PageRenderTime 59ms CodeModel.GetById 22ms RepoModel.GetById 0ms app.codeStats 0ms

/catalog/YOUR_ADMIN/orders.php

https://github.com/numinix/numinix_barcodes
PHP | 1040 lines | 923 code | 71 blank | 46 comment | 189 complexity | 28d4984abf230bae9e66a897e64905c1 MD5 | raw file
Possible License(s): GPL-3.0

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * @package admin
    4. 

  4.  * @copyright Copyright 2003-2007 Zen Cart Development Team
    5. 

  5.  * @copyright Portions Copyright 2003 osCommerce
    6. 

  6.  * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
    7. 

  7.  * @version $Id: orders.php 6864 2007-08-27 16:15:20Z drbyte $
    8. 

  8.  */
    9. 

  9. 

  10.   require('includes/application_top.php');
    11. 

  11. 

  12.   require(DIR_WS_CLASSES . 'currencies.php');
    13. 

  13.   $currencies = new currencies();
    14. 

  14. 

  15.   if (isset($_GET['oID'])) $_GET['oID'] = (int)$_GET['oID'];
    16. 

  16.   if (isset($_GET['download_reset_on'])) $_GET['download_reset_on'] = (int)$_GET['download_reset_on'];
    17. 

  17.   if (isset($_GET['download_reset_off'])) $_GET['download_reset_off'] = (int)$_GET['download_reset_off'];
    18. 

  18. 

  19.   include(DIR_WS_CLASSES . 'order.php');
    20. 

  20. 

  21.   // prepare order-status pulldown list
    22. 

  22.   $orders_statuses = array();
    23. 

  23.   $orders_status_array = array();
    24. 

  24.   $orders_status = $db->Execute("select orders_status_id, orders_status_name
    25. 

  25.                                  from " . TABLE_ORDERS_STATUS . "
    26. 

  26.                                  where language_id = '" . (int)$_SESSION['languages_id'] . "' order by orders_status_id");
    27. 

  27.   while (!$orders_status->EOF) {
    28. 

  28.     $orders_statuses[] = array('id' => $orders_status->fields['orders_status_id'],
    29. 

  29.                                'text' => $orders_status->fields['orders_status_name'] . ' [' . $orders_status->fields['orders_status_id'] . ']');
    30. 

  30.     $orders_status_array[$orders_status->fields['orders_status_id']] = $orders_status->fields['orders_status_name'];
    31. 

  31.     $orders_status->MoveNext();
    32. 

  32.   }
    33. 

  33. 

  34.   $action = (isset($_GET['action']) ? $_GET['action'] : '');
    35. 

  35.   $order_exists = false;
    36. 

  36.   if (isset($_GET['oID']) && trim($_GET['oID']) == '') unset($_GET['oID']);
    37. 

  37.   if ($action == 'edit' && !isset($_GET['oID'])) $action = '';
    38. 

  38. 

  39.   $oID = FALSE;
    40. 

  40.   if (isset($_POST['oID'])) {
    41. 

  41.     $oID = zen_db_prepare_input(trim($_POST['oID']));
    42. 

  42.   } elseif (isset($_GET['oID'])) {
    43. 

  43.     $oID = zen_db_prepare_input(trim($_GET['oID']));
    44. 

  44.   }
    45. 

  45.   if ($oID) {
    46. 

  46.     $orders = $db->Execute("select orders_id from " . TABLE_ORDERS . "
    47. 

  47.                               where orders_id = '" . (int)$oID . "'");
    48. 

  48.     $order_exists = true;
    49. 

  49.     if ($orders->RecordCount() <= 0) {
    50. 

  50.       $order_exists = false;
    51. 

  51.       if ($action != '') $messageStack->add_session(ERROR_ORDER_DOES_NOT_EXIST . ' ' . $oID, 'error');
    52. 

  52.         zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('oID', 'action')), 'NONSSL'));
    53. 

  53.     }
    54. 

  54.   }
    55. 

  55. 

  56.   if (zen_not_null($action) && $order_exists == true) {
    57. 

  57.     switch ($action) {
    58. 

  58.       case 'edit':
    59. 

  59.       // reset single download to on
    60. 

  60.         if ($_GET['download_reset_on'] > 0) {
    61. 

  61.           // adjust download_maxdays based on current date
    62. 

  62.           $check_status = $db->Execute("select customers_name, customers_email_address, orders_status,
    63. 

  63.                                       date_purchased from " . TABLE_ORDERS . "
    64. 

  64.                                       where orders_id = '" . $_GET['oID'] . "'");
    65. 

  65.           $zc_max_days = date_diff($check_status->fields['date_purchased'], date('Y-m-d H:i:s', time())) + DOWNLOAD_MAX_DAYS;
    66. 

  66. 

  67.           // check for existing product attribute download days and max
    68. 

  68.           $chk_products_download_query = "SELECT orders_products_id, orders_products_filename, products_prid from " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " WHERE orders_products_download_id='" . $_GET['download_reset_on'] . "'";
    69. 

  69.           $chk_products_download = $db->Execute($chk_products_download_query);
    70. 

  70. 

  71.           $chk_products_download_time_query = "SELECT pa.products_attributes_id, pa.products_id, pad.products_attributes_filename, pad.products_attributes_maxdays, pad.products_attributes_maxcount
    72. 

  72.           from " . TABLE_PRODUCTS_ATTRIBUTES . " pa, " . TABLE_PRODUCTS_ATTRIBUTES_DOWNLOAD . " pad
    73. 

  73.           WHERE pa.products_attributes_id = pad.products_attributes_id
    74. 

  74.           and pad.products_attributes_filename = '" . $chk_products_download->fields['orders_products_filename'] . "'
    75. 

  75.           and pa.products_id = '" . (int)$chk_products_download->fields['products_prid'] . "'";
    76. 

    77. 

  77.           $chk_products_download_time = $db->Execute($chk_products_download_time_query);
    78. 

  78. 

  79.           if ($chk_products_download_time->EOF) {
    80. 

  80.             $zc_max_days = (DOWNLOAD_MAX_DAYS == 0 ? 0 : zen_date_diff($check_status->fields['date_purchased'], date('Y-m-d H:i:s', time())) + DOWNLOAD_MAX_DAYS);
    81. 

  81.             $update_downloads_query = "update " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " set download_maxdays='" . $zc_max_days . "', download_count='" . DOWNLOAD_MAX_COUNT . "' where orders_id='" . $_GET['oID'] . "' and orders_products_download_id='" . $_GET['download_reset_on'] . "'";
    82. 

  82.           } else {
    83. 

  83.             $zc_max_days = ($chk_products_download_time->fields['products_attributes_maxdays'] == 0 ? 0 : zen_date_diff($check_status->fields['date_purchased'], date('Y-m-d H:i:s', time())) + $chk_products_download_time->fields['products_attributes_maxdays']);
    84. 

  84.             $update_downloads_query = "update " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " set download_maxdays='" . $zc_max_days . "', download_count='" . $chk_products_download_time->fields['products_attributes_maxcount'] . "' where orders_id='" . $_GET['oID'] . "' and orders_products_download_id='" . $_GET['download_reset_on'] . "'";
    85. 

  85.           }
    86. 

  86. 

  87.           $db->Execute($update_downloads_query);
    88. 

  88.           unset($_GET['download_reset_on']);
    89. 

  89. 

  90.           $messageStack->add_session(SUCCESS_ORDER_UPDATED_DOWNLOAD_ON, 'success');
    91. 

  91.           zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    92. 

  92.         }
    93. 

  93.       // reset single download to off
    94. 

  94.         if ($_GET['download_reset_off'] > 0) {
    95. 

  95.           // adjust download_maxdays based on current date
    96. 

  96.           // *** fix: adjust count not maxdays to cancel download
    97. 

  97. //          $update_downloads_query = "update " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " set download_maxdays='0', download_count='0' where orders_id='" . $_GET['oID'] . "' and orders_products_download_id='" . $_GET['download_reset_off'] . "'";
    98. 

  98.           $update_downloads_query = "update " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " set download_count='0' where orders_id='" . $_GET['oID'] . "' and orders_products_download_id='" . $_GET['download_reset_off'] . "'";
    99. 

  99.           $db->Execute($update_downloads_query);
    100. 

  100.           unset($_GET['download_reset_off']);
    101. 

  101. 

