PageRenderTime 48ms CodeModel.GetById 14ms RepoModel.GetById 0ms app.codeStats 0ms

/admin/coupon_admin.php

https://bitbucket.org/flth/xtcm
PHP | 1061 lines | 956 code | 35 blank | 70 comment | 144 complexity | 9a8d93048f36b9d048f2a1905c39cf3a MD5 | raw file
Possible License(s): AGPL-1.0

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2.   /* --------------------------------------------------------------
    3. 

  3.   $Id: coupon_admin.php 1084 2005-07-23 18:36:08Z matthias $
    4. 

    5. 

  5.     xtcModified - community made shopping
    6. 

  6.    http://www.xtc-modified.org
    7. 

    8. 

  8.    Copyright (c) 2010 xtcModified
    9. 

  9.    -----------------------------------------------------------------------------------------
    10. 

  10.    based on:
    11. 

  11.    (c) 2000-2001 The Exchange Project  (earlier name of osCommerce)
    12. 

  12.    (c) 2002-2003 osCommerce(coupon_admin.php); www.oscommerce.com
    13. 

  13.    (c) 2006 XT-Commerce (coupon_admin.php 1084 2005-07-23)
    14. 

    15. 

  15.    Released under the GNU General Public License
    16. 

  16.    -----------------------------------------------------------------------------------------
    17. 

  17.    Third Party contribution:
    18. 

    19. 

  19.    Credit Class/Gift Vouchers/Discount Coupons (Version 5.10)
    20. 

  20.    http://www.oscommerce.com/community/contributions,282
    21. 

  21.    Copyright (c) Strider | Strider@oscworks.com
    22. 

  22.    Copyright (c  Nick Stanko of UkiDev.com, nick@ukidev.com
    23. 

  23.    Copyright (c) Andre ambidex@gmx.net
    24. 

  24.    Copyright (c) 2001,2002 Ian C Wilson http://www.phesis.org
    25. 

    26. 

  26.    Fix html email and error handling  (c) 2011-07-07 by web28 - www.rpa-com.de
    27. 

    28. 

  28.    Released under the GNU General Public License
    29. 

  29.    ---------------------------------------------------------------------------------------*/
    30. 

  30. 

  31.   require('includes/application_top.php');
    32. 

  32.   require_once(DIR_FS_INC . 'xtc_wysiwyg.inc.php'); //web28- 2011-07-07 - Fix html email
    33. 

  33.   require(DIR_WS_CLASSES . 'currencies.php');
    34. 

  34.   $currencies = new currencies();
    35. 

  35. 

  36.   require_once(DIR_FS_CATALOG.DIR_WS_CLASSES.'class.phpmailer.php');
    37. 

  37.   require_once(DIR_FS_INC . 'xtc_php_mail.inc.php');
    38. 

  38. 

  39.   // initiate template engine for mail
    40. 

  40.   $smarty = new Smarty;
    41. 

  41. 

  42.   if ($_GET['selected_box']) {
    43. 

  43.     $_GET['action']='';
    44. 

  44.     $_GET['old_action']='';
    45. 

  45.   }
    46. 

  46. 

  47.   if (($_GET['action'] == 'send_email_to_user') && ($_POST['customers_email_address']) && (!$_POST['back_x'])) {
    48. 

  48.     switch ($_POST['customers_email_address']) {
    49. 

  49.     case '***':
    50. 

  50.       $mail_query = xtc_db_query("select customers_firstname, customers_lastname, customers_email_address from " . TABLE_CUSTOMERS);
    51. 

  51.       $mail_sent_to = TEXT_ALL_CUSTOMERS;
    52. 

  52.       break;
    53. 

  53.     case '**D':
    54. 

  54.       $mail_query = xtc_db_query("select customers_firstname, customers_lastname, customers_email_address from " . TABLE_CUSTOMERS . " where customers_newsletter = '1'");
    55. 

  55.       $mail_sent_to = TEXT_NEWSLETTER_CUSTOMERS;
    56. 

  56.       break;
    57. 

  57.     default:
    58. 

  58.       $customers_email_address = xtc_db_prepare_input($_POST['customers_email_address']);
    59. 

  59.       $mail_query = xtc_db_query("select customers_firstname, customers_lastname, customers_email_address from " . TABLE_CUSTOMERS . " where customers_email_address = '" . xtc_db_input($customers_email_address) . "'");
    60. 

  60.       $mail_sent_to = $_POST['customers_email_address'];
    61. 

  61.       break;
    62. 

  62.     }
    63. 

  63. 

  64.     //BOF - web28 - 2011-04-13 - ADD Coupon message infos
    65. 

  65.     //$coupon_query = xtc_db_query("select coupon_code from " . TABLE_COUPONS . " where coupon_id = '" . $_GET['cid'] . "'");
    66. 

  66.     $coupon_query = xtc_db_query("select * from " . TABLE_COUPONS . " where coupon_id = '" . (int)$_GET['cid'] . "'");
    67. 

  67.     //EOF - web28 - 2011-04-13 - ADD Coupon message infos
    68. 

  68. 

  69.     $coupon_result = xtc_db_fetch_array($coupon_query);
    70. 

  70.     $coupon_name_query = xtc_db_query("select coupon_name from " . TABLE_COUPONS_DESCRIPTION . " where coupon_id = '" . (int)$_GET['cid'] . "' and language_id = '" . (int)$_SESSION['languages_id'] . "'");
    71. 

  71.     $coupon_name = xtc_db_fetch_array($coupon_name_query);
    72. 

  72. 

  73.     //BOF - web28 - 2011-04-13 - ADD Coupon message infos
    74. 

  74.     require(DIR_FS_CATALOG . DIR_WS_CLASSES . 'xtcPrice.php');
    75. 

  75.     $xtPrice = new xtcPrice(DEFAULT_CURRENCY,1);
    76. 

  76.     $coupon_amount = '';
    77. 

  77.     if ($coupon_result['coupon_type']=='S') {
    78. 

  78.       $coupon_amount = COUPON_INFO . COUPON_FREE_SHIPPING;
    79. 

  79.     } else {
    80. 

  80.       $coupon_amount = COUPON_INFO . $xtPrice->xtcFormat($coupon_result['coupon_amount'], true) . ' ';
    81. 

  81.     }
    82. 

  82.     if ($coupon_result['coupon_type']=='P') $coupon_amount = COUPON_INFO . number_format($coupon_result['coupon_amount'], 2) . '% ';
    83. 

  83.     if ($coupon_result['coupon_minimum_order']>0) $coupon_amount .= COUPON_MINORDER_INFO . $xtPrice->xtcFormat($coupon_result['coupon_minimum_order'], true) . ' ';
    84. 

  84.     if (trim($coupon_result['restrict_to_products'])!='' || trim($coupon_result['restrict_to_categories'])!='') $coupon_amount .= COUPON_RESTRICT_INFO;
    85. 

  85.     //TODO - Anzeige der gültigen Artikel/Kategorien
    86. 

  86.     //EOF - web28 - 2011-04-13 - ADD Coupon message infos
    87. 

  87. 

  88.     $from = xtc_db_prepare_input($_POST['from']);
    89. 

  89.     $subject = xtc_db_prepare_input($_POST['subject']);
    90. 

  90.     while ($mail = xtc_db_fetch_array($mail_query)) {
    91. 

  91. 

  92.       // assign language to template for caching
    93. 

  93.       $smarty->assign('language', $_SESSION['language']);
    94. 

  94.       $smarty->caching = false;
    95. 

  95. 

  96.       // set dirs manual
    97. 

  97.       $smarty->template_dir=DIR_FS_CATALOG.'templates';
    98. 

  98.       $smarty->compile_dir=DIR_FS_CATALOG.'templates_c';
    99. 

  99.       $smarty->config_dir=DIR_FS_CATALOG.'lang';
    100. 

  100. 

  101.       $smarty->assign('tpl_path','templates/'.CURRENT_TEMPLATE.'/');
    102. 

  102.       $smarty->assign('logo_path',HTTP_SERVER  . DIR_WS_CATALOG.'templates/'.CURRENT_TEMPLATE.'/img/');
    103. 

  103. 

  104.       $smarty->assign('MESSAGE', stripslashes($_POST['message'])); //web28 2011-07-07 - Fix html email
    105. 

  105.       $smarty->assign('COUPON_ID', $coupon_result['coupon_code']);
    106. 

  106.       $smarty->assign('COUPON_AMOUNT', $coupon_amount); // web28 - 2011-04-13 - ADD Coupon message infos
    107. 

  107.       $smarty->assign('WEBSITE', HTTP_SERVER  . DIR_WS_CATALOG);
    108. 

  108. 

  109. 

  110.       $html_mail=$smarty->fetch(CURRENT_TEMPLATE . '/admin/mail/'.$_SESSION['language'].'/send_coupon.html');
    111. 

  111.       $txt_mail=$smarty->fetch(CURRENT_TEMPLATE . '/admin/mail/'.$_SESSION['language'].'/send_coupon.txt');
    112. 

  112. 

