Сигурност на електронните разплащания с карти ( HSBC Bank )

//web text under yelloo menu

$sql = "SELECT text_text FROM t_texts WHERE text_id = 58";

$h = mysql_query($sql);

$row = mysql_fetch_object($h);

$textche = $row->text_text;

$sql = "SELECT text_title, text_text FROM t_texts WHERE text_id = 49";

$h = mysql_query($sql);

$row = mysql_fetch_object($h);

$text_title = $row->text_title;

$text_text = $row->text_text;

След заявката използваме функция mysql_fetch_object() като параметър и даваме направената заявка и тази функция ни фръща параметрите като обекти.

Тази заявка я използваме за извикаване на web текстовете на сайта.

$original = mktime(0,0,0,$_POST['month'],$_POST['day'],$_POST['year']);

$rooms_id = $_POST['stai'];

$gests = $_POST['gests'];

$nights = $_POST['nights'];

$hostels_id = $_POST['hid'];
На тези 4 променливи присвояваме POST параметрите от предишната страница които потребителят е въвел.
$select_from_rooms = "SELECT rooms_price, rooms_beds, rooms_type, rooms_man_beds FROM t_rooms WHERE rooms_id = '".$rooms_id."' LIMIT 1";

$t = mysql_query($select_from_rooms);

$row1 = mysql_fetch_object($t);

$rooms_price = $row1->rooms_price;

$rooms_beds = $row1->rooms_beds;

$rooms_type = $row1->rooms_type;

$rooms_man_beds = $row1->rooms_man_beds;
Тук правим зачвкаа към таблицата t_rooms като в where клаузата и даваме POST партаметъра или id то на стаята която клиента е избрал. След заявката върнатите параметри прообразуваме в обекти, които ще използваме.
//Check for avail beds if have

for($ii=0;$ii<$nights;$ii++){

$pi = mysql_query($select_from_avail);

$red = mysql_fetch_object($pi);

$avail_beds = $red->avail_beds;

$avail_price = $red->avail_price;
Правим заявка към таблица t_rooms_avail като в where клаузата й се предава началната дата и id то на вида стая. Параметрите които ще получим ги преообразуваме в обекти.
if($rooms_type == 1 && (($avail_beds > 0) || ($rooms_beds > 0)) && $avail_beds >= $rooms_man_beds){
Правим проверка с IF клауза ако вида стая е от тип 1 “ PRIVATE ” и има свободни легла и тези легла са повече или равни на тези които е избрал клиента. Правим заявка към базта от данни като, добавяме нов ред в таблицата t_cart.
$sql_insert_cart = "INSERT INTO t_cart (session_id, client_id, rooms_id, book_date, book_price, book_beds, cart_date) VALUES('".$session_id."', '".$client_id."','".$rooms_id."','".$original."','".$avail_price."', '".$rooms_man_beds."', '".time()."')";

$h = mysql_query($sql_insert_cart);

$h = mysql_query($sql_insert_cart);

}
Добавяме чрез заявка запис в t_cart.

$select_from_avail1 = "SELECT avail_cr_date, avail_price, avail_beds FROM t_rooms_avail WHERE avail_cr_date = '".$original."' AND rooms_id = '".$rooms_id."' AND avail_beds >= '".$gests."'";

$p = mysql_query($select_from_avail1);
Правим заявка към базата от данни за проверка на дадената стая по id то и по броя легла дали е по-голям или равен за искащите се. Ако е да:
$stai = array();

$pp=0;

$stai[$pp][avail_cr_date] = $row->avail_cr_date;

$stai[$pp][avail_price] = $row->avail_price;

$stai[$pp][avail_beds] = $row->avail_beds;

$sql_insert_cart = "INSERT INTO t_cart (session_id, client_id, rooms_id, book_date, book_price, book_beds, cart_date) VALUES('".$session_id."', '".$client_id."','".$rooms_id."','".$stai[$pp][avail_cr_date]."','".$stai[$pp][avail_price]."', '".$gests."', '".time()."')";

$h = mysql_query($sql_insert_cart);
Правим запис в базата от данни в таблицата t_cart
}else{
Иначе
if($rooms_beds >0){
Проверяваме за стандартният брой легла за тази стая.
$sql_insert_cart = "INSERT INTO t_cart (session_id, client_id, rooms_id, book_date, book_price, book_beds, cart_date) VALUES('".$session_id."', '".$client_id."','".$rooms_id."','".$original."','".$rooms_price."', '".$gests."', '".time()."')";