  102.           $messageStack->add_session(SUCCESS_ORDER_UPDATED_DOWNLOAD_OFF, 'success');
    103. 

  103.           zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    104. 

  104.         }
    105. 

  105.       break;
    106. 

  106.       case 'update_order':
    107. 

  107.         // demo active test
    108. 

  108.         if (zen_admin_demo()) {
    109. 

  109.           $_GET['action']= '';
    110. 

  110.           $messageStack->add_session(ERROR_ADMIN_DEMO, 'caution');
    111. 

  111.           zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    112. 

  112.         }
    113. 

  113.         $oID = zen_db_prepare_input($_GET['oID']);
    114. 

  114.         $comments = zen_db_prepare_input($_POST['comments']);
    115. 

  115.         $status = (int)zen_db_prepare_input($_POST['status']);
    116. 

  116.         if ($status < 1) break;
    117. 

  117. 

  118.         $order_updated = false;
    119. 

  119.         $check_status = $db->Execute("select customers_name, customers_email_address, orders_status,
    120. 

  120.                                       date_purchased from " . TABLE_ORDERS . "
    121. 

  121.                                       where orders_id = '" . (int)$oID . "'");
    122. 

    123. 

  123.         if ( ($check_status->fields['orders_status'] != $status) || zen_not_null($comments)) {
    124. 

  124.           $db->Execute("update " . TABLE_ORDERS . "
    125. 

  125.                         set orders_status = '" . zen_db_input($status) . "', last_modified = now()
    126. 

  126.                         where orders_id = '" . (int)$oID . "'");
    127. 

    128. 

  128.           $customer_notified = '0';
    129. 

  129.           if (isset($_POST['notify']) && ($_POST['notify'] == '1')) {
    130. 

  130. 

  131.             $notify_comments = '';
    132. 

  132.             if (isset($_POST['notify_comments']) && ($_POST['notify_comments'] == 'on') && zen_not_null($comments)) {
    133. 

  133.               $notify_comments = EMAIL_TEXT_COMMENTS_UPDATE . $comments . "\n\n";
    134. 

  134.             }
    135. 

  135.             //send emails
    136. 

  136.             $message =
    137. 

  137.             EMAIL_TEXT_ORDER_NUMBER . ' ' . $oID . "\n\n" .
    138. 

  138.             EMAIL_TEXT_INVOICE_URL . ' ' . zen_catalog_href_link(FILENAME_CATALOG_ACCOUNT_HISTORY_INFO, 'order_id=' . $oID, 'SSL') . "\n\n" .
    139. 

  139.             EMAIL_TEXT_DATE_ORDERED . ' ' . zen_date_long($check_status->fields['date_purchased']) . "\n\n" .
    140. 

  140.             strip_tags($notify_comments) .
    141. 

  141.             EMAIL_TEXT_STATUS_UPDATED . sprintf(EMAIL_TEXT_STATUS_LABEL, $orders_status_array[$status] ) .
    142. 

  142.             EMAIL_TEXT_STATUS_PLEASE_REPLY;
    143. 

  143. 

  144.             $html_msg['EMAIL_CUSTOMERS_NAME']    = $check_status->fields['customers_name'];
    145. 

  145.             $html_msg['EMAIL_TEXT_ORDER_NUMBER'] = EMAIL_TEXT_ORDER_NUMBER . ' ' . $oID;
    146. 

  146.             $html_msg['EMAIL_TEXT_INVOICE_URL']  = '<a href="' . zen_catalog_href_link(FILENAME_CATALOG_ACCOUNT_HISTORY_INFO, 'order_id=' . $oID, 'SSL') .'">'.str_replace(':','',EMAIL_TEXT_INVOICE_URL).'</a>';
    147. 

  147.             $html_msg['EMAIL_TEXT_DATE_ORDERED'] = EMAIL_TEXT_DATE_ORDERED . ' ' . zen_date_long($check_status->fields['date_purchased']);
    148. 

  148.             $html_msg['EMAIL_TEXT_STATUS_COMMENTS'] = nl2br($notify_comments);
    149. 

  149.             $html_msg['EMAIL_TEXT_STATUS_UPDATED'] = str_replace('\n','', EMAIL_TEXT_STATUS_UPDATED);
    150. 

  150.             $html_msg['EMAIL_TEXT_STATUS_LABEL'] = str_replace('\n','', sprintf(EMAIL_TEXT_STATUS_LABEL, $orders_status_array[$status] ));
    151. 

  151.             $html_msg['EMAIL_TEXT_NEW_STATUS'] = $orders_status_array[$status];
    152. 

  152.             $html_msg['EMAIL_TEXT_STATUS_PLEASE_REPLY'] = str_replace('\n','', EMAIL_TEXT_STATUS_PLEASE_REPLY);
    153. 

  153.             $html_msg['EMAIL_PAYPAL_TRANSID'] = '';
    154. 

  154. 

  155.             zen_mail($check_status->fields['customers_name'], $check_status->fields['customers_email_address'], EMAIL_TEXT_SUBJECT . ' #' . $oID, $message, STORE_NAME, EMAIL_FROM, $html_msg, 'order_status');
    156. 

  156.             $customer_notified = '1';
    157. 

  157. 

  158.             // PayPal Trans ID, if any
    159. 

  159.             $sql = "select txn_id, parent_txn_id from " . TABLE_PAYPAL . " where order_id = :orderID order by last_modified DESC, date_added DESC, parent_txn_id DESC, paypal_ipn_id DESC ";
    160. 

  160.             $sql = $db->bindVars($sql, ':orderID', $oID, 'integer');
    161. 

  161.             $result = $db->Execute($sql);
    162. 

  162.             if ($result->RecordCount() > 0) {
    163. 

  163.               $message .= "\n\n" . ' PayPal Trans ID: ' . $result->fields['txn_id'];
    164. 

  164.               $html_msg['EMAIL_PAYPAL_TRANSID'] = $result->fields['txn_id'];
    165. 

  165.             }
    166. 

  166. 

  167.             //send extra emails
    168. 

  168.             if (SEND_EXTRA_ORDERS_STATUS_ADMIN_EMAILS_TO_STATUS == '1' and SEND_EXTRA_ORDERS_STATUS_ADMIN_EMAILS_TO != '') {
    169. 

  169.               zen_mail('', SEND_EXTRA_ORDERS_STATUS_ADMIN_EMAILS_TO, SEND_EXTRA_ORDERS_STATUS_ADMIN_EMAILS_TO_SUBJECT . ' ' . EMAIL_TEXT_SUBJECT . ' #' . $oID, $message, STORE_NAME, EMAIL_FROM, $html_msg, 'order_status_extra');
    170. 

  170.             }
    171. 

  171.           } elseif (isset($_POST['notify']) && ($_POST['notify'] == '-1')) {
    172. 

  172.             // hide comment
    173. 

  173.             $customer_notified = '-1';
    174. 

  174.           }
    175. 

  175. 

  176.           $db->Execute("insert into " . TABLE_ORDERS_STATUS_HISTORY . "
    177. 

  177.                       (orders_id, orders_status_id, date_added, customer_notified, comments)
    178. 

  178.                       values ('" . (int)$oID . "',
    179. 

  179.                       '" . zen_db_input($status) . "',
    180. 

  180.                       now(),
    181. 

  181.                       '" . zen_db_input($customer_notified) . "',
    182. 

  182.                       '" . zen_db_input($comments)  . "')");
    183. 

  183.           $order_updated = true;
    184. 

  184.         }
    185. 

  185. 

  186.         // trigger any appropriate updates which should be sent back to the payment gateway:
    187. 

  187.         $order = new order((int)$oID);
    188. 

  188.         if ($order->info['payment_module_code']) {
    189. 

  189.           if (file_exists(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php')) {
    190. 

  190.             require_once(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php');
    191. 

  191.             require_once(DIR_FS_CATALOG_LANGUAGES . $_SESSION['language'] . '/modules/payment/' . $order->info['payment_module_code'] . '.php');
    192. 

  192.             $module = new $order->info['payment_module_code'];
    193. 

  193.             if (method_exists($module, '_doStatusUpdate')) {
    194. 

  194.               $response = $module->_doStatusUpdate($oID, $status, $comments, $customer_notified, $check_status->fields['orders_status']);
    195. 

  195.             }
    196. 

  196.           }
    197. 

