| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/awintours.com/ |
Upload File : |
<?php
$lastname = htmlspecialchars($_POST["lastname"],ENT_QUOTES);
$firstname = htmlspecialchars($_POST["firstname"],ENT_QUOTES);
$phone = $_POST["phone"];
$email = $_POST["email"];
$hkidno = $_POST["hkidno"];
$checkbox1 = $_POST["checkbox1"];
if ($checkbox1 == '1') {
$qty_op_1 = $_POST["qty_op_1"];
$price_op_1 = $_POST["price_op_1"];
$total_item_op_1 = $_POST["total_item_op_1"];
$qty_op_2 = $_POST["qty_op_2"];
$price_op_2 = $_POST["price_op_2"];
$total_item_op_2 = $_POST["total_item_op_2"];
$Totalqty_op = $_POST["Totalqty_op"];
$TotalAmount_op = $_POST["TotalAmount_op"];
$opusingdate = $_POST["opusingdate"];
}
$checkbox2 = $_POST["checkbox2"];
if ($checkbox2 == '1') {
$qty_hkd_1 = $_POST["qty_hkd_1"];
$price_hkd_1 = $_POST["price_hkd_1"];
$total_item_hkd_1 = $_POST["total_item_hkd_1"];
$qty_hkd_2 = $_POST["qty_hkd_2"];
$price_hkd_2 = $_POST["price_hkd_2"];
$total_item_hkd_2 = $_POST["total_item_hkd_2"];
$qty_hkd_3 = $_POST["qty_hkd_3"];
$price_hkd_3 = $_POST["price_hkd_3"];
$total_item_hkd_3 = $_POST["total_item_hkd_3"];
$Totalqty_hkd = $_POST["Totalqty_hkd"];
$TotalAmount_hkd = $_POST["TotalAmount_hkd"];
$hkdusingdate = $_POST["hkdusingdate"];
}
$companyname = htmlspecialchars($_POST["companyname"],ENT_QUOTES);
$companyphone = $_POST["companyphone"];
$companyfax = $_POST["companyfax"];
$companyemail = $_POST["companyemail"];
$companyaddress = htmlspecialchars($_POST["companyaddress"],ENT_QUOTES);
$companydelivery = htmlspecialchars($_POST["companydelivery"],ENT_QUOTES);
$orderdate = date("Y-m-d");
//print_r($_POST);
if ($lastname == '') {
header("Location: order_error.php");
exit;
} elseif ($firstname == '') {
header("Location: order_error.php");
exit;
} elseif ($phone == '') {
header("Location: order_error.php");
exit;
} elseif ($email == '') {
header("Location: order_error.php");
exit;
} elseif ($hkidno == '') {
header("Location: order_error.php");
exit;
}
if (($checkbox1 == '') && ($checkbox2 == '')) {
header("Location: order_error.php?error=0");
exit;
}
$totalqty = $Totalqty_op + $Totalqty_hkd;
$totalamount = $TotalAmount_op + $TotalAmount_hkd;
require("webadmin/configure.php");
$sql = "select max(orderid) as maxid ";
$sql .= "from orderrecord";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$orderid = $row{maxid}+1;
$sql = "insert into orderrecord (orderid, lastname, firstname, phone, email, hkidno, orderdate, companyname, companyphone, companyfax, companyemail, companyaddress, companydelivery, totalqty, totalamount, orderstatus) values ('$orderid', '$lastname', '$firstname', '$phone', '$email', '$hkidno', '$orderdate', '$companyname', '$companyphone', '$companyfax', '$companyemail', '$companyaddress', '$companydelivery', '$totalqty', '$totalamount', '0')";
mysql_query($sql);
if( mysql_errno() > 0 ){
header("Location: order_error.php?error=1");
}
// Ocean Park
if ($qty_op_1 <> ''){
$sql = "select max(oticketid) as maxid ";
$sql .= "from orderticket";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$oticketid = $row{maxid}+1;
$sql = "insert into orderticket (oticketid, orderid, ticketid, oticketqty, oticketprice, oticketamount, oticketusingdate) values ('$oticketid', '$orderid', '1', '$qty_op_1', '$price_op_1', '$total_item_op_1', '$opusingdate')";
mysql_query($sql);
if( mysql_errno() > 0 ){
header("Location: order_error.php?error=2");
}
}
if ($qty_op_2 <> ''){
$sql = "select max(oticketid) as maxid ";
