PageRenderTime 61ms CodeModel.GetById 27ms RepoModel.GetById 0ms app.codeStats 1ms

/application/views/pages/admin/ordersifrogzsz.php

https://bitbucket.org/chadsaun/ifrogz-panel
PHP | 1454 lines | 1362 code | 44 blank | 48 comment | 181 complexity | 0905215871f244849d370d19f6365e4c MD5 | raw file

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. //This code is copyright (c) Internet Business Solutions SL, all rights reserved.
    3. 

  3. //The contents of this file are protect under law as the intellectual property of Internet
    4. 

  4. //Business Solutions SL. Any use, reproduction, disclosure or copying of any kind 
    5. 

  5. //without the express and written permission of Internet Business Solutions SL is forbidden.
    6. 

  6. //Author: Vince Reid, vince@virtualred.net
    7. 

  7. include('init.php');
    8. 

  8. include(APPPATH.'views/pages/admin/cartmisc.php');
    9. 

  9. include_once(IFZROOT.'kohana.php');
    10. 

  10. session_register('order_id_commas');
    11. 

  11. $lisuccess=0;
    12. 

  12. if(@$dateadjust=="") $dateadjust=0;
    13. 

  13. if(@$dateformatstr == "") $dateformatstr = "m/d/Y";
    14. 

  14. $admindatestr="Y-m-d";
    15. 

  15. if(@$admindateformat=="") $admindateformat=0;
    16. 

  16. if($admindateformat==1)
    17. 

  17. 	$admindatestr="m/d/Y";
    18. 

  18. elseif($admindateformat==2)
    19. 

  19. 	$admindatestr="d/m/Y";
    20. 

  20. if(@$storesessionvalue=="") $storesessionvalue="virtualstore".time();
    21. 

  21. if(@$_GET["doedit"]=="true") $doedit=TRUE; else $doedit=FALSE;
    22. 

  22. function editfunc($data,$col,$size){
    23. 

  23. 	global $doedit;
    24. 

  24. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . str_replace('"','&quot;',$data) . '" size="' . $size . '">'); else return($data);
    25. 

  25. }
    26. 

  26. function editnumeric($data,$col,$size){
    27. 

  27. 	global $doedit;
    28. 

  28. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . number_format($data,2,'.','') . '" size="' . $size . '">'); else return(FormatEuroCurrency($data));
    29. 

  29. }
    30. 

  30. if(@$_SESSION["loggedon"] != $storesessionvalue && trim(@$_COOKIE["WRITECKL"])!=""){
    31. 

  31. 	$config = RBI_Kohana::config('database.default_ifrogz');
    32. 

  32. 	$config = $config['connection'];
    33. 

  33. 	$db=mysql_connect($config['hostname'], $config['username'], $config['password']);
    34. 

  34. 	mysql_select_db($config['database']) or die ('RBI connection failed.</td></tr></table></body></html>');
    35. 

  35. 	$rbiSQL = 'SELECT * 
    36. 

  36. 			   FROM employee 
    37. 

  37. 			   WHERE username="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKL"]))).'" and password="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKP"]))).'"';
    38. 

  38. 	$rs_rbi = mysql_query($rbiSQL);
    39. 

  39. 	if(mysql_num_rows($rs_rbi) > 0) {
    40. 

  40. 		@$_SESSION["loggedon"] = $storesessionvalue;
    41. 

  41. 	}else{
    42. 

  42. 		$lisuccess=2;
    43. 

  43. 	}
    44. 

  44. 	mysql_free_result($rs_rbi);
    45. 

  45. 	
    46. 

  46. 	include(APPPATH.'views/partials/admin/dbconnection.php');
    47. 

  47. }
    48. 

  48. if(($_SESSION["loggedon"] != $storesessionvalue && $lisuccess!=2) || @$disallowlogin==TRUE) exit();
    49. 

  49. if(@$htmlemails==TRUE) $emlNl = "<br />"; else $emlNl="\n";
    50. 

  50. if($lisuccess==2){
    51. 

  51. ?>
    52. 

  52. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    53. 

  53.         <tr>
    54. 

  54.           <td width="100%">
    55. 

  55.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    56. 

  56. 			  <tr> 
    57. 

  57.                 <td width="100%" colspan="4" align="center"><p>&nbsp;</p><p>&nbsp;</p>
    58. 

  58. 				  <p><strong><?php print $yyOpFai?></strong></p><p>&nbsp;</p>
    59. 

  59. 				  <p><?php print $yyCorCoo?> <?php print $yyCorLI?> <a href="/admin/login.php"><?php print $yyClkHer?></a>.</p>
    60. 

  60. 				</td>
    61. 

  61. 			  </tr>
    62. 

  62. 			</table>
    63. 

  63. 		  </td>
    64. 

  64. 		</tr>
    65. 

  65. 	  </table>
    66. 

  66. <?php
    67. 

  67. }else{
    68. 

  68. $success=true;
    69. 

  69. $alreadygotadmin = getadminsettings();
    70. 

  70. if(@$_POST["updatestatus"]=="1"){
    71. 

  71. 	mysql_query("UPDATE orders SET ordStatusInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordStatusInfo"]))) . "' WHERE ordID=" . @$_POST["orderid"]) or print(mysql_error());
    72. 

  72. }elseif(@$_GET["id"] != ""){
    73. 

  73. 	if(@$_POST["delccdets"] != ""){
    74. 

  74. 		mysql_query("UPDATE orders SET ordCNum='' WHERE ordID=" . @$_GET["id"]);
    75. 

  75. 	}
    76. 

  76. 	$sSQL = "SELECT cartProdId,cartProdName,cartProdPrice,cartQuantity,cartID FROM cart WHERE cartOrderID=" . $_GET["id"];
    77. 

  77. 	$allorders = mysql_query($sSQL) or print(mysql_error());
    78. 

  78. }else{
    79. 

  79. 	// Delete old uncompleted orders.
    80. 

  80. 	if($delccafter != 0){
    81. 

  81. 		$sSQL = "UPDATE orders SET ordCNum='' WHERE ordDate<'" . date("Y-m-d H:i:s", time()-($delccafter*60*60*24)) . "'";
    82. 

  82. 		mysql_query($sSQL) or print(mysql_error());
    83. 

  83. 	}
    84. 

  84. 	if($delAfter != 0){
    85. 

  85. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-($delAfter*60*60*24)) . "'";
    86. 

  86. 		$result = mysql_query($sSQL) or print(mysql_error());
    87. 

  87. 		if(mysql_num_rows($result)>0){
    88. 

  88. 			$delStr="";
    89. 

  89. 			$delOptions="";
    90. 

  90. 			$addcomma = "";
    91. 

  91. 			while($rs = mysql_fetch_assoc($result)){
    92. 

  92. 				$delStr .= $addcomma . $rs["cartOrderID"];
    93. 

  93. 				$delOptions .= $addcomma . $rs["cartID"];
    94. 

  94. 				$addcomma = ",";
    95. 

  95. 			}
    96. 

  96. 			mysql_query("DELETE FROM orders WHERE ordID IN (" . $delStr . ")") or print(mysql_error());
    97. 

  97. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    98. 

  98. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    99. 

  99. 		}
    100. 

  100. 		mysql_free_result($result);
    101. 

  101. 	}else{
    102. 

  102. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartOrderID=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    103. 

  103. 		$result = mysql_query($sSQL) or print(mysql_error());
    104. 

  104. 		if(mysql_num_rows($result)>0){
    105. 

  105. 			$delStr="";
    106. 

  106. 			$delOptions="";
    107. 

  107. 			$addcomma = "";
    108. 

  108. 			while($rs = mysql_fetch_assoc($result)){
    109. 

  109. 				$delStr .= $addcomma . $rs["cartOrderID"];
    110. 

  110. 				$delOptions .= $addcomma . $rs["cartID"];
    111. 

  111. 				$addcomma = ",";
    112. 

  112. 			}
    113. 

  113. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    114. 

  114. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    115. 

  115. 		}
    116. 

  116. 		mysql_free_result($result);
    117. 

  117. 	}
    118. 

  118. 	$numstatus=0;
    119. 

  119. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    120. 

  120. 	$result = mysql_query($sSQL) or print(mysql_error());
    121. 

  121. 	while($rs = mysql_fetch_assoc($result)){
    122. 

  122. 		$allstatus[$numstatus++]=$rs;
    123. 

  123. 	}
    124. 

  124. 	mysql_free_result($result);
    125. 

  125. }
    126. 

  126. if(@$_POST["updatestatus"]=="1"){
    127. 

  127. ?>
    128. 

  128. <script language="JavaScript" type="text/javascript">
    129. 

  129. <!--
    130. 

  130. setTimeout("history.go(-2);",1100);
    131. 

  131. // -->
    132. 

  132. </script>
    133. 

  133. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    134. 

  134.         <tr>
    135. 

  135.           <td width="100%">
    136. 

  136.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    137. 

  137. 			  <tr> 
    138. 

  138.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    139. 

  139.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    140. 

  140. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    141. 

  141. 			  </tr>
    142. 

  142. 			</table>
    143. 

  143. 		  </td>
    144. 

  144. 		</tr>
    145. 

  145. 	  </table>
    146. 

  146. <?php
    147. 

