PageRenderTime 84ms CodeModel.GetById 23ms RepoModel.GetById 1ms app.codeStats 0ms

/application/views/pages/admin/orders.php

https://bitbucket.org/chadsaun/ifrogz-panel
PHP | 3632 lines | 3378 code | 93 blank | 161 comment | 598 complexity | 5d53a8d440d44d051d9c45bcfbb6f31a MD5 | raw file
    

  1. <?php
    2. 

  2. include('init.php');
    3. 

  3. if (strstr($_SERVER['HTTP_HOST'], ':8888')) {
    4. 

  4. 	include_once('kohanabase/kohana.php');
    5. 

  5. } else {
    6. 

  6. 	include_once(IFZROOT.'kohana.php');
    7. 

  7. }
    8. 

  8. 

  9. if ($_POST["return_status_search"]=="")$_SESSION["return_status_search"]="";
    10. 

  10. else if ($_POST["return_status_search"]!="")$_SESSION["return_status_search"]=$_POST["return_status_search"];
    11. 

  11. //showarray($_POST);
    12. 

  12. //$_SESSION['counter']=0;
    13. 

  13. //$_SESSION['counter_id']=0;
    14. 

  14. //This code is copyright (c) Internet Business Solutions SL, all rights reserved.
    15. 

  15. //The contents of this file are protect under law as the intellectual property of Internet
    16. 

  16. //Business Solutions SL. Any use, reproduction, disclosure or copying of any kind 
    17. 

  17. //without the express and written permission of Internet Business Solutions SL is forbidden.
    18. 

  18. //Author: Vince Reid, vince@virtualred.net
    19. 

  19. include(APPPATH.'views/pages/admin/cartmisc.php');
    20. 

  20. //session_register('order_id_commas');
    21. 

  21. $lisuccess=0;
    22. 

  22. if(@$dateadjust=="") $dateadjust=0;
    23. 

  23. if(@$dateformatstr == "") $dateformatstr = "m/d/Y";
    24. 

  24. $admindatestr="Y-m-d";
    25. 

  25. if(@$admindateformat=="") $admindateformat=0;
    26. 

  26. if($admindateformat==1)
    27. 

  27. 	$admindatestr="m/d/Y";
    28. 

  28. elseif($admindateformat==2)
    29. 

  29. 	$admindatestr="d/m/Y";
    30. 

  30. if(@$storesessionvalue=="") $storesessionvalue="virtualstore".time();
    31. 

  31. if(@$_GET["doedit"]=="true") $doedit=TRUE; else $doedit=FALSE;
    32. 

  32. function editfunc($data,$col,$size){
    33. 

  33. 	global $doedit;
    34. 

  34. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . str_replace('"','&quot;',$data) . '" size="' . $size . '">'); else return($data);
    35. 

  35. }
    36. 

  36. function editnumeric($data,$col,$size){
    37. 

  37. 	global $doedit;
    38. 

  38. 	if($doedit) return('<input type="text" id="' . $col . '" name="' . $col . '" value="' . number_format($data,2,'.','') . '" size="' . $size . '">'); else return(FormatEuroCurrency($data));
    39. 

  39. }
    40. 

  40. if(@$_SESSION["loggedon"] != $storesessionvalue && trim(@$_COOKIE["WRITECKL"])!=""){
    41. 

  41. 	$config_admin = RBI_Kohana::config('database.default_admin.connection');
    42. 

  42. 

  43. 	$db_admin = mysql_connect($config['hostname'], $config['username'], $config['password']);
    44. 

  44. 	mysql_select_db($config['database']) or die ('DB Admin connection failed.</td></tr></table></body></html>');
    45. 

  45. 	$rbiSQL = 'SELECT * 
    46. 

  46. 			   FROM employee 
    47. 

  47. 			   WHERE username="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKL"]))).'" and password="'.mysql_real_escape_string(unstripslashes(trim(@$_COOKIE["WRITECKP"]))).'"';
    48. 

  48. 	$rs_rbi = mysql_query($rbiSQL, $db_admin);
    49. 

  49. 	if(mysql_num_rows($rs_rbi) > 0) {
    50. 

  50. 		@$_SESSION["loggedon"] = $storesessionvalue;
    51. 

  51. 	}else{
    52. 

  52. 		$lisuccess=2;
    53. 

  53. 	}
    54. 

  54. 	mysql_free_result($rs_rbi);
    55. 

  55. 	
    56. 

  56. 	include(APPPATH.'views/partials/admin/dbconnection.php');
    57. 

  57. }
    58. 

  58. if(($_SESSION["loggedon"] != $storesessionvalue && $lisuccess!=2) || @$disallowlogin==TRUE) exit;
    59. 

  59. if(@$htmlemails==TRUE) $emlNl = "<br />"; else $emlNl="\n";
    60. 

  60. //old release_stock function was here
    61. 

  61. if($lisuccess==2){
    62. 

  62. ?>
    63. 

  63. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    64. 

  64.         <tr>
    65. 

  65.           <td width="100%">
    66. 

  66.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    67. 

  67. 			  <tr> 
    68. 

  68.                 <td width="100%" colspan="4" align="center"><p>&nbsp;</p><p>&nbsp;</p>
    69. 

  69. 				  <p><strong><?php print $yyOpFai?></strong></p><p>&nbsp;</p>
    70. 

  70. 				  <p><?php print $yyCorCoo?> <?php print $yyCorLI?> <a href="/admin/login.php"><?php print $yyClkHer?></a>.</p>
    71. 

  71. 				</td>
    72. 

  72. 			  </tr>
    73. 

  73. 			</table>
    74. 

  74. 		  </td>
    75. 

  75. 		</tr>
    76. 

  76. 	  </table>
    77. 

  77. <?php
    78. 

  78. }else{
    79. 

  79. $success=true;
    80. 

  80. $alreadygotadmin = getadminsettings();
    81. 

  81. if(@$_POST["updatestatus"]=="1"){
    82. 

  82. 	// updates returns and adds to history
    83. 

  83. 	$result_r=mysql_query("SELECT ordReturnID FROM orders WHERE ordID=".$_POST["orderid"]);
    84. 

  84. 	$row_r=mysql_fetch_assoc($result_r);
    85. 

  85. 	//echo $row_r["ordReturnID"]."=".$_POST["return_status"];
    86. 

  86. 	//exit;
    87. 

  87. 	if($row_r["ordReturnID"]!=$_POST["return_status"] && $_POST["return_status"]>0 ){
    88. 

  88. 		$sql_return_history="INSERT INTO order_returns_history (ordID,reasonID,returnID,date_added) 
    89. 

  89. 		VALUES(".$_POST["orderid"].",".$_POST["return_reason"].",".$_POST["return_status"].",'".date('Y-m-d H:i:s')."')";
    90. 

  90. 		//echo $sql_return_history;
    91. 

  91. 		//exit;
    92. 

  92. 		mysql_query($sql_return_history);
    93. 

  93. 	}
    94. 

  94. 	// end
    95. 

  95. 	mysql_query("UPDATE orders SET ordStatusInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordStatusInfo"]))) ."', ordSupportInfo='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordSupportInfo"]))) . "' , ordReturnID='" . trim(@$_POST["return_status"]) . "' WHERE ordID=" . @$_POST["orderid"]) or print(mysql_error());
    96. 

  96. }elseif(@$_GET["id"] != ""){
    97. 

  97. 	// Commented out below code because we put this into a cron job
    98. 

  98. 	/*if(@$_POST["delccdets"] != ""){
    99. 

  99. 		mysql_query("UPDATE orders SET ordCNum='' WHERE ordID=" . @$_GET["id"]);
    100. 

  100. 	}*/
    101. 

  101. 	$sSQL = "SELECT c.cartProdID,c.cartProdName,c.cartProdPrice,c.cartQuantity,c.cartID,p.pDownload,p.p_iscert,d.dsName,pInStock,pSell,c.cartReason,c.cartNote FROM cart c, products p LEFT JOIN dropshipper d ON p.pDropship=d.dsID WHERE c.cartProdID=p.pID AND c.cartOrderID=" . $_GET["id"];
    102. 

  102. 	$allorders = mysql_query($sSQL) or print(mysql_error().$sSQL);
    103. 

  103. }else{
    104. 

  104. 	// Delete old uncompleted orders.
    105. 

  105. 	//   Commented out below code because we put this into a daily cron job (delcc.php)
    106. 

  106. 	/*if($delccafter != 0){
    107. 

  107. 		$sSQL = "UPDATE orders SET ordCNum='' WHERE ordDate<'" . date("Y-m-d H:i:s", time()-($delccafter*60*60*24)) . "'";
    108. 

  108. 		mysql_query($sSQL) or print(mysql_error().$sSQL);
    109. 

  109. 	}*/
    110. 

  110. 	/*if($delAfter != 0){
    111. 

  111. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-($delAfter*60*60*24)) . "'";
    112. 

  112. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    113. 

  113. 		if(mysql_num_rows($result)>0){
    114. 

  114. 			$delStr="";
    115. 

  115. 			$delOptions="";
    116. 

  116. 			$addcomma = "";
    117. 

  117. 			while($rs = mysql_fetch_assoc($result)){
    118. 

  118. 				$delStr .= $addcomma . $rs["cartOrderID"];
    119. 

  119. 				$delOptions .= $addcomma . $rs["cartID"];
    120. 

  120. 				$addcomma = ",";
    121. 

  121. 			}
    122. 

  122. 			mysql_query("DELETE FROM orders WHERE ordID IN (" . $delStr . ")") or print(mysql_error());
    123. 

  123. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    124. 

  124. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    125. 

  125. 		}
    126. 

  126. 		mysql_free_result($result);
    127. 

  127. 	}else{
    128. 

  128. 		$sSQL = "SELECT cartOrderID,cartID FROM cart WHERE cartCompleted=0 AND cartOrderID=0 AND cartDateAdded<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    129. 

  129. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    130. 

  130. 		if(mysql_num_rows($result)>0){
    131. 

  131. 			$delStr="";
    132. 

  132. 			$delOptions="";
    133. 

  133. 			$addcomma = "";
    134. 

  134. 			while($rs = mysql_fetch_assoc($result)){
    135. 

  135. 				$delStr .= $addcomma . $rs["cartOrderID"];
    136. 

  136. 				$delOptions .= $addcomma . $rs["cartID"];
    137. 

  137. 				$addcomma = ",";
    138. 

  138. 			}
    139. 

  139. 			mysql_query("DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")") or print(mysql_error());
    140. 

  140. 			mysql_query("DELETE FROM cart WHERE cartID IN (" . $delOptions . ")") or print(mysql_error());
    141. 

  141. 		}
    142. 

  142. 		mysql_free_result($result);
    143. 

  143. 	}*/
    144. 

  144. 	$numstatus=0;
    145. 

  145. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    146. 

  146. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    147. 

  147. 	while($rs = mysql_fetch_assoc($result)){
    148. 

  148. 		$allstatus[$numstatus++]=$rs;
    149. 

  149. 	}
    150. 

  150. 	mysql_free_result($result);
    151. 

  151. }
    152. 

  152. if(@$_POST["updatestatus"]=="1"){
    153. 

  153. ?>
    154. 

  154. <script language="JavaScript" type="text/javascript">
    155. 

  155. <!--
    156. 

  156. setTimeout("history.go(-2);",1100);
    157. 

  157. // -->
    158. 

  158. </script>
    159. 

  159. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    160. 

  160.         <tr>
    161. 

  161.           <td width="100%">
    162. 

  162.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    163. 

  163. 			  <tr> 
    164. 

  164.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    165. 

  165.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    166. 

  166. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    167. 

  167. 			  </tr>
    168. 

  168. 			</table>
    169. 

  169. 		  </td>
    170. 

  170. 		</tr>
    171. 

  171. 	  </table>
    172. 

  172. <?php
    173. 

  173. }elseif(!empty($_POST["getdownload"])){
    174. 

  174. 	$sql_down="SELECT * FROM digitaldownloads WHERE type='".$_POST['downloadtype']."' AND active=1 AND orderID=0 LIMIT ".$_POST['downQty'];
    175. 

  175. 	$result_down=mysql_query($sql_down);
    176. 

  176. 	$num_rows_download=mysql_num_rows($result_down);
    177. 

  177. 	if($num_rows_download>0){
    178. 

  178. 		$error=FALSE;
    179. 

  179. 		while($row_download=mysql_fetch_assoc($result_down)){
    180. 

  180. 			$sql_update="UPDATE digitaldownloads SET active=0, orderID=".$_POST['downOrder']." WHERE id=".$row_download['id'];
    181. 

  181. 			$result_update=mysql_query($sql_update);
    182. 

  182. 			if(!$result_update) $error=TRUE;
    183. 

  183. 		}
    184. 

  184. 		if(!$error) $pg_msg= 'Update Successful.';
    185. 

  185. 		else $pg_msg= 'Update Unsuccessful.';
    186. 

  186. 	} else $pg_msg= 'NO License and Password Available.';
    187. 

  187. 	$auto_link = "/admin/orders.php?id=".$_POST['downOrder']."&doedit=true";
    188. 

  188. 	if(!$clone_error) {
    189. 

  189. 			
    190. 

  190. 		}else{
    191. 

  191. 			$auto_link = "/admin/orders.php";
    192. 

  192. 		}
    193. 

  193. 	
    194. 

  194. 	?>
    195. 

  195. 	 <script language="JavaScript" type="text/javascript">
    196. 

  196. 	<!--
    197. 

  197. 	setTimeout("window.location='/admin/orders.php?id=<?=$_POST['downOrder']?>&doedit=true'",4000);
    198. 

  198. 	// -->
    199. 

  199. 	</script>
    200. 

  200. 	 <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    201. 

  201.         <tr>
    202. 

  202.           <td width="100%">
    203. 

  203.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    204. 

  204. 			  <tr> 
    205. 

  205.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    206. 

  206.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    207. 

  207. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    208. 

  208. 			  </tr>
    209. 

  209. 			</table>
    210. 

  210. 		  </td>
    211. 

  211. 		</tr>
    212. 

  212. </table>
    213. 

  213. <? }elseif(!empty($_POST["giftcert"])){	  
    214. 

  214. 	$giftcertOrderID=$_POST["giftcertOrderID"];
    215. 

  215. 	$_SESSION['cert_prod']=$_POST["cert_prod"];
    216. 

  216. 	create_certificate($giftcertOrderID);
    217. 

  217. 	$auto_link = "/admin/orders.php?id=".$giftcertOrderID."&doedit=true";
    218. 

  218. 	$pg_msg='Update Successful.';
    219. 

  219. 	?>
    220. 

  220. 	<script language="JavaScript" type="text/javascript">
    221. 

  221. 	<!--
    222. 

  222. 	setTimeout("window.location='/admin/orders.php?id=<?=$giftcertOrderID?>&doedit=true'",4000);
    223. 

  223. 	// -->
    224. 

  224. 	</script>
    225. 

  225. 	 <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    226. 

  226.         <tr>
    227. 

  227.           <td width="100%">
    228. 

  228.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    229. 

  229. 			  <tr> 
    230. 

  230.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    231. 

  231.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    232. 

  232. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    233. 

  233. 			  </tr>
    234. 

  234. 			</table>
    235. 

  235. 		  </td>
    236. 

  236. 		</tr>
    237. 

  237. </table>
    238. 

  238. <? }elseif(@$_POST["doedit"] == "true"){
    239. 

  239. 	if(!empty($_POST['clone'])) {
    240. 

  240. 		// update old order status after editing
    241. 

  241. 		$ordstatusnew=$_POST["ordstatusnew"];
    242. 

  242. 		$ordStatusInfo=mysql_real_escape_string(trim(unstripslashes($_POST["ordStatusInfo"])));
    243. 

  243. 		$ordSupportInfo=mysql_real_escape_string(trim(unstripslashes($_POST["ordSupportInfo"])));
    244. 

  244. 		$sql_status_update="UPDATE orders SET ordStatus=".$ordstatusnew.",ordStatusInfo='".$ordStatusInfo."',ordSupportInfo='".$ordSupportInfo."' WHERE ordID=".$_POST["orderid"];
    245. 

  245. 		mysql_query($sql_status_update) or print(mysql_error().$sql_status_update);
    246. 

  246. 		if(!setNewLocation( $ordstatusnew , $_POST["orderid"],'Manual' )) print("Unable to record status change.");
    247. 

  247. 

  248. 		// stock manage
    249. 

  249. 		if($ordstatusnew>=3 && $ordstatusnew!=10 && $ordstatusnew!=17) {
    250. 

  250. 			mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    251. 

  251. 			do_stock_management($_POST["orderid"]); 
    252. 

  252. 			mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    253. 

  253. 		}
    254. 

  254. 		// GET ALL THE INFORMATION TO CLONE THE ORDER
    255. 

  255. 		//   - To clone an order we need to duplicate the order's information in the orders, cart, and cartoptions tables
    256. 

  256. 		$aNewOrder = array();
    257. 

  257. 		
    258. 

  258. 		$sql_orders = "SELECT * FROM orders WHERE ordID = " . $_POST["orderid"] ;
    259. 

  259. 		$res_orders = mysql_query($sql_orders) or print(mysql_error().$sql_orders);
    260. 

  260. 		$row_orders = mysql_fetch_assoc($res_orders);
    261. 

  261. 		$aNewOrder["orders"] = $row_orders;
    262. 

  262. 		$aNewOrder["orders"]["ordName"]=mysql_real_escape_string($row_orders["ordName"]);
    263. 

  263. 		$aNewOrder["orders"]["ordShipName"]=mysql_real_escape_string($row_orders["ordShipName"]);
    264. 

  264. 		if ($row_orders["ordShipCountry"] != "") {
    265. 

  265. 			 if ($row_orders["ordShipCountry"] == "United States of America") $aNewOrder["orders"]["ordShipType"]='Standard';
    266. 

  266. 		} else {
    267. 

  267. 			 if ($row_orders["ordCountry"] == "United States of America") $aNewOrder["orders"]["ordShipType"]='Standard';
    268. 

  268. 		}
    269. 

  269. 		
    270. 

  270. 		$sql_cart = "SELECT * FROM cart c LEFT JOIN cartoptions co ON c.cartID = co.coCartID
    271. 

  271. 					 WHERE c.cartOrderID = " . $_POST["orderid"] . "
    272. 

  272. 					 ORDER BY c.cartID, c.cartProdID";
    273. 

  273. 		
    274. 

  274. 		//echo $sql_cart; exit;
    275. 

  275. 		$res_cart = mysql_query($sql_cart) or print(mysql_error().$sql_cart);
    276. 

  276. 		$prod_id = '';
    277. 

  277. 		$i=0;
    278. 

  278. 		$j=0;
    279. 

  279. 		$isfirst = true;
    280. 

  280. 		while($row_cart = mysql_fetch_assoc($res_cart)) {
    281. 

  281. 			if($isfirst) {
    282. 

  282. 				$prod_id = $row_cart["cartProdID"];
    283. 

  283. 			}
    284. 

  284. 			if(($prod_id != $row_cart["cartProdID"]) && !$isfirst) {
    285. 

  285. 				$i++;
    286. 

  286. 				$j=0;
    287. 

  287. 				$prod_id = $row_cart["cartProdID"];
    288. 

  288. 			
    289. 

  289. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    290. 

  290. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    291. 

  291. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    292. 

  292. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    293. 

  293. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    294. 

  294. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    295. 

  295. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    296. 

  296. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    297. 

  297. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    298. 

  298. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    299. 

  299. 				
    300. 

  300. 				if(!empty($row_cart["coID"])){
    301. 

  301. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    302. 

  302. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    303. 

  303. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    304. 

  304. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    305. 

  305. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    306. 

  306. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    307. 

  307. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    308. 

  308. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    309. 

  309. 					$j++;
    310. 

  310. 				}
    311. 

  311. 			}else{
    312. 

  312. 				$aNewOrder["cart"][$i]["cartID"] = $row_cart["cartID"];
    313. 

  313. 				$aNewOrder["cart"][$i]["cartSessionID"] = $row_cart["cartSessionID"];
    314. 

  314. 				$aNewOrder["cart"][$i]["cartProdID"] = $row_cart["cartProdID"];
    315. 

  315. 				$aNewOrder["cart"][$i]["cartProdName"] = $row_cart["cartProdName"];
    316. 

  316. 				$aNewOrder["cart"][$i]["cartProdPrice"] = $row_cart["cartProdPrice"];
    317. 

  317. 				$aNewOrder["cart"][$i]["cartDateAdded"] = $row_cart["cartDateAdded"];
    318. 

  318. 				$aNewOrder["cart"][$i]["cartQuantity"] = $row_cart["cartQuantity"];
    319. 

  319. 				$aNewOrder["cart"][$i]["cartOrderID"] = $row_cart["cartOrderID"];
    320. 

  320. 				$aNewOrder["cart"][$i]["cartCompleted"] = $row_cart["cartCompleted"];
    321. 

  321. 				$aNewOrder["cart"][$i]["cartCustID"] = $row_cart["cartCustID"];
    322. 

  322. 				
    323. 

  323. 				if(!empty($row_cart["coID"])){
    324. 

  324. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coID"] = $row_cart["coID"];
    325. 

  325. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartID"] = $row_cart["coCartID"];
    326. 

  326. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"] = $row_cart["coOptID"];
    327. 

  327. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"] = $row_cart["coOptGroup"];
    328. 

  328. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"] = $row_cart["coCartOption"];
    329. 

  329. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"] = $row_cart["coPriceDiff"];
    330. 

  330. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"] = $row_cart["coWeightDiff"];
    331. 

  331. 					$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"] = $row_cart["coExtendShipping"];
    332. 

  332. 					$j++;
    333. 

  333. 				}
    334. 

  334. 			}
    335. 

  335. 			$isfirst = false;
    336. 

  336. 		}
    337. 

  337. 		
    338. 

  338. 		//showarray($aNewOrder); exit;
    339. 

  339. 		
    340. 

  340. 		// UPDATE SOME OF THE INFORMATION FOR THE CLONED ORDER
    341. 

  341. 		$aNewOrder["orders"]["ordID"] = '';
    342. 

  342. 		$aNewOrder["orders"]["ordSessionID"] = session_id();
    343. 

  343. 		$aNewOrder["orders"]["ordAuthNumber"] = 'CLONED';
    344. 

  344. 		$aNewOrder["orders"]["ordTransID"] = 0;
    345. 

  345. 		$aNewOrder["orders"]["ordShipping"] = 0;
    346. 

  346. 		$aNewOrder["orders"]["ordStateTax"] = 0;
    347. 

  347. 		$aNewOrder["orders"]["ordCountryTax"] = 0;
    348. 

  348. 		$aNewOrder["orders"]["ordHSTTax"] = 0;
    349. 

  349. 		$aNewOrder["orders"]["ordHandling"] = 0;
    350. 

  350. 		$aNewOrder["orders"]["ordTotal"] = 0;
    351. 

  351. 		$aNewOrder["orders"]["ordDate"] = date("Y-m-d H:i:s");
    352. 

  352. 		$aNewOrder["orders"]["ordIP"] = $_SERVER['REMOTE_ADDR'];
    353. 

  353. 		$aNewOrder["orders"]["ordDiscount"] = 0;
    354. 

  354. 		$aNewOrder["orders"]["ordDiscountText"] = '';
    355. 

  355. 		$aNewOrder["orders"]["ordStatus"] = 2;
    356. 

  356. 		$aNewOrder["orders"]["ordStatusDate"] = date("Y-m-d H:i:s");
    357. 

  357. 		$aNewOrder["orders"]["ordStatusInfo"] = '';
    358. 

  358. 		$aNewOrder["orders"]["ordSupportInfo"] = '';
    359. 

  359. 		$aNewOrder["orders"]["order_changed"] = 'no';
    360. 

  360. 		
    361. 

  361. 		for($i=0; $i<count($aNewOrder["cart"]); $i++) {
    362. 

  362. 			$aNewOrder["cart"][$i]["cartSessionID"] = session_id();
    363. 

  363. 			$aNewOrder["cart"][$i]["cartDateAdded"] = date("Y-m-d H:i:s");
    364. 

  364. 		}
    365. 

  365. 		
    366. 

  366. 		//showarray($aNewOrder); exit;
    367. 

  367. 		
    368. 

  368. 		// CREATE CLONED ORDER
    369. 

  369. 		$clone_error = false;
    370. 

  370. 		$sql_cr_ord = "INSERT INTO orders ( ordSessionID , ordName , ordAddress , ordAddress2 , ordCity , ordState , 
    371. 

  371. 											ordZip , ordCountry , ordEmail , ordPhone , ordShipName , ordShipAddress , 
    372. 

  372. 											ordShipAddress2 , ordShipCity , ordShipState , ordShipZip , ordShipCountry , 
    373. 

  373. 											ordAuthNumber , ordAffiliate , ordPayProvider , ordTransID , ordShipping , 
    374. 

  374. 											ordStateTax , ordCountryTax , ordHSTTax , ordHandling , ordShipType , ordTotal , 
    375. 

  375. 											ordDate , ordIP , ordDiscount , ordDiscountText , ordExtra1 , ordExtra2 , ordAddInfo , 
    376. 

  376. 											ordCNum , ordComLoc , ordStatus , ordStatusDate , ordStatusInfo , ordPoApo , 
    377. 

  377. 											ordShipPoApo , ordHowFound , ordSupportInfo , order_changed , ordPmtMessage , 
    378. 

  378. 											ordCCType , ord_cert_id , ord_cert_amt , ordExtra3 , ordExtra4 , ordExtra5 , ordEID , 
    379. 

  379. 											ordEOrderID )
    380. 

  380. 						VALUES ( '".$aNewOrder["orders"]["ordSessionID"]."' , 
    381. 

  381. 								 '".$aNewOrder["orders"]["ordName"]."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordAddress"])."' , 
    382. 

  382. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordAddress2"])."' , '".$aNewOrder["orders"]["ordCity"]."' ,
    383. 

  383. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordState"])."' , '".$aNewOrder["orders"]["ordZip"]."' ,
    384. 

  384. 								 '".$aNewOrder["orders"]["ordCountry"]."' , '".$aNewOrder["orders"]["ordEmail"]."' , 
    385. 

  385. 								 '".$aNewOrder["orders"]["ordPhone"]."' , '".$aNewOrder["orders"]["ordShipName"]."' , 
    386. 

  386. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordShipAddress"])."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordShipAddress2"])."' ,
    387. 

  387. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordShipCity"])."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordShipState"])."' ,
    388. 

  388. 								 '".$aNewOrder["orders"]["ordShipZip"]."' , '".$aNewOrder["orders"]["ordShipCountry"]."' , 
    389. 

  389. 								 '".$aNewOrder["orders"]["ordAuthNumber"]."' , '".$aNewOrder["orders"]["ordAffiliate"]."' , 
    390. 

  390. 								 '".$aNewOrder["orders"]["ordPayProvider"]."' , '".$aNewOrder["orders"]["ordTransID"]."' , 
    391. 

  391. 								 '".$aNewOrder["orders"]["ordShipping"]."' , '".$aNewOrder["orders"]["ordStateTax"]."' , 
    392. 

  392. 								 '".$aNewOrder["orders"]["ordCountryTax"]."' , '".$aNewOrder["orders"]["ordHSTTax"]."' , 
    393. 

  393. 								 '".$aNewOrder["orders"]["ordHandling"]."' , '".$aNewOrder["orders"]["ordShipType"]."' , 
    394. 

  394. 								 '".$aNewOrder["orders"]["ordTotal"]."' , '".$aNewOrder["orders"]["ordDate"]."' , 
    395. 

  395. 								 '".$aNewOrder["orders"]["ordIP"]."' , '".$aNewOrder["orders"]["ordDiscount"]."' , 
    396. 

  396. 								 '".$aNewOrder["orders"]["ordDiscountText"]."' , '".$aNewOrder["orders"]["ordExtra1"]."' , 
    397. 

  397. 								 '".$aNewOrder["orders"]["ordExtra2"]."' , '".mysql_real_escape_string($aNewOrder["orders"]["ordAddInfo"])."' , 
    398. 

  398. 								 '".$aNewOrder["orders"]["ordCNum"]."' , '".$aNewOrder["orders"]["ordComLoc"]."' , 
    399. 

  399. 								 '".$aNewOrder["orders"]["ordStatus"]."' , '".$aNewOrder["orders"]["ordStatusDate"]."' , 
    400. 

  400. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordStatusInfo"])."' , '".$aNewOrder["orders"]["ordPoApo"]."' , 
    401. 

  401. 								 '".$aNewOrder["orders"]["ordShipPoApo"]."' , '".$aNewOrder["orders"]["ordHowFound"]."' , 
    402. 

  402. 								 '".mysql_real_escape_string($aNewOrder["orders"]["ordSupportInfo"])."' , '".$aNewOrder["orders"]["order_changed"]."' , 
    403. 

  403. 								 '".$aNewOrder["orders"]["ordPmtMessage"]."' , '".$aNewOrder["orders"]["ordCCType"]."' , 
    404. 

  404. 								 '".$aNewOrder["orders"]["ord_cert_id"]."' , '".$aNewOrder["orders"]["ord_cert_amt"]."' , 
    405. 

  405. 								 '".$aNewOrder["orders"]["ordExtra3"]."' , '".$aNewOrder["orders"]["ordExtra4"]."' , 
    406. 

  406. 								 '".$aNewOrder["orders"]["ordExtra5"]."' , '".$aNewOrder["orders"]["ordEID"]."' , 
    407. 

  407. 								 '".$aNewOrder["orders"]["ordEOrderID"]."' )";
    408. 

  408. 		//echo $sql_cr_ord; //exit;
    409. 

  409. 		$res_cr_ord = mysql_query($sql_cr_ord);
    410. 

  410. 		if(!$res_cr_ord) {
    411. 

  411. 			print(mysql_error().$sql_cr_ord);
    412. 

  412. 			$clone_error = true;
    413. 

  413. 		}
    414. 

  414. 		$ordID = mysql_insert_id();
    415. 

  415. 		$aNewOrder["orders"]["ordID"] = $ordID;
    416. 

  416. 		//showarray($aNewOrder);
    417. 

  417. 		if(!$clone_error) {
    418. 

  418. 			for($i=0; $i<count($aNewOrder["cart"]); $i++) {	
    419. 

  419. 				$aNewOrder["cart"][$i]["cartOrderID"] = $ordID;
    420. 

  420. 				$sql_cr_cart = "INSERT INTO cart ( cartSessionID , cartProdID , cartProdName , cartProdPrice , cartDateAdded , 
    421. 

  421. 												   cartQuantity , cartOrderID , cartCompleted )
    422. 

  422. 								VALUES ( '".session_id()."' , '".$aNewOrder["cart"][$i]["cartProdID"]."' , 
    423. 

  423. 										 '".$aNewOrder["cart"][$i]["cartProdName"]."' , '".$aNewOrder["cart"][$i]["cartProdPrice"]."' , 
    424. 

  424. 										 '".date("Y-m-d H:i:s")."' , '".$aNewOrder["cart"][$i]["cartQuantity"]."' , 
    425. 

  425. 										 '".$aNewOrder["cart"][$i]["cartOrderID"]."' , 1 )";
    426. 

  426. 				//echo $sql_cr_cart; //exit;
    427. 

  427. 				$res_cr_cart = mysql_query($sql_cr_cart) or print(mysql_error().$sql_cr_cart);
    428. 

  428. 				$cart_id = mysql_insert_id();
    429. 

  429. 				$aNewOrder["cart"][$i]["cartID"] = $cart_id;
    430. 

  430. 				
    431. 

  431. 				for($j=0; $j<count($aNewOrder["cart"][$i]["cartoptions"]); $j++) {
    432. 

  432. 					$sql_cr_cartoptions = "INSERT INTO cartoptions ( coCartID , coOptID , coOptGroup , coCartOption , coPriceDiff , 
    433. 

  433. 																	 coWeightDiff , coExtendShipping )
    434. 

  434. 										   VALUES ( ".$aNewOrder["cart"][$i]["cartID"]." , 
    435. 

  435. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptID"]." , 
    436. 

  436. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coOptGroup"]."' , 
    437. 

  437. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coCartOption"]."' , 
    438. 

  438. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coPriceDiff"]." , 
    439. 

  439. 													".$aNewOrder["cart"][$i]["cartoptions"][$j]["coWeightDiff"]." , 
    440. 

  440. 													'".$aNewOrder["cart"][$i]["cartoptions"][$j]["coExtendShipping"]."' )";
    441. 

  441. 					//echo $sql_cr_cartoptions; //exit;
    442. 

  442. 					$res_cr_cartoptions = mysql_query($sql_cr_cartoptions) or print(mysql_error().$sql_cr_cartoptions);
    443. 

  443. 				}
    444. 

  444. 			}
    445. 

  445. 			//exit;
    446. 

  446. 			// UPDATE INVENTORY
    447. 

  447. 			$sSQL="SELECT cartID,cartProdID,cartQuantity,pSell FROM cart INNER JOIN products ON cart.cartProdID=products.pID WHERE cartOrderID='" . $ordID . "'";
    448. 

  448. 			$result1 = mysql_query($sSQL) or print(mysql_error().$sSQL);
    449. 

  449. 			while($rs1 = mysql_fetch_array($result1)){
    450. 

  450. 				if(($rs1["pSell"] & 2) == 2){
    451. 

  451. 					// Determine extended shipping
    452. 

  452. 					$sSQL2 = "SELECT coID,optStock,cartQuantity,coOptID,optExtend_shipping,optMin FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2";
    453. 

  453. 					// ADDED by Chad - Fix to allow quantity change for custom screenz
    454. 

  454. 					//if(eregi("^[a-z]{1,3}-Custom$",$pID)) {
    455. 

  455. 					if(preg_match("/^[a-z]{1,3}-Custom$/i",$pID)) {
    456. 

  456. 						$sSQL2 .= " OR optType=3";
    457. 

  457. 					}
    458. 

  458. 					// ADD ENDED
    459. 

  459. 					$sSQL2 .= ") AND cartID='" . $rs1['cartID'] . "'";
    460. 

  460. 					$result2 = mysql_query($sSQL2) or print(mysql_error().$sSQL2);
    461. 

  461. 					if(mysql_num_rows($result2)>0){
    462. 

  462. 						while($rs2 = mysql_fetch_assoc($result2)){
    463. 

  463. 							$pInStock = (int)$rs2["optStock"]+1000;
    464. 

  464. 							$actualpInStock = (int)$rs2["optStock"];
    465. 

  465. 							$extend_shipping = $rs2["optExtend_shipping"];//extends shipping time, displayed in the cart
    466. 

  466. 							$min = $rs2["optMin"];//sets how many in stock above zero the extend_shipping is displayed in the cart 
    467. 

  467. 							$coID = $rs2["coID"];
    468. 

  468. 							$totQuant = 0;
    469. 

  469. 							$cartQuantity = (int)$rs2["cartQuantity"];
    470. 

  470. 							$sSQL3 = "SELECT SUM(cartQuantity) AS cartQuant FROM cart INNER JOIN cartoptions ON cart.cartID=cartoptions.coCartID WHERE cartCompleted=0 AND cartCustID=0 AND coOptID=" . $rs2["coOptID"];
    471. 

  471. 							$result3 = mysql_query($sSQL3) or print(mysql_error().$sSQL3);
    472. 

  472. 							if($rs3 = mysql_fetch_assoc($result3))
    473. 

