PageRenderTime 67ms CodeModel.GetById 30ms RepoModel.GetById 0ms app.codeStats 1ms

/administrator/components/com_virtuemart/classes/ps_order.php

https://bitbucket.org/dgough/annamaria-daneswood-25102012
PHP | 917 lines | 618 code | 130 blank | 169 comment | 112 complexity | ee588f254b70c27d0ec1db9509cfdebe MD5 | raw file
Possible License(s): GPL-2.0, LGPL-2.1 
    

  1. <?php
    2. 

  2. if( !defined( '_VALID_MOS' ) && !defined( '_JEXEC' ) ) die( 'Direct Access to '.basename(__FILE__).' is not allowed.' );
    3. 

  3. /**
    4. 

  4. *
    5. 

  5. * @version $Id: ps_order.php 1475 2008-07-16 17:35:35Z soeren_nb $
    6. 

  6. * @package VirtueMart
    7. 

  7. * @subpackage classes
    8. 

  8. * @copyright Copyright (C) 2004-2008 soeren - All rights reserved.
    9. 

  9. * @license http://www.gnu.org/copyleft/gpl.html GNU/GPL, see LICENSE.php
    10. 

  10. * VirtueMart is free software. This version may have been modified pursuant
    11. 

  11. * to the GNU General Public License, and as distributed it includes or
    12. 

  12. * is derivative of works licensed under the GNU General Public License or
    13. 

  13. * other free or open source software licenses.
    14. 

  14. * See /administrator/components/com_virtuemart/COPYRIGHT.php for copyright notices and details.
    15. 

  15. *
    16. 

  16. * http://virtuemart.net
    17. 

  17. */
    18. 

  18. 

  19. require_once(CLASSPATH.'ps_user.php');
    20. 

  20. require_once(CLASSPATH.'ps_userfield.php');
    21. 

  21. require_once(CLASSPATH.'ps_checkout.php');
    22. 

  22. require_once(CLASSPATH.'ps_order_status.php');
    23. 

  23. require_once(CLASSPATH.'ps_order_booking.php');
    24. 

  24. 

  25. /**
    26. 

  26.  * The class handles orders from an adminstrative perspective.  Order
    27. 

  27.  * processing is handled in the ps_checkout class.
    28. 

  28.  */
    29. 

  29. class ps_order {
    30. 

  30. 

  31. 	/**
    32. 

  32.      * Changes the status of an order
    33. 

  33.      * @author pablo
    34. 

  34.      * @author soeren
    35. 

  35.      * @author Uli
    36. 

  36.      * 
    37. 

  37.      *
    38. 

  38.      * @param array $d
    39. 

  39.      * @return boolean
    40. 

  40.     */
    41. 

  41. 	function order_status_update(&$d) {
    42. 

  42. 		global $mosConfig_offset, $ps_booking;
    43. 

  43. 				
    44. 

  44. 		$db = new ps_DB;
    45. 

  45. 		$timestamp = time() + ($mosConfig_offset*60*60);
    46. 

  46. 		$mysqlDatetime = date("Y-m-d G:i:s",$timestamp);
    47. 

  47. 		
    48. 

  48. 		if( empty($_REQUEST['include_comment'])) {
    49. 

  49. 			$include_comment="N";
    50. 

  50. 		}
    51. 

  51. 

  52. 		// get the current order status
    53. 

  53. 		$curr_order_status = @$d["current_order_status"];
    54. 

  54. 		$notify_customer = empty($d['notify_customer']) ? "N" : $d['notify_customer'];
    55. 

  55. 		if( $notify_customer=="Y" ) {
    56. 

  56. 			$notify_customer=1; 
    57. 

  57. 		}
    58. 

  58. 		else {
    59. 

  59. 			$notify_customer=0;
    60. 

  60. 		}
    61. 

  61. 

  62. 		$d['order_comment'] = empty($d['order_comment']) ? "" : $d['order_comment'];
    63. 

  63. 		if( empty($d['order_item_id']) ) {
    64. 

  64. 			// When the order is set to "confirmed", we can capture
    65. 

  65. 			// the Payment with authorize.net
    66. 

  66. 			if( $curr_order_status=="P" && $d["order_status"]=="C") {
    67. 

  67. 				$q = "SELECT order_number,payment_class,order_payment_trans_id FROM #__{vm}_payment_method,#__{vm}_order_payment,#__{vm}_orders WHERE ";
    68. 

  68. 				$q .= "#__{vm}_order_payment.order_id='".$db->getEscaped($d['order_id'])."' ";
    69. 

  69. 				$q .= "AND #__{vm}_orders.order_id='".$db->getEscaped($d['order_id'])."' ";
    70. 

  70. 				$q .= "AND #__{vm}_order_payment.payment_method_id=#__{vm}_payment_method.payment_method_id";
    71. 

  71. 				$db->query( $q );
    72. 

  72. 				$db->next_record();
    73. 

  73. 				$payment_class = $db->f("payment_class");
    74. 

  74. 				if( $payment_class=="ps_authorize" ) {
    75. 

  75. 					require_once( CLASSPATH."payment/ps_authorize.cfg.php");
    76. 

  76. 					if( AN_TYPE == 'AUTH_ONLY' ) {
    77. 

  77. 						require_once( CLASSPATH."payment/ps_authorize.php");
    78. 

  78. 						$authorize = new ps_authorize();
    79. 

  79. 						$d["order_number"] = $db->f("order_number");
    80. 

  80. 						if( !$authorize->capture_payment( $d )) {
    81. 

  81. 							return false;
    82. 

  82. 						}
    83. 

  83. 					}
    84. 

  84. 				}
    85. 

  85. 			}
    86. 

  86. 			/*
    87. 

  87. 			 * This is like the test above for delayed capture only
    88. 

  88. 			 * we (well, I - durian) don't think the credit card
    89. 

  89. 			 * should be captured until the item(s) are shipped.
    90. 

  90. 			 * In fact, VeriSign says not to capture the cards until
    91. 

  91. 			 * the item ships.  Maybe this behavior should be a
    92. 

  92. 			 * configurable item?
    93. 

  93. 			 *
    94. 

  94. 			 * When the order changes from Confirmed or Pending to
    95. 

  95. 			 * Shipped, perform the delayed capture.
    96. 

  96. 			 *
    97. 

  97. 			 * Restricted to PayFlow Pro for now.
    98. 

  98. 			 */
    99. 

  99. 			if( ($curr_order_status=="P" || $curr_order_status=="C") && $d["order_status"]=="S") {
    100. 

  100. 				$q = "SELECT order_number,payment_class,order_payment_trans_id FROM #__{vm}_payment_method,#__{vm}_order_payment,#__{vm}_orders WHERE ";
    101. 

  101. 				$q .= "#__{vm}_order_payment.order_id='".$db->getEscaped($d['order_id'])."' ";
    102. 

  102. 				$q .= "AND #__{vm}_orders.order_id='".$db->getEscaped($d['order_id'])."' ";
    103. 

  103. 				$q .= "AND #__{vm}_order_payment.payment_method_id=#__{vm}_payment_method.payment_method_id";
    104. 

  104. 				$db->query( $q );
    105. 

  105. 				$db->next_record();
    106. 

  106. 				$payment_class = $db->f("payment_class");
    107. 