  197.         }
    198. 

  198. 

  199.         if ($order_updated == true) {
    200. 

  200.           if ($status == DOWNLOADS_ORDERS_STATUS_UPDATED_VALUE) {
    201. 

  201. 

  202.             // adjust download_maxdays based on current date
    203. 

  203.             $chk_downloads_query = "SELECT opd.*, op.products_id from " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " opd, " . TABLE_ORDERS_PRODUCTS . " op
    204. 

  204.                                     WHERE op.orders_id='" . (int)$oID . "'
    205. 

  205.                                     and opd.orders_products_id = op.orders_products_id";
    206. 

  206.             $chk_downloads = $db->Execute($chk_downloads_query);
    207. 

  207. 

  208.             while (!$chk_downloads->EOF) {
    209. 

  209.               $chk_products_download_time_query = "SELECT pa.products_attributes_id, pa.products_id, pad.products_attributes_filename, pad.products_attributes_maxdays, pad.products_attributes_maxcount
    210. 

  210.                                                     from " . TABLE_PRODUCTS_ATTRIBUTES . " pa, " . TABLE_PRODUCTS_ATTRIBUTES_DOWNLOAD . " pad
    211. 

  211.                                                     WHERE pa.products_attributes_id = pad.products_attributes_id
    212. 

  212.                                                     and pad.products_attributes_filename = '" . $chk_downloads->fields['orders_products_filename'] . "'
    213. 

  213.                                                     and pa.products_id = '" . $chk_downloads->fields['products_id'] . "'";
    214. 

    215. 

  215.               $chk_products_download_time = $db->Execute($chk_products_download_time_query);
    216. 

  216. 

  217.               if ($chk_products_download_time->EOF) {
    218. 

  218.                 $zc_max_days = (DOWNLOAD_MAX_DAYS == 0 ? 0 : zen_date_diff($check_status->fields['date_purchased'], date('Y-m-d H:i:s', time())) + DOWNLOAD_MAX_DAYS);
    219. 

  219.                 $update_downloads_query = "update " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " set download_maxdays='" . $zc_max_days . "', download_count='" . DOWNLOAD_MAX_COUNT . "' where orders_id='" . (int)$oID . "' and orders_products_download_id='" . $_GET['download_reset_on'] . "'";
    220. 

  220.               } else {
    221. 

  221.                 $zc_max_days = ($chk_products_download_time->fields['products_attributes_maxdays'] == 0 ? 0 : zen_date_diff($check_status->fields['date_purchased'], date('Y-m-d H:i:s', time())) + $chk_products_download_time->fields['products_attributes_maxdays']);
    222. 

  222.                 $update_downloads_query = "update " . TABLE_ORDERS_PRODUCTS_DOWNLOAD . " set download_maxdays='" . $zc_max_days . "', download_count='" . $chk_products_download_time->fields['products_attributes_maxcount'] . "' where orders_id='" . (int)$oID . "' and orders_products_download_id='" . $chk_downloads->fields['orders_products_download_id'] . "'";
    223. 

  223.               }
    224. 

  224. 

  225.               $db->Execute($update_downloads_query);
    226. 

  226. 

  227.               $chk_downloads->MoveNext();
    228. 

  228.             }
    229. 

  229.           }
    230. 

  230.           $messageStack->add_session(SUCCESS_ORDER_UPDATED, 'success');
    231. 

  231.         } else {
    232. 

  232.           $messageStack->add_session(WARNING_ORDER_NOT_UPDATED, 'warning');
    233. 

  233.         }
    234. 

  234.         zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    235. 

  235.         break;
    236. 

  236.       case 'deleteconfirm':
    237. 

  237.         // demo active test
    238. 

  238.         if (zen_admin_demo()) {
    239. 

  239.           $_GET['action']= '';
    240. 

  240.           $messageStack->add_session(ERROR_ADMIN_DEMO, 'caution');
    241. 

  241.           zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('oID', 'action')), 'NONSSL'));
    242. 

  242.         }
    243. 

  243.         $oID = zen_db_prepare_input($_POST['oID']);
    244. 

  244. 

  245.         zen_remove_order($oID, $_POST['restock']);
    246. 

  246. 

  247.         zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('oID', 'action')), 'NONSSL'));
    248. 

  248.         break;
    249. 

  249.       case 'delete_cvv':
    250. 

  250.         $delete_cvv = $db->Execute("update " . TABLE_ORDERS . " set cc_cvv = '" . TEXT_DELETE_CVV_REPLACEMENT . "' where orders_id = '" . (int)$_GET['oID'] . "'");
    251. 

  251.         zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    252. 

  252.         break;
    253. 

  253.       case 'mask_cc':
    254. 

  254.         $result  = $db->Execute("select cc_number from " . TABLE_ORDERS . " where orders_id = '" . (int)$_GET['oID'] . "'");
    255. 

  255.         $old_num = $result->fields['cc_number'];
    256. 

  256.         $new_num = substr($old_num, 0, 4) . str_repeat('*', (strlen($old_num) - 8)) . substr($old_num, -4);
    257. 

  257.         $mask_cc = $db->Execute("update " . TABLE_ORDERS . " set cc_number = '" . $new_num . "' where orders_id = '" . (int)$_GET['oID'] . "'");
    258. 

  258.         zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    259. 

  259.         break;
    260. 

  260. 

  261.       case 'doRefund':
    262. 

  262.         $order = new order($oID);
    263. 

  263.         if ($order->info['payment_module_code']) {
    264. 

  264.           if (file_exists(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php')) {
    265. 

  265.             require_once(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php');
    266. 

  266.             require_once(DIR_FS_CATALOG_LANGUAGES . $_SESSION['language'] . '/modules/payment/' . $order->info['payment_module_code'] . '.php');
    267. 

  267.             $module = new $order->info['payment_module_code'];
    268. 

  268.             if (method_exists($module, '_doRefund')) {
    269. 

  269.               $module->_doRefund($oID);
    270. 

  270.             }
    271. 

  271.           }
    272. 

  272.         }
    273. 

  273.         zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    274. 

  274.         break;
    275. 

  275.       case 'doAuth':
    276. 

  276.         $order = new order($oID);
    277. 

  277.         if ($order->info['payment_module_code']) {
    278. 

  278.           if (file_exists(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php')) {
    279. 

  279.             require_once(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php');
    280. 

  280.             require_once(DIR_FS_CATALOG_LANGUAGES . $_SESSION['language'] . '/modules/payment/' . $order->info['payment_module_code'] . '.php');
    281. 

  281.             $module = new $order->info['payment_module_code'];
    282. 

  282.             if (method_exists($module, '_doAuth')) {
    283. 

  283.               $module->_doAuth($oID, $order->info['total'], $order->info['currency']);
    284. 

  284.             }
    285. 

  285.           }
    286. 

  286.         }
    287. 

  287.         zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    288. 

  288.         break;
    289. 

  289.       case 'doCapture':
    290. 

  290.         $order = new order($oID);
    291. 

  291.         if ($order->info['payment_module_code']) {
    292. 

  292.           if (file_exists(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php')) {
    293. 

  293.             require_once(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php');
    294. 

  294.             require_once(DIR_FS_CATALOG_LANGUAGES . $_SESSION['language'] . '/modules/payment/' . $order->info['payment_module_code'] . '.php');
    295. 

  295.             $module = new $order->info['payment_module_code'];
    296. 

  296.             if (method_exists($module, '_doCapt')) {
    297. 

  297.               $module->_doCapt($oID, 'Complete', $order->info['total'], $order->info['currency']);
    298. 

  298.             }
    299. 

  299.           }
    300. 

  300.         }
    301. 

  301.         zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    302. 

  302.         break;
    303. 

  303.       case 'doVoid':
    304. 

  304.         $order = new order($oID);
    305. 

  305.         if ($order->info['payment_module_code']) {
    306. 

  306.           if (file_exists(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php')) {
    307. 

  307.             require_once(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php');
    308. 

  308.             require_once(DIR_FS_CATALOG_LANGUAGES . $_SESSION['language'] . '/modules/payment/' . $order->info['payment_module_code'] . '.php');
    309. 

  309.             $module = new $order->info['payment_module_code'];
    310. 

  310.             if (method_exists($module, '_doVoid')) {
    311. 

  311.               $module->_doVoid($oID);
    312. 

  312.             }
    313. 

