place_order.php

<?php
require_once "conn.php";
require_once "nav.php";

// session_start();

if (!isset($_SESSION["customer_id"])) {
    echo "<script>alert('Login to place order');";
    echo "window.location.href = 'login.php';</script>";
    exit();
} else {
    $UID = $_SESSION['customer_id'];
    if ($_SERVER["REQUEST_METHOD"] == "POST") {

        if (isset($_POST["payment"])) {
            $selected_payment_mode = $_POST["payment"];
        } else {
            echo "<script> alert('Error ocurred.please check payment details');";
            echo "window.history.back();</script>";

        }
        $pid = $_POST['pid'];
        $price = $_POST['price'];
        echo $price;
        //$quantity = $_POST['qty'];

        $stmt1 = $conn->prepare("SELECT SID FROM product WHERE PID = $pid");
        $stmt1->execute();
        $get_SID = $stmt1->get_result();
        if ($get_SID->num_rows > 0) {
            while ($SIDrow = $get_SID->fetch_assoc()) {
                $SID = $SIDrow['SID'];
            }
        }

        if (isset($_POST['address_selection'])) {
            $selectedAddressId = $_POST['address_selection'];
            $_SESSION['cid'] = $selectedAddressId;
        } else {
            echo "<script> alert('Please add an address to continue to place order');";
            echo "window.history.back();</script>";
        }

        date_default_timezone_set("Asia/Kolkata");
        $orderDate = time();
        $order_status = '';
        $payment_status = '';
        if ($selected_payment_mode === 'cod') {
            $payment_status = 'not_paid';
            $order_status = 'confirmed';

        }
        $delivery_status = 'pending';

        $stmt = $conn->prepare("INSERT INTO orders(CID,UID,SID,PID,order_time,order_status,price,payment_mode,payment_status,delivery_status) VALUES(?,?,?,?,?,?,?,?,?,?)");
        $stmt->bind_param("iiiiisisss", $selectedAddressId, $UID, $SID, $pid, $orderDate, $order_status, $price, $selected_payment_mode, $payment_status, $delivery_status);
        $stmt->execute();

        // header("location:orders.php");

        echo "<script>alert('Order confirmed');";
        echo "window.location.href = 'customer_orders_page.php';</script>";
    }

}
?>