  147. }elseif(@$_POST["doedit"] == "true"){
    148. 

  148. 	if(!empty($_POST['clone'])) {
    149. 

  149. 		// GET ALL THE INFORMATION TO CLONE THE ORDER
    150. 

  150. 		//   - To clone an order we need to duplicate the order's information in the orders, cart, and cartoptions tables
    151. 

  151. 		$aNewOrder = array();
    152. 

  152. 		
    153. 

  153. 		$sql_orders = "SELECT * FROM orders WHERE ordID = " . $_POST["orderid"] ;
    154. 

  154. 		$res_orders = mysql_query($sql_orders) or print(mysql_error());
    155. 

  155. 		$row_orders = mysql_fetch_assoc($res_orders);
    156. 

  156. 		$aNewOrder["orders"] = $row_orders;
    157. 

  157. 		
    158. 

  158. 		$sql_cart = "SELECT * FROM cart c, cartoptions co 
    159. 

  159. 					 WHERE c.cartID = co.coCartID
    160. 

  160. 					 AND c.cartOrderID = " . $_POST["orderid"] . "
    161. 

  161. 					 ORDER BY c.cartID, c.cartProdID";
    162. 

  162. 		$res_cart = mysql_query($sql_cart) or print(mysql_error());
    163. 

  163. 		$prod_id = '';
    164. 

  164. 		$i=0;
    165. 

  165. 		$j=0;
    166. 

  166. 		$isfirst = true;
    167. 

  167. 		while($row_cart = mysql_fetch_assoc($res_cart)) {
    168. 

  168. 			if($isfirst) {
    169. 

  169. 				$prod_id = $row_cart["cartProdID"];
    170. 

  170. 			}
    171. 

  171. 			if(($prod_id != $row_cart["cartProdID"]) && !$isfirst) {
    172. 

  172. 				$i++;
    173. 

  173. 				$j=0;
    174. 

  174. 				$prod_id = $row_cart["cartProdID"];
    175. 

  175. 			
    176. 

  176. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    177. 

  177. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    178. 

  178. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    179. 

  179. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    180. 

  180. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    181. 

  181. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    182. 

  182. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    183. 

  183. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    184. 

  184. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    185. 

  185. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    186. 

  186. 				
    187. 

  187. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    188. 

  188. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    189. 

  189. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    190. 

  190. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    191. 

  191. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    192. 

  192. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    193. 

  193. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    194. 

  194. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    195. 

  195. 			}else{
    196. 

  196. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    197. 

  197. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    198. 

  198. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    199. 

  199. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    200. 

  200. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    201. 

  201. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    202. 

  202. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    203. 

  203. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    204. 

  204. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    205. 

  205. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    206. 

  206. 				
    207. 

  207. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    208. 

  208. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    209. 

  209. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    210. 

  210. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    211. 

  211. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    212. 

  212. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    213. 

  213. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    214. 

  214. 				$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    215. 

  215. 				
    216. 

  216. 				$j++;
    217. 

  217. 			}
    218. 

  218. 			$isfirst = false;
    219. 

  219. 		}
    220. 

  220. 		
    221. 

  221. 		//showarray($aNewOrder); exit();
    222. 

  222. 		
    223. 

  223. 		// UPDATE SOME OF THE INFORMATION FOR THE CLONED ORDER
    224. 

  224. 		$aNewOrder["orders"]["ordID"] = '';
    225. 

  225. 		$aNewOrder["orders"]["ordSessionID"] = session_id();
    226. 

  226. 		$aNewOrder["orders"]["ordAuthNumber"] = 'CLONED';
    227. 

  227. 		$aNewOrder["orders"]["ordTransID"] = 0;
    228. 

  228. 		$aNewOrder["orders"]["ordShipping"] = 0;
    229. 

  229. 		$aNewOrder["orders"]["ordStateTax"] = 0;
    230. 

  230. 		$aNewOrder["orders"]["ordCountryTax"] = 0;
    231. 

  231. 		$aNewOrder["orders"]["ordHSTTax"] = 0;
    232. 

  232. 		$aNewOrder["orders"]["ordHandling"] = 0;
    233. 

  233. 		$aNewOrder["orders"]["ordTotal"] = 0;
    234. 

  234. 		$aNewOrder["orders"]["ordDate"] = date("Y-m-d H:i:s");
    235. 

  235. 		$aNewOrder["orders"]["ordIP"] = $_SERVER['REMOTE_ADDR'];
    236. 

  236. 		$aNewOrder["orders"]["ordDiscount"] = 0;
    237. 

  237. 		$aNewOrder["orders"]["ordDiscountText"] = '';
    238. 

  238. 		$aNewOrder["orders"]["ordStatus"] = 2;
    239. 

  239. 		$aNewOrder["orders"]["ordStatusDate"] = date("Y-m-d H:i:s");
    240. 

  240. 		$aNewOrder["orders"]["ordStatusInfo"] = '';
    241. 

  241. 		$aNewOrder["orders"]["order_changed"] = 'no';
    242. 

  242. 		
    243. 

  243. 		for($i=0; $i<count($aNewOrder["cart"]); $i++) {
    244. 

  244. 			$aNewOrder["cart"][$i]["cartSessionID"] = session_id();
    245. 

  245. 			$aNewOrder["cart"][$i]["cartDateAdded"] = date("Y-m-d H:i:s");
    246. 

  246. 		}
    247. 

  247. 		
    248. 

  248. 		//showarray($aNewOrder); exit();
    249. 

  249. 		
    250. 

  250. 		// CREATE CLONED ORDER
    251. 

  251. 		$clone_error = false;
    252. 

  252. 		$sql_cr_ord = "INSERT INTO orders ( ordSessionID , ordName , ordAddress , ordAddress2 , ordCity , ordState , 
    253. 

  253. 											ordZip , ordCountry , ordEmail , ordPhone , ordShipName , ordShipAddress , 
    254. 

  254. 											ordShipAddress2 , ordShipCity , ordShipState , ordShipZip , ordShipCountry , 
    255. 

  255. 											ordAuthNumber , ordAffiliate , ordPayProvider , ordTransID , ordShipping , 
    256. 

  256. 											ordStateTax , ordCountryTax , ordHSTTax , ordHandling , ordShipType , ordTotal , 
    257. 

  257. 											ordDate , ordIP , ordDiscount , ordDiscountText , ordExtra1 , ordExtra2 , ordAddInfo , 
    258. 

  258. 											ordCNum , ordComLoc , ordStatus , ordStatusDate , ordStatusInfo , ordPoApo , 
    259. 

  259. 											ordShipPoApo , ordHowFound , ordSupportInfo , order_changed , ordPmtMessage , 
    260. 

  260. 											ordCCType , ord_cert_id , ord_cert_amt , ordExtra3 , ordExtra4 , ordExtra5 , ordEID , 
    261. 

  261. 											ordEOrderID )
    262. 

  262. 						VALUES ( '".$aNewOrder["orders"]["ordSessionID"]."' , 
    263. 

  263. 								 '".$aNewOrder["orders"]["ordName"]."' , '".$aNewOrder["orders"]["ordAddress"]."' , 
    264. 

  264. 								 '".$aNewOrder["orders"]["ordAddress2"]."' , '".$aNewOrder["orders"]["ordCity"]."' , 
    265. 

  265. 								 '".$aNewOrder["orders"]["ordState"]."' , '".$aNewOrder["orders"]["ordZip"]."' , 
    266. 

  266. 								 '".$aNewOrder["orders"]["ordCountry"]."' , '".$aNewOrder["orders"]["ordEmail"]."' , 
    267. 

  267. 								 '".$aNewOrder["orders"]["ordPhone"]."' , '".$aNewOrder["orders"]["ordShipName"]."' , 
    268. 

  268. 								 '".$aNewOrder["orders"]["ordShipAddress"]."' , '".$aNewOrder["orders"]["ordShipAddress2"]."' , 
    269. 

  269. 								 '".$aNewOrder["orders"]["ordShipCity"]."' , '".$aNewOrder["orders"]["ordShipState"]."' , 
    270. 

  270. 								 '".$aNewOrder["orders"]["ordShipZip"]."' , '".$aNewOrder["orders"]["ordShipCountry"]."' , 
    271. 

  271. 								 '".$aNewOrder["orders"]["ordAuthNumber"]."' , '".$aNewOrder["orders"]["ordAffiliate"]."' , 
    272. 

  272. 								 '".$aNewOrder["orders"]["ordPayProvider"]."' , '".$aNewOrder["orders"]["ordTransID"]."' , 
    273. 

  273. 								 '".$aNewOrder["orders"]["ordShipping"]."' , '".$aNewOrder["orders"]["ordStateTax"]."' , 
    274. 

  274. 								 '".$aNewOrder["orders"]["ordCountryTax"]."' , '".$aNewOrder["orders"]["ordHSTTax"]."' , 
    275. 

  275. 								 '".$aNewOrder["orders"]["ordHandling"]."' , '".$aNewOrder["orders"]["ordShipType"]."' , 
    276. 

  276. 								 '".$aNewOrder["orders"]["ordTotal"]."' , '".$aNewOrder["orders"]["ordDate"]."' , 
    277. 

