Tiny File Manager | orderdetail.php

File: orderdetail.php
Full Path: /home/u322583024/domains/loveberi.com/public_html/admin/orderdetail.php
File size: 14.93 KB
MIME-type: text/x-php
Charset: utf-8
Delete Open Edit Advanced Editor Back
<?php 
require('connection.inc.php');
require('security.php');
error_reporting(E_ALL);
ini_set('display_errors', 1);

// Function to check if the user has the required permission
function hasPermission($role_id, $permission_name, $conn) {
    $query = "SELECT rp.role_permissions_id
              FROM role_permissions rp
              INNER JOIN permissions p ON rp.permission_id = p.permission_id
              WHERE rp.role_id = ? AND p.permission_name = ?";
    $stmt = $conn->prepare($query);
    $stmt->bind_param("is", $role_id, $permission_name); // Binding parameters (integer and string)
    $stmt->execute();
    $result = $stmt->get_result();

    return $result->num_rows > 0; // Return true if permission exists
}

// Get user's role from session
$user_role_id = $_SESSION['role_id'];

// Define the required permission for this page
$permission_name = "Orders"; 
// Ensure user is logged in
if (!isset($_SESSION['user_id'])) {
    header('Location: index.php');
    exit();
}

// OPTIONAL: If you want to allow only admins (e.g., role_id == 1)
if ($_SESSION['role_id'] != 1) {
    echo "Access denied. Only admin can view orders.";
    exit();
}

$order_id = $_GET['order_id'];

// Fetch order details
$order_stmt = $conn->prepare("
    SELECT order_id, first_name, last_name, email, phone, country, address, city, state, postcode,
           subtotal, payment_method, status, payment_status, payment_id, payment_datetime, created_at
    FROM orders
    WHERE order_id = ?
");
$order_stmt->bind_param("s", $order_id);
$order_stmt->execute();
$order_result = $order_stmt->get_result();

if ($order_result->num_rows === 0) {
    echo "Order not found.";
    exit();
}

$order = $order_result->fetch_assoc();

// Fetch ordered items with product and unit info
$items_stmt = $conn->prepare("
    SELECT oi.product_id, p.product_name, oi.unit_id, pu.unit_name,
           oi.quantity, oi.unit_price, oi.total_price, pi.product_img
    FROM order_items oi
    INNER JOIN products p ON oi.product_id = p.product_id
    INNER JOIN product_units pu ON oi.unit_id = pu.unit_id
    LEFT JOIN product_imgs pi ON oi.product_id = pi.product_id
    WHERE oi.order_id = ?
    GROUP BY oi.product_id
");
$items_stmt->bind_param("s", $order_id);
$items_stmt->execute();
$items_result = $items_stmt->get_result();
?>

<!DOCTYPE html>
<html lang="zxx">
<head>
    <!-- Required meta tags -->
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
    <title>Management Admin</title>

    <link rel="icon" href="img/mini_logo.png" type="image/png">
    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="css/bootstrap1.min.css" />
    <!-- themefy CSS -->
    <link rel="stylesheet" href="vendors/themefy_icon/themify-icons.css" />
    <!-- select2 CSS -->
    <link rel="stylesheet" href="vendors/niceselect/css/nice-select.css" />
    <!-- owl carousel CSS -->
    <link rel="stylesheet" href="vendors/owl_carousel/css/owl.carousel.css" />
    <!-- gijgo css -->
    <link rel="stylesheet" href="vendors/gijgo/gijgo.min.css" />
    <!-- font awesome CSS -->
    <link rel="stylesheet" href="vendors/font_awesome/css/all.min.css" />
    <link rel="stylesheet" href="vendors/tagsinput/tagsinput.css" />

    <!-- date picker -->
     <link rel="stylesheet" href="vendors/datepicker/date-picker.css" />

     <link rel="stylesheet" href="vendors/vectormap-home/vectormap-2.0.2.css" />
     
     <!-- scrollabe  -->
     <link rel="stylesheet" href="vendors/scroll/scrollable.css" />
    <!-- datatable CSS -->
    <link rel="stylesheet" href="vendors/datatable/css/jquery.dataTables.min.css" />
    <link rel="stylesheet" href="vendors/datatable/css/responsive.dataTables.min.css" />
    <link rel="stylesheet" href="vendors/datatable/css/buttons.dataTables.min.css" />
    <!-- text editor css -->
    <link rel="stylesheet" href="vendors/text_editor/summernote-bs4.css" />
    <!-- morris css -->
    <link rel="stylesheet" href="vendors/morris/morris.css">
    <!-- metarial icon css -->
    <link rel="stylesheet" href="vendors/material_icon/material-icons.css" />

    <!-- menu css  -->
    <link rel="stylesheet" href="css/metisMenu.css">
    <!-- style CSS -->
    <link rel="stylesheet" href="css/style1.css" />
    <link rel="stylesheet" href="css/colors/default.css" id="colorSkinCSS">
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- Add SweetAlert2 CSS -->
    <link href="https://cdn.jsdelivr.net/npm/sweetalert2@11.5.6/dist/sweetalert2.min.css" rel="stylesheet">