  107. 				if( $payment_class=="ps_pfp" ) {
    108. 

  108. 					require_once( CLASSPATH."payment/ps_pfp.cfg.php");
    109. 

  109. 					if( PFP_TYPE == 'A' ) {
    110. 

  110. 						require_once( CLASSPATH."payment/ps_pfp.php");
    111. 

  111. 						$pfp = new ps_pfp();
    112. 

  112. 						$d["order_number"] = $db->f("order_number");
    113. 

  113. 						if( !$pfp->capture_payment( $d )) {
    114. 

  114. 							return false;
    115. 

  115. 						}
    116. 

  116. 					}
    117. 

  117. 				}
    118. 

  118. 			}
    119. 

  119. 	
    120. 

  120. 			/*
    121. 

  121. 			 * If a pending order gets cancelled, void the authorization.
    122. 

  122. 			 *
    123. 

  123. 			 * It might work on captured cards too, if we want to
    124. 

  124. 			 * void shipped orders.
    125. 

  125. 			 *
    126. 

  126. 			 * Restricted to PayFlow Pro for now.
    127. 

  127. 			 */
    128. 

  128. 			if( $curr_order_status=="P" && $d["order_status"]=="X") {
    129. 

  129. 				$q = "SELECT order_number,payment_class,order_payment_trans_id FROM #__{vm}_payment_method,#__{vm}_order_payment,#__{vm}_orders WHERE ";
    130. 

  130. 				$q .= "#__{vm}_order_payment.order_id='".$db->getEscaped($d['order_id'])."' ";
    131. 

  131. 				$q .= "AND #__{vm}_orders.order_id='".$db->getEscaped($d['order_id'])."' ";
    132. 

  132. 				$q .= "AND #__{vm}_order_payment.payment_method_id=#__{vm}_payment_method.payment_method_id";
    133. 

  133. 				$db->query( $q );
    134. 

  134. 				$db->next_record();
    135. 

  135. 				$payment_class = $db->f("payment_class");
    136. 

  136. 				if( $payment_class=="ps_pfp" ) {
    137. 

  137. 					require_once( CLASSPATH."payment/ps_pfp.cfg.php");
    138. 

  138. 					if( PFP_TYPE == 'A' ) {
    139. 

  139. 						require_once( CLASSPATH."payment/ps_pfp.php");
    140. 

  140. 						$pfp = new ps_pfp();
    141. 

  141. 						$d["order_number"] = $db->f("order_number");
    142. 

  142. 						if( !$pfp->void_authorization( $d )) {
    143. 

  143. 							return false;
    144. 

  144. 						}
    145. 

  145. 					}
    146. 

  146. 				}
    147. 

  147. 			}
    148. 

  148. 	
    149. 

  149. 			$fields =array( 'order_status'=> $d["order_status"], 'mdate'=> $timestamp );
    150. 

  150. 			
    151. 

  151. 			$db->buildQuery('UPDATE', '#__{vm}_orders', $fields, "WHERE order_id='" . $db->getEscaped($d["order_id"]) . "'");
    152. 

  152. 			$db->query();
    153. 

  153. 			
    154. 

  154. 			if($my->id == 62) echo $db->_database->_sql;
    155. 

  155. 			
    156. 

  156. 			/**
    157. 

  157. 			 * VirtueBook: Load the booking data so that we can serialize it with the history
    158. 

  158. 			 */
    159. 

  159. 			$ps_booking->loadBookingData($d["order_id"]);
    160. 

  160. 			
    161. 

  161. 			// Update the Order History.
    162. 

  162. 			$fields = array( 'order_id' => $d["order_id"],
    163. 

  163. 										'order_status_code' => $d["order_status"],
    164. 

  164. 										'date_added' => $mysqlDatetime,
    165. 

  165. 										'customer_notified' => $notify_customer,
    166. 

  166. 										'comments' => $d['order_comment'],
    167. 

  167. 										'booking_serialized' => serialize($ps_booking)
    168. 

  168. 							);
    169. 

  169. 			$db->buildQuery('INSERT', '#__{vm}_order_history', $fields );
    170. 

  170. 			$db->query();
    171. 

  171. 	
    172. 

  172. 			// Do we need to re-update the Stock Level?
    173. 

  173. 			if( (strtoupper($d["order_status"]) == "X" || strtoupper($d["order_status"])=="R") 
    174. 

  174. 				// && CHECK_STOCK == '1'
    175. 

  175. 				&& $curr_order_status != $d["order_status"]
    176. 

  176. 				) {
    177. 

  177. 				// Get the order items and update the stock level
    178. 

  178. 				// to the number before the order was placed
    179. 

  179. 				$q = "SELECT product_id, product_quantity FROM #__{vm}_order_item WHERE order_id='".$db->getEscaped($d["order_id"])."'";
    180. 

  180. 				$db->query( $q );
    181. 

  181. 				$dbu = new ps_DB;
    182. 

  182. 				// Now update each ordered product
    183. 

  183. 				while( $db->next_record() ) {
    184. 

  184. 					$q = "UPDATE #__{vm}_product 
    185. 

  185. 							SET product_in_stock=product_in_stock+".$db->f("product_quantity").",
    186. 

  186. 								product_sales=product_sales-".$db->f("product_quantity")." 
    187. 

  187. 							WHERE product_id='".$db->f("product_id")."'";
    188. 

  188. 					$dbu->query( $q );
    189. 

  189. 				}
    190. 

  190. 			}
    191. 

  191. 			// Update the Order Items' status
    192. 

  192. 			$q = "SELECT order_item_id FROM #__{vm}_order_item WHERE order_id=".$db->getEscaped($d['order_id']);
    193. 

  193. 			$db->query($q);
    194. 

  194. 			$dbu = new ps_DB;
    195. 

  195. 			while ($db->next_record()) {
    196. 

  196. 				$item_id = $db->f("order_item_id");
    197. 

  197. 				$fields =array( 'order_status'=> $d["order_status"], 
    198. 

  198. 											'mdate'=> $timestamp );
    199. 

  199. 				$dbu->buildQuery('UPDATE', '#__{vm}_order_item', $fields, "WHERE order_item_id='" .(int)$item_id . "'");
    200. 

  200. 				$dbu->query();
    201. 

  201. 			}
    202. 

  202. 			
    203. 

  203. 			if (ENABLE_DOWNLOADS == '1') {
    204. 

  204. 				##################
    205. 

  205. 				## DOWNLOAD MOD
    206. 

  206. 				$this->mail_download_id( $d );
    207. 

  207. 			}
    208. 

  208. 	
    209. 

  209. 			if( !empty($notify_customer) ) {
    210. 

  210. 				$this->notify_customer( $d );
    211. 

  211. 			}
    212. 

  212. 		} elseif( !empty($d['order_item_id'])) {
    213. 

  213. 				$fields =array( 'order_status'=> $d["order_status"], 
    214. 

  214. 											'mdate'=> $timestamp );
    215. 

  215. 				$db->buildQuery('UPDATE', '#__{vm}_order_item', $fields, 'WHERE order_item_id='.intval( $d['order_item_id'] ));
    216. 

  216. 				return $db->query() !== false;
    217. 

  217. 		}
    218. 

  218. 		return true;
    219. 

  219. 	}
    220. 

  220. 

  221. 	/**
    222. 

