shell bypass 403
<?php $this->load->view('admin/sidebar.php');?>
</div>
<div class="content-right">
<?php $this->load->view('admin/header.php');
?>
<?php
if($order_res==true){
foreach($order_res as $row){
}
}
$s_number = str_pad( $row->id, 4, "0", STR_PAD_LEFT );
$total_pay_amt = $row->order_price;
?>
<div class="main-content">
<div class="dash-block">
<div class="col-md-12">
<form method="post" action="<?=base_url('admin/update_order_status')?>" enctype= 'multipart/form-data'>
<div class="row">
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Order Status </label>
<select name='order_staus' class="form-control">
<option <?php if($row->order_staus =='Processing') { echo "selected"; } ?> value="Processing">Processing</option>
<option <?php if($row->order_staus =='on the way') { echo "selected"; } ?> value="on the way">On the way</option>
<option <?php if($row->order_staus =='On Hold') { echo "selected";}?> value="On Hold">On Hold</option>
<option <?php if($row->order_staus =='Completed') { echo "selected"; } ?> value="Completed">Completed</option>
<option <?php if($row->order_staus =='Returned') { echo "selected"; } ?> value="Returned">Returned</option>
<option <?php if($row->order_staus =='Refunded') { echo "selected"; } ?> value="Refunded">Refunded</option>
<option <?php if($row->order_staus =='Cancelled') { echo "selected"; } ?> value="Cancelled">Cancelled</option>
<option <?php if($row->order_staus =='Cancelled by customer') { echo "selected"; } ?> value="Cancelled by customer">Cancelled by customer</option>
</select>
</div>
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Email </label>
<input type="text" class="form-control" name="b_email" value="<?php echo $row->b_email; ?>">
</div>
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Phone </label>
<input type="text" class="form-control" name="b_phone" value="<?php echo $row->b_phone; ?>">
</div>
<div class="col-md-3">
<p style=" padding: 0px; margin: 0px;"> </p>
<input type="hidden" name="name" value="<?php echo $row->b_name; ?>">
<input type="hidden" name="order_id" value="<?php echo $row->id; ?>">
<input type="hidden" name="order_no" value="<?php echo $row->order_no; ?>">
<input type="hidden" name="order_price" value="<?php echo $row->order_price; ?>">
<button class="btn btn-submit pull-right">Submit</button>
</div>
</div>
</form>
<form method="post" action="<?=base_url('admin/update_order_details')?>" enctype= 'multipart/form-data'>
<p class="as_p">Order Details</p>
<div class="row">
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Invoice Date </label>
<input type="hidden" name="order_id" value="<?php echo $row->id; ?>">
<input type="text" class="form-control datepicker" name="invoice_date" value="<?php if($row->invoice_date) { echo $row->invoice_date; }else { echo date('d-m-Y'); }?>">
</div>
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Invoice No </label>
<input type="text" class="form-control " name="invoice_no" value="<?php if($row->invoice_no) { echo $row->invoice_no; }else { echo "GL-WS".date('Y')."".$s_number; } ?>">
</div>
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Tracking code </label>
<input type="text" class="form-control" name="tracking_code" value="<?php echo $row->tracking_code; ?>">
</div>
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Carrier Name </label>
<select class="form-control" name="carrier_name">
<option value="">Select Carrier Name</option>
<option <?php if($row->carrier_name=='FedEx'){ echo "selected"; } ?> value="FedEx">FedEx</option>
<option <?php if($row->carrier_name=='Delhivery'){ echo "selected"; } ?> value="Delhivery">Delhivery</option>
<option <?php if($row->carrier_name=='Ecom Express'){ echo "selected"; } ?> value="Ecom Express">Ecom Express</option>
<option <?php if($row->carrier_name=='Ekart'){ echo "selected"; } ?> value="Ekart">Ekart</option>
<option <?php if($row->carrier_name=='India Post'){ echo "selected"; } ?> value="India Post">India Post</option>
<option <?php if($row->carrier_name=='Other'){ echo "selected"; } ?> value="Other">Other</option>
