FM / gcdriver

/home/desid573/public_html/gcdriver

Name	Size	Mode	Actions
assets/	-	0755	rm
lib/	-	0755	rm
payment/	-	0755	rm
PHPMailer/	-	0755	rm
square/	-	0755	rm
array.php	2200	0644	edit dl rm
a_name_address.php	959	0644	edit dl rm
class.phpmailer.php	140901	0644	edit dl rm
class.pop3.php	10385	0644	edit dl rm
class.smtp.php	40343	0644	edit dl rm
error_log	41735	0644	edit dl rm
gcpathfinder.png	2088	0644	edit dl rm
gcsedan.png	2636	0644	edit dl rm
index.php	83374	0644	edit dl rm
logo.jpg	24991	0644	edit dl rm
newJob.php	7176	0644	edit dl rm
PHPMailer.zip	255392	0644	edit dl rm
style.json	1014	0644	edit dl rm
test.php	977	0644	edit dl rm
test2.php	932	0644	edit dl rm
test3.php	1269	0644	edit dl rm
thankyou.php	21667	0644	edit dl rm
typeConfig.php	1460	0644	edit dl rm

Edit: /home/desid573/public_html/gcdriver/thankyou.php (21667B)

<?php
//ini_set('display_errors', '1');
//error_reporting(E_ALL);
require("../urlShortener.php");
require("../vromo.php");
require("square/autoload.php");

$access_token = 'EAAAECgsBQMvvovd1E24z65VJ_SIWlmHLEYrck4ZJ5sg3hqvtUJX49dWOtXtbi59';
# setup authorization
$api_config = new \SquareConnect\Configuration();
$api_config->setHost("https://connect.squareupsandbox.com");
$api_config->setAccessToken($access_token);
$api_client = new \SquareConnect\ApiClient($api_config);
$customersApi = new SquareConnect\Api\CustomersApi($api_client);

$return_reference = "0";

?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    
    <title>FamilyCab Payment Processed</title>

<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" rel="stylesheet">

<style>
        #map {
            height:300px;
        }
        body{
            background-color: #ffffff;
        }

</style>
    
<script async src="https://www.googletagmanager.com/gtag/js?id=AW-1031055197"></script>

</head>
<body>
<div class="container">
    <div class="row">
        <div class="col-lg-12 text-center">
        <?php
        $reference = $_POST['hidden_ref'];
        $phone= $_POST['intphone'];

require("lib/config.php");
if($_POST['account']==""){
$query = "SELECT * FROM customers WHERE mobile='".$phone."'";
        $result = mysqli_query($conn, $query);
        if($result->num_rows > 0) {
        $row = mysqli_fetch_assoc($result);
        $cid = $row['id'];
        if($cid != "") {
$query = "SELECT * FROM customer_tokens WHERE cid = ".$cid;        
        $result = mysqli_query($conn, $query);
        if($result->num_rows > 0) {
        $row = mysqli_fetch_assoc($result);
        $tokenID = $row['access_token_value'];
        $custID = $row['square_id'];
        }
        }
        }

//create customer
$firstname = trim($_POST['First_Name']);
$lastname = trim($_POST['Last_Name']);
$fullname = "$firstname $lastname";
$nameq = mysqli_real_escape_string($conn, $fullname);
$email = trim($_POST['email']);

if($custID == "") {

// Set values in your customer object.
$customer = new \SquareConnect\Model\CreateCustomerRequest();
$customer->setGivenName($firstname);
$customer->setFamilyName($lastname);
$customer->setEmailAddress($email);
$customer->setPhoneNumber($phone);

// Create a Customers API client

// Call CreateCustomer
try {
    $result = $customersApi->createCustomer($customer);
    error_log($result);
    $custID = $result["customer"]["id"];
    
    $sql = "INSERT INTO `customers`(`id`, `name`, `mobile`, `email`, `password`, `firebase_token`, `promo_code`, `promo_used`, `is_delete`, `created`, `modified`) VALUES (NULL,'".$nameq."','".$phone."','".$email."','','','','','',NOW(),NOW())";
    $result = mysqli_query($conn, $sql);
    if(!$result) {
        error_log("customer add error: ".$conn->error);
    }
    $cid = $conn->insert_id;
    
    $sql = "INSERT INTO `customer_tokens`(`id`, `cid`, `square_id`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL,".$cid.",'".$custID."','','',NOW(),NOW())";
    $result = mysqli_query($conn, $sql);
    if(!$result) {
        error_log("customer token add error: ".$conn->error);
    }
    
    $cardID = updateAndChargeCustomerCard($_POST["nonce"], $custID, $reference, $api_client, $customersApi, $conn);
    
