/wp-content/plugins/wp-e-commerce/wpsc-admin/ajax-and-init.php

<?php

/**

 * WP eCommerce Admin AJAX functions

 *

 * These are the WPSC Admin AJAX functions

 *

 * @package wp-e-commerce

 * @since 3.7

 */

//exit('<pre>'.print_r($_POST, true).'</pre>');

 function wpsc_ajax_add_tracking() {

  	global $wpdb;

  	foreach($_POST as $key=>$value){

	  	if($value != ''){

  		 	$parts = preg_split('/^wpsc_trackingid/', $key);

	  		if(count($parts) > '1'){

	  			$id = $parts[1];

	  			$trackingid = $value;

	  			$sql = "UPDATE `".WPSC_TABLE_PURCHASE_LOGS."` SET `track_id`='".$trackingid."' WHERE `id`=".$id;

	  			$wpdb->query($sql);

	  		}

	  	}

  	}

	

}

 

 

if($_REQUEST['submit'] == 'Add Tracking ID') {

	add_action('admin_init', 'wpsc_ajax_add_tracking');

}

 function wpsc_delete_currency_layer() {

  	global $wpdb;

  	$meta_key = 'currency['.$_POST['currSymbol'].']';

  	$sql= "DELETE FROM `".WPSC_TABLE_PRODUCTMETA."` WHERE `meta_key`='".$meta_key."' LIMIT 1";

  	$wpdb->query($sql);

//	exit('<pre>'.print_r($_POST, true).'</pre>');



}

 

 

if($_REQUEST['wpsc_admin_action'] == 'delete_currency_layer') {

	add_action('admin_init', 'wpsc_delete_currency_layer');

}





 function wpsc_purchlog_email_trackid() {

  	global $wpdb;

  	$id = absint($_POST['purchlog_id']);

  	$trackingid = $wpdb->get_var("SELECT `track_id` FROM ".WPSC_TABLE_PURCHASE_LOGS." WHERE `id`={$id} LIMIT 1");



		$message = get_option('wpsc_trackingid_message');

		$message = str_replace('%trackid%',$trackingid,$message);

    $message = str_replace('%shop_name%',get_option('blogname'),$message);



		$email_form_field = $wpdb->get_var("SELECT `id` FROM `".WPSC_TABLE_CHECKOUT_FORMS."` WHERE `type` IN ('email') AND `active` = '1' ORDER BY `order` ASC LIMIT 1");

		$email = $wpdb->get_var("SELECT `value` FROM `".WPSC_TABLE_SUBMITED_FORM_DATA."` WHERE `log_id`=".$id." AND `form_id` = '$email_form_field' LIMIT 1");



		

    $subject = get_option('wpsc_trackingid_subject');

    $subject = str_replace('%shop_name%',get_option('blogname'),$subject);

    wp_mail($email, $subject, $message,"From: ".get_option('return_email')." <".get_option('return_email').">");

    //exit($email.'<br /> '.$subject.'<br /> '. $message.'<br /> '."From: ".get_option('return_email')." <".get_option('return_email').">");

    exit(true);

}



 

if($_REQUEST['wpsc_admin_action'] == 'purchlog_email_trackid') {

	add_action('admin_init', 'wpsc_purchlog_email_trackid');

}



function wpsc_ajax_sales_quarterly() {

  	global $wpdb;

  	$lastdate = $_POST['add_start'];

  	$date = preg_split('/-/', $lastdate);

  	$lastquart = mktime(0,0,0,$date[1], $date[2], $date[0]);

  	//$lastdate = date('M d y', $lastquart);

  	if($lastquart != get_option('wpsc_last_quarter')){  		

  		update_option('wpsc_last_date', $lastdate);

  		update_option('wpsc_fourth_quart', $lastquart);

  	 	$thirdquart =   mktime(0,0,0,$date[1]-3, $date[2], $date[0]); 		

 		update_option('wpsc_third_quart', $thirdquart);

	  	$secondquart =  mktime(0,0,0,$date[1]-6, $date[2], $date[0]);

 		update_option('wpsc_second_quart', $secondquart);

	  	$firstquart =   mktime(0,0,0,$date[1]-9, $date[2], $date[0]); 		

  		update_option('wpsc_first_quart', $firstquart);

  		$finalquart =  mktime(0,0,0,$date[1], $date[2], $date[0]-1); 		

  		update_option('wpsc_final_quart', $finalquart);

  		

  	}

	

  	

//	exit($lastquart.' '.$firstquart.' '.$secondquart.' '.$thirdquart);

}

 

 

if($_REQUEST['wpsc_admin_action'] == 'wpsc_quarterly') {

	add_action('admin_init', 'wpsc_ajax_sales_quarterly');

}





function wpsc_ajax_load_product() {

  global $wpdb;

  $product_id = absint($_REQUEST['product_id']);

  check_admin_referer('edit_product_' .  $product_id);

	wpsc_display_product_form($product_id);

	exit();

}

 

 

 

 if($_REQUEST['wpsc_admin_action'] == 'load_product') {

	add_action('admin_init', 'wpsc_ajax_load_product');

}



function wpsc_crop_thumb() {

	global $wpdb;

	if ($_SERVER['REQUEST_METHOD'] == 'POST') {

		$targ_w = $targ_h = $_POST['thumbsize'];

		$jpeg_quality = $_POST['jpegquality'];

		$product_id = $_POST['product_id'];

		

		$image['x'] = absint($_POST['x']);

		$image['y'] = absint($_POST['y']);

		$image['w'] = absint($_POST['w']);

		$image['h'] = absint($_POST['h']);

		

		

		$imagename = basename($_POST['imagename']);

		$source = WPSC_IMAGE_DIR.$imagename;

		$destination =  WPSC_THUMBNAIL_DIR.$imagename;

		

		if(is_file($source)) {

			$imagetype = getimagesize($source);

			

			switch($imagetype[2]) {

				case IMAGETYPE_JPEG:

				$img_r = imagecreatefromjpeg($source);

				break;

		

				case IMAGETYPE_GIF:

				$img_r = imagecreatefromgif($source);

				break;

		

				case IMAGETYPE_PNG:

				$img_r = imagecreatefrompng($source);

				break;

			}

			$dst_r = ImageCreateTrueColor( $targ_w, $targ_h );

			imagecopyresampled($dst_r,$img_r,0,0,$image['x'],$image['y'],$targ_w,$targ_h,$image['w'],$image['h']);

			imagejpeg($dst_r,$destination,$jpeg_quality);

			$cropped = true;

		}

		$sendback = wp_get_referer();

		if($cropped){

			$sendback = add_query_arg('product_id', $product_id, $sendback);

		}

		wp_redirect($sendback);

		//exit();

	}

}

 

  

 if($_REQUEST['wpsc_admin_action'] == 'crop_thumb') {

	add_action('admin_init', 'wpsc_crop_thumb');

} 



function wpsc_delete_file() {

	global $wpdb;

	$file_id = $_GET['file_id'];

	$file_hash = $wpdb->get_var("SELECT `idhash` FROM `".WPSC_TABLE_PRODUCT_FILES."` WHERE `id` LIKE '".$file_id."' LIMIT 1");

	

  check_admin_referer('delete_file_'.$file_id);

	if(file_exists(WPSC_FILE_DIR.basename($file_hash)) && is_file(WPSC_FILE_DIR.basename($file_hash))) {

		if($wpdb->query($wpdb->prepare("DELETE FROM ".WPSC_TABLE_PRODUCT_FILES." WHERE idhash=%s", $file_hash)) == 1) {