  113.       xtc_php_mail(EMAIL_BILLING_ADDRESS,EMAIL_BILLING_NAME, $mail['customers_email_address'] , $mail['customers_firstname'] . ' ' . $mail['customers_lastname'] , '', EMAIL_BILLING_REPLY_ADDRESS, EMAIL_BILLING_REPLY_ADDRESS_NAME, '', '', $subject, $html_mail , $txt_mail);
    114. 

  114.     }
    115. 

  115. 

  116.     xtc_redirect(xtc_href_link(FILENAME_COUPON_ADMIN, 'mail_sent_to=' . urlencode($mail_sent_to)));
    117. 

  117.   }
    118. 

  118. 

  119.   if ( ($_GET['action'] == 'preview_email') && (!$_POST['customers_email_address']) ) {
    120. 

  120.     $_GET['action'] = 'email';
    121. 

  121.     $messageStack->add(ERROR_NO_CUSTOMER_SELECTED, 'error');
    122. 

  122.   }
    123. 

  123. 

  124.   if ($_GET['mail_sent_to']) {
    125. 

  125.     $messageStack->add(sprintf(NOTICE_EMAIL_SENT_TO, $_GET['mail_sent_to']), 'success');
    126. 

  126.     $_GET['mail_sent_to'] = '';
    127. 

  127.   }
    128. 

  128. 

  129.   switch ($_GET['action']) {
    130. 

  130.     case 'confirmdelete':
    131. 

  131.       $delete_query=xtc_db_query("update " . TABLE_COUPONS . " set coupon_active = 'N' where coupon_id='".(int)$_GET['cid']."'");
    132. 

  132.       break;
    133. 

  133. 

  134.     //BOF - web28 - 2010-07-23 - new coupon actions
    135. 

  135.     case 'noconfirmdelete':
    136. 

  136.       // delete coupon from DB
    137. 

  137.       $delete_query = xtc_db_query("delete from ".TABLE_COUPONS." where coupon_id = '".(int)$_GET['cID']."'");
    138. 

  138.       $delete_query = xtc_db_query("delete from ".TABLE_COUPONS_DESCRIPTION." where coupon_id = '".(int)$_GET['cID']."'");
    139. 

  139.       break;
    140. 

  140.     //EOF - web28 - 2010-07-23 - new coupon actions
    141. 

  141. 

  142.     case 'update':
    143. 

  143.       $update_errors = 0;
    144. 

  144.       // get all _POST and validate
    145. 

  145.       $_POST['coupon_code'] = trim($_POST['coupon_code']);
    146. 

  146.       $languages = xtc_get_languages();
    147. 

  147.       for ($i = 0, $n = sizeof($languages); $i < $n; $i++) {
    148. 

  148.         $language_id = $languages[$i]['id'];
    149. 

  149.         $_POST['coupon_name'][$language_id] = trim($_POST['coupon_name'][$language_id]);
    150. 

  150.         if (!$_POST['coupon_name'][$language_id]) {
    151. 

  151.           $update_errors = 1;
    152. 

  152.           $messageStack->add(ERROR_NO_COUPON_NAME . $languages[$i]['name'], 'error');
    153. 

  153.         }
    154. 

  154.         $_POST['coupon_desc'][$language_id] = trim($_POST['coupon_desc'][$language_id]);
    155. 

  155.       }
    156. 

  156.       $_POST['coupon_amount'] = trim($_POST['coupon_amount']);
    157. 

  157.       $_POST['coupon_amount'] = preg_replace('/[^0-9.%]/', '', $_POST['coupon_amount']); //DokuMan - 2010-11-13 - allow numbers only
    158. 

  158.       if (!$_POST['coupon_name']) {
    159. 

  159.         $update_errors = 1;
    160. 

  160.         $messageStack->add(ERROR_NO_COUPON_NAME, 'error');
    161. 

  161.       }
    162. 

  162.       if ((!$_POST['coupon_amount']) && (!$_POST['coupon_free_ship'])) {
    163. 

  163.         $update_errors = 1;
    164. 

  164.         $messageStack->add(ERROR_NO_COUPON_AMOUNT, 'error');
    165. 

  165.       }
    166. 

  166.       if (!$_POST['coupon_code']) {
    167. 

  167.         $coupon_code = create_coupon_code();
    168. 

  168.       }
    169. 

  169.       if ($_POST['coupon_code']) $coupon_code = $_POST['coupon_code'];
    170. 

  170.       $query1 = xtc_db_query("select coupon_code from " . TABLE_COUPONS . " where coupon_code = '" . xtc_db_prepare_input($coupon_code) . "'");
    171. 

  171.       if (xtc_db_num_rows($query1) && $_POST['coupon_code'] && $_GET['oldaction'] != 'voucheredit')  {
    172. 

  172.         $update_errors = 1;
    173. 

  173.         $messageStack->add(ERROR_COUPON_EXISTS, 'error');
    174. 

  174.       }
    175. 

  175.       if ($update_errors != 0) {
    176. 

  176.         $_GET['action'] = 'new';
    177. 

  177.       } else {
    178. 

  178.         $_GET['action'] = 'update_preview';
    179. 

  179.       }
    180. 

  180.       break;
    181. 

  181. 

  182.     case 'update_confirm':
    183. 

  183.       if ( ($_POST['back_x']) || ($_POST['back_y']) ) {
    184. 

  184.         $_GET['action'] = 'new';
    185. 

  185.       } else {
    186. 

  186.         $coupon_type = "F";
    187. 

  187.         if (substr($_POST['coupon_amount'], -1) == '%') $coupon_type='P';
    188. 

  188.         if ($_POST['coupon_free_ship']) $coupon_type = 'S';
    189. 

  189. 

  190.         $_POST['coupon_amount'] = preg_replace('/[^0-9.]/', '', $_POST['coupon_amount']); //DokuMan - 2010-11-13 - allow numbers only
    191. 

  191. 

  192.         $sql_data_array = array('coupon_code' => xtc_db_prepare_input($_POST['coupon_code']),
    193. 

  193.                                 'coupon_amount' => xtc_db_prepare_input($_POST['coupon_amount']),
    194. 

  194.                                 'coupon_type' => xtc_db_prepare_input($coupon_type),
    195. 

  195.                                 'uses_per_coupon' => xtc_db_prepare_input((int)$_POST['coupon_uses_coupon']),
    196. 

  196.                                 'uses_per_user' => xtc_db_prepare_input((int)$_POST['coupon_uses_user']),
    197. 

  197.                                 'coupon_minimum_order' => xtc_db_prepare_input($_POST['coupon_min_order']),
    198. 

  198.                                 'restrict_to_products' => xtc_db_prepare_input($_POST['coupon_products']),
    199. 

  199.                                 'restrict_to_categories' => xtc_db_prepare_input($_POST['coupon_categories']),
    200. 

  200.                                 'coupon_start_date' => $_POST['coupon_startdate'],
    201. 

  201.                                 'coupon_expire_date' => $_POST['coupon_finishdate'],
    202. 

  202.                                 'date_created' => 'now()',
    203. 

  203.                                 'date_modified' => 'now()');
    204. 

  204.         $languages = xtc_get_languages();
    205. 

  205.         for ($i = 0, $n = sizeof($languages); $i < $n; $i++) {
    206. 

  206.           $language_id = $languages[$i]['id'];
    207. 

  207.           $sql_data_marray[$i] = array('coupon_name' => xtc_db_prepare_input($_POST['coupon_name'][$language_id]),
    208. 

  208.                                  'coupon_description' => xtc_db_prepare_input($_POST['coupon_desc'][$language_id])
    209. 

  209.                                  );
    210. 

  210.         }
    211. 

  211. 

  212.         if ($_GET['oldaction']=='voucheredit') {
    213. 

  213.           xtc_db_perform(TABLE_COUPONS, $sql_data_array, 'update', "coupon_id='" . (int)$_GET['cid']."'");
    214. 

  214.           for ($i = 0, $n = sizeof($languages); $i < $n; $i++) {
    215. 

  215.             $language_id = $languages[$i]['id'];
    216. 

  216.             //BOF - web28 - 2011-04-07 - BUGFIX no entry stored for previous deactivated languages
    217. 

  217.             $coupon_query = xtc_db_query("select * from ".TABLE_COUPONS_DESCRIPTION." where language_id = '".(int)$language_id."' and coupon_id = '".(int)$_GET['cid']."'");
    218. 

  218.             if (xtc_db_num_rows($coupon_query) == 0) xtc_db_perform(TABLE_COUPONS_DESCRIPTION, array ('coupon_id' => (int)$_GET['cid'], 'language_id' => (int)$language_id));
    219. 

  219.             //EOF - web28 - 2011-04-07 - BUGFIX no entry stored for previous deactivated languages
    220. 

  220.             $update = xtc_db_query("update " . TABLE_COUPONS_DESCRIPTION . " set coupon_name = '" . xtc_db_prepare_input($_POST['coupon_name'][$language_id]) . "',
    221. 

  221.                                                                                  coupon_description = '" . xtc_db_prepare_input($_POST['coupon_desc'][$language_id]) . "'
    222. 

  222.                                                                            where coupon_id = '" . (int)$_GET['cid'] . "' and language_id = '" . (int)$language_id . "'");
    223. 

  223.           }
    224. 

  224.         } else {
    225. 

  225.           $query = xtc_db_perform(TABLE_COUPONS, $sql_data_array);
    226. 

