PageRenderTime 70ms CodeModel.GetById 17ms RepoModel.GetById 1ms app.codeStats 0ms

/application/views/pages/admin/orderssz.php

https://bitbucket.org/chadsaun/ifrogz-panel
PHP | 2384 lines | 2314 code | 32 blank | 38 comment | 375 complexity | 0a852678f65ae10305511de64de03287 MD5 | raw file
    

  1. <?php
    2. 

  2. //This code is copyright (c) Internet Business Solutions SL, all rights reserved.
    3. 

  3. //The contents of this file are protect under law as the intellectual property of Internet
    4. 

  4. //Business Solutions SL. Any use, reproduction, disclosure or copying of any kind 
    5. 

  5. //without the express and written permission of Internet Business Solutions SL is forbidden.
    6. 

  6. //Author: Vince Reid, vince@virtualred.net
    7. 

  7. include('init.php');
    8. 

  8. include(APPPATH.'views/pages/admin/cartmisc.php');
    9. 

  9. include_once(IFZROOT.'kohana.php');
    10. 

  10. session_register('order_id_commas');
    11. 

  11. $lisuccess=0;
    12. 

  12. if(@$dateadjust=="") $dateadjust=0;
    13. 

  13. if(@$dateformatstr == "") $dateformatstr = "m/d/Y";
    14. 

  14. $admindatestr="Y-m-d";
    15. 

  15. if(@$admindateformat=="") $admindateformat=0;
    16. 

  16. if($admindateformat==1)
    17. 

  17. 	$admindatestr="m/d/Y";
    18. 

  18. elseif($admindateformat==2)
    19. 

  19. 	$admindatestr="d/m/Y";
    20. 

  20. if(@$storesessionvalue=="") $storesessionvalue="virtualstore".time();
    21. 

  21. if(@$_GET["doedit"]=="true") $doedit=TRUE; else $doedit=FALSE;
    22. 

  22. function editfunc($data,$col,$size){
    23. 

  23. 	global $doedit;
    24. 

  24. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . str_replace('"','&quot;',$data) . '" size="' . $size . '">'); else return($data);
    25. 

  25. }
    26. 

  26. function editnumeric($data,$col,$size){
    27. 

  27. 	global $doedit;
    28. 

  28. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . number_format($data,2,'.','') . '" size="' . $size . '">'); else return(FormatEuroCurrency($data));
    29. 

  29. }
    30. 

  30. if(@$_SESSION["loggedon"] != $storesessionvalue && trim(@$_COOKIE["WRITECKL"])!=""){
    31. 

  31. 	$config = RBI_Kohana::config('database.default_ifrogz');
    32. 

  32. 	$config = $config['connection'];
    33. 

  33. 	$db=mysql_connect($config['hostname'], $config['username'], $config['password']);
    34. 

  34. 	mysql_select_db($config['database']) or die ('RBI connection failed.</td></tr></table></body></html>');
    35. 

  35. 	$rbiSQL = 'SELECT * 
    36. 

  36. 			   FROM employee 
    37. 

  37. 			   WHERE username="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKL"]))).'" and password="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKP"]))).'"';
    38. 

  38. 	$rs_rbi = mysql_query($rbiSQL);
    39. 

  39. 	if(mysql_num_rows($rs_rbi) > 0) {
    40. 

  40. 		@$_SESSION["loggedon"] = $storesessionvalue;
    41. 

  41. 	}else{
    42. 

  42. 		$lisuccess=2;
    43. 

  43. 	}
    44. 

  44. 	mysql_free_result($rs_rbi);
    45. 

  45. 	
    46. 

  46. 	include(APPPATH.'views/partials/admin/dbconnection.php');
    47. 

  47. }
    48. 

  48. if(($_SESSION["loggedon"] != $storesessionvalue && $lisuccess!=2) || @$disallowlogin==TRUE) exit();
    49. 

  49. if(@$htmlemails==TRUE) $emlNl = "<br />"; else $emlNl="\n";
    50. 

  50. if($lisuccess==2){
    51. 

  51. ?>
    52. 

  52. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    53. 

  53.         <tr>
    54. 

  54.           <td width="100%">
    55. 

  55.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    56. 

  56. 			  <tr> 
    57. 

  57.                 <td width="100%" colspan="4" align="center"><p>&nbsp;</p><p>&nbsp;</p>
    58. 

  58. 				  <p><strong><?php print $yyOpFai?></strong></p><p>&nbsp;</p>
    59. 

  59. 				  <p><?php print $yyCorCoo?> <?php print $yyCorLI?> <a href="/admin/login.php"><?php print $yyClkHer?></a>.</p>
    60. 

  60. 				</td>
    61. 

  61. 			  </tr>
    62. 

  62. 			</table>
    63. 

  63. 		  </td>
    64. 

  64. 		</tr>
    65. 

  65. 	  </table>
    66. 

  66. <?php
    67. 

  67. }else{
    68. 

  68. $success=true;
    69. 

  69. $alreadygotadmin = getadminsettings();
    70. 

  70. if(@$_POST["updatestatus"]=="1"){
    71. 

  71. 	mysql_query("UPDATE orders SET ordStatusInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordStatusInfo"]))) . "' WHERE ordID=" . @$_POST["orderid"]) or print(mysql_error());
    72. 

  72. }elseif(@$_GET["id"] != ""){
    73. 

  73. 	if(@$_POST["delccdets"] != ""){
    74. 

  74. 		mysql_query("UPDATE orders SET ordCNum='' WHERE ordID=" . @$_GET["id"]);
    75. 

  75. 	}
    76. 

  76. 	$sSQL = "SELECT cartProdId,cartProdName,cartProdPrice,cartQuantity,cartID FROM cart WHERE cartOrderID=" . $_GET["id"];
    77. 

  77. 	$allorders = mysql_query($sSQL) or print(mysql_error());
    78. 

  78. }else{
    79. 

  79. 	// Delete old uncompleted orders.
    80. 

  80. 	if($delccafter != 0){
    81. 

  81. 		$sSQL = "UPDATE orders SET ordCNum='' WHERE ordDate<'" . date("Y-m-d H:i:s", time()-($delccafter*60*60*24)) . "'";
    82. 

  82. 		mysql_query($sSQL) or print(mysql_error());
    83. 

  83. 	}
    84. 

  84. 	if($delAfter != 0){
    85. 

  85. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-($delAfter*60*60*24)) . "'";
    86. 

  86. 		$result = mysql_query($sSQL) or print(mysql_error());
    87. 

  87. 		if(mysql_num_rows($result)>0){
    88. 

  88. 			$delStr="";
    89. 

  89. 			$delOptions="";
    90. 

  90. 			$addcomma = "";
    91. 

  91. 			while($rs = mysql_fetch_assoc($result)){
    92. 

  92. 				$delStr .= $addcomma . $rs["cartOrderID"];
    93. 

  93. 				$delOptions .= $addcomma . $rs["cartID"];
    94. 

  94. 				$addcomma = ",";
    95. 

  95. 			}
    96. 

  96. 			mysql_query("DELETE FROM orders WHERE ordID IN (" . $delStr . ")") or print(mysql_error());
    97. 

  97. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    98. 

  98. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    99. 

  99. 		}
    100. 

  100. 		mysql_free_result($result);
    101. 

  101. 	}else{
    102. 

  102. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartOrderID=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    103. 

  103. 		$result = mysql_query($sSQL) or print(mysql_error());
    104. 

  104. 		if(mysql_num_rows($result)>0){
    105. 

  105. 			$delStr="";
    106. 

  106. 			$delOptions="";
    107. 

  107. 			$addcomma = "";
    108. 

  108. 			while($rs = mysql_fetch_assoc($result)){
    109. 

  109. 				$delStr .= $addcomma . $rs["cartOrderID"];
    110. 

  110. 				$delOptions .= $addcomma . $rs["cartID"];
    111. 

  111. 				$addcomma = ",";
    112. 

  112. 			}
    113. 

  113. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    114. 

  114. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    115. 

  115. 		}
    116. 

  116. 		mysql_free_result($result);
    117. 

  117. 	}
    118. 

  118. 	$numstatus=0;
    119. 

  119. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    120. 

  120. 	$result = mysql_query($sSQL) or print(mysql_error());
    121. 

  121. 	while($rs = mysql_fetch_assoc($result)){
    122. 

  122. 		$allstatus[$numstatus++]=$rs;
    123. 

  123. 	}
    124. 

  124. 	mysql_free_result($result);
    125. 

  125. }
    126. 

  126. if(@$_POST["updatestatus"]=="1"){
    127. 

  127. ?>
    128. 

  128. <script language="JavaScript" type="text/javascript">
    129. 

  129. <!--
    130. 

  130. setTimeout("history.go(-2);",1100);
    131. 

  131. // -->
    132. 

  132. </script>
    133. 

  133. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    134. 

  134.         <tr>
    135. 

  135.           <td width="100%">
    136. 

  136.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    137. 

  137. 			  <tr> 
    138. 

  138.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    139. 

  139.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    140. 

  140. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    141. 

  141. 			  </tr>
    142. 

  142. 			</table>
    143. 

  143. 		  </td>
    144. 

  144. 		</tr>
    145. 

  145. 	  </table>
    146. 

  146. <?php
    147. 

  147. }elseif(@$_POST["doedit"] == "true"){
    148. 

  148. 	$OWSP = "";
    149. 

  149. 	$sSQL = "SELECT ordSessionID FROM orders WHERE ordID='" . $_POST["orderid"] . "'";
    150. 

  150. 	$result = mysql_query($sSQL) or print(mysql_error());
    151. 

  151. 	$rs = mysql_fetch_array($result);
    152. 

  152. 	$thesessionid = $rs["ordSessionID"];
    153. 

  153. 	mysql_free_result($result);
    154. 

  154. 	$sSQL = "UPDATE orders SET ";
    155. 

  155. 	$sSQL .= "ordName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["name"]))) . "',";
    156. 

  156. 	$sSQL .= "ordAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address"]))) . "',";
    157. 

  157. 	if(@$useaddressline2==TRUE) $sSQL .= "ordAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address2"]))) . "',";
    158. 

  158. 	$sSQL .= "ordCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["city"]))) . "',";
    159. 

  159. 	$sSQL .= "ordPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["APO"]))) . "',";
    160. 

  160. 	$sSQL .= "ordState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["state"]))) . "',";
    161. 

  161. 	$sSQL .= "ordZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["zip"]))) . "',";
    162. 

  162. 	$sSQL .= "ordCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["country"]))) . "',";
    163. 

  163. 	$sSQL .= "ordEmail='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["email"]))) . "',";
    164. 

  164. 	$sSQL .= "ordPhone='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["phone"]))) . "',";
    165. 

  165. 	$sSQL .= "ordShipName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["sname"]))) . "',";
    166. 

  166. 	$sSQL .= "ordShipAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress"]))) . "',";
    167. 

  167. 	if(@$useaddressline2==TRUE) $sSQL .= "ordShipAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress2"]))) . "',";
    168. 

  168. 	$sSQL .= "ordShipCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["scity"]))) . "',";
    169. 

  169. 	$sSQL .= "ordShipPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ShipAPO"]))) . "',";
    170. 

  170. 	$sSQL .= "ordShipState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["sstate"]))) . "',";
    171. 

  171. 	$sSQL .= "ordShipZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["szip"]))) . "',";
    172. 

  172. 	$sSQL .= "ordShipCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["scountry"]))) . "',";
    173. 

  173. 	$sSQL .= "ordShipType='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["shipmethod"]))) . "',";
    174. 

  174. 	$sSQL .= "ordIP='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ipaddress"]))) . "',";
    175. 

  175. 	$ordComLoc = 0;
    176. 

  176. 	if(trim(@$_POST["commercialloc"])=="Y") $ordComLoc = 1;
    177. 

  177. 	if(trim(@$_POST["wantinsurance"])=="Y") $ordComLoc += 2;
    178. 

  178. 	$sSQL .= "ordComLoc=" . $ordComLoc . ",";
    179. 

  179. 	$sSQL .= "ordAffiliate='" . trim(@$_POST["PARTNER"]) . "',";
    180. 

  180. 	$sSQL .= "ordAddInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordAddInfo"]))) . "',";
    181. 

  181. 	$sSQL .= "ordStatusInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordStatusInfo"]))) . "',";
    182. 

  182. 	$sSQL .= "ordSupportInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordSupportInfo"]))) . "',";
    183. 

  183. 	$sSQL .= "order_changed='yes',";
    184. 

  184. 	$sSQL .= "ordDiscountText='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["discounttext"]))) . "',";
    185. 

  185. 	$sSQL .= "ordExtra1='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra1"]))) . "',";
    186. 

  186. 	$sSQL .= "ordExtra2='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra2"]))) . "',";
    187. 

  187. 	$sSQL .= "ordShipping='" . mysql_real_escape_string(trim(@$_POST["ordShipping"])) . "',";
    188. 

  188. 	$sSQL .= "ordStateTax='" . mysql_real_escape_string(trim(@$_POST["ordStateTax"])) . "',";
    189. 

  189. 	$sSQL .= "ordCountryTax='" . mysql_real_escape_string(trim(@$_POST["ordCountryTax"])) . "',";
    190. 

  190. 	if(@$canadataxsystem==TRUE) $sSQL .= "ordHSTTax='" . mysql_real_escape_string(trim(@$_POST["ordHSTTax"])) . "',";
    191. 

  191. 	$sSQL .= "ordDiscount='" . mysql_real_escape_string(trim(@$_POST["ordDiscount"])) . "',";
    192. 

  192. 	$sSQL .= "ordHandling='" . mysql_real_escape_string(trim(@$_POST["ordHandling"])) . "',";
    193. 

  193. 	$sSQL .= "ordAuthNumber='" . mysql_real_escape_string(trim(@$_POST["ordAuthNumber"])) . "',";
    194. 

  194. 	$sSQL .= "ordTransID='" . mysql_real_escape_string(trim(@$_POST["ordTransID"])) . "',";
    195. 

  195. 	$sSQL .= "ordTotal='" . mysql_real_escape_string(trim(@$_POST["ordtotal"])) . "',";
    196. 

  196. 	$sSQL .= "ord_cert_amt='" . mysql_real_escape_string(trim(@$_POST["ord_cert_amt"])) . "'";
    197. 

  197. 	$sSQL .= " WHERE ordID='" . $_POST["orderid"] . "'";
    198. 

  198. 	mysql_query($sSQL) or print(mysql_error());
    199. 

  199. 

  200. 	foreach($_POST as $objItem => $objValue){
    201. 

  201. 		//print $objItem . " : " . $objValue . "<br>";
    202. 

  202. 		if(substr($objItem,0,6)=="prodid"){
    203. 

  203. 			$idno = (int)substr($objItem, 6);
    204. 

  204. 			$cartid = trim(@$_POST["cartid" . $idno]);
    205. 

  205. 			$prodid = trim(@$_POST["prodid" . $idno]);
    206. 

  206. 			$quant = trim(@$_POST["quant" . $idno]);
    207. 

  207. 			$theprice = trim(@$_POST["price" . $idno]);
    208. 

  208. 			$prodname = trim(@$_POST["prodname" . $idno]);
    209. 

  209. 			$delitem = trim(@$_POST["del_" . $idno]);
    210. 

  210. 			if($delitem=="yes"){
    211. 

  211. 				mysql_query("DELETE FROM cart WHERE cartID=" . $cartid) or print(mysql_error());
    212. 

  212. 				mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    213. 

  213. 				$cartid = "";
    214. 

  214. 			}elseif($cartid != ""){
    215. 

  215. 				$sSQL = "UPDATE cart SET cartProdID='" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',cartProdPrice=" . $theprice . ",cartProdName='" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',cartQuantity=" . $quant . " WHERE cartID=" . $cartid;
    216. 

  216. 				mysql_query($sSQL) or print(mysql_error());
    217. 

  217. 				mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    218. 

  218. 			}else{
    219. 

  219. 				$sSQL = "INSERT INTO cart (cartSessionID,cartProdID,cartQuantity,cartCompleted,cartProdName,cartProdPrice,cartOrderID,cartDateAdded) VALUES (";
    220. 

  220. 				$sSQL .= "'" . $thesessionid . "',";
    221. 

  221. 				$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',";
    222. 

  222. 				$sSQL .= $quant . ",";
    223. 

  223. 				$sSQL .= "1,";
    224. 

  224. 				$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',";
    225. 

  225. 				$sSQL .= "'" . $theprice . "',";
    226. 

  226. 				$sSQL .= @$_POST["orderid"] . ",";
    227. 

  227. 				$sSQL .= "'" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "')";
    228. 

  228. 				mysql_query($sSQL) or print(mysql_error());
    229. 

  229. 				$cartid = mysql_insert_id();
    230. 

  230. 			}
    231. 

  231. 			if($cartid != ""){
    232. 

  232. 				$optprefix = "optn" . $idno . '_';
    233. 

  233. 				$prefixlen = strlen($optprefix);
    234. 

  234. 				foreach($_POST as $kk => $kkval){
    235. 

  235. 					if(substr($kk,0,$prefixlen)==$optprefix && trim($kkval) != ''){
    236. 

  236. 						$optidarr = split('\|', $kkval);
    237. 

  237. 						$optid = $optidarr[0];
    238. 

  238. 						if(@$_POST["v" . $kk] == ""){
    239. 

  239. 							$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)."," . $OWSP . "optPriceDiff,optWeightDiff,optType,optFlags FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    240. 

  240. 							$result = mysql_query($sSQL) or print(mysql_error());
    241. 

  241. 							if($rs = mysql_fetch_array($result)){
    242. 

  242. 								if(abs($rs["optType"]) != 3){
    243. 

  243. 									$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string($rs[getlangid("optName",32)]) . "',";
    244. 

  244. 									$sSQL .= $optidarr[1] . ",0)";
    245. 

  245. 								}else
    246. 

  246. 									$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','',0,0)";
    247. 

  247. 								mysql_query($sSQL) or print(mysql_error());
    248. 

  248. 							}
    249. 

  249. 							mysql_free_result($result);
    250. 

  250. 						}else{
    251. 

  251. 							$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)." FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    252. 

  252. 							$result = mysql_query($sSQL) or print(mysql_error());
    253. 

  253. 							$rs = mysql_fetch_array($result);
    254. 

  254. 							$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string(unstripslashes(trim(@$_POST["v" . $kk]))) . "',0,0)";
    255. 

  255. 							mysql_query($sSQL) or print(mysql_error());
    256. 

  256. 							mysql_free_result($result);
    257. 

  257. 						}
    258. 

  258. 					}
    259. 

  259. 				}
    260. 

  260. 			}
    261. 

  261. 		}
    262. 

  262. 	}
    263. 

  263. ?>
    264. 

  264. <script language="JavaScript" type="text/javascript">
    265. 

  265. <!--
    266. 

  266. setTimeout("history.go(-2);",1100);
    267. 

  267. // -->
    268. 

  268. </script>
    269. 

  269. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    270. 

  270.         <tr>
    271. 

  271.           <td width="100%">
    272. 

  272.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    273. 

  273. 			  <tr> 
    274. 

  274.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    275. 

  275.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    276. 

  276. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    277. 

  277. 			  </tr>
    278. 

  278. 			</table>
    279. 

  279. 		  </td>
    280. 

  280. 		</tr>
    281. 

  281. 	  </table>
    282. 

  282. <?php
    283. 

  283. }elseif(@$_GET["id"] != ""){
    284. 

  284. 	$statetaxrate=0;
    285. 

  285. 	$countrytaxrate=0;
    286. 

  286. 	$hsttaxrate=0;
    287. 

  287. 	$countryorder=0;
    288. 

  288. 	$sSQL = "SELECT ordID,ordName,ordAddress,ordAddress2,ordCity,ordState,ordZip,ordCountry,ordEmail,ordPhone,ordShipName,ordShipAddress,ordShipAddress2,ordShipCity,ordShipState,ordShipZip,ordShipCountry,ordPayProvider,ordAuthNumber,ordTransID,ordTotal,ordDate,ordStateTax,ordCountryTax,ordHSTTax,ordShipping,ordShipType,ordIP,ordAffiliate,ordDiscount,ordHandling,ordDiscountText,ordComLoc,ordExtra1,ordExtra2,ordAddInfo,ordCNum,ordStatusInfo,ordSupportInfo,order_changed,ordStatus,ord_cert_amt,ord_cert_id,ordPoApo,ordShipPoApo,ordEID FROM orders LEFT JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordID='" . $_GET["id"] . "'";
    289. 

  289. 	$result = mysql_query($sSQL) or print(mysql_error());
    290. 

  290. 	$alldata = mysql_fetch_array($result);
    291. 

  291. 	$alldata["ordDate"] = strtotime($alldata["ordDate"]);
    292. 

  292. 	mysql_free_result($result);
    293. 

  293. 	if($doedit){
    294. 

  294. 		print '<form method="post" name="editform" action="/admin/orderssz.php" onsubmit="return confirmedit()"><input type="hidden" name="orderid" value="' . $_GET["id"] . '" /><input type="hidden" name="doedit" value="true" />';
    295. 

  295. 		$overridecurrency=TRUE;
    296. 

  296. 		$orcsymbol="";
    297. 

  297. 		$orcdecplaces=2;
    298. 

  298. 		$orcpreamount=TRUE;
    299. 

  299. 		$orcdecimals=".";
    300. 

  300. 		$orcthousands="";
    301. 

  301. 	}
    302. 

  302. ?>
    303. 

  303. <script language="JavaScript" type="text/javascript" src="http://assets.ifrogz.com/lib/packages/scriptaculous-js/1.5.1/prototype.js"></script>
    304. 

  304. <script language="JavaScript" type="text/javascript" src="http://assets.ifrogz.com/lib/packages/scriptaculous-js/1.5.1/scriptaculous.js"></script>
    305. 

  305. <script language="JavaScript" type="text/javascript">
    306. 

  306. <!--
    307. 

  307. var newwin="";
    308. 

  308. var plinecnt=0;
    309. 

