Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/narumalaracademy.net/public_html

Free Space:

10.23 TB

🔧 Quick Actions

✏️ Editing: checkout1.php

<?php
declare(strict_types=1);
// Start session only once - remove duplicate session_start()
if (session_status() === PHP_SESSION_NONE) {
    session_start();
}

require_once 'includes/config.php'; // db(), esc()
$conn = db();

// Merchant UPI ID - Add this to your config.php or hardcode as needed
$merchant_upi = 'vidhyasanjeev92@okicici'; // Your merchant UPI ID
$merchant_name = 'Maruthani Mulia Channel';

$isLoggedIn = isset($_SESSION['user_id']) && $_SESSION['user_id'] > 0;
$user = null;

/* ========= Helpers ========= */
function calcDiscount(string $code, float $subtotal): array {
  $code = strtoupper(trim($code));
  if ($code === 'WELCOME10') {
    $amount = min(round($subtotal * 0.10), 100);
    return [$amount, $code];
  }
  return [0.0, ''];
}
function inr_n0($n): string { return '₹' . number_format((float)$n, 0, '.', ','); }

/* ========= Handle Registration ========= */
$regErrors = [];
$regSuccess = false;

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['register'])) {
  $name  = trim($_POST['full_name'] ?? '');
  $phone = preg_replace('/\D+/', '', $_POST['phone'] ?? '');
  $email = trim($_POST['email'] ?? '');
  $pass  = (string)($_POST['password'] ?? '');
  $cpass = (string)($_POST['confirm_password'] ?? '');

if ($name === '')                           $regErrors[] = 'Full name is required.';
  if (!preg_match('/^\d{10}$/', $phone))      $regErrors[] = 'Enter a valid 10-digit mobile number.';
  if ($email !== '' && !filter_var($email, FILTER_VALIDATE_EMAIL)) $regErrors[] = 'Enter a valid email address.';
  if (strlen($pass) < 6)                      $regErrors[] = 'Password must be at least 6 characters.';
  if ($pass !== $cpass)                       $regErrors[] = 'Passwords do not match.';

if (!$regErrors) {
    // Unique email (if provided)
    if ($email !== '') {
      $stmt = $conn->prepare("SELECT id FROM users WHERE email = ? LIMIT 1");
      $stmt->bind_param('s', $email);
      $stmt->execute();
      if ($stmt->get_result()->fetch_row()) $regErrors[] = 'Email already registered. Try logging in.';
      $stmt->close();
    }
    // Unique phone
    $stmt = $conn->prepare("SELECT id FROM users WHERE phone = ? LIMIT 1");
    $stmt->bind_param('s', $phone);
    $stmt->execute();
    if ($stmt->get_result()->fetch_row()) $regErrors[] = 'Mobile number already registered. Try logging in.';
    $stmt->close();
  }

if (!$regErrors) {
    $hash = password_hash($pass, PASSWORD_BCRYPT);
    if ($email === '') {
      $stmt = $conn->prepare("INSERT INTO users (full_name, email, phone, password, created_at) VALUES (?, NULL, ?, ?, NOW())");
      $stmt->bind_param('sss', $name, $phone, $hash);
    } else {
      $stmt = $conn->prepare("INSERT INTO users (full_name, email, phone, password, created_at) VALUES (?, ?, ?, ?, NOW())");
      $stmt->bind_param('ssss', $name, $email, $phone, $hash);
    }
    $stmt->execute();
    $uid = (int)$stmt->insert_id;
    $stmt->close();

$_SESSION['user_id'] = $uid;
    $isLoggedIn = true;
    $regSuccess = true;
  }
}

/* ========= If logged in, load user row ========= */
if ($isLoggedIn) {
  $uid = (int)$_SESSION['user_id'];
  $stmt = $conn->prepare("SELECT id, full_name, email, phone FROM users WHERE id = ?");
  $stmt->bind_param('i', $uid);
  $stmt->execute();
  $user = $stmt->get_result()->fetch_assoc();
  $stmt->close();
}

