PageRenderTime 60ms CodeModel.GetById 18ms RepoModel.GetById 1ms app.codeStats 1ms

/application/views/pages/admin/orders.php

https://bitbucket.org/chadsaun/ifrogz-panel
PHP | 3632 lines | 3378 code | 93 blank | 161 comment | 598 complexity | 5d53a8d440d44d051d9c45bcfbb6f31a MD5 | raw file

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. include('init.php');
    3. 

  3. if (strstr($_SERVER['HTTP_HOST'], ':8888')) {
    4. 

  4. 	include_once('kohanabase/kohana.php');
    5. 

  5. } else {
    6. 

  6. 	include_once(IFZROOT.'kohana.php');
    7. 

  7. }
    8. 

  8. 

  9. if ($_POST["return_status_search"]=="")$_SESSION["return_status_search"]="";
    10. 

  10. else if ($_POST["return_status_search"]!="")$_SESSION["return_status_search"]=$_POST["return_status_search"];
    11. 

  11. //showarray($_POST);
    12. 

  12. //$_SESSION['counter']=0;
    13. 

  13. //$_SESSION['counter_id']=0;
    14. 

  14. //This code is copyright (c) Internet Business Solutions SL, all rights reserved.
    15. 

  15. //The contents of this file are protect under law as the intellectual property of Internet
    16. 

  16. //Business Solutions SL. Any use, reproduction, disclosure or copying of any kind 
    17. 

  17. //without the express and written permission of Internet Business Solutions SL is forbidden.
    18. 

  18. //Author: Vince Reid, vince@virtualred.net
    19. 

  19. include(APPPATH.'views/pages/admin/cartmisc.php');
    20. 

  20. //session_register('order_id_commas');
    21. 

  21. $lisuccess=0;
    22. 

  22. if(@$dateadjust=="") $dateadjust=0;
    23. 

  23. if(@$dateformatstr == "") $dateformatstr = "m/d/Y";
    24. 

  24. $admindatestr="Y-m-d";
    25. 

  25. if(@$admindateformat=="") $admindateformat=0;
    26. 

  26. if($admindateformat==1)
    27. 

  27. 	$admindatestr="m/d/Y";
    28. 

  28. elseif($admindateformat==2)
    29. 

  29. 	$admindatestr="d/m/Y";
    30. 

  30. if(@$storesessionvalue=="") $storesessionvalue="virtualstore".time();
    31. 

  31. if(@$_GET["doedit"]=="true") $doedit=TRUE; else $doedit=FALSE;
    32. 

  32. function editfunc($data,$col,$size){
    33. 

  33. 	global $doedit;
    34. 

  34. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . str_replace('"','&quot;',$data) . '" size="' . $size . '">'); else return($data);
    35. 

  35. }
    36. 

  36. function editnumeric($data,$col,$size){
    37. 

  37. 	global $doedit;
    38. 

  38. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . number_format($data,2,'.','') . '" size="' . $size . '">'); else return(FormatEuroCurrency($data));
    39. 

  39. }
    40. 

  40. if(@$_SESSION["loggedon"] != $storesessionvalue && trim(@$_COOKIE["WRITECKL"])!=""){
    41. 

  41. 	$config_admin = RBI_Kohana::config('database.default_admin.connection');
    42. 

  42. 

  43. 	$db_admin = mysql_connect($config['hostname'], $config['username'], $config['password']);
    44. 

  44. 	mysql_select_db($config['database']) or die ('DB Admin connection failed.</td></tr></table></body></html>');
    45. 

  45. 	$rbiSQL = 'SELECT * 
    46. 

  46. 			   FROM employee 
    47. 

  47. 			   WHERE username="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKL"]))).'" and password="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKP"]))).'"';
    48. 

  48. 	$rs_rbi = mysql_query($rbiSQL, $db_admin);
    49. 

  49. 	if(mysql_num_rows($rs_rbi) > 0) {
    50. 

  50. 		@$_SESSION["loggedon"] = $storesessionvalue;
    51. 

  51. 	}else{
    52. 

  52. 		$lisuccess=2;
    53. 

  53. 	}
    54. 

  54. 	mysql_free_result($rs_rbi);
    55. 

  55. 	
    56. 

  56. 	include(APPPATH.'views/partials/admin/dbconnection.php');
    57. 

  57. }
    58. 

  58. if(($_SESSION["loggedon"] != $storesessionvalue && $lisuccess!=2) || @$disallowlogin==TRUE) exit;
    59. 

  59. if(@$htmlemails==TRUE) $emlNl = "<br />"; else $emlNl="\n";
    60. 

  60. //old release_stock function was here
    61. 

  61. if($lisuccess==2){
    62. 

  62. ?>
    63. 

  63. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    64. 

  64.         <tr>
    65. 

  65.           <td width="100%">
    66. 

  66.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    67. 

  67. 			  <tr> 
    68. 

  68.                 <td width="100%" colspan="4" align="center"><p>&nbsp;</p><p>&nbsp;</p>
    69. 

  69. 				  <p><strong><?php print $yyOpFai?></strong></p><p>&nbsp;</p>
    70. 

  70. 				  <p><?php print $yyCorCoo?> <?php print $yyCorLI?> <a href="/admin/login.php"><?php print $yyClkHer?></a>.</p>
    71. 

  71. 				</td>
    72. 

  72. 			  </tr>
    73. 

  73. 			</table>
    74. 

  74. 		  </td>
    75. 

  75. 		</tr>
    76. 

  76. 	  </table>
    77. 

  77. <?php
    78. 

  78. }else{
    79. 

  79. $success=true;
    80. 

  80. $alreadygotadmin = getadminsettings();
    81. 

  81. if(@$_POST["updatestatus"]=="1"){
    82. 

  82. 	// updates returns and adds to history
    83. 

  83. 	$result_r=mysql_query("SELECT ordReturnID FROM orders WHERE ordID=".$_POST["orderid"]);
    84. 

  84. 	$row_r=mysql_fetch_assoc($result_r);
    85. 

  85. 	//echo $row_r["ordReturnID"]."=".$_POST["return_status"];
    86. 

  86. 	//exit;
    87. 

  87. 	if($row_r["ordReturnID"]!=$_POST["return_status"] && $_POST["return_status"]>0 ){
    88. 

  88. 		$sql_return_history="INSERT INTO order_returns_history (ordID,reasonID,returnID,date_added) 
    89. 

  89. 		VALUES(".$_POST["orderid"].",".$_POST["return_reason"].",".$_POST["return_status"].",'".date('Y-m-d H:i:s')."')";
    90. 

  90. 		//echo $sql_return_history;
    91. 

  91. 		//exit;
    92. 

  92. 		mysql_query($sql_return_history);
    93. 

  93. 	}
    94. 

  94. 	// end
    95. 

  95. 	mysql_query("UPDATE orders SET ordStatusInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordStatusInfo"]))) ."', ordSupportInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordSupportInfo"]))) . "' , ordReturnID='" . trim(@$_POST["return_status"]) . "' WHERE ordID=" . @$_POST["orderid"]) or print(mysql_error());
    96. 

  96. }elseif(@$_GET["id"] != ""){
    97. 

  97. 	// Commented out below code because we put this into a cron job
    98. 

  98. 	/*if(@$_POST["delccdets"] != ""){
    99. 

  99. 		mysql_query("UPDATE orders SET ordCNum='' WHERE ordID=" . @$_GET["id"]);
    100. 

  100. 	}*/
    101. 

  101. 	$sSQL = "SELECT c.cartProdID,c.cartProdName,c.cartProdPrice,c.cartQuantity,c.cartID,p.pDownload,p.p_iscert,d.dsName,pInStock,pSell,c.cartReason,c.cartNote FROM cart c, products p LEFT JOIN dropshipper d ON p.pDropship=d.dsID WHERE c.cartProdID=p.pID AND c.cartOrderID=" . $_GET["id"];
    102. 

  102. 	$allorders = mysql_query($sSQL) or print(mysql_error().$sSQL);
    103. 

  103. }else{
    104. 

  104. 	// Delete old uncompleted orders.
    105. 

  105. 	//   Commented out below code because we put this into a daily cron job (delcc.php)
    106. 

  106. 	/*if($delccafter != 0){
    107. 

  107. 		$sSQL = "UPDATE orders SET ordCNum='' WHERE ordDate<'" . date("Y-m-d H:i:s", time()-($delccafter*60*60*24)) . "'";
    108. 