$h = mysql_query($sql_insert_cart);

}

}

$pp++;

}

}

//If the client wants a room which is avail but the beds are lower that he wants

$sql_get_from_cart_man_beds = "SELECT book_beds FROM t_cart WHERE session_id = '".$session_id."' AND rooms_id = '".$rooms_id."'";

$q = mysql_query($sql_get_from_cart_man_beds);

$red15 = mysql_fetch_object($q);

$book_beds = $red15->book_beds;

$sql_del_cart = "DELETE FROM t_cart WHERE session_id = '".session_id()."'";

$l = mysql_query($sql_del_cart);

}
Ако върнатият брой легла е по-малък от исканият се прави заявка DELETE към t_cart и се изтриват редовете от базата от данни за тази сесия.

//if the avail beds lower than tha client wants ---------------- before that we save them in cart table and than check-- than go to offers---------start offer-------------

$sql_select_from_cart = "SELECT cart_id FROM t_cart WHERE session_id = '".$session_id."' AND rooms_id = '".$rooms_id."'";

$p = mysql_query($sql_select_from_cart);

$broi_zapisi = mysql_num_rows($p);

if($broi_zapisi != $nights){

$sql_del_cart = "DELETE FROM t_cart WHERE session_id = '".session_id()."'";

$l = mysql_query($sql_del_cart);

}

$sql_select_from_cart = "SELECT cart_id FROM t_cart WHERE session_id = '".$session_id."'";

$broi_zapisi1 = mysql_num_rows($p);

if($broi_zapisi1 == 0){

$msg1 = "";

$msg1 .= "There are no rooms for that period! Our offer is :";

//When have room avail

for($ii=0;$ii<$nights;$ii++){

$select_from_rooms = "SELECT rooms_id, rooms_price, rooms_beds, rooms_type, rooms_man_beds FROM t_rooms WHERE hostels_id = '".$hostels_id."' AND rooms_beds >= '".$gests."'";

$t = mysql_query($select_from_rooms);

$rooms = array();

$qq=0;

while($row1 = mysql_fetch_object($t)){

$rooms[$qq][$rooms_beds] = $row1->rooms_beds;

$rooms[$qq][rooms_type] = $row1->rooms_type;

$rooms[$qq][rooms_id] = $row1->rooms_id;

$rooms[$qq][rooms_man_beds] = $row1->rooms_man_beds;

$original = mktime(0,0,0,$_POST['month'],$_POST['day']+$ii,$_POST['year']);

$select_from_avail1 = "SELECT a.rooms_id, avail_cr_date, avail_price, avail_beds FROM t_rooms_avail as a,t_rooms as r WHERE avail_cr_date = '".$original."' AND r.rooms_id = a.rooms_id AND avail_beds >= '".$gests."' AND r.rooms_id = '".$rooms[$qq][rooms_id]."'";

$pi = mysql_query($select_from_avail1);

$row = mysql_fetch_object($pi);

$avail_cr_date = $row->avail_cr_date;

$avail_price = $row->avail_price;

$avail_beds = $row->avail_beds;

$rooms_id = $row->rooms_id;

if($avail_beds >= $gests){

if($rooms[$qq][rooms_type] == 1){

$sql_insert_cart = "INSERT INTO t_cart (session_id, client_id, rooms_id, book_date, book_price, book_beds, cart_date) VALUES('".$session_id."', '".$client_id."','".$rooms_id."','".$avail_cr_date."','".$avail_price."', '".$rooms[$qq][rooms_man_beds]."', '".time()."')";

$h = mysql_query($sql_insert_cart);

}else{

$h = mysql_query($sql_insert_cart);

}

}

$qq++;

}

//When dont have room avail

$select_from_rooms = "SELECT rooms_id, rooms_price, rooms_beds, rooms_type, rooms_man_beds FROM t_rooms WHERE hostels_id = '".$hostels_id."' AND rooms_beds >= '".$gests."'";

$t = mysql_query($select_from_rooms);

$rooms = array();

$qq=0;

while($row1 = mysql_fetch_object($t)){

$rooms[$qq][$rooms_beds] = $row1->rooms_beds;

$rooms[$qq][rooms_type] = $row1->rooms_type;

$rooms[$qq][rooms_id] = $row1->rooms_id;

$rooms[$qq][rooms_man_beds] = $row1->rooms_man_beds;

