<?
$area = "onlinestore";
include("../includes/header.php");

$action = mysqlquerycleaner($_REQUEST["action"]);
$itemID = mysqlquerycleaner($_REQUEST["itemID"]);
$orderID = mysqlquerycleaner($_REQUEST["orderID"]);
$orderitemID = mysqlquerycleaner($_REQUEST["orderitemID"]);
$cookieID = mysqlquerycleaner($_COOKIE["cookieID"]);

//************************************************************************
// CustomerID
// Check to see if there is an existing customer. If not - start a new entry with the cookieID
//************************************************************************
$sql = "SELECT ID FROM orders_customer WHERE cookieID = '$cookieID'";
$customer = mysql_query($sql);
if(mysql_num_rows($customer) > 0) {
  $row = mysql_fetch_array($customer);
  $customerID = $row["ID"];
}
else {
  // I only want to add a new customer if they actually have added an item
  if($action == "Add Item") {
    $sql = "INSERT INTO orders_customer (cookieID) VALUES ('$cookieID')";
    mysql_query($sql);
    $customerID = mysql_insert_id($link);
	}
	else {
	  $customerID = 0;
	}
}
mysql_free_result($customer);

//************************************************************************
// OrderID
// Check to see if there is an existing order. If not - start a new order with the customerID
//************************************************************************
$sql = "SELECT ID FROM orders_data WHERE customerID = '$customerID' AND completed is NULL";
$order = mysql_query($sql);
if(mysql_num_rows($order) > 0) {
  $row = mysql_fetch_array($order);
  $orderID = $row["ID"];
}
else {
  // I only want to start a new order if they actually have added an item
  if($action == "Add Item") {
    $sql = "INSERT INTO orders_data (customerID) VALUES ('$customerID')";
    mysql_query($sql);
    $orderID = mysql_insert_id($link);
  }
}
mysql_free_result($order);

//************************************************************************
// ADD ITEMS TO ORDER
//************************************************************************
if($action == "Add Item") {
	$num_prices = mysqlquerycleaner($_REQUEST["num_prices"]);
	$title = mysqlquerycleaner($_REQUEST["title"]);
	
	// Insert the item data into the order items table
	for($i=1;$i<=$num_prices;$i++) {
	  $optionID = mysqlquerycleaner($_REQUEST["optionID_".$i]);
	  $text = mysqlquerycleaner($_REQUEST["text_".$i]);
  	$qty = mysqlquerycleaner($_REQUEST["qty_".$i]);
  	$price = mysqlquerycleaner($_REQUEST["price_".$i]);
  	$uom = mysqlquerycleaner($_REQUEST["uom_".$i]);
  	$weight = mysqlquerycleaner($_REQUEST["weight_".$i]);

		if($qty != "") {
	    // See if there is an existing price option in the cart already - if so update the new quantity
		  $sql = "SELECT ID, qty FROM orders_items WHERE customerID = '$customerID' AND orderID = '$orderID' AND itemID = '$itemID' AND optionID = '$optionID'";
			$existing = mysql_query($sql);
			if(mysql_num_rows($existing) > 0) {
			  $row = mysql_fetch_array($existing);
				$existingID = $row["ID"];
				$newqty = $row["qty"] + $qty;				
				$sql = "UPDATE orders_items SET qty = '$newqty' WHERE ID = '$existingID'";
				mysql_query($sql);
			}
			else {
			  $sql = "INSERT INTO orders_items (customerID, orderID, itemID, optionID, title, text, qty, price, uom, weight) VALUES ('$customerID', '$orderID', '$itemID', '$optionID', '$title', '$text', '$qty', '$price', '$uom', '$weight')";
	      mysql_query($sql);
			}
			mysql_free_result($existing);
		}
	}
}
//************************************************************************
// UPDATE ITEMS IN ORDER
//************************************************************************
elseif($action == "Update") {
  $qty = mysqlquerycleaner($_REQUEST["qty"]);
  $sql = "UPDATE orders_items SET qty = '$qty' WHERE ID = '$orderitemID'";
	mysql_query($sql);
}
elseif($action == "Delete") {
  $sql = "DELETE FROM orders_items WHERE ID = '$orderitemID'";
	mysql_query($sql);
}
elseif($action == "DeleteOrder") {
  $sql = "DELETE FROM orders_items WHERE orderID = '$orderID'";
	mysql_query($sql);
  
