PageRenderTime 66ms CodeModel.GetById 21ms RepoModel.GetById 1ms app.codeStats 1ms

/application/views/pages/admin/orders2.php

https://bitbucket.org/chadsaun/ifrogz-panel
PHP | 3556 lines | 3348 code | 83 blank | 125 comment | 594 complexity | 3fa33cfa3c95b43af6c5dc2da84f8a37 MD5 | raw file

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. include('init.php');
    3. 

  3. if ($_POST["return_status_search"] == "") { $_SESSION["return_status_search"] = ""; }
    4. 

  4. else if ($_POST["return_status_search"] != "") { $_SESSION["return_status_search"] = $_POST["return_status_search"]; }
    5. 

  5. //showarray($_POST);
    6. 

  6. //$_SESSION['counter']=0;
    7. 

  7. //$_SESSION['counter_id']=0;
    8. 

  8. //This code is copyright (c) Internet Business Solutions SL, all rights reserved.
    9. 

  9. //The contents of this file are protect under law as the intellectual property of Internet
    10. 

  10. //Business Solutions SL. Any use, reproduction, disclosure or copying of any kind 
    11. 

  11. //without the express and written permission of Internet Business Solutions SL is forbidden.
    12. 

  12. //Author: Vince Reid, vince@virtualred.net
    13. 

  13. include(APPPATH.'views/pages/admin/cartmisc.php');
    14. 

  14. include_once(IFZROOT.'kohana.php');
    15. 

  15. session_register('order_id_commas');
    16. 

  16. $lisuccess=0;
    17. 

  17. if(@$dateadjust=="") $dateadjust=0;
    18. 

  18. if(@$dateformatstr == "") $dateformatstr = "m/d/Y";
    19. 

  19. $admindatestr="Y-m-d";
    20. 

  20. if(@$admindateformat=="") $admindateformat=0;
    21. 

  21. if($admindateformat==1)
    22. 

  22. 	$admindatestr="m/d/Y";
    23. 

  23. elseif($admindateformat==2)
    24. 

  24. 	$admindatestr="d/m/Y";
    25. 

  25. if(@$storesessionvalue=="") $storesessionvalue="virtualstore".time();
    26. 

  26. if(@$_GET["doedit"]=="true") $doedit=TRUE; else $doedit=FALSE;
    27. 

  27. function editfunc($data,$col,$size){
    28. 

  28. 	global $doedit;
    29. 

  29. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . str_replace('"','&quot;',$data) . '" size="' . $size . '">'); else return($data);
    30. 

  30. }
    31. 

  31. function editnumeric($data,$col,$size){
    32. 

  32. 	global $doedit;
    33. 

  33. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . number_format($data,2,'.','') . '" size="' . $size . '">'); else return(FormatEuroCurrency($data));
    34. 

  34. }
    35. 

  35. if(@$_SESSION["loggedon"] != $storesessionvalue && trim(@$_COOKIE["WRITECKL"])!=""){
    36. 

  36. 	$config = RBI_Kohana::config('database.default_ifrogz');
    37. 

  37. 	$config = $config['connection'];
    38. 

  38. 	$db=mysql_connect($config['hostname'], $config['username'], $config['password']);
    39. 

  39. 	mysql_select_db($config['database']) or die ('RBI connection failed.</td></tr></table></body></html>');
    40. 

  40. 	$rbiSQL = 'SELECT * 
    41. 

  41. 			   FROM employee 
    42. 

  42. 			   WHERE username="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKL"]))).'" and password="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKP"]))).'"';
    43. 

  43. 	$rs_rbi = mysql_query($rbiSQL);
    44. 

  44. 	if(mysql_num_rows($rs_rbi) > 0) {
    45. 

  45. 		@$_SESSION["loggedon"] = $storesessionvalue;
    46. 

  46. 	}else{
    47. 

  47. 		$lisuccess=2;
    48. 

  48. 	}
    49. 

  49. 	mysql_free_result($rs_rbi);
    50. 

  50. 	
    51. 

  51. 	include(APPPATH.'views/partials/admin/dbconnection.php');
    52. 

  52. }
    53. 

  53. if(($_SESSION["loggedon"] != $storesessionvalue && $lisuccess!=2) || @$disallowlogin==TRUE) exit();
    54. 

  54. if(@$htmlemails==TRUE) $emlNl = "<br />"; else $emlNl="\n";
    55. 

  55. //old release_stock function was here
    56. 

  56. if($lisuccess==2){
    57. 

  57. ?>
    58. 

  58. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    59. 

  59.         <tr>
    60. 

  60.           <td width="100%">
    61. 

  61.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    62. 

  62. 			  <tr> 
    63. 

  63.                 <td width="100%" colspan="4" align="center"><p>&nbsp;</p><p>&nbsp;</p>
    64. 

  64. 				  <p><strong><?php print $yyOpFai?></strong></p><p>&nbsp;</p>
    65. 

  65. 				  <p><?php print $yyCorCoo?> <?php print $yyCorLI?> <a href="/admin/login.php"><?php print $yyClkHer?></a>.</p>
    66. 

  66. 				</td>
    67. 

  67. 			  </tr>
    68. 

  68. 			</table>
    69. 

  69. 		  </td>
    70. 

  70. 		</tr>
    71. 

  71. 	  </table>
    72. 

  72. <?php
    73. 

  73. }else{
    74. 

  74. $success=true;
    75. 

  75. $alreadygotadmin = getadminsettings();
    76. 

  76. if(@$_POST["updatestatus"]=="1"){
    77. 

  77. 	// updates returns and adds to history
    78. 

  78. 	$result_r=mysql_query("SELECT ordReturnID FROM orders WHERE ordID=".$_POST["orderid"]);
    79. 

  79. 	$row_r=mysql_fetch_assoc($result_r);
    80. 

  80. 	//echo $row_r["ordReturnID"]."=".$_POST["return_status"];
    81. 

  81. 	//exit();
    82. 

  82. 	if($row_r["ordReturnID"]!=$_POST["return_status"] && $_POST["return_status"]>0 ){
    83. 

  83. 		$sql_return_history="INSERT INTO order_returns_history (ordID,reasonID,returnID,date_added) 
    84. 

  84. 		VALUES(".$_POST["orderid"].",".$_POST["return_reason"].",".$_POST["return_status"].",'".date('Y-m-d H:i:s')."')";
    85. 

  85. 		//echo $sql_return_history;
    86. 

  86. 		//exit();
    87. 

  87. 		mysql_query($sql_return_history);
    88. 

  88. 	}
    89. 

  89. 	// end
    90. 

  90. 	mysql_query("UPDATE orders SET ordStatusInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordStatusInfo"]))) ."', ordSupportInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordSupportInfo"]))) . "' , ordReturnID='" . trim(@$_POST["return_status"]) . "' WHERE ordID=" . @$_POST["orderid"]) or print(mysql_error());
    91. 

  91. }elseif(@$_GET["id"] != ""){
    92. 

  92. 	// Commented out below code because we put this into a cron job
    93. 

  93. 	/*if(@$_POST["delccdets"] != ""){
    94. 

  94. 		mysql_query("UPDATE orders SET ordCNum='' WHERE ordID=" . @$_GET["id"]);
    95. 

  95. 	}*/
    96. 

  96. 	$sSQL = "SELECT c.cartProdID,c.cartProdName,c.cartProdPrice,c.cartQuantity,c.cartID,p.pDownload,p.p_iscert,d.dsName,pInStock,pSell,c.cartReason,c.cartNote FROM cart c, products p LEFT JOIN dropshipper d ON p.pDropship=d.dsID WHERE c.cartProdID=p.pID AND c.cartOrderID=" . $_GET["id"];
    97. 

  97. 	$allorders = mysql_query($sSQL) or print(mysql_error().$sSQL);
    98. 

  98. }else{
    99. 

  99. 	// Delete old uncompleted orders.
    100. 

  100. 	//   Commented out below code because we put this into a daily cron job (delcc.php)
    101. 

  101. 	/*if($delccafter != 0){
    102. 

  102. 		$sSQL = "UPDATE orders SET ordCNum='' WHERE ordDate<'" . date("Y-m-d H:i:s", time()-($delccafter*60*60*24)) . "'";
    103. 

  103. 		mysql_query($sSQL) or print(mysql_error().$sSQL);
    104. 

  104. 	}*/
    105. 

  105. 	if($delAfter != 0){
    106. 