</select>
</div>
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Shipped Through </label>
<select class="form-control" name="tracking_url">
<option <?php if($row->tracking_url=='https://www.shiprocket.in/shipment-tracking/#track'){ echo "selected"; } ?> value="https://www.shiprocket.in/shipment-tracking/#track">shiprocket</option>
<option <?php if($row->tracking_url=='https://tracklite.in/'){ echo "selected"; } ?> value="https://tracklite.in/">Shyplite</option>
</select>
</div>
<div class="col-md-3">
<label for="inputPassword" class="col-form-label"> Payment Status </label>
<select class="form-control" name="pay_status">
<option value="<?php echo $row->pay_status;?>"><?php echo $row->pay_status;?></option>
<option <?php if($row->pay_status=='Paid'){ echo "selected"; } ?> value="Paid">Paid</option>
</select>
</div>
</div>
<div class="row">
<div class="col-md-6">
<p class="as_p">Billing Address</p>
<div class="row">
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Name </label>
<input type="text" class="form-control" name="b_name" value="<?php echo $row->b_name; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Phone </label>
<input type="text" class="form-control" name="b_phone" value="<?php echo $row->b_phone; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Email </label>
<input type="text" class="form-control" name="b_email" value="<?php echo $row->b_email; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> GST No. </label>
<input type="text" class="form-control" name="gstno" value="<?php echo $row->gstno; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Address </label>
<input type="text" class="form-control" name="b_add" value="<?php echo $row->b_add; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Landmark </label>
<input type="text" class="form-control" name="b_landmark" value="<?php echo $row->b_landmark; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> State </label>
<input type="text" class="form-control" name="b_state" value="<?php echo $row->b_state; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> City </label>
<input type="text" class="form-control" name="b_city" value="<?php echo $row->b_city; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Pincode </label>
<input type="text" class="form-control" name="b_pincode" value="<?php echo $row->b_pincode; ?>">
</div>
</div>
</div>
<div class="col-md-6">
<p class="as_p">Shipping Address</p>
<div class="row">
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Name </label>
<input type="text" class="form-control" name="full_name" value="<?php echo $row->full_name; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Phone </label>
<input type="text" class="form-control" name="mobile" value="<?php echo $row->mobile; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Address </label>
<input type="text" class="form-control" name="address" value="<?php echo $row->address; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Landmark </label>
<input type="text" class="form-control" name="landmark" value="<?php echo $row->landmark; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> State </label>
<input type="text" class="form-control" name="state" value="<?php echo $row->state; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> City </label>
<input type="text" class="form-control" name="city" value="<?php echo $row->city; ?>">
</div>
<div class="col-md-6">
<label for="inputPassword" class="col-form-label"> Pincode </label>
<input type="text" class="form-control" name="pincode" value="<?php echo $row->pincode; ?>">
</div>
</div>
</div>
<div class="col-md-12 pull-right">
<button class="btn btn-submit pull-right">Submit</button>
</div>
</div>
</form>
</div>
<div class="col-md-12">
<div class="right-account-user border-left">
<div class="right-account-header">
<h3>My Order</h3>
</div>
<table class="table table-bordered" style="width:100%;">
<tr>
<td>Billing Address</td>
<td>Shipping Address</td>
</tr>
<tr>
<td><?php
echo $row->b_name."<br>";
