Dre4m Shell
Server IP : 127.0.0.2  /  Your IP : 18.217.119.115
Web Server : Apache/2.4.18 (Ubuntu)
System :
User : www-data ( )
PHP Version : 7.0.33-0ubuntu0.16.04.16
Disable Function : disk_free_space,disk_total_space,diskfreespace,dl,exec,fpaththru,getmyuid,getmypid,highlight_file,ignore_user_abord,leak,listen,link,opcache_get_configuration,opcache_get_status,passthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,php_uname,phpinfo,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix,_getppid,posix_getpwnam,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_times,posix_ttyname,posix_uname,pclose,popen,proc_open,proc_close,proc_get_status,proc_nice,proc_terminate,shell_exec,source,show_source,system,virtual
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : /var/www/html/admin//invoice_status.php
<?php
ob_start();
session_start();
require_once('session-check.php');
require_once('include/db-config.php');
require_once('include/skey.php');
$CardNumber = "";
$ID = $_GET['id'];
		  
$sql="select tb1.CouponCode, tb1.ShippingStatus, tb1.AdminComment, tb1.PaymentStatus, tb1.ShippingDetailsCustomer, tb1.NotesToCustomer, tb1.InvoiceSent2Customer, tb1.DiscountType, tb1.CouponAmount, tb1.OrderDate, tb2.Billing_FirstName, tb2.Billing_LastName, tb2.Billing_Address1, tb2.Billing_Address2, tb2.Billing_City, tb2.Billing_State, tb2.Billing_Country, tb2.Billing_Zip, tb2.Billing_EmailID, tb2.Shipping_FirstName, tb2.Shipping_LastName, tb2.Shipping_Address1, tb2.Shipping_Address2, tb2.Shipping_City,tb2.Shipping_State,tb2.Shipping_Country,tb2.Shipping_Zip,tb2.Shipping_EmailID from maintrainer_tbl_cart_master tb1 left join maintrainer_tbl_customer_information tb2 on tb2.CartMasterID= tb1.ID where tb1.ID=".$ID;	

$result=mysqli_query($conn,$sql);

$row=mysqli_fetch_array($result);
$DiscountType =$row['DiscountType'];
$Discount = $row['CouponAmount'];
$ShippingStatus = $row['ShippingStatus'];
$AdminComment = $row['AdminComment'];
$PaymentStatus = $row['PaymentStatus'];
$ShippingDetailsCustomer = $row['ShippingDetailsCustomer'];
$NotesToCustomer = $row['NotesToCustomer'];
$InvoiceSent2Customer = $row['InvoiceSent2Customer'];
?>
<!DOCTYPE html> <HTML>
<HEAD>
<TITLE>Joel Levitt, maintenance management, maintenance management consulting, tpms</TITLE>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<link href="css/style.css" type="text/css" rel="stylesheet">
<style type="text/css">
table { color: #FFFFFF; font-family: Arial, Verdana }
.normal { background-color: #323232 }
.normalActive { background-color:#000000;}
</style>
<script language="javascript">
	function show(value)
	{
		document.getElementById('cardno').innerHTML  = value; 
		document.getElementById('show').innerHTML = ''; 
	}
</script>

