PageRenderTime 44ms CodeModel.GetById 15ms RepoModel.GetById 1ms app.codeStats 0ms

/wp-content/plugins/wp-shopping-cart/display-items.php

http://cartonbank.googlecode.com/
PHP | 1189 lines | 937 code | 163 blank | 89 comment | 216 complexity | 39d0773d488d2d2652cc63ce0566d9e4 MD5 | raw file
Possible License(s): GPL-3.0, GPL-2.0, LGPL-2.1, AGPL-1.0, LGPL-3.0

Large files files are truncated, but you can click here to view the full file

    

  1. <style>

    2. 

  2. .tdc2{

    3. 

  3. 	text-align:center; 

    4. 

  4. 	line-height:1em;

    5. 

  5. 	background-color:#FFFFFF; 

    6. 

  6. 	padding:2px;

    7. 

  7. }

    8. 

  8. td.r{

    9. 

  9. 	text-align: right;

    10. 

  10. 	vertical-align: top;

    11. 

  11. 	width: 150px;

    12. 

  12. }

    13. 

  13. td.ralt{

    14. 

  14. 	text-align: right;

    15. 

  15. 	background-color:#FFFF00;

    16. 

  16. 	vertical-align: top;

    17. 

  17. }

    18. 

  18. td.lalt{

    19. 

  19. 	text-align: left;

    20. 

  20. 	background-color:#FFFF00;

    21. 

  21. 	vertical-align: top;

    22. 

  22. }

    23. 

  23. </style>

    24. 

  24. <?php 

    25. 

  25.     // Filter for authors

    26. 

  26.     // pokazh($current_user->wp_capabilities['author'],"wp_capabilities"); // ????? 

    27. 

  27.     // pokazh($current_user->wp_capabilities['administrator'],"wp_capabilities"); ?????

    28. 

  28. 

    29. 

  29.     global $user_brand;

    30. 

  30. 

    31. 

  31.     $_SITEURL = get_option('siteurl');

    32. 

  32. 

    33. 

  33.     if (isset($current_user->ID) && is_numeric($current_user->ID))

    34. 

  34.     {

    35. 

  35.         $user_id = $current_user->ID;

    36. 

  36.         $sql = "SELECT * FROM `wp_product_brands` where user_id=".$user_id;

    37. 

  37.         $user_brand = $wpdb->get_results($sql,ARRAY_A);

    38. 

  38.     }

    39. 

  39. 

    40. 

  40.     if (isset($user_brand[0]['id']))

    41. 

  41.     {

    42. 

  42.         $user_brand = $user_brand[0]['id'];

    43. 

  43.     } 

    44. 

  44.     else

    45. 

  45.     {

    46. 

  46.         $user_brand = 0;

    47. 

  47.     }

    48. 

  48. 

    49. 

  49.     $author_group_sql = " AND `wp_product_list`.`brand` = '".$user_brand."' ";

    50. 

  50. 

    51. 

  51.     if (isset($current_user->wp_capabilities['administrator']))

    52. 

  52.     {

    53. 

  53.         $author_group_sql = "";

    54. 

  54.     }

    55. 

  55.     if (isset($current_user->wp_capabilities['editor']))

    56. 

  56.     {

    57. 

  57.         $author_group_sql = "";

    58. 

  58.     }

    59. 

  59. 

    60. 

  60. 

    61. 

  61.     $category_data = null;

    62. 

  62.     $basepath = str_replace("/wp-admin", "" , getcwd()); 

    63. 

  63.     $basepath = str_replace("\\wp-admin", "" , $basepath);

    64. 

  64. 

    65. 

  65.     $imagedir = $basepath."/wp-content/plugins/wp-shopping-cart/images/";

    66. 

  66.     $product_images = $basepath."/wp-content/plugins/wp-shopping-cart/product_images/";

    67. 

  67.     $filedir = $basepath."/wp-content/plugins/wp-shopping-cart/files/";

    68. 

  68. 

    69. 

  69.     $preview_clips_dir = $basepath."/wp-content/plugins/wp-shopping-cart/preview_clips/";

    70. 

  70.     $image = '';

    71. 

  71.     global $authors;

    72. 

  72. 

    73. 

  73.     // update preview

    74. 

  74.     if (isset($_GET['updateimage']))

    75. 

  75.     {

    76. 

  76. 

    77. 

  77.         $id = $_GET['updateimage'];

    78. 

  78.         $fileid_data = $wpdb->get_results("SELECT `file` FROM `wp_product_list` WHERE `id` = '$id' LIMIT 1",ARRAY_A);

    79. 

  79.         $fileid = $fileid_data[0]['file'];

    80. 

  80.         $file_data = $wpdb->get_results("SELECT * FROM `wp_product_files` WHERE `id` = '$fileid' LIMIT 1",ARRAY_A);

    81. 

  81.         $idhash = $file_data[0]['idhash'];

    82. 

  82. 

    83. 

  83. 

    84. 

  84.         if (file_exists($filedir.$idhash))

    85. 

  85.         {

    86. 

  86.             $mimetype = $file_data[0]['mimetype'];

    87. 

  87.             $filename = $file_data[0]['filename'];

    88. 

  88. 

    89. 

  89.             $height = get_option('product_image_height');

    90. 

  90.             $width  = get_option('product_image_width');

    91. 

  91. 

    92. 

  92.             $imagedir = $basepath."/wp-content/plugins/wp-shopping-cart/images/";

    93. 

  93.             $product_images = $basepath."/wp-content/plugins/wp-shopping-cart/product_images/";

    94. 

  94.             $filedir = $basepath."/wp-content/plugins/wp-shopping-cart/files/";

    95. 

  95. 

    96. 

  96.             copy($filedir.$idhash, $imagedir.$filename); // icon

    97. 

  97.             copy($filedir.$idhash, $product_images.$filename); // preview

    98. 

  98. 

    99. 

  99.             $imgsize = getimagesize($product_images.$filename);

    100. 

  100.             $file_w = $imgsize[0];

    101. 

  101.             $file_h = $imgsize[1];

    102. 

  102. 

    103. 

  103.             //ales here we replace slides to that from LG

    104. 

  104.             $chwidth = get_option('lg_pictwidth'); // crop size

    105. 

  105.             $chheight = get_option('lg_pictheight'); // crop size

    106. 

  106.             //$thatdir = $product_images; //destination dir

    107. 

  107.             $ifolder = ''; //subfolder for artist

    108. 

  108.             $file = $filename; //

    109. 

  109.             $resample_quality = 100; //image quality

    110. 

  110. 

    111. 

  111.             // slide

    112. 

  112.             al_create_resized_file($chwidth, $chheight, $product_images, $ifolder, $file, $resample_quality);    

    113. 

  113. 

    114. 

  114.             // watremark

    115. 

  115.             $wm = $basepath."/img/watermark.png";

    116. 

  116.             wtrmark($product_images.$file,$wm);

    117. 

  117. 

    118. 

  118.             // icon

    119. 

  119.             al_create_cropped_file(140, 140, $imagedir, $ifolder, $file, $resample_quality);      

    120. 

  120.         }

    121. 

  121.         else

    122. 

  122.         {

    123. 

  123.             echo "<div class='error'><b>WARNING:</b> original file is not found at: ".$filedir.$idhash." <br /></div>";

    124. 

