location.href='login.php';";
exit;
}
$user_id = $_SESSION['user_id'];
$pdo = db();
// Fetch user info
$stmt = $pdo->prepare("SELECT uid, username FROM users WHERE id = ?");
$stmt->execute([$user_id]);
$user = $stmt->fetch();
// Check if there's an active deposit/withdrawal process
$stmt = $pdo->prepare("SELECT * FROM fiat_orders WHERE user_id = ? AND status IN ('matching', 'matched', 'paid') ORDER BY id DESC LIMIT 1");
$stmt->execute([$user_id]);
$active_order = $stmt->fetch();
$is_locked = (bool)$active_order;
// Action to complete transfer/submission
if (isset($_GET['action']) && $_GET['action'] === 'complete_order' && $active_order) {
$stmt = $pdo->prepare("UPDATE fiat_orders SET status = 'paid' WHERE id = ?");
$stmt->execute([$active_order['id']]);
$type_text = ($active_order['order_type'] === 'deposit') ? "充值" : "提现";
$msg = "✅ 用户已点击确认,$type_text 申请等待审核中。";
$stmt = $pdo->prepare("INSERT INTO messages (user_id, sender, message) VALUES (?, 'user', ?)");
$stmt->execute([$user_id, $msg]);
header("Location: chat.php");
exit;
}
// Fetch greeting message
$stmt = $pdo->prepare("SELECT value FROM settings WHERE name = 'chat_greeting'");
$stmt->execute();
$greeting = $stmt->fetchColumn() ?: '您好！欢迎咨询 NovaEx 官方客服，请问有什么可以帮您？如果是充值咨询，请提供您的充值金额和币种。';
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['message'])) {
$msg = trim($_POST['message']);
if ($msg !== '') {
$stmt = $pdo->prepare("INSERT INTO messages (user_id, sender, message) VALUES (?, 'user', ?)");
$stmt->execute([$user_id, $msg]);
echo json_encode(['success' => true]);
}
exit;
}
?>