%PDF- %PDF-
| Direktori : /home/riacommer/domains/gasworld.com.my/private_html/admin/api/ |
| Current File : /home/riacommer/domains/gasworld.com.my/private_html/admin/api/transaction.php |
<?php
//error_reporting(-1); //report all error!
include_once("security.php");
include_once("db.php");
//[transaction]
//for delete only - disabled the delete
if(isset($_GET["id"])){
/*if($_GET["id"]!=""){
$id = $_GET["id"];
$sql = "DELETE FROM sa_transaction WHERE id='$id'";
mysql_query($sql);
header("Location: http://" .$_SERVER['HTTP_HOST'] . str_replace("/api", "", dirname($_SERVER['PHP_SELF'])) ."/bank_agent.php");
} else {*/
header("Location: http://" .$_SERVER['HTTP_HOST'] . str_replace("/api", "", dirname($_SERVER['PHP_SELF'])) ."/400.php");
//}
} else {
//for create, update
if(isset($_POST["act"])){
$act = trim($_POST["act"]);
$member_id = trim($_POST["member_id"]);
$transaction_type = trim($_POST["transaction_type"]);
$product_id = trim($_POST["product_id"]);
$transaction_id = trim($_POST["transaction_id"]);
$amount = trim($_POST["amount"]);
$bank_agent_id = trim($_POST["bank_agent_id"]);
$status = trim($_POST["status"]);
$reason = trim($_POST["reason"]);
$note = trim($_POST["note"]);
$deposit=0;
$withdrawal=0;
$transfer=0;
$bonus=0;
if(strtolower($transaction_type)=="deposit"){
$deposit = $amount;
} else if(strtolower($transaction_type)=="withdrawal"){
$withdrawal = $amount;
} else if(strtolower($transaction_type)=="transfer"){
$transfer = $amount;
} else if(strtolower($transaction_type)=="bonus"){
$bonus = $amount;
}
if($act=="create"){
$sql = "INSERT INTO sa_transaction (member_id, product_id, transaction_id, bank_agent_id, deposit, withdrawal, transfer, bonus, status, reason, note, created_date) VALUES ('$member_id', '$product_id', '$transaction_id', '$bank_agent_id', '$deposit', '$withdrawal', '$transfer', '$bonus', '$status', '$reason', '$note', now())";
mysql_query($sql);
header("Location: http://" .$_SERVER['HTTP_HOST'] . str_replace("/api", "", dirname($_SERVER['PHP_SELF'])) ."/transaction.php");
} else if($act=="update"){
$id = trim($_POST["id"]);
$sql = "UPDATE sa_transaction SET member_id='$member_id', product_id='$product_id', transaction_id='$transaction_id', bank_agent_id='$bank_agent_id', deposit='$deposit', withdrawal='$withdrawal', transfer='$transfer', bonus='$bonus', status='$status', reason='$reason', note='$note', last_updated=now() WHERE id='$id'";
mysql_query($sql);
header("Location: http://" .$_SERVER['HTTP_HOST'] . str_replace("/api", "", dirname($_SERVER['PHP_SELF'])) ."/transaction.php");
}
} else {
header("Location: http://" .$_SERVER['HTTP_HOST'] . str_replace("/api", "", dirname($_SERVER['PHP_SELF'])) ."/400.php");
}
}
?>