  226.           $insert_id = xtc_db_insert_id();
    227. 

  227. 

  228.           for ($i = 0, $n = sizeof($languages); $i < $n; $i++) {
    229. 

  229.             $language_id = $languages[$i]['id'];
    230. 

  230.             $sql_data_marray[$i]['coupon_id'] = $insert_id;
    231. 

  231.             $sql_data_marray[$i]['language_id'] = $language_id;
    232. 

  232.             xtc_db_perform(TABLE_COUPONS_DESCRIPTION, $sql_data_marray[$i]);
    233. 

  233.           }
    234. 

  234.       }
    235. 

  235.     }
    236. 

  236.   }
    237. 

  237. ?>
    238. 

  238. <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN">
    239. 

  239. <html <?php echo HTML_PARAMS; ?>>
    240. 

  240. <head>
    241. 

  241. <meta http-equiv="Content-Type" content="text/html; charset=<?php echo $_SESSION['language_charset']; ?>">
    242. 

  242. <title><?php echo TITLE; ?></title>
    243. 

  243. <link rel="stylesheet" type="text/css" href="includes/stylesheet.css">
    244. 

  244. <?php
    245. 

  245. if (USE_WYSIWYG=='true' && $_GET['action'] == 'email') {
    246. 

  246.  $query=xtc_db_query("SELECT code FROM ". TABLE_LANGUAGES ." WHERE languages_id='".$_SESSION['languages_id']."'");
    247. 

  247.  $data=xtc_db_fetch_array($query);
    248. 

  248.  echo xtc_wysiwyg('gv_mail',$data['code']);
    249. 

  249.  }
    250. 

  250.  ?>
    251. 

  251. <script type="text/javascript" src="includes/general.js"></script>
    252. 

  252. <link rel="stylesheet" type="text/css" href="includes/javascript/spiffyCal/spiffyCal_v2_1.css">
    253. 

  253. <script type="text/javascript" src="includes/javascript/spiffyCal/spiffyCal_v2_1.js"></script>
    254. 

  254. <script type="text/javascript">
    255. 

  255.   var dateAvailable = new ctlSpiffyCalendarBox("dateAvailable", "new_product", "products_date_available","btnDate1","<?php echo $pInfo->products_date_available; ?>",scBTNMODE_CUSTOMBLUE);
    256. 

  256. </script>
    257. 

  257. </head>
    258. 

  258. <body marginwidth="0" marginheight="0" topmargin="0" bottommargin="0" leftmargin="0" rightmargin="0" bgcolor="#FFFFFF">
    259. 

  259. <div id="spiffycalendar" class="text"></div>
    260. 

  260. <!-- header //-->
    261. 

  261. <?php require(DIR_WS_INCLUDES . 'header.php'); ?>
    262. 

  262. <!-- header_eof //-->
    263. 

  263. <!-- body //-->
    264. 

  264. <table border="0" width="100%" cellspacing="2" cellpadding="2">
    265. 

  265.   <tr>
    266. 

  266.     <td class="columnLeft2" width="<?php echo BOX_WIDTH; ?>" valign="top">
    267. 

  267.      <table border="0" width="<?php echo BOX_WIDTH; ?>" cellspacing="1" cellpadding="1" class="columnLeft">
    268. 

  268.         <!-- left_navigation //-->
    269. 

  269.         <?php require(DIR_WS_INCLUDES . 'column_left.php'); ?>
    270. 

  270.         <!-- left_navigation_eof //-->
    271. 

  271.     </table>
    272. 

  272.     </td>
    273. 

  273. <!-- body_text //-->
    274. 

  274. <?php
    275. 

  275.   switch ($_GET['action']) {
    276. 

  276.   case 'voucherreport':
    277. 

  277. ?>
    278. 

  278.       <td class="boxCenter" width="100%" valign="top">
    279. 

  279.         <table border="0" width="100%" cellspacing="0" cellpadding="0">
    280. 

  280.          <tr>
    281. 

  281.            <td>
    282. 

  282.             <table border="0" width="100%" cellspacing="0" cellpadding="0">
    283. 

  283.           <tr>
    284. 

  284.             <td class="pageHeading"><?php echo HEADING_TITLE; ?></td>
    285. 

  285.             <td class="pageHeading" align="right"><?php echo xtc_draw_separator('pixel_trans.gif', HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT); ?></td>
    286. 

  286.           </tr>
    287. 

  287.         </table>
    288. 

  288.       </td>
    289. 

  289.       </tr>
    290. 

  290.       <tr>
    291. 

  291.         <td>
    292. 

  292.           <table border="0" width="100%" cellspacing="0" cellpadding="0">
    293. 

  293.           <tr>
    294. 

  294.             <td valign="top">
    295. 

  295.              <table border="0" width="100%" cellspacing="0" cellpadding="2">
    296. 

  296.               <tr class="dataTableHeadingRow">
    297. 

  297.                 <td class="dataTableHeadingContent" align="left"><?php echo COUPON_ID; ?></td>
    298. 

  298.                 <?php // web28 - 2010-07-23 - new table design ?>
    299. 

  299.                 <td class="dataTableHeadingContent" align="left"><?php echo CUSTOMER_ID; ?></td>
    300. 

  300.                 <td class="dataTableHeadingContent" align="left"><?php echo CUSTOMER_NAME; ?></td>
    301. 

  301.                 <td class="dataTableHeadingContent" align="left"><?php echo IP_ADDRESS; ?></td>
    302. 

  302.                 <td class="dataTableHeadingContent" align="left"><?php echo REDEEM_DATE; ?></td>
    303. 

  303.                 <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_ACTION; ?>&nbsp;</td>
    304. 

  304.               </tr>
    305. 

  305.               <?php
    306. 

  306.     $cc_query_raw = "select * from " . TABLE_COUPON_REDEEM_TRACK . " where coupon_id = '" . (int)$_GET['cid'] . "'";
    307. 

  307.     $cc_split = new splitPageResults($_GET['page'], MAX_DISPLAY_SEARCH_RESULTS, $cc_query_raw, $cc_query_numrows);
    308. 

  308.     $cc_query = xtc_db_query($cc_query_raw);
    309. 

  309.     while ($cc_list = xtc_db_fetch_array($cc_query)) {
    310. 

  310.       $rows++;
    311. 

  311.       if (strlen($rows) < 2) {
    312. 

  312.         $rows = '0' . $rows;
    313. 

  313.       }
    314. 

  314.       if (((!$_GET['uid']) || (@$_GET['uid'] == $cc_list['unique_id'])) && (!$cInfo)) {
    315. 

  315.         $cInfo = new objectInfo($cc_list);
    316. 

  316.       }
    317. 

  317.       if ( (is_object($cInfo)) && ($cc_list['unique_id'] == $cInfo->unique_id) ) {
    318. 

  318.         echo '          <tr class="dataTableRowSelected" onmouseover="this.style.cursor=\'pointer\'" onclick="document.location.href=\'' . xtc_href_link('coupon_admin.php', xtc_get_all_get_params(array('cid', 'action', 'uid')) . 'cid=' . $cInfo->coupon_id . '&action=voucherreport&uid=' . $cinfo->unique_id) . '\'">' . "\n";
    319. 

  319.       } else {
    320. 

  320.         echo '          <tr class="dataTableRow" onmouseover="this.className=\'dataTableRowOver\';this.style.cursor=\'pointer\'" onmouseout="this.className=\'dataTableRow\'" onclick="document.location.href=\'' . xtc_href_link('coupon_admin.php', xtc_get_all_get_params(array('cid', 'action', 'uid')) . 'cid=' . $cc_list['coupon_id'] . '&action=voucherreport&uid=' . $cc_list['unique_id']) . '\'">' . "\n";
    321. 

  321.       }
    322. 

  322.       $customer_query = xtc_db_query("select customers_firstname, customers_lastname from " . TABLE_CUSTOMERS . " where customers_id = '" . $cc_list['customer_id'] . "'");
    323. 

  323.       $customer = xtc_db_fetch_array($customer_query);
    324. 

  324. ?>
    325. 

  325.                 <td class="dataTableContent" align="left">&nbsp;<?php echo $_GET['cid']; ?></td><?php // web28 - 2010-07-23 - new table design ?>
    326. 

  326.                 <td class="dataTableContent" align="left">&nbsp;<?php echo $cc_list['customer_id']; ?></td>
    327. 

  327.                 <td class="dataTableContent" align="left">&nbsp;<?php echo $customer['customers_firstname'] . ' ' . $customer['customers_lastname']; ?></td>
    328. 

  328.                 <td class="dataTableContent" align="left">&nbsp;<?php echo $cc_list['redeem_ip']; ?></td>
    329. 

  329.                 <td class="dataTableContent" align="left">&nbsp;<?php echo xtc_date_short($cc_list['redeem_date']); ?></td>
    330. 

  330.                 <td class="dataTableContent" align="right"><?php if (isset($cInfo) && is_object($cInfo) && ($cc_list['unique_id'] == $cInfo->unique_id) ) { echo xtc_image(DIR_WS_IMAGES . 'icon_arrow_right.gif', ICON_ARROW_RIGHT); } else { echo '<a href="' . xtc_href_link(FILENAME_COUPON_ADMIN, 'page=' . $_GET['page'] . '&cid=' . $cc_list['coupon_id']) . '">' . xtc_image(DIR_WS_IMAGES . 'icon_info.gif', IMAGE_ICON_INFO) . '</a>'; } ?>&nbsp;</td>
    331. 

