PageRenderTime 72ms CodeModel.GetById 26ms RepoModel.GetById 0ms app.codeStats 1ms

/wp-content/plugins/wp-shopping-cart/display-items.php

https://github.com/alx/barceloneta
PHP | 1462 lines | 1184 code | 191 blank | 87 comment | 277 complexity | 428f700294d64641378d3c9cf1dee31f MD5 | raw file

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. include_once('tagging_functions.php');
    3. 

  3. include_once('google_base_functions.php');
    4. 

  4. $category_data = null;
    5. 

  5. 

  6. function topcategorylist() {
    7. 

  7.   global $wpdb,$category_data;
    8. 

  8.   $siteurl = get_option('siteurl'); 
    9. 

  9.   $url = $siteurl."/wp-admin/admin.php?page=".WPSC_DIR_NAME."/display-items.php";
    10. 

  10.   $options = "";
    11. 

  11.   $options .= "<option value='$url'>".TXT_WPSC_ALLCATEGORIES."</option>\r\n";
    12. 

  12.   $options .= top_category_options(null, 0, $_GET['catid']);
    13. 

  13.   $concat .= "<select name='category' onChange='categorylist(this.options[this.selectedIndex].value)'>".$options."</select>\r\n";
    14. 

  14.   return $concat;
    15. 

  15. }
    16. 

  16. 

  17. function top_category_options($category_id = null, $iteration = 0, $selected_id = null) {
    18. 

  18.   /*
    19. 

  19.    * Displays the category forms for adding and editing products
    20. 

  20.    * Recurses to generate the branched view for subcategories
    21. 

  21.    */
    22. 

  22.   global $wpdb;
    23. 

  23.   $siteurl = get_option('siteurl'); 
    24. 

  24.   $url = $siteurl."/wp-admin/admin.php?page=".WPSC_DIR_NAME."/display-items.php";
    25. 

  25.   if(is_numeric($category_id)) {
    26. 

  26.     $values = $wpdb->get_results("SELECT * FROM `".$wpdb->prefix."product_categories` WHERE `active`='1' AND `category_parent` = '$category_id'  ORDER BY `id` ASC",ARRAY_A);
    27. 

  27. 	} else {
    28. 

  28.     $values = $wpdb->get_results("SELECT * FROM `".$wpdb->prefix."product_categories` WHERE `active`='1' AND `category_parent` = '0'  ORDER BY `id` ASC",ARRAY_A);
    29. 

  29. 	}
    30. 

  30.   foreach((array)$values as $option) {
    31. 

  31.     if($selected_id == $option['id']) {
    32. 

  32.       $selected = "selected='selected'";
    33. 

  33.     }
    34. 

  34.     $output .= "<option $selected value='$url&amp;catid=".$option['id']."'>".str_repeat("-", $iteration).stripslashes($option['name'])."</option>\r\n";
    35. 

  35.     $output .= top_category_options($option['id'], $iteration+1, $selected_id);
    36. 

  36.     $selected = "";
    37. 

  37.   }
    38. 

  38.   return $output;
    39. 

  39. }
    40. 

  40. 

  41. function brandslist($current_brand = '') {
    42. 

  42.   global $wpdb;
    43. 

  43.   $options = "";
    44. 

  44.   $options .= "<option  $selected value='0'>".TXT_WPSC_SELECTABRAND."</option>\r\n";
    45. 

  45.   $values = $wpdb->get_results("SELECT * FROM `".$wpdb->prefix."product_brands` WHERE `active`='1' ORDER BY `id` ASC",ARRAY_A);
    46. 

  46.   foreach((array)$values as $option) {
    47. 

  47.     if($curent_category == $option['id']) {
    48. 

  48.       $selected = "selected='selected'";
    49. 

  49.     }
    50. 

  50.     $options .= "<option  $selected value='".$option['id']."'>".$option['name']."</option>\r\n";
    51. 

  51.     $selected = "";
    52. 

  52.   }
    53. 

  53.   $concat .= "<select name='brand'>".$options."</select>\r\n";
    54. 

  54.   return $concat;
    55. 

  55. }
    56. 

  56. 

  57. function variationslist($current_variation = '') {
    58. 

  58. 	global $wpdb;
    59. 

  59. 	$options = "";
    60. 

  60. 	$values = $wpdb->get_results("SELECT * FROM `".$wpdb->prefix."product_variations` ORDER BY `id` ASC",ARRAY_A);
    61. 

  61. 	$options .= "<option  $selected value='0'>".TXT_WPSC_PLEASECHOOSE."</option>\r\n";
    62. 

  62. 	foreach((array)$values as $option) {
    63. 

  63. 		if($current_brand == $option['id']) {
    64. 

  64. 			$selected = "selected='selected'";
    65. 

  65. 		}
    66. 

  66. 		$options .= "<option  $selected value='".$option['id']."'>".$option['name']."</option>\r\n";
    67. 

  67. 		$selected = "";
    68. 

  68. 	}
    69. 

  69. 	$concat .= "<select name='variations' onChange='add_variation_value_list(this.options[this.selectedIndex].value)'>".$options."</select>\r\n";
    70. 

  70. 	return $concat;
    71. 

  71. }
    72. 

  72. 

  73. /*
    74. 

  74.  * Makes the order changes
    75. 

  75.  */
    76. 

  76. 

  77. if(is_numeric($_GET['catid']) && is_numeric($_GET['product_id']) && ($_GET['position_action'] != ''))
    78. 

  78.   {
    79. 

  79.   $position_cat_id = $_GET['catid'];
    80. 

  80.   $position_prod_id = $_GET['product_id'];
    81. 

  81.   $current_order_row = $wpdb->get_results("SELECT * FROM `".$wpdb->prefix."product_order` WHERE `category_id` IN('$position_cat_id') AND `product_id` IN('$position_prod_id') LIMIT 1;",ARRAY_A);
    82. 

  82.   $current_order_row = $current_order_row[0];
    83. 

  83.   switch($_GET['position_action'])
    84. 

  84.     {
    85. 

  85.     case 'top':
    86. 

  86.     if($current_order_row['order'] > 0) 
    87. 

  87.       {
    88. 

  88.       $check_existing = $wpdb->get_results("SELECT * FROM `".$wpdb->prefix."product_order` WHERE `category_id` IN('$position_cat_id') AND `order` IN('0') LIMIT 1;",ARRAY_A);
    89. 

  89.       $wpdb->query("UPDATE `".$wpdb->prefix."product_order` SET `order` = '0' WHERE `category_id` IN('$position_cat_id') AND `product_id` IN('$position_prod_id') LIMIT 1;");
    90. 

  90.       if($check_existing != null)
    91. 

  91.         {
    92. 

  92.         $wpdb->query("UPDATE `".$wpdb->prefix."product_order` SET `order` = (`order` + 1) WHERE `category_id` IN('$position_cat_id') AND `product_id` NOT IN('$position_prod_id') AND `order` < '".$current_order_row['order']."'");
    93. 

  93.         }
    94. 

  94.       }
    95. 

  95.     break;
    96. 

  96.     
    97. 

  97.     case 'up':
    98. 

  98.     if($current_order_row['order'] > 0) 
    99. 

  99.       {
    100. 

  100.       $target_rows = $wpdb->get_results("SELECT * FROM `".$wpdb->prefix."product_order` WHERE `category_id` IN ('".$position_cat_id."') AND `order` <= '".$current_order_row['order']."' ORDER BY `order` DESC LIMIT 2",ARRAY_A);
    101. 

  101.       //exit("<pre>".print_r($target_rows,true)."</pre>");
    102. 

  102.       if(count($target_rows) == 2)
    103. 

  103.         {
    104. 

  104.         $wpdb->query("UPDATE `".$wpdb->prefix."product_order` SET `order` = '".$target_rows[1]['order']."' WHERE `category_id` IN('$position_cat_id') AND `product_id` IN('".$target_rows[0]['product_id']."') LIMIT 1");
    105. 

  105.         $wpdb->query("UPDATE `".$wpdb->prefix."product_order` SET `order` = '".$target_rows[0]['order']."' WHERE `category_id` IN('$position_cat_id') AND `product_id` IN('".$target_rows[1]['product_id']."') LIMIT 1");
    106. 

  106.         }
    107. 

  107.       }
    108. 

  108.     break;
    109. 

  109.     
    110. 

  110.     case 'down':
    111. 

  111.     $target_rows = $wpdb->get_results("SELECT * FROM `".$wpdb->prefix."product_order` WHERE `category_id` IN ('".$position_cat_id."') AND `order` >= '".$current_order_row['order']."' ORDER BY `order` ASC LIMIT 2",ARRAY_A);
    112. 

  112.     //exit("<pre>".print_r($target_rows,true)."</pre>");
    113. 

  113.     if(count($target_rows) == 2)
    114. 

  114.       {
    115. 

  115.       $wpdb->query("UPDATE `".$wpdb->prefix."product_order` SET `order` = '".$target_rows[1]['order']."' WHERE `category_id` IN('$position_cat_id') AND `product_id` IN('".$target_rows[0]['product_id']."') LIMIT 1");
    116. 

  116.       $wpdb->query("UPDATE `".$wpdb->prefix."product_order` SET `order` = '".$target_rows[0]['order']."' WHERE `category_id` IN('$position_cat_id') AND `product_id` IN('".$target_rows[1]['product_id']."') LIMIT 1");
    117. 

  117.       }
    118. 

  118.     break;
    119. 

  119.     
    120. 

  120.     case 'bottom':
    121. 

  121.     $end_row = $wpdb->get_results("SELECT MAX( `order` ) AS `order` FROM `".$wpdb->prefix."product_order` WHERE `category_id` IN ('".$position_cat_id."') LIMIT 1",ARRAY_A);
    122. 

  122.     $end_order_number = $end_row[0]['order'];
    123. 

  123.     //exit($current_order_row['order'] . " | " . $end_order_number);
    124. 

  124.     if($current_order_row['order'] < $end_order_number)
    125. 

  125.       {
    126. 

  126.       $wpdb->query("UPDATE `".$wpdb->prefix."product_order` SET `order` = '$end_order_number' WHERE `category_id` IN('$position_cat_id') AND `product_id` IN('$position_prod_id') LIMIT 1;");      
    127. 

  127.       $wpdb->query("UPDATE `".$wpdb->prefix."product_order` SET `order` = (`order` - 1) WHERE `category_id` IN('$position_cat_id') AND `product_id` NOT IN('$position_prod_id') AND `order` > '".$current_order_row['order']."'");
    128. 

  128.       }
    129. 

  129.     break;
    130. 

  130.     
    131. 

  131.     default:
    132. 

  132.     break;
    133. 

  133.     }
    134. 

  134.   }
    135. 

  135. 

  136. 

  137. /*
    138. 

  138.  * Adds new products
    139. 

  139.  */
    140. 

  140. if($_POST['submit_action'] == 'add') {
    141. 

  141.   // well, there is simply no way to do this other than the blatantly obvious, so here it is
    142. 

