GSP/Panel
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix cart

Browse source
This commit is contained in:
Frank Harris 2025-11-09 21:26:49 -05:00
parent b697e0e91a
commit 4a4a660433
1 changed files with 53 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

89
modules/billing/cart.php
View file

@ -57,11 +57,9 @@ if ($user_id <= 0) {
exit; exit;
} }
// Connect to database // Connect to database (non-fatal)
$db = @mysqli_connect($db_host, $db_user, $db_pass, $db_name); $db = @mysqli_connect($db_host, $db_user, $db_pass, $db_name);
if (!$db) { $db_error = '';
die('Database connection failed. Please try again later.');
}
// Initialize variables // Initialize variables
$invoices = []; $invoices = [];
@ -72,23 +70,29 @@ $applied_coupon = null;
$error_message = ''; $error_message = '';
$success_message = ''; $success_message = '';
// Fetch unpaid invoices for this user if (!$db) {
$query = "SELECT i.*, s.game_key, s.game_name // record error for UI/debugging but do not die here
FROM {$table_prefix}billing_invoices i $db_error = 'Database connection failed: ' . mysqli_connect_error();
LEFT JOIN {$table_prefix}billing_services s ON i.service_id = s.service_id $cart_empty = true;
WHERE i.user_id = " . $user_id . " AND i.status = 'due' } else {
ORDER BY i.invoice_date ASC"; // Fetch unpaid invoices for this user. Select only invoice fields to avoid referencing
// columns that may not exist in all deployments (some schemas differ).
$query = "SELECT i.*
FROM {$table_prefix}billing_invoices i
WHERE i.user_id = " . intval($user_id) . " AND i.status = 'due'
ORDER BY i.invoice_date ASC";
$result = mysqli_query($db, $query); $result = mysqli_query($db, $query);
if ($result) { if ($result) {
while ($row = mysqli_fetch_assoc($result)) { while ($row = mysqli_fetch_assoc($result)) {
$invoices[] = $row; $invoices[] = $row;
$total_amount += floatval($row['amount']); $total_amount += floatval($row['amount']);
}
mysqli_free_result($result);
} }
mysqli_free_result($result);
}
$cart_empty = (count($invoices) === 0); $cart_empty = (count($invoices) === 0);
}
// Handle coupon application // Handle coupon application
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['apply_coupon'])) { if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['apply_coupon'])) {
@ -98,10 +102,13 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['apply_coupon'])) {
$error_message = 'Please enter a coupon code.'; $error_message = 'Please enter a coupon code.';
} else { } else {
// Validate coupon // Validate coupon
$safe_code = mysqli_real_escape_string($db, $coupon_code); if (!$db) {
$coupon_query = "SELECT * FROM {$table_prefix}billing_coupons $error_message = 'Coupon system unavailable: database connection failed.';
WHERE code = '$safe_code' AND is_active = 1"; } else {
$coupon_result = mysqli_query($db, $coupon_query); $safe_code = mysqli_real_escape_string($db, $coupon_code);
$coupon_query = "SELECT * FROM {$table_prefix}billing_coupons
WHERE code = '$safe_code' AND is_active = 1";
$coupon_result = mysqli_query($db, $coupon_query);
if ($coupon_result && mysqli_num_rows($coupon_result) === 1) { if ($coupon_result && mysqli_num_rows($coupon_result) === 1) {
$coupon = mysqli_fetch_assoc($coupon_result); $coupon = mysqli_fetch_assoc($coupon_result);
@ -135,7 +142,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['apply_coupon'])) {
if (is_array($allowed_games) && count($allowed_games) > 0) { if (is_array($allowed_games) && count($allowed_games) > 0) {
$has_valid_game = false; $has_valid_game = false;
foreach ($invoices as $inv) { foreach ($invoices as $inv) {
if (in_array($inv['game_key'], $allowed_games)) { $inv_game_key = isset($inv['game_key']) ? $inv['game_key'] : null;
if ($inv_game_key !== null && in_array($inv_game_key, $allowed_games)) {
$has_valid_game = true; $has_valid_game = true;
break; break;
} }
@ -175,19 +183,21 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['remove_coupon'])) {
// Re-validate coupon from session if present // Re-validate coupon from session if present
if (empty($applied_coupon) && isset($_SESSION['cart_coupon_code'])) { if (empty($applied_coupon) && isset($_SESSION['cart_coupon_code'])) {
$coupon_code = $_SESSION['cart_coupon_code']; $coupon_code = $_SESSION['cart_coupon_code'];
$safe_code = mysqli_real_escape_string($db, $coupon_code); if ($db) {
$coupon_query = "SELECT * FROM {$table_prefix}billing_coupons $safe_code = mysqli_real_escape_string($db, $coupon_code);
WHERE code = '$safe_code' AND is_active = 1"; $coupon_query = "SELECT * FROM {$table_prefix}billing_coupons
$coupon_result = mysqli_query($db, $coupon_query); WHERE code = '$safe_code' AND is_active = 1";
$coupon_result = mysqli_query($db, $coupon_query);
if ($coupon_result && mysqli_num_rows($coupon_result) === 1) { if ($coupon_result && mysqli_num_rows($coupon_result) === 1) {
$applied_coupon = mysqli_fetch_assoc($coupon_result); $applied_coupon = mysqli_fetch_assoc($coupon_result);
$coupon_discount_percent = floatval($applied_coupon['discount_percent']); $coupon_discount_percent = floatval($applied_coupon['discount_percent']);
mysqli_free_result($coupon_result); mysqli_free_result($coupon_result);
} else { } else {
// Coupon no longer valid, clear from session // Coupon no longer valid, clear from session
unset($_SESSION['cart_coupon_code']); unset($_SESSION['cart_coupon_code']);
unset($_SESSION['cart_coupon_id']); unset($_SESSION['cart_coupon_id']);
}
} }
} }
@ -223,8 +233,8 @@ $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https:
$host = $_SERVER['HTTP_HOST'] ?? 'localhost'; $host = $_SERVER['HTTP_HOST'] ?? 'localhost';
$siteBase = $protocol . $host; $siteBase = $protocol . $host;
// Close database connection // Close database connection if opened
mysqli_close($db); if ($db) mysqli_close($db);
?> ?>
<!DOCTYPE html> <!DOCTYPE html>
<html lang="en"> <html lang="en">
@ -459,6 +469,11 @@ mysqli_close($db);
<?php include(__DIR__ . '/includes/menu.php'); ?> <?php include(__DIR__ . '/includes/menu.php'); ?>
<div class="cart-container"> <div class="cart-container">
<?php if (!empty($db_error)): ?>
<div class="alert-error" style="margin-bottom:15px;">
<strong>Database error:</strong> <?php echo htmlspecialchars($db_error); ?>
</div>
<?php endif; ?>
<h1>🛒 Shopping Cart</h1> <h1>🛒 Shopping Cart</h1>
<?php if ($error_message): ?> <?php if ($error_message): ?>