</HEAD>
<BODY BGCOLOR=#FFFFFF LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0>
<!-- ImageReady Slices (maintrainer_slice2.jpg) -->
<TABLE WIDTH="100%" BORDER=0 CELLPADDING=0 CELLSPACING=0 align="center">
	<?php include_once('include/include_header.php'); ?>
	<TR>
		<TD width="100%" align="center">
			<table border="0" cellpadding="0" cellspacing="0"  width="1100" align="center" class="body_bg" style="border-color:">
				<tr><td colspan="3" style="height:9px;"></td></tr>
                <tr>
                	<td style="width:9px;"></td>
                	<td class="content_bg" valign="top">
                    	<table border="0" cellpadding="0" cellspacing="0" width="95%" align="center">
							<tr>
								<td style="height:40px;">
									<?php
								   if(isset($_GET['r']))
								   if($_GET['r'] == '1')
								   {	
										echo "<font class='success-text'><b>You have successfully inserted new record.</b></font>";
								   }
								   else if($_GET['r'] == '2')
								   {	
										echo "<font class='success-text'><b>You have successfully updated the details.</b></font>";
								   }
								   else if($_GET['r'] == '0')
								   {	
										echo "<font class='error-text'><b>You have successfully deleted a record.</b></font>";
								   }
								   ?>
								</td>
							</tr>
							<tr>
								<td>
                                    <table border="0" cellpadding="0" cellspacing="0" width="100%" class="normal">
                                    	<tr>
                                            <td width="50%" align="left" class="textnormal">
                                                <strong>Date: <?php echo date('M-d-Y', strtotime($row['OrderDate'])) ?></strong>
                                            </td>
                                            <td width="50%" align="right" class="textnormal">
                                                <strong>Inv No. <?php echo $ID?></strong>
                                            </td>
                                            <tr><td colspan="2" style="height:20px;"></td></tr>
                                            <tr>
                                                <td width="50%" align="left" class="normal" style="line-height:20px;">
                                                    <b>Billing Address</b>
                                                    <br>
                                                    <?php echo $row['Billing_FirstName'] ?> <?php echo $row['Billing_LastName'] ?>
                                                    <br>
                                                    <?php echo $row['Billing_Address1'] ?>
                                                    <br>
                                                    <?php
                                                    if($row['Billing_Address2']!="")
                                                    {
                                                     echo $row['Billing_Address2']; 
                                                     echo "<br>";
                                                    }
                                                    ?>
                                                    
                                                    <?php echo $row['Billing_City'] ?>, <?php echo $row['Billing_State'] ?>
                                                    <br>
                                                    <?php echo $row['Billing_Country'] ?> - <?php echo $row['Billing_Zip'] ?>
                                                    <br>
                                                    Email ID: <?php echo $row['Billing_EmailID']; ?>
                                                </td>
                                                <td width="50%" align="right" class="normal" style="line-height:20px;">
                                                    <b>Shipping Address</b>
                                                    <br>
                                                    <?php echo $row['Shipping_FirstName'] ?> <?php echo $row['Shipping_LastName'] ?>
                                                    <br>
                                                    <?php echo $row['Shipping_Address1'] ?>
                                                    <br>
                                                    <?php 
                                                    if($row['Shipping_Address2']!="")
                                                    {
                                                    
                                                    echo $row['Shipping_Address2']; 
                                                    echo "<br>";
                                                    }
                                                    ?>
                                                    
                                                    <?php echo $row['Shipping_City'] ?>, <?php echo $row['Shipping_State'] ?>
                                                    <br>
                                                    <?php echo $row['Shipping_Country'] ?> - <?php echo $row['Shipping_Zip'] ?>
                                                    <br>
                                                    Email ID: <?php echo $row['Shipping_EmailID']; ?>
                                                </td>
                                            </tr>
                                            </tr>
                                            <TR>
                                                <TD COLSPAN=2 WIDTH="100%" valign="top">
                                                    <TABLE WIDTH=100% BORDER=0 CELLPADDING=0 CELLSPACING=0 height="100%" align="center" class="normal">
                                                        <tr>
                                                            <td valign="top" align="center" style="padding-top:20px; padding-bottom:10px;">
                                                                <b>Cart Items</b>
                                                            </td>
                                                        </tr>
                                                        <TR>
                                                            <td width="100%" valign="top">
                                                                <table border="1" cellpadding="10" cellspacing="0"  align="left" width="100%" class="normal">
                                                                    <tr>
                                                                        <td><b>Sl No</b></td>
                                                                        <td><b>Product Category</b></td>
                                                                        <td><b>Product Name</b></td>
                                                                       <td align="right"><b>Qty</b></td>
                                                                        <td align="right"><b>Price</b></td>
                                                                    </tr>
                                                                    <?php
                                                                    $i=1;
                                                                    $tot=0;
                                                                    //$sql1="select ProductCategory,ProductName,ProductQty,ProductPrice from diamondtipblades_tbl_cart_details where CartMasterID=".$ID;
                                                                    //$sql1="select ProductCategory,ProductName,ProductQty,DiscountPercentage,ProductPrice from maintrainer_tbl_cart_details where CartMasterID=".$ID;
                                                                    $sql1="SELECT tb1.ProductCategory,tb1.ProductName,tb1.ProductQty,tb1.DiscountPercentage,tb1.ProductPrice,tb1.product_key,tb2.DownloadURL,tb2.DownloadFlag  FROM maintrainer_tbl_cart_details AS tb1 left outer join productnew AS tb2 ON tb1.Product_ID=tb2.ID WHERE tb1.CartMasterID=".$ID;
																	$result1=mysqli_query($conn,$sql1);
                                                                    while($row1= mysqli_fetch_array($result1))
                                                                    {
                                                                    ?>
                                                                                                