			// Only delete the file if the delete query above affected a single row. Prevents deletion of an arbitrary file

			unlink(WPSC_FILE_DIR.basename($file_hash));

		}

	}

	if($_POST['ajax'] !== 'true') {

		$sendback = wp_get_referer();

		wp_redirect($sendback);

	}

	exit();

}



 

 if($_REQUEST['wpsc_admin_action'] == 'delete_file') {

	add_action('admin_init', 'wpsc_delete_file');

} 

 



function wpsc_bulk_modify_products() {

  global $wpdb;

  $doaction = $_GET['bulkAction'];

	$sendback = wp_get_referer();

  switch ( $doaction ) {

		case 'delete':

			if ( isset($_GET['product']) && ! isset($_GET['bulk_edit']) && (isset($doaction) || isset($_GET['doaction2'])) ) {

				check_admin_referer('bulk-products', 'wpsc-bulk-products');

				$deleted = 0;

				foreach( (array) $_GET['product'] as $product_id ) {

				  $product_id = absint($product_id);

					if($wpdb->query("UPDATE `".WPSC_TABLE_PRODUCT_LIST."` SET  `active` = '0' WHERE `id`='{$product_id}' LIMIT 1")) {

						$wpdb->query("DELETE FROM `".WPSC_TABLE_PRODUCTMETA."` WHERE `product_id` = '{$product_id}' AND `meta_key` IN ('url_name')");  

						product_tag_init();

						$term = wp_get_object_terms($product_id, 'product_tag');

						if ($term->errors == '') {

							wp_delete_object_term_relationships($product_id, 'product_tag');

						}

	

						$deleted++;

					}

				}

			}

			if ( isset($deleted) ) {

				$sendback = add_query_arg('deleted', $deleted, $sendback);

			}

		break;

		

		case 'show':

		case 'hide':

			if ( isset($_GET['product']) && ! isset($_GET['bulk_edit']) && (isset($doaction) || isset($_GET['doaction2'])) ) {

				check_admin_referer('bulk-products', 'wpsc-bulk-products');

				$flipped = 0;

				$status = array('show' => 1, 'hide' => 0);

				if( !key_exists($_REQUEST['bulkAction'], $status) ) break; // Action not valid

				$status_key = $_REQUEST['bulkAction'];

				$status_value = $status[$status_key];

				foreach( (array) $_GET['product'] as $product_id ) {

				  $product_id = absint($product_id);

				  $new_status = wpsc_set_publish_status($product_id, $status_value);

				  $flipped++;

				}

			}

			$sendback = add_query_arg('flipped', $flipped, $sendback);

		break;



		

		default:

			if(isset($_GET['search']) && !empty($_GET['search'])) {

				$sendback = add_query_arg('search',$_GET['search'], $sendback);

			}

		break;

	}

	

	wp_redirect($sendback);

	exit();

}

 

 

 

 if($_REQUEST['wpsc_admin_action'] == 'bulk_modify') {

	add_action('admin_init', 'wpsc_bulk_modify_products');

}



function wpsc_modify_product_price() {

	global $wpdb;

	$product_data = array_pop($_POST['product_price']);



	$product_id = absint($product_data['id']);

	$product_price = (float)$product_data['price'];

	$product_nonce = $product_data['nonce'];



	if(wp_verify_nonce($product_nonce, 'edit-product_price-'.$product_id) ) {

		if($wpdb->query("UPDATE ".WPSC_TABLE_PRODUCT_LIST." SET price='{$product_price}' WHERE id='{$product_id}'")) {

			echo "success = 1;\n\r";

			echo "new_price = '".nzshpcrt_currency_display($product_price, 1, true)."';\n\r";

		} else {

			echo "success = 0;\n\r";

		}

	} else {

		echo "success = -1;\n\r";

	}

	exit();

}



 

 if($_REQUEST['wpsc_admin_action'] == 'modify_price') {

	add_action('admin_init', 'wpsc_modify_product_price');

}

 

 

/**

  Function and action for deleting single products 

 */

function wpsc_delete_product() {

  global $wpdb;

  

	$deleted = 0;

	$product_id = absint($_GET['product']);

  check_admin_referer('delete_product_' .  $product_id);



	if($wpdb->query("UPDATE `".WPSC_TABLE_PRODUCT_LIST."` SET  `active` = '0' WHERE `id`='{$product_id}' LIMIT 1")) {

		$wpdb->query("DELETE FROM `".WPSC_TABLE_PRODUCTMETA."` WHERE `product_id` = '{$product_id}' AND `meta_key` IN ('url_name')");  

		product_tag_init();

		$term = wp_get_object_terms($product_id, 'product_tag');

		if ($term->errors == '') {

			wp_delete_object_term_relationships($product_id, 'product_tag');

		}

		$deleted = 1;

		do_action('wpsc_delete_product', $product_id);

	}

	

	$sendback = wp_get_referer();

	if ( isset($deleted) ) {

		$sendback = add_query_arg('deleted', $deleted, $sendback);

	}

	wp_redirect($sendback);

	exit();

}

 

 

 

 if($_REQUEST['wpsc_admin_action'] == 'delete_product') {

	add_action('admin_init', 'wpsc_delete_product');

}

 

/**

  Function and action for publishing or unpublishing single products

 */

function wpsc_ajax_toggle_published() {

  global $wpdb;

  

	$product_id = absint($_GET['product']);

  check_admin_referer('toggle_publish_' . $product_id);

  

	$status = (wpsc_toggle_publish_status($product_id)) ? ('true') : ('false');

	$sendback = add_query_arg('flipped', "1", wp_get_referer());

	wp_redirect($sendback);

	exit();

}

 

 

 if($_REQUEST['wpsc_admin_action'] == 'toggle_publish') {

	add_action('admin_init', 'wpsc_ajax_toggle_published');

}



  

/**

  Function and action for duplicating products,

 */

function wpsc_duplicate_product() {

	global $wpdb;

	$product_id = absint($_GET['product']);

  check_admin_referer('duplicate_product_' .  $product_id);

	if ($product_id > 0) {

		$sql = " INSERT INTO ".WPSC_TABLE_PRODUCT_LIST."( `name` , `description` , `additional_description` , `price` , `weight` , `weight_unit` , `pnp` , `international_pnp` , `file` , `image`  , `quantity_limited` , `quantity` , `special` , `special_price` , `display_frontpage` , `notax` , `active` , `publish`, `donation` , `no_shipping` , `thumbnail_image` , `thumbnail_state` ) SELECT `name` , `description` , `additional_description` , `price` , `weight` , `weight_unit` , `pnp` , `international_pnp` , `file` , `image`  , `quantity_limited` , `quantity` , `special` , `special_price` , `display_frontpage` , `notax` , `active`  , `publish`, `donation` , `no_shipping` , `thumbnail_image` , `thumbnail_state` FROM ".WPSC_TABLE_PRODUCT_LIST." WHERE id = '".$product_id."' ";

	//	exit($sql);

		$wpdb->query($sql);

		$new_id= $wpdb->get_var("SELECT LAST_INSERT_ID() AS `id` FROM `".WPSC_TABLE_PRODUCT_LIST."` LIMIT 1");

		

		//Inserting duplicated variations record.