} catch (Exception $e) {
    error_log('Exception when calling CustomersApi->createCustomer: '.$e->getMessage());
}

} else {
    
    $cardID = updateAndChargeCustomerCard($_POST["nonce"], $custID, $reference, $api_client, $customersApi, $conn);
    
    
    
}

if($cardID["status"] != "OK") {
    
    die("Credit Card Error");
    
}

} else {
    
    
    
$cardID = $_POST['card_id'];
$custID = $_POST["cust_id"];

$fullname = $_POST['name'];
$nameq = mysqli_real_escape_string($qcon, $fullname);

$query = "SELECT * FROM customers WHERE mobile='".$phone."' ORDER BY token DESC LIMIT 0,1";
        $result = mysqli_query($conn, $query);
        $row = mysqli_fetch_assoc($result);
        $cid = $row['cid'];
        if($cid != "") {
            
            if($email != "") {
                
                $email_string = "`email` = '".$email."'";
                
            }
            
            $sql = "UPDATE `customers` SET `name` = '".$fullname."' ".$email_string." `modified` = NOW() WHERE `mobile` = '".$phone."'";
            $result = mysqli_query($conn, $sql);
            if(!$result) {
                error_log("customer update error: ".$conn->error);
            }
            
            
        } else {
            
            $sql = "INSERT INTO `customers`(`id`, `name`, `mobile`, `email`, `password`, `firebase_token`, `promo_code`, `promo_used`, `is_delete`, `created`, `modified`) VALUES (NULL,'".$nameq."','".$phone."','".$email."','','','','','',NOW(),NOW())";
            $result = mysqli_query($conn, $query);
            if(!$result) {
                error_log("customer add error: ".$conn->error);
            }
            $cid = $conn->insert_id;
            
        }

}

$pickup= $_POST['pickup'];
            
            $dropoff= $_POST['dropoff'];
            
            
            $date= $_POST['date'];
            $d = date_create_from_format("jS M, Y", $date);
            $date24 = date_format($d, "Y-m-d");
            error_log($date24);
            
            $time= $_POST['time'];
            $time24 = date("H:i:s", strtotime($time));            
            
        $type = $_POST["type"];    
	    $lat1= $_POST['lat1_value'];
	    $lng1= $_POST['lng1_value'];
	    $lat2= $_POST['lat2_value'];
	    $lng2= $_POST['lng2_value'];            
            $onewayprice= $_POST['onewayPrice'];
$fnum1 = $_POST['flight_number'];
$ptime1	= $_POST['pickup_time'];
if($_POST['pickupType'] == "search1") {
$ptime1 = "";
}
$passNum = $_POST['passenger_count'];
$rfNum = $_POST['car_seat'];
$ffNum = $_POST['ff_count'];
$boostNum = $_POST['booster_count'];
$luggage = $_POST['luggage'];

$return_trip = $_POST['journeyType'];
if(isset($_POST['oneway'])) {
$return_trip = $_POST['oneway'];
}

if(!$error)
        {

$paymentlink = shortenLink($reference, $type, "payment");

$flighttext = "$fnum1 + $ptime1 mins";
if($fnum1 == ""){
$flighttext = "";
}

$km_est = $_POST['km_est'];
$time_est = $_POST['time_est'];

$luggageq = mysqli_real_escape_string($conn, $luggage);
$pickupq = mysqli_real_escape_string($conn, $pickup);
$dropoffq = mysqli_real_escape_string($conn, $dropoff);
            $query   = "INSERT INTO `booking`(`id`, `cid`, `email`, `booking_date`, `booking_time`, `pickup_addr`, `pickup_lat`, `pickup_long`, `pickoff_addr`, `pickoff_lat`, `pickoff_long`, `book_pax`, `book_rf`, `book_ff`, `book_b`, `mins_to`, `luggage`, `flight_num`, `spatula_id`, `spatula_link`, `reference`, `type`, `quote`, `quote_km`, `quote_time`, `xero_inv`, `payment_eway`, `status`, `driver`) VALUES (NULL,".$cid.",'','".$date24."','".$time24."','".$pickupq."','".$lat1."','".$lng1."','".$dropoffq."','".$lat2."','".$lng2."','".$passNum."','".$rfNum."','".$ffNum."','".$boostNum."','".$ptime."','".$luggageq."','".$fnum1."','','','".$reference."','".$type."','".$onewayprice."','".$km_est."','".$time_est."','','','','')";
	    $success = $conn->query($query);
 
	    if (!$success) {
    		error_log("Could not enter booking data: ".$conn->error);
    		} else {
    		    
    		    $bid = $conn->insert_id;
    		    
