connect_error) { die("Database Connection Failed: " . $conn->connect_error); } $upload_dir = __DIR__ . '/uploads/'; if (!is_dir($upload_dir)) { mkdir($upload_dir, 0755, true); } // ========================================== // ADMIN: SAVE WEBSITE URL SETTING // ========================================== $admin_msg = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_settings'])) { $new_url = $conn->real_escape_string(rtrim($_POST['website_url'], '/') . '/'); $conn->query("INSERT INTO site_settings (setting_key, setting_value) VALUES ('website_url', '$new_url') ON DUPLICATE KEY UPDATE setting_value='$new_url'"); $admin_msg = "Website URL updated successfully!"; } // Fetch current configured website URL from DB $res = $conn->query("SELECT setting_value FROM site_settings WHERE setting_key = 'website_url' LIMIT 1"); if ($res && $res->num_rows > 0) { $row = $res->fetch_assoc(); $base_url = $row['setting_value']; } else { // Fallback dynamic detection if setting is missing $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://"; $script_dir = rtrim(dirname($_SERVER['SCRIPT_NAME']), '/\\'); $base_url = $protocol . $_SERVER['HTTP_HOST'] . ($script_dir === '' || $script_dir === '/' ? '' : $script_dir) . '/'; } // ========================================== // AJAX INSTANT UPLOAD ENDPOINT // ========================================== if (isset($_GET['action']) && $_GET['action'] === 'upload_ajax') { header('Content-Type: application/json'); if (isset($_FILES['order_image']) && $_FILES['order_image']['error'] === UPLOAD_ERR_OK) { $file_tmp = $_FILES['order_image']['tmp_name']; $file_name = time() . '_' . preg_replace("/[^a-zA-Z0-9\._-]/", "", basename($_FILES['order_image']['name'])); $target_file = $upload_dir . $file_name; if (move_uploaded_file($file_tmp, $target_file)) { $public_url = $base_url . 'uploads/' . $file_name; echo json_encode(['success' => true, 'url' => $public_url]); exit; } } echo json_encode(['success' => false, 'message' => 'Upload failed.']); exit; } $message_output = ''; $whatsapp_link = ''; // ========================================== // FORM SUBMISSION HANDLING // ========================================== if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['submit_order'])) { $customer_name = $conn->real_escape_string($_POST['customer_name'] ?? ''); $customer_phone = $conn->real_escape_string($_POST['customer_phone'] ?? ''); $order_details = $conn->real_escape_string($_POST['order_details'] ?? ''); $image_url_db = $conn->real_escape_string($_POST['uploaded_image_url'] ?? ''); $sql = "INSERT INTO orders (customer_name, customer_phone, order_details, image_url, created_at) VALUES ('$customer_name', '$customer_phone', '$order_details', '$image_url_db', NOW())"; if ($conn->query($sql) === TRUE) { $wa_text = "New Order Received!\n\n" . "Name: " . $customer_name . "\n" . "Phone: " . $customer_phone . "\n" . "Details: " . $order_details; if (!empty($image_url_db)) { $wa_text .= "\nDesign Image: " . $image_url_db; } $encoded_text = urlencode($wa_text); // Replace with your business WhatsApp phone number $whatsapp_link = "https://api.whatsapp.com/send?phone=910000000000&text=" . $encoded_text; $message_output = "Order placed successfully! Click here to send order on WhatsApp"; } else { $message_output = "Error saving order: " . $conn->error; } } ?>