0)
{
$row = mysqli_fetch_array($result);
}
else
{
header ("Location: logout.php");
exit();
}
$amount = DisplayMoney(MIN_PAYOUT_PER_TRANSACTION, $hide_currency = 1);
if (isset($_POST['amount']) && is_numeric($_POST['amount']))
{
$amount = mysqli_real_escape_string($conn, getPostParameter('amount'));
}
// password verification
if (isset($_POST['action']) && $_POST['action'] == "check_password")
{
unset($_SESSION['password_verified']);
unset($errs);
$errs = array();
$pwd = mysqli_real_escape_string($conn, getPostParameter('password'));
if (!($pwd))
{
$errs[] = "Please enter password";
}
else
{
if (PasswordEncryption($pwd) !== $row['password'])
{
$errs[] = "Wrong password";
}
}
if (count($errs) == 0)
{
// setup verification for one hour
$_SESSION['password_verified'] = time() + (1*1*60*60);
}
else
{
$allerrors = "";
foreach ($errs as $errorname)
$allerrors .= " ".$errorname."
\n";
}
}
if (isset($_POST['withdraw']) && $_POST['withdraw'] != "")
{
unset($errs);
$errs = array();
$amount = mysqli_real_escape_string($conn, getPostParameter('amount'));
$payment_method = (int)getPostParameter('payment_method');
$payment_details = mysqli_real_escape_string($conn, nl2br(getPostParameter('payment_details')));
$current_balance = GetUserBalance($userid, 1);
if (!(is_numeric($amount) && $amount > 0))
{
$errs[] = CBE1_WITHDRAW_ERR;
$amount = "";
}
elseif (!(isset($payment_method) && $payment_method != 0))
{
$errs[] = CBE1_WITHDRAW_ERR2;
}
elseif (!(isset($payment_details) && $payment_details != ""))
{
$errs[] = CBE1_WITHDRAW_ERR3;
}
else
{
if ($amount < MIN_PAYOUT_PER_TRANSACTION)
{
$errs[] = CBE1_WITHDRAW_ERR4." ".DisplayMoney(MIN_PAYOUT_PER_TRANSACTION);
}
if ($amount > $current_balance)
{
$errs[] = CBE1_WITHDRAW_ERR5;
}
if ($current_balance < MIN_PAYOUT)
{
$errs[] = CBE1_WITHDRAW_ERR6." ".DisplayMoney(MIN_PAYOUT);
}
$presult = smart_mysql_query("SELECT * FROM exchangerix_pmethods WHERE pmethod_id='$payment_method' AND status='active' LIMIT 1");
if (mysqli_num_rows($presult) == 0)
{
$errs[] = CBE1_WITHDRAW_ERR7;
}
else
{
$prow = mysqli_fetch_array($presult);
$commission = $prow['commission'];
}
}
if (count($errs) == 0)
{
if ($commission != "" && $commission != "0.00")
{
if (strstr($commission, '%'))
{
$commission_percent = str_replace('%','',$commission);
$transaction_commission = CalculatePercentage($amount, $commission_percent);
}
else
{
$transaction_commission = $commission;
}
}
$reference_id = GenerateReferenceID();
$rp_query = "INSERT INTO exchangerix_transactions SET reference_id='$reference_id', user_id='$userid', payment_type='Withdrawal', payment_method='$payment_method', payment_details='$payment_details', transaction_commision='$transaction_commission', amount='$amount', status='request', created=NOW()";
if (smart_mysql_query($rp_query))
{
header("Location: withdraw.php?msg=sent");
exit();
}
}
else
{
$allerrors = "";
foreach ($errs as $errorname)
$allerrors .= " ".$errorname."
\n";
}
}
/////////////// Page config ///////////////
$PAGE_TITLE = CBE1_WITHDRAW_TITLE;
require_once ("inc/header.inc.php");
?>
: . .