/credit/index.php

<?php
require($_SERVER["DOCUMENT_ROOT"]."/bitrix/header.php");
$APPLICATION->SetTitle("Подтверждение кредита");
$db = mysql_connect('localhost', 'citrus_store', 'vSpYAxRujDfNtneX11a');
	mysql_select_db('citrus_store', $db);	
	mysql_query ("set character_set_client='cp1251'");
	mysql_query ("set character_set_results='cp1251'");
	mysql_query ("set collation_connection='cp1251_general_ci'");
	

$arGroups = CUser::GetUserGroup($USER->GetID());
//print_r($arGroups);
$flgr=0;
for ($i=0; $i < count($arGroups); $i++)
{
	if ($arGroups[$i] == 1){$flgr=1;}
	if ($arGroups[$i] == 12){$flgr=1;}
	if ($arGroups[$i] == 1){$flgr=1;}	
}
//$flgr=1;
if ($flgr==1)
{

echo "<div style=\"margin-top:50px;\">";
	
//if ($_POST['id_order']=="" AND $_POST['faktura']==""){
?>
<form action="" method="POST">
<p>Введите ID заказа: <input type="text" size="6" name="id_order"></p>
<p><input type="submit" value="Найти"></p>
</form>
<br /><br />
<?
//}
//-----------------------------------------------------------------------------------------------
if ($_POST['id_order'] > 0 AND $_POST['faktura']=="")
{

$sql="SELECT ID FROM b_sale_order WHERE (ID=".$_POST['id_order'].")";
$result = mysql_query($sql, $db);
while ($r = mysql_fetch_array($result))
{
	$id_ord=$r['ID'];
}
echo "<table border=\"0\" width=\"100%\">";
echo "<tr><td valign=\"top\" width=\"50%\">";
echo "<table>";
echo "<tr><td align=\"right\">ID заказа</td><td align=\"left\">&nbsp;&nbsp;".$id_ord."</td></tr>";
$sql="SELECT * FROM `b_sale_order_props_value` WHERE (`ORDER_ID`=".$id_ord.") ORDER BY `ORDER_PROPS_ID`";
$result = mysql_query($sql, $db);
while ($r = mysql_fetch_array($result))
{
	echo "<tr><td align=\"right\">".$r['NAME']."</td><td valign=\"left\">&nbsp;&nbsp;".$r['VALUE']."</td></tr>";
}
	
echo "</table></td><td valign=\"top\">";

$sql="SELECT status FROM b_credit WHERE (ORDER_ID=".$id_ord.")";
$result = mysql_query($sql, $db);
while ($r = mysql_fetch_array($result))
{
	$st=$r['status'];
}

if ($st==0)
{
?>
<form method="POST" name="contact" action="">
<table id="table_form" name="table_form">
	<tr><td class="left">№ счета</td><td><input type="text" name="faktura" id="faktura"/></td></tr>		
	<tr><td>Дата<br />в формате ДД.ММ.ГГГГ</td><td>		
<?$today = date("d.m.Y");?>
	<input type="text" name="data" id="data" Value="<?=$today?>" />

			</td></tr>
		<input type="hidden" name="id_order" Value="<?=$id_ord?>"/>
	<tr><td></td><td><input type="submit" value="Отправить заявку"></td></tr>
</table>			
</form>

<?
}
	if ($st==1){echo "Заявка в ожидании.";}
	if ($st==2){echo "Заявка отправлена.";}
	
	
	if ($st==5){echo "Ошибка оформления кредитной заявки!.";}
	if ($st==4){echo "Кредит отклонен. Предложите клиенту другой метод оплаты";}
	
	
	if ($st==3){
		//--------------------------------------------------------- КРЕДИТ РАЗРЕШЕН!!!
		echo "Кредит разрешен.";
		
		$sql="SELECT * FROM b_credit WHERE (ORDER_ID=".$id_ord.")";
		$result = mysql_query($sql, $db);
		while ($r = mysql_fetch_array($result))
		{
			//echo $r['doc_url']."<br />";
			echo "<br /><br /><p>".$r['doc_url']."</p>";
			