  277. 								 '".$aNewOrder["orders"]["ordIP"]."' , '".$aNewOrder["orders"]["ordDiscount"]."' , 
    278. 

  278. 								 '".$aNewOrder["orders"]["ordDiscountText"]."' , '".$aNewOrder["orders"]["ordExtra1"]."' , 
    279. 

  279. 								 '".$aNewOrder["orders"]["ordExtra2"]."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordAddInfo"])."' , 
    280. 

  280. 								 '".$aNewOrder["orders"]["ordCNum"]."' , '".$aNewOrder["orders"]["ordComLoc"]."' , 
    281. 

  281. 								 '".$aNewOrder["orders"]["ordStatus"]."' , '".$aNewOrder["orders"]["ordStatusDate"]."' , 
    282. 

  282. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordStatusInfo"])."' , '".$aNewOrder["orders"]["ordPoApo"]."' , 
    283. 

  283. 								 '".$aNewOrder["orders"]["ordShipPoApo"]."' , '".$aNewOrder["orders"]["ordHowFound"]."' , 
    284. 

  284. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordSupportInfo"])."' , '".$aNewOrder["orders"]["order_changed"]."' , 
    285. 

  285. 								 '".$aNewOrder["orders"]["ordPmtMessage"]."' , '".$aNewOrder["orders"]["ordCCType"]."' , 
    286. 

  286. 								 '".$aNewOrder["orders"]["ord_cert_id"]."' , '".$aNewOrder["orders"]["ord_cert_amt"]."' , 
    287. 

  287. 								 '".$aNewOrder["orders"]["ordExtra3"]."' , '".$aNewOrder["orders"]["ordExtra4"]."' , 
    288. 

  288. 								 '".$aNewOrder["orders"]["ordExtra5"]."' , '".$aNewOrder["orders"]["ordEID"]."' , 
    289. 

  289. 								 '".$aNewOrder["orders"]["ordEOrderID"]."' )";
    290. 

  290. 		//echo $sql_cr_ord; exit();
    291. 

  291. 		$res_cr_ord = mysql_query($sql_cr_ord);
    292. 

  292. 		if(!$res_cr_ord) {
    293. 

  293. 			print(mysql_error());
    294. 

  294. 			$clone_error = true;
    295. 

  295. 		}
    296. 

  296. 		$ordID = mysql_insert_id();
    297. 

  297. 		$aNewOrder["orders"]["ordID"] = $ordID;
    298. 

  298. 		
    299. 

  299. 		if(!$clone_error) {
    300. 

  300. 			for($i=0; $i<count($aNewOrder["cart"]); $i++) {	
    301. 

  301. 				$aNewOrder["cart"][$i]["cartOrderID"] = $ordID;
    302. 

  302. 				$sql_cr_cart = "INSERT INTO cart ( cartSessionID , cartProdID , cartProdName , cartProdPrice , cartDateAdded , 
    303. 

  303. 												   cartQuantity , cartOrderID , cartCompleted )
    304. 

  304. 								VALUES ( '".session_id()."' , '".$aNewOrder["cart"][$i]["cartProdID"]."' , 
    305. 

  305. 										 '".$aNewOrder["cart"][$i]["cartProdName"]."' , '".$aNewOrder["cart"][$i]["cartProdPrice"]."' , 
    306. 

  306. 										 '".date("Y-m-d H:i:s")."' , '".$aNewOrder["cart"][$i]["cartQuantity"]."' , 
    307. 

  307. 										 '".$aNewOrder["cart"][$i]["cartOrderID"]."' , 1 )";
    308. 

  308. 				//echo $sql_cr_cart; exit();
    309. 

  309. 				$res_cr_cart = mysql_query($sql_cr_cart) or print(mysql_error());
    310. 

  310. 				$cart_id = mysql_insert_id();
    311. 

  311. 				$aNewOrder["cart"][$i]["cartID"] = $cart_id;
    312. 

  312. 				
    313. 

  313. 				for($j=0; $j<count($aNewOrder["cart"][$i]["cartoptions"]); $j++) {
    314. 

  314. 					$sql_cr_cartoptions = "INSERT INTO cartoptions ( coCartID , coOptID , coOptGroup , coCartOption , coPriceDiff , 
    315. 

  315. 																	 coWeightDiff , coExtendShipping )
    316. 

  316. 										   VALUES ( ".$aNewOrder["cart"][$i]["cartID"]." , 
    317. 

  317. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"]." , 
    318. 

  318. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"]."' , 
    319. 

  319. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"]."' , 
    320. 

  320. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"]." , 
    321. 

  321. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"]." , 
    322. 

  322. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"]."' )";
    323. 

  323. 					//echo $sql_cr_cartoptions; exit();
    324. 

  324. 					$res_cr_cartoptions = mysql_query($sql_cr_cartoptions) or print(mysql_error());
    325. 

  325. 				}
    326. 

  326. 			}
    327. 

  327. 			
    328. 

  328. 			// UPDATE INVENTORY
    329. 

  329. 			$sSQL="SELECT cartID,cartProdID,cartQuantity,pSell FROM cart INNER JOIN products ON cart.cartProdID=products.pID WHERE cartOrderID='" . $ordID . "'";
    330. 

  330. 			$result1 = mysql_query($sSQL) or print(mysql_error());
    331. 

  331. 			while($rs1 = mysql_fetch_array($result1)){
    332. 

  332. 				if(($rs1["pSell"] & 2) == 2){
    333. 

  333. 					// Determine extended shipping
    334. 

  334. 					$sSQL2 = "SELECT coID,optStock,cartQuantity,coOptID,optExtend_shipping,optMin FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2";
    335. 

  335. 					// ADDED by Chad - Fix to allow quantity change for custom screenz
    336. 

  336. 					if(eregi("^[a-z]{1,3}-Custom$",$pID)) {
    337. 

  337. 						$sSQL2 .= " OR optType=3";
    338. 

  338. 					}
    339. 

  339. 					// ADD ENDED
    340. 

  340. 					$sSQL2 .= ") AND cartID='" . $rs1['cartID'] . "'";
    341. 

  341. 					$result2 = mysql_query($sSQL2) or print(mysql_error());
    342. 

  342. 					if(mysql_num_rows($result2)>0){
    343. 

  343. 						while($rs2 = mysql_fetch_assoc($result2)){
    344. 

  344. 							$pInStock = (int)$rs2["optStock"]+1000;
    345. 

  345. 							$actualpInStock = (int)$rs2["optStock"];
    346. 

  346. 							$extend_shipping = $rs2["optExtend_shipping"];//extends shipping time, displayed in the cart
    347. 

  347. 							$min = $rs2["optMin"];//sets how many in stock above zero the extend_shipping is displayed in the cart 
    348. 

  348. 							$coID = $rs2["coID"];
    349. 

  349. 							$totQuant = 0;
    350. 

  350. 							$cartQuantity = (int)$rs2["cartQuantity"];
    351. 

  351. 							$sSQL3 = "SELECT SUM(cartQuantity) AS cartQuant FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID WHERE cartCompleted=0 AND cartCustID=0 AND coOptID=" . $rs2["coOptID"];
    352. 

  352. 							$result3 = mysql_query($sSQL3) or print(mysql_error());
    353. 

  353. 							if($rs3 = mysql_fetch_assoc($result3))
    354. 

  354. 								if(! is_null($rs3["cartQuant"])) $totQuant = (int)$rs3["cartQuant"];
    355. 

  355. 							mysql_free_result($result3);
    356. 

  356. 							$extend='';
    357. 

  357. 							//echo '<div style"position:absolute; z-index:100;>actual='.$actualpInStock.' total qty='.$totQuant. ' cart qty='.$cartQuantity.' min='. $min. ' new qty='.abs((int)$objValue).'</div>';
    358. 

  358. 							if(($actualpInStock - $totQuant + $cartQuantity - $min) < 0) {
    359. 

  359. 								$extend = $extend_shipping;
    360. 

  360. 							}
    361. 

  361. 							$sql_co="UPDATE cartoptions SET coExtendShipping='$extend' WHERE coID=".$coID;
    362. 

  362. 								mysql_query($sql_co);
    363. 

  363. 						}
    364. 

  364. 					}
    365. 

  365. 					// End of Determine extended shipping
    366. 

  366. 					
    367. 

  367. 					$sSQL = "SELECT coOptID FROM cartoptions INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2) AND coCartID=" . $rs1["cartID"];
    368. 

  368. 					$result2 = mysql_query($sSQL) or print(mysql_error());
    369. 

  369. 					while($rs2 = mysql_fetch_array($result2)){
    370. 

  370. 						$sql = "SELECT * FROM options WHERE optID = " . $rs2["coOptID"];
    371. 

  371. 						$res = mysql_query($sql);
    372. 

  372. 						$options = mysql_fetch_assoc($res);
    373. 

  373. 						
    374. 

  374. 						$sSQL = "UPDATE options SET optStock=optStock-" . $rs1["cartQuantity"] . " WHERE optID=" . $rs2["coOptID"];
    375. 

  375. 						mysql_query($sSQL) or print(mysql_error());
    376. 

  376. 						
    377. 

  377. 						$sql = "SELECT p.*
    378. 

