Edit

[EDIT] FILE: pay.php

<?php
session_start();
if (isset($_SESSION['logged_user']) == true) {
   $user = $_SESSION['logged_user'];
   include_once('php/Crypto.php');
   include_once("includes/db.php");
   $ob = new database();
   $orderDetails = [];
   $f_price = 0;
   $final_price = 0;
   $total = 0;
   $merchant_data = '';
   $user__id = '';
   $order_id = "";

if (isset($_SESSION['logged_in_id'])) {
		$session_id = $_SESSION['logged_in_id'];
	}else{
	    $session_id = "";
	}

if ($session_id) {
      $user = $session_id;
      $ob->query("SELECT * FROM cart WHERE user_id='$user'");
   } else {
      $user = $_SESSION['user'];
      $ob->query("SELECT * FROM cart WHERE user='$user'");
   }

if ($ob->affected_rows() >= 1) {
      foreach ($ob->rows() as $data) {
         $price = 0;
         $name = 0;
         $qty = $data['qty'];
         $order_id = $data['user'];
         $user__id = $data['user_id'];
         $discount = $data['percent'];
         $disc_amt = $data['disc_amt'];

$ob->query("SELECT * FROM `product` WHERE id='$data[product]'");
         if ($ob->affected_rows() >= 1) {
            foreach ($ob->rows() as $pro) {
               $name = $pro['title'];
               $price = $pro['price'];
            }
         }
         if ($data['size']) {
            $ob->query("SELECT * FROM `size` WHERE id='$data[size]'");
            if ($ob->affected_rows() >= 1) {
               foreach ($ob->rows() as $size) {
                  $name .= " + Size:" . $size['size'];
                  $price = $price + $size['price'];
               }
            }
         }
         $orderDetails['name'][] = $name;
         $orderDetails['price'][] = $price;
         $orderDetails['qty'][] = $qty;
         $f_price += $price;
         $final_price = $final_price + ($price * $qty);
         
         if($discount>0){
            $disc = $final_price * $discount / 100;
         }else{
            $disc = $disc_amt;
         }
      }
      // echo 'success.php?user='.$data['user'].'<br />';

echo '<pre>';

$gst1 = 0;
      if ($final_price > 1999) {
         $gst1 = 0;
      } else {
         $gst1 = 99;
      }
      $total = round($final_price + $gst1 - $disc);
      // $total = 1;
      echo $total;
      echo '</pre>';
   }
} else {
   header("Location:logout.php");
}
?>
<center>
   <?php
   $user_name = "";
   $email = "";
   $mobile = "";
   $address = "";
   $pincode = "";
   $ob->query("SELECT * FROM `user_detail` WHERE id=$user__id");
   if ($ob->affected_rows() >= 1) {
      foreach ($ob->rows() as $user) {
         $user_name = $user['name'];
         $email = $user['email'];
         $mobile = $user['mobile'];
         $address = $user['address'];
         $pincode = $user['pincode'];
      }
   }
   $merchant_data .= "billing_name=$user_name&";
   $merchant_data .= "billing_address=$address&";
   $merchant_data .= "billing_state=UP&";
   $merchant_data .= "billing_zip=$pincode&";
   $merchant_data .= "billing_country=INDIA&";
   $merchant_data .= "billing_tel=$mobile&";
   $merchant_data .= "billing_email=$email&";
   $merchant_data .= "amount=$total&";
   $merchant_data .= "merchant_id= 2289389&";
   $merchant_data .= "language=EN&";
   $merchant_data .= "currency=INR&";
   $merchant_data .= "redirect_url=https://saumasale.in/ccavResponseHandler.php?user=$order_id&";
   $merchant_data .= "cancel_url=https://saumasale.in/ccavResponseHandler.php?user=$order_id&";
   $merchant_data .= "merchant_param1=Website Payment&";
   $merchant_data .= "order_id=$order_id&";
   $working_key = '02FB213A2883FAC31DFA48C2B784DF27';
   $access_code = 'AVBI48KD20AQ31IBQA';
   $encrypted_data = encrypt($merchant_data, $working_key); // Method for encrypting the data.
   ?>
   <form method="post" name="redirect"
      action="https://secure.ccavenue.com/transaction/transaction.do?command=initiateTransaction">
      <?php
      echo "<input type=hidden name=encRequest value=$encrypted_data>";
      echo "<input type=hidden name=access_code value=$access_code>";
      ?>
   </form>
</center>
<script language='javascript'>
   document.redirect.submit();
</script>

CANCEL