  106. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-($delAfter*60*60*24)) . "'";
    107. 

  107. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    108. 

  108. 		if(mysql_num_rows($result)>0){
    109. 

  109. 			$delStr="";
    110. 

  110. 			$delOptions="";
    111. 

  111. 			$addcomma = "";
    112. 

  112. 			while($rs = mysql_fetch_assoc($result)){
    113. 

  113. 				$delStr .= $addcomma . $rs["cartOrderID"];
    114. 

  114. 				$delOptions .= $addcomma . $rs["cartID"];
    115. 

  115. 				$addcomma = ",";
    116. 

  116. 			}
    117. 

  117. 			mysql_query("DELETE FROM orders WHERE ordID IN (" . $delStr . ")") or print(mysql_error());
    118. 

  118. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    119. 

  119. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    120. 

  120. 		}
    121. 

  121. 		mysql_free_result($result);
    122. 

  122. 	}else{
    123. 

  123. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartOrderID=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    124. 

  124. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    125. 

  125. 		if(mysql_num_rows($result)>0){
    126. 

  126. 			$delStr="";
    127. 

  127. 			$delOptions="";
    128. 

  128. 			$addcomma = "";
    129. 

  129. 			while($rs = mysql_fetch_assoc($result)){
    130. 

  130. 				$delStr .= $addcomma . $rs["cartOrderID"];
    131. 

  131. 				$delOptions .= $addcomma . $rs["cartID"];
    132. 

  132. 				$addcomma = ",";
    133. 

  133. 			}
    134. 

  134. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    135. 

  135. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    136. 

  136. 		}
    137. 

  137. 		mysql_free_result($result);
    138. 

  138. 	}
    139. 

  139. 	$numstatus=0;
    140. 

  140. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    141. 

  141. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    142. 

  142. 	while($rs = mysql_fetch_assoc($result)){
    143. 

  143. 		$allstatus[$numstatus++]=$rs;
    144. 

  144. 	}
    145. 

  145. 	mysql_free_result($result);
    146. 

  146. }
    147. 

  147. if(@$_POST["updatestatus"]=="1"){
    148. 

  148. ?>
    149. 

  149. <script language="JavaScript" type="text/javascript">
    150. 

  150. <!--
    151. 

  151. setTimeout("history.go(-2);",1100);
    152. 

  152. // -->
    153. 

  153. </script>
    154. 

  154. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    155. 

  155.         <tr>
    156. 

  156.           <td width="100%">
    157. 

  157.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    158. 

  158. 			  <tr> 
    159. 

  159.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    160. 

  160.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    161. 

  161. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    162. 

  162. 			  </tr>
    163. 

  163. 			</table>
    164. 

  164. 		  </td>
    165. 

  165. 		</tr>
    166. 

  166. 	  </table>
    167. 

  167. <?php
    168. 

  168. }elseif(!empty($_POST["getdownload"])){
    169. 

  169. 	$sql_down="SELECT * FROM digitaldownloads WHERE type='".$_POST['downloadtype']."' AND active=1 AND orderID=0 LIMIT ".$_POST['downQty'];
    170. 

  170. 	$result_down=mysql_query($sql_down);
    171. 

  171. 	$num_rows_download=mysql_num_rows($result_down);
    172. 

  172. 	if($num_rows_download>0){
    173. 

  173. 		$error=FALSE;
    174. 

  174. 		while($row_download=mysql_fetch_assoc($result_down)){
    175. 

  175. 			$sql_update="UPDATE digitaldownloads SET active=0, orderID=".$_POST['downOrder']." WHERE id=".$row_download['id'];
    176. 

  176. 			$result_update=mysql_query($sql_update);
    177. 

  177. 			if(!$result_update) $error=TRUE;
    178. 

  178. 		}
    179. 

  179. 		if(!$error) $pg_msg= 'Update Successful.';
    180. 

  180. 		else $pg_msg= 'Update Unsuccessful.';
    181. 

  181. 	} else $pg_msg= 'NO License and Password Available.';
    182. 

  182. 	$auto_link = "/admin/orders2.php?id=".$_POST['downOrder']."&doedit=true";
    183. 

  183. 	if(!$clone_error) {
    184. 

  184. 			
    185. 

  185. 		}else{
    186. 

  186. 			$auto_link = "/admin/orders2.php";
    187. 

  187. 		}
    188. 

  188. 	
    189. 

  189. 	?>
    190. 

  190. 	 <script language="JavaScript" type="text/javascript">
    191. 

  191. 	<!--
    192. 

  192. 	setTimeout("window.location='/admin/orders2.php?id=<?=$_POST['downOrder']?>&doedit=true'",4000);
    193. 

  193. 	// -->
    194. 

  194. 	</script>
    195. 

  195. 	 <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    196. 

  196.         <tr>
    197. 

  197.           <td width="100%">
    198. 

  198.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    199. 

  199. 			  <tr> 
    200. 

  200.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    201. 

  201.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    202. 

  202. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    203. 

  203. 			  </tr>
    204. 

  204. 			</table>
    205. 

  205. 		  </td>
    206. 

  206. 		</tr>
    207. 

  207. </table>
    208. 

  208. <? }elseif(!empty($_POST["giftcert"])){	  
    209. 

  209. 	$giftcertOrderID=$_POST["giftcertOrderID"];
    210. 

  210. 	$_SESSION['cert_prod']=$_POST["cert_prod"];
    211. 

  211. 	create_certificate($giftcertOrderID);
    212. 

  212. 	$auto_link = "/admin/orders2.php?id=".$giftcertOrderID."&doedit=true";
    213. 

  213. 	$pg_msg='Update Successful.';
    214. 

  214. 	?>
    215. 

  215. 	<script language="JavaScript" type="text/javascript">
    216. 

  216. 	<!--
    217. 

  217. 	setTimeout("window.location='/admin/orders2.php?id=<?=$giftcertOrderID?>&doedit=true'",4000);
    218. 

  218. 	// -->
    219. 

  219. 	</script>
    220. 

  220. 	 <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    221. 

  221.         <tr>
    222. 

  222.           <td width="100%">
    223. 

  223.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    224. 

  224. 			  <tr> 
    225. 

  225.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    226. 

  226.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    227. 

  227. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    228. 

  228. 			  </tr>
    229. 

  229. 			</table>
    230. 

  230. 		  </td>
    231. 

  231. 		</tr>
    232. 

  232. </table>
    233. 

  233. <? }elseif(@$_POST["doedit"] == "true"){
    234. 

  234. 	if(!empty($_POST['clone'])) {
    235. 

  235. 		// update old order status after editing
    236. 

  236. 		$ordstatusnew=$_POST["ordstatusnew"];
    237. 

  237. 		$ordStatusInfo=mysql_real_escape_string(trim(unstripslashes($_POST["ordStatusInfo"])));
    238. 

  238. 		$ordSupportInfo=mysql_real_escape_string(trim(unstripslashes($_POST["ordSupportInfo"])));
    239. 

  239. 		$sql_status_update="UPDATE orders SET ordStatus=".$ordstatusnew.",ordStatusInfo='".$ordStatusInfo."',ordSupportInfo='".$ordSupportInfo."' WHERE ordID=".$_POST["orderid"];
    240. 

  240. 		mysql_query($sql_status_update) or print(mysql_error().$sql_status_update);
    241. 

  241. 		if(!setNewLocation( $ordstatusnew , $_POST["orderid"],'Manual' )) print("Unable to record status change.");
    242. 

  242. 

  243. 		// stock manage
    244. 

  244. 		if($ordstatusnew>=3 && $ordstatusnew!=10 && $ordstatusnew!=17) {
    245. 

  245. 			mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    246. 

  246. 			do_stock_management($_POST["orderid"]); 
    247. 

  247. 			mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    248. 

  248. 		}
    249. 

  249. 		// GET ALL THE INFORMATION TO CLONE THE ORDER
    250. 

  250. 		//   - To clone an order we need to duplicate the order's information in the orders, cart, and cartoptions tables
    251. 

  251. 		$aNewOrder = array();
    252. 

  252. 		
    253. 

  253. 		$sql_orders = "SELECT * FROM orders WHERE ordID = " . $_POST["orderid"] ;
    254. 

  254. 		$res_orders = mysql_query($sql_orders) or print(mysql_error().$sql_orders);
    255. 

  255. 		$row_orders = mysql_fetch_assoc($res_orders);
    256. 

  256. 		$aNewOrder["orders"] = $row_orders;
    257. 

