✏ 编辑: ccavenue_request.php

<?php
session_start();

ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

require_once __DIR__ . '/Crypto.php';
require_once __DIR__ . '/admin/db_config.php';

$conn = getDBConnection();

// ==== CCAvenue credentials (CHANGE THESE) ====
$working_key = 'DB30B9EE3B63BABA1AA326978CD96F43'; // your working key
$access_code = '1HXRQRGNK7QDSXNL';                  // your access code
$merchant_id = '2363';                  // your merchant id
// =============================================

// Data from book.php form
$book_id      = isset($_POST['book_id']) ? (int)$_POST['book_id'] : 0;
$book_name    = $_POST['book_name'] ?? '';
$amount       = $_POST['amount'] ?? '0.00';

$billing_name    = $_POST['billing_name'] ?? '';
$billing_address = $_POST['billing_address'] ?? '';
$billing_city    = $_POST['billing_city'] ?? '';
$billing_state   = $_POST['billing_state'] ?? '';
$billing_zip     = $_POST['billing_zip'] ?? '';
$billing_country = $_POST['billing_country'] ?? '';
$billing_tel     = $_POST['billing_tel'] ?? '';
$billing_email   = $_POST['billing_email'] ?? '';
$query_text      = $_POST['query'] ?? '';

// Generate CCAvenue order id (stored as ccavenue_order_id)
$order_id = 'BOOK' . time();

// Save order into book_orders
$sql = "INSERT INTO book_orders
        (book_id, book_name, customer_name, customer_email, customer_phone,
         shipping_address, city, state, zip, country, customer_query,
         amount, ccavenue_order_id, order_status, created_at)
        VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,'pending',NOW())";

$stmt = $conn->prepare($sql);
if (!$stmt) {
    die('Prepare failed: ' . $conn->error);
}

// 13 types, 13 variables
$stmt->bind_param(
    "issssssssssds",
    $book_id,          // i  (1)
    $book_name,        // s  (2)
    $billing_name,     // s  (3)
    $billing_email,    // s  (4)
    $billing_tel,      // s  (5)
    $billing_address,  // s  (6)
    $billing_city,     // s  (7)
    $billing_state,    // s  (8)
    $billing_zip,      // s  (9)
    $billing_country,  // s  (10)
    $query_text,       // s  (11)
    $amount,           // d  (12)
    $order_id          // s  (13)
);

if (!$stmt->execute()) {
    die('Execute failed: ' . $stmt->error);
}
$stmt->close();

// Build merchant data for CCAvenue
$merchant_data = '';
$postData = [
    'merchant_id'    => $merchant_id,
    'order_id'       => $order_id,
    'currency'       => 'INR',
    'amount'         => $amount,
    'redirect_url'   => 'https://www.askmanisha.com/ccavenue_response.php',
    'cancel_url'     => 'https://www.askmanisha.com/ccavenue_response.php',
    'language'       => 'EN',
    'billing_name'   => $billing_name,
    'billing_address'=> $billing_address,
    'billing_city'   => $billing_city,
    'billing_state'  => $billing_state,
    'billing_zip'    => $billing_zip,
    'billing_country'=> $billing_country,
    'billing_tel'    => $billing_tel,
    'billing_email'  => $billing_email,
    'merchant_param1'=> $book_id,
    'merchant_param2'=> $book_name,
    'merchant_param3'=> $query_text
];

foreach ($postData as $key => $value) {
    $merchant_data .= $key . '=' . urlencode($value) . '&';
}

$encrypted_data = encrypt($merchant_data, $working_key);
?>
<html>
<head><title>Redirecting to Payment...</title></head>
<body>
<center>
    <h3>Please wait, redirecting to payment gateway...</h3>
    <form method="post" name="redirect"
          action="https://secure.ccavenue.com/transaction/transaction.do?command=initiateTransaction">
        <input type="hidden" name="encRequest"
               value="<?php echo htmlspecialchars($encrypted_data, ENT_QUOTES); ?>">
        <input type="hidden" name="access_code"
               value="<?php echo htmlspecialchars($access_code, ENT_QUOTES); ?>">
    </form>
</center>
<script>document.redirect.submit();</script>
</body>
</html>

[X] 取消