		$nzshpcrt_variations = new nzshpcrt_variations();

		$nzshpcrt_variations->duplicate_variation_values($new_id, $product_id);

/*

		$variation_assocs = $wpdb->get_results("SELECT * FROM ".WPSC_TABLE_VARIATION_ASSOC." WHERE associated_id = ".$product_id, ARRAY_A);

		if(count($variation_assocs))foreach($variation_assocs as $variation_assoc){

			$wpdb->query("INSERT INTO ".WPSC_TABLE_VARIATION_ASSOC." VALUES ('', '".$variation_assoc['type']."', '".$variation_assoc['name']."', '".$new_id."', '".$variation_assoc['variation_id']."');");

		}

		

		$variation_combinations = $wpdb->get_results("SELECT * FROM ".WPSC_TABLE_VARIATION_COMBINATIONS." WHERE product_id = ".$product_id, ARRAY_A);

		if(count($variation_combinations))foreach($variation_combinations as $variation_combination){

			$variation_properties = $wpdb->get_results("SELECT * FROM ".WPSC_TABLE_VARIATION_PROPERTIES." WHERE id = ".$variation_combination['priceandstock_id'], ARRAY_A);

			exit('<pre>'.print_r($variation_properties, true).'</pre>');

			$wpdb->query("INSERT INTO ".WPSC_TABLE_VARIATION_PROPERTIES." VALUES ('', '".$new_id."', '".$variation_properties[0]['stock']."', '".$variation_properties[0]['price']."', '".$variation_properties[0]['weight']."', '".$variation_properties[0]['weight_unit']."', '".$variation_properties[0]['visibility']."', '".$variation_properties[0]['file']."');");

			$new_prop_id= $wpdb->get_var("SELECT LAST_INSERT_ID() AS `id` FROM `".WPSC_TABLE_VARIATION_PROPERTIES."` LIMIT 1");

			$wpdb->query("INSERT INTO ".WPSC_TABLE_VARIATION_COMBINATIONS." VALUES ('".$new_id."', '".$new_prop_id."', '".$variation_combination['value_id']."', '".$variation_combination['variation_id']."', '".$variation_combination['all_variation_ids']."');");			

		}

		

		$variation_values_assocs = $wpdb->get_results("SELECT * FROM ".WPSC_TABLE_VARIATION_VALUES_ASSOC." WHERE product_id = ".$product_id, ARRAY_A);

		if(count($variation_values_assocs))foreach($variation_values_assocs as $variation_values_assoc){

			$wpdb->query("INSERT INTO ".WPSC_TABLE_VARIATION_VALUES_ASSOC." VALUES ('', '".$new_id."', '".$variation_values_assoc['value_id']."', '".$variation_values_assoc['visible']."', '".$variation_values_assoc['variation_id']."');");

		}

		//end of variations

*/

		//Inserting duplicated category record.

		$category_assoc = $wpdb->get_col("SELECT `category_id` FROM ".WPSC_TABLE_ITEM_CATEGORY_ASSOC." WHERE product_id = '".$product_id."'");

		$new_product_category = array();

		if (count($category_assoc) > 0) {

			foreach($category_assoc as $key => $category) {

				$new_product_category[] = "('".$new_id."','".$category."')";

				

				$check_existing = $wpdb->get_results("SELECT * FROM `".WPSC_TABLE_PRODUCT_ORDER."` WHERE `category_id` IN('$category') AND `order` IN('0') LIMIT 1;",ARRAY_A);

				if($wpdb->get_var("SELECT `id` FROM `".WPSC_TABLE_PRODUCT_ORDER."` WHERE `category_id` IN('$category') AND `product_id` IN('$product_id') LIMIT 1")) {

					$wpdb->query("UPDATE `".WPSC_TABLE_PRODUCT_ORDER."` SET `order` = '0' WHERE `category_id` IN('$category') AND `product_id` IN('$product_id') LIMIT 1;");

				} else {				  

					$wpdb->query("INSERT INTO `".WPSC_TABLE_PRODUCT_ORDER."` (`category_id`, `product_id`, `order`) VALUES ('$category', '$product_id', 0)");

				}

				if($check_existing != null) {

					$wpdb->query("UPDATE `".WPSC_TABLE_PRODUCT_ORDER."` SET `order` = (`order` + 1) WHERE `category_id` IN('$category') AND `product_id` NOT IN('$product_id') AND `order` < '0'");

				}

			}

			$wpdb->query("INSERT INTO ".WPSC_TABLE_ITEM_CATEGORY_ASSOC." (product_id, category_id) VALUES ".implode(",",$new_product_category));

		}



	

		

	

	

		//Inserting duplicated meta info

		$meta_values = $wpdb->get_results("SELECT `meta_key`, `meta_value`, `custom` FROM `".WPSC_TABLE_PRODUCTMETA."` WHERE product_id='".$product_id."' AND  `meta_key` NOT IN ('url_name') ", ARRAY_A);

		$new_meta_value = array();

		if (count($meta_values)>0) {

			foreach($meta_values as $key => $meta) {

				$new_meta_value[] = "('".$new_id."','".$meta['meta_key']."','".$meta['meta_value']."','".$meta['custom']."')";

			}

			$wpdb->query("INSERT INTO `".WPSC_TABLE_PRODUCTMETA."` (`product_id`, `meta_key`, `meta_value`, `custom`) VALUES ".implode(",",$new_meta_value));

		}

		

		

	

		$product_name = $wpdb->get_var("SELECT `name` FROM `".WPSC_TABLE_PRODUCT_LIST."` WHERE `id` = '$new_id' LIMIT 1");

		if($product_name != '') {

			$tidied_name = strtolower(trim($product_name));

			$url_name = sanitize_title($tidied_name);

			$similar_names = $wpdb->get_row("SELECT COUNT(*) AS `count`, MAX(REPLACE(`meta_value`, '$url_name', '')) AS `max_number` FROM `".WPSC_TABLE_PRODUCTMETA."` WHERE `meta_key` IN ('url_name') AND `meta_value` REGEXP '^($url_name){1}[[:digit:]]*$' ",ARRAY_A);

			$extension_number = '';

			if($similar_names['count'] > 0) {

				$extension_number = (int)$similar_names['max_number']+1;

			}

			$url_name .= $extension_number;

			add_product_meta($new_id, 'url_name', $url_name,true);

		}

		

		

		$tags =  wp_get_object_terms($product_id, 'product_tag', array('fields' => 'names'));

		wp_set_object_terms($new_id, $tags, 'product_tag');

		            

		//Inserting duplicated image info

		$image_values = $wpdb->get_results("SELECT `image`, `width`, `height`, `image_order`, `meta` FROM ".WPSC_TABLE_PRODUCT_IMAGES." WHERE product_id='".$product_id."'", ARRAY_A);

		$new_image_value = array();

		if (count($image_values)>0){

			foreach($image_values as $key => $image) {

			  if($image['image'] != '') {

			    if(is_numeric($image['width']) && is_numeric($image['height'])) {

			      $image['width'] = absint($image['width']);

			      $image['height'] = absint($image['height']);

			    } else {

			      $image['width'] = 'null';

			      $image['height'] = 'null';

			    }

					$new_image_value[] = "('".$new_id."','".$image['image']."',".$image['width'].",".$image['height'].",'".$image['image_order']."','".$image['meta']."')";

				}

			}

			if(count($new_image_value) > 0) {

				$new_image_value = implode(",", $new_image_value);

				$sql = "INSERT INTO ".WPSC_TABLE_PRODUCT_IMAGES." (`product_id`, `image`, `width`, `height`, `image_order`, `meta`) VALUES ".$new_image_value;

				$wpdb->query($sql);

			}

		}

		