  378. 								FROM products p 
    379. 

  379. 									JOIN prodoptions po ON p.pID = po.poProdID
    380. 

  380. 									JOIN optiongroup og ON po.poOptionGroup = og.optGrpID
    381. 

  381. 									JOIN options o ON og.optGrpID = o.optGroup
    382. 

  382. 								WHERE o.optID = '".$rs2["coOptID"]."'";
    383. 

  383. 						$res = mysql_query($sql);
    384. 

  384. 						$prod = mysql_fetch_assoc($res);
    385. 

  385. 						
    386. 

  386. 						$prodstyle = $prod["pID"] . "-" . $options['optStyleID'];
    387. 

  387. 						$newvalue = $options['optStock'] - $rs1["cartQuantity"];
    388. 

  388. 						
    389. 

  389. 						// RECORD INVENTORY CHANGE
    390. 

  390. 						$sql3 = "INSERT INTO inv_adjustments (iaOptID, iaAmt, iaDate, iaProdStyle, iaOldValue, iaNewValue, iareason, iaEmpID)
    391. 

  391. 								 VALUES (".$rs2["coOptID"].", -".$rs1["cartQuantity"].", '".date('Y-m-d H:i:s')."', '$prodstyle', ".$options['optStock'].", $newvalue, 8, '".$_SESSION['employee']['id']."')";
    392. 

  392. 						$res3 = mysql_query($sql3);
    393. 

  393. 					}
    394. 

  394. 					mysql_free_result($result2);
    395. 

  395. 				}else{
    396. 

  396. 					$sSQL = "UPDATE products SET pInStock=pInStock-" . $rs1["cartQuantity"] . " WHERE pID='" . $rs1["cartProdID"] . "'";
    397. 

  397. 					mysql_query($sSQL) or print(mysql_error());
    398. 

  398. 				}
    399. 

  399. 			}
    400. 

  400. 			mysql_free_result($result1);
    401. 

  401. 					
    402. 

  402. 			// INSERT LOCATION
    403. 

  403. 			setNewLocation(2,$ordID);
    404. 

  404. 		}
    405. 

  405. 		
    406. 

  406. 		if($clone_error) {
    407. 

  407. 			$pg_msg = "There was a problem cloning your order.";
    408. 

  408. 		}else{
    409. 

  409. 			$pg_msg = "Your order has been cloned successfully.";
    410. 

  410. ?>
    411. 

  411. <script language="JavaScript" type="text/javascript">
    412. 

  412. <!--
    413. 

  413. //setTimeout("history.go(-2);",1100);
    414. 

  414. setTimeout("window.location='/admin/orders.php?id=<?=$ordID?>&doedit=true'",4000);
    415. 

  415. // -->
    416. 

  416. </script>
    417. 

  417. <?php
    418. 

  418. 		}
    419. 

  419. 		
    420. 

  420. 		if(!$clone_error) {
    421. 

  421. 			$auto_link = "/admin/orders.php?id=$ordID&doedit=true";
    422. 

  422. 		}else{
    423. 

  423. 			$auto_link = "/admin/orders.php";
    424. 

  424. 		}
    425. 

  425. ?>
    426. 

  426. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    427. 

  427.         <tr>
    428. 

  428.           <td width="100%">
    429. 

  429.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    430. 

  430. 			  <tr> 
    431. 

  431.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    432. 

  432.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    433. 

  433. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    434. 

  434. 			  </tr>
    435. 

  435. 			</table>
    436. 

  436. 		  </td>
    437. 

  437. 		</tr>
    438. 

  438. 	  </table>
    439. 

  439. <?php
    440. 

  440. 	}else{
    441. 

  441. 		$OWSP = "";
    442. 

  442. 		$sSQL = "SELECT ordSessionID FROM orders WHERE ordID='" . $_POST["orderid"] . "'";
    443. 

  443. 		$result = mysql_query($sSQL) or print(mysql_error());
    444. 

  444. 		$rs = mysql_fetch_array($result);
    445. 

  445. 		$thesessionid = $rs["ordSessionID"];
    446. 

  446. 		mysql_free_result($result);
    447. 

  447. 		$sSQL = "UPDATE orders SET ";
    448. 

  448. 		$sSQL .= "ordName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["name"]))) . "',";
    449. 

  449. 		$sSQL .= "ordAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address"]))) . "',";
    450. 

  450. 		if(@$useaddressline2==TRUE) $sSQL .= "ordAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address2"]))) . "',";
    451. 

  451. 		$sSQL .= "ordCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["city"]))) . "',";
    452. 

  452. 		$sSQL .= "ordPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["APO"]))) . "',";
    453. 

  453. 		$sSQL .= "ordState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["state"]))) . "',";
    454. 

  454. 		$sSQL .= "ordZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["zip"]))) . "',";
    455. 

  455. 		$sSQL .= "ordCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["country"]))) . "',";
    456. 

  456. 		$sSQL .= "ordEmail='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["email"]))) . "',";
    457. 

  457. 		$sSQL .= "ordPhone='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["phone"]))) . "',";
    458. 

  458. 		$sSQL .= "ordShipName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["sname"]))) . "',";
    459. 

  459. 		$sSQL .= "ordShipAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress"]))) . "',";
    460. 

  460. 		if(@$useaddressline2==TRUE) $sSQL .= "ordShipAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress2"]))) . "',";
    461. 

  461. 		$sSQL .= "ordShipCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["scity"]))) . "',";
    462. 

  462. 		$sSQL .= "ordShipPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ShipAPO"]))) . "',";
    463. 

  463. 		$sSQL .= "ordShipState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["sstate"]))) . "',";
    464. 

  464. 		$sSQL .= "ordShipZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["szip"]))) . "',";
    465. 

  465. 		$sSQL .= "ordShipCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["scountry"]))) . "',";
    466. 

  466. 		$sSQL .= "ordShipType='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["shipmethod"]))) . "',";
    467. 

  467. 		$sSQL .= "ordIP='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ipaddress"]))) . "',";
    468. 

  468. 		$ordComLoc = 0;
    469. 

  469. 		if(trim(@$_POST["commercialloc"])=="Y") $ordComLoc = 1;
    470. 

  470. 		if(trim(@$_POST["wantinsurance"])=="Y") $ordComLoc += 2;
    471. 

  471. 		$sSQL .= "ordComLoc=" . $ordComLoc . ",";
    472. 

  472. 		$sSQL .= "ordAffiliate='" . trim(@$_POST["PARTNER"]) . "',";
    473. 

  473. 		$sSQL .= "ordAddInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordAddInfo"]))) . "',";
    474. 

  474. 		$sSQL .= "ordStatusInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordStatusInfo"]))) . "',";
    475. 

  475. 		$sSQL .= "ordSupportInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordSupportInfo"]))) . "',";
    476. 

  476. 		$sSQL .= "order_changed='yes',";
    477. 

  477. 		$sSQL .= "ordDiscountText='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["discounttext"]))) . "',";
    478. 

  478. 		$sSQL .= "ordExtra1='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra1"]))) . "',";
    479. 

  479. 		$sSQL .= "ordExtra2='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra2"]))) . "',";
    480. 

  480. 		$sSQL .= "ordShipping='" . mysql_real_escape_string(trim(@$_POST["ordShipping"])) . "',";
    481. 

  481. 		$sSQL .= "ordStateTax='" . mysql_real_escape_string(trim(@$_POST["ordStateTax"])) . "',";
    482. 

  482. 		$sSQL .= "ordCountryTax='" . mysql_real_escape_string(trim(@$_POST["ordCountryTax"])) . "',";
    483. 

  483. 		if(@$canadataxsystem==TRUE) $sSQL .= "ordHSTTax='" . mysql_real_escape_string(trim(@$_POST["ordHSTTax"])) . "',";
    484. 

  484. 		$sSQL .= "ordDiscount='" . mysql_real_escape_string(trim(@$_POST["ordDiscount"])) . "',";
    485. 

  485. 		$sSQL .= "ordHandling='" . mysql_real_escape_string(trim(@$_POST["ordHandling"])) . "',";
    486. 

  486. 		$sSQL .= "ordAuthNumber='" . mysql_real_escape_string(trim(@$_POST["ordAuthNumber"])) . "',";
    487. 

  487. 		$sSQL .= "ordTransID='" . mysql_real_escape_string(trim(@$_POST["ordTransID"])) . "',";
    488. 

  488. 		$sSQL .= "ordTotal='" . mysql_real_escape_string(trim(@$_POST["ordtotal"])) . "',";
    489. 

  489. 		$sSQL .= "ord_cert_amt='" . mysql_real_escape_string(trim(@$_POST["ord_cert_amt"])) . "'";
    490. 

  490. 		$sSQL .= " WHERE ordID='" . $_POST["orderid"] . "'";
    491. 

  491. 		mysql_query($sSQL) or print(mysql_error());
    492. 

  492. 	
    493. 

  493. 		foreach($_POST as $objItem => $objValue){
    494. 

  494. 			//print $objItem . " : " . $objValue . "<br>";
    495. 

  495. 			if(substr($objItem,0,6)=="prodid"){
    496. 

  496. 				$idno = (int)substr($objItem, 6);
    497. 

  497. 				$cartid = trim(@$_POST["cartid" . $idno]);
    498. 

