<?
/**********************************************************************/
require "curr.php3";
require "$AP/htdocs/stores/cart/common.inc";
require "$CART/session.inc";
require "$CART/order.inc";
require "$CART/cc.inc";

function fault($kind)
{
	global	$store,$head_ft,$errfound;

	if ($head_ft != "N")
	{
		standard($store,"Order Details Page");
	}
	$errfound = "Y";
	echo "<CENTER><B><FONT COLOR=RED>$kind</FONT></B></CENTER>";
	$head_ft = "N";
}
if (ereg("cart.cust",$SCRIPT_FILENAME))
	$localpage='Y';
get_session($sesscook);
if (empty($store))
	$store = test_id('N');
if (test_order() == FALSE)
{
	standard($store,"");
	echo "<H3>Your cart is empty.</H3>";
	display_return();
	echo "If you cannot order then please email us</H3>";
	foot($store);
	$bad = 'Y';
}

if ($bad == 'Y')  return;			# omit all the code to the end

$MP = "/usr/sbin/sendmail -t";
$js=0;
$grand = 0.0;
if (ereg("(ozilla.[23456789]|MSIE.[3456789])",$HTTP_USER_AGENT))
{
	$js=1;
	if (ereg("AOL",$HTTP_USER_AGENT))
	{
		$js=0;
	}
}
switch($action)
{
case "verify":
	$errfound = "N";
	if ($onum == 0)
	{
		standard($store,'');
		echo "<H3>Your cart is empty.</H3>";
		display_return();
		$finish = "Y";
		break;
	}
	if(!$client)
	{
		fault("You did not enter your Name");
	}
	if(!$adda)
	{
		fault("You did not enter your Address");
	}
	if(!$city)
	{
		fault("You did not enter your City");
	}
	if (!$state)
	{
		fault("You did not enter your State");
	}
	if (!$postal)
	{
		fault("You did not enter your Postal Code");
	}
	if (!$email)
	{	
		fault("You did not enter your Email address");
	}
	else
	{
		if (! ereg("^[^@ ]+@([a-zA-Z0-9\-]+\.)+([a-zA-Z0-9\-]{2}|net|com|gov|mil|org|edu|int)$",$email))
		{
			fault("Badly formed Email address");
		}
	}
	if (isset($clid) && $clid != "")
	{
		$res= db_query("select id from customers where id = '$clid'");
		$ct = db_numrows($res);
		if ($ct > 0)
		{
			fault("The reference selected already exists -select another");
		}
		if (strlen($pass1) < 4)
		{
			fault("Passwords to be at least 4 characters");
		}
		if ($pass1 != $pass2)
		{
			fault("Passwords did not match");
		}
	}
	if ($ordmeth == "S")
	{
		include "$CART/cardver.inc";
	}
	if ($errfound == "N")
	{
		$res = @ms_query("select name from countries where id = '$ctry'");
		$ct_name = @db_result($res,0,"name");
		$res = db_query("select * from sohead where id = '$onum'");
		$oval = db_result($res,0,"oval");
		$tax = db_result($res,0,"tax");
		$post = db_result($res,0,"post");
		$query = "update sohead set";
		$query .= " cust='$clid'";
		$query .= ",name='$client'";
		$query .= ",adda='$adda'";
		$query .= ",addb='$addb'";
		$query .= ",addc='$city'";
		$query .= ",addd='$state'";
		$query .= ",zipc='$postal'";
		$query .= ",email='$email'";
		$query .= ",tel='$tel'";
		$query .= ",fax='$fax'";
		$query .= ",cred='$CardNumber'";
		$query .= ",cexm='$ExpMon'";
		$query .= ",cexy='$ExpYear'";
		$query .= ",ctyp='$CardType'";
		$query .= ",issue='$issue'";
		$query .= ",comm='$body'";
		$query .= ",stat='$ordmeth'";
		$query .= ",odat=now()";
		$query .= ",otim=now()";
		$query .= ",url='$REMOTE_ADDR'";
		$query .= " where id = $onum";
		db_query($query);