  124.         }

    125. 

  125.     }

    126. 

  126. 

    127. 

  127.     // add product

    128. 

  128.     if(isset($_POST['submit_action']) && $_POST['submit_action'] == 'add') {

    129. 

  129. 

    130. 

  130.         if($_FILES['file']['name'] != null)  {

    131. 

  131. 

    132. 

  132.             //upload_and_resize_and_watermark_images();    

    133. 

  133. 

    134. 

  134.             //transliterate file

    135. 

  135.             $_FILES['file']['name'] = rus2translit($_FILES['file']['name']); 

    136. 

  136.             //rename the file  

    137. 

  137.             $_FILES['file']['name'] = uniqid('', true).$_FILES['file']['name'];

    138. 

  138.             //ales default upload

    139. 

  139.             if(!is_dir($product_images))

    140. 

  140.             {

    141. 

  141.                 mkdir($product_images);

    142. 

  142.             }

    143. 

  143.             if(function_exists("getimagesize"))

    144. 

  144.             {

    145. 

  145.                 switch(isset($_POST['image_resize']) && $_POST['image_resize'])

    146. 

  146.                 {

    147. 

  147.                     case 2:

    148. 

  148.                         $height = $_POST['height'];

    149. 

  149.                         $width  = $_POST['width'];

    150. 

  150.                         break;

    151. 

  151. 

    152. 

  152.                     default:

    153. 

  153.                         $height = get_option('product_image_height');

    154. 

  154.                         $width  = get_option('product_image_width');

    155. 

  155.                         break;

    156. 

  156.                 }

    157. 

  157.                 copy($_FILES['file']['tmp_name'], $product_images.$_FILES['file']['name']);

    158. 

  158.                 copy($_FILES['file']['tmp_name'], $imagedir.$_FILES['file']['name']);

    159. 

  159. 

    160. 

  160.                 $imgsize = getimagesize($product_images.$_FILES['file']['name']);

    161. 

  161.                 $file_w = $imgsize[0];

    162. 

  162.                 $file_h = $imgsize[1];

    163. 

  163. 

    164. 

  164.                 //ales here we replace slides to that from LG

    165. 

  165.                 $chwidth = get_option('lg_pictwidth'); // crop size

    166. 

  166.                 $chheight = get_option('lg_pictheight'); // crop size

    167. 

  167.                 $thatdir = $product_images; //destination dir

    168. 

  168.                 $ifolder = ''; //subfolder for artist

    169. 

  169.                 $file = $_FILES['file']['name']; //

    170. 

  170.                 $resample_quality = 100; //image quality

    171. 

  171. 

    172. 

  172.                 al_create_resized_file($chwidth, $chheight, $thatdir, $ifolder, $file, $resample_quality);    

    173. 

  173.                 $wm = $basepath."/wp-content/plugins/wp-shopping-cart/images/watermark.png";

    174. 

  174.                 wtrmark($thatdir.$file,$wm);

    175. 

  175. 

    176. 

  176.                 // ales here we replace thumbs to that from LG 

    177. 

  177.                 $chwidth = $width; // crop size

    178. 

  178.                 $chheight = $height; // crop size

    179. 

  179.                 $thatdir = $imagedir; //destination dir

    180. 

  180. 

    181. 

  181.                 al_create_cropped_file($chwidth, $chheight, $thatdir, $ifolder, $file, $resample_quality);      

    182. 

  182.                 $image = $wpdb->escape($_FILES['file']['name']);

    183. 

  183. 

    184. 

  184.                 /// ales 

    185. 

  185.             }

    186. 

  186.             else {

    187. 

  187.                 move_uploaded_file($_FILES['file']['tmp_name'], ($imagedir.$_FILES['file']['name']));

    188. 

  188.                 $image = $wpdb->escape($_FILES['file']['name']);

    189. 

  189.             }

    190. 

  190.             ///ales

    191. 

  191. 

    192. 

  192.             $timestamp = time();

    193. 

  193.             $wpdb->query("INSERT INTO `wp_product_files` ( `id` , `filename`  , `mimetype` , `idhash` , `date` , `width`, `height`) VALUES ( '' , '', '', '', '$timestamp', '', '');");

    194. 

  194.             $fileid_raw = $wpdb->get_results("SELECT `id` FROM `wp_product_files` WHERE `date` = '$timestamp'",ARRAY_A);

    195. 

  195.             $fileid = $fileid_raw[0]['id'];

    196. 

  196.             $idhash = sha1($fileid);

    197. 

  197.             $mimetype = $_FILES['file']['type'];

    198. 

  198.             $splitname = explode(".",$_FILES['file']['name']);

    199. 

  199.             $splitname = array_reverse($splitname);

    200. 

  200.             $filename = $_FILES['file']['name'];

    201. 

  201. 

    202. 

  202.             if(move_uploaded_file($_FILES['file']['tmp_name'],($filedir.$idhash)))

    203. 

  203.             {

    204. 

  204.                 $wpdb->query("UPDATE `wp_product_files` SET `filename` = '".$filename."', `mimetype` = '$mimetype', `idhash` = '$idhash', `width` = '$file_w', `height` = '$file_h' WHERE `id` = '$fileid' LIMIT 1");

    205. 

  205.             }

    206. 

  206.             $file = $fileid;

    207. 

  207.         }

    208. 

  208.         else

    209. 

  209.         {

    210. 

  210.             $file = '0';

    211. 

  211.         }

    212. 

  212. 

    213. 

  213.         if(isset($_POST['display_frontpage']) && $_POST['display_frontpage'] == "yes")

    214. 

  214.         {

    215. 

  215.             $display_frontpage = 1;

    216. 

  216.         }

    217. 

  217.         else

    218. 

  218.         {

    219. 

  219.             $display_frontpage = 0;

    220. 

  220.         }

    221. 

  221. 

    222. 

  222.         $temadnya = '0';

    223. 

  223.         $visible = '0';

    224. 

  224.         $approved = Null;

    225. 

  225. 

    226. 

  226. 

    227. 

  227.         if (isset($_POST['temadnya']) && $_POST['temadnya'] == 'on')

    228. 

  228.         {$temadnya = '1';} else {$temadnya = '0';}  

    229. 

  229.         if (isset($_POST['approved']) && $_POST['approved'] == 'on')

    230. 

  230.         {$approved = '1';} else {$approved = '0';}  

    231. 

  231.         if (isset($_POST['visible']) && $_POST['visible'] == 'on')

    232. 

  232.             $visible = '1';  

    233. 

  233.         if (isset($_POST['colored']) && $_POST['colored'] == 'on'){$colored = '1'; }

    234. 

  234.         else{$colored="0";}

    235. 

  235.         if (isset($_POST['not_for_sale']) && $_POST['not_for_sale'] == 'on'){$not_for_sale = '1'; }

    236. 

  236.         else{$not_for_sale="0";}

    237. 

  237.         if (isset($_POST['portfolio']) && $_POST['portfolio'] == 'on'){$portfolio = '1'; }

    238. 

  238.         else{$portfolio="0";}

    239. 

  239. 

    240. 

  240.         if (isset($_POST['license1']) && $_POST['license1'] == 'on'){$license1 = '1'; }

    241. 

  241.         else{$license1="0";}

    242. 

