PageRenderTime 81ms CodeModel.GetById 16ms RepoModel.GetById 0ms app.codeStats 1ms

/application/views/pages/admin/orders2.php

https://bitbucket.org/chadsaun/ifrogz-panel
PHP | 3556 lines | 3348 code | 83 blank | 125 comment | 594 complexity | 3fa33cfa3c95b43af6c5dc2da84f8a37 MD5 | raw file
    

  1. <?php
    2. 

  2. include('init.php');
    3. 

  3. if ($_POST["return_status_search"] == "") { $_SESSION["return_status_search"] = ""; }
    4. 

  4. else if ($_POST["return_status_search"] != "") { $_SESSION["return_status_search"] = $_POST["return_status_search"]; }
    5. 

  5. //showarray($_POST);
    6. 

  6. //$_SESSION['counter']=0;
    7. 

  7. //$_SESSION['counter_id']=0;
    8. 

  8. //This code is copyright (c) Internet Business Solutions SL, all rights reserved.
    9. 

  9. //The contents of this file are protect under law as the intellectual property of Internet
    10. 

  10. //Business Solutions SL. Any use, reproduction, disclosure or copying of any kind 
    11. 

  11. //without the express and written permission of Internet Business Solutions SL is forbidden.
    12. 

  12. //Author: Vince Reid, vince@virtualred.net
    13. 

  13. include(APPPATH.'views/pages/admin/cartmisc.php');
    14. 

  14. include_once(IFZROOT.'kohana.php');
    15. 

  15. session_register('order_id_commas');
    16. 

  16. $lisuccess=0;
    17. 

  17. if(@$dateadjust=="") $dateadjust=0;
    18. 

  18. if(@$dateformatstr == "") $dateformatstr = "m/d/Y";
    19. 

  19. $admindatestr="Y-m-d";
    20. 

  20. if(@$admindateformat=="") $admindateformat=0;
    21. 

  21. if($admindateformat==1)
    22. 

  22. 	$admindatestr="m/d/Y";
    23. 

  23. elseif($admindateformat==2)
    24. 

  24. 	$admindatestr="d/m/Y";
    25. 

  25. if(@$storesessionvalue=="") $storesessionvalue="virtualstore".time();
    26. 

  26. if(@$_GET["doedit"]=="true") $doedit=TRUE; else $doedit=FALSE;
    27. 

  27. function editfunc($data,$col,$size){
    28. 

  28. 	global $doedit;
    29. 

  29. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . str_replace('"','&quot;',$data) . '" size="' . $size . '">'); else return($data);
    30. 

  30. }
    31. 

  31. function editnumeric($data,$col,$size){
    32. 

  32. 	global $doedit;
    33. 

  33. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . number_format($data,2,'.','') . '" size="' . $size . '">'); else return(FormatEuroCurrency($data));
    34. 

  34. }
    35. 

  35. if(@$_SESSION["loggedon"] != $storesessionvalue && trim(@$_COOKIE["WRITECKL"])!=""){
    36. 

  36. 	$config = RBI_Kohana::config('database.default_ifrogz');
    37. 

  37. 	$config = $config['connection'];
    38. 

  38. 	$db=mysql_connect($config['hostname'], $config['username'], $config['password']);
    39. 

  39. 	mysql_select_db($config['database']) or die ('RBI connection failed.</td></tr></table></body></html>');
    40. 

  40. 	$rbiSQL = 'SELECT * 
    41. 

  41. 			   FROM employee 
    42. 

  42. 			   WHERE username="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKL"]))).'" and password="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKP"]))).'"';
    43. 

  43. 	$rs_rbi = mysql_query($rbiSQL);
    44. 

  44. 	if(mysql_num_rows($rs_rbi) > 0) {
    45. 

  45. 		@$_SESSION["loggedon"] = $storesessionvalue;
    46. 

  46. 	}else{
    47. 

  47. 		$lisuccess=2;
    48. 

  48. 	}
    49. 

  49. 	mysql_free_result($rs_rbi);
    50. 

  50. 	
    51. 

  51. 	include(APPPATH.'views/partials/admin/dbconnection.php');
    52. 

  52. }
    53. 

  53. if(($_SESSION["loggedon"] != $storesessionvalue && $lisuccess!=2) || @$disallowlogin==TRUE) exit();
    54. 

  54. if(@$htmlemails==TRUE) $emlNl = "<br />"; else $emlNl="\n";
    55. 

  55. //old release_stock function was here
    56. 

  56. if($lisuccess==2){
    57. 

  57. ?>
    58. 

  58. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    59. 

  59.         <tr>
    60. 

  60.           <td width="100%">
    61. 

  61.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    62. 

  62. 			  <tr> 
    63. 

  63.                 <td width="100%" colspan="4" align="center"><p>&nbsp;</p><p>&nbsp;</p>
    64. 

  64. 				  <p><strong><?php print $yyOpFai?></strong></p><p>&nbsp;</p>
    65. 

  65. 				  <p><?php print $yyCorCoo?> <?php print $yyCorLI?> <a href="/admin/login.php"><?php print $yyClkHer?></a>.</p>
    66. 

  66. 				</td>
    67. 

  67. 			  </tr>
    68. 

  68. 			</table>
    69. 

  69. 		  </td>
    70. 

  70. 		</tr>
    71. 

  71. 	  </table>
    72. 

  72. <?php
    73. 

  73. }else{
    74. 

  74. $success=true;
    75. 

  75. $alreadygotadmin = getadminsettings();
    76. 

  76. if(@$_POST["updatestatus"]=="1"){
    77. 

  77. 	// updates returns and adds to history
    78. 

  78. 	$result_r=mysql_query("SELECT ordReturnID FROM orders WHERE ordID=".$_POST["orderid"]);
    79. 

  79. 	$row_r=mysql_fetch_assoc($result_r);
    80. 

  80. 	//echo $row_r["ordReturnID"]."=".$_POST["return_status"];
    81. 

  81. 	//exit();
    82. 

  82. 	if($row_r["ordReturnID"]!=$_POST["return_status"] && $_POST["return_status"]>0 ){
    83. 

  83. 		$sql_return_history="INSERT INTO order_returns_history (ordID,reasonID,returnID,date_added) 
    84. 

  84. 		VALUES(".$_POST["orderid"].",".$_POST["return_reason"].",".$_POST["return_status"].",'".date('Y-m-d H:i:s')."')";
    85. 

  85. 		//echo $sql_return_history;
    86. 

  86. 		//exit();
    87. 

  87. 		mysql_query($sql_return_history);
    88. 

  88. 	}
    89. 

  89. 	// end
    90. 

  90. 	mysql_query("UPDATE orders SET ordStatusInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordStatusInfo"]))) ."', ordSupportInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordSupportInfo"]))) . "' , ordReturnID='" . trim(@$_POST["return_status"]) . "' WHERE ordID=" . @$_POST["orderid"]) or print(mysql_error());
    91. 

  91. }elseif(@$_GET["id"] != ""){
    92. 

  92. 	// Commented out below code because we put this into a cron job
    93. 

  93. 	/*if(@$_POST["delccdets"] != ""){
    94. 

  94. 		mysql_query("UPDATE orders SET ordCNum='' WHERE ordID=" . @$_GET["id"]);
    95. 

  95. 	}*/
    96. 

  96. 	$sSQL = "SELECT c.cartProdID,c.cartProdName,c.cartProdPrice,c.cartQuantity,c.cartID,p.pDownload,p.p_iscert,d.dsName,pInStock,pSell,c.cartReason,c.cartNote FROM cart c, products p LEFT JOIN dropshipper d ON p.pDropship=d.dsID WHERE c.cartProdID=p.pID AND c.cartOrderID=" . $_GET["id"];
    97. 

  97. 	$allorders = mysql_query($sSQL) or print(mysql_error().$sSQL);
    98. 

  98. }else{
    99. 

  99. 	// Delete old uncompleted orders.
    100. 

  100. 	//   Commented out below code because we put this into a daily cron job (delcc.php)
    101. 

  101. 	/*if($delccafter != 0){
    102. 

  102. 		$sSQL = "UPDATE orders SET ordCNum='' WHERE ordDate<'" . date("Y-m-d H:i:s", time()-($delccafter*60*60*24)) . "'";
    103. 

  103. 		mysql_query($sSQL) or print(mysql_error().$sSQL);
    104. 

  104. 	}*/
    105. 

  105. 	if($delAfter != 0){
    106. 

  106. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-($delAfter*60*60*24)) . "'";
    107. 

  107. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    108. 

  108. 		if(mysql_num_rows($result)>0){
    109. 

  109. 			$delStr="";
    110. 

  110. 			$delOptions="";
    111. 

  111. 			$addcomma = "";
    112. 

  112. 			while($rs = mysql_fetch_assoc($result)){
    113. 

  113. 				$delStr .= $addcomma . $rs["cartOrderID"];
    114. 

  114. 				$delOptions .= $addcomma . $rs["cartID"];
    115. 

  115. 				$addcomma = ",";
    116. 

  116. 			}
    117. 

  117. 			mysql_query("DELETE FROM orders WHERE ordID IN (" . $delStr . ")") or print(mysql_error());
    118. 

  118. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    119. 

  119. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    120. 

  120. 		}
    121. 

  121. 		mysql_free_result($result);
    122. 

  122. 	}else{
    123. 

  123. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartOrderID=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    124. 

  124. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    125. 

  125. 		if(mysql_num_rows($result)>0){
    126. 

  126. 			$delStr="";
    127. 

  127. 			$delOptions="";
    128. 

  128. 			$addcomma = "";
    129. 

  129. 			while($rs = mysql_fetch_assoc($result)){
    130. 

  130. 				$delStr .= $addcomma . $rs["cartOrderID"];
    131. 

  131. 				$delOptions .= $addcomma . $rs["cartID"];
    132. 

  132. 				$addcomma = ",";
    133. 

  133. 			}
    134. 

  134. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    135. 

  135. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    136. 

  136. 		}
    137. 

  137. 		mysql_free_result($result);
    138. 

  138. 	}
    139. 

  139. 	$numstatus=0;
    140. 

  140. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    141. 

  141. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    142. 

  142. 	while($rs = mysql_fetch_assoc($result)){
    143. 

  143. 		$allstatus[$numstatus++]=$rs;
    144. 

  144. 	}
    145. 

  145. 	mysql_free_result($result);
    146. 

  146. }
    147. 

  147. if(@$_POST["updatestatus"]=="1"){
    148. 

  148. ?>
    149. 

  149. <script language="JavaScript" type="text/javascript">
    150. 

  150. <!--
    151. 

  151. setTimeout("history.go(-2);",1100);
    152. 

  152. // -->
    153. 

  153. </script>
    154. 

  154. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    155. 

  155.         <tr>
    156. 

  156.           <td width="100%">
    157. 

  157.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    158. 

  158. 			  <tr> 
    159. 

  159.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    160. 

  160.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    161. 

  161. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    162. 

  162. 			  </tr>
    163. 

  163. 			</table>
    164. 

  164. 		  </td>
    165. 

  165. 		</tr>
    166. 

  166. 	  </table>
    167. 

  167. <?php
    168. 

  168. }elseif(!empty($_POST["getdownload"])){
    169. 

  169. 	$sql_down="SELECT * FROM digitaldownloads WHERE type='".$_POST['downloadtype']."' AND active=1 AND orderID=0 LIMIT ".$_POST['downQty'];
    170. 

  170. 	$result_down=mysql_query($sql_down);
    171. 

  171. 	$num_rows_download=mysql_num_rows($result_down);
    172. 

  172. 	if($num_rows_download>0){
    173. 

  173. 		$error=FALSE;
    174. 

  174. 		while($row_download=mysql_fetch_assoc($result_down)){
    175. 

  175. 			$sql_update="UPDATE digitaldownloads SET active=0, orderID=".$_POST['downOrder']." WHERE id=".$row_download['id'];
    176. 

  176. 			$result_update=mysql_query($sql_update);
    177. 

  177. 			if(!$result_update) $error=TRUE;
    178. 

  178. 		}
    179. 

  179. 		if(!$error) $pg_msg= 'Update Successful.';
    180. 

  180. 		else $pg_msg= 'Update Unsuccessful.';
    181. 

  181. 	} else $pg_msg= 'NO License and Password Available.';
    182. 

  182. 	$auto_link = "/admin/orders2.php?id=".$_POST['downOrder']."&doedit=true";
    183. 

  183. 	if(!$clone_error) {
    184. 

  184. 			
    185. 

  185. 		}else{
    186. 

  186. 			$auto_link = "/admin/orders2.php";
    187. 

  187. 		}
    188. 

  188. 	
    189. 

  189. 	?>
    190. 

  190. 	 <script language="JavaScript" type="text/javascript">
    191. 

  191. 	<!--
    192. 

  192. 	setTimeout("window.location='/admin/orders2.php?id=<?=$_POST['downOrder']?>&doedit=true'",4000);
    193. 

  193. 	// -->
    194. 

  194. 	</script>
    195. 

  195. 	 <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    196. 

  196.         <tr>
    197. 

  197.           <td width="100%">
    198. 

  198.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    199. 

  199. 			  <tr> 
    200. 

  200.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    201. 

  201.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    202. 

  202. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    203. 

  203. 			  </tr>
    204. 

  204. 			</table>
    205. 

  205. 		  </td>
    206. 

  206. 		</tr>
    207. 

  207. </table>
    208. 

  208. <? }elseif(!empty($_POST["giftcert"])){	  
    209. 

  209. 	$giftcertOrderID=$_POST["giftcertOrderID"];
    210. 

  210. 	$_SESSION['cert_prod']=$_POST["cert_prod"];
    211. 

  211. 	create_certificate($giftcertOrderID);
    212. 

  212. 	$auto_link = "/admin/orders2.php?id=".$giftcertOrderID."&doedit=true";
    213. 

  213. 	$pg_msg='Update Successful.';
    214. 

  214. 	?>
    215. 

  215. 	<script language="JavaScript" type="text/javascript">
    216. 

  216. 	<!--
    217. 

  217. 	setTimeout("window.location='/admin/orders2.php?id=<?=$giftcertOrderID?>&doedit=true'",4000);
    218. 

  218. 	// -->
    219. 

  219. 	</script>
    220. 

  220. 	 <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    221. 

  221.         <tr>
    222. 

  222.           <td width="100%">
    223. 

  223.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    224. 

  224. 			  <tr> 
    225. 

  225.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    226. 

  226.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    227. 

  227. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    228. 

  228. 			  </tr>
    229. 

  229. 			</table>
    230. 

  230. 		  </td>
    231. 

  231. 		</tr>
    232. 

  232. </table>
    233. 

  233. <? }elseif(@$_POST["doedit"] == "true"){
    234. 

  234. 	if(!empty($_POST['clone'])) {
    235. 

  235. 		// update old order status after editing
    236. 

  236. 		$ordstatusnew=$_POST["ordstatusnew"];
    237. 

  237. 		$ordStatusInfo=mysql_real_escape_string(trim(unstripslashes($_POST["ordStatusInfo"])));
    238. 

  238. 		$ordSupportInfo=mysql_real_escape_string(trim(unstripslashes($_POST["ordSupportInfo"])));
    239. 

  239. 		$sql_status_update="UPDATE orders SET ordStatus=".$ordstatusnew.",ordStatusInfo='".$ordStatusInfo."',ordSupportInfo='".$ordSupportInfo."' WHERE ordID=".$_POST["orderid"];
    240. 

  240. 		mysql_query($sql_status_update) or print(mysql_error().$sql_status_update);
    241. 

  241. 		if(!setNewLocation( $ordstatusnew , $_POST["orderid"],'Manual' )) print("Unable to record status change.");
    242. 

  242. 

  243. 		// stock manage
    244. 

  244. 		if($ordstatusnew>=3 && $ordstatusnew!=10 && $ordstatusnew!=17) {
    245. 

  245. 			mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    246. 

  246. 			do_stock_management($_POST["orderid"]); 
    247. 

  247. 			mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    248. 

  248. 		}
    249. 

  249. 		// GET ALL THE INFORMATION TO CLONE THE ORDER
    250. 

  250. 		//   - To clone an order we need to duplicate the order's information in the orders, cart, and cartoptions tables
    251. 

  251. 		$aNewOrder = array();
    252. 

  252. 		
    253. 

  253. 		$sql_orders = "SELECT * FROM orders WHERE ordID = " . $_POST["orderid"] ;
    254. 

  254. 		$res_orders = mysql_query($sql_orders) or print(mysql_error().$sql_orders);
    255. 

  255. 		$row_orders = mysql_fetch_assoc($res_orders);
    256. 

  256. 		$aNewOrder["orders"] = $row_orders;
    257. 

  257. 		$aNewOrder["orders"]["ordName"]=mysql_real_escape_string($row_orders["ordName"]);
    258. 

  258. 		$aNewOrder["orders"]["ordShipName"]=mysql_real_escape_string($row_orders["ordShipName"]);
    259. 

  259. 		if ($row_orders["ordShipCountry"] != "") {
    260. 

  260. 			 if ($row_orders["ordShipCountry"] == "United States of America") $aNewOrder["orders"]["ordShipType"]='Standard';
    261. 

  261. 		} else {
    262. 

  262. 			 if ($row_orders["ordCountry"] == "United States of America") $aNewOrder["orders"]["ordShipType"]='Standard';
    263. 

  263. 		}
    264. 

  264. 		
    265. 

  265. 		$sql_cart = "SELECT * FROM cart c LEFT JOIN cartoptions co ON c.cartID = co.coCartID
    266. 

  266. 					 WHERE c.cartOrderID = " . $_POST["orderid"] . "
    267. 

  267. 					 ORDER BY c.cartID, c.cartProdID";
    268. 

  268. 		
    269. 

  269. 		//echo $sql_cart; exit();
    270. 

  270. 		$res_cart = mysql_query($sql_cart) or print(mysql_error().$sql_cart);
    271. 

  271. 		$prod_id = '';
    272. 

  272. 		$i=0;
    273. 

  273. 		$j=0;
    274. 

  274. 		$isfirst = true;
    275. 

  275. 		while($row_cart = mysql_fetch_assoc($res_cart)) {
    276. 

  276. 			if($isfirst) {
    277. 

  277. 				$prod_id = $row_cart["cartProdID"];
    278. 

  278. 			}
    279. 

  279. 			if(($prod_id != $row_cart["cartProdID"]) && !$isfirst) {
    280. 

  280. 				$i++;
    281. 

  281. 				$j=0;
    282. 

  282. 				$prod_id = $row_cart["cartProdID"];
    283. 

  283. 			
    284. 

  284. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    285. 

  285. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    286. 

  286. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    287. 

  287. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    288. 

  288. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    289. 

  289. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    290. 

  290. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    291. 

  291. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    292. 

  292. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    293. 

  293. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    294. 

  294. 				
    295. 

  295. 				if(!empty($row_cart["coID"])){
    296. 

  296. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    297. 

  297. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    298. 

  298. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    299. 

  299. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    300. 

  300. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    301. 

  301. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    302. 

  302. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    303. 

  303. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    304. 

  304. 					$j++;
    305. 

  305. 				}
    306. 

  306. 			}else{
    307. 

  307. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    308. 

  308. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    309. 

  309. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    310. 

  310. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    311. 

  311. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    312. 

  312. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    313. 

  313. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    314. 

  314. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    315. 

  315. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    316. 

  316. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    317. 

  317. 				
    318. 

  318. 				if(!empty($row_cart["coID"])){
    319. 

  319. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    320. 

  320. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    321. 

  321. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    322. 

  322. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    323. 

  323. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    324. 

  324. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    325. 

  325. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    326. 

  326. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    327. 

  327. 					$j++;
    328. 

  328. 				}
    329. 

  329. 			}
    330. 

  330. 			$isfirst = false;
    331. 

  331. 		}
    332. 

  332. 		
    333. 

  333. 		//showarray($aNewOrder); exit();
    334. 

  334. 		
    335. 

  335. 		// UPDATE SOME OF THE INFORMATION FOR THE CLONED ORDER
    336. 

  336. 		$aNewOrder["orders"]["ordID"] = '';
    337. 

  337. 		$aNewOrder["orders"]["ordSessionID"] = session_id();
    338. 

  338. 		$aNewOrder["orders"]["ordAuthNumber"] = 'CLONED';
    339. 

  339. 		$aNewOrder["orders"]["ordTransID"] = 0;
    340. 

  340. 		$aNewOrder["orders"]["ordShipping"] = 0;
    341. 

  341. 		$aNewOrder["orders"]["ordStateTax"] = 0;
    342. 

  342. 		$aNewOrder["orders"]["ordCountryTax"] = 0;
    343. 

  343. 		$aNewOrder["orders"]["ordHSTTax"] = 0;
    344. 

  344. 		$aNewOrder["orders"]["ordHandling"] = 0;
    345. 

  345. 		$aNewOrder["orders"]["ordTotal"] = 0;
    346. 

  346. 		$aNewOrder["orders"]["ordDate"] = date("Y-m-d H:i:s");
    347. 

  347. 		$aNewOrder["orders"]["ordIP"] = $_SERVER['REMOTE_ADDR'];
    348. 

  348. 		$aNewOrder["orders"]["ordDiscount"] = 0;
    349. 

  349. 		$aNewOrder["orders"]["ordDiscountText"] = '';
    350. 

  350. 		$aNewOrder["orders"]["ordStatus"] = 2;
    351. 

  351. 		$aNewOrder["orders"]["ordStatusDate"] = date("Y-m-d H:i:s");
    352. 

  352. 		$aNewOrder["orders"]["ordStatusInfo"] = '';
    353. 

  353. 		$aNewOrder["orders"]["ordSupportInfo"] = '';
    354. 

  354. 		$aNewOrder["orders"]["order_changed"] = 'no';
    355. 

  355. 		
    356. 

  356. 		for($i=0; $i<count($aNewOrder["cart"]); $i++) {
    357. 

  357. 			$aNewOrder["cart"][$i]["cartSessionID"] = session_id();
    358. 

  358. 			$aNewOrder["cart"][$i]["cartDateAdded"] = date("Y-m-d H:i:s");
    359. 

  359. 		}
    360. 

  360. 		
    361. 

  361. 		//showarray($aNewOrder); exit();
    362. 

  362. 		
    363. 

  363. 		// CREATE CLONED ORDER
    364. 

  364. 		$clone_error = false;
    365. 

  365. 		$sql_cr_ord = "INSERT INTO orders ( ordSessionID , ordName , ordAddress , ordAddress2 , ordCity , ordState , 
    366. 

  366. 											ordZip , ordCountry , ordEmail , ordPhone , ordShipName , ordShipAddress , 
    367. 

  367. 											ordShipAddress2 , ordShipCity , ordShipState , ordShipZip , ordShipCountry , 
    368. 

  368. 											ordAuthNumber , ordAffiliate , ordPayProvider , ordTransID , ordShipping , 
    369. 

  369. 											ordStateTax , ordCountryTax , ordHSTTax , ordHandling , ordShipType , ordTotal , 
    370. 

  370. 											ordDate , ordIP , ordDiscount , ordDiscountText , ordExtra1 , ordExtra2 , ordAddInfo , 
    371. 

  371. 											ordCNum , ordComLoc , ordStatus , ordStatusDate , ordStatusInfo , ordPoApo , 
    372. 

  372. 											ordShipPoApo , ordHowFound , ordSupportInfo , order_changed , ordPmtMessage , 
    373. 

  373. 											ordCCType , ord_cert_id , ord_cert_amt , ordExtra3 , ordExtra4 , ordExtra5 , ordEID , 
    374. 

  374. 											ordEOrderID )
    375. 

  375. 						VALUES ( '".$aNewOrder["orders"]["ordSessionID"]."' , 
    376. 

  376. 								 '".$aNewOrder["orders"]["ordName"]."' , '".$aNewOrder["orders"]["ordAddress"]."' , 
    377. 

  377. 								 '".$aNewOrder["orders"]["ordAddress2"]."' , '".$aNewOrder["orders"]["ordCity"]."' , 
    378. 

  378. 								 '".$aNewOrder["orders"]["ordState"]."' , '".$aNewOrder["orders"]["ordZip"]."' , 
    379. 

  379. 								 '".$aNewOrder["orders"]["ordCountry"]."' , '".$aNewOrder["orders"]["ordEmail"]."' , 
    380. 

  380. 								 '".$aNewOrder["orders"]["ordPhone"]."' , '".$aNewOrder["orders"]["ordShipName"]."' , 
    381. 

  381. 								 '".$aNewOrder["orders"]["ordShipAddress"]."' , '".$aNewOrder["orders"]["ordShipAddress2"]."' , 
    382. 

  382. 								 '".$aNewOrder["orders"]["ordShipCity"]."' , '".$aNewOrder["orders"]["ordShipState"]."' , 
    383. 

  383. 								 '".$aNewOrder["orders"]["ordShipZip"]."' , '".$aNewOrder["orders"]["ordShipCountry"]."' , 
    384. 

  384. 								 '".$aNewOrder["orders"]["ordAuthNumber"]."' , '".$aNewOrder["orders"]["ordAffiliate"]."' , 
    385. 

  385. 								 '".$aNewOrder["orders"]["ordPayProvider"]."' , '".$aNewOrder["orders"]["ordTransID"]."' , 
    386. 

  386. 								 '".$aNewOrder["orders"]["ordShipping"]."' , '".$aNewOrder["orders"]["ordStateTax"]."' , 
    387. 

  387. 								 '".$aNewOrder["orders"]["ordCountryTax"]."' , '".$aNewOrder["orders"]["ordHSTTax"]."' , 
    388. 

  388. 								 '".$aNewOrder["orders"]["ordHandling"]."' , '".$aNewOrder["orders"]["ordShipType"]."' , 
    389. 

  389. 								 '".$aNewOrder["orders"]["ordTotal"]."' , '".$aNewOrder["orders"]["ordDate"]."' , 
    390. 

  390. 								 '".$aNewOrder["orders"]["ordIP"]."' , '".$aNewOrder["orders"]["ordDiscount"]."' , 
    391. 

  391. 								 '".$aNewOrder["orders"]["ordDiscountText"]."' , '".$aNewOrder["orders"]["ordExtra1"]."' , 
    392. 

  392. 								 '".$aNewOrder["orders"]["ordExtra2"]."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordAddInfo"])."' , 
    393. 

  393. 								 '".$aNewOrder["orders"]["ordCNum"]."' , '".$aNewOrder["orders"]["ordComLoc"]."' , 
    394. 

  394. 								 '".$aNewOrder["orders"]["ordStatus"]."' , '".$aNewOrder["orders"]["ordStatusDate"]."' , 
    395. 

  395. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordStatusInfo"])."' , '".$aNewOrder["orders"]["ordPoApo"]."' , 
    396. 

  396. 								 '".$aNewOrder["orders"]["ordShipPoApo"]."' , '".$aNewOrder["orders"]["ordHowFound"]."' , 
    397. 

  397. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordSupportInfo"])."' , '".$aNewOrder["orders"]["order_changed"]."' , 
    398. 

  398. 								 '".$aNewOrder["orders"]["ordPmtMessage"]."' , '".$aNewOrder["orders"]["ordCCType"]."' , 
    399. 

  399. 								 '".$aNewOrder["orders"]["ord_cert_id"]."' , '".$aNewOrder["orders"]["ord_cert_amt"]."' , 
    400. 

  400. 								 '".$aNewOrder["orders"]["ordExtra3"]."' , '".$aNewOrder["orders"]["ordExtra4"]."' , 
    401. 

  401. 								 '".$aNewOrder["orders"]["ordExtra5"]."' , '".$aNewOrder["orders"]["ordEID"]."' , 
    402. 

  402. 								 '".$aNewOrder["orders"]["ordEOrderID"]."' )";
    403. 

  403. 		//echo $sql_cr_ord; //exit();
    404. 

  404. 		$res_cr_ord = mysql_query($sql_cr_ord);
    405. 

  405. 		if(!$res_cr_ord) {
    406. 

  406. 			print(mysql_error().$sql_cr_ord);
    407. 

  407. 			$clone_error = true;
    408. 

  408. 		}
    409. 

  409. 		$ordID = mysql_insert_id();
    410. 

  410. 		$aNewOrder["orders"]["ordID"] = $ordID;
    411. 

  411. 		//showarray($aNewOrder);
    412. 

  412. 		if(!$clone_error) {
    413. 

  413. 			for($i=0; $i<count($aNewOrder["cart"]); $i++) {	
    414. 

  414. 				$aNewOrder["cart"][$i]["cartOrderID"] = $ordID;
    415. 

  415. 				$sql_cr_cart = "INSERT INTO cart ( cartSessionID , cartProdID , cartProdName , cartProdPrice , cartDateAdded , 
    416. 

  416. 												   cartQuantity , cartOrderID , cartCompleted )
    417. 

  417. 								VALUES ( '".session_id()."' , '".$aNewOrder["cart"][$i]["cartProdID"]."' , 
    418. 

  418. 										 '".$aNewOrder["cart"][$i]["cartProdName"]."' , '".$aNewOrder["cart"][$i]["cartProdPrice"]."' , 
    419. 

  419. 										 '".date("Y-m-d H:i:s")."' , '".$aNewOrder["cart"][$i]["cartQuantity"]."' , 
    420. 

  420. 										 '".$aNewOrder["cart"][$i]["cartOrderID"]."' , 1 )";
    421. 

  421. 				//echo $sql_cr_cart; //exit();
    422. 

  422. 				$res_cr_cart = mysql_query($sql_cr_cart) or print(mysql_error().$sql_cr_cart);
    423. 

  423. 				$cart_id = mysql_insert_id();
    424. 

  424. 				$aNewOrder["cart"][$i]["cartID"] = $cart_id;
    425. 

  425. 				
    426. 

  426. 				for($j=0; $j<count($aNewOrder["cart"][$i]["cartoptions"]); $j++) {
    427. 

  427. 					$sql_cr_cartoptions = "INSERT INTO cartoptions ( coCartID , coOptID , coOptGroup , coCartOption , coPriceDiff , 
    428. 

  428. 																	 coWeightDiff , coExtendShipping )
    429. 

  429. 										   VALUES ( ".$aNewOrder["cart"][$i]["cartID"]." , 
    430. 

  430. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"]." , 
    431. 

  431. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"]."' , 
    432. 

  432. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"]."' , 
    433. 

  433. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"]." , 
    434. 

  434. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"]." , 
    435. 

  435. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"]."' )";
    436. 

  436. 					//echo $sql_cr_cartoptions; //exit();
    437. 

  437. 					$res_cr_cartoptions = mysql_query($sql_cr_cartoptions) or print(mysql_error().$sql_cr_cartoptions);
    438. 

  438. 				}
    439. 

  439. 			}
    440. 

  440. 			//exit();
    441. 

  441. 			// UPDATE INVENTORY
    442. 

  442. 			$sSQL="SELECT cartID,cartProdID,cartQuantity,pSell FROM cart INNER JOIN products ON cart.cartProdID=products.pID WHERE cartOrderID='" . $ordID . "'";
    443. 

  443. 			$result1 = mysql_query($sSQL) or print(mysql_error().$sSQL);
    444. 

  444. 			while($rs1 = mysql_fetch_array($result1)){
    445. 

  445. 				if(($rs1["pSell"] & 2) == 2){
    446. 

  446. 					// Determine extended shipping
    447. 

  447. 					$sSQL2 = "SELECT coID,optStock,cartQuantity,coOptID,optExtend_shipping,optMin FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2";
    448. 

  448. 					// ADDED by Chad - Fix to allow quantity change for custom screenz
    449. 

  449. 					if(eregi("^[a-z]{1,3}-Custom$",$pID)) {
    450. 

  450. 						$sSQL2 .= " OR optType=3";
    451. 

  451. 					}
    452. 

  452. 					// ADD ENDED
    453. 

  453. 					$sSQL2 .= ") AND cartID='" . $rs1['cartID'] . "'";
    454. 

  454. 					$result2 = mysql_query($sSQL2) or print(mysql_error().$sSQL2);
    455. 

  455. 					if(mysql_num_rows($result2)>0){
    456. 

  456. 						while($rs2 = mysql_fetch_assoc($result2)){
    457. 

  457. 							$pInStock = (int)$rs2["optStock"]+1000;
    458. 

  458. 							$actualpInStock = (int)$rs2["optStock"];
    459. 

  459. 							$extend_shipping = $rs2["optExtend_shipping"];//extends shipping time, displayed in the cart
    460. 

  460. 							$min = $rs2["optMin"];//sets how many in stock above zero the extend_shipping is displayed in the cart 
    461. 

  461. 							$coID = $rs2["coID"];
    462. 

  462. 							$totQuant = 0;
    463. 

  463. 							$cartQuantity = (int)$rs2["cartQuantity"];
    464. 

  464. 							$sSQL3 = "SELECT SUM(cartQuantity) AS cartQuant FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID WHERE cartCompleted=0 AND cartCustID=0 AND coOptID=" . $rs2["coOptID"];
    465. 

  465. 							$result3 = mysql_query($sSQL3) or print(mysql_error().$sSQL3);
    466. 

  466. 							if($rs3 = mysql_fetch_assoc($result3))
    467. 

  467. 								if(! is_null($rs3["cartQuant"])) $totQuant = (int)$rs3["cartQuant"];
    468. 

  468. 							mysql_free_result($result3);
    469. 

  469. 							$extend='';
    470. 

  470. 							//echo '<div style"position:absolute; z-index:100;>actual='.$actualpInStock.' total qty='.$totQuant. ' cart qty='.$cartQuantity.' min='. $min. ' new qty='.abs((int)$objValue).'</div>';
    471. 

  471. 							if(($actualpInStock - $totQuant + $cartQuantity - $min) < 0) {
    472. 

  472. 								$extend = $extend_shipping;
    473. 

  473. 							}
    474. 

  474. 							$sql_co="UPDATE cartoptions SET coExtendShipping='$extend' WHERE coID=".$coID;
    475. 