  108. 		mysql_query($sSQL) or print(mysql_error().$sSQL);
    109. 

  109. 	}*/
    110. 

  110. 	/*if($delAfter != 0){
    111. 

  111. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-($delAfter*60*60*24)) . "'";
    112. 

  112. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    113. 

  113. 		if(mysql_num_rows($result)>0){
    114. 

  114. 			$delStr="";
    115. 

  115. 			$delOptions="";
    116. 

  116. 			$addcomma = "";
    117. 

  117. 			while($rs = mysql_fetch_assoc($result)){
    118. 

  118. 				$delStr .= $addcomma . $rs["cartOrderID"];
    119. 

  119. 				$delOptions .= $addcomma . $rs["cartID"];
    120. 

  120. 				$addcomma = ",";
    121. 

  121. 			}
    122. 

  122. 			mysql_query("DELETE FROM orders WHERE ordID IN (" . $delStr . ")") or print(mysql_error());
    123. 

  123. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    124. 

  124. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    125. 

  125. 		}
    126. 

  126. 		mysql_free_result($result);
    127. 

  127. 	}else{
    128. 

  128. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartOrderID=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    129. 

  129. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    130. 

  130. 		if(mysql_num_rows($result)>0){
    131. 

  131. 			$delStr="";
    132. 

  132. 			$delOptions="";
    133. 

  133. 			$addcomma = "";
    134. 

  134. 			while($rs = mysql_fetch_assoc($result)){
    135. 

  135. 				$delStr .= $addcomma . $rs["cartOrderID"];
    136. 

  136. 				$delOptions .= $addcomma . $rs["cartID"];
    137. 

  137. 				$addcomma = ",";
    138. 

  138. 			}
    139. 

  139. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    140. 

  140. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    141. 

  141. 		}
    142. 

  142. 		mysql_free_result($result);
    143. 

  143. 	}*/
    144. 

  144. 	$numstatus=0;
    145. 

  145. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    146. 

  146. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    147. 

  147. 	while($rs = mysql_fetch_assoc($result)){
    148. 

  148. 		$allstatus[$numstatus++]=$rs;
    149. 

  149. 	}
    150. 

  150. 	mysql_free_result($result);
    151. 

  151. }
    152. 

  152. if(@$_POST["updatestatus"]=="1"){
    153. 

  153. ?>
    154. 

  154. <script language="JavaScript" type="text/javascript">
    155. 

  155. <!--
    156. 

  156. setTimeout("history.go(-2);",1100);
    157. 

  157. // -->
    158. 

  158. </script>
    159. 

  159. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    160. 

  160.         <tr>
    161. 

  161.           <td width="100%">
    162. 

  162.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    163. 

  163. 			  <tr> 
    164. 

  164.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    165. 

  165.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    166. 

  166. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    167. 

  167. 			  </tr>
    168. 

  168. 			</table>
    169. 

  169. 		  </td>
    170. 

  170. 		</tr>
    171. 

  171. 	  </table>
    172. 

  172. <?php
    173. 

  173. }elseif(!empty($_POST["getdownload"])){
    174. 

  174. 	$sql_down="SELECT * FROM digitaldownloads WHERE type='".$_POST['downloadtype']."' AND active=1 AND orderID=0 LIMIT ".$_POST['downQty'];
    175. 

  175. 	$result_down=mysql_query($sql_down);
    176. 

  176. 	$num_rows_download=mysql_num_rows($result_down);
    177. 

  177. 	if($num_rows_download>0){
    178. 

  178. 		$error=FALSE;
    179. 

  179. 		while($row_download=mysql_fetch_assoc($result_down)){
    180. 

  180. 			$sql_update="UPDATE digitaldownloads SET active=0, orderID=".$_POST['downOrder']." WHERE id=".$row_download['id'];
    181. 

  181. 			$result_update=mysql_query($sql_update);
    182. 

  182. 			if(!$result_update) $error=TRUE;
    183. 

  183. 		}
    184. 

  184. 		if(!$error) $pg_msg= 'Update Successful.';
    185. 

  185. 		else $pg_msg= 'Update Unsuccessful.';
    186. 

  186. 	} else $pg_msg= 'NO License and Password Available.';
    187. 

  187. 	$auto_link = "/admin/orders.php?id=".$_POST['downOrder']."&doedit=true";
    188. 

  188. 	if(!$clone_error) {
    189. 

  189. 			
    190. 

  190. 		}else{
    191. 

  191. 			$auto_link = "/admin/orders.php";
    192. 

  192. 		}
    193. 

  193. 	
    194. 

  194. 	?>
    195. 

  195. 	 <script language="JavaScript" type="text/javascript">
    196. 

  196. 	<!--
    197. 

  197. 	setTimeout("window.location='/admin/orders.php?id=<?=$_POST['downOrder']?>&doedit=true'",4000);
    198. 

  198. 	// -->
    199. 

  199. 	</script>
    200. 

  200. 	 <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    201. 

  201.         <tr>
    202. 

  202.           <td width="100%">
    203. 

  203.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    204. 

  204. 			  <tr> 
    205. 

  205.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    206. 

  206.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    207. 

  207. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    208. 

  208. 			  </tr>
    209. 

  209. 			</table>
    210. 

  210. 		  </td>
    211. 

  211. 		</tr>
    212. 

  212. </table>
    213. 

  213. <? }elseif(!empty($_POST["giftcert"])){	  
    214. 

  214. 	$giftcertOrderID=$_POST["giftcertOrderID"];
    215. 

  215. 	$_SESSION['cert_prod']=$_POST["cert_prod"];
    216. 

  216. 	create_certificate($giftcertOrderID);
    217. 

  217. 	$auto_link = "/admin/orders.php?id=".$giftcertOrderID."&doedit=true";
    218. 

  218. 	$pg_msg='Update Successful.';
    219. 

  219. 	?>
    220. 

  220. 	<script language="JavaScript" type="text/javascript">
    221. 

  221. 	<!--
    222. 

  222. 	setTimeout("window.location='/admin/orders.php?id=<?=$giftcertOrderID?>&doedit=true'",4000);
    223. 

  223. 	// -->
    224. 

  224. 	</script>
    225. 

  225. 	 <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    226. 

  226.         <tr>
    227. 

  227.           <td width="100%">
    228. 

  228.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    229. 

  229. 			  <tr> 
    230. 

  230.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    231. 

  231.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    232. 

  232. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    233. 

  233. 			  </tr>
    234. 

  234. 			</table>
    235. 

  235. 		  </td>
    236. 

  236. 		</tr>
    237. 

  237. </table>
    238. 

  238. <? }elseif(@$_POST["doedit"] == "true"){
    239. 

  239. 	if(!empty($_POST['clone'])) {
    240. 

  240. 		// update old order status after editing
    241. 

  241. 		$ordstatusnew=$_POST["ordstatusnew"];
    242. 

  242. 		$ordStatusInfo=mysql_real_escape_string(trim(unstripslashes($_POST["ordStatusInfo"])));
    243. 

  243. 		$ordSupportInfo=mysql_real_escape_string(trim(unstripslashes($_POST["ordSupportInfo"])));
    244. 

  244. 		$sql_status_update="UPDATE orders SET ordStatus=".$ordstatusnew.",ordStatusInfo='".$ordStatusInfo."',ordSupportInfo='".$ordSupportInfo."' WHERE ordID=".$_POST["orderid"];
    245. 

  245. 		mysql_query($sql_status_update) or print(mysql_error().$sql_status_update);
    246. 

  246. 		if(!setNewLocation( $ordstatusnew , $_POST["orderid"],'Manual' )) print("Unable to record status change.");
    247. 

  247. 

  248. 		// stock manage
    249. 

  249. 		if($ordstatusnew>=3 && $ordstatusnew!=10 && $ordstatusnew!=17) {
    250. 

  250. 			mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    251. 

  251. 			do_stock_management($_POST["orderid"]); 
    252. 

  252. 			mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    253. 

  253. 		}
    254. 

  254. 		// GET ALL THE INFORMATION TO CLONE THE ORDER
    255. 

  255. 		//   - To clone an order we need to duplicate the order's information in the orders, cart, and cartoptions tables
    256. 

  256. 		$aNewOrder = array();
    257. 

  257. 		
    258. 

  258. 		$sql_orders = "SELECT * FROM orders WHERE ordID = " . $_POST["orderid"] ;
    259. 