  331.               </tr>
    332. 

  332. <?php
    333. 

  333.     }
    334. 

  334. ?>
    335. 

  335.              </table>
    336. 

  336.            </td>
    337. 

  337. <?php
    338. 

  338.       $heading = array();
    339. 

  339.       $contents = array();
    340. 

  340.       $coupon_description_query = xtc_db_query("select coupon_name from " . TABLE_COUPONS_DESCRIPTION . " where coupon_id = '" . (int)$_GET['cid'] . "' and language_id = '" . (int)$_SESSION['languages_id'] . "'");
    341. 

  341.       $coupon_desc = xtc_db_fetch_array($coupon_description_query);
    342. 

  342.       $count_customers = xtc_db_query("select * from " . TABLE_COUPON_REDEEM_TRACK . " where coupon_id = '" . (int)$_GET['cid'] . "' and customer_id = '" . (int)$cInfo->customer_id . "'");
    343. 

  343. 

  344.       $heading[] = array('text' => '<b>[' . $_GET['cid'] . ']' . COUPON_NAME . ' ' . $coupon_desc['coupon_name'] . '</b>');
    345. 

  345.       $contents[] = array('text' => '<b>' . TEXT_REDEMPTIONS . '</b>');
    346. 

  346.       $contents[] = array('text' => TEXT_REDEMPTIONS_TOTAL . '=' . xtc_db_num_rows($cc_query));
    347. 

  347.       $contents[] = array('text' => TEXT_REDEMPTIONS_CUSTOMER . '=' . xtc_db_num_rows($count_customers));
    348. 

  348.       //added missing back button
    349. 

  349.       $contents[] = array('text' => '<a class="button" onclick="this.blur();" href="' . xtc_href_link(FILENAME_COUPON_ADMIN) . '">' . BUTTON_BACK . '</a>');
    350. 

  350. ?>
    351. 

  351.     <td width="25%" valign="top">
    352. 

  352. <?php
    353. 

  353.       $box = new box;
    354. 

  354.       echo $box->infoBox($heading, $contents);
    355. 

  355.       echo '            </td>' . "\n";
    356. 

  356. 

  357.     break;
    358. 

  358.   case 'preview_email':
    359. 

  359.     $coupon_query = xtc_db_query("select coupon_code from " .TABLE_COUPONS . " where coupon_id = '" . (int)$_GET['cid'] . "'");
    360. 

  360.     $coupon_result = xtc_db_fetch_array($coupon_query);
    361. 

  361.     $coupon_name_query = xtc_db_query("select coupon_name from " . TABLE_COUPONS_DESCRIPTION . " where coupon_id = '" . (int)$_GET['cid'] . "' and language_id = '" . (int)$_SESSION['languages_id'] . "'");
    362. 

  362.     $coupon_name = xtc_db_fetch_array($coupon_name_query);
    363. 

  363.     switch ($_POST['customers_email_address']) {
    364. 

  364.     case '***':
    365. 

  365.       $mail_sent_to = TEXT_ALL_CUSTOMERS;
    366. 

  366.       break;
    367. 

  367.     case '**D':
    368. 

  368.       $mail_sent_to = TEXT_NEWSLETTER_CUSTOMERS;
    369. 

  369.       break;
    370. 

  370.     default:
    371. 

  371.       $mail_sent_to = $_POST['customers_email_address'];
    372. 

  372.       break;
    373. 

  373.     }
    374. 

  374. ?>
    375. 

  375.       <td width="100%" valign="top">
    376. 

  376.       <table border="0" width="100%" cellspacing="0" cellpadding="2">
    377. 

  377.       <tr>
    378. 

  378.         <td>
    379. 

  379.          <table border="0" width="100%" cellspacing="0" cellpadding="0">
    380. 

  380.           <tr>
    381. 

  381.             <td class="pageHeading"><?php echo HEADING_TITLE; ?></td>
    382. 

  382.             <td class="pageHeading" align="right"><?php echo xtc_draw_separator('pixel_trans.gif', HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT); ?></td>
    383. 

  383.           </tr>
    384. 

  384.         </table>
    385. 

  385.        </td>
    386. 

  386.       </tr>
    387. 

  387.       <tr>
    388. 

  388.           <?php echo xtc_draw_form('mail', FILENAME_COUPON_ADMIN, 'action=send_email_to_user&cid=' . $_GET['cid']); ?>
    389. 

  389.             <td>
    390. 

  390.              <table border="0" width="100%" cellpadding="0" cellspacing="2">
    391. 

  391.               <tr>
    392. 

  392.                 <td><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    393. 

  393.               </tr>
    394. 

  394.               <tr>
    395. 

  395.                 <td class="smallText"><b><?php echo TEXT_CUSTOMER; ?></b><br /><?php echo $mail_sent_to; ?></td>
    396. 

  396.               </tr>
    397. 

  397.               <tr>
    398. 

  398.                 <td><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    399. 

  399.               </tr>
    400. 

  400.               <tr>
    401. 

  401.                 <td class="smallText"><b><?php echo TEXT_COUPON; ?></b><br /><?php echo $coupon_name['coupon_name']; ?></td>
    402. 

  402.               </tr>
    403. 

  403.               <tr>
    404. 

  404.                 <td><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    405. 

  405.               </tr>
    406. 

  406.               <tr>
    407. 

  407.                 <td class="smallText"><b><?php echo TEXT_FROM; ?></b><br /><?php echo htmlspecialchars(stripslashes($_POST['from'])); ?></td>
    408. 

  408.               </tr>
    409. 

  409.               <tr>
    410. 

  410.                 <td><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    411. 

  411.               </tr>
    412. 

  412.               <tr>
    413. 

  413.                 <td class="smallText"><b><?php echo TEXT_SUBJECT; ?></b><br /><?php echo htmlspecialchars(stripslashes($_POST['subject'])); ?></td>
    414. 

  414.               </tr>
    415. 

  415.               <tr>
    416. 

  416.                 <td><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    417. 

  417.               </tr>
    418. 

  418.               <tr>
    419. 

  419.                 <td class="smallText"><b><?php echo TEXT_MESSAGE; ?></b><br /><?php echo stripslashes($_POST['message']); ?></td>
    420. 

  420.               </tr>
    421. 

  421.               <tr>
    422. 

  422.                 <td><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    423. 

  423.               </tr>
    424. 

  424.               <tr>
    425. 

  425.                 <td>
    426. 

  426. <?php
    427. 

  427. /* Re-Post all POST'ed variables */
    428. 

  428.     reset($_POST);
    429. 

  429.     while (list($key, $value) = each($_POST)) {
    430. 

  430.       if (!is_array($_POST[$key])) {
    431. 

  431.         echo xtc_draw_hidden_field($key, htmlspecialchars(stripslashes($value)));
    432. 

  432.       }
    433. 

  433.     }
    434. 

  434. ?>
    435. 

  435.                 <table border="0" width="100%" cellpadding="0" cellspacing="2">
    436. 

  436.                   <tr>
    437. 

  437.                     <td><?php ?>&nbsp;</td>
    438. 

  438.                     <td align="right"><?php echo '<a class="button" onclick="this.blur();" href="' . xtc_href_link(FILENAME_COUPON_ADMIN) . '">' . BUTTON_CANCEL . '</a> <input type="submit" class="button" onclick="this.blur();" value="' . BUTTON_SEND_EMAIL . '"/>'; ?></td>
    439. 

  439.                   </tr>
    440. 

  440.                 </table>
    441. 

  441.               </td>
    442. 

  442.              </tr>
    443. 

  443.             </table>
    444. 

  444.           </td>
    445. 

  445.          </form>
    446. 

  446.        </tr>
    447. 

  447. <?php
    448. 

  448.     break;
    449. 

  449.   case 'email':
    450. 

  450.     $coupon_query = xtc_db_query("select coupon_code from " . TABLE_COUPONS . " where coupon_id = '" . (int)$_GET['cid'] . "'");
    451. 

  451.     $coupon_result = xtc_db_fetch_array($coupon_query);
    452. 

  452.     $coupon_name_query = xtc_db_query("select coupon_name from " . TABLE_COUPONS_DESCRIPTION . " where coupon_id = '" . (int)$_GET['cid'] . "' and language_id = '" . (int)$_SESSION['languages_id'] . "'");
    453. 

  453.     $coupon_name = xtc_db_fetch_array($coupon_name_query);
    454. 

  454. ?>
    455. 

  455.       <td  class="boxCenter" width="100%" valign="top">
    456. 

  456.       <table border="0" width="100%" cellspacing="0" cellpadding="2">
    457. 

  457.         <tr>
    458. 

  458.         <td>
    459. 

  459.           <table border="0" width="100%" cellspacing="0" cellpadding="0">
    460. 

  460.           <tr>
    461. 

  461.             <td class="pageHeading"><?php echo HEADING_TITLE; ?></td>
    462. 