		if ($ordmeth == "P")
		{
					#  NB. echo is used as opposed to fopen because we have 
					#     already shown the page head in viewcart.htm types
			echo "</P><BR><PRE>";
			echo "<BR>";
			echo "Your name is    : $client<BR>";
			echo "Address         : $adda<BR>";
			echo "                : $addb<BR>";
			echo "                : $city<BR>";
			echo "                : $state<BR>";
			echo "                : $ct_name<BR>";
			echo "                : $postal<BR>";
			echo "EC Vat Code     : $ecvat<BR>";
			echo "Telephone       : $tel<BR>";
			echo "Fax             : $fax<BR>";
			echo "Order Number    : $onum<BR>";
			echo "Email at        : $email<BR>";
			echo "Quoted Price    : $oval<BR>";
			if (strtolower($ctry) == 'uk')
				echo "Shipping        : $post<BR>";
			else
				echo "Shipping        : to be quoted by email<BR>";
			echo "Tax             : $tax<BR>";
			echo "Supply the following items<BR>";
			echo "--------------------------<BR>";
		}
		if ($ordmeth == "S")
		{
			if ($CardType == "Other")
			{
				$CardType = $cname;
			}
		}
		$cres = ms_query("select email from client where id = '$store'");
		$cl_email = @db_result($cres,0,"email");
		if (!empty($cl_email))
			$mailman = $cl_email;
		if ($ordmeth != "P")
		{
		   	$fd = popen($MP,"w");
			fputs($fd, "To: $mailman\n");
			fputs($fd, "From: $email\n");
			fputs($fd, "Subject: Sales Order $onum-$store- $client at $email\n");
			fputs($fd, "Reply-to: $email\n");
			$ver = phpversion();
			fputs($fd, "X-Mailer: PHP/FI $ver\n\n");
			fputs($fd, "Order Number         : $onum\n");
			fputs($fd, "Email at             : $email\n");
			list($enam,$base) = split("@",$email,2);
			
			fputs($fd, "Login Id             : $bulluser\n");
			fputs($fd, "User name is         : $client\n");
			fputs($fd, "Address              : $adda\n");
			fputs($fd, "                     : $addb\n");
			fputs($fd, "                     : $city\n");
			fputs($fd, "                     : $state\n");
			fputs($fd, "                     : $ct_name\n");
			fputs($fd, "                     : $postal\n");
			fputs($fd, "EC Vat Code          : $ecvat\n");
			fputs($fd, "Telephone            : $tel\n");
			fputs($fd, "Fax                  : $fax\n");
			fputs($fd, "Quoted Price         : $oval\n");
			fputs($fd, "Shipping             : $post\n");
			fputs($fd, "Tax                  : $tax\n");
			$tot = $oval + $tax + $post;
			fputs($fd, "Quoted Total         : $tot\n");
			if ($ordmeth == "S")
			{
				if ($CardType == "Other")
				{
					$CardType = $cname;
				}
				fputs($fd, "Card                 : $CardType     $ExpMon/$ExpYear\n");
				fputs($fd, "Card                 : $CardNumber\n");
				fputs($fd, "Issue                : $issue\n");
				fputs($fd, "------------------------------------------\n");
			}
			if ($ordmeth == "T")
			{
				fputs($fd, "CALL CLIENT FOR CARD DETAILS\n");
			}
		}
		$res = db_query("select * from soline where onum = '$onum' order by id");
		$ct = db_numrows($res);
		for ($j = 0; $j < $ct; $j++)
		{
			$prod = mysql_result($res,$j,"prod");
			$price = mysql_result($res,$j,"price");
			$sdesc = mysql_result($res,$j,"sdesc");
			$qty = mysql_result($res,$j,"qty");
			$mail_bod .= "\nItem: $prod -Quantity $qty at  $price  $sdesc";
			if ($ordmeth != "P")
			{
	    		fputs($fd, "$onum -Item: $prod -Quantity $qty at  $price  $sdesc\n");
			}
			else
	    		echo "$onum -Item: $prod -Quantity $qty at  $price -$sdesc<BR>";
		}
		if ($ordmeth != "P")
		{
			if (!empty($body))
			{
				fputs($fd, "-----Other Comments ---\n");
				fputs($fd, $body);
			}
			fputs($fd, "-----------End of Order $onum -------\n");
        		pclose($fd);
		}
		if ($ordmeth == "P")
		{
			if (!empty($body))
			{
				echo "-----Other Comments ---<BR>";
				echo nl2br($body);
			}
			echo "----End of Order $onum -----<BR><BR>";
			echo "Sign Here       -->.";
			echo "</PRE>";
			upd_session("onum",0);
			display_return();
			exit();
		}
    	$fd = popen($MP,"w");
    	fputs($fd, "To: $email\n");
    	fputs($fd, "From: $mailman\n");
    	fputs($fd, "Subject: Order Confirmation\n");
		fputs($fd, "Reply-to: $mailman\n");
		$ver = phpversion();
		fputs($fd, "X-Mailer: PHP/FI $ver\n\n");
		fputs($fd, "Order Number         : $onum\n");
		fputs($fd, "Your order has been received\n");
		fputs($fd, "$mail_bod\n");
		fputs($fd, "Quoted Price         : $oval\n");
		fputs($fd, "Shipping             : $post\n");
		fputs($fd, "Tax                  : $tax\n");
		$tot = $oval + $tax + $post;
		fputs($fd, "Quoted Total         : $tot\n");
        	pclose($fd);