    <!-- Add SweetAlert2 JavaScript -->
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11.5.6/dist/sweetalert2.min.js"></script>
<style>
.active_status {
    color: green;
    font-weight: bold;
}
.inactive_status {
    background: red !important;
    font-weight: bold;
}

    .card h2, .card h4 {
        color: #2c3e50;
    }

    .badge-warning {
        background-color: #f1c40f;
        color: #000;
    }




        table { border-collapse: collapse; width: 100%; margin-top: 20px; }
        th, td { border: 1px solid #ccc; padding: 8px; text-align: left; }
        th { background: #f0f0f0; }

</style>

</head>
<body class="crm_body_bg">
<?php
// Your PHP code for checking permission goes here
if (!hasPermission($user_role_id, $permission_name, $conn)) {
    // Destroy the session to log the user out
    session_unset(); // Unset all session variables
    session_destroy(); // Destroy the session

    // Show SweetAlert and then redirect
    echo "<script>
        document.addEventListener('DOMContentLoaded', function() {
            Swal.fire({
                icon: 'error',
                title: 'Access Denied',
                text: 'You do not have permission to access this page.',
                showConfirmButton: false,
                timer: 3000
            }).then(function() {
                window.location.href = 'index.php'; // Redirect after the alert
            });
        });
    </script>";
    exit();
}
?>


<!-- main content part here -->
 
 <!-- sidebar  -->
 <?php require('sidebar.inc.php'); ?>
 <!--/ sidebar  -->


<section class="main_content dashboard_part large_header_bg">
    <!-- menu  -->
        <?php require('header.inc.php'); ?>
    <!--/ menu  -->
  
<div class="main_content_iner overly_inner py-4">
    <div class="container-fluid">
        <div class="card shadow-lg p-4">
            <h2 class="mb-4">Order Details</h2>

            <div class="mb-3">
                <h5 class="text-muted">Order ID: <span class="fw-bold"><?= htmlspecialchars($order['order_id']) ?></span></h5>
                <p><strong>Customer:</strong> <?= htmlspecialchars($order['first_name'] . ' ' . $order['last_name']) ?></p>
                <p><strong>Email:</strong> <?= htmlspecialchars($order['email']) ?></p>
                <p><strong>Phone:</strong> <?= htmlspecialchars($order['phone']) ?></p>
                <p><strong>Address:</strong> <?= htmlspecialchars($order['address'] . ', ' . $order['city'] . ', ' . $order['state'] . ', ' . $order['postcode'] . ', ' . $order['country']) ?></p>
                <p><strong>Order Date:</strong> <?= date("d-m-Y H:i", strtotime($order['created_at'])) ?></p>
                <p><strong>Payment Method:</strong> <?= htmlspecialchars($order['payment_method']) ?></p>
                <p><strong>Payment Status:</strong> 
                    <span class="badge bg-<?= ($order['payment_status'] == 'Paid') ? 'success' : 'warning' ?>">
                        <?= htmlspecialchars($order['payment_status']) ?>
                    </span>
                </p>
                <?php if ($order['payment_id']): ?>
                    <p><strong>Payment ID:</strong> <?= htmlspecialchars($order['payment_id']) ?></p>
                    <p><strong>Payment Date:</strong> <?= date("d-m-Y H:i", strtotime($order['payment_datetime'])) ?></p>
                <?php endif; ?>
                <p><strong>Subtotal:</strong> ₹<?= number_format($order['subtotal'], 2) ?></p>

                <!-- Edit Order Status Form -->
                <form method="post" action="update_order_status.php">
                    <input type="hidden" name="order_id" value="<?= htmlspecialchars($order['order_id']) ?>">
                    <div class="mb-3">
                        <label for="status" class="form-label"><strong>Update Order Status:</strong></label>
                        <select name="status" id="status" class="form-select" required>
                            <option value="">--Select Status--</option>
                            <option value="Pending" <?= ($order['status'] == 'Pending') ? 'selected' : '' ?>>Pending</option>
                            <option value="Processing" <?= ($order['status'] == 'Processing') ? 'selected' : '' ?>>Processing</option>
                            <option value="Shipped" <?= ($order['status'] == 'Shipped') ? 'selected' : '' ?>>Shipped</option>
                            <option value="Delivered" <?= ($order['status'] == 'Delivered') ? 'selected' : '' ?>>Delivered</option>
                            <option value="Cancelled" <?= ($order['status'] == 'Cancelled') ? 'selected' : '' ?>>Cancelled</option>
                        </select>
                    </div>
                    <button type="submit" class="btn btn-primary">Update Status</button>
                </form>
            </div>