/* ========= Handle Place Order (server) ========= */
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['place_order'])) {

if (!$isLoggedIn) {
    http_response_code(400);
    die('Not logged in');
  }

$uid = (int)$_SESSION['user_id'];
  $cartJson = $_POST['cart_json'] ?? '';
  $promoRaw = trim((string)($_POST['promo_code'] ?? ''));
  $pay      = trim((string)($_POST['payment_method'] ?? 'COD'));
  $upi_app  = trim((string)($_POST['upi_app'] ?? '')); // Get selected UPI app

$items = json_decode($cartJson, true);
  if (!is_array($items) || count($items) === 0) {
    http_response_code(400);
    die('Cart is empty or invalid.');
  }

// Compute totals
  $subtotal = 0.0;
  foreach ($items as $it) {
    $price = (float)($it['price'] ?? 0);
    $qty   = max(1, (int)($it['qty'] ?? 1));
    $subtotal += $price * $qty;
  }
  [$discAmt, $promoCode] = calcDiscount($promoRaw, $subtotal);
  $shipping = 0.0; // digital
  $total = max(0, $subtotal - $discAmt) + $shipping;

// Create directory for payment screenshots if it doesn't exist
  $screenshotDir = 'payment_screenshots/';
  if (!is_dir($screenshotDir)) {
    mkdir($screenshotDir, 0755, true);
  }

// Insert order + items in a transaction
  $conn->begin_transaction();
  try {
    $orderCode = 'ORD-' . time() . '-' . random_int(1000, 9999);
    $status = $pay === 'COD' ? 'confirmed' : 'pending';

// Handle payment screenshot
    $paymentScreenshotPath = '';
    if (!empty($_POST['payment_screenshot'])) {
        $screenshotData = $_POST['payment_screenshot'];
        
        // Extract the base64 data
        if (preg_match('/^data:image\/(\w+);base64,/', $screenshotData, $matches)) {
            $extension = $matches[1];
            $imageData = substr($screenshotData, strpos($screenshotData, ',') + 1);
            $imageData = base64_decode($imageData);
            
            // Generate a unique filename
            $filename = $orderCode . '_payment.' . $extension;
            $filepath = $screenshotDir . $filename;
            
            // Save the file
            if (file_put_contents($filepath, $imageData)) {
                $paymentScreenshotPath = $filepath;
            }
        }
    }

$stmt = $conn->prepare("
      INSERT INTO orders (order_code, user_id, subtotal, discount, shipping, total, promo_code, payment_method, upi, payment_screenshot, status, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NOW())
    ");
    $stmt->bind_param(
      'siddddsssss',
      $orderCode, $uid, $subtotal, $discAmt, $shipping, $total, $promoCode, $pay, $upi_app, $paymentScreenshotPath, $status
    );
    $stmt->execute();
    $orderId = (int)$stmt->insert_id;
    $stmt->close();

// Insert items
    $itemStmt = $conn->prepare("
      INSERT INTO order_items (order_id, book_id, title, variant_label, unit_price, qty, line_total)
      VALUES (?, ?, ?, ?, ?, ?, ?)
    ");

foreach ($items as $it) {
      $name  = (string)($it['name'] ?? '');
      $pack  = (string)($it['pack'] ?? 'PDF eBook');
      $price = (float)($it['price'] ?? 0);
      $qty   = max(1, (int)($it['qty'] ?? 1));
      $line  = $price * $qty;
      $bookId = isset($it['book_id']) ? (int)$it['book_id'] : null;

// If no id, try to resolve by name (best-effort)
      if (!$bookId && $name !== '') {
        $find = $conn->prepare("SELECT id FROM books WHERE name = ? LIMIT 1");
        $find->bind_param('s', $name);
        $find->execute();
        $row = $find->get_result()->fetch_assoc();
        if ($row) $bookId = (int)$row['id'];
        $find->close();
      }

