Advertisement
Guest User

Untitled

a guest
Feb 18th, 2018
81
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.78 KB | None | 0 0
  1. <?php
  2. session_start();
  3. require("../mainconfig.php");
  4.  
  5. if (isset($_SESSION['user'])) {
  6. $sess_username = $_SESSION['user']['username'];
  7. $check_user = mysqli_query($db, "SELECT * FROM users WHERE username = '$sess_username'");
  8. $data_user = mysqli_fetch_assoc($check_user);
  9. if (mysqli_num_rows($check_user) == 0) {
  10. header("Location: ".$cfg_baseurl."logout.php");
  11. } else if ($data_user['status'] == "Suspended") {
  12. header("Location: ".$cfg_baseurl."logout.php");
  13. }
  14.  
  15. include("../lib/header.php");
  16. $msg_type = "nothing";
  17.  
  18. if (isset($_POST['order'])) {
  19. $post_service = $_POST['service'];
  20. $post_quantity = $_POST['quantity'];
  21. $post_link = trim($_POST['link']);
  22. $post_category = $_POST['category'];
  23. $check_service = mysqli_query($db, "SELECT * FROM services WHERE sid = '$post_service' AND status = 'Active'");
  24. $data_service = mysqli_fetch_assoc($check_service);
  25.  
  26. $check_orders = mysqli_query($db, "SELECT * FROM orders WHERE link = '$post_link' AND status IN ('Pending','Processing')");
  27. $data_orders = mysqli_fetch_assoc($check_orders);
  28. $rate = $data_service['price'] / 1000;
  29. $price = $rate*$post_quantity;
  30. $oid = random_number(3).random_number(4);
  31. $service = $data_service['service'];
  32. $provider = $data_service['provider'];
  33. $pid = $data_service['pid'];
  34.  
  35. $check_provider = mysqli_query($db, "SELECT * FROM provider WHERE code = '$provider'");
  36. $data_provider = mysqli_fetch_assoc($check_provider);
  37.  
  38. if ($post_category == "Instagram Followers") {
  39. $id = file_get_contents("https://instagram.com/".$post_link."?__a=1");
  40. $id = json_decode($id, true);
  41. $start_count = $id['user']['followed_by']['count'];
  42. } else if ($post_category == "Instagram Likes") {
  43. $id = file_get_contents("".$post_link."?__a=1");
  44. $id = json_decode($id, true);
  45. $start_count = $id['graphql']['shortcode_media']['edge_media_preview_like']['count'];
  46. } else if ($post_category == "Instagram Views") {
  47. $id = file_get_contents("".$post_link."?__a=1");
  48. $id = json_decode($id, true);
  49. $start_count = $id['graphql']['shortcode_media']['video_view_count'];
  50. } else {
  51.  
  52. }
  53.  
  54. if (empty($post_service) || empty($post_link) || empty($post_quantity)) {
  55. $msg_type = "error";
  56. $msg_content = "Mohon Untuk Mengisi Semua Input.";
  57. } else if (mysqli_num_rows($check_orders) == 1) {
  58. $msg_type = "error";
  59. $msg_content = "Terdapat Pesanan Dengan Username/Link Yang Sama Dan Berstatus Pending/Processing.";
  60. } else if (mysqli_num_rows($check_service) == 0) {
  61. $msg_type = "error";
  62. $msg_content = "Layanan Ini Tidak Dapat Ditemukan.";
  63. } else if (mysqli_num_rows($check_provider) == 0) {
  64. $msg_type = "error";
  65. $msg_content = "Terjadi Kesalahan Pada Layanan Ini.";
  66. } else if ($post_quantity < $data_service['min']) {
  67. $msg_type = "error";
  68. $msg_content = "Jumlah Minimal Pemesanan Adalah <b>".$data_service['min'].".</b>";
  69. } else if ($post_quantity > $data_service['max']) {
  70. $msg_type = "error";
  71. $msg_content = "Jumlah Maksimal Pemesanan Adalah <b>".$data_service['max'].".</b>";
  72. } else if ($data_user['balance'] < $price) {
  73. $msg_type = "error";
  74. $msg_content = "Saldo Anda Tidak Mencukupi Untuk Melakukan Pembelian Ini.";
  75. } else {
  76.  
  77. // api data
  78. $api_link = $data_provider['link'];
  79. $api_key = $data_provider['api_key'];
  80. // end api data
  81.  
