<?php
session_start();
include "includes/database.php";
include "includes/security.php";
$email=$_SESSION["pengguna"];
$dataPengguna=mysqli_query($newcon,"SELECT * from tbl_user where email='$email'");
$showData=mysqli_num_rows($dataPengguna);
?>

<!DOCTYPE html>
<html lang="en">

<head>

    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="description" content="">
    <meta name="author" content="">

    <title>MyUniversity MarketPlace</title>

    <!-- Bootstrap Core CSS -->
    <link href="css/bootstrap.min.css" rel="stylesheet">

    <!-- Custom CSS -->
    <link href="css/heroic-features.css" rel="stylesheet">

    <!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries -->
    <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
    <!--[if lt IE 9]>
        <script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
        <script src="https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"></script>
    <![endif]-->

</head>

<body>

    <!-- Navigation -->
    <nav class="navbar navbar-inverse navbar-fixed-top" role="navigation">
        <div class="container">
            <!-- Brand and toggle get grouped for better mobile display -->
            <div class="navbar-header">
                <button type="button" class="navbar-toggle" data-toggle="collapse" data-target="#bs-example-navbar-collapse-1">
                    <span class="sr-only">Toggle navigation</span>
                    <span class="icon-bar"></span>
                    <span class="icon-bar"></span>
                    <span class="icon-bar"></span>
                </button>
                <a class="navbar-brand" href="#">MyUniversity MarketPlace</a>
            </div>
            <!-- Collect the nav links, forms, and other content for toggling -->
            <div class="collapse navbar-collapse" id="bs-example-navbar-collapse-1">
                <ul class="nav navbar-nav">
                    <li class="nav-item active">
              <a class="nav-link" href="index2.php">HOME
                <span class="sr-only">(current)</span>
              </a>
            </li>
                    <li>
                        <a href="about2.php">ABOUT</a>
                    </li>
                    <li>
                        <a href="shop2.php">SHOP</a>
                    </li>
                    <li>
                        <a href="cart.php">CART</a>
                    </li>
                    <li>
                        <a href="review.php">REVIEW</a>
                    </li>
             <li class="nav-item">
              <a class="nav-link active" href="logout.php">LOGOUT</a>
            </li>
                </ul>
            </div>
            <!-- /.navbar-collapse -->
        </div>
        <!-- /.container -->
    </nav>
            

          </ul>
        </div>
      </div>
    </nav>

<br>
<br>
<br>

            <!-- /.navbar-static-side -->

        <!-- Page Content -->
        
                     <div class="a"> <h1 class="page-header"><center>Order Confirmation</center></h1><h2><p><center>Thank You For Purchasing</center></p></h2>

<?php

//get data
$name_of_card=$_POST["name_of_card"];
$exp_month=$_POST["exp_month"];
$exp_year=$_POST["exp_year"];
$ccn=$_POST["ccn"];
$cvv=$_POST["cvv"];
$total=$_POST["total"];
$a1=date("ymdhis");
$a2=date("hisdmy");
$a3=$email.$a1.$a2.$email;


//update database
mysqli_query($newcon,"INSERT INTO tbl_purchase (name_of_card,user_id,total_payment,ccn,cvv,tid,exp_month,exp_year) values ('$name_of_card', '$email','$total','$ccn', '$cvv' ,'$a3','$exp_month','$exp_year')")or die (mysqli_error($newcon));	

echo "Order Received. Click <a href='index2.php'>here</a> for dashboard";



//copy table order temp kepada order details betul

$dataSubjects=mysqli_query($newcon,"SELECT * from tbl_purchase_detail_temp where user_id='$email'");

while ($showSubjects=mysqli_fetch_array($dataSubjects))
	{


mysqli_query($newcon,"INSERT INTO tbl_purchase_detail_temp (product_id,quantity,user_id) values ('$showSubjects[product_id]', '$showSubjects[quantity]','$a3')")or die (mysqli_error($newcon));		

}

//padamkan rekod temporary
mysqli_query($newcon,"delete from tbl_purchase_detail_temp where user_id='$email'")or die (mysqli_error($newcon));  





?>  
                       
  
  
  
                   
        

    </div>
    <!-- /#wrapper -->

    <!-- jQuery -->
    <script src="vendor/jquery/jquery.min.js"></script>

    <!-- Bootstrap Core JavaScript -->
    <script src="vendor/bootstrap/js/bootstrap.min.js"></script>

    <!-- Metis Menu Plugin JavaScript -->
    <script src="vendor/metisMenu/metisMenu.min.js"></script>

    <!-- Custom Theme JavaScript -->
    <script src="dist/js/sb-admin-2.js"></script>

</body>

</html>