  473. 								if(! is_null($rs3["cartQuant"])) $totQuant = (int)$rs3["cartQuant"];
    474. 

  474. 							mysql_free_result($result3);
    475. 

  475. 							$extend='';
    476. 

  476. 							//echo '<div style"position:absolute; z-index:100;>actual='.$actualpInStock.' total qty='.$totQuant. ' cart qty='.$cartQuantity.' min='. $min. ' new qty='.abs((int)$objValue).'</div>';
    477. 

  477. 							if(($actualpInStock - $totQuant + $cartQuantity - $min) < 0) {
    478. 

  478. 								$extend = $extend_shipping;
    479. 

  479. 							}
    480. 

  480. 							$sql_co="UPDATE cartoptions SET coExtendShipping='$extend' WHERE coID=".$coID;
    481. 

  481. 								mysql_query($sql_co);
    482. 

  482. 						}
    483. 

  483. 					}
    484. 

  484. 					// End of Determine extended shipping
    485. 

  485. 					// Inventory get subtracted when set to authorized
    486. 

  486. 					/*$sSQL = "SELECT coOptID FROM cartoptions INNER JOIN options ON cartoptions.coOptID=options.optID INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE (optType=2 OR optType=-2) AND coCartID=" . $rs1["cartID"];
    487. 

  487. 					$result2 = mysql_query($sSQL) or print(mysql_error());
    488. 

  488. 					while($rs2 = mysql_fetch_array($result2)){
    489. 

  489. 						$sSQL = "UPDATE options SET optStock=optStock-" . $rs1["cartQuantity"] . " WHERE optID=" . $rs2["coOptID"];
    490. 

  490. 						mysql_query($sSQL) or print(mysql_error());
    491. 

  491. 					}
    492. 

  492. 					mysql_free_result($result2);*/
    493. 

  493. 				//}else{
    494. 

  494. 					//$sSQL = "UPDATE products SET pInStock=pInStock-" . $rs1["cartQuantity"] . " WHERE pID='" . $rs1["cartProdID"] . "'";
    495. 

  495. 					//mysql_query($sSQL) or print(mysql_error());
    496. 

  496. 				}
    497. 

  497. 			}
    498. 

  498. 			mysql_free_result($result1);
    499. 

  499. 					
    500. 

  500. 			// INSERT LOCATION
    501. 

  501. 			setNewLocation(2,$ordID,'Manual');
    502. 

  502. 			$sql_insert="INSERT INTO orderssplit (orgOrder,newOrder,movedCardIDs,splitType) VALUES (".$_POST["orderid"].",".$ordID.",'','Cloned')";
    503. 

  503. 			$result_insert = mysql_query($sql_insert);
    504. 

  504. 			if(!$result_insert) {print(mysql_error().$sql_insert);exit;}
    505. 

  505. 		}
    506. 

  506. 		
    507. 

  507. 		if($clone_error) {
    508. 

  508. 			$pg_msg = "There was a problem cloning your order.";
    509. 

  509. 		}else{
    510. 

  510. 			$pg_msg = "Your order has been cloned successfully.";
    511. 

  511. ?>
    512. 

  512. <script language="JavaScript" type="text/javascript">
    513. 

  513. <!--
    514. 

  514. //setTimeout("history.go(-2);",1100);
    515. 

  515. setTimeout("window.location='/admin/orders.php?id=<?=$ordID?>&doedit=true'",4000);
    516. 

  516. // -->
    517. 

  517. </script>
    518. 

  518. <?php
    519. 

  519. 		}
    520. 

  520. 		
    521. 

  521. 		if(!$clone_error) {
    522. 

  522. 			$auto_link = "/admin/orders.php?id=$ordID&doedit=true";
    523. 

  523. 		}else{
    524. 

  524. 			$auto_link = "/admin/orders.php";
    525. 

  525. 		}
    526. 

  526. ?>
    527. 

  527. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    528. 

  528.         <tr>
    529. 

  529.           <td width="100%">
    530. 

  530.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    531. 

  531. 			  <tr> 
    532. 

  532.                 <td width="100%" colspan="4" align="center"><br /><strong><?=$pg_msg?></strong><br /><br />You will now be forwarded to view the order.<br /><br />
    533. 

  533.                         <?php print $yyNoAuto?> <a href="<?=$auto_link?>"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    534. 

  534. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    535. 

  535. 			  </tr>
    536. 

  536. 			</table>
    537. 

  537. 		  </td>
    538. 

  538. 		</tr>
    539. 

  539. 	  </table>
    540. 

  540. <?php
    541. 

  541. 	}else{
    542. 

  542. 		$OWSP = "";
    543. 

  543. 		$sSQL = "SELECT ordSessionID FROM orders WHERE ordID='" . $_POST["orderid"] . "'";
    544. 

  544. 		$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    545. 

  545. 		$rs = mysql_fetch_array($result);
    546. 

  546. 		$thesessionid = $rs["ordSessionID"];
    547. 

  547. 		mysql_free_result($result);
    548. 

  548. 		$sSQL = "UPDATE orders SET ";
    549. 

  549. 		$sSQL .= "ordName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["name"]))) . "',";
    550. 

  550. 		$sSQL .= "ordAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address"]))) . "',";
    551. 

  551. 		if(@$useaddressline2==TRUE) $sSQL .= "ordAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["address2"]))) . "',";
    552. 

  552. 		$sSQL .= "ordCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["city"]))) . "',";
    553. 

  553. 		$sSQL .= "ordPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["APO"]))) . "',";
    554. 

  554. 		$sSQL .= "ordState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["state"]))) . "',";
    555. 

  555. 		$sSQL .= "ordZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["zip"]))) . "',";
    556. 

  556. 		$sSQL .= "ordCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["country"]))) . "',";
    557. 

  557. 		$sSQL .= "ordEmail='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["email"]))) . "',";
    558. 

  558. 		$sSQL .= "ordPhone='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["phone"]))) . "',";
    559. 

  559. 		$sSQL .= "ordShipName='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["sname"]))) . "',";
    560. 

  560. 		$sSQL .= "ordShipAddress='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress"]))) . "',";
    561. 

  561. 		if(@$useaddressline2==TRUE) $sSQL .= "ordShipAddress2='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["saddress2"]))) . "',";
    562. 

  562. 		$sSQL .= "ordShipCity='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["scity"]))) . "',";
    563. 

  563. 		$sSQL .= "ordShipPoApo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ShipAPO"]))) . "',";
    564. 

  564. 		$sSQL .= "ordShipState='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["sstate"]))) . "',";
    565. 

  565. 		$sSQL .= "ordShipZip='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["szip"]))) . "',";
    566. 

  566. 		$sSQL .= "ordShipCountry='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["scountry"]))) . "',";
    567. 

  567. 		$sSQL .= "ordShipType='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["shipmethod"]))) . "',";
    568. 

  568. 		$sSQL .= "ordIP='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ipaddress"]))) . "',";
    569. 

  569. 		$ordComLoc = 0;
    570. 

  570. 		if(trim(@$_POST["commercialloc"])=="Y") $ordComLoc = 1;
    571. 

  571. 		if(trim(@$_POST["wantinsurance"])=="Y") $ordComLoc += 2;
    572. 

  572. 		$sSQL .= "ordComLoc=" . $ordComLoc . ",";
    573. 

  573. 		$sSQL .= "ordAffiliate='" . trim(@$_POST["PARTNER"]) . "',";
    574. 

  574. 		$sSQL .= "ordAddInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordAddInfo"]))) . "',";
    575. 

  575. 		$sSQL .= "ordStatus=" . $ordstatusnew . ",";
    576. 

  576. 		$sSQL .= "ordStatusInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordStatusInfo"]))) . "',";
    577. 

  577. 		$sSQL .= "ordReturnID=". trim(@$_POST["return_status"]) . ",";		
    578. 

  578. 		$sSQL .= "ordSupportInfo='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["ordSupportInfo"]))) . "',";
    579. 

  579. 		$sSQL .= "order_changed='yes',";
    580. 

  580. 		$sSQL .= "ordDiscountText='" . mysql_real_escape_string(trim(unstripslashes(@$_POST["discounttext"]))) . "',";
    581. 

  581. 		$sSQL .= "ordExtra1='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra1"]))) . "',";
    582. 

  582. 		$sSQL .= "ordExtra2='" . mysql_real_escape_string(unstripslashes(trim(@$_POST["ordextra2"]))) . "',";
    583. 

  583. 		$sSQL .= "ordShipping='" . mysql_real_escape_string(trim(@$_POST["ordShipping"])) . "',";
    584. 

  584. 		$sSQL .= "ordStateTax='" . mysql_real_escape_string(trim(@$_POST["ordStateTax"])) . "',";
    585. 

  585. 		$sSQL .= "ordCountryTax='" . mysql_real_escape_string(trim(@$_POST["ordCountryTax"])) . "',";
    586. 

  586. 		if(@$canadataxsystem==TRUE) $sSQL .= "ordHSTTax='" . mysql_real_escape_string(trim(@$_POST["ordHSTTax"])) . "',";
    587. 

  587. 		$sSQL .= "ordDiscount='" . mysql_real_escape_string(trim(@$_POST["ordDiscount"])) . "',";
    588. 

  588. 		$sSQL .= "ordHandling='" . mysql_real_escape_string(trim(@$_POST["ordHandling"])) . "',";
    589. 

  589. 		$sSQL .= "ordAuthNumber='" . mysql_real_escape_string(trim(@$_POST["ordAuthNumber"])) . "',";
    590. 

  590. 		$sSQL .= "ordTransID='" . mysql_real_escape_string(trim(@$_POST["ordTransID"])) . "',";
    591. 

  591. 		$sSQL .= "ordTotal='" . mysql_real_escape_string(trim(@$_POST["ordtotal"])) . "',";
    592. 

  592. 		$sSQL .= "ord_cert_amt='" . mysql_real_escape_string(trim(@$_POST["ord_cert_amt"])) . "'";
    593. 

  593. 		$sSQL .= " WHERE ordID='" . $_POST["orderid"] . "'";
    594. 

  594. 		mysql_query($sSQL) or print(mysql_error().$sSQL);
    595. 

  595. 		
    596. 

  596. 		if(!setNewLocation( $ordstatusnew , $_POST["orderid"],'Manual' )) print("Unable to record status change.");
    597. 

  597. 		$msg='';
    598. 

  598. 		foreach($_POST as $objItem => $objValue){
    599. 

  599. 			//print $objItem . " : " . $objValue . "<br>";
    600. 

  600. 			if(substr($objItem,0,6)=="prodid"){
    601. 

  601. 				$idno = (int)substr($objItem, 6);
    602. 

  602. 				$cartid = trim(@$_POST["cartid" . $idno]);
    603. 

  603. 				$prodid = trim(@$_POST["prodid" . $idno]);
    604. 

  604. 				$quant = trim(@$_POST["quant" . $idno]);
    605. 

  605. 				$theprice = trim(@$_POST["price" . $idno]);
    606. 

  606. 				$prodname = trim(@$_POST["prodname" . $idno]);
    607. 

  607. 				$delitem = trim(@$_POST["del_" . $idno]);
    608. 

  608. 				$certID = trim(@$_POST["certID" . $idno]);
    609. 

  609. 				$reason = trim(@$_POST["reason_" . $idno]);
    610. 

  610. 				$note = trim(@$_POST["note_" . $idno]);
    611. 

  611. 				
    612. 

  612. 				if($delitem=="yes"){
    613. 

  613. 					// Added By Blake
    614. 

  614. 					// Deletes License ID and Password from downloads
    615. 

  615. 					$sql_check="SELECT p.pDownload,p.p_iscert,c.cartOrderID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    616. 

  616. 					$result_check=mysql_query($sql_check);
    617. 

  617. 					$rs_check=mysql_fetch_assoc($result_check);
    618. 

  618. 					if(!empty($rs_check["pDownload"])){
    619. 

  619. 						$sql_down="UPDATE digitaldownloads SET active=1, orderID=0 WHERE orderID=".$rs_check['cartOrderID']." AND type='".$prodid."'";
    620. 

  620. 						mysql_query($sql_down) or print(mysql_error().$sql_down);
    621. 

  621. 					}
    622. 

  622. 					//deletes gift cert
    623. 

  623. 					if($rs_check["p_iscert"]==1 && !empty($certID)){
    624. 

  624. 						$sql_cert="DELETE FROM certificates WHERE cert_id=".$certID;
    625. 

  625. 						mysql_query($sql_cert) or print(mysql_error().$sql_cert);
    626. 

  626. 					}
    627. 

  627. 					//end
    628. 

  628. 					mysql_query("DELETE FROM cart WHERE cartID=" . $cartid) or print(mysql_error());
    629. 

  629. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    630. 

  630. 					$cartid = "";
    631. 

  631. 				}elseif($cartid != ""){
    632. 

  632. 					$sSQL = "UPDATE cart SET cartProdID='" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',cartProdPrice=" . $theprice . ",cartProdName='" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',cartQuantity=" . $quant . ", cartReason=" . $reason . ", cartNote='" . $note . "' WHERE cartID=" . $cartid;
    633. 

  633. 					mysql_query($sSQL) or print(mysql_error().$sSQL);
    634. 

  634. 					mysql_query("DELETE FROM cartoptions WHERE coCartID=" . $cartid) or print(mysql_error());
    635. 

  635. 					//download license ID and Password
    636. 

  636. 					$sql_check2="SELECT p.pDownload,p.p_iscert,c.cartOrderID,pID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    637. 

  637. 					$result_check2=mysql_query($sql_check2);
    638. 

  638. 					$rs_check2=mysql_fetch_assoc($result_check2);
    639. 

  639. 					if(!empty($rs_check2["pDownload"])){
    640. 

  640. 						$sql_down_check="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND orderID=".$_POST["orderid"];
    641. 

  641. 						$result_down_check=mysql_query($sql_down_check);
    642. 

  642. 						$num_rows_download_check=mysql_num_rows($result_down_check);
    643. 

  643. 						$quantdownloads=$quant-$num_rows_download_check;
    644. 

  644. 						if($quantdownloads>0){
    645. 

  645. 							$sql_down1="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND active=1 AND orderID=0 LIMIT ".$quantdownloads;
    646. 

  646. 							$result_down1=mysql_query($sql_down1);
    647. 

  647. 							$num_rows_download1=mysql_num_rows($result_down1);
    648. 

  648. 							if($num_rows_download1>0){
    649. 

  649. 								$error=FALSE;
    650. 

  650. 

  651. 								while($row_download1=mysql_fetch_assoc($result_down1)){
    652. 

  652. 									$sql_update1="UPDATE digitaldownloads SET active=0, orderID=".$_POST["orderid"]." WHERE id=".$row_download1['id'];
    653. 

  653. 									$result_update1=mysql_query($sql_update1);
    654. 

  654. 									if(!$result_update1) $error=TRUE;
    655. 

  655. 								}
    656. 

  656. 							}
    657. 

  657. 						}elseif($quantdownloads<0){
    658. 

  658. 							$thisquantdownloads=$quantdownloads;
    659. 

  659. 							while($row_down_check=mysql_fetch_assoc($result_down_check)){
    660. 

  660. 								$sql_update2="UPDATE digitaldownloads SET active=1, orderID=0 WHERE id=".$row_down_check["id"];
    661. 

  661. 								$result_update2=mysql_query($sql_update2);
    662. 

  662. 								$thisquantdownloads++;
    663. 

  663. 								if($thisquantdownloads==0) break;
    664. 

  664. 							}
    665. 

  665. 						}
    666. 

  666. 					}
    667. 

  667. 				}else{
    668. 

  668. 					$sSQL = "INSERT INTO cart (cartSessionID,cartProdID,cartQuantity,cartCompleted,cartProdName,cartProdPrice,cartOrderID,cartReason,cartDateAdded) VALUES (";
    669. 

  669. 					$sSQL .= "'" . $thesessionid . "',";
    670. 

  670. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodid))) . "',";
    671. 

  671. 					$sSQL .= $quant . ",";
    672. 

  672. 					$sSQL .= "1,";
    673. 

  673. 					$sSQL .= "'" . mysql_real_escape_string(trim(unstripslashes($prodname))) . "',";
    674. 

  674. 					$sSQL .= "'" . $theprice . "',";
    675. 

  675. 					$sSQL .= @$_POST["orderid"] . ",";
    676. 

  676. 					if($reason=="") $reason=0;
    677. 

  677. 					$sSQL .= $reason . ",";
    678. 

  678. 					$sSQL .= "'" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "')";
    679. 

  679. 					mysql_query($sSQL) or print(mysql_error().$sSQL);
    680. 

  680. 					$cartid = mysql_insert_id();
    681. 

  681. 					//download license ID and Password
    682. 

  682. 					$sql_check2="SELECT p.pDownload,p.p_iscert,c.cartOrderID,pID FROM products p, cart c WHERE p.pID=c.cartProdID AND c.cartID=".$cartid;
    683. 

  683. 					$result_check2=mysql_query($sql_check2);
    684. 

  684. 					$rs_check2=mysql_fetch_assoc($result_check2);
    685. 

  685. 

  686. 					if(!empty($rs_check2["pDownload"])){
    687. 

  687. 						$sql_down1="SELECT * FROM digitaldownloads WHERE type='".$rs_check2["pID"]."' AND active=1 AND orderID=0 LIMIT ".$quant;
    688. 

  688. 						$result_down1=mysql_query($sql_down1);
    689. 

  689. 						$num_rows_download1=mysql_num_rows($result_down1);
    690. 

  690. 						if($num_rows_download1>0){
    691. 

  691. 							$error=FALSE;
    692. 

  692. 							while($row_download1=mysql_fetch_assoc($result_down1)){
    693. 

  693. 								$sql_update1="UPDATE digitaldownloads SET active=0, orderID=".$_POST["orderid"]." WHERE id=".$row_download1['id'];
    694. 

  694. 								$result_update1=mysql_query($sql_update1);
    695. 

  695. 								if(!$result_update1) $error=TRUE;
    696. 

  696. 							}
    697. 

  697. 						} else $pg_msg= 'NO License and Password Available.';
    698. 

  698. 					}
    699. 

  699. 				}
    700. 

  700. 				if($cartid != ""){
    701. 

  701. 					$optprefix = "optn" . $idno . '_';					
    702. 

  702. 					$prefixlen = strlen($optprefix);
    703. 

  703. 					$isemailcert=FALSE;
    704. 

  704. 					foreach($_POST as $kk => $kkval){
    705. 

  705. 						if(substr($kk,0,$prefixlen)==$optprefix && trim($kkval) != ''){
    706. 

  706. 							$optidarr = explode('|', $kkval);
    707. 

  707. 							$optid = $optidarr[0];
    708. 

  708. 							if(@$_POST["v" . $kk] == ""){
    709. 

  709. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)."," . $OWSP . "optPriceDiff,optWeightDiff,optType,optFlags FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    710. 

  710. 								$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    711. 

  711. 								if($rs = mysql_fetch_array($result)){
    712. 

  712. 									if($rs["optName"]=='Email') $isemailcert=TRUE;
    713. 

  713. 									if(abs($rs["optType"]) != 3){
    714. 

  714. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string($rs[getlangid("optName",32)]) . "',";
    715. 

  715. 										$sSQL .= $optidarr[1] . ",0)";
    716. 

  716. 									}else
    717. 

  717. 										$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','',0,0)";
    718. 

  718. 									mysql_query($sSQL) or print(mysql_error().$sSQL);
    719. 

  719. 								}
    720. 

  720. 								mysql_free_result($result);
    721. 

  721. 							}else{
    722. 

  722. 								$sSQL="SELECT optID,".getlangid("optGrpName",16).",".getlangid("optName",32)." FROM options LEFT JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optID='" . mysql_real_escape_string($kkval) . "'";
    723. 

  723. 								$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    724. 

  724. 								$rs = mysql_fetch_array($result);
    725. 

  725. 								if($rs["optName"]=='Email') $isemailcert=TRUE;
    726. 

  726. 								$sSQL = "INSERT INTO cartoptions (coCartID,coOptID,coOptGroup,coCartOption,coPriceDiff,coWeightDiff) VALUES (" . $cartid . "," . $rs["optID"] . ",'" . mysql_real_escape_string($rs[getlangid("optGrpName",16)]) . "','" . mysql_real_escape_string(unstripslashes(trim(@$_POST["v" . $kk]))) . "',0,0)";
    727. 

  727. 								mysql_query($sSQL) or print(mysql_error().$sSQL);
    728. 

  728. 								mysql_free_result($result);
    729. 

  729. 							}
    730. 

  730. 							//gift cert
    731. 

  731. 							if($isemailcert){
    732. 

  732. 								$giftcertOrderID=$_POST["orderid"];
    733. 

  733. 								$_SESSION['cert_prod']=$prodid;
    734. 

  734. 								create_certificate($giftcertOrderID);
    735. 

  735. 							}
    736. 

  736. 						}
    737. 

  737. 					}
    738. 

  738. 				}
    739. 

  739. 			}			
    740. 

  740. 		}
    741. 

  741. 		//echo 'edit new='.$ordstatusnew.' '.$_POST["orderid"];
    742. 

  742. 		$ordstatusnew=$_POST["ordstatusnew"];
    743. 

  743. 		// stock manage
    744. 

  744. 		if($ordstatusnew>=3 && $ordstatusnew!=10 && $ordstatusnew!=17) {
    745. 

  745. 			mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    746. 

  746. 			do_stock_management($_POST["orderid"]); //echo 'do_stock_management 2';
    747. 

  747. 			mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["orderid"]) or print(mysql_error());
    748. 

  748. 		}
    749. 

  749. ?>
    750. 

  750. 	<script language="JavaScript" type="text/javascript">
    751. 

  751. 	<!--
    752. 

  752. 	//setTimeout("history.go(-2);",1100);
    753. 

  753. 	setTimeout("window.location='/admin/orders.php?ordid=<?=$_POST["orderid"]?>'",1100);
    754. 

  754. 	// -->
    755. 

  755. 	</script>
    756. 

  756. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    757. 

  757.         <tr>
    758. 

  758.           <td width="100%">
    759. 

  759.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    760. 

  760. 			  <tr> 
    761. 

  761.                 <td width="100%" colspan="4" align="center"><br /><strong><?php print $yyUpdSuc?></strong><br /><br /><?php print $yyNowFrd?><br /><br />
    762. 

  762.                         <?php print $yyNoAuto?> <a href="javascript:history.go(-2)"><strong><?php print $yyClkHer?></strong></a>.<br /><br />
    763. 

  763. 						<img src="/lib/images/misc/clearpixel.gif" width="300" height="3" alt="" /></td>
    764. 

  764. 			  </tr>
    765. 

  765. 			</table>
    766. 

  766. 		  </td>
    767. 

  767. 		</tr>
    768. 

  768. 	  </table>
    769. 

  769. <?php
    770. 

  770. 	}
    771. 

  771. }elseif(@$_GET["id"] != ""){
    772. 

  772. 	$statetaxrate=0;
    773. 

  773. 	$countrytaxrate=0;
    774. 

  774. 	$hsttaxrate=0;
    775. 

  775. 	$countryorder=0;
    776. 

  776. 	$sSQL = "SELECT ordID,ordName,ordAddress,ordAddress2,ordCity,ordState,ordZip,ordCountry,ordEmail,ordPhone,ordShipName,ordShipAddress,ordShipAddress2,ordShipCity,ordShipState,ordShipZip,ordShipCountry,ordPayProvider,ordAuthNumber,ordTransID,ordTotal,ordDate,ordStateTax,ordCountryTax,ordHSTTax,ordShipping,ordShipType,ordIP,ordAffiliate,ordDiscount,ordHandling,ordDiscountText,ordComLoc,ordExtra1,ordExtra2,ordAddInfo,ordCNum,ordStatusInfo,ordSupportInfo,order_changed,ordStatus,ord_cert_amt,ord_cert_id,ordPoApo,ordShipPoApo,ordEID,ordReturnID,ordReturnReasonID FROM orders LEFT JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider WHERE ordID='" . $_GET["id"] . "' AND ordEID!=34";
    777. 

  777. 	//echo $sSQL;
    778. 

  778. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    779. 

  779. 	$alldata = mysql_fetch_array($result);
    780. 

  780. 	$alldata["ordDate"] = strtotime($alldata["ordDate"]);	
    781. 

  781. 	$oldordstatusedit=$alldata["ordStatus"];
    782. 

  782. 	mysql_free_result($result);
    783. 

  783. 	//all stutuses
    784. 

  784. 	$numstatus=0;
    785. 

  785. 	$sSQL = "SELECT statID,statPrivate FROM orderstatus WHERE statPrivate<>'' ORDER BY statID";
    786. 

  786. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    787. 

  787. 	while($rs = mysql_fetch_assoc($result)){
    788. 

  788. 		$allstatus[$numstatus++]=$rs;
    789. 

  789. 	}
    790. 

  790. 	mysql_free_result($result);
    791. 

  791. ?>
    792. 

  792. 	<table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="">
    793. 

  793.         <tr>
    794. 

  794.           <td width="100%" align="center">
    795. 

  795. <?php	$themask = 'yyyy-mm-dd';
    796. 

  796. 		if($admindateformat==1)
    797. 

  797. 			$themask='mm/dd/yyyy';
    798. 

  798. 		elseif($admindateformat==2)
    799. 

  799. 			$themask='dd/mm/yyyy';
    800. 

  800. 		if(! $success) print "<p><font color='#FF0000'>" . $errmsg . "</font></p>"; ?>
    801. 

  801. 			<span name="searchspan" id="searchspan" <?php //if($usepowersearch) print 'style="display:block"'; else print 'style="display:none"'?>>
    802. 

  802.             <table width="100%" border="0" cellspacing="1" cellpadding="2" bgcolor="">
    803. 

  803. 			  <form method="post" action="/admin/orders.php" name="psearchform">
    804. 

  804. 			  <input type="hidden" name="powersearch" value="1" />
    805. 

  805. 			  <tr bgcolor="#030133"><td colspan="6"><strong><font color="#E7EAEF">&nbsp;<?php print $yyPowSea?></font></strong></td></tr>
    806. 

  806. 			  <tr bgcolor="#E7EAEF"> 
    807. 

  807.                 <td align="right" width="15%"><strong><?php print $yyOrdFro?>:</strong></td>
    808. 

  808. 				<td width="15%" align="left" nowrap="nowrap">&nbsp;
    809. 

  809. 			    <input type="text" size="14" name="fromdate" value="<?php print $fromdate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.fromdate, '<?php print $themask?>', 0)" value='DP' /></td>
    810. 

  810. 				<td width="15%" align="right"><strong>E-tailers:</strong></td>
    811. 

  811. 				<td align="left" width="15%">
    812. 

  812. 				<select name="custID">
    813. 

  813. 				 	<option value="" <?=(empty($_POST['custID']))?' selected="selected"':''?>>None Selected</option>
    814. 

  814. 				 <? 
    815. 

  815. 				 $sql_EID="SELECT custID, Name FROM customers WHERE active=1";
    816. 

  816. 				 $result_EID=mysql_query($sql_EID);
    817. 

  817. 				 while($rs_EID=mysql_fetch_array($result_EID)){ ?>
    818. 

  818. 					  	<option value="<?=$rs_EID['custID']?>" <? if($_POST['custID']==$rs_EID['custID']) echo " selected"?>><?= str_replace('<br />',' ',$rs_EID['Name'])?></option>
    819. 

  819. 				<? } ?> 
    820. 

  820. 				 </select>				</td>
    821. 

  821. 				<td align="right" width="20%"><strong><?php print $yyOrdTil?>:</strong></td>
    822. 

  822. 				<td align="left" width="25%">&nbsp;<input type="text" size="14" name="todate" value="<?php print $todate?>" /> <input type=button onclick="popUpCalendar(this, document.forms.psearchform.todate, '<?php print $themask?>', -205)" value='DP' /></td>
    823. 

  823. 			  </tr>
    824. 

  824. 			  <tr bgcolor="#EAECEB">
    825. 

  825. 				<td align="right"><strong><?php print $yyOrdId?>:</strong></td>
    826. 

  826. 				<td align="left">&nbsp;<input type="text" size="14" name="ordid" value="<?php print $ordid?>" /><img src="/lib/images/misc/info_icon.png" id="myfrogz_info" align="absmiddle" /></td>
    827. 

  827. 				<td align="right"><strong>PO/APOs:</strong></td>
    828. 

  828. 				<td align="left">
    829. 

  829. 					<select id="ordPOAPOs" name="ordPOAPOs">
    830. 

  830. 						<option value="none"<?=(empty($_POST['ordPOAPOs']))?' selected="selected"':''?>>None Selected</option>
    831. 

  831. 						<option value="APOs"<?=($_POST['ordPOAPOs'] == 'APOs')?' selected="selected"':''?>>APOs</option>
    832. 

  832. 						<option value="PO_APO"<?=($_POST['ordPOAPOs'] == 'PO_APO')?' selected="selected"':''?>>PO/APOs</option>
    833. 

  833. 						<option value="POs"<?=($_POST['ordPOAPOs'] == 'POs')?' selected="selected"':''?>>POs</option>
    834. 

  834. 						<option value="shipping_APOs"<?=($_POST['ordPOAPOs'] == 'shipping_APOs')?' selected="selected"':''?>>Shipping to APOs</option>
    835. 

  835. 						<option value="shipping_PO_APO"<?=($_POST['ordPOAPOs'] == 'shipping_PO_APO')?' selected="selected"':''?>>Shipping to PO/APOs</option>
    836. 

  836. 						<option value="shipping_POs"<?=($_POST['ordPOAPOs'] == 'shipping_POs')?' selected="selected"':''?>>Shipping to POs</option>
    837. 

  837. 					</select>				</td>
    838. 

  838. 				<td align="right"><strong><?php print $yySeaTxt?>:</strong></td>
    839. 

  839. 				<td align="left" valign="middle">&nbsp;
    840. 

  840. 				  <input type="text" size="24" name="searchtext" value="<?php print $origsearchtext?>" /></td>
    841. 

  841. 			  </tr>
    842. 

  842. 			  <tr bgcolor="#E7EAEF">
    843. 

  843. 				<td rowspan="2" align="right"><strong><?php print $yyOrdSta?>:</strong></td>
    844. 

  844. 				<td rowspan="2" align="left">&nbsp;<select name="ordstatus[]" size="5" multiple><option value="9999" <?php if(strpos($ordstatus,"9999") !== FALSE) print "selected"?>><?php print $yyAllSta?></option><?php
    845. 

  845. 						$ordstatus="";
    846. 

  846. 						$addcomma = "";
    847. 

  847. 						if(is_array(@$_REQUEST["ordstatus"])){
    848. 

  848. 							foreach($_REQUEST["ordstatus"] as $objValue){
    849. 

  849. 								if(is_array($objValue))$objValue=$objValue[0];
    850. 

  850. 								$ordstatus .= $addcomma . $objValue;
    851. 

  851. 								$addcomma = ",";
    852. 

  852. 							}
    853. 

  853. 						}else
    854. 

  854. 							$ordstatus = trim(@$_REQUEST["ordstatus"]);
    855. 

  855. 						$ordstatusarr = explode(",", $ordstatus);
    856. 

  856. 						for($index=0; $index < $numstatus; $index++){
    857. 

  857. 							print '<option value="' . $allstatus[$index]["statID"] . '"';
    858. 

  858. 							if(is_array($ordstatusarr)){
    859. 

  859. 								foreach($ordstatusarr as $objValue)
    860. 

  860. 									if($objValue==$allstatus[$index]["statID"]) print " selected";
    861. 

  861. 							}
    862. 

  862. 							print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    863. 

  863. 						} ?></select>				</td>
    864. 

  864. 				<td rowspan="2" align="right"><strong><?=$yyOrdCou?>:</strong></td>
    865. 

  865. 				<td rowspan="2" align="left">
    866. 

  866. 				<? $sSQL2="SELECT DISTINCT cpnID,cpnName,cpnNumber FROM orders o LEFT JOIN coupons c ON o.ordCoupon=c.cpnID WHERE ordDiscount>0 ORDER BY cpnNumber,cpnName";
    867. 

  867. 					$result2=mysql_query($sSQL2) or die(mysql_error().$sSQL2);
    868. 

  868. 					$total2=mysql_num_rows($result2);?>
    869. 

  869. 					<select name="ordcoupon" size="5" style="width:250px; font-size:10px; ">
    870. 

  870. 					 	<? while($rs2=mysql_fetch_array($result2)){ ?>
    871. 

  871. 					  	<option value="<?=$rs2['cpnID']?>" <?=$rs2['cpnNumber']==""?"":'style="font-weight:bold;"'?> <? if($ordcoupon==$rs2['cpnID']) echo " selected"?>><?=$rs2['cpnNumber']==""?"":$rs2['cpnNumber'].' | '?> <?= str_replace('<br />',' ',$rs2['cpnName'])?></option>
    872. 

  872. 						<? } ?>
    873. 

  873. 					</select>
    874. 

  874. 					<div style="font-size:9px;">Coupons are in bold</div>
    875. 

  875. 					</td>
    876. 

  876. 				<td align="right" valign="middle"><strong>Return Status:</strong></td>
    877. 

  877. 				<td align="left" valign="middle">
    878. 

  878. 						<?
    879. 

  879. 						$sql_return="SELECT * FROM returns ORDER BY status_order";
    880. 

  880. 						$result_return=mysql_query($sql_return);
    881. 

  881. 						?>
    882. 

  882. 						<select name="return_status_search">
    883. 

  883. 						  <option value="" <?php if ($_SESSION['return_status_search']=="") {echo "selected=\"selected\"";} ?>></option>
    884. 

  884. 						  <? while($row_return=mysql_fetch_assoc($result_return)){?>
    885. 

  885. 						  <option value="<?=$row_return["id"]?>" <?php if (!(strcmp($row_return["id"], $_SESSION['return_status_search']))) {echo "selected=\"selected\"";} ?>>
    886. 

  886. 						  <?=$row_return["status"]?>
    887. 

  887. 						  </option>
    888. 

  888. 						  <? } ?>
    889. 

  889. 					  </select></td>
    890. 

  890. 			  </tr>	
    891. 

  891. 			  <tr bgcolor="#E7EAEF">
    892. 

  892. 			    <td align="right" valign="top">&nbsp;</td>
    893. 

  893. 			    <td align="left">			</td>
    894. 

  894. 			    </tr>		  
    895. 

  895. 			  <tr bgcolor="#E7EAEF">
    896. 

  896. 				<td colspan="3" align="left"><input type="checkbox" name="startwith" value="1" <?php if($usepowersearch) print "checked"?> />				  <strong><?php print $yyStaPow?></strong></td>
    897. 

  897. 				<td align="left" valign="center"><img src="/lib/images/misc/info_icon.png" id="myfrogz_info" /><input type="checkbox" name="myfrogz" value="myfrogz" id="myfrogz"<?=(!empty($isMyFrogz)) ? ' checked="checked"' : ''?> />&nbsp;MyFrogz Orders</td>
    898. 

  898. 				<td colspan="2" align="center">
    899. 

  899. 				  <input type="submit" value="<?php print $yySearch?>" /> <input type="button" value="Stats" onclick="document.forms.psearchform.action='/admin/stats1.php';document.forms.psearchform.submit();" /></td>
    900. 

  900. 			  </tr>
    901. 

  901. 			  
    902. 

  902. 			  <tr>
    903. 