  222. 	 * mails the Download-ID to the customer
    223. 

  223. 	 * or deletes the Download-ID from the product_downloads table
    224. 

  224. 	 *
    225. 

  225. 	 * @param array $d
    226. 

  226. 	 * @return boolean
    227. 

  227. 	 */
    228. 

  228. 	function mail_download_id( &$d ){
    229. 

  229. 

  230. 		global $sess,	$VM_LANG, $vmLogger;
    231. 

  231. 

  232. 		$url = URL."index.php?option=com_virtuemart&page=shop.downloads&Itemid=".$sess->getShopItemid();
    233. 

  233. 		
    234. 

  234. 		$db = new ps_DB();
    235. 

  235. 		$db->query( 'SELECT order_status FROM #__{vm}_orders WHERE order_id='.(int)$d['order_id'] );
    236. 

  236. 		$db->next_record();
    237. 

  237. 		
    238. 

  238. 		if ($db->f("order_status")==ENABLE_DOWNLOAD_STATUS) {
    239. 

  239. 			$dbw = new ps_DB;
    240. 

  240. 			
    241. 

  241. 			$q = "SELECT order_id,user_id,download_id,file_name FROM #__{vm}_product_download WHERE";
    242. 

  242. 			$q .= " order_id = '" . (int)$d["order_id"] . "'";
    243. 

  243. 			$dbw->query($q);
    244. 

  244. 			$dbw->next_record();
    245. 

  245. 			$userid = $dbw->f("user_id");
    246. 

  246. 			$download_id = $dbw->f("download_id");
    247. 

  247. 			$datei=$dbw->f("file_name");
    248. 

  248. 			$dbw->reset();
    249. 

  249. 

  250. 			if ($download_id) {
    251. 

  251. 

  252. 				$dbv = new ps_DB;
    253. 

  253. 				$q = "SELECT * FROM #__{vm}_vendor WHERE vendor_id='1'";
    254. 

  254. 				$dbv->query($q);
    255. 

  255. 				$dbv->next_record();
    256. 

  256. 

  257. 				$db = new ps_DB;
    258. 

  258. 				$q="SELECT first_name,last_name, user_email FROM #__{vm}_user_info WHERE user_id = '$userid' AND address_type='BT'";
    259. 

  259. 				$db->query($q);
    260. 

  260. 				$db->next_record();
    261. 

  261. 

  262. 				$message = $VM_LANG->_('HI',false) .' '. $db->f("first_name") .($db->f("middle_name")?' '.$db->f("middle_name") : '' ). ' ' . $db->f("last_name") . ",\n\n";
    263. 

  263. 				$message .= $VM_LANG->_('PHPSHOP_DOWNLOADS_SEND_MSG_1',false).".\n";
    264. 

  264. 				$message .= $VM_LANG->_('PHPSHOP_DOWNLOADS_SEND_MSG_2',false)."\n\n";
    265. 

  265. 

  266. 				while($dbw->next_record()) {
    267. 

  267. 					$message .= $dbw->f("file_name").": ".$dbw->f("download_id")
    268. 

  268. 					. "\n$url&download_id=".$dbw->f("download_id")."\n\n";
    269. 

  269. 				}
    270. 

  270. 

  271. 				$message .= $VM_LANG->_('PHPSHOP_DOWNLOADS_SEND_MSG_3',false) . DOWNLOAD_MAX."\n";
    272. 

  272. 				$expire = ((DOWNLOAD_EXPIRE / 60) / 60) / 24;
    273. 

  273. 				$message .= str_replace("{expire}", $expire, $VM_LANG->_('PHPSHOP_DOWNLOADS_SEND_MSG_4',false));
    274. 

  274. 				$message .= "\n\n____________________________________________________________\n";
    275. 

  275. 				$message .= $VM_LANG->_('PHPSHOP_DOWNLOADS_SEND_MSG_5',false)."\n";
    276. 

  276. 				$message .= $dbv->f("vendor_name") . " \n" . URL."\n\n".$dbv->f("contact_email") . "\n";
    277. 

  277. 				$message .= "____________________________________________________________\n";
    278. 

  278. 				$message .= $VM_LANG->_('PHPSHOP_DOWNLOADS_SEND_MSG_6',false) . $dbv->f("vendor_name");
    279. 

  279. 

  280. 

  281. 				$mail_Body = $message;
    282. 

  282. 				$mail_Subject = $VM_LANG->_('PHPSHOP_DOWNLOADS_SEND_SUBJ',false);
    283. 

  283. 

  284. 				$result = vmMail( $dbv->f("contact_email"), $dbv->f("vendor_name"), 
    285. 

  285. 						$db->f("user_email"), $mail_Subject, $mail_Body, '' );
    286. 

  286. 

  287. 				if ($result) {
    288. 

  288. 					$vmLogger->info( $VM_LANG->_('PHPSHOP_DOWNLOADS_SEND_MSG',false). " ". $db->f("first_name") . " " . $db->f("last_name") . " ".$db->f("user_email") );
    289. 

  289. 				}
    290. 

  290. 				else {
    291. 

  291. 					$vmLogger->warning( $VM_LANG->_('PHPSHOP_DOWNLOADS_ERR_SEND',false)." ". $db->f("first_name") . " " . $db->f("last_name") . ", ".$db->f("user_email") );
    292. 

  292. 				}
    293. 

  293. 			} 
    294. 

  294. 		}
    295. 

  295. 		elseif ($d["order_status"]==DISABLE_DOWNLOAD_STATUS) {
    296. 

  296. 			$q = "DELETE FROM #__{vm}_product_download WHERE order_id=" . (int)$d["order_id"];
    297. 

  297. 			$db->query($q);
    298. 

  298. 			$db->next_record();
    299. 

  299. 		}
    300. 

  300. 

  301. 		return true;
    302. 

  302. 	}
    303. 

  303. 

  304. 	/**
    305. 

  305. 	 * notifies the customer that the Order Status has been changed
    306. 

  306. 	 *
    307. 

  307. 	 * @param array $d
    308. 

  308. 	 */
    309. 

  309. 	function notify_customer( &$d ){
    310. 

  310. 

  311. 		global  $sess, $VM_LANG, $vmLogger;
    312. 

  312. 

  313. 		$url = SECUREURL."index.php?option=com_virtuemart&page=account.order_details&order_id=".urlencode($d["order_id"]).'&Itemid='.$sess->getShopItemid();
    314. 

  314. 

  315. 		$db = new ps_DB;
    316. 

  316. 		$dbv = new ps_DB;
    317. 

  317. 		$q = "SELECT vendor_name,contact_email FROM #__{vm}_vendor ";
    318. 

  318. 		$q .= "WHERE vendor_id='".$_SESSION['ps_vendor_id']."'";
    319. 

  319. 		$dbv->query($q);
    320. 

  320. 		$dbv->next_record();
    321. 

  321. 

  322. 		$q = "SELECT first_name,last_name,user_email,order_status_name FROM #__{vm}_order_user_info,#__{vm}_orders,#__{vm}_order_status ";
    323. 

  323. 		$q .= "WHERE #__{vm}_orders.order_id = '".$db->getEscaped($d["order_id"])."' ";
    324. 

  324. 		$q .= "AND #__{vm}_orders.user_id = #__{vm}_order_user_info.user_id ";
    325. 

