PHP Dosya Yöneticisi

<?php
/*
 * @ https://EasyToYou.eu - IonCube v11 Decoder Online
 * @ PHP 7.2
 * @ Decoder version: 1.0.4
 * @ Release: 01/09/2021
 */

echo !defined("GUVENLIK") ? exit : NULL;
if ($yetki["demo"] != "1") {
 if (isset($_GET["status"])) {
 if ($_GET["status"] == "return_delete" || $_GET["status"] == "order_cancel" || $_GET["status"] == "product_stock" || $_GET["status"] == "stock_load" || $_GET["status"] == "return_product_update" || $_GET["status"] == "offer_delete" || $_GET["status"] == "offer_update" || $_GET["status"] == "op_order_delete" || $_GET["status"] == "op_order_update" || $_GET["status"] == "order_delete" || $_GET["status"] == "invoice_download" || $_GET["status"] == "product_update" || $_GET["status"] == "note_delete" || $_GET["status"] == "note_add" || $_GET["status"] == "product_cargo_update" || $_GET["status"] == "cargo_settings" || $_GET["status"] == "transfer_no" || $_GET["status"] == "transfer_delete" || $_GET["status"] == "transfer_pasive" || $_GET["status"] == "transfer_confirm" || $_GET["status"] == "cancel_request_delete" || $_GET["status"] == "cancel_noti" || $_GET["status"] == "invoice_add" || $_GET["status"] == "invoice_delete" || $_GET["status"] == "change" || $_GET["status"] == "order_active") {
 $timestamp = date("Y-m-d G:i:s");
 if ($_GET["status"] == "return_delete") {
 if (isset($_GET["no"])) {
 $silmeislem = $db->prepare("DELETE from siparis_urunler_iade WHERE talep_no=:talep_no");
 $sil = $silmeislem->execute(["talep_no" => $_GET["no"]]);
 if ($sil) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_product_return");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "stock_load") {
 if (isset($_GET["orderID"]) && "0" < $_GET["orderID"]) {
 if ($odemeRow["urun_stok_dus"] == "1") {
 $siparisCek = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparisCek->execute(["siparis_no" => $_GET["orderID"]]);
 if ("0" < $siparisCek->rowCount()) {
 $siparisRow = $siparisCek->fetch(PDO::FETCH_ASSOC);
 if ($siparisRow["stok_alindi"] != "1") {
 $siparisUrunleri = $db->prepare("select * from siparis_urunler where siparis_id=:siparis_id ");
 $siparisUrunleri->execute(["siparis_id" => $_GET["orderID"]]);
 if ("0" < $siparisUrunleri->rowCount()) {
 foreach ($siparisUrunleri as $urunRow) {
 $adet = $urunRow["adet"];
 $guncelle = $db->prepare("UPDATE siparisler SET\r\n stok_alindi=:stok_alindi\r\n WHERE siparis_no=" . $_GET["orderID"] . " \r\n ");
 $sonuc = $guncelle->execute(["stok_alindi" => "1"]);
 $guncelle = $db->prepare("UPDATE siparis_urunler SET\r\n stok_alindi=:stok_alindi\r\n WHERE id=" . $urunRow["id"] . " \r\n ");
 $sonuc = $guncelle->execute(["stok_alindi" => "1"]);
 if ($urunRow["varyant_stok_durum"] == "0") {
 $realProduct = $db->prepare("select stok from urun where id=:id ");
 $realProduct->execute(["id" => $urunRow["urun_id"]]);
 $realRow = $realProduct->fetch(PDO::FETCH_ASSOC);
 $guncelle = $db->prepare("UPDATE urun SET\r\n stok=:stok\r\n WHERE id=" . $urunRow["urun_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["stok" => $realRow["stok"] + $adet]);
 }
 if ($urunRow["varyant_stok_durum"] == "1") {
 $VaryantStokCheck = $db->prepare("select * from detay_varyant_stok where stok_kodu=:stok_kodu ");
 $VaryantStokCheck->execute(["stok_kodu" => $urunRow["stok_kodu"]]);
 if ("0" < $VaryantStokCheck->rowCount()) {
 $stokRow = $VaryantStokCheck->fetch(PDO::FETCH_ASSOC);
 $guncelle = $db->prepare("UPDATE detay_varyant_stok SET\r\n stok=:stok\r\n WHERE id=" . $stokRow["id"] . " \r\n ");
 $sonuc = $guncelle->execute(["stok" => $stokRow["stok"] + $adet]);
 }
 }
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["orderID"] . "");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "product_stock") {
 if (isset($_GET["orderID"]) && "0" < $_GET["orderID"]) {
 $siparisUrunleri = $db->prepare("select * from siparis_urunler where id=:id ");
 $siparisUrunleri->execute(["id" => $_GET["orderID"]]);
 if ("0" < $siparisUrunleri->rowCount()) {
 $urunRow = $siparisUrunleri->fetch(PDO::FETCH_ASSOC);
 if ($urunRow["stok_alindi"] != "1") {
 $adet = $urunRow["adet"];
 $guncelle = $db->prepare("UPDATE siparis_urunler SET\r\n stok_alindi=:stok_alindi\r\n WHERE id=" . $_GET["orderID"] . " \r\n ");
 $sonuc = $guncelle->execute(["stok_alindi" => "1"]);
 if ($urunRow["varyant_stok_durum"] == "0") {
 $realProduct = $db->prepare("select stok from urun where id=:id ");
 $realProduct->execute(["id" => $urunRow["urun_id"]]);
 $realRow = $realProduct->fetch(PDO::FETCH_ASSOC);
 $guncelle = $db->prepare("UPDATE urun SET\r\n stok=:stok\r\n WHERE id=" . $urunRow["urun_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["stok" => $realRow["stok"] + $adet]);
 }
 if ($urunRow["varyant_stok_durum"] == "1") {
 $VaryantStokCheck = $db->prepare("select * from detay_varyant_stok where stok_kodu=:stok_kodu ");
 $VaryantStokCheck->execute(["stok_kodu" => $urunRow["stok_kodu"]]);
 if ("0" < $VaryantStokCheck->rowCount()) {
 $stokRow = $VaryantStokCheck->fetch(PDO::FETCH_ASSOC);
 $guncelle = $db->prepare("UPDATE detay_varyant_stok SET\r\n stok=:stok\r\n WHERE id=" . $stokRow["id"] . " \r\n ");
 $sonuc = $guncelle->execute(["stok" => $stokRow["stok"] + $adet]);
 }
 }
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["backID"] . "");
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "return_product_update") {
 if ($_POST && $_POST["request_id"] && $_POST["order_id"] && isset($_POST["update"])) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $siparis->rowCount()) {
 $sipRow = $siparis->fetch(PDO::FETCH_ASSOC);
 $iptalSorgu = $db->prepare("select * from siparis_urunler_iade where talep_no=:talep_no ");
