mods/ecomm/index_admin_approve.php

   1 <?php
   2 define('AT_INCLUDE_PATH', '../../include/');
   3 require (AT_INCLUDE_PATH.'vitals.inc.php');
   4 require('include/payments.lib.php');
   5 admin_authenticate(AT_ADMIN_PRIV_ECOMM);
   6
   7 $invoice_row = false;
   8 if (isset($_GET['id'], $_GET['submit'])) {
   9         $_GET['id'] = intval($_GET['id']);
  10         $sql = "SELECT * FROM ".TABLE_PREFIX."payments WHERE payment_id={$_GET['id']}";
  11         $result = mysql_query($sql, $db);
  12         $invoice_row = mysql_fetch_assoc($result);
  13         if (!$invoice_row) {
  14                 // can't be found.
  15                 $msg->addError('EC_INVOICE_NOT_FOUND');
  16         } else if ($invoice_row['approved']) {
  17                 // already approved
  18                 $msg->addError('EC_INVOICE_APPROVED');
  19                 $invoice_row = false;
  20         }
  21 } else if (isset($_POST['id'], $_POST['submit'])) {
  22         $_POST['id']   = intval($_POST['id']);
  23         $_POST['txid'] = $addslashes($_POST['txid']);
  24         approve_payment($_POST['id'], $_POST['txid']);
  25
  26         $msg->deleteFeedback('EC_PAYMENT_CONFIRMED_AUTO');
  27         $msg->deleteFeedback('EC_PAYMENT_CONFIRMED_MANUAL');
  28         $msg->addFeedback('ACTION_COMPLETED_SUCCESSFULLY');
  29         header('Location: payments_admin.php');
  30         exit;
  31 } else if (isset($_POST['cancel'])) {
  32         $msg->addFeedback('CANCELLED');
  33         header('Location: '.$_SERVER['PHP_SELF']);
  34         exit;
  35 }
  36
  37
  38 require (AT_INCLUDE_PATH.'header.inc.php');
  39 ?>
  40
  41 <?php if (!$invoice_row): ?>
  42         <form method="get" action="<?php echo $_SERVER['PHP_SELF']; ?>">
  43         <div class="input-form">
  44                 <div class="row">
  45                         <div class="required" title="<?php echo _AT('required_field'); ?>">*</div><label for="invoice"><?php echo _AT('ec_invoice'); ?>#</label><br/>
  46                         <input type="text" id="invoice" name="id" value="" size="10"/>
  47                 </div>
  48
  49                 <div class="row buttons">
  50                         <input type="submit" name="submit" value="<?php echo _AT('search'); ?>"/>
  51                 </div>
  52         </div>
  53         </form>
  54 <?php else: ?>
  55         <form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">
  56         <input type="hidden" name="id" value="<?php echo $invoice_row['payment_id']; ?>"/>
  57         <div class="input-form">
  58                 <div class="row">
  59                         <?php echo _AT('ec_invoice'); ?>#<br/>
  60                         <?php echo $invoice_row['payment_id']; ?>
  61                 </div>
  62
  63                 <div class="row">
  64                         <?php echo _AT('date'); ?><br/>
  65                         <?php echo $invoice_row['timestamp']; ?>
  66                 </div>
  67
  68                 <div class="row">
  69                         <?php echo _AT('login_name'); ?><br/>
  70                         <?php echo get_login($invoice_row['member_id']); ?>
  71                 </div>
  72
  73                 <div class="row">
  74                         <?php echo _AT('course'); ?><br/>
  75                         <?php echo $system_courses[$invoice_row['course_id']]['title']; ?>
  76                 </div>
  77
  78                 <div class="row">
  79                         <?php echo _AT('ec_amount'); ?><br/>
  80                         <?php echo $_config['ec_currency_symbol']; ?><?php echo $invoice_row['amount']; ?> <?php echo $_config['ec_currency']; ?>
  81                 </div>
  82
  83                 <div class="row">
  84                         <label for="txid"><?php echo _AT('ec_transaction_id'); ?></label><br/>
  85                         <input type="text" id="txid" name="txid" value="" size="30"/>
  86                 </div>
  87
  88
  89                 <div class="row buttons">
  90                         <input type="submit" name="submit" value="<?php echo _AT('approve'); ?>"/>
  91                         <input type="submit" name="cancel" value="<?php echo _AT('cancel'); ?>"/>
  92                 </div>
  93         </div>
  94         </form>
  95 <?php endif; ?>
  96 <?php require (AT_INCLUDE_PATH.'footer.inc.php'); ?>