sc

<?php
session_start();
require("../mainconfig.php");

if (isset($_SESSION['user'])) {
	$sess_username = $_SESSION['user']['username'];
	$check_user = mysqli_query($db, "SELECT * FROM users WHERE username = '$sess_username'");
	$data_user = mysqli_fetch_assoc($check_user);
	if (mysqli_num_rows($check_user) == 0) {
		header("Location: ".$cfg_baseurl."logout.php");
	} else if ($data_user['status'] == "Suspended") {
		header("Location: ".$cfg_baseurl."logout.php");
	}

	include("../lib/header.php");
	$msg_type = "nothing";

	if (isset($_POST['order'])) {
		$post_service = $_POST['service'];
		$post_phone = $_POST['phone'];
		$post_nometer = $_POST['nometer'];


		$check_service = mysqli_query($db, "SELECT * FROM services_pulsa WHERE id = '$post_service' AND status = 'Active'");
		$data_service = mysqli_fetch_assoc($check_service);

		$price = $data_service['price'];
		$service = $data_service['name'];
		$service_code = $data_service['pid'];
		$provider = $data_service['provider'];

		$check_provider = mysqli_query($db, "SELECT * FROM provider WHERE code = '$provider'");
		$data_provider = mysqli_fetch_assoc($check_provider);


		if (empty($post_service) || empty($post_phone)) {
			$msg_type = "error";
			$msg_content = "<b>Gagal:</b> Mohon mengisi input.";
		} else if (mysqli_num_rows($check_service) == 0) {
			$msg_type = "error";
			$msg_content = "<b>Gagal:</b> Layanan tidak ditemukan.";
		} else if ($data_user['balance'] < $price) {
			$msg_type = "error";
			$msg_content = "<b>Gagal:</b> Saldo Anda tidak mencukupi untuk melakukan pembelian ini.";
		} else {
			// api data
			$link = $data_provider['link'];
			$key = $data_provider['api_key'];
			// end api data
 if ($provider == "MANUAL") {
				$api_postdata = "";
                } else if ($provider == "DPEDIA") {
                $order_postdata = "api_key=$api_key&service=$pid&phone=$post_phone&phone2=$post_phone2";
                $ch = curl_init();
                curl_setopt($ch, CURLOPT_URL, "https://serverh2h.net/order/pulsa");
                curl_setopt($ch, CURLOPT_POST, 1);
                curl_setopt($ch, CURLOPT_POSTFIELDS, $order_postdata);
                curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
                $chresult = curl_exec($ch);
                $json_result = json_decode($chresult, true);

			    } else {
                die("System Error!");
            }



			if ($json_result['result'] == FALSE) {
				$msg_type = "error";
				$msg_content = "<b>Gagal:</b> SERVER SEDANG  $chresult.";
			} else {
			    if($provider == "DPEDIA"){
			        $poid = $json_result['data']['order_id'];
				    $catatan = $json_result['message'];
			        $oid = random_number(5);


           }
				$update_user = mysqli_query($db, "UPDATE users SET balance = balance-$price WHERE username = '$sess_username'");
				if ($update_user == TRUE) {
			        $insert_order = mysqli_query($db, "INSERT INTO balance_history (user, type, jenis, quantity, msg, date) VALUES ('$sess_username', '-', 'Pemotongan Saldo', '$price', 'Membuat pesanan, ID : ".$oid."', '$date $time')");
                    $insert_order = mysqli_query($db, "INSERT INTO `orders_pulsa` (`poid`, `oid`, `user`, `service`, `catatan`, `price`, `modal`, `untung`, `phone`, `status`, `date`, `provider`, `place_from`, `refund`) VALUES ('$poid', '$oid', '$sess_username', '$service', '$catatan', '$price', '$price', '0', '$post_phone', 'Pending', '$date $time', '$provider', 'WEB', '0')");
					if ($insert_order == TRUE) {
						$msg_type = "success";
						$msg_content = "<b>Pesanan telah diterima.</b><br /><b>Order ID:</b> $oid<br /><b>Layanan:</b> $service<br /><b>NO. Telp:</b> $post_phone<br /><b>Biaya:</b> Rp ".number_format($price,0,',','.');
					} else {
						$msg_type = "error";
						$msg_content = "<b>Gagal:</b> Error system (2).";
					}
				} else {
					$msg_type = "error";
					$msg_content = "<b>Gagal:</b> Error system (1).";
				}
			}
		}
	}