 $iptalSorgu->execute(["talep_no" => $_POST["request_id"]]);
 $iptalRow = $iptalSorgu->fetch(PDO::FETCH_ASSOC);
 if ("0" < $iptalSorgu->rowCount()) {
 $siparisUrunleri = $db->prepare("select urun_baslik from siparis_urunler where id=:id ");
 $siparisUrunleri->execute(["id" => $iptalRow["urun_id"]]);
 $urun = $siparisUrunleri->fetch(PDO::FETCH_ASSOC);
 $guncelle = $db->prepare("UPDATE siparis_urunler_iade SET\r\n durum=:durum\r\n WHERE talep_no=" . $_POST["request_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["durum" => $_POST["durum"]]);
 if ($sonuc) {
 if ($_POST["durum_kargo"] == "1") {
 $kargoistek = "1";
 $kargoID = $_POST["kargo_idler"];
 foreach ($kargoID as $ID) {
 $kargoIDleri .= $ID . ",";
 }
 $kargoAdres = $_POST["adres"];
 } else {
 $kargoistek = "0";
 $kargoIDleri = NULL;
 $kargoAdres = NULL;
 }
 if ($_POST["iade_tutar"]) {
 $iadeTutar = $_POST["iade_tutar"];
 } else {
 $iadeTutar = "0";
 }
 $guncelle = $db->prepare("UPDATE siparis_urunler_iade SET\r\n kargo_idler=:kargo_idler,\r\n durum_kargo=:durum_kargo,\r\n adres=:adres,\r\n iban_iste=:iban_iste,\r\n para_iade=:para_iade,\r\n iade_tutar=:iade_tutar,\r\n iade_olumsuz_sebep=:iade_olumsuz_sebep\r\n WHERE talep_no=" . $_POST["request_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["kargo_idler" => $kargoIDleri, "durum_kargo" => $kargoistek, "adres" => $kargoAdres, "iban_iste" => $_POST["iban_iste"], "para_iade" => $_POST["para_iade"], "iade_tutar" => $iadeTutar, "iade_olumsuz_sebep" => trim(strip_tags($_POST["iade_olumsuz_sebep"]))]);
 if ($_POST["noti"] == "1" && $notiSet["durum"] == "1") {
 $user = $sipRow["uye_id"];
 $kullaniciCek = $db->prepare("select * from uyeler where id=:id ");
 $kullaniciCek->execute(["id" => $user]);
 if ("0" < $kullaniciCek->rowCount()) {
 $userRow = $kullaniciCek->fetch(PDO::FETCH_ASSOC);
 $rand = rand(0, (int) 0);
 if ($_POST["durum"] == "0") {
 $kaynak = $diller["adminpanel-bildirim-text-39"];
 $kaynak = $kaynak;
 $eski = ["{urun_adi}"];
 $yeni = [$urun["urun_baslik"]];
 $kaynak = str_replace($eski, $yeni, $kaynak);
 $baslik = $diller["adminpanel-bildirim-text-38"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $sipRow["siparis_no"] . " " . $kaynak . "";
 }
 if ($_POST["durum"] == "1") {
 if ($_POST["durum_kargo"] == "0") {
 $kaynak = $diller["adminpanel-bildirim-text-37"];
 $kaynak = $kaynak;
 $eski = ["{urun_adi}", "{iade_durum}", "{talep_no}"];
 $yeni = [$urun["urun_baslik"], "" . $diller["adminpanel-form-text-1569"] . "" . "", "#" . $_POST["request_id"] . ""];
 $kaynak = str_replace($eski, $yeni, $kaynak);
 $baslik = $diller["adminpanel-bildirim-text-36"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $sipRow["siparis_no"] . " " . $kaynak . "";
 } else {
 $kaynak = $diller["adminpanel-bildirim-text-37"];
 $kaynak = $kaynak;
 $eski = ["{urun_adi}", "{iade_durum}", "{talep_no}"];
 $yeni = [$urun["urun_baslik"], "" . $diller["adminpanel-form-text-1569"] . "" . "", "#" . $_POST["request_id"] . ""];
 $kaynak = str_replace($eski, $yeni, $kaynak);
 $baslik = $diller["adminpanel-bildirim-text-36"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $sipRow["siparis_no"] . " " . $kaynak . " " . $diller["adminpanel-bildirim-text-40"] . "";
 }
 }
 if ($_POST["durum"] == "2") {
 $kaynak = $diller["adminpanel-bildirim-text-41"];
 $kaynak = $kaynak;
 $eski = ["{urun_adi}", "{talep_no}"];
 $yeni = [$urun["urun_baslik"], "#" . $_POST["request_id"] . ""];
 $kaynak = str_replace($eski, $yeni, $kaynak);
 $baslik = $diller["adminpanel-bildirim-text-42"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $sipRow["siparis_no"] . " " . $kaynak . "";
 }
 if ($_POST["durum"] == "3") {
 $kaynak1 = $diller["adminpanel-bildirim-text-44"];
 $kaynak1 = $kaynak1;
 $eski = ["{urun_adi}"];
 $yeni = [$urun["urun_baslik"]];
 $kaynak1 = str_replace($eski, $yeni, $kaynak1);
 if ($_POST["iade_olumsuz_sebep"]) {
 $kaynak2 = $diller["adminpanel-bildirim-text-45"];
 $kaynak2 = $kaynak2;
 $eski2 = ["{sebep}"];
 $yeni2 = [$_POST["iade_olumsuz_sebep"]];
 $kaynak2 = str_replace($eski2, $yeni2, $kaynak2);
 } else {
 $kaynak2 = NULL;
 }
 $baslik = $diller["adminpanel-bildirim-text-43"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $sipRow["siparis_no"] . " " . $kaynak1 . " " . $kaynak2 . "";
 }
 $kaydet = $db->prepare("INSERT INTO bildirimler SET\r\n bildirim_id=:bildirim_id,\r\n baslik=:baslik,\r\n icerik=:icerik,\r\n tarih=:tarih,\r\n tur=:tur,\r\n ikon=:ikon,\r\n uye_id=:uye_id,\r\n durum=:durum,\r\n dil=:dil\r\n ");
 $sonuc = $kaydet->execute(["bildirim_id" => $rand, "baslik" => $baslik, "icerik" => $icerik, "tarih" => $timestamp, "tur" => "2", "ikon" => "", "uye_id" => $user, "durum" => "1", "dil" => $_SESSION["dil"]]);
 }
 }
 if ($_POST["sms_noti"] == "1" && $sms["durum"] == "1") {
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 $numara = $sipRow["telefon"];
 if ($_POST["durum"] == "0") {
 $kaynak = $diller["adminpanel-bildirim-text-39"];
 $kaynak = $kaynak;
 $eski = ["{urun_adi}"];
 $yeni = [$urun["urun_baslik"]];
 $kaynak = str_replace($eski, $yeni, $kaynak);
 $baslik = $diller["adminpanel-bildirim-text-38"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $sipRow["siparis_no"] . " " . $kaynak . "";
 }
 if ($_POST["durum"] == "1") {
 if ($_POST["durum_kargo"] == "0") {
 $kaynak = $diller["adminpanel-bildirim-text-37"];
 $kaynak = $kaynak;
 $eski = ["{urun_adi}", "{iade_durum}", "{talep_no}"];
 $yeni = [$urun["urun_baslik"], $diller["adminpanel-form-text-1569"], "#" . $_POST["request_id"] . ""];
 $kaynak = str_replace($eski, $yeni, $kaynak);
 $baslik = $diller["adminpanel-bildirim-text-36"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $sipRow["siparis_no"] . " " . $kaynak . "";