  325. 		$q .= "AND #__{vm}_orders.order_id = #__{vm}_order_user_info.order_id ";
    326. 

  326. 		$q .= "AND order_status = order_status_code ";
    327. 

  327. 		$db->query($q);
    328. 

  328. 		$db->next_record();
    329. 

  329. 

  330. 		// MAIL BODY
    331. 

  331. 		$message = $VM_LANG->_('HI',false) .' '. $db->f("first_name") . ($db->f("middle_name")?' '.$db->f("middle_name") : '' ). ' ' . $db->f("last_name") . ",\n\n";
    332. 

  332. 		$message .= $VM_LANG->_('PHPSHOP_ORDER_STATUS_CHANGE_SEND_MSG_1',false)."\n\n";
    333. 

  333. 

  334. 		if( !empty($d['include_comment']) && !empty($d['order_comment']) ) {
    335. 

  335. 			$message .= $VM_LANG->_('PHPSHOP_ORDER_HISTORY_COMMENT_EMAIL',false).":\n";
    336. 

  336. 			$message .= $d['order_comment'];
    337. 

  337. 			$message .= "\n____________________________________________________________\n\n";
    338. 

  338. 		}
    339. 

  339. 

  340. 		$message .= $VM_LANG->_('PHPSHOP_ORDER_STATUS_CHANGE_SEND_MSG_2',false)."\n";
    341. 

  341. 		$message .= "____________________________________________________________\n\n";
    342. 

  342. 		$message .= $db->f("order_status_name");
    343. 

  343. 

  344. 		if( VM_REGISTRATION_TYPE != 'NO_REGISTRATION' ) {
    345. 

  345. 		$message .= "\n____________________________________________________________\n\n";
    346. 

  346. 		$message .= $VM_LANG->_('PHPSHOP_ORDER_STATUS_CHANGE_SEND_MSG_3',false)."\n";
    347. 

  347. 		$message .= $url;
    348. 

  348. 		}
    349. 

  349. 		$message .= "\n\n____________________________________________________________\n";
    350. 

  350. 		$message .= $dbv->f("vendor_name") . " \n";
    351. 

  351. 		$message .= URL."\n";
    352. 

  352. 		$message .= $dbv->f("contact_email");
    353. 

  353. 

  354. 		$message = str_replace( "{order_id}", $d["order_id"], $message );
    355. 

  355. 

  356. 		$mail_Body = html_entity_decode($message);
    357. 

  357. 		$mail_Subject = str_replace( "{order_id}", $d["order_id"], $VM_LANG->_('PHPSHOP_ORDER_STATUS_CHANGE_SEND_SUBJ',false));
    358. 

  358. 		
    359. 

  359. 		
    360. 

  360. 		$result = vmMail( $dbv->f("contact_email"),  $dbv->f("vendor_name"), 
    361. 

  361. 					$db->f("user_email"), $mail_Subject, $mail_Body, '' );
    362. 

  362. 		
    363. 

  363. 		/* Send the email */
    364. 

  364. 		if ($result) {
    365. 

  365. 			$vmLogger->info( $VM_LANG->_('PHPSHOP_DOWNLOADS_SEND_MSG',false). " ". $db->f("first_name") . " " . $db->f("last_name") . ", ".$db->f("user_email") );
    366. 

  366. 		}
    367. 

  367. 		else {
    368. 

  368. 			$vmLogger->warning( $VM_LANG->_('PHPSHOP_DOWNLOADS_ERR_SEND',false).' '. $db->f("first_name") . " " . $db->f("last_name") . ", ".$db->f("user_email")." (". $result->ErrorInfo.")" );
    369. 

  369. 		}
    370. 

  370. 	}
    371. 

  371. 	/**
    372. 

  372. 	 * This function inserts the DOWNLOAD IDs for all files associated with this product
    373. 

  373. 	 * so the customer can later download the purchased files
    374. 

  374. 	 * @static 
    375. 

  375. 	 * @since 1.1.0
    376. 

  376. 	 * @param int $product_id
    377. 

  377. 	 * @param int $order_id
    378. 

  378. 	 * @param int $user_id
    379. 

  379. 	 */
    380. 

  380. 	function insert_downloads_for_product( &$d ) {
    381. 

  381. 		$db = new ps_DB();
    382. 

  382. 		$dbd = new ps_DB();
    383. 

  383. 		if( empty( $d['product_id'] ) || empty( $d['order_id'] )) {
    384. 

  384. 			return false;
    385. 

  385. 		}
    386. 

  386. 		
    387. 

  387. 		$dl = "SELECT attribute_name,attribute_value ";
    388. 

  388. 		$dl .= "FROM #__{vm}_product_attribute WHERE product_id='".$d['product_id']."'";
    389. 

  389. 		$dl .= " AND attribute_name='download'";
    390. 

  390. 		$db->query($dl);
    391. 

  391. 		$dlnum = 0;
    392. 

  392. 		while($db->next_record()) {
    393. 

  393. 

  394. 			$str = (int)$d['order_id'];
    395. 

  395. 			$str .= $d['product_id'];
    396. 

  396. 		    $str .= uniqid('download_');
    397. 

  397. 			$str .= $dlnum++;
    398. 

  398. 			$str .= time();
    399. 

  399. 

  400. 			$download_id = md5($str);
    401. 

  401. 

  402. 			$fields = array('product_id' => $d['product_id'], 
    403. 

  403. 							'user_id' => (int)$d['user_id'], 
    404. 

  404. 							'order_id' => (int)$d['order_id'], 
    405. 

  405. 							'end_date' => '0', 
    406. 

  406. 							'download_max' => DOWNLOAD_MAX, 
    407. 

  407. 							'download_id' => $download_id, 
    408. 

  408. 							'file_name' => $db->f("attribute_value")
    409. 

  409. 							);
    410. 

  410. 			$dbd->buildQuery('INSERT', '#__{vm}_product_download', $fields );
    411. 

  411. 			$dbd->query();
    412. 

  412. 		}
    413. 

  413. 	}
    414. 

  414. 

  415. 	/**
    416. 

  416. 	 * Handles a download Request
    417. 

  417. 	 *
    418. 

  418. 	 * @param array $d
    419. 

  419. 	 * @return boolean
    420. 

  420. 	 */
    421. 

  421. 	function download_request(&$d) {
    422. 

  422. 		global  $download_id, $VM_LANG, $vmLogger;
    423. 

  423. 

  424. 		$db = new ps_DB;
    425. 

  425. 		$download_id = $db->getEscaped( vmGet( $d, "download_id" ) );
    426. 

  426. 

  427. 		$q = "SELECT * FROM #__{vm}_product_download WHERE";
    428. 

  428. 		$q .= " download_id = '$download_id'";
    429. 

  429. 

  430. 		$db->query($q);
    431. 

  431. 		$db->next_record();
    432. 

  432. 

  433. 		$download_id = $db->f("download_id");
    434. 

  434. 		$file_name = $db->f("file_name");
    435. 

  435. 		if( strncmp($file_name, 'http', 4 ) !== 0) {
    436. 

  436. 			$datei = DOWNLOADROOT . $file_name;
    437. 

  437. 		} else {
    438. 

  438. 			$datei = $file_name;
    439. 

  439. 		}
    440. 