	  $duplicated = true;

	}	

	

	$sendback = wp_get_referer();

	if ( isset($duplicated) ) {

		$sendback = add_query_arg('duplicated', (int)$duplicated, $sendback);

	}

	wp_redirect($sendback);

	exit();

}



if ($_GET['wpsc_admin_action'] == 'duplicate_product') {

	add_action('admin_init', 'wpsc_duplicate_product');

}

 

 

 

function wpsc_purchase_log_csv() {

  global $wpdb,$user_level,$wp_rewrite;

  get_currentuserinfo();

  if(($_GET['rss_key'] == 'key') && is_numeric($_GET['start_timestamp']) && is_numeric($_GET['end_timestamp']) && ($user_level >= 7)) {

  //exit('in use');

    $form_sql = "SELECT * FROM `".WPSC_TABLE_CHECKOUT_FORMS."` WHERE `active` = '1' AND `display_log` = '1';";

    $form_data = $wpdb->get_results($form_sql,ARRAY_A);

    

    $start_timestamp = $_GET['start_timestamp'];

    $end_timestamp = $_GET['end_timestamp'];

    $data = $wpdb->get_results("SELECT * FROM `".WPSC_TABLE_PURCHASE_LOGS."` WHERE `date` BETWEEN '$start_timestamp' AND '$end_timestamp' ORDER BY `date` DESC",ARRAY_A);

         // exit('<pre>'.print_r($data, true).'</pre>');



         

    header('Content-Type: text/csv');

    header('Content-Disposition: inline; filename="Purchase Log '.date("M-d-Y", $start_timestamp).' to '.date("M-d-Y", $end_timestamp).'.csv"');

    

    foreach((array)$data as $purchase) {

      $country_sql = "SELECT * FROM `".WPSC_TABLE_SUBMITED_FORM_DATA."` WHERE `log_id` = '".$purchase['id']."' AND `form_id` = '".get_option('country_form_field')."' LIMIT 1";

      $country_data = $wpdb->get_results($country_sql,ARRAY_A);

      $country = $country_data[0]['value'];

   

      $output .= "\"".$purchase['totalprice'] ."\",";

                

      foreach((array)$form_data as $form_field) {

        $collected_data_sql = "SELECT * FROM `".WPSC_TABLE_SUBMITED_FORM_DATA."` WHERE `log_id` = '".$purchase['id']."' AND `form_id` = '".$form_field['id']."' LIMIT 1";

        $collected_data = $wpdb->get_results($collected_data_sql,ARRAY_A);

        $collected_data = $collected_data[0];

        $output .= "\"".$collected_data['value']."\",";

			}

        

      if(get_option('payment_method') == 2) {

        $gateway_name = '';

        foreach($GLOBALS['nzshpcrt_gateways'] as $gateway) {

          if($purchase['gateway'] != 'testmode') {

            if($gateway['internalname'] == $purchase['gateway'] ) {

              $gateway_name = $gateway['name'];

						}

					} else {

						$gateway_name = "Manual Payment";

					}

				}

        $output .= "\"". $gateway_name ."\",";

			}

              

      if($purchase['processed'] < 1) {

        $purchase['processed'] = 1;

			}

      $stage_sql = "SELECT * FROM `".WPSC_TABLE_PURCHASE_STATUSES."` WHERE `id`='".$purchase['processed']."' AND `active`='1' LIMIT 1";

      $stage_data = $wpdb->get_results($stage_sql,ARRAY_A);

              

      $output .= "\"". $stage_data[0]['name'] ."\",";

      

      $output .= "\"". date("jS M Y",$purchase['date']) ."\"";

      

      $cartsql = "SELECT * FROM `".WPSC_TABLE_CART_CONTENTS."` WHERE `purchaseid`=".$purchase['id']."";

      $cart = $wpdb->get_results($cartsql,ARRAY_A) ; 

      //exit(nl2br(print_r($cart,true)));

      

      foreach((array)$cart as $item) {

        $output .= ",";

        $product = $wpdb->get_row("SELECT * FROM `".WPSC_TABLE_PRODUCT_LIST."` WHERE `id`=".$item['prodid']." LIMIT 1",ARRAY_A);    

        $skusql = "SELECT `meta_value` FROM `".WPSC_TABLE_PRODUCTMETA."` WHERE `meta_key`= 'sku' AND `product_id` = ".$item['prodid'];  

      //  exit($skusql);

        $skuvalue = $wpdb->get_var($skusql);  

        $variation_sql = "SELECT * FROM `".WPSC_TABLE_CART_ITEM_VARIATIONS."` WHERE `cart_id`='".$item['id']."'";

        $variation_data = $wpdb->get_results($variation_sql,ARRAY_A);

         $variation_count = count($variation_data);

          if($variation_count >= 1) {

            $variation_list = " (";

            $i = 0;

            foreach($variation_data as $variation) {

              if($i > 0) {

                $variation_list .= ", ";

							}

              $value_id = $variation['value_id'];

              $value_data = $wpdb->get_results("SELECT * FROM `".WPSC_TABLE_VARIATION_VALUES."` WHERE `id`='".$value_id."' LIMIT 1",ARRAY_A);

              $variation_list .= $value_data[0]['name'];              

              $i++;

						}

            $variation_list .= ")";

					}

        

      //  exit('<pre>'.print_r($item,true).'</pre>');

        $output .= "\"".$item['quantity']." ".str_replace('"', '\"',$product['name']).$variation_list."\"";

        $output .= ",".$skuvalue;

			}

      $output .= "\n"; // terminates the row/line in the CSV file

		}

    echo $output;

    exit();

	}

}

 if($_REQUEST['wpsc_admin_action'] == 'wpsc_downloadcsv') {

	add_action('admin_init', 'wpsc_purchase_log_csv');

}





function wpsc_admin_ajax() {

  global $wpdb,$user_level,$wp_rewrite;

  get_currentuserinfo();  

  if(is_numeric($_POST['catid'])) {

		/* fill category form */

		echo nzshpcrt_getcategoryform($_POST['catid']);

		exit();

	} else if(is_numeric($_POST['brandid'])) {

		/* fill brand form */   

		echo nzshpcrt_getbrandsform($_POST['brandid']);

		exit();

	} else if(is_numeric($_POST['variation_id'])) {  

		echo nzshpcrt_getvariationform($_POST['variation_id']);

		exit();

	}

	

	

	if ($_POST['action'] == 'product-page-order'){

		$order = $_POST['order'];

		if(!isset($order[0])) {

			$order = $order['normal'];

		} else {

			$order = $order[0];

		}

		

		$order = array_unique(explode(',', $order));

		update_option('wpsc_product_page_order', $order);

		exit(print_r($order,1));

	}

	

		

	if(($_POST['save_image_upload_state'] == "true") && is_numeric($_POST['image_upload_state'])) {

		//get_option('wpsc_image_upload_state');

		$upload_state = (int)(bool)$_POST['image_upload_state'];

		update_option('wpsc_use_flash_uploader', $upload_state);

		exit("done");

	}

      

	if(($_POST['remove_variation_value'] == "true") && is_numeric($_POST['variation_value_id'])) {

		$wpdb->query("DELETE FROM `".WPSC_TABLE_VARIATION_VALUES_ASSOC."` WHERE `value_id` = '".(int)$_POST['variation_value_id']."'");

		$wpdb->query("DELETE FROM `".WPSC_TABLE_VARIATION_VALUES."` WHERE `id` = '".(int)$_POST['variation_value_id']."' LIMIT 1");

		exit();