  242.         if (isset($_POST['license2']) && $_POST['license2'] == 'on'){$license2 = '1'; }

    243. 

  243.         else{$license2="0";}

    244. 

  244.         if (isset($_POST['license3']) && $_POST['license3'] == 'on'){$license3 = '1'; }

    245. 

  245.         else{$license3="0";}

    246. 

  246. 

    247. 

  247. 

    248. 

  248. 

    249. 

  249. 

    250. 

  250.         // TODO: take it off to the SQL table

    251. 

  251.         // License prices

    252. 

  252.         // Category group 1

    253. 

  253.         $l1_price_cat1_default = 250;

    254. 

  254.         $l2_price_cat1_default = 500;

    255. 

  255.         $l3_price_cat1_default = 2500;

    256. 

  256.         // Category group 2

    257. 

  257.         $l1_price_cat2_default = 250;

    258. 

  258.         $l2_price_cat2_default = 500;

    259. 

  259.         $l3_price_cat2_default = 2500;

    260. 

  260.         //UPDATE `wp_product_list` SET l1_price = 200 WHERE id in (SELECT product_id from `wp_item_category_associations` WHERE category_id in (4,14,5,11));

    261. 

  261. 

    262. 

  262.         $category_id = $wpdb->escape($_POST['category'][0]);

    263. 

  263. 

    264. 

  264.         /*

    265. 

  265.         pokazh($category_id,"category_id");

    266. 

  266.         pokazh($_POST['category'],"_POST['category']");

    267. 

  267.         */

    268. 

  268.         switch($category_id)

    269. 

  269.         {

    270. 

  270.             case 4:

    271. 

  271.             case 14:

    272. 

  272.             case 5:

    273. 

  273.             case 11:

    274. 

  274.                 $l1_price = $l1_price_cat1_default;

    275. 

  275.                 $l2_price = $l2_price_cat1_default;

    276. 

  276.                 $l3_price = $l3_price_cat1_default;

    277. 

  277.                 break;

    278. 

  278. 

    279. 

  279.             case 13:

    280. 

  280.             case 8:

    281. 

  281.             case 15:

    282. 

  282.             case 6:

    283. 

  283.                 $l1_price = $l1_price_cat2_default;

    284. 

  284.                 $l2_price = $l2_price_cat2_default;

    285. 

  285.                 $l3_price = $l3_price_cat2_default;

    286. 

  286.                 break;

    287. 

  287. 

    288. 

  288.             default:

    289. 

  289.                 $l1_price = $l1_price_cat1_default;

    290. 

  290.                 $l2_price = $l2_price_cat1_default;

    291. 

  291.                 $l3_price = $l3_price_cat1_default;

    292. 

  292.                 break;

    293. 

  293.         }

    294. 

  294. 

    295. 

  295.         // unset not available licences

    296. 

  296.         if (!isset($license1)||$license1=='0'){$l1_price = '0';}

    297. 

  297.         if (!isset($license2)||$license2=='0'){$l2_price = '0';}

    298. 

  298.         if (!isset($license3)||$license3=='0'){$l3_price = '0';}

    299. 

  299. 

    300. 

  300. 

    301. 

  301.         if (isset($_POST['brand']) && is_numeric($_POST['brand']))

    302. 

  302.         {$_brand = $wpdb->escape($_POST['brand']);}

    303. 

  303.         else {$_brand = $user_brand;}

    304. 

  304. 

    305. 

  305.         $insertsql = "INSERT INTO `wp_product_list` ( `id`, `name`, `description`, `additional_description`, `file` , `image` , `category`, `brand`, `display_frontpage`, `visible`, `approved`, `color`, `not_for_sale`, `l1_price`, `l2_price`, `l3_price`) VALUES ('', '".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."', '".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."', '".$wpdb->escape(correct_comma(removeCrLf(htmlspecialchars($_POST['additional_description']))))."','".$file."', '".$image."', '".$category_id."', '".$_brand."', '$display_frontpage', '$visible', NULL, '$colored', '$not_for_sale', $l1_price, $l2_price, $l3_price);";

    306. 

  306. 

    307. 

  307.         // To send HTML mail, the Content-type header must be set

    308. 

  308.         $headers  = 'MIME-Version: 1.0' . "\r\n";

    309. 

  309.         $headers .= 'Content-type: text/html; charset=UTF-8' . "\r\n";

    310. 

  310.         $headers .= 'From: CartoonBank Robot <cartoonbank.ru@gmail.com>' . "\r\n";

    311. 

  311. 

    312. 

  312.         //mail($to, $subject, $message, $headers);

    313. 

  313.         //mail("igor.aleshin@gmail.com","new cartoon added",print_r($insertsql,true),$headers);

    314. 

  314. 

    315. 

  315.         if($wpdb->query($insertsql))

    316. 

  316.         {

    317. 

  317.             $new_id = mysql_insert_id();

    318. 

  318.             $product_id = $new_id;

    319. 

  319. 

    320. 

  320.             //mail("igor.aleshin@gmail.com","????????? ???????? ".$new_id,$new_id);

    321. 

  321. 

    322. 

  322.             $sql_purgery = "insert into al_editors_votes (image_id, up, down) values ('".$new_id."','0','0')";

    323. 

  323.             $wpdb->query($sql_purgery);

    324. 

  324. 

    325. 

  325.             if (get_option('editors_notification_send')=='1') 

    326. 

  326.             {

    327. 

  327. 

    328. 

  328. 				// aleshin

    329. 

  329.                 $Current_ID = 16;

    330. 

  330.                 $votecontent = "<html><head><title>Please vote!</title></head><body><a href='".$_SITEURL."/wp-admin/admin.php?page=purgatory/purgatory.php'>?????? ? ????????</a><br /><b>".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."</b><br />".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."<br />[".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['additional_description'])))."]<br /><img src='".$_SITEURL."/wp-content/plugins/wp-shopping-cart/product_images/".$image."'> <br /><br /> <div> ???????????? ?? ???????:<br/> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=5' target='_blank'>5 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=4' target='_blank'>4 - ??????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=3' target='_blank'>3 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=2' target='_blank'>2 - ?????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=1' target='_blank'>1 - ?????</a> </div> </body></html>";

    331. 

  331.                 mail("igor.aleshin@gmail.com","????? ???????? ? ????????!",$votecontent,$headers);

    332. 

  332. 

    333. 

  333.                 // bogorad

    334. 

  334.                 $Current_ID = 11;

    335. 

  335.                 $votecontent = "<html><head><title>Please vote!</title></head><body><a href='".$_SITEURL."/wp-admin/admin.php?page=purgatory/purgatory.php'>?????? ? ????????</a><br /><b>".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."</b><br />".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."<br />[".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['additional_description'])))."]<br /><img src='".$_SITEURL."/wp-content/plugins/wp-shopping-cart/product_images/".$image."'> <br /><br /> <div> ???????????? ?? ???????:<br/> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=5' target='_blank'>5 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=4' target='_blank'>4 - ??????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=3' target='_blank'>3 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=2' target='_blank'>2 - ?????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=1' target='_blank'>1 - ?????</a> </div> </body></html>";

    336. 

  336.                 mail("vbogorad@mail.ru","????? ???????? ? ????????!",$votecontent,$headers);

    337. 

  337. 

    338. 