  142.   if(!is_callable('getshopped_item_limit') || (@getshopped_item_limit() !== false)) {
    143. 

  143.   
    144. 

  144. 		//Allen's Change for Google base
    145. 

  145. 		if (isset($_GET['token']) || isset($_SESSION['google_base_sessionToken'])) {
    146. 

  146. 			$sessionToken=exchangeToken($_GET['token']);
    147. 

  147. 			$_SESSION['google_base_sessionToken'] = $sessionToken;
    148. 

  148. 			if (isset($_SESSION['google_base_sessionToken']))
    149. 

  149. 				$sessionToken=$_SESSION['google_base_sessionToken'];
    150. 

  150. 			postItem($_POST['name'], $_POST['price'], $_POST['description'], $sessionToken);
    151. 

  151. 		}
    152. 

  152. 	//Google base change ends here
    153. 

  153. 	
    154. 

  154. 		$file_name = null;
    155. 

  155. 		if($_POST['file_url'] != null) {
    156. 

  156. 			$url_array = array_reverse(explode("/",$_POST['file_url']));
    157. 

  157. 			if(is_file(WPSC_FILE_DIR.$url_array[0])) {
    158. 

  158. 				$file_name = $url_array[0];
    159. 

  159. 			}
    160. 

  160. 		}
    161. 

  161. 		
    162. 

  162. 		$thumbnail_image = '';
    163. 

  163. 		
    164. 

  164. 			
    165. 

  165. 		$file = 0;  
    166. 

  166. 		/* handle adding file uploads here */
    167. 

  167. 		if(!empty($_FILES['file']['name'])) {
    168. 

  168. 			$fileid = wpsc_item_process_file('add');
    169. 

  169. 			$file = $fileid;
    170. 

  170. 		} else if (($_POST['select_product_file'] != '')) {
    171. 

  171. 			$fileid = wpsc_item_reassign_file($_POST['select_product_file'], 'add');
    172. 

  172. 			$file = $fileid;
    173. 

  173. 		}
    174. 

  174. 				
    175. 

  175. 		
    176. 

  176. 	if(is_numeric($_POST['quantity']) && ($_POST['quantity_limited'] == "yes")) {
    177. 

  177. 				$quantity_limited = 1;
    178. 

  178. 				$quantity = (int)$_POST['quantity'];
    179. 

  179. 			} else {
    180. 

  180. 				$quantity_limited = 0;
    181. 

  181. 				$quantity = 0;
    182. 

  182. 			}
    183. 

  183. 				
    184. 

  184. 			if($_POST['special'] == 'yes') {
    185. 

  185. 				$special = 1;
    186. 

  186. 				if(is_numeric($_POST['special_price'])) {
    187. 

  187. 					$special_price = $_POST['price'] - $_POST['special_price'];
    188. 

  188. 				}
    189. 

  189. 			} else {
    190. 

  190. 				$special = 0;
    191. 

  191. 				$special_price = '';
    192. 

  192. 			}
    193. 

  193. 			
    194. 

  194. 			if($_POST['notax'] == 'yes') {
    195. 

  195. 				$notax = 1;
    196. 

  196. 			} else {
    197. 

  197. 				$notax = 0;
    198. 

  198. 			}
    199. 

  199. 	
    200. 

  200. 				
    201. 

  201. 			if($_POST['display_frontpage'] == "yes") {
    202. 

  202. 				$display_frontpage = 1;
    203. 

  203. 			} else {
    204. 

  204. 				$display_frontpage = 0;
    205. 

  205. 			}
    206. 

  206. 			
    207. 

  207. 			if($_POST['donation'] == "yes") {
    208. 

  208. 				$is_donation = 1;
    209. 

  209. 			} else {
    210. 

  210. 				$is_donation = 0;
    211. 

  211. 			}
    212. 

  212. 			
    213. 

  213. 			if($_POST['no_shipping'] == "yes") {
    214. 

  214. 				$no_shipping = 1;
    215. 

  215. 			} else {
    216. 

  216. 				$no_shipping = 0;
    217. 

  217. 			}
    218. 

  218. 	
    219. 

  219. 				
    220. 

  220. 	
    221. 

  221. 				
    222. 

  222. 			//modified for USPS
    223. 

  223. 		$insertsql = "INSERT INTO `".$wpdb->prefix."product_list` ( `name` , `description` , `additional_description` , `price`, `weight`, `weight_unit`, `pnp`, `international_pnp`, `file` , `image` , `brand`, `quantity_limited`, `quantity`, `special`, `special_price`, `display_frontpage`,`notax`, `donation`, `no_shipping`, `thumbnail_image`, `thumbnail_state`) VALUES ('".$wpdb->escape($_POST['name'])."', '".$wpdb->escape($_POST['description'])."', '".$wpdb->escape($_POST['additional_description'])."','".(float)$wpdb->escape(str_replace(",","",$_POST['price']))."','".$wpdb->escape((float)$_POST['weight'])."','".$wpdb->escape($_POST['weight_unit'])."', '".$wpdb->escape((float)$_POST['pnp'])."', '".$wpdb->escape($_POST['international_pnp'])."', '".(int)$file."', '".$image."', '0', '$quantity_limited','$quantity','$special','$special_price', '$display_frontpage', '$notax', '$is_donation', '$no_shipping', '".$wpdb->escape($thumbnail_image)."', '" . $wpdb->escape($_POST['image_resize']) . "');";
    224. 

  224. 		
    225. 

  225. 		
    226. 

  226. 		if($wpdb->query($insertsql)) {  
    227. 

  227. 			$product_id_data = $wpdb->get_results("SELECT LAST_INSERT_ID() AS `id` FROM `".$wpdb->prefix."product_list` LIMIT 1",ARRAY_A);
    228. 

  228. 			$product_id = $product_id_data[0]['id'];
    229. 

  229. 			if(function_exists('wp_insert_term')) {
    230. 

  230. 				product_tag_init();
    231. 

  231. 				$tags = $_POST['product_tag'];
    232. 

  232. 				if ($tags!="") {
    233. 

  233. 					$tags = explode(',',$tags);
    234. 

  234. 					foreach($tags as $tag) {
    235. 

  235. 						$tt = wp_insert_term((string)$tag, 'product_tag');
    236. 

  236. 					}
    237. 

  237. 					$return = wp_set_object_terms($product_id, $tags, 'product_tag');
    238. 

  238. 				}
    239. 

  239. 			}
    240. 

  240. 		
    241. 

  241. 				/* Handle new image uploads here */
    242. 

  242. 			$image = wpsc_item_process_image($product_id);
    243. 

  243. 	
    244. 

  244. 	
    245. 

  245. 			/* Process extra meta values */
    246. 

  246. 			if($_POST['productmeta_values'] != null) {
    247. 

  247. 				foreach((array)$_POST['productmeta_values'] as $key => $value) {
    248. 

  248. 					if(get_product_meta($product_id, $key) != false) {
    249. 

  249. 						update_product_meta($product_id, $key, $value);
    250. 

  250. 					} else {
    251. 

  251. 						add_product_meta($product_id, $key, $value);
    252. 

  252. 					}
    253. 

  253. 				}
    254. 

  254. 			}
    255. 

  255. 					
    256. 

  256. 			if($_POST['new_custom_meta'] != null) {
    257. 

  257. 				foreach((array)$_POST['new_custom_meta']['name'] as $key => $name) {
    258. 

  258. 					$value = $_POST['new_custom_meta']['value'][(int)$key];
    259. 

  259. 					if(($name != '') && ($value != '')) {
    260. 

  260. 						add_product_meta($product_id, $name, $value, false, true);
    261. 

  261. 					}
    262. 

  262. 				}
    263. 

  263. 			}
    264. 

  264. 			
    265. 

  265. 			do_action('wpsc_product_form_submit', $product_id);
    266. 

  266. 			
    267. 

  267. 			/* Add tidy url name */
    268. 

  268. 			$tidied_name = trim($_POST['name']);
    269. 

  269. 			$tidied_name = strtolower($tidied_name);
    270. 

  270. 			$url_name = preg_replace(array("/(\s)+/","/[^\w-]+/i"), array("-", ''), $tidied_name);
    271. 

  271. 			$similar_names = $wpdb->get_row("SELECT COUNT(*) AS `count`, MAX(REPLACE(`meta_value`, '$url_name', '')) AS `max_number` FROM `".$wpdb->prefix."wpsc_productmeta` WHERE `meta_key` IN ('url_name') AND `meta_value` REGEXP '^($url_name){1}(\d)*$' ",ARRAY_A);
    272. 

  272. 			$extension_number = '';
    273. 

  273. 			if($similar_names['count'] > 0) {
    274. 

  274. 				$extension_number = (int)$similar_names['max_number']+1;
    275. 

  275. 				}
    276. 

  276. 			$url_name .= $extension_number;
    277. 

  277. 			add_product_meta($product_id, 'url_name', $url_name,true);
    278. 

  278. 			
    279. 

  279. 			if(($_FILES['extra_image'] != null) && function_exists('edit_submit_extra_images')) {
    280. 

  280. 				$var = edit_submit_extra_images($product_id);
    281. 

  281. 			}
    282. 

  282. 			
    283. 

  283. 			$variations_procesor = new nzshpcrt_variations;
    284. 

  284. 			if($_POST['variation_values'] != null) {
    285. 

  285. 				$variations_procesor->add_to_existing_product($product_id,$_POST['variation_values']);
    286. 

  286. 			}
    287. 

  287. 				
    288. 

  288. 			if($_POST['variation_priceandstock'] != null) {
    289. 

  289. 				$variations_procesor->update_variation_values($product_id, $_POST['variation_priceandstock']);
    290. 

  290. 	// 			  exit("<pre>".print_r($_POST,true)."</pre>");
    291. 

  291. 			}
    292. 

  292. 			
    293. 

  293. 			
    294. 

  294. 				//$variations_procesor->edit_add_product_values($_POST['prodid'],$_POST['edit_add_variation_values']);
    295. 

  295. 			$counter = 0;
    296. 

  296. 			$item_list = '';
    297. 

  297. 			if(count($_POST['category']) > 0) {
    298. 

  298. 				foreach($_POST['category'] as $category_id) {
    299. 

  299. 					$check_existing = $wpdb->get_var("SELECT `id` FROM `".$wpdb->prefix."item_category_associations` WHERE `product_id` = ".$product_id." AND `category_id` = '$category_id' LIMIT 1");
    300. 

  300. 					if($check_existing == null) {
    301. 

  301. 						$wpdb->query("INSERT INTO `".$wpdb->prefix."item_category_associations` ( `product_id` , `category_id` ) VALUES ( '".$product_id."', '".$category_id."');");        
    302. 

  302. 					}
    303. 

  303. 				}
    304. 

  304. 			}
    305. 

  305. 			// send the pings out.
    306. 

  306. 		 wpsc_ping();		
    307. 

  307. 			
    308. 

  308. 			$display_added_product = "filleditform(".$product_id.");";
    309. 