  903. 			  	<td colspan="6">
    904. 

  904. 				<?
    905. 

  905. 					$sql_status =  "SELECT count( * ) as statcount , os.statPrivate , os.statID
    906. 

  906. 									FROM orders o, orderstatus os
    907. 

  907. 									WHERE o.ordStatus = os.statID
    908. 

  908. 									AND (o.ordStatus BETWEEN 0 AND 10 OR o.ordStatus = 17)
    909. 

  909. 									AND o.ordName != ''
    910. 

  910. 									GROUP BY os.statID,os.statPrivate";
    911. 

  911. 					$result_status=mysql_query($sql_status);
    912. 

  912. 					while($row_status=mysql_fetch_assoc($result_status)){?>
    913. 

  913. 			  		<div style="color:#000066; font-weight:bold; border:#030133 solid 1px; margin:2px; float:left; width:146px;padding:2px; text-align:center; background-color:#E7EAEF;"><a href="/admin/orders.php?powersearch=1&ordstatus=<?=$row_status['statID']?>"><?=$row_status['statID'].'-'.$row_status['statPrivate'].': '.$row_status['statcount'] ?></a></div>
    914. 

  914. 			  	<? } ?>			  	</td>
    915. 

  915. 			  </tr>
    916. 

  916. 			  </form>
    917. 

  917. 			</table>
    918. 

  918.             <div>&nbsp;</div>
    919. 

  919. 		</span>
    920. 

  920. <?	
    921. 

  921. 	
    922. 

  922. 	
    923. 

  923. 	if($doedit){
    924. 

  924. 		// change status to edit order while editing order
    925. 

  925. 		//exit;
    926. 

  926. 		print '<form method="post" name="editform" action="/admin/orders.php" onsubmit="return confirmedit()"><input type="hidden" name="orderid" value="' . $_GET["id"] . '" /><input type="hidden" name="doedit" value="true" />';
    927. 

  927. 		$overridecurrency=TRUE;
    928. 

  928. 		$orcsymbol="";
    929. 

  929. 		$orcdecplaces=2;
    930. 

  930. 		$orcpreamount=TRUE;
    931. 

  931. 		$orcdecimals=".";
    932. 

  932. 		$orcthousands="";
    933. 

  933. 	}
    934. 

  934. ?>
    935. 

  935. <script language="JavaScript" type="text/javascript" src="http://assets.ifrogz.com/lib/packages/scriptaculous-js/1.9.0/lib/prototype.js"></script>
    936. 

  936. <script language="JavaScript" type="text/javascript" src="http://assets.ifrogz.com/lib/packages/scriptaculous-js/1.9.0/src/scriptaculous.js"></script>
    937. 

  937. <script language="JavaScript" type="text/javascript">
    938. 

  938. <!--
    939. 

  939. var newwin="";
    940. 

  940. var plinecnt=0;
    941. 

  941. function openemailpopup(id) {
    942. 

  942.   popupWin = window.open('/admin/popupemail.php?'+id,'emailpopup','menubar=no, scrollbars=no, width=300, height=250, directories=no,location=no,resizable=yes,status=no,toolbar=no')
    943. 

  943. }
    944. 

  944. function updateoptions(id){
    945. 

  945. 	prodid = document.getElementById('prodid'+id).value;
    946. 

  946. 	if(prodid != ''){
    947. 

  947. 		newwin = window.open('/admin/popupemail.php?prod='+prodid+'&index='+id,'updateopts','menubar=no, scrollbars=no, width=50, height=40, directories=no,location=no,resizable=yes,status=no,toolbar=no');
    948. 

  948. 	}
    949. 

  949. 	return(false);
    950. 

  950. }
    951. 

  951. function extraproduct(plusminus){
    952. 

  952. var productspan=document.getElementById('productspan');
    953. 

  953. if(plusminus=='+'){
    954. 

  954. productspan.innerHTML=productspan.innerHTML.replace(/<!--NEXTPRODUCTCOMMENT-->/,'<!--PLINE'+plinecnt+'--><tr><td valign="top"><input type="button" value="..." onclick="updateoptions('+(plinecnt+1000)+')">&nbsp;<input name="prodid'+(plinecnt+1000)+'" size="18" id="prodid'+(plinecnt+1000)+'"></td><td valign="top"><input type="text" id="prodname'+(plinecnt+1000)+'" name="prodname'+(plinecnt+1000)+'" size="24"></td><td><span id="optionsspan'+(plinecnt+1000)+'">-</span></td><td valign="top"><input type="text" id="quant'+(plinecnt+1000)+'" name="quant'+(plinecnt+1000)+'" size="5" value="1"></td><td valign="top"><input type="text" id="price'+(plinecnt+1000)+'" name="price'+(plinecnt+1000)+'" value="0" size="7"><br /><input type="hidden" id="optdiffspan'+(plinecnt+1000)+'" value="0"></td><td>&nbsp;</td></tr><!--PLINEEND'+plinecnt+'--><!--NEXTPRODUCTCOMMENT-->');
    955. 

  955. plinecnt++;
    956. 

  956. }else{
    957. 

  957. if(plinecnt>0){
    958. 

  958. plinecnt--;
    959. 

  959. var restr = '<!--PLINE'+plinecnt+'-->(.|\\n)+<!--PLINEEND'+plinecnt+'-->';
    960. 

  960. //alert(restr);
    961. 

  961. var re = new RegExp(restr);
    962. 

  962. productspan.innerHTML=productspan.innerHTML.replace(re,'');
    963. 

  963. }
    964. 

  964. }
    965. 

  965. }
    966. 

  966. function confirmedit(){
    967. 

  967. 	if(updateClicked) {
    968. 

  968. 		if(confirm('<?php print str_replace("'","\'",$yyChkRec)?>'))
    969. 

  969. 			return(true);
    970. 

  970. 		return(false);
    971. 

  971. 	}
    972. 

  972. 	if(cloneClicked) {
    973. 

  973. 		if(confirm('Are you sure you want to clone this order?'))
    974. 

  974. 			return(true);
    975. 

  975. 		return(false);
    976. 

  976. 	}
    977. 

  977. }
    978. 

  978. 

  979. 

  980. function checkAIM(frm) {
    981. 

  981. 	if(frm.aim_type.selectedIndex==0) {
    982. 

  982. 		alert("Please choose a transaction type.");
    983. 

  983. 		frm.aim_type.focus();
    984. 

  984. 		return false;
    985. 

  985. 	}else if(frm.aim_txn=='') {
    986. 

  986. 		alert("A transaction number is required.");
    987. 

  987. 		frm.aim_txn.focus();
    988. 

  988. 		return false;
    989. 

  989. 	}else if(frm.aim_amt=='') {
    990. 

  990. 		alert("Please enter an amount.");
    991. 

  991. 		frm.aim_amt.focus();
    992. 

  992. 		return false;
    993. 

  993. 	}
    994. 

  994. 	
    995. 

  995. 	return true;
    996. 

  996. }
    997. 

  997. 

  998. function toggleTXN() {
    999. 

  999. 	if($('div_trans').style.display=='' || $('div_trans').style.display==undefined) {
    1000. 

  1000. 		//$('div_trans').style.display = 'none';
    1001. 

  1001. 		Effect.BlindUp('div_trans');
    1002. 

  1002. 		$('btn_add_txn').value = 'Credit or Void';
    1003. 

  1003. 	}else if($('div_trans').style.display=='none') {
    1004. 

  1004. 		//$('div_trans').style.display = '';
    1005. 

  1005. 		Effect.BlindDown('div_trans');
    1006. 

  1006. 		$('btn_add_txn').value = 'Hide Credit or Void';
    1007. 

  1007. 	}
    1008. 

  1008. }
    1009. 

  1009. 

  1010. function toggleCharge() {
    1011. 

  1011. 	if($('div_charge').style.display=='' || $('div_charge').style.display==undefined) {
    1012. 

  1012. 		//$('div_charge').style.display = 'none';
    1013. 

  1013. 		Effect.BlindUp('div_charge');
    1014. 

  1014. 		$('btn_charge').value = 'Charge CC';
    1015. 

  1015. 	}else if($('div_charge').style.display=='none') {
    1016. 

  1016. 		//$('div_charge').style.display = '';
    1017. 

  1017. 		Effect.BlindDown('div_charge');
    1018. 

  1018. 		$('btn_charge').value = 'Hide Charge CC';
    1019. 

  1019. 	}
    1020. 

  1020. }
    1021. 

  1021. 

  1022. function togglePrcAdd() {
    1023. 

  1023. 	if($('div_prc_add').style.display=='' || $('div_prc_add').style.display==undefined) {
    1024. 

  1024. 		//$('div_charge').style.display = 'none';
    1025. 

  1025. 		Effect.BlindUp('div_prc_add');
    1026. 

  1026. 		$('btn_prc_add').value = 'Add Price Adjustment';
    1027. 

  1027. 	}else if($('div_prc_add').style.display=='none') {
    1028. 

  1028. 		//$('div_charge').style.display = '';
    1029. 

  1029. 		Effect.BlindDown('div_prc_add');
    1030. 

  1030. 		$('btn_prc_add').value = 'Hide Price Adjustment';
    1031. 

  1031. 	}
    1032. 

  1032. }
    1033. 

  1033. function createGiftCert(ordID,prodID){
    1034. 

  1034. 	if(ordID!='' && prodID!=''){
    1035. 

  1035. 		var params = "ordID="+ordID+"&prodID="+prodID;
    1036. 

  1036. 		var url = "/admin/ordersgiftcertaj.php";
    1037. 

  1037. 		var ajax = new Ajax.Updater(
    1038. 

  1038. 			{success: "giftcertholder"},
    1039. 

  1039. 					url,
    1040. 

  1040. 					{
    1041. 

  1041. 						method: "post", 
    1042. 

  1042. 						parameters: params,
    1043. 

  1043. 						//onLoading: function() { Element.show("miniCartWorking"); },
    1044. 

  1044. 						onComplete: function() { Element.show("giftcertholder");Element.hide("cert_button"); }
    1045. 

  1045. 						//onComplete: showResponse
    1046. 

  1046. 					});
    1047. 

  1047. 	}
    1048. 

  1048. }
    1049. 

  1049. //-->
    1050. 

  1050. </script>
    1051. 

  1051. <style type="text/css">
    1052. 

  1052. a img{
    1053. 

  1053. 	border: 0;
    1054. 

  1054. }
    1055. 

  1055. </style>
    1056. 

  1056. 	  <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="" align="center">
    1057. 

  1057.         <tr>
    1058. 

  1058.           <td width="100%">
    1059. 

  1059.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    1060. 

  1060. <?php		if($isprinter && @$invoiceheader != ""){ ?>
    1061. 

  1061. 			  <tr> 
    1062. 

  1062.                 <td colspan="5"><?php print $invoiceheader?></td>
    1063. 

  1063. 			  </tr>
    1064. 

  1064. <?php		} ?>
    1065. 

  1065. 			  <tr 	<? if(!empty($alldata["ordEID"])) echo 'bgcolor="#FA6561"'?>> 
    1066. 

  1066.                 <td colspan="5" align="center"><strong><?php print $xxOrdNum . " " . $alldata["ordID"] . "<br /><br />" . date($dateformatstr, $alldata["ordDate"]) . " " . date("H:i", $alldata["ordDate"])?></strong></td>
    1067. 

  1067. 			  </tr>
    1068. 

  1068. <?php		if($isprinter && @$invoiceaddress != ""){ ?>
    1069. 

  1069. 			  <tr> 
    1070. 

  1070.                 <td colspan="5"><?php print $invoiceaddress?></td>
    1071. 

  1071. 			  </tr>
    1072. 

  1072. <?php		} ?>
    1073. 

  1073. <?php		if(trim(@$extraorderfield1)!=""){ ?>
    1074. 

  1074. 			<tr>
    1075. 

  1075. 			  <td width="20%" align="right"><strong><?php print $extraorderfield1 ?>:</strong></td>
    1076. 

  1076. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordExtra1"],"ordextra1",25)?></td>
    1077. 

  1077. 			</tr>
    1078. 

  1078. <?php		} ?>
    1079. 

  1079. 			<tr>
    1080. 

  1080. 			  <td width="20%" align="right"><strong><?php print $xxName?>:</strong></td>
    1081. 

  1081. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordName"],"name",25)?></td>
    1082. 

  1082. 			  <td width="20%" align="right"><?php if(! $isprinter && $alldata["ordAuthNumber"] != "" && ! $doedit) print '<input type="button" value="Resend" onclick="javascript:openemailpopup(\'id=' . $alldata["ordID"] . '\')" />' ?>
    1083. 

  1083. 			  <strong><?php print $xxEmail?>:</strong></td>
    1084. 

  1084. 			  <td width="30%" align="left"><?php
    1085. 

  1085. 				if($isprinter || $doedit) print editfunc($alldata["ordEmail"],"email",25); else print '<a href="mailto:' . $alldata["ordEmail"] . '">' . $alldata["ordEmail"] . '</a>';?>
    1086. 

  1086. 				<?
    1087. 

  1087. 			  		$sql_order = "SELECT * FROM orders WHERE ordID <> ". $alldata["ordID"] ." AND ordStatus BETWEEN 11 AND 12 AND ordEmail = '".$alldata["ordEmail"]."' ORDER BY ordID DESC";
    1088. 

  1088. 			  		//echo $sql_order;
    1089. 

  1089. 					$result_order = mysql_query($sql_order) or print(mysql_error().$sql_order);
    1090. 

  1090. 					$num_rows_order = mysql_num_rows($result_order);
    1091. 

  1091. 					if ($num_rows_order > 0) {
    1092. 

  1092. 				?>
    1093. 

  1093. 					<input name="cust_orders" type="button" value="View All Customer Orders (<?=$num_rows_order?>)" onclick="Element.toggle('cust_orders');" />
    1094. 

  1094. 					<div style="position:relative;">
    1095. 

  1095. 						<div id="cust_orders" style="position:absolute; left:-280px; width:470px; display:none; background-color:#FFFFFF; border: solid 1px #BFC9E0;padding:6px;">
    1096. 

  1096. 						<?	
    1097. 

  1097. 						while ($rs_ord = mysql_fetch_assoc($result_order)) { ?>
    1098. 

  1098. 							<div style="float:left;margin:4px;"><a href="javascript:void(0)" onclick="getOrderInfo(<?=$rs_ord['ordID']?>)"><?=$rs_ord['ordID']?></a></div>
    1099. 

  1099. 						<?	}
    1100. 

  1100. 						?>
    1101. 

  1101. 						<div id="working" style="display:none;"><img src="/lib/images/indicator.gif"  alt="Working..." width="20" height="20" /></div>
    1102. 

  1102. 						<div id="order_info" style="display:none; clear:both; padding:10px 6px;"></div>
    1103. 

  1103. 						
    1104. 

  1104. 						<script language="JavaScript" type="text/javascript">
    1105. 

  1105. 							function getOrderInfo(ordID) {
    1106. 

  1106. 								var url = "/admin/getorder.php";
    1107. 

  1107. 								var params = "ordID="+ordID;
    1108. 

  1108. 								var ajax = new Ajax.Updater (
    1109. 

  1109. 									{success: 'order_info'},
    1110. 

  1110. 									url,
    1111. 

  1111. 									{method: "post", 
    1112. 

  1112. 									parameters: params,
    1113. 

  1113. 									onLoading: function(){ Element.show('working');},
    1114. 

  1114. 									onComplete: function(){ Element.hide('working'); new Effect.Appear('order_info');}
    1115. 

  1115. 									})
    1116. 

  1116. 							}
    1117. 

  1117. 						</script>
    1118. 

  1118. 						</div>
    1119. 

  1119. 					</div>	
    1120. 

  1120. 				<? } ?>				</td>
    1121. 

  1121. 			</tr>
    1122. 

  1122. 			<tr>
    1123. 

  1123. 			  <td width="20%" align="right"><strong><?php print $xxAddress?>:</strong></td>
    1124. 

  1124. 			  <td colspan="2" align="left"<?php if(@$useaddressline2==TRUE) print ' colspan="3"'?>><?php print editfunc($alldata["ordAddress"],"address",25)?></td>
    1125. 

  1125. <?php	if(@$useaddressline2==TRUE){ ?>
    1126. 

  1126. 			</tr>
    1127. 

  1127. 			<tr>
    1128. 

  1128. 			  <td width="20%" align="right"><strong><?php print $xxAddress2?>:</strong></td>
    1129. 

  1129. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordAddress2"],"address2",25)?></td>
    1130. 

  1130. <?php	} ?>
    1131. 

  1131. 			  <td align="right"><strong><?php print $xxCity?>:</strong></td>
    1132. 

  1132. 			  <td align="left"><?php print editfunc($alldata["ordCity"],"city",25)?></td>
    1133. 

  1133. 			</tr>
    1134. 

  1134. 			<tr>
    1135. 

  1135. 			  <td width="20%" align="right"><strong><?php print $xxAllSta?>:</strong></td>
    1136. 

  1136. 			  <td width="10%" align="left"><?php print editfunc($alldata["ordState"],"state",25)?></td>
    1137. 

  1137. 			  <td width="20%" align="left"><strong>APO/PO:</strong>			    <input <?php if (!(strcmp($alldata["ordPoApo"],1))) {echo "checked=\"checked\"";} ?> <? if($doedit) echo ''; else echo 'disabled="disabled"'; ?> name="APO" type="checkbox" value="1" /></td>
    1138. 

  1138. 			  <td align="right"><strong><?php print $xxCountry?>:</strong></td>
    1139. 

  1139. 			  <td align="left"><?php
    1140. 

  1140. 			if($doedit){
    1141. 

  1141. 				$foundmatch=FALSE;
    1142. 

  1142. 				print '<select name="country" size="1">';
    1143. 

  1143. 				$sSQL = "SELECT countryName,countryTax,countryOrder FROM countries ORDER BY countryOrder DESC, countryName";
    1144. 

  1144. 				$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1145. 

  1145. 				while($rs2 = mysql_fetch_array($result)){
    1146. 

  1146. 					print '<option value="' . str_replace('"','&quot;',$rs2["countryName"]) . '"';
    1147. 

  1147. 					if($alldata["ordCountry"]==$rs2["countryName"]){
    1148. 

  1148. 						print ' selected';
    1149. 

  1149. 						$foundmatch=TRUE;
    1150. 

  1150. 						$countrytaxrate=$rs2["countryTax"];
    1151. 

  1151. 						$countryorder=$rs2["countryOrder"];
    1152. 

  1152. 					}
    1153. 

  1153. 					print '>' . $rs2["countryName"] . "</option>\r\n";			}
    1154. 

  1154. 				mysql_free_result($result);
    1155. 

  1155. 				if(! $foundmatch) print '<option value="' . str_replace('"','&quot;',$alldata["ordCountry"]) . '" selected>' . $alldata["ordCountry"] . "</option>\r\n";
    1156. 

  1156. 				print '</select>';
    1157. 

  1157. 				if($countryorder==2){
    1158. 

  1158. 					$sSQL = "SELECT stateTax FROM states WHERE stateAbbrev='" . mysql_real_escape_string($alldata["ordState"]) . "'";
    1159. 

  1159. 					$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1160. 

  1160. 					if($rs2 = mysql_fetch_array($result))
    1161. 

  1161. 						$statetaxrate = $rs2["stateTax"];
    1162. 

  1162. 				}
    1163. 

  1163. 				if($alldata["ordStateTax"]==0)$statetaxrate=0; 
    1164. 

  1164. 			}else
    1165. 

  1165. 				print $alldata["ordCountry"];?></td>
    1166. 

  1166. 			</tr>
    1167. 

  1167. 			<tr>
    1168. 

  1168. 			  <td width="20%" align="right"><strong><?php print $xxZip?>:</strong></td>
    1169. 

  1169. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordZip"],"zip",15)?></td>
    1170. 

  1170. 			  <td align="right"><strong><?php print $xxPhone?>:</strong></td>
    1171. 

  1171. 			  <td align="left"><?php print editfunc($alldata["ordPhone"],"phone",25)?></td>
    1172. 

  1172. 			</tr>
    1173. 

  1173. <?php if(trim(@$extraorderfield2)!=""){ ?>
    1174. 

  1174. 			<tr>
    1175. 

  1175. 			  <td width="20%" align="right"><strong><?php print @$extraorderfield2 ?>:</strong></td>
    1176. 

  1176. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordExtra2"],"ordextra2",25)?></td>
    1177. 

  1177. 			</tr>
    1178. 

  1178. <?php } ?>
    1179. 

  1179. <?php if(! $isprinter){ ?>
    1180. 

  1180. 			<tr>
    1181. 

  1181. 			  <td width="20%" align="right"><strong>IP Address:</strong></td>
    1182. 

  1182. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordIP"],"ipaddress",15)?></td>
    1183. 

  1183. 			  <td align="right"><strong><?php print $yyAffili?>:</strong></td>
    1184. 

  1184. 			  <td align="left"><?php print editfunc($alldata["ordAffiliate"],"PARTNER",15)?></td>
    1185. 

  1185. 			</tr>
    1186. 

  1186. <?php }
    1187. 

  1187. 	  if(trim($alldata["ordDiscountText"])!=""){ ?>
    1188. 

  1188. 			<tr>
    1189. 

  1189. 			  <td width="20%" align="right" valign="top"><strong><?php print $xxAppDs?>:</strong></td>
    1190. 

  1190. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordDiscountText"],"discounttext",25)?></td>
    1191. 

  1191. 			</tr>
    1192. 

  1192. <?php }
    1193. 

  1193. 	  if(trim($alldata["ordShipName"]) != "" || trim($alldata["ordShipAddress"]) != "" || trim($alldata["ordShipCity"]) != "" || $doedit){ ?>
    1194. 

  1194. 			<tr>
    1195. 

  1195. 			  <td align="center" colspan="5"><strong><?php print $xxShpDet?>.</strong></td>
    1196. 

  1196. 			</tr>
    1197. 

  1197. 			<tr>
    1198. 

  1198. 			  <td width="20%" align="right"><strong><?php print $xxName?>:</strong></td>
    1199. 

  1199. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordShipName"],"sname",25)?></td>
    1200. 

  1200. 			</tr>
    1201. 

  1201. 			<tr>
    1202. 

  1202. 			  <td width="20%" align="right"><strong><?php print $xxAddress?>:</strong></td>
    1203. 

  1203. 			  <td colspan="2" align="left"<?php if(@$useaddressline2==TRUE) print ' colspan="3"'?>><?php print editfunc($alldata["ordShipAddress"],"saddress",25)?></td>
    1204. 

  1204. <?php	if(@$useaddressline2==TRUE){ ?>
    1205. 

  1205. 			</tr>
    1206. 

  1206. 			<tr>
    1207. 

  1207. 			  <td width="20%" align="right"><strong><?php print $xxAddress2?>:</strong></td>
    1208. 

  1208. 			  <td colspan="2" align="left"><?php print editfunc($alldata["ordShipAddress2"],"saddress2",25)?></td>
    1209. 

  1209. <?php	} ?>
    1210. 

  1210. 			  <td align="right"><strong><?php print $xxCity?>:</strong></td>
    1211. 

  1211. 			  <td align="left"><?php print editfunc($alldata["ordShipCity"],"scity",25)?></td>
    1212. 

  1212. 			</tr>
    1213. 

  1213. 			<tr>
    1214. 

  1214. 			  <td width="20%" align="right"><strong><?php print $xxAllSta?>:</strong></td>
    1215. 

  1215. 			  <td align="left"><?php print editfunc($alldata["ordShipState"],"sstate",25)?></td>
    1216. 

  1216. 			  <td align="left"><strong>APO/PO:</strong>			    <input name="ShipAPO" type="checkbox" id="ShipAPO" value="1" <?php if (!(strcmp($alldata["ordShipPoApo"],1))) {echo "checked=\"checked\"";} ?> <? if($doedit) echo ''; else echo 'disabled="disabled"'; ?>  /></td>
    1217. 

  1217. 			  <td align="right"><strong><?php print $xxCountry?>:</strong></td>
    1218. 

  1218. 			  <td align="left"><?php
    1219. 

  1219. 			if($doedit){
    1220. 

  1220. 				if(trim($alldata["ordShipName"]) != "" || trim($alldata["ordShipAddress"]) != "") $usingshipcountry=TRUE; else $usingshipcountry=FALSE;
    1221. 

  1221. 				$foundmatch=FALSE;
    1222. 

  1222. 				print '<select name="scountry" size="1">';
    1223. 

  1223. 				$sSQL = "SELECT countryName,countryTax,countryOrder FROM countries ORDER BY countryOrder DESC, countryName";
    1224. 

  1224. 				$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1225. 

  1225. 				while($rs2 = mysql_fetch_array($result)){
    1226. 

  1226. 					print '<option value="' . str_replace('"','&quot;',$rs2["countryName"]) . '"';
    1227. 

  1227. 					if($alldata["ordShipCountry"]==$rs2["countryName"]){
    1228. 

  1228. 						print ' selected';
    1229. 

  1229. 						$foundmatch=TRUE;
    1230. 

  1230. 						if($usingshipcountry) $countrytaxrate=$rs2["countryTax"];
    1231. 

  1231. 						$countryorder=$rs2["countryOrder"];
    1232. 

  1232. 					}
    1233. 

  1233. 					print '>' . $rs2["countryName"] . "</option>\r\n";			}
    1234. 

  1234. 				mysql_free_result($result);
    1235. 

  1235. 				if(! $foundmatch) print '<option value="' . str_replace('"','&quot;',$alldata["ordShipCountry"]) . '" selected>' . $alldata["ordShipCountry"] . "</option>\r\n";
    1236. 

  1236. 				print '</select>';
    1237. 

  1237. 				if($countryorder==2 && $usingshipcountry){
    1238. 

  1238. 					$sSQL = "SELECT stateTax FROM states WHERE stateName='" . mysql_real_escape_string($alldata["ordShipState"]) . "'";
    1239. 

  1239. 					$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1240. 

  1240. 					if($rs2 = mysql_fetch_array($result))
    1241. 

  1241. 						$statetaxrate = $rs2["stateTax"];
    1242. 

  1242. 				}
    1243. 

  1243. 			}else
    1244. 

  1244. 				print $alldata["ordShipCountry"]?></td>
    1245. 

  1245. 			</tr>
    1246. 

  1246. 			<tr>
    1247. 

  1247. 			  <td width="20%" align="right"><strong><?php print $xxZip?>:</strong></td>
    1248. 

  1248. 			  <td align="left" colspan="4"><?php print editfunc($alldata["ordShipZip"],"szip",15)?></td>
    1249. 

  1249. 			</tr>
    1250. 

  1250. <?php }
    1251. 

  1251. 	  if($alldata["ordShipType"] != "" || $alldata["ordComLoc"]>0 || $doedit){ ?>
    1252. 

  1252. 			<tr>
    1253. 

  1253. 			  <td width="20%" align="right"><strong><?php print $xxShpMet?>:</strong></td>
    1254. 

  1254. 			  <td colspan="2" align="left">
    1255. 

  1255. 			  <?php 
    1256. 

  1256. 			    if($doedit && ($alldata["ordStatus"]<=5 || $alldata["ordStatus"]==17) ){
    1257. 

  1257. 					print editfunc($alldata["ordShipType"],"shipmethod",25);?>			
    1258. 

  1258. 					<br />
    1259. 

  1259. 					<a href="javascript:void(0);" onclick="$('shipmethod').value='Standard';">Standard</a> |
    1260. 

  1260.                     <a href="javascript:void(0);" onclick="$('shipmethod').value='Priority Mail';">Priority Mail</a> |  
    1261. 

  1261. 					<a href="javascript:void(0);" onclick="$('shipmethod').value='FedEx Express';">FedEx</a> | 
    1262. 

  1262. 					<a href="javascript:void(0);" onclick="$('shipmethod').value='FedEx Overnight';">FedEx Overnight</a> 			
    1263. 

  1263. 					<a href="javascript:void(0);" onclick="$('shipmethod').value='International';">Int</a>				
    1264. 

  1264. 				<? }else{
    1265. 

  1265. 					echo $alldata["ordShipType"].'<input type="hidden" name="shipmethod" value="'.$alldata["ordShipType"].'" />';
    1266. 

  1266. 				}
    1267. 

  1267. 				if(! $doedit && ($alldata["ordComLoc"]&2)==2) print $xxWtIns?>			  </td>
    1268. 

  1268. 			  <td align="right"><strong><?php print $xxCLoc?>:</strong></td>
    1269. 

  1269. 			  <td align="left"><?php	if($doedit){
    1270. 

  1270. 											print '<select name="commercialloc" size="1">';
    1271. 

  1271. 											print '<option value="N">' . $yyNo . '</option>';
    1272. 

  1272. 											print '<option value="Y"' . (($alldata["ordComLoc"]&1)==1 ? ' selected' : '') . '>' . $yyYes . '</option>';
    1273. 

  1273. 											print '</select>';
    1274. 

  1274. 										}else{
    1275. 

  1275. 											if(($alldata["ordComLoc"]&1)==1) print $yyYes; else print $yyNo;
    1276. 

  1276. 										}?></td>
    1277. 

  1277. 			</tr>
    1278. 

  1278. <?php	if($doedit){ ?>
    1279. 

  1279. 			<tr>
    1280. 

  1280. 			  <td width="20%" align="right"><strong><?php print $xxShpIns?>:</strong></td>
    1281. 

  1281. 			  <td align="left" colspan="4"><?php
    1282. 

  1282. 										print '<select name="wantinsurance" size="1">';
    1283. 

  1283. 										print '<option value="N">' . $yyNo . '</option>';
    1284. 

  1284. 										print '<option value="Y"' . (($alldata["ordComLoc"]&2)==2 ? ' selected' : '') . '>' . $yyYes . '</option>';
    1285. 

  1285. 										print '</select>';
    1286. 

  1286. 			?></td>
    1287. 

  1287. 			</tr>
    1288. 

  1288. <?php	}
    1289. 

  1289. 	  }
    1290. 

  1290. 		$ordAuthNumber = trim($alldata["ordAuthNumber"]);
    1291. 

  1291. 		$ordTransID = trim($alldata["ordTransID"]);
    1292. 

  1292. 		if(! $isprinter && ($ordAuthNumber != "" || $ordTransID != "" || $doedit)){ ?>
    1293. 

  1293. 			<tr>
    1294. 

  1294. 			  <td width="20%" align="right"><strong><?php print $yyAutCod?>:</strong></td>
    1295. 

  1295. 			  <td colspan="2" align="left"><?php print editfunc($ordAuthNumber,"ordAuthNumber",15) ?></td>
    1296. 

  1296. 			  <td align="right"><strong><?php print $yyTranID?>:</strong></td>
    1297. 

  1297. 			  <td align="left"><?php print editfunc($ordTransID,"ordTransID",15) ?></td>
    1298. 

  1298. 			</tr>
    1299. 

  1299. <?php
    1300. 

  1300. 			// Look up any MyFrogz Code
    1301. 

  1301. 			$sql = "SELECT * FROM att_codes WHERE code_order_id = '" . $alldata["ordID"] . "'";
    1302. 

  1302. 			$res = mysql_query($sql) or print(mysql_error());
    1303. 

  1303. 			if ($res) {
    1304. 

  1304. 				if (mysql_num_rows($res) > 0) {
    1305. 

  1305. 					$row = mysql_fetch_assoc($res);
    1306. 

  1306. ?>
    1307. 

  1307. 			<tr>
    1308. 

  1308. 				<td width="20%" align="right"><strong>MyFrogz Code:</strong></td>
    1309. 

  1309. 				<td colspan="4" align="left" style="font-family: Courier; font-size: 125%;"><?=$row['code']?></td>
    1310. 

  1310. 			</tr>
    1311. 

  1311. <?php
    1312. 

  1312. 				}
    1313. 

  1313. 			}
    1314. 

  1314. 		}
    1315. 

  1315. 

  1316. 		// BOL#s ADDED BY CHAD JUL 27,06
    1317. 

  1317. 		$sql_bol = "SELECT * FROM bol WHERE ordID = " . $alldata["ordID"];
    1318. 

  1318. 		$res_bol = mysql_query($sql_bol) or print(mysql_error().$sql_bol);
    1319. 

  1319. 		if(mysql_num_rows($res_bol) > 0) {
    1320. 

  1320. 			$row_bol = mysql_fetch_assoc($res_bol);
    1321. 

  1321. ?>
    1322. 

  1322. 			<tr>
    1323. 

  1323. 				<td width="20%" align="right"><strong>Express BOL#:</strong></td>
    1324. 

  1324. 				<td colspan="2"><?=$row_bol['exBOL']?></td>
    1325. 

  1325. <?php
    1326. 

  1326. 			if(!empty($row_bol['smBOL'])) {
    1327. 

  1327. ?>
    1328. 

  1328. 				<td align="right"><strong>Smart Mail BOL#:</strong></td>
    1329. 

  1329. 				<td><?=$row_bol['smBOL']?></td>
    1330. 

  1330. <?php
    1331. 

  1331. 			}
    1332. 

  1332. 			if(!empty($row_bol['gmBOL'])) {
    1333. 

  1333. ?>
    1334. 

  1334. 				<td align="right"><strong>Global Mail BOL#:</strong></td>
    1335. 

  1335. 				<td><?=$row_bol['gmBOL']?></td>
    1336. 

  1336. <?php
    1337. 

  1337. 			}
    1338. 

  1338. ?>
    1339. 

  1339. 			</tr>
    1340. 

  1340. <?php
    1341. 

  1341. 		}
    1342. 

  1342. 		// ADD ENDED
    1343. 

  1343. 

  1344. 		$ordAddInfo = Trim($alldata["ordAddInfo"]);
    1345. 

  1345. 		if($ordAddInfo != "" || $doedit){ ?>
    1346. 

  1346. 			<tr>
    1347. 

  1347. 			  <td width="20%" align="right" valign="top"><strong><?php print $xxAddInf?>:</strong></td>
    1348. 

  1348. 			  <td align="left" colspan="4"><?php
    1349. 

  1349. 			if($doedit)
    1350. 

  1350. 				print '<textarea name="ordAddInfo" cols="80" rows="4" wrap=virtual>' . $ordAddInfo . '</textarea>';
    1351. 

  1351. 			else
    1352. 

  1352. 				print str_replace(array("\r\n","\n"),array("<br />","<br />"),$ordAddInfo); ?></td>
    1353. 

  1353. 			</tr>
    1354. 

  1354. <?php	}
    1355. 

  1355. if(! $isprinter){
    1356. 

  1356. 		if(! $doedit) print '<form method="post" action="/admin/orders.php"><input type="hidden" name="updatestatus" value="1" /><input type="hidden" name="orderid" value="' . @$_GET["id"] . '" />';
    1357. 

  1357. ?>			
    1358. 

  1358. <tr>
    1359. 

  1359.   <td width="20%" align="right" valign="top"><strong><?php print $yyStaInf?>:</strong></td>
    1360. 

  1360.   <td colspan="2" align="left"><textarea name="ordStatusInfo" id="ordStatusInfo" cols="50" rows="3" wrap=virtual><?php print $alldata["ordStatusInfo"]?></textarea>
    1361. 

  1361.     <?php if($alldata['ordPayProvider']==20 ) print '<input type="button" value="Google Send Email To Customer" ' . ($alldata['ordPayProvider']==20 ? 'onclick="updategooglestatus(\'message\',' . $_GET['id'] . ')" ' : '') . '/>'?></td>
    1362. 

