payment.php

<?php
// Start session at the beginning of the file
session_start();
include 'conn.php'; 

// Check if user is logged in
if (!isset($_SESSION['user_id'])) {
    header("Location: signin.php");
    exit();
}

// Set a cookie for the payment session
$cookie_name = "payment_session";
$cookie_value = uniqid();
$cookie_expiry = time() + (86400 * 30); // 30 days
setcookie($cookie_name, $cookie_value, $cookie_expiry, "/");

// Get project ID from URL
$project_id = isset($_GET['project_id']) ? intval($_GET['project_id']) : 0;

// Initialize variables with default values
$project_name = 'Project';
$developer_name = 'Developer';
$total_bid = 0;
$project_duration = 'Not specified';
$released_amount = 0;

// Fetch project details from database if project_id is provided
if ($project_id > 0) {
    // Get project details
    $sql = "SELECT p.*, u.name as client_name, u.user_id as client_id, 
            pa.freelancer_id, pa.bid_amount as winning_bid_amount,
            f.name as freelancer_name
            FROM projects p 
            JOIN users u ON p.user_id = u.user_id 
            JOIN project_assignments pa ON p.id = pa.project_id
            JOIN users f ON pa.freelancer_id = f.user_id
            WHERE p.id = ? AND pa.is_accepted = 1";
    
    $stmt = $conn->prepare($sql);
    $stmt->bind_param("i", $project_id);
    $stmt->execute();
    $result = $stmt->get_result();
    
    if ($result && $result->num_rows > 0) {
        $project = $result->fetch_assoc();
        
        // Set variables with actual project data
        $project_name = $project['title'];
        $developer_name = $project['freelancer_name'];
        $total_bid = $project['winning_bid_amount'];
        $project_duration = $project['duration'] ?? '3 Months';
        
        // Check if there are any previous payments
        $payment_sql = "SELECT SUM(amount) as total_released 
                        FROM project_payments 
                        WHERE project_id = ?";
        $payment_stmt = $conn->prepare($payment_sql);
        $payment_stmt->bind_param("i", $project_id);
        $payment_stmt->execute();
        $payment_result = $payment_stmt->get_result();
        
        if ($payment_result && $payment_result->num_rows > 0) {
            $payment_data = $payment_result->fetch_assoc();
            $released_amount = $payment_data['total_released'] ?? 0;
        }
        
        // Store in session for later use
        $_SESSION['current_project'] = $project_id;
        $_SESSION['project_name'] = $project_name;
        $_SESSION['developer_name'] = $developer_name;
        $_SESSION['total_bid'] = $total_bid;
        $_SESSION['project_duration'] = $project_duration;
        $_SESSION['released_amount'] = $released_amount;
    } else {
        // Project not found or user doesn't have access
        header("Location: home_client.php");
        exit();
    }
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Release Payment - BidProHub</title>
    <script src="https://cdn.tailwindcss.com"></script>
</head>
<body class="bg-gray-100 font-sans leading-normal tracking-normal">

    <!-- Navbar -->
    <nav class="bg-indigo-900 text-white py-4">
        <div class="w-8/12 mx-auto px-6 flex justify-between items-center">
          <!-- Logo and Tagline Section (Centering the Logo and Tagline) -->
          <div class="flex flex-col items-center">
            <a href="#" class="text-2xl font-semibold">BidProHub</a>
            <p class="text-sm mt-1 text-gray-200 italic">Where Ambitions Meet Opportunities</p>
          </div>
    
          <!-- Navigation Links -->
          <div class="hidden md:flex space-x-8">
            <a href="C:/wamp64/www/BidProHub/index.html" class="text-md font-light hover:text-white text-blue-200 transition duration-300">Home</a>
            <a href="" class="text-md font-light hover:text-white text-blue-200 transition duration-300">Post Projects</a>
            <a href="" class="text-md font-light hover:text-white text-blue-200 transition duration-300">Find Work</a>
            <a href="" class="text-md font-light hover:text-white text-blue-200 transition duration-300">About Us</a>
          </div>
    
          <!-- Mobile Menu Icon (Hamburger) -->
          <div class="md:hidden">
            <button id="mobile-menu-button" class="text-white focus:outline-none">
              <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" class="w-6 h-6">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 6h16M4 12h16M4 18h16"></path>
              </svg>
            </button>
          </div>
        </div>
      </nav>

    <!-- Payment Release Section -->
    <section class="max-w-3xl mx-auto my-10 bg-white p-8 rounded-lg shadow-lg">
        <h1 class="text-2xl font-bold text-indigo-700 mb-4">Release Payment to Developer</h1>

