Code: Select all
<?
session_start();
include("include/conn.php");
$sql = "SELECT MAX(siteid) AS siteid FROM tmp_ad";
$row = mysql_query($sql) or die(mysql_error());
$qr = mysql_fetch_array($row);
$orderID = $qr['siteid'];
setcookie('tempID', $orderID, time()+60*60*24*60, '/');
$sql = "SELECT * FROM packages where packageid = " . $_GET["pkid"];
$row = mysql_query($sql) or die(mysql_error());
$qr = mysql_fetch_array($row);
$pakcagename= $qr["title"];
$pakcageid= $qr["packageid"];
$amount = $qr['amount'];
$credits = $qr['no_days'];
if($amount == 0){
mysql_query("update users set package = $credits ,no_credits = no_credits + ". $credits . " WHERE email='".$_SESSION['session_login']."'") or die(mysql_error());
mysql_query("insert into payment (date,email,amount,credits) values ('". date('d.m.Y') ."','" . $_SESSION["session_login"] . "', 0, " . $credits . ")")or die(mysql_error());
header("Location:ad_advertisment.php");
}
$sql = "SELECT * FROM paymentinfo";
$row = mysql_query($sql) or die(mysql_error());
$qr = mysql_fetch_array($row);
$_SESSION["paynow"]="true";
?>
<form name="frm1" action="https://www.paypal.com/cgi-bin/webscr" method="POST" >
<input type="hidden" name="cmd" value="_xclick">
<input type="hidden" name="business" value="<?=$qr['payemail']?>">
<input type="hidden" name="item_name" value="<?=$pakcagename?>">
<input type="hidden" name="item_number" value="<?=$pakcageid?>">
<input type="hidden" name="amount" value="<?=@$amount?>">
<input type="hidden" name="return" value="<?=$qr['surl']?>/quote_thanks.php">
<input type="hidden" name="cancel_return" value="<?=$qr['surl']?>/quote_cancel.php">
<input type="hidden" name="no_note" value="1">
<input type="hidden" name="custom" value="<?=@$credits?>">
<input type="hidden" name="currency_code" value="USD">
</form>
<SCRIPT LANGUAGE=javascript>
document.frm1.submit();
</SCRIPT>