  462.             <td class="pageHeading" align="right"><?php echo xtc_draw_separator('pixel_trans.gif', HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT); ?></td>
    463. 

  463.           </tr>
    464. 

  464.         </table>
    465. 

  465.        </td>
    466. 

  466.        </tr>
    467. 

  467.        <tr>
    468. 

  468. 

  469.           <?php echo xtc_draw_form('mail', FILENAME_COUPON_ADMIN, 'action=preview_email&cid='. (int)$_GET['cid']); ?>
    470. 

  470.             <td>
    471. 

  471.              <table class="main" border="0" cellpadding="0" cellspacing="2">
    472. 

  472.               <?php // web28 - 2010-07-23 - new table design ?>
    473. 

  473.               <tr>
    474. 

  474.                 <td colspan="2"><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    475. 

  475.               </tr>
    476. 

  476. <?php
    477. 

  477.     $customers = array();
    478. 

  478.     $customers[] = array('id' => '', 'text' => TEXT_SELECT_CUSTOMER);
    479. 

  479.     $customers[] = array('id' => '***', 'text' => TEXT_ALL_CUSTOMERS);
    480. 

  480.     $customers[] = array('id' => '**D', 'text' => TEXT_NEWSLETTER_CUSTOMERS);
    481. 

  481.     $mail_query = xtc_db_query("select customers_email_address, customers_firstname, customers_lastname from " . TABLE_CUSTOMERS . " order by customers_lastname");
    482. 

  482.     while($customers_values = xtc_db_fetch_array($mail_query)) {
    483. 

  483.       $customers[] = array('id' => $customers_values['customers_email_address'],
    484. 

  484.                            'text' => $customers_values['customers_lastname'] . ', ' . $customers_values['customers_firstname'] . ' (' . $customers_values['customers_email_address'] . ')');
    485. 

  485.     }
    486. 

  486. ?>
    487. 

  487.               <tr>
    488. 

  488.                 <td colspan="2"><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    489. 

  489.               </tr>
    490. 

  490.               <tr>
    491. 

  491.                 <td class="main"><?php echo TEXT_COUPON; ?>&nbsp;&nbsp;</td>
    492. 

  492.                 <td class="main"><?php echo $coupon_name['coupon_name']; ?></td>
    493. 

  493.               </tr>
    494. 

  494.               <tr>
    495. 

  495.                 <td colspan="2"><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    496. 

  496.               </tr>
    497. 

  497.               <tr>
    498. 

  498.                 <td class="main"><?php echo TEXT_CUSTOMER; ?>&nbsp;&nbsp;</td>
    499. 

  499.                 <td><?php echo xtc_draw_pull_down_menu('customers_email_address', $customers, $_GET['customer']);?></td>
    500. 

  500.               </tr>
    501. 

  501.               <tr>
    502. 

  502.                 <td colspan="2"><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    503. 

  503.               </tr>
    504. 

  504.               <tr>
    505. 

  505.                 <td class="main"><?php echo TEXT_FROM; ?>&nbsp;&nbsp;</td>
    506. 

  506.                 <td><?php echo xtc_draw_input_field('from', EMAIL_FROM); ?></td>
    507. 

  507.               </tr>
    508. 

  508.               <tr>
    509. 

  509.                 <td colspan="2"><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    510. 

  510.               </tr>
    511. 

  511. <?php
    512. 

  512. /*
    513. 

  513.               <tr>
    514. 

  514.                 <td class="main"><?php echo TEXT_RESTRICT; ?>&nbsp;&nbsp;</td>
    515. 

  515.                 <td><?php echo xtc_draw_checkbox_field('customers_restrict', $customers_restrict);?></td>
    516. 

  516.               </tr>
    517. 

  517.               <tr>
    518. 

  518.                 <td colspan="2"><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    519. 

  519.               </tr>
    520. 

  520. */
    521. 

  521. ?>
    522. 

  522.               <tr>
    523. 

  523.                 <td class="main"><?php echo TEXT_SUBJECT; ?>&nbsp;&nbsp;</td>
    524. 

  524.                 <td><?php echo xtc_draw_input_field('subject',$_POST['subject']); ?></td>
    525. 

  525.               </tr>
    526. 

  526.               <tr>
    527. 

  527.                 <td colspan="2"><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    528. 

  528.               </tr>
    529. 

  529.               <tr>
    530. 

  530.                 <td valign="top" class="main"><?php echo TEXT_MESSAGE; ?>&nbsp;&nbsp;</td>
    531. 

  531.                 <td><?php echo xtc_draw_textarea_field('message', 'soft', '60', '15', $_POST['message']); ?></td>
    532. 

  532.               </tr>
    533. 

  533.               <tr>
    534. 

  534.                 <td colspan="2"><?php echo xtc_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    535. 

  535.               </tr>
    536. 

  536.               <tr>
    537. 

  537.                 <td colspan="2" align="right"><?php echo '<input type="submit" class="button" onclick="this.blur();" value="' . BUTTON_SEND_EMAIL . '"/>'; ?></td>
    538. 

  538.               </tr>
    539. 

  539.             </table>
    540. 

  540.            </td>
    541. 

  541.           </form>
    542. 

  542.         </tr>
    543. 

  543.      </td>
    544. 

  544. <?php
    545. 

  545.     break;
    546. 

  546.   case 'update_preview':
    547. 

  547. ?>
    548. 

  548.       <td  class="boxCenter" width="100%" valign="top">
    549. 

  549.       <table border="0" width="100%" cellspacing="0" cellpadding="2">
    550. 

  550.       <tr>
    551. 

  551.         <td>
    552. 

  552.         <table border="0" width="100%" cellspacing="0" cellpadding="0">
    553. 

  553.           <tr>
    554. 

  554.             <td class="pageHeading"><?php echo HEADING_TITLE; ?></td>
    555. 

  555.             <td class="pageHeading" align="right"><?php echo xtc_draw_separator('pixel_trans.gif', HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT); ?></td>
    556. 

  556.           </tr>
    557. 

  557.         </table>
    558. 

  558.        </td>
    559. 

  559.       </tr>
    560. 

  560.       <tr>
    561. 

  561.       <td>
    562. 

  562. <?php echo xtc_draw_form('coupon', 'coupon_admin.php', 'action=update_confirm&oldaction=' . $_GET['oldaction'] . '&cid=' . (int)$_GET['cid']); ?>
    563. 

  563.       <?php // BOF - web28 - 2011-03-11 - new table design ?>
    564. 

  564.      <table class="main borderall" border="0" cellspacing="0" cellpadding="5" style="border-collapse:collapse">
    565. 

  565.         <?php
    566. 

  566.         $languages = xtc_get_languages();
    567. 

  567.         for ($i = 0, $n = sizeof($languages); $i < $n; $i++) {
    568. 

  568.             $language_id = $languages[$i]['id'];
    569. 

  569.             $lang_img = '<span style="float:right; padding-top:2px;">'. xtc_image(DIR_WS_LANGUAGES . $languages[$i]['directory'].'/admin/images/'.$languages[$i]['image'], $languages[$i]['name']) . '</span>';
    570. 

  570. ?>
    571. 

  571.       <tr>
    572. 

  572.         <td align="left"><?php echo COUPON_NAME. $lang_img ; ?></td>
    573. 

  573.         <td align="left"><?php echo $_POST['coupon_name'][$language_id]; ?>&nbsp;</td>
    574. 

  574.       </tr>
    575. 

  575. <?php
    576. 

  576. }
    577. 

  577.         $languages = xtc_get_languages();
    578. 

  578.         for ($i = 0, $n = sizeof($languages); $i < $n; $i++) {
    579. 

  579.             $language_id = $languages[$i]['id'];
    580. 

  580.             $lang_img = '<span style="float:right; padding-top:2px;">'. xtc_image(DIR_WS_LANGUAGES . $languages[$i]['directory'].'/admin/images/'.$languages[$i]['image'], $languages[$i]['name']) . '</span>';
    581. 

  581. ?>
    582. 

  582.       <tr>
    583. 

  583.         <td align="left"><?php echo COUPON_DESC. $lang_img ; ?></td>
    584. 

  584.         <td align="left"><?php echo $_POST['coupon_desc'][$language_id]; ?>&nbsp;</td>
    585. 

  585.       </tr>
    586. 

  586. <?php
    587. 

  587. }
    588. 

  588. ?>
    589. 

  589.       <tr>
    590. 

  590.         <td align="left"><?php echo COUPON_AMOUNT; ?></td>
    591. 

  591.         <td align="left"><?php echo $_POST['coupon_amount']; ?>&nbsp;</td>
    592. 

  592.       </tr>
    593. 

  593.       <tr>
    594. 

  594.         <td align="left"><?php echo COUPON_MIN_ORDER; ?></td>
    595. 

  595.         <td align="left"><?php echo $_POST['coupon_min_order']; ?>&nbsp;</td>
    596. 

  596.       </tr>
    597. 

  597.       <tr>
    598. 

  598.         <td align="left"><?php echo COUPON_FREE_SHIP; ?></td>
    599. 

  599. <?php
    600. 

  600.     if ($_POST['coupon_free_ship']) {
    601. 

  601. ?>
    602. 

