69 lines
2.4 KiB
PHP
69 lines
2.4 KiB
PHP
<?php
|
|
session_start();
|
|
require '../../../assets/utils/db_auth.php';
|
|
|
|
$id = (int)($data['id'] ?? 0);
|
|
$payment_status = (int)($data['payment_status'] ?? 0);
|
|
|
|
if (!$id) {
|
|
$answer['message'] = 'Invalid order ID.';
|
|
http_response_code(400);
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
// Validate payment_status range
|
|
// 0=unpaid 1=paid 2=partial 3=refunded
|
|
if (!in_array($payment_status, [0, 1, 2, 3], true)) {
|
|
$answer['message'] = 'Invalid payment status.';
|
|
http_response_code(400);
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
try {
|
|
dbTransaction($pdo2, function($pdo) use ($id, $payment_status, $company_id, $logging) {
|
|
|
|
// Load order — verify ownership and that order is not cancelled
|
|
$sth = $pdo->prepare(
|
|
"SELECT status, payment_status, `log` FROM td_order
|
|
WHERE company_id = :company_id AND id = :id"
|
|
);
|
|
$sth->execute([':company_id' => $company_id, ':id' => $id]);
|
|
$row = $sth->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if (!$row) throw new Exception("Order not found.");
|
|
if ((int)$row['status'] === -1) throw new Exception("Cannot update payment status of a cancelled order.");
|
|
|
|
$log = json_decode($row['log'] ?? '[]', true) ?: [];
|
|
$log[] = array_merge($logging, [
|
|
'action' => 'update_payment_status',
|
|
'payment_status' => $payment_status,
|
|
'previous_status' => (int)$row['payment_status'],
|
|
]);
|
|
|
|
$pdo->prepare(
|
|
"UPDATE td_order SET
|
|
payment_status = :payment_status,
|
|
`log` = :log
|
|
WHERE id = :id AND company_id = :company_id"
|
|
)->execute([
|
|
':payment_status' => $payment_status,
|
|
':log' => json_encode($log),
|
|
':id' => $id,
|
|
':company_id' => $company_id,
|
|
]);
|
|
});
|
|
|
|
$answer['success'] = 1;
|
|
$answer['message'] = 'Payment status updated.';
|
|
|
|
} catch (PDOException $e) {
|
|
$answer['message'] = 'Database error, please try again.';
|
|
http_response_code(500);
|
|
|
|
} catch (Exception $e) {
|
|
$answer['message'] = $e->getMessage();
|
|
http_response_code(400);
|
|
}
|
|
|
|
exit(json_encode($answer));
|
|
?>
|