'];
if ((getSetting('gateway_card_enabled') ?? '1') === '1') $availableMethods['card'] = ['title' => '银行卡支付', 'desc' => 'Apple Pay / VISA / MASTER', 'icon' => '
'];
if ((getSetting('gateway_alipay_enabled') ?? '0') === '1') $availableMethods['alipay'] = ['title' => 'Stripe支付宝', 'desc' => 'Alipay via Stripe', 'icon' => ''];
if (empty($availableMethods)) $availableMethods['usdt'] = ['title' => 'USDT支付', 'desc' => 'TRC20 链自动入账', 'icon' => ''];
if ($is_post) {
$payment_method = trim($_POST['payment_method'] ?? '');
if (!isset($availableMethods[$payment_method])) {
$error = '请选择有效支付方式';
goto render;
}
$uid = (int)$_SESSION['user_id'];
$chk_user = $pdo->prepare("SELECT id FROM users WHERE id = ?");
$chk_user->execute([$uid]);
if (!$chk_user->fetch()) {
session_unset(); session_destroy();
header('Location: /login.php?err=session_expired'); exit;
}
$order_number = generateOrderNumber(strtoupper($type));
if ($type === 'esim') {
$euicc_id = null;
$raw_euicc = intval($_POST['euicc_id'] ?? 0);
if ($raw_euicc > 0) {
$eu_chk = $pdo->prepare("SELECT id FROM euniccs WHERE id = ? AND user_id = ?");
$eu_chk->execute([$raw_euicc, $uid]);
if ($eu_chk->fetch()) $euicc_id = $raw_euicc;
}
$stmt = $pdo->prepare("INSERT INTO orders (user_id, package_id, order_number, amount, status, payment_method, euicc_id, created_at) VALUES (?, ?, ?, ?, 'pending', ?, ?, NOW())");
$stmt->execute([$uid, $id, $order_number, $total, $payment_method, $euicc_id]);
} elseif ($type === 'phone') {
$stmt = $pdo->prepare("INSERT INTO phone_orders (user_id, package_id, order_number, amount, status, payment_method, created_at) VALUES (?, ?, ?, ?, 'pending', ?, NOW())");
$stmt->execute([$uid, $id, $order_number, $total, $payment_method]);
} elseif ($type === 'phone_multi') {
foreach ($multi_pkgs as $mp) {
$sub_order = generateOrderNumber('PHN');
$stmt_mp = $pdo->prepare("INSERT INTO phone_orders (user_id, package_id, order_number, amount, status, payment_method, created_at) VALUES (?, ?, ?, ?, 'pending', ?, NOW())");
$stmt_mp->execute([$uid, $mp['id'], $sub_order, (float)$mp['price'], $payment_method]);
}
$order_number = generateOrderNumber('PHN');
} elseif ($type === 'device') {
$use_saved = intval($_POST['use_saved_address'] ?? 0);
if ($use_saved) {
$u_row = getCurrentUser();
$ship_name = $u_row['real_name'] ?? $u_row['email'] ?? ''; $ship_phone = $u_row['phone'] ?? '';
$ship_province = $u_row['province'] ?? ''; $ship_city = $u_row['city'] ?? '';
$ship_zip = $u_row['zip'] ?? ''; $ship_address = $u_row['address'] ?? '';
} else {
$ship_name = trim($_POST['ship_name'] ?? ''); $ship_phone = trim($_POST['ship_phone'] ?? '');
$ship_province = trim($_POST['ship_province'] ?? ''); $ship_city = trim($_POST['ship_city'] ?? '');
$ship_zip = trim($_POST['ship_zip'] ?? ''); $ship_address = trim($_POST['ship_address'] ?? '');
}
if (!$ship_name || !$ship_address) { $error = '请填写完整的收货地址信息（姓名、地址为必填）'; goto render; }
$dev_amount = max(0, $amount - $shipping_fee - $discountAmount);