  309. function openemailpopup(id) {
    310. 

  310.   popupWin = window.open('/admin/popupemail.php?'+id,'emailpopup','menubar=no, scrollbars=no, width=300, height=250, directories=no,location=no,resizable=yes,status=no,toolbar=no')
    311. 

  311. }
    312. 

  312. function updateoptions(id){
    313. 

  313. 	prodid = document.getElementById('prodid'+id).value;
    314. 

  314. 	if(prodid != ''){
    315. 

  315. 		newwin = window.open('/admin/popupemail.php?prod='+prodid+'&index='+id,'updateopts','menubar=no, scrollbars=no, width=50, height=40, directories=no,location=no,resizable=yes,status=no,toolbar=no');
    316. 

  316. 	}
    317. 

  317. 	return(false);
    318. 

  318. }
    319. 

  319. function extraproduct(plusminus){
    320. 

  320. var productspan=document.getElementById('productspan');
    321. 

  321. if(plusminus=='+'){
    322. 

  322. productspan.innerHTML=productspan.innerHTML.replace(/<!--NEXTPRODUCTCOMMENT-->/,'<!--PLINE'+plinecnt+'--><tr><td valign="top"><input type="button" value="..." onclick="updateoptions('+(plinecnt+1000)+')">&nbsp;<input name="prodid'+(plinecnt+1000)+'" size="18" id="prodid'+(plinecnt+1000)+'"></td><td valign="top"><input type="text" id="prodname'+(plinecnt+1000)+'" name="prodname'+(plinecnt+1000)+'" size="24"></td><td><span id="optionsspan'+(plinecnt+1000)+'">-</span></td><td valign="top"><input type="text" id="quant'+(plinecnt+1000)+'" name="quant'+(plinecnt+1000)+'" size="5" value="1"></td><td valign="top"><input type="text" id="price'+(plinecnt+1000)+'" name="price'+(plinecnt+1000)+'" value="0" size="7"><br /><input type="hidden" id="optdiffspan'+(plinecnt+1000)+'" value="0"></td><td>&nbsp;</td></tr><!--PLINEEND'+plinecnt+'--><!--NEXTPRODUCTCOMMENT-->');
    323. 

  323. plinecnt++;
    324. 

  324. }else{
    325. 

  325. if(plinecnt>0){
    326. 

  326. plinecnt--;
    327. 

  327. var restr = '<!--PLINE'+plinecnt+'-->(.|\\n)+<!--PLINEEND'+plinecnt+'-->';
    328. 

  328. //alert(restr);
    329. 

  329. var re = new RegExp(restr);
    330. 

  330. productspan.innerHTML=productspan.innerHTML.replace(re,'');
    331. 

  331. }
    332. 

  332. }
    333. 

  333. }
    334. 

  334. function confirmedit(){
    335. 

  335. if(confirm('<?php print str_replace("'","\'",$yyChkRec)?>'))
    336. 

  336. 	return(true);
    337. 

  337. return(false);
    338. 

  338. }
    339. 

  339. 

  340. 

  341. function checkAIM(frm) {
    342. 

  342. 	if(frm.aim_type.selectedIndex==0) {
    343. 

  343. 		alert("Please choose a transaction type.");
    344. 

  344. 		frm.aim_type.focus();
    345. 

  345. 		return false;
    346. 

  346. 	}else if(frm.aim_txn=='') {
    347. 

  347. 		alert("A transaction number is required.");
    348. 

  348. 		frm.aim_txn.focus();
    349. 

  349. 		return false;
    350. 

  350. 	}else if(frm.aim_amt=='') {
    351. 

  351. 		alert("Please enter an amount.");
    352. 

  352. 		frm.aim_amt.focus();
    353. 

  353. 		return false;
    354. 

  354. 	}
    355. 

  355. 	
    356. 

  356. 	return true;
    357. 

  357. }
    358. 

  358. 

  359. function toggleTXN() {
    360. 

  360. 	if($('div_trans').style.display=='' || $('div_trans').style.display==undefined) {
    361. 

  361. 		//$('div_trans').style.display = 'none';
    362. 

  362. 		Effect.BlindUp('div_trans');
    363. 

  363. 		$('btn_add_txn').value = 'Credit or Void';
    364. 

  364. 	}else if($('div_trans').style.display=='none') {
    365. 

  365. 		//$('div_trans').style.display = '';
    366. 

  366. 		Effect.BlindDown('div_trans');
    367. 

  367. 		$('btn_add_txn').value = 'Hide Credit or Void';
    368. 

  368. 	}
    369. 

  369. }
    370. 

  370. 

  371. function toggleCharge() {
    372. 

  372. 	if($('div_charge').style.display=='' || $('div_charge').style.display==undefined) {
    373. 

  373. 		//$('div_charge').style.display = 'none';
    374. 

  374. 		Effect.BlindUp('div_charge');
    375. 

  375. 		$('btn_charge').value = 'Charge CC';
    376. 

  376. 	}else if($('div_charge').style.display=='none') {
    377. 

  377. 		//$('div_charge').style.display = '';
    378. 

  378. 		Effect.BlindDown('div_charge');
    379. 

  379. 		$('btn_charge').value = 'Hide Charge CC';
    380. 

  380. 	}
    381. 

  381. }
    382. 

  382. 

  383. function togglePrcAdd() {
    384. 

  384. 	if($('div_prc_add').style.display=='' || $('div_prc_add').style.display==undefined) {
    385. 

  385. 		//$('div_charge').style.display = 'none';
    386. 

  386. 		Effect.BlindUp('div_prc_add');
    387. 

  387. 		$('btn_prc_add').value = 'Add Price Adjustment';
    388. 

  388. 	}else if($('div_prc_add').style.display=='none') {
    389. 

  389. 		//$('div_charge').style.display = '';
    390. 

  390. 		Effect.BlindDown('div_prc_add');
    391. 

  391. 		$('btn_prc_add').value = 'Hide Price Adjustment';
    392. 

  392. 	}
    393. 

  393. }
    394. 

  394. 

  395. //-->
    396. 

  396. </script>
    397. 

  397. <style type="text/css">
    398. 

  398. a img{
    399. 

  399. 	border: 0;
    400. 

  400. }
    401. 

  401. </style>
    402. 

  402. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    403. 

  403.         <tr>
    404. 

  404.           <td width="100%">
    405. 

  405.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    406. 

  406. <?php		if($isprinter && @$invoiceheader != ""){ ?>
    407. 

  407. 			  <tr> 
    408. 

  408.                 <td colspan="6"><?php print $invoiceheader?></td>
    409. 

  409. 			  </tr>
    410. 

  410. <?php		} ?>
    411. 

  411. 			  <tr 	<? //if(!empty($alldata["ordEID"])) echo 'bgcolor="#FA6561"'?>> 
    412. 

  412.                 <td colspan="6" align="center"><strong><?php print $xxOrdNum . " " . $alldata["ordID"] . "<br /><br />" . date($dateformatstr, $alldata["ordDate"]) . " " . date("H:i", $alldata["ordDate"])?></strong></td>
    413. 

  413. 			  </tr>
    414. 

  414. <?php		if($isprinter && @$invoiceaddress != ""){ ?>
    415. 

  415. 			  <tr> 
    416. 

  416.                 <td colspan="6"><?php print $invoiceaddress?></td>
    417. 

  417. 			  </tr>
    418. 

  418. <?php		} ?>
    419. 

  419. <?php		if(trim(@$extraorderfield1)!=""){ ?>
    420. 

  420. 			<tr>
    421. 

  421. 			  <td width="23%" align="right"><strong><?php print $extraorderfield1 ?>:</strong></td>
    422. 

  422. 			  <td align="left" colspan="5"><?php print editfunc($alldata["ordExtra1"],"ordextra1",25)?></td>
    423. 

  423. 			</tr>
    424. 

  424. <?php		} ?>
    425. 

  425. 			<tr>
    426. 

  426. 			  <td width="23%" align="right"><strong><?php print $xxName?>:</strong></td>
    427. 

  427. 			  <td colspan="3" align="left"><?php print editfunc($alldata["ordName"],"name",25)?></td>
    428. 

  428. 			  <td width="25%" align="right">
    429. 

  429. 			  <strong><?php print $xxEmail?>:</strong></td>
    430. 

  430. 			  <td width="24%" align="left"><?php
    431. 

  431. 				if($isprinter || $doedit) print editfunc($alldata["ordEmail"],"email",25); else print '<a href="mailto:' . $alldata["ordEmail"] . '">' . $alldata["ordEmail"] . '</a>';?></td>
    432. 

  432. 			</tr>
    433. 

  433. 			<tr>
    434. 

  434. 			  <td align="right"><strong><?php print $xxAddress?>:</strong></td>
    435. 

  435. 			  <td colspan="3" align="left"<?php if(@$useaddressline2==TRUE) print ' colspan="3"'?>><?php print editfunc($alldata["ordAddress"],"address",25)?></td>
    436. 

  436. <?php	if(@$useaddressline2==TRUE){ ?>
    437. 

  437. 			</tr>
    438. 

  438. 			<tr>
    439. 

  439. 			  <td align="right"><strong><?php print $xxAddress2?>:</strong></td>
    440. 

  440. 			  <td colspan="3" align="left"><?php print editfunc($alldata["ordAddress2"],"address2",25)?></td>
    441. 

  441. <?php	} ?>
    442. 

  442. 			  <td align="right"><strong><?php print $xxCity?>:</strong></td>
    443. 

  443. 			  <td align="left"><?php print editfunc($alldata["ordCity"],"city",25)?></td>
    444. 

  444. 			</tr>
    445. 

  445. 			<tr>
    446. 

  446. 			  <td align="right"><strong><?php print $xxAllSta?>:</strong></td>
    447. 

  447. 			  <td align="left"><?php print editfunc($alldata["ordState"],"state",25)?></td>
    448. 

  448. 			  <td align="right"><strong>APO/PO:</strong></td>
    449. 

  449. 			  <td align="left"><input <?php if (!(strcmp($alldata["ordPoApo"],1))) {echo "checked=\"checked\"";} ?> <? if($doedit) echo ''; else echo 'disabled="disabled"'; ?> name="APO" type="checkbox" value="1" /></td>
    450. 

  450. 			  <td align="right"><strong><?php print $xxCountry?>:</strong></td>
    451. 

  451. 			  <td align="left"><?php
    452. 

  452. 			if($doedit){
    453. 

  453. 				$foundmatch=FALSE;
    454. 

  454. 				print '<select name="country" size="1">';
    455. 

  455. 				$sSQL = "SELECT countryName,countryTax,countryOrder FROM countries ORDER BY countryOrder DESC, countryName";
    456. 

  456. 				$result = mysql_query($sSQL) or print(mysql_error());
    457. 

  457. 				while($rs2 = mysql_fetch_array($result)){
    458. 

  458. 					print '<option value="' . str_replace('"','&quot;',$rs2["countryName"]) . '"';
    459. 

  459. 					if($alldata["ordCountry"]==$rs2["countryName"]){
    460. 

  460. 						print ' selected';
    461. 

  461. 						$foundmatch=TRUE;
    462. 

  462. 						$countrytaxrate=$rs2["countryTax"];
    463. 

  463. 						$countryorder=$rs2["countryOrder"];
    464. 

  464. 					}
    465. 

  465. 					print '>' . $rs2["countryName"] . "</option>\r\n";			}
    466. 

  466. 				mysql_free_result($result);
    467. 

  467. 				if(! $foundmatch) print '<option value="' . str_replace('"','&quot;',$alldata["ordCountry"]) . '" selected>' . $alldata["ordCountry"] . "</option>\r\n";
    468. 

  468. 				print '</select>';
    469. 

  469. 				if($countryorder==2){
    470. 

  470. 					$sSQL = "SELECT stateTax FROM states WHERE stateAbbrev='" . mysql_real_escape_string($alldata["ordState"]) . "'";
    471. 

  471. 					$result = mysql_query($sSQL) or print(mysql_error());
    472. 

  472. 					if($rs2 = mysql_fetch_array($result))
    473. 

  473. 						$statetaxrate = $rs2["stateTax"];
    474. 

  474. 				}
    475. 

  475. 				if($alldata["ordStateTax"]==0)$statetaxrate=0; 
    476. 

  476. 			}else
    477. 

  477. 				print $alldata["ordCountry"];?></td>
    478. 

  478. 			</tr>
    479. 

  479. 			<tr>
    480. 

  480. 			  <td align="right"><strong><?php print $xxZip?>:</strong></td>
    481. 

  481. 			  <td colspan="3" align="left"><?php print editfunc($alldata["ordZip"],"zip",15)?></td>
    482. 

  482. 			  <td align="right"><strong><?php print $xxPhone?>:</strong></td>
    483. 

  483. 			  <td align="left"><?php print editfunc($alldata["ordPhone"],"phone",25)?></td>
    484. 

  484. 			</tr>
    485. 

  485. <?php if(trim(@$extraorderfield2)!=""){ ?>
    486. 

  486. 			<tr>
    487. 

  487. 			  <td align="right"><strong><?php print @$extraorderfield2 ?>:</strong></td>
    488. 

  488. 			  <td align="left" colspan="5"><?php print editfunc($alldata["ordExtra2"],"ordextra2",25)?></td>
    489. 

  489. 			</tr>
    490. 

  490. <?php } ?>
    491. 

  491. <?php if(! $isprinter){ ?>
    492. 

  492. 			<tr>
    493. 

  493. 			  <td align="right"><strong>IP Address:</strong></td>
    494. 

  494. 			  <td colspan="3" align="left"><?php print editfunc($alldata["ordIP"],"ipaddress",15)?></td>
    495. 

  495. 			  <td align="right"><strong><?php print $yyAffili?>:</strong></td>
    496. 

  496. 			  <td align="left"><?php print editfunc($alldata["ordAffiliate"],"PARTNER",15)?></td>
    497. 

  497. 			</tr>
    498. 

  498. <?php }
    499. 

  499. 	  if(trim($alldata["ordDiscountText"])!=""){ ?>
    500. 

  500. 			<tr>
    501. 

  501. 			  <td align="right" valign="top"><strong><?php print $xxAppDs?>:</strong></td>
    502. 

  502. 			  <td align="left" colspan="5"><?php print editfunc($alldata["ordDiscountText"],"discounttext",25)?></td>
    503. 

  503. 			</tr>
    504. 

  504. <?php }
    505. 

  505. 	  if(trim($alldata["ordShipName"]) != "" || trim($alldata["ordShipAddress"]) != "" || trim($alldata["ordShipCity"]) != "" || $doedit){ ?>
    506. 

  506. 			<tr>
    507. 

  507. 			  <td align="center" colspan="6"><strong><?php print $xxShpDet?>.</strong></td>
    508. 

  508. 			</tr>
    509. 

  509. 			<tr>
    510. 

  510. 			  <td align="right"><strong><?php print $xxName?>:</strong></td>
    511. 

  511. 			  <td align="left" colspan="5"><?php print editfunc($alldata["ordShipName"],"sname",25)?></td>
    512. 

  512. 			</tr>
    513. 

  513. 			<tr>
    514. 

  514. 			  <td align="right"><strong><?php print $xxAddress?>:</strong></td>
    515. 

  515. 			  <td colspan="3" align="left"<?php if(@$useaddressline2==TRUE) print ' colspan="3"'?>><?php print editfunc($alldata["ordShipAddress"],"saddress",25)?></td>
    516. 

  516. <?php	if(@$useaddressline2==TRUE){ ?>
    517. 

  517. 			</tr>
    518. 

  518. 			<tr>
    519. 

  519. 			  <td align="right"><strong><?php print $xxAddress2?>:</strong></td>
    520. 

  520. 			  <td colspan="3" align="left"><?php print editfunc($alldata["ordShipAddress2"],"saddress2",25)?></td>
    521. 

  521. <?php	} ?>
    522. 

  522. 			  <td align="right"><strong><?php print $xxCity?>:</strong></td>
    523. 

  523. 			  <td align="left"><?php print editfunc($alldata["ordShipCity"],"scity",25)?></td>
    524. 

  524. 			</tr>
    525. 

  525. 			<tr>
    526. 

  526. 			  <td align="right"><strong><?php print $xxAllSta?>:</strong></td>
    527. 

  527. 			  <td align="left"><?php print editfunc($alldata["ordShipState"],"sstate",25)?></td>
    528. 

  528. 			  <td align="right"><strong>APO/PO:</strong></td>
    529. 

  529. 			  <td align="left"><input name="ShipAPO" type="checkbox" id="ShipAPO" value="1" <?php if (!(strcmp($alldata["ordShipPoApo"],1))) {echo "checked=\"checked\"";} ?> <? if($doedit) echo ''; else echo 'disabled="disabled"'; ?>  /></td>
    530. 

  530. 			  <td align="right"><strong><?php print $xxCountry?>:</strong></td>
    531. 

  531. 			  <td align="left"><?php
    532. 

  532. 			if($doedit){
    533. 

  533. 				if(trim($alldata["ordShipName"]) != "" || trim($alldata["ordShipAddress"]) != "") $usingshipcountry=TRUE; else $usingshipcountry=FALSE;
    534. 

  534. 				$foundmatch=FALSE;
    535. 

  535. 				print '<select name="scountry" size="1">';
    536. 

  536. 				$sSQL = "SELECT countryName,countryTax,countryOrder FROM countries ORDER BY countryOrder DESC, countryName";
    537. 

  537. 				$result = mysql_query($sSQL) or print(mysql_error());
    538. 

  538. 				while($rs2 = mysql_fetch_array($result)){
    539. 

  539. 					print '<option value="' . str_replace('"','&quot;',$rs2["countryName"]) . '"';
    540. 

  540. 					if($alldata["ordShipCountry"]==$rs2["countryName"]){
    541. 

  541. 						print ' selected';
    542. 

  542. 						$foundmatch=TRUE;
    543. 

  543. 						if($usingshipcountry) $countrytaxrate=$rs2["countryTax"];
    544. 

  544. 						$countryorder=$rs2["countryOrder"];
    545. 

  545. 					}
    546. 

  546. 					print '>' . $rs2["countryName"] . "</option>\r\n";			}
    547. 

  547. 				mysql_free_result($result);
    548. 

  548. 				if(! $foundmatch) print '<option value="' . str_replace('"','&quot;',$alldata["ordShipCountry"]) . '" selected>' . $alldata["ordShipCountry"] . "</option>\r\n";
    549. 

  549. 				print '</select>';
    550. 

  550. 				if($countryorder==2 && $usingshipcountry){
    551. 

  551. 					$sSQL = "SELECT stateTax FROM states WHERE stateName='" . mysql_real_escape_string($alldata["ordShipState"]) . "'";
    552. 

  552. 					$result = mysql_query($sSQL) or print(mysql_error());
    553. 

  553. 					if($rs2 = mysql_fetch_array($result))
    554. 

  554. 						$statetaxrate = $rs2["stateTax"];
    555. 

  555. 				}
    556. 

  556. 			}else
    557. 

  557. 				print $alldata["ordShipCountry"]?></td>
    558. 

  558. 			</tr>
    559. 

  559. 			<tr>
    560. 

  560. 			  <td align="right"><strong><?php print $xxZip?>:</strong></td>
    561. 

  561. 			  <td align="left" colspan="5"><?php print editfunc($alldata["ordShipZip"],"szip",15)?></td>
    562. 

  562. 			</tr>
    563. 

  563. <?php }
    564. 

  564. 	  if($alldata["ordShipType"] != "" || $alldata["ordComLoc"]>0 || $doedit){ ?>
    565. 

  565. 			<tr>
    566. 

  566. 			  <td align="right"><strong><?php print $xxShpMet?>:</strong></td>
    567. 

  567. 			  <td colspan="3" align="left"><?php print editfunc($alldata["ordShipType"],"shipmethod",25);
    568. 

  568. 									 if(! $doedit && ($alldata["ordComLoc"]&2)==2) print $xxWtIns?></td>
    569. 

  569. 			  <td align="right"><strong><?php print $xxCLoc?>:</strong></td>
    570. 

  570. 			  <td align="left"><?php	if($doedit){
    571. 

  571. 											print '<select name="commercialloc" size="1">';
    572. 

  572. 											print '<option value="N">' . $yyNo . '</option>';
    573. 

  573. 											print '<option value="Y"' . (($alldata["ordComLoc"]&1)==1 ? ' selected' : '') . '>' . $yyYes . '</option>';
    574. 

  574. 											print '</select>';
    575. 

  575. 										}else{
    576. 

  576. 											if(($alldata["ordComLoc"]&1)==1) print $yyYes; else print $yyNo;
    577. 

  577. 										}?></td>
    578. 

  578. 			</tr>
    579. 

  579. <?php	if($doedit){ ?>
    580. 

  580. 			<tr>
    581. 

  581. 			  <td align="right"><strong><?php print $xxShpIns?>:</strong></td>
    582. 

  582. 			  <td align="left" colspan="5"><?php
    583. 

  583. 										print '<select name="wantinsurance" size="1">';
    584. 

  584. 										print '<option value="N">' . $yyNo . '</option>';
    585. 

  585. 										print '<option value="Y"' . (($alldata["ordComLoc"]&2)==2 ? ' selected' : '') . '>' . $yyYes . '</option>';
    586. 

  586. 										print '</select>';
    587. 

  587. 			?></td>
    588. 

  588. 			</tr>
    589. 

  589. <?php	}
    590. 

  590. 	  }
    591. 

  591. 		$ordAuthNumber = trim($alldata["ordAuthNumber"]);
    592. 

  592. 		$ordTransID = trim($alldata["ordTransID"]);
    593. 

  593. 		if(! $isprinter && ($ordAuthNumber != "" || $ordTransID != "" || $doedit)){ ?>
    594. 

  594. 			<tr>
    595. 

  595. 			  <td align="right"><strong><?php print $yyAutCod?>:</strong></td>
    596. 

  596. 			  <td colspan="3" align="left"><?php print editfunc($ordAuthNumber,"ordAuthNumber",15) ?></td>
    597. 

