//Redirect user to PayPal store with Token received.
$paypalurl = 'https://www' . $paypalmode . '.paypal.com/cgi-bin/webscr?cmd=_express-checkout&token=' . $httpParsedResponseAr["TOKEN"] . '';
safe_redirect($paypalurl);
} else {
//Show error message
//echo '<div style="color:red"><b>Error : </b>'.urldecode($httpParsedResponseAr["L_LONGMESSAGE0"]).'</div>';
//echo '<div class="container main">';
//echo '<div class="alert alert-danger" style="text-align:center;">'.urldecode($httpParsedResponseAr['L_LONGMESSAGE0']).' (Code: '.urldecode($httpParsedResponseAr['L_ERRORCODE0']).')</div>';
//echo '<form action="bag-paypal-'.$order_number.'/token-" method="post">';
//echo '<input type="submit" class="btn btn-default pull-right" style="margin:10px auto;" id="id_btn_checkout" name="btn_checkout" value="Back To Shop">';
//echo '</form>';
//echo '</div>';
//echo '<pre>';
//print_r($httpParsedResponseAr);
//echo '</pre>';
$temp_token = randomchr(20);
$page = 'bag-paypal-' . $order_number . '/token-?' . $temp_token;
$type = 'danger';
$msg = 'Transaction error, ' . urldecode($httpParsedResponseAr["L_LONGMESSAGE0"]) . ' (Error Code: ' . urldecode($httpParsedResponseAr['L_ERRORCODE0']) . ')';
set_alert($type, $msg);
safe_redirect($page);
}
}
$returnURL = CURR_URL;
$getToken = substr(strchr($returnURL, '='), 1, -(strlen('&payerID=') + strlen(substr(strrchr($returnURL, '='), 1))));
$getPayerID = substr(strrchr($returnURL, '='), 1);
$_GET['token'] = $getToken;
$_GET['PayerID'] = $getPayerID;
//Paypal redirects back to this page using ReturnURL, We should receive TOKEN and Payer ID
if (isset($_GET['token']) && isset($_GET['PayerID']) && empty($_POST)) {
//we will be using these two variables to execute the "DoExpressCheckoutPayment"
<?php
$recipeCategory = getCategory();
// DEFINED VALUE
$post_category_recipes = $_POST['category'];
$post_recipes_name = $_POST['recipe_name'];
$post_recipes_date = $_POST['recipe_date'];
$post_ingredients = addslashes($_POST['recipe_ingredients']);
$post_sauce = addslashes($_POST['recipe_sauce']);
$post_method = addslashes($_POST['recipe_method']);
$getRecords = getRecords($post_recipes_name);
if ($_POST['btn-add-recipes'] == "Save Changes" || $_POST['btn-add-recipes'] == "Save Changes & Exit") {
$checkName = getName($post_recipes_name);
if ($checkName['rows'] > 0) {
for ($i = 0; $i <= $getRecords['rows']; $i++) {
$recipe_name = cleanurl($post_recipes_name . randomchr());
}
} else {
$recipe_name = cleanurl($post_recipes_name);
}
$uploads_dir = '../files/uploads/recipes_image/';
$userfile_name = str_replace(array('(', ')', ' '), '_', $_FILES['upload_recipes_1']['name']);
$userfile_tmp = $_FILES['upload_recipes_1']['tmp_name'];
$prefix = 'recipes_image-';
$prod_img = $uploads_dir . $prefix . $userfile_name;
move_uploaded_file($userfile_tmp, $prod_img);
$slider_image = $prefix . $userfile_name;
$filename = "files/uploads/recipes_image/" . $slider_image;
addNews($post_category_recipes, $post_recipes_name, $filename, $post_recipes_date, $post_ingredients, $post_sauce, $post_method, cleanurl($recipe_name), 'Visible', 'top');
if ($_POST['btn-add-recipes'] == "Save Changes & Exit") {
?>
if ($stmt === false) {
trigger_error('Database error: ' . $sql . ' Error: ' . $conn->errno . ' ' . $conn->error, E_USER_ERROR);
} else {
$stmt->bind_param("ss", $post_user_password, $post_user_email);
$stmt->execute();
}
$stmt->close();
}
}
/* --- DEFINED VARIABLE --- */
$email = filter_var($_POST['email'], FILTER_VALIDATE_EMAIL);
/* --- CONSTRUCT CLASS --- */
$_load_ajax = new AJAX_FORGOT();
$validate = $_load_ajax->validate_email($email);
if ($validate->rows > 0) {
$randomize = randomchr(10);
$_load_ajax->reset_password($randomize, $email);
/* --- SENT EMAIL --- */
$name = $_global_general->website_title;
$email = $_global_info->email;
$recipient = $email;
$mail_body = "Your password has been reset. Your new password is: " . $randomize;
$subject = "[" . $_global_general->website_title . "] FORGOT PASSWORD: "******"Content-Type: text/html; charset=ISO-8859-1\r\n";
$headers .= "From: " . $_global_general->website_title . " <" . $_global_info->email . ">\r\n";
mail($recipient, $subject, $mail_body, $headers);
$type = 'success';
$msg = 'An email has been sent to: ' . $email;
} else {
$type = 'danger';