  309. 			
    310. 

  310. 			echo "<div class='updated'><p align='center'>".TXT_WPSC_ITEMHASBEENADDED."</p></div>";
    311. 

  311. 		} else {
    312. 

  312. 			echo "<div class='updated'><p align='center'>".TXT_WPSC_ITEMHASNOTBEENADDED."</p></div>";
    313. 

  313. 		}
    314. 

  314. 	} else {
    315. 

  315. 		echo "<div class='updated'><p align='center'>".TXT_WPSC_MAX_PRODUCTS."</p></div>";
    316. 

  316. 	}
    317. 

  317. }
    318. 

  318. 

  319. if($_GET['submit_action'] == "remove_set")
    320. 

  320.   {
    321. 

  321.   if(is_numeric($_GET['product_id']) && is_numeric($_GET['variation_assoc_id']))
    322. 

  322.     {
    323. 

  323.     $product_id = $_GET['product_id'];
    324. 

  324.     $variation_assoc_id = $_GET['variation_assoc_id'];
    325. 

  325.     $check_association_id = $wpdb->get_var("SELECT `id` FROM `".$table_prefix."variation_associations` WHERE `id` = '$variation_assoc_id' LIMIT 1");
    326. 

  326.     if(($variation_assoc_id > 0) && ($variation_assoc_id == $check_association_id))
    327. 

  327.       {
    328. 

  328.       $variation_association = $wpdb->get_row("SELECT * FROM `".$table_prefix."variation_associations` WHERE `id` = '$variation_assoc_id' LIMIT 1",ARRAY_A);
    329. 

  329.       $delete_variation_sql = "DELETE FROM `".$table_prefix."variation_associations` WHERE `id` = '$variation_assoc_id' LIMIT 1";
    330. 

  330.       $wpdb->query($delete_variation_sql);
    331. 

  331.       //echo("<pre>".print_r($variation_association,true)."</pre>");
    332. 

  332.       if($variation_association != null)
    333. 

  333.         {
    334. 

  334.         $variation_id = $variation_association['variation_id'];
    335. 

  335.         $delete_value_sql = "DELETE FROM `".$table_prefix."variation_values_associations` WHERE `product_id` = '$product_id' AND `variation_id` = '$variation_id'";
    336. 

  336.         //exit($delete_value_sql);
    337. 

  337.         $wpdb->query($delete_value_sql);
    338. 

  338.         }
    339. 

  339.       echo "<div class='updated'><p align='center'>".TXT_WPSC_PRODUCTHASBEENEDITED."</p></div>";
    340. 

  340.       }
    341. 

  341.     } 
    342. 

  342.   }
    343. 

  343. 

  344. if($_POST['submit_action'] == "edit") {
    345. 

  345. //   exit("<pre>".print_r($_POST,true)."</pre>");
    346. 

  346.   $id = $_POST['prodid'];
    347. 

  347.   if(function_exists('edit_submit_extra_images'))
    348. 

  348.     {
    349. 

  349.     if(($_FILES['extra_image'] != null))
    350. 

  350.       {
    351. 

  351.       $var = edit_submit_extra_images($id);
    352. 

  352.       }
    353. 

  353.     }
    354. 

  354.   if(function_exists('edit_extra_images'))
    355. 

  355.     {
    356. 

  356.     $var = edit_extra_images($id);
    357. 

  357.     } 
    358. 

  358.     
    359. 

  359. 	$file_name = null;
    360. 

  360. 	if($_POST['file_url'] != null) {
    361. 

  361. 	$url_array = array_reverse(explode("/",$_POST['file_url']));
    362. 

  362. 	//exit("<pre>".print_r($url_array,true)."</pre>");
    363. 

  363. 	if(is_file(WPSC_FILE_DIR.$url_array[0])) {
    364. 

  364. 		$file_name = $url_array[0];
    365. 

  365. 		}
    366. 

  366. 	}
    367. 

  367.   
    368. 

  368. 	//written by allen
    369. 

  369. 	if(isset($_POST['product_tags'])) {
    370. 

  370. 		$imtags = $_POST['product_tags'];
    371. 

  371. 		$tags = explode(',',$imtags);
    372. 

  372. 		product_tag_init();
    373. 

  373. 		if(is_array($tags)) {
    374. 

  374. 			foreach((array)$tags as $tag){
    375. 

  375. 				$tt = wp_insert_term((string)$tag, 'product_tag');
    376. 

  376. 			}
    377. 

  377. 		}
    378. 

  378. 		wp_set_object_terms($id, $tags, 'product_tag');
    379. 

  379. 	}
    380. 

  380. 	//end of written by allen
    381. 

  381. 

  382. 	if (isset($_POST['external_link'])) {
    383. 

  383. 		add_product_meta($_POST['prodid'], 'external_link', $_POST['external_link'],true);
    384. 

  384. 	}
    385. 

  385. 	
    386. 

  386. 	if (isset($_POST['merchant_notes'])) {
    387. 

  387. 		$id = (int)$_POST['prodid'];
    388. 

  388. 		$notes = $_POST['merchant_notes'];
    389. 

  389. 		$updatelink_sql = "SELECT * FROM `".$wpdb->prefix."wpsc_productmeta` WHERE `product_id` = '$id' AND `meta_key`='merchant_notes'";
    390. 

  390. 		$updatelink_data = $wpdb->get_results($updatelink_sql, ARRAY_A);
    391. 

  391. 		if (count($updatelink_data)>0){
    392. 

  392. 			$updatelink_sql = "UPDATE `".$wpdb->prefix."wpsc_productmeta` SET `meta_value` = '$notes' WHERE `product_id` = '$id' AND `meta_key`='merchant_notes'";
    393. 

  393. 			$updatelink_data = $wpdb->query($updatelink_sql);
    394. 

  394. 		} else {
    395. 

  395. 			$updatelink_sql = "INSERT INTO `".$wpdb->prefix."wpsc_productmeta` (`product_id`,`meta_key`,`meta_value`) VALUES('$id','merchant_notes' ,'$notes')";
    396. 

  396. 			$updatelink_data = $wpdb->query($updatelink_sql);
    397. 

  397. 		}
    398. 

  398. 	}
    399. 

  399. 	
    400. 

  400. // 	if (isset($_POST['engrave'])) {
    401. 

  401. // 		$id = $_POST['prodid'];
    402. 

  402. // 		$engrave = $_POST['engrave'];
    403. 

  403. // 		$updatelink_sql = "SELECT * FROM ".$wpdb->prefix."wpsc_productmeta WHERE product_id = $id AND meta_key='merchant_notes'";
    404. 

  404. // 		$updatelink_data = $wpdb->get_results($updatelink_sql, ARRAY_A);
    405. 

  405. // 		if (count($updatelink_data)>0){
    406. 

  406. // 			$updatelink_sql = "UPDATE ".$wpdb->prefix."wpsc_productmeta SET meta_value = '$notes' WHERE product_id = $id AND meta_key='merchant_notes'";
    407. 

  407. // 			$updatelink_data = $wpdb->query($updatelink_sql);
    408. 

  408. // 		} else {
    409. 

  409. // 			$updatelink_sql = "INSERT INTO ".$wpdb->prefix."wpsc_productmeta VALUES('',$id,'merchant_notes' ,'$notes')";
    410. 

  410. // 			$updatelink_data = $wpdb->query($updatelink_sql);
    411. 

  411. // 		}
    412. 

  412. // 	}
    413. 

  413.   
    414. 

  414.   /* handle editing file uploads here */
    415. 

  415.   if(!empty($_FILES['file']['name'])) {
    416. 

  416. 		$fileid = wpsc_item_process_file('edit');
    417. 

  417. 		$file = $fileid;
    418. 

  418. 	} else if (($_POST['select_product_file'] != '')) {
    419. 

  419. 		$fileid = wpsc_item_reassign_file($_POST['select_product_file'], 'edit');
    420. 

  420. 		$file = $fileid;
    421. 

  421. 	}
    422. 

  422. 

  423.   
    424. 

  424. 	if(file_exists($_FILES['preview_file']['tmp_name'])) {
    425. 

  425. 		$fileid = $wpdb->get_var("SELECT `file` FROM `".$wpdb->prefix."product_list` WHERE `id` = '$id' LIMIT 1");
    426. 

  426. 		copy($_FILES['preview_file']['tmp_name'], (WPSC_PREVIEW_DIR.basename($_FILES['preview_file']['name'])));
    427. 

  427. 		$mimetype = wpsc_get_mimetype(WPSC_PREVIEW_DIR.basename($_FILES['preview_file']['name']));
    428. 

  428. 		$wpdb->query("UPDATE `".$wpdb->prefix."product_files` SET `preview` = '".$wpdb->escape(basename($_FILES['preview_file']['name']))."', `preview_mimetype` = '".$mimetype."' WHERE `id` = '$fileid' LIMIT 1");
    429. 

  429. 		}
    430. 

  430. 

  431.   /* Handle new image uploads here */
    432. 

  432.   $image = wpsc_item_process_image();
    433. 

  433. 

  434. 

  435.   if(is_numeric($_POST['prodid'])) {
    436. 

  436. 		if(($_POST['image_resize'] == 1 || $_POST['image_resize'] == 2) && ($image == '')) {
    437. 

  437.       /*  resize the image if directed to do so and no new image is supplied  */
    438. 

  438.       $image_data = $wpdb->get_row("SELECT `id`,`image` FROM `".$wpdb->prefix."product_list` WHERE `id`=".$_POST['prodid']." LIMIT 1",ARRAY_A);      
    439. 

  439.       // prevent images from being replaced by those from other products
    440. 

  440.       $check_multiple_use = $wpdb->get_var("SELECT COUNT(`image`) AS `count` FROM `".$wpdb->prefix."product_list` WHERE `image`='".$image_data['image']."'");
    441. 

  441.       if($check_multiple_use > 1) {
    442. 

  442.         $new_filename = $image_data['id']."_".$image_data['image'];
    443. 

  443.         if(file_exists(WPSC_THUMBNAIL_DIR.$image_data['image']) && ($image_data['image'] != null)) {
    444. 

  444.           copy(WPSC_THUMBNAIL_DIR.$image_data['image'], WPSC_THUMBNAIL_DIR.$new_filename);
    445. 

  445.           }
    446. 

  446.         if(file_exists(WPSC_IMAGE_DIR.$image_data['image']) && ($image_data['image'] != null)) {
    447. 

  447.           copy(WPSC_IMAGE_DIR.$image_data['image'], WPSC_IMAGE_DIR.$new_filename);
    448. 

  448.           }
    449. 

  449.         $wpdb->query("UPDATE `".$wpdb->prefix."product_list` SET `image` = '".$new_filename."' WHERE `id`='".$image_data['id']."' LIMIT 1");
    450. 

  450.         $image_data = $wpdb->get_row("SELECT `id`,`image` FROM `".$wpdb->prefix."product_list` WHERE `id`=".$_POST['prodid']." LIMIT 1",ARRAY_A);
    451. 