 } else {
 $kaynak = $diller["adminpanel-bildirim-text-37"];
 $kaynak = $kaynak;
 $eski = ["{urun_adi}", "{iade_durum}", "{talep_no}"];
 $yeni = [$urun["urun_baslik"], $diller["adminpanel-form-text-1569"], "#" . $_POST["request_id"] . ""];
 $kaynak = str_replace($eski, $yeni, $kaynak);
 $baslik = $diller["adminpanel-bildirim-text-36"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $sipRow["siparis_no"] . " " . $kaynak . " " . $diller["adminpanel-bildirim-text-40"] . "";
 }
 }
 if ($_POST["durum"] == "2") {
 $kaynak = $diller["adminpanel-bildirim-text-41"];
 $kaynak = $kaynak;
 $eski = ["{urun_adi}", "{talep_no}"];
 $yeni = [$urun["urun_baslik"], "#" . $_POST["request_id"] . ""];
 $kaynak = str_replace($eski, $yeni, $kaynak);
 $baslik = $diller["adminpanel-bildirim-text-42"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $sipRow["siparis_no"] . " " . $kaynak . "";
 }
 if ($_POST["durum"] == "3") {
 $kaynak1 = $diller["adminpanel-bildirim-text-44"];
 $kaynak1 = $kaynak1;
 $eski = ["{urun_adi}"];
 $yeni = [$urun["urun_baslik"]];
 $kaynak1 = str_replace($eski, $yeni, $kaynak1);
 if ($_POST["iade_olumsuz_sebep"]) {
 $kaynak2 = $diller["adminpanel-bildirim-text-45"];
 $kaynak2 = $kaynak2;
 $eski2 = ["{sebep}"];
 $yeni2 = [$_POST["iade_olumsuz_sebep"]];
 $kaynak2 = str_replace($eski2, $yeni2, $kaynak2);
 } else {
 $kaynak2 = NULL;
 }
 $baslik = $diller["adminpanel-bildirim-text-43"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $sipRow["siparis_no"] . " " . $kaynak1 . " " . $kaynak2 . "";
 }
 include "inc/modules/orders/order_noti_sms.php";
 }
 if ($_POST["email_noti"] == "1" && $ayar["smtp_durum"] == "1") {
 $eposta = $sipRow["eposta"];
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 include "inc/modules/orders/order_product_return_noti_email.php";
 }
 $_SESSION["collepse_status"] = "status";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=product_return&no=" . $_POST["request_id"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "offer_delete") {
 if (isset($_GET["no"])) {
 $silmeislem = $db->prepare("DELETE from siparis_teklif WHERE teklif_no=:teklif_no");
 $sil = $silmeislem->execute(["teklif_no" => $_GET["no"]]);
 if ($sil) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=offers");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "offer_update") {
 if ($_POST && $_POST["offer_id"] && isset($_POST["update"])) {
 $siparis = $db->prepare("select * from siparis_teklif where id=:id ");
 $siparis->execute(["id" => $_POST["offer_id"]]);
 if ("0" < $siparis->rowCount()) {
 $guncelle = $db->prepare("UPDATE siparis_teklif SET\r\n durum=:durum, \r\n teklif_icerik=:teklif_icerik\r\n WHERE id=" . $_POST["offer_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["durum" => $_POST["durum"], "teklif_icerik" => $_POST["teklif_icerik"]]);
 if ($sonuc) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=offers");
 if ($_POST["noti"] == "1" && $notiSet["durum"] == "1") {
 $sips = $db->prepare("select * from siparis_teklif where id=:id ");
 $sips->execute(["id" => $_POST["offer_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $user = $sipRow["uye_id"];
 $kullaniciCek = $db->prepare("select * from uyeler where id=:id ");
 $kullaniciCek->execute(["id" => $user]);
 if ("0" < $kullaniciCek->rowCount()) {
 $userRow = $kullaniciCek->fetch(PDO::FETCH_ASSOC);
 $rand = rand(0, (int) 0);
 $baslik = $diller["adminpanel-bildirim-text-30"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $sipRow["teklif_no"] . " " . $diller["adminpanel-bildirim-text-33"] . "";
 $kaydet = $db->prepare("INSERT INTO bildirimler SET\r\n bildirim_id=:bildirim_id,\r\n baslik=:baslik,\r\n icerik=:icerik,\r\n tarih=:tarih,\r\n tur=:tur,\r\n ikon=:ikon,\r\n uye_id=:uye_id,\r\n durum=:durum,\r\n dil=:dil\r\n ");
 $sonuc = $kaydet->execute(["bildirim_id" => $rand, "baslik" => $baslik, "icerik" => $icerik, "tarih" => $timestamp, "tur" => "2", "ikon" => "", "uye_id" => $user, "durum" => "1", "dil" => $_SESSION["dil"]]);
 }
 }
 }
 if ($_POST["sms_noti"] == "1" && $sms["durum"] == "1") {
 $sips = $db->prepare("select * from siparis_teklif where id=:id ");
 $sips->execute(["id" => $_POST["offer_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $teklif = $sipRow["teklif_icerik"];
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 $numara = $sipRow["telefon"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $sipRow["teklif_no"] . " " . $diller["adminpanel-bildirim-text-35"] . " " . $teklif . "";
 include "inc/modules/orders/order_noti_sms.php";
 }
 }
 if ($_POST["email_noti"] == "1" && $ayar["smtp_durum"] == "1") {
 $sips = $db->prepare("select * from siparis_teklif where id=:id ");
 $sips->execute(["id" => $_POST["offer_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $teklif = $sipRow["teklif_icerik"];
 $user = $sipRow["uye_id"];
 $eposta = $sipRow["eposta"];
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 include "inc/modules/orders/offer_noti_email.php";
 }
 }
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "op_order_update") {
 if ($_POST && $_POST["op_id"] && $_POST["durum"] && isset($_POST["update"])) {
 $siparis = $db->prepare("select * from siparis_normal where id=:id ");
 $siparis->execute(["id" => $_POST["op_id"]]);
 if ("0" < $siparis->rowCount()) {
 $guncelle = $db->prepare("UPDATE siparis_normal SET\r\n durum=:durum, \r\n kargo_ver=:kargo_ver,\r\n kargo_firma=:kargo_firma,\r\n kargo_takip=:kargo_takip\r\n WHERE id=" . $_POST["op_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["durum" => $_POST["durum"], "kargo_ver" => $_POST["kargo_ver"], "kargo_firma" => $_POST["kargo_firma"], "kargo_takip" => $_POST["kargo_takip"]]);