  257. 		$aNewOrder["orders"]["ordName"]=mysql_real_escape_string($row_orders["ordName"]);
    258. 

  258. 		$aNewOrder["orders"]["ordShipName"]=mysql_real_escape_string($row_orders["ordShipName"]);
    259. 

  259. 		if ($row_orders["ordShipCountry"] != "") {
    260. 

  260. 			 if ($row_orders["ordShipCountry"] == "United States of America") $aNewOrder["orders"]["ordShipType"]='Standard';
    261. 

  261. 		} else {
    262. 

  262. 			 if ($row_orders["ordCountry"] == "United States of America") $aNewOrder["orders"]["ordShipType"]='Standard';
    263. 

  263. 		}
    264. 

  264. 		
    265. 

  265. 		$sql_cart = "SELECT * FROM cart c LEFT JOIN cartoptions co ON c.cartID = co.coCartID
    266. 

  266. 					 WHERE c.cartOrderID = " . $_POST["orderid"] . "
    267. 

  267. 					 ORDER BY c.cartID, c.cartProdID";
    268. 

  268. 		
    269. 

  269. 		//echo $sql_cart; exit();
    270. 

  270. 		$res_cart = mysql_query($sql_cart) or print(mysql_error().$sql_cart);
    271. 

  271. 		$prod_id = '';
    272. 

  272. 		$i=0;
    273. 

  273. 		$j=0;
    274. 

  274. 		$isfirst = true;
    275. 

  275. 		while($row_cart = mysql_fetch_assoc($res_cart)) {
    276. 

  276. 			if($isfirst) {
    277. 

  277. 				$prod_id = $row_cart["cartProdID"];
    278. 

  278. 			}
    279. 

  279. 			if(($prod_id != $row_cart["cartProdID"]) && !$isfirst) {
    280. 

  280. 				$i++;
    281. 

  281. 				$j=0;
    282. 

  282. 				$prod_id = $row_cart["cartProdID"];
    283. 

  283. 			
    284. 

  284. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    285. 

  285. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    286. 

  286. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    287. 

  287. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    288. 

  288. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    289. 

  289. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    290. 

  290. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    291. 

  291. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    292. 

  292. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    293. 

  293. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    294. 

  294. 				
    295. 

  295. 				if(!empty($row_cart["coID"])){
    296. 

  296. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    297. 

  297. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    298. 

  298. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    299. 

  299. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    300. 

  300. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    301. 

  301. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    302. 

  302. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    303. 

  303. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    304. 

  304. 					$j++;
    305. 

  305. 				}
    306. 

  306. 			}else{
    307. 

  307. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    308. 

  308. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    309. 

  309. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    310. 

  310. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    311. 

  311. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    312. 

  312. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    313. 

  313. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    314. 

  314. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    315. 

  315. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    316. 

  316. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    317. 

  317. 				
    318. 

  318. 				if(!empty($row_cart["coID"])){
    319. 

  319. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    320. 

  320. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    321. 

  321. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    322. 

  322. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    323. 

  323. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    324. 

  324. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    325. 

  325. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    326. 

  326. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    327. 

  327. 					$j++;
    328. 

  328. 				}
    329. 

  329. 			}
    330. 

  330. 			$isfirst = false;
    331. 

  331. 		}
    332. 

  332. 		
    333. 

  333. 		//showarray($aNewOrder); exit();
    334. 

  334. 		
    335. 

  335. 		// UPDATE SOME OF THE INFORMATION FOR THE CLONED ORDER
    336. 

  336. 		$aNewOrder["orders"]["ordID"] = '';
    337. 

  337. 		$aNewOrder["orders"]["ordSessionID"] = session_id();
    338. 

  338. 		$aNewOrder["orders"]["ordAuthNumber"] = 'CLONED';
    339. 

  339. 		$aNewOrder["orders"]["ordTransID"] = 0;
    340. 

  340. 		$aNewOrder["orders"]["ordShipping"] = 0;
    341. 

  341. 		$aNewOrder["orders"]["ordStateTax"] = 0;
    342. 

  342. 		$aNewOrder["orders"]["ordCountryTax"] = 0;
    343. 

  343. 		$aNewOrder["orders"]["ordHSTTax"] = 0;
    344. 

  344. 		$aNewOrder["orders"]["ordHandling"] = 0;
    345. 

  345. 		$aNewOrder["orders"]["ordTotal"] = 0;
    346. 

  346. 		$aNewOrder["orders"]["ordDate"] = date("Y-m-d H:i:s");
    347. 

  347. 		$aNewOrder["orders"]["ordIP"] = $_SERVER['REMOTE_ADDR'];
    348. 

  348. 		$aNewOrder["orders"]["ordDiscount"] = 0;
    349. 

  349. 		$aNewOrder["orders"]["ordDiscountText"] = '';
    350. 

  350. 		$aNewOrder["orders"]["ordStatus"] = 2;
    351. 

  351. 		$aNewOrder["orders"]["ordStatusDate"] = date("Y-m-d H:i:s");
    352. 

  352. 		$aNewOrder["orders"]["ordStatusInfo"] = '';
    353. 

  353. 		$aNewOrder["orders"]["ordSupportInfo"] = '';
    354. 

  354. 		$aNewOrder["orders"]["order_changed"] = 'no';
    355. 

  355. 		
    356. 

  356. 		for($i=0; $i<count($aNewOrder["cart"]); $i++) {
    357. 

  357. 			$aNewOrder["cart"][$i]["cartSessionID"] = session_id();
    358. 

  358. 			$aNewOrder["cart"][$i]["cartDateAdded"] = date("Y-m-d H:i:s");
    359. 

  359. 		}
    360. 

  360. 		
    361. 

  361. 		//showarray($aNewOrder); exit();
    362. 

  362. 		
    363. 

  363. 		// CREATE CLONED ORDER
    364. 

  364. 		$clone_error = false;
    365. 

  365. 		$sql_cr_ord = "INSERT INTO orders ( ordSessionID , ordName , ordAddress , ordAddress2 , ordCity , ordState , 
    366. 

  366. 											ordZip , ordCountry , ordEmail , ordPhone , ordShipName , ordShipAddress , 
    367. 

  367. 											ordShipAddress2 , ordShipCity , ordShipState , ordShipZip , ordShipCountry , 
    368. 

  368. 											ordAuthNumber , ordAffiliate , ordPayProvider , ordTransID , ordShipping , 
    369. 

  369. 											ordStateTax , ordCountryTax , ordHSTTax , ordHandling , ordShipType , ordTotal , 
    370. 

  370. 											ordDate , ordIP , ordDiscount , ordDiscountText , ordExtra1 , ordExtra2 , ordAddInfo , 
    371. 

  371. 											ordCNum , ordComLoc , ordStatus , ordStatusDate , ordStatusInfo , ordPoApo , 
    372. 

  372. 											ordShipPoApo , ordHowFound , ordSupportInfo , order_changed , ordPmtMessage , 
    373. 

  373. 											ordCCType , ord_cert_id , ord_cert_amt , ordExtra3 , ordExtra4 , ordExtra5 , ordEID , 
    374. 

  374. 											ordEOrderID )
    375. 

  375. 						VALUES ( '".$aNewOrder["orders"]["ordSessionID"]."' , 
    376. 

  376. 								 '".$aNewOrder["orders"]["ordName"]."' , '".$aNewOrder["orders"]["ordAddress"]."' , 
    377. 

  377. 								 '".$aNewOrder["orders"]["ordAddress2"]."' , '".$aNewOrder["orders"]["ordCity"]."' , 
    378. 

  378. 								 '".$aNewOrder["orders"]["ordState"]."' , '".$aNewOrder["orders"]["ordZip"]."' , 
    379. 

  379. 								 '".$aNewOrder["orders"]["ordCountry"]."' , '".$aNewOrder["orders"]["ordEmail"]."' , 
    380. 

  380. 								 '".$aNewOrder["orders"]["ordPhone"]."' , '".$aNewOrder["orders"]["ordShipName"]."' , 
    381. 

  381. 								 '".$aNewOrder["orders"]["ordShipAddress"]."' , '".$aNewOrder["orders"]["ordShipAddress2"]."' , 
    382. 

  382. 								 '".$aNewOrder["orders"]["ordShipCity"]."' , '".$aNewOrder["orders"]["ordShipState"]."' , 
    383. 

  383. 								 '".$aNewOrder["orders"]["ordShipZip"]."' , '".$aNewOrder["orders"]["ordShipCountry"]."' , 
    384. 

  384. 								 '".$aNewOrder["orders"]["ordAuthNumber"]."' , '".$aNewOrder["orders"]["ordAffiliate"]."' , 
    385. 

  385. 								 '".$aNewOrder["orders"]["ordPayProvider"]."' , '".$aNewOrder["orders"]["ordTransID"]."' , 
    386. 

  386. 								 '".$aNewOrder["orders"]["ordShipping"]."' , '".$aNewOrder["orders"]["ordStateTax"]."' , 
    387. 

  387. 								 '".$aNewOrder["orders"]["ordCountryTax"]."' , '".$aNewOrder["orders"]["ordHSTTax"]."' , 
    388. 

  388. 								 '".$aNewOrder["orders"]["ordHandling"]."' , '".$aNewOrder["orders"]["ordShipType"]."' , 
    389. 

  389. 								 '".$aNewOrder["orders"]["ordTotal"]."' , '".$aNewOrder["orders"]["ordDate"]."' , 
    390. 

  390. 								 '".$aNewOrder["orders"]["ordIP"]."' , '".$aNewOrder["orders"]["ordDiscount"]."' , 
    391. 

  391. 								 '".$aNewOrder["orders"]["ordDiscountText"]."' , '".$aNewOrder["orders"]["ordExtra1"]."' , 
    392. 

  392. 								 '".$aNewOrder["orders"]["ordExtra2"]."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordAddInfo"])."' , 
    393. 

  393. 								 '".$aNewOrder["orders"]["ordCNum"]."' , '".$aNewOrder["orders"]["ordComLoc"]."' , 
    394. 

  394. 								 '".$aNewOrder["orders"]["ordStatus"]."' , '".$aNewOrder["orders"]["ordStatusDate"]."' , 
    395. 

  395. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordStatusInfo"])."' , '".$aNewOrder["orders"]["ordPoApo"]."' , 
    396. 

  396. 								 '".$aNewOrder["orders"]["ordShipPoApo"]."' , '".$aNewOrder["orders"]["ordHowFound"]."' , 
    397. 

  397. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordSupportInfo"])."' , '".$aNewOrder["orders"]["order_changed"]."' , 
    398. 

  398. 								 '".$aNewOrder["orders"]["ordPmtMessage"]."' , '".$aNewOrder["orders"]["ordCCType"]."' , 
    399. 

  399. 								 '".$aNewOrder["orders"]["ord_cert_id"]."' , '".$aNewOrder["orders"]["ord_cert_amt"]."' , 
    400. 

  400. 								 '".$aNewOrder["orders"]["ordExtra3"]."' , '".$aNewOrder["orders"]["ordExtra4"]."' , 
    401. 

  401. 								 '".$aNewOrder["orders"]["ordExtra5"]."' , '".$aNewOrder["orders"]["ordEID"]."' , 
    402. 

  402. 								 '".$aNewOrder["orders"]["ordEOrderID"]."' )";
    403. 

  403. 		//echo $sql_cr_ord; //exit();
    404. 

  404. 		$res_cr_ord = mysql_query($sql_cr_ord);
    405. 

  405. 		if(!$res_cr_ord) {
    406. 

  406. 			print(mysql_error().$sql_cr_ord);
    407. 

  407. 			$clone_error = true;
    408. 

  408. 		}
    409. 

  409. 		$ordID = mysql_insert_id();
    410. 

  410. 		$aNewOrder["orders"]["ordID"] = $ordID;
    411. 

  411. 		//showarray($aNewOrder);
    412. 

  412. 		if(!$clone_error) {
    413. 

  413. 			for($i=0; $i<count($aNewOrder["cart"]); $i++) {	
    414. 

  414. 				$aNewOrder["cart"][$i]["cartOrderID"] = $ordID;
    415. 

  415. 				$sql_cr_cart = "INSERT INTO cart ( cartSessionID , cartProdID , cartProdName , cartProdPrice , cartDateAdded , 
    416. 

  416. 												   cartQuantity , cartOrderID , cartCompleted )
    417. 

  417. 								VALUES ( '".session_id()."' , '".$aNewOrder["cart"][$i]["cartProdID"]."' , 
    418. 

  418. 										 '".$aNewOrder["cart"][$i]["cartProdName"]."' , '".$aNewOrder["cart"][$i]["cartProdPrice"]."' , 
    419. 

  419. 										 '".date("Y-m-d H:i:s")."' , '".$aNewOrder["cart"][$i]["cartQuantity"]."' , 
    420. 

  420. 										 '".$aNewOrder["cart"][$i]["cartOrderID"]."' , 1 )";
    421. 

  421. 				//echo $sql_cr_cart; //exit();
    422. 

  422. 				$res_cr_cart = mysql_query($sql_cr_cart) or print(mysql_error().$sql_cr_cart);
    423. 

  423. 				$cart_id = mysql_insert_id();
    424. 

  424. 				$aNewOrder["cart"][$i]["cartID"] = $cart_id;
    425. 

  425. 				
    426. 

  426. 				for($j=0; $j<count($aNewOrder["cart"][$i]["cartoptions"]); $j++) {
    427. 

  427. 					$sql_cr_cartoptions = "INSERT INTO cartoptions ( coCartID , coOptID , coOptGroup , coCartOption , coPriceDiff , 
    428. 

  428. 																	 coWeightDiff , coExtendShipping )
    429. 

  429. 										   VALUES ( ".$aNewOrder["cart"][$i]["cartID"]." , 
    430. 

  430. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"]." , 
    431. 

  431. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"]."' , 
    432. 

  432. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"]."' , 
    433. 

  433. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"]." , 
    434. 

  434. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"]." , 
    435. 

  435. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"]."' )";
    436. 

  436. 					//echo $sql_cr_cartoptions; //exit();
    437. 

  437. 					$res_cr_cartoptions = mysql_query($sql_cr_cartoptions) or print(mysql_error().$sql_cr_cartoptions);
    438. 

  438. 				}
    439. 

  439. 			}
    440. 

  440. 			//exit();
    441. 

  441. 			// UPDATE INVENTORY
    442. 

  442. 			$sSQL="SELECT cartID,cartProdID,cartQuantity,pSell FROM cart INNER JOIN products ON cart.cartProdID=products.pID WHERE cartOrderID='" . $ordID . "'";
    443. 

  443. 			$result1 = mysql_query($sSQL) or print(mysql_error().$sSQL);
    444. 

  444. 			while($rs1 = mysql_fetch_array($result1)){
    445. 

  445. 				if(($rs1["pSell"] & 2) == 2){
    446. 

  446. 					// Determine extended shipping
    447. 

  447. 					$sSQL2 = "SELECT coID,optStock,cartQuantity,coOptID,optExtend_shipping,optMin FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2";
    448. 

  448. 					// ADDED by Chad - Fix to allow quantity change for custom screenz
    449. 

  449. 					if(eregi("^[a-z]{1,3}-Custom$",$pID)) {
    450. 

  450. 						$sSQL2 .= " OR optType=3";
    451. 

  451. 					}
    452. 

  452. 					// ADD ENDED
    453. 

  453. 					$sSQL2 .= ") AND cartID='" . $rs1['cartID'] . "'";
    454. 

  454. 					$result2 = mysql_query($sSQL2) or print(mysql_error().$sSQL2);
    455. 

  455. 					if(mysql_num_rows($result2)>0){
    456. 

  456. 						while($rs2 = mysql_fetch_assoc($result2)){
    457. 

  457. 							$pInStock = (int)$rs2["optStock"]+1000;
    458. 

  458. 							$actualpInStock = (int)$rs2["optStock"];
    459. 

  459. 							$extend_shipping = $rs2["optExtend_shipping"];//extends shipping time, displayed in the cart
    460. 

  460. 							$min = $rs2["optMin"];//sets how many in stock above zero the extend_shipping is displayed in the cart 
    461. 

  461. 							$coID = $rs2["coID"];
    462. 

  462. 							$totQuant = 0;
    463. 

  463. 							$cartQuantity = (int)$rs2["cartQuantity"];
    464. 

  464. 							$sSQL3 = "SELECT SUM(cartQuantity) AS cartQuant FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID WHERE cartCompleted=0 AND cartCustID=0 AND coOptID=" . $rs2["coOptID"];
    465. 

  465. 							$result3 = mysql_query($sSQL3) or print(mysql_error().$sSQL3);
    466. 