            <h4 class="mt-5 mb-3">Ordered Items</h4>
            <div class="table-responsive">
                <table class="table table-bordered align-middle text-center">
                    <thead class="table-dark">
                        <tr>
                            <th>Image</th>
                            <th>Product</th>
                            <th>Unit</th>
                            <th>Quantity</th>
                            <th>Unit Price (₹)</th>
                            <th>Total (₹)</th>
                        </tr>
                    </thead>
                    <tbody>
                        <?php
                        mysqli_data_seek($items_result, 0); // Reset pointer
                        while ($item = $items_result->fetch_assoc()):
                            // Fetch image for product
                            $img_stmt = $conn->prepare("SELECT product_img FROM product_imgs WHERE product_id = ? LIMIT 1");
                            $img_stmt->bind_param("i", $item['product_id']);
                            $img_stmt->execute();
                            $img_result = $img_stmt->get_result();
                            $img_row = $img_result->fetch_assoc();
                            $product_img = $img_row ? $img_row['product_img'] : 'placeholder.png';
                        ?>
                            <tr>
                                <td><img src="<?= htmlspecialchars($product_img) ?>" alt="Image" style="width: 60px; height: auto;"></td>
                                <td><?= htmlspecialchars($item['product_name']) ?></td>
                                <td><?= htmlspecialchars($item['unit_name']) ?></td>
                                <td><?= htmlspecialchars($item['quantity']) ?></td>
                                <td><?= number_format($item['unit_price'], 2) ?></td>
                                <td><?= number_format($item['total_price'], 2) ?></td>
                            </tr>
                        <?php endwhile; ?>
                    </tbody>
                </table>
            </div>
        </div>
    </div>
</div>



</section>

<!-- footer part -->
<?php require('footer.inc.php'); ?>
<!-- main content part end -->


<div id="back-top" style="display: none;">
    <a title="Go to Top" href="#">
        <i class="ti-angle-up"></i>
    </a>
</div>

<!-- footer  -->
<script src="js/jquery1-3.4.1.min.js"></script>
<!-- popper js -->
<script src="js/popper1.min.js"></script>
<!-- bootstarp js -->
<script src="js/bootstrap1.min.js"></script>
<!-- sidebar menu  -->
<script src="js/metisMenu.js"></script>
<!-- waypoints js -->
<script src="vendors/count_up/jquery.waypoints.min.js"></script>
<!-- waypoints js -->
<script src="vendors/chartlist/Chart.min.js"></script>
<!-- counterup js -->
<script src="vendors/count_up/jquery.counterup.min.js"></script>

<!-- nice select -->
<script src="vendors/niceselect/js/jquery.nice-select.min.js"></script>
<!-- owl carousel -->
<script src="vendors/owl_carousel/js/owl.carousel.min.js"></script>

<!-- responsive table -->
<script src="vendors/datatable/js/jquery.dataTables.min.js"></script>
<script src="vendors/datatable/js/dataTables.responsive.min.js"></script>
<script src="vendors/datatable/js/dataTables.buttons.min.js"></script>
<script src="vendors/datatable/js/buttons.flash.min.js"></script>
<script src="vendors/datatable/js/jszip.min.js"></script>
<script src="vendors/datatable/js/pdfmake.min.js"></script>
<script src="vendors/datatable/js/vfs_fonts.js"></script>
<script src="vendors/datatable/js/buttons.html5.min.js"></script>
<script src="vendors/datatable/js/buttons.print.min.js"></script>

<!-- datepicker  -->
<script src="vendors/datepicker/datepicker.js"></script>
<script src="vendors/datepicker/datepicker.en.js"></script>
<script src="vendors/datepicker/datepicker.custom.js"></script>

<script src="js/chart.min.js"></script>
<script src="vendors/chartjs/roundedBar.min.js"></script>

<!-- progressbar js -->
<script src="vendors/progressbar/jquery.barfiller.js"></script>
<!-- tag input -->
<script src="vendors/tagsinput/tagsinput.js"></script>
<!-- text editor js -->
<script src="vendors/text_editor/summernote-bs4.js"></script>

<script src="js/custom.js"></script>
<script>
    $(document).on('click', '.status_btn', function(e) {
    e.preventDefault();

    var $btn = $(this);
    var productId = $btn.data('id');
    var currentStatus = $btn.data('status');
    var newStatus = currentStatus == 1 ? 0 : 1;
    var csrfToken = $btn.data('csrf');
 console.log({
        id: productId,
        status: newStatus,
        csrf_token: csrfToken
    });

    $.ajax({
        url: 'update_product_status.php',
        type: 'POST',
        data: {
            id: productId,
            status: newStatus,
            csrf_token: csrfToken
        },
        success: function(response) {
            console.log("Response from server:", response); // log response
            if (response === 'success') {
                $btn.data('status', newStatus);
                $btn.text(newStatus == 1 ? 'Active' : 'Inactive');
                $btn.toggleClass('active_status inactive_status');
            } else {
                alert('Status update failed.');
            }
        }
    });
});

</script>
</body>

<!-- Mirrored from demo.dashboardpack.com/user-management-html/add_new_user.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 02 Dec 2024 05:54:56 GMT -->
</html>