  259. 		$res_orders = mysql_query($sql_orders) or print(mysql_error().$sql_orders);
    260. 

  260. 		$row_orders = mysql_fetch_assoc($res_orders);
    261. 

  261. 		$aNewOrder["orders"] = $row_orders;
    262. 

  262. 		$aNewOrder["orders"]["ordName"]=mysql_real_escape_string($row_orders["ordName"]);
    263. 

  263. 		$aNewOrder["orders"]["ordShipName"]=mysql_real_escape_string($row_orders["ordShipName"]);
    264. 

  264. 		if ($row_orders["ordShipCountry"] != "") {
    265. 

  265. 			 if ($row_orders["ordShipCountry"] == "United States of America") $aNewOrder["orders"]["ordShipType"]='Standard';
    266. 

  266. 		} else {
    267. 

  267. 			 if ($row_orders["ordCountry"] == "United States of America") $aNewOrder["orders"]["ordShipType"]='Standard';
    268. 

  268. 		}
    269. 

  269. 		
    270. 

  270. 		$sql_cart = "SELECT * FROM cart c LEFT JOIN cartoptions co ON c.cartID = co.coCartID
    271. 

  271. 					 WHERE c.cartOrderID = " . $_POST["orderid"] . "
    272. 

  272. 					 ORDER BY c.cartID, c.cartProdID";
    273. 

  273. 		
    274. 

  274. 		//echo $sql_cart; exit;
    275. 

  275. 		$res_cart = mysql_query($sql_cart) or print(mysql_error().$sql_cart);
    276. 

  276. 		$prod_id = '';
    277. 

  277. 		$i=0;
    278. 

  278. 		$j=0;
    279. 

  279. 		$isfirst = true;
    280. 

  280. 		while($row_cart = mysql_fetch_assoc($res_cart)) {
    281. 

  281. 			if($isfirst) {
    282. 

  282. 				$prod_id = $row_cart["cartProdID"];
    283. 

  283. 			}
    284. 

  284. 			if(($prod_id != $row_cart["cartProdID"]) && !$isfirst) {
    285. 

  285. 				$i++;
    286. 

  286. 				$j=0;
    287. 

  287. 				$prod_id = $row_cart["cartProdID"];
    288. 

  288. 			
    289. 

  289. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    290. 

  290. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    291. 

  291. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    292. 

  292. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    293. 

  293. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    294. 

  294. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    295. 

  295. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    296. 

  296. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    297. 

  297. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    298. 

  298. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    299. 

  299. 				
    300. 

  300. 				if(!empty($row_cart["coID"])){
    301. 

  301. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    302. 

  302. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    303. 

  303. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    304. 

  304. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    305. 

  305. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    306. 

  306. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    307. 

  307. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    308. 

  308. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    309. 

  309. 					$j++;
    310. 

  310. 				}
    311. 

  311. 			}else{
    312. 

  312. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    313. 

  313. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    314. 

  314. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    315. 

  315. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    316. 

  316. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    317. 

  317. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    318. 

  318. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    319. 

  319. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    320. 

  320. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    321. 

  321. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    322. 

  322. 				
    323. 

  323. 				if(!empty($row_cart["coID"])){
    324. 

  324. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    325. 

  325. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    326. 

  326. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    327. 

  327. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    328. 

  328. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    329. 

  329. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    330. 

  330. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    331. 

  331. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    332. 

  332. 					$j++;
    333. 

  333. 				}
    334. 

  334. 			}
    335. 

  335. 			$isfirst = false;
    336. 

  336. 		}
    337. 

  337. 		
    338. 

  338. 		//showarray($aNewOrder); exit;
    339. 

  339. 		
    340. 

  340. 		// UPDATE SOME OF THE INFORMATION FOR THE CLONED ORDER
    341. 

  341. 		$aNewOrder["orders"]["ordID"] = '';
    342. 

  342. 		$aNewOrder["orders"]["ordSessionID"] = session_id();
    343. 

  343. 		$aNewOrder["orders"]["ordAuthNumber"] = 'CLONED';
    344. 

  344. 		$aNewOrder["orders"]["ordTransID"] = 0;
    345. 

  345. 		$aNewOrder["orders"]["ordShipping"] = 0;
    346. 

  346. 		$aNewOrder["orders"]["ordStateTax"] = 0;
    347. 

  347. 		$aNewOrder["orders"]["ordCountryTax"] = 0;
    348. 

  348. 		$aNewOrder["orders"]["ordHSTTax"] = 0;
    349. 

  349. 		$aNewOrder["orders"]["ordHandling"] = 0;
    350. 

  350. 		$aNewOrder["orders"]["ordTotal"] = 0;
    351. 

  351. 		$aNewOrder["orders"]["ordDate"] = date("Y-m-d H:i:s");
    352. 

  352. 		$aNewOrder["orders"]["ordIP"] = $_SERVER['REMOTE_ADDR'];
    353. 

  353. 		$aNewOrder["orders"]["ordDiscount"] = 0;
    354. 

  354. 		$aNewOrder["orders"]["ordDiscountText"] = '';
    355. 

  355. 		$aNewOrder["orders"]["ordStatus"] = 2;
    356. 

  356. 		$aNewOrder["orders"]["ordStatusDate"] = date("Y-m-d H:i:s");
    357. 

  357. 		$aNewOrder["orders"]["ordStatusInfo"] = '';
    358. 

  358. 		$aNewOrder["orders"]["ordSupportInfo"] = '';
    359. 

  359. 		$aNewOrder["orders"]["order_changed"] = 'no';
    360. 

  360. 		
    361. 

  361. 		for($i=0; $i<count($aNewOrder["cart"]); $i++) {
    362. 

  362. 			$aNewOrder["cart"][$i]["cartSessionID"] = session_id();
    363. 

  363. 			$aNewOrder["cart"][$i]["cartDateAdded"] = date("Y-m-d H:i:s");
    364. 

  364. 		}
    365. 

  365. 		
    366. 

  366. 		//showarray($aNewOrder); exit;
    367. 

  367. 		
    368. 

  368. 		// CREATE CLONED ORDER
    369. 

  369. 		$clone_error = false;
    370. 

  370. 		$sql_cr_ord = "INSERT INTO orders ( ordSessionID , ordName , ordAddress , ordAddress2 , ordCity , ordState , 
    371. 

  371. 											ordZip , ordCountry , ordEmail , ordPhone , ordShipName , ordShipAddress , 
    372. 

  372. 											ordShipAddress2 , ordShipCity , ordShipState , ordShipZip , ordShipCountry , 
    373. 

  373. 											ordAuthNumber , ordAffiliate , ordPayProvider , ordTransID , ordShipping , 
    374. 

  374. 											ordStateTax , ordCountryTax , ordHSTTax , ordHandling , ordShipType , ordTotal , 
    375. 

  375. 											ordDate , ordIP , ordDiscount , ordDiscountText , ordExtra1 , ordExtra2 , ordAddInfo , 
    376. 

  376. 											ordCNum , ordComLoc , ordStatus , ordStatusDate , ordStatusInfo , ordPoApo , 
    377. 

  377. 											ordShipPoApo , ordHowFound , ordSupportInfo , order_changed , ordPmtMessage , 
    378. 

  378. 											ordCCType , ord_cert_id , ord_cert_amt , ordExtra3 , ordExtra4 , ordExtra5 , ordEID , 
    379. 

  379. 											ordEOrderID )
    380. 

  380. 						VALUES ( '".$aNewOrder["orders"]["ordSessionID"]."' , 
    381. 

  381. 								 '".$aNewOrder["orders"]["ordName"]."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordAddress"])."' , 
    382. 

  382. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordAddress2"])."' , '".$aNewOrder["orders"]["ordCity"]."' ,
    383. 

  383. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordState"])."' , '".$aNewOrder["orders"]["ordZip"]."' ,
    384. 

  384. 								 '".$aNewOrder["orders"]["ordCountry"]."' , '".$aNewOrder["orders"]["ordEmail"]."' , 
    385. 

  385. 								 '".$aNewOrder["orders"]["ordPhone"]."' , '".$aNewOrder["orders"]["ordShipName"]."' , 
    386. 

  386. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordShipAddress"])."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordShipAddress2"])."' ,
    387. 

  387. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordShipCity"])."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordShipState"])."' ,
    388. 

