1#@!#!123s

: / home3 / encodto1 / siliguritoys.com / slgadmintoys /

Filename : update_order_status.php

back

<?php
include 'config.php';

if (isset($_GET['id']) && isset($_GET['status'])) {
    $order_id = mysqli_real_escape_string($conn, $_GET['id']);
    $status = mysqli_real_escape_string($conn, $_GET['status']);
    
    // Validate status
    if (!in_array($status, ['approved', 'rejected'])) {
        die("Invalid status");
    }
    
    $query = "UPDATE orders SET status = '$status' WHERE id = '$order_id'";
    
    if (mysqli_query($conn, $query)) {
        // Redirect back with success message
        header("Location: ".$_SERVER['HTTP_REFERER']."?success=Status updated successfully");
        exit();
    } else {
        die("Error updating status: " . mysqli_error($conn));
    }
} else {
    die("Invalid request");
}
?>