$original = mktime(0,0,0,$_POST['month'],$_POST['day']+$ii,$_POST['year']);

$select_from_avail12 = "SELECT a.rooms_id, avail_cr_date, avail_price, avail_beds FROM t_rooms_avail as a,t_rooms as r WHERE avail_cr_date = '".$original."' AND r.rooms_id = a.rooms_id AND r.rooms_id = '".$rooms[$qq][rooms_id]."'";//echo $select_from_avail12;

$pi1 = mysql_query($select_from_avail12);

$row2 = mysql_fetch_object($pi1);

$avail_cr_date1 = $row2->avail_cr_date;

$avail_price1 = $row2->avail_price;

$avail_beds1 = $row2->avail_beds;

$rooms_id1 = $row2->rooms_id;

if($avail_beds1 < $guests || mysql_num_rows($pi1) == 0){

if($rooms[$qq][rooms_type] == 1){

$sql_insert_cart = "INSERT INTO t_cart (session_id, client_id, rooms_id, book_date, book_price, book_beds, cart_date) VALUES('".$session_id."', '".$client_id."','".$rooms[$qq][rooms_id]."','".$original."','".$rooms[$qq][rooms_price]."', '".$rooms[$qq][rooms_man_beds]."', '".time()."')";//echo $sql_insert_cart;exit();

$h = mysql_query($sql_insert_cart);

}else{

$h = mysql_query($sql_insert_cart);

}

}

$qq++;

}

}

//If there are no any offers than client want-----------------------------------------------------------------

$sql_select_from_cart = "SELECT cart_id FROM t_cart WHERE session_id = '".$session_id."'";

$p = mysql_query($sql_select_from_cart);

$broi_zapisi = mysql_num_rows($p);

if($broi_zapisi < $nights){

$sql_del_cart = "DELETE FROM t_cart WHERE session_id = '".session_id()."'";

$l = mysql_query($sql_del_cart);

}

//--------------------------------------------------------------------------------------------------------------

$sql_get_client_info = "SELECT user_name, first_name, last_name, email, nationality, gender, phone, card_type, card_name, card_number, month, year, card_address, street, street2, city, state, postcode, start_month, start_year FROM t_clients, t_clients_user WHERE clients_id = '".$_SESSION['client_client_id']."' AND clients_id = client_id LIMIT 1";

$z = mysql_query($sql_get_client_info);

$row5 = mysql_fetch_object($z);

$user_name = $row5->user_name;

$first_name = $row5->first_name;

$last_name = $row5->last_name;

$nationality = $row5->nationality;

$email = $row5->email;

$gender = $row5->gender;

$phone = $row5->phone;

$card_type = $row5->card_type;

$card_name = $row5->card_name;

$card_number = $row5->card_number;

$month = $row5->month;

$year = $row5->year;

$card_address = $row5->card_address;

$street = $row5->street;

$street2 = $row5->street2;

$city = $row5->city;

$state = $row5->state;

$postcode = $row5->postcode;

$start_month = $row5->start_month;

$start_year = $row5->start_year;

}
Използваме заявка SELECT чрез която зимаме всички клиентски данни, преообразъвани в обекти. Това го правиме за удобство на клиента, да не му се налага повторно вкарване на цялата информация за разплащане.

$session_id = session_id();

$sql_get_from_cart = "SELECT cart_id, client_id, book_date, book_price, c.rooms_id, book_beds, hostels_title, t.type_room_title, h.hostels_id, c.rooms_id, r.rooms_type FROM t_cart as c, t_rooms as r, t_hostels as h, t_type_room as t WHERE session_id = '".$session_id."' AND h.hostels_id = r.hostels_id AND r.rooms_id = c.rooms_id AND t.type_room_id = r.type_rooms_id ORDER BY book_date ASC";

$p = mysql_query($sql_get_from_cart);

$book = array();

$pp=0;

while($red = mysql_fetch_object($p)){

$book[$pp][client_id] = $red->client_id;

$book[$pp][book_date] = $red->book_date;

$book[$pp][book_price] = $red->book_price;

$book[$pp][book_beds] = $red->book_beds;

$book[$pp][hostels_title] = $red->hostels_title;

$book[$pp][type_room_title] = $red->type_room_title;

$book[$pp][total] = $book[$pp][book_beds] * $book[$pp][book_price];

$book[$pp][hostels_id] = $red->hostels_id;

$book[$pp][rooms_id] = $red->rooms_id;

$book[$pp][rooms_type] = $red->rooms_type;

$pp++;

}
Взимаме всички данни от кошницата които той е избрал подредени по дати, чрез SELECT заявка към t_cart таблицата, и ги вкарваме в двумерен масив, чрез цикъл while.

