<?php
session_start();


include 'Admin/Includes/db.php';
$uid =  $_SESSION['userid'] ;



date_default_timezone_set('Asia/Kolkata');



//  $cudate = date("Y-m-d") ;



 $cudate = date("Y-m-d H:i:s") ;




extract($_POST);

// print_r($_POST);



$sle = "SELECT  SUM(amt) as totalb FROM `tbl_money` where uid='$uid'";
                                                $sl_rese = mysqli_query($con, $sle) or die(mysqli_error($con));
                                                $sl_rowe = mysqli_fetch_assoc($sl_rese);    

                                                $se = $sl_rowe['totalb'];



 $sqlu = "SELECT * FROM `tbl_order` ORDER BY id DESC";



    $sql_resu = mysqli_query($con, $sqlu) or die(mysqli_error($con));



     $sql_rowu = mysqli_fetch_array($sql_resu);







     if($sql_rowu['order_no'] == '')



     {



      $orderno ='1001';



     }



     else



     {



       $orderno = $sql_rowu['order_no'] + 1 ;



     }




if($se > $amt)
{

$csid = $_SERVER['REMOTE_ADDR'];

$attrv =  implode(',',$att);

  $SQL = "INSERT INTO tbl_order set loginid='$uid',ordername='$oname',proid='$prod',file='$file',qty='$qty',attr='$attri',attrv='$attrv',cost='$p1',gst='$gst',oamt='$amt',order_no='$orderno',remark='$remark',edt='$cudate'";


    if ($con->query($SQL) === TRUE) {

          	  $last_id = $con->insert_id;
          	  
        //   	  $pbal = ($se - $amt);
          	  
        //   	  $sqlsc=" UPDATE `tbl_money` set amt='$pbal'  where id='$aid' ";

        // $result_sc = mysqli_query($con,$sqlsc);
        
    

      echo "<script>;
                window.location.href='index.php';
                </script>";
	 }
  else
  {

      echo "<script>;
      alert('Your Order Not Added ');
                window.location.href='RazorPay/pay.php';
                </script>";

  }
}
else
{
    echo "<script>;
       alert('Your Balance is Insufficient ');
                window.location.href='index.php';
                </script>";
}

?>