    		    $meet = $_POST["meet"];
    		    $brisMeet = false;
    		    $gcMeet = false;
    		    if($meet == 45) {
    		        $brisMeet = true;
    		    } else if($meet == 25) {
    		        $gcMeet = true;
    		    }
    		    $minor = $_POST["minor"];
    		    $brisMinor = false;
    		    $gcMinor = false;
    		    if($minor == 65) {
    		        $brisMinor = true;
    		    } else if($minor == 45) {
    		        $gcMinor = true;
    		    }
    		    $trailer = false;
    		    if(isset($_POST["trailer"])) {
    		        $trailer = true;
    		    }
    		    $cover = false;
    		    if(isset($_POST["cover"])) {
    		        $cover = true;
    		    }
    		    $drink = false;
    		    if(isset($_POST["drink"])) {
    		        $drink = true;
    		    }
    		    
    		    $sql = "INSERT INTO `booking_extras`(`id`, `bid`, `bris_meet`, `gc_meet`, `bris_minor`, `gc_minor`, `trailer`, `drink`, `cover`) VALUES (NULL, $bid, $brisMeet, $gcMeet, $brisMinor, $gcMinor, $trailer, $cover, $drink)";
    		    error_log($sql);
    		    $query = $conn->query($sql);
    		    
    		    if(!$query) {
    		        error_log($conn->error);
    		    }
    		    
    		}
    		
    		
    		
    		
    		if($_POST['tollAmount'] != "0") {
    		$query   = "INSERT into toll_estimates (id, reference, amount, description) VALUES (NULL, '".$reference."', '".$_POST['tollAmount']."', '".$_POST['tollDescription']."')"; 
    		$success = $conn->query($query);
    		if (!$success) {
    		    error_log("Could not enter toll data: ".$conn->error);
    		}
    		}
            echo "<h3>Your booking has been successfully processed</h3>";
            echo "<h3>You will receive an SMS confirmation from the dispatch team within 30 mins (unless you have submitted after hours)</h3>";

$message= "Type GC <br>
 Date $date $time24  <br>
 Square Customer ID $custID <br>    
 Card ID $cardID        <br>
 Name $fullname <br>
 Phone $intphone <br>
 Pick Up $pickup<br>
 Flight Number $fnum1<br>
 Mins post flight $ptime1<br>
 TO <br>
 Drop Off $dropoff <br>
 Quoted $onewayprice <br>
 Credit Card Authorised <br>
 Number of Passengers $passNum <br>
 Number of RF Seats $rfNum <br>
 Number of FF Seats $ffNum <br>
 Number of Boosters $boostNum <br>
 Luggage $luggage <br>
Lat1 $lat1 <br>
Long1 $lng1 <br>
Lat2 $lat2 <br>
Long2 $lng2 <br>

Reference $reference <br>
Email $email<br>";

send_mail('lwscann@gmail.com','booking@gcdriver.com.au','New Order From'.$email ,$message);
   
          
           echo "<h4>When your driver is en route you will receive an SMS with a tracking link and driver contact details. If you do not receive this SMS atleast 10 mins before your booking time please contact us on 1300466365</h4>";
echo "<h4>Trip Details</h4>";
            echo "<h5><table style='margin-left: auto; margin-right: auto;'>
            <tr><td style = 'text-align: left; padding: 5px;'>Name </td><td style = 'text-align: left; padding: 5px;'>$fullname</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Phone </td><td style = 'text-align: left; padding: 5px;'>$phone</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Email </td><td style = 'text-align: left; padding: 5px;'>$email</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Pick Up </td><td style = 'text-align: left; padding: 5px;'>$pickup</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Drop Off </td><td style = 'text-align: left; padding: 5px;'>$dropoff</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Date/Time </td><td style = 'text-align: left; padding: 5px;'>$date $time</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Passengers </td><td style = 'text-align: left; padding: 5px;'>$passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Quoted </td><td style = 'text-align: left; padding: 5px;'>$onewayprice</td></tr></table></h5>";

if($return_trip == 'return') {
	
            $return_date= $_POST['return_date'];
            $d = date_create_from_format("jS M, Y", $return_date);
            $date24 = date_format($d, "Y-m-d");
            
            $return_time= $_POST['return_time'];
           
            
            
            $time24 = date("H:i:s", strtotime($return_time));            
            
            $lat3= $_POST['lat3_value'];
	    $lng3= $_POST['lng3_value'];
	    $lat4= $_POST['lat4_value'];
	    $lng4= $_POST['lng4_value']; 
	    $returnprice= $_POST['returnPrice'];
	    $return_pickup = $_POST['return_pickup'];
	    