 if ($sonuc) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=op_orders");
 if ($_POST["noti"] == "1" && $notiSet["durum"] == "1") {
 $sips = $db->prepare("select * from siparis_normal where id=:id ");
 $sips->execute(["id" => $_POST["op_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $kargoFirmaCek = $db->prepare("select * from kargo_firma where id=:id ");
 $kargoFirmaCek->execute(["id" => $sipRow["kargo_firma"]]);
 $kargoRows = $kargoFirmaCek->fetch(PDO::FETCH_ASSOC);
 if ("0" < $kargoFirmaCek->rowCount()) {
 $kargofirma = $kargoRows["baslik"];
 } else {
 $kargofirma = $kargoRows["baslik"];
 }
 $kargotakip = $_POST["kargo_takip"];
 if ($sipRow["kargo_ver"] == "1" && $sipRow["kargo_firma"] && $sipRow["kargo_takip"]) {
 $ayrica = "\r\n \r\n " . $diller["adminpanel-bildirim-text-29"] . " " . $diller["adminpanel-bildirim-text-25"] . "\r\n \r\n " . $diller["adminpanel-bildirim-text-21"] . " " . $kargofirma . "\r\n \r\n " . $diller["adminpanel-bildirim-text-22"] . " " . $kargotakip . "\r\n ";
 } else {
 $ayrica = NULL;
 }
 $user = $sipRow["uye_id"];
 $kullaniciCek = $db->prepare("select * from uyeler where id=:id ");
 $kullaniciCek->execute(["id" => $user]);
 if ("0" < $kullaniciCek->rowCount()) {
 $durum = $db->prepare("select * from siparis_durumlar where id=:id ");
 $durum->execute(["id" => $sipRow["durum"]]);
 $d = $durum->fetch(PDO::FETCH_ASSOC);
 $userRow = $kullaniciCek->fetch(PDO::FETCH_ASSOC);
 $rand = rand(0, (int) 0);
 $baslik = $diller["adminpanel-bildirim-text-15"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $sipRow["siparis_no"] . " " . $diller["adminpanel-bildirim-text-16"] . " " . $d["baslik"] . " " . $diller["adminpanel-bildirim-text-28"] . " " . $ayrica . "";
 $kaydet = $db->prepare("INSERT INTO bildirimler SET\r\n bildirim_id=:bildirim_id,\r\n baslik=:baslik,\r\n icerik=:icerik,\r\n tarih=:tarih,\r\n tur=:tur,\r\n ikon=:ikon,\r\n uye_id=:uye_id,\r\n durum=:durum,\r\n dil=:dil\r\n ");
 $sonuc = $kaydet->execute(["bildirim_id" => $rand, "baslik" => $baslik, "icerik" => $icerik, "tarih" => $timestamp, "tur" => "2", "ikon" => "&#128722", "uye_id" => $user, "durum" => "1", "dil" => $_SESSION["dil"]]);
 }
 }
 }
 if ($_POST["sms_noti"] == "1" && $sms["durum"] == "1") {
 $sips = $db->prepare("select * from siparis_normal where id=:id ");
 $sips->execute(["id" => $_POST["op_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $kargoFirmaCek = $db->prepare("select * from kargo_firma where id=:id ");
 $kargoFirmaCek->execute(["id" => $sipRow["kargo_firma"]]);
 $kargoRows = $kargoFirmaCek->fetch(PDO::FETCH_ASSOC);
 if ("0" < $kargoFirmaCek->rowCount()) {
 $kargofirma = $kargoRows["baslik"];
 } else {
 $kargofirma = $kargoRows["baslik"];
 }
 $kargotakip = $_POST["kargo_takip"];
 if ($sipRow["kargo_ver"] == "1" && $sipRow["kargo_firma"] && $sipRow["kargo_takip"]) {
 $ayrica = "" . $diller["adminpanel-bildirim-text-29"] . " " . $diller["adminpanel-bildirim-text-25"] . "\r\n " . $diller["adminpanel-bildirim-text-21"] . " " . $kargofirma . "\r\n " . $diller["adminpanel-bildirim-text-22"] . " " . $kargotakip . "\r\n ";
 } else {
 $ayrica = NULL;
 }
 $durum = $db->prepare("select * from siparis_durumlar where id=:id ");
 $durum->execute(["id" => $sipRow["durum"]]);
 $d = $durum->fetch(PDO::FETCH_ASSOC);
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 $numara = $sipRow["telefon"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $sipRow["siparis_no"] . " " . $diller["adminpanel-bildirim-text-16"] . " " . $d["baslik"] . " " . $diller["adminpanel-bildirim-text-28"] . " " . $ayrica . "";
 include "inc/modules/orders/order_noti_sms.php";
 }
 }
 if ($_POST["email_noti"] == "1" && $ayar["smtp_durum"] == "1") {
 $sips = $db->prepare("select * from siparis_normal where id=:id ");
 $sips->execute(["id" => $_POST["op_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $durum = $db->prepare("select * from siparis_durumlar where id=:id ");
 $durum->execute(["id" => $sipRow["durum"]]);
 $d = $durum->fetch(PDO::FETCH_ASSOC);
 $kargoFirmaCek = $db->prepare("select * from kargo_firma where id=:id ");
 $kargoFirmaCek->execute(["id" => $sipRow["kargo_firma"]]);
 $kargoRows = $kargoFirmaCek->fetch(PDO::FETCH_ASSOC);
 if ("0" < $kargoFirmaCek->rowCount()) {
 $kargofirma = $kargoRows["baslik"];
 } else {
 $kargofirma = $kargoRows["baslik"];
 }
 $kargotakip = $_POST["kargo_takip"];
 if ($sipRow["kargo_ver"] == "1" && $sipRow["kargo_firma"] && $sipRow["kargo_takip"]) {
 $ayrica = "\r\n \r\n " . $diller["adminpanel-bildirim-text-29"] . " " . $diller["adminpanel-bildirim-text-25"] . "\r\n \r\n " . $diller["adminpanel-bildirim-text-21"] . " " . $kargofirma . "\r\n \r\n " . $diller["adminpanel-bildirim-text-22"] . " " . $kargotakip . "\r\n ";
 } else {
 $ayrica = NULL;
 }
 $user = $sipRow["uye_id"];
 $eposta = $sipRow["eposta"];
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 include "inc/modules/orders/single_order_noti_email.php";
 }
 }
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "op_order_delete") {
 if (isset($_GET["no"])) {
 $silmeislem = $db->prepare("DELETE from siparis_normal WHERE siparis_no=:siparis_no");
 $sil = $silmeislem->execute(["siparis_no" => $_GET["no"]]);
 if ($sil) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=op_orders");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "order_delete") {
 if (isset($_GET["no"])) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $siparis->rowCount()) {
 $silmeislem = $db->prepare("DELETE from siparisler WHERE siparis_no=:siparis_no");
 $sil = $silmeislem->execute(["siparis_no" => $_GET["no"]]);
 if ($sil) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=orders");