  82. if ($provider == "MANUAL") {
  83. $api_postdata = "";
  84. } else if ($provider == "IRVANKEDE") {
  85. $postdata = "api_key=$api_key&action=order&service=$pid&data=$post_link&quantity=$post_quantity";
  86. $ch = curl_init();
  87. curl_setopt($ch, CURLOPT_URL, $api_link);
  88. curl_setopt($ch, CURLOPT_POST, 1);
  89. curl_setopt($ch, CURLOPT_POSTFIELDS, $postdata);
  90. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  91. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  92. $chresult = curl_exec($ch);
  93. curl_close($ch);
  94. $json_result = json_decode($chresult);
  95. } else {
  96. die("System Error!");
  97. }
  98.  
  99. if ($provider != "MANUAL" AND $json_result->status == false) {
  100. $msg_type = "error";
  101. $msg_content = "Terjadi Kesalahan Pada Layanan Ini.";
  102. } else {
  103. if ($provider == "IRVANKEDE") {
  104. $poid = $json_result->data->order_id;
  105. } else if ($provider == "MANUAL") {
  106. $poid = $oid;
  107. }
  108. $update_user = mysqli_query($db, "UPDATE users SET balance = balance-$price WHERE username = '$sess_username'");
  109. if ($update_user == TRUE) {
  110. $insert_order = mysqli_query($db, "INSERT INTO orders (oid, poid, user, category, service, link, quantity, remains, start_count, price, status, date, time, provider, place_from, pengembalian) VALUES ('$oid', '$poid', '$sess_username', '$post_category', '$service', '$post_link', '$post_quantity', '$post_quantity', '$start_count', '$price', 'Pending', '$date', '$time', '$provider', 'WEB', '0')");
  111. $insert_order = mysqli_query($db, "INSERT INTO balance_history (username, action, type, quantity, msg, date, time) VALUES ('$sess_username', 'Pemotongan Saldo', '- Rp', '$price', 'Membuat Pesanan, ID: $poid', '$date', '$time')");
  112. if ($insert_order == TRUE) {
  113. $msg_type = "success";
  114. $msg_content = "<b>Order ID:</b> $poid<br /><b>Layanan:</b> $service<br /><b>Link:</b> $post_link<br /><b>Jumlah:</b> ".number_format($post_quantity,0,',','.')."<br /><b>Biaya:</b> Rp ".number_format($price,0,',','.');
  115. } else {
  116. $msg_type = "error";
  117. $msg_content = "Terjadi Kesalahan Sistem.";
  118. }
  119. } else {
  120. $msg_type = "error";
  121. $msg_content = "Terjadi Kesalahan Sistem.";
  122. }
  123. }
  124. }
  125. }
  126.  
  127. $check_user = mysqli_query($db, "SELECT * FROM users WHERE username = '$sess_username'");
  128. $data_user = mysqli_fetch_assoc($check_user);
  129. ?>
  130. <header class="page-header">
  131. <div class="container-fluid">
  132. <h2 class="no-margin-bottom">Social Media</h2>
  133. </div>
  134. </header>
  135. <!-- Breadcrumb-->
  136. <div class="breadcrumb-holder container-fluid">
  137. <ul class="breadcrumb">
  138. <li class="breadcrumb-item"><a href="<?php echo $cfg_baseurl; ?>">Home</a></li>
  139. <li class="breadcrumb-item active">Order Social Media </li>
  140. </ul>
  141. </div>
  142. <section class="forms">
  143. <div class="container-fluid">
  144. <div class="row">
  145. <!-- Basic Form-->
  146. <div class="col-lg-12">
  147. <div class="card">
  148. <div class="card-close">
  149. <div class="dropdown">
  150. <button type="button" id="closeCard1" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false" class="dropdown-toggle"><i class="fa fa-ellipsis-v"></i></button>
  151. <div aria-labelledby="closeCard1" class="dropdown-menu dropdown-menu-right has-shadow"><a href="#" class="dropdown-item remove"> <i class="fa fa-times"></i>Close</a><a href="#" class="dropdown-item edit"> <i class="fa fa-gear"></i>Edit</a></div>
  152. </div>
  153. </div>
  154. <div class="card-header d-flex align-items-center">
  155. <h3 class="h4"> Social Media</h3>
  156. </div>
  157. <div class="card-body">
  158. <?php
  159. if ($msg_type == "success") {
  160. ?>
  161. <div class="callout callout-success">
  162. <h4><i class="fa fa-check"></i> Berhasil!</h4>
  163. <p><?php echo $msg_content; ?></p>
  164. </div>
  165. <?php
  166. } else if ($msg_type == "error") {
  167. ?>
