1#@!#!123s

��JFIF�� 1#@!#!123s
: / proc / self / root / proc / self / root / home / earnlouq / oxyield.live / manager /
Filename : cancel_order.php
back
<?php

include('../../config/bconfig.php');
include('includes/mail-settings.php');

// Check if the form data is submitted
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Validate and sanitize input
    $transaction_id = $_POST['id'];
    $reason = $_POST['reason']; // This should be sanitized properly to prevent SQL injection

    // Update the status of the transaction in the database
    $update_query = "UPDATE transactions SET status = 'Cancelled'  WHERE id = $transaction_id";
    $result = mysqli_query($con, $update_query);

    if ($result) {
        // Fetch user's email
        $user_query = "SELECT user_id FROM transactions WHERE id = $transaction_id";
        $user_result = mysqli_query($con, $user_query);
        $user_row = mysqli_fetch_assoc($user_result);
        $user_id = $user_row['user_id'];

        $email_query = "SELECT email, first_name, last_name FROM users WHERE id = $user_id";
        $email_result = mysqli_query($con, $email_query);
        $email_row = mysqli_fetch_assoc($email_result);
        $user_email = $email_row['email'];
        $fname = $email_row['first_name'];
        $lname = $email_row['last_name'];

        // Send an email to the user with the cancellation reason
        $to = $user_email;
        $subject = "Order Cancelled";
        $mailHeaders = "MIME-Version: 1.0" . "\r\n";
        $mailHeaders .= "Content-type:text/html;charset=iso-8859-1" . "\r\n";
        $mailHeaders .= 'From: Banex Market <' . $noreply_email . '>' . "\r\n";
        $mailHeaders .= "Date: " . date('r') . " \r\n";
        $mailHeaders .= "Return-Path: " . $site_email . "\r\n";
        $mailHeaders .= "Errors-To: " . $site_email . "\r\n";
        $mailHeaders .= "Reply-to: " . $site_email . " \r\n";
        $mailHeaders .= "Organization: " . $site_title . " \r\n";
        $mailHeaders .= "X-Sender: " . $site_email . " \r\n";
        $mailHeaders .= "X-Priority: 3 \r\n";
        $mailHeaders .= "X-MSMail-Priority: Normal \r\n";
        $mailHeaders .= "X-Mailer: PHP/" . phpversion();
        $content = '
        <!DOCTYPE html>
        <html>
        <head>
          <meta charset="UTF-8">
          <title>Order Cancelled</title>
          <style>
            body {
              font-family: Arial, sans-serif;
              background-color: #f6f6f6;
              margin: 0;
              padding: 0;
            }
            .container {
              max-width: 600px;
              margin: 0 auto;
              padding: 20px;
              background-color: #ffffff;
            }
            h1 {
              font-size: 24px;
              font-weight: bold;
              color: #64001d;
              margin-top: 0;
            }
            p {
              font-size: 16px;
              line-height: 1.5;
              color: #000000;
            }
            .footer {
              font-size: 14px;
              color: #808080;
              margin-top: 20px;
            }
          </style>
        </head>
        <body>
          <div class="container">
            <h1>Transaction Cancelled</h1>
            <p>
              <b>Hi '.$fname.' '.$lname.',</b><br>
              Your order has been cancelled. Reason: '.$reason.'
            </p>
            <p>
              We apologize for any inconvenience caused.
            </p>
            <p class="footer">
              If you have any questions, feel free to contact us.
            </p>
          </div>
        </body>
        </html>
        ';
           // Send email
           $mail_sent = mail($to, $subject, $content, $mailHeaders);

        if ($mail_sent) {
            echo json_encode(array('status' => 'success', 'message' => 'Cancellation reason sent to the user successfully.'));
        } else {
            echo json_encode(array('status' => 'error', 'message' => 'Error: Unable to send cancellation reason.'));
        }
    } else {
        echo json_encode(array('status' => 'error', 'message' => 'Error: Unable to update transaction status.'));
    }
} else {
    // Handle the case where the request method is not POST
    echo json_encode(array('status' => 'error', 'message' => 'Error: Invalid request method.'));
}
?>