19 |
26 |
27 | Dashboard
20 | 25 |Help
28 | 29 | 30 |
31 |
32 |
33 |
34 |
57 |
58 |
59 |
60 |
61 |
--------------------------------------------------------------------------------
/admin/server/update_image.php:
--------------------------------------------------------------------------------
1 |
8 |
9 |
10 | prepare("UPDATE products SET product_image=?, product_image2=?, product_image3=?, product_image4=? WHERE product_id=?");
44 | $stmt->bind_param("ssssi", $image_name1, $image_name2, $image_name3, $image_name4,$product_id);
45 |
46 | if ($stmt->execute()) {
47 | header('Location: ../product.php?successfull_update_image=Productimagechangesuccessfully');
48 | } else {
49 | header('Location: ../product.php?error_update_image=Productimagechangeunsuccessfully');
50 | }
51 |
52 |
53 | $stmt->close();
54 | $conn->close();
55 |
56 |
57 | }else{
58 | header('Location: ../product.php');
59 | }
60 |
61 |
62 | }
63 |
64 |
65 | ?>
--------------------------------------------------------------------------------
/admin/account.php:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | prepare("SELECT * FROM admins WHERE admin_email=?");
17 | $stmt3->bind_param("i",$admin_email);
18 | $stmt3->execute();
19 | $admins = $stmt3->get_result();
20 |
21 | }else{
22 |
23 | header('Location: dashboard.php?error=cantlookadminaccount');
24 | exit();
25 |
26 | }
27 |
28 | }
29 |
30 |
31 | ?>
32 |
33 |
35 |
36 |
38 |
39 | 36 |
Software Engineer - UOK
37 |
40 |
41 |
43 |
44 | 41 |
077-8780559
42 |
45 |
46 |
48 |
49 | 46 |
pcarcade@gamil.com
47 |
50 |
51 |
53 |
54 |
55 |
56 | 51 |
No 122/3,Kesbawa Road,Bandaragama,Sri Lanka.
52 |
34 |
35 |
8 |
60 |
61 |
62 |
63 |
--------------------------------------------------------------------------------
/server/place_order.php:
--------------------------------------------------------------------------------
1 | prepare($sql);
26 | $stmt->bind_param('isiisss',$order_cost,$order_status,$user_id,$phone,$city,$address,$order_date);
27 |
28 | $stmt_status = $stmt->execute();
29 |
30 | if(!$stmt_status){
31 | header("Location: ../index.php");
32 | }
33 |
34 | $order_id = $stmt->insert_id;
35 |
36 |
37 | foreach ($_SESSION['cart'] as $key => $value) {
38 |
39 | $product = $_SESSION['cart'][$key];
40 | $product_id = $product['product_id'];
41 | $product_name = $product['product_name'];
42 | $product_image = $product['product_image'];
43 | $product_price = $product['product_price'];
44 | $product_quatity = $product['product_quatity'];
45 | $order = $_SESSION['cart'][$key];
46 | $date = $order['order_date'];
47 |
48 | $sql_one = "INSERT INTO order_items (order_id,product_id,product_name,product_image,product_price,product_quatity,user_id,order_date) VALUES (?,?,?,?,?,?,?,?);";
49 | $stmt_one = $conn->prepare($sql_one);
50 | $stmt_one->bind_param('iissiiis',$order_id,$product_id,$product_name,$product_image,$product_price,$product_quatity,$user_id,$order_date);
51 | $stmt_one->execute();
52 |
53 | }
54 |
55 |
56 | // unset($_SESSION['cart']);
57 |
58 | $_SESSION['order_id'] = $order_id;
59 |
60 |
61 | header("Location: ../payment.php?order_status=order placed successfully");
62 |
63 |
64 | }
65 | }
66 |
67 |
68 | ?>
--------------------------------------------------------------------------------
/server/register.php:
--------------------------------------------------------------------------------
1 | prepare($sql);
34 |
35 | $stmt->bind_param("s",$email);
36 | $stmt->execute();
37 |
38 |
39 | $result=$stmt->get_result();
40 |
41 | if($result->num_rows > 0){
42 |
43 | $stmt->close();
44 |
45 | header("Location: ../register.php?error=emailalreadyexits&name=".$name."&email=".$email);
46 | exit();
47 | }
48 | else{
49 |
50 | $insert_sql="INSERT INTO users (user_name,user_email,user_password) VALUES (?,?,?)";
51 |
52 | $insert_stmt=$conn->prepare($insert_sql);
53 |
54 | $hash_password=password_hash($password,PASSWORD_DEFAULT);
55 |
56 |
57 | $insert_stmt->bind_param("sss",$name,$email,$hash_password);
58 | $result=$insert_stmt->execute();
59 |
60 | if(!$result){
61 | echo $stmt->error;