// Bind book_id as int or null
      if ($bookId) {
        $itemStmt->bind_param('iissdii', $orderId, $bookId, $name, $pack, $price, $qty, $line);
      } else {
        $null = null;
        $itemStmt->bind_param('iissdii', $orderId, $null, $name, $pack, $price, $qty, $line);
      }
      $itemStmt->execute();
    }
    $itemStmt->close();

$conn->commit();

// Clear cart after successful order
    echo '<script>sessionStorage.removeItem("dpimart_cart_session");</script>';
    
    // Redirect based on payment method
    if ($pay === 'UPI') {
      // Store order details in session for the payment redirection
      $_SESSION['pending_order'] = [
        'order_code' => $orderCode,
        'amount' => $total,
        'upi_app' => $upi_app
      ];
      header('Location: profile.php');
    } else {
      header('Location: thank-you.php?order=' . urlencode($orderCode));
    }
    exit;

} catch (Throwable $e) {
    $conn->rollback();
    http_response_code(500);
    echo 'Order failed: ' . esc($e->getMessage());
    exit;
  }
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1" />
  <title>Narumalar Academy – Checkout</title>
  <meta name="description" content="Secure checkout for Narumalar Academy eBooks. Instant download after payment." />
  <link rel="apple-touch-icon" sizes="180x180" href="assets/fav/apple-touch-icon.png">
  <link rel="icon" type="image/png" sizes="32x32" href="assets/fav/favicon-32x32.png">
  <link rel="icon" type="image/png" sizes="16x16" href="assets/fav/favicon-16x16.png">
  <link rel="manifest" href="assets/fav/site.webmanifest">
  <meta name="theme-color" content="#0d6efd" />
  <script src="https://cdn.tailwindcss.com"></script>
  <script>
    tailwind.config = {
      theme: {
        extend: {
          colors: { dpigreen: '#0ea5a3', dpidark: '#0f172a' },
          fontFamily: { display: ['Inter','ui-sans-serif','system-ui','sans-serif'] }
        }
      }
    }
  </script>
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700;800&display=swap" rel="stylesheet">
  <style>
    .no-spin::-webkit-outer-spin-button, .no-spin::-webkit-inner-spin-button{ -webkit-appearance:none; margin:0; }
    .no-spin{ -moz-appearance:textfield; }
    .upi-app-icon {
      width: 40px;
      height: 40px;
      border-radius: 8px;
      object-fit: contain;
    }
    .selected {
      border-color: #2563eb; /* blue-600 */
      background-color: #eff6ff; /* blue-50 */
    }
    .payment-screenshot {
      display: none;
      margin-top: 1rem;
      padding: 1rem;
      border: 1px dashed #d1d5db;
      border-radius: 0.5rem;
      background-color: #f9fafb;
    }

@media screen and (max-width: 480px) {
      #promo {
        width: 50% !important;
      }
    }
  </style>
</head>
<body class="font-display text-slate-800 bg-slate-50">
  <?php include('includes/topstrip.php')?>
  <?php include('includes/header.php')?>

<nav class="max-w-7xl mx-auto px-4 md:px-6 mt-4 text-sm" aria-label="Breadcrumb">
    <ol class="flex items-center gap-2 text-slate-500">
      <li><a href="index.php" class="hover:text-orange-600">Home</a></li>
      <li>›</li>
      <li><a href="index.php" class="hover:text-orange-600">Cart</a></li>
      <li>›</li>
      <li class="text-slate-700 font-semibold">Checkout</li>
    </ol>
  </nav>

<main class="max-w-7xl mx-auto px-4 md:px-6 mt-6 mb-16">
    <h1 class="text-2xl md:text-3xl font-extrabold">Checkout</h1>

<div class="mt-6 grid grid-cols-1 lg:grid-cols-3 gap-6">
      
      <section class="lg:col-span-2 space-y-6">
        
        <div class="bg-white border border-slate-200 rounded-xl p-4 md:p-6">
          <div class="flex items-center justify-between">
            <h2 class="text-lg font-bold">Your Account</h2>
            <?php if ($isLoggedIn): ?>
              <span class="inline-flex items-center gap-2 text-sm text-emerald-700">
                <span class="w-2 h-2 bg-emerald-600 rounded-full"></span> Logged in
              </span>
            <?php endif; ?>
          </div>