        <!-- Project Summary -->
        <div class="bg-gray-100 p-4 rounded-lg mb-6">
            <h2 class="text-lg font-semibold text-gray-800">Project Details</h2>
            <p class="text-gray-700"><strong>Project:</strong> <?php echo $_SESSION['project_name'] ?? 'AI-Based E-commerce Recommendation System'; ?></p>
            <p class="text-gray-700"><strong>Developer:</strong> <?php echo $_SESSION['developer_name'] ?? 'John Doe'; ?></p>
            <p class="text-gray-700"><strong>Total Bid Amount:</strong> ₹<span id="totalBid"><?php echo $_SESSION['total_bid'] ?? '12000'; ?></span></p>
            <p class="text-gray-700"><strong>Duration:</strong> <span id="duration"><?php echo $_SESSION['project_duration'] ?? '3 Months'; ?></span></p>
        </div>

        <!-- Fund Release Form -->
        <form id="releasePaymentForm" class="space-y-6">
            <!-- Amount to Release -->
            <div>
                <label class="block text-gray-700 font-medium">Enter Amount to Release</label>
                <div class="w-full p-3 border border-gray-300 rounded-lg bg-gray-50">
                    ₹<?php echo number_format($_SESSION['total_bid']); ?>
                </div>
                <input type="hidden" id="releaseAmount" value="<?php echo $_SESSION['total_bid']; ?>">
            </div>

            <!-- Card Details -->
            <div>
                <label class="block text-gray-700 font-medium">Cardholder Name</label>
                <input type="text" id="cardName" placeholder="Enter name on card" class="w-full p-3 border border-gray-300 rounded-lg" required>
            </div>

            <div>
                <label class="block text-gray-700 font-medium">Card Number</label>
                <input type="text" id="cardNumber" placeholder="1234 5678 9012 3456" class="w-full p-3 border border-gray-300 rounded-lg" required>
            </div>

            <div class="flex space-x-4">
                <div class="w-1/2">
                    <label class="block text-gray-700 font-medium">Expiry Date</label>
                    <input type="text" id="expiryDate" placeholder="MM/YY" class="w-full p-3 border border-gray-300 rounded-lg" required>
                </div>
                <div class="w-1/2">
                    <label class="block text-gray-700 font-medium">CVV</label>
                    <input type="text" id="cvv" placeholder="123" class="w-full p-3 border border-gray-300 rounded-lg" required>
                </div>
            </div>

            <!-- Submit Button -->
            <button type="button" onclick="releaseFunds()" class="w-full bg-green-600 text-white py-3 rounded-lg hover:bg-green-700">
                Release Funds
            </button>
        </form>
    </section>

    <script>
        let totalBid = <?php echo $total_bid; ?>;  // Total project cost from database
        let releasedAmount = <?php echo $released_amount; ?>; // Track released amount (kept for validation)
        let projectId = <?php echo $project_id; ?>; // Project ID for the payment

        function releaseFunds() {
            let amountToRelease = parseFloat(document.getElementById("releaseAmount").value);
            let cardNumber = document.getElementById("cardNumber").value;
            let expiryDate = document.getElementById("expiryDate").value;
            let cvv = document.getElementById("cvv").value;

            if (!amountToRelease || amountToRelease <= 0) {
                alert("Enter a valid amount.");
                return;
            }

            if (!cardNumber || !expiryDate || !cvv) {
                alert("Please enter valid card details.");
                return;
            }

            // Update session variable with AJAX
            fetch('process_payment.php', {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded',
                },
                credentials: 'include', // Add this line to include cookies
                body: `project_id=${projectId}&amount=${amountToRelease}`
            })
            .then(response => response.json())
            .then(data => {
                if(data.success) {
                    releasedAmount += amountToRelease;
                    // Removed updating the display of released amount
                    alert(`₹${amountToRelease} successfully released to the developer!`);
                    
                    // Redirect back to project page if payment is complete
                    if (releasedAmount >= totalBid) {
                        window.location.href = `project_communication.php?id=${projectId}&payment=complete`;
                    }
                } else {
                    alert('Error processing payment: ' + (data.message || 'Unknown error'));
                }
            })
            .catch(error => {
                console.error('Error:', error);
                alert('Error processing payment. Please try again.');
            });
            
            // You can integrate a real payment API like Stripe here.
        }
    </script>

    <script>
        window.addEventListener('beforeunload', function() {
            fetch('destroy_session.php', {
                method: 'POST',
                keepalive: true
            });
        });
    </script>
</body>
</html>