  602.         <td align="left"><?php echo TEXT_FREE_SHIPPING; ?></td>
    603. 

  603. <?php
    604. 

  604.     } else {
    605. 

  605. ?>
    606. 

  606.         <td align="left"><?php echo TEXT_NO_FREE_SHIPPING; ?></td>
    607. 

  607. <?php
    608. 

  608.     }
    609. 

  609. ?>
    610. 

  610.       </tr>
    611. 

  611.       <tr>
    612. 

  612.         <td align="left"><?php echo COUPON_CODE; ?></td>
    613. 

  613. <?php
    614. 

  614.     if ($_POST['coupon_code']) {
    615. 

  615.       $c_code = $_POST['coupon_code'];
    616. 

  616.     } else {
    617. 

  617.       $c_code = $coupon_code;
    618. 

  618.     }
    619. 

  619. ?>
    620. 

  620.         <td align="left"><?php echo $coupon_code; ?>&nbsp;</td>
    621. 

  621.       </tr>
    622. 

  622.       <tr>
    623. 

  623.         <td align="left"><?php echo COUPON_USES_COUPON; ?></td>
    624. 

  624.         <td align="left"><?php echo $_POST['coupon_uses_coupon']; ?>&nbsp;</td>
    625. 

  625.       </tr>
    626. 

  626.       <tr>
    627. 

  627.         <td align="left"><?php echo COUPON_USES_USER; ?></td>
    628. 

  628.         <td align="left"><?php echo $_POST['coupon_uses_user']; ?>&nbsp;</td>
    629. 

  629.       </tr>
    630. 

  630.        <tr>
    631. 

  631.         <td align="left"><?php echo COUPON_PRODUCTS; ?></td>
    632. 

  632.         <td align="left"><?php echo $_POST['coupon_products']; ?>&nbsp;</td>
    633. 

  633.       </tr>
    634. 

  634.       <tr>
    635. 

  635.         <td align="left"><?php echo COUPON_CATEGORIES; ?></td>
    636. 

  636.         <td align="left"><?php echo $_POST['coupon_categories']; ?>&nbsp;</td>
    637. 

  637.       </tr>
    638. 

  638.       <tr>
    639. 

  639.         <td align="left"><?php echo COUPON_STARTDATE; ?></td>
    640. 

  640. <?php
    641. 

  641.     $start_date = date(DATE_FORMAT, mktime(0, 0, 0, $_POST['coupon_startdate_month'],$_POST['coupon_startdate_day'] ,$_POST['coupon_startdate_year'] ));
    642. 

  642. ?>
    643. 

  643.         <td align="left"><?php echo $start_date; ?>&nbsp;</td>
    644. 

  644.       </tr>
    645. 

  645.       <tr>
    646. 

  646.         <td align="left"><?php echo COUPON_FINISHDATE; ?></td>
    647. 

  647. <?php
    648. 

  648.     $finish_date = date(DATE_FORMAT, mktime(0, 0, 0, $_POST['coupon_finishdate_month'],$_POST['coupon_finishdate_day'] ,$_POST['coupon_finishdate_year'] ));
    649. 

  649. ?>
    650. 

  650.         <td align="left"><?php echo $finish_date; ?>&nbsp;</td>
    651. 

  651.       </tr>
    652. 

  652. <?php
    653. 

  653.         $languages = xtc_get_languages();
    654. 

  654.         for ($i = 0, $n = sizeof($languages); $i < $n; $i++) {
    655. 

  655.           $language_id = $languages[$i]['id'];
    656. 

  656.           echo xtc_draw_hidden_field('coupon_name[' . $languages[$i]['id'] . ']', stripslashes($_POST['coupon_name'][$language_id]));
    657. 

  657.           echo xtc_draw_hidden_field('coupon_desc[' . $languages[$i]['id'] . ']', stripslashes($_POST['coupon_desc'][$language_id]));
    658. 

  658.         }
    659. 

  659.     echo xtc_draw_hidden_field('coupon_amount', $_POST['coupon_amount']);
    660. 

  660.     echo xtc_draw_hidden_field('coupon_min_order', $_POST['coupon_min_order']);
    661. 

  661.     echo xtc_draw_hidden_field('coupon_free_ship', $_POST['coupon_free_ship']);
    662. 

  662.     echo xtc_draw_hidden_field('coupon_code', $c_code);
    663. 

  663.     echo xtc_draw_hidden_field('coupon_uses_coupon', $_POST['coupon_uses_coupon']);
    664. 

  664.     echo xtc_draw_hidden_field('coupon_uses_user', $_POST['coupon_uses_user']);
    665. 

  665.     echo xtc_draw_hidden_field('coupon_products', $_POST['coupon_products']);
    666. 

  666.     echo xtc_draw_hidden_field('coupon_categories', $_POST['coupon_categories']);
    667. 

  667.     echo xtc_draw_hidden_field('coupon_startdate', date('Y-m-d', mktime(0, 0, 0, $_POST['coupon_startdate_month'],$_POST['coupon_startdate_day'] ,$_POST['coupon_startdate_year'] )));
    668. 

  668.     echo xtc_draw_hidden_field('coupon_finishdate', date('Y-m-d', mktime(0, 0, 0, $_POST['coupon_finishdate_month'],$_POST['coupon_finishdate_day'] ,$_POST['coupon_finishdate_year'] )));
    669. 

  669. ?>
    670. 

  670.     </table>
    671. 

  671.       <?php echo '<input type="submit" class="button" onclick="this.blur();" value="' . BUTTON_CONFIRM . '"/>'; ?>
    672. 

  672.       <?php echo '<input type="submit" name="back" class="button" onclick="this.blur();" value="' . BUTTON_BACK . '"/>'; ?>
    673. 

  673.       </form>
    674. 

  674.       </td>
    675. 

  675.       </tr>
    676. 

  676.       </table>
    677. 

  677.       </td>
    678. 

  678. <?php
    679. 

  679.     break;
    680. 

  680.   case 'voucheredit':
    681. 

  681.     $languages = xtc_get_languages();
    682. 

  682.     for ($i = 0, $n = sizeof($languages); $i < $n; $i++) {
    683. 

  683.       $language_id = $languages[$i]['id'];
    684. 

  684.       $coupon_query = xtc_db_query("select coupon_name,coupon_description from " . TABLE_COUPONS_DESCRIPTION . " where coupon_id = '" .  (int)$_GET['cid'] . "' and language_id = '" . (int)$language_id . "'");
    685. 

  685.       $coupon = xtc_db_fetch_array($coupon_query);
    686. 

  686.       $coupon_name[$language_id] = $coupon['coupon_name'];
    687. 

  687.       $coupon_desc[$language_id] = $coupon['coupon_description'];
    688. 

  688.     }
    689. 

  689.     $coupon_query = xtc_db_query("select coupon_code, coupon_amount, coupon_type, coupon_minimum_order, coupon_start_date, coupon_expire_date, uses_per_coupon, uses_per_user, restrict_to_products, restrict_to_categories from " . TABLE_COUPONS . " where coupon_id = '" . (int)$_GET['cid'] . "'");
    690. 

  690.     $coupon = xtc_db_fetch_array($coupon_query);
    691. 

  691.     $coupon_amount = $coupon['coupon_amount'];
    692. 

  692.     if ($coupon['coupon_type']=='P') {
    693. 

  693.       $coupon_amount .= '%';
    694. 

  694.     }
    695. 

  695.     if ($coupon['coupon_type']=='S') {
    696. 

  696.       $coupon_free_ship .= true;
    697. 

  697.     }
    698. 

  698.     $coupon_min_order = $coupon['coupon_minimum_order'];
    699. 

  699.     $coupon_code = $coupon['coupon_code'];
    700. 

  700.     $coupon_uses_coupon = $coupon['uses_per_coupon'];
    701. 

  701.     $coupon_uses_user = $coupon['uses_per_user'];
    702. 

  702.     $coupon_products = $coupon['restrict_to_products'];
    703. 

  703.     $coupon_categories = $coupon['restrict_to_categories'];
    704. 

  704.     //BOF  web28 - 2010-03-11  FIX coupon_start_date, coupon_expire_date
    705. 

  705.     $coupon_start_date = $coupon['coupon_start_date'];
    706. 

  706.     $coupon_expire_date = $coupon['coupon_expire_date'];
    707. 

  707.     //EOF  web28 - 2010-03-11  FIX coupon_start_date, coupon_expire_date
    708. 

  708.   case 'new':
    709. 

  709.     //BOF  web28 - 2010-07-04 FIX error handling
    710. 

  710.     if (isset($_POST['coupon_amount'])) $coupon_amount = $_POST['coupon_amount'];
    711. 

  711.     if (isset($_POST['coupon_min_order'])) $coupon_min_order = $_POST['coupon_min_order'];
    712. 

  712.     if (isset($_POST['coupon_free_ship'])) $coupon_free_ship = $_POST['coupon_free_ship'];
    713. 

  713.     if (isset($_POST['coupon_code'])) $coupon_code = $_POST['coupon_code'];
    714. 

  714.     if (isset($_POST['coupon_uses_coupon'])) $coupon_uses_coupon = $_POST['coupon_uses_coupon'];
    715. 