	    $returnpickupencode = $_POST['returnpickupencode'];
	    $return_dropoff = $_POST['return_dropoff'];
	    $returndropoffencode= $_POST['returndropoffencode'];
	    $return_fnum1 = $_POST['return_flight_number'];
	    $return_ptime1 = $_POST['return_pickup_time'];
	    if($_POST['returnPickupType'] == "search3") {
$return_ptime1 = "";
}
	    $r_reference = $_POST['hidden_ref'];
	    
	    $return_reference = floatval($r_reference)+1;

$return_message = "Type FC<br>
 Date $return_date $return_time24 <br>
 Transaction ID $transactionid <br>
 Token Customer ID $tokencustomerid <br>
 Name $fullname <br>
 Phone $intphone <br>
 Pick Up $return_pickup<br>
 Flight Number $return_fnum1<br>
 Mins post flight $return_ptime1<br>
 TO <br>
 Drop Off $return_dropoff <br>
 Quoted $returnprice <br>
 Credit Card Authorised <br>
 Number of Passengers $passNum <br>
 Number of RF Seats $rfNum <br>
 Number of FF Seats $ffNum <br>
 Number of Boosters $boostNum <br>
 Luggage $luggage <br>
Lat1 $lat3 <br>
Long1 $lng3 <br>
Lat2 $lat4 <br>
Long2 $lng4 <br>
Booking Type Return 2nd Leg <br>
Reference $return_reference <br>
Email $email <br>
";
$return_km_est = $_POST['return_km_est'];
$return_time_est = $_POST['return_time_est'];
	    $returnpickupq = mysqli_real_escape_string($qcon, $return_pickup);
$returndropoffq = mysqli_real_escape_string($qcon, $return_dropoff);
            $query   = "INSERT INTO `booking`(`id`, `cid`, `email`, `booking_date`, `booking_time`, `pickup_addr`, `pickup_lat`, `pickup_long`, `pickoff_addr`, `pickoff_lat`, `pickoff_long`, `book_pax`, `book_rf`, `book_ff`, `book_b`, `mins_to`, `luggage`, `flight_num`, `spatula_id`, `spatula_link`, `reference`, `type`, `quote`, `quote_km`, `quote_time`, `xero_inv`, `payment_eway`, `status`, `driver`) VALUES (NULL,".$cid.",'','".$date24."','".$time24."','".$returnpickupq."','".$lat3."','".$lng3."','".$returndropoffq."','".$lat4."','".$lng4."','".$passNum."','".$rfNum."','".$ffNum."','".$boostNum."','".$return_ptime."','".$luggageq."','".$return_fnum1."','','','".$return_reference."','".$type."','".$returnprice."','".$return_km_est."','".$return_time_est."','','','','')";

$success = $conn->query($query);
 
	    if (!$success) {
    		die("Couldn't enter data: ".$conn->error);
    		}
    		
    		if($_POST['returnTollAmount'] != "0") {
    		    $query   = "INSERT into toll_estimates (id, reference, amount, description) VALUES (NULL, '".$return_reference."', '".$_POST['returnTollAmount']."', '".$_POST['returnTollDescription']."')";
    		    $success = $conn->query($query);
    		    if (!$success) {
    		        error_log("Could not enter toll data: ".$conn->error);
    		    }
    		}
            $message_sql = "Type: $type <br>
Ref: $spatulaid <br> ";
send_mail('lwscann@gmail.com','booking@gcdriver.com.au','New Order From'.$email ,$return_message);
   
        echo "<h4>Return Trip Details</h4>";
            echo "<h5><table style='margin-left: auto; margin-right: auto;'>
            <tr><td style = 'text-align: left; padding: 5px;'>Pick Up </td><td style = 'text-align: left; padding: 5px;'>$return_pickup</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Drop Off </td><td style = 'text-align: left; padding: 5px;'>$return_dropoff</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Date/Time </td><td style = 'text-align: left; padding: 5px;'>$return_date $return_time</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Passengers </td><td style = 'text-align: left; padding: 5px;'>$passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters</td></tr>
            <tr><td style = 'text-align: left; padding: 5px;'>Quoted </td><td style = 'text-align: left; padding: 5px;'>$returnprice</td></tr></table></h5>";
        
           
        }

?>
        </div>
    </div>
</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js"></script>
<script type="text/javascript">

$(document).ready(function(){
    console.log("thrown")
	$.ajax({
        type: "POST",
        url: "newJob.php",
      	data: "type=" + "<?=$type ?>" + "&ref=" + "<?=$reference ?>",
        dataType: 'json',
        success: function (data) {
			console.log("Success");
        },
		error: function (XMLHttpRequest, textStatus, errorThrown) {
    		console.log(textStatus + " " + errorThrown);
    	}

})
	var return_reference = <?=$return_reference ?>;
	if(return_reference != "0") {
		$.ajax({
	        type: "POST",
	        url: "newJob.php",
	      	data: "type=" + "<?=$type ?>" + "&ref=" + "<?=$return_reference ?>",
	        dataType: 'json',
	        success: function (data) {
				console.log("Return Success");
	        },
			error: function (XMLHttpRequest, textStatus, errorThrown) {
	    		console.log(textStatus + " " + errorThrown);
	    	}

})

}

})
</script>
    <?        
            