	}

		



	if(($_POST['edit_variation_value_list'] == 'true') && is_numeric($_POST['variation_id']) && is_numeric($_POST['product_id'])) {

		$variation_id = (int)$_POST['variation_id'];

		$product_id = (int)$_POST['product_id'];

		$variations_processor = new nzshpcrt_variations();

		$variation_values = $variations_processor->falsepost_variation_values($variation_id);

		if(is_array($variation_values)) {

			//echo(print_r($variation_values,true));

			$check_variation_added = $wpdb->get_var("SELECT `id` FROM `".WPSC_TABLE_VARIATION_ASSOC."` WHERE `type` IN ('product') AND `associated_id` IN ('{$product_id}') AND `variation_id` IN ('{$variation_id}') LIMIT 1");

			//exit("<pre>".print_r($variation_values,true)."<pre>");

			if($check_variation_added == null) {

				$variations_processor->add_to_existing_product($product_id,$variation_values);			

			}

			echo $variations_processor->display_attached_variations($product_id);

			echo $variations_processor->variations_grid_view($product_id); 

		} else {

			echo "false";

		}

		exit();

	}

		



            

	if(($_POST['remove_form_field'] == "true") && is_numeric($_POST['form_id'])) {

		//exit(print_r($user,true));

		if(current_user_can('level_7')) {

			$wpdb->query($wpdb->prepare("UPDATE `".WPSC_TABLE_CHECKOUT_FORMS."` SET `active` = '0' WHERE `id` = %d LIMIT 1 ;", $_POST['form_id']));

			exit(' ');

		}

	}

	

	

	if($_POST['hide_ecom_dashboard'] == 'true') {

		require_once (ABSPATH . WPINC . '/rss.php');

		$rss = fetch_rss('http://www.instinct.co.nz/feed/');				

		$rss->items = array_slice($rss->items, 0, 5);

		$rss_hash = sha1(serialize($rss->items));				

		update_option('wpsc_ecom_news_hash', $rss_hash);

		exit(1);

	}			

	

	if(($_POST['remove_meta'] == 'true') && is_numeric($_POST['meta_id'])) {

		$meta_id = (int)$_POST['meta_id'];

		$selected_meta = $wpdb->get_row("SELECT * FROM `".WPSC_TABLE_PRODUCTMETA."` WHERE `id` IN('{$meta_id}') ",ARRAY_A);

		if($selected_meta != null) {

			if($wpdb->query("DELETE FROM `".WPSC_TABLE_PRODUCTMETA."` WHERE `id` IN('{$meta_id}')  LIMIT 1")) {

				echo $meta_id;

				exit();

			}

		}

		echo 0;

		exit();

	}

		

	if(($_REQUEST['log_state'] == "true") && is_numeric($_POST['id']) && is_numeric($_POST['value'])) {

		$newvalue = $_POST['value'];

		if ($_REQUEST['suspend']=='true'){

			if ($_REQUEST['value']==1){

				wpsc_member_dedeactivate_subscriptions($_POST['id']);

			} else {

				wpsc_member_deactivate_subscriptions($_POST['id']);

			}

			exit();

		} else {

		

			$log_data = $wpdb->get_row("SELECT * FROM `".WPSC_TABLE_PURCHASE_LOGS."` WHERE `id` = '".$_POST['id']."' LIMIT 1",ARRAY_A);  

			if (($newvalue==2) && function_exists('wpsc_member_activate_subscriptions')){

				wpsc_member_activate_subscriptions($_POST['id']);

			}

			

			$update_sql = "UPDATE `".WPSC_TABLE_PURCHASE_LOGS."` SET `processed` = '".$newvalue."' WHERE `id` = '".$_POST['id']."' LIMIT 1";  

			$wpdb->query($update_sql);

			//echo("/*");

			if(($newvalue > $log_data['processed']) && ($log_data['processed'] < 2)) {

				transaction_results($log_data['sessionid'],false);

			}      

			//echo("*/");

			$stage_sql = "SELECT * FROM `".WPSC_TABLE_PURCHASE_STATUSES."` WHERE `id`='".$newvalue."' AND `active`='1' LIMIT 1";

			$stage_data = $wpdb->get_row($stage_sql,ARRAY_A);

					

			echo "document.getElementById(\"form_group_".$_POST['id']."_text\").innerHTML = '".$stage_data['name']."';\n";

			echo "document.getElementById(\"form_group_".$_POST['id']."_text\").style.color = '#".$stage_data['colour']."';\n";

			

			

			$year = date("Y");

			$month = date("m");

			$start_timestamp = mktime(0, 0, 0, $month, 1, $year);

			$end_timestamp = mktime(0, 0, 0, ($month+1), 0, $year);

			

			echo "document.getElementById(\"log_total_month\").innerHTML = '".addslashes(nzshpcrt_currency_display(admin_display_total_price($start_timestamp, $end_timestamp),1))."';\n";

			echo "document.getElementById(\"log_total_absolute\").innerHTML = '".addslashes(nzshpcrt_currency_display(admin_display_total_price(),1))."';\n";

			exit();

		}

	}

  

	if(($_POST['list_variation_values'] == "true")) {

   	// retrieve the forms for associating variations and their values with products

		$variation_processor = new nzshpcrt_variations();

		

		$variations_selected = array();

    	foreach((array)$_POST['variations'] as $variation_id => $checked) {

    		$variations_selected[] = (int)$variation_id;

    	}



    	if(is_numeric($_POST['product_id']) && ($_POST['product_id'] > 0)) {

      		$product_id = absint($_POST['product_id']);

					$selected_price = (float)$_POST['selected_price'];

      		

       		// variation values housekeeping

      		$completed_variation_values = $variation_processor->edit_product_values($product_id,$_POST['edit_var_val'], $selected_price);

      



      		// get all the currently associated variations from the database

      		$associated_variations = $wpdb->get_results("SELECT * FROM `".WPSC_TABLE_VARIATION_ASSOC."` WHERE `type` IN ('product') AND `associated_id` IN ('{$product_id}')", ARRAY_A);

      

      		$variations_still_associated = array();

      		foreach((array)$associated_variations as $associated_variation) {

			  	// remove variations not checked that are in the database

        		if(array_search($associated_variation['variation_id'], $variations_selected) === false) {

          			$wpdb->query("DELETE FROM `".WPSC_TABLE_VARIATION_ASSOC."` WHERE `id` = '{$associated_variation['id']}' LIMIT 1");

          			$wpdb->query("DELETE FROM `".WPSC_TABLE_VARIATION_VALUES_ASSOC."` WHERE `product_id` = '{$product_id}' AND `variation_id` = '{$associated_variation['variation_id']}' ");

        		} else {

          			// make an array for adding in the variations next step, for efficiency

          			$variations_still_associated[] = $associated_variation['variation_id'];

        		}

      		}

       

					foreach((array)$variations_selected as $variation_id) {

			  	// add variations not already in the database that have been checked.