  475. 								mysql_query($sql_co);
    476. 

  476. 						}
    477. 

  477. 					}
    478. 

  478. 					// End of Determine extended shipping
    479. 

  479. 					// Inventory get subtracted when set to authorized
    480. 

  480. 					/*$sSQL = "SELECT coOptID FROM cartoptions INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2) AND coCartID=" . $rs1["cartID"];
    481. 

  481. 					$result2 = mysql_query($sSQL) or print(mysql_error());
    482. 

  482. 					while($rs2 = mysql_fetch_array($result2)){
    483. 

  483. 						$sSQL = "UPDATE options SET optStock=optStock-" . $rs1["cartQuantity"] . " WHERE optID=" . $rs2["coOptID"];
    484. 

  484. 						mysql_query($sSQL) or print(mysql_error());
    485. 

  485. 					}
    486. 

  486. 					mysql_free_result($result2);*/
    487. 

  487. 				//}else{
    488. 

  488. 					//$sSQL = "UPDATE products SET pInStock=pInStock-" . $rs1["cartQuantity"] . " WHERE pID='" . $rs1["cartProdID"] . "'";
    489. 

  489. 					//mysql_query($sSQL) or print(mysql_error());
    490. 

  490. 				}
    491. 

  491. 			}
    492. 

  492. 			mysql_free_result($result1);
    493. 

  493. 					
    494. 

  494. 			// INSERT LOCATION
    495. 

  495. 			setNewLocation(2,$ordID,'Manual');
    496. 

  496. 			$sql_insert="INSERT INTO orderssplit (orgOrder,newOrder,movedCardIDs,splitType) VALUES (".$_POST["orderid"].",".$ordID.",'','Cloned')";
    497. 

  497. 			$result_insert = mysql_query($sql_insert);
    498. 

  498. 			if(!$result_insert) {print(mysql_error().$sql_insert);exit();}
    499. 

  499. 		}
    500. 

  500. 		
    501. 

  501. 		if($clone_error) {
    502. 

  502. 			$pg_msg = "There was a problem cloning your order.";
    503. 

  503. 		}else{
    504. 

  504. 			$pg_msg = "Your order has been cloned successfully.";
    505. 

  505. ?>
    506. 

  506. <script language="JavaScript" type="text/javascript">
    507. 

  507. <!--
    508. 

  508. //setTimeout("history.go(-2);",1100);
    509. 

  509. setTimeout("window.location='/admin/orders2.php?id=<?=$ordID?>&doedit=true'",4000);
    510. 

  510. // -->
    511. 

  511. </script>
    512. 

  512. <?php
    513. 

  513. 		}
    514. 

  514. 		
    515. 

  515. 		if(!$clone_error) {
    516. 

  516. 			$auto_link = "/admin/orders2.php?id=$ordID&doedit=true";
    517. 

  517. 		}else{
    518. 

  518. 			$auto_link = "/admin/orders2.php";
    519. 

  519. 		}
    520. 

  520. ?>
    521. 

  521. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    522. 

  522.         <tr>
    523. 

  523.           <td width="100%">
    524. 

  524.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    525. 

  525. 			  <tr> 
    526. 

  526.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    527. 

  527.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    528. 

  528. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    529. 

  529. 			  </tr>
    530. 

  530. 			</table>
    531. 

  531. 		  </td>
    532. 

  532. 		</tr>
    533. 

  533. 	  </table>
    534. 

  534. <?php
    535. 

  535. 	}else{
    536. 

  536. 		$OWSP = "";
    537. 

  537. 		$sSQL = "SELECT ordSessionID FROM orders WHERE ordID='" . $_POST["orderid"] . "'";
    538. 

  538. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    539. 

  539. 		$rs = mysql_fetch_array($result);
    540. 

  540. 		$thesessionid = $rs["ordSessionID"];
    541. 

  541. 		mysql_free_result($result);
    542. 

  542. 		$sSQL = "UPDATE orders SET ";
    543. 

  543. 		$sSQL .= "ordName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["name"]))) . "',";
    544. 

  544. 		$sSQL .= "ordAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address"]))) . "',";
    545. 

  545. 		if(@$useaddressline2==TRUE) $sSQL .= "ordAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address2"]))) . "',";
    546. 

  546. 		$sSQL .= "ordCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["city"]))) . "',";
    547. 

  547. 		$sSQL .= "ordPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["APO"]))) . "',";
    548. 

  548. 		$sSQL .= "ordState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["state"]))) . "',";
    549. 

  549. 		$sSQL .= "ordZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["zip"]))) . "',";
    550. 

  550. 		$sSQL .= "ordCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["country"]))) . "',";
    551. 

  551. 		$sSQL .= "ordEmail='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["email"]))) . "',";
    552. 

  552. 		$sSQL .= "ordPhone='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["phone"]))) . "',";
    553. 

  553. 		$sSQL .= "ordShipName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["sname"]))) . "',";
    554. 

  554. 		$sSQL .= "ordShipAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress"]))) . "',";
    555. 

  555. 		if(@$useaddressline2==TRUE) $sSQL .= "ordShipAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress2"]))) . "',";
    556. 

  556. 		$sSQL .= "ordShipCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["scity"]))) . "',";
    557. 

  557. 		$sSQL .= "ordShipPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ShipAPO"]))) . "',";
    558. 

  558. 		$sSQL .= "ordShipState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["sstate"]))) . "',";
    559. 

  559. 		$sSQL .= "ordShipZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["szip"]))) . "',";
    560. 

  560. 		$sSQL .= "ordShipCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["scountry"]))) . "',";
    561. 

  561. 		$sSQL .= "ordShipType='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["shipmethod"]))) . "',";
    562. 

  562. 		$sSQL .= "ordIP='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ipaddress"]))) . "',";
    563. 

  563. 		$ordComLoc = 0;
    564. 

  564. 		if(trim(@$_POST["commercialloc"])=="Y") $ordComLoc = 1;
    565. 

  565. 		if(trim(@$_POST["wantinsurance"])=="Y") $ordComLoc += 2;
    566. 

  566. 		$sSQL .= "ordComLoc=" . $ordComLoc . ",";
    567. 

  567. 		$sSQL .= "ordAffiliate='" . trim(@$_POST["PARTNER"]) . "',";
    568. 

  568. 		$sSQL .= "ordAddInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordAddInfo"]))) . "',";
    569. 

  569. 		$sSQL .= "ordStatus=" . $ordstatusnew . ",";
    570. 

  570. 		$sSQL .= "ordStatusInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordStatusInfo"]))) . "',";
    571. 

  571. 		$sSQL .= "ordReturnID=". trim(@$_POST["return_status"]) . ",";		
    572. 

  572. 		$sSQL .= "ordSupportInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordSupportInfo"]))) . "',";
    573. 

  573. 		$sSQL .= "order_changed='yes',";
    574. 

  574. 		$sSQL .= "ordDiscountText='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["discounttext"]))) . "',";
    575. 

  575. 		$sSQL .= "ordExtra1='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra1"]))) . "',";
    576. 

  576. 		$sSQL .= "ordExtra2='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra2"]))) . "',";
    577. 

  577. 		$sSQL .= "ordShipping='" . mysql_real_escape_string(trim(@$_POST["ordShipping"])) . "',";
    578. 

  578. 		$sSQL .= "ordStateTax='" . mysql_real_escape_string(trim(@$_POST["ordStateTax"])) . "',";
    579. 

  579. 		$sSQL .= "ordCountryTax='" . mysql_real_escape_string(trim(@$_POST["ordCountryTax"])) . "',";
    580. 

  580. 		if(@$canadataxsystem==TRUE) $sSQL .= "ordHSTTax='" . mysql_real_escape_string(trim(@$_POST["ordHSTTax"])) . "',";
    581. 

  581. 		$sSQL .= "ordDiscount='" . mysql_real_escape_string(trim(@$_POST["ordDiscount"])) . "',";
    582. 

  582. 		$sSQL .= "ordHandling='" . mysql_real_escape_string(trim(@$_POST["ordHandling"])) . "',";
    583. 

  583. 		$sSQL .= "ordAuthNumber='" . mysql_real_escape_string(trim(@$_POST["ordAuthNumber"])) . "',";
    584. 

  584. 		$sSQL .= "ordTransID='" . mysql_real_escape_string(trim(@$_POST["ordTransID"])) . "',";
    585. 

  585. 		$sSQL .= "ordTotal='" . mysql_real_escape_string(trim(@$_POST["ordtotal"])) . "',";
    586. 

  586. 		$sSQL .= "ord_cert_amt='" . mysql_real_escape_string(trim(@$_POST["ord_cert_amt"])) . "'";
    587. 

  587. 		$sSQL .= " WHERE ordID='" . $_POST["orderid"] . "'";
    588. 

  588. 		mysql_query($sSQL) or print(mysql_error().$sSQL);
    589. 

  589. 		
    590. 

  590. 		if(!setNewLocation( $ordstatusnew , $_POST["orderid"],'Manual' )) print("Unable to record status change.");
    591. 

  591. 		$msg='';
    592. 

  592. 		foreach($_POST as $objItem => $objValue){
    593. 

  593. 			//print $objItem . " : " . $objValue . "<br>";
    594. 

  594. 			if(substr($objItem,0,6)=="prodid"){
    595. 

  595. 				$idno = (int)substr($objItem, 6);
    596. 

  596. 				$cartid = trim(@$_POST["cartid" . $idno]);
    597. 

  597. 				$prodid = trim(@$_POST["prodid" . $idno]);
    598. 

  598. 				$quant = trim(@$_POST["quant" . $idno]);
    599. 

  599. 				$theprice = trim(@$_POST["price" . $idno]);
    600. 

  600. 				$prodname = trim(@$_POST["prodname" . $idno]);
    601. 

  601. 				$delitem = trim(@$_POST["del_" . $idno]);
    602. 

  602. 				$certID = trim(@$_POST["certID" . $idno]);
    603. 

  603. 				$reason = trim(@$_POST["reason_" . $idno]);
    604. 

  604. 				$note = trim(@$_POST["note_" . $idno]);
    605. 

  605. 				
    606. 

  606. 				if($delitem=="yes"){
    607. 

  607. 					// Added By Blake
    608. 

  608. 					// Deletes License ID and Password from downloads
    609. 

  609. 					$sql_check="SELECT p.pDownload,p.p_iscert,c.cartOrderID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    610. 

  610. 					$result_check=mysql_query($sql_check);
    611. 

  611. 					$rs_check=mysql_fetch_assoc($result_check);
    612. 

  612. 					if(!empty($rs_check["pDownload"])){
    613. 

  613. 						$sql_down="UPDATE digitaldownloads SET active=1, orderID=0 WHERE orderID=".$rs_check['cartOrderID']." AND type='".$prodid."'";
    614. 

  614. 						mysql_query($sql_down) or print(mysql_error().$sql_down);
    615. 

  615. 					}
    616. 

  616. 					//deletes gift cert
    617. 

  617. 					if($rs_check["p_iscert"]==1 && !empty($certID)){
    618. 

  618. 						$sql_cert="DELETE FROM certificates WHERE cert_id=".$certID;
    619. 

  619. 						mysql_query($sql_cert) or print(mysql_error().$sql_cert);
    620. 

  620. 					}
    621. 

  621. 					//end
    622. 

  622. 					mysql_query("DELETE FROM cart WHERE cartID=" . $cartid) or print(mysql_error());
    623. 

  623. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    624. 

  624. 					$cartid = "";
    625. 

  625. 				}elseif($cartid != ""){
    626. 

  626. 					$sSQL = "UPDATE cart SET cartProdID='" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',cartProdPrice=" . $theprice . ",cartProdName='" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',cartQuantity=" . $quant . ", cartReason=" . $reason . ", cartNote='" . $note . "' WHERE cartID=" . $cartid;
    627. 

  627. 					mysql_query($sSQL) or print(mysql_error().$sSQL);
    628. 

  628. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    629. 

  629. 					//download license ID and Password
    630. 

  630. 					$sql_check2="SELECT p.pDownload,p.p_iscert,c.cartOrderID,pID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    631. 

  631. 					$result_check2=mysql_query($sql_check2);
    632. 

  632. 					$rs_check2=mysql_fetch_assoc($result_check2);
    633. 

  633. 					if(!empty($rs_check2["pDownload"])){
    634. 

  634. 						$sql_down_check="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND orderID=".$_POST["orderid"];
    635. 

  635. 						$result_down_check=mysql_query($sql_down_check);
    636. 

  636. 						$num_rows_download_check=mysql_num_rows($result_down_check);
    637. 

  637. 						$quantdownloads=$quant-$num_rows_download_check;
    638. 

  638. 						if($quantdownloads>0){
    639. 

  639. 							$sql_down1="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND active=1 AND orderID=0 LIMIT ".$quantdownloads;
    640. 

  640. 							$result_down1=mysql_query($sql_down1);
    641. 

  641. 							$num_rows_download1=mysql_num_rows($result_down1);
    642. 

  642. 							if($num_rows_download1>0){
    643. 

  643. 								$error=FALSE;
    644. 

  644. 

  645. 								while($row_download1=mysql_fetch_assoc($result_down1)){
    646. 

  646. 									$sql_update1="UPDATE digitaldownloads SET active=0, orderID=".$_POST["orderid"]." WHERE id=".$row_download1['id'];
    647. 

  647. 									$result_update1=mysql_query($sql_update1);
    648. 

  648. 									if(!$result_update1) $error=TRUE;
    649. 

  649. 								}
    650. 

  650. 							}
    651. 

  651. 						}elseif($quantdownloads<0){
    652. 

  652. 							$thisquantdownloads=$quantdownloads;
    653. 

  653. 							while($row_down_check=mysql_fetch_assoc($result_down_check)){
    654. 

  654. 								$sql_update2="UPDATE digitaldownloads SET active=1, orderID=0 WHERE id=".$row_down_check["id"];
    655. 

  655. 								$result_update2=mysql_query($sql_update2);
    656. 

  656. 								$thisquantdownloads++;
    657. 

  657. 								if($thisquantdownloads==0) break;
    658. 

  658. 							}
    659. 

  659. 						}
    660. 

  660. 					}
    661. 

  661. 				}else{
    662. 

  662. 					$sSQL = "INSERT INTO cart (cartSessionID,cartProdID,cartQuantity,cartCompleted,cartProdName,cartProdPrice,cartOrderID,cartReason,cartDateAdded) VALUES (";
    663. 

  663. 					$sSQL .= "'" . $thesessionid . "',";
    664. 

  664. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',";
    665. 

  665. 					$sSQL .= $quant . ",";
    666. 

  666. 					$sSQL .= "1,";
    667. 

  667. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',";
    668. 

  668. 					$sSQL .= "'" . $theprice . "',";
    669. 

  669. 					$sSQL .= @$_POST["orderid"] . ",";
    670. 

  670. 					if($reason=="") $reason=0;
    671. 

  671. 					$sSQL .= $reason . ",";
    672. 

  672. 					$sSQL .= "'" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "')";
    673. 

  673. 					mysql_query($sSQL) or print(mysql_error().$sSQL);
    674. 

  674. 					$cartid = mysql_insert_id();
    675. 

  675. 					//download license ID and Password
    676. 

  676. 					$sql_check2="SELECT p.pDownload,p.p_iscert,c.cartOrderID,pID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    677. 

  677. 					$result_check2=mysql_query($sql_check2);
    678. 

  678. 					$rs_check2=mysql_fetch_assoc($result_check2);
    679. 

  679. 

  680. 					if(!empty($rs_check2["pDownload"])){
    681. 

  681. 						$sql_down1="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND active=1 AND orderID=0 LIMIT ".$quant;
    682. 

  682. 						$result_down1=mysql_query($sql_down1);
    683. 

  683. 						$num_rows_download1=mysql_num_rows($result_down1);
    684. 

  684. 						if($num_rows_download1>0){
    685. 

  685. 							$error=FALSE;
    686. 

  686. 							while($row_download1=mysql_fetch_assoc($result_down1)){
    687. 

  687. 								$sql_update1="UPDATE digitaldownloads SET active=0, orderID=".$_POST["orderid"]." WHERE id=".$row_download1['id'];
    688. 

  688. 								$result_update1=mysql_query($sql_update1);
    689. 

  689. 								if(!$result_update1) $error=TRUE;
    690. 

  690. 							}
    691. 

  691. 						} else $pg_msg= 'NO License and Password Available.';
    692. 

  692. 					}
    693. 

  693. 				}
    694. 

  694. 				if($cartid != ""){
    695. 

  695. 					$optprefix = "optn" . $idno . '_';					
    696. 

  696. 					$prefixlen = strlen($optprefix);
    697. 

  697. 					$isemailcert=FALSE;
    698. 

  698. 					foreach($_POST as $kk => $kkval){
    699. 

  699. 						if(substr($kk,0,$prefixlen)==$optprefix && trim($kkval) != ''){
    700. 

  700. 							$optidarr = split('\|', $kkval);
    701. 

  701. 							$optid = $optidarr[0];
    702. 

  702. 							if(@$_POST["v" . $kk] == ""){
    703. 

  703. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)."," . $OWSP . "optPriceDiff,optWeightDiff,optType,optFlags FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    704. 

  704. 								$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    705. 

  705. 								if($rs = mysql_fetch_array($result)){
    706. 

  706. 									if($rs["optName"]=='Email') $isemailcert=TRUE;
    707. 

  707. 									if(abs($rs["optType"]) != 3){
    708. 

  708. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string($rs[getlangid("optName",32)]) . "',";
    709. 

  709. 										$sSQL .= $optidarr[1] . ",0)";
    710. 

  710. 									}else
    711. 

  711. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','',0,0)";
    712. 

  712. 									mysql_query($sSQL) or print(mysql_error().$sSQL);
    713. 

  713. 								}
    714. 

  714. 								mysql_free_result($result);
    715. 

  715. 							}else{
    716. 

  716. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)." FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    717. 

  717. 								$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    718. 

  718. 								$rs = mysql_fetch_array($result);
    719. 

  719. 								if($rs["optName"]=='Email') $isemailcert=TRUE;
    720. 

  720. 								$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string(unstripslashes(trim(@$_POST["v" . $kk]))) . "',0,0)";
    721. 

  721. 								mysql_query($sSQL) or print(mysql_error().$sSQL);
    722. 

  722. 								mysql_free_result($result);
    723. 

  723. 							}
    724. 

  724. 							//gift cert
    725. 

  725. 							if($isemailcert){
    726. 

  726. 								$giftcertOrderID=$_POST["orderid"];
    727. 

  727. 								$_SESSION['cert_prod']=$prodid;
    728. 

  728. 								create_certificate($giftcertOrderID);
    729. 

  729. 							}
    730. 

  730. 						}
    731. 

  731. 					}
    732. 

  732. 				}
    733. 

  733. 			}			
    734. 

  734. 		}
    735. 

  735. 		//echo 'edit new='.$ordstatusnew.' '.$_POST["orderid"];
    736. 

  736. 		$ordstatusnew=$_POST["ordstatusnew"];
    737. 

  737. 		// stock manage
    738. 

  738. 		if($ordstatusnew>=3 && $ordstatusnew!=10 && $ordstatusnew!=17) {
    739. 

  739. 			mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    740. 

  740. 			do_stock_management($_POST["orderid"]); //echo 'do_stock_management 2';
    741. 

  741. 			mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    742. 

  742. 		}
    743. 

  743. ?>
    744. 

  744. 	<script language="JavaScript" type="text/javascript">
    745. 

  745. 	<!--
    746. 

  746. 	//setTimeout("history.go(-2);",1100);
    747. 

  747. 	setTimeout("window.location='/admin/orders2.php?ordid=<?=$_POST["orderid"]?>'",1100);
    748. 

  748. 	// -->
    749. 

  749. 	</script>
    750. 

  750. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    751. 

  751.         <tr>
    752. 

  752.           <td width="100%">
    753. 

  753.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    754. 

  754. 			  <tr> 
    755. 

  755.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    756. 

  756.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    757. 

  757. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    758. 

  758. 			  </tr>
    759. 

  759. 			</table>
    760. 

  760. 		  </td>
    761. 

  761. 		</tr>
    762. 

  762. 	  </table>
    763. 

  763. <?php
    764. 

  764. 	}
    765. 

  765. }elseif(@$_GET["id"] != ""){
    766. 

  766. 	$statetaxrate=0;
    767. 

  767. 	$countrytaxrate=0;
    768. 

  768. 	$hsttaxrate=0;
    769. 

  769. 	$countryorder=0;
    770. 

  770. 	$sSQL = "SELECT ordID,ordName,ordAddress,ordAddress2,ordCity,ordState,ordZip,ordCountry,ordEmail,ordPhone,ordShipName,ordShipAddress,ordShipAddress2,ordShipCity,ordShipState,ordShipZip,ordShipCountry,ordPayProvider,ordAuthNumber,ordTransID,ordTotal,ordDate,ordStateTax,ordCountryTax,ordHSTTax,ordShipping,ordShipType,ordIP,ordAffiliate,ordDiscount,ordHandling,ordDiscountText,ordComLoc,ordExtra1,ordExtra2,ordAddInfo,ordCNum,ordStatusInfo,ordSupportInfo,order_changed,ordStatus,ord_cert_amt,ord_cert_id,ordPoApo,ordShipPoApo,ordEID,ordReturnID,ordReturnReasonID FROM orders LEFT JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordID='" . $_GET["id"] . "' AND ordEID!=34";
    771. 

  771. 	//echo $sSQL;
    772. 

  772. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    773. 

  773. 	$alldata = mysql_fetch_array($result);
    774. 

  774. 	$alldata["ordDate"] = strtotime($alldata["ordDate"]);	
    775. 

  775. 	$oldordstatusedit=$alldata["ordStatus"];
    776. 

  776. 	mysql_free_result($result);
    777. 

  777. 	//all stutuses
    778. 

  778. 	$numstatus=0;
    779. 

  779. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    780. 

  780. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    781. 

  781. 	while($rs = mysql_fetch_assoc($result)){
    782. 

  782. 		$allstatus[$numstatus++]=$rs;
    783. 

  783. 	}
    784. 

  784. 	mysql_free_result($result);
    785. 

  785. ?>
    786. 

  786. 	<table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="">
    787. 

  787.         <tr>
    788. 

  788.           <td width="100%" align="center">
    789. 

  789. <?php	$themask = 'yyyy-mm-dd';
    790. 

  790. 		if($admindateformat==1)
    791. 

  791. 			$themask='mm/dd/yyyy';
    792. 

  792. 		elseif($admindateformat==2)
    793. 

  793. 			$themask='dd/mm/yyyy';
    794. 

  794. 		if(! $success) print "<p><font color='#FF0000'>" . $errmsg . "</font></p>"; ?>
    795. 

  795. 			<span name="searchspan" id="searchspan" <?php //if($usepowersearch) print 'style="display:block"'; else print 'style="display:none"'?>>
    796. 

  796.             <table width="100%" border="0" cellspacing="1" cellpadding="2" bgcolor="">
    797. 

  797. 			  <form method="post" action="/admin/orders2.php" name="psearchform">
    798. 

  798. 			  <input type="hidden" name="powersearch" value="1" />
    799. 

  799. 			  <tr bgcolor="#030133"><td colspan="6"><strong><font color="#E7EAEF">&nbsp;<?php print $yyPowSea?></font></strong></td></tr>
    800. 

  800. 			  <tr bgcolor="#E7EAEF"> 
    801. 

  801.                 <td align="right" width="15%"><strong><?php print $yyOrdFro?>:</strong></td>
    802. 

  802. 				<td width="15%" align="left" nowrap="nowrap">&nbsp;
    803. 

  803. 			    <input type="text" size="14" name="fromdate" value="<?php print $fromdate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.fromdate, '<?php print $themask?>', 0)" value='DP' /></td>
    804. 

  804. 				<td width="15%" align="right"><strong>E-tailers:</strong></td>
    805. 

  805. 				<td align="left" width="15%">
    806. 

  806. 				<select name="custID">
    807. 

  807. 				 	<option value="" <?=(empty($_POST['custID']))?' selected="selected"':''?>>None Selected</option>
    808. 

  808. 				 <? 
    809. 

  809. 				 $sql_EID="SELECT custID, Name FROM customers WHERE active=1";
    810. 

  810. 				 $result_EID=mysql_query($sql_EID);
    811. 

  811. 				 while($rs_EID=mysql_fetch_array($result_EID)){ ?>
    812. 

  812. 					  	<option value="<?=$rs_EID['custID']?>" <? if($_POST['custID']==$rs_EID['custID']) echo " selected"?>><?= str_replace('<br />',' ',$rs_EID['Name'])?></option>
    813. 

  813. 				<? } ?> 
    814. 

  814. 				 </select>				</td>
    815. 

  815. 				<td align="right" width="20%"><strong><?php print $yyOrdTil?>:</strong></td>
    816. 

  816. 				<td align="left" width="25%">&nbsp;<input type="text" size="14" name="todate" value="<?php print $todate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.todate, '<?php print $themask?>', -205)" value='DP' /></td>
    817. 

  817. 			  </tr>
    818. 

  818. 			  <tr bgcolor="#EAECEB">
    819. 

  819. 				<td align="right"><strong><?php print $yyOrdId?>:</strong></td>
    820. 

  820. 				<td align="left">&nbsp;<input type="text" size="14" name="ordid" value="<?php print $ordid?>" /></td>
    821. 

  821. 				<td align="right"><strong>PO/APOs:</strong></td>
    822. 

  822. 				<td align="left">
    823. 

  823. 					<select id="ordPOAPOs" name="ordPOAPOs">
    824. 

  824. 						<option value="none"<?=(empty($_POST['ordPOAPOs']))?' selected="selected"':''?>>None Selected</option>
    825. 

  825. 						<option value="APOs"<?=($_POST['ordPOAPOs'] == 'APOs')?' selected="selected"':''?>>APOs</option>
    826. 

  826. 						<option value="PO_APO"<?=($_POST['ordPOAPOs'] == 'PO_APO')?' selected="selected"':''?>>PO/APOs</option>
    827. 

  827. 						<option value="POs"<?=($_POST['ordPOAPOs'] == 'POs')?' selected="selected"':''?>>POs</option>
    828. 

  828. 						<option value="shipping_APOs"<?=($_POST['ordPOAPOs'] == 'shipping_APOs')?' selected="selected"':''?>>Shipping to APOs</option>
    829. 

  829. 						<option value="shipping_PO_APO"<?=($_POST['ordPOAPOs'] == 'shipping_PO_APO')?' selected="selected"':''?>>Shipping to PO/APOs</option>
    830. 

  830. 						<option value="shipping_POs"<?=($_POST['ordPOAPOs'] == 'shipping_POs')?' selected="selected"':''?>>Shipping to POs</option>
    831. 

  831. 					</select>				</td>
    832. 

  832. 				<td align="right"><strong><?php print $yySeaTxt?>:</strong></td>
    833. 

  833. 				<td align="left" valign="middle">&nbsp;
    834. 

  834. 				  <input type="text" size="24" name="searchtext" value="<?php print $origsearchtext?>" /></td>
    835. 

  835. 			  </tr>
    836. 

  836. 			  <tr bgcolor="#E7EAEF">
    837. 

  837. 				<td rowspan="2" align="right"><strong><?php print $yyOrdSta?>:</strong></td>
    838. 

  838. 				<td rowspan="2" align="left">&nbsp;<select name="ordstatus[]" size="5" multiple><option value="9999" <?php if(strpos($ordstatus,"9999") !== FALSE) print "selected"?>><?php print $yyAllSta?></option><?php
    839. 

  839. 						$ordstatus="";
    840. 

  840. 						$addcomma = "";
    841. 

  841. 						if(is_array(@$_REQUEST["ordstatus"])){
    842. 

  842. 							foreach($_REQUEST["ordstatus"] as $objValue){
    843. 

  843. 								if(is_array($objValue))$objValue=$objValue[0];
    844. 

  844. 								$ordstatus .= $addcomma . $objValue;
    845. 

  845. 								$addcomma = ",";
    846. 

  846. 							}
    847. 

  847. 						}else
    848. 

  848. 							$ordstatus = trim(@$_REQUEST["ordstatus"]);
    849. 

  849. 						$ordstatusarr = explode(",", $ordstatus);
    850. 

  850. 						for($index=0; $index < $numstatus; $index++){
    851. 

  851. 							print '<option value="' . $allstatus[$index]["statID"] . '"';
    852. 

  852. 							if(is_array($ordstatusarr)){
    853. 

  853. 								foreach($ordstatusarr as $objValue)
    854. 

  854. 									if($objValue==$allstatus[$index]["statID"]) print " selected";
    855. 

  855. 							}
    856. 

  856. 							print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    857. 

  857. 						} ?></select>				</td>
    858. 

  858. 				<td rowspan="2" align="right"><strong><?=$yyOrdCou?>:</strong></td>
    859. 

  859. 				<td rowspan="2" align="left">
    860. 

  860. 				<? $sSQL2="SELECT DISTINCT cpnID,cpnName,cpnNumber FROM orders o LEFT JOIN coupons c ON o.ordCoupon=c.cpnID WHERE ordDiscount>0 ORDER BY cpnNumber,cpnName";
    861. 

  861. 					$result2=mysql_query($sSQL2) or die(mysql_error().$sSQL2);
    862. 

  862. 					$total2=mysql_num_rows($result2);?>
    863. 

  863. 					<select name="ordcoupon" size="5" style="width:250px; font-size:10px; ">
    864. 

  864. 					 	<? while($rs2=mysql_fetch_array($result2)){ ?>
    865. 

  865. 					  	<option value="<?=$rs2['cpnID']?>" <?=$rs2['cpnNumber']==""?"":'style="font-weight:bold;"'?> <? if($ordcoupon==$rs2['cpnID']) echo " selected"?>><?=$rs2['cpnNumber']==""?"":$rs2['cpnNumber'].' | '?> <?= str_replace('<br />',' ',$rs2['cpnName'])?></option>
    866. 

  866. 						<? } ?>
    867. 

  867. 					</select>
    868. 

  868. 					<div style="font-size:9px;">Coupons are in bold</div>
    869. 

  869. 					</td>
    870. 

  870. 				<td align="right" valign="middle"><strong>Return Status:</strong></td>
    871. 

  871. 				<td align="left" valign="middle">
    872. 

  872. 						<?
    873. 

  873. 						$sql_return="SELECT * FROM returns ORDER BY status_order";
    874. 

  874. 						$result_return=mysql_query($sql_return);
    875. 

  875. 						?>
    876. 

  876. 						<select name="return_status_search">
    877. 

  877. 						  <option value="" <?php if ($_SESSION['return_status_search']=="") {echo "selected=\"selected\"";} ?>></option>
    878. 

  878. 						  <? while($row_return=mysql_fetch_assoc($result_return)){?>
    879. 

  879. 						  <option value="<?=$row_return["id"]?>" <?php if (!(strcmp($row_return["id"], $_SESSION['return_status_search']))) {echo "selected=\"selected\"";} ?>>
    880. 

  880. 						  <?=$row_return["status"]?>
    881. 

  881. 						  </option>
    882. 

  882. 						  <? } ?>
    883. 

  883. 					  </select></td>
    884. 

  884. 			  </tr>	
    885. 

  885. 			  <tr bgcolor="#E7EAEF">
    886. 

  886. 			    <td align="right" valign="top">&nbsp;</td>
    887. 

  887. 			    <td align="left">			</td>
    888. 

  888. 			    </tr>		  
    889. 

  889. 			  <tr bgcolor="#E7EAEF">
    890. 

  890. 				<td colspan="3" align="left"><input type="checkbox" name="startwith" value="1" <?php if($usepowersearch) print "checked"?> />				  <strong><?php print $yyStaPow?></strong></td>
    891. 

  891. 				<td align="left"><input type="checkbox" name="myfrogz" value="myfrogz" id="myfrogz"<?=(!empty($_POST['myfrogz'])) ? ' checked="checked"' : ''?> />&nbsp;MyFrogz Orders</td>
    892. 

  892. 				<td colspan="2" align="center">
    893. 

  893. 				  <input type="submit" value="<?php print $yySearch?>" /> <input type="button" value="Stats" onclick="document.forms.psearchform.action='/admin/stats1.php';document.forms.psearchform.submit();" /></td>
    894. 

  894. 			  </tr>
    895. 

  895. 			  
    896. 

  896. 			  <tr>
    897. 

  897. 			  	<td colspan="6">
    898. 

  898. 				<?
    899. 

  899. 					$sql_status =  "SELECT count( * ) as statcount , os.statPrivate , os.statID
    900. 

  900. 									FROM orders o, orderstatus os
    901. 

  901. 									WHERE o.ordStatus = os.statID
    902. 

  902. 									AND (o.ordStatus BETWEEN 0 AND 10 OR o.ordStatus = 17)
    903. 

  903. 									AND o.ordName != ''
    904. 

  904. 									GROUP BY os.statID,os.statPrivate";
    905. 

  905. 					$result_status=mysql_query($sql_status);
    906. 

  906. 					while($row_status=mysql_fetch_assoc($result_status)){?>
    907. 

  907. 			  		<div style="color:#000066; font-weight:bold; border:#030133 solid 1px; margin:2px; float:left; width:146px;padding:2px; text-align:center; background-color:#E7EAEF;"><a href="/admin/orders2.php?powersearch=1&ordstatus=<?=$row_status['statID']?>"><?=$row_status['statID'].'-'.$row_status['statPrivate'].': '.$row_status['statcount'] ?></a></div>
    908. 

  908. 			  	<? } ?>			  	</td>
    909. 

  909. 			  </tr>
    910. 

  910. 			  </form>
    911. 

  911. 			</table>
    912. 

  912.             <div>&nbsp;</div>
    913. 

  913. 		</span>
    914. 

  914. <?	
    915. 

  915. 	
    916. 

  916. 	
    917. 

  917. 	if($doedit){
    918. 

  918. 		// change status to edit order while editing order
    919. 