  388. 								 '".$aNewOrder["orders"]["ordShipZip"]."' , '".$aNewOrder["orders"]["ordShipCountry"]."' , 
    389. 

  389. 								 '".$aNewOrder["orders"]["ordAuthNumber"]."' , '".$aNewOrder["orders"]["ordAffiliate"]."' , 
    390. 

  390. 								 '".$aNewOrder["orders"]["ordPayProvider"]."' , '".$aNewOrder["orders"]["ordTransID"]."' , 
    391. 

  391. 								 '".$aNewOrder["orders"]["ordShipping"]."' , '".$aNewOrder["orders"]["ordStateTax"]."' , 
    392. 

  392. 								 '".$aNewOrder["orders"]["ordCountryTax"]."' , '".$aNewOrder["orders"]["ordHSTTax"]."' , 
    393. 

  393. 								 '".$aNewOrder["orders"]["ordHandling"]."' , '".$aNewOrder["orders"]["ordShipType"]."' , 
    394. 

  394. 								 '".$aNewOrder["orders"]["ordTotal"]."' , '".$aNewOrder["orders"]["ordDate"]."' , 
    395. 

  395. 								 '".$aNewOrder["orders"]["ordIP"]."' , '".$aNewOrder["orders"]["ordDiscount"]."' , 
    396. 

  396. 								 '".$aNewOrder["orders"]["ordDiscountText"]."' , '".$aNewOrder["orders"]["ordExtra1"]."' , 
    397. 

  397. 								 '".$aNewOrder["orders"]["ordExtra2"]."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordAddInfo"])."' , 
    398. 

  398. 								 '".$aNewOrder["orders"]["ordCNum"]."' , '".$aNewOrder["orders"]["ordComLoc"]."' , 
    399. 

  399. 								 '".$aNewOrder["orders"]["ordStatus"]."' , '".$aNewOrder["orders"]["ordStatusDate"]."' , 
    400. 

  400. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordStatusInfo"])."' , '".$aNewOrder["orders"]["ordPoApo"]."' , 
    401. 

  401. 								 '".$aNewOrder["orders"]["ordShipPoApo"]."' , '".$aNewOrder["orders"]["ordHowFound"]."' , 
    402. 

  402. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordSupportInfo"])."' , '".$aNewOrder["orders"]["order_changed"]."' , 
    403. 

  403. 								 '".$aNewOrder["orders"]["ordPmtMessage"]."' , '".$aNewOrder["orders"]["ordCCType"]."' , 
    404. 

  404. 								 '".$aNewOrder["orders"]["ord_cert_id"]."' , '".$aNewOrder["orders"]["ord_cert_amt"]."' , 
    405. 

  405. 								 '".$aNewOrder["orders"]["ordExtra3"]."' , '".$aNewOrder["orders"]["ordExtra4"]."' , 
    406. 

  406. 								 '".$aNewOrder["orders"]["ordExtra5"]."' , '".$aNewOrder["orders"]["ordEID"]."' , 
    407. 

  407. 								 '".$aNewOrder["orders"]["ordEOrderID"]."' )";
    408. 

  408. 		//echo $sql_cr_ord; //exit;
    409. 

  409. 		$res_cr_ord = mysql_query($sql_cr_ord);
    410. 

  410. 		if(!$res_cr_ord) {
    411. 

  411. 			print(mysql_error().$sql_cr_ord);
    412. 

  412. 			$clone_error = true;
    413. 

  413. 		}
    414. 

  414. 		$ordID = mysql_insert_id();
    415. 

  415. 		$aNewOrder["orders"]["ordID"] = $ordID;
    416. 

  416. 		//showarray($aNewOrder);
    417. 

  417. 		if(!$clone_error) {
    418. 

  418. 			for($i=0; $i<count($aNewOrder["cart"]); $i++) {	
    419. 

  419. 				$aNewOrder["cart"][$i]["cartOrderID"] = $ordID;
    420. 

  420. 				$sql_cr_cart = "INSERT INTO cart ( cartSessionID , cartProdID , cartProdName , cartProdPrice , cartDateAdded , 
    421. 

  421. 												   cartQuantity , cartOrderID , cartCompleted )
    422. 

  422. 								VALUES ( '".session_id()."' , '".$aNewOrder["cart"][$i]["cartProdID"]."' , 
    423. 

  423. 										 '".$aNewOrder["cart"][$i]["cartProdName"]."' , '".$aNewOrder["cart"][$i]["cartProdPrice"]."' , 
    424. 

  424. 										 '".date("Y-m-d H:i:s")."' , '".$aNewOrder["cart"][$i]["cartQuantity"]."' , 
    425. 

  425. 										 '".$aNewOrder["cart"][$i]["cartOrderID"]."' , 1 )";
    426. 

  426. 				//echo $sql_cr_cart; //exit;
    427. 

  427. 				$res_cr_cart = mysql_query($sql_cr_cart) or print(mysql_error().$sql_cr_cart);
    428. 

  428. 				$cart_id = mysql_insert_id();
    429. 

  429. 				$aNewOrder["cart"][$i]["cartID"] = $cart_id;
    430. 

  430. 				
    431. 

  431. 				for($j=0; $j<count($aNewOrder["cart"][$i]["cartoptions"]); $j++) {
    432. 

  432. 					$sql_cr_cartoptions = "INSERT INTO cartoptions ( coCartID , coOptID , coOptGroup , coCartOption , coPriceDiff , 
    433. 

  433. 																	 coWeightDiff , coExtendShipping )
    434. 

  434. 										   VALUES ( ".$aNewOrder["cart"][$i]["cartID"]." , 
    435. 

  435. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"]." , 
    436. 

  436. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"]."' , 
    437. 

  437. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"]."' , 
    438. 

  438. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"]." , 
    439. 

  439. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"]." , 
    440. 

  440. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"]."' )";
    441. 

  441. 					//echo $sql_cr_cartoptions; //exit;
    442. 

  442. 					$res_cr_cartoptions = mysql_query($sql_cr_cartoptions) or print(mysql_error().$sql_cr_cartoptions);
    443. 

  443. 				}
    444. 

  444. 			}
    445. 

  445. 			//exit;
    446. 

  446. 			// UPDATE INVENTORY
    447. 

  447. 			$sSQL="SELECT cartID,cartProdID,cartQuantity,pSell FROM cart INNER JOIN products ON cart.cartProdID=products.pID WHERE cartOrderID='" . $ordID . "'";
    448. 

  448. 			$result1 = mysql_query($sSQL) or print(mysql_error().$sSQL);
    449. 

  449. 			while($rs1 = mysql_fetch_array($result1)){
    450. 

  450. 				if(($rs1["pSell"] & 2) == 2){
    451. 

  451. 					// Determine extended shipping
    452. 

  452. 					$sSQL2 = "SELECT coID,optStock,cartQuantity,coOptID,optExtend_shipping,optMin FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2";
    453. 

  453. 					// ADDED by Chad - Fix to allow quantity change for custom screenz
    454. 

  454. 					//if(eregi("^[a-z]{1,3}-Custom$",$pID)) {
    455. 

  455. 					if(preg_match("/^[a-z]{1,3}-Custom$/i",$pID)) {
    456. 

  456. 						$sSQL2 .= " OR optType=3";
    457. 

  457. 					}
    458. 

  458. 					// ADD ENDED
    459. 

  459. 					$sSQL2 .= ") AND cartID='" . $rs1['cartID'] . "'";
    460. 

  460. 					$result2 = mysql_query($sSQL2) or print(mysql_error().$sSQL2);
    461. 

  461. 					if(mysql_num_rows($result2)>0){
    462. 

  462. 						while($rs2 = mysql_fetch_assoc($result2)){
    463. 

  463. 							$pInStock = (int)$rs2["optStock"]+1000;
    464. 

  464. 							$actualpInStock = (int)$rs2["optStock"];
    465. 

  465. 							$extend_shipping = $rs2["optExtend_shipping"];//extends shipping time, displayed in the cart
    466. 

  466. 							$min = $rs2["optMin"];//sets how many in stock above zero the extend_shipping is displayed in the cart 
    467. 

  467. 							$coID = $rs2["coID"];
    468. 

  468. 							$totQuant = 0;
    469. 

  469. 							$cartQuantity = (int)$rs2["cartQuantity"];
    470. 