  1362.   <td height="12" colspan="2" valign="top" align="center">
    1363. 

  1363.     
    1364. 

  1364. <?
    1365. 

  1365. 	$sql_reason="SELECT * FROM reasons ORDER BY reason";
    1366. 

  1366. 	$result_reason=mysql_query($sql_reason);
    1367. 

  1367. 			
    1368. 

  1368. 	while($row_reason=mysql_fetch_assoc($result_reason)){
    1369. 

  1369. 		$arrReasons[] = $row_reason;
    1370. 

  1370.    } 
    1371. 

  1371. ?>
    1372. 

  1372.     
    1373. 

  1373. 	<? $sql_his="SELECT * FROM order_returns_history orh LEFT JOIN `returns`r ON orh.returnID=r.id LEFT JOIN reasons rs ON orh.reasonID=rs.id WHERE ordID=".$alldata["ordID"]." ORDER BY date_added DESC";
    1374. 

  1374. 		$result_his=mysql_query($sql_his);
    1375. 

  1375. 		if(mysql_num_rows($result_his)>0){
    1376. 

  1376. 	?>
    1377. 

  1377. 	<div style="font-size:10px; position:relative;"><a href="javascript:void(0);" onclick="Element.toggle('reason_history');">View History</a>
    1378. 

  1378. 		<div id="reason_history" style="display:none;position:absolute; top:20px; left:-9px; background-color:#FFFFFF; border: 1px solid #828177; padding:10px; width:295px;">
    1379. 

  1379. 			<table width="100%" cellspacing="0" cellpadding="2">
    1380. 

  1380. 				  <tr>
    1381. 

  1381. 					<th>Status</th>
    1382. 

  1382. 					<th>Reason</th>
    1383. 

  1383. 					<th>Date</th>
    1384. 

  1384. 				  </tr>			
    1385. 

  1385. 				<? 
    1386. 

  1386. 				$his=1;
    1387. 

  1387. 				$bgcolor_his='';
    1388. 

  1388. 				while($row_his=mysql_fetch_assoc($result_his)){
    1389. 

  1389. 					//if($his%2==0)$bgcolor_his='#E6E9F5';
    1390. 

  1390. 				?>
    1391. 

  1391. 				  <tr <?=($his%2==0?'':' style="background-color: #E6E9F5"')?>>
    1392. 

  1392. 					<td><?=$row_his["status"]?></td>
    1393. 

  1393. 					<td><?=$row_his["reason"]?></td>
    1394. 

  1394. 					<td><?=$row_his["date_added"]?></td>
    1395. 

  1395. 				  </tr>				
    1396. 

  1396. 				<? $his++;
    1397. 

  1397. 				} ?>
    1398. 

  1398. 			</table>
    1399. 

  1399. 		</div>
    1400. 

  1400. 	</div>
    1401. 

  1401. 	<? }?>
    1402. 

  1402. 	</fieldset>	  </td>
    1403. 

  1403.   </tr>
    1404. 

  1404. 

  1405. 

  1406. 			<? //if($doedit) { ?>
    1407. 

  1407. 			<tr>
    1408. 

  1408. 			  <td width="20%" align="right" valign="top"><strong><?php print $yySupInf?>:</strong></td>
    1409. 

  1409. 			  <td colspan="4" align="left"><textarea name="ordSupportInfo" cols="80" rows="3" wrap=virtual><?php print $alldata["ordSupportInfo"]?></textarea> </td>
    1410. 

  1410. 			  </tr>
    1411. 

  1411. 			
    1412. 

  1412.             <tr>
    1413. 

  1413. 			  <td align="right" valign="top"><strong>Returns/Exchanges:</strong></td>
    1414. 

  1414. 			  <td colspan="4" align="left">
    1415. 

  1415. <?				
    1416. 

  1416. 				$sql_return="SELECT * FROM returns ORDER BY status_order";
    1417. 

  1417. 				$result_return=mysql_query($sql_return);
    1418. 

  1418. ?>
    1419. 

  1419. 				<script type="text/javascript">
    1420. 

  1420.                 
    1421. 

  1421.                 function show_buttons() {
    1422. 

  1422.                     var dis;
    1423. 

  1423.                     var val = $('return_status').value;
    1424. 

  1424.                     if ( val == "0" ) {
    1425. 

  1425.                         dis = 'none';
    1426. 

  1426.                     } else {
    1427. 

  1427.                         dis = 'inline';
    1428. 

  1428.                     }
    1429. 

  1429.                     buttons = document.getElementsByClassName('reason_button');
    1430. 

  1430.                     for(var i = 0; i < buttons.length; i++) {
    1431. 

  1431.                         buttons[i].style.display = dis;
    1432. 

  1432.                     }
    1433. 

  1433.                 }
    1434. 

  1434.                 
    1435. 

  1435.                 </script>
    1436. 

  1436. <? if ($doedit) { ?>
    1437. 

  1437.                 <select id="return_status" name="return_status" onchange="show_buttons()">
    1438. 

  1438.                   <option value="0" <?php if (!(strcmp("0", $alldata["ordReturnID"]))) {echo "selected=\"selected\"";} ?>>none</option>
    1439. 

  1439.                   <? while($row_return=mysql_fetch_assoc($result_return)){?>
    1440. 

  1440.                   <option value="<?=$row_return["id"]?>" <?php if (!(strcmp($row_return["id"], $alldata["ordReturnID"]))) {echo "selected=\"selected\"";} ?>>
    1441. 

  1441.                   <?=$row_return["status"]?>
    1442. 

  1442.                   </option>
    1443. 

  1443.                   <? } ?>
    1444. 

  1444.                 </select>
    1445. 

  1445. <? }  else {
    1446. 

  1446. 	while($row_return=mysql_fetch_assoc($result_return)){
    1447. 

  1447. 		if (!(strcmp($row_return["id"], $alldata["ordReturnID"]))) $strreturn = $row_return["status"];
    1448. 

  1448. 	}
    1449. 

  1449. 	echo $strreturn;
    1450. 

  1450. }?>
    1451. 

  1451.                 </td>
    1452. 

  1452. 			  </tr>
    1453. 

  1453. 		
    1454. 

  1454. 			<tr>
    1455. 

  1455. 			  <td width="20%">&nbsp;</td>
    1456. 

  1456. 			  <td align="center" colspan="3"><?php if(! $doedit) print '<input type="submit" value="' . $yyUpdate . '" />'?></td>
    1457. 

  1457. 			  <td>&nbsp;</td>
    1458. 

  1458. 			  </tr>
    1459. 

  1459. 			<? //} ?>
    1460. 

  1460. <?php	if(($alldata["ordPayProvider"]==3 || $alldata["ordPayProvider"]==13 || $alldata['ordPayProvider']==20) && $alldata["ordAuthNumber"] != ""){ 
    1461. 

  1461. 			if($alldata['ordPayProvider']==20 && $doedit){ ?>
    1462. 

  1462. 			<tr>
    1463. 

  1463. 			  <td align="center" colspan="5">
    1464. 

  1464. 				<strong>Update Google Account Status:</strong> <span id="googleupdatespan"></span>			  </td>
    1465. 

  1465. 			</tr>
    1466. 

  1466. 			<tr>
    1467. 

  1467. 			  <td align="center" colspan="5">
    1468. 

  1468. 				<input type="button" value="Charge Order" onclick="updategoogleorder('charge',<?php print $alldata['ordID']?>)" />
    1469. 

  1469. 				<input type="button" value="Cancel Order" onclick="updategoogleorder('cancel',<?php print $alldata['ordID']?>)" />
    1470. 

  1470. 				<input type="button" value="Refund Order" onclick="updategoogleorder('refund',<?php print $alldata['ordID']?>)" />
    1471. 

  1471. 				<input type="button" value="Ship Order" onclick="updategoogleorder('ship',<?php print $alldata['ordID']?>)" />			  </td>
    1472. 

  1472. 			</tr>
    1473. 

  1473. <?php		} ?>
    1474. 

  1474. 			<!--<tr>
    1475. 

  1475. 			  <td align="center" colspan="6">
    1476. 

  1476. 				<input type="button" value="Capture Funds" onclick="javascript:openemailpopup('oid=<?php print $alldata["ordID"]?>')" />			  </td>
    1477. 

  1477. 			</tr>-->
    1478. 

  1478. <?php	}
    1479. 

  1479. 		if(! $doedit) print '</form>';
    1480. 

  1480. 	if((int)$alldata["ordPayProvider"]==10){ ?>
    1481. 

  1481. 			<tr>
    1482. 

  1482. 			  <td align="center" colspan="5"><hr width="50%">			  </td>
    1483. 

  1483. 			</tr>
    1484. 

  1484. <?php	if(@$_SERVER["HTTPS"] != "on" && (@$_SERVER["SERVER_PORT"] != "443") && @$nochecksslserver != TRUE){ ?>
    1485. 

  1485. 			<tr>
    1486. 

  1486. 			  <td align="center" colspan="5"><strong><font color="#FF0000">You do not appear to be viewing this page on a secure (https) connection. Credit card information cannot be shown.</font></strong></td>
    1487. 

  1487. 			</tr>
    1488. 

  1488. <?php	}else{
    1489. 

  1489. 			$ordCNum = $alldata["ordCNum"];
    1490. 

  1490. 			if($ordCNum != ""){
    1491. 

  1491. 				$cnumarr = "";
    1492. 

  1492. 				$encryptmethod = strtolower(@$encryptmethod);
    1493. 

  1493. 				if($encryptmethod=="none"){
    1494. 

  1494. 					$cnumarr = explode("&",$ordCNum);
    1495. 

  1495. 				}elseif($encryptmethod=="mcrypt"){
    1496. 

  1496. 					if(@$mcryptalg == "") $mcryptalg = MCRYPT_BLOWFISH;
    1497. 

  1497. 					$td = mcrypt_module_open($mcryptalg, '', 'cbc', '');
    1498. 

  1498. 					$thekey = @$ccencryptkey;
    1499. 

  1499. 					$thekey = substr($thekey, 0, mcrypt_enc_get_key_size($td));
    1500. 

  1500. 					$cnumarr = explode(" ", $ordCNum);
    1501. 

  1501. 					$iv = @$cnumarr[0];
    1502. 

  1502. 					$iv = @pack("H" . strlen($iv), $iv);
    1503. 

  1503. 					$ordCNum = @pack("H" . strlen(@$cnumarr[1]), @$cnumarr[1]);
    1504. 

  1504. 					mcrypt_generic_init($td, $thekey, $iv);
    1505. 

  1505. 					$cnumarr = explode("&", mdecrypt_generic($td, $ordCNum));
    1506. 

  1506. 					mcrypt_generic_deinit($td);
    1507. 

  1507. 					mcrypt_module_close($td);
    1508. 

  1508. 				}else{
    1509. 

  1509. 					print '<tr><td colspan="4">WARNING: $encryptmethod is not set. Please see http://www.ecommercetemplates.com/phphelp/ecommplus/parameters.asp#encryption</td></tr>';
    1510. 

  1510. 				}
    1511. 

  1511. 			} ?>
    1512. 

  1512. 			<tr>
    1513. 

  1513. 			  <td align="right" colspan="3"><strong><?php print $xxCCName?>:</strong></td>
    1514. 

  1514. 			  <td align="left" colspan="2"><?php
    1515. 

  1515. 			if(@$encryptmethod!=""){
    1516. 

  1516. 					if(is_array(@$cnumarr)) print URLDecode(@$cnumarr[4]);
    1517. 

  1517. 			} ?></td>
    1518. 

  1518. 			</tr>
    1519. 

  1519. 			<tr>
    1520. 

  1520. 			  <td align="right" colspan="3"><strong><?php print $yyCarNum?>:</strong></td>
    1521. 

  1521. 			  <td align="left" colspan="2"><?php
    1522. 

  1522. 			if($ordCNum != ""){
    1523. 

  1523. 				if(is_array($cnumarr)) print $cnumarr[0];
    1524. 

  1524. 			}else{
    1525. 

  1525. 				print "(no data)";
    1526. 

  1526. 			} ?></td>
    1527. 

  1527. 			</tr>
    1528. 

  1528. 			<tr>
    1529. 

  1529. 			  <td align="right" colspan="3"><strong><?php print $yyExpDat?>:</strong></td>
    1530. 

  1530. 			  <td align="left" colspan="2"><?php
    1531. 

  1531. 			if(@$encryptmethod!=""){
    1532. 

  1532. 					if(is_array(@$cnumarr)) print @$cnumarr[1];
    1533. 

  1533. 			} ?></td>
    1534. 

  1534. 			</tr>
    1535. 

  1535. 			<tr>
    1536. 

  1536. 			  <td align="right" colspan="3"><strong>CVV Code:</strong></td>
    1537. 

  1537. 			  <td align="left" colspan="2"><?php
    1538. 

  1538. 			if(@$encryptmethod!=""){
    1539. 

  1539. 					if(is_array(@$cnumarr)) print @$cnumarr[2];
    1540. 

  1540. 			} ?></td>
    1541. 

  1541. 			</tr>
    1542. 

  1542. 			<tr>
    1543. 

  1543. 			  <td align="right" colspan="3"><strong>Issue Number:</strong></td>
    1544. 

  1544. 			  <td align="left" colspan="2"><?php
    1545. 

  1545. 			if(@$encryptmethod!=""){
    1546. 

  1546. 					if(is_array(@$cnumarr)) print @$cnumarr[3];
    1547. 

  1547. 			} ?></td>
    1548. 

  1548. 			</tr>
    1549. 

  1549. <?php		if($ordCNum != "" && !$doedit){ ?>
    1550. 

  1550. 		  <form method="POST" action="/admin/orders.php?id=<?php print $_GET["id"]?>">
    1551. 

  1551. 			<input type="hidden" name="delccdets" value="<?php print $_GET["id"]?>" />
    1552. 

  1552. 			<tr>
    1553. 

  1553. 			  <td align="center" colspan="5"><input type=submit value="<?php print $yyDelCC?>" /></td>
    1554. 

  1554. 			</tr>
    1555. 

  1555. 		  </form>
    1556. 

  1556. <?php		}
    1557. 

  1557. 		}
    1558. 

  1558. 	}
    1559. 

  1559. } // isprinter ?>
    1560. 

  1560. 			<tr>
    1561. 

  1561. 			  <td align="center" colspan="5">&nbsp;<br /></td>
    1562. 

  1562. 			</tr>
    1563. 

  1563. 		  </table>
    1564. 

  1564. <span id="productspan">
    1565. 

  1565. 			<? if(!empty($pg_msg)) echo $pg_msg;?>
    1566. 

  1566. 		  <table width="100%" border="1" cellspacing="0" cellpadding="4" bordercolor="#999999" style="border-collapse: collapse">
    1567. 

  1567. 			<tr>
    1568. 

  1568. 			  <td><strong><?php print $xxPrId?></strong></td>
    1569. 

  1569. 			  <td><strong><?php print $xxPrNm?></strong></td>
    1570. 

  1570. 			  <td><strong><?php print $xxPrOpts?></strong></td>
    1571. 

  1571. 			  <td><strong><?php print $xxQuant?></strong></td>
    1572. 

  1572. 			  <td><strong><?php if($doedit) print $xxUnitPr; else print $xxPrice?></strong></td>
    1573. 

  1573. <?php	if($doedit) print '<td align="center"><strong>DEL</strong></td>' ?>
    1574. 

  1574. 			</tr>
    1575. 

  1575. <?php
    1576. 

  1576. 	$totoptpricediff = 0;
    1577. 

  1577. 	if(mysql_num_rows($allorders)>0){
    1578. 

  1578. 		$totoptpricediff = 0;
    1579. 

  1579. 		$rowcounter=0;
    1580. 

  1580. 		while($rsOrders = mysql_fetch_assoc($allorders)){
    1581. 

  1581. 			$optpricediff = 0;
    1582. 

  1582. ?>
    1583. 

  1583. 			<tr>
    1584. 

  1584. 			  <td valign="top" nowrap>
    1585. 

  1585. 			  <span style="float:right; font-weight:bold;"><?=$rsOrders["dsName"]?></span>
    1586. 

  1586. 			  <?php if($doedit) {
    1587. 

  1587. 			  			print '<input type="button" value="..." onclick="updateoptions(' . $rowcounter . ')">&nbsp;<input type="hidden" name="cartid' . $rowcounter . '" value="' . str_replace('"','&quot;',$rsOrders["cartID"]) . '" />'?><strong><?php print editfunc($rsOrders["cartProdID"],'prodid' . $rowcounter,18)
    1588. 

  1588. 				?>		
    1589. 

  1589. 			  <span class="reason_button" style="position:relative; z-index:1; <? if($alldata["ordReturnID"]==0) echo 'display:none;';?> ">
    1590. 

  1590.            	  <input style="z-index:0; <? if($rsOrders["cartReason"]>0) echo 'font-weight:bold;';?>" name="reason" type="button" value="Reason" onclick="Element.toggle('r_<?=$rowcounter?>');" />
    1591. 

  1591.               <div id="r_<?=$rowcounter?>" style="position:absolute; display:none; background-color:#FFFFFF; border: 1px solid #CCCCCC; padding:6px; margin:-18px 0px 4px 240px">
    1592. 

  1592.                               <table width="100%" border="0" cellspacing="0" cellpadding="2">
    1593. 

  1593.                                   <tr>
    1594. 

  1594.                                     <td>Reason:</td>
    1595. 

  1595.                                     <td>
    1596. 

  1596.                                       <select name="reason_<?=$rowcounter?>">
    1597. 

  1597.                                           <option value="0" <?php if (!(strcmp("0", $rsOrders["cartReason"]))) {echo "selected=\"selected\"";} ?>>none</option>
    1598. 

  1598.                                           <? for($k=0; $k<count($arrReasons); $k++){?>
    1599. 

  1599.                                           <option value="<?=$arrReasons[$k]["id"]?>" <?php if (!(strcmp($arrReasons[$k]["id"], $rsOrders["cartReason"]))) {echo "selected=\"selected\"";} ?>>
    1600. 

  1600.                                           <?=$arrReasons[$k]["reason"]?>
    1601. 

  1601.                                           </option>
    1602. 

  1602.                                           <? } ?>
    1603. 

  1603.                                       </select>
    1604. 

  1604.                                  
    1605. 

  1605.                                     </td>
    1606. 

  1606.                                   </tr>
    1607. 

  1607.                                   <tr>
    1608. 

  1608.                                     <td valign="top">Note:</td>
    1609. 

  1609.                                     <td><textarea  name="note_<?=$rowcounter?>" cols="26" rows="3"><?=$rsOrders["cartNote"]?></textarea></td>
    1610. 

  1610.                                   </tr>                                  
    1611. 

  1611.                 </table>
    1612. 

  1612. 			  </div>
    1613. 

  1613. 						</span>
    1614. 

  1614. 				<?	} else { 
    1615. 

  1615.                 		echo $rsOrders["cartProdID"];
    1616. 

  1616. 						for($k=0; $k<count($arrReasons); $k++){
    1617. 

  1617. 							if (!(strcmp($arrReasons[$k]["id"], $rsOrders["cartReason"]))) echo '<strong> - ' . $strreturn .' Reason: ' . $arrReasons[$k]["reason"] . '</strong>';
    1618. 

  1618. 						}
    1619. 

  1619.                		} ?>
    1620. 

  1620.                 </strong>
    1621. 

  1621. 			  <? if ($rsOrders["pSell"]==1 && $doedit) echo  '('.$rsOrders["pInStock"].')';?>
    1622. 

  1622. 			  </td>
    1623. 

  1623. 			  <td valign="top">
    1624. 

  1624. 			  	<?php print editfunc($rsOrders["cartProdName"],'prodname' . $rowcounter,24)?><br />
    1625. 

  1625. 				<? 
    1626. 

  1626. 				$isemailcert=FALSE;
    1627. 

  1627. 				$sql_opt="SELECT coCartOption FROM cartoptions WHERE coCartID=".$rsOrders["cartID"];
    1628. 

  1628. 				$result_opt=mysql_query($sql_opt);
    1629. 

  1629. 				if($result_opt) {
    1630. 

  1630. 					while($row_opt=mysql_fetch_assoc($result_opt)){
    1631. 

  1631. 						if($row_opt['coCartOption']=='Email' || $row_opt['coCartOption']=='Card via Mail')$isemailcert=TRUE;
    1632. 

  1632. 					}	
    1633. 

  1633. 				}	
    1634. 

  1634. 				if($rsOrders["p_iscert"]=='1'){
    1635. 

  1635. 					$sql_cert="SELECT cert_id,cert_code FROM certificates WHERE cert_order_id=".$_GET["id"]." AND cert_prod_id='".$rsOrders["cartProdID"]."'";
    1636. 

  1636. 					$result_cert=mysql_query($sql_cert);
    1637. 

  1637. 					if(mysql_num_rows($result_cert)>0 && $isemailcert) {
    1638. 

  1638. 						while($row_cert=mysql_fetch_assoc($result_cert)){?>					
    1639. 

  1639. 						<stong>(<?=$row_cert['cert_code']?>)</strong><input name="certID<?=$rowcounter?>" type="hidden" value="<?=$row_cert['cert_id']?>" /> <a href="/admin/certs.php?mode=1&amp;sbcode=<?=$row_cert['cert_id']?>">view</a> | <a href="/admin/certs.php?mode=2&amp;sbcode=<?=$row_cert['cert_id']?>">history</a><br />
    1640. 

  1640. 					<? } 
    1641. 

  1641. 					}elseif($doedit && $isemailcert){?>
    1642. 

  1642. 						<div id="cert_button">
    1643. 

  1643. <!--					<form action="/admin/orders.php" method="post" name="giftcert" id="giftcertform" >
    1644. 

  1644. -->						<input name="giftcertOrderID" type="hidden" value="<?=$_GET["id"]?>" />
    1645. 

  1645. 						<input id="cert_prod" name="cert_prod" type="hidden" value="<?=$rsOrders["cartProdID"]?>" />
    1646. 

  1646. 						<input name="giftcert" type="button" value="Create Gift Cert Code" onclick="createGiftCert('<?=$_GET["id"]?>','<?=$rsOrders["cartProdID"]?>');" />
    1647. 

  1647. <!--					</form>						
    1648. 

  1648. -->						</div>
    1649. 

  1649. 						<div id="giftcertholder" style="display:none;"></div>					
    1650. 

  1650. 					<? }elseif($isemailcert) echo "Edit order to generate gift certificate."; 
    1651. 

  1651. 				}?>	
    1652. 

  1652. 				<? 
    1653. 

  1653. 				if(!empty($rsOrders["pDownload"])){
    1654. 

  1654. 					$sql_down="SELECT * FROM digitaldownloads WHERE orderID=".$_GET["id"]." AND type='".$rsOrders["cartProdID"]."'";
    1655. 

  1655. 					//echo $sql_down;
    1656. 

  1656. 					$result_down=mysql_query($sql_down);
    1657. 

  1657. 					if(mysql_num_rows($result_down)>0) {?>
    1658. 

  1658. 						<ol style="margin:2px;">
    1659. 

  1659. 						<? while($row_down=mysql_fetch_assoc($result_down)){?>					
    1660. 

  1660. 						
    1661. 

  1661. 						<li style="margin:1px; font-weight:bold;">License ID: <?=$row_down['licenseID']?><br />
    1662. 

  1662. 						Password: <?=$row_down['password']?></li>
    1663. 

  1663. 					<? 	  } ?>
    1664. 

  1664. 						</ol>
    1665. 

  1665. 					<? } elseif($doedit) {?>
    1666. 

  1666. 					<form action="/admin/orders.php" method="post" name="download">
    1667. 

  1667. 						<input name="downOrder" type="hidden" value="<?=$_GET["id"]?>" />
    1668. 

  1668. 						<input name="downQty" type="hidden" value="<?=$rsOrders["cartQuantity"]?>" />
    1669. 

  1669. 						<input name="downloadtype" type="hidden" value="<?=$rsOrders["cartProdID"]?>" />
    1670. 

  1670. 						<input name="getdownload" type="submit" value="Get License ID and Password" />
    1671. 

  1671. 					</form>				
    1672. 

  1672. 					<? 
    1673. 

  1673. 						} else echo "Edit order to get License ID and Password."; 				
    1674. 

  1674. 				}?>				
    1675. 

  1675. 			  </td>
    1676. 

  1676. 			  <td valign="top"><?php
    1677. 

  1677. 			if($doedit) print '<span id="optionsspan' . $rowcounter . '">';
    1678. 

  1678. 			$sSQL = "SELECT coOptGroup,coCartOption,coPriceDiff,coOptID,optGroup,optStock,optStyleID,coExtendShipping,ui.display_image,ui.org_img_name FROM cartoptions LEFT JOIN options ON cartoptions.coOptID=options.optID LEFT JOIN uploaded_images ui ON cartoptions.coCartOption=ui.id WHERE coCartID=" . $rsOrders["cartID"] . " ORDER BY coID";
    1679. 

  1679. 			$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1680. 

  1680. 			if(mysql_num_rows($result) > 0){
    1681. 

  1681. 				if($doedit) print '<table border="0" cellspacing="0" cellpadding="1" width="100%">';
    1682. 

  1682. 				while($rs2 = mysql_fetch_array($result)){
    1683. 

  1683. 					$extend_shipping='';
    1684. 

  1684. 					if(!empty($rs2["coExtendShipping"])){ 
    1685. 

  1685. 						if($rs2["coExtendShipping"]>19999999) {
    1686. 

  1686. 							$thisyeart=substr($rs2["coExtendShipping"],0,4);
    1687. 

  1687. 							$thismontht=substr($rs2["coExtendShipping"],4,2);
    1688. 

  1688. 							$thisdayt=substr($rs2["coExtendShipping"],6,2);
    1689. 

  1689. 							$extend_shipping=' <span style="color:#FF0000;font-weight:bold;">(PRE-ORDER. Will ship after '.$thismontht.'-'.$thisdayt.'-'.$thisyeart. ')</span>';
    1690. 

  1690. 						}else $extend_shipping=' <span style="color:#FF0000;font-weight:bold;">(This option increases shipping time by '.$rs2["coExtendShipping"]. ' days)</span>';
    1691. 

  1691. 					}
    1692. 

  1692. 					$imgsrc='';
    1693. 

  1693. 					$imgname='';
    1694. 

  1694. 					if(!empty($rs2["display_image"])) {
    1695. 

  1695. 						$imgsrc='<br /><img src="/imguploads/img_screen/'.$rs2["display_image"].'.gif" align="top"><div style="font-size:9px;">(If the image does not appear there is a problem with the custom screen upload)</div>';
    1696. 

  1696. 						$imgname='<br />&nbsp;&nbsp;&nbsp;-Image Name: '.$rs2["org_img_name"];
    1697. 

  1697. 					}
    1698. 

  1698. 					if($doedit){
    1699. 

  1699. 						print '<tr><td align="right" valign="top"><strong>' . $rs2["coOptGroup"] . ':</strong></td><td>';
    1700. 

  1700. 						if(is_null($rs2["optGroup"])){
    1701. 

  1701. 							print 'xxxxxx';
    1702. 

  1702. 						}else{
    1703. 

  1703. 							$sSQL="SELECT optID," . getlangid("optName",32) . ",optPriceDiff,optType,optStock,optFlags,optStock,optPriceDiff AS optDims FROM options INNER JOIN optiongroup ON options.optGroup=optiongroup.optGrpID WHERE optGroup=" . $rs2["optGroup"] . ' ORDER BY optID';
    1704. 

  1704. 							$result2 = mysql_query($sSQL) or print(mysql_error().$sSQL);
    1705. 

  1705. 							if($rsl = mysql_fetch_assoc($result2)){
    1706. 

  1706. 								if(abs($rsl["optType"])==2){
    1707. 

  1707. 									print '<select onchange="dorecalc(true)" name="optn' . $rowcounter . '_' . $rs2["coOptID"].'" id="optn' . $rowcounter . '_' . $rs2["coOptID"] . '" size="1">';
    1708. 

  1708. 									do {
    1709. 

  1709. 										print '<option value="' . $rsl["optID"] . "|" . (($rsl["optFlags"] & 1) == 1 ? ($rsOrders["cartProdPrice"]*$rsl["optPriceDiff"])/100.0 : $rsl["optPriceDiff"]) . '"';
    1710. 

  1710. 										if($rsl["optID"]==$rs2["coOptID"]) print ' selected';
    1711. 

  1711. 										print '>' . $rsl[getlangid("optName",32)].' ('.$rsl["optStock"].')';
    1712. 

  1712. 										if((double)$rsl["optPriceDiff"] != 0){
    1713. 

  1713. 											print ' ';
    1714. 

  1714. 											if((double)$rsl["optPriceDiff"] > 0) print '+';
    1715. 

  1715. 											if(($rsl["optFlags"] & 1) == 1)
    1716. 

  1716. 												print number_format(($rsOrders["cartProdPrice"]*$rsl["optPriceDiff"])/100.0,2,'.','');
    1717. 

  1717. 											else
    1718. 

  1718. 												print number_format($rsl["optPriceDiff"],2,'.','');
    1719. 

  1719. 										}
    1720. 

  1720. 										print '</option>';
    1721. 

  1721. 									} while($rsl = mysql_fetch_array($result2));
    1722. 

  1722. 									print '</select>';
    1723. 

  1723. 								}else{
    1724. 

  1724. 									print "<input type='hidden' name='optn" . $rowcounter . '_' . $rs2["coOptID"] . "' value='" . $rsl["optID"] . "' /><textarea wrap='virtual' name='voptn" . $rowcounter . '_' . $rs2["coOptID"] . "' id='voptn". $rowcounter. '_' . $rs2["coOptID"] . "' cols='30' rows='3'>";
    1725. 

  1725. 									print $rs2["coCartOption"] . '</textarea>'.' '.$imgname.' '.$imgsrc.$cert_code. $extend_shipping ;
    1726. 

  1726. 								}
    1727. 

  1727. 							}
    1728. 

  1728. 						}
    1729. 

  1729. 						print "</td></tr>";
    1730. 

  1730. 					}else{						
    1731. 

  1731. 						print '<strong>' . $rs2["coOptGroup"] . ':</strong> ' . str_replace(array("\r\n","\n"),array("<br />","<br />"),$rs2["coCartOption"]) .' '.$rs2["optStyleID"].' '.$imgname.' '.$imgsrc.$cert_code. $extend_shipping . '<br />';
    1732. 

  1732. 					}
    1733. 

  1733. 					if($doedit)
    1734. 

  1734. 						$optpricediff += $rs2["coPriceDiff"];
    1735. 

  1735. 					else
    1736. 

  1736. 						$rsOrders["cartProdPrice"] += $rs2["coPriceDiff"];
    1737. 

  1737. 				}
    1738. 

  1738. 				if($doedit) print '</table>';
    1739. 

  1739. 			}else{
    1740. 

  1740. 				print '-';
    1741. 

  1741. 			}
    1742. 

  1742. 			mysql_free_result($result);
    1743. 

  1743. 			if($doedit) print '</span>' ?></td>
    1744. 

  1744. 			  <td valign="top"><?php print editfunc($rsOrders["cartQuantity"],'quant' . $rowcounter . '" onchange="dorecalc(true)',5)?></td>
    1745. 

  1745. 			  <td valign="top"><?php if($doedit) print editnumeric($rsOrders["cartProdPrice"],'price' . $rowcounter . '" onchange="dorecalc(true)',7); else print FormatEuroCurrency($rsOrders["cartProdPrice"]*$rsOrders["cartQuantity"])?>
    1746. 

  1746. <?php				if($doedit){
    1747. 

  1747. 						print '<input type="hidden" id="optdiffspan' . $rowcounter . '" value="' . $optpricediff . '">';
    1748. 

  1748. 						$totoptpricediff += ($optpricediff*$rsOrders["cartQuantity"]);
    1749. 

  1749. 					}
    1750. 

  1750. 			?></td>
    1751. 

  1751. <?php		if($doedit) print '<td align="center"><input type="checkbox" name="del_' . $rowcounter . '" id="del_' . $rowcounter . '" value="yes" /></td>' ?>
    1752. 

  1752. 			</tr>
    1753. 

  1753. <?php		$rowcounter++;
    1754. 

  1754. 		}
    1755. 

  1755. 	}
    1756. 

  1756. ?>
    1757. 

  1757. <!--NEXTPRODUCTCOMMENT-->
    1758. 

  1758. <?php if($doedit){ ?>
    1759. 

  1759. 			<tr>
    1760. 

  1760. 			  <td align="right" colspan="4">
    1761. 

  1761. 				<table width="100%" border="0" cellspacing="0" cellpadding="0">
    1762. 

  1762. 				  <tr>
    1763. 

  1763. 					<td align="center"><?php if($doedit) print '<input style="width:30px;" type="button" value="-" onclick="extraproduct(\'-\')"> ' . $yyMoProd . ' <input style="width:30px;" type="button" value="+" onclick="extraproduct(\'+\')"> &nbsp; <input type="button" value="' . $yyRecal . '" onclick="dorecalc(false)">'?></td>
    1764. 

  1764. 					<td align="right"><strong>Options Total:</strong></td>
    1765. 

  1765. 				  </tr>
    1766. 

  1766. 				</table></td>
    1767. 

  1767. 			  <td align="left" colspan="2"><span id="optdiffspan"><?php print number_format($totoptpricediff, 2, '.', '')?></span></td>
    1768. 

  1768. 			</tr>
    1769. 

  1769. <?php } ?>
    1770. 

  1770. 

  1771. 			<tr>
    1772. 

  1772. 			  <td align="right" colspan="4"><strong><?php print $xxOrdTot?>:</strong></td>
    1773. 

  1773. 			  <td align="left"><div id="ordTot"><?php echo sprintf("%.2f",$alldata["ordTotal"]); ?></div><input name="ordtotal" id="ordtotal" type="hidden" value="<?php echo $alldata["ordTotal"] ?>" /></td>
    1774. 

  1774. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1775. 

  1775. 			</tr>
    1776. 

  1776. 			<?php
    1777. 

  1777. 	$runTot = $alldata["ordTotal"];
    1778. 

  1778. 	$sql = "SELECT * FROM price_adj WHERE ordID = " . $_GET['id'] . " ORDER BY ordering";
    1779. 

  1779. 	$res = mysql_query($sql) or print(mysql_error().$sql);
    1780. 

  1780. 	if(mysql_num_rows($res) > 0) {
    1781. 

  1781. 		$k=1;
    1782. 

  1782. 		$prcTot = 0;
    1783. 

  1783. ?>
    1784. 

  1784. 			<tr>
    1785. 

  1785. 				<td>&nbsp;</td>
    1786. 

  1786. 				<td>&nbsp;</td>
    1787. 

  1787. 				<td>&nbsp;</td>
    1788. 

  1788. 				<td>&nbsp;</td>
    1789. 

  1789. 				<td>&nbsp;</td>
    1790. 

  1790. 			</tr>
    1791. 

  1791. <?php
    1792. 

  1792. 		while($row=mysql_fetch_assoc($res)) {
    1793. 

  1793. 			$price = 0;
    1794. 

  1794. 			$disp_price = 0;
    1795. 

  1795. 			$amount = '';
    1796. 

  1796. 			
    1797. 

  1797. 			if($row['type'] == 'credit') {
    1798. 

  1798. 				if($row['amt_type'] == 'percentage') {
    1799. 

  1799. 					$price = $runTot * ($row['amt'] * .01);
    1800. 

  1800. 					$runTot -= $price;
    1801. 

  1801. 					$prcTot -= $price;
    1802. 

  1802. 					$disp_price = '-'.(int)$row['amt'].'%';
    1803. 

  1803. 					$amount = '-'.money_format("%!.2n",$price);
    1804. 

  1804. 				}else{
    1805. 

  1805. 					$price = '$-'.money_format("%!.2n",$row['amt']);
    1806. 

  1806. 					$runTot -= $row['amt'];
    1807. 

  1807. 					$prcTot -= $row['amt'];
    1808. 

  1808. 					$disp_price = $price;
    1809. 

  1809. 					$amount = '-'.money_format("%!.2n",$row['amt']);
    1810. 

  1810. 				}
    1811. 

  1811. 			}else{
    1812. 

  1812. 				if($row['amt_type'] == 'percentage') {
    1813. 

  1813. 					$price = $runTot * ($row['amt'] * .01);
    1814. 

  1814. 					$runTot += $price;
    1815. 

  1815. 					$prcTot += $price;
    1816. 

  1816. 					$disp_price = (int)$row['amt'].'%';
    1817. 

  1817. 					$amount = money_format("%.2n",$price);
    1818. 

  1818. 				}else{
    1819. 

  1819. 					$price = money_format("%.2n",$row['amt']);
    1820. 

  1820. 					$runTot += $row['amt'];
    1821. 

  1821. 					$prcTot += $row['amt'];
    1822. 

  1822. 					$disp_price = $price;
    1823. 

  1823. 					$amount = money_format("%.2n",$row['amt']);
    1824. 

  1824. 				}
    1825. 

  1825. 			}
    1826. 

  1826. ?>
    1827. 

  1827. 			<tr>
    1828. 

  1828. 				<td colspan="3" style="font-weight: bold; text-align: right">Price Adjustment <?=$k?>:</td>
    1829. 

  1829. 				<td align="left"<?=(strstr($disp_price,"-"))?' style="color: red"':''?>><?=$disp_price?></td>
    1830. 

  1830. 				<td align="left"<?=(strstr($disp_price,"-"))?' style="color: red"':''?>><?=$amount?></td>
    1831. 

  1831. 			</tr>
    1832. 

  1832. <?php
    1833. 

  1833. 			$k++;
    1834. 

  1834. 		}
    1835. 

  1835. ?>
    1836. 

  1836. 			<tr>
    1837. 

  1837. 				<td>&nbsp;</td>
    1838. 

  1838. 				<td>&nbsp;</td>
    1839. 

  1839. 				<td>&nbsp;</td>
    1840. 

  1840. 				<td>&nbsp;</td>
    1841. 

  1841. 				<td>&nbsp;</td>
    1842. 

  1842. 			</tr>
    1843. 

  1843. <?php
    1844. 

  1844. 	}
    1845. 

  1845. ?>
    1846. 

  1846. <?php if((double)$alldata["ordShipping"]!=0.0 || $doedit){ ?>
    1847. 

  1847. 			<tr>
    1848. 

  1848. 			  <td align="right" colspan="4"><strong><?php print $xxShippg?>:</strong></td>
    1849. 

  1849. 			  <td align="left"><?php print editnumeric($alldata["ordShipping"],"ordShipping",7)?></td>
    1850. 

  1850. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1851. 

  1851. 			</tr>
    1852. 

  1852. <?php }
    1853. 

  1853. 	  if((double)$alldata["ordHandling"]!=0.0 || $doedit){ ?>
    1854. 

  1854. 			<tr>
    1855. 

  1855. 			  <td align="right" colspan="4"><strong><?php print $xxHndlg?>:</strong></td>
    1856. 

  1856. 			  <td align="left"><?php print editnumeric($alldata["ordHandling"],"ordHandling",7)?></td>
    1857. 

  1857. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1858. 

  1858. 			</tr>
    1859. 

  1859. <?php }
    1860. 

  1860. 	  if((double)$alldata["ordDiscount"]!=0.0 || $doedit){ ?>
    1861. 

  1861. 			<tr>
    1862. 

  1862. 			  <td align="right" colspan="4"><strong><?php print $xxDscnts?>:</strong></td>
    1863. 

  1863. 			  <td align="left"><font color="#FF0000"><?php print editnumeric($alldata["ordDiscount"],"ordDiscount",7)?></font></td>
    1864. 

  1864. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1865. 

  1865. 			</tr>
    1866. 

  1866. <?php }
    1867. 

  1867. 	  if((double)$alldata["ord_cert_amt"]!=0.0 || $doedit){ 
    1868. 

  1868. 			$sqlcert="SELECT cert_code FROM certificates WHERE cert_id=".$alldata["ord_cert_id"];
    1869. 

  1869. 			$resultcert=mysql_query($sqlcert);
    1870. 

  1870. 			if(mysql_num_rows($resultcert)>0) $rowcert=mysql_fetch_assoc($resultcert);
    1871. 

  1871. 			?>
    1872. 

  1872. 			<tr>
    1873. 

  1873. 			  <td align="right" colspan="4"><strong><? if(!empty($rowcert["cert_code"])) echo '('.$rowcert["cert_code"].')';?> <?php print $xxGCerts?>:</strong></td>
    1874. 

  1874. 			  <td align="left"><font color="#FF0000"><?php print editnumeric($alldata["ord_cert_amt"],"ord_cert_amt",7)?></font></td>
    1875. 

  1875. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1876. 

  1876. 			</tr>
    1877. 

  1877. <?php }
    1878. 

  1878. 	  if((double)$alldata["ordStateTax"]!=0.0 || $doedit){ ?>
    1879. 

  1879. 			<tr>
    1880. 

  1880. 			  <td align="right" colspan="4"><strong><?php print $xxStaTax?>:</strong></td>
    1881. 

  1881. 			  <td align="left"><?php print editnumeric($alldata["ordStateTax"],"ordStateTax",7)//$alldata["ordStateTax"]?></td>
    1882. 

  1882. <?php		if($doedit) print '<td align="center" nowrap><input type="text" name="staterate" id="staterate" size="1" value="' . $statetaxrate . '">%</td>' ?>
    1883. 

  1883. 			</tr>
    1884. 

  1884. <?php }
    1885. 

  1885. 	  if((double)$alldata["ordCountryTax"]!=0.0 || $doedit){ ?>
    1886. 

  1886. 			<tr>
    1887. 

  1887. 			  <td align="right" colspan="4"><strong><?php print $xxCntTax?>:</strong></td>
    1888. 

  1888. 			  <td align="left"><?php print editnumeric($alldata["ordCountryTax"],"ordCountryTax",7)?></td>
    1889. 

  1889. <?php		if($doedit) print '<td align="center" nowrap><input type="text" name="countryrate" id="countryrate" size="1" value="' . $countrytaxrate . '">%</td>' ?>
    1890. 

  1890. 			</tr>
    1891. 

  1891. <?php }
    1892. 

  1892. 	  if((double)$alldata["ordHSTTax"]!=0.0 || ($doedit && @$canadataxsystem)){ ?>
    1893. 

  1893. 			<tr>
    1894. 

  1894. 			  <td align="right" colspan="4"><strong><?php print $xxHST?>:</strong></td>
    1895. 

  1895. 			  <td align="left"><?php print editnumeric($alldata["ordHSTTax"],"ordHSTTax",7)?></td>
    1896. 

  1896. <?php		if($doedit) print '<td align="center" nowrap><input type="text" name="hstrate" id="hstrate" size="1" value="' . $hsttaxrate . '">%</td>' ?>
    1897. 

  1897. 			</tr>
    1898. 

  1898. <?php } ?>
    1899. 

  1899. 			<tr>
    1900. 

  1900. 			  <td align="right" colspan="4"><strong><?php print $xxGndTot?>:</strong></td>
    1901. 

  1901. 			  <td align="left"><span id="grandtotalspan"><?php print FormatEuroCurrency(($alldata["ordTotal"]+$alldata["ordStateTax"]+$alldata["ordCountryTax"]+$alldata["ordHSTTax"]+$alldata["ordShipping"]+$alldata["ordHandling"]+$prcTot)-$alldata["ordDiscount"]-$alldata["ord_cert_amt"])?></span></td>
    1902. 

  1902. <?php		if($doedit) print '<td align="center">&nbsp;</td>' ?>
    1903. 

  1903. 			</tr>
    1904. 

  1904. 	  </table>
    1905. 

  1905. </span>
    1906. 

  1906. 		  </td>
    1907. 

  1907. 		</tr>
    1908. 

  1908. <?php	if($isprinter && @$invoicefooter != ""){ ?>
    1909. 

  1909. 		<tr> 
    1910. 

  1910.           <td width="100%"><?php print $invoicefooter?></td>
    1911. 

  1911. 		</tr>
    1912. 

  1912. <?php	}elseif($doedit){ 
    1913. 

  1913. 			
    1914. 

  1914. 			//echo 'old status='.$alldata["ordStatus"]." ".$_GET["id"];
    1915. 

  1915. 		
    1916. 

  1916. 			if(! ($oldordstatusedit==999) && ($oldordstatusedit >=3 && $oldordstatusedit!=10 && $oldordstatusedit!=17)) release_stock($_GET["id"]);//echo 'edit release_stock';$_SESSION['counter_id']++;}
    1917. 

  1917. 

  1918. 			if($oldordstatusedit!=17 && $oldordstatusedit!=''){
    1919. 

  1919. 			$sql_status_change="UPDATE orders SET ordStatus=17 WHERE ordID=".$_GET["id"];
    1920. 

  1920. 			//echo $sql_status_change;
    1921. 

  1921. 			mysql_query($sql_status_change) or print(mysql_error());
    1922. 

  1922. 			if(!setNewLocation( 17 , $_GET["id"],'Manual', 'Edit Order' )) print("Unable to record status change.");
    1923. 

  1923. 		}
    1924. 

  1924. ?>
    1925. 

  1925. 		<tr> 
    1926. 

  1926.           <td align="center" width="100%">
    1927. 

  1927. 		<br />
    1928. 

  1928. 			<div style="font-weight:bold;">
    1929. 

  1929. 				 Set This Orders Status To:  
    1930. 

  1930. 				 <select name="ordstatusnew" size="1"><?php
    1931. 

  1931. 					for($index=0; $index<$numstatus; $index++){
    1932. 

  1932. 						//if(! $isauthorized && $allstatus[$index]["statID"]>2) break;
    1933. 

  1933. 						if(! ($oldordstatusedit != 2 && $allstatus[$index]["statID"]==2)){
    1934. 

  1934. 							print '<option value="' . $allstatus[$index]["statID"] . '"';
    1935. 

  1935. 							if($oldordstatusedit==$allstatus[$index]["statID"]){
    1936. 

  1936. 								print " selected";
    1937. 

  1937. 							}
    1938. 

  1938. 							print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    1939. 

  1939. 						}
    1940. 

  1940. 					}
    1941. 

  1941. 					?>
    1942. 

  1942. 			  </select>
    1943. 

  1943. 					 <p>And</p>
    1944. 

  1944. 					  <input accesskey="u" type="submit" value="    <?php print $yyUpdate?>     " onclick="updateClicked=true; cloneClicked=false;"  />
    1945. 

  1945. 				OR <input type="submit" name="clone" value="Clone Order" onclick="updateClicked=false; cloneClicked=true;" /><br />
    1946. 

  1946. 			</div>
    1947. 

  1947. 			 		  </td>
    1948. 

  1948. 		</tr>
    1949. 

  1949. <?php	} ?>
    1950. 

  1950. 	  </table>
    1951. 

  1951. <?php
    1952. 

  1952. 	if($doedit) print '</form>';
    1953. 

  1953. 

  1954. 	// ADDED by Chad Jun-06-06
    1955. 

  1955. 	// PRICE ADJUSTMENTS
    1956. 

  1956. ?>
    1957. 

  1957. 	
    1958. 

  1958. 	<h2><a name="prc_adj"></a>Price Adjustments</h2>
    1959. 

  1959. 	
    1960. 

  1960. <?php
    1961. 

  1961. 	if(!empty($_GET['adj_err'])) {
    1962. 

  1962. ?>
    1963. 

  1963. 		<div style="margin: 5px auto; color: #FF0000; font-weight: bold; text-align: center"><?=$_GET['adj_err']?></div>
    1964. 

  1964. <?php
    1965. 

  1965. 	}elseif(!empty($_GET['adj_msg'])) {
    1966. 

  1966. ?>
    1967. 

  1967. 		<div style="margin: 5px auto; color: #009900; font-weight: bold; text-align: center"><?=$_GET['adj_msg']?></div>
    1968. 

  1968. <?php
    1969. 

  1969. 	}
    1970. 

  1970. ?>
    1971. 

  1971. 	<table width="95%" cellpadding="3" cellspacing="0" border="1" style="margin: 0 auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    1972. 

  1972. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    1973. 

  1973. 			<th width="60" style="text-align: center">Type</th>
    1974. 

  1974. 			<th width="80" style="text-align: center">Amount Type</th>
    1975. 

  1975. 			<th width="80" style="text-align: center">Amount</th>
    1976. 

  1976. 			<th width="150" style="text-align: center">Date</th>
    1977. 

  1977. 			<th>Note</th>
    1978. 

  1978. <?php
    1979. 

  1979. if($doedit) {	
    1980. 

  1980. 	if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    1981. 

  1981. ?>
    1982. 

  1982. 			<th width="28">Edit</th>
    1983. 

  1983. 			<th width="28">Delete</th>
    1984. 

  1984. 			<th width="28">Move Up</th>
    1985. 

  1985. 			<th width="28">Move Down</th>
    1986. 

  1986. <?php
    1987. 

  1987. 	}
    1988. 

  1988. }
    1989. 

  1989. ?>
    1990. 

  1990. 		</tr>
    1991. 

  1991. <?php
    1992. 

  1992. 	$sql = "SELECT * FROM price_adj WHERE ordID = " . $_GET["id"] . " ORDER BY ordering";
    1993. 

  1993. 	$res = mysql_query($sql) or print(mysql_error().$sql);
    1994. 

  1994. 	
    1995. 

  1995. 	$num_rows = mysql_num_rows($res);
    1996. 

  1996. 	if($num_rows > 0) {
    1997. 

  1997. 		$j=0;
    1998. 

  1998. 		while($row=mysql_fetch_assoc($res)) {
    1999. 

  1999. ?>
    2000. 

  2000. 		<tr<?=($j%2==0?'':' style="background-color: #E6E9F5"')?>>
    2001. 

  2001. 			<td style="text-align: center"><?=$row['type']?></td>
    2002. 

  2002. 			<td style="text-align: center"><?=$row['amt_type']?></td>
    2003. 

  2003. 			<td style="text-align: right"><?=$row['amt']?></td>
    2004. 

  2004. 			<td style="text-align: left"><?=date("n/j/Y g:i a",strtotime($row['date']))?></td>
    2005. 

  2005. 			<td style="text-align: left"><?=$row['note']?></td>
    2006. 

  2006. <?php
    2007. 

  2007. if($doedit) {	
    2008. 

  2008. 	if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    2009. 

  2009. ?>
    2010. 

  2010. 			<td style="text-align: center"><a href="/admin/editprcadj.php?pa_id=<?=$row['id']?>&action=edit" onclick="window.open(this.href,'edit_txn','left=700,top=100,width=550,height=150,toolbar=0'); return false;"><img src="/lib/images/misc/edit.gif" height="24" width="24"  /></a></td>
    2011. 

  2011. 			<td style="text-align: center"><a href="/admin/editprcadj.php?pa_id=<?=$row['id']?>&action=delete" onclick="window.open(this.href,'edit_txn','left=700,top=100,width=550,height=150,toolbar=0'); return false;"><img src="/lib/images/misc/delete.gif" width="24" height="24" /></a></td>
    2012. 

  2012. 			<td style="text-align: center"><? if($row['ordering']!=1){?><a href="/admin/mvprcadj.php?pa_id=<?=$row['id']?>&pa_ordID=<?=$row['ordID']?>&position=<?=$row['ordering']?>&action=moveup" onclick=""><img src="/lib/images/misc/arrow_up.png" width="24" height="24" /></a><? } ?></td>
    2013. 

  2013. 			<td style="text-align: center"><? if($row['ordering']!=$num_rows){?><a href="/admin/mvprcadj.php?pa_id=<?=$row['id']?>&pa_ordID=<?=$row['ordID']?>&position=<?=$row['ordering']?>&action=movedown" onclick=""><img src="/lib/images/misc/arrow_down.png" width="24" height="24" /></a><? } ?></td>
    2014. 

  2014. <?php
    2015. 

  2015. 	}
    2016. 

  2016. }
    2017. 

  2017. ?>
    2018. 

  2018. 		</tr>
    2019. 

  2019. <?php
    2020. 

  2020. 			$j++;
    2021. 

  2021. 		}
    2022. 

  2022. 	}else{
    2023. 

  2023. ?>
    2024. 

  2024. 		<tr>
    2025. 

  2025. 			<td colspan="9" style="text-align: center; font-weight: bold">No Price Adjustments Found</td>
    2026. 

  2026. 		</tr>
    2027. 

  2027. <?php
    2028. 

  2028. 	}
    2029. 

  2029. ?>
    2030. 

  2030. 	</table>
    2031. 

  2031. 	
    2032. 

  2032. <?php
    2033. 

  2033. if($doedit) {	
    2034. 

  2034. 	if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==19 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2) {
    2035. 

  2035. ?>
    2036. 

  2036. 	
    2037. 

  2037. 	<input type="button" id="btn_prc_add" value="Add Price Adjustment" onclick="togglePrcAdd();" />
    2038. 

  2038. 	
    2039. 

  2039. 	<div id="div_prc_add" style="display: none">
    2040. 

  2040. 		<form id="adj_frm" name="adj_frm" method="post" action="/admin/ordersprocess.php">
    2041. 

  2041. 		<table cellpadding="3" cellspacing="0" border="1" style="margin: 0 auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    2042. 

  2042. 			<tr style="background-color: #BFC9E0; color: #194C7F">
    2043. 

  2043. 				<td colspan="2" style="text-align: center; font-weight: bold; font-size: 14px">Add Price Adjustment</td>
    2044. 

  2044. 			</tr>
    2045. 

  2045. 			<tr>
    2046. 

  2046. 				<td style="font-weight: bold">Type:</td>
    2047. 

  2047. 				<td>
    2048. 

  2048. 					<select id="adj_type" name="adj_type">
    2049. 

  2049. 						<option value="" selected="selected">Choose...</option>
    2050. 

  2050. 						<option value="credit">Credit</option>
    2051. 

  2051. 						<option value="debit">Debit</option>
    2052. 

  2052. 					</select>
    2053. 

  2053. 				</td>
    2054. 

  2054. 			</tr>
    2055. 

  2055. 			<tr>
    2056. 

  2056. 				<td style="font-weight: bold">Amt Type:</td>
    2057. 

  2057. 				<td>
    2058. 

  2058. 					<select id="adj_amt_type" name="adj_amt_type">
    2059. 

  2059. 						<option value="" selected="selected">Choose...</option>
    2060. 

  2060. 						<option value="fixed">Fixed</option>
    2061. 

  2061. 						<option value="percentage">Percentage</option>
    2062. 

  2062. 					</select>
    2063. 

  2063. 				</td>
    2064. 

  2064. 			</tr>
    2065. 

  2065. 			<tr>
    2066. 

  2066. 				<td style="font-weight: bold">Amount:</td>
    2067. 

  2067. 				<td><input id="adj_amt" name="adj_amt" type="text" value="" /></td>
    2068. 

  2068. 			</tr>
    2069. 

  2069. 			<tr>
    2070. 

  2070. 				<td style="font-weight: bold">Note:</td>
    2071. 

  2071. 				<td><textarea id="adj_note" name="adj_note"></textarea></td>
    2072. 

  2072. 			</tr>
    2073. 

  2073. 			<tr>
    2074. 

  2074. 				<td colspan="2" style="text-align: center"><input type="submit" id="adj_submit" name="adj_submit" value="Add" /></td>
    2075. 

  2075. 			</tr>
    2076. 

  2076. 		</table>
    2077. 

  2077. 		<input type="hidden" id="adj_ordID" name="adj_ordID" value="<?=$_GET["id"]?>" />
    2078. 

  2078. 		<input type="hidden" id="adj_doedit" name="adj_doedit" value="<?=$_GET["doedit"]?>" />
    2079. 

  2079. 		</form>
    2080. 

  2080. 	</div>
    2081. 

  2081. <?php
    2082. 

  2082. 	}
    2083. 

  2083. }
    2084. 

  2084. 	// ADD ENDED
    2085. 

  2085. 

  2086. 	// ADDED by Chad Jun-05-06
    2087. 

  2087. 	// TRANSACTIONS
    2088. 

  2088. 	$sql = "SELECT * FROM transactions WHERE ordID = " . $_GET["id"];
    2089. 

  2089. 	$res = mysql_query($sql) or print(mysql_error().$sql);
    2090. 

  2090. ?>
    2091. 

  2091. 	<h2><a name="aim"></a>Transactions</h2>
    2092. 

  2092. <?php
    2093. 

  2093. 	if(!empty($_GET['aim_err'])) {
    2094. 

  2094. ?>
    2095. 

  2095. 		<div style="margin: 5px auto; color: #FF0000; font-weight: bold; text-align: center"><?=$_GET['aim_err']?></div>
    2096. 

  2096. <?php
    2097. 

  2097. 	}elseif(!empty($_GET['aim_msg'])) {
    2098. 

  2098. ?>
    2099. 

  2099. 		<div style="margin: 5px auto; color: #009900; font-weight: bold; text-align: center"><?=$_GET['aim_msg']?></div>
    2100. 

  2100. <?php
    2101. 

  2101. 	}
    2102. 

  2102. ?>
    2103. 

  2103. 	<table width="95%" cellpadding="3" cellspacing="0" border="1" style="margin: 0 auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    2104. 

  2104. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    2105. 

  2105. 			<th width="85" style="text-align: center">Type</th>
    2106. 

  2106. 			<th width="60" style="text-align: right">Amount</th>
    2107. 

  2107. 			<th width="80" style="text-align: center">TXN</th>
    2108. 

  2108. 			<th width="120" style="text-align: left">Date</th>
    2109. 

  2109. 			<th>Note</th>
    2110. 

  2110. 		</tr>
    2111. 

  2111. <?php
    2112. 

  2112. 	while($row=mysql_fetch_assoc($res)) {
    2113. 

  2113. ?>
    2114. 

  2114. 		<tr>
    2115. 

  2115. 			<td style="text-align: center"><?=$row['type']?></td>
    2116. 

  2116. 			<td style="text-align: center"><?=money_format("%.2n",$row['amt'])?></td>
    2117. 

  2117. 			<td style="text-align: center"><?=$row['txn']?></td>
    2118. 

  2118. 			<td style="text-align: center"><?=date("n/j/Y g:i a",strtotime($row['date_received']))?></td>
    2119. 

  2119. 			<td><?=$row['note']?></td>
    2120. 

  2120. 		</tr>
    2121. 

  2121. <?php	
    2122. 

  2122. 	}
    2123. 

  2123. ?>
    2124. 

  2124. 	</table>
    2125. 

  2125. <?php
    2126. 

  2126. if($doedit) {	
    2127. 

  2127. 	if(strstr($_SESSION['employee']['permissions'],"all") || $_SESSION['employee']['id']==9 || $_SESSION['employee']['id']==12 || $_SESSION['employee']['id']==2 || in_array($_SESSION['employee']['id'], array(9, 12, 2, 48, 117, 88))) {
    2128. 

  2128. ?>
    2129. 

  2129. <input type="button" id="btn_add_txn" value="Credit or Void" onclick="toggleTXN();" />
    2130. 

  2130. 

  2131. <div id="div_trans" style="display: none">
    2132. 

  2132. 	<form id="aim_frm" name="aim_frm" method="post" action="/admin/ordersprocess.php" onsubmit="return checkAIM(this);">
    2133. 

  2133. 	<table cellpadding="3" cellspacing="0" border="1" style="margin: 5px auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    2134. 

  2134. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    2135. 

  2135. 			<td colspan="4" style="text-align: center; font-weight: bold; font-size: 14px">Credit or Void a Transaction</td>
    2136. 

  2136. 		</tr>
    2137. 

  2137. 		<tr>
    2138. 

  2138. 			<th style="text-align: center">Type</th>
    2139. 

  2139. 			<th style="text-align: center">TXN</th>
    2140. 

  2140. 			<th style="text-align: center">Amount</th>
    2141. 

  2141. 			<th>Note</th>
    2142. 

  2142. 		</tr>
    2143. 

  2143. 		<tr>
    2144. 

  2144. 			<td valign="top">
    2145. 

  2145. 				<select name="aim_type" id="aim_type">
    2146. 

  2146. 					<option value="" selected="selected">Choose...</option>
    2147. 

  2147. 					<option value="CREDIT">Credit</option>
    2148. 

  2148. 					<option value="VOID">Void</option>
    2149. 

  2149. 				</select>
    2150. 

  2150. 			</td>
    2151. 

  2151. 			<td valign="top"><input type="text" id="aim_txn" name="aim_txn" value="" autocomplete="off" /></td>
    2152. 

  2152. 			<td valign="top"><input type="text" id="aim_amt" name="aim_amt" value="" autocomplete="off" /></td>
    2153. 

  2153. 			<td valign="top"><textarea id="aim_note" name="aim_note"></textarea></td>
    2154. 

  2154. 		</tr>
    2155. 

  2155. 		<tr>
    2156. 

  2156. 			<td colspan="4" style="text-align: right"><input type="submit" id="aim_submit" name="aim_submit" value="Submit" /></td>
    2157. 

  2157. 		</tr>
    2158. 

  2158. 	</table>
    2159. 

  2159. 	<input type="hidden" id="aim_inv" name="aim_inv" value="<?=$_GET["id"]?>" />
    2160. 

  2160. <?php
    2161. 

  2161. $tmp = explode(" ",$alldata["ordName"]);
    2162. 

  2162. ?>
    2163. 

  2163. 	<input type="hidden" id="aim_fname" name="aim_fname" value="<?=$tmp[0]?>" />
    2164. 

  2164. 	<input type="hidden" id="aim_lname" name="aim_lname" value="<?=(!empty($tmp[1]))?$tmp[1]:''?>" />
    2165. 

  2165. 	<input type="hidden" id="aim_doedit" name="aim_doedit" value="<?=$_GET['doedit']?>" />
    2166. 

  2166. 	</form>
    2167. 

  2167. </div>
    2168. 

  2168. 

  2169. <input type="button" id="btn_charge" value="Charge CC" onclick="toggleCharge();" style="display: block; margin: 5px 5px 5px 0" />
    2170. 

  2170. 

  2171. <div id="div_charge" style="display: none">
    2172. 

  2172. 	<form id="frmCharge" name="frmCharge" method="post" action="/admin/ordersprocess.php">
    2173. 

  2173. 	<table cellpadding="3" cellspacing="0" border="1" style="margin: 5px auto 5px auto; border: 1px solid #BFC9E0; border-collapse: collapse">
    2174. 

  2174. 		<tr style="background-color: #BFC9E0; color: #194C7F">
    2175. 

  2175. 			<td colspan="2" style="font-size: 14px; font-weight: bold; text-align: center">Authorize &amp; Capture</td>
    2176. 

  2176. 		</tr>
    2177. 

  2177. 		<tr>
    2178. 

  2178. 			<td>First Name:</td>
    2179. 

  2179. 			<td><input type="text" id="am_fname" name="am_fname" value="<?=$alldata['ordName']?>" /></td>
    2180. 

  2180. 		</tr>
    2181. 

  2181. 		<tr>
    2182. 

  2182. 			<td>Last Name:</td>
    2183. 

  2183. 			<td><input type="text" id="am_lname" name="am_lname" value="" /></td>
    2184. 

  2184. 		</tr>
    2185. 

  2185. 		<tr>
    2186. 

  2186. 			<td>Address:</td>
    2187. 

  2187. 			<td><input type="text" id="am_address" name="am_address" value="<?=$alldata['ordAddress']?>" /></td>
    2188. 

  2188. 		</tr>
    2189. 

  2189. 		<tr>
    2190. 

  2190. 			<td>Address 2:</td>
    2191. 

  2191. 			<td><input type="text" id="am_address2" name="am_address2" value="<?=$alldata['ordAddress2']?>" /></td>
    2192. 

  2192. 		</tr>
    2193. 

  2193. 		<tr>
    2194. 

  2194. 			<td>City:</td>
    2195. 

  2195. 			<td><input type="text" id="am_city" name="am_city" value="<?=$alldata['ordCity']?>" /></td>
    2196. 

  2196. 		</tr>
    2197. 

  2197. 		<tr>
    2198. 

  2198. 			<td>State:</td>
    2199. 

  2199. 			<td><input type="text" id="am_state" name="am_state" value="<?=$alldata['ordState']?>" /></td>
    2200. 

  2200. 		</tr>
    2201. 

  2201. 		<tr>
    2202. 

  2202. 			<td>Zip:</td>
    2203. 

  2203. 			<td><input type="text" id="am_zip" name="am_zip" value="<?=$alldata['ordZip']?>" /></td>
    2204. 

  2204. 		</tr>
    2205. 

  2205. 		<tr>
    2206. 

  2206. 			<td>Amount:</td>
    2207. 

  2207. 			<td><input type="text" id="am_amt" name="am_amt" value="" autocomplete="off" /></td>
    2208. 

  2208. 		</tr>
    2209. 

  2209. 		<tr>
    2210. 

  2210. 			<td>CC#:</td>
    2211. 

  2211. 			<td><input type="text" id="am_cc_num" name="am_cc_num" value="<?=Decrypt($row_eid['ccNum'], $cart_misc)?>" autocomplete="off" /></td>
    2212. 

  2212. 		</tr>
    2213. 

  2213. 		<tr>
    2214. 

  2214. 			<td>Exp. Date:</td>
    2215. 

  2215. 			<td> 
    2216. 

  2216. 				<select id="am_exp_mon" name="am_exp_mon">
    2217. 

  2217. <?
    2218. 

  2218. 		$ccexp=explode('/',$row_eid['ccExp']);
    2219. 

  2219. 		for($i=1; $i<=12; $i++)
    2220. 

  2220. 		{
    2221. 

  2221. 			if($i<10)
    2222. 

  2222. 				$i = '0'.$i;
    2223. 

  2223. 			if($i == $ccexp[0])
    2224. 

  2224. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    2225. 

  2225. 			else if(date('n') == $i )
    2226. 

  2226. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    2227. 

  2227. 			else
    2228. 

  2228. 				echo '<option value="'.$i.'">'.$i.'</option>';
    2229. 

  2229. 		}
    2230. 

  2230. ?>
    2231. 

  2231. 				</select>&nbsp;/&nbsp;
    2232. 

  2232. 				<select id="am_exp_year" name="am_exp_year">
    2233. 

  2233. <?
    2234. 

  2234. 		$cur_year = date('Y');
    2235. 

  2235. 		for($i=($cur_year); $i<=$cur_year+10; $i++)
    2236. 

  2236. 		{
    2237. 

  2237. 			if($i == $ccexp[1])
    2238. 

  2238. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    2239. 

  2239. 			elseif(date('Y') == $i || $i==$ccexp[1])
    2240. 

  2240. 				echo '<option value="'.$i.'" selected="selected">'.$i.'</option>';
    2241. 

  2241. 			else
    2242. 

  2242. 				echo '<option value="'.$i.'">'.$i.'</option>';
    2243. 

  2243. 		}
    2244. 

  2244. ?>				
    2245. 

  2245. 				</select>
    2246. 

  2246. 			</td>
    2247. 

  2247. 		</tr>
    2248. 

  2248. 		<tr>
    2249. 

  2249. 			<td>CCV:</td>
    2250. 

  2250. 			<td><input type="text" id="am_ccv" name="am_ccv" value="<?=$row_eid['ccCCV']?>" autocomplete="off" /></td>
    2251. 

  2251. 		</tr>
    2252. 

  2252. 		<tr>
    2253. 

  2253. 			<td colspan="2" style="text-align: center"><input type="submit" id="am_submit" name="am_submit" value="Submit" /></td>
    2254. 

  2254. 		</tr>
    2255. 

  2255. 	</table>
    2256. 

  2256. 	<input type="hidden" id="am_inv" name="am_inv" value="<?=$_GET["id"]?>" />
    2257. 

  2257. 	<input type="hidden" id="am_type" name="am_type" value="AUTH_CAPTURE" />
    2258. 

  2258. 	<input type="hidden" id="am_doedit" name="am_doedit" value="<?=$_GET['doedit']?>" />
    2259. 

  2259. 	</form>
    2260. 

  2260. </div>
    2261. 

  2261. <?php
    2262. 

  2262. 	}
    2263. 

  2263. }
    2264. 

  2264. 

  2265. 	// ADDED by Chad Apr-04-06
    2266. 

  2266. 	// LOCATION HISTORY
    2267. 

  2267. 	$qry = "SELECT * FROM location WHERE ordID = '".$_GET["id"]."' ORDER BY stamp";
    2268. 

  2268. 	$res = mysql_query($qry) or print(mysql_error().$qry);
    2269. 

  2269. 	$i=0;
    2270. 

  2270. 	while($row = mysql_fetch_assoc($res)) {
    2271. 

  2271. 		$locations[$i++]=$row;
    2272. 

  2272. 	}
    2273. 

  2273. ?>
    2274. 

  2274. 		<table width="600" cellpadding="3" cellspacing="0" style="margin: 10px auto; font-family: Verdana, Arial, Helvetica, sans-serif; border: 1px solid #4B1610; border-collapse: collapse">
    2275. 

  2275. 			<tr style="border-bottom: 1px solid #4B1610">
    2276. 

  2276. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Location</td>
    2277. 

  2277. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Date Changed</td>
    2278. 

  2278. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Employee</td>
    2279. 

  2279. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Type</td>
    2280. 

  2280. 				<td style="background-color: #4B1610; color: #FFFFFF; font-weight: bold">Reason</td>
    2281. 

  2281. 			</tr>
    2282. 

  2282. <?php
    2283. 

  2283. 	if(is_array($locations)) { 
    2284. 

  2284. 		$count=count($locations);
    2285. 

  2285. 		for($i=0;$i<$count;$i++){
    2286. 

  2286. 			$config_admin = RBI_Kohana::config('database.default_admin.connection');
    2287. 

  2287. 

  2288. 			$db_admin = mysql_connect($config['hostname'], $config['username'], $config['password']);
    2289. 

  2289. 			mysql_select_db($config['database']) or die ('DB Admin connection failed.</td></tr></table></body></html>');
    2290. 

  2290. 			if($locations[$i]["employeeID"]!=0){			
    2291. 

  2291. 				$rbiSQL = 'select * from employee where id="'.$locations[$i]["employeeID"].'" ';
    2292. 

  2292. 				$rs_rbi = mysql_query($rbiSQL, $db_admin);
    2293. 

  2293. 				$rbi_row = mysql_fetch_assoc($rs_rbi);
    2294. 

  2294. 			} else $rbi_row['firstname']=0;
    2295. 

  2295. ?>
    2296. 

  2296. 			<tr style="background-color: #<?=($i%2==0)?'903E36':'903E36'?>; border-bottom: 1px solid #4B1610">
    2297. 