  597. 			  <td align="right"><strong><?php print $yyTranID?>:</strong></td>
    598. 

  598. 			  <td align="left"><?php print editfunc($ordTransID,"ordTransID",15) ?></td>
    599. 

  599. 			</tr>
    600. 

  600. <?php	}
    601. 

  601. 

  602. 		// BOL#s ADDED BY CHAD JUL 27,06
    603. 

  603. 		$sql_bol = "SELECT * FROM bol WHERE ordID = " . $alldata["ordID"];
    604. 

  604. 		$res_bol = mysql_query($sql_bol) or print(mysql_error());
    605. 

  605. 		if(mysql_num_rows($res_bol) > 0) {
    606. 

  606. 			$row_bol = mysql_fetch_assoc($res_bol);
    607. 

  607. ?>
    608. 

  608. 			<tr>
    609. 

  609. 				<td align="right"><strong>Express BOL#:</strong></td>
    610. 

  610. 				<td colspan="3"><?=$row_bol['exBOL']?></td>
    611. 

  611. <?php
    612. 

  612. 			if(!empty($row_bol['smBOL'])) {
    613. 

  613. ?>
    614. 

  614. 				<td align="right"><strong>Smart Mail BOL#:</strong></td>
    615. 

  615. 				<td><?=$row_bol['smBOL']?></td>
    616. 

  616. <?php
    617. 

  617. 			}
    618. 

  618. 			if(!empty($row_bol['gmBOL'])) {
    619. 

  619. ?>
    620. 

  620. 				<td align="right"><strong>Global Mail BOL#:</strong></td>
    621. 

  621. 				<td><?=$row_bol['gmBOL']?></td>
    622. 

  622. <?php
    623. 

  623. 			}
    624. 

  624. ?>
    625. 

  625. 			</tr>
    626. 

  626. <?php
    627. 

  627. 		}
    628. 

  628. 		// ADD ENDED
    629. 

  629. 

  630. 		$ordAddInfo = Trim($alldata["ordAddInfo"]);
    631. 

  631. 		if($ordAddInfo != "" || $doedit){ ?>
    632. 

  632. 			<tr>
    633. 

  633. 			  <td align="right" valign="top"><strong><?php print $xxAddInf?>:</strong></td>
    634. 

  634. 			  <td align="left" colspan="5"><?php
    635. 

  635. 			if($doedit)
    636. 

  636. 				print '<textarea name="ordAddInfo" cols="50" rows="4" wrap=virtual>' . $ordAddInfo . '</textarea>';
    637. 

  637. 			else
    638. 

  638. 				print str_replace(array("\r\n","\n"),array("<br />","<br />"),$ordAddInfo); ?></td>
    639. 

  639. 			</tr>
    640. 

  640. <?php	}
    641. 

  641. if(! $isprinter){
    642. 

  642. 		if(! $doedit) print '<form method="post" action="/admin/orderssz.php"><input type="hidden" name="updatestatus" value="1" /><input type="hidden" name="orderid" value="' . @$_GET["id"] . '" />';
    643. 

  643. ?>			<tr>
    644. 

  644. 			  <td align="right" valign="top"><strong><?php print $yyStaInf?>:</strong></td>
    645. 

  645. 			  <td align="left" colspan="5"><?php print $alldata["ordStatusInfo"]?> </td>
    646. 

  646. 			</tr>
    647. 

  647. 			<? if($doedit) { ?>
    648. 

  648. 			<tr>
    649. 

  649. 			  <td align="right" valign="top"><strong><?php print $yySupInf?>:</strong></td>
    650. 

  650. 			  <td align="left" colspan="5"><textarea name="ordSupportInfo" cols="50" rows="4" wrap=virtual><?php print $alldata["ordSupportInfo"]?></textarea> <?php if(! $doedit) print '<input type="submit" value="' . $yyUpdate . '" />'?></td>
    651. 

  651. 			</tr>
    652. 

  652. 			<? } ?>
    653. 

  653. <?php	if(($alldata["ordPayProvider"]==3 || $alldata["ordPayProvider"]==13) && $alldata["ordAuthNumber"] != ""){ ?>
    654. 

  654. 			<tr>
    655. 

  655. 			  <td align="center" colspan="6">&nbsp;</td>
    656. 

  656. 			</tr>
    657. 

  657. <?php	}
    658. 

  658. 		if(! $doedit) print '</form>';
    659. 

  659. 	if((int)$alldata["ordPayProvider"]==10){ ?>
    660. 

  660. 			<tr>
    661. 

  661. 			  <td align="center" colspan="6"><hr width="50%">			  </td>
    662. 

  662. 			</tr>
    663. 

  663. <?php	if(@$_SERVER["HTTPS"] != "on" && (@$_SERVER["SERVER_PORT"] != "443") && @$nochecksslserver != TRUE){ ?>
    664. 

  664. 			<tr>
    665. 

  665. 			  <td align="center" colspan="6"><strong><font color="#FF0000">You do not appear to be viewing this page on a secure (https) connection. Credit card information cannot be shown.</font></strong></td>
    666. 

  666. 			</tr>
    667. 

  667. <?php	}else{
    668. 

  668. 			$ordCNum = $alldata["ordCNum"];
    669. 

  669. 			if($ordCNum != ""){
    670. 

  670. 				$cnumarr = "";
    671. 

  671. 				$encryptmethod = strtolower(@$encryptmethod);
    672. 

  672. 				if($encryptmethod=="none"){
    673. 

  673. 					$cnumarr = explode("&",$ordCNum);
    674. 

  674. 				}elseif($encryptmethod=="mcrypt"){
    675. 

  675. 					if(@$mcryptalg == "") $mcryptalg = MCRYPT_BLOWFISH;
    676. 

  676. 					$td = mcrypt_module_open($mcryptalg, '', 'cbc', '');
    677. 

  677. 					$thekey = @$ccencryptkey;
    678. 

  678. 					$thekey = substr($thekey, 0, mcrypt_enc_get_key_size($td));
    679. 

  679. 					$cnumarr = explode(" ", $ordCNum);
    680. 

  680. 					$iv = @$cnumarr[0];
    681. 

  681. 					$iv = @pack("H" . strlen($iv), $iv);
    682. 

  682. 					$ordCNum = @pack("H" . strlen(@$cnumarr[1]), @$cnumarr[1]);
    683. 

  683. 					mcrypt_generic_init($td, $thekey, $iv);
    684. 

  684. 					$cnumarr = explode("&", mdecrypt_generic($td, $ordCNum));
    685. 

  685. 					mcrypt_generic_deinit($td);
    686. 

  686. 					mcrypt_module_close($td);
    687. 

  687. 				}else{
    688. 

  688. 					print '<tr><td colspan="4">WARNING: $encryptmethod is not set. Please see http://www.ecommercetemplates.com/phphelp/ecommplus/parameters.asp#encryption</td></tr>';
    689. 

  689. 				}
    690. 

  690. 			} ?>
    691. 

  691. 			<tr>
    692. 

  692. 			  <td align="right" colspan="4"><strong><?php print $xxCCName?>:</strong></td>
    693. 

  693. 			  <td align="left" colspan="2"><?php
    694. 

  694. 			if(@$encryptmethod!=""){
    695. 

  695. 					if(is_array(@$cnumarr)) print URLDecode(@$cnumarr[4]);
    696. 

  696. 			} ?></td>
    697. 

  697. 			</tr>
    698. 

  698. 			<tr>
    699. 

  699. 			  <td align="right" colspan="4"><strong><?php print $yyCarNum?>:</strong></td>
    700. 

  700. 			  <td align="left" colspan="2"><?php
    701. 

  701. 			if($ordCNum != ""){
    702. 

  702. 				if(is_array($cnumarr)) print $cnumarr[0];
    703. 

  703. 			}else{
    704. 

  704. 				print "(no data)";
    705. 

  705. 			} ?></td>
    706. 

  706. 			</tr>
    707. 

  707. 			<tr>
    708. 

  708. 			  <td align="right" colspan="4"><strong><?php print $yyExpDat?>:</strong></td>
    709. 

  709. 			  <td align="left" colspan="2"><?php
    710. 

  710. 			if(@$encryptmethod!=""){
    711. 

  711. 					if(is_array(@$cnumarr)) print @$cnumarr[1];
    712. 

  712. 			} ?></td>
    713. 

  713. 			</tr>
    714. 

  714. 			<tr>
    715. 

  715. 			  <td align="right" colspan="4"><strong>CVV Code:</strong></td>
    716. 

  716. 			  <td align="left" colspan="2"><?php
    717. 

  717. 			if(@$encryptmethod!=""){
    718. 

  718. 					if(is_array(@$cnumarr)) print @$cnumarr[2];
    719. 

  719. 			} ?></td>
    720. 

  720. 			</tr>
    721. 

  721. 			<tr>
    722. 

  722. 			  <td align="right" colspan="4"><strong>Issue Number:</strong></td>
    723. 

  723. 			  <td align="left" colspan="2"><?php
    724. 

  724. 			if(@$encryptmethod!=""){
    725. 

  725. 					if(is_array(@$cnumarr)) print @$cnumarr[3];
    726. 

  726. 			} ?></td>
    727. 

  727. 			</tr>
    728. 

  728. <?php		if($ordCNum != "" && !$doedit){ ?>
    729. 

  729. 		  <form method=POST action="/admin/orderssz.php?id=<?php print $_GET["id"]?>">
    730. 

  730. 			<input type="hidden" name="delccdets" value="<?php print $_GET["id"]?>" />
    731. 

  731. 			<tr>
    732. 

  732. 			  <td align="center" colspan="6"><input type=submit value="<?php print $yyDelCC?>" /></td>
    733. 

  733. 			</tr>
    734. 

  734. 		  </form>
    735. 

  735. <?php		}
    736. 

  736. 		}
    737. 

  737. 	}
    738. 

  738. } // isprinter ?>
    739. 

  739. 			<tr>
    740. 

  740. 			  <td align="center" colspan="6">&nbsp;<br /></td>
    741. 

  741. 			</tr>
    742. 

  742. 		  </table>
    743. 

  743. <span id="productspan">
    744. 

  744. 		  <table width="100%" border="1" cellspacing="0" cellpadding="4" bordercolor="#999999" style="border-collapse: collapse">
    745. 

  745. 			<tr>
    746. 

  746. 			  <td><strong><?php print $xxPrId?></strong></td>
    747. 

  747. 			  <td><strong><?php print $xxPrNm?></strong></td>
    748. 

  748. 			  <td><strong><?php print $xxPrOpts?></strong></td>
    749. 

  749. 			  <td><strong><?php print $xxQuant?></strong></td>
    750. 

  750. 			  <td><strong><?php if($doedit) print $xxUnitPr; else print $xxPrice?></strong></td>
    751. 

  751. <?php	if($doedit) print '<td align="center"><strong>DEL</strong></td>' ?>
    752. 

  752. 			</tr>
    753. 

  753. <?php
    754. 

  754. 	$totoptpricediff = 0;
    755. 

  755. 	if(mysql_num_rows($allorders)>0){
    756. 

  756. 		$totoptpricediff = 0;
    757. 

  757. 		$rowcounter=0;
    758. 

  758. 		while($rsOrders = mysql_fetch_assoc($allorders)){
    759. 

  759. 			$optpricediff = 0;
    760. 

  760. ?>
    761. 

  761. 			<tr>
    762. 

  762. 			  <td valign="top" nowrap><?php if($doedit) print '<input type="button" value="..." onclick="updateoptions(' . $rowcounter . ')">&nbsp;<input type="hidden" name="cartid' . $rowcounter . '" value="' . str_replace('"','&quot;',$rsOrders["cartID"]) . '" />'?><strong><?php print editfunc($rsOrders["cartProdId"],'prodid' . $rowcounter,18)?></strong></td>
    763. 

  763. 			  <td valign="top">
    764. 

  764. 			  	<?php print editfunc($rsOrders["cartProdName"],'prodname' . $rowcounter,24)?><br />
    765. 

  765. 				<? 
    766. 

  766. 				$sql_cert="SELECT cert_id,cert_code FROM certificates WHERE cert_order_id=".$_GET["id"]." AND cert_prod_id='".$rsOrders["cartProdId"]."'";
    767. 

  767. 				//echo $sql_cert;
    768. 

  768. 				$result_cert=mysql_query($sql_cert);
    769. 

  769. 				if(mysql_num_rows($result_cert)>0) {
    770. 

  770. 					while($row_cert=mysql_fetch_assoc($result_cert)){?>					
    771. 

  771. 					<stong>(<?=$row_cert['cert_code']?>)</strong> <a href="/admin/certs.php?mode=1&amp;sbcode=<?=$row_cert['cert_id']?>">view</a> | <a href="/admin/certs.php?mode=2&amp;sbcode=<?=$row_cert['cert_id']?>">history</a><br />
    772. 

  772. 				<? } 
    773. 

  773. 				}?>	
    774. 

  774. 				<? 
    775. 

  775. 				$sql_down="SELECT * FROM digitaldownloads WHERE orderID=".$_GET["id"]." AND type='".$rsOrders["cartProdId"]."'";
    776. 

  776. 				//echo $sql_cert;
    777. 

  777. 				$result_down=mysql_query($sql_down);
    778. 

  778. 				if(mysql_num_rows($result_down)>0) {?>
    779. 

  779. 					<ol style="margin:2px;">
    780. 

  780. 					<? while($row_down=mysql_fetch_assoc($result_down)){?>					
    781. 

  781. 					
    782. 

  782. 					<li style="margin:1px; font-weight:bold;">License ID: <?=$row_down['licenseID']?><br />
    783. 

  783. 					Password: <?=$row_down['password']?></li>
    784. 

  784. 				<? 	  } ?>
    785. 

  785. 					</ol>
    786. 

  786. 				<? }?>				
    787. 

  787. 			  </td>
    788. 

  788. 			  <td valign="top"><?php
    789. 

  789. 			if($doedit) print '<span id="optionsspan' . $rowcounter . '">';
    790. 

  790. 			$sSQL = "SELECT coOptGroup,coCartOption,coPriceDiff,coOptID,optGroup,coExtendShipping FROM cartoptions LEFT JOIN options ON cartoptions.coOptID=options.optID WHERE coCartID=" . $rsOrders["cartID"] . " ORDER BY coID";
    791. 

  791. 			$result = mysql_query($sSQL) or print(mysql_error());
    792. 

  792. 			if(mysql_num_rows($result) > 0){
    793. 

  793. 				if($doedit) print '<table border="0" cellspacing="0" cellpadding="1" width="100%">';
    794. 

  794. 				while($rs2 = mysql_fetch_array($result)){
    795. 

  795. 					if($doedit){
    796. 

  796. 						print '<tr><td align="right"><strong>' . $rs2["coOptGroup"] . ':</strong></td><td>';
    797. 

  797. 						if(is_null($rs2["optGroup"])){
    798. 

  798. 							print 'xxxxxx';
    799. 

  799. 						}else{
    800. 

  800. 							$sSQL="SELECT optID," . getlangid("optName",32) . ",optPriceDiff,optType,optFlags,optStock,optPriceDiff AS optDims FROM options INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optGroup=" . $rs2["optGroup"] . ' ORDER BY optID';
    801. 

  801. 							$result2 = mysql_query($sSQL) or print(mysql_error());
    802. 

  802. 							if($rsl = mysql_fetch_assoc($result2)){
    803. 

  803. 								if(abs($rsl["optType"])==2){
    804. 

  804. 									print '<select onchange="dorecalc(true)" name="optn' . $rowcounter . '_' . $rs2["coOptID"] . '" id="optn' . $rowcounter . '_' . $rs2["coOptID"] . '" size="1">';
    805. 

  805. 									do {
    806. 

  806. 										print '<option value="' . $rsl["optID"] . "|" . (($rsl["optFlags"] & 1) == 1 ? ($rsOrders["cartProdPrice"]*$rsl["optPriceDiff"])/100.0 : $rsl["optPriceDiff"]) . '"';
    807. 

  807. 										if($rsl["optID"]==$rs2["coOptID"]) print ' selected';
    808. 

  808. 										print '>' . $rsl[getlangid("optName",32)];
    809. 

  809. 										if((double)$rsl["optPriceDiff"] != 0){
    810. 

  810. 											print ' ';
    811. 

  811. 											if((double)$rsl["optPriceDiff"] > 0) print '+';
    812. 

  812. 											if(($rsl["optFlags"] & 1) == 1)
    813. 

  813. 												print number_format(($rsOrders["cartProdPrice"]*$rsl["optPriceDiff"])/100.0,2,'.','');
    814. 

  814. 											else
    815. 

  815. 												print number_format($rsl["optPriceDiff"],2,'.','');
    816. 

  816. 										}
    817. 

  817. 										print '</option>';
    818. 

  818. 									} while($rsl = mysql_fetch_array($result2));
    819. 

  819. 									print '</select>';
    820. 

  820. 								}else{
    821. 

  821. 									print "<input type='hidden' name='optn" . $rowcounter . '_' . $rs2["coOptID"] . "' value='" . $rsl["optID"] . "' /><textarea wrap='virtual' name='voptn" . $rowcounter . '_' . $rs2["coOptID"] . "' id='voptn". $rowcounter. '_' . $rs2["coOptID"] . "' cols='30' rows='3'>";
    822. 

  822. 									print $rs2["coCartOption"] . '</textarea>';
    823. 

  823. 								}
    824. 

  824. 							}
    825. 

  825. 						}
    826. 

  826. 						print "</td></tr>";
    827. 

  827. 					}else{						
    828. 

  828. 						$extend_shipping='';
    829. 

  829. 						if(!empty($rs2["coExtendShipping"])) $extend_shipping=' <span style="color:#FF0000;font-weight:bold;">(This option increases shipping time by '.$rs2["coExtendShipping"]. ' days)</span>';
    830. 

  830. 						print '<strong>' . $rs2["coOptGroup"] . ':</strong> ' . str_replace(array("\r\n","\n"),array("<br />","<br />"),$rs2["coCartOption"]) .$cert_code. $extend_shipping . '<br />';
    831. 

  831. 					}
    832. 

  832. 					if($doedit)
    833. 

  833. 						$optpricediff += $rs2["coPriceDiff"];
    834. 

  834. 					else
    835. 

  835. 						$rsOrders["cartProdPrice"] += $rs2["coPriceDiff"];
    836. 

  836. 				}
    837. 

  837. 				if($doedit) print '</table>';
    838. 

  838. 			}else{
    839. 

  839. 				print '-';
    840. 

  840. 			}
    841. 

  841. 			mysql_free_result($result);
    842. 

  842. 			if($doedit) print '</span>' ?></td>
    843. 

  843. 			  <td valign="top"><?php print editfunc($rsOrders["cartQuantity"],'quant' . $rowcounter . '" onchange="dorecalc(true)',5)?></td>
    844. 

  844. 			  <td valign="top"><?php if($doedit) print editnumeric($rsOrders["cartProdPrice"],'price' . $rowcounter . '" onchange="dorecalc(true)',7); else print FormatEuroCurrency($rsOrders["cartProdPrice"]*$rsOrders["cartQuantity"])?>
    845. 

  845. <?php				if($doedit){
    846. 

  846. 						print '<input type="hidden" id="optdiffspan' . $rowcounter . '" value="' . $optpricediff . '">';
    847. 

  847. 						$totoptpricediff += ($optpricediff*$rsOrders["cartQuantity"]);
    848. 

  848. 					}
    849. 

  849. 			?></td>
    850. 

  850. <?php		if($doedit) print '<td align="center"><input type="checkbox" name="del_' . $rowcounter . '" id="del_' . $rowcounter . '" value="yes" /></td>' ?>
    851. 

  851. 			</tr>
    852. 

  852. <?php		$rowcounter++;
    853. 

  853. 		}
    854. 

  854. 	}
    855. 

  855. ?>
    856. 

  856. <!--NEXTPRODUCTCOMMENT-->
    857. 

  857. <?php if($doedit){ ?>
    858. 

  858. 			<tr>
    859. 

  859. 			  <td align="right" colspan="4">
    860. 

  860. 				<table width="100%" border="0" cellspacing="0" cellpadding="0">
    861. 

  861. 				  <tr>
    862. 

  862. 					<td align="center"><?php if($doedit) print '<input style="width:30px;" type="button" value="-" onclick="extraproduct(\'-\')"> ' . $yyMoProd . ' <input style="width:30px;" type="button" value="+" onclick="extraproduct(\'+\')"> &nbsp; <input type="button" value="' . $yyRecal . '" onclick="dorecalc(false)">'?></td>
    863. 

  863. 					<td align="right"><strong>Options Total:</strong></td>
    864. 

  864. 				  </tr>
    865. 

  865. 				</table></td>
    866. 

  866. 			  <td align="left" colspan="2"><span id="optdiffspan"><?php print number_format($totoptpricediff, 2, '.', '')?></span></td>
    867. 

  867. 			</tr>
    868. 

  868. <?php } ?>
    869. 

  869. 

  870. 			<tr>
    871. 

  871. 			  <td align="right" colspan="4"><strong><?php print $xxOrdTot?>:</strong></td>
    872. 

  872. 			  <td align="left"><div id="ordTot"><?php echo sprintf("%.2f",$alldata["ordTotal"]); ?></div><input name="ordtotal" id="ordtotal" type="hidden" value="<?php echo $alldata["ordTotal"] ?>" /></td>
    873. 

  873. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    874. 

  874. 			</tr>
    875. 

  875. 			<?php
    876. 

  876. 	$runTot = $alldata["ordTotal"];
    877. 

  877. 	$sql = "SELECT * FROM price_adj WHERE ordID = " . $_GET['id'] . " ORDER BY ordering";
    878. 

  878. 	$res = mysql_query($sql) or print(mysql_error());
    879. 

  879. 	if(mysql_num_rows($res) > 0) {
    880. 

  880. 		$k=1;
    881. 

  881. 		$prcTot = 0;
    882. 

  882. ?>
    883. 

  883. 			<tr>
    884. 