$j1 = mysql_query($sql_get_currency1);

$red1 = mysql_fetch_object($j1);

$currency_title12 = $red1->currency_title;

if($_POST['action_go']){

if($_SESSION['client_user_logged_in'] == false){

$first_name = $_POST['fname'];

$last_name = $_POST['lname'];

$nationality = $_POST['nationality'];

$gender = $_POST['gender'];

$phone = $_POST['phone'];

$email = $_POST['email'];

$card_name = $_POST['card_name'];

$card_type = $_POST['card_type'];

$card_number = $_POST['card_number'];

$card_code = $_POST['card_code1'];

$month = $_POST['month'];

$year = $_POST['year'];

$street = $_POST['street1'];

$street2 = $_POST['street12'];

$city = $_POST['city1'];

$state = $_POST['state1'];

$postcode = $_POST['postcode1'];

$isso_number = $_POST['isso_number'];

$start_month = $_POST['start_month1'];

$start_year = $_POST['start_year1'];

$agree = $_POST['agree'];

$newsletter = $_POST['newsletter'];

$check = true;

$msg = "";
Тук взимаме всички въведени стойности от полетата, чрез POST параметри.
if(!$first_name){

$check = false;

$msg .= "You should enter First Name!"."
";

}

if(strlen($first_name) > 32){

$msg .= "Your First Name must be lower than 32 charecters!"."

}

if(!$last_name){

$msg .= "You should enter Last Name!"."

}

if(strlen($last_name) > 32){

$msg .= "Your Last Name must be lower than 32 charecters!"."

}

if(!$nationality){

$msg .= "You should enter Country!"."

}

if(!$gender){

$msg .= "You should enter Gender!"."

}

if(!$phone){

$msg .= "You should enter Phone!"."

}

if(!$email){

$msg .= "You should enter Email!"."

}

if(email_check($email) == 1){

$msg .= "You enter Not a Valid Email address!"."

}

$sql_get_email = "SELECT user_id FROM t_clients_user WHERE user_name = '".$email."'"; //echo $sql_get_email;exit();

if(mysql_num_rows($z) > 0){

$check = false;

$msg .= "There is such a user in Our database. You should login with Username and Password which We sent it to You before! If you forgotten it. You should ask for a new Password!"."

}

if(!$card_name){

$msg .= "You should enter Name on card!"."

}

if($card_type == 'Maestro'){

$check = false;

$msg .= "For Maestro Card you should enter Issue Number!"."
";

}

}

$check = false;

$msg .= "You should enter Security code!"."
";

}

if(!$card_number){

$msg .= "You should enter Card number!"."

}

if(strlen($card_number) < 13 && strlen($card_number) > 19){

$msg .= "Your Credit card number must be between 13 and 19 symbols long!"."

}

if(!$month && !$year){

$msg .= "You should choose Expiry date!"."

}

if(!$street){

$msg .= "You should enter Street!"."

}

if(strlen($street) > 60){

$msg .= "The maximum lenght of Street is 60 charecters!"."

}

if(!$city){

$msg .= "You should enter City!"."

}

if(strlen($city) > 25){

$msg .= "The maximum lenght of City is 25 charecters!"."

}

if(!$postcode){

$msg .= "You should enter Postcode!"."

}

if(strlen($postcode) > 20){

$msg .= "The maximum lenght of Postcode is 25 charecters!"."

}

if(!$agree){

$msg .= "Are you agree with Our terms and conditions?"."

}

if($card_type == 'Visa'){

include("classes/creditcard.inc.php");

$cc=new CCVAL;

$ccnum=$card_number;

$cctype=$card_type;

if($cc->isVAlidCreditCard($ccnum)){

$check = true;

}else{

$msg .= "Not valid Credit Card Number!"."

}

if($cc->isVAlidCreditCard($ccnum,$type)){

}else{

$msg .= "Not valid Credit Card Type!"."