  338.                 // shilov

    339. 

  339.                 $Current_ID = 21;

    340. 

  340.                 $votecontent = "<html><head><title>Please vote!</title></head><body><a href='".$_SITEURL."/wp-admin/admin.php?page=purgatory/purgatory.php'>?????? ? ????????</a><br /><b>".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."</b><br />".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."<br />[".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['additional_description'])))."]<br /><img src='".$_SITEURL."/wp-content/plugins/wp-shopping-cart/product_images/".$image."'> <br /><br /> <div> ???????????? ?? ???????:<br/> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=5' target='_blank'>5 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=4' target='_blank'>4 - ??????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=3' target='_blank'>3 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=2' target='_blank'>2 - ?????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=1' target='_blank'>1 - ?????</a> </div> </body></html>";

    341. 

  341.                 mail("vfshilov@gmail.com","????? ???????? ? ????????!",$votecontent,$headers);

    342. 

  342. 

    343. 

  343.                 // popov

    344. 

  344.                 $Current_ID = 90;

    345. 

  345.                 $votecontent = "<html><head><title>Please vote!</title></head><body><a href='".$_SITEURL."/wp-admin/admin.php?page=purgatory/purgatory.php'>?????? ? ????????</a><br /><b>".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."</b><br />".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."<br />[".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['additional_description'])))."]<br /><img src='".$_SITEURL."/wp-content/plugins/wp-shopping-cart/product_images/".$image."'> <br /><br /> <div> ???????????? ?? ???????:<br/> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=5' target='_blank'>5 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=4' target='_blank'>4 - ??????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=3' target='_blank'>3 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=2' target='_blank'>2 - ?????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=1' target='_blank'>1 - ?????</a> </div> </body></html>";

    346. 

  346.                 mail("popov.a.a@bk.ru","????? ???????? ? ????????!",$votecontent,$headers);

    347. 

  347. 

    348. 

  348.                 // alexandrov

    349. 

  349.                 $Current_ID = 2;

    350. 

  350.                 $votecontent = "<html><head><title>Please vote!</title></head><body><a href='".$_SITEURL."/wp-admin/admin.php?page=purgatory/purgatory.php'>?????? ? ????????</a><br /><b>".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."</b><br />".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."<br />[".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['additional_description'])))."]<br /><img src='".$_SITEURL."/wp-content/plugins/wp-shopping-cart/product_images/".$image."'> <br /><br /> <div> ???????????? ?? ???????:<br/> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=5' target='_blank'>5 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=4' target='_blank'>4 - ??????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=3' target='_blank'>3 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=2' target='_blank'>2 - ?????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=1' target='_blank'>1 - ?????</a> </div> </body></html>";

    351. 

  351.                 mail("Alexandrov_Vasil@mail.ru","????? ???????? ? ????????!",$votecontent,$headers);

    352. 

  352. 

    353. 

  353.                 // elkin

    354. 

  354.                 $Current_ID = 38;

    355. 

  355.                 $votecontent = "<html><head><title>Please vote!</title></head><body><a href='".$_SITEURL."/wp-admin/admin.php?page=purgatory/purgatory.php'>?????? ? ????????</a><br /><b>".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."</b><br />".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."<br />[".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['additional_description'])))."]<br /><img src='".$_SITEURL."/wp-content/plugins/wp-shopping-cart/product_images/".$image."'> <br /><br /> <div> ???????????? ?? ???????:<br/> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=5' target='_blank'>5 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=4' target='_blank'>4 - ??????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=3' target='_blank'>3 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=2' target='_blank'>2 - ?????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=1' target='_blank'>1 - ?????</a> </div> </body></html>";

    356. 

  356.                 mail("elkin99@yandex.ru","????? ???????? ? ????????!",$votecontent,$headers);

    357. 

  357. 

    358. 

  358.                 // stepanov

    359. 

  359.                 $Current_ID = 62;

    360. 

  360.                 $votecontent = "<html><head><title>Please vote!</title></head><body><a href='".$_SITEURL."/wp-admin/admin.php?page=purgatory/purgatory.php'>?????? ? ????????</a><br /><b>".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."</b><br />".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."<br />[".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['additional_description'])))."]<br /><img src='".$_SITEURL."/wp-content/plugins/wp-shopping-cart/product_images/".$image."'> <br /><br /> <div> ???????????? ?? ???????:<br/> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=5' target='_blank'>5 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=4' target='_blank'>4 - ??????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=3' target='_blank'>3 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=2' target='_blank'>2 - ?????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=1' target='_blank'>1 - ?????</a> </div> </body></html>";

    361. 

  361.                 mail("stevladimir@yandex.ru","????? ???????? ? ????????!",$votecontent,$headers);

    362. 

  362. 

    363. 

  363.                 // sergeev

    364. 

  364.                 $Current_ID = 28;

    365. 

  365.                 $votecontent = "<html><head><title>Please vote!</title></head><body><a href='".$_SITEURL."/wp-admin/admin.php?page=purgatory/purgatory.php'>?????? ? ????????</a><br /><b>".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."</b><br />".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."<br />[".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['additional_description'])))."]<br /><img src='".$_SITEURL."/wp-content/plugins/wp-shopping-cart/product_images/".$image."'> <br /><br /> <div> ???????????? ?? ???????:<br/> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=5' target='_blank'>5 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=4' target='_blank'>4 - ??????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=3' target='_blank'>3 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=2' target='_blank'>2 - ?????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=1' target='_blank'>1 - ?????</a> </div> </body></html>";

    366. 

  366.                 mail("aserg48@gmail.com","????? ???????? ? ????????!",$votecontent,$headers);

    367. 

  367. 

    368. 

  368.                 // smagin

    369. 

  369.                 $Current_ID = 23;

    370. 

  370.                 $votecontent = "<html><head><title>Please vote!</title></head><body><a href='".$_SITEURL."/wp-admin/admin.php?page=purgatory/purgatory.php'>?????? ? ????????</a><br /><b>".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['name'])))."</b><br />".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."<br />[".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['additional_description'])))."]<br /><img src='".$_SITEURL."/wp-content/plugins/wp-shopping-cart/product_images/".$image."'> <br /><br /> <div> ???????????? ?? ???????:<br/> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=5' target='_blank'>5 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=4' target='_blank'>4 - ??????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=3' target='_blank'>3 - ???????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=2' target='_blank'>2 - ?????</a> <a style='display:block;padding:4px;margin:4px;size:24px;' href='".$_SITEURL."/wp-content/plugins/purgatory/moder_vote.php?ip=".$Current_ID."&id=".$new_id."&vote=1' target='_blank'>1 - ?????</a> </div> </body></html>";

    371. 

  371.                 mail("m_smagin@mail.ru","????? ???????? ? ????????!",$votecontent,$headers);

    372. 

  372.             }

    373. 

  373. 

    374. 

  374.             if(isset ($_FILES['extra_image']) && ($_FILES['extra_image'] != null) && function_exists('edit_submit_extra_images'))

    375. 

  375.             {

    376. 

  376.                 $var = edit_submit_extra_images($product_id);

    377. 

  377.             }

    378. 

  378. 

    379. 

  379.             $variations_procesor = new nzshpcrt_variations;

    380. 

  380.             if(isset($_POST['variation_values']) && $_POST['variation_values'] != null)

    381. 