  919. 		//exit();
    920. 

  920. 		print '<form method="post" name="editform" action="/admin/orders2.php" onsubmit="return confirmedit()"><input type="hidden" name="orderid" value="' . $_GET["id"] . '" /><input type="hidden" name="doedit" value="true" />';
    921. 

  921. 		$overridecurrency=TRUE;
    922. 

  922. 		$orcsymbol="";
    923. 

  923. 		$orcdecplaces=2;
    924. 

  924. 		$orcpreamount=TRUE;
    925. 

  925. 		$orcdecimals=".";
    926. 

  926. 		$orcthousands="";
    927. 

  927. 	}
    928. 

  928. ?>
    929. 

  929. <script language="JavaScript" type="text/javascript" src="http://assets.ifrogz.com/lib/packages/scriptaculous-js/1.5.1/prototype.js"></script>
    930. 

  930. <script language="JavaScript" type="text/javascript" src="http://assets.ifrogz.com/lib/packages/scriptaculous-js/1.5.1/scriptaculous.js"></script>
    931. 

  931. <script language="JavaScript" type="text/javascript">
    932. 

  932. <!--
    933. 

  933. var newwin="";
    934. 

  934. var plinecnt=0;
    935. 

  935. function openemailpopup(id) {
    936. 

  936.   popupWin = window.open('/admin/popupemail.php?'+id,'emailpopup','menubar=no, scrollbars=no, width=300, height=250, directories=no,location=no,resizable=yes,status=no,toolbar=no')
    937. 

  937. }
    938. 

  938. function updateoptions(id){
    939. 

  939. 	prodid = document.getElementById('prodid'+id).value;
    940. 

  940. 	if(prodid != ''){
    941. 

  941. 		newwin = window.open('/admin/popupemail.php?prod='+prodid+'&index='+id,'updateopts','menubar=no, scrollbars=no, width=50, height=40, directories=no,location=no,resizable=yes,status=no,toolbar=no');
    942. 

  942. 	}
    943. 

  943. 	return(false);
    944. 

  944. }
    945. 

  945. function extraproduct(plusminus){
    946. 

  946. var productspan=document.getElementById('productspan');
    947. 

  947. if(plusminus=='+'){
    948. 

  948. productspan.innerHTML=productspan.innerHTML.replace(/<!--NEXTPRODUCTCOMMENT-->/,'<!--PLINE'+plinecnt+'--><tr><td valign="top"><input type="button" value="..." onclick="updateoptions('+(plinecnt+1000)+')">&nbsp;<input name="prodid'+(plinecnt+1000)+'" size="18" id="prodid'+(plinecnt+1000)+'"></td><td valign="top"><input type="text" id="prodname'+(plinecnt+1000)+'" name="prodname'+(plinecnt+1000)+'" size="24"></td><td><span id="optionsspan'+(plinecnt+1000)+'">-</span></td><td valign="top"><input type="text" id="quant'+(plinecnt+1000)+'" name="quant'+(plinecnt+1000)+'" size="5" value="1"></td><td valign="top"><input type="text" id="price'+(plinecnt+1000)+'" name="price'+(plinecnt+1000)+'" value="0" size="7"><br /><input type="hidden" id="optdiffspan'+(plinecnt+1000)+'" value="0"></td><td>&nbsp;</td></tr><!--PLINEEND'+plinecnt+'--><!--NEXTPRODUCTCOMMENT-->');
    949. 

  949. plinecnt++;
    950. 

  950. }else{
    951. 

  951. if(plinecnt>0){
    952. 

  952. plinecnt--;
    953. 

  953. var restr = '<!--PLINE'+plinecnt+'-->(.|\\n)+<!--PLINEEND'+plinecnt+'-->';
    954. 

  954. //alert(restr);
    955. 

  955. var re = new RegExp(restr);
    956. 

  956. productspan.innerHTML=productspan.innerHTML.replace(re,'');
    957. 

  957. }
    958. 

  958. }
    959. 

  959. }
    960. 

  960. function confirmedit(){
    961. 

  961. 	if(updateClicked) {
    962. 

  962. 		if(confirm('<?php print str_replace("'","\'",$yyChkRec)?>'))
    963. 

  963. 			return(true);
    964. 

  964. 		return(false);
    965. 

  965. 	}
    966. 

  966. 	if(cloneClicked) {
    967. 

  967. 		if(confirm('Are you sure you want to clone this order?'))
    968. 

  968. 			return(true);
    969. 

  969. 		return(false);
    970. 

  970. 	}
    971. 

  971. }
    972. 

  972. 

  973. 

  974. function checkAIM(frm) {
    975. 

  975. 	if(frm.aim_type.selectedIndex==0) {
    976. 

  976. 		alert("Please choose a transaction type.");
    977. 

  977. 		frm.aim_type.focus();
    978. 

  978. 		return false;
    979. 

  979. 	}else if(frm.aim_txn=='') {
    980. 

  980. 		alert("A transaction number is required.");
    981. 

  981. 		frm.aim_txn.focus();
    982. 

  982. 		return false;
    983. 

  983. 	}else if(frm.aim_amt=='') {
    984. 

  984. 		alert("Please enter an amount.");
    985. 

  985. 		frm.aim_amt.focus();
    986. 

  986. 		return false;
    987. 

  987. 	}
    988. 

  988. 	
    989. 

  989. 	return true;
    990. 

  990. }
    991. 

  991. 

  992. function toggleTXN() {
    993. 

  993. 	if($('div_trans').style.display=='' || $('div_trans').style.display==undefined) {
    994. 

  994. 		//$('div_trans').style.display = 'none';
    995. 

  995. 		Effect.BlindUp('div_trans');
    996. 

  996. 		$('btn_add_txn').value = 'Credit or Void';
    997. 

  997. 	}else if($('div_trans').style.display=='none') {
    998. 

  998. 		//$('div_trans').style.display = '';
    999. 

  999. 		Effect.BlindDown('div_trans');
    1000. 

  1000. 		$('btn_add_txn').value = 'Hide Credit or Void';
    1001. 

  1001. 	}
    1002. 

  1002. }
    1003. 

  1003. 

  1004. function toggleCharge() {
    1005. 

  1005. 	if($('div_charge').style.display=='' || $('div_charge').style.display==undefined) {
    1006. 

  1006. 		//$('div_charge').style.display = 'none';
    1007. 

  1007. 		Effect.BlindUp('div_charge');
    1008. 

  1008. 		$('btn_charge').value = 'Charge CC';
    1009. 

  1009. 	}else if($('div_charge').style.display=='none') {
    1010. 

  1010. 		//$('div_charge').style.display = '';
    1011. 

  1011. 		Effect.BlindDown('div_charge');
    1012. 

  1012. 		$('btn_charge').value = 'Hide Charge CC';
    1013. 

  1013. 	}
    1014. 

  1014. }
    1015. 

  1015. 

  1016. function togglePrcAdd() {
    1017. 

  1017. 	if($('div_prc_add').style.display=='' || $('div_prc_add').style.display==undefined) {
    1018. 

  1018. 		//$('div_charge').style.display = 'none';
    1019. 

  1019. 		Effect.BlindUp('div_prc_add');
    1020. 

  1020. 		$('btn_prc_add').value = 'Add Price Adjustment';
    1021. 

  1021. 	}else if($('div_prc_add').style.display=='none') {
    1022. 

  1022. 		//$('div_charge').style.display = '';
    1023. 

  1023. 		Effect.BlindDown('div_prc_add');
    1024. 

  1024. 		$('btn_prc_add').value = 'Hide Price Adjustment';
    1025. 

  1025. 	}
    1026. 

  1026. }
    1027. 

  1027. function createGiftCert(ordID,prodID){
    1028. 

  1028. 	if(ordID!='' && prodID!=''){
    1029. 

  1029. 		var params = "ordID="+ordID+"&prodID="+prodID;
    1030. 

  1030. 		var url = "/admin/ordersgiftcertaj.php";
    1031. 

  1031. 		var ajax = new Ajax.Updater(
    1032. 

  1032. 			{success: "giftcertholder"},
    1033. 

  1033. 					url,
    1034. 

  1034. 					{
    1035. 

  1035. 						method: "post", 
    1036. 

  1036. 						parameters: params,
    1037. 

  1037. 						//onLoading: function() { Element.show("miniCartWorking"); },
    1038. 

  1038. 						onComplete: function() { Element.show("giftcertholder");Element.hide("cert_button"); }
    1039. 

  1039. 						//onComplete: showResponse
    1040. 

  1040. 					});
    1041. 

  1041. 	}
    1042. 

  1042. }
    1043. 

  1043. //-->
    1044. 

  1044. </script>
    1045. 

  1045. <style type="text/css">
    1046. 

  1046. a img{
    1047. 

  1047. 	border: 0;
    1048. 

  1048. }
    1049. 

  1049. </style>
    1050. 

  1050. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    1051. 

  1051.         <tr>
    1052. 

  1052.           <td width="100%">
    1053. 

  1053.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    1054. 

  1054. <?php		if($isprinter && @$invoiceheader != ""){ ?>
    1055. 

  1055. 			  <tr> 
    1056. 

  1056.                 <td colspan="5"><?php print $invoiceheader?></td>
    1057. 

  1057. 			  </tr>
    1058. 

  1058. <?php		} ?>
    1059. 

  1059. 			  <tr 	<? if(!empty($alldata["ordEID"])) echo 'bgcolor="#FA6561"'?>> 
    1060. 

  1060.                 <td colspan="5" align="center"><strong><?php print $xxOrdNum . " " . $alldata["ordID"] . "<br /><br />" . date($dateformatstr, $alldata["ordDate"]) . " " . date("H:i", $alldata["ordDate"])?></strong></td>
    1061. 

  1061. 			  </tr>
    1062. 

  1062. <?php		if($isprinter && @$invoiceaddress != ""){ ?>
    1063. 

  1063. 			  <tr> 
    1064. 

  1064.                 <td colspan="5"><?php print $invoiceaddress?></td>
    1065. 

  1065. 			  </tr>
    1066. 

  1066. <?php		} ?>
    1067. 

  1067. <?php		if(trim(@$extraorderfield1)!=""){ ?>
    1068. 

  1068. 			<tr>
    1069. 

  1069. 			  <td width="20%" align="right"><strong><?php print $extraorderfield1 ?>:</strong></td>
    1070. 

  1070. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordExtra1"],"ordextra1",25)?></td>
    1071. 

  1071. 			</tr>
    1072. 

  1072. <?php		} ?>
    1073. 

  1073. 			<tr>
    1074. 

  1074. 			  <td width="20%" align="right"><strong><?php print $xxName?>:</strong></td>
    1075. 

  1075. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordName"],"name",25)?></td>
    1076. 

  1076. 			  <td width="20%" align="right"><?php if(! $isprinter && $alldata["ordAuthNumber"] != "" && ! $doedit) print '<input type="button" value="Resend" onclick="javascript:openemailpopup(\'id=' . $alldata["ordID"] . '\')" />' ?>
    1077. 

  1077. 			  <strong><?php print $xxEmail?>:</strong></td>
    1078. 

  1078. 			  <td width="30%" align="left"><?php
    1079. 

  1079. 				if($isprinter || $doedit) print editfunc($alldata["ordEmail"],"email",25); else print '<a href="mailto:' . $alldata["ordEmail"] . '">' . $alldata["ordEmail"] . '</a>';?>
    1080. 

  1080. 				<?php
    1081. 

  1081. 			  		$sql_order = "SELECT * FROM orders WHERE ordID <> ". $alldata["ordID"] ." AND ordStatus BETWEEN 11 AND 12 AND ordEmail = '".$alldata["ordEmail"]."' ORDER BY ordID DESC";
    1082. 

  1082. 			  		//echo $sql_order;
    1083. 

  1083. 					$result_order = mysql_query($sql_order) or print(mysql_error().$sql_order);
    1084. 

  1084. 					$num_rows_order = mysql_num_rows($result_order);
    1085. 

  1085. 					if ($num_rows_order > 0) {
    1086. 

  1086. 				?>
    1087. 

  1087. 					<input name="cust_orders" type="button" value="View All Customer Orders (<?=$num_rows_order?>)" onclick="Element.toggle('cust_orders');" />
    1088. 

  1088. 					<div style="position:relative;">
    1089. 

  1089. 						<div id="cust_orders" style="position:absolute; left:-280px; width:470px; display:none; background-color:#FFFFFF; border: solid 1px #BFC9E0;padding:6px;">
    1090. 

  1090. 						<?	
    1091. 

  1091. 						while ($rs_ord = mysql_fetch_assoc($result_order)) { ?>
    1092. 

  1092. 							<div style="float:left;margin:4px;"><a href="javascript:void(0)" onclick="getOrderInfo(<?=$rs_ord['ordID']?>)"><?=$rs_ord['ordID']?></a></div>
    1093. 

  1093. 						<?	}
    1094. 

  1094. 						?>
    1095. 

  1095. 						<div id="working" style="display:none;"><img src="/lib/images/indicator.gif"  alt="Working..." width="20" height="20" /></div>
    1096. 

  1096. 						<div id="order_info" style="display:none; clear:both; padding:10px 6px;"></div>
    1097. 

  1097. 						
    1098. 

  1098. 						<script language="JavaScript" type="text/javascript">
    1099. 

  1099. 							function getOrderInfo(ordID) {
    1100. 

  1100. 								var url = "/admin/getorder.php";
    1101. 

  1101. 								var params = "ordID="+ordID;
    1102. 

  1102. 								var ajax = new Ajax.Updater (
    1103. 

  1103. 									{success: 'order_info'},
    1104. 

  1104. 									url,
    1105. 

  1105. 									{method: "post", 
    1106. 

  1106. 									parameters: params,
    1107. 

  1107. 									onLoading: function(){ Element.show('working');},
    1108. 

  1108. 									onComplete: function(){ Element.hide('working'); new Effect.Appear('order_info');}
    1109. 

  1109. 									})
    1110. 

  1110. 							}
    1111. 

  1111. 						</script>
    1112. 

  1112. 						</div>
    1113. 

  1113. 					</div>	
    1114. 

  1114. 				<? } ?>				</td>
    1115. 

  1115. 			</tr>
    1116. 

  1116. 			<tr>
    1117. 

  1117. 			  <td width="20%" align="right"><strong><?php print $xxAddress?>:</strong></td>
    1118. 

  1118. 			  <td colspan="2" align="left"<?php if(@$useaddressline2==TRUE) print ' colspan="3"'?>><?php print editfunc($alldata["ordAddress"],"address",25)?></td>
    1119. 

  1119. <?php	if(@$useaddressline2==TRUE){ ?>
    1120. 

  1120. 			</tr>
    1121. 

  1121. 			<tr>
    1122. 

  1122. 			  <td width="20%" align="right"><strong><?php print $xxAddress2?>:</strong></td>
    1123. 

  1123. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordAddress2"],"address2",25)?></td>
    1124. 

  1124. <?php	} ?>
    1125. 

  1125. 			  <td align="right"><strong><?php print $xxCity?>:</strong></td>
    1126. 

  1126. 			  <td align="left"><?php print editfunc($alldata["ordCity"],"city",25)?></td>
    1127. 

  1127. 			</tr>
    1128. 

  1128. 			<tr>
    1129. 

  1129. 			  <td width="20%" align="right"><strong><?php print $xxAllSta?>:</strong></td>
    1130. 

  1130. 			  <td width="10%" align="left"><?php print editfunc($alldata["ordState"],"state",25)?></td>
    1131. 

  1131. 			  <td width="20%" align="left"><strong>APO/PO:</strong>			    <input <?php if (!(strcmp($alldata["ordPoApo"],1))) {echo "checked=\"checked\"";} ?> <? if($doedit) echo ''; else echo 'disabled="disabled"'; ?> name="APO" type="checkbox" value="1" /></td>
    1132. 

  1132. 			  <td align="right"><strong><?php print $xxCountry?>:</strong></td>
    1133. 

  1133. 			  <td align="left"><?php
    1134. 

  1134. 			if($doedit){
    1135. 

  1135. 				$foundmatch=FALSE;
    1136. 

  1136. 				print '<select name="country" size="1">';
    1137. 

  1137. 				$sSQL = "SELECT countryName,countryTax,countryOrder FROM countries ORDER BY countryOrder DESC, countryName";
    1138. 

  1138. 				$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1139. 

  1139. 				while($rs2 = mysql_fetch_array($result)){
    1140. 

  1140. 					print '<option value="' . str_replace('"','&quot;',$rs2["countryName"]) . '"';
    1141. 

  1141. 					if($alldata["ordCountry"]==$rs2["countryName"]){
    1142. 

  1142. 						print ' selected';
    1143. 

  1143. 						$foundmatch=TRUE;
    1144. 

  1144. 						$countrytaxrate=$rs2["countryTax"];
    1145. 

  1145. 						$countryorder=$rs2["countryOrder"];
    1146. 

  1146. 					}
    1147. 

  1147. 					print '>' . $rs2["countryName"] . "</option>\r\n";			}
    1148. 

  1148. 				mysql_free_result($result);
    1149. 

  1149. 				if(! $foundmatch) print '<option value="' . str_replace('"','&quot;',$alldata["ordCountry"]) . '" selected>' . $alldata["ordCountry"] . "</option>\r\n";
    1150. 

  1150. 				print '</select>';
    1151. 

  1151. 				if($countryorder==2){
    1152. 

  1152. 					$sSQL = "SELECT stateTax FROM states WHERE stateAbbrev='" . mysql_real_escape_string($alldata["ordState"]) . "'";
    1153. 

  1153. 					$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1154. 

  1154. 					if($rs2 = mysql_fetch_array($result))
    1155. 

  1155. 						$statetaxrate = $rs2["stateTax"];
    1156. 

  1156. 				}
    1157. 

  1157. 				if($alldata["ordStateTax"]==0)$statetaxrate=0; 
    1158. 

  1158. 			}else
    1159. 

  1159. 				print $alldata["ordCountry"];?></td>
    1160. 

  1160. 			</tr>
    1161. 

  1161. 			<tr>
    1162. 

  1162. 			  <td width="20%" align="right"><strong><?php print $xxZip?>:</strong></td>
    1163. 

  1163. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordZip"],"zip",15)?></td>
    1164. 

  1164. 			  <td align="right"><strong><?php print $xxPhone?>:</strong></td>
    1165. 

  1165. 			  <td align="left"><?php print editfunc($alldata["ordPhone"],"phone",25)?></td>
    1166. 

  1166. 			</tr>
    1167. 

  1167. <?php if(trim(@$extraorderfield2)!=""){ ?>
    1168. 

  1168. 			<tr>
    1169. 

  1169. 			  <td width="20%" align="right"><strong><?php print @$extraorderfield2 ?>:</strong></td>
    1170. 

  1170. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordExtra2"],"ordextra2",25)?></td>
    1171. 

  1171. 			</tr>
    1172. 

  1172. <?php } ?>
    1173. 

  1173. <?php if(! $isprinter){ ?>
    1174. 

  1174. 			<tr>
    1175. 

  1175. 			  <td width="20%" align="right"><strong>IP Address:</strong></td>
    1176. 

  1176. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordIP"],"ipaddress",15)?></td>
    1177. 

  1177. 			  <td align="right"><strong><?php print $yyAffili?>:</strong></td>
    1178. 

  1178. 			  <td align="left"><?php print editfunc($alldata["ordAffiliate"],"PARTNER",15)?></td>
    1179. 

  1179. 			</tr>
    1180. 

  1180. <?php }
    1181. 

  1181. 	  if(trim($alldata["ordDiscountText"])!=""){ ?>
    1182. 

  1182. 			<tr>
    1183. 

  1183. 			  <td width="20%" align="right" valign="top"><strong><?php print $xxAppDs?>:</strong></td>
    1184. 

  1184. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordDiscountText"],"discounttext",25)?></td>
    1185. 

  1185. 			</tr>
    1186. 

  1186. <?php }
    1187. 

  1187. 	  if(trim($alldata["ordShipName"]) != "" || trim($alldata["ordShipAddress"]) != "" || trim($alldata["ordShipCity"]) != "" || $doedit){ ?>
    1188. 

  1188. 			<tr>
    1189. 

  1189. 			  <td align="center" colspan="5"><strong><?php print $xxShpDet?>.</strong></td>
    1190. 

  1190. 			</tr>
    1191. 

  1191. 			<tr>
    1192. 

  1192. 			  <td width="20%" align="right"><strong><?php print $xxName?>:</strong></td>
    1193. 

  1193. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordShipName"],"sname",25)?></td>
    1194. 

  1194. 			</tr>
    1195. 

  1195. 			<tr>
    1196. 

  1196. 			  <td width="20%" align="right"><strong><?php print $xxAddress?>:</strong></td>
    1197. 

  1197. 			  <td colspan="2" align="left"<?php if(@$useaddressline2==TRUE) print ' colspan="3"'?>><?php print editfunc($alldata["ordShipAddress"],"saddress",25)?></td>
    1198. 

  1198. <?php	if(@$useaddressline2==TRUE){ ?>
    1199. 

  1199. 			</tr>
    1200. 

  1200. 			<tr>
    1201. 

  1201. 			  <td width="20%" align="right"><strong><?php print $xxAddress2?>:</strong></td>
    1202. 

  1202. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordShipAddress2"],"saddress2",25)?></td>
    1203. 

  1203. <?php	} ?>
    1204. 

  1204. 			  <td align="right"><strong><?php print $xxCity?>:</strong></td>
    1205. 

  1205. 			  <td align="left"><?php print editfunc($alldata["ordShipCity"],"scity",25)?></td>
    1206. 

  1206. 			</tr>
    1207. 

  1207. 			<tr>
    1208. 

  1208. 			  <td width="20%" align="right"><strong><?php print $xxAllSta?>:</strong></td>
    1209. 

  1209. 			  <td align="left"><?php print editfunc($alldata["ordShipState"],"sstate",25)?></td>
    1210. 

  1210. 			  <td align="left"><strong>APO/PO:</strong>			    <input name="ShipAPO" type="checkbox" id="ShipAPO" value="1" <?php if (!(strcmp($alldata["ordShipPoApo"],1))) {echo "checked=\"checked\"";} ?> <? if($doedit) echo ''; else echo 'disabled="disabled"'; ?>  /></td>
    1211. 

  1211. 			  <td align="right"><strong><?php print $xxCountry?>:</strong></td>
    1212. 

  1212. 			  <td align="left"><?php
    1213. 

  1213. 			if($doedit){
    1214. 

  1214. 				if(trim($alldata["ordShipName"]) != "" || trim($alldata["ordShipAddress"]) != "") $usingshipcountry=TRUE; else $usingshipcountry=FALSE;
    1215. 

  1215. 				$foundmatch=FALSE;
    1216. 

  1216. 				print '<select name="scountry" size="1">';
    1217. 

  1217. 				$sSQL = "SELECT countryName,countryTax,countryOrder FROM countries ORDER BY countryOrder DESC, countryName";
    1218. 

  1218. 				$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1219. 

  1219. 				while($rs2 = mysql_fetch_array($result)){
    1220. 

  1220. 					print '<option value="' . str_replace('"','&quot;',$rs2["countryName"]) . '"';
    1221. 

  1221. 					if($alldata["ordShipCountry"]==$rs2["countryName"]){
    1222. 

  1222. 						print ' selected';
    1223. 

  1223. 						$foundmatch=TRUE;
    1224. 

  1224. 						if($usingshipcountry) $countrytaxrate=$rs2["countryTax"];
    1225. 

  1225. 						$countryorder=$rs2["countryOrder"];
    1226. 

  1226. 					}
    1227. 

  1227. 					print '>' . $rs2["countryName"] . "</option>\r\n";			}
    1228. 

  1228. 				mysql_free_result($result);
    1229. 

  1229. 				if(! $foundmatch) print '<option value="' . str_replace('"','&quot;',$alldata["ordShipCountry"]) . '" selected>' . $alldata["ordShipCountry"] . "</option>\r\n";
    1230. 

  1230. 				print '</select>';
    1231. 

  1231. 				if($countryorder==2 && $usingshipcountry){
    1232. 

  1232. 					$sSQL = "SELECT stateTax FROM states WHERE stateName='" . mysql_real_escape_string($alldata["ordShipState"]) . "'";
    1233. 

  1233. 					$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1234. 

  1234. 					if($rs2 = mysql_fetch_array($result))
    1235. 

  1235. 						$statetaxrate = $rs2["stateTax"];
    1236. 

  1236. 				}
    1237. 

  1237. 			}else
    1238. 

  1238. 				print $alldata["ordShipCountry"]?></td>
    1239. 

  1239. 			</tr>
    1240. 

  1240. 			<tr>
    1241. 

  1241. 			  <td width="20%" align="right"><strong><?php print $xxZip?>:</strong></td>
    1242. 

  1242. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordShipZip"],"szip",15)?></td>
    1243. 

  1243. 			</tr>
    1244. 

  1244. <?php }
    1245. 

  1245. 	  if($alldata["ordShipType"] != "" || $alldata["ordComLoc"]>0 || $doedit){ ?>
    1246. 

  1246. 			<tr>
    1247. 

  1247. 			  <td width="20%" align="right"><strong><?php print $xxShpMet?>:</strong></td>
    1248. 

  1248. 			  <td colspan="2" align="left">
    1249. 

  1249. 			  <?php 
    1250. 

  1250. 			    if($doedit && ($alldata["ordStatus"]<=5 || $alldata["ordStatus"]==17) ){
    1251. 

  1251. 					print editfunc($alldata["ordShipType"],"shipmethod",25);?>			
    1252. 

  1252. 					<br />
    1253. 

  1253. 					<a href="javascript:void(0);" onclick="$('shipmethod').value='Standard';">Standard</a> |
    1254. 

  1254.                     <a href="javascript:void(0);" onclick="$('shipmethod').value='Priority Mail';">Priority Mail</a> |  
    1255. 

  1255. 					<a href="javascript:void(0);" onclick="$('shipmethod').value='FedEx Express';">FedEx</a> | 
    1256. 

  1256. 					<a href="javascript:void(0);" onclick="$('shipmethod').value='FedEx Overnight';">FedEx Overnight</a> 			
    1257. 

  1257. 					<a href="javascript:void(0);" onclick="$('shipmethod').value='International';">Int</a>				
    1258. 

  1258. 				<? }else{
    1259. 

  1259. 					echo $alldata["ordShipType"].'<input type="hidden" name="shipmethod" value="'.$alldata["ordShipType"].'" />';
    1260. 

  1260. 				}
    1261. 

  1261. 				if(! $doedit && ($alldata["ordComLoc"]&2)==2) print $xxWtIns?>			  </td>
    1262. 

  1262. 			  <td align="right"><strong><?php print $xxCLoc?>:</strong></td>
    1263. 

  1263. 			  <td align="left"><?php	if($doedit){
    1264. 

  1264. 											print '<select name="commercialloc" size="1">';
    1265. 

  1265. 											print '<option value="N">' . $yyNo . '</option>';
    1266. 

  1266. 											print '<option value="Y"' . (($alldata["ordComLoc"]&1)==1 ? ' selected' : '') . '>' . $yyYes . '</option>';
    1267. 

  1267. 											print '</select>';
    1268. 

  1268. 										}else{
    1269. 

  1269. 											if(($alldata["ordComLoc"]&1)==1) print $yyYes; else print $yyNo;
    1270. 

  1270. 										}?></td>
    1271. 

  1271. 			</tr>
    1272. 

  1272. <?php	if($doedit){ ?>
    1273. 

  1273. 			<tr>
    1274. 

  1274. 			  <td width="20%" align="right"><strong><?php print $xxShpIns?>:</strong></td>
    1275. 

  1275. 			  <td align="left" colspan="4"><?php
    1276. 

  1276. 										print '<select name="wantinsurance" size="1">';
    1277. 

  1277. 										print '<option value="N">' . $yyNo . '</option>';
    1278. 

  1278. 										print '<option value="Y"' . (($alldata["ordComLoc"]&2)==2 ? ' selected' : '') . '>' . $yyYes . '</option>';
    1279. 

  1279. 										print '</select>';
    1280. 

  1280. 			?></td>
    1281. 

  1281. 			</tr>
    1282. 

  1282. <?php	}
    1283. 

  1283. 	  }
    1284. 

  1284. 		$ordAuthNumber = trim($alldata["ordAuthNumber"]);
    1285. 

  1285. 		$ordTransID = trim($alldata["ordTransID"]);
    1286. 

  1286. 		if(! $isprinter && ($ordAuthNumber != "" || $ordTransID != "" || $doedit)){ ?>
    1287. 

  1287. 			<tr>
    1288. 

  1288. 			  <td width="20%" align="right"><strong><?php print $yyAutCod?>:</strong></td>
    1289. 

  1289. 			  <td colspan="2" align="left"><?php print editfunc($ordAuthNumber,"ordAuthNumber",15) ?></td>
    1290. 

  1290. 			  <td align="right"><strong><?php print $yyTranID?>:</strong></td>
    1291. 

  1291. 			  <td align="left"><?php print editfunc($ordTransID,"ordTransID",15) ?></td>
    1292. 

  1292. 			</tr>
    1293. 

  1293. <?php
    1294. 

  1294. 			// Look up any MyFrogz Code
    1295. 

  1295. 			$sql = "SELECT * FROM att_codes WHERE code_order_id = '" . $alldata["ordID"] . "'";
    1296. 

  1296. 			$res = mysql_query($sql) or print(mysql_error());
    1297. 

  1297. 			if ($res) {
    1298. 

  1298. 				if (mysql_num_rows($res) > 0) {
    1299. 

  1299. 					$row = mysql_fetch_assoc($res);
    1300. 

  1300. ?>
    1301. 

  1301. 			<tr>
    1302. 

  1302. 				<td width="20%" align="right"><strong>MyFrogz Code:</strong></td>
    1303. 

  1303. 				<td colspan="4" align="left" style="font-family: Courier; font-size: 125%;"><?=$row['code']?></td>
    1304. 

  1304. 			</tr>
    1305. 

  1305. <?php
    1306. 

  1306. 				}
    1307. 

  1307. 			}
    1308. 

  1308. 		}
    1309. 

  1309. 

  1310. 		// BOL#s ADDED BY CHAD JUL 27,06
    1311. 

  1311. 		$sql_bol = "SELECT * FROM bol WHERE ordID = " . $alldata["ordID"];
    1312. 

  1312. 		$res_bol = mysql_query($sql_bol) or print(mysql_error().$sql_bol);
    1313. 

  1313. 		if(mysql_num_rows($res_bol) > 0) {
    1314. 

  1314. 			$row_bol = mysql_fetch_assoc($res_bol);
    1315. 

  1315. ?>
    1316. 

  1316. 			<tr>
    1317. 

  1317. 				<td width="20%" align="right"><strong>Express BOL#:</strong></td>
    1318. 

  1318. 				<td colspan="2"><?=$row_bol['exBOL']?></td>
    1319. 

  1319. <?php
    1320. 

  1320. 			if(!empty($row_bol['smBOL'])) {
    1321. 

  1321. ?>
    1322. 

  1322. 				<td align="right"><strong>Smart Mail BOL#:</strong></td>
    1323. 

  1323. 				<td><?=$row_bol['smBOL']?></td>
    1324. 

  1324. <?php
    1325. 

  1325. 			}
    1326. 

  1326. 			if(!empty($row_bol['gmBOL'])) {
    1327. 

  1327. ?>
    1328. 

  1328. 				<td align="right"><strong>Global Mail BOL#:</strong></td>
    1329. 

  1329. 				<td><?=$row_bol['gmBOL']?></td>
    1330. 

  1330. <?php
    1331. 

  1331. 			}
    1332. 

  1332. ?>
    1333. 

  1333. 			</tr>
    1334. 

  1334. <?php
    1335. 

  1335. 		}
    1336. 

  1336. 		// ADD ENDED
    1337. 

  1337. 

  1338. 		$ordAddInfo = Trim($alldata["ordAddInfo"]);
    1339. 

  1339. 		if($ordAddInfo != "" || $doedit){ ?>
    1340. 

  1340. 			<tr>
    1341. 

  1341. 			  <td width="20%" align="right" valign="top"><strong><?php print $xxAddInf?>:</strong></td>
    1342. 

  1342. 			  <td align="left" colspan="4"><?php
    1343. 

  1343. 			if($doedit)
    1344. 

  1344. 				print '<textarea name="ordAddInfo" cols="80" rows="4" wrap=virtual>' . $ordAddInfo . '</textarea>';
    1345. 

  1345. 			else
    1346. 

  1346. 				print str_replace(array("\r\n","\n"),array("<br />","<br />"),$ordAddInfo); ?></td>
    1347. 

  1347. 			</tr>
    1348. 

  1348. <?php	}
    1349. 

  1349. if(! $isprinter){
    1350. 

  1350. 		if(! $doedit) print '<form method="post" action="/admin/orders2.php"><input type="hidden" name="updatestatus" value="1" /><input type="hidden" name="orderid" value="' . @$_GET["id"] . '" />';
    1351. 

  1351. ?>			
    1352. 

  1352. <tr>
    1353. 

  1353.   <td width="20%" align="right" valign="top"><strong><?php print $yyStaInf?>:</strong></td>
    1354. 

  1354.   <td colspan="2" align="left"><textarea name="ordStatusInfo" id="ordStatusInfo" cols="50" rows="3" wrap=virtual><?php print $alldata["ordStatusInfo"]?></textarea>
    1355. 

  1355.     <?php if($alldata['ordPayProvider']==20 ) print '<input type="button" value="Google Send Email To Customer" ' . ($alldata['ordPayProvider']==20 ? 'onclick="updategooglestatus(\'message\',' . $_GET['id'] . ')" ' : '') . '/>'?></td>
    1356. 

  1356.   <td height="12" colspan="2" valign="top" align="center">
    1357. 

  1357.     
    1358. 

  1358. <?
    1359. 

  1359. 	$sql_reason="SELECT * FROM reasons ORDER BY reason";
    1360. 

  1360. 	$result_reason=mysql_query($sql_reason);
    1361. 

  1361. 			
    1362. 

  1362. 	while($row_reason=mysql_fetch_assoc($result_reason)){
    1363. 

  1363. 		$arrReasons[] = $row_reason;
    1364. 

  1364.    } 
    1365. 

  1365. ?>
    1366. 

  1366.     
    1367. 

  1367. 	<? $sql_his="SELECT * FROM order_returns_history orh LEFT JOIN `returns`r ON orh.returnID=r.id LEFT JOIN reasons rs ON orh.reasonID=rs.id WHERE ordID=".$alldata["ordID"]." ORDER BY date_added DESC";
    1368. 

  1368. 		$result_his=mysql_query($sql_his);
    1369. 

  1369. 		if(mysql_num_rows($result_his)>0){
    1370. 

  1370. 	?>
    1371. 

  1371. 	<div style="font-size:10px; position:relative;"><a href="javascript:void(0);" onclick="Element.toggle('reason_history');">View History</a>
    1372. 

  1372. 		<div id="reason_history" style="display:none;position:absolute; top:20px; left:-9px; background-color:#FFFFFF; border: 1px solid #828177; padding:10px; width:295px;">
    1373. 

  1373. 			<table width="100%" cellspacing="0" cellpadding="2">
    1374. 

  1374. 				  <tr>
    1375. 

  1375. 					<th>Status</th>
    1376. 

  1376. 					<th>Reason</th>
    1377. 

  1377. 					<th>Date</th>
    1378. 

  1378. 				  </tr>			
    1379. 

  1379. 				<? 
    1380. 

  1380. 				$his=1;
    1381. 

  1381. 				$bgcolor_his='';
    1382. 

  1382. 				while($row_his=mysql_fetch_assoc($result_his)){
    1383. 

  1383. 					//if($his%2==0)$bgcolor_his='#E6E9F5';
    1384. 

  1384. 				?>
    1385. 

  1385. 				  <tr <?=($his%2==0?'':' style="background-color: #E6E9F5"')?>>
    1386. 

  1386. 					<td><?=$row_his["status"]?></td>
    1387. 

  1387. 					<td><?=$row_his["reason"]?></td>
    1388. 

  1388. 					<td><?=$row_his["date_added"]?></td>
    1389. 

  1389. 				  </tr>				
    1390. 

  1390. 				<? $his++;
    1391. 

  1391. 				} ?>
    1392. 

  1392. 			</table>
    1393. 

  1393. 		</div>
    1394. 

  1394. 	</div>
    1395. 

  1395. 	<? }?>
    1396. 

  1396. 	</fieldset>	  </td>
    1397. 

  1397.   </tr>
    1398. 

  1398. 

  1399. 

  1400. 			<? //if($doedit) { ?>
    1401. 

  1401. 			<tr>
    1402. 

  1402. 			  <td width="20%" align="right" valign="top"><strong><?php print $yySupInf?>:</strong></td>
    1403. 

  1403. 			  <td colspan="4" align="left"><textarea name="ordSupportInfo" cols="80" rows="3" wrap=virtual><?php print $alldata["ordSupportInfo"]?></textarea> </td>
    1404. 

  1404. 			  </tr>
    1405. 

  1405. 			
    1406. 

  1406.             <tr>
    1407. 

  1407. 			  <td align="right" valign="top"><strong>Returns/Exchanges:</strong></td>
    1408. 

  1408. 			  <td colspan="4" align="left">
    1409. 

  1409. <?				
    1410. 

  1410. 				$sql_return="SELECT * FROM returns ORDER BY status_order";
    1411. 

  1411. 				$result_return=mysql_query($sql_return);
    1412. 

  1412. ?>
    1413. 

  1413. 				<script type="text/javascript">
    1414. 

  1414.                 
    1415. 

  1415.                 function show_buttons() {
    1416. 

  1416.                     var dis;
    1417. 

  1417.                     var val = $('return_status').value;
    1418. 

  1418.                     if ( val == "0" ) {
    1419. 

  1419.                         dis = 'none';
    1420. 

  1420.                     } else {
    1421. 

  1421.                         dis = 'inline';
    1422. 

  1422.                     }
    1423. 

  1423.                     buttons = document.getElementsByClassName('reason_button');
    1424. 

  1424.                     for(var i = 0; i < buttons.length; i++) {
    1425. 

  1425.                         buttons[i].style.display = dis;
    1426. 

  1426.                     }
    1427. 

  1427.                 }
    1428. 

  1428.                 
    1429. 

  1429.                 </script>
    1430. 

  1430. <? if ($doedit) { ?>
    1431. 

  1431.                 <select id="return_status" name="return_status" onchange="show_buttons()">
    1432. 

  1432.                   <option value="0" <?php if (!(strcmp("0", $alldata["ordReturnID"]))) {echo "selected=\"selected\"";} ?>>none</option>
    1433. 

  1433.                   <? while($row_return=mysql_fetch_assoc($result_return)){?>
    1434. 

  1434.                   <option value="<?=$row_return["id"]?>" <?php if (!(strcmp($row_return["id"], $alldata["ordReturnID"]))) {echo "selected=\"selected\"";} ?>>
    1435. 

  1435.                   <?=$row_return["status"]?>
    1436. 

  1436.                   </option>
    1437. 

  1437.                   <? } ?>
    1438. 

  1438.                 </select>
    1439. 

  1439. <? }  else {
    1440. 

  1440. 	while($row_return=mysql_fetch_assoc($result_return)){
    1441. 

  1441. 		if (!(strcmp($row_return["id"], $alldata["ordReturnID"]))) $strreturn = $row_return["status"];
    1442. 

  1442. 	}
    1443. 

  1443. 	echo $strreturn;
    1444. 

  1444. }?>
    1445. 

  1445.                 </td>
    1446. 

  1446. 			  </tr>
    1447. 

  1447. 		
    1448. 

  1448. 			<tr>
    1449. 

  1449. 			  <td width="20%">&nbsp;</td>
    1450. 

  1450. 			  <td align="center" colspan="3"><?php if(! $doedit) print '<input type="submit" value="' . $yyUpdate . '" />'?></td>
    1451. 

  1451. 			  <td>&nbsp;</td>
    1452. 

  1452. 			  </tr>
    1453. 

  1453. 			<? //} ?>
    1454. 

  1454. <?php	if(($alldata["ordPayProvider"]==3 || $alldata["ordPayProvider"]==13 || $alldata['ordPayProvider']==20) && $alldata["ordAuthNumber"] != ""){ 
    1455. 

  1455. 			if($alldata['ordPayProvider']==20 && $doedit){ ?>
    1456. 

  1456. 			<tr>
    1457. 

  1457. 			  <td align="center" colspan="5">
    1458. 

  1458. 				<strong>Update Google Account Status:</strong> <span id="googleupdatespan"></span>			  </td>
    1459. 

  1459. 			</tr>
    1460. 

  1460. 			<tr>
    1461. 

  1461. 			  <td align="center" colspan="5">
    1462. 

  1462. 				<input type="button" value="Charge Order" onclick="updategoogleorder('charge',<?php print $alldata['ordID']?>)" />
    1463. 

  1463. 				<input type="button" value="Cancel Order" onclick="updategoogleorder('cancel',<?php print $alldata['ordID']?>)" />
    1464. 

  1464. 				<input type="button" value="Refund Order" onclick="updategoogleorder('refund',<?php print $alldata['ordID']?>)" />
    1465. 

  1465. 				<input type="button" value="Ship Order" onclick="updategoogleorder('ship',<?php print $alldata['ordID']?>)" />			  </td>
    1466. 

  1466. 			</tr>
    1467. 

  1467. <?php		} ?>
    1468. 

  1468. 			<!--<tr>
    1469. 

  1469. 			  <td align="center" colspan="6">
    1470. 

  1470. 				<input type="button" value="Capture Funds" onclick="javascript:openemailpopup('oid=<?php print $alldata["ordID"]?>')" />			  </td>
    1471. 

  1471. 			</tr>-->
    1472. 

  1472. <?php	}
    1473. 

  1473. 		if(! $doedit) print '</form>';
    1474. 

  1474. 	if((int)$alldata["ordPayProvider"]==10){ ?>
    1475. 

  1475. 			<tr>
    1476. 

  1476. 			  <td align="center" colspan="5"><hr width="50%">			  </td>
    1477. 

  1477. 			</tr>
    1478. 

  1478. <?php	if(@$_SERVER["HTTPS"] != "on" && (@$_SERVER["SERVER_PORT"] != "443") && @$nochecksslserver != TRUE){ ?>
    1479. 

  1479. 			<tr>
    1480. 

  1480. 			  <td align="center" colspan="5"><strong><font color="#FF0000">You do not appear to be viewing this page on a secure (https) connection. Credit card information cannot be shown.</font></strong></td>
    1481. 

  1481. 			</tr>
    1482. 

  1482. <?php	}else{
    1483. 

  1483. 			$ordCNum = $alldata["ordCNum"];
    1484. 

  1484. 			if($ordCNum != ""){
    1485. 

  1485. 				$cnumarr = "";
    1486. 

  1486. 				$encryptmethod = strtolower(@$encryptmethod);
    1487. 

  1487. 				if($encryptmethod=="none"){
    1488. 

  1488. 					$cnumarr = explode("&",$ordCNum);
    1489. 

  1489. 				}elseif($encryptmethod=="mcrypt"){
    1490. 

  1490. 					if(@$mcryptalg == "") $mcryptalg = MCRYPT_BLOWFISH;
    1491. 

  1491. 					$td = mcrypt_module_open($mcryptalg, '', 'cbc', '');
    1492. 

  1492. 					$thekey = @$ccencryptkey;
    1493. 

  1493. 					$thekey = substr($thekey, 0, mcrypt_enc_get_key_size($td));
    1494. 

  1494. 					$cnumarr = explode(" ", $ordCNum);
    1495. 

  1495. 					$iv = @$cnumarr[0];
    1496. 

  1496. 					$iv = @pack("H" . strlen($iv), $iv);
    1497. 

  1497. 					$ordCNum = @pack("H" . strlen(@$cnumarr[1]), @$cnumarr[1]);
    1498. 

  1498. 					mcrypt_generic_init($td, $thekey, $iv);
    1499. 

  1499. 					$cnumarr = explode("&", mdecrypt_generic($td, $ordCNum));
    1500. 

  1500. 					mcrypt_generic_deinit($td);
    1501. 

  1501. 					mcrypt_module_close($td);
    1502. 

  1502. 				}else{
    1503. 

  1503. 					print '<tr><td colspan="4">WARNING: $encryptmethod is not set. Please see http://www.ecommercetemplates.com/phphelp/ecommplus/parameters.asp#encryption</td></tr>';
    1504. 

  1504. 				}
    1505. 

  1505. 			} ?>
    1506. 

  1506. 			<tr>
    1507. 

  1507. 			  <td align="right" colspan="3"><strong><?php print $xxCCName?>:</strong></td>
    1508. 

  1508. 			  <td align="left" colspan="2"><?php
    1509. 

  1509. 			if(@$encryptmethod!=""){
    1510. 

  1510. 					if(is_array(@$cnumarr)) print URLDecode(@$cnumarr[4]);
    1511. 

  1511. 			} ?></td>
    1512. 

  1512. 			</tr>
    1513. 

  1513. 			<tr>
    1514. 

  1514. 			  <td align="right" colspan="3"><strong><?php print $yyCarNum?>:</strong></td>
    1515. 

  1515. 			  <td align="left" colspan="2"><?php
    1516. 

  1516. 			if($ordCNum != ""){
    1517. 

  1517. 				if(is_array($cnumarr)) print $cnumarr[0];
    1518. 

  1518. 			}else{
    1519. 

  1519. 				print "(no data)";
    1520. 

  1520. 			} ?></td>
    1521. 

  1521. 			</tr>
    1522. 

  1522. 			<tr>
    1523. 

  1523. 			  <td align="right" colspan="3"><strong><?php print $yyExpDat?>:</strong></td>
    1524. 

  1524. 			  <td align="left" colspan="2"><?php
    1525. 

  1525. 			if(@$encryptmethod!=""){
    1526. 

  1526. 					if(is_array(@$cnumarr)) print @$cnumarr[1];
    1527. 

  1527. 			} ?></td>
    1528. 

  1528. 			</tr>
    1529. 

  1529. 			<tr>
    1530. 

  1530. 			  <td align="right" colspan="3"><strong>CVV Code:</strong></td>
    1531. 

  1531. 			  <td align="left" colspan="2"><?php
    1532. 

  1532. 			if(@$encryptmethod!=""){
    1533. 

  1533. 					if(is_array(@$cnumarr)) print @$cnumarr[2];
    1534. 

  1534. 			} ?></td>
    1535. 

  1535. 			</tr>
    1536. 

  1536. 			<tr>
    1537. 

  1537. 			  <td align="right" colspan="3"><strong>Issue Number:</strong></td>
    1538. 

  1538. 			  <td align="left" colspan="2"><?php
    1539. 

  1539. 			if(@$encryptmethod!=""){
    1540. 

  1540. 					if(is_array(@$cnumarr)) print @$cnumarr[3];
    1541. 

  1541. 			} ?></td>
    1542. 

  1542. 			</tr>
    1543. 

  1543. <?php		if($ordCNum != "" && !$doedit){ ?>
    1544. 

  1544. 		  <form method=POST action="/admin/orders2.php?id=<?php print $_GET["id"]?>">
    1545. 

  1545. 			<input type="hidden" name="delccdets" value="<?php print $_GET["id"]?>" />
    1546. 

  1546. 			<tr>
    1547. 

  1547. 			  <td align="center" colspan="5"><input type=submit value="<?php print $yyDelCC?>" /></td>
    1548. 

  1548. 			</tr>
    1549. 

  1549. 		  </form>
    1550. 

  1550. <?php		}
    1551. 

  1551. 		}
    1552. 

  1552. 	}
    1553. 

  1553. } // isprinter ?>
    1554. 

  1554. 			<tr>
    1555. 

  1555. 			  <td align="center" colspan="5">&nbsp;<br /></td>
    1556. 

  1556. 			</tr>
    1557. 

  1557. 		  </table>
    1558. 

  1558. <span id="productspan">
    1559. 

  1559. 			<? if(!empty($pg_msg)) echo $pg_msg;?>
    1560. 

  1560. 		  <table width="100%" border="1" cellspacing="0" cellpadding="4" bordercolor="#999999" style="border-collapse: collapse">
    1561. 

  1561. 			<tr>
    1562. 

  1562. 			  <td><strong><?php print $xxPrId?></strong></td>
    1563. 

  1563. 			  <td><strong><?php print $xxPrNm?></strong></td>
    1564. 

  1564. 			  <td><strong><?php print $xxPrOpts?></strong></td>
    1565. 

  1565. 			  <td><strong><?php print $xxQuant?></strong></td>
    1566. 

  1566. 			  <td><strong><?php if($doedit) print $xxUnitPr; else print $xxPrice?></strong></td>
    1567. 

  1567. <?php	if($doedit) print '<td align="center"><strong>DEL</strong></td>' ?>
    1568. 

  1568. 			</tr>
    1569. 

  1569. <?php
    1570. 

  1570. 	$totoptpricediff = 0;
    1571. 

  1571. 	if(mysql_num_rows($allorders)>0){
    1572. 

  1572. 		$totoptpricediff = 0;
    1573. 

  1573. 		$rowcounter=0;
    1574. 

  1574. 		while($rsOrders = mysql_fetch_assoc($allorders)){
    1575. 

  1575. 			$optpricediff = 0;
    1576. 

  1576. ?>
    1577. 

  1577. 			<tr>
    1578. 

  1578. 			  <td valign="top" nowrap>
    1579. 

  1579. 			  <span style="float:right; font-weight:bold;"><?=$rsOrders["dsName"]?></span>
    1580. 

  1580. 			  <?php if($doedit) {
    1581. 

  1581. 			  			print '<input type="button" value="..." onclick="updateoptions(' . $rowcounter . ')">&nbsp;<input type="hidden" name="cartid' . $rowcounter . '" value="' . str_replace('"','&quot;',$rsOrders["cartID"]) . '" />'?><strong><?php print editfunc($rsOrders["cartProdID"],'prodid' . $rowcounter,18)
    1582. 

  1582. 				?>		
    1583. 

  1583. 			  <span class="reason_button" style="position:relative; z-index:1; <? if($alldata["ordReturnID"]==0) echo 'display:none;';?> ">
    1584. 

  1584.            	  <input style="z-index:0; <? if($rsOrders["cartReason"]>0) echo 'font-weight:bold;';?>" name="reason" type="button" value="Reason" onclick="Element.toggle('r_<?=$rowcounter?>');" />
    1585. 

  1585.               <div id="r_<?=$rowcounter?>" style="position:absolute; display:none; background-color:#FFFFFF; border: 1px solid #CCCCCC; padding:6px; margin:-18px 0px 4px 240px">
    1586. 

  1586.                               <table width="100%" border="0" cellspacing="0" cellpadding="2">
    1587. 

  1587.                                   <tr>
    1588. 

  1588.                                     <td>Reason:</td>
    1589. 

  1589.                                     <td>
    1590. 

  1590.                                       <select name="reason_<?=$rowcounter?>">
    1591. 

  1591.                                           <option value="0" <?php if (!(strcmp("0", $rsOrders["cartReason"]))) {echo "selected=\"selected\"";} ?>>none</option>
    1592. 

  1592.                                           <? for($k=0; $k<count($arrReasons); $k++){?>
    1593. 

  1593.                                           <option value="<?=$arrReasons[$k]["id"]?>" <?php if (!(strcmp($arrReasons[$k]["id"], $rsOrders["cartReason"]))) {echo "selected=\"selected\"";} ?>>
    1594. 

  1594.                                           <?=$arrReasons[$k]["reason"]?>
    1595. 

  1595.                                           </option>
    1596. 

  1596.                                           <? } ?>
    1597. 

  1597.                                       </select>
    1598. 

  1598.                                  
    1599. 

  1599.                                     </td>
    1600. 

  1600.                                   </tr>
    1601. 

  1601.                                   <tr>
    1602. 

  1602.                                     <td valign="top">Note:</td>
    1603. 

  1603.                                     <td><textarea  name="note_<?=$rowcounter?>" cols="26" rows="3"><?=$rsOrders["cartNote"]?></textarea></td>
    1604. 

  1604.                                   </tr>                                  
    1605. 

  1605.                 </table>
    1606. 

  1606. 			  </div>
    1607. 

  1607. 						</span>
    1608. 

  1608. 				<?	} else { 
    1609. 

  1609.                 		echo $rsOrders["cartProdID"];
    1610. 

  1610. 						for($k=0; $k<count($arrReasons); $k++){
    1611. 

  1611. 							if (!(strcmp($arrReasons[$k]["id"], $rsOrders["cartReason"]))) echo '<strong> - ' . $strreturn .' Reason: ' . $arrReasons[$k]["reason"] . '</strong>';
    1612. 

  1612. 						}
    1613. 

  1613.                		} ?>
    1614. 

  1614.                 </strong>
    1615. 

  1615. 			  <? if ($rsOrders["pSell"]==1 && $doedit) echo  '('.$rsOrders["pInStock"].')';?>
    1616. 

  1616. 			  </td>
    1617. 

  1617. 			  <td valign="top">
    1618. 

  1618. 			  	<?php print editfunc($rsOrders["cartProdName"],'prodname' . $rowcounter,24)?><br />
    1619. 

  1619. 				<? 
    1620. 

  1620. 				$isemailcert=FALSE;
    1621. 

  1621. 				$sql_opt="SELECT coCartOption FROM cartoptions WHERE coCartID=".$rsOrders["cartID"];
    1622. 

  1622. 				$result_opt=mysql_query($sql_opt);
    1623. 

  1623. 				if($result_opt) {
    1624. 

  1624. 					while($row_opt=mysql_fetch_assoc($result_opt)){
    1625. 

  1625. 						if($row_opt['coCartOption']=='Email' || $row_opt['coCartOption']=='Card via Mail')$isemailcert=TRUE;
    1626. 

  1626. 					}	
    1627. 

  1627. 				}	
    1628. 

  1628. 				if($rsOrders["p_iscert"]=='1'){
    1629. 

  1629. 					$sql_cert="SELECT cert_id,cert_code FROM certificates WHERE cert_order_id=".$_GET["id"]." AND cert_prod_id='".$rsOrders["cartProdID"]."'";
    1630. 

  1630. 					$result_cert=mysql_query($sql_cert);
    1631. 

  1631. 					if(mysql_num_rows($result_cert)>0 && $isemailcert) {
    1632. 

  1632. 						while($row_cert=mysql_fetch_assoc($result_cert)){?>					
    1633. 

  1633. 						<stong>(<?=$row_cert['cert_code']?>)</strong><input name="certID<?=$rowcounter?>" type="hidden" value="<?=$row_cert['cert_id']?>" /> <a href="/admin/certs.php?mode=1&amp;sbcode=<?=$row_cert['cert_id']?>">view</a> | <a href="/admin/certs.php?mode=2&amp;sbcode=<?=$row_cert['cert_id']?>">history</a><br />
    1634. 

  1634. 					<? } 
    1635. 

  1635. 					}elseif($doedit && $isemailcert){?>
    1636. 

  1636. 						<div id="cert_button">
    1637. 

  1637. <!--					<form action="/admin/orders2.php" method="post" name="giftcert" id="giftcertform" >
    1638. 

  1638. -->						<input name="giftcertOrderID" type="hidden" value="<?=$_GET["id"]?>" />
    1639. 

  1639. 						<input id="cert_prod" name="cert_prod" type="hidden" value="<?=$rsOrders["cartProdID"]?>" />
    1640. 

  1640. 						<input name="giftcert" type="button" value="Create Gift Cert Code" onclick="createGiftCert('<?=$_GET["id"]?>','<?=$rsOrders["cartProdID"]?>');" />
    1641. 

  1641. <!--					</form>						
    1642. 

  1642. -->						</div>
    1643. 

  1643. 						<div id="giftcertholder" style="display:none;"></div>					
    1644. 

  1644. 					<? }elseif($isemailcert) echo "Edit order to generate gift certificate."; 
    1645. 

  1645. 				}?>	
    1646. 

  1646. 				<? 
    1647. 

  1647. 				if(!empty($rsOrders["pDownload"])){
    1648. 

  1648. 					$sql_down="SELECT * FROM digitaldownloads WHERE orderID=".$_GET["id"]." AND type='".$rsOrders["cartProdID"]."'";
    1649. 

  1649. 					//echo $sql_down;
    1650. 

  1650. 					$result_down=mysql_query($sql_down);
    1651. 

  1651. 					if(mysql_num_rows($result_down)>0) {?>
    1652. 

  1652. 						<ol style="margin:2px;">
    1653. 

  1653. 						<? while($row_down=mysql_fetch_assoc($result_down)){?>					
    1654. 

  1654. 						
    1655. 

  1655. 						<li style="margin:1px; font-weight:bold;">License ID: <?=$row_down['licenseID']?><br />
    1656. 

  1656. 						Password: <?=$row_down['password']?></li>
    1657. 

  1657. 					<? 	  } ?>
    1658. 

  1658. 						</ol>
    1659. 

  1659. 					<? } elseif($doedit) {?>
    1660. 

  1660. 					<form action="/admin/orders2.php" method="post" name="download">
    1661. 

  1661. 						<input name="downOrder" type="hidden" value="<?=$_GET["id"]?>" />
    1662. 

  1662. 						<input name="downQty" type="hidden" value="<?=$rsOrders["cartQuantity"]?>" />
    1663. 

  1663. 						<input name="downloadtype" type="hidden" value="<?=$rsOrders["cartProdID"]?>" />
    1664. 

  1664. 						<input name="getdownload" type="submit" value="Get License ID and Password" />
    1665. 

  1665. 					</form>				
    1666. 

  1666. 					<? 
    1667. 

  1667. 						} else echo "Edit order to get License ID and Password."; 				
    1668. 

  1668. 				}?>				
    1669. 

  1669. 			  </td>
    1670. 

  1670. 			  <td valign="top"><?php
    1671. 

  1671. 			if($doedit) print '<span id="optionsspan' . $rowcounter . '">';
    1672. 

  1672. 			$sSQL = "SELECT coOptGroup,coCartOption,coPriceDiff,coOptID,optGroup,optStock,optStyleID,coExtendShipping,ui.display_image,ui.org_img_name FROM cartoptions LEFT JOIN options ON cartoptions.coOptID=options.optID LEFT JOIN uploaded_images ui ON cartoptions.coCartOption=ui.id WHERE coCartID=" . $rsOrders["cartID"] . " ORDER BY coID";
    1673. 

  1673. 			$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1674. 

  1674. 			if(mysql_num_rows($result) > 0){
    1675. 

  1675. 				if($doedit) print '<table border="0" cellspacing="0" cellpadding="1" width="100%">';
    1676. 

  1676. 				while($rs2 = mysql_fetch_array($result)){
    1677. 

  1677. 					$extend_shipping='';
    1678. 

  1678. 					if(!empty($rs2["coExtendShipping"])){ 
    1679. 

  1679. 						if($rs2["coExtendShipping"]>19999999) {
    1680. 

  1680. 							$thisyeart=substr($rs2["coExtendShipping"],0,4);
    1681. 

  1681. 							$thismontht=substr($rs2["coExtendShipping"],4,2);
    1682. 

  1682. 							$thisdayt=substr($rs2["coExtendShipping"],6,2);
    1683. 

  1683. 							$extend_shipping=' <span style="color:#FF0000;font-weight:bold;">(PRE-ORDER. Will ship after '.$thismontht.'-'.$thisdayt.'-'.$thisyeart. ')</span>';
    1684. 

  1684. 						}else $extend_shipping=' <span style="color:#FF0000;font-weight:bold;">(This option increases shipping time by '.$rs2["coExtendShipping"]. ' days)</span>';
    1685. 

  1685. 					}
    1686. 

  1686. 					$imgsrc='';
    1687. 

  1687. 					$imgname='';
    1688. 

  1688. 					if(!empty($rs2["display_image"])) {
    1689. 

  1689. 						$imgsrc='<br /><img src="/imguploads/img_screen/'.$rs2["display_image"].'.gif" align="top"><div style="font-size:9px;">(If the image does not appear there is a problem with the custom screen upload)</div>';
    1690. 

  1690. 						$imgname='<br />&nbsp;&nbsp;&nbsp;-Image Name: '.$rs2["org_img_name"];
    1691. 

  1691. 					}
    1692. 

  1692. 					if($doedit){
    1693. 

  1693. 						print '<tr><td align="right" valign="top"><strong>' . $rs2["coOptGroup"] . ':</strong></td><td>';
    1694. 

  1694. 						if(is_null($rs2["optGroup"])){
    1695. 

  1695. 							print 'xxxxxx';
    1696. 

  1696. 						}else{
    1697. 

  1697. 							$sSQL="SELECT optID," . getlangid("optName",32) . ",optPriceDiff,optType,optStock,optFlags,optStock,optPriceDiff AS optDims FROM options INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optGroup=" . $rs2["optGroup"] . ' ORDER BY optID';
    1698. 

  1698. 							$result2 = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1699. 

  1699. 							if($rsl = mysql_fetch_assoc($result2)){
    1700. 

  1700. 								if(abs($rsl["optType"])==2){
    1701. 

  1701. 									print '<select onchange="dorecalc(true)" name="optn' . $rowcounter . '_' . $rs2["coOptID"].'" id="optn' . $rowcounter . '_' . $rs2["coOptID"] . '" size="1">';
    1702. 

  1702. 									do {
    1703. 

  1703. 										print '<option value="' . $rsl["optID"] . "|" . (($rsl["optFlags"] & 1) == 1 ? ($rsOrders["cartProdPrice"]*$rsl["optPriceDiff"])/100.0 : $rsl["optPriceDiff"]) . '"';
    1704. 

  1704. 										if($rsl["optID"]==$rs2["coOptID"]) print ' selected';
    1705. 

  1705. 										print '>' . $rsl[getlangid("optName",32)].' ('.$rsl["optStock"].')';
    1706. 

  1706. 										if((double)$rsl["optPriceDiff"] != 0){
    1707. 

  1707. 											print ' ';
    1708. 

  1708. 											if((double)$rsl["optPriceDiff"] > 0) print '+';
    1709. 

  1709. 											if(($rsl["optFlags"] & 1) == 1)
    1710. 

  1710. 												print number_format(($rsOrders["cartProdPrice"]*$rsl["optPriceDiff"])/100.0,2,'.','');
    1711. 

  1711. 											else
    1712. 

  1712. 												print number_format($rsl["optPriceDiff"],2,'.','');
    1713. 

  1713. 										}
    1714. 

  1714. 										print '</option>';
    1715. 

  1715. 									} while($rsl = mysql_fetch_array($result2));
    1716. 

  1716. 									print '</select>';
    1717. 

  1717. 								}else{
    1718. 

  1718. 									print "<input type='hidden' name='optn" . $rowcounter . '_' . $rs2["coOptID"] . "' value='" . $rsl["optID"] . "' /><textarea wrap='virtual' name='voptn" . $rowcounter . '_' . $rs2["coOptID"] . "' id='voptn". $rowcounter. '_' . $rs2["coOptID"] . "' cols='30' rows='3'>";
    1719. 

  1719. 									print $rs2["coCartOption"] . '</textarea>'.' '.$imgname.' '.$imgsrc.$cert_code. $extend_shipping ;
    1720. 

  1720. 								}
    1721. 

  1721. 							}
    1722. 

  1722. 						}
    1723. 

  1723. 						print "</td></tr>";
    1724. 

  1724. 					}else{						
    1725. 

  1725. 						print '<strong>' . $rs2["coOptGroup"] . ':</strong> ' . str_replace(array("\r\n","\n"),array("<br />","<br />"),$rs2["coCartOption"]) .' '.$rs2["optStyleID"].' '.$imgname.' '.$imgsrc.$cert_code. $extend_shipping . '<br />';
    1726. 

  1726. 					}
    1727. 

  1727. 					if($doedit)
    1728. 

  1728. 						$optpricediff += $rs2["coPriceDiff"];
    1729. 

  1729. 					else
    1730. 

  1730. 						$rsOrders["cartProdPrice"] += $rs2["coPriceDiff"];
    1731. 

  1731. 				}
    1732. 

  1732. 				if($doedit) print '</table>';
    1733. 

  1733. 			}else{
    1734. 

  1734. 				print '-';
    1735. 

  1735. 			}
    1736. 

  1736. 			mysql_free_result($result);
    1737. 

  1737. 			if($doedit) print '</span>' ?></td>
    1738. 

  1738. 			  <td valign="top"><?php print editfunc($rsOrders["cartQuantity"],'quant' . $rowcounter . '" onchange="dorecalc(true)',5)?></td>
    1739. 

  1739. 			  <td valign="top"><?php if($doedit) print editnumeric($rsOrders["cartProdPrice"],'price' . $rowcounter . '" onchange="dorecalc(true)',7); else print FormatEuroCurrency($rsOrders["cartProdPrice"]*$rsOrders["cartQuantity"])?>
    1740. 

  1740. <?php				if($doedit){
    1741. 

  1741. 						print '<input type="hidden" id="optdiffspan' . $rowcounter . '" value="' . $optpricediff . '">';
    1742. 

  1742. 						$totoptpricediff += ($optpricediff*$rsOrders["cartQuantity"]);
    1743. 

  1743. 					}
    1744. 

  1744. 			?></td>
    1745. 

  1745. <?php		if($doedit) print '<td align="center"><input type="checkbox" name="del_' . $rowcounter . '" id="del_' . $rowcounter . '" value="yes" /></td>' ?>
    1746. 

  1746. 			</tr>
    1747. 

  1747. <?php		$rowcounter++;
    1748. 

  1748. 		}
    1749. 

  1749. 	}
    1750. 

  1750. ?>
    1751. 

  1751. <!--NEXTPRODUCTCOMMENT-->
    1752. 

  1752. <?php if($doedit){ ?>
    1753. 

  1753. 			<tr>
    1754. 

  1754. 			  <td align="right" colspan="4">
    1755. 

  1755. 				<table width="100%" border="0" cellspacing="0" cellpadding="0">
    1756. 

  1756. 				  <tr>
    1757. 

  1757. 					<td align="center"><?php if($doedit) print '<input style="width:30px;" type="button" value="-" onclick="extraproduct(\'-\')"> ' . $yyMoProd . ' <input style="width:30px;" type="button" value="+" onclick="extraproduct(\'+\')"> &nbsp; <input type="button" value="' . $yyRecal . '" onclick="dorecalc(false)">'?></td>
    1758. 

  1758. 					<td align="right"><strong>Options Total:</strong></td>
    1759. 

  1759. 				  </tr>
    1760. 

  1760. 				</table></td>
    1761. 

  1761. 			  <td align="left" colspan="2"><span id="optdiffspan"><?php print number_format($totoptpricediff, 2, '.', '')?></span></td>
    1762. 

  1762. 			</tr>
    1763. 

  1763. <?php } ?>
    1764. 

  1764. 

  1765. 			<tr>
    1766. 

  1766. 			  <td align="right" colspan="4"><strong><?php print $xxOrdTot?>:</strong></td>
    1767. 

  1767. 			  <td align="left"><div id="ordTot"><?php echo sprintf("%.2f",$alldata["ordTotal"]); ?></div><input name="ordtotal" id="ordtotal" type="hidden" value="<?php echo $alldata["ordTotal"] ?>" /></td>
    1768. 

  1768. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1769. 

  1769. 			</tr>
    1770. 

  1770. 			<?php
    1771. 

  1771. 	$runTot = $alldata["ordTotal"];
    1772. 

  1772. 	$sql = "SELECT * FROM price_adj WHERE ordID = " . $_GET['id'] . " ORDER BY ordering";
    1773. 

  1773. 	$res = mysql_query($sql) or print(mysql_error().$sql);
    1774. 