  313.           }
    314. 

  314.         }
    315. 

  315.         zen_redirect(zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=edit', 'NONSSL'));
    316. 

  316.         break;
    317. 

  317.     }
    318. 

  318.   }
    319. 

  319. ?>
    320. 

  320. <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN">
    321. 

  321. <html <?php echo HTML_PARAMS; ?>>
    322. 

  322. <head>
    323. 

  323. <meta http-equiv="Content-Type" content="text/html; charset=<?php echo CHARSET; ?>">
    324. 

  324. <title><?php echo TITLE; ?></title>
    325. 

  325. <link rel="stylesheet" type="text/css" href="includes/stylesheet.css">
    326. 

  326. <link rel="stylesheet" type="text/css" media="print" href="includes/stylesheet_print.css">
    327. 

  327. <link rel="stylesheet" type="text/css" href="includes/cssjsmenuhover.css" media="all" id="hoverJS">
    328. 

  328. <script language="javascript" src="includes/menu.js"></script>
    329. 

  329. <script language="javascript" src="includes/general.js"></script>
    330. 

  330. <script type="text/javascript">
    331. 

  331.   <!--
    332. 

  332.   function init()
    333. 

  333.   {
    334. 

  334.     cssjsmenu('navbar');
    335. 

  335.     if (document.getElementById)
    336. 

  336.     {
    337. 

  337.       var kill = document.getElementById('hoverJS');
    338. 

  338.       kill.disabled = true;
    339. 

  339.     }
    340. 

  340.   }
    341. 

  341.   // -->
    342. 

  342. </script>
    343. 

  343. <script language="javascript" type="text/javascript"><!--
    344. 

  344. function couponpopupWindow(url) {
    345. 

  345.   window.open(url,'popupWindow','toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=yes,resizable=yes,copyhistory=no,width=450,height=280,screenX=150,screenY=150,top=150,left=150')
    346. 

  346. }
    347. 

  347. //--></script>
    348. 

  348. </head>
    349. 

  349. <body onLoad="init()">
    350. 

  350. <!-- header //-->
    351. 

  351. <div class="header-area">
    352. 

  352. <?php
    353. 

  353.   require(DIR_WS_INCLUDES . 'header.php');
    354. 

  354. ?>
    355. 

  355. </div>
    356. 

  356. <!-- header_eof //-->
    357. 

  357. 

  358. <!-- body //-->
    359. 

  359. <table border="0" width="100%" cellspacing="2" cellpadding="2">
    360. 

  360. <!-- body_text //-->
    361. 

  361. 

  362. <?php if ($action == '') { ?>
    363. 

  363. <!-- search -->
    364. 

  364.   <tr>
    365. 

  365.     <td width="100%" valign="top"><table border="0" width="100%" cellspacing="0" cellpadding="2">
    366. 

  366.       <tr>
    367. 

  367.         <td><table border="0" width="100%" cellspacing="0" cellpadding="0">
    368. 

  368.          <tr><?php echo zen_draw_form('search', FILENAME_ORDERS, '', 'get', '', true); ?>
    369. 

  369.             <td width="65%" class="pageHeading" align="right"><?php echo zen_draw_separator('pixel_trans.gif', 1, HEADING_IMAGE_HEIGHT); ?></td>
    370. 

  370.             <td colspan="2" class="smallText" align="right">
    371. 

  371. <?php
    372. 

  372. // show reset search
    373. 

  373.   if ((isset($_GET['search']) && zen_not_null($_GET['search'])) or $_GET['cID'] !='') {
    374. 

  374.     echo '<a href="' . zen_href_link(FILENAME_ORDERS, '', 'NONSSL') . '">' . zen_image_button('button_reset.gif', IMAGE_RESET) . '</a><br />';
    375. 

  375.   }
    376. 

  376. ?>
    377. 

  377. <?php
    378. 

  378.   echo HEADING_TITLE_SEARCH_DETAIL . ' ' . zen_draw_input_field('search') . zen_hide_session_id();
    379. 

  379.   if (isset($_GET['search']) && zen_not_null($_GET['search'])) {
    380. 

  380.     $keywords = zen_db_input(zen_db_prepare_input($_GET['search']));
    381. 

  381.     echo '<br/ >' . TEXT_INFO_SEARCH_DETAIL_FILTER . $keywords;
    382. 

  382.   }
    383. 

  383. ?>
    384. 

  384.             </td>
    385. 

  385.           </form>
    386. 

  386. 

  387. 

  388.          <?php echo zen_draw_form('search_orders_products', FILENAME_ORDERS, '', 'get', '', true); ?>
    389. 

  389.             <td class="pageHeading" align="right"><?php echo zen_draw_separator('pixel_trans.gif', 1, HEADING_IMAGE_HEIGHT); ?></td>
    390. 

  390.             <td colspan="2" class="smallText" align="right">
    391. 

  391. <?php
    392. 

  392. // show reset search orders_products
    393. 

  393.   if ((isset($_GET['search_orders_products']) && zen_not_null($_GET['search_orders_products'])) or $_GET['cID'] !='') {
    394. 

  394.     echo '<a href="' . zen_href_link(FILENAME_ORDERS, '', 'NONSSL') . '">' . zen_image_button('button_reset.gif', IMAGE_RESET) . '</a><br />';
    395. 

  395.   }
    396. 

  396. ?>
    397. 

  397. <?php
    398. 

  398.   echo HEADING_TITLE_SEARCH_DETAIL_ORDERS_PRODUCTS . ' ' . zen_draw_input_field('search_orders_products') . zen_hide_session_id();
    399. 

  399.   if (isset($_GET['search_orders_products']) && zen_not_null($_GET['search_orders_products'])) {
    400. 

  400.     $keywords_orders_products = zen_db_input(zen_db_prepare_input($_GET['search_orders_products']));
    401. 

  401.     echo '<br/ >' . TEXT_INFO_SEARCH_DETAIL_FILTER_ORDERS_PRODUCTS . zen_db_prepare_input($keywords_orders_products);
    402. 

  402.   }
    403. 

  403. ?>
    404. 

  404.             </td>
    405. 

  405.           </form>
    406. 

  406. 

  407.         </table></td>
    408. 

  408.       </tr>
    409. 

  409. <!-- search -->
    410. 

  410. <?php } ?>
    411. 

  411. 

  412. 

  413. <?php
    414. 

  414.   if (($action == 'edit') && ($order_exists == true)) {
    415. 

  415.     $order = new order($oID);
    416. 

  416.     if ($order->info['payment_module_code']) {
    417. 

  417.       if (file_exists(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php')) {
    418. 

  418.         require(DIR_FS_CATALOG_MODULES . 'payment/' . $order->info['payment_module_code'] . '.php');
    419. 

  419.         require(DIR_FS_CATALOG_LANGUAGES . $_SESSION['language'] . '/modules/payment/' . $order->info['payment_module_code'] . '.php');
    420. 

  420.         $module = new $order->info['payment_module_code'];
    421. 

  421. //        echo $module->admin_notification($oID);
    422. 

  422.       }
    423. 

  423.     }
    424. 

  424.     // fec dropdown
    425. 

  425.     if (MODULE_BARCODE_ORDERS_SWITCH == 'true') {
    426. 

  426.       $barcode = $db->Execute("SELECT orders_barcode FROM " . TABLE_ORDERS . " WHERE orders_id = " . $oID . " LIMIT 1");
    427. 

  427.       $barcode = $barcode->fields['orders_barcode'];
    428. 

  428.       if ($barcode == '') {
    429. 

  429.         // create barcode and store in db
    430. 

  430.         $barcode = MODULE_BARCODE_ORDERS_DEFAULT + $oID;
    431. 

  431.         $db->Execute("UPDATE " . TABLE_ORDERS . " SET orders_barcode = '" . $barcode . "' WHERE orders_id = " . $oID . " LIMIT 1");
    432. 

  432.       } 
    433. 

  433.     }
    434. 

  434. ?>
    435. 

  435.       <tr>
    436. 

  436.         <td width="100%"><table border="0" width="100%" cellspacing="0" cellpadding="0">
    437. 

  437.           <tr>
    438. 

  438.             <td class="pageHeading"><?php echo HEADING_TITLE; ?></td>
    439. 

  439.             <td class="pageHeading" align="right"><?php echo zen_draw_separator('pixel_trans.gif', 1, HEADING_IMAGE_HEIGHT); ?></td>
    440. 