        		$variation_values = $variation_processor->falsepost_variation_values($variation_id);

        		if(array_search($variation_id, $variations_still_associated) === false) {

      	  			$variation_processor->add_to_existing_product($product_id,$variation_values);

        		}

      		}

      		//echo "/* ".print_r($variation_values,true)." */\n\r";

					echo "edit_variation_combinations_html = \"".str_replace(array("\n","\r"), array('\n','\r'), addslashes($variation_processor->variations_grid_view($product_id,  (array)$completed_variation_values)))."\";\n";



    	} else {

      		if(count($variations_selected) > 0) {

        		// takes an array of variations, returns a form for adding data to those variations.

        		if((float)$_POST['selected_price'] > 0) {

          			$selected_price = (float)$_POST['selected_price'];

        		}

						$limited_stock = false;

        		if($_POST['limited_stock'] == 'true') {

							$limited_stock = true;

        		}

        		

        		$selected_variation_values = array();

        		foreach($_POST['edit_var_val'] as $variation_value_array) {

							//echo "/* ".print_r($variation_value_array,true)." */\n\r";

        		  $selected_variation_values = array_merge(array_keys($variation_value_array), $selected_variation_values);

        		}

        		

						////echo "/* ".print_r($selected_variation_values,true)." */\n\r";

						echo "edit_variation_combinations_html = \"".__('Edit Variation Set', 'wpsc')."<br />".str_replace(array("\n","\r"), array('\n','\r'), addslashes($variation_processor->variations_grid_view(0, (array)$variations_selected, (array)$selected_variation_values, $selected_price, $limited_stock)))."\";\n";



      		} else {

        		echo "edit_variation_combinations_html = \"\";\n";

      		}

		}

		exit();

	}

	

    

	if(isset($_POST['language_setting']) && ($_GET['page'] = WPSC_DIR_NAME.'/wpsc-admin/display-options.page.php')) {

		if($user_level >= 7) {

			update_option('language_setting', $_POST['language_setting']);

		}

	}

}





function wpsc_admin_sale_rss() {

  global $wpdb;

  if(($_GET['rss'] == "true") && ($_GET['rss_key'] == 'key') && ($_GET['action'] == "purchase_log")) {

    $sql = "SELECT * FROM `".WPSC_TABLE_PURCHASE_LOGS."` WHERE `date`!='' ORDER BY `date` DESC";

    $purchase_log = $wpdb->get_results($sql,ARRAY_A);

    header("Content-Type: application/xml; charset=UTF-8"); 

    header('Content-Disposition: inline; filename="WP_E-Commerce_Purchase_Log.rss"');

    $output = '';

    $output .= "<?xml version='1.0'?>\n\r";

    $output .= "<rss version='2.0'>\n\r";

    $output .= "  <channel>\n\r";

    $output .= "    <title>WP E-Commerce Product Log</title>\n\r";

    $output .= "    <link>".get_option('siteurl')."/wp-admin/admin.php?page=".WPSC_DIR_NAME."/display-log.php</link>\n\r";

    $output .= "    <description>This is the WP E-Commerce Product Log RSS feed</description>\n\r";

    $output .= "    <generator>WP E-Commerce Plugin</generator>\n\r";

    

    foreach((array)$purchase_log as $purchase) {

      $purchase_link = get_option('siteurl')."/wp-admin/admin.php?page=".WPSC_DIR_NAME."/display-log.php&amp;purchaseid=".$purchase['id'];

      $output .= "    <item>\n\r";

      $output .= "      <title>Purchase No. ".$purchase['id']."</title>\n\r";

      $output .= "      <link>$purchase_link</link>\n\r";

      $output .= "      <description>This is an entry in the purchase log.</description>\n\r";

      $output .= "      <pubDate>".date("r",$purchase['date'])."</pubDate>\n\r";

      $output .= "      <guid>$purchase_link</guid>\n\r";

      $output .= "    </item>\n\r";

		}

    $output .= "  </channel>\n\r";

    $output .= "</rss>";

    echo $output;

    exit();

	}

}



function wpsc_swfupload_images() {

	global $wpdb, $current_user;

	// xdebug_start_trace();

	$file = $_FILES['async-upload'];

	$product_id = absint($_POST['product_id']);

	$nonce = $_POST['_wpnonce'];

  $output = '';

	// Flash often fails to send cookies with the POST or upload, so we need to pass it in GET or POST instead, code is from wp-admin/async-upload.php

	if ( is_ssl() && empty($_COOKIE[SECURE_AUTH_COOKIE]) && !empty($_REQUEST['auth_cookie']) ) {

		$_COOKIE[SECURE_AUTH_COOKIE] = $_REQUEST['auth_cookie'];

	} else if ( empty($_COOKIE[AUTH_COOKIE]) && !empty($_REQUEST['auth_cookie']) ) {

		$_COOKIE[AUTH_COOKIE] = $_REQUEST['auth_cookie'];

	}

	unset($current_user);

	require_once(ABSPATH . 'wp-admin/admin.php');



	if(!current_user_can('upload_files') ) {

			exit("status=-1;\n");

	}

	

	if(!wp_verify_nonce($nonce, 'product-swfupload') ) {

		exit("status=-1;\n");

	}



	

	if(function_exists('gold_shpcrt_display_gallery')) {

		// if more than one image is permitted

		$existing_image_data = $wpdb->get_row("SELECT COUNT(*) AS `count`,  MAX(image_order) AS `order` FROM ".WPSC_TABLE_PRODUCT_IMAGES." WHERE `product_id`='".absint($product_id)."' AND `image` NOT IN ('')", ARRAY_A);

		$order = (int)$existing_image_data['order'];

		$count = $existing_image_data['count'];

		

		$previous_image = $wpdb->get_var("SELECT `image` FROM `".WPSC_TABLE_PRODUCT_LIST."` WHERE `id`='".absint($product_id)."' LIMIT 1");

		//echo "/* $count $previous_image */ ";

		if(($count >  0) && ( (strlen($previous_image) > 0) || (absint($product_id) < 1) ) ) {

			// if there is more than one image

			$success = move_uploaded_file($file['tmp_name'], WPSC_IMAGE_DIR.basename($file['name']));

			if ($product_id == '') {

				copy(WPSC_IMAGE_DIR.basename($file['name']),WPSC_THUMBNAIL_DIR.basename($file['name']));

			}

			$order++;

			if ($success) {

				$wpdb->query("INSERT INTO `".WPSC_TABLE_PRODUCT_IMAGES."` ( `product_id` , `image` , `width` , `height` , `image_order` ) VALUES( '$product_id','".basename($file['name'])."', '0', '0',  '$order')");

				$id = $wpdb->get_var("SELECT LAST_INSERT_ID() AS `id` FROM `".WPSC_TABLE_PRODUCT_IMAGES."` LIMIT 1");



				$src = $file['name'];

				$output .= "upload_status=1;\n";

				$output .= "image_src='".$src."';\n";

				$output .= "image_id='$id';\n";

				$output .= "product_id='$product_id';\n";

				$output .= "replace_existing=0;";

			} else {

				$output .= "status=0;\n";

			}

		} else {

			// if thereare no images

			if($product_id > 0) {

				$image_data = wpsc_item_process_image($product_id, $file['tmp_name'], $file['name'], 0, 0, 1, true);

				$src = $image_data['filename'];

				$image_id = $image_data['image_id'];

			} else {

				$success = move_uploaded_file($file['tmp_name'], WPSC_IMAGE_DIR.basename($file['name']));

				copy(WPSC_IMAGE_DIR.basename($file['name']),WPSC_THUMBNAIL_DIR.basename($file['name']));

				$wpdb->query("INSERT INTO `".WPSC_TABLE_PRODUCT_IMAGES."` ( `product_id` , `image` , `width` , `height` , `image_order` ) VALUES( '$product_id','".basename($file['name'])."', '0', '0', '0')");

				$src = basename($file['name']);

			}

			

			

			if($src != null) {

				if($image_id < 1) {

					$image_id = $wpdb->get_var("SELECT LAST_INSERT_ID() AS `id` FROM `".WPSC_TABLE_PRODUCT_IMAGES."` LIMIT 1");

					

					if($product_id > 0) {

						$previous_image = $wpdb->get_var("UPDATE `".WPSC_TABLE_PRODUCT_LIST."` SET `image` = '{$image_id}' WHERE `id`='{$product_id}' LIMIT 1");

					}

				}

				$output .= "upload_status=1;\n";

				$output .= "image_src='".$src."';\n";

				$output .= "image_id='$image_ids';\n";

				$output .= "product_id='$product_id';\n";

				$output .= "replace_existing=1;";

			} else {

				$output .= "status=0;\n";

			}

		}

	} else {

		// Otherwise...