  1774. 	if(mysql_num_rows($res) > 0) {
    1775. 

  1775. 		$k=1;
    1776. 

  1776. 		$prcTot = 0;
    1777. 

  1777. ?>
    1778. 

  1778. 			<tr>
    1779. 

  1779. 				<td>&nbsp;</td>
    1780. 

  1780. 				<td>&nbsp;</td>
    1781. 

  1781. 				<td>&nbsp;</td>
    1782. 

  1782. 				<td>&nbsp;</td>
    1783. 

  1783. 				<td>&nbsp;</td>
    1784. 

  1784. 			</tr>
    1785. 

  1785. <?php
    1786. 

  1786. 		while($row=mysql_fetch_assoc($res)) {
    1787. 

  1787. 			$price = 0;
    1788. 

  1788. 			$disp_price = 0;
    1789. 

  1789. 			$amount = '';
    1790. 

  1790. 			
    1791. 

  1791. 			if($row['type'] == 'credit') {
    1792. 

  1792. 				if($row['amt_type'] == 'percentage') {
    1793. 

  1793. 					$price = $runTot * ($row['amt'] * .01);
    1794. 

  1794. 					$runTot -= $price;
    1795. 

  1795. 					$prcTot -= $price;
    1796. 

  1796. 					$disp_price = '-'.(int)$row['amt'].'%';
    1797. 

  1797. 					$amount = '-'.money_format("%!.2n",$price);
    1798. 

  1798. 				}else{
    1799. 

  1799. 					$price = '$-'.money_format("%!.2n",$row['amt']);
    1800. 

  1800. 					$runTot -= $row['amt'];
    1801. 

  1801. 					$prcTot -= $row['amt'];
    1802. 

  1802. 					$disp_price = $price;
    1803. 

  1803. 					$amount = '-'.money_format("%!.2n",$row['amt']);
    1804. 

  1804. 				}
    1805. 

  1805. 			}else{
    1806. 

  1806. 				if($row['amt_type'] == 'percentage') {
    1807. 

  1807. 					$price = $runTot * ($row['amt'] * .01);
    1808. 

  1808. 					$runTot += $price;
    1809. 

  1809. 					$prcTot += $price;
    1810. 

  1810. 					$disp_price = (int)$row['amt'].'%';
    1811. 

  1811. 					$amount = money_format("%.2n",$price);
    1812. 

  1812. 				}else{
    1813. 

  1813. 					$price = money_format("%.2n",$row['amt']);
    1814. 

  1814. 					$runTot += $row['amt'];
    1815. 

  1815. 					$prcTot += $row['amt'];
    1816. 

  1816. 					$disp_price = $price;
    1817. 

  1817. 					$amount = money_format("%.2n",$row['amt']);
    1818. 

  1818. 				}
    1819. 

  1819. 			}
    1820. 

  1820. ?>
    1821. 

  1821. 			<tr>
    1822. 

  1822. 				<td colspan="3" style="font-weight: bold; text-align: right">Price Adjustment <?=$k?>:</td>
    1823. 

  1823. 				<td align="left"<?=(strstr($disp_price,"-"))?' style="color: red"':''?>><?=$disp_price?></td>
    1824. 

  1824. 				<td align="left"<?=(strstr($disp_price,"-"))?' style="color: red"':''?>><?=$amount?></td>
    1825. 

  1825. 			</tr>
    1826. 

  1826. <?php
    1827. 

  1827. 			$k++;
    1828. 

  1828. 		}
    1829. 

  1829. ?>
    1830. 

  1830. 			<tr>
    1831. 

  1831. 				<td>&nbsp;</td>
    1832. 

  1832. 				<td>&nbsp;</td>
    1833. 

  1833. 				<td>&nbsp;</td>
    1834. 

  1834. 				<td>&nbsp;</td>
    1835. 

  1835. 				<td>&nbsp;</td>
    1836. 

  1836. 			</tr>
    1837. 

  1837. <?php
    1838. 

  1838. 	}
    1839. 

  1839. ?>
    1840. 

  1840. <?php if((double)$alldata["ordShipping"]!=0.0 || $doedit){ ?>
    1841. 

  1841. 			<tr>
    1842. 

  1842. 			  <td align="right" colspan="4"><strong><?php print $xxShippg?>:</strong></td>
    1843. 

  1843. 			  <td align="left"><?php print editnumeric($alldata["ordShipping"],"ordShipping",7)?></td>
    1844. 

  1844. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1845. 

  1845. 			</tr>
    1846. 

  1846. <?php }
    1847. 

  1847. 	  if((double)$alldata["ordHandling"]!=0.0 || $doedit){ ?>
    1848. 

  1848. 			<tr>
    1849. 

  1849. 			  <td align="right" colspan="4"><strong><?php print $xxHndlg?>:</strong></td>
    1850. 

  1850. 			  <td align="left"><?php print editnumeric($alldata["ordHandling"],"ordHandling",7)?></td>
    1851. 

  1851. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1852. 

  1852. 			</tr>
    1853. 

  1853. <?php }
    1854. 

  1854. 	  if((double)$alldata["ordDiscount"]!=0.0 || $doedit){ ?>
    1855. 

  1855. 			<tr>
    1856. 

  1856. 			  <td align="right" colspan="4"><strong><?php print $xxDscnts?>:</strong></td>
    1857. 

  1857. 			  <td align="left"><font color="#FF0000"><?php print editnumeric($alldata["ordDiscount"],"ordDiscount",7)?></font></td>
    1858. 

  1858. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1859. 

  1859. 			</tr>
    1860. 

  1860. <?php }
    1861. 

  1861. 	  if((double)$alldata["ord_cert_amt"]!=0.0 || $doedit){ 
    1862. 

  1862. 			$sqlcert="SELECT cert_code FROM certificates WHERE cert_id=".$alldata["ord_cert_id"];
    1863. 

  1863. 			$resultcert=mysql_query($sqlcert);
    1864. 

  1864. 			if(mysql_num_rows($resultcert)>0) $rowcert=mysql_fetch_assoc($resultcert);
    1865. 

  1865. 			?>
    1866. 

  1866. 			<tr>
    1867. 

  1867. 			  <td align="right" colspan="4"><strong><? if(!empty($rowcert["cert_code"])) echo '('.$rowcert["cert_code"].')';?> <?php print $xxGCerts?>:</strong></td>
    1868. 

  1868. 			  <td align="left"><font color="#FF0000"><?php print editnumeric($alldata["ord_cert_amt"],"ord_cert_amt",7)?></font></td>
    1869. 

  1869. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1870. 

  1870. 			</tr>
    1871. 

  1871. <?php }
    1872. 

  1872. 	  if((double)$alldata["ordStateTax"]!=0.0 || $doedit){ ?>
    1873. 

  1873. 			<tr>
    1874. 

  1874. 			  <td align="right" colspan="4"><strong><?php print $xxStaTax?>:</strong></td>
    1875. 

  1875. 			  <td align="left"><?php print editnumeric($alldata["ordStateTax"],"ordStateTax",7)//$alldata["ordStateTax"]?></td>
    1876. 

  1876. <?php		if($doedit) print '<td align="center" nowrap><input type="text" name="staterate" id="staterate" size="1" value="' . $statetaxrate . '">%</td>' ?>
    1877. 

  1877. 			</tr>
    1878. 

  1878. <?php }
    1879. 

  1879. 	  if((double)$alldata["ordCountryTax"]!=0.0 || $doedit){ ?>
    1880. 

  1880. 			<tr>
    1881. 

  1881. 			  <td align="right" colspan="4"><strong><?php print $xxCntTax?>:</strong></td>
    1882. 

  1882. 			  <td align="left"><?php print editnumeric($alldata["ordCountryTax"],"ordCountryTax",7)?></td>
    1883. 

  1883. <?php		if($doedit) print '<td align="center" nowrap><input type="text" name="countryrate" id="countryrate" size="1" value="' . $countrytaxrate . '">%</td>' ?>
    1884. 

  1884. 			</tr>
    1885. 

  1885. <?php }
    1886. 

  1886. 	  if((double)$alldata["ordHSTTax"]!=0.0 || ($doedit && @$canadataxsystem)){ ?>
    1887. 

  1887. 			<tr>
    1888. 

  1888. 			  <td align="right" colspan="4"><strong><?php print $xxHST?>:</strong></td>
    1889. 

  1889. 			  <td align="left"><?php print editnumeric($alldata["ordHSTTax"],"ordHSTTax",7)?></td>
    1890. 

  1890. <?php		if($doedit) print '<td align="center" nowrap><input type="text" name="hstrate" id="hstrate" size="1" value="' . $hsttaxrate . '">%</td>' ?>
    1891. 

  1891. 			</tr>
    1892. 

  1892. <?php } ?>
    1893. 

  1893. 			<tr>
    1894. 

  1894. 			  <td align="right" colspan="4"><strong><?php print $xxGndTot?>:</strong></td>
    1895. 

  1895. 			  <td align="left"><span id="grandtotalspan"><?php print FormatEuroCurrency(($alldata["ordTotal"]+$alldata["ordStateTax"]+$alldata["ordCountryTax"]+$alldata["ordHSTTax"]+$alldata["ordShipping"]+$alldata["ordHandling"]+$prcTot)-$alldata["ordDiscount"]-$alldata["ord_cert_amt"])?></span></td>
    1896. 

  1896. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1897. 

  1897. 			</tr>
    1898. 

  1898. 	  </table>
    1899. 

  1899. </span>
    1900. 

  1900. 		  </td>
    1901. 

  1901. 		</tr>
    1902. 

  1902. <?php	if($isprinter && @$invoicefooter != ""){ ?>
    1903. 

  1903. 		<tr> 
    1904. 

  1904.           <td width="100%"><?php print $invoicefooter?></td>
    1905. 

  1905. 		</tr>
    1906. 

  1906. <?php	}elseif($doedit){ 
    1907. 

  1907. 			
    1908. 

  1908. 			//echo 'old status='.$alldata["ordStatus"]." ".$_GET["id"];
    1909. 

  1909. 		
    1910. 

  1910. 			if(! ($oldordstatusedit==999) && ($oldordstatusedit >=3 && $oldordstatusedit!=10 && $oldordstatusedit!=17)) release_stock($_GET["id"]);//echo 'edit release_stock';$_SESSION['counter_id']++;}
    1911. 

  1911. 

  1912. 			if($oldordstatusedit!=17 && $oldordstatusedit!=''){
    1913. 

  1913. 			$sql_status_change="UPDATE orders SET ordStatus=17 WHERE ordID=".$_GET["id"];
    1914. 

  1914. 			//echo $sql_status_change;
    1915. 

  1915. 			mysql_query($sql_status_change) or print(mysql_error());
    1916. 

  1916. 			if(!setNewLocation( 17 , $_GET["id"],'Manual', 'Edit Order' )) print("Unable to record status change.");
    1917. 

  1917. 		}
    1918. 

  1918. ?>
    1919. 

  1919. 		<tr> 
    1920. 

  1920.           <td align="center" width="100%">
    1921. 

  1921. 		<br />
    1922. 

  1922. 			<div style="font-weight:bold;">
    1923. 

  1923. 				 Set This Orders Status To:  
    1924. 

  1924. 				 <select name="ordstatusnew" size="1"><?php
    1925. 

  1925. 					for($index=0; $index<$numstatus; $index++){
    1926. 

  1926. 						//if(! $isauthorized && $allstatus[$index]["statID"]>2) break;
    1927. 

  1927. 						if(! ($oldordstatusedit != 2 && $allstatus[$index]["statID"]==2)){
    1928. 

  1928. 							print '<option value="' . $allstatus[$index]["statID"] . '"';
    1929. 

  1929. 							if($oldordstatusedit==$allstatus[$index]["statID"]){
    1930. 

  1930. 								print " selected";
    1931. 

  1931. 							}
    1932. 

  1932. 							print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    1933. 

  1933. 						}
    1934. 

  1934. 					}
    1935. 

  1935. 					?>
    1936. 

  1936. 			  </select>
    1937. 

  1937. 					 <p>And</p>
    1938. 

  1938. 					  <input accesskey="u" type="submit" value="    <?php print $yyUpdate?>     " onclick="updateClicked=true; cloneClicked=false;"  />
    1939. 

  1939. 				OR <input type="submit" name="clone" value="Clone Order" onclick="updateClicked=false; cloneClicked=true;" /><br />
    1940. 

  1940. 			</div>
    1941. 

  1941. 			 		  </td>
    1942. 

  1942. 		</tr>
    1943. 

  1943. <?php	} ?>
    1944. 

  1944. 	  </table>
    1945. 

  1945. <?php
    1946. 

  1946. 	if($doedit) print '</form>';
    1947. 

  1947. 	if($doedit){
    1948. 

  1948. 	// ADDED by Chad Jun-06-06
    1949. 

  1949. 	// PRICE ADJUSTMENTS
    1950. 

  1950. ?>
    1951. 

  1951. 	
    1952. 

  1952. 	<h2><a name="prc_adj"></a>Price Adjustments</h2>
    1953. 

  1953. 	
    1954. 

  1954. <?php
    1955. 

  1955. 	if(!empty($_GET['adj_err'])) {
    1956. 

  1956. ?>
    1957. 

  1957. 		<div style="margin: 5px auto; color: #FF0000; font-weight: bold; text-align: center"><?=$_GET['adj_err']?></div>
    1958. 

  1958. <?php
    1959. 

  1959. 	}elseif(!empty($_GET['adj_msg'])) {
    1960. 

  1960. ?>
    1961. 

  1961. 		<div style="margin: 5px auto; color: #009900; font-weight: bold; text-align: center"><?=$_GET['adj_msg']?></div>
    1962. 

  1962. <?php
    1963. 

  1963. 	}
    1964. 

  1964. ?>
    1965. 

  1965. 	<table width="95%" cellpadding="3" cellspacing="0" border="1" style="margin: 0 auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    1966. 

  1966. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    1967. 

  1967. 			<th width="60" style="text-align: center">Type</th>
    1968. 

  1968. 			<th width="80" style="text-align: center">Amount Type</th>
    1969. 

  1969. 			<th width="80" style="text-align: center">Amount</th>
    1970. 

  1970. 			<th width="150" style="text-align: center">Date</th>
    1971. 

  1971. 			<th>Note</th>
    1972. 

  1972. <?php
    1973. 

  1973. if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    1974. 

  1974. ?>
    1975. 

  1975. 			<th width="28">Edit</th>
    1976. 

  1976. 			<th width="28">Delete</th>
    1977. 

  1977. 			<th width="28">Move Up</th>
    1978. 

  1978. 			<th width="28">Move Down</th>
    1979. 

  1979. <?php
    1980. 

  1980. }
    1981. 

  1981. ?>
    1982. 

  1982. 		</tr>
    1983. 

  1983. <?php
    1984. 

  1984. 	$sql = "SELECT * FROM price_adj WHERE ordID = " . $_GET["id"] . " ORDER BY ordering";
    1985. 

  1985. 	$res = mysql_query($sql) or print(mysql_error().$sql);
    1986. 

  1986. 	
    1987. 

  1987. 	$num_rows = mysql_num_rows($res);
    1988. 

  1988. 	if($num_rows > 0) {
    1989. 

  1989. 		$j=0;
    1990. 

  1990. 		while($row=mysql_fetch_assoc($res)) {
    1991. 

  1991. ?>
    1992. 

  1992. 		<tr<?=($j%0==0?'':' style="background-color: #E6E9F5"')?>>
    1993. 

  1993. 			<td style="text-align: center"><?=$row['type']?></td>
    1994. 

  1994. 			<td style="text-align: center"><?=$row['amt_type']?></td>
    1995. 

  1995. 			<td style="text-align: right"><?=$row['amt']?></td>
    1996. 

  1996. 			<td style="text-align: left"><?=date("n/j/Y g:i a",strtotime($row['date']))?></td>
    1997. 

  1997. 			<td style="text-align: left"><?=$row['note']?></td>
    1998. 

  1998. <?php
    1999. 

  1999. if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    2000. 

  2000. ?>
    2001. 

  2001. 			<td style="text-align: center"><a href="/admin/editprcadj.php?pa_id=<?=$row['id']?>&action=edit" onclick="window.open(this.href,'edit_txn','left=700,top=100,width=550,height=150,toolbar=0'); return false;"><img src="/lib/images/misc/edit.gif" height="24" width="24"  /></a></td>
    2002. 

  2002. 			<td style="text-align: center"><a href="/admin/editprcadj.php?pa_id=<?=$row['id']?>&action=delete" onclick="window.open(this.href,'edit_txn','left=700,top=100,width=550,height=150,toolbar=0'); return false;"><img src="/lib/images/misc/delete.gif" width="24" height="24" /></a></td>
    2003. 

  2003. 			<td style="text-align: center"><? if($row['ordering']!=1){?><a href="/admin/mvprcadj.php?pa_id=<?=$row['id']?>&pa_ordID=<?=$row['ordID']?>&position=<?=$row['ordering']?>&action=moveup" onclick=""><img src="/lib/images/misc/arrow_up.png" width="24" height="24" /></a><? } ?></td>
    2004. 

  2004. 			<td style="text-align: center"><? if($row['ordering']!=$num_rows){?><a href="/admin/mvprcadj.php?pa_id=<?=$row['id']?>&pa_ordID=<?=$row['ordID']?>&position=<?=$row['ordering']?>&action=movedown" onclick=""><img src="/lib/images/misc/arrow_down.png" width="24" height="24" /></a><? } ?></td>
    2005. 

  2005. <?php
    2006. 

  2006. }
    2007. 

  2007. ?>
    2008. 

  2008. 		</tr>
    2009. 

  2009. <?php
    2010. 

  2010. 			$j++;
    2011. 

  2011. 		}
    2012. 

  2012. 	}else{
    2013. 

  2013. ?>
    2014. 

  2014. 		<tr>
    2015. 

  2015. 			<td colspan="9" style="text-align: center; font-weight: bold">No Price Adjustments Found</td>
    2016. 

  2016. 		</tr>
    2017. 

  2017. <?php
    2018. 

  2018. 	}
    2019. 

  2019. ?>
    2020. 

  2020. 	</table>
    2021. 

  2021. 	
    2022. 

  2022. <?php
    2023. 

  2023. if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    2024. 

  2024. ?>
    2025. 

  2025. 	
    2026. 

  2026. 	<input type="button" id="btn_prc_add" value="Add Price Adjustment" onclick="togglePrcAdd();" />
    2027. 

  2027. 	
    2028. 

  2028. 	<div id="div_prc_add" style="display: none">
    2029. 

  2029. 		<form id="adj_frm" name="adj_frm" method="post" action="/admin/ordersprocess.php">
    2030. 

  2030. 		<table cellpadding="3" cellspacing="0" border="1" style="margin: 0 auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    2031. 

  2031. 			<tr style="background-color: #BFC9E0; color: #194C7F">
    2032. 

  2032. 				<td colspan="2" style="text-align: center; font-weight: bold; font-size: 14px">Add Price Adjustment</td>
    2033. 

  2033. 			</tr>
    2034. 

  2034. 			<tr>
    2035. 

  2035. 				<td style="font-weight: bold">Type:</td>
    2036. 

  2036. 				<td>
    2037. 

  2037. 					<select id="adj_type" name="adj_type">
    2038. 

  2038. 						<option value="" selected="selected">Choose...</option>
    2039. 

  2039. 						<option value="credit">Credit</option>
    2040. 

  2040. 						<option value="debit">Debit</option>
    2041. 

  2041. 					</select>
    2042. 

  2042. 				</td>
    2043. 

  2043. 			</tr>
    2044. 

  2044. 			<tr>
    2045. 

  2045. 				<td style="font-weight: bold">Amt Type:</td>
    2046. 

  2046. 				<td>
    2047. 

  2047. 					<select id="adj_amt_type" name="adj_amt_type">
    2048. 

  2048. 						<option value="" selected="selected">Choose...</option>
    2049. 

  2049. 						<option value="fixed">Fixed</option>
    2050. 

  2050. 						<option value="percentage">Percentage</option>
    2051. 

  2051. 					</select>
    2052. 

  2052. 				</td>
    2053. 

  2053. 			</tr>
    2054. 

  2054. 			<tr>
    2055. 

  2055. 				<td style="font-weight: bold">Amount:</td>
    2056. 

  2056. 				<td><input id="adj_amt" name="adj_amt" type="text" value="" /></td>
    2057. 

  2057. 			</tr>
    2058. 

  2058. 			<tr>
    2059. 

  2059. 				<td style="font-weight: bold">Note:</td>
    2060. 

  2060. 				<td><textarea id="adj_note" name="adj_note"></textarea></td>
    2061. 

  2061. 			</tr>
    2062. 

  2062. 			<tr>
    2063. 

  2063. 				<td colspan="2" style="text-align: center"><input type="submit" id="adj_submit" name="adj_submit" value="Add" /></td>
    2064. 

  2064. 			</tr>
    2065. 

  2065. 		</table>
    2066. 

  2066. 		<input type="hidden" id="adj_ordID" name="adj_ordID" value="<?=$_GET["id"]?>" />
    2067. 

  2067. 		<input type="hidden" id="adj_doedit" name="adj_doedit" value="<?=$_GET["doedit"]?>" />
    2068. 

  2068. 		</form>
    2069. 

  2069. 	</div>
    2070. 

  2070. <?php
    2071. 

  2071. }
    2072. 

  2072. 	// ADD ENDED
    2073. 

  2073. 

  2074. 	// ADDED by Chad Jun-05-06
    2075. 

  2075. 	// TRANSACTIONS
    2076. 

  2076. 	$sql = "SELECT * FROM transactions WHERE ordID = " . $_GET["id"];
    2077. 

  2077. 	$res = mysql_query($sql) or print(mysql_error().$sql);
    2078. 

  2078. ?>
    2079. 

  2079. 	<h2><a name="aim"></a>Transactions</h2>
    2080. 

  2080. <?php
    2081. 

  2081. 	if(!empty($_GET['aim_err'])) {
    2082. 

  2082. ?>
    2083. 

  2083. 		<div style="margin: 5px auto; color: #FF0000; font-weight: bold; text-align: center"><?=$_GET['aim_err']?></div>
    2084. 

  2084. <?php
    2085. 

  2085. 	}elseif(!empty($_GET['aim_msg'])) {
    2086. 

  2086. ?>
    2087. 

  2087. 		<div style="margin: 5px auto; color: #009900; font-weight: bold; text-align: center"><?=$_GET['aim_msg']?></div>
    2088. 

  2088. <?php
    2089. 

  2089. 	}
    2090. 

  2090. ?>
    2091. 

  2091. 	<table width="95%" cellpadding="3" cellspacing="0" border="1" style="margin: 0 auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    2092. 

  2092. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    2093. 

  2093. 			<th width="85" style="text-align: center">Type</th>
    2094. 

  2094. 			<th width="60" style="text-align: right">Amount</th>
    2095. 

  2095. 			<th width="80" style="text-align: center">TXN</th>
    2096. 

  2096. 			<th width="120" style="text-align: left">Date</th>
    2097. 

  2097. 			<th>Note</th>
    2098. 

  2098. 		</tr>
    2099. 

  2099. <?php
    2100. 

  2100. 	while($row=mysql_fetch_assoc($res)) {
    2101. 

  2101. ?>
    2102. 

  2102. 		<tr>
    2103. 

  2103. 			<td style="text-align: center"><?=$row['type']?></td>
    2104. 

  2104. 			<td style="text-align: center"><?=money_format("%.2n",$row['amt'])?></td>
    2105. 

  2105. 			<td style="text-align: center"><?=$row['txn']?></td>
    2106. 

  2106. 			<td style="text-align: center"><?=date("n/j/Y g:i a",strtotime($row['date_received']))?></td>
    2107. 

  2107. 			<td><?=$row['note']?></td>
    2108. 

  2108. 		</tr>
    2109. 

  2109. <?php	
    2110. 

  2110. 	}
    2111. 

  2111. ?>
    2112. 

  2112. 	</table>
    2113. 

  2113. <?php
    2114. 

  2114. if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==9 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    2115. 

  2115. ?>
    2116. 

  2116. <input type="button" id="btn_add_txn" value="Credit or Void" onclick="toggleTXN();" />
    2117. 

  2117. 

  2118. <div id="div_trans" style="display: none">
    2119. 

  2119. 	<form id="aim_frm" name="aim_frm" method="post" action="/admin/ordersprocess.php" onsubmit="return checkAIM(this);">
    2120. 

  2120. 	<table cellpadding="3" cellspacing="0" border="1" style="margin: 5px auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    2121. 

  2121. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    2122. 

  2122. 			<td colspan="4" style="text-align: center; font-weight: bold; font-size: 14px">Credit or Void a Transaction</td>
    2123. 

  2123. 		</tr>
    2124. 

  2124. 		<tr>
    2125. 

  2125. 			<th style="text-align: center">Type</th>
    2126. 

  2126. 			<th style="text-align: center">TXN</th>
    2127. 

  2127. 			<th style="text-align: center">Amount</th>
    2128. 

  2128. 			<th>Note</th>
    2129. 

  2129. 		</tr>
    2130. 

  2130. 		<tr>
    2131. 

  2131. 			<td valign="top">
    2132. 

  2132. 				<select name="aim_type" id="aim_type">
    2133. 

  2133. 					<option value="" selected="selected">Choose...</option>
    2134. 

  2134. 					<option value="CREDIT">Credit</option>
    2135. 

  2135. 					<option value="VOID">Void</option>
    2136. 

  2136. 				</select>
    2137. 

  2137. 			</td>
    2138. 

  2138. 			<td valign="top"><input type="text" id="aim_txn" name="aim_txn" value="" autocomplete="off" /></td>
    2139. 

  2139. 			<td valign="top"><input type="text" id="aim_amt" name="aim_amt" value="" autocomplete="off" /></td>
    2140. 

  2140. 			<td valign="top"><textarea id="aim_note" name="aim_note"></textarea></td>
    2141. 

  2141. 		</tr>
    2142. 

  2142. 		<tr>
    2143. 

  2143. 			<td colspan="4" style="text-align: right"><input type="submit" id="aim_submit" name="aim_submit" value="Submit" /></td>
    2144. 

  2144. 		</tr>
    2145. 

  2145. 	</table>
    2146. 

  2146. 	<input type="hidden" id="aim_inv" name="aim_inv" value="<?=$_GET["id"]?>" />
    2147. 

  2147. <?php
    2148. 

  2148. $tmp = explode(" ",$alldata["ordName"]);
    2149. 

  2149. ?>
    2150. 

  2150. 	<input type="hidden" id="aim_fname" name="aim_fname" value="<?=$tmp[0]?>" />
    2151. 

  2151. 	<input type="hidden" id="aim_lname" name="aim_lname" value="<?=(!empty($tmp[1]))?$tmp[1]:''?>" />
    2152. 

  2152. 	<input type="hidden" id="aim_doedit" name="aim_doedit" value="<?=$_GET['doedit']?>" />
    2153. 

  2153. 	</form>
    2154. 

  2154. </div>
    2155. 

  2155. 

  2156. <input type="button" id="btn_charge" value="Charge CC" onclick="toggleCharge();" style="display: block; margin: 5px 5px 5px 0" />
    2157. 

  2157. 

  2158. <div id="div_charge" style="display: none">
    2159. 

  2159. 	<?php
    2160. 

  2160. 		if(!empty($alldata["ordEID"])){
    2161. 

  2161. 			$sql_eid="SELECT * FROM customers WHERE custID=".$alldata["ordEID"];
    2162. 

  2162. 			$result_eid=mysql_query($sql_eid);
    2163. 

  2163. 			if(mysql_num_rows($result_eid)>0){
    2164. 

  2164. 				$row_eid=mysql_fetch_assoc($result_eid);
    2165. 

  2165. 			}
    2166. 

  2166. 		}
    2167. 

  2167. 	?>
    2168. 

  2168. 	<form id="frmCharge" name="frmCharge" method="post" action="/admin/ordersprocess.php">
    2169. 

  2169. 	<table cellpadding="3" cellspacing="0" border="1" style="margin: 5px auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    2170. 

  2170. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    2171. 

  2171. 			<td colspan="2" style="font-size: 14px; font-weight: bold; text-align: center">Authorize &amp; Capture</td>
    2172. 

  2172. 		</tr>
    2173. 

  2173. 		<tr>
    2174. 

  2174. 			<td>First Name:</td>
    2175. 

  2175. 			<td><input type="text" id="am_fname" name="am_fname" value="<?=$row_eid['Name']?>" /></td>
    2176. 

  2176. 		</tr>
    2177. 

  2177. 		<tr>
    2178. 

  2178. 			<td>Last Name:</td>
    2179. 

  2179. 			<td><input type="text" id="am_lname" name="am_lname" value="" /></td>
    2180. 

  2180. 		</tr>
    2181. 

  2181. 		<tr>
    2182. 

  2182. 			<td>Address:</td>
    2183. 

  2183. 			<td><input type="text" id="am_address" name="am_address" value="<?=$row_eid['Address']?>" /></td>
    2184. 

  2184. 		</tr>
    2185. 

  2185. 		<tr>
    2186. 

  2186. 			<td>Address 2:</td>
    2187. 

  2187. 			<td><input type="text" id="am_address2" name="am_address2" value="<?=$row_eid['Address2']?>" /></td>
    2188. 

  2188. 		</tr>
    2189. 

  2189. 		<tr>
    2190. 

  2190. 			<td>City:</td>
    2191. 

  2191. 			<td><input type="text" id="am_city" name="am_city" value="<?=$row_eid['City']?>" /></td>
    2192. 

  2192. 		</tr>
    2193. 

  2193. 		<tr>
    2194. 

  2194. 			<td>State:</td>
    2195. 

  2195. 			<td><input type="text" id="am_state" name="am_state" value="<? if(!empty($row_eid['State2'])) echo $row_eid['State2']; else echo $row_eid['State']; ?>" /></td>
    2196. 

  2196. 		</tr>
    2197. 

  2197. 		<tr>
    2198. 

  2198. 			<td>Zip:</td>
    2199. 

  2199. 			<td><input type="text" id="am_zip" name="am_zip" value="<?=$row_eid['Zip']?>" /></td>
    2200. 

  2200. 		</tr>
    2201. 

  2201. 		<tr>
    2202. 

  2202. 			<td>Amount:</td>
    2203. 

  2203. 			<td><input type="text" id="am_amt" name="am_amt" value="" autocomplete="off" /></td>
    2204. 

  2204. 		</tr>
    2205. 

  2205. 		<tr>
    2206. 

  2206. 			<td>CC#:</td>
    2207. 

  2207. 			<td><input type="text" id="am_cc_num" name="am_cc_num" value="<?=Decrypt($row_eid['ccNum'], $cart_misc)?>" autocomplete="off" /></td>
    2208. 

  2208. 		</tr>
    2209. 

  2209. 		<tr>
    2210. 

  2210. 			<td>Exp. Date:</td>
    2211. 

  2211. 			<td> 
    2212. 

  2212. 				<select id="am_exp_mon" name="am_exp_mon">
    2213. 

  2213. <?
    2214. 

  2214. 		$ccexp=explode('/',$row_eid['ccExp']);
    2215. 

  2215. 		for($i=1; $i<=12; $i++)
    2216. 

  2216. 		{
    2217. 

  2217. 			if($i<10)
    2218. 

  2218. 				$i = '0'.$i;
    2219. 

  2219. 			if($i == $ccexp[0])
    2220. 

  2220. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    2221. 

  2221. 			else if(date('n') == $i )
    2222. 

  2222. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    2223. 

  2223. 			else
    2224. 

  2224. 				echo '<option value="'.$i.'">'.$i.'</option>';
    2225. 

  2225. 		}
    2226. 

  2226. ?>
    2227. 

  2227. 				</select>&nbsp;/&nbsp;
    2228. 

  2228. 				<select id="am_exp_year" name="am_exp_year">
    2229. 

  2229. <?
    2230. 

  2230. 		$cur_year = date('Y');
    2231. 

  2231. 		for($i=($cur_year); $i<=$cur_year+10; $i++)
    2232. 

  2232. 		{
    2233. 

  2233. 			if($i == $ccexp[1])
    2234. 

  2234. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    2235. 

  2235. 			elseif(date('Y') == $i || $i==$ccexp[1])
    2236. 

  2236. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    2237. 

  2237. 			else
    2238. 

  2238. 				echo '<option value="'.$i.'">'.$i.'</option>';
    2239. 

  2239. 		}
    2240. 

  2240. ?>				
    2241. 

  2241. 				</select>
    2242. 

  2242. 			</td>
    2243. 

  2243. 		</tr>
    2244. 

  2244. 		<tr>
    2245. 

  2245. 			<td>CCV:</td>
    2246. 

  2246. 			<td><input type="text" id="am_ccv" name="am_ccv" value="<?=$row_eid['ccCCV']?>" autocomplete="off" /></td>
    2247. 

  2247. 		</tr>
    2248. 

  2248. 		<tr>
    2249. 

  2249. 			<td colspan="2" style="text-align: center"><input type="submit" id="am_submit" name="am_submit" value="Submit" /></td>
    2250. 

  2250. 		</tr>
    2251. 

  2251. 	</table>
    2252. 

  2252. 	<input type="hidden" id="am_inv" name="am_inv" value="<?=$_GET["id"]?>" />
    2253. 

  2253. 	<input type="hidden" id="am_type" name="am_type" value="AUTH_CAPTURE" />
    2254. 

  2254. 	<input type="hidden" id="am_doedit" name="am_doedit" value="<?=$_GET['doedit']?>" />
    2255. 

  2255. 	</form>
    2256. 

  2256. </div>
    2257. 

  2257. <?php
    2258. 

  2258. }
    2259. 

  2259. } // End of User permission check
    2260. 

  2260. 

  2261. 	// ADDED by Chad Apr-04-06
    2262. 

  2262. 	// LOCATION HISTORY
    2263. 