  440.             <td class="pageHeading" align="right"><?php echo '<a href="javascript:history.back()">' . zen_image_button('button_back.gif', IMAGE_BACK) . '</a>'; ?></td>
    441. 

  441.           </tr>
    442. 

  442.         </table></td>
    443. 

  443.       </tr>
    444. 

  444.       <tr>
    445. 

  445.         <td><table width="100%" border="0" cellspacing="0" cellpadding="2">
    446. 

  446.           <tr>
    447. 

  447.             <td colspan="3"><?php echo zen_draw_separator(); ?></td>
    448. 

  448.           </tr>
    449. 

  449.           <tr>
    450. 

  450.             <td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="2">
    451. 

  451.               <tr>
    452. 

  452.                 <td class="main" valign="top"><strong><?php echo ENTRY_CUSTOMER; ?></strong></td>
    453. 

  453.                 <td class="main"><?php echo zen_address_format($order->customer['format_id'], $order->customer, 1, '', '<br />'); ?></td>
    454. 

  454.               </tr>
    455. 

  455.               <tr>
    456. 

  456.                 <td colspan="2"><?php echo zen_draw_separator('pixel_trans.gif', '1', '5'); ?></td>
    457. 

  457.               </tr>
    458. 

  458.               <tr>
    459. 

  459.                 <td class="main"><strong><?php echo ENTRY_TELEPHONE_NUMBER; ?></strong></td>
    460. 

  460.                 <td class="main"><?php echo $order->customer['telephone']; ?></td>
    461. 

  461.               </tr>
    462. 

  462.               <tr>
    463. 

  463.                 <td class="main"><strong><?php echo ENTRY_EMAIL_ADDRESS; ?></strong></td>
    464. 

  464.                 <td class="main"><?php echo '<a href="mailto:' . $order->customer['email_address'] . '">' . $order->customer['email_address'] . '</a>'; ?></td>
    465. 

  465.               </tr>
    466. 

  466.               <tr>
    467. 

  467.                 <td class="main"><strong><?php echo TEXT_INFO_IP_ADDRESS; ?></strong></td>
    468. 

  468.                 <td class="main"><?php echo $order->info['ip_address']; ?></td>
    469. 

  469.               </tr>
    470. 

  470.             </table></td>
    471. 

  471.             <td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="2">
    472. 

  472.               <tr>
    473. 

  473.                 <td class="main" valign="top"><strong><?php echo ENTRY_SHIPPING_ADDRESS; ?></strong></td>
    474. 

  474.                 <td class="main"><?php echo zen_address_format($order->delivery['format_id'], $order->delivery, 1, '', '<br />'); ?></td>
    475. 

  475.               </tr>
    476. 

  476.               <!-- bof FEC v1.24 drop down -->
    477. 

  477.               <?php if (MODULE_BARCODE_ORDERS_SWITCH == 'true') { ?>
    478. 

  478.               <tr>
    479. 

  479.                 <td class="main" valign="top"><strong><?php echo ENTRY_BARCODE; ?></strong></td>
    480. 

  480.                 <td class="main"><?php echo '<img src="' . DIR_WS_CATALOG . 'barcode/barcode.php?code=' . $barcode . '&scale=' . (int)MODULE_BARCODE_SCALE . '">'; ?></td>
    481. 

  481.               </tr>
    482. 

  482.               <?php } ?>
    483. 

  483.               <!-- eof dropdown -->              
    484. 

  484.             </table></td>
    485. 

  485.             <td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="2">
    486. 

  486.               <tr>
    487. 

  487.                 <td class="main" valign="top"><strong><?php echo ENTRY_BILLING_ADDRESS; ?></strong></td>
    488. 

  488.                 <td class="main"><?php echo zen_address_format($order->billing['format_id'], $order->billing, 1, '', '<br />'); ?></td>
    489. 

  489.               </tr>
    490. 

  490.             </table></td>
    491. 

  491.           </tr>
    492. 

  492.         </table></td>
    493. 

  493.       </tr>
    494. 

  494.       <tr>
    495. 

  495.         <td><?php echo zen_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    496. 

  496.       </tr>
    497. 

  497.       <tr>
    498. 

  498.         <td class="main"><strong><?php echo ENTRY_ORDER_ID . $oID; ?></strong></td>
    499. 

  499.       </tr>
    500. 

  500.       <tr>
    501. 

  501.      <td><table border="0" cellspacing="0" cellpadding="2">
    502. 

  502.         <tr>
    503. 

  503.            <td class="main"><strong><?php echo ENTRY_DATE_PURCHASED; ?></strong></td>
    504. 

  504.            <td class="main"><?php echo zen_date_long($order->info['date_purchased']); ?></td>
    505. 

  505.         </tr>
    506. 

  506.         <tr>
    507. 

  507.            <td class="main"><strong><?php echo ENTRY_PAYMENT_METHOD; ?></strong></td>
    508. 

  508.            <td class="main"><?php echo $order->info['payment_method']; ?></td>
    509. 

  509.         </tr>
    510. 

  510. <?php
    511. 

  511.     if (zen_not_null($order->info['cc_type']) || zen_not_null($order->info['cc_owner']) || zen_not_null($order->info['cc_number'])) {
    512. 

  512. ?>
    513. 

  513.           <tr>
    514. 

  514.             <td colspan="2"><?php echo zen_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    515. 

  515.           </tr>
    516. 

  516.           <tr>
    517. 

  517.             <td class="main"><?php echo ENTRY_CREDIT_CARD_TYPE; ?></td>
    518. 

  518.             <td class="main"><?php echo $order->info['cc_type']; ?></td>
    519. 

  519.           </tr>
    520. 

  520.           <tr>
    521. 

  521.             <td class="main"><?php echo ENTRY_CREDIT_CARD_OWNER; ?></td>
    522. 

  522.             <td class="main"><?php echo $order->info['cc_owner']; ?></td>
    523. 

  523.           </tr>
    524. 

  524.           <tr>
    525. 

  525.             <td class="main"><?php echo ENTRY_CREDIT_CARD_NUMBER; ?></td>
    526. 

  526.             <td class="main"><?php echo $order->info['cc_number'] . (zen_not_null($order->info['cc_number']) && !strstr($order->info['cc_number'],'X') && !strstr($order->info['cc_number'],'********') ? '&nbsp;&nbsp;<a href="' . zen_href_link(FILENAME_ORDERS, '&action=mask_cc&oID=' . $oID, 'NONSSL') . '" class="noprint">' . TEXT_MASK_CC_NUMBER . '</a>' : ''); ?><td>
    527. 

  527.           </tr>
    528. 

  528. <?php if (zen_not_null($order->info['cc_cvv'])) { ?>
    529. 

  529.           <tr>
    530. 

  530.             <td class="main"><?php echo ENTRY_CREDIT_CARD_CVV; ?></td>
    531. 

  531.             <td class="main"><?php echo $order->info['cc_cvv'] . (zen_not_null($order->info['cc_cvv']) && !strstr($order->info['cc_cvv'],TEXT_DELETE_CVV_REPLACEMENT) ? '&nbsp;&nbsp;<a href="' . zen_href_link(FILENAME_ORDERS, '&action=delete_cvv&oID=' . $oID, 'NONSSL') . '" class="noprint">' . TEXT_DELETE_CVV_FROM_DATABASE . '</a>' : ''); ?><td>
    532. 

  532.           </tr>
    533. 

  533. <?php } ?>
    534. 

  534.           <tr>
    535. 

  535.             <td class="main"><?php echo ENTRY_CREDIT_CARD_EXPIRES; ?></td>
    536. 

  536.             <td class="main"><?php echo $order->info['cc_expires']; ?></td>
    537. 

  537.           </tr>
    538. 

  538. <?php
    539. 

  539.     }
    540. 

  540. ?>
    541. 

  541.         </table></td>
    542. 

  542.       </tr>
    543. 

  543. <?php
    544. 

  544.       if (method_exists($module, 'admin_notification')) {
    545. 

  545. ?>
    546. 

  546.       <tr>
    547. 

  547.         <td><?php echo zen_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    548. 

  548.       </tr>
    549. 

  549.       <tr>
    550. 

  550.         <?php echo $module->admin_notification($oID); ?>
    551. 

  551.       </tr>
    552. 