  498. 				$prodid = trim(@$_POST["prodid" . $idno]);
    499. 

  499. 				$quant = trim(@$_POST["quant" . $idno]);
    500. 

  500. 				$theprice = trim(@$_POST["price" . $idno]);
    501. 

  501. 				$prodname = trim(@$_POST["prodname" . $idno]);
    502. 

  502. 				$delitem = trim(@$_POST["del_" . $idno]);
    503. 

  503. 				if($delitem=="yes"){
    504. 

  504. 					mysql_query("DELETE FROM cart WHERE cartID=" . $cartid) or print(mysql_error());
    505. 

  505. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    506. 

  506. 					$cartid = "";
    507. 

  507. 				}elseif($cartid != ""){
    508. 

  508. 					$sSQL = "UPDATE cart SET cartProdID='" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',cartProdPrice=" . $theprice . ",cartProdName='" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',cartQuantity=" . $quant . " WHERE cartID=" . $cartid;
    509. 

  509. 					mysql_query($sSQL) or print(mysql_error());
    510. 

  510. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    511. 

  511. 				}else{
    512. 

  512. 					$sSQL = "INSERT INTO cart (cartSessionID,cartProdID,cartQuantity,cartCompleted,cartProdName,cartProdPrice,cartOrderID,cartDateAdded) VALUES (";
    513. 

  513. 					$sSQL .= "'" . $thesessionid . "',";
    514. 

  514. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',";
    515. 

  515. 					$sSQL .= $quant . ",";
    516. 

  516. 					$sSQL .= "1,";
    517. 

  517. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',";
    518. 

  518. 					$sSQL .= "'" . $theprice . "',";
    519. 

  519. 					$sSQL .= @$_POST["orderid"] . ",";
    520. 

  520. 					$sSQL .= "'" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "')";
    521. 

  521. 					mysql_query($sSQL) or print(mysql_error());
    522. 

  522. 					$cartid = mysql_insert_id();
    523. 

  523. 				}
    524. 

  524. 				if($cartid != ""){
    525. 

  525. 					$optprefix = "optn" . $idno . '_';
    526. 

  526. 					$prefixlen = strlen($optprefix);
    527. 

  527. 					foreach($_POST as $kk => $kkval){
    528. 

  528. 						if(substr($kk,0,$prefixlen)==$optprefix && trim($kkval) != ''){
    529. 

  529. 							$optidarr = split('\|', $kkval);
    530. 

  530. 							$optid = $optidarr[0];
    531. 

  531. 							if(@$_POST["v" . $kk] == ""){
    532. 

  532. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)."," . $OWSP . "optPriceDiff,optWeightDiff,optType,optFlags FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    533. 

  533. 								$result = mysql_query($sSQL) or print(mysql_error());
    534. 

  534. 								if($rs = mysql_fetch_array($result)){
    535. 

  535. 									if(abs($rs["optType"]) != 3){
    536. 

  536. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string($rs[getlangid("optName",32)]) . "',";
    537. 

  537. 										$sSQL .= $optidarr[1] . ",0)";
    538. 

  538. 									}else
    539. 

  539. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','',0,0)";
    540. 

  540. 									mysql_query($sSQL) or print(mysql_error());
    541. 

  541. 								}
    542. 

  542. 								mysql_free_result($result);
    543. 

  543. 							}else{
    544. 

  544. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)." FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    545. 

  545. 								$result = mysql_query($sSQL) or print(mysql_error());
    546. 

  546. 								$rs = mysql_fetch_array($result);
    547. 

  547. 								$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string(unstripslashes(trim(@$_POST["v" . $kk]))) . "',0,0)";
    548. 

  548. 								mysql_query($sSQL) or print(mysql_error());
    549. 

  549. 								mysql_free_result($result);
    550. 

  550. 							}
    551. 

  551. 						}
    552. 

  552. 					}
    553. 

  553. 				}
    554. 

  554. 			}
    555. 

  555. 		}
    556. 

  556. ?>
    557. 

  557. <script language="JavaScript" type="text/javascript">
    558. 

  558. <!--
    559. 

  559. setTimeout("history.go(-2);",1100);
    560. 

  560. // -->
    561. 

  561. </script>
    562. 

  562. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    563. 

  563.         <tr>
    564. 

  564.           <td width="100%">
    565. 

  565.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    566. 

  566. 			  <tr> 
    567. 

  567.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    568. 

  568.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    569. 

  569. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    570. 

  570. 			  </tr>
    571. 

  571. 			</table>
    572. 

  572. 		  </td>
    573. 

  573. 		</tr>
    574. 

  574. 	  </table>
    575. 

  575. <?php
    576. 

  576. 	}
    577. 

  577. ?>
    578. 

  578. 			<tr>
    579. 

  579. 			  <td align="center" colspan="6">&nbsp;<br /></td>
    580. 

  580. 			</tr>
    581. 

  581. 		  </table>
    582. 

  582. 		  </td>
    583. 

  583. 		</tr>
    584. 

  584. <?php	if($isprinter && @$invoicefooter != ""){ ?>
    585. 

  585. 		<tr> 
    586. 

  586.           <td width="100%"><?php print $invoicefooter?></td>
    587. 

  587. 		</tr>
    588. 

  588. <?php	}elseif($doedit){ ?>
    589. 

  589. 		<tr> 
    590. 

  590.           <td align="center" width="100%">&nbsp;<br />&nbsp;<br />
    591. 

  591.           &nbsp;</td>
    592. 

  592. 		</tr>
    593. 

  593. <?php	} ?>
    594. 

  594. 	  </table>
    595. 

  595. <?php
    596. 

  596. 	if($doedit) print '</form>';
    597. 

  597. 	if($doedit){
    598. 

  598. 	// ADDED by Chad Jun-06-06
    599. 

  599. 	// PRICE ADJUSTMENTS
    600. 

  600. ?>
    601. 

  601. 	
    602. 

  602. 

  603. 

  604. 

  605. 	</table>
    606. 

  606. <?php
    607. 

  607. if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==9 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    608. 

  608. ?>
    609. 

  609. <div id="div_trans" style="display: none">
    610. 

  610. 	<form id="aim_frm" name="aim_frm" method="post" action="/admin/ordersprocess.php" onsubmit="return checkAIM(this);">
    611. 

  611. 	<table cellpadding="3" cellspacing="0" border="1" style="margin: 5px auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    612. 

  612. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    613. 

  613. 			<td colspan="4" style="text-align: center; font-weight: bold; font-size: 14px">Credit or Void a Transaction</td>
    614. 

  614. 		</tr>
    615. 

  615. 		<tr>
    616. 

  616. 			<th style="text-align: center">Type</th>
    617. 

  617. 			<th style="text-align: center">TXN</th>
    618. 

  618. 			<th style="text-align: center">Amount</th>
    619. 

  619. 			<th>Note</th>
    620. 

  620. 		</tr>
    621. 

  621. 		<tr>
    622. 

  622. 			<td valign="top">
    623. 

  623. 				<select name="aim_type" id="aim_type">
    624. 

  624. 					<option value="" selected="selected">Choose...</option>
    625. 

  625. 					<option value="CREDIT">Credit</option>
    626. 

  626. 					<option value="VOID">Void</option>
    627. 

  627. 				</select>
    628. 

  628. 			</td>
    629. 

  629. 			<td valign="top"><input type="text" id="aim_txn" name="aim_txn" value="" autocomplete="off" /></td>
    630. 

  630. 			<td valign="top"><input type="text" id="aim_amt" name="aim_amt" value="" autocomplete="off" /></td>
    631. 

  631. 			<td valign="top"><textarea id="aim_note" name="aim_note"></textarea></td>
    632. 

  632. 		</tr>
    633. 

  633. 		<tr>
    634. 

  634. 			<td colspan="4" style="text-align: right"><input type="submit" id="aim_submit" name="aim_submit" value="Submit" /></td>
    635. 

  635. 		</tr>
    636. 

  636. 	</table>
    637. 

  637. 	<input type="hidden" id="aim_inv" name="aim_inv" value="<?=$_GET["id"]?>" />
    638. 

  638. <?php
    639. 

  639. $tmp = explode(" ",$alldata["ordName"]);
    640. 

  640. ?>
    641. 

  641. 	<input type="hidden" id="aim_fname" name="aim_fname" value="<?=$tmp[0]?>" />
    642. 

  642. 	<input type="hidden" id="aim_lname" name="aim_lname" value="<?=(!empty($tmp[1]))?$tmp[1]:''?>" />
    643. 

  643. 	<input type="hidden" id="aim_doedit" name="aim_doedit" value="<?=$_GET['doedit']?>" />
    644. 

  644. 	</form>
    645. 

  645. </div>
    646. 

  646. 

  647. <div id="div_charge" style="display: none">
    648. 

  648. 	<?php
    649. 

  649. 		if(!empty($alldata["ordEID"])){
    650. 

  650. 			$sql_eid="SELECT * FROM customers WHERE custID=".$alldata["ordEID"];
    651. 

  651. 			$result_eid=mysql_query($sql_eid);
    652. 

  652. 			if(mysql_num_rows($result_eid)>0){
    653. 

  653. 				$row_eid=mysql_fetch_assoc($result_eid);
    654. 

  654. 			}
    655. 