  466. 							if($rs3 = mysql_fetch_assoc($result3))
    467. 

  467. 								if(! is_null($rs3["cartQuant"])) $totQuant = (int)$rs3["cartQuant"];
    468. 

  468. 							mysql_free_result($result3);
    469. 

  469. 							$extend='';
    470. 

  470. 							//echo '<div style"position:absolute; z-index:100;>actual='.$actualpInStock.' total qty='.$totQuant. ' cart qty='.$cartQuantity.' min='. $min. ' new qty='.abs((int)$objValue).'</div>';
    471. 

  471. 							if(($actualpInStock - $totQuant + $cartQuantity - $min) < 0) {
    472. 

  472. 								$extend = $extend_shipping;
    473. 

  473. 							}
    474. 

  474. 							$sql_co="UPDATE cartoptions SET coExtendShipping='$extend' WHERE coID=".$coID;
    475. 

  475. 								mysql_query($sql_co);
    476. 

  476. 						}
    477. 

  477. 					}
    478. 

  478. 					// End of Determine extended shipping
    479. 

  479. 					// Inventory get subtracted when set to authorized
    480. 

  480. 					/*$sSQL = "SELECT coOptID FROM cartoptions INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2) AND coCartID=" . $rs1["cartID"];
    481. 

  481. 					$result2 = mysql_query($sSQL) or print(mysql_error());
    482. 

  482. 					while($rs2 = mysql_fetch_array($result2)){
    483. 

  483. 						$sSQL = "UPDATE options SET optStock=optStock-" . $rs1["cartQuantity"] . " WHERE optID=" . $rs2["coOptID"];
    484. 

  484. 						mysql_query($sSQL) or print(mysql_error());
    485. 

  485. 					}
    486. 

  486. 					mysql_free_result($result2);*/
    487. 

  487. 				//}else{
    488. 

  488. 					//$sSQL = "UPDATE products SET pInStock=pInStock-" . $rs1["cartQuantity"] . " WHERE pID='" . $rs1["cartProdID"] . "'";
    489. 

  489. 					//mysql_query($sSQL) or print(mysql_error());
    490. 

  490. 				}
    491. 

  491. 			}
    492. 

  492. 			mysql_free_result($result1);
    493. 

  493. 					
    494. 

  494. 			// INSERT LOCATION
    495. 

  495. 			setNewLocation(2,$ordID,'Manual');
    496. 

  496. 			$sql_insert="INSERT INTO orderssplit (orgOrder,newOrder,movedCardIDs,splitType) VALUES (".$_POST["orderid"].",".$ordID.",'','Cloned')";
    497. 

  497. 			$result_insert = mysql_query($sql_insert);
    498. 

  498. 			if(!$result_insert) {print(mysql_error().$sql_insert);exit();}
    499. 

  499. 		}
    500. 

  500. 		
    501. 

  501. 		if($clone_error) {
    502. 

  502. 			$pg_msg = "There was a problem cloning your order.";
    503. 

  503. 		}else{
    504. 

  504. 			$pg_msg = "Your order has been cloned successfully.";
    505. 

  505. ?>
    506. 

  506. <script language="JavaScript" type="text/javascript">
    507. 

  507. <!--
    508. 

  508. //setTimeout("history.go(-2);",1100);
    509. 

  509. setTimeout("window.location='/admin/orders2.php?id=<?=$ordID?>&doedit=true'",4000);
    510. 

  510. // -->
    511. 

  511. </script>
    512. 

  512. <?php
    513. 

  513. 		}
    514. 

  514. 		
    515. 

  515. 		if(!$clone_error) {
    516. 

  516. 			$auto_link = "/admin/orders2.php?id=$ordID&doedit=true";
    517. 

  517. 		}else{
    518. 

  518. 			$auto_link = "/admin/orders2.php";
    519. 

  519. 		}
    520. 

  520. ?>
    521. 

  521. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    522. 

  522.         <tr>
    523. 

  523.           <td width="100%">
    524. 

  524.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    525. 

  525. 			  <tr> 
    526. 

  526.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    527. 

  527.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    528. 

  528. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    529. 

  529. 			  </tr>
    530. 

  530. 			</table>
    531. 

  531. 		  </td>
    532. 

  532. 		</tr>
    533. 

  533. 	  </table>
    534. 

  534. <?php
    535. 

  535. 	}else{
    536. 

  536. 		$OWSP = "";
    537. 

  537. 		$sSQL = "SELECT ordSessionID FROM orders WHERE ordID='" . $_POST["orderid"] . "'";
    538. 

  538. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    539. 

  539. 		$rs = mysql_fetch_array($result);
    540. 

  540. 		$thesessionid = $rs["ordSessionID"];
    541. 

  541. 		mysql_free_result($result);
    542. 

  542. 		$sSQL = "UPDATE orders SET ";
    543. 

  543. 		$sSQL .= "ordName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["name"]))) . "',";
    544. 

  544. 		$sSQL .= "ordAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address"]))) . "',";
    545. 

  545. 		if(@$useaddressline2==TRUE) $sSQL .= "ordAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address2"]))) . "',";
    546. 

  546. 		$sSQL .= "ordCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["city"]))) . "',";
    547. 

  547. 		$sSQL .= "ordPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["APO"]))) . "',";
    548. 

  548. 		$sSQL .= "ordState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["state"]))) . "',";
    549. 

  549. 		$sSQL .= "ordZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["zip"]))) . "',";
    550. 

  550. 		$sSQL .= "ordCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["country"]))) . "',";
    551. 

  551. 		$sSQL .= "ordEmail='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["email"]))) . "',";
    552. 

  552. 		$sSQL .= "ordPhone='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["phone"]))) . "',";
    553. 

  553. 		$sSQL .= "ordShipName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["sname"]))) . "',";
    554. 

  554. 		$sSQL .= "ordShipAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress"]))) . "',";
    555. 

  555. 		if(@$useaddressline2==TRUE) $sSQL .= "ordShipAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress2"]))) . "',";
    556. 

  556. 		$sSQL .= "ordShipCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["scity"]))) . "',";
    557. 

  557. 		$sSQL .= "ordShipPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ShipAPO"]))) . "',";
    558. 

  558. 		$sSQL .= "ordShipState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["sstate"]))) . "',";
    559. 

  559. 		$sSQL .= "ordShipZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["szip"]))) . "',";
    560. 

  560. 		$sSQL .= "ordShipCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["scountry"]))) . "',";
    561. 

  561. 		$sSQL .= "ordShipType='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["shipmethod"]))) . "',";
    562. 

  562. 		$sSQL .= "ordIP='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ipaddress"]))) . "',";
    563. 

  563. 		$ordComLoc = 0;
    564. 

  564. 		if(trim(@$_POST["commercialloc"])=="Y") $ordComLoc = 1;
    565. 

  565. 		if(trim(@$_POST["wantinsurance"])=="Y") $ordComLoc += 2;
    566. 

  566. 		$sSQL .= "ordComLoc=" . $ordComLoc . ",";
    567. 

  567. 		$sSQL .= "ordAffiliate='" . trim(@$_POST["PARTNER"]) . "',";
    568. 

  568. 		$sSQL .= "ordAddInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordAddInfo"]))) . "',";
    569. 

  569. 		$sSQL .= "ordStatus=" . $ordstatusnew . ",";
    570. 

  570. 		$sSQL .= "ordStatusInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordStatusInfo"]))) . "',";
    571. 

  571. 		$sSQL .= "ordReturnID=". trim(@$_POST["return_status"]) . ",";		
    572. 

  572. 		$sSQL .= "ordSupportInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordSupportInfo"]))) . "',";
    573. 

  573. 		$sSQL .= "order_changed='yes',";
    574. 

  574. 		$sSQL .= "ordDiscountText='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["discounttext"]))) . "',";
    575. 

  575. 		$sSQL .= "ordExtra1='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra1"]))) . "',";
    576. 

  576. 		$sSQL .= "ordExtra2='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra2"]))) . "',";
    577. 

  577. 		$sSQL .= "ordShipping='" . mysql_real_escape_string(trim(@$_POST["ordShipping"])) . "',";
    578. 

  578. 		$sSQL .= "ordStateTax='" . mysql_real_escape_string(trim(@$_POST["ordStateTax"])) . "',";
    579. 

  579. 		$sSQL .= "ordCountryTax='" . mysql_real_escape_string(trim(@$_POST["ordCountryTax"])) . "',";
    580. 