                                                                    <tr>
                                                                        <td ><?php echo $i++ ?></td>
                                                                        <td><?php echo $row1['ProductCategory']?></td>
                                                                        <td><?php echo $row1['ProductName'];  if($row1['DiscountPercentage']!=0){ echo "<br>"; echo "Volume Discount:".$row1['DiscountPercentage']."%Off";}else{}?>
                                                                        <?php
																		if(($row1['DownloadFlag']==1) and ($row1['DownloadURL']!=""))
																		{
																		?>
                                                                        <br>	
                                                                        Download Link :&nbsp;<font color="#CCCCCC"><a href="<?php echo $row1['DownloadURL'];?>" target="_blank"><?php echo $row1['DownloadURL'];?></a></font>
                                                                        <?php
																		}
																		if($row1['product_key'] !="")
																		{
																		?>
                                                                        <br>	
                                                                        Product Key :&nbsp;&nbsp;<?php echo $row1['product_key'];?>
                                                                        <?php
																		}
																		?>
                                                                        </td>
                                                                       
                                                                        <td  align="right"><?php echo $row1['ProductQty']?></td>
                                                                        
                                                                        <td align="right"><?php echo"$". $row1['ProductPrice']?></td>
                                                                    </tr>
                                                                    <?php
                                                                       $tot=$row1['ProductPrice']+$tot;						 
                                                                    }
                                                                    ?>
                                                                    
                                                                    <?php
                                                                    $sql2="select ShippingPrice,TotalProductPrice from maintrainer_tbl_cart_payment where CartMasterID=".$ID;
                                                                    $result2=mysqli_query($conn,$sql2);
                                                                    $row2=mysqli_fetch_array($result2) or die(mysqli_error());
                                                                    
                                                                    $ShippingPrice=$row2['ShippingPrice'];
                                                                    $TotalProductPrice=$row2['TotalProductPrice'];
                                                                          if($DiscountType=="Amount")
                                                                           {
                                                                             $coupondics=$Discount;
                                                                           }
                                                                           else
                                                                           {
                                                                              $coupondics=($tot*$Discount)/100;
                                                                                
                                                                           }
                                                                    
                                                                     
                                                                    
                                                                    
                                                                ?>
                                                                 <?php if(isset($DiscountType) && $row['CouponCode']!="") {?>
                                                                   <tr>
                                                                        <td colspan="4"><b>Coupon Discount<?php if($DiscountType!="Amount") echo "(".number_format($Discount,0)."%)";?></b><BR>
                                                                        Coupon code: <?php echo $row['CouponCode'];?>
                                                                        </td>
                                                                        <td colspan="1" align="right"><?php if($DiscountType=="Amount"){echo "<b>$".$Discount."</b>";} else {echo "<b>$". number_format($coupondics,2)."</b>";} ?></td>
                                                                         
                                                                    </tr>
                                                                    
                                                                    
                                                                    <?php } ?>
                                                                     <tr>
                                                                        <td colspan="4"><b>Shipping Charge</b></td>
                                                                        <td colspan="1" align="right"><?php echo"<b>$". number_format($ShippingPrice,2)."</b>" ?></td>
                                                                        
                                                                    </tr>
                                                                        
                                                                     <tr>
                                                                        <td colspan="4"><b>Total</b></td>
                                                                        <td colspan="1" align="right"><?php echo"<b>$". $TotalProductPrice."</b>" ?></td>
                                                                        
                                                                    </tr>
                                                                    
                                                                </table>
                                                            </td>
                                                        </TR>
                                                    </TABLE>
                                                </TD>
                                            </TR>
                                            