		}



		//-------------------------------------------------------------------------------------------------------
		
		
		
		
		
	}
	
	
	
	
		if ($st!=6){
		?><br /><br /><br /><br /><br /><br /><br /><br />
<form method="POST" name="contact" action="den.php">
Для аннулирования кредитной заявки напишите в поле *аннулировать*<br />
<input type="text" name="den" id="den"/><br />
<input type="hidden" name="id_order" Value="<?=$id_ord?>"/>
<input type="submit" value="Аннулировать">
</form><?
}
if ($st==6){
echo "Заявка аннулирована.";
}
	
	
echo "</td></tr></table>";
}
//-----------------------------------------------------------------------------------

if ($_POST['id_order'] > 0 AND $_POST['faktura']!="")
{

$sql="UPDATE b_credit set `status`=1 WHERE (`ORDER_ID`=".$_POST['id_order'].")";
mysql_query($sql, $db);

$sql="UPDATE b_sale_order set `STATUS_ID`='O' WHERE (`ID`=".$_POST['id_order'].")";
mysql_query($sql, $db);

$sql="UPDATE b_credit set `billnum`='".$_POST['faktura']."' WHERE (`ORDER_ID`=".$_POST['id_order'].")";
mysql_query($sql, $db);

$sql="UPDATE b_credit set `billdate`='".$_POST['data']."' WHERE (`ORDER_ID`=".$_POST['id_order'].")";
mysql_query($sql, $db);


echo "<p>Заказ №".$_POST['id_order']." поставлен на отправку в банк.</p>";


/*
$sql="SELECT ID FROM b_sale_order WHERE (ID=".$_POST['id_order'].")";
$result = mysql_query($sql, $db);
while ($r = mysql_fetch_array($result))
{
	$id_ord=$r['ID'];
}
echo "<table border=\"0\" width=\"100%\">";
echo "<tr><td valign=\"top\" width=\"50%\">";
echo "<table>";
echo "<tr><td align=\"right\">ID заказа</td><td align=\"left\">&nbsp;&nbsp;".$id_ord."</td></tr>";
$sql="SELECT * FROM `b_sale_order_props_value` WHERE (`ORDER_ID`=".$id_ord.") ORDER BY `ORDER_PROPS_ID`";
$result = mysql_query($sql, $db);
while ($r = mysql_fetch_array($result))
{
	echo "<tr><td align=\"right\">".$r['NAME']."</td><td valign=\"left\">&nbsp;&nbsp;".$r['VALUE']."</td></tr>";
}
	
echo "</table></td><td valign=\"top\">";

$sql="SELECT status FROM b_credit WHERE (ORDER_ID=".$id_ord.")";
$result = mysql_query($sql, $db);
while ($r = mysql_fetch_array($result))
{
	$st=$r['status'];
}

if ($st==0)
{
?>
<form method="POST" name="contact" action="">
<table id="table_form" name="table_form">
	<tr><td class="left">№ счета</td><td><input type="text" name="faktura" id="faktura"/></td></tr>		
	<tr><td>Дата<br />в формате ДД.ММ.ГГГГ</td><td>		
<?$today = date("m.d.Y");?>
	<input type="text" name="data" id="data" Value="<?=$today?>" />

			</td></tr>
		<input type="hidden" name="id_order" Value="<?=$id_ord?>"/>
	<tr><td></td><td><input type="submit" value="Отправить заявку"></td></tr>
</table>			
</form>


<?
}
if ($st==1){echo "Заявка в ожидании.";}
	if ($st==2){echo "Заявка отправлена.";}
echo "</td></tr></table>";


*/




}
//--------------------------------------------------------------------------------

echo "</div>";
}
?> 
<?php require($_SERVER["DOCUMENT_ROOT"]."/bitrix/footer.php"); ?>