  552.       <tr>
    553. 

  553.         <td><?php echo zen_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    554. 

  554.       </tr>
    555. 

  555. <?php
    556. 

  556. }
    557. 

  557. ?>
    558. 

  558.       <tr>
    559. 

  559.         <td><table border="0" width="100%" cellspacing="0" cellpadding="2">
    560. 

  560.           <tr class="dataTableHeadingRow">
    561. 

  561.             <td class="dataTableHeadingContent" colspan="2"><?php echo TABLE_HEADING_PRODUCTS; ?></td>
    562. 

  562.             <td class="dataTableHeadingContent"><?php echo TABLE_HEADING_PRODUCTS_MODEL; ?></td>
    563. 

  563.             <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_TAX; ?></td>
    564. 

  564.             <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_PRICE_EXCLUDING_TAX; ?></td>
    565. 

  565.             <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_PRICE_INCLUDING_TAX; ?></td>
    566. 

  566.             <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_TOTAL_EXCLUDING_TAX; ?></td>
    567. 

  567.             <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_TOTAL_INCLUDING_TAX; ?></td>
    568. 

  568.           </tr>
    569. 

  569. <?php
    570. 

  570.     for ($i=0, $n=sizeof($order->products); $i<$n; $i++) {
    571. 

  571.       if (DISPLAY_PRICE_WITH_TAX_ADMIN == 'true')
    572. 

  572.       {
    573. 

  573.         $priceIncTax = $currencies->format(zen_round(zen_add_tax($order->products[$i]['final_price'], $order->products[$i]['tax']),$currencies->get_decimal_places($order->info['currency'])) * $order->products[$i]['qty'], true, $order->info['currency'], $order->info['currency_value']);
    574. 

  574.       } else
    575. 

  575.       {
    576. 

  576.         $priceIncTax = $currencies->format(zen_add_tax($order->products[$i]['final_price'], $order->products[$i]['tax']) * $order->products[$i]['qty'], true, $order->info['currency'], $order->info['currency_value']);
    577. 

  577.       }
    578. 

  578.       echo '          <tr class="dataTableRow">' . "\n" .
    579. 

  579.            '            <td class="dataTableContent" valign="top" align="right">' . $order->products[$i]['qty'] . '&nbsp;x</td>' . "\n" .
    580. 

  580.            '            <td class="dataTableContent" valign="top">' . $order->products[$i]['name'];
    581. 

  581. 

  582.       if (isset($order->products[$i]['attributes']) && (sizeof($order->products[$i]['attributes']) > 0)) {
    583. 

  583.         for ($j = 0, $k = sizeof($order->products[$i]['attributes']); $j < $k; $j++) {
    584. 

  584.           echo '<br /><nobr><small>&nbsp;<i> - ' . $order->products[$i]['attributes'][$j]['option'] . ': ' . nl2br(zen_output_string_protected($order->products[$i]['attributes'][$j]['value']));
    585. 

  585.           if ($order->products[$i]['attributes'][$j]['price'] != '0') echo ' (' . $order->products[$i]['attributes'][$j]['prefix'] . $currencies->format($order->products[$i]['attributes'][$j]['price'] * $order->products[$i]['qty'], true, $order->info['currency'], $order->info['currency_value']) . ')';
    586. 

  586.           if ($order->products[$i]['attributes'][$j]['product_attribute_is_free'] == '1' and $order->products[$i]['product_is_free'] == '1') echo TEXT_INFO_ATTRIBUTE_FREE;
    587. 

  587.           echo '</i></small></nobr>';
    588. 

  588.         }
    589. 

  589.       }
    590. 

  590. 

  591.       echo '            </td>' . "\n" .
    592. 

  592.            '            <td class="dataTableContent" valign="top">' . $order->products[$i]['model'] . '</td>' . "\n" .
    593. 

  593.            '            <td class="dataTableContent" align="right" valign="top">' . zen_display_tax_value($order->products[$i]['tax']) . '%</td>' . "\n" .
    594. 

  594.            '            <td class="dataTableContent" align="right" valign="top"><strong>' .
    595. 

  595.                           $currencies->format($order->products[$i]['final_price'], true, $order->info['currency'], $order->info['currency_value']) .
    596. 

  596.                           ($order->products[$i]['onetime_charges'] != 0 ? '<br />' . $currencies->format($order->products[$i]['onetime_charges'], true, $order->info['currency'], $order->info['currency_value']) : '') .
    597. 

  597.                         '</strong></td>' . "\n" .
    598. 

  598.            '            <td class="dataTableContent" align="right" valign="top"><strong>' .
    599. 

  599.                           $currencies->format(zen_add_tax($order->products[$i]['final_price'], $order->products[$i]['tax']), true, $order->info['currency'], $order->info['currency_value']) .
    600. 

  600.                           ($order->products[$i]['onetime_charges'] != 0 ? '<br />' . $currencies->format(zen_add_tax($order->products[$i]['onetime_charges'], $order->products[$i]['tax']), true, $order->info['currency'], $order->info['currency_value']) : '') .
    601. 

  601.                         '</strong></td>' . "\n" .
    602. 

  602.            '            <td class="dataTableContent" align="right" valign="top"><strong>' .
    603. 

  603.                           $currencies->format(zen_round($order->products[$i]['final_price'], $currencies->get_decimal_places($order->info['currency'])) * $order->products[$i]['qty'], true, $order->info['currency'], $order->info['currency_value']) .
    604. 

  604.                           ($order->products[$i]['onetime_charges'] != 0 ? '<br />' . $currencies->format($order->products[$i]['onetime_charges'], true, $order->info['currency'], $order->info['currency_value']) : '') .
    605. 

  605.                         '</strong></td>' . "\n" .
    606. 

  606.            '            <td class="dataTableContent" align="right" valign="top"><strong>' .
    607. 

  607.                           $priceIncTax .
    608. 

  608.                           ($order->products[$i]['onetime_charges'] != 0 ? '<br />' . $currencies->format(zen_add_tax($order->products[$i]['onetime_charges'], $order->products[$i]['tax']), true, $order->info['currency'], $order->info['currency_value']) : '') .
    609. 

  609.                         '</strong></td>' . "\n";
    610. 

  610.       echo '          </tr>' . "\n";
    611. 

  611.     }
    612. 

  612. ?>
    613. 

  613.           <tr>
    614. 

  614.             <td align="right" colspan="8"><table border="0" cellspacing="0" cellpadding="2">
    615. 

  615. <?php
    616. 

  616.     for ($i = 0, $n = sizeof($order->totals); $i < $n; $i++) {
    617. 

  617.       echo '              <tr>' . "\n" .
    618. 

  618.            '                <td align="right" class="'. str_replace('_', '-', $order->totals[$i]['class']) . '-Text">' . $order->totals[$i]['title'] . '</td>' . "\n" .
    619. 

  619.            '                <td align="right" class="'. str_replace('_', '-', $order->totals[$i]['class']) . '-Amount">' . $currencies->format($order->totals[$i]['value'], false) . '</td>' . "\n" .
    620. 

  620.            '              </tr>' . "\n";
    621. 

  621.     }
    622. 

  622. ?>
    623. 

  623.             </table></td>
    624. 

  624.           </tr>
    625. 

  625.         </table></td>
    626. 

  626.       </tr>
    627. 

  627. 

  628. <?php
    629. 

  629.   // show downloads
    630. 

  630.   require(DIR_WS_MODULES . 'orders_download.php');
    631. 

  631. ?>
    632. 

  632. 

  633.       <tr>
    634. 

  634.         <td><?php echo zen_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    635. 

  635.       </tr>
    636. 

  636.       <tr>
    637. 

  637.         <td class="main"><table border="1" cellspacing="0" cellpadding="5">
    638. 

  638.           <tr>
    639. 

  639.             <td class="smallText" align="center"><strong><?php echo TABLE_HEADING_DATE_ADDED; ?></strong></td>
    640. 

  640.             <td class="smallText" align="center"><strong><?php echo TABLE_HEADING_CUSTOMER_NOTIFIED; ?></strong></td>
    641. 

  641.             <td class="smallText" align="center"><strong><?php echo TABLE_HEADING_STATUS; ?></strong></td>
    642. 

  642.             <td class="smallText" align="center"><strong><?php echo TABLE_HEADING_COMMENTS; ?></strong></td>
    643. 

  643.           </tr>
    644. 

  644. <?php
    645. 

  645.     $orders_history = $db->Execute("select orders_status_id, date_added, customer_notified, comments
    646. 

  646.                                     from " . TABLE_ORDERS_STATUS_HISTORY . "
    647. 

  647.                                     where orders_id = '" . zen_db_input($oID) . "'
    648. 

  648.                                     order by date_added");
    649. 

    650. 

  650.     if ($orders_history->RecordCount() > 0) {
    651. 

  651.       while (!$orders_history->EOF) {
    652. 

  652.         echo '          <tr>' . "\n" .
    653. 

  653.              '            <td class="smallText" align="center">' . zen_datetime_short($orders_history->fields['date_added']) . '</td>' . "\n" .
    654. 

  654.              '            <td class="smallText" align="center">';
    655. 

  655.         if ($orders_history->fields['customer_notified'] == '1') {
    656. 

  656.           echo zen_image(DIR_WS_ICONS . 'tick.gif', TEXT_YES) . "</td>\n";
    657. 

  657.         } else if ($orders_history->fields['customer_notified'] == '-1') {
    658. 

  658.           echo zen_image(DIR_WS_ICONS . 'locked.gif', TEXT_HIDDEN) . "</td>\n";
    659. 

  659.         } else {
    660. 

  660.           echo zen_image(DIR_WS_ICONS . 'unlocked.gif', TEXT_VISIBLE) . "</td>\n";
    661. 

  661.         }
    662. 

  662.         echo '            <td class="smallText">' . $orders_status_array[$orders_history->fields['orders_status_id']] . '</td>' . "\n";
    663. 

  663.         echo '            <td class="smallText">' . nl2br(zen_db_output($orders_history->fields['comments'])) . '&nbsp;</td>' . "\n" .
    664. 

  664.              '          </tr>' . "\n";
    665. 

  665.         $orders_history->MoveNext();
    666. 

  666.       }
    667. 

  667.     } else {
    668. 

  668.         echo '          <tr>' . "\n" .
    669. 

  669.              '            <td class="smallText" colspan="5">' . TEXT_NO_ORDER_HISTORY . '</td>' . "\n" .
    670. 

  670.              '          </tr>' . "\n";
    671. 

  671.     }
    672. 

  672. ?>
    673. 

  673.         </table></td>
    674. 

  674.       </tr>
    675. 

  675.       <tr>
    676. 

  676.         <td class="main noprint"><br /><strong><?php echo TABLE_HEADING_COMMENTS; ?></strong></td>
    677. 

  677.       </tr>
    678. 

  678.       <tr>
    679. 

  679.         <td class="noprint"><?php echo zen_draw_separator('pixel_trans.gif', '1', '5'); ?></td>
    680. 

  680.       </tr>
    681. 

  681.       <tr><?php echo zen_draw_form('status', FILENAME_ORDERS, zen_get_all_get_params(array('action')) . 'action=update_order', 'post', '', true); ?>
    682. 

  682.         <td class="main noprint"><?php echo zen_draw_textarea_field('comments', 'soft', '60', '5'); ?></td>
    683. 

  683.       </tr>
    684. 

  684.       <tr>
    685. 

  685.         <td><?php echo zen_draw_separator('pixel_trans.gif', '1', '10'); ?></td>
    686. 

  686.       </tr>
    687. 

  687.       <tr>
    688. 

  688.         <td><table border="0" cellspacing="0" cellpadding="2" class="noprint">
    689. 

  689.           <tr>
    690. 

  690.             <td><table border="0" cellspacing="0" cellpadding="2">
    691. 

  691.               <tr>
    692. 

  692.                 <td class="main"><strong><?php echo ENTRY_STATUS; ?></strong> <?php echo zen_draw_pull_down_menu('status', $orders_statuses, $order->info['orders_status']); ?></td>
    693. 

  693.               </tr>
    694. 

  694.               <tr>
    695. 

  695.                 <td class="main"><strong><?php echo ENTRY_NOTIFY_CUSTOMER; ?></strong> [<?php echo zen_draw_radio_field('notify', '1', true) . '-' . TEXT_EMAIL . ' ' . zen_draw_radio_field('notify', '0', FALSE) . '-' . TEXT_NOEMAIL . ' ' . zen_draw_radio_field('notify', '-1', FALSE) . '-' . TEXT_HIDE; ?>]&nbsp;&nbsp;&nbsp;</td>
    696. 

  696.                 <td class="main"><strong><?php echo ENTRY_NOTIFY_COMMENTS; ?></strong> <?php echo zen_draw_checkbox_field('notify_comments', '', true); ?></td>
    697. 

  697.               </tr>
    698. 

  698.               <tr><td><br /></td></tr>
    699. 

  699.             </table></td>
    700. 

  700.             <td valign="top"><?php echo zen_image_submit('button_update.gif', IMAGE_UPDATE); ?></td>
    701. 

  701.           </tr>
    702. 

  702.         </table></td>
    703. 

  703.       </form></tr>
    704. 

  704.       <tr>
    705. 

  705.         <td colspan="2" align="right" class="noprint"><?php echo '<a href="' . zen_href_link(FILENAME_ORDERS_INVOICE, 'oID=' . $_GET['oID']) . '" TARGET="_blank">' . zen_image_button('button_invoice.gif', IMAGE_ORDERS_INVOICE) . '</a> <a href="' . zen_href_link(FILENAME_ORDERS_PACKINGSLIP, 'oID=' . $_GET['oID']) . '" TARGET="_blank">' . zen_image_button('button_packingslip.gif', IMAGE_ORDERS_PACKINGSLIP) . '</a> <a href="' . zen_href_link(FILENAME_ORDERS, zen_get_all_get_params(array('action'))) . '">' . zen_image_button('button_orders.gif', IMAGE_ORDERS) . '</a>'; ?></td>
    706. 

  706.       </tr>
    707. 

  707. <?php
    708. 

  708. // check if order has open gv
    709. 

  709.         $gv_check = $db->Execute("select order_id, unique_id
    710. 

  710.                                   from " . TABLE_COUPON_GV_QUEUE ."
    711. 

  711.                                   where order_id = '" . $_GET['oID'] . "' and release_flag='N' limit 1");
    712. 

  712.         if ($gv_check->RecordCount() > 0) {
    713. 

  713.           $goto_gv = '<a href="' . zen_href_link(FILENAME_GV_QUEUE, 'order=' . $_GET['oID']) . '">' . zen_image_button('button_gift_queue.gif',IMAGE_GIFT_QUEUE) . '</a>';
    714. 

  714.           echo '      <tr><td align="right"><table width="225"><tr>';
    715. 

  715.           echo '        <td align="center">';
    716. 

  716.           echo $goto_gv . '&nbsp;&nbsp;';
    717. 

  717.           echo '        </td>';
    718. 

  718.           echo '      </tr></table></td></tr>';
    719. 

  719.         }
    720. 

  720. ?>
    721. 

  721. <?php
    722. 

  722.   } else {
    723. 

  723. ?>
    724. 

  724.       <tr>
    725. 

  725.         <td width="100%"><table border="0" width="100%" cellspacing="0" cellpadding="0">
    726. 

  726.           <tr>
    727. 

  727.             <td class="pageHeading"><?php echo HEADING_TITLE; ?></td>
    728. 

  728.             <td class="pageHeading" align="right"><?php echo zen_draw_separator('pixel_trans.gif', 1, HEADING_IMAGE_HEIGHT); ?></td>
    729. 

  729.             <td align="right"><table border="0" width="100%" cellspacing="0" cellpadding="0">
    730. 

  730.               <tr><?php echo zen_draw_form('orders', FILENAME_ORDERS, '', 'get', '', true); ?>
    731. 

  731.                 <td class="smallText" align="right"><?php echo HEADING_TITLE_SEARCH . ' ' . zen_draw_input_field('oID', '', 'size="12"') . zen_draw_hidden_field('action', 'edit') . zen_hide_session_id(); ?></td>
    732. 

  732.               </form></tr>
    733. 

  733.               <tr><?php echo zen_draw_form('status', FILENAME_ORDERS, '', 'get', '', true); ?>
    734. 

  734.                 <td class="smallText" align="right">
    735. 

  735.                   <?php
    736. 

