1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / earnlouq / oxyield.live / manager /
Filename : transaction-details.php
back
<?php
session_start();
include('../../config/oxconfig.php');
include('includes/checklogin.php');
include('includes/mail-settings.php');
check_login();
$title = "Transaction Details";
include 'includes/header.php';
include 'includes/sidebar.php';

// Enable error reporting for debugging
ini_set('display_errors', 1);
error_reporting(E_ALL);

$currentTime = date('Y-m-d H:i:s');

// Validate transaction ID
$tid = isset($_GET['tid']) ? filter_var($_GET['tid'], FILTER_VALIDATE_INT) : 0;
if (!$tid) {
    echo "<script>window.location.href='pending-withdrawals.php';</script>";
    exit;
}

// Confirm withdrawal
if (isset($_GET['confirm']) && isset($_GET['uid'])) {
    $uid = filter_var($_GET['uid'], FILTER_VALIDATE_INT);
    if ($uid) {
        $con->begin_transaction();
        try {
            // Retrieve transaction and user details
            $stmt = $con->prepare("SELECT t.amount, t.account_type, u.fullname, u.email, u.wallet_address, u.wallet_network 
                                   FROM transactions t 
                                   LEFT JOIN users u ON t.user_id = u.id 
                                   WHERE t.id = ? AND t.user_id = ? AND t.type = 'withdrawal' AND t.status = 'Pending'");
            $stmt->bind_param('ii', $tid, $uid);
            $stmt->execute();
            $result = $stmt->get_result();
            $row = $result->fetch_assoc();
            $stmt->close();

            if ($row) {
                $amount = $row['amount'];
                $account_type = $row['account_type'];
                $fullname = $row['fullname'];
                $email = $row['email'];
                $wallet_address = $row['wallet_address'];
                $wallet_network = $row['wallet_network'];

                // Update transaction status
                $stmt = $con->prepare("UPDATE transactions SET status = 'Confirmed', updationDate = ? WHERE id = ?");
                $stmt->bind_param('si', $currentTime, $tid);
                if (!$stmt->execute()) {
                    throw new Exception("Failed to update transaction status: " . $stmt->error);
                }
                $stmt->close();

                // Commit transaction
                $con->commit();

                // Send confirmation email
                $toEmail = $email;
                $subject = "Oxyield Withdrawal Confirmed";
                $mailHeaders = "MIME-Version: 1.0\r\n";
                $mailHeaders .= "Content-type:text/html;charset=UTF-8\r\n";
                $mailHeaders .= "From: Oxyield <{$noreply_email}>\r\n";
                $mailHeaders .= "Date: " . date('r') . "\r\n";
                $mailHeaders .= "Return-Path: {$site_email}\r\n";
                $mailHeaders .= "Errors-To: {$site_email}\r\n";
                $mailHeaders .= "Reply-to: {$site_email}\r\n";
                $mailHeaders .= "Organization: Oxyield\r\n";
                $mailHeaders .= "X-Sender: {$site_email}\r\n";
                $mailHeaders .= "X-Priority: 3\r\n";
                $mailHeaders .= "X-MSMail-Priority: Normal\r\n";
                $mailHeaders .= "X-Mailer: PHP/" . phpversion() . "\r\n";

                $content = '
                <!DOCTYPE html>
                <html>
                <head>
                    <meta charset="UTF-8">
                    <title>Oxyield Withdrawal Confirmed</title>
                    <style>
                        body { font-family: Arial, sans-serif; background-color: #f6f6f6; margin: 0; padding: 0; }
                        .container { max-width: 600px; margin: 0 auto; padding: 20px; background-color: #ffffff; }
                        h1 { font-size: 24px; font-weight: bold; color: #64001d; margin-top: 0; }
                        p { font-size: 16px; line-height: 1.5; color: #000000; }
                        .footer { font-size: 14px; color: #808080; margin-top: 20px; }
                    </style>
                </head>
                <body>
                    <div class="container">
                        <h1>Withdrawal Confirmed</h1>
                        <p><b>Hi ' . htmlspecialchars($fullname) . ',</b><br>Your withdrawal of $' . htmlspecialchars($amount) . ' from ' . htmlspecialchars($account_type) . ' to wallet address ' . htmlspecialchars($wallet_address) . ' (' . htmlspecialchars($wallet_network) . ') has been confirmed.</p>
                        <p><b>Reason:</b> Withdrawal request approved by administrator.</p>
                        <p>Thank you for choosing Oxyield.</p>
                        <p class="footer">If you did not initiate this withdrawal, please contact Oxyield support.</p>
                    </div>
                </body>
                </html>';