  168. <div class="callout callout-danger">
  169. <h4><i class="fa fa-times"></i> Ups!</h4>
  170. <p><?php echo $msg_content; ?></p>
  171. </div>
  172. <?php
  173. }
  174. ?>
  175. <form class="form-horizontal" role="form" method="POST">
  176. <div class="form-group row">
  177. <span class="help-block"></span>
  178. <label class="col-md-3 control-label">Kategori</label>
  179. <div class="col-md-9">
  180. <select class="form-control" id="category" name="category">
  181. <option value="0">Pilih Kategori...</option>
  182. <?php
  183. $check_cat = mysqli_query($db, "SELECT * FROM service_cat ORDER BY id ASC");
  184. while ($data_cat = mysqli_fetch_assoc($check_cat)) {
  185. ?>
  186. <option value="<?php echo $data_cat['code']; ?>"><?php echo $data_cat['name']; ?></option>
  187. <?php
  188. }
  189. ?>
  190. </select>
  191. <span class="help-block"></span>
  192. </div>
  193. </div>
  194. <div class="form-group row">
  195. <label class="col-md-3 control-label">Layanan</label>
  196. <div class="col-md-9">
  197. <select class="form-control" name="service" id="service">
  198. <option value="0">Pilih Kategori...</option>
  199. </select>
  200. <span class="help-block"></span>
  201. </div>
  202. </div>
  203. <div id="note">
  204. </div>
  205. <div class="form-group row">
  206. <label class="col-md-3 control-label">Link/Target</label>
  207. <div class="col-md-9">
  208. <input type="text" name="link" class="form-control" placeholder="Link/Target">
  209. <span class="help-block"></span>
  210. </div>
  211. </div>
  212. <div class="form-group row">
  213. <label class="col-md-3 control-label">Jumlah</label>
  214. <div class="col-md-9">
  215. <input type="number" name="quantity" class="form-control" placeholder="Jumlah" onkeyup="get_total(this.value).value;">
  216. <span class="help-block"></span>
  217. </div>
  218. </div>
  219.  
  220. <input type="hidden" id="rate" value="0">
  221. <div class="form-group row">
  222. <label class="col-md-3 control-label">Total Harga</label>
  223. <div class="col-md-9">
  224. <input type="number" class="form-control" id="total" readonly>
  225. <span class="help-block"></span>
  226. </div>
  227. </div>
  228. <button type="reset" class="btn btn-danger"><i class="fa fa-refresh"></i> Ulangi</button>
  229. <button type="submit" class="pull-right btn btn-success btn-bordered waves-effect w-md waves-light" name="order"><i class="fa fa-send"></i> Buat Pesanan</button>
  230. </form>
  231. </div>
  232. </div>
  233. </div>
  234. </div>
  235. </div>
  236. </section>
  237.  
  238. <script type="text/javascript" src="https://code.jquery.com/jquery-1.10.2.js"></script>
  239. <script type="text/javascript">
  240. $(document).ready(function() {
  241. $("#category").change(function() {
  242. var category = $("#category").val();
  243. $.ajax({
  244. url: '<?php echo $cfg_baseurl; ?>inc/order_service.php',
  245. data: 'category=' + category,
  246. type: 'POST',
  247. dataType: 'html',
  248. success: function(msg) {
  249. $("#service").html(msg);
  250. }
  251. });
  252. });
  253. $("#service").change(function() {
  254. var service = $("#service").val();
  255. $.ajax({
  256. url: '<?php echo $cfg_baseurl; ?>inc/order_note.php',
  257. data: 'service=' + service,
  258. type: 'POST',
  259. dataType: 'html',
  260. success: function(msg) {
  261. $("#note").html(msg);
  262. }
  263. });
  264. $.ajax({
  265. url: '<?php echo $cfg_baseurl; ?>inc/order_rate.php',
  266. data: 'service=' + service,
  267. type: 'POST',
  268. dataType: 'html',
  269. success: function(msg) {
  270. $("#rate").val(msg);
  271. }
  272. });
  273. });
  274. });
  275.  
  276. function get_total(quantity) {
  277. var rate = $("#rate").val();
  278. var result = eval(quantity) * rate;
  279. $('#total').val(result);
  280. }
  281. </script>
  282. <?php
  283. include("../lib/footer.php");
  284. } else {
  285. header("Location: ".$cfg_baseurl);
  286. }
  287. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement