PageRenderTime 1142ms CodeModel.GetById 23ms RepoModel.GetById 92ms app.codeStats 0ms

/easyshop_class.php

https://github.com/nlstart/easyshop
PHP | 916 lines | 711 code | 55 blank | 150 comment | 159 complexity | 7accc8d4c3c64cce31f84d916fdf3ea4 MD5 | raw file
    

  1. <?php
    2. 

  2. /*
    3. 

  3. +------------------------------------------------------------------------------+
    4. 

  4. | EasyShop - an easy e107 web shop  | adapted by nlstart
    5. 

  5. | formerly known as
    6. 

  6. |	jbShop - by Jesse Burns aka jburns131 aka Jakle
    7. 

  7. |	Plugin Support Site: e107.webstartinternet.com
    8. 

  8. |
    9. 

  9. |	For the e107 website system visit http://e107.org
    10. 

  10. |
    11. 

  11. |	Released under the terms and conditions of the
    12. 

  12. |	GNU General Public License (http://gnu.org).
    13. 

  13. +------------------------------------------------------------------------------+
    14. 

  14. */
    15. 

  15. class ShopMail
    16. 

  16. {
    17. 

  17.   function easyshop_sendemail($send_to, $subject, $message, $headers2, $attachment_name) {
    18. 

  18.     $domain_name = General::parseUrl(e_SELF); // Parse the current url
    19. 

  19.     $domain_name = $domain_name[host]; // Retrieve the host name from the parsed array
    20. 

  20.     require_once(e_HANDLER.'mail.php');
    21. 

  21.     // $bcc_mail = "yourmailaccount@yourdomain.tld";
    22. 

  22.     if (!sendemail($send_to, $subject, $message, $to_name, "no-reply@".$domain_name, "EasyShop", $attachment_name, "", $bcc_mail)) {
    23. 

  23.   			return FALSE;
    24. 

  24.     }	else { // E-mail was send succesfully
    25. 

  25.   			return TRUE;
    26. 

  26.     }
    27. 

  27.   }
    28. 

  28. 

  29.   function easyshop_senddownloads($array, $to_email)
    30. 

  30.   {
    31. 

  31.     $address = $to_email;
    32. 

  32.     // Loop throught the basket to detect dowloadable products
    33. 

  33.     foreach($array as $id => $item) {
    34. 

  34.       $sql = new db;
    35. 

  35.       $sql -> db_Select(DB_TABLE_SHOP_ITEMS, "*", "item_id=$item[db_id]");
    36. 

  36.       if ($row = $sql-> db_Fetch()){
    37. 

  37.         $download_product  = $row['download_product'];
    38. 

  38.         $download_filename = $row['download_filename'];
    39. 

  39.     		// Check if this is a downloadable product with valid download filename
    40. 

  40.     		if ($download_product == 2 && strlen($download_filename) > 0) {
    41. 

  41.     		$scrambled_name = intval($item[db_id]).$download_filename;
    42. 

  42.     		$attachment_name_scrambled = "downloads/".MD5($scrambled_name);
    43. 

  43.     		$attachment_name = "downloads/".$download_filename;
    44. 

  44.     		// Create temporary original file to download with unscrambled name
    45. 

  45.     		if (!copy($attachment_name_scrambled, $attachment_name)) {
    46. 

  46.     			$message = EASYSHOP_CLASS_02." $attachment_name_scrambled...\n";
    47. 

  47.     		}
    48. 

  48.     		$subject = EASYSHOP_CLASS_03." ".$item[item_name]." ".date("Y-m-d");
    49. 

  49.     		$message = EASYSHOP_CLASS_04.": ".$download_filename."\n";
    50. 

  50.     		// $message .= "Download filename scrambled: ".$attachment_name_scrambled."\n"; // debug info
    51. 

  51.     		// $message .= "Download filename: ".$attachment_name; // debug info
    52. 

  52.     			if(!ShopMail::easyshop_sendemail($address, $subject, $message, $header, $attachment_name)) {
    53. 

  53.     				$message = EASYSHOP_CLASS_05;  // Sending downloadable product failed
    54. 

  54.     			}
    55. 

  55.     			// Delete the temporary download file
    56. 

  56.     			unlink($attachment_name);
    57. 

  57.     	 	} // End of the if downloadable product with valid download filename
    58. 

  58.       } // End of the if product fetch
    59. 

  59. 	  // Make sure the variables are empty before going into the while loop again
    60. 

  60.       $download_product  = "";
    61. 

  61.       $download_filename = "";	  
    62. 

  62.     }
    63. 

  63.   }
    64. 

  64. 

  65.   function easyshop_sendalert($product_id, $newstock, $minimum_level, $alert_type)
    66. 

  66.   // Send alerts to shop owner
    67. 

  67.   // Parameters: 
    68. 

  68.   // $product_id = the item_id that the alert is send for
    69. 

  69.   // $newstock = actual number of product in stock including this purchase
    70. 

  70.   // $minimum_level = minimum number of product that should be in stock
    71. 

  71.   // $alert_type = 	1 : mimimum stock level alert 
    72. 

  72.   //				2 : customer paid for more products than in stock
    73. 

  73.   //				3 : product is out of stock
    74. 

  74.   {
    75. 

  75.     // Determine admin e-mail address from e107 preferences
    76. 

  76. 	global $pref;
    77. 

  77. 	$to_email = (!(isset($pref['siteadminemail']) && strlen($pref['siteadminemail'])==0)?$pref['replyto_email']:$pref['siteadminemail']); // Keep 0.7.8 compatible
    78. 

  78. 	// Retrieve product data
    79. 

  79. 	$product_id = intval($product_id);
    80. 

  80. 	$sql = new db;
    81. 

  81. 	$sql -> db_Select(DB_TABLE_SHOP_ITEMS, "*", "item_id=$product_id");
    82. 

  82. 	if ($row = $sql-> db_Fetch()){
    83. 

  83. 		// Set subject and message for each alert type
    84. 

  84. 		if ($alert_type == "1") { // Alert 1: stock is below minimum level of this product
    85. 

  85. 			$subject = EASYSHOP_CLASS_06." ".$row['item_name']; 
    86. 

  86. 			$message = EASYSHOP_CLASS_08." <a href='".SITEURL.e_PLUGIN."easyshop/easyshop.php?prod.".$product_id."'>".$row['item_name']."</a>!<br /><br />
    87. 

  87. 					".EASYSHOP_CLASS_09.": $minimum_level<br />
    88. 

  88. 					".EASYSHOP_CLASS_10.": $newstock";
    89. 

  89. 		}
    90. 

  90. 		if ($alert_type == "2") { // Alert 2: last buyer purchased more of this product than actual in stock
    91. 

  91. 			$subject = EASYSHOP_CLASS_07." ".$row['item_name']; 
    92. 

  92. 			$message = EASYSHOP_CLASS_11." <a href='".SITEURL.e_PLUGIN."easyshop/easyshop.php?prod.".$product_id."'>".$row['item_name']."</a>!<br /><br />
    93. 

  93. 					".EASYSHOP_CLASS_09.": $minimum_level<br />
    94. 

  94. 					".EASYSHOP_CLASS_10.": $newstock";
    95. 

  95. 		}
    96. 

  96. 		if ($alert_type == "3") { // Alert 3: product is out of stock
    97. 

  97. 			$subject = EASYSHOP_CLASS_12." ".$row['item_name']; 
    98. 

  98. 			$message = EASYSHOP_CLASS_13." <a href='".SITEURL.e_PLUGIN."easyshop/easyshop.php?prod.".$product_id."'>".$row['item_name']."</a>!<br />";
    99. 

  99. 		}
    100. 

  100. 		// Send alert
    101. 

  101. 		ShopMail::easyshop_sendemail($to_email, $subject, $message, $header, $attachment_name);
    102. 

  102. 	}
    103. 

  103.   }
    104. 

  104.   
    105. 

  105. }
    106. 

  106. 

  107. class Security
    108. 

  108. {
    109. 

  109.   function get_session_id()
    110. 

  110.   {
    111. 

  111.     static $session_id;
    112. 

  112.     if ( $session_id == "" ) // 1.31 fix: setting static already sets the variable; thanks KVN
    113. 

  113.     {
    114. 

  114.       $session_id = session_id();
    115. 

  115.     }
    116. 

  116.     return $session_id;
    117. 

  117.   }
    118. 

  118. }
    119. 

  119. 

  120. class General
    121. 

  121. {
    122. 

  122.   function multiple_paging($total_pages,$items_per_page,$action,$action_id,$page_id,$page_devider)
    123. 

  123.   // Parameters: $total_pages = the total pages that must be paginated
    124. 

  124.   // $items_per_page = the number of items represented per page
    125. 

  125.   // $action = action from url, e.g. catpage or prodpage
    126. 

  126.   // $action_id = action_id from url
    127. 

  127.   // $page_devider is the page devide character
    128. 

  128.   {
    129. 

  129.     if (trim($page_id) <> "" or $page_id > 0) {
    130. 

  130.      $f_action_id = $page_id; // For prodpage or catpage the $page_id is the page indicator
    131. 

  131.     } else {
    132. 

  132.      $f_action_id = $action_id; // For mcatpage the $action_id is the page indicator
    133. 

  133.     }
    134. 

  134. 	if ($action == "mcatpage" || $action == "catpage") {
    135. 

  135.      $f_action_id = $action_id; // For mcatpage and catpage the $action_id is the page indicator
    136. 

  136. 	}
    137. 

  137.     $last_page = intval(($total_pages + $items_per_page - 1) / $items_per_page); // Rounded last page number
    138. 

  138.     if ($last_page > 1 ) { // Suppress page indication if there is only one page
    139. 

  139.       $page_count = 1;
    140. 

  140.       if ($f_action_id == "" or $f_action_id < 1 or $f_action_id == null) {
    141. 

  141.         $f_action_id = 1; // Set initial page if no page parameter or illegal parameter is given
    142. 

  142.       }
    143. 

  143.       while ($page_count <= $last_page) { // For each page counter display a page
    144. 

  144. 		if ( $page_count == $f_action_id ) { // If it is the page itself, no link
    145. 

  145.         //if ( $page_count == $last_page) { // If it is the page itself, no link
    146. 

  146.           $page_text .= " ".EASYSHOP_SHOP_05." ".$page_count." ".$page_devider;
    147. 

  147.         } else { // This is a different page than the current one, provide a link
    148. 

  148.           //$offset = $items_per_page * ($page_count - 1);
    149. 

  149.           if ($action == "catpage" or $action == "allcat") {
    150. 

  150.           $page_text .= " <a href='".e_SELF."?catpage.".$page_count."'>".EASYSHOP_SHOP_05." ".$page_count."</a> ".$page_devider;
    151. 

  151.           }
    152. 

  152.           if ($action == "cat" or $action == "prodpage") {
    153. 

  153.           $page_text .= " <a href='".e_SELF."?prodpage.".$action_id.".".$page_count."'>".EASYSHOP_SHOP_05." ".$page_count."</a> ".$page_devider;
    154. 

  154.           }
    155. 

  155.           if ($action == "blanks") {
    156. 

  156.           $page_text .= " <a href='".e_SELF."?blanks.".$page_count."'>".EASYSHOP_SHOP_05." ".$page_count."</a> ".$page_devider;
    157. 

  157.           }
    158. 

  158.           if ($action == "mcat") {
    159. 

  159.           $page_text .= " <a href='".e_SELF."?mcat.".$action_id.".".$page_count."'>".EASYSHOP_SHOP_05." ".$page_count."</a> ".$page_devider;
    160. 

  160.           }		  
    161. 

  161.           if ($action == "" or $action == "mcatpage") {
    162. 

  162.           $page_text .= " <a href='".e_SELF."?mcatpage.".$page_count."'>".EASYSHOP_SHOP_05." ".$page_count."</a> ".$page_devider;
    163. 

  163.           }
    164. 

  164.         }
    165. 

  165.         // Some debug info
    166. 

  166.         //$page_text .= " lastpage: $last_page, items per page: $items_per_page, page_count: $page_count, total_pages: $total_pages <br /> ";
    167. 

  167.         //$page_text .= " f_action_id: $f_action_id page_id: $page_id <br /> ";
    168. 

  168.         $page_count++;
    169. 

  169.       }
    170. 

  170.       $page_text = substr($page_text, 0, -(strlen($page_devider))); // Remove length of last divider character from page string
    171. 

  171.     }
    172. 

  172.     return $page_text;
    173. 

  173.   }
    174. 

  174.   
    175. 

  175.   function determine_offset($f_action,$f_action_id,$f_items_per_page)
    176. 

  176.   // Parameters: $action = action from url, e.g. catpage or prodpage
    177. 

  177.   // $action_id = action_id from url
    178. 

  178.   // $items_per_page = the number of items represented per page
    179. 

  179.   {
    180. 

  180.     if ($f_action == null ) {
    181. 

  181.       $f_offset = 0;
    182. 

  182.     } else {
    183. 

  183.         if ($f_action_id == null or $f_action_id <= 0 or $f_action_id == "") {
    184. 

  184.           $f_offset = 0;
    185. 

  185.       } else {
    186. 

  186.           $f_offset = $f_items_per_page * ($f_action_id - 1);
    187. 

  187.       }
    188. 

  188.     }
    189. 

  189.     return $f_offset;
    190. 

  190.   }
    191. 

  191.   
    192. 

  192.   function validateDecimal($f_value) {
    193. 

  193.   // Parameter: $f_value = value to be checked on maximum of 2 decimals
    194. 

  194.     if (!ereg("^[+-]?[0-9]*\.?[0-9]{0,2}$", $f_value)) {
    195. 

  195.     // Not a decimal;
    196. 

  196.     return false;
    197. 

  197.     }
    198. 

  198.     return true;
    199. 

  199.   }
    200. 

  200. 

  201.   function getCommentTotal($pluginid, $id) {
    202. 

  202.      // Get number of comments for an item.
    203. 

  203.      // This method returns the number of comments for the supplied plugin/item id.
    204. 

  204.      // @param   string   a unique ID for this plugin, maximum of 10 character
    205. 

  205.      // @param   int      id of the item comments are allowed for
    206. 

  206.      // @return  int      number of comments for the supplied parameters
    207. 

  207.     global $pref, $e107cache, $tp;
    208. 

  208.     $query = "where comment_item_id='$id' AND comment_type='$pluginid'";
    209. 

  209.     $mysql = new db();
    210. 

  210.     return $mysql->db_Count("comments", "(*)", $query);
    211. 

  211.   }
    212. 

  212.   
    213. 

  213.   function getCurrentVersion(){
    214. 

  214.   $current_version = strtolower(trim(file_get_contents('http://e107.webstartinternet.com/files/downloads/easyshop_ver.php')));
    215. 

  215.   return $current_version;
    216. 

  216.   }
    217. 

  217.   
    218. 

  218.   function getEasyShopDownloadDir() {
    219. 

  219.   $download_dir = "http://e107.webstartinternet.com/download.php?list.5";
    220. 

  220.   return $download_dir;
    221. 

  221.   }
    222. 

  222.   
    223. 

  223.   function Array_Clean($str,&$array) {
    224. 

  224.     // Cleans a given string from an array
    225. 

  225.     // @param   string    the string that you want to delete from an array
    226. 

  226.     // @param   array     the name of the array you want to apply the clean function
    227. 

  227.       if (in_array($str,$array)==true) {
    228. 

  228.         foreach ($array as $key=>$value) {
    229. 

  229.           if ($value==$str) unset($array[$key]);
    230. 

  230.         }
    231. 

  231.       }
    232. 

  232.   }
    233. 

  233.   
    234. 

  234.   function CreateRandomDiscountCode() {
    235. 

  235.    // Letter O (uppercase o) is not included; can be confused with zero (0)
    236. 

  236.    // The letter l (lowercase L), and the number 1 have been removed, as they can be easily mixed up
    237. 

  237.     $chars = "AaBbCcDdEeFfGgHhIiJjKkLMmNnoPpQqRrSsTtUuVvWwXxYyZz023456789,.;:#$%*=+[]";
    238. 

  238.     srand((double)microtime()*1000000);
    239. 

  239.     $i = 0;
    240. 

  240.     $random_discount_code = '' ;
    241. 

  241.     while ($i <= 5) { // Create a 6 character random code
    242. 

  242.         $num = rand() % 69;
    243. 

  243.         $tmp = substr($chars, $num, 1);
    244. 

  244.         $random_discount_code = $random_discount_code . $tmp;
    245. 

  245.         $i++;
    246. 

  246.     }
    247. 

  247.     return htmlspecialchars($random_discount_code);
    248. 

  248.   }
    249. 

  249.   
    250. 

  250.   function parseUrl($url) {
    251. 

  251.     $r  = "^(?:(?P<scheme>\w+)://)?";
    252. 

  252.     $r .= "(?:(?P<login>\w+):(?P<pass>\w+)@)?";
    253. 

  253.     $r .= "(?P<host>(?:(?P<subdomain>[-\w\.]+)\.)?" . "(?P<domain>[-\w]+\.(?P<extension>\w+)))";
    254. 

  254.     $r .= "(?::(?P<port>\d+))?";
    255. 

  255.     $r .= "(?P<path>[\w/]*/(?P<file>\w+(?:\.\w+)?)?)?";
    256. 

  256.     $r .= "(?:\?(?P<arg>[\w=&]+))?";
    257. 

  257.     $r .= "(?:#(?P<anchor>\w+))?";
    258. 

  258.     $r = "!$r!";  // Delimiters
    259. 

  259.     preg_match ( $r, $url, $out );
    260. 

  260.     return $out;
    261. 

  261.   }
    262. 

  262.   
    263. 

  263.   function easyshop_theme_head() {
    264. 

  264.    return "<link rel='stylesheet' href='".e_PLUGIN."easyshop/tabs.css' />\n";
    265. 

  265.   }
    266. 

  266. } // End of class General
    267. 

  267. 

  268. class Shop
    269. 

  269. {
    270. 

  270.   function switch_columns($p_num_item_columns) {
    271. 

  271.   // Returns column width percentage variable $column_width
    272. 

  272.   // @param   integer    the number of item columns from the settings
    273. 

  273. 		switch ($p_num_item_columns) {
    274. 

  274. 			case 1:
    275. 

  275. 				$column_width = '100%';
    276. 

  276. 				break;
    277. 

  277. 			case 2:
    278. 

  278. 				$column_width = '50%';
    279. 

  279. 				break;
    280. 

  280. 			case 3:
    281. 

  281. 				$column_width = '33%';
    282. 

  282. 				break;
    283. 

  283. 			case 4:
    284. 

  284. 				$column_width = '25%';
    285. 

  285. 				break;
    286. 

  286. 			case 5:
    287. 

  287. 				$column_width = '20%';
    288. 

  288. 				break;
    289. 

  289. 		}
    290. 

  290. 		return $column_width;
    291. 

  291.   }
    292. 

  292. 

  293.   function show_checkout($p_session_id, $p_special_instr_text) {
    294. 

  294. 	// Default checkout method with PayPal (IPN)
    295. 

  295.     // Parameter $p_session_id is used to check the users' current session ID to prevent XSS vulnarabilities
    296. 

  296.     // Parameter $p_special_instr_text is used to pass e-mail special instructions for seller
    297. 

  297.     //if ($p_session_id != session_id()) { // Get out of here: incoming session id is not equal than current session id
    298. 

  298.     // header("Location: ".e_BASE); // Redirect to the home page
    299. 

  299.     // exit();
    300. 

  300.     //}
    301. 

  301. 

  302.     // Check query
    303. 

  303.     if(e_QUERY){
    304. 

  304.     	$tmp = explode(".", e_QUERY);
    305. 

  305.     	$action = $tmp[0];
    306. 

  306.     	unset($tmp);
    307. 

  307.     }
    308. 

  308. 

  309.   	$sql2 = new db;
    310. 

  310.   	$sql2 -> db_Select(DB_TABLE_SHOP_PREFERENCES, "*", "store_id=1");
    311. 

  311.   	if ($row2 = $sql2-> db_Fetch()){
    312. 

  312.   		$sandbox               = $row2['sandbox'];
    313. 

  313.     	$paypal_email          = $row2['paypal_email'];
    314. 

  314.     	$payment_page_style    = $row2['payment_page_style'];
    315. 

  315.     	$paypal_currency_code  = $row2['paypal_currency_code'];
    316. 

  316.     	$set_currency_behind   = $row2['set_currency_behind'];
    317. 

  317. 		$minimum_amount        = intval($row2['minimum_amount']);
    318. 

  318. 		$always_show_checkout  = $row2['always_show_checkout'];
    319. 

  319. 		$email_order           = $row2['email_order'];
    320. 

  320. 		$show_shopping_bag     = $row2['show_shopping_bag'];
    321. 

  321. 		$print_special_instr   = $row2['print_special_instr'];
    322. 

  322. 		$enable_ipn 		   = $row2['enable_ipn']; // IPN addition
    323. 

  323.   	}
    324. 

  324. 

  325.     $sql3 = new db;
    326. 

  326.   	$sql3 -> db_Select(DB_TABLE_SHOP_CURRENCY, "*", "currency_active=2");
    327. 

  327.   	if ($row3 = $sql3-> db_Fetch()){
    328. 

  328.   		$unicode_character 	  = $row3['unicode_character'];
    329. 

  329.   		$paypal_currency_code = $row3['paypal_currency_code'];
    330. 

  330.   	}
    331. 

  331. 

  332.     // Determine currency before or after amount
    333. 

  333.     if ($set_currency_behind == 1) {
    334. 

  334. 		// Print currency after amount
    335. 

  335. 		$unicode_character_before = "";
    336. 

  336. 		$unicode_character_after = "&nbsp;".$unicode_character;
    337. 

  337.     }
    338. 

  338.     else {
    339. 

  339. 		$unicode_character_before = "&nbsp;".$unicode_character."&nbsp;";
    340. 

  340. 		$unicode_character_after = "";
    341. 

  341.     	// Print currency before amount in all other cases
    342. 

  342.     }
    343. 

  343.     if ($email_order == 1) {
    344. 

  344.    		$actionDomain = e_SELF;
    345. 

  345.     } else {
    346. 

  346.     	if ($sandbox == 2) {
    347. 

  347.     		$actionDomain = "https://www.sandbox.paypal.com/cgi-bin/webscr";
    348. 

  348.     	} else {
    349. 

  349.     		$actionDomain = "https://www.paypal.com/cgi-bin/webscr";
    350. 

  350.     	}
    351. 

  351.     }
    352. 

  352. 

  353.     // Display check out button    
    354. 

  354.     $f_text = ""; // initialise
    355. 

  355. 	if(($enable_ipn == 2) && ($_SESSION['sc_total']['items'] > 0) && $email_order <> 1){   // IPN addition if IPN_enabled - use AJAX
    356. 

  356. 		$f_text .= "
    357. 

  357.             <form action='track_checkout.php' method='POST'>
    358. 

  358. 				<!-- <span id='checkoutbutton'> -->
    359. 

  359. 				<div>
    360. 

  360. 					<input type='hidden' name='phpsessionid' value='".session_id()."'/>
    361. 

  361. 					<input type='hidden' name='source_url' value='".urlencode(e_SELF.(e_QUERY ? "?".e_QUERY : ""))."'/>
    362. 

  362. 					<input class='button' type='submit' value='".EASYSHOP_CLASS_01."'/>
    363. 

  363. 				</div>
    364. 

  364. 				<!-- </span> -->
    365. 

  365.             </form>";            
    366. 

  366. 	} else {
    367. 

  367. 		$f_text = ""; // Initialize variable
    368. 

  368. 		// <form target='_blank' action='$paypalDomain/cgi-bin/webscr' method='post'> leads to XHTML incompatibility caused by target
    369. 

  369. 		$f_text .= "
    370. 

  370. 			<form action='$actionDomain' method='post'>
    371. 

  371. 				<input type='hidden' name='cmd' value='_cart'/>
    372. 

  372. 				<input type='hidden' name='upload' value='1'/>
    373. 

  373. 				<input type='hidden' name='business' value='$paypal_email'/>
    374. 

  374. 				<input type='hidden' name='page_style' value='$payment_page_style'/>";
    375. 

    376. 

  376. 		// Fill the Cart with products from the basket
    377. 

  377. 		$count_items = count($_SESSION['shopping_cart']); // Count number of different products in basket
    378. 

  378. 		$array = $_SESSION['shopping_cart'];
    379. 

  379. 

  380. 		$cart_count = 1; // PayPal requires to pass multiple products in a sequence starting at 1
    381. 

  381. 		// For each product in the shopping cart array write PayPal details
    382. 

  382. 		foreach($array as $id => $item) {
    383. 

  383. 			$f_text .= "
    384. 

  384. 				<input type='hidden' name='item_name_".$cart_count."' value='".$item['item_name']."'/>
    385. 

  385. 				<input type='hidden' name='item_number_".$cart_count."' value='".$item['sku_number']."'/>
    386. 

  386. 				<input type='hidden' name='amount_".$cart_count."' value='".$item['item_price']."'/>
    387. 

  387. 				<input type='hidden' name='quantity_".$cart_count."' value='".$item['quantity']."'/>
    388. 

  388. 				<input type='hidden' name='shipping_".$cart_count."' value='".$item['shipping']."'/>
    389. 

  389. 				<input type='hidden' name='shipping2_".$cart_count."' value='".$item['shipping2']."'/>
    390. 

  390. 				<input type='hidden' name='handling_".$cart_count."' value='".$item['handling']."'/>
    391. 

  391. 				<input type='hidden' name='db_id_".$cart_count."' value='".$item['db_id']."' />";
    392. 

  392. 			$cart_count++;
    393. 

  393. 		}
    394. 

  394. 

  395. 		$thanks_page = str_replace('easyshop.php', 'thank_you.php', e_SELF); // Set thanks page to correct value
    396. 

  396. 		$f_text .= "
    397. 

  397. 				<input type='hidden' name='currency_code' value='$paypal_currency_code'/>
    398. 

  398. 				<input type='hidden' name='no_note' value='1'/>
    399. 

  399. 				<input type='hidden' name='lc' value='US'/>
    400. 

  400. 				<input type='hidden' name='bn' value='PP-ShopCartBF'/>
    401. 

  401. 				<input type='hidden' name='rm' value='1'/>
    402. 

  402. 				<input type='hidden' name='return' value='".$thanks_page."'/>";
    403. 

  403. 	}
    404. 

  404. 

  405. 	if((!$enable_ipn == 2 || $email_order == 1) && ($_SESSION['sc_total']['items'] > 0)){ // nlstart fix: here too! :)  ### IPN addition if IPN_enabled - use AJAX
    406. 

  406. 		// in case setting always show checkout button is off
    407. 

  407. 		if ($always_show_checkout == 0) {
    408. 

  408. 		// When there are items in the shopping cart, display 'Go to checkout' button
    409. 

  409.   			if ($_SESSION['sc_total']['items'] > 0) {
    410. 

  410. 				// Only show 'Go to checkout' if total amount is above minimum amount
    411. 

  411. 				if ($_SESSION['sc_total']['sum'] > $minimum_amount) {
    412. 

  412. 					if ($email_order == 1) {
    413. 

  413. 						// Only show enter special instructions if setting is 'On'
    414. 

  414. 						if ($print_special_instr == 1) {
    415. 

  415. 							// Only show special instruction text form in basket edit mode
    416. 

  416. 							if ($action == "edit" && $_SESSION['easyshop_menu'] == false) {
    417. 

  417. 								$f_text .= "
    418. 

  418. 				<table border='0' class='tborder' cellspacing='5'>
    419. 

  419. 					<tr>
    420. 

  420. 						<td class='tborder' style='width: 200px' valign='top'>
    421. 

  421. 							<span class='smalltext' style='font-weight: bold'>
    422. 

  422. 								".EASYSHOP_SHOP_82."
    423. 

  423. 							</span>
    424. 

  424. 							<br />
    425. 

  425. 							".EASYSHOP_SHOP_83."
    426. 

  426. 						</td>
    427. 

  427. 						<td class='tborder' style='width: 200px'>
    428. 

  428. 							<textarea class='tbox' cols='50' rows='2' name='special_instr_text'>$p_special_instr_text</textarea>
    429. 

  429. 						</td>
    430. 

  430. 					</tr>
    431. 

  431. 				</table>";
    432. 

  432. 							} else { // In the easyshop_menu, main cat, cat and product level display a link
    433. 

  433. 								$f_text .= "
    434. 

  434. 				<div style='text-align:center;'>
    435. 

  435. 					<a href='".e_PLUGIN_ABS."easyshop/easyshop.php?edit'>".EASYSHOP_SHOP_82."</a><br /><br />
    436. 

  436. 				</div>";
    437. 

  437. 							}
    438. 

  438. 						}
    439. 

  439. 						$f_text .= "
    440. 

  440. 				<input type='hidden' name='email_order' value='1'/>
    441. 

  441. 				<input class='button' type='submit' value='".EASYSHOP_SHOP_09."'/>";
    442. 

  442. 					}
    443. 

  443. 					if ($enable_ipn == 0 && $email_order <> 1) { // Enable standard checkout button 
    444. 

  444.     					$f_text .= "
    445. 

  445. 				<input class='button' type='submit' value='".EASYSHOP_SHOP_09."'/>";
    446. 

  446. 					}
    447. 

  447.   				} else { // Minimum amount has not been reached; inform the shopper
    448. 

  448. 					$f_text .= 
    449. 

  449. 			EASYSHOP_SHOP_36." : ".$unicode_character_before.number_format($minimum_amount, 2, '.', '').$unicode_character_after." <br />
    450. 

  450.             ".EASYSHOP_SHOP_37." : ".$unicode_character_before.number_format(($minimum_amount - $_SESSION['sc_total']['sum']), 2, '.', '').$unicode_character_after; 
    451. 

  451.   				}
    452. 

  452. 			}
    453. 

  453. 		}
    454. 

  454. 		// in case setting always display checkout button is on
    455. 

  455. 		if ($always_show_checkout == 1) {
    456. 

  456.   			$f_text .= "
    457. 

  457. 				<input class='button' type='submit' value='".EASYSHOP_SHOP_09."'/>";
    458. 

  458. 		}
    459. 

  459. 	}
    460. 

  460. 	$f_text .= "
    461. 

  461. 			</form>
    462. 

  462. 			<br />"; // Finally fix the form close issues once and for all v1.54 ;-)
    463. 

    464. 

  464.     // Show 'Manage your basket link'
    465. 

  465.    	if ($_SESSION['sc_total']['items'] > 0 AND $action != "edit") {
    466. 

  466.     	$f_text .= "
    467. 

  467. 		<div style='text-align:center;'>
    468. 

  468. 			<a href='".e_PLUGIN_ABS."easyshop/easyshop.php?edit'>".EASYSHOP_SHOP_35."</a>";
    469. 

  469. 		// Conditionally show cart icon (dependent on show shopping bag flag)
    470. 

  470. 		if ($show_shopping_bag == '1') {
    471. 

  471. 			$f_text .= "
    472. 

  472. 			&nbsp;<a href='".e_PLUGIN_ABS."easyshop/easyshop.php?edit'><img style='border:0;' src='".e_PLUGIN_ABS."easyshop/images/cart.gif' alt='".EASYSHOP_SHOP_35."'/></a>";
    473. 

  473. 		}  
    474. 

  474.     	$f_text .= "
    475. 

  475. 		</div>";
    476. 

  476.     }
    477. 

  477.     /* // Some debug info
    478. 

  478.     print_r($_SESSION['shopping_cart']);
    479. 

  479.     print ("<br />");
    480. 

  480.     print_r($_SESSION['sc_total']);
    481. 

  481.     print ("<br />");
    482. 

  482.     print_r($_SESSION['sc_total']['shipping']);
    483. 

  483.     print ("<br />");
    484. 

  484.     print_r($_SESSION['sc_total']['shipping2']);
    485. 

  485.     print ("<br />");
    486. 

  486.     print_r($_SESSION['sc_total']['handling']);
    487. 

  487.     print ("<br />");
    488. 

  488.     */
    489. 

  489.     return $f_text;
    490. 

  490.   }
    491. 

  491.   
    492. 

  492.   function show_ipn_checkout($p_session_id) {
    493. 

  493.     // Parameter $p_session_id is used to check the users' current session ID to prevent XSS vulnarabilities
    494. 

  494.     //if ($p_session_id != session_id()) { // Get out of here: incoming session id is not equal than current session id
    495. 

  495. 	//	header("Location: ".e_BASE); // Redirect to the home page
    496. 

  496. 	//	exit();
    497. 

  497.     //}
    498. 

  498.     // Check query
    499. 

  499.     if(e_QUERY){
    500. 

  500.     	$tmp = explode(".", e_QUERY);
    501. 

  501.     	$action = $tmp[0];
    502. 

  502.     	unset($tmp);
    503. 

  503.     }
    504. 

  504. 

  505.   	$sql2 = new db;
    506. 

  506.   	$sql2 -> db_Select(DB_TABLE_SHOP_PREFERENCES, "*", "store_id=1");
    507. 

  507.   	while($row2 = $sql2-> db_Fetch()){
    508. 

  508.   		$sandbox = $row2['sandbox'];
    509. 

  509.     	$paypal_email = $row2['paypal_email'];
    510. 

  510.     	$payment_page_style = $row2['payment_page_style'];
    511. 

  511.     	$paypal_currency_code = $row2['paypal_currency_code'];
    512. 

  512.     	$set_currency_behind = $row2['set_currency_behind'];
    513. 

  513. 		$minimum_amount = intval($row2['minimum_amount']);
    514. 

  514. 		$always_show_checkout = $row2['always_show_checkout'];
    515. 

  515. 		$email_order = $row2['email_order'];
    516. 

  516.   	}
    517. 

  517. 

  518.     $sql3 = new db;
    519. 

  519.   	$sql3 -> db_Select(DB_TABLE_SHOP_CURRENCY, "*", "currency_active=2");
    520. 

  520.   	while($row3 = $sql3-> db_Fetch()){
    521. 

  521.   		$unicode_character = $row3['unicode_character'];
    522. 

  522.   		$paypal_currency_code = $row3['paypal_currency_code'];
    523. 

  523.   	}
    524. 

  524. 

  525.     // Determine currency before or after amount
    526. 

  526.     if ($set_currency_behind == 1) {
    527. 

  527. 		// Print currency after amount
    528. 

  528. 		$unicode_character_before = "";
    529. 

  529. 		$unicode_character_after = "&nbsp;".$unicode_character;
    530. 

  530.     }
    531. 

  531.     else {
    532. 

  532. 		$unicode_character_before = "&nbsp;".$unicode_character."&nbsp;";
    533. 

  533. 		$unicode_character_after = "";
    534. 

  534.     	// Print currency before amount in all other cases
    535. 

  535.     }
    536. 

  536.   	if ($sandbox == 2) {
    537. 

  537.   		$paypalDomain = "https://www.sandbox.paypal.com";
    538. 

  538.   	} else {
    539. 

  539.   		$paypalDomain = "https://www.paypal.com";
    540. 

  540.   	}
    541. 

  541. 

  542.     // Display check out button
    543. 

  543.     // <form target='_blank' action='$paypalDomain/cgi-bin/webscr' method='post'> leads to XHTML incompatible caused by target
    544. 

  544.   	$f_text .= "
    545. 

  545.   	<form action='$paypalDomain/cgi-bin/webscr' method='post'>
    546. 

  546. 		<div>
    547. 

  547. 			<input type='hidden' name='cmd' value='_xclick' />
    548. 

  548. 			<input type='hidden' name='upload' value='1' />
    549. 

  549. 			<input type='hidden' name='business' value='$paypal_email' />
    550. 

  550. 			<input type='hidden' name='page_style' value='$payment_page_style' />";
    551. 

    552. 

  552.     // Fill the Cart with products from the basket
    553. 

  553.     $count_items = count($_SESSION['shopping_cart']); // Count number of different products in basket
    554. 

  554.     $array = $_SESSION['shopping_cart'];
    555. 

  555.     // PayPal requires to pass multiple products in a sequence starting at 1
    556. 

  556.     $cart_count = 1;
    557. 

  557.     // Set thanks page to correct value
    558. 

  558.     $thanks_page = str_replace('easyshop.php', 'thank_you.php', e_SELF);
    559. 

  559.     $cancel_page = str_replace('easyshop.php', 'cancelled.php', e_SELF);
    560. 

  560.     $ipn_notify_page = str_replace('easyshop.php', 'ipn_notify.php', e_SELF);
    561. 

  561. 

  562.     // For each product in the shopping cart array write PayPal details
    563. 

  563.     foreach($array as $id => $item) {
    564. 

  564.         $f_text .= "
    565. 

  565. 			<input type='hidden' name='item_name_".$cart_count."' value='".$item['item_name']."' />
    566. 

  566. 			<input type='hidden' name='item_number_".$cart_count."' value='".$item['sku_number']."' />
    567. 

  567. 			<input type='hidden' name='amount_".$cart_count."' value='".$item['item_price']."' />
    568. 

  568. 			<input type='hidden' name='quantity_".$cart_count."' value='".$item['quantity']."' />
    569. 

  569. 			<input type='hidden' name='shipping_".$cart_count."' value='".$item['shipping']."' />
    570. 

  570. 			<input type='hidden' name='shipping2_".$cart_count."' value='".$item['shipping2']."' />
    571. 

  571. 			<input type='hidden' name='handling_".$cart_count."' value='".$item['handling']."' />
    572. 

  572. 			<input type='hidden' name='db_id_".$cart_count."' value='".$item['db_id']."' />";
    573. 

  573.         $cart_count++;
    574. 

  574.     }
    575. 

  575. 

  576.     $f_text .= "
    577. 

  577.         <input type='hidden' name='currency_code' value='$paypal_currency_code' />
    578. 

  578.         <input type='hidden' name='no_note' value='1' />
    579. 

  579.         <input type='hidden' name='lc' value='US' />
    580. 

  580.         <input type='hidden' name='bn' value='PP-ShopCartBF' />
    581. 

  581.         <input type='hidden' name='rm' value='1' />
    582. 

  582.         <input type='hidden' name='notify_url' value='$ipn_notify_page' />
    583. 

  583.         <input type='hidden' name='return' value='".$thanks_page."' />
    584. 

  584.         <input type='hidden' name='cancel_return' value='".$cancel_page."' />
    585. 

  585.     ";
    586. 

    587. 

  587.     if (USER) { // If user is logged in we also include the user id
    588. 

  588.       $f_text .="<input type='hidden' name='custom' value='".USERID."' />";
    589. 

  589.     }
    590. 

  590. 

  591.     if ($email_order == 0) {
    592. 

  592.       // in case setting always show checkout button is off
    593. 

  593.       if ($always_show_checkout == 0) {
    594. 

  594.       // When there are items in the shopping cart, display 'Go to checkout' button
    595. 

  595.   			if ($_SESSION['sc_total']['items'] > 0) {
    596. 

  596.   			  // Only show 'Go to checkout' if total amount is above minimum amount
    597. 

  597.           if ($_SESSION['sc_total']['sum'] > $minimum_amount) {
    598. 

  598.   					$f_text .= "
    599. 

  599.               <input class='button' type='submit' value='".EASYSHOP_SHOP_09."'/>
    600. 

  600.             </div>
    601. 

  601.   					</form>
    602. 

  602.   					<br />";
    603. 

  603.   				} else { // Minimum amount has not been reached; inform the shopper
    604. 

  604.   				  $f_text .= EASYSHOP_SHOP_36." : ".$unicode_character_before.number_format($minimum_amount, 2, '.', '').$unicode_character_after." <br />
    605. 

  605.             ".EASYSHOP_SHOP_37." : ".$unicode_character_before.number_format(($minimum_amount - $_SESSION['sc_total']['sum']), 2, '.', '').$unicode_character_after." <br />";
    606. 

  606.   				}
    607. 

  607.         }
    608. 

  608.       } else { // RC6 Fix for proper closing the form tag
    609. 

  609.         $f_text .= "</div></form><br />";
    610. 

  610.       }
    611. 

  611.     } else { // e-mail the order to admin
    612. 

  612.       $f_text .= "<a class='button' href='function MailOrder($array)'>".EASYSHOP_SHOP_79."</a></form><br />";
    613. 

  613.     }
    614. 

  614.     // in case setting always display checkout button is on
    615. 

  615.     //else
    616. 

  616.     if ($always_show_checkout == 1) {
    617. 

  617.   			$f_text .= "
    618. 

  618. 			<input class='button' type='submit' value='".EASYSHOP_SHOP_09."'/>
    619. 

  619.   			</form>
    620. 

  620.   			<br />";
    621. 

  621.     }
    622. 

  622.     // Show 'Manage your basket link'
    623. 

  623.    	if ($_SESSION['sc_total']['items'] > 0 AND $action != "edit") {
    624. 

  624.     	$f_text .= "
    625. 

  625.       <div style='text-align:center;'><a href='easyshop.php?edit'>".EASYSHOP_SHOP_35."</a></div>
    626. 

  626.     	";
    627. 

  627.     }
    628. 

  628. 	else
    629. 

  629. 	{
    630. 

  630. 		$f_text .= "
    631. 

  631. 		</div>
    632. 

  632. 		</form>
    633. 

  633. 		<br />";
    634. 

  634. 	}
    635. 

  635.     /* // Some debug info
    636. 

  636.     print_r($_SESSION['shopping_cart']);
    637. 

  637.     print ("<br />");
    638. 

  638.     print_r($_SESSION['sc_total']);
    639. 

  639.     print ("<br />");
    640. 

  640.     print_r($_SESSION['sc_total']['shipping']);
    641. 

  641.     print ("<br />");
    642. 

  642.     print_r($_SESSION['sc_total']['shipping2']);
    643. 

  643.     print ("<br />");
    644. 

  644.     print_r($_SESSION['sc_total']['handling']);
    645. 

  645.     print ("<br />");
    646. 

  646.     */
    647. 

  647.     return $f_text;
    648. 

  648.   }
    649. 

  649.   
    650. 

  650.   function include_prop($prop1_list, $prop1_array, $prop1_prices,$prop1_name,
    651. 

  651.                         $prop2_list, $prop2_array, $prop2_prices,$prop2_name,
    652. 

  652.                         $prop3_list, $prop3_array, $prop3_prices,$prop3_name,
    653. 

  653.                         $prop4_list, $prop4_array, $prop4_prices,$prop4_name,
    654. 

  654.                         $prop5_list, $prop5_array, $prop5_prices,$prop5_name,
    655. 

  655.                         $prop6_list, $prop6_array, $prop6_prices,$prop6_name,
    656. 

  656.                         $unicode_character_before, $unicode_character_after, $item_price ) {
    657. 

  657.     // Function provides the property select boxes for category and product details and signals if property prices have been used
    658. 

  658.     for ($n = 1; $n < 6; $n++){
    659. 

  659.      if (${"prop".$n."_list"} <> "") {
    660. 

  660.         ${"prop".$n."_array"} = explode(",", ${"prop".$n."_list"});
    661. 

  661.         if (${"prop".$n."_prices"} <> "") {
    662. 

  662.           ${"price".$n."_array"} = explode(",", ${"prop".$n."_prices"});
    663. 

  663.         }
    664. 

  664.         $text .= "<b>".${"prop".$n."_name"}.":</b> "; // Name of property list
    665. 

  665.         $text .= "<select class='tbox' name='prod_prop_$n'>";
    666. 

  666.         // Add an empty value for the property list; check in easyshop_basket if value is selected
    667. 

  667.         $text .= "<option value=' ' selected='selected'>&nbsp;</option>";
    668. 

  668.         $arrayLength = count(${"prop".$n."_array"});
    669. 

  669.         for ($i = 0; $i < $arrayLength; $i++){
    670. 

  670.             $text .= "<option value='".${"prop".$n."_array"}[$i]."'>".${"prop".$n."_array"}[$i];
    671. 

  671.             // Display different price if corresponding price delta in properties is found
    672. 

  672.             if (${"price".$n."_array"}[$i] <> 0) {
    673. 

  673.               $text .= "&nbsp;".$unicode_character_before.number_format(($item_price+${"price".$n."_array"}[$i]), 2, '.', '')."&nbsp;".$unicode_character_after;
    674. 

  674.               $property_prices = 1; // There is at least one or more property price detected; use in discounts
    675. 

  675.             }
    676. 

  676.             $text .= "</option>";
    677. 

  677.         }
    678. 

  678.         $text .= "</select><br />";
    679. 

  679.      }
    680. 

  680.    }
    681. 

  681.    return array($text, $property_prices);
    682. 

  682.   }
    683. 

  683. 

  684.   function include_disc ($discount_id, $discount_class, $discount_valid_from, $discount_valid_till,
    685. 

  685.                          $discount_code, $item_price, $discount_flag, $discount_percentage, $discount_price,
    686. 

  686.                          $property_prices, $unicode_character_before, $unicode_character_after, $print_discount_icons){
    687. 

  687.     // Function provides the discount handling for category and product details and returns discount price (when no discount code is applied)
    688. 

  688.     // Include selected discount in the product form
    689. 

  689.     if (isset($discount_id)) { // Include the product discount if it is filled in
    690. 

  690.       $text .=  "<input type='hidden' name='discount_id' value='".$discount_id."'/>";
    691. 

  691.       // Determine if user class if applicable for this discount
    692. 

  692.       if (check_class($discount_class)) {
    693. 