echo $row->b_add."<br>";
echo $row->b_landmark."<br>";
echo $row->b_city." ".$row->b_state." ".$row->b_pincode."<br>";
if($row->gstno) {
echo "<p style='margin: 0px;'><b>GST No. </b>".$row->gstno."</p>";
}
echo "<p style='margin: 0px;'><b>Email address </b>".$row->b_email."</p>";
echo "<p style='margin: 0px;'><b>Phone </b>".$row->b_phone."</p>";
echo $row->b_phone."<br>";
?></td>
<td><?php
echo $row->full_name."<br>";
echo $row->address."<br>";
echo $row->landmark."<br>";
echo $row->city." ".$row->state." ".$row->pincode."<br>";
echo "<p style='margin: 0px;'><b>Phone </b>".$row->mobile."</p>";
?></td>
</tr>
</table>
<table class="table table-bordered" style="width:100%;">
<tr>
<td>S.No.</td>
<td>Products</td>
<td>HSN No.</td><td>SKU</td>
<td>Qty.</td>
<td>Price</td>
<td>Amount</td>
<td>Tax %</td>
<td>Tax Amount</td>
<td>Net Amount</td>
</tr>
<?php
$iii=$ta_amt1=$g_amt1=$n_total=0;
$res = $this->Curd->fetch_where("tb_sub_order",array("*"),array("order_no"=>$row->order_no));
if($res==true){
foreach($res as $row1){
// print_r($row1);
$iii++;
$pay_amt = round(($row1->sale_price*100)/( 100+$row1->tax_per ),2);
$tx =round($pay_amt*$row1->tax_per/100,2);
$pro_co="";
if($row1->product_color!="None"){
$pro_co="($row1->product_color)";
}
echo "<tr>";
echo "<td>$iii</td>";
echo "<td>$row1->title ($row1->weight) $pro_co</td>";
echo "<td>$row1->hsn_no</td>"; echo "<td>$row1->sku</td>";
echo "<td>$row1->qty</td>";
echo "<td><i class='fa fa-rupee-sign'></i> $pay_amt</td>";
echo "<td><i class='fa fa-rupee-sign'></i> "; echo $g_amt = $pay_amt*$row1->qty; echo "</td>";
echo "<td>$row1->tax_per %</td>";
echo "<td><i class='fa fa-rupee-sign'></i> "; echo $ta_amt = $tx*$row1->qty; echo "</td>";
echo "<td><i class='fa fa-rupee-sign'></i> $row1->total_price</td>";
echo "</tr>";
$ta_amt1= $ta_amt1+$ta_amt;
$g_amt1= $g_amt1+$g_amt;
$n_total = $n_total+$row1->total_price;
}
} ?>
<tr>
<td colspan="5"> </td>
<td colspan="4">Total Product Value</td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo $n_total;?></td>
</tr>
<tr>
<td colspan="5"> </td>
<td colspan="4">Discount Amount</td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo $row->coupon_discount;?></td>
</tr>
<tr>
<td colspan="5"> </td>
<td colspan="4">Net Total Amount</td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo $g_amt1 = $n_total-$row->coupon_discount;?></td>
</tr>
<?php
$pay_amt_3 = round(($g_amt1*100)/( 105 ),2);
$ta_amt1 =round($pay_amt_3*5/100,2);
?>
<tr>
<td colspan="5"> </td>
<td colspan="4">Total Taxable Value </td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo $pay_amt_3;?></td>
</tr>
<?php
if(strtolower($row->b_state)=='delhi') {
?>
<tr>
<td colspan="5"> </td>
<td colspan="4">CGST Amount</td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo round($ta_amt1/2,2);?></td>
</tr>
<tr>
<td colspan="5"> </td>
<td colspan="4">SGST Amount</td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo round($ta_amt1/2,2);?></td>
</tr>
<?php
}else{
?>
<tr>
<td colspan="5"> </td>
<td colspan="4">IGST Amount</td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo $ta_amt1;?></td>
</tr>
<?php } ?>
<tr>
<td colspan="5"> </td>
<td colspan="4">Shipping Charge</td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo $row->delivery_charges;?></td>
</tr>
<?php
if( $row->payment_method=='COD') {
?>
<tr>
<td colspan="5"> </td>
<td colspan="4">COD Charge</td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo $row->cod_charge;?></td>
</tr>
<?php } ?>
<tr>
<td colspan="5"> </td>
<td colspan="4">Total Invoice Value</td>
<td ><i class='fa fa-rupee-sign'></i> <?php echo $total_pay_amt;?> </td>
</tr>
</table>
</div>
</div>
</div>
</div>
<?php include'footer.php';?>
</div>
</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/bootstrap.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/select2.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/custom.js')?>"></script>
<script src="<?=base_url('admin_assets/js/css3-animate-it.js')?>"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
</body>
</html>