 $a = $db->prepare("DELETE from siparis_urunler WHERE siparis_id=:siparis_id");
 $a->execute(["siparis_id" => $_GET["no"]]);
 $fatura = $db->prepare("select * from siparis_fatura where siparis_no=:siparis_no ");
 $fatura->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $fatura->rowCount()) {
 $fat = $fatura->fetch(PDO::FETCH_ASSOC);
 unlink("../i/invoice/" . $fat["fatura_url"] . "");
 $fff = $db->prepare("DELETE from siparis_fatura WHERE siparis_no=:siparis_no");
 $fff->execute(["siparis_no" => $_GET["no"]]);
 }
 $b = $db->prepare("DELETE from siparis_iptal WHERE siparis_no=:siparis_no");
 $b->execute(["siparis_no" => $_GET["no"]]);
 $c = $db->prepare("DELETE from siparis_urunler_iade WHERE siparis_no=:siparis_no");
 $c->execute(["siparis_no" => $_GET["no"]]);
 $d = $db->prepare("DELETE from siparis_kargo WHERE siparis_id=:siparis_id");
 $d->execute(["siparis_id" => $_GET["no"]]);
 $e = $db->prepare("DELETE from siparis_varyant WHERE siparis_id=:siparis_id");
 $e->execute(["siparis_id" => $_GET["no"]]);
 $f = $db->prepare("DELETE from operator_not WHERE siparis_no=:siparis_no");
 $f->execute(["siparis_no" => $_GET["no"]]);
 } else {
 echo "veritabanı hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "invoice_download") {
 $sor = $db->prepare("select * from siparis_fatura where siparis_no=:siparis_no ");
 $sor->execute(["siparis_no" => $_GET["no"]]);
 $s = $sor->fetch(PDO::FETCH_ASSOC);
 $file = "../i/invoice/" . $s["fatura_url"] . "";
 header("Content-Description: File Transfer");
 header("Content-Type: application/octet-stream");
 header("Content-Disposition: attachment; filename=" . basename($file));
 header("Content-Transfer-Encoding: binary");
 header("Expires: 0");
 header("Cache-Control: must-revalidate");
 header("Pragma: public");
 header("Content-Length: " . filesize($file));
 ob_clean();
 flush();
 readfile($file);
 exit;
 }
 if ($_GET["status"] == "product_update") {
 if ($_POST && $_POST["order_id"] && $_POST["pro_id"] && isset($_POST["productUpdate"])) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $siparis->rowCount()) {
 $siparis_urun = $db->prepare("select * from siparis_urunler where id=:id and siparis_id=:siparis_id");
 $siparis_urun->execute(["id" => $_POST["pro_id"], "siparis_id" => $_POST["order_id"]]);
 if ("0" < $siparis_urun->rowCount()) {
 $guncelle = $db->prepare("UPDATE siparis_urunler SET\r\n durum=:durum,\r\n iade_aksiyon=:iade_aksiyon\r\n WHERE id=" . $_POST["pro_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["durum" => $_POST["durum"], "iade_aksiyon" => $_POST["iade_aksiyon"]]);
 if ($sonuc) {
 $_SESSION["collepse_status"] = "product_list";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "note_delete") {
 if ($_GET["no"] && $_GET["orderID"]) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_GET["orderID"]]);
 if ("0" < $siparis->rowCount()) {
 $silmeislem = $db->prepare("DELETE from operator_not WHERE id=:id");
 $silmeislem2 = $silmeislem->execute(["id" => $_GET["no"]]);
 if ($silmeislem2) {
 $_SESSION["collepse_status"] = "operatorNote";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["orderID"] . "");
 } else {
 echo "veritabanı hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "note_add") {
 if ($_POST && isset($_POST["noteAdd"]) && $_POST["order_id"]) {
 if ($_POST["order_note"]) {
 $kaydet = $db->prepare("INSERT INTO operator_not SET\r\n tarih=:tarih, \r\n open=:open,\r\n icerik=:icerik,\r\n siparis_no=:siparis_no,\r\n operator=:operator\r\n ");
 $sonuc = $kaydet->execute(["tarih" => $timestamp, "open" => $_POST["open_note"], "icerik" => $_POST["order_note"], "siparis_no" => $_POST["order_id"], "operator" => $adminRow["isim"] . " " . $adminRow["soyisim"]]);
 if ($sonuc) {
 $_SESSION["collepse_status"] = "operatorNote";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 $_SESSION["main_alert"] = "zorunlu";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "product_cargo_update") {
 if ($_POST && isset($_POST["kargoTip2"]) && $_POST["order_id"] && $_POST["pro_id"]) {
 $guncelle = $db->prepare("UPDATE siparisler SET\r\n kargo_sekli=:kargo_sekli\r\n WHERE siparis_no=" . $_POST["order_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["kargo_sekli" => "1"]);
 $producek = $db->prepare("select * from siparis_urunler where id=:id ");
 $producek->execute(["id" => $_POST["pro_id"]]);
 $proRow = $producek->fetch(PDO::FETCH_ASSOC);
 if ("0" < $producek->rowCount()) {
 $urunBaslik = $proRow["urun_baslik"];
 } else {
 $urunBaslik = NULL;
 }
 if ($sonuc) {
 $kargoSQL = $db->prepare("select * from siparis_kargo where siparis_urun_id=:siparis_urun_id ");
 $kargoSQL->execute(["siparis_urun_id" => $_POST["pro_id"]]);
 if ("0" < $kargoSQL->rowCount()) {
 if ($_POST["kargo_takip"]) {
 $kargoFirmaCek = $db->prepare("select * from kargo_firma where id=:id ");
 $kargoFirmaCek->execute(["id" => $_POST["kargo_firma"]]);
 $kargoRows = $kargoFirmaCek->fetch(PDO::FETCH_ASSOC);
 if ("0" < $kargoFirmaCek->rowCount()) {
 $kargofirma = $kargoRows["baslik"];
 } else {
 $kargofirma = $kargoRows["baslik"];
 }
 $kargotakip = $_POST["kargo_takip"];
 if ($_POST["noti"] == "1" && $notiSet["durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $user = $sipRow["uye_id"];
 $kullaniciCek = $db->prepare("select * from uyeler where id=:id ");
 $kullaniciCek->execute(["id" => $user]);
 if ("0" < $kullaniciCek->rowCount()) {
 $userRow = $kullaniciCek->fetch(PDO::FETCH_ASSOC);
 $rand = rand(0, (int) 0);
 $baslik = $diller["adminpanel-bildirim-text-25"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $_POST["order_id"] . " " . $diller["adminpanel-bildirim-text-26"] . " " . $urunBaslik . " " . $diller["adminpanel-bildirim-text-27"] . " " . $diller["adminpanel-bildirim-text-21"] . " " . $kargofirma . " " . $diller["adminpanel-bildirim-text-22"] . " " . $kargotakip . " ";
