HOME

<?php include ("connect.php");?>
<?php 

$todaydate = date("Y-m-d H:i:s");
date_default_timezone_set("US/Central");

// Edit Checkout Info
if ((isset($_POST["Add"])) && ($_POST["Add"] == "Yes")) {
	$Status = $_POST["status"];
	$Order_Notes = mysqli_real_escape_string($LogoMasters, $_POST["order_notes"]); 
	$FirstName = mysqli_real_escape_string($LogoMasters, $_POST["first_name"]); 
	$LastName = mysqli_real_escape_string($LogoMasters, $_POST["last_name"]); 
	$Phone = $_POST["phone_number"]; 
	$EmailAddress = $_POST["email_address"];
	$Ship_Address = mysqli_real_escape_string($LogoMasters, $_POST["ship_address"]); 
	$Ship_City = mysqli_real_escape_string($LogoMasters, $_POST["ship_city"]); 
	$Ship_State = mysqli_real_escape_string($LogoMasters, $_POST["ship_state"]);
	$Ship_Zip = mysqli_real_escape_string($LogoMasters, $_POST["ship_zip"]);  
	$id = $_POST["id"];
	$OrderTotal = $_POST["OrderTotal"]; 
	$Tax = $_POST["sales_tax"]; 
	$ShipRate = $_POST["shipping_cost"]; 
	$ShipCode = $_POST["shipping_code"]; 
	$transID = $_POST["transID"]; 
	$Setup = $_POST["setup_fee"];
	$Cart = $_POST["cart_details"];
	$Online_Order = $_POST["Online_Order"];
	$Site = "Online Order";
	$Order_Date = 
	
	mysqli_query($LogoMasters, "INSERT INTO Main_Orders (status, order_notes, OrderTotal, sales_tax, shipping_cost, shipping_code, transID, setup_fee, first_name, last_name, phone_number, email_address, ship_address, ship_city, ship_state, ship_zip, cart_details, Online_Order, website, date) VALUES ('$Status', '$Order_Notes', '$OrderTotal', '$Tax', '$ShipRate', '$ShipCode', '$transID', '$Setup', '$FirstName', '$LastName', '$Phone', '$EmailAddress', '$Ship_Address', '$Ship_City', '$Ship_State', '$Ship_Zip', '$Cart', '$Online_Order', '$Site', '$todaydate')");
	
	$id = mysqli_insert_id($LogoMasters);
   
   $AddGoTo = "../orders-edit.php?id=$id";
   header("Location: $AddGoTo");
}

// Edit Status
if ((isset($_POST["Order_Status"])) && ($_POST["Order_Status"] == "Yes")) {
	$ID = $_POST["id"]; 
	$Status = $_POST["status"];
	$Order_Notes = mysqli_real_escape_string($LogoMasters, $_POST["order_notes"]); 
	
	mysqli_query($LogoMasters, "UPDATE Main_Orders SET status='$Status', order_notes='$Order_Notes' WHERE id = '$ID'");
   
   $AddGoTo = "../orders-view.php?id=$ID";
   header("Location: $AddGoTo");
}

?>