AutoShell

dfhdfhhdfdfhdhfhfdhdfdhfdhfdfhhdfdfhdhfhdf AutoShell

?? Editing: report_transaction.php

<?php
session_start();
error_reporting(0);
include('includes/dbconnection.php');

if (strlen($_SESSION['uid']) == 0) {
    header('location:logout.php');
    exit();
}

$uid = $_SESSION['uid'];

// Fetch user info
$ret = mysqli_query($con, "SELECT FirstName, LastName, Email FROM tbluser WHERE ID='$uid'");
$userData = mysqli_fetch_array($ret);
$firstName = $userData['FirstName'];
$lastName = $userData['LastName'];
$email = $userData['Email'];

$message = '';

// Check if user already submitted a complaint
$checkQuery = "SELECT ID FROM usercomplaint WHERE user_id='$uid'";
$existingComplaint = mysqli_query($con, $checkQuery);
$hasComplaint = mysqli_num_rows($existingComplaint) > 0;

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    if ($hasComplaint) {
        $message = "<div class='alert alert-warning'>You have already submitted a transaction complaint. Your Complaint is under review.</div>"; 
    } else {
        $complaint = mysqli_real_escape_string($con, $_POST['complaint']);
        $amount = floatval($_POST['amount_paid']);

$targetDir = "uploads/";
        if (!is_dir($targetDir)) {
            mkdir($targetDir, 0755, true);
        }

$fileName = basename($_FILES["payment_proof"]["name"]);
        $targetFilePath = $targetDir . time() . '_' . $fileName;
        move_uploaded_file($_FILES["payment_proof"]["tmp_name"], $targetFilePath);

$query = "INSERT INTO usercomplaint (user_id, firstname, lastname, email, complaint, amount_paid, payment_proof)
                  VALUES ('$uid', '$firstName', '$lastName', '$email', '$complaint', '$amount', '$targetFilePath')";

if (mysqli_query($con, $query)) {
            // Send email notification
            $to = "info.rcmtentmaking@gmail.com";
            $subject = "New Transaction Complaint from $firstName $lastName";
            $body = "A new complaint has been submitted.\n\nName: $firstName $lastName\nEmail: $email\nAmount Paid: ₦$amount\nComplaint:\n$complaint\n\nCheck the portal for the uploaded proof.";
            $headers = "From: RCM-Portal@rcm.edu.ng";
            mail($to, $subject, $body, $headers);

$message = "<div class='alert alert-success'>Complaint submitted successfully!</div>";
            $hasComplaint = true;
        } else {
            $message = "<div class='alert alert-danger'>Error submitting complaint. Please try again.</div>";
        }
    }
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
  <title>Report Transaction</title>
  <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css" rel="stylesheet" />
</head>
<body>
<div class="container mt-5">
  <?php echo $message; ?>
  <?php if ($hasComplaint): ?>
    <div class="card shadow">
      <div class="card-body bg-warning text-dark">
        <h5 class="card-title">Complaint Already Submitted</h5>
        <p class="card-text">You have already submitted a transaction complaint. You are not allowed to submit another complaint.</p>
      </div>
    </div>
  <?php else: ?>
    <div class="card shadow">
      <div class="card-header bg-danger text-white">
        <h5 class="mb-0">Report a Transaction</h5>
      </div>
      <div class="card-body">
        <form method="POST" enctype="multipart/form-data">
          <div class="mb-3">
            <label class="form-label">Name</label>
            <input type="text" class="form-control" value="<?php echo $firstName . ' ' . $lastName; ?>" readonly>
          </div>
          <div class="mb-3">
            <label class="form-label">Email</label>
            <input type="email" class="form-control" value="<?php echo $email; ?>" readonly>
          </div>
          <div class="mb-3">
            <label class="form-label">Amount Paid (₦)</label>
            <input type="number" name="amount_paid" class="form-control" required>
          </div>
          <div class="mb-3">
            <label class="form-label">Complaint</label>
            <textarea name="complaint" class="form-control" rows="4" required></textarea>
          </div>
          <div class="mb-3">
            <label class="form-label">Upload Payment Proof (Image or PDF)</label>
            <input type="file" name="payment_proof" class="form-control" accept=".jpg,.jpeg,.png,.pdf" required>
          </div>
          <button type="submit" class="btn btn-danger">Submit Complaint</button>
        </form>
      </div>
    </div>
  <?php endif; ?>
</div>
</body>
</html>

Path:

home / rcmewpjy / public_html / tmportal / user /

?? Editing: report_transaction.php

Path:

?? Upload