  470. 							$sSQL3 = "SELECT SUM(cartQuantity) AS cartQuant FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID WHERE cartCompleted=0 AND cartCustID=0 AND coOptID=" . $rs2["coOptID"];
    471. 

  471. 							$result3 = mysql_query($sSQL3) or print(mysql_error().$sSQL3);
    472. 

  472. 							if($rs3 = mysql_fetch_assoc($result3))
    473. 

  473. 								if(! is_null($rs3["cartQuant"])) $totQuant = (int)$rs3["cartQuant"];
    474. 

  474. 							mysql_free_result($result3);
    475. 

  475. 							$extend='';
    476. 

  476. 							//echo '<div style"position:absolute; z-index:100;>actual='.$actualpInStock.' total qty='.$totQuant. ' cart qty='.$cartQuantity.' min='. $min. ' new qty='.abs((int)$objValue).'</div>';
    477. 

  477. 							if(($actualpInStock - $totQuant + $cartQuantity - $min) < 0) {
    478. 

  478. 								$extend = $extend_shipping;
    479. 

  479. 							}
    480. 

  480. 							$sql_co="UPDATE cartoptions SET coExtendShipping='$extend' WHERE coID=".$coID;
    481. 

  481. 								mysql_query($sql_co);
    482. 

  482. 						}
    483. 

  483. 					}
    484. 

  484. 					// End of Determine extended shipping
    485. 

  485. 					// Inventory get subtracted when set to authorized
    486. 

  486. 					/*$sSQL = "SELECT coOptID FROM cartoptions INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2) AND coCartID=" . $rs1["cartID"];
    487. 

  487. 					$result2 = mysql_query($sSQL) or print(mysql_error());
    488. 

  488. 					while($rs2 = mysql_fetch_array($result2)){
    489. 

  489. 						$sSQL = "UPDATE options SET optStock=optStock-" . $rs1["cartQuantity"] . " WHERE optID=" . $rs2["coOptID"];
    490. 

  490. 						mysql_query($sSQL) or print(mysql_error());
    491. 

  491. 					}
    492. 

  492. 					mysql_free_result($result2);*/
    493. 

  493. 				//}else{
    494. 

  494. 					//$sSQL = "UPDATE products SET pInStock=pInStock-" . $rs1["cartQuantity"] . " WHERE pID='" . $rs1["cartProdID"] . "'";
    495. 

  495. 					//mysql_query($sSQL) or print(mysql_error());
    496. 

  496. 				}
    497. 

  497. 			}
    498. 

  498. 			mysql_free_result($result1);
    499. 

  499. 					
    500. 

  500. 			// INSERT LOCATION
    501. 

  501. 			setNewLocation(2,$ordID,'Manual');
    502. 

  502. 			$sql_insert="INSERT INTO orderssplit (orgOrder,newOrder,movedCardIDs,splitType) VALUES (".$_POST["orderid"].",".$ordID.",'','Cloned')";
    503. 

  503. 			$result_insert = mysql_query($sql_insert);
    504. 

  504. 			if(!$result_insert) {print(mysql_error().$sql_insert);exit;}
    505. 

  505. 		}
    506. 

  506. 		
    507. 

  507. 		if($clone_error) {
    508. 

  508. 			$pg_msg = "There was a problem cloning your order.";
    509. 

  509. 		}else{
    510. 

  510. 			$pg_msg = "Your order has been cloned successfully.";
    511. 

  511. ?>
    512. 

  512. <script language="JavaScript" type="text/javascript">
    513. 

  513. <!--
    514. 

  514. //setTimeout("history.go(-2);",1100);
    515. 

  515. setTimeout("window.location='/admin/orders.php?id=<?=$ordID?>&doedit=true'",4000);
    516. 

  516. // -->
    517. 

  517. </script>
    518. 

  518. <?php
    519. 

  519. 		}
    520. 

  520. 		
    521. 

  521. 		if(!$clone_error) {
    522. 

  522. 			$auto_link = "/admin/orders.php?id=$ordID&doedit=true";
    523. 

  523. 		}else{
    524. 

  524. 			$auto_link = "/admin/orders.php";
    525. 

  525. 		}
    526. 

  526. ?>
    527. 

  527. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    528. 

  528.         <tr>
    529. 

  529.           <td width="100%">
    530. 

  530.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    531. 

  531. 			  <tr> 
    532. 

  532.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    533. 

  533.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    534. 

  534. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    535. 

  535. 			  </tr>
    536. 

  536. 			</table>
    537. 

  537. 		  </td>
    538. 

  538. 		</tr>
    539. 

  539. 	  </table>
    540. 

  540. <?php
    541. 

  541. 	}else{
    542. 

  542. 		$OWSP = "";
    543. 

  543. 		$sSQL = "SELECT ordSessionID FROM orders WHERE ordID='" . $_POST["orderid"] . "'";
    544. 

  544. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    545. 

  545. 		$rs = mysql_fetch_array($result);
    546. 

  546. 		$thesessionid = $rs["ordSessionID"];
    547. 

  547. 		mysql_free_result($result);
    548. 

  548. 		$sSQL = "UPDATE orders SET ";
    549. 

  549. 		$sSQL .= "ordName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["name"]))) . "',";
    550. 

  550. 		$sSQL .= "ordAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address"]))) . "',";
    551. 

  551. 		if(@$useaddressline2==TRUE) $sSQL .= "ordAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address2"]))) . "',";
    552. 

  552. 		$sSQL .= "ordCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["city"]))) . "',";
    553. 

  553. 		$sSQL .= "ordPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["APO"]))) . "',";
    554. 

  554. 		$sSQL .= "ordState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["state"]))) . "',";
    555. 

  555. 		$sSQL .= "ordZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["zip"]))) . "',";
    556. 

  556. 		$sSQL .= "ordCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["country"]))) . "',";
    557. 

  557. 		$sSQL .= "ordEmail='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["email"]))) . "',";
    558. 

  558. 		$sSQL .= "ordPhone='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["phone"]))) . "',";
    559. 

  559. 		$sSQL .= "ordShipName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["sname"]))) . "',";
    560. 

  560. 		$sSQL .= "ordShipAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress"]))) . "',";
    561. 

  561. 		if(@$useaddressline2==TRUE) $sSQL .= "ordShipAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress2"]))) . "',";
    562. 

  562. 		$sSQL .= "ordShipCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["scity"]))) . "',";
    563. 

  563. 		$sSQL .= "ordShipPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ShipAPO"]))) . "',";
    564. 

  564. 		$sSQL .= "ordShipState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["sstate"]))) . "',";
    565. 

  565. 		$sSQL .= "ordShipZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["szip"]))) . "',";
    566. 

  566. 		$sSQL .= "ordShipCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["scountry"]))) . "',";
    567. 

  567. 		$sSQL .= "ordShipType='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["shipmethod"]))) . "',";
    568. 

  568. 		$sSQL .= "ordIP='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ipaddress"]))) . "',";
    569. 

  569. 		$ordComLoc = 0;
    570. 

  570. 		if(trim(@$_POST["commercialloc"])=="Y") $ordComLoc = 1;
    571. 

  571. 		if(trim(@$_POST["wantinsurance"])=="Y") $ordComLoc += 2;
    572. 

  572. 		$sSQL .= "ordComLoc=" . $ordComLoc . ",";
    573. 

  573. 		$sSQL .= "ordAffiliate='" . trim(@$_POST["PARTNER"]) . "',";
    574. 

  574. 		$sSQL .= "ordAddInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordAddInfo"]))) . "',";
    575. 

  575. 		$sSQL .= "ordStatus=" . $ordstatusnew . ",";
    576. 

  576. 		$sSQL .= "ordStatusInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordStatusInfo"]))) . "',";
    577. 

  577. 		$sSQL .= "ordReturnID=". trim(@$_POST["return_status"]) . ",";		
    578. 

  578. 		$sSQL .= "ordSupportInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordSupportInfo"]))) . "',";
    579. 

  579. 		$sSQL .= "order_changed='yes',";
    580. 

  580. 		$sSQL .= "ordDiscountText='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["discounttext"]))) . "',";
    581. 

  581. 		$sSQL .= "ordExtra1='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra1"]))) . "',";
    582. 

  582. 		$sSQL .= "ordExtra2='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra2"]))) . "',";
    583. 

  583. 		$sSQL .= "ordShipping='" . mysql_real_escape_string(trim(@$_POST["ordShipping"])) . "',";
    584. 