  451.         }
    452. 

  452.         
    453. 

  453.         
    454. 

  454.       if(file_exists(WPSC_THUMBNAIL_DIR.$image_data['image']) && ($image_data['image'] != '')) {
    455. 

  455.         $imagepath = WPSC_IMAGE_DIR . $image_data['image'];
    456. 

  456.         $image_output = WPSC_THUMBNAIL_DIR . $image_data['image'];
    457. 

  457.         switch($_POST['image_resize']) {
    458. 

  458.           case 1:
    459. 

  459.           $height = get_option('product_image_height');
    460. 

  460.           $width  = get_option('product_image_width');
    461. 

  461.           break;
    462. 

  462.   
    463. 

  463.           case 2:
    464. 

  464.           $height = $_POST['height'];
    465. 

  465.           $width  = $_POST['width'];
    466. 

  466.           break;
    467. 

  467.           }
    468. 

  468.         image_processing($imagepath, $image_output, $width, $height);
    469. 

  469.         }
    470. 

  470.     }
    471. 

  471.     
    472. 

  472.     if(is_numeric($_POST['prodid'])) {
    473. 

  473.       $counter = 0;
    474. 

  474.       $item_list = '';
    475. 

  475.       if(count($_POST['category']) > 0) {
    476. 

  476.         foreach($_POST['category'] as $category_id) {
    477. 

  477.           $category_id = (int)$category_id; // force it to be an integer rather than check if it is one
    478. 

  478.           $check_existing = $wpdb->get_var("SELECT `id` FROM `".$wpdb->prefix."item_category_associations` WHERE `product_id` = ".$id." AND `category_id` = '$category_id' LIMIT 1");
    479. 

  479.           if($check_existing == null) {
    480. 

  480.             $wpdb->query("INSERT INTO `".$wpdb->prefix."item_category_associations` ( `product_id` , `category_id` ) VALUES ('".$id."', '".$category_id."');");        
    481. 

  481. 					}
    482. 

  482.           if($counter > 0) {
    483. 

  483.             $item_list .= ", ";
    484. 

  484. 					}
    485. 

  485.           $item_list .= "'".$category_id."'";
    486. 

  486.           $counter++;
    487. 

  487. 				}
    488. 

  488. 			} else {
    489. 

  489. 				$item_list = "'0'";
    490. 

  490. 			}
    491. 

  491.       $wpdb->query("DELETE FROM `".$wpdb->prefix."item_category_associations` WHERE `product_id`= '$id' AND `category_id` NOT IN (".$item_list.")"); 
    492. 

  492. 		}
    493. 

  493.       
    494. 

  494. 		$key = Array();
    495. 

  495. 		
    496. 

  496.          
    497. 

  497. 		if(is_numeric($_POST['quantity']) && ($_POST['quantity_limited'] == "yes")){
    498. 

  498. 			$quantity_limited = 1;
    499. 

  499. 			$quantity = $_POST['quantity'];
    500. 

  500. 		} else {
    501. 

  501. 			$quantity_limited = 0;
    502. 

  502. 			$quantity = 0;
    503. 

  503. 		}
    504. 

  504.        
    505. 

  505.     if($_POST['special'] == 'yes') {
    506. 

  506.       $special = 1;
    507. 

  507. 			if(is_numeric($_POST['special_price'])) {
    508. 

  508. 				$special_price = $_POST['price'] - $_POST['special_price'];
    509. 

  509. 				}
    510. 

  510.       } else {
    511. 

  511.         $special = 0;
    512. 

  512.         $special_price = '';
    513. 

  513. 			}
    514. 

  514.   
    515. 

  515.     if($_POST['notax'] == 'yes') {
    516. 

  516.       $notax = 1;
    517. 

  517. 		} else {
    518. 

  518. 			$notax = 0;
    519. 

  519. 		}
    520. 

  520. 

  521.       
    522. 

  522. 		if($_POST['display_frontpage'] == "yes") {
    523. 

  523. 			$display_frontpage = 1;
    524. 

  524. 		} else {
    525. 

  525. 			$display_frontpage = 0;
    526. 

  526. 		}
    527. 

  527.    
    528. 

  528. 		if($_POST['donation'] == "yes") {
    529. 

  529. 			$is_donation = 1;
    530. 

  530. 		} else {
    531. 

  531. 			$is_donation = 0;
    532. 

  532. 		}
    533. 

  533.    
    534. 

  534. 		if($_POST['no_shipping'] == "yes") {
    535. 

  535. 			$no_shipping = 1;
    536. 

  536. 		} else {
    537. 

  537. 			$no_shipping = 0;
    538. 

  538. 		}
    539. 

  539. 		
    540. 

  540. 		$updatesql = "UPDATE `".$wpdb->prefix."product_list` SET `name` = '".$wpdb->escape($_POST['title'])."', `description` = '".$wpdb->escape($_POST['description'])."', `additional_description` = '".$wpdb->escape($_POST['additional_description'])."', `price` = '".$wpdb->escape(str_replace(",","",$_POST['price']))."', `pnp` = '".(float)$wpdb->escape($_POST['pnp'])."', `international_pnp` = '".(float)$wpdb->escape($_POST['international_pnp'])."', `brand` = '0', quantity_limited = '".$quantity_limited."', `quantity` = '".(int)$quantity."', `special`='$special', `special_price`='$special_price', `display_frontpage`='$display_frontpage', `notax`='$notax', `donation`='$is_donation', `no_shipping` = '$no_shipping', `weight` = '".$wpdb->escape($_POST['weight'])."', `weight_unit` = '".$wpdb->escape($_POST['weight_unit'])."'  WHERE `id`='".$_POST['prodid']."' LIMIT 1";
    541. 

  541. 

  542. 		$wpdb->query($updatesql);
    543. 

  543. 		if(($_FILES['image']['name'] != null) && ($image != null)) {
    544. 

  544. 			$wpdb->query("UPDATE `".$wpdb->prefix."product_list` SET `image` = '".$image."' WHERE `id`='".$_POST['prodid']."' LIMIT 1");
    545. 

  545. 		}
    546. 

  546.     
    547. 

  547.     if($_POST['productmeta_values'] != null) {
    548. 

  548.       foreach((array)$_POST['productmeta_values'] as $key => $value) {
    549. 

  549.         if(get_product_meta($_POST['prodid'], $key) != false) {
    550. 

  550.           update_product_meta($_POST['prodid'], $key, $value);
    551. 

  551.           } else {
    552. 

  552.           add_product_meta($_POST['prodid'], $key, $value);
    553. 

  553.           }
    554. 

  554.         }
    555. 

  555.       }
    556. 

  556. 

  557.     if($_POST['new_custom_meta'] != null) {
    558. 

  558.       foreach((array)$_POST['new_custom_meta']['name'] as $key => $name) {
    559. 

  559. 				$value = $_POST['new_custom_meta']['value'][(int)$key];
    560. 

  560.         if(($name != '') && ($value != '')) {
    561. 

  561. 					add_product_meta($_POST['prodid'], $name, $value, false, true);
    562. 

  562.         }
    563. 

  563. 			}
    564. 

  564. 		}
    565. 

  565. 		
    566. 

  566. 		
    567. 

  567.     if($_POST['custom_meta'] != null) {
    568. 

  568.       foreach((array)$_POST['custom_meta'] as $key => $values) {
    569. 

  569.         if(($values['name'] != '') && ($values['value'] != '')) {
    570. 

  570.           $wpdb->query("UPDATE `".$wpdb->prefix."wpsc_productmeta` SET `meta_key` = '".$wpdb->escape($values['name'])."', `meta_value` = '".$wpdb->escape($values['value'])."' WHERE `id` IN ('".(int)$key."')LIMIT 1 ;");
    571. 

  571.          // echo "UPDATE `".$wpdb->prefix."wpsc_productmeta` SET `meta_key` = '".$wpdb->escape($values['name'])."', `meta_value` = '".$wpdb->escape($values['value'])."' WHERE `id` IN ('".(int)$key."') LIMIT 1 ;";
    572. 

  572. 					//add_product_meta($_POST['prodid'], $values['name'], $values['value'], false, true);
    573. 

  573.         }
    574. 

  574. 			}
    575. 

  575. 		}
    576. 

  576. 

  577. 

  578. 

  579. 

  580.     do_action('wpsc_product_form_submit', $product_id);
    581. 

  581.     
    582. 

  582.     /* Add or edit tidy url name */
    583. 

  583.     $tidied_name = trim($_POST['title']);
    584. 

  584.     $tidied_name = strtolower($tidied_name);
    585. 

  585.     $url_name = preg_replace(array("/(\s)+/","/[^\w-]+/i"), array("-", ''), $tidied_name);
    586. 

  586.     $similar_names = $wpdb->get_row("SELECT COUNT(*) AS `count`, MAX(REPLACE(`meta_value`, '$url_name', '')) AS `max_number` FROM `".$wpdb->prefix."wpsc_productmeta` WHERE `meta_key` IN ('url_name') AND `meta_value` REGEXP '^($url_name){1}(\d)*$' ",ARRAY_A);
    587. 

  587.     $extension_number = '';
    588. 

  588.     if($similar_names['count'] > 0) {
    589. 

  589.       $extension_number = (int)$similar_names['max_number']+1;
    590. 

  590. 		}
    591. 

  591. 		
    592. 

  592.     $stored_name = get_product_meta($_POST['prodid'], 'url_name', true);
    593. 

  593.     if(get_product_meta($_POST['prodid'], 'url_name', true) != false) {
    594. 

  594.       $current_url_name = get_product_meta($_POST['prodid'], 'url_name');
    595. 

  595.       if($current_url_name[0] != $url_name) {
    596. 

  596.         $url_name .= $extension_number;
    597. 

  597.         update_product_meta($_POST['prodid'], 'url_name', $url_name);
    598. 

  598. 			}
    599. 

  599. 		} else {
    600. 

  600.       $url_name .= $extension_number;
    601. 

  601.       add_product_meta($_POST['prodid'], 'url_name', $url_name, true);
    602. 

  602. 		}
    603. 

  603.     
    604. 

  604.     /* update thumbnail images */
    605. 

  605.     if(!($thumbnail_image == null && $_POST['image_resize'] == 3 && $_POST['current_thumbnail_image'] != null)) {
    606. 

  606.       if($thumbnail_image != null) {
    607. 

  607.         $wpdb->query("UPDATE `".$wpdb->prefix."product_list` SET `thumbnail_image` = '".$thumbnail_image."' WHERE `id`='".$_POST['prodid']."' LIMIT 1");
    608. 

  608. 			}
    609. 

  609. 		}
    610. 

  610.       
    611. 

  611. 		$image_resize = $_POST['image_resize'];
    612. 

  612. 		if(!is_numeric($image_resize) || ($image_resize < 1)) {
    613. 

  613. 			$image_resize = 0;
    614. 

  614. 		}
    615. 

  615.       
    616. 