  381.             {

    382. 

  382.                 $variations_procesor->add_to_existing_product($product_id,$_POST['variation_values']); 

    383. 

  383.             }

    384. 

  384. 

    385. 

  385.             $counter = 0;

    386. 

  386.             $item_list = '';

    387. 

  387.             if(count($_POST['category']) > 0)

    388. 

  388.             {

    389. 

  389.                 foreach($_POST['category'] as $category_id)

    390. 

  390.                 {

    391. 

  391.                     $sql_delete = "DELETE `wp_item_category_associations`.* FROM `wp_item_category_associations` WHERE `product_id` = '".$product_id."'";

    392. 

  392.                     $wpdb->query($sql_delete);

    393. 

  393.                     $wpdb->query("INSERT INTO `wp_item_category_associations` ( `id` , `product_id` , `category_id` ) VALUES ('', '".$product_id."', '".$category_id."');");        

    394. 

  394.                 }

    395. 

  395.             }

    396. 

  396.             else

    397. 

  397.             {

    398. 

  398.                 $default_cat = get_option('default_category');

    399. 

  399.                 $check_existing = $wpdb->get_var("SELECT `id` FROM `wp_item_category_associations` WHERE `product_id` = ".$product_id." LIMIT 1");

    400. 

  400.                 if($check_existing == null)

    401. 

  401.                 {

    402. 

  402.                     $wpdb->query("INSERT INTO `wp_item_category_associations` ( `id` , `product_id` , `category_id` ) VALUES ('', '".$product_id."', '".$default_cat."');");        

    403. 

  403.                 }

    404. 

  404.             }

    405. 

  405. 

    406. 

  406.             // insert temadnya

    407. 

  407.             if ($temadnya == '1') // insert category 777

    408. 

  408.             {

    409. 

  409.                 $sql_temadnya = "insert into `wp_item_category_associations` (product_id, category_id) values ('".$product_id."','777')";

    410. 

  410.                 $res = $wpdb->query($sql_temadnya);

    411. 

  411.             }

    412. 

  412. 

    413. 

  413. 

    414. 

  414.             $display_added_product = "filleditform(".$product_id.");";

    415. 

  415. 

    416. 

  416.             echo "<div class='updated'><p align='center'>???? ????????</p></div>";

    417. 

  417.         }

    418. 

  418.         else

    419. 

  419.         {

    420. 

  420.             echo "<div class='updated'><p align='center'>???? ?? ????????!</p></div>";

    421. 

  421.         }

    422. 

  422.     }

    423. 

  423. 

    424. 

  424.     if(isset($_GET['submit_action']) && $_GET['submit_action'] == "remove_set")

    425. 

  425.     {

    426. 

  426.         if(is_numeric($_GET['product_id']) && is_numeric($_GET['variation_assoc_id']))

    427. 

  427.         {

    428. 

  428.             $product_id = $_GET['product_id'];

    429. 

  429.             $variation_assoc_id = $_GET['variation_assoc_id'];

    430. 

  430.             $variation_association = $wpdb->get_results("SELECT * FROM `wp_variation_associations` WHERE `id` = '$variation_assoc_id' LIMIT 1",ARRAY_A);

    431. 

  431.             if($variation_association != null)

    432. 

  432.             {

    433. 

  433.                 $variation_association = $variation_association[0];

    434. 

  434.                 $variation_id = $variation_association['variation_id'];

    435. 

  435.                 $delete_variation_sql = "DELETE FROM `wp_variation_associations` WHERE `id` = '$variation_assoc_id' LIMIT 1";

    436. 

  436.                 $delete_value_sql = "DELETE FROM `wp_variation_values_associations` WHERE `product_id` = '$product_id' AND `variation_id` = '$variation_id'";

    437. 

  437.                 $wpdb->query($delete_variation_sql);

    438. 

  438.                 $wpdb->query($delete_value_sql);

    439. 

  439.                 echo "<div class='updated'><p align='center'>".TXT_WPSC_PRODUCTHASBEENEDITED."</p></div>";

    440. 

  440.             }

    441. 

  441.         } 

    442. 

  442.     }

    443. 

  443. 

    444. 

  444.     // edit product 

    445. 

  445.     if(isset($_POST['submit_action']) && $_POST['submit_action'] == "edit")

    446. 

  446.     {

    447. 

  447.         //transliterate file

    448. 

  448.         $_FILES['file']['name'] = rus2translit($_FILES['file']['name']); 

    449. 

  449.         //rename the file  

    450. 

  450.         $_FILES['file']['name'] = uniqid('', true).$_FILES['file']['name'];

    451. 

  451. 

    452. 

  452.         $id = $_POST['prodid'];

    453. 

  453.         if(function_exists('edit_submit_extra_images'))

    454. 

  454.         {

    455. 

  455.             if(($_FILES['extra_image'] != null))

    456. 

  456.             {

    457. 

  457.                 $var = edit_submit_extra_images($id);

    458. 

  458.             }

    459. 

  459.         }

    460. 

  460.         if(function_exists('edit_extra_images'))

    461. 

  461.         {

    462. 

  462.             $var = edit_extra_images($id);

    463. 

  463.         }

    464. 

  464.         //$basepath = str_replace("/wp-admin", "" , getcwd()); this defined at the top of the page

    465. 

  465.         $imagedir = $basepath."/wp-content/plugins/wp-shopping-cart/images/";

    466. 

  466.         $product_images = $basepath."/wp-content/plugins/wp-shopping-cart/product_images/";

    467. 

  467.         $filedir = $basepath."/wp-content/plugins/wp-shopping-cart/files/";

    468. 

  468.         $preview_clips_dir = $basepath."/wp-content/plugins/wp-shopping-cart/preview_clips/"; 

    469. 

  469. 

    470. 

  470.         if(($_FILES['file']['tmp_name'] != null) && ($_FILES['file']['name'] != null))

    471. 

  471.         {

    472. 

  472.             $id = $_POST['prodid'];

    473. 

  473.             $fileid_data = $wpdb->get_results("SELECT `file` FROM `wp_product_list` WHERE `id` = '$id' LIMIT 1",ARRAY_A);

    474. 

  474.             $fileid = $fileid_data[0]['file'];

    475. 

  475.             $file_data = $wpdb->get_results("SELECT `id`,`idhash` FROM `wp_product_files` WHERE `id` = '$fileid' LIMIT 1",ARRAY_A);

    476. 

  476.             $idhash = $file_data[0]['idhash'];

    477. 

  477.             $mimetype = $_FILES['file']['type'];

    478. 

  478. 

    479. 

  479.             $filename = $_FILES['file']['name'];

    480. 

  480. 

    481. 

  481.             if(!is_dir($product_images))

    482. 

  482.             {

    483. 

  483.                 mkdir($product_images);

    484. 

  484.             }

    485. 

  485.             if(function_exists("getimagesize"))

    486. 

  486.             {

    487. 

  487.                 switch(isset ($_POST['image_resize']) && $_POST['image_resize'])    

    488. 

  488.                 {

    489. 

  489.                     case 2:

    490. 

  490.                         $height = $_POST['height'];

    491. 

  491.                         $width  = $_POST['width'];

    492. 

  492.                         break;

    493. 

  493. 

    494. 

  494.                     default:

    495. 