62 | }
63 |
64 |
65 |
66 | $user_id = $insert_stmt->insert_id;
67 | $_SESSION['user_id'] = $user_id;
68 | $_SESSION['user_email'] = $email;
69 | $_SESSION['user_name'] = $name;
70 | $_SESSION['logged_in'] = true;
71 |
72 | $insert_stmt->close();
73 | $conn->close();
74 |
75 | header("Location: ../login.php?register=successfully");
76 | exit();
77 | }
78 | }
79 | catch(mysqli_sql_exception $e){
80 | echo $e->getMessage();
81 | }
82 | }
83 | }
84 | // elseif(isset($_SESSION['logged_in'])){
85 |
86 | // header("Location: ../account.php?alreadyregisterdsuccessfully");
87 | // exit();
88 |
89 | // }
90 | else{
91 |
92 | header("Location: ../register.php?error=filltheregisterform");
93 | exit();
94 |
95 | }
96 |
97 |
98 | ?>
--------------------------------------------------------------------------------
/admin/server/create_product.php:
--------------------------------------------------------------------------------
1 |
8 |
9 |
10 | prepare("INSERT INTO products (product_name, product_category, product_description, product_image, product_image2, product_image3, product_image4, product_price, product_special_offer, product_color) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
51 | $stmt->bind_param("ssssssssss", $product_name, $product_category, $product_description, $image_name1, $image_name2, $image_name3, $image_name4, $product_price, $product_special_offer, $product_color);
52 |
53 | if ($stmt->execute()) {
54 | header('Location: ../dashboard.php?successfull_add=Productaddsuccessfully');
55 | } else {
56 | header('Location: ../dashboard.php?error_add=Productaddunsuccessfully');
57 | }
58 |
59 |
60 | $stmt->close();
61 | $conn->close();
62 |
63 |
64 | }else{
65 | header('Location: ../dashboard.php');
66 | }
67 |
68 |
69 | }
70 |
71 |
72 | ?>
--------------------------------------------------------------------------------
/server/fogot_password.php:
--------------------------------------------------------------------------------
1 | prepare($sql);
30 |
31 | $stmt->bind_param("s",$email);
32 | $stmt->execute();
33 |
34 | $result=$stmt->get_result();
35 |
36 | if($result->num_rows>0){
37 |
38 | //delete exixting token perticular user
39 | $sql_delete="DELETE FROM pwd_reset WHERE email=?";
40 |
41 | $stmt_delete=$conn->prepare($sql_delete);
42 |
43 | $stmt_delete->bind_param("s",$email);
44 | $stmt_delete->execute();
45 |
46 | //inset new token
47 | $sql_insert="INSERT INTO pwd_reset(email,selector,token,expires) VALUES(?,?,?,?)";
48 |
49 | $stmt_insert=$conn->prepare($sql_insert);
50 |
51 | //encrypt token
52 | $hash_token=password_hash($token, PASSWORD_DEFAULT);
53 |
54 | $stmt_insert->bind_param("ssss",$email,$selector,$hash_token,$expirate);
55 |
56 | $stmt_insert->execute();
57 |
58 | $to=$email;
59 | $subject="password reset request";
60 |
61 |
62 | $message = '
36 |
43 |
44 | Dashboard
37 | 42 |Admin Account
45 | 46 | 47 |
48 |
49 |
50 |
51 |
69 |
70 |
71 |
72 |
73 |
--------------------------------------------------------------------------------
/admin/login.php:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
52 |
53 | 54 |
55 |
56 | 53 | 54 |
57 |
58 | 59 |
60 |
61 | 58 | 59 |
62 |
63 | 64 |
65 |
66 |
67 |
68 | 63 | 64 |
9 |
12 | Admin Login
10 | 11 |
13 |
30 |
31 |
32 |
33 |
38 | All fields are required!
39 |
';
40 | }
41 | else if($_GET['error']=="wrongcredential"){
42 | echo '
43 | Invalid credentials!
44 |
';
45 | }
46 | else{
47 | echo '
48 | Something went wrong!
49 |
';
50 | }
51 | }
52 |
53 | ?>
54 |
55 |
56 |
57 |
58 |
59 | We receive your paswword reset request. The link toreset your password is below. if you did not request, please ignore this message.
'; 63 | $message .= 'Here is your password reset link
';
64 | $message .= 'Click Here
32 |
34 |
35 | Check Out
33 |34 |
36 |
62 |
63 |
7 |
9 |
10 | Reset Password
8 |9 |
11 |
12 |
21 | Could not validate your request
22 |
';
23 | }
24 | else{
25 | if(ctype_xdigit($selector) !== false && ctype_xdigit($validator) !== false){
26 | ?>
27 |
44 |
45 |
46 |
52 | Could not validate your request
53 | 
71 |