  884. 				<td>&nbsp;</td>
    885. 

  885. 				<td>&nbsp;</td>
    886. 

  886. 				<td>&nbsp;</td>
    887. 

  887. 				<td>&nbsp;</td>
    888. 

  888. 				<td>&nbsp;</td>
    889. 

  889. 			</tr>
    890. 

  890. <?php
    891. 

  891. 		while($row=mysql_fetch_assoc($res)) {
    892. 

  892. 			$price = 0;
    893. 

  893. 			$disp_price = 0;
    894. 

  894. 			$amount = '';
    895. 

  895. 			
    896. 

  896. 			if($row['type'] == 'credit') {
    897. 

  897. 				if($row['amt_type'] == 'percentage') {
    898. 

  898. 					$price = $runTot * ($row['amt'] * .01);
    899. 

  899. 					$runTot -= $price;
    900. 

  900. 					$prcTot -= $price;
    901. 

  901. 					$disp_price = '-'.(int)$row['amt'].'%';
    902. 

  902. 					$amount = '-'.money_format("%!.2n",$price);
    903. 

  903. 				}else{
    904. 

  904. 					$price = '$-'.money_format("%!.2n",$row['amt']);
    905. 

  905. 					$runTot -= $row['amt'];
    906. 

  906. 					$prcTot -= $row['amt'];
    907. 

  907. 					$disp_price = $price;
    908. 

  908. 					$amount = '-'.money_format("%!.2n",$row['amt']);
    909. 

  909. 				}
    910. 

  910. 			}else{
    911. 

  911. 				if($row['amt_type'] == 'percentage') {
    912. 

  912. 					$price = $runTot * ($row['amt'] * .01);
    913. 

  913. 					$runTot += $price;
    914. 

  914. 					$prcTot += $price;
    915. 

  915. 					$disp_price = (int)$row['amt'].'%';
    916. 

  916. 					$amount = money_format("%.2n",$price);
    917. 

  917. 				}else{
    918. 

  918. 					$price = money_format("%.2n",$row['amt']);
    919. 

  919. 					$runTot += $row['amt'];
    920. 

  920. 					$prcTot += $row['amt'];
    921. 

  921. 					$disp_price = $price;
    922. 

  922. 					$amount = money_format("%.2n",$row['amt']);
    923. 

  923. 				}
    924. 

  924. 			}
    925. 

  925. ?>
    926. 

  926. 			<tr>
    927. 

  927. 				<td colspan="3" style="font-weight: bold; text-align: right">Price Adjustment <?=$k?>:</td>
    928. 

  928. 				<td align="left"<?=(strstr($disp_price,"-"))?' style="color: red"':''?>><?=$disp_price?></td>
    929. 

  929. 				<td align="left"<?=(strstr($disp_price,"-"))?' style="color: red"':''?>><?=$amount?></td>
    930. 

  930. 			</tr>
    931. 

  931. <?php
    932. 

  932. 			$k++;
    933. 

  933. 		}
    934. 

  934. ?>
    935. 

  935. 			<tr>
    936. 

  936. 				<td>&nbsp;</td>
    937. 

  937. 				<td>&nbsp;</td>
    938. 

  938. 				<td>&nbsp;</td>
    939. 

  939. 				<td>&nbsp;</td>
    940. 

  940. 				<td>&nbsp;</td>
    941. 

  941. 			</tr>
    942. 

  942. <?php
    943. 

  943. 	}
    944. 

  944. ?>
    945. 

  945. <?php if((double)$alldata["ordShipping"]!=0.0 || $doedit){ ?>
    946. 

  946. 			<tr>
    947. 

  947. 			  <td align="right" colspan="4"><strong><?php print $xxShippg?>:</strong></td>
    948. 

  948. 			  <td align="left"><?php print editnumeric($alldata["ordShipping"],"ordShipping",7)?></td>
    949. 

  949. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    950. 

  950. 			</tr>
    951. 

  951. <?php }
    952. 

  952. 	  if((double)$alldata["ordHandling"]!=0.0 || $doedit){ ?>
    953. 

  953. 			<tr>
    954. 

  954. 			  <td align="right" colspan="4"><strong><?php print $xxHndlg?>:</strong></td>
    955. 

  955. 			  <td align="left"><?php print editnumeric($alldata["ordHandling"],"ordHandling",7)?></td>
    956. 

  956. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    957. 

  957. 			</tr>
    958. 

  958. <?php }
    959. 

  959. 	  if((double)$alldata["ordDiscount"]!=0.0 || $doedit){ ?>
    960. 

  960. 			<tr>
    961. 

  961. 			  <td align="right" colspan="4"><strong><?php print $xxDscnts?>:</strong></td>
    962. 

  962. 			  <td align="left"><font color="#FF0000"><?php print editnumeric($alldata["ordDiscount"],"ordDiscount",7)?></font></td>
    963. 

  963. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    964. 

  964. 			</tr>
    965. 

  965. <?php }
    966. 

  966. 	  if((double)$alldata["ord_cert_amt"]!=0.0 || $doedit){ 
    967. 

  967. 			$sqlcert="SELECT cert_code FROM certificates WHERE cert_id=".$alldata["ord_cert_id"];
    968. 

  968. 			$resultcert=mysql_query($sqlcert);
    969. 

  969. 			$rowcert=mysql_fetch_assoc($resultcert);
    970. 

  970. 			?>
    971. 

  971. 			<tr>
    972. 

  972. 			  <td align="right" colspan="4"><strong><?='('.$rowcert["cert_code"].')'?> <?php print $xxGCerts?>:</strong></td>
    973. 

  973. 			  <td align="left"><font color="#FF0000"><?php print editnumeric($alldata["ord_cert_amt"],"ord_cert_amt",7)?></font></td>
    974. 

  974. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    975. 

  975. 			</tr>
    976. 

  976. <?php }
    977. 

  977. 	  if((double)$alldata["ordStateTax"]!=0.0 || $doedit){ ?>
    978. 

  978. 			<tr>
    979. 

  979. 			  <td align="right" colspan="4"><strong><?php print $xxStaTax?>:</strong></td>
    980. 

  980. 			  <td align="left"><?php print editnumeric($alldata["ordStateTax"],"ordStateTax",7)//$alldata["ordStateTax"]?></td>
    981. 

  981. <?php		if($doedit) print '<td align="center" nowrap><input type="text" name="staterate" id="staterate" size="1" value="' . $statetaxrate . '">%</td>' ?>
    982. 

  982. 			</tr>
    983. 

  983. <?php }
    984. 

  984. 	  if((double)$alldata["ordCountryTax"]!=0.0 || $doedit){ ?>
    985. 

  985. 			<tr>
    986. 

  986. 			  <td align="right" colspan="4"><strong><?php print $xxCntTax?>:</strong></td>
    987. 

  987. 			  <td align="left"><?php print editnumeric($alldata["ordCountryTax"],"ordCountryTax",7)?></td>
    988. 

  988. <?php		if($doedit) print '<td align="center" nowrap><input type="text" name="countryrate" id="countryrate" size="1" value="' . $countrytaxrate . '">%</td>' ?>
    989. 

  989. 			</tr>
    990. 

  990. <?php }
    991. 

  991. 	  if((double)$alldata["ordHSTTax"]!=0.0 || ($doedit && @$canadataxsystem)){ ?>
    992. 

  992. 			<tr>
    993. 

  993. 			  <td align="right" colspan="4"><strong><?php print $xxHST?>:</strong></td>
    994. 

  994. 			  <td align="left"><?php print editnumeric($alldata["ordHSTTax"],"ordHSTTax",7)?></td>
    995. 

  995. <?php		if($doedit) print '<td align="center" nowrap><input type="text" name="hstrate" id="hstrate" size="1" value="' . $hsttaxrate . '">%</td>' ?>
    996. 

  996. 			</tr>
    997. 

  997. <?php } ?>
    998. 

  998. 			<tr>
    999. 

  999. 			  <td align="right" colspan="4"><strong><?php print $xxGndTot?>:</strong></td>
    1000. 

  1000. 			  <td align="left"><span id="grandtotalspan"><?php print FormatEuroCurrency(($alldata["ordTotal"]+$alldata["ordStateTax"]+$alldata["ordCountryTax"]+$alldata["ordHSTTax"]+$alldata["ordShipping"]+$alldata["ordHandling"]+$prcTot)-$alldata["ordDiscount"]-$alldata["ord_cert_amt"])?></span></td>
    1001. 

  1001. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1002. 

  1002. 			</tr>
    1003. 

  1003. 	  </table>
    1004. 

  1004. </span>
    1005. 

  1005. 		  </td>
    1006. 

  1006. 		</tr>
    1007. 

  1007. <?php	if($isprinter && @$invoicefooter != ""){ ?>
    1008. 

  1008. 		<tr> 
    1009. 

  1009.           <td width="100%"><?php print $invoicefooter?></td>
    1010. 

  1010. 		</tr>
    1011. 

  1011. <?php	}elseif($doedit){ ?>
    1012. 

  1012. 		<tr> 
    1013. 

  1013.           <td align="center" width="100%">&nbsp;<br /><input type="submit" value="<?php print $yyUpdate?>" /><br />&nbsp;</td>
    1014. 

  1014. 		</tr>
    1015. 

  1015. <?php	} ?>
    1016. 

  1016. 	  </table>
    1017. 

  1017. <?php
    1018. 

  1018. 	if($doedit) print '</form>';
    1019. 

  1019. 	if($doedit){
    1020. 

  1020. 	// ADDED by Chad Jun-06-06
    1021. 

  1021. 	// PRICE ADJUSTMENTS
    1022. 

  1022. ?>
    1023. 

  1023. 	
    1024. 

  1024. 	<h2><a name="prc_adj"></a>Price Adjustments</h2>
    1025. 

  1025. 	
    1026. 

  1026. <?php
    1027. 

  1027. 	if(!empty($_GET['adj_err'])) {
    1028. 

  1028. ?>
    1029. 

  1029. 		<div style="margin: 5px auto; color: #FF0000; font-weight: bold; text-align: center"><?=$_GET['adj_err']?></div>
    1030. 

  1030. <?php
    1031. 

  1031. 	}elseif(!empty($_GET['adj_msg'])) {
    1032. 

  1032. ?>
    1033. 

  1033. 		<div style="margin: 5px auto; color: #009900; font-weight: bold; text-align: center"><?=$_GET['adj_msg']?></div>
    1034. 

  1034. <?php
    1035. 

  1035. 	}
    1036. 

  1036. ?>
    1037. 

  1037. 	<table width="95%" cellpadding="3" cellspacing="0" border="1" style="margin: 0 auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    1038. 

  1038. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    1039. 

  1039. 			<th width="60" style="text-align: center">Type</th>
    1040. 

  1040. 			<th width="80" style="text-align: center">Amount Type</th>
    1041. 

  1041. 			<th width="80" style="text-align: center">Amount</th>
    1042. 

  1042. 			<th width="150" style="text-align: center">Date</th>
    1043. 

  1043. 			<th>Note</th>
    1044. 

  1044. <?php
    1045. 

  1045. if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    1046. 

  1046. ?>
    1047. 

  1047. 			<th width="28">Edit</th>
    1048. 

  1048. 			<th width="28">Delete</th>
    1049. 

  1049. 			<th width="28">Move Up</th>
    1050. 

  1050. 			<th width="28">Move Down</th>
    1051. 

  1051. <?php
    1052. 

  1052. }
    1053. 

  1053. ?>
    1054. 

  1054. 		</tr>
    1055. 

  1055. <?php
    1056. 

  1056. 	$sql = "SELECT * FROM price_adj WHERE ordID = " . $_GET["id"] . " ORDER BY ordering";
    1057. 

  1057. 	$res = mysql_query($sql) or print(mysql_error());
    1058. 

  1058. 	
    1059. 

  1059. 	$num_rows = mysql_num_rows($res);
    1060. 

  1060. 	if($num_rows > 0) {
    1061. 

  1061. 		$j=0;
    1062. 

  1062. 		while($row=mysql_fetch_assoc($res)) {
    1063. 

  1063. ?>
    1064. 

  1064. 		<tr<?=($j%0==0?'':' style="background-color: #E6E9F5"')?>>
    1065. 

  1065. 			<td style="text-align: center"><?=$row['type']?></td>
    1066. 

  1066. 			<td style="text-align: center"><?=$row['amt_type']?></td>
    1067. 

  1067. 			<td style="text-align: right"><?=$row['amt']?></td>
    1068. 

  1068. 			<td style="text-align: left"><?=date("n/j/Y g:i a",strtotime($row['date']))?></td>
    1069. 

  1069. 			<td style="text-align: left"><?=$row['note']?></td>
    1070. 

  1070. <?php
    1071. 

  1071. if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    1072. 

  1072. ?>
    1073. 

  1073. 			<td style="text-align: center"><a href="/admin/editprcadj.php?pa_id=<?=$row['id']?>&action=edit" onclick="window.open(this.href,'edit_txn','left=700,top=100,width=550,height=150,toolbar=0'); return false;"><img src="/lib/images/misc/edit.gif" height="24" width="24" /></a></td>
    1074. 

  1074. 			<td style="text-align: center"><a href="/admin/editprcadj.php?pa_id=<?=$row['id']?>&action=delete" onclick="window.open(this.href,'edit_txn','left=700,top=100,width=550,height=150,toolbar=0'); return false;"><img src="/lib/images/misc/delete.gif" width="24" height="24" /></a></td>
    1075. 

  1075. 			<td style="text-align: center"><? if($row['ordering']!=1){?><a href="/admin/mvprcadj.php?pa_id=<?=$row['id']?>&pa_ordID=<?=$row['ordID']?>&position=<?=$row['ordering']?>&action=moveup" onclick=""><img src="/lib/images/misc/arrow_up.png" width="24" height="24" /></a><? } ?></td>
    1076. 

  1076. 			<td style="text-align: center"><? if($row['ordering']!=$num_rows){?><a href="/admin/mvprcadj.php?pa_id=<?=$row['id']?>&pa_ordID=<?=$row['ordID']?>&position=<?=$row['ordering']?>&action=movedown" onclick=""><img src="/lib/images/misc/arrow_down.png" width="24" height="24" /></a><? } ?></td>
    1077. 

  1077. <?php
    1078. 

  1078. }
    1079. 

  1079. ?>
    1080. 

  1080. 		</tr>
    1081. 

  1081. <?php
    1082. 

  1082. 			$j++;
    1083. 

  1083. 		}
    1084. 

  1084. 	}else{
    1085. 

  1085. ?>
    1086. 

  1086. 		<tr>
    1087. 

  1087. 			<td colspan="9" style="text-align: center; font-weight: bold">No Price Adjustments Found</td>
    1088. 

  1088. 		</tr>
    1089. 

  1089. <?php
    1090. 

  1090. 	}
    1091. 

  1091. ?>
    1092. 

  1092. 	</table>
    1093. 

  1093. 	
    1094. 

  1094. <?php
    1095. 

  1095. if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    1096. 

  1096. ?>
    1097. 

  1097. 	
    1098. 

  1098. 	<input type="button" id="btn_prc_add" value="Add Price Adjustment" onclick="togglePrcAdd();" />
    1099. 

  1099. 	
    1100. 

  1100. 	<div id="div_prc_add" style="display: none">
    1101. 

  1101. 		<form id="adj_frm" name="adj_frm" method="post" action="adminorderssz_process.php">
    1102. 

  1102. 		<table cellpadding="3" cellspacing="0" border="1" style="margin: 0 auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    1103. 

  1103. 			<tr style="background-color: #BFC9E0; color: #194C7F">
    1104. 

  1104. 				<td colspan="2" style="text-align: center; font-weight: bold; font-size: 14px">Add Price Adjustment</td>
    1105. 

  1105. 			</tr>
    1106. 

  1106. 			<tr>
    1107. 

  1107. 				<td style="font-weight: bold">Type:</td>
    1108. 

  1108. 				<td>
    1109. 

  1109. 					<select id="adj_type" name="adj_type">
    1110. 

  1110. 						<option value="" selected="selected">Choose...</option>
    1111. 

  1111. 						<option value="credit">Credit</option>
    1112. 

  1112. 						<option value="debit">Debit</option>
    1113. 

  1113. 					</select>
    1114. 

  1114. 				</td>
    1115. 

  1115. 			</tr>
    1116. 

  1116. 			<tr>
    1117. 

  1117. 				<td style="font-weight: bold">Amt Type:</td>
    1118. 

  1118. 				<td>
    1119. 

  1119. 					<select id="adj_amt_type" name="adj_amt_type">
    1120. 

  1120. 						<option value="" selected="selected">Choose...</option>
    1121. 

  1121. 						<option value="fixed">Fixed</option>
    1122. 

  1122. 						<option value="percentage">Percentage</option>
    1123. 

  1123. 					</select>
    1124. 

  1124. 				</td>
    1125. 

  1125. 			</tr>
    1126. 

  1126. 			<tr>
    1127. 

  1127. 				<td style="font-weight: bold">Amount:</td>
    1128. 

  1128. 				<td><input id="adj_amt" name="adj_amt" type="text" value="" /></td>
    1129. 

  1129. 			</tr>
    1130. 

  1130. 			<tr>
    1131. 

  1131. 				<td style="font-weight: bold">Note:</td>
    1132. 

  1132. 				<td><textarea id="adj_note" name="adj_note"></textarea></td>
    1133. 

  1133. 			</tr>
    1134. 

  1134. 			<tr>
    1135. 

  1135. 				<td colspan="2" style="text-align: center"><input type="submit" id="adj_submit" name="adj_submit" value="Add" /></td>
    1136. 

  1136. 			</tr>
    1137. 

  1137. 		</table>
    1138. 

  1138. 		<input type="hidden" id="adj_ordID" name="adj_ordID" value="<?=$_GET["id"]?>" />
    1139. 

  1139. 		<input type="hidden" id="adj_doedit" name="adj_doedit" value="<?=$_GET["doedit"]?>" />
    1140. 

  1140. 		</form>
    1141. 

  1141. 	</div>
    1142. 

  1142. <?php
    1143. 

  1143. }
    1144. 

  1144. 	// ADD ENDED
    1145. 

  1145. 

  1146. 	// ADDED by Chad Jun-05-06
    1147. 

  1147. 	// TRANSACTIONS
    1148. 

  1148. 	$sql = "SELECT * FROM transactions WHERE ordID = " . $_GET["id"];
    1149. 

  1149. 	$res = mysql_query($sql) or print(mysql_error());
    1150. 

  1150. ?>
    1151. 

  1151. 	<h2><a name="aim"></a>Transactions</h2>
    1152. 

  1152. <?php
    1153. 

  1153. 	if(!empty($_GET['aim_err'])) {
    1154. 

  1154. ?>
    1155. 

  1155. 		<div style="margin: 5px auto; color: #FF0000; font-weight: bold; text-align: center"><?=$_GET['aim_err']?></div>
    1156. 

  1156. <?php
    1157. 

  1157. 	}elseif(!empty($_GET['aim_msg'])) {
    1158. 

  1158. ?>
    1159. 

  1159. 		<div style="margin: 5px auto; color: #009900; font-weight: bold; text-align: center"><?=$_GET['aim_msg']?></div>
    1160. 

  1160. <?php
    1161. 

  1161. 	}
    1162. 

  1162. ?>
    1163. 

  1163. 	<table width="95%" cellpadding="3" cellspacing="0" border="1" style="margin: 0 auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    1164. 

  1164. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    1165. 

  1165. 			<th width="85" style="text-align: center">Type</th>
    1166. 

  1166. 			<th width="60" style="text-align: right">Amount</th>
    1167. 

  1167. 			<th width="80" style="text-align: center">TXN</th>
    1168. 

  1168. 			<th width="120" style="text-align: left">Date</th>
    1169. 

  1169. 			<th>Note</th>
    1170. 

  1170. 		</tr>
    1171. 

  1171. <?php
    1172. 

  1172. 	while($row=mysql_fetch_assoc($res)) {
    1173. 

  1173. ?>
    1174. 

  1174. 		<tr>
    1175. 

  1175. 			<td style="text-align: center"><?=$row['type']?></td>
    1176. 

  1176. 			<td style="text-align: center"><?=money_format("%.2n",$row['amt'])?></td>
    1177. 

  1177. 			<td style="text-align: center"><?=$row['txn']?></td>
    1178. 

  1178. 			<td style="text-align: center"><?=date("n/j/Y g:i a",strtotime($row['date_received']))?></td>
    1179. 

  1179. 			<td><?=$row['note']?></td>
    1180. 

  1180. 		</tr>
    1181. 

  1181. <?php	
    1182. 

  1182. 	}
    1183. 

  1183. ?>
    1184. 

  1184. 	</table>
    1185. 

  1185. <?php
    1186. 

  1186. if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    1187. 

  1187. ?>
    1188. 

  1188. <input type="button" id="btn_add_txn" value="Credit or Void" onclick="toggleTXN();" />
    1189. 

  1189. 

  1190. <div id="div_trans" style="display: none">
    1191. 

  1191. 	<form id="aim_frm" name="aim_frm" method="post" action="/admin/ordersprocess.php" onsubmit="return checkAIM(this);">
    1192. 

  1192. 	<table cellpadding="3" cellspacing="0" border="1" style="margin: 5px auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    1193. 

  1193. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    1194. 

  1194. 			<td colspan="4" style="text-align: center; font-weight: bold; font-size: 14px">Credit or Void a Transaction</td>
    1195. 

  1195. 		</tr>
    1196. 

  1196. 		<tr>
    1197. 

  1197. 			<th style="text-align: center">Type</th>
    1198. 

  1198. 			<th style="text-align: center">TXN</th>
    1199. 

  1199. 			<th style="text-align: center">Amount</th>
    1200. 

  1200. 			<th>Note</th>
    1201. 

  1201. 		</tr>
    1202. 

  1202. 		<tr>
    1203. 

  1203. 			<td valign="top">
    1204. 

  1204. 				<select name="aim_type" id="aim_type">
    1205. 

  1205. 					<option value="" selected="selected">Choose...</option>
    1206. 