  693.         // Determine if discount date is valid
    694. 

  694.         $today = time(); // Record the current date/time stamp
    695. 

  695.         if ($today > $discount_valid_from and $today < $discount_valid_till) { // This moment is between start and end date of discount
    696. 

  696.           if ($discount_code <> "") { // Ask the discount code to activate discount
    697. 

  697.             $text .= "<b>".EASYSHOP_SHOP_50.":</b><br /> <input class='tbox' size='25' type='text' name='discount_code' /><br />"; // Discount code
    698. 

  698.           } else { // Apply the discount straight away; no discount code needed
    699. 

  699.             // Adjust item price
    700. 

  700.             $old_item_price = number_format($item_price, 2, '.', '');
    701. 

  701.             if ($discount_flag == 1) { // Discount percentage
    702. 

  702.               $item_price = number_format($item_price -  ( ( $discount_percentage / 100) * $item_price ), 2, '.', '');
    703. 

  703.             }
    704. 

  704.             else { // Discount amount
    705. 

  705.               $item_price = $item_price - $discount_price;
    706. 

  706.             }
    707. 

  707.             // Protection against a discount that makes the price negative
    708. 

  708.             if ($item_price < 0) {
    709. 

  709.               $item_price = 0;
    710. 

  710.             }
    711. 

  711.             if ($property_prices != 1) { // Without variable property prices we can indicate the new price
    712. 

  712.               // Display From For text
    713. 

  713.               $text .= EASYSHOP_SHOP_51." ".$unicode_character_before.$old_item_price.$unicode_character_after." ".EASYSHOP_SHOP_52." ".$unicode_character_before.number_format($item_price.$unicode_character_after, 2, '.', '')."<br />";
    714. 

  714.             } else { // Only able to tell there will be a discount due to unknown property selection with price delta
    715. 

  715.               $text .= EASYSHOP_SHOP_53." ";
    716. 

  716.               if ($discount_flag == 1) { // Discount percentage
    717. 

  717.                 $text .= $discount_percentage."%<br />";
    718. 

  718.               }
    719. 

  719.               else { // Discount amount
    720. 

  720.                 $text .= $unicode_character_before.number_format($discount_price, 2, '.', '').$unicode_character_after."<br />";
    721. 

  721.               }
    722. 

  722.             } // End else/if of property price indications
    723. 

  723.           } // End else/if of applying the discount immediately
    724. 

  724. 

  725.           // Do something special for 'special' percentages when print_discount_icons flag is set
    726. 

  726.           if ($print_discount_icons == 1){
    727. 

  727.             $display_text = EASYSHOP_SHOP_53." ".(($discount_percentage>0)?$discount_percentage."%":$unicode_character_before.number_format($discount_price, 2, '.', '').$unicode_character_after);
    728. 

  728.               if ($discount_flag == 1 AND strstr("_5_10_20_50_", "_".$discount_percentage."_")) {
    729. 

  729.               $text .= "&nbsp;<img src='".e_PLUGIN_ABS."easyshop/images/offer_".$discount_percentage.".gif' style='height:22px' alt='$display_text' title='$display_text' />";
    730. 

  730.             } else {
    731. 

  731.               $text .= "&nbsp;<img src='".e_PLUGIN_ABS."easyshop/images/special_offer.gif' style='height:22px' alt='$display_text' title='$display_text' />";
    732. 

  732.             }
    733. 

  733.           } // End if print_discount_icons
    734. 

  734. 

  735.         } // End if date is valid: don't calculate the discount if the date is invalid
    736. 

  736.       } // End if user class is valid: don't calculate the discount if the user class is invalid
    737. 

  737.     } // End if when discount_id is found
    738. 

  738.   return array($text,$item_price);
    739. 

  739.   } // End of function include_disc
    740. 

  740. 

  741. }
    742. 

  742. 

  743. class Tabs {
    744. 

  744. 	var $name;
    745. 

  745. 	var $tabs;
    746. 

  746. 	var $active;
    747. 

  747. 	var $current;
    748. 

  748. 

  749. 	function __construct($name){
    750. 

  750. 		$this->name = $name;
    751. 

  751. 	}
    752. 

  752. 

  753. 	function start($name){
    754. 

  754. 		if (empty($this->active)){ $this->active = $name; }
    755. 

  755. 		$this->current = $name;
    756. 

  756. 		ob_start();
    757. 

  757. 	}
    758. 

  758. 

  759. 	function end(){
    760. 

  760. 		$this->tabs[$this->current] = ob_get_contents();
    761. 

  761. 		ob_end_clean();
    762. 

  762. 	}
    763. 

  763. 

  764. 	function run(){
    765. 

  765. 		if (count($this->tabs) > 0){
    766. 

  766. 			$text .= "<DIV CLASS='tabs'>\n";
    767. 

  767. 			$jsClear = "";
    768. 

  768. 			foreach($this->tabs as $tabname => $tabcontent){
    769. 

  769. 				$tabid = "tab_".$this->name."_$tabname";
    770. 

  770. 				$contentid = "tabcontent_".$this->name."_$tabname";
    771. 

  771. 				$jsClear .= "\tdocument.getElementById('$tabid').className = 'tab_inactive';\n";
    772. 

  772. 				$jsClear .= "\tdocument.getElementById('$contentid').style.display = 'none';\n";
    773. 

  773. 			}
    774. 

  774. 			$text .= "<script type=\"text/javascript\">\n";
    775. 

  775. 			$text .= "function tab_".$this->name."(id){\n";
    776. 

  776. 			$text .= "$jsClear";
    777. 

  777. 			$text .= "\tdocument.getElementById('tab_".$this->name."_'+id).className = 'tab_active';\n";
    778. 

  778. 			$text .= "\tdocument.getElementById('tabcontent_".$this->name."_'+id).style.display = '';\n";
    779. 

  779. 			$text .= "}\n";
    780. 

  780. 			$text .= "</script>\n";
    781. 

  781. 			foreach($this->tabs as $tabname => $tabcontent){
    782. 

  782. 				$tabid = "tab_".$this->name."_$tabname";
    783. 

  783. 				$contentid = "tabcontent_".$this->name."_$tabname";
    784. 

  784. 				$text .= "<DIV CLASS='";
    785. 

  785. 				if ($this->active == $tabname){ $text .= "tab_active"; }else{ $text .= "tab_inactive"; }
    786. 

  786. 				$text .= "' ID='$tabid' ";
    787. 

  787. 				$text .= "onClick=\"tab_".$this->name."('$tabname');\">$tabname</DIV>\n";
    788. 

  788. 			}
    789. 

  789. 			$text .= "<DIV STYLE='float: left; clear:both;'></DIV>\n";
    790. 

  790. 			foreach($this->tabs as $tabname => $tabcontent){
    791. 

  791. 				$contentid = "tabcontent_".$this->name."_$tabname";
    792. 

  792. 				$text .= "<DIV ID = '$contentid' CLASS='tab_content' STYLE='display: ";
    793. 

  793. 				if ($this->active == $tabname){ $text .= "block"; }else{ $text .= "none"; }
    794. 

  794. 				$text .= ";'>$tabcontent</DIV>\n";
    795. 

  795. 			}
    796. 

  796. 			$text .= "</DIV>\n";
    797. 

  797. 			$text .= "<DIV STYLE='clear: both;'></DIV>\n";
    798. 

  798. 			return $text;
    799. 

  799. 		}
    800. 

  800. 	}
    801. 

  801. } // End of class Tabs
    802. 

  802. class Forms
    803. 

  803. {
    804. 

  804. 	function add_to_cart_form($prop1_list, $prop1_array, $prop1_prices,$prop1_name,
    805. 

  805. 								  $prop2_list, $prop2_array, $prop2_prices,$prop2_name,
    806. 