  655. 		}
    656. 

  656. 	?>
    657. 

  657. 	<form id="frmCharge" name="frmCharge" method="post" action="/admin/ordersprocess.php">
    658. 

  658. 	<table cellpadding="3" cellspacing="0" border="1" style="margin: 5px auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    659. 

  659. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    660. 

  660. 			<td colspan="2" style="font-size: 14px; font-weight: bold; text-align: center">Authorize &amp; Capture</td>
    661. 

  661. 		</tr>
    662. 

  662. 		<tr>
    663. 

  663. 			<td>First Name:</td>
    664. 

  664. 			<td><input type="text" id="am_fname" name="am_fname" value="<?=$row_eid['Name']?>" /></td>
    665. 

  665. 		</tr>
    666. 

  666. 		<tr>
    667. 

  667. 			<td>Last Name:</td>
    668. 

  668. 			<td><input type="text" id="am_lname" name="am_lname" value="" /></td>
    669. 

  669. 		</tr>
    670. 

  670. 		<tr>
    671. 

  671. 			<td>Address:</td>
    672. 

  672. 			<td><input type="text" id="am_address" name="am_address" value="<?=$row_eid['Address']?>" /></td>
    673. 

  673. 		</tr>
    674. 

  674. 		<tr>
    675. 

  675. 			<td>Address 2:</td>
    676. 

  676. 			<td><input type="text" id="am_address2" name="am_address2" value="<?=$row_eid['Address2']?>" /></td>
    677. 

  677. 		</tr>
    678. 

  678. 		<tr>
    679. 

  679. 			<td>City:</td>
    680. 

  680. 			<td><input type="text" id="am_city" name="am_city" value="<?=$row_eid['City']?>" /></td>
    681. 

  681. 		</tr>
    682. 

  682. 		<tr>
    683. 

  683. 			<td>State:</td>
    684. 

  684. 			<td><input type="text" id="am_state" name="am_state" value="<? if(!empty($row_eid['State2'])) echo $row_eid['State2']; else echo $row_eid['State']; ?>" /></td>
    685. 

  685. 		</tr>
    686. 

  686. 		<tr>
    687. 

  687. 			<td>Zip:</td>
    688. 

  688. 			<td><input type="text" id="am_zip" name="am_zip" value="<?=$row_eid['Zip']?>" /></td>
    689. 

  689. 		</tr>
    690. 

  690. 		<tr>
    691. 

  691. 			<td>Amount:</td>
    692. 

  692. 			<td><input type="text" id="am_amt" name="am_amt" value="" autocomplete="off" /></td>
    693. 

  693. 		</tr>
    694. 

  694. 		<tr>
    695. 

  695. 			<td>CC#:</td>
    696. 

  696. 			<td><input type="text" id="am_cc_num" name="am_cc_num" value="<?=Decrypt($row_eid['ccNum'], $cart_misc)?>" autocomplete="off" /></td>
    697. 

  697. 		</tr>
    698. 

  698. 		<tr>
    699. 

  699. 			<td>Exp. Date:</td>
    700. 

  700. 			<td> 
    701. 

  701. 				<select id="am_exp_mon" name="am_exp_mon">
    702. 

  702. <?
    703. 

  703. 		$ccexp=explode('/',$row_eid['ccExp']);
    704. 

  704. 		for($i=1; $i<=12; $i++)
    705. 

  705. 		{
    706. 

  706. 			if($i<10)
    707. 

  707. 				$i = '0'.$i;
    708. 

  708. 			if($i == $ccexp[0])
    709. 

  709. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    710. 

  710. 			else if(date('n') == $i )
    711. 

  711. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    712. 

  712. 			else
    713. 

  713. 				echo '<option value="'.$i.'">'.$i.'</option>';
    714. 

  714. 		}
    715. 

  715. ?>
    716. 

  716. 				</select>&nbsp;/&nbsp;
    717. 

  717. 				<select id="am_exp_year" name="am_exp_year">
    718. 

  718. <?
    719. 

  719. 		$cur_year = date('Y');
    720. 

  720. 		for($i=($cur_year); $i<=$cur_year+10; $i++)
    721. 

  721. 		{
    722. 

  722. 			if($i == $ccexp[1])
    723. 

  723. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    724. 

  724. 			elseif(date('Y') == $i || $i==$ccexp[1])
    725. 

  725. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    726. 

  726. 			else
    727. 

  727. 				echo '<option value="'.$i.'">'.$i.'</option>';
    728. 

  728. 		}
    729. 

  729. ?>				
    730. 

  730. 				</select>
    731. 

  731. 			</td>
    732. 

  732. 		</tr>
    733. 

  733. 		<tr>
    734. 

  734. 			<td>CCV:</td>
    735. 

  735. 			<td><input type="text" id="am_ccv" name="am_ccv" value="<?=$row_eid['ccCCV']?>" autocomplete="off" /></td>
    736. 

  736. 		</tr>
    737. 

  737. 		<tr>
    738. 

  738. 			<td colspan="2" style="text-align: center"><input type="submit" id="am_submit" name="am_submit" value="Submit" /></td>
    739. 

  739. 		</tr>
    740. 

  740. 	</table>
    741. 

  741. 	<input type="hidden" id="am_inv" name="am_inv" value="<?=$_GET["id"]?>" />
    742. 

  742. 	<input type="hidden" id="am_type" name="am_type" value="AUTH_CAPTURE" />
    743. 

  743. 	<input type="hidden" id="am_doedit" name="am_doedit" value="<?=$_GET['doedit']?>" />
    744. 

  744. 	</form>
    745. 

  745. </div>
    746. 

  746. <?php
    747. 

  747. }
    748. 

  748. } // End of User permission check
    749. 

  749. 

  750. 	// ADDED by Chad Apr-04-06
    751. 

  751. 	// LOCATION HISTORY
    752. 

  752. 	$qry = "SELECT * FROM location WHERE ordID = '".$_GET["id"]."'";
    753. 

  753. 	$res = mysql_query($qry) or print(mysql_error());
    754. 

  754. 	$i=0;
    755. 

  755. 	while($row = mysql_fetch_assoc($res)) {
    756. 

  756. 		$locations[$i++]=$row;
    757. 

  757. 	}
    758. 

  758. ?>
    759. 

  759. <?php
    760. 

  760. 	include(APPPATH.'views/partials/admin/dbconnection.php');
    761. 

  761. 	// ADD ENDED
    762. 

  762. 	
    763. 

  763. 	// ADDED by Chad Apr-04-06
    764. 

  764. 	// FEDEX TRACKING
    765. 

  765. 	$qry = "SELECT * FROM fedex WHERE ordID = '".$_GET["id"]."'";
    766. 

  766. 	$res = mysql_query($qry);
    767. 

  767. 	if(mysql_num_rows($res) > 0) {
    768. 

  768. 		$row = mysql_fetch_assoc($res);
    769. 

  769. 		$trackNum = $row['trackNum'];
    770. 

  770. 		if(!empty($trackNum)) {
    771. 

  771. 			include(DOCROOT.'includes/fedex/fedexdc.php');
    772. 

  772. 			$fed = new FedExDC();
    773. 

  773. 			$track_Ret = $fed->track(
    774. 

  774. 				array(
    775. 

  775. 					'1537' => $trackNum, //Tracking Number
    776. 

  776. 					'1534' =>'Y' // detail_scan_indicator (Show me all the tracking data)
    777. 

  777. 				)
    778. 

  778. 			);
    779. 

  779. 			
    780. 

  780. 			$ctr = 0;
    781. 

  781. 			$hasChanged = false;
    782. 

  782. 			$isDelivered = false;
    783. 

  783. 			for($i=1; $i<=$track_Ret[1584]; $i++) {
    784. 

  784. 				// See Customer Service Page for displaying results
    785. 

  785. 	?>
    786. 

  786. <div style="margin: 10px auto; border: 2px solid #2C578A; width: 550px">
    787. 

  787. 		<table align="center" width="550" border="0" cellpadding="3" cellspacing="0" style="font-size: 10px; font-family: Verdana, Arial, Helvetica, sans-serif">
    788. 

  788. 			<tr>
    789. 

  789. 				<th colspan="2" style="font-size: 18px; background-color: #2C578A; color: #FFF; font-weight: bold; text-align: left">Fed<span style="margin-left: -3px; color: #FF6600">Ex</span></th>
    790. 

  790. 				<th colspan="3" style="font-size: 14px; text-align: right; background-color: #2C578A; color: #FFF; font-weight: bold">Tracking# <?=$trackNum?></th>
    791. 

  791. 			</tr>
    792. 

  792. 	<?php
    793. 

  793. 			if(!empty($track_Ret['1339-'.$i]))
    794. 

  794. 			{
    795. 

  795. 				$tmp_date = $track_Ret['1339-'.$i];
    796. 

  796. 				$est_del = substr($tmp_date,0,4).'-'.substr($tmp_date,4,2).'-'.substr($tmp_date,6,2);
    797. 

  797. 	?>
    798. 

  798. 			<tr>
    799. 

  799. 				<td colspan="5" style="background-color: #2C578A; height: 15px">&nbsp;</td>
    800. 

  800. 			</tr>
    801. 

  801. 			<tr>
    802. 