  616.     $wpdb->query("UPDATE `".$wpdb->prefix."product_list` SET `thumbnail_state` = '".$image_resize."' WHERE `id`='".$_POST['prodid']."' LIMIT 1");
    617. 

  617.     
    618. 

  618.     if($_POST['deleteimage'] == 1) {
    619. 

  619. 			$wpdb->query("UPDATE `".$wpdb->prefix."product_list` SET `image` = ''  WHERE `id`='".$_POST['prodid']."' LIMIT 1");
    620. 

  620. 		}
    621. 

  621.      
    622. 

  622. 		$variations_procesor = new nzshpcrt_variations;
    623. 

  623. 		if($_POST['variation_values'] != null) {
    624. 

  624. 			//$variations_procesor->add_to_existing_product($_POST['prodid'],$_POST['variation_values']);
    625. 

  625. 		}
    626. 

  626. 		
    627. 

  627. 		if($_POST['edit_variation_values'] != null) {
    628. 

  628. 			$variations_procesor->edit_product_values($_POST['prodid'],$_POST['edit_variation_values']);
    629. 

  629. 		}
    630. 

  630. 		
    631. 

  631. 		if($_POST['edit_add_variation_values'] != null) {
    632. 

  632. 			$variations_procesor->edit_add_product_values($_POST['prodid'],$_POST['edit_add_variation_values']);
    633. 

  633. 		}
    634. 

  634. 			
    635. 

  635. 		if($_POST['variation_priceandstock'] != null) {
    636. 

  636. 			$variations_procesor->update_variation_values($_POST['prodid'], $_POST['variation_priceandstock']);
    637. 

  637. 		}     
    638. 

  638. 		
    639. 

  639. 		// send the pings out.
    640. 

  640. 		wpsc_ping();
    641. 

  641. 		
    642. 

  642. 		echo "<div class='updated'><p align='center'>".TXT_WPSC_PRODUCTHASBEENEDITED."</p></div>";
    643. 

  643. 	}
    644. 

  644. }
    645. 

  645. 

  646. if(is_numeric($_GET['deleteid'])) { 
    647. 

  647.   $wpdb->query("DELETE FROM `".$wpdb->prefix."wpsc_productmeta` WHERE `product_id` = '".$_GET['deleteid']."' AND `meta_key` IN ('url_name')");  
    648. 

  648.   $wpdb->query("UPDATE `".$wpdb->prefix."product_list` SET  `active` = '0' WHERE `id`='".$_GET['deleteid']."' LIMIT 1");
    649. 

  649. }
    650. 

  650. 

  651. 

  652. 

  653. /*
    654. 

  654.  * Sort out the searching of the products
    655. 

  655.  */
    656. 

  656. if($_GET['search_products']) {
    657. 

  657. 	$search_string_title = "%".$wpdb->escape(stripslashes($_GET['search_products']))."%";
    658. 

  658. 	$search_string_description = "% ".$wpdb->escape(stripslashes($_GET['search_products']))."%";
    659. 

  659. 	
    660. 

  660. 	$search_sql = "AND (`".$wpdb->prefix."product_list`.`name` LIKE '".$search_string_title."' OR `".$wpdb->prefix."product_list`.`description` LIKE '".$search_string_description."')";
    661. 

  661. 	
    662. 

  662. 	$search_string = $_GET['search_products'];
    663. 

  663. } else {
    664. 

  664.   $search_sql = '';
    665. 

  665.   $search_string = '';
    666. 

  666. }
    667. 

  667. 

  668. 

  669. 

  670. /*
    671. 

  671.  * Gets the product list, commented to make it stick out more, as it is hard to notice 
    672. 

  672.  */
    673. 

  673. if(is_numeric($_GET['catid'])) {    // if we are getting items from only one category, this is a monster SQL query to do this with the product order
    674. 

  674.   $sql = "SELECT `".$wpdb->prefix."product_list`.`id` , `".$wpdb->prefix."product_list`.`name` , `".$wpdb->prefix."product_list`.`price` , `".$wpdb->prefix."product_list`.`image`, `".$wpdb->prefix."item_category_associations`.`category_id`,`".$wpdb->prefix."product_order`.`order`, IF(ISNULL(`".$wpdb->prefix."product_order`.`order`), 0, 1) AS `order_state`
    675. 

  675. FROM `".$wpdb->prefix."product_list` 
    676. 

  676. LEFT JOIN `".$wpdb->prefix."item_category_associations` ON `".$wpdb->prefix."product_list`.`id` = `".$wpdb->prefix."item_category_associations`.`product_id` 
    677. 

  677. LEFT JOIN `".$wpdb->prefix."product_order` ON ( (
    678. 

  678. `".$wpdb->prefix."product_list`.`id` = `".$wpdb->prefix."product_order`.`product_id` 
    679. 

  679. )
    680. 

  680. AND (
    681. 

  681. `".$wpdb->prefix."item_category_associations`.`category_id` = `".$wpdb->prefix."product_order`.`category_id` 
    682. 

  682. ) ) 
    683. 

  683. WHERE `".$wpdb->prefix."product_list`.`active` = '1' $search_sql
    684. 

  684. AND `".$wpdb->prefix."item_category_associations`.`category_id` 
    685. 

  685. IN (
    686. 

  686. '".$_GET['catid']."'
    687. 

  687. )
    688. 

  688. ORDER BY `order_state` DESC,`".$wpdb->prefix."product_order`.`order` ASC,  `".$wpdb->prefix."product_list`.`id` DESC";
    689. 

    690. 

  690.   } else {
    691. 

  691. 		$itempp = 20;
    692. 

  692. 		if ($_GET['pnum']!='all') {
    693. 

  693. 			$page = (int)$_GET['pnum'];
    694. 

  694. 			
    695. 

  695. 			$start = $page * $itempp;
    696. 

  696. 			$sql = "SELECT DISTINCT * FROM `{$wpdb->prefix}product_list` WHERE `active`='1' $search_sql LIMIT $start,$itempp";
    697. 

  697. 		} else {
    698. 

  698. 			$sql = "SELECT DISTINCT * FROM `{$wpdb->prefix}product_list` WHERE `active`='1' $search_sql";
    699. 

  699. 		}
    700. 

  700. 	}  
    701. 

  701.     
    702. 

  702. $product_list = $wpdb->get_results($sql,ARRAY_A);
    703. 

  703. $num_products = $wpdb->get_var("SELECT COUNT(DISTINCT `id`) FROM `".$wpdb->prefix."product_list` WHERE `active`='1' $search_sql");
    704. 

  704. 

  705. /*
    706. 

  706.  * The product list is stored in $product_list now
    707. 

  707.  */
    708. 

  708.  
    709. 

  709.  /*
    710. 

  710.   * Detects if the directories for images, thumbnails and files are writeable, if they are not, tells the user to make them writeable.
    711. 

  711.  */
    712. 

  712.  
    713. 

  713.   $unwriteable_directories = Array();
    714. 

  714.   
    715. 

  715.   if(!is_writable(WPSC_FILE_DIR)) {
    716. 

  716.     $unwriteable_directories[] = WPSC_FILE_DIR;
    717. 

  717. 	}
    718. 

  718.   
    719. 

  719.   if(!is_writable(WPSC_PREVIEW_DIR)) {
    720. 

  720.     $unwriteable_directories[] = WPSC_PREVIEW_DIR;
    721. 

  721. 	}
    722. 

  722.  
    723. 

  723.   if(!is_writable(WPSC_IMAGE_DIR)) {
    724. 

  724.     $unwriteable_directories[] = WPSC_IMAGE_DIR;
    725. 

  725. 	}
    726. 

  726.   
    727. 

  727.   if(!is_writable(WPSC_THUMBNAIL_DIR)) {
    728. 

  728.     $unwriteable_directories[] = WPSC_THUMBNAIL_DIR;
    729. 

  729. 	}
    730. 

  730.   
    731. 

  731.   if(!is_writable(WPSC_CATEGORY_DIR)) {
    732. 

  732.     $unwriteable_directories[] = WPSC_CATEGORY_DIR;
    733. 

  733. 	}
    734. 

  734.     
    735. 

  735.   if(count($unwriteable_directories) > 0)
    736. 

  736.     {
    737. 

  737.     echo "<div class='error'>".str_replace(":directory:","<ul><li>".implode($unwriteable_directories, "</li><li>")."</li></ul>",TXT_WPSC_WRONG_FILE_PERMS)."</div>";
    738. 

  738.     }
    739. 

  739. ?>
    740. 

  740. 

  741. 

  742. <div class="wrap">
    743. 

  743.   <h2><?php echo TXT_WPSC_DISPLAYPRODUCTS;?></h2>
    744. 

  744. 

  745.   <?php
    746. 

  746.   ?>
    747. 

  747. 

  748. 

  749.   <script language='javascript' type='text/javascript'>
    750. 

  750. function conf() {
    751. 

  751.   var check = confirm("<?php echo TXT_WPSC_SURETODELETEPRODUCT;?>");
    752. 

  752.   if(check) {
    753. 

  753.     return true;
    754. 

  754.   } else  {
    755. 

  755.     return false;
    756. 

  756. 	}
    757. 

  757. }
    758. 

  758. <?php
    759. 

  759. if(is_numeric($_POST['prodid'])) {
    760. 

  760. 		echo "filleditform(".$_POST['prodid'].");";
    761. 

  761.   }
    762. 

  762. else if(is_numeric($_GET['product_id'])) {
    763. 

  763.     echo "filleditform(".$_GET['product_id'].");";
    764. 

  764.   }
    765. 

  765.   
    766. 

  766. echo $display_added_product ;
    767. 

  767. ?>
    768. 

  768. </script>
    769. 

  769. <div class="tablenav wpsc_products_nav">
    770. 

  770. 	<div style="width: 500px;" class="alignleft">
    771. 

  771. 		<a href='' onclick='return showaddform()' class='add_item_link'><img src='<?php echo WPSC_URL; ?>/images/package_add.png' alt='<?php echo TXT_WPSC_ADD; ?>' title='<?php echo TXT_WPSC_ADD; ?>' />&nbsp;<span><?php echo TXT_WPSC_ADDPRODUCT;?></span></a>
    772. 

  772. 	</div>
    773. 

  773. 	
    774. 

  774. 	
    775. 

  775. 	<div class="alignright">
    776. 

  776. 		<?php echo setting_button(); ?>
    777. 

  777. 		<a target="_blank" href='http://www.instinct.co.nz/e-commerce/products/' class='about_this_page'><span><?php echo TXT_WPSC_ABOUT_THIS_PAGE;?></span>&nbsp;</a>
    778. 

  778. 	
    779. 

  779. 	</div>
    780. 

  780. 

  781. 	
    782. 

  782. 	<br class="clear"/>
    783. 

  783. </div>
    784. 

  784. 

  785. 

  786.   <?php
    787. 

  787. $num = 0;
    788. 

  788. 

  789. 

  790. echo "    <table id='productpage'>\n\r";
    791. 

  791. echo "      <tr><td style='padding: 0px;'>\n\r";
    792. 