  580. 		if(@$canadataxsystem==TRUE) $sSQL .= "ordHSTTax='" . mysql_real_escape_string(trim(@$_POST["ordHSTTax"])) . "',";
    581. 

  581. 		$sSQL .= "ordDiscount='" . mysql_real_escape_string(trim(@$_POST["ordDiscount"])) . "',";
    582. 

  582. 		$sSQL .= "ordHandling='" . mysql_real_escape_string(trim(@$_POST["ordHandling"])) . "',";
    583. 

  583. 		$sSQL .= "ordAuthNumber='" . mysql_real_escape_string(trim(@$_POST["ordAuthNumber"])) . "',";
    584. 

  584. 		$sSQL .= "ordTransID='" . mysql_real_escape_string(trim(@$_POST["ordTransID"])) . "',";
    585. 

  585. 		$sSQL .= "ordTotal='" . mysql_real_escape_string(trim(@$_POST["ordtotal"])) . "',";
    586. 

  586. 		$sSQL .= "ord_cert_amt='" . mysql_real_escape_string(trim(@$_POST["ord_cert_amt"])) . "'";
    587. 

  587. 		$sSQL .= " WHERE ordID='" . $_POST["orderid"] . "'";
    588. 

  588. 		mysql_query($sSQL) or print(mysql_error().$sSQL);
    589. 

  589. 		
    590. 

  590. 		if(!setNewLocation( $ordstatusnew , $_POST["orderid"],'Manual' )) print("Unable to record status change.");
    591. 

  591. 		$msg='';
    592. 

  592. 		foreach($_POST as $objItem => $objValue){
    593. 

  593. 			//print $objItem . " : " . $objValue . "<br>";
    594. 

  594. 			if(substr($objItem,0,6)=="prodid"){
    595. 

  595. 				$idno = (int)substr($objItem, 6);
    596. 

  596. 				$cartid = trim(@$_POST["cartid" . $idno]);
    597. 

  597. 				$prodid = trim(@$_POST["prodid" . $idno]);
    598. 

  598. 				$quant = trim(@$_POST["quant" . $idno]);
    599. 

  599. 				$theprice = trim(@$_POST["price" . $idno]);
    600. 

  600. 				$prodname = trim(@$_POST["prodname" . $idno]);
    601. 

  601. 				$delitem = trim(@$_POST["del_" . $idno]);
    602. 

  602. 				$certID = trim(@$_POST["certID" . $idno]);
    603. 

  603. 				$reason = trim(@$_POST["reason_" . $idno]);
    604. 

  604. 				$note = trim(@$_POST["note_" . $idno]);
    605. 

  605. 				
    606. 

  606. 				if($delitem=="yes"){
    607. 

  607. 					// Added By Blake
    608. 

  608. 					// Deletes License ID and Password from downloads
    609. 

  609. 					$sql_check="SELECT p.pDownload,p.p_iscert,c.cartOrderID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    610. 

  610. 					$result_check=mysql_query($sql_check);
    611. 

  611. 					$rs_check=mysql_fetch_assoc($result_check);
    612. 

  612. 					if(!empty($rs_check["pDownload"])){
    613. 

  613. 						$sql_down="UPDATE digitaldownloads SET active=1, orderID=0 WHERE orderID=".$rs_check['cartOrderID']." AND type='".$prodid."'";
    614. 

  614. 						mysql_query($sql_down) or print(mysql_error().$sql_down);
    615. 

  615. 					}
    616. 

  616. 					//deletes gift cert
    617. 

  617. 					if($rs_check["p_iscert"]==1 && !empty($certID)){
    618. 

  618. 						$sql_cert="DELETE FROM certificates WHERE cert_id=".$certID;
    619. 

  619. 						mysql_query($sql_cert) or print(mysql_error().$sql_cert);
    620. 

  620. 					}
    621. 

  621. 					//end
    622. 

  622. 					mysql_query("DELETE FROM cart WHERE cartID=" . $cartid) or print(mysql_error());
    623. 

  623. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    624. 

  624. 					$cartid = "";
    625. 

  625. 				}elseif($cartid != ""){
    626. 

  626. 					$sSQL = "UPDATE cart SET cartProdID='" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',cartProdPrice=" . $theprice . ",cartProdName='" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',cartQuantity=" . $quant . ", cartReason=" . $reason . ", cartNote='" . $note . "' WHERE cartID=" . $cartid;
    627. 

  627. 					mysql_query($sSQL) or print(mysql_error().$sSQL);
    628. 

  628. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    629. 

  629. 					//download license ID and Password
    630. 

  630. 					$sql_check2="SELECT p.pDownload,p.p_iscert,c.cartOrderID,pID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    631. 

  631. 					$result_check2=mysql_query($sql_check2);
    632. 

  632. 					$rs_check2=mysql_fetch_assoc($result_check2);
    633. 

  633. 					if(!empty($rs_check2["pDownload"])){
    634. 

  634. 						$sql_down_check="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND orderID=".$_POST["orderid"];
    635. 

  635. 						$result_down_check=mysql_query($sql_down_check);
    636. 

  636. 						$num_rows_download_check=mysql_num_rows($result_down_check);
    637. 

  637. 						$quantdownloads=$quant-$num_rows_download_check;
    638. 

  638. 						if($quantdownloads>0){
    639. 

  639. 							$sql_down1="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND active=1 AND orderID=0 LIMIT ".$quantdownloads;
    640. 

  640. 							$result_down1=mysql_query($sql_down1);
    641. 

  641. 							$num_rows_download1=mysql_num_rows($result_down1);
    642. 

  642. 							if($num_rows_download1>0){
    643. 

  643. 								$error=FALSE;
    644. 

  644. 

  645. 								while($row_download1=mysql_fetch_assoc($result_down1)){
    646. 

  646. 									$sql_update1="UPDATE digitaldownloads SET active=0, orderID=".$_POST["orderid"]." WHERE id=".$row_download1['id'];
    647. 

  647. 									$result_update1=mysql_query($sql_update1);
    648. 

  648. 									if(!$result_update1) $error=TRUE;
    649. 

  649. 								}
    650. 

  650. 							}
    651. 

  651. 						}elseif($quantdownloads<0){
    652. 

  652. 							$thisquantdownloads=$quantdownloads;
    653. 

  653. 							while($row_down_check=mysql_fetch_assoc($result_down_check)){
    654. 

  654. 								$sql_update2="UPDATE digitaldownloads SET active=1, orderID=0 WHERE id=".$row_down_check["id"];
    655. 

  655. 								$result_update2=mysql_query($sql_update2);
    656. 

  656. 								$thisquantdownloads++;
    657. 

  657. 								if($thisquantdownloads==0) break;
    658. 

  658. 							}
    659. 

  659. 						}
    660. 

  660. 					}
    661. 

  661. 				}else{
    662. 

  662. 					$sSQL = "INSERT INTO cart (cartSessionID,cartProdID,cartQuantity,cartCompleted,cartProdName,cartProdPrice,cartOrderID,cartReason,cartDateAdded) VALUES (";
    663. 

  663. 					$sSQL .= "'" . $thesessionid . "',";
    664. 

  664. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',";
    665. 

  665. 					$sSQL .= $quant . ",";
    666. 

  666. 					$sSQL .= "1,";
    667. 

  667. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',";
    668. 

  668. 					$sSQL .= "'" . $theprice . "',";
    669. 

  669. 					$sSQL .= @$_POST["orderid"] . ",";
    670. 

  670. 					if($reason=="") $reason=0;
    671. 

  671. 					$sSQL .= $reason . ",";
    672. 

  672. 					$sSQL .= "'" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "')";
    673. 

  673. 					mysql_query($sSQL) or print(mysql_error().$sSQL);
    674. 

  674. 					$cartid = mysql_insert_id();
    675. 

  675. 					//download license ID and Password
    676. 

  676. 					$sql_check2="SELECT p.pDownload,p.p_iscert,c.cartOrderID,pID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    677. 

  677. 					$result_check2=mysql_query($sql_check2);
    678. 

  678. 					$rs_check2=mysql_fetch_assoc($result_check2);
    679. 

  679. 

  680. 					if(!empty($rs_check2["pDownload"])){
    681. 

  681. 						$sql_down1="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND active=1 AND orderID=0 LIMIT ".$quant;
    682. 

  682. 						$result_down1=mysql_query($sql_down1);
    683. 