  802. 				<td colspan="5" style="background-color: #DFE7FF"><strong>Estimated Delivery Date:</strong> <?=date('M j, Y',strtotime($est_del))?></td>
    803. 

  803. 			</tr>
    804. 

  804. 	<?php
    805. 

  805. 			}
    806. 

  806. 	?>
    807. 

  807. 			<tr>
    808. 

  808. 				<th align="left" width="150" colspan="2" style="background-color: #2C578A; color: #FFF; font-weight: bold">Date/Time</th>
    809. 

  809. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Activity</th>
    810. 

  810. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Location</th>
    811. 

  811. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Details</th>
    812. 

  812. 			</tr>
    813. 

  813. 	<?php
    814. 

  814. 				for($j=1; $j<=$track_Ret['1715-'.$i]; $j++)
    815. 

  815. 				{
    816. 

  816. 					$date = $track_Ret['1162-'.$i.'-'.$j];
    817. 

  817. 					$year = substr($date,0,4);
    818. 

  818. 					$mon = substr($date,4,2);
    819. 

  819. 					$day = substr($date,6,2);
    820. 

  820. 					$hrs = substr($track_Ret['1163-'.$i.'-'.$j],0,2);
    821. 

  821. 					$min = substr($track_Ret['1163-'.$i.'-'.$j],2,2);
    822. 

  822. 					$sec = substr($track_Ret['1163-'.$i.'-'.$j],4,2);
    823. 

  823. 					
    824. 

  824. 					$date = $year.'-'.$mon.'-'.$day.' '.$hrs.':'.$min.':'.$sec;
    825. 

  825. 					$unixDate = strtotime($date);
    826. 

  826. 					
    827. 

  827. 					if(empty($track_Ret['1161-'.$i.'-'.$j]))
    828. 

  828. 					{
    829. 

  829. 						$state = $track_Ret['1164-'.$i.'-'.$j];
    830. 

  830. 					}
    831. 

  831. 					else
    832. 

  832. 					{
    833. 

  833. 						$state = $track_Ret['1161-'.$i.'-'.$j];
    834. 

  834. 					}
    835. 

  835. 										
    836. 

  836. 					if(date('Ymd',$unixDate) != date('Ymd',$last_date))
    837. 

  837. 					{
    838. 

  838. 						$ctr++;
    839. 

  839. 						$hasChanged = true;
    840. 

  840. 					}
    841. 

  841. 					
    842. 

  842. 					if($track_Ret['1159-'.$i.'-'.$j] == 'Delivered' && empty($track_Ret['1711-'.$i.'-'.$j]))
    843. 

  843. 					{
    844. 

  844. 						$isDelivered = true;
    845. 

  845. 					}
    846. 

  846. 	?>
    847. 

  847. 					<tr style="background-color: #<?=($ctr%2==0)?'FFF':'DFE7FF'?>">
    848. 

  848. 			<?php
    849. 

  849. 						if($hasChanged)
    850. 

  850. 						{
    851. 

  851. 			?>
    852. 

  852. 						<td style="text-align: left" valign="top">
    853. 

  853. 							<span style="font-weight: bold"><?=date('M j, Y',$unixDate)?></span>
    854. 

  854. 						</td>
    855. 

  855. 						<td valign="top" style="text-align: right; border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=date('g:i A',$unixDate)?></td>
    856. 

  856. 			<?php
    857. 

  857. 							$hasChanged = false;
    858. 

  858. 						}
    859. 

  859. 						else
    860. 

  860. 						{
    861. 

  861. 			?>
    862. 

  862. 						<td valign="top" colspan="2" style="text-align: right; border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=date('g:i A',$unixDate)?></td>
    863. 

  863. 			<?php
    864. 

  864. 						}
    865. 

  865. 			?>		
    866. 

  866. 						</td>
    867. 

  867. 						<td valign="top" style="border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=($isDelivered)?'<strong>':''?><?=$track_Ret['1159-'.$i.'-'.$j]?><?=($isDelivered)?'</strong>':''?></td>
    868. 

  868. 						<td valign="top" style="border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=$track_Ret['1160-'.$i.'-'.$j]?>, <?=$state?></td>
    869. 

  869. 						<td valign="top"><?=$track_Ret['1711-'.$i.'-'.$j]?></td>
    870. 

  870. 					</tr>
    871. 

  871. 	<?php
    872. 

  872. 					if($isDelivered)
    873. 

  873. 					{
    874. 

  874. 						$isDelivered = false;
    875. 

  875. 					}
    876. 

  876. 					
    877. 

  877. 					$last_date = $unixDate;
    878. 

  878. 				}
    879. 

  879. 			}
    880. 

  880. 	?>
    881. 

  881.   </table>
    882. 

  882. </div>
    883. 

  883. 	<?php
    884. 

  884. 		}
    885. 

  885. 	}
    886. 

  886. 	// ADD ENDED
    887. 

  887. 	
    888. 

  888. 	// ADDED by Chad Apr-03-06
    889. 

  889. 	// DHL AND USPS TRACKING
    890. 

  890. 	$qry = "SELECT * FROM dhl WHERE custPackID = '".$_GET["id"]."'";
    891. 

  891. 	$res = mysql_query($qry) or print(mysql_error());
    892. 

  892. 	if(mysql_num_rows($res) > 0) {
    893. 

  893. 		$row = mysql_fetch_assoc($res);
    894. 

  894. 		$trackNum = $row['DHLGMTrackNum'];
    895. 

  895. 		if(!empty($trackNum)) {
    896. 

  896. 			$ch = curl_init();
    897. 

  897. 			curl_setopt($ch,CURLOPT_URL,"http://api.smartmail.com/tnt2.cfm?number=$trackNum&criteria=3&type=wddx&custid=rband&passwd=sm36732");
    898. 

  898. 			//curl_setopt($ch, CURLOPT_POST, 1);
    899. 

  899. 			curl_setopt($ch,CURLOPT_HEADER,0);
    900. 

  900. 			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    901. 

  901. 			//curl_setopt($ch, CURLOPT_POSTFIELDS, "number=$trackNum&criteria=3&type=wddx&custid=rband&passwd=sm36732");
    902. 

  902. 			$res = curl_exec($ch);
    903. 

  903. 			curl_close($ch);
    904. 

  904. 			$info = wddx_deserialize($res);
    905. 

  905. 			if(empty($info['Detail'][0])) { //If no errors
    906. 

  906. ?><?php
    907. 

  907. 				// CHECK USPS TRACKING INFO
    908. 

  908. 				if(!empty($info['TRACK_DELV_CONF'][0])) {
    909. 

  909. 					$ch = curl_init();
    910. 

  910. 					curl_setopt($ch,CURLOPT_URL,"http://Production.ShippingAPIs.com/ShippingAPI.dll");
    911. 

  911. 					curl_setopt($ch, CURLOPT_POST, 1);
    912. 

  912. 					curl_setopt($ch,CURLOPT_HEADER,0);
    913. 

  913. 					curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    914. 

  914. 					curl_setopt($ch, CURLOPT_POSTFIELDS, 'API=TrackV2&XML=<TrackFieldRequest USERID="268REMIN3619"><TrackID ID="'.$info['TRACK_DELV_CONF'][0].'"></TrackID></TrackFieldRequest>');
    915. 

  915. 					$res = curl_exec($ch);
    916. 

  916. 					curl_close($ch);
    917. 

  917. 					
    918. 

  918. 					include(APPPATH.'views/pages/admin/xml2array.php');
    919. 

  919. 					
    920. 

  920. 					$xmlData = new xml2array();
    921. 

  921. 					$uspsData = $xmlData -> parseXMLintoarray($res);
    922. 

  922. ?>
    923. 

  923.     <?php
    924. 

  924. 				}
    925. 

  925. 			}
    926. 

  926. 		}
    927. 

  927. 	}
    928. 

  928. 	
    929. 

  929. 	// ADD ENDED
    930. 

  930. 	
    931. 

  931. }else{
    932. 

  932. 	$sSQL = "SELECT ordID FROM orders WHERE ordStatus=1";
    933. 

  933. 	if(@$_POST["act"] != "purge") $sSQL .= " AND ordStatusDate<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    934. 

  934. 	$result = mysql_query($sSQL) or print(mysql_error());
    935. 

  935. 	while($rs = mysql_fetch_assoc($result)){
    936. 

  936. 		$theid = $rs["ordID"];
    937. 

  937. 		$delOptions = "";
    938. 

  938. 		$addcomma = "";
    939. 

  939. 		$result2 = mysql_query("SELECT cartID FROM cart WHERE cartOrderID=" . $theid) or print(mysql_error());
    940. 

  940. 		while($rs2 = mysql_fetch_assoc($result2)){
    941. 

  941. 			$delOptions .= $addcomma . $rs2["cartID"];
    942. 

  942. 			$addcomma = ",";
    943. 

  943. 		}
    944. 

  944. 		if($delOptions != ""){
    945. 

  945. 			$sSQL = "DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")";
    946. 

  946. 			mysql_query($sSQL) or print(mysql_error());
    947. 

  947. 		}
    948. 

  948. 		mysql_query("DELETE FROM cart WHERE cartOrderID=" . $theid) or print(mysql_error());
    949. 