  792. echo "        <table id='itemlist'>\n\r";
    793. 

  793. echo "          <tr class='firstrowth'>\n\r";
    794. 

  794. echo "            <td colspan='4' style='text-align: left;'>\n\r";
    795. 

  795. echo "<span id='loadingindicator_span' class='product_loadingindicator'><img id='loadingimage' src='".WPSC_URL."/images/grey-loader.gif' alt='Loading' title='Loading' /></span>";
    796. 

  796. echo "<strong class='form_group'>".TXT_WPSC_SELECT_PRODUCT."</strong>";
    797. 

  797. echo "            </td>\n\r";
    798. 

  798. echo "          </tr>\n\r";
    799. 

  799. if(($num_products > 20) || ($search_string != '')) {
    800. 

  800. 	echo "          <tr class='selectcategory'>\n\r";
    801. 

  801. 	echo "            <td colspan='3'>\n\r";
    802. 

  802. 	echo TXT_WPSC_ADMIN_SEARCH_PRODUCTS.": ";
    803. 

  803. 	echo "            </td>\n\r";
    804. 

  804. 	echo "            <td colspan='1'>\n\r";
    805. 

  805. 	echo "<div>\n\r";
    806. 

  806. 	echo "  <form method='GET' action=''>\n\r";
    807. 

  807. 	echo "<input type='hidden' value='{$_GET['page']}' name='page'>";
    808. 

  808. 	echo "<input type='text' value='{$search_string}' name='search_products' style='width: 115px; padding: 1px;'>";
    809. 

  809. 	echo "  </form>\n\r";
    810. 

  810. 	echo "</div>\n\r";
    811. 

  811. 	echo "            </td>\n\r";
    812. 

  812. 	echo "          </tr>\n\r";
    813. 

  813. }
    814. 

  814. 

  815. 

  816. echo "          <tr class='selectcategory'>\n\r";
    817. 

  817. echo "            <td colspan='3'>\n\r";
    818. 

  818. echo TXT_WPSC_PLEASESELECTACATEGORY.": ";
    819. 

  819. echo "            </td>\n\r";
    820. 

  820. echo "            <td colspan='1'>\n\r";
    821. 

  821. echo "<div>\n\r";
    822. 

  822. echo topcategorylist();
    823. 

  823. //echo "<div style='float: right; width: 160px;'>". topcategorylist() ."</div>";
    824. 

  824. echo "</div>\n\r";
    825. 

  825. 

  826. echo "            </td>\n\r";
    827. 

  827. echo "          </tr>\n\r";
    828. 

  828. 

  829. if(is_numeric($_GET['catid'])) {
    830. 

  830. 	$name_style = 'class="pli_name"';
    831. 

  831. 	$price_style = 'class="pli_price"';
    832. 

  832. 	$edit_style = 'class="pli_edit"';
    833. 

  833. } else {
    834. 

  834. 	$name_style = '';
    835. 

  835. 	$price_style = '';
    836. 

  836. 	$edit_style = '';
    837. 

  837. }
    838. 

  838. 

  839. 

  840. echo "          <tr class='firstrow'>\n\r";
    841. 

  841. 

  842. echo "            <td width='45px'>";
    843. 

  843. echo "</td>\n\r";
    844. 

  844. 

  845. echo "            <td ".$name_style.">";
    846. 

  846. echo TXT_WPSC_NAME;
    847. 

  847. echo "</td>\n\r";
    848. 

  848. 

  849. echo "            <td ".$price_style.">";
    850. 

  850. echo TXT_WPSC_PRICE;
    851. 

  851. echo "</td>\n\r";
    852. 

  852. 

  853. if(!is_numeric($_GET['catid'])) {
    854. 

  854. 	echo "            <td>";
    855. 

  855. 	echo TXT_WPSC_CATEGORIES;
    856. 

  856. 	echo "</td>\n\r";
    857. 

  857. }
    858. 

  858. 

  859. echo "          </tr>\n\r";
    860. 

  860. if(is_numeric($_GET['catid'])) {
    861. 

  861. 	echo "<tr><td colspan='4'  class='category_item_container'>\n\r";
    862. 

  862. } 
    863. 

  863. 

  864. if($product_list != null)
    865. 

  865.   {
    866. 

  866.   $order_number = 0;
    867. 

  867. 	if(is_numeric($_GET['catid'])){
    868. 

  868. 	  echo "   <form><input type='hidden' name='category_id' id='item_list_category_id' value='".(int)$_GET['catid']."'/></form>";
    869. 

  869.     echo "   <div id='sort1' class='groupWrapper'>\n\r";
    870. 

  870.   }
    871. 

  871.   $tablei=1;
    872. 

  872.   foreach($product_list as $product)
    873. 

  873.     {
    874. 

  874.     /*
    875. 

  875.      * Creates order table entries if they are not already present
    876. 

  876.      * No need for extra database queries to determine the highest order number
    877. 

  877.      * anything without one is automatically at the bottom
    878. 

  878.      * so anything with an order number is already processed by the time it starts adding rows
    879. 

  879.      */
    880. 

  880. 	if(is_numeric($_GET['catid'])){
    881. 

  881. 		echo "    <div id='".$product['id']."' class='groupItem'>\n\r";
    882. 

  882. 		//echo "    <div class='itemHeader'></div>\n\r";
    883. 

  883. 		echo "    <div class='itemContent'>\n\r";
    884. 

  884. 	} else {
    885. 

  885. 		if ($tablei==1) {
    886. 

  886. 			echo "<tr class='products'>";
    887. 

  887. 		} else {
    888. 

  888. 			echo "<tr class='productsalt'>";
    889. 

  889. 		}
    890. 

  890. 		$tablei*=-1;
    891. 

  891. 	}
    892. 

  892. 	
    893. 

  893. 	if(is_numeric($_GET['catid'])) {
    894. 

  894. 		if($product['order_state'] > 0) {
    895. 

  895. 			if($product['order'] > $order_number) {
    896. 

  896. 				$order_number = $product['order'];
    897. 

  897. 				$order_number++;
    898. 

  898. 			}      
    899. 

  899. 		} else {
    900. 

  900. 			$wpdb->query("INSERT INTO `".$wpdb->prefix."product_order` (  `category_id` , `product_id` , `order` ) VALUES ( '".$product['category_id']."', '".$product['id']."', '$order_number');");
    901. 

  901. 			$order_number++;
    902. 

  902. 		}
    903. 

  903. 	}
    904. 

  904. 	if(is_numeric($_GET['catid'])) {
    905. 

  905.     	echo "	<div class='itemHeader pli_img'>\n\r";
    906. 

  906. 		echo "<a class='noline' title='Drag to a new position'>";
    907. 

  907. 	} else {
    908. 

  908. 		echo "	<td style='width: 40px;' class='imagecol'>\r\n";
    909. 

  909. 	}
    910. 

  910. 	
    911. 

  911. 	if(($product['thumbnail_image'] != null) && file_exists(WPSC_THUMBNAIL_DIR.$product['thumbnail_image'])) { // check for custom thumbnail images
    912. 

  912. 		echo "<img title='Drag to a new position' src='".WPSC_THUMBNAIL_URL.$product['thumbnail_image']."' title='".$product['name']."' alt='".$product['name']."' width='35' height='35'  />";
    913. 

  913.   } else if(($product['image'] != null) && file_exists(WPSC_THUMBNAIL_DIR.$product['image'])) { // check for automatic thumbnail images
    914. 

  914. 		echo "<img title='Drag to a new position' src='".WPSC_THUMBNAIL_URL.$product['image']."' title='".$product['name']."' alt='".$product['name']."' width='35' height='35'  />";
    915. 

  915. 	} else { // no image, display this fact
    916. 

  916. 		echo "<img title='Drag to a new position' src='".WPSC_URL."/no-image-uploaded.gif' title='".$product['name']."' alt='".$product['name']."' width='35' height='35' />";
    917. 

  917. 	}
    918. 

  918. 

  919. 	echo "</a>";
    920. 

  920.   if(is_numeric($_GET['catid'])){ 
    921. 

  921.     echo "	</div>\n\r";
    922. 

  922. 	} else {
    923. 

  923. 	echo "</td><td width='25%'>";
    924. 

  924. 	}
    925. 

  925.     
    926. 

  926. 	if(is_numeric($_GET['catid'])) { 
    927. 

  927.     echo "            <div class='pli_name'>\n\r";
    928. 

  928.    }
    929. 

  929.    
    930. 

  930. 	echo "<a href='#' onclick='filleditform(".$product['id'].");return false;'>";
    931. 

  931. 	if ($product['name']=='') {
    932. 

  932. 		echo "(".TXT_WPSC_NONAME.")";
    933. 

  933. 	} else {
    934. 

  934. 		echo htmlentities(stripslashes($product['name']), ENT_QUOTES, 'UTF-8');
    935. 

  935. 	}
    936. 

  936. 	echo "</a>";
    937. 

  937. 

  938. 	
    939. 

  939. 	
    940. 

  940. 	if(is_numeric($_GET['catid'])){
    941. 

  941. 		echo "            </div>\n\r";    
    942. 

  942. 	} else {
    943. 

  943. 		echo "</td><td>";
    944. 

  944. 	}
    945. 

  945. 		if(is_numeric($_GET['catid'])){ 
    946. 

  946. 			echo "            <div class='pli_price'>\n\r";
    947. 

  947.     }
    948. 

  948.     echo nzshpcrt_currency_display($product['price'], 1);
    949. 

  949.     if(is_numeric($_GET['catid'])){ 
    950. 

  950. 			echo "            </div>\n\r";
    951. 

  951.     }
    952. 

  952.     
    953. 

  953.     if(!is_numeric($_GET['catid'])) {
    954. 

  954. 			echo "            <td>\n\r";
    955. 

  955. 	$category_list = $wpdb->get_results("SELECT `".$wpdb->prefix."product_categories`.`id`,`".$wpdb->prefix."product_categories`.`name` FROM `".$wpdb->prefix."item_category_associations` , `".$wpdb->prefix."product_categories` WHERE `".$wpdb->prefix."item_category_associations`.`product_id` IN ('".$product['id']."') AND `".$wpdb->prefix."item_category_associations`.`category_id` = `".$wpdb->prefix."product_categories`.`id` AND `".$wpdb->prefix."product_categories`.`active` IN('1')",ARRAY_A);
    956. 

  956. 			$i = 0;
    957. 

  957. 			foreach((array)$category_list as $category_row) {
    958. 

  958. 				if($i > 0) {
    959. 

  959. 					echo "<br />";
    960. 

  960. 				}
    961. 

  961. 				echo "<a href='?page=".$_GET['page']."&amp;catid=".$category_row['id']."'>".stripslashes($category_row['name'])."</a>";
    962. 

  962. 				$i++;
    963. 

  963. 			}        
    964. 

  964. 		}
    965. 

  965. 		if(!is_numeric($_GET['catid'])){
    966. 

  966. 			echo "</td>";
    967. 

