PageRenderTime 49ms CodeModel.GetById 17ms RepoModel.GetById 0ms app.codeStats 0ms

/admin/minicart2.php

https://bitbucket.org/chadsaun/ifrogz-panel
PHP | 688 lines | 604 code | 18 blank | 66 comment | 148 complexity | 081ef788fefc91f38624088230fece11 MD5 | raw file
    

  1. <?php
    2. 

  2. session_start();
    3. 

  3. include('init.php');
    4. 

  4. include(APPPATH.'views/partials/admin/dbconnection.php');
    5. 

  5. include(APPPATH.'views/partials/admin/includes.php');
    6. 

  6. include(APPPATH.'views/partials/admin/languagefile.php');
    7. 

  7. include(APPPATH.'views/partials/admin/functions.php');
    8. 

  8. 

  9. $Btestdiscount=$_REQUEST['Btestdiscount'];
    10. 

  10. $autodiscount=$_REQUEST['autodiscount'];
    11. 

  11. //echo '='.$Btestdiscount;
    12. 

  12. if($_POST['show']=="FALSE"){
    13. 

  13. 	$sSQL = "SELECT * FROM cart WHERE cartCompleted=0 AND cartSessionID='" .  session_id() . "'";
    14. 

  14. 	$result = mysql_query($sSQL) or print(mysql_error());
    15. 

  15. 	$num_rows=mysql_num_rows($result);
    16. 

  16. 	if($num_rows==1) $item="item";
    17. 

  17. 	else $item="items";
    18. 

  18. 	echo $num_rows." ".$item;
    19. 

  19. } else { ?>	
    20. 

  20. 	
    21. 

  21. <?php
    22. 

  22. 	//echo 'id= '.$_POST["id"];
    23. 

  23. 	//exit();
    24. 

  24. 	$isInStock=TRUE;
    25. 

  25. 	$WSP = "";
    26. 

  26. 	$OWSP = "";
    27. 

  27. 	$theid = mysql_real_escape_string(trim(@$_POST["id"]));
    28. 

  28. 	if(@$dateadjust=="") $dateadjust=0;
    29. 

  29. 	$alreadygotadmin = getadminsettings();
    30. 

  30. 	if(@$_SESSION["clientUser"] != ""){
    31. 

  31. 		if(($_SESSION["clientActions"] & 8) == 8){
    32. 

  32. 			$WSP = "pWholesalePrice AS ";
    33. 

  33. 			if(@$wholesaleoptionpricediff==TRUE) $OWSP = 'optWholesalePriceDiff AS ';
    34. 

  34. 			if(@$nowholesalediscounts==TRUE) $nodiscounts=TRUE;
    35. 

  35. 		}
    36. 

  36. 		if(($_SESSION["clientActions"] & 16) == 16){
    37. 

  37. 			$WSP = $_SESSION["clientPercentDiscount"] . "*pPrice AS ";
    38. 

  38. 			if(@$wholesaleoptionpricediff==TRUE) $OWSP = $_SESSION["clientPercentDiscount"] . '*optPriceDiff AS ';
    39. 

  39. 			if(@$nowholesalediscounts==TRUE) $nodiscounts=TRUE;
    40. 

  40. 		}
    41. 

  41. 	}
    42. 

  42. 	if(@$_SESSION["clientLoginLevel"] != "") $minloglevel=$_SESSION["clientLoginLevel"]; else $minloglevel=0;
    43. 

  43. 

  44. 	/*if($stockManage != 0){
    45. 

  45. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE (cartCompleted=0 AND cartOrderID=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()+(($dateadjust-$stockManage)*60*60)) . "')";
    46. 

  46. 		if($delAfter != 0)
    47. 

  47. 			$sSQL .= " OR (cartCompleted=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-($delAfter*60*60*24)) . "')";
    48. 

  48. 		$result = mysql_query($sSQL) or print(mysql_error());
    49. 

  49. 		if(mysql_num_rows($result)>0){
    50. 

  50. 			$addcomma = "";
    51. 

  51. 			$delstr="";
    52. 

  52. 			$delcart="";
    53. 

  53. 			while($rs = mysql_fetch_assoc($result)){
    54. 

  54. 				$delcart .= $addcomma . $rs["cartOrderID"];
    55. 

  55. 				$delstr .= $addcomma . $rs["cartID"];
    56. 

  56. 				$addcomma = ",";
    57. 

  57. 			}
    58. 

  58. 			if($delAfter != 0) mysql_query("DELETE FROM orders WHERE ordID IN (" . $delcart . ")") or print(mysql_error());
    59. 

  59. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delstr . ")") or print(mysql_error());
    60. 

  60. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delstr . ")") or print(mysql_error());
    61. 

  61. 		}
    62. 

  62. 		mysql_free_result($result);
    63. 

  63. 	}*/
    64. 

  64. 	
    65. 

  65. 	
    66. 

  66. $thesessionid=session_id();	
    67. 

  67. function addadiscount($resset, $groupdiscount, $dscamount, $subcpns, $cdcpncode, $statetaxhandback, $countrytaxhandback, $theexemptions, $thetax){
    68. 

  68. 	global $totaldiscounts, $cpnmessage, $statetaxfree, $countrytaxfree, $gotcpncode, $perproducttaxrate, $countryTax , $cpnIDs , $appliedcouponname , $appliedcouponamount,$thesessionid;
    69. 

  69. 	$totaldiscounts += $dscamount;
    70. 

  70. 	if($groupdiscount){
    71. 

  71. 		$statetaxfree -= ($dscamount * $statetaxhandback);
    72. 

  72. 		$countrytaxfree -= ($dscamount * $countrytaxhandback);
    73. 

  73. 	}else{
    74. 

  74. 		subtaxesfordiscounts($theexemptions, $dscamount);
    75. 

  75. 		if(@$perproducttaxrate) $countryTax -= (($dscamount * $thetax) / 100.0);
    76. 

  76. 	}
    77. 

  77. 	$usecoupon=TRUE;
    78. 

  78. 	//echo '$cdcpncode='.$cdcpncode;
    79. 

  79. 	$cpnDiscount=substr($resset['cpnWorkingName'],0,10);
    80. 

  80. 	//echo '$cpnDiscount='.$cpnDiscount;
    81. 

  81. 	$sql_dd="SELECT * FROM daily_discounts WHERE starttime LIKE '".$cpnDiscount."%'";
    82. 

  82. 	//echo $sql_dd;
    83. 

  83. 	$result_dd=mysql_query($sql_dd);
    84. 

  84. 	if(mysql_num_rows($result_dd)>0){
    85. 

  85. 		$row_dd=mysql_fetch_assoc($result_dd);
    86. 

  86. 		//echo 'starttime='.$row_dd['starttime'];
    87. 

  87. 		$sql_d="SELECT cartDateAdded FROM cart WHERE cartSessionID='".$thesessionid."' AND cartDateAdded<'".$row_dd['starttime']."'";
    88. 

  88. 		//echo $sql_d;
    89. 

  89. 		$result_d=mysql_query($sql_d);
    90. 

  90. 		if(mysql_num_rows($result_d)>0){
    91. 

  91. 			echo '<div style="color:#FF0000; font-weight:bold; margin:4px; font-size:14px;"> You must add the Snatch It product to the cart after the green light flashes to get it for free.</div>';			
    92. 

  92. 			$dscamount=0;
    93. 

  93. 			$totaldiscounts=0;			
    94. 

  94. 			$usecoupon=FALSE;
    95. 

  95. 		}		
    96. 

  96. 	}
    97. 

  97. 	//echo '$dscamount='.$dscamount;
    98. 

  98. 	//echo '$totaldiscounts='.$totaldiscounts;
    99. 

  99. 	
    100. 

  100. 	//$dscamount=0;
    101. 

  101. 	//$totaldiscounts=0;
    102. 

  102. 	if($usecoupon){
    103. 

  103. 		//echo 'used';
    104. 

  104. 		if(stristr($cpnmessage,"<br />" . $resset[getlangid("cpnName",1024)] . "<br />") == FALSE) $cpnmessage .= $resset[getlangid("cpnName",1024)] . "<br />";
    105. 

  105. 		// added Blake 1/2/07
    106. 

  106. 		// add discount ids to order
    107. 

  107. 		$comma=",";
    108. 

  108. 		if(empty($cpnIDs)) $comma=" ";
    109. 

  109. 		$cpnIDs .= $comma.$resset["cpnID"];
    110. 

  110. 		// end
    111. 

  111. 		if($subcpns){
    112. 

  112. 			$theres = mysql_query("SELECT cpnID FROM coupons WHERE cpnNumAvail>0 AND cpnNumAvail<30000000 AND cpnID=" . $resset["cpnID"]) or print(mysql_error());
    113. 

  113. 			if($theresset = mysql_fetch_assoc($theres)) @$_SESSION["couponapply"] .= "," . $resset["cpnID"];
    114. 

  114. 			mysql_query("UPDATE coupons SET cpnNumAvail=cpnNumAvail-1 WHERE cpnNumAvail>0 AND cpnNumAvail<30000000 AND cpnID=" . $resset["cpnID"]) or print(mysql_error());
    115. 

  115. 		}
    116. 

  116. 		if($cdcpncode!="" && strtolower(trim($resset["cpnNumber"]))==strtolower($cdcpncode)) {$gotcpncode=TRUE;$appliedcouponname = $resset['cpnName']; $appliedcouponamount = $dscamount; }
    117. 

  117. 	}
    118. 

  118. }
    119. 

  119. function subtaxesfordiscounts($theExemptions, $discAmount){
    120. 

  120. 	global $statetaxfree,$countrytaxfree,$shipfreegoods;
    121. 

  121. 	if(($theExemptions & 1)==1) $statetaxfree -= $discAmount;
    122. 

  122. 	if(($theExemptions & 2)==2) $countrytaxfree -= $discAmount;
    123. 

  123. 	if(($theExemptions & 4)==4) $shipfreegoods -= $discAmount;
    124. 

  124. }
    125. 

  125. function timesapply($taquant,$tathresh,$tamaxquant,$tamaxthresh,$taquantrepeat,$tathreshrepeat){
    126. 

  126. 	if($taquantrepeat==0 && $tathreshrepeat==0)
    127. 

  127. 		$tatimesapply = 1.0;
    128. 

  128. 	elseif($tamaxquant==0)
    129. 

  129. 		$tatimesapply = (int)(($tathresh - $tamaxthresh) / $tathreshrepeat)+1;
    130. 

  130. 	elseif($tamaxthresh==0)
    131. 

  131. 		$tatimesapply = (int)(($taquant - $tamaxquant) / $taquantrepeat)+1;
    132. 

  132. 	else{
    133. 

  133. 		$ta1 = (int)(($taquant - $tamaxquant) / $taquantrepeat)+1;
    134. 

  134. 		$ta2 = (int)(($tathresh - $tamaxthresh) / $tathreshrepeat)+1;
    135. 

  135. 		if($ta2 < $ta1) $tatimesapply = $ta2; else $tatimesapply = $ta1;
    136. 

  136. 	}
    137. 

  137. 	return($tatimesapply);
    138. 

  138. }	
    139. 

  139. function calculatediscounts($cdgndtot, $subcpns, $cdcpncode){
    140. 

  140. 	global $totaldiscounts, $cpnmessage, $statetaxfree, $countrytaxfree, $nodiscounts, $WSP, $cpncode, $gotcpncode, $thesessionid, $countryTaxRate, $countryTax;
    141. 

  141. 	$totaldiscounts = 0;
    142. 

  142. 	$cpnmessage = "<br />";
    143. 

  143. 	$cdtotquant=0;
    144. 

  144. 	if($cdgndtot==0){
    145. 

  145. 		$statetaxhandback = 0.0;
    146. 

  146. 		$countrytaxhandback = 0.0;
    147. 

  147. 	}else{
    148. 

  148. 		$statetaxhandback = 1.0 - (($cdgndtot - $statetaxfree) / $cdgndtot);
    149. 

  149. 		$countrytaxhandback = 1.0 - (($cdgndtot - $countrytaxfree) / $cdgndtot);
    150. 

  150. 	}
    151. 

  151. 	if(! $nodiscounts){
    152. 

  152. 		$sSQL = "SELECT cartProdID,SUM(cartProdPrice*cartQuantity) AS thePrice,SUM(cartQuantity) AS sumQuant,pSection,COUNT(cartProdID),pExemptions,pTax FROM products INNER JOIN cart ON cart.cartProdID=products.pID WHERE cartCompleted=0 AND cartSessionID='" . $thesessionid . "' GROUP BY cartProdID,pSection,pExemptions,pTax";
    153. 

  153. 		$cdresult = mysql_query($sSQL) or print(mysql_error());
    154. 

  154. 		$cdadindex=0;
    155. 

  155. 		while($cdrs = mysql_fetch_assoc($cdresult)){
    156. 

  156. 			$cdalldata[$cdadindex++]=$cdrs;
    157. 

  157. 		}
    158. 

  158. 		for($index=0; $index<$cdadindex; $index++){
    159. 

  159. 			$cdrs = $cdalldata[$index];
    160. 

  160. 			$sSQL = "SELECT SUM(coPriceDiff*cartQuantity) AS totOpts FROM cart LEFT OUTER JOIN cartoptions ON cart.cartID=cartoptions.coCartID WHERE cartCompleted=0 AND cartSessionID='" . $thesessionid . "' AND cartProdID='" . $cdrs["cartProdID"] . "'";
    161. 

  161. 			$cdresult2 = mysql_query($sSQL) or print(mysql_error());
    162. 

  162. 			$cdrs2 = mysql_fetch_assoc($cdresult2);
    163. 

  163. 			if(! is_null($cdrs2["totOpts"])) $cdrs["thePrice"] += $cdrs2["totOpts"];
    164. 

  164. 			$cdtotquant += $cdrs["sumQuant"];
    165. 

  165. 			$topcpnids = $cdrs["pSection"];
    166. 

  166. 			$thetopts = $cdrs["pSection"];
    167. 

  167. 			if(is_null($cdrs["pTax"])) $cdrs["pTax"] = $countryTaxRate;
    168. 

  168. 			for($cpnindex=0; $cpnindex<= 10; $cpnindex++){
    169. 

  169. 				if($thetopts==0)
    170. 

  170. 					break;
    171. 

  171. 				else{
    172. 

  172. 					$sSQL = "SELECT topSection FROM sections WHERE sectionID=" . $thetopts;
    173. 

  173. 					$result2 = mysql_query($sSQL) or print(mysql_error());
    174. 

  174. 					if($rs2 = mysql_fetch_assoc($result2)){
    175. 

  175. 						$thetopts = $rs2["topSection"];
    176. 

  176. 						$topcpnids .= "," . $thetopts;
    177. 

  177. 					}else
    178. 

  178. 						break;
    179. 

  179. 				}
    180. 

  180. 			}
    181. 

  181. 			$sSQL = "SELECT DISTINCT cpnID,cpnDiscount,cpnWorkingName,cpnType,cpnNumber,".getlangid("cpnName",1024).",cpnThreshold,cpnQuantity,cpnSitewide,cpnThresholdRepeat,cpnQuantityRepeat FROM coupons LEFT OUTER JOIN cpnassign ON coupons.cpnID=cpnassign.cpaCpnID WHERE cpnNumAvail>0 AND cpnEndDate>='" . date("Y-m-d H:i:s",time()) ."' AND cpnBeginDate <= '" . date("Y-m-d H:i:s",time()) ."' AND (cpnIsCoupon=0";
    182. 

  182. 			if($cdcpncode != "") $sSQL .= " OR (cpnIsCoupon=1 AND cpnNumber='" . $cdcpncode . "')";
    183. 

  183. 			$sSQL .= ") AND cpnThreshold<=" . $cdrs["thePrice"] . " AND (cpnThresholdMax>" . $cdrs["thePrice"] . " OR cpnThresholdMax=0) AND cpnQuantity<=" . $cdrs["sumQuant"] . " AND (cpnQuantityMax>" . $cdrs["sumQuant"] . " OR cpnQuantityMax=0) AND (cpnSitewide=0 OR cpnSitewide=2) AND ";
    184. 

  184. 			$sSQL .= "(cpnSitewide=2 OR (cpaType=2 AND cpaAssignment='" . $cdrs["cartProdID"] . "') ";
    185. 

  185. 			$sSQL .= "OR (cpaType=1 AND cpaAssignment IN ('" . str_replace(",","','",$topcpnids) . "')))";
    186. 

  186. 			if(!empty($WSP)) $sSQL .= " AND (cpnIsWholesale=1)";
    187. 

  187. 			else $sSQL .= " AND (cpnIsWholesale=0)";
    188. 

  188. 			$result2 = mysql_query($sSQL) or print(mysql_error());
    189. 

  189. 			//echo $sSQL;
    190. 

  190. 			while($rs2 = mysql_fetch_assoc($result2)){
    191. 

  191. 				if($rs2["cpnType"]==1){ // Flat Rate Discount
    192. 

  192. 					$thedisc = (double)$rs2["cpnDiscount"] * timesapply($cdrs["sumQuant"], $cdrs["thePrice"], $rs2["cpnQuantity"], $rs2["cpnThreshold"], $rs2["cpnQuantityRepeat"], $rs2["cpnThresholdRepeat"]);
    193. 

  193. 					if($cdrs["thePrice"] < $thedisc) $thedisc = $cdrs["thePrice"];
    194. 

  194. 					addadiscount($rs2, FALSE, $thedisc, $subcpns, $cdcpncode, $statetaxhandback, $countrytaxhandback, $cdrs["pExemptions"], $cdrs["pTax"]);
    195. 

  195. 				}elseif($rs2["cpnType"]==2){ // Percentage Discount
    196. 

  196. 					addadiscount($rs2, FALSE, (((double)$rs2["cpnDiscount"] * (double)$cdrs["thePrice"]) / 100.0), $subcpns, $cdcpncode, $statetaxhandback, $countrytaxhandback, $cdrs["pExemptions"], $cdrs["pTax"]);
    197. 

  197. 				}
    198. 

  198. 			}
    199. 

  199. 		}
    200. 

  200. 		$sSQL = "SELECT DISTINCT cpnID,cpnDiscount,cpnWorkingName,cpnType,cpnNumber,".getlangid("cpnName",1024).",cpnSitewide,cpnThreshold,cpnThresholdMax,cpnQuantity,cpnQuantityMax,cpnThresholdRepeat,cpnQuantityRepeat FROM coupons WHERE cpnNumAvail>0 AND cpnEndDate>='" . date("Y-m-d H:i:s",time()) ."' AND cpnBeginDate <= '" . date("Y-m-d H:i:s",time()) ."' AND (cpnIsCoupon=0";
    201. 

  201. 		if($cdcpncode != "") $sSQL .= " OR (cpnIsCoupon=1 AND cpnNumber='" . $cdcpncode . "')";
    202. 

  202. 		$sSQL .= ") AND cpnThreshold<=" . $cdgndtot . " AND cpnQuantity<=" . $cdtotquant . " AND (cpnSitewide=1 OR cpnSitewide=3) AND (cpnType=1 OR cpnType=2)";
    203. 

  203. 		if(!empty($WSP)) $sSQL .= " AND (cpnIsWholesale=1)";
    204. 

  204. 		else $sSQL .= " AND (cpnIsWholesale=0)";
    205. 

  205. 		$result2 = mysql_query($sSQL) or print(mysql_error());
    206. 

  206. 		while($rs2 = mysql_fetch_assoc($result2)){
    207. 

  207. 			$totquant = 0;
    208. 

  208. 			$totprice = 0;
    209. 

  209. 			if($rs2["cpnSitewide"]==3){
    210. 

  210. 				$sSQL = "SELECT cpaAssignment FROM cpnassign WHERE cpaType=1 AND cpacpnID=" . $rs2["cpnID"];
    211. 

  211. 				$result3 = mysql_query($sSQL) or print(mysql_error());
    212. 

  212. 				$secids = "";
    213. 

  213. 				$addcomma = "";
    214. 

  214. 				while($rs3 = mysql_fetch_assoc($result3)){
    215. 

  215. 					$secids .= $addcomma . $rs3["cpaAssignment"];
    216. 

  216. 					$addcomma = ",";
    217. 

  217. 				}
    218. 

  218. 				if($secids != ""){
    219. 

  219. 					$secids = getsectionids($secids, FALSE);
    220. 

  220. 					$sSQL = "SELECT SUM(cartProdPrice*cartQuantity) AS totPrice,SUM(cartQuantity) AS totQuant FROM products INNER JOIN cart ON cart.cartProdID=products.pID WHERE cartCompleted=0 AND cartSessionID='" . $thesessionid . "' AND products.pSection IN (" . $secids . ")";
    221. 

  221. 					$result3 = mysql_query($sSQL) or print(mysql_error());
    222. 

  222. 					$rs3 = mysql_fetch_assoc($result3);
    223. 

  223. 					if(is_null($rs3["totPrice"])) $totprice = 0; else $totprice = $rs3["totPrice"];
    224. 

  224. 					if(is_null($rs3["totQuant"])) $totquant=0; else $totquant = $rs3["totQuant"];
    225. 

  225. 					$sSQL = "SELECT SUM(coPriceDiff*cartQuantity) AS optPrDiff FROM products INNER JOIN cart ON cart.cartProdID=products.pID LEFT OUTER JOIN cartoptions ON cart.cartID=cartoptions.coCartID WHERE cartCompleted=0 AND cartSessionID='" . $thesessionid . "' AND products.pSection IN (" . $secids . ")";
    226. 

  226. 					$result3 = mysql_query($sSQL) or print(mysql_error());
    227. 

  227. 					$rs3 = mysql_fetch_assoc($result3);
    228. 

  228. 					if(! is_null($rs3["optPrDiff"])) $totprice = $totprice+$rs3["optPrDiff"];
    229. 

  229. 				}
    230. 

  230. 			}else{ // cpnSitewide==1
    231. 

  231. 				$totquant = $cdtotquant;
    232. 

  232. 				$totprice = $cdgndtot;
    233. 

  233. 			}
    234. 

  234. 			if($totquant > 0 && $rs2["cpnThreshold"] <= $totprice && ($rs2["cpnThresholdMax"] > $totprice || $rs2["cpnThresholdMax"]==0) && $rs2["cpnQuantity"] <= $totquant && ($rs2["cpnQuantityMax"] > $totquant || $rs2["cpnQuantityMax"]==0)){
    235. 

  235. 				if($rs2["cpnType"]==1){ // Flat Rate Discount
    236. 

  236. 					$thedisc = (double)$rs2["cpnDiscount"] * timesapply($totquant, $totprice, $rs2["cpnQuantity"], $rs2["cpnThreshold"], $rs2["cpnQuantityRepeat"], $rs2["cpnThresholdRepeat"]);
    237. 

  237. 					if($totprice < $thedisc) $thedisc = $totprice;
    238. 

  238. 				}elseif($rs2["cpnType"]==2){ // Percentage Discount
    239. 

  239. 					$thedisc = ((double)$rs2["cpnDiscount"] * (double)$totprice) / 100.0;
    240. 

  240. 				}
    241. 

  241. 				addadiscount($rs2, TRUE, $thedisc, $subcpns, $cdcpncode, $statetaxhandback, $countrytaxhandback, 3, 0);
    242. 

  242. 				if(@$perproducttaxrate && $cdgndtot > 0){
    243. 

  243. 					for($index=0; $index<$cdadindex; $index++){
    244. 

  244. 						$cdrs = $cdalldata[$index];
    245. 

  245. 						if($rs2["cpnType"]==1) // Flat Rate Discount
    246. 

  246. 							$applicdisc = $thedisc / ($cdtotquant / $cdrs["sumQuant"]);
    247. 

  247. 						elseif($rs2["cpnType"]==2) // Percentage Discount
    248. 

  248. 							$applicdisc = $thedisc / ($cdgndtot / $cdrs["thePrice"]);
    249. 

  249. 						if(($cdrs["pExemptions"] & 2) != 2) $countryTax -= (($applicdisc * $cdrs["pTax"]) / 100.0);
    250. 

  250. 					}
    251. 

  251. 				}
    252. 

  252. 			}
    253. 

  253. 		}
    254. 

  254. 	}
    255. 

  255. 	if($statetaxfree < 0) $statetaxfree = 0;
    256. 

  256. 	if($countrytaxfree < 0) $countrytaxfree = 0;
    257. 

  257. 	$totaldiscounts = round($totaldiscounts, 2);
    258. 

  258. 	
    259. 

  259. 	//echo '$totaldiscounts='.$totaldiscounts;
    260. 

  260. }
    261. 

  261. 

  262. function checkpricebreaks($cpbpid,$origprice){
    263. 

  263. 	global $WSP;
    264. 

  264. 	$newprice="";
    265. 

  265. 	$sSQL = "SELECT SUM(cartQuantity) AS totquant FROM cart WHERE cartCompleted=0 AND cartSessionID='" . session_id() . "' AND cartProdID='".mysql_real_escape_string($cpbpid)."'";
    266. 

  266. 	
    267. 

  267. 	$result = mysql_query($sSQL) or print(mysql_error());
    268. 

  268. 	$rs=mysql_fetch_assoc($result);
    269. 

  269. 	if(is_null($rs["totquant"])) $thetotquant=0; else $thetotquant = $rs["totquant"];
    270. 

  270. 	$sSQL="SELECT ".$WSP."pPrice FROM pricebreaks WHERE ".$thetotquant.">=pbQuantity AND pbProdID='".mysql_real_escape_string($cpbpid)."' ORDER BY " . ($WSP==""?"pPrice":str_replace(' AS ','',$WSP));
    271. 

  271. 	$result = mysql_query($sSQL) or print(mysql_error());
    272. 

  272. 	if($rs=mysql_fetch_assoc($result)) 
    273. 

  273. 		$thepricebreak = $rs["pPrice"];
    274. 

  274. 	else
    275. 

  275. 		$thepricebreak = $origprice;
    276. 

  276. 	//$sSQL = "UPDATE cart SET cartProdPrice=".$thepricebreak." WHERE cartAltPrice=-1 AND cartCompleted=0 AND cartSessionID='" . session_id() . "' AND cartProdID='".mysql_real_escape_string($cpbpid)."'";
    277. 

  277. 	//echo $sSQL;
    278. 

  278. 	mysql_query($sSQL) or print(mysql_error().$sSQL);
    279. 

  279. }
    280. 

  280. 	
    281. 

  281. 	$mode=$_POST["mode"];
    282. 

  282. 	$viewall=$_POST['show'];
    283. 

  283. 	if(@$_POST["mode"]=="delete")
    284. 

  284. 	{
    285. 

  285. 		
    286. 

  286. 		foreach(@$_POST as $objItem => $objValue)
    287. 

  287. 		{
    288. 

  288. 			if(substr($objItem,0,5)=="delet")
    289. 

  289. 			{
    290. 

  290. 				$sSQL="DELETE FROM cart WHERE cartID='" . (int)substr($objItem, 5) . "'";
    291. 

  291. 				mysql_query($sSQL) or print(mysql_error());
    292. 

  292. 				$sSQL="DELETE FROM cartoptions WHERE coCartID='" . (int)substr($objItem, 5) . "'";
    293. 

  293. 				mysql_query($sSQL) or print(mysql_error());
    294. 

  294. 			}
    295. 

  295. 		}
    296. 

  296. 	}
    297. 

  297. 	if(@$_POST["mode"]=="add")
    298. 

  298. 	{
    299. 

  299. 		if(@$estimateshipping==TRUE) $_SESSION["xsshipping"] = "";
    300. 

  300. 		if(@isset($_SESSION["discounts"])) $_SESSION["discounts"] = "";
    301. 

  301. 		mysql_query("UPDATE orders SET ordTotal=0,ordShipping=0,ordStateTax=0,ordCountryTax=0,ordHSTTax=0,ordHandling=0,ordDiscount=0,ordDiscountText='' WHERE ordSessionID='" . session_id() . "' AND ordAuthNumber=''") or print(mysql_error());
    302. 

  302. 		$bExists = FALSE;
    303. 

  303. 		if(trim(@$_POST["frompage"])!="") $_SESSION["frompage"]=$_POST["frompage"]; else $_SESSION["frompage"]="";
    304. 

  304. 		if(@$_POST["quant"]=="" || ! is_numeric(@$_POST["quant"]))
    305. 

  305. 			$quantity=1;
    306. 

  306. 		else
    307. 

  307. 			$quantity=abs((int)@$_POST["quant"]);
    308. 

  308. 		foreach(@$_POST as $objItem => $objValue){ // Check if the product id is modified
    309. 

  309. 			if(substr($objItem,0,4)=="optn"){
    310. 

  310. 				$sSQL="SELECT optRegExp FROM options WHERE optID='" . mysql_real_escape_string($objValue) . "'";
    311. 

  311. 	//			echo $sSQL;
    312. 

  312. 	//			exit();
    313. 

  313. 				$result2 = mysql_query($sSQL) or print(mysql_error());
    314. 

  314. 				$rs=mysql_fetch_assoc($result2);
    315. 

  315. 				$theexp = trim($rs["optRegExp"]);
    316. 

  316. 				if($theexp != "" && substr($theexp, 0, 1) != "!"){
    317. 

  317. 					$theexp = str_replace('%s', $theid, $theexp);
    318. 

  318. 					if(strpos($theexp, " ") !== FALSE){ // Search and replace
    319. 

  319. 						$exparr = split(" ", $theexp, 2);
    320. 

  320. 						$theid = str_replace($exparr[0], $exparr[1], $theid);
    321. 

  321. 					}else
    322. 

  322. 						$theid = $theexp;
    323. 

  323. 				}
    324. 

  324. 				mysql_free_result($result2);
    325. 

  325. 			}
    326. 

  326. 			if(! $bExists) break;
    327. 

  327. 		}
    328. 

  328. 		$sSQL = "SELECT cartID,cartProdID, cartAltPrice FROM cart WHERE cartCompleted=0 AND cartSessionID='" . session_id() . "' AND cartProdID='" . $theid . "' AND cartAddProd=0 AND cartAltPrice=-1";
    329. 

  329. 		//echo $sSQL;
    330. 

  330. 		$result = mysql_query($sSQL) or print(mysql_error());
    331. 

  331. 		while($rs = mysql_fetch_assoc($result)){
    332. 

  332. 			$bExists = TRUE;
    333. 

  333. 			$cartID = $rs["cartID"];
    334. 

  334. 			foreach(@$_POST as $objItem => $objValue){ // We have the product. Check we have all the same options
    335. 

  335. 				if(substr($objItem,0,4)=="optn"){
    336. 

  336. 					if(@$_POST["v" . $objItem] != ""){
    337. 

  337. 						$sSQL="SELECT coID FROM cartoptions WHERE coCartID=" . $cartID . " AND coOptID='" . mysql_real_escape_string($objValue) . "' AND coCartOption='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["v" . $objItem]))) . "'";
    338. 

  338. 						$result2 = mysql_query($sSQL) or print(mysql_error());
    339. 

  339. 						if(mysql_num_rows($result2)==0) $bExists=FALSE;
    340. 

  340. 						//if($rs["cartAltPrice"]>0 && mysql_num_rows($result2)>0 && $Btestdiscount==0)$bExists = FALSE;
    341. 

  341. 						mysql_free_result($result2);
    342. 

  342. 					}else{
    343. 

  343. 						$sSQL="SELECT coID FROM cartoptions WHERE coCartID=" . $cartID . " AND coOptID='" . mysql_real_escape_string($objValue) . "'";
    344. 

  344. 						$result2 = mysql_query($sSQL) or print(mysql_error());
    345. 

  345. 						if(mysql_num_rows($result2)==0) $bExists=FALSE;
    346. 

  346. 						/*else{
    347. 

  347. 							if($rs["cartAltPrice"]>0 && $Btestdiscount==0)$bExists = FALSE;
    348. 

  348. 							//else $bExists = TRUE;
    349. 

  349. 							if($rs["cartAltPrice"]==0 && $Btestdiscount>0)$bExists = FALSE;
    350. 

  350. 						}*/
    351. 

  351. 						mysql_free_result($result2);
    352. 

  352. 					}
    353. 

  353. 				}
    354. 

  354. 				if(! $bExists) break;
    355. 

  355. 			}
    356. 

  356. 			if($bExists) break;
    357. 

  357. 		}
    358. 

  358. 		mysql_free_result($result);
    359. 

  359. 		$sSQL = "SELECT ".getlangid("pName",1).",".$WSP."pPrice,pInStock,pWeight,pSell,pPricing_group FROM products WHERE pID='" . $theid . "'";
    360. 

  360. 		$result = mysql_query($sSQL) or print(mysql_error());
    361. 

  361. 		if(! ($rsStock = mysql_fetch_array($result))){
    362. 

  362. 			$rsStock[getlangid("pName",1)]=$theid;
    363. 

  363. 			$stockManage=0;
    364. 

  364. 			$isInStock=FALSE;
    365. 

  365. 			$outofstockreason=2;
    366. 

  366. 		}
    367. 

  367. 		mysql_free_result($result);
    368. 

  368. 		if($stockManage != 0){
    369. 

  369. 			if(($rsStock["pSell"] & 2)==2){
    370. 

  370. 				$isInStock = true;
    371. 

  371. 				foreach(@$_POST as $objItem => $objValue){
    372. 

  372. 					if(substr($objItem,0,4)=="optn"){
    373. 

  373. 						$sSQL="SELECT optStock FROM options INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2) AND optID='" . mysql_real_escape_string($objValue) . "'";
    374. 

  374. 						$result = mysql_query($sSQL) or print(mysql_error());
    375. 

  375. 						if($rs = mysql_fetch_array($result)) 
    376. 

  376. 							$isInStock = ($isInStock && ($rs["optStock"]+1000 >= $quantity));
    377. 

  377. 						mysql_free_result($result);
    378. 

  378. 					}
    379. 

  379. 				}
    380. 

  380. 				if($isInStock){ // Check cart
    381. 

  381. 					$bestDate = time()+(60*60*24*62);
    382. 

  382. 					foreach(@$_POST as $objItem => $objValue){
    383. 

  383. 						$totQuant = 0;
    384. 

  384. 						$stockQuant = 0;
    385. 

  385. 						$actualstockQuant=0;
    386. 

  386. 						if(substr($objItem,0,4)=="optn"){
    387. 

  387. 							$sSQL = "SELECT cartQuantity,cartDateAdded,cartOrderID,optStock,optExtend_shipping,optMin,coID, optName FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2) AND cartCompleted=0 AND coOptID='" . mysql_real_escape_string($objValue) . "'";
    388. 

  388. 							//echo $sSQL;
    389. 

  389. 							$result = mysql_query($sSQL) or print(mysql_error());
    390. 

  390. 							$extend_shipping_out='';
    391. 

  391. 							if(mysql_num_rows($result)>0){
    392. 

  392. 								$rs = mysql_fetch_array($result);							
    393. 

  393. 								$stockQuant = $rs["optStock"]+1000;//adds 1000 to make it never out of stock
    394. 

  394. 								do{
    395. 

  395. 									$totQuant += $rs["cartQuantity"];
    396. 

  396. 									if((int)$rs["cartOrderID"]==0 && strtotime($rs["cartDateAdded"]) < $bestDate) $bestDate = strtotime($rs["cartDateAdded"]);
    397. 

  397. 								}while($rs = mysql_fetch_array($result));
    398. 

  398. 								if(($totQuant+$quantity) > $stockQuant){
    399. 

  399. 									$isInStock=false;
    400. 

  400. 									$outofstockreason=1;
    401. 

  401. 								}
    402. 

  402. 							}
    403. 

  403. 							mysql_free_result($result);
    404. 

  404. 						}
    405. 

  405. 					}
    406. 

  406. 				}
    407. 

  407. 			}else{
    408. 

  408. 				if($isInStock = (($rsStock["pInStock"]-$quantity) >= 0)){ // Check cart
    409. 

  409. 					$totQuant = 0;
    410. 

  410. 					$bestDate = time()+(60*60*24*62);
    411. 

  411. 					$sSQL = "SELECT cartQuantity,cartDateAdded,cartOrderID FROM cart WHERE cartCompleted=0 AND cartProdID='" . $theid . "'";
    412. 

  412. 					$result = mysql_query($sSQL) or print(mysql_error());
    413. 

  413. 					while($rs = mysql_fetch_array($result)){
    414. 

  414. 						$totQuant += $rs["cartQuantity"];
    415. 

  415. 						if((int)$rs["cartOrderID"]==0 && strtotime($rs["cartDateAdded"]) < $bestDate) $bestDate = strtotime($rs["cartDateAdded"]);
    416. 

  416. 					}
    417. 

  417. 					mysql_free_result($result);
    418. 

  418. 					if(($rsStock["pInStock"]-($totQuant+$quantity)) < 0){
    419. 

  419. 						$isInStock = FALSE;
    420. 

  420. 						$outofstockreason=1;
    421. 

  421. 					}
    422. 

  422. 				}
    423. 

  423. 			}
    424. 

  424. 		}
    425. 

  425. 		//check to see if quanity is less than min level added by Blake April 3, 2006
    426. 

  426. 		$extend_shipping_out='';
    427. 

  427. 		foreach(@$_POST as $objItem => $objValue){
    428. 

  428. 			if(substr($objItem,0,4)=="optn"){
    429. 

  429. 				if(trim(@$_POST["v" . $objItem])==""){		
    430. 

  430. 					$sSQL = "SELECT cartQuantity,cartDateAdded,cartAddProd,cartProdPrice,cartOrderID,optStock,optExtend_shipping,optMin,coID, optName FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2) AND cartCompleted=0  AND coOptID='" . mysql_real_escape_string($objValue) . "'";
    431. 

  431. 					//echo '<div id="asdt" style="display: none;">'.$sSQL.'</div>';
    432. 

  432. 					$result = mysql_query($sSQL) or print(mysql_error());
    433. 

  433. 					if(mysql_num_rows($result)>0){
    434. 

  434. 						$rs = mysql_fetch_array($result);							
    435. 

  435. 						$stockQuant = $rs["optStock"]+1000;//adds 100 to make it never out of stock
    436. 

  436. 						$actualstockQuant = $rs["optStock"];//this is the actual stock available
    437. 

  437. 						$extend_shipping = $rs["optExtend_shipping"];//extends shipping time, displayed in the cart
    438. 

  438. 						$min = $rs["optMin"];//sets how many in stock above zero the extend_shipping is displayed in the cart 
    439. 

  439. 						$coID = $rs["coID"];
    440. 

  440. 						$optname = $rs["optName"];
    441. 

  441. 						do{
    442. 

  442. 							$totQuant += $rs["cartQuantity"];
    443. 

  443. 							//echo '<div id="asdg" style="display: none;">'.$totQuant.'</div>';
    444. 

  444. 							if((int)$rs["cartOrderID"]==0 && strtotime($rs["cartDateAdded"]) < $bestDate) $bestDate = strtotime($rs["cartDateAdded"]);
    445. 

  445. 						}while($rs = mysql_fetch_array($result));
    446. 

  446. 						// blake
    447. 

  447. 						//echo '<div id="asdf" style="display: none;">total qty='.$totQuant.' new qty='.$quantity.' min='.$min.' ='.$actualstockQuant.' name='.$optname."</div>";
    448. 

  448. 						if(($totQuant+$quantity+$min)> $actualstockQuant){
    449. 

  449. 							$sql_co="UPDATE cartoptions SET coExtendShipping='$extend_shipping' WHERE coCartID=".$cartID." AND coOptID=".$objValue;
    450. 

  450. 							$extend_shipping_out[$objValue]=$extend_shipping;
    451. 

  451. 							//echo '<br />Update='.$sql_co;
    452. 

  452. 							mysql_query($sql_co);
    453. 

  453. 						}
    454. 

  454. 					} else {
    455. 

  455. 						$sSQL="SELECT optStock,optExtend_shipping,optMin,optExtend_shipping,optName FROM options INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2) AND optID='" . mysql_real_escape_string($objValue) . "'";
    456. 

  456. 						$result = mysql_query($sSQL) or print(mysql_error());
    457. 

  457. 						if($rs3 = mysql_fetch_array($result)) {
    458. 

  458. 							if($quantity+$rs3["optMin"] > $rs3["optStock"]) {
    459. 

  459. 								//echo $rs3["optName"].' qty='.$quantity.' min='.$rs3["optMin"].'='.$rs3["optStock"];
    460. 

  460. 								$extend_shipping_out[$objValue]=$rs3["optExtend_shipping"];
    461. 

  461. 								//echo '<br />first option in cart. Shipping='.$extend_shipping_out[$objValue];
    462. 

  462. 							}
    463. 

  463. 						}
    464. 

  464. 					}
    465. 

  465. 					mysql_free_result($result);
    466. 

  466. 				}
    467. 

  467. 			}
    468. 

  468. 		}
    469. 

  469. 		//end added
    470. 

  470. 		if($isInStock){
    471. 

  471. 			//wholesale prices Added by Blake 6-6-06 
    472. 

  472. 			$pPrice_adj=1;
    473. 

  473. 			if(!empty($WSP)) $pPrice_adj=getPricingAdj($_SESSION['custID'],1,$rsStock["pPricing_group"]);//(customer ID,tier,pricing group)
    474. 

  474. 			/*if($autodiscount>=0 && $autodiscount!='') {$final_price=$autodiscount;$final_price_alt=$autodiscount;}
    475. 

  475. 			else*/if($Btestdiscount>0) {$final_price=$Btestdiscount;$final_price_alt=$Btestdiscount;}
    476. 

  476. 			else {$final_price=$rsStock["pPrice"]*$pPrice_adj;$final_price_alt=-1;}
    477. 

  477. 			
    478. 

  478. 			if($bExists){
    479. 

  479. 				$sSQL = "UPDATE cart SET cartQuantity=cartQuantity+" . $quantity . " WHERE cartID=" . $cartID;
    480. 

  480. 				mysql_query($sSQL) or print(mysql_error());
    481. 

  481. 				//$showthisID=$cartID;
    482. 

  482. 			}else{
    483. 

  483. 				$sSQL = "INSERT INTO cart (cartSessionID,cartProdID,cartQuantity,cartCompleted,cartProdName,cartProdPrice,cartAltPrice,cartOrderID,cartWish,cartDateAdded) VALUES (";
    484. 

  484. 				$sSQL .= "'" . session_id() . "',";
    485. 

  485. 				$sSQL .= "'" . $theid . "',";
    486. 

  486. 				$sSQL .= $quantity . ",";
    487. 

  487. 				$sSQL .= "0,";
    488. 

  488. 				$sSQL .= "'" . mysql_real_escape_string($rsStock[getlangid("pName",1)]) . "',";
    489. 

  489. 				$sSQL .= "'" . $final_price . "',";
    490. 

  490. 				$sSQL .= "'" . $final_price_alt . "',";
    491. 

  491. 				$sSQL .= "0,";
    492. 

  492. 				$sSQL .= "'" . $_POST['wish'] . "',";
    493. 

  493. 				$sSQL .= "'" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "')";
    494. 

  494. 				//echo $sSQL;
    495. 

  495. 				mysql_query($sSQL) or print(mysql_error());
    496. 

  496. 				$cartID = mysql_insert_id();
    497. 

  497. 				foreach(@$_POST as $objItem => $objValue){
    498. 

  498. 					if(substr($objItem,0,4)=="optn"){
    499. 

  499. 						if(trim(@$_POST["v" . $objItem])==""){						
    500. 

  500. 							$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)."," . $OWSP . "optPriceDiff,optWeightDiff,optType,optFlags FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($objValue) . "'";
    501. 

  501. 							$result = mysql_query($sSQL) or print(mysql_error());
    502. 

  502. 							if($rs = mysql_fetch_array($result)){
    503. 

  503. 								if(abs($rs["optType"]) != 3){
    504. 

  504. 									$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coExtendShipping,coPriceDiff,coWeightDiff) VALUES (" . $cartID . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string($rs[getlangid("optName",32)]) ."','" . $extend_shipping_out[$objValue] . "',";
    505. 

  505. 									if(($rs["optFlags"]&1)==0) $sSQL .= $rs["optPriceDiff"] . ","; else $sSQL .= round(($rs["optPriceDiff"] * $final_price)/100.0, 2) . ",";
    506. 

  506. 									if(($rs["optFlags"]&2)==0) $sSQL .= $rs["optWeightDiff"] . ")"; else $sSQL .= multShipWeight($rsStock["pWeight"],$rs["optWeightDiff"]) . ")";
    507. 

  507. 									//echo $sSQL;
    508. 

  508. 								}else
    509. 

  509. 									$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartID . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','',0,0)";
    510. 

  510. 								mysql_query($sSQL) or print(mysql_error());
    511. 

  511. 							}
    512. 

  512. 							mysql_free_result($result);
    513. 

  513. 						}else{
    514. 

  514. 							//echo 'in2';
    515. 

  515. 							$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)." FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($objValue) . "'";
    516. 

  516. 							$result = mysql_query($sSQL) or print(mysql_error());
    517. 

  517. 							$rs = mysql_fetch_array($result);
    518. 

  518. 							$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartID . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string(unstripslashes(trim(@$_POST["v" . $objItem]))) . "',0,0)";
    519. 

  519. 							mysql_query($sSQL) or print(mysql_error());
    520. 

  520. 							mysql_free_result($result);
    521. 

  521. 						}
    522. 

  522. 					}
    523. 

  523. 				}
    524. 

  524. 			}
    525. 

  525. 			//echo $sSQL;
    526. 

  526. 			checkpricebreaks($theid,$final_price);
    527. 

  527. 		}else{
    528. 

  528. 	?>
    529. 

  529. 	
    530. 

  530. 		<!-- If it's not in stock -->
    531. 

  531. 		
    532. 

  532. 		<div class="error">That item is not in stock</div>
    533. 

  533. 	
    534. 

  534. 	<?php
    535. 

  535. 		}
    536. 

  536. 	}
    537. 

  537. 	?>
    538. 

  538. 	
    539. 

  539. 	<?php
    540. 

  540. 	$totaldiscounts = 0;
    541. 

  541. 	calculatediscounts(0, true, '');
    542. 

  542. 	//$_SESSION["discounts"]=$totaldiscounts;
    543. 

  543. 	checkRelatedDiscounts();
    544. 

  544. 	?>
    545. 

  545. 	
    546. 

  546. 	
    547. 

  547. 	<?php
    548. 

  548. 		$sql_gc = "SELECT * FROM products WHERE p_iscert > 0";
    549. 

  549. 		$res_gc = mysql_query($sql_gc) or print(mysql_error());
    550. 

  550. 		$aGC = array();
    551. 

  551. 		while($row_gc = mysql_fetch_assoc($res_gc)) {
    552. 

  552. 			array_push($aGC,$row_gc['pName']);
    553. 

  553. 		}
    554. 

  554. 		
    555. 

  555. 		$alldata="";
    556. 

  556. 		$sSQL = "SELECT cartID,cartProdID,cartProdName,cartProdPrice,cartQuantity,pWeight,pShipping,pShipping2,pExemptions,pSection,pDims,isSet,topSection FROM cart LEFT JOIN products ON cart.cartProdID=products.pID LEFT OUTER JOIN sections ON products.pSection=sections.sectionID WHERE cartCompleted=0 AND cartSessionID='" .  session_id() . "'";
    557. 

  557. 		$sSQL .= " ORDER BY cartDateAdded DESC";
    558. 

  558. 		$result = mysql_query($sSQL) or print(mysql_error());
    559. 

  559. 	?>
    560. 

  560. 		
    561. 

  561. 	<?php
    562. 

  562. 		if(!empty($_SESSION['os'])){
    563. 

  563. 			$sSQL1 = "SELECT * FROM coupons WHERE ";
    564. 

  564. 			$sSQL1 .="cpnNumber='".$_SESSION['os']."'";
    565. 

  565. 			$sSQL1 .= $addor . " AND (cpnSitewide=1 OR cpnSitewide=2) AND cpnNumAvail>0 AND cpnEndDate>='" . date("Y-m-d H:i:s",time()) ."' AND cpnBeginDate <= '" . date("Y-m-d H:i:s",time()) ."' AND cpnIsCoupon=1";
    566. 

  566. 			if(!empty($WSP)) $sSQL1 .= " AND (cpnIsWholesale=1)"; 
    567. 

  567. 			else $sSQL1 .= " AND (cpnIsWholesale=0)";
    568. 

  568. 			$sSQL1 .= " ORDER BY cpnID";
    569. 

  569. 			//echo $sSQL1;
    570. 

  570. 			$result21 = mysql_query($sSQL1) or print(mysql_error());
    571. 

  571. 			if(mysql_num_rows($result21) > 0){ ?>
    572. 

  572. 			  <div style="padding:2px; font-size:10px;"><strong>Discounts:</strong><?php //print $xxDsProd?><br /><font color="#FF0000" size="1">
    573. 

  573. 			  <?php	while($rs2=mysql_fetch_assoc($result21)){
    574. 

  574. 						print $rs2['cpnName']." <br />";
    575. 

  575. 					} ?></font></div>
    576. 

  576. 		<?php
    577. 

  577. 			}
    578. 

  578. 			mysql_free_result($result21);
    579. 

  579. 		}	
    580. 

  580. 			
    581. 

  581. 			$changechecker = "";
    582. 

  582. 			$index = 0;?>		
    583. 

  583. 	<div id="minicart_bg">		
    584. 

  584. 		<div style="float:right; margin-right:178px;">
    585. 

  585. 			<a href="javascript:void(0);" onclick="Element.hide('<?=$_POST['addcartdiv']?>');"><img src="/lib/images/closelabel.gif" alt="Close" /></a>
    586. 

  586. 		</div>
    587. 

  587. 		
    588. 

  588. 	<?php		$number_rows=mysql_num_rows($result);
    589. 

  589. 				if($number_rows<=0) {
    590. 

  590. 		?>
    591. 

  591. 					<h3 style="margin-left:0px;">Your Cart Is Empty!</h3>
    592. 

  592. 		<?php
    593. 

  593. 				} else {	?>	
    594. 

  594. 					<? if(mysql_num_rows($result)>1 && $mode!="delete" && !$viewall){?>
    595. 

  595. 					<div id="view_all"> <a href="javascript:void(0);" onclick="showCart('<?=$_POST['addcartdiv']?>','TRUE'); "><img src="/lib/images/expand.gif" alt="View All" /></a></div>
    596. 

  596. 	<!--				<div id="hide_all" style="display:none;"><a href="javascript:void(0);" onclick="showAllCart('none');"><img src="/lib/images/collapse.gif" alt="Hide All" /></a></div>
    597. 

  597. 	-->				<? }?>				
    598. 

  598. 				<?	if($mode=='delete'){?>
    599. 

  599. 					<h3 style="margin-left:0px;">Your Item's Been Deleted!</h3>
    600. 

  600. 				<? } elseif($viewall) {?>	
    601. 

  601. 					<h3 style="margin-left:0px;">All Items In Cart!</h3>
    602. 

  602. 				<? } else { ?>
    603. 

  603. 					<h3 style="margin-left:0px;">Your Item's Been Added!</h3>			
    604. 

  604. 					<div class="just_added_prod">Last item added...</div>
    605. 

  605. 				<?  }?>
    606. 

  606. 					<table width="340" border="0" cellspacing="0" cellpadding="0" align="left">
    607. 

  607. 		<?php } ?>
    608. 

  608. 				
    609. 

  609. 		<?php
    610. 

  610. 				$cnt_products=0;
    611. 

  611. 				$total_in_cart=0;
    612. 

  612. 				while($alldata=mysql_fetch_assoc($result))
    613. 

  613. 				{
    614. 

  614. 					
    615. 

  615. 					$allProducts[$alldata["cartProdID"]]+=$alldata["cartQuantity"];
    616. 

  616. 					$index++;
    617. 

  617. 					$changechecker .= 'if(document.checkoutform.quant' . $alldata["cartID"] . ".value!=" . $alldata["cartQuantity"] . ") dowarning=true;\n";
    618. 

  618. 					$theoptions = "";
    619. 

  619. 					$theoptionspricediff = 0;
    620. 

  620. 					$sSQL = "SELECT coOptGroup,coCartOption,coPriceDiff,coWeightDiff,ui.org_img_name FROM cartoptions co LEFT JOIN uploaded_images ui ON co.coCartOption=ui.id WHERE coCartID=" . $alldata["cartID"] . " ORDER BY coID";
    621. 

  621. 					$opts = mysql_query($sSQL) or print(mysql_error());
    622. 

  622. 					$optPriceDiff=0;
    623. 

  623. 					
    624. 

  624. 					if($cntr > 3) {
    625. 

  625. 						$cntr = 0;
    626. 

  626. 					}
    627. 

  627. 					
    628. 

  628. 					if($alldata['isSet']=='yes') {
    629. 

  629. 						$isSet = true;
    630. 

  630. 						$cntr++;
    631. 

  631. 					}else{
    632. 

  632. 						$isSet = false;
    633. 

  633. 					}
    634. 

  634. 					$num_options=mysql_num_rows($opts);
    635. 

  635. 					$options='';
    636. 

  636. 					$comma='';
    637. 

  637. 					if($num_options> 0) {	
    638. 

  638. 						while($rs=mysql_fetch_assoc($opts))
    639. 

  639. 						{
    640. 

  640. 							$options.='<div class="options_cart">'.$rs["coOptGroup"].' - '.$rs["coCartOption"].'</div> ';
    641. 

  641. 							$comma=', ';
    642. 

  642. 						}
    643. 

  643. 						$cntr=0;
    644. 

  644. 					}  
    645. 

  645. 					mysql_free_result($opts);
    646. 

  646. 					if($alldata['cartID']==$cartID)	$class='just_added';
    647. 

  647. 					else if($mode=='delete' || $viewall)$class='all_cart_show';
    648. 

  648. 					else $class='all_cart';
    649. 

  649. 					
    650. 

  650. 					$row_style="";
    651. 

  651. 					if ($cnt_products % 2 == 0) {
    652. 

  652. 						$row_style='style="background-color:#F4F4F4;"';
    653. 

  653. 					} 
    654. 

  654. 					
    655. 

  655. 					
    656. 

  656. 					?>
    657. 

  657. 					<tr class="<?=$class?>" <?=$row_style?> >
    658. 

  658. 						<td width="80%"align="left" valign="middle"><span class="prod_name_cart"><?=$alldata['cartProdName']?></span><?= $options!=""?': '.$options:''?></td>
    659. 

  659. 						<td width="10%" valign="middle"><?=$alldata['cartQuantity']?></td>
    660. 

  660. 						<td width="10%" valign="middle">
    661. 

  661. 							<input type="image" src="/lib/images/trash_can.gif" name="delet<?=$alldata['cartID']?>" onclick="delItem(this.name, '<?=$_POST['addcartdiv']?>');" />
    662. 

  662. 						</td>
    663. 

  663. 					</tr>
    664. 

  664. 					<?
    665. 

  665. 					$total_in_cart+=($alldata['cartProdPrice']*$alldata['cartQuantity']);
    666. 

  666. 					$cnt_products++; 
    667. 

  667. 				}
    668. 

  668. 				if($number_rows>0)     { ?>
    669. 

  669. 				</table>
    670. 

  670. 				<div style="clear:both;"></div>
    671. 

  671. 				<? } 
    672. 

  672. 		
    673. 

  673. 				$total_in_cart-=$totaldiscounts;
    674. 

  674. 			
    675. 

  675. 			include(APPPATH.'views/pages/admin/productbodyminicart.php');
    676. 

  676. 		?>
    677. 

  677. 

  678. 		<div style="margin:10px 0px; <? if($number_rows>0) echo 'border-top:1px solid #7089B0;';?> padding:10px 0px;">
    679. 

  679. 			<div class="num_items">
    680. 

  680. 				<?= $number_rows==1 ? $number_rows.' item' : $number_rows.' items'?>	
    681. 

  681. 			</div>
    682. 

  682. 			<a href="/cart.php" title="View Cart" rel="nofollow"><img src="/lib/images/design/checkout_sm.gif" alt="Checkout" /></a>
    683. 

  683. 			<a href="javascript:void(0);" title="View Cart" onclick="Element.hide('<?=$_POST['addcartdiv']?>');" rel="nofollow"><img src="/lib/images/design/continue_shopping.gif" alt="Continue Shopping" /></a>
    684. 

  684. 		<!--<div id="minicart_total">Total: <?=sprintf("$%01.2f",$total_in_cart)?></div>
    685. 

  685. 	-->
    686. 

  686. 		</div>
    687. 

  687. 	</div>
    688. 

  688. <? } ?>
    689.