 $kaydet = $db->prepare("INSERT INTO bildirimler SET\r\n bildirim_id=:bildirim_id,\r\n baslik=:baslik,\r\n icerik=:icerik,\r\n tarih=:tarih,\r\n tur=:tur,\r\n ikon=:ikon,\r\n uye_id=:uye_id,\r\n durum=:durum,\r\n dil=:dil\r\n ");
 $sonuc = $kaydet->execute(["bildirim_id" => $rand, "baslik" => $baslik, "icerik" => $icerik, "tarih" => $timestamp, "tur" => "2", "ikon" => "&#128666;", "uye_id" => $user, "durum" => "1", "dil" => $_SESSION["dil"]]);
 }
 }
 }
 if ($_POST["sms_noti"] == "1" && $sms["durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 $numara = $sipRow["telefon"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $_POST["order_id"] . " " . $diller["adminpanel-bildirim-text-26"] . " " . $urunBaslik . " " . $diller["adminpanel-bildirim-text-27"] . " " . $diller["adminpanel-bildirim-text-21"] . " " . $kargofirma . " " . $diller["adminpanel-bildirim-text-22"] . " " . $kargotakip . "";
 include "inc/modules/orders/order_noti_sms.php";
 }
 }
 if ($_POST["email_noti"] == "1" && $ayar["smtp_durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $user = $sipRow["uye_id"];
 $eposta = $sipRow["eposta"];
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 include "inc/modules/orders/order_product_cargo_noti_email.php";
 }
 }
 }
 $guncelle = $db->prepare("UPDATE siparis_kargo SET\r\n kargo_firma=:kargo_firma,\r\n kargo_takip=:kargo_takip\r\n WHERE siparis_urun_id=" . $_POST["pro_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["kargo_firma" => $_POST["kargo_firma"], "kargo_takip" => $_POST["kargo_takip"]]);
 } else {
 $kaydet = $db->prepare("INSERT INTO siparis_kargo SET\r\n siparis_urun_id=:siparis_urun_id,\r\n kargo_firma=:kargo_firma,\r\n kargo_takip=:kargo_takip,\r\n siparis_id=:siparis_id \r\n ");
 $sonuc = $kaydet->execute(["siparis_urun_id" => $_POST["pro_id"], "kargo_firma" => $_POST["kargo_firma"], "kargo_takip" => $_POST["kargo_takip"], "siparis_id" => $_POST["order_id"]]);
 }
 $_SESSION["collepse_status"] = "kargoAcc";
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "cargo_settings") {
 if ($_POST && isset($_POST["kargoTip1"]) && $_POST["order_id"]) {
 $guncelle = $db->prepare("UPDATE siparisler SET\r\n kargo_firma=:kargo_firma,\r\n kargo_takip=:kargo_takip,\r\n kargo_sekli=:kargo_sekli\r\n WHERE siparis_no=" . $_POST["order_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["kargo_firma" => $_POST["kargo_firma"], "kargo_takip" => $_POST["kargo_takip"], "kargo_sekli" => "0"]);
 if ($sonuc) {
 if ($_POST["kargo_takip"]) {
 $kargoFirmaCek = $db->prepare("select * from kargo_firma where id=:id ");
 $kargoFirmaCek->execute(["id" => $_POST["kargo_firma"]]);
 $kargoRows = $kargoFirmaCek->fetch(PDO::FETCH_ASSOC);
 if ("0" < $kargoFirmaCek->rowCount()) {
 $kargofirma = $kargoRows["baslik"];
 } else {
 $kargofirma = $kargoRows["baslik"];
 }
 $kargotakip = $_POST["kargo_takip"];
 if ($_POST["sms_noti"] == "1" && $sms["durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 $numara = $sipRow["telefon"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $_POST["order_id"] . " " . $diller["adminpanel-bildirim-text-20"] . " " . $diller["adminpanel-bildirim-text-21"] . " " . $kargofirma . " , " . $diller["adminpanel-bildirim-text-22"] . " " . $kargotakip . " ";
 include "inc/modules/orders/order_noti_sms.php";
 }
 }
 if ($_POST["email_noti"] == "1" && $ayar["smtp_durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $user = $sipRow["uye_id"];
 $eposta = $sipRow["eposta"];
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 include "inc/modules/orders/order_cargo_noti_email.php";
 }
 }
 if ($_POST["noti"] == "1" && $notiSet["durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $user = $sipRow["uye_id"];
 $kullaniciCek = $db->prepare("select * from uyeler where id=:id ");
 $kullaniciCek->execute(["id" => $user]);
 if ("0" < $kullaniciCek->rowCount()) {
 $userRow = $kullaniciCek->fetch(PDO::FETCH_ASSOC);
 $rand = rand(0, (int) 0);
 $baslik = $diller["adminpanel-bildirim-text-23"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $_POST["order_id"] . " " . $diller["adminpanel-bildirim-text-20"] . " " . $diller["adminpanel-bildirim-text-21"] . " " . $kargofirma . " " . $diller["adminpanel-bildirim-text-22"] . " " . $kargotakip . "";
 $kaydet = $db->prepare("INSERT INTO bildirimler SET\r\n bildirim_id=:bildirim_id,\r\n baslik=:baslik,\r\n icerik=:icerik,\r\n tarih=:tarih,\r\n tur=:tur,\r\n ikon=:ikon,\r\n uye_id=:uye_id,\r\n durum=:durum,\r\n dil=:dil\r\n ");
 $sonuc = $kaydet->execute(["bildirim_id" => $rand, "baslik" => $baslik, "icerik" => $icerik, "tarih" => $timestamp, "tur" => "2", "ikon" => "&#128666;", "uye_id" => $user, "durum" => "1", "dil" => $_SESSION["dil"]]);
 }
 }
 }
 }
 $_SESSION["collepse_status"] = "kargoAcc";
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "transfer_delete") {
 if ($_GET["no"]) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $siparis->rowCount()) {
 $silmeislem = $db->prepare("DELETE from odeme_bildirim WHERE siparis_no=:siparis_no");
 $silmeislem2 = $silmeislem->execute(["siparis_no" => $_GET["no"]]);
 if ($silmeislem2) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["no"] . "");
 } else {
 echo "veritabanı hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "transfer_no") {
 if ($_GET["no"]) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $siparis->rowCount()) {
 $guncelle = $db->prepare("UPDATE odeme_bildirim SET\r\n durum=:durum\r\n WHERE siparis_no=" . $_GET["no"] . " \r\n ");
 $sonuc = $guncelle->execute(["durum" => "2"]);