        
        }
        else
        {
            echo "<h3>Your card has been declined</h3><br>\n";
            echo "<h4><br>If the error message above says card name/number/expiry not provided and you are using Internet Explorer please try again from this <a target='_blank' href='https://desidrivers.com.au/family/indextest.php'>link</a><br></h4>";
            echo $errormessage."<br>\n";
            
            echo "<h4><a href='https://desidrivers.com.au/family/'> Refresh </a></h4>";
        }
        ?>
        </div>
    </div>
</div>
</body>
</html>

<?php
function updateAndChargeCustomerCard($nonce, $customer, $reference, $api_client, $customersApi, $conn) {

$body = new \SquareConnect\Model\CreateCustomerCardRequest();

// Set the card nonce value for your request object.
$body->setCardNonce($nonce);
//$body->setCardNonce("AXTKZ34RXCRTSAJKC8T8P91630");

//print_r($body);

try {
  $result = $customersApi->createCustomerCard($customer, $body);
  //print_r($result);
  $cardID = $result["card"]["id"];
  if($cardID != "") {
      
      $sql = "UPDATE `customer_tokens` SET `access_token_value` = '".$cardID."', `modified` = NOW() WHERE `square_id` = '".$customer."'";
      $result = mysqli_query($conn, $sql);
      if(!$result) {
          error_log("update customer token error: ".$conn->error);
      }
      
        $apiInstance = new SquareConnect\Api\PaymentsApi($api_client);
        $body = new \SquareConnect\Model\CreatePaymentRequest();
        
        // Set your customer_id and customer_card_id
        $body->setSourceId($cardID); 
        $body->setCustomerId($customer); 
        
        // Set the payment information
        $body->setIdempotencyKey($reference);
        $body->setAutocomplete(false);
        
        $body->setReferenceId($reference);
        
        // Set the charge amount to 10 USD
        $chargeAmount =  new SquareConnect\Model\Money();
        
        $chargeAmount->setAmount(100);
        $chargeAmount->setCurrency("AUD");
        $body->setAmountMoney($chargeAmount);
        
        //make the call
        try {
            $result = $apiInstance->createPayment($body);
            error_log($result);
            if($result["payment"]["status"] == "APPROVED") {
                
            $res["cardID"] = $cardID;
            $res["status"] = "OK";
            $res["message"] = "";
            return $res;
            } else {
                $res["cardID"] = "";
            $res["status"] = "error";
            $res["message"] = "Error Processing Authorisation";
            return $res;
                
            }
        } catch (Exception $e) {
            error_log('Exception when calling PaymentsApi->createPayment: '.$e->getMessage());
        }
              
          }
} catch (Exception $e) {
  error_log('Error when calling createCustomerCard: '.$e->getMessage());
  $res["cardID"] = "";
            $res["status"] = "error";
            $res["message"] = "Error Adding Card";
  return $res;
}
    
}

function send_mail($to, $from, $title, $message)
{
    $headers = "MIME-Version: 1.0 \r\n";
    $headers .= "From: $from \n";
    $headers .= "MIME-Version: 1.0\r\n";
    $headers .= "Content-type: text/html;charset=ISO-8859-1 \r\n";
    $headers .= "X-Priority: 3\r\n";
    $headers .= "X-Mailer: smail-PHP " . phpversion() . "\r\n";
    return mail($to, $title, $message, $headers);
}
?>

setHost("https://connect.squareupsandbox.com"); $api_config->setAccessToken($access_token); $api_client = new \SquareConnect\ApiClient($api_config); $customersApi = new SquareConnect\Api\CustomersApi($api_client); $return_reference = "0"; ?> FamilyCab Payment Processed