  1206. 					<option value="CREDIT">Credit</option>
    1207. 

  1207. 					<option value="VOID">Void</option>
    1208. 

  1208. 				</select>
    1209. 

  1209. 			</td>
    1210. 

  1210. 			<td valign="top"><input type="text" id="aim_txn" name="aim_txn" value="" autocomplete="off" /></td>
    1211. 

  1211. 			<td valign="top"><input type="text" id="aim_amt" name="aim_amt" value="" autocomplete="off" /></td>
    1212. 

  1212. 			<td valign="top"><textarea id="aim_note" name="aim_note"></textarea></td>
    1213. 

  1213. 		</tr>
    1214. 

  1214. 		<tr>
    1215. 

  1215. 			<td colspan="4" style="text-align: right"><input type="submit" id="aim_submit" name="aim_submit" value="Submit" /></td>
    1216. 

  1216. 		</tr>
    1217. 

  1217. 	</table>
    1218. 

  1218. 	<input type="hidden" id="aim_inv" name="aim_inv" value="<?=$_GET["id"]?>" />
    1219. 

  1219. <?php
    1220. 

  1220. $tmp = explode(" ",$alldata["ordName"]);
    1221. 

  1221. ?>
    1222. 

  1222. 	<input type="hidden" id="aim_fname" name="aim_fname" value="<?=$tmp[0]?>" />
    1223. 

  1223. 	<input type="hidden" id="aim_lname" name="aim_lname" value="<?=(!empty($tmp[1]))?$tmp[1]:''?>" />
    1224. 

  1224. 	<input type="hidden" id="aim_doedit" name="aim_doedit" value="<?=$_GET['doedit']?>" />
    1225. 

  1225. 	</form>
    1226. 

  1226. </div>
    1227. 

  1227. 

  1228. <input type="button" id="btn_charge" value="Charge CC" onclick="toggleCharge();" style="display: block; margin: 5px 5px 5px 0" />
    1229. 

  1229. 

  1230. <div id="div_charge" style="display: none">
    1231. 

  1231. 	<? 
    1232. 

  1232. 		if(!empty($alldata["ordEID"])){
    1233. 

  1233. 			$sql_eid="SELECT * FROM customers WHERE custID=".$alldata["ordEID"];
    1234. 

  1234. 			$result_eid=mysql_query($sql_eid);
    1235. 

  1235. 			if(mysql_num_rows($result_eid)>0){
    1236. 

  1236. 				$row_eid=mysql_fetch_assoc($result_eid);
    1237. 

  1237. 			}
    1238. 

  1238. 		}
    1239. 

  1239. 	?>
    1240. 

  1240. 	<form id="frmCharge" name="frmCharge" method="post" action="/admin/ordersprocess.php">
    1241. 

  1241. 	<table cellpadding="3" cellspacing="0" border="1" style="margin: 5px auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    1242. 

  1242. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    1243. 

  1243. 			<td colspan="2" style="font-size: 14px; font-weight: bold; text-align: center">Authorize &amp; Capture</td>
    1244. 

  1244. 		</tr>
    1245. 

  1245. 		<tr>
    1246. 

  1246. 			<td>First Name:</td>
    1247. 

  1247. 			<td><input type="text" id="am_fname" name="am_fname" value="<?=$row_eid['Name']?>" /></td>
    1248. 

  1248. 		</tr>
    1249. 

  1249. 		<tr>
    1250. 

  1250. 			<td>Last Name:</td>
    1251. 

  1251. 			<td><input type="text" id="am_lname" name="am_lname" value="" /></td>
    1252. 

  1252. 		</tr>
    1253. 

  1253. 		<tr>
    1254. 

  1254. 			<td>Address:</td>
    1255. 

  1255. 			<td><input type="text" id="am_address" name="am_address" value="<?=$row_eid['Address']?>" /></td>
    1256. 

  1256. 		</tr>
    1257. 

  1257. 		<tr>
    1258. 

  1258. 			<td>Address 2:</td>
    1259. 

  1259. 			<td><input type="text" id="am_address2" name="am_address2" value="<?=$row_eid['Address2']?>" /></td>
    1260. 

  1260. 		</tr>
    1261. 

  1261. 		<tr>
    1262. 

  1262. 			<td>City:</td>
    1263. 

  1263. 			<td><input type="text" id="am_city" name="am_city" value="<?=$row_eid['City']?>" /></td>
    1264. 

  1264. 		</tr>
    1265. 

  1265. 		<tr>
    1266. 

  1266. 			<td>State:</td>
    1267. 

  1267. 			<td><input type="text" id="am_state" name="am_state" value="<? if(!empty($row_eid['State2'])) echo $row_eid['State2']; else echo $row_eid['State']; ?>" /></td>
    1268. 

  1268. 		</tr>
    1269. 

  1269. 		<tr>
    1270. 

  1270. 			<td>Zip:</td>
    1271. 

  1271. 			<td><input type="text" id="am_zip" name="am_zip" value="<?=$row_eid['Zip']?>" /></td>
    1272. 

  1272. 		</tr>
    1273. 

  1273. 		<tr>
    1274. 

  1274. 			<td>Amount:</td>
    1275. 

  1275. 			<td><input type="text" id="am_amt" name="am_amt" value="" autocomplete="off" /></td>
    1276. 

  1276. 		</tr>
    1277. 

  1277. 		<tr>
    1278. 

  1278. 			<td>CC#:</td>
    1279. 

  1279. 			<td><input type="text" id="am_cc_num" name="am_cc_num" value="<?=Decrypt($row_eid['ccNum'], $cart_misc)?>" autocomplete="off" /></td>
    1280. 

  1280. 		</tr>
    1281. 

  1281. 		<tr>
    1282. 

  1282. 			<td>Exp. Date:</td>
    1283. 

  1283. 			<td> 
    1284. 

  1284. 				<select id="am_exp_mon" name="am_exp_mon">
    1285. 

  1285. <?
    1286. 

  1286. 		$ccexp=explode('/',$row_eid['ccExp']);
    1287. 

  1287. 		for($i=1; $i<=12; $i++)
    1288. 

  1288. 		{
    1289. 

  1289. 			if($i<10)
    1290. 

  1290. 				$i = '0'.$i;
    1291. 

  1291. 			if($i == $ccexp[0])
    1292. 

  1292. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    1293. 

  1293. 			else if(date('n') == $i )
    1294. 

  1294. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    1295. 

  1295. 			else
    1296. 

  1296. 				echo '<option value="'.$i.'">'.$i.'</option>';
    1297. 

  1297. 		}
    1298. 

  1298. ?>
    1299. 

  1299. 				</select>&nbsp;/&nbsp;
    1300. 

  1300. 				<select id="am_exp_year" name="am_exp_year">
    1301. 

  1301. <?
    1302. 

  1302. 		$cur_year = date('Y');
    1303. 

  1303. 		for($i=($cur_year); $i<=$cur_year+10; $i++)
    1304. 

  1304. 		{
    1305. 

  1305. 			if($i == $ccexp[1])
    1306. 

  1306. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    1307. 

  1307. 			elseif(date('Y') == $i || $i==$ccexp[1])
    1308. 

  1308. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    1309. 

  1309. 			else
    1310. 

  1310. 				echo '<option value="'.$i.'">'.$i.'</option>';
    1311. 

  1311. 		}
    1312. 

  1312. ?>				
    1313. 

  1313. 				</select>
    1314. 

  1314. 			</td>
    1315. 

  1315. 		</tr>
    1316. 

  1316. 		<tr>
    1317. 

  1317. 			<td>CCV:</td>
    1318. 

  1318. 			<td><input type="text" id="am_ccv" name="am_ccv" value="<?=$row_eid['ccCCV']?>" autocomplete="off" /></td>
    1319. 

  1319. 		</tr>
    1320. 

  1320. 		<tr>
    1321. 

  1321. 			<td colspan="2" style="text-align: center"><input type="submit" id="am_submit" name="am_submit" value="Submit" /></td>
    1322. 

  1322. 		</tr>
    1323. 

  1323. 	</table>
    1324. 

  1324. 	<input type="hidden" id="am_inv" name="am_inv" value="<?=$_GET["id"]?>" />
    1325. 

  1325. 	<input type="hidden" id="am_type" name="am_type" value="AUTH_CAPTURE" />
    1326. 

  1326. 	<input type="hidden" id="am_doedit" name="am_doedit" value="<?=$_GET['doedit']?>" />
    1327. 

  1327. 	</form>
    1328. 

  1328. </div>
    1329. 

  1329. <?php
    1330. 

  1330. }
    1331. 

  1331. } // End of User permission check
    1332. 

  1332. 

  1333. 	// ADDED by Chad Apr-04-06
    1334. 

  1334. 	// LOCATION HISTORY
    1335. 

  1335. 	$qry = "SELECT * FROM location WHERE ordID = '".$_GET["id"]."'";
    1336. 

  1336. 	$res = mysql_query($qry) or print(mysql_error());
    1337. 

  1337. ?>
    1338. 

  1338. 		<table width="300" cellpadding="3" cellspacing="0" style="margin: 10px auto; font-family: Verdana, Arial, Helvetica, sans-serif; border: 1px solid #4B1610; border-collapse: collapse">
    1339. 

  1339. 			<tr style="border-bottom: 1px solid #4B1610">
    1340. 

  1340. 				<td colspan="2" style="text-align: center; background-color: #4B1610; color: #FFFFFF; font-weight: bold">Location History</td>
    1341. 

  1341. 			</tr>
    1342. 

  1342. <?php
    1343. 

  1343. 	$i=0;
    1344. 

  1344. 	if(mysql_num_rows($res) > 0 ) {
    1345. 

  1345. 		while($row = mysql_fetch_assoc($res)) {
    1346. 

  1346. ?>
    1347. 

  1347. 			<tr style="background-color: #<?=($i%2==0)?'903E36':'903E36'?>; border-bottom: 1px solid #4B1610">
    1348. 

  1348. 				<td width="50%" style="color: #FFFFFF"><?=$row['location']?></td>
    1349. 

  1349. 				<td style="color: #FFFFFF"><?=$row['stamp']?></td>
    1350. 

  1350. 			</tr>
    1351. 

  1351. <?php
    1352. 

  1352. 			$i++;
    1353. 

  1353. 		}
    1354. 

  1354. 	}else{
    1355. 

  1355. ?>
    1356. 

  1356. 			<tr>
    1357. 

  1357. 				<td colspan="2" style="text-align: center">No location found</td>
    1358. 

  1358. 			</tr>
    1359. 

  1359. <?php
    1360. 

  1360. 	}
    1361. 

  1361. ?>
    1362. 

  1362. 		</table>
    1363. 

  1363. <?php
    1364. 

  1364. 	// ADD ENDED
    1365. 

  1365. 	
    1366. 

  1366. 	// ADDED by Chad Apr-04-06
    1367. 

  1367. 	// FEDEX TRACKING
    1368. 

  1368. 	$qry = "SELECT * FROM fedex WHERE ordID = '".$_GET["id"]."'";
    1369. 

  1369. 	$res = mysql_query($qry);
    1370. 

  1370. 	if(mysql_num_rows($res) > 0) {
    1371. 

  1371. 		$row = mysql_fetch_assoc($res);
    1372. 

  1372. 		$trackNum = $row['trackNum'];
    1373. 

  1373. 		if(!empty($trackNum)) {
    1374. 

  1374. 			include(DOCROOT.'includes/fedex/fedexdc.php');
    1375. 

  1375. 			$fed = new FedExDC();
    1376. 

  1376. 			$track_Ret = $fed->track(
    1377. 

  1377. 				array(
    1378. 

  1378. 					'1537' => $trackNum, //Tracking Number
    1379. 

  1379. 					'1534' =>'Y' // detail_scan_indicator (Show me all the tracking data)
    1380. 

  1380. 				)
    1381. 

  1381. 			);
    1382. 

  1382. 			
    1383. 

  1383. 			$ctr = 0;
    1384. 

  1384. 			$hasChanged = false;
    1385. 

  1385. 			$isDelivered = false;
    1386. 

  1386. 			for($i=1; $i<=$track_Ret[1584]; $i++) {
    1387. 

  1387. 				// See Customer Service Page for displaying results
    1388. 

  1388. 	?>
    1389. 

  1389. 		<div style="margin: 10px auto; border: 2px solid #2C578A; width: 550px">
    1390. 

  1390. 		<table align="center" width="550" border="0" cellpadding="3" cellspacing="0" style="font-size: 10px; font-family: Verdana, Arial, Helvetica, sans-serif">
    1391. 

  1391. 			<tr>
    1392. 

  1392. 				<th colspan="2" style="font-size: 18px; background-color: #2C578A; color: #FFF; font-weight: bold; text-align: left">Fed<span style="margin-left: -3px; color: #FF6600">Ex</span></th>
    1393. 

  1393. 				<th colspan="3" style="font-size: 14px; text-align: right; background-color: #2C578A; color: #FFF; font-weight: bold">Tracking# <?=$trackNum?></th>
    1394. 

  1394. 			</tr>
    1395. 

  1395. 	<?php
    1396. 

  1396. 			if(!empty($track_Ret['1339-'.$i]))
    1397. 

  1397. 			{
    1398. 

  1398. 				$tmp_date = $track_Ret['1339-'.$i];
    1399. 

  1399. 				$est_del = substr($tmp_date,0,4).'-'.substr($tmp_date,4,2).'-'.substr($tmp_date,6,2);
    1400. 

  1400. 	?>
    1401. 

  1401. 			<tr>
    1402. 

  1402. 				<td colspan="5" style="background-color: #2C578A; height: 15px">&nbsp;</td>
    1403. 

  1403. 			</tr>
    1404. 

  1404. 			<tr>
    1405. 

  1405. 				<td colspan="5" style="background-color: #DFE7FF"><strong>Estimated Delivery Date:</strong> <?=date('M j, Y',strtotime($est_del))?></td>
    1406. 

  1406. 			</tr>
    1407. 

  1407. 	<?php
    1408. 

  1408. 			}
    1409. 

  1409. 	?>
    1410. 

  1410. 			<tr>
    1411. 

  1411. 				<th align="left" width="150" colspan="2" style="background-color: #2C578A; color: #FFF; font-weight: bold">Date/Time</th>
    1412. 

  1412. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Activity</th>
    1413. 

  1413. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Location</th>
    1414. 

  1414. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Details</th>
    1415. 

  1415. 			</tr>
    1416. 

  1416. 	<?php
    1417. 

  1417. 				for($j=1; $j<=$track_Ret['1715-'.$i]; $j++)
    1418. 

  1418. 				{
    1419. 

  1419. 					$date = $track_Ret['1162-'.$i.'-'.$j];
    1420. 

  1420. 					$year = substr($date,0,4);
    1421. 

  1421. 					$mon = substr($date,4,2);
    1422. 

  1422. 					$day = substr($date,6,2);
    1423. 

  1423. 					$hrs = substr($track_Ret['1163-'.$i.'-'.$j],0,2);
    1424. 

  1424. 					$min = substr($track_Ret['1163-'.$i.'-'.$j],2,2);
    1425. 

  1425. 					$sec = substr($track_Ret['1163-'.$i.'-'.$j],4,2);
    1426. 

  1426. 					
    1427. 

  1427. 					$date = $year.'-'.$mon.'-'.$day.' '.$hrs.':'.$min.':'.$sec;
    1428. 

  1428. 					$unixDate = strtotime($date);
    1429. 

  1429. 					
    1430. 

  1430. 					if(empty($track_Ret['1161-'.$i.'-'.$j]))
    1431. 

  1431. 					{
    1432. 

  1432. 						$state = $track_Ret['1164-'.$i.'-'.$j];
    1433. 

  1433. 					}
    1434. 

  1434. 					else
    1435. 

  1435. 					{
    1436. 

  1436. 						$state = $track_Ret['1161-'.$i.'-'.$j];
    1437. 

  1437. 					}
    1438. 

  1438. 										
    1439. 

  1439. 					if(date('Ymd',$unixDate) != date('Ymd',$last_date))
    1440. 

  1440. 					{
    1441. 

  1441. 						$ctr++;
    1442. 

  1442. 						$hasChanged = true;
    1443. 

  1443. 					}
    1444. 

  1444. 					
    1445. 

  1445. 					if($track_Ret['1159-'.$i.'-'.$j] == 'Delivered' && empty($track_Ret['1711-'.$i.'-'.$j]))
    1446. 

  1446. 					{
    1447. 

  1447. 						$isDelivered = true;
    1448. 

  1448. 					}
    1449. 

  1449. 	?>
    1450. 

  1450. 					<tr style="background-color: #<?=($ctr%2==0)?'FFF':'DFE7FF'?>">
    1451. 

  1451. 			<?php
    1452. 

  1452. 						if($hasChanged)
    1453. 

  1453. 						{
    1454. 

  1454. 			?>
    1455. 

  1455. 						<td style="text-align: left" valign="top">
    1456. 

  1456. 							<span style="font-weight: bold"><?=date('M j, Y',$unixDate)?></span>
    1457. 

  1457. 						</td>
    1458. 

  1458. 						<td valign="top" style="text-align: right; border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=date('g:i A',$unixDate)?></td>
    1459. 

  1459. 			<?php
    1460. 

  1460. 							$hasChanged = false;
    1461. 

  1461. 						}
    1462. 

  1462. 						else
    1463. 

  1463. 						{
    1464. 

  1464. 			?>
    1465. 

  1465. 						<td valign="top" colspan="2" style="text-align: right; border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=date('g:i A',$unixDate)?></td>
    1466. 

  1466. 			<?php
    1467. 

  1467. 						}
    1468. 

  1468. 			?>		
    1469. 

  1469. 						</td>
    1470. 

  1470. 						<td valign="top" style="border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=($isDelivered)?'<strong>':''?><?=$track_Ret['1159-'.$i.'-'.$j]?><?=($isDelivered)?'</strong>':''?></td>
    1471. 

  1471. 						<td valign="top" style="border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=$track_Ret['1160-'.$i.'-'.$j]?>, <?=$state?></td>
    1472. 

  1472. 						<td valign="top"><?=$track_Ret['1711-'.$i.'-'.$j]?></td>
    1473. 

  1473. 					</tr>
    1474. 

  1474. 	<?php
    1475. 

  1475. 					if($isDelivered)
    1476. 

  1476. 					{
    1477. 

  1477. 						$isDelivered = false;
    1478. 

  1478. 					}
    1479. 

  1479. 					
    1480. 

  1480. 					$last_date = $unixDate;
    1481. 

  1481. 				}
    1482. 

  1482. 			}
    1483. 

  1483. 	?>
    1484. 

  1484. 		  </table>
    1485. 

  1485. </div>
    1486. 

  1486. 	<?php
    1487. 

  1487. 		}
    1488. 

  1488. 	}
    1489. 

  1489. 	// ADD ENDED
    1490. 

  1490. 	
    1491. 

  1491. 	// ADDED by Chad Apr-03-06
    1492. 

  1492. 	// DHL AND USPS TRACKING
    1493. 

  1493. 	$qry = "SELECT * FROM dhl WHERE custPackID = '".$_GET["id"]."'";
    1494. 

  1494. 	$res = mysql_query($qry) or print(mysql_error());
    1495. 

  1495. 	if(mysql_num_rows($res) > 0) {
    1496. 

  1496. 		$row = mysql_fetch_assoc($res);
    1497. 

  1497. 		$trackNum = $row['DHLGMTrackNum'];
    1498. 

  1498. 		if(!empty($trackNum)) {
    1499. 

  1499. 			$ch = curl_init();
    1500. 

  1500. 			curl_setopt($ch,CURLOPT_URL,"http://api.smartmail.com/tnt2.cfm?number=$trackNum&criteria=3&type=wddx&custid=rband&passwd=sm36732");
    1501. 

  1501. 			//curl_setopt($ch, CURLOPT_POST, 1);
    1502. 

  1502. 			curl_setopt($ch,CURLOPT_HEADER,0);
    1503. 

  1503. 			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    1504. 

  1504. 			//curl_setopt($ch, CURLOPT_POSTFIELDS, "number=$trackNum&criteria=3&type=wddx&custid=rband&passwd=sm36732");
    1505. 

  1505. 			$res = curl_exec($ch);
    1506. 

  1506. 			curl_close($ch);
    1507. 

  1507. 			$info = wddx_deserialize($res);
    1508. 

  1508. 			if(empty($info['Detail'][0])) { //If no errors
    1509. 

  1509. ?>
    1510. 

  1510. 			<div style="height: 20px"></div>
    1511. 

  1511. 			<table align="center" width="500" cellpadding="3" cellspacing="0" style="border: 1px solid #FFFFFF">
    1512. 

  1512. 				<tr>
    1513. 

  1513. 					<td colspan="2" style="color: #FFFFFF; background-color: #CC0000; text-align: center; font-weight: bold; font-size: 18px">DHL Tracking</td>
    1514. 

  1514. 				</tr>
    1515. 

  1515. <?php
    1516. 

  1516. 				if(!empty($info['TRACK_PKUP_DATE'][0])) {
    1517. 

  1517. ?>
    1518. 

  1518. 				<tr>
    1519. 

  1519. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_PKUP_DATE'][0]?></td>
    1520. 

  1520. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Picked Up by SmartMail</td>
    1521. 

  1521. 				</tr>
    1522. 

  1522. <?php
    1523. 

  1523. 				}
    1524. 

  1524. 				if(!empty($info['TRACK_RECV_DATE'][0])) {
    1525. 

  1525. ?>
    1526. 

  1526. 				<tr>
    1527. 

  1527. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_RECV_DATE'][0]?></td>
    1528. 

  1528. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Arrived at Smart Center</td>
    1529. 

  1529. 				</tr>
    1530. 

  1530. <?php
    1531. 

  1531. 				}
    1532. 

  1532. 				if(!empty($info['TRACK_ENCD_DATE'][0])) {
    1533. 

  1533. ?>
    1534. 

  1534. 				<tr>
    1535. 