 if ($sonuc) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["no"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "transfer_pasive") {
 if ($_GET["no"]) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $siparis->rowCount()) {
 $guncelle = $db->prepare("UPDATE odeme_bildirim SET\r\n durum=:durum\r\n WHERE siparis_no=" . $_GET["no"] . " \r\n ");
 $sonuc = $guncelle->execute(["durum" => "0"]);
 if ($sonuc) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["no"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "transfer_confirm") {
 if ($_GET["no"]) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $siparis->rowCount()) {
 $guncelle = $db->prepare("UPDATE odeme_bildirim SET\r\n durum=:durum\r\n WHERE siparis_no=" . $_GET["no"] . " \r\n ");
 $sonuc = $guncelle->execute(["durum" => "1"]);
 if ($sonuc) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["no"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "invoice_add") {
 if ($_POST && $_POST["order_id"] && isset($_POST["insert"])) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $siparis->rowCount()) {
 if (0 < $_FILES["invoice"]["size"]) {
 $file_format = $_FILES["invoice"];
 $kaynak = $_FILES["invoice"]["tmp_name"];
 $uzanti = explode(".", $_FILES["invoice"]["name"]);
 $random = rand(0, (int) 99999);
 $random2 = rand(0, (int) 999);
 $orderID = $_POST["order_id"];
 $filename = trim(addslashes($_FILES["invoice"]["name"]));
 $filename = str_replace(" ", "_", $filename);
 $filename = str_replace("ş", "s", $filename);
 $filename = str_replace("&", "-", $filename);
 $filename = str_replace("%", "-", $filename);
 $filename = str_replace("?", "-", $filename);
 $filename = str_replace("+", "-", $filename);
 $filename = str_replace("ı", "i", $filename);
 $filename = str_replace("Ş", "s", $filename);
 $filename = str_replace("ğ", "g", $filename);
 $filename = str_replace("Ğ", "g", $filename);
 $filename = str_replace("ü", "u", $filename);
 $filename = str_replace("Ü", "u", $filename);
 $filename = str_replace("ç", "c", $filename);
 $filename = str_replace("Ç", "c", $filename);
 $filename = str_replace("ö", "o", $filename);
 $filename = str_replace("Ö", "o", $filename);
 $filename = str_replace("İ", "i", $filename);
 $filename = preg_replace("/\\s+/", "_", $filename);
 $file_name = $random . "-" . $random2 . "-" . $orderID . "-" . $filename;
 $target = "../i/invoice/" . $file_name;
 if ($file_format["type"] == "application/pdf") {
 $gitti = move_uploaded_file($kaynak, $target);
 $kaydet = $db->prepare("INSERT INTO siparis_fatura SET\r\n siparis_no=:siparis_no,\r\n fatura_url=:fatura_url\r\n ");
 $sonuc = $kaydet->execute(["siparis_no" => $_POST["order_id"], "fatura_url" => $file_name]);
 if ($sonuc) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 $_SESSION["main_alert"] = "filetype";
 }
 } else {
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 $_SESSION["main_alert"] = "filesize";
 }
 } else {
 header("Location:" . $ayar["panel_url"] . "pages.php?page=orders");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "invoice_delete") {
 if ($_GET["no"]) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $siparis->rowCount()) {
 $fatura = $db->prepare("select * from siparis_fatura where siparis_no=:siparis_no ");
 $fatura->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $fatura->rowCount()) {
 $f = $fatura->fetch(PDO::FETCH_ASSOC);
 unlink("../i/invoice/" . $f["fatura_url"] . "");
 $silmeislem = $db->prepare("DELETE from siparis_fatura WHERE siparis_no=:siparis_no");
 $silmeislem2 = $silmeislem->execute(["siparis_no" => $_GET["no"]]);
 if ($silmeislem2) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["no"] . "");
 } else {
 echo "veritabanı hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["panel_url"] . "pages.php?page=orders");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "cancel_request_delete") {
 if ($_GET["no"] && $_GET["orderID"]) {
 $silmeislem = $db->prepare("DELETE from siparis_iptal WHERE talep_no=:talep_no");
 $silmeislems = $silmeislem->execute(["talep_no" => $_GET["no"]]);
 if ($silmeislems) {
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["orderID"] . "");
 } else {
 echo "veritabanı hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "order_cancel") {
 if ($_GET["no"]) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $siparis->rowCount()) {
 $guncelle = $db->prepare("UPDATE siparisler SET\r\n iptal=:iptal\r\n WHERE siparis_no=" . $_GET["no"] . " \r\n ");
 $sonuc = $guncelle->execute(["iptal" => "1"]);
 if ($sonuc) {
 $talep = $db->prepare("select * from siparis_iptal where siparis_no=:siparis_no ");
 $talep->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $talep->rowCount()) {
 $guncelle = $db->prepare("UPDATE siparis_iptal SET\r\n durum=:durum,\r\n yeni=:yeni\r\n WHERE siparis_no=" . $_GET["no"] . " \r\n ");
 $sonuc = $guncelle->execute(["durum" => "1", "yeni" => "0"]);
 }
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["no"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "order_active") {
 if ($_GET["no"]) {
 $siparis = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $siparis->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $siparis->rowCount()) {
 $guncelle = $db->prepare("UPDATE siparisler SET\r\n iptal=:iptal\r\n WHERE siparis_no=" . $_GET["no"] . " \r\n ");
 $sonuc = $guncelle->execute(["iptal" => "0"]);
 if ($sonuc) {
 $talep = $db->prepare("select * from siparis_iptal where siparis_no=:siparis_no ");
 $talep->execute(["siparis_no" => $_GET["no"]]);
 if ("0" < $talep->rowCount()) {
 $guncelle = $db->prepare("UPDATE siparis_iptal SET\r\n durum=:durum\r\n WHERE siparis_no=" . $_GET["no"] . " \r\n ");
