------------------------------------";
if ($exid != "") $umessage .= "
Exchange ID: ".$exid;
if (isLoggedIn()) $umessage .= "
User ID: ".(int)$_SESSION['userid'];
if ($phone != "") $umessage .= "
Phone: ".$phone;
$from = 'From: '.$fname.' <'.$email.'>';
SendEmail(SITE_MAIL, $subject, $umessage, $noreply_mail = 1, $from);
header("Location: track_order.php?id=".$reference_id."&msg=1");
exit();
}
else
{
$allerrors = "";
foreach ($errs as $errorname)
$allerrors .= $errorname."
\n";
}
}
if (RESERVE_MINUTES > 0) $a_sql = " DATE_ADD(created, INTERVAL ".(int)RESERVE_MINUTES." MINUTE) AS countdate, "; else $a_sql = "";
$query = "SELECT *, TIMESTAMPDIFF(MINUTE, created, now()) as time_ago, $a_sql DATE_FORMAT(created, '".DATE_FORMAT." %h:%i %p') AS payment_date FROM exchangerix_exchanges WHERE reference_id='$reference_id' LIMIT 1";
$result = smart_mysql_query($query);
$total = mysqli_num_rows($result);
// if created more than 7 days // hide other data
if ($total > 0)
{
$row = mysqli_fetch_array($result);
if (RESERVE_MINUTES > 0 && $row['time_ago'] >= RESERVE_MINUTES)
{
smart_mysql_query("UPDATE exchangerix_exchanges SET status='timeout' WHERE exchange_id='$exchange_id' LIMIT 1");
//header("Location: payment_declined.php?reason=timeout");
//exit();
}
$send_row = mysqli_fetch_array(smart_mysql_query("SELECT * FROM exchangerix_currencies WHERE currency_id='".(int)$row['from_currency_id']."' LIMIT 1"));
$receive_row = mysqli_fetch_array(smart_mysql_query("SELECT * FROM exchangerix_currencies WHERE currency_id='".(int)$row['to_currency_id']."' LIMIT 1"));
$direction_row = mysqli_fetch_array(smart_mysql_query("SELECT * FROM exchangerix_exdirections WHERE from_currency='".(int)$row['from_currency_id']."' AND to_currency='".(int)$row['to_currency_id']."' AND from_currency IN (SELECT currency_id FROM exchangerix_currencies WHERE allow_send='1' AND (reserve>0 || reserve='') AND status='active') AND to_currency IN (SELECT currency_id FROM exchangerix_currencies WHERE allow_receive='1' AND (reserve>0 || reserve='') AND status='active') AND status='active' LIMIT 1"));
$ptitle = "Exchange ".$send_row['currency_name']." ".$send_row['currency_code']." to ".$receive_row['currency_name']." ".$receive_row['currency_code'];
// cancel exchange
if (isset($_GET['action']) && $_GET['action'] == "cancel" && isLoggedIn() && $row['user_id'] == (int)$_SESSION['userid'])
{
if ($row['proof'] != "") { if (file_exists(PUBLIC_HTML_PATH."/uploads/".$row['proof'])) @unlink(PUBLIC_HTML_PATH."/uploads/".$row['proof']); }
smart_mysql_query("UPDATE exchangerix_exchanges SET status='cancelled', updated=NOW() WHERE exchange_id='$exchange_id' LIMIT 1");
unset($_SESSION['transaction_id']);
header ("Location: index.php");
exit();
}
//// ADD TESTIMONIAL //////////////////////////////////////////////
if (isset($_POST['action']) && $_POST['action'] == "addreview")
{
$userid = (int)$_SESSION['userid'];
$client = ucwords(strtolower($row['client_details']));
$client_arr = explode(' ',trim($client));
$author = mysqli_real_escape_string($conn, $client_arr[0]);
$rating = (int)getPostParameter('rating');
$review_title = mysqli_real_escape_string($conn, getPostParameter('review_title'));
$review = mysqli_real_escape_string($conn, nl2br(trim(getPostParameter('review'))));
$review = ucfirst(strtolower($review));
unset($errs);
$errs = array();
if (!($rating && $review_title && $review))
{
$errs[] = CBE1_REVIEW_ERR;
}
else
{
$number_lines = count(explode("
", $review));
if (strlen($review) > MAX_REVIEW_LENGTH)
$errs[] = str_replace("%length%",MAX_REVIEW_LENGTH,CBE1_REVIEW_ERR2);
else if ($number_lines > 5)
$errs[] = CBE1_REVIEW_ERR3;
}
if (count($errs) == 0)
{
$review = substr($review, 0, MAX_REVIEW_LENGTH);
$check_review = mysqli_num_rows(smart_mysql_query("SELECT * FROM exchangerix_reviews WHERE exchange_id='".(int)$row['exchange_id']."'"));
if ($check_review == 0)
{
(REVIEWS_APPROVE == 1) ? $status = "pending" : $status = "active";
$review_query = "INSERT INTO exchangerix_reviews SET exchange_id='".(int)$row['exchange_id']."', rating='$rating', user_id='".(int)$row['user_id']."', author='$author', review_title='$review_title', review='$review', status='$status', added=NOW()";
$review_result = smart_mysql_query($review_query);
$review_added = 1;
}
else
{
$errormsg = CBE1_REVIEW_ERR5;
}
}
else
{
$errormsg = "";
foreach ($errs as $errorname)
$errormsg .= $errorname."
";
}
}
//////////////////////////////////////////////////////////////////////////////////////////
// confirm exchange
/*if (isset($_POST['action']) && $_POST['action'] == "confirm" && isLoggedIn() && $row['user_id'] == (int)$_SESSION['userid'])
{
unset($errs);
$errs = array();
$payment_details = mysqli_real_escape_string($conn, nl2br(getPostParameter('payment_details')));
if (!($payment_details))
$errs[] = CBE1_SIGNUP_ERR;
if (count($errs) == 0)
{
if (NEW_EXCHANGE_ALERT == 1)
{
SendEmail(SITE_ALERTS_MAIL, "New Exchange Completed - ".SITE_TITLE, "Hi,
New currency exchange completed.");
}
//update reserve
smart_mysql_query("UPDATE exchangerix_currencies SET reserve=reserve-'".floatval($row['receive_amount'])."' WHERE currency_id='".(int)$row['to_currency_id']."' LIMIT 1");
//smart_mysql_query("UPDATE exchangerix_currencies SET reserve=reserve+'".floatval($row['exchange_amount'])."' WHERE currency_id='".(int)$row['from_currency_id']."' LIMIT 1");
header ("Location: payment_success.php?manual=1");
exit();
}
else
{
$allerrors = "";
foreach ($errs as $errorname)
$allerrors .= $errorname."
";
}
}*/
}
else
{
$ptitle = "Track Exchange";
}
/////////////// Page config ///////////////
$PAGE_TITLE = $ptitle;
$bg_dark = 1;
require_once ("inc/header.inc.php");
?>
0) {
?>