View file public_html/vipadz/cancel.php

<?php

include '../db.php';
include '../functions.php';

headtag("$SiteName - Cancel Invoice");

if($adminlog==1){

 $vid=formget("id");
   $date=date("d-m-Y");

 if(isset($_POST["reason"])){
 $reason=formpost("reason");
$arshad = mysql_query("SELECT * FROM invoice WHERE id='$vid'");
$saifi = mysql_fetch_array($arshad);
$checkme=$saifi["status"];
if($checkme=="<font color='red'>Pending</font>")
{
 $doit=mysql_query("UPDATE invoice SET status='<font color=\'red\'>Cancelled</font>' WHERE id='$vid'");
 $doit1=mysql_query("UPDATE invoice SET reject='$reason' WHERE id='$vid'");
}
else if($checkme=="<font color='red'>Cancelled</font>")
{
echo "<div class='error'>This Payment Is Already Cancelled.</div>";
}
else
{
echo "<div class='error'>This Payment Is Already Paid.</div>";
}


 if($doit){
   $get_use=mysql_query("SELECT * FROM invoice WHERE id='$vid'");
   $get_us=mysql_fetch_array($get_use);
   $uid=$get_us["userid"];
   $amt=$get_us["amount"];
   $method=$get_us["method"];
   $via=$get_us["via"];
   $ope=$get_us["operator"];
   $name=$get_us["name"];
   $bank=$get_us["bankname"];
   $ifsc=$get_us["ifsccode"];
   $get_u=mysql_query("SELECT * FROM userdata WHERE id='$uid'");
   $get_user=mysql_fetch_array($get_u);
   $emailz=$get_user["email"];
   $mobile=$get_user["verimobile"];
   $username=$get_user["username"];
   $newbal=$get_user["pubalance"];
   $adbal=($newbal+$get_us["amount"]);
   mysql_query("UPDATE userdata SET pubalance='$adbal' WHERE id='$uid'");
   echo '<div class="error">Payment Cancelled!</div>';
 }
 else {
  echo 'Unknown error';
 }
   }
  echo '<form method="post">Reason:<br/><input type="text" name="reason"/><br/><input type="submit" value="Cancel"/></form>';
echo '<a href="unpayinvo.php"><div class="ua">HOME</div></a>'; 

 include '../foot.php';

 }
 else {
 header('Location:login.php');
 }
?>