  584. 		$sSQL .= "ordStateTax='" . mysql_real_escape_string(trim(@$_POST["ordStateTax"])) . "',";
    585. 

  585. 		$sSQL .= "ordCountryTax='" . mysql_real_escape_string(trim(@$_POST["ordCountryTax"])) . "',";
    586. 

  586. 		if(@$canadataxsystem==TRUE) $sSQL .= "ordHSTTax='" . mysql_real_escape_string(trim(@$_POST["ordHSTTax"])) . "',";
    587. 

  587. 		$sSQL .= "ordDiscount='" . mysql_real_escape_string(trim(@$_POST["ordDiscount"])) . "',";
    588. 

  588. 		$sSQL .= "ordHandling='" . mysql_real_escape_string(trim(@$_POST["ordHandling"])) . "',";
    589. 

  589. 		$sSQL .= "ordAuthNumber='" . mysql_real_escape_string(trim(@$_POST["ordAuthNumber"])) . "',";
    590. 

  590. 		$sSQL .= "ordTransID='" . mysql_real_escape_string(trim(@$_POST["ordTransID"])) . "',";
    591. 

  591. 		$sSQL .= "ordTotal='" . mysql_real_escape_string(trim(@$_POST["ordtotal"])) . "',";
    592. 

  592. 		$sSQL .= "ord_cert_amt='" . mysql_real_escape_string(trim(@$_POST["ord_cert_amt"])) . "'";
    593. 

  593. 		$sSQL .= " WHERE ordID='" . $_POST["orderid"] . "'";
    594. 

  594. 		mysql_query($sSQL) or print(mysql_error().$sSQL);
    595. 

  595. 		
    596. 

  596. 		if(!setNewLocation( $ordstatusnew , $_POST["orderid"],'Manual' )) print("Unable to record status change.");
    597. 

  597. 		$msg='';
    598. 

  598. 		foreach($_POST as $objItem => $objValue){
    599. 

  599. 			//print $objItem . " : " . $objValue . "<br>";
    600. 

  600. 			if(substr($objItem,0,6)=="prodid"){
    601. 

  601. 				$idno = (int)substr($objItem, 6);
    602. 

  602. 				$cartid = trim(@$_POST["cartid" . $idno]);
    603. 

  603. 				$prodid = trim(@$_POST["prodid" . $idno]);
    604. 

  604. 				$quant = trim(@$_POST["quant" . $idno]);
    605. 

  605. 				$theprice = trim(@$_POST["price" . $idno]);
    606. 

  606. 				$prodname = trim(@$_POST["prodname" . $idno]);
    607. 

  607. 				$delitem = trim(@$_POST["del_" . $idno]);
    608. 

  608. 				$certID = trim(@$_POST["certID" . $idno]);
    609. 

  609. 				$reason = trim(@$_POST["reason_" . $idno]);
    610. 

  610. 				$note = trim(@$_POST["note_" . $idno]);
    611. 

  611. 				
    612. 

  612. 				if($delitem=="yes"){
    613. 

  613. 					// Added By Blake
    614. 

  614. 					// Deletes License ID and Password from downloads
    615. 

  615. 					$sql_check="SELECT p.pDownload,p.p_iscert,c.cartOrderID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    616. 

  616. 					$result_check=mysql_query($sql_check);
    617. 

  617. 					$rs_check=mysql_fetch_assoc($result_check);
    618. 

  618. 					if(!empty($rs_check["pDownload"])){
    619. 

  619. 						$sql_down="UPDATE digitaldownloads SET active=1, orderID=0 WHERE orderID=".$rs_check['cartOrderID']." AND type='".$prodid."'";
    620. 

  620. 						mysql_query($sql_down) or print(mysql_error().$sql_down);
    621. 

  621. 					}
    622. 

  622. 					//deletes gift cert
    623. 

  623. 					if($rs_check["p_iscert"]==1 && !empty($certID)){
    624. 

  624. 						$sql_cert="DELETE FROM certificates WHERE cert_id=".$certID;
    625. 

  625. 						mysql_query($sql_cert) or print(mysql_error().$sql_cert);
    626. 

  626. 					}
    627. 

  627. 					//end
    628. 

  628. 					mysql_query("DELETE FROM cart WHERE cartID=" . $cartid) or print(mysql_error());
    629. 

  629. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    630. 

  630. 					$cartid = "";
    631. 

  631. 				}elseif($cartid != ""){
    632. 

  632. 					$sSQL = "UPDATE cart SET cartProdID='" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',cartProdPrice=" . $theprice . ",cartProdName='" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',cartQuantity=" . $quant . ", cartReason=" . $reason . ", cartNote='" . $note . "' WHERE cartID=" . $cartid;
    633. 

  633. 					mysql_query($sSQL) or print(mysql_error().$sSQL);
    634. 

  634. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    635. 

  635. 					//download license ID and Password
    636. 

  636. 					$sql_check2="SELECT p.pDownload,p.p_iscert,c.cartOrderID,pID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    637. 

  637. 					$result_check2=mysql_query($sql_check2);
    638. 

  638. 					$rs_check2=mysql_fetch_assoc($result_check2);
    639. 

  639. 					if(!empty($rs_check2["pDownload"])){
    640. 

  640. 						$sql_down_check="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND orderID=".$_POST["orderid"];
    641. 

  641. 						$result_down_check=mysql_query($sql_down_check);
    642. 

  642. 						$num_rows_download_check=mysql_num_rows($result_down_check);
    643. 

  643. 						$quantdownloads=$quant-$num_rows_download_check;
    644. 

  644. 						if($quantdownloads>0){
    645. 

  645. 							$sql_down1="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND active=1 AND orderID=0 LIMIT ".$quantdownloads;
    646. 

  646. 							$result_down1=mysql_query($sql_down1);
    647. 

  647. 							$num_rows_download1=mysql_num_rows($result_down1);
    648. 

  648. 							if($num_rows_download1>0){
    649. 

  649. 								$error=FALSE;
    650. 

  650. 

  651. 								while($row_download1=mysql_fetch_assoc($result_down1)){
    652. 

  652. 									$sql_update1="UPDATE digitaldownloads SET active=0, orderID=".$_POST["orderid"]." WHERE id=".$row_download1['id'];
    653. 

  653. 									$result_update1=mysql_query($sql_update1);
    654. 

  654. 									if(!$result_update1) $error=TRUE;
    655. 

  655. 								}
    656. 

  656. 							}
    657. 

  657. 						}elseif($quantdownloads<0){
    658. 

  658. 							$thisquantdownloads=$quantdownloads;
    659. 

  659. 							while($row_down_check=mysql_fetch_assoc($result_down_check)){
    660. 

  660. 								$sql_update2="UPDATE digitaldownloads SET active=1, orderID=0 WHERE id=".$row_down_check["id"];
    661. 

  661. 								$result_update2=mysql_query($sql_update2);
    662. 

  662. 								$thisquantdownloads++;
    663. 

  663. 								if($thisquantdownloads==0) break;
    664. 

  664. 							}
    665. 

  665. 						}
    666. 

  666. 					}
    667. 

  667. 				}else{
    668. 

  668. 					$sSQL = "INSERT INTO cart (cartSessionID,cartProdID,cartQuantity,cartCompleted,cartProdName,cartProdPrice,cartOrderID,cartReason,cartDateAdded) VALUES (";
    669. 

  669. 					$sSQL .= "'" . $thesessionid . "',";
    670. 

  670. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',";
    671. 

  671. 					$sSQL .= $quant . ",";
    672. 

  672. 					$sSQL .= "1,";
    673. 

  673. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',";
    674. 

  674. 					$sSQL .= "'" . $theprice . "',";
    675. 

  675. 					$sSQL .= @$_POST["orderid"] . ",";
    676. 

  676. 					if($reason=="") $reason=0;
    677. 

  677. 					$sSQL .= $reason . ",";
    678. 

  678. 					$sSQL .= "'" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "')";
    679. 

  679. 					mysql_query($sSQL) or print(mysql_error().$sSQL);
    680. 

  680. 					$cartid = mysql_insert_id();
    681. 

  681. 					//download license ID and Password
    682. 

  682. 					$sql_check2="SELECT p.pDownload,p.p_iscert,c.cartOrderID,pID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    683. 

  683. 					$result_check2=mysql_query($sql_check2);
    684. 

  684. 					$rs_check2=mysql_fetch_assoc($result_check2);
    685. 

