";
$bgclr =false;
session_start();
if ($_GET["ptid"]) {$partner_id = $_GET["ptid"];}
elseif($_POST["ptid"]){$partner_id = $_POST["ptid"];}
else {$partner_id = 100;}
if ($_GET["begin"]) {
$sql = "delete from oitem where i_o_id = $new_orderid";
$res = mysql_query($sql);
$sql ="delete from orders where o_id = $new_orderid";
$res = mysql_query($sql);
$new_orderid = "";
session_destroy();
session_start();
}
if ($showmelinks){
echo "select concat('http://www.sitesalive.com/secure/seltype.htm?u_type=',l.l_type,'&ptid=',l.l_pt_id,'&lic_type=',l.l_id,'&buy=true') as link, concat('--> ',p.p_name, ', ',l.l_name, ' $', l.l_price) as product from license l, products p where l.l_p_id = p.p_id ;";
//http://www.sitesalive.com/secure/seltype.htm?u_type=2&ptid=100&lic_type=5071&buy=true
}
if ($buy) {
if (is_numeric($_GET['u_type']) && is_numeric($_GET['lic_type']) && is_numeric($partner_id)) { //url OK
//make sure we start clean
if (session_is_registered("logged_in")){
session_unregister("logged_in");
session_unregister("ses_user");
}
if (session_is_registered("new_orderid")){
session_unregister("new_orderid");
}
$i_order = "insert into orders (o_sess,o_uid,o_date,o_status,o_tid,o_pt_id,o_total) values";
$i_order .= "('" . session_id() . "',0,now(),100,'000000000000',$partner_id,0.00)";
$r_order = mysql_query($i_order);
$new_orderid = mysql_insert_id(); //new order number here.
session_register("new_orderid");
$query = "insert into oitem (i_o_id,i_qty,i_sdate,i_edate,i_ucost,i_subtot,i_l_id,i_code)";
$query .= " values ($new_orderid,1,now(),now(),0.00,0.00,{$_GET['lic_type']},'')";
$result = mysql_query($query);
$upd_query = "select o.o_id, i.i_qty, l.l_price, l.l_code, concat(p.p_name, ', ',l.l_name) as product, i.i_id, l.l_edate,l.l_sdate,l.l_days,l.l_min from products p, license l , orders o, oitem i where p.p_id=l.l_p_id and o.o_id = $new_orderid and l.l_id = i.i_l_id and i.i_o_id = o.o_id and o.o_sess ='" . session_id()."'";
$upd_result = mysql_query($upd_query);
$upd_row = mysql_fetch_array($upd_result, MYSQL_NUM);
if ($upd_row[8] == 0) {
$upd_order = "update oitem set i_ucost =$upd_row[2], i_subtot =" .($upd_row[1] * $upd_row[2]) .", i_code='$upd_row[3]', i_edate ='$upd_row[6] 23:59:59' , i_sdate ='$upd_row[7] 00:00:01', i_qty = $upd_row[9] where i_id = $upd_row[5] ";
} else {
$upd_order = "update oitem set i_ucost =$upd_row[2], i_subtot =" .($upd_row[1] * $upd_row[2]) .", i_code='$upd_row[3]', i_edate = date_add(now(), INTERVAL $upd_row[8] DAY) , i_sdate = now(), i_qty = $upd_row[9] where i_id = $upd_row[5] ";
}
$upd_oresult = mysql_query($upd_order);
$o_total = $upd_row[9] * $upd_row[2];
$upd_order = "update orders set o_total = $o_total where o_id = $new_orderid";
//echo $upd_order;
//die;
$upd_oresult = mysql_query($upd_order);
$ses_user = array("uid" => "", "uname" => "", "utype" => $_GET['u_type'] , "fname" => "","lname" => "", "code" => "", "end" => "", "amt" => $o_total);
session_register("ses_user");
$tmp_pass = substr(session_id(),12);
$i_usr = "insert into users (active, utype, uname, upass) values(0,{$_GET['u_type']},NULL,'$tmp_pass')";
$result = mysql_query($i_usr);
$ses_user["uid"] = mysql_insert_id();
$ses_user["uname"] = "sa" . $ses_user["uid"];
session_register("ses_user");
$u_usr = "update users set uname = '{$ses_user["uname"]}' where id = {$ses_user["uid"]}";
$u_result = mysql_query($u_usr);
$q_add_user = "insert into userinfo (u_uid) values ({$ses_user['uid']})";
$r_add_user = mysql_query($q_add_user);
$u_order_user = "update orders set o_uid={$ses_user["uid"]} where o_id = $new_orderid";
$r_order_user = mysql_query($u_order_user);
$u_type = $ses_user["utype"];
if ($u_type == 2 || $u_type == 3 || $u_type == 6){
mysql_close($conn);
header("Location: " .$sslurl . "/secure/buynow.htm");
//header("Location: /secure/buynow.htm");
exit();
}
if ($u_type == 5){
//$update=true;
//mysql_close($conn);
//header("Location: /secure/buynow.htm");
//exit();
//echo "here";
//die;
$bk_btn = "";
$prod_desc = "
Students
Product
Price
\n";
$bgclr= true;
$u_msg = "Please enter number of students and continue \n";
setbgclr();
$chk_box = "";
$qty_box = " ($upd_row[9] minimum)";
$qty_box .= "";
$prod_desc .= "
". $chk_box ."