  715.     if (isset($_POST['coupon_uses_user'])) $coupon_uses_user = $_POST['coupon_uses_user'];
    716. 

  716.     if (isset($_POST['coupon_products'])) $coupon_products = $_POST['coupon_products'];
    717. 

  717.     if (isset($_POST['coupon_categories'])) $coupon_categories = $_POST['coupon_categories'];
    718. 

  718.     if (isset($_POST['coupon_startdate_day'])) $coupon_start_date = date('Y-m-d', mktime(0, 0, 0, $_POST['coupon_startdate_month'],$_POST['coupon_startdate_day'] ,$_POST['coupon_startdate_year']));
    719. 

  719.     if (isset($_POST['coupon_finishdate_day'])) $coupon_expire_date = date('Y-m-d', mktime(0, 0, 0, $_POST['coupon_finishdate_month'],$_POST['coupon_finishdate_day'] ,$_POST['coupon_finishdate_year']));
    720. 

  720.     //EOF  web28 - 2010-07-04 FIX error handling
    721. 

  721. // set some defaults
    722. 

  722.     if (!$coupon_uses_user) $coupon_uses_user=1;
    723. 

  723. ?>
    724. 

  724.     <td  class="boxCenter" width="100%" valign="top">
    725. 

  725.     <table border="0" width="100%" cellspacing="0" cellpadding="2">
    726. 

  726.       <tr>
    727. 

  727.         <td>
    728. 

  728.         <table border="0" width="100%" cellspacing="0" cellpadding="0">
    729. 

  729.           <tr>
    730. 

  730.             <td class="pageHeading"><?php echo HEADING_TITLE; ?></td>
    731. 

  731.             <td class="pageHeading" align="right"><?php echo xtc_draw_separator('pixel_trans.gif', HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT); ?></td>
    732. 

  732.           </tr>
    733. 

  733.         </table>
    734. 

  734.         </td>
    735. 

  735.       </tr>
    736. 

  736.       <tr>
    737. 

  737.       <td>
    738. 

  738. <?php
    739. 

  739.      // BOF - web28 - 2010-07-23 - new table design
    740. 

  740.     $input_name = '';
    741. 

  741.     $input_desc = '';
    742. 

  742.     $languages = xtc_get_languages();
    743. 

  743.     for ($i = 0, $n = sizeof($languages); $i < $n; $i++) {
    744. 

  744.       $language_id = $languages[$i]['id'];
    745. 

  745.       //BOF  web28 - 2010-07-04 FIX error handling
    746. 

  746.       if (isset($_POST['coupon_name'][$language_id])) $coupon_name[$language_id] = $_POST['coupon_name'][$language_id];
    747. 

  747.       if (isset($_POST['coupon_desc'][$language_id])) $coupon_desc[$language_id] = $_POST['coupon_desc'][$language_id];
    748. 

  748.       //BOF  web28 - 2010-07-04 FIX error handling
    749. 

  749.       $lang_img = '<span style="float:left; padding-top:2px;">'. xtc_image(DIR_WS_LANGUAGES . $languages[$i]['directory'].'/admin/images/'.$languages[$i]['image'], $languages[$i]['name']) . '</span>';
    750. 

  750.       $input_name .= $lang_img . '&nbsp;'. xtc_draw_input_field('coupon_name[' . $languages[$i]['id'] . ']', $coupon_name[$language_id]) . '&nbsp;<br />';
    751. 

  751.       $input_desc .= $lang_img . '&nbsp;'. xtc_draw_textarea_field('coupon_desc[' . $languages[$i]['id'] . ']','physical','24','3', $coupon_desc[$language_id]) . '&nbsp;<br />';
    752. 

  752.     }
    753. 

  753.     //EOF  web28 - 2010-03-11  new table design
    754. 

  754. 

  755.     //BOF  web28 - 2010-03-11  FIX coupon_start_date, coupon_expire_date
    756. 

  756.     if (!$coupon_start_date) {
    757. 

  757.       $coupon_startdate = explode("-", date('Y-m-d')); // Hetfield - 2009-08-18 - replaced deprecated function split with explode to be ready for PHP >= 5.3
    758. 

  758.     } else {
    759. 

  759.       $coupon_startdate = explode("-", $coupon_start_date); // Hetfield - 2009-08-18 - replaced deprecated function split with explode to be ready for PHP >= 5.3
    760. 

  760.     }
    761. 

  761.     if (!$coupon_expire_date) {
    762. 

  762.       $coupon_finishdate = explode("-", date('Y-m-d')); // Hetfield - 2009-08-18 - replaced deprecated function split with explode to be ready for PHP >= 5.3
    763. 

  763.       $coupon_finishdate[0] = $coupon_finishdate[0] + 1;
    764. 

  764.     } else {
    765. 

  765.       $coupon_finishdate = explode("-", $coupon_expire_date); // Hetfield - 2009-08-18 - replaced deprecated function split with explode to be ready for PHP >= 5.3
    766. 

  766.     }
    767. 

  767.     //EOF  web28 - 2010-03-11  FIX coupon_start_date, coupon_expire_date
    768. 

  768. 

  769.     echo xtc_draw_form('coupon', 'coupon_admin.php', 'action=update&oldaction='.$_GET['action'] . '&cid=' . (int)$_GET['cid'],'post', 'enctype="multipart/form-data"');
    770. 

  770. ?>
    771. 

  771.     <table class="main borderall" border="0" cellspacing="0" cellpadding="6">
    772. 

  772.       <tr>
    773. 

  773.         <td align="left"><?php echo COUPON_NAME; ?></td>
    774. 

  774.         <td align="left"><?php echo $input_name; ?></td>
    775. 

  775.         <td align="left"><?php echo COUPON_NAME_HELP; ?></td>
    776. 

  776.       </tr>
    777. 

  777.       <tr>
    778. 

  778.         <td align="left" valign="top"><?php echo COUPON_DESC; ?></td>
    779. 

  779.         <td align="left" valign="top"><?php echo $input_desc; ?></td>
    780. 

  780.         <td align="left" valign="top"><?php echo COUPON_DESC_HELP; ?></td>
    781. 

  781.       </tr>
    782. 

  782.       <tr>
    783. 

  783.         <td align="left"><?php echo COUPON_AMOUNT; ?></td>
    784. 

  784.         <td align="left"><?php echo xtc_draw_input_field('coupon_amount', $coupon_amount, 'style="width: 150px"'); ?></td>
    785. 

  785.         <td align="left"><?php echo COUPON_AMOUNT_HELP; ?></td>
    786. 

  786.       </tr>
    787. 

  787.       <tr>
    788. 

  788.         <td align="left"><?php echo COUPON_MIN_ORDER; ?></td>
    789. 

  789.         <td align="left"><?php echo xtc_draw_input_field('coupon_min_order', $coupon_min_order, 'style="width: 150px"'); ?></td>
    790. 

  790.         <td align="left"><?php echo COUPON_MIN_ORDER_HELP; ?></td>
    791. 

  791.       </tr>
    792. 

  792.       <tr>
    793. 

  793.         <td align="left"><?php echo COUPON_FREE_SHIP; ?></td>
    794. 

  794.         <td align="left"><?php echo xtc_draw_checkbox_field('coupon_free_ship', $coupon_free_ship); ?></td>
    795. 

  795.         <td align="left"><?php echo COUPON_FREE_SHIP_HELP; ?></td>
    796. 

  796.       </tr>
    797. 

  797.       <tr>
    798. 

  798.         <td align="left"><?php echo COUPON_CODE; ?></td>
    799. 

  799.         <td align="left"><?php echo xtc_draw_input_field('coupon_code', $coupon_code, 'style="width: 150px"'); ?></td>
    800. 

  800.         <td align="left"><?php echo COUPON_CODE_HELP; ?></td>
    801. 

  801.       </tr>
    802. 

  802.       <tr>
    803. 

  803.         <td align="left"><?php echo COUPON_USES_COUPON; ?></td>
    804. 

  804.         <td align="left"><?php echo xtc_draw_input_field('coupon_uses_coupon', $coupon_uses_coupon, 'style="width: 150px"'); ?></td>
    805. 

  805.         <td align="left"><?php echo COUPON_USES_COUPON_HELP; ?></td>
    806. 

  806.       </tr>
    807. 

  807.       <tr>
    808. 

  808.         <td align="left"><?php echo COUPON_USES_USER; ?></td>
    809. 

  809.         <td align="left"><?php echo xtc_draw_input_field('coupon_uses_user', $coupon_uses_user, 'style="width: 150px"'); ?></td>
    810. 

  810.         <td align="left"><?php echo COUPON_USES_USER_HELP; ?></td>
    811. 

  811.       </tr>
    812. 

  812.        <tr>
    813. 

  813.         <td align="left"><?php echo COUPON_PRODUCTS; ?></td>
    814. 

  814.         <?php // BOF - web28 - 2010-11-13 - FIX popup link ?>
    815. 

  815.         <!--td align="left"><?php //echo xtc_draw_input_field('coupon_products', $coupon_products, 'style="width: 150px"'); ?> <A HREF="validproducts.php" TARGET="_blank" ONCLICK="window.open('validproducts.php', 'Valid_Products', 'scrollbars=yes,resizable=yes,menubar=yes,width=600,height=600'); return false">View</A></td-->
    816. 