<?php if (!$isLoggedIn): ?>
            <?php if ($regErrors): ?>
              <div class="mt-3 rounded-md bg-red-50 border border-red-200 p-3 text-sm text-red-700">
                <?php foreach ($regErrors as $e): ?><div>• <?= esc($e) ?></div><?php endforeach; ?>
              </div>
            <?php elseif ($regSuccess): ?>
              <div class="mt-3 rounded-md bg-emerald-50 border border-emerald-200 p-3 text-sm text-emerald-700">
                Account created successfully. You can place your order now.
              </div>
            <?php endif; ?>

<form method="post" class="mt-4 grid grid-cols-1 md:grid-cols-2 gap-4" novalidate>
              <input type="hidden" name="register" value="1" />
              <div class="md:col-span-2">
                <label class="block text-sm font-semibold mb-1" for="full_name">Full name</label>
                <input id="full_name" name="full_name" type="text" required
                       class="w-full rounded-md border border-slate-200 px-3 py-2"
                       placeholder="e.g., Priya Sharma" value="<?= esc($_POST['full_name'] ?? '') ?>">
              </div>
              <div>
                <label class="block text-sm font-semibold mb-1" for="phone">Mobile (10 digits)</label>
                <input id="phone" name="phone" type="tel" inputmode="numeric" maxlength="10" pattern="\d{10}" required
                       class="w-full rounded-md border border-slate-200 px-3 py-2 no-spin"
                       placeholder="9876543210" value="<?= esc($_POST['phone'] ?? '') ?>">
              </div>
              <div>
                <label class="block text-sm font-semibold mb-1" for="email">Email (optional)</label>
                <input id="email" name="email" type="email"
                       class="w-full rounded-md border border-slate-200 px-3 py-2"
                       placeholder="you@example.com" value="<?= esc($_POST['email'] ?? '') ?>">
              </div>
              <div>
                <label class="block text-sm font-semibold mb-1" for="password">Password</label>
                <input id="password" name="password" type="password" minlength="6" required
                       class="w-full rounded-md border border-slate-200 px-3 py-2" placeholder="Min 6 characters">
              </div>
              <div>
                <label class="block text-sm font-semibold mb-1" for="confirm_password">Confirm password</label>
                <input id="confirm_password" name="confirm_password" type="password" minlength="6" required
                       class="w-full rounded-md border border-slate-200 px-3 py-2" placeholder="Re-enter password">
              </div>
              <div class="md:col-span-4 flex items-center justify-between">
                <button class="inline-flex items-center justify-center px-5 py-3 rounded-lg bg-orange-600 hover:bg-orange-700 text-white font-semibold" type="submit">
                  Create Account & Continue
                </button>
              </div>
            </form>
          <?php else: ?>
            <div class="mt-4 grid grid-cols-1 md:grid-cols-2 gap-4 text-sm">
              <div>
                <div class="text-slate-500">Name</div>
                <div class="font-semibold"><?= esc($user['full_name'] ?? '') ?></div>
              </div>
              <div>
                <div class="text-slate-500">Mobile</div>
                <div class="font-semibold"><?= esc($user['phone'] ?? '') ?></div>
              </div>
              <div class="md:col-span-2">
                <div class="text-slate-500">Email</div>
                <div class="font-semibold"><?= esc($user['email'] ?? '—') ?></div>
              </div>
            </div>
          <?php endif; ?>
        </div>

<div class="bg-white border border-slate-200 rounded-xl p-4 md:p-6">
          <h2 class="text-lg font-bold">Payment</h2>
          <fieldset class="mt-3 space-y-2">
            