\n";
$prod_desc .= "
". $qty_box ."
\n";
$prod_desc .= "
" . $upd_row[4] . "
$" . $upd_row[2] . " Per Student
\n";
$hid_flds .= "\n";
$hid_flds .= "\n";
$hid_flds .= "\n";
}
}else {
$u_msg = "There are no licenses for this product available at this time. \n";
} //end url OK
} //end buy now
if ($update || $u_type) {
if (!isset($u_type) || $u_type == ""){
$u_msg= "Please select a license type
\n";
$frm_errs = true;
$o_step = 0;
}
else
{
if (!$update) {
if ($u_type == 1){
$q_prod ="select l.l_id from license l, products p where p.p_disp = 1 and p.p_id = l.l_p_id and l.l_active=1 and l.l_edate < now() and l.l_pt_id = $partner_id and l.l_type = $u_type order by l.l_price desc";
$r_prod = mysql_query($q_prod);
if (mysql_num_rows($r_prod) >0 ){
$p_row = mysql_fetch_array($r_prod, MYSQL_NUM);
$licid = $p_row[0];
$o_step = 2;
}
else
{
$frm_errs = true;
$u_msg = "There are no licenses available at this time. \n";
}
}//utype 2 or 3
elseif ($u_type == 2 || $u_type == 3 || $u_type == 4 || $u_type == 5 || $u_type == 6 || $u_type == 10){
if ($buy){
$show_lic = true;
}else{
$o_step = 1;
}
}
else
{
$frm_errs = true;
$u_msg = "There are no licenses available at this time. \n";
}
}//not updated
} //utype not set.
if ($o_step == 1) {
//get products based on usertype and partner id
$sqlwhere = "p.p_disp = 1 and l.l_active=1 and p.p_id = l.l_p_id and l.l_pt_id = $partner_id and l.l_type = $u_type ";
if (isset($lic_type) && !$lic_type == ""){
$sqlwhere .= " and l.l_id = $lic_type ";
$other_btn = "";
}
$q_prod ="select l.l_id, concat(p.p_name, ' / ',l.l_name) as prod, l.l_price, l.l_min, l.l_days from products p, license l where $sqlwhere order by l.l_price desc, prod";
//echo $q_prod;
//die;
$r_prod = mysql_query($q_prod);
if (mysql_num_rows($r_prod) >0){ //make sure there are some
if ($u_type == 2 || $u_type == 3 || $u_type == 6){ // family,hsch,subscriber
$bk_btn = "";
$prod_desc = "
![](\"./images/other_prod.gif\")
![](\"./images/continue.gif\")
";
$bgclr =false;
session_start();
if ($_GET["ptid"]) {$partner_id = $_GET["ptid"];}
elseif($_POST["ptid"]){$partner_id = $_POST["ptid"];}
else {$partner_id = 100;}
if ($_GET["begin"]) {
$sql = "delete from oitem where i_o_id = $new_orderid";
$res = mysql_query($sql);
$sql ="delete from orders where o_id = $new_orderid";
$res = mysql_query($sql);
$new_orderid = "";
session_destroy();
session_start();
}
if ($showmelinks){
echo "select concat('http://www.sitesalive.com/secure/seltype.htm?u_type=',l.l_type,'&ptid=',l.l_pt_id,'&lic_type=',l.l_id,'&buy=true') as link, concat('--> ',p.p_name, ', ',l.l_name, ' $', l.l_price) as product from license l, products p where l.l_p_id = p.p_id ;";
//http://www.sitesalive.com/secure/seltype.htm?u_type=2&ptid=100&lic_type=5071&buy=true
}
if ($buy) {
if (is_numeric($_GET['u_type']) && is_numeric($_GET['lic_type']) && is_numeric($partner_id)) { //url OK
//make sure we start clean
if (session_is_registered("logged_in")){
session_unregister("logged_in");
session_unregister("ses_user");
}
if (session_is_registered("new_orderid")){
session_unregister("new_orderid");
}
$i_order = "insert into orders (o_sess,o_uid,o_date,o_status,o_tid,o_pt_id,o_total) values";
$i_order .= "('" . session_id() . "',0,now(),100,'000000000000',$partner_id,0.00)";
$r_order = mysql_query($i_order);
$new_orderid = mysql_insert_id(); //new order number here.