		$previous_image = $wpdb->get_var("SELECT `image` FROM `".WPSC_TABLE_PRODUCT_LIST."` WHERE `id`='{$product_id}' LIMIT 1");

		$image_replaced = false;

		if($product_id > 0) {

			$image_data = wpsc_item_process_image($product_id, $file['tmp_name'], $file['name'], 0, 0, 1, true);

			$src = $image_data['filename'];

			$image_id = $image_data['image_id'];

		} else {

			$success = move_uploaded_file($file['tmp_name'], WPSC_IMAGE_DIR.basename($file['name']));

			copy(WPSC_IMAGE_DIR.basename($file['name']),WPSC_THUMBNAIL_DIR.basename($file['name']));

			$wpdb->query("INSERT INTO `".WPSC_TABLE_PRODUCT_IMAGES."` ( `product_id` , `image` , `width` , `height` , `image_order` ) VALUES( '$product_id','".basename($file['name'])."', '0', '0', '0')");

			$src = basename($file['name']);

		}

		//$src = wpsc_item_process_image($product_id, $file['tmp_name'], $file['name']);

		if($src != null) {

			if($image_id < 1) {

				$image_id = $wpdb->get_var("SELECT LAST_INSERT_ID() AS `id` FROM `".WPSC_TABLE_PRODUCT_IMAGES."` LIMIT 1");

				if($product_id > 0) {

					$previous_image = $wpdb->get_var("UPDATE `".WPSC_TABLE_PRODUCT_LIST."` SET `image` = '{$image_id}' WHERE `id`='{$product_id}' LIMIT 1");

				}

			}

			$image_replaced = true;

			$output .= "upload_status=1;\n";

			$output .= "image_src='".$src."';\n";

			$output .= "image_id='$image_id';\n";

			$output .= "product_id='$product_id';\n";

			if($image_replaced == true) {

				$output .= "replace_existing=1;\n";

			} else {

				$output .= "replace_existing=0;\n";

			}

		} else {

			$output .= "status=0;\n";

		}

	}



	exit($output);

}





function wpsc_display_invoice() {

  $purchase_id = (int)$_GET['purchaselog_id'];

  include_once(WPSC_FILE_PATH."/admin-form-functions.php");

  // echo "testing";

	require_once(ABSPATH.'wp-admin/includes/media.php');

	wp_iframe('wpsc_packing_slip', $purchase_id);  

  //wpsc_packing_slip($purchase_id);

  exit();

}

 if($_REQUEST['wpsc_admin_action'] == 'wpsc_display_invoice') {

	add_action('admin_init', 'wpsc_display_invoice');

}

 



function wpsc_save_inline_price() {

	global $wpdb;

	$pid = $_POST['id'];

	$new_price = $_POST['value'];

	$new_price1 = str_replace('$','',$new_price);

	$wpdb->query("UPDATE ".WPSC_TABLE_PRODUCT_LIST." SET price='$new_price1' WHERE id='$pid'");

	exit($new_price);

}



if($_GET['inline_price']=='true') {

	add_action('admin_init', 'wpsc_save_inline_price', 0);

}





/**

 * Purchase log ajax code starts here

*/

function wpsc_purchlog_resend_email(){

	global $wpdb;

	$siteurl = get_option('siteurl');

	$log_id = $_GET['email_buyer_id'];

	if(is_numeric($log_id)) {

	

		$selectsql = "SELECT * FROM `".WPSC_TABLE_PURCHASE_LOGS."` WHERE `id`= ".$log_id." LIMIT 1";



		$purchase_log = $wpdb->get_row($selectsql,ARRAY_A) ;

		

		if(($purchase_log['gateway'] == "testmode") && ($purchase_log['processed'] < 2))  {

			$message = get_option("wpsc_email_receipt");

			$message_html = "<h2  style='font-size:16px;font-weight:bold;color:#000;border:0px;padding-top: 0px;' >".__('Your Order', 'wpsc')."</h2>";

		} else {

			$message = get_option("wpsc_email_receipt");

			$message_html = $message;

		}

		

		$order_url = $siteurl."/wp-admin/admin.php?page=".WPSC_DIR_NAME."/display-log.php&amp;purchcaseid=".$purchase_log['id'];



		$cartsql = "SELECT * FROM `".WPSC_TABLE_CART_CONTENTS."` WHERE `purchaseid`=".$purchase_log['id']."";

		$cart = $wpdb->get_results($cartsql,ARRAY_A);

		if($purchase_log['shipping_country'] != '') {

			$billing_country = $purchase_log['billing_country'];

			$shipping_country = $purchase_log['shipping_country'];

		} else {

			$country = $wpdb->get_results("SELECT * FROM `".WPSC_TABLE_SUBMITED_FORM_DATA."` WHERE `log_id`=".$purchase_log['id']." AND `form_id` = '".get_option('country_form_field')."' LIMIT 1",ARRAY_A);

			$billing_country = $country[0]['value'];

			$shipping_country = $country[0]['value'];

		}

	

		$email_form_field = $wpdb->get_results("SELECT `id`,`type` FROM `".WPSC_TABLE_CHECKOUT_FORMS."` WHERE `type` IN ('email') AND `active` = '1' ORDER BY `order` ASC LIMIT 1",ARRAY_A);

		$email_address = $wpdb->get_results("SELECT * FROM `".WPSC_TABLE_SUBMITED_FORM_DATA."` WHERE `log_id`=".$purchase_log['id']." AND `form_id` = '".$email_form_field[0]['id']."' LIMIT 1",ARRAY_A);

		$email = $email_address[0]['value'];

	

		$previous_download_ids = array(0); 

	

		if(($cart != null)) {

			foreach($cart as $row) {

				$link = "";

				$productsql= "SELECT * FROM `".WPSC_TABLE_PRODUCT_LIST."` WHERE `id`=".$row['prodid']."";

				$product_data = $wpdb->get_results($productsql,ARRAY_A) ;

				

				if($product_data[0]['file'] > 0) {

					if($purchase_log['email_sent'] != 1) {

						$wpdb->query("UPDATE `".WPSC_TABLE_DOWNLOAD_STATUS."` SET `active`='1' WHERE `fileid`='".$product_data[0]['file']."' AND `purchid` = '".$purchase_log['id']."' LIMIT 1");

					}

					

					if (($purchase_log['processed'] >= 2)) {

						$download_data = $wpdb->get_results("SELECT *

						FROM `".WPSC_TABLE_DOWNLOAD_STATUS."` INNER JOIN `".WPSC_TABLE_PRODUCT_FILES."`

						ON `".WPSC_TABLE_DOWNLOAD_STATUS."`.`fileid` = `".WPSC_TABLE_PRODUCT_FILES."`.`id`

						WHERE `".WPSC_TABLE_DOWNLOAD_STATUS."`.`active`='1'

						AND `".WPSC_TABLE_DOWNLOAD_STATUS."`.`purchid`='".$purchase_log['id']."'

