Gecko [ fastearnlimited.com ]

Name	Size	Permission	Date
admin	[ DIR ]	drwxr-xr-x	2026-04-01 03:43
assets	[ DIR ]	drwxr-xr-x	2026-04-01 03:43
auth	[ DIR ]	drwxr-xr-x	2026-04-01 03:43
includes	[ DIR ]	drwxr-xr-x	2026-04-01 03:43
layouts	[ DIR ]	drwxr-xr-x	2026-04-01 03:43
uploads	[ DIR ]	drwxr-xr-x	2026-04-01 03:43
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
404.php	2.81 KB	-rw-r--r--	2026-03-01 20:29
PRD.md	10.42 KB	-rw-r--r--	2026-03-01 20:12
contact.php	8.52 KB	-rw-r--r--	2026-03-01 23:42
dashboard.php	27.37 KB	-rw-r--r--	2026-03-01 20:23
database.sql	3.35 KB	-rw-r--r--	2026-03-01 20:13
error_log	6.87 KB	-rw-r--r--	2026-03-01 20:23
index.php	11.9 KB	-rw-r--r--	2026-03-16 18:50
me.zip	14.2 MB	-rw-r--r--	2026-03-01 20:08
payment.php	9.09 KB	-rw-r--r--	2026-03-01 23:13
process_order.php	2.36 KB	-rw-r--r--	2026-03-01 21:23
purchase.php	6.51 KB	-rw-r--r--	2026-03-01 23:14
services.php	5.29 KB	-rw-r--r--	2026-03-01 23:40
wp-blog-header.php	2.74 KB	-rw-r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php
include 'includes/db.php';
session_start();

// Redirect if not logged in
if (!isset($_SESSION['user_id'])) {
    // For development purposes, let's set a mock user_id if none exists
    // In production, this would redirect to login.php
    $_SESSION['user_id'] = 1;

}

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $user_id = $_SESSION['user_id'];
    $service_id = $_POST['service_id'];
    $project_name = htmlspecialchars($_POST['project_name']);
    $requirements = htmlspecialchars($_POST['requirements']);
    $deadline = $_POST['deadline'];

$project_details = "Project Name: $project_name\nRequirements: $requirements\nDeadline: $deadline";

try {
        // Ensure service exists in DB (to avoid foreign key failure)
        $stmt = $pdo->prepare("SELECT id FROM services WHERE id = ?");
        $stmt->execute([$service_id]);
        if (!$stmt->fetch()) {
            // If service doesn't exist, insert it as a fallback (for dev)
            $stmt = $pdo->prepare("INSERT INTO services (id, name, price, is_premium) VALUES (?, 'Premium Web Application', 199.00, 1)");
            $stmt->execute([$service_id]);
        }

// Check if user exists (to avoid foreign key failure)
        $stmt = $pdo->prepare("SELECT id FROM users WHERE id = ?");
        $stmt->execute([$user_id]);
        if (!$stmt->fetch()) {
            // Insert mock user (for dev)
            $stmt = $pdo->prepare("INSERT INTO users (id, name, email, password) VALUES (?, 'John Doe', 'john@example.com', 'password_hash')");
            $stmt->execute([$user_id]);
        }

// Insert Order
        $stmt = $pdo->prepare("INSERT INTO orders (user_id, service_id, project_details, payment_status, order_status) VALUES (?, ?, ?, 'Unpaid', 1)");
        $stmt->execute([$user_id, $service_id, $project_details]);

$order_id = $pdo->lastInsertId();

// Add to order history
        $stmt = $pdo->prepare("INSERT INTO order_status_history (order_id, status_label) VALUES (?, 'Order Placed')");
        $stmt->execute([$order_id]);

// Success redirect to payment page
        header("Location: payment.php?order_id=$order_id");
        exit();

}
    catch (PDOException $e) {
        die("Error placing order: " . $e->getMessage());
    }
}
else {
    header("Location: services.php");
    exit();
}
?>