  2263. 	$qry = "SELECT * FROM location WHERE ordID = '".$_GET["id"]."' ORDER BY stamp";
    2264. 

  2264. 	$res = mysql_query($qry) or print(mysql_error().$qry);
    2265. 

  2265. 	$i=0;
    2266. 

  2266. 	while($row = mysql_fetch_assoc($res)) {
    2267. 

  2267. 		$locations[$i++]=$row;
    2268. 

  2268. 	}
    2269. 

  2269. ?>
    2270. 

  2270. 		<table width="600" cellpadding="3" cellspacing="0" style="margin: 10px auto; font-family: Verdana, Arial, Helvetica, sans-serif; border: 1px solid #4B1610; border-collapse: collapse">
    2271. 

  2271. 			<tr style="border-bottom: 1px solid #4B1610">
    2272. 

  2272. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Location</td>
    2273. 

  2273. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Date Changed</td>
    2274. 

  2274. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Employee</td>
    2275. 

  2275. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Type</td>
    2276. 

  2276. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Reason</td>
    2277. 

  2277. 			</tr>
    2278. 

  2278. <?php
    2279. 

  2279. 	if(is_array($locations)) { 
    2280. 

  2280. 		$count=count($locations);
    2281. 

  2281. 		for($i=0;$i<$count;$i++){
    2282. 

  2282. 			$config = RBI_Kohana::config('database.default_ifrogz');
    2283. 

  2283. 			$config = $config['connection'];
    2284. 

  2284. 			$db=mysql_connect($config['hostname'], $config['username'], $config['password']);
    2285. 

  2285. 			mysql_select_db($config['database']) or die ('RBI connection failed.</td></tr></table></body></html>');
    2286. 

  2286. 			if($locations[$i]["employeeID"]!=0){			
    2287. 

  2287. 				$rbiSQL = 'select * from employee where id="'.$locations[$i]["employeeID"].'" ';
    2288. 

  2288. 				$rs_rbi = mysql_query($rbiSQL);
    2289. 

  2289. 				$rbi_row = mysql_fetch_assoc($rs_rbi);
    2290. 

  2290. 			} else $rbi_row['firstname']=0;
    2291. 

  2291. ?>
    2292. 

  2292. 			<tr style="background-color: #<?=($i%2==0)?'903E36':'903E36'?>; border-bottom: 1px solid #4B1610">
    2293. 

  2293. 				<td style="color: #FFFFFF"><?=$locations[$i]['location']?></td>
    2294. 

  2294. 				<td style="color: #FFFFFF"><?=$locations[$i]['stamp']?></td>
    2295. 

  2295. 				<td style="color: #FFFFFF"><?=$rbi_row['firstname']?></td>
    2296. 

  2296. 				<td style="color: #FFFFFF"><?=$locations[$i]['locType']?></td>
    2297. 

  2297. 				<td style="color: #FFFFFF"><?=$locations[$i]['locTypeReason']?></td>
    2298. 

  2298. 			</tr>
    2299. 

  2299. <?php
    2300. 

  2300. 		}
    2301. 

  2301. 	}else{
    2302. 

  2302. ?>
    2303. 

  2303. 			<tr>
    2304. 

  2304. 				<td colspan="2" style="text-align: center">No location found</td>
    2305. 

  2305. 			</tr>
    2306. 

  2306. <?php
    2307. 

  2307. 	}
    2308. 

  2308. ?>
    2309. 

  2309. 		</table>
    2310. 

  2310. <?php
    2311. 

  2311. 	include(APPPATH.'views/partials/admin/dbconnection.php');
    2312. 

  2312. 	// ADD ENDED
    2313. 

  2313. 	
    2314. 

  2314. 	// ADDED by Chad Apr-04-06
    2315. 

  2315. 	// FEDEX TRACKING
    2316. 

  2316. 	$qry = "SELECT * FROM fedex WHERE ordID = '".$_GET["id"]."'";
    2317. 

  2317. 	$res = mysql_query($qry);
    2318. 

  2318. 	if(mysql_num_rows($res) > 0) {
    2319. 

  2319. 		$row = mysql_fetch_assoc($res);
    2320. 

  2320. 		$trackNum = $row['trackNum'];
    2321. 

  2321. 		if(!empty($trackNum)) {
    2322. 

  2322. 			include(DOCROOT.'includes/fedex/fedexdc.php');
    2323. 

  2323. 			$fed = new FedExDC();
    2324. 

  2324. 			$track_Ret = $fed->track(
    2325. 

  2325. 				array(
    2326. 

  2326. 					'1537' => $trackNum, //Tracking Number
    2327. 

  2327. 					'1534' =>'Y' // detail_scan_indicator (Show me all the tracking data)
    2328. 

  2328. 				)
    2329. 

  2329. 			);
    2330. 

  2330. 			
    2331. 

  2331. 			$ctr = 0;
    2332. 

  2332. 			$hasChanged = false;
    2333. 

  2333. 			$isDelivered = false;
    2334. 

  2334. 			for($i=1; $i<=$track_Ret[1584]; $i++) {
    2335. 

  2335. 				// See Customer Service Page for displaying results
    2336. 

  2336. 	?>
    2337. 

  2337. 		<div style="margin: 10px auto; border: 2px solid #2C578A; width: 550px">
    2338. 

  2338. 		<table align="center" width="550" border="0" cellpadding="3" cellspacing="0" style="font-size: 10px; font-family: Verdana, Arial, Helvetica, sans-serif">
    2339. 

  2339. 			<tr>
    2340. 

  2340. 				<th colspan="2" style="font-size: 18px; background-color: #2C578A; color: #FFF; font-weight: bold; text-align: left">Fed<span style="margin-left: -3px; color: #FF6600">Ex</span></th>
    2341. 

  2341. 				<th colspan="3" style="font-size: 14px; text-align: right; background-color: #2C578A; color: #FFF; font-weight: bold">Tracking# <?=$trackNum?></th>
    2342. 

  2342. 			</tr>
    2343. 

  2343. 	<?php
    2344. 

  2344. 			if(!empty($track_Ret['1339-'.$i]))
    2345. 

  2345. 			{
    2346. 

  2346. 				$tmp_date = $track_Ret['1339-'.$i];
    2347. 

  2347. 				$est_del = substr($tmp_date,0,4).'-'.substr($tmp_date,4,2).'-'.substr($tmp_date,6,2);
    2348. 

  2348. 	?>
    2349. 

  2349. 			<tr>
    2350. 

  2350. 				<td colspan="5" style="background-color: #2C578A; height: 15px">&nbsp;</td>
    2351. 

  2351. 			</tr>
    2352. 

  2352. 			<tr>
    2353. 

  2353. 				<td colspan="5" style="background-color: #DFE7FF"><strong>Estimated Delivery Date:</strong> <?=date('M j, Y',strtotime($est_del))?></td>
    2354. 

  2354. 			</tr>
    2355. 

  2355. 	<?php
    2356. 

  2356. 			}
    2357. 

  2357. 	?>
    2358. 

  2358. 			<tr>
    2359. 

  2359. 				<th align="left" width="150" colspan="2" style="background-color: #2C578A; color: #FFF; font-weight: bold">Date/Time</th>
    2360. 

  2360. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Activity</th>
    2361. 

  2361. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Location</th>
    2362. 

  2362. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Details</th>
    2363. 

  2363. 			</tr>
    2364. 

  2364. 	<?php
    2365. 

  2365. 				for($j=1; $j<=$track_Ret['1715-'.$i]; $j++)
    2366. 

  2366. 				{
    2367. 

  2367. 					$date = $track_Ret['1162-'.$i.'-'.$j];
    2368. 

  2368. 					$year = substr($date,0,4);
    2369. 

  2369. 					$mon = substr($date,4,2);
    2370. 

  2370. 					$day = substr($date,6,2);
    2371. 

  2371. 					$hrs = substr($track_Ret['1163-'.$i.'-'.$j],0,2);
    2372. 

  2372. 					$min = substr($track_Ret['1163-'.$i.'-'.$j],2,2);
    2373. 

  2373. 					$sec = substr($track_Ret['1163-'.$i.'-'.$j],4,2);
    2374. 

  2374. 					
    2375. 

  2375. 					$date = $year.'-'.$mon.'-'.$day.' '.$hrs.':'.$min.':'.$sec;
    2376. 

  2376. 					$unixDate = strtotime($date);
    2377. 

  2377. 					
    2378. 

  2378. 					if(empty($track_Ret['1161-'.$i.'-'.$j]))
    2379. 

  2379. 					{
    2380. 

  2380. 						$state = $track_Ret['1164-'.$i.'-'.$j];
    2381. 

  2381. 					}
    2382. 

  2382. 					else
    2383. 

  2383. 					{
    2384. 

  2384. 						$state = $track_Ret['1161-'.$i.'-'.$j];
    2385. 

  2385. 					}
    2386. 

  2386. 										
    2387. 

  2387. 					if(date('Ymd',$unixDate) != date('Ymd',$last_date))
    2388. 

  2388. 					{
    2389. 

  2389. 						$ctr++;
    2390. 

  2390. 						$hasChanged = true;
    2391. 

  2391. 					}
    2392. 

  2392. 					
    2393. 

  2393. 					if($track_Ret['1159-'.$i.'-'.$j] == 'Delivered' && empty($track_Ret['1711-'.$i.'-'.$j]))
    2394. 

  2394. 					{
    2395. 

  2395. 						$isDelivered = true;
    2396. 

  2396. 					}
    2397. 

  2397. 	?>
    2398. 

  2398. 					<tr style="background-color: #<?=($ctr%2==0)?'FFF':'DFE7FF'?>">
    2399. 

  2399. 			<?php
    2400. 

  2400. 						if($hasChanged)
    2401. 

  2401. 						{
    2402. 

  2402. 			?>
    2403. 

  2403. 						<td style="text-align: left" valign="top">
    2404. 

  2404. 							<span style="font-weight: bold"><?=date('M j, Y',$unixDate)?></span>
    2405. 

  2405. 						</td>
    2406. 

  2406. 						<td valign="top" style="text-align: right; border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=date('g:i A',$unixDate)?></td>
    2407. 

  2407. 			<?php
    2408. 

  2408. 							$hasChanged = false;
    2409. 

  2409. 						}
    2410. 

  2410. 						else
    2411. 

  2411. 						{
    2412. 

  2412. 			?>
    2413. 

  2413. 						<td valign="top" colspan="2" style="text-align: right; border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=date('g:i A',$unixDate)?></td>
    2414. 

  2414. 			<?php
    2415. 

  2415. 						}
    2416. 

  2416. 			?>		
    2417. 

  2417. 						</td>
    2418. 

  2418. 						<td valign="top" style="border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=($isDelivered)?'<strong>':''?><?=$track_Ret['1159-'.$i.'-'.$j]?><?=($isDelivered)?'</strong>':''?></td>
    2419. 

  2419. 						<td valign="top" style="border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=$track_Ret['1160-'.$i.'-'.$j]?>, <?=$state?></td>
    2420. 

  2420. 						<td valign="top"><?=$track_Ret['1711-'.$i.'-'.$j]?></td>
    2421. 

  2421. 					</tr>
    2422. 

  2422. 	<?php
    2423. 

  2423. 					if($isDelivered)
    2424. 

  2424. 					{
    2425. 

  2425. 						$isDelivered = false;
    2426. 

  2426. 					}
    2427. 

  2427. 					
    2428. 

  2428. 					$last_date = $unixDate;
    2429. 

  2429. 				}
    2430. 

  2430. 			}
    2431. 

  2431. 	?>
    2432. 

  2432. 		  </table>
    2433. 

  2433. </div>
    2434. 

  2434. 	<?php
    2435. 

  2435. 		}
    2436. 

  2436. 	}
    2437. 

  2437. 	// ADD ENDED
    2438. 

  2438. 	
    2439. 

  2439. 	// ADDED by Chad Apr-03-06
    2440. 

  2440. 	// DHL AND USPS TRACKING
    2441. 

  2441. 	$qry = "SELECT * FROM dhl WHERE custPackID = '".$_GET["id"]."'";
    2442. 

  2442. 	$res = mysql_query($qry) or print(mysql_error().$qry);
    2443. 

  2443. 	if(mysql_num_rows($res) > 0) {
    2444. 

  2444. 		$row = mysql_fetch_assoc($res);
    2445. 

  2445. 		$trackNum = $row['DHLGMTrackNum'];
    2446. 

  2446. 		$uspsTrack = $row['custDelConfIDUSPS'];
    2447. 

  2447. 		if(!empty($trackNum)) {
    2448. 

  2448. 			$ch = curl_init();
    2449. 

  2449. 			curl_setopt($ch,CURLOPT_URL,"http://api.smartmail.com/tnt2.cfm?number=$trackNum&criteria=3&type=wddx&custid=rband&passwd=sm36732");
    2450. 

  2450. 			//curl_setopt($ch, CURLOPT_POST, 1);
    2451. 

  2451. 			curl_setopt($ch,CURLOPT_HEADER,0);
    2452. 

  2452. 			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    2453. 

  2453. 			//curl_setopt($ch, CURLOPT_POSTFIELDS, "number=$trackNum&criteria=3&type=wddx&custid=rband&passwd=sm36732");
    2454. 

  2454. 			$res = curl_exec($ch);
    2455. 

  2455. 			curl_close($ch);
    2456. 

  2456. 			$info = wddx_deserialize($res);
    2457. 

  2457. 			//showarray($info);
    2458. 

  2458. 			if(empty($info['Detail'][0])) { //If no errors
    2459. 

  2459. ?>
    2460. 

  2460. 			<div style="height: 20px"></div>
    2461. 

  2461. 			<table align="center" width="500" cellpadding="3" cellspacing="0" style="border: 1px solid #FFFFFF">
    2462. 

  2462. 				<tr>
    2463. 

  2463. 					<td colspan="2" style="color: #FFFFFF; background-color: #CC0000; text-align: center; font-weight: bold; font-size: 18px">DHL Tracking</td>
    2464. 

  2464. 				</tr>
    2465. 

  2465. <?php
    2466. 

  2466. 				if(!empty($info['TRACK_PKUP_DATE'][0])) {
    2467. 

  2467. ?>
    2468. 

  2468. 				<tr>
    2469. 

  2469. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_PKUP_DATE'][0]?></td>
    2470. 

  2470. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Picked Up by SmartMail</td>
    2471. 

  2471. 				</tr>
    2472. 

  2472. <?php
    2473. 

  2473. 				}
    2474. 

  2474. 				if(!empty($info['TRACK_RECV_DATE'][0])) {
    2475. 

  2475. ?>
    2476. 

  2476. 				<tr>
    2477. 

  2477. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_RECV_DATE'][0]?></td>
    2478. 

  2478. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Arrived at Smart Center</td>
    2479. 

  2479. 				</tr>
    2480. 

  2480. <?php
    2481. 

  2481. 				}
    2482. 

  2482. 				if(!empty($info['TRACK_ENCD_DATE'][0])) {
    2483. 

  2483. ?>
    2484. 

  2484. 				<tr>
    2485. 

  2485. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_ENCD_DATE'][0]?></td>
    2486. 

  2486. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Processed and Verified</td>
    2487. 

  2487. 				</tr>
    2488. 

  2488. <?php
    2489. 

  2489. 				}
    2490. 

  2490. 				if(!empty($info['TRACK_DNSD_DATE'][0])) {
    2491. 

  2491. ?>
    2492. 

  2492. 				<tr>
    2493. 

  2493. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_DNSD_DATE'][0]?></td>
    2494. 

  2494. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Sent via <?=(!empty($info['TRACK_DNDC'][0]))?$info['TRACK_DNDC'][0]:"SmartMail"?></td>
    2495. 

  2495. 				</tr>
    2496. 

  2496. <?php
    2497. 

  2497. 				}
    2498. 

  2498. 				if(!empty($info['TRACK_DNRC_DATE'][0])) {
    2499. 

  2499. ?>
    2500. 

  2500. 				<tr>
    2501. 

  2501. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_DNRC_DATE'][0]?></td>
    2502. 

  2502. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Received</td>
    2503. 

  2503. 				</tr>
    2504. 

  2504. <?php
    2505. 

  2505. 				}
    2506. 

  2506. 				if(!empty($info['TRACK_MFST_DATE'][0])) {
    2507. 

  2507. ?>
    2508. 

  2508. 				<tr>
    2509. 

  2509. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_MFST_DATE'][0]?></td>
    2510. 

  2510. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Mail Delivered to Post Office</td>
    2511. 

  2511. 				</tr>
    2512. 

  2512. <?php
    2513. 

  2513. 				}
    2514. 

  2514. ?>
    2515. 

  2515. 			</table>
    2516. 

  2516. <?php
    2517. 

  2517. 			
    2518. 

  2518. 				}
    2519. 

  2519. 			}
    2520. 

  2520. 		}
    2521. 

  2521. 				// CHECK USPS TRACKING INFO
    2522. 

  2522. 				//echo 'Track='.$uspsTrack;
    2523. 

  2523. 				if(!empty($uspsTrack)) {
    2524. 

  2524. 					$ch = curl_init();
    2525. 

  2525. 					curl_setopt($ch,CURLOPT_URL,"http://Production.ShippingAPIs.com/ShippingAPI.dll");
    2526. 

  2526. 					curl_setopt($ch, CURLOPT_POST, 1);
    2527. 

  2527. 					curl_setopt($ch,CURLOPT_HEADER,0);
    2528. 

  2528. 					curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    2529. 

  2529. 					curl_setopt($ch, CURLOPT_POSTFIELDS, 'API=TrackV2&XML=<TrackFieldRequest USERID="268REMIN3619"><TrackID ID="'.$uspsTrack.'"></TrackID></TrackFieldRequest>');
    2530. 

  2530. 					$res = curl_exec($ch);
    2531. 

  2531. 					curl_close($ch);
    2532. 

  2532. 					
    2533. 

  2533. 					include(APPPATH.'views/pages/admin/xml2array.php');
    2534. 

  2534. 					
    2535. 

  2535. 					$xmlData = new xml2array();
    2536. 

  2536. 					
    2537. 

  2537. 					$uspsData = $xmlData->parseXMLintoarray($res);
    2538. 

  2538. 					
    2539. 

  2539. 					//showarray($uspsData);
    2540. 

  2540. ?>
    2541. 

  2541. 			<div style="margin: 5px auto; width: 500px">
    2542. 

  2542. 			
    2543. 

  2543. 				<div style="margin: 0; height: 5px; background-color: #CC0000"></div>
    2544. 

  2544. 				<div style="margin: 0; padding: 2px; background-color: #0066CB; color: #FFFFFF; font-weight: bold; font-size: 18px; text-align: center">USPS Tracking<br /><span style="font-size: 11px">Tracking # <?=$uspsTrack?></span></div>
    2545. 

  2545. 				<div style="margin: 0; height: 7px; background-color: #98CCFF"></div>
    2546. 

  2546. 				<div style="margin: 2px 0 0 0; background-color: #E3F1FC; border: 1px solid #89B9E7">
    2547. 

  2547. <?php				
    2548. 

  2548. 					if (is_array($uspsData['TrackResponse']['TrackInfo']['Error'])) {
    2549. 

  2549. 					    // echo '<div style="margin: 0; text-align: center; font-weight: bold">Error Getting USPS Tracking Information</div>';
    2550. 

  2550. 						echo '<div style="margin: 0; text-align: center; font-weight: bold">';
    2551. 

  2551. 						echo 'USPS Tracking Information is currently not available,<br />';
    2552. 

  2552. 						echo 'please check-back in 24-48 hours.';
    2553. 

  2553. 						echo '</div>';
    2554. 

  2554. 					}
    2555. 

  2555. 					else {
    2556. 

  2556. 						if(is_array($uspsData['TrackResponse']['TrackInfo']['TrackSummary'])) {
    2557. 

  2557. 							$eventTime = $uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventDate'].' '.$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventTime'];
    2558. 

  2558. ?>
    2559. 

  2559. 					<div style="margin: 0; padding: 3px; background-color: #89B9E7; color: #FFFFFF; font-weight: bold">Event Summary</div>
    2560. 

  2560. 					<div style="margin: 0">
    2561. 

  2561. 					<table width="500" border="0" cellpadding="3" cellspacing="0" style="margin: 2px;">
    2562. 

  2562. 						<tr>
    2563. 

  2563. 							<td valign="top" style="font-weight: bold"><?=$eventTime?></td>
    2564. 

  2564. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventCity']?>, <?=$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventState']?></td>
    2565. 

  2565. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['Event']?></td>
    2566. 

  2566. 						</tr>
    2567. 

  2567. 					</table>
    2568. 

  2568. 					</div>
    2569. 

  2569. <?php
    2570. 

  2570. 						}
    2571. 

  2571. 						if(is_array($uspsData['TrackResponse']['TrackInfo']['TrackDetail'])) {
    2572. 

  2572. ?>
    2573. 

  2573. 					<div style="margin: 0; padding: 3px; background-color: #89B9E7; color: #FFFFFF; font-weight: bold">Tracking Details</div>
    2574. 

  2574. 					<table width="500" border="0" align="center" cellpadding="3" cellspacing="0" style="margin: 2px;">
    2575. 

  2575. <?php
    2576. 

  2576. 							if(is_array($uspsData['TrackResponse']['TrackInfo']['TrackDetail'][0])){
    2577. 

  2577. 								for($i=0; $i<count($uspsData['TrackResponse']['TrackInfo']['TrackDetail']); $i++) {
    2578. 

  2578. 									$eventTime = $uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventDate'].' '.$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventTime'];
    2579. 

  2579. ?>
    2580. 

  2580. 						<tr>
    2581. 

  2581. 							<td valign="top" style="font-weight: bold"><?=$eventTime?></td>
    2582. 

  2582. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventCity']?>, <?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventState']?></td>
    2583. 

  2583. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['Event']?></td>
    2584. 

  2584. 						</tr>
    2585. 

  2585. <?php
    2586. 

  2586. 								} // End of TrackDetail Loop
    2587. 

  2587. 							}else{
    2588. 

  2588. 								$eventTime = $uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventDate'].' '.$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventTime'];
    2589. 

  2589. ?>
    2590. 

  2590. 						<tr>
    2591. 

  2591. 							<td valign="top" style="font-weight: bold"><?=$eventTime?></td>
    2592. 

  2592. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventCity']?>, <?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventState']?></td>
    2593. 

  2593. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['Event']?></td>
    2594. 

  2594. 						</tr>
    2595. 

  2595. <?php
    2596. 

  2596. 							}
    2597. 

  2597. ?>
    2598. 

  2598. 					</table>
    2599. 

  2599. <?php
    2600. 

  2600. 						} // End of displaying all Tracking Details
    2601. 

  2601. 					} // End of displaying all USPS tracking information
    2602. 

  2602. ?>
    2603. 

  2603. 				</div>
    2604. 

  2604. 			
    2605. 

  2605. 			</div>
    2606. 

  2606. <?php
    2607. 

  2607. 		
    2608. 

  2608. 	}
    2609. 

  2609. 	
    2610. 

  2610. 	// ADD ENDED
    2611. 

  2611. 	
    2612. 

  2612. }else{
    2613. 

  2613. 	$sSQL = "SELECT ordID FROM orders WHERE ordStatus=1";
    2614. 

  2614. 	if(@$_POST["act"] != "purge") $sSQL .= " AND ordStatusDate<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    2615. 

  2615. 	else $sSQL .= " OR ordStatus=0 AND ordStatusDate<'" . date("Y-m-d H:i:s", time()-(14*60*60*24)) . "'";
    2616. 

  2616. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    2617. 

  2617. 	while($rs = mysql_fetch_assoc($result)){
    2618. 

  2618. 		$theid = $rs["ordID"];
    2619. 

  2619. 		$delOptions = "";
    2620. 

  2620. 		$addcomma = "";
    2621. 

  2621. 		$result2 = mysql_query("SELECT cartID FROM cart WHERE cartOrderID=" . $theid) or print(mysql_error());
    2622. 

  2622. 		while($rs2 = mysql_fetch_assoc($result2)){
    2623. 

  2623. 			$delOptions .= $addcomma . $rs2["cartID"];
    2624. 

  2624. 			$addcomma = ",";
    2625. 

  2625. 		}
    2626. 

  2626. 		if($delOptions != ""){
    2627. 

  2627. 			$sSQL = "DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")";
    2628. 

  2628. 			mysql_query($sSQL) or print(mysql_error().$sSQL);
    2629. 

  2629. 		}
    2630. 

  2630. 		mysql_query("DELETE FROM cart WHERE cartOrderID=" . $theid) or print(mysql_error());
    2631. 

  2631. 		mysql_query("DELETE FROM orders WHERE ordID=" . $theid) or print(mysql_error());
    2632. 

  2632. 	}
    2633. 

  2633. 	if(@$_POST["act"]=="authorize"){
    2634. 

  2634. 		do_stock_management(trim($_POST["id"]));
    2635. 

  2635. 		if(trim($_POST["authcode"]) != "")
    2636. 

  2636. 			$sSQL = "UPDATE orders set ordAuthNumber='" . mysql_real_escape_string(trim($_POST["authcode"])) . "',ordStatus=3 WHERE ordID=" . $_POST["id"];
    2637. 

  2637. 		else
    2638. 

  2638. 			$sSQL = "UPDATE orders set ordAuthNumber='" . mysql_real_escape_string($yyManAut) . "',ordStatus=3 WHERE ordID=" . $_POST["id"];
    2639. 

  2639. 		if(mysql_query($sSQL)) {
    2640. 

  2640. 			if(!setNewLocation( 3 , $_POST["id"],'Manual' )) print("Unable to record status change.");
    2641. 

  2641. 		}else{
    2642. 

  2642. 			print(mysql_error().$sSQL);
    2643. 

  2643. 		}
    2644. 

  2644. 		mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["id"]) or print(mysql_error());
    2645. 

  2645. 	}elseif(@$_POST["act"]=="status"){
    2646. 

  2646. 		//echo 'This is the problem';
    2647. 

  2647. 		$maxitems=(int)($_POST["maxitems"]);
    2648. 

  2648. 		//for($index=0; $index < $maxitems; $index++){
    2649. 

  2649. 		if (is_array($_POST['selected'])) {	
    2650. 

  2650. 			foreach($_POST['selected'] as $key => $value) {
    2651. 

  2651. 				$index = $value;
    2652. 

  2652. 				$iordid = trim($_POST["ordid" . $index]);
    2653. 

  2653. 				$ordstatus = trim($_POST["ordstatus" . $index]);
    2654. 

  2654. 				$ordauthno = "";
    2655. 

  2655. 				$oldordstatus=999;
    2656. 

  2656. 				$result = mysql_query("SELECT ordStatus,ordAuthNumber,ordEmail,ordDate,".getlangid("statPublic",64).",ordStatusInfo,ordName FROM orders INNER JOIN orderstatus ON orders.ordStatus=orderstatus.statID WHERE ordID=" . $iordid) or print(mysql_error());
    2657. 

  2657. 				if($rs = mysql_fetch_assoc($result)){
    2658. 

  2658. 					$oldordstatus=$rs["ordStatus"];
    2659. 

  2659. 					$ordauthno=$rs["ordAuthNumber"];
    2660. 

  2660. 					$ordemail=$rs["ordEmail"];
    2661. 

  2661. 					$orddate=strtotime($rs["ordDate"]);
    2662. 

  2662. 					$oldstattext=$rs[getlangid("statPublic",64)];
    2663. 

  2663. 					$ordstatinfo=$rs["ordStatusInfo"];
    2664. 

  2664. 					$ordername=$rs["ordName"];
    2665. 

  2665. 				}
    2666. 

  2666. 				if(! ($oldordstatus==999) && ($oldordstatus < 3 && $ordstatus >=3 && $ordstatus !=10 && $ordstatus !=17) || ($oldordstatus==10 && $ordstatus >=3 && $ordstatus !=17) || ($oldordstatus==17 && $ordstatus >=3 && $ordstatus !=10)){
    2667. 

  2667. 					// This is to force stock management
    2668. 

  2668. 					mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $iordid) or print(mysql_error());
    2669. 

  2669. 					do_stock_management($iordid);
    2670. 

  2670. 					//echo 'do_stock_management';
    2671. 

  2671. 					mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $iordid) or print(mysql_error());
    2672. 

  2672. 					if($ordauthno=="") mysql_query("UPDATE orders SET ordAuthNumber='". mysql_real_escape_string($yyManAut) . "' WHERE ordID=" . $iordid) or print(mysql_error());
    2673. 

  2673. 				}
    2674. 

  2674. 				if(! ($oldordstatus==999) && ($oldordstatus!=10 && $oldordstatus!=17 && $oldordstatus >=3 && $ordstatus < 3) || ($oldordstatus >=3 && $oldordstatus!=10 && $oldordstatus!=17 && $ordstatus==10) || ($oldordstatus >=3 && $oldordstatus!=10 && $oldordstatus!=17 && $ordstatus==17)) release_stock($iordid);//echo 'status change release_stock';
    2675. 

  2675. 				if($iordid != "" && $ordstatus != ""){
    2676. 

  2676. 					if($oldordstatus != (int)$ordstatus && @$_POST["emailstat"]=="1"){
    2677. 

  2677. 						$result = mysql_query("SELECT ".getlangid("statPublic",64)." FROM orderstatus WHERE statID=" . $ordstatus);
    2678. 

  2678. 						if($rs = mysql_fetch_assoc($result))
    2679. 

  2679. 							$newstattext = $rs[getlangid("statPublic",64)];
    2680. 

  2680. 						$emailsubject = "Order status updated";
    2681. 

  2681. 						if(@$orderstatussubject != "") $emailsubject=$orderstatussubject;
    2682. 

  2682. 						$ose = $orderstatusemail;
    2683. 

  2683. 						$ose = str_replace("%orderid%", $iordid, $ose);
    2684. 

  2684. 						$ose = str_replace("%orderdate%", date($dateformatstr, $orddate), $ose);// . " " . date("H:i", $orddate), $ose);
    2685. 

  2685. 						$ose = str_replace("%oldstatus%", $oldstattext, $ose);
    2686. 

  2686. 						$ose = str_replace("%newstatus%", $newstattext, $ose);
    2687. 

  2687. 						$thetime = time() + ($dateadjust*60*60);
    2688. 

  2688. 						$ose = str_replace("%date%", date($dateformatstr, $thetime), $ose);// . " " . date("H:i", $thetime), $ose);
    2689. 

  2689. 						$ose = str_replace("%statusinfo%", $ordstatinfo, $ose);
    2690. 

  2690. 						$ose = str_replace("%ordername%", $ordername, $ose);
    2691. 

  2691. 						$ose = str_replace("%nl%", $emlNl, $ose);
    2692. 

  2692. 						if(@$customheaders == ""){
    2693. 

  2693. 							$customheaders = "MIME-Version: 1.0\n";
    2694. 

  2694. 							$customheaders .= "From: %from% <%from%>\n";
    2695. 

  2695. 							if(@$htmlemails==TRUE)
    2696. 

  2696. 								$customheaders .= "Content-type: text/html; charset=".$emailencoding."\n";
    2697. 

  2697. 							else
    2698. 

  2698. 								$customheaders .= "Content-type: text/plain; charset=".$emailencoding."\n";
    2699. 

  2699. 						}
    2700. 

  2700. 						$headers = str_replace('%from%',$emailAddr,$customheaders);
    2701. 

  2701. 						$headers = str_replace('%to%',$ordemail,$headers);
    2702. 

  2702. 						if((int)$ordstatus==9) {
    2703. 

  2703. 							$ose = $orderstatusshippedemail;
    2704. 

  2704. 							$ose = str_replace("%orderid%", $iordid, $ose);
    2705. 

  2705. 							$ose = str_replace("%orderdate%", date($dateformatstr, $orddate) . " " . date("H:i", $orddate), $ose);
    2706. 

  2706. 							$emailsubject = $orderstatusshippedsubject;
    2707. 

  2707. 						}
    2708. 

  2708. 						mail($ordemail, $emailsubject, $ose, $headers);
    2709. 

  2709. 					}
    2710. 

  2710. 					if($oldordstatus != (int)$ordstatus) {
    2711. 

  2711. 						$sql = "UPDATE orders SET ordStatus=" . $ordstatus . ",ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $iordid;
    2712. 

  2712. 						$res = mysql_query($sql);
    2713. 

  2713. 						//echo $sql."<br />";
    2714. 

  2714. 						if($res) {
    2715. 

  2715. 							if(!setNewLocation( $ordstatus , $iordid ,'Manual' )) print("Unable to record status change.");
    2716. 

  2716. 						}else{
    2717. 

  2717. 							print(mysql_error());
    2718. 

  2718. 						}
    2719. 

  2719. 					}
    2720. 

  2720. 				}
    2721. 

  2721. 			} // End of loop
    2722. 

  2722. 		}
    2723. 

  2723. 	}
    2724. 

  2724. 	if(@$_POST["sd"] != "")
    2725. 

  2725. 		$sd = @$_POST["sd"];
    2726. 

  2726. 	elseif(@$_GET["sd"] != "")
    2727. 

  2727. 		$sd = @$_GET["sd"];
    2728. 

  2728. 	else
    2729. 

  2729. 		$sd = date($admindatestr, time() + ($dateadjust*60*60));
    2730. 

  2730. 	if(@$_POST["ed"] != "")
    2731. 

  2731. 		$ed = @$_POST["ed"];
    2732. 

  2732. 	elseif(@$_GET["ed"] != "")
    2733. 

  2733. 		$ed = @$_GET["ed"];
    2734. 

  2734. 	else
    2735. 

  2735. 		$ed = date($admindatestr, time() + ($dateadjust*60*60));
    2736. 

  2736. 	$sd = parsedate($sd);
    2737. 

  2737. 	$ed = parsedate($ed);
    2738. 

  2738. 	if($sd > $ed) $ed = $sd;
    2739. 

  2739. 	$fromdate = trim(@$_POST["fromdate"]);
    2740. 