                if (!mail($toEmail, $subject, $content, $mailHeaders)) {
                    error_log("Failed to send confirmation email to $toEmail: " . error_get_last()['message']);
                    echo "<script>alert('Failed to send confirmation email.');</script>";
                }
                $msg = "Withdrawal confirmed successfully.";
                $type = "success";
            } else {
                $con->rollback();
                $msg = "Transaction not found or not pending.";
                $type = "warning";
            }
        } catch (Exception $e) {
            $con->rollback();
            error_log("Confirm withdrawal error: " . $e->getMessage());
            $msg = "Failed to confirm withdrawal: " . $e->getMessage();
            $type = "warning";
        }
        echo "<script>window.location.href='transaction-details.php?tid=$tid';</script>";
    }
}

// Reject withdrawal with reason and refund option
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['reject_reason']) && isset($_POST['uid']) && isset($_POST['tid']) && isset($_POST['refund_option'])) {
    $uid = filter_var($_POST['uid'], FILTER_VALIDATE_INT);
    $tid = filter_var($_POST['tid'], FILTER_VALIDATE_INT);
    $reject_reason = mysqli_real_escape_string($con, $_POST['reject_reason']);
    $refund_option = mysqli_real_escape_string($con, $_POST['refund_option']);
    if ($uid && $tid) {
        $con->begin_transaction();
        try {
            // Retrieve transaction and user details
            $stmt = $con->prepare("SELECT t.amount, t.account_type, u.fullname, u.email, u.balance, u.profit, u.wallet_address, u.wallet_network 
                                   FROM transactions t 
                                   LEFT JOIN users u ON t.user_id = u.id 
                                   WHERE t.id = ? AND t.user_id = ? AND t.type = 'withdrawal' AND t.status = 'Pending'");
            $stmt->bind_param('ii', $tid, $uid);
            $stmt->execute();
            $result = $stmt->get_result();
            $row = $result->fetch_assoc();
            $stmt->close();

            if ($row) {
                $amount = $row['amount'];
                $account_type = $row['account_type'];
                $fullname = $row['fullname'];
                $email = $row['email'];
                $wallet_address = $row['wallet_address'];
                $wallet_network = $row['wallet_network'];
                $balance = $row['balance'];
                $profit = $row['profit'];

                // Update transaction status
                $stmt = $con->prepare("UPDATE transactions SET status = 'Rejected', updationDate = ? WHERE id = ?");
                $stmt->bind_param('si', $currentTime, $tid);
                if (!$stmt->execute()) {
                    throw new Exception("Failed to update transaction status: " . $stmt->error);
                }
                $stmt->close();

                // Handle refund based on option
                $refund_message = "No refund applied.";
                if ($refund_option !== 'none') {
                    $column = ($refund_option === 'balance') ? 'balance' : 'profit';
                    $new_value = ($refund_option === 'balance') ? $balance + $amount : $profit + $amount;
                    $stmt = $con->prepare("UPDATE users SET $column = ?, updated_at = ? WHERE id = ?");
                    $stmt->bind_param('dsi', $new_value, $currentTime, $uid);
                    if (!$stmt->execute()) {
                        throw new Exception("Failed to update user $column: " . $stmt->error);
                    }
                    $stmt->close();
                    $refund_message = "Amount refunded to your $column.";
                }

                // Commit transaction
                $con->commit();

