cancel-order.php

<?php
    ob_start();
    session_start();
	require_once "config/connect.php"; 

	if(!isset($_SESSION['customer']) & empty($_SESSION['customer'])){
		header('location: login.php');
    }
    
    include 'inc/header.php';
    include 'inc/nav.php';

    $uid = $_SESSION['customerid'];
    $cart = $_SESSION['cart'];

    if(isset($_POST) & !empty($_POST)){
        $cancel = filter_var($_POST['cancel'], FILTER_SANITIZE_STRING);
        $id = filter_var($_POST['orderid'], FILTER_SANITIZE_NUMBER_INT);
        // update data in usermeta table
        $cancelsql = "INSERT INTO ordertracking (orderid, status, message) VALUES ('$id', 'cancelled', '$cancel')";
        $cancelres = mysqli_query($connection, $cancelsql) or die(mysqli_error($connection));
        if($cancelres){
            $ordupd = "UPDATE orders SET orderstatus='Cancelled' WHERE id=$id";
            if(mysqli_query($connection, $ordupd)){
                header('location: my-account.php');
            }
        }
    }

    $sql = "SELECT * FROM usersmeta WHERE uid=$uid";
    $res = mysqli_query($connection, $sql);
    $r = mysqli_fetch_assoc($res);
?>

<!-- SHOP CONTENT -->
<section id="content">
    <div class="content-blog">
        <div class="page_header text-center">
            <h2>Shop - Cancel Order</h2>
            <p>Do you want to cancel your Order?</p>
        </div>

        <form method="POST">
            <div class="container">
                <div class="row">
                    <div class="col-md-6 col-md-offset-3">
                        <div class="billing-details">
                            <h3 class="uppercase">Cancel Order</h3>

                            <table class="cart-table account-table table table-bordered">
                        <thead>
                            <tr>
                                <th>Order</th>
                                <th>Date</th>
                                <th>Status</th>
                                <th>Payment Mode</th>
                                <th>Total</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php
                                if(isset($_GET['id']) & !empty($_GET['id'])){
                                    $oid = $_GET['id'];
                                }else{
                                    header('location: my-account.php');
                                }

                                $ordsql = "SELECT * FROM orders WHERE id='$oid'";
                                $ordres = mysqli_query($connection, $ordsql);
                                while($ordr = mysqli_fetch_assoc($ordres)){
                            ?>
                            <tr>
                                <td>
                                    <?php echo $ordr['id']; ?>
                                </td>
                                <td>
                                    <?php echo $ordr['timestamp']; ?>
                                </td>
                                <td>
                                    <?php echo $ordr['orderstatus']; ?>
                                </td>
                                <td>
                                    <?php echo $ordr['paymentmode']; ?>
                                </td>
                                <td>
                                    <?php echo $ordr['totalprice']; ?> BDT
                                </td>
                            </tr>
                            <?php } ?>
                        </tbody>
                    </table>

                            <div class="space30"></div>

                            <div class="clearfix space20"></div>
                            <label>Reason :</label>
                            <textarea class="form-control" name="cancel" cols="10"></textarea>
                            
                            <input type="hidden" name="orderid" value="<?php echo $_GET['id']; ?>">
                            <div class="space30"></div>
                            <input type="submit" class="button btn-lg" value="Cancel Order">
                        </div>
                    </div>
                </div>
            </div>
        </form>

    </div>
</section>

<?php include 'inc/footer.php' ?>