  440. 		$download_max = $db->f("download_max");
    441. 

  441. 		$end_date = $db->f("end_date");
    442. 

  442. 		$zeit=time();
    443. 

  443. 

  444. 		if (!$download_id) {
    445. 

  445. 			$vmLogger->err( $VM_LANG->_('PHPSHOP_DOWNLOADS_ERR_INV',false) );
    446. 

  446. 			return false;
    447. 

  447. 			//vmRedirect("index.php?option=com_virtuemart&page=shop.downloads", $d["error"]);
    448. 

  448. 		}
    449. 

  449. 

  450. 		elseif ($download_max=="0") {
    451. 

  451. 			$q ="DELETE FROM #__{vm}_product_download";
    452. 

  452. 			$q .=" WHERE download_id = '" . $download_id . "'";
    453. 

  453. 			$db->query($q);
    454. 

  454. 			$db->next_record();
    455. 

  455. 			$vmLogger->err( $VM_LANG->_('PHPSHOP_DOWNLOADS_ERR_MAX',false) );
    456. 

  456. 			return false;
    457. 

  457. 			//vmRedirect("index.php?option=com_virtuemart&page=shop.downloads", $d["error"]);
    458. 

  458. 		}
    459. 

  459. 

  460. 		elseif ($end_date!="0" && $zeit > $end_date) {
    461. 

  461. 			$q ="DELETE FROM #__{vm}_product_download";
    462. 

  462. 			$q .=" WHERE download_id = '" . $download_id . "'";
    463. 

  463. 			$db->query($q);
    464. 

  464. 			$db->next_record();
    465. 

  465. 			$vmLogger->err( $VM_LANG->_('PHPSHOP_DOWNLOADS_ERR_EXP',false) );
    466. 

  466. 			return false;
    467. 

  467. 			//vmRedirect("index.php?option=com_virtuemart&page=shop.downloads", $d["error"]);
    468. 

  468. 		}
    469. 

  469. 		require_once(CLASSPATH.'connectionTools.class.php');
    470. 

  470. 		
    471. 

  471. 		$download_count = true;
    472. 

  472. 		
    473. 

  473. 		if ( @file_exists( $datei ) ){
    474. 

  474. 			// Check if this is a request for a special range of the file (=Resume Download)
    475. 

  475. 			$range_request = vmConnector::http_rangeRequest( filesize($datei), false );
    476. 

  476. 			if( $range_request[0] == 0 ) {
    477. 

  477. 				// this is not a request to resume a download,
    478. 

  478. 				$download_count = true;
    479. 

  479. 			} else {
    480. 

  480. 				$download_count = false;
    481. 

  481. 			}
    482. 

  482. 		} else {
    483. 

  483. 			$download_count = false;
    484. 

  484. 		}
    485. 

  485. 

  486. 		// Parameter to check if the file should be removed after download, which is only true,
    487. 

  487. 		// if we have a remote file, which was transferred to this server into a temporary file
    488. 

  488. 		$unlink = false;
    489. 

  489. 		
    490. 

  490. 		if( strncmp($datei, 'http', 4 ) === 0) {
    491. 

  491. 			require_once( CLASSPATH.'ps_product_files.php');
    492. 

  492. 			$datei_local = ps_product_files::getRemoteFile($datei);
    493. 

  493. 			if( $datei_local !== false ) {
    494. 

  494. 				$datei = $datei_local;
    495. 

  495. 				$unlink = true;
    496. 

  496. 			} else {
    497. 

  497. 				$vmLogger->err( $VM_LANG->_('VM_DOWNLOAD_FILE_NOTFOUND',false) );
    498. 

  498. 				return false;
    499. 

  499. 			}
    500. 

  500. 		}
    501. 

  501. 		else {
    502. 

  502. 			// Check, if file path is correct
    503. 

  503. 			// and file is
    504. 

  504. 			if ( !@file_exists( $datei ) ){
    505. 

  505. 				$vmLogger->err( $VM_LANG->_('VM_DOWNLOAD_FILE_NOTFOUND',false) );
    506. 

  506. 				return false;
    507. 

  507. 				//vmRedirect("index.php?option=com_virtuemart&page=shop.downloads", $d["error"]);
    508. 

  508. 			}
    509. 

  509. 			if ( !@is_readable( $datei ) ) {
    510. 

  510. 				$vmLogger->err( $VM_LANG->_('VM_DOWNLOAD_FILE_NOTREADABLE',false) );
    511. 

  511. 				return false;
    512. 

  512. 				//vmRedirect("index.php?option=com_virtuemart&page=shop.downloads", $d["error"]);
    513. 

  513. 			}
    514. 

  514. 		}
    515. 

  515. 		if( $download_count ) {
    516. 

  516. 			// decrement the download_max to limit the number of downloads
    517. 

  517. 			$q ="UPDATE `#__{vm}_product_download` SET";
    518. 

  518. 			$q .=" `download_max`=`download_max` - 1";
    519. 

  519. 			$q .=" WHERE download_id = '" .$download_id. "'";
    520. 

  520. 			$db->query($q);
    521. 

  521. 			$db->next_record();
    522. 

  522. 		}
    523. 

  523. 		if ($end_date=="0") {
    524. 

  524. 			// Set the Download Expiry Date, so the download can expire after DOWNLOAD_EXPIRE seconds
    525. 

  525. 			$end_date=time('u') + DOWNLOAD_EXPIRE;
    526. 

  526. 			$q ="UPDATE #__{vm}_product_download SET";
    527. 

  527. 			$q .=" end_date=$end_date";
    528. 

  528. 			$q .=" WHERE download_id = '" . $download_id . "'";
    529. 

  529. 			$db->query($q);
    530. 

  530. 			$db->next_record();
    531. 

  531. 		}
    532. 

  532. 		
    533. 

  533. 		if (ereg('Opera(/| )([0-9].[0-9]{1,2})', $_SERVER['HTTP_USER_AGENT'])) {
    534. 

  534. 			$UserBrowser = "Opera";
    535. 

  535. 		}
    536. 

  536. 		elseif (ereg('MSIE ([0-9].[0-9]{1,2})', $_SERVER['HTTP_USER_AGENT'])) {
    537. 

  537. 			$UserBrowser = "IE";
    538. 

  538. 		} else {
    539. 

  539. 			$UserBrowser = '';
    540. 

  540. 		}
    541. 

  541. 		$mime_type = ($UserBrowser == 'IE' || $UserBrowser == 'Opera') ? 'application/octetstream' : 'application/octet-stream';
    542. 

  542. 

  543. 		// dump anything in the buffer
    544. 

  544. 		while( @ob_end_clean() );
    545. 

  545. 

  546. 		vmConnector::sendFile( $datei, $mime_type, basename($file_name) );
    547. 

  547. 		
    548. 

  548. 		if( $unlink ) {
    549. 

  549. 			// remove the temporarily downloaded remote file
    550. 

  550. 			@unlink( $datei );
    551. 

  551. 		}
    552. 

  552. 		$GLOBALS['vm_mainframe']->close(true);
    553. 

  553. 			
    554. 

  554. 	}
    555. 

  555. 

  556. 	/**
    557. 

  557. 	 * Shows the list of the orders of a user in the account mainenance section
    558. 

  558. 	 *
    559. 