            <label class="flex items-center gap-3 p-3 border border-slate-200 rounded-md cursor-pointer hover:bg-slate-50 upi-option">
              <input type="radio" name="pay" value="UPI" class="accent-orange-600">
              <span class="font-semibold">UPI Payment</span>
              <p class="text-xs text-slate-600 mt-1">Pay via UPI using the number below or scan the QR code, then upload the payment screenshot.</p>
            </label>
            
            
            <div id="upi-apps-container" class="hidden mt-4 p-4 bg-slate-50 rounded-lg">
              <h3 class="font-semibold mb-3">UPI Payment Details</h3>
              
              
              <div class="flex items-center gap-3 mb-4">
                <span class="text-sm font-medium">GPay Number: 8248404892</span>
                <button id="copy-upi-number" class="px-3 py-1 rounded-md bg-blue-600 text-white text-sm font-medium hover:bg-blue-700">
                  Copy
                </button>
                <span id="copy-message" class="text-sm text-green-600 hidden">Copied!</span>
              </div>

<div class="mt-6 flex flex-col items-center text-center">
                <h3 class="font-semibold mb-3">Or Scan QR Code</h3>
                <img 
                  src="assets/ebook_qr1.jpg" 
                  alt="UPI QR Code" 
                  class="w-56 h-56 border border-slate-200 rounded-lg shadow-md"
                >
                <p class="text-sm text-slate-600 mt-2">Scan this QR with any UPI app to complete payment</p>
              </div>

<p class="text-xs text-slate-500 mt-3 text-center">
                Use the GPay number or scan the QR to complete payment, then upload the screenshot below.
              </p>
            </div>
            
            
            <div id="payment-screenshot-container" class="payment-screenshot">
              <h3 class="font-semibold mb-3">Upload Payment Screenshot</h3>
              <div class="flex flex-col items-center justify-center p-4 border-2 border-dashed border-gray-300 rounded-md">
                <input type="file" id="payment-screenshot" name="payment_screenshot" accept="image/*" class="hidden">
                <label for="payment-screenshot" class="cursor-pointer">
                  <svg class="w-12 h-12 text-gray-400 mb-2" fill="none" stroke="currentColor" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 16l4.586-4.586a2 2 0 012.828 0L16 16m-2-2l1.586-1.586a2 2 0 012.828 0L20 14m-6-6h.01M6 20h12a2 2 0 002-2V6a2 2 0 00-2-2H6a2 2 0 00-2 2v12a2 2 0 002 2z"></path>
                  </svg>
                  <p class="text-sm text-gray-600">Click to upload payment screenshot</p>
                </label>
                <div id="file-name" class="text-sm text-gray-500 mt-2"></div>
              </div>
            </div>
          </fieldset>
        </div>

<div class="flex flex-col sm:flex-row gap-3">
          <button id="placeOrder" class="flex-1 inline-flex items-center justify-center gap-2 px-5 py-3 rounded-lg bg-orange-600 hover:bg-orange-700 text-white font-semibold">
            Place Order
          </button>
          <a href="index.php" class="inline-flex items-center justify-center px-5 py-3 rounded-lg border border-slate-200 text-slate-700 font-semibold bg-white">Continue Shopping</a>
        </div>
        <p id="formError" class="hidden mt-2 text-sm text-red-600"></p>
      </section>

<aside class="lg:col-span-1">
        <div class="bg-white border border-slate-200 rounded-xl p-4 md:p-6">
          <h2 class="text-lg font-bold">Order Summary</h2>
          <div id="summaryItems" class="mt-4 space-y-3 max-h-80 overflow-y-auto pr-1"></div>

<div class="mt-4 flex items-center gap-2">
            <input id="promo" type="text" class="flex-1 rounded-md border border-slate-200 px-3 py-2" placeholder="Promo code">
            <button id="applyPromo" class="px-3 py-2 rounded-md border border-slate-200 font-semibold">Apply</button>
          </div>
          <p id="promoMsg" class="mt-1 text-xs text-orange-700 hidden"></p>