                // Send rejection email
                $toEmail = $email;
                $subject = "Oxyield Withdrawal Rejected";
                $mailHeaders = "MIME-Version: 1.0\r\n";
                $mailHeaders .= "Content-type:text/html;charset=UTF-8\r\n";
                $mailHeaders .= "From: Oxyield <{$noreply_email}>\r\n";
                $mailHeaders .= "Date: " . date('r') . "\r\n";
                $mailHeaders .= "Return-Path: {$site_email}\r\n";
                $mailHeaders .= "Errors-To: {$site_email}\r\n";
                $mailHeaders .= "Reply-to: {$site_email}\r\n";
                $mailHeaders .= "Organization: Oxyield\r\n";
                $mailHeaders .= "X-Sender: {$site_email}\r\n";
                $mailHeaders .= "X-Priority: 3\r\n";
                $mailHeaders .= "X-MSMail-Priority: Normal\r\n";
                $mailHeaders .= "X-Mailer: PHP/" . phpversion() . "\r\n";

                $content = '
                <!DOCTYPE html>
                <html>
                <head>
                    <meta charset="UTF-8">
                    <title>Oxyield Withdrawal Rejected</title>
                    <style>
                        body { font-family: Arial, sans-serif; background-color: #f6f6f6; margin: 0; padding: 0; }
                        .container { max-width: 600px; margin: 0 auto; padding: 20px; background-color: #ffffff; }
                        h1 { font-size: 24px; font-weight: bold; color: #64001d; margin-top: 0; }
                        p { font-size: 16px; line-height: 1.5; color: #000000; }
                        .footer { font-size: 14px; color: #808080; margin-top: 20px; }
                    </style>
                </head>
                <body>
                    <div class="container">
                        <h1>Withdrawal Rejected</h1>
                        <p><b>Hi ' . htmlspecialchars($fullname) . ',</b><br>Your withdrawal request of $' . htmlspecialchars($amount) . ' from ' . htmlspecialchars($account_type) . ' to wallet address ' . htmlspecialchars($wallet_address) . ' (' . htmlspecialchars($wallet_network) . ') has been rejected.</p>
                        <p><b>Reason:</b> ' . htmlspecialchars($reject_reason) . '</p>
                        <p><b>Refund:</b> ' . htmlspecialchars($refund_message) . '</p>
                        <p>Please contact support for further assistance.</p>
                        <p class="footer">If you have questions, reach out to Oxyield support.</p>
                    </div>
                </body>
                </html>';

                if (!mail($toEmail, $subject, $content, $mailHeaders)) {
                    error_log("Failed to send rejection email to $toEmail: " . error_get_last()['message']);
                    echo "<script>alert('Failed to send rejection email.');</script>";
                }
                $msg = "Withdrawal rejected successfully.";
                $type = "success";
            } else {
                $con->rollback();
                $msg = "Transaction not found or not pending.";
                $type = "warning";
            }
        } catch (Exception $e) {
            $con->rollback();
            error_log("Reject withdrawal error: " . $e->getMessage());
            $msg = "Failed to reject withdrawal: " . $e->getMessage();
            $type = "warning";
        }
        echo "<script>window.location.href='transaction-details.php?tid=$tid';</script>";
    }
}

// Delete transaction
if (isset($_GET['del']) && isset($_GET['id']) && filter_var($_GET['id'], FILTER_VALIDATE_INT)) {
    $id = filter_var($_GET['id'], FILTER_VALIDATE_INT);
    $stmt = $con->prepare("DELETE FROM transactions WHERE id = ?");
    $stmt->bind_param('i', $id);
    $stmt->execute();
    $stmt->close();
    echo "<script>window.location.href='pending-withdrawals.php';</script>";
    exit;
}

// Fetch transaction details
$stmt = $con->prepare("SELECT t.*, u.fullname, u.wallet_address AS user_wallet_address, u.wallet_network 
                       FROM transactions t 
                       LEFT JOIN users u ON t.user_id = u.id 
                       WHERE t.id = ?");
$stmt->bind_param('i', $tid);
$stmt->execute();
$result = $stmt->get_result();
$row = $result->fetch_assoc();
$stmt->close();

if (!$row) {
    echo "<script>window.location.href='pending-withdrawals.php';</script>";
    exit;
}
?>

<div class="content-wrapper">
    <div class="container-xxl flex-grow-1 container-p-y">
        <h4 class="fw-bold py-3 mb-4"><span class="text-muted fw-light">Transactions/</span> Transaction Details</h4>