  967. 		}    
    968. 

  968. 		
    969. 

  969.    // echo "<a href='#' title='sth' onclick='filleditform(".$product['id'].");return false;'>".TXT_WPSC_EDIT."</a>";
    970. 

  970.     echo "				</div>\n\r";
    971. 

  971. 		echo "            </div>\n\r";
    972. 

  972. 		if(!is_numeric($_GET['catid'])){
    973. 

  973. 			echo "</tr>";
    974. 

  974. 		}
    975. 

  975. 	}
    976. 

  976. 	echo "    </div>\n\r";
    977. 

  977. 	echo "</td></tr>";
    978. 

  978. 	if(is_numeric($_GET['catid'])){
    979. 

  979. 		//echo "<tr><td>&nbsp;&nbsp;&nbsp;<a href='#' onClick='serialize();return false;'>".TXT_WPSC_SAVE_PRODUCT_ORDER."</a></td><td></td></tr>";
    980. 

  980. 	} else {
    981. 

  981. 		if (isset($itempp)) {
    982. 

  982. 		$num_pages = floor($num_products/$itempp);
    983. 

  983. 		}
    984. 

  984. 		if (!isset($_GET['pnum'])) {
    985. 

  985. 			$_GET['pnum']=0;
    986. 

  986. 		}
    987. 

  987. 		echo "<tr class='selectcategory' style='border: none;'><td style='text-align:right;' colspan='4' width='70%'>";
    988. 

  988. 		
    989. 

  989. 		$page_links = paginate_links( array(
    990. 

  990. 			'base' => add_query_arg( 'pnum', '%#%' ),
    991. 

  991. 			'format' => '',
    992. 

  992. 			'total' => $num_pages,
    993. 

  993. 			'current' => $_GET['pnum'],
    994. 

  994. 			'end_size' => 2, // How many numbers on either end including the end
    995. 

  995. 			'mid_size' => 2, // How many numbers to either side of current not including current
    996. 

  996. 		));
    997. 

  997. 		
    998. 

  998. 			echo "<div class='tablenav-pages'>";
    999. 

  999. 			
    1000. 

  1000. 			echo $page_links;
    1001. 

  1001. 			
    1002. 

  1002. // 		for ($i=0;$i<$num_pages;$i++) {
    1003. 

  1003. // 			$newpage=$_GET['pnum']+1;
    1004. 

  1004. // 			$pagenumber=$i+1;
    1005. 

  1005. // 			if (($i==$_GET['pnum']) && is_numeric($_GET['pnum'] )) {
    1006. 

  1006. // 				echo '<span class="page-numbers current">'.$pagenumber.'</span>';
    1007. 

  1007. // 			} else {
    1008. 

  1008. // 				echo "<a style='text-decoration:none;' class='page-numbers' href='?page=".$_GET['page']."&pnum=".$i."'>".$pagenumber."</a>";
    1009. 

  1009. // 			}
    1010. 

  1010. // 		}
    1011. 

  1011. // 		
    1012. 

  1012. 		
    1013. 

  1013. 		if (!isset($_GET['catid'])) {
    1014. 

  1014. 			if ($_GET['pnum']==='all') {
    1015. 

  1015. 				echo '<span class="page-numbers current">'.TXT_WPSC_SHOWALL.'</span>';
    1016. 

  1016. 			} else {
    1017. 

  1017. 				echo "<a style='text-decoration:none;' class='page-numbers' href='?page=".$_GET['page']."&pnum=all'>".TXT_WPSC_SHOWALL."</a>";
    1018. 

  1018. 			}
    1019. 

  1019. 			echo "</div>";
    1020. 

  1020. 		}
    1021. 

  1021. 		echo "</td></tr>";
    1022. 

  1022. 	}
    1023. 

  1023. 	
    1024. 

  1024. 	
    1025. 

  1025.   }
    1026. 

  1026. 

  1027. echo "        </table>\n\r";
    1028. 

  1028. echo "      </td><td class='secondcol'>\n\r";
    1029. 

  1029. echo "        <div id='productform'>";
    1030. 

  1030. echo   "<div class='categorisation_title'><strong class='form_group'>". TXT_WPSC_PRODUCTDETAILS." <span>".TXT_WPSC_ENTERPRODUCTDETAILSHERE."</span></strong></div>";
    1031. 

  1031. echo "<form method='POST'  enctype='multipart/form-data' name='editproduct$num'>";
    1032. 

  1032. echo "        <table class='producttext'>\n\r";;    
    1033. 

  1033. 

  1034. 

  1035. echo "        </table>\n\r";
    1036. 

  1036. echo "        <div id='formcontent' style='width:100%;'>\n\r";
    1037. 

  1037. echo "        </div>\n\r";
    1038. 

  1038. echo "</form>";
    1039. 

  1039. echo "        </div>";
    1040. 

  1040. ?>
    1041. 

  1041. <div id='additem'>
    1042. 

  1042. <div class="categorisation_title"><strong class="form_group"><?php echo TXT_WPSC_PRODUCTDETAILS;?> <span><?php echo TXT_WPSC_ENTERPRODUCTDETAILSHERE;?></span></strong></div>
    1043. 

  1043. 

  1044.   <form method='POST' enctype='multipart/form-data'>
    1045. 

  1045.   <table class='additem'>
    1046. 

  1046.     <tr>
    1047. 

  1047.       <td class='itemfirstcol'>
    1048. 

  1048.         <?php echo TXT_WPSC_PRODUCTNAME;?>:
    1049. 

  1049.       </td>
    1050. 

  1050.       <td class='itemformcol'>
    1051. 

  1051.       
    1052. 

  1052.         <div class='admin_product_name'>
    1053. 

  1053. 					<input size='30' type='text' name='name' value='' class='text' />
    1054. 

  1054. 					<a href='#' class='shorttag_toggle'></a>					
    1055. 

  1055. 					<div class='admin_product_shorttags'>
    1056. 

  1056. 					<?php echo TXT_WPSC_NO_SHORTCODE;?>
    1057. 

  1057. 					</div>        
    1058. 

  1058.         </div>
    1059. 

  1059.         
    1060. 

  1060.       </td>
    1061. 

  1061.     </tr>
    1062. 

  1062.     <tr>
    1063. 

  1063.       <td class='itemfirstcol'>
    1064. 

  1064.         <?php echo TXT_WPSC_SKU;?>:
    1065. 

  1065.       </td>
    1066. 

  1066.       <td class='itemformcol'>
    1067. 

  1067.         <input size='30' type='text' name='productmeta_values[sku]' value='' class='text' />
    1068. 

  1068.       </td>
    1069. 

  1069.     </tr>
    1070. 

  1070.     <tr>
    1071. 

  1071.       <td class='itemfirstcol'>
    1072. 

  1072.         <?php echo TXT_WPSC_PRODUCTDESCRIPTION;?>:
    1073. 

  1073.       </td>
    1074. 

  1074.       <td class='itemformcol'>
    1075. 

  1075.         <textarea name='description' cols='40' rows='8'></textarea><br />
    1076. 

  1076.       </td>
    1077. 

  1077.     </tr>
    1078. 

  1078.     <tr>
    1079. 

  1079.       <td class='itemfirstcol'>
    1080. 

  1080.        <?php echo TXT_WPSC_ADDITIONALDESCRIPTION;?>:
    1081. 

  1081.       </td>
    1082. 

  1082.       <td class='itemformcol'>
    1083. 

  1083.         <textarea name='additional_description' cols='40' rows='8'></textarea><br />
    1084. 

  1084.       </td>
    1085. 

  1085.     </tr>
    1086. 

  1086.     <tr>
    1087. 

  1087.       <td class='itemfirstcol'>
    1088. 

  1088.        <?php echo TXT_WPSC_PRODUCT_TAGS;?>:
    1089. 

  1089.       </td>
    1090. 

  1090.       <td class='itemformcol'>
    1091. 

  1091.         <input type='text' class='text' name='product_tag' id='product_tag'><br /><span class='small_italic'>Seperate with commas</span>
    1092. 

  1092.       </td>
    1093. 

  1093.     </tr>
    1094. 

  1094.     <tr>
    1095. 

  1095.       <td class='itemfirstcol'>
    1096. 

  1096. 			<?php echo TXT_WPSC_CATEGORISATION; ?>
    1097. 

  1097.       </td>
    1098. 

  1098.       <td>
    1099. 

  1099.         <?php
    1100. 

  1100.          $categorisation_groups =  $wpdb->get_results("SELECT * FROM `{$wpdb->prefix}wpsc_categorisation_groups` WHERE `active` IN ('1')", ARRAY_A);
    1101. 

  1101. 					foreach($categorisation_groups as $categorisation_group){
    1102. 

  1102. 					  $category_count = $wpdb->get_var("SELECT COUNT(*) FROM `{$wpdb->prefix}product_categories` WHERE `group_id` IN ('{$categorisation_group['id']}')");
    1103. 

  1103. 					  if($category_count > 0) {
    1104. 

  1104. 							echo "<p>";
    1105. 

  1105. 						  $category_group_name = str_replace("[categorisation]", $categorisation_group['name'], TXT_WPSC_PRODUCT_CATEGORIES);
    1106. 

  1106. 						  echo "<strong>".$category_group_name.":</strong><br>";
    1107. 

  1107. 						  echo categorylist($categorisation_group['id'], false, 'add_');
    1108. 

  1108. 						  echo "</p>";
    1109. 

  1109. 						}						
    1110. 

  1110. 					}
    1111. 

  1111. 				?>
    1112. 

  1112.       </td>
    1113. 

  1113.     </tr>
    1114. 

  1114.    
    1115. 

  1115. 

  1116.    
    1117. 

  1117.     
    1118. 

  1118. <tr><td  colspan='2'><div id='price_and_stock' class='postbox'>
    1119. 

  1119. 	<h3>
    1120. 

  1120. 		<a class="togbox">+</a>
    1121. 

  1121. 		<?php echo TXT_WPSC_PRICE_AND_STOCK_CONTROL;?>
    1122. 

  1122. 	</h3>
    1123. 

  1123.     <div class='inside'>
    1124. 

  1124.     <table>
    1125. 

  1125.     <tr>
    1126. 

  1126.       <td>
    1127. 

  1127.        <?php echo TXT_WPSC_PRICE;?>:&nbsp;<input type='text' size='10' name='price' value='0.00' />
    1128. 

  1128.       </td>
    1129. 

  1129.     </tr>
    1130. 

  1130.     <tr>
    1131. 

  1131.        <td>
    1132. 

  1132.           <input id='add_form_tax' type='checkbox' name='notax' value='yes' />&nbsp;<label for='add_form_tax'><?php echo TXT_WPSC_TAXALREADYINCLUDED;?></label>
    1133. 

  1133.        </td>
    1134. 

  1134.     </tr>
    1135. 

  1135.     <tr>
    1136. 

  1136. 

  1137.        <td>
    1138. 