  683. 						$num_rows_download1=mysql_num_rows($result_down1);
    684. 

  684. 						if($num_rows_download1>0){
    685. 

  685. 							$error=FALSE;
    686. 

  686. 							while($row_download1=mysql_fetch_assoc($result_down1)){
    687. 

  687. 								$sql_update1="UPDATE digitaldownloads SET active=0, orderID=".$_POST["orderid"]." WHERE id=".$row_download1['id'];
    688. 

  688. 								$result_update1=mysql_query($sql_update1);
    689. 

  689. 								if(!$result_update1) $error=TRUE;
    690. 

  690. 							}
    691. 

  691. 						} else $pg_msg= 'NO License and Password Available.';
    692. 

  692. 					}
    693. 

  693. 				}
    694. 

  694. 				if($cartid != ""){
    695. 

  695. 					$optprefix = "optn" . $idno . '_';					
    696. 

  696. 					$prefixlen = strlen($optprefix);
    697. 

  697. 					$isemailcert=FALSE;
    698. 

  698. 					foreach($_POST as $kk => $kkval){
    699. 

  699. 						if(substr($kk,0,$prefixlen)==$optprefix && trim($kkval) != ''){
    700. 

  700. 							$optidarr = split('\|', $kkval);
    701. 

  701. 							$optid = $optidarr[0];
    702. 

  702. 							if(@$_POST["v" . $kk] == ""){
    703. 

  703. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)."," . $OWSP . "optPriceDiff,optWeightDiff,optType,optFlags FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    704. 

  704. 								$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    705. 

  705. 								if($rs = mysql_fetch_array($result)){
    706. 

  706. 									if($rs["optName"]=='Email') $isemailcert=TRUE;
    707. 

  707. 									if(abs($rs["optType"]) != 3){
    708. 

  708. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string($rs[getlangid("optName",32)]) . "',";
    709. 

  709. 										$sSQL .= $optidarr[1] . ",0)";
    710. 

  710. 									}else
    711. 

  711. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','',0,0)";
    712. 

  712. 									mysql_query($sSQL) or print(mysql_error().$sSQL);
    713. 

  713. 								}
    714. 

  714. 								mysql_free_result($result);
    715. 

  715. 							}else{
    716. 

  716. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)." FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    717. 

  717. 								$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    718. 

  718. 								$rs = mysql_fetch_array($result);
    719. 

  719. 								if($rs["optName"]=='Email') $isemailcert=TRUE;
    720. 

  720. 								$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string(unstripslashes(trim(@$_POST["v" . $kk]))) . "',0,0)";
    721. 

  721. 								mysql_query($sSQL) or print(mysql_error().$sSQL);
    722. 

  722. 								mysql_free_result($result);
    723. 

  723. 							}
    724. 

  724. 							//gift cert
    725. 

  725. 							if($isemailcert){
    726. 

  726. 								$giftcertOrderID=$_POST["orderid"];
    727. 

  727. 								$_SESSION['cert_prod']=$prodid;
    728. 

  728. 								create_certificate($giftcertOrderID);
    729. 

  729. 							}
    730. 

  730. 						}
    731. 

  731. 					}
    732. 

  732. 				}
    733. 

  733. 			}			
    734. 

  734. 		}
    735. 

  735. 		//echo 'edit new='.$ordstatusnew.' '.$_POST["orderid"];
    736. 

  736. 		$ordstatusnew=$_POST["ordstatusnew"];
    737. 

  737. 		// stock manage
    738. 

  738. 		if($ordstatusnew>=3 && $ordstatusnew!=10 && $ordstatusnew!=17) {
    739. 

  739. 			mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    740. 

  740. 			do_stock_management($_POST["orderid"]); //echo 'do_stock_management 2';
    741. 

  741. 			mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    742. 

  742. 		}
    743. 

  743. ?>
    744. 

  744. 	<script language="JavaScript" type="text/javascript">
    745. 

  745. 	<!--
    746. 

  746. 	//setTimeout("history.go(-2);",1100);
    747. 

  747. 	setTimeout("window.location='/admin/orders2.php?ordid=<?=$_POST["orderid"]?>'",1100);
    748. 

  748. 	// -->
    749. 

  749. 	</script>
    750. 

  750. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    751. 

  751.         <tr>
    752. 

  752.           <td width="100%">
    753. 

  753.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    754. 

  754. 			  <tr> 
    755. 

  755.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    756. 

  756.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    757. 

  757. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    758. 

  758. 			  </tr>
    759. 

  759. 			</table>
    760. 

  760. 		  </td>
    761. 

  761. 		</tr>
    762. 

  762. 	  </table>
    763. 

  763. <?php
    764. 

  764. 	}
    765. 

  765. }elseif(@$_GET["id"] != ""){
    766. 

  766. 	$statetaxrate=0;
    767. 

  767. 	$countrytaxrate=0;
    768. 

  768. 	$hsttaxrate=0;
    769. 

  769. 	$countryorder=0;
    770. 

  770. 	$sSQL = "SELECT ordID,ordName,ordAddress,ordAddress2,ordCity,ordState,ordZip,ordCountry,ordEmail,ordPhone,ordShipName,ordShipAddress,ordShipAddress2,ordShipCity,ordShipState,ordShipZip,ordShipCountry,ordPayProvider,ordAuthNumber,ordTransID,ordTotal,ordDate,ordStateTax,ordCountryTax,ordHSTTax,ordShipping,ordShipType,ordIP,ordAffiliate,ordDiscount,ordHandling,ordDiscountText,ordComLoc,ordExtra1,ordExtra2,ordAddInfo,ordCNum,ordStatusInfo,ordSupportInfo,order_changed,ordStatus,ord_cert_amt,ord_cert_id,ordPoApo,ordShipPoApo,ordEID,ordReturnID,ordReturnReasonID FROM orders LEFT JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordID='" . $_GET["id"] . "' AND ordEID!=34";
    771. 

  771. 	//echo $sSQL;
    772. 

  772. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    773. 

  773. 	$alldata = mysql_fetch_array($result);
    774. 

  774. 	$alldata["ordDate"] = strtotime($alldata["ordDate"]);	
    775. 

  775. 	$oldordstatusedit=$alldata["ordStatus"];
    776. 

  776. 	mysql_free_result($result);
    777. 

  777. 	//all stutuses
    778. 

  778. 	$numstatus=0;
    779. 

  779. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    780. 

  780. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    781. 

  781. 	while($rs = mysql_fetch_assoc($result)){
    782. 

  782. 		$allstatus[$numstatus++]=$rs;
    783. 

  783. 	}
    784. 

  784. 	mysql_free_result($result);
    785. 

  785. ?>
    786. 

  786. 	<table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="">
    787. 

  787.         <tr>
    788. 

  788.           <td width="100%" align="center">
    789. 

  789. <?php	$themask = 'yyyy-mm-dd';
    790. 

  790. 		if($admindateformat==1)
    791. 

  791. 			$themask='mm/dd/yyyy';
    792. 

  792. 		elseif($admindateformat==2)
    793. 

  793. 			$themask='dd/mm/yyyy';
    794. 

  794. 		if(! $success) print "<p><font color='#FF0000'>" . $errmsg . "</font></p>"; ?>
    795. 

  795. 			<span name="searchspan" id="searchspan" <?php //if($usepowersearch) print 'style="display:block"'; else print 'style="display:none"'?>>
    796. 

  796.             <table width="100%" border="0" cellspacing="1" cellpadding="2" bgcolor="">
    797. 

  797. 			  <form method="post" action="/admin/orders2.php" name="psearchform">
    798. 

  798. 			  <input type="hidden" name="powersearch" value="1" />
    799. 

  799. 			  <tr bgcolor="#030133"><td colspan="6"><strong><font color="#E7EAEF">&nbsp;<?php print $yyPowSea?></font></strong></td></tr>
    800. 

  800. 			  <tr bgcolor="#E7EAEF"> 
    801. 

  801.                 <td align="right" width="15%"><strong><?php print $yyOrdFro?>:</strong></td>
    802. 

  802. 				<td width="15%" align="left" nowrap="nowrap">&nbsp;
    803. 

  803. 			    <input type="text" size="14" name="fromdate" value="<?php print $fromdate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.fromdate, '<?php print $themask?>', 0)" value='DP' /></td>
    804. 

  804. 				<td width="15%" align="right"><strong>E-tailers:</strong></td>
    805. 

  805. 				<td align="left" width="15%">
    806. 

