<?php
session_start();
include ("Admin/Includes/db.php");
$uid =  $_SESSION['userid'] ;
date_default_timezone_set('Asia/Kolkata');
 $cudate = date("Y-m-d") ;

extract($_POST);

 $sqlu = "SELECT * FROM `tbl_order` ORDER BY id DESC";
    $sql_resu = mysqli_query($con, $sqlu) or die(mysqli_error($con));
     $sql_rowu = mysqli_fetch_array($sql_resu);

     if($sql_rowu['order_no'] == '')
     {
      $orderno ='1001';
     }
     else
     {
       $orderno = $sql_rowu['order_no'] + 1 ;
     }

$csid = $_SERVER['REMOTE_ADDR'];
 $SQL = "INSERT INTO tbl_order set loginid='$uid',ucid='$csid',fname='$fname',lname='$lname',address='$address',state='$state',city='$city',email='$email',phone='$phone',total_p='$totalp',order_date='$cudate',payment_method='$radio',order_no='$orderno'";
    
    
          if ($con->query($SQL) === TRUE) {

          	 $last_id = $con->insert_id;

          	$pro = "SELECT * FROM tbl_cart WHERE cid='$csid' and status='1'";
			$result=$con->query($pro);
			if($result->num_rows > 0)
			{

				 $SQLs = "INSERT INTO tbl_item set order_id='$last_id',pid='$itemid',qty='$itemqty',price='$itempri'";
				$sql_res = mysqli_query($con, $SQLs) or die(mysqli_error($con));

			}
       
       $sqlc = "delete from tbl_cart  where cid='$csid'";
    $resultc = mysqli_query($con, $sqlc) or die(mysqli_error($con));
        
                   $_SESSION['flash_message'] = 'orderadd';
       
        
       echo "<script>;
                window.location.href='index.php';
                </script>";

	 }
   else
   {
      echo "<script>;
       alert('Your Order Not Added ');
                window.location.href='index.php';
                </script>";
   }
	




?>