  495.                         $height = get_option('product_image_height');

    496. 

  496.                         $width  = get_option('product_image_width');

    497. 

  497.                         break;

    498. 

  498.                 }

    499. 

  499.                 copy($_FILES['file']['tmp_name'], $product_images.$_FILES['file']['name']);

    500. 

  500.                 copy($_FILES['file']['tmp_name'], $imagedir.$_FILES['file']['name']);

    501. 

  501. 

    502. 

  502.                 $imgsize = getimagesize($product_images.$_FILES['file']['name']);

    503. 

  503.                 $file_w = $imgsize[0];

    504. 

  504.                 $file_h = $imgsize[1];

    505. 

  505. 

    506. 

  506.                 //ales here we replace slides to that from LG

    507. 

  507.                 $chwidth = get_option('lg_pictwidth'); // crop size

    508. 

  508.                 $chheight = get_option('lg_pictheight'); // crop size

    509. 

  509.                 $thatdir = $product_images; //destination dir

    510. 

  510.                 $ifolder = ''; //subfolder for artist

    511. 

  511.                 $file = $_FILES['file']['name']; //

    512. 

  512.                 $resample_quality = 100; //image quality

    513. 

  513. 

    514. 

  514.                 al_create_resized_file($chwidth, $chheight, $thatdir, $ifolder, $file, $resample_quality);    

    515. 

  515.                 $wm = $basepath."/wp-content/plugins/wp-shopping-cart/images/watermark.png";

    516. 

  516.                 wtrmark($thatdir.$file,$wm);

    517. 

  517. 

    518. 

  518.                 // ales here we replace thumbs to that from LG 

    519. 

  519.                 $chwidth = $width; // crop size

    520. 

  520.                 $chheight = $height; // crop size

    521. 

  521.                 $thatdir = $imagedir; //destination dir

    522. 

  522. 

    523. 

  523.                 al_create_cropped_file($chwidth, $chheight, $thatdir, $ifolder, $file, $resample_quality);      

    524. 

  524.                 $image = $wpdb->escape($_FILES['file']['name']);

    525. 

  525. 

    526. 

  526.                 /// ales 

    527. 

  527. 

    528. 

  528. 

    529. 

  529.             }

    530. 

  530.             else {

    531. 

  531.                 move_uploaded_file($_FILES['file']['tmp_name'], ($imagedir.$_FILES['file']['name']));

    532. 

  532.                 $image = $wpdb->escape($_FILES['file']['name']);

    533. 

  533.             }

    534. 

  534.             //include("image_processing.php");

    535. 

  535. 

    536. 

  536.             if(move_uploaded_file($_FILES['file']['tmp_name'],($filedir.$idhash)))

    537. 

  537.             {

    538. 

  538.                 $wpdb->query("UPDATE `wp_product_files` SET `filename` = '".$filename."', `mimetype` = '$mimetype', `width` = '$file_w', `height` = '$file_h' WHERE `id` = '".$file_data[0]['id']."' LIMIT 1");

    539. 

  539.             }

    540. 

  540.         }

    541. 

  541. 

    542. 

  542.         if(is_numeric($_POST['prodid']))

    543. 

  543.         {

    544. 

  544.             if(isset($_POST['image_resize']) && ($_POST['image_resize'] > 0) && ($image === ''))

    545. 

  545.             {

    546. 

  546.                 $imagesql = "SELECT `image` FROM `wp_product_list` WHERE `id`=".$_POST['prodid']." LIMIT 1";

    547. 

  547.                 $imagedata = $wpdb->get_results($imagesql,ARRAY_A);

    548. 

  548.                 if($imagedata[0]['image'] != '')

    549. 

  549.                 {

    550. 

  550.                     $imagepath = $imagedir . $imagedata[0]['image'];

    551. 

  551.                     switch($_POST['image_resize'])

    552. 

  552.                     {

    553. 

  553.                         case 0:

    554. 

  554.                             $height = get_option('product_image_height');

    555. 

  555.                             $width  = get_option('product_image_width');

    556. 

  556.                             break;

    557. 

  557. 

    558. 

  558.                         case 1:

    559. 

  559.                             $height = get_option('product_image_height');

    560. 

  560.                             $width  = get_option('product_image_width');

    561. 

  561.                             break;

    562. 

  562. 

    563. 

  563.                         case 2:

    564. 

  564.                             $height = $_POST['height'];

    565. 

  565.                             $width  = $_POST['width'];

    566. 

  566.                             break;

    567. 

  567.                     }

    568. 

  568.                     include("image_resize.php");

    569. 

  569.                 }

    570. 

  570.             }

    571. 

  571. 

    572. 

  572.             if(is_numeric($_POST['prodid']))

    573. 

  573.             {

    574. 

  574.                 $counter = 0;

    575. 

  575.                 $item_list = '';

    576. 

  576.                 if(count($_POST['category']) > 0)

    577. 

  577.                 {

    578. 

  578.                     foreach($_POST['category'] as $category_id)

    579. 

  579.                     {

    580. 

  580.                         $check_existing = $wpdb->get_var("SELECT `id` FROM `wp_item_category_associations` WHERE `product_id` = ".$id." AND `category_id` = '$category_id' LIMIT 1");

    581. 

  581.                         if($check_existing == null)

    582. 

  582.                         {

    583. 

  583.                             $wpdb->query("INSERT INTO `wp_item_category_associations` ( `id` , `product_id` , `category_id` ) VALUES ('', '".$id."', '".$category_id."');");        

    584. 

  584.                         }

    585. 

  585.                         if($counter > 0)

    586. 

  586.                         {

    587. 

  587.                             $item_list .= ", ";

    588. 

  588.                         }

    589. 

  589.                         $item_list .= "'".$category_id."'";

    590. 

  590.                         $counter++;

    591. 

  591.                     }

    592. 

  592.                 }

    593. 

  593.                 else

    594. 

  594.                 {

    595. 

  595.                     $item_list = "'0'";

    596. 

  596.                 }

    597. 

  597.                 $sql_delete_query = "DELETE FROM `wp_item_category_associations` WHERE `product_id`= '$id' AND `category_id` NOT IN (".$item_list.")";

    598. 

  598.                 $wpdb->query($sql_delete_query); 

    599. 

  599.             }

    600. 

  600. 

    601. 

  601.             if(isset($_POST['display_frontpage']) && $_POST['display_frontpage'] == "yes")

    602. 

  602.             {

    603. 

  603.                 $display_frontpage = 1;

    604. 

  604.             }

    605. 

  605.             else

    606. 

  606.             {

    607. 

  607.                 $display_frontpage = 0;

    608. 

  608.             }

    609. 

  609. 

    610. 

  610.             $visible = '0';

    611. 

  611.             if (isset($_POST['visible']) && $_POST['visible'] == 'on')

    612. 

  612.                 $visible = '1'; 

    613. 

  613.             if (isset($_POST['approved']) && $_POST['approved'] == 'on')

    614. 

  614.             {$approved = '1';} else {$approved = Null;}

    615. 

  615.             if (isset($_POST['colored']) && $_POST['colored'] == 'on'){$colored = '1';}

    616. 

  616.             else {$colored = '0';}

    617. 

  617.             if (isset($_POST['temadnya']) && $_POST['temadnya'] == 'on'){$temadnya = '1';}

    618. 