num_rows > 0) { $row = mysqli_fetch_assoc($result); $cid = $row['id']; if($cid != "") { $query = "SELECT * FROM customer_tokens WHERE cid = ".$cid; $result = mysqli_query($conn, $query); if($result->num_rows > 0) { $row = mysqli_fetch_assoc($result); $tokenID = $row['access_token_value']; $custID = $row['square_id']; } } } //create customer $firstname = trim($_POST['First_Name']); $lastname = trim($_POST['Last_Name']); $fullname = "$firstname $lastname"; $nameq = mysqli_real_escape_string($conn, $fullname); $email = trim($_POST['email']); if($custID == "") { // Set values in your customer object. $customer = new \SquareConnect\Model\CreateCustomerRequest(); $customer->setGivenName($firstname); $customer->setFamilyName($lastname); $customer->setEmailAddress($email); $customer->setPhoneNumber($phone); // Create a Customers API client // Call CreateCustomer try { $result = $customersApi->createCustomer($customer); error_log($result); $custID = $result["customer"]["id"]; $sql = "INSERT INTO `customers`(`id`, `name`, `mobile`, `email`, `password`, `firebase_token`, `promo_code`, `promo_used`, `is_delete`, `created`, `modified`) VALUES (NULL,'".$nameq."','".$phone."','".$email."','','','','','',NOW(),NOW())"; $result = mysqli_query($conn, $sql); if(!$result) { error_log("customer add error: ".$conn->error); } $cid = $conn->insert_id; $sql = "INSERT INTO `customer_tokens`(`id`, `cid`, `square_id`, `access_token_value`, `status`, `created`, `modified`) VALUES (NULL,".$cid.",'".$custID."','','',NOW(),NOW())"; $result = mysqli_query($conn, $sql); if(!$result) { error_log("customer token add error: ".$conn->error); } $cardID = updateAndChargeCustomerCard($_POST["nonce"], $custID, $reference, $api_client, $customersApi, $conn); } catch (Exception $e) { error_log('Exception when calling CustomersApi->createCustomer: '.$e->getMessage()); } } else { $cardID = updateAndChargeCustomerCard($_POST["nonce"], $custID, $reference, $api_client, $customersApi, $conn); } if($cardID["status"] != "OK") { die("Credit Card Error"); } } else { $cardID = $_POST['card_id']; $custID = $_POST["cust_id"]; $fullname = $_POST['name']; $nameq = mysqli_real_escape_string($qcon, $fullname); $query = "SELECT * FROM customers WHERE mobile='".$phone."' ORDER BY token DESC LIMIT 0,1"; $result = mysqli_query($conn, $query); $row = mysqli_fetch_assoc($result); $cid = $row['cid']; if($cid != "") { if($email != "") { $email_string = "`email` = '".$email."'"; } $sql = "UPDATE `customers` SET `name` = '".$fullname."' ".$email_string." `modified` = NOW() WHERE `mobile` = '".$phone."'"; $result = mysqli_query($conn, $sql); if(!$result) { error_log("customer update error: ".$conn->error); } } else { $sql = "INSERT INTO `customers`(`id`, `name`, `mobile`, `email`, `password`, `firebase_token`, `promo_code`, `promo_used`, `is_delete`, `created`, `modified`) VALUES (NULL,'".$nameq."','".$phone."','".$email."','','','','','',NOW(),NOW())"; $result = mysqli_query($conn, $query); if(!$result) { error_log("customer add error: ".