  685. 

  686. 					if(!empty($rs_check2["pDownload"])){
    687. 

  687. 						$sql_down1="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND active=1 AND orderID=0 LIMIT ".$quant;
    688. 

  688. 						$result_down1=mysql_query($sql_down1);
    689. 

  689. 						$num_rows_download1=mysql_num_rows($result_down1);
    690. 

  690. 						if($num_rows_download1>0){
    691. 

  691. 							$error=FALSE;
    692. 

  692. 							while($row_download1=mysql_fetch_assoc($result_down1)){
    693. 

  693. 								$sql_update1="UPDATE digitaldownloads SET active=0, orderID=".$_POST["orderid"]." WHERE id=".$row_download1['id'];
    694. 

  694. 								$result_update1=mysql_query($sql_update1);
    695. 

  695. 								if(!$result_update1) $error=TRUE;
    696. 

  696. 							}
    697. 

  697. 						} else $pg_msg= 'NO License and Password Available.';
    698. 

  698. 					}
    699. 

  699. 				}
    700. 

  700. 				if($cartid != ""){
    701. 

  701. 					$optprefix = "optn" . $idno . '_';					
    702. 

  702. 					$prefixlen = strlen($optprefix);
    703. 

  703. 					$isemailcert=FALSE;
    704. 

  704. 					foreach($_POST as $kk => $kkval){
    705. 

  705. 						if(substr($kk,0,$prefixlen)==$optprefix && trim($kkval) != ''){
    706. 

  706. 							$optidarr = explode('|', $kkval);
    707. 

  707. 							$optid = $optidarr[0];
    708. 

  708. 							if(@$_POST["v" . $kk] == ""){
    709. 

  709. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)."," . $OWSP . "optPriceDiff,optWeightDiff,optType,optFlags FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    710. 

  710. 								$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    711. 

  711. 								if($rs = mysql_fetch_array($result)){
    712. 

  712. 									if($rs["optName"]=='Email') $isemailcert=TRUE;
    713. 

  713. 									if(abs($rs["optType"]) != 3){
    714. 

  714. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string($rs[getlangid("optName",32)]) . "',";
    715. 

  715. 										$sSQL .= $optidarr[1] . ",0)";
    716. 

  716. 									}else
    717. 

  717. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','',0,0)";
    718. 

  718. 									mysql_query($sSQL) or print(mysql_error().$sSQL);
    719. 

  719. 								}
    720. 

  720. 								mysql_free_result($result);
    721. 

  721. 							}else{
    722. 

  722. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)." FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    723. 

  723. 								$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    724. 

  724. 								$rs = mysql_fetch_array($result);
    725. 

  725. 								if($rs["optName"]=='Email') $isemailcert=TRUE;
    726. 

  726. 								$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string(unstripslashes(trim(@$_POST["v" . $kk]))) . "',0,0)";
    727. 

  727. 								mysql_query($sSQL) or print(mysql_error().$sSQL);
    728. 

  728. 								mysql_free_result($result);
    729. 

  729. 							}
    730. 

  730. 							//gift cert
    731. 

  731. 							if($isemailcert){
    732. 

  732. 								$giftcertOrderID=$_POST["orderid"];
    733. 

  733. 								$_SESSION['cert_prod']=$prodid;
    734. 

  734. 								create_certificate($giftcertOrderID);
    735. 

  735. 							}
    736. 

  736. 						}
    737. 

  737. 					}
    738. 

  738. 				}
    739. 

  739. 			}			
    740. 

  740. 		}
    741. 

  741. 		//echo 'edit new='.$ordstatusnew.' '.$_POST["orderid"];
    742. 

  742. 		$ordstatusnew=$_POST["ordstatusnew"];
    743. 

  743. 		// stock manage
    744. 

  744. 		if($ordstatusnew>=3 && $ordstatusnew!=10 && $ordstatusnew!=17) {
    745. 

  745. 			mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    746. 

  746. 			do_stock_management($_POST["orderid"]); //echo 'do_stock_management 2';
    747. 

  747. 			mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    748. 

  748. 		}
    749. 

  749. ?>
    750. 

  750. 	<script language="JavaScript" type="text/javascript">
    751. 

  751. 	<!--
    752. 

  752. 	//setTimeout("history.go(-2);",1100);
    753. 

  753. 	setTimeout("window.location='/admin/orders.php?ordid=<?=$_POST["orderid"]?>'",1100);
    754. 

  754. 	// -->
    755. 

  755. 	</script>
    756. 

  756. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    757. 

  757.         <tr>
    758. 

  758.           <td width="100%">
    759. 

  759.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    760. 

  760. 			  <tr> 
    761. 

  761.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    762. 

  762.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    763. 

  763. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    764. 

  764. 			  </tr>
    765. 

  765. 			</table>
    766. 

  766. 		  </td>
    767. 

  767. 		</tr>
    768. 

  768. 	  </table>
    769. 

  769. <?php
    770. 

  770. 	}
    771. 

  771. }elseif(@$_GET["id"] != ""){
    772. 

  772. 	$statetaxrate=0;
    773. 

  773. 	$countrytaxrate=0;
    774. 

  774. 	$hsttaxrate=0;
    775. 

  775. 	$countryorder=0;
    776. 

  776. 	$sSQL = "SELECT ordID,ordName,ordAddress,ordAddress2,ordCity,ordState,ordZip,ordCountry,ordEmail,ordPhone,ordShipName,ordShipAddress,ordShipAddress2,ordShipCity,ordShipState,ordShipZip,ordShipCountry,ordPayProvider,ordAuthNumber,ordTransID,ordTotal,ordDate,ordStateTax,ordCountryTax,ordHSTTax,ordShipping,ordShipType,ordIP,ordAffiliate,ordDiscount,ordHandling,ordDiscountText,ordComLoc,ordExtra1,ordExtra2,ordAddInfo,ordCNum,ordStatusInfo,ordSupportInfo,order_changed,ordStatus,ord_cert_amt,ord_cert_id,ordPoApo,ordShipPoApo,ordEID,ordReturnID,ordReturnReasonID FROM orders LEFT JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordID='" . $_GET["id"] . "' AND ordEID!=34";
    777. 

  777. 	//echo $sSQL;
    778. 

  778. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    779. 

  779. 	$alldata = mysql_fetch_array($result);
    780. 

  780. 	$alldata["ordDate"] = strtotime($alldata["ordDate"]);	
    781. 

  781. 	$oldordstatusedit=$alldata["ordStatus"];
    782. 

  782. 	mysql_free_result($result);
    783. 

  783. 	//all stutuses
    784. 

  784. 	$numstatus=0;
    785. 

  785. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    786. 

  786. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    787. 

  787. 	while($rs = mysql_fetch_assoc($result)){
    788. 

  788. 		$allstatus[$numstatus++]=$rs;
    789. 

  789. 	}
    790. 

  790. 	mysql_free_result($result);
    791. 

  791. ?>
    792. 

  792. 	<table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="">
    793. 

  793.         <tr>
    794. 

  794.           <td width="100%" align="center">
    795. 

  795. <?php	$themask = 'yyyy-mm-dd';
    796. 

  796. 		if($admindateformat==1)
    797. 

  797. 			$themask='mm/dd/yyyy';
    798. 

  798. 		elseif($admindateformat==2)
    799. 

  799. 			$themask='dd/mm/yyyy';
    800. 

  800. 		if(! $success) print "<p><font color='#FF0000'>" . $errmsg . "</font></p>"; ?>
    801. 

  801. 			<span name="searchspan" id="searchspan" <?php //if($usepowersearch) print 'style="display:block"'; else print 'style="display:none"'?>>
    802. 

  802.             <table width="100%" border="0" cellspacing="1" cellpadding="2" bgcolor="">
    803. 

  803. 			  <form method="post" action="/admin/orders.php" name="psearchform">
    804. 

  804. 			  <input type="hidden" name="powersearch" value="1" />
    805. 

  805. 			  <tr bgcolor="#030133"><td colspan="6"><strong><font color="#E7EAEF">&nbsp;<?php print $yyPowSea?></font></strong></td></tr>
    806. 

  806. 			  <tr bgcolor="#E7EAEF"> 
    807. 

  807.                 <td align="right" width="15%"><strong><?php print $yyOrdFro?>:</strong></td>
    808. 

  808. 				<td width="15%" align="left" nowrap="nowrap">&nbsp;
    809. 