  618.             else {$temadnya = '0';}

    619. 

  619.             if (isset($_POST['not_for_sale']) && $_POST['not_for_sale'] == 'on'){$not_for_sale = '1';}

    620. 

  620.             else {$not_for_sale = '0';}

    621. 

  621. 

    622. 

  622. 

    623. 

  623.             if (isset($_POST['license1']) && $_POST['license1'] == 'on'){$license1 = '1'; }

    624. 

  624.             else{$license1="0";}

    625. 

  625.             if (isset($_POST['license2']) && $_POST['license2'] == 'on'){$license2 = '1'; }

    626. 

  626.             else{$license2="0";}

    627. 

  627.             if (isset($_POST['license3']) && $_POST['license3'] == 'on'){$license3 = '1'; }

    628. 

  628.             else{$license3="0";}

    629. 

  629. 

    630. 

  630. 

    631. 

  631.             // TODO: take it off to the SQL table

    632. 

  632.             // License prices

    633. 

  633.             // Category group 1

    634. 

  634.             $l1_price_cat1_default = 250;

    635. 

  635.             $l2_price_cat1_default = 500;

    636. 

  636.             $l3_price_cat1_default = 2500;

    637. 

  637.             // Category group 2

    638. 

  638.             $l1_price_cat2_default = 250;

    639. 

  639.             $l2_price_cat2_default = 500;

    640. 

  640.             $l3_price_cat2_default = 2500;

    641. 

  641.             //UPDATE `wp_product_list` SET l1_price = 200 WHERE id in (SELECT product_id from `wp_item_category_associations` WHERE category_id in (4,14,5,11));

    642. 

  642. 

    643. 

  643.             $category_id = $wpdb->escape($_POST['category']);

    644. 

  644.             switch($category_id)

    645. 

  645.             {

    646. 

  646.                 case 4:

    647. 

  647.                 case 14:

    648. 

  648.                 case 5:

    649. 

  649.                 case 11:

    650. 

  650.                     $l1_price = $l1_price_cat1_default;

    651. 

  651.                     $l2_price = $l2_price_cat1_default;

    652. 

  652.                     $l3_price = $l3_price_cat1_default;

    653. 

  653.                     break;

    654. 

  654. 

    655. 

  655.                 case 13:

    656. 

  656.                 case 8:

    657. 

  657.                 case 15:

    658. 

  658.                 case 6:

    659. 

  659.                     $l1_price = $l1_price_cat2_default;

    660. 

  660.                     $l2_price = $l2_price_cat2_default;

    661. 

  661.                     $l3_price = $l3_price_cat2_default;

    662. 

  662.                     break;

    663. 

  663. 

    664. 

  664.                 default:

    665. 

  665.                     $l1_price = $l1_price_cat1_default;

    666. 

  666.                     $l2_price = $l2_price_cat1_default;

    667. 

  667.                     $l3_price = $l3_price_cat1_default;

    668. 

  668.                     break;

    669. 

  669.             }

    670. 

  670. 

    671. 

  671.             // unset not available licences

    672. 

  672.             if (!isset($license1)||$license1=='0'){$l1_price = '0';}

    673. 

  673.             if (!isset($license2)||$license2=='0'){$l2_price = '0';}

    674. 

  674.             if (!isset($license3)||$license3=='0'){$l3_price = '0';}

    675. 

  675. 

    676. 

  676.             //        

    677. 

  677. 

    678. 

  678.             if (isset($_POST['brand']) && is_numeric($_POST['brand']))

    679. 

  679.             {$_brand = $_POST['brand'];}

    680. 

  680.             else

    681. 

  681.             {$_brand = $user_brand;}

    682. 

  682. 

    683. 

  683. 

    684. 

  684. 

    685. 

  685. 

    686. 

  686.             if (isset($current_user->wp_capabilities['author']) && $current_user->wp_capabilities['author']==1)

    687. 

  687.             {

    688. 

  688.                 $updatesql = "UPDATE `wp_product_list` SET `name` = '".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['title'])))."', `description` = '".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."', `additional_description` = '".$wpdb->escape(correct_comma(removeCrLf(htmlspecialchars($_POST['additional_description']))))."', `category` = '".$wpdb->escape($_POST['category'][0])."', `brand` = '".$_brand."', `display_frontpage`='$display_frontpage', `visible`='$visible',`color`='$colored', `not_for_sale`='$not_for_sale', `l1_price`='$l1_price', `l2_price`='$l2_price', `l3_price`='$l3_price'  WHERE `id`='".$_POST['prodid']."' LIMIT 1";

    689. 

  689.             }

    690. 

  690.             else

    691. 

  691.             {

    692. 

  692.                 $updatesql = "UPDATE `wp_product_list` SET `name` = '".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['title'])))."', `description` = '".$wpdb->escape(removeCrLf(htmlspecialchars($_POST['description'])))."', `additional_description` = '".$wpdb->escape(correct_comma(removeCrLf(htmlspecialchars($_POST['additional_description']))))."', `category` = '".$wpdb->escape($_POST['category'][0])."', `brand` = '".$_brand."', `display_frontpage`='$display_frontpage', `visible`='$visible', `approved`='$approved', `color`='$colored', `not_for_sale`='$not_for_sale', `l1_price`='$l1_price', `l2_price`='$l2_price', `l3_price`='$l3_price'  WHERE `id`='".$_POST['prodid']."' LIMIT 1";

    693. 

  693.             }

    694. 

  694. 

    695. 

  695.             $wpdb->query($updatesql);

    696. 

  696. 

    697. 

  697.             // update temadnya

    698. 

  698.             if ($temadnya == '1') // insert category 777

    699. 

  699.             {

    700. 

  700.                 $sql_temadnya = "insert into `wp_item_category_associations` (product_id, category_id) values ('".$_POST['prodid']."','777')";

    701. 

  701.                 $wpdb->query($sql_temadnya);

    702. 

  702.             }

    703. 

  703.             elseif ($temadnya == '0') // remove category 777

    704. 

  704.             {

    705. 

  705.                 $sql_temadnya = "delete from `wp_item_category_associations` where product_id=".$_POST['prodid']." and category_id='777'";

    706. 

  706.                 $wpdb->query($sql_temadnya);

    707. 

  707.             }

    708. 

  708. 

    709. 

  709. 

    710. 

  710. 

    711. 

  711.             if($image != null)

    712. 

  712.             {

    713. 

  713.                 $updatesql2 = "UPDATE `wp_product_list` SET `image` = '".$image."' WHERE `id`='".$_POST['prodid']."' LIMIT 1";

    714. 

  714.                 $wpdb->query($updatesql2);

    715. 

  715.             }

    716. 

  716.             if(isset($_POST['deleteimage']) && $_POST['deleteimage'] == 1)

    717. 

  717.             {

    718. 

  718.                 $updatesql2 = "UPDATE `wp_product_list` SET `image` = ''  WHERE `id`='".$_POST['prodid']."' LIMIT 1";

    719. 

  719.                 $wpdb->query($updatesql2);

    720. 

  720.             }

    721. 

  721. 

    722. 

  722.             $variations_procesor = new nzshpcrt_variations;

    723. 

  723.             if(isset($_POST['variation_values']) && $_POST['variation_values'] != null)

    724. 