  1138.           <input id='add_form_donation' type='checkbox' name='donation' value='yes' />&nbsp;<label for='add_form_donation'><?php echo TXT_WPSC_IS_DONATION;?></label>
    1139. 

  1139.        </td>
    1140. 

  1140.     </tr>
    1141. 

  1141.     <tr>
    1142. 

  1142. 

  1143.        <td>
    1144. 

  1144.           <input id='add_form_no_shipping' type='checkbox' name='no_shipping' value='yes' />&nbsp;<label for='add_form_no_shipping'><?php echo TXT_WPSC_NO_SHIPPING;?></label>
    1145. 

  1145.        </td>
    1146. 

  1146.     </tr>
    1147. 

  1147.     <tr>
    1148. 

  1148.       <td>
    1149. 

  1149.         <input type="checkbox" onclick="hideelement('add_special')" value="yes" name="special" id="add_form_special"/>
    1150. 

  1150.         <label for="add_form_special"><?php echo TXT_WPSC_SPECIAL;?></label>
    1151. 

  1151.         <div style="display: none;" id="add_special">
    1152. 

  1152.           <input type="text" size="10" value="0.00" name="special_price"/>
    1153. 

  1153.         </div>
    1154. 

  1154.       </td>
    1155. 

  1155.     </tr>
    1156. 

  1156.     <tr>
    1157. 

  1157.       <td style='width:430px;'>
    1158. 

  1158.         <input id='add_form_quantity_limited' type="checkbox" onclick="hideelement('add_stock')" value="yes" name="quantity_limited"/>
    1159. 

  1159.       <label for='add_form_quantity_limited' class='small'><?php echo TXT_WPSC_UNTICKBOX;?></label>
    1160. 

  1160.         <div style="display: none;" id="add_stock">
    1161. 

  1161.           <input type='text' name='quantity' value='0' size='10' />
    1162. 

  1162.         </div>
    1163. 

  1163.       </td>
    1164. 

  1164.     </tr>
    1165. 

  1165.   </table></div></div></TD></tr>
    1166. 

  1166.   <?php   
    1167. 

  1167.   do_action('wpsc_product_form', array('product_id' => 0, 'state' => 'add'));
    1168. 

  1168.   ?>
    1169. 

  1169.     <tr>
    1170. 

  1170.     <td colspan="2">
    1171. 

  1171. 	<div id='variation' class='postbox closed'>
    1172. 

  1172.         <h3>
    1173. 

  1173. 		<a class="togbox">+</a>
    1174. 

  1174. 		<?php echo TXT_WPSC_VARIATION_CONTROL; ?>
    1175. 

  1175. 	</h3>
    1176. 

  1176. 	<div class='inside'>
    1177. 

  1177.     <table>
    1178. 

  1178.     <tr>
    1179. 

  1179.       <td>
    1180. 

  1180.         <?php echo TXT_WPSC_ADD_VAR; ?>
    1181. 

  1181.       </td>
    1182. 

  1182.       <td>
    1183. 

  1183.         <?php echo variationslist(); ?>
    1184. 

  1184.         <div id='add_product_variations'>
    1185. 

  1185. 		
    1186. 

  1186.         </div>
    1187. 

  1187.         <div id='add_product_variation_details'>
    1188. 

  1188. 		
    1189. 

  1189.         </div>
    1190. 

  1190.       </td>
    1191. 

  1191.     </tr> 
    1192. 

  1192. 	</table></div></div></td></tr>
    1193. 

  1193.     <tr>
    1194. 

  1194.       <td colspan='2'>
    1195. 

  1195. 	      <div class='postbox closed' id='shipping'>
    1196. 

  1196. 	     <h3>
    1197. 

  1197. 		     <a class="togbox">+</a>
    1198. 

  1198. 		     <?php echo TXT_WPSC_SHIPPING_DETAILS; ?>
    1199. 

  1199. 		</h3>
    1200. 

  1200.       <div class='inside'>
    1201. 

  1201.   <table>
    1202. 

  1202.   
    1203. 

  1203.   	  <!--USPS shipping changes-->
    1204. 

  1204. 	<tr>
    1205. 

  1205. 		<td>
    1206. 

  1206. 			<?php echo TXT_WPSC_WEIGHT; ?>
    1207. 

  1207. 		</td>
    1208. 

  1208. 		<td>
    1209. 

  1209. 			<input type="text" size='5' name='weight' value=''>
    1210. 

  1210. 			<select name='weight_unit'>
    1211. 

  1211. 				<option value="pound">Pounds</option>
    1212. 

  1212. 				<option value="once">Ounce</option>
    1213. 

  1213. 			</select>
    1214. 

  1214. 		</td>
    1215. 

  1215.     </tr>
    1216. 

  1216.     <!--USPS shipping changes ends-->
    1217. 

  1217. 

  1218.     <tr>
    1219. 

  1219.       <td>
    1220. 

  1220.       <?php echo TXT_WPSC_LOCAL_PNP; ?> 
    1221. 

  1221.       </td>
    1222. 

  1222.       <td>
    1223. 

  1223.         <input type='text' size='10' name='pnp' value='0.00' />
    1224. 

  1224.       </td>
    1225. 

  1225.     </tr>
    1226. 

  1226.   
    1227. 

  1227.     <tr>
    1228. 

  1228.       <td>
    1229. 

  1229.       <?php echo TXT_WPSC_INTERNATIONAL_PNP; ?>
    1230. 

  1230.       </td>
    1231. 

  1231.       <td>
    1232. 

  1232.         <input type='text' size='10' name='international_pnp' value='0.00' />
    1233. 

  1233.       </td>
    1234. 

  1234.     </tr>
    1235. 

  1235.     </table></div></div></td></tr>
    1236. 

  1236.     <tr><td colspan='2'><div id='advanced' class='postbox closed'>
    1237. 

  1237. 	    <h3>
    1238. 

  1238. 		    <a class="togbox">+</a>
    1239. 

  1239. 		    <?php echo TXT_WPSC_ADVANCED_OPTIONS;?>
    1240. 

  1240. 	    </h3>
    1241. 

  1241. 	    <div class='inside'>
    1242. 

  1242. 	    <table>
    1243. 

  1243. 	    <tr>
    1244. 

  1244.       <td class='itemfirstcol'>
    1245. 

  1245.        <?php echo TXT_WPSC_ADMINNOTES;?>:
    1246. 

  1246.       </td>
    1247. 

  1247.       <td>
    1248. 

  1248.         <textarea cols="40" rows="3" type='text' name='merchant_notes' id='merchant_notes'></textarea> 
    1249. 

  1249.       </td>
    1250. 

  1250.     </tr>
    1251. 

  1251. 	 <tr>
    1252. 

  1252.       <td class='itemfirstcol'>
    1253. 

  1253.       </td>
    1254. 

  1254.       <td>
    1255. 

  1255.         <input type="checkbox" value="yes" id="add_form_display_frontpage" name="display_frontpage"/> 
    1256. 

  1256.         <label for='add_form_display_frontpage'><?php echo TXT_WPSC_DISPLAY_FRONT_PAGE;?></label>
    1257. 

  1257.       </td>
    1258. 

  1258.     </tr>
    1259. 

  1259.     <tr>
    1260. 

  1260.       <td class='itemfirstcol'>
    1261. 

  1261.       </td>
    1262. 

  1262.       <td>
    1263. 

  1263.         <input type='checkbox' name="productmeta_values[engraved]" id='add_engrave_text'>
    1264. 

  1264.         <label for='add_engrave_text'><?php echo TXT_WPSC_ENGRAVE;?></label>
    1265. 

  1265.         <br />
    1266. 

  1266.       </td>
    1267. 

  1267.     </tr>
    1268. 

  1268.     <tr>
    1269. 

  1269.       <td class='itemfirstcol'>
    1270. 

  1270.       </td>
    1271. 

  1271.       <td>
    1272. 

  1272.         <input type='checkbox' name="productmeta_values[can_have_uploaded_image]" id='can_have_uploaded_image'>
    1273. 

  1273.         <label for='can_have_uploaded_image'><?php echo TXT_WPSC_ALLOW_UPLOADING_IMAGE;?></label>
    1274. 

  1274.         <br />
    1275. 

  1275.       </td>
    1276. 

  1276.     </tr>
    1277. 

  1277. 	
    1278. 

  1278.     
    1279. 

  1279.     <?php if(get_option('payment_gateway') == 'google') { ?>
    1280. 

  1280. 		<tr>
    1281. 

  1281.       <td class='itemfirstcol'>
    1282. 

  1282.       </td>
    1283. 

  1283.       <td>
    1284. 

  1284.         <input type='checkbox' name="productmeta_values['google_prohibited']" id='add_google_prohibited' /> <label for='add_google_prohibited'>
    1285. 

  1285.        <?php echo TXT_WPSC_PROHIBITED;?></label><br />
    1286. 

  1286. 	Prohibited <a href='http://checkout.google.com/support/sell/bin/answer.py?answer=75724'>by Google?</a>
    1287. 

  1287.       </td>
    1288. 

  1288.     </tr>
    1289. 

  1289.     <?php } ?>
    1290. 

  1290.  <tr>
    1291. 

  1291.       <td class='itemfirstcol'>
    1292. 

  1292.        <?php echo TXT_WPSC_EXTERNALLINK;?>:
    1293. 

  1293.       </td>
    1294. 

  1294.       <td>
    1295. 

  1295.         <input type='text' class='text' name='external_link' id='external_link' size='40'> 
    1296. 

  1296.       </td>
    1297. 

  1297.     </tr>
    1298. 

  1298. 

  1299.      <tr>
    1300. 

  1300. 	<td></td>
    1301. 

  1301.       <td>
    1302. 

  1302.       <?php echo TXT_WPSC_USEONLYEXTERNALLINK;?></strong>
    1303. 

  1303.       </td>
    1304. 

  1304.     </tr>
    1305. 

  1305.     
    1306. 

  1306. 	<tr>
    1307. 

  1307. 		<td>
    1308. 

  1308. 			<?php echo TXT_WPSC_ADD_CUSTOM_FIELD;?>:
    1309. 

  1309. 		</td>
    1310. 

  1310. 		<td>
    1311. 

  1311.   <div class="product_custom_meta">
    1312. 

  1312. 		<label >
    1313. 

  1313. 		<?php echo TXT_WPSC_NAME;?>:
    1314. 

  1314. 		<input type="text" name="new_custom_meta[name][]" value="" class="text"/>
    1315. 

  1315. 		</label>
    1316. 

  1316. 		
    1317. 

  1317. 		<label>
    1318. 

  1318. 		<?php echo TXT_WPSC_VALUE;?>:
    1319. 

  1319. 		<input type="text" name="new_custom_meta[value][]" value="" class="text"/>
    1320. 

  1320. 		
    1321. 

  1321. 		</label>
    1322. 

  1322. 		<a href='#' class='add_more_meta' onclick='return add_more_meta(this)'>+</a>
    1323. 

  1323. 		<b…
    1324.

Large files files are truncated, but you can click here to view the full file