$sql .= "from orderticket";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$oticketid = $row{maxid}+1;
$sql = "insert into orderticket (oticketid, orderid, ticketid, oticketqty, oticketprice, oticketamount, oticketusingdate) values ('$oticketid', '$orderid', '2', '$qty_op_2', '$price_op_2', '$total_item_op_2', '$opusingdate')";
mysql_query($sql);
if( mysql_errno() > 0 ){
header("Location: order_error.php?error=3");
}
}
// Hong Kong Disneyland
if ($qty_hkd_1 <> ''){
$sql = "select max(oticketid) as maxid ";
$sql .= "from orderticket";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$oticketid = $row{maxid}+1;
$sql = "insert into orderticket (oticketid, orderid, ticketid, oticketqty, oticketprice, oticketamount, oticketusingdate) values ('$oticketid', '$orderid', '3', '$qty_hkd_1', '$price_hkd_1', '$total_item_hkd_1', '$hkdusingdate')";
mysql_query($sql);
if( mysql_errno() > 0 ){
header("Location: order_error.php?error=4");
}
}
if ($qty_hkd_2 <> ''){
$sql = "select max(oticketid) as maxid ";
$sql .= "from orderticket";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$oticketid = $row{maxid}+1;
$sql = "insert into orderticket (oticketid, orderid, ticketid, oticketqty, oticketprice, oticketamount, oticketusingdate) values ('$oticketid', '$orderid', '4', '$qty_hkd_2', '$price_hkd_2', '$total_item_hkd_2', '$hkdusingdate')";
mysql_query($sql);
if( mysql_errno() > 0 ){
header("Location: order_error.php?error=5");
}
}
if ($qty_hkd_3 <> ''){
$sql = "select max(oticketid) as maxid ";
$sql .= "from orderticket";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$oticketid = $row{maxid}+1;
$sql = "insert into orderticket (oticketid, orderid, ticketid, oticketqty, oticketprice, oticketamount, oticketusingdate) values ('$oticketid', '$orderid', '5', '$qty_hkd_3', '$price_hkd_3', '$total_item_hkd_3', '$hkdusingdate')";
mysql_query($sql);
if( mysql_errno() > 0 ){
header("Location: order_error.php?error=6");
}
}
mysql_close($dbh);
$INCLUDE_DIR = "";
$to = "";
//require("phpunit.php");
require($INCLUDE_DIR . "class.phpmailer.php");
error_reporting(E_ALL);
$body = '<HTML>';
$body .= '<HEAD>';
$body .= '<TITLE>Avonwin Holdings Tours Limited</TITLE>';
$body .= '<META http-equiv=Content-Type content=text/html; charset=UTF-8>';
$body .= '</HEAD>';
$body .= '<BODY>';
$body .= '<table width="600" border="0" cellpadding="0" cellspacing="0" style="font-family:Arial;font-size:12px;">';
$body .= '<tr>';
$body .= ' <td height="35" colspan="2" align="center"><strong> 網上預購門票</strong></td>';
$body .= '</tr>';
$body .= '<tr><td width="132" height="25" align="left" valign="top">聯絡人姓名: </td>';
$body .= '<td width="468" align="left" valign="top">'.$lastname.' '.$firstname.'</td></tr>';
$body .= '<tr><td width="132" height="25" align="left" valign="top">聯絡人電話: </td>';
$body .= '<td width="468" align="left" valign="top">'.$phone.'</td></tr>';
$body .= '<tr><td width="132" height="25" align="left" valign="top">聯絡人電郵: </td>';
$body .= '<td width="468" align="left" valign="top">'.$email.'</td></tr>';
$body .= '<tr><td width="132" height="25" align="left" valign="top">身份證號碼: </td>';
$body .= '<td width="468" align="left" valign="top">'.$hkidno.'</td></tr>';
$body .= '<tr>';
$body .= ' <td height="40" colspan="2" align="left" valign="middle"><strong>訂購門票資料如下:</strong></td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" colspan="2" align="left" valign="middle"><strong>海洋公園門票</strong></td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">成人門票</td>';
$body .= ' <td align="left" valign="top">'.$qty_op_1.'張</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">小童門票</td>';