        <?php if (isset($msg)) { ?>
            <div class="alert alert-<?php echo $type; ?>">
                <h6 class="alert-heading fw-bold mb-1"><?php echo $type; ?></h6>
                <p class="mb-0"><?php echo $msg; ?></p>
            </div>
        <?php } ?>

        <div class="card mb-4">
            <h5 class="card-header">Transaction Details</h5>
            <div class="card-body">
                <div class="row">
                    <div class="mb-3 col-md-6">
                        <label class="form-label">Amount</label>
                        <input type="text" class="form-control" value="$<?php echo htmlspecialchars($row['amount']); ?>" readonly />
                    </div>
                    <div class="mb-3 col-md-6">
                        <label class="form-label">Wallet Address (User)</label>
                        <input type="text" class="form-control" value="<?php echo htmlspecialchars($row['user_wallet_address']); ?>" readonly />
                    </div>
                    <div class="mb-3 col-md-6">
                        <label class="form-label">Wallet Network</label>
                        <input type="text" class="form-control" value="<?php echo htmlspecialchars($row['wallet_network']); ?>" readonly />
                    </div>
                </div>
            </div>
        </div>

        <?php if ($row['status'] === 'Pending') { ?>
            <div class="card mb-4">
                <h5 class="card-header">Withdrawal Actions</h5>
                <div class="card-body">
                    <a href="?tid=<?php echo $tid; ?>&confirm=true&uid=<?php echo $row['user_id']; ?>"
                       onclick="return confirm('Are you sure you want to confirm this withdrawal?')"
                       class="btn btn-success btn-sm">
                        <i class="fas fa-check"></i> Confirm
                    </a>
                    <button type="button" class="btn btn-danger btn-sm" data-bs-toggle="modal" data-bs-target="#rejectModal">
                        <i class="fas fa-times"></i> Reject
                    </button>
                </div>
            </div>

            <!-- Reject Modal -->
            <div class="modal fade" id="rejectModal" tabindex="-1" aria-labelledby="rejectModalLabel" aria-hidden="true">
                <div class="modal-dialog">
                    <div class="modal-content">
                        <div class="modal-header">
                            <h5 class="modal-title" id="rejectModalLabel">Reject Withdrawal</h5>
                            <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
                        </div>
                        <div class="modal-body">
                            <form method="post">
                                <input type="hidden" name="tid" value="<?php echo $tid; ?>">
                                <input type="hidden" name="uid" value="<?php echo $row['user_id']; ?>">
                                <div class="mb-3">
                                    <label for="reject_reason" class="form-label">Reason for Rejection</label>
                                    <textarea class="form-control" id="reject_reason" name="reject_reason" rows="4" required></textarea>
                                </div>
                                <div class="mb-3">
                                    <label for="refund_option" class="form-label">Refund Option</label>
                                    <select class="form-control" id="refund_option" name="refund_option" required>
                                        <option value="none">No Refund</option>
                                        <option value="balance">Refund to Balance (<?php echo htmlspecialchars($row['account_type']); ?>)</option>
                                        <option value="profit">Refund to Profit (<?php echo htmlspecialchars($row['account_type']); ?>)</option>
                                    </select>
                                </div>
                                <button type="submit" class="btn btn-danger">Submit Rejection</button>
                            </form>
                        </div>
                    </div>
                </div>
            </div>
        <?php } ?>

        <div class="card">
            <h5 class="card-header">Delete Transaction</h5>
            <div class="card-body">
                <div class="mb-3 col-12 mb-0">
                    <div class="alert alert-warning">
                        <h6 class="alert-heading fw-bold mb-1">Are you sure you want to delete this transaction?</h6>
                        <p class="mb-0">Once you delete this transaction, there is no going back. Please be certain.</p>
                    </div>
                </div>
                <a href="?id=<?php echo $row['id']; ?>&del=delete"
                   onclick="return confirm('Are you sure you want to delete this transaction?')"
                   class="btn btn-danger deactivate-account">
                    Delete Transaction
                </a>
            </div>
        </div>
    </div>
</div>

<?php include 'includes/footer.php'; ?>