session_register("new_orderid");
$query = "insert into oitem (i_o_id,i_qty,i_sdate,i_edate,i_ucost,i_subtot,i_l_id,i_code)";
$query .= " values ($new_orderid,1,now(),now(),0.00,0.00,{$_GET['lic_type']},'')";
$result = mysql_query($query);
$upd_query = "select o.o_id, i.i_qty, l.l_price, l.l_code, concat(p.p_name, ', ',l.l_name) as product, i.i_id, l.l_edate,l.l_sdate,l.l_days,l.l_min from products p, license l , orders o, oitem i where p.p_id=l.l_p_id and o.o_id = $new_orderid and l.l_id = i.i_l_id and i.i_o_id = o.o_id and o.o_sess ='" . session_id()."'";
$upd_result = mysql_query($upd_query);
$upd_row = mysql_fetch_array($upd_result, MYSQL_NUM);
if ($upd_row[8] == 0) {
$upd_order = "update oitem set i_ucost =$upd_row[2], i_subtot =" .($upd_row[1] * $upd_row[2]) .", i_code='$upd_row[3]', i_edate ='$upd_row[6] 23:59:59' , i_sdate ='$upd_row[7] 00:00:01', i_qty = $upd_row[9] where i_id = $upd_row[5] ";
} else {
$upd_order = "update oitem set i_ucost =$upd_row[2], i_subtot =" .($upd_row[1] * $upd_row[2]) .", i_code='$upd_row[3]', i_edate = date_add(now(), INTERVAL $upd_row[8] DAY) , i_sdate = now(), i_qty = $upd_row[9] where i_id = $upd_row[5] ";
}
$upd_oresult = mysql_query($upd_order);
$o_total = $upd_row[9] * $upd_row[2];
$upd_order = "update orders set o_total = $o_total where o_id = $new_orderid";
//echo $upd_order;
//die;
$upd_oresult = mysql_query($upd_order);
$ses_user = array("uid" => "", "uname" => "", "utype" => $_GET['u_type'] , "fname" => "","lname" => "", "code" => "", "end" => "", "amt" => $o_total);
session_register("ses_user");
$tmp_pass = substr(session_id(),12);
$i_usr = "insert into users (active, utype, uname, upass) values(0,{$_GET['u_type']},NULL,'$tmp_pass')";
$result = mysql_query($i_usr);
$ses_user["uid"] = mysql_insert_id();
$ses_user["uname"] = "sa" . $ses_user["uid"];
session_register("ses_user");
$u_usr = "update users set uname = '{$ses_user["uname"]}' where id = {$ses_user["uid"]}";
$u_result = mysql_query($u_usr);
$q_add_user = "insert into userinfo (u_uid) values ({$ses_user['uid']})";
$r_add_user = mysql_query($q_add_user);
$u_order_user = "update orders set o_uid={$ses_user["uid"]} where o_id = $new_orderid";
$r_order_user = mysql_query($u_order_user);
$u_type = $ses_user["utype"];
if ($u_type == 2 || $u_type == 3 || $u_type == 6){
mysql_close($conn);
header("Location: " .$sslurl . "/secure/buynow.htm");
//header("Location: /secure/buynow.htm");
exit();
}
if ($u_type == 5){
//$update=true;
//mysql_close($conn);
//header("Location: /secure/buynow.htm");
//exit();
//echo "here";
//die;
$bk_btn = "";
$prod_desc = "![](\"./images/reset.gif\")
";
$prod_desc = "![](\"./images/back.gif\")
";
if (sizeof($licid) == 0) { //make sure something is checked
$u_msg = "No items selected, please start over![](\"./images/confirm.gif\")
";
}
else
{
//no line items, delete order
$del_query = "delete from orders where o_id = $new_orderid";
$r_del_query = mysql_query($del_query );
$u_msg = "No items selected, please start over