  1535. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_ENCD_DATE'][0]?></td>
    1536. 

  1536. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Processed and Verified</td>
    1537. 

  1537. 				</tr>
    1538. 

  1538. <?php
    1539. 

  1539. 				}
    1540. 

  1540. 				if(!empty($info['TRACK_DNSD_DATE'][0])) {
    1541. 

  1541. ?>
    1542. 

  1542. 				<tr>
    1543. 

  1543. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_DNSD_DATE'][0]?></td>
    1544. 

  1544. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Sent via <?=(!empty($info['TRACK_DNDC'][0]))?$info['TRACK_DNDC'][0]:"SmartMail"?></td>
    1545. 

  1545. 				</tr>
    1546. 

  1546. <?php
    1547. 

  1547. 				}
    1548. 

  1548. 				if(!empty($info['TRACK_DNRC_DATE'][0])) {
    1549. 

  1549. ?>
    1550. 

  1550. 				<tr>
    1551. 

  1551. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_DNRC_DATE'][0]?></td>
    1552. 

  1552. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Received</td>
    1553. 

  1553. 				</tr>
    1554. 

  1554. <?php
    1555. 

  1555. 				}
    1556. 

  1556. 				if(!empty($info['TRACK_MFST_DATE'][0])) {
    1557. 

  1557. ?>
    1558. 

  1558. 				<tr>
    1559. 

  1559. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_MFST_DATE'][0]?></td>
    1560. 

  1560. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Mail Delivered to Post Office</td>
    1561. 

  1561. 				</tr>
    1562. 

  1562. <?php
    1563. 

  1563. 				}
    1564. 

  1564. ?>
    1565. 

  1565. 			</table>
    1566. 

  1566. <?php
    1567. 

  1567. 				// CHECK USPS TRACKING INFO
    1568. 

  1568. 				if(!empty($info['TRACK_DELV_CONF'][0])) {
    1569. 

  1569. 					$ch = curl_init();
    1570. 

  1570. 					curl_setopt($ch,CURLOPT_URL,"http://Production.ShippingAPIs.com/ShippingAPI.dll");
    1571. 

  1571. 					curl_setopt($ch, CURLOPT_POST, 1);
    1572. 

  1572. 					curl_setopt($ch,CURLOPT_HEADER,0);
    1573. 

  1573. 					curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    1574. 

  1574. 					curl_setopt($ch, CURLOPT_POSTFIELDS, 'API=TrackV2&XML=<TrackFieldRequest USERID="268REMIN3619"><TrackID ID="'.$info['TRACK_DELV_CONF'][0].'"></TrackID></TrackFieldRequest>');
    1575. 

  1575. 					$res = curl_exec($ch);
    1576. 

  1576. 					curl_close($ch);
    1577. 

  1577. 					
    1578. 

  1578. 					include(APPPATH.'views/pages/admin/xml2array.php');
    1579. 

  1579. 					
    1580. 

  1580. 					$xmlData = new xml2array();
    1581. 

  1581. 					$uspsData = $xmlData -> parseXMLintoarray($res);
    1582. 

  1582. ?>
    1583. 

  1583. 			<div style="margin: 5px auto; width: 500px">
    1584. 

  1584. 			
    1585. 

  1585. 				<div style="margin: 0; height: 5px; background-color: #CC0000"></div>
    1586. 

  1586. 				<div style="margin: 0; padding: 2px; background-color: #0066CB; color: #FFFFFF; font-weight: bold; font-size: 18px; text-align: center">USPS Tracking<br /><span style="font-size: 11px">Tracking # <?=$info['TRACK_DELV_CONF'][0]?></span></div>
    1587. 

  1587. 				<div style="margin: 0; height: 7px; background-color: #98CCFF"></div>
    1588. 

  1588. 				<div style="margin: 2px 0 0 0; background-color: #E3F1FC; border: 1px solid #89B9E7">
    1589. 

  1589. <?php				
    1590. 

  1590. 					if(is_array($uspsData['TrackResponse']['TrackInfo']['Error'])) {
    1591. 

  1591. 						echo '<div style="margin: 0; text-align: center; font-weight: bold">Error Getting USPS Tracking Information</div>';
    1592. 

  1592. 					}else{
    1593. 

  1593. 						if(is_array($uspsData['TrackResponse']['TrackInfo']['TrackSummary'])) {
    1594. 

  1594. 							$eventTime = $uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventDate'].' '.$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventTime'];
    1595. 

  1595. ?>
    1596. 

  1596. 					<div style="margin: 0; padding: 3px; background-color: #89B9E7; color: #FFFFFF; font-weight: bold">Event Summary</div>
    1597. 

  1597. 					<div style="margin: 0">
    1598. 

  1598. 					<table width="500" border="0" cellpadding="3" cellspacing="0" style="margin: 2px;">
    1599. 

  1599. 						<tr>
    1600. 

  1600. 							<td valign="top" style="font-weight: bold"><?=$eventTime?></td>
    1601. 

  1601. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventCity']?>, <?=$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventState']?></td>
    1602. 

  1602. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['Event']?></td>
    1603. 

  1603. 						</tr>
    1604. 

  1604. 					</table>
    1605. 

  1605. 					</div>
    1606. 

  1606. <?php
    1607. 

  1607. 						}
    1608. 

  1608. 						if(is_array($uspsData['TrackResponse']['TrackInfo']['TrackDetail'])) {
    1609. 

  1609. ?>
    1610. 

  1610. 					<div style="margin: 0; padding: 3px; background-color: #89B9E7; color: #FFFFFF; font-weight: bold">Tracking Details</div>
    1611. 

  1611. 					<table width="500" border="0" align="center" cellpadding="3" cellspacing="0" style="margin: 2px;">
    1612. 

  1612. <?php
    1613. 

  1613. 							if(is_array($uspsData['TrackResponse']['TrackInfo']['TrackDetail'][0])){
    1614. 

  1614. 								for($i=0; $i<count($uspsData['TrackResponse']['TrackInfo']['TrackDetail']); $i++) {
    1615. 

  1615. 									$eventTime = $uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventDate'].' '.$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventTime'];
    1616. 

  1616. ?>
    1617. 

  1617. 						<tr>
    1618. 

  1618. 							<td valign="top" style="font-weight: bold"><?=$eventTime?></td>
    1619. 

  1619. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventCity']?>, <?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventState']?></td>
    1620. 

  1620. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['Event']?></td>
    1621. 

  1621. 						</tr>
    1622. 

  1622. <?php
    1623. 

  1623. 								} // End of TrackDetail Loop
    1624. 

  1624. 							}else{
    1625. 

  1625. 								$eventTime = $uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventDate'].' '.$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventTime'];
    1626. 

  1626. ?>
    1627. 

  1627. 						<tr>
    1628. 

  1628. 							<td valign="top" style="font-weight: bold"><?=$eventTime?></td>
    1629. 

  1629. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventCity']?>, <?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventState']?></td>
    1630. 

  1630. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['Event']?></td>
    1631. 

  1631. 						</tr>
    1632. 

  1632. <?php
    1633. 

  1633. 							}
    1634. 

  1634. ?>
    1635. 

  1635. 					</table>
    1636. 

  1636. <?php
    1637. 

  1637. 						} // End of displaying all Tracking Details
    1638. 

  1638. 					} // End of displaying all USPS tracking information
    1639. 

  1639. ?>
    1640. 

  1640. 				</div>
    1641. 

  1641. 			
    1642. 

  1642. 			</div>
    1643. 

  1643. <?php
    1644. 

  1644. 				}
    1645. 

  1645. 			}
    1646. 

  1646. 		}
    1647. 

  1647. 	}
    1648. 

  1648. 	
    1649. 

  1649. 	// ADD ENDED
    1650. 

  1650. 	
    1651. 

  1651. }else{
    1652. 

  1652. 	$sSQL = "SELECT ordID FROM orders WHERE ordStatus=1";
    1653. 

  1653. 	if(@$_POST["act"] != "purge") $sSQL .= " AND ordStatusDate<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    1654. 

  1654. 	$result = mysql_query($sSQL) or print(mysql_error());
    1655. 

  1655. 	while($rs = mysql_fetch_assoc($result)){
    1656. 

  1656. 		$theid = $rs["ordID"];
    1657. 

  1657. 		$delOptions = "";
    1658. 

  1658. 		$addcomma = "";
    1659. 

  1659. 		$result2 = mysql_query("SELECT cartID FROM cart WHERE cartOrderID=" . $theid) or print(mysql_error());
    1660. 

  1660. 		while($rs2 = mysql_fetch_assoc($result2)){
    1661. 

  1661. 			$delOptions .= $addcomma . $rs2["cartID"];
    1662. 

  1662. 			$addcomma = ",";
    1663. 

  1663. 		}
    1664. 

  1664. 		if($delOptions != ""){
    1665. 

  1665. 			$sSQL = "DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")";
    1666. 

  1666. 			mysql_query($sSQL) or print(mysql_error());
    1667. 

  1667. 		}
    1668. 

  1668. 		mysql_query("DELETE FROM cart WHERE cartOrderID=" . $theid) or print(mysql_error());
    1669. 

  1669. 		mysql_query("DELETE FROM orders WHERE ordID=" . $theid) or print(mysql_error());
    1670. 

  1670. 	}
    1671. 

  1671. 	if(@$_POST["act"]=="authorize"){
    1672. 

  1672. 		do_stock_management(trim($_POST["id"]));
    1673. 

  1673. 		if(trim($_POST["authcode"]) != "")
    1674. 

  1674. 			$sSQL = "UPDATE orders set ordAuthNumber='" . mysql_real_escape_string(trim($_POST["authcode"])) . "',ordStatus=3 WHERE ordID=" . $_POST["id"];
    1675. 

  1675. 		else
    1676. 

  1676. 			$sSQL = "UPDATE orders set ordAuthNumber='" . mysql_real_escape_string($yyManAut) . "',ordStatus=3 WHERE ordID=" . $_POST["id"];
    1677. 

  1677. 		if(mysql_query($sSQL)) {
    1678. 

  1678. 			if(!setNewLocation( 3 , $_POST["id"] )) print("Unable to record status change.");
    1679. 

  1679. 		}else{
    1680. 

  1680. 			print(mysql_error());
    1681. 

  1681. 		}
    1682. 

  1682. 		mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["id"]) or print(mysql_error());
    1683. 

  1683. 	}elseif(@$_POST["act"]=="status"){
    1684. 

  1684. 		$maxitems=(int)($_POST["maxitems"]);
    1685. 

  1685. 		for($index=0; $index < $maxitems; $index++){
    1686. 

  1686. 			$iordid = trim($_POST["ordid" . $index]);
    1687. 

  1687. 			$ordstatus = trim($_POST["ordstatus" . $index]);
    1688. 

  1688. 			$ordauthno = "";
    1689. 

  1689. 			$oldordstatus=999;
    1690. 

  1690. 			$result = mysql_query("SELECT ordStatus,ordAuthNumber,ordEmail,ordDate,".getlangid("statPublic",64).",ordStatusInfo,ordName FROM orders INNER JOIN orderstatus ON orders.ordStatus=orderstatus.statID WHERE ordID=" . $iordid) or print(mysql_error());
    1691. 

  1691. 			if($rs = mysql_fetch_assoc($result)){
    1692. 

  1692. 				$oldordstatus=$rs["ordStatus"];
    1693. 

  1693. 				$ordauthno=$rs["ordAuthNumber"];
    1694. 

  1694. 				$ordemail=$rs["ordEmail"];
    1695. 

  1695. 				$orddate=strtotime($rs["ordDate"]);
    1696. 

  1696. 				$oldstattext=$rs[getlangid("statPublic",64)];
    1697. 

  1697. 				$ordstatinfo=$rs["ordStatusInfo"];
    1698. 

  1698. 				$ordername=$rs["ordName"];
    1699. 

  1699. 			}
    1700. 

  1700. 			if(! ($oldordstatus==999) && ($oldordstatus < 3 && $ordstatus >=3)){
    1701. 

  1701. 				// This is to force stock management
    1702. 

  1702. 				mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $iordid) or print(mysql_error());
    1703. 

  1703. 				do_stock_management($iordid);
    1704. 

  1704. 				mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $iordid) or print(mysql_error());
    1705. 

  1705. 				if($ordauthno=="") mysql_query("UPDATE orders SET ordAuthNumber='". mysql_real_escape_string($yyManAut) . "' WHERE ordID=" . $iordid) or print(mysql_error());
    1706. 

  1706. 			}
    1707. 

  1707. 			if(! ($oldordstatus==999) && ($oldordstatus >=3 && $ordstatus < 3)) release_stock($iordid);
    1708. 

  1708. 			if($iordid != "" && $ordstatus != ""){
    1709. 

  1709. 				if($oldordstatus != (int)$ordstatus && @$_POST["emailstat"]=="1"){
    1710. 

  1710. 					$result = mysql_query("SELECT ".getlangid("statPublic",64)." FROM orderstatus WHERE statID=" . $ordstatus);
    1711. 

  1711. 					if($rs = mysql_fetch_assoc($result))
    1712. 

  1712. 						$newstattext = $rs[getlangid("statPublic",64)];
    1713. 

  1713. 					$emailsubject = "Order status updated";
    1714. 

  1714. 					if(@$orderstatussubject != "") $emailsubject=$orderstatussubject;
    1715. 

  1715. 					$ose = $orderstatusemail;
    1716. 

  1716. 					$ose = str_replace("%orderid%", $iordid, $ose);
    1717. 

  1717. 					$ose = str_replace("%orderdate%", date($dateformatstr, $orddate), $ose);// . " " . date("H:i", $orddate), $ose);
    1718. 

  1718. 					$ose = str_replace("%oldstatus%", $oldstattext, $ose);
    1719. 

  1719. 					$ose = str_replace("%newstatus%", $newstattext, $ose);
    1720. 

  1720. 					$thetime = time() + ($dateadjust*60*60);
    1721. 

  1721. 					$ose = str_replace("%date%", date($dateformatstr, $thetime), $ose);// . " " . date("H:i", $thetime), $ose);
    1722. 

  1722. 					$ose = str_replace("%statusinfo%", $ordstatinfo, $ose);
    1723. 

  1723. 					$ose = str_replace("%ordername%", $ordername, $ose);
    1724. 

  1724. 					$ose = str_replace("%nl%", $emlNl, $ose);
    1725. 

  1725. 					if(@$customheaders == ""){
    1726. 

  1726. 						$customheaders = "MIME-Version: 1.0\n";
    1727. 

  1727. 						$customheaders .= "From: %from% <%from%>\n";
    1728. 

  1728. 						if(@$htmlemails==TRUE)
    1729. 

  1729. 							$customheaders .= "Content-type: text/html; charset=".$emailencoding."\n";
    1730. 

  1730. 						else
    1731. 

  1731. 							$customheaders .= "Content-type: text/plain; charset=".$emailencoding."\n";
    1732. 

  1732. 					}
    1733. 

  1733. 					$headers = str_replace('%from%',$emailAddr,$customheaders);
    1734. 

  1734. 					$headers = str_replace('%to%',$ordemail,$headers);
    1735. 

  1735. 					if((int)$ordstatus==9) {
    1736. 

  1736. 						$ose = $orderstatusshippedemail;
    1737. 

  1737. 						$ose = str_replace("%orderid%", $iordid, $ose);
    1738. 

  1738. 						$ose = str_replace("%orderdate%", date($dateformatstr, $orddate) . " " . date("H:i", $orddate), $ose);
    1739. 

  1739. 						$emailsubject = $orderstatusshippedsubject;
    1740. 

  1740. 					}
    1741. 

  1741. 					mail($ordemail, $emailsubject, $ose, $headers);
    1742. 

  1742. 				}
    1743. 

  1743. 				if($oldordstatus != (int)$ordstatus) {
    1744. 

  1744. 					if(mysql_query("UPDATE orders SET ordStatus=" . $ordstatus . ",ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $iordid)) {
    1745. 

  1745. 						if(!setNewLocation( $ordstatus , $iordid )) print("Unable to record status change.");
    1746. 

  1746. 					}else{
    1747. 

  1747. 						print(mysql_error());
    1748. 

  1748. 					}
    1749. 

  1749. 				}
    1750. 

  1750. 			}
    1751. 

  1751. 		}
    1752. 

  1752. 	}
    1753. 

  1753. 	if(@$_POST["sd"] != "")
    1754. 

  1754. 		$sd = @$_POST["sd"];
    1755. 

  1755. 	elseif(@$_GET["sd"] != "")
    1756. 

  1756. 		$sd = @$_GET["sd"];
    1757. 

  1757. 	else
    1758. 

  1758. 		$sd = date($admindatestr, time() + ($dateadjust*60*60));
    1759. 

  1759. 	if(@$_POST["ed"] != "")
    1760. 

  1760. 		$ed = @$_POST["ed"];
    1761. 

  1761. 	elseif(@$_GET["ed"] != "")
    1762. 

  1762. 		$ed = @$_GET["ed"];
    1763. 

  1763. 	else
    1764. 

  1764. 		$ed = date($admindatestr, time() + ($dateadjust*60*60));
    1765. 

  1765. 	$sd = parsedate($sd);
    1766. 

  1766. 	$ed = parsedate($ed);
    1767. 

  1767. 	if($sd > $ed) $ed = $sd;
    1768. 

  1768. 	$fromdate = trim(@$_POST["fromdate"]);
    1769. 

  1769. 	$todate = trim(@$_POST["todate"]);
    1770. 

  1770. 	$ordid = trim(str_replace('"',"",str_replace("'","",@$_POST["ordid"])));
    1771. 

  1771. 	$origsearchtext = trim(unstripslashes(@$_POST["searchtext"]));
    1772. 

  1772. 	$searchtext = trim(mysql_real_escape_string(unstripslashes(@$_POST["searchtext"])));
    1773. 

  1773. 	$ordstatus = "";
    1774. 

  1774. 	if(@$_POST["powersearch"]=="1"){
    1775. 

  1775. 		$sSQL = "SELECT ordID,ordName,payProvName,ordAuthNumber,ordDate,ordStatus,ordTotal-ordDiscount AS ordTot,ordTransID,order_changed,ordDiscountText,ordEID FROM orders INNER JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordStatus>=0 ";
    1776. 

  1776. 		$addcomma = "";
    1777. 

  1777. 		if(is_array(@$_POST["ordstatus"])){
    1778. 

  1778. 			foreach($_POST["ordstatus"] as $objValue){
    1779. 

  1779. 				if(is_array($objValue))$objValue=$objValue[0];
    1780. 

  1780. 				$ordstatus .= $addcomma . $objValue;
    1781. 

  1781. 				$addcomma = ",";
    1782. 

  1782. 			}
    1783. 

  1783. 		}else
    1784. 

  1784. 			$ordstatus = trim((string)@$_POST["ordstatus"]);
    1785. 

  1785. 		//discounts
    1786. 

  1786. 		$ordcoupon = trim((string)@$_POST["ordcoupon"]);
    1787. 

  1787. 		if($ordid != ""){
    1788. 

  1788. 			if(is_numeric($ordid)){
    1789. 

  1789. 				$sSQL .= " AND ordID=" . $ordid;
    1790. 

  1790. 			}else{
    1791. 

  1791. 				$success=FALSE;
    1792. 

  1792. 				$errmsg="The order id you specified seems to be invalid - " . $ordid;
    1793. 

  1793. 				$sSQL .= " AND ordID=0";
    1794. 

  1794. 			}
    1795. 

  1795. 		}else{
    1796. 

  1796. 			if($fromdate != ""){
    1797. 

  1797. 				if(is_numeric($fromdate))
    1798. 

  1798. 					$thefromdate = time()-($fromdate*60*60*24);
    1799. 

  1799. 				else
    1800. 

  1800. 					$thefromdate = parsedate($fromdate);
    1801. 

  1801. 				if($todate=="")
    1802. 

  1802. 					$thetodate = $thefromdate;
    1803. 

  1803. 				elseif(is_numeric($todate))
    1804. 

  1804. 					$thetodate = time()-($todate*60*60*24);
    1805. 

  1805. 				else
    1806. 

  1806. 					$thetodate = parsedate($todate);
    1807. 

  1807. 				if($thefromdate > $thetodate){
    1808. 

  1808. 					$tmpdate = $thetodate;
    1809. 

  1809. 					$thetodate = $thefromdate;
    1810. 

  1810. 					$thefromdate = $tmpdate;
    1811. 

  1811. 				}
    1812. 

  1812. 				$sd = $thefromdate;
    1813. 

  1813. 				$ed = $thetodate;
    1814. 

  1814. 				$sSQL .= " AND ordDate BETWEEN '" . date("Y-m-d", $sd) . "' AND '" . date("Y-m-d", $ed) . " 23:59:59'";
    1815. 

  1815. 			}
    1816. 

  1816. 			//discount
    1817. 

  1817. 			if($ordcoupon != "") $sSQL .= " AND ordDiscountText = '" . $ordcoupon . "'";
    1818. 

  1818. 			if($ordstatus != "" && strpos($ordstatus,"9999")===FALSE) $sSQL .= " AND ordStatus IN (" . $ordstatus . ")";
    1819. 

  1819. 			if($searchtext != "") $sSQL .= " AND (ordTransID LIKE '%" . $searchtext . "%' OR ordAuthNumber LIKE '%" . $searchtext . "%' OR ordName LIKE '%" . $searchtext . "%' OR ordEmail LIKE '%" . $searchtext . "%' OR ordAddress LIKE '%" . $searchtext . "%' OR ordCity LIKE '%" . $searchtext . "%' OR ordState LIKE '%" . $searchtext . "%' OR ordZip LIKE '%" . $searchtext . "%' OR ordPhone LIKE '%" . $searchtext . "%')";
    1820. 

  1820. 			if($_POST['ordPOAPOs'] == 'shipping_APOs') {
    1821. 

  1821. 				$sSQL .= " AND IF(ordShipAddress != '',ordShipState IN('AA','AE','AP') AND ordShipPoApo = 1,ordState IN('AA','AE','AP') AND ordPoApo = 1)";
    1822. 