  2297. 				<td style="color: #FFFFFF"><?=$locations[$i]['location']?></td>
    2298. 

  2298. 				<td style="color: #FFFFFF"><?=$locations[$i]['stamp']?></td>
    2299. 

  2299. 				<td style="color: #FFFFFF"><?=$rbi_row['firstname']?></td>
    2300. 

  2300. 				<td style="color: #FFFFFF"><?=$locations[$i]['locType']?></td>
    2301. 

  2301. 				<td style="color: #FFFFFF"><?=$locations[$i]['locTypeReason']?></td>
    2302. 

  2302. 			</tr>
    2303. 

  2303. <?php
    2304. 

  2304. 		}
    2305. 

  2305. 	}else{
    2306. 

  2306. ?>
    2307. 

  2307. 			<tr>
    2308. 

  2308. 				<td colspan="2" style="text-align: center">No location found</td>
    2309. 

  2309. 			</tr>
    2310. 

  2310. <?php
    2311. 

  2311. 	}
    2312. 

  2312. ?>
    2313. 

  2313. 		</table>
    2314. 

  2314. <?php
    2315. 

  2315. 	include(APPPATH.'views/partials/admin/dbconnection.php');
    2316. 

  2316. 	// ADD ENDED
    2317. 

  2317. 	
    2318. 

  2318. 	// ADDED by Chad Apr-04-06
    2319. 

  2319. 	// FEDEX TRACKING
    2320. 

  2320. 	$qry = "SELECT * FROM fedex WHERE ordID = '".$_GET["id"]."' ORDER BY id DESC";
    2321. 

  2321. 	$res = mysql_query($qry);
    2322. 

  2322. 	if(mysql_num_rows($res) > 0) {
    2323. 

  2323. 		$row = mysql_fetch_assoc($res);
    2324. 

  2324. 		$trackNum = $row['trackNum'];
    2325. 

  2325. 		if(!empty($trackNum)) {
    2326. 

  2326. 			// See Customer Service Page for displaying results
    2327. 

  2327. ?>
    2328. 

  2328. 				<div style="margin: 10px auto; border: 2px solid #2C578A; width: 550px">
    2329. 

  2329. 				<table align="center" width="550" border="0" cellpadding="3" cellspacing="0" style="font-size: 10px; font-family: Verdana, Arial, Helvetica, sans-serif">
    2330. 

  2330. 					<tr>
    2331. 

  2331. 						<th colspan="2" style="font-size: 18px; background-color: #2C578A; color: #FFF; font-weight: bold; text-align: left">Fed<span style="margin-left: -3px; color: #FF6600">Ex</span></th>
    2332. 

  2332. 						<th colspan="3" style="font-size: 14px; text-align: right; background-color: #2C578A; color: #FFF; font-weight: bold">Tracking# <?=$trackNum?></th>
    2333. 

  2333. 					</tr>
    2334. 

  2334. 			
    2335. 

  2335. <?php
    2336. 

  2336. 			include(DOCROOT.'includes/fedex/fedexdc.php');
    2337. 

  2337. 			$fed = new FedExDC();
    2338. 

  2338. 			$track_Ret = $fed->track(
    2339. 

  2339. 				array(
    2340. 

  2340. 					'1537' => $trackNum, //Tracking Number
    2341. 

  2341. 					'1534' =>'Y' // detail_scan_indicator (Show me all the tracking data)
    2342. 

  2342. 				)
    2343. 

  2343. 			);
    2344. 

  2344. 			
    2345. 

  2345. 			$ctr = 0;
    2346. 

  2346. 			$hasChanged = false;
    2347. 

  2347. 			$isDelivered = false;
    2348. 

  2348. 			for($i=1; $i<=$track_Ret[1584]; $i++) {
    2349. 

  2349. 

  2350. 			if(!empty($track_Ret['1339-'.$i]))
    2351. 

  2351. 			{
    2352. 

  2352. 				$tmp_date = $track_Ret['1339-'.$i];
    2353. 

  2353. 				$est_del = substr($tmp_date,0,4).'-'.substr($tmp_date,4,2).'-'.substr($tmp_date,6,2);
    2354. 

  2354. 	?>
    2355. 

  2355. 			<tr>
    2356. 

  2356. 				<td colspan="5" style="background-color: #2C578A; height: 15px">&nbsp;</td>
    2357. 

  2357. 			</tr>
    2358. 

  2358. 			<tr>
    2359. 

  2359. 				<td colspan="5" style="background-color: #DFE7FF"><strong>Estimated Delivery Date:</strong> <?=date('M j, Y',strtotime($est_del))?></td>
    2360. 

  2360. 			</tr>
    2361. 

  2361. 	<?php
    2362. 

  2362. 			}
    2363. 

  2363. 	?>
    2364. 

  2364. 			<tr>
    2365. 

  2365. 				<th align="left" width="150" colspan="2" style="background-color: #2C578A; color: #FFF; font-weight: bold">Date/Time</th>
    2366. 

  2366. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Activity</th>
    2367. 

  2367. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Location</th>
    2368. 

  2368. 				<th align="left" style="background-color: #2C578A; color: #FFF; font-weight: bold">Details</th>
    2369. 

  2369. 			</tr>
    2370. 

  2370. 	<?php
    2371. 

  2371. 				for($j=1; $j<=$track_Ret['1715-'.$i]; $j++)
    2372. 

  2372. 				{
    2373. 

  2373. 					$date = $track_Ret['1162-'.$i.'-'.$j];
    2374. 

  2374. 					$year = substr($date,0,4);
    2375. 

  2375. 					$mon = substr($date,4,2);
    2376. 

  2376. 					$day = substr($date,6,2);
    2377. 

  2377. 					$hrs = substr($track_Ret['1163-'.$i.'-'.$j],0,2);
    2378. 

  2378. 					$min = substr($track_Ret['1163-'.$i.'-'.$j],2,2);
    2379. 

  2379. 					$sec = substr($track_Ret['1163-'.$i.'-'.$j],4,2);
    2380. 

  2380. 					
    2381. 

  2381. 					$date = $year.'-'.$mon.'-'.$day.' '.$hrs.':'.$min.':'.$sec;
    2382. 

  2382. 					$unixDate = strtotime($date);
    2383. 

  2383. 					
    2384. 

  2384. 					if(empty($track_Ret['1161-'.$i.'-'.$j]))
    2385. 

  2385. 					{
    2386. 

  2386. 						$state = $track_Ret['1164-'.$i.'-'.$j];
    2387. 

  2387. 					}
    2388. 

  2388. 					else
    2389. 

  2389. 					{
    2390. 

  2390. 						$state = $track_Ret['1161-'.$i.'-'.$j];
    2391. 

  2391. 					}
    2392. 

  2392. 										
    2393. 

  2393. 					if(date('Ymd',$unixDate) != date('Ymd',$last_date))
    2394. 

  2394. 					{
    2395. 

  2395. 						$ctr++;
    2396. 

  2396. 						$hasChanged = true;
    2397. 

  2397. 					}
    2398. 

  2398. 					
    2399. 

  2399. 					if($track_Ret['1159-'.$i.'-'.$j] == 'Delivered' && empty($track_Ret['1711-'.$i.'-'.$j]))
    2400. 

  2400. 					{
    2401. 

  2401. 						$isDelivered = true;
    2402. 

  2402. 					}
    2403. 

  2403. 	?>
    2404. 

  2404. 					<tr style="background-color: #<?=($ctr%2==0)?'FFF':'DFE7FF'?>">
    2405. 

  2405. 			<?php
    2406. 

  2406. 						if($hasChanged)
    2407. 

  2407. 						{
    2408. 

  2408. 			?>
    2409. 

  2409. 						<td style="text-align: left" valign="top">
    2410. 

  2410. 							<span style="font-weight: bold"><?=date('M j, Y',$unixDate)?></span>
    2411. 

  2411. 						</td>
    2412. 

  2412. 						<td valign="top" style="text-align: right; border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=date('g:i A',$unixDate)?></td>
    2413. 

  2413. 			<?php
    2414. 

  2414. 							$hasChanged = false;
    2415. 

  2415. 						}
    2416. 

  2416. 						else
    2417. 

  2417. 						{
    2418. 

  2418. 			?>
    2419. 

  2419. 						<td valign="top" colspan="2" style="text-align: right; border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=date('g:i A',$unixDate)?></td>
    2420. 

  2420. 			<?php
    2421. 

  2421. 						}
    2422. 

  2422. 			?>		
    2423. 

  2423. 						</td>
    2424. 

  2424. 						<td valign="top" style="border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=($isDelivered)?'<strong>':''?><?=$track_Ret['1159-'.$i.'-'.$j]?><?=($isDelivered)?'</strong>':''?></td>
    2425. 

  2425. 						<td valign="top" style="border-right: 1px solid #<?=($ctr%2!=0)?'FFF':'DFE7FF'?>"><?=$track_Ret['1160-'.$i.'-'.$j]?>, <?=$state?></td>
    2426. 

  2426. 						<td valign="top"><?=$track_Ret['1711-'.$i.'-'.$j]?></td>
    2427. 

  2427. 					</tr>
    2428. 

  2428. 	<?php
    2429. 

  2429. 					if($isDelivered)
    2430. 

  2430. 					{
    2431. 

  2431. 						$isDelivered = false;
    2432. 

  2432. 					}
    2433. 

  2433. 					
    2434. 

  2434. 					$last_date = $unixDate;
    2435. 

  2435. 				}
    2436. 

  2436. 			}
    2437. 

  2437. 		}
    2438. 

  2438. ?>
    2439. 

  2439. 		  </table>
    2440. 

  2440. </div>
    2441. 

  2441. <?php
    2442. 

  2442. 	}
    2443. 

  2443. 	// ADD ENDED
    2444. 

  2444. 	
    2445. 

  2445. 	// ADDED by Chad Apr-03-06
    2446. 

  2446. 	// DHL AND USPS TRACKING
    2447. 

  2447. 	$qry = "SELECT * FROM dhl WHERE custPackID = '".$_GET["id"]."' ORDER BY id DESC";
    2448. 

  2448. 	$res = mysql_query($qry) or print(mysql_error().$qry);
    2449. 

  2449. 	if(mysql_num_rows($res) > 0) {
    2450. 

  2450. 		$row = mysql_fetch_assoc($res);
    2451. 

  2451. 		$trackNum = $row['DHLGMTrackNum'];
    2452. 

  2452. 		$uspsTrack = $row['custDelConfIDUSPS'];
    2453. 

  2453. 		if(!empty($trackNum)) {
    2454. 

  2454. 			$ch = curl_init();
    2455. 

  2455. 			curl_setopt($ch,CURLOPT_URL,"http://api.smartmail.com/tnt2.cfm?number=$trackNum&criteria=3&type=wddx&custid=rband&passwd=sm36732");
    2456. 

  2456. 			//curl_setopt($ch, CURLOPT_POST, 1);
    2457. 

  2457. 			curl_setopt($ch,CURLOPT_HEADER,0);
    2458. 

  2458. 			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    2459. 

  2459. 			//curl_setopt($ch, CURLOPT_POSTFIELDS, "number=$trackNum&criteria=3&type=wddx&custid=rband&passwd=sm36732");
    2460. 

  2460. 			$res = curl_exec($ch);
    2461. 

  2461. 			curl_close($ch);
    2462. 

  2462. 			$info = wddx_deserialize($res);
    2463. 

  2463. 			//showarray($info);
    2464. 

  2464. 			if(empty($info['Detail'][0])) { //If no errors
    2465. 

  2465. ?>
    2466. 

  2466. 			<div style="height: 20px"></div>
    2467. 

  2467. 			<table align="center" width="500" cellpadding="3" cellspacing="0" style="border: 1px solid #FFFFFF">
    2468. 

  2468. 				<tr>
    2469. 

  2469. 					<td colspan="2" style="color: #FFFFFF; background-color: #CC0000; text-align: center; font-weight: bold; font-size: 18px">DHL Tracking</td>
    2470. 

  2470. 				</tr>
    2471. 

  2471. <?php
    2472. 

  2472. 				if(!empty($info['TRACK_PKUP_DATE'][0])) {
    2473. 

  2473. ?>
    2474. 

  2474. 				<tr>
    2475. 

  2475. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_PKUP_DATE'][0]?></td>
    2476. 

  2476. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Picked Up by SmartMail</td>
    2477. 

  2477. 				</tr>
    2478. 

  2478. <?php
    2479. 

  2479. 				}
    2480. 

  2480. 				if(!empty($info['TRACK_RECV_DATE'][0])) {
    2481. 

  2481. ?>
    2482. 

  2482. 				<tr>
    2483. 

  2483. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_RECV_DATE'][0]?></td>
    2484. 

  2484. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Arrived at Smart Center</td>
    2485. 

  2485. 				</tr>
    2486. 

  2486. <?php
    2487. 

  2487. 				}
    2488. 

  2488. 				if(!empty($info['TRACK_ENCD_DATE'][0])) {
    2489. 

  2489. ?>
    2490. 

  2490. 				<tr>
    2491. 

  2491. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_ENCD_DATE'][0]?></td>
    2492. 

  2492. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Processed and Verified</td>
    2493. 

  2493. 				</tr>
    2494. 

  2494. <?php
    2495. 

  2495. 				}
    2496. 

  2496. 				if(!empty($info['TRACK_DNSD_DATE'][0])) {
    2497. 

  2497. ?>
    2498. 

  2498. 				<tr>
    2499. 

  2499. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_DNSD_DATE'][0]?></td>
    2500. 

  2500. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Sent via <?=(!empty($info['TRACK_DNDC'][0]))?$info['TRACK_DNDC'][0]:"SmartMail"?></td>
    2501. 

  2501. 				</tr>
    2502. 

  2502. <?php
    2503. 

  2503. 				}
    2504. 

  2504. 				if(!empty($info['TRACK_DNRC_DATE'][0])) {
    2505. 

  2505. ?>
    2506. 

  2506. 				<tr>
    2507. 

  2507. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_DNRC_DATE'][0]?></td>
    2508. 

  2508. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Received</td>
    2509. 

  2509. 				</tr>
    2510. 

  2510. <?php
    2511. 

  2511. 				}
    2512. 

  2512. 				if(!empty($info['TRACK_MFST_DATE'][0])) {
    2513. 

  2513. ?>
    2514. 

  2514. 				<tr>
    2515. 

  2515. 					<td style="background-color: #FFCC00; text-align: left; font-weight: bold"><?=$info['TRACK_MFST_DATE'][0]?></td>
    2516. 

  2516. 					<td bordercolor="#FFFFFF" style="background-color: #FFCC00">Mail Delivered to Post Office</td>
    2517. 

  2517. 				</tr>
    2518. 

  2518. <?php
    2519. 

  2519. 				}
    2520. 

  2520. ?>
    2521. 

  2521. 			</table>
    2522. 

  2522. <?php
    2523. 

  2523. 			
    2524. 

  2524. 				}
    2525. 

  2525. 			}
    2526. 

  2526. 		}
    2527. 

  2527. 				// CHECK USPS TRACKING INFO
    2528. 

  2528. 				//echo 'Track='.$uspsTrack;
    2529. 

  2529. 				if(!empty($uspsTrack)) {
    2530. 

  2530. 					$ch = curl_init();
    2531. 

  2531. 					curl_setopt($ch,CURLOPT_URL,"http://Production.ShippingAPIs.com/ShippingAPI.dll");
    2532. 

  2532. 					curl_setopt($ch, CURLOPT_POST, 1);
    2533. 

  2533. 					curl_setopt($ch,CURLOPT_HEADER,0);
    2534. 

  2534. 					curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    2535. 

  2535. 					curl_setopt($ch, CURLOPT_POSTFIELDS, 'API=TrackV2&XML=<TrackFieldRequest USERID="268REMIN3619"><TrackID ID="'.$uspsTrack.'"></TrackID></TrackFieldRequest>');
    2536. 

  2536. 					$res = curl_exec($ch);
    2537. 

  2537. 					curl_close($ch);
    2538. 

  2538. 					
    2539. 

  2539. 					include(APPPATH.'views/pages/admin/xml2array.php');
    2540. 

  2540. 					
    2541. 

  2541. 					$xmlData = new xml2array();
    2542. 

  2542. 					
    2543. 

  2543. 					$uspsData = $xmlData->parseXMLintoarray($res);
    2544. 

  2544. 					
    2545. 

  2545. 					//showarray($uspsData);
    2546. 

  2546. ?>
    2547. 

  2547. 			<div style="margin: 5px auto; width: 500px">
    2548. 

  2548. 			
    2549. 

  2549. 				<div style="margin: 0; height: 5px; background-color: #CC0000"></div>
    2550. 

  2550. 				<div style="margin: 0; padding: 2px; background-color: #0066CB; color: #FFFFFF; font-weight: bold; font-size: 18px; text-align: center">USPS Tracking<br /><span style="font-size: 11px">Tracking # <?=$uspsTrack?></span></div>
    2551. 

  2551. 				<div style="margin: 0; height: 7px; background-color: #98CCFF"></div>
    2552. 

  2552. 				<div style="margin: 2px 0 0 0; background-color: #E3F1FC; border: 1px solid #89B9E7">
    2553. 

  2553. <?php				
    2554. 

  2554. 					if (is_array($uspsData['TrackResponse']['TrackInfo']['Error'])) {
    2555. 

  2555. 					    // echo '<div style="margin: 0; text-align: center; font-weight: bold">Error Getting USPS Tracking Information</div>';
    2556. 

  2556. 						echo '<div style="margin: 0; text-align: center; font-weight: bold">';
    2557. 

  2557. 						echo 'USPS Tracking Information is currently not available,<br />';
    2558. 

  2558. 						echo 'please check-back in 24-48 hours.';
    2559. 

  2559. 						echo '</div>';
    2560. 

  2560. 					}
    2561. 

  2561. 					else {
    2562. 

  2562. 						if(is_array($uspsData['TrackResponse']['TrackInfo']['TrackSummary'])) {
    2563. 

  2563. 							$eventTime = $uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventDate'].' '.$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventTime'];
    2564. 

  2564. ?>
    2565. 

  2565. 					<div style="margin: 0; padding: 3px; background-color: #89B9E7; color: #FFFFFF; font-weight: bold">Event Summary</div>
    2566. 

  2566. 					<div style="margin: 0">
    2567. 

  2567. 					<table width="500" border="0" cellpadding="3" cellspacing="0" style="margin: 2px;">
    2568. 

  2568. 						<tr>
    2569. 

  2569. 							<td valign="top" style="font-weight: bold"><?=$eventTime?></td>
    2570. 

  2570. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventCity']?>, <?=$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['EventState']?></td>
    2571. 

  2571. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackSummary']['Event']?></td>
    2572. 

  2572. 						</tr>
    2573. 

  2573. 					</table>
    2574. 

  2574. 					</div>
    2575. 

  2575. <?php
    2576. 

  2576. 						}
    2577. 

  2577. 						if(is_array($uspsData['TrackResponse']['TrackInfo']['TrackDetail'])) {
    2578. 

  2578. ?>
    2579. 

  2579. 					<div style="margin: 0; padding: 3px; background-color: #89B9E7; color: #FFFFFF; font-weight: bold">Tracking Details</div>
    2580. 

  2580. 					<table width="500" border="0" align="center" cellpadding="3" cellspacing="0" style="margin: 2px;">
    2581. 

  2581. <?php
    2582. 

  2582. 							if(is_array($uspsData['TrackResponse']['TrackInfo']['TrackDetail'][0])){
    2583. 

  2583. 								for($i=0; $i<count($uspsData['TrackResponse']['TrackInfo']['TrackDetail']); $i++) {
    2584. 

  2584. 									$eventTime = $uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventDate'].' '.$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventTime'];
    2585. 

  2585. ?>
    2586. 

  2586. 						<tr>
    2587. 

  2587. 							<td valign="top" style="font-weight: bold"><?=$eventTime?></td>
    2588. 

  2588. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventCity']?>, <?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['EventState']?></td>
    2589. 

  2589. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail'][$i]['Event']?></td>
    2590. 

  2590. 						</tr>
    2591. 

  2591. <?php
    2592. 

  2592. 								} // End of TrackDetail Loop
    2593. 

  2593. 							}else{
    2594. 

  2594. 								$eventTime = $uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventDate'].' '.$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventTime'];
    2595. 

  2595. ?>
    2596. 

  2596. 						<tr>
    2597. 

  2597. 							<td valign="top" style="font-weight: bold"><?=$eventTime?></td>
    2598. 

  2598. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventCity']?>, <?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['EventState']?></td>
    2599. 

  2599. 							<td valign="top"><?=$uspsData['TrackResponse']['TrackInfo']['TrackDetail']['Event']?></td>
    2600. 

  2600. 						</tr>
    2601. 

  2601. <?php
    2602. 

  2602. 							}
    2603. 

  2603. ?>
    2604. 

  2604. 					</table>
    2605. 

  2605. <?php
    2606. 

  2606. 						} // End of displaying all Tracking Details
    2607. 

  2607. 					} // End of displaying all USPS tracking information
    2608. 

  2608. ?>
    2609. 

  2609. 				</div>
    2610. 

  2610. 			
    2611. 

  2611. 			</div>
    2612. 

  2612. <?php
    2613. 

  2613. 		
    2614. 

  2614. 	}
    2615. 

  2615. 	
    2616. 

  2616. 	// ADD ENDED
    2617. 

  2617. 	
    2618. 

  2618. }else{
    2619. 

  2619. 	$sSQL = "SELECT ordID FROM orders WHERE ordStatus=1";
    2620. 

  2620. 	if(@$_POST["act"] != "purge") $sSQL .= " AND ordStatusDate<'" . date("Y-m-d H:i:s", time()-(3*60*60*24)) . "'";
    2621. 

  2621. 	else $sSQL .= " OR ordStatus=0 AND ordStatusDate<'" . date("Y-m-d H:i:s", time()-(14*60*60*24)) . "'";
    2622. 

  2622. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    2623. 

  2623. 	while($rs = mysql_fetch_assoc($result)){
    2624. 

  2624. 		$theid = $rs["ordID"];
    2625. 

  2625. 		$delOptions = "";
    2626. 

  2626. 		$addcomma = "";
    2627. 

  2627. 		$result2 = mysql_query("SELECT cartID FROM cart WHERE cartOrderID=" . $theid) or print(mysql_error());
    2628. 

  2628. 		while($rs2 = mysql_fetch_assoc($result2)){
    2629. 

  2629. 			$delOptions .= $addcomma . $rs2["cartID"];
    2630. 

  2630. 			$addcomma = ",";
    2631. 

  2631. 		}
    2632. 

  2632. 		if($delOptions != ""){
    2633. 

  2633. 			$sSQL = "DELETE FROM cartoptions WHERE coCartID IN (" . $delOptions . ")";
    2634. 

  2634. 			mysql_query($sSQL) or print(mysql_error().$sSQL);
    2635. 

  2635. 		}
    2636. 

  2636. 		mysql_query("DELETE FROM cart WHERE cartOrderID=" . $theid) or print(mysql_error());
    2637. 

  2637. 		mysql_query("DELETE FROM orders WHERE ordID=" . $theid) or print(mysql_error());
    2638. 

  2638. 	}
    2639. 

  2639. 	if(@$_POST["act"]=="authorize"){
    2640. 

  2640. 		do_stock_management(trim($_POST["id"]));
    2641. 

  2641. 		if(trim($_POST["authcode"]) != "")
    2642. 

  2642. 			$sSQL = "UPDATE orders set ordAuthNumber='" . mysql_real_escape_string(trim($_POST["authcode"])) . "',ordStatus=3 WHERE ordID=" . $_POST["id"];
    2643. 

  2643. 		else
    2644. 

  2644. 			$sSQL = "UPDATE orders set ordAuthNumber='" . mysql_real_escape_string($yyManAut) . "',ordStatus=3 WHERE ordID=" . $_POST["id"];
    2645. 

  2645. 		if(mysql_query($sSQL)) {
    2646. 

  2646. 			if(!setNewLocation( 3 , $_POST["id"],'Manual' )) print("Unable to record status change.");
    2647. 

  2647. 		}else{
    2648. 

  2648. 			print(mysql_error().$sSQL);
    2649. 

  2649. 		}
    2650. 

  2650. 		mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $_POST["id"]) or print(mysql_error());
    2651. 

  2651. 	}elseif(@$_POST["act"]=="status"){
    2652. 

  2652. 		//echo 'This is the problem';
    2653. 

  2653. 		$maxitems=(int)($_POST["maxitems"]);
    2654. 

  2654. 		//for($index=0; $index < $maxitems; $index++){
    2655. 

  2655. 		if (is_array($_POST['selected'])) {	
    2656. 

  2656. 			foreach($_POST['selected'] as $key => $value) {
    2657. 

  2657. 				$index = $value;
    2658. 

  2658. 				$iordid = trim($_POST["ordid" . $index]);
    2659. 

  2659. 				$ordstatus = trim($_POST["ordstatus" . $index]);
    2660. 

  2660. 				$ordauthno = "";
    2661. 

  2661. 				$oldordstatus=999;
    2662. 

  2662. 				$result = mysql_query("SELECT ordStatus,ordAuthNumber,ordEmail,ordDate,".getlangid("statPublic",64).",ordStatusInfo,ordName FROM orders INNER JOIN orderstatus ON orders.ordStatus=orderstatus.statID WHERE ordID=" . $iordid) or print(mysql_error());
    2663. 

  2663. 				if($rs = mysql_fetch_assoc($result)){
    2664. 

  2664. 					$oldordstatus=$rs["ordStatus"];
    2665. 

  2665. 					$ordauthno=$rs["ordAuthNumber"];
    2666. 

  2666. 					$ordemail=$rs["ordEmail"];
    2667. 

  2667. 					$orddate=strtotime($rs["ordDate"]);
    2668. 

  2668. 					$oldstattext=$rs[getlangid("statPublic",64)];
    2669. 

  2669. 					$ordstatinfo=$rs["ordStatusInfo"];
    2670. 

  2670. 					$ordername=$rs["ordName"];
    2671. 

  2671. 				}
    2672. 

  2672. 				if(! ($oldordstatus==999) && ($oldordstatus < 3 && $ordstatus >=3 && $ordstatus !=10 && $ordstatus !=17) || ($oldordstatus==10 && $ordstatus >=3 && $ordstatus !=17) || ($oldordstatus==17 && $ordstatus >=3 && $ordstatus !=10)){
    2673. 

  2673. 					// This is to force stock management
    2674. 

  2674. 					mysql_query("UPDATE cart SET cartCompleted=0 WHERE cartOrderID=" . $iordid) or print(mysql_error());
    2675. 

  2675. 					do_stock_management($iordid);
    2676. 

  2676. 					//echo 'do_stock_management';
    2677. 

  2677. 					mysql_query("UPDATE cart SET cartCompleted=1 WHERE cartOrderID=" . $iordid) or print(mysql_error());
    2678. 

  2678. 					if($ordauthno=="") mysql_query("UPDATE orders SET ordAuthNumber='". mysql_real_escape_string($yyManAut) . "' WHERE ordID=" . $iordid) or print(mysql_error());
    2679. 

  2679. 				}
    2680. 

  2680. 				if(! ($oldordstatus==999) && ($oldordstatus!=10 && $oldordstatus!=17 && $oldordstatus >=3 && $ordstatus < 3) || ($oldordstatus >=3 && $oldordstatus!=10 && $oldordstatus!=17 && $ordstatus==10) || ($oldordstatus >=3 && $oldordstatus!=10 && $oldordstatus!=17 && $ordstatus==17)) release_stock($iordid);//echo 'status change release_stock';
    2681. 

  2681. 				if($iordid != "" && $ordstatus != ""){
    2682. 

  2682. 					if($oldordstatus != (int)$ordstatus && @$_POST["emailstat"]=="1"){
    2683. 

  2683. 						$result = mysql_query("SELECT ".getlangid("statPublic",64)." FROM orderstatus WHERE statID=" . $ordstatus);
    2684. 

  2684. 						if($rs = mysql_fetch_assoc($result))
    2685. 

  2685. 							$newstattext = $rs[getlangid("statPublic",64)];
    2686. 

  2686. 						$emailsubject = "Order status updated";
    2687. 

  2687. 						if(@$orderstatussubject != "") $emailsubject=$orderstatussubject;
    2688. 

  2688. 						$ose = $orderstatusemail;
    2689. 

  2689. 						$ose = str_replace("%orderid%", $iordid, $ose);
    2690. 

  2690. 						$ose = str_replace("%orderdate%", date($dateformatstr, $orddate), $ose);// . " " . date("H:i", $orddate), $ose);
    2691. 

  2691. 						$ose = str_replace("%oldstatus%", $oldstattext, $ose);
    2692. 

  2692. 						$ose = str_replace("%newstatus%", $newstattext, $ose);
    2693. 

  2693. 						$thetime = time() + ($dateadjust*60*60);
    2694. 

  2694. 						$ose = str_replace("%date%", date($dateformatstr, $thetime), $ose);// . " " . date("H:i", $thetime), $ose);
    2695. 

  2695. 						$ose = str_replace("%statusinfo%", $ordstatinfo, $ose);
    2696. 

  2696. 						$ose = str_replace("%ordername%", $ordername, $ose);
    2697. 

  2697. 						$ose = str_replace("%nl%", $emlNl, $ose);
    2698. 

  2698. 						if(@$customheaders == ""){
    2699. 

  2699. 							$customheaders = "MIME-Version: 1.0\n";
    2700. 

  2700. 							$customheaders .= "From: %from% <%from%>\n";
    2701. 

  2701. 							if(@$htmlemails==TRUE)
    2702. 

  2702. 								$customheaders .= "Content-type: text/html; charset=".$emailencoding."\n";
    2703. 

  2703. 							else
    2704. 

  2704. 								$customheaders .= "Content-type: text/plain; charset=".$emailencoding."\n";
    2705. 

  2705. 						}
    2706. 

  2706. 						$headers = str_replace('%from%',$emailAddr,$customheaders);
    2707. 

  2707. 						$headers = str_replace('%to%',$ordemail,$headers);
    2708. 

  2708. 						if((int)$ordstatus==9) {
    2709. 

  2709. 							$ose = $orderstatusshippedemail;
    2710. 

  2710. 							$ose = str_replace("%orderid%", $iordid, $ose);
    2711. 

  2711. 							$ose = str_replace("%orderdate%", date($dateformatstr, $orddate) . " " . date("H:i", $orddate), $ose);
    2712. 

  2712. 							$emailsubject = $orderstatusshippedsubject;
    2713. 

  2713. 						}
    2714. 

  2714. 						mail($ordemail, $emailsubject, $ose, $headers);
    2715. 

  2715. 					}
    2716. 

  2716. 					if($oldordstatus != (int)$ordstatus) {
    2717. 

  2717. 						$sql = "UPDATE orders SET ordStatus=" . $ordstatus . ",ordStatusDate='" . date("Y-m-d H:i:s", time() + ($dateadjust*60*60)) . "' WHERE ordID=" . $iordid;
    2718. 

  2718. 						$res = mysql_query($sql);
    2719. 

  2719. 						//echo $sql."<br />";
    2720. 

  2720. 						if($res) {
    2721. 

  2721. 							if(!setNewLocation( $ordstatus , $iordid ,'Manual' )) print("Unable to record status change.");
    2722. 

  2722. 						}else{
    2723. 

  2723. 							print(mysql_error());
    2724. 

  2724. 						}
    2725. 

  2725. 					}
    2726. 

  2726. 				}
    2727. 

  2727. 			} // End of loop
    2728. 

  2728. 		}
    2729. 

  2729. 	}
    2730. 

  2730. 	if(@$_POST["sd"] != "")
    2731. 

  2731. 		$sd = @$_POST["sd"];
    2732. 

  2732. 	elseif(@$_GET["sd"] != "")
    2733. 

  2733. 		$sd = @$_GET["sd"];
    2734. 

  2734. 	else
    2735. 

  2735. 		$sd = date($admindatestr, time() + ($dateadjust*60*60));
    2736. 

  2736. 	if(@$_POST["ed"] != "")
    2737. 

  2737. 		$ed = @$_POST["ed"];
    2738. 

  2738. 	elseif(@$_GET["ed"] != "")
    2739. 

  2739. 		$ed = @$_GET["ed"];
    2740. 

  2740. 	else
    2741. 

  2741. 		$ed = date($admindatestr, time() + ($dateadjust*60*60));
    2742. 

  2742. 	$sd = parsedate($sd);
    2743. 

  2743. 	$ed = parsedate($ed);
    2744. 

  2744. 	if($sd > $ed) $ed = $sd;
    2745. 

  2745. 	$fromdate = trim(@$_REQUEST["fromdate"]);
    2746. 

  2746. 	$todate = trim(@$_REQUEST["todate"]);
    2747. 

  2747. 	$ordid = trim(str_replace('"',"",str_replace("'","",@$_REQUEST["ordid"])));
    2748. 

  2748. 	$origsearchtext = trim(unstripslashes(@$_POST["searchtext"]));
    2749. 

  2749. 	$isMyFrogz = @$_REQUEST['myfrogz'];
    2750. 

  2750. 	$searchtext = trim(mysql_real_escape_string(unstripslashes(@$_POST["searchtext"])));
    2751. 

  2751. 	$ordstatus = "";
    2752. 

  2752. 	
    2753. 

  2753. 	
    2754. 

  2754. 	if(@$_POST["powersearch"]=="1" || $_GET["powersearch"]=="1"){
    2755. 

  2755. 		$sSQL = "SELECT DISTINCT ordID,ordName,ordPayProvider,payProvName,ordAuthNumber,ordDate,ordStatus,ordShipType,ordTotal-ordDiscount AS ordTot,ordStateTax,ordShipping,ordTransID,order_changed,ordDiscountText,ordEID,ordAffiliate,ordPrinted_logan";
    2756. 

  2756. 		$sSQL .= " FROM orders o LEFT JOIN payprovider pp ON pp.payProvID = o.ordPayProvider ";
    2757. 

  2757. 		$sSQL .= ' WHERE ordStatus >= 0 ';
    2758. 

  2758. 		$addcomma = "";
    2759. 

  2759. 		if(is_array(@$_POST["ordstatus"])){
    2760. 

  2760. 			foreach($_POST["ordstatus"] as $objValue){
    2761. 

  2761. 				if(is_array($objValue))$objValue=$objValue[0];
    2762. 

  2762. 				$ordstatus .= $addcomma . $objValue;
    2763. 

  2763. 				$addcomma = ",";
    2764. 

  2764. 			}
    2765. 

  2765. 		}else{
    2766. 

  2766. 			$ordstatus = trim((string)@$_REQUEST["ordstatus"]);
    2767. 

  2767. 		}
    2768. 

  2768. 		//discounts
    2769. 

  2769. 		$ordcoupon = trim((string)$_POST["ordcoupon"]);
    2770. 

  2770. 		if($ordid != ""){
    2771. 

  2771. 			if(is_numeric($ordid)){
    2772. 

  2772. 				$sSQL .= " AND ordID=" . $ordid;			
    2773. 

  2773. 			}elseif(is_array(explode(',',$ordid))){
    2774. 

  2774. 				$sSQL .= " AND ordID IN ('" . str_replace(',',"','",$ordid) ."')";
    2775. 

  2775. 			}else{
    2776. 

  2776. 				$success=FALSE;
    2777. 

