<?php 
require 'includes/db-conn.inc.php';

$orderID = $_SESSION['rand'];
require('razorpay/config.php');
require('razorpay/razorpay-php/Razorpay.php');

use Razorpay\Api\Api;
use Razorpay\Api\Errors\SignatureVerificationError;


$success = true;

$error = "Payment Failed";

if (empty($_POST['razorpay_payment_id']) === false)
{
    $api = new Api($keyId, $keySecret);

    try
    {
        // Please note that the razorpay order ID must
        // come from a trusted source (session here, but
        // could be database or something else)
        $attributes = array(
            'razorpay_order_id' => $_SESSION['razorpay_order_id'],
            'razorpay_payment_id' => $_POST['razorpay_payment_id'],
            'razorpay_signature' => $_POST['razorpay_signature']
        );

        $api->utility->verifyPaymentSignature($attributes);
    }
    catch(SignatureVerificationError $e)
    {
        $success = false;
        $error = 'Razorpay Error : ' . $e->getMessage();
    }
}

if ($success === true)
{
  
  $razorID = $_POST['razorpay_payment_id'];
  $sqladd = mysqli_query($conn,"update order_master set onlinepaymentstatus='1',
            payment='$razorID'
            where detailsorder_id = '$orderID'") or 
            die(mysqli_error($conn));
            if(mysqli_affected_rows($conn) > 0){
           $query=mysqli_query($conn,"update tbl_order set cart_status='1' where order_id='$orderID'"); 
           //stock update 
                  $sqlstock=mysqli_query($conn,"select * from tbl_order_details where order_id='$orderID'") or die(mysqli_query($conn));
                    while($datastock=mysqli_fetch_assoc($sqlstock))
                        {
                                 $stockproductid = $datastock['product_id'] ;
                                 $stockqty = $datastock['quanitity'];
                                 $stocksize = $datastock['size'] ;
                          
                               $sqlstockselect=mysqli_query($conn,"select * from tbl_product_price where productId='$stockproductid' and punit='$stocksize'") or die(mysqli_query($conn)); 
                             
                             $datastockorignal=mysqli_fetch_assoc($sqlstockselect);
                              $stockorignal_qty =$datastockorignal['pqty'];
                              $update_stock=$stockorignal_qty-$stockqty;

                            $query=mysqli_query($conn,"update tbl_product_price set pqty='$update_stock' where productId='$stockproductid' and punit='$stocksize'");

                       }
          // stock update close 
                
            
             unset($_SESSION['rand']);
              $html = "<p>Your payment was successful</p>
             <p>Payment ID: {$_POST['razorpay_payment_id']}</p>"; 
            //  echo "<script>location.href='myorder.php';</script>";
            // echo "<script>location.href='online-order-confirmation.php?detailid=$orderID';</script>";
              echo "<script>location.href='thank-you.php';</script>";
            }
               
}
else
{
  
  $razorID = $_POST['razorpay_payment_id'];
$sqladd = mysqli_query($conn,"update order_master set onlinepaymentstatus='2',payment='$razorID',comment='$error' where detailsorder_id= '$orderID'") or 
            die(mysqli_error($conn));
            if(mysqli_affected_rows($conn) > 0){
                $html = "<p>Your payment was successful</p>
             <p>Payment ID: {$_POST['razorpay_payment_id']}</p>"; 
            $query=mysqli_query($conn,"update tbl_order set cart_status='1' where order_id='$orderID'"); 
             unset($_SESSION['rand']);
            }
            $html = "<p>Your payment failed</p>
             <p>{$error}</p>";
             
             echo '<h3>'.$html.'</h3>';
            
}


 ?>