  816.         <td align="left"><?php echo xtc_draw_input_field('coupon_products', $coupon_products, 'style="width: 150px"'); ?> <a href="<?php echo xtc_href_link('validproducts.php', '' , 'NONSSL');?>" target="_blank" onclick="window.open('validproducts.php', 'Valid_Products', 'scrollbars=yes,resizable=yes,menubar=yes,width=600,height=600'); return false"><?php echo TEXT_VIEW_SHORT;?></a></td>
    817. 

  817.         <?php // EOF - web28 - 2010-11-13 - FIX popup link ?>
    818. 

  818.         <td align="left"><?php echo COUPON_PRODUCTS_HELP; ?></td>
    819. 

  819.       </tr>
    820. 

  820.       <tr>
    821. 

  821.         <td align="left"><?php echo COUPON_CATEGORIES; ?></td>
    822. 

  822.         <?php // BOF - web28 - 2010-11-13 - FIX popup link ?>
    823. 

  823.         <!--td align="left"><?php //echo xtc_draw_input_field('coupon_categories', $coupon_categories, 'style="width: 150px"'); ?> <A HREF="validcategories.php" TARGET="_blank" ONCLICK="window.open('validcategories.php', 'Valid_Categories', 'scrollbars=yes,resizable=yes,menubar=yes,width=600,height=600'); return false">View</A></td-->
    824. 

  824.         <td align="left"><?php echo xtc_draw_input_field('coupon_categories', $coupon_categories, 'style="width: 150px"'); ?> <a href="<?php echo xtc_href_link('validcategories.php', '' , 'NONSSL');?>" target="_blank" onclick="window.open('validcategories.php', 'Valid_Categories', 'scrollbars=yes,resizable=yes,menubar=yes,width=600,height=600'); return false"><?php echo TEXT_VIEW_SHORT;?></a></td>
    825. 

  825.         <?php //EOF - web28 - 2010-11-13 - FIX popup link ?>
    826. 

  826.         <td align="left"><?php echo COUPON_CATEGORIES_HELP; ?></td>
    827. 

  827.       </tr>
    828. 

  828.       <tr>
    829. 

  829.         <td align="left"><?php echo COUPON_STARTDATE; ?></td>
    830. 

  830.         <td align="left" style="white-space:nowrap"><?php echo xtc_draw_date_selector('coupon_startdate', mktime(0,0,0, $coupon_startdate[1], $coupon_startdate[2], $coupon_startdate[0])); ?></td>
    831. 

  831.         <td align="left"><?php echo COUPON_STARTDATE_HELP; ?></td>
    832. 

  832.       </tr>
    833. 

  833.       <tr>
    834. 

  834.         <td align="left"><?php echo COUPON_FINISHDATE; ?></td>
    835. 

  835.         <td align="left" style="white-space:nowrap"><?php echo xtc_draw_date_selector('coupon_finishdate', mktime(0,0,0, $coupon_finishdate[1], $coupon_finishdate[2], $coupon_finishdate[0])); ?></td>
    836. 

  836.         <td align="left"><?php echo COUPON_FINISHDATE_HELP; ?></td>
    837. 

  837.       </tr>
    838. 

  838.     </table>
    839. 

  839.     <?php echo '<input type="submit" class="button" onclick="this.blur();" value="' . BUTTON_PREVIEW . '"/>'; ?>
    840. 

  840.     <?php echo '&nbsp;&nbsp;<a class="button" onclick="this.blur();" href="' . xtc_href_link('coupon_admin.php', '') .'">'. BUTTON_CANCEL . '</a>'; ?>
    841. 

  841.     <?php // EOF - web28 - 2011-03-11 - new table design ?>
    842. 

  842.     </form>
    843. 

  843.   </tr>
    844. 

  844.   </table>
    845. 

  845.   </td>
    846. 

  846. <?php
    847. 

  847.     break;
    848. 

  848.   default:
    849. 

  849. ?>
    850. 

  850.     <td  class="boxCenter" width="100%" valign="top">
    851. 

  851.      <table border="0" width="100%" cellspacing="0" cellpadding="2">
    852. 

  852.       <tr>
    853. 

  853.         <td width="100%">
    854. 

  854.          <table border="0" width="100%" cellspacing="0" cellpadding="0">
    855. 

  855.           <tr>
    856. 

  856.             <td class="pageHeading"><?php echo HEADING_TITLE; ?></td>
    857. 

  857.             <td class="main">
    858. 

  858.             <?php echo xtc_draw_form('status', FILENAME_COUPON_ADMIN, '', 'get'); ?>
    859. 

  859.             <?php
    860. 

  860.                 $status_array[] = array('id' => 'Y', 'text' => TEXT_COUPON_ACTIVE);
    861. 

  861.                 $status_array[] = array('id' => 'N', 'text' => TEXT_COUPON_INACTIVE);
    862. 

  862.                 $status_array[] = array('id' => '*', 'text' => TEXT_COUPON_ALL);
    863. 

  863.                 if ($_GET['status']) {
    864. 

  864.                   $status = xtc_db_prepare_input($_GET['status']);
    865. 

  865.                 } else {
    866. 

  866.                   $status = 'Y';
    867. 

  867.                 }
    868. 

  868.                 echo HEADING_TITLE_STATUS . ' ' . xtc_draw_pull_down_menu('status', $status_array, $status, 'onChange="this.form.submit();"');
    869. 

  869.                 ?>
    870. 

  870.               </form>
    871. 

  871.            </td>
    872. 

  872.           </tr>
    873. 

  873.         </table>
    874. 

  874.        </td>
    875. 

  875.       </tr>
    876. 

  876.       <tr>
    877. 

  877.         <td>
    878. 

  878.         <a class="button" onclick="this.blur();" href="<?php echo xtc_href_link('coupon_admin.php', 'action=new'); ?>"><?php echo BUTTON_INSERT; ?></a>
    879. 

  879.         <table border="0" width="100%" cellspacing="0" cellpadding="0">
    880. 

  880.           <tr>
    881. 

  881.             <td valign="top">
    882. 

  882.             <?php // BOF - web28 - 2010-07-23 - new table design?>
    883. 

  883.                             <table border="0" width="100%" cellspacing="0" cellpadding="2">
    884. 

  884.                               <tr class="dataTableHeadingRow">
    885. 

  885.                                 <td class="dataTableHeadingContent" align="left" width="25"><?php echo COUPON_ID; ?></td>
    886. 

  886.                                 <td class="dataTableHeadingContent" align="left"><?php echo COUPON_NAME; ?></td>
    887. 

  887.                                 <td class="dataTableHeadingContent" align="left" width="110"><?php echo COUPON_AMOUNT; ?></td>
    888. 

  888.                                 <td class="dataTableHeadingContent" align="left" width="110"><?php echo TEXT_COUPON_MINORDER; ?></td>
    889. 

  889.                                 <td class="dataTableHeadingContent" align="left" width="80"><?php echo COUPON_CODE; ?></td>
    890. 

  890.                                 <td class="dataTableHeadingContent" align="center" width="70"><?php echo TEXT_COUPON_STATUS; ?></td>
    891. 

  891.                                 <td class="dataTableHeadingContent" align="center" width="70"><?php echo TEXT_COUPON_DELETE; ?></td>
    892. 

  892.                                 <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_ACTION; ?>&nbsp;</td>
    893. 

  893.                               </tr>
    894. 

  894.                               <?php
    895. 

  895.                                 if ($_GET['page'] > 1) {
    896. 

  896.                                   $rows = $_GET['page'] * 20 - 20;
    897. 

  897.                                 }
    898. 

  898.                                 if ($status != '*') {
    899. 

  899.                                   $cc_query_raw = "select coupon_id, coupon_code, coupon_amount, coupon_minimum_order, coupon_type, coupon_start_date,coupon_expire_date,uses_per_user,uses_per_coupon,restrict_to_products, restrict_to_categories, coupon_active, date_created,date_modified from " . TABLE_COUPONS ." where coupon_active='" . xtc_db_input($status) . "' and coupon_type != 'G' ORDER BY date_created DESC"; //DokuMan added 'ORDER BY date_created DESC'
    900. 

  900.                                 } else {
    901. 

  901.                                   $cc_query_raw = "select coupon_id, coupon_code, coupon_amount, coupon_minimum_order, coupon_type, coupon_start_date,coupon_expire_date,uses_per_user,uses_per_coupon,restrict_to_products, restrict_to_categories, coupon_active, date_created,date_modified from " . TABLE_COUPONS . " where coupon_type != 'G' ORDER BY date_created DESC"; //DokuMan added 'ORDER BY date_created DESC'
    902. 

  902.                                 }
    903. 

  903.                                 $cc_split = new splitPageResults($_GET['page'], MAX_DISPLAY_SEARCH_RESULTS, $cc_query_raw, $cc_query_numrows);
    904. 

  904.                                 $cc_query = xtc_db_query($cc_query_raw);
    905. 

  905.                                 while ($cc_list = xtc_db_fetch_array($cc_query)) {
    906. 

  906.                                   $rows++;
    907. 

  907.      …
    908.

Large files files are truncated, but you can click here to view the full file