	$sql = "UPDATE orders_data SET price = NULL, weight = NULL WHERE ID = '$orderID'";
	mysql_query($sql);
}
?>
 <table cellspacing="0" cellpadding="0" border="0">
   <tr><td><img src="/images/header/onlinestore.jpg" width="634" height="161"/></td></tr>
   <tr>
    <td id="inner">
  	  <table cellspacing="0" cellpadding="0" border="0" width="600">
  		  <tr>
  			  <td valign="top">
  					<h1>ONLINE STORE</h1>
						<div>
						<a href="index.php">Back to Online Store</a>
						</div>
					</td>
				</tr>
				<tr><td><div class="dotted"><img src="/images/spacer.gif" height="5" border="0"></div></td></tr>
				<tr>
  			  <td>
  				  <div>
  					  <a href="shipping.php"><img src="/images/shipping.gif" border="0"></a>
  					  <a href="cart.php"><img src="/images/view.gif" border="0"></a>
  					  <a href="checkout.php"><img src="/images/checkout.gif" border="0"></a>
  					  <a href="cart.php?action=DeleteOrder" onclick="return window.confirm('Are you sure you wish to delete this order?');"><img src="/images/delete.gif" border="0"></a>
  					</div>
  				</td>
			  </tr>
				<tr><td><h2>Your Current Order</h2></td></tr>
				<tr><td><div class="dotted"><img src="/images/spacer.gif" height="5" border="0"></div></td></tr>
				<tr>
  			  <td>
	  			  <div id="shop">
						<table width="600" id="detail" cellspacing="1" cellpadding="2" border="0">
  				  	<?
							if($orderID == "") {
							?>
							<tr><td class="header" colspan="6">Current Order</td></tr>
  						<tr><td class="row1">You have no items in your shopping cart.</td></tr>
							<?
  						}
  						else {
								// Get current order items
    						$sql = "SELECT * FROM orders_items WHERE customerID = '$customerID' AND orderID = '$orderID'";
    						$items = mysql_query($sql);
								
								if(mysql_num_rows($items) == 0) {
							  ?>
							<tr><td class="header" colspan="6">Current Order</td></tr>
  						<tr><td class="row1">You have no items in your shopping cart.</td></tr>
							  <?
								  mysql_query("UPDATE orders_data SET subtotal = 0, weight = 0 WHERE ID = '$orderID'");
									
								}
								else {
  						  ?>
  						<tr><td class="header" colspan="6">Current Order</td></tr>
							<tr>
							  <td class="subheader">Item</td>
								<td class="subheader">Price</td>
								<td class="subheader" align="center">Qty.</td>
								<td class="subheader">Subtotal</td>
								<td class="subheader" align="center" colspan="2">Modify</td>
							</tr>
  							<?
  							while($row = mysql_fetch_array($items)) {
								  if($class == "row2"){$class="row1";}else{$class="row2";}
  						  ?>
							<form name="item<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>173</b><br />
" method="post" action="cart.php">
							<tr>
							  <td class="<br />
<b>Notice</b>:  Undefined variable: class in <b>/var/www/store/cart.php</b> on line <b>175</b><br />
"><a href="detail.php?itemID=<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>175</b><br />
"><br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>175</b><br />
<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>175</b><br />
: </a></td>
								<td class="<br />
<b>Notice</b>:  Undefined variable: class in <b>/var/www/store/cart.php</b> on line <b>176</b><br />
">$<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>176</b><br />
<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>176</b><br />
0.00 </td>
								<td class="<br />
<b>Notice</b>:  Undefined variable: class in <b>/var/www/store/cart.php</b> on line <b>177</b><br />
" align="center">
								  <input type="hidden" name="orderitemID" value="<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>178</b><br />
">
								  <input type="hidden" name="action" value="Update">
									<input type="text" name="qty" value="<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>180</b><br />
" class="qty">
								</td>
								<td class="<br />
<b>Notice</b>:  Undefined variable: class in <b>/var/www/store/cart.php</b> on line <b>182</b><br />
">$<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>182</b><br />
<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>182</b><br />
0.00</td>
								<td class="<br />
<b>Notice</b>:  Undefined variable: class in <b>/var/www/store/cart.php</b> on line <b>183</b><br />
" align="center" width="30"><a href="javascript:document.item<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>183</b><br />
.submit();">Update</a></td>
							  <td class="<br />
<b>Notice</b>:  Undefined variable: class in <b>/var/www/store/cart.php</b> on line <b>184</b><br />
" align="center" width="30"><a href="cart.php?action=Delete&orderitemID=<br />
<b>Notice</b>:  Undefined variable: row in <b>/var/www/store/cart.php</b> on line <b>184</b><br />
" OnClick="return window.confirm('Are you sure you want to delete this item from your order?');">Delete</a></td>
							</tr>
							</form>
  						  <?
								  $subtotal = $subtotal + ($row["price"] * $row["qty"]);
								  $totalweight = $totalweight + ($row["weight"] * $row["qty"]);
								}
								?>
							<tr>
							  <td class="total" colspan="3" align="right">Subtotal:&nbsp;</td>
							  <td class="total" colspan="3">$<br />
<b>Notice</b>:  Undefined variable: subtotal in <b>/var/www/store/cart.php</b> on line <b>194</b><br />
0.00</td>
							</tr>
							<tr>
							  <td colspan="6" align="right"><a href="https://firststopgun.com/store/checkout.php"><img src="/images/continue.gif" border="0"></a></td>
							</tr>
								<?
  						  mysql_free_result($items);
								// Update the order subtotals and weights
							  mysql_query("UPDATE orders_data SET subtotal = '$subtotal', weight = '$totalweight' WHERE ID = '$orderID'");
							}  						
							}
							?>
						</table>
					  </div>
					</td>
				</tr>
				<tr><td align="right"><br />
<b>Notice</b>:  Undefined variable: thawtecert in <b>/var/www/store/cart.php</b> on line <b>210</b><br />
</td></tr>
			</table>
		</td>
	</tr>
	<tr><td><?include("../includes/address.php");?></td></tr>
</table>
<?
include("../includes/footer.php");
?>