}

}

if($_SESSION['client_user_logged_in'] == true){

$first_name = $_POST['fname'];

$last_name = $_POST['lname'];

$nationality = $_POST['nationality'];

$gender = $_POST['gender'];

$phone = $_POST['phone'];

$email = $_POST['email'];

$card_name = $_POST['card_name'];

$card_type = $_POST['card_type'];

$card_number = $_POST['card_number'];

$card_code = $_POST['card_code1'];

$month = $_POST['month'];

$year = $_POST['year'];

$street = $_POST['street1'];

$street2 = $_POST['street12'];

$city = $_POST['city1'];

$state = $_POST['state1'];

$postcode = $_POST['postcode1'];

$isso_number = $_POST['isso_number'];

$start_month = $_POST['start_month1'];

$start_year = $_POST['start_year1'];

$agree = $_POST['agree'];

$newsletter = $_POST['newsletter'];

$check = true;

$msg = "";

if(!$first_name){

$check = false;

$msg .= "You should enter First Name!"."

}

if(strlen($first_name) > 32){

$msg .= "Your First Name must be lower than 32 charecters!"."

}

if(!$last_name){

$msg .= "You should enter Last Name!"."

}

if(strlen($last_name) > 32){

$msg .= "Your Last Name must be lower than 32 charecters!"."

}

if(!$nationality){

$msg .= "You should enter Country!"."

}

if(!$gender){

$msg .= "You should enter Gender!"."

}

if(!$phone){

$msg .= "You should enter Phone!"."

}

if(!$email){

$msg .= "You should enter Email!"."

}

if(email_check($email) == 1){

$msg .= "You enter Not a Valid Email address!"."

}

$sql_get_email = "SELECT user_id FROM t_clients_user WHERE user_name = '".$email."'";

if(mysql_num_rows($z) > 0){

$sql = "SELECT email FROM t_clients WHERE clients_id = '".$_SESSION['client_client_id']."'";

$h = mysql_query($sql);

$row = mysql_fetch_object($h);

$e_mail = $row->email;

if($e_mail == $email){

$check = true;

}else{

$check = false;

}

}

$check = false;

$msg .= "You should enter Name on card!"."
";

}

if($card_type == 'Maestro'){

$check = false;

$msg .= "For Maestro Card you should enter Issue Number!"."
";

}

}

$check = false;

$msg .= "You should enter Security code!"."
";

}

if(!$card_number){

$msg .= "You should enter Card number!"."

}

if(strlen($card_number) < 13 && strlen($card_number) > 19){

$msg .= "Your Credit card number must be between 13 and 19 symbols long!"."

}

if(!$month && !$year){

$msg .= "You should choose Expiry date!"."

}

if(!$street){

$msg .= "You should enter Street!"."

}

if(strlen($street) > 60){

$msg .= "The maximum lenght of Street is 60 charecters!"."

}

if(!$city){

$msg .= "You should enter City!"."

}

if(strlen($city) > 25){

$msg .= "The maximum lenght of City is 25 charecters!"."

}

if(!$postcode){

$msg .= "You should enter Postcode!"."

}

if(strlen($postcode) > 20){

$msg .= "The maximum lenght of Postcode is 25 charecters!"."

}

if(!$agree){

$msg .= "Are you agree with Our terms and conditions?"."

}

if($card_type == 'Visa'){

include("classes/creditcard.inc.php");

$cc=new CCVAL;

$ccnum=$card_number;

$cctype=$card_type;

if($cc->isVAlidCreditCard($ccnum)){

$check = true;

}else{

$msg .= "Not valid Credit Card Number!"."

}

if($cc->isVAlidCreditCard($ccnum,$type)){

}else{

$msg .= "Not valid Credit Card Type!"."

}

}

if($check){

//add to newsletter

if($newsletter){

$sql = "SELECT e_id FROM t_emails WHERE e_mail = '".$email."'";

$h = mysql_query($sql);

$row = mysql_fetch_object($h);

$e_id = $row->e_id;

if($e_id){

$sql1 = "UPDATE t_emails SET e_name = '".$first_name."', e_mail = '".$email."', e_family = '".$last_name."' WHERE e_id = '".$e_id."'";

$n = mysql_query($sql1);

}else{

$sql1 ="INSERT INTO t_emails( e_name, e_mail, e_family ) VALUES( '".$first_name."', '".$email."', '".$last_name."' )";

}

}

$sql_get_group = "SELECT MAX(group_id) AS group_id FROM t_orders";

$m = mysql_query($sql_get_group);

$rowche = mysql_fetch_object($m);

$group_id = $rowche->group_id;

for($aa=0;$aa

$sql_insert_to_order = "INSERT INTO t_orders ( client_id, rooms_id, book_date, book_price, book_beds, hostels_id, order_status, order_date, group_id ) VALUES( '".$_SESSION['client_client_id']."','".$book[$aa][rooms_id]."','".$book[$aa][book_date]."','".$book[$aa][book_price]."','".$book[$aa][book_beds]."', '".$book[$aa][hostels_id]."', '0', '".time()."', ".$group_id."+1)";

$r = mysql_query($sql_insert_to_order);

}
Вкарваме всички данни от кошницата в таблицата за поръчки t_orders.