  2740. 	$todate = trim(@$_POST["todate"]);
    2741. 

  2741. 	$ordid = trim(str_replace('"',"",str_replace("'","",@$_REQUEST["ordid"])));
    2742. 

  2742. 	$origsearchtext = trim(unstripslashes(@$_POST["searchtext"]));
    2743. 

  2743. 	$searchtext = trim(mysql_real_escape_string(unstripslashes(@$_POST["searchtext"])));
    2744. 

  2744. 	$ordstatus = "";
    2745. 

  2745. 	
    2746. 

  2746. 	
    2747. 

  2747. 	if(@$_POST["powersearch"]=="1" || $_GET["powersearch"]=="1"){
    2748. 

  2748. 		$sSQL = "SELECT DISTINCT ordID,ordName,ordPayProvider,payProvName,ordAuthNumber,ordDate,ordStatus,ordShipType,ordTotal-ordDiscount AS ordTot,ordStateTax,ordShipping,ordTransID,order_changed,ordDiscountText,ordEID,ordAffiliate,ordPrinted_logan";
    2749. 

  2749. 		/*if($_POST['optName'] != 'none' || $_POST['prodName'] != 'none') {
    2750. 

  2750. 			$sSQL .= ",co.coCartOption";
    2751. 

  2751. 			$sSQL .= " FROM orders o, cart c, cartoptions co, payprovider p WHERE p.payProvID=o.ordPayProvider AND c.cartOrderID=o.ordID AND c.cartID=co.coCartID AND ordStatus>=0 ";
    2752. 

  2752. 		}else{*/
    2753. 

  2753. 		$sSQL .= " FROM orders INNER JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordStatus>=0 ";
    2754. 

  2754. 		//}
    2755. 

  2755. 		$addcomma = "";
    2756. 

  2756. 		if(is_array(@$_POST["ordstatus"])){
    2757. 

  2757. 			foreach($_POST["ordstatus"] as $objValue){
    2758. 

  2758. 				if(is_array($objValue))$objValue=$objValue[0];
    2759. 

  2759. 				$ordstatus .= $addcomma . $objValue;
    2760. 

  2760. 				$addcomma = ",";
    2761. 

  2761. 			}
    2762. 

  2762. 		}else{
    2763. 

  2763. 			$ordstatus = trim((string)@$_REQUEST["ordstatus"]);
    2764. 

  2764. 		}
    2765. 

  2765. 		//discounts
    2766. 

  2766. 		$ordcoupon = trim((string)$_POST["ordcoupon"]);
    2767. 

  2767. 		if($ordid != ""){
    2768. 

  2768. 			if(is_numeric($ordid)){
    2769. 

  2769. 				$sSQL .= " AND ordID=" . $ordid;			
    2770. 

  2770. 			}elseif(is_array(explode(',',$ordid))){
    2771. 

  2771. 				$sSQL .= " AND ordID IN ('" . str_replace(',',"','",$ordid) ."')";
    2772. 

  2772. 			}else{
    2773. 

  2773. 				$success=FALSE;
    2774. 

  2774. 				$errmsg="The order id you specified seems to be invalid - " . $ordid;
    2775. 

  2775. 				$sSQL .= " AND ordID=0";
    2776. 

  2776. 			}
    2777. 

  2777. 		}else{
    2778. 

  2778. 			if($fromdate != ""){
    2779. 

  2779. 				if(is_numeric($fromdate))
    2780. 

  2780. 					$thefromdate = time()-($fromdate*60*60*24);
    2781. 

  2781. 				else
    2782. 

  2782. 					$thefromdate = parsedate($fromdate);
    2783. 

  2783. 				if($todate=="")
    2784. 

  2784. 					$thetodate = $thefromdate;
    2785. 

  2785. 				elseif(is_numeric($todate))
    2786. 

  2786. 					$thetodate = time()-($todate*60*60*24);
    2787. 

  2787. 				else
    2788. 

  2788. 					$thetodate = parsedate($todate);
    2789. 

  2789. 				if($thefromdate > $thetodate){
    2790. 

  2790. 					$tmpdate = $thetodate;
    2791. 

  2791. 					$thetodate = $thefromdate;
    2792. 

  2792. 					$thefromdate = $tmpdate;
    2793. 

  2793. 				}
    2794. 

  2794. 				$sd = $thefromdate;
    2795. 

  2795. 				$ed = $thetodate;
    2796. 

  2796. 				$sSQL .= " AND ordDate BETWEEN '" . date("Y-m-d", $sd) . "' AND '" . date("Y-m-d", $ed) . " 23:59:59'";
    2797. 

  2797. 			}
    2798. 

  2798. 			
    2799. 

  2799. 			
    2800. 

  2800. 			
    2801. 

  2801. 			//discount
    2802. 

  2802. 			if ($ordcoupon != "") {
    2803. 

  2803. 				$sSQL .= " AND (ordCoupon LIKE '" . $ordcoupon . ",%' OR ordCoupon LIKE '%," . $ordcoupon . ",%' OR ordCoupon LIKE '%," . $ordcoupon . "' OR ordCoupon = '" . $ordcoupon . "')";
    2804. 

  2804. 			}
    2805. 

  2805. 			if($_SESSION["return_status_search"]!="") $sSQL .= " AND ordReturnID=".$_SESSION["return_status_search"]; 
    2806. 

  2806. 			if($ordstatus != "" && strpos($ordstatus,"9999")===FALSE) $sSQL .= " AND ordStatus IN (" . $ordstatus . ")";
    2807. 

  2807. 			if($searchtext != "") $sSQL .= " AND (payProvShow LIKE '%" . $searchtext . "%' OR ordTransID LIKE '%" . $searchtext . "%' OR ordAuthNumber LIKE '%" . $searchtext . "%' OR ordName LIKE '%" . $searchtext . "%' OR ordEmail LIKE '%" . $searchtext . "%' OR ordAddress LIKE '%" . $searchtext . "%' OR ordCity LIKE '%" . $searchtext . "%' OR ordState LIKE '%" . $searchtext . "%' OR ordZip LIKE '%" . $searchtext . "%' OR ordPhone LIKE '%" . $searchtext . "%' OR ordShipType LIKE '%" . $searchtext . "%' OR ordShipName LIKE '%" . $searchtext . "%')";
    2808. 

  2808. 			if($_POST['ordPOAPOs'] == 'shipping_APOs') {
    2809. 

  2809. 				$sSQL .= " AND IF(ordShipAddress != '',ordShipState IN('AA','AE','AP') AND ordShipPoApo = 1,ordState IN('AA','AE','AP') AND ordPoApo = 1)";
    2810. 

  2810. 			}elseif($_POST['ordPOAPOs'] == 'shipping_POs') {
    2811. 

  2811. 				$sSQL .= " AND IF(ordShipAddress != '',ordShipState NOT IN('AA','AE','AP') AND ordShipPoApo = 1,ordState NOT IN('AA','AE','AP') AND ordPoApo = 1)";
    2812. 

  2812. 			}elseif($_POST['ordPOAPOs'] == 'shipping_PO_APO') {
    2813. 

  2813. 				$sSQL .= " AND IF(ordShipAddress != '',ordShipPoApo = 1,ordPoApo = 1)";
    2814. 

  2814. 			}elseif($_POST['ordPOAPOs'] == 'APOs') {
    2815. 

  2815. 				$sSQL .= " AND ((ordPoApo = 1 AND ordState IN('AA','AE','AP')) OR (ordPoApo = 1 AND ordState IN('AA','AE','AP')))";
    2816. 

  2816. 			}elseif($_POST['ordPOAPOs'] == 'PO_APO') {
    2817. 

  2817. 				$sSQL .= " AND (ordPoApo = 1 OR ordShipPoApo = 1)";
    2818. 

  2818. 			}elseif($_POST['ordPOAPOs'] == 'POs') {
    2819. 

  2819. 				$sSQL .= " AND ((ordPoApo = 1 AND ordState NOT IN('AA','AE','AP')) OR (ordPoApo = 1 AND ordState NOT IN('AA','AE','AP')))";
    2820. 

  2820. 			}
    2821. 

  2821. 			if($_POST['custID'] !="") $sSQL .= " AND ordEID=".$_POST['custID'];
    2822. 

  2822. 			/*if($_POST['optName'] != 'none') {
    2823. 

  2823. 				$sSQL .= " AND co.coCartOption = '".$_POST['optName']."'";
    2824. 

  2824. 			}
    2825. 

  2825. 			if($_POST['prodName'] != 'none') {
    2826. 

  2826. 				$sSQL .= " AND c.CartProdID = '".$_POST['prodName']."'";
    2827. 

  2827. 			}*/
    2828. 

  2828. 			if ($_POST['custID'] !="") {
    2829. 

  2829. 			    $sSQL .= " AND ordEID=".$_POST['custID'];
    2830. 

  2830. 			}
    2831. 

  2831. 			else {
    2832. 

  2832. 			    $sSQL .= " AND ordEID!=34";
    2833. 

  2833. 			}
    2834. 

  2834. 		}
    2835. 

  2835. 		if (!empty($_POST['myfrogz'])) {
    2836. 

  2836. 			$sSQL .= " AND ordAuthNumber LIKE 'AT&T-%'";
    2837. 

  2837. 		}
    2838. 

  2838. 		else {
    2839. 

  2839. 			$sSQL .= " AND ordAuthNumber NOT LIKE 'AT&T-%'";
    2840. 

  2840. 		}
    2841. 

  2841. 		$sSQL .= " ORDER BY ordID";
    2842. 

  2842. 	}
    2843. 

  2843. 	else {
    2844. 

  2844. 		$sSQL = "SELECT ordID,ordName,ordPayProvider,payProvName,ordAuthNumber,ordDate,ordStatus,ordShipType,ordTotal-ordDiscount AS ordTot,ordStateTax,ordShipping,ordTransID,order_changed,ordEID,ordAffiliate,ordPrinted_logan FROM orders LEFT JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider 
    2845. 

  2845. 				 WHERE ordStatus <> 1 
    2846. 

  2846. 				 AND ordEID !=34
    2847. 

  2847. 				 AND ordAuthNumber NOT LIKE 'AT&T-%'
    2848. 

  2848. 				 AND ordDate BETWEEN '" . date("Y-m-d", $sd) . "' AND '" . date("Y-m-d", $ed) . " 23:59:59' 
    2849. 

  2849. 				 ORDER BY ordID";
    2850. 

  2850. 	}
    2851. 

  2851. 	$alldata = mysql_query($sSQL) or print(mysql_error().'<br />'.$sSQL);
    2852. 

  2852. 	//echo "<!-- Chad \n".$sSQL." -->";
    2853. 

  2853. 	$hasdeleted=false;
    2854. 

  2854. 	$sSQL = "SELECT COUNT(*) AS NumDeleted FROM orders WHERE ordStatus=1";
    2855. 

  2855. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    2856. 

  2856. 	$rs = mysql_fetch_assoc($result);
    2857. 

  2857. 	if($rs["NumDeleted"] > 0) $hasdeleted=true;
    2858. 

  2858. 	mysql_free_result($result);
    2859. 

  2859. ?>
    2860. 

  2860. <script language="JavaScript" type="text/javascript" src="/lib/js/util/popcalendar.js"></script>
    2861. 

  2861. <script language="JavaScript" type="text/javascript" src="http://assets.ifrogz.com/lib/packages/scriptaculous-js/1.5.1/prototype.js"></script>
    2862. 

  2862. <script language="JavaScript" type="text/javascript" src="http://assets.ifrogz.com/lib/packages/jquery/1.3.2/jquery.min.js"></script>
    2863. 

  2863. <script language="JavaScript" type="text/javascript">
    2864. 

  2864. <!--
    2865. 

  2865. 	jQuery.noConflict();
    2866. 

  2866. 	
    2867. 

  2867. 	jQuery(document).ready(function() {
    2868. 

  2868. 		jQuery('#select_all').click(function() {
    2869. 

  2869. 			var g = 0;
    2870. 

  2870. 			var j=0;
    2871. 

  2871. 			if (jQuery(this).is(':checked')) {
    2872. 

  2872. 				jQuery.each(jQuery('.ord_checkbox'), function(i, val){
    2873. 

  2873. 					jQuery(val).attr('checked', true);
    2874. 

  2874. 				});
    2875. 

  2875. 			} else {
    2876. 

  2876. 				jQuery.each(jQuery('.ord_checkbox'), function(i, val){
    2877. 

  2877. 					jQuery(val).attr('checked', false);
    2878. 

  2878. 				});
    2879. 

  2879. 			}
    2880. 

  2880. 		});
    2881. 

  2881. 		
    2882. 

  2882. 		jQuery(".sel_location").change(function() {
    2883. 

  2883. 			var row = jQuery(this).attr('rowcounter');
    2884. 

  2884. 			var original = jQuery('input[type=hidden][name^=orig_location][rowcounter=' + row + ']').val();
    2885. 

  2885. 			var val = jQuery('.sel_location[rowcounter=' + row + ']').val();
    2886. 

  2886. 			if (original != val) {
    2887. 

  2887. 				jQuery('.ord_checkbox[rowcounter=' + row + ']').attr('checked', true);
    2888. 

  2888. 				jQuery('.undo_location[rowcounter=' + row + ']').fadeIn('fast');
    2889. 

  2889. 				jQuery('.undo_location[rowcounter=' + row + ']').bind('click', function(event) {
    2890. 

  2890. 					jQuery('.undo_location[rowcounter=' + row + ']').fadeOut('fast');
    2891. 

  2891. 					jQuery('.sel_location[rowcounter=' + row + ']').val(original);
    2892. 

  2892. 					jQuery('.ord_checkbox[rowcounter=' + row + ']').attr('checked', false);
    2893. 

  2893. 					jQuery('.undo_location[rowcounter=' + row + ']').unbind('click');
    2894. 

  2894. 				});
    2895. 

  2895. 			} else {
    2896. 

  2896. 				jQuery('.ord_checkbox[rowcounter=' + row + ']').attr('checked', false);				
    2897. 

  2897. 			}
    2898. 

  2898. 		});
    2899. 

  2899. 	});
    2900. 

  2900. 	
    2901. 

  2901. 

  2902. function delrec(id) {
    2903. 

  2903. cmsg = "<?php print $yyConDel?>\n"
    2904. 

  2904. if (confirm(cmsg)) {
    2905. 

  2905. 	document.mainform.id.value = id;
    2906. 

  2906. 	document.mainform.act.value = "delete";
    2907. 

  2907. 	document.mainform.sd.value="<?php print date($admindatestr, $sd)?>";
    2908. 

  2908. 	document.mainform.ed.value="<?php print date($admindatestr, $ed)?>";
    2909. 

  2909. 	document.mainform.submit();
    2910. 

  2910. }
    2911. 

  2911. }
    2912. 

  2912. function authrec(id) {
    2913. 

  2913. var aucode;
    2914. 

  2914. cmsg = "<?php print $yyEntAuth?>"
    2915. 

  2915. if ((aucode=prompt(cmsg,'<?php print $yyManAut?>'))!=null) {
    2916. 

  2916. 	document.mainform.id.value = id;
    2917. 

  2917. 	document.mainform.act.value = "authorize";
    2918. 

  2918. 	document.mainform.authcode.value = aucode;
    2919. 

  2919. 	document.mainform.sd.value="<?php print date($admindatestr, $sd)?>";
    2920. 

  2920. 	document.mainform.ed.value="<?php print date($admindatestr, $ed)?>";
    2921. 

  2921. 	document.mainform.submit();
    2922. 

  2922. }
    2923. 

  2923. }
    2924. 

  2924. function checkcontrol(tt,evt){
    2925. 

  2925. <?php if(strstr(@$HTTP_SERVER_VARS["HTTP_USER_AGENT"], "Gecko")){ ?>
    2926. 

  2926. theevnt = evt;
    2927. 

  2927. return;
    2928. 

  2928. <?php }else{ ?>
    2929. 

  2929. theevnt=window.event;
    2930. 

  2930. <?php } ?>
    2931. 

  2931. if(theevnt.ctrlKey){
    2932. 

  2932. 	maxitems=document.mainform.maxitems.value;
    2933. 

  2933. 	for(index=0;index<maxitems;index++){
    2934. 

  2934. 		if(eval('document.mainform.ordstatus'+index+'.length') > tt.selectedIndex){
    2935. 

  2935. 			eval('document.mainform.ordstatus'+index+'.selectedIndex='+tt.selectedIndex);
    2936. 

  2936. 			eval('document.mainform.ordstatus'+index+'.options['+tt.selectedIndex+'].selected=true');
    2937. 

  2937. 		}
    2938. 

  2938. 	}
    2939. 

  2939. }
    2940. 

  2940. }
    2941. 

  2941. function displaysearch(){
    2942. 

  2942. thestyle = document.getElementById('searchspan').style;
    2943. 

  2943. if(thestyle.display=='none')
    2944. 

  2944. 	thestyle.display = 'block';
    2945. 

  2945. else
    2946. 

  2946. 	thestyle.display = 'none';
    2947. 

  2947. }
    2948. 

  2948. function checkprinter(tt,evt,cnt){
    2949. 

  2949. 

  2950. <?php if(strstr(@$HTTP_SERVER_VARS["HTTP_USER_AGENT"], "Gecko")){ ?>
    2951. 

  2951. if(evt.ctrlKey || evt.altKey || document.mainform.ctrlmod[document.mainform.ctrlmod.selectedIndex].value=="1"){
    2952. 

  2952. 	tt.href += "&printer=true";
    2953. 

  2953. 	window.location.href = tt.href;
    2954. 

  2954. }
    2955. 

  2955. if(document.mainform.ctrlmod[document.mainform.ctrlmod.selectedIndex].value=="2"){
    2956. 

  2956. 	//if($('ordstatus'+cnt).value>5 && $('ordstatus'+cnt).value<10 && $('ordstatus'+cnt).value!=17 && $('ordstatus'+cnt).value!=10) {
    2957. 

  2957. 		//alert("Orders the have been set to packing cannot be changed.");
    2958. 

  2958. 		//return(false);
    2959. 

  2959. 	//} else 
    2960. 

  2960. 	tt.href += "&doedit=true"; 
    2961. 

  2961. 	window.location.href = tt.href;
    2962. 

  2962. }
    2963. 

  2963. <?php }else{ ?>
    2964. 

  2964. theevnt=window.event;
    2965. 

  2965. if(theevnt.ctrlKey || document.mainform.ctrlmod[document.mainform.ctrlmod.selectedIndex].value=="1")tt.href += "&printer=true";
    2966. 

  2966. //if($('ordstatus'+cnt).value>5 && $('ordstatus'+cnt).value!=1 && $('ordstatus'+cnt).value!=17) {
    2967. 

  2967. 	//alert("Orders the have been set to packing cannot be changed.");
    2968. 

  2968. 	//return(false);
    2969. 

  2969. //} else {
    2970. 

  2970. 	if(document.mainform.ctrlmod[document.mainform.ctrlmod.selectedIndex].value=="2")tt.href += "&doedit=true";
    2971. 

  2971. //}
    2972. 

  2972. <?php } ?>
    2973. 

  2973. return(true);
    2974. 

  2974. }
    2975. 

  2975. 

  2976. function checkforedit(ele){
    2977. 

  2977. 	if($(ele).value==2){
    2978. 

  2978. 		alert("If you are add/deleting or changing an item in the order please change status of the order to cancelled first. This is to keep the inventory accurate. After you have made the changes please set the status back to the old status. Please don't edit orders that have already been set to packing.");
    2979. 

  2979. 		
    2980. 

  2980. 	}
    2981. 

  2981. }
    2982. 

  2982. // -->
    2983. 

  2983. </script>
    2984. 

  2984.       <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="">
    2985. 

  2985.         <tr>
    2986. 

  2986.           <td width="100%" align="center">
    2987. 

  2987. <?php	$themask = 'yyyy-mm-dd';
    2988. 

  2988. 		if($admindateformat==1)
    2989. 

  2989. 			$themask='mm/dd/yyyy';
    2990. 

  2990. 		elseif($admindateformat==2)
    2991. 

  2991. 			$themask='dd/mm/yyyy';
    2992. 

  2992. 		if(! $success) print "<p><font color='#FF0000'>" . $errmsg . "</font></p>"; ?>
    2993. 

  2993. 			<span name="searchspan" id="searchspan" <?php //if($usepowersearch) print 'style="display:block"'; else print 'style="display:none"'?>>
    2994. 

  2994.             <table width="100%" border="0" cellspacing="1" cellpadding="2" bgcolor="">
    2995. 

  2995. 			  <form method="post" action="/admin/orders2.php" name="psearchform">
    2996. 

  2996. 			  <input type="hidden" name="powersearch" value="1" />
    2997. 

  2997. 			  <tr bgcolor="#030133"><td colspan="6"><strong><font color="#E7EAEF">&nbsp;<?php print $yyPowSea?></font></strong></td></tr>
    2998. 

  2998. 			  <tr bgcolor="#E7EAEF"> 
    2999. 

  2999.                 <td align="right" width="15%"><strong><?php print $yyOrdFro?>:</strong></td>
    3000. 

  3000. 				<td width="15%" align="left" nowrap="nowrap">&nbsp;
    3001. 

  3001. 			    <input type="text" size="14" name="fromdate" value="<?php print $fromdate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.fromdate, '<?php print $themask?>', 0)" value='DP' /></td>
    3002. 

  3002. 				<td width="15%" align="right"><strong>E-tailers:</strong></td>
    3003. 

  3003. 				<td align="left" width="15%">
    3004. 

  3004. 				<select name="custID">
    3005. 

  3005. 				 	<option value="" <?=(empty($_POST['custID']))?' selected="selected"':''?>>None Selected</option>
    3006. 

  3006. 				 <? 
    3007. 

  3007. 				 $sql_EID="SELECT custID, Name FROM customers WHERE active=1";
    3008. 

  3008. 				 $result_EID=mysql_query($sql_EID);
    3009. 

  3009. 				 while($rs_EID=mysql_fetch_array($result_EID)){ ?>
    3010. 

  3010. 					  	<option value="<?=$rs_EID['custID']?>" <? if($_POST['custID']==$rs_EID['custID']) echo " selected"?>><?= str_replace('<br />',' ',$rs_EID['Name'])?></option>
    3011. 

  3011. 				<? } ?> 
    3012. 

  3012. 				 </select>				</td>
    3013. 

  3013. 				<td align="right" width="20%"><strong><?php print $yyOrdTil?>:</strong></td>
    3014. 

  3014. 				<td align="left" width="25%">&nbsp;<input type="text" size="14" name="todate" value="<?php print $todate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.todate, '<?php print $themask?>', -205)" value='DP' /></td>
    3015. 

  3015. 			  </tr>
    3016. 

  3016. 			  <tr bgcolor="#EAECEB">
    3017. 

  3017. 				<td align="right"><strong><?php print $yyOrdId?>:</strong></td>
    3018. 

  3018. 				<td align="left">&nbsp;<input type="text" size="14" name="ordid" value="<?php print $ordid?>" /></td>
    3019. 

  3019. 				<td align="right"><strong>PO/APOs:</strong></td>
    3020. 

  3020. 				<td align="left">
    3021. 

  3021. 					<select id="ordPOAPOs" name="ordPOAPOs">
    3022. 

  3022. 						<option value="none"<?=(empty($_POST['ordPOAPOs']))?' selected="selected"':''?>>None Selected</option>
    3023. 

  3023. 						<option value="APOs"<?=($_POST['ordPOAPOs'] == 'APOs')?' selected="selected"':''?>>APOs</option>
    3024. 

  3024. 						<option value="PO_APO"<?=($_POST['ordPOAPOs'] == 'PO_APO')?' selected="selected"':''?>>PO/APOs</option>
    3025. 

  3025. 						<option value="POs"<?=($_POST['ordPOAPOs'] == 'POs')?' selected="selected"':''?>>POs</option>
    3026. 

  3026. 						<option value="shipping_APOs"<?=($_POST['ordPOAPOs'] == 'shipping_APOs')?' selected="selected"':''?>>Shipping to APOs</option>
    3027. 

  3027. 						<option value="shipping_PO_APO"<?=($_POST['ordPOAPOs'] == 'shipping_PO_APO')?' selected="selected"':''?>>Shipping to PO/APOs</option>
    3028. 

  3028. 						<option value="shipping_POs"<?=($_POST['ordPOAPOs'] == 'shipping_POs')?' selected="selected"':''?>>Shipping to POs</option>
    3029. 

  3029. 					</select>				</td>
    3030. 

  3030. 				<td align="right"><strong><?php print $yySeaTxt?>:</strong></td>
    3031. 

  3031. 				<td align="left" valign="middle">&nbsp;
    3032. 

  3032. 				  <input type="text" size="24" name="searchtext" value="<?php print $origsearchtext?>" /></td>
    3033. 

  3033. 			  </tr>
    3034. 

  3034. 			  <tr bgcolor="#E7EAEF">
    3035. 

  3035. 				<td rowspan="2" align="right"><strong><?php print $yyOrdSta?>:</strong></td>
    3036. 

  3036. 				<td rowspan="2" align="left">&nbsp;<select name="ordstatus[]" size="5" multiple><option value="9999" <?php if(strpos($ordstatus,"9999") !== FALSE) print "selected"?>><?php print $yyAllSta?></option><?php
    3037. 

  3037. 						$ordstatus="";
    3038. 

  3038. 						$addcomma = "";
    3039. 

  3039. 						if(is_array(@$_REQUEST["ordstatus"])){
    3040. 

  3040. 							foreach($_REQUEST["ordstatus"] as $objValue){
    3041. 

  3041. 								if(is_array($objValue))$objValue=$objValue[0];
    3042. 

  3042. 								$ordstatus .= $addcomma . $objValue;
    3043. 

  3043. 								$addcomma = ",";
    3044. 

  3044. 							}
    3045. 

  3045. 						}else
    3046. 

  3046. 							$ordstatus = trim(@$_REQUEST["ordstatus"]);
    3047. 

  3047. 						$ordstatusarr = explode(",", $ordstatus);
    3048. 

  3048. 						for($index=0; $index < $numstatus; $index++){
    3049. 

  3049. 							print '<option value="' . $allstatus[$index]["statID"] . '"';
    3050. 

  3050. 							if(is_array($ordstatusarr)){
    3051. 

  3051. 								foreach($ordstatusarr as $objValue)
    3052. 

  3052. 									if($objValue==$allstatus[$index]["statID"]) print " selected";
    3053. 

  3053. 							}
    3054. 

  3054. 							print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    3055. 

  3055. 						} ?></select>				</td>
    3056. 

  3056. 				<td rowspan="2" align="right"><strong><?=$yyOrdCou?>:</strong></td>
    3057. 

  3057. 				<td rowspan="2" align="left">
    3058. 

  3058. 				<? $sSQL2="SELECT DISTINCT cpnID,cpnName,cpnNumber FROM orders o LEFT JOIN coupons c ON o.ordCoupon=c.cpnID WHERE ordDiscount>0 ORDER BY cpnNumber,cpnName";
    3059. 

  3059. 					$result2=mysql_query($sSQL2) or die(mysql_error().$sSQL2);
    3060. 

  3060. 					$total2=mysql_num_rows($result2);?>
    3061. 

  3061. 					<select name="ordcoupon" size="5" style="width:250px; font-size:10px; ">
    3062. 

  3062. 					 	<? while($rs2=mysql_fetch_array($result2)){ ?>
    3063. 

  3063. 					  	<option value="<?=$rs2['cpnID']?>" <?=$rs2['cpnNumber']==""?"":'style="font-weight:bold;"'?> <? if($ordcoupon==$rs2['cpnID']) echo " selected"?>><?=$rs2['cpnNumber']==""?"":$rs2['cpnNumber'].' | '?> <?= str_replace('<br />',' ',$rs2['cpnName'])?></option>
    3064. 

  3064. 						<? } ?>
    3065. 

  3065. 					</select>
    3066. 

  3066. 					<div style="font-size:9px;">Coupons are in bold</div>
    3067. 

  3067. 					</td>
    3068. 

  3068. 				<td align="right" valign="middle"><strong>Return Status:</strong></td>
    3069. 

  3069. 				<td align="left" valign="middle">
    3070. 

  3070. 						<?
    3071. 

  3071. 						$sql_return="SELECT * FROM returns ORDER BY status_order";
    3072. 

  3072. 						$result_return=mysql_query($sql_return);
    3073. 

  3073. 						?>
    3074. 

  3074. 						<select name="return_status_search">
    3075. 

  3075. 						  <option value="" <?php if ($_SESSION['return_status_search']=="") {echo "selected=\"selected\"";} ?>></option>
    3076. 

  3076. 						  <? while($row_return=mysql_fetch_assoc($result_return)){?>
    3077. 

  3077. 						  <option value="<?=$row_return["id"]?>" <?php if (!(strcmp($row_return["id"], $_SESSION['return_status_search']))) {echo "selected=\"selected\"";} ?>>
    3078. 

  3078. 						  <?=$row_return["status"]?>
    3079. 

  3079. 						  </option>
    3080. 

  3080. 						  <? } ?>
    3081. 

  3081. 					  </select></td>
    3082. 

  3082. 			  </tr>
    3083. 

  3083. 			  <tr bgcolor="#E7EAEF">
    3084. 

  3084. 			    <td align="right" valign="top">&nbsp;</td>
    3085. 

  3085. 			    <td align="left">			</td>
    3086. 

  3086. 			    </tr>
    3087. 

  3087. 			  
    3088. 

  3088. 			  <tr bgcolor="#E7EAEF">
    3089. 

  3089. 				<td colspan="3" align="left"><input type="checkbox" name="startwith" value="1" <?php if($usepowersearch) print "checked"?> />				  <strong><?php print $yyStaPow?></strong></td>
    3090. 

  3090. 				<td align="left"><input type="checkbox" name="myfrogz" value="myfrogz" id="myfrogz"<?=(!empty($_POST['myfrogz'])) ? ' checked="checked"' : ''?> />&nbsp;MyFrogz Orders</td>
    3091. 

  3091. 				<td colspan="2" align="center">
    3092. 

  3092. 				  <input type="submit" value="<?php print $yySearch?>" /> <input type="button" value="Stats" onclick="document.forms.psearchform.action='/admin/stats1.php';document.forms.psearchform.submit();" /></td>
    3093. 

  3093. 			  </tr>
    3094. 

  3094. 			  
    3095. 

  3095. 			  <tr>
    3096. 

  3096. 			  	<td colspan="6">
    3097. 

  3097. 				<?
    3098. 

  3098. 					$sql_status =  "SELECT count( * ) as statcount , os.statPrivate , os.statID
    3099. 

  3099. 									FROM orders o, orderstatus os
    3100. 

  3100. 									WHERE o.ordStatus = os.statID
    3101. 

  3101. 									AND (o.ordStatus BETWEEN 0 AND 10 OR o.ordStatus = 17)
    3102. 

  3102. 									AND o.ordName != ''
    3103. 

  3103. 									GROUP BY os.statID,os.statPrivate";
    3104. 

  3104. 					$result_status=mysql_query($sql_status);
    3105. 

  3105. 					while($row_status=mysql_fetch_assoc($result_status)){?>
    3106. 

  3106. 			  		<div style="color:#000066; font-weight:bold; border:#030133 solid 1px; margin:2px; float:left; width:146px;padding:2px; text-align:center; background-color:#E7EAEF;"><a href="/admin/orders2.php?powersearch=1&ordstatus=<?=$row_status['statID']?>"><?=$row_status['statID'].'-'.$row_status['statPrivate'].': '.$row_status['statcount'] ?></a></div>
    3107. 

  3107. 			  	<? } ?>			  	</td>
    3108. 

  3108. 			  </tr>
    3109. 

  3109. 			  </form>
    3110. 

  3110. 			</table>
    3111. 

  3111. 			</span>
    3112. 

  3112.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    3113. 

  3113. 			  <form method="post" action="/admin/orders2.php">
    3114. 

  3114. 			   <tr>
    3115. 

  3115. 			    <td width="37%" align="center"> <input type="button" value="<?php print $yyPowSea?>" onclick="displaysearch()" /></td><td width="37%" colspan="2" align="center"><p><strong><?php print $yyShoFrm?>:</strong> <select name="sd" size="1"><?php
    3116. 

  3116. 					$gotmatch=FALSE;
    3117. 

  3117. 					$thetime = time() + ($dateadjust*60*60);
    3118. 

  3118. 					$dayToday = date("d",$thetime);
    3119. 

  3119. 					$monthToday = date("m",$thetime);
    3120. 

  3120. 					$yearToday = date("Y",$thetime);
    3121. 

  3121. 					for($index=$dayToday; $index > 0; $index--){
    3122. 

  3122. 						$thedate = mktime(0, 0, 0, $monthToday, $index, $yearToday);
    3123. 

  3123. 						$thedatestr = date($admindatestr, $thedate);
    3124. 

  3124. 						print "<option value='" . $thedatestr . "'";
    3125. 

  3125. 						if($thedate==$sd){
    3126. 

  3126. 							print " selected";
    3127. 

  3127. 							$gotmatch=TRUE;
    3128. 

  3128. 						}
    3129. 

  3129. 						print ">" . $thedatestr . "</option>\n";
    3130. 

  3130. 					}
    3131. 

  3131. 					for($index=1; $index<=12; $index++){
    3132. 

  3132. 						$thedatestr = date($admindatestr, $thedate = mktime(0,0,0,date("m",$thetime)-$index,1,date("Y",$thetime)));
    3133. 

  3133. 						if(! $gotmatch && $thedate < $sd){
    3134. 

  3134. 							print "<option value='" . date($admindatestr, $sd) . "' selected>" . date($admindatestr, $sd) . "</option>";
    3135. 

  3135. 							$gotmatch=TRUE;
    3136. 

  3136. 						}
    3137. 

  3137. 						print "<option value='" . $thedatestr . "'";
    3138. 

  3138. 						if($thedate==$sd){
    3139. 

  3139. 							print " selected";
    3140. 