<dl class="mt-4 space-y-2 text-sm">
            <div class="flex justify-between"><dt class="text-slate-600">Subtotal</dt><dd id="sum-sub"   class="font-semibold">₹0</dd></div>
            <div class="flex justify-between"><dt class="text-slate-600">Shipping</dt><dd id="sum-ship"  class="font-semibold">Instant (Free)</dd></div>
            <div class="flex justify-between"><dt class="text-slate-600">Discount</dt><dd id="sum-disc"  class="font-semibold">—</dd></div>
            <div class="flex justify-between text-base pt-2 border-t"><dt class="font-semibold">Total</dt><dd id="sum-total" class="font-extrabold text-orange-700">₹0</dd></div>
          </dl>
        </div>
      </aside>
    </div>
  </main>

<?php include('includes/footer.php')?>

<form id="orderForm" method="post" class="hidden">
    <input type="hidden" name="place_order" value="1">
    <input type="hidden" name="cart_json" id="cart_json">
    <input type="hidden" name="promo_code" id="promo_code">
    <input type="hidden" name="payment_method" id="payment_method">
    <input type="hidden" name="upi_app" id="upi_app">
    <input type="hidden" name="payment_screenshot" id="payment_screenshot">
  </form>

const CART_KEY   = 'dpimart_cart_session';
    const IS_LOGGED  = <?= $isLoggedIn ? 'true' : 'false' ?>;

const $  = (s) => document.querySelector(s);
    const $$ = (s) => Array.from(document.querySelectorAll(s));
    const formatINR = (n) => '₹' + (n || 0).toLocaleString('en-IN', { maximumFractionDigits: 0 });

function calcDiscount(code, subtotal){
      code = (code || '').trim().toUpperCase();
      if(code === 'WELCOME10') return Math.min(Math.round(subtotal*0.10), 100);
      return 0;
    }

function renderSummary(){
      const items = getCart();
      const box = $('#summaryItems');
      box.innerHTML = '';

if(!items.length){
        box.innerHTML = '<div class="text-sm text-slate-600">Your cart is empty. <a class="text-orange-600 font-semibold" href="index.php">Continue shopping</a></div>';
      } else {
        items.forEach(it => {
          const row = document.createElement('div');
          row.className = 'border border-slate-200 rounded-lg p-3';
          row.innerHTML = `
            <div class="flex items-start justify-between gap-3">
              <div class="text-sm">
                <div class="font-semibold">${it.name}</div>
                <div class="text-slate-500">${it.pack || 'PDF eBook'}</div>
                <div class="mt-1 font-medium">${formatINR(it.price)}</div>
              </div>
              <button class="text-slate-400 hover:text-red-600" data-remove="${it.key}" title="Remove">✕</button>
            </div>
            <div class="mt-2 flex items-center justify-between">
              <div class="inline-flex items-center gap-2">
                <button class="qty-btn w-7 h-7 rounded-md border border-slate-200" data-key="${it.key}" data-delta="-1">−</button>
                <span class="min-w-[2ch] text-center">${it.qty}</span>
                <button class="qty-btn w-7 h-7 rounded-md border border-slate-200" data-key="${it.key}" data-delta="1">+</button>
              </div>
              <div class="font-semibold">${formatINR(it.price * it.qty)}</div>
            </div>`;
          box.appendChild(row);
        });
      }

box.querySelectorAll('[data-remove]').forEach(b => b.addEventListener('click', () => setCart(getCart().filter(i => i.key !== b.getAttribute('data-remove')))));
      box.querySelectorAll('.qty-btn').forEach(b => b.addEventListener('click', () => {
        const key = b.getAttribute('data-key');
        const delta = parseInt(b.getAttribute('data-delta'), 10);
        const cart = getCart();
        const i = cart.findIndex(x => x.key === key);
        if(i > -1){ cart[i].qty = Math.max(1, cart[i].qty + delta); setCart(cart); }
      }));

const subtotal = items.reduce((s,i)=> s + (i.price * i.qty), 0);
      const discAmt  = calcDiscount($('#promo').value, subtotal);
      const total    = Math.max(0, subtotal - discAmt);