$conn->error); } $cid = $conn->insert_id; } } $pickup= $_POST['pickup']; $dropoff= $_POST['dropoff']; $date= $_POST['date']; $d = date_create_from_format("jS M, Y", $date); $date24 = date_format($d, "Y-m-d"); error_log($date24); $time= $_POST['time']; $time24 = date("H:i:s", strtotime($time)); $type = $_POST["type"]; $lat1= $_POST['lat1_value']; $lng1= $_POST['lng1_value']; $lat2= $_POST['lat2_value']; $lng2= $_POST['lng2_value']; $onewayprice= $_POST['onewayPrice']; $fnum1 = $_POST['flight_number']; $ptime1 = $_POST['pickup_time']; if($_POST['pickupType'] == "search1") { $ptime1 = ""; } $passNum = $_POST['passenger_count']; $rfNum = $_POST['car_seat']; $ffNum = $_POST['ff_count']; $boostNum = $_POST['booster_count']; $luggage = $_POST['luggage']; $return_trip = $_POST['journeyType']; if(isset($_POST['oneway'])) { $return_trip = $_POST['oneway']; } if(!$error) { $paymentlink = shortenLink($reference, $type, "payment"); $flighttext = "$fnum1 + $ptime1 mins"; if($fnum1 == ""){ $flighttext = ""; } $km_est = $_POST['km_est']; $time_est = $_POST['time_est']; $luggageq = mysqli_real_escape_string($conn, $luggage); $pickupq = mysqli_real_escape_string($conn, $pickup); $dropoffq = mysqli_real_escape_string($conn, $dropoff); $query = "INSERT INTO `booking`(`id`, `cid`, `email`, `booking_date`, `booking_time`, `pickup_addr`, `pickup_lat`, `pickup_long`, `pickoff_addr`, `pickoff_lat`, `pickoff_long`, `book_pax`, `book_rf`, `book_ff`, `book_b`, `mins_to`, `luggage`, `flight_num`, `spatula_id`, `spatula_link`, `reference`, `type`, `quote`, `quote_km`, `quote_time`, `xero_inv`, `payment_eway`, `status`, `driver`) VALUES (NULL,".$cid.",'','".$date24."','".$time24."','".$pickupq."','".$lat1."','".$lng1."','".$dropoffq."','".$lat2."','".$lng2."','".$passNum."','".$rfNum."','".$ffNum."','".$boostNum."','".$ptime."','".$luggageq."','".$fnum1."','','','".$reference."','".$type."','".$onewayprice."','".$km_est."','".$time_est."','','','','')"; $success = $conn->query($query); if (!$success) { error_log("Could not enter booking data: ".$conn->error); } else { $bid = $conn->insert_id; $meet = $_POST["meet"]; $brisMeet = false; $gcMeet = false; if($meet == 45) { $brisMeet = true; } else if($meet == 25) { $gcMeet = true; } $minor = $_POST["minor"]; $brisMinor = false; $gcMinor = false; if($minor == 65) { $brisMinor = true; } else if($minor == 45) { $gcMinor = true; } $trailer = false; if(isset($_POST["trailer"])) { $trailer = true; } $cover = false; if(isset($_POST["cover"])) { $cover = true; } $drink = false; if(isset($_POST["drink"])) { $drink = true; } $sql = "INSERT INTO `booking_extras`(`id`, `bid`, `bris_meet`, `gc_meet`, `bris_minor`, `gc_minor`, `trailer`, `drink`, `cover`) VALUES (NULL, $bid, $brisMeet, $gcMeet, $brisMinor, $gcMinor, $trailer, $cover, $drink)"; error_log($sql); $query = $conn->query($sql); if(!$query) { error_log($conn->error); } } if($_POST['tollAmount'] != "0") { $query = "INSERT into toll_estimates (id, reference, amount, description) VALUES (NULL, '".$reference."', '".$_POST['tollAmount']."', '".$_POST['tollDescription']."')"; $success = $conn->query($query); if (!$success) { error_log("Could not enter toll data: ".$conn->error); } } echo "

