Viewing File: /home/quiczmwg/bitmaven.org/withdrawal_process.php

<?php
// Start the session
session_start();

// Check if the 'userid' session is not set
if (!isset($_SESSION['userid'])) {
    header("Location: ./login.php");
    exit();
}

// Include database connection and other necessary files
include_once('_db.php');

// Set the user ID from the session variable
$userid = $_SESSION['userid'];

// Check if form data is submitted
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // Retrieve user ID
    $userid = $_POST['userid'];

    // Retrieve withdrawal amount and convert it to a float
    $withdrawalAmount = floatval($_POST['amount']);
    $walletAddress = $_POST['wallet_address'];

    // Log input values for debugging
    error_log("User ID: $userid, Amount: $withdrawalAmount, Wallet: $walletAddress");

    // Query to retrieve user's account balance
    $stmt = $conn->prepare("SELECT account_balance FROM user_login WHERE userid = ?");
    $stmt->bind_param("s", $userid);
    $stmt->execute();
    $result = $stmt->get_result();
    $row = $result->fetch_assoc();

    // Check if withdrawal amount is greater than account balance
    if ($withdrawalAmount > $row['account_balance']) {
        // Insufficient balance, set error message in session
        $_SESSION['withdrawal_error'] = "Insufficient balance. Please enter an amount less than or equal to your account balance.";
    } else {
        // Sufficient balance, proceed with withdrawal process

        // Start a transaction
        $conn->begin_transaction();

        try {
            // Insert withdrawal details into the database
            $wid = uniqid(); // Generate a unique withdrawal ID
            
            $stmt = $conn->prepare("INSERT INTO withdrawals (wid, userid, wallet_address, amount) VALUES (?, ?, ?, ?)");
            $stmt->bind_param("ssss", $wid, $userid, $walletAddress, $withdrawalAmount);
            if (!$stmt->execute()) {
                throw new Exception("Error inserting withdrawal: " . $stmt->error);
            }

            // Deduct withdrawal amount from account balance
            $newAccountBalance = $row['account_balance'] - $withdrawalAmount;
            $stmt = $conn->prepare("UPDATE user_login SET account_balance = ? WHERE userid = ?");
            $stmt->bind_param("ss", $newAccountBalance, $userid);
            if (!$stmt->execute()) {
                throw new Exception("Error updating account balance: " . $stmt->error);
            }

            // Commit the transaction
            $conn->commit();

            // Set success message in session
            $_SESSION['withdrawal_success'] = "Withdrawal request submitted successfully. $withdrawalAmount USD will be sent to your wallet address: $walletAddress after confirmation.";
        } catch (Exception $e) {
            // Rollback the transaction on error
            $conn->rollback();
            // Set error message in session
            $_SESSION['withdrawal_error'] = "Error processing withdrawal: " . $e->getMessage();
        }
    }
}

// Redirect back to withdraw.php
header("Location: withdraw.php");
exit();
?>