$body .= ' <td align="left" valign="top">'.$qty_op_2.'張 </td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">合共訂購數量</td>';
$body .= ' <td align="left" valign="top">'.$Totalqty_op.'張門票 </td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">合共門票價錢</td>';
$body .= ' <td align="left" valign="top">HKD $'.$TotalAmount_op.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">預計使用門票日期</td>';
$body .= ' <td align="left" valign="top">'.$opusingdate.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top"> </td>';
$body .= ' <td align="left" valign="top"> </td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" colspan="2" align="left" valign="top"><strong>香港迪士尼門票</strong></td>';
$body .= ' </tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">成人門票 </td>';
$body .= ' <td align="left" valign="top">'.$qty_hkd_1.'張</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">小童門票</td>';
$body .= ' <td align="left" valign="top">'.$qty_hkd_2.'張 </td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">長者門票</td>';
$body .= ' <td align="left" valign="top">'.$qty_hkd_3.'張</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">合共訂購數量</td>';
$body .= ' <td align="left" valign="top">'.$Totalqty_hkd.'張門票 </td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">合共門票價錢</td>';
$body .= ' <td align="left" valign="top">HKD $'.$TotalAmount_hkd.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">預計使用門票日期</td>';
$body .= ' <td align="left" valign="top">'.$hkdusingdate.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top"> </td>';
$body .= ' <td align="left" valign="top"> </td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="40" colspan="2" align="left" valign="middle"><strong>公司資料:</strong></td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">公司名稱:</td>';
$body .= ' <td align="left" valign="top">'.$companyname.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">公司電話:</td>';
$body .= ' <td align="left" valign="top">'.$companyphone.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">公司傳真:</td>';
$body .= ' <td align="left" valign="top">'.$companyfax.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">公司電郵:</td>';
$body .= ' <td align="left" valign="top">'.$companyemail.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">公司地址:</td>';
$body .= ' <td align="left" valign="top">'.$companyaddress.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">速遞地址:</td>';
$body .= ' <td align="left" valign="top">'.$companydelivery.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top"> </td>';
$body .= ' <td align="left" valign="top"> </td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top">訂單日期:</td>';
$body .= ' <td align="left" valign="top">'.$orderdate.'</td>';
$body .= '</tr>';
$body .= '<tr>';
$body .= ' <td height="25" align="left" valign="top"> </td>';
$body .= ' <td align="left" valign="top"> </td>';
$body .= '</tr>';
$body .= '</table>';
$body .= '</BODY>';
$body .= '</HTML>';
$subject="收到一張預購主題公園門票訂單";
$FromEmail=$email;
$to="sales@awintours.com";
$FromName=$firstname;
$x_mail = new PHPMailer();
$x_mail->IsSMTP();
//$x_mail->Host = "smtp.pacific.net.hk";
$x_mail->Host = "localhost";
$x_mail->SMTPAuth = true;
$x_mail->charSet = "UTF-8";
$x_mail->From = $email;
$x_mail->FromName = $FromName;
$x_mail->AddAddress($to,$to);
$x_mail->WordWrap = 50;
$x_mail->IsHTML(true);
$x_mail->Subject = $subject;
$x_mail->Body = $body;
$x_mail->Send();
header("Location: order_reply.php");
?>