  559. 	 * @param string $order_status Filter by order status (A=all, C=confirmed, P=pending,...)
    560. 

  560. 	 * @param int $secure Restrict the order list to a specific user id (=1) or not (=0)?
    561. 

  561. 	 */
    562. 

  562. 	function list_order($order_status='A', $secure=0 ) {
    563. 

  563. 		global $VM_LANG, $CURRENCY_DISPLAY, $sess, $limit, $limitstart, $keyword, $mm_action_url;
    564. 

  564. 

  565. 		$ps_vendor_id = $_SESSION["ps_vendor_id"];
    566. 

  566. 		$auth = $_SESSION['auth'];
    567. 

  567. 		require_once( CLASSPATH .'ps_order_status.php');
    568. 

  568. 		require_once( CLASSPATH .'htmlTools.class.php');
    569. 

  569. 		require_once( CLASSPATH .'pageNavigation.class.php');
    570. 

  570. 		$db = new ps_DB;
    571. 

  571. 		$dbs = new ps_DB;
    572. 

  572. 		
    573. 

  573. 		$listfields = 'cdate,order_total,order_status,order_id,order_currency';
    574. 

  574. 		$countfields = 'count(*) as num_rows';
    575. 

  575. 		$count = "SELECT $countfields FROM #__{vm}_orders ";
    576. 

  576. 		$list = "SELECT $listfields FROM #__{vm}_orders ";
    577. 

  577. 		$q = "WHERE vendor_id='$ps_vendor_id' ";
    578. 

  578. 		if ($order_status != "A") {
    579. 

  579. 			$q .= "AND order_status='$order_status' ";
    580. 

  580. 		}
    581. 

  581. 		if ($secure) {
    582. 

  582. 			$q .= "AND user_id='" . $auth["user_id"] . "' ";
    583. 

  583. 		}
    584. 

  584. 		if( !empty( $keyword )) {
    585. 

  585. 			$q .= "AND (order_id LIKE '%".$keyword."%' ";
    586. 

  586. 			$q .= "OR order_number LIKE '%".$keyword."%' ";
    587. 

  587. 			$q .= "OR order_total LIKE '%".$keyword."%') ";
    588. 

  588. 		}
    589. 

  589. 		$q .= "ORDER BY cdate DESC";
    590. 

  590. 		$count .= $q;
    591. 

  591. 

  592. 		$db->query($count);
    593. 

  593. 		$db->next_record();
    594. 

  594. 		$num_rows = $db->f('num_rows');
    595. 

  595. 		if( $num_rows == 0 ) {
    596. 

  596. 			echo "<span style=\"font-style:italic;\">".$VM_LANG->_('PHPSHOP_ACC_NO_ORDERS')."</span>\n";
    597. 

  597. 			return;
    598. 

  598. 		}
    599. 

  599. 		$pageNav = new vmPageNav( $num_rows, $limitstart, $limit );
    600. 

  600. 

  601. 		$list .= $q .= " LIMIT ".$pageNav->limitstart.", $limit ";
    602. 

  602. 		$db->query( $list );
    603. 

  603. 		$listObj = new listFactory( $pageNav );
    604. 

  604. 

  605. 		if( $num_rows > 0 ) {
    606. 

  606. 			// print out the search field and a list heading
    607. 

  607. 			$listObj->writeSearchHeader( '', '', 'account', 'index');
    608. 

  608. 		}
    609. 

  609. 		// start the list table
    610. 

  610. 		$listObj->startTable();
    611. 

  611. 

  612. 		$listObj->writeTableHeader( 3 );
    613. 

  613. 

  614. 		while ($db->next_record()) {
    615. 

  615. 

  616. 			$order_status = ps_order_status::getOrderStatusName($db->f("order_status"));
    617. 

  617. 

  618. 			$listObj->newRow();
    619. 

  619. 

  620. 			$tmp_cell = "<a href=\"". $sess->url( $mm_action_url."index.php?page=account.order_details&order_id=".$db->f("order_id") )."\">\n";
    621. 

  621. 			$tmp_cell .= "<img src=\"".IMAGEURL."ps_image/goto.png\" height=\"32\" width=\"32\" align=\"middle\" border=\"0\" alt=\"".$VM_LANG->_('PHPSHOP_ORDER_LINK')."\" />&nbsp;".$VM_LANG->_('PHPSHOP_VIEW')."</a><br />";
    622. 

  622. 			$listObj->addCell( $tmp_cell );
    623. 

  623. 

  624. 			$tmp_cell = "<strong>".$VM_LANG->_('PHPSHOP_ORDER_PRINT_PO_DATE').":</strong> " . strftime("%d. %B %Y", $db->f("cdate"));
    625. 

  625. 			$tmp_cell .= "<br /><strong>".$VM_LANG->_('PHPSHOP_ORDER_PRINT_TOTAL').":</strong> " . $CURRENCY_DISPLAY->getFullValue($db->f("order_total"), '', $db->f('order_currency'));
    626. 

  626. 			$listObj->addCell( $tmp_cell );
    627. 

  627. 

  628. 			$tmp_cell = "<strong>".$VM_LANG->_('PHPSHOP_ORDER_PRINT_PO_STATUS').":</strong> ".$order_status;
    629. 

  629. 			$tmp_cell .= "<br /><strong>".$VM_LANG->_('PHPSHOP_ORDER_PRINT_PO_NUMBER').":</strong> " . sprintf("%08d", $db->f("order_id"));
    630. 

  630. 			$listObj->addCell( $tmp_cell );
    631. 

  631. 		}
    632. 

  632. 		$listObj->writeTable();
    633. 

  633. 		$listObj->endTable();
    634. 

  634. 		if( $num_rows > 0 ) {
    635. 

  635. 			$listObj->writeFooter( $keyword, '&Itemid='.$sess->getShopItemid() );
    636. 

  636. 		}
    637. 

  637. 

  638. 	}
    639. 

  639. 

  640. 	/**
    641. 

  641. 	 * Validate form values prior to delete
    642. 

  642. 	 *
    643. 

  643. 	 * @param int $order_id
    644. 

  644. 	 * @return boolean
    645. 

  645. 	 */
    646. 

  646. 	function validate_delete($order_id) {
    647. 

  647. 		global $VM_LANG;
    648. 

  648. 		
    649. 

  649. 		$db = new ps_DB;
    650. 

  650. 

  651. 		if(empty( $order_id )) {
    652. 

  652. 			$GLOBALS['vmLogger']->err($VM_LANG->_('VM_ORDER_DELETE_ERR_ID'));
    653. 

  653. 			return False;
    654. 

  654. 		}
    655. 

  655. 		
    656. 

  656. 		// Get the order items and update the stock level
    657. 

  657. 		// to the number before the order was placed
    658. 

  658. 		$q = "SELECT product_id, product_quantity FROM #__{vm}_order_item WHERE order_id='".$db->getEscaped($order_id)."'";
    659. 

  659. 		$db->query( $q );
    660. 

  660. 		$dbu = new ps_DB;
    661. 

  661. 		// Now update each ordered product
    662. 

  662. 		while( $db->next_record() ) {
    663. 

  663. 			$q = "UPDATE #__{vm}_product SET product_in_stock=product_in_stock+".$db->f("product_quantity")
    664. 