$sql_del_cart = "DELETE FROM t_cart WHERE session_id = '".session_id()."'";

$l = mysql_query($sql_del_cart);
Изправаме кошницата, чрез DELETE заявка
$sql_update_client = "UPDATE t_clients SET first_name = '".$first_name."', last_name = '".$last_name."', nationality = '".$nationality."', gender = '".$gender."', phone = '".$phone."', email = '".$email."', card_name = '".$card_name."', card_type = '".$card_type."', card_number = '".$card_number."', month = '".$month."', year = '".$year."', card_address = '".$card_address."', reg_date = '".time()."', street = '".$street."', street2 = '".$street2."', city = '".$city."', state = '".$state."', postcode = '".$postcode."', cvm = '".$card_code."', issue_number = '".$isso_number."', start_month = '".$start_month."', start_year = '".$start_year."' WHERE clients_id = '".$_SESSION['client_client_id']."'";

$m = mysql_query($sql_update_client);

header("Location: client_details_confirm.php?oid=$group_id1");

exit();

}

}else{

//add to newsletter

if($newsletter){

$sql = "SELECT e_id FROM t_emails WHERE e_mail = '".$email."'";

$h = mysql_query($sql);

$row = mysql_fetch_object($h);

$e_id = $row->e_id;

if($e_id){

$sql1 = "UPDATE t_emails SET e_name = '".$first_name."', e_mail = '".$email."', e_family = '".$last_name."' WHERE e_id = '".$e_id."'";

$n = mysql_query($sql1);

}else{

$sql1 ="INSERT INTO t_emails( e_name, e_mail, e_family ) VALUES( '".$first_name."', '".$email."', '".$last_name."' )";

}

}

$q = mysql_query($sql_insert);

$get_id = mysql_insert_id();

$passwd = md5("goldrock".time());

$password = substr($passwd, 4, 6);

$md5_pass = md5($password);
Генерираме му парола, чрез md5 функция
$sql_creat_client_login = "INSERT INTO t_clients_user( user_name, password, client_id ) VALUES('".$email."', '".$md5_pass."', '".$get_id."')";

$j = mysql_query($sql_creat_client_login);

$sql_get_group = "SELECT MAX(group_id) AS group_id FROM t_orders";

$m = mysql_query($sql_get_group);

$rowche = mysql_fetch_object($m);

$group_id = $rowche->group_id;

for($aa=0;$aa

$sql_insert_to_order = "INSERT INTO t_orders ( client_id, rooms_id, book_date, book_price, book_beds, hostels_id, order_status, order_date, group_id ) VALUES( '".$get_id."','".$book[$aa][rooms_id]."','".$book[$aa][book_date]."','".$book[$aa][book_price]."','".$book[$aa][book_beds]."', '".$book[$aa][hostels_id]."', '0', '".time()."', ".$group_id."+1)";

$r = mysql_query($sql_insert_to_order);

}

$sql_del_cart = "DELETE FROM t_cart WHERE session_id = '".session_id()."'";

$mail = new PHPMailer();

$mail->Host = $MailServer; // SMTP servers

$mail->SMTPAuth = true; // turn on SMTP authentication

$mail->Username = $MailUsername; // SMTP username

$mail->Password = $MailPassword; // SMTP password

$mail->From = $YourEmailAddress;

$mail->FromName = $Yourname;

$mail->AddAddress($email,$last_name);

// optional name

$mail->AddReplyTo($YourEmailAddress,$Yourname);

$mail->WordWrap = 100; // set word wrap

//$mail->AddAttachment(); // attachment

//$mail->AddAttachment();

$mail->IsHTML(true); // send as HTML

$mail->Subject = "You have Email from www.hostels247.vom";

$mail->Body = "Fisrt Name: ".$first_name."\n";

$mail->Body .= "and Last Name: ".$last_name."\n";

$mail->Body .= "We have created for You a account to login in www.hostels247.com\n";

$mail->Body .= "You can login here www.hostels247.com\client_login.php\n";

$mail->Body .= "Username: ".$email."\n";

$mail->Body .= "and Password: ".$password."\n";

if(!$mail->Send())

{

echo "Message was not sent

echo "Mailer Error: " . $mail->ErrorInfo;

exit;

}

//----------------------------------------------------------------------------------

header("Location: client_details_confirm.php?oid=$group_id2");

exit();

Скрипта го прехвърля на следващата страница за реализиране на разплащането.