  949. 		mysql_query("DELETE FROM orders WHERE ordID=" . $theid) or print(mysql_error());
    950. 

  950. 	}
    951. 

  951. 	if(@$_POST["act"]=="authorize"){
    952. 

  952. 		do_stock_management(trim($_POST["id"]));
    953. 

  953. 		if(trim($_POST["authcode"]) != "")
    954. 

  954. 			$sSQL = "UPDATE orders set ordAuthNumber='" . mysql_real_escape_string(trim($_POST["authcode"])) . "',ordStatus=3 WHERE ordID=" . $_POST["id"];
    955. 

  955. 		else
    956. 

  956. 			$sSQL = "UPDATE orders set ordAuthNumber='" . mysql_real_escape_string($yyManAut) . "',ordStatus=3 WHERE ordID=" . $_POST["id"];
    957. 

  957. 		if(mysql_query($sSQL)) {
    958. 

  958. 			if(!setNewLocation( 3 , $_POST["id"],'Manual' )) print("Unable to record status change.");
    959. 

  959. 		}else{
    960. 

  960. 			print(mysql_error());
    961. 

  961. 		}
    962. 

  962. 		mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["id"]) or print(mysql_error());
    963. 

  963. 	}elseif(@$_POST["act"]=="status"){
    964. 

  964. 		$maxitems=(int)($_POST["maxitems"]);
    965. 

  965. 		for($index=0; $index < $maxitems; $index++){
    966. 

  966. 			$iordid = trim($_POST["ordid" . $index]);
    967. 

  967. 			$ordstatus = trim($_POST["ordstatus" . $index]);
    968. 

  968. 			$ordauthno = "";
    969. 

  969. 			$oldordstatus=999;
    970. 

  970. 			$result = mysql_query("SELECT ordStatus,ordAuthNumber,ordEmail,ordDate,".getlangid("statPublic",64).",ordStatusInfo,ordName FROM orders INNER JOIN orderstatus ON orders.ordStatus=orderstatus.statID WHERE ordID=" . $iordid) or print(mysql_error());
    971. 

  971. 			if($rs = mysql_fetch_assoc($result)){
    972. 

  972. 				$oldordstatus=$rs["ordStatus"];
    973. 

  973. 				$ordauthno=$rs["ordAuthNumber"];
    974. 

  974. 				$ordemail=$rs["ordEmail"];
    975. 

  975. 				$orddate=strtotime($rs["ordDate"]);
    976. 

  976. 				$oldstattext=$rs[getlangid("statPublic",64)];
    977. 

  977. 				$ordstatinfo=$rs["ordStatusInfo"];
    978. 

  978. 				$ordername=$rs["ordName"];
    979. 

  979. 			}
    980. 

  980. 			if(! ($oldordstatus==999) && ($oldordstatus < 3 && $ordstatus >=3)){
    981. 

  981. 				// This is to force stock management
    982. 

  982. 				mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $iordid) or print(mysql_error());
    983. 

  983. 				do_stock_management($iordid);
    984. 

  984. 				mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $iordid) or print(mysql_error());
    985. 

  985. 				if($ordauthno=="") mysql_query("UPDATE orders SET ordAuthNumber='". mysql_real_escape_string($yyManAut) . "' WHERE ordID=" . $iordid) or print(mysql_error());
    986. 

  986. 			}
    987. 

  987. 			if(! ($oldordstatus==999) && ($oldordstatus >=3 && $ordstatus < 3)) release_stock($iordid);
    988. 

  988. 			if($iordid != "" && $ordstatus != ""){
    989. 

  989. 				if($oldordstatus != (int)$ordstatus && @$_POST["emailstat"]=="1"){
    990. 

  990. 					$result = mysql_query("SELECT ".getlangid("statPublic",64)." FROM orderstatus WHERE statID=" . $ordstatus);
    991. 

  991. 					if($rs = mysql_fetch_assoc($result))
    992. 

  992. 						$newstattext = $rs[getlangid("statPublic",64)];
    993. 

  993. 					$emailsubject = "Order status updated";
    994. 

  994. 					if(@$orderstatussubject != "") $emailsubject=$orderstatussubject;
    995. 

  995. 					$ose = $orderstatusemail;
    996. 

  996. 					$ose = str_replace("%orderid%", $iordid, $ose);
    997. 

  997. 					$ose = str_replace("%orderdate%", date($dateformatstr, $orddate), $ose);// . " " . date("H:i", $orddate), $ose);
    998. 

  998. 					$ose = str_replace("%oldstatus%", $oldstattext, $ose);
    999. 

  999. 					$ose = str_replace("%newstatus%", $newstattext, $ose);
    1000. 

  1000. 					$thetime = time() + ($dateadjust*60*60);
    1001. 

  1001. 					$ose = str_replace("%date%", date($dateformatstr, $thetime), $ose);// . " " . date("H:i", $thetime), $ose);
    1002. 

  1002. 					$ose = str_replace("%statusinfo%", $ordstatinfo, $ose);
    1003. 

  1003. 					$ose = str_replace("%ordername%", $ordername, $ose);
    1004. 

  1004. 					$ose = str_replace("%nl%", $emlNl, $ose);
    1005. 

  1005. 					if(@$customheaders == ""){
    1006. 

  1006. 						$customheaders = "MIME-Version: 1.0\n";
    1007. 

  1007. 						$customheaders .= "From: %from% <%from%>\n";
    1008. 

  1008. 						if(@$htmlemails==TRUE)
    1009. 

  1009. 							$customheaders .= "Content-type: text/html; charset=".$emailencoding."\n";
    1010. 

  1010. 						else
    1011. 

  1011. 							$customheaders .= "Content-type: text/plain; charset=".$emailencoding."\n";
    1012. 

  1012. 					}
    1013. 

  1013. 					$headers = str_replace('%from%',$emailAddr,$customheaders);
    1014. 

  1014. 					$headers = str_replace('%to%',$ordemail,$headers);
    1015. 

  1015. 					if((int)$ordstatus==9) {
    1016. 

  1016. 						$ose = $orderstatusshippedemail;
    1017. 

  1017. 						$ose = str_replace("%orderid%", $iordid, $ose);
    1018. 

  1018. 						$ose = str_replace("%orderdate%", date($dateformatstr, $orddate) . " " . date("H:i", $orddate), $ose);
    1019. 

  1019. 						$emailsubject = $orderstatusshippedsubject;
    1020. 

  1020. 					}
    1021. 

  1021. 					mail($ordemail, $emailsubject, $ose, $headers);
    1022. 

  1022. 				}
    1023. 

  1023. 				if($oldordstatus != (int)$ordstatus) {
    1024. 

  1024. 					if(mysql_query("UPDATE orders SET ordStatus=" . $ordstatus . ",ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $iordid)) {
    1025. 

  1025. 						if(!setNewLocation( $ordstatus , $iordid ,'Manual' )) print("Unable to record status change.");
    1026. 

  1026. 					}else{
    1027. 

  1027. 						print(mysql_error());
    1028. 

  1028. 					}
    1029. 

  1029. 				}
    1030. 

  1030. 			}
    1031. 

  1031. 		}
    1032. 

  1032. 	}
    1033. 

  1033. 	if(@$_POST["sd"] != "")
    1034. 

  1034. 		$sd = @$_POST["sd"];
    1035. 

  1035. 	elseif(@$_GET["sd"] != "")
    1036. 

  1036. 		$sd = @$_GET["sd"];
    1037. 

  1037. 	else
    1038. 

  1038. 		$sd = date($admindatestr, time() + ($dateadjust*60*60));
    1039. 

  1039. 	if(@$_POST["ed"] != "")
    1040. 

  1040. 		$ed = @$_POST["ed"];
    1041. 

  1041. 	elseif(@$_GET["ed"] != "")
    1042. 

  1042. 		$ed = @$_GET["ed"];
    1043. 

  1043. 	else
    1044. 

  1044. 		$ed = date($admindatestr, time() + ($dateadjust*60*60));
    1045. 

  1045. 	$sd = parsedate($sd);
    1046. 

  1046. 	$ed = parsedate($ed);
    1047. 

  1047. 	if($sd > $ed) $ed = $sd;
    1048. 

  1048. 	$fromdate = trim(@$_POST["fromdate"]);
    1049. 

  1049. 	$todate = trim(@$_POST["todate"]);
    1050. 

  1050. 	$ordid = trim(str_replace('"',"",str_replace("'","",@$_POST["ordid"])));
    1051. 

  1051. 	$origsearchtext = trim(unstripslashes(@$_POST["searchtext"]));
    1052. 

  1052. 	$searchtext = trim(mysql_real_escape_string(unstripslashes(@$_POST["searchtext"])));
    1053. 

  1053. 	$ordstatus = "";
    1054. 

  1054. 	
    1055. 

  1055. 	$sSQL = "SELECT cart.*, ordID,ordName,payProvName,ordDropshipSent,ordAuthNumber,ordDate,ordStatus,ordTotal-ordDiscount AS ordTot,ordTransID,order_changed,ordEID,ordAffiliate FROM cart,orders,payprovider,products WHERE cart.cartProdID=products.pID AND products.pPricing_group=3 AND payprovider.payPr…
    1056.

Large files files are truncated, but you can click here to view the full file