	$check_user = mysqli_query($db, "SELECT * FROM users WHERE username = '$sess_username'");
	$data_user = mysqli_fetch_assoc($check_user);

/////////////////////////////////////////

?>
						<div class="row bg-title">
							<div class="col-lg-12">
								<h4 class="page-title">Pesanan Pulsa</h4>
								<ol class="breadcrumb">
									<li>
										<a href="<?php echo $cfg_baseurl; ?>"><?php echo $cfg_webname; ?></a>
									</li>
									<li class="active">Pesanan Pulsa</li>
								</ol>
							</div>
							<!-- /.col-lg-12 -->
						</div>
							<div class="row">
							<div class="col-md-7">
								<div class="card">
                        <div class="card-heading  card-primary">
                            Pesanan Pulsa
                        </div>
                        <div class="card-block">
										<?php
										if ($msg_type == "success") {
										?>
										<div class="alert alert-success">
											<a href="#" class="close" data-dismiss="alert" aria-label="close">×</a>
											<i class="fa fa-check-circle"></i>
											<?php echo $msg_content; ?>
										</div>
										<?php
										} else if ($msg_type == "error") {
										?>
										<div class="alert alert-danger">
											<a href="#" class="close" data-dismiss="alert" aria-label="close">×</a>
											<i class="fa fa-times-circle"></i>
											<?php echo $msg_content; ?>
										</div>
										<?php
										}
										?>
									<form class="form-horizontal" role="form" method="POST">
											<div class="form-group">
												<label>Operator</label>
													<select class="form-control" id="pulsa">
														<option value="0">Select one...</option>
														<?php
														$check_cat = mysqli_query($db, "SELECT * FROM service_cat_pulsa ORDER BY name ASC");
														while ($data_cat = mysqli_fetch_assoc($check_cat)) {
														?>
														<option value="<?php echo $data_cat['code']; ?>"><?php echo $data_cat['name']; ?></option>
														<?php
														}
														?>
													</select>
												</div>

											<div class="form-group">
												<label>Layanan</label>
													<select class="form-control" id="listpulsa" name="service"">
														<option value="0">Select one...</option>
													</select>
												</div>

											<div class="form-group">
												<label>Nomor Telepon</label>
													<input type="text" name="phone" class="form-control" placeholder="No. Telp">
												</div>

											<div class="form-group">
												<label>Total Harga</label>

													<input type="text" class="form-control" name="price" id="total" readonly>
												</div>

											<button type="submit" class="pull-right btn btn-success btn-bordered waves-effect w-md waves-light" name="order">Buat Pesanan</button>
										</form>
									</div>
								</div>
							</div>
							<div class="col-md-5">
								<div class="card">
                        <div class="card-heading  card-primary">
                            Informasi
                        </div>
                        <div class="card-block">
										<ul>
											<li>Order Pulsa/Kuota/Voucher Game. Masukkan nomor telepon dengan benar.</li>
											<li>Order token, Harap memasukkan nomer id pelanggan dengan benar.</li>
										</ul>
									</div>
								</div>
							</div>
						</div>
						<!-- end row -->
						<script type="text/javascript" src="https://code.jquery.com/jquery-1.10.2.js"></script>
	<script type="text/javascript">
$(document).ready(function() {
	$("#listpulsa").change(function() {
                var pulsa = $("#listpulsa").val();
                $.ajax({
                    url: '<?php echo $cfg_baseurl; ?>inc/order_pulsa.php',
                    data: 'pulsa=' + pulsa,
                    type: 'POST',
                    dataType: 'html',
                    success: function(msg) {
                        $("#total").val(msg);
                    }
                });
            });
            $("#pulsa").change(function() {
                var category = $("#pulsa").val();
                $.ajax({
                    url: '<?php echo $cfg_baseurl; ?>inc/order_service_pulsa.php',
                    data: 'category=' + category,
                    type: 'POST',
                    dataType: 'html',
                    success: function(msg) {
                        $("#listpulsa").html(msg);
                    }
                });
            });

function get_total(quantity) {
            var rate = $("#rate").val();
            var result = eval(quantity) * rate;
            $('#total').val(result);
        }
	</script>
<?php
	include("../lib/footer.php");
} else {
	header("Location: ".$cfg_baseurl);
}
?>