MAINHACK

Viewing / Editing File: change-payment-status.php

<?php include("../admin/includes/functions/functions.php");?>
<?php include("../admin/db/db.php");?>

<?php 
 $flag_add_service_form = 0;

if(isset($_POST['edit']) && $_SERVER['REQUEST_METHOD'] == 'POST'){

$payment = filter_input(INPUT_POST, 'payment', FILTER_SANITIZE_STRING);
$payment = htmlspecialchars($payment, ENT_QUOTES, 'UTF-8');

$active12 = filter_input(INPUT_POST, 'active12', FILTER_SANITIZE_STRING);
$active12 = htmlspecialchars($active12, ENT_QUOTES, 'UTF-8');

$cat_name = filter_input(INPUT_POST, 'cat_name', FILTER_SANITIZE_STRING);
$cat_name = htmlspecialchars($cat_name, ENT_QUOTES, 'UTF-8');

$discount_value = filter_input(INPUT_POST, 'discount_value', FILTER_SANITIZE_STRING);
$discount_value = htmlspecialchars($discount_value, ENT_QUOTES, 'UTF-8');

$comm_id = filter_input(INPUT_POST, 'comm_id', FILTER_SANITIZE_STRING);
$comm_id = htmlspecialchars($comm_id, ENT_QUOTES, 'UTF-8');

$select = mysqli_query($new,"SELECT * FROM appointments WHERE appointment_id = '$cat_name'");
  $mycommission = mysqli_fetch_array($select);
  $db_com = $mycommission['comRate'];

if(empty($comm_id)){
     $com = $db_com;

} else {
    $com = $comm_id;
}

if(empty($discount_value)){

$stmt = $con->prepare("update  appointments set active = ?,payment_mode = ? ,discount = ?,comRate = ? where appointment_id = ? ");
$stmt->execute(array($active12,$payment,$discount,$com,$cat_name));
 header("location:appointment");

}else {

$stmt = $con->prepare("update  appointments set active = ?,payment_mode = ? , discount = ?,comRate = ? where appointment_id = ? ");
$stmt->execute(array($active12,$payment,$discount_value,$com,$cat_name));

header("location:appointment");
}

}

Cancel / Back

[ MAINHACK ]

Viewing / Editing File: change-payment-status.php

Server Info

System Features

User Info