  724.             {

    725. 

  725.                 $variations_procesor->add_to_existing_product($_POST['prodid'],$_POST['variation_values']); 

    726. 

  726.             }

    727. 

  727. 

    728. 

  728.             if(isset($_POST['edit_variation_values']) && $_POST['edit_variation_values'] != null)

    729. 

  729.             {

    730. 

  730.                 $variations_procesor->edit_product_values($_POST['prodid'],$_POST['edit_variation_values']);

    731. 

  731.             }

    732. 

  732. 

    733. 

  733.             if(isset($_POST['edit_add_variation_values']) && $_POST['edit_add_variation_values'] != null)

    734. 

  734.             {

    735. 

  735.                 $variations_procesor->edit_add_product_values($_POST['prodid'],$_POST['edit_add_variation_values']);

    736. 

  736.             }

    737. 

  737. 

    738. 

  738.             echo "<div class='updated'><p align='center'>".TXT_WPSC_PRODUCTHASBEENEDITED."</p></div>";

    739. 

  739.         }

    740. 

  740.     }

    741. 

  741. 

    742. 

  742.     if(isset($_GET['deleteid']) && is_numeric($_GET['deleteid']))

    743. 

  743.     {

    744. 

  744.         if (isset($current_user->wp_capabilities['administrator']) && $current_user->wp_capabilities['administrator']==1)

    745. 

  745.         {

    746. 

  746.             $deletesql = "UPDATE `wp_product_list` SET  `active` = '0' WHERE `id`='".$_GET['deleteid']."' LIMIT 1";

    747. 

  747.             $wpdb->query($deletesql);

    748. 

  748.         }

    749. 

  749. 

    750. 

  750.         if (isset($current_user->wp_capabilities['editor']) && $current_user->wp_capabilities['editor']==1)

    751. 

  751.         {

    752. 

  752.             $deletesql = "UPDATE `wp_product_list` SET  `active` = '0' WHERE `id`='".$_GET['deleteid']."' LIMIT 1";

    753. 

  753.             $wpdb->query($deletesql);

    754. 

  754.         }

    755. 

  755. 

    756. 

  756.         if (isset($current_user->wp_capabilities['author']) && $current_user->wp_capabilities['author']==1)

    757. 

  757.         {

    758. 

  758.             $deletesql = "UPDATE `wp_product_list` SET  `active` = '0' WHERE `id`='".$_GET['deleteid']."' LIMIT 1";

    759. 

  759.             $wpdb->query($deletesql);

    760. 

  760.         }

    761. 

  761.     }

    762. 

  762. 

    763. 

  763. 

    764. 

  764.     /*

    765. 

  765.     * Gets the product list, commented to make it stick out more, as it is hard to notice 

    766. 

  766.     */

    767. 

  767. 

    768. 

  768.     $items_on_page = 15;

    769. 

  769.     if(isset($_GET['offset']) && is_numeric($_GET['offset']))

    770. 

  770.     {

    771. 

  771.         $offset = $_GET['offset'];

    772. 

  772.     }

    773. 

  773.     else

    774. 

  774.     {

    775. 

  775.         $offset = 0;

    776. 

  776.     }

    777. 

  777. 

    778. 

  778.     if(current_user_can('publish_posts'))

    779. 

  779.         $visiblesql = " ";

    780. 

  780.     else

    781. 

  781.         $visiblesql = " AND `wp_product_list`.`visible`='1' ";

    782. 

  782. 

    783. 

  783.     $exclude_category_777 = " ";

    784. 

  784. 

    785. 

  785.     if(isset($_GET['catid']) && is_numeric($_GET['catid']))

    786. 

  786.     {

    787. 

  787.         // if we are getting items from only one category

    788. 

  788.         $sql = "SELECT `wp_product_list`.*,`wp_product_list`.`category` AS `category_id` FROM `wp_product_list` WHERE `wp_product_list`.`active`='1' ".$visiblesql.$author_group_sql.$exclude_category_777." AND `wp_product_list`.`category`='".$_GET['catid']."' order by wp_product_list.id DESC LIMIT ".$offset.",".$items_on_page;

    789. 

  789. 

    790. 

  790.         $category_count = $wpdb->get_results("SELECT COUNT(id) as count FROM `wp_product_list` WHERE `wp_product_list`.`active`='1' ".$visiblesql." AND `wp_product_list`.`category`='".$_GET['catid']."'",ARRAY_A);

    791. 

  791. 

    792. 

  792.     }

    793. 

  793.     else if (isset($_GET['brand']) && is_numeric($_GET['brand']))

    794. 

  794.         {

    795. 

  795.             // if we are getting items from only one brand

    796. 

  796.             $sql = "SELECT `wp_product_list`.*,`wp_product_list`.`category` AS `category_id` FROM `wp_product_list` WHERE `wp_product_list`.`active`='1' ".$visiblesql.$author_group_sql.$exclude_category_777." AND `wp_product_list`.`brand`='".$_GET['brand']."' order by wp_product_list.id DESC LIMIT ".$offset.",".$items_on_page;

    797. 

  797. 

    798. 

  798.             $category_count = $wpdb->get_results("SELECT COUNT(id) as count FROM `wp_product_list` WHERE `wp_product_list`.`active`='1' ".$visiblesql." AND `wp_product_list`.`brand`='".$_GET['brand']."'",ARRAY_A);

    799. 

  799.         }

    800. 

  800.         else

    801. 

  801.         {

    802. 

  802.             // if not, get everything that is not deleted (denoted by the active column, 1 = present, 0 = deleted, no real deletion because that would screw up the product log)

    803. 

  803.             $sql = "SELECT `wp_product_list`.*, `wp_product_list`.`category` AS `category_id` FROM `wp_product_list` WHERE `wp_product_list`.`active`='1' ".$visiblesql.$author_group_sql.$exclude_category_777." order by wp_product_list.id DESC LIMIT ".$offset.",".$items_on_page;

    804. 

  804. 

    805. 

  805.             $category_count = $wpdb->get_results("SELECT COUNT(id) as count FROM `wp_product_list` WHERE `wp_product_list`.`active`='1' ".$visiblesql.$author_group_sql.";",ARRAY_A);

    806. 

  806. 

    807. 

  807.     }

    808. 

  808.     $product_list = $wpdb->get_results($sql,ARRAY_A) ;

    809. 

  809. 

    810. 

  810.     $items_count = $category_count[0]['count'];

    811. 

  811. ?>

    812. 

  812. 

    813. 

  813. <div class="wrap">

    814. 

  814.     <h2><?php echo TXT_WPSC_DISPLAYPRODUCTS;?></h2>

    815. 

  815. 

    816. 

  816.     <?php

    817. 

  817. 		echo "???????: ";

    818. 

  818.         echo topcategorylist($offset);

    819. 

  819.         echo (" ??? ".al_brandslist());

    820. 

  820. 

    821. 

  821.     ?>

    822. 

  822. 

    823. 

  823.     ?:<input type="text" value="000" id='editpicid' style="width:60px;">

    824. 

  824.     <a href="#" class="button add-new-h2" onclick="var editpicid=document.getElementById('editpicid').value;filleditform(editpicid.replace(/(^\s+)|(\s+$)/g, ''));return false;">??????????…
    825.

Large files files are truncated, but you can click here to view the full file