Your booking has been successfully processed

"; echo "

You will receive an SMS confirmation from the dispatch team within 30 mins (unless you have submitted after hours)

"; $message= "Type GC
Date $date $time24
Square Customer ID $custID
Card ID $cardID
Name $fullname
Phone $intphone
Pick Up $pickup
Flight Number $fnum1
Mins post flight $ptime1
TO
Drop Off $dropoff
Quoted $onewayprice
Credit Card Authorised
Number of Passengers $passNum
Number of RF Seats $rfNum
Number of FF Seats $ffNum
Number of Boosters $boostNum
Luggage $luggage
Lat1 $lat1
Long1 $lng1
Lat2 $lat2
Long2 $lng2
Reference $reference
Email $email
"; send_mail('lwscann@gmail.com','booking@gcdriver.com.au','New Order From'.$email ,$message); echo "

When your driver is en route you will receive an SMS with a tracking link and driver contact details. If you do not receive this SMS atleast 10 mins before your booking time please contact us on 1300466365

"; echo "

Trip Details

"; echo "

Name $fullname

Phone $phone

Email $email

Pick Up $pickup

Drop Off $dropoff

Date/Time $date $time

Passengers $passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters

Quoted $onewayprice

"; if($return_trip == 'return') { $return_date= $_POST['return_date']; $d = date_create_from_format("jS M, Y", $return_date); $date24 = date_format($d, "Y-m-d"); $return_time= $_POST['return_time']; $time24 = date("H:i:s", strtotime($return_time)); $lat3= $_POST['lat3_value']; $lng3= $_POST['lng3_value']; $lat4= $_POST['lat4_value']; $lng4= $_POST['lng4_value']; $returnprice= $_POST['returnPrice']; $return_pickup = $_POST['return_pickup']; $returnpickupencode = $_POST['returnpickupencode']; $return_dropoff = $_POST['return_dropoff']; $returndropoffencode= $_POST['returndropoffencode']; $return_fnum1 = $_POST['return_flight_number']; $return_ptime1 = $_POST['return_pickup_time']; if($_POST['returnPickupType'] == "search3") { $return_ptime1 = ""; } $r_reference = $_POST['hidden_ref']; $return_reference = floatval($r_reference)+1; $return_message = "Type FC
Date $return_date $return_time24
Transaction ID $transactionid
Token Customer ID $tokencustomerid
Name $fullname
Phone $intphone
Pick Up $return_pickup
Flight Number $return_fnum1
Mins post flight $return_ptime1
TO
Drop Off $return_dropoff
Quoted $returnprice
Credit Card Authorised
Number of Passengers $passNum
Number of RF Seats $rfNum
Number of FF Seats $ffNum
Number of Boosters $boostNum
Luggage $luggage
Lat1 $lat3
Long1 $lng3
Lat2 $lat4
Long2 $lng4
Booking Type Return 2nd Leg
Reference $return_reference
Email $email
"; $return_km_est = $_POST['return_km_est']; $return_time_est = $_POST['return_time_est']; $returnpickupq = mysqli_real_escape_string($qcon, $return_pickup); $returndropoffq = mysqli_real_escape_string($qcon, $return_dropoff); $query = "INSERT INTO `booking`(`id`, `cid`, `email`, `booking_date`, `booking_time`, `pickup_addr`, `pickup_lat`, `pickup_long`, `pickoff_addr`, `pickoff_lat`, `pickoff_long`, `book_pax`, `book_rf`, `book_ff`, `book_b`, `mins_to`, `luggage`, `flight_num`, `spatula_id`, `spatula_link`, `reference`, `type`, `quote`, `quote_km`, `quote_time`, `xero_inv`, `payment_eway`, `status`, `driver`) VALUES (NULL,".$cid.",'','".$date24."','".$time24."','".$returnpickupq."','".$lat3."','".$lng3."','".$returndropoffq."','".$lat4."','".$lng4."','".$passNum."','".$rfNum."','".$ffNum."','".$boostNum."','".$return_ptime."','".$luggageq."','".$return_fnum1."','','','".$return_reference."','".$type."','".$returnprice."','".$return_km_est."','".$return_time_est."','','','','')"; $success = $conn->query($query); if (!$success) { die("Couldn't enter data: ".$conn->error); } if($_POST['returnTollAmount'] != "0") { $query = "INSERT into toll_estimates (id, reference, amount, description) VALUES (NULL, '".$return_reference."', '".$_POST['returnTollAmount']."', '".$_POST['returnTollDescription']."')"; $success = $conn->query($query); if (!$success) { error_log("Could not enter toll data: ".$conn->error); } } $message_sql = "Type: $type
Ref: $spatulaid
"; send_mail('lwscann@gmail.com','booking@gcdriver.com.au','New Order From'.$email ,$return_message); echo "

Return Trip Details

"; echo "

Pick Up $return_pickup

Drop Off $return_dropoff

Date/Time $return_date $return_time

Passengers $passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters

Quoted $returnprice

"; } ?>

Your card has been declined
\n"; echo "

If the error message above says card name/number/expiry not provided and you are using Internet Explorer please try again from this link

"; echo $errormessage."
\n"; echo "

Refresh

"; } ?>

Name	$fullname
Phone	$phone
Email	$email
Pick Up	$pickup
Drop Off	$dropoff
Date/Time	$date $time
Passengers	$passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters
Quoted	$onewayprice

Pick Up	$return_pickup
Drop Off	$return_dropoff
Date/Time	$return_date $return_time
Passengers	$passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters
Quoted	$returnprice

Your booking has been successfully processed

You will receive an SMS confirmation from the dispatch team within 30 mins (unless you have submitted after hours)

When your driver is en route you will receive an SMS with a tracking link and driver contact details. If you do not receive this SMS atleast 10 mins before your booking time please contact us on 1300466365

Trip Details

Name $fullname Phone $phone Email $email Pick Up $pickup Drop Off $dropoff Date/Time $date $time Passengers $passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters Quoted $onewayprice

Return Trip Details

Pick Up $return_pickup Drop Off $return_dropoff Date/Time $return_date $return_time Passengers $passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters Quoted $returnprice

If the error message above says card name/number/expiry not provided and you are using Internet Explorer please try again from this link

Refresh

Name $fullname

Phone $phone

Email $email

Pick Up $pickup

Drop Off $dropoff

Date/Time $date $time

Passengers $passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters

Quoted $onewayprice

Pick Up $return_pickup

Drop Off $return_dropoff

Date/Time $return_date $return_time

Passengers $passNum pax, $rfNum RF, $ffNum FF, $boostNum Boosters

Quoted $returnprice