  736.                     echo HEADING_TITLE_STATUS . ' ' . zen_draw_pull_down_menu('status', array_merge(array(array('id' => '', 'text' => TEXT_ALL_ORDERS)), $orders_statuses), $_GET['status'], 'onChange="this.form.submit();"');
    737. 

  737.                     echo zen_hide_session_id();
    738. 

  738.                   ?>
    739. 

  739.                 </td>
    740. 

  740.               </form></tr>
    741. 

  741.             </table></td>
    742. 

  742.           </tr>
    743. 

  743.         </table></td>
    744. 

  744.       </tr>
    745. 

  745.       <tr>
    746. 

  746.         <td><table border="0" width="100%" cellspacing="0" cellpadding="0">
    747. 

  747.           <tr>
    748. 

  748.             <td class="smallText"><?php echo TEXT_LEGEND . ' ' . zen_image(DIR_WS_IMAGES . 'icon_status_red.gif', TEXT_BILLING_SHIPPING_MISMATCH, 10, 10) . ' ' . TEXT_BILLING_SHIPPING_MISMATCH; ?>
    749. 

  749.           </td>
    750. 

  750.           <tr>
    751. 

  751.             <td valign="top"><table border="0" width="100%" cellspacing="0" cellpadding="2">
    752. 

  752.               <tr class="dataTableHeadingRow">
    753. 

  753. <?php
    754. 

  754. // Sort Listing
    755. 

  755.           switch ($_GET['list_order']) {
    756. 

  756.               case "id-asc":
    757. 

  757.               $disp_order = "c.customers_id";
    758. 

  758.               break;
    759. 

  759.               case "firstname":
    760. 

  760.               $disp_order = "c.customers_firstname";
    761. 

  761.               break;
    762. 

  762.               case "firstname-desc":
    763. 

  763.               $disp_order = "c.customers_firstname DESC";
    764. 

  764.               break;
    765. 

  765.               case "lastname":
    766. 

  766.               $disp_order = "c.customers_lastname, c.customers_firstname";
    767. 

  767.               break;
    768. 

  768.               case "lastname-desc":
    769. 

  769.               $disp_order = "c.customers_lastname DESC, c.customers_firstname";
    770. 

  770.               break;
    771. 

  771.               case "company":
    772. 

  772.               $disp_order = "a.entry_company";
    773. 

  773.               break;
    774. 

  774.               case "company-desc":
    775. 

  775.               $disp_order = "a.entry_company DESC";
    776. 

  776.               break;
    777. 

  777.               default:
    778. 

  778.               $disp_order = "c.customers_id DESC";
    779. 

  779.           }
    780. 

  780. ?>
    781. 

  781.                 <td class="dataTableHeadingContent" align="center"><?php echo TABLE_HEADING_ORDERS_ID; ?></td>
    782. 

  782.                 <td class="dataTableHeadingContent" align="left" width="50"><?php echo TABLE_HEADING_PAYMENT_METHOD; ?></td>
    783. 

  783.                 <td class="dataTableHeadingContent"><?php echo TABLE_HEADING_CUSTOMERS; ?></td>
    784. 

  784.                 <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_ORDER_TOTAL; ?></td>
    785. 

  785.                 <td class="dataTableHeadingContent" align="center"><?php echo TABLE_HEADING_DATE_PURCHASED; ?></td>
    786. 

  786.                 <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_STATUS; ?></td>
    787. 

  787.                 <td class="dataTableHeadingContent" align="center"><?php echo TABLE_HEADING_CUSTOMER_COMMENTS; ?></td>
    788. 

  788.                 <td class="dataTableHeadingContent" align="right"><?php echo TABLE_HEADING_ACTION; ?>&nbsp;</td>
    789. 

  789.               </tr>
    790. 

  790. 

  791. <?php
    792. 

  792. // Only one or the other search
    793. 

  793. // create search_orders_products filter
    794. 

  794.   $search = '';
    795. 

  795.   $new_table = '';
    796. 

  796.   $new_fields = '';
    797. 

  797.   if (isset($_GET['search_orders_products']) && zen_not_null($_GET['search_orders_products'])) {
    798. 

  798.     $new_fields = '';
    799. 

  799.     $search_distinct = ' distinct ';
    800. 

  800.     $new_table = " left join " . TABLE_ORDERS_PRODUCTS . " op on (op.orders_id = o.orders_id) ";
    801. 

  801.     $keywords = zen_db_input(zen_db_prepare_input($_GET['search_orders_products']));
    802. 

  802.     $search = " and (op.products_model like '%" . $keywords . "%' or op.products_name like '" . $keywords . "%')";
    803. 

  803.     if (substr(strtoupper($_GET['search_orders_products']), 0, 3) == 'ID:') {
    804. 

  804.       $keywords = TRIM(substr($_GET['search_orders_products'], 3));
    805. 

  805.       $search = " and op.products_id ='" . (int)$keywords . "'";
    806. 

  806.     }
    807. 

  807.   } else {
    808. 

  808. ?>
    809. 

  809. <?php
    810. 

  810. // create search filter
    811. 

  811.   $search = '';
    812. 

  812.   if (isset($_GET['search']) && zen_not_null($_GET['search'])) {
    813. 

  813.     $search_distinct = ' ';
    814. 

  814.     $keywords = zen_db_input(zen_db_prepare_input($_GET['search']));
    815. 

  815.     $search = " and (o.customers_city like '%" . $keywords . "%' or o.customers_postcode like '%" . $keywords . "%' or o.date_purchased like '%" . $keywords . "%' or o.billing_name like '%" . $keywords . "%' or o.billing_company like '%" . $keywords . "%' or o.billing_street_address like '%" . $keywords . "%' or o.delivery_city like '%" . $keywords . "%' or o.delivery_postcode like '%" . $keywords . "%' or o.delivery_name like '%" . $keywords . "%' or o.delivery_company like '%" . $keywords . "%' or o.delivery_street_address like '%" . $keywords . "%' or o.billing_city like '%" . $keywords . "%' or o.billing_postcode like '%" . $keywords . "%' or o.customers_email_address like '%" . $keywords . "%' or o.customers_name like '%" . $keywords . "%' or o.customers_company like '%" . $keywords . "%' or o.customers_street_address  like '%" . $keywords . "%' or o.customers_telephone like '%" . $keywords . "%' or o.ip_address  like '%" . $keywords . "%')";
    816. 

  816.     $new_table = '';
    817. 

  817. //    $new_fields = ", o.customers_company, o.customers_email_address, o.customers_street_address, o.delivery_company, o.delivery_name, o.delivery_street_address, o.billing_company, o.billing_name, o.billing_street_address, o.payment_module_code, o.shipping_module_code, o.ip_address ";
    818. 

  818.   }
    819. 

  819. } // eof: search orders or orders_products
    820. 

  820.     $new_fields = ", o.customers_company, o.customers_email_address, o.customers_street_address, o.delivery_company, o.delivery_name, o.delivery_street_address, o.billing_company, o.billing_name, o.billing_street_address, o.payment_module_code, o.shipping_module_code, o.ip_address ";
    821. 

  821. ?>
    822. 

  822. <?php
    823. 

  823.     if (isset($_GET['cID'])) {
    824. 

  824.       $cID = zen_db_prepare_input($_GET['cID']);
    825. 

  825.       $orders_query_raw =   "select o.orders_id, o.customers_id, o.customers_name, o.payment_method, o.shipping_method, o.date_purchased, o.last_modified, o.currency, o.currency_value, s.orders_status_name, ot.text as order_total" .
    826. 

  826.                             $new_fields . "
    827. 

  827.                             from (" . TABLE_ORDERS_STATUS . " s, " .
    828. 

  828.                             TABLE_ORDERS . " o " .
    829. 

  829.                             $new_table . ")
    830. 

  830.                             left join " . TABLE_ORDERS_TOTAL . " ot on (o.orders_id = ot.orders_id and ot.class = 'ot_total') " . "
    831. 

  831.                             where o.customers_id = '" . (int)$cID . "' and o.orders_status = s.orders_status_id and s.language_id = '" . (int)$_SESSION['languages_id'] . "' order by orders_id DESC";
    832. 

    833. 

  833. //echo '<BR><BR>I SEE A: ' . $orders_query_raw . '<BR><BR>';
    834. 

  834. 

  835.     } elseif ($_GET['stat…
    836.

Large files files are truncated, but you can click here to view the full file