$msg = 'No records registered with email: ' . $email;
$uploads_dir = '../files/uploads/recipes_image/';
$userfile_name = str_replace(array('(', ')', ' '), '_', $_FILES['upload_recipes_1']['name']);
$userfile_tmp = $_FILES['upload_recipes_1']['tmp_name'];
$prefix = 'recipes_image-';
$prod_img = $uploads_dir . $prefix . $userfile_name;
move_uploaded_file($userfile_tmp, $prod_img);
$slider_image = $prefix . $userfile_name;
$recipe_image = "files/uploads/recipes_image/" . $slider_image;
}
// CREATE ALIAS
$checkName = getName($post_recipe_name);
if ($checkName['rows'] > 0) {
$getRecords = getRecords($post_recipe_name);
//for($i=0;$i<=$getRecords['rows'];$i++){
$recipe_name = $post_recipe_name;
$recipe_alias = cleanurl($post_recipe_name . randomchr());
//}
} else {
$recipe_name = $post_recipe_name;
$recipe_alias = cleanurl($post_recipe_name);
}
updateRecipes($category_recipe, $recipe_name, $recipe_image, $recipe_date, $recipe_ingredients, $recipe_sauce, $recipe_method, $recipe_alias, 'Visible', 'top', $recipe_id);
if ($_POST['btn-edit-recipes'] == "Save Changes") {
?>
<script>
location.href = "http://<?php
echo $_SERVER['HTTP_HOST'] . get_dirname($_SERVER['PHP_SELF']) . "/recipe-detail/" . cleanurl($recipe_alias);
?>
";
</script>
<?php
/*
* ----------------------------------------------------------------------
* AJAX: REMOVE SALE
* ----------------------------------------------------------------------
*/
if ($_POST) {
require_once "../../../../static/_header.php";
class AJAX
{
private $conn;
function __construct()
{
$this->conn = new mysqli(DB_HOST, DB_USER, DB_PASS, DB_NAME);
}
function count_products($post_product_category)
{
$sql = "SELECT COUNT(*) AS rows FROM tbl_product WHERE `product_category` = '{$post_product_category}'";
$query = $this->conn->query($sql);
$result = $query->fetch_object();
return $result;
}
}
$_ajax = new AJAX();
$length = filter_var($_POST['long'], FILTER_SANITIZE_NUMBER_INT);
if ($length != '') {
$code = randomchr($length);
echo strtoupper($code);
} else {
echo 'error';
}
}
$query = $this->conn->query($sql);
$result = $query->fetch_object();
return $result;
}
function forgot_insert_log($user_id, $code, $status, $log_time)
{
$sql = "INSERT INTO `tbl_user_log` (`user_id`, `code`, `status`, `log_time`) VALUES(?, ?, ?, ?)";
$stmt = $this->conn->prepare($sql);
if ($stmt === false) {
trigger_error('Database error: ' . $sql . ' Error: ' . $this->conn->errno . ' ' . $this->conn->error, E_USER_ERROR);
} else {
$stmt->bind_param("ssss", $user_id, $code, $status, $log_time);
$stmt->execute();
}
$stmt->close();
}
}
$_ajax = new AJAX_CLASS();
$email = filter_var($_POST['email'], FILTER_SANITIZE_EMAIL);
$count = $_ajax->count_email($email);
if ($count->rows > 0) {
$data = $_ajax->get_email($email);
$user_id = $data->user_id;
$code = strtolower(randomchr($length));
$status = 1;
$log_time = "NOW()";
$_ajax->forgot_insert_log($user_id, $code, $status, $log_time);
require_once '../../admin/emails/_forgot/_user_forgot.php';
} else {
}
}
if (isset($_POST['btn-admin-forgot']) && $_POST['btn-admin-forgot'] == 'Submit') {
/* --- CONSTRUCT CLASS --- */
$_get = new FORGOT_GET();
$_update = new FORGOT_UPDATE();
$username = filter_var($_POST['username'], FILTER_SANITIZE_STRING);
$count_forgot = $_get->forgot_count_username($username);
$day = date('d');
$month = date('m');
$year = date('Y');
$hour = date('H');
$minute = date('i');
$second = date('s');
$date = $year . '-' . $month . '-' . $day . ' ' . $hour . ':' . $minute . ':' . $second;
if ($count_forgot->rows > 0) {
$get_forgot = $_get->forgot_get_username($username);
$code = randomchr(50);
$count = $_get->count_log($get_forgot->id);
if ($count->rows > 0) {
$data_log = $_get->get_log($get_forgot->id);
$_update->forgot_update_log($data_log->admin_id, $data_log->admin_username, $code, '1', $date, $data_log->log_id);
} else {
$_update->forgot_insert_log($get_forgot->id, $get_forgot->username, $code, '1', $date);
}
$link_forgot = BASE_URL . 'recover-password/' . $code;
/* --- EMAIL --- */
require dirname(__FILE__) . '/../../emails/_forgot/_admin/index.php';
$type = 'success';
$msg = '<strong>Success.</strong> Your reset password email has been sent to your registered email address.';
} else {
$type = 'danger';
$msg = 'Please check your username';