  2777. 				$errmsg="The order id you specified seems to be invalid - " . $ordid;
    2778. 

  2778. 				$sSQL .= " AND ordID=0";
    2779. 

  2779. 			}
    2780. 

  2780. 		}else{
    2781. 

  2781. 			if($fromdate != ""){
    2782. 

  2782. 				if(is_numeric($fromdate))
    2783. 

  2783. 					$thefromdate = time()-($fromdate*60*60*24);
    2784. 

  2784. 				else
    2785. 

  2785. 					$thefromdate = parsedate($fromdate);
    2786. 

  2786. 				if($todate=="")
    2787. 

  2787. 					$thetodate = $thefromdate;
    2788. 

  2788. 				elseif(is_numeric($todate))
    2789. 

  2789. 					$thetodate = time()-($todate*60*60*24);
    2790. 

  2790. 				else
    2791. 

  2791. 					$thetodate = parsedate($todate);
    2792. 

  2792. 				if($thefromdate > $thetodate){
    2793. 

  2793. 					$tmpdate = $thetodate;
    2794. 

  2794. 					$thetodate = $thefromdate;
    2795. 

  2795. 					$thefromdate = $tmpdate;
    2796. 

  2796. 				}
    2797. 

  2797. 				$sd = $thefromdate;
    2798. 

  2798. 				$ed = $thetodate;
    2799. 

  2799. 				$sSQL .= " AND ordDate BETWEEN '" . date("Y-m-d", $sd) . "' AND '" . date("Y-m-d", $ed) . " 23:59:59'";
    2800. 

  2800. 			}
    2801. 

  2801. 			
    2802. 

  2802. 			
    2803. 

  2803. 			
    2804. 

  2804. 			//discount
    2805. 

  2805. 			if ($ordcoupon != "") {
    2806. 

  2806. 				$sSQL .= " AND (ordCoupon LIKE '" . $ordcoupon . ",%' OR ordCoupon LIKE '%," . $ordcoupon . ",%' OR ordCoupon LIKE '%," . $ordcoupon . "' OR ordCoupon = '" . $ordcoupon . "')";
    2807. 

  2807. 			}
    2808. 

  2808. 			if($_SESSION["return_status_search"]!="") $sSQL .= " AND ordReturnID=".$_SESSION["return_status_search"]; 
    2809. 

  2809. 			if($ordstatus != "" && strpos($ordstatus,"9999")===FALSE) $sSQL .= " AND ordStatus IN (" . $ordstatus . ")";
    2810. 

  2810. 			if($searchtext != "") $sSQL .= " AND (payProvShow LIKE '%" . $searchtext . "%' OR ordTransID LIKE '%" . $searchtext . "%' OR ordAuthNumber LIKE '%" . $searchtext . "%' OR ordName LIKE '%" . $searchtext . "%' OR ordEmail LIKE '%" . $searchtext . "%' OR ordAddress LIKE '%" . $searchtext . "%' OR ordCity LIKE '%" . $searchtext . "%' OR ordState LIKE '%" . $searchtext . "%' OR ordZip LIKE '%" . $searchtext . "%' OR ordPhone LIKE '%" . $searchtext . "%' OR ordShipType LIKE '%" . $searchtext . "%' OR ordShipName LIKE '%" . $searchtext . "%')";
    2811. 

  2811. 			if($_POST['ordPOAPOs'] == 'shipping_APOs') {
    2812. 

  2812. 				$sSQL .= " AND IF(ordShipAddress != '',ordShipState IN('AA','AE','AP') AND ordShipPoApo = 1,ordState IN('AA','AE','AP') AND ordPoApo = 1)";
    2813. 

  2813. 			}elseif($_POST['ordPOAPOs'] == 'shipping_POs') {
    2814. 

  2814. 				$sSQL .= " AND IF(ordShipAddress != '',ordShipState NOT IN('AA','AE','AP') AND ordShipPoApo = 1,ordState NOT IN('AA','AE','AP') AND ordPoApo = 1)";
    2815. 

  2815. 			}elseif($_POST['ordPOAPOs'] == 'shipping_PO_APO') {
    2816. 

  2816. 				$sSQL .= " AND IF(ordShipAddress != '',ordShipPoApo = 1,ordPoApo = 1)";
    2817. 

  2817. 			}elseif($_POST['ordPOAPOs'] == 'APOs') {
    2818. 

  2818. 				$sSQL .= " AND ((ordPoApo = 1 AND ordState IN('AA','AE','AP')) OR (ordPoApo = 1 AND ordState IN('AA','AE','AP')))";
    2819. 

  2819. 			}elseif($_POST['ordPOAPOs'] == 'PO_APO') {
    2820. 

  2820. 				$sSQL .= " AND (ordPoApo = 1 OR ordShipPoApo = 1)";
    2821. 

  2821. 			}elseif($_POST['ordPOAPOs'] == 'POs') {
    2822. 

  2822. 				$sSQL .= " AND ((ordPoApo = 1 AND ordState NOT IN('AA','AE','AP')) OR (ordPoApo = 1 AND ordState NOT IN('AA','AE','AP')))";
    2823. 

  2823. 			}
    2824. 

  2824. 			if($_POST['custID'] !="") $sSQL .= " AND ordEID=".$_POST['custID'];
    2825. 

  2825. 			/*if($_POST['optName'] != 'none') {
    2826. 

  2826. 				$sSQL .= " AND co.coCartOption = '".$_POST['optName']."'";
    2827. 

  2827. 			}
    2828. 

  2828. 			if($_POST['prodName'] != 'none') {
    2829. 

  2829. 				$sSQL .= " AND c.CartProdID = '".$_POST['prodName']."'";
    2830. 

  2830. 			}*/
    2831. 

  2831. 			if ($_POST['custID'] !="") {
    2832. 

  2832. 			    $sSQL .= " AND ordEID=".$_POST['custID'];
    2833. 

  2833. 			} else {
    2834. 

  2834. 			    $sSQL .= " AND ordEID!=34";
    2835. 

  2835. 			}
    2836. 

  2836. 			if (!empty($_REQUEST['myfrogz'])) {
    2837. 

  2837. 				$sSQL .= " AND ( ordAuthNumber LIKE 'AT&T-%' OR ordAuthNumber LIKE 'KC_%' )";
    2838. 

  2838. 			} else {
    2839. 

  2839. 				$sSQL .= " AND ( ordAuthNumber NOT LIKE 'AT&T-%' AND ordAuthNumber NOT LIKE 'KC_%' )";
    2840. 

  2840. 			}
    2841. 

  2841. 			if ($_POST['ship_type']) {
    2842. 

  2842. 				$sSQL .= " AND ordShipType = '" . $_POST['ship_type'] . "'";
    2843. 

  2843. 			}
    2844. 

  2844. 		}
    2845. 

  2845. 		$sSQL .= " ORDER BY ordID";
    2846. 

  2846. 	}
    2847. 

  2847. 	else {
    2848. 

  2848. 		$sSQL = "SELECT ordID,ordName,ordPayProvider,payProvName,ordAuthNumber,ordDate,ordStatus,ordShipType,ordTotal-ordDiscount AS ordTot,ordStateTax,ordShipping,ordTransID,order_changed,ordEID,ordAffiliate,ordPrinted_logan FROM orders LEFT JOIN payprovider ON payprovider.payProvID=orders.ordPayProvider 
    2849. 

  2849. 				 WHERE ordStatus <> 1 
    2850. 

  2850. 				 AND ordEID !=34
    2851. 

  2851. 				 AND ordAuthNumber NOT LIKE 'AT&T-%'
    2852. 

  2852. 				 AND ordDate BETWEEN '" . date("Y-m-d", $sd) . "' AND '" . date("Y-m-d", $ed) . " 23:59:59' 
    2853. 

  2853. 				 ORDER BY ordID";
    2854. 

  2854. 	}
    2855. 

  2855. 	$alldata = mysql_query($sSQL) or print(mysql_error().'<br />'.$sSQL);
    2856. 

  2856. 	echo "<!-- Chad \n".$sSQL." -->";
    2857. 

  2857. 	$hasdeleted=false;
    2858. 

  2858. 	$sSQL = "SELECT COUNT(*) AS NumDeleted FROM orders WHERE ordStatus=1";
    2859. 

  2859. 	$result = mysql_query($sSQL) or print(mysql_error().$sSQL);
    2860. 

  2860. 	$rs = mysql_fetch_assoc($result);
    2861. 

  2861. 	if($rs["NumDeleted"] > 0) $hasdeleted=true;
    2862. 

  2862. 	mysql_free_result($result);
    2863. 

  2863. ?>
    2864. 

  2864. <link type="text/css" href="http://assets.ifrogz.com/lib/packages/jquery-ui/1.7.2/ui-lightness/jquery-ui.custom.css" rel="Stylesheet" />
    2865. 

  2865. <script language="JavaScript" type="text/javascript" charset="utf-8" src="http://assets.ifrogz.com/lib/packages/jquery/1.3.2/jquery.min.js"></script>
    2866. 

  2866. <script language="JavaScript" type="text/javascript" charset="utf-8" src="http://assets.ifrogz.com/lib/packages/jquery-ui/1.7.2/jquery-ui.custom.min.js"></script>
    2867. 

  2867. <script language="JavaScript" type="text/javascript" charset="utf-8">
    2868. 

  2868. <!--
    2869. 

  2869. 	jQuery.noConflict();
    2870. 

  2870. 	
    2871. 

  2871. 	jQuery(document).ready(function() {
    2872. 

  2872. 		jQuery("input.calendar").datepicker({ 
    2873. 

  2873. 							showOn: 'button', 
    2874. 

  2874. 							buttonImage: '/lib/images/misc/calendar.png', 
    2875. 

  2875. 							buttonImageOnly: true, 
    2876. 

  2876. 							dateFormat: 'yy-mm-dd', 
    2877. 

  2877. 							showButtonPanel: true,
    2878. 

  2878. 							changeMonth: true,
    2879. 

  2879. 							changeYear: true,
    2880. 

  2880. 							minDate: '-5Y',
    2881. 

  2881. 							maxDate: '+5Y'
    2882. 

  2882. 							}).css('margin-right', '5px');
    2883. 

  2883. 							
    2884. 

  2884. 		jQuery('img.ui-datepicker-trigger').css({'vertical-align' : 'middle', 'cursor' : 'pointer'});
    2885. 

  2885. 		
    2886. 

  2886. 		jQuery('#select_all').click(function() {
    2887. 

  2887. 			var g = 0;
    2888. 

  2888. 			var j=0;
    2889. 

  2889. 			if (jQuery(this).is(':checked')) {
    2890. 

  2890. 				jQuery.each(jQuery('.ord_checkbox'), function(i, val){
    2891. 

  2891. 					jQuery(val).attr('checked', true);
    2892. 

  2892. 				});
    2893. 

  2893. 			} else {
    2894. 

  2894. 				jQuery.each(jQuery('.ord_checkbox'), function(i, val){
    2895. 

  2895. 					jQuery(val).attr('checked', false);
    2896. 

  2896. 				});
    2897. 

  2897. 			}
    2898. 

  2898. 		});
    2899. 

  2899. 		
    2900. 

  2900. 		jQuery(".sel_location").change(function() {
    2901. 

  2901. 			var row = jQuery(this).attr('rowcounter');
    2902. 

  2902. 			var original = jQuery('input[type=hidden][name^=orig_location][rowcounter=' + row + ']').val();
    2903. 

  2903. 			var val = jQuery('.sel_location[rowcounter=' + row + ']').val();
    2904. 

  2904. 			if (original != val) {
    2905. 

  2905. 				jQuery('.ord_checkbox[rowcounter=' + row + ']').attr('checked', true);
    2906. 

  2906. 				jQuery('.undo_location[rowcounter=' + row + ']').fadeIn('fast');
    2907. 

  2907. 				jQuery('.undo_location[rowcounter=' + row + ']').bind('click', function(event) {
    2908. 

  2908. 					jQuery('.undo_location[rowcounter=' + row + ']').fadeOut('fast');
    2909. 

  2909. 					jQuery('.sel_location[rowcounter=' + row + ']').val(original);
    2910. 

  2910. 					jQuery('.ord_checkbox[rowcounter=' + row + ']').attr('checked', false);
    2911. 

  2911. 					jQuery('.undo_location[rowcounter=' + row + ']').unbind('click');
    2912. 

  2912. 				});
    2913. 

  2913. 			} else {
    2914. 

  2914. 				jQuery('.ord_checkbox[rowcounter=' + row + ']').attr('checked', false);				
    2915. 

  2915. 			}
    2916. 

  2916. 		});
    2917. 

  2917. 		
    2918. 

  2918. 		jQuery("#myfrogz_dialog").dialog({
    2919. 

  2919. 					bgiframe: true,
    2920. 

  2920. 					autoOpen: false,
    2921. 

  2921. 					modal: true,
    2922. 

  2922. 					closeOnEscape: true
    2923. 

  2923. 		});
    2924. 

  2924. 		
    2925. 

  2925. 		jQuery("#myfrogz_info").css('cursor', 'pointer').click(function() {
    2926. 

  2926. 			jQuery("#myfrogz_dialog").dialog('open');
    2927. 

  2927. 		});
    2928. 

  2928. 	});
    2929. 

  2929. 	
    2930. 

  2930. 

  2931. function delrec(id) {
    2932. 

  2932. cmsg = "<?php print $yyConDel?>\n"
    2933. 

  2933. if (confirm(cmsg)) {
    2934. 

  2934. 	document.mainform.id.value = id;
    2935. 

  2935. 	document.mainform.act.value = "delete";
    2936. 

  2936. 	document.mainform.sd.value="<?php print date($admindatestr, $sd)?>";
    2937. 

  2937. 	document.mainform.ed.value="<?php print date($admindatestr, $ed)?>";
    2938. 

  2938. 	document.mainform.submit();
    2939. 

  2939. }
    2940. 

  2940. }
    2941. 

  2941. function authrec(id) {
    2942. 

  2942. var aucode;
    2943. 

  2943. cmsg = "<?php print $yyEntAuth?>"
    2944. 

  2944. if ((aucode=prompt(cmsg,'<?php print $yyManAut?>'))!=null) {
    2945. 

  2945. 	document.mainform.id.value = id;
    2946. 

  2946. 	document.mainform.act.value = "authorize";
    2947. 

  2947. 	document.mainform.authcode.value = aucode;
    2948. 

  2948. 	document.mainform.sd.value="<?php print date($admindatestr, $sd)?>";
    2949. 

  2949. 	document.mainform.ed.value="<?php print date($admindatestr, $ed)?>";
    2950. 

  2950. 	document.mainform.submit();
    2951. 

  2951. }
    2952. 

  2952. }
    2953. 

  2953. function checkcontrol(tt,evt){
    2954. 

  2954. <?php if(strstr(@$HTTP_SERVER_VARS["HTTP_USER_AGENT"], "Gecko")){ ?>
    2955. 

  2955. theevnt = evt;
    2956. 

  2956. return;
    2957. 

  2957. <?php }else{ ?>
    2958. 

  2958. theevnt=window.event;
    2959. 

  2959. <?php } ?>
    2960. 

  2960. if(theevnt.ctrlKey){
    2961. 

  2961. 	maxitems=document.mainform.maxitems.value;
    2962. 

  2962. 	for(index=0;index<maxitems;index++){
    2963. 

  2963. 		if(eval('document.mainform.ordstatus'+index+'.length') > tt.selectedIndex){
    2964. 

  2964. 			eval('document.mainform.ordstatus'+index+'.selectedIndex='+tt.selectedIndex);
    2965. 

  2965. 			eval('document.mainform.ordstatus'+index+'.options['+tt.selectedIndex+'].selected=true');
    2966. 

  2966. 		}
    2967. 

  2967. 	}
    2968. 

  2968. }
    2969. 

  2969. }
    2970. 

  2970. function displaysearch(){
    2971. 

  2971. thestyle = document.getElementById('searchspan').style;
    2972. 

  2972. if(thestyle.display=='none')
    2973. 

  2973. 	thestyle.display = 'block';
    2974. 

  2974. else
    2975. 

  2975. 	thestyle.display = 'none';
    2976. 

  2976. }
    2977. 

  2977. function checkprinter(tt,evt,cnt){
    2978. 

  2978. 

  2979. <?php if(strstr(@$HTTP_SERVER_VARS["HTTP_USER_AGENT"], "Gecko")){ ?>
    2980. 

  2980. if(evt.ctrlKey || evt.altKey || document.mainform.ctrlmod[document.mainform.ctrlmod.selectedIndex].value=="1"){
    2981. 

  2981. 	tt.href += "&printer=true";
    2982. 

  2982. 	window.location.href = tt.href;
    2983. 

  2983. }
    2984. 

  2984. if(document.mainform.ctrlmod[document.mainform.ctrlmod.selectedIndex].value=="2"){
    2985. 

  2985. 	//if($('ordstatus'+cnt).value>5 && $('ordstatus'+cnt).value<10 && $('ordstatus'+cnt).value!=17 && $('ordstatus'+cnt).value!=10) {
    2986. 

  2986. 		//alert("Orders the have been set to packing cannot be changed.");
    2987. 

  2987. 		//return(false);
    2988. 

  2988. 	//} else 
    2989. 

  2989. 	tt.href += "&doedit=true"; 
    2990. 

  2990. 	window.location.href = tt.href;
    2991. 

  2991. }
    2992. 

  2992. <?php }else{ ?>
    2993. 

  2993. theevnt=window.event;
    2994. 

  2994. if(theevnt.ctrlKey || document.mainform.ctrlmod[document.mainform.ctrlmod.selectedIndex].value=="1")tt.href += "&printer=true";
    2995. 

  2995. //if($('ordstatus'+cnt).value>5 && $('ordstatus'+cnt).value!=1 && $('ordstatus'+cnt).value!=17) {
    2996. 

  2996. 	//alert("Orders the have been set to packing cannot be changed.");
    2997. 

  2997. 	//return(false);
    2998. 

  2998. //} else {
    2999. 

  2999. 	if(document.mainform.ctrlmod[document.mainform.ctrlmod.selectedIndex].value=="2")tt.href += "&doedit=true";
    3000. 

  3000. //}
    3001. 

  3001. <?php } ?>
    3002. 

  3002. return(true);
    3003. 

  3003. }
    3004. 

  3004. 

  3005. function checkforedit(ele){
    3006. 

  3006. 	if($(ele).value==2){
    3007. 

  3007. 		alert("If you are add/deleting or changing an item in the order please change status of the order to cancelled first. This is to keep the inventory accurate. After you have made the changes please set the status back to the old status. Please don't edit orders that have already been set to packing.");
    3008. 

  3008. 		
    3009. 

  3009. 	}
    3010. 

  3010. }
    3011. 

  3011. // -->
    3012. 

  3012. </script>
    3013. 

  3013.       <table border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="">
    3014. 

  3014.         <tr>
    3015. 

  3015.           <td width="100%" align="center">
    3016. 

  3016. <?php	$themask = 'yyyy-mm-dd';
    3017. 

  3017. 		if($admindateformat==1)
    3018. 

  3018. 			$themask='mm/dd/yyyy';
    3019. 

  3019. 		elseif($admindateformat==2)
    3020. 

  3020. 			$themask='dd/mm/yyyy';
    3021. 

  3021. 		if(! $success) print "<p><font color='#FF0000'>" . $errmsg . "</font></p>"; ?>
    3022. 

  3022. 			<span name="searchspan" id="searchspan" <?php //if($usepowersearch) print 'style="display:block"'; else print 'style="display:none"'?>>
    3023. 

  3023.             <table width="100%" border="0" cellspacing="1" cellpadding="2" bgcolor="">
    3024. 

  3024. 			  <form method="post" action="/admin/orders.php" name="psearchform">
    3025. 

  3025. 			  <input type="hidden" name="powersearch" value="1" />
    3026. 

  3026. 			  <tr bgcolor="#030133"><td colspan="6"><strong><font color="#E7EAEF">&nbsp;<?php print $yyPowSea?></font></strong></td></tr>
    3027. 

  3027. 			  <tr bgcolor="#E7EAEF"> 
    3028. 

  3028.                 <td align="right" width="15%"><strong><?php print $yyOrdFro?>:</strong></td>
    3029. 

  3029. 				<td width="15%" align="left" nowrap="nowrap">&nbsp;
    3030. 

  3030. 			    	<input type="text" size="14" name="fromdate" id="fromdate" class="calendar" value="<?php print $fromdate?>" />
    3031. 

  3031. 				</td>
    3032. 

  3032. 				<td width="15%" align="right"><strong>E-tailers:</strong></td>
    3033. 

  3033. 				<td align="left" width="15%">
    3034. 

  3034. 				<select name="custID">
    3035. 

  3035. 				 	<option value="" <?=(empty($_POST['custID']))?' selected="selected"':''?>>None Selected</option>
    3036. 

  3036. 				 <? 
    3037. 

  3037. 				 $sql_EID="SELECT custID, Name FROM customers WHERE active=1";
    3038. 

  3038. 				 $result_EID=mysql_query($sql_EID);
    3039. 

  3039. 				 while($rs_EID=mysql_fetch_array($result_EID)){ ?>
    3040. 

  3040. 					  	<option value="<?=$rs_EID['custID']?>" <? if($_POST['custID']==$rs_EID['custID']) echo " selected"?>><?= str_replace('<br />',' ',$rs_EID['Name'])?></option>
    3041. 

  3041. 				<? } ?> 
    3042. 

  3042. 				 </select>				</td>
    3043. 

  3043. 				<td align="right" width="20%"><strong><?php print $yyOrdTil?>:</strong></td>
    3044. 

  3044. 				<td align="left" width="25%">
    3045. 

  3045. 					<input type="text" size="14" name="todate" id="todate" class="calendar" value="<?php print $todate?>" />
    3046. 

  3046. 				</td>
    3047. 

  3047. 			  </tr>
    3048. 

  3048. 			  <tr bgcolor="#EAECEB">
    3049. 

  3049. 				<td align="right"><strong><?php print $yyOrdId?>:</strong></td>
    3050. 

  3050. 				<td align="left">&nbsp;<input type="text" size="14" name="ordid" value="<?php print $ordid?>" /><img src="/lib/images/misc/info_icon.png" id="myfrogz_info" align="absmiddle" /></td>
    3051. 

  3051. 				<td align="right"><strong>PO/APOs:</strong></td>
    3052. 

  3052. 				<td align="left">
    3053. 

  3053. 					<select id="ordPOAPOs" name="ordPOAPOs">
    3054. 

  3054. 						<option value="none"<?=(empty($_POST['ordPOAPOs']))?' selected="selected"':''?>>None Selected</option>
    3055. 

  3055. 						<option value="APOs"<?=($_POST['ordPOAPOs'] == 'APOs')?' selected="selected"':''?>>APOs</option>
    3056. 

  3056. 						<option value="PO_APO"<?=($_POST['ordPOAPOs'] == 'PO_APO')?' selected="selected"':''?>>PO/APOs</option>
    3057. 

  3057. 						<option value="POs"<?=($_POST['ordPOAPOs'] == 'POs')?' selected="selected"':''?>>POs</option>
    3058. 

  3058. 						<option value="shipping_APOs"<?=($_POST['ordPOAPOs'] == 'shipping_APOs')?' selected="selected"':''?>>Shipping to APOs</option>
    3059. 

  3059. 						<option value="shipping_PO_APO"<?=($_POST['ordPOAPOs'] == 'shipping_PO_APO')?' selected="selected"':''?>>Shipping to PO/APOs</option>
    3060. 

  3060. 						<option value="shipping_POs"<?=($_POST['ordPOAPOs'] == 'shipping_POs')?' selected="selected"':''?>>Shipping to POs</option>
    3061. 

  3061. 					</select>				</td>
    3062. 

  3062. 				<td align="right"><strong><?php print $yySeaTxt?>:</strong></td>
    3063. 

  3063. 				<td align="left" valign="middle">
    3064. 

  3064. 				  <input type="text" size="30" name="searchtext" value="<?php print $origsearchtext?>" /></td>
    3065. 

  3065. 			  </tr>
    3066. 

  3066. 			  <tr bgcolor="#E7EAEF">
    3067. 

  3067. 				<td rowspan="2" align="right"><strong><?php print $yyOrdSta?>:</strong></td>
    3068. 

  3068. 				<td rowspan="2" align="left">&nbsp;<select name="ordstatus[]" size="5" multiple><option value="9999" <?php if(strpos($ordstatus,"9999") !== FALSE) print "selected"?>><?php print $yyAllSta?></option><?php
    3069. 

  3069. 						$ordstatus="";
    3070. 

  3070. 						$addcomma = "";
    3071. 

  3071. 						if(is_array(@$_REQUEST["ordstatus"])){
    3072. 

  3072. 							foreach($_REQUEST["ordstatus"] as $objValue){
    3073. 

  3073. 								if(is_array($objValue))$objValue=$objValue[0];
    3074. 

  3074. 								$ordstatus .= $addcomma . $objValue;
    3075. 

  3075. 								$addcomma = ",";
    3076. 

  3076. 							}
    3077. 

  3077. 						}else
    3078. 

  3078. 							$ordstatus = trim(@$_REQUEST["ordstatus"]);
    3079. 

  3079. 						$ordstatusarr = explode(",", $ordstatus);
    3080. 

  3080. 						for($index=0; $index < $numstatus; $index++){
    3081. 

  3081. 							print '<option value="' . $allstatus[$index]["statID"] . '"';
    3082. 

  3082. 							if(is_array($ordstatusarr)){
    3083. 

  3083. 								foreach($ordstatusarr as $objValue)
    3084. 

  3084. 									if($objValue==$allstatus[$index]["statID"]) print " selected";
    3085. 

  3085. 							}
    3086. 

  3086. 							print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    3087. 

  3087. 						} ?></select>				</td>
    3088. 

  3088. 				<td rowspan="2" align="right"><strong><?=$yyOrdCou?>:</strong></td>
    3089. 

  3089. 				<td rowspan="2" align="left">
    3090. 

  3090. 				<? $sSQL2="SELECT DISTINCT cpnID,cpnName,cpnNumber FROM orders o LEFT JOIN coupons c ON o.ordCoupon=c.cpnID WHERE ordDiscount>0 ORDER BY cpnNumber,cpnName";
    3091. 

  3091. 					$result2=mysql_query($sSQL2) or die(mysql_error().$sSQL2);
    3092. 

  3092. 					$total2=mysql_num_rows($result2);?>
    3093. 

  3093. 					<select name="ordcoupon" size="5" style="width:250px; font-size:10px; ">
    3094. 

  3094. 					 	<? while($rs2=mysql_fetch_array($result2)){ ?>
    3095. 

  3095. 					  	<option value="<?=$rs2['cpnID']?>" <?=$rs2['cpnNumber']==""?"":'style="font-weight:bold;"'?> <? if($ordcoupon==$rs2['cpnID']) echo " selected"?>><?=$rs2['cpnNumber']==""?"":$rs2['cpnNumber'].' | '?> <?= str_replace('<br />',' ',$rs2['cpnName'])?></option>
    3096. 

  3096. 						<? } ?>
    3097. 

  3097. 					</select>
    3098. 

  3098. 					<div style="font-size:9px;">Coupons are in bold</div>
    3099. 

  3099. 					</td>
    3100. 

  3100. 				<td align="right" valign="middle"><strong>Return Status:</strong></td>
    3101. 

  3101. 				<td align="left" valign="middle">
    3102. 

  3102. 						<?
    3103. 

  3103. 						$sql_return="SELECT * FROM returns ORDER BY status_order";
    3104. 

  3104. 						$result_return=mysql_query($sql_return);
    3105. 

  3105. 						?>
    3106. 

  3106. 						<select name="return_status_search">
    3107. 

  3107. 						  <option value="" <?php if ($_SESSION['return_status_search']=="") {echo "selected=\"selected\"";} ?>></option>
    3108. 

  3108. 						  <? while($row_return=mysql_fetch_assoc($result_return)){?>
    3109. 

  3109. 						  <option value="<?=$row_return["id"]?>" <?php if (!(strcmp($row_return["id"], $_SESSION['return_status_search']))) {echo "selected=\"selected\"";} ?>>
    3110. 

  3110. 						  <?=$row_return["status"]?>
    3111. 

  3111. 						  </option>
    3112. 

  3112. 						  <? } ?>
    3113. 

  3113. 					  </select></td>
    3114. 

  3114. 			  </tr>
    3115. 

  3115. 			  <tr bgcolor="#E7EAEF">
    3116. 

  3116. 			    <td align="right"><strong>Shipping Method:</strong></td>
    3117. 

  3117. 			    <td align="left">
    3118. 

  3118. 					<select name="ship_type">
    3119. 

  3119. 			    	<?php
    3120. 

  3120. 					$allowed_types = "'Standard','Priority Mail','FedEx Express','FedEx Overnight','International','International HK'";
    3121. 

  3121. 			    	$sql_ship = "SELECT DISTINCT ordShipType FROM orders WHERE ordShipType IN($allowed_types)";
    3122. 

  3122. 					$res_ship = mysql_query($sql_ship) or print(mysql_error());
    3123. 

  3123. 					$p = 0;
    3124. 

  3124. 					while ($row_ship = mysql_fetch_assoc($res_ship)) {
    3125. 

  3125. 						if ($_POST['ship_type'] == $row_ship['ordShipType']) {
    3126. 

  3126. 							$selected = ' selected="selected"';
    3127. 

  3127. 						} else {
    3128. 

  3128. 							$selected = '';
    3129. 

  3129. 						}
    3130. 

  3130. 						if ($p == 0) {
    3131. 

  3131. 							echo "<option value=''>None</option>";
    3132. 

  3132. 						}
    3133. 

  3133. 					?>
    3134. 

  3134. 						<option value="<?=$row_ship['ordShipType']?>"<?=$selected?>><?=$row_ship['ordShipType']?></option>
    3135. 

  3135. 					<?php
    3136. 

  3136. 						$p++;
    3137. 

  3137. 					}
    3138. 

  3138. 			    	?>
    3139. 

  3139. 					</select>
    3140. 

  3140. 			    </td>
    3141. 

  3141. 			    </tr>
    3142. 

  3142. 			  
    3143. 

  3143. 			  <tr bgcolor="#E7EAEF">
    3144. 

  3144. 				<td colspan="3" align="left"><input type="checkbox" name="startwith" value="1" <?php if($usepowersearch) print "checked"?> />				  <strong><?php print $yyStaPow?></strong></td>
    3145. 

  3145. 				<td align="left" valign="center"><input type="checkbox" name="myfrogz" value="myfrogz" id="myfrogz"<?=(!empty($isMyFrogz)) ? ' checked="checked"' : ''?> />&nbsp;MyFrogz Orders</td>
    3146. 

  3146. 				<td colspan="2" align="center">
    3147. 

  3147. 				  <input type="submit" value="<?php print $yySearch?>" /> <input type="button" value="Stats" onclick="document.forms.psearchform.action='/admin/stats1.php';document.forms.psearchform.submit();" /></td>
    3148. 

  3148. 			  </tr>
    3149. 

  3149. 			  
    3150. 

  3150. 			  <tr>
    3151. 

  3151. 			  	<td colspan="6">
    3152. 

  3152. 				<?
    3153. 

  3153. 					$sql_status =  "SELECT count( * ) as statcount , os.statPrivate , os.statID
    3154. 

  3154. 									FROM orders o, orderstatus os
    3155. 

  3155. 									WHERE o.ordStatus = os.statID
    3156. 

  3156. 									AND (o.ordStatus BETWEEN 0 AND 10 OR o.ordStatus = 17)
    3157. 

  3157. 									AND o.ordName != ''
    3158. 

  3158. 									AND o.ordDate BETWEEN '" . date("Y-m-d", $sd) . "' AND '" . date("Y-m-d", $ed) . " 23:59:59'";
    3159. 

  3159. 				if (!empty($_REQUEST['myfrogz'])) {
    3160. 

  3160. 					$sql_status .= " AND ordAuthNumber LIKE 'AT&T-%'";
    3161. 

  3161. 				} else {
    3162. 

  3162. 					$sql_status .= " AND ordAuthNumber NOT LIKE 'AT&T-%'";
    3163. 

  3163. 				}
    3164. 

  3164. 					$sql_status .= " GROUP BY os.statID,os.statPrivate";
    3165. 

  3165. 					$result_status=mysql_query($sql_status);
    3166. 

  3166. 					while($row_status=mysql_fetch_assoc($result_status)){?>
    3167. 

  3167. 			  		<div style="color:#000066; font-weight:bold; border:#030133 solid 1px; margin:2px; float:left; width:146px;padding:2px; text-align:center; background-color:#E7EAEF;"><a href="/admin/orders.php?powersearch=1&ordstatus=<?=$row_status['statID']?>&fromdate=<?=date("Y-m-d", $sd)?>&todate=<?=date("Y-m-d", $ed)?>&myfrogz=<?=$_REQUEST['myfrogz']?>"><?=$row_status['statID'].'-'.$row_status['statPrivate'].': '.$row_status['statcount'] ?></a></div>
    3168. 

  3168. 			  	<? } ?>			  	</td>
    3169. 

  3169. 			  </tr>
    3170. 

  3170. 			  </form>
    3171. 

  3171. 			</table>
    3172. 

  3172. 			
    3173. 

  3173. 			<div id="myfrogz_dialog" title="Update">
    3174. 

  3174. 				Whenever you put in an order number, the "MyFrogz" checkbox will be ignored
    3175. 

  3175. 			</div>
    3176. 

  3176. 			
    3177. 

  3177. 			</span>
    3178. 

  3178.             <table width="100%" border="0" cellspacing="0" cellpadding="2" bgcolor="">
    3179. 

  3179. 			  <form method="post" action="/admin/orders.php">
    3180. 

  3180. 			   <tr>
    3181. 

  3181. 			    <td width="37%" align="center"> <input type="button" value="<?php print $yyPowSea?>" onclick="displaysearch()" /></td><td width="37%" colspan="2" align="center"><p><strong><?php print $yyShoFrm?>:</strong> <select name="sd" size="1"><?php
    3182. 

  3182. 					$gotmatch=FALSE;
    3183. 

  3183. 					$thetime = time() + ($dateadjust*60*60);
    3184. 

  3184. 					$dayToday = date("d",$thetime);
    3185. 

  3185. 					$monthToday = date("m",$thetime);
    3186. 

  3186. 					$yearToday = date("Y",$thetime);
    3187. 

  3187. 					for($index=$dayToday; $index > 0; $index--){
    3188. 

  3188. 						$thedate = mktime(0, 0, 0, $monthToday, $index, $yearToday);
    3189. 

  3189. 						$thedatestr = date($admindatestr, $thedate);
    3190. 

  3190. 						print "<option value='" . $thedatestr . "'";
    3191. 

  3191. 						if($thedate==$sd){
    3192. 

  3192. 							print " selected";
    3193. 

  3193. 							$gotmatch=TRUE;
    3194. 

  3194. 						}
    3195. 

  3195. 						print ">" . $thedatestr . "</option>\n";
    3196. 

  3196. 					}
    3197. 

  3197. 					for($index=1; $index<=12; $index++){
    3198. 

  3198. 						$thedatestr = date($admindatestr, $thedate = mktime(0,0,0,date("m",$thetime)-$index,1,date("Y",$thetime)));
    3199. 

  3199. 						if(! $gotmatch && $thedate < $sd){
    3200. 