}

}

}

Край на PHP кода.

$h = mysql_query($sql_get_orders);

$orders = array();

$ii = 0;

$orders[$ii][group_id] = $row->group_id;

$orders[$ii][orders_id] = $row->orders_id;

$orders[$ii][first_name] = $row->first_name;

$orders[$ii][last_name] = $row->last_name;

$orders[$ii][phone] = $row->phone;

$orders[$ii][order_date] = $row->order_date;

$orders[$ii][book_date] = $row->book_date;

$orders[$ii][order_status] = $row->order_status;

$orders[$ii][clients_id] = $row->clients_id;

$orders[$ii][user_id] = $row->user_id;

$orders[$ii][rooms_id] = $row->rooms_id;

$orders[$ii][hostels_title] = $row->hostels_title;

$orders[$ii][hostels_id] = $row->hostels_id;

$orders[$ii][book_price] = $row->book_price;

$orders[$ii][book_beds] = $row->book_beds;

$orders[$ii][type_room_title] = $row->type_room_title;

$orders[$ii][rooms_type] = $row->rooms_type;

$orders[$ii][total] = $orders[$ii][book_beds] * $orders[$ii][book_price];

$total += $orders[$ii][total];

$ii++;

}
Правим заявка към базата от данни и взиме всички данни за направената поръчка от таблицата t_orders. Преообразуваме ги в двумерен масив.

$deposit = ($total*0.1);

$to_pay = number_format($deposit,2,'.','');

$to_pay1 = $to_pay*100;

//get currency for xml

$sql_get_currency1 = "SELECT currency_title FROM t_hostels as h, t_currency as c WHERE hostels_id = '".$orders[0][hostels_id]."' AND currency_id = hostels_currency_id";

$j1 = mysql_query($sql_get_currency1);

$red1 = mysql_fetch_object($j1);

$currency_title12 = $red1->currency_title;

if($currency_title12){$currency_title12 = $currency_title12;}else{$currency_title12 = "EUR";}
Взимаме вида валука които подържа даденият хотел, към които е направена поръчката.

$sql_get_client_info = "SELECT first_name, last_name, gender, card_name, card_type, card_number, month, year, street, street2, city, state, postcode, nationality, phone, email, cvm, issue_number, start_month, start_year FROM t_clients as c, t_orders as o WHERE group_id = '".$group_id."' AND c.clients_id = o.client_id";

$h = mysql_query($sql_get_client_info);

$row5 = mysql_fetch_object($h);

$first_name = $row5->first_name;

$last_name = $row5->last_name;

$gender = $row5->gender;

$card_type = $row5->card_type;

$card_name = $row5->card_name;

$card_number = $row5->card_number;

$month = $row5->month;

$year = $row5->year;

$street = $row5->street;

$street2 = $row5->street2;

$city = $row5->city;

$state = $row5->state;

$postcode = $row5->postcode;

$nationality = $row5->nationality;

$phone = $row5->phone;

$email = $row5->email;

$cvm = $row5->cvm;

$issue_number = $row5->issue_number;

$start_month = $row5->start_month;

$start_year = $row5->start_year;

//---------hehehe----------------------------------------------------------------------

//header('Content-Type: application/xml; charset=windows-1251');

$xml = " " . "\n";

$xml .= "" . "\n";

$xml .= "1.0" . "\n";

$xml .= "" . "\n";

$xml .= "OrderFormDoc" . "\n";

$xml .= "" . "\n";

$xml .= "apiwebsite" . "\n";

$xml .= "
gp962007
" . "\n";

if($currency_title12 == "GBP"){

$xml .= "20898" . "\n";

}

if($currency_title12 == "AUD"){

}

if($currency_title12 == "CAD"){

}

if($currency_title12 == "USD"){

}

if($currency_title12 == "EUR"){

}

$xml .= "" . "\n";