  1822. 			}elseif($_POST['ordPOAPOs'] == 'shipping_POs') {
    1823. 

  1823. 				$sSQL .= " AND IF(ordShipAddress != '',ordShipState NOT IN('AA','AE','AP') AND ordShipPoApo = 1,ordState NOT IN('AA','AE','AP') AND ordPoApo = 1)";
    1824. 

  1824. 			}elseif($_POST['ordPOAPOs'] == 'shipping_PO_APO') {
    1825. 

  1825. 				$sSQL .= " AND IF(ordShipAddress != '',ordShipPoApo = 1,ordPoApo = 1)";
    1826. 

  1826. 			}elseif($_POST['ordPOAPOs'] == 'APOs') {
    1827. 

  1827. 				$sSQL .= " AND ((ordPoApo = 1 AND ordState IN('AA','AE','AP')) OR (ordPoApo = 1 AND ordState IN('AA','AE','AP')))";
    1828. 

  1828. 			}elseif($_POST['ordPOAPOs'] == 'PO_APO') {
    1829. 

  1829. 				$sSQL .= " AND (ordPoApo = 1 OR ordShipPoApo = 1)";
    1830. 

  1830. 			}elseif($_POST['ordPOAPOs'] == 'POs') {
    1831. 

  1831. 				$sSQL .= " AND ((ordPoApo = 1 AND ordState NOT IN('AA','AE','AP')) OR (ordPoApo = 1 AND ordState NOT IN('AA','AE','AP')))";
    1832. 

  1832. 			}
    1833. 

  1833. 			if($_POST['custID'] !="") $sSQL .= " AND ordEID=".$_POST['custID'];
    1834. 

  1834. 		}
    1835. 

  1835. 		$sSQL .= " AND ordEID=13 ORDER BY ordID";
    1836. 

  1836. 	}else{
    1837. 

  1837. 		$sSQL = "SELECT ordID,ordName,payProvName,ordAuthNumber,ordDate,ordStatus,ordTotal-ordDiscount AS ordTot,ordTransID,order_changed,ordEID FROM orders LEFT JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordStatus<>1 AND ordDate BETWEEN '" . date("Y-m-d", $sd) . "' AND '" . date("Y-m-d", $ed) . " 23:59:59' AND ordEID=13 ORDER BY ordID";
    1838. 

  1838. 	}
    1839. 

  1839. 	$alldata = mysql_query($sSQL) or print(mysql_error());
    1840. 

  1840. 	//echo $sSQL;
    1841. 

  1841. 	$hasdeleted=false;
    1842. 

  1842. 	$sSQL = "SELECT COUNT(*) AS NumDeleted FROM orders WHERE ordStatus=1";
    1843. 

  1843. 	$result = mysql_query($sSQL) or print(mysql_error());
    1844. 

  1844. 	$rs = mysql_fetch_assoc($result);
    1845. 

  1845. 	if($rs["NumDeleted"] > 0) $hasdeleted=true;
    1846. 

  1846. 	mysql_free_result($result);
    1847. 

  1847. ?>
    1848. 

  1848. <script language="JavaScript" type="text/javascript" src="/lib/js/util/popcalendar.js">
    1849. 

  1849. </script>
    1850. 

  1850. <script language="JavaScript" type="text/javascript">
    1851. 

  1851. <!--
    1852. 

  1852. function delrec(id) {
    1853. 

  1853. cmsg = "<?php print $yyConDel?>\n"
    1854. 

  1854. if (confirm(cmsg)) {
    1855. 

  1855. 	document.mainform.id.value = id;
    1856. 

  1856. 	document.mainform.act.value = "delete";
    1857. 

  1857. 	document.mainform.sd.value="<?php print date($admindatestr, $sd)?>";
    1858. 

  1858. 	document.mainform.ed.value="<?php print date($admindatestr, $ed)?>";
    1859. 

  1859. 	document.mainform.submit();
    1860. 

  1860. }
    1861. 

  1861. }
    1862. 

  1862. function authrec(id) {
    1863. 

  1863. var aucode;
    1864. 

  1864. cmsg = "<?php print $yyEntAuth?>"
    1865. 

  1865. if ((aucode=prompt(cmsg,'<?php print $yyManAut?>'))!=null) {
    1866. 

  1866. 	document.mainform.id.value = id;
    1867. 

  1867. 	document.mainform.act.value = "authorize";
    1868. 

  1868. 	document.mainform.authcode.value = aucode;
    1869. 

  1869. 	document.mainform.sd.value="<?php print date($admindatestr, $sd)?>";
    1870. 

  1870. 	document.mainform.ed.value="<?php print date($admindatestr, $ed)?>";
    1871. 

  1871. 	document.mainform.submit();
    1872. 

  1872. }
    1873. 

  1873. }
    1874. 

  1874. function checkcontrol(tt,evt){
    1875. 

  1875. <?php if(strstr(@$HTTP_SERVER_VARS["HTTP_USER_AGENT"], "Gecko")){ ?>
    1876. 

  1876. theevnt = evt;
    1877. 

  1877. return;
    1878. 

  1878. <?php }else{ ?>
    1879. 

  1879. theevnt=window.event;
    1880. 

  1880. <?php } ?>
    1881. 

  1881. if(theevnt.ctrlKey){
    1882. 

  1882. 	maxitems=document.mainform.maxitems.value;
    1883. 

  1883. 	for(index=0;index<maxitems;index++){
    1884. 

  1884. 		if(eval('document.mainform.ordstatus'+index+'.length') > tt.selectedIndex){
    1885. 

  1885. 			eval('document.mainform.ordstatus'+index+'.selectedIndex='+tt.selectedIndex);
    1886. 

  1886. 			eval('document.mainform.ordstatus'+index+'.options['+tt.selectedIndex+'].selected=true');
    1887. 

  1887. 		}
    1888. 

  1888. 	}
    1889. 

  1889. }
    1890. 

  1890. }
    1891. 

  1891. function displaysearch(){
    1892. 

  1892. thestyle = document.getElementById('searchspan').style;
    1893. 

  1893. if(thestyle.display=='none')
    1894. 

  1894. 	thestyle.display = 'block';
    1895. 

  1895. else
    1896. 

  1896. 	thestyle.display = 'none';
    1897. 

  1897. }
    1898. 

  1898. function checkprinter(tt,evt){
    1899. 

  1899. 

  1900. }
    1901. 

  1901. // -->
    1902. 

  1902. </script>
    1903. 

  1903.       <div style="width:19.4%; float:right; border:#030133 solid 1px;">
    1904. 

  1904. 	  <table width="100%" border="0" cellspacing="1" cellpadding="2">
    1905. 

  1905. 		<?  
    1906. 

  1906. 		if(empty($_POST['packing'])) {
    1907. 

  1907. 			$_POST['month']=date('m');
    1908. 

  1908. 			$_POST['year']=date('Y');
    1909. 

  1909. 			$thefromdate=$_POST['year'].'_'.$_POST['month'];
    1910. 

  1910. 		} else $thefromdate=$_POST['year'].'_'.$_POST['month'];
    1911. 

  1911. 		
    1912. 

  1912. 		$file_path='order_ids/';
    1913. 

  1913. 		$folderName=$thefromdate;
    1914. 

  1914. 		$dir = $file_path.$folderName."/";
    1915. 

  1915. 		?>
    1916. 

  1916. 			<tr bgcolor="#030133">
    1917. 

  1917. 			  <td width="33%" align="center"><strong><font color="#E7EAEF">Shieldzone Packing Slips</font></strong></td>
    1918. 

  1918. 			</tr>
    1919. 

  1919. 			<tr>
    1920. 

  1920. 			  <td width="33%" align="center">
    1921. 

  1921. 			  <form action="" method="post">			  
    1922. 

  1922. 			  <select name="month">
    1923. 

  1923. 			    <option value="01" <?php if (!(strcmp('01', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Jan</option>
    1924. 

  1924. 			    <option value="02" <?php if (!(strcmp('02', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Feb</option>
    1925. 

  1925. 			    <option value="03" <?php if (!(strcmp('03', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Mar</option>
    1926. 

  1926. 			    <option value="04" <?php if (!(strcmp('04', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Apr</option>
    1927. 

  1927. 			    <option value="05" <?php if (!(strcmp('05', $_POST['month']))) {echo "selected=\"selected\"";} ?>>May</option>
    1928. 

  1928. 			    <option value="06" <?php if (!(strcmp('06', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Jun</option>
    1929. 

  1929. 			    <option value="07" <?php if (!(strcmp('07', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Jul</option>
    1930. 

  1930. 			    <option value="08" <?php if (!(strcmp('08', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Aug</option>
    1931. 

  1931. 			    <option value="09" <?php if (!(strcmp('09', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Sep</option>
    1932. 

  1932. 			    <option value="10" <?php if (!(strcmp('10', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Oct</option>
    1933. 

  1933. 			    <option value="11" <?php if (!(strcmp('11', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Nov</option>
    1934. 

  1934. 			    <option value="12" <?php if (!(strcmp('12', $_POST['month']))) {echo "selected=\"selected\"";} ?>>Dec</option>
    1935. 

  1935. 			  </select>
    1936. 

  1936. 			  <?
    1937. 

  1937. 			  	$start_year='2006';
    1938. 

  1938. 				$this_year=date('Y');
    1939. 

  1939. 				
    1940. 

  1940. 			  ?>
    1941. 

  1941. 			  <select name="year">
    1942. 

  1942. 			    <? for($i=$start_year;$i<=$this_year;$i++){?>
    1943. 

  1943. 			    <option value="<?=$i?>" <?php if (!(strcmp($i, $_POST['year']))) {echo "selected=\"selected\"";} ?>><?=$i?></option>
    1944. 

  1944. 			    <? } ?>
    1945. 

  1945. 			  </select>
    1946. 

  1946. 			  <input name="packing" type="submit" value="go" />
    1947. 

  1947. 			  </form>
    1948. 

  1948. 			  </td>
    1949. 

  1949. 			</tr>
    1950. 

  1950. 

  1951. 			<tr>
    1952. 

  1952. 			  <?
    1953. 

  1953. 		// Open a known directory, and proceed to read its contents
    1954. 

  1954. 		$i=0;
    1955. 

  1955. 		if (is_dir($dir)) {
    1956. 

  1956. 		   if ($dh = opendir($dir)) {
    1957. 

  1957. 			   while (($file = readdir($dh)) !== false) {
    1958. 

  1958. 				   if($i>1 && strstr($file,'sz')) {
    1959. 

  1959. 				   $file_info1[$i]['dir']=$dir;
    1960. 

  1960. 				   $file_info1[$i]['file']=$file;
    1961. 

  1961. 					}
    1962. 

  1962. 			   $i++;
    1963. 

  1963. 			   }
    1964. 

  1964. 			   closedir($dh);
    1965. 

  1965. 		   }
    1966. 

  1966. 		}
    1967. 

  1967. 		if(!empty($file_info1)) array_multisort($file_info1,SORT_DESC,SORT_REGULAR);
    1968. 

  1968. 		?>
    1969. 

  1969. 			  <? /* 
    1970. 

  1970. 		for($i=0;$i<16 && $i<count($file_info1);$i++) {
    1971. 

  1971. 			echo '<a href="/admin/print2.php?printer=true&path='.$folderName.'&file='.$file_info1[$i]['file'].'" target="_blank">'.(str_replace('.txt','',$file_info1[$i]['file'])).'</a><br />';
    1972. 

  1972. 		} */
    1973. 

  1973. 		?>
    1974. 

  1974. 			  <td align="center">
    1975. 

  1975. 			  <? for($i=0;$i<count($file_info1);$i++) {?>
    1976. 

  1976. 			  <table width="100%" border="0">
    1977. 

  1977. 			  <tr>
    1978. 

  1978. 				<td><a href="/admin/print2.php?printer=true&path=<?=$folderName?>&file=<?=$file_info1[$i]['file']?>" target="_blank"><?=(str_replace('.txt','',$file_info1[$i]['file']))?></a></td>
    1979. 

  1979. 				<td width="20" align="right"><a href="/admin/print2.php?printer=true&ptype=1&path=<?=$folderName?>&file=<?=$file_info1[$i]['file']?>" target="_blank">Printer</a></td>
    1980. 

  1980. 			  </tr>
    1981. 

  1981. 			</table>
    1982. 

  1982. 			<? } ?>
    1983. 

  1983. 			  </td>
    1984. 

  1984. 			</tr>
    1985. 

  1985. 		</table>
    1986. 

  1986. 	  </div>
    1987. 

  1987. 	  <div style="width:80%; border:#030133 solid 1px; " >
    1988. 

  1988. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="">
    1989. 

  1989.         <tr>
    1990. 

  1990.           <td width="100%" align="center">
    1991. 

  1991. <?php	$themask = 'yyyy-mm-dd';
    1992. 

  1992. 		if($admindateformat==1)
    1993. 

  1993. 			$themask='mm/dd/yyyy';
    1994. 

  1994. 		elseif($admindateformat==2)
    1995. 

  1995. 			$themask='dd/mm/yyyy';
    1996. 

  1996. 		if(! $success) print "<p><font color='#FF0000'>" . $errmsg . "</font></p>"; ?>
    1997. 

  1997. 			<span name="searchspan" id="searchspan" <?php if($usepowersearch) print 'style="display:block"'; else print 'style="display:none"'?>>
    1998. 

  1998.             <table width="100%" border="0" cellpadding="1" cellspacing="1" bgcolor="">
    1999. 

  1999. 			  <form method="post" action="/admin/orderssz.php" name="psearchform">
    2000. 

  2000. 			  <input type="hidden" name="powersearch" value="1" />
    2001. 

  2001. 			  <tr bgcolor="#030133"><td colspan="6"><strong><font color="#E7EAEF">&nbsp;<?php print $yyPowSea?></font></strong></td></tr>
    2002. 

  2002. 			  <tr bgcolor="#E7EAEF"> 
    2003. 

  2003.                 <td align="right"><strong><?php print $yyOrdFro?>:</strong></td>
    2004. 

  2004. 				<td align="left">&nbsp;
    2005. 

  2005. 			    <input type="text" size="14" name="fromdate" value="<?php print $fromdate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.fromdate, '<?php print $themask?>', 0)" value='DP' /></td>
    2006. 

  2006. 				<td align="right"><strong><?php print $yyOrdTil?>:</strong></td>
    2007. 

  2007. 				<td align="left">&nbsp;
    2008. 

  2008. 				    <input type="text" size="14" name="todate" value="<?php print $todate?>" />
    2009. 

  2009.                     <input type="button" onclick="popUpCalendar(this, document.forms.psearchform.todate, '<?php print $themask?>', -205)" value='DP' /></td>
    2010. 

  2010. 				<td rowspan="2" align="right"><strong><?php print $yyOrdSta?>:</strong></td>
    2011. 

  2011. 				<td rowspan="2" align="left"><select name="ordstatus" size="3" multiple="multiple" id="ordstatus">
    2012. 

  2012. 				  <option value="9999" <?php if(strpos($ordstatus,"9999") !== FALSE) print "selected"?>><?php print $yyAllSta?></option>
    2013. 

  2013. 				  <?php
    2014. 

  2014. 						$ordstatus="";
    2015. 

  2015. 						$addcomma = "";
    2016. 

  2016. 						if(is_array(@$_REQUEST["ordstatus"])){
    2017. 

  2017. 							foreach($_REQUEST["ordstatus"] as $objValue){
    2018. 

  2018. 								if(is_array($objValue))$objValue=$objValue[0];
    2019. 

  2019. 								$ordstatus .= $addcomma . $objValue;
    2020. 

  2020. 								$addcomma = ",";
    2021. 

  2021. 							}
    2022. 

  2022. 						}else
    2023. 

  2023. 							$ordstatus = trim(@$_REQUEST["ordstatus"]);
    2024. 

  2024. 						$ordstatusarr = explode(",", $ordstatus);
    2025. 

  2025. 						for($index=0; $index < $numstatus; $index++){
    2026. 

  2026. 							print '<option value="' . $allstatus[$index]["statID"] . '"';
    2027. 

  2027. 							if(is_array($ordstatusarr)){
    2028. 

  2028. 								foreach($ordstatusarr as $objValue)
    2029. 

  2029. 									if($objValue==$allstatus[$index]["statID"]) print " selected";
    2030. 

  2030. 							}
    2031. 

  2031. 							print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    2032. 

  2032. 						} ?>
    2033. 

  2033. 				  </select>
    2034. 

  2034. 				</td>
    2035. 

  2035. 			  </tr>
    2036. 

  2036. 			  <tr bgcolor="#EAECEB">
    2037. 

  2037. 				<td align="right"><strong><?php print $yyOrdId?>:</strong></td>
    2038. 

  2038. 				<td align="left">&nbsp;<input type="text" size="14" name="ordid" value="<?php print $ordid?>" /></td>
    2039. 

  2039. 				<td align="right"><strong><?php print $yySeaTxt?>:</strong></td>
    2040. 

  2040. 				<td align="left">&nbsp;
    2041. 

  2041. 				    <input type="text" size="24" name="searchtext" value="<?php print $origsearchtext?>" /></td>
    2042. 

  2042. 				</tr>
    2043. 

  2043. 			  <tr bgcolor="#E7EAEF">
    2044. 

  2044. 				<td align="right">&nbsp;</td>
    2045. 

  2045. 				<td align="left">&nbsp;				</td>
    2046. 

  2046. 				<td align="right">&nbsp;</td>
    2047. 

  2047. 				<td align="left">&nbsp;</td>
    2048. 

  2048. 				<td colspan="2" align="center"><input type="checkbox" name="startwith" value="1" <?php if($usepowersearch) print "checked"?> /> <strong><?php print $yyStaPow?></strong><br /><br />
    2049. 

  2049. 				  <input type="submit" value="<?php print $yySearch?>" /> <input type="button" value="Stats" onclick="document.forms.psearchform.action='/admin/statssz.php';document.forms.psearchform.submit();" /></td>
    2050. 

  2050. 			  </tr>
    2051. 

  2051. 			  <tr>
    2052. 

  2052. 			  	<td colspan="6">
    2053. 

  2053. 				<?
    2054. 

  2054. 					$sql_status =  "SELECT count( * ) as statcount , os.statPrivate , os.statID
    2055. 

  2055. 									FROM orders o, orderstatus os
    2056. 

  2056. 									WHERE o.ordStatus = os.statID
    2057. 

  2057. 									AND ordEID=13
    2058. 

  2058. 									AND o.ordStatus
    2059. 

  2059. 									BETWEEN 0
    2060. 

  2060. 									AND 10
    2061. 

  2061. 									GROUP BY os.statID,os.statPrivate";
    2062. 

  2062. 					$result_status=mysql_query($sql_status);
    2063. 

  2063. 					while($row_status=mysql_fetch_assoc($result_status)){?>
    2064. 

  2064. 			  		<div style="color:#000066; font-weight:bold; border:#030133 solid 1px; margin:2px; float:left; width:146px;padding:2px; text-align:center; background-color:#E7EAEF;"><?=$row_status['statID'].'-'.$row_status['statPrivate'].': '.$row_status['statcount'] ?></div>
    2065. 

  2065. 			  	<? } ?>			  	</td>
    2066. 

  2066. 			  </tr>
    2067. 

  2067. 			  </form>
    2068. 

  2068. 			</table>
    2069. 

  2069. 			</span>
    2070. 

  2070.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    2071. 

  2071. 			  <form method="post" action="/admin/orderssz.php">
    2072. 

  2072. 			  <tr>
    2073. 

  2073. 			    <td align="center"> <input type="button" value="<?php print $yyPowSea?>" onclick="displaysearch()" /></td><td align="center"><p><strong><?php print $yyShoFrm?>:</strong> <select name="sd" size="1"><?php
    2074. 

  2074. 					$gotmatch=FALSE;
    2075. 

  2075. 					$thetime = time() + ($dateadjust*60*60);
    2076. 

  2076. 					$dayToday = date("d",$thetime);
    2077. 

  2077. 					$monthToday = date("m",$thetime);
    2078. 

  2078. 					$yearToday = date("Y",$thetime);
    2079. 

  2079. 					for($index=$dayToday; $index > 0; $index--){
    2080. 

  2080. 						$thedate = mktime(0, 0, 0, $monthToday, $index, $yearToday);
    2081. 

  2081. 						$thedatestr = date($admindatestr, $thedate);
    2082. 

  2082. 						print "<option value='" . $thedatestr . "'";
    2083. 

  2083. 						if($thedate==$sd){
    2084. 

  2084. 							print " selected";
    2085. 

  2085. 							$gotmatch=TRUE;
    2086. 

  2086. 						}
    2087. 

  2087. 						print ">" . $thedatestr . "</option>\n";
    2088. 

  2088. 					}
    2089. 

  2089. 					for($index=1; $index<=12; $index++){
    2090. 

  2090. 						$thedatestr = date($admindatestr, $thedate = mktime(0,0,0,date("m",$thetime)-$index,1,date("Y",$thetime)));
    2091. 

  2091. 						if(! $gotmatch && $thedate < $sd){
    2092. 

  2092. 							print "<option value='" . date($admindatestr, $sd) . "' selected>" . date($admindatestr, $sd) . "</option>";
    2093. 

  2093. 							$gotmatch=TRUE;
    2094. 

  2094. 						}
    2095. 

  2095. 						print "<option value='" . $thedatestr . "'";
    2096. 

  2096. 						if($thedate==$sd){
    2097. 

  2097. 							print " selected";
    2098. 

  2098. 							$gotmatch=TRUE;
    2099. 

  2099. 						}
    2100. 

  2100. 						print ">" . $thedatestr . "</option>\n";
    2101. 

  2101. 					}
    2102. 

  2102. 					if(!$gotmatch) print "<option value='" . date($admindatestr, $sd) . "' selected>" . date($admindatestr, $sd) . "</option>";
    2103. 

  2103. 				?></select> <strong><?php print $yyTo?>:</strong> <select name="ed" size="1"><?php
    2104. 