						AND (

							`".WPSC_TABLE_DOWNLOAD_STATUS."`.`cartid` = '".$row['id']."'

							OR (

								`".WPSC_TABLE_DOWNLOAD_STATUS."`.`cartid` IS NULL

								AND `".WPSC_TABLE_DOWNLOAD_STATUS."`.`fileid` = '{$product_data['file']}'

							)

						)

						 AND `".WPSC_TABLE_DOWNLOAD_STATUS."`.`id` NOT IN ('".implode("','",$previous_download_ids)."')",ARRAY_A);

						$link=array();

							//exit('IM HERE'.$errorcode.'<pre>'.print_r($download_data).'</pre>');

						if(sizeof($download_data) != 0) {

							foreach($download_data as $single_download){

								if($single_download['uniqueid'] == null){// if the uniqueid is not equal to null, its "valid", regardless of what it is

									$link[] = array("url"=>$siteurl."?downloadid=".$single_download['id'], "name" =>$single_download["filename"]);	

								} else {

									$link[] = array("url"=>$siteurl."?downloadid=".$single_download['uniqueid'], "name" =>$single_download["filename"]);

								}

              }

						}

						$previous_download_ids[] = $download_data['id'];

						$order_status= 4;

					}

				}

				do_action('wpsc_confirm_checkout', $purchase_log['id']);

		

				$shipping = nzshpcrt_determine_item_shipping($row['prodid'], $row['quantity'], $shipping_country);

				if (isset($_SESSION['quote_shipping'])){

					$shipping = $_SESSION['quote_shipping'];

				}

				$total_shipping += $shipping;

		

				if($product_data[0]['special']==1) {

					$price_modifier = $product_data[0]['special_price'];

				} else {

					$price_modifier = 0;

				}

		

				$total+=($row['price']*$row['quantity']);

				$message_price = nzshpcrt_currency_display(($row['price']*$row['quantity']), $product_data[0]['notax'], true);



				$shipping_price = nzshpcrt_currency_display($shipping, 1, true);

				

				$variation_sql = "SELECT * FROM `".WPSC_TABLE_CART_ITEM_VARIATIONS."` WHERE `cart_id`='".$row['id']."'";

				$variation_data = $wpdb->get_results($variation_sql,ARRAY_A); 

				$variation_count = count($variation_data);

		

				if($variation_count > 1) {

					$variation_list = " (";

		

					if($purchase['gateway'] != 'testmode') {

						if($gateway['internalname'] == $purch_data[0]['gateway'] ) {

							$gateway_name = $gateway['name'];

						}

					} else {

						$gateway_name = "Manual Payment";

							}

							$i = 0;

							foreach($variation_data as $variation) {

								if($i > 0) {

									$variation_list.= ", ";

								}

								

								$value_id = $variation['value_id'];

								$value_data = $wpdb->get_results("SELECT * FROM `".WPSC_TABLE_VARIATION_VALUES."` WHERE `id`='".$value_id."' LIMIT 1",ARRAY_A);

								$variation_list.= $value_data[0]['name'];

								$i++;	

							}

							$variation_list .= ")";

						} else {

							if($variation_count == 1) {

								$value_id = $variation_data[0]['value_id'];

								$value_data = $wpdb->get_results("SELECT * FROM `".WPSC_TABLE_VARIATION_VALUES."` WHERE `id`='".$value_id."' LIMIT 1",ARRAY_A);

								$variation_list = " (".$value_data[0]['name'].")";

							} else {

								$variation_list = '';

							}

						}

			

						if($link != '') {

							$product_list .= " - ". $product_data['name'] . stripslashes($variation_list) ."  ".$message_price ." ".__('Click to download', 'wpsc').":";

							$product_list_html .= " - ". $product_data['name'] . stripslashes($variation_list) ."  ".$message_price ."&nbsp;&nbsp;".__('Click to download', 'wpsc').":\n\r";

							foreach($link as $single_link) {

								$product_list .= "\n\r ".$single_link["name"].": ".$single_link["url"]."\n\r";

								$product_list_html .= "<a href='".$single_link["url"]."'>".$single_link["name"]."</a>\n";

							}

						} else {

							$plural = '';

							

							if($row['quantity'] > 1) {

								$plural = "s";

							  }



							$product_list.= " - ".$row['quantity']." ". $product_data[0]['name'].$variation_list ."  ". $message_price ."\n";

							if ($shipping > 0) $product_list .= " - ". __('Shipping', 'wpsc').":".$shipping_price ."\n\r";

							$product_list_html.= " - ".$row['quantity']." ". $product_data[0]['name'].$variation_list ."  ". $message_price ."\n";

							if ($shipping > 0) $product_list_html .= " - ". __('Shipping', 'wpsc').":".$shipping_price ."\n\r";

						}

						

						$report.= " - ". $product_data[0]['name'] .$variation_list."  ".$message_price ."\n";

				}

				

				if($purchase_log['discount_data'] != '') {

					$coupon_data = $wpdb->get_row("SELECT * FROM `".WPSC_TABLE_COUPON_CODES."` WHERE coupon_code='".$wpdb->escape($purchase_log['discount_data'])."' LIMIT 1",ARRAY_A);

					if($coupon_data['use-once'] == 1) {

						$wpdb->query("UPDATE `".WPSC_TABLE_COUPON_CODES."` SET `active`='0', `is-used`='1' WHERE `id`='".$coupon_data['id']."' LIMIT 1");

					}

				}

				//$wpdb->query("UPDATE `".WPSC_TABLE_DOWNLOAD_STATUS."` SET `active`='1' WHERE `fileid`='".$product_data[0]['file']."' AND `purchid` = '".$purchase_log['id']."' LIMIT 1");

				$total_shipping += $purchase_log['base_shipping'];



				$total = (($total+$total_shipping) - $purchase_log['discount_value']);

			// $message.= "\n\r";

			$product_list.= "Your Purchase No.: ".$purchase_log['id']."\n\r";

				if($purchase_log['discount_value'] > 0) {

					$discount_email.= __('Discount', 'wpsc').": ".nzshpcrt_currency_display($purchase_log['discount_value'], 1, true)."\n\r";

				}

				$total_shipping_email.= __('Total Shipping', 'wpsc').": ".nzshpcrt_currency_display($total_shipping,1,true)."\n\r";

				$total_price_email.= __('Total', 'wpsc').": ".nzshpcrt_currency_display($total,1,true)."\n\r";

				$product_list_html.= "Your Purchase No.: ".$purchase_log['id']."\n\n\r";

				if($purchase_log['discount_value'] > 0) {

					$discount_html.= __('Discount', 'wpsc').": ".nzshpcrt_currency_display($purchase_log['discount_value'], 1, true)."\n\r";

				}

				$total_shipping_html.= __('Total Shipping', 'wpsc').": ".nzshpcrt_currency_display($total_shipping,1,true)."\n\r";

				$total_price_html.= __('Total', 'wpsc').": ".nzshpcrt_currency_display($total, 1,true)."\n\r";

				if(isset($_GET['ti'])) {

					$message.= "\n\r".__('Your Transaction ID', 'wpsc').": " . $_GET['ti'];

					$message_html.= "\n\r".__('Your Transaction ID', 'wpsc').": " . $_GET['ti'];

					$report.= "\n\r".__('Transaction ID', 'wpsc').": "