  806. 				<select name="custID">
    807. 

  807. 				 	<option value="" <?=(empty($_POST['custID']))?' selected="selected"':''?>>None Selected</option>
    808. 

  808. 				 <? 
    809. 

  809. 				 $sql_EID="SELECT custID, Name FROM customers WHERE active=1";
    810. 

  810. 				 $result_EID=mysql_query($sql_EID);
    811. 

  811. 				 while($rs_EID=mysql_fetch_array($result_EID)){ ?>
    812. 

  812. 					  	<option value="<?=$rs_EID['custID']?>" <? if($_POST['custID']==$rs_EID['custID']) echo " selected"?>><?= str_replace('<br />',' ',$rs_EID['Name'])?></option>
    813. 

  813. 				<? } ?> 
    814. 

  814. 				 </select>				</td>
    815. 

  815. 				<td align="right" width="20%"><strong><?php print $yyOrdTil?>:</strong></td>
    816. 

  816. 				<td align="left" width="25%">&nbsp;<input type="text" size="14" name="todate" value="<?php print $todate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.todate, '<?php print $themask?>', -205)" value='DP' /></td>
    817. 

  817. 			  </tr>
    818. 

  818. 			  <tr bgcolor="#EAECEB">
    819. 

  819. 				<td align="right"><strong><?php print $yyOrdId?>:</strong></td>
    820. 

  820. 				<td align="left">&nbsp;<input type="text" size="14" name="ordid" value="<?php print $ordid?>" /></td>
    821. 

  821. 				<td align="right"><strong>PO/APOs:</strong></td>
    822. 

  822. 				<td align="left">
    823. 

  823. 					<select id="ordPOAPOs" name="ordPOAPOs">
    824. 

  824. 						<option value="none"<?=(empty($_POST['ordPOAPOs']))?' selected="selected"':''?>>None Selected</option>
    825. 

  825. 						<option value="APOs"<?=($_POST['ordPOAPOs'] == 'APOs')?' selected="selected"':''?>>APOs</option>
    826. 

  826. 						<option value="PO_APO"<?=($_POST['ordPOAPOs'] == 'PO_APO')?' selected="selected"':''?>>PO/APOs</option>
    827. 

  827. 						<option value="POs"<?=($_POST['ordPOAPOs'] == 'POs')?' selected="selected"':''?>>POs</option>
    828. 

  828. 						<option value="shipping_APOs"<?=($_POST['ordPOAPOs'] == 'shipping_APOs')?' selected="selected"':''?>>Shipping to APOs</option>
    829. 

  829. 						<option value="shipping_PO_APO"<?=($_POST['ordPOAPOs'] == 'shipping_PO_APO')?' selected="selected"':''?>>Shipping to PO/APOs</option>
    830. 

  830. 						<option value="shipping_POs"<?=($_POST['ordPOAPOs'] == 'shipping_POs')?' selected="selected"':''?>>Shipping to POs</option>
    831. 

  831. 					</select>				</td>
    832. 

  832. 				<td align="right"><strong><?php print $yySeaTxt?>:</strong></td>
    833. 

  833. 				<td align="left" valign="middle">&nbsp;
    834. 

  834. 				  <input type="text" size="24" name="searchtext" value="<?php print $origsearchtext?>" /></td>
    835. 

  835. 			  </tr>
    836. 

  836. 			  <tr bgcolor="#E7EAEF">
    837. 

  837. 				<td rowspan="2" align="right"><strong><?php print $yyOrdSta?>:</strong></td>
    838. 

  838. 				<td rowspan="2" align="left">&nbsp;<select name="ordstatus[]" size="5" multiple><option value="9999" <?php if(strpos($ordstatus,"9999") !== FALSE) print "selected"?>><?php print $yyAllSta?></option><?php
    839. 

  839. 						$ordstatus="";
    840. 

  840. 						$addcomma = "";
    841. 

  841. 						if(is_array(@$_REQUEST["ordstatus"])){
    842. 

  842. 							foreach($_REQUEST["ordstatus"] as $objValue){
    843. 

  843. 								if(is_array($objValue))$objValue=$objValue[0];
    844. 

  844. 								$ordstatus .= $addcomma . $objValue;
    845. 

  845. 								$addcomma = ",";
    846. 

  846. 							}
    847. 

  847. 						}else
    848. 

  848. 							$ordstatus = trim(@$_REQUEST["ordstatus"]);
    849. 

  849. 						$ordstatusarr = explode(",", $ordstatus);
    850. 

  850. 						for($index=0; $index < $numstatus; $index++){
    851. 

  851. 							print '<option value="' . $allstatus[$index]["statID"] . '"';
    852. 

  852. 							if(is_array($ordstatusarr)){
    853. 

  853. 								foreach($ordstatusarr as $objValue)
    854. 

  854. 									if($objValue==$allstatus[$index]["statID"]) print " selected";
    855. 

  855. 							}
    856. 

  856. 							print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    857. 

  857. 						} ?></select>				</td>
    858. 

  858. 				<td rowspan="2" align="right"><strong><?=$yyOrdCou?>:</strong></td>
    859. 

  859. 				<td rowspan="2" align="left">
    860. 

  860. 				<? $sSQL2="SELECT DISTINCT cpnID,cpnName,cpnNumber FROM orders o LEFT JOIN coupons c ON o.ordCoupon=c.cpnID WHERE ordDiscount>0 ORDER BY cpnNumber,cpnName";
    861. 

  861. 					$result2=mysql_query($sSQL2) or die(mysql_error().$sSQL2);
    862. 

  862. 					$total2=mysql_num_rows($result2);?>
    863. 

  863. 					<select name="ordcoupon" size="5" style="width:250px; font-size:10px; ">
    864. 

  864. 					 	<? while($rs2=mysql_fetch_array($result2)){ ?>
    865. 

  865. 					  	<option value="<?=$rs2['cpnID']?>" <?=$rs2['cpnNumber']==""?"":'style="font-weight:bold;"'?> <? if($ordcoupon==$rs2['cpnID']) echo " selected"?>><?=$rs2['cpnNumber']==""?"":$rs2['cpnNumber'].' | '?> <?= str_replace('<br />',' ',$rs2['cpnName'])?></option>
    866. 

  866. 						<? } ?>
    867. 

  867. 					</select>
    868. 

  868. 					<div style="font-size:9px;">Coupons are in bold</div>
    869. 

  869. 					</td>
    870. 

  870. 				<td align="right" valign="middle"><strong>Return Status:</strong></td>
    871. 

  871. 				<td align="left" valign="middle">
    872. 

  872. 						<?
    873. 

  873. 						$sql_return="SELECT * FROM returns ORDER BY status_order";
    874. 

  874. 						$result_return=mysql_query($sql_return);
    875. 

  875. 						?>
    876. 

  876. 						<select name="return_status_search">
    877. 

  877. 						  <option value="" <?php if ($_SESSION['return_status_search']=="") {echo "selected=\"selected\"";} ?>></option>
    878. 

  878. 						  <? while($row_return=mysql_fetch_assoc($result_return)){?>
    879. 

  879. 						  <option value="<?=$row_return["id"]?>" <?php if (!(strcmp($row_return["id"], $_SESSION['return_status_search']))) {echo "selected=\"selected\"";} ?>>
    880. 

  880. 						  <?=$row_return["status"]?>
    881. 

  881. 						  </option>
    882. 

  882. 						  <? } ?>
    883. 

  883. 					  </select></td>
    884. 

  884. 			  </tr>	
    885. 

  885. 			  <tr bgcolor="#E7EAEF">
    886. 

  886. 			    <td align="right" valign="top">&nbsp;</td>
    887. 

  887. 			    <td align="left">			</td>
    888. 

  888. 			    </tr>		  
    889. 

  889. 			  <tr bgcolor="#E7EAEF">
    890. 

  890. 				<td colspan="3" align="left"><input type="checkbox" name="startwith" value="1" <?php if($usepowersearch) print "checked"?> />				  <strong><?php print $yyStaPow?></strong></td>
    891. 

  891. 				<td align="left"><input type="checkbox" name="myfrogz" value="myfrogz" id="myfrogz"<?=(!empty($_POST['myfrogz'])) ? ' checked="checked"' : ''?> />&nbsp;MyFrogz Orders</td>
    892. 

  892. 				<td colspan="2" align="center">
    893. 

  893. 				  <input type="submit" val…
    894.

Large files files are truncated, but you can click here to view the full file