  806. 								  $prop3_list, $prop3_array, $prop3_prices,$prop3_name,
    807. 

  807. 								  $prop4_list, $prop4_array, $prop4_prices,$prop4_name,
    808. 

  808. 								  $prop5_list, $prop5_array, $prop5_prices,$prop5_name,
    809. 

  809. 								  $prop6_list, $prop6_array, $prop6_prices,$prop6_name,
    810. 

  810. 								  $unicode_character_before, $unicode_character_after, $item_price,
    811. 

  811. 								  $discount_id, $discount_class, $discount_valid_from, $discount_valid_till,
    812. 

  812. 								  $discount_code, $discount_flag, $discount_percentage, $discount_price,
    813. 

  813. 								  $property_prices, $unicode_character_before, $unicode_character_after, $print_discount_icons,
    814. 

  814. 								  $item_id, $item_name, $sku_number, $shipping_first_item, $shipping_additional_item, $handling_override,
    815. 

  815. 								  $category_id, $item_instock, $item_track_stock, $enable_ipn, $db_id,
    816. 

  816. 								  $category_order_class, $enable_number_input, $fill_basket)
    817. 

  817. 	{
    818. 

  818. 		$text .= "
    819. 

  819. 			<br />
    820. 

  820. 			<form method='post' action='easyshop_basket.php'>
    821. 

  821. 				<div>";
    822. 

    823. 

  823. 		// Include selected properties in the product form
    824. 

  824. 		// Function include_prop returns an array! [0] is for $text and [1] is for $property_prices!
    825. 

  825. 		$temp_array = Shop::include_prop($prop1_list, $prop1_array, $prop1_prices,$prop1_name,
    826. 

  826. 								   $prop2_list, $prop2_array, $prop2_prices,$prop2_name,
    827. 

  827. 								   $prop3_list, $prop3_array, $prop3_prices,$prop3_name,
    828. 

  828. 								   $prop4_list, $prop4_array, $prop4_prices,$prop4_name,
    829. 

  829. 								   $prop5_list, $prop5_array, $prop5_prices,$prop5_name,
    830. 

  830. 								   $prop6_list, $prop6_array, $prop6_prices,$prop6_name,
    831. 

  831. 								   $unicode_character_before, $unicode_character_after, $item_price);
    832. 

  832. 		$text .= $temp_array[0];
    833. 

  833. 		$property_prices = $temp_array[1];
    834. 

  834. 		unset($temp_array);
    835. 

  835. 

  836. 		// Include selected discount in the product form
    837. 

  837. 		// Function include_disc returns an array! [0] is for $text and [1] is for $item_price!
    838. 

  838. 		$temp_array = Shop::include_disc($discount_id, $discount_class, $discount_valid_from, $discount_valid_till,
    839. 

  839. 								   $discount_code, $item_price, $discount_flag, $discount_percentage, $discount_price,
    840. 

  840. 								   $property_prices, $unicode_character_before, $unicode_character_after, $print_discount_icons);
    841. 

  841. 		$text .= $temp_array[0];
    842. 

  842. 		// $item_price = $temp_array[1]; // Bugfix #75
    843. 

  843. 		unset($temp_array);
    844. 

  844. 

  845. 		// Include also currency sign to send it to the basket
    846. 

  846. 		// Send the product data to the basket
    847. 

  847. 		$text .= "
    848. 

  848. 				<input type='hidden' name='unicode_character_before' value='".$unicode_character_before."'/>
    849. 

  849. 				<input type='hidden' name='unicode_character_after' value='".$unicode_character_after."'/>
    850. 

  850. 				<input type='hidden' name='item_id' value='".$item_id."'/>
    851. 

  851. 				<input type='hidden' name='item_name' value='".$item_name."'/>
    852. 

  852. 				<input type='hidden' name='sku_number' value='".$sku_number."'/>
    853. 

  853. 				<input type='hidden' name='item_price' value='".number_format($item_price, 2, '.', '')."'/>
    854. 

  854. 				<input type='hidden' name='shipping' value='".number_format($shipping_first_item, 2, '.', '')."'/>
    855. 

  855. 				<input type='hidden' name='shipping2' value='".number_format($shipping_additional_item, 2, '.', '')."'/>
    856. 

  856. 				<input type='hidden' name='handling' value='".number_format($handling_override, 2, '.', '')."'/>
    857. 

  857. 				<input type='hidden' name='category_id' value='".$category_id."'/>";
    858. 

  858.                                 
    859. 

  859. 		// IPN addition to include stock tracking option
    860. 

  860. 		if ($item_track_stock== 2 && $enable_ipn == 2)
    861. 

  861. 		{   
    862. 

  862. 			$text .= "
    863. 

  863. 				<input type='hidden' name='item_instock' value='".$item_instock."'>
    864. 

  864. 				<input type='hidden' name='item_track_stock' value='".$item_track_stock."'>";                                      
    865. 

  865. 		}
    866. 

  866.                             
    867. 

  867. 		// IPN addition to include Item's database ID into session variable
    868. 

  868. 		$text .= "
    869. 

  869. 				<input type='hidden' name='db_id' value='".$db_id."'>
    870. 

  870. 				<input type='hidden' name='fill_basket' value='".$fill_basket."'/>";
    871. 

    872. 

  872. 		// Include properties lists hidden in the form
    873. 

  873. 		for ($n = 1; $n < 6; $n++)
    874. 

  874. 		{
    875. 

  875. 			$propname = "prop".$n."_name";
    876. 

  876. 			$proplist = "prop".$n."_list";
    877. 

  877. 			$propprices = "prop".$n."_prices";
    878. 

  878. 			$text .= "
    879. 

  879. 				<input type='hidden' name='$propname' value='".${"prop".$n."_name"}."'/>
    880. 

  880. 				<input type='hidden' name='$proplist' value='".${"prop".$n."_list"}."'/>
    881. 

  881. 				<input type='hidden' name='$propprices' value='".${"prop".$n."_prices"}."'/>";
    882. 

  882. 		}
    883. 

  883. 

  884. 		// Include user id if user is logged in
    885. 

  885. 		if(USER)
    886. 

  886. 		{
    887. 

  887. 			$text .= "
    888. 

  888. 				<input type='hidden' name='custom' value='".USERID."'/>";
    889. 

  889. 		}
    890. 

  890.                 
    891. 

  891. 		if(check_class($category_order_class))
    892. 

  892. 		{	// Only display number and checkout button if user is member of order_class
    893. 

  893. 			if ($enable_number_input == '1') 
    894. 

  894. 			{	// Shop visitor can specify number of products
    895. 

  895. 				$text .= "
    896. 

  896. 				<div class='easyshop_nr_of_prod'>
    897. 

  897. 					".EASYSHOP_SHOP_80.":&nbsp;<input name='item_qty' type='text' value='1' size='2' />
    898. 

  898. 				</div>";
    899. 

  899. 			}
    900. 

  900. 			else 
    901. 

  901. 			{	// Shop adds one product at each click on add button
    902. 

  902. 				$text .= "
    903. 

  903. 				<input type='hidden' name='item_qty' value='1' />";
    904. 

  904. 			}
    905. 

  905. 

  906. 			$text .= "
    907. 

  907. 				<input type='hidden' name='return_url' value='".e_SELF.(e_QUERY ? '?'.e_QUERY : '')."'/>
    908. 

  908. 				<input class='button' type='submit' value='".EASYSHOP_SHOP_08."'/>";
    909. 

  909. 		}
    910. 

  910. 		$text .= "
    911. 

  911. 				</div>
    912. 

  912. 			</form>";
    913. 

  913. 		return $text;
    914. 

  914. 	}
    915. 

  915. } // End of class Forms
    916. 

  916. ?>
    917.