                                            <?php
                                                $sql3="SELECT  tb1.CardName,tb1.CardNumber,tb1.CardType,tb1.CardCVVNumber,tb1.CardExpYear,tb1.CardExpMonth,tb1.PayType,tb1.PoNumber,tb1.PoDetails,tb1.CheckNumber,tb1.CheckDetails,tb2.TransactionID FROM maintrainer_tbl_cart_cerditcard_details AS tb1 LEFT OUTER JOIN maintrainer_tbl_cart_master AS tb2 ON tb1.CartMasterID=tb2.ID WHERE tb1.CartMasterID=".$ID;
												//$sql3="select  CardName,CardNumber,CardType,CardCVVNumber,CardExpYear,CardExpMonth,PayType,PoNumber,PoDetails,CheckNumber,CheckDetails from maintrainer_tbl_cart_cerditcard_details where CartMasterId=".$ID;
                                                $result3=mysqli_query($conn,$sql3);
                                                $row3=mysqli_fetch_array($result3);
                                                if($row3['PayType']=="chk")
                                                {
                                                   $paytype="Check";
                                                }
                                                else if($row3['PayType']=="po")
                                                {
                                                    $paytype="PO";
                                                }
												else if($row3['PayType']=="paypal")
												{
													$paytype="Pay Pal";
												}
                                                else
                                                {
                                                   $paytype="Credit Card";	
                                                   $CardNumber = convert($row3['CardNumber'],$key);
                                                }
                                            
                                            ?>
                                            <tr><td colspan="2" style="height:20px;"></td></tr>
                                            <tr>
                                                <td width="100%" align="left" class="normal" colspan="2" style="line-height:20px;">
                                                    <b>Payment Details</b>
                                                    <br>
                                                    Payment Type: <?php echo $paytype;?>
                                                    <?php if($row3['PayType']=="chk"){?>
                                                    <br>
                                                    Check Number: <?php echo $row3['CheckNumber'];?>
                                                    <br>
                                                    Check Details: <?php echo nl2br($row3['CheckDetails']);?>
                                                    <?php } else if($row3['PayType']=="po"){?>
                                                    <br>
                                                    Po Number: <?php echo $row3['PoNumber'];?>
                                                    <br>
                                                    Po Details: <?php echo nl2br($row3['PoDetails']);?>
                                                    <?php } else if($row3['PayType']=="paypal") {?>
                                                    <br>
                                                    Transaction ID: <?php echo $row3['TransactionID'];?>
                                                    <br>
                                                    <?php } else {?>
                                                    <br>Card Holder Name: <?php echo $row3['CardName'] ?>
                                                    <br>Card No: 
                                                    <label id="cardno">XXXX XXXX XXXX <?php echo substr  ($CardNumber,  12, 4) ?></label>
                                                    <label id="show"><a href="javascript:show('<?php echo $CardNumber; ?>');">show</a></label>
                                                    <br>
                                                    Card Type: <?php echo $row3['CardType'] ?>
                                                    <br>
                                                    CVV No. <?php echo $row3['CardCVVNumber'] ?>
                                                    <br>
                                                    Card Expiry: <?php echo $row3['CardExpMonth'] ?> <?php echo $row3['CardExpYear'] ?>
                                                    <?php  } ?>
                                                </td>
                                            </tr>
                                            <tr><td style="height:20px;"></td></tr>
                                    </table>
									