  3140. 							$gotmatch=TRUE;
    3141. 

  3141. 						}
    3142. 

  3142. 						print ">" . $thedatestr . "</option>\n";
    3143. 

  3143. 					}
    3144. 

  3144. 					if(!$gotmatch) print "<option value='" . date($admindatestr, $sd) . "' selected>" . date($admindatestr, $sd) . "</option>";
    3145. 

  3145. 				?></select> <strong><?php print $yyTo?>:</strong> <select name="ed" size="1"><?php
    3146. 

  3146. 					$gotmatch=FALSE;
    3147. 

  3147. 					$dayToday = date("d",$thetime);
    3148. 

  3148. 					$monthToday = date("m",$thetime);
    3149. 

  3149. 					$yearToday = date("Y",$thetime);
    3150. 

  3150. 					for($index=$dayToday; $index > 0; $index--){
    3151. 

  3151. 						$thedate = mktime(0, 0, 0, $monthToday, $index, $yearToday);
    3152. 

  3152. 						$thedatestr = date($admindatestr, $thedate);
    3153. 

  3153. 						print "<option value='" . $thedatestr . "'";
    3154. 

  3154. 						if($thedate==$ed){
    3155. 

  3155. 							print " selected";
    3156. 

  3156. 							$gotmatch=TRUE;
    3157. 

  3157. 						}
    3158. 

  3158. 						print ">" . $thedatestr . "</option>\n";
    3159. 

  3159. 					}
    3160. 

  3160. 					for($index=1; $index<=12; $index++){
    3161. 

  3161. 

  3162. 						if(! $gotmatch && $thedate < $ed){
    3163. 

  3163. 							print "<option value='" . date($admindatestr, $ed) . "' selected>" . date($admindatestr, $ed) . "</option>";
    3164. 

  3164. 							$gotmatch=TRUE;
    3165. 

  3165. 						}
    3166. 

  3166. 						$thedatestr = date($admindatestr, $thedate = mktime(0,0,0,date("m",$thetime)-$index,1,date("Y",$thetime)));
    3167. 

  3167. 						print "<option value='" . $thedatestr . "'";
    3168. 

  3168. 						if($thedate==$ed){
    3169. 

  3169. 							print " selected";
    3170. 

  3170. 							$gotmatch=TRUE;
    3171. 

  3171. 						}
    3172. 

  3172. 						print ">" . $thedatestr . "</option>\n";
    3173. 

  3173. 					}
    3174. 

  3174. 					if(!$gotmatch) print "<option value='" . date($admindatestr, $sd) . "' selected>" . date($admindatestr, $sd) . "</option>";
    3175. 

  3175. 				?></select> <input type="submit" value="Go" /></td>
    3176. 

  3176. 			  </tr>
    3177. 

  3177. 			  <tr>
    3178. 

  3178. 			    <td colspan="3">
    3179. 

  3179. 				* Order has Custom Screenz | 
    3180. 

  3180. 				<span style="color:#00CC00;">order has been changed</span> | 
    3181. 

  3181. 				<span style="background-color:#FA6561; padding:2px;">etailer</span> |
    3182. 

  3182. 				<span style="color:#FF0000;">unauthorized</span> |	<span style="background-color: #FFC58A; padding:2px;">affiliate</span> | <img src="/lib/images/misc/icon_headphones.png" /> Order has custom headphones</td>
    3183. 

  3183. 			    </tr>
    3184. 

  3184. 			  </form>
    3185. 

  3185. 			</table>
    3186. 

  3186. 			<table width="100%" border="0" cellspacing="1" cellpadding="2" bgcolor="">
    3187. 

  3187. 			  <tr bgcolor="#030133"> 
    3188. 

  3188.                 <td align="center" align="center"><input type="checkbox" name="select_all" value="yes" id="select_all" /></td>
    3189. 

  3189. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyOrdId?></font></strong></td>
    3190. 

  3190. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyName?></font></strong></td>
    3191. 

  3191. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyMethod?></font></strong></td>
    3192. 

  3192. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyAutCod?></font></strong></td>
    3193. 

  3193. 				<td align="center"><strong><font color="#E7EAEF">Order Amt</font></strong></td>
    3194. 

  3194. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyDate?></font></strong></td>
    3195. 

  3195. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyStatus?></font></strong></td>
    3196. 

  3196. 		        <td align="center">&nbsp;</td>
    3197. 

  3197. 			  </tr>
    3198. 

  3198. 			  <form method="post" name="mainform" action="/admin/orders2.php">
    3199. 

  3199. 			  <?php if(@$_POST["powersearch"]=="1"){ ?>
    3200. 

  3200. 			  <input type="hidden" name="powersearch" value="1" />
    3201. 

  3201. 			  <input type="hidden" name="fromdate" value="<?php print trim(@$_POST["fromdate"])?>" />
    3202. 

  3202. 			  <input type="hidden" name="todate" value="<?php print trim(@$_POST["todate"])?>" />
    3203. 

  3203. 			  <input type="hidden" name="ordid" value="<?php print trim(str_replace('"','',str_replace("'",'',@$_POST["ordid"])))?>" />
    3204. 

  3204. 			  <input type="hidden" name="origsearchtext" value="<?php print trim(str_replace('"','&quot;',@$_POST["searchtext"]))?>" />
    3205. 

  3205. 			  <input type="hidden" name="searchtext" value="<?php print trim(str_replace('"',"&quot;",@$_POST["searchtext"]))?>" />
    3206. 

  3206. 			  <input type="hidden" name="ordstatus[]" value="<?php print $ordstatus?>" />
    3207. 

  3207. 			  <input type="hidden" name="startwith" value="<?php if($usepowersearch) print "1"?>" />
    3208. 

  3208. 			  <?php } ?>
    3209. 

  3209. 			  <input type="hidden" name="act" value="xxx" />
    3210. 

  3210. 			  <input type="hidden" name="id" value="xxx" />
    3211. 

  3211. 			  <input type="hidden" name="authcode" value="xxx" />
    3212. 

  3212. 			  <input type="hidden" name="ed" value="<?php print date($admindatestr, $ed)?>" />
    3213. 

  3213. 			  <input type="hidden" name="sd" value="<?php print date($admindatestr, $sd)?>" />
    3214. 

  3214. <?php
    3215. 

  3215. 	if(mysql_num_rows($alldata) > 0){
    3216. 

  3216. 		$rowcounter=0;
    3217. 

  3217. 		$ordTot=0;
    3218. 

  3218. 		$i=0;
    3219. 

  3219. 		$num_rows_order=mysql_num_rows($alldata);
    3220. 

  3220. 		while($rs = mysql_fetch_assoc($alldata)){
    3221. 

  3221. 			$order_id_array[$i]=$rs["ordID"];			
    3222. 

  3222. 			//check for split order
    3223. 

  3223. 			$splitstr='';
    3224. 

  3224. 			$sql_split="SELECT * FROM orderssplit WHERE orgOrder=".$rs["ordID"]." OR newOrder=".$rs["ordID"];
    3225. 

  3225. 			$result_split=mysql_query($sql_split);
    3226. 

  3226. 			if(mysql_num_rows($result_split)>0) {
    3227. 

  3227. 				$row_split=mysql_fetch_assoc($result_split);
    3228. 

  3228. 				$splitstr=$row_split['orgOrder'].','.$row_split['newOrder'];
    3229. 

  3229. 				$splitType=$row_split['splitType'];
    3230. 

  3230. 			}
    3231. 

  3231. 			
    3232. 

  3232. 			//check for custom screenz
    3233. 

  3233. 			$hascustomscreen='';
    3234. 

  3234. 			$sql_check="SELECT * FROM cart WHERE cartOrderID=".$rs["ordID"]." AND cartProdID LIKE '%-Custom'";
    3235. 

  3235. 			$result_check=mysql_query($sql_check);
    3236. 

  3236. 			if(mysql_num_rows($result_check)>0) $hascustomscreen='*';
    3237. 

  3237. 			
    3238. 

  3238. 			//check for dropshipper
    3239. 

  3239. 			$dropshipper='';
    3240. 

  3240. 			$sql_check_ds="SELECT p.pDropship FROM cart c JOIN products p ON c.cartProdID=p.pID WHERE p.pDropship>0 AND cartOrderID=".$rs["ordID"];
    3241. 

  3241. 			$result_check_ds=mysql_query($sql_check_ds);
    3242. 

  3242. 			$comma='';
    3243. 

  3243. 			while($row_check_ds=mysql_fetch_assoc($result_check_ds)) {
    3244. 

  3244. 				$sql_get_ds="SELECT dsName FROM dropshipper WHERE dsID=".$row_check_ds["pDropship"];
    3245. 

  3245. 				$result_get_ds=mysql_query($sql_get_ds);
    3246. 

  3246. 				if(mysql_num_rows($result_get_ds)>0){
    3247. 

  3247. 					$row_get_ds=mysql_fetch_assoc($result_get_ds);
    3248. 

  3248. 					if(!strstr($dropshipper,$row_get_ds['dsName']))$dropshipper.=$comma.$row_get_ds['dsName'];
    3249. 

  3249. 				}
    3250. 

  3250. 				$comma=', ';
    3251. 

  3251. 			}
    3252. 

  3252. 			
    3253. 

  3253. 			// Check for custom headphones
    3254. 

  3254. 			$hasCustomHeadphones = false;
    3255. 

  3255. 			$arrCustHeadphones = array('customnervepipe', 'customfallout', 'customhype');
    3256. 

  3256. 			$strCustHeadphones = "'".implode("','",$arrCustHeadphones)."'";
    3257. 

  3257. 			$sql_check_cust_headphones = "SELECT * 
    3258. 

  3258. 										  FROM cart 
    3259. 

  3259. 										  WHERE cartProdID IN($strCustHeadphones) 
    3260. 

  3260. 										  AND cartOrderID = ".$rs["ordID"];
    3261. 

  3261. 			$res_check_cust_headphones = mysql_query($sql_check_cust_headphones);
    3262. 

  3262. 			if (mysql_num_rows($res_check_cust_headphones) > 0) {
    3263. 

  3263. 				$hasCustomHeadphones = true;
    3264. 

  3264. 			}
    3265. 

  3265. 			
    3266. 

  3266. 			$i++;			
    3267. 

  3267. 			$total_tax_shipping=$rs["ordTot"]+$rs["ordStateTax"]+$rs["ordShipping"];
    3268. 

  3268. 			if($rs["ordStatus"]>=3) $ordTot += $total_tax_shipping;
    3269. 

  3269. 			if($rs["ordStatus"]>=3) $num_auth_order += 1;
    3270. 

  3270. 			if($rs["ordAuthNumber"]=="" || is_null($rs["ordAuthNumber"])){
    3271. 

  3271. 				$startfont="<font color='#FF0000'>";
    3272. 

  3272. 				$endfont="</font>";
    3273. 

  3273. 			} else{
    3274. 

  3274. 				$startfont="";
    3275. 

  3275. 				$endfont="";
    3276. 

  3276. 			}
    3277. 

  3277. 			if($rs["order_changed"]=='yes'){ 
    3278. 

  3278. 				$startfont="<font color='#00CC00'>";
    3279. 

  3279. 				$endfont="</font>";
    3280. 

  3280. 			}
    3281. 

  3281. 			if(@$bgcolor=="#E7EAEF") $bgcolor="#EAECEB"; else $bgcolor="#E7EAEF";
    3282. 

  3282. 			if(!empty($rs["ordAffiliate"]) && isset($rs["ordAffiliate"])) $bgcolor="#FFC58A";
    3283. 

  3283. 			if(!empty($rs["ordEID"])) $bgcolor="#FA6561";
    3284. 

  3284. 			//if($hascustomscreen) $bgcolor="#FFFF99";
    3285. 

  3285. 			
    3286. 

  3286.             if ($hasCustomHeadphones) {
    3287. 

  3287.             	$strCH = 'style="background: url(\'/lib/images/misc/icon_headphones.png\') no-repeat right;"';
    3288. 

  3288.             } else {
    3289. 

  3289.             	$strCH = '';
    3290. 

  3290.             }
    3291. 

  3291. ?>
    3292. 

  3292. 			  <tr bgcolor="<?php print $bgcolor?>"> 
    3293. 

  3293.                 <td align="center" style="width: 10px;"><input type="checkbox" rowcounter="<?=$rowcounter?>" class="ord_checkbox" name="selected[]" value="<?=$rowcounter?>" id="selected<?=$rs["ordID"]?>" /></td>
    3294. 

  3294. 				<td align="center" <?=$strCH?>>
    3295. 

  3295. 				<span style="float:left;"><a href="/admin/orders2.php?powersearch=1&ordid=<?=$rs["ordID"]?>">[go]</a></span>
    3296. 

  3296. 				<a onclick="return(checkprinter(this,event,<?=$rowcounter?>));" href="/admin/orders2.php?id=<?php print $rs["ordID"]?>"><?php print "<strong>" . $startfont . $hascustomscreen.$rs["ordID"] . $endfont . "</strong>"?></a>
    3297. 

  3297. 				<? if(!empty($splitstr)){
    3298. 

  3298. 						if($splitType=='Cloned'){
    3299. 

  3299. 							if($rs["ordAuthNumber"]=='CLONED') $linktext='View Orig';
    3300. 

  3300. 							else $linktext='View Cloned';
    3301. 

  3301. 						} else {
    3302. 

  3302. 							if($rs["ordAuthNumber"]=='Split Order') {$num_auth_order--; $linktext='View Orig';}
    3303. 

  3303. 							else $linktext='View Split';
    3304. 

  3304. 					 	}?>
    3305. 

  3305. 					 <a href="/admin/orders2.php?powersearch=1&ordid=<?=$splitstr?>"><?=$linktext?></a>
    3306. 

  3306. 				<? } ?>				</td>
    3307. 

  3307. 				<td align="center"><a onclick="return(checkprinter(this,event,<?=$rowcounter?>));" href="/admin/orders2.php?id=<?php print $rs["ordID"]?>"><?php print $startfont . $rs["ordName"] . $endfont?></a></td>
    3308. 

  3308. 				<td align="center"><?php print $startfont . $rs["payProvName"] . ($rs["payProvName"]=='PayPal' && trim($rs["ordTransID"]) != '' ? ' CC' : '') . $endfont?></td>
    3309. 

  3309. 				<td align="center"><?php
    3310. 

  3310. 					if($rs["ordAuthNumber"]=="" || is_null($rs["ordAuthNumber"])){
    3311. 

  3311. 						$isauthorized=FALSE;
    3312. 

  3312. 						print '<input type="button" name="auth" value="' . $yyAuthor . '" onclick="authrec(\'' . $rs["ordID"] . '\')" />';
    3313. 

  3313. 					}else{
    3314. 

  3314. 						print '<a href="#" title="' . FormatEuroCurrency($rs["ordTot"]) . '" onclick="authrec(\'' . $rs["ordID"] . '\');return(false);">' . $startfont . $rs["ordAuthNumber"] . $endfont . '</a>';
    3315. 

  3315. 						$isauthorized=TRUE;
    3316. 

  3316. 					}
    3317. 

  3317. 				?></td>
    3318. 

  3318. 				<td align="center"><?=FormatEuroCurrency($total_tax_shipping)?></td>
    3319. 

  3319. 				<td align="center"><font size="1"><?php print $startfont . date($admindatestr . "\<\\b\\r\>H:i:s", strtotime($rs["ordDate"])) . $endfont?></font></td>
    3320. 

  3320. 				<td align="center" nowrap="nowrap">
    3321. 

  3321. 					<input type="hidden" name="ordid<?php print $rowcounter?>" value="<?php print $rs["ordID"]?>" />
    3322. 

  3322. 					<input type="hidden" name="orig_location[]" rowcounter="<?=$rowcounter?>" value="<?=$rs["ordStatus"]?>" id="orig_location<?php print $rowcounter?>" />
    3323. 

  3323. 					<select id="ordstatus<?php print $rowcounter?>" rowcounter="<?=$rowcounter?>" class="sel_location" name="ordstatus<?php print $rowcounter?>" size="1" onchange="checkcontrol(this,event)" <?php if($rs['ordPayProvider']==20) print ' disabled'?>><?php
    3324. 

  3324. 						$gotitem=FALSE;
    3325. 

  3325. 						for($index=0; $index<$numstatus; $index++){
    3326. 

  3326. 							if(! $isauthorized && $allstatus[$index]["statID"]>2) break;
    3327. 

  3327. 							if(! ($rs["ordStatus"] != 2 && $allstatus[$index]["statID"]==2)){
    3328. 

  3328. 								print '<option value="' . $allstatus[$index]["statID"] . '"';
    3329. 

  3329. 								if($rs["ordStatus"]==$allstatus[$index]["statID"]){
    3330. 

  3330. 									print " selected";
    3331. 

  3331. 									$gotitem=TRUE;
    3332. 

  3332. 								}
    3333. 

  3333. 								print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    3334. 

  3334. 							}
    3335. 

  3335. 						}
    3336. 

  3336. 						if(! $gotitem) print '<option value="" selected>' . $yyUndef . '</option>' ?></select>
    3337. 

  3337. 						<span class="undo_location" rowcounter="<?=$rowcounter?>" style="display: none; cursor: pointer;"><img src="/lib/images/misc/undo.png" /></span>
    3338. 

  3338. 						<? if($dropshipper!='') echo '<br />'.$dropshipper;?>
    3339. 

  3339. 				</td>
    3340. 

  3340. 			    <td align="center"><? if($rs["ordShipType"]=='International') $shiptype='Standard'; else $shiptype=$rs["ordShipType"];?>
    3341. 

  3341. 						<img src="lib/images/shiptypes/<?=$shiptype?>.jpg" /></td>
    3342. 

  3342. 			  </tr>
    3343. 

  3343. <?php		$rowcounter++;
    3344. 

  3344. 			if($rowcounter>=10000){
    3345. 

  3345. 				print "<tr><td colspan='9' align='center'><strong>Limit of " . $rowcounter . " orders reached. Please refine your search.</strong></td></tr>";
    3346. 

  3346. 				break;
    3347. 

  3347. 			}
    3348. 

  3348. 		}
    3349. 

  3349. ?>
    3350. 

  3350. 			  <tr>
    3351. 

  3351. 				<td colspan="4" align="left"><select id="ctrlmod" name="ctrlmod" size="1">
    3352. 

  3352. 				<option value="0">View Order Details</option><option value="1"><?php print $yyPPSlip?></option><option value="2"><?php print $yyEdOrd?></option>
    3353. 

  3353. 				</select>
    3354. 

  3354. &nbsp;&nbsp;&nbsp;
    3355. 

  3355. <?php if(@$orderstatusemail != ""){ ?>
    3356. 

  3356. <input type="checkbox" name="emailstat" value="1" <?php if(@$_POST["emailstat"]=="1" || @$alwaysemailstatus==TRUE) print "checked"?>/> 
    3357. 

  3357. <?php print $yyEStat?><?php } ?></td>
    3358. 

  3358. 				<td align="left"><div align="right"><strong>Total:</strong></div></td>
    3359. 

  3359. 				<td align="center"><?php print FormatEuroCurrency($ordTot)?></td>
    3360. 

  3360. 				<td colspan="3" align="center"><input type="hidden" name="maxitems" value="<?php print $rowcounter?>" />
    3361. 

  3361. 			    <input type="submit" value="<?php print $yyUpdate?>" onclick="document.mainform.act.value='status';" />				  <input type="reset" value="<?php print $yyReset?>" /></td>
    3362. 

  3362. 				</tr>
    3363. 

  3363. 			  </form>
    3364. 

  3364. 			  <form method="post" action="/admin/dumporders.php" name="dumpform">
    3365. 

  3365. 			  <?php if(@$_POST["powersearch"]=="1"){ ?>
    3366. 

  3366. 			  <input type="hidden" name="powersearch" value="1" />
    3367. 

  3367. 			  <input type="hidden" name="fromdate" value="<?php print trim(@$_POST["fromdate"])?>" />
    3368. 

  3368. 			  <input type="hidden" name="todate" value="<?php print trim(@$_POST["todate"])?>" />
    3369. 

  3369. 			  <input type="hidden" name="ordid" value="<?php print trim(str_replace('"','',str_replace("'",'',@$_POST["ordid"])))?>" />
    3370. 

  3370. 			  <input type="hidden" name="origsearchtext" value="<?php print trim(str_replace('"','&quot;',@$_POST["searchtext"]))?>" />
    3371. 

  3371. 			  <input type="hidden" name="searchtext" value="<?php print trim(str_replace('"',"&quot;",@$_POST["searchtext"]))?>" />
    3372. 

  3372. 			  <input type="hidden" name="ordstatus[]" value="<?php print $ordstatus?>" />
    3373. 

  3373. 			  <input type="hidden" name="startwith" value="<?php if($usepowersearch) print "1"?>" />
    3374. 

  3374. 			  <?php } ?>
    3375. 

  3375. 			  <input type="hidden" name="sd" value="<?php print date($admindatestr, $sd)?>" />
    3376. 

  3376. 			  <input type="hidden" name="ed" value="<?php print date($admindatestr, $ed)?>" />
    3377. 

  3377. 			  <input type="hidden" name="details" value="false" />
    3378. 

  3378. 			  <tr> 
    3379. 

  3379.                 <td colspan="2" align="center"><?=$num_rows_order?> Orders</td>
    3380. 

  3380. 				<td colspan="2" align="center"><?=$num_auth_order?> Authorized Orders</td>
    3381. 

  3381. 				<td colspan="5" align="right"><input type="submit" value="<?php print $yyDmpOrd?>" onclick="document.dumpform.details.value='false';" />				  <input name="submit" type="submit" onclick="document.dumpform.details.value='true';" value="<?php print $yyDmpDet?>" /></td>
    3382. 

  3382. 				</tr>
    3383. 

  3383. 			  </form>
    3384. 

  3384. <?php
    3385. 

  3385. 	}else{
    3386. 

  3386. ?>
    3387. 

  3387. 			  <tr> 
    3388. 

  3388.                 <td width="100%" colspan="9" align="center">
    3389. 

  3389. 					<p><?php
    3390. 

  3390. 					if(@$_POST["powersearch"]=="1")
    3391. 

  3391. 						print $yyNoMat1;
    3392. 

  3392. 					elseif($sd==$ed)
    3393. 

  3393. 						print $yyNoMat2 . " " . date($admindatestr, $sd) . ".";
    3394. 

  3394. 					else
    3395. 

  3395. 						print $yyNoMat3 . " " . date($admindatestr, $sd) . " and " . date($admindatestr, $ed) . ".";
    3396. 

  3396. 					?></p>				</td>
    3397. 

  3397. 			  </tr>
    3398. 

  3398. 			  <?php if($hasdeleted){ ?>
    3399. 

  3399. 			  <tr> 
    3400. 

  3400. 			  <td colspan="8"><input type="submit" value="<?php print $yyPurDel?>" onclick="document.mainform.act.value='purge';" />			  </tr>
    3401. 

  3401. 			  <?php } ?>
    3402. 

  3402. 			  </form>
    3403. 

  3403. <?php
    3404. 

  3404. 	} ?>
    3405. 

  3405. 			  <tr> 
    3406. 

  3406.                 <td width="100%" colspan="8" align="center">
    3407. 

  3407. 				  <p><br />
    3408. 

  3408. 					<a href="/admin/orders2.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd)-1,date("d",$sd),date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed)-1,date("d",$ed),date("Y",$ed)))?>"><strong>- <?php print $yyMonth?></strong></a> | 
    3409. 

  3409. 					<a href="/admin/orders2.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)-7,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)-7,date("Y",$ed)))?>"><strong>- <?php print $yyWeek?></strong></a> | 
    3410. 

  3410. 					<a href="/admin/orders2.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)-1,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)-1,date("Y",$ed)))?>"><strong>- <?php print $yyDay?></strong></a> | 
    3411. 

  3411. 					<a href="/admin/orders2.php"><strong><?php print $yyToday?></strong></a> | 
    3412. 

  3412. 					<a href="/admin/orders2.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)+1,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)+1,date("Y",$ed)))?>"><strong><?php print $yyDay?> +</strong></a> | 
    3413. 

  3413. 					<a href="/admin/orders2.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)+7,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)+7,date("Y",$ed)))?>"><strong><?php print $yyWeek?> +</strong></a> | 
    3414. 

  3414. 					<a href="/admin/orders2.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd)+1,date("d",$sd),date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)+1,date("Y",$ed)))?>"><strong><?php print $yyMonth?> +</strong></a>				  </p>				</td>
    3415. 

  3415. 			  </tr>
    3416. 

  3416. 			</table>
    3417. 

  3417. 		  </td>
    3418. 

  3418. 		</tr>
    3419. 

  3419.       </table>
    3420. 

  3420. <?php
    3421. 

  3421. }
    3422. 

  3422. }
    3423. 

  3423. 

  3424. ?>
    3425. 

  3425. <script language="JavaScript" type="text/javascript">
    3426. 

  3426. function dorecalc(onlytotal){
    3427. 

  3427. var thetotal=0,totoptdiff=0;
    3428. 

  3428. for(var i in document.forms.editform){
    3429. 

  3429. if(i.substr(0,5)=="quant"){
    3430. 

  3430. 	theid = i.substr(5);
    3431. 

  3431. 	totopts=0;
    3432. 

  3432. 	delbutton = document.getElementById("del_"+theid);
    3433. 

  3433. 	if(delbutton==null)
    3434. 

  3434. 		isdeleted=false;
    3435. 

  3435. 	else
    3436. 

  3436. 		isdeleted=delbutton.checked;
    3437. 

  3437. 	if(! isdeleted){
    3438. 

  3438. 	for(var ii in document.forms.editform){
    3439. 

  3439. 		var opttext="optn"+theid+"_";
    3440. 

  3440. 		if(ii.substr(0,opttext.length)==opttext){
    3441. 

  3441. 			theitem = document.getElementById(ii);
    3442. 

  3442. 			if(document.getElementById('v'+ii)==null){
    3443. 

  3443. 				thevalue = theitem[theitem.selectedIndex].value;
    3444. 

  3444. 				if(thevalue.indexOf('|')>0){
    3445. 

  3445. 					totopts += parseFloat(thevalue.substr(thevalue.indexOf('|')+1));
    3446. 

  3446. 				}
    3447. 

  3447. 			}
    3448. 

  3448. 		}
    3449. 

  3449. 	}
    3450. 

  3450. 	thequant = parseInt(document.getElementById(i).value);
    3451. 

  3451. 	if(isNaN(thequant)) thequant=0;
    3452. 

  3452. 	theprice = parseFloat(document.getElementById("price"+theid).value);
    3453. 

  3453. 	if(isNaN(theprice)) theprice=0;
    3454. 

  3454. 	document.getElementById("optdiffspan"+theid).value=totopts;
    3455. 

  3455. 	optdiff = parseFloat(document.getElementById("optdiffspan"+theid).value);
    3456. 

  3456. 	if(isNaN(optdiff)) optdiff=0;
    3457. 

  3457. 	thetotal += thequant * (theprice + optdiff);
    3458. 

  3458. 	totoptdiff += thequant * optdiff;
    3459. 

  3459. 	}
    3460. 

  3460. }
    3461. 

  3461. }
    3462. 

  3462. document.getElementById("optdiffspan").innerHTML=totoptdiff.toFixed(2);
    3463. 

  3463. //document.getElementById("ordtotal").value = thetotal.toFixed(2);
    3464. 

  3464. document.getElementById("ordTot").innerHTML = thetotal.toFixed(2);
    3465. 

  3465. document.getElementById("ordtotal").value = thetotal.toFixed(2);
    3466. 

  3466. 

  3467. if(onlytotal==true) return;
    3468. 

  3468. <? if(!empty($prcTot)){?>
    3469. 

  3469. thetotal+=<?=$prcTot?>;
    3470. 

  3470. <? } ?>
    3471. 

  3471. statetaxrate = parseFloat(document.getElementById("staterate").value);
    3472. 

  3472. if(isNaN(statetaxrate)) statetaxrate=0;
    3473. 

  3473. countrytaxrate = parseFloat(document.getElementById("countryrate").value);
    3474. 

  3474. if(isNaN(countrytaxrate)) countrytaxrate=0;
    3475. 

  3475. discount = parseFloat(document.getElementById("ordDiscount").value);
    3476. 

  3476. if(isNaN(discount)){
    3477. 

  3477. 	discount=0;
    3478. 

  3478. 	document.getElementById("ordDiscount").value=0;
    3479. 

  3479. }
    3480. 

  3480. statetaxtotal = (statetaxrate * (thetotal-discount)) / 100.0;
    3481. 

  3481. countrytaxtotal = (countrytaxrate * (thetotal-discount)) / 100.0;
    3482. 

  3482. shipping = parseFloat(document.getElementById("ordShipping").value);
    3483. 

  3483. if(isNaN(shipping)){
    3484. 

  3484. 	//shipping=0;
    3485. 

  3485. 	//document.getElementById("ordShipping").value=0;
    3486. 

  3486. }
    3487. 

  3487. handling = parseFloat(document.getElementById("ordHandling").value);
    3488. 

  3488. if(isNaN(handling)){
    3489. 

  3489. 	handling=0;
    3490. 

  3490. 	document.getElementById("ordHandling").value=0;
    3491. 

  3491. }
    3492. 

  3492. <?php	if(@$taxShipping==2){ ?>
    3493. 

  3493. statetaxtotal += (statetaxrate * shipping) / 100.0;
    3494. 

  3494. countrytaxtotal += (countrytaxrate * shipping) / 100.0;
    3495. 

  3495. <?php	}
    3496. 

  3496. 		if(@$taxHandling==2){ ?>
    3497. 

  3497. statetaxtotal += (statetaxrate * handling) / 100.0;
    3498. 

  3498. countrytaxtotal += (countrytaxrate * handling) / 100.0;
    3499. 

  3499. <?php	} ?>
    3500. 

  3500. document.getElementById("ordStateTax").value = statetaxtotal.toFixed(2);
    3501. 

  3501. document.getElementById("ordCountryTax").value = countrytaxtotal.toFixed(2);
    3502. 

  3502. hstobj = document.getElementById("ordHSTTax");
    3503. 

  3503. hsttax=0;
    3504. 

  3504. if(! (hstobj==null)){
    3505. 

  3505. 	hsttax = parseFloat(hstobj.value);
    3506. 

  3506. }
    3507. 

  3507. grandtotal = (thetotal + shipping + handling + statetaxtotal + countrytaxtotal + hsttax) - discount;
    3508. 

  3508. document.getElementById("grandtotalspan").innerHTML = grandtotal.toFixed(2);
    3509. 

  3509. }
    3510. 

  3510. function ajaxcallback() {
    3511. 

  3511. 	if(ajaxobj.readyState==4){
    3512. 

  3512. 		document.getElementById("googleupdatespan").innerHTML = ajaxobj.responseText;
    3513. 

  3513. 	}
    3514. 

  3514. }
    3515. 

  3515. function updategoogleorder(theact,ordid){
    3516. 

  3516. 	if(confirm('Inform Google of change to order id ' + ordid + "?")){
    3517. 

  3517. 		document.getElementById("googleupdatespan").innerHTML = '';
    3518. 

  3518. 		if(window.XMLHttpRequest){
    3519. 

  3519. 			ajaxobj = new XMLHttpRequest();
    3520. 

  3520. 		}else{
    3521. 

  3521. 			ajaxobj = new ActiveXObject("MSXML2.XMLHTTP");
    3522. 

  3522. 		}
    3523. 

  3523. 		ajaxobj.onreadystatechange = ajaxcallback;
    3524. 

  3524. 		extraparams='';
    3525. 

  3525. 		if(theact=='ship'){
    3526. 

  3526. 			shipcar = document.getElementById("shipcarrier");
    3527. 

  3527. 			if(shipcar!= null){
    3528. 

  3528. 				trackno=document.getElementById("ordTrackNum").value
    3529. 

  3529. 				if(trackno!='' && confirm('Include tracking and carrier info?')){
    3530. 

  3530. 					extraparams='&carrier='+(shipcar.options[shipcar.selectedIndex].value)+'&trackno='+document.getElementById("ordTrackNum").value;
    3531. 

  3531. 				}
    3532. 

  3532. 			}
    3533. 

  3533. 		}
    3534. 

  3534. 		document.getElementById("googleupdatespan").innerHTML = 'Connecting...';
    3535. 

  3535. 		ajaxobj.open("GET", "/admin/ajaxservice.php?gid="+ordid+"&act="+theact+extraparams, true);
    3536. 

  3536. 		ajaxobj.send(null);
    3537. 

  3537. 	}
    3538. 

  3538. }
    3539. 

  3539. function updategooglestatus(theact,ordid){
    3540. 

  3540. 	if(confirm('Update Google account status and inform customer of this status change?')){
    3541. 

  3541. 		document.getElementById("googleupdatespan").innerHTML = '';
    3542. 

  3542. 		if(window.XMLHttpRequest){
    3543. 

  3543. 			ajaxobj = new XMLHttpRequest();
    3544. 

  3544. 		}else{
    3545. 

  3545. 			ajaxobj = new ActiveXObject("MSXML2.XMLHTTP");
    3546. 

  3546. 		}
    3547. 

  3547. 		ajaxobj.onreadystatechange = ajaxcallback;
    3548. 

  3548. 		themessage="googlemessage=" + encodeURI(document.getElementById("ordStatusInfo").value);
    3549. 

  3549. 		document.getElementById("googleupdatespan").innerHTML = 'Connecting...';
    3550. 

  3550. 		ajaxobj.open("POST", "/admin/ajaxservice.php?gid="+ordid+"&act="+theact, true);
    3551. 

  3551. 		ajaxobj.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
    3552. 

  3552. 		ajaxobj.setRequestHeader('Content-Length', themessage.length);
    3553. 

  3553. 		ajaxobj.send(themessage);
    3554. 

  3554. 	}
    3555. 

  3555. }
    3556. 

  3556. </script>
    3557. 

  3557.