{
	$db_status = $row['status'];
	$db_id = $_row['id'];
}

if($status == $db_status)
{
$sql=mysql_query("SELECT * FROM transactions WHERE id='$trans_id'");
while($row = mysql_fetch_assoc($sql))
{
$email=$row['email'];
}
{
$cnumber=$row['contact_number'];
}
	mysql_query("UPDATE `transactions` SET `status` = 'Declined' WHERE `transactions`.`id` = '$trans_id'");
	$message = "
This is an automated message. Please do not reply.

Sorry your transaction could not be made
please read the terms and conditions in returning a product.
Thank You!
";
mail($email, "New Horizon Infinity Global Solutions Inc. Product Return",$message,"From: DoNotReply@nhi2014.com");
		$user = "i12";
		$password = "N";
		$api_id = "3491351";
		$baseurl ="htm";

		$text = urlencode("Sorry your transaction could not be made please read the terms and conditions in returning a product. Thank You! from http://nhiglobalsolutions.tk/");
		$to = "$cnumber";

		// auth call
		$url = "$baseurl/http/auth?user=$user&password=$password&api_id=$api_id";

		// do auth call
		$ret = file($url);

		// explode our response. return string is on first line of the data returned
		$sess = explode(":",$ret[0]);
		if ($sess[0] == "OK") {

			$sess_id = trim($sess[1]); // remove any whitespace
			$url = "$baseurl/http/sendmsg?session_id=$sess_id&to=$to&text=$text";

			// do sendmsg call
			$ret = file($url);
			$send = explode(":",$ret[0]);

			if ($send[0] == "ID") {
				echo "successnmessage ID: ". $send[1];
			} else {
				echo "send message failed invalid Contact No.";
			}
		} else {
			echo "Authentication failure: ". $ret[0];
		}
	echo '<div class="success">Successfully declined item <a href="transactions.php">click here to continue</a></div>';
}
else
{
	echo '<div class="errormsgbox">"invalid"</div>';
}
}
?>

<?php
include 'connectiondb.php';
if (isset($_GET['id'])) {
$targetID = $_GET['id'];
$sql = mysql_query("SELECT * FROM products WHERE id='$targetID' LIMIT 1");
$productCount = mysql_num_rows($sql); // count the output amount
if ($productCount > 0) {
while($row = mysql_fetch_array($sql)){
$stock = $row["stock"];
$date_added = strftime("%b %d, %Y", strtotime($row["date_added"]));
}
} else {
echo "<div id='error'>Invalid Id</div>";
}
}
?>

</td>
</tr>
<table width="960" border="0" align="center" style="background: 0 0 rgba(0, 0, 0, 0.14); box-shadow: 0 3px 1px rgba(0, 0, 0, 0.02) inset, 0 1px 0 white; -moz-border-radius: 15px; border-radius: 15px;">

<?php
$sql1 = mysql_query("SELECT * FROM transactions");//database
$returningcount = mysql_num_rows($sql1); // count the output amount

if ($returningcount > 0) {
echo "<table width='960' border='0' align='center' style='background: 0 0 rgba(0, 0, 0, 0.14); box-shadow: 0 3px 1px rgba(0, 0, 0, 0.02) inset, 0 1px 0 white; -moz-border-radius: 15px; border-radius: 15px;'>";
echo " <tr>
    <td colspan='2' align='center' valign='top'>
<tr>
<td width='89' align='center' valign='middle'><strong >Transaction ID</td>
<td width='89' align='center' align='middle'><strong >No. of Ordered</td>
<td width='89' align='center' valign='middle'><strong >Name</td>
<td width='89' align='center' valign='middle'><strong >Payment Date</td>
<td width='89' align='center' valign='middle'><strong >Txn id</td>
<td width='89' align='center' valign='middle'><strong >Adress</td>
<td width='89' align='center' valign='middle'><strong >Username</td>
<td width='89' align='center' valign='middle'><strong >Status</td>


</tr>";
while($row = mysql_fetch_array($sql1)){

$userid = $row['id'];
$array = $row['product_id_array'];
$firstnames = $row['first_name'];
$lastnames = $row['last_name'];
$payment = $row['payment_date'];
$txn = $row['txn_id'];
$street = $row['address_street'];
$city = $row['address_city'];
$username = $row['username'];
$status = $row['status'];
echo'<tr>
<td width="89" align="center" valign="middle" >'.$userid.'</td>
<td width="89" align="center" valign="middle" >'.$array.'</td>
<td width="450" align="center" valign="middle" >'.$firstnames.' '.$lastnames.'</td>
<td width="89" align="center" valign="middle" >'.$payment.'</td>
<td width="89" align="center" valign="middle" >'.$txn.'</td>
<td width="89" align="center" valign="middle" >'.$street.' '.$city.'</td>
<td width="89" align="center" valign="middle" >'.$username.'</td>


<td width="89" align="center" valign="middle" style="color: GREEN;
    text-shadow: 0 1px 0 #FFFF00;
	font-size: 18px;
	font-family:serif">'.$status.'</td>

<td width="89"><a href="deliver.php?updateid='.$userid.'" style="font-family: verdana;border: 1px solid #1F79AE;
   background-color: #1F79AE;
   border-radius: 4px;
   box-shadow: inset 0 1px 3px #fff, inset 0 -15px #cbe6f2, 0 0 3px #8ec1da;
   -o-box-shadow: inset 0 1px 3px #fff, inset 0 -15px #cbe6f2, 0 0 3px #8ec1da;
   -webkit-box-shadow: inset 0 1px 3px #fff, inset 0 -15px #1F79AE, 0 0 3px #8ec1da;
   -moz-box-shadow: inset 0 1px 3px #fff, inset 0 -15px #cbe6f2, 0 0 3px #8ec1da;
   color: darkgreen;
   text-shadow: 0 1px #fff;
   padding: 2px 5px;">Accept</a><a
href="deliver.php?declineid='.$userid.'" style="font-family: verdana;border: 1px solid #1F79AE;
   background-color: #1F79AE;
   border-radius: 4px;
   box-shadow: inset 0 1px 3px #fff, inset 0 -15px #cbe6f2, 0 0 3px #8ec1da;
   -o-box-shadow: inset 0 1px 3px #fff, inset 0 -15px #cbe6f2, 0 0 3px #8ec1da;
   -webkit-box-shadow: inset 0 1px 3px #fff, inset 0 -15px #1F79AE, 0 0 3px #8ec1da;
   -moz-box-shadow: inset 0 1px 3px #fff, inset 0 -15px #cbe6f2, 0 0 3px #8ec1da;
   color: darkgreen;
   text-shadow: 0 1px #fff;
   padding: 2px 5px;">Decline</a>
</td></tr></tr>';

}
}


else{
echo 'No Requesting';
}

?>
</td>

</table>

</table>

</td>
</tr>
</table>
<center>
<br>

</tr>
</center>
</body>
</html>