  664. 			.",product_sales=product_sales-".$db->f("product_quantity")." WHERE product_id='".$db->f("product_id")."'";
    665. 

  665. 			$dbu->query( $q );
    666. 

  666. 		}
    667. 

  667. 

  668. 		return True;
    669. 

  669. 	}
    670. 

  670. 

  671. 	/**
    672. 

  672. 	* Controller for Deleting Records.
    673. 

  673. 	*/
    674. 

  674. 	function delete(&$d) {
    675. 

  675. 

  676. 		$record_id = $d["order_id"];
    677. 

  677. 

  678. 		if( is_array( $record_id)) {
    679. 

  679. 			foreach( $record_id as $record) {
    680. 

  680. 				if( !$this->delete_record( $record, $d ))
    681. 

  681. 				return false;
    682. 

  682. 			}
    683. 

  683. 			return true;
    684. 

  684. 		}
    685. 

  685. 		else {
    686. 

  686. 			return $this->delete_record( $record_id, $d );
    687. 

  687. 		}
    688. 

  688. 	}
    689. 

  689. 	/**
    690. 

  690. 	* Deletes one Record.
    691. 

  691. 	*/
    692. 

  692. 	function delete_record( $record_id, &$d ) {
    693. 

  693. 		global $db;
    694. 

  694. 		$record_id = intval( $record_id );
    695. 

  695. 		if ($this->validate_delete($record_id)) {
    696. 

  696. 			$q = "DELETE from #__{vm}_orders where order_id='$record_id'";
    697. 

  697. 			$db->query($q);
    698. 

  698. 

  699. 			$q = "DELETE from #__{vm}_order_item where order_id='$record_id'";
    700. 

  700. 			$db->query($q);
    701. 

  701. 

  702. 			$q = "DELETE from #__{vm}_order_payment where order_id='$record_id'";
    703. 

  703. 			$db->query($q);
    704. 

  704. 

  705. 			$q = "DELETE from #__{vm}_product_download where order_id='$record_id'";
    706. 

  706. 			$db->query($q);
    707. 

  707. 			
    708. 

  708. 			$q = "DELETE from #__{vm}_order_history where order_id='$record_id'";
    709. 

  709. 			$db->query($q);
    710. 

  710. 			
    711. 

  711. 			$q = "DELETE from #__{vm}_order_user_info where order_id='$record_id'";
    712. 

  712. 			$db->query($q);
    713. 

  713. 			
    714. 

  714. 			$q = "DELETE FROM #__{vm}_shipping_label where order_id=$record_id";
    715. 

  715. 			$db->query($q);
    716. 

  716. 

  717. 			return True;
    718. 

  718. 		}
    719. 

  719. 		else {
    720. 

  720. 			return False;
    721. 

  721. 		}
    722. 

  722. 	}
    723. 

  723. 	/**
    724. 

  724. 	 * Creates the order navigation on the order print page
    725. 

  725. 	 *
    726. 

  726. 	 * @param int $order_id
    727. 

  727. 	 * @return boolean
    728. 

  728. 	 */
    729. 

  729. 	function order_print_navigation( $order_id=1 ) {
    730. 

  730. 		global $sess, $modulename, $VM_LANG, $my;
    731. 

  731. 		
    732. 

  732. 		$navi_db =& new ps_DB;
    733. 

  733. 		return;
    734. 

  734. 		$navigation = "<div align=\"center\">\n<strong>\n";
    735. 

  735. 		$q = "SELECT order_id FROM #__{vm}_orders WHERE ";
    736. 

  736. 		$q .= "order_id < '$order_id' ORDER BY order_id DESC";
    737. 

  737. 		$navi_db->query($q);
    738. 

  738. 		$navi_db->next_record();
    739. 

  739. 		if ($navi_db->f("order_id")) {
    740. 

  740. 			$url = $_SERVER['PHP_SELF'] . "?page=$modulename.booking_form&order_id=";
    741. 

  741. 			$url .= $navi_db->f("order_id");
    742. 

  742. 			$navigation .= "<a class=\"pagenav\" href=\"" . $sess->url($url) . "\">&lt; " .$VM_LANG->_('ITEM_PREVIOUS')."</a> | ";
    743. 

  743. 		} else
    744. 

  744. 		$navigation .= "<span class=\"pagenav\">&lt; " .$VM_LANG->_('ITEM_PREVIOUS')." | </span>";
    745. 

  745. 

  746. 		$q = "SELECT order_id FROM #__{vm}_orders WHERE ";
    747. 

  747. 		$q .= "order_id > '$order_id' ORDER BY order_id";
    748. 

  748. 		$navi_db->query($q);
    749. 

  749. 		$navi_db->next_record();
    750. 

  750. 		if ($navi_db->f("order_id")) {
    751. 

  751. 			$url = $_SERVER['PHP_SELF'] . "?page=$modulename.booking_form&order_id=";
    752. 

  752. 			$url .= $navi_db->f("order_id");
    753. 

  753. 			$navigation .= "<a class=\"pagenav\" href=\"" . $sess->url($url) ."\">". $VM_LANG->_('ITEM_NEXT')."  &gt;</a>";
    754. 

  754. 		} else {
    755. 

  755. 			$navigation .= "<span class=\"pagenav\">".$VM_LANG->_('ITEM_NEXT')." &gt;</span>";
    756. 

  756. 		}
    757. 

  757. 

  758. 		$navigation .= "\n<strong>\n</div>\n";
    759. 

  759. 

  760. 		return $navigation;
    761. 

  761. 	}
    762. 

  762. 	
    763. 

  763. 	function add(&$d) {
    764. 

  764. 		global $ps_booking, $VM_LANG, $mosConfig_offset, $sess, $page;
    765. 

  765. 		
    766. 

  766. 		/**
    767. 

  767. 		 * Add the user
    768. 

  768. 		 */
    769. 

  769. 		if(!vmGet($d,'user_id')){
    770. 

  770. 			$_POST['name'] = vmGet($d,'first_name').' '.vmGet($d,'last_name');
    771. 

  771. 			$_POST['gid'] = $d['gid'] = '18';
    772. 

  772. 			$_POST['usertype'] = $d['usertype'] = 'Registered';
    773. 

  773. 			$d['perms'] = 'shopper';
    774. 

  774. 			$d['customer_number'] = 'shopper';
    775. 

  775. 			$ps_user = new ps_user();
    776. 

  776. 			if (!$ps_user->add($d)) {
    777. 

  777. 				$GLOBALS['vmLogger']->err('Unable to add the user account');
    778. 

  778. 				return false;
    779. 

  779. 			}
    780. 

  780. 			$d['user_id'] = $_REQUEST['user_id'];
    781. 

  781. 		}		
    782. 

  782. 		
    783. 

  783. 		
    784. 

  784. 		/**
    785. 

  785. 		 * Process the booking information, this sets the price etc
    786. 

  786. 		 */
    787. 

  787. 		$ps_booking->process(1,1);
    788. 

  788. 		if(!$ps_booking->status){
    789. 

  789. 			return false;
    790. 

  790. 		}
    791. 

  791. 		
    792. 

  792. 				
    793. 

  793. 		/**
    794. 

  794. 		 * Add the order / booking
    795. 

  795. 		 **/		
    796. 

  796. 		$ps_order_booking = new ps_order_booking();
    797. 