  3200. 							print "<option value='" . date($admindatestr, $sd) . "' selected>" . date($admindatestr, $sd) . "</option>";
    3201. 

  3201. 							$gotmatch=TRUE;
    3202. 

  3202. 						}
    3203. 

  3203. 						print "<option value='" . $thedatestr . "'";
    3204. 

  3204. 						if($thedate==$sd){
    3205. 

  3205. 							print " selected";
    3206. 

  3206. 							$gotmatch=TRUE;
    3207. 

  3207. 						}
    3208. 

  3208. 						print ">" . $thedatestr . "</option>\n";
    3209. 

  3209. 					}
    3210. 

  3210. 					if(!$gotmatch) print "<option value='" . date($admindatestr, $sd) . "' selected>" . date($admindatestr, $sd) . "</option>";
    3211. 

  3211. 				?></select> <strong><?php print $yyTo?>:</strong> <select name="ed" size="1"><?php
    3212. 

  3212. 					$gotmatch=FALSE;
    3213. 

  3213. 					$dayToday = date("d",$thetime);
    3214. 

  3214. 					$monthToday = date("m",$thetime);
    3215. 

  3215. 					$yearToday = date("Y",$thetime);
    3216. 

  3216. 					for($index=$dayToday; $index > 0; $index--){
    3217. 

  3217. 						$thedate = mktime(0, 0, 0, $monthToday, $index, $yearToday);
    3218. 

  3218. 						$thedatestr = date($admindatestr, $thedate);
    3219. 

  3219. 						print "<option value='" . $thedatestr . "'";
    3220. 

  3220. 						if($thedate==$ed){
    3221. 

  3221. 							print " selected";
    3222. 

  3222. 							$gotmatch=TRUE;
    3223. 

  3223. 						}
    3224. 

  3224. 						print ">" . $thedatestr . "</option>\n";
    3225. 

  3225. 					}
    3226. 

  3226. 					for($index=1; $index<=12; $index++){
    3227. 

  3227. 

  3228. 						if(! $gotmatch && $thedate < $ed){
    3229. 

  3229. 							print "<option value='" . date($admindatestr, $ed) . "' selected>" . date($admindatestr, $ed) . "</option>";
    3230. 

  3230. 							$gotmatch=TRUE;
    3231. 

  3231. 						}
    3232. 

  3232. 						$thedatestr = date($admindatestr, $thedate = mktime(0,0,0,date("m",$thetime)-$index,1,date("Y",$thetime)));
    3233. 

  3233. 						print "<option value='" . $thedatestr . "'";
    3234. 

  3234. 						if($thedate==$ed){
    3235. 

  3235. 							print " selected";
    3236. 

  3236. 							$gotmatch=TRUE;
    3237. 

  3237. 						}
    3238. 

  3238. 						print ">" . $thedatestr . "</option>\n";
    3239. 

  3239. 					}
    3240. 

  3240. 					if(!$gotmatch) print "<option value='" . date($admindatestr, $sd) . "' selected>" . date($admindatestr, $sd) . "</option>";
    3241. 

  3241. 				?></select> <input type="submit" value="Go" /></td>
    3242. 

  3242. 			  </tr>
    3243. 

  3243. 			  <tr>
    3244. 

  3244. 			    <td colspan="3">
    3245. 

  3245. 				* Order has Custom Screenz | 
    3246. 

  3246. 				<span style="color:#00CC00;">order has been changed</span> | 
    3247. 

  3247. 				<span style="background-color:#FA6561; padding:2px;">etailer</span> |
    3248. 

  3248. 				<span style="color:#FF0000;">unauthorized</span> |	<span style="background-color: #FFC58A; padding:2px;">affiliate</span> | <img src="/lib/images/misc/icon_headphones.png" /> Order has custom headphones</td>
    3249. 

  3249. 			    </tr>
    3250. 

  3250. 			  </form>
    3251. 

  3251. 			</table>
    3252. 

  3252. 			<table width="100%" border="0" cellspacing="1" cellpadding="2" bgcolor="">
    3253. 

  3253. 			  <tr bgcolor="#030133"> 
    3254. 

  3254.                 <td align="center" align="center"><input type="checkbox" name="select_all" value="yes" id="select_all" /></td>
    3255. 

  3255. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyOrdId?></font></strong></td>
    3256. 

  3256. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyName?></font></strong></td>
    3257. 

  3257. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyMethod?></font></strong></td>
    3258. 

  3258. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyAutCod?></font></strong></td>
    3259. 

  3259. 				<td align="center"><strong><font color="#E7EAEF">Order Amt</font></strong></td>
    3260. 

  3260. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyDate?></font></strong></td>
    3261. 

  3261. 				<td align="center"><strong><font color="#E7EAEF"><?php print $yyStatus?></font></strong></td>
    3262. 

  3262. 		        <td align="center">&nbsp;</td>
    3263. 

  3263. 			  </tr>
    3264. 

  3264. 			  <form method="post" name="mainform" action="/admin/orders.php">
    3265. 

  3265. 			  <?php if(@$_POST["powersearch"]=="1"){ ?>
    3266. 

  3266. 			  <input type="hidden" name="powersearch" value="1" />
    3267. 

  3267. 			  <input type="hidden" name="fromdate" value="<?php print trim(@$_POST["fromdate"])?>" />
    3268. 

  3268. 			  <input type="hidden" name="todate" value="<?php print trim(@$_POST["todate"])?>" />
    3269. 

  3269. 			  <input type="hidden" name="ordid" value="<?php print trim(str_replace('"','',str_replace("'",'',@$_POST["ordid"])))?>" />
    3270. 

  3270. 			  <input type="hidden" name="origsearchtext" value="<?php print trim(str_replace('"','&quot;',@$_POST["searchtext"]))?>" />
    3271. 

  3271. 			  <input type="hidden" name="searchtext" value="<?php print trim(str_replace('"',"&quot;",@$_POST["searchtext"]))?>" />
    3272. 

  3272. 			  <input type="hidden" name="ordstatus[]" value="<?php print $ordstatus?>" />
    3273. 

  3273. 			  <input type="hidden" name="startwith" value="<?php if($usepowersearch) print "1"?>" />
    3274. 

  3274. 			  <input type="hidden" name="myfrogz" value="<?php print $isMyFrogz?>" />
    3275. 

  3275. 			  <?php } ?>
    3276. 

  3276. 			  <input type="hidden" name="act" value="xxx" />
    3277. 

  3277. 			  <input type="hidden" name="id" value="xxx" />
    3278. 

  3278. 			  <input type="hidden" name="authcode" value="xxx" />
    3279. 

  3279. 			  <input type="hidden" name="ed" value="<?php print date($admindatestr, $ed)?>" />
    3280. 

  3280. 			  <input type="hidden" name="sd" value="<?php print date($admindatestr, $sd)?>" />
    3281. 

  3281. <?php
    3282. 

  3282. 	if(mysql_num_rows($alldata) > 0){
    3283. 

  3283. 		$rowcounter=0;
    3284. 

  3284. 		$ordTot=0;
    3285. 

  3285. 		$i=0;
    3286. 

  3286. 		$num_rows_order=mysql_num_rows($alldata);
    3287. 

  3287. 		while($rs = mysql_fetch_assoc($alldata)){
    3288. 

  3288. 			$order_id_array[$i]=$rs["ordID"];			
    3289. 

  3289. 			//check for split order
    3290. 

  3290. 			$splitstr='';
    3291. 

  3291. 			$sql_split="SELECT * FROM orderssplit WHERE orgOrder=".$rs["ordID"]." OR newOrder=".$rs["ordID"];
    3292. 

  3292. 			$result_split=mysql_query($sql_split);
    3293. 

  3293. 			if(mysql_num_rows($result_split)>0) {
    3294. 

  3294. 				$row_split=mysql_fetch_assoc($result_split);
    3295. 

  3295. 				$splitstr=$row_split['orgOrder'].','.$row_split['newOrder'];
    3296. 

  3296. 				$splitType=$row_split['splitType'];
    3297. 

  3297. 			}
    3298. 

  3298. 			
    3299. 

  3299. 			//check for custom screenz
    3300. 

  3300. 			$hascustomscreen='';
    3301. 

  3301. 			$sql_check="SELECT * FROM cart WHERE cartOrderID=".$rs["ordID"]." AND cartProdID LIKE '%-Custom'";
    3302. 

  3302. 			$result_check=mysql_query($sql_check);
    3303. 

  3303. 			if(mysql_num_rows($result_check)>0) $hascustomscreen='*';
    3304. 

  3304. 			
    3305. 

  3305. 			//check for dropshipper
    3306. 

  3306. 			$dropshipper='';
    3307. 

  3307. 			$sql_check_ds="SELECT p.pDropship FROM cart c JOIN products p ON c.cartProdID=p.pID WHERE p.pDropship>0 AND cartOrderID=".$rs["ordID"];
    3308. 

  3308. 			$result_check_ds=mysql_query($sql_check_ds);
    3309. 

  3309. 			$comma='';
    3310. 

  3310. 			while($row_check_ds=mysql_fetch_assoc($result_check_ds)) {
    3311. 

  3311. 				$sql_get_ds="SELECT dsName FROM dropshipper WHERE dsID=".$row_check_ds["pDropship"];
    3312. 

  3312. 				$result_get_ds=mysql_query($sql_get_ds);
    3313. 

  3313. 				if(mysql_num_rows($result_get_ds)>0){
    3314. 

  3314. 					$row_get_ds=mysql_fetch_assoc($result_get_ds);
    3315. 

  3315. 					if(!strstr($dropshipper,$row_get_ds['dsName']))$dropshipper.=$comma.$row_get_ds['dsName'];
    3316. 

  3316. 				}
    3317. 

  3317. 				$comma=', ';
    3318. 

  3318. 			}
    3319. 

  3319. 			
    3320. 

  3320. 			// Check for custom headphones
    3321. 

  3321. 			$hasCustomHeadphones = false;
    3322. 

  3322. 			$arrCustHeadphones = array('customnervepipe', 'customfallout', 'customhype');
    3323. 

  3323. 			$strCustHeadphones = "'".implode("','",$arrCustHeadphones)."'";
    3324. 

  3324. 			$sql_check_cust_headphones = "SELECT * 
    3325. 

  3325. 										  FROM cart 
    3326. 

  3326. 										  WHERE cartProdID IN($strCustHeadphones) 
    3327. 

  3327. 										  AND cartOrderID = ".$rs["ordID"];
    3328. 

  3328. 			$res_check_cust_headphones = mysql_query($sql_check_cust_headphones);
    3329. 

  3329. 			if (mysql_num_rows($res_check_cust_headphones) > 0) {
    3330. 

  3330. 				$hasCustomHeadphones = true;
    3331. 

  3331. 			}
    3332. 

  3332. 			
    3333. 

  3333. 			$i++;			
    3334. 

  3334. 			$total_tax_shipping=$rs["ordTot"]+$rs["ordStateTax"]+$rs["ordShipping"];
    3335. 

  3335. 			if($rs["ordStatus"]>=3) $ordTot += $total_tax_shipping;
    3336. 

  3336. 			if($rs["ordStatus"]>=3) $num_auth_order += 1;
    3337. 

  3337. 			if($rs["ordAuthNumber"]=="" || is_null($rs["ordAuthNumber"])){
    3338. 

  3338. 				$startfont="<font color='#FF0000'>";
    3339. 

  3339. 				$endfont="</font>";
    3340. 

  3340. 			} else{
    3341. 

  3341. 				$startfont="";
    3342. 

  3342. 				$endfont="";
    3343. 

  3343. 			}
    3344. 

  3344. 			if($rs["order_changed"]=='yes'){ 
    3345. 

  3345. 				$startfont="<font color='#00CC00'>";
    3346. 

  3346. 				$endfont="</font>";
    3347. 

  3347. 			}
    3348. 

  3348. 			if(@$bgcolor=="#E7EAEF") $bgcolor="#EAECEB"; else $bgcolor="#E7EAEF";
    3349. 

  3349. 			if(!empty($rs["ordAffiliate"]) && isset($rs["ordAffiliate"])) $bgcolor="#FFC58A";
    3350. 

  3350. 			if(!empty($rs["ordEID"])) $bgcolor="#FA6561";
    3351. 

  3351. 			//if($hascustomscreen) $bgcolor="#FFFF99";
    3352. 

  3352. 			
    3353. 

  3353.             if ($hasCustomHeadphones) {
    3354. 

  3354.             	$strCH = 'style="background: url(\'/lib/images/misc/icon_headphones.png\') no-repeat right;"';
    3355. 

  3355.             } else {
    3356. 

  3356.             	$strCH = '';
    3357. 

  3357.             }
    3358. 

  3358. ?>
    3359. 

  3359. 			  <tr bgcolor="<?php print $bgcolor?>"> 
    3360. 

  3360.                 <td align="center" style="width: 10px;"><input type="checkbox" rowcounter="<?=$rowcounter?>" class="ord_checkbox" name="selected[]" value="<?=$rowcounter?>" id="selected<?=$rs["ordID"]?>" /></td>
    3361. 

  3361. 				<td align="center" <?=$strCH?>>
    3362. 

  3362. 				<span style="float:left;"><a href="/admin/orders.php?powersearch=1&ordid=<?=$rs["ordID"]?>">[go]</a></span>
    3363. 

  3363. 				<a onclick="return(checkprinter(this,event,<?=$rowcounter?>));" href="/admin/orders.php?id=<?php print $rs["ordID"]?>"><?php print "<strong>" . $startfont . $hascustomscreen.$rs["ordID"] . $endfont . "</strong>"?></a>
    3364. 

  3364. 				<? if(!empty($splitstr)){
    3365. 

  3365. 						if($splitType=='Cloned'){
    3366. 

  3366. 							if($rs["ordAuthNumber"]=='CLONED') $linktext='View Orig';
    3367. 

  3367. 							else $linktext='View Cloned';
    3368. 

  3368. 						} else {
    3369. 

  3369. 							if($rs["ordAuthNumber"]=='Split Order') {$num_auth_order--; $linktext='View Orig';}
    3370. 

  3370. 							else $linktext='View Split';
    3371. 

  3371. 					 	}?>
    3372. 

  3372. 					 <a href="/admin/orders.php?powersearch=1&ordid=<?=$splitstr?>"><?=$linktext?></a>
    3373. 

  3373. 				<? } ?>				</td>
    3374. 

  3374. 				<td align="center"><a onclick="return(checkprinter(this,event,<?=$rowcounter?>));" href="/admin/orders.php?id=<?php print $rs["ordID"]?>"><?php print $startfont . $rs["ordName"] . $endfont?></a></td>
    3375. 

  3375. 				<td align="center"><?php print $startfont . $rs["payProvName"] . ($rs["payProvName"]=='PayPal' && trim($rs["ordTransID"]) != '' ? ' CC' : '') . $endfont?></td>
    3376. 

  3376. 				<td align="center"><?php
    3377. 

  3377. 					if($rs["ordAuthNumber"]=="" || is_null($rs["ordAuthNumber"])){
    3378. 

  3378. 						$isauthorized=FALSE;
    3379. 

  3379. 						print '<input type="button" name="auth" value="' . $yyAuthor . '" onclick="authrec(\'' . $rs["ordID"] . '\')" />';
    3380. 

  3380. 					}else{
    3381. 

  3381. 						print '<a href="#" title="' . FormatEuroCurrency($rs["ordTot"]) . '" onclick="authrec(\'' . $rs["ordID"] . '\');return(false);">' . $startfont . $rs["ordAuthNumber"] . $endfont . '</a>';
    3382. 

  3382. 						$isauthorized=TRUE;
    3383. 

  3383. 					}
    3384. 

  3384. 				?></td>
    3385. 

  3385. 				<td align="center"><?=FormatEuroCurrency($total_tax_shipping)?></td>
    3386. 

  3386. 				<td align="center"><font size="1"><?php print $startfont . date($admindatestr . "\<\\b\\r\>H:i:s", strtotime($rs["ordDate"])) . $endfont?></font></td>
    3387. 

  3387. 				<td align="center" nowrap="nowrap">
    3388. 

  3388. 					<input type="hidden" name="ordid<?php print $rowcounter?>" value="<?php print $rs["ordID"]?>" />
    3389. 

  3389. 					<input type="hidden" name="orig_location[]" rowcounter="<?=$rowcounter?>" value="<?=$rs["ordStatus"]?>" id="orig_location<?php print $rowcounter?>" />
    3390. 

  3390. 					<select id="ordstatus<?php print $rowcounter?>" rowcounter="<?=$rowcounter?>" class="sel_location" name="ordstatus<?php print $rowcounter?>" size="1" onchange="checkcontrol(this,event)" <?php if($rs['ordPayProvider']==20) print ' disabled'?>><?php
    3391. 

  3391. 						$gotitem=FALSE;
    3392. 

  3392. 						for($index=0; $index<$numstatus; $index++){
    3393. 

  3393. 							if(! $isauthorized && $allstatus[$index]["statID"]>2) break;
    3394. 

  3394. 							if(! ($rs["ordStatus"] != 2 && $allstatus[$index]["statID"]==2)){
    3395. 

  3395. 								print '<option value="' . $allstatus[$index]["statID"] . '"';
    3396. 

  3396. 								if($rs["ordStatus"]==$allstatus[$index]["statID"]){
    3397. 

  3397. 									print " selected";
    3398. 

  3398. 									$gotitem=TRUE;
    3399. 

  3399. 								}
    3400. 

  3400. 								print ">" . $allstatus[$index]["statPrivate"] . "</option>";
    3401. 

  3401. 							}
    3402. 

  3402. 						}
    3403. 

  3403. 						if(! $gotitem) print '<option value="" selected>' . $yyUndef . '</option>' ?></select>
    3404. 

  3404. 						<span class="undo_location" rowcounter="<?=$rowcounter?>" style="display: none; cursor: pointer;"><img src="/lib/images/misc/undo.png" /></span>
    3405. 

  3405. 						<? if($dropshipper!='') echo '<br />'.$dropshipper;?>
    3406. 

  3406. 				</td>
    3407. 

  3407. 			    <td align="center">
    3408. 

  3408. 			        <?php
    3409. 

  3409. 			            if ($rs["ordShipType"] == 'International'):
    3410. 

  3410. 			                $shiptype = 'Standard';
    3411. 

  3411. 			            else:
    3412. 

  3412. 			                $shiptype = trim($rs["ordShipType"]);
    3413. 

  3413. 			            endif;
    3414. 

  3414. 			        ?>
    3415. 

  3415. 					<img style="width: 34px; height: 22;" src="/lib/images/shiptypes/<?= (!empty($shiptype)) ? $shiptype . '.jpg' : 'clearpixel.gif'; ?>" /></td>
    3416. 

  3416. 			  </tr>
    3417. 

  3417. <?php		$rowcounter++;
    3418. 

  3418. 			if($rowcounter>=10000){
    3419. 

  3419. 				print "<tr><td colspan='9' align='center'><strong>Limit of " . $rowcounter . " orders reached. Please refine your search.</strong></td></tr>";
    3420. 

  3420. 				break;
    3421. 

  3421. 			}
    3422. 

  3422. 		}
    3423. 

  3423. ?>
    3424. 

  3424. 			  <tr>
    3425. 

  3425. 				<td colspan="4" align="left"><select id="ctrlmod" name="ctrlmod" size="1">
    3426. 

  3426. 				<option value="0">View Order Details</option><option value="1"><?php print $yyPPSlip?></option><option value="2"><?php print $yyEdOrd?></option>
    3427. 

  3427. 				</select>
    3428. 

  3428. &nbsp;&nbsp;&nbsp;
    3429. 

  3429. <?php if(@$orderstatusemail != ""){ ?>
    3430. 

  3430. <input type="checkbox" name="emailstat" value="1" <?php if(@$_POST["emailstat"]=="1" || @$alwaysemailstatus==TRUE) print "checked"?>/> 
    3431. 

  3431. <?php print $yyEStat?><?php } ?></td>
    3432. 

  3432. 				<td align="left"><div align="right"><strong>Total:</strong></div></td>
    3433. 

  3433. 				<td align="center"><?php print FormatEuroCurrency($ordTot)?></td>
    3434. 

  3434. 				<td colspan="3" align="center"><input type="hidden" name="maxitems" value="<?php print $rowcounter?>" />
    3435. 

  3435. 			    <input type="submit" value="<?php print $yyUpdate?>" onclick="document.mainform.act.value='status';" />				  <input type="reset" value="<?php print $yyReset?>" /></td>
    3436. 

  3436. 				</tr>
    3437. 

  3437. 			  </form>
    3438. 

  3438. 			  <form method="post" action="/admin/dumporders.php" name="dumpform">
    3439. 

  3439. 			  <?php if(@$_POST["powersearch"]=="1"){ ?>
    3440. 

  3440. 			  <input type="hidden" name="powersearch" value="1" />
    3441. 

  3441. 			  <input type="hidden" name="fromdate" value="<?php print trim(@$_POST["fromdate"])?>" />
    3442. 

  3442. 			  <input type="hidden" name="todate" value="<?php print trim(@$_POST["todate"])?>" />
    3443. 

  3443. 			  <input type="hidden" name="ordid" value="<?php print trim(str_replace('"','',str_replace("'",'',@$_POST["ordid"])))?>" />
    3444. 

  3444. 			  <input type="hidden" name="origsearchtext" value="<?php print trim(str_replace('"','&quot;',@$_POST["searchtext"]))?>" />
    3445. 

  3445. 			  <input type="hidden" name="searchtext" value="<?php print trim(str_replace('"',"&quot;",@$_POST["searchtext"]))?>" />
    3446. 

  3446. 			  <input type="hidden" name="ordstatus[]" value="<?php print $ordstatus?>" />
    3447. 

  3447. 			  <input type="hidden" name="startwith" value="<?php if($usepowersearch) print "1"?>" />
    3448. 

  3448. 			  <input type="hidden" name="myfrogz" value="<?php print $_REQUEST['myfrogz']?>" />
    3449. 

  3449. 			  <input type="hidden" name="ship_type" value="<?php print $_REQUEST['ship_type']?>" />
    3450. 

  3450. 			  <?php } ?>
    3451. 

  3451. 			  <input type="hidden" name="sd" value="<?php print date($admindatestr, $sd)?>" />
    3452. 

  3452. 			  <input type="hidden" name="ed" value="<?php print date($admindatestr, $ed)?>" />
    3453. 

  3453. 			  <input type="hidden" name="details" value="false" />
    3454. 

  3454. 			  <tr> 
    3455. 

  3455.                 <td colspan="2" align="center"><?=$num_rows_order?> Orders</td>
    3456. 

  3456. 				<td colspan="2" align="center"><?=$num_auth_order?> Authorized Orders</td>
    3457. 

  3457. 				<td colspan="5" align="right"><input type="submit" value="<?php print $yyDmpOrd?>" onclick="document.dumpform.details.value='false';" />				  <input name="submit" type="submit" onclick="document.dumpform.details.value='true';" value="<?php print $yyDmpDet?>" /></td>
    3458. 

  3458. 				</tr>
    3459. 

  3459. 			  </form>
    3460. 

  3460. <?php
    3461. 

  3461. 	}else{
    3462. 

  3462. ?>
    3463. 

  3463. 			  <tr> 
    3464. 

  3464.                 <td width="100%" colspan="9" align="center">
    3465. 

  3465. 					<p><?php
    3466. 

  3466. 					if(@$_POST["powersearch"]=="1")
    3467. 

  3467. 						print $yyNoMat1;
    3468. 

  3468. 					elseif($sd==$ed)
    3469. 

  3469. 						print $yyNoMat2 . " " . date($admindatestr, $sd) . ".";
    3470. 

  3470. 					else
    3471. 

  3471. 						print $yyNoMat3 . " " . date($admindatestr, $sd) . " and " . date($admindatestr, $ed) . ".";
    3472. 

  3472. 					?></p>				</td>
    3473. 

  3473. 			  </tr>
    3474. 

  3474. 			  <?php if($hasdeleted){ ?>
    3475. 

  3475. 			  <tr> 
    3476. 

  3476. 			  <td colspan="8"><input type="submit" value="<?php print $yyPurDel?>" onclick="document.mainform.act.value='purge';" />			  </tr>
    3477. 

  3477. 			  <?php } ?>
    3478. 

  3478. 			  </form>
    3479. 

  3479. <?php
    3480. 

  3480. 	} ?>
    3481. 

  3481. 			  <tr> 
    3482. 

  3482.                 <td width="100%" colspan="8" align="center">
    3483. 

  3483. 				  <p><br />
    3484. 

  3484. 					<a href="/admin/orders.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd)-1,date("d",$sd),date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed)-1,date("d",$ed),date("Y",$ed)))?>"><strong>- <?php print $yyMonth?></strong></a> | 
    3485. 

  3485. 					<a href="/admin/orders.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)-7,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)-7,date("Y",$ed)))?>"><strong>- <?php print $yyWeek?></strong></a> | 
    3486. 

  3486. 					<a href="/admin/orders.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)-1,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)-1,date("Y",$ed)))?>"><strong>- <?php print $yyDay?></strong></a> | 
    3487. 

  3487. 					<a href="/admin/orders.php"><strong><?php print $yyToday?></strong></a> | 
    3488. 

  3488. 					<a href="/admin/orders.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)+1,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)+1,date("Y",$ed)))?>"><strong><?php print $yyDay?> +</strong></a> | 
    3489. 

  3489. 					<a href="/admin/orders.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd),date("d",$sd)+7,date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)+7,date("Y",$ed)))?>"><strong><?php print $yyWeek?> +</strong></a> | 
    3490. 

  3490. 					<a href="/admin/orders.php?sd=<?php print date($admindatestr,mktime(0,0,0,date("m",$sd)+1,date("d",$sd),date("Y",$sd)))?>&ed=<?php print date($admindatestr,mktime(0,0,0,date("m",$ed),date("d",$ed)+1,date("Y",$ed)))?>"><strong><?php print $yyMonth?> +</strong></a>				  </p>				</td>
    3491. 

  3491. 			  </tr>
    3492. 

  3492. 			</table>
    3493. 

  3493. 		  </td>
    3494. 

  3494. 		</tr>
    3495. 

  3495.       </table>
    3496. 

  3496. <?php
    3497. 

  3497. }
    3498. 

  3498. }
    3499. 

  3499. 

  3500. ?>
    3501. 

  3501. <script language="JavaScript" type="text/javascript">
    3502. 

  3502. function dorecalc(onlytotal){
    3503. 

  3503. var thetotal=0,totoptdiff=0;
    3504. 

  3504. for(var i in document.forms.editform){
    3505. 

  3505. if(i.substr(0,5)=="quant"){
    3506. 

  3506. 	theid = i.substr(5);
    3507. 

  3507. 	totopts=0;
    3508. 

  3508. 	delbutton = document.getElementById("del_"+theid);
    3509. 

  3509. 	if(delbutton==null)
    3510. 

  3510. 		isdeleted=false;
    3511. 

  3511. 	else
    3512. 

  3512. 		isdeleted=delbutton.checked;
    3513. 

  3513. 	if(! isdeleted){
    3514. 

  3514. 	for(var ii in document.forms.editform){
    3515. 

  3515. 		var opttext="optn"+theid+"_";
    3516. 

  3516. 		if(ii.substr(0,opttext.length)==opttext){
    3517. 

  3517. 			theitem = document.getElementById(ii);
    3518. 

  3518. 			if(document.getElementById('v'+ii)==null){
    3519. 

  3519. 				thevalue = theitem[theitem.selectedIndex].value;
    3520. 

  3520. 				if(thevalue.indexOf('|')>0){
    3521. 

  3521. 					totopts += parseFloat(thevalue.substr(thevalue.indexOf('|')+1));
    3522. 

  3522. 				}
    3523. 

  3523. 			}
    3524. 

  3524. 		}
    3525. 

  3525. 	}
    3526. 

  3526. 	thequant = parseInt(document.getElementById(i).value);
    3527. 

  3527. 	if(isNaN(thequant)) thequant=0;
    3528. 

  3528. 	theprice = parseFloat(document.getElementById("price"+theid).value);
    3529. 

  3529. 	if(isNaN(theprice)) theprice=0;
    3530. 

  3530. 	document.getElementById("optdiffspan"+theid).value=totopts;
    3531. 

  3531. 	optdiff = parseFloat(document.getElementById("optdiffspan"+theid).value);
    3532. 

  3532. 	if(isNaN(optdiff)) optdiff=0;
    3533. 

  3533. 	thetotal += thequant * (theprice + optdiff);
    3534. 

  3534. 	totoptdiff += thequant * optdiff;
    3535. 

  3535. 	}
    3536. 

  3536. }
    3537. 

  3537. }
    3538. 

  3538. document.getElementById("optdiffspan").innerHTML=totoptdiff.toFixed(2);
    3539. 

  3539. //document.getElementById("ordtotal").value = thetotal.toFixed(2);
    3540. 

  3540. document.getElementById("ordTot").innerHTML = thetotal.toFixed(2);
    3541. 

  3541. document.getElementById("ordtotal").value = thetotal.toFixed(2);
    3542. 

  3542. 

  3543. if(onlytotal==true) return;
    3544. 

  3544. <? if(!empty($prcTot)){?>
    3545. 

  3545. thetotal+=<?=$prcTot?>;
    3546. 

  3546. <? } ?>
    3547. 

  3547. statetaxrate = parseFloat(document.getElementById("staterate").value);
    3548. 

  3548. if(isNaN(statetaxrate)) statetaxrate=0;
    3549. 

  3549. countrytaxrate = parseFloat(document.getElementById("countryrate").value);
    3550. 

  3550. if(isNaN(countrytaxrate)) countrytaxrate=0;
    3551. 

  3551. discount = parseFloat(document.getElementById("ordDiscount").value);
    3552. 

  3552. if(isNaN(discount)){
    3553. 

  3553. 	discount=0;
    3554. 

  3554. 	document.getElementById("ordDiscount").value=0;
    3555. 

  3555. }
    3556. 

  3556. statetaxtotal = (statetaxrate * (thetotal-discount)) / 100.0;
    3557. 

  3557. countrytaxtotal = (countrytaxrate * (thetotal-discount)) / 100.0;
    3558. 

  3558. shipping = parseFloat(document.getElementById("ordShipping").value);
    3559. 

  3559. if(isNaN(shipping)){
    3560. 

  3560. 	//shipping=0;
    3561. 

  3561. 	//document.getElementById("ordShipping").value=0;
    3562. 

  3562. }
    3563. 

  3563. handling = parseFloat(document.getElementById("ordHandling").value);
    3564. 

  3564. if(isNaN(handling)){
    3565. 

  3565. 	handling=0;
    3566. 

  3566. 	document.getElementById("ordHandling").value=0;
    3567. 

  3567. }
    3568. 

  3568. <?php	if(@$taxShipping==2){ ?>
    3569. 

  3569. statetaxtotal += (statetaxrate * shipping) / 100.0;
    3570. 

  3570. countrytaxtotal += (countrytaxrate * shipping) / 100.0;
    3571. 

  3571. <?php	}
    3572. 

  3572. 		if(@$taxHandling==2){ ?>
    3573. 

  3573. statetaxtotal += (statetaxrate * handling) / 100.0;
    3574. 

  3574. countrytaxtotal += (countrytaxrate * handling) / 100.0;
    3575. 

  3575. <?php	} ?>
    3576. 

  3576. document.getElementById("ordStateTax").value = statetaxtotal.toFixed(2);
    3577. 

  3577. document.getElementById("ordCountryTax").value = countrytaxtotal.toFixed(2);
    3578. 

  3578. hstobj = document.getElementById("ordHSTTax");
    3579. 

  3579. hsttax=0;
    3580. 

  3580. if(! (hstobj==null)){
    3581. 

  3581. 	hsttax = parseFloat(hstobj.value);
    3582. 

  3582. }
    3583. 

  3583. grandtotal = (thetotal + shipping + handling + statetaxtotal + countrytaxtotal + hsttax) - discount;
    3584. 

  3584. document.getElementById("grandtotalspan").innerHTML = grandtotal.toFixed(2);
    3585. 

  3585. }
    3586. 

  3586. function ajaxcallback() {
    3587. 

  3587. 	if(ajaxobj.readyState==4){
    3588. 

  3588. 		document.getElementById("googleupdatespan").innerHTML = ajaxobj.responseText;
    3589. 

  3589. 	}
    3590. 

  3590. }
    3591. 

  3591. function updategoogleorder(theact,ordid){
    3592. 

  3592. 	if(confirm('Inform Google of change to order id ' + ordid + "?")){
    3593. 

  3593. 		document.getElementById("googleupdatespan").innerHTML = '';
    3594. 

  3594. 		if(window.XMLHttpRequest){
    3595. 

  3595. 			ajaxobj = new XMLHttpRequest();
    3596. 

  3596. 		}else{
    3597. 

  3597. 			ajaxobj = new ActiveXObject("MSXML2.XMLHTTP");
    3598. 

  3598. 		}
    3599. 

  3599. 		ajaxobj.onreadystatechange = ajaxcallback;
    3600. 

  3600. 		extraparams='';
    3601. 

  3601. 		if(theact=='ship'){
    3602. 

  3602. 			shipcar = document.getElementById("shipcarrier");
    3603. 

  3603. 			if(shipcar!= null){
    3604. 

  3604. 				trackno=document.getElementById("ordTrackNum").value
    3605. 

  3605. 				if(trackno!='' && confirm('Include tracking and carrier info?')){
    3606. 

  3606. 					extraparams='&carrier='+(shipcar.options[shipcar.selectedIndex].value)+'&trackno='+document.getElementById("ordTrackNum").value;
    3607. 

  3607. 				}
    3608. 

  3608. 			}
    3609. 

  3609. 		}
    3610. 

  3610. 		document.getElementById("googleupdatespan").innerHTML = 'Connecting...';
    3611. 

  3611. 		ajaxobj.open("GET", "/admin/ajaxservice.php?gid="+ordid+"&act="+theact+extraparams, true);
    3612. 

  3612. 		ajaxobj.send(null);
    3613. 

  3613. 	}
    3614. 

  3614. }
    3615. 

  3615. function updategooglestatus(theact,ordid){
    3616. 

  3616. 	if(confirm('Update Google account status and inform customer of this status change?')){
    3617. 

  3617. 		document.getElementById("googleupdatespan").innerHTML = '';
    3618. 

  3618. 		if(window.XMLHttpRequest){
    3619. 

  3619. 			ajaxobj = new XMLHttpRequest();
    3620. 

  3620. 		}else{
    3621. 

  3621. 			ajaxobj = new ActiveXObject("MSXML2.XMLHTTP");
    3622. 

  3622. 		}
    3623. 

  3623. 		ajaxobj.onreadystatechange = ajaxcallback;
    3624. 

  3624. 		themessage="googlemessage=" + encodeURI(document.getElementById("ordStatusInfo").value);
    3625. 

  3625. 		document.getElementById("googleupdatespan").innerHTML = 'Connecting...';
    3626. 

  3626. 		ajaxobj.open("POST", "/admin/ajaxservice.php?gid="+ordid+"&act="+theact, true);
    3627. 

  3627. 		ajaxobj.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
    3628. 

  3628. 		ajaxobj.setRequestHeader('Content-Length', themessage.length);
    3629. 

  3629. 		ajaxobj.send(themessage);
    3630. 

  3630. 	}
    3631. 

  3631. }
    3632. 

  3632. </script>
    3633. 

  3633.