$('#sum-sub').textContent   = formatINR(subtotal);
      $('#sum-ship').textContent  = 'Instant (Free)';
      $('#sum-disc').textContent  = discAmt > 0 ? '− ' + formatINR(discAmt) : '—';
      $('#sum-total').textContent = formatINR(total);

$('#placeOrder').disabled = items.length === 0;
      $('#placeOrder').classList.toggle('opacity-60', items.length === 0);
    }

// Toggle UPI payment details when UPI payment is selected
    const upiOption = $('.upi-option');
    const upiAppsContainer = $('#upi-apps-container');
    const paymentScreenshotContainer = $('#payment-screenshot-container');
    const paymentInputs = $$('input[name="pay"]');
    
    paymentInputs.forEach(input => {
      input.addEventListener('change', () => {
        if (input.value === 'UPI') {
          upiAppsContainer.classList.remove('hidden');
          paymentScreenshotContainer.style.display = 'block';
        } else {
          upiAppsContainer.classList.add('hidden');
          paymentScreenshotContainer.style.display = 'none';
        }
      });
    });

// Handle file upload
    const paymentScreenshotInput = $('#payment-screenshot');
    const fileNameDisplay = $('#file-name');
    
    paymentScreenshotInput.addEventListener('change', function() {
      if (this.files && this.files[0]) {
        fileNameDisplay.textContent = this.files[0].name;
        
        // Convert image to base64 for form submission
        const reader = new FileReader();
        reader.onload = function(e) {
          $('#payment_screenshot').value = e.target.result;
        };
        reader.readAsDataURL(this.files[0]);
      }
    });

// Copy UPI number to clipboard
    $('#copy-upi-number').addEventListener('click', () => {
      navigator.clipboard.writeText('8248404892').then(() => {
        const copyMessage = $('#copy-message');
        copyMessage.classList.remove('hidden');
        setTimeout(() => copyMessage.classList.add('hidden'), 2000);
      });
    });

// Promo UI
    $('#applyPromo').addEventListener('click', () => {
      const code = $('#promo').value.trim().toUpperCase();
      const msg = $('#promoMsg');
      if(code === 'WELCOME10'){
        msg.textContent = 'WELCOME10 applied – 10% off (max ₹100).';
        msg.classList.remove('hidden');
      } else if(code){
        msg.textContent = 'Invalid promo code.';
        msg.classList.remove('hidden');
      } else {
        msg.classList.add('hidden');
      }
      renderSummary();
    });

// Place Order -> submit hidden form to PHP
    $('#placeOrder').addEventListener('click', () => {
      const err = $('#formError');
      err.classList.add('hidden'); err.textContent = '';

if(!IS_LOGGED){
        err.textContent = 'Please create an account first.';
        err.classList.remove('hidden');
        window.scrollTo({ top: 0, behavior: 'smooth' });
        return;
      }

const cart = getCart();
      if(!cart.length){
        err.textContent = 'Your cart is empty.';
        err.classList.remove('hidden');
        return;
      }

// Validate payment screenshot if UPI payment is chosen
      const paymentMethod = (document.querySelector('input[name="pay"]:checked')||{}).value || 'COD';
      let upiApp = '';
      
      if (paymentMethod === 'UPI') {
        const paymentScreenshot = $('#payment_screenshot').value;
        if (!paymentScreenshot) {
          err.textContent = 'Please upload a payment screenshot.';
          err.classList.remove('hidden');
          return;
        }
        upiApp = 'gpay'; // Default to gpay since we're using GPay number
      }

// Fill hidden form and submit
      $('#cart_json').value     = JSON.stringify(cart);
      $('#promo_code').value    = ($('#promo').value || '').toUpperCase();
      $('#payment_method').value = paymentMethod;
      $('#upi_app').value = upiApp;

// Submit the form
      document.getElementById('orderForm').submit();
    });

// Init
    renderSummary();
  </script>
</body>
</html>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: checkout1.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation