PageRenderTime 49ms CodeModel.GetById 16ms RepoModel.GetById 1ms app.codeStats 0ms

/admin/gcallback.php

https://bitbucket.org/chadsaun/ifrogz-panel
PHP | 914 lines | 852 code | 8 blank | 54 comment | 142 complexity | 4264c3c4c3b4aaddb8d140d70fe3d6ca MD5 | raw file
    

  1. <?php
    2. 

  2. //=========================================
    3. 

  3. //This code is copyright (c) Internet Business Solutions SL, all rights reserved.
    4. 

  4. //The contents of this file are protected under law as the intellectual property
    5. 

  5. //of Internet Business Solutions SL. Any use, reproduction, disclosure or copying
    6. 

  6. //of any kind without the express and written permission of Internet Business 
    7. 

  7. //Solutions SL is forbidden.
    8. 

  8. //Author: Vince Reid, vince@virtualred.net
    9. 

  9. function microtime_float() {
    10. 

  10.    list($usec, $sec) = explode(' ', microtime());
    11. 

  11.    return((float)$usec + (float)$sec);
    12. 

  12. }
    13. 

  13. ob_start();
    14. 

  14. session_cache_limiter('none');
    15. 

  15. session_start();
    16. 

  16. include('init.php');
    17. 

  17. include(APPPATH.'views/partials/admin/dbconnection.php');
    18. 

  18. include(APPPATH.'views/partials/admin/includes.php');
    19. 

  19. include(APPPATH.'views/pages/admin/email.php');
    20. 

  20. include(APPPATH.'views/partials/admin/languagefile.php');
    21. 

  21. include(APPPATH.'views/partials/admin/functions.php');
    22. 

  22. include(APPPATH.'views/pages/admin/deliverydate.php');
    23. 

  23. 

  24. if(@$debugmode==TRUE) $time_start = microtime_float();
    25. 

  25. $enableclientlogin=FALSE;
    26. 

  26. if(@$dateadjust=='') $dateadjust=0;
    27. 

  27. $usehst=FALSE;
    28. 

  28. $maxcacheid=0;
    29. 

  29. function sendNotificationEmail($orderID) {
    30. 

  30. 	$to = "karen@reminderband.com";
    31. 

  31. 	$subject = "Order Cancelled by Google Checkout";
    32. 

  32. 	$message = "Order Number: $orderID\n";
    33. 

  33. 	$message .= "This order was cancelled by Google Checkout please cancel this order in Fishbowl.";
    34. 

  34. 	mail($to, $subject, $message, "From: Google Checkout");
    35. 

  35. }
    36. 

  36. function getgcsessionsql(){
    37. 

  37. 	global $hasclientid,$thesessionid;
    38. 

  38. 	return ($hasclientid ? 'cartClientID=' . $thesessionid : 'cartSessionID="' . $thesessionid . '"');
    39. 

  39. }
    40. 

  40. function getgcordersessionsql(){
    41. 

  41. 	global $hasclientid,$thesessionid;
    42. 

  42. 	return ($hasclientid ? 'ordClientID=' . $thesessionid : 'ordSessionID="' . $thesessionid . '"');
    43. 

  43. }
    44. 

  44. function writeresultstructure(){
    45. 

  45. 	global $cpncodes,$cpnmessage,$shipmethod,$cacheaddress,$responsexml,$maxcacheid,$noshipping,$addressid,$countryCurrency,$shipping,$handling,$freeshipamnt,$cpncode,$gotcpncode,$totaldiscounts,$stateTax,$countryTax,$appliedcouponname,$appliedcouponamount;
    46. 

  46. 	$responsexml2 = '<result' . ($noshipping ? '' : ' shipping-name="' . $shipmethod . '"') . ' address-id="' . $addressid . '">';
    47. 

  47. 	if(! $noshipping) $responsexml2 .= '<shipping-rate currency="' . $countryCurrency . '">' . round(($shipping+$handling)-$freeshipamnt, 2) . '</shipping-rate>';
    48. 

  48. 	$responsexml2 .= '<shippable>true</shippable>';
    49. 

  49. 	if(count($cpncodes) > 0){
    50. 

  50. 		$responsexml2 .= '<merchant-code-results>';
    51. 

  51. 		foreach($cpncodes as $key => $value){
    52. 

  52. 			if($value==$cpncode){
    53. 

  53. 				$responsexml2 .= '<coupon-result><valid>' . ($gotcpncode ? 'true' : 'false') . '</valid>';
    54. 

  54. 				if($totaldiscounts>0) $responsexml2 .= '<calculated-amount currency="' . $countryCurrency . '">' . $appliedcouponamount . '</calculated-amount>';
    55. 

  55. 				$responsexml2 .= '<code>' . $cpncode . '</code>';
    56. 

  56. 				if($cpnmessage != '')
    57. 

  57. 					$responsexml2 .= '<message>' . xmlencodecharref(str_replace('<br />',"\r\n",$appliedcouponname)) . '</message>';
    58. 

  58. 				$responsexml2 .= '</coupon-result>';
    59. 

  59. 			}else{
    60. 

  60. 				$responsexml2 .= '<coupon-result><valid>false</valid>';
    61. 

  61. 				$responsexml2 .= '<code>' . $value . '</code>';
    62. 

  62. 				$responsexml2 .= '<message>This coupon is not valid in conjunction with other coupons.</message>';
    63. 

  63. 				$responsexml2 .= '</coupon-result>';
    64. 

  64. 			}
    65. 

  65. 		}
    66. 

  66. 		$responsexml2 .= '</merchant-code-results>';
    67. 

  67. 	}
    68. 

  68. 	$responsexml2 .= '<total-tax currency="' . $countryCurrency . '">' . round($stateTax+$countryTax,2) . '</total-tax>';
    69. 

  69. 	$responsexml2 .= '</result>';
    70. 

  70. 	$responsexml .= $responsexml2;
    71. 

  71. 	$cacheaddress[$maxcacheid][3] .= $responsexml2;
    72. 

  72. }
    73. 

  73. /*function release_stock($smOrdId){
    74. 

  74. 	global $stockManage;
    75. 

  75. 	if($stockManage != 0){
    76. 

  76. 		$sSQL="SELECT cartID,cartProdID,cartQuantity,pStockByOpts FROM cart INNER JOIN products ON cart.cartProdID=products.pID WHERE cartCompleted=1 AND cartOrderID=" . $smOrdId;
    77. 

  77. 		$result = mysql_query($sSQL) or print(mysql_error());
    78. 

  78. 		while($rs = mysql_fetch_array($result)){
    79. 

  79. 			if(((int)$rs['pStockByOpts'] <> 0)){
    80. 

  80. 				$sSQL = "SELECT coOptID FROM cartoptions INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID  WHERE optType IN (-2,-1,1,2) AND coCartID=" . $rs["cartID"];
    81. 

  81. 				$result2 = mysql_query($sSQL) or print(mysql_error());
    82. 

  82. 				while($rs2 = mysql_fetch_array($result2)){
    83. 

  83. 					$sSQL = "UPDATE options SET optStock=optStock+" . $rs["cartQuantity"] . " WHERE optID=" . $rs2["coOptID"];
    84. 

  84. 					mysql_query($sSQL) or print(mysql_error());
    85. 

  85. 				}
    86. 

  86. 				mysql_free_result($result2);
    87. 

  87. 			}else{
    88. 

  88. 				$sSQL = "UPDATE products SET pInStock=pInStock+" . $rs["cartQuantity"] . " WHERE pID='" . $rs["cartProdID"] . "'";
    89. 

  89. 				mysql_query($sSQL) or print(mysql_error());
    90. 

  90. 			}
    91. 

  91. 		}
    92. 

  92. 		mysql_free_result($result);
    93. 

  93. 	}
    94. 

  94. }*/
    95. 

  95. $alreadygotadmin = getadminsettings();
    96. 

  96. 

  97. $success = getpayprovdetails(20,$googledata1,$googledata2,$googledata3,$googledemomode,$ppmethod);
    98. 

  98. if(isset($HTTP_RAW_POST_DATA))
    99. 

  99. 	$xmlResponse = $HTTP_RAW_POST_DATA;
    100. 

  100. else
    101. 

  101. 	$xmlResponse = implode("\r\n", file('php://input'));
    102. 

  102. 

  103. $xmlResponse2 = '<?xml version="1.0" encoding="UTF-8"?> <new-order-notification xmlns="http://checkout.google.com/schema/2" serial-number="8XXXXXX3-5641-4a2b-93d2-7XXXXXX3daa9"> <timestamp>2007-01-25T04:09:58.522Z</timestamp> <shopping-cart> <items> <item> <quantity>1</quantity> <unit-price currency="USD">amount</unit-price> <item-name>Payment request from Blue Rose Video Games</item-name> <item-description>Order #4846 @ Blue Rose Video Games</item-description> </item> </items> </shopping-cart> <order-adjustment> <merchant-codes /> <total-tax currency="USD">0.0</total-tax> <adjustment-total currency="USD">0.0</adjustment-total> </order-adjustment> <google-order-number>63486XXXXX55603</google-order-number> <buyer-shipping-address> <email>email address</email> <address1>address</address1> <address2></address2> <contact-name>name</contact-name> <company-name></company-name> <phone></phone> <fax></fax> <country-code>US</country-code> <city>city</city> <region>st</region> <postal-code>zip</postal-code> </buyer-shipping-address> <buyer-billing-address> <email>email address</email> <address1>address</address1> <address2></address2> <contact-name>name</contact-name> <company-name></company-name> <phone></phone> <fax></fax> <country-code>US</country-code> <city>city</city> <region>st</region> <postal-code>zip</postal-code> </buyer-billing-address> <buyer-marketing-preferences> <email-allowed>false</email-allowed> </buyer-marketing-preferences> <order-total currency="USD">amount</order-total> <fulfillment-order-state>NEW</fulfillment-order-state> <financial-order-state>REVIEWING</financial-order-state> <buyer-id>26489XXXXX70857</buyer-id> </new-order-notification>';
    104. 

  104. // print str_replace("<","<br />&lt;",str_replace("</","&lt;/",$xmlResponse2)) . "<br />\n";
    105. 

  105. 

  106. $responsexml='';
    107. 

  107. $standalonetestmode=FALSE;
    108. 

  108. 

  109. if($standalonetestmode) $xmlResponse=$xmlResponse2;
    110. 

  110. 

  111. if(@$disablebasicauth==TRUE){
    112. 

  112. 	// Do Nothing
    113. 

  113. }elseif($success){
    114. 

  114. 	$http_auth = @$_SERVER['HTTP_AUTHORIZATION'];
    115. 

  115. 	if($http_auth=='') $http_auth = @$_SERVER['HTTP_AUTHENTICATION'];
    116. 

  116. 	if($http_auth==''){
    117. 

  117. 		if($googledata1!=@$_SERVER['PHP_AUTH_USER'] || $googledata2!=@$_SERVER['PHP_AUTH_PW'] || $googledata1=='')
    118. 

  118. 			$success=FALSE;
    119. 

  119. 	}elseif(substr($http_auth, 0, 6)=='Basic '){
    120. 

  120. 		$http_auth = substr($http_auth, 6);
    121. 

  121. 		$http_auth = base64_decode($http_auth);
    122. 

  122. 		if(strpos($http_auth, ':')===FALSE){
    123. 

  123. 			$success=FALSE;
    124. 

  124. 		}else{
    125. 

  125. 			$auth_split = split(':',$http_auth);
    126. 

  126. 			if($googledata1 != $auth_split[0] || $googledata2 != $auth_split[1]) $success=FALSE;
    127. 

  127. 		}
    128. 

  128. 	}else
    129. 

  129. 		$success=FALSE;
    130. 

  130. 	if($debugmode){
    131. 

  131. 		if(@$_SERVER['PHP_AUTH_USER']=='' && @$_SERVER['PHP_AUTH_PW']=='' && @$_SERVER['HTTP_AUTHENTICATION']=='' && @$_SERVER['HTTP_AUTHORIZATION']==''){
    132. 

  132. 			$responsexml .= 'Checking authentication. Basic auth sent by Google is blank.' . "\n";
    133. 

  133. 			foreach($_SERVER as $key => $value){
    134. 

  134. 				$responsexml .= $key . " : " . $value . "\n";
    135. 

  135. 			}
    136. 

  136. 		}
    137. 

  137. 	}
    138. 

  138. }
    139. 

  139. if($standalonetestmode) $success=TRUE;
    140. 

  140. if(! $success){
    141. 

  141. 	// response.clear
    142. 

  142. 	if(! $standalonetestmode){
    143. 

  143. 		header('HTTP/1.1 401 Unauthorized');
    144. 

  144. 		echo '<html><head><title>401 Unauthorized</title></head><body>';
    145. 

  145. 		echo 'I\'m sorry, you are not authorized to view this page.<br>';
    146. 

  146. 		echo '</body></html>';
    147. 

  147. 	}else
    148. 

  148. 		print 'auth failure<br>';
    149. 

  149. }else{
    150. 

  150. 	$gcXmlDoc = new vrXMLDoc($xmlResponse);
    151. 

  151. 	$nodeList = $gcXmlDoc->nodeList->childNodes[0];
    152. 

  152. 	$thismessage = $gcXmlDoc->nodeList->nodeName[0];
    153. 

  153. 	switch ($thismessage) {
    154. 

  154. 	case 'merchant-calculation-callback':
    155. 

  155. 		$cartisincluded=TRUE;
    156. 

  156. 		$cpncode='';
    157. 

  157. 		$ordPayProvider=20;
    158. 

  158. 		if($standalonetestmode) print '<html><body>';
    159. 

  159. 		$responsexml = '<?xml version="1.0" encoding="UTF-8"?>';
    160. 

  160. 		$responsexml .= '<merchant-calculation-results xmlns="http://checkout.google.com/schema/2">';
    161. 

  161. 		$responsexml .= '<results>';
    162. 

  162. 		$thesessionid = $nodeList->getValueByTagName('sessionid');
    163. 

  163. 		if(substr($thesessionid,0,3)=='cid') $hasclientid=TRUE; else $hasclientid=FALSE;
    164. 

  164. 		$thesessionid = str_replace("'",'',substr($thesessionid,3));
    165. 

  165. 		$clientuser = trim($nodeList->getValueByTagName('clientuser'));
    166. 

  166. 		$_SESSION['clientUser']='';
    167. 

  167. 		if($hasclientid){
    168. 

  168. 			$_SESSION['clientID']=$thesessionid;
    169. 

  169. 			$sSQL = "SELECT clUserName,clActions,clLoginLevel,clPercentDiscount FROM customerlogin WHERE clID='" . mysql_real_escape_string($thesessionid) . "'";
    170. 

  170. 			$result = mysql_query($sSQL) or print(mysql_error());
    171. 

  171. 			if($rs = mysql_fetch_array($result)){
    172. 

  172. 				$_SESSION['clientUser']=$rs['clUserName'];
    173. 

  173. 				$_SESSION['clientActions']=$rs['clActions'];
    174. 

  174. 				$_SESSION['clientLoginLevel']=$rs['clLoginLevel'];
    175. 

  175. 				$_SESSION['clientPercentDiscount']=(100.0-(double)$rs['clPercentDiscount'])/100.0;
    176. 

  176. 			}
    177. 

  177. 			mysql_free_result($result);
    178. 

  178. 		}
    179. 

  179. 		include(APPPATH.'views/pages/admin/uspsshipping.php');
    180. 

  180. 		include(APPPATH.'views/pages/admin/cart.php');
    181. 

  181. 		$all_coupons='';
    182. 

  182. 		for($i1 = 0; $i1 < $nodeList->length; $i1++){
    183. 

  183. 			if($nodeList->nodeName[$i1]=='calculate'){
    184. 

  184. 				$obj2=$nodeList->childNodes[$i1];
    185. 

  185. 				$shipmethods=array();
    186. 

  186. 				$cpncodes=array();
    187. 

  187. 				$usestateabbrev=TRUE;
    188. 

  188. 				$savehandling=$handling;
    189. 

  189. 				$cpnmessage = '<br />';
    190. 

  190. 				for($i2 = 0; $i2 < $obj2->length; $i2++){
    191. 

  191. 					if($obj2->nodeName[$i2]=='shipping'){
    192. 

  192. 						$obj3=$obj2->childNodes[$i2];
    193. 

  193. 						for($i3 = 0; $i3 < $obj3->length; $i3++){
    194. 

  194. 							if($obj3->nodeName[$i3]=='method'){
    195. 

  195. 								$themethod = getattributes($obj3->attributes[$i3], 'name');
    196. 

  196. 								array_push($shipmethods, $themethod);
    197. 

  197. 							}
    198. 

  198. 						}
    199. 

  199. 					}elseif($obj2->nodeName[$i2]=='merchant-code-strings'){
    200. 

  200. 						$obj3=$obj2->childNodes[$i2];
    201. 

  201. 						for($i3 = 0; $i3 < $obj3->length; $i3++){
    202. 

  202. 							if($obj3->nodeName[$i3]=='merchant-code-string'){
    203. 

  203. 								$cpncode = getattributes($obj3->attributes[$i3], 'code'); // Because they arrive in NON reverse order
    204. 

  204. 								array_push($cpncodes, $cpncode);
    205. 

  205. 								$all_coupons.=$cpncode.' ';
    206. 

  206. 							}
    207. 

  207. 						}
    208. 

  208. 					}
    209. 

  209. 				}
    210. 

  210. 				$saveshipmethods = $shipmethods;
    211. 

  211. 				for($i2 = 0; $i2 < $obj2->length; $i2++){
    212. 

  212. 					if($obj2->nodeName[$i2]=='addresses'){
    213. 

  213. 						$obj3=$obj2->childNodes[$i2];
    214. 

  214. 						for($i3 = 0; $i3 < $obj3->length; $i3++){
    215. 

  215. 							if($obj3->nodeName[$i3]=='anonymous-address'){
    216. 

  216. 								$shipmethods = $saveshipmethods;
    217. 

  217. 								$numshipoptions=0;
    218. 

  218. 								$totShipOptions=0;
    219. 

  219. 								$freeshippingapplied=FALSE;
    220. 

  220. 								$noshipping=($shipType==0);
    221. 

  221. 								$totaldiscounts=0;
    222. 

  222. 								$gotcpncode=FALSE;
    223. 

  223. 								$cpnmessage = '<br />';
    224. 

  224. 								$iTotItems = 0;
    225. 

  225. 								$destinationsupported=TRUE;
    226. 

  226. 								$addressid = getattributes($obj3->attributes[$i3], 'id');
    227. 

  227. 								$obj4=$obj3->childNodes[$i3];
    228. 

  228. 								for($i4 = 0; $i4 < $obj4->length; $i4++){
    229. 

  229. 									if($obj4->nodeName[$i4]=='country-code'){
    230. 

  230. 										$shipCountryCode = $obj4->nodeValue[$i4];
    231. 

  231. 									}elseif($obj4->nodeName[$i4]=='region'){
    232. 

  232. 										$shipstate = $obj4->nodeValue[$i4];
    233. 

  233. 									}elseif($obj4->nodeName[$i4]=='postal-code'){
    234. 

  234. 										$destZip = $obj4->nodeValue[$i4];
    235. 

  235. 									}
    236. 

  236. 								}
    237. 

  237. 								// Firstly check in the cache
    238. 

  238. 								$foundincache=-1;
    239. 

  239. 								for($gindex3=0; $gindex3 < $maxcacheid; $gindex3++){
    240. 

  240. 									if($cacheaddress[$gindex3][0]==$destZip && $cacheaddress[$gindex3][1]==$shipCountryCode) $foundincache=$gindex3;
    241. 

  241. 								}
    242. 

  242. 								if($foundincache >= 0){
    243. 

  243. 									$responsexml .= str_replace($cacheaddress[$foundincache][2], $addressid, $cacheaddress[$foundincache][3]);
    244. 

  244. 								}else{
    245. 

  245. 									$cacheaddress[$maxcacheid][0] = $destZip;
    246. 

  246. 									$cacheaddress[$maxcacheid][1] = $shipCountryCode;
    247. 

  247. 									$cacheaddress[$maxcacheid][2] = $addressid;
    248. 

  248. 									$cacheaddress[$maxcacheid][3] = '';
    249. 

  249. 									$sSQL = "SELECT countryID,countryName,countryTax,countryCode,countryFreeShip,countryOrder,countryEnabled FROM countries WHERE countryCode='" . mysql_real_escape_string($shipCountryCode) . "'";
    250. 

  250. 									$result = mysql_query($sSQL) or print(mysql_error());
    251. 

  251. 									if($rs = mysql_fetch_array($result)){
    252. 

  252. 										//if trim(Session("clientUser")) <> "" AND (Session("clientActions") AND 2)=2 then countryTaxRate=0 else countryTaxRate = $rs['countryTax")
    253. 

  253. 										$shipCountryID = $rs['countryID'];
    254. 

  254. 										$shipCountryCode = $rs['countryCode'];
    255. 

  255. 										$freeshipapplies = ($rs['countryFreeShip']==1);
    256. 

  256. 										$shiphomecountry = ($rs['countryOrder']==2);
    257. 

  257. 										$shipcountry = $rs['countryName'];
    258. 

  258. 										if($rs['countryEnabled']==0) $destinationsupported=FALSE;
    259. 

  259. 									}
    260. 

  260. 									if($shiphomecountry){
    261. 

  261. 										$sSQL = "SELECT stateTax,stateAbbrev,stateFreeShip,stateEnabled FROM states WHERE stateAbbrev='" . mysql_real_escape_string($shipstate) . "'";
    262. 

  262. 										$result = mysql_query($sSQL) or print(mysql_error());
    263. 

  263. 										if($rs = mysql_fetch_array($result)){
    264. 

  264. 											$stateTaxRate=$rs['stateTax'];
    265. 

  265. 											$shipStateAbbrev=$rs['stateAbbrev'];
    266. 

  266. 											$freeshipapplies=($freeshipapplies && ($rs['stateFreeShip']==1));
    267. 

  267. 											if($rs['stateEnabled']==0) $destinationsupported=FALSE;
    268. 

  268. 										}
    269. 

  269. 									}
    270. 

  270. 									if(! $destinationsupported){
    271. 

  271. 										foreach($shipmethods as $key => $shipmethod){
    272. 

  272. 											$responsexml .= '<result' . ($noshipping ? '' : ' shipping-name="' . $shipmethod . '"') . ' address-id="' . $addressid . '"><shipping-rate currency="' . $countryCurrency . '">0.00</shipping-rate><shippable>false</shippable><total-tax currency="' . $countryCurrency . '">0.00</total-tax></result>';
    273. 

  273. 										}
    274. 

  274. 									}else{
    275. 

  275. 										initshippingmethods();
    276. 

  276. 										$totalgoods=0;
    277. 

  277. 										$alldata='';
    278. 

  278. 										$index = 0;
    279. 

  279. 										$sSQL = "SELECT cartID,cartProdID,cartProdName,cartProdPrice,cartQuantity,pWeight,pShipping,pShipping2,pExemptions,pSection,topSection,pDims,pTax," . getlangid('pDescription',2) . " FROM cart INNER JOIN products ON cart.cartProdID=products.pID LEFT OUTER JOIN sections ON products.pSection=sections.sectionID WHERE cartCompleted=0 AND " . getgcsessionsql();
    280. 

  280. 										if($standalonetestmode) print $sSQL . "<br>";
    281. 

  281. 										$allcart = mysql_query($sSQL) or print(mysql_error());
    282. 

  282. 										if(($itemsincart = mysql_num_rows($allcart)) > 0){
    283. 

  283. 											while($rsCart=mysql_fetch_array($allcart)){
    284. 

  284. 												$index++;
    285. 

  285. 												$sSQL = "SELECT SUM(coPriceDiff) AS coPrDff FROM cartoptions WHERE coCartID=". $rsCart["cartID"];
    286. 

  286. 												$result = mysql_query($sSQL) or print(mysql_error());
    287. 

  287. 												if($rs = mysql_fetch_array($result)){
    288. 

  288. 													$rsCart["cartProdPrice"] += (double)$rs["coPrDff"];
    289. 

  289. 												}
    290. 

  290. 												mysql_free_result($result);
    291. 

  291. 												$sSQL = "SELECT SUM(coWeightDiff) AS coWghtDff FROM cartoptions WHERE coCartID=". $rsCart["cartID"];
    292. 

  292. 												$result = mysql_query($sSQL) or print(mysql_error());
    293. 

  293. 												if($rs = mysql_fetch_array($result)){
    294. 

  294. 													$rsCart["pWeight"] += (double)$rs["coWghtDff"];
    295. 

  295. 												}
    296. 

  296. 												mysql_free_result($result);
    297. 

  297. 												$runTot=$rsCart["cartProdPrice"] * (int)($rsCart["cartQuantity"]);
    298. 

  298. 												$totalquantity += (int)($rsCart["cartQuantity"]);
    299. 

  299. 												$totalgoods += $runTot;
    300. 

  300. 												$thistopcat=0;
    301. 

  301. 												if(trim(@$_SESSION['clientUser']) != '') $rsCart['pExemptions'] = ((int)$rsCart['pExemptions'] | (int)$_SESSION['clientActions']);
    302. 

  302. 												if(($shipType==2 || $shipType==3 || $shipType==4 || $shipType==6 || $shipType==7) && (double)$rsCart['pWeight']<=0.0)
    303. 

  303. 													$rsCart['pExemptions'] = ($rsCart['pExemptions'] | 4);
    304. 

  304. 												if(($rsCart['pExemptions'] & 1)==1) $statetaxfree += $runTot;
    305. 

  305. 												if(@$perproducttaxrate==TRUE){
    306. 

  306. 													if(is_null($rsCart['pTax'])) $rsCart['pTax'] = $countryTaxRate;
    307. 

  307. 													if(($rsCart['pExemptions'] & 2) != 2) $countryTax += (($rsCart['pTax'] * $runTot) / 100.0);
    308. 

  308. 												}else{
    309. 

  309. 													if(($rsCart['pExemptions'] & 2)==2) $countrytaxfree += $runTot;
    310. 

  310. 												}
    311. 

  311. 												if(($rsCart['pExemptions'] & 4)==4) $shipfreegoods += $runTot;
    312. 

  312. 												addproducttoshipping($rsCart, $index);
    313. 

  313. 											}
    314. 

  314. 										}else{
    315. 

  315. 											$errormsg = "Error, couldn't find cart";
    316. 

  316. 											$success=FALSE;
    317. 

  317. 										}
    318. 

  318. 										calculatediscounts($totalgoods, false, $cpncode);
    319. 

  319. 										if($totaldiscounts > $totalgoods) $totaldiscounts = $totalgoods;
    320. 

  320. 										if($success && calculateshipping()){
    321. 

  321. 											$freeshipamnt=0;
    322. 

  322. 											insuranceandtaxaddedtoshipping();
    323. 

  323. 											calculateshippingdiscounts(false);
    324. 

  324. 											$freeshipamnt=0;
    325. 

  325. 											$cpnmessage = substr($cpnmessage, 6);
    326. 

  326. 											if(count($shipmethods) == 0){
    327. 

  327. 												$noshipping=TRUE;
    328. 

  328. 												$handling=$savehandling;
    329. 

  329. 												$shipping=0;
    330. 

  330. 												calculatetaxandhandling();
    331. 

  331. 												writeresultstructure();
    332. 

  332. 											}else{
    333. 

  333. 												if($shipType==1 || ! $somethingToShip){
    334. 

  334. 													foreach($shipmethods as $key => $shipmethod){
    335. 

  335. 														if(xmlencodecharref($xxShipHa) == $shipmethod){
    336. 

  336. 															$handling=$savehandling;
    337. 

  337. 															if($freeshippingapplied) $shipping=0;
    338. 

  338. 															$freeshipamnt=0;
    339. 

  339. 															calculatetaxandhandling();
    340. 

  340. 															writeresultstructure();
    341. 

  341. 															$shipmethods[$key]='';
    342. 

  342. 														}
    343. 

  343. 													}
    344. 

  344. 												}elseif($shipType>=2 && $shipType<=7){
    345. 

  345. 													if($shipType==2 || $shipType==5) $totShipOptions=$numshipoptions; else $totShipOptions=$maxshipoptions;
    346. 

  346. 													for($gindex4=0; $gindex4 < $totShipOptions; $gindex4++){
    347. 

  347. 														foreach($shipmethods as $key => $shipmethod){
    348. 

  348. 															// print "matching: " . $intShipping[$gindex4][5] . " : " . $intShipping[$gindex4][4] . " : " . $shipmethod . "<br>";
    349. 

  349. 															if($shipmethod==''){
    350. 

  350. 																// Already matched
    351. 

  351. 															}elseif($shipType==3){
    352. 

  352. 																if($iTotItems==$intShipping[$gindex4][3]){
    353. 

  353. 																	if(xmlencodecharref($intShipping[$gindex4][5]) == $shipmethod){
    354. 

  354. 																		$handling=$savehandling;
    355. 

  355. 																		$isstandardship=0;
    356. 

  356. 																		for($gindex12=0;$gindex12<$numuspsmeths;$gindex12++){
    357. 

  357. 																			if(str_replace('-',' ',strtolower($shipmethod)) == str_replace('-',' ',strtolower($uspsmethods[$gindex12][2])))
    358. 

  358. 																				$isstandardship=(int)$uspsmethods[$gindex12][1];
    359. 

  359. 																		}
    360. 

  360. 																		if($freeshippingapplied && $isstandardship != 0) $shipping=0; else $shipping=$intShipping[$gindex4][2];
    361. 

  361. 																		calculatetaxandhandling();
    362. 

  362. 																		writeresultstructure();
    363. 

  363. 																		$shipmethods[$key]='';
    364. 

  364. 																	}
    365. 

  365. 																}
    366. 

  366. 															}elseif($shipType==4 || $shipType==6 || $shipType==7){
    367. 

  367. 																if($intShipping[$gindex4][3]==TRUE){
    368. 

  368. 																	if(xmlencodecharref($intShipping[$gindex4][0]) == $shipmethod){
    369. 

  369. 																		$handling=$savehandling;
    370. 

  370. 																		if($freeshippingapplied && $intShipping[$gindex4][4] != 0) $shipping=0; else $shipping=$intShipping[$gindex4][2];
    371. 

  371. 																		calculatetaxandhandling();
    372. 

  372. 																		writeresultstructure();
    373. 

  373. 																		$shipmethods[$key]='';
    374. 

  374. 																	}
    375. 

  375. 																}
    376. 

  376. 															}else{
    377. 

  377. 																// print "matching: " . $intShipping[$gindex4][0] . " : " . $intShipping[$gindex4][4] . " : " . $shipmethod . "<br>";
    378. 

  378. 																if(xmlencodecharref($intShipping[$gindex4][0]) == $shipmethod){
    379. 

  379. 																	$handling=$savehandling;
    380. 

  380. 																	if($freeshippingapplied && $intShipping[$gindex4][4] != 0) $shipping=0; else $shipping=$intShipping[$gindex4][2];
    381. 

  381. 																	calculatetaxandhandling();
    382. 

  382. 																	writeresultstructure();
    383. 

  383. 																	$shipmethods[$key]='';
    384. 

  384. 																}
    385. 

  385. 															}
    386. 

  386. 														}
    387. 

  387. 													}
    388. 

  388. 												}elseif($shipType==0){
    389. 

  389. 													$handling=$savehandling;
    390. 

  390. 													$shipping=0;
    391. 

  391. 													calculatetaxandhandling();
    392. 

  392. 													writeresultstructure();
    393. 

  393. 												}
    394. 

  394. 												if(@$willpickuptext != ''){
    395. 

  395. 													$noshipping=FALSE;
    396. 

  396. 													foreach($shipmethods as $key => $shipmethod){
    397. 

  397. 														if(xmlencodecharref($willpickuptext) == $shipmethod){
    398. 

  398. 															if(@$willpickupcost=='') $willpickupcost=0;
    399. 

  399. 															$handling=$savehandling;
    400. 

  400. 															$shipping=$willpickupcost;
    401. 

  401. 															$freeshipamnt=0;
    402. 

  402. 															calculatetaxandhandling();
    403. 

  403. 															writeresultstructure();
    404. 

  404. 															$shipmethods[$key]='';
    405. 

  405. 														}
    406. 

  406. 													}
    407. 

  407. 												}
    408. 

  408. 												foreach($shipmethods as $key => $shipmethod){
    409. 

  409. 													if($shipmethod != ''){
    410. 

  410. 														$responsexml2 = '<result' . ($noshipping ? '' : ' shipping-name="' . $shipmethod . '"') . ' address-id="' . $addressid . '"><shipping-rate currency="' . $countryCurrency . '">0.00</shipping-rate><shippable>false</shippable><total-tax currency="' . $countryCurrency . '">0.00</total-tax></result>';
    411. 

  411. 														$responsexml .= $responsexml2;
    412. 

  412. 														$cacheaddress[$maxcacheid][3] .= $responsexml2;
    413. 

  413. 													}
    414. 

  414. 												}
    415. 

  415. 											}
    416. 

  416. 										}else{
    417. 

  417. 											$responsexml .= '<error-message>' . $errormsg . '</error-message>';
    418. 

  418. 										}
    419. 

  419. 										$maxcacheid++;
    420. 

  420. 									}
    421. 

  421. 								}
    422. 

  422. 							}
    423. 

  423. 						}
    424. 

  424. 					}
    425. 

  425. 				}
    426. 

  426. 			}
    427. 

  427. 		}
    428. 

  428. 		$responsexml .= '</results></merchant-calculation-results>';
    429. 

  429. 		if($standalonetestmode)
    430. 

  430. 			print "<HR>" . str_replace("<","<br />&lt;",str_replace('</','&lt;/',$responsexml)) . "<br />\n";
    431. 

  431. 		else{
    432. 

  432. 			ob_end_clean();
    433. 

  433. 			print $responsexml;
    434. 

  434. 		}
    435. 

  435. 	break;
    436. 

  436. 	
    437. 

  437. 	case 'new-order-notification':
    438. 

  438. 		function get_google_address($xmlobj,&$gEmail,&$gName,&$gAddress,&$gAddress2,&$gCity,&$gState,&$gZip,&$gCountry,&$gPhone){
    439. 

  439. 			for($index2=0; $index2 < $xmlobj->length; $index2++){
    440. 

  440. 				switch($xmlobj->nodeName[$index2]){
    441. 

  441. 				case "email":
    442. 

  442. 					$gEmail=$xmlobj->nodeValue[$index2];
    443. 

  443. 				break;
    444. 

  444. 				case "contact-name":
    445. 

  445. 					$gName=$xmlobj->nodeValue[$index2];
    446. 

  446. 				break;
    447. 

  447. 				case "address1":
    448. 

  448. 					$gAddress=$xmlobj->nodeValue[$index2];
    449. 

  449. 				break;
    450. 

  450. 				case "address2":
    451. 

  451. 					$gAddress2=$xmlobj->nodeValue[$index2];
    452. 

  452. 				break;
    453. 

  453. 				case "city":
    454. 

  454. 					$gCity=$xmlobj->nodeValue[$index2];
    455. 

  455. 				break;
    456. 

  456. 				case "region":
    457. 

  457. 					$gState=$xmlobj->nodeValue[$index2];
    458. 

  458. 				break;
    459. 

  459. 				case "postal-code":
    460. 

  460. 					$gZip=$xmlobj->nodeValue[$index2];
    461. 

  461. 				break;
    462. 

  462. 				case "country-code":
    463. 

  463. 					$gCountry=$xmlobj->nodeValue[$index2];
    464. 

  464. 				break;
    465. 

  465. 				case "phone":
    466. 

  466. 					$gPhone=$xmlobj->nodeValue[$index2];
    467. 

  467. 				break;
    468. 

  468. 				}
    469. 

  469. 			}
    470. 

  470. 		}
    471. 

  471. 		$totaldiscounts=0;
    472. 

  472. 		$stateTax=0;
    473. 

  473. 		$countryTax=0;
    474. 

  474. 		$totalgoods=0;
    475. 

  475. 		$handling=0;
    476. 

  476. 		$shipping=0;
    477. 

  477. 		$freeshipamnt=0;
    478. 

  478. 		$cpnmessage='';
    479. 

  479. 		$ordComLoc=0;
    480. 

  480. 		$ordAddInfo='';
    481. 

  481. 		$ordAffiliate='';
    482. 

  482. 		$ordExtra1='';
    483. 

  483. 		$ordExtra2='';
    484. 

  484. 		$ordShipExtra1='';
    485. 

  485. 		$ordShipExtra2='';
    486. 

  486. 		$ordCheckoutExtra1='';
    487. 

  487. 		$ordCheckoutExtra2='';
    488. 

  488. 		$success=TRUE;
    489. 

  489. 		for($i1 = 0; $i1 < $nodeList->length; $i1++){
    490. 

  490. 			switch($nodeList->nodeName[$i1]){
    491. 

  491. 			case "google-order-number":
    492. 

  492. 				$ordAuthNumber=$nodeList->nodeValue[$i1];
    493. 

  493. 			break;
    494. 

  494. 			case "order-total":
    495. 

  495. 				$ordTotal=$nodeList->nodeValue[$i1];
    496. 

  496. 			break;
    497. 

  497. 			case "shopping-cart":
    498. 

  498. 				$hasclientid=FALSE;
    499. 

  499. 				$thesessionid = '0';
    500. 

  500. 				$thesessionid = $nodeList->childNodes[$i1]->getValueByTagName('sessionid');
    501. 

  501. 				if(substr($thesessionid,0,3)=='cid') $hasclientid=TRUE;
    502. 

  502. 				$thesessionid = str_replace("'", '', substr($thesessionid,3));
    503. 

  503. 				$thissession=$thesessionid;				
    504. 

  504. 				if($thesessionid==''){
    505. 

  505. 					$success=FALSE;
    506. 

  506. 					$thesessionid = '0';
    507. 

  507. 				}
    508. 

  508. 				$ordAffiliate = $nodeList->childNodes[$i1]->getValueByTagName('partner');
    509. 

  509. 				$obj2=$nodeList->childNodes[$i1];
    510. 

  510. 				for($i2 = 0; $i2 < $obj2->length; $i2++){
    511. 

  511. 					if($obj2->nodeName[$i2]=='items'){
    512. 

  512. 						$obj3=$obj2->childNodes[$i2];
    513. 

  513. 						for($i3 = 0; $i3 < $obj3->length; $i3++){
    514. 

  514. 							if($obj3->nodeName[$i3]=='item'){
    515. 

  515. 								$obj4=$obj3->childNodes[$i3];
    516. 

  516. 								if(($objdisc = $obj4->getValueByTagName("discountflag")) != null){
    517. 

  517. 									if($objdisc=='true'){
    518. 

  518. 										$obj5 = $obj4->getValueByTagName("unit-price");
    519. 

  519. 										$totaldiscounts -= $obj5;
    520. 

  520. 										$obj5 = $obj4->getValueByTagName("item-description");
    521. 

  521. 										$cpnmessage = str_replace(' - ', '<br />', $obj5) . '<br />' . $cpnmessage;
    522. 

  522. 									}
    523. 

  523. 								}
    524. 

  524. 							}
    525. 

  525. 						}
    526. 

  526. 					}
    527. 

  527. 				}
    528. 

  528. 			break;
    529. 

  529. 			case "total-tax":
    530. 

  530. 				$countryTax=$nodeList->nodeValue[$i1];
    531. 

  531. 			break;
    532. 

  532. 			case "order-adjustment":
    533. 

  533. 				$obj2=$nodeList->childNodes[$i1];
    534. 

  534. 				for($i2 = 0; $i2 < $obj2->length; $i2++){
    535. 

  535. 					if($obj2->nodeName[$i2]=='merchant-codes'){
    536. 

  536. 						$obj3=$obj2->childNodes[$i2];
    537. 

  537. 						for($i3 = 0; $i3 < $obj3->length; $i3++){
    538. 

  538. 							if($obj3->nodeName[$i3]=='coupon-adjustment'){
    539. 

  539. 								$obj4=$obj3->childNodes[$i3];
    540. 

  540. 								for($i4 = 0; $i4 < $obj4->length; $i4++){
    541. 

  541. 									if($obj4->nodeName[$i4]=='applied-amount')
    542. 

  542. 										$totaldiscounts += $obj4->nodeValue[$i4];
    543. 

  543. 									elseif($obj4->nodeName[$i4]=='message')
    544. 

  544. 										$cpnmessage = $obj4->nodeValue[$i4] . '<br />' . $cpnmessage;
    545. 

  545. 								}
    546. 

  546. 							}
    547. 

  547. 						}
    548. 

  548. 					}elseif($obj2->nodeName[$i2]=='shipping'){
    549. 

  549. 						$obj3=$obj2->childNodes[$i2];
    550. 

  550. 						if(($obj4 = $obj3->getValueByTagName("shipping-name")) != null) $shipMethod=$obj4;
    551. 

  551. 						if(($obj4 = $obj3->getValueByTagName("shipping-cost")) != null) $shipping=$obj4;
    552. 

  552. 					}elseif($obj2->nodeName[$i2]=='total-tax'){
    553. 

  553. 						$countryTax += $obj2->nodeValue[$i2];
    554. 

  554. 					}
    555. 

  555. 				}
    556. 

  556. 			break;
    557. 

  557. 			case "buyer-billing-address":
    558. 

  558. 				get_google_address($nodeList->childNodes[$i1],$ordEmail,$ordName,$ordAddress,$ordAddress2,$ordCity,$ordState,$ordZip,$ordCountry,$ordPhone);
    559. 

  559. 			break;
    560. 

  560. 			case "buyer-shipping-address":
    561. 

  561. 				get_google_address($nodeList->childNodes[$i1],$dummyEmail,$ordShipName,$ordShipAddress,$ordShipAddress2,$ordShipCity,$ordShipState,$ordShipZip,$ordShipCountry,$ordShipPhone);
    562. 

  562. 			break;
    563. 

  563. 			}
    564. 

  564. 		}
    565. 

  565. 		if($success){
    566. 

  566. 			$sSQL = "SELECT cartID FROM cart WHERE cartCompleted=0 AND " . getgcsessionsql();
    567. 

  567. 			$result = mysql_query($sSQL) or print(mysql_error());
    568. 

  568. 			$thissql=$sSQL;
    569. 

  569. 			$success = (mysql_num_rows($result) > 0);
    570. 

  570. 		}
    571. 

  571. 		if($success){
    572. 

  572. 			$totalgoods = ($ordTotal - ($stateTax+$countryTax+$shipping+$handling)) + $totaldiscounts;
    573. 

  573. 			$sSQL = "SELECT ordID FROM orders WHERE ordAuthNumber='' AND " . getgcordersessionsql();
    574. 

  574. 			$result = mysql_query($sSQL) or print(mysql_error());
    575. 

  575. 			if($rs = mysql_fetch_array($result))
    576. 

  576. 				$orderid=$rs["ordID"];
    577. 

  577. 			else
    578. 

  578. 				$orderid="";
    579. 

  579. 			mysql_free_result($result);
    580. 

  580. 			if($ordShipName=='' && $ordShipAddress=='' && $ordShipAddress2=='' && $ordShipCity=='') $ordShipCountry='';
    581. 

  581. 			if($orderid==""){
    582. 

  582. 				if(stristr('AA,AE,AP',$ordState)) $ordPoApo=1;
    583. 

  583. 				else $ordPoApo=0;
    584. 

  584. 				if(stristr('AA,AE,AP',$ordShipState)) $ordShipPoApo=1;
    585. 

  585. 				else $ordShipPoApo=0;
    586. 

  586. 				$sSQL = "INSERT INTO orders (ordSessionID,ordName,ordAddress,ordAddress2,ordCity,ordState,ordZip,ordCountry,ordEmail,ordPhone,ordShipName,ordShipAddress,ordShipAddress2,ordShipCity,ordShipState,ordShipZip,ordShipCountry,ordPayProvider,ordAuthNumber,ordShipping,ordStateTax,ordCountryTax,ordHSTTax,ordHandling,ordShipType,ordTotal,ordDate,ordStatus,ordStatusDate,ordComLoc,ordIP,ordAffiliate,ordExtra1,ordExtra2,ordDiscount,ordDiscountText,ordAddInfo,ordPoApo,ordShipPoApo,ord_cert_amt,ordEID) VALUES (";
    587. 

  587. 				$sSQL .= "'" . $thesessionid . "',";
    588. 

  588. 				//if($hasclientid) $sSQL .= "'" . mysql_real_escape_string($thesessionid) . "',"; else $sSQL .= "'0',";
    589. 

  589. 				$sSQL .= "'" . mysql_real_escape_string($ordName) . "',";
    590. 

  590. 				$sSQL .= "'" . mysql_real_escape_string($ordAddress) . "',";
    591. 

  591. 				$sSQL .= "'" . mysql_real_escape_string($ordAddress2) . "',";
    592. 

  592. 				$sSQL .= "'" . mysql_real_escape_string($ordCity) . "',";
    593. 

  593. 				$sSQL .= "'" . mysql_real_escape_string($ordState) . "',";
    594. 

  594. 				$sSQL .= "'" . mysql_real_escape_string($ordZip) . "',";
    595. 

  595. 				$sSQL .= "'" . mysql_real_escape_string($ordCountry) . "',";
    596. 

  596. 				$sSQL .= "'" . mysql_real_escape_string($ordEmail) . "',";
    597. 

  597. 				$sSQL .= "'" . mysql_real_escape_string($ordPhone) . "',";
    598. 

  598. 				$sSQL .= "'" . mysql_real_escape_string($ordShipName) . "',";
    599. 

  599. 				$sSQL .= "'" . mysql_real_escape_string($ordShipAddress) . "',";
    600. 

  600. 				$sSQL .= "'" . mysql_real_escape_string($ordShipAddress2) . "',";
    601. 

  601. 				$sSQL .= "'" . mysql_real_escape_string($ordShipCity) . "',";
    602. 

  602. 				$sSQL .= "'" . mysql_real_escape_string($ordShipState) . "',";
    603. 

  603. 				$sSQL .= "'" . mysql_real_escape_string($ordShipZip) . "',";
    604. 

  604. 				$sSQL .= "'" . mysql_real_escape_string($ordShipCountry) . "',";
    605. 

  605. 				$sSQL .= "'20',"; // ordPayProvider
    606. 

  606. 				$sSQL .= "'" . $ordAuthNumber . "',";
    607. 

  607. 				$sSQL .= "'" . mysql_real_escape_string($shipping-$freeshipamnt) . "',";
    608. 

  608. 				if($usehst){
    609. 

  609. 					$sSQL .= "0,";
    610. 

  610. 					$sSQL .= "0,";
    611. 

  611. 					$sSQL .= ($stateTax + $countryTax) . ",";
    612. 

  612. 				}else{
    613. 

  613. 					$sSQL .= "'" . mysql_real_escape_string($stateTax) . "',";
    614. 

  614. 					$sSQL .= "'" . mysql_real_escape_string($countryTax) . "',";
    615. 

  615. 					$sSQL .= "0,";
    616. 

  616. 				}
    617. 

  617. 				$sSQL .= "'" . mysql_real_escape_string($handling) . "',";
    618. 

  618. 				$sSQL .= "'" . mysql_real_escape_string($shipMethod) . "',";
    619. 

  619. 				/*if($adminIntShipping != 0 && $ordShipCountry != $origCountryCode)
    620. 

  620. 					$sSQL .= "'" . mysql_real_escape_string($adminIntShipping) . "',";
    621. 

  621. 				else
    622. 

  622. 					$sSQL .= "'" . mysql_real_escape_string($shipType) . "',";*/
    623. 

  623. 				$sSQL .= "'" . mysql_real_escape_string($totalgoods) . "',";
    624. 

  624. 				$sSQL .= "'" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "',";
    625. 

  625. 				$sSQL .= "2,"; // Status
    626. 

  626. 				$sSQL .= "'" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "',";
    627. 

  627. 				$sSQL .= "'" . $ordComLoc . "',";
    628. 

  628. 				$sSQL .= "'',"; // IP
    629. 

  629. 				$sSQL .= "'" . mysql_real_escape_string(trim($ordAffiliate)) . "',";
    630. 

  630. 				$sSQL .= "'" . mysql_real_escape_string($ordExtra1) . "',";
    631. 

  631. 				$sSQL .= "'" . mysql_real_escape_string($ordExtra2) . "',";
    632. 

  632. 				/*$sSQL .= "'" . mysql_real_escape_string($ordShipExtra1) . "',";
    633. 

  633. 				$sSQL .= "'" . mysql_real_escape_string($ordShipExtra2) . "',";
    634. 

  634. 				$sSQL .= "'" . mysql_real_escape_string($ordCheckoutExtra1) . "',";
    635. 

  635. 				$sSQL .= "'" . mysql_real_escape_string($ordCheckoutExtra2) . "',";*/
    636. 

  636. 				$sSQL .= "'" . mysql_real_escape_string($totaldiscounts) . "',";
    637. 

  637. 				$sSQL .= "'" . mysql_real_escape_string(trim(substr($cpnmessage,0,255))) . "',";
    638. 

  638. 				$sSQL .= "'" . mysql_real_escape_string($ordAddInfo) . "',";
    639. 

  639. 				$sSQL .= "'" . mysql_real_escape_string($ordPoApo) . "',";
    640. 

  640. 				$sSQL .= "'" . mysql_real_escape_string($ordShipPoApo) . "',";
    641. 

  641. 				$sSQL .= "'" . mysql_real_escape_string($ord_cert_amt) . "',";
    642. 

  642. 				$sSQL .= "'" . mysql_real_escape_string($ordEID) . "')";
    643. 

  643. 				mysql_query($sSQL) or $sqlerror=(mysql_error());
    644. 

  644. 				$orderid = mysql_insert_id();
    645. 

  645. 				if(!setNewLocation( 2 , $orderid ));
    646. 

  646. 			}else{
    647. 

  647. 				$sSQL = "UPDATE orders SET ";
    648. 

  648. 				$sSQL .= "ordSessionID='" . mysql_real_escape_string($thesessionid) . "',";
    649. 

  649. 				$sSQL .= "ordName='" . mysql_real_escape_string($ordName) . "',";
    650. 

  650. 				$sSQL .= "ordAddress='" . mysql_real_escape_string($ordAddress) . "',";
    651. 

  651. 				$sSQL .= "ordAddress2='" . mysql_real_escape_string($ordAddress2) . "',";
    652. 

  652. 				$sSQL .= "ordCity='" . mysql_real_escape_string($ordCity) . "',";
    653. 

  653. 				$sSQL .= "ordState='" . mysql_real_escape_string($ordState) . "',";
    654. 

  654. 				$sSQL .= "ordZip='" . mysql_real_escape_string($ordZip) . "',";
    655. 

  655. 				$sSQL .= "ordCountry='" . mysql_real_escape_string($ordCountry) . "',";
    656. 

  656. 				$sSQL .= "ordEmail='" . mysql_real_escape_string($ordEmail) . "',";
    657. 

  657. 				$sSQL .= "ordPhone='" . mysql_real_escape_string($ordPhone) . "',";
    658. 

  658. 				$sSQL .= "ordShipName='" . mysql_real_escape_string($ordShipName) . "',";
    659. 

  659. 				$sSQL .= "ordShipAddress='" . mysql_real_escape_string($ordShipAddress) . "',";
    660. 

  660. 				$sSQL .= "ordShipAddress2='" . mysql_real_escape_string($ordShipAddress2) . "',";
    661. 

  661. 				$sSQL .= "ordShipCity='" . mysql_real_escape_string($ordShipCity) . "',";
    662. 

  662. 				$sSQL .= "ordShipState='" . mysql_real_escape_string($ordShipState) . "',";
    663. 

  663. 				$sSQL .= "ordShipZip='" . mysql_real_escape_string($ordShipZip) . "',";
    664. 

  664. 				$sSQL .= "ordShipCountry='" . mysql_real_escape_string($ordShipCountry) . "',";
    665. 

  665. 				$sSQL .= "ordPayProvider='20',";
    666. 

  666. 				$sSQL .= "ordAuthNumber='" . $ordAuthNumber . "',"; // Not yet authorized
    667. 

  667. 				$sSQL .= "ordShipping='" . ($shipping - $freeshipamnt) . "',";
    668. 

  668. 				if($usehst){
    669. 

  669. 					$sSQL .= "ordStateTax=0,";
    670. 

  670. 					$sSQL .= "ordCountryTax=0,";
    671. 

  671. 					$sSQL .= "ordHSTTax=" . ($stateTax + $countryTax) . ",";
    672. 

  672. 				}else{
    673. 

  673. 					$sSQL .= "ordStateTax='" . $stateTax . "',";
    674. 

  674. 					$sSQL .= "ordCountryTax='" . $countryTax . "',";
    675. 

  675. 					$sSQL .= "ordHSTTax=0,";
    676. 

  676. 				}
    677. 

  677. 				$sSQL .= "ordHandling='" . $handling . "',";
    678. 

  678. 				$sSQL .= "ordShipType='" . $shipMethod . "',";
    679. 

  679. 				/*if($adminIntShipping != 0 && $ordShipCountry != $origCountryCode)
    680. 

  680. 					$sSQL .= "ordShipCarrier='" . $adminIntShipping . "',";
    681. 

  681. 				else
    682. 

  682. 					$sSQL .= "ordShipCarrier='" . $shipType . "',";*/
    683. 

  683. 				$sSQL .= "ordTotal='" . $totalgoods . "',";
    684. 

  684. 				$sSQL .= "ordDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "',";
    685. 

  685. 				$sSQL .= "ordComLoc=" . $ordComLoc . ",";
    686. 

  686. 				$sSQL .= "ordIP='" . @$_SERVER["REMOTE_ADDR"] . "',";
    687. 

  687. 				$sSQL .= "ordAffiliate='" . mysql_real_escape_string(trim($ordAffiliate)) . "',";
    688. 

  688. 				/*$sSQL .= "ordExtra1='" . mysql_real_escape_string($ordExtra1) . "',";
    689. 

  689. 				$sSQL .= "ordExtra2='" . mysql_real_escape_string($ordExtra2) . "',";
    690. 

  690. 				$sSQL .= "ordShipExtra1='" . mysql_real_escape_string($ordShipExtra1) . "',";
    691. 

  691. 				$sSQL .= "ordShipExtra2='" . mysql_real_escape_string($ordShipExtra2) . "',";
    692. 

  692. 				$sSQL .= "ordCheckoutExtra1='" . mysql_real_escape_string($ordCheckoutExtra1) . "',";
    693. 

  693. 				$sSQL .= "ordCheckoutExtra2='" . mysql_real_escape_string($ordCheckoutExtra2) . "',";*/
    694. 

  694. 				$sSQL .= "ordDiscount='" . $totaldiscounts . "',";
    695. 

  695. 				$sSQL .= "ordDiscountText='" . mysql_real_escape_string(trim(substr($cpnmessage,0,255))) . "',";
    696. 

  696. 				$sSQL .= "ordAddInfo='" . mysql_real_escape_string($ordAddInfo) . "'";
    697. 

  697. 				$sSQL .= " WHERE ordID='" . $orderid . "'";
    698. 

  698. 				mysql_query($sSQL) or print(mysql_error());
    699. 

  699. 			}
    700. 

  700. 			$sSQL="UPDATE cart SET cartOrderID=". $orderid . ",cartCompleted=2 WHERE cartCompleted=0 AND " . getgcsessionsql();
    701. 

  701. 			mysql_query($sSQL) or print(mysql_error());
    702. 

  702. 			
    703. 

  703. 			//split order if needed
    704. 

  704. 			include(DOCROOT.'includes/splitorder.php');
    705. 

  705. 			splitOrders($orderid);
    706. 

  706. 			
    707. 

  707. 			$cfurl='https://' . ($googledemomode ? 'sandbox' : 'checkout') . '.google.com' . ($googledemomode ? '/checkout' : '') . '/cws/v2/Merchant/' . $googledata1 . '/request';
    708. 

  708. 			$acttext = '<add-merchant-order-number xmlns="http://checkout.google.com/schema/2" google-order-number="' . $ordAuthNumber . '"><merchant-order-number>' . $orderid . '</merchant-order-number></add-merchant-order-number>';
    709. 

  709. 			if(@$pathtocurl != ""){
    710. 

  710. 				exec($pathtocurl . ($cfcert != '' ? ' -E \'' . $cfcert . '\'' : '') . ' --data-binary \'' . str_replace("'","\'",'<?xml version="1.0" encoding="UTF-8"?>' . $acttext) . '\' ' . $cfurl, $cfres, $retvar);
    711. 

  711. 				$cfres = implode("\n",$cfres);
    712. 

  712. 			}else{
    713. 

  713. 				if (!$ch = curl_init()) {
    714. 

  714. 					print "cURL package not installed in PHP. Set \$pathtocurl parameter.";
    715. 

  715. 					$success=FALSE;
    716. 

  716. 				}else{
    717. 

  717. 					curl_setopt($ch, CURLOPT_URL, $cfurl);
    718. 

  718. 					$headers = array('Authorization: Basic ' . base64_encode($googledata1 . ":" . $googledata2), 'Content-Type: application/xml', 'Accept: application/xml');
    719. 

  719. 					curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
    720. 

  720. 					curl_setopt($ch, CURLOPT_POST, 1);
    721. 

  721. 					curl_setopt($ch, CURLOPT_HEADER, 0);
    722. 

  722. 					curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
    723. 

  723. 					curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
    724. 

  724. 					curl_setopt($ch, CURLOPT_POSTFIELDS, '<?xml version="1.0" encoding="UTF-8"?>' . $acttext);
    725. 

  725. 					curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    726. 

  726. 					if(@$curlproxy!=''){
    727. 

  727. 						curl_setopt($ch, CURLOPT_PROXY, $curlproxy);
    728. 

  728. 					}
    729. 

  729. 					$cfres = curl_exec($ch);
    730. 

  730. 					if(curl_error($ch) == '')
    731. 

  731. 						curl_close($ch);
    732. 

  732. 				}
    733. 

  733. 			}
    734. 

  734. 		}
    735. 

  735. 		print '<?xml version="1.0" encoding="UTF-8"?><notification-acknowledgment xmlns="http://checkout.google.com/schema/2"/>';
    736. 

  736. 	break;
    737. 

  737. 	case 'order-state-change-notification':
    738. 

  738. 		$ordnumber = $nodeList->getValueByTagName('google-order-number');
    739. 

  739. 		$sSQL = "SELECT ordID FROM orders WHERE ordAuthNumber='" . mysql_real_escape_string($ordnumber) . "' AND ordPayProvider=20";
    740. 

  740. 		$result = mysql_query($sSQL) or print(mysql_error());
    741. 

  741. 		if($rs = mysql_fetch_assoc($result))
    742. 

  742. 			$ordID=$rs['ordID'];
    743. 

  743. 		else
    744. 

  744. 			$ordID='';
    745. 

  745. 		$financialstate = str_replace("'",'',$nodeList->getValueByTagName('new-financial-order-state'));
    746. 

  746. 		$oldfinancialstate = str_replace("'",'',$nodeList->getValueByTagName('previous-financial-order-state'));
    747. 

  747. 		$fulfillmentstate = str_replace("'",'',$nodeList->getValueByTagName('new-fulfillment-order-state'));
    748. 

  748. 		$oldfulfillmentstate = str_replace("'",'',$nodeList->getValueByTagName('previous-fulfillment-order-state'));
    749. 

  749. 		if($ordID != ''){
    750. 

  750. 			if($oldfinancialstate != $financialstate){
    751. 

  751. 				$result = mysql_query("SELECT ordStatus FROM orders WHERE ordID='" . $ordID . "'") or print(mysql_error());
    752. 

  752. 				if($rs = mysql_fetch_assoc($result)) $oldstatus=(int)$rs['ordStatus']; else $oldstatus=999;
    753. 

  753. 				switch($financialstate){
    754. 

  754. 				case "CHARGEABLE":
    755. 

  755. 					if($oldstatus < 3) do_stock_management($ordID);
    756. 

  756. 					mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $ordID) or print(mysql_error());
    757. 

  757. 					mysql_query("UPDATE orders SET ordStatus=5,ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $ordID) or print(mysql_error());
    758. 

  758. 					if(!setNewLocation( 5 , $ordID ,'Automatic', 'Google' ));
    759. 

  759. 					do_order_success($ordID,$emailAddr,$sendEmail && ($oldstatus < 3),FALSE,($oldstatus < 3),FALSE,FALSE);
    760. 

  760. 				break;
    761. 

  761. 				case "CHARGING":
    762. 

  762. 				break;
    763. 

  763. 				case "CHARGED":
    764. 

  764. 					if($oldstatus < 3) do_stock_management($ordID);
    765. 

  765. 					mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $ordID) or print(mysql_error());
    766. 

  766. 					mysql_query("UPDATE orders SET ordStatus=3,ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $ordID) or print(mysql_error());
    767. 

  767. 					$sql_check="SELECT p.pDropship FROM cart c LEFT JOIN products p ON c.cartProdID=p.pID WHERE p.pDropship>0 AND c.cartOrderID=".$ordID;
    768. 

  768. 					$result_check=mysql_query($sql_check);
    769. 

  769. 					if(!$result_check)$num_rows=0;
    770. 

  770. 					else $num_rows=mysql_num_rows($result_check);
    771. 

  771. 					if(!setNewLocation( 3 , $ordID , 'Automatic','Google' ));
    772. 

  772. 					if($num_rows>0) {
    773. 

  773. 						if(!setNewLocation( 10 , $ordID , 'Automatic','Google Dropship' ));					
    774. 

  774. 						mysql_query("UPDATE orders SET ordStatus=10,ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $ordID) or print(mysql_error());
    775. 

  775. 					}
    776. 

  776. 					do_order_success($ordID,$emailAddr,$sendEmail && ($oldstatus < 3),FALSE,($oldstatus < 3),TRUE,TRUE);
    777. 

  777. 				break;
    778. 

  778. 				case "PAYMENT_DECLINED":
    779. 

  779. 					if($oldstatus >= 3) release_stock($ordID);
    780. 

  780. 					mysql_query("UPDATE orders SET ordStatus=2,ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $ordID) or print(mysql_error());
    781. 

  781. 					if(!setNewLocation( 2 , $ordID , 'Automatic','Google' ));
    782. 

  782. 				break;
    783. 

  783. 				case "CANCELLED":
    784. 

  784. 					if($oldstatus >= 3) release_stock($ordID);
    785. 

  785. 					mysql_query("UPDATE orders SET ordStatus=0,ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $ordID) or print(mysql_error());
    786. 

  786. 					if(!setNewLocation( 0 , $ordID, 'Automatic','Google' ));
    787. 

  787. 					//sendNotificationEmail($ordID);
    788. 

  788. 				break;
    789. 

  789. 				case "CANCELLED_BY_GOOGLE":
    790. 

  790. 					if($oldstatus >= 3) release_stock($ordID);
    791. 

  791. 					$sSQL = "SELECT ordStatusInfo FROM orders WHERE ordID=" . $ordID;
    792. 

  792. 					$result = mysql_query($sSQL) or print(mysql_error());
    793. 

  793. 					if($rs = mysql_fetch_array($result)) $currstatusinfo = $rs['ordStatusInfo']; else $currstatusinfo = '';
    794. 

  794. 					mysql_query("UPDATE orders SET ordStatus=0,ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "',ordStatusInfo='" . mysql_real_escape_string('Cancelled By Google.' . "\r\n" . $currstatusinfo) . "' WHERE ordID=" . $ordID) or print(mysql_error());
    795. 

  795. 					if(!setNewLocation( 0 , $ordID ,'Automatic','Cancelled By Google.'));
    796. 

  796. 					//sendNotificationEmail($ordID);
    797. 

  797. 				break;
    798. 

  798. 				}
    799. 

  799. 			}
    800. 

  800. 			if($oldfulfillmentstate != $fulfillmentstate){
    801. 

  801. 				if($googledeliveredstate=='') $googledeliveredstate=11;
    802. 

  802. 				switch($fulfillmentstate){
    803. 

  803. 				case "DELIVERED":
    804. 

  804. 					mysql_query("UPDATE orders SET ordStatus=" . $googledeliveredstate . ",ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $ordID) or print(mysql_error());
    805. 

  805. 					if(!setNewLocation( $googledeliveredstate , $ordID, 'Automatic','Google'));
    806. 

  806. 				break;
    807. 

  807. 				}
    808. 

  808. 			}
    809. 

  809. 		}
    810. 

  810. 		print '<?xml version="1.0" encoding="UTF-8"?><notification-acknowledgment xmlns="http://checkout.google.com/schema/2"/>';
    811. 

  811. 	break;
    812. 

  812. 	case 'charge-amount-notification':
    813. 

  813. 		print '<?xml version="1.0" encoding="UTF-8"?><notification-acknowledgment xmlns="http://checkout.google.com/schema/2"/>';
    814. 

  814. 	break;
    815. 

  815. 	case 'chargeback-amount-notification':
    816. 

  816. 		$success=TRUE;
    817. 

  817. 		$amount=0;
    818. 

  818. 		$ordID=0;
    819. 

  819. 		$ordnumber = $nodeList->getValueByTagName('google-order-number');
    820. 

  820. 		$sSQL = "SELECT ordID,ordShipping,ordStateTax,ordCountryTax,ordHandling,ordTotal,ordDiscount,ordAuthNumber,ordStatus FROM orders WHERE ordAuthNumber='" . mysql_real_escape_string($ordnumber) . "' AND ordPayProvider=20";
    821. 

  821. 		$result = mysql_query($sSQL) or print(mysql_error());
    822. 

  822. 		if($rs = mysql_fetch_array($result)){
    823. 

  823. 			$ordID = $rs['ordID'];
    824. 

  824. 			$amount = ($rs['ordShipping']+$rs['ordStateTax']+$rs['ordCountryTax']+$rs['ordTotal']+$rs['ordHandling'])-$rs['ordDiscount'];
    825. 

  825. 			$oldstatus = $rs['ordStatus'];
    826. 

  826. 		}else
    827. 

  827. 			$success = FALSE;
    828. 

  828. 		$refundamount = $nodeList->getValueByTagName('total-chargeback-amount');
    829. 

  829. 		if($success && $amount <= $refundamount){
    830. 

  830. 			if($oldstatus >= 3) release_stock($ordID);
    831. 

  831. 			mysql_query("UPDATE orders SET ordStatus=0,ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $ordID);
    832. 

  832. 			if(!setNewLocation( 0 , $ordID ,'Automatic','Chargeback By Google.'));
    833. 

  833. 		}
    834. 

  834. 		print '<?xml version="1.0" encoding="UTF-8"?><notification-acknowledgment xmlns="http://checkout.google.com/schema/2"/>';
    835. 

  835. 	break;
    836. 

  836. 	case 'refund-amount-notification':
    837. 

  837. 		$success=TRUE;
    838. 

  838. 		$amount=0;
    839. 

  839. 		$ordID=0;
    840. 

  840. 		$ordnumber = $nodeList->getValueByTagName('google-order-number');
    841. 

  841. 		$sSQL = "SELECT ordID,ordShipping,ordStateTax,ordCountryTax,ordHandling,ordTotal,ordDiscount,ordAuthNumber,ordStatus FROM orders WHERE ordAuthNumber='" . mysql_real_escape_string($ordnumber) . "' AND ordPayProvider=20";
    842. 

  842. 		$result = mysql_query($sSQL) or print(mysql_error());
    843. 

  843. 		if($rs = mysql_fetch_array($result)){
    844. 

  844. 			$ordID = $rs['ordID'];
    845. 

  845. 			$amount = ($rs['ordShipping']+$rs['ordStateTax']+$rs['ordCountryTax']+$rs['ordTotal']+$rs['ordHandling'])-$rs['ordDiscount'];
    846. 

  846. 			$oldstatus = $rs['ordStatus'];
    847. 

  847. 		}else
    848. 

  848. 			$success = FALSE;
    849. 

  849. 		$refundamount = $nodeList->getValueByTagName('total-refund-amount');
    850. 

  850. 		if($success && $amount <= $refundamount){
    851. 

  851. 			if($oldstatus >= 3) release_stock($ordID);
    852. 

  852. 			mysql_query("UPDATE orders SET ordStatus=0,ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $ordID);
    853. 

  853. 			if(!setNewLocation( 0 , $ordID ,'Automatic','Refund By Google.'));
    854. 

  854. 		}
    855. 

  855. 		print '<?xml version="1.0" encoding="UTF-8"?><notification-acknowledgment xmlns="http://checkout.google.com/schema/2"/>';
    856. 

  856. 	break;
    857. 

  857. 	case 'risk-information-notification':
    858. 

  858. 		$ipaddress = '';
    859. 

  859. 		$avs = '';
    860. 

  860. 		$cvv = '';
    861. 

  861. 		$iseligable = '';
    862. 

  862. 		$partialcc = '';
    863. 

  863. 		$acctage = 0;
    864. 

  864. 		$ordnumber = $nodeList->getValueByTagName('google-order-number');
    865. 

  865. 		for($i1 = 0; $i1 < $nodeList->length; $i1++){
    866. 

  866. 			if($nodeList->nodeName[$i1]=='risk-information'){
    867. 

  867. 				$obj2=$nodeList->childNodes[$i1];
    868. 

  868. 				for($i2 = 0; $i2 < $obj2->length; $i2++){
    869. 

  869. 					if($obj2->nodeName[$i2]=='ip-address'){
    870. 

  870. 						$ipaddress = $obj2->nodeValue[$i2];
    871. 

  871. 					}elseif($obj2->nodeName[$i2]=='avs-response'){
    872. 

  872. 						$avs = $obj2->nodeValue[$i2];
    873. 

  873. 					}elseif($obj2->nodeName[$i2]=='cvn-response'){
    874. 

  874. 						$cvv = $obj2->nodeValue[$i2];
    875. 

  875. 					}elseif($obj2->nodeName[$i2]=='buyer-account-age'){
    876. 

  876. 						$acctage = $obj2->nodeValue[$i2];
    877. 

  877. 					}elseif($obj2->nodeName[$i2]=='partial-cc-number'){
    878. 

  878. 						$partialcc = $obj2->nodeValue[$i2];
    879. 

  879. 					}elseif($obj2->nodeName[$i2]=='eligible-for-protection'){
    880. 

  880. 						$iseligable = $obj2->nodeValue[$i2];
    881. 

  881. 						if($iseligable=='false') $iseligable=$xxNo; else $iseligable=$xxYes;
    882. 

  882. 					}
    883. 

  883. 				}
    884. 

  884. 			}
    885. 

  885. 		}
    886. 

  886. 		if($ordnumber != ''){
    887. 

  887. 			$sSQL = "UPDATE orders SET ordIP='" . mysql_real_escape_string($ipaddress) . "',ordAVS='" . mysql_real_escape_string($avs) . "/" . $iseligable . "',ordCVV='" . mysql_real_escape_string($cvv) . '/' . $acctage . "',ordCNum='" . $partialcc . "' WHERE ordAuthNumber='" . $ordnumber . "' AND ordPayProvider=20";
    888. 

  888. 			mysql_query($sSQL);
    889. 

  889. 		}
    890. 

  890. 		print '<?xml version="1.0" encoding="UTF-8"?><notification-acknowledgment xmlns="http://checkout.google.com/schema/2"/>';
    891. 

  891. 	break;
    892. 

  892. 	case 'request-received':
    893. 

  893. 		print '<?xml version="1.0" encoding="UTF-8"?><notification-acknowledgment xmlns="http://checkout.google.com/schema/2"/>';
    894. 

  894. 	break;
    895. 

  895. 	case 'error':
    896. 

  896. 		print '<?xml version="1.0" encoding="UTF-8"?><notification-acknowledgment xmlns="http://checkout.google.com/schema/2"/>';
    897. 

  897. 	break;
    898. 

  898. 	case 'diagnosis':
    899. 

  899. 		print '<?xml version="1.0" encoding="UTF-8"?><notification-acknowledgment xmlns="http://checkout.google.com/schema/2"/>';
    900. 

  900. 	break;
    901. 

  901. 	default:
    902. 

  902. 	}
    903. 

  903. }
    904. 

  904. if(@$debugmode==TRUE){
    905. 

  905. 	$htmlemails=FALSE;
    906. 

  906. 	$emlNl="\n";
    907. 

  907. 	$headers = "MIME-Version: 1.0\n";
    908. 

  908. 	$headers .= "From: ".$emailAddr." <".$emailAddr.">\n";
    909. 

  909. 	$headers .= "Content-type: text/plain; charset=ISO-8859-1\n";
    910. 

  910. 	$emailtxt = "ThisMessage: " . $xmlResponse . $emlNl . $emlNl . "Response: " . $responsexml . $emlNl;
    911. 

  911. 	$emailtxt .=  "Callback took: " . (microtime_float() - $time_start) . " seconds" . $emlNl;
    912. 

  912. 	mail($emailAddr, "/admin/gcallback.php debug", $emailtxt.'Coupons='.$all_coupons, $headers);
    913. 

  913. }
    914. 

  914. ?>
    915.