<h2>File Contents: /home/u885320773/domains/sugatu.in/process/process-checkout.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/u885320773/domains/sugatu.in/process/process-checkout.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php
session_start();


include '../admin/config.php'; // Ensure this file connects to the database and defines $conn

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Generate a unique order ID
    $order_id = uniqid('ORDER_');

    // Retrieve form data
    $totalSubtotal = $_POST['totalSubtotalInput'];
    $discountAmount = $_POST['discountAmountInput'];
    $grandTotal = $_POST['grandTotalInput'];

    // Billing Details
    $bfirstname = $_POST['bfname'];
    $blastname = $_POST['blname'];
    $bemail = $_POST['bemail'];
    $bcname = $_POST['bcname'];
    $bgst = $_POST['bgst'];
    $bphone = $_POST['bphone'];
    $baddress = $_POST['billing_address'];
    $baddress2 = $_POST['billing_address2'];
    $bcity = $_POST['bcity'];
    $bstate = $_POST['bstate'];
    $bzipcode = $_POST['bzipcode'];
    $bcountry = $_POST['bcountry'];

    // Shipping Details (if provided, otherwise copy billing)
    $sfirstname = $_POST['sfname'] ?: $bfirstname;
    $slastname = $_POST['slname'] ?: $blastname;
    $sphone = $_POST['sphone'] ?: $bphone;
    $saddress = $_POST['shipping_address'] ?: $baddress;
    $saddress2 = $_POST['shipping_address2'] ?: $baddress2;
    $scity = $_POST['scity'] ?: $bcity;
    $sstate = $_POST['sstate'] ?: $bstate;
    $szipcode = $_POST['szipcode'] ?: $bzipcode;
    $scountry = $_POST['scountry'] ?: $bcountry;



    $cart_items = isset($_SESSION['cart']) ? $_SESSION['cart'] : [];

    if (empty($cart_items)) {
        die(&quot;Cart items are empty. Cannot save to the order_items table.&quot;);
    }


    // Insert into orders table
    $stmt = $conn-&gt;prepare(&quot;
        INSERT INTO orders (
            order_id, total_subtotal, discount_amount, grand_total, 
            bfirstname, blastname, bemail, bphone, bcname, bgst, baddress, baddress2, bcity, bstate, bzipcode, bcountry, 
            sfirstname, slastname, sphone, scname, saddress, saddress2, scity, sstate, szipcode, scountry
        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
    &quot;);
    $stmt-&gt;bind_param(
        'sdddssssssssssssssssssssss',
        $order_id, $totalSubtotal, $discountAmount, $grandTotal,
        $bfirstname, $blastname, $bemail, $bphone, $bcname, $bgst, $baddress, $baddress2, $bcity, $bstate, $bzipcode, $bcountry,
        $sfirstname, $slastname, $sphone, $scname, $saddress, $saddress2, $scity, $sstate, $szipcode, $scountry
    );
    $stmt-&gt;execute();



    // Check if cart items exist
if (empty($cart_items)) {
    die(&quot;Cart items are empty. Cannot save to the order_items table.&quot;);
}

// Save each cart item to the `order_items` table
$sql_item = &quot;INSERT INTO order_items (order_id, product_id, product_name, quantity, price) VALUES (?, ?, ?, ?, ?)&quot;;
$stmt_item = $conn-&gt;prepare($sql_item);

foreach ($cart_items as $item) {
    $product_id = $item['productId'];
    $product_name = $item['title'];
    $quantity = $item['quantity'];
    $price = $item['price'];

    $stmt_item-&gt;bind_param(&quot;sisid&quot;, $order_id, $product_id, $product_name, $quantity, $price);
    if (!$stmt_item-&gt;execute()) {
        die(&quot;Error saving cart item: &quot; . $stmt_item-&gt;error);
    }
}

// echo &quot;Order and items saved successfully!&quot;;


  // Clear cart after successful order placement
  // unset($_SESSION['cart']);
    
        // Redirect to success page
      //  header(&quot;Location: order-success.php?order_id=$order_id&quot;);
      //  exit;





       // CCAvenue Integration
    $merchant_id = '2670081'; // Replace with your CCAvenue Merchant ID
    $access_code = 'AVVE89KG56BL93EVLB'; // Replace with your CCAvenue Access Code
    $working_key = 'C8AEFEE79C1B5AB3F7F0B1A88A0F111A'; // Replace with your CCAvenue Working Key
    $redirect_url = 'localhost/sugatu3/process/ccavenue-response.php'; // URL to handle CCAvenue response
    // $redirect_url = 'https://sugatu.in/process/ccavenue-response.php'; // URL to handle CCAvenue response


    $amount = $grandTotal; // Payment amount (grand total)
    $order_id = $order_id; // Order ID
    $currency = &quot;INR&quot;; // Use the currency supported by your CCAvenue account

    // Prepare billing/shipping details for CCAvenue
    $data = [
        &quot;merchant_id&quot; =&gt; $merchant_id,
        &quot;order_id&quot; =&gt; $order_id,
        &quot;currency&quot; =&gt; $currency,
        &quot;amount&quot; =&gt; $amount,
        &quot;redirect_url&quot; =&gt; $redirect_url,
        &quot;cancel_url&quot; =&gt; $redirect_url,
        &quot;language&quot; =&gt; &quot;EN&quot;,
        &quot;billing_name&quot; =&gt; $bfirstname . ' ' . $blastname,
        &quot;billing_address&quot; =&gt; $baddress,
        &quot;billing_city&quot; =&gt; $bcity,
        &quot;billing_state&quot; =&gt; $bstate,
        &quot;billing_zip&quot; =&gt; $bzipcode,
        &quot;billing_country&quot; =&gt; $bcountry,
        &quot;billing_tel&quot; =&gt; $bphone,
        &quot;billing_email&quot; =&gt; $bemail,
        &quot;delivery_name&quot; =&gt; $sfirstname . ' ' . $slastname,
        &quot;delivery_address&quot; =&gt; $saddress,
        &quot;delivery_city&quot; =&gt; $scity,
        &quot;delivery_state&quot; =&gt; $sstate,
        &quot;delivery_zip&quot; =&gt; $szipcode,
        &quot;delivery_country&quot; =&gt; $scountry,
        &quot;delivery_tel&quot; =&gt; $sphone,
    ];

    // Encrypt the data using CCAvenue Working Key
    require_once('ccavenue/Crypto.php'); // Include CCAvenue Crypto library
    $encrypted_data = encrypt(http_build_query($data), $working_key);

    // Redirect to CCAvenue payment page
    //&lt;form method='post' action='https://test.ccavenue.com/transaction/transaction.do?command=initiateTransaction'&gt;
    echo &quot;
    &lt;form method='post' action='https://secure.ccavenue.com/transaction/transaction.do?command=initiateTransaction'&gt;
        &lt;input type='hidden' name='encRequest' value='$encrypted_data'&gt;
        &lt;input type='hidden' name='access_code' value='$access_code'&gt;
    &lt;/form&gt;
    &lt;script&gt;document.forms[0].submit();&lt;/script&gt;&quot;;
}


?&gt;</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fu885320773%2Fdomains%2Fsugatu.in%2Fprocess'>⬅ Back to Directory</a>