  797. 		if ($ps_order_booking->add($d)) {		
    798. 

  798. 			
    799. 

  799. 			$_REQUEST['order_id'] = $d['order_id'] = $ps_order_booking->order_id;
    800. 

  800. 		
    801. 

  801. 			/**
    802. 

  802. 			 * Get all fields which where shown to the user
    803. 

  803. 			 * and save the order user info table
    804. 

  804. 			 */
    805. 

  805. 			$userFields = ps_userfield::getUserFields('registration', false, '', true);	
    806. 

  806. 			$skip_fields = ps_userfield::getSkipFields();
    807. 

  807. 			$fields = array();
    808. 

  808. 			foreach( $userFields as $userField ) {
    809. 

  809. 				if( !in_array($userField->name,$skip_fields)) {
    810. 

  810. 					$name = $userField->name == 'email' ? 'user_email' : $userField->name;
    811. 

  811. 					$fields[$name] = vmGet($d,$userField->name);
    812. 

  812. 				}
    813. 

  813. 			}
    814. 

  814. 			$fields['user_id'] = $d['user_id'];
    815. 

  815. 			$fields['order_id'] = $d['order_id'];
    816. 

  816. 			$fields['address_type'] = 'BT';
    817. 

  817. 			$fields['address_type_name'] = '-default-';
    818. 

  818. 			$db = new ps_DB();
    819. 

  819. 			$db->buildQuery('INSERT','#__{vm}_order_user_info',$fields);
    820. 

  820. 			
    821. 

  821. 			if(!$db->query()){
    822. 

  822. 				$GLOBALS['vmLogger']->err('Unable to add the user information associated with this booking');
    823. 

  823. 				return false;
    824. 

  824. 			}
    825. 

  825. 			
    826. 

  826. 			if (vmGet($d,'notify_customer','N')=='HTML') {
    827. 

  827. 				
    828. 

  828. 				$ps_checkout = new ps_checkout();
    829. 

  829. 				$ps_checkout->email_receipt($ps_order_booking->order_id,'Booking Added', 0, @VB_NOTIFY_ADD_BACK_CUST, @VB_NOTIFY_ADD_BACK_OWNER, @VB_NOTIFY_ADD_BACK_ADMIN);
    830. 

  830. 			}
    831. 

  831. 			
    832. 

  832. 			$GLOBALS['vmLogger']->info('The booking has been sucessfully saved.');
    833. 

  833. 		}
    834. 

  834. 		
    835. 

  835. 		return true;
    836. 

  836. 	}
    837. 

  837. 	
    838. 

  838. 	function update(&$d) {
    839. 

  839. 		global $ps_booking, $VM_LANG, $mosConfig_offset, $sess;
    840. 

  840. 		
    841. 

  841. 		/**
    842. 

  842. 		 * Process the booking information, this sets the price etc
    843. 

  843. 		 */		
    844. 

  844. 		$ps_booking->process(1,1);
    845. 

  845. 		$ps_booking->booking_id = $d['order_id'];
    846. 

  846. 		//Check that the booking is ok
    847. 

  847. 		if (!$ps_booking->status){
    848. 

  848. 			return false;
    849. 

  849. 		}			
    850. 

  850. 						
    851. 

  851. 				
    852. 

  852. 		/**
    853. 

  853. 		 * Get the suer ID from the booking info
    854. 

  854. 		 */
    855. 

  855. 		
    856. 

  856. 		$db = new ps_DB();
    857. 

  857. 		$db->query("SELECT user_id FROM #__{vm}_order_user_info WHERE order_id = ".vmGet($d,'order_id'));
    858. 

  858. 		$db->next_record();
    859. 

  859. 		$d['user_id'] = $_REQUEST['user_id'] = $db->f('user_id');
    860. 

  860. 		
    861. 

  861. 		/**
    862. 

  862. 		 * Update the order booking 
    863. 

  863. 		 **/
    864. 

  864. 		
    865. 

  865. 		$ps_order_booking = new ps_order_booking();
    866. 

  866. 		if (($_SERVER['REMOTE_ADDR'] == '86.147.72.108') || $ps_order_booking->update($d)) {
    867. 

  867. 		
    868. 

  868. 			/**
    869. 

  869. 			 * Get all fields which where shown to the user
    870. 

  870. 			 * and save the order user info table
    871. 

  871. 			 */
    872. 

  872. 			$userFields = ps_userfield::getUserFields('registration', false, '', true);	
    873. 

  873. 			$skip_fields = ps_userfield::getSkipFields();
    874. 

  874. 			$fields = array();
    875. 

  875. 			foreach( $userFields as $userField ) {
    876. 

  876. 				if( !in_array($userField->name,$skip_fields)) {
    877. 

  877. 					$name = $userField->name == 'email' ? 'user_email' : $userField->name;
    878. 

  878. 					$fields[$name] = vmGet($d,$userField->name);
    879. 

  879. 				}
    880. 

  880. 			}
    881. 

  881. 			$db = new ps_DB();
    882. 

  882. 			$db->buildQuery('UPDATE','#__{vm}_order_user_info',$fields,'WHERE user_id = '.vmGet($d,'user_id').' AND order_id = '.vmGet($d,'order_id'));
    883. 

  883. 			
    884. 

  884. 			if(!$db->query()){
    885. 

  885. 				$GLOBALS['vmLogger']->err('Unable to update the user information associated with this booking');
    886. 

  886. 				return false;
    887. 

  887. 			}
    888. 

  888. 			
    889. 

  889. 			/**
    890. 

  890. 			 * Notify the customer if theres an order status update
    891. 

  891. 			 */			
    892. 

  892. 			if($d['order_status'] != $d['current_order_status'] && vmGet($_REQUEST,'notify_customer','N')=='Y'){
    893. 

  893. 				
    894. 

  894. 				if(!$this->order_status_update($d)) return false;			
    895. 

  895. 			}
    896. 

  896. 			
    897. 

  897. 			if (vmGet($_REQUEST,'notify_customer','N')=='HTML') {
    898. 

  898. 				
    899. 

  899. 				$ps_checkout = new ps_checkout();
    900. 

  900. 				
    901. 

  901. 				// Organic mod: allow separate email for cancellations
    902. 

  902. 				if ( vmGet($_REQUEST,'order_status','X') == 'X' ) {
    903. 

  903. 					$ps_checkout->email_receipt($d['order_id'],'Booking Cancelled', 0, @VB_NOTIFY_AMEND_CUST, @VB_NOTIFY_AMEND_OWNER, @VB_NOTIFY_AMEND_ADMIN);
    904. 

  904. 				}
    905. 

  905. 				else {
    906. 

  906. 					$ps_checkout->email_receipt($d['order_id'],'Booking Updated / Amended', 0, @VB_NOTIFY_AMEND_CUST, @VB_NOTIFY_AMEND_OWNER, @VB_NOTIFY_AMEND_ADMIN);
    907. 

  907. 				}
    908. 

  908. 			}			
    909. 

  909. 			$GLOBALS['vmLogger']->info('The booking details have been sucessfully updated.');
    910. 

  910. 		}		
    911. 

  911. 		return true;		
    912. 

  912. 	}
    913. 

  913. }
    914. 

  914. 

  915. $ps_order = new ps_order;
    916. 

  916. 

  917. ?>
    918.