  809. 			    <input type="text" size="14" name="fromdate" value="<?php print $fromdate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.fromdate, '<?php print $themask?>', 0)" value='DP' /></td>
    810. 

  810. 				<td width="15%" align="right"><strong>E-tailers:</strong></td>
    811. 

  811. 				<td align="left" width="15%">
    812. 

  812. 				<select name="custID">
    813. 

  813. 				 	<option value="" <?=(empty($_POST['custID']))?' selected="selected"':''?>>None Selected</option>
    814. 

  814. 				 <? 
    815. 

  815. 				 $sql_EID="SELECT custID, Name FROM customers WHERE active=1";
    816. 

  816. 				 $result_EID=mysql_query($sql_EID);
    817. 

  817. 				 while($rs_EID=mysql_fetch_array($result_EID)){ ?>
    818. 

  818. 					  	<option value="<?=$rs_EID['custID']?>" <? if($_POST['custID']==$rs_EID['custID']) echo " selected"?>><?= str_replace('<br />',' ',$rs_EID['Name'])?></option>
    819. 

  819. 				<? } ?> 
    820. 

  820. 				 </select>				</td>
    821. 

  821. 				<td align="right" width="20%"><strong><?php print $yyOrdTil?>:</strong></td>
    822. 

  822. 				<td align="left" width="25%">&nbsp;<input type="text" size="14" name="todate" value="<?php print $todate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.todate, '<?php print $themask?>', -205)" value='DP' /></td>
    823. 

  823. 			  </tr>
    824. 

  824. 			  <tr bgcolor="#EAECEB">
    825. 

  825. 				<td align="right"><strong><?php print $yyOrdId?>:</strong></td>
    826. 

  826. 				<td align="left">&nbsp;<input type="text" size="14" name="ordid" value="<?php print $ordid?>" /><img src="/lib/images/misc/info_icon.png" id="myfrogz_info" align="absmiddle" /></td>
    827. 

  827. 				<td align="right"><strong>PO/APOs:</strong></td>
    828. 

  828. 				<td align="left">
    829. 

  829. 					<select id="ordPOAPOs" name="ordPOAPOs">
    830. 

  830. 						<option value="none"<?=(empty($_POST['ordPOAPOs']))?' selected="selected"':''?>>None Selected</option>
    831. 

  831. 						<option value="APOs"<?=($_POST['ordPOAPOs'] == 'APOs')?' selected="selected"':''?>>APOs</option>
    832. 

  832. 						<option value="PO_APO"<?=($_POST['ordPOAPOs'] == 'PO_APO')?' selected="selected"':''?>>PO/APOs</option>
    833. 

  833. 						<option value="POs"<?=($_POST['ordPOAPOs'] == 'POs')?' selected="selected"':''?>>POs</option>
    834. 

  834. 						<option value="shipping_APOs"<?=($_POST['ordPOAPOs'] == 'shipping_APOs')?' selected="selected"':''?>>Shipping to APOs</option>
    835. 

  835. 						<option value="shipping_PO_APO"<?=($_POST['ordPOAPOs'] == 'shipping_PO_APO')?' selected="selected"':''?>>Shipping to PO/APOs</option>
    836. 

  836. 						<option value="shipping_POs"<?=($_POST['ordPOAPOs'] == 'shipping_POs')?' selected="selected"':''?>>Shipping to POs</option>
    837. 

  837. 					</select>				</td>
    838. 

  838. 				<td align="right"><strong><?php print $yySeaTxt?>:</strong></td>
    839. 

  839. 				<td align="left" valign="middle">&nbsp;
    840. 

  840. 				  <input type="text" size="24" name="searchtext" value="<?php print $origsearchtext?>" /></td>
    841. 

  841. 			  </tr>
    842. 

  842. 			  <tr bgcolor="#E7EAEF">
    843. 

  843. 				<td rowspan="2" align="right"><strong><?php print $yyOrdSta?>:</strong></td>
    844. 

  844. 				<td rowspan="2" align="left">&nbsp;<select name="ordstatus[]" size="5" multiple><option value="9999" <?php if(strpos($ordstatus,"9999") !== FALSE) print "selected"?>><?php print $yyAllSta?></option><?php
    845. 

  845. 						$ordstatus="";
    846. 

  846. 						$addcomma = "";
    847. 

  847. 						if(is_array(@$_REQUEST["ordstatus"])){
    848. 

  848. 							foreach($_REQUEST["ordstatus"] as $objValue){
    849. 

  849. 								if(is_array($objValue))$objValue=$objValue[0];
    850. 

  850. 								$ordstatus .= $addcomma . $objValue;
    851. 

  851. 								$addcomma = ",";
    852. 

  852. 							}
    853. 

  853. 						}else
    854. 

  854. 							$ordstatus = trim(@$_REQUEST["ordstatus"]);
    855. 

  855. 						$ordstatusarr = explode(",", $ordstatus);
    856. 

  856. 						for($index=0; $index < $numstatus; $index++){
    857. 

  857. 							print '<option value="' . $allstatus[$index]["statID"] . '"';
    858. 

  858. 							if(is_array($ordstatusarr)){
    859. 

  859. 								foreach($ordstatusarr as $objValue)
    860. 

  860. 									if($objValue==$allstatus[$index]["statID"]) print " selected";
    861. 

  861. 							}
    862. 

  862. 							print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    863. 

  863. 						} ?></select>				</td>
    864. 

  864. 				<td rowspan="2" align="right"><strong><?=$yyOrdCou?>:</strong></td>
    865. 

  865. 				<td rowspan="2" align="left">
    866. 

  866. 				<? $sSQL2="SELECT DISTINCT cpnID,cpnName,cpnNumber FROM orders o LEFT JOIN coupons c ON o.ordCoupon=c.cpnID WHERE ordDiscount>0 ORDER BY cpnNumber,cpnName";
    867. 

  867. 					$result2=mysql_query($sSQL2) or die(mysql_error().$sSQL2);
    868. 

  868. 					$total2=mysql_num_rows($result2);?>
    869. 

  869. 					<select name="ordcoupon" size="5" style="width:250px; font-size:10px; ">
    870. 

  870. 					 	<? while($rs2=mysql_fetch_array($result2)){ ?>
    871. 

  871. 					  	<option value="<?=$rs2['cpnID']?>" <?=$rs2['cpnNumber']==""?"":'style="font-weight:bold;"'?> <? if($ordcoupon==$rs2['cpnID']) echo " selected"?>><?=$rs2['cpnNumber']==""?"":$rs2['cpnNumber'].' | '?> <?= str_replace('<br />',' ',$rs2['cpnName'])?></option>
    872. 

  872. 						<? } ?>
    873. 

  873. 					</select>
    874. 

  874. 					<div style="font-size:9px;">Coupons are in bold</div>
    875. 

  875. 					</td>
    876. 

  876. 				<td align="right" valign="middle"><strong>Return Status:</strong></td>
    877. 

  877. 				<td align="left" valign="middle">
    878. 

  878. 						<?
    879. 

  879. 						$sql_return="SELECT * FROM returns ORDER BY status_order";
    880. 

  880. 						$result_return=mysql_query($sql_return);
    881. 

  881. 						?>
    882. 

  882. 						<select name="return_status_search">
    883. 

  883. 						  <option value="" <?php if ($_SESSION['return_status_search']=="") {echo "selected=\"selected\"";} ?>></option>
    884. 

  884. 						  <? while($row_return=mysql_fetch_assoc($result_return)){?>
    885. 

  885. 						  <option value="<?=$row_return["id"]?>" <?php if (!(strcmp($row_return["id"], $_SESSION['return_status_search']))) {echo "selected=\"selected\"";} ?>>
    886. 

  886. 						  <?=$row_return["status"]?>
    887. 

  887. 						  </option>
    888. 

  888. 						  <? } ?>
    889. 

  889. 					  </select></td>
    890. 

  890. 			  </tr>	
    891. 

  891. 			  <tr bgcolor="#E7EAEF">
    892. 

  892. 			    <td align="right" valign="top">&nbsp;</td>
    893. 

  893. 			    <td align="left">			</td>
    894. 

  894. 			    </tr>		  
    895. 

  895. 			  <tr bgcolor="#E7EAEF">
    896. 

  896. 				<td colspan="3" align="left"><input type="c…
    897.

Large files files are truncated, but you can click here to view the full file