  2104. 					$gotmatch=FALSE;
    2105. 

  2105. 					$dayToday = date("d",$thetime);
    2106. 

  2106. 					$monthToday = date("m",$thetime);
    2107. 

  2107. 					$yearToday = date("Y",$thetime);
    2108. 

  2108. 					for($index=$dayToday; $index > 0; $index--){
    2109. 

  2109. 						$thedate = mktime(0, 0, 0, $monthToday, $index, $yearToday);
    2110. 

  2110. 						$thedatestr = date($admindatestr, $thedate);
    2111. 

  2111. 						print "<option value='" . $thedatestr . "'";
    2112. 

  2112. 						if($thedate==$ed){
    2113. 

  2113. 							print " selected";
    2114. 

  2114. 							$gotmatch=TRUE;
    2115. 

  2115. 						}
    2116. 

  2116. 						print ">" . $thedatestr . "</option>\n";
    2117. 

  2117. 					}
    2118. 

  2118. 					for($index=1; $index<=12; $index++){
    2119. 

  2119. 						if(! $gotmatch && $thedate < $ed){
    2120. 

  2120. 							print "<option value='" . date($admindatestr, $ed) . "' selected>" . date($admindatestr, $ed) . "</option>";
    2121. 

  2121. 							$gotmatch=TRUE;
    2122. 

  2122. 						}
    2123. 

  2123. 						$thedatestr = date($admindatestr, $thedate = mktime(0,0,0,date("m",$thetime)-$index,1,date("Y",$thetime)));
    2124. 

  2124. 						print "<option value='" . $thedatestr . "'";
    2125. 

  2125. 						if($thedate==$ed){
    2126. 

  2126. 							print " selected";
    2127. 

  2127. 							$gotmatch=TRUE;
    2128. 

  2128. 						}
    2129. 

  2129. 						print ">" . $thedatestr . "</option>\n";
    2130. 

  2130. 					}
    2131. 

  2131. 					if(!$gotmatch) print "<option value='" . date($admindatestr, $sd) . "' selected>" . date($admindatestr, $sd) . "</option>";
    2132. 

  2132. 				?></select> <input type="submit" value="Go" /></td>
    2133. 

  2133. 			  </tr>
    2134. 

  2134. 			  <tr><td colspan="2">&nbsp;</td></tr>
    2135. 

  2135. 			  </form>
    2136. 

  2136. 			</table>
    2137. 

  2137. 			<table width="100%" border="0" cellspacing="1" cellpadding="2" bgcolor="">
    2138. 

  2138. 			  <tr bgcolor="#030133"> 
    2139. 

  2139.                 <td align="center"><strong><font color="#E7EAEF"><?php print $yyOrdId?></font></strong></td>
    2140. 

  2140. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyName?></font></strong></td>
    2141. 

  2141. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyMethod?></font></strong></td>
    2142. 

  2142. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyAutCod?></font></strong></td>
    2143. 

  2143. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyDate?></font></strong></td>
    2144. 

  2144. 				<td align="center" bgcolor="#030133"><strong><font color="#E7EAEF"><?php print $yyStatus?></font></strong></td>
    2145. 

  2145. 			  </tr>
    2146. 

  2146. 			  <form method="post" name="mainform" action="/admin/orderssz.php">
    2147. 

  2147. 			  <?php if(@$_POST["powersearch"]=="1"){ ?>
    2148. 

  2148. 			  <input type="hidden" name="powersearch" value="1" />
    2149. 

  2149. 			  <input type="hidden" name="fromdate" value="<?php print trim(@$_POST["fromdate"])?>" />
    2150. 

  2150. 			  <input type="hidden" name="todate" value="<?php print trim(@$_POST["todate"])?>" />
    2151. 

  2151. 			  <input type="hidden" name="ordid" value="<?php print trim(str_replace('"','',str_replace("'",'',@$_POST["ordid"])))?>" />
    2152. 

  2152. 			  <input type="hidden" name="origsearchtext" value="<?php print trim(str_replace('"','&quot;',@$_POST["searchtext"]))?>" />
    2153. 

  2153. 			  <input type="hidden" name="searchtext" value="<?php print trim(str_replace('"',"&quot;",@$_POST["searchtext"]))?>" />
    2154. 

  2154. 			  <input type="hidden" name="ordstatus[]" value="<?php print $ordstatus?>" />
    2155. 

  2155. 			  <input type="hidden" name="startwith" value="<?php if($usepowersearch) print "1"?>" />
    2156. 

  2156. 			  <?php } ?>
    2157. 

  2157. 			  <input type="hidden" name="act" value="xxx" />
    2158. 

  2158. 			  <input type="hidden" name="id" value="xxx" />
    2159. 

  2159. 			  <input type="hidden" name="authcode" value="xxx" />
    2160. 

  2160. 			  <input type="hidden" name="ed" value="<?php print date($admindatestr, $ed)?>" />
    2161. 

  2161. 			  <input type="hidden" name="sd" value="<?php print date($admindatestr, $sd)?>" />
    2162. 

  2162. <?php
    2163. 

  2163. 	if(mysql_num_rows($alldata) > 0){
    2164. 

  2164. 		$rowcounter=0;
    2165. 

  2165. 		$ordTot=0;
    2166. 

  2166. 		$i=0;
    2167. 

  2167. 		$num_rows_order=mysql_num_rows($alldata);
    2168. 

  2168. 		while($rs = mysql_fetch_assoc($alldata)){
    2169. 

  2169. 			$order_id_array[$i]=$rs["ordID"];
    2170. 

  2170. 			$i++;			
    2171. 

  2171. 			if($rs["ordStatus"]>=3) $ordTot += $rs["ordTot"];
    2172. 

  2172. 			if($rs["ordStatus"]>=3) $num_auth_order += 1;
    2173. 

  2173. 			if($rs["ordAuthNumber"]=="" || is_null($rs["ordAuthNumber"])){
    2174. 

  2174. 				$startfont="<font color='#FF0000'>";
    2175. 

  2175. 				$endfont="</font>";
    2176. 

  2176. 			} else{
    2177. 

  2177. 				$startfont="";
    2178. 

  2178. 				$endfont="";
    2179. 

  2179. 			}
    2180. 

  2180. 			if($rs["order_changed"]=='yes'){ 
    2181. 

  2181. 				$startfont="<font color='#00CC00'>";
    2182. 

  2182. 				$endfont="</font>";
    2183. 

  2183. 			}
    2184. 

  2184. 			if(@$bgcolor=="#E7EAEF") $bgcolor="#EAECEB"; else $bgcolor="#E7EAEF";
    2185. 

  2185. 			//if(!empty($rs["ordEID"])) $bgcolor="#FA6561";			
    2186. 

  2186. ?>
    2187. 

  2187. 			  <tr bgcolor="<?php print $bgcolor?>"> 
    2188. 

  2188.                 <td align="center"><a onclick="return(checkprinter(this,event));" href="/admin/orderssz.php?id=<?php print $rs["ordID"]?>"><?php print "<strong>" . $startfont . $rs["ordID"] . $endfont . "</strong>"?></a></td>
    2189. 

  2189. 				<td align="center"><a onclick="return(checkprinter(this,event));" href="/admin/orderssz.php?id=<?php print $rs["ordID"]?>"><?php print $startfont . $rs["ordName"] . $endfont?></a></td>
    2190. 

  2190. 				<td align="center"><?php print $startfont . $rs["payProvName"] . ($rs["payProvName"]=='PayPal' && trim($rs["ordTransID"]) != '' ? ' CC' : '') . $endfont?></td>
    2191. 

  2191. 				<td align="center"><?
    2192. 

  2192. 					if($rs["ordAuthNumber"]=="" || is_null($rs["ordAuthNumber"])){
    2193. 

  2193. 						$isauthorized=FALSE;
    2194. 

  2194. 						//print '<input type="button" name="auth" value="' . $yyAuthor . '" onclick="authrec(\'' . $rs["ordID"] . '\')" />';
    2195. 

  2195. 					}else{
    2196. 

  2196. 						print $rs["ordAuthNumber"] ;
    2197. 

  2197. 						$isauthorized=TRUE;
    2198. 

  2198. 					}
    2199. 

  2199. 				?></td>
    2200. 

  2200. 				<td align="center"><font size="1"><?php print $startfont . date($admindatestr . "\<\\b\\r\>H:i:s", strtotime($rs["ordDate"])) . $endfont?></font></td>
    2201. 

  2201. 				<td align="center"><input type="hidden" style="background-color: " name="ordid<?php print $rowcounter?>" value="<?php print $rs["ordID"]?>" />
    2202. 

  2202. 				<?php
    2203. 

  2203. 						$gotitem=FALSE;
    2204. 

  2204. 						for($index=0; $index<$numstatus; $index++){
    2205. 

  2205. 							if(! $isauthorized && $allstatus[$index]["statID"]>2) break;
    2206. 

  2206. 							//if(! ($rs["ordStatus"] != 2 && $allstatus[$index]["statID"]==2)){
    2207. 

  2207. 								//print $allstatus[$index]["statID"];
    2208. 

  2208. 								if($rs["ordStatus"]==$allstatus[$index]["statID"]){
    2209. 

  2209. 									print $allstatus[$index]["statPrivate"];
    2210. 

  2210. 								}
    2211. 

  2211. 							//}
    2212. 

  2212. 						}
    2213. 

  2213. 					 ?>						</td>
    2214. 

  2214. 			  </tr>
    2215. 

  2215. <?php		$rowcounter++;
    2216. 

  2216. 			if($rowcounter>=1000){
    2217. 

  2217. 				print "<tr><td colspan='6' align='center'><strong>Limit of " . $rowcounter . " orders reached. Please refine your search.</strong></td></tr>";
    2218. 

  2218. 				break;
    2219. 

  2219. 			}
    2220. 

  2220. 		}
    2221. 

  2221. ?>
    2222. 

  2222. 			  <tr>
    2223. 

  2223. 				<td align="center" bgcolor="#030133"><strong><font color="#E7EAEF"><?php print FormatEuroCurrency($ordTot)?></font></strong></td>
    2224. 

  2224. 				<td align="center" bgcolor="#030133"><?php if($hasdeleted){ ?>
    2225. 

  2225. 				    <?php } ?></td>
    2226. 

  2226. 				<td bgcolor="#030133">				
    2227. 

  2227. 				&nbsp;&nbsp;&nbsp;</td>
    2228. 

  2228. 				<td bgcolor="#030133">&nbsp;</td>
    2229. 

  2229. 				<td bgcolor="#030133">&nbsp;</td>
    2230. 

  2230. 				<td align="center" bgcolor="#030133"><input type="hidden" name="maxitems" value="<?php print $rowcounter?>" /></td>
    2231. 

  2231. 			  </tr>
    2232. 

  2232. 			  </form>
    2233. 

  2233. 			  <form method="post" action="/admin/dumporders.php" name="dumpform">
    2234. 

  2234. 			  <?php if(@$_POST["powersearch"]=="1"){ ?>
    2235. 

  2235. 			  <input type="hidden" name="powersearch" value="1" />
    2236. 

  2236. 			  <input type="hidden" name="fromdate" value="<?php print trim(@$_POST["fromdate"])?>" />
    2237. 

  2237. 			  <input type="hidden" name="todate" value="<?php print trim(@$_POST["todate"])?>" />
    2238. 

  2238. 			  <input type="hidden" name="ordid" value="<?php print trim(str_replace('"','',str_replace("'",'',@$_POST["ordid"])))?>" />
    2239. 

  2239. 			  <input type="hidden" name="origsearchtext" value="<?php print trim(str_replace('"','&quot;',@$_POST["searchtext"]))?>" />
    2240. 

  2240. 			  <input type="hidden" name="searchtext" value="<?php print trim(str_replace('"',"&quot;",@$_POST["searchtext"]))?>" />
    2241. 

  2241. 			  <input type="hidden" name="ordstatus[]" value="<?php print $ordstatus?>" />
    2242. 

  2242. 			  <input type="hidden" name="startwith" value="<?php if($usepowersearch) print "1"?>" />
    2243. 

  2243. 			  <?php } ?>
    2244. 

  2244. 			  <input type="hidden" name="sd" value="<?php print date($admindatestr, $sd)?>" />
    2245. 

  2245. 			  <input type="hidden" name="ed" value="<?php print date($admindatestr, $ed)?>" />
    2246. 

  2246. 			  <input type="hidden" name="details" value="false" />
    2247. 

  2247. 			  <tr> 
    2248. 

  2248.                 <td align="center"><?=$num_rows_order?> Orders</td>
    2249. 

  2249. 				<td align="center"><?=$num_auth_order?> Authorized Orders</td>
    2250. 

  2250. 				<td colspan="2" align="center"><input type="submit" value="<?php print $yyDmpOrd?>" onclick="document.dumpform.details.value='false';" /></td>
    2251. 

  2251. 				<td colspan="2" align="center"><input type="submit" value="<?php print $yyDmpDet?>" onclick="document.dumpform.details.value='true';" /></td>
    2252. 

  2252. 			  </tr>
    2253. 

  2253. 			  </form>
    2254. 

  2254. <?php
    2255. 

  2255. 	}else{
    2256. 

  2256. ?>
    2257. 

  2257. 			  <tr> 
    2258. 

  2258.                 <td width="100%" colspan="6" align="center">
    2259. 

  2259. 					<p><?php
    2260. 

  2260. 					if(@$_POST["powersearch"]=="1")
    2261. 

  2261. 						print $yyNoMat1;
    2262. 

  2262. 					elseif($sd==$ed)
    2263. 

  2263. 						print $yyNoMat2 . " " . date($admindatestr, $sd) . ".";
    2264. 

  2264. 					else
    2265. 

  2265. 						print $yyNoMat3 . " " . date($admindatestr, $sd) . " and " . date($admindatestr, $ed) . ".";
    2266. 

  2266. 					?></p>				</td>
    2267. 

  2267. 			  </tr>
    2268. 

  2268. 			  <?php if($hasdeleted){ ?>
    2269. 

  2269. 			  <tr> 
    2270. 

  2270. 				<td colspan="6">&nbsp;</td>
    2271. 

  2271. 			  </tr>
    2272. 

  2272. 			  <?php } ?>
    2273. 

  2273. 			  </form>
    2274. 

  2274. <?php
    2275. 

  2275. 	} ?>
    2276. 

  2276. 			  <tr> 
    2277. 

  2277.                 <td width="100%" colspan="6" align="center">
    2278. 

  2278. 				  <p><br />
    2279. 

  2279. 					<a href="/admin/orderssz.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd)-1,date("d",$sd),date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed)-1,date("d",$ed),date("Y",$ed)))?>"><strong>- <?php print $yyMonth?></strong></a> | 
    2280. 

  2280. 					<a href="/admin/orderssz.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)-7,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)-7,date("Y",$ed)))?>"><strong>- <?php print $yyWeek?></strong></a> | 
    2281. 

  2281. 					<a href="/admin/orderssz.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)-1,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)-1,date("Y",$ed)))?>"><strong>- <?php print $yyDay?></strong></a> | 
    2282. 

  2282. 					<a href="/admin/orderssz.php"><strong><?php print $yyToday?></strong></a> | 
    2283. 

  2283. 					<a href="/admin/orderssz.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)+1,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)+1,date("Y",$ed)))?>"><strong><?php print $yyDay?> +</strong></a> | 
    2284. 

  2284. 					<a href="/admin/orderssz.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)+7,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)+7,date("Y",$ed)))?>"><strong><?php print $yyWeek?> +</strong></a> | 
    2285. 

  2285. 					<a href="/admin/orderssz.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd)+1,date("d",$sd),date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)+1,date("Y",$ed)))?>"><strong><?php print $yyMonth?> +</strong></a>				  </p>				</td>
    2286. 

  2286. 			  </tr>
    2287. 

  2287. 			</table>
    2288. 

  2288. 		  </td>
    2289. 

  2289. 		</tr>
    2290. 

  2290.       </table>
    2291. 

  2291. 	</div>
    2292. 

  2292. <?php
    2293. 

  2293. }
    2294. 

  2294. }
    2295. 

  2295. 

  2296. ?>
    2297. 

  2297. <script language="JavaScript" type="text/javascript">
    2298. 

  2298. function dorecalc(onlytotal){
    2299. 

  2299. var thetotal=0,totoptdiff=0;
    2300. 

  2300. for(var i in document.forms.editform){
    2301. 

  2301. if(i.substr(0,5)=="quant"){
    2302. 

  2302. 	theid = i.substr(5);
    2303. 

  2303. 	totopts=0;
    2304. 

  2304. 	delbutton = document.getElementById("del_"+theid);
    2305. 

  2305. 	if(delbutton==null)
    2306. 

  2306. 		isdeleted=false;
    2307. 

  2307. 	else
    2308. 

  2308. 		isdeleted=delbutton.checked;
    2309. 

  2309. 	if(! isdeleted){
    2310. 

  2310. 	for(var ii in document.forms.editform){
    2311. 

  2311. 		var opttext="optn"+theid+"_";
    2312. 

  2312. 		if(ii.substr(0,opttext.length)==opttext){
    2313. 

  2313. 			theitem = document.getElementById(ii);
    2314. 

  2314. 			if(document.getElementById('v'+ii)==null){
    2315. 

  2315. 				thevalue = theitem[theitem.selectedIndex].value;
    2316. 

  2316. 				if(thevalue.indexOf('|')>0){
    2317. 

  2317. 					totopts += parseFloat(thevalue.substr(thevalue.indexOf('|')+1));
    2318. 

  2318. 				}
    2319. 

  2319. 			}
    2320. 

  2320. 		}
    2321. 

  2321. 	}
    2322. 

  2322. 	thequant = parseInt(document.getElementById(i).value);
    2323. 

  2323. 	if(isNaN(thequant)) thequant=0;
    2324. 

  2324. 	theprice = parseFloat(document.getElementById("price"+theid).value);
    2325. 

  2325. 	if(isNaN(theprice)) theprice=0;
    2326. 

  2326. 	document.getElementById("optdiffspan"+theid).value=totopts;
    2327. 

  2327. 	optdiff = parseFloat(document.getElementById("optdiffspan"+theid).value);
    2328. 

  2328. 	if(isNaN(optdiff)) optdiff=0;
    2329. 

  2329. 	thetotal += thequant * (theprice + optdiff);
    2330. 

  2330. 	totoptdiff += thequant * optdiff;
    2331. 

  2331. 	}
    2332. 

  2332. }
    2333. 

  2333. }
    2334. 

  2334. document.getElementById("optdiffspan").innerHTML=totoptdiff.toFixed(2);
    2335. 

  2335. //document.getElementById("ordtotal").value = thetotal.toFixed(2);
    2336. 

  2336. document.getElementById("ordTot").innerHTML = thetotal.toFixed(2);
    2337. 

  2337. document.getElementById("ordtotal").value = thetotal.toFixed(2);
    2338. 

  2338. 

  2339. if(onlytotal==true) return;
    2340. 

  2340. <? if(!empty($prcTot)){?>
    2341. 

  2341. thetotal+=<?=$prcTot?>;
    2342. 

  2342. <? } ?>
    2343. 

  2343. statetaxrate = parseFloat(document.getElementById("staterate").value);
    2344. 

  2344. if(isNaN(statetaxrate)) statetaxrate=0;
    2345. 

  2345. countrytaxrate = parseFloat(document.getElementById("countryrate").value);
    2346. 

  2346. if(isNaN(countrytaxrate)) countrytaxrate=0;
    2347. 

  2347. discount = parseFloat(document.getElementById("ordDiscount").value);
    2348. 

  2348. if(isNaN(discount)){
    2349. 

  2349. 	discount=0;
    2350. 

  2350. 	document.getElementById("ordDiscount").value=0;
    2351. 

  2351. }
    2352. 

  2352. statetaxtotal = (statetaxrate * (thetotal-discount)) / 100.0;
    2353. 

  2353. countrytaxtotal = (countrytaxrate * (thetotal-discount)) / 100.0;
    2354. 

  2354. shipping = parseFloat(document.getElementById("ordShipping").value);
    2355. 

  2355. if(isNaN(shipping)){
    2356. 

  2356. 	//shipping=0;
    2357. 

  2357. 	//document.getElementById("ordShipping").value=0;
    2358. 

  2358. }
    2359. 

  2359. handling = parseFloat(document.getElementById("ordHandling").value);
    2360. 

  2360. if(isNaN(handling)){
    2361. 

  2361. 	handling=0;
    2362. 

  2362. 	document.getElementById("ordHandling").value=0;
    2363. 

  2363. }
    2364. 

  2364. <?php	if(@$taxShipping==2){ ?>
    2365. 

  2365. statetaxtotal += (statetaxrate * shipping) / 100.0;
    2366. 

  2366. countrytaxtotal += (countrytaxrate * shipping) / 100.0;
    2367. 

  2367. <?php	}
    2368. 

  2368. 		if(@$taxHandling==2){ ?>
    2369. 

  2369. statetaxtotal += (statetaxrate * handling) / 100.0;
    2370. 

  2370. countrytaxtotal += (countrytaxrate * handling) / 100.0;
    2371. 

  2371. <?php	} ?>
    2372. 

  2372. document.getElementById("ordStateTax").value = statetaxtotal.toFixed(2);
    2373. 

  2373. document.getElementById("ordCountryTax").value = countrytaxtotal.toFixed(2);
    2374. 

  2374. hstobj = document.getElementById("ordHSTTax");
    2375. 

  2375. hsttax=0;
    2376. 

  2376. if(! (hstobj==null)){
    2377. 

  2377. 	hsttax = parseFloat(hstobj.value);
    2378. 

  2378. }
    2379. 

  2379. grandtotal = (thetotal + shipping + handling + statetaxtotal + countrytaxtotal + hsttax) - discount;
    2380. 

  2380. 

  2381. 

  2382. document.getElementById("grandtotalspan").innerHTML = grandtotal.toFixed(2);
    2383. 

  2383. }
    2384. 

  2384. </script>
    2385. 

  2385.