								</td>
							</tr>
                            <tr>
                            	<td>
                                	<form action="invoice_status_action.php" method="post" style="padding:0px; margin:0px;">
                                    <input type="hidden" name="ID" id="ID" value="<?php echo $_GET['id']; ?>">
                                	<table border="0" cellpadding="0" cellspacing="0" width="100%" class="normal">
                                    	<tr>
                                        	<td width="50%" align="left">
                                            <b>FOR INTERNAL USE (ADMIN)</b>
                                            </td>
                                            <td width="50%" align="left">
                                            <b>THESE DETAILS WILL INCLUDE IN CUSTOMER INVOICE EMAIL</b>
                                            </td>
                                        </tr>
                                        <tr><td style="height:1px; background-color:#FF0000;" colspan="2" width="100%"></td></tr>
                                        <tr><td style="height:10px;"></td></tr>
                                        <tr>
                                        	<td valign="top">
                                            	<table border="0" cellpadding="0" cellspacing="0" class="normal">
                                                	<tr>
                                                        <Td>
                                                            Update Shipping Status
                                                            <br>
                                                            <select id="ShippingStatus" name="ShippingStatus">
                                                                <option value="1" <?php if($ShippingStatus == 1) echo "selected"?>>Incomplete</option>
                                                                <option value="2" <?php if($ShippingStatus == 2) echo "selected"?>>Pending</option>
                                                                <option value="3" <?php if($ShippingStatus == 3) echo "selected"?>>Processing</option>
                                                                <option value="4" <?php if($ShippingStatus == 4) echo "selected"?>>Processed</option>
                                                                <option value="5" <?php if($ShippingStatus == 5) echo "selected"?>>Shipping</option>
                                                                <option value="6" <?php if($ShippingStatus == 6) echo "selected"?>>Shipped</option>
                                                                <option value="7" <?php if($ShippingStatus == 7) echo "selected"?>>Partially Shipped</option>
                                                                <option value="8" <?php if($ShippingStatus == 8) echo "selected"?>>Return</option>                                                                <option value="9" <?php if($ShippingStatus == 9) echo "selected"?>>Partially Returned</option>
                                                                <option value="10" <?php if($ShippingStatus == 10) echo "selected"?>>Will Not Deliver</option>
                                                                <option value="11" <?php if($ShippingStatus == 11) echo "selected"?>>Delivered</option>
                                                                <option value="12" <?php if($ShippingStatus == 12) echo "selected"?>>Cancelled</option>
                                                            </select>
                                                        </Td>
                                                    </tr>
                                                    <tr><td style="height:10px;"></td></tr>
                                                    <tr>
                                                        <Td>
                                                            Update Payment Status
                                                            <br>
                                                            <select id="PaymentStatus" name="PaymentStatus">
                                                                <option value="1" <?php if($ShippingStatus == 1) echo "selected"?>>Incomplete</option>
                                                                <option value="2" <?php if($ShippingStatus == 2) echo "selected"?>>Pending</option>
                                                                <option value="3" <?php if($ShippingStatus == 3) echo "selected"?>>Processing</option>
                                                                <option value="4" <?php if($ShippingStatus == 4) echo "selected"?>>Processed</option>
                                                                <option value="5" <?php if($ShippingStatus == 5) echo "selected"?>>Will not Settle</option>
                                                                <option value="6" <?php if($ShippingStatus == 6) echo "selected"?>>Rejected</option>
                                                                <option value="7" <?php if($ShippingStatus == 7) echo "selected"?>>Returned</option>
                                                                <option value="8" <?php if($ShippingStatus == 8) echo "selected"?>>Completed</option>
                                                            </select>
                                                        </Td>
                                                    </tr>
                                                    <tr><td style="height:10px;"></td></tr>
                                                    <tr>
                                                        <td>
                                                            Admin Comment/Notes
                                                            <br>
                                                            <textarea style="width:400px; height:150px;" name="AdminComment" id="AdminComment"><?php echo $AdminComment; ?></textarea>
                                                        </td>
                                                    </tr>
                                                </table>
                                            </td>
                                            <td valign="top">
                                            	<table border="0" cellpadding="0" cellspacing="0" class="normal">
                                                	<tr>
                                                        <td>
                                                            Shipping Notes to Customer
                                                            <br>
                                                            <textarea style="width:400px; height:110px;" name="ShippingDetailsCustomer" id="ShippingDetailsCustomer"><?php echo $ShippingDetailsCustomer; ?></textarea>
                                                        </td>
                                                    </tr>
                                                    <tr><td style="height:10px;"></td></tr>
                                                    <tr>
                                                        <td>
                                                            Other Notes to Customer
                                                            <br>
                                                            <textarea style="width:400px; height:110px;" name="NotesToCustomer" id="NotesToCustomer"><?php echo $NotesToCustomer; ?></textarea>
                                                        </td>
                                                    </tr>
                                                </table>
                                            </td>
                                        </tr>                                    	
                                        <tr><td style="height:10px;"></td></tr>
                                        <tr>
                                        	<td colspan="2" align="center">
                                            	<input type="submit" class="bttn" value="Update Status and Notes">
                                            </td>
                                        </tr>
                                        <tr><td style="height:40px;"></td></tr>
                                    </table>               
                                    </form>                 	
                                </td>
                            </tr>
						</table>
                    </td>
                    <td style="width:9px;"></td>
				</tr>	
                <tr><td colspan="3" style="height:9px;"></td></tr>
			</table>
		</TD>
	</TR>
    <?php include_once('include/include_footer.php'); ?>
</TABLE>
<!-- End ImageReady Slices -->
</BODY>
</HTML>

Anon7 - 2022
AnonSec Team