 $sonuc = $guncelle->execute(["durum" => "0"]);
 }
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_GET["no"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "change") {
 if ($_POST && isset($_POST["update"]) && $_POST["order_id"]) {
 $guncelle = $db->prepare("UPDATE siparisler SET\r\n siparis_durum=:siparis_durum,\r\n iptal_aksiyon=:iptal_aksiyon\r\n WHERE siparis_no=" . $_POST["order_id"] . " \r\n ");
 $sonuc = $guncelle->execute(["siparis_durum" => $_POST["siparis_durum"], "iptal_aksiyon" => $_POST["iptal_aksiyon"]]);
 if ($sonuc) {
 if ($_POST["sms_noti"] == "1" && $sms["durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $durum = $db->prepare("select * from siparis_durumlar where id=:id ");
 $durum->execute(["id" => $sipRow["siparis_durum"]]);
 $d = $durum->fetch(PDO::FETCH_ASSOC);
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 $durumbaslik = $d["baslik"];
 $numara = $sipRow["telefon"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $isim . " " . $soyisim . ", #" . $_POST["order_id"] . " " . $diller["adminpanel-bildirim-text-16"] . " " . $durumbaslik . " " . $diller["adminpanel-bildirim-text-17"] . "";
 include "inc/modules/orders/order_noti_sms.php";
 }
 }
 if ($_POST["email_noti"] == "1" && $ayar["smtp_durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $durum = $db->prepare("select * from siparis_durumlar where id=:id ");
 $durum->execute(["id" => $sipRow["siparis_durum"]]);
 $d = $durum->fetch(PDO::FETCH_ASSOC);
 $user = $sipRow["uye_id"];
 $eposta = $sipRow["eposta"];
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 $durumbaslik = $d["baslik"];
 include "inc/modules/orders/order_noti_email.php";
 }
 }
 if ($_POST["noti"] == "1" && $notiSet["durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $user = $sipRow["uye_id"];
 $kullaniciCek = $db->prepare("select * from uyeler where id=:id ");
 $kullaniciCek->execute(["id" => $user]);
 if ("0" < $kullaniciCek->rowCount()) {
 $userRow = $kullaniciCek->fetch(PDO::FETCH_ASSOC);
 $durum = $db->prepare("select * from siparis_durumlar where id=:id ");
 $durum->execute(["id" => $sipRow["siparis_durum"]]);
 $d = $durum->fetch(PDO::FETCH_ASSOC);
 $rand = rand(0, (int) 0);
 $baslik = $diller["adminpanel-bildirim-text-15"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $_POST["order_id"] . " " . $diller["adminpanel-bildirim-text-16"] . " " . $d["baslik"] . " " . $diller["adminpanel-bildirim-text-17"] . "";
 $kaydet = $db->prepare("INSERT INTO bildirimler SET\r\n bildirim_id=:bildirim_id,\r\n baslik=:baslik,\r\n icerik=:icerik,\r\n tarih=:tarih,\r\n tur=:tur,\r\n ikon=:ikon,\r\n uye_id=:uye_id,\r\n durum=:durum,\r\n dil=:dil\r\n ");
 $sonuc = $kaydet->execute(["bildirim_id" => $rand, "baslik" => $baslik, "icerik" => $icerik, "tarih" => $timestamp, "tur" => "2", "ikon" => "&#128722", "uye_id" => $user, "durum" => "1", "dil" => $_SESSION["dil"]]);
 }
 }
 }
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 } else {
 echo "Veritabanı Hatası";
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 if ($_GET["status"] == "cancel_noti") {
 if ($_POST && isset($_POST["cancelNotifi"]) && $_POST["order_id"]) {
 if ($_POST["sms_noti"] == "1" && $sms["durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 $numara = $sipRow["telefon"];
 $mesaj_icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $sipRow["isim"] . " " . $sipRow["soyisim"] . ", #" . $_POST["order_id"] . " " . $diller["adminpanel-bildirim-text-19"] . "";
 include "inc/modules/orders/order_noti_sms.php";
 }
 }
 if ($_POST["email_noti"] == "1" && $ayar["smtp_durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $durum = $db->prepare("select * from siparis_durumlar where id=:id ");
 $durum->execute(["id" => $sipRow["siparis_durum"]]);
 $d = $durum->fetch(PDO::FETCH_ASSOC);
 $eposta = $sipRow["eposta"];
 $isim = $sipRow["isim"];
 $soyisim = $sipRow["soyisim"];
 include "inc/modules/orders/order_cancel_noti_email.php";
 }
 }
 if ($_POST["noti"] == "1" && $notiSet["durum"] == "1") {
 $sips = $db->prepare("select * from siparisler where siparis_no=:siparis_no ");
 $sips->execute(["siparis_no" => $_POST["order_id"]]);
 if ("0" < $sips->rowCount()) {
 $sipRow = $sips->fetch(PDO::FETCH_ASSOC);
 $user = $sipRow["uye_id"];
 $kullaniciCek = $db->prepare("select * from uyeler where id=:id ");
 $kullaniciCek->execute(["id" => $user]);
 if ("0" < $kullaniciCek->rowCount()) {
 $userRow = $kullaniciCek->fetch(PDO::FETCH_ASSOC);
 $rand = rand(0, (int) 0);
 $baslik = $diller["adminpanel-bildirim-text-18"];
 $icerik = "" . $diller["adminpanel-bildirim-text-2"] . " " . $userRow["isim"] . " " . $userRow["soyisim"] . ", #" . $_POST["order_id"] . " " . $diller["adminpanel-bildirim-text-19"] . "";
 $kaydet = $db->prepare("INSERT INTO bildirimler SET\r\n bildirim_id=:bildirim_id,\r\n baslik=:baslik,\r\n icerik=:icerik,\r\n tarih=:tarih,\r\n tur=:tur,\r\n ikon=:ikon,\r\n uye_id=:uye_id,\r\n durum=:durum,\r\n dil=:dil\r\n ");
 $sonuc = $kaydet->execute(["bildirim_id" => $rand, "baslik" => $baslik, "icerik" => $icerik, "tarih" => $timestamp, "tur" => "2", "ikon" => "&#128683;", "uye_id" => $user, "durum" => "1", "dil" => $_SESSION["dil"]]);
 }
 }
 }
 $_SESSION["main_alert"] = "success";
 header("Location:" . $ayar["panel_url"] . "pages.php?page=order_detail&orderID=" . $_POST["order_id"] . "");
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
 } else {
 header("Location:" . $ayar["site_url"] . "404");
 }
} else {
 header("Location:" . $_SESSION["current_url"] . "");
 $_SESSION["main_alert"] = "demo";
}

İptal

📁 PHP Dosya Yöneticisi

📝 order_post.php

📝 order_post.php

📝 Yeniden Adlandır

🔐 Dosya İzinleri (chmod)