		standard($store,"Order Details Page");
			
		echo "<CENTER>";
		echo "<BR><H3>Your Order has been sent for processing</H3>";
		echo "<BR><H3>Order Number is $onum</H3>";
		display_return();
		echo "</CENTER>";

		upd_session("onum",0);
		$dot = substr($email,-3,1);
		$cid = strtoupper(substr($email,-2,2));
			/* ignore all .com etc */
		if (($dot == '.') && ($cid != $ctry))
		{
			$res = @ms_query("select zone,name from countries where id = '$ctry'");
			$ct_name = @db_result($res,0,"name");
			echo "<P><B>Your quoted charge was based on pricing for $ct_name";
			echo "<P><B>Your actual charge may be different if you live in a different country";
		}
		$finish = "Y";
		break;
	}
	break;
default:
	$oldc = $ctry;
	standard($store,"Order Details Page");
	break;
}
?>
<?
/*    this is excluded at the moment as form.field.value does
		not appear to be set on select type statements thus
		ExpMon,ExpYear,ctry,bycard are not set. This may be
		design or netscape fault 
*/
include "$CART/java.inc";
?>
<script language="javascript">
<!-- HIDE SCRIPT

function CheckForm(form)
{
  if (form.client.value.length < 1)
  {
     alert("No name");
     return false;
  }
  if (form.adda.value.length < 2)
  {
     alert("No Address");
     return false;
  }
  if (form.state.value.length < 1)
  {
     alert("No State");
     return false;
  }
  if (form.email.value.length < 1)
  {
     alert("No email");
     return false;
  }
  if (form.city.value.length < 1)
  {
     alert("No City");
     return false;
  }
  if (form.postal.value.length < 1)
  {
     alert("No Post Code");
     return false;
  }
  return true;
}
// END SCRIPT HIDE -->
</script>
<?			# omit rest of code if finish set - ret. to payment.htm
	if ($finish == 'Y') return;
	echo "<H3>Enter Fields Below to Complete the Order</H3>";
	disp_oval($onum);
	echo "<P>To view pricing in another currency return use your back button ";
# It would be nice to make a different action for post to allow a neat print out
# However this picks up a dodgy background if not verified ok
?>
<FORM METHOD=POST ACTION=<?echo $PHP_SELF?>?action=verify OnSubmit='return CheckForm(this)' >
<INPUT TYPE=HIDDEN NAME=sesscook VALUE=<?echo $sesscook?>>
<INPUT TYPE=HIDDEN NAME=store VALUE=<?echo $store?>>
<INPUT TYPE=HIDDEN NAME=ordmeth VALUE=<?echo $ordmeth?>>
<H3 ALIGN="CENTER"><FONT COLOR="#0000FF">Items marked (*) must be entered</FONT></H3>
<CENTER>
<TABLE BORDER=1 CELLSPACING=1 CELLPADDING=2 <?echo $tb_props?>>
<?  include "$CART/custent.inc"; ?>
</TABLE>
<HR>
<?
	if ($ordmeth == "S")
	{
		include "$CART/cardent.inc";
		echo "<HR>";
	}
?>
<TABLE BORDER=1 CELLSPACING=1 CELLPADDING=2 <?echo $tb_props?>>
<TR><TD>Other requests</TD><TD><textarea name="body" rows=4 cols=50>echo $body?></textarea></TD></TR>
</TABLE>
<HR>
<?
	disp_oval($onum);
	echo "<P>To view pricing in another currency return use your back button ";
?>
<H3><input type=submit value="Submit Details" name=Submit></H3>
</FORM>
</CENTER>
<?
	foot($store);
?>