$stmt = $pdo->prepare("INSERT INTO device_orders (user_id, order_number, amount, shipping_fee, total_amount, status, payment_method, ship_name, ship_phone, ship_province, ship_city, ship_zip, ship_address, created_at) VALUES (?, ?, ?, ?, ?, 'pending', ?, ?, ?, ?, ?, ?, ?, NOW())");
$stmt->execute([$uid, $order_number, $dev_amount, $shipping_fee, $total, $payment_method, $ship_name, $ship_phone, $ship_province, $ship_city, $ship_zip, $ship_address]);
$order_id = (int)$pdo->lastInsertId();
foreach ($devices as $d) {
$ins = $pdo->prepare("INSERT INTO device_order_items (device_order_id, device_id, quantity, price) VALUES (?, ?, 1, ?)");
$ins->execute([$order_id, $d['id'], $d['price']]);
}
}
try {
$pdo->exec("CREATE TABLE IF NOT EXISTS billing_invoices (
id INT AUTO_INCREMENT PRIMARY KEY,
user_id INT NOT NULL,
invoice_number VARCHAR(50) NOT NULL,
related_type VARCHAR(30) DEFAULT NULL,
related_id INT DEFAULT NULL,
order_number VARCHAR(50) DEFAULT NULL,
title VARCHAR(255) NOT NULL,
subtotal DECIMAL(10,2) NOT NULL DEFAULT 0.00,
discount_amount DECIMAL(10,2) NOT NULL DEFAULT 0.00,
tax_amount DECIMAL(10,2) NOT NULL DEFAULT 0.00,
total_amount DECIMAL(10,2) NOT NULL DEFAULT 0.00,
paid_amount DECIMAL(10,2) NOT NULL DEFAULT 0.00,
payment_method VARCHAR(30) DEFAULT NULL,
status VARCHAR(30) NOT NULL DEFAULT 'unpaid',
due_date DATETIME DEFAULT NULL,
paid_at DATETIME DEFAULT NULL,
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
UNIQUE KEY uniq_invoice_number (invoice_number)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4");
$invoiceStmt = $pdo->prepare("INSERT INTO billing_invoices (user_id, invoice_number, related_type, order_number, title, subtotal, discount_amount, total_amount, payment_method, status, due_date, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 'unpaid', DATE_ADD(NOW(), INTERVAL 1 DAY), NOW(), NOW())");
$invoiceStmt->execute([$uid, generateOrderNumber('INV'), $type, $order_number, '订单结算 - ' . $type, $amount + $shipping_fee, $discountAmount, $total, $payment_method]);
} catch (Throwable $e) {}
if ($promoApplicable && $promoData) {
try {
$pdo->prepare("UPDATE promo_codes SET used_count = used_count + 1 WHERE id = ?")->execute([$promoData['id']]);
} catch (Throwable $e) {}
}
try {
$user = getCurrentUser();
sendTemplateMail('order_placed', $user['email'], [
'order_number' => $order_number,
'amount' => '$' . number_format($total, 2) . ' USD',
'username' => $user['email'],
], true);
} catch (Exception $e) {}
if ($payment_method === 'usdt') header("Location: /pay-usdt.php?order=" . urlencode($order_number) . "&type=" . urlencode($type));
elseif ($payment_method === 'wechat') header("Location: /stripe-paywechat.php?order=" . urlencode($order_number) . "&type=" . urlencode($type));
elseif ($payment_method === 'card') header("Location: /stripe-paycard.php?order=" . urlencode($order_number) . "&type=" . urlencode($type));
elseif ($payment_method === 'alipay') header("Location: /stripe-payalipay.php?order=" . urlencode($order_number) . "&type=" . urlencode($type));
else header("Location: /user/esim-orders.php